Re: [clamav-users] Freshclam to not write to syslog? (Marc)

2023-04-09 Thread Liston, Daniel (dliston) via clamav-users
Clamav 0.100.2 (the last one built for Solaris) does not write to syslog by default. Have you tried commenting Log lines instead of assigning "no" or "false"? /etc/opt/csw/clamd.conf: LogFile /u01/log/clamd.log LogFileMaxSize 200M LogTime yes TemporaryDirectory /var/tmp LocalSocket /tmp/clamd.s

[clamav-users] Solaris users in a bind

2021-11-03 Thread Liston, Daniel (DLISTON) via clamav-users
I need some help. The clamav.net site does not offer downloads for Solaris and the link for Solaris directs us to the OpenCSW.org site. Does anyone have a contact at CSW? ClamAV 0.100.2 is the newest version available to Solaris users, and has not been updated in time to prevent a cut off fro

Re: [clamav-users] QNAP Antivirus Updates

2021-09-21 Thread Liston, Daniel (DLISTON) via clamav-users
I have already forgotten the point, but I did do some DNS queries from our datacenters in LON, TYO, and NYC. All reported the same results; Non-authoritative answer: database.clamav.net canonical name = database.clamav.net.cdn.cloudflare.net. Name: database.clamav.net.cdn.cloudflare.net A

Re: [clamav-users] Problems scanning for PUAs

2019-05-30 Thread Daniel Quintiliani via clamav-users
Also, what is the difference between e.g. Win.Trojan and PUA.Win.Trojan? Why would a trojan be a PUA? -- -Dan Q On Thu, 30 May 2019 17:02:08 -0400 (EDT), Daniel Quintiliani via clamav-users wrote: > Hi, > > I'm trying to scan files for PUAs. > When you do that, you get

[clamav-users] Problems scanning for PUAs

2019-05-30 Thread Daniel Quintiliani via clamav-users
Hi, I'm trying to scan files for PUAs. When you do that, you get a lot of packers show up. But when I type --detect-pua=yes --exclude-pua=Win.Packer it doesn't detect any PUAs at all (including PUA.Win.Malware etc). Am I typing something wrong or is this a bug? Running ClamAV v0.101.2 on Gent

[clamav-users] Is there a simple way to remove "Warning: : Not supported file type" from scan output ?

2019-03-21 Thread White, Daniel E. (GSFC-770.0)[NICS] via clamav-users
It would be nice to have a clean output. As is, I am getting a few dozen of these warnings. ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide:

Re: [clamav-users] svg files support

2017-02-01 Thread Fluss, Daniel
1301-1 = According to paragraph 1.1 of the documentation <https://github.com/vrtadmin/clamav-faq/tree/master/manual>, No. -Al- -- ClamXav User On Wed, Feb 01, 2017 at 01:40 AM, Fluss, Daniel wrote: > > > Are the svg files scanned/supported by the clamAV? > Thank you. > > S

[clamav-users] svg files support

2017-02-01 Thread Fluss, Daniel
Hello, Are the svg files scanned/supported by the clamAV? Thank you. S pozdravom / Kind Regards / Mit freundlichen Grüßen Daniel Fluss T-Systems Slovakia s.r.o. Technical Solution Manager Žriedlova 9, 040 01 Košice, Slovakia E-mail: daniel.fl...@t-systems.sk<mailto:peter.lisi...@t-systems

Re: [clamav-users] clamdscan troubleshooting

2015-11-21 Thread Daniel L. Srebnick
Bond Masuda Sent: Saturday, November 21, 2015 13:02 To: ClamAV users ML Subject: Re: [clamav-users] clamdscan troubleshooting Daniel, You might want to look at these two SELinux booleans: antivirus_can_scan_system antivirus_use_jit You can use 'getsebool': $ getsebool antivirus_can_s

Re: [clamav-users] clamdscan troubleshooting

2015-11-21 Thread Daniel L. Srebnick
Interesting...clamdscan works with --fdpass but not without. [me@~]$ clamdscan -c /etc/clamd.d/scan.conf eicar.txt /home/me/eicar.txt: lstat() failed: Permission denied. ERROR --- SCAN SUMMARY --- Infected files: 0 Total errors: 1 Time: 0.001 sec (0 m 0 s) You have new mail in

Re: [clamav-users] clamdscan troubleshooting

2015-11-21 Thread Daniel L. Srebnick
I have set selinux to permissive to rule that out. -Original Message- From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Bond Masuda Sent: Saturday, November 21, 2015 13:02 To: ClamAV users ML Subject: Re: [clamav-users] clamdscan troubleshooting Daniel, You

[clamav-users] clamdscan troubleshooting

2015-11-21 Thread Daniel L. Srebnick
I'm having some issues verifying a clamav install under FC 22. I am doing some testing using clamdscan and have been running into some kind of permission error as far as I can tell. For now, I have set selinux to permissive to eliminate that as an issue. I have an eicar.com file that I hav

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-23 Thread Daniel Spies
On 02/23/2015 03:35 PM, Matus UHLAR - fantomas wrote: just a week or two ago I read discussion where the 465 was preferred, because SSL is mandatory there, so there's no chance for clients to authenticate without SSL encryption. ...just FYI. Encryption in my setup is mandatory, too. I just don'

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-23 Thread Daniel Spies
ne host by virtualising your servers. Postfix natively supports multi instance setups. Daniel ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-22 Thread Daniel Spies
On 02/22/2015 10:43 PM, Simon Hobson wrote: OK, this is getting well off-topic for this list, this will be my final say on the matter Agreed. Which is one reason it's very important to make sure you are not part of the problem. Allowing a customer to sent "nasties" through your mail server

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-22 Thread Daniel Spies
On 02/22/2015 09:18 PM, Dennis Peterson wrote: While I disagree with everything you've said I am glad you've spoken out. My job would be far easier if everyone did so. Could you be more precise? The quintessence of my last message was: 1. A company network is different, one has to care for the

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-22 Thread Daniel Spies
On 02/22/2015 07:13 PM, Matus UHLAR - fantomas wrote: sure it makes sense to scan outgoing mail. Maybe in a company network, yes. But I don't care for the computers of my clients -- these are their computers. *If* they get infected somehow, I have measures to stop them from doing harm through

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-22 Thread Daniel Spies
On 02/22/2015 10:08 AM, Simon Hobson wrote: Recipients may not trust the tags, but it *should* stop outbound spam/infected mail should your machine (or one of the clients) get compromised. IMO spam and malware is not just something to stop coming in, it's something to porevent going out - if m

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-21 Thread Daniel Spies
port 25. This would only work for submission (see my other e-mail). note check man resolv.conf for inet6, and or /etc/gai.conf eg make sure ipv4 first for non routeble ips Do you mean I should add IPv4 addresses first to the LocalNet option? Daniel

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-21 Thread Daniel Spies
n, it doesn't make any sense to scan e-mail leaving the server. The recipient will never trust these tags anyway. So why scan at all? It's important to scan incoming mail, be it from a local or an external client. Daniel ___ Help us

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-21 Thread Daniel Spies
On 02/22/2015 01:54 AM, Benny Pedersen wrote: LocalNet localdomain This gives no error, but clamav-milter is still scanning/tagging outgoing e-mail. I'm sending e-mail from port 587 (smtp/submission, postfix). PS: why does 127.0.0.1 not resolve ? It does though: LocalNet 127.0.0.1 --> OK

[clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-21 Thread Daniel Spies
27.0.0.1 ::1 local OK, BUT scan/tag happens Any help is greatly appreciated. Daniel ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml

Re: [clamav-users] false positive sample

2014-08-25 Thread Daniel Quintiliani
On Mon, 25 Aug 2014 13:17:23 +, "Joel Esler (jesler)" wrote: > We’re currently working on a better way to report false positives, so > hopefully we’ll see some resolution to the issue soon, but by all means, if > you have FP reports, please report them via the website and we’ll take a lo

Re: [clamav-users] false positive sample

2014-08-22 Thread Daniel Quintiliani
On Fri, 22 Aug 2014 18:26:37 -0400, Dan McDaniel wrote: > I submitted a false positive awhile ago -- probably back in May. It > hasn't been fixed yet. Should I submit it again? > > Also, on the web form when submitting false positives there is a > check-box that says "notify me". It would seem t

[clamav-users] Syslog clamscan results

2014-08-05 Thread Daniel Friske
Still nothing coming up on the syslog server The clamav.conf file contains the following lines LogFile /var/log/clamav.log LogSyslog What am I doing wrong? Regards, Daniel Friske Disclaimer: This message contains confidential information and is intended only for the named addressee. If you

[clamav-users] Does Clamsubmit work?

