Re: [clamav-users] ClamAV on Windows

2024-08-21 Thread Eigeldinger Simon via clamav-users
Hi Brendan, Actually the latter. I already looked a bit at the manpage and the help text of clamscan. And maybe some other recommendations you might find that Windows users might find useful. Greetings, Simon Von: Brendan Bell (brebell) Gesendet: Mittwoch, 21. August 2024 16:09 An: clamav

[clamav-users] ClamAV on Windows

2024-08-20 Thread Eigeldinger Simon via clamav-users
there. Also bigger zip files. I have read that ClamAV stops scanning after a defined file size. Are viruses generally at the start of a file or some traces of it? Whats the recommended file size and file amount to set? Any other options i might set? Greetings and thanks, Simon

Re: [clamav-users] clamav-users Digest, Vol 201, Issue 22

2021-08-26 Thread Eigeldinger Simon
Mit freundlichen Grüßen Simon Eigeldinger Informatik Nebengebäude 1, OG1 Stadt Hohenems Kaiser-Franz-Josef-Straße 4 6845 Hohenems T: +43 5576 7101-1143 | E: simon.eigeldin...@hohenems.at | www.hohenems.at Diese Nachricht und allfällige angehängte Dokumente sind vertraulich und nur für den

Re: [clamav-users] Warning: No matches found for: clamav on CentOS Linux release 7.9.2009 (Core)

2021-07-19 Thread Simon Wilson via clamav-users
virus scanner clamav-lib.x86_64 : Dynamic libraries for the Clam Antivirus scanner clamav-milter.x86_64 : Milter module for the Clam Antivirus scanner clamav-update.x86_64 : Auto-updater for the Clam Antivirus scanner data-files Name and summary matches only, use "search all" for everyth

Re: [clamav-users] configure: error: Your libcurl is misconfigured. libcurl (e.g. libcurl-devel) is required in order to build freshclam and clamsubmit

2021-07-15 Thread Simon Wilson via clamav-users
It would be FAR easier to install Clamav 103.3 from EPEL repository for CentOS / RH than build from source, especially when releases get published through EPEL very quickly. Simon -- Simon Wilson M: 0400 12 11 16 ___ clamav-users mailing list cla

Re: [clamav-users] Restriction of downloads

2021-03-12 Thread Simon Wilson via clamav-users
ers) to get updates with more for corporate / govt users. :-D -- Simon Wilson M: 0400 12 11 16 ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV gu

Re: [clamav-users] Freshclam failing to get update

2021-02-11 Thread Simon Banton via clamav-users
Ah, OK, thanks. S. On Thu, 11 Feb 2021 at 13:49, G.W. Haywood via clamav-users < clamav-users@lists.clamav.net> wrote: > Hi there, > 41;344;0c > > On Thu, 11 Feb 2021, Simon Banton via clamav-users wrote: > > > Is there anything about ClamAV v0.97.3 that would mean it

[clamav-users] Freshclam failing to get update

2021-02-11 Thread Simon Banton via clamav-users
16 ptah freshclam[24470]: Trying again in 5 secs... This started to happen yesterday after years of trouble free operation. Nothing on my box's configuration has changed between freshclam working and it not working. Any pointers as to a possible cause would be most welcome. Cheers Simon ___

Re: [clamav-users] Services Difference & Memory Utilization

2020-09-13 Thread Simon Wilson via clamav-users
CentOS 8 needs 2GB just to install. In my experience you will struggle to get *anything* useful to run with 2GB. Simon Wilson From: bobby via clamav-users Sent: Monday, 14 September 2020 10:34 am To: clamav-users@lists.clamav.net Cc: bobby Subject: [clamav-users

Re: [clamav-users] Scanning files with ClamAV on Windows

2020-04-23 Thread Simon Eigeldinger
Hi, Thanks for writing back. Will have a look at the documentation and at the archive. Greetings, Simon Am 22.04.2020 um 01:48 schrieb G.W. Haywood via clamav-users: Hi there, On Wed, 22 Apr 2020, Simon Eigeldinger wrote: I plan to set up some ClamAV instances on Windows Servers to scan

[clamav-users] Scanning files with ClamAV on Windows

2020-04-21 Thread Simon Eigeldinger
iated. Simon ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV reputation rating

