Re: [clamav-users] File that bombs my clamd. How to submit for review?

--- Begin Message --- On 5/15/2018 11:41 PM, Al Varnell via clamav-users wrote: > https://bugzilla.clamav.net Thanks.  I was afraid that would be public but I marked it as a security component. --- End Message --- ___

Re: [clamav-users] File that bombs my clamd. How to submit for review?

--- Begin Message --- https://bugzilla.clamav.net -Al- ClamXAV User On Tue, May 15, 2018 at 08:28 PM, Kevin A. McGrail via clamav-users wrote: > > > I have a file that bombs my clamd pretty instantly. I've attempted to > narrow things down with debug, etc. I

[clamav-users] File that bombs my clamd. How to submit for review?

--- Begin Message --- Hi, I have a file that bombs my clamd pretty instantly.  I've attempted to narrow things down with debug, etc.  I don't believe it's a virus but if it crashes clamd, it could be used for DOS purposes.  How do I safely get this to a good actor to review? regards, KAM --- End

Re: [clamav-users] exclude-dir with clamdscan

--- Begin Message --- Hi there, On Tue, 15 May 2018, Stefan Schumacher wrote: I would like to use clamdscan to scan an entire server but exclude sys, proc and dev. mail6:~$ >>> cat testfile /etc/perl/ mail6:~$ >>> clamdscan -f testfile /etc/perl: OK --- SCAN SUMMARY ---

[clamav-users] exclude-dir with clamdscan

--- Begin Message --- Hello, I would like to use clamdscan to scan an entire server but exclude sys, proc and dev. If I start it with "clamdscan /" I get a lot of error messages for sys and I do not want this to clutter my logs. I have searched in the clamav-user-archive and have found this

Re: [clamav-users] clamsubmit error code 500

--- Begin Message --- One of the backend systems that handles the submissions was on the fritz. I kicked it. Should be okay now. -- Joel Esler Sr. Manager Open Source, Design, Web, and Education Talos Group http://www.talosintelligence.com On May 15, 2018, at 10:16 AM, Arnaud Jacques via

Re: [clamav-users] Attachments

--- Begin Message --- On 15.05.18 13:43, Mark Rousell via clamav-users wrote: From: Mark Rousell via clamav-users To: clamav-users@lists.clamav.net Cc: Mark Rousell Subject: Re: [clamav-users] Attachments Date: Tue, 15 May 2018

Re: [clamav-users] clamsubmit error code 500

--- Begin Message --- Hello Micah, Is there anything unusual about the file you were submitting when this occured? I don't think so. It happends on different files submitted. I guess you will find the cause viewing logs of your webserver. -- Cordialement / Best regards, Arnaud Jacques

Re: [clamav-users] clamsubmit error code 500

--- Begin Message --- Hi Arnaud, Sorry to hear you're having trouble with clamsubmit again. The 204 No Content response you saw is ok/expected. I'm not sure why you're getting a 500 response from /reports/submit. I can ask the web team what could cause it. On my end I'm not having any

Re: [clamav-users] Attachments

--- Begin Message --- On Tue, May 15, 2018 12:57 pm, Todd Aiken via clamav-users wrote: > ___ > clamav-users mailing list clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > Help us build a comprehensive

Re: [clamav-users] Attachments

--- Begin Message --- On 15/05/2018 12:57, Todd Aiken via clamav-users wrote: > Just wondering why for the past few days is every message > that is sent to the list appearing as an attachment underneath a second message? Is it not-entirely-working-properly DMARC mitigation? -- Mark Rousell

[clamav-users] Attachments

--- Begin Message --- Just wondering why for the past few days is every message that is sent to the list appearing as an attachment underneath a second message? Todd A. Aiken Systems Analyst & Administrator ITS Department BISHOP'S UNIVERSITY 2600 College Street Sherbrooke, Quebec CANADA J1M

[clamav-users] clamsubmit error code 500

--- Begin Message --- Hello, Using clamsubmit I got this error message back : Unexpected POST submit response code: 500 By sniffing frames I see : HTTP: HTTP/1.1 204 No Content HTTP: POST /reports/submit HTTP/1.1 HTTP: HTTP/1.1 500 Internal Server Error Any hint ? -- Cordialement / Best