[clamav-users] Phishing and ClamAV

2011-10-20 Thread Ivan Ivanov
Hello, I am newbie with ClamAV and I am trying to improve phising accurance on an e-mail server installation. Unfortunatley I as not able to understand how to do that in details. Should I use daily.pdb or phising signatures are included already in another databases? It appears that even after

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Török Edwin
On 10/20/2011 01:59 PM, Ivan Ivanov wrote: > Hello, > > I am newbie with ClamAV and I am trying to improve phising accurance on an > e-mail server installation. > Unfortunatley I as not able to understand how to do that in details. Should I > use daily.pdb or phising signatures are included al

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Ivan Ivanov
Hello Torok, Thank you for your fast responce. Is it possible to have additional .pbd with cistomized values included in ClamAV configuration and dastabases directory? Content exampel of such local.pdb: H:somelocalbank.ctld Thank you. With best regards, I. Ivanov -Original Mess

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Robert Schetterer
Am 20.10.2011 13:29, schrieb Török Edwin: > On 10/20/2011 01:59 PM, Ivan Ivanov wrote: >> Hello, >> >> I am newbie with ClamAV and I am trying to improve phising accurance on an >> e-mail server installation. >> Unfortunatley I as not able to understand how to do that in details. Should >> I u

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Török Edwin
On 10/20/2011 02:40 PM, Ivan Ivanov wrote: > Hello Torok, > > Thank you for your fast responce. > Is it possible to have additional .pbd with cistomized values included in > ClamAV configuration and dastabases directory? Content exampel of such > local.pdb: H:somelocalbank.ctld Yes, just place

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Ivan Ivanov
Hello Edwin, Thank you for your e-mail. I've added a local.pdb in /var/lib/clamav with contenct: H:localbankaddress.ctld But it appeasr that message passed as clean. Please see log entry returned by amavis (Postfix+amavis-new+ClamAV): amavis[17914]: (17914-04) Passed CLEAN Thank you, With be

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Török Edwin
On 10/20/2011 03:05 PM, Ivan Ivanov wrote: > Hello Edwin, > > Thank you for your e-mail. > I've added a local.pdb in /var/lib/clamav with contenct: > H:localbankaddress.ctld > > But it appeasr that message passed as clean. Please see log entry returned by > amavis (Postfix+amavis-new+ClamAV): >

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Ivan Ivanov
Hello Edwin. Here is: clamscan -d /var/lib/clamav/local.pdb message.eml message.eml: OK --- SCAN SUMMARY --- Known viruses: 1 Engine version: 0.97.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 0.021 sec (

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Török Edwin
On 10/20/2011 03:31 PM, Ivan Ivanov wrote: > Hello Edwin. > > Here is: > > clamscan -d /var/lib/clamav/local.pdb message.eml > message.eml: OK > > --- SCAN SUMMARY --- > Known viruses: 1 > Engine version: 0.97.2 > Scanned directories: 0 > Scanned files: 1 > Infected files: 0 > Da

Re: [clamav-users] Phishing and ClamAV

2011-10-20 Thread Ivan Ivanov
Hello Edwin: It is okay now: clamscan -d /var/lib/clamav/local.pdb message.eml message.eml: Heuristics.Phishing.Email.SpoofedDomain FOUND --- SCAN SUMMARY --- Known viruses: 1 Engine version: 0.97.2 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.00 MB

Re: [clamav-users] Inegrating with spamassassin

2011-10-20 Thread Manish Kathuria
On Thu, Oct 20, 2011 at 9:57 AM, Noel Jones wrote: > On 10/19/2011 10:00 PM, Alex wrote: >> Hi, >> I have a fedora15 system with spamassassin-3.3.2 and clamav-0.97.2, and also using the clamav-unofficial-sigs. and I've just realized the score for catching one of the listed domains i

[clamav-users] clamd abending at selfcheck

2011-10-20 Thread David Alix
I am running Clamav and freshclam 0.97.1, called from mimedefang, with sendmail on Solaris 2.9. Starting yesterday morning, clamd has abended whenever it selfchecks. The clamd.log reported the following when the problem began: Wed Oct 19 09:52:25 2011 -> SelfCheck: Database modification dete

Re: [clamav-users] clamd abending at selfcheck

2011-10-20 Thread Tomasz Kojm
On Thu, 20 Oct 2011 11:28:50 -0700 David Alix wrote: > I am running Clamav and freshclam 0.97.1, called from mimedefang, with > sendmail on Solaris 2.9. Starting yesterday morning, clamd has abended > whenever it selfchecks. > > The clamd.log reported the following when the problem began: Plea

Re: [clamav-users] clamd abending at selfcheck

2011-10-20 Thread David Alix
--On Thursday, October 20, 2011 9:03 PM +0200 Tomasz Kojm wrote: On Thu, 20 Oct 2011 11:28:50 -0700 David Alix wrote: I am running Clamav and freshclam 0.97.1, called from mimedefang, with sendmail on Solaris 2.9. Starting yesterday morning, clamd has abended whenever it selfchecks. Th

Re: [clamav-users] clamd abending at selfcheck

2011-10-20 Thread David Alix
Thinking that the problem was the selfcheck, I disabled it in clamd.conf. I also stopped the freshclamd process. When clamd was restarted the next time, the log reported: Self checking disabled. But, the clamd daemon continues to abend one hour after it starts. What other clamd process coul