Re: [Clamav-users] Worm.SomeFool.Q not recognized

2004-04-21 Thread Trog
On Wed, 2004-04-21 at 08:39, Riccardo Ghiglianovich wrote: #clamscan --version clamscan / ClamAV version 0.70-rc (upgrade to 0.70) the same file I uploaded to test-clamav manually scanned: Looks like you didn't specify --mbox -trog signature.asc Description: This is a digitally

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Trog
On Wed, 2004-04-21 at 09:37, Andrea Trasatti wrote: As you can see, clamscan catches the worm, while clamdscan doesn't. I checked more than once and I only have one main.cvd and one daily.cvd. How do I get the database location of clamdscan? Where should I change it? clamdscan sends the

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Lionel Bouton
Andrea Trasatti wrote the following on 04/21/2004 10:37 AM : [...] As you can see, clamscan catches the worm, while clamdscan doesn't. I checked more than once and I only have one main.cvd and one daily.cvd. How do I get the database location of clamdscan? Where should I change it? Do you

Re: [Clamav-users] upgrading clamav changes permissions on directories?

2004-04-21 Thread Kritof Petr
Jim Maul wrote: I just upgraded my clamav RPMs from 0.70rc to 0.70 (from http://crash.fce.vutbr.cz/crash-hat/1/clamav/) Since i am running qmail with qmail-scanner, i run clamav as user qscand and have to change /var/run/clamav, /var/log/clamav and /var/lib/clamav to be owned by qscand. While

Re: [Clamav-users] Syslog : write failure to clamd

2004-04-21 Thread Vital
Clamd + clamav-milter work fine BUT: in syslog sometime clamav-milter[953]: write failure to clamd sendmail[18248]: i2SEqA0C018248: Milter: data, reject=451 4.7.1 Please try again later I have to run daemon with option -dont-scan-on-error. Is it normal? P.S. To my supervision, it

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Fajar A. Nugraha
Andrea Trasatti wrote: Hello all, I have posted a few messages about clamd not detecting some SomeFool variants when scanning mail, but clamscan was detecting them. While reading some man pages and the conf files, I found another binary called clamdscan. I ran it and this is what turned out:

Re: [Clamav-users] Syslog : write failure to clamd

2004-04-21 Thread Trog
On Wed, 2004-04-21 at 10:25, Vital wrote: Clamd + clamav-milter work fine BUT: in syslog sometime clamav-milter[953]: write failure to clamd sendmail[18248]: i2SEqA0C018248: Milter: data, reject=451 4.7.1 Please try again later I have to run daemon with option -dont-scan-on-error.

Re: [Clamav-users] upgrading clamav changes permissions on directories?

2004-04-21 Thread Trog
On Wed, 2004-04-21 at 10:58, Dilip M wrote: On Wed, 21 Apr 2004 11:02:02 +0200, Kritof Petr [EMAIL PROTECTED] wrote: Jim Maul wrote: I just upgraded my clamav RPMs from 0.70rc to 0.70 (from http://crash.fce.vutbr.cz/crash-hat/1/clamav/) Since i am running qmail with qmail-scanner,

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Trog
On Wed, 2004-04-21 at 10:51, Riccardo Ghiglianovich wrote: wow, I havw the exact opposite : clamscan does NOT detect, and clamdscad does it # clamscan 5279D9E6.39B 5279D9E6.39B: OK - --- SCAN SUMMARY --- Known viruses: 21162 Scanned directories: 0 Scanned files: 1

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Andrea Trasatti
On 21 Apr 2004 at 9:49, Trog wrote: On Wed, 2004-04-21 at 09:37, Andrea Trasatti wrote: As you can see, clamscan catches the worm, while clamdscan doesn't. I checked more than once and I only have one main.cvd and one daily.cvd. How do I get the database location of clamdscan?

