Re: [clamav-devel] I have some viruses that are not detected by clamav

2002-12-04 Thread Tomasz Kojm
conv=ebcdic Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboinen

[devel] Re: [clamav-devel] Possible bug in clamscan - false detection of hydra.

2002-12-09 Thread Tomasz Kojm
gt; are sure that it is a bug in clamscan. F-prot does not detect anything in the > file either. Ok, I will remove the signature. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zap

Re: [clamav-devel] patch to allow configuration of the clamav user andgroup

2002-10-24 Thread Tomasz Kojm
trick. Patrick, the patch isn't correct. You must not modify Makefile.in and other automatically generated files. The only files you can change are configure.in and Makefile.am. Please correct this (I can do it myself, but it will have to wait). Best regards, Tomasz Kojm -- oo.

Re: [clamav-devel] patch to allow configuration of the clamav user and group

2002-11-01 Thread Tomasz Kojm
akefile.am files. The only thing I've changed is the definition of the CLAMAVUSER/GROUP names in the Makefile files - they're automatically defined by the configure script (AC_DEFINE_UNQUOTED() in the configure.in file). Thanks. Best regards, Tomasz Kojm -- oo.

Re: [clamav-devel] changes to makefile

2002-11-06 Thread Tomasz Kojm
at. this would > prevent existing, properly configured clamav.conf files from being > overwritten during an upgrade. > thanks! Douglas, you're right ;) Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw

Re: [clamav-devel] [Fwd: Clam Control Program simple and efficient]

2002-11-06 Thread Tomasz Kojm
efficient (only one thread will be in use). Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboinensi

Re: [clamav-devel] [Fwd: Clam Control Program simple and efficient]

2002-11-06 Thread Tomasz Kojm
so it can be used with existing software using clamscan) ? Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboinensis

Re: [devel] [PATCH] Allow configurable DBINST directory

2002-10-14 Thread Tomasz Kojm
Hi, hmm.. is --with-dbdir option not enough ? I don't understand your idea ;) Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\

Re: [clamav-devel] patch to allow configuration of the clamav user andgroup

2002-10-23 Thread Tomasz Kojm
ll be included in the next version. I don't think it's a good idea to use another user/group names, however these directives should be useful in some situations. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zol

Re: [clamav-devel] .zip bug in ClamAv

2003-01-06 Thread Tomasz Kojm
the socket is initialized in tcpserver.c. When the server core dumps, it doesn't > release > the socket properly, so you'll get a bind() failure if you try and start it back up > right > away. OK, thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECT

Re: [clamav-devel] next snapshot

2003-01-09 Thread Tomasz Kojm
On Thu, Jan 09, 2003 at 09:35:33AM +0200, Petri Turunen wrote: > Hi > > When are you going to release the next snapshot? It should be available tomorrow. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu

Re: [clamav-devel] using clamav at MTA level

2003-01-16 Thread Tomasz Kojm
Try: cat zmailer-message-file | clamscan --mbox - Does it work with your mail file type ? (Your mail suggests that it should work, but please check it anyway). Is there a way to recognize the zmailer mail file (just like mbox) ? Best regards, Tomasz Kojm -- oo. [EMAIL PRO

Re: [clamav-devel] New virus definitions

2003-02-11 Thread Tomasz Kojm
e with password "virus". Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <

Re: [clamav-devel] IFrame Exploits

2003-02-12 Thread Tomasz Kojm
positive alarms ? > Please let me know if you wish to have the exploit source itself. I'd like to look at it. Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapo

Re: [clamav-devel] IFrame Exploits

2003-02-12 Thread Tomasz Kojm
ot; which we using in parallel, it was > 100% successfull and didn't incorrectly diagnose a file. I have updated the database with that signatures, however please send me a virus sample if you have one. Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\

Re: [clamav-devel] openbsd problem

2003-02-14 Thread Tomasz Kojm
//clamav.elektrapro.com/stable/clamav-0.54.tar.gz Please check the archives of -users and -devel. Configure clamav with --disable-pthreads. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I n

