Hello Sergei,
> people will stop contributing signatures, right ?
I kindly ask you to read this thread in its entirety:
http://lurker.clamav.net/thread/20070817.105929.555e74bd.en.html#20070817.105929.555e74bd
Also check out the FAQ on the acquisition available on our website:
http://www.clam
Hello,
I'm running 0.91.2 on solaris9 with amavisd-new
I have maybe some problem with clamav : yesterday I saw some FakeTube mail that
was not detected.
I did some work on it and I saw that :
- if I did a clamdscan on a mail containing the FakeTube clamav found the mail
- if I sent the mail con
Hello again,
I had a problem of not detecting Email.Faketube on our configuration, using
clamav with amavisd-new.
I finally found that the problem seems to be the following :
- when I directly scan the email file, clamav finds that it's an email file
which correspond to type 4 in the signature
On Tue, 28 Aug 2007 12:17:16 +0200
Frederic Goudal <[EMAIL PROTECTED]> wrote:
> I wonder what is to be done there :
> - should amavisd-new send the original file and not the parts to clamav
> (that's an amavis problem).
Yes, I belive there's some option in amavisd-new to do this..
> - should cla
Frederic Goudal wrote:
> - when amavisd-new calls clamd, it just gives the inside of the mail, which
> does not correspond to type 4 in the signature database, and than
> Email.Faketube is NOT detected. I have added a simple signature file
> replacing the email type with anyfile type (0), and
Finally we had to add the following to conf file
PhishingSignatures No
On 8/26/07, Christoph Cordes <[EMAIL PROTECTED]> wrote:
>
>
> Am 26.08.2007 um 17:48 schrieb BG Mahesh:
>
> > But the emails don't have any faketube/youtube URLs
> > They are plain text files but yes, few emails have URLs in
Steve Basford <[EMAIL PROTECTED]>
> Date: Tue, 28 Aug 2007 11:45:09 BST
> Subject: Re: [Clamav-users] Email malware type detection and amavis
>
>
>Frederic Goudal wrote:
>> - when amavisd-new calls clamd, it just gives the inside of the mail, which
does not correspond to type 4 in the signature
Luca Gibelli <[EMAIL PROTECTED]> wrote:
Hello Sergei,
> people will stop contributing signatures, right ?
I kindly ask you to read this thread in its entirety:
http://lurker.clamav.net/thread/20070817.105929.555e74bd.en.html#20070817.105929.555e74bd
Also check out the FAQ on the acquisition
On 8/28/07, Sergei Lavrov <[EMAIL PROTECTED]> wrote:
<---SNIP--->
> I read it already. I still remember someone in this forum asked before
> whether ClamAV will be acquired. The founders back then said ClamAV is not
> for sale. See what happens now ?
Two comments:
1) You're taking a very negati
On 8/28/07, Bowie Bailey <[EMAIL PROTECTED]> wrote:
> Everything is for sale, the only question is the price...
Not to mention the availability of a customer willing and, perhaps
more importantly, able to pay said price.
> I'm not worried about ClamAV being acquired. At the moment, everyone is
Sergei Lavrov wrote:
> Luca Gibelli <[EMAIL PROTECTED]> wrote:
> > Hello Sergei,
> >
> > > people will stop contributing signatures, right ?
> >
> > I kindly ask you to read this thread in its entirety:
> >
> >
http://lurker.clamav.net/thread/20070817.105929.555e74bd.en.html#20070817.10
5929.555
I'm getting a number of these in my logs now that clamav-milter is
chewing away at incoming SMTP requests:
Aug 28 03:59:40 mx2 postfix/smtpd[30473]: NOQUEUE: milter-reject: RCPT
from cho0.0.0.0-36-3.fbx.proxad.net[0.0.0.0]: 554 5.7.1 Suspicious
recipient address blocked; from=<[EMAIL PROTECTED
Is anyone seeing a surge clamd loads today? Or has everyone upgraded
from 0.88.6 and 0.91.2 doesn't have the problem anymore?
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
I have a client that is having some trouble when forwarding some spamcop
complaints to the appropriate parties. They keep getting
Email.Webaccount-11 rejections.
Looked all over, but haven't found the right place for a definition of what
this is? Anybody know?
Dan Metcalf <[EMAIL PROTECTED]>
On Tue, 2007-08-28 at 13:26 -0500, Bryan Johns wrote:
> On 8/28/07, Bowie Bailey <[EMAIL PROTECTED]> wrote:
> > I'm not worried about ClamAV being acquired. At the moment, everyone is
> > saying that there are no plans to change anything. As long as that
> > remains the case, the only difference
Am 29.08.2007 um 00:59 schrieb Dan Metcalf:
> I have a client that is having some trouble when forwarding some
> spamcop
> complaints to the appropriate parties. They keep getting
> Email.Webaccount-11 rejections.
>
> Looked all over, but haven't found the right place for a definition
> of w
>From: "Christoph Cordes" <[EMAIL PROTECTED]>
>
> Am 29.08.2007 um 00:59 schrieb Dan Metcalf:
>
>> I have a client that is having some trouble when forwarding some
>> spamcop
>> complaints to the appropriate parties. They keep getting
>> Email.Webaccount-11 rejections.
>>
>> Looked all over, but h
Folks, Steve has been pretty busy lately and has not gotten a change to
upload a more recent versions of my unofficial signature files download
script to his SaneSecurity "Usage" site. In the mean time it's
available for download at:
ftp.inetmsg.com/pub/unoffical-sigs.sh
Yes, the script nam
Bill Landry wrote the following on 8/28/2007 5:43 PM -0800:
> Folks, Steve has been pretty busy lately and has not gotten a change to
> upload a more recent versions of my unofficial signature files download
> script to his SaneSecurity "Usage" site. In the mean time it's
> available for download
At 02:37 PM 8/28/2007, micah wrote:
>I'm getting a number of these in my logs now that clamav-milter is
>chewing away at incoming SMTP requests:
>
>Aug 28 03:59:40 mx2 postfix/smtpd[30473]: NOQUEUE: milter-reject: RCPT
>from cho0.0.0.0-36-3.fbx.proxad.net[0.0.0.0]: 554 5.7.1 Suspicious
>recipient a
Hi guys,
>
> ftp.inetmsg.com/pub/unofficial-sigs.sh sigs.sh>
if i want to use the script via crond which time interval
i should use ?
Thanks,
Dominique Schramm
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http
Schramm e.K. [ Deutschland ] wrote the following on 8/28/2007 9:21 PM
-0800:
> Hi guys,
>
>
>
>> ftp.inetmsg.com/pub/unofficial-sigs.sh > sigs.sh>
>>
>
> if i want to use the script via crond which time interval
> i should use ?
>
I run the script via crond hourly, and since downloa
Great,
thanks for your quick response.
greetings,
Dominique
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:clamav-
> [EMAIL PROTECTED] On Behalf Of Bill Landry
> Sent: Wednesday, August 29, 2007 6:50 AM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] Script update
>
> Schr
23 matches
Mail list logo
