RE: [Clamav-users] --exclude-dir option

2005-07-07 Thread Jason Englander
On Thu, 7 Jul 2005, Smith, Duane E (GE Consumer & Industrial) wrote: When I try to specify multiple --exclude-dir clamscan only uses the last one. clamscan --help says this: --exclude-dir=REGEX Don't scan directories matching So, try something like this instead: clamsc

RE: [Clamav-users] --exclude-dir option

2005-07-07 Thread Smith, Duane E (GE Consumer & Industrial)
When I try to specify multiple --exclude-dir clamscan only uses the last one. Examples below. Need a way to exclude both dir1 and dir2 clamscan -r /root/clamtest/dir1/dir1a/test.file: Empty file /root/clamtest/dir1/test.file: Empty file /root/clamtest/dir2/test.file: Empty file /root/clamtest/

Re: [Clamav-users] --exclude-dir option

2005-07-07 Thread Jason Englander
On Thu, 7 Jul 2005, Smith, Duane E (GE Consumer & Industrial) wrote: I need to exclude several directories when I scan the complete system. How do I specify multiple directories with the --exclude-dir option man clamscan says: --exclude=PATT, --exclude-dir=PATT Don't scan file/director

[Clamav-users] --exclude-dir option

2005-07-07 Thread Smith, Duane E (GE Consumer & Industrial)
I need to exclude several directories when I scan the complete system. How do I specify multiple directories with the --exclude-dir option ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Odhiambo Washington
* jef moskot <[EMAIL PROTECTED]> [20050707 17:27]: wrote: > On Thu, 7 Jul 2005, Odhiambo Washington wrote: > > Where is the new version of zlib, if you might know? > > I'm not sure that it's a new version of zlib, exactly, especially since > the problem and the f

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Matt Fretwell
jef moskot wrote: > I'm not sure that it's a new version of zlib, exactly, especially since > the problem and the fix seem to be OS-specific. > > If you have FreeBSD 5.3 or 5.4, there are explicit instructions for what > to do here: > ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-0

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread jef moskot
On Thu, 7 Jul 2005, Odhiambo Washington wrote: > Where is the new version of zlib, if you might know? I'm not sure that it's a new version of zlib, exactly, especially since the problem and the fix seem to be OS-specific. If you have FreeBSD 5.3 or 5.4, there are explicit instructions for what to

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Jim Maul
Odhiambo Washington wrote: * Christopher X. Candreva <[EMAIL PROTECTED]> [20050707 17:10]: wrote: On Thu, 7 Jul 2005, Trog wrote: What I wrote and what you wrote are different, hence different results. You are correct. You wrote: http://www.gzip.org/ However, The last modifie

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Daniel J McDonald
On Thu, 2005-07-07 at 10:01 -0400, jef moskot wrote: > On Thu, 7 Jul 2005, Christopher X. Candreva wrote: > > www.zlib.net is still showing 1.2.2 from Oct 3 2004 as the latest version. > > Where is the version that was released yesterday ? > > It affects FreeBSD 5.4 and 5.4, so if you have 4.x, yo

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Odhiambo Washington
* Christopher X. Candreva <[EMAIL PROTECTED]> [20050707 17:10]: wrote: > On Thu, 7 Jul 2005, Trog wrote: > > > What I wrote and what you wrote are different, hence different results. > > You are correct. You wrote: > > > http://www.gzip.org/ > >

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Odhiambo Washington
* jef moskot <[EMAIL PROTECTED]> [20050707 17:08]: wrote: > On Thu, 7 Jul 2005, jef moskot wrote: > > It affects FreeBSD 5.4 and 5.4... > > Oops, that's 5.3 and 5.4. Sorry about that. Jeff, Where is the new version of zlib, if you might know? -Wash http

