[Clamav-users] how to change clamav's warning message?
Hi, I'm using clamav together with amavisd-new. emails get virus checked and then delivered to the user. if an email contains a virus then there's following message displayed: WARNING: contains virus Worm.Sober.I how can I change this message? I didn't find any config options for customizing the message. andreas ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
RE: [Clamav-users] how to change clamav's warning message?
Use clamav-milter and create a template message. -Nigel ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
RE: [Clamav-users] how to change clamav's warning message?
On Mon, 2004-12-27 at 10:13 +, Nigel Horne wrote: Use clamav-milter and create a template message. but isn't clamav-milter supposed to be run with sendmail? I'm using postfix with amavisd-new andreas ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] how to change clamav's warning message?
On Mon, 27 Dec 2004 at 11:26:51 +0100, Andreas Kotowicz wrote: On Mon, 2004-12-27 at 10:13 +, Nigel Horne wrote: Use clamav-milter and create a template message. but isn't clamav-milter supposed to be run with sendmail? I'm using postfix with amavisd-new andreas The warning you mentioned most likely comes from amavisd-new, so just edit /usr/sbin/amavisd-new (or wherever it's placed in your system) - it's a perl script, so it's easy to modify text fragments. Before that, make sure that it isn't configurable in /etc/amavis/amavisd.conf - just in case, as modifying a program instead of its configuration file is a last resort. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] how to change clamav's warning message?
On Mon, Dec 27, 2004 at 11:00:24AM +0100, Andreas Kotowicz wrote: Hi, I'm using clamav together with amavisd-new. emails get virus checked and then delivered to the user. if an email contains a virus then there's following message displayed: WARNING: contains virus Worm.Sober.I how can I change this message? I didn't find any config options for customizing the message. Using Debian, you can find templates in /etc/amavis + the value of the variable read_l10n_templates you set in amavisd.conf. I don't know other custmizations by other distros. Bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: clamav-users Digest, Vol 4, Issue 71
Procmail. [EMAIL PROTECTED] wrote: Send clamav-users mailing list submissions to clamav-users@lists.clamav.net To subscribe or unsubscribe via the World Wide Web, visit http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than Re: Contents of clamav-users digest... Today's Topics: 1. Why use amavis over simscan? ([EMAIL PROTECTED]) 2. Re: Why use amavis over simscan? (Ralf Hildebrandt) 3. Re: Why use amavis over simscan? (Bill Randle) 4. Re: Why use amavis over simscan? (Bill Randle) 5. Re[2]: [Clamav-users] Clamav on Postfix (Happy Holidays to all) (Kev) 6. Re: Re[2]: [Clamav-users] Clamav on Postfix (Happy Holidays to all) (Bill Randle) 7. how to change clamav's warning message? (Andreas Kotowicz) 8. RE: how to change clamav's warning message? (Nigel Horne) 9. RE: how to change clamav's warning message? (Andreas Kotowicz) -- Message: 1 Date: Sun, 26 Dec 2004 19:11:29 - From: [EMAIL PROTECTED] [EMAIL PROTECTED] Subject: [Clamav-users] Why use amavis over simscan? To: clamav-users@lists.clamav.net Message-ID: [EMAIL PROTECTED] Content-Type: text/plain I'm setting up some email gateways for small businesses and was wondering what program the people on this list would use to combine clam and spamassassin for an email gateway. -- Steve Glines voice: 978-952-6340 www.is-cs.com fax: 978-952-8524 145 Foster Street cell: 617-549-7274 Littleton MA 01460 I'm a complex person. I have a real and an imaginary part. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] whitelist in 0.80
Hi, I'm using clamd and clamav-milter with sendmail. we have more than one smtp servers and emails sometimes are forwarded between these servers. clamd and clamav-milter runs on all smtp servers. in 0.7x, i used the localAddresses part of the clamav-milter.c file to prevent the messages being scanned more than once when they are forwarded between our own smtp servers. ip addresses were added to the end of the localAddresses list and clamav-milter was started as clamav-milter -Codq clmilter.sock in 0.80, structure of clamav-milter.c is totally changed. I'm trying to use the localnets part of the new clamav-milter.c to build a whitelist. When I add an ip address with 32 bit netmask to the localnets list, clamav stops scanning not just emails originating from that ip but all emails. Can you please tell me how to fix this problem.. thanks ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] whitelist in 0.80
Tayfun ASKER wrote: in 0.80, structure of clamav-milter.c is totally changed. I'm trying to use the localnets part of the new clamav-milter.c to build a whitelist. When I add an ip address with 32 bit netmask to the localnets list, clamav stops scanning not just emails originating from that ip but all emails. Can you please tell me how to fix this problem.. The mask is inverted. You want 0 bits, not 32. That tripped me up, too. I guess it was written by a C coder, not a network guy. Anyone who did MAKEMASK(24) thinking they were only opening up their /24 had better go change that to MAKEMASK(8), etc. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Clamav-milter not loading?
