[Clamav-users] 0.86.1 vs clamav-devel-20050605

2005-06-28 Thread Dan O'Brien
First, I'll admit to not having tried a more recent CVS than 2005-06-05. Here's my question: clamav-devel-20050605 uses a new options file format. Options require a boolean yes or no. For exampe, CVS from 2005-06-05 requires you specify LogSyslog yes instead of LogSyslog. Clamav 0.86.1

[Clamav-users] CLAMAV Error

2005-06-28 Thread Rodrigo Pineda
hi: Hello to all My name is rodrigo, and i have a little problem when i complie CLAMAV this is the error: gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./zziplib -I./mspack -I/usr/local/include -g -O2 -MT lzxd.lo -MD -MP -MF .deps/lzxd.Tpo -c mspack/lzxd.c -fPIC -DPIC -o .libs/lzxd.lo gcc

[Clamav-users] AllowSupplementaryGroups

2005-06-28 Thread Ronny Nussbaum
Hello. I can't find anywhere a good explanation for this setting. man 5 clamd.conf gives: Initialize supplementary group access (clamd must be started by root). Great... What does that mean? Thanks -RoNNY ___

[Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Edward Rudd
I am receiving false positives for the HTML.Phishing.Pay-39 virus/phishing signature. Currently I have 2 messages in my quarantine, both to the same users from Paypal's outgoing MTAs, which are legitimate requests for the user to verify their Bank account (links only to paypal.com and various

[Clamav-users] No automatic virus signatures after update

2005-06-28 Thread Thomas Booms
Hi all, I'm new to clamav anti virus and made a successfully install of clamav 0.86.1 on my SuSE 9.0 Professional Box. With freshclam I've downloaded yesterday evening to latest virus signatures, version 959. For some reason in my mails i get only version 958. /usr/local/bin/freshclam -d -c

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Niek
On 6/28/2005 9:42 PM +0200, Edward Rudd wrote: I am receiving false positives for the HTML.Phishing.Pay-39 virus/phishing signature. Currently I have 2 messages in my quarantine, Hmmz, I'm wondering here, about virus scanning, and phishing. Would it be possible to exclude certain signatures,

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Odhiambo Washington
* Niek [EMAIL PROTECTED] [20050628 22:49]: wrote: On 6/28/2005 9:42 PM +0200, Edward Rudd wrote: I am receiving false positives for the HTML.Phishing.Pay-39 virus/phishing signature. Currently I have 2 messages in my quarantine, Hmmz, I'm wondering here, about virus scanning, and phishing

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Niek
On 6/28/2005 9:51 PM +0200, Odhiambo Washington wrote: What happens when you disable ScanHTML in dspam.conf? I meant, lets say i dont want clamav to detect somefool variants. Niek ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Odhiambo Washington
* Niek [EMAIL PROTECTED] [20050628 22:55]: wrote: On 6/28/2005 9:51 PM +0200, Odhiambo Washington wrote: What happens when you disable ScanHTML in dspam.conf? I meant, lets say i dont want clamav to detect somefool variants. I see. You can make copies of the *.cvd to another directory

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Niek
On 6/28/2005 10:00 PM +0200, Odhiambo Washington wrote: Why do you want to do this anyway? FPs?? I don't want clamav to detect phish mail. Niek ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Odhiambo Washington
* Niek [EMAIL PROTECTED] [20050628 23:05]: wrote: On 6/28/2005 10:00 PM +0200, Odhiambo Washington wrote: Why do you want to do this anyway? FPs?? I don't want clamav to detect phish mail. sigtool -l | grep -v 'Phis*' local.ndb, then use local.ndb as your signature files. This is off

Re: [Clamav-users] AllowSupplementaryGroups

2005-06-28 Thread Daniel J McDonald
On Tue, 2005-06-28 at 14:30 -0400, Ronny Nussbaum wrote: Hello. I can't find anywhere a good explanation for this setting. man 5 clamd.conf gives: Initialize supplementary group access (clamd must be started by root). Great... What does that mean? by default, only the same uid/gid as

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Noel Jones
At 03:04 PM 6/28/2005, Niek wrote: On 6/28/2005 10:00 PM +0200, Odhiambo Washington wrote: Why do you want to do this anyway? FPs?? I don't want clamav to detect phish mail. This has been discussed at great length previously, check the archives. basic notes: - I believe clamav .90 is to

Re: [Clamav-users] HTML.Phishing.Pay-39 False positives

2005-06-28 Thread Brian Morrison
On Tue, 28 Jun 2005 22:04:09 +0200 in [EMAIL PROTECTED] Niek [EMAIL PROTECTED] wrote: On 6/28/2005 10:00 PM +0200, Odhiambo Washington wrote: Why do you want to do this anyway? FPs?? I don't want clamav to detect phish mail. I believe this facility will become available in 0.90, not sure