[Clamav-users] Re: Problems after upgraded to 0.70-1 (from 0.70-rc1)

2004-04-21 Thread Mimmus
How did you know the viruses are going through? Do you have viruses in your INBOX? Next antivirus (Trend InterScan VirusWall) detects them. If yes, look at mail headers for X-Virus-Scanned: clamd / ClamAV version 0.70, clamav-milter version 0.70j I was able to see this header. I saw also

Re: [Clamav-users] Problems after upgraded to 0.70-1 (from 0.70-rc1)

2004-04-21 Thread Peter van der Does
It seems like I had the same problem, some Sober.F messages weren't caught. I submitted one as a new virus and one of the members of the virus db team told me he caught the virus. He used .70-rc1 and I use .70. After some debuging, going through the sources and talking to one of the developers it

[Clamav-users] New user

2004-04-21 Thread Chalonec Roger
I am new to Fedora and so new to clamav. Can someone provide me with the easiest way to download, install, and run clamav? I am interested in protecting inbound ftp file transfers and periodically scanning my fedora system. I am not running samba nor NFS. Is there a way to download and install

[Clamav-users] New User

2004-04-21 Thread Chalonec Roger
I am new to Fedora and so new to clamav. Can someone provide me with the easiest way to download, install, and run clamav? I am interested in protecting inbound ftp file transfers and periodically scanning my fedora system. I am not running samba nor NFS. Is there a way to download and install

Re: [Clamav-users] .ZIP file scanning

2004-04-21 Thread Odhiambo Washington
* Ricardo Bernardes [EMAIL PROTECTED] [20040421 14:36]: wrote: hi is it possible to stop ClamAV from scanning .zip files? (RedHat 8; Sendmail; Mailscanner) Tell whatever app that calls clamav to exempt .zip files. That's it. cheers - wash

Re: [Clamav-users] upgrading clamav changes permissions on directories?

2004-04-21 Thread Odhiambo Washington
* Dilip M [EMAIL PROTECTED] [20040421 14:32]: wrote: On Wed, 21 Apr 2004 11:02:02 +0200, Kritof Petr [EMAIL PROTECTED] wrote: Jim Maul wrote: I just upgraded my clamav RPMs from 0.70rc to 0.70 (from http://crash.fce.vutbr.cz/crash-hat/1/clamav/) Since i am running qmail with qmail

[Clamav-users] clamav update to 0.70

2004-04-21 Thread Kristof Hardy
Just to inform.. The update to 0.70 (from 0.70rc1) went perfect. System used is Red Hat Linux 9 and CommuniGate Pro as mailserver. cgpav 1.3 as interface between the 2.. Cheers.. Kristof --- This SF.Net email is sponsored by: IBM Linux

RE: [Clamav-users] upgrading clamav changes permissions on directories?

2004-04-21 Thread Jim Maul
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kristof Petr Sent: Wednesday, April 21, 2004 5:02 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] upgrading clamav changes permissions on directories? Jim Maul wrote: I just upgraded my

[Clamav-users] Re: [Clamav-devel] Patches For Your Amusement

2004-04-21 Thread Joe Maimon
I have setup a small page for all my (updated) clamav patches for purposes of convenience. http://www.jmaimon.com/clamav (still running ok) I will stop harassing you all now about this. Joe Maimon wrote: These patches --- This SF.Net email

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-21 Thread Jim Maul
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Andreas Haase Sent: Tuesday, April 20, 2004 6:55 PM To: [EMAIL PROTECTED] Subject: RE: [Clamav-users] Problems detecting Worm.SomeFool.Y Hello, Have you tried to locate or find *.cvd? Are there

[Clamav-users] Newbie need help

2004-04-21 Thread Chan Ho
I set my server to download virus db automatically. However, do I need to reload it as I see that clamd has the reload command. If so, how to do so?

[Clamav-users] [OT] Watchdog for freshclam

2004-04-21 Thread Jorge Valdes
I had a problem with freshclam, I run it in daemon mode and for some reason it died. A couple of days passed before I realized this, and restarted it. This by itself its not that bad, although my virus signatures were out of date. :( plug I recently came across monit, a daemon that watches

[Clamav-users] clamav...

