Re: [Clamav-users] New Clamav / Clamav-milter Logwatch scripts

2004-05-07 Thread Søren Schimkat
Hi Tod New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz I'm going to assume that these scripts are not intended to be run from the commandline. I had to hack at it a bit before I

[Clamav-users] Getting count of known viruses

2004-05-07 Thread Marin Alexey
Hello, clamav-users, I can not find any reference how to get count of known viruses with any executable of clamav distribution. Seems it must be a freshclam or clam(d)scan functions to show it? _ Marin Alex --- This

Re: [Clamav-users] Getting count of known viruses

2004-05-07 Thread Lionel Bouton
Marin Alexey wrote the following on 05/07/2004 11:32 AM : Hello, clamav-users, I can not find any reference how to get count of known viruses with any executable of clamav distribution. sigtool -l | wc -l --- This SF.Net email is sponsored

Re: [Clamav-users] Getting count of known viruses

2004-05-07 Thread Ralph Seichter
Marin Alexey wrote: I can not find any reference how to get count of known viruses with any executable of clamav distribution. You can use sigtool -l | wc -l from a command shell. -- Mit freundlichen Gren / Yours sincerely Dipl. Inform. Ralph Seichter HORUS-IT Ahornweg 10 D-57635 Oberirsen Tel

[Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Dan O'Brien
What is the simplest and best solution for providing virus detection of incoming email using Clamav with sendmail both assuming I don't have milter and that I do? RedHat and Fedora have a sendmail-devel package that includes the milter support (provided Sendmail is new enough). It installs

Re: [Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Mike Lambert
On Fri, 7 May 2004, Antony Stone wrote: On Friday 07 May 2004 12:49 pm, Dan O'Brien wrote: What is the simplest and best solution for providing virus detection of incoming email using Clamav with sendmail both assuming I don't have milter and that I do? I like

Re: [Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Antony Stone
On Friday 07 May 2004 2:14 pm, Mike Lambert wrote: On Fri, 7 May 2004, Antony Stone wrote: On Friday 07 May 2004 12:49 pm, Dan O'Brien wrote: What is the simplest and best solution for providing virus detection of incoming email using Clamav with sendmail both assuming I don't have

[Clamav-users] Remove 0.68 before installing 0.70?

2004-05-07 Thread Ken Morley
I've read herein that it's recommended that you uninstall ClamAV 0.68 before you install 0.70. I apologize if this is a stupid question, but how do you uninstall 0.68? I think I've read all of the documentation that comes with the source and the clamdoc.pdf, but I don't see anything on

Re: [Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Nigel Horne
What is the simplest and best solution for providing virus detection of incoming email using Clamav with sendmail both assuming I don't have milter and that I do? Clamav does it all itself no need for another solution, look in .../clamav-milter/INSTALL. -Nigel -- Nigel Horne. Arranger,

Re: [Clamav-users] Remove 0.68 before installing 0.70?

2004-05-07 Thread Steven Stern
On Fri, 7 May 2004 09:56:38 -0400, Ken Morley [EMAIL PROTECTED] wrote: I've read herein that it's recommended that you uninstall ClamAV 0.68 before you install 0.70. I apologize if this is a stupid question, but how do you uninstall 0.68? I think I've read all of the documentation that comes

Re: [Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Todd Lyons
Antony Stone wanted us to know: accepting every single message, MailScanner would be fine. If, like me, you prefer to 5xx reject messages that you don't like (virus, spam, But, what is the advantage of this? It does not reduce your bandwidth by No it does not reduce the bandwidth, however

RE: [Clamav-users] Remove 0.68 before installing 0.70?

2004-05-07 Thread Michael St. Laurent
Ken Morley mailto:[EMAIL PROTECTED] wrote: I've read herein that it's recommended that you uninstall ClamAV 0.68 before you install 0.70. I apologize if this is a stupid question, but how do you uninstall 0.68? I think I've read all of the documentation that comes with the source and the

Re: [Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Mike Lambert
On Fri, 7 May 2004, Antony Stone wrote: On Friday 07 May 2004 2:14 pm, Mike Lambert wrote: If I understand MailScanner correctly, the mta must accept the message before passing to MailScanner for processing. That is true. If you don't mind accepting every single message, MailScanner

[Clamav-users] Virus found in virgin RHES 3 installation?

2004-05-07 Thread Ken Morley
I've just installed RedHat Enterprise ES V3 and patched to the latest revision. I then installed ClamAV 0.70, ran freshclam and did a clamdscan against the entire drive. I was surprised when clamdscan reported: //proc/kcore: Trojan.MiniCommander.dr FOUND What's the possibility that the server

Re: [Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Noel Jones
At 12:27 PM 5/7/04, Mike Lambert wrote: But, what is the advantage of this? It does not reduce your bandwidth by avoiding transfer of unwanted emails, since your milter has to see enough of the content to decide not to accept it. The advantage is sending a 5xx reject instead of a 2xx

Re: [Clamav-users] Virus found in virgin RHES 3 installation?

2004-05-07 Thread Kevin Spicer
On Fri, 2004-05-07 at 18:36, Ken Morley wrote: I was surprised when clamdscan reported: //proc/kcore: Trojan.MiniCommander.dr FOUND What's the possibility that the server is really infected? It got to be somewhat unlikely that a running linux kernel would get infected with a Windows

Re: [Clamav-users] Easiest/best sendmail integration

2004-05-07 Thread Kevin Spicer
On Fri, 2004-05-07 at 18:27, Mike Lambert wrote: Again, the advantage is sending 5xx instead of 2xx. IMO, giving the connecting mta a status code appropriate to the message disposition is better than simply accepting _all_ messages only to drop some later (I do not consider generating a

Re: [Clamav-users] Virus found in virgin RHES 3 installation?

