Re: [Clamav-users] please remove

2009-02-19 Thread Dennis Peterson
he mail viewer which gives you a list of all the things >>>> >>> you >>> >>>> can do e.g. unsubscribe. >>>> >>>> Stu. >>>> >>>> On Thu, 19 Feb 2009, Ian Eiloart wrote: >>>> >>>> >>&g

Re: [Clamav-users] Blog about the Active Malware Report System

2009-02-19 Thread Dennis Peterson
Nigel Horne wrote: > Folks, > > We've just added an entry to the blog at clam-av.blogspot.com which > covers the new statistics system. > > The article gives some background information, what we've published to > date and what we hope to do in the future. It also covers why you should > conside

Re: [Clamav-users] please remove

2009-02-20 Thread Dennis Peterson
jim.me...@co.hennepin.mn.us wrote: > > And some people's email systems, which are moronically locked down by > management and admins do NOT let you do anything other than top post. Even > though they can. > > So sometimes it's not anyone's fault. > > In nearly 30 years of running mail systems

Re: [Clamav-users] please remove

2009-02-20 Thread Dennis Peterson
Tomasz Papszun wrote: > On Fri, 20 Feb 2009 at 13:55:30 -0600, jim.me...@co.hennepin.mn.us wrote: >> And some people's email systems, which are moronically locked down by >> management and admins do NOT let you do anything other than top post. Even >> though they can. >> > > You mean one can't mo

Re: [Clamav-users] please remove - 27 emails and counting

2009-02-20 Thread Dennis Peterson
Andy wrote: > I believe (and this email is probably no exception) but Gmail and others > default to top posting. > This mail is me just hitting reply, and typing where the cursor defaults to. > Won't happen again, but just FYI. > Your mailer has no brain - you must use your own :), and yes, I kno

Re: [Clamav-users] OT: Re: please remove

2009-02-20 Thread Dennis Peterson
Laurens wrote: > I have been wanting to unsubscribe from this fucking thing for over a > year can not remember log in details etc and as a result I keep getting > this shit. > I have written, mailed and asked politely all to no avail it is now > called spam. > > STOP THIS SHIT PLEASE >

Re: [Clamav-users] ClamAV Webinar on 4th March

2009-02-20 Thread Dennis Peterson
chen wrote: > Why don't this lists webmaster install a simple forum ? > Yes a link to unsubscribe this list would be welcome. The link is in the headers of the messages. There's no need to put multiple links that I can think of since you can use the ones that are already in the message you recei

Re: [Clamav-users] please remove - 27 emails and counting

2009-02-21 Thread Dennis Peterson
jef moskot wrote: > On Sat, 21 Feb 2009, Matus UHLAR - fantomas wrote: >> Did you find the unsubscribe unsubscribe link? > > Neither the URL nor the mail reply work if you don't remember what email > address you signed up with. I suppose it could be added to the message > somewhere. A lot of l

Re: [Clamav-users] Injury

2009-02-23 Thread Dennis Peterson
Kurt Buff wrote: > Well, I hope you were having fun! > > Best wishes for the knitting... > Pruned and bottom posted dittos. I broke the same bone once - it hurts to sleep :) dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav

Re: [Clamav-users] please remove

2009-02-26 Thread Dennis Peterson
Jerry wrote: > > It might help though if the program used to manage the forum, when > adding its usually superfluous nonsense at the end of a post, would at > least prefix it properly with a "sig delimiter". I am sick of receiving > messages with the following type of message appended to every ne

[Clamav-users] 0.95 rc1 in Solaris 9

2009-02-27 Thread Dennis Peterson
There is no stdinit.h in my system so clamdtop failed. I disabled the #include in the clamdtop.c code and it built and linked. Not sure what it might fail to do later. $ gcc --version gcc (GCC) 3.3.2 It built fine in RedHat Linux 2.6.9-67.0.15.EL, 32-bit Intel. dp _

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-27 Thread Dennis Peterson
Dennis Peterson wrote: > There is no stdinit.h in my system so clamdtop failed. I disabled the > #include > in the clamdtop.c code and it built and linked. Not sure what it might fail > to > do later. > > $ gcc --version > gcc (GCC) 3.3.2 > > It built fine in

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-27 Thread Dennis Peterson
Gary L Burnore wrote: > You can use inttypes.h instead, but you'd do well to just upgrade to > Solaris 10 as there are MANY good reasons to do so. > > Look up ZFS. > > > Gary L. Burnore > gburn...@databasix.com > There are not enough reasons to do so - it's a very big job to drag a lot of u

