[Clamav-users] Problems upgrading from 0.94.2 to 0.95

2009-03-24 Thread Robert Klikics
Hello, after uninstalling the old version 0.94.2 and compiling/installing the new 0.95 I figured out some problems on my Debian Lenny system. It seems that "make install" does not proper install the "libclamav.so.6", so starting clamd was not possible. There was an error: "clamd: error while l

Re: [Clamav-users] Problems upgrading from 0.94.2 to 0.95

2009-03-24 Thread Török Edwin
On 2009-03-24 11:37, Robert Klikics wrote: > Hello, > > after uninstalling the old version 0.94.2 and compiling/installing the > new 0.95 I figured out some problems on my Debian Lenny system. > > It seems that "make install" does not proper install the > "libclamav.so.6", so starting clamd was n

Re: [Clamav-users] Problems upgrading from 0.94.2 to 0.95

2009-03-24 Thread Robert Klikics
Hi, thank you - ldconfig fixed the issue's, therefore I've deleted the lib from /lib! Regards, Robert Török Edwin schrieb: > On 2009-03-24 11:37, Robert Klikics wrote: >> Hello, >> >> after uninstalling the old version 0.94.2 and compiling/installing the >> new 0.95 I figured out some proble

Re: [Clamav-users] ClamAV 0.95rc2 - 1159852 signatures vs sigtool reporting 696491

2009-03-24 Thread Török Edwin
On 2009-03-23 23:27, Bill Landry wrote: > Török Edwin wrote: > > >> They can be whitelisted by using .wdb entries [1], which allows you to >> use a POSIX regular expressions to whitelist any URL. >> (the original URL, not the hash). >> >> Since the entries in safebrowsing.cld change often whitel

Re: [Clamav-users] Problems upgrading from 0.94.2 to 0.95

2009-03-24 Thread Török Edwin
On 2009-03-24 12:13, Robert Klikics wrote: > Hi, > > thank you - ldconfig fixed the issue's, therefore I've deleted the lib > from /lib! > I've added this to the 0.95 upgrade notes [1] https://wiki.clamav.net/Main/InstallFromSource https://wiki.clamav.net/Main/UpgradeNotes095#Caveats [1] Alth

Re: [Clamav-users] News about 0.95

2009-03-24 Thread Matus UHLAR - fantomas
> On Wed, 11 Mar 2009 17:56:22 + > Ian Eiloart wrote: > > That sounds good. What does it do, though? > > My guess is that it enables freshclam to download copies of files > > containing URLs that Google considers "unsafe", and then clamd will > > block emails that contain those URLs. Is that

Re: [Clamav-users] News about 0.95

2009-03-24 Thread Török Edwin
On 2009-03-24 13:40, Matus UHLAR - fantomas wrote: >> On Wed, 11 Mar 2009 17:56:22 + >> Ian Eiloart wrote: >> >>> That sounds good. What does it do, though? >>> My guess is that it enables freshclam to download copies of files >>> containing URLs that Google considers "unsafe", and then

Re: [Clamav-users] clamav 0.95- fd[10]: OK

2009-03-24 Thread Vincent Aniello
aCaB wrote: > Turn off LogClean in clamd.conf. While I could do that, I would prefer the feature to work correctly. Is anyone else having this issue with 0.95? Is this a known bug that will be fixed in a future version? Thanks. --Vincent Disclaimer: Any references to Pipeline performance co

[Clamav-users] clamav-milter 95.2

2009-03-24 Thread christian
oh well. immediately after the announcement, freshclam is spewing warnings, although most mirrors are not able to deliver yet. the 'make check', successful with rc1 and rc2, fails: 'FAIL: check_clamd.sh'. the clamav-milter ('standalone') thingy i am using for years now has totally changed. eg

Re: [Clamav-users] clamav 0.95- fd[10]: OK

2009-03-24 Thread Török Edwin
On 2009-03-24 15:22, Vincent Aniello wrote: > aCaB wrote: > >> Turn off LogClean in clamd.conf. >> > > While I could do that, I would prefer the feature to work correctly. Is > anyone else having this issue with 0.95? Is this a known bug that will > be fixed in a future version? > Wha

Re: [Clamav-users] News about 0.95

2009-03-24 Thread Matus UHLAR - fantomas
> >> On Wed, 11 Mar 2009 17:56:22 + > >> Ian Eiloart wrote: > >>> That sounds good. What does it do, though? > >>> My guess is that it enables freshclam to download copies of files > >>> containing URLs that Google considers "unsafe", and then clamd will > >>> block emails that contain those

Re: [Clamav-users] clamav 0.95- fd[10]: OK

2009-03-24 Thread Vincent Aniello
> Török Edwin wrote: > What is the bug here? That the filename scanned is not logged? I think so. When LogClean = yes I get a lot of this in my log file: Mar 24 09:26:28 emailfw3 clamd[23436]: fd[10]: OK Mar 24 09:27:13 emailfw3 last message repeated 4 times Mar 24 09:28:21 emailfw3 last message

Re: [Clamav-users] News about 0.95

2009-03-24 Thread aCaB
Matus UHLAR - fantomas wrote: >> You can then filter based on the virusname, if you want to treat >> phishing/safebrowsing-blacklisted entries as spam. > > Yes, that wil be important. Does clamav-milter support this for now? Hi, clamav-milter has been nerfed and it now relies on clamd. All you h

