Re: [Clamav-users] ClamAV 0.80rc2 on MacOS X, addition

2004-09-25 Thread Tomasz Kojm
On Thu, 23 Sep 2004 11:43:05 +0200 Mr Mailing List <[EMAIL PROTECTED]> wrote: > > freshclam needs to define > > BIND_8_COMPAT > > > for compiling dns.c Fixed in CVS. Thanks, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.

Re: [Clamav-users] Error starting clamd 8.0rc2

2004-09-25 Thread Ed Kasky
On Sat, 25 Sep 2004, Brian Morrison wrote: > On Sat, 25 Sep 2004 06:51:26 -0700 (PDT) in > [EMAIL PROTECTED] Ed Kasky > <[EMAIL PROTECTED]> wrote: > > > Sept. 18 it was removed from clamd and clamav-milter on Sept. 20... > > Very late in the day then, probably explains why the docs are a bit >

Re: [Clamav-users] Clamav 0.80rc2 on NetBSD 1.6 addition

2004-09-25 Thread Tomasz Kojm
On Fri, 24 Sep 2004 08:32:24 +0200 Mr Mailing List <[EMAIL PROTECTED]> wrote: > /usr/home/jnp/src/clamav-0.80rc2/xx.c:94: undefined reference to > `gethostbyname_r' > collect2: ld returned 1 exit status Does "./configure --disable-gethostbyname_r" help? -- oo. Tomasz Kojm <[

Re: [Clamav-users] 0.80rc build fails (differently) on OSX @ mbox.c, with AND without --with-libcurl

2004-09-25 Thread Tomasz Kojm
On Tue, 21 Sep 2004 13:43:21 +0900 Masaki Ogawa <[EMAIL PROTECTED]> wrote: > I think this issue caused by double AC_CHECK_HEADER for resolv.h. > The attached patch will fix. Fixed in CVS. Thanks, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.Clam

RE: [Clamav-users] Re: Re: Re: Windows port ?

2004-09-25 Thread Mitch \(WebCob\)
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Tomasz Kojm > Sent: September 25, 2004 12:22 > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Re: Re: Re: Windows port ? > > On Sun, 26 Sep 2004 00:09:22 -0700 > "Mitch (WebCob)" <[EM

Re: [Clamav-users] Re: Re: Re: Windows port ?

2004-09-25 Thread Tomasz Kojm
On Sun, 26 Sep 2004 00:09:22 -0700 "Mitch (WebCob)" <[EMAIL PROTECTED]> wrote: > containing all their proprietary stuff, and write application B, which > calls product A or uses it's libs, but IS open sourced and GPL'd - They can always use clamd (via its socket) without writing any additional st

Re: [Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Nigel Horne
Fixed in CVS. -Nigel --- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 24

Re: [Clamav-users] Error starting clamd 8.0rc2

2004-09-25 Thread Brian Morrison
On Sat, 25 Sep 2004 06:51:26 -0700 (PDT) in [EMAIL PROTECTED] Ed Kasky <[EMAIL PROTECTED]> wrote: > Sept. 18 it was removed from clamd and clamav-milter on Sept. 20... Very late in the day then, probably explains why the docs are a bit thin. -- Brian Morrison bdm at fenrir dot org dot uk Gn

Re: [Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Steven Stern
On Sat, 25 Sep 2004 16:24:43 +0100, Nigel Horne <[EMAIL PROTECTED]> wrote: >On Saturday 25 Sep 2004 15:41, Steven Stern wrote: >> Can't rename /var/spool/clamav/040924/msg.ShraVX to >> _var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P >> >> # clamd --version >> ClamAV 0.80rc/503/Thu Sep 23 14:3

RE: AW: [Clamav-users] Re: Re: Re: Windows port ?

2004-09-25 Thread Mitch \(WebCob\)
> The GPL defines "source" as "the preferred form of the work for making > modifications to it". If the maintainers of the clamav db add new > signatures by unpacking the database, modifying it and packing it again, > it is source code (the act of packing and unpacking is IMHO similar to > tarring

Re: [Clamav-users] Re: Re: Windows port ?

2004-09-25 Thread Peter J. Holzer
On 2004-09-24 11:59:36 +0200, Lionel Bouton wrote: > Peter J. Holzer wrote the following on 09/23/2004 12:53 PM : > > >What Remi can do: > > > >1) Write a program (not using any ClamAV source code) which can read the > > ClamAV database (he did that already). This doesn't violate the GPL. > > I

Re: [Clamav-users] Error starting clamd 8.0rc2

2004-09-25 Thread Ed Kasky
On Sat, 25 Sep 2004, Brian Morrison wrote: > On Fri, 24 Sep 2004 17:34:57 -0700 (PDT) in > [EMAIL PROTECTED] "Dennis Peterson" > <[EMAIL PROTECTED]> wrote: > > > I think I found it in the README or NEWS file, but it is definitely > > there- I also had this error before I finished reading the do

Re: [Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Nigel Horne
On Saturday 25 Sep 2004 15:41, Steven Stern wrote: > Can't rename /var/spool/clamav/040924/msg.ShraVX to > _var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P > > # clamd --version > ClamAV 0.80rc/503/Thu Sep 23 14:32:44 2004 > > clamav-milter is run as > > # more clamav-milter > CLAMAV_FLAGS="-

