Re: [clamav-users] [EXTERNAL EMAIL] - Re: ClamAV.0.103.11 as clamav-0.103.11-1.aix7.1.ppc.rpm fails to install on AIX7.2 on non AIX dependencies like vim

2024-05-07 Thread Rödlach Martin via clamav-users
Those are maybe not the best instructions, but should help a little. Thanks Martin Von: Brendan Walsh Gesendet: Dienstag, 7. Mai 2024 00:22 An: Rödlach Martin ; ClamAV users ML Cc: Brendan Walsh Betreff: RE: [clamav-users] [EXTERNAL EMAIL] - Re: ClamAV.0.103.11 as clamav-0.103.11-1.aix7.1.pp

Re: [clamav-users] [EXTERNAL EMAIL] - Re: ClamAV.0.103.11 as clamav-0.103.11-1.aix7.1.ppc.rpm fails to install on AIX7.2 on non AIX dependencies like vim

2024-05-06 Thread Rödlach Martin via clamav-users
/discussion/clamav-on-aix#bmd0e56c0c-17ae-4f68-96b1-9125ce60aa56 One of the toolbox guys replied with this link - maybe this helps because it is the same topic: https://community.ibm.com/community/user/power/discussion/issue-with-dnf-updte-nothing-provides-libcryptoalibcryptoso11-needed-by-krb5-libs-1

[clamav-users] Antwort: Fwd: Error while scanning directory other than /home directory

2020-12-29 Thread Martin Rödlach via clamav-users
ata? Which release of clamav are You using? Thanks Martin Von:"Shivananda Shiragavi via clamav-users" An: clamav-users@lists.clamav.net Kopie: "Shivananda Shiragavi" Datum: 29.12.2020 11:13 Betreff:[clamav-users] Fwd: Error while scanning directory other

[clamav-users] clamAV OnAccess support for IBM AIX

2020-12-16 Thread Martin Rödlach via clamav-users
o use them." - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - So it seems there are two API's considerable. The question is now, if one of the clamAV developers could imagine to implement the feature using this way. Thanks a lot and keep up the good work.

Re: [clamav-users] (Solved) Problem clamd and clamonacc V 0.102 - Client disconnected (FD 10)

2020-04-30 Thread Fuerstenau, Martin via clamav-users
root. Martin Fürstenau Senior System Support Engineer | ICS OP INF 3 Canon Porduction Printing Germany Canon Production Printing Germany GmbH & Co. KG P.O. Box 1260, 85581 Poing Siemensallee 2, 85586 Poing Germany | www.cpp.canon Canon Production Printing Germany GmbH & Co. KG. The comp

Re: [clamav-users] Problem clamd and clamonacc V 0.102 - Client disconnected (FD 10)

2020-04-30 Thread Fuerstenau, Martin via clamav-users
question was if anybody know what this message means. I'm administrating Unix for more than 30 years and Linux from kernel 1.x. So there is a lot of experience but if I don't know what a message means I can only guess. Martin Canon Production Printing Germany GmbH & Co.

[clamav-users] Problem clamd and clamonacc V 0.102 - Client disconnected (FD 10)

2020-04-29 Thread Fuerstenau, Martin via clamav-users
Hi, need some help. When clamd is terminated while clamonacc is active clamonacc can later not connect to clamd even when both services were restarted in the correct order. I get a Client disconnected (FD 10) Anybody any idea? Martin Fürstenau Senior System Support Engineer | ICS OP INF 3

Re: [clamav-users] Clam installation on Solaris 11

2020-02-26 Thread Martin Preen
S/CXXFLAGS="-O3" Some ClamAV version failed to build with the Solaris compiler, Thus I'm using gcc, but I haven't tested it lately. Regards, Martin smime.p7s Description: S/MIME Cryptographic Signature ___ clamav-users mailing list

