hi
i d like to know if it s possible with clamav to delay scanning new emails
with attachments for 6 hours in case of the discovery of a new virus.
That would be for not being attacked between the time the virus is found
and the updated signature clamav is there
thx all
(by the way is there
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tuesday, 09.11.2004 at 11:20 +0100, [EMAIL PROTECTED] wrote:
i d like to know if it s possible with clamav to delay scanning new emails
with attachments for 6 hours in case of the discovery of a new virus.
That would be for not being attacked
-Original Message-
From: Tomasz Kojm [mailto:[EMAIL PROTECTED]
Subject: Re: [Clamav-users] Clamav and the CR Vulnerability
In 0.80 --mbox is enabled by default, and --no-mail disables it.
There's no --mail switch, though.
I thought it was --mbox, but there was no --mbox switch
I've just spent the last couple of hours trying to compile just the
ClamAV-Milter, and was having errors like;
clamav-milter.c: In function `main':
clamav-milter.c:1175: `SHUT_RD' undeclared (first use this function)
clamav-milter.c:1175: (Each undeclared identifier is reported only once
error being logged.
After installing 80q, from the CVS source, the problems are resolved.
Thanks !
- Ken
Yay!
I also upgraded to ClamAV version devel-20041109, clamav-milter version 0.80q.
It works just fine as far as I can tell right now, even on my crappy old i586
server-wannabe.
(had to upgrade
version / database version.
X-Virus-Scanned: ClamAV version devel-20041109, clamav-milter version
0.80q on host
- - Ken
- --
Ken Jones
[EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (SunOS)
iD8DBQFBkQxGhmzY3eSPw9ERAhfvAJ0WHt8G1OiizrF0OBiV93Yec4DecwCeOsQv
I've just installed ClamAV 0.80 onto a new mail server. It's running
well through daemontools, as the test EICAR virus I send it through
qmail-scanner is caught, marked and quarantined. However, I cannot get
it to log to /var/log/clamd.
/service/clamd/run:
#!/bin/sh
exec 21
exec
In my logs I'm seeing messages like:
hit max-children limit (40 = 40): waiting for some to exit
This occurs whether or not I specify --max-children=0 in the clamav-milter
command line or not. (normally not specified)
Clamav-milter 0.80q, Linux kernel 2.4.22
Did I miss something?
-Troy
Matt Gourley wrote:
I've just installed ClamAV 0.80 onto a new mail server. It's running
well through daemontools, as the test EICAR virus I send it through
qmail-scanner is caught, marked and quarantined. However, I cannot get
it to log to /var/log/clamd.
/service/clamd/run:
#!/bin/sh
exec
Rick Macdougall wrote:
Matt Gourley wrote:
I've just installed ClamAV 0.80 onto a new mail server. It's running
well through daemontools, as the test EICAR virus I send it through
qmail-scanner is caught, marked and quarantined. However, I cannot
get it to log to /var/log/clamd.
On Tuesday 09 Nov 2004 6:33 pm, Internet Helpdesk wrote:
In my logs I'm seeing messages like:
hit max-children limit (40 = 40): waiting for some to exit
This occurs whether or not I specify --max-children=0 in the clamav-milter
command line or not. (normally not specified)
Do you have
Matt Gourley wrote:
Rick Macdougall wrote:
Matt Gourley wrote:
clamd.conf:
FixStaleSocket
Foreground
LocalSocket /tmp/clamd
LogVerbose
MaxThreads 20
ScanArchive
ScanHTML
ScanMail
User qscand
Hi,
Logfile /dev/stdout (or stderr) in clamd.conf
I tried that. If I do that, I get either:
ERROR:
Rick Macdougall wrote:
Matt Gourley wrote:
Rick Macdougall wrote:
Matt Gourley wrote:
clamd.conf:
FixStaleSocket
Foreground
LocalSocket /tmp/clamd
LogVerbose
MaxThreads 20
ScanArchive
ScanHTML
ScanMail
User qscand
Hi,
Logfile /dev/stdout (or stderr) in clamd.conf
I tried that. If I do that,
On Tue, 9 Nov 2004 [EMAIL PROTECTED] wrote:
i d like to know if it s possible with clamav to delay scanning new emails
with attachments for 6 hours in case of the discovery of a new virus.
