[Clamav-users] clamav as HTTP scanner?

2004-12-15 Thread Rainer Zocholl
Hello I read that clamav it detecting phishing mails too (which is, IMOH, a great feature not a fault). Now o wonder if would someone be so kind and give me a hint how to use clamav (togehter with squid?) to scan http-streams? Does this make sense at all? (Meaning: will clamav detect bad achti

Re: [Clamav-users] clamav as HTTP scanner?

2004-12-15 Thread Rainer Zocholl
[EMAIL PROTECTED](aCaB) 15.12.04 16:12 >http://www.clamav.net/3rdparty.html Thanks. In the really meanwhile long long linear list of mail scanners I only see the (non GPLed) "DansGuardian Anti-Virus Patch". Do you mean that? AFAIK is DansGuardian payware except for private use. And there is

[Clamav-users] Funny pathes

2005-03-11 Thread Rainer Zocholl
/tmp/clamav-178c630c01f4f986/usr/share/clamav-testfiles/clam.rar: ClamAV-Test-File FOUND /tmp/clamav-178c630c01f4f986/usr/share/clamav-testfiles/clam.zip: ClamAV-Test-File FOUND /tmp/clamav-235ce24142354262/usr/share/classpath/glibj.zip: Zip.ExceededFilesLimit FOUND /tmp/clamav-fbb1808681386c40

Re: [Clamav-users] Funny pathes

2005-03-12 Thread Rainer Zocholl
[EMAIL PROTECTED](Samuel Benzaquen) 11.03.05 13:57 >> /tmp/clamav-178c630c01f4f986/usr/share/clamav-testfiles/clam.rar: >> ClamAV-Test-File FOUND >> /tmp/clamav-235ce24142354262/usr/share/classpath/glibj.zip: >> Zip.ExceededFilesLimit FOUND I wonder why these too pathes looks absolutely simil

[Clamav-users] Re: Funny pathes

2005-03-12 Thread Rainer Zocholl
[EMAIL PROTECTED](Rainer Zocholl) 11.03.05 17:36 Some more "funny" messages of clamscan (ClamAV 0.83/761/): Command used: SCNU=ftp nice -19 su $SCNU -s/bin/sh -c "clamscan -ir --block-encrypted --block-max --detect-broken --unzip --unrar --unarj --unzoo --lha --jar --deb --

Re: [Clamav-users] Re: Funny pathes

2005-03-12 Thread Rainer Zocholl
[EMAIL PROTECTED](Stephen Gran) 12.03.05 09:44 Once upon a time "Stephen Gran " shaped the electrons to say... >On Sat, Mar 12, 2005 at 02:33:00PM +0100, Rainer Zocholl said: >> [EMAIL PROTECTED](Rainer Zocholl) >> 11.03.05 17:36 But what is clamscan doing at "/&q

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 01:29 Once upon a time "Tomasz Kojm " shaped the electrons to say... >On 13 Mar 2005 01:13:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >>>It's not your '/', it's the filesystem inside the deb

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 17:49 Once upon a time "Tomasz Kojm " shaped the electrons to say... >On 13 Mar 2005 17:43:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >> Which "log file"? >I don't know. >It seems you haven'

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 17:49 >On 13 Mar 2005 17:43:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >> Which "log file"? >I don't know. >It seems you haven't even looked at the docs. -i, --infected

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 19:15 Once upon a time "Tomasz Kojm " shaped the electrons to say... >On 13 Mar 2005 19:03:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >> In the last line i wrote: >>>>I used the command line: >>

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 19:15 >On 13 Mar 2005 19:03:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >> In the last line i wrote: >>>>I used the command line: >>>>"clamscan -ir --block-encrypted --block-max --detect-broken --unzi

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 19:15 >On 13 Mar 2005 19:03:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >> In the last line i wrote: >>>>I used the command line: >>>>"clamscan -ir --block-encrypted --block-max --detect-broken

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 20:05 >On 12 Mar 2005 14:33:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >> But i wonder how clamscan could scan 100GB on a 40GB partition: >> >> # df /home/ftp >> Filesystem 1K-blocks Used Avail

Re: [Clamav-users] Re: Funny pathes

2005-03-13 Thread Rainer Zocholl
[EMAIL PROTECTED](Tomasz Kojm) 13.03.05 20:43 Once upon a time "Tomasz Kojm " shaped the electrons to say... >On 13 Mar 2005 20:40:00 +0100 >Rainer Zocholl <[EMAIL PROTECTED]> wrote: >> But the doc is far from "done" and a simply RTFM is sufficient. &g

Re: [Clamav-users] benchmarks for a LARGE site?

2005-05-06 Thread Rainer Zocholl
[EMAIL PROTECTED](Damian Menscher) 06.05.05 00:05 >My silly university spent $0.5M on a commercial product to perform >spam and virus filtering (they have the "if it costs that much, it >MUST be good" mentality). Hm, i know it as: "If nobody can sent a bill, the product can't be worth anything,

Re: [Clamav-users] sober.p and german adverts?

2005-05-16 Thread Rainer Zocholl
[EMAIL PROTECTED](Bart Silverstrim) 16.05.05 08:51 >Some more info... >I see in our amavis logs on our ClamAV system (postfix pre-filter >FreeBSD for email) this kind of listing... >/usr/local/sbin/amavisd[35705]: (35705-10) Blocked INFECTED >(Worm.Sober.P), <[EMAIL PROTECTED]> -> >>, Hits: -,

Re: [Clamav-users] database number

2005-05-16 Thread Rainer Zocholl
[EMAIL PROTECTED](Bart Silverstrim) 16.05.05 08:27 >What is the current database version from freshclam for people out >there? It's always shown in the bottom line of http://www.clamav.net/ Latest database release is: main.cvd 31 daily.cvd 879 Latest ClamAV stable release is: 0.85 >I've b

Re: [Clamav-users] database number

2005-05-16 Thread Rainer Zocholl
[EMAIL PROTECTED](Bart Silverstrim) 16.05.05 11:10 Once upon a time "Bart Silverstrim " shaped the electrons to say... >On May 16, 2005, at 10:51 AM, Rainer Zocholl wrote: >> [EMAIL PROTECTED](Bart Silverstrim) 16.05.05 08:27 >> >> >>> What is the cur

Re: [Clamav-users] sober.p and german adverts?

2005-05-16 Thread Rainer Zocholl
[EMAIL PROTECTED](Bart Silverstrim) 16.05.05 11:05 >I did enter it in when I first discovered it, but there were no hits. Ok, next time mention it ;-) >I thought perhaps it was too new at the time, and then turned to the >lists to corroborate what I was seeing. >> Many of them are pointing t

Re: [Clamav-users] sober.p and german adverts?

2005-05-16 Thread Rainer Zocholl
[EMAIL PROTECTED](Brian Read) 16.05.05 16:08 Once upon a time "Brian Read " shaped the electrons to say... >>Block all mails from dynamic IP. >>They are 99,99% spam. >> >> >No they aren't that "rule" causes quite a few of my customers a >headache, Thats the missing 0.01% i know. >as the (lin

Re: [Clamav-users] sober.p and german adverts?

2005-05-16 Thread Rainer Zocholl
[EMAIL PROTECTED](Todd Lyons) 16.05.05 10:14 >Brian Read wanted us to know: >>>Block all mails from dynamic IP. >>>They are 99,99% spam. >Agreed. >>No they aren't that "rule" causes quite a few of my customers a >>headache, as the (linux) mailserver I often install sends the email >>direct, ir

Re: [Clamav-users] Clamd Problem.

2005-12-17 Thread Rainer Zocholl
[EMAIL PROTECTED](Rob MacGregor) 17.12.05 09:48 >On 17/12/05, Shahzad Abid <[EMAIL PROTECTED]> wrote: >> >> Hi All >> >> I am running clamd integrated with qmail on FC3, problem is that >> when i start clamd manually it starts working and a continues debug >> log is generated on the shell Konsol