Re: [Clamav-users] clamav-milter 95.2

2009-03-24 Thread aCaB
christian wrote: > but: how? The easier option is probably to build clamav-milter from 0.94.2 and use it together with clamd from 0.95. http://downloads.sourceforge.net/clamav/clamav-0.94.2.tar.gz --aCaB ___ Help us build a comprehensive ClamAV guide:

Re: [Clamav-users] ClamAV 0.95rc2 - 1159852 signatures vs sigtool reporting 696491

2009-03-24 Thread Bill Landry
Török Edwin wrote: > For whitelisting lada.cc you can use either: > X:(.+\.)?lada.cc([/?].*)?:(.+\.)?lada.cc([/?].*)? > > Or this one (but it will also whitelist URL mismatches from lada.cc to > anything, not recommended): > X:(.+\.)?lada.cc([/?].*)?:.+ > > Or any other regular expression that w

Re: [Clamav-users] ClamAV 0.95rc2 - 1159852 signatures vs sigtool reporting 696491

2009-03-24 Thread Török Edwin
On 2009-03-24 17:04, Bill Landry wrote: > Török Edwin wrote: > > >> For whitelisting lada.cc you can use either: >> X:(.+\.)?lada.cc([/?].*)?:(.+\.)?lada.cc([/?].*)? >> >> Or this one (but it will also whitelist URL mismatches from lada.cc to >> anything, not recommended): >> X:(.+\.)?lada.cc([/

Re: [Clamav-users] ClamAV 0.95rc2 - 1159852 signatures vs sigtool reporting 696491

2009-03-24 Thread Bill Landry
Török Edwin wrote: >> Ok, I've reviewed the phishsigs_howto.pdf, but have failed in my efforts >> to create a whitelist entry based on the hash > > "whitelist entry based on hash = per-entry whitelisting" I was referring > to below, that will be in 0.95.1 > >> (rather than using a >> regular ex

[Clamav-users] Strange message from LibClamAV when running clamscan.

2009-03-24 Thread fchan
I got this message after updating from 0.94.2 to 0.95. [fc...@s3 fchan]# freshclam -v Current working dir is /var/lib/clamav Max retries == 5 ClamAV update process started at Tue Mar 24 11:37:35 2009 Using IPv6 aware code Querying current.cvd.clamav.net TTL: 884 Software version from DNS: 0.95 mai

Re: [Clamav-users] Strange message from LibClamAV when running clamscan.

2009-03-24 Thread Török Edwin
On 2009-03-24 20:55, fchan wrote: > I got this message after updating from 0.94.2 to 0.95. > > [fc...@s3 fchan]# freshclam -v > Current working dir is /var/lib/clamav > Max retries == 5 > ClamAV update process started at Tue Mar 24 11:37:35 2009 > Using IPv6 aware code > Querying current.cvd.clamav

Re: [Clamav-users] Strange message from LibClamAV when running clamscan.

2009-03-24 Thread fchan
This is what I get for command line date +%s: [fc...@s3 fchan]# date +%s 1237925239 Thank you, Frank >On 2009-03-24 20:55, fchan wrote: >> I got this message after updating from 0.94.2 to 0.95. >> >> [fc...@s3 fchan]# freshclam -v >> Current working dir is /var/lib/clamav >> Max retries == 5

Re: [Clamav-users] Strange message from LibClamAV when running clamscan.

2009-03-24 Thread Török Edwin
On 2009-03-24 22:09, fchan wrote: > This is what I get for command line date +%s: > > [fc...@s3 fchan]# date +%s > 1237925239 > > Thank you, > Frank > That is correct, please open a bugreport. --Edwin ___ Help us build a comprehensive ClamAV guide: v

Re: [Clamav-users] Strange message from LibClamAV when running clamscan.

2009-03-24 Thread fchan
Thank you Edwin for helping with this. I opened Bug 1498. Frank On 2009-03-24 22:09, fchan wrote: This is what I get for command line date +%s: [fc...@s3 fchan]# date +%s 1237925239 Thank you, Frank ÊÊ That is correct, please open a bugreport. --Edwin

[Clamav-users] ClamAV 0.95 - freshclam SafeBrowsing yes and "mandatory" Checks 48

2009-03-24 Thread cas...@gmail.com
Hi, I just upgraded to ClamAV 0.95. I am trying SafeBrowsing. Please, I would like to know why it is mandatory to run freshclam every 30 minutes when using that feature (safebrowsing). Thank you for your attention and for the great ClamAV. Best regards, Cássio __

Re: [Clamav-users] ClamAV 0.95 - freshclam SafeBrowsing yes and "mandatory" Checks 48

2009-03-24 Thread aCaB
cas...@gmail.com wrote: > Hi, > > I just upgraded to ClamAV 0.95. I am trying SafeBrowsing. > > Please, I would like to know why it is mandatory to run freshclam > every 30 minutes when using that feature (safebrowsing). > > Thank you for your attention and for the great ClamAV.

Re: [Clamav-users] ClamAV 0.95 - freshclam SafeBrowsing yes and "mandatory" Checks 48

2009-03-24 Thread cas...@gmail.com
On Tue, Mar 24, 2009 at 7:30 PM, aCaB wrote: > cas...@gmail.com wrote: >>      Please, I would like to know why it is mandatory to run freshclam >> every 30 minutes when using that feature (safebrowsing). >> >>      Thank you for your attention and for the great ClamAV. > > This is mandated by the