...

...

James Knott <james.knott@rogers.com> 6/30/2008 3:10 PM >>> Ken Schneider wrote: Fred A. Miller pecked at the keyboard and wrote: Where does one get a free key for antivir that ships with 11.0? I've looked for it "all over" and can't find it.

Thanks,

Fred

Took all of two minutes to find.

http://www.free-av.de/en/index.html

I wonder how that compares with ClamAV, which had been included with SUSE 10.3? I hav e been running it on my windows machine at home for 2 months now an have not had a problems. I went to this after the avg 8.0 upgraded. I can recommend it for home use for now. jack -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hans Witvliet wrote:

On Mon, 2008-06-30 at 16:10 -0400, James Knott wrote:

...

Ken Schneider wrote:

...

Fred A. Miller pecked at the keyboard and wrote:

...

Where does one get a free key for antivir that ships with 11.0? I've looked for it "all over" and can't find it.

Thanks,

Fred

Took all of two minutes to find.

http://www.free-av.de/en/index.html

I wonder how that compares with ClamAV, which had been included with SUSE 10.3?

Well, i can give you some numbers, as i have a nice collection of viruses..

Latest version of clamAV just manages to recognise about 60% and leaves 40% unrecognized

Antivir gets 95%.

Looks nice... But when fed with over 60,000 different viruses, those remaining 5% is still 3000 harmfull files. And even _one_ might be enough to get a M$-machine corrupted / compromised.

One needs at least two or three filters to detect all (or better no highly sussteptible O.S. to be protected...)

hw

These results are appalling. They basically suggests that clamAV is effectively useless and Antivir is worse than Norton (which is really going some). The significant number of mail related viruses will probably be blocked by any spam filtering (which in itself is not intended for the purpose) but this does not reduce the risks here. The much hard work done by many to get these thing to work well is somewhat undermined if they are not fit for purpose as this is suggesting. Anything under %99.9 in an AV filter is basically unacceptable Multiple AV filters is not a solution to this. Out of interest and to balance the information have any of the Linux based anti virus filters been scrutinised by the Virus Bulletin (and if so does anyone have the results). VB costs an arm and leg to subscribe to, and since I left the University I worked for I have not had access to the full reports. If VB has arrived at similar conclusion what this therefore suggests is that it is probably best to invest in one of the better client based solutions for Windows boxes and not waste time on these efforts on Linux. Or alternatively spend money on a commercial licence on something such Eset, F-Prot (which I know do Linux based products) or Sophos or Kaspersky (which I do not know about) which all have very solid reputations. I am mainly working within a Linux environment at the moment and have felt that installing an AV solution was not of much value. However, if I have to work more with Windows at future date this would have to be reconsidered and on the basis of this information would not even consider either of these solutions. - -- ============================================================================== I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone. Bjarne Stroustrup ============================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFIaeHSasN0sSnLmgIRAkluAKCZQh+YwAnjO0jxykzRoL5iSFl/5QCg39wc XcpN2L7R8xWrPJtjUhSRk0k= =Esdn -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Carlos E. R. wrote:

The Tuesday 2008-07-01 at 08:50 +0100, G T Smith wrote:

...

<snip>

Simply kill all mail containing any type of windows executables and you are safe: no need for an AV. The only problem is if you do need to email code.

Amavis has a filter for this.

The doubt then would be macro type virus.

Unfortunately, things that can execute stuff include office documents and spreadsheets which ends pretty much like one would need to quarantine everything produced by a M$ product (Which is not a bad idea.. just impracticable :-) ). If it was not for that abortion of a mail client called Outlook this would probably be adequate, but as the mail content itself can carry a malicious payload and the Outlook/IE combination is still an accident waiting to happen it is only partial cover :-(

-- Cheers, Carlos E. R.

- -- ============================================================================== I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone. Bjarne Stroustrup ============================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFIah47asN0sSnLmgIRAkgBAKDXWuFR+dIM5pzKHWbeeg6H45IGMACfWEsI 8NcTAnheV+KyALZYx9ZM8DU= =EF+r -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Monday 2008-06-30 at 18:36 -0400, Fred A. Miller wrote:

...

http://www.free-av.de/en/index.html

No, that's where you can download the software......I already have it...want a key!

With 10.3 the key is included in the rpm, at "/usr/lib/AntiVir/hbedv.key". But I have another file named "personaledition_classic.key" that now I don't remember where I got it from (and it is the key being used). The normal procedure time ago was to register, and then you got the key by email. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iD8DBQFIaWj5tTMYHG2NR9URApcmAJ9v4guNIvgWreN98omGJrJ6l7IatQCfZ3b3 yTdO4w37vfO7Znv9zV0+G3s= =Dmmx -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

David C. Rankin wrote:

Ken Schneider wrote:

...

Fred A. Miller pecked at the keyboard and wrote:

...

Where does one get a free key for antivir that ships with 11.0? I've looked for it "all over" and can't find it.

Thanks,

Fred

Took all of two minutes to find.

http://www.free-av.de/en/index.html

Thanks Ken,

I had never heard of this antivir before, but it compiles and installs just fine and seems to work great. Something new for today.

I seem not to be able to find the Linux version. Where is it ? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

...

...

Thanks Ken,

I had never heard of this antivir before, but it compiles and installs just fine and seems to work great. Something new for today.

I seem not to be able to find the Linux version. Where is it ?

http://www.free-av.de/en/search/index.html?cx=001466757762279765390%3A5qmi51mcepw&cof=FORID%3A11&q=linux&sa=Go#843

:-) -- -------------------------------------------- Med venlig hilsen/best regards Verner Kjærsgaard Novell Certified Linux Professional 10035701 www.os-academy.dk +45 56964223

Is there an advantage over clam? -- Michael S. Dunsavage -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

On 03 July 08, Hans Witvliet wrote:

On Thu, 2008-07-03 at 03:51 -0400, Michael S. Dunsavage wrote:

...

