Re: [Clamav-users] OT: Virus page almost ready to go

2004-06-15 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: Rick Macdougall said: Hi All, As promised, the virus stats page is almost ready to go. I'll clean up the code tomorrow or Thursday and release it GPL. http://mail.limelyte.net/admin/virus/ for a preview. Suggestions, critique, etc are welcomed. It looks great! About the

Re: [Clamav-users] bug in clamdscan

2004-06-19 Thread Dennis Peterson
Dan Egli wrote: Steven Stern wrote: On Sat, 19 Jun 2004 10:09:48 -0600, Dan Egli [EMAIL PROTECTED] wrote: I've encountered this bug a few times: [EMAIL PROTECTED] test]# touch file1 [EMAIL PROTECTED] test]# touch file2 [EMAIL PROTECTED] test]# touch file3 [EMAIL PROTECTED] test]# ls file1

Re: [Clamav-users] Reducing CPU consumption?

2004-07-03 Thread Dennis Peterson
Michael D. Crawford wrote: Recall that I was asking the list recently how to deal with getting 400 MB a day of the zafi.b virus in my mailbox. I can filter out my mailbox with a procmail script, followed by using clamscan and procmail, but my hosting service isn't yet able to do it for me. It

Re: [Clamav-users] Reducing CPU consumption?

2004-07-03 Thread Dennis Peterson
Cody Baker wrote: I would like to append to this that, cheap boxes are good, but they should be cheap boxes with fast harddrives, or some type of memory file system scheme. My experience has been that a fast hard drive will drastically increase the scanning performance. And as mentioned

Re: [Clamav-users] (no subject)

2004-07-17 Thread Dennis Peterson
Rick Macdougall wrote: Hi, Can we get him unsunscribed please. Yah yah, I'm top posting :) Regards, Rick Apparently not. dp --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy

Re: [Clamav-users] Clamd Dies

2004-07-26 Thread Dennis Peterson
Thomas Kinghorn wrote: Hi List I have a problem with clamd dying without warning. Nothing appears in the log files. You need to put a watchdog script in place that runs out of cron. Clamd has severe memory management problems and will use all you have - your cron script should look for two

Re: [Clamav-users] Memory Leaks om 0.75.1 20040805

2004-08-09 Thread Dennis Peterson
Damian Menscher wrote: On Mon, 9 Aug 2004, Christopher X. Candreva wrote: On Mon, 9 Aug 2004, Christopher X. Candreva wrote: 0.75.1 Running since Aug 3 is currently using 272 M of RAM, and 20040805 running since Aug 5 is using 104M. I'm killing and restarting now to free up some memory. After 3

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-10 Thread Dennis Peterson
Jeremy Kitchen wrote: On Tuesday 10 August 2004 02:41 pm, Damian Menscher wrote: [snip: using a program delivery to process update mailing list mails] With sendmail, you could add to /etc/aliases something like: clamav-updates | sigtool --add that's the ticket. And a cool little DOS tool.

Re: [Clamav-users] contrib/init/RedHat suggested patch

2004-08-18 Thread Dennis Peterson
Christopher X. Candreva said: On Tue, 17 Aug 2004, Damian Menscher wrote: If user A emails user B and the email doesn't go through in under 2 minutes, there will be complaints. Tempfail is just too dangerous. Yes, nothing will be lost. But you have to admit it's pretty bad for email to be

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-23 Thread Dennis Peterson
Rajanikanth P said: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Dennis Peterson
Fajar A. Nugraha wrote: Dennis Peterson wrote: The ClamAV vendor can offer a push of the AV patterns to paying customers with special needs. That way you will receive the updates as quickly as do the mirrors and the vendor recovers some of the cost of maintaining ClamAV. Eh? Really

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Dennis Peterson
Julio Canto wrote: Or, how about a subscription only (i.e. pay for) mirror which people can query every five minutes if they like ? This has the advantage that users who require this don't have to do anything special (like set up an rsync server), just change the mirror they use and the

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Dennis Peterson
Shayne Lebrun wrote: Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. dp --- SF.Net email is sponsored by

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Dennis Peterson
Nigel Horne wrote: On Wednesday 25 Aug 2004 12:09, Andy Fiddaman wrote: I'd be interested in running one of these if the database team would be willing to push updates out to a private mirror. (A percentage of the revenue generated would then be fed back into the ClamAV project!) Any reason why

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Dennis Peterson
Fajar A. Nugraha wrote: Dennis Peterson wrote: Shayne Lebrun wrote: Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. Hmm ... which makes me wonder. Say ... 1) I host

Re: [Clamav-users] Second-tier Mirrors...