Re: [clamav-devel] virus cleaning functionality

2003-02-20 Thread Tomasz Kojm
rus. > > Please let me know if there are any patches > available for this. I'm implementing support for OLE2 files (Word, Excel documents) cleaning. There are no plans to support PE files for now. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED]

[clamav-devel] [Magnus.Jonsson@umdac.umu.se: [MAILER-DAEMON@elektra.elektrapro.com: failure notice]]

2003-02-18 Thread Tomasz Kojm
ename="NTK.pdf" --=_583198==_-- -8<-- -- Magnus Jonsson, UNIX-Konsult Umdac, Umeå Univeritet, +46-(0)90-786 5204 - End forwarded message - -- Magnus Jonsson, UNIX-Konsult Umdac, Umeå Univeritet, +46-(0)90-786 5204 - End

Re: [clamav-devel] virus signatures

2003-03-05 Thread Tomasz Kojm
On Wed, Mar 05, 2003 at 03:32:28AM -0800, D.Veeravadivel wrote: > [Any Updates on this] Don't believe CNN ;) Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w

Re: [clamav-devel] ClamAV for OpenBSD

2003-03-27 Thread Tomasz Kojm
verything is OK under BSD now. The new devel version (which fixes crashes with archive scanning under BSD) will be released on Monday. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomn

Re: [clamav-devel] Clamd SIGSEGV on FreeBSD

2003-04-02 Thread Tomasz Kojm
version apply this patch to clamd/server.c. Having said that, it *should* also work > with the latest snapshot, > clamav-20030320. Or just use http://clamav.elektrapro.com/snapshot/clamav-20030331.tar.gz Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\..

Re: [clamav-devel] Developing patch to plug clamav 'directly' into qmail

2003-04-09 Thread Tomasz Kojm
due to a performance reasons - I recommend clamd or direct libclamav usage (see mod_clamav project). > I'll post the code once I'm no longer ashamed of it (I'm not a C guru by any Good luck ! Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\...

Re: [clamav-devel] Syntax of the signature file.

2003-04-18 Thread Tomasz Kojm
code with sigtool: cat somedata | sigtool --hex-dump > somedata.hex Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\

Re: [clamav-devel] ClamAV for OpenBSD

2003-03-27 Thread Tomasz Kojm
On Thu, Mar 27, 2003 at 10:59:45AM -0500, Flinn Mueller wrote: > Great, but does it fix the build problem under OpenBSD 3.3? No, it doesn't :( Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.

Re: [clamav-devel] Syntax of the signature file.

2003-04-19 Thread Tomasz Kojm
those > binary patterns in the file? Wouldn't that be awfully > slow? (I haven't tried though). It's _very_ fast - it uses the Aho-Corasick algorithm, please check the documentation and the program itself. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED]

Re: [clamav-devel] Too many open connection

2003-04-28 Thread Tomasz Kojm
as included the patch? I can't comment any further until I That problem was fixed, it seems there's an another leak. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \

Re: [clamav-devel] Too many open connection

2003-04-29 Thread Tomasz Kojm
l check it. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. A

Re: [clamav-devel] freshclam feature request

2003-05-05 Thread Tomasz Kojm
added. These two switches would allow us to execute a command before and > after the daemon is restarted for a db update. Any chance of this going in > sometime in the future? Good idea ! But remeber freshclam is running with non-root privileges... Best regards, Tomasz

Re: [clamav-devel] Enhanced update system of Clam signatures

2003-06-04 Thread Tomasz Kojm
er and I. I will be very happy if you want to help us with virus updates, I can create a tutorial for tomorrow. There's a special mailing list - [EMAIL PROTECTED] for develpers synchronizing (not used yet). Best regards, Tomasz Kojm -- oo. [EMAI

Re: [clamav-devel] Enhanced update system of Clam signatures

2003-06-05 Thread Tomasz Kojm
-- Start of PGP signed section. > Tomasz, > > managed to do any work on the signature generation tool yet? as I said i've sigtool will be rewritten from scratch, but 0.55 must be released first. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\

Re: [clamav-devel] Enhanced update system of Clam signatures

2003-06-05 Thread Tomasz Kojm
already is known. Sounds great. Please let us know when you're ready. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\

Re: [clamav-devel] Clam patch?

