Re: [clamav-users] wiki.clamav.net unreachable

2010-12-08 Thread Luca Gibelli

Hello Kapp,

> Trace routes show it as unreachable today. Maintenance?

it was a temporary network problem. 

Best regards

-- 
Luca Gibelli (luca _at_ clamav.net)   ClamAV, a GPL anti-virus toolkit
[Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] [Clamav-users] Heuristics.Phishing.Email.SpoofedDomain FPs on Google Alerts mail

2010-12-08 Thread Kris Deugau
Someone just emailed me offlist to see if I found a solution - I haven't 
seen anything, although for the one customer who reported the problem I 
just whitelisted the Google Alerts email further upstream in the 
filtering process.


Any suggestions for a solution within ClamAV beyond disabling the 
heuristics rules (for those who can't whitelist these messages further 
upstream)?


-kgd

Kris Deugau wrote:
I'd whitelist the specific URLs in question, but they vary from message 
to message, since they're in the form:


http://www.google.com/url?sa=X&q=http://

(the full URL runs about 500 characters in total - so far as I 
understand the SpoofedDomain heuristic, it's only that first pair of 
site names that trigger it).


The visible URLs are essentially http://

Is there any way to whitelist all of these in daily.wdb?

-kgd
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml



___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[clamav-users] 0.96.5 compilation problem on Solaris 10

2010-12-08 Thread Armitage, Jon
I am trying to upgrade from 0.96.3 on a box running Solaris 10.

I used this configure command, which worked with 0.96.3, and has worked with 
0.96.5 on another Solaris 10 box:

./configure --with-user=exim --with-group=exim LDFLAGS=-L/usr/local/lib 
LIBS=-liconv

The make fails with the following error:

  CCLD   clamscan
../libclamav/.libs/libclamav.so: undefined reference to 
`pthread_key_cre...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to `dler...@sunw_1.22'
../libclamav/.libs/libclamav.so: undefined reference to `wr...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to 
`pthread_key_del...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to `pr...@sunw_1.2'
../libclamav/.libs/libclamav.so: undefined reference to 
`pthread_setspeci...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to `o...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to `dlo...@sunw_1.22'
../libclamav/.libs/libclamav.so: undefined reference to `cl...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to `r...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to 
`pthread_getspeci...@sunw_0.9'
../libclamav/.libs/libclamav.so: undefined reference to `dl...@sunw_1.22'
../libclamav/.libs/libclamav.so: undefined reference to `dlcl...@sunw_1.22'
../libclamav/.libs/libclamav.so: undefined reference to `pthread_o...@sunw_0.9'
collect2: ld returned 1 exit status
*** Error code 1
The following command caused the error:
echo "  CCLD  " clamscan;/bin/bash ../libtool --silent --tag=CC--mode=link 
gcc  -g -O2   -L/usr/local/lib -o clamscan output.o getopt.o  optparser.o 
actions.o misc.o  clamscan.o others.o manager.o  ../libclamav/libclamav.la 
-lpthread
make: Fatal error: Command failed for target `clamscan'
Current working directory /export/home/jon/clamav-0.96.5/clamscan

I have googled extensively, but the closest suggestion I can find is that 
libtool is linking the libraries in the wrong order.

Please does anyone have any suggestions?

Jon
Information in this email including any attachments may be privileged, 
confidential and is intended exclusively for the addressee. The views expressed 
may not be official policy, but the personal views of the originator. If you 
have received it in error, please notify the sender by return e-mail and delete 
it from your system. You should not reproduce, distribute, store, retransmit, 
use or disclose its contents to anyone. Please note we reserve the right to 
monitor all e-mail communication through our internal and external networks. 
SKY and the SKY marks are trade marks of British Sky Broadcasting Group plc and 
are used under licence. British Sky Broadcasting Limited (Registration No. 
2906991), Sky Interactive Limited (Registration No. 3554332), Sky-In-Home 
Service Limited (Registration No. 2067075) and Sky Subscribers Services Limited 
(Registration No. 2340150) are direct or indirect subsidiaries of British Sky 
Broadcasting Group plc (Registration No. 2247735). All of the co
 mpanies mentioned in this paragraph are incorporated in England and Wales and 
share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD.


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] 0.96.5 compilation problem on Solaris 10

2010-12-08 Thread Török Edwin
On Wed, 8 Dec 2010 15:43:23 +
"Armitage, Jon"  wrote:

> I am trying to upgrade from 0.96.3 on a box running Solaris 10.
> 
> I used this configure command, which worked with 0.96.3, and has
> worked with 0.96.5 on another Solaris 10 box:
> 
> ./configure --with-user=exim --with-group=exim
> LDFLAGS=-L/usr/local/lib LIBS=-liconv
> 
> The make fails with the following error:
> 
>   CCLD   clamscan
> ../libclamav/.libs/libclamav.so: undefined reference to
> `pthread_key_cre...@sunw_0.9' ../libclamav/.libs/libclamav.so:
> undefined reference to

Looks like you are using broken version of binutils:
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26014