2004-08-25 Thread Dennis Peterson
Graham Toal said: Currently each mirror contributes around 100GB of traffic monthly Perhaps (not sure of the DNS system in place) could be arranged so that 10% of the requests a full primary mirror receives could be directed to a secondary level mirror. With a committment of only roughly

RE: [Clamav-users] Second-tier Mirrors...

2004-08-25 Thread Dennis Peterson
Tim Howell said: I would love to setup a mirror, but 10Mbps and 100GB/month is more than I've got available. Those figures don't account for clever scripting that some folks are willing to implement that defeat the round-robin distribution now in place. If you have a faster than average

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-26 Thread Dennis Peterson
B. van Ouwerkerk said: All parties are willing and agreeable, and the vendor stands to make some money. I can't imagine that would be a bad thing. I wouldn't underestimate the importance of liability, tho. Uhhh... but then what do you think someone providing such service would be liable for

Re: [Clamav-users] MD5 crashes... (fwd)

2004-09-01 Thread Dennis Peterson
Andy Fiddaman wrote: Since the latest daily update, ClamAV has been crashing here with every email it scans, has anyone else seen this ? It appears to be related to the new .hdb file containing an EICAR signature. ClamAV version devel-20040819 I reverted to .75.1 and got things going again. We

Re: [Clamav-users] freshclam update and the minute of the hour

2004-09-10 Thread Dennis Peterson
Dennis Peterson said: A long time ago when I worked at a large aircraft company in Seattle I helped develop a DNS resource balancing methodology that evaluated system load of each server being managed to determine that server's position in the DNS response. In this case it looked to see

Re: [Clamav-users] Re: Re: Re: Re: Windows port ?

2004-09-22 Thread Dennis Peterson
Remi Thomas said: Tomasz Kojm wrote: No, it won't. Security by obscurity is a nonsense. It's true only for cryptography I think. It would be really nice if you could share your code with us to make ClamAV a better software. Ok, you can download the clam database handling and file scanner

[Clamav-users] JPG scanning

2004-09-23 Thread Dennis Peterson
Using 0.80rc2 - Do pattern files include jpg exploits or is this something each site deployes? If the latter, are there guidelines for doing so? I've got several terrabytes of images to be concerned about and little room to get it wrong :-) dp

Re: [Clamav-users] Freshclam warning - explanation please?

2004-09-23 Thread Dennis Peterson
I've just seen the following warnings in the console window I display syslog entries in: ClamAV update process started at Thu Sep 23 19:57:23 2004 WARNING: DNS record is older than 3 hours. WARNING: Invalid DNS reply. Now, it doesn't look like a biggie, but what hasn't updated for 3

Re: [Clamav-users] Error starting clamd 8.0rc2

2004-09-24 Thread Dennis Peterson
Ed Kasky said: At 04:19 PM Friday, 9/24/2004, Ed Kasky wrote -= At 03:35 PM Friday, 9/24/2004, you wrote -= On Fri, Sep 24, 2004 at 02:22:33PM -0700, Ed Kasky said: I was attempting to upgrade to 8.0rc2 and get the following when trying to start clamd: Starting clamd: ERROR: Parse error

Re: [Clamav-users] Unpacking archive

2004-09-24 Thread Dennis Peterson
Dave Filchak said: Can someone save me from either my own stupidity or my insanity? I have downloaded the latest release candidate of ClamAV and then tried to extract the archive and nothing I do is working. Here is what I have been trying: zcat clamav-0.80rc2.tar.gz | tar xvf - And here

Re: [Clamav-users] clamav-milter configuration options

2004-10-11 Thread Dennis Peterson
Scott Rothgaber wrote: Doug Hardie wrote: The list of parameters I use is too long for a command line. Oh, come on! What's so bad about... /usr/local/sbin/clamav-milter -l -i /var/run/clamav/clmilter.pid -F /usr/local/etc/sig.txt /var/run/clamav/clmilter.sock Nothing when tidied up a bit:

Re: [Clamav-users] daily.cvd and main.cvd

2004-10-16 Thread Dennis Peterson
D Walsh wrote: While I am very happy with clamav, I see room for expansion and potential in a limited global environment. Is it possible to have clamd on other servers utilize the db files on a dedicated server in a local network? I think that it makes sense to have the ability to use a single

Re: [Clamav-users] ERROR: JPEG.Comment

2004-09-29 Thread Dennis Peterson
Damian Menscher said: On Wed, 29 Sep 2004, Damian Menscher wrote: If I had to guess, I'd say clamscan has some uninitialized memory that's causing occasional false positives. If anyone can suggest an alternative explanation, or a way I could debug this further, I'd love to help. Problem

Re: [Clamav-users] Problems Compiling on Solaris X86 Box

2004-10-23 Thread Dennis Peterson
Ken Jones wrote: All, I have been having problems compiling on a Solaris 8 X86 box since the release of 80rc series. Undefined first referenced symbol in file BZ2_bzRead scanners.lo BZ2_bzReadOpen

Re: [Clamav-users] Old ClamAV workaround

2004-10-24 Thread Dennis Peterson
Mark Adams wrote: Niek wrote: On 10/24/2004 6:13 PM +0200, Mark Adams wrote: Okay, it appears the Mandrake Linux update system hasn't caught up with developers yet. Urpmi offers only ver. 061. I upgraded from 0.61, when notified a few days ago that it was outdated, to the packages in

Re: [Clamav-users] Old ClamAV workaround

2004-10-25 Thread Dennis Peterson
Bart Silverstrim wrote: On Oct 24, 2004, at 3:29 PM, Mark Adams wrote: Matt wrote: What's the worst that can happen? It fails to compile, and you still need to find a packaged version. You'll be no worse off than you are now. The worst that can happen? I descend once again into dependency hell

Re: [Clamav-users] Performance Help - 100% cpu usage

2004-10-27 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: On Wed, 27 Oct 2004, Joe Maimon wrote: The ClamAV authors could put a stop to this by making clamdscan and clamscan the same program and then acting differently depending on which name is run. This is similiar to how gzip and gunzip are This has been brought up before

Re: [Clamav-users] configure failure: libmilter directory not found?

2004-11-01 Thread Dennis Peterson
Tom D`Asto wrote: libmilter directory does not exist. Maybe I am looking in the wrong location. Where should libmilter directory be located? Tom You need a copy of the Sendmail source code (sendmail.org). It comes with instructions on building and installing the libmilter libraries. There is a

Re: [Clamav-users] new Wiki site

2004-11-05 Thread Dennis Peterson
Luca Gibelli wrote: Dear list, Many users are afraid of upgrading ClamAV because they fear they could break their mail system. Writing an extensive guide about all the possible problems one may encounter during the upgrade would require a big effort. So we decided to go for a Wiki-style doc:

Re: [Clamav-users] ClamAV should not try to detect phishing andothersocial engineering attacks

2004-11-14 Thread Dennis Peterson
John Jolet wrote: On Sunday 14 November 2004 9:17 am, Julian Mehnle wrote: John Jolet [EMAIL PROTECTED] wrote: My users can see what messages have been rejected by skimming over a list of recently rejected messages once or twice a week (see an example here[1]). This practice has proven to work

Re: [Clamav-users] borked database

2004-11-20 Thread Dennis Peterson
Tomasz Kojm wrote: On Fri, 19 Nov 2004 22:26:24 -0600 (CST) Damian Menscher [EMAIL PROTECTED] wrote: I guess it goes without saying (but I will anyway) that changing things in a way that doesn't cause clamdwatch.pl to fail would be greatly appreciated. (Imagine lots of scared little sysadmins

Re: [Clamav-users] Compile woes.

2004-11-29 Thread Dennis Peterson
jay wrote: Hi, all: I'm pretty new to all of this compile stuff. I've gotten this far, with a lot of trial and error. My system: Sun Solaris 9 X86 on a random old PC, AMD chip, 1 gig ram. Mail Server: Sun Java Enterprise System Messaging Server 6.1 (installed, and working) SpamAssassin 3.01

Re: [Clamav-users] handling database updates

2004-12-01 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: Hello Tomasz! Ok, I'll check for database updates in every hour (or shall I do that more often?) But I would like to know what code is preferred doing so. I tried the following: This appears to have nothing to do with improving the ClamAV project. Not that I'm a topic