...

...

...

Thanks Ken,

I had never heard of this antivir before, but it compiles and installs just fine and seems to work great. Something new for today.

I seem not to be able to find the Linux version. Where is it ?

http://www.free-av.de/en/search/index.html?cx=001466757762279765390%3A5 qmi51mcepw&cof=FORID%3A11&q=linux&sa=Go#843

Is there an advantage over clam?

Yes, it filters out much more. Only one still better is f-prot, but that's not free.

The command-line version of f-prot is free...at least when I got it for SuSE 10.3 it still was, and all the updates are free. -- "The tree of liberty must be occasionally watered with the blood of tyrants." - Thomas Jefferson -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Verner Kjærsgaard wrote:

http://www.free-av.de/en/search/index.html?cx=001466757762279765390%3A5qmi51mcepw&cof=FORID%3A11&q=linux&sa=Go#843

:-)

Many thanks for this info Verner. Did you get luck installing the Dazuko too?. I installed it per Yast, but had problems: redirfs: Unknown symbol rfs_flt_type dazuko: Unknown symbol rfs_set_operations dazuko: Unknown symbol rfs_unregister_filter dazuko: Unknown symbol rfs_set_path dazuko: Unknown symbol rfs_register_filter redirfs: Unknown symbol rfs_flt_type dazuko: Unknown symbol rfs_set_operations dazuko: Unknown symbol rfs_unregister_filter dazuko: Unknown symbol rfs_set_path dazuko: Unknown symbol rfs_register_filter -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

David C. Rankin wrote:

Yes! and yes.

On 10.0 it compiles and installs just fine as part of the install routine. On 10.3 I had to build and manually install it with the normal "./configure && make && sudo make install"

10.3: (x86_64)

l /lib/modules/2.6.22.18-0.2-default/extra/dazuko.ko -rw-r--r-- 1 root root 101506 2008-07-03 09:26 /lib/modules/2.6.22.18-0.2-default/extra/dazuko.ko

lsmod | grep dazuko dazuko 73016 0

avguard ran just fine after the module was installed.

10.0:

09:16 nemesis~> lsmod | grep dazuko dazuko 56464 6

09:16 nemesis~> locate dazuko.ko /lib/modules/2.6.13-15.18-default/extra/dazuko.ko

09:24 nemesis~> l /lib/modules/2.6.13-15.18-default/extra/dazuko.ko -rw-r--r-- 1 root root 68904 2007-10-03 13:34 /lib/modules/2.6.13-15.18-default/extra/dazuko.ko

So far I am really impressed with this package.

David, did you also install it on 11.0 ? Erik -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Erik Jakobsen wrote:

Verner Kjжrsgaard wrote:

...

http://www.free-av.de/en/search/index.html?cx=001466757762279765390%3A5qmi51mcepw&cof=FORID%3A11&q=linux&sa=Go#843

:-)

Many thanks for this info Verner.

Did you get luck installing the Dazuko too?.

I installed it per Yast, but had problems:

redirfs: Unknown symbol rfs_flt_type dazuko: Unknown symbol rfs_set_operations dazuko: Unknown symbol rfs_unregister_filter dazuko: Unknown symbol rfs_set_path dazuko: Unknown symbol rfs_register_filter redirfs: Unknown symbol rfs_flt_type dazuko: Unknown symbol rfs_set_operations dazuko: Unknown symbol rfs_unregister_filter dazuko: Unknown symbol rfs_set_path dazuko: Unknown symbol rfs_register_filter

it's a known problem on 11.0, check this bug report: https://bugzilla.novell.com/show_bug.cgi?id=401920 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Erik Jakobsen wrote:

Rhaddamant wrote:

...

...

it's a known problem on 11.0, check this bug report: https://bugzilla.novell.com/show_bug.cgi?id=401920 Is this also a known problem ?:

checking host system type... Linux checking for make utility... ok (make) checking for C compiler... ok (cc) kernel source in /lib/modules/2.6.25.8-jen67-pae/source... yes kernel build source in /lib/modules/2.6.25.8-jen67-pae/build... yes acquiring Linux kernel code configuration... ok checking if Linux is RSBAC patched... no checking if devfs is enabled... no discovered host system... Linux (2.6.25) checking if security module support is enabled... yes verifying capabilities are not built-in... built-in :( error: capabilities are built-in to the kernel: you will need to recompile a kernel with capabilities as a kernel module

I'm not so good in compiling kernela, but think there's no other way or ?

Erik yes, it's known although i didn't test it with exactly this kernel and only guess it's 32bit kernel with > 4G ram support

aside of this, the problem is for all 2.6.25 kernels due to decision of kernel developers to build security module into the kernel and not as module as it was in previous version, for example 2.6.22 kernel in 10.3. furthermore they made impossible to compile kernel with security as module and the total result is you cannot use dazuko like in 10.3... and this is only the beginning :-) now there are 2 options to make dazuko run with 2.6.25 kernel: 1) build kernel with dazuko module in 2) use dazuko with redirfs or nullfs but... each of these options fails: 1) dazuko expects other include/linux/security.h include file details here: http://lists.gnu.org/archive/html/dazuko-help/2008-06/msg00018.html 2a) redirfs compiles but dazuko again expects different headers and also redirfs is still considered unstable (ver. 0.3-pre2, http://www.redirfs.org) 2b) dazuko with nullfs (DazukoFS) fails... guess why :-) it's unclear why the headers are different than expected from dazuko Ivayllo -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org