2019-06-27 Thread Simon Hobson via clamav-users
Epicon Elysium wrote: > There's no email traffic in/out. It's just application traffic through > WAF/ModSecurity. The files itself on the OS level are pretty static. So the > ClamAV is used to scan the filesystem. So basically, I think it's just > reputation rating on the files if any. I'm st

Re: [clamav-users] ClamAV reputation rating

2019-06-24 Thread Simon Hobson via clamav-users
Epicon Elysium via clamav-users wrote: > Does ClamAV support in enabling the reputation rating? Seems I couldn't find > any info when searching for it. There's nothing mentioned in the config file > as well. AIUI no, it doesn't have anything for that. However, a very common setup is use AMaViS

Re: [clamav-users] Possible problem with daily.cld 25460 / CVE-2019-0903

2019-05-26 Thread Simon Mousey Smith via clamav-users
Hi Same here UK clamav with our mailcleaner Every one of our backup pdfs are being marked with this even tho they have been fine for years Prob a false positive Regards Simom Sent from my iPhone > On 25 May 2019, at 21:54, Hans Morten Kind via clamav-users > wrote: > > Seems like evry p

[clamav-users] clamscan, fmap errors and --max-filesize

2019-05-21 Thread Simon Oxwell
exits with code 2, so that's not great either) Thanks, Simon -- Simon Oxwell | Hosting Team Funnelback P: +61 2 6176 3170 | F: +61 2 6230 7313 soxw...@funnelback.com | www.funnelback.com A: Ground Floor, 51 Allara Street, Civic, Canberra 2601

Re: [clamav-users] ClamAV Central Management tools

2018-10-18 Thread Simon Hobson
Robert Schetterer wrote: > Div monitors should be fine to code for such things > like monit, munin, xymon, icinga, nagios , zabbix etc Nagios has a plugin for it (someone's already done the coding), I used to use it at my last job. ___ clamav-users m

Re: [clamav-users] FreshClam - DNS issues since October 31st

2017-11-09 Thread Simon Mousey Smith
w ~]# date Thu Nov 9 10:27:43 GMT 2017 [root@mailgw ~]# Regards Simon > On 9 Nov 2017, at 10:05, Adolf Belka wrote: > > I am still seeing the message. Periodically it stops and when I check that is > when the time from the DNS record has become closer to my computers time

Re: [clamav-users] FreshClam - DNS issues since October 31st

2017-11-08 Thread Simon Mousey Smith
Maybe not every day but every week maybe? Has the issue been resolved yet? Simon > On 8 Nov 2017, at 14:02, Reindl Harald wrote: > > > > Am 08.11.2017 um 14:43 schrieb Jeff: >> Since October 31st, I get the following DNS warnings every time freshclam >> runs: >

Re: [clamav-users] fail updates

2017-11-07 Thread Simon Mousey Smith
valid DNS reply. Falling back to HTTP mode. Regards Simon > On 7 Nov 2017, at 00:41, Paul Kosinski wrote: > > I killed our "mirrors.dat" at 2017-11-06 19:35:35 (EST). It was last > modified at 2017-11-06 18:06:29 (EST). We'll see what happens. > > Paul Kosin

Re: [clamav-users] update mirror trouble?

2017-11-06 Thread Simon Mousey Smith
gards Simon > On 6 Nov 2017, at 06:16, Tsutomu Oyamada wrote: > > Hi, > > It looks like that Updating of CVD in database.clamav.net is not working > (stopping). > Do you have any trouble problem happened? > > We are in Japan, and it set CNAME for database.

Re: [clamav-users] Mirror Sync Outage for ClamAV updates

2017-11-01 Thread Simon Mousey Smith
Would this explain why all morning ive been getting this error ? WARNING: DNS record is older than 3 hours. WARNING: Invalid DNS reply. Falling back to HTTP mode. Regards Simon > On 1 Nov 2017, at 14:43, Joel Esler (jesler) wrote: > > http://blog.clamav.net/2017/11/mirror-sync-o

Re: [clamav-users] Ppt.Exploit.CVE_2017_0199-6336815-1 FP?

