[Clamav-users] Email header parsing

2008-09-22 Thread Benoit Schmid
Good morning, I have local signatures (local.ndb) define. One of my rules is not allways matched because the UA or MTA may generate/modify different headers. I have defined a match on: application/zip; name="testdu28.zip" But emails are sometimes generated with: ...application/zip; name="testd

[Clamav-users] Average resolution time for a bug

2008-09-02 Thread Benoit Schmid
Good morning, I opened the Bug 1151 two days ago. I have opened it as P3/Normal as it is not a blocking bug. Unfortunately, nobody seems to be interested by it. As I am not very familiar with clamd bug resolution, could you please tell me how long it generally takes before that kind of bug is pro

Re: [Clamav-users] Different behaviours with STREAM and SCAN command

2008-09-01 Thread Benoit Schmid
Török Edwin wrote: > On 2008-09-01 15:57, Benoit Schmid wrote: >> Good morning, >> >> I have set a filter with "application/zip; name=testxxx.zip". >> I have a file/email with the following line in it: >> ... >> --Boundary_(ID_4GBDup7bX3Z1t

[Clamav-users] Different behaviours with STREAM and SCAN command

2008-09-01 Thread Benoit Schmid
Good morning, I have set a filter with "application/zip; name=testxxx.zip". I have a file/email with the following line in it: ... --Boundary_(ID_4GBDup7bX3Z1tEB0xZDRDQ) Content-type: application/zip; name=testxxx.zip ... If I connect to the clamd server and issue the command SCAN email_with_pa

Re: [Clamav-users] eicar not detected

2007-05-21 Thread Benoit Schmid
Paul Bijnens wrote: > On 2007-05-21 07:26, Benoit Schmid wrote: > >> Good morning, >> >> When I run a clamscan on a folder containing emails with different viruses. >> There is an eicar that is not detected. >> >> Would you know why? >>

Re: [Clamav-users] eicar not detected

2007-05-21 Thread Benoit Schmid
Rob MacGregor wrote: > On 5/21/07, Benoit Schmid <[EMAIL PROTECTED]> wrote: > >> Good morning, >> >> When I run a clamscan on a folder containing emails with different viruses. >> There is an eicar that is not detected. >> >> Would you know why?

[Clamav-users] eicar not detected

2007-05-20 Thread Benoit Schmid
Good morning, When I run a clamscan on a folder containing emails with different viruses. There is an eicar that is not detected. Would you know why? The file start after this line: t;1179497094 p;3 *;4 u;FILTER_DISCARD c;tcp_intranet (;TCP|129.194.9.224|25|129.194.16.24|46422 );SMTP/a s;a ([129