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Christopher X. Candreva
On Thu, 7 Jul 2005, jef moskot wrote: > On Thu, 7 Jul 2005, Christopher X. Candreva wrote: > > www.zlib.net is still showing 1.2.2 from Oct 3 2004 as the latest version. > > Where is the version that was released yesterday ? > > It affects FreeBSD 5.4 and 5.4, so if you have 4.x, you might not ha

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Christopher X. Candreva
On Thu, 7 Jul 2005, Trog wrote: > What I wrote and what you wrote are different, hence different results. You are correct. You wrote: > http://www.gzip.org/ However, The last modified date of the www.gzip.org page is July 27, 2003. There is no mention of a new version 'yesterday' (July 6 2005)

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread jef moskot
On Thu, 7 Jul 2005, jef moskot wrote: > It affects FreeBSD 5.4 and 5.4... Oops, that's 5.3 and 5.4. Sorry about that. Jeffrey Moskot System Administrator [EMAIL PROTECTED] ___ http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread jef moskot
On Thu, 7 Jul 2005, Christopher X. Candreva wrote: > www.zlib.net is still showing 1.2.2 from Oct 3 2004 as the latest version. > Where is the version that was released yesterday ? It affects FreeBSD 5.4 and 5.4, so if you have 4.x, you might not have noticed. Full details here: ftp://ftp.freebsd

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Odhiambo Washington
* Trog <[EMAIL PROTECTED]> [20050707 16:35]: wrote: > On Thu, 2005-07-07 at 09:28 -0400, Christopher X. Candreva wrote: > > On Thu, 7 Jul 2005, Daniel J McDonald wrote: > > > > > You desperately need a newer version. Many zip files will crash that > > > one

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Trog
On Thu, 2005-07-07 at 09:48 -0400, Christopher X. Candreva wrote: > On Thu, 7 Jul 2005, Trog wrote: > > > http://www.gzip.org/ > > Thanks, but http://www.gzip.org/zlib/ is also showing 1.2.2 from 10/3/2004 > as the current version. What I wrote and what you wrote are different, hence differen

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Christopher X. Candreva
On Thu, 7 Jul 2005, Trog wrote: > http://www.gzip.org/ Thanks, but http://www.gzip.org/zlib/ is also showing 1.2.2 from 10/3/2004 as the current version. (www.zlib.net is listed here as the US mirror for www.gzip.org/zlib/ ) -Chris ==

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Trog
On Thu, 2005-07-07 at 09:28 -0400, Christopher X. Candreva wrote: > On Thu, 7 Jul 2005, Daniel J McDonald wrote: > > > You desperately need a newer version. Many zip files will crash that > > one. A new version was released yesterday that fixed another crash. > > www.zlib.net is still showing 1

Re: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 2

2005-07-07 Thread Tomasz Papszun
On Thu, 07 Jul 2005 at 16:18:15 +0300, Odhiambo Washington wrote: [...] > 4. Make an archive of both and send it to the developers. They have a >separate list, but they do lurk here as well so you can place the >files on a publicly accessible site somewhere and give them the link >to do

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Christopher X. Candreva
On Thu, 7 Jul 2005, Daniel J McDonald wrote: > You desperately need a newer version. Many zip files will crash that > one. A new version was released yesterday that fixed another crash. www.zlib.net is still showing 1.2.2 from Oct 3 2004 as the latest version. Where is the version that was rel

Re: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 2

2005-07-07 Thread Odhiambo Washington
* David Peall <[EMAIL PROTECTED]> [20050707 16:04]: wrote: > > He's lied to you. Period. > > Nope, after spying on the users mailbox the mail that was "fixed" > [-- Attachment #2: Focus on Storage.doc --] > [-- Type: application/msword, Encoding: base64, Si

RE: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 2

2005-07-07 Thread David Peall
> He's lied to you. Period. Nope, after spying on the users mailbox the mail that was "fixed" [-- Attachment #2: Focus on Storage.doc --] [-- Type: application/msword, Encoding: base64, Size: 39K --] > However, you and him need to reproduce the problem and document it > properly then send the det

