[clamav-users] How does one Obtain ClamAV Linux Anvi-Virus Database File Updates for Systems not Connected to the internet

2024-03-25 Thread McCarthy, John D. [US-US] via clamav-users
connect to download the latest signature files? I am running Red Hat Enterprise 7 and 8 as well as CentOS 7 and 8. A million thanks, John Meaning does not lie in the work but instead in what you bring to the work John D. McCarthy | Leidos CISSP, MCSE, Security +, CCNA Information Systems Security

Re: [clamav-users] Unable to download daily.cvd after upgrade to RHEL 8

2024-03-07 Thread John Paul Guay via clamav-users
___ Thanks, John On Thu, Mar 7, 2024 at 3:20 PM Micah Snyder (micasnyd) via clamav-users < clamav-users@lists.clamav.net> wrote: > It feels like the proxy may not be forwarding freshclam​'s HTTP > User-Agent header. We use that header to block unsupported software (like >

[clamav-users] Unable to download daily.cvd after upgrade to RHEL 8

2024-03-07 Thread John Paul Guay via clamav-users
tps://database.clamav.net/ Resolving proxy.x.xxx-xxx.net (proxy.x.xxx-xxx.net)... 7.xx.xx.xx Connecting to proxy.x.xxx-xxx.net(proxy.x.xxx-xxx.net)| 7.xx.xx.xx |:8080... connected. Proxy request sent, awaiting response... 403 Forbidden 2024-03-07 13:26:55 ERROR 403: Forbi

Re: [clamav-users] [ext] Re: parallel processes fail at startup when clamd is running

2022-11-29 Thread JOHN URBAN via clamav-users
Not quite as easy to set up as I made it sound, as lots of pieces and people involved but that is exactly one of the tests we hope to run today; thanks! > On 11/29/2022 2:31 AM Ralf Hildebrandt via clamav-users > wrote: > > > * JOHN URBAN via clamav-users : > > > Do

Re: [clamav-users] parallel processes fail at startup when clamd is running

2022-11-28 Thread JOHN URBAN via clamav-users
to start up when the scan is progress fail to start properly. Memory is not a problem; all nodes have >128GB of memory. > On 11/28/2022 9:53 AM G.W. Haywood via clamav-users > wrote: > > > Hi there, > > On Mon, 28 Nov 2022, JOHN URBAN via clamav-users wrote: >

Re: [clamav-users] parallel processes fail at startup when clamd is running

2022-11-28 Thread JOHN URBAN via clamav-users
> On 11/28/2022 11:23 AM Andrew C Aitchison via clamav-users > wrote: > > > On Mon, 28 Nov 2022, JOHN URBAN via clamav-users wrote: > > > We are experiencing a large number of MPI jobs failing indicating > > the fabric is unavailable when the s

[clamav-users] parallel processes fail at startup when clamd is running

2022-11-28 Thread JOHN URBAN via clamav-users
We are experiencing a large number of MPI jobs failing indicating the fabric is unavailable when the scans are running. Early in the investigation so not sure if locking, timing, response time or other factors are involved, but I wanted to ask a quick gernal question to see if this is a known is

[clamav-users] (no subject)

2022-09-06 Thread John ff
⁣Get TypeApp for Android ​___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs

[clamav-users] Starting Clamd

2022-08-17 Thread John
sr/sbin' '--prefix=/usr/--sysconfdir=/etc/clamav/' sizeof(void*) = 8 Engine flevel: 125, dconf: 125 # I am starting clamd on the command line with clamd -c /etc/clamvav/clamd The reference to --sysconfdir is certainly odd I found an old clamd binary that now seems to work. We wil

[clamav-users] Starting clamd

2022-08-16 Thread John
ons on /var/run/clamav with no noticeable affect. In the past I had to change ownership to Debian-exim but that does not seem sufficient. What should I do next? I get the same error for a couple of versions, 103 and 104 I think. ==John ffitch ___ c

[clamav-users] Scan reports

2022-05-31 Thread John Paul Guay via clamav-users
Hello, I’m new to ClamAV and I need help to fix our master server so it will scan each agent daily. I work in a federal department in government and I’ve been working in our lab environment. We had a consultant who had setup our ClamAV to scan all of our Linux VM’s and he left good documentation b

Re: [clamav-users] ClamAV 0.105.0 service deployed as a Docker container on AWS ECS seem to stop abruptly on startup

2022-05-12 Thread John Varghese via clamav-users
Thanks. We resolved the issue by increasing the memory in the AWS::ECS::TaskDefinition for the clamav service and present in the Cloudformation from 2GB to 3GB Regards, John Varghese On Thu, May 12, 2022 at 4:27 AM G.W. Haywood via clamav-users < clamav-users@lists.clamav.net> wrote:

[clamav-users] ClamAV 0.105.0 service deployed as a Docker container on AWS ECS seem to stop abruptly on startup

2022-05-11 Thread John Varghese via clamav-users
did try using an image from http://docker.io/mkodockx/docker-clamav and that seemed to start properly. I need help understanding why the clamav service seems to hang after the container starts. Are there any other logs that will help understand the issue? Regards, John

Re: [clamav-users] "403: Forbidden" from website

2021-11-18 Thread John Pfuntner -X (jpfuntne - EASI LLC at Cisco) via clamav-users
: Thursday, November 18, 2021 11:55 AM To: ClamAV users ML Cc: John Pfuntner -X (jpfuntne - EASI LLC at Cisco) Subject: Re: [clamav-users] "403: Forbidden" from website What files are you attempting to download? ___ clamav-users mailing list cl

[clamav-users] "403: Forbidden" from website

2021-11-18 Thread John Pfuntner -X (jpfuntne - EASI LLC at Cisco) via clamav-users
I'm seeing errors trying to access the website programmatically: $ wget http://www.clamav.net/downloads URL transformed to HTTPS due to an HSTS policy --2021-11-18 09:25:20-- https://www.clamav.net/downloads Resolving www.clamav.net (www.clamav.net)... 104.16.218.84, 104.16.219.84, 2606:4700::68

[clamav-users] buiding 0.104.0

2021-09-07 Thread john via clamav-users
h 0.103.42 and hope eventually some kind person creates a Debian package, or could stop using clamav. Or someone could point out how stupid I am being and tell me what I did wrong. ==John ffitch ___ clamav-users mailing list clamav-users@lists.clamav

Re: [clamav-users] ClamAV 0.104.0 Release Candidate with CMake required!

2021-07-30 Thread John Capo via clamav-users
Builds on Freebsd 12.x after building and installing libcheck from github. Its running on a spamtrap machine handling > 2000 messages daily. John Capo On 2021-07-29 03:09, Avram-Teodor Berindeie wrote: ClamAV 0.104.0 Release Candidate has been compiled without any problems and wo

[clamav-users] access denied to website

2021-03-18 Thread John Pfuntner -X (jpfuntne - EASI LLC at Cisco) via clamav-users
I'm getting a Access Denied nastygram going anywhere at https://www.clamav.net/. What's going on? I wish I knew the best place to ask this but... I can't get to the website for more information! Error 1020

[clamav-users] On-access scanning on CentOS 8

2021-03-12 Thread John Pfuntner -X (jpfuntne - EASI LLC at Cisco) via clamav-users
I've been experimenting with ClamAV on various Linux distributions and have had trouble doing on-access scanning on CentOS 8 machines - everything installs fine and I can do on-demand scanning with clamscan but on-access scanning isn't preventing me from accessing a test infected file. I see th

Re: [clamav-users] clamav-users Digest, Vol 195, Issue 6

2021-02-12 Thread John ff via clamav-users
⁣Sent from TypeApp ​ On Feb 9, 2021, 12:04, at 12:04, clamav-users-requ...@lists.clamav.net wrote: >Send clamav-users mailing list submissions to > clamav-users@lists.clamav.net > >To subscribe or unsubscribe via the World Wide Web, visit > https://lists.clamav.net/mailman/listinfo/c

[clamav-users] Remote scanning hostname?

2020-05-29 Thread John Robison
is doesn't tell me which client node has the virus. Is there a way for the clamd server to report the hostname (or IP, or any kind of identifier) of the client when a virus is detected? Thanks. -- John Robison Senior DevOps Engineer jrobi...@springbuk.com 412 326 9522 <412%326%9522> S

[clamav-users] EICAR Intermittently Not Detected with Latest Definitions

2020-02-20 Thread Chapman, John via clamav-users
issue? Thanks, John Chapman Sr. SDE @ Amazon ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http

Re: [clamav-users] clamav from python?

2020-02-11 Thread John Shelton via clamav-users
On 2/11/20, 3:42 PM, "clamav-users on behalf of Scott Kitterman via clamav-users" wrote: What Python bindings are you using? The only libclamav bindings I'm aware of for python are ancient and unmaintained. Do you know of something ~current? Looks like someone that used to

[clamav-users] clamav from python?

