Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?

2007-07-03 Thread Török Edvin
On 7/4/07, BG Mahesh <[EMAIL PROTECTED]> wrote: > I heard there is a flag --no-phishing-scan-urls and if I switch this off it > will be fine. > Is that the cause of my problem? If so, how do I specify in the conf file > not to scan urls for phishing. that option is for Phishing.Email.*, or Phishin

Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?

2007-07-03 Thread BG Mahesh
> > > >>Christoph > > > > > > > > Not including the From/To address etc. The body of the mail is as > follows > > and it has one attachments (.eml file) which is nothing but a previous > email > > which is being forwarded again to this user, > > Could you provide this attached/forwarded mail? P

Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?

2007-07-03 Thread BG Mahesh
I heard there is a flag --no-phishing-scan-urls and if I switch this off it will be fine. Is that the cause of my problem? If so, how do I specify in the conf file not to scan urls for phishing. I will submit the email on clamav site for FP. Will that email be made public? On 7/3/07, Christoph Co

[Clamav-users] Not sure if freshclam is running

2007-07-03 Thread Scott Castaline
I had version 0.90.1 running with no problems, then updated to 0.90.2. I had a few problems getting it started but I did, and the logs were updating daily with no problems. I had setup in both cases freshclam to be a root cron job hourly. Last Thursday, June 28, 2007 I updated to 0.90.3 and freshcl

Re: [Clamav-users] clamav 0.91rc2, centos 5, and selinux targeted

2007-07-03 Thread Ronald Cole
On 7/3/07, Ronald Cole <[EMAIL PROTECTED]> wrote: > > On 7/2/07, Török Edvin <[EMAIL PROTECTED]> wrote: > > > > On 7/3/07, Ronald Cole <[EMAIL PROTECTED]> wrote: > > > I've poked and prodded an rpm specfile to put all the directories and > > files > > > where system-config-selinux says it expects t

Re: [Clamav-users] clamav 0.91rc2, centos 5, and selinux targeted

2007-07-03 Thread Ronald Cole
On 7/2/07, Török Edvin <[EMAIL PROTECTED]> wrote: > > On 7/3/07, Ronald Cole <[EMAIL PROTECTED]> wrote: > > I've poked and prodded an rpm specfile to put all the directories and > files > > where system-config-selinux says it expects them to be... and it mostly > > works without complaint. > > > >

Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?

2007-07-03 Thread Christoph Cordes
BG Mahesh schrieb: > On 7/3/07, Christoph Cordes <[EMAIL PROTECTED]> wrote: >>> >>> >> Could you please provide a copy of the mail that clam blocks? The >> fact that i received your mail is a proof that ClamAV does not detect >> anything in mails from you. So, the mail that Clam detects on your >>

Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?

2007-07-03 Thread BG Mahesh
On 7/3/07, Christoph Cordes <[EMAIL PROTECTED]> wrote: > > > > > > > > > Could you please provide a copy of the mail that clam blocks? The > fact that i received your mail is a proof that ClamAV does not detect > anything in mails from you. So, the mail that Clam detects on your > server contains s

Re: [Clamav-users] What is infected attachment (Email.Phishing.RB-827)?

2007-07-03 Thread Christoph Cordes
Am 03.07.2007 um 07:30 schrieb BG Mahesh: > On 6/28/07, Steve Basford <[EMAIL PROTECTED]> wrote: >> >>> >>> 554 Failure Messagecontains an infected attachment ( >> Email.Phishing.RB-827) >>> >>> The laptop that is sending the message is not infected with any >>> virus. >> >> RB-827 is a phishin