Re: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 2

2005-07-07 Thread Odhiambo Washington
* David Peall <[EMAIL PROTECTED]> [20050707 15:13]: wrote: > > On Thu, 2005-07-07 at 13:21 +0200, David Peall wrote: > > > > head -n 2 /usr/src/lib/libz/zlib.h > > > > > > /* zlib.h -- interface of the 'zlib' general purpose > >

Re: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 3

2005-07-07 Thread Odhiambo Washington
* David Peall <[EMAIL PROTECTED]> [20050707 15:22]: wrote: > Sorry this must be getting annoying. > > The "Fixed" email has now gone through without any problem. This means > that what ever was in the header of the "messy" email had the ablility > to shu

RE: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 3

2005-07-07 Thread David Peall
Sorry this must be getting annoying. The "Fixed" email has now gone through without any problem. This means that what ever was in the header of the "messy" email had the ablility to shutdown clamd. I would chalk this one up as a plausible DOS attack the fact that I cannot provide you with a copy

RE: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 2

2005-07-07 Thread David Peall
> On Thu, 2005-07-07 at 13:21 +0200, David Peall wrote: > > > head -n 2 /usr/src/lib/libz/zlib.h > > > > /* zlib.h -- interface of the 'zlib' general purpose > compression library > > version 1.1.3, July 9th, 1998 > > You desperately need a newer version. Many zip files will crash that > one.

Re: [Clamav-users] Clamav + Exim on FreeBSD UPDATE

2005-07-07 Thread Odhiambo Washington
* David Peall <[EMAIL PROTECTED]> [20050707 14:36]: wrote: > > Hi All > > > > I have two servers both FreeBSD and on both of them clamd just keeps > > shutting down. The problem has only started recently they have been > > running clamav 0.85 with out

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Daniel J McDonald
On Thu, 2005-07-07 at 13:21 +0200, David Peall wrote: > > head -n 2 /usr/src/lib/libz/zlib.h > > /* zlib.h -- interface of the 'zlib' general purpose compression library > version 1.1.3, July 9th, 1998 You desperately need a newer version. Many zip files will crash that one. A new version was

RE: [Clamav-users] AES-256 Encryption?

2005-07-07 Thread Daniel J McDonald
On Wed, 2005-07-06 at 11:50 -0700, Johnny Stork wrote: > Cant seem to find any binaries for rhel4? I need clamavm clamav-db, > clam-milter and clamd. Any suggestions? Grab the SRPM for 0.86, or 0.85, or...; install it on a build-box. Download the source distribution from clamav.net and put it in

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread David Peall
> head -n 2 /usr/src/lib/libz/zlib.h /* zlib.h -- interface of the 'zlib' general purpose compression library version 1.1.3, July 9th, 1998 David Peall :: Systems Administrator e-Schools' Network :: http://www.esn.org.za/ Phone +27 (021) 674-9140 _

RE: [Clamav-users] Clamav + Exim on FreeBSD UPDATE

2005-07-07 Thread David Peall
> Hi All > > I have two servers both FreeBSD and on both of them clamd just keeps > shutting down. The problem has only started recently they have been > running clamav 0.85 with out problems until two days ago. I have > upgraded to 0.86 with out any improvement. These are mx backups for > each

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread David Peall
> Doing a strings on that file should pull out the version number - > there's probably a better way, but FreeBSD isn't my main platform. deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly inflate 1.1.3 Copyright 1995-1998 Mark Adler David Peall :: Systems Administrator e-Schools' Network :: http:

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Odhiambo Washington
* David Peall <[EMAIL PROTECTED]> [20050707 13:45]: wrote: > > What version of zlib do you have? > > perl-5.8.6_2 > bsdpan-IO-Zlib-1.04 > p5-Compress-Zlib-1.34 What Trog wanted is not what you have given. Try this command and post the output: head -n 2 /usr/src/lib/l

