Re: [Clamav-users] Newbie question.
On 11/03/09 16:26, Matus UHLAR - fantomas wrote: How do you think will those virii get to your computer? Although it was reported, I have never seen virus under linux system. If you are afraid of linux viruses, I think you (the user) are much more dangerous to your system. On 11.03.09 23:18, Erik P. Olsen wrote: I have my reasons. Any other than those you mentioned in reply to Lyle Giese's mail? If you are ready to accept suspiciout mail with unknown attachment and forward it to your friends, then viruses are still not the main problem. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Christian Science Programming: Let God Debug It!. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
On 12/03/09 09:58, Matus UHLAR - fantomas wrote: On 11/03/09 16:26, Matus UHLAR - fantomas wrote: How do you think will those virii get to your computer? Although it was reported, I have never seen virus under linux system. If you are afraid of linux viruses, I think you (the user) are much more dangerous to your system. On 11.03.09 23:18, Erik P. Olsen wrote: I have my reasons. Any other than those you mentioned in reply to Lyle Giese's mail? If you are ready to accept suspiciout mail with unknown attachment and forward it to your friends, then viruses are still not the main problem. Yes, I have other problems but right now I am dealing with vira. Erik. -- Erik P. Olsen, M.Sc. EE. Solsortvej 30, DK-2000 Frederiksberg, Denmark Phone: +45 32106480, Mobil: +45 40765300 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
Hello Erik, the previous replier with the HAVP suggestion is in all-likelihood your best if not easier choice. FWIF: there is also a so-called ICAP solution which has built in support in squid 3.x. So far I and only one other ML member has got it to compile and work. In fact I have it deployed as a daemon and the squid daemon and the icap daemon communicate but never find any viruses even if I download the eicar test file. The other ML member claims to get a response when he downloads the eicar virus test file. The only advantage to ICAP is the squid.conf is the only real configuration needed. Og, Hvordan står det till i Danmark? My wife and my other Norske friends say: Hei, Hei! Erik P. Olsen wrote .. I am running fedora 10, thunderbird 2.0.0.9 and firefox 3.0.7 and I would like to install clamav to catch vira which might enter the system through TB or FF. The calmav user manual has not been very helpful in this respect, so I would like to hear if someone could point me to a howto with specific information on installation and configuration. Thanks in advance Erik. -- Erik P. Olsen, M.Sc. EE. Solsortvej 30, DK-2000 Frederiksberg, Denmark Phone: +45 32106480, Mobil: +45 40765300 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
Hello, On 10.03.09 21:35, Erik P. Olsen wrote: please set up your mailer to wrap lines below 80 characters per line. 721 to 76 is usually OK. I am running fedora 10, thunderbird 2.0.0.9 and firefox 3.0.7 and I would like to install clamav to catch vira which might enter the system through TB or FF. The calmav user manual has not been very helpful in this respect, so I would like to hear if someone could point me to a howto with specific information on installation and configuration. How do you think will those virii get to your computer? Although it was reported, I have never seen virus under linux system. If you are afraid of linux viruses, I think you (the user) are much more dangerous to your system. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. REALITY.SYS corrupted. Press any key to reboot Universe. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
Matus UHLAR - fantomas wrote: Hello, On 10.03.09 21:35, Erik P. Olsen wrote: please set up your mailer to wrap lines below 80 characters per line. 721 to 76 is usually OK. I am running fedora 10, thunderbird 2.0.0.9 and firefox 3.0.7 and I would like to install clamav to catch vira which might enter the system through TB or FF. The calmav user manual has not been very helpful in this respect, so I would like to hear if someone could point me to a howto with specific information on installation and configuration. How do you think will those virii get to your computer? Although it was reported, I have never seen virus under linux system. If you are afraid of linux viruses, I think you (the user) are much more dangerous to your system. I would be looking at tools like chkrootkit, rkhunter and aide for your purposes. These are tools specifically intended for the *nix OS system. ClamAV is aimed more for email scanning. Besides the scales are still tipped towards Microsoft OS's and Internet Explorer. Even stuff aimed at Firefox is still aimed at Firefox under Windows, not under *nix. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