2020-02-11 Thread John Shelton via clamav-users
The interface for cl_scanfile changed to accept a new struct cl_scan_options type from what used to be an int. Is there any backward compatibility for this change? Thanks, john ___ clamav-users mailing list clamav-users@lists.clamav.net https

Re: [clamav-users] Problem to update virus database

2020-01-24 Thread john
Hi Matus Many thanks, much appreciated Please see result which is showing clamav and we do not run freshclam under root - it is run under clamav (244) I am sorry if I am wrong and thank everyone for their help Many thanks John ls -la /var/clamav/tmp total 8 drwxr-xr-x 2 clamav clamav 4096

Re: [clamav-users] Problem to update virus database

2020-01-24 Thread john
ld be used as they are hashed out I am sorry if I am wrong Many thanks John folder perms drwxr-xr-x. 3 clamav clamav4096 Jan 23 15:16 clamav -rw-r--r-- 1 clamav clamav296388 Nov 21 12:51 bytecode.cvd -rw-r--r-- 1 clamav clamav 58022101 Jan 23 15:15 daily.cvd -rw-r--r-- 1 clamav c

Re: [clamav-users] failed to write to

2019-12-08 Thread john
clamav to run freshclam I will update next time freshclam errors with same error but would be verbose to help Many thanks John Centos 6 ERROR: Update failed. ERROR: Database update process failed: Failed to read/write file to database directory (10) WARNING: fc_update_databases

Re: [clamav-users] Logclean config option - not working?

2018-07-20 Thread John Horne
t the clamd process each time.) Anyway, I retested the 'LogClean' this morning on two servers and using two different apps, and it is all working fine. Clean files were logged as OK. John. > > > > On Jul 19, 2018, at 11:31 AM, John Horne wrote: > > > > On Thu, 2018

Re: [clamav-users] Logclean config option - not working?

2018-07-19 Thread John Horne
On Thu, 2018-07-19 at 10:38 +, John Horne wrote: > Hello, > > Has anyone got the 'LogClean' configuration option working? I have enabled it > in our config file, but scanning files and directories still only logs found > viruses. > I have found that by setting th

[clamav-users] Logclean config option - not working?

2018-07-19 Thread John Horne
Hello, Has anyone got the 'LogClean' configuration option working? I have enabled it in our config file, but scanning files and directories still only logs found viruses. We are using clamAV 0.100.1 on CentOS 7. Thanks, John. -- John Horne | Senior Operations Analyst | Tech

Re: [clamav-users] Trouble getting cvd files from private local mirror

2017-12-11 Thread John Kennedy
Thanks for the suggestion. Unfortunately in this case, that is not it. Not exactly sure why it was in the original that I copied - I am better with Apache than nginx - but I am leaving it out anyway. John Kennedy (_8(|) If I'm a sarcastic asshole when I talk to you it's either becaus

Re: [clamav-users] Trouble getting cvd files from private local mirror

2017-12-08 Thread John Kennedy
Were you to read my original email - I can download the file with curl and wget (even supplied the output) so there is a successful connection to port 80 by other means, just NOT with freshclam. That is why I am having a difficult time with this. John Kennedy (_8(|) If I'm a sarcastic as

Re: [clamav-users] Trouble getting cvd files from private local mirror

2017-12-08 Thread John Kennedy
.10.10.10) WARNING: Can't download main.cvd from clamav.trustx.com Trying again in 5 secs... ^CUpdate process terminated John Kennedy (_8(|) If I'm a sarcastic asshole when I talk to you it's either because I really like you and feel comfortable teasing you or I really hate you

[clamav-users] Trouble getting cvd files from private local mirror

2017-12-08 Thread John Kennedy
1:03 index.html -rw-r--r-- 1 nginx root 8808462 Nov 27 21:30 main-58.cdiff -rw-r--r-- 1 nginx root 117892267 Nov 27 21:29 main.cvd drwxr-xr-x 2 nginx root 6 Dec 8 16:05 temp - John Kennedy (_8(|) If I'm a sarcastic asshole when I talk to you it's either because I really

[clamav-users] WSF viruses, and other issues

2016-10-24 Thread John T. Bryan
I’ve been running ClamAV now for some years as the virus-checking plug-in on my main multi-client mail server.  For a long time, I was very pleased with it and how easily I was able to integrate it into the custom software back when I first switched to it. Lately, however, ClamAV never seems to ca