Re: [clamav-users] After 0.100.1 Update, clamd crashes

2018-07-31 Thread Fraenzl, Martin
Thanks, Vladislav for the quick reply! That´s exactly the problem, deleting *.yar and *.yara solved it! Cheers, Martin -Ursprüngliche Nachricht- Von: clamav-users Im Auftrag von Vladislav Kurz Gesendet: Dienstag, 31. Juli 2018 11:22 An: clamav-users@lists.clamav.net Betreff: Re

[clamav-users] After 0.100.1 Update, clamd crashes

2018-07-31 Thread Fraenzl, Martin
r the first connect from exim to the clamd socket, clamd crashes. clamd /var/run/clamav/clamd.sock : unable to read from socket (EOF) ps -afe | grep clam clamav 19596 1 0 10:32 ?00:00:00 /usr/bin/freshclam -d Did anyone have the same issus with the update. Cheers, Martin Di

Re: [clamav-users] How the bad signature happened - conjecture (was

2018-01-26 Thread Martin Gagne
? =20 Thanks ! =20 =20 Best regards, Martin Gagne Martin Gagne | Senior System Administrator Phone: HYPERLINK "tel:+14182639440"+14182639440 | Mobile: HYPERLINK "tel:+1= 4184468447"+14184468447=20 Oracle Production Engineering & Operations - Service OPS Application Admini=

Re: [clamav-users] Tooooo sloooooooow startup clamd on Solaris SPARC

2016-01-27 Thread Martin Preen
these files are bad. I assume some Solaris/SPARC-related performance problem with some type of signatures, but I don't know exactly. If someone finds a solution for this, I'm also interested... Regards, Martin ----

[clamav-users] freshclam: warnings

2015-06-30 Thread Paul Martin
Hello, I just update clamAV from 0.97.2 with new version 0.98.7 this morning and got many warnings with freshclam (see below) How to remove warnings ? Should I remove /var/lib/clamav/daily.cld and /var/lib/clamav/main.cld ? - [root

[clamav-users] malware Html.Exploit.CVE_2015_0045

2015-05-29 Thread Paul Martin
Hello, I have many false positive when clamav detects "malware Html.Exploit.CVE_2015_0045", what can I do to stop these false positive ? Thanks, Paul ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clam

Re: [clamav-users] ClamAV®: ClamAV 0.98.4rc1 is now available!

2014-05-16 Thread Martin Preen
"crypto.c", line 834: undefined symbol: X509_VERIFY_PARAM "crypto.c", line 834: undefined symbol: param "crypto.c", line 834: syntax error before or at: = "crypto.c", line 860: warning: implicit function declaration:

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-12 Thread Martin Preen
d patches, the errors are back again. So it looks like a problem with the build system and the patch is (at least partly) compiler specific. Regards, Martin ------ Martin Preen, Universität Freiburg, Institut für Informatik Georges-Ko

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-09 Thread Martin Preen
y about some compiler specific code in ClamAV (since 0.98) causing this bug. Maybe there is some other "bigger" problem. Regards, Martin -- Martin Preen, Universität Freiburg, Institut für Informatik Georges-Koehler-Alle

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Martin Preen
Shawn Webb wrote: On Thu, May 8, 2014 at 11:13 AM, Martin Preen < pr...@informatik.uni-freiburg.de> wrote: Hello, after building 0.98.3 on Solaris 10 (Sparc) I got some error messages from freshclam. The first run: ERROR: Corrupted database file /var/clamav/main.cvd: Can't allo

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Martin Preen
Shawn Webb wrote: On Thu, May 8, 2014 at 11:13 AM, Martin Preen < pr...@informatik.uni-freiburg.de> wrote: Hello, after building 0.98.3 on Solaris 10 (Sparc) I got some error messages from freshclam. The first run: ERROR: Corrupted database file /var/clamav/main.cvd: Can't allo

[clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Martin Preen
0.98 there was never any memory problem or similar messages. How can one resolve this ? Regards, Martin ------ Martin Preen, Universität Freiburg, Institut für Informatik Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germ

Re: [clamav-users] Clam in a very low memory environment?

2014-03-08 Thread Martin Hepworth
can you split this to several hosts as doing SA on a reasonable mail volume can require quite a bit of memory anyway -- Martin Hepworth, CISSP Oxford, UK On 7 March 2014 17:13, Thomas Cameron wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Howdy! > > I am takin

Re: [clamav-users] 0.98 and PUA

2013-10-02 Thread Martin Hepworth
Joel If there's anything I can do to help out here let me know.. -- Martin Hepworth, CISSP Oxford, UK On 2 October 2013 14:14, Joel Esler wrote: > Martin, > > I’ll ask someone to take a look at it. > > > On Oct 2, 2013, at 5:36 AM, Martin Hepworth wrote: > > &

Re: [clamav-users] 0.98 and PUA

2013-10-02 Thread Martin Hepworth
404's -- Martin -- Martin Hepworth, CISSP Oxford, UK On 30 September 2013 16:23, Joel Esler wrote: > Ah, that was a blog post from 2007 from our blog (http://blog.clamav.net) > > I see, okay. Yes, the functionality is quite useful, and the most current > docs we have on t

Re: [clamav-users] 0.98 and PUA

2013-09-30 Thread Martin Hepworth
Joel this one when you search on the g-search for clamav pua.. http://www.clamav.net/lang/en/2007/09/03/detection-of-potentially-unwanted-applications/ Martin -- Martin Hepworth, CISSP Oxford, UK On 30 September 2013 14:22, Joel Esler wrote: > On Sep 30, 2013, at 6:03 AM, Martin Hepwo

Re: [clamav-users] 0.98 and PUA

2013-09-30 Thread Martin Hepworth
Thanks was looking at the PUA page on the main www site and it's still got the 2007 advice of "here be monsters tread carefully" ;-) -- Martin Hepworth, CISSP Oxford, UK On 30 September 2013 11:01, Al Varnell wrote: > On Sep 30, 2013, at 1:37 AM, Martin Hepworth wrote: &g

[clamav-users] 0.98 and PUA

2013-09-30 Thread Martin Hepworth
play is, and whether its safe to use now? -- Martin Hepworth, CISSP Oxford, UK ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml

Re: [clamav-users] Old daily.cld in mirrors?

2013-05-12 Thread Martin Procházka
nality level: 63 Builder: neo Verification OK. Seems it has been fixed. Yes, it has been fixed, everything is OK nown. Thank you. -- S pozdravem Martin Procházka soLNet, s.r.o. http://www.solnet.cz/ ___ Help us build a comprehensive ClamAV guide: visi

[clamav-users] Old daily.cld in mirrors?

2013-05-10 Thread Martin Prochazka
se/update? With regards, -- Martin Procházka soLNet, s.r.o. http://www.solnet.cz/ ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] clamd unexpected termination: "... Failure in bytecode testmode"

2011-10-24 Thread Martin Preen
loaded (1159407 signatures) Thank you Edwin ! Forced --reload works for me too... now waiting for the unprovoked selftest ;-) Thanks again! Yup -- all good here. For me too. Thanks. Martin --- Martin Preen, Universität Freiburg, Instit

Re: [clamav-users] clamd unexpected termination: "... Failure in bytecode testmode"

2011-10-24 Thread Martin Preen
on 150 and it crashed again. Regards. Martin ------- Martin Preen, Universität Freiburg, Institut für Informatik Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germany phone: ++49 761 203-8250 pr...@informatik.uni-freiburg.de

[clamav-users] false positives

2011-04-25 Thread Martin Sager
Hello, We've got reports of lots of false positives for PUA.PDF.OpenActionObject. Printers, scanners and such that are scanning documents and sending them via email are hitting this particular signature. Martin Sager University of Michigan ___

