Re: [clamav-users] fireclam log

2014-02-14 Thread Steve Basford
> does anyone please know where is any documentation on fireclam plugin > that is supposed to scan all files downloaded through Firefox browser > using clamav? specifically I am trying to find out if it can be > configured to produce a log or summary report of scan results > including positive con

Re: [clamav-users] Block all "EXE/SRC" or MS-EXE/DLL file

2014-02-14 Thread Steve Basford
> Need to write an anti virus that uses the NIST NSRL database and operate > it > as a white list based AV. The db contains some 100 million hashes of known > good binary files. I tried to crowd fund to do this but no one was > interested. Disclaimer: use at own risk, sold (for free) as seen/0 d

Re: [clamav-users] Block all "EXE/SRC" or MS-EXE/DLL file

2014-02-14 Thread Sim
Hello Steve, i've just a question for you ;-) Is a bad idea use a "foxhole_ext.cdb" as this? Sanesecurity.Foxhole.ade:*:*:\.[Aa][Dd][Ee]$:*:*:*:*:*:* Sanesecurity.Foxhole.adp:*:*:\.[AA][Dd][Pp]$:*:*:*:*:*:* Sanesecurity.Foxhole.bat:*:*:\.[Bb][Aa][Tt]$:*:*:*:*:*:* Sanesecurity.Foxhole.chm:*:*:\.[

Re: [clamav-users] Block all "EXE/SRC" or MS-EXE/DLL file

2014-02-14 Thread Steve Basford
> Hello Steve, > > > In this way I can stop EXE/Executable into ZIP/Archive file and as > attachment (without change any other settings into mailserver config) Shouldn't be an issue. Cheers, Steve Sanesecurity ___ Help us build a comprehensive ClamAV

Re: [clamav-users] fireclam log

2014-02-14 Thread Benny Pedersen
On 2014-02-14 09:36, Steve Basford wrote: There is an option to contact the author for support/suggestions... why cant clamdscan not use a running clamd socket to check files instead of load db itself ?, why had sorcefire not make that possible ? does clamwin create a clamd socket ? if so

Re: [clamav-users] Block all "EXE/SRC" or MS-EXE/DLL file

2014-02-14 Thread Benny Pedersen
On 2014-02-14 10:01, Steve Basford wrote: Just a POC ;) share somewhere how to build this 2 files ? i still have less then 2GB ram on my mailserver, so using it will be lots of more ram needed foxhole uses less ram to do basicly the same ___ Help