[Clamav-users] Freshclam error after upgrade

2004-11-14 Thread Jason Dixon
I just upgraded my clamav installation from 0.75 to 0.80 on my RHEL 3.0 server. After merging my configuration changes, clamd is running fine. However, I'm running into problems with freshclam: [EMAIL PROTECTED] root]# freshclam --datadir=/var/amavis/clamav

Re: [Clamav-users] Freshclam error after upgrade

2004-11-14 Thread Matt
Jason Dixon wrote: ERROR: Please edit the example config file /etc/freshclam.conf. Comment out the example line? ERROR: Can't open /var/amavis/clamav/logs/freshclam.log in append mode (check permissions!). Whom are the user and group in clamd.conf? Matt

Re: [Clamav-users] clamd segfaults

2004-11-14 Thread Bernhard Erdmann
What exact version of zlib do you have installed? Upgrade to zlib 1.2.2. 1.1.4 is installed smime.p7s Description: S/MIME Cryptographic Signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] ClamAV should not try to detect phishing and other social engineering attacks

2004-11-14 Thread Julian Mehnle
Hi all, since ClamAV reached v0.80, I am using it to scan and reject e-mail messages. Today I noticed that ClamAV also detects phishing attacks. Phishing is pure social engineering and poses no threat whatsoever in a technical sense. How can I configure ClamAV not to try to detect phishing and

Re: [Clamav-users] ClamAV should not try to detect phishing and other social engineering attacks

2004-11-14 Thread Matt
Julian Mehnle wrote: How can I configure ClamAV not to try to detect phishing and other social engineering attacks? Why? Your prerogative, obviously, but I am just curious. Matt ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Freshclam error after upgrade

2004-11-14 Thread Jason Dixon
On Nov 14, 2004, at 7:35 AM, Matt wrote: Jason Dixon wrote: ERROR: Please edit the example config file /etc/freshclam.conf. Comment out the example line? LOL! Thanks Matt, that fixed it. /me smacks his head in disbelief. -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net

Re: [Clamav-users] ClamAV should not try to detect phishing and other social engineering attacks

2004-11-14 Thread Tomasz Kojm
On Sun, 14 Nov 2004 13:58:53 +0100 Julian Mehnle [EMAIL PROTECTED] wrote: Hi all, since ClamAV reached v0.80, I am using it to scan and reject e-mail messages. Today I noticed that ClamAV also detects phishing attacks. Phishing is pure social engineering and poses no threat whatsoever in

Re: [Clamav-users] ClamAV should not try to detect phishing and othersocial engineering attacks

2004-11-14 Thread Steve Basford
since ClamAV reached v0.80, I am using it to scan and reject e-mail messages. Today I noticed that ClamAV also detects phishing attacks. Phishing is pure social engineering and poses no threat whatsoever in a technical sense. I'm certainly *very* happy that ClamAV team have added more phishing

Re: [Clamav-users] ClamAV should not try to detect phishing and othersocial engineering attacks

2004-11-14 Thread Joe Maimon
Steve Basford wrote: since ClamAV reached v0.80, I am using it to scan and reject e-mail messages. Today I noticed that ClamAV also detects phishing attacks. Phishing is pure social engineering and poses no threat whatsoever in a technical sense. I'm certainly *very* happy that ClamAV team

RE: [Clamav-users] ClamAV should not try to detect phishing andother social engineering attacks

2004-11-14 Thread Julian Mehnle
Matt [EMAIL PROTECTED] wrote: Julian Mehnle wrote: How can I configure ClamAV not to try to detect phishing and other social engineering attacks? Why? Your prerogative, obviously, but I am just curious. For three reasons: 1. I consider filtering technically harmful messages for my users

Re: [Clamav-users] ClamAV should not try to detect phishing andother social engineering attacks

2004-11-14 Thread John Jolet
On the issue of manually reviewing the mails to submitisn't this the purpose of the quarantine directory? When it detects a phishing malware, look at the file in the quarantine directory. On Sunday 14 November 2004 8:57 am, Julian Mehnle wrote: Matt [EMAIL PROTECTED] wrote: Julian

RE: [Clamav-users] ClamAV should not try to detect phishing andothersocial engineering attacks