Re: [clamav-users] Database reload improvement

2011-03-11 Thread Martin Preen
tested separately. Hmm, Martin Preen has quite a few 3rdparty DBs (in clamconf output), maybe those cause the load-time slowdown? Is it any faster without them? Yup, thats it. Without these ndb files and on this old HW the reload time goes from approx 90 sec to approx 35 sec. Obvoiusly I have to

Re: [clamav-users] Database reload improvement

2011-03-11 Thread Martin Preen
n that system (because of the library/package/path dependencies). Greetings, Martin ------- Martin Preen, Universität Freiburg, Institut für Informatik Georges-Koehler-Allee 52, Raum EG-006, 79110 Freiburg, Germany phone: ++49 761 203

[clamav-users] Optimization-CFLAGS [Database reload improvement]

2011-03-11 Thread Martin Preen
Martin Preen wrote: Török Edwin wrote: On 2011-03-10 21:58, Peter Bonivart wrote: On Thu, Mar 10, 2011 at 8:52 PM, Martin Preen wrote: Platform information uname: solaris2.10 OS: solaris2.10, ARCH: sparc, CPU: sparc Full OS version:Solaris 10 1/06

Re: [clamav-users] Database reload improvement

2011-03-10 Thread Martin Preen
Török Edwin wrote: On 2011-03-10 21:58, Peter Bonivart wrote: On Thu, Mar 10, 2011 at 8:52 PM, Martin Preen wrote: Platform information uname: solaris2.10 OS: solaris2.10, ARCH: sparc, CPU: sparc Full OS version:Solaris 10 1/06 s10s_u1wos_19a SPARC

Re: [clamav-users] Database reload improvement

2011-03-10 Thread Martin Preen
Török Edwin wrote: On 2011-03-10 21:39, Martin Preen wrote: Török Edwin wrote: On 2011-03-10 19:36, Martin Preen wrote: Török Edwin wrote: On 2011-03-10 19:25, Vivien Raoul wrote: Hello, I used to post here a few months ago about the engine's memory consumption. The newer versions gi

Re: [clamav-users] Database reload improvement

2011-03-10 Thread Martin Preen
Török Edwin wrote: On 2011-03-10 19:36, Martin Preen wrote: Török Edwin wrote: On 2011-03-10 19:25, Vivien Raoul wrote: Hello, I used to post here a few months ago about the engine's memory consumption. The newer versions give me satisfaction, but during the process of database reload (

Re: [clamav-users] Database reload improvement

2011-03-10 Thread Martin Preen
setting to reduce this time ? Regards, Martin To explain the situation quickly, I use a gateway using HAVP with ClamAV, which has 128Mo of RAM. I launch freshclam at night, but still this point can be annoying. Reading the code, I saw that the operation of database reload is synchronous : during th

Re: [Clamav-users] Unknown error code ERROR on debian lenny volatile too

2010-10-12 Thread Martin Zobel-Helas
see this is upstream bug 2296[1], which has been cherry-picked from git and has been fixed in debian-volatile with upload 0.96.3+dfsg-2~volatile1 Cheers, Martin [1] https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2296 -- Martin Zobel-Helas | Debian System Administrator Debi

[Clamav-users] Malware signatures updates

2009-05-04 Thread Fabio De Martin
Hi, We use clamav on about 20 different mail servers and our technical support people collects phising urls and malware files received by our users. All collected files are tested on VirusTotal and other free services to certify if the file is infected. When they find a file infected other antivir

Re: [Clamav-users] Clamav 0.91.1 for Debian Sarge?