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-28 Thread Dennis Peterson
Török Edwin wrote: > On 2009-02-28 03:20, Nathan Brink wrote: >> Dennis Peterson wrote: >> >>> Regarding stdint.h, I'm surprised the code linked without it. I can't expect >>> this to be the only surprise. >>> >>> > &

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-28 Thread Dennis Peterson
Török Edwin wrote: > > Well you already built it, didn't you? What is your impression? I'm open > to suggestions, if you want some additional features. > BTW you can ./configure --disable-clamdtop if you don't want it, and it > should automatically get disabled if ncurses is not available. I vie

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-28 Thread Dennis Peterson
Török Edwin wrote: > On 2009-02-28 20:22, Dennis Peterson wrote: >> Török Edwin wrote: >> >> >>> Well you already built it, didn't you? What is your impression? I'm open >>> to suggestions, if you want some additional features. >>> BTW y

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-28 Thread Dennis Peterson
Bill Landry wrote: > Török Edwin wrote: >> There is something wrong with the background color, this is how it >> should look like (screenshot from an earlier version): >> https://wwws.clamav.net/bugzilla/attachment.cgi?id=769 > > On Fedora 10, mine looks the same as Dennis' - oh, and the "F1 - hel

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-28 Thread Dennis Peterson
Dennis Peterson wrote: > Bill Landry wrote: >> Török Edwin wrote: >>> There is something wrong with the background color, this is how it >>> should look like (screenshot from an earlier version): >>> https://wwws.clamav.net/bugzilla/attachment.cgi?id=769 >

Re: [Clamav-users] clamd - changes in protocol - 0.95

2009-02-28 Thread Dennis Peterson
Jose-Marcio Martins da Cruz wrote: > Török Edwin wrote: >> On 2009-02-28 12:18, Jose-Marcio Martins da Cruz wrote: >>> I see. Removing a '\n' when it's just before the '\0' may not be better >>> but doesn't harm. I'm wrong ? >>> >> As I said, that is a problem if the filename ends with \n, if I

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-28 Thread Dennis Peterson
Nathan Brink wrote: > Gary L Burnore wrote: >>> That is correct, no X. >>> >> Get yourself a copy of Xming (free) and set it up. You'll have X. >> >> Make sure some sort of display variable is set. >> >> (The ssh -X merely enables X connections if it's not already part of your >> shell). If

Re: [Clamav-users] 0.95 rc1 in Solaris 9

2009-02-28 Thread Dennis Peterson
Bill Landry wrote: > Nathan Brink wrote: >> Gary L Burnore wrote: That is correct, no X. >>> Get yourself a copy of Xming (free) and set it up. You'll have X. >>> >>> Make sure some sort of display variable is set. >>> >>> (The ssh -X merely enables X connections if it's not alread

Re: [Clamav-users] 0.95 rc1 OSX 10.5 issues

2009-03-01 Thread Dennis Peterson
Tom Shaw wrote: >> >> OSX doesn't come with strace. I'll download a >> copy from sourceforge and report back. > > strace reports no support of darwin :-( Any other suggestions? > OS X has dtrace. Probably the best tool ever built for this kind of thing. dp

Re: [Clamav-users] Two suggestions

2009-03-01 Thread Dennis Peterson
Gary L Burnore wrote: > > > Gary L. Burnore > gburn...@databasix.com > > > >> -Original Message- >> From: clamav-users-boun...@lists.clamav.net >> [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of >> Jose-Marcio Martins da Cruz >> Sent: Sunday, March 01, 2009 4:33 PM >> To

[Clamav-users] clamdtop in 0.95 rc1

2009-03-01 Thread Dennis Peterson
I've noticed after watching for some time on two solaris 9 Sparc systems that the mem and libc reports are always zero. Is this unexpected or is there a trigger event I've yet to experience? Running clamdscan against the test files does not budge the values off zero. Solaris 9 Studio 12 compile

[Clamav-users] was: [sanesecurity] clamd now crashes, now UNOFFICIAL rant

2009-03-02 Thread Dennis Peterson
Steve Basford wrote: > The Sanesecurity signatures are double-checked before uploading with > clamscan... they are also gpg signed and have a sha256 checksum file also > available... so their integrity should be ok at both ends. As you say, > the databases load ok... the problem seems when the d

Re: [Clamav-users] Two suggestions

2009-03-02 Thread Dennis Peterson
n >> reading all config.log files. I know very few people who dig config.log >> files. > > The problem is that the output from ./configure is lost after you > install ClamAV. That is absurd. ./configure |tee config.rpt > > On 2009-03-02 01:41, Dennis Peterso

