Re: [Clamav-users] Clamd was NOT notified

2010-04-27 Thread Jerry
On Tue, 27 Apr 2010 02:34:14 GMT Mark ad...@asarian-host.net articulated: On 4/26/10 6:01 PM, Mark wrote: I just upgraded to clamav 0.96.1 on FreeBSD 7. Everyhing seemed to be running fine, except that I suddenly got this message in my freshclam log: WARNING: Clamd was NOT

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Török Edwin
On 04/22/2010 05:26 PM, Kris Deugau wrote: I've had reports of several FPs due to PhishingScanURLs recently - is there any way it can be made less aggressive rather than just turning it off outright? You could remove domains from daily.pdb/whitelist all mails that contain certain domains.

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Nathan Gibbs
* Simon Hobson wrote: h...@dip-systems.de wrote: After the last signature update, clam av stopped working on our woody installation. Is there no more support for this Debian Release? No, according to certain people on this list, you are a cretin, and incompetent to even handle the off

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Jim Preston
Nathan Gibbs wrote: Unfortunately. If an old Clamav was installed on a system that did a vital task, but could basically be a set it and forget it system, the setup got shafted by the ClamAV team. No other way to call it. To me this is an oxymoron vital task + set and forget Set and forget

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Kris Deugau
Török Edwin wrote: On 04/22/2010 05:26 PM, Kris Deugau wrote: I've had reports of several FPs due to PhishingScanURLs recently - is there any way it can be made less aggressive rather than just turning it off outright? You could remove domains from daily.pdb I don't seem to have this as a

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Török Edwin
On 04/27/2010 08:57 PM, Kris Deugau wrote: Török Edwin wrote: On 04/22/2010 05:26 PM, Kris Deugau wrote: I've had reports of several FPs due to PhishingScanURLs recently - is there any way it can be made less aggressive rather than just turning it off outright? You could remove domains from

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Kris Deugau
Török Edwin wrote: Are you sure it was a Heuristics.Phishing.*, or Phishing.Heuristics.* detection? It doesn't look at the subject line at all. Pretty certain; I don't recall the username so it's a bit hard to check back in the mail logs. What does the 17- at the end indicate? It

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Török Edwin
On 04/27/2010 10:40 PM, Kris Deugau wrote: *snort* ISP end-users running *nix? Well, maybe one or two out of ~50K... g Well python runs on Windows as well, and there is even something like py2exe which embeds a python intepreter with the script. But its probably too much hassle to get even

[Clamav-users] Resources for integrating with spamassassin+amavisd

2010-04-27 Thread Alex
Hi, I'm using sa-v3.2.5 and amavisd with clamav-0.96 and it appears to be working properly. clamdcheck periodically sends the eicar virus test and clamd reports that it found it properly. What is the best procedure for now integrating the sanesecurity signatures? Are these ready for use on a

Re: [Clamav-users] Resources for integrating with spamassassin+amavisd

2010-04-27 Thread Dennis Peterson
Hi, I've done some research on the best way to integrate it, but hoped someone could point me to a current document that outlines how to do this and help me answer some of my questions. The best way to integrate them is to follow the instructions at Steve's web site (Sane Security).

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Nathan Gibbs
* Jim Preston wrote: To me this is an oxymoron vital task + set and forget Set and forget solutions are for NON-VITAL tasks by the very statement of 'forget'. Your opinion, which you are entitled to. I'll agree to disagree with you. :-) it is up to THEM to ensure changes to the project

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Sarocet
Nathan Gibbs wrote: Here is what I absolutely do not like about this or agree with. The very possibility of there being a kill sig. One specially crafted sig could kill the virus protection on every server workstation in our company. Allowing the ClamAV Team to remotely nuke a level of our

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Jim Preston
On Apr 27, 2010, at 3:23 PM, Sarocet wrote: Nathan Gibbs wrote: Here is what I absolutely do not like about this or agree with. The very possibility of there being a kill sig. One specially crafted sig could kill the virus protection on every server workstation in our company.

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Nathan Gibbs
* Jim Preston wrote: On Apr 27, 2010, at 3:23 PM, Sarocet wrote: The ClamAV team didn't design the AV to stop on getting a special signature. That signature could exist due to a bug that you decided not to fix (by not updating/patching). It was a clever use of a bug to disable the daemon.

[Clamav-users] Large File problems

2010-04-27 Thread rickeng
I have a zip file of PDF files I'm trying to scan, the file is 2623701980 bytes. I've set all the Limits to 0 but still no joy. I'm running the latest version, on Solaris 10, x86. I have a lot more files like this coming soon and really need to get this working so any help would be great.

Re: [Clamav-users] Large File problems

2010-04-27 Thread Gianluigi Tiesi
On 28/04/2010 5.24, rick...@mm.com wrote: I have a zip file of PDF files I'm trying to scan, the file is 2623701980 bytes. I've set all the Limits to 0 but still no joy. I'm running the latest version, on Solaris 10, x86. I have a lot more files like this coming soon and really need to get

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Gianluigi Tiesi
On 21/04/2010 13.54, h...@dip-systems.de wrote: After the last signature update, clam av stopped working on our woody installation. Is there no more support for this Debian Release? NO! woody was released in 2002 (8 years ago) they stopped releasing security updates on Jun 2006 (4 year