I'am using ClamAV 0.80 with clamav-milter 0.80j to scan all my incoming mail.
This morning i receive email that contains [EMAIL PROTECTED] virus (NAV
version) in attachment my_details.pif.
Why clamav-milter cannot detect that virus ?
Below is my email header that say X-Virus-Status: Clean
Thanx
On Fri, 7 Jan 2005 01:12:02 + (UTC)
"Thalador Du'Fosnee" <[EMAIL PROTECTED]> wrote:
> Ok, let me get this right. Clamav cannot clean? What good is it?
It sounds like you are implying that you want to receive mail that
contains a virus. What good is that? I want nothing to do with
infected m
Has anyone used calamav with evloution? If so how?
I'm getting my mail via a pop server.
Tim...
--
_
ASCII ribbon campaign ( )
- against HTML email X
/ \
___
http://lists.clamav.net/cgi-bin/mailman/lis
On Thu, Jan 06, 2005 at 10:01:42PM -0600, René Berber said:
> Stephen Gran wrote:
>
> > On Wed, Jan 07, 2004 at 08:14:13PM +0100, Ryszard Jurczenko said:
> [snip]
> > > This is line from mailog when I manualy change privileges
> > for mail boxes
> > > .mail.mail . Procmail is working and mai
Noel Jones wrote:
On Fri, Jan 07, 2005 at 01:12:02AM +, Thalador Du'Fosnee wrote:
Ok, let me get this right. Clamav cannot clean? What good is it?
"Cleaning" of viruses is a marketing ploy.
Very few viruses in recent years "infect" files, they overwrite the
good data in the file with th
Stephen Gran wrote:
> On Wed, Jan 07, 2004 at 08:14:13PM +0100, Ryszard Jurczenko said:
[snip]
> > This is line from mailog when I manualy change privileges
> for mail boxes
> > .mail.mail . Procmail is working and mail is renamed .
> >
> > Jan 5 13:28:04 prodruk sendmail[3879]: j05CS3u038
On Fri, Jan 07, 2005 at 01:12:02AM +, Thalador Du'Fosnee wrote:
> Ok, let me get this right. Clamav cannot clean? What good is it?
>
"Cleaning" of viruses is a marketing ploy.
Very few viruses in recent years "infect" files, they overwrite the
good data in the file with their own code. Ther
>
> Ok, let me get this right. Clamav cannot clean? What good is it?
I guess I wonder how much I trust a piece of software to decide what the
pre-infected package looked like. I guess it would be a good trick for it to
know every combination of every virus and every infected attachment that can
b
What good is it? It detects viruses! I'd say thats pretty good.
-Jim
> Ok, let me get this right. Clamav cannot clean? What good is it?
>
>
> Noel Jones <[EMAIL PROTECTED]> wrote in
> news:[EMAIL PROTECTED]:
>
>> At 03:03 PM 1/6/2005, Thalador Du'Fosnee wrote:
>>>It is not deleting the messag
> Hi!
>
> 6-ñÎ×-2005 21:07 [EMAIL PROTECTED] (Tomasz Kojm) wrote to ClamAV users ML
> :
>
>>> "Fetch" from where (without online)? (BTW, updates for my
>>> previous
>>> Dr.Web installation I get through email and from their BBS.)
> TK> There was a chance to subscribe to our so called "San
Ok, let me get this right. Clamav cannot clean? What good is it?
Noel Jones <[EMAIL PROTECTED]> wrote in
news:[EMAIL PROTECTED]:
> At 03:03 PM 1/6/2005, Thalador Du'Fosnee wrote:
>>It is not deleting the message, only the attachment with the infected
>>file. I got 24 messages yesterday that we
Perfect suggestion.
And it works too!!! Thanks,
Edy
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Nigel Horne
> Sent: Thursday, 6 January 2005 11:07 PM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] Clamav-milter thru a firewall
>
>
>
On Fri, 2005-01-07 at 01:08 +0300, Arkady V.Belousov wrote:
> Hi!
>
> 6-Янв-2005 21:07 [EMAIL PROTECTED] (Tomasz Kojm) wrote to ClamAV users ML
> :
>
> >> "Fetch" from where (without online)? (BTW, updates for my
> >> previous
>
> My English is poor, but me looks, that above is i
On Wed, Jan 07, 2004 at 08:14:13PM +0100, Ryszard Jurczenko said:
> Hi,
> I installed clamav 0.75 and later 0.80 and find same problem. I install
> clamav from package RPM. Everithing looks good but clamd demon don't scan
> incoming mails. But if I manualy change privileges to mail boxes located at
Tomasz Kojm wrote:
On Fri, 7 Jan 2005 01:08:23 +0300 (MSK)
"Arkady V.Belousov" <[EMAIL PROTECTED]> wrote:
Don't
understand, why online access should/must be only one way to receive
updates.