2017-10-05 Thread Simon Mousey Smith
Hi, We have a few this morning from a few of our servers too which contain docx files thisisasecretfile.docx: Ppt.Exploit.CVE_2017_0199-6336815-1 FOUND Regards Simon > On 5 Oct 2017, at 09:49, Al Varnell wrote: > > Please don't include signatures that apply to "Any File&

Re: [clamav-users] Freshclam failure - Still ongoing???

2017-08-25 Thread Simon Mousey Smith
use that server anymore strangely enough? and NOW using others instead Maybe contact heanet and ask them if the is an issue with there mirror server Or change ya freshclam.conf to use another dns like db.uk.clamav.net <http://db.uk.clamav.net/> Regards Simon > On 25 Aug 2017, at

Re: [clamav-users] Unable to download database

2017-08-24 Thread Simon Mousey Smith
Managed to get it working again from a user who helped Toss your /usr/lib/clamav/mirrors.dat file to eliminate the Ignoring mirror messages. And then seemed to start working again Simon Sent from my iPhone > On 24 Aug 2017, at 11:49, Gene Heskett wrote: > >> On Thursday 24 Au

Re: [clamav-users] Freshclam failure

2017-08-24 Thread Simon Mousey Smith
BINGO!!! GENIUS!!! FIXED!!! Been banging my head against the wall all morning trying to resolve it Simon > On 24 Aug 2017, at 11:05, Al Varnell wrote: > > Toss your mirrors.dat file to eliminate the Ignoring mirror messages. > > -Al- > > On Aug 24, 2017, at 3:02 A

Re: [clamav-users] Freshclam failure

2017-08-24 Thread Simon Mousey Smith
178.79.177.182 db.uk.clamav.net. 24 IN A 129.67.1.218 ;; Query time: 79 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Aug 24 11:00:42 2017 ;; MSG SIZE rcvd: 144 Any ideas? Simon > On 24 Aug 2017, at 10:49, Bill Maidment wrote: > > Yeah that work

Re: [clamav-users] Freshclam failure

2017-08-24 Thread Simon Wilson
fo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml - End message from Bill Maidment - -- Simon Wilson M: 0400 12 11 16 ___ clamav-users mailing list cla

Re: [clamav-users] Unable to download database

2017-08-24 Thread Simon Mousey Smith
Hi All Still having issue here in UK Liverpool WARNING: getfile: daily.cvd not found on database.clamav.net (IP: 193.1.193.64) Regards Simon Sent from my iPhone > On 24 Aug 2017, at 08:48, maxal wrote: > > hi, > > also some issues here on 193.1.193.64 > > Thu

Re: [clamav-users] Unable to download database

2017-08-23 Thread Simon Mousey Smith
Same here from UK Liverpool datacenter Was able to download a few hours ago but then stopped again Simon Sent from my iPhone > On 23 Aug 2017, at 18:33, Maarten Broekman wrote: > > Similar issues with addresses for db.us.clamav.net. 7 of 16 mirrors aren't > reach

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-28 Thread Simon Hobson
Beeblebrox wrote: >> ... If clamd finds something (it does happen), what's the plan? >> The message is *already* in the user's mail box, and I'd say it should >> *not* be there in your scenario, because the user can pick up the bad >> mail simply by connecting other than through your gateway. >

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-27 Thread Simon Hobson
Dave McMurtrie wrote: > The original poster doesn't mention which IMAP server he's using. As I read it, he's looking at "random users accessing random servers" - eg a user connecting his phone to the guest network and it then accessing Gmail. I really don't think it's possible to do what he wan

Re: [clamav-users] Apparently legitimate Paypal email disguises domain name in links - thus identified as likely phishing

2017-06-02 Thread Simon Hobson
Andy Schmidt wrote: > If Paypal expects their emails to be delivered, then the CONTENT of their > emails must not use phishing techniques. In my experience, most PayPal emails are a catalogue of the things people are told not to do ! Things like "click here to check your account" come immediat

Re: [clamav-users] Central management server?

2016-12-14 Thread Simon Hobson
robert k Wild wrote: > Can I install a clamav server and point all my clamav end users ie Mac > Linux windows to the server to get update definitions Yes. Setup your own mirror and point everything at it. > and can I manage my > clients from the server ie see if there online run scans and lock

Re: [clamav-users] TTL of DNS recode

2016-11-28 Thread Simon Hobson
Tsutomu Oyamada wrote: > Our environment is a local mirror. > However, it does not matter. > > I wanted to know if there is the case that the DNS TXT of ClamAV have > not been updated for few days. > Could it be possibe? > Is this issue caused by the problem on our enviroment of querying DNS? >

Re: [clamav-users] TTL of DNS recode

2016-11-25 Thread Simon Hobson
Tsutomu Oyamada wrote: > ClamAV update process started at Sat Nov 5 05:01:15 2016 > Using IPv6 aware code > Querying current.cvd.clamav.net > TTL: 1797 > Software version from DNS: 0.99.2 > main.cvd version from DNS: 57 > main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder:

Re: [clamav-users] TTL of DNS recode

2016-11-24 Thread Simon Hobson
I realise English is not your main language and this is probably very difficult for you to explain in what is to you a foreign language, but I don't think we are able to figure out just what is not working ... Tsutomu Oyamada wrote: > In the present situation fail. What is failing ? Does you

Re: [clamav-users] TTL of DNS recode

2016-11-24 Thread Simon Hobson
Al Varnell wrote: > So I think I have the answer for this one. From my research it would seem > that TTL values are set by the DNS server you are accessing, not by the > ClamAV and is the same for all records on that server. You would have to > check with the DNS ISP to find out if it has cha

Re: [clamav-users] GPL license question

2016-09-18 Thread Simon Hobson
Borough Rumford wrote: > I know clamav is released under GPL license, and third-party commercial app > shouldn’t link libclamav. Is the library under the GPL or LGPL - the answer is different for the two licences ? https://www.gnu.org/licenses/gpl-faq.en.html#GPLStaticVsDynamic https://www.gnu

Re: [clamav-users] Threading (Was: How can Clam/Cisco be so irresponsibly reckless and nonchalant to Windows users?)

2016-02-18 Thread Simon Hobson
Mark Allan wrote: > >> For my, I use Mail.app the majority of the time. Apparently if I delete >> lines and inline reply like I do in Thunderbird, Mail.app just tells me to >> eat dust and unthreads the whole thing. Guess I should file a bug with >> Apple. > > That's strange. I use Mail.ap

Re: [clamav-users] mail server and clamav in different machine

2015-06-21 Thread Simon Hobson
M.hafez wrote: > can i install the mail server (win or Linux based ) and the clamav in > different machine, that may allow me to filter more than one mailer server > using the same Clamav machine. In principle yes, though it very much depends on how you are going to pass the email to it. If

Re: [clamav-users] Clamd and Systemd

2015-06-19 Thread Simon Hobson
Scott Kitterman wrote: >> Given that I wouldn't be bothered at all if SystemD was "just" an init >> system, it's all the other crap I want to keep out. Do you really think >> I'm going to allow a SystemD library (who's package description gives >> no clues about it's functions or intentions) onbo

Re: [clamav-users] Clamd and Systemd

2015-06-19 Thread Simon Hobson
Scott Kitterman wrote: >> Is "harmless" supposed to include "not installable" ? > > No. What's not installable? > > Install clamav-daemon (with the lib) and don't worry about it. Given that I wouldn't be bothered at all if SystemD was "just" an init system, it's all the other crap I want to

Re: [clamav-users] Clamd and Systemd

2015-06-18 Thread Simon Hobson
G.W. Haywood wrote: > I would > > http://without-systemd.org/wiki/index.php/How_to_remove_systemd_from_a_Debian_jessie/sid_installation Been there, done that, but what a right PITA it creates - specifically trying to figure what package is triggering a chain of dependencies that's trying to p

[clamav-users] Clamd and Systemd

2015-06-18 Thread Simon Hobson
I've been trying to upgrade a Debian Wheezy system to Jessie without allowing SystemD to sneak in. I've found that the Debian clamav-daemon package (but none of the others) depends on libsystemd0. I just wanted to check whether this is something that's in the upstream package, or something that

Re: [clamav-users] unsubscribe

2015-05-27 Thread Simon Hobson
Cmos35 wrote: > I never asked to be unsubscribed, I asked a question and I unsubscribed by > David Barr No, he didn't unsubscribe you - only you can do that (or someone forging your email address in the sender field) I assume he wanted to unsubscribe from the list, but ignored the email he wo

Re: [clamav-users] ClamAV installation is OUTDATE!

2015-02-25 Thread Simon Hobson
Marcio Fiorette wrote: > Não estou conseguindo atualizar o ClamAV da versão 0.98.5 para 0.98.6 > no Debian 7. Já segui os procedimentos que estão no site > www.clamav.net e mesmo assim não obtive sucesso. Google tells me you're trying to update but it's not working. Did you install ClamAV as a

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-23 Thread Simon Hobson
Daniel Spies wrote: > I don't get how you find it more appropriate to silently reject someone's > e-mail I don't. I don't know where you got that from - perhaps it's from seeing so many examples of bad practice that's become the norm so you assume everyone is that bad ? _

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-22 Thread Simon Hobson
OK, this is getting well off-topic for this list, this will be my final say on the matter - and from some of the other comments I see I'm not alone in considering you part of the problem. Daniel Spies wrote: >> Recipients may not trust the tags, but it *should* stop outbound >> spam/infected

Re: [clamav-users] clamav-milter LocalNet option / outgoing mail (Debian Wheezy)

2015-02-22 Thread Simon Hobson
Daniel Spies wrote: > In my opinion, it doesn't make any sense to scan e-mail leaving the server. > The recipient will never trust these tags anyway. So why scan at all? It's > important to scan incoming mail, be it from a local or an external client. I disagree. Recipients may not trust the t

Re: [clamav-users] clamav-users-bounces DKIM signature verify error

2014-05-29 Thread Simon Hobson
Scott Kitterman wrote: > No, sending bounces to the list is his problem. Sorry, but that's a relatively common techie attitude - ignore the fact that the end user probably has no idea what's going on (else why ask for help about it ?) From the USER perspective, he has a problem with "using thi

Re: [clamav-users] clamav-users-bounces DKIM signature verify error

2014-05-28 Thread Simon Hobson
Scott Kitterman wrote: > ... but isn't this a bit off topic? Yes it is - but the OP asked here as he was having problems with this list. > In this particular case, he's got a local configuration issue nothing really > to > do with clamav, SPF, or DKIM (as a protocol). Yes it's a local config

Re: [clamav-users] clamav-users-bounces DKIM signature verify error

2014-05-28 Thread Simon Hobson
Marcello Lupo wrote: > Have you any idea of the reason for this problem and how to let it go away? Other than "DKIM breaks stuff" > As now I’m loosing some messages from the list for sure. Stop using mailing lists OR stop using DKIM Or you might be able to tune DKIM to exclude the message cont

Re: [clamav-users] clamav stops boot

2014-05-02 Thread Simon Hobson
Alain Zidouemba wrote: > The ClamAV engine won't update itself automatically. You will have to > manually perform that operation. The latest version of ClamAV (version > 0.98.1) can be downloaded here: > http://www.clamav.net/lang/en/download/sources/ However, as the OP is using Debian, is new t

Re: [clamav-users] Problem with Freshclam and local mirror

2014-04-02 Thread Simon Hobson
Shawn Webb wrote: >> I suspect the fault lies in a rather small piece of code that was supposed >> to make the call to recv() a little more robust. If you have the ability >> (or desire) to compile from source, can you please try the attached patch? >> If the patch works, I'll integrate it into o

Re: [clamav-users] Problem with Freshclam and local mirror

2014-04-01 Thread Simon Hobson
Greg Folkert wrote: > I had this problem and have used a brute force solution to remove the > mirrors.dat file every day so it'll ignore previous problems (like the > machine being unavailable or other such issues) I had already considered the same. Since I've got two machines that have dropped

[clamav-users] Problem with Freshclam and local mirror

2014-04-01 Thread Simon Hobson
Because I've several machines using it, I've setup one to act as a local server, with the others pulling their updates from it. It's been generally reliable for years, but since updating to 0.98.1 I'm having repeated problems where the slaves just stop fetching updates. As an example, one of th

Re: [clamav-users] Debian packaging

2014-02-12 Thread Simon Hobson
Greg Folkert wrote: > Debian Stable is that. If you must have 0.98.1, you should also be using > "backports"... at least I used to until I just used Sid for everything. > Backports help extend Stable's longevity and "freshness" a bit... but it > is no guarantee 0.98.1 will be there. Actually it

Re: [clamav-users] Is there any chance of the 97.8 version as shipped by ubuntu 10.04.4 LTS, working?

2014-01-27 Thread Simon Hobson
Gene Heskett wrote: > So, is there any hope of making it work again using what the repo's for > ubuntu 10.04.4 LTS will put back in (version 97.8) using synaptic? Or has > the data format changed so much its hopeless? 97.8 is the current stable version in Debian (98 has just hit unstable) and

Re: [clamav-users] Debian packaging

2013-12-17 Thread Simon Hobson
Greg Folkert wrote: >Simon, >Why not open a Bug, or look to see if there is one. Oh wait: >In Pending Upload bugs for >http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=727027 > >Just gotta look. Rending since Oct 2013 Yes indeed. >And lookit that, some "Simon Hobso

[clamav-users] Debian packaging

2013-12-16 Thread Simon Hobson
Does anyone know what the situation is with Debian packages ? It's been something like 2 months now and 0.98 still doesn't appear to have made it to unstable, let alone testing. I'm assuming this also affects Debian derived distros like Mint and Ubuntu. ___

Re: [clamav-users] Virus names - a rose by any name?

2013-01-13 Thread Simon Hobson
"Pancho" wrote: >Hi - thanks to everyone for the replies. I have seen 2 replies now and it >may well be that I have not been clear enough because both are at cross >purposes. Then it might help if you alaborated on what you meant. >Unfortunately I don't have further time to invest in this topic b

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Simon Hobson
"Pancho" wrote: >While I understand the comment, it makes it risky I believe from a security >perspective to tell users anything more than " file contains virus". > >I say this because if we find a virus and provide the message "file contains >virus with name " then malicious users >can effective

Re: [clamav-users] linux scan of WordPress directories

2012-08-14 Thread Simon Hobson
Vid Luther wrote: I'm wondering if it's possible to run ClamAV on a file system that has a ton of WordPress installs. Yes, use (IIRC) clamscan to scan the directories. I've done that on my servers when there's been any question about a customer site. -- Simo

Re: [clamav-users] Licensing & DLLs

2012-05-14 Thread Simon Hobson
happy to have someone ask them rather than make assumptions and/or get it wrong. I dare say they'd be happier if the whole lot was GPLd, but Rome wasn't built in a day. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels

Re: [clamav-users] Some questions about setting up ClamAV

2012-01-28 Thread Simon Hobson
o complete. If it is not possible to set up clamAV like this, how can we set up a cron job to scan the image folders and domain / server ? You create a cron job, to run at whatever schedule you want, that calls Clamscan with the options you want. -- Simon Hobson

Re: [clamav-users] Some questions about setting up ClamAV

2012-01-25 Thread Simon Hobson
erver, how can we do this? You can't - it's not there to scan before it's been uploaded. You'd need to look at the software being used and get it to scan all new files before it goes on to use them. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by

Re: [clamav-users] How can I have clamd reject items that can't be scanned?

2011-11-09 Thread Simon Hobson
ject them. Nonetheless, it is actually an interesting question - should/does clamav return "not-scanned-due-to-user-restriction" in such cases? I guess that's the key question, and is it possible to set the reported result to "reject" in that case ? -- Simon Hobson

Re: [clamav-users] How can I have clamd reject items that can't be scanned?

2011-11-09 Thread Simon Hobson
n. Is it possible for ClamAV to flag that the message should be rejected if it can't be scanned - seems a reasonable question to me. The OP didn't say "is it possible for ClamAV to reject the message", they rather correctly asked about "flagging it for rejection".

Re: [clamav-users] Value too large for defined data type

2011-10-17 Thread Simon Friedberger
Am 14.10.2011 20:02, schrieb Christoph Moench-Tegeder: Simon, can you recompile the test program with gcc -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE x.c -o xtest and test again? Yes, that works. :) ___ Help us build a comprehensive ClamAV guide

Re: [clamav-users] Value too large for defined data type

2011-10-14 Thread Simon Friedberger
Hey, Edwin! Am 14.10.2011 15:19, schrieb Török Edwin: On 10/14/2011 04:13 PM, Simon Friedberger wrote: Does it print an error? Yes, it does. stat failed: Value too large for defined data type Now what does that mean? :) I think I got it: off_t st_size;/* total size, in

Re: [clamav-users] Value too large for defined data type

2011-10-14 Thread Simon Friedberger
Am 14.10.2011 11:42, schrieb Török Edwin: On 10/14/2011 12:30 PM, Simon Friedberger wrote: Hi, Edwin! On 14.10.2011 11:02, Török Edwin wrote: On 10/14/2011 11:49 AM, Simon Friedberger wrote: It seems that this error can be caused by different problems like a wrong inode number when

Re: [clamav-users] Value too large for defined data type

2011-10-14 Thread Simon Friedberger
Hi, Edwin! On 14.10.2011 11:02, Török Edwin wrote: On 10/14/2011 11:49 AM, Simon Friedberger wrote: It seems that this error can be caused by different problems like a wrong inode number when mounting CIFS or very large files. (Suggested by some websites and old mailing list entries

Re: [clamav-users] Value too large for defined data type

2011-10-14 Thread Simon Friedberger
Hi, Al! On 14.10.2011 11:01, Al Varnell wrote: On 10/14/11 1:49 AM, "Simon Friedberger" wrote: 3. How do I find out what the current maximum file size for scanning is? The man page says the default is 25 MB but it is not set in /etc/clamav/ anywhere and I have scanned files larger

[clamav-users] Value too large for defined data type

2011-10-14 Thread Simon Friedberger
but it is not set in /etc/clamav/ anywhere and I have scanned files larger than that. It would be great if you could clear up some of these points for me. Best, Simon ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clama

Re: [clamav-users] Clamav 0.97.0 to 0.97.1 on squeeze(Debian 6.0)

2011-06-22 Thread Simon Hobson
, try installing the package from Sid, or download the upstream package and install it manually. All of these have their pros and cons - you would have to work which is best for you. I hope this gives you some idea of the process involved, and why there is inevitably a de

Re: [clamav-users] daily database broken again

2011-03-01 Thread Simon Hobson
so sometimes think their attitude to users "lacks sensitivity" at times. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking fillers. Some available as e-books.

Re: [Clamav-users] block attachment with certain file endings (also in archives)

2010-09-28 Thread Simon Hobson
ck the contents. My knowledge isn't enough to say (without searching) where it's configured - but I do recall there is a Perl array with a list of extensions to block. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry

Re: [Clamav-users] Tiered freshclam updates on port443

2010-05-20 Thread Simon Hobson
rits in an intelligent way. Strike a reasonable balance between protection, being a good netizen, and allowing users to do their jobs. Having said all that, in this case, I'm inclined to agree that the requested functionality isn't really a generally useful think to be doing.

Re: [Clamav-users] Some doubts about Clamav upgrade

2010-05-05 Thread Simon Hobson
required. As with any upgrades, it's always worth having a full backup and a means of reverting back if something goes wrong. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal

Re: [Clamav-users] Some doubts about Clamav upgrade

2010-05-04 Thread Simon Hobson
/log/clamav/* > > dpkg -i *.deb > (you can skip docs and testfiles) > > apt-get -f install > if some deps is broken > ah forgot, then dpkg --purge libclamav3 -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hob

Re: [Clamav-users] Resources for integrating with spamassassin+amavisd

2010-05-03 Thread Simon Hobson
ilable at http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.123.1530&rep=rep1&type=pdf rsync is covered from section 3 onwards. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking

Re: [Clamav-users] No debian woody support anymore?

2010-05-03 Thread Simon Hobson
been viable. The rest of your response rather reinforces Marks point. Simon, Mark, Are you ever going to get over it and move on? If you are unhappy with ClamAVs decision take your bat and ball and go to some other ball park. I am over it, and I have moved on. However, as long as people

Re: [Clamav-users] No debian woody support anymore?

2010-05-03 Thread Simon Hobson
ne of them would have been viable. The rest of your response rather reinforces Marks point. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking fillers. Some available as e-

Re: [Clamav-users] Resources for integrating with spamassassin+amavisd

2010-04-28 Thread Simon Hobson
about administering servers :-/ -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking fillers. Some available as e-books. ___ Help us build a

Re: [Clamav-users] Yet more clubbing of deceased equine.