Wow, you are a brave soul. If our customers were delayed by 6 hours they
would go elsewhere. A
Do you have MaxThreads set in clamd.conf?
Yes.
Sorry, I also wasn't looking at a recent man page for clamav-milter. I now
see the reference under --max-children
-Troy
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Matt Gourley wrote:
Logfile /dev/stdout (or stderr) in clamd.conf
I tried that. If I do that, I get either:
ERROR: Problem with internal logger. Please check the
permissions on the /dev/stdout file.
ERROR: Can't open /dev/stdout in append mode (check permissions!).
or the same for /dev/stderr.
[EMAIL PROTECTED] wrote:
On Mon, 8 Nov 2004 [EMAIL PROTECTED] wrote:
Tim Howell wrote:
Have any of you thought of what it would take to use Clam to scan
mailboxes stored on an Exchange server?
Hmmm...
Get a list of mailboxes via LDAP
Connect to each mailbox in turn using
I read a security blurb from Watchguard today that mentions a new virus
dubbed Bofra.A. I looked thru the mailing list and haven't seen any
mention of it yet... Does ClamAV catch this one yet?
Here's the article where I got the info from:
Drat!
In my logs I've noticed lots of messages like:
-- Nov 9 13:45:25 mail clamd[4635]: /clamquar/041109/msg.FsV5ns: Unable to
open file or directory ERROR --
Nov 9 13:45:27 mail clamd[4635]: /clamquar/041109/msg.W4MIYF:
Worm.SomeFool.P FOUND
Nov 9 13:45:27 mail
Drat!
In my logs I've noticed lots of messages like:
-- Nov 9 13:45:25 mail clamd[4635]: /clamquar/041109/msg.FsV5ns: Unable
to
open file or directory ERROR --
check your quarantine dir /clamquar and ensure it as well as any sub
directories have correct permissions.
I would look in the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Rick Macdougall wrote:
| /service/clamd/run:
|
| #!/bin/sh
| exec 21
| exec /usr/local/bin/softlimit -a 4000 \ /usr/local/bin/setuidgid
qscand /usr/local/sbin/clamd
|
|
| /service/clamd/log/run:
|
| #!/bin/sh
| exec /usr/local/bin/setuidgid qscand
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Tim Howell
Sent: Tuesday, November 09, 2004 3:44 PM
[EMAIL PROTECTED] wrote:
On Mon, 8 Nov 2004 [EMAIL PROTECTED] wrote:
Tim Howell wrote:
Have any of you thought of what it would take to use Clam
Andrej Trobentar wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Rick Macdougall wrote:
| /service/clamd/run:
|
| #!/bin/sh
| exec 21
| exec /usr/local/bin/softlimit -a 4000 \ /usr/local/bin/setuidgid
qscand /usr/local/sbin/clamd
|
|
| /service/clamd/log/run:
|
| #!/bin/sh
| exec
Samuel Benzaquen wrote:
Hmmm...
Get a list of mailboxes via LDAP
Connect to each mailbox in turn using Mail::IMAPClient Walk through
Doesn't that idea forces you to have everyone's password to connect
via the IMAP server?
That would tear it.
Exchange does allow you to declare
Hi all,
I have recently seen on this list that Matt Gourly has had problems
getting clamd to start correctly under daemontools and log to the
specified directory.
The following has been tested (by me) to work on a RedHat 7.3 installation:
/etc/clamd.conf:
--BEGIN--
LogFile /dev/stderr
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matt Gourley wrote:
| Andrej Trobentar wrote:
| Put
|
| exec /usr/local/bin/softlimit -a 4000 /usr/local/sbin/clamd
|
| and
|
| exec /usr/local/bin/multilog t s100 n20 /var/log/clamd
|
| in your startups files (without setuidgid). Works for me
I was trying to get MailFollowUrls to work today on a test server and
had some issues. After looking at the clamav-0.80 source code I think
that it's only possible to use this feature when you have ScanMail
enabled? Is this correct?