Re: [Clamav-users] Re: handling database updates

2004-12-01 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: Hello Dennis! Sorry to bothering the list. Where can I find info about using the clamav library? SJ ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users They have a developer's list - perhaps that is an option. dp

Re: [Clamav-users] Testing clamd [SOLVED]

2004-12-06 Thread Dennis Peterson
Dale Walsh wrote: Well I found a solution using telnet 127.0.0.1 3310 (STREAM) to get the actual communication port, and in issuing a telnet 127.0.0.1 RETURNED PORT (paste data followed by the required EOF) and it appears to work. -- Dale Telnet to that port and type in: SCAN (or RAWSCAN)

Re: [Clamav-users] Re: Problem compiling clamav-0.80 - Solaris x86

2004-12-07 Thread Dennis Peterson
James wrote: Let's try with a searchable subject... ;-) I am having the same issues too: Undefined first referenced symbol in file __eprintf strrcpy.lo ld: fatal: Symbol referencing errors. No output written to

Re: [Clamav-users] Re: Problem compiling clamav-0.80 - Solaris x86

2004-12-08 Thread Dennis Peterson
FYI, tried compiling a new dev version - same error, but this time it's in the text.lo file... Everything I've compiled has been done with gcc. Even if there were something old done with Sun's CC, I wouldn't know where to begin to find those hosed libraries. James Try using the

Re: [Clamav-users] script to find smallest area of file that contains signature

2004-12-10 Thread Dennis Peterson
Tomasz Kojm wrote: On Fri, 10 Dec 2004 16:41:45 -0600 dale [EMAIL PROTECTED] wrote: I should have mentioned my OS (sorry about that). I am using Linux (SME server 6.0.1). I have mounted the iso and no files within the iso fail (see below for details). I have also googled and found 2 other

Re: [Clamav-users] Virus naming

2004-12-17 Thread Dennis Peterson
on 12/17/04 1:09 PM, Carnegie, Martin at [EMAIL PROTECTED] wrote: Does your e-mail system have the means of using RTBL (Real Time Black List) servers? If so you might want to try that. Our spam load decreased remarkably after we implemented our RTBL. My 2 cents, Phil If you like

Re: [Clamav-users] Upgrade

2004-12-14 Thread Dennis Peterson
James wrote: Just download the new source, compile it, and install it (make install). As long as you install the newer version in the same place, all the binaries and libaries will overwrite all the old, existing stuff... James For a number of reasons you should not depend upon the installation

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-06 Thread Dennis Peterson
Ok, let me get this right. Clamav cannot clean? What good is it? I guess I wonder how much I trust a piece of software to decide what the pre-infected package looked like. I guess it would be a good trick for it to know every combination of every virus and every infected attachment that can be

Re: [Clamav-users] initial configure

2005-01-07 Thread Dennis Peterson
Arkady V.Belousov said: Hi! 7-ñÎ×-2005 07:08 [EMAIL PROTECTED] (Daniel J McDonald) wrote to ClamAV users ML clamav-users@lists.clamav.net: Fetch from where (without online)? (BTW, updates for my My English is poor, but me looks, that above is irony/sarcasm. Don't

Re: [Clamav-users] initial configure

2005-01-07 Thread Dennis Peterson
Arkady V.Belousov said: Hi! 8-ñÎ×-2005 00:40 [EMAIL PROTECTED] (Tomasz Kojm) wrote to ClamAV users ML clamav-users@lists.clamav.net: I mean, unacceptable, that there are not seen other ways for bases updating. (I hope, now I clearly express my question?) TK It's now your homework to find

Re: [Clamav-users] initial configure

2005-01-10 Thread Dennis Peterson
Arkady V.Belousov said: Hi! 7-ñÎ×-2005 17:20 [EMAIL PROTECTED] (Dennis Peterson) wrote to ClamAV users ML clamav-users@lists.clamav.net: DP freshclam is not necessary - it is just useful. Once you have gotten the DP database files onto your clamav server you can signal the running daemon

Re: [Clamav-users] Stop outgoing scans

2005-01-12 Thread Dennis Peterson
Steve Costin wrote: How can I stop clamav from scanning my outgoing email? Thanks in advance, Steve May I have your domain name and IP block to add to my packet and email filters, please. dp ___

Re: [Clamav-users] Sendmail Milter

2005-01-15 Thread Dennis Peterson
Nigel Horne wrote: On Friday 14 Jan 2005 04:30, WES wrote: I have installed and tested ClamAV (.80-2) which starts up clamd and runs without a problem. Also I have installed clamav-milter (.80-2). I included in my sendmail.mc file the suggested: INPUT_MAIL_FILTER(clmilter,

