Re: [Clamav-users] extending dlp

2008-12-17 Thread Tomasz Kojm
On Wed, 17 Dec 2008 10:55:42 -0500 "Tim Maletic" wrote: > On Wed, Dec 17, 2008 at 10:47 AM, Matt Watchinski < > mwatchin...@sourcefire.com> wrote: > > > What other use cases would you like to see ? > > > I want to search for account numbers that are specific to my company, so the > code I writ

Re: [Clamav-users] extending dlp

2008-12-17 Thread Jason Haar
This is a very good question as it makes an important point. As ClamAV now states it has DLP functionality, doesn't that imply it will support the ability to sites to create their own rules - and by that I don't mean writing your own C code. We've just finished a DLP evaluation recently, and all t

Re: [Clamav-users] extending dlp

2008-12-17 Thread Tim Maletic
On Wed, Dec 17, 2008 at 10:47 AM, Matt Watchinski < mwatchin...@sourcefire.com> wrote: > What other use cases would you like to see ? I want to search for account numbers that are specific to my company, so the code I write -- unless it is code to allow for generic, regex fu -- won't be useful t

Re: [Clamav-users] Best Practice Webinar

2008-12-17 Thread .rp
ooh, thanks! ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[Clamav-users] extending dlp

2008-12-17 Thread Tim Maletic
The "What's New in ClamAV 0.94" document says the new DLP module scans for SSNs, credit card numbers, and "other personally identifying information". But dlp.c appears to code only for SSN and CC numbers. Is there a recommended way to extend clamav for other use cases, short of hacking dlp.c? -tm

Re: [Clamav-users] extending dlp

2008-12-17 Thread Matus UHLAR - fantomas
On 17.12.08 10:34, Tim Maletic wrote: > The "What's New in ClamAV 0.94" document says the new DLP module scans for > SSNs, credit card numbers, and "other personally identifying information". > But dlp.c appears to code only for SSN and CC numbers. Is there a > recommended way to extend clamav for

Re: [Clamav-users] extending dlp

2008-12-17 Thread Brandon Perry
What would be useful is a command line argument (or configuration in clamd.conf) to add custom regex stuffs. On Wed, Dec 17, 2008 at 9:55 AM, Tim Maletic wrote: > On Wed, Dec 17, 2008 at 10:47 AM, Matt Watchinski < > mwatchin...@sourcefire.com> wrote: > > > What other use cases would you like to

Re: [Clamav-users] extending dlp

2008-12-17 Thread Matt Watchinski
What other use cases would you like to see ? cheers, On Wed, Dec 17, 2008 at 10:34 AM, Tim Maletic wrote: > The "What's New in ClamAV 0.94" document says the new DLP module scans for > SSNs, credit card numbers, and "other personally identifying information". > But dlp.c appears to code only fo

[Clamav-users] problem scanning

2008-12-17 Thread AN
I seem to be having a problem, with scanning incoming mail. I am on FreeBSD 6.3 release running clamav-milter. I have the following from the log file: LibClamAV debug: watchdog sleeps Wed Dec 17 21:28:38 2008 -> clamfi_envfrom: Wed Dec 17 21:28:38 2008 -> isWhitelisted Wed Dec 17 21:28:38 20

Re: [Clamav-users] Best Practice Webinar

2008-12-17 Thread fchan
Thank you for those who have signed up but missed it. >Folks, > >Edwin's Webinar given last week on the topic of best practice and common >pitfalls in ClamAV is now >available for download from >http://www.sourcefire.com/resources/CAV-webcast-access. > >The presentation covers common pitfalls in t