On 11/16/06, Tomasz Papszun <[EMAIL PROTECTED]> wrote:
On Tue, 14 Nov 2006 at 11:33:23 +0800, zamri wrote:
>
> That file was detected as worm for clamav 0.88.5. I think this is
> sufficient to prove that 0.90rc2 was not able to detect it and I
> presume 0.90rc2 virus db wasn't updated simultaneou
Le Mercredi 15 Novembre 2006 19:50, Tomasz Papszun a écrit :
> Hopefully the user running Apache or ClamAV is not root, hence it can't
> modify iptables' rules.
: So stupide I am !!!
Clamav with user clamav
Apache with... apache...
So now my script works good with crontab !
_
On Wed, 15 Nov 2006 at 1:54:13 +0100, Laurent Besson wrote:
>
> First i wrote this script (name clam-ip-drop.sh)
>
> #! /bin/sh
>
> ip=`cat /var/log/httpd/error_log | grep "virus daemon" | cut -d " " -f8-8 |
> cut -d "]" -f1-1`;
> date=`date`;
>
> for i in $ip ; do
> echo $date." Drop
On Tue, 14 Nov 2006 at 11:33:23 +0800, zamri wrote:
>
> That file was detected as worm for clamav 0.88.5. I think this is
> sufficient to prove that 0.90rc2 was not able to detect it and I
> presume 0.90rc2 virus db wasn't updated simultaneously as 0.88.5/6.
There are no separated versions of vir