What do these commands output, and is the output different between the
2 machines:
$ nm -D /lib/libc.so | grep pthread_key_create
$ nm -D /lib/libpthread.so | grep pthread_key_create
$ find . -name '*.la' -exec egrep dependency_libs=\|relink_command {} \;

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] 0.96.5 compilation problem on Solaris 10

2010-12-08 Thread Armitage, Jon
> On Wed, 8 Dec 2010 15:43:23 +
> "Armitage, Jon"  wrote:
> 
> > I am trying to upgrade from 0.96.3 on a box running Solaris 10.
> > 
> > I used this configure command, which worked with 0.96.3, and has
> > worked with 0.96.5 on another Solaris 10 box:
> > 
> > ./configure --with-user=exim --with-group=exim
> > LDFLAGS=-L/usr/local/lib LIBS=-liconv
> > 
> > The make fails with the following error:
> > 
> >   CCLD   clamscan
> > ../libclamav/.libs/libclamav.so: undefined reference to
> > `pthread_key_cre...@sunw_0.9' ../libclamav/.libs/libclamav.so:
> > undefined reference to
> 
> Looks like you are using broken version of binutils:
> http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26014
> 
> What do these commands output, and is the output different between the
> 2 machines:
> $ nm -D /lib/libc.so | grep pthread_key_create
> $ nm -D /lib/libpthread.so | grep pthread_key_create
> $ find . -name '*.la' -exec egrep 
> dependency_libs=\|relink_command {} \;
> 
> Best regards,
> --Edwin
>
On the machine which does not work:

-bash-3.00$ nm -D /lib/libc.so | grep pthread_key_create 
[2019]  |783792| 260|FUNC |WEAK |0|9  |_pthread_key_create
[2809]  |783792| 260|FUNC |WEAK |0|9  |pthread_key_create
-bash-3.00$ nm -D /lib/libpthread.so | grep pthread_key_create 
[3] | 0|   0|FUNC |GLOB |0|ABS|_pthread_key_create
[184]   | 0|   0|FUNC |GLOB |0|ABS|pthread_key_create
-bash-3.00$ find . -name '*.la' -exec egrep \|relink_command {} \;
relink_command="(cd /export/home/jon/clamav-0.96.5/libclamav; /bin/bash 
/export/home/jon/clamav-0.96.5/libtool  --silent --tag CC --mode=relink gcc -g 
-O2 -module -thread-safe -version-info 7:7:1 -no-undefined 
-Wl,--version-script,../libclamunrar_iface/libclamunrar_iface.map 
-L/usr/local/lib -o libclamunrar_iface.la -rpath /usr/local/lib unrar_iface.lo 
libclamunrar.la -liconv -lsocket @inst_prefix_dir@)"

On the machine which does work:

-bash-3.00$ nm -D /lib/libc.so | grep pthread_key_create 
[2839]  |819564| 264|FUNC |WEAK |0|9  |_pthread_key_create
[221]   |819564| 264|FUNC |WEAK |0|9  |pthread_key_create
-bash-3.00$ nm -D /lib/libpthread.so | grep pthread_key_create 
[3] | 0|   0|FUNC |GLOB |0|ABS|_pthread_key_create
[184]   | 0|   0|FUNC |GLOB |0|ABS|pthread_key_create
-bash-3.00$ find . -name '*.la' -exec egrep \|relink_command {} \;
relink_command="(cd /export/home/jon/clamav-0.96.5/libclamav; /bin/bash 
/export/home/jon/clamav-0.96.5/libtool  --silent --tag CC --mode=relink gcc -g 
-O2 -module -thread-safe -version-info 7:7:1 -no-undefined 
-Wl,-M,../libclamunrar_iface/libclamunrar_iface.map -L/usr/local/lib -o 
libclamunrar_iface.la -rpath /usr/local/lib unrar_iface.lo libclamunrar.la 
-lnsl -liconv -lgmp -lbz2 -lsocket @inst_prefix_dir@)"

Edwin, I hope this makes sense to you, I'm a sysadmin, not a programmer, so I'm 
not sure what the differences mean.

Jon.

Apologies for the sig below, I'll sort this evening.






Information in this email including any attachments may be privileged, 
confidential and is intended exclusively for the addressee. The views expressed 
may not be official policy, but the personal views of the originator. If you 
have received it in error, please notify the sender by return e-mail and delete 
it from your system. You should not reproduce, distribute, store, retransmit, 
use or disclose its contents to anyone. Please note we reserve the right to 
monitor all e-mail communication through our internal and external networks. 
SKY and the SKY marks are trade marks of British Sky Broadcasting Group plc and 
are used under licence. British Sky Broadcasting Limited (Registration No. 
2906991), Sky Interactive Limited (Registration No. 3554332), Sky-In-Home 
Service Limited (Registration No. 2067075) and Sky Subscribers Services Limited 
(Registration No. 2340150) are direct or indirect subsidiaries of British Sky 
Broadcasting Group plc (Registration No. 2247735). All of the co
 mpanies mentioned in this paragraph are incorporated in England and Wales and 
share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD.