Currently I am using the clamav daemon that listens on a port.
[EMAIL PROTECTED] wrote:
Doesn't that idea forces you to have everyone's password to connect
via the IMAP server?
That would tear it.
Exchange does allow you to declare administrative accounts with complete access to all mailboxes. But I don't know enough about IMAP to know if you can log in
Jason Haar wrote:
No - you can do it. If you assign account DOM\imapadmin to have
full access rights to everyone's mailboxes, then you can login via
IMAP as DOM/imapadmin/mailbox_alias . Yes, it has to be /, and
mailbox_alias is the alias associated with a mailbox - typically
either the
On Tuesday 09 Nov 2004 10:26 pm, [EMAIL PROTECTED] wrote:
I was trying to get MailFollowUrls to work today on a test server and
had some issues. After looking at the clamav-0.80 source code I think
that it's only possible to use this feature when you have ScanMail
enabled? Is this correct?
check your quarantine dir /clamquar and ensure it as well as any sub
directories have correct permissions.
Did it before. They're fine.
I would look in the clamd.conf file at specifically these settings:
LogFile /var/adm/clamd/clamd.log
TemporaryDirectory /tmp
Those are fine too. Any other
Hello, I have maybe a stupid question but how can I restore mail that is
false virus positives and is saved in quarantine-dir ?
Thanx.
BK
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Internet Helpdesk wrote:
check your quarantine dir /clamquar and ensure it as well as any sub
directories have correct permissions.
Did it before. They're fine.
Parent directory perms?
Matt
___
Yes I searched the archives, and it was definitely
helpful. Trying to build clamav 0.80, already have .70rc1 installed.
[EMAIL PROTECTED] clamav-0.80]# clamd --version
clamd / ClamAV version 0.70-rc
Now, onto the problem. Heres how Im
configuring it:
$ ./configure
Jon Dossey wrote:
Yes - I searched the archives, and it was definitely helpful. Trying to
build clamav 0.80, already have .70rc1 installed.
Which O.S?
Matt
p.s: Please post in plaintext.
___
[EMAIL PROTECTED] clamav-devel]$ uname -a
Linux hostname 2.4.25 #2 Wed Mar 17 17:03:25 CST 2004 i686 i686 i386
GNU/Linux
I want to say this was originally a Redhat 8 machine, judging from the
following output:
[EMAIL PROTECTED] clamav-devel]# gcc -v
yadda yadda yadda
gcc version 3.2 20020903
On Tue, 9 Nov 2004 14:54:05 -0500
Kevin Hanser [EMAIL PROTECTED] wrote:
I read a security blurb from Watchguard today that mentions a new
virus dubbed Bofra.A. I looked thru the mailing list and haven't seen
any mention of it yet... Does ClamAV catch this one yet?
- clamav-virusdb archives
What is going to be involved with creating another function such as
"FollowUrls". Can the stream pass a pointer to such a function?
Thanks
zack
Zachary Buckholz - Linux Administrator -
GoDaddy.com14455 North Hayden Road, Suite 226, Scottsdale, AZ
85260480-505-8871 x4322 - 480-215-5218 (Cell)
Tue Nov 9 22:03:30 EST 2004
Hello,
I am looking for some assistance in tracking down a failure of clamd
after an upgrade to ClamAV 0.80/582/. Interactively, clamscan and clamd
appear to function normally and correctly but when called from MIMEDefang-filter
(mimedefang.pl) , clamd returns an
Tim Howell wrote:
How do you grant an account full access to all mailboxes?
--TWH
one at a time
Obviously there will be some tool you can get/buy that will allow you to
automate it, but via the Great GUI - one at a time... :-(
Jason
___
-Original Message-
From: [EMAIL PROTECTED] [mailto:clamav-users-
[EMAIL PROTECTED] On Behalf Of Tim Howell
Sent: 9. november 2004 23:55
To: ClamAV users ML
Subject: RE: [Clamav-users] ClamAV and Exchange mailboxes...
Jason Haar wrote:
No - you can do it. If you assign
41 matches
Mail list logo