2014-06-24 Thread Daniel Quintiliani
Hi, There was a recent thread about ClamAV's low detection rates when compared to other AVs on VirusTotal. When Clamsubmit came out I started using it to submit "false negatives", following the "two per day" rules of the Web site. (No such rule exists in the clamsubmit manpage.) I am wonderin

Re: [clamav-users] Silly question - clamav - linux viruses?

2014-04-17 Thread Daniel Quintiliani
On Thu, 17 Apr 2014 10:46:20 -0400, Dave Shevett wrote: > Hi folks, sorry for the seemingly silly question, but I can't find it in > he FAQ nor can I find it by S-ing TFW. > > Does clamav on linux scan for 'linux viruses'? I know the definition of > that is nebulous, and the number of docume

Re: [clamav-users] virusnames .UNOFFICIAL

2013-11-05 Thread Daniel Quintiliani
On 11/05/2013 08:20 AM, Andreas Schulze wrote: > Hello, > > we use clamav with local created pattern. > Detected content is marked with "virusname.UNOFFICIAL". > That confuses some people here. > > I think about a local patch to clamav to change the string UNOFFICIAL. > Would it make sense to mak

Re: [clamav-users] VirusTotal & Malware Submissions

2013-09-24 Thread Daniel Quintiliani
esearch Engineer, VRT > OpenSource Community Manager > Sourcefire > > On Sep 21, 2013, at 11:24 AM, Daniel Quintiliani wrote: > >> Hi, >> >> Occasionally I submit attachments in my Spam folder to ClamAV via the >> ClamAV.net "submit malware" fo

[clamav-users] VirusTotal & Malware Submissions

2013-09-21 Thread Daniel Quintiliani
Hi, Occasionally I submit attachments in my Spam folder to ClamAV via the ClamAV.net "submit malware" form. A frequent type of spam message I get are written in Chinese, with Excel or Powerpoint files attached, with hexadecimal codes in the file name separated by "x". I scan with VirusTotal firs

Re: [clamav-users] False positive reporting

2013-08-23 Thread Daniel Quintiliani
On 08/23/2013 02:53 AM, Hugo Deprez wrote: > hello, > > I have been using the following link > http://www.clamav.net/lang/en/sendvirus/submit-fp/ to report a false > positive about Win.Trojan.Genome-6665. > > Until now I don't have any feed back and my clamscan is still complaining > about those

Re: [clamav-users] Why can't I send in false positives?

2013-06-24 Thread Daniel Quintiliani
On 6/24/2013 10:33 AM, Joel Esler wrote: > On Jun 22, 2013, at 6:33 AM, Daniel Quintiliani wrote: > >> 1. W6EL Propagation Prediction >> File: W6ELPropInst270.exe >> Description: Installer for ham radio software I have used for many >> years. Only the installer

[clamav-users] Why can't I send in false positives?

2013-06-22 Thread Daniel Quintiliani
Hi, A long time ago, I used to occasionally submit false positives detected by ClamAV when they would show up. However, I have tried occasionally to submit these same two false positives in place for months now, and they are still being reported. 1. W6EL Propagation Prediction File: W6ELPropInst2

[clamav-users] False positive submissions

2013-04-15 Thread Daniel R. Quintiliani
Hi, I have been submitting several false positives over the past few days (JRE 6, Sysinternals) as well as some spam attachments. Are things busy at ClamAV? Usually ClamAV corrects false positives pretty fast. -- -Dan Q signature.asc Description: OpenPGP digital signature

Re: [clamav-users] Database Mirror Issues

2013-02-14 Thread Daniel McDonald
moved the old main.cld and daily.cvd, > and then ran freshclam, it re-downloaded everything and seems to be working > fine. My main.cld was from 2011 (pretty old). -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a compreh

Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-14 Thread Daniel McDonald
t >>> from user's point of view, even if Apple is happy it has partial control >>> over devices it sold to customers), it just makes possible installation of >>> any software not approved by apple that does not necessarily have to be a >>> malware. > >

Re: [clamav-users] False Positive - Osx.Exploit.Iosjailbreak

2013-02-14 Thread Daniel McDonald
software could list the signature in local.ign2 or whatever the ignore file is, and be happy. But for the majority of us, It's not just potentially unwanted, it is simply unwanted. If I had wanted an open phone, I would have bought an Android. -- Daniel J McDonald, CCIE # 2495, CISSP # 78

Re: [clamav-users] Help to download ClamAV 0.97.5

2012-06-18 Thread Daniel McDonald
rnet. If I were to need clamav on those boxes, I would need some way to get the signatures to them. However, I don't have a need for this, and and happy for the smaller tarball size. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us

[clamav-users] Can't create temporary directory ERROR

2012-06-15 Thread Daniel McDonald
INetMsg.SpamDomain-2w.hopelasting_in.UNOFFICIAL FOUND This was not observed under 0.97.4 Clamd is being called from amavisd-new 2.6.6. Ideas on how to troubleshoot this issue and resolve it greatly appreciated. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 __

[clamav-users] False positive phishing

2012-04-18 Thread Daniel Gomes
Hello. I am not receiving a legitimate email from hsbc.com.br that have a attachment .hmtl. This message is classificated as a Heuristics.Phishing.Email.SpoofedDomain. Can you help me? -- Daniel Gomes ___ Help us build a comprehensive ClamAV guide

Re: [clamav-users] Upgrade 0.95.3 to 0.97

2011-03-14 Thread Daniel McDonald
>> Fedora? >> Regards, >> >> Clóvis >> > Fedora 12 is no longer supported. If you want to stay with F12, you > should can Clam source and compile it yourself. (I do that anyway, and > I'm using F14.) Or grab the SRPM from the F14 repository and rpmbuild --reb

[clamav-users] Problems with bytecode.cvd

2011-01-19 Thread Daniel Gomes
set LibClamAV Warning: [Bytecode JIT]: recovered from error LibClamAV Warning: [Bytecode JIT]: JITed code intercepted runtime error! LibClamAV Warning: Bytecode 7 failed to run: Unknown error code Someone can help me in this case? Thanks. -- Daniel Gomes

Re: [Clamav-users] Upcoming release of ClamAV (0.96.5)

2010-11-22 Thread Daniel McDonald
RPM and it is running on Mandriva Enterprise server 5.1 My test server doesn't get many viruses, so it might be a few hours before any show up... -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a comprehensive ClamAV guide: visit http:/

Re: [Clamav-users] Upcoming release of ClamAV (0.96.5)

2010-11-22 Thread Daniel McDonald
ort_fatal_error(const llvm::Twine&)¹: llvm/lib/Support/ErrorHandling.cpp:72: warning: ignoring return value of Œssize_t write(int, const void*, size_t)¹, declared with attribute warn_unused_result -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 > > Thank you in advance, _

Re: [Clamav-users] "Cannot prepare for JIT..."

2010-10-18 Thread Daniel J McDonald
r clamav from rpm, then it's pretty easy to add a patch like this to a specfile... -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] block attachment with certain file endings (also in archives)

2010-09-28 Thread Daniel McDonald
On 9/28/10 9:14 AM, "Dennis Peterson" wrote: > On 9/28/10 5:40 AM, Daniel McDonald wrote: >> >> >> >> On 9/28/10 2:05 AM, "Dennis Peterson" wrote: >> >>> On 9/27/10 11:55 PM, Török Edwin wrote: >>>> On Tue, 28 Sep

Re: [Clamav-users] block attachment with certain file endings (also in archives)

2010-09-28 Thread Daniel McDonald
_sigs.html > Amavisd-new gets around that by calling file and adding the type returned as meta-data that can be matched. So, embed an .emf with no extension in an .xlsx? Amavis will recognize it as an .emf in a zip archive. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281