I have a machine that has been running sendmail with spamassassin for several months. Over the past week I have been trying to implement clamav into the mix. It compiled fine, clamd starts with no error, clamd log looks good, pid and socket are both there. When I launch the clamav milter it looks like it loads fine but no process ever shows. I have the line for the milter in then sendmail.cf and when I rebuild sendmail I start getting errors like this: milter_read(clmilter): cmd read returned 11, expecting 1431194445. I have googled away for some time now and can't figure out what this error means. I found a posting on this list about it but the guy's problem ended up being that his lines in the sendmail.cf were being put on 2 lines instead of one, and I am sure that this isn't my problem. Below I have included what information I thought might be helpful. Clamav-milter 0.80 Sendmail 8.12.10 BEGIN Clamd.conf LogFile /var/log/clamd.log LogFileMaxSize 2M LogTime LogSyslog LogVerbose PidFile /var/milter/clamd.pid LocalSocket /var/milter/clmilter.sock FixStaleSocket User clamav END Clamd.conf Sendmail Configuration: INPUT_MAIL_FILTER(`clmilter',`S=local:/var/milter/clmilter.sock, F=, T=S:4m;R:4m')dnl I know Clamd is working I ran clamdscan and it worked beautifully. The sockets also seem to be working; # ls -l /var/milter/ total 4 -rw-rw 1 clamav clamav 5 Dec 27 15:09 clamd.pid srwxrwxrwx 1 clamav clamav 0 Dec 27 15:09 clmilter.sock /rc.d/rc.local /usr/local/sbin/clamd /usr/local/sbin/clamav-milter -l -o -b -P -H /var/milter/clmilter.sock (My office wants just about all of the extra's on that we can have so that's the reason for all the runtime loads) I think my problem is somewhere when launching clamav-milter but I am not sure. I tried turning off all of the options just to see if it would load and show up but that didn't seem to help any. Please any help and I would be most grateful. Josh ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] clarm fail to detect this virus (W32.Netsky.Z@mm)
Hi all I have my system runing fine with clarmav and Clamfilter (http://www.ensita.net/products/clamfilter/) that check virus on SMTP traffic on a ClarkConnect 2.2 BOX (RedHat 9 Kernel) this is the update i have main.cvd is up to date (version: 28, sigs: 26630, f-level: 3, builder: tomek) main.cvd is up to date (version: 28, sigs: 26630, f-level: 3, builder: tomek) Downloading daily.cvd [*] daily.cvd updated (version: 645, sigs: 2326, f-level: 3, builder: ccordes) Database updated (28956 signatures) from db.lk.clamav.net (202.158.56.242). Clamd successfully notified about the update. i send a test virus via clarm File Attachment: Textfile.zip [EMAIL PROTECTED] clarm fail to detect this virus but my Norton Gateway detected it as --- Scan information follows --- Result: Virus Detected Virus Name: [EMAIL PROTECTED] File Attachment: Textfile.zip Attachment Status: deleted why is that ? --- Web Hosting at a cheap price, starting at $1 per month with your own domain, .COM, .NET, .LK, .ORG etc.. PHP, CGI, Perl, MySQL, Cpanel 9, POP3, POP3s, SMTP, IMAP, FTP, http://www.orbitsl.net ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Clamav-milter not loading?
What operating system? Look for clues in the syslog (you have LogSyslog and LogVerbose enabled). # ls -l /var/milter/ total 4 -rw-rw 1 clamav clamav 5 Dec 27 15:09 clamd.pid srwxrwxrwx 1 clamav clamav 0 Dec 27 15:09 clmilter.sock That is suspicious - I don't like the idea of a 777 clmilter.sock - that could be the reason it fails, since the permission is wide open - check for that error /var/log/messages and/or maillog depending on your OS and configuration. /usr/local/sbin/clamav-milter -l -o -b -P -H /var/milter/clmilter.sock Please don't use -b unless you don't talk to the Internet Josh -Nigel ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
