Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Ralf Hildebrandt
* René Berber [EMAIL PROTECTED]: | Unfortunately I had to rewrite that script until it worked :( | The download URLs for the mirrors are incorrect and for some reason it | pukes on the output of Debian's clamd --debug Thanks for both replies. I'll take that script for a test. I uploaded

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Ralf Hildebrandt
* Rick Cooper [EMAIL PROTECTED]: I assume (again) that you meant clamscan --debug causes an issue? What does it do exactly that causes an issue? The output looks like this: LibClamAV debug: Loading databases from /var/lib/clamav/ LibClamAV debug: Loading databases from

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Alexander Grüner
Ralf, I wrote a small script by myself - very simpel. It seems to work now for months. #!/bin/sh cd /tmp # Unofficial Phising rules for ClamAV wget -nd -m http://ftp.tiscali.nl/sanesecurity/phish.ndb.gz wget -nd -m http://ftp.tiscali.nl/sanesecurity/scam.ndb.gz cp phish.ndb.gz /var/lib/clamav/

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Noel Jones
At 03:17 AM 5/8/2007, Alexander Grüner wrote: Ralf, I wrote a small script by myself - very simpel. It seems to work now for months. #!/bin/sh cd /tmp # Unofficial Phising rules for ClamAV wget -nd -m http://ftp.tiscali.nl/sanesecurity/phish.ndb.gz wget -nd -m

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Dennis Peterson
Noel Jones wrote: At 03:17 AM 5/8/2007, Alexander Grüner wrote: Ralf, I wrote a small script by myself - very simpel. It seems to work now for months. #!/bin/sh cd /tmp # Unofficial Phising rules for ClamAV wget -nd -m http://ftp.tiscali.nl/sanesecurity/phish.ndb.gz wget -nd -m

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Dennis Peterson
Dennis Peterson wrote: A kinder, gentler usage of wget would include -N to prevent getting the same file over and over thereby burning off Steve's bandwidth. Just be sure to preserve the name and time stamp of the gz files when you ungzip them. Use: gunzip -c phish.ndb phish.ndb.gz

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Rick Cooper
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ralf Hildebrandt Sent: Tuesday, May 08, 2007 3:07 AM To: clamav-users@lists.clamav.net Subject: Re: [Clamav-users] OT: Sanesecurity Sigs: Important News * Rick Cooper [EMAIL PROTECTED]: I

Re: [Clamav-users] Unix socket vs IP Socket

2007-05-08 Thread Fabio Pedretti
Ideally, it should be faster if using only the unix socket, but there is this in clamdscan/client.c: /* #define ENABLE_FD_PASSINGFIXME: Doesn't work yet */ But since it's passing the file stream, should not be possible to scan all files, regardless of the file permission, with

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Noel Jones
At 02:03 PM 5/8/2007, Steve Basford wrote: In a nutshell, instead of me giving out lists of mirrors for you to download from... or *you* having to change your scripts each time there is a mirror changeI thought this might be a better idea. Can the scripts be changed to get the sigs from the

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Christopher X. Candreva
On Tue, 8 May 2007, Steve Basford wrote: (depending if you want the phishing sigs or the scam sigs) Main: http://www.sanesecurity.co.uk/clamav/phishsigs/ http://www.sanesecurity.co.uk/clamav/scamsigs/ The only problem is the lack of the final file-name in the URL. This breaks my perl

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Steve Basford
Christopher X. Candreva wrote: If the script could be on the file name instead of the directory name it would be better. Hmm... would this work for you script? http://www.sanesecurity.com/clamav/phishsigs/index.php http://www.sanesecurity.com/clamav/scamsigs/index.php

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Dennis Peterson
Steve Basford wrote: Christopher X. Candreva wrote: If the script could be on the file name instead of the directory name it would be better. Hmm... would this work for you script? http://www.sanesecurity.com/clamav/phishsigs/index.php