2004-04-21 Thread bruce
hi... we're new to clamav and trying to get a better understanding. we've looked through the clamav docs and from our understanding, the app appears to be a mail server oriented spam/virus app. is this pretty much the case..?? we're looking for an open source app that can be used to do

Re: [Clamav-users] Newbie need help

2004-04-21 Thread Steven Stern
On Thu, 22 Apr 2004 00:20:03 +0800, Chan Ho [EMAIL PROTECTED] wrote: I set my server to download virus db automatically. However, do I need to reload it as I see that clamd has the reload command. If so, how to do so? Look at freshclam.conf. Edit the line 'NotifyUpdate'. -- Steve

Re: [Clamav-users] Newbie need help

2004-04-21 Thread [EMAIL PROTECTED]
Chan Ho said: I set my server to download virus db automatically. However, do I need to reload it as I see that clamd has the reload command. If so, how to do so? Chan: clamd should be checking every hour by default. Look at /usr/local/etc/calmav.conf for the database integrity check. --

Re: [Clamav-users] Re: WORM_SWEN.A undetected

2004-04-21 Thread Bit Fuzzy
- Original Message - From: Virgo Pärna [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, April 21, 2004 11:00 AM Subject: [Clamav-users] Re: WORM_SWEN.A undetected On Wed, 21 Apr 2004 09:54:35 -0400, Bit Fuzzy [EMAIL PROTECTED] wrote: Hmmm, I wonder why mine didn't I

RE: [Clamav-users] clamav...

2004-04-21 Thread Shannon Werb
Take a look at clamwin, which uses clamav, and works with Windows. http://clamwin.sourceforge.net/ Regards, Shannon http://www.battcave.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of bruce Sent: Wednesday, April 21, 2004 11:54 AM To: [EMAIL

[Clamav-users] Issuing clamd commands when using UNIX (local) socket

2004-04-21 Thread Michael Mangino
When I run clamd using a TCP socket, I can telnet to clamd's port and = issue commands (like PING and SHUTDOWN). But how do I issue commands when running clamd with a UNIX (local) = socket? --Mike --- This SF.Net email is sponsored by: IBM

Re: [Clamav-users] Clamav and microsoft exchange.

2004-04-21 Thread Peter Bonivart
Bora wrote: Peter, I know that mailscanner has documentation for everything except with qmail, do know where I can find it? I think these are the guys who added support for qmail to MailScanner, they package the whole thing also: http://opencomputing.sourceforge.net/ -- /Peter Bonivart --Unix

Re: [Clamav-users] clamav...

2004-04-21 Thread Peter Bonivart
bruce wrote: we're new to clamav and trying to get a better understanding. we've looked through the clamav docs and from our understanding, the app appears to be a mail server oriented spam/virus app. is this pretty much the case..?? Clam's primary target is mail servers, yes. we're looking for

Re: [Clamav-users] Newbie need help

2004-04-21 Thread Chan Ho
thats the problem, i don't really know how should I edit this line. - Original Message - From: Steven Stern [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 22, 2004 12:55 AM Subject: Re: [Clamav-users] Newbie need help On Thu, 22 Apr 2004 00:20:03 +0800, Chan Ho [EMAIL

Re: [Clamav-users] [OT] Watchdog for freshclam

2004-04-21 Thread Tomasz Kojm
On Wed, 21 Apr 2004 10:48:10 -0600 Jorge Valdes [EMAIL PROTECTED] wrote: I had a problem with freshclam, I run it in daemon mode and for some reason it died. A couple of days passed before I realized this, and restarted it. This by itself its not that bad, although my virus signatures were

Re: [Clamav-users] Newbie need help

2004-04-21 Thread Werner Macho
On Wed, 2004-04-21 at 20:24, Chan Ho wrote: thats the problem, i don't really know how should I edit this line. well, to be honest .. then i'd suggest to read the linux handbook or learn how to use the editor (whatever editor you choose. i think you should start first at learning how to use

Re: [Clamav-users] Newbie need help

2004-04-21 Thread Steven Stern
On Thu, 22 Apr 2004 02:24:57 +0800, Chan Ho [EMAIL PROTECTED] wrote: thats the problem, i don't really know how should I edit this line. - Original Message - From: Steven Stern [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 22, 2004 12:55 AM Subject: Re: [Clamav-users]

[Clamav-users] Re: Newbie need help

2004-04-21 Thread Joacim Ekroth
Chan Ho wrote: thats the problem, i don't really know how should I edit this line. Check the manpage for freshclam: --daemon-notify=/path/to/clamav.conf Notify the daemon about the new database. By default it reads a hardcoded config file but you can use an another

[Clamav-users] sharing the virus database ?

