Re: [Clamav-users] automated response

2008-07-28 Thread Chris Meadors
Christopher Checca wrote:
 I will be out of the office until 08-04-2008.   
 
 Christopher Checca
 Packard Transport, Inc.
 24021 South Municipal Dr
 PO Box 380
 Channahon, IL.  60410
 815 467 9260
 815 467 6939 Fax
 [EMAIL PROTECTED]
 www.packardtransport.com

Wonder if he's gone on holiday?

401 Otoole Dr
Minooka, IL 60447

Looks like a nice house...

Don't send automated replies to mailing lists.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Can't download daily-xxxx.cdiff from database.clamav.net nonblock_connect: connect(): fd=4 errno=22: Invalid argument

2008-07-28 Thread Tomasz Kojm
On Mon, 28 Jul 2008 10:08:29 +0800 (CST)
pen10 [EMAIL PROTECTED] wrote:

 --freshclam.conf:
[...]
 LocalIPAddress 127.0.0.1

Comment out the above line in your freshclam.conf

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Mon Jul 28 10:42:50 CEST 2008
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] automated response

2008-07-28 Thread Gerard
On Sun, 27 Jul 2008 21:25:50 -0500
Christopher Checca [EMAIL PROTECTED] wrote:

 
 I will be out of the office until 08-04-2008.   
 
 Christopher Checca
 Packard Transport, Inc.
 24021 South Municipal Dr
 PO Box 380
 Channahon, IL.  60410
 815 467 9260
 815 467 6939 Fax
 [EMAIL PROTECTED]
 www.packardtransport.com

It seems the only thing Christopher did not give us was the combination
to his safe.

Users who do not know how to configure a vacation program -- auto
responder, should not be allowed to use one. Maybe there should be a
licensing requirement.

While awaiting his return, I think I will just forward all my SPAM to
him.

-- 
Gerard
[EMAIL PROTECTED]

Don't be overly suspicious where it's not warranted.


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] automated response

2008-07-28 Thread Benny Pedersen

On Mon, July 28, 2008 12:57, Gerard wrote:

 While awaiting his return, I think I will just forward all my SPAM to
 him.

please do, we like to be clever here

--
Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] Clamav on SLES - 9 is not working properly

2008-07-28 Thread Sujit Acharyya-Choudhury
We are using clamav to scan for viruses on our 64-bit SLES-9 mail
gateways.  The MTA is exim 4.60.
However lately, we have noticed that if there is an attachment of type
zip, it is getting through and infecting PCs.
I have tried to test it with eicar viruses and found that eicar test
viruses eicar_com.zip and eicarcom2.zip are coming through without any
problem.

Is there anything I should do?

Regards


Sujit Choudhury
ISLS
University of Westminster

This e-mail and its attachments are intended for the above named only
and may be confidential. If they have come to you in error you must not
copy or show them to anyone, nor should you take any action based on
them, other than to notify the error by replying to the sender.





-- 
The University of Westminster is a charity and a company limited by
guarantee.  Registration number: 977818 England.  Registered Office:
309 Regent Street, London W1B 2UW, UK.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Clamav on SLES - 9 is not working properly

2008-07-28 Thread Török Edwin
On 2008-07-28 17:43, Sujit Acharyya-Choudhury wrote:
 We are using clamav to scan for viruses on our 64-bit SLES-9 mail
 gateways.  The MTA is exim 4.60.
 However lately, we have noticed that if there is an attachment of type
 zip, it is getting through and infecting PCs.
 I have tried to test it with eicar viruses and found that eicar test
 viruses eicar_com.zip and eicarcom2.zip are coming through without any
 problem.

 Is there anything I should do?

 Regards
   

Which clamav version?
How did you configure clamd? (Please give us the output of clamconf)

Thanks,
--Edwin

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] Date in the past when updating via freshclam.

