Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Andrew McGlashan
On 22/06/18 06:58, Gene Heskett wrote: > All sounds well and good, but where do I find the tut and tools to adjust > this? http://www.openspf.org/Project_Overview Cheers A. ___ clamav-users mailing list clamav-users@lists.clamav.net

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Gene Heskett
On Thursday 21 June 2018 23:08:34 Andrew McGlashan wrote: > On 22/06/18 07:21, Gene Heskett wrote: > > On Thursday 21 June 2018 17:12:51 Al Varnell wrote: > >> Gene, > >> > >> If you aren't responsible for an e-mail domain, then none of this > >> applies to you. > >> > >> Based on the e-mail

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Andrew McGlashan
On 22/06/18 07:21, Gene Heskett wrote: > On Thursday 21 June 2018 17:12:51 Al Varnell wrote: > >> Gene, >> >> If you aren't responsible for an e-mail domain, then none of this >> applies to you. >> >> Based on the e-mail address you are using, this isn't anything you >> should care about. >>

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Gene Heskett
On Thursday 21 June 2018 17:12:51 Al Varnell wrote: > Gene, > > If you aren't responsible for an e-mail domain, then none of this > applies to you. > > Based on the e-mail address you are using, this isn't anything you > should care about. > > -Al- > That is what I was trying to drill down to Al.

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Al Varnell
Gene, If you aren't responsible for an e-mail domain, then none of this applies to you. Based on the e-mail address you are using, this isn't anything you should care about. -Al- On Thu, Jun 21, 2018 at 01:58 PM, Gene Heskett wrote: > All sounds well and good, but where do I find the tut and

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Gene Heskett
On Thursday 21 June 2018 11:47:02 Andrew McGlashan wrote: > On 21/06/18 23:29, Gene Heskett wrote: > > What I'd like to see is a good description of SPF. All these > > acronyms get thrown around, usually with no references as to why its > > even needed or how to implement it. Does it help

Re: [clamav-users] DWFx files tagged as Xml.Exploit.CVE_2018_4975-6545149-0

2018-06-21 Thread Brian Gawith
That may have been us as well. We sent in a report earlier this week but hadn't heard anything and were still having the issue so I figure I would reach out and see if there was anything else I could do. -Brian Gawith, I.T. Services Manager From: clamav-users On Behalf Of Alain Zidouemba

Re: [clamav-users] DWFx files tagged as Xml.Exploit.CVE_2018_4975-6545149-0

2018-06-21 Thread Alain Zidouemba
We actually got another FP report for the signature Xml.Exploit.CVE_2018_4975-6545149-0 triggering on AutoCAD DWFx files. We dropped Xml.Exploit.CVE_2018_4975-6545149-0 from the signature set earlier today pending further investigation on how the signature could be re-written to avoid FPs on these

Re: [clamav-users] I thought this was fixed...

2018-06-21 Thread Eric Tykwinski
> Looks like Eric is running a build from the development branch (dev/0.101) > from GitHub (not a beta, but ... a work in progress towards the next > version). Micah, that's correct. I was just testing things out on Bash for Windows, and it's working good so far. > Freshclam doesn't

Re: [clamav-users] I thought this was fixed...

2018-06-21 Thread Micah Snyder (micasnyd)
Looks like Eric is running a build from the development branch (dev/0.101) from GitHub (not a beta, but ... a work in progress towards the next version). Freshclam doesn't actually parse the version string to see if your version number less than the current version, it just checks if it's

[clamav-users] DWFx files tagged as Xml.Exploit.CVE_2018_4975-6545149-0

2018-06-21 Thread Brian Gawith
We use a replication platform that has ClamAV baked in so can't really use the standard whitelist procedures, or at least not that I am aware of. Anyway we are getting a bunch of our AutoCAD DWFx files that are being tagged for the virus Xml.Exploit.CVE_2018_4975-6545149-0. I can't figure out

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Andrew McGlashan
On 21/06/18 23:29, Gene Heskett wrote: > What I'd like to see is a good description of SPF. All these acronyms > get thrown around, usually with no references as to why its even needed > or how to implement it. Does it help control the neighborhood feral cat > problem or what? If email is

Re: [clamav-users] I thought this was fixed...

2018-06-21 Thread Thomas McCourt (tmccourt)
Hello, Yes, it is going to. Because it’s beta and not an “official version” Once you upgrade to the official version, that should disappear. Thank you, Tom McCourt | Talos: Open Source Team| tmcco...@cisco.com From: clamav-users on behalf of Eric Tykwinski

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Gene Heskett
On Thursday 21 June 2018 09:33:31 Reindl Harald wrote: > Am 21.06.2018 um 15:29 schrieb Gene Heskett: > > On Thursday 21 June 2018 06:54:43 Andrew McGlashan wrote: > >> On 21/06/18 17:54, Tilman Schmidt wrote: > >>> Am 20.06.2018 um 19:14 schrieb Andrew McGlashan: > This is an opportunity to

[clamav-users] I thought this was fixed...

2018-06-21 Thread Eric Tykwinski
Not a big deal, but the version check is still throwing version errors on beta: Thu Jun 21 09:59:51 2018 -> ClamAV update process started at Thu Jun 21 09:59:51 2018 Thu Jun 21 09:59:51 2018 -> ^Your ClamAV installation is OUTDATED! Thu Jun 21 09:59:51 2018 -> ^Local version: 0.101.0

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Gene Heskett
On Thursday 21 June 2018 06:54:43 Andrew McGlashan wrote: > On 21/06/18 17:54, Tilman Schmidt wrote: > > Am 20.06.2018 um 19:14 schrieb Andrew McGlashan: > >> This is an opportunity to fix things, such an opportunity should > >> not lost, especially if it helps more people to understand the > >>

Re: [clamav-users] ClamAV website FP form

2018-06-21 Thread Paul Stead
https://www.clamav.net/reports/fp - ignore me From: Paul Stead Date: Thursday, 21 June 2018 at 14:09 To: ClamAV users Subject: ClamAV website FP form Hi guys, Is there a https version of the FP form that we can use? Paul -- Paul Stead Senior Engineer (Tools & Technology) Zen Internet

[clamav-users] ClamAV website FP form

2018-06-21 Thread Paul Stead
Hi guys, Is there a https version of the FP form that we can use? Paul -- Paul Stead Senior Engineer (Tools & Technology) Zen Internet Direct: 01706 902018 Web: zen.co.uk Winner of 'Services Company of the Year' at the UK IT Industry Awards This message is private and confidential. If you

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Andrew McGlashan
On 21/06/18 17:54, Tilman Schmidt wrote: > Am 20.06.2018 um 19:14 schrieb Andrew McGlashan: > >> This is an opportunity to fix things, such an opportunity should not >> lost, especially if it helps more people to understand the problems with >> having too liberal SPF rules (defeating the

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Joel Esler (jesler)
> On Jun 21, 2018, at 3:54 AM, Tilman Schmidt wrote: > >> Am 20.06.2018 um 19:14 schrieb Andrew McGlashan: >> >> This is an opportunity to fix things, such an opportunity should not >> lost, especially if it helps more people to understand the problems with >> having too liberal SPF rules

Re: [clamav-users] clamav list spf problem

2018-06-21 Thread Tilman Schmidt
Am 20.06.2018 um 19:14 schrieb Andrew McGlashan: > This is an opportunity to fix things, such an opportunity should not > lost, especially if it helps more people to understand the problems with > having too liberal SPF rules (defeating the purpose of SPF). I disagree. The purpose of