What is the simplest and best solution for providing virus detection of
incoming email using Clamav with sendmail both assuming I don't have milter
and that I do?
Read the docs and pick your poisen.
Easy: recompile Sendmail to have Milter compile Clamav with milter.
If you don't have something
never mind!
sorry but I didn't see a message posted earlier with the same topic, that
answered my questions.
Cecilia
-
admins, you may delete this post
---
This SF.Net email is sponsored by Sleepycat Software
Learn developer
Hello
I noticed that space used on my server went up more than 1 GB in two days. I
searched for possible causes and found that on the /temp directory there are
hundreds of folders with names like:
/clamav-32a04d8981dc9029
/clamav-64c3234be1ab21c8
/clamav-97724bb815cf6a6d
/clamav-cd4876490bf92691
My questions are, how are these temp files created? do they have a reason to
be there? is it safe to delete them? how do I avoid this issue?
On thing, all folders/files are from two days only (May 3rd and 4th),
something else, I don't have a quarantine option on my conf file.
I'll appreciate any
I have installed clamav and clamav-milter on netbsd 1.6 (all packages,include sendmail, libmilter and pth, are current) and it
appears to work fine (i.e. catching viruses).
Most of the time it is reliable and gives proper warnings when attempting to send infected mails.
Yesterday, how ever, it
Ha ha :-) Good answer but i don't have Debug enabled even...
On Wed, May 05, 2004 at 06:29:15PM +0200, Jakub Jankowski wrote:
On 2004-05-05, Alex V. Kovirshin wrote:
First - hack milter ...
Second - cron job rm -f /path/to/quarantine
Zero - read docs.
s.
--
(0 Jakub Jankowski
* Cecilia Mtz [EMAIL PROTECTED] [20040506 09:21]: wrote:
never mind!
sorry but I didn't see a message posted earlier with the same topic, that
answered my questions.
Cecilia
-
admins, you may delete this post
If only that was so easy and wouldn't break the archives
Ops, sorry. I just don't understand the point...
I was talking about quarantine_dir. I use local socket, and as said
When using Localsocket in %s\nyou may improve performance if you use the
--quarantine_dir option\n - i use --quarantine-dir, but i need only
perfomance improvement, not all that
Btw, if you use quarantine-dir option(with localsocket of couse), for
perfomance reason, but do not need all that quarantine files, you could
make them deleted, by patching clamav-milter:
--- clamav-milter.c.orig2004-05-06 11:20:10.0 +0400
+++ clamav-milter.c 2004-05-06
Hello again everyone.
I received a file that has been recognized as a virus by f-prot, but not by
clam.
Indeed it is a virus, since I can open it with my mailer and execute it,
and really get infected.
So I submitted it, and I got this response from Diego d'Ambra :
E-mail sample with missing
Hi!
I'm using sendmail with clamav-milter and the latest stable version
0.70.
I used a german website which provides dummy viruses for checking clamav
(http://www.heise.de/security/dienste/emailcheck/).
I realised that the following dummy viruses pass clamav:
Virus Bagle.Q
Virus Netsky.P
-Original Message-
From: [EMAIL PROTECTED] [mailto:clamav-users-
[EMAIL PROTECTED] On Behalf Of Flynn
Sent: 6. maj 2004 09:50
To: [EMAIL PROTECTED]
Subject: [Clamav-users] There is something I dont get here ...
E-mail sample with missing headers. SomeFool
found if headers are
On Thu, 2004-05-06 at 09:10, Clamav wrote:
Hi!
I'm using sendmail with clamav-milter and the latest stable version
0.70.
I used a german website which provides dummy viruses for checking clamav
(http://www.heise.de/security/dienste/emailcheck/).
I realised that the following dummy
Dale Gallagher wrote:
Hi everyone
Anyone wishing to run clamd under daemontools
http://cr.yp.to/daemontools.html can use the attached patch I
hacked together, which is almost identical to Len Budney's patch:
http://mysite.verizon.net/vze1ypud/software/qscanq/clamav-0.70-stderr.patch.gz
I
I may be posting to the wrong link, but I am just trying to cover all
angles:
I am using qmail - qmailscanner - clamav-0.70 and ezmlm.
All regular mail is passed to qmailscanner and thus virus scanned. But
all mail sent to a mailing list is not.
Is there anywhere in Ezmlm that i must configure
Title: is: Unmatchet Entries
Hi,
After installing Fedora C 1, SA the pakkage that follows Fedora C1, clamav and MailScanner.
Used a very nise link to install clamav:
(http://fedoranews.org/contributors/ron_goulard/clamav)
(used yum to get the latest version (ClamAv)) and the program was
There are many ways to do this - using the --mbox option should detect
the virus if the _full_ e-mail is scanned by ClamAV.