2008-07-28 Thread fchan
Hi,
On several of my systems to I got this message when updating via freshclam:

Current working dir is /var/lib/clamav
Max retries == 3
ClamAV update process started at Mon Jul 28 15:47:20 2008
Querying current.cvd.clamav.net
TTL: 819
WARNING: DNS record is older than 3 hours.
WARNING: Invalid DNS reply. Falling back to HTTP mode.
Assuming modification time in the past
If-Modified-Since: Mon, 27 Dec 2004 03:52:10 GMT
Reading CVD header (main.cvd): Connected to db.us.clamav.net (IP: 
168.143.19.95).
Trying to retrieve CVD header of http://db.us.clamav.net/main.cvd
OK
main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder: sven)
Assuming modification time in the past
If-Modified-Since: Mon, 27 Dec 2004 03:52:10 GMT
Reading CVD header (daily.cvd): Connected to db.us.clamav.net (IP: 
168.143.19.95).
Trying to retrieve CVD header of http://db.us.clamav.net/daily.cvd
OK
daily.cld is up to date (version: 7870, sigs: 64633, f-level: 33, builder: neo)

I don't know if anyone else seen this and what is causing this.  Most 
importantly, what is the solution to this.

Regards,
Frank
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Date in the past when updating via freshclam.

2008-07-28 Thread Tomasz Kojm
On Mon, 28 Jul 2008 15:54:08 -0700
fchan [EMAIL PROTECTED] wrote:

 Hi,
 On several of my systems to I got this message when updating via freshclam:
 
 Current working dir is /var/lib/clamav
 Max retries == 3
 ClamAV update process started at Mon Jul 28 15:47:20 2008
 Querying current.cvd.clamav.net
 TTL: 819
 WARNING: DNS record is older than 3 hours.
 WARNING: Invalid DNS reply. Falling back to HTTP mode.
 Assuming modification time in the past
 If-Modified-Since: Mon, 27 Dec 2004 03:52:10 GMT
 Reading CVD header (main.cvd): Connected to db.us.clamav.net (IP: 
 168.143.19.95).
 Trying to retrieve CVD header of http://db.us.clamav.net/main.cvd
 OK
 main.cld is up to date (version: 47, sigs: 312304, f-level: 31, builder:
 sven) Assuming modification time in the past
 If-Modified-Since: Mon, 27 Dec 2004 03:52:10 GMT
 Reading CVD header (daily.cvd): Connected to db.us.clamav.net (IP: 
 168.143.19.95).
 Trying to retrieve CVD header of http://db.us.clamav.net/daily.cvd
 OK
 daily.cld is up to date (version: 7870, sigs: 64633, f-level: 33, builder:
 neo)
 
 I don't know if anyone else seen this and what is causing this.  Most 
 importantly, what is the solution to this.

There was some problem with your DNS and freshclam switched to the old
mode. It seems the old mode is only looking for .cvd files (and not .cld
files) and since freshclam couldn't find one as a workaround it used
a hardcoded static mtime:

if(stat(file, sb) != -1  sb.st_mtime  time(NULL)) {
Rfc2822DateTime(last_modified, sb.st_mtime);
} else {
time_t mtime = 1104119530;

Rfc2822DateTime(last_modified, mtime);
logg(*Assuming modification time in the past\n);
}

Nothing to be worried about, as you can see in the logs freshclam
properly verified your system is using the latest database (and it would
update it otherwise).

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Tue Jul 29 01:07:27 CEST 2008
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Can't download daily-xxxx.cdiff from database.clamav.net nonblock_connect: connect(): fd=4 errno=22: Invalid argument

2008-07-28 Thread pen10
 Hi Tomasz Kojm 
 Thanks for your response! 
 I modified my freshclam.conf according to yous suggestion,it's OK. 
Thanks again.   
  Robin Peng
2008-07-28,Tomasz Kojm [EMAIL PROTECTED] On Mon, 28 Jul 2008 10:08:29 
+0800 (CST)
pen10  wrote:

 --freshclam.conf:
[...]
 LocalIPAddress 127.0.0.1

Comment out the above line in your freshclam.conf

-- 
   oo. Tomasz Kojm 
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Mon Jul 28 10:42:50 CEST 2008
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml