Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-09 Thread Tomasz Papszun
On Mon, 09 Oct 2006 at 1:24:57 +0200, Robert Allerstorfer wrote: On Fri, 6 Oct 2006, 22:14 GMT+02 Robert Allerstorfer wrote: [...] Hm, these submissions have been rejected (daily.cvd version 2009): Submission-ID: 501386 Sender: Robert Allerstorfer Submission notes: Same as in Submission-ID

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-09 Thread Robert Allerstorfer
Hello Tomasz, On Mon, 9 Oct 2006, 23:51 GMT+02 Tomasz Papszun wrote: Submission-ID 495773 has been mentioned in the same announcement: Submission-ID: 495773 Sender: Anonymous Added: HTML.Phishing.Bank-820 oops, sorry for overseeing that. OK, so that mail will now be found by the

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-08 Thread Robert Allerstorfer
On Fri, 6 Oct 2006, 22:14 GMT+02 Robert Allerstorfer wrote: On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: On 10/3/06, Robert Allerstorfer wrote: How can yet undetected phishings be submitted to the project? Submit a sample: http://cgi.clamav.net/sendvirus.cgi, following the rules on

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-06 Thread Robert Allerstorfer
On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: On 10/3/06, Robert Allerstorfer wrote: Reading phishsigs_howto.pdf from the latest snapshot tarball, it says that each line must consist of *three* fields, in the form Flags RealURL DisplayedURL Is there an updated documentation where

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-06 Thread Török Edvin
On 10/6/06, Robert Allerstorfer [EMAIL PROTECTED] wrote: On Wed, 4 Oct 2006, 10:59 GMT+03 Török Edvin wrote: For now the only change is: The two-field form, is valid only for type 'H', and means: match the host part of realURL, i.e. displayedURL can be anything. You seem to mean

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-04 Thread Török Edvin
On 10/3/06, Robert Allerstorfer [EMAIL PROTECTED] wrote: Hi, Reading phishsigs_howto.pdf from the latest snapshot tarball, it says that each line must consist of *three* fields, in the form Flags RealURL DisplayedURL Is there an updated documentation where the two-fields form will be

[Clamav-users] daily.wdb and daily.pdb

2006-10-03 Thread Robert Allerstorfer
Hi, I am currently using the latest phishing-scan-urls enabled clamscan (devel-20061002) with a devel version of my procmail anti-virus filter (http://softlabsav.sourceforge.net/). Each incoming mail will first be scanned with the --phish-scan-alldomains option, in order to minimize the number of