Re: [Clamav-users] Tracking false positives

2010-09-14 Thread Daniel McDonald
[ qr'^INetMsg\.SpamDomain-2w\.' => 3.0 ], [ qr'^INetMsg\.'=> 2.0 ], [ qr'^MSRBL-Images\.' => 2.1 ], [ qr'^MSRBL-SPAM\.' => 5.1 ], [ qr'^MBL_' => undef ], # keep as infected )); -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Functionality level warning message after upgrade to 0.96.2

2010-08-23 Thread Daniel McDonald
Relocations: (not relocatable) Version : 0.96.2Vendor: Austin Energy -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] clamd 0.96.2 segfault

2010-08-17 Thread Daniel McDonald
On 8/17/10 12:06 PM, "Daniel McDonald" wrote: > On 8/16/10 3:24 PM, "Török Edwin" wrote: > >> On Mon, 16 Aug 2010 15:13:34 -0400 >> Joshua Weage wrote: >> >>> >>> I'm attempting to use clamav on a CentOS 5 system;

Re: [Clamav-users] clamd 0.96.2 segfault

2010-08-17 Thread Daniel McDonald
.1. I'm rebuilding the RPM with the above patch to see if it fixes the issue. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] SecuriteInfo vx.hdb missing?

2010-08-02 Thread Daniel McDonald
were going to re-organize their pattern files. I guess they finally finished -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-20 Thread Daniel McDonald
e deciding to delay the message). Greylisting got rid of 80% of my spam, most of which was caught by spamassassin anyway, but that's 80% I didn't have to run through spamassassin before discarding. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 > > Again they are fantastic

Re: [Clamav-users] Some questions about clamav update

2010-07-06 Thread Daniel McDonald
ge: $rpm -ql clamd /etc/logrotate.d/clamd /etc/rc.d/init.d/clamd /etc/sysconfig/clamd /usr/sbin/clamd /usr/share/man/man8/clamd.8.lzma /var/log/clamav/clamd.log >>> So, should I be bringing this up with the fedora team? >> Check first what the product is that you installed. Some

Re: [Clamav-users] bytecode Rev 16 DoS

2010-05-11 Thread Daniel McDonald
12 lines and executed 12 commands bytecode.cld updated (version: 16, sigs: 2, f-level: 51, builder: nervous) Datab - -- Daniel J McDonald, CCIE # 2495, CISSP # 78281 ase updated (1491523 signatures) from db.US.clamav.net (IP: 150.214.142.197) Clamd successfully notified about

Re: [Clamav-users] No debian woody support anymore?

2010-04-23 Thread Daniel McDonald
little confused by this (still), is it not true that simply > turning off freshclam will allow clamav to continue working indefinitely > on the existing signature set? No, you need to turn off freshclam *and* delete one signature, or grab an older copy of the signature file. -- Daniel J McDon

Re: [Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-23 Thread Daniel McDonald
on't camp out on any particular time. >From previous e-mails, I recall that Dennis has had trouble with the daemonized freshclam, so YMMV, but in my experience over the past 5 years or so on 8 various flavors and ages of Mandriva Linux, I've not experienced a single problem wi

Re: [Clamav-users] What mental midget shut down my server?

2010-04-16 Thread Daniel McDonald
return positive, which causes people with un-maintained systems to drop mail, which makes an admin wake up and figure out why. At least the clamav team was kind enough to put the answer in bold letters into the log. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281

Re: [Clamav-users] lstat() failed: Permission denied. ERROR

2009-12-21 Thread Daniel J McDonald
obably want to do something like: $ cat eicar.txt | clamdscan -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] SubmitDetectionStats Error

2009-11-23 Thread Daniel J McDonald
me. I'd be happy to see it in the same twitter feed as the pattern updates. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Question of clamav/clamav-milter

2009-06-04 Thread Daniel J McDonald
On Wed, 2009-06-03 at 16:00 -0500, Javier Lopez wrote: > Hi community, > > I would like to know if there is a way to send the e-mail messages that > were clasified by clamav as "Infected Message" to a particulary e-mail > account automatically as they are detected. Yes. Using amavisd-new, I c

Re: [Clamav-users] test for SafeBrowsing?

2009-03-30 Thread Daniel J McDonald
naged to find 3 hits in the wild last week, out of about 181,000 messages. The messages were all identical > > You'd think someone at Google had the foresight to provide a test-URL. -- Daniel J McDonald, CCIE #2495, CISSP #78281, CNX Austin Energy http://www.austinenergy.com ___

Re: [Clamav-users] test for SafeBrowsing?

2009-03-17 Thread Daniel J McDonald
On Tue, 2009-03-17 at 16:59 +0200, Török Edwin wrote: > On 2009-03-17 16:57, McDonald, Dan wrote: > > On Tue, 2009-03-17 at 14:08 +, Steve Basford wrote: > > > >>> Is there a test string I can use to see if the SafeBrowsing code is > >>> working properly? I've just set up 0.95RC2 with SafeB

Re: [Clamav-users] Non-Windows Malware

2008-12-08 Thread Daniel J McDonald
On Sat, 2008-12-06 at 17:29 -0800, Dennis Peterson wrote: > Derek Currie wrote: > > On Dec 6, 2008, at 12/06, 7:26 PM, Dennis Peterson wrote: > > > >> There is > >> no naming standard. > > > > Again with the misinformation. There is, in fact, a naming standard, Prove it. > > and an organizatio

Re: [Clamav-users] EMLINK error in Solaris 10 .. in this case i DoS myself

2008-01-12 Thread Daniel Garcia Bruno
ticky bit: drwxrwxrwx 2 qscand qscand 512 Jan 12 20:18 tmp2 drwxrwxrwt 31760 root sys58368 Jan 12 20:07 tmp But aparently problem has gone ... Thank's again Daniel El 12/01/2008, a las 19:24, Dennis Peterson escribió: > Daniel Garcia Bruno wrote: >> Hi everybo

Re: [Clamav-users] EMLINK error in Solaris 10 .. in this case i DoS myself

2008-01-12 Thread Daniel Garcia Bruno
Peter, Is clamd actually. The clamav I use has been compiled from source. I changed the default working directory /var/tmp to another one wiyout the sticky bit and aparently now everyhing is cool. Thank's for your time Daniel El 12/01/2008, a las 18:28, shuttlebox escribió: > On Jan 12

[Clamav-users] EMLINK error in Solaris 10 .. in this case i DoS myself

2008-01-12 Thread Daniel Garcia Bruno
s rmdir/mkdir ... Any ideas? Thank's a bunch Daniel I use: netqmail1.0.5-qmailscanner-2.02-spamassassin-3.2.3 my /usr/locat/etc/clamd.conf LogFile /var/log/clamd.log LogFileUnlock yes LogFileMaxSize 0 LogClean yes TemporaryDirectory /var/tmp2 DatabaseDirectory /var/lib/clamav LocalSocket

Re: [Clamav-users] PhishingScanURLs is dreadfully slow/CPU-intensive

2007-10-30 Thread Daniel T. Staal
unless there is a reason to check it. Daniel T. Staal --- This email copyright the author. Unless otherwise noted, you are expressly allowed to retransmit, quote, or otherwise use the contents for non-commercial purposes. This copyr

Re: [Clamav-users] Recent viruses

2007-10-29 Thread Daniel T. Staal
On Mon, October 29, 2007 8:58 am, Gomes, Rich said: > Daniel, I've been searching for how to configure this without much luck. > Could you point me in the right direction? Again, it Sendmail on RH being > called by clamav-milter. That's not a setup I'm familiar wit

Re: [Clamav-users] Recent viruses

2007-10-25 Thread Daniel T. Staal
On Thu, October 25, 2007 3:04 pm, Gomes, Rich said: > Would anyone know the syntax for such? What's your MTA, and how are you calling clamav? It all depends on your setup. Daniel T. Staal --- This email copyright the author.

Re: [Clamav-users] false positive of Email.FreeGame on MySQL DB

2007-09-28 Thread Daniel T. Staal
pointing you to bad sites, which is the defintion of a phish as far as I'm aware... Daniel T. Staal --- This email copyright the author. Unless otherwise noted, you are expressly allowed to retransmit, quote, or otherwise use th

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-16 Thread Daniel Staal
ainer, who may or may not be on this list. The clamav team _does_ include freshclam with clamav, in their source tarballs. If it is not included in this package, it is because the creator of this package has intentionally removed

[Clamav-users] scan taking too long

2007-08-03 Thread Daniel J McDonald
directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 25.20 MB Time: 488.716 sec (8 m 8 s) from the content, it appears to be marketing anyway, so it's not critical, but advice on what to do with it would be appreciated. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austi