Re: [Clamav-users] Virus detection notification

2005-01-20 Thread Dennis Peterson
Tomasz Papszun wrote: On Thu, 20 Jan 2005 at 16:36:14 +0100, Cali Federico wrote: Hi, I'm planning to install a system using postfix,amavisd-new and clam as anitvirus software. I have two questions for you: -- does the last release of clam antivirus software recognize Phish-BankFraud.eml virus or

Re: [Clamav-users] Amazon gift certs being blocked..

2005-01-23 Thread Dennis Peterson
Natter said: I can't seem to find out what part of qmailscanner or Clam is blocking these. I have debian/qmail/vpopmail/qmailscanner/clam. I've google'd and google'd and I can't find the answer to this. Thanks for any help. - Eric Congratulations on blocking Amazon gift certs. If you

Re: [Clamav-users] Amazon gift certs being blocked..

2005-01-24 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: At 09:32 PM 1/23/2005, you wrote: Natter said: I can't seem to find out what part of qmailscanner or Clam is blocking these. I have debian/qmail/vpopmail/qmailscanner/clam. I've google'd and google'd and I can't find the answer to this. Thanks for any help. - Eric

Re: [Clamav-users] Phishing Questions

2005-01-27 Thread Dennis Peterson
Sam said: Also to Damian: I understand what you are saying, but tend to agree more with Jim. What does it matter who catches it as long as it's caught? The answer to this is simple: my policy for dealing with spam is quite different than my policy for dealing with viruses. Spam is annoying,

Re: [Clamav-users] Phishing Questions

2005-01-27 Thread Dennis Peterson
On Thu, 2005-01-27 at 09:25 -0800, Dennis Peterson wrote: =20 We do a lot of on-line commerce. We cannot tolerate many false positives. Phishing exploits are something we deal with through education first, and filtering second. As phishers become more sophisticated and numerous fals= e

Re: [Clamav-users] hardware requirements for 250,000 messages

2005-01-27 Thread Dennis Peterson
Andrew Kaplan said: I plan to setup a single box running FreeBSD, postfix, spamassassin, amavisd and clam. What kind of box should I get. Currently I have two boxes the first one is an Athlon running postfix and the second is RH with amavisD and F-sesure it's a dual PIII the loads is between 3

Re: [Clamav-users] clamav-milter without clamd

2005-01-27 Thread Dennis Peterson
Steven Stern said: It's a great idea to have clamav-milter do it's own thing. BUT, what is its relationship with freshclam? In the clamav-milter - clamd, you could be assured that clamd would always be aware of updates installed by freshclam. How does this work in the all milter, all the

Re: [Clamav-users] problems

2005-01-30 Thread Dennis Peterson
ahellary said: hello alll i was getting no detections with version .81 so i have gone back to v .80 for now none of the config had changed . Tony Did you completely remove the old version prior to installing the new one? If not then you may have enough bits left laying about to bugger

Re: [Clamav-users] This seems particularly nasty

2006-10-23 Thread Dennis Peterson
Bowie Bailey wrote: Dennis Peterson wrote: Christoph Cordes wrote: Dennis Peterson wrote: I already know the question is difficult, but it isn't impossible to answer as there are other AV vendors who have a solution for this particular problem if the article is to be believed. So you want

Re: [Clamav-users] Clamav-milter with Postfix

2006-10-23 Thread Dennis Peterson
Gerard Seibert wrote: On Sunday October 22, 2006 at 09:49:38 (PM) Dennis Peterson wrote: Gerard Seibert wrote: I would rather not use the '--force-scan' option since I am not particularly interested in scanning outgoing mail. Perhaps someone has an idea how to correct this problem. Because

Re: [Clamav-users] Clamdscan instead of Clamscan

2006-10-23 Thread Dennis Peterson
Bill Berg wrote: We are running Clamav with MailScanner, and the server load is very high. I have read here and elsewhere that using clamdscan and the clamd daemon will run better than using clamscan. But I can't find where or how to make that switch. It isn't in any of the config files on the

Re: [Clamav-users] Clamav-milter with Postfix

2006-10-23 Thread Dennis Peterson
Kevin W. Gagel wrote: - Original Message - Dennis Peterson Gerard Seibert wrote: Because you don't scan outgoing mail I have to scan incoming mail from you. My usual response when I read this kind of thing is to just go ahead and blacklist you now rather than later. Please practice

Re: [Clamav-users] Clamav-milter with Postfix

2006-10-23 Thread Dennis Peterson
Gerard Seibert wrote: On Monday October 23, 2006 at 11:49:47 (AM) Dennis Peterson wrote: Gerard Seibert wrote: On Sunday October 22, 2006 at 09:49:38 (PM) Dennis Peterson wrote: Gerard Seibert wrote: I would rather not use the '--force-scan' option since I am not particularly interested

Re: [Clamav-users] SaneSecurity Phishing and Scam Signatures

2006-10-25 Thread Dennis Peterson
Been ages since I posted anything about the sigs... so just a reminder, they are still being updated: Phishing and Scam Signatures for: ClamAV Windows Installer versions for: w32 clamav ClamWin ClamMail http://www.sanesecurity.com/clamav/ Cheers, Steve Your filters

[Clamav-users] freshclam return codes

2006-10-26 Thread Dennis Peterson
Freshclam is failing to promptly complete operations quite often lately. When this happens it return error code 143 which I don't find in the manpage. This is 0.88.5 on Solaris 8. Anyone know what this error is trying to convey? dp ___

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-27 Thread Dennis Peterson
Kris Deugau wrote: From the problems I'm having with supposedly malformed signatures, it looks like there's an effective complexity limit; from the problems in *matching* a signature that's finally been found to be acceptable, it looks like there's a (lower) limit on what Clam can actually

Re: [Clamav-users] Freshclam warning newer version, recommending older version

2006-10-27 Thread Dennis Peterson
ZiGGie wrote: # freshclam ClamAV update process started at Fri Oct 27 18:15:03 2006 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.90RC1.1 Recommended version: 0.88.5 DON'T PANIC! Read http://www.clamav.net/faq.html main.cvd is up to date (version: 40, sigs: 64138,

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-28 Thread Dennis Peterson
Kris Deugau wrote: The stock and pill spams that I'm trying to tag, however, have images that have *very small* variations message-to-message, but over a larger sample there's really very little that can be seen as common across the whole set - or even a significant part of the set.

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-28 Thread Dennis Peterson
Henrik Krohns wrote: On Sat, Oct 28, 2006 at 09:20:55AM -0700, Dennis Peterson wrote: I've explored OCR on both color and de-colorized images and there have been successes, but not enough to warrant turning it on in production. It is very cpu intensive. I don't get it.. unless you have some

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-28 Thread Dennis Peterson
Bill Randle wrote: On Sat, 2006-10-28 at 16:54 -0400, Kris Deugau wrote: Henrik Krohns wrote: I don't get it.. unless you have some big honeypot, maybe 5% of traffic contain small images to be OCRd. If your server can't handle that, I guess it's running out of juice anyway. :) Well... yeah.

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-28 Thread Dennis Peterson
Bill Randle wrote: On Sat, 2006-10-28 at 16:21 -0700, Dennis Peterson wrote: Actually, the FuzzyOCR plugin already handles animated gifs using various techniques to extract the hidden text. It also is able to decode png and jpeg files. Ah - so it does. I hadn't looked at v. 2.3. I'll have

Re: [Clamav-users] Complexity limit on (custom) signatures?

2006-10-29 Thread Dennis Peterson
Henrik Krohns wrote: On Sat, Oct 28, 2006 at 04:28:47PM -0700, Dennis Peterson wrote: I don't get it.. unless you have some big honeypot, maybe 5% of traffic contain small images to be OCRd. If your server can't handle that, I guess it's running out of juice anyway. :) You can even easily

Re: [Clamav-users] alpha version of freshclam-alike for 3rd part signatures

2006-10-30 Thread Dennis Peterson
Stephen Gran wrote: Hello all, So I have been seeing all these people putting together 3rd party signatures for clamav, and been quite pleased with the community effort that has sprung up around this. My only thought on seeing all of this was that there was no simple, freshclam like method for

Re: [Clamav-users] Problem Clamav 0.9 RC2 - Solaris 10

2006-10-31 Thread Dennis Peterson
Clamav wrote: Hello, I have problems installing Clamav 0.9 RC2 on Solaris 10. Is is a completely fresh Solaris 10 installation. Therefore I downloaded first the GMP package (gmp-4.2.1) and compiled and installed it with: ./configure ABI=32 make make check make install All the tests were OK.

