Re: [Clamav-users] Re: Freshclam and Cron

2005-02-23 Thread Bob Hutchinson
On Wednesday 23 Feb 2005 06:49, Rob MacGregor wrote: On Wed, 23 Feb 2005 00:49:20 +, Bob Hutchinson [EMAIL PROTECTED] wrote: That is a good reason, and true too, I have found the freshclam daemon not functioning on one occasion, so now I cron it. Another reason is to spread the load

[Clamav-users] Clamscan bug/feature in Solaris

2005-02-23 Thread Plant, Dean
I have posted a few previous questions regarding clamscan and problems with /net on Solaris. After some further investigation I have found that it impossible to run an efficient full scan (clamscan -r /) of a Solaris file system if /net is activated in /etc/auto_master. This is down to the fact

[Clamav-users] Re: Disabling ScanArchive ?

2005-02-23 Thread Wolfgang Cernohorsky
Jason Byrns wrote: BANNED CONTENTS ALERT Our content checker found banned name: P=p005,L=1,M=multipart/mixed | P=p003,L=1/2,M=application/octet-stream,T=exe,T=exe-ms,N=bartpe.xex in email presumably from you ([EMAIL PROTECTED]), to the following recipient: - [EMAIL PROTECTED]

Re: [Clamav-users] Freshclam and Cron

2005-02-23 Thread George Chelidze
[EMAIL PROTECTED] wrote: Freshclam via cron What sort of update intervals are people using, and can someone show me a working crontab entry? I've tried calling freshclam like this via a crontab entry 06 0 * * * /usr/local/bin/freshclam BUt it doesn't seem to work. Which means I'm probably

Re: [Clamav-users] Re: Disabling ScanArchive ?

2005-02-23 Thread Jason Byrns
Wolfgang Cernohorsky wrote: Our content checker found banned name: P=p005,L=1,M=multipart/mixed | P=p003,L=1/2,M=application/octet-stream,T=exe,T=exe-ms,N=bartpe.xex in email presumably from you ([EMAIL PROTECTED]), to the following recipient: - [EMAIL PROTECTED] Maybe qr'(?# BLOCK

Re: [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread Tomasz Kojm
On Wed, 23 Feb 2005 00:32:10 -0600 (CST) Damian Menscher [EMAIL PROTECTED] wrote: On Fri, 18 Feb 2005, Tomasz Kojm wrote: The signature will be updated on Monday (to better meet the official specification). All clamdwatch users should upgrade to the latest version as soon as possible to

Re: [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread ahellary
Tomasz i STILL cannont get either version .81 or .82 to detect any virus i seem to be stuck at ver .80i have posed previously with details of my set up but here it is again its slackware with a 2.2.x kernel , qmail , black hole and spamassin version .80 works fine but numerous

RE: [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread Matthew.van.Eerde
ahellary wrote: i STILL cannont get either version .81 or .82 to detect any virus Try 0.83? its slackware I've got 0.83 running OK on slackware... but I had to upgrade zlib... do you get any make errors? Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business

Re: [Clamav-users] Disabling ScanArchive ?

2005-02-23 Thread Dennis Peterson
Jason Byrns wrote: Trog wrote: On Tue, 2005-02-22 at 11:00 -0600, Jason Byrns wrote: 'Banned filename'? ClamAV doesn't do banned filenames. So that's Amavis blocking banned file names, then? I have no problems continuing to scan within archives, and I agree that's how many viruses are now being

Re: [Clamav-users] Disabling ScanArchive ?

2005-02-23 Thread Jason Byrns
Dennis Peterson wrote: Probably not what you're looking for, but I've added your domain to my list of blocked domains because you present yourself as someone who doesn't understand the importance of this process, nor the nature of infected payloads, regardless of the wrapping they come in.

Re: [Clamav-users] Disabling ScanArchive ?

2005-02-23 Thread Matt Fretwell
Jason Byrns wrote: 3) Make them rename files. At the moment, it sounds to me like option #3 may be a reasonable one. Option #1 isn't bad, either. But if you still think my questions or choices are so bad that you have to blacklist our entire company, please at least explain what your

Re: [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread ahellary
its slackware I've got 0.83 running OK on slackware... but I had to upgrade zlib... do you get any make errors? Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Mathew i get no make errors at all Tony ___

Re: [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread ahellary
Detect a virus in a mail passed through the MTA, or a virus saved to the filesystem? Matt Matt a virus from an email ... the server i question is a mail server it does nothing but mail Tony ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Disabling ScanArchive ?

2005-02-23 Thread Daniel J McDonald
On Wed, 2005-02-23 at 11:52 -0600, Jason Byrns wrote: Dennis Peterson wrote: The options I see so far are: 1) Make them use hosting space, via HTTP/FTP, and don't allow emailing of banned file types at all. 2) Make them PGP encrypt their files. 3) Make them rename files. At the

Re: [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread Daniel J McDonald
On Wed, 2005-02-23 at 18:12 +, ahellary wrote: Detect a virus in a mail passed through the MTA, or a virus saved to the filesystem? a virus from an email ... the server i question is a mail server it does nothing but mail Have you tested checking a virus in the file system? (you

Re: [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread ahellary
That will tell us whether your problem is with clamav, or with blackhole. -- Daniel J McDonald, CCIE # 2495, CNX Austin Energy Daniel have just tried as you said both .82 and .83 detected the test file so i need to dig a bit deeper thanks for you help Tony

clamscan and blackhole errors was [Clamav-users] EICAR signature update: second attempt

2005-02-23 Thread ahellary
ok all renamed this thread i have with help deduced that clamscan is ok its self so it must be the way arguments are passed via blackhole-1.0.9 what i need to know has there been any change since clam v .80 to the new .83 as to the way the args are passed to clamscan Thanks Tony

[Clamav-users] Re: clamscan and blackhole errors

2005-02-23 Thread ahellary
- Original Message - As always, however, the most important question is, are you running the latest version of Blackhole? If not, the problem may be corrected in a later version. Matt Matt blackhole isnt being developed now ... we have done some changes to it to get it to run

Re: [Clamav-users] Disabling ScanArchive ?

