[Clamav-users] Quarantining infected mails

2004-12-03 Thread Søren Schimkat
Hi guys Im using Clamav with sendmail, and i've chosen to quarantine infected mail. My question is - what can I do with the files / emails that has been quarantined? Could they be resend somehow - or used i some other manner? Thx for at great tool. :-) -- mvh Søren Schimkat

Re: [Clamav-users] /root/clamav-0.80: Access denied. ERROR while testing clamav

2004-12-03 Thread Rob MacGregor
On Thu, 2 Dec 2004 20:57:34 -0800 (PST), ads nat [EMAIL PROTECTED] wrote: Hi, I tried to change access permission as follwos : [EMAIL PROTECTED] root]# chown clamav:clamav /root/clamav-0.80/test/ [EMAIL PROTECTED] root]# chmod 770 /root/clamav-0.80/test/ You need to ensure that the clamav

[Clamav-users] This is how I use ClamAV

2004-12-03 Thread Ian Lewis
Hi, If anyone is interested this is how I use ClamAV. My mailserver is running Trustix Secure Linux with Postfix 2.1 as MTA. Incoming emails with attachments including .doc/.jpg are filtered into ClamAV by Amavis-new. If the message contains a virus (which is all too often true) it is

RE: [Clamav-users] This is how I use ClamAV

2004-12-03 Thread Samuel Benzaquen
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ian Lewis Sent: Friday, December 03, 2004 5:56 AM Hi, If anyone is interested this is how I use ClamAV. My mailserver is running Trustix Secure Linux with Postfix 2.1 as MTA. Incoming emails with

Re: [Clamav-users] This is how I use ClamAV

2004-12-03 Thread Tomasz Papszun
On Fri, 03 Dec 2004 at 10:09:48 -0400, Samuel Benzaquen wrote: I think it could be nice to have like a list of known systems. That way a newbie could read and choose the best for his needs. We use Sendmail 8.13.0 (since 8.12.11) + Clamav-milter + Clamd. No quarantine, no

Re: [Clamav-users] This is how I use ClamAV

2004-12-03 Thread Laurent Wacrenier
Le Ven 3 déc 10:09:48 2004, Samuel Benzaquen écrit: I think it could be nice to have like a list of known systems. That way a newbie could read and choose the best for his needs. On my side, I use two systems - one for my workstation, it's based on procmail and a self made clamd client

[Clamav-users] RE: Re: This is how I use ClamAV

2004-12-03 Thread Ian Lewis
I think it could be nice to have like a list of known systems. That way a newbie could read and choose the best for his needs. We use Sendmail 8.13.0 (since 8.12.11) + Clamav-milter + Clamd. No quarantine, no postmaster/sender/recipient notice, just reject messages. Centralized freshclam on two

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-03 Thread Kiril Todorov
Ian Lewis wrote: That is very interesting information Samuel. I shall be interested to compare it to my own data. We quarantine our emails just in case there are any which are genuine but holding viruses. Not very likely but you never know. Do I understand from what you say that having identified

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-03 Thread Jeremy Kitchen
On Friday 03 December 2004 09:44 am, Kiril Todorov wrote: Ian Lewis wrote: That is very interesting information Samuel. I shall be interested to compare it to my own data. We quarantine our emails just in case there are any which are genuine but holding viruses. Not very likely but you

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-03 Thread Joe Maimon
Kiril Todorov wrote: Ian Lewis wrote: That is very interesting information Samuel. I shall be interested to compare it to my own data. We quarantine our emails just in case there are any which are genuine but holding viruses. Not very likely but you never know. Do I understand from what you

[Clamav-users] Re: This is how I use ClamAV

2004-12-03 Thread Matias Lopez Bergero
We use Sendmail 8.13.0 (since 8.12.11) + Clamav-milter + Clamd. No quarantine, no postmaster/sender/recipient notice, just reject messages. Centralized freshclam on two servers at different times (minutes 23 and 53 respectively). OnUpdate it propagates va sftp to the other 9 servers (including the

RE: [Clamav-users] /root/clamav-0.80: Access denied. ERROR whiletesting clamav

2004-12-03 Thread John Gallagher
ads nat wrote: Does this error means that everything is O.K. OR I have to do something to get rid of this error. If I have to get rid of this error, Please guide me how it can be done. All the error means is that user/group clamav has no read/write access to that

Re: [Clamav-users] /root/clamav-0.80: Access denied. ERROR whiletesting clamav

2004-12-03 Thread Matt
John Gallagher wrote: I have the same issue, I can NOT run clamscan with out the -d option and giving the directory of the data base. The issue you are having is due to changing the location of the database dir from that which clam was compiled with. clamscan -l scan.txt -r

[Clamav-users] e-mail scanning with ClamAV

2004-12-03 Thread Luis Vargas
Hi guys, I'm using ClamAV 0.80-2 and I have a question. Do I have e-mail scanning with this installation? or do I need to download Milter packages or something? I'm using OpenWebmail and already modified the openwebmail.conf line that refers to viruscheck to yes only; but when loading my

Re: [Clamav-users] e-mail scanning with ClamAV

2004-12-03 Thread Nigel Horne
On Fri, 2004-12-03 at 20:14, Luis Vargas wrote: I'm using ClamAV 0.80-2 and I have a question. Do I have e-mail scanning with this installation? or do I need to download Milter packages or something? I'm using OpenWebmail and already modified the openwebmail.conf line that refers to

RE: [Clamav-users] /root/clamav-0.80: Access denied. ERRORwhiletesting clamav

2004-12-03 Thread John Gallagher
John Gallagher wrote: I have the same issue, I can NOT run clamscan with out the -d option and giving the directory of the data base. The issue you are having is due to changing the location of the database dir from that which clam was compiled with. clamscan -l scan.txt -r

[Clamav-users] clamd exiting for no apparent reason

2004-12-03 Thread Kelsey Cummings
Has anyone seen clamd do anything like this? I have clamav 0.80 installed on 10 SMTP and POP servers using some custom glue to hook it up to milter and our POP server. One of the servers is exhibiting the following behavior: Dec 3 12:25:25 b clamd[26035]: SelfCheck: Database status OK. Dec 3

Re: [Clamav-users] clamd exiting for no apparent reason

2004-12-03 Thread Tomasz Kojm
On Fri, 3 Dec 2004 12:48:11 -0800 Kelsey Cummings [EMAIL PROTECTED] wrote: Has anyone seen clamd do anything like this? I have clamav 0.80 installed on 10 SMTP and POP servers using some custom glue to hook it up to milter and our POP server. One of the servers is exhibiting the following

[Clamav-users] e-mail virus scanning OpenWebmail+ClamAV

2004-12-03 Thread Luis Vargas
I'm using ClamAV 0.80 and I have a question. Do I have e-mail scanning with this installation? or do I need to download Milter packages or something? I'm using OpenWebmail and already modified the openwebmail.conf line that refers to viruscheck to yes only; but when loading my openwebmail server

Re: [Clamav-users] e-mail virus scanning OpenWebmail+ClamAV

2004-12-03 Thread Jim Maul
Luis Vargas wrote: I'm using ClamAV 0.80 and I have a question. Do I have e-mail scanning with this installation? or do I need to download Milter packages or something? I'm using OpenWebmail and already modified the openwebmail.conf line that refers to viruscheck to yes only; but when loading my

[Clamav-users] clamav-milter not doing anything. . .

2004-12-03 Thread Jim Smith
I have read through the archives, and haven't determined a solution for what [isn't] going on. I am running sendmail 8.13.1, it is compiled with MILTER. I am running clamav-0.80 on a netbsd machine running 1.6.2. Sendmail works fine in all other regards--it is my main LAN mailserver, and has

Re: [Clamav-users] e-mail scanning with ClamAV

2004-12-03 Thread Luis Vargas
My mistake In fact it is 0.80 version and I downloaded it from Clamav's site (sorry about that). Well, now that the version is correct how can I know if this installed version is scanning e-mails? Thanks Nigel. gt;From: Nigel Horne lt;[EMAIL PROTECTED]gt; gt;Reply-To: ClamAV users ML lt;[EMAIL

Re: [Clamav-users] clamav-milter not doing anything. . .

2004-12-03 Thread Nigel Horne
On Fri, 2004-12-03 at 21:29, Jim Smith wrote: Xclamav-milter, S=local:/var/clamav-milter/clamav-milter.sock, F=, T=S:4m;R:4m Try adding: O InputMailFilters=clamav-milter If you do a ps are clamav-milter and clamd still running? Any clues in /var/log/syslog or maillog or wherever you log

Re: [Clamav-users] e-mail scanning with ClamAV

2004-12-03 Thread Nigel Horne
On Fri, 2004-12-03 at 21:29, Luis Vargas wrote: In fact it is 0.80 version and I downloaded it from Clamav's site (sorry about that). Well, now that the version is correct how can I know if this installed version is scanning e-mails? Follow the instructions in .../clamav-milter/INSTALL. If

Re: [Clamav-users] clamav-milter not doing anything. . .

2004-12-03 Thread Jim Smith
Nigel Horne wrote: On Fri, 2004-12-03 at 21:29, Jim Smith wrote: Xclamav-milter, S=local:/var/clamav-milter/clamav-milter.sock, F=, T=S:4m;R:4m Try adding: O InputMailFilters=clamav-milter I'll do that. If you do a ps are clamav-milter and clamd still running? Any clues in /var/log/syslog

Re: [Clamav-users] clamav-milter not doing anything. . .

2004-12-03 Thread Nigel Horne
On Fri, 2004-12-03 at 22:08, Jim Smith wrote: Yes, they are both running, although it complains if I use 'sudo' to start clamav-milter. If I run clamav-milter as a regular user, it won't bind to the socket [it's owned by user:group clamav:clamav]. The older version [7.5?] I was trying to

Re: [Clamav-users] clamd exiting for no apparent reason

2004-12-03 Thread Kelsey Cummings
On Fri, Dec 03, 2004 at 09:56:37PM +0100, Tomasz Kojm wrote: On Fri, 3 Dec 2004 12:48:11 -0800 Kelsey Cummings [EMAIL PROTECTED] wrote: .. Any clues? Must be signalled by some nasty process. Tomasz - is there a higher log verbosity setting that might help confirm that? -- Kelsey

Re: [Clamav-users] clamav-milter not doing anything. . .

2004-12-03 Thread Jim Smith
Nigel Horne wrote: On Fri, 2004-12-03 at 22:08, Jim Smith wrote: Yes, they are both running, although it complains if I use 'sudo' to start clamav-milter. If I run clamav-milter as a regular user, it won't bind to the socket [it's owned by user:group clamav:clamav]. The older version

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-03 Thread Jan Pieter Cornet
On Fri, Dec 03, 2004 at 03:15:49PM -, Ian Lewis wrote: I think it could be nice to have like a list of known systems. That way a newbie could read and choose the best for his needs. Sendmail 8.12.11, mimedefang, f-prot, sophos and Clamav as soon as the thread concurrency problems on FreeBSD

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-03 Thread Todd Lyons
Jan Pieter Cornet wanted us to know: What I find really odd is your complete lack of Worm.Sober-I. Our stats for Thu Dec 2: Good point. I had totally missed that too. Top-5: W32/Sober-I : 1078544 W32/Netsky-P: 57920 That's a pretty big difference, seems more like an internal

Re: [Clamav-users] /root/clamav-0.80: Access denied. ERROR while testing clamav

2004-12-03 Thread ads nat
However, it would be much more sensible to move the software out of root's home directory, and into somewhere like /usr/local/clamav-test. Please guide me how to move software to directory '/usr/local/clamav-test' to get rid of ERROR. Thanks