2007-07-24 Thread Martin Zobel-Helas
compiling and should be soon available via volatile.debian.org. Greetings Martin -- [EMAIL PROTECTED] /root]# man real-life No manual entry for real-life ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.c

Re: [Clamav-users] Segmentation Fault in 0.91

2007-07-13 Thread Martin Preen
Tomasz Kojm wrote: > On Fri, 13 Jul 2007 10:50:48 +0200 > Martin Preen <[EMAIL PROTECTED]> wrote: > >>Hello, >>there is a Segementation Fault with clamscan 0.91 (Solaris 10 >>on sparc, compiled with gcc 4.11). It seems to occur sometimes >>when a virus is

[Clamav-users] Segmentation Fault in 0.91

2007-07-13 Thread Martin Preen
3, 0x01D737AE, 98084) = 0 lseek(3, 0, SEEK_SET) = 0 Incurred fault #6, FLTBOUNDS %pc = 0xFF030C90 siginfo: SIGSEGV SEGV_MAPERR addr=0x Received signal #11, SIGSEGV [default] siginfo: SIGSEGV SEGV_MAPERR addr=0x0

Re: [Clamav-users] ClamAV installation is OUTDATED!

2007-03-05 Thread Martin Zobel-Helas
hese applications would just break. > > Sorry, but this takes time. > > > > Excpect an update of ClamAV on debian-volatile within 24h from now. > > > > Greetings > > Martin Greetings Martin -- [EMAIL PROTECTED] /root]# man real-life No manual

Re: [Clamav-users] ClamAV installation is OUTDATED!

2007-03-05 Thread Martin Zobel-Helas
backport a few applications in Debian Sarge to the new version of clamav. Otherwise these applications would just break. Sorry, but this takes time. Excpect an update of ClamAV on debian-volatile within 24h from now. Greetings Martin debian-volatile team member -- [EMAIL PROTECTED] /root]# man real

Re: [Clamav-users] Clamav-milter Segmentation fault

2006-12-06 Thread Martin Hillier
ault On Wed, 2006-12-06 at 14:33 +, Martin Hillier wrote: Hi, I have a problem with clamav-milter crashing running: clamav-milter -D -lo /var/run/clamav/clmilter.sock -q -m 10 -x 9 When i send a fairly empty email (just headers) or any email i get the following: LibClamAV debug:

[Clamav-users] Clamav-milter Segmentation fault

2006-12-06 Thread Martin Hillier
) Thanks Martin. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] public key for clamav

2006-11-05 Thread Martin Zobel-Helas
> gpg: Can't check signature: public key not found have a look on http://www.clamav.net/team.html, every developer is listed there, with his PGP key. IIRC Key ID 985A444B belongs to Tomasz Kojm. Greetings Martin -- [EMAIL PROTECTED] /root]# man real-life No

[Clamav-users] Re: Clamav 0.88.4 for debian?

2006-08-22 Thread Martin
Martin Zobel-Helas wrote: Please read http://www.clamav.net/binary.html#pagestart If you are running clamav on a productive machine, you shouldn't mix stable and testing unless you REALLY know what you are doing. Use volatile.debian.net for that purpose. The current release policy of Deb

Re: [Clamav-users] Re: Clamav 0.88.4 for debian?

2006-08-22 Thread Martin Zobel-Helas
Hi Martin, On Tue, Aug 22, 2006 at 11:09:36AM +0200, Martin <[EMAIL PROTECTED]> wrote: > I don't have that particular list in my source file. But i've getting > updates prior to this one before through "testing" : Please read http://www.clamav.net/binary.html#pa

[Clamav-users] Re: Clamav 0.88.4 for debian?

2006-08-22 Thread Martin
Martin Zobel-Helas wrote: Hi, http://lists.debian.org/debian-volatile-announce/debian-volatile-announce-2006/msg00011.html [EMAIL PROTECTED]:~$ apt-cache policy clamav clamav: Installed: 0.88.4-0volatile1 Candidate: 0.88.4-0volatile1 Version Table: *** 0.88.4-0volatile1 0 500

Re: [Clamav-users] Clamav 0.88.4 for debian?