2003-06-10 Thread Tomasz Kojm
ay (check for a signature ?). There are many other files (eg. ms outlook. eudora files), that should be scanned too. I wonder what Nigel thinks about that ? Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \

Re: [clamav-devel] Undetected virii

2003-06-19 Thread Tomasz Kojm
32 to avoid getting tricked by > polymorphc/encripting virii. You can check: http://clamav.elektrapro.com/doc/signatures.pdf for basic instructions. If you can't create the signature(s), just send the sample to [EMAIL PROTECTED] Best regards, Tomasz Kojm --

Re: [clamav-devel] clamav-20030613

2003-06-19 Thread Tomasz Kojm
ecreated on Solaris. Should be fixed with the new release. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <-

Re: [clamav-devel] New virus I believe

2003-06-05 Thread Tomasz Kojm
> Hi, > > We are getting hit with what I assume is a new virus. Any where I can > send a copy of it too? I believe it's BugBear.B. Please update your database. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.kona

Re: [clamav-devel] ehrm....

2003-06-24 Thread Tomasz Kojm
> aCaB wrote: > > > I've tried submitting some samples + definitions to > > [EMAIL PROTECTED] but the mail is blocked by the av... > > Any hints? This virus is already detected by ClamAV. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED]

[clamav-devel] Re: fyi.. (fwd)

2003-06-27 Thread Tomasz Kojm
rary User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3) Gecko/20030312 X-Accept-Language: en-us, en To: Tomasz Kojm <[EMAIL PROTECTED]> Subject: Re: fyi.. References: <[EMAIL PROTECTED]> In-Reply-To: <[EMAIL PROTECTED]> X-Virus-Scanned: by AMaViS-perl11-milter (htt

Re: [clamav-devel] Metadata about viruses?

2003-06-28 Thread Tomasz Kojm
x 10 diff files organized by the serial Notice that we were only updating viruses.db2 file for the last two weeks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I

Re: [clamav-devel] Question about signatures

2003-06-30 Thread Tomasz Kojm
-- Start of PGP signed section. > Hello, > > Is there any detailed documentation on signature format, > how the polymorphic detection works (limitations, strenghts, etc)... Only this simple text is available: http://clamav.elektrapro.com/doc/signatures.pdf Best regards,

Re: [clamav-devel] Metadata about viruses?

2003-06-28 Thread Tomasz Kojm
the disinfectors for _really_popular_ viruses. I've implemented OLE2 (Word, Excel) cleaning. This is really simple, because the OLE2 format is just a filesystem and when a macro virus is found we just rebuild the file without that visual basic part. This code will be released in the next we

Re: [clamav-devel] Metadata about viruses?

2003-06-28 Thread Tomasz Kojm
fficient because we only update viruses.db2. A new database format must be implemented. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //

Re: [clamav-devel] Question about signatures

2003-07-07 Thread Tomasz Kojm
> signatures.pdf mentions regular expressions, yet, I can't > find any indication of regexes being used in clamav... > Any additional info would be greatly appreciated. It supports two wildcards: * for matching arbitrary strings and ?? for a one byte. Best regards, Tomasz Koj

Re: [clamav-devel] Compile problems

2003-07-10 Thread Tomasz Kojm
> And again did i some research and got it working. I attached the needed > patch. Thanks, I will check it. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w br

Re: [Clamav-devel] changelog latest snapshot

2003-08-02 Thread Tomasz Kojm
On Sat, 02 Aug 2003 13:43:34 +0200 Bastiaan van der Put <[EMAIL PROTECTED]> wrote: > Hi, > > Why is the change log not updated with the latest devel snapshot? Fixed, thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\...

