Re: [Clamav-users] Third-Party Signatures: Sanesecurity

2008-06-13 Thread Steve Basford
>> I ran the 3 tests and I can detect tests 2 & 3, but not test #1, even if >> I place the raw text of the e-mail into a file and scan it directly with >> clamdscan. Thoughts? > > Same results here. > clamdscan being called via simscan. Ooops...Make sure the email you create for test #1 is a HTML

Re: [Clamav-users] Third-Party Signatures: Sanesecurity

2008-06-12 Thread René Berber
René Berber wrote: > Same result, does the "html" in the signature means the message should > be in that format? Answer: Yes. Sorry for the noise, I just re-tested and it does detect the string IFF the message is in html AND the actual string is inside html tags. -- René Berber _

Re: [Clamav-users] Third-Party Signatures: Sanesecurity

2008-06-12 Thread René Berber
Bill Landry wrote: > Steve Basford wrote: >> Sorry to hijack the list...just a few quick updates: >> >> 1. Signature Tests >> >> I've introduced a few Sanesecurity Signature tests, to help you make >> sure you are getting the best out of the signatures available. Make sure >> you pass all three

Re: [Clamav-users] Third-Party Signatures: Sanesecurity

2008-06-12 Thread Rick Macdougall
Bill Landry wrote: > Steve Basford wrote: >> Sorry to hijack the list...just a few quick updates: >> >> 1. Signature Tests >> >> I've introduced a few Sanesecurity Signature tests, to help you make >> sure you are getting the best out of the signatures available. Make sure >> you pass all three

Re: [Clamav-users] Third-Party Signatures: Sanesecurity

2008-06-12 Thread Bill Landry
Steve Basford wrote: > Sorry to hijack the list...just a few quick updates: > > 1. Signature Tests > > I've introduced a few Sanesecurity Signature tests, to help you make > sure you are getting the best out of the signatures available. Make sure > you pass all three tests (scroll down page) h

[Clamav-users] Third-Party Signatures: Sanesecurity

2008-06-12 Thread Steve Basford
Sorry to hijack the list...just a few quick updates: 1. Signature Tests I've introduced a few Sanesecurity Signature tests, to help you make sure you are getting the best out of the signatures available. Make sure you pass all three tests (scroll down page) here: http://www.sanesecurity.com/c