2010-04-25 Thread Simon Hobson
names, with the added bonus of being able to examine logs and work out the scale of the problem - ie how many installations were still accessing the old names vs the new names. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels -

Re: [Clamav-users] Yet more clubbing of deceased equine.

2010-04-24 Thread Simon Hobson
k you for actually putting forward a reasoned argument rather than just "can't be done". Now the external factors have been pointed out, that is "somewhat harder" than it first appears. See, contrary to what some people may be thinking, I can be persuaded by **reasoned** debat

Re: [Clamav-users] Yet more clubbing of deceased equine.

2010-04-24 Thread Simon Hobson
ding the files it looks for. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking fillers. Some available as e-books. ___ Help us build a compr

Re: [Clamav-users] No debian woody support anymore?

2010-04-24 Thread Simon Hobson
but other than that, why would someone turn off updates that are working ? -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking fillers.

Re: [Clamav-users] Yet more clubbing of deceased equine.

2010-04-24 Thread Simon Hobson
fact that they misused the victims actions to cause harm rather than going and directly causing that harm first hand - the motive and end results were identical, only the means differs. Actions designed to cause harm to a computer system, and a criminal offence in the UK. -- Simon Hobson V

Re: [Clamav-users] No debian woody support anymore?

2010-04-24 Thread Simon Hobson
ail shouldn't stop when ClamAV does - even though that is logically inconsistent with the argument that old versions couldn't be allowed to continue without updates. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels -

Re: [Clamav-users] No debian woody support anymore?

2010-04-23 Thread Simon Hobson
ing any more updates" and killing something off. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking fillers. Some available as e-books. _

Re: [Clamav-users] No debian woody support anymore?

2010-04-23 Thread Simon Hobson
ome expectation that it wouldn't be artificially crippled by some outside influence before he got around to upgrading it. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking

Re: [Clamav-users] No debian woody support anymore?

2010-04-23 Thread Simon Hobson
ny) on the ethics of issuing a kill signal to older software. But it's a moot point - the team didn't do that, we are where we are, and a lot of people are unhappy for various reasons. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys

Re: [Clamav-users] Clubbing a deceased equine

2010-04-22 Thread Simon Hobson
bility and consequences if they continue to ignore the warnings that updates have stopped working. If they ignore "things aren't working" errors then I'd agree with you - let them deal with it. I don't agree with the argument that "things are not

Re: [Clamav-users] Clubbing a deceased equine

2010-04-21 Thread Simon Hobson
s to the older software. So my preference would be simply that they "did nothing" to my software. If they want to stop supporting it with updates, that's fine and it still leaves me in control of what I run and when I update it. -- Simon Hobson Visit http://www.magpiesnestpubl

Re: [Clamav-users] No debian woody support anymore?

2010-04-21 Thread Simon Hobson
> rm -f /var/log/clamav/* > > dpkg -i *.deb > (you can skip docs and testfiles) > > apt-get -f install > if some deps is broken > ah forgot, then dpkg --purge libclamav3 -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Glad

Re: [Clamav-users] No debian woody support anymore?

2010-04-21 Thread Simon Hobson
running affected software. If any project I *am* involved with suggested such a thing then I would speak up on that. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories -

Re: [Clamav-users] illegal or not, make a valid argument (was "no subject")

2010-04-21 Thread Simon Hobson
te aside, there have been cases (one was local-ish) where there's been a "mix up" (for want of a better polite expression) and a contractor has knocked the wrong house down. It usually results in serious compensation - and some rather ne

Re: [Clamav-users] (no subject)

2010-04-21 Thread Simon Hobson
ople who have not, and it appears will never, make such an admission. -- Simon Hobson Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed author Gladys Hobson. Novels - poetry - short stories - ideal as Christmas stocking fillers.

Re: [Clamav-users] Clubbing a deceased equine

2010-04-21 Thread Simon Hobson
The **ONLY** defence I can think of is that they assumed an implicit permission by virtue of the user running the update process to fetch signature updates. That's a very tenuous thing to infer when pushing an update that is so different in purpose to what would normally be fetched. --

  1   2   >