Re: AW: [Clamav-users] Problem Clamav 0.9 RC2 - Solaris 10

2006-10-31 Thread Dennis Peterson
Hello, I was running crle and the libgmp was not in the library path, but this is not the reason that clamav can't work with the library (I even tested adding the librarypath with clre). It must be a problem with gmp package. Which version of gmp package are you using on Solaris 10?

Re: [Clamav-users] clamav-milter quiting

2006-11-01 Thread Dennis Peterson
Michael Grant wrote: Clamav-milter is quiting on me. It seems to be that daily.inc doesn't exist. Can someone please tell me how to create this file? Does this directory exist and if so is it writable by the user your process runs as? /var/db/clamav/ dp

Re: AW: [Clamav-users] Problem Clamav 0.9 RC2 - Solaris 10

2006-11-02 Thread Dennis Peterson
Clamav wrote: Hi! Thanks a lot - it was really a problem of the library path!! Wolfgang If this is true then crle should have been able to correct it. A problem that is common when crle is not used to establish the library search path is when the person building a product has a different

Re: [Clamav-users] Archive limits completely ignored if ArchiveBlockMax disabled; some scanners not implementing limits at all

2006-11-02 Thread Dennis Peterson
Philip Allison wrote: Any comments? What is the official verdict on what scanners should do with the limits when ArchiveBlockMax is disabled, and what are the scanners *actually* doing at the moment? Regards, Phil The current config is clear enough. The limits are adjustable by you and

Re: [Clamav-users] Freshclam periodically hangs

2006-11-02 Thread Dennis Peterson
David Kenneally wrote: Hello! I'm running version 0.88.5. I'm running into a problem with freshclam hanging up occasionally during our hourly updates. I see the process still running: 26347 ?S 0:00 awk -v progname=/etc/cron.hourly/freshclam progname {? print progname

Re: [Clamav-users] clamav-milter quiting

2006-11-03 Thread Dennis Peterson
Michael Grant wrote: So will this fix my quitting issue too or is my problem elsewhere? It seems incredible to me that I'm the only one having this problem. TBH, I don't remember what was your original problem. Because of the top-posting it was not possible to me to follow the whole thread

Re: [Clamav-users] Broken Pipe problem while running freshclam

2006-11-03 Thread Dennis Peterson
Rolf E. Sonneveld wrote: Hi, running ClamAV 0.88.5 on Solaris 9 and Solaris 10. Today I noticed that on three different systems the freshclam daemon process was gone. After trying to run freshclam interactively, I found the following (we're in the db.NL.clamav.net zone): bash-2.05#

Re: [Clamav-users] Broken Pipe problem while running freshclam

2006-11-06 Thread Dennis Peterson
Luca Gibelli wrote: Hello Rolf, Regarding this problem, I have the following questions: 4. Where do I report problems with mirrors? To me, Well, I see problems with the following two NL mirrors: IP: 213.222.11.220, corresponding to clamav.packetstorm.nu, it is refusing connections (and

Re: [Clamav-users] Cherishing my ignorance - An appeal to packagers

2006-11-07 Thread Dennis Peterson
I WANT to know NOTHING about ClamAV, I wish to remain ignorant. I even trust the folks who produce RPMs to come up with reasonable defaults for file locations, max sizes, etc. etc. etc. As _IS_ the case with just about every other install. You have obviously been very successful in

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-07 Thread Dennis Peterson
My not-so-automated update process looks like this: wget (link to current clamav-XXX.tar.gz) tar xzf clamav-XXX.tar.gz cd clamav-XXX configure --disable-zlib-vcheck make su make install service clamav restart service freshclam restart You would be wise to uninstall the previous

Re: [Clamav-users] Cherishing my ignorance - An appeal to packagers

2006-11-07 Thread Dennis Peterson
What seems entirely bizarre about Fedora's ClamAV packages is that they don't use freshclam in daemon mode, they use cron to run it. There's a perfectly good tool provided that does all the necessary things to link freshclam to clamd, and they don't use it. If you run freshclam as a

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-07 Thread Dennis Peterson
Bowie, The obvious observation that while this might work for you it's not a general solution, so now everyone needs to create a script. F'chrissake... It is trivial to do this. Less than 10 minutes, start to stop. I wrote the script I use 3 years and it took just minutes. I have 10 mail