Re: [Clamav-users] Error clamd

2007-07-30 Thread Daniel Bruno
Permissive mode and if I were really > adventurous, I'd use one of the many methods described in various howto's > to > create your own localpolicy file to work around the SE problem. > > On 7/27/07, Daniel Bruno < [EMAIL PROTECTED]> wrote: > > > > Hi

[Clamav-users] Error clamd

2007-07-27 Thread Daniel Bruno
r:sysctl_kernel_t:s0 tclass=dir Thanks, Daniel Bruno ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamscan extremly slow

2007-06-17 Thread Daniel Staal
ons of clamscan also have faster startups, so this is being worked on. Daniel T. Staal --- This email copyright the author. Unless otherwise noted, you are expressly allowed to retransmit, quote, or otherwise use the contents for non-commer

Re: [Clamav-users] Build rpm of 0.90

2007-05-31 Thread Daniel J McDonald
es in the %doc section and it should do fine. While you are at it, upgrade to 0.90.3 ;-) -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.c

Re: [Clamav-users] AV server

2007-04-24 Thread Daniel J McDonald
erclient deny from all > Thanks for any help > > Chris > > ___ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy h

Re: [Clamav-users] Problem With Upgrade From 0.88.7

2007-04-12 Thread Daniel J McDonald
The only way it could know would be using the Obsoletes: tag in the rpm itself, but you can only fiddle with a specfile in a SRPM... -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com ___ Help us build

RE: [Clamav-users] Does clamav have any certificate?

2007-03-27 Thread Daniel T. Staal
lly when the standards may or may not be good. Daniel T. Staal --- This email copyright the author. Unless otherwise noted, you are expressly allowed to retransmit, quote, or otherwise use the contents for non-commercial purposes. This c

RE: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Daniel T. Staal
.conf shows LocalSocket /tmp/clamd Is this > correct? Yes. The socket is not the program, it is a connector, _created by_ the program. /tmp or /var/run are common places for it. Daniel T. Staal --- This email copyright the author.

RE: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-13 Thread Daniel J McDonald
d maybe you have set wrong > >permissions/rights on the socket-"file". > > > >Sven > > clamd.conf is shown 644 root:root, should it be 644 clamav:clamav? That's not the problem. /var/lib/clamav/clamd.socket, or wherever you have put it, is the likely is

Re: [Clamav-users] Upgrade to .90? - Update

2007-03-13 Thread Daniel J McDonald
the zip error that Nigel claims to have fixed in SVN, this has been a near flawless upgrade. > Thank you to all who answered my original email and to the ClamAV crew for > the hard work you put into this effort. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy h

Re: [Clamav-users] Starting clamd at boot time

2007-03-09 Thread Daniel J McDonald
uch file or directory Check that /etc/init.d/clamd refers to an image in the same location that you installed it. You might have put clamd in /usr/local/sbin, and the init.d file might be referring to /usr/sbin, as an example. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http:/

Re: [Clamav-users] Freshclam not updating

2007-03-08 Thread Daniel J McDonald
blem, and ensure that freshclam does update properly? Thanks. Instead of AllowSupplementaryGroups make it AllowSupplementaryGroups yes You will probably need to read through the whole freshclam.conf and clamd.conf file to make those changes. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, C

Re: [Clamav-users] no virus scanning after manual ClamAV update

2007-03-08 Thread Daniel J McDonald
t as default, and the new clamd.conf file provided by the RPM puts the clamd.sock file in a different location. In either case, cleaning up clamd.conf and restarting clamd will fix your problem. > > Thanks > Sebastian -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin E

Re: [Clamav-users] Zip module failure ERROR

2007-03-08 Thread Daniel J McDonald
On Thu, 2007-03-08 at 16:54 +0100, Ralf Hildebrandt wrote: > * Don Drake <[EMAIL PROTECTED]>: > > > I would, but I'm getting the following error in Bugzilla: > > > > You are not authorized to access bug #396. > > I wonder why that is -- it's a stupid idea IMHO. > I believe all bugs are coded a