Re: [clamav-users] unsubscribe

2016-10-12 Thread John Crisp
On 12/10/16 16:57, Reindl Harald wrote: > > are you kidding or why the hell did you not read the answers to that > foolish "unsubscribe" post you are quoting? how did guys like you manage > to subscribe without holding hand? > >> permanenttsb.ie Bankers. Very worrying ;-) signature.asc

[clamav-users] USB key scan on access

2016-06-28 Thread john doe
I'm trying to achieve the following: auto mount USB key and detect if a user uploads or downloads a virus from it. An additional feature I can live without: access prevention upon virus detection. The "OnAccessIncludePath" option in clamd configuration file seems the way to go. The best solution w

Re: [clamav-users] CentOS 7 EPEL Packages

2016-01-17 Thread John Zimmerman
Thanks Dennis, I will probably take your approach until the RPMs in the EPEL are usable. It would be nice to have them functional out of the EPEL or just have them removed all together. It certainly doesn't do that ClamAV project any favors to leave it in its current state of packaging. On Sun,

Re: [clamav-users] CentOS 7 EPEL Packages

2016-01-15 Thread John Zimmerman
Yeah. I'm not sure I mind it being split, but there seems to be inconsistencies, missing config files, wrong username, bad or no systemd files etc Working off of this right now: http://linux-audit.com/install-clamav-on-centos-7-using-freshclam/ so I can update a puppet module to make this wo

[clamav-users] CentOS 7 EPEL Packages

2016-01-15 Thread John Zimmerman
The clamav packages for CentOS 7 in the EPEL repository don't seem to produce a working config after installation. Anyone have any tips/walkthroughs on getting the basics up and running (whatever you consider the basics to be) on CentOS 7? I've run clam on Debian a long time ago and am revisiting

Re: [clamav-users] /var/lib/clamav/lmd.user.hdb

2015-09-19 Thread john
Hi I apologise if my email is wrong but you could also rerun maldet install, or try maldet -d I think this is an issue with maldet Many thanks John > On 19 Sep 2015, at 08:57, Arnaud Jacques / SecuriteInfo.com > wrote: > > Hello Otto, > > >> This file is miss

Re: [clamav-users] Worrying clamscan timing trend

2015-08-14 Thread Chris St John
t's largely a ClamAV configuration problem compounded with inherent limitations of the OSX filesystem. On Thu, Jul 9, 2015 at 4:02 PM, Chris St John wrote: > I've installed ClamAV 0.98.5 using "brew" on OSX (Yosemite) and I schedule > a daily freshclam followed by clamscan

[clamav-users] Worrying clamscan timing trend

2015-07-09 Thread Chris St John
I've installed ClamAV 0.98.5 using "brew" on OSX (Yosemite) and I schedule a daily freshclam followed by clamscan using Jenkins-CI. I've noticed a worrying trend in the scan times over the past couple of weeks: June 20 --- SCAN SUMMARY --- Known viruses: 3849353 Engine version: 0

Re: [clamav-users] using clamdscan and clamd to do complete file system scan

2015-04-30 Thread John McGowan
x27;t think this issue is permissions related. But I could still be wrong. I tried it without changing who clamd was running as and got completely different permissions errors than what I'm seeing now. /John ___ Help us build a comprehensive Cla

Re: [clamav-users] using clamdscan and clamd to do complete file system scan

2015-04-30 Thread John McGowan
ons (warranted or not) on that are different now, so I'm just trying to demonstrate diligence. by having ClamAV installed and scanning some key directories. /John On Wed, Apr 29, 2015 at 12:27 PM, G.W. Haywood wrote: > Hi there, > > On Wed, 29 Apr 2015, John McGowan wrote: >

Re: [clamav-users] using clamdscan and clamd to do complete file system scan

2015-04-30 Thread John McGowan
clamdscan" solution is working. If someone on the ClamAV team want's more details about what's happening with my clamdscan i'm happy to provide them. /John ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml

[clamav-users] using clamdscan and clamd to do complete file system scan

2015-04-28 Thread John McGowan
ble? I suspect that most people use clamdscan to do "one off" scanning, (mail servers, etc) In my use case I want to leverage clamd, so that I can take advantage of the SysLogging capabilities of clamd, but I'm looking for more of a traditional daily "scan

[clamav-users] ARM Cross Compile

2014-09-26 Thread Mclean, John (GE Energy Management)
Notes on cross compiling clamav-0.98.4 for freescale based arm board Down load clamav-0.98.4.tar.gz tar xvzf clamav-0.98.4.tar.gz mkdir clamav_install_dir created exports for cross compiler so configure finds the right stuff, e.g.; PATH, ARCH, CFLAGS, LDFLAGS, CROSS_COMPILE, CC, AR, LD. cd cl

Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread McCarthy, John D.
These are government systems that either A: can only access certain sites or B: have not internet connection (both or security reasons) On 2014-09-09 17:28, McCarthy, John D. wrote: > A million thanks. This is what I needed. Many of my systems do not connect > to the internet. This

Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread McCarthy, John D.
net/daily.cvd > > On 9/9/2014 9:40 AM, Alain Zidouemba wrote: > > By using the tool "freshclam" that comes with ClamAV. > > > > - Alain > > > > On Tue, Sep 9, 2014 at 8:08 AM, McCarthy, John D. < > > john.d.mccar...@leidos.com> wrote: >

[clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread McCarthy, John D.
___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml

Re: [clamav-users] Fwd: false positives

2013-08-22 Thread John Goubeaux
Thanks ! Is it possible to know a time when these bad signitures were made available ( yesterday morning ) ? Eg so as to know how long a period in which I was NOT delivering a subset of user mail. -john On 8/22/13 6:32 AM, Ian Eiloart wrote: Hi all, André, the maintainer of the Malware

Re: [clamav-users] ClamAV Yum Repositories

2013-05-16 Thread John R. Dennison
t? You need to take it up with rpmforge, epel or whomever you got the packages from; CentOS doesn't ship it. Epel should be up to date, rpmforge, like usual, is lagging. John -- An education isn't how much you have committ

Re: [clamav-users] Stats - remote server temporary failure

2013-05-02 Thread John Horne
On Tue, 2013-04-30 at 12:47 -0400, Shawn Webb wrote: > Hey John, > > We've identified and resolved the problem. Thank you for using ClamAV and > for submitting detection statistics. > Thanks for this. We have seen no further temporary failure messages. J

[clamav-users] Stats - remote server temporary failure

2013-04-30 Thread John Horne
of these messages every day. I assume the remote server is under load, and that there is basically nothing we can do (set) about this? John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ Help us build

Re: [clamav-users] ClamAV for Windows Network

2012-12-03 Thread John Murphy
Network On 12/03/2012 03:23 PM, Jim Preston wrote: > On 12/03/2012 02:25 PM, John Murphy wrote: >> Hello, >>  I am looking for deploying and managing ClamAV in a LAN with 150 >>workstations and 1 server (Windows clients and server) and need to force >>workstations to rec

[clamav-users] ClamAV for Windows Network

2012-12-03 Thread John Murphy
vendors such as ESET, Kaspersky or BitDefender offer. Please tell me if there is any solution for this.     Thanks John ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[clamav-users] Return Status Question

2012-09-01 Thread john hutton cooper
both an error in the scan and also a virus is found, will it still return 1 indicating a virus, or a different error code? I don't want to miss a virus because I'm filtering out errors. John ___ Help us build a comprehensive ClamAV guide: vis

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
Oh, and I now realize that this is outside of freshclam's control, being a sanesecurity signature. I removed the mbl.db and disabled that cronjob until we sort this out... On 02/22/2012 12:51 PM, John Madden wrote: I wasn't able to receive my own post... freshclam didn't

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
| sigtool --decode-sigs That seems illogical. I did this instead: sigtool --find-sigs MBL_207346 | sigtool --decode-sigs VIRUS NAME: MBL_207346 DECODED SIGNATURE: www. If "www." is truly the signature, well, I think we've found the problem. On 02/22/2012 10:49 AM, John Madden w

[clamav-users] false positives with MBL_207346?

2012-02-22 Thread John Madden
Any ideas here? Anyone else seeing this? ~$ sigtool --list-sigs | grep MBL_207346 MBL_207346 John -- John Madden / Systems Engineer III Office of Technology / Ivy Tech Community College of Indiana Free Software is a matter of liberty, not price. To understand the concept,

[clamav-users] Calling Clamd INSTREAM on blocks of data, can a virus sneak by the edge of a block?

2011-12-24 Thread John-Charles D. Sokolow
I am experimenting with a python script which uses http://xael.org/norman/python/pyclamd/ to scan blocks of data. Here is my scenario, I read one block, ( 4096 bytes in my case ) from a socket. I call pyclamd.scan_stream( block ), which I assume is in turn calling either INSTREAM, or STREAM, ( I

Re: [Clamav-users] SubmitDetectionStats: Incorrect format of the log file

2010-09-29 Thread John Horne
On Sun, 2010-09-26 at 23:09 +0300, Török Edwin wrote: > On Sun, 26 Sep 2010 20:02:42 +0100 > John Horne wrote: > > > Hello, > > > > Using ClamAV 0.96.2, for some reason over the weekend we have started > > to see these error messages in our freshclam log file:

[Clamav-users] SubmitDetectionStats: Incorrect format of the log file

2010-09-26 Thread John Horne
s I can see the clamd and freshclam log files look fine. Any ideas about this? John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.

[Clamav-users] Lots and lots of memory...

2010-07-05 Thread john espiro
all my remaining memory -- namely it runs at 180MB and increasing. My mail volume is only about 10 emails per hour. Is there anything I can do to figure out why it would be using up so much memory? Thanks, John ___ Help us build a

Re: [Clamav-users] bytecode Rev 16 DoS

2010-05-11 Thread John W. Baxter
t machine to the first of the production machines. After the update, we'll gain many CPU cycles. --John ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Scanning for XSS in HTML files using the ClamAV Daemon service..

2010-03-30 Thread John Williams
On Tue, Mar 30, 2010 at 10:56 AM, anil chalamalasetti < achalamalase...@gmail.com> wrote: > I am trying to scan files that have been uploaded for Viruses and one > of the features I am looking for is to scan for XSS in uploaded HTML > files. Can the CLAMAV support this kind of scanning? > > Thank

Re: [Clamav-users] This version of the ClamAV engine is outdated.

2010-03-19 Thread John Williams
2010/3/19 Török Edwin > On 03/19/2010 10:25 AM, John Williams wrote: > > 2010/3/19 Török Edwin > > > >> On 03/19/2010 09:16 AM, John Williams wrote: > >>> Ok...so it is. Apparently the version I'm getting through apt-get on > >> ubuntu > &

Re: [Clamav-users] This version of the ClamAV engine is outdated.

2010-03-19 Thread John Williams
2010/3/19 Török Edwin > On 03/19/2010 09:16 AM, John Williams wrote: > > Ok...so it is. Apparently the version I'm getting through apt-get on > ubuntu > > is .95.2. Looking at the site the newest is .95.3. Well ok so I need to > > update. However I have a major

[Clamav-users] This version of the ClamAV engine is outdated.

2010-03-19 Thread John Williams
Ok...so it is. Apparently the version I'm getting through apt-get on ubuntu is .95.2. Looking at the site the newest is .95.3. Well ok so I need to update. However I have a major issue. I was planning to use clamav to scan user uploaded files, however when I import pyclamav and it register's o

Re: [Clamav-users] Script updated: clamav-unofficial-sigs.sh (v3.7)

2010-01-25 Thread John Rudd
> MSRBL (as it's no longer being updated) And here's the answer from the actual project: http://msrbl.blogspot.com/2010/01/msrbl-status-update-as-some-of-you-have.html It's amazing what information you get when you actually talk to people. ___ Help us

Re: [Clamav-users] Script updated: clamav-unofficial-sigs.sh (v3.7)

2010-01-24 Thread John Rudd
>> rsync rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-Images-FULL-SoN.hdb >> -rw-r--r--    19030813 2009/10/07 15:50:05 MSRBL-Images-FULL-SoN.hdb > > Only the clueless would use that database. Which is irrelevant to the point. The point isn't "is it a reasonable/accurate/etc. database", the point i

Re: [Clamav-users] Script updated: clamav-unofficial-sigs.sh (v3.7)

2010-01-24 Thread John Rudd
>> Most recent update from them was 3 months ago. > > rsync rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-SPAM.ndb > -rw-r--r-- 244643 2009/07/27 01:21:23 MSRBL-SPAM.ndb > > rsync rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-Images.hdb > -rw-r--r-- 181337 2009/07/24 03:40:17 MSRBL-Images.hdb rsync rsyn

Re: [Clamav-users] Script updated: clamav-unofficial-sigs.sh (v3.7)

2010-01-24 Thread John Rudd
> Then you don't have a clue and are obviously not qualified to make a > judgment call on this matter. They used to routinely have some signatures that would go weeks, even months, without updates. I used tolook at their signatures and see that they were a month or two old ... and a few months

Re: [Clamav-users] Script updated: clamav-unofficial-sigs.sh (v3.7)

2010-01-24 Thread John Rudd
>>> removes MSRBL (as it's no longer being updated) >> Did they declare themselves to be defunct, or are you declaring it for >> them (without any actual announcement from them)? > Do you have any indication that MSRBL is still alive and that the > signature databases are being actively updated?

