Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-07 Thread franckm
gene heskett-4 wrote: On Thursday 06 December 2012 13:59:05 franckm did opine: TR Shaw wrote: Linux, bsd unix and MacOSX all support directory/folder changed actions. Tom On Dec 6, 2012, at 1:26 PM, Jari Fredriksson wrote: ___

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-07 Thread franckm
Dennis Peterson wrote: On 12/6/12 10:30 AM, TR Shaw wrote: Linux, bsd unix and MacOSX all support directory/folder changed actions. Tom On Dec 6, 2012, at 1:26 PM, Jari Fredriksson wrote: 06.12.2012 19:44, franckm kirjoitti: Is it possible to have clamd (clamav deamon) watch a

[clamav-users] Block files type inside attached files

2012-12-07 Thread Ronaldo Luiz de Carvalho
Hiall, I'm new on the use of ClamAV. Sorry for the initial question, I have a CentOS environment. How could I block some files type that are inside a zip or rar files attached into an e-mail received? Thanks for any help Ronaldo Luiz

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-07 Thread Gene Heskett
On Friday 07 December 2012 10:11:32 franckm did opine: gene heskett-4 wrote: On Thursday 06 December 2012 13:59:05 franckm did opine: TR Shaw wrote: Linux, bsd unix and MacOSX all support directory/folder changed actions. Tom On Dec 6, 2012, at 1:26 PM, Jari Fredriksson

Re: [clamav-users] Block files type inside attached files

2012-12-07 Thread Steve Basford
How could I block some files type that are inside a zip or rar files attached into an e-mail received? Here's an example: create a blockext.zmd: Sanesecurity.Blocked.Zip.xxx.exe:0:\.(doc|xls|wpd|txt|jpg|jpeg|htm|html|pdf|pif|scr).exe$:*:*:*:*:*:* (watch the wrap after the 0:\. bit) This

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-07 Thread Benny Pedersen
Jari Fredriksson skrev den 06-12-2012 19:26: 06.12.2012 19:44, franckm kirjoitti: Is it possible to have clamd (clamav deamon) watch a specific folder (and only that one) and automatically scan the files as they are dropped into it? I'm afraid it is not possible with clamd alone. You need a

Re: [clamav-users] Block files type inside attached files

2012-12-07 Thread Benny Pedersen
Ronaldo Luiz de Carvalho skrev den 07-12-2012 15:19: How could I block some files type that are inside a zip or rar files attached into an e-mail received? is this question more how to create signatures ? the fast answer is: unpack the rar/zip sigtool --md5 file-inside signature.hdb

[clamav-users] RES: Block files type inside attached files

2012-12-07 Thread Ronaldo Luiz de Carvalho
Sorry, I don't explain very well what I'm trying to do I have a CentOS server running ClamAV. When the server receive e-mails with attached files, some files attached has inside files with extension .cmd, .bat, .cpl and others. My doubt is how could I set ClamAV to reject or delete this attached

Re: [clamav-users] RES: Block files type inside attached files

2012-12-07 Thread Chuck Swiger
Hi-- On Dec 7, 2012, at 12:01 PM, Ronaldo Luiz de Carvalho wrote: I have a CentOS server running ClamAV. When the server receive e-mails with attached files, some files attached has inside files with extension .cmd, .bat, .cpl and others. My doubt is how could I set ClamAV to reject or

Re: [clamav-users] RES: Block files type inside attached files

2012-12-07 Thread Bowie Bailey
On 12/7/2012 3:01 PM, Ronaldo Luiz de Carvalho wrote: Sorry, I don't explain very well what I'm trying to do I have a CentOS server running ClamAV. When the server receive e-mails with attached files, some files attached has inside files with extension .cmd, .bat, .cpl and others. My doubt is

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-07 Thread Dennis Peterson
On 12/7/12 1:50 AM, franckm wrote: Dennis Peterson wrote: That is a functionality of the desktop, no? There are command line tools as well. Inode cron will do this. If you're not in a hurry and understand the risks of non-atomic file transfers you can do this with cron. Here's a link to

Re: [clamav-users] RPM vendor question

2012-12-07 Thread Jim Preston
On 12/06/2012 12:02 PM, Dennis Peterson wrote: Barely on topic but I have a question about RPM's. I'm rolling out an enterprise ClamAV solution for PCI compliance and need to use a reliably sourced RPM distribution from a third party. I've always done this myself but as a contractor that would

Re: [clamav-users] RPM vendor question

2012-12-07 Thread Dennis Peterson
On 12/7/12 11:37 PM, Jim Preston wrote: I too have used Dag Weir's packages and found them to be reliable. Jim Thank you Jim and everyone that has responded. I have a solution now. dp ___ Help us build a comprehensive ClamAV guide: visit

Re: [clamav-users] [Clamav-users] clamav no timestamp in the logs

2012-12-07 Thread Jim Preston
On 12/06/2012 12:12 PM, Gene Heskett wrote: On Thursday 06 December 2012 14:09:16 Dennis Peterson did opine: On 12/6/12 10:44 AM, Gene Heskett wrote: Speaking of clamd.conf, I wonder if some of you might be editing the wrong clamd.conf file? I am not sure how it got to be, but according the