Matus UHLAR - fantomas wrote: Hello, On 10.03.09 21:35, Erik P. Olsen wrote: please set up your mailer to wrap lines below 80 characters per line. 721 to 76 is usually OK. I am running fedora 10, thunderbird 2.0.0.9 and firefox 3.0.7 and I would like to install clamav to catch vira which might enter the system through TB or FF. The calmav user manual has not been very helpful in this respect, so I would like to hear if someone could point me to a howto with specific information on installation and configuration. How do you think will those virii get to your computer? Although it was reported, I have never seen virus under linux system. If you are afraid of linux viruses, I think you (the user) are much more dangerous to your system. They come in like any other virus. They become a problem when Samba is involved, and with Windows virtual machines running in Linux. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
On 11/03/09 16:26, Matus UHLAR - fantomas wrote: How do you think will those virii get to your computer? Although it was reported, I have never seen virus under linux system. If you are afraid of linux viruses, I think you (the user) are much more dangerous to your system. I have my reasons. Erik. -- Erik P. Olsen, M.Sc. EE. Solsortvej 30, DK-2000 Frederiksberg, Denmark Phone: +45 32106480, Mobil: +45 40765300 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
On 11/03/09 17:41, Lyle Giese wrote: I would be looking at tools like chkrootkit, rkhunter and aide for your purposes. These are tools specifically intended for the *nix OS system. ClamAV is aimed more for email scanning. Besides the scales are still tipped towards Microsoft OS's and Internet Explorer. Even stuff aimed at Firefox is still aimed at Firefox under Windows, not under *nix. This is exactly what I intend to use clamav for. But perhaps email scanning is not what I think it is. I receive files through e-mail, internet downloads and usb sticks which I redistribute to various users and I want to be sure that what I send out is free from vira. Won't clamav do the job? Erik. -- Erik P. Olsen, M.Sc. EE. Solsortvej 30, DK-2000 Frederiksberg, Denmark Phone: +45 32106480, Mobil: +45 40765300 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
Erik P. Olsen wrote: On 11/03/09 17:41, Lyle Giese wrote: I would be looking at tools like chkrootkit, rkhunter and aide for your purposes. These are tools specifically intended for the *nix OS system. ClamAV is aimed more for email scanning. Besides the scales are still tipped towards Microsoft OS's and Internet Explorer. Even stuff aimed at Firefox is still aimed at Firefox under Windows, not under *nix. This is exactly what I intend to use clamav for. But perhaps email scanning is not what I think it is. I receive files through e-mail, internet downloads and usb sticks which I redistribute to various users and I want to be sure that what I send out is free from vira. Won't clamav do the job? Erik. It will. It will actually find any virus for any OS for which there is a signature, and if you can't find a signature, submit the sample to ClamAV and then make your own signature while waiting for the sample to be included. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question.
Erik P. Olsen wrote: I am running fedora 10, thunderbird 2.0.0.9 and firefox 3.0.7 and I would like to install clamav to catch vira which might enter the system through TB or FF. The calmav user manual has not been very helpful in this respect, so I would like to hear if someone could point me to a howto with specific information on installation and configuration. Thanks in advance Erik. You might consider a front-end to Internet access such as this: http://www.server-side.de/ dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Newbie question about creating clam signatures
On Thu, 7 Aug 2008, Brandon Perry wrote: if the text is the same every time, you can just use an MD5 sum of the text file in qeustion. If you want to key off specific parts of a text file, you can use sigtool --hex-dump to convert the text to hex and create your own signatures in a .db file. More info here: http://www.clamav.net/doc/latest/signatures.pdf Note that when using the hex-dump feature, you need to strip off the last byte (that is, the 0a). The carriage return gets encoded when you enter text interactively, so you need to remove it. Jeffrey Moskot System Administrator [EMAIL PROTECTED] ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] newbie question
Christopher Scott wrote: clamscan works just fine and, obviously, trying to run clamdscan results in connect(): No such file or directory ERROR: Can't connect to clamd. Any ideas? /path/to/clamd Clamd has to be running to use clamdscan. Matt ___ http://lurker.clamav.net/list/clamav-users.html
Re: Re: [Clamav-users] newbie question
/path/to/clamd I guess that's my question - where is clamd installed by default? ___ http://lurker.clamav.net/list/clamav-users.html
Re: Re: [Clamav-users] newbie question
find / -name 'clamd' -print --- Christopher Scott [EMAIL PROTECTED] wrote: /path/to/clamd I guess that's my question - where is clamd installed by default? ___ http://lurker.clamav.net/list/clamav-users.html ___ To help you stay safe and secure online, we've developed the all new Yahoo! Security Centre. http://uk.security.yahoo.com ___ http://lurker.clamav.net/list/clamav-users.html
Re: Re: [Clamav-users] newbie question
