Re: [Clamav-users] how to decern what to scan?

2006-10-06 Thread Robert Allerstorfer
On Thu, 5 Oct 2006, 08:45 GMT-04 Jim Shupert, Jr. wrote: I have clam av on a redhat ES3 linux machine. I do not see where i can declare what directory it is to scan? what do I config to make that happen? like if I wanted to scan mnt/data ( where data is a mounted 2nd drive ) or

Re: [Clamav-users] how to decern what to scan?

2006-10-06 Thread Andres Gonzalez Cantu
On Fri, 2006-10-06 at 12:00 +0200, [EMAIL PROTECTED] wrote: Send clamav-users mailing list submissions to clamav-users@lists.clamav.net To subscribe or unsubscribe via the World Wide Web, visit http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users or, via email, send a

[Clamav-users] clamav-milter vs clamscan

2006-10-06 Thread Carl Thompson
Does anyone have an answer to the question does clamscan act differently than clamav-milter/clamd when mail is scanned. I have taken attachment files from the emails and created custom signatures using sigtool. The extracted attachment is identified properly by clamscan but emails containing

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-06 Thread Robert Allerstorfer
On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: On 10/3/06, Robert Allerstorfer wrote: Reading phishsigs_howto.pdf from the latest snapshot tarball, it says that each line must consist of *three* fields, in the form Flags RealURL DisplayedURL Is there an updated documentation where

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-06 Thread Török Edvin
On 10/6/06, Robert Allerstorfer [EMAIL PROTECTED] wrote: On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: For now the only change is: The two-field form, is valid only for type 'H', and means: match the host part of realURL, i.e. displayedURL can be anything. You seem to mean