We can send them to you every two weeks by a carrier pigeon.
Be fair, Tomasz. The guy's Russian and y
On Fri, 7 Jan 2005 01:08:23 +0300 (MSK)
"Arkady V.Belousov" <[EMAIL PROTECTED]> wrote:
> Don't
> understand, why online access should/must be only one way to receive
> updates.
We can send them to you every two weeks by a carrier pigeon.
--
oo. Tomasz Kojm <[EMAIL PROTE
Hi!
6-Янв-2005 21:07 [EMAIL PROTECTED] (Tomasz Kojm) wrote to ClamAV users ML
:
>> "Fetch" from where (without online)? (BTW, updates for my
>> previous
>> Dr.Web installation I get through email and from their BBS.)
TK> There was a chance to subscribe to our so called "Santa Claus Viru
At 03:03 PM 1/6/2005, Thalador Du'Fosnee wrote:
It is not deleting the message, only the attachment with the infected
file. I got 24 messages yesterday that were cleaned. Is there a way to
either add the line or tell it to delete the message instead of clean and
deliver?
In that case, whatever
Hi!
6-Янв-2005 17:40 [EMAIL PROTECTED] (Brian Morrison) wrote to ClamAV users ML
:
>> SG> There is a main.db and a daily.db. Every so often, signatures
>> SG> from daily.db are pushed into main.db.
>> "Pushed"? Do you mean, that some ClamAV component (which one?)
>> permanently modifies
Hi!
6-Янв-2005 12:48 [EMAIL PROTECTED] (Stephen Gran) wrote to
clamav-users@lists.clamav.net:
>> >> - how to receive updates (beside online access through internet) for
>> >> ClamAV
>> SG> Most of the time the updates are only to daily.db,
>> ?
SG> I am not sure what the question is.
Hi!
6-Янв-2005 17:51 [EMAIL PROTECTED] (Matt) wrote to ClamAV users ML
:
>> Website? Do you mean, that he (friend) should run on his LAN server
>> IIS (MS Internet Information Service) and be open for attacks?
M> Is this a piss take?
:)
M> Firstly, you have to be externally connected in
Hi,
I installed clamav 0.75 and later 0.80 and find same problem. I install
clamav from package RPM. Everithing looks good but clamd demon don't scan
incoming mails. But if I manualy change privileges to mail boxes located at
/var/spool/mail/ "user" from user.mail to mail.mail clamd scan mails find
It is not deleting the message, only the attachment with the infected file.
I got 24 messages yesterday that were cleaned. Is there a way to either add
the line or tell it to delete the message instead of clean and deliver?
From: "Guillaume Arcas" <[EMAIL PROTECTED]>
Reply-To: ClamAV users ML
T
On Thu, 6 Jan 2005 20:10:33 +0300 (MSK)
"Arkady V.Belousov" <[EMAIL PROTECTED]> wrote:
> "Fetch" from where (without online)? (BTW, updates for my
> previous
> Dr.Web installation I get through email and from their BBS.)
There was a chance to subscribe to our so called "Santa Claus Vir
On Thu, 6 Jan 2005 14:46:48 -0500 in
[EMAIL PROTECTED] "Kyle Victor"
<[EMAIL PROTECTED]> wrote:
> Second is there a best practice that says running the clamscan
> command as I am is not as good as running clamd and checking mail
> with clamdscan?
It depends on the loading of your server, clams
Fedora Core 3 (kern 2.6.9-1.x)
Postfix 2.1.5
Anomy 1.69
Spammassassin 3.0.2
Clamav 0.80
I am building a replacement/upgrade for my current
RH8+Postfix+Anomy+Spammasssasin+Clamav mail gateway
I was able to get everything up with minimal problems until I got to clam
In my anomy.conf I call to
On Thursday 06 Jan 2005 18:49, Omar Armas wrote:
> How can I make that clamav-milter doesnt send ever any message of warning to
> any user(sender, destination, clamav, postmaster, root)?
>
> I tried with options -olN, but postmaster and clamav continue receiving
> warnings.
> Is it possible to e
On Wed, 7 Jan 2004 20:14:13 +0100 in
[EMAIL PROTECTED] "Ryszard Jurczenko"
<[EMAIL PROTECTED]> wrote:
> Please help me , I luz all ideas to find reason ?
Not sure about your problem yet, but it would be sensible to set your
clock to be in 2005, you seem to be almost a year behind the rest of
us.
Hi,
I installed clamav 0.75 and later 0.80 and find same problem. I install
clamav from package RPM. Everithing looks good but clamd demon don't scan
incoming mails. But if I manualy change privileges to mail boxes located at
/var/spool/mail/ "user" from user.mail to mail.mail clamd scan mails f
How can I make that clamav-milter doesnt send ever any message of warning to
any user(sender, destination, clamav, postmaster, root)?
I tried with options -olN, but postmaster and clamav continue receiving
warnings.
Is it possible to eliminate them at all? How?
Omar
Thalador Du'Fosnee wrote:
> I know some virus programs add a line to cleaned emails saying "This
> email was infected with blahblah and cleaned"
>
> Can ClamAV be set to do that?
ClamAV, as such, only identifies the infected files|mails. To do that you
would need to tie clam into a script|prog
Thalador Du'Fosnee a écrit :
> I know some virus programs add a line to cleaned emails saying "This email
> was infected with blahblah and cleaned"
>
> Can ClamAV be set to do that?
If you accept deletion as a synonym for cleaning, ClamAV can do that... :-)
Guillaume Arcas
--
On Thu, 2005-01-06 at 06:20 +, Thalador Du'Fosnee wrote:
> I know some virus programs add a line to cleaned emails saying "This email
> was infected with blahblah and cleaned"
>
> Can ClamAV be set to do that?
clamav doesn't clean e-mails. it just identifies them. You would need
to look at
On Thu, 6 Jan 2005 06:20:13 + (UTC), Thalador Du'Fosnee
<[EMAIL PROTECTED]> wrote:
> I know some virus programs add a line to cleaned emails saying "This email
> was infected with blahblah and cleaned"
Be aware that unless you do that very carefully you won't get the
result you're expecting, e
Then install it from the ports, to make your life even easier.
http://www.technoids.org/clamav-milter.html
Using the ports but even easier thanks to the fine work of Weldon. :)
Cheers
Ale
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
On Thursday 06 Jan 2005 06:20, Thalador Du'Fosnee wrote:
> I know some virus programs add a line to cleaned emails saying "This email
> was infected with blahblah and cleaned"
>
> Can ClamAV be set to do that?
Clamav can't disinfect.
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music,
I know some virus programs add a line to cleaned emails saying "This email
was infected with blahblah and cleaned"
Can ClamAV be set to do that?
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Arkady V.Belousov wrote:
> SG> There does not seem to be a way around getting them from the
> SG> mirrors, at least at some point in the chain - it would be trivial
> SG> to fetch,
>
> "Fetch" from where (without online)? (BTW, updates for my previous
> Dr.Web installation I get through emai
On Thu, Jan 06, 2005 at 08:10:33PM +0300, Arkady V.Belousov said:
> Hi!
>
> 5-???-2005 18:52 [EMAIL PROTECTED] (Stephen Gran) wrote to
> clamav-users@lists.clamav.net:
>
> >> - how ClamAV virus base files are related? For example, Dr.Web contains one
> [...]
> >> are newer, than main base.) How
On Thu, 6 Jan 2005 20:10:33 +0300 (MSK) in
[EMAIL PROTECTED] "Arkady V.Belousov"
<[EMAIL PROTECTED]> wrote:
> SG> There is a main.db and a daily.db. Every so often, signatures
> SG> from daily.db are pushed into main.db.
>
> "Pushed"? Do you mean, that some ClamAV component (which one?)
Hi!
5-Янв-2005 18:52 [EMAIL PROTECTED] (Stephen Gran) wrote to
clamav-users@lists.clamav.net:
>> - how ClamAV virus base files are related? For example, Dr.Web contains one
[...]
>> are newer, than main base.) How builded ClamAV bases and which files/names
>> used for this?
SG> There is a mai
all right
thanks for the help
If i can´t to do this, i will be back.
Regards to all
IVAN
- Original Message -
From: "Rob MacGregor" <[EMAIL PROTECTED]>
To: "ClamAV users ML"
Sent: Thursday, January 06, 2005 2:25 PM
Subject: Re: [Clamav-users] Sendmail with Clamav
On Thu, 6 Ja
On Thu, 6 Jan 2005 11:13:22 -0200, Ivan Carlos Ricci
<[EMAIL PROTECTED]> wrote:
> Thanks Nigel
>
> I forgot this, I´m using a FreeBSD 4.10
Then install it from the ports, to make your life even easier.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights
Hi,
I've installed SpamAssassin and clamav-0.80 on my RedHat mailserver
(sendmail). But there seems to be some problem
I revoke spamassassin and clamav through /user/home/.procmailrc. It works
fine until I call clamav (just spamassassin). BTW, I use :
:0fw: clamAV.lock
| clamscan
to call cl
Witam,
Wiem , wiem juz sporzadzam mail do listy. Wiem ze wielcy sa ciagle zajeci.