Christopher Scott said: /path/to/clamd I guess that's my question - where is clamd installed by default? make -n install /tmp/make.out Read the resulting .out file to see what the installer is doing. Make -n is a dry-run - nothing is done but all the steps are gone through. dp ___ http://lurker.clamav.net/list/clamav-users.html
RE: [Clamav-users] Newbie question
From: Sasa Stupar [mailto:[EMAIL PROTECTED] At 09:02 5.10.2004 -0400, you wrote: Sasa Stupar wrote: I don't know how to start clamd before sendmail and also do I have to start it or do I need to start only clamav-milter as daemon. It's been a l-o-n-g time since I messed with Linux, and I know nothing about SYSV-style startups. I have always used rc.local for packages that I have installed. Here is how I'm starting things on my FreeBSD box(some lines are wrapped)... /usr/local/sbin/clamd /usr/local/bin/spamd -d -L -x -m 10 -u spamd -r /var/run/spamd/spamd.pid /usr/local/sbin/clamav-milter -l --pidfile=/var/run/clamav/clmilter.pid /var/run/clamav/clmilter.sock /usr/local/sbin/spamass-milter -p /var/run/spamd/spamass-milter.sock -f -r 20 /usr/sbin/sendmail -L sm-mta -bd -q15m /usr/local/bin/freshclam -d Thank you for the answer. This is the way that I am starting it now but in the docs it is specified to start milter and clamd before sendmail and rc.local is started at the end. Anyone with the knowledge of sysv style startup (redhat)? I don't use this setup, so I can't say what needs to be started, but I can tell you how to do it in redhat. All of your startup scripts should be placed in /etc/rc.d/init.d. Links to those scripts go in /etc/rc#.d (where # is the desired runlevel). Links are named S##scripname, or K##scriptname (## is a 2-digit number). Scripts starting with S are started in this runlevel. Scripts starting with K are stopped in this runlevel. The scripts are started (or stopped) in alphanumeric order (thus the number embedded in the filename). You can also use chkconfig to manage the links for you. Check out the manpage for instructions. Bowie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Newbie question
I have installed Clamav 0.75-1 with enabled milter for sendmail on my RH8 box. I have read the install paper which comes with clamav source but I don't know how to start clamd before sendmail and also do I have to start it or do I need to start only clamav-milter as daemon. I allready have configured mc file for sendmail to scan messages for viruses. Regards, Sasa Stupar name your rc scripts accordingly. timo :x! www.sternmarsch-berlin.de | www.montags-gegen-2010.de ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Newbie question
Sasa Stupar wrote: I don't know how to start clamd before sendmail and also do I have to start it or do I need to start only clamav-milter as daemon. It's been a l-o-n-g time since I messed with Linux, and I know nothing about SYSV-style startups. I have always used rc.local for packages that I have installed. Here is how I'm starting things on my FreeBSD box(some lines are wrapped)... /usr/local/sbin/clamd /usr/local/bin/spamd -d -L -x -m 10 -u spamd -r /var/run/spamd/spamd.pid /usr/local/sbin/clamav-milter -l --pidfile=/var/run/clamav/clmilter.pid /var/run/clamav/clmilter.sock /usr/local/sbin/spamass-milter -p /var/run/spamd/spamass-milter.sock -f -r 20 /usr/sbin/sendmail -L sm-mta -bd -q15m /usr/local/bin/freshclam -d ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Newbie question
Thank you for the answer. This is the way that I am starting it now but in the docs it is specified to start milter and clamd before sendmail and rc.local is started at the end. Anyone with the knowledge of sysv style startup (redhat)? Reagrds, Sasa At 09:02 5.10.2004 -0400, you wrote: Sasa Stupar wrote: I don't know how to start clamd before sendmail and also do I have to start it or do I need to start only clamav-milter as daemon. It's been a l-o-n-g time since I messed with Linux, and I know nothing about SYSV-style startups. I have always used rc.local for packages that I have installed. Here is how I'm starting things on my FreeBSD box(some lines are wrapped)... /usr/local/sbin/clamd /usr/local/bin/spamd -d -L -x -m 10 -u spamd -r /var/run/spamd/spamd.pid /usr/local/sbin/clamav-milter -l --pidfile=/var/run/clamav/clmilter.pid /var/run/clamav/clmilter.sock /usr/local/sbin/spamass-milter -p /var/run/spamd/spamass-milter.sock -f -r 20 /usr/sbin/sendmail -L sm-mta -bd -q15m /usr/local/bin/freshclam -d ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Sasa Stupar ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [clamav-users] Newbie Question
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday 10 Jul 2003 6:49 pm, [EMAIL PROTECTED] wrote: Hi Group, Can anyone tell me if it's possible to only scan emails that have attachments, as opposed to every single one? You have to scan an e-mail to see if it has any attachments... Thanks. -Andrey - --Nigel - -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/DcMYhTUd3VwpF6IRAk4UAJ9MoOIIpgqsGVQUON1XEblzmWu8SgCeLHgM KJVdJL+Vf4GEfDKWL6G9cTE= =Y6kg -END PGP SIGNATURE- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
