Re: [clamav-users] IP List for Virus Definition Domain

2021-09-15 Thread Lyle Giese via clamav-users
FYI, I queried from two distinct locations and got the same IP address.  I then did a traceroute from each of those locations and it took different but short routes into CloudFlare's network.  I presume they use anycast routing.(and I could be wrong). Lyle Giese LCR Computer Services, Inc. O

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Lyle Giese via clamav-users
But the reject may NOT be going to the server/service that sent the virus. You received a bad email from hackedu...@example.com from server mail.badisp.ru However the mx record for example.com is mail.example.com, not the sending server or ISP. Now you have annoyed somebody that had nothing

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Lyle Giese via clamav-users
I just reread my message.  Reject is good behavior. Bouncing is not.  At least in my opinion.  Replace reject below with bounce and you have my correct opinion. Sorry, Lyle On 2/8/22 9:49 AM, Lyle Giese via clamav-users wrote: But the reject may NOT be going to the server/service that sent

Re: [clamav-users] CDV file?

2022-12-14 Thread Lyle Giese via clamav-users
If it's an old version of CLAMAV, you could be locked out of downloading.  The only authorized method of downloading the CVD files is through the use of freshclam.  If you have a windows machine that can get the downloads, then you can try to move those files over to the NAS or setup the window

Re: [clamav-users] clamscan exclude-dir on Windows

2023-01-28 Thread Lyle Giese via clamav-users
I would try the 'short' names of these directories. dir /X c:\ And yes the /X is case sensitive.  /X displays the short names. Lyle Giese On 1/28/23 08:58, clamav.mbou...@spamgourmet.com wrote: If it's expecting a regex, perhaps try:   --exclude-dir="/mnt/c/Program Files \(x86\)/" without th

Re: [clamav-users] clamav-users Digest, Vol 219, Issue 5

2023-02-13 Thread Lyle Giese via clamav-users
I am running a new Debian 11 box here.  When I run apt search clamav It shows 0.103.7 which is newer than 0.103.2 clamav/stable 0.103.7+dfsg-0+deb11u1 amd64  anti-virus utility for Unix - command-line interface clamav-base/stable 0.103.7+dfsg-0+deb11u1 all  anti-virus utility for Unix - base p

Re: [clamav-users] 1. What causes cool blocking by clamav 2. Freshclam

2025-01-07 Thread Lyle Giese via clamav-users
I could be all wrong on this, but it looks to me like DNS issues. I can ask for the TXT record for current.cvd.clamav.net and get a good response. I suspect you can not query for the current version record for some reason. Lyle Giese $dig txt current.cvd.clamav.net ; <<>> DiG 9.16.50-Debian

[clamav-users] false positive from a third party defination

2024-12-12 Thread Lyle Giese via clamav-users
Not sure where I need to report this.  I am having legit email being bounced using ClamAV by this: Heuristics.Phishing.Email.SpoofedDomain(cd2d755959754996812d9dc9405de4be:121605) This email is legit from Hilton Honors. Thanks, Lyle Giese ___

Re: [clamav-users] 1. What causes cool blocking by clamav 2. Freshclam

2025-01-08 Thread Lyle Giese via clamav-users
If you notice the answer I am getting is from one of my internal network recursive DNS servers running Bind 9.18.27 built from source and may well have different options setup in named.conf. In addition my dig client is from Debian repos and yours is from Ubuntu repos.  There can be many minor

Re: [clamav-users] Invoke-Webrequest caused security alert (and blocking!)

2025-06-11 Thread Lyle Giese via clamav-users
Look up how to set up a local mirror. Lyle Giese On 6/11/25 10:58, Shulist, Victor (SSC/SPC) via clamav-users wrote: Unclassified | Non classifié Unclassified | Non classifié Hello ClamAV support ! I was trying to download (using Edge browser) the *.cvd files from your site.  That failed,