Re: [Clamav-users] Script updated: clamav-unofficial-sigs.sh (v3.7)

2010-01-23 Thread John Rudd
> removes MSRBL (as it's no longer being updated) Did they declare themselves to be defunct, or are you declaring it for them (without any actual announcement from them)? ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http:/

Re: [Clamav-users] Updates w/o freshclam

2010-01-07 Thread John Corelli
> > > > Hi John, > > > > Wanted to jump in to say that I found that confusing also. > This is how > > I read it: > > > > 1) On external (meaning: not CentOS) machine: run freshclam (which > > will pick up the new {main,daily}.c[vl]d), then copy

Re: [Clamav-users] Updates w/o freshclam

2010-01-07 Thread John Corelli
> > On 2010-01-07 19:49, John Corelli wrote: > > Hi All - > > > > I'm new to clamav, but I've spent time looking through the archives > > and FAQs, so I hope my question is not too "newbish". > > > > I'm running clam 0.95.3 on

[Clamav-users] Updates w/o freshclam

2010-01-07 Thread John Corelli
I have, I see that there is the main.cvd, daily.cvd and daily.cld files which are all the ones that need to get updated. I believe it is the two daily.* files that need to be the same version at all times, correct? Is main.cvd the engine then?

Re: [Clamav-users] Clamav-Milter crashes continously

2009-12-23 Thread John W. Baxter
t; >> Thanks, Jim > > Well still have not found the root cause of the problem but armed with > the above information that it is failing at 10 min after the hour, I > have reset the cron job to restart clamav-milter at 12 min after the > hour... instead of on the 1/4 ho

Re: [Clamav-users] SubmitDetectionStats Error

2009-11-15 Thread John Horne
On Sun, 2009-11-15 at 16:17 -0600, Chris wrote: > I've seen this in the last three freshclam runs: > > ERROR: SubmitDetectionStats: Remote server reported temporary failure: > under maintenance > > Curious as to whether anyone else sees the same > Yes, seen it here to

Re: [Clamav-users] APER

2009-10-22 Thread John Rudd
>Firstly, spear.ndb generated from the APER feed and has been for a while now: > >http://sanesecurity.co.uk/databases.htm I didn't realize spear.ndb includes APER. That's great news (as we already use spear.ndb) ... looks like implementing APER is pretty straight forward (and low effort) for me :

Re: [Clamav-users] APER

2009-10-22 Thread John Rudd
>I have to ask however. You mentioned it contains phish urls as well. >I have not been able to find that. However, we track phish >urls/domains in winnow_phish_complete.ndb > >Tom When you download their distribution, you get 4 files: phishing_cleared_addresses phishing_from_addresses phishing_li

Re: [Clamav-users] APER

2009-10-22 Thread John Rudd
>Check out Julian Field's ScamNailer: > >http://www.scamnailer.info/ > >"18/10/2009 - New "scamnailer.ndb" ClamAV signature database is now >available from http://www.mailscanner.eu/scamnailer.ndb. This is updated >very frequently. Do not download it more than once per hour!" > >Cheers, > >Phil Wh

[Clamav-users] APER

2009-10-22 Thread John Rudd
Hope I haven't missed this one being discussed... but ... APER is a project hosted at Google Code (Anti-Phishing Email Reply) that tracks From, Reply-to, and Body URLs that match known phishing attacks. There are a few examples for how to use it ... but I was wondering: Has anyone turned this in

[Clamav-users] Microsoft Power Point and Zip Files

2009-08-05 Thread John Rudd
?) b) has anyone solved it by just increasing the archive file limit? If so, what reasonable number have you come up with? Other thoughts of conclusions about all of this? (other than "don't use MS Office" -- that's outside the scope of my powers) John _

Re: [Clamav-users] question about Clamav anti virus for old mac OS 9.2

2009-06-22 Thread John Jasen
tents to new files. Take the disks out, put them in a computer that can run from a linux live cd, hope it has HFS support, and go from there? -- -- John E. Jasen (jja...@realityfailure.org) -- No one will sorrow for me when I die, because those who would -- are dead already. -- Lan Mandragoran,

[Clamav-users] Fwd: Sane Security defs integrity test fail

2009-04-10 Thread John Goubeaux
Folks, just for the record, this problem was cleared up when I upgraded to clamAV-0.95 from ver. 0.92.1 So it's pretty clear that early versions cannot handle what someone referred to as "newish" db files. -john >Does anyone have an idea why the following 2 Sane S