2006-08-22 Thread Martin Zobel-Helas
Hi Martin, On Tue, Aug 22, 2006 at 10:17:16AM +0200, Martin <[EMAIL PROTECTED]> wrote: > Hi, > > Is it just me, or is 0.88.4 for Debian not yet available through apt? http://lists.debian.org/debian-volatile-announce/debian-volatile-announce-2006/msg00011.html [EMAIL PROTECTE

[Clamav-users] Clamav 0.88.4 for debian?

2006-08-22 Thread Martin
Hi, Is it just me, or is 0.88.4 for Debian not yet available through apt? Thanks in advance. / Martin ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] clamstat v .36 RE: Perl script for sorting log virus entries - version 0.36

2005-06-16 Thread Ben Martin
Where can I get a copy of this script? clamstat v .36 Author: Brett Simpson Date: 2005-01-31 13:30 UTC To: clamav-users CC: gibonsr, rippeld Old-Topics: [Clamav-users] Perl script for sorting logs entries - version 0.30 Subject: [Clamav-users] Perl script for sorting log virus entries - version

Re: [Clamav-users] clamd segfaulting as of about thursday

2005-05-02 Thread Martin R Morales
ults. I'm now a happy Admin again. Now I just need to wait for all of the queue'd up mail to finish delivering and we should be good. ~In any case, that is my experiences from this weekend - so much for seeing "Hitchhikers Guide to The Galaxy"; but duty called. Hope this helps

RE: [Clamav-users] Virus naming

2004-12-17 Thread Carnegie, Martin
>> >> on 12/17/04 1:09 PM, Carnegie, Martin at [EMAIL PROTECTED] wrote: >> >> Does your e-mail system have the means of using RTBL (Real Time Black List) >> servers? If so you might want to try that. Our spam load decreased >> remarkably after we imp

RE: [Clamav-users] Virus naming

2004-12-17 Thread Carnegie, Martin
>Pardon, I didnt mean to imply that clamav doesnt provide the name of the >virus as well. The point i was trying to make was that clamav itself >doesnt know or care about what is actually done after the virus is >detected. That part is left up to something else (qmail-scanner in my >case).

[Clamav-users] Virus naming

2004-12-17 Thread Carnegie, Martin
Martin ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] [OT] Re: KDE/MS patent and prior art (Was: Idea for more timely virusdb updates)

2004-08-15 Thread Martin Konold
> IANAL... but wouldn't that count as 'prior art' ? No, basically MS patented the obvious addition not mentioned in the publically posted email. Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Phys

Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}

2004-08-13 Thread Martin Konold
y the hour. Please consider another value than 0. What about 17 or 41 as the value for the minute? Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Nobelstrasse 15, 70569 Stuttgart, Germany fon: 0711 67400963, f

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-13 Thread Martin Konold
person had a UI idea and presented it on a KDE ml. KDE implemented this idea in the following months but MS took the idea, added the obvious and patented it :-(. MS even cites the KDE ml as the source of the initial idea.) Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Er

Re: [Clamav-users] daily.db.clamav.or.id : clamav db update via DNS

2004-08-13 Thread Martin Konold
;) It uses at least 3 orders of magnitude more resources and of course does also not scale that well. Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Nobelstrasse 15, 70569 Stuttgart, Germany fon: 0711

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-12 Thread Martin Konold
s a bug in the resolver or DNS server code somewhere of course you can attack systems using malicious DNS records. There have been several examples in the past. I will stop now in this thread because we are becoming seriously off topic. Regards, -- martin Dipl.-Phys. Martin Konold e r f

Re: [Clamav-users] freshclam security

2004-08-11 Thread Martin Konold
ty wise to do automatic cron based freshclam updates by default. http://kolab.org/pipermail/kolab-devel/2004-August/001662.html I therefore wanted to know all security precautions. Sofar I am happy about everything. Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Fr

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-11 Thread Martin Konold
rent: - slowly changing high number of potentially very big files distributed from many sources to many destinations. Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Nobelstrasse 15, 70569 Stuttgart, Germany fon: 0

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-11 Thread Martin Konold
ope - Effort for queuing many emails (much copying on the server) - No caching on the intermediate servers (only proxying) - Handling bounces etc. - Doing many DNS lookups Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und P

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-11 Thread Martin Konold
ly have some reasonable TTL (time to live) and which can deal with the loose coherency of DNS is totally fine. Abusing the DNS to directly transfer files etc is not appropriate as the DNS infrastructure is not ready for such kind of "abuse". Regards, -- martin Dipl.-Phys. Martin Konold

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-11 Thread Martin Konold
use and its security policies using http for the download is most appropriate especially when using caching upstream http proxies. > Especially when using PIM sparse. Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-11 Thread Martin Konold
: The protocol ideas you are proposeing are putting _more_ load on the DNS(*) than the direct DNS idea. (*) it is save to assume that your protocol ideas don't use static ip numbers but use DNS to do gethostbyname() resolving. Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Er

Re: AW: [Clamav-users] freshclam security

2004-08-11 Thread Martin Konold
Am Mittwoch, 11. August 2004 09:01 schrieb Dörfler Andreas: Hi, > thats why the feature/serials included ... Excellent! Does the format also contain an expiry date? Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenie

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-11 Thread Martin Konold
nd the most efficient solution as it provides incoherent caching uses udp and reuses a widly available infrastructure. Regards, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Nobelstrasse 15, 70569 Stuttgart, Germany fon: 071

Re: [Clamav-users] freshclam security

2004-08-10 Thread Martin Konold
Am Mittwoch, 11. August 2004 01:58 schrieb Tomasz Kojm: Hi, > > Is there any "serial number" feature? > > Yes, there is. And I can assume that freshclam looks at the serial number and never does a downgrade?! Yours, -- martin Dipl.-Phys. Martin Konold e r f r a k o n E

Re: [Clamav-users] freshclam security

2004-08-10 Thread Martin Konold
ot;replaying" old patterns? Is there any "serial number" feature? Yours, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Nobelstrasse 15, 70569 Stuttgart, Germany fon: 0711 6740096

[Clamav-users] freshclam security

2004-08-10 Thread Martin Konold
Hi, I am wondering how authenticity and integrity of clamav updates is handled. Any pointer to some documentation available? Yours, -- martin Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Nobelstrasse 15, 70569 Stutt

[Clamav-users] Warning messages are queued after upgraded to 0.75.1

2004-08-05 Thread Martin Chan
Dear all, After upgraded to 0.75.1, the warning messages "Virus intercepted" are queued on the mqueue, is it configurable in clamav.conf? Thanks, Martin Chan --- This SF.Net email is sponsored by OSTG. Have you noticed the

[Clamav-users] clamdscan and clamscan behave different on mailfiles?

2004-08-01 Thread Martin Koniczek
hi, while running some tests with clamassassin i noticed inconsistencies between mailscanning with clamscan and clamdscan. test subject is a Worm.Klez.H infected mail extracted from a well-known-and-hated mua (and then modified by different scripts, formail, procmail etc. for internal testcases).

[Clamav-users] client-server config

2004-05-26 Thread Martin R Morales
ss. TCPSocket 3310 # TCP address TCPAddr 10.10.10.200 Any help or pointing me in the right direction would be apprieciated. Thanks, ~Martin --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market.

[Clamav-users] SomeFool.Q passed the clamscan & clamav-milter

2004-05-09 Thread Martin Chan
Today I found a virus passed through the clamav-milter, and I tried to manual scan it with "clamscan --mbox", but it passed too. I'm sure my virus definition is updated and I'm using clamscan / ClamAV version 0.70 Scan in "Online scanner" does detect it: /tmp/phpv4Ottk: Worm.SomeFool.Q FOUND

[Clamav-users] undetected virus by clamav

2004-04-06 Thread Martin Gruss
I have 3 viruses found on my harddrive which not detected by clamav other scanner like fprot or mcaffee detect the virus as 1.ex# Found the MultiDropper-IY trojan !!! 2.ex# Found the W32/Spybot.worm.gen.d virus !!! 3.ex# Found the IRC/Flood.dj trojan !!! I have scan the files wi

