Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-09 Thread Robert Allerstorfer
Hello Tomasz, On Mon, 9 Oct 2006, 23:51 GMT+02 Tomasz Papszun wrote: > Submission-ID 495773 has been mentioned in the same announcement: > "Submission-ID: 495773 > Sender: Anonymous > Added: HTML.Phishing.Bank-820" oops, sorry for overseeing that. OK, so that mail will now be found by the signa

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-09 Thread Tomasz Papszun
On Mon, 09 Oct 2006 at 1:24:57 +0200, Robert Allerstorfer wrote: > On Fri, 6 Oct 2006, 22:14 GMT+02 Robert Allerstorfer wrote: [...] > Hm, these submissions have been rejected (daily.cvd version 2009): > > Submission-ID: 501386 > Sender: Robert Allerstorfer > Submission notes: Same as in Submissi

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-08 Thread Robert Allerstorfer
On Fri, 6 Oct 2006, 22:14 GMT+02 Robert Allerstorfer wrote: > On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: >> On 10/3/06, Robert Allerstorfer wrote: >>> How can yet undetected phishings be submitted to the project? >> Submit a sample: http://cgi.clamav.net/sendvirus.cgi, following the >>

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-06 Thread Török Edvin
On 10/6/06, Robert Allerstorfer <[EMAIL PROTECTED]> wrote: On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: > For now the only change is: The two-field form, is valid only for type > 'H', and means: > match the host part of realURL, i.e. displayedURL can be anything. You seem to mean 'somedom

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-06 Thread Robert Allerstorfer
On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: > On 10/3/06, Robert Allerstorfer wrote: >> Reading phishsigs_howto.pdf from the latest snapshot tarball, it says >> that each line must consist of *three* fields, in the form >> >> Flags RealURL DisplayedURL >> >> Is there an updated documentat

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-04 Thread Török Edvin
On 10/3/06, Robert Allerstorfer <[EMAIL PROTECTED]> wrote: Hi, Reading phishsigs_howto.pdf from the latest snapshot tarball, it says that each line must consist of *three* fields, in the form Flags RealURL DisplayedURL Is there an updated documentation where the two-fields form will be explai

[Clamav-users] daily.wdb and daily.pdb

2006-10-03 Thread Robert Allerstorfer
Hi, I am currently using the latest phishing-scan-urls enabled clamscan (devel-20061002) with a devel version of my procmail anti-virus filter (http://softlabsav.sourceforge.net/). Each incoming mail will first be scanned with the --phish-scan-alldomains option, in order to minimize the number of