[Clamav-users] p5-Mail-ClamAV freebsd port marked broken still

2009-04-07 Thread Bracey, John
r until this is fixed (I think). Thanks in advance for any info you have. * John K. Bracey, Sr. Network Analyst NTA Change Management Group Chair Communications Services / Network Operations California State U

Re: [Clamav-users] clamAV-0.95 0n Solaris 10 x86 Build

2009-04-03 Thread John Goubeaux
bz2.a? >If so try upgrading your bzip2 package. > >Best regards, >--Edwin > > >___ >Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >http://www.clamav.net/support/ml -- John Goubeaux Systems Administrator G

Re: [Clamav-users] clamAV-0.95 0n Solaris 10 x86 Build

2009-04-03 Thread John Goubeaux
gmake[4]: Leaving directory `/export/home/john/src/clamav-0.95/libclamav' gmake[3]: *** [all-recursive] Error 1 gmake[3]: Leaving directory `/export/home/john/src/clamav-0.95/libclamav' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/export/home/john/src/clamav-0.95/libclamav&#

Re: [Clamav-users] clamAV-0.95 0n Solaris 10 x86 Build

2009-04-03 Thread John Goubeaux
Thanks, Yes I have downloaded a pkg and have that as an alternative. But I am still trying to figure out why it won't build from source. I suspect it might be the presence of older clamav lib files ?? eg I have a ver installed already.. not sure ? -john -- John Goubeaux Sy

Re: [Clamav-users] clamAV-0.95 0n Solaris 10 x86 Build

2009-04-02 Thread John Goubeaux
Thanks, Good to know that at least it does work. Your build environment is different ( I am using gcc to compile ). Its odd though b/c I am doing the same thing as when I built the earlier versions, same env etc. So am trying to figure out what has changed ? -john >John Goubeaux wr

[Clamav-users] clamAV-0.95 0n Solaris 10 x86 Build

2009-04-02 Thread John Goubeaux
type... i386-pc-solaris2.10 . no errors gmake . ld: fatal: relocations remain against allocatable but non-writable sections collect2: ld returned 1 exit status gmake[4]: *** [libclamav.la] Error 1 gmake[4]: Leaving directory `/export/home/john/src/clamav-0.95/libclamav' gmake[3]: ***

[Clamav-users] Sane Security defs integrity test fail

2009-04-01 Thread John Goubeaux
Does anyone have an idea why the following 2 Sane Security Defs (used within ClamAV) are consistently (since I have started using them) failing the integrity test ? I'm not sure if this is the best place to address this issue but I imagine others here are seeing this too. -john Te

[Clamav-users] setup milter

2009-03-30 Thread John "Ernie" Hoblyn
Hi, Dave Wells tells me that he is running sendmail, well I tried to install it and it's already there. That doesn't help because nothing works, there is no Clam or Sendmail which appears anywhere among my applications. Being new to all this I'm totally confused by all the jargon, is it not possi

[Clamav-users] Installation

2009-03-29 Thread John "Ernie" Hoblyn
Hello, I am completely new to Linux and having problems with installations. I have persuaded yum to install ClamAV on my system but have no idea what to do next. I've taken advice from various people who have told me to rewrite some parts of the program but it doesn't open. All I want is to have i

Re: [Clamav-users] test for SafeBrowsing?

2009-03-18 Thread John Rudd
On Wed, Mar 18, 2009 at 05:55, Dennis Peterson wrote: > Moray Henderson (ICT) wrote: >>> From: Török Edwin [mailto:edwinto...@gmail.com] > Try using for the URL. > Is that a requirement? If so we should get the spammers on board because >>> some of them may not know this :). >>>

Re: [Clamav-users] squid + clamd performance pointers anyone

2009-02-11 Thread John Horne
On Wed, 2009-02-11 at 15:50 +1300, Jason Haar wrote: > John Horne wrote: > > On Wed, 2009-02-11 at 09:17 +1300, Jason Haar wrote: > > > >> We use the open source HAVP proxy. It supports clamav, sophie, trophie, > >> and several other commercial AV products and w

Re: [Clamav-users] squid + clamd performance pointers anyone

2009-02-10 Thread John Horne
pages (well, mostly ;-) > May I ask if this (HAVP/ClamAV/Squid) scales well? How many users are your web-caches supporting (do you in fact run multiple caches?), and does it (HAVP/ClamAV) impose any significant loading on the hardware? Thanks, John. -- -

  1   2   3   4   5   >