[Clamav-users] Typo in clamav-milter.c?

2003-11-10 Thread Eric Rostetter
clamav-milter.c reads: puts("\t--outgoing\t\t-o\tScan outgoing messages from this machine."); puts("\t--noxheader\t\t-o\tSuppress X-Virus-Scanned header."); Seems to me both should not be "-o" and I'd guess the second one is the wrong one? Might want to fix it before you cut the

Re: [Clamav-users] Upcoming Clamav Stable

2003-11-10 Thread Tomasz Kojm
On Thu, 06 Nov 2003 16:00:00 -0500 Adam Williams <[EMAIL PROTECTED]> wrote: > Anyone know if a fix for scanning of OLE2 files is in? Before it was > giving false positives on previosuly infected but clean files. Full OLE2 support will be available in CVS at the end of November. The new stable ve

Re: [Clamav-users] Does clamav detect the W32.Swen* worms?

2003-11-10 Thread Antony Stone
On Monday 10 November 2003 7:52 pm, Robin Cook wrote: > Does clamav detect the W32.Swen worms? > > W32.Swen.A Yes. ClamAV calls it Worm.Gibe.F Antony -- Never write it in Perl if you can do it in Awk. Never do it in Awk if sed can handle it. Never use sed when tr can do the job. Never invoke

Re: [Clamav-users] Does clamav detect the W32.Swen* worms?

2003-11-10 Thread Christoph Cordes
Hello Robin, Monday, November 10, 2003, 8:52:50 PM, you wrote: RC> Does clamav detect the W32.Swen worms? RC> W32.Swen.A yes, but it will be detected as Worm.Gibe.F -- Best regards, Christophmailto:[EMAIL PROTECTED]

[Clamav-users] Does clamav detect the W32.Swen* worms?

2003-11-10 Thread Robin Cook
Does clamav detect the W32.Swen worms? W32.Swen.A CuZnDragon Robin Cook --- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, a

Re: [Clamav-users] Upcoming Clamav Stable

2003-11-10 Thread Adam Williams
> Fortunately almost all the issues reported by Ed have been fixed (and > they were not critical). I think there will be no delay this time :) Excellent! We've really been looking forward to a new release. Anyone know if a fix for scanning of OLE2 files is in? Before it was giving false positiv

Re: [Clamav-users] Zip issues

2003-11-10 Thread Tomasz Kojm
On Mon, 10 Nov 2003 09:37:29 -0200 Mário Luis Ghoneim <[EMAIL PROTECTED]> wrote: > In the prompt, it's ok. But... > What about the attached broken zip files. Most of them will produce a "Zip module failure" message, however that really strange ones will be classified as a viruses. We must be prep

Re: [Clamav-users] GMP 4.1.2 on solaris

2003-11-10 Thread J.D. Bronson
From: Ed Phillips <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] GMP 4.1.2 on solaris Sender: [EMAIL PROTECTED] Date: Mon, 10 Nov 2003 01:27:44 -0500 (EST) Do a "setenv ABI 32" before running GMP's configure. Hope this helps... Ed > > what do I have to do to get

Re: [Clamav-users] Zip issues

2003-11-10 Thread René Bellora
Tomasz Kojm wrote: On Fri, 07 Nov 2003 11:38:47 -0300 René Bellora <[EMAIL PROTECTED]> wrote: downloaded, compiled and installed (Redhat 7.2): Redhat ? Which gcc version ? (try gcc --version) Best regards, Tomasz Kojm 2.96 i also tried in RH 6.2 (egcs-2.91.66) and RH 7.3 (2.96), same

Re: [Clamav-users] clamav milter suggestion, timeouts

2003-11-10 Thread Marc Balmer
Nigel, you state that no timeout is required because libmilter has it's own. You miss the point: With a timeout on the socket you know exactly where and why the milter stopped it's operation and you can act. E.g. you can generate a SNMP trap or at least syslog() the cause. If you let libmi

[Clamav-users] Re: OpenBSD port

2003-11-10 Thread Flinn Mueller
On Monday, November 10, 2003, at 02:15 AM, Marc Balmer wrote: As clamav becomes more and more stable and as snapshots are available I wonder when the OpenBSD port gets updated? Wouldn't it be nice if there were a clamav-latest port (for development and testing use) that fetches a clamav-lates

[Clamav-users] clamav-20031110

2003-11-10 Thread Odhiambo Washington
I am seeing quite a number of these... in clamd.log Mon Nov 10 14:11:24 2003 -> /var/spool/exim/scan/1AJ9x4-0009hY-Kw/\ 1AJ9x4-0009hY-Kw-0.zip: File size limit exceeded. Does this mean someone s sending archived attachments exceeding my $ArchiveMaxFileSize (which is 10M)? cheers

Re: [Clamav-users] clamav-milter still dies

2003-11-10 Thread J.D. Bronson
From: Nigel Horne <[EMAIL PROTECTED]> Organization: NJH Music To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] clamav-milter still dies User-Agent: KMail/1.5 Sender: [EMAIL PROTECTED] Date: Mon, 10 Nov 2003 10:46:37 +0530 On Monday 10 November 2003 8:02 am, J.D. Bronson wrote: > I am using the 1

Re: [Clamav-users] Zip issues

2003-11-10 Thread Mário Luis Ghoneim
AIL PROTECTED] clamav-devel-20031109]# /usr/local/bin/clamscan -V > > clamscan / ClamAV version devel-20031110 > > [EMAIL PROTECTED] clamav-devel-20031109]# clamscan/clamscan > > ../clamav-0.60/photos.zip > > ../clamav-0.60/photos.zip: Seriously Broken Zip FOUND > > >

Re: [Clamav-users] Zip issues

2003-11-10 Thread Patrick Boutilier
can / ClamAV version devel-20031110 [EMAIL PROTECTED] clamav-devel-20031109]# clamscan/clamscan ../clamav-0.60/photos.zip ../clamav-0.60/photos.zip: Seriously Broken Zip FOUND --- SCAN SUMMARY --- Known viruses: 10129 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned

RE: [Clamav-users] Zip issues

2003-11-10 Thread Mário Luis Ghoneim
>It should handle the broken Mimail zips and classify them as "Seriously Broken Zip". [EMAIL PROTECTED] clamav-devel-20031109]# /usr/local/bin/clamscan -V clamscan / ClamAV version devel-20031110 [EMAIL PROTECTED] clamav-devel-20031109]# clamscan/clamscan ../clamav-0.60/photos.zip .

Re: [Clamav-users] 20031109 crash

2003-11-10 Thread Tim Wilde
On Mon, 10 Nov 2003, Tomasz Kojm wrote: > You should read this mailing list more carefully and update to: > http://clamav.net/snapshot/clamav-20031109-2-tk.tar.gz Yipes, sorry, I'm an idiot, that got it. My apologies to the list. Tim -- Tim Wilde [EMAIL PROTECTED] Systems Administrator Dynami

[Clamav-users] clamav milter suggestion

2003-11-10 Thread Marc Balmer
I peeked a little at clamav milter. I think it can be made more stable if the reads() and writes() to sockets are done with a timeout set. If clamd goes mad, it sometimes accepts() a connection, even reads the command but never responds. If then your socket read or recv call has no timeout,

[Clamav-users] OpenBSD port

2003-11-10 Thread Marc Balmer
As clamav becomes more and more stable and as snapshots are available I wonder when the OpenBSD port gets updated? Wouldn't it be nice if there were a clamav-latest port (for development and testing use) that fetches a clamav-latest.tar.gz file from the clamav server? If the OpenBSD port lacks