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Trog
On Thu, 2005-07-07 at 12:43 +0200, David Peall wrote: > > > perl-5.8.6_2 > > > bsdpan-IO-Zlib-1.04 > > > p5-Compress-Zlib-1.34 > > > > Not those, it may be called libz > > This one ? > zziplib-0.10.82 A library to provide transparent read access to > zipped file On my old FreeBSD system it

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread David Peall
> On Thu, 2005-07-07 at 12:34 +0200, David Peall wrote: > > > What version of zlib do you have? > > > > perl-5.8.6_2 > > bsdpan-IO-Zlib-1.04 > > p5-Compress-Zlib-1.34 > > Not those, it may be called libz Ah from /usr/ports/security/clamav/Makefile RUN_DEPENDS=lha:${PORTSDIR}/archivers/lha

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread David Peall
> > perl-5.8.6_2 > > bsdpan-IO-Zlib-1.04 > > p5-Compress-Zlib-1.34 > > Not those, it may be called libz This one ? zziplib-0.10.82 A library to provide transparent read access to zipped file David Peall :: Systems Administrator e-Schools' Network :: http://www.esn.org.za/ Phone +27 (021) 6

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Trog
On Thu, 2005-07-07 at 12:34 +0200, David Peall wrote: > > What version of zlib do you have? > > perl-5.8.6_2 > bsdpan-IO-Zlib-1.04 > p5-Compress-Zlib-1.34 Not those, it may be called libz -trog signature.asc Description: This is a digitally signed message part ___

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread David Peall
> What version of zlib do you have? perl-5.8.6_2 bsdpan-IO-Zlib-1.04 p5-Compress-Zlib-1.34 David Peall :: Systems Administrator e-Schools' Network :: http://www.esn.org.za/ Phone +27 (021) 674-9140 ___ http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Trog
On Thu, 2005-07-07 at 12:13 +0200, David Peall wrote: > > > I have two servers both FreeBSD and on both of them clamd just keeps > > > shutting down. The problem has only started recently they have been > > > running clamav 0.85 with out problems until two days ago. I have > > > upgraded to 0.86

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Odhiambo Washington
* David Peall <[EMAIL PROTECTED]> [20050707 13:07]: wrote: > Hi All > > I have two servers both FreeBSD and on both of them clamd just keeps > shutting down. The problem has only started recently they have been > running clamav 0.85 with out problems until two days ago.

RE: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread David Peall
> > I have two servers both FreeBSD and on both of them clamd just keeps > > shutting down. The problem has only started recently they have been > > running clamav 0.85 with out problems until two days ago. I have > > upgraded to 0.86 with out any improvement. Where 0.85 is 0.85.1 and 0.86 is 0

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Trog
On Thu, 2005-07-07 at 12:05 +0200, David Peall wrote: > Hi All > > I have two servers both FreeBSD and on both of them clamd just keeps > shutting down. The problem has only started recently they have been > running clamav 0.85 with out problems until two days ago. I have > upgraded to 0.86 with

[Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread David Peall
Hi All I have two servers both FreeBSD and on both of them clamd just keeps shutting down. The problem has only started recently they have been running clamav 0.85 with out problems until two days ago. I have upgraded to 0.86 with out any improvement. These are mx backups for each other and not

Re: [Clamav-users] Re: curl/curl.h (Trog)

2005-07-07 Thread Trog
On Wed, 2005-07-06 at 12:20 -0400, Mitch wrote: > > What effect will that have not building it with libcurl? You won't be able to use MailFollowURLs which is disabled by default. -trog signature.asc Description: This is a digitally signed message part _

[Clamav-users] Re: Undetected file detected when submitting page

2005-07-07 Thread Virgo Pärna
On Thu, 7 Jul 2005 07:15:02 +0200, Nicki de Wet <[EMAIL PROTECTED]> wrote: > Hi, > > When I run a test against a "bounce" email containing an email with a > suspicious attachment, it does not find it. When I submit the attached email > with the attachment, the submission page says the following: