Re: [Clamav-devel] .cld file status

2008-01-03 Thread Andy Fiddaman
On Thu, 3 Jan 2008, Tomasz Kojm wrote: ; ; support for .cld files is still experimental and not fully finished, but ; clamd shouldn't have such problems. I couldn't reproduce it on my local box; It seems that the first gzseek() call in cli_tgzload() is somehow rewinding the file pointer. cli_tgzlo

Re: [Clamav-devel] .cld file status

2008-01-03 Thread Andy Fiddaman
On Thu, 3 Jan 2008, Tomasz Kojm wrote: ; On Mon, 31 Dec 2007 20:45:48 + (GMT) ; Andy Fiddaman <[EMAIL PROTECTED]> wrote: ; ; > Does anyone know the status of the new support for .cld files in the SVN ; > code? ; > ; > I've been playing with the latest SVN code on a

[Clamav-devel] .cld file status

2007-12-31 Thread Andy Fiddaman
Does anyone know the status of the new support for .cld files in the SVN code? I've been playing with the latest SVN code on a development box and I'm having problems with the new .cld container files. Everything's fine until an incremental update occurs then a .cld file appears and clamd exits d

Re: [Clamav-devel] Freshclam User-Agent header

2006-01-30 Thread Andy Fiddaman
On Fri, 27 Jan 2006, Tomasz Kojm wrote: ; On Fri, 27 Jan 2006 14:08:51 + (GMT) ; Andy Fiddaman <[EMAIL PROTECTED]> wrote: ; ; > Does anyone know if this patch has been considered? I haven't heard ; > anything since I submitted it. ; ; There must be some telepathy going on

Re: [Clamav-devel] Freshclam User-Agent header (fwd)

2006-01-27 Thread Andy Fiddaman
On Fri, 27 Jan 2006, Tomasz Kojm wrote: ; On Fri, 27 Jan 2006 15:11:19 +0100 ; Tomasz Kojm <[EMAIL PROTECTED]> wrote: ; ; > On Fri, 27 Jan 2006 14:08:51 + (GMT) ; > Andy Fiddaman <[EMAIL PROTECTED]> wrote: ; > ; > > Does anyone know if this patch has been

Re: [Clamav-devel] Freshclam User-Agent header (fwd)

2006-01-27 Thread Andy Fiddaman
On Fri, 27 Jan 2006, Tomasz Kojm wrote: ; On Fri, 27 Jan 2006 14:08:51 + (GMT) ; Andy Fiddaman <[EMAIL PROTECTED]> wrote: ; ; > Does anyone know if this patch has been considered? I haven't heard ; > anything since I submitted it. ; ; There must be some telepathy going on

[Clamav-devel] Freshclam User-Agent header (fwd)

2006-01-27 Thread Andy Fiddaman
Does anyone know if this patch has been considered? I haven't heard anything since I submitted it. Thanks, Andy -- Forwarded message -- Date: Fri, 6 Jan 2006 11:07:58 + (GMT) From: Andy Fiddaman <[EMAIL PROTECTED]> Reply-To: ClamAV Development To: c

Re: [Clamav-devel] possible scan evasion

2006-01-17 Thread Andy Fiddaman
On Tue, 17 Jan 2006, Damian Menscher wrote: ; I got a virus this morning that made it past clamav-milter 0.87.1. The ; attachment was double-encoded: after decoding the base64 email, it left a I'm seeing ~6 of these coming in each hour, luckily my other virus scanners are catching it! A. _

[Clamav-devel] Freshclam User-Agent header

2006-01-06 Thread Andy Fiddaman
By default, freshclam uses a User-Agent header of PACKAGE/VERSION (e.g. clamav/0.87.1) when downloading virus updates over HTTP. This makes it a little awkward if your servers are behind a firewall/proxy which applies User-Agent filtering. The attached patch adds a new freshclam option (HTTPUserA

Re: [Clamav-devel] UPDATED Patch for environment variable addition to virusaction

2005-03-10 Thread Andy Fiddaman
Calin A. Culianu wrote: ; Ah. So you are simply a keen programmer that wants to make sure no broken ; code gets into clamav? :) Not entirely, I just felt that since I made the point about portability and setenv I should at least bother to read the patch!.. although, I do use ClamAV on Solaris so

Re: [Clamav-devel] UPDATED Patch for environment variable addition to virusaction

2005-03-10 Thread Andy Fiddaman
On Wed, 9 Mar 2005, Calin A. Culianu wrote: ; ; ; On Wed, 9 Mar 2005, Andy Fiddaman wrote: ; ; > This is looking good, just one problem and one comment. ; > ; > mcalloc() is unfortunately not portable, it's probably best that you use the ; > ClamAV library function cli_malloc(

Re: [Clamav-devel] UPDATED Patch for environment variable addition to virusaction

2005-03-09 Thread Andy Fiddaman
On Wed, 9 Mar 2005, Calin A. Culianu wrote: ; Argh, my last two patches are bad. This one should work fine. Tomasz: Please ; use this one and disregard the last two I sent. This one is 100% correct -- ; the other one had a problem with its use of putenv(). ; ; Sheesh putenv() is a retarded funct

Re: [Clamav-devel] Patch to add environment variables VirusEvent called scripts

2005-03-09 Thread Andy Fiddaman
On Wed, 9 Mar 2005, Calin A. Culianu wrote: ; ; This patch modifies the 'virusaction' function in clamd/others.c, as well as ; all code that refers to this function (since the prototype changed). Unfortunately, not all systems implement setenv() and unsetenv() - Solaris for example. Can I suggest

[Clamav-devel] Patch to raise file descriptor limit in clamd

2005-02-18 Thread Andy Fiddaman
Here is a patch for clamd which makes it raise the process's file descriptor limit to the maximum supported by the OS, as long as it is safe for the fd poll method used. Please can this be considered for inclusion into CVS ? Thanks, Andydiff -r -u clamav-devel/clamd/clamd.c clamav-devel-new/cla

[Clamav-devel] Solaris 9 binary packages..

2004-11-11 Thread Andy Fiddaman
I'm maintaining binary packages for Solaris 9 SPARC 64-bit and am going to keep them up to date with each new stable release @ clamav.citrus-it.net Could this be added to the Binary packages page on the web site ? Apologies if this is the wrong list, it seemed the most appropriate one. A.

Re: [Clamav-devel] CVD Format

2004-09-03 Thread Andy Fiddaman
On Fri, 3 Sep 2004, Michael Wuest wrote: ; Hello there, ; ; where can I get information about the file structure of ; the CVD Format? ; ; Thanks, ; best regards, ; Michael. The best place is probably the source code, libclamav/cvd.c It is however just a colon delimited header line (512 bytes) f

[Clamav-devel] Slight error in clamav-milter (fwd)

2004-08-23 Thread Andy Fiddaman
Sorry, just re-read this code. MAKEMASK takes an inverse netmask length so the code is right. Andy -- Forwarded message -- Date: Mon, 23 Aug 2004 12:19:59 + (GMT) From: Andy Fiddaman <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Slight error in clamav-milter

[Clamav-devel] Slight error in clamav-milter

2004-08-23 Thread Andy Fiddaman
Just spotted this one, the mask length in the following entry should be 12, not 20. { PACKADDR(172, 16, 0, 0), MAKEMASK(20) }, /* 172.16.0.0/20 */ A. --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic

Re: [Clamav-devel] clamd STREAM and ZIP, RAR, bzip2

2004-08-12 Thread Andy Fiddaman
On Thu, 12 Aug 2004, Brian A. Reiter wrote: ; I'm working on a C# clamd client for Mono/.NET. I am using the STREAM verb ; and then sending the file to be scanned as a text stream to the TCP port ; opened by clamd. ; ; This works very well for the "test" signature file. I get "stream: ; ClamAV-Te

[Clamav-devel] Milter failure codes..

2004-05-24 Thread Andy Fiddaman
By default, if a milter returns a temporary failure, or is unavailable, sendmail returns "451 4.7.1 Please try again later". This is actually not a valid error response (since the subcode 7.1 is only valid for class 5) and is interpreted by some MTAs as a permanant failure (e.g. Lotus Notes). The

[Clamav-devel] Syslog facilities..

2004-05-11 Thread Andy Fiddaman
The facilities LOG_AUTHPRIV and LOG_FTP don't exist on Solaris ../shared/output.c:296: error: `LOG_AUTHPRIV' undeclared here (not in a function) ../shared/output.c:299: error: `LOG_FTP' undeclared here (not in a function) Can we have an #ifdef please ? Thanks, Andy -

[Clamav-devel] Virus submissions..

2004-05-05 Thread Andy Fiddaman
I've got a zip containing 23 viruses which aren't detected by ClamAV with the latest signatures and source from CVS 2/5 (May). I've tried to submit it to the web interface but just got a blank screen back, can anyone from the team confirm that it has arrived, or let me know where I can email the

Re: [Clamav-devel] Encrypted zip scanning..

2004-05-01 Thread Andy Fiddaman
On Sat, 1 May 2004, Tomasz Kojm wrote: ; Feature implemented Thanks! ; (in a different way than your patch) No surprise there - I wasn't happy with my way of doing it, I'll take a look in CVS ; in CVS for both RAR and zip archives. Thanks for the idea. --

[Clamav-devel] Encrypted zip scanning.. (fwd)

2004-04-26 Thread Andy Fiddaman
Sorry to reply to my own post, but I haven't seen any responses to this. Is there any possibility of the patch being included ? Thanks, Andy -- Forwarded message -- Date: Fri, 16 Apr 2004 21:52:02 + (GMT) From: Andy Fiddaman <[EMAIL PROTECTED]> Reply-To: [EMAI

[Clamav-devel] Encrypted zip scanning..

2004-04-16 Thread Andy Fiddaman
At the moment, if the detect-encrypted option is set and a file in a zip is encrypted, then none of the following files nor the entire zip are scanned for virii. What do people think about changing this behaviour ? The reason is that I allow my users to choose whether they want to block encrypted

RE: [Clamav-devel] Participate in clamav development.

2004-04-09 Thread Andy Fiddaman
On Fri, 9 Apr 2004, Alex Cherney wrote: ; Thanks for offering to help. You are right - clamwin does not do ; on-acces scanning. I am not proficient in NT driver development, and as ; far as I know this is an area requiring a lot of knowledge mostly gained ; by experience. ; ; There are couple of p

[Clamav-devel] Error scanning file with 0.70rc

2004-03-16 Thread Andy Fiddaman
Having just upgraded to 0.70rc, I have been running a few tests. When scanning a file which is detected as a virus by F-prot and McAfee, I get the following error: buckk% (529) clamscan ./W97M/W97M_Myna.X LibClamAV Error: cli_malloc(): Can't allocate memory (-8 bytes). malloc_problem: Not enough

Re: [Clamav-devel] Re: select() versus poll()

2004-03-02 Thread Andy Fiddaman
On Tue, 2 Mar 2004, Trog wrote: ; > FD_SETSIZE is set to 1024 so as soon as you open the 1025th file, you ; > overwrite memory. The recommended (by Sun) workaround is to change ; > select() ; > calls to poll(). ; ; Thats irrelevant in this case, as we only ever select on one FD. Yes, but it could

[Clamav-devel] select() versus poll()

2004-02-27 Thread Andy Fiddaman
I saw a note in the changelog for clamd/session.c that said poll() had been changed to select(). Can anyone explain why ? I thought that poll() was what people should be moving towards as a replacement for select() because it didn't suffer from the intrinsic limit of select()'s fd_set structure.

[Clamav-devel] clamd chdir(/)

2004-02-13 Thread Andy Fiddaman
Is there any specific reason that clamd does a chdir("/") when daemonising ? It makes it a bit tricky for me to collect any core files it creates (unless I move to a global core file area). I did want to do a "cd /var/run/clamav && /opt/clamav/bin/clamd" because I've had a couple of crashes since

Re: [Clamav-devel] which mime decoder

2003-12-11 Thread Andy Fiddaman
; I'm interested, which MIME decoder is better: ; - ClamAV's built-in, written by Nigel Horne ; - ripMIME, written by Paul L Daniels Of the two, ripMIME is significantly better - but gmime would be my first choice. The biggest operational problem I have with the built-in one is that it doesn't ap