Well - let me clarify this situation very carefully :
(v0.70)-clamscan --mbox does *NOT* recognized the _full_ email as a virus.
snapshot-clamscan --mbox does *NOT*
On Wednesday 05 May 2004 7:53 pm, Søren Schimkat wrote:
When using the same config file at shown below .. and starting
clamav-milter with these options:
--force-scan --config-file=/opt/clamav-0.70/etc/clamav.conf
--quarantine-dir =/var/quarantine /var/run/clamav/clmilter.sock
Could someone
-Original Message-
From: [EMAIL PROTECTED] [mailto:clamav-users-
[EMAIL PROTECTED] On Behalf Of Flynn
Sent: 6. maj 2004 10:46
To: [EMAIL PROTECTED]
Subject: [Clamav-users] Re: There is something I dont get here ...
There are many ways to do this - using the --mbox option should
On Thursday 06 May 2004 8:08 am, Alex V. Kovirshin wrote:
Ops, sorry. I just don't understand the point...
I was talking about quarantine_dir.
Ahah, that's different from the temporary files.
Have you tried the latest version in CVS?
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music,
On Thursday 06 May 2004 7:38 am, Mr Mailing List wrote:
www sendmail[4015]: i2UL7MvV004015: SYSERR(root): out of memory:
Cannot allocate memory
This is using ClamAV version 0.70, clamav-milter version 0.70 (the
released version)
Please try the version in CVS, it has some fixes which I
On Thursday 06 May 2004 9:46 am, Flynn wrote:
Honest: I am convinced we face a bug here.
Have you tried with the latest version in CVS? If so and
it still fails, zip the e-mail, password virus, and send me copy.
Rgds,
Flynn
-Nigel
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music,
Flynn wrote:
There are many ways to do this - using the --mbox option should detect
the virus if the _full_ e-mail is scanned by ClamAV.
Well - let me clarify this situation very carefully :
(v0.70)-clamscan --mbox does *NOT* recognized the _full_ email as a virus.
I have experienced
Sorry, I know this was discussed at the end of April, but apparently
much of Aprils list archive is missing.
When running freshclam directly or via cron it gives the error:
WARNING: Your ClamAV installation is OUTDATED - please update
immediately!
I did update to the latest stable yesterday,
On Wed, 05 May 2004 13:55:29 -0400
Chris Conn [EMAIL PROTECTED] wrote:
this segmentation fault that occurred at the exact second it scanned
this Klez virus?
As a temporary work-around please disable the LogSyslog directive.
The format string problem is connected with the vsyslog()
Honest: I am convinced we face a bug here.
I'm not, but you're welcome to submit the _full_ e-mail (I suspect the
sample I'm looking at is only a partial bounced sample) :-)
I sent the full emails as sub. number 3074 3075
I should have done that first, but the fact that your remote scanner
Nope, but i made little hack to clamav-milter, see my previose post...
it works good. But thanx, i'll check it out.
On Thu, May 06, 2004 at 10:32:40AM +0100, Nigel Horne wrote:
On Thursday 06 May 2004 8:08 am, Alex V. Kovirshin wrote:
Ops, sorry. I just don't understand the point...
I was
I'm not, but you're welcome to submit the _full_ e-mail (I suspect the
sample I'm looking at is only a partial bounced sample) :-)
Hello again,
To fullfill with Nigel Horne's request,
I downloaded the latest tarball, and one of my samples is now detected.
So please ignore submission n# 3075
Nigel Horne wrote:
On Thursday 06 May 2004 9:46 am, Jeany Zoita Jakobsen wrote:
**Unmatched Entries**
[snip]
clamfi_close
What i am concerned about is the **Unmatchet Entries** messagees.
Is there sommething wrong?
Yes, the yum people have configured clamav with
Do you mean that i can install
clamav-0.70.tar.gz /clamav/clamav-0.70.tar.gz 2292 kb Apr 17, 2004 02:07
over the actual version? (I installed for to days ago)
Or i have to uninstall firt the actual ClamAv befor i download and install the new
version.
And one more question :)
Please point me to
Title: is: SV: [Clamav-users] Unmatchet Entries
Hi Peter,
Do you mean that i should disable the debug in clamav.conf?
If you mean that, so it is allredy disabled.
May be i should eneble it?
Thanks,
Jeany
-Opprinnelig melding-
Fra: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]
On Thu, 2004-05-06 at 13:20, Jeany Zoita Jakobsen wrote:
Do you mean that i can install
clamav-0.70.tar.gz /clamav/clamav-0.70.tar.gz 2292 kb Apr 17, 2004 02:07
over the actual version? (I installed for to days ago)
Or i have to uninstall firt the actual ClamAv befor i download and install
On May 6, 2004, at 1:54 AM, Cecilia Mtz wrote:
Hello
I noticed that space used on my server went up more than 1 GB in two
days. I
searched for possible causes and found that on the /temp directory
there are
hundreds of folders with names like:
/clamav-32a04d8981dc9029
/clamav-64c3234be1ab21c8
Jeany Zoita Jakobsen wrote:
Hi Peter,
Do you mean that i should disable the debug in clamav.conf?