Re: [Clamav-users] was: [sanesecurity] clamd now crashes, now UNOFFICIAL rant

2009-03-02 Thread Dennis Peterson
Matt Watchinski wrote: > Not really sure what your implying, > > I offered up moving all the 3rd party signatures to the clamav > submission interface, so they could be signed and distributed through > all the entire freshclam mirror architecture. The offer still stands, > but I haven't gotten an

Re: [Clamav-users] clamd - changes in protocol - 0.95

2009-03-02 Thread Dennis Peterson
Török Edwin wrote: > On 2009-02-28 22:25, Dennis Peterson wrote: >> This is important because I have a clamd farm and now with the 0.95rc1 >> release I >> have a mismatch. And since communications has changed I have to build a >> one-to-one relationship with the cl

Re: [Clamav-users] Crash with SaneSecurity Sigs

2009-03-04 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-04 17:49, Jorge Valdes wrote: >> Because I run clamd via daemontools, whenever clamd crashes, its brought >> back to life within a few seconds and things hum along fine until the >> next crash, which is in my case, very unpredictable since I have gone >> days without

Re: [Clamav-users] Crash with SaneSecurity Sigs

2009-03-04 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-04 19:28, Dennis Peterson wrote: >> >> This can be tested by having some adventurous affected user run with only >> third >> party signatures - if it is that which is at fault then clamd will continue >> to >> crash

Re: [Clamav-users] Crash with SaneSecurity Sigs

2009-03-04 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-04 19:44, Dennis Peterson wrote: >> Török Edwin wrote: >> >>> On 2009-03-04 19:28, Dennis Peterson wrote: >>> >> >>>> This can be tested by having some adventurous affected user run with only >>&g

[Clamav-users] List bounce error

2009-03-04 Thread Dennis Peterson
Anyone else receiving these NDRs? This is a delivery status notification from exa.billmerriam.com, running the Courier mail server, version 0.54.1. The original message was received on Wed, 04 Mar 2009 12:46:08 -0500 from localhost (localhost [127.0.0.1])

Re: [Clamav-users] Crash with xxx Sigs

2009-03-04 Thread Dennis Peterson
Jose-Marcio Martins da Cruz wrote: > > So, if I understood, clamd accept connections while reloading the > database, but handle them later. > > Am I wrong ? I see the same kind of thing. I'm going to run some side-by-side tests on my Solaris systems and my RedHat Linux system to see if there'

Re: [Clamav-users] Database reload times

2009-03-04 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-04 21:53, Jose-Marcio Martins da Cruz wrote: >> Török Edwin wrote: >> >>> On 2009-03-04 19:44, Dennis Peterson wrote: >>> >> >>>>> >>>>> >>>> Is there not a

Re: [Clamav-users] Database reload times

2009-03-04 Thread Dennis Peterson
Steve Basford wrote: > > Dennis Peterson wrote: >> Sparc Solaris 9, 500Mhz >> Known viruses: 563036 >> Engine version: 0.95rc1 >> >> LibClamAV Warning: *** Please update it as soon as possible.*** >> Known viruses: 208929 >> Engine versi

Re: [Clamav-users] Database reload times

2009-03-04 Thread Dennis Peterson
Dennis Peterson wrote: > Steve Basford wrote: >> Dennis Peterson wrote: >>> Sparc Solaris 9, 500Mhz >>> Known viruses: 563036 >>> Engine version: 0.95rc1 >>> >>> LibClamAV Warning: *** Please update it as soon as possible.***

Re: [Clamav-users] Database reload times

2009-03-04 Thread Dennis Peterson
Dennis Peterson wrote: > > I've rebuilt it with my standard script so it should behave again. Sorry for > that distraction. I'll update the output of the time tests shortly. > > dp I see in my previous post I gave myself an extra ghz in cpu speed - it's a 2g

Re: [Clamav-users] Now crash refreshing signatures, was something else

2009-03-04 Thread Dennis Peterson
Steve Basford wrote: > Gut feeling is that it's not a signature problem, more timing perhaps > caused by the increase in the number of signatures being reloaded, > and the interaction between freshclam, the RELOAD/USR2 command (used by > scripts) and clamd. > I don't have a problem here (yet,

Re: [Clamav-users] Now crash refreshing signatures, was something else

2009-03-04 Thread Dennis Peterson
Bill Landry wrote: > I have read that standards since POSIX.1-1988 onwards have imposed > atomicity requirements on rename (mv) that effectively require it to be > a system call. The Open Group Base Specifications Issue 7 states: > > "This rename() function is equivalent for regular files to tha

Re: [Clamav-users] Now crash refreshing signatures, was something else

2009-03-04 Thread Dennis Peterson
Bill Landry wrote: > Dennis Peterson wrote: >> Bill Landry wrote: >> >>> I have read that standards since POSIX.1-1988 onwards have imposed >>> atomicity requirements on rename (mv) that effectively require it to be >>> a system call. The Ope

Re: [Clamav-users] Now crash refreshing signatures, was something else

2009-03-04 Thread Dennis Peterson
Bill Landry wrote: > Dennis Peterson wrote: > >> It doesn't matter - I use rsync in these situations because all moves are >> atomic, all the time. >> >> I have a mail server farm that includes production and dev systems, and NFS >> is >> used to

Re: [Clamav-users] Now crash refreshing signatures, was something else

2009-03-04 Thread Dennis Peterson
Bill Landry wrote: > Dennis Peterson wrote: >> I don't know when clamd will self-check. Do you? > > That can be disable in clamd.conf and then reloads scripted: > > SelfCheck 0 > > Then you will see in the clamd.log on restart: > > Wed Mar 4 20:11:41 2

Re: [Clamav-users] Now crash refreshing signatures, was something else

2009-03-04 Thread Dennis Peterson
Bill Landry wrote: > Dennis Peterson wrote: >> Bill Landry wrote: >>> Dennis Peterson wrote: >>>> I don't know when clamd will self-check. Do you? >>> That can be disable in clamd.conf and then reloads scripted: >>> >>> SelfCheck 0 >

Re: [Clamav-users] Now crash refreshing signatures, was something else

2009-03-04 Thread Dennis Peterson
Bill Landry wrote: > Dennis Peterson wrote: >> Bill Landry wrote: >>> Dennis Peterson wrote: >>>> Bill Landry wrote: >>>>> Dennis Peterson wrote: >>>>>> I don't know when clamd will self-check. Do you? >>>>> T

Re: [Clamav-users] Crash withThird-Party Sigs

2009-03-05 Thread Dennis Peterson
Steve Basford wrote: >> Here is information on my crash of today: > > Thanks Chris. > > Out of interest I wonder if it's worth someone who gets crashes.. could > have a go at setting up http://www.virtualbox.org/ with a minimal linux > system that crashes... then the ClamAV team could then downlo

Re: [Clamav-users] Experiencing clamd crashes? Check clamd "SelfCheck" times

2009-03-05 Thread Dennis Peterson
Bill Landry wrote: > > I'm thinking that the times that clamd crashed on my systems most likely > correspond to the times that SelfCheck ran during a script update or a > freshclam update, which is why the crashes happened so randomly (I can't > prove this now because I didn't maintain a record o

[Clamav-users] clamdtop observation

2009-03-05 Thread Dennis Peterson
The current version does not respond to a window resize signal so if you reduce the window size some of the data fields are lost. I'm running it from a local Xterm ssh'd into the server. dp ___ Help us build a comprehensive ClamAV guide: visit http://w

Re: [Clamav-users] clamdtop observation

2009-03-05 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-05 21:33, Dennis Peterson wrote: >> The current version does not respond to a window resize signal so if you >> reduce >> the window size some of the data fields are lost. >> >> I'm running it from a local Xterm ssh'd

Re: [Clamav-users] clamdtop observation

2009-03-05 Thread Dennis Peterson
shuttlebox wrote: > On Thu, Mar 5, 2009 at 9:05 PM, Dennis Peterson wrote: >> Updating ncurses involves a lot of regression testing with existing >> applications >> and perhaps rebuilding some or all of then and I don't care to do that until >> I >> do a

Re: [Clamav-users] clamdtop observation

2009-03-05 Thread Dennis Peterson
Török Edwin wrote: > > Hi Dennis, > > Try compiling the testprogram below, and then resize the window. > On ncurses-5.4 if I shrink the window it keeps giving me the old size, > enlarging the window works. > With ncurses versions 5.5, 5.6, 5.7 all is ok. > > If I remove the line with subwin, it

Re: [Clamav-users] clamdtop observation

2009-03-05 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-05 23:36, Dennis Peterson wrote: >>> >>> >> It knows when a window grows, x and y, but not when it shrinks. >> > > I found this in the ncurses changelog between 5.4 -> 5.5: > 20040731 > + modify te

Re: [Clamav-users] freshclam.log

2009-03-05 Thread Dennis Peterson
Chris wrote: > One more probably dumb question and I'll call it a night. Previously on > all my clamav installs the freshclam.log was started the first time it > was ran, not so from what I can see. I have it in my freshclam.conf > file: > > # Path to the log file (make sure it has proper permissi

Re: [Clamav-users] freshclam.log

2009-03-05 Thread Dennis Peterson
Robert Holtzman wrote: > On Thu, 5 Mar 2009, Dennis Peterson wrote: > >> Does freshclam.log exist and if so, who owns it and what are the permissions? > > locate freshclam.log in a terminal? Don't know about Mac but there > should be something similar. > The OP

Re: [Clamav-users] Database reload times

2009-03-07 Thread Dennis Peterson
Dennis Peterson wrote: > Dennis Peterson wrote: > >> I've rebuilt it with my standard script so it should behave again. Sorry for >> that distraction. I'll update the output of the time tests shortly. >> >> dp > > I see in my previous post I

Re: [Clamav-users] Functionality level message with virus definition update version 9081.

