Re: [Clamav-users] Arrogance toward well-meaning participants

2005-06-08 Thread Timo Schoeler
> > > Indeed. The GPL is the very essence of capitalism, in my opinion. > > John hm, i don't understand this. the GPL/LGPL construction is even more 'communistic' than the BSD license -- hey, that makes it very likeable (both [L]GPL and BSD) ;) cheerio,

Re: [Clamav-users] Arrogance toward well-meaning participants

2005-06-06 Thread Timo Schoeler
thus Tomasz Kojm spake: > On Mon, 06 Jun 2005 18:36:47 +0200 > Timo Schoeler <[EMAIL PROTECTED]> wrote: > > >>hm, but that's up to them. nobody here is responsible for things >>people do (on the internet) reading this list. > > > until they an

Re: [Clamav-users] Arrogance toward well-meaning participants

2005-06-06 Thread Timo Schoeler
t; > > We don't need a help from people who distribute malware on their www > sites (and even fail to properly classify samples). hm, but that's up to them. nobody here is responsible for things people do (on the internet) reading this list. this would be different if they bro

Re: [Clamav-users] Arrogance toward well-meaning participants (was: undetected malwares)

2005-06-06 Thread Timo Schoeler
R > to slow or non existant help. > > You guys rock! yip. (but a slightly more kindly manner on this mailing list wouldn't harm. the same is up to the postfix mailing list, e.g. ;) > > = > Kevin W. Gagel > Network Administrator > Information Technology Services >

Re: [Clamav-users] ClamAV HW acceleration

2005-06-05 Thread Timo Schoeler
with each four AV accels is much better than having hundrets of mediocre performing GNU/L*nux (or any other) boxens standing around which demand lots of space, generate a lot of heat and administration demands, etc. as always, YMMV. a small ISP may want to build a dedicated ClamAV machine

Re: [Clamav-users] ClamAV HW acceleration

2005-06-05 Thread Timo Schoeler
sultant Sécurité >> >>Téléphone / Fax : +33-(0)3.44.39.76.46 >>Portable : +33-(0)6.24.40.95.03 >>E-mail : [EMAIL PROTECTED] >> >>Securiteinfo.com >>La Sécurité Informatique - La Sécurité des >>Informations. >>266, rue de Villers >>60123 Bonne

Re: [Clamav-users] ClamAV HW acceleration

2005-06-05 Thread Timo Schoeler
worth it. Not to mention > the time to market. If you use off the shelf PC, you > automatically gets 2X performance every 18 to 24 > months. So why bother ? i) an AV accelerator should be far superior (if designed well) -- you can cast several nice things into this ASIC (or another form

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-23 Thread Timo Schoeler
rom time to time against an updated (!) pkgsrc tree, i.e. first run cvs, sup or the way you like to update pkgsrc, and then run pkg_chk -i this will list available updates to packages installed. (a bit OT, but...) cheers, -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macf

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-23 Thread Timo Schoeler
uld be real soon though. cheers, -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macfinity -- finest IT services | http://macfinity.net Key fingerprint = F844 51BE C22C F6BD 1196 90B2 EF68 C851 6E12 2D8A There are 10 types of people in the world. Those who under

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-23 Thread Timo Schoeler
too? My guess is that /something/ changed in the > daily from 0.84 to 0.85, or it was a bug which may have been addressed. > Your thoughts? > > -Eric hm, i) building and installing clamav the 'normal' way does work on NetBSD (of course ;), ii) please update your pkgsrc

Re: [Clamav-users] IRIX 6.5 Install problems

2005-05-20 Thread Timo Schoeler
mean by binutils? that's no dumb question -- have a look at http://freeware.sgi.com/Installable/make-3.80.html7 cheers, -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macfinity -- finest IT services | http://macfinity.net Key fingerprint = F844 51BE C22C F6BD 1196 90B2 EF

Re: [Clamav-users] IRIX 6.5 Install problems

2005-05-20 Thread Timo Schoeler
this) or try sth. like NetBSD's pkgsrc (www.pkgsrc.org), which is very convenient and up to date :) a minor issue on this is that the latter one still runs better on MIPSpro than gcc. > > I suggest you direct IRIX-specific questions to comp.sys.sgi.admin. > There are plenty of

Re: [Clamav-users] IRIX 6.5 Install problems

2005-05-20 Thread Timo Schoeler
it in you PATH). gcc -V should get you something after that. and then you'll be ready to build software with gcc. cheers, -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macfinity -- finest IT services | http://macfinity.net Key fingerprint = F844 51BE C22C F6BD 1196 9

Re: [Clamav-users] IRIX 6.5 Install problems

2005-05-20 Thread Timo Schoeler
;t have any compiler (on sgi e.g. gcc, MIPSpro) on your machine, then you're lost. so a compiler is mandatory if not installing a binary package (called tardist on IRIX), thus a required component. that's not even a metaphysic issue :) cheers, -- Timo Schoeler | http://macfinity.net/~tis

Re: [Clamav-users] IRIX 6.5 Install problems

2005-05-20 Thread Timo Schoeler
t;gcc" and "cc" and finds neither. Does anyone have any ideas? > > Scott > > > ___ > http://lurker.clamav.net/list/clamav-users.html > check /etc/compiler? -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL

Re: [Clamav-users] benchmarks for a LARGE site?

2005-05-06 Thread Timo Schoeler
d more spam gets through (greylisting). however, i think that greylisting is more focusing on fighting spam as viruses have 'more time' (because they have more resources on the zombie they reside and less targets). (...) >> >> >>Rainer > > > Kurt -- Timo Schoe

Re: [Clamav-users] benchmarks for a LARGE site?

2005-05-06 Thread Timo Schoeler
as in hardware (some > high-end Sun boxes, I think). And it included spam filtering. But if I > can get them to return it and switch to clamav/spamassassin, I'll do my > best to get a $100k check to each team. > > Damian Menscher keep the Suns -- there's nothing camparab

Re: [Clamav-users] [OT] AIX

2005-05-06 Thread Timo Schoeler
thus Matt Fretwell spake: > Timo Schoeler wrote: > > >>> Slight addendum. The unit is a Motorola RiscPC. Forgot that piece of >>>somewhat required info :) > > > >>you probably mean PowerStack, which is a PReP model [1]. > > > I beli

Re: [Clamav-users] [OT] AIX

2005-05-06 Thread Timo Schoeler
> > Cheers, > > Matt hi, you probably mean PowerStack, which is a PReP model [1]. i do have such a machine here, but i have no AIX that fits -- i only have AIX for G5, unfortunately. an option would be a cheap RS/6000 machine? mail me if someone wants one, i can get those. [1] -

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
s. The problem is not > webmail - the problem is any content that is not scanned that user's can > browse or download. question of definition and scale of drawing the environment: http://lurker.clamav.net/message/20050505.154118.95a76774.en.html it should be off list, really

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
icy goes a long ways. > > Generally, before any of our users are silly enough to click on an web > page with a blended attack, the anti-virus companies have found it. And > we do have other protections in place. cheers, -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED]

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
someone else. > Period. Ingress is ingress, whichever path it takes. > > > Matt yip, that's what it all boils down to. either scan every packet that makes it through your router (from layer 2 to layer 7) or restrict access to several (most?) services. including webmail. cheers, --

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
und mail. It really isn't all that difficult. > > dp your webmail may be configured to use your smtp servers. but i don't think that company X is able to configure hotmail to use company X's mailservers so that company X is sure that its employees use this safe webmail... ;) -

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Daniel J McDonald spake: > On Thu, 2005-05-05 at 14:12 +0200, Timo Schoeler wrote: > >>thus Daniel J McDonald spake: >> >> >>>On Wed, 2005-05-04 at 16:24 +0100, Nigel Horne wrote: >>> >>> >>>>On Wednesday 04 May 2005 16:16,

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
gt; method. partly agreed. if they want to be really secure, they should turn off their routers and (email) servers and pull every plug out of any wallet... > > > Matt cheers, -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macfinity -- finest IT services | http://ma

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
ld' (viruses reading this crap, frightening, and heading away of their' companies email servers) and reality (nobody cares, just laughs). :D > > Cheers, > > Phil > > > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK cheers,

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
using > web-mail.) nonsense. there are application level proxies who do this. furthermore, squid can do this with a few grips. > > Any company paranoid to force a disclaimer on every mail ought to > similarly block webmail, if they have any intelligence. -- Timo Schoeler | http://macfin

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Timo Schoeler
n you expect > anyone to do that? sometimes i think lawyers must be screaming of pain (caused by their stupidity/silliness)... :D cheers! -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macfinity -- finest IT services | http://macfinity.net Key fingerprint = F844 51BE C22C

Re: [Clamav-users] Maybe a virus

2005-05-04 Thread Timo Schoeler
candid: {8} clamscan -v . Scanning ./account_info-text.zip ./account_info-text.zip: Worm.Sober.P FOUND --- SCAN SUMMARY --- Known viruses: 34196 Scanned directories: 1 Scanned files: 1 Infected files: 1 Data scanned: 0.05 MB I/O buffer size: 131072 bytes Time: 3.962 sec (0 m 3 s) can

Re: [Clamav-users] clamd segfaulting as of about thursday

2005-05-03 Thread Timo Schoeler
y lies somewhere in between. although it may be very important (esp. for clamav) to be up-to-date, no admin would ever introduce new software (even a new minor version) into a production environment without thorough testing before doing so. and guess what? even a not-so-thorough testbed

Re: [Clamav-users] Updating via freshclam without clamd?

2005-05-03 Thread Timo Schoeler
ker.clamav.net/list/clamav-users.html hi, commenting out 'NotifyClamd /var/run/clamd.pid' should be sufficient. HTH, -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macfinity -- finest IT services | http://macfinity.net Key fingerprint = F844 51BE C22C F6BD 1196 90B