Re: [Clamav-users] clamav-milter dies after update by freshclam

2006-10-30 Thread Nigel Horne
Михаил Исаев wrote: ClamAV version - snapshot 20061026 (also testing v0.90RC1.1) OS - Solaris 5.9 (with updated zlib v1.2.3, gcc v3.4.0) I have a problem with clamav-milter: it's die when freshclam gots errors. See also bug 113. -- Nigel Horne. Arranger, Adjudicator, Band Trainer, Composer,

Re: [Clamav-users] clamav-milter dies after update by freshclam

2006-10-30 Thread Михаил Исаев
Hi, Nigel. See also bug 113. I can't see this bug: You are not authorized to access bug #113 (i am logged in to Bugzilla before search). Can you post this bug here? Best regards, Michael Isaev ___

Re: [Clamav-users] clamav-milter dies after update by freshclam

2006-10-30 Thread Tomasz Kojm
On Mon, 30 Oct 2006 09:52:11 +0900 Михаил Исаев [EMAIL PROTECTED] wrote: ClamAV version - snapshot 20061026 (also testing v0.90RC1.1) OS - Solaris 5.9 (with updated zlib v1.2.3, gcc v3.4.0) Do you use the experimental code (--enable-experimental)? -- oo. Tomasz Kojm [EMAIL

[Clamav-users] Clamav 0.90RC1.1 problems for BSD/OS

2006-10-30 Thread Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem
For some reason or the other I cannot get clamav 0.90RC1.1 to behave itself. I have a similar clamd.conf that I do for 0.88.5 yet when I try to start clamav-milter afterwards, it states that clamd is missing. Using 127.0.0.1/3310 method. -- This message has been scanned for viruses and

[Clamav-users] Re: clamav-milter dies after update by freshclam

2006-10-30 Thread Ian Abbott
On 30/10/2006 08:58, Михаил Исаев wrote: Hi, Nigel. See also bug 113. I can't see this bug: You are not authorized to access bug #113 (i am logged in to Bugzilla before search). Can you post this bug here? Here it is: Description: [reply]Opened: 2006-10-28 15:16 On two Fedora Core

Re: [Clamav-users] Clamav 0.90RC1.1 problems for BSD/OS

2006-10-30 Thread Odhiambo Washington
* On 30/10/06 05:31 -0700, Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem wrote: | For some reason or the other I cannot get clamav 0.90RC1.1 to | behave itself. I have a similar clamd.conf that I do for 0.88.5 yet | when I try to start clamav-milter afterwards, it

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread Kris Deugau
Kris Deugau wrote: From the problems I'm having with supposedly malformed signatures, it looks like there's an effective complexity limit; from the problems in *matching* a signature that's finally been found to be acceptable, it looks like there's a (lower) limit on what Clam can actually

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread Steve Holdoway
On Mon, 30 Oct 2006 19:35:13 +0100 aCaB [EMAIL PROTECTED] wrote: So, this: 474946383761??(01|00)??0044 Should really read: 47494638376144 Or even 474946383761??0(0|1)??0044 ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread Steve Holdoway
On Tue, 31 Oct 2006 07:48:46 +1300 Steve Holdoway [EMAIL PROTECTED] wrote: On Mon, 30 Oct 2006 19:35:13 +0100 aCaB [EMAIL PROTECTED] wrote: So, this: 474946383761??(01|00)??0044 Should really read: 47494638376144 Or even 474946383761??0(0|1)??0044 Sorry, scrap that.

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread Tomasz Kojm
On Mon, 30 Oct 2006 19:35:13 +0100 aCaB [EMAIL PROTECTED] wrote: Kris Deugau wrote:

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread aCaB
Steve Holdoway wrote: Or even 474946383761??0(0|1)??0044 Nope! Bytes only, no nibbles. ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread aCaB
Tomasz Kojm wrote: with 0.9x Indeed! :) ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread Kris Deugau
aCaB wrote: Kris Deugau wrote: ImgSpam.Misc.5:0:0:474946383761??(01|00)??00442c??(01|00)??0084(00|48|53)(00|15)(00|30|1c)f0f0f0(f0|e0|c0)f0(e0|b0|f0|d0|c0)f0(00|f0|40)(00|d0|e0|60|70)(f0|90|00|c0)(e0|90|00|b0|70)f0??(00|90|40|7d|10)(f0|ea)??(f0|00|e0|d0|46) Hi Kris, There are a

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-30 Thread Kris Deugau
Tomasz Kojm wrote: A few corrections :-) Ah! The Voice of Authority! g aCaB [EMAIL PROTECTED] wrote: 1) you always need at least 2 static bytes before and after a wildcard (though a serie of ?? is fine) with 0.9x it's enough to have a block of 2 static bytes somewhere in a part of

[Clamav-users] alpha version of freshclam-alike for 3rd part signatures

2006-10-30 Thread Stephen Gran
Hello all, So I have been seeing all these people putting together 3rd party signatures for clamav, and been quite pleased with the community effort that has sprung up around this. My only thought on seeing all of this was that there was no simple, freshclam like method for grabbing all of these

Re: [Clamav-users] alpha version of freshclam-alike for 3rd part signatures

2006-10-30 Thread Dennis Peterson
Stephen Gran wrote: Hello all, So I have been seeing all these people putting together 3rd party signatures for clamav, and been quite pleased with the community effort that has sprung up around this. My only thought on seeing all of this was that there was no simple, freshclam like method for

Re: [Clamav-users] alpha version of freshclam-alike for 3rd part signatures

2006-10-30 Thread Stephen Gran
On Mon, Oct 30, 2006 at 06:45:04PM -0800, Dennis Peterson said: Did you include a randomizer so everyone doesn't hit Steve's server on the hour? :) I provide a feed for a URLBL list and it's surprising how many people cron a job to run on the hour. No, that's another thing in the works.