Re: [Clamav-users] Missed Virus

* Ralf Hildebrandt [EMAIL PROTECTED]: False positive? By any means, submit it to the team. http://www.clamav.net/sendvirus/ ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] outdated version?

version: 0.91.1 DON'T PANIC! Read http://www.clamav.net/support/faq ^^ Read it, will you? -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155

Re: [Clamav-users] need help

you can do that. But you do have to configure something somewhere -- either clamd OR amavisd-new. -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax

Re: [Clamav-users] need help

* Thomas Spuhler [EMAIL PROTECTED]: I wish Amavis would support clamd. It does. It's in the amavis.conf file but it just doesn't use clamd but uses that backup clamscan and this is a disaster. What's in the log? It uses clamd happily here... -- Ralf Hildebrandt (i.A. des IT-Zentrums

Re: [Clamav-users] need help

* Chuck Swiger [EMAIL PROTECTED]: Amavisd-new supports clamdscan just fine. Actually, it uses it's own code, which resembles clamdscan. -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame

Re: [Clamav-users] need help

* Chuck Swiger [EMAIL PROTECTED]: On Jul 9, 2007, at 12:17 PM, Ralf Hildebrandt wrote: Amavisd-new supports clamdscan just fine. Actually, it uses it's own code, which resembles clamdscan. You're right-- perhaps I should have said, it supports accessing clamd using the same mechanism

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

my adapted script here: http://www.arschkrebs.de/postfix/UpdateSaneSecurity.sh -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450 570

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

//main.inc (it has a trainling slash) -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450 570-962 IT-Zentrum Standort CBFsend

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

for the mirrors are incorrect and for some reason it pukes on the output of Debian's clamd --debug -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450

Re: [Clamav-users] Zip module failure ERROR

* Don Drake [EMAIL PROTECTED]: I would, but I'm getting the following error in Bugzilla: You are not authorized to access bug #396. I wonder why that is -- it's a stupid idea IMHO. -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin Berlin

Re: [Clamav-users] Problems when i start the daemon

process is still running... -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450 570-962 IT-Zentrum Standort CBFsend

Re: [Clamav-users] Edit postmaster@ in email

edit the from in the email? Thanks in advance Which program are you using to scan the mail? clamsmtpd? amavisd-new? -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und

Re: [Clamav-users] Edit postmaster@ in email

would edit the from in the email? Thanks in advance Which program are you using to scan the mail? clamsmtpd? amavisd-new? Sorry about that, i am just using clamd as far as i know. I don't think so, since that just does the scanning, but doesn't handle mail -- Ralf Hildebrandt (i.A. des

Re: [Clamav-users] clamav auto scan Linux system

* Wilson Kwok [EMAIL PROTECTED]: Hi, Can Clamav auto scan the Linux system directory, and then after scan can send the results to email such as root, how can I do that ? clamscan / | mailx -s Result root -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite

Re: [Clamav-users] clamav as postfix check_policy_service, not content_filter

, etc). Thus, clamav cannot work as a policy server, since the virus is in the mail... Do you by chance mean an smtpd_proxy_filter? -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung

Re: [Clamav-users] oversized.zip problem

* saravanan ganapathy [EMAIL PROTECTED]: Hi, I am using clamav-0.84 ( Debian Version) with Dansguardian. My config looks like as follows ArchiveMaxRecursion 0 ArchiveMaxFiles 0 ArchiveMaxFileSize 0 ArchiveMaxCompressionRatio 0 Does setting them to 0 really disable the limits? -- Ralf

Re: [Clamav-users] libcrypto.so.4

* David Kandou [EMAIL PROTECTED]: Dear all, When I want to install clamav 0.85 (rpm version) i found that clamav need libcrypto.so.4 installed. Can anybody help me how to get libcrypto.so.4 ??? Install the OpenSSL libraries. -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL

Re: [Clamav-users] ClamAV -- Squid Cache Integration

to virus scanning. -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450 570-962 IT-Zentrum Standort CBF send no mail to [EMAIL

Re: [Clamav-users] Can phishing be considered one kind of spam ?

Can phishing be considered one kind of spam ? What is the universe in and where are God's parents? 42 -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-Berlin

Re: [Clamav-users] Long running clamscan processes...

-devel-latest. The scan ran for about 15 minutes and then segfaulted. Do you need me to send you any additional information RE: the configuration? Same here, the thing suddenly crashes every now and then... -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite

Re: [Clamav-users] Long running clamscan processes...

* Tomasz Kojm [EMAIL PROTECTED]: Such reports are useless to us. We need files to reproduce the problem or at least stack backtraces. Send them to [EMAIL PROTECTED] First I need to find the core file... -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite

Re: [Clamav-users] Long running clamscan processes...

* Nigel Horne [EMAIL PROTECTED]: Same here, the thing suddenly crashes every now and then... What version of zlib? What is the stacktrace from gdb? Have you sent me the errant message as requested? I haven't received it yet. Like I said, I have yet to find the corefile. -- Ralf

Re: [Clamav-users] Long running clamscan processes...

* Ralf Hildebrandt [EMAIL PROTECTED]: * Nigel Horne [EMAIL PROTECTED]: Same here, the thing suddenly crashes every now and then... What version of zlib? What is the stacktrace from gdb? Have you sent me the errant message as requested? I haven't received it yet. Like I said, I have

Re: [Clamav-users] Long running clamscan processes...

* Nigel Horne [EMAIL PROTECTED]: I set ulimit -c accordingly and am waiting for the next crash... What version of zlib? ii zlib1g 1.2.2-3 compression library - runtime ii zlib1g-dev 1.2.2-3 compression library - development -- Ralf Hildebrandt

Re: [Clamav-users] Exploit.W32.MS05-002 False Positives

until the other issue is dealt with. Am I right that the MS05-002 check is built into the clamscan executable (libclamav) an is not a true signature? Same here, what is the fix? -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin Berlin

Re: [Clamav-users] Exploit.W32.MS05-002 False Positives

* Francis Stevens [EMAIL PROTECTED]: My fix was to go back to 0.81. Hopefully the ClamAV team will be able to suggest a better one My point exactly. -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450

Re: [Clamav-users] Exploit.W32.MS05-002 False Positives

* Trog [EMAIL PROTECTED]: You can apply the enclosed patch if you want less stringent checking. Is that in the CVS as well? -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung

Re: [Clamav-users] Exploit.W32.MS05-002 False Positives

* Francis Stevens [EMAIL PROTECTED]: All the problem files I've had are Powerpoint and Word files. For the Powerpoint files it was a common background image. Same here! -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel

Re: [Clamav-users] Why use amavis over simscan?

* [EMAIL PROTECTED] [EMAIL PROTECTED]: I'm setting up some email gateways for small businesses and was wondering what program the people on this list would use to combine clam and spamassassin for an email gateway. What is simscan? -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL

Re: [Clamav-users] Mail::ClamAV on FC2

* Gerry Doris [EMAIL PROTECTED]: I have been unable to install the perl module Mail::ClamAV on either of my Fedora Core 2 boxes. Why? -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame

Re: [Clamav-users] freshclam.pid: Permission denied

in freshclam.conf has been disabled (default): #PidFile /var/run/freshclam.pid The default value is being used: /var/run/freshclam.pid != /var/clamav/freshclam.pid ! -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155

Re: [Clamav-users] Regd. ClamAV Virus protection

result, but was unable to block test number 20,23,24 and 25, How does your mail server interface with clamav? -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

* Fajar A. Nugraha [EMAIL PROTECTED]: Which brings my earlier suggestion. Is there any way to put a built-in memory limiter (not external program like softlimit) to clamd? Why add code to clamd when a good unix-like solution already exists? -- Ralf Hildebrandt (i.A. des IT-Zentrum

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

. It doesn't die, it's being killed by the kernel. -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450 570-916 IT-Zentrum Standort CBF

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

* Jason Haar [EMAIL PROTECTED]: On Wed, Sep 15, 2004 at 09:58:41AM +0200, Ralf Hildebrandt wrote: Because current clamd implementation is not to die on memory allocation error, but sleep. It doesn't die, it's being killed by the kernel. No - clamd does a malloc and that fails

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

* Trog [EMAIL PROTECTED]: Ok, THAT's bad - and should be fixed. If it were true it would be. Please point me at some code in clamd that does that. That was not my claim, but the other person's. -- Ralf Hildebrandt (i.A. des IT-Zentrum) [EMAIL PROTECTED] Charite

<    1   2