My most effective blocks are tcpwrappers and DNS-based IP blacklists and URI
blacklists. Low returns on effort go to pattern matching regular expressions in
message bodies. It isn't possible to measure the effectiveness of ipset
blocklists when using NNN.0.0.0/8 IP blocks but there are a lot of
You should probably look at http://uribl.com/ for this problem. ClamAV is
targeted toward viruses and malware in email. The uribl process uses DNS just
like DNS blacklists, is fairly light weight, and well maintained.
On 12/5/18 11:33 PM, Sunny Marwah wrote:
We are using
Frankly, I'm surprised that ClamAV finds any such URL's. They are way to
dynamic (blacklisted one day and removed the next). ClamAV does malware
detection over the long haul and trying to keep up with fraudulent web sites
would be a full time job and better done by other means (e.g. Google Safe
Thanks for letting me know about enabling SafeBrowsing CVD option in
Google safe browsing put a website in 3 categories mentioned below :
2 Info or Not secure
3 Not secure or Dangerous
Curious to know how ClamAV will categorize the HTML file. Let's say, if any
It may be worth mentioning that in addition to the [optional] SafeBrowsing CVD
that you can choose to include, ClamAV has just started including PhishTank
signatures late last month.
For those who curious, see https://lists.gt.net/clamav/virusdb/. PhishTank
signatures are prefixed with
I am running clamav-0.100.beta on OS X 10.11.6 and got the following messages
Here’s my clamscan invocation:
$ clamscan/clamscan -i -r --exclude-dir=/Volumes --exclude-dir=/dev
What kind of suggestion are you looking for?
They appear to be three different iPhone/iPad/iPod applications.
The signatures were added to the ClamAV database on 1 Nov 2018.
I would have to guess it has something to do with this Talos article:
I think you are probably right looking at it.
> What kind of suggestion are you looking for?
> They appear to be three different iPhone/iPad/iPod applications.
> The signatures were added to the ClamAV database on 1 Nov 2018.
> I would have to guess it has something to do with this
There is something wrong with your C++ compiler.
Is it actually installed?
> On 7 Dec 2018, at 7:28 am, nikos wrote:
> Hello list.
> I'm trying to install the now version of clam and it seems to be
I'm trying to install the now version of clam and it seems to be
I run ./configure --sysconfdir=/etc --enable-milter in the programs
folder and I get the error:
checking for g++... no
checking for c++... no
checking for gpp... no
checking for aCC... no
Mail list logo