2005-02-23 Thread Dennis Peterson
Dennis Peterson wrote: Probably not what you're looking for, but I've added your domain to my list of blocked domains because you present yourself as someone who doesn't understand the importance of this process, nor the nature of infected payloads, regardless of the wrapping they

Re: [Clamav-users] Re: clamscan and blackhole errors

2005-02-23 Thread Keith Patton
ahellary wrote: - Original Message - As always, however, the most important question is, are you running the latest version of Blackhole? If not, the problem may be corrected in a later version. Matt Matt blackhole isnt being developed now ... we have done some changes to it to get

RE: [Clamav-users] Re: clamscan and blackhole errors

2005-02-23 Thread Matthew.van.Eerde
Keith Patton wrote: ahellary wrote: ... on our qmail... Look at http://www.mimedefang.org But MIMEDefang is a sendmail-only milter... Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer perl

Re: [Clamav-users] Re: clamscan and blackhole errors

2005-02-23 Thread ahellary
- Original Message - From: [EMAIL PROTECTED] To: clamav-users@lists.clamav.net Sent: Wednesday, February 23, 2005 7:51 PM Subject: RE: [Clamav-users] Re: clamscan and blackhole errors Keith Patton wrote: ahellary wrote: ... on our qmail... Look at http://www.mimedefang.org But MIMEDefang

Re: [Clamav-users] Re: clamscan and blackhole errors

2005-02-23 Thread Craig Green
ahellary wrote: Matt blackhole isnt being developed now ... we have done some changes to it to get it to run spamassin 3.x so i'll ask another question what are others running i like black hole in that you can set which domains or even users mail is scanned and even what incomming

Re: [Clamav-users] Disabling ScanArchive ?

2005-02-23 Thread Jason Byrns
Dennis Peterson wrote: If you set up a file exchange server to allow uploads of these types of files, all you've done is provide a back door for dangerous files which could, if infected, impact systems outside yours. This could be considered irresponsible behavior. I didn't mean there would be a

RE: [Clamav-users] Disabling ScanArchive ?

2005-02-23 Thread Matthew.van.Eerde
Jason Byrns wrote: In my example case, we have a customer who is a programmer. He wants to (needs to) send the results of his work to one of his clients. He should make himself a website and post his work on it, then send clients links to the website. Oh, and he should sign his work with a

Re: [Clamav-users] Does ClamAV crash?

2005-02-23 Thread Tomasz Kojm
On Mon, 21 Feb 2005 08:15:51 -0500 Dale Walsh [EMAIL PROTECTED] wrote: exactly the same problem and I have been tracing the process and it seems to occur during a freshclam cvd update (when it actually updates the virus db files) and now appears to have little to do with external use of

Re: [Clamav-users] Clamav Home Page Problem

2005-02-23 Thread Tomasz Kojm
On Tue, 22 Feb 2005 10:09:29 -0600 (CST) Ken Jones [EMAIL PROTECTED] wrote: Ok, I stand corrected ... but it might be nice, as that page also shows the latest dat revisions, to have a line indicating the latest stable release version ... [...] Just a suggestion :) Accepted :-) -- oo

Re: [Clamav-users] Clamav.conf parameters revisited

2005-02-23 Thread Tomasz Kojm
On Mon, 21 Feb 2005 21:21:09 +0100 Harald Villemoes [EMAIL PROTECTED] wrote: I have a novice question. I am running clamav on a W2003server (clamWin / cygwin) and are very happy with it. I use it through the clamscan interface, but expect to be able to run much faster using clamav and

Re: [Clamav-users] Exclude with clamdscan

2005-02-23 Thread Tomasz Kojm
On Tue, 22 Feb 2005 15:30:27 - Plant, Dean [EMAIL PROTECTED] wrote: Is it possible to completely exclude the /net folder so that when clamscan hits this directory it does not check the contents of it? Yes, it's in my TODO. -- oo. Tomasz Kojm [EMAIL PROTECTED]

[Clamav-users] Manual self check with clamd

2005-02-23 Thread Shaun Bugler
Hi, I am busy implementing a new method for updating our clam database files (1 server uses freshclam, all other machines rsync the update to themselves). This works perfectly. Only problem now is, clam doesn't reload the database right away like with freshclam. I run clamd RELOAD, it reloads

[Clamav-users] Thank You!

2005-02-23 Thread Yatin Shah (QualiSpace, Sales)
Thank You! Thank you very much for mailing me. I will definitely check your mail and get back to you. Meanwhile, please note: If you have any support related query, please send an email to [EMAIL PROTECTED] If you have any new order, please send an email to [EMAIL PROTECTED] If you have any