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] 0.96.5 compilation problem on Solaris 10

2010-12-08 Thread Török Edwin
On Wed, 8 Dec 2010 17:08:15 +
"Armitage, Jon"  wrote:

> > On Wed, 8 Dec 2010 15:43:23 +
> > "Armitage, Jon"  wrote:
> > 
> > > I am trying to upgrade from 0.96.3 on a box running Solaris 10.
> > > 
> > > I used this configure command, which worked with 0.96.3, and has
> > > worked with 0.96.5 on another Solaris 10 box:
> > > 
> > > ./configure --with-user=exim --with-group=exim
> > > LDFLAGS=-L/usr/local/lib LIBS=-liconv
> > > 
> > > The make fails with the following error:
> > > 
> > >   CCLD   clamscan
> > > ../libclamav/.libs/libclamav.so: undefined reference to
> > > `pthread_key_cre...@sunw_0.9' ../libclamav/.libs/libclamav.so:
> > > undefined reference to
> > 
> > Looks like you are using broken version of binutils:
> > http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26014
> > 
> > What do these commands output, and is the output different between
> > the 2 machines:
> > $ nm -D /lib/libc.so | grep pthread_key_create
> > $ nm -D /lib/libpthread.so | grep pthread_key_create
> > $ find . -name '*.la' -exec egrep 
> > dependency_libs=\|relink_command {} \;
> > 
> > Best regards,
> > --Edwin
> >
> On the machine which does not work:
> 
> -bash-3.00$ nm -D /lib/libc.so | grep pthread_key_create 
> [2019]  |783792| 260|FUNC |WEAK |0|9
> |_pthread_key_create [2809]  |783792| 260|FUNC |WEAK |0
> |9  |pthread_key_create -bash-3.00$ nm -D /lib/libpthread.so |
> grep pthread_key_create [3] | 0|   0|FUNC |GLOB |0
> |ABS|_pthread_key_create [184]   | 0|   0|FUNC |GLOB
> |0|ABS|pthread_key_create -bash-3.00$ find . -name '*.la'
> -exec egrep \|relink_command {} \;
> relink_command="(cd /export/home/jon/clamav-0.96.5/libclamav; /bin/bash 
> /export/home/jon/clamav-0.96.5/libtool
> --silent --tag CC --mode=relink gcc -g -O2 -module -thread-safe
> -version-info 7:7:1 -no-undefined
> -Wl,--version-script,../libclamunrar_iface/libclamunrar_iface.map
> -L/usr/local/lib -o libclamunrar_iface.la -rpath /usr/local/lib
> unrar_iface.lo libclamunrar.la -liconv -lsocket @inst_prefix_dir@)"
> 
> On the machine which does work:
> 
> -bash-3.00$ nm -D /lib/libc.so | grep pthread_key_create 
> [2839]  |819564| 264|FUNC |WEAK |0|9
> |_pthread_key_create [221]   |819564| 264|FUNC |WEAK |0
> |9  |pthread_key_create -bash-3.00$ nm -D /lib/libpthread.so |
> grep pthread_key_create [3] | 0|   0|FUNC |GLOB |0
> |ABS|_pthread_key_create [184]   | 0|   0|FUNC |GLOB
> |0|ABS|pthread_key_create -bash-3.00$ find . -name '*.la'
> -exec egrep \|relink_command {} \;
> relink_command="(cd /export/home/jon/clamav-0.96.5/libclamav; /bin/bash 
> /export/home/jon/clamav-0.96.5/libtool
> --silent --tag CC --mode=relink gcc -g -O2 -module -thread-safe
> -version-info 7:7:1 -no-undefined
> -Wl,-M,../libclamunrar_iface/libclamunrar_iface.map -L/usr/local/lib
> -o libclamunrar_iface.la -rpath /usr/local/lib unrar_iface.lo
> libclamunrar.la -lnsl -liconv -lgmp -lbz2 -lsocket @inst_prefix_dir@)"

Well you're missing a bunch of these on the machine that doesn't work
(no -lnsl, and -lbz2 there). Also -lgmp is something you must have
added on your own, since ClamAV no longer uses GMP.

Check the environment vars and configure invocation (CFLAGS, LIBS,
LDFLAGS, etc.) on both machines, and make sure they match.
Also check tool versions (gcc, ld, etc.).

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] 0.96.5 compilation problem on Solaris 10

2010-12-08 Thread Peter Bonivart
On Wed, Dec 8, 2010 at 6:08 PM, Armitage, Jon  wrote:
> Edwin, I hope this makes sense to you, I'm a sysadmin, not a programmer, so 
> I'm not sure what the differences mean.

If you want to avoid the hassle you can use pre-built binary packages
from OpenCSW. We have ClamAV in our repository including it's
dependencies. Note that we for the moment only have 0.96.4 since
0.96.5 is in testing, soon to be released.

Basically you just do "pkgutil -i clamav" to install it.

More info here:

OpenCSW: http://www.opencsw.org/
Install pkgutil: http://www.opencsw.org/get-it/pkgutil/
ClamAV package page: http://www.opencsw.org/packages/CSWclamav/
0.96.5 test package: http://buildfarm.opencsw.org/experimental.html#bonivart

/peter
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml