RE: [Clamav-users] Application to generate CLAMAV report

2004-03-25 Thread [EMAIL PROTECTED]
Hi there, You have to configure the CLAMAV milter for it to be able to send the report. See man clamav-milter. Configure it so that it sends the email report to an email address and use that email address for the emailavlog configuration. Sorry, I am not of much help as I did not install

RE: [Clamav-users] Application to generate CLAMAV report

2004-03-25 Thread [EMAIL PROTECTED]
This site hosting the file seems be be over the limit. Anyone else have some extra space to host the file. Thanks. Original Message: - From: [EMAIL PROTECTED] [EMAIL PROTECTED] Date: Thu, 25 Mar 2004 02:50:50 -0500 To: [EMAIL PROTECTED] Subject: RE: [Clamav-users] Application to

Re: [Clamav-users] Application to generate CLAMAV report

2004-03-25 Thread Fajar A. Nugraha
Bo-Lina teknisk support wrote: Neither of these link's work. I downloaded the programs. It worked, but then I got these : The web site you are trying to access has exceeded its allocated data transfer. Visit our help area http://help.yahoo.com/help/us/geo/ for more information.Access to

[Clamav-users] Clamav-milter does not send failure message

2004-03-25 Thread Elv
Hi! I start clamav-milter with options: clamav-milter --force-scan --noxheader --quarantine-dir=/usr/local/share/clamav/infected --postmaster=virus --postmaster-only --noreject --headers --max-children=20 local:/var/run/clamav/clmilter.sock After starting it send failure message to user

Re: [Clamav-users] Application to generate CLAMAV report

2004-03-25 Thread Ralph Angenendt
Dilip M wrote: I have # rpm -qa|grep clam clamav-0.67-1 clamav-devel-0.67-1 # exim -bV How can i get this work my side ? On a machine with amavisd-new clamav *and* kaspersky, I just grep through the mail.log for infected files. If you only have clamav, you might just grep

[Clamav-users] Clamav-milter does not send failure message

2004-03-25 Thread Elv
Hi! I start clamav-milter with options: clamav-milter --force-scan --noxheader --quarantine-dir=/usr/local/share/clamav/infected --postmaster=virus --postmaster-only --noreject --headers --max-children=20 local:/var/run/clamav/clmilter.sock After starting it send failure message to user

Re: [Clamav-users] Milter reject something with no reason (new)

2004-03-25 Thread Trog
On Thu, 2004-03-25 at 10:10, Clamav wrote: I have now an email with attachment which is rejected with this error (Milter: data, reject=451 4.7.1 Please try again later) - reproducable. Are the developers interested? Where to send it? Please send to [EMAIL PROTECTED], in an encrypted zip

Re: [Clamav-users] Milter reject something with no reason (new)

2004-03-25 Thread Andrei Bucur
i had the same problem. Now i start the milter like this /usr/sbin/clamav-milter --dont-scan-on-error local:/var/run/clamav/clamd-milter.sock BR Adi. B - Original Message - From: Clamav [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 25, 2004 12:10 PM Subject:

Re: [Clamav-users] Milter reject something with no reason (new)

2004-03-25 Thread Nigel Horne
On Thursday 25 Mar 2004 10:10 am, Clamav wrote: I have now an email with attachment which is rejected with this error (Milter: data, reject=451 4.7.1 Please try again later) - reproducable. Are the developers interested? Where to send it? Please send me a copy of the email. Best regards

Re: [Clamav-users] Re: Time of signature in Virus DB Search

2004-03-25 Thread Tomasz Kojm
On Tue, 23 Mar 2004 14:08:32 -0500 Jesse Guardiani [EMAIL PROTECTED] wrote: Peter Bonivart wrote: I just noticed the new Virus DB Search function on the web site. That's great, I will use that often but could you add the date and time (GMT) the signature was added. I often get asked by

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on OSX

2004-03-25 Thread Steve King
all three of (1) latest head build, (2) 0.70rc and  (3) 0.67 of clamav on OSX 10.3.3 are missing 100% of the Worm.SomeFool.Gen-1 virus.  clamav is being called via the CGPAV script from CommuniGatePro ... its doing a fine job on almost all others ... my second stage virus checker, McAfee,

Re: [Clamav-users] Milter reject something with no reason (new)

2004-03-25 Thread Tomasz Kojm
On Thu, 25 Mar 2004 11:10:21 +0100 Clamav [EMAIL PROTECTED] wrote: I have now an email with attachment which is rejected with this error (Milter: data, reject=451 4.7.1 Please try again later) - reproducable. Are the developers interested? Where to send it? Please send it to [EMAIL

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on OSX

2004-03-25 Thread Tomasz Kojm
On Wed, 24 Mar 2004 21:31:02 + Steve King [EMAIL PROTECTED] wrote: all three of (1) latest head build, (2) 0.70rc and (3) 0.67 of clamav on OSX 10.3.3 are missing 100% of the Worm.SomeFool.Gen-1 virus. clamav is being called via the CGPAV script from CommuniGatePro ... its doing a

Re: [Clamav-users] RE: memory leak?

2004-03-25 Thread Chris Meadors
On Thu, 2004-03-25 at 08:56 +, Trog wrote: Well, you appear to be the only one seeing a leak. We (the devs) do check for memory leaks quite frequently, and so are pretty sure there are no big leaks. Does that include the RAR scanner? I have yet to enable it because of the comments in the

Re: [Clamav-users] Freshclam died

2004-03-25 Thread Tarjei Knapstad
On Tue, 2004-03-16 at 21:03, Tomasz Kojm wrote: On Tue, 16 Mar 2004 11:28:53 -0500 Jim Maul [EMAIL PROTECTED] wrote: -- ClamAV update process started at Sun Mar 7 17:31:59 2004 ERROR: Maximal time (1200 seconds) reached. We are aware of it and

[Clamav-users] Segmentation fault in clamav-0.70rc-1

2004-03-25 Thread Claudio Alonso
Hi, Yesterday I installed clamav-0.70rc-1 from rpm on my RedHat 9.0 (kernel 2.4.20-30.9) and started clamd just to test it's current stability The computer was on all night and today I found the following in the rotated logs: Thu Mar 25 04:02:33 2004 - No stats for Database check - forcing reload

RE:[Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1

2004-03-25 Thread Jackson, Jeff
I have the same issue on Linux when checking email in KMail. If I save the attachment to my desktop and check it there, then the virus is detected. My definitions are bang up to date; the virus has been getting missed for the past couple of days at least; the string I use for checking my email

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Tomasz Papszun
On Thu, 25 Mar 2004 at 9:52:26 -0500, Colin A. Bartlett wrote: I've upgraded my ClamAV and I'm no longer getting errors on freshclam. However it doesn't seem to be updated. I noticed some viruses slipping through and ran them through the online scanner. Some were identified as SomeFool.P. I

[Clamav-users] new clamav user - comparison to amavisd with uvscan

2004-03-25 Thread Joe Maimon
Hello All, I am new here, I hope this hasnt been hashed to death already. I recently installed clamav into a production email system, using clamav-milter. This system had been operating with amavisd and uvscan (nai's command line scanner) for years. Now email is scanned twice, first by

[Clamav-users] outlook problem

2004-03-25 Thread Vito Pascali
Hi ppl, I have a problem (my english first!). I have a lan where for citrix problem the gw is a soho watchgard firewall and where a machine from the lan works for proxi with squid. Now i tried to put on the same proxi machine clamav and p3scan to work togheter. Everithing seems works fine in the

Re: [Clamav-users] new clamav user - comparison to amavisd with uvscan

2004-03-25 Thread Joe Maimon
Never-Mind. Standard database path screwup. Joe Maimon wrote: Hello All, I am new here, I hope this hasnt been hashed to death already. I recently installed clamav into a production email system, using clamav-milter. This system had been operating with amavisd and uvscan (nai's command

[Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-25 Thread Jesse Guardiani
Tomasz Kojm wrote: On Mon, 22 Mar 2004 15:54:18 -0500 Jesse Guardiani [EMAIL PROTECTED] wrote: Any ideas on how to avoid this in the future? I'm running with ScanArchive and ScanMail (because I want the binhex feature on). The problem may be connected with already discussed and fixed

Re: [Clamav-users] Freshclam died

2004-03-25 Thread Tomasz Kojm
On 25 Mar 2004 16:41:21 +0100 Tarjei Knapstad [EMAIL PROTECTED] wrote: On Tue, 2004-03-16 at 21:03, Tomasz Kojm wrote: On Tue, 16 Mar 2004 11:28:53 -0500 Jim Maul [EMAIL PROTECTED] wrote: -- ClamAV update process started at Sun Mar 7 17:31:59

RE: [Clamav-users] clam not fresh

2004-03-25 Thread Colin A. Bartlett
Another poster pointed to testvirus.org for testing. I think you'll find some methods of delivery more effective than others and that clamav will miss some of these. They're not being detected by clam even when running them right through clamscan on the command prompt. I think it's because

Re: [Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-25 Thread Robert Blayzor
On 3/25/04 2:26 PM, Jesse Guardiani [EMAIL PROTECTED] wrote: --- SCAN SUMMARY --- Known viruses: 20702 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 57.21 MB I/O buffer size: 131072 bytes Time: 11.989 sec (0 m 11 s) [13:[EMAIL PROTECTED]:[~]%

[Clamav-users] OLE2 archives

2004-03-25 Thread Jesse Guardiani
Howdy list, Is there a utility I can download to generate OLE2 archives, or does anyone have an OLE2 archive with an EICAR virus inside that I can use for testing? I'm putting my ClamAV installations through various stress tests, and the only archive format I can't generate from FreeBSD seems to

RE: [Clamav-users] clam not fresh

2004-03-25 Thread [EMAIL PROTECTED]
Colin A. Bartlett said: Another poster pointed to testvirus.org for testing. I think you'll find some methods of delivery more effective than others and that clamav will miss some of these. They're not being detected by clam even when running them right through clamscan on the command

Re: [Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-25 Thread Tomasz Papszun
On Thu, 25 Mar 2004 at 14:26:05 -0500, Jesse Guardiani wrote: [...] The only thing I still don't understand is why clamscan is so much faster than clamdscan, and why clamscan only uses 25M of process memory while clamdscan uses over 298M of process memory during the scan: --- SCAN

RE: [Clamav-users] clam not fresh

2004-03-25 Thread Jim Maul
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Colin A. Bartlett Sent: Thursday, March 25, 2004 2:47 PM To: [EMAIL PROTECTED] Subject: RE: [Clamav-users] clam not fresh Another poster pointed to testvirus.org for testing. I think you'll find

[Clamav-users] Re: Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-25 Thread Jesse Guardiani
Robert Blayzor wrote: [...] I still think there is a bug out there somewhere when scanning mail files. Rarely we'll see clamd+clamdscan take quite a long time to process a mail message. It happens rarely, but sometimes a 4K message file can take a minute to scan. What is your MaxThreads

[Clamav-users] Re: Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-25 Thread Jesse Guardiani
Tomasz Papszun wrote: [...] 2) clamdscan can be configured (in clamav.conf) to use more features than you requested for clamscan in command line (e.g. ScanMail). If so, scanning with clamdscan can require more resources than simple 'clamscan'. I think that is exactly what is happening. If I

[Clamav-users] email structure logging

2004-03-25 Thread Jesse Guardiani
Howdy list, Is there any way to make clamd log the structure of a message and it's attachments? BinHex, MIME, plain-text, ZIP, RAR, BZIP, GZIP, OLE2, etc...? This information would be great for statistics, but I could imagine it being useful during troubleshooting or tech support also. --

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Antony Stone
On Thursday 25 March 2004 10:36 pm, Mark Novak wrote: If running the same command on your server does not show the SomeFool.P then your definitions are NOT up to date. If freshclam insists on saying they are up to date, i would try deleting them totally and running freshclam again.

RE: [Clamav-users] clam not fresh

2004-03-25 Thread Colin A. Bartlett
Jim Maul Sent: Thursday, March 25, 2004 4:28 PM If freshclam insists on saying they are up to date, i would try deleting them totally and running freshclam again. Maybe that will clear up the problem. Per Tomasz, I first checked the number of signatures reported by freshclam and it was

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Adam Webb - Network Manager
Colin A. Bartlett [EMAIL PROTECTED] wrote: Jim Maul Sent: Thursday, March 25, 2004 4:28 PM If freshclam insists on saying they are up to date, i would try deleting them totally and running freshclam again. Maybe that will clear up the problem. Per Tomasz, I first checked the number of

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Tomasz Papszun
On Thu, 25 Mar 2004 at 18:19:02 -0500, Colin A. Bartlett wrote: Per Tomasz, I first checked the number of signatures reported by freshclam and it was reporting the correct number. So Per Jim, I deleted both main.cvd and daily.cvd from /var/lib/clamav and ran freshclam again. It downloaded

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Brian W. Antoine
At 02:56 PM 3/25/2004, you wrote: On Thursday 25 March 2004 10:36 pm, Mark Novak wrote: If running the same command on your server does not show the SomeFool.P then your definitions are NOT up to date. If freshclam insists on saying they are up to date, i would try deleting them

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Tomasz Papszun
On Thu, 25 Mar 2004 at 16:18:38 -0800, Brian W. Antoine wrote: I'm updating from clamav.elektrapro.com and starting a short time ago it now wants to update viruses.db, but the checksum fails after the download. The mirror at ozforces does the same thing. This isn't the issue that

[Clamav-users] SurgeMail and Clamav

2004-03-25 Thread Duane Morris
Has anyone tried to run clamav with SurgeMail? Thanks

Re: [Clamav-users] Segmentation fault in clamav-0.70rc-1

2004-03-25 Thread Todd Lyons
On Thu, 2004-03-25 at 08:36, Claudio Alonso wrote: Hi, Yesterday I installed clamav-0.70rc-1 from rpm on my RedHat 9.0 (kernel 2.4.20-30.9) and started clamd just to test it's current stability The computer was on all night and today I found the following in the rotated logs: Thu Mar 25

[Clamav-users] Help with clamav-milter.sh

2004-03-25 Thread Bryce
The startup script clamav-milter.sh Makes a few calls to init.d. I am on a Virtual Private Server so I do not have init.d available to me. All I have is rc.d. How can I then get clamav-milter to start when I reboot my server? Thanks

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Brian W. Antoine
At 05:24 PM 3/25/04, Tomasz Papszun wrote: On Thu, 25 Mar 2004 at 16:18:38 -0800, Brian W. Antoine wrote: I'm updating from clamav.elektrapro.com and starting a short time ago it now wants to update viruses.db, but the checksum fails after the download. The mirror at ozforces does the

RE: [Clamav-users] SurgeMail and Clamav

2004-03-25 Thread Robert Blayzor
Yes we have it working flawlessly here on FreeBSD_4 with the latest clamv devel releases and the latest version of Surgemail. We've been running it for a while with a lot of success as of late. The stability has greatly improved. We're using a custom PERL handler which marshals the virus scans

Re: [Clamav-users] Application to generate CLAMAV report

2004-03-25 Thread Odhiambo Washington
* Ralph Angenendt [EMAIL PROTECTED] [20040325 14:04]: wrote: Dilip M wrote: I have # rpm -qa|grep clam clamav-0.67-1 clamav-devel-0.67-1 # exim -bV How can i get this work my side ? On a machine with amavisd-new clamav *and* kaspersky, I just grep through

Re: [Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-25 Thread Tomasz Kojm
On Thu, 25 Mar 2004 14:26:05 -0500 Jesse Guardiani [EMAIL PROTECTED] wrote: Tomasz Kojm wrote: On Mon, 22 Mar 2004 15:54:18 -0500 Jesse Guardiani [EMAIL PROTECTED] wrote: Any ideas on how to avoid this in the future? I'm running with ScanArchive and ScanMail (because I want the

Re: [Clamav-users] Application to generate CLAMAV report

2004-03-25 Thread Fajar A. Nugraha
[EMAIL PROTECTED] wrote: This site hosting the file seems be be over the limit. Anyone else have some extra space to host the file. Thanks. It's also available on http://clamav.or.id/contrib/emailavlog/ It would be great if you could also put some installation instruction there. Regards,

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Tomasz Papszun
On Thu, 25 Mar 2004 at 18:39:29 -0800, Brian W. Antoine wrote: At 05:24 PM 3/25/04, Tomasz Papszun wrote: On Thu, 25 Mar 2004 at 16:18:38 -0800, Brian W. Antoine wrote: I'm updating from clamav.elektrapro.com and starting a short time ago it now wants to update viruses.db, but the

Re: [Clamav-users] reject=451 4.7.1 Please try again later

2004-03-25 Thread Joe Maimon
I have been having the same as well. I added some more verbosity into the syslog statement and got this logged write failure to clamd, nbytes: -1, quarantine_dir: (null), error: Bad file descriptor Any ideas? --- This SF.Net email is

[Clamav-users] conbination with spamassasin

2004-03-25 Thread Joe's Web Hosting $B!!(B-- $B;3ED
Hello. (B (BI installed amavis under exim. (BThey communicate themselves each other. (BI found spamassasin in exim does not work (B if the router and transport are ON. (BThe problem occurs because (Bexim is regarded as a outer command and (Bexim is executed infinitely many times. (B

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Brian W. Antoine
At 07:09 PM 3/25/04, you wrote: On Thu, 25 Mar 2004 at 18:39:29 -0800, Brian W. Antoine wrote: At 05:24 PM 3/25/04, Tomasz Papszun wrote: On Thu, 25 Mar 2004 at 16:18:38 -0800, Brian W. Antoine wrote: I'm updating from clamav.elektrapro.com and starting a short time ago it now wants

Re: [Clamav-users] conbination with spamassasin

2004-03-25 Thread Fajar A. Nugraha
Joe's Web Hosting $B!!(B-- $B;3EDhttp://duncanthrax.net/exiscan-acl/) (BIt can use clamav and SpamAssassin natively. (B (BRegards, (B (BFajar (B (B (B--- (BThis SF.Net email is sponsored by: IBM Linux Tutorials (BFree Linux tutorial

[Clamav-users] Find bagle in Zip files.

2004-03-25 Thread Simon Gate
Hello. Im running a smtp server with f-secure and clamav. I have a problem with the f-secure server because it cant find the bagle virus in password protected zip files but clamav does. I e-mailed f-secure support about and they said to me it isnt any virus scanner today that can find virus in