Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread Steve Basford
> Oh, and I now realize that this is outside of freshclam's control, being > a sanesecurity signature. I removed the mbl.db and disabled that > cronjob until we sort this out... Hi John, Actually, just to clarify... it's not a Sanesecurity signature and it's not distributed by Sanesecurity eithe

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread Bowie Bailey
On 2/22/2012 1:00 PM, John Madden wrote: > Oh, and I now realize that this is outside of freshclam's control, being > a sanesecurity signature. I removed the mbl.db and disabled that > cronjob until we sort this out... > > > > On 02/22/2012 12:51 PM, John Madden wrote: >> I wasn't able to receiv

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
Oh, and I now realize that this is outside of freshclam's control, being a sanesecurity signature. I removed the mbl.db and disabled that cronjob until we sort this out... On 02/22/2012 12:51 PM, John Madden wrote: I wasn't able to receive my own post... freshclam didn't initially pull tha

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
I wasn't able to receive my own post... freshclam didn't initially pull that signature back in (I removed it manually from mbl.db) so I thought we were in the clear. It eventually came back and everything came tumbling down again. Steve, replying to your post: grep MBL_207346 | sigtool --de

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread Steve Basford
> I started seeing a bunch of these this morning, essentially trashing > around... I don't know, 80 or 90% of our mail. The signature is > definitely in our database but I can't find anything about it via google > aside from pages that have apparently been updated to no longer mention > it. Any i

[clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
I started seeing a bunch of these this morning, essentially trashing around... I don't know, 80 or 90% of our mail. The signature is definitely in our database but I can't find anything about it via google aside from pages that have apparently been updated to no longer mention it. Any ideas h

Re: [clamav-users] Any verification that virus submission is working?

2012-02-22 Thread Alain Zidouemba
Michael, I see 2 submissions in the past 30 days sent in using your email address. I've written signatures for them that will be released in the next few hours, pending QA. Thanks, -Alain On Wed, Feb 22, 2012 at 8:26 AM, Michael Richards wrote: > I've submitted a few virus samples now 8 days a

[clamav-users] Any verification that virus submission is working?

2012-02-22 Thread Michael Richards
I've submitted a few virus samples now 8 days ago and they still haven't been added to the database. Is it possible that the submission system is not working properly or incorrectly dropping files? I spent some time watching the signature announce list for my name but nothing has come up. There wa