Re: [Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Steven Stern
On Sat, 25 Sep 2004 09:41:01 -0500, Steven Stern <[EMAIL PROTECTED]> wrote: >After going from .75 to .80rc, I'm finding an error reported by logwatch from >clamav-milter. > >Example: > >Can't rename /var/spool/clamav/040924/msg.ShraVX to >_var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P > ># cl

[Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Steven Stern
After going from .75 to .80rc, I'm finding an error reported by logwatch from clamav-milter. Example: Can't rename /var/spool/clamav/040924/msg.ShraVX to _var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P # clamd --version ClamAV 0.80rc/503/Thu Sep 23 14:32:44 2004 clamav-milter is run as # m

Re: [Clamav-users] ERROR: Can't open /var/log/clamd.log in append mode

2004-09-25 Thread Steven Stern
On Thu, 23 Sep 2004 12:31:13 +0200, Meni Shapiro <[EMAIL PROTECTED]> wrote: >Hi, >I get this message a lot from the crod Daemon. >why? >i run linux crux 1.2 and mimedefang+SA Usually, this means that the clamd process doesn't have write access to the log. If you're running clamd as the user clam

Re: [Clamav-users] Unpacking archive

2004-09-25 Thread Ed Kasky
On Sat, 25 Sep 2004, Tim Rupp wrote: > Try following that prdownloads link until you get to a page that prompts > you to save a file, the one I used for instance to get the file was As a sugestion, I think the link to the downloads page is a bit confusing. It would help those not so familiar w

Re: [Clamav-users] MailFollowURLs and logs

2004-09-25 Thread Nigel Horne
On Friday 24 Sep 2004 20:17, Brett Simpson wrote: > I have the MailFollowURLS feature enabled on a low priority mail server and was > wondering if there is a way to log that a virus was found from a url. > So far it only logs the name of the virus. Since the email parsing and hence URL following

Re: [Clamav-users] test windows exploit sigs

2004-09-25 Thread Trog
On Sat, 2004-09-25 at 10:35, Andy Fiddaman wrote: > A quick question for the database maintainers though - are you planning to > add a signature for this exploit (particularly now that an exploit toolkit > exists) ? All of my commercial scanners here now detect it - F-Prot even > released a new ve

Re: [Clamav-users] test windows exploit sigs

2004-09-25 Thread Steve Basford
Slight modification to the last one. The new .ndb file allows the signature offset to be defined, so instead of * in the third field you should put 0 to anchor the JPEG magic number to the start of the file. The 5 means it is definitely a graphics file before it is checked against the signature but

Re: [Clamav-users] test windows exploit sigs

2004-09-25 Thread Andy Fiddaman
On Fri, 24 Sep 2004 [EMAIL PROTECTED] wrote: ; Hi All, ; ; I've done done my *first* ndb sigs for some of the current windows expolits: ; ; JS.dragdrop.1:3:*:64796E7372633D22*2E65786522 ; JS.dragdrop.2:3:*:666F6C6465723D227368656C6C??7374617274757022 ; exploit.jpg:5:*:FFD8FF(E0|FE)*FFFE00(00|01)

Re: [Clamav-users] Updating Clamav

2004-09-25 Thread Odhiambo Washington
* David Chima <[EMAIL PROTECTED]> [20040925 10:57]: wrote: > Hello, > I am new to clamav. I would like to know. How could I update my clamav? I see a lot > of > viruses passing throuth my mail server. I have freshclam and clamav-milter in > /etc/cron.daily. Do these upda

AW: [Clamav-users] Updating Clamav

2004-09-25 Thread Steffen Heil
Hi > I am new to clamav. I would like to know. How could I update my clamav? Run freshclam. > I see a lot of viruses passing throuth my mail server. Which mail server? How connected to clamav? > I have freshclam and clamav-milter in /etc/cron.daily. Do these update my clamav database automatic

Re: [Clamav-users] Error starting clamd 8.0rc2

2004-09-25 Thread Brian Morrison
On Fri, 24 Sep 2004 17:34:57 -0700 (PDT) in [EMAIL PROTECTED] "Dennis Peterson" <[EMAIL PROTECTED]> wrote: > I think I found it in the README or NEWS file, but it is definitely > there- I also had this error before I finished reading the docs. The only mention that it is gone seems to be in the

[Clamav-users] Updating Clamav

2004-09-25 Thread David Chima
Hello, I am new to clamav. I would like to know. How could I update my clamav? I see a lot of viruses passing throuth my mail server. I have freshclam and clamav-milter in /etc/cron.daily. Do these update my clamav database automatically or do I need to do something. and how do I know that my da

Re: AW: [Clamav-users] Re: Re: Re: Windows port ?

2004-09-25 Thread Peter J. Holzer
On 2004-09-22 15:01:14 -0500, [EMAIL PROTECTED] wrote: > Kevin Spicer said: > > On Wed, 2004-09-22 at 14:25, [EMAIL PROTECTED] wrote: > > > >> The database is not a script. It is a binary compilation. > > > > It's not a script, true, but it also is not a binary compilation. If > > you look inside