Re: [Clamav-users] Milter

2005-04-25 Thread Peter J. Holzer
almost always is with viruses). IMO milter (and similar techniques - I use qpsmtpd) are vastly superior for this reason, and should be used where possible (virus checking is easy - spam detection is a lot harder, because you need per-user configurations on the MX). hp -- _ | Peter J.

Re: [Clamav-users] initial configure

2005-01-10 Thread Peter J. Holzer
well, today they probably use MIME) and send everything to the email address you specified (great way to fill fill somebody's mailbox with all the linux kernels since 0.10 :-). hp -- _ | Peter J. Holzer| Je höher der Norden, desto weniger wird |_|_) | Sysadmin WSR

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-10 Thread Peter J. Holzer
On 2005-01-10 17:44:26 +0300, Arkady V.Belousov wrote: > 8-???-2005 12:18 [EMAIL PROTECTED] (Peter J. Holzer) wrote to ClamAV users ML > : > > >> >> Infected machine _isn't_ _rare_ situation. > >> PJH> 1) I think real viruses which infect other progra

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-08 Thread Peter J. Holzer
On 2005-01-08 11:24:49 +, Brian Morrison wrote: > On Sat, 8 Jan 2005 12:18:27 +0100 in [EMAIL PROTECTED] > "Peter J. Holzer" <[EMAIL PROTECTED]> wrote: > > 2) You don't need freshclam to do the updates, but if you update > > manually, you also hav

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-08 Thread Peter J. Holzer
On 2005-01-08 03:06:56 +0300, Arkady V.Belousov wrote: > 7-???-2005 21:32 [EMAIL PROTECTED] (Peter J. Holzer) wrote to ClamAV users ML > : > > >> Infected machine _isn't_ _rare_ situation. > PJH> No, but > PJH> 1) I think real viruses which inf

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Peter J. Holzer
is pretty obvious that ClamAV was not designed to protect the machine it is running on, but to protect other machines. Like any good tool, ClamAV is used for tasks for which it wasn't designed. However, if you do that, you must be prepared to invest a little work by yourself, and can't e

Re: [Clamav-users] ClamAV should not try to detect phishing andother social engineering attacks

2004-11-16 Thread Peter J. Holzer
heck if a mime entity is multipart/alternative with a text part: If it is, replace it with the text part. Otherwise, if it is HTML, filter it through w3m, lynx, or some other html to text converter. Pass through other content-types unaltered or strip them according to site policy. I guess a plugin

Re: [Clamav-users] Re: Re: Windows port ?

2004-09-25 Thread Peter J. Holzer
On 2004-09-24 11:59:36 +0200, Lionel Bouton wrote: > Peter J. Holzer wrote the following on 09/23/2004 12:53 PM : > > >What Remi can do: > > > >1) Write a program (not using any ClamAV source code) which can read the > > ClamAV database (he did that already). This d

Re: AW: [Clamav-users] Re: Re: Re: Windows port ?

2004-09-25 Thread Peter J. Holzer
of packing and unpacking is IMHO similar to tarring and untarring C source files). If they the generate the database from a different source, which cannot be trivially reconstructed from the distributed database, it is not source code. In the latter case, the database cannot be covered by the GPL (yo

Re: [Clamav-users] Re: Re: Windows port ?

2004-09-24 Thread Peter J. Holzer
h your program. This is also perfectly legitimate. Now the question for the ClamAV developers is: Do they want the users of Remi's program to download the db themselves or do they want to allow Remi to distribute the db with his program. The end result in both cases is the same.

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-10 Thread Peter J. Holzer
g NNTP instead of SMTP? Then the clamav server doesn't have to push out those messages to everybody but only to its neighbours which will distribute it further. hp -- _ | Peter J. Holzer| Je höher der Norden, desto weniger wird |_|_) | Sysadmin WSR | überhaupt gesprochen,