Re: [Clamav-devel] Update

2003-08-14 Thread Tomasz Kojm
create a sourceforge account and contact me directly (and please sign your mail with gpg). Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w b

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-14 Thread Tomasz Kojm
ition indicators in signatures and always scans all data - generally it's a useful feature but the scanner might be a little slower in comparison to other scanners when a file is _huge_. The lack of position indicators sometimes causes false positive alerts, that's why they will be implemented in

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-16 Thread Tomasz Kojm
ature format (derived with .db2 extensions from OAV) is able to detect almost every virus. It isn't false positive proof, though. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-18 Thread Tomasz Kojm
On Mon, 18 Aug 2003 07:46:57 -0400 Yevgeniy Miretskiy <[EMAIL PROTECTED]> wrote: > On [08/16/03 20:27], Tomasz Kojm wrote: > > > - smarter handling of the '*' wildcard: being able to limit the > > > range between a min and a max would be great. I mean somet

[Clamav-devel] Re: feature request for clam (STREAM mode)

2003-08-18 Thread Tomasz Kojm
gn could be changed to using a > single TCP-Port. This would allow use to loadbalance/failover clamd I will implement the new "STREAM2" command which only will use a command descriptor. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\.

Re: [Clamav-devel] Re: feature request for clam (STREAM mode)

2003-08-18 Thread Tomasz Kojm
itch to something else --- for > most purposes, http. Unfortunately FTP is extremely popular and there are small chances people stop using it (unless all system administrators will burn it at the stake, just like Intel did with ISA). Best regards, Tomasz Kojm -- oo...

Re: [Clamav-devel] Re: feature request for clam (STREAM mode)

2003-08-19 Thread Tomasz Kojm
ks but the code leaves a lot to be desired. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Ambo

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-19 Thread Tomasz Kojm
On Tue, 19 Aug 2003 15:10:53 -0400 Yevgeniy Miretskiy <[EMAIL PROTECTED]> wrote: > On [08/15/03 04:57], Tomasz Kojm wrote: > > On Thu, 14 Aug 2003 13:12:20 -0400 > > > > ClamAV doesn't use position indicators in signatures and always > > scans all data - g

Re: [Clamav-devel] How to handle virii submissions

2003-08-20 Thread Tomasz Kojm
scp viruses2.md5 [EMAIL PROTECTED]:/home/groups/c/cl/clamav/htdocs/database For clamav.ozforces.com see the signatures.pdf file in the documentation directory. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \...

Re: [Clamav-devel] How to handle virii submissions

2003-08-20 Thread Tomasz Kojm
s submission number XXX". Save the mail (for ex. mail.raw), run 'uudecode mail.raw', this will create a file called "virus--number.zip" which contains an original message. Web submissions are more friendly - they contain a zipped message as an attachment. Best regards

Re: [Clamav-devel] freshclam reports runs error command on no update

2003-08-20 Thread Tomasz Kojm
update (and > 0 for a successful update). You're right, thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amb

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-21 Thread Tomasz Kojm
alize regular expressions in the trie > We also ran benchmarks with much larger virus database > (we made up about 8 addition "signature"), and, not surprisingly, Please create a _random_ signatures (using /dev/urandom or so) - I wonder if your virtual memory will hold

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-22 Thread Tomasz Kojm
the worst scenario. ClamAV is a "mission critical" application and we cannot depend on our expectations. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-23 Thread Tomasz Kojm
etected. You must remove the W32/BadTrans from viruses.db2. Now scan the oriente.com file from the zip archive with level 2: [EMAIL PROTECTED]:/tmp$ clamscan oriente.com oriente.com: W32/Magistr.B FOUND and with level 3: [EMAIL PROTECTED]:~/tests/Clam/clamscan$ ./clamscan

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-24 Thread Tomasz Kojm
s deteccted FINE with 3 levels. I'm not going to check that script. Please read the libclamav/matcher.c file very carefully and maybe you will understand why it _must_ fail. In our implementation the regular expressions in the trie CAN'T WORK. Best regards, Tomasz Kojm --

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-25 Thread Tomasz Kojm
On Sun, 24 Aug 2003 18:20:36 -0400 Yevgeniy Miretskiy <[EMAIL PROTECTED]> wrote: > On [08/24/03 15:40], Tomasz Kojm wrote: > > On Sun, 24 Aug 2003 09:08:45 -0400 > > > > YOU DON'T UNDERSTAND THE PROBLEM, COMPLETELY. I want you to answer > > on the question a

Re: [Clamav-devel] Libclam crashes...

2003-08-26 Thread Tomasz Kojm
e, and they don't like us > using "Pragma: no-cache". So, it would be nice if "freshclam" had the > option to switch it off. No problem. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw

Re: [Clamav-devel] Fwd: Clamd Socket Already Exist Error (patch attached)

2003-08-27 Thread Tomasz Kojm
es to be more technically > perfect. Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\

Re: [Clamav-devel] recognizing pats within text bodies?

2003-09-03 Thread Tomasz Kojm
cated ;)) than the last one. I'm very busy now but will check it soon. Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <

Re: [Clamav-devel] recognizing pats within text bodies?

2003-09-04 Thread Tomasz Kojm
ssing in the previous patch) for proper handling of CLI_IGN. I didn't test it but I'm sure it will work just fine - good work. Your patch will be applied just after the 0.61 release. Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\.

Re: [Clamav-devel] Replacement mbox.c (using ripmime)

2003-09-04 Thread Tomasz Kojm
in libclamav. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboine

Re: [Clamav-devel] Wish

2003-09-05 Thread Tomasz Kojm
able in libz). Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboinensis

Re: [Clamav-devel] uninterruptible sleep

2003-09-05 Thread Tomasz Kojm
What is your ClamAV version ? Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboinensiswww.pajacyk

Re: [Clamav-devel] recognizing pats within text bodies?

2003-09-05 Thread Tomasz Kojm
> Since the last patch I made some additions: >1. enable trie depth to be specified on command line (with default trie depth=2) Oh, no ;) >2. modified struct cl_node so that level member is unsigned char instead of > unsigned short int. OK. Best regards, Tomasz Kojm

Re: [Clamav-devel] Replacement mbox.c (using ripmime)

2003-09-07 Thread Tomasz Kojm
s a good question. Is the libpcre library stable ? I'm going to use it in libclamav. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I

Re: [Clamav-devel] uninterruptible sleep

2003-09-07 Thread Tomasz Kojm
> > What is your ClamAV version ? > > 0.60 > > 0.54 shows the same problem. OK, and what are your OS/kernel/(g)libc/gcc versions ? Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..

Re: [Clamav-devel] A stupid question

2003-09-09 Thread Tomasz Kojm
> Yevgeniy Miretskiy wrote: > > Sorry for a stupid question... > > What do cl_* and cli_* prefixes mean in function/structure names in > > clam? > > > I believe it's cl_ == clam and cli_ == clam_internal, but I'm not sure. That's

Re: [Clamav-devel] cl_rndnum()

2003-09-09 Thread Tomasz Kojm
t the writer thought that /dev/urandom always > returns the same "random" data after being opened, but quick tests and > googling I found nothing that proves this assumption... This assumption is false ;)) Best regards, Tomasz Kojm -- oo. [EMAIL PRO

Re: [Clamav-devel] VPATH build

2003-09-09 Thread Tomasz Kojm
-INCLUDES = -I.. -Izziplib > +INCLUDES = -I.. [EMAIL PROTECTED]@/zziplib You're right, thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek...

Re: [Clamav-devel] databases not getting installed

2003-09-10 Thread Tomasz Kojm
There's no need to include the databases in -devel. If someone uses -devel, then he probably does have an internet access. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I

Re: [Clamav-devel] libclamav problems

2003-09-14 Thread Tomasz Kojm
some more archive handlers. At least tar, LHA and ARC. I know it > may sound a bit foolish given (my own) discussion about recoding I'm working on tar support, however there are many standards :( and no GPL library (I've seen a BSD one, but we can't include it). Best regards, Tom

[Clamav-devel] clamd: critical fix (cvs only)

2003-09-14 Thread Tomasz Kojm
There was a race condition in the task manager. Please use the latest version. Only cvs versions are vulnerable to this bug. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij

Re: [Clamav-devel] libclamav problems

2003-09-16 Thread Tomasz Kojm
uld be handled well. Just setup proper limits. > to, if there is sane API... BTW there should be some "resource > consumption limiting" features in the archieve processing library... There are already resource limits. Best regards, Tomasz Kojm -- oo.

Re: [Clamav-devel] libclamav problems

2003-09-16 Thread Tomasz Kojm
> http://www.kyzo.com/nclamd/ links returns with "Host not found" Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\

Re: [Clamav-devel] Patch to fix infloop when scanning faulty RAR files

2003-09-21 Thread Tomasz Kojm
> When scanning RAR files that wouldn't unpack properly, clamscan would > just infloop. The following fixes this, but might not be the most > optimal fix. Thanks - this is now fixed in CVS. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\

Re: [Clamav-devel] Patch to allow scanning a news spool

2003-09-21 Thread Tomasz Kojm
sweep a spool, at least. Thanks. Enabled in CVS. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek... //\ /\\ <- C. Amboinen

Re: [Clamav-devel] SIGSEGV in clamd on OpenBSD

2003-09-23 Thread Tomasz Kojm
> > >do you experience this with the latest snapshot? > > Yes, same problem with clamav-devel-20030922 snapshot. I'm happy to > continue debugging, however I'm running out of ideas... Is this only a OpenBSD issue ? Best regards, Tomasz Kojm -- oo

Re: [Clamav-devel] TCP Address Patch

2003-09-26 Thread Tomasz Kojm
: there's a small cut&paste bug in line 44: s/TCPSocket/TCPAddr). The patch will be included on Monday. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brzuszek...

Re: [Clamav-devel] clamd crash with full disclosure

2003-09-26 Thread Tomasz Kojm
> > clamd aborted tonight after a mail from full-disclosure > I run the snapshot from 20030829 on FreeBSD You should update to the latest CVS version. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu

Re: [Clamav-devel] NetBSD diffs for clamav

2003-09-30 Thread Tomasz Kojm
> -current NetBSD with native pthreads or gnu-pth where native threads > aren't available. > > The diff is against the 0.60 release. Thank you, the changes will be included in the next release. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\.

Re: [Clamav-devel] clamav-milter patch

2003-10-09 Thread Tomasz Kojm
haps it would be reasonable to release a new version of clamav if > there are indeed a significant number of stability fixes since 0.60. > Telling people to use CVS snapshots only works for so long. New version is almost finished but we need more cvd testing on different systems and architec

Re: [Clamav-devel] Re: Clamav-milter and Sendmail problem.

2003-10-17 Thread Tomasz Kojm
re are major problems with the zziplib library - the latest update (not available for public CVS users due to SF problems) still doesn't fix it. I'm going to contact the zziplib author today. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\..

Re: [Clamav-devel] clamd hang - Seg fault on new database.

2003-10-18 Thread Tomasz Kojm
oad. > Fri Oct 17 06:03:40 2003 -> SelfCheck: Integrity OK > Fri Oct 17 06:03:40 2003 -> Reading databases from > /usr/local/share/clamav Fri Oct 17 06:03:40 2003 -> Segmentation fault > :-( Bye.. This is already fixed, but public CVS server is out of sync (due to SF proble

Re: [Clamav-devel] clamd hang - Seg fault on new database.

2003-10-21 Thread Tomasz Kojm
On Tue, 21 Oct 2003 10:42:10 +1000 Craig Barraclough <[EMAIL PROTECTED]> wrote: > On Sunday 19 October 2003 04:33, Tomasz Kojm wrote: > > This is already fixed, but public CVS server is out of sync (due to > > SF problems). > > > > Just a quick follow-up,

Re: [Clamav-devel] clamd bind() error: Address already in use

2003-10-27 Thread Tomasz Kojm
socket option before binding (see > attached patch for 20031020 snapshot) Thanks - commited in CVS. Best regards, Tomasz Kojm -- oo. http://www.clamav.net/gpg/tkojm.gpg (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B \..._ Mon

Re: [Clamav-devel] [PATCH] accept message on error command line option

2003-10-27 Thread Tomasz Kojm
rather than have all mail > be undeliverable. Maybe it's a good idea to implement a backup support for clamscan ? Best regards, Tomasz Kojm -- oo. http://www.clamav.net/gpg/tkojm.gpg (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B \.