2004-04-21 Thread Pat Masterson
My internet system gets the realtime signature updates a few times a day, but I need some internal systems to get the updates. Can I: -use FTP to copy the database internally? -make the internet system a database server somehow? Any suggestions are welcome. -pat

[Clamav-users] Milter errors after upgrade of clamav from 0.68 to 0.70

2004-04-21 Thread Dan O'Brien
I attempted to upgrade my ClamAV from 0.68 to 0.70 this morning. 0.68 has been running flawlessly on Fedora Core 1 patched to reasonably current (I haven't put the latest kernel on, I'm still at 2.4.22-2174nptl). The error I get is Apr 21 10:57:27 sweep sendmail[1539]: i3LEvR8Z001539:

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-21 Thread Andreas Haase
Hello, I must have missed where you stated this. Sigtool uses a hardcoded database directory which is determined at compile time. Thats what I meant being the actual state. Why using hardcoded directories if there is a possibility to change it in the config files? You may want to smylink

[Clamav-users] Fw: [Bug 105169] Filter for Attachments

2004-04-21 Thread Jon Roland
FYI. This is my last submission to the Mozilla Bugzilla that partially addresses the needs of newbies who want a user-friendly gui or wizard to set up and configure everything, requiring the user only to make choices among easily-understood menu options. Simply telling newbies to learn Linux

[Clamav-users] 70rc1 problems

2004-04-21 Thread Marc Balmer
Hi all I updated a few servers to ClamAV 70rc1. We only use clamd. OS is OpenBSD 3.5. The problem we have: clamd terminates. Seems unstable like the 6x series. Did anyone succed to use this software in a production environment? - Marc Balmer

[Clamav-users] Remote clamav implementation

2004-04-21 Thread Tom Walsh
I know that Tomasz had mentioned that the clamav developers were working on the ICAP (i-cap.org) implementation of clamd back in March. I have not heard anything about the status of this recently and was curious to see where this is at. I am really interested in offloading my clamd scanning to a

[Clamav-users] Unable to open file or directory in OLE2 docs

2004-04-21 Thread Scott Call
With the upgrade to 0.70 release I tried re-enabling OLE2 scanning with my clamd + exiscan setup, and I got these error again: 2004-04-21 15:00:25 1BGPlY-0004FD-5J malware acl condition: clamd: ClamAV returned /var/spool/exim/scan/1BGPlY-0004FD-5J/1BGPlY-0004FD-5J-0.doc: Unable to open file or

Re: [Clamav-users] clamav-milter Segmentation fault

2004-04-21 Thread Tristan Griffiths
Nigel Horne wrote: On Saturday 17 Apr 2004 5:16 pm, Vincent Aniello wrote: When I try starting clamav-milter it immediately dies with the message Segmentation fault (core dumped): [EMAIL PROTECTED] init.d]# /usr/local/sbin/clamav-milter Segmentation fault (core dumped) [EMAIL PROTECTED]

Re: [Clamav-users] clamav-milter Segmentation fault

2004-04-21 Thread Tristan Griffiths
Vincent Aniello wrote: Quoting Nigel Horne [EMAIL PROTECTED]: I can't reproduce your problem. Did you do the following: make distclean; configure various options; make install? I upgraded gcc from 2.96 to 3.3.3 and recompiled clamav 0.70. The program clamav-milter works now. Thanks.

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Todd Lyons
On Wed, 2004-04-21 at 03:25, Trog wrote: Is that file an email? If so, RTFM on clamscan. Maybe a feature could be if the first 4 bytes match the regex /From/ then clamscan could assume --mbox. Blue skies... Todd --- This

[Clamav-users] freshclam failed?

2004-04-21 Thread Matthew Daubenspeck
I got this on two machines today during a manual freshclam: # freshclam ClamAV update process started at Wed Apr 21 21:40:47 2004 Reading CVD header (main.cvd): OK main.cvd is up to date (version: 22, sigs: 20229, f-level: 1, builder: tkojm) Reading CVD header (daily.cvd): OK Downloading

[Clamav-users] clamd.sock

2004-04-21 Thread David B. Reyes
Good day everyone. Where does the clamd.sock reside? isn't it created automatically? Am using clamav-0.70 does anyone have a sample copy of filtered_domains file for postfix? Could I take a look at what it looks like? Thanks --- This SF.Net