Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Sunny Marwah
Hi Al Varnell, I have already gone through https://www.clamav.net/documents/safebrowsing. That URL i have already shared with one of ClamAV development team members I did not understand your point what you said --- "You will probably need to obfuscate it in order to get it through the mail

Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Al Varnell
Have your read the explanation at >? Please provide the phishing URL that is failing. You will probably need to obfuscate it in order to get it through the mail system, something like httx://

Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Sunny Marwah
Hi Al Varnell, Below is the URL which was mentioned in HTML template : https://gokdenizhealthtourism.com/js/logo2.gif Chrome don't open it due to labeling it dangerous in as per "Safebrowsing". Then why ClamAV is not able to identify when "Safebrowsing" option is already enabled ?? Looking to

Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Al Varnell
If you won't provide the URL to the rest of us users, then we can't help you. You'll have to wait to see if the development team gets back to you. -Al- On Fri, Dec 07, 2018 at 04:10 AM, Sunny Marwah wrote: > Hi Al Varnell, > > I have already gone through

Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Sunny Marwah
Hello Micah & Team, Have not received any response on my last email. Also, i have enabled Safebrowsing option in freshclam.conf as suggested by you. Still i can see that ClamAV is not working properly. There is one file placed on server and there is one phishing URL available in that file. That

[clamav-users] Issue affecting libclamav in ClamAV 0.101.0

2018-12-07 Thread Micah Snyder (micasnyd)
Greetings, I'm writing to let you know about an issue in ClamAV 0.101.0 impacting software developers that integrate libclamav into other products on Unix/Linux systems. The issue will result in an error when you attempt to compile against a system-installed libclamav. We are working on a fix

Re: [clamav-users] Installation problem.

2018-12-07 Thread Dennis Peterson
The missing tools are either not in your path or not installed. You could run yum info */g++ to see if it is installed, and if it is run locate g++ and compare locations to your path with echo $PATH. dp On 12/6/18 11:28 PM, nikos wrote: Hello list. I'm trying to install the now version of

Re: [clamav-users] "Can't query daily..." entries in log since 0.101.0

2018-12-07 Thread Joel Esler (jesler)
Can you give us the full logs please? Not just that one line. Sent from my  iPhone > On Dec 7, 2018, at 15:49, Brian Fluet wrote: > > Hi All, > > Since installing Win32 portable v0.101.0 I am seeing the following > entry in the fresclam.log at each download: > > Can't query

[clamav-users] Can't run ./configure --enable-check, checking linking with check... configure: unable to compile/link with check configure: error: ERROR! Check was configured, but not found.

2018-12-07 Thread Albert o
user@debian: ./configure --enable-check checking for g++... g++ checking whether the C++ compiler works... yes checking for C++ compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o

Re: [clamav-users] Disable MaxFileSize and MaxFileSize to scan the whole system

2018-12-07 Thread Albert o
There is something I don't get this my clamd.conf user@debian:~/Downloads/clamav-0.101.0$ cat /etc/clamav/clamd.conf #Automatically Generated by clamav-daemon postinst #To reconfigure clamd run #dpkg-reconfigure clamav-daemon #Please read /usr/share/doc/clamav-daemon/README.Debian.gz for details

[clamav-users] "Can't query daily..." entries in log since 0.101.0

2018-12-07 Thread Brian Fluet
Hi All, Since installing Win32 portable v0.101.0 I am seeing the following entry in the fresclam.log at each download: Can't query daily.25186.101.1.1.6810BD8A.ping.clamav.net Is this of concern? -- Brian ___ clamav-users mailing list

Re: [clamav-users] "Can't query daily..." entries in log since 0.101.0

2018-12-07 Thread Brian Fluet
Here's the log content of the most recent freshclam download: -- ClamAV update process started at Fri Dec 7 13:59:41 2018 main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) Downloading daily-25186.cdiff [100%] daily.cld updated

Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Al Varnell
Do you have ScanMail enabled? It defaults to not enabled. Sent from my iPad -Al- > On Dec 7, 2018, at 04:47, Sunny Marwah wrote: > > Hi Al Varnell, > > Below is the URL which was mentioned in HTML template : > > https://gokdenizhealthtourism.com/js/logo2.gif > > Chrome don't open it due to

Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Micah Snyder (micasnyd)
In my own testing, it detected this link just fine. Steps to reproduce: View the raw source of this email and save it to a file. Scan the file. I will note that I did some additional testing. When placing the URL (no link, just raw text URL) in an email, ClamAV did not detect it. Truthfully I

[clamav-users] A workaround for the major ClamAV DB update delays we have been experiencing

2018-12-07 Thread Paul Kosinski
As some of you may be aware, ever since ClamAV began using Cloudflare, we have seen many occasions when files like daily.cvd were not available to our LAN until well after the DNS TXT record implied they should be. However, we discovered that these same files *are* available to our Web/email

Re: [clamav-users] A workaround for the major ClamAV DB update delays we have been experiencing

2018-12-07 Thread Eric Tykwinski
This is getting rather technical, and probably some of CloudFlare’s secret sauce. It sounds like the anycast DNS that cloudflare hosts isn’t really working, or at least I would assume that they are using anycast. So you query current.cvd.clamav.net but are

Re: [clamav-users] Disable MaxFileSize and MaxFileSize to scan the whole system

2018-12-07 Thread Micah Snyder (micasnyd)
The verbiage of the warning may be a little misleading. It doesn't tell you how much has been scanned prior to the call into cli_scanxz(). It is likely that it scanned additional data prior to the call to cli_scanxz(), which counts towards the scan limit. If you re-scan with the --debug flag

Re: [clamav-users] Can't detect deceptive URL's as infected !!

2018-12-07 Thread Al Varnell
Sorry, it appears I was looking in the wrong place. I now believe that ScanMail defaults to "Yes". Sent from my iPad -Al- On Dec 7, 2018, at 16:39, Al Varnell wrote: > Do you have ScanMail enabled? It defaults to not enabled. > > Sent from my iPad > > -Al- > >> On Dec 7, 2018, at 04:47,

Re: [clamav-users] Installation problem.

2018-12-07 Thread Gary R. Schmidt
On 2018-12-07 18:28, nikos wrote: Hello list. I'm trying to install the now version of clam and it seems to be compilation problems. I run ./configure --sysconfdir=/etc --enable-milter in the programs folder and I get the error: checking for g++... no checking for c++... no checking for

Re: [clamav-users] Installation problem.

2018-12-07 Thread Robert Chalmers
My reasons for querying C++ is this in your log > checking for cc++... no > checking whether the C++ compiler works... no and as you are building 101, if you want to stop freshclam dumping an exit error in your logs - it still work, just gives a false error. change this