2009-03-09 Thread Dennis Peterson
Luca Gibelli wrote: > Hello fchan, > >> I was doing a freshclam -v and got the current version 9081 of the >> virus definitions but I got this: >> WARNING: Current functionality level = 38, recommended = 39 > > this was an error on my side. We are experimenting some new features in > ClamAV 0.95

Re: [Clamav-users] Newbie question.

2009-03-10 Thread Dennis Peterson
Erik P. Olsen wrote: > I am running fedora 10, thunderbird 2.0.0.9 and firefox 3.0.7 and I would > like to install clamav to > catch vira which might enter the system through TB or FF. The calmav user > manual has not been very > helpful in this respect, so I would like to hear if someone could p

Re: [Clamav-users] Newbie question.

2009-03-11 Thread Dennis Peterson
Matus UHLAR - fantomas wrote: > Hello, > > On 10.03.09 21:35, Erik P. Olsen wrote: > > please set up your mailer to wrap lines below 80 characters per line. 721 to > 76 is usually OK. > >> I am running fedora 10, thunderbird 2.0.0.9 and firefox 3.0.7 and I would >> like to install clamav to catc

Re: [Clamav-users] News about 0.95

2009-03-11 Thread Dennis Peterson
Tomasz Kojm wrote: > On Wed, 11 Mar 2009 22:06:19 +0100 > Jose-Marcio Martins da Cruz wrote: > >> * if I understood, freshclam will get the complete list of URLs from >> Google. The computer running clamav/clamd/... will get this list from >> clamav (as a signature) not from Google. Right ? >

Re: [Clamav-users] Newbie question.

2009-03-11 Thread Dennis Peterson
Erik P. Olsen wrote: > On 11/03/09 17:41, Lyle Giese wrote: >> I would be looking at tools like chkrootkit, rkhunter and aide for your >> purposes. These are tools specifically intended for the *nix OS system. >> >> ClamAV is aimed more for email scanning. Besides the scales are still >> tipped tow

Re: [Clamav-users] News about 0.95

2009-03-12 Thread Dennis Peterson
Török Edwin wrote: > > > On 2009-03-12 00:05, Dennis Peterson wrote: >> Is such a list now available to explore for gotcha's that need to be >> whitelisted? > > The list contains only hashes, so you can lookup URLs, but not browse them. No thanks, then. Tha

Re: [Clamav-users] ExcludePath not working with .95

2009-03-13 Thread Dennis Peterson
Scott Mohnkern wrote: > I recently put .95 on an Ubuntu box, and ExcludePath in clamd.conf doesn't > seem to be working right. > > Here's the lines from /usr/local/etc/clamd.conf for the ExcludePath > > ExcludePath ^/proc/ > ExcludePath ^/sys/ > ExcludePath ^//sys/ > ExcludePath ^/tmp/ > > > I

Re: [Clamav-users] ExcludePath not working with .95

2009-03-13 Thread Dennis Peterson
Scott Mohnkern wrote: > Tried having just: > > ExcludePath ^/sys/ > > > restarted clamd, and then ran clamdscan /sys > > still is trying to scan the directory. > > Scott In the Feb post Thomasz recommended using two slashes as a work-around. Your original post had both a single and a double

Re: [Clamav-users] ExcludePath not working with .95

2009-03-13 Thread Dennis Peterson
Scott Mohnkern wrote: > Hmm, tried both (one at a time) and neither worked). > > Scott > I wonder if it is the clamdscan response that is the problem. Try commenting out the exclude statements and run clamdscan on /proc and see what it looks like compared to having it excluded when runninc cl

Re: [Clamav-users] Updating clamav

2009-03-14 Thread Dennis Peterson
David Jewell wrote: > > Doesn't this imply that support has to be compiled into clamav? I > tried ./configure --prefix=/usr --sysconfdir=/etc --enable-bzip2 but > it made no difference. > What am I missing here? bzlib.h would be my guess. dp ___ H

