Re: [Clamav-users] Resources for integrating with spamassassin+amavisd

2010-04-27 Thread Alex
Hi, >> I've done some research on the best way to integrate it, but hoped >> someone could point me to a current document that outlines how to do >> this and help me answer some of my questions. > > The best way to integrate them is to follow the instructions at Steve's > web site (Sane Security).

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Gianluigi Tiesi
On 21/04/2010 13.54, h...@dip-systems.de wrote: > After the last signature update, clam av stopped working on our woody > installation. > > Is there no more support for this Debian Release? NO! woody was released in 2002 (8 years ago) they stopped releasing security updates on Jun 2006 (4 year

Re: [Clamav-users] Large File problems

2010-04-27 Thread Gianluigi Tiesi
On 28/04/2010 5.24, rick...@mm.com wrote: > I have a zip file of PDF files I'm trying to scan, the file is 2623701980 > bytes. I've set all the Limits to 0 but still no joy. I'm running the > latest version, on Solaris 10, x86. I have a lot more files like this > coming soon and really need to get

[Clamav-users] Large File problems

2010-04-27 Thread rickeng
I have a zip file of PDF files I'm trying to scan, the file is 2623701980 bytes. I've set all the Limits to 0 but still no joy. I'm running the latest version, on Solaris 10, x86. I have a lot more files like this coming soon and really need to get this working so any help would be great.

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Nathan Gibbs
* Jim Preston wrote: > On Apr 27, 2010, at 3:23 PM, Sarocet wrote: > >> The ClamAV team didn't design the AV to stop on getting a special >> signature. >> That signature could exist due to a bug that you decided not to fix >> (by not >> updating/patching). >> It was a clever use of a bug to disabl

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Jim Preston
On Apr 27, 2010, at 3:23 PM, Sarocet wrote: Nathan Gibbs wrote: Here is what I absolutely do not like about this or agree with. The very possibility of there being a kill sig. One specially crafted sig could kill the virus protection on every server & workstation in our company. Allowin

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Sarocet
Nathan Gibbs wrote: > Here is what I absolutely do not like about this or agree with. > > The very possibility of there being a kill sig. One specially crafted sig > could kill the virus protection on every server & workstation in our company. > > Allowing the ClamAV Team to remotely nuke a level

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Nathan Gibbs
* Jim Preston wrote: > To me this is an oxymoron "vital task" + "set and forget" Set and forget > solutions are for NON-VITAL tasks by the very statement of 'forget'. > Your opinion, which you are entitled to. I'll agree to disagree with you. :-) > it is up to THEM to ensure changes to the pr

Re: [Clamav-users] Resources for integrating with spamassassin+amavisd

2010-04-27 Thread Dennis Peterson
> > Hi, > > > I've done some research on the best way to integrate it, but hoped > someone could point me to a current document that outlines how to do > this and help me answer some of my questions. The best way to integrate them is to follow the instructions at Steve's web site (Sane Security

[Clamav-users] Resources for integrating with spamassassin+amavisd

2010-04-27 Thread Alex
Hi, I'm using sa-v3.2.5 and amavisd with clamav-0.96 and it appears to be working properly. clamdcheck periodically sends the eicar virus test and clamd reports that it found it properly. What is the best procedure for now integrating the sanesecurity signatures? Are these ready for use on a prod

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Török Edwin
On 04/27/2010 10:40 PM, Kris Deugau wrote: > *snort* ISP end-users running *nix? Well, maybe one or two out of > ~50K... Well python runs on Windows as well, and there is even something like py2exe which embeds a python intepreter with the script. But its probably too much hassle to get even s

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Kris Deugau
Török Edwin wrote: Are you sure it was a Heuristics.Phishing.*, or Phishing.Heuristics.* detection? It doesn't look at the subject line at all. Pretty certain; I don't recall the username so it's a bit hard to check back in the mail logs. What does the "17-" at the end indicate? It indic

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Török Edwin
On 04/27/2010 08:57 PM, Kris Deugau wrote: > Török Edwin wrote: >> On 04/22/2010 05:26 PM, Kris Deugau wrote: >>> I've had reports of several FPs due to PhishingScanURLs recently - is >>> there any way it can be made less aggressive rather than just turning it >>> off outright? >> >> You could remo

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Kris Deugau
Török Edwin wrote: On 04/22/2010 05:26 PM, Kris Deugau wrote: I've had reports of several FPs due to PhishingScanURLs recently - is there any way it can be made less aggressive rather than just turning it off outright? You could remove domains from daily.pdb I don't seem to have this as a se

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Jim Preston
Nathan Gibbs wrote: Unfortunately. If an old Clamav was installed on a system that did a vital task, but could basically be a "set it and forget it" system, the setup got shafted by the ClamAV team. No other way to call it. To me this is an oxymoron "vital task" + "set and forget" Set and f

Re: [Clamav-users] No debian woody support anymore?

2010-04-27 Thread Nathan Gibbs
* Simon Hobson wrote: > wrote: >> After the last signature update, clam av stopped working on our woody >> installation. >> >> >> >> Is there no more support for this Debian Release? > > No, according to certain people on this list, you are a cretin, and > incompetent to even handle the off switc

Re: [Clamav-users] PhishingScanURLs FPing too often

2010-04-27 Thread Török Edwin
On 04/22/2010 05:26 PM, Kris Deugau wrote: > I've had reports of several FPs due to PhishingScanURLs recently - is > there any way it can be made less aggressive rather than just turning it > off outright? You could remove domains from daily.pdb/whitelist all mails that contain certain domains. >

Re: [Clamav-users] Clamd was NOT notified

2010-04-27 Thread Jerry
On Tue, 27 Apr 2010 02:34:14 GMT Mark articulated: > On 4/26/10 6:01 PM, Mark wrote: > > > > I just upgraded to clamav 0.96.1 on FreeBSD 7. Everyhing seemed > > > to be running fine, except that I suddenly got this message in my > > > freshclam log: > > > > > WARNING: Clamd was NOT notified: Can