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-07 Thread Dennis Peterson
You would be wise to uninstall the previous installation so that you don't end up with split versions. The man pages have not always been consistent nor have library names, and uninstall (make uninstall) helps prevent this. This only serves to illustrate the OP's point. I agree -

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-07 Thread Dennis Peterson
If it runs out of cron it runs for just milli- seconds - other wise it is in the proc table Assuming of course that you don't end up with hundreds of spawned cron jons. rocket science Run the following fc.sh script from cron every hour #!/bin/sh # usage: fc.sh [now] # Any argument will

Re: [Clamav-users] Cherishing my ignorance - An appeal to packagers

2006-11-07 Thread Dennis Peterson
On Tue, 7 Nov 2006 13:57:23 -0800 (PST) Dennis Peterson [EMAIL PROTECTED] wrote: I accept your points Dennis, I'm just puzzled that people have so much trouble with freshclam daemons. I have used it for years and find it 100% reliable after a few problems with settings in the early months

Re: [Clamav-users] don't understand technical lingo for SECURITY

2006-11-07 Thread Dennis Peterson
greetings all. i am a mac osx user but am unfamiliar with much of the computer lingoand this is my problem: i use clamav and just recently noticed this statement: SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES. now, i looked it up in the FAQs section, but because of my apparent

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-07 Thread Dennis Peterson
On Tue, 7 Nov 2006, Jim Redman wrote: Your opinions, seem to be the prevalent attitude of the vocal members of this list - if you don't suffer, it wasn't worth it. I would disagree, in that I don't see it as suffering. Forgive me if I missed it, but what is your specific problem

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-07 Thread Dennis Peterson
John Rudd wrote: Dennis Peterson wrote: Bowie, The obvious observation that while this might work for you it's not a general solution, so now everyone needs to create a script. F'chrissake... It is trivial to do this. Less than 10 minutes, start to stop. I wrote the script I use 3 years

Re: [Clamav-users] let's all make a regular domation to ClamAV

2006-11-08 Thread Dennis Peterson
Jim Maul wrote: Sergei Lavrov wrote: Then how about just donating $20 ?? Personally? Sure - I have made past personal donations to various groups. I was speaking about a commerical donation which is difficult when there is no paperwork submitted. It's a barrier for us, too. But an

Re: [Clamav-users] Re: To ClamAV Developers: donation question

2006-11-08 Thread Dennis Peterson
Dave Warren wrote: In message [EMAIL PROTECTED] Gerard Seibert [EMAIL PROTECTED] wrote: On Wednesday November 08, 2006 at 11:16:21 (AM) Sergei Lavrov wrote: Some of the businesses I know do want to make donations. But is ClamAV able to issue invoice ? In other words, you are looking for a

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Dennis Peterson
Dennis Peterson wrote: Jim Redman wrote: Your opinions, seem to be the prevalent attitude of the vocal members of this list - if you don't suffer, it wasn't worth it. His specific problem is he lacks the skill to install and manage the product. It's rather sad to see

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread Dennis Peterson
Jim Maul wrote: Bart Silverstrim wrote: On Nov 9, 2006, at 2:09 PM, Jim Redman wrote: Folks, I have to say, of all the lists I subscribe to, the vocal members of this list are the most arrogant and insulting. However, I consider comments such as Luca Gibelli's, bandwidth wasting, We are

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

2006-11-10 Thread Dennis Peterson
Christopher X. Candreva wrote: On Fri, 10 Nov 2006, Ken Jones wrote: I do have an account I even have open reported bugs that I am working on with the developers :) (ok, I've reported and they are trying to fix) Look man, I just use the bugzulla. I don't want to have to understand how

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread Dennis Peterson
Dennis Peterson wrote: Jim Maul wrote: somebody else wrote: Gee, I downloaded this package for clamav and installed it and now there are all sorts of other things that still need to be done to get it working correctly. Maybe clamav developers could work with the package

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

2006-11-10 Thread Dennis Peterson
On Fri, 10 Nov 2006, Dennis Peterson wrote: He scores! Thank you, I'll be here all week. Don't forget to tip your waitresses. I get the same login error, btw, and since I use Solaris exclusively, I'm interested. Look like it's been clasified as a security bug, so I'll let

  1   2   3   4   5   6   7   8   9   10   >