Re: [Clamav-users] Updating clamav

2009-03-14 Thread Dennis Peterson
David Jewell wrote: >> Wouldn't it be simpler for you to use ClamAV 0.94.2 from the Ubuntu >> repositories? > > Hi Peter, > > I know this is probably a weak excuse, but I've always installed > clamav from sources. I always build it, too. No reason not to. Check your ClamAV config.log and se

Re: [Clamav-users] Updating clamav

2009-03-14 Thread Dennis Peterson
David Jewell wrote: > > Hey Dennis, > > Fixed! The bzlib.h file was not installed. It's in the libbz2-dev > package which wasn't installed when I installed the bzip2 package from > Ubuntu repositories. > I now have 0.94.2 working but still a question. > > What is duma? What benefits does it

Re: [Clamav-users] test for SafeBrowsing?

2009-03-17 Thread Dennis Peterson
Török Edwin wrote: > > Try using for the URL. > Is that a requirement? If so we should get the spammers on board because some of them may not know this :). dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.

Re: [Clamav-users] Problems builing in solaris related to unrar libraries

2009-03-17 Thread Dennis Peterson
George R. Kasica wrote: > I'm not sure how to use crle to do this, so I just added to the > LD_LIBRARY_PATH setting. > > All seems well at this point, and you were correct, I wasn't looking > to disable the feature. > > Why does this not occur in Red Hap ES4 but on Solaris? Also, I haven't > nee

Re: [Clamav-users] test for SafeBrowsing?

2009-03-18 Thread Dennis Peterson
Moray Henderson (ICT) wrote: >> From: Török Edwin [mailto:edwinto...@gmail.com] Try using for the URL. >>> Is that a requirement? If so we should get the spammers on board because >> some of >>> them may not know this :). >> No, there are more places from where URLs can be extracted, but

Re: [Clamav-users] test for SafeBrowsing?

2009-03-18 Thread Dennis Peterson
Erwan David wrote: > On Wed, Mar 18, 2009 at 01:55:14PM CET, Dennis Peterson > said: >> Moray Henderson (ICT) wrote: >>>> From: Török Edwin [mailto:edwinto...@gmail.com] >>>>>> Try using for the URL. >>>>>> >>>>> Is that

Re: [Clamav-users] Failed milter upgrade to .95rc2

2009-03-21 Thread Dennis Peterson
Ed Kasky wrote: > > I think I'm almost there... > > I figured out the init script but now the milter is having trouble > with the clamd socket. > > From the milter log: > Sat Mar 21 13:42:02 2009 -> +++ Started at Sat Mar 21 13:42:02 2009 > Sat Mar 21 13:42:02 2009 -> ERROR: Failed to parse C

[Clamav-users] .95rc2 resident memory

2009-03-21 Thread Dennis Peterson
I've been watching the size of clamd bloat out in excess of 140M RSS which is a number I've not seen in clamd for some time. It starts out at 120M. Is there a lot of debug code in it that would cause this or am I watching a memory leak? The signatures I use are "Official" and SaneSecurity. dp

Re: [Clamav-users] Failed milter upgrade to .95rc2

2009-03-21 Thread Dennis Peterson
Nathan Brink wrote: > Dennis Peterson wrote: >> Pardon a bit of thread hijacking but... >> >> Developers - could you unify the names of these sockets and invocation >> method? >> >> From clamd.conf: >> LocalSocket /var/run/clamav/clamd.sock >&g

Re: [Clamav-users] clam{d,av-milter}.conf differences

2009-03-21 Thread Dennis Peterson
Nathan Brink wrote: > Sorry for double posting. > > Dennis Peterson wrote: >> Nathan Brink wrote: >> >>> Dennis Peterson wrote: >>> >>>> Pardon a bit of thread hijacking but... >>>> >>>> > >>&g

Re: [Clamav-users] .95rc2 resident memory

2009-03-22 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-22 04:11, Dennis Peterson wrote: >> I've been watching the size of clamd bloat out in excess of 140M RSS which >> is a >> number I've not seen in clamd for some time. It starts out at 120M. Is there >> a >> lot of deb

Re: [Clamav-users] .95rc2 resident memory

2009-03-22 Thread Dennis Peterson
Török Edwin wrote: > On 2009-03-22 14:15, Dennis Peterson wrote: >> Török Edwin wrote: > > P.S. for 0.95.1 you should be able to do this out-of-the-box, once I > implement https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1445 > Thanks, Török, I'll poke into the code

Re: [Clamav-users] .95rc2 resident memory

2009-03-22 Thread Dennis Peterson
Török Edwin wrote: > > This is unlike on x86_64, where -m64 is faster than -m32 because it uses > a completely different instruction set/ABI, > and 64-bit instructions are unavailable with -m32. > I'm using the Sun Studio 12 product, not GCC, so don't know if they are optimizing with 64-bit co

