Re: [clamav-users] clamav incremental scan?

2021-05-04 Thread Benny Pedersen via clamav-users

On 2021-05-04 20:19, Michael Wang wrote:

It seems that this should be a common question, but I did not find a
definite answer via Google search. I saw solutions to only scan files
in the last 60 days, but it is not difficult for a virus file to
change date, isn't it? I can think of to maintain hash table with file
name and its checksum, but looks like this should be a functionality
of the clamav itself. How do you do it? Just do a full scan every
time? Thanks.


fun part is that clamdscan needs root access, stupid

virus scanning must not be done as root user, else one knows why its 
unsecure on unpacking


already files stored as non root users can only be changed by same user 
if its malware, this includes change time stamps


as non root, isssue a touch malwarefile.exe, new upload

hope clamav team redo this insecure in clamdscan

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] cdn :/

2021-04-28 Thread Benny Pedersen via clamav-users

On 2021-04-28 18:16, Joel Esler (jesler) wrote:

On Apr 28, 2021, at 12:10 PM, Benny Pedersen  wrote:

On 2021-04-28 17:56, Joel Esler (jesler) wrote:

I don’t think that’s a solution.


https scales only if makeing private mirrors :/

design of torrents is ther more users the faster speeds all get 
without needing private mirrors, so yes it does better then cloudflare


We can manage Cloudflare, and BitTorrent is banned in just about every
corporate environment.


DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; 
d=cisco.onmicrosoft.com;

From: "Joel Esler (jesler)" 

it works well

cisco do there own dkim, but both dkim is untrusted by 3dr party 
signing, one more problem to solve


is it possible to see mailman stops mangle dkim when dmarc policy is 
p=none;


while i am on clamav, what about synology antivirus essential ?


What about it?


good question, maybe i just make a feedback to synology for this one


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] cdn :/

2021-04-28 Thread Benny Pedersen via clamav-users

On 2021-04-28 17:56, Joel Esler (jesler) wrote:

I don’t think that’s a solution.


https scales only if makeing private mirrors :/

design of torrents is ther more users the faster speeds all get without 
needing private mirrors, so yes it does better then cloudflare


is it possible to see mailman stops mangle dkim when dmarc policy is 
p=none;


while i am on clamav, what about synology antivirus essential ?



On Apr 28, 2021, at 9:21 AM, Benny Pedersen via clamav-users 
 wrote:


On 2021-04-28 14:42, Eero Volotinen wrote:


Please upgrade to supported version?


i have that on gentoo, problem is fidxed now, finaly, how can this 
take so long without anyone notice it is imho scarry


consider implement bittorrent protocol into freshclamd, it scales more 
then claoudflare problem


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] cdn :/

2021-04-28 Thread Benny Pedersen via clamav-users

On 2021-04-28 14:42, Eero Volotinen wrote:


Please upgrade to supported version?


i have that on gentoo, problem is fidxed now, finaly, how can this take 
so long without anyone notice it is imho scarry


consider implement bittorrent protocol into freshclamd, it scales more 
then claoudflare problem


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] cdn :/

2021-04-28 Thread Benny Pedersen via clamav-users



i am on cool down, yes since 10-4-2021

missing cdiff imho, so it try the full cvd download that is missing, 
after that cool down :/


am i alone ?

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Testing

2019-02-20 Thread Benny Pedersen via clamav-users

Joel Esler (jesler) skrev den 2019-02-20 23:14:

Testing!


for the record here is what spamassassin says when i post on 
postfix-maillist


X-Spam-Status: No, score=-2.4, required=5.0, Autolearn=no 
autolearn_force=no,

LastExt=2604:8d00:0:1::3 Shortcircuit=no,none
X-Spam-Rules_score: ALL_TRUSTED=-1,BAYES_00=-1.9,DKIM_SIGNED=0.1,
DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,MAILING_LIST_MULTI=-1,
SPF_HELO_NONE=0.7,SPF_NONE=0.7,TXREP=0.334,XSENDER_MATCH=-0.1

hope other maillists can copy that
___
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Eingangsbestätigung IT-Service

2019-02-20 Thread Benny Pedersen via clamav-users

IT-Service Theatergemeinde Köln skrev den 2019-02-21 00:11:

Vielen Dank für Ihre Nachricht. Sie ist bei uns ordnungsgemäß
eingegegangen und wird so schnell wie möglich bearbeitet.


i dont want to sleep with you
___
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Testing

2019-02-20 Thread Benny Pedersen via clamav-users

Joel Esler (jesler) skrev den 2019-02-21 00:06:

We are working on this currently.


good, if openarc seal signing will be added to mailman and drop 
ownerships take over it will be perfect, its about time mailman get 
fixed for dkim and dmarc rejects, dont accept dmarc policy reject, but 
accept quarantine posters, else it will create downstream rejects, sadly


i know dmarc pass and maillist is possible, it could even be with 
mailman if people did more carefully setup mailman


for the time being i hae added this new ip for networks a ip that 
disable all milters here in postfix, this was simple for me to do

___
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Testing

2019-02-20 Thread Benny Pedersen via clamav-users

Scott Kitterman skrev den 2019-02-20 23:34:


I'm not sure why anyone expects anything different.


you are not on maillist with original senders get dmarc pass ? :=)

hint postfix

where is dkimpy-milter i like to build on gentoo to get rid of most of 
my dkim and dmarc problems


is there a guid on migrade from opendkim to dkimpy signing ?

thanks for good software btw
___
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml