Re: Re[2]: [Clamav-users] Clamd process

2004-11-03 Thread Trog
On Tue, 2004-11-02 at 20:11, Henri van Riel wrote: Hello Trog, Tuesday, November 2, 2004, 8:47:26 PM, you wrote: On Tue, 2004-11-02 at 19:39, Henri van Riel wrote: I'm just wondering why there are two processes... They aren't processes, they are threads. Clamd spawns new threads to

Re: [Clamav-users] recommended milter for spamassassin with clamav

2004-11-03 Thread Nigel Horne
I run both spamass-milter and clamav-milter with no problems. Why not post the configuration files here and we'll look at them. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk

Re: [Clamav-users] [SA12959] Internet Explorer IFRAME Buffer Overflow Vulnerability (fwd)

2004-11-03 Thread steve
Quoting Tomasz Kojm [EMAIL PROTECTED]: Exploit.IFRAME.foo:*:494652414d453d??{256-} Bad format. Does this one seem okay? note1: ndb database format: use with v0.80 note2: matches iframe src=file:// ..{586}.. name=

Re: [Clamav-users] configure failure: libmilter directory not found?

2004-11-03 Thread Nigel Horne
On Monday 01 Nov 2004 14:18, Tom D`Asto wrote: Trying to complete the installation of clamav. I want to configure the clamav-milter (./configure --enable-milter) for email scanning. However, during the configure, libmilter directory cannot be located. I can't find it either... What operating

Re: [Clamav-users] clamav-milter segfault

2004-11-03 Thread Nigel Horne
Is 0.80n any better? -Nigel On Monday 01 Nov 2004 22:57, Internet Helpdesk wrote: Sorry to repeat my question but... I've tried to update my clamav-milter... Any version after 0.80j gives a segfault immediately when I try to run it. What information can I provide to help diagnose this

Re: [Clamav-users] [SA12959] Internet Explorer IFRAME Buffer Overflow Vulnerability (fwd)

2004-11-03 Thread clamav
note1: ndb database format: use with v0.80 note2: matches iframe src=file:// ..{586}.. name= exploit.iframe.file:3:*:3C696672616D65207372633D66696C653A2F2F{-586}6E616D653D22 It's close to what we want. How do we account for tags like this where the atrtibutes aren't in order? A regex is

Re: [Clamav-users] [SA12959] Internet Explorer IFRAME Buffer Overflow Vulnerability (fwd)

2004-11-03 Thread Brian Morrison
On Wed, 3 Nov 2004 01:45:36 -0800 (PST) in [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: In reality, we should never see a src 586 bytes long. It's just sane html to say keep it restricted. But do the writers of malware only produce sane html? I suspect not. -- Brian Morrison bdm at

Re: [Clamav-users] how do you start clamav-milter

2004-11-03 Thread Nigel Horne
On Wednesday 03 Nov 2004 03:22, Tom D`Asto wrote: I'm following the instructions in clamav-0.80/clamav-milter/INSTALL. My first problem is that the following file does not exist so I can't add the variable CLAMAV_FLAGS: Add to /etc/sysconfig/clamav-milter

Re: [Clamav-users] [SA12959] Internet Explorer IFRAME Buffer Overflow Vulnerability (fwd)

2004-11-03 Thread clamav
On Wed, 3 Nov 2004, Brian Morrison wrote: In reality, we should never see a src 586 bytes long. It's just sane html to say keep it restricted. But do the writers of malware only produce sane html? I suspect not. That's exactly what I mean. Any iframe with a src={256,} in an email

R: [Clamav-users] Exploit-Mime.gen.c detection

2004-11-03 Thread Cali Federico
Do you know if it is possible to obtain the same behavior of the WebShield? I'm using (postfix,amavisd-new,clamav) Federico -Messaggio originale- Da: Joe Maimon [mailto:[EMAIL PROTECTED] Inviato: martedì 2 novembre 2004 21.18 A: ClamAV users ML Oggetto: Re: [Clamav-users]

[Clamav-users] zlib 1.2.2 released

2004-11-03 Thread Trog
zlib 1.2.2 is available at: http://www.zlib.net/ this version fixes the known zlib stability issue that Clam can hit in previous 1.2.x versions. If your vendor hasn't released an update yet, you may want to do a manual update. References:

Re: [Clamav-users] clamav-milter segfault

2004-11-03 Thread Internet Helpdesk
- Original Message - From: Nigel Horne [EMAIL PROTECTED] To: ClamAV users ML [EMAIL PROTECTED] Sent: Wednesday, November 03, 2004 3:45 AM Subject: Re: [Clamav-users] clamav-milter segfault Is 0.80n any better? from 10/30/2004? Nope, sorry. -Troy -Nigel

[Clamav-users] Comment on TCP option in clamd

2004-11-03 Thread Jason Haar
Hi there I think the TCP option needs some more explicit documentation, as I have begun seeing RPMs of clamav where the Socket option is *disabled* and the TCP option is *enabled* as the defaults. As far as I'm aware, that is *not* a good idea. Not only are there now network security issues you

Re: [Clamav-users] clamav-milter segfault

2004-11-03 Thread Internet Helpdesk
Is 0.80n any better? from 10/30/2004? Nope, sorry. Dang. I'm going to have to eat my words. I went to run it (clamav-milter .80n) under gdb and discovered it's not segfaulting anymore, it's running fine. I could swear on a stack of bibles that I was trying to use the very lastest

[Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread tester
Hello all, please bear with me since i am very new to this list. I have a RedHat 8.0 mail server that is running clamav-0.75 and need some help to upgrade to clamav .80 The first thing that i ran into was some failed dependacies see the output below warning: clamav-0.80-1.i386.rpm: V3

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Patrick Boutilier
On 11/03/2004 04:25 PM, tester wrote: Hello all, please bear with me since i am very new to this list. snip So now i am thinking that maybe i need to uninstall .75 and then try installing .80 but i do not know how to uninstall .75 rpm -e clamav If someone on the list feels that this is the

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Christopher Malek
tester [EMAIL PROTECTED] i386]# rpm -ivh clamav-0.80-2.i386.rpm Use rpm -Uvh clamav-0.80-2.i386.rpm instead. -i means Install a new package; choke if a package by that name exists -U means Update an existing package, or install if there is no existing package -- [EMAIL PROTECTED]

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Troy Ayers
Now i am getting conflict errors. So now i am thinking that maybe i need to uninstall .75 and then try installing .80 but i do not know how to uninstall .75 Heh, RPM dependancies can be fun :) Remove the old package. Been a while (rpm -e clamav )IIRC I always compile from source even when

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Jim Maul
tester wrote: Hello all, please bear with me since i am very new to this list. I have a RedHat 8.0 mail server that is running clamav-0.75 and need some help to upgrade to clamav .80 The first thing that i ran into was some failed dependacies see the output below warning:

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Kelson
Patrick Boutilier wrote: On 11/03/2004 04:25 PM, tester wrote: So now i am thinking that maybe i need to uninstall .75 and then try installing .80 but i do not know how to uninstall .75 rpm -e clamav Or rather, rpm -e clamav clamav-db clamd DAG divides clamav into 4 packages (clamav,

RE: [Clamav-users] clamav-milter segfault

2004-11-03 Thread Evan Pierce
but it would appear things for me have got worse. Clamav-milter -V gives ClamAV version devel-20041103, clamav-milter version 0.80o I am recompiling now with ./configure --enable-milter --enable-debug as specified in the clamav-milter man page. May be related to the above problem. Evan

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread tester
Thanks, the rpm -e clamav clamav-db clamd was what i really needed. Thanks gary - Original Message - From: Kelson [EMAIL PROTECTED] To: ClamAV users ML [EMAIL PROTECTED] Sent: Wednesday, November 03, 2004 2:41 PM Subject: Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread tester
Well i have to say that it has been one hell of a ride so far. If i did'nt have to keep running off to deal with other network issues then i could devote a little more brain power to this one. Thanks Gary - Original Message - From: Troy Ayers [EMAIL PROTECTED] To: ClamAV users ML

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread tester
After successfully removing the old version, your command did the trick. Thanks Gary - Original Message - From: Christopher Malek [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 03, 2004 2:34 PM Subject: Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread tester
Jim, 90% of all the progress that i have made has been a direct result of your help and i do appreciate it. I jumped over to this list just to see if i could come up with more info and sources at the same time and i did. Well now the old one is gone after removing all the componets of clamav.

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Brian Morrison
On Wed, 3 Nov 2004 15:36:28 -0600 in [EMAIL PROTECTED] tester [EMAIL PROTECTED] wrote: WARNING: Your ClamAV installation is OUTDATED - please update immediately ! WARNING: Current functionality level = 2, required = 3 [EMAIL PROTECTED] root]# I typed in freshclam just to check it out

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Kritof Petr
Brian Morrison wrote: On Wed, 3 Nov 2004 15:36:28 -0600 in [EMAIL PROTECTED] tester [EMAIL PROTECTED] wrote: WARNING: Your ClamAV installation is OUTDATED - please update immediately ! WARNING: Current functionality level = 2, required = 3 [EMAIL PROTECTED] root]# I typed in freshclam just to

Re: [Clamav-users] Updating to clamav 8 from 7.5 on Redhat8

2004-11-03 Thread Joe Christy
Vis-a-vis [EMAIL PROTECTED]'s note of 11/03/2004 12:29 PM: On 11/03/2004 04:25 PM, tester wrote: Hello all, please bear with me since i am very new to this list. snip So now i am thinking that maybe i need to uninstall .75 and then try installing .80 but i do not know how to uninstall .75

[Clamav-users] Installation Problem

2004-11-03 Thread Chris
Hi All I think I am in the right forum for this. so please excuse me if I am not I am having trouble installing clamav on a linux box (remotely hosted) I am getting an error when I do a shell install the error is cpp has failed sanity checks Now please excuse my lack of knowledge about gcc,

Re: [Clamav-users] Installation Problem

2004-11-03 Thread Fajar A. Nugraha
Chris wrote: I am having trouble installing clamav on a linux box (remotely hosted) And why would you want to do that (I assume you don't have root access)? but I have checked, and the configure.log file says that cpp cant find stdio.h and a few others. these include files are in /usr/include

FW: [Clamav-users] Installation Problem

2004-11-03 Thread Chris
Thanks a bunch Fajar It turns out it was because I wasnt logged in as root I su'd to root and all worked thanks to your tip being from windows all this security stuff is foreign to me ;) Regards Chris -Original Message- From: Fajar A. Nugraha [mailto:[EMAIL PROTECTED] Sent: 4