Re: [Clamav-users] Update to the signatures.pdf

2009-03-25 Thread Dennis Peterson
Joel Richard wrote: > This just bit in the behind real good. I'd like to propose a small > change to the signatures.pdf document. > > http://www.clamav.net/doc/latest/signatures.pdf > > There's an example that reads > > z...@localhost:/tmp/test$ sigtool --hex-dump > How do I

Re: [Clamav-users] Update to the signatures.pdf

2009-03-25 Thread Dennis Peterson
Nathan Brink wrote: > Dennis Peterson wrote: >> Joel Richard wrote: >> >>> This just bit in the behind real good. I'd like to propose a small >>> change to the signatures.pdf document. >>> >>> http://www.clamav.net/doc/lat

Re: [Clamav-users] Problems builing in solaris related to unrar libraries

2009-03-26 Thread Dennis Peterson
Vigil, Joe wrote: > My environment: > AIX 4.3.3 (yeah, I know it's old) > GCC 2.95.2 > Clamav v0.95 > > I'm getting the same error " LibClamAV Warning: Cannot dlopen: file not found > - unrar support unavailable". > I've tried setting the LIBPATH variable to "/usr/local/lib" (LIBPATH

Re: [Clamav-users] Why 0.95 doesn't have "contrib/init/RedHat/clamd"?

2009-03-30 Thread Dennis Peterson
Edilmar LISTAS wrote: > Hi, > > I have used clamd for many years with Fedora, RedHat and CentOS. > And I have a updating script that always copy "clamd" init script file > for current version to init.d subdir. > This script always worked fine, but now in 0.95 this contrib file isn't > there. > I p

Re: [Clamav-users] Why 0.95 doesn't have"contrib/init/RedHat/clamd"?

2009-03-31 Thread Dennis Peterson
Moray Henderson (ICT) wrote: >> From: Dennis Peterson [mailto:denni...@inetnw.com] >> >> Such scripts are rather easily constructed using a basic template: >> >> Additional lines of code can be added to verify the star or stop actually >> happened but

Re: [Clamav-users] Missing option on freshclam 0.95?

2009-04-02 Thread Dennis Peterson
Randal, Phil wrote: > aCaB wrote: >> Charles Gregory wrote: >>> Oh, and FTR, I could not find a "change log" or "version notes" on >>> the main clamav website, or I could have answered this question >>> myself A link in the left-side menu would be nice. :) >> It's not that hard... >> http://svn

Re: [Clamav-users] clamav-milter --signature-file option?

2009-04-02 Thread Dennis Peterson
Robert Smith wrote: > What happened to the --signature-file option for clamav-milter. I > couldn't find anything about it anywhere for v0.95 http://lurker.clamav.net/message/20090321.045629.fdcb9ae9.en.html#clamav-users Read the reply. dp ___ Help

Re: [Clamav-users] Missing option on freshclam 0.95?

2009-04-02 Thread Dennis Peterson
Charles Gregory wrote: > On Thu, 2 Apr 2009, Dennis Peterson wrote: >> At Google.com, enter this search pattern: >> changelog site:clamav.net > > Another sidenote: I first attempted to search using the search box on the > main page, and it could find no references to &#

Re: [Clamav-users] clamAV-0.95 0n Solaris 10 x86 Build

2009-04-02 Thread Dennis Peterson
John Goubeaux wrote: > Has anyone done a successful build of clamAV-0.95 0n Solaris 10 x86 ? > > I have not been able to get a version greater than 0.92.1 on Solaris 10 > x86 to build to date, and am > wondering what changed after 0.92.1 that is giving me the problem. > > > ./configure --sysc

Re: [Clamav-users] clamAV-0.95 0n Solaris 10 x86 Build

2009-04-03 Thread Dennis Peterson
John Goubeaux wrote: > Well install of latest bzip2 package did not remedy the build error > > Is it possible that the presence of older clamAV libraries in > /usr/local/lib is causing the error? > It looks like the linker is finding a lot of old libraries. I remove them before building but

Re: [Clamav-users] database download troubles

2009-04-05 Thread Dennis Peterson
Mark Grieveson wrote: > I tried to update my database, via freshclam, but it always stops > partway through with the following: > > Trying host db.ca.clamav.net (208.70.244.158)... > Trying to download http://db.ca.clamav.net/main.cvd (IP: 208.70.244.158) > nonblock_recv: recv timing out (30 secs)