Re: [Clamav-users] Zip module failure ERROR

2007-03-08 Thread Daniel J McDonald
off-list? > > Open a bugreport on bugzilla, and attach the example. attach it to bugid 396, which I opened yesterday for the same cause. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Zip module failure ERROR

2007-03-07 Thread Daniel J McDonald
On Wed, 2007-03-07 at 00:55 +0100, Tomasz Kojm wrote: > On Tue, 06 Mar 2007 16:10:41 -0600 > Daniel J McDonald <[EMAIL PROTECTED]> wrote: > > > Suggestions welcome. I will try to hunt done a failure that is nabbed > > by quarantine or by a user who would be amenable to

[Clamav-users] Zip module failure ERROR

2007-03-06 Thread Daniel J McDonald
try to hunt done a failure that is nabbed by quarantine or by a user who would be amenable to sharing the file. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com ___ Help us build a comprehensive ClamAV guide:

Re: [Clamav-users] clamav vs norton

2007-03-02 Thread Daniel T. Staal
to the ClamAV team so they can add it to their database. There will be times ClamAV finds a virus Norton cannot, and vice-versa. On the average, ClamAV seems to be the finder more often than not. Daniel T. Staal --- This email copyright

[Clamav-users] [Fwd: [clamassassin-announce] Problems with ClamAV 0.90 and clamassassin 1.2.3]

2007-02-21 Thread Daniel T. Staal
Since I've had to quote this message a couple of times, I thought I'd just forward the whole thing. Daniel T. Staal Original Message Subject: [clamassassin-announce] Problems with ClamAV 0.90 and clamassassin 1.2.3 From:&

Re: [Clamav-users] Problem with clamassassin

2007-02-21 Thread Daniel T. Staal
no longer work. clamassassin had used this option for > compatibility with older versions of ClamAV, so clamassassin will fail > to work with ClamAV's clamscan. > >I am testing a version which fixes this problem. In the meantime > you have two options: Daniel T. Staal __

Re: [Clamav-users] Using clamassassin with 0.90 - failed error 40!

2007-02-20 Thread Daniel Staal
AMSCANOPT="--no-summary --stdout" Daniel T. Staal ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

OT: Re: [Clamav-users] Auto scan problems

2007-02-16 Thread Daniel T. Staal
ke +13 > hours just at glancing. You are triggering the DATE_IN_FUTURE_12_24 of > Spamassassin. Something is hosed man. Carren's time looks fine to me, though their mail client isn't putting the timezone on in the 'time sent' fiel

Re: [Clamav-users] Mandrake....

2007-02-12 Thread Daniel J McDonald
or Corporate Server 4. > > Thanks! > > Michael.- -- Daniel J McDonald, CCIE #2495 Linux mcdonalddj-dc.austin-energy.net 2.6.17-10mdv #1 SMP Fri Feb 2 15:53:02 MST 2007 i686 Intel(R) Pentium(R) 4 CPU 3.40GHz GNU/Linux ___ Help u

Re: [Clamav-users] Re: Why does clam die on a malformed database ?

2006-12-31 Thread Daniel Staal
tem maintainers, should be giving our _best effort_ to make sure that the system works as quickly and reliably as possible. ;) ClamAV is a tool towards that, and (generally) does a good job of helping the admin with the task of maintaining the email service. I think we all agree there.

Re: [Clamav-users] Freshclam stability as a daemon [was: DB Update

2006-12-29 Thread Daniel T. Staal
don't see a good reason to actually run such a system, but I'm curious to know how well it works. ;) Daniel T. Staal --- This email copyright the author. Unless otherwise noted, you are expressly allowed to retransmit, quote, or

Re: [Clamav-users] Freshclam stability as a daemon [was: DB Update email before actual update available?]

2006-12-29 Thread Daniel J McDonald
n was untouched since two years ago when it was installed. The database was up to date, too bad the engine wasn't ;-) -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com ___ Help us build a comprehensive Clam

Re: [Clamav-users] Choosing best MaxThreads value for clamd?

2006-11-30 Thread Daniel T. Staal
e people who really know out of the woodwork. (My experience on mailing lists is that if a question isn't answered in about a day it will get forgotten.) Daniel T. Staal --- This email copyright the author. Unless otherwise noted

  1   2   3   4   5   >