If you mean that, so it is allredy disabled.
May be i should eneble it?
Hello Jeany Zoita,
the 'enable-debug' is compile-time option. High level of debugging is
interesting
for developers only.
Scott Ryan wrote:
I may be posting to the wrong link, but I am just trying to cover all
angles:
I am using qmail - qmailscanner - clamav-0.70 and ezmlm.
All regular mail is passed to qmailscanner and thus virus scanned. But
all mail sent to a mailing list is not.
Is there anywhere in Ezmlm that i
Greetings all. I found out about clamav through the qmail list. I'm trying
to install clamAV to work with qmail and qscanq. I followed the instructions
in the INSTALL doc with clamav 0.70. That all went fine. In addition I am
running clamd per instructions under Running Clamd on:
Hi
When I compile clamav-devel-20040506 I obtain:
undefined reference to `messageAddLineAtTop'
If I compile clamav-devel-20040505 version everything works fine.
Is a clamav-devel-20040506 error or I am doing something wrong.
Regards
Germán González
when compiling 20040506 clamav-devel snapshot i've got:
gcc -g -O2 -o .libs/clamscan output.o getopt.o memory.o clamscan.o
options.o others.o manager.o treewalk.o -L/blabla/clamav-devel/libclamav
/blabla/clamav-devel/libclamav/.libs/libclamav.so -lz -lbz2 -lgmp -lpthread
/blabla/clamav-devel
On Thursday 06 May 2004 6:38 pm, Ing. Germán González B. wrote:
When I compile clamav-devel-20040506 I obtain:
undefined reference to `messageAddLineAtTop'
Fixed in CVS.
Germán González
-Nigel
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
[EMAIL
Hi Nigel
Citat Nigel Horne [EMAIL PROTECTED]:
On Wednesday 05 May 2004 7:53 pm, S=F8ren Schimkat wrote:
When using the same config file at shown below .. and starting
clamav-milter with these options:
--force-scan --config-file=3D/opt/clamav-0.70/etc/clamav.conf
--quarantine-dir
Hi guys
New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may
download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz
Regards Søren Schimkat
---
This SF.Net email is sponsored by Sleepycat
On Thu, 06 May 2004 19:55:01 +0200
Andrzej Migdalski [EMAIL PROTECTED] wrote:
when compiling 20040506 clamav-devel snapshot i've got:
gcc -g -O2 -o .libs/clamscan output.o getopt.o memory.o clamscan.o
options.o others.o manager.o treewalk.o -L/blabla/clamav-devel/libclamav
/blabla/clamav
I'm using the freebsd port of clamav and clamav milter, and I get the
message in the kernel log:
pid 1812 (clamav-milter), uid 1029: exited on signal 11
pid 1852 (clamav-milter), uid 1029: exited on signal 11
pid 1883 (clamav-milter), uid 1029: exited on signal 11
pid 1885 (clamav-milter), uid
On Thursday 06 May 2004 8:01 pm, Koos van den Hout wrote:
I'm using the freebsd port of clamav and clamav milter, and I get the
message in the kernel log:
pid 1812 (clamav-milter), uid 1029: exited on signal 11
Please update to the latest version from CVS. If the problem still occurs
let me
How do they differ from the ones from the Logwatch site?
Soren Schimkat wrote:
Hi guys
New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may
download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz
Regards Søren Schimkat
I wrote the ones included in the Logwatch distribution .. and this new
version is an update matching the latest Clamav stable version. This update
will, in a few days, be sent to the maintainer of logwatch if no errors is
reported.
- Original Message -
From: Richard Humphrey [EMAIL
Soren Schimkat wanted us to know:
Hi guys
New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may
download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz
I'm going to assume that these scripts are not intended to be run from
the commandline. I had
Jason Haar wrote:
On Wed, May 05, 2004 at 02:15:29PM -0400, Jesse Guardiani wrote:
past 0.70-rc a month or two ago. 0.70 (upgraded just yesterday) does the
same thing. I'm running FreeBSD 4.8-RELEASE + daemontools. I don't see
the seg fault, but my clamd is hanging every 5 or 10 minutes and
I hope you don't mind me starting a new thread when this is related to
several existing threads, but I wanted to get away from the topics where
the problem is being assigned to reasons like incompatible versions or
multiple config files.
My explorations started a few days ago when a SomeFool
Title: Source install vs RPM install
Hello all, I've installed Clamav using the clamav-0.70-rc.tar.gz and now I'd like to move to a RPM install of the most current flavor. Any issues just using the RPM or should I remove the source install first? Also is there an RPM version for RHE 3?
Try
clamscan --mbox /tmp/virus.test
This tells clamscan to treat it as a mail (mime/uuencoded) file.
Doh! Excuse me while I make myself very small and hide.
I did actually know this when I first picked up clamav many months ago,
but then I built it into my spamfilter and never had to run
51 matches
Mail list logo