2004-11-14 Thread Julian Mehnle
John Jolet [EMAIL PROTECTED] wrote: On the issue of manually reviewing the mails to submitisn't this the purpose of the quarantine directory? When it detects a phishing malware, look at the file in the quarantine directory. I also don't believe in quarantine directories, which have to be

Re: [Clamav-users] ClamAV should not try to detect phishing and othersocial engineering attacks

2004-11-14 Thread Bart Silverstrim
On Nov 14, 2004, at 9:26 AM, Steve Basford wrote: since ClamAV reached v0.80, I am using it to scan and reject e-mail messages. Today I noticed that ClamAV also detects phishing attacks. Phishing is pure social engineering and poses no threat whatsoever in a technical sense. I'm certainly

Re: [Clamav-users] ClamAV should not try to detect phishing and othersocial engineering attacks

2004-11-14 Thread Bart Silverstrim
On Nov 14, 2004, at 9:32 AM, Joe Maimon wrote: Steve Basford wrote: since ClamAV reached v0.80, I am using it to scan and reject e-mail messages. Today I noticed that ClamAV also detects phishing attacks. Phishing is pure social engineering and poses no threat whatsoever in a technical sense.

Re: [Clamav-users] ClamAV should not try to detect phishing andother social engineering attacks

2004-11-14 Thread Bart Silverstrim
On Nov 14, 2004, at 10:01 AM, John Jolet wrote: On the issue of manually reviewing the mails to submitisn't this the purpose of the quarantine directory? When it detects a phishing malware, look at the file in the quarantine directory. I think he's thinking that this is more time and labor

Re: [Clamav-users] clamav on woody: clamav-milter hangs when stopped

2004-11-14 Thread Stephen Gran
On Sat, Nov 13, 2004 at 09:03:43PM -0500, Joe Maimon said: Stephen Gran wrote: On Thursday 11 November 2004 05:56 pm, Stephen Gran wrote: So, when start-stop-daemon (or daemon) sends a kill signal, it ends up signalling the wrong thread, and it takes a long time for the signal to work.

Re: [Clamav-users] ClamAV should not try to detect phishing and othersocial engineering attacks

2004-11-14 Thread BitFuzzy
Joe Maimon wrote: I'm certainly *very* happy that ClamAV team have added more phishing detections (thanks Trog et all). Yes, you're correct it's social engineering but it doesn't stop users clicking on the links and downloading the keylogging trojan, from the remote site that the phish email

RE: [Clamav-users] ClamAV should not try to detect phishing and other social engineering attacks

2004-11-14 Thread Julian Mehnle
BitFuzzy [EMAIL PROTECTED] wrote: So blocking [social engineering attacks] can only be seen as a good thing. I disagree, and I already explained why. I don't even request that ClamAV completely stop detecting such stuff, I just request that I have the option of disabling it.

Re: [Clamav-users] ClamAV should not try to detect phishing andothersocial engineering attacks

2004-11-14 Thread John Jolet
On Sunday 14 November 2004 9:17 am, Julian Mehnle wrote: John Jolet [EMAIL PROTECTED] wrote: On the issue of manually reviewing the mails to submitisn't this the purpose of the quarantine directory? When it detects a phishing malware, look at the file in the quarantine directory. I

RE: [Clamav-users] ClamAV should not try to detect phishingandothersocial engineering attacks

2004-11-14 Thread Julian Mehnle
John Jolet [EMAIL PROTECTED] wrote: On Sunday 14 November 2004 9:17 am, Julian Mehnle wrote: [...] I outright reject unwanted messages during the SMTP transaction, so the sender gets notified. [...] I would agree with that practice, except in this day and age of spoofed addresses and

Re: [Clamav-users] ClamAV should not try to detect phishing andothersocial engineering attacks

2004-11-14 Thread Dennis Peterson
John Jolet wrote: On Sunday 14 November 2004 9:17 am, Julian Mehnle wrote: John Jolet [EMAIL PROTECTED] wrote: My users can see what messages have been rejected by skimming over a list of recently rejected messages once or twice a week (see an example here[1]). This practice has proven to work

Re: [Clamav-users] ClamAV should not try to detect phishing and other social engineering attacks

2004-11-14 Thread Jason Haar
This is a me too. I am ABSOLUTELY in love with ClamAV due to the fact it has gone beyond what most commercial AV players are doing, and is incorporating scanning for phishing and spyware. If you follow the industry, you will see that most AV vendors are bringing out *separate* products to