Re: [Clamav-devel] daily.cvd?

2003-10-28 Thread Tomasz Kojm
ted yet? We're testing a new mechanism - database.clamav.net is a round-robin dns and all mirrors are updated automatically from the main site. At least theoretically. Thanks for the bug report. Were the next freshclam attempts (in the same session) successful ? Best regards

Re: [Clamav-devel] race condition in clamd

2003-10-31 Thread Tomasz Kojm
re will be a delay in new thread execution (eg. some context switching), the main thread may assign the same thread session once more. > itself. And it is good to close descriptor if the thread did not start > (due to lack of system resources, for example). Right. Thank you. Best regards,

Re: [Clamav-devel] race condition in clamd

2003-10-31 Thread Tomasz Kojm
ched by pthread id %d.\n", > (int)pthread_self()); Some thread libraries use internal structures for pthread_t so we shouldn't cast it because it makes the code not portable. Thanks. Best regards, Tomasz Kojm -- oo. http://www.clamav.net/gpg/tkojm.gpg

Re: [Clamav-devel] race condition in clamd

2003-11-01 Thread Tomasz Kojm
On Sat, 1 Nov 2003 01:59:16 -0500 Mark Mielke <[EMAIL PROTECTED]> wrote: > On Sat, Nov 01, 2003 at 03:27:54AM +0100, Tomasz Kojm wrote: > > 29 22:00:12 2003 > > > @@ -27,6 +27,7 @@ > > > #include > > > #include > > > #include > &

Re: [Clamav-devel] daily.cvd?

2003-11-01 Thread Tomasz Kojm
On Fri, 31 Oct 2003 17:55:37 -0500 Mark Mielke <[EMAIL PROTECTED]> wrote: > With the latest 'cvs update -P', the behaviour has improved, but still > indicates that something is wrong: That should be definitely fixed now - please update your local repository. Bes

Re: [Clamav-devel] daily.cvd?

2003-11-01 Thread Tomasz Kojm
On Sat, 1 Nov 2003 21:42:45 -0500 Mark Mielke <[EMAIL PROTECTED]> wrote: > On Sun, Nov 02, 2003 at 01:30:16AM +0100, Tomasz Kojm wrote: > > On Fri, 31 Oct 2003 17:55:37 -0500 > > Mark Mielke <[EMAIL PROTECTED]> wrote: > > > With the latest 'cvs up

Re: [Clamav-devel] race condition in clamd

2003-11-01 Thread Tomasz Kojm
software but I think it's quite a good idea to implement an autoconf macro that will check for a thread-safe errno. Some older software may not be compatible (just like old linux kernels don't support sendfile() and clamav compilation fails) and I think a code using errno should be #ifdefin

Re: [Clamav-devel] race condition in clamd

2003-11-02 Thread Tomasz Kojm
rno on per-thread basis. I used to negate errno usage in clamav but after this discussion (and some google'ing) I'm no longer an opponent. Thanks ;) > sendfile() is not correct as sendfile() is not a standard UNIX system > call. Well, it seems errno usage in threads is not standar

Re: [Clamav-devel] race condition in clamd

2003-11-02 Thread Tomasz Kojm
> I recommend you get (and read...) [1]. I have no much time for books :-(( Best regards, Tomasz Kojm -- oo. http://www.clamav.net/gpg/tkojm.gpg (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B \..._ Sun Nov 2 14:28:38 CET 2003

Re: [Clamav-devel] "nclamd" - An alternative "clamd"

2003-11-03 Thread Tomasz Kojm
y - I had no time to check the sources but will do it when the new version is released. Best regards, Tomasz Kojm -- oo. http://www.clamav.net/gpg/tkojm.gpg (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B \..._ Mon Nov 3 15:30:55 CET 20

  1   2   3   4   5   6   >