Ale to problem ktory gryziemy w szerszym gronie linuksowcow i nikt nie wie.
pzdr RysiekJ
- Original Message -
From: "Tomasz Kojm" <[EMAIL PROTECTED]>
To: "ClamAV users ML"
Sent: Thursday, January 06, 2005 2
On Thu, 2005-01-06 at 14:33 +0100, Gwyll Gwyllin wrote:
> But not now ...
>
> It was a conversion error ... The ? Sign should be a smiley, but it reach
> you in a wrong format ... M$ Outlook rulez :S
Hopefully you have found the problem- an older version of freshclam
in /usr/local/bin or some suc
But not now ...
It was a conversion error ... The ? Sign should be a smiley, but it reach
you in a wrong format ... M$ Outlook rulez :S
-I have not failed. I've just found 10,000 ways that wont work
(Thomas A. Edison)
> You're right ?
Yes, I'm.
--
oo. Tomasz Kojm <[EMAIL PRO
On Thu, 6 Jan 2005 14:18:19 +0100
"Gwyll Gwyllin" <[EMAIL PROTECTED]> wrote:
> You're right ?
Yes, I'm.
--
oo. Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
\..._ 0DCA5A08407D5288279DB43454822DC8985A444B
You're right ?
Sorry
host:~# freshclam -V
freshclam / ClamAV version 0.23
-I have not failed. I've just found 10,000 ways that wont work
(Thomas A. Edison)
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
On Thursday 06 Jan 2005 13:13, Ivan Carlos Ricci wrote:
> Thanks Nigel
>
> I forgot this, I´m using a FreeBSD 4.10
Then you should have no difficulty running both clamd and clamav-milter in
/etc/rc.d
-Nigel
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#2025232
Thanks Nigel
I forgot this, I´m using a FreeBSD 4.10
- Original Message -
From: "Nigel Horne" <[EMAIL PROTECTED]>
To: "ClamAV users ML"
Sent: Thursday, January 06, 2005 10:48 AM
Subject: Re: [Clamav-users] Sendmail with Clamav
On Thursday 06 Jan 2005 12:40, Ivan Carlos Ricci wrote:
On Thursday 06 Jan 2005 12:40, Ivan Carlos Ricci wrote:
> Hi Dears
>
> I never worked with the clamav Anti-Virus, but, many friends use it in any
> mail servers.
>
> I need to work with a powerfull anti-virus in my MTA(sendmail) checking
> incoming messages.
>
> Someboby have any documentation o
Hi Dears
I never worked with the clamav Anti-Virus, but, many friends use it in any
mail servers.
I need to work with a powerfull anti-virus in my MTA(sendmail) checking
incoming messages.
Someboby have any documentation or manual to install sendmail with clamav
for check the incoming messages a
On Thursday 06 Jan 2005 10:51, Edy Gasparini wrot
> - sendmail promptly passes to clamav-milter
You should be able to configure sendmail so that clamav-milter runs on the
remote machine,
after all the sendmail<->clamav-milter connection is TCP.
In sendmail.mc, instead of S=local:/var/run/clamav
On Thu, 6 Jan 2005 12:25:51 +0100
"Gwyll Gwyllin" <[EMAIL PROTECTED]> wrote:
> the version is 0.80-6
`freshclam -V` will show you it isn't.
--
oo. Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
\..._ 0DCA5A084
On Thu, 6 Jan 2005 21:51:46 +1100
"Edy Gasparini" <[EMAIL PROTECTED]> wrote:
> So, my question is: can clamd be configured to statically allocate the
> stream port? Or at least reduce the range to something sane? Oh, and
> preferably without having to hack the code
Just update to the latest
the version is 0.80-6
> Version of ClamAV?
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Folks,
I have clamav-milter installed and configured on my sendmail server. I have
clamd running on a different host and on the other side of a firewall.
On an email arriving at the sendmail server, the following sequence occurs:
- sendmail promptly passes to clamav-milter
- clamav-milter conne
On Thu, 06 Jan 2005 at 3:31:03 +0100, Gwyll Gwyllin wrote:
>
> I've tried to update the clam's database, but i've got the following error
> message :
>
> host:~# freshclam -v
> Checking for new database - started at Thu Jan 6 03:20:14 2005
> Calculating MD5(viruses.db)... 4e4f1a294d2748ed1e
On Thu, 6 Jan 2005 06:41:08 +0100 in
[EMAIL PROTECTED] Tomasz Kojm <[EMAIL PROTECTED]>
wrote:
> On Wed, 5 Jan 2005 18:39:47 +
> Brian Morrison <[EMAIL PROTECTED]> wrote:
>
> > Are you planning to make many changes to the current snapshot code
> > before 0.81 is released,
>
> Not many, just a
60 matches
Mail list logo
