Re: [clamav-users] Clamav error using YARA

2019-11-11 Thread Franky Van Liedekerke via clamav-users
com/Yara-Rules/rules/commit/8130cda6a3cd1b470b59e29a769162600bf1efab It seems is__elf is a private function now, so you can't use it directly anymore I guess. Franky Op Maandag, 11-11-2019 om 09:10 schreef Philippe Lefèvre: Hello, thanks for your reply :-) here is: ==

Re: [clamav-users] Could not watch path /var/lib/docker/overlay2 error

2019-10-09 Thread Franky Van Liedekerke via clamav-users
Your bug was already reported by me. See this bug: https://bugzilla.clamav.net/show_bug.cgi?id=12306 (and it contains a workaround too) Franky Op Woensdag, 09-10-2019 om 17:32 schreef Arthur Ramsey via clamav-users: Hello, I’m trying to implement on access scanning for docker containers using

Re: [clamav-users] [Clamav-devel] ClamAV(R) blog: ClamAV 0.102.0 Release Candidate is now available

2019-10-07 Thread Franky Van Liedekerke via clamav-users
I'm always willing to test. However, I don't think freshclam and clamsubmit need newer libcurl versions, so I guess - if changes are need - that only clamonacc needs to be reviewed (for the linking part). With friendly regards, Franky Op Maandag, 07-10-2019 om 16:08 schreef Mi

Re: [clamav-users] [Clamav-devel] ClamAV(R) blog: ClamAV 0.102.0 Release Candidate is now available

2019-10-07 Thread Franky Van Liedekerke via clamav-users
0.102 (on which I commented, since that would impact a lot of users). I won't go into the discussion of supporting "old" libraries on "old OS's" again, but for enterprise users (RHEL 6/7, Centos, Ubuntu LTS, ...) this is a bit of a problem (since the libcurl lib is al

Re: [clamav-users] [Clamav-devel] ClamAV(R) blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-30 Thread Franky Van Liedekerke via clamav-users
Op Maandag, 30-09-2019 om 15:27 schreef Franky Van Liedekerke via clamav-users: > Op Maandag, 30-09-2019 om 15:14 schreef J.R. via clamav-users: > > > While I applaud the re-use of existing components, requiring this > > > (minimum) version of libcurl will be a proble

Re: [clamav-users] [Clamav-devel] ClamAV(R) blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-30 Thread Franky Van Liedekerke via clamav-users
> will never create an rpm for clamav 0.102, and that would leave a lot > > of existing users "in the cold" and force them into using an "old" > > version. > > Franky, > > As has been stated numerous times, the minimum requirement for curl is > ON

Re: [clamav-users] [Clamav-devel] ClamAV® blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-30 Thread Franky Van Liedekerke via clamav-users
and build/use a static lib version of that (and not a shared .so) in case the OS-version of libcurl is not sufficient? If not, EPEL will never create an rpm for clamav 0.102, and that would leave a lot of existing users "in the cold" and force them into using an "old" version.

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-27 Thread Franky Van Liedekerke via clamav-users
Op Donderdag, 26-09-2019 om 20:14 schreef Franky Van Liedekerke: > Op Donderdag, 26-09-2019 om 19:17 schreef G.W. Haywood via clamav-users: > > Hello again, > > > > On Thu, 26 Sep 2019, CROFT Ian via clamav-users wrote: > > > > > ... making sure they are

Re: [clamav-users] [Clamav-devel] ClamAV® blog: ClamAV 0.102.0 Release Candidate is now available

2019-09-27 Thread Franky Van Liedekerke via clamav-users
sion to need to install non-rhel libcurl and libssh2 (dependancy) versions on a server just like that to my manager ... With friendly regards, Franky Op Maandag, 16-09-2019 om 18:13 schreef Joel Esler (jesler): https://blog.clamav.net/2019/09/clamav-01020-release-candidate-is-now.html

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread Franky Van Liedekerke via clamav-users
karound for it (I do know that you still need this OnAccessIncludePath workaround, but maybe with the new onaccess method, the standard excludes also apply and that would help then ... something I need to test (but I need to compile clamav for that first). Franky _

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread Franky Van Liedekerke via clamav-users
Indeed, I'm having this problem too. Probably the include wins over the exclude, even with this in the logs:  clamd[4940]: ScanOnAccess: Protecting directory '/var/log' (and all sub-directories)  clamd[4940]: ScanOnAccess: Protecting directory '/var' (and all sub-directories)  clamd[4940]: ScanOnA

Re: [clamav-users] OnAccessExcludePath being ignored.

2019-09-26 Thread Franky Van Liedekerke via clamav-users
xcluding names > which do not exist on your system. While Ian just followed my example (which was wrong apparently), it is kind of confusing in clamd.conf: ExcludePath REGEX OnAccessExcludePath STRING Easy enough to miss ... Franky ___ cl

Re: [clamav-users] RHEL ScanonAccess includepaths

2019-09-24 Thread Franky Van Liedekerke via clamav-users
: OnAccessIncludePath /var/log OnAccessIncludePath /var/tmp OnAccessIncludePath /var and then, if you don't want /var/log and /var/tmp, add these in the exclude: ExcludePath ^/var/log ExcludePath ^/var/tmp Franky Op Dinsdag, 24-09-2019 om 15:30 schreef CROFT Ian: Hi   We

Re: [clamav-users] OnAccess and regular scanning

2019-09-24 Thread Franky Van Liedekerke via clamav-users
To be complete: I'm running clamav 0.101.4 on RHEL7 (fully patched) Franky Op Dinsdag, 24-09-2019 om 13:22 schreef Al Varnell via clamav-users: I suspect it will depend on what platform you are running it on. -Al- On Sep 24, 2019, at 04:20, Franky Van Liedekerke via clamav-users

[clamav-users] OnAccess and regular scanning

2019-09-24 Thread Franky Van Liedekerke via clamav-users
should be protected by onaccess once a week or so? I know clamdscan exists, but you need to provide a folder to it, and via cron it seems too much to scan "/". Or maybe force a scan of all files that should be protected by onaccess but haven't been accessed/scanned yet? With friendly

Re: [clamav-users] connect clamscan output to journal with systemd-cat

2019-04-04 Thread Franky Van Liedekerke via clamav-users
Do you want the info in journald or just in syslog? Because rsyslog can monitor logfiles directly too. Your call to clamscan from cron might refuse to output info (because no tty perhaps), maybe first try to get logs from clamscan via cron directly? Franky Op Donderdag, 04-04-2019 om 09:46

Re: [clamav-users] rpm files question [was: ClamAV 0.101.2 announcement?]

2019-03-29 Thread Franky Van Liedekerke via clamav-users
If you want the version to appear in EL7 stable, go to https://apps.fedoraproject.org/packages/clamav/ and add karma. Franky Op Vrijdag, 29-03-2019 om 19:01 schreef G.W. Haywood via clamav-users: Hi there, On Fri, 29 Mar 2019, Micah Snyder wrote: > This won't help you right now,

Re: [clamav-users] Database updated over unencrypted connection?

2019-03-15 Thread Franky Van Liedekerke via clamav-users
I am happy with the promised https support in a future version (and with the http support now). Franky - Oorspronkelijk bericht - Van: Leonardo Rodrigues Aan: clamav-users@lists.clamav.net Verzonden: Fri, 15 Mar 2019 19:56:14 +0100 (CET) Onderwerp: Re: [clamav-users] Database upda

Re: [clamav-users] Database updated over unencrypted connection?

2019-03-15 Thread Franky Van Liedekerke via clamav-users
e too. And the cpu issue might've been relevant years ago, but it shouldn't be now (offloading https to a high-performant frontend server can help if you really have issues). Just my 2 cents here ... Franky ___ clamav-users mailing lis

[clamav-users] onaccess scanning and selinux

2019-03-14 Thread Franky Van Liedekerke via clamav-users
antivirus_t But I presume that's in fact a little too much. There's no real doc found at clamav concerning selinux either, so could someone shed a light on this? Franky ___ clamav-users mailing list clamav-users@lists.clamav

[clamav-users] ScanOnAccess: ... (null) FOUND

2019-03-13 Thread Franky Van Liedekerke via clamav-users
2018 main.cvd It seems the main.cvd is old, but I haven't run freshclam against this yet. Could that be the reason? Since it is an internal server, I first need to setup a proxy etc ... for freshclam to work. With friendly regards, Franky ___ cl

[Clamav-users] gfi.com iframe tests

2005-01-17 Thread Franky Van Liedekerke
I a bit off here? Anybody can enter their email at the above link to get a sample of these 2 so-called exploits. with friendly regards, Franky ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] New filtering system using ClamAV

2003-08-29 Thread Franky
eing able to disable this for specific virusses). Maybe for the future? But still ... a great product! Franky --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf __

Re: [clamav-users] virus in MIME

2003-07-11 Thread Franky Van Liedekerke
Hi, If you want to do mailfile checking, with mime attachments and such, it's best to let another tool (like amavisd-new) do the unpacking and breaking up of the mail first, and let clamav scan the resulting files. Franky On Fri, 11 Jul 2003 11:25:26 +0200 Jordi Escolá (Desarrollo) &l

Re: [clamav-users] viruses.db

2003-06-30 Thread Franky Van Liedekerke
On Mon, 30 Jun 2003 17:36:20 +0200 Stephan von Krawczynski <[EMAIL PROTECTED]> wrote: > On Mon, 30 Jun 2003 17:16:28 +0200 > Franky Van Liedekerke <[EMAIL PROTECTED]> wrote: > > > Hi all, > > > > I just downloaded the new viruses.db file (June 30th) on t

[clamav-users] viruses.db

2003-06-30 Thread Franky Van Liedekerke
733c2f0577fbffd7031f3e005245504c41434546494c384c470effb12d764e414d09262 002004745 5450415353d8b785ff574f5244 Is this intentional? I would believe a list of viruses is supposed to grow, not decrease ... with friendly regards, Franky