2004-05-07 Thread Chris Meadors
On Fri, 2004-05-07 at 13:36 -0400, Ken Morley wrote: I've just installed RedHat Enterprise ES V3 and patched to the latest revision. I then installed ClamAV 0.70, ran freshclam and did a clamdscan against the entire drive. I was surprised when clamdscan reported: //proc/kcore:

[Clamav-users] Totally Confused

2004-05-07 Thread Phil Ershler
Hi, I am attempting to replace our e-mail virus scanner (RAV) with clamav. I am running it under OS X 10.3. I have about 250 e-mail messages that RAV has quarantined as being virus infected. If I use clamscan to scan these files, it only finds a few files that are infected (with I.Frame). If

[Clamav-users] Freshclam error: libclamav.1.dylib (No such file or directory, errno = 2)

2004-05-07 Thread Rob Kudyba
On OS X 10.2.2, trying to run Freshclam after a successful install of ClamAV...test runs fine too. But running the freshclam updater results in: /usr/local/bin/freshclam dyld: /usr/local/bin/freshclam can't open library: /usr/local/lib/libclamav.1.dylib (No such file or directory, errno = 2)

Re: [Clamav-users] Totally Confused

2004-05-07 Thread Antony Stone
On Friday 07 May 2004 8:52 pm, Phil Ershler wrote: Hi, I am attempting to replace our e-mail virus scanner (RAV) with clamav. I am running it under OS X 10.3. I have about 250 e-mail messages that RAV has quarantined as being virus infected. If I use clamscan to scan these files, it

Re: [Clamav-users] Freshclam error: libclamav.1.dylib

2004-05-07 Thread OpenMacNews
-- On Friday, May 7, 2004 4:07 PM -0400 Rob Kudyba [EMAIL PROTECTED] wrote: On OS X 10.2.2, trying to run Freshclam after a successful install of ClamAV...test runs fine too. But running the freshclam updater results in: /usr/local/bin/freshclam dyld: /usr/local/bin/freshclam can't open

Re: [Clamav-users] Virus found in virgin RHES 3 installation?

2004-05-07 Thread Tomasz Kojm
On Fri, 7 May 2004 13:36:09 -0400 Ken Morley [EMAIL PROTECTED] wrote: I've just installed RedHat Enterprise ES V3 and patched to the latest revision. I then installed ClamAV 0.70, ran freshclam and did a clamdscan against the entire drive. I was surprised when clamdscan reported:

Re: [Clamav-users] Totally Confused

2004-05-07 Thread Tomasz Kojm
On Fri, 7 May 2004 13:52:45 -0600 Phil Ershler [EMAIL PROTECTED] wrote: Hi, I am attempting to replace our e-mail virus scanner (RAV) with clamav. I am running it under OS X 10.3. I have about 250 e-mail messages that RAV has quarantined as being virus infected. If I use

[Clamav-users] Milter queues notifies to postmaster

2004-05-07 Thread Ing. Germán González B.
Hi I upgrade from clamav-devel-20040418 to clamav-devel-20040507 and notifies from clam to postmaster to inform a virus was found, are queued. After one hour the messages are sent to posmaster (Every hour the queue is procesed) Virus are filtered OK. Clamav-devel-20040418 works fine. I have

Re: [Clamav-users] Totally Confused

2004-05-07 Thread Philip Ershler
Thanks for the reply, but clamscan --mbox quarantine (where quarantine is the directory where RAV has stored the infected messages produces the same output as clamscan quarantine Am I still being stupid about something? Thanks, Phil On Friday, May 7, 2004, at 03:24 PM, Tomasz Kojm wrote:

Re: [Clamav-users] Milter queues notifies to postmaster

2004-05-07 Thread Todd Lyons
Ing. Germán González B. wanted us to know: CLAMAV_FLAGS=--quarantine-dir=/var/clamav/quarantine --max-children=200 Holy cow! 200 ??? Is there a reason that you have it set that high? -- Regards... Todd They that can give up essential liberty to obtain a little temporary safety

Re: [Clamav-users] Milter queues notifies to postmaster

2004-05-07 Thread Antony Stone
On Saturday 08 May 2004 12:09 am, Todd Lyons wrote: Ing. Germán González B. wanted us to know: After one hour the messages are sent to posmaster (Every hour the queue is procesed) CLAMAV_FLAGS=--quarantine-dir=/var/clamav/quarantine --max-children=200 Holy cow! 200 ??? Is there a

[Clamav-users] freshclam and transparent proxy

2004-05-07 Thread Paul Bruce
Hi, I've been having problems updating the daily.cvd file I've just narrowed the problem down to the transparent proxy and content filter that I run on my network. As yet I haven't been able to hone it on it any further, so has anyone else had this problem with transparent proxy and/or content

Re: [Clamav-users] Milter queues notifies to postmaster

2004-05-07 Thread Ing. Germán González B.
Ing. Germán González B. wanted us to know: CLAMAV_FLAGS=--quarantine-dir=/var/clamav/quarantine --max-children=200 Holy cow! 200 ??? Is there a reason that you have it set that high? Well. Two months ago the server reach 150 childrens. I have to apply en filter to port 25 from a lot of

Re: [Clamav-users] Milter queues notifies to postmaster

2004-05-07 Thread Ing. Germán González B.
On Sat, 8 May 2004, Antony Stone wrote: On Saturday 08 May 2004 12:09 am, Todd Lyons wrote: Ing. Germán González B. wanted us to know: After one hour the messages are sent to posmaster (Every hour the queue is procesed) CLAMAV_FLAGS=--quarantine-dir=/var/clamav/quarantine