Re: [Clamav-users] Embedded EICAR handling

2004-03-15 Thread Martin A. Brooks
characters, and is exactly 68 bytes long:" If anyone's interested, I've put a copy of this text file here: http://www.clues.ltd.uk/nai.txt Regards Martin A. Brooks, Clues Ltd. http://www.clues.ltd.uk/ --- This SF.Net email i

[Clamav-users] Embedded EICAR handling

2004-03-15 Thread Martin A. Brooks
nions. Regards Martin A. Brooks, Clues Ltd. http://www.clues.ltd.uk/ --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundame

[Clamav-users] missed test signatures

2004-03-03 Thread Martin A. Brooks
, eicarblankfolding, eicarlongboundary, eicarpartial, binhex, binhexmime and clsid I'm making no judgement as to the value, or not, of these tests. I simply thought it might be useful to bring this information to the attention of the group. Regards Martin A. Brooks, Clues Ltd. http://www.clues.l

Re: [Clamav-users] password-protected Worm.Bagle.F

2004-03-01 Thread Martin Hermanowski
blocking encrypted zip files or (better) educating users (as they have to do much more than just clicking) are the only options. LLAP, Martin signature.asc Description: Digital signature

[Clamav-users] Re: clamdscan doesn't find virus while clamscan does

2003-11-27 Thread Martin Schitter
On Wed, Nov 26, 2003 at 09:28:26PM +0100, Martin Schitter wrote: > > i didn't see any change in this behavior after an update from 0.60 to 0.65 well -- after some general update of my servers (libc etc.) it finally works! but i still can't tell you the exact reason for the

[Clamav-users] clamdscan doesn't find virus while clamscan does

2003-11-26 Thread Martin Schitter
l in question from: http://bgsz03.uni-graz.at/~mash/vir-part.gz thanks! martin --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE

RE: [Clamav-users] Clean Viruses?

2003-11-04 Thread Martin Arendtsen
think > it's fair. > You do realize that what you trade with the developers will > be available to everyone, no? > > > Old school virus-coding rocks couse the old "school boys" > (which codes > > for C64, Apple2 and so on) are coding without a > > mass-destruction-instruction into the virus/worm ... > Only idiots writes viruses. > Indeed! /Martin smime.p7s Description: S/MIME cryptographic signature

RE: [Clamav-users] Clean Viruses?

2003-11-04 Thread Martin Arendtsen
ce documents. Now I have used clamav as for e-mail the last month and I think it's perfekt. Now I will use on my filserver as well. But I do not need Clamav to clean virus'. My policy is: "Find a file with a virus and it will be deleted!" That's it! No need for cleaning. Just my opinion. /Martin smime.p7s Description: S/MIME cryptographic signature

Re: [Clamav-users] Duplicates in viruses.db?

2003-10-30 Thread Martin Koniczek
>thanks for the report. There will be general database cleanups at the >end of the year when we will be moving the current signatures to a new >database format (cvd is only a container file). will there also be "date added" and "last change" or similiar fields? well, this is not really needed in

[Clamav-users] clamav with clamav milter

2003-08-23 Thread Martin J. Green
something dastardly has happened to my box. It worked before and suddenly I checked back on the box and mail isn't getting delivered. As far as I can see from logs, sendmail passes it to clamav via milter which then times out and apparently loses it. It worked perfectly before, the only thin

[Clamav-users] Clamscan: how to tell which message number in an mbox?

2003-08-21 Thread Martin-Éric Racine
hole inbox file; I need clamscan to be precise as to which e-mail message contains the virus, so that I can simply delete that specific message. Giving the offending message's Subject line would be enough to at least locate it. Is this possible and how? Thanks! -- Martin-Éric Racine http://www