Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Dennis Peterson
Steve Basford wrote: > > Christopher X. Candreva wrote: >> If the script could be on the file name instead of the directory name it >> would be better. >> >> > Hmm... would this work for you script? > > http://www.sanesecurity.com/clamav/phishsigs/index.php > http://www.sanesecurity.com/clama

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Steve Basford
Christopher X. Candreva wrote: > If the script could be on the file name instead of the directory name it > would be better. > > Hmm... would this work for you script? http://www.sanesecurity.com/clamav/phishsigs/index.php http://www.sanesecurity.com/clamav/scamsigs/index.php ___

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Christopher X. Candreva
On Tue, 8 May 2007, Steve Basford wrote: > (depending if you want the phishing sigs or the scam sigs) > > Main: > http://www.sanesecurity.co.uk/clamav/phishsigs/ > http://www.sanesecurity.co.uk/clamav/scamsigs/ The only problem is the lack of the final file-name in the URL. This breaks my perl

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Noel Jones
At 02:03 PM 5/8/2007, Steve Basford wrote: >In a nutshell, instead of me giving out lists of mirrors for you to >download from... or *you* having to change your scripts >each time there is a mirror changeI thought this might be a better idea. > >Can the scripts be changed to get the sigs from

[Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Steve Basford
Hi All, Firstly thanks for all the scripts and feedback, if I've not replied to anyone via email, bear with me as it's a little hectic right now, with one thing or another :) Okay, thanks to tbb (Nico) for pointing me toward this great redirect/rotator script, with management capabilities. In a

Re: [Clamav-users] Unix socket vs IP Socket

2007-05-08 Thread Fabio Pedretti
Ideally, it should be faster if using only the unix socket, but there is this in clamdscan/client.c: /* #define ENABLE_FD_PASSINGFIXME: Doesn't work yet */ But since it's passing the file stream, should not be possible to scan all files, regardless of the file permission, with clamds

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Rick Cooper
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Ralf Hildebrandt > Sent: Tuesday, May 08, 2007 3:07 AM > To: clamav-users@lists.clamav.net > Subject: Re: [Clamav-users] OT: Sanesecurity Sigs: Important News > > * Rick Cooper <[EMAIL PROTECTED]

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Dennis Peterson
Dennis Peterson wrote: > > A kinder, gentler usage of wget would include -N to prevent getting the > same file over and over thereby burning off Steve's bandwidth. Just be > sure to preserve the name and time stamp of the gz files when you ungzip > them. Use: > gunzip -c phish.ndb phish.ndb.gz

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Dennis Peterson
Noel Jones wrote: > At 03:17 AM 5/8/2007, Alexander Grüner wrote: >> Ralf, >> >> I wrote a small script by myself - very simpel. It seems to work now for >> months. >> >> #!/bin/sh >> cd /tmp >> # Unofficial Phising rules for ClamAV >> wget -nd -m http://ftp.tiscali.nl/sanesecurity/phish.ndb.gz >>

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Noel Jones
At 03:17 AM 5/8/2007, Alexander Grüner wrote: >Ralf, > >I wrote a small script by myself - very simpel. It seems to work now for >months. > >#!/bin/sh >cd /tmp ># Unofficial Phising rules for ClamAV >wget -nd -m http://ftp.tiscali.nl/sanesecurity/phish.ndb.gz >wget -nd -m http://ftp.tiscali.nl/san

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Alexander Grüner
Ralf, I wrote a small script by myself - very simpel. It seems to work now for months. #!/bin/sh cd /tmp # Unofficial Phising rules for ClamAV wget -nd -m http://ftp.tiscali.nl/sanesecurity/phish.ndb.gz wget -nd -m http://ftp.tiscali.nl/sanesecurity/scam.ndb.gz cp phish.ndb.gz /var/lib/clamav/ c

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Ralf Hildebrandt
* Rick Cooper <[EMAIL PROTECTED]>: > I assume (again) that you meant clamscan --debug causes an issue? What does > it do exactly that causes an issue? The output looks like this: LibClamAV debug: Loading databases from /var/lib/clamav/ LibClamAV debug: Loading databases from /var/lib/clamav//mai

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Ralf Hildebrandt
* René Berber <[EMAIL PROTECTED]>: > | Unfortunately I had to rewrite that script until it worked :( > | The download URLs for the mirrors are incorrect and for some reason it > | pukes on the output of Debian's clamd --debug > > Thanks for both replies. > > I'll take that script for a test. I