Re: [Clamav-users] database download troubles

2009-04-05 Thread Dennis Peterson
Mark Grieveson wrote: > On Sun, 05 Apr 2009 22:35:38 -0700 > Dennis Peterson wrote: > >> What happens if you try to open that link in your browser? Your >> browser should offer to download it to a file - if it fails at the > > Yes, that's what happens. The brow

Re: [Clamav-users] clamav script not listing output

2009-04-08 Thread Dennis Peterson
Kaplan, Andrew H. wrote: > Hi there -- > > I wrote a script that does an update to the virus database, and then runs a > recursive check of all directories, with certain exceptions, on the > system in question. Enclosed with this e-mail is the script in two versions. > The > first version exclud

Re: [Clamav-users] How do I prevent ClamAV from renaming quarantined files?

2009-04-15 Thread Dennis Peterson
Aditya Nag wrote: > Sure, > > I followed this > > http://www.howtoforge.com/samba-clamd-samba-vscan-on-centos-5.2 > > more or less. > > basically, running Samba-Vscan. > > Be glad to provide more details if you need it > The only time ClamAV renames a file here is when there is a filename co

Re: [Clamav-users] What's this? Sanesecurity.Phishing.Bank.3259

2009-04-16 Thread Dennis Peterson
li...@grounded.net wrote: > I'm on a linux mailing list which I've been using for a while. Today, I send > a message and it bounces back. In the headers, I see the following reason for > the remote host denying the email; > >> Remote host said: 550 ClamAV detected >> Sanesecurity.Phishing.Bank.

Re: [Clamav-users] What's this? Sanesecurity.Phishing.Bank.3259

2009-04-16 Thread Dennis Peterson
li...@grounded.net wrote: > I think I know what's happened. I had cut/paste some html header response > code into the message for another mailing list but their clamav must be > getting a false positive thinking that the html code is phishing code. > > Not sure but I think that's what's happened

Re: [Clamav-users] What's this? Sanesecurity.Phishing.Bank.3259

2009-04-16 Thread Dennis Peterson
li...@grounded.net wrote: > I'm on a linux mailing list which I've been using for a while. Today, I send > a message and it bounces back. In the headers, I see the following reason for > the remote host denying the email; > >> Remote host said: 550 ClamAV detected >> Sanesecurity.Phishing.Bank.

Re: [Clamav-users] What's this? Sanesecurity.Phishing.Bank.3259

2009-04-16 Thread Dennis Peterson
li...@grounded.net wrote: >> If you were properly scanning your own outgoing mail you would have seen >> this problem before the message left your system. That is another policy >> issue. I understand this is a contentious issue with some people but I'll >> never understand why. For me is it simpl

Re: [Clamav-users] Email.Phishing.DblDom-59

2009-04-16 Thread Dennis Peterson
Suntower West wrote: > Hi, > > I'm getting a positive for this in a Eudora mailbox (which is > basically just an ASCII file.) However, when I scan the same file > with Comodo it comes up as clean. > > 1. Is this a false positive? > > 2. If not, then, is there a way to locate the bad code withi

Re: [Clamav-users] Email.Phishing.DblDom-59

2009-04-16 Thread Dennis Peterson
Suntower West wrote: > Hi, > > I'm getting a positive for this in a Eudora mailbox (which is > basically just an ASCII file.) However, when I scan the same file > with Comodo it comes up as clean. > > 1. Is this a false positive? > > 2. If not, then, is there a way to locate the bad code withi

Re: [Clamav-users] Email.Phishing.DblDom-59

2009-04-17 Thread Dennis Peterson
Wolfgang Cernohorsky wrote: > Suntower West wrote: >> Hi, >> >> I'm getting a positive for this in a Eudora mailbox (which is >> basically just an ASCII file.) However, when I scan the same file >> with Comodo it comes up as clean. > > Today clamav found the same in > "clamav-users Digest, Vol 5

Re: [Clamav-users] clamav-milter 0.95.1 logging deficiencies

2009-04-17 Thread Dennis Peterson
Kevin Clark wrote: >>> What am I missing? >>> >> I believe Kevin is seeking an option similar to clamd's LogClean option >> in clamav-milter. >> >> From clamd.conf: >> >> >> >> # Also log clean files. Useful in debugging but drastically increases >> the >> # log size. >> # Default: no >>

Re: [Clamav-users] clamav-milter in 0.95

2009-04-19 Thread Dennis Peterson
Greg McCarthy wrote: > Thanks for the link. > > I've gone through the perl code and see the postmaster and > postmaster-only is no longer supported :( > > wwarn "Notifications and bounces are no longer supported. > As a result the following command line options cannot be converted > into new conf

<    5   6   7   8   9   10   11   12   13   14   >