[Clamav-users] clamav log scanning

2005-07-26 Thread rupak
hello all how do i know if the incomming mail's are being scanned. i have 2 log file in /var/log/clamd.log and /var/log/freshclam.log when i do tail -f /var/log/clamd.log then following are the out put [EMAIL PROTECTED] /]# tail -f /var/log/clamd.log Archive: Recursion level limit set to 8.

[Clamav-users] update with rpm

2005-07-26 Thread Salvatore Basso
Hi, in the binary packages and ports I don't find rpm file for version 0.86.2 (in particular for Fedora Core 2), but there will be ?? thanks. Salvatore. --- [This E-mail scanned for viruses by Declude Virus] ___

Re: [Clamav-users] update with rpm

2005-07-26 Thread Brian Morrison
On Tue, 26 Jul 2005 11:18:06 +0200 in [EMAIL PROTECTED] Salvatore Basso [EMAIL PROTECTED] wrote: Hi, in the binary packages and ports I don't find rpm file for version 0.86.2 (in particular for Fedora Core 2), but there will be ?? thanks. Well, you could just download the new source tarball,

Re: [Clamav-users] v0.86.2 'OUTDATED' version check INCORRECT ... reports as OLDER than v0.86.1

2005-07-26 Thread Bob Hutchinson
On Monday 25 Jul 2005 04:38, OpenMacNews wrote: hi luca, per your a0.86.2 announcement, i just ul'd installed v0.86.2 on OSX 10.4.2; i had previously been running v0.86.1. after install, a 'freshclam' results in: ClamAV update process started at Sun Jul 24 19:38:48 2005 WARNING:

[Clamav-users] Configuring clamav-milter sendmail

2005-07-26 Thread Gerard Seibert
I am sure that this question has been asked before; however, I am unable to locate the answer I need. I am a new user of Clam. I have it installed on a FreeBSD 5.4 machine. Upon bootup, this message is displayed: /usr/local/sbin/clamav-milter: socket-addr (local:/var/run/clamav/clamav.sock)

Re: [Clamav-users] Configuring clamav-milter sendmail

2005-07-26 Thread Nigel Horne
I am sure that this question has been asked before; however, I am unable to locate the answer I need. I am a new user of Clam. I have it installed on a FreeBSD 5.4 machine. Upon bootup, this message is displayed: /usr/local/sbin/clamav-milter: socket-addr

[Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Thomas Booms
Hello all, I've just upgraded from 0.86.1 to 0.86.2. The test tells me this: freshclam -v Current working dir is /usr/local/share/clamav Max retries == 3 ClamAV update process started at Tue Jul 26 13:17:22 2005 Querying current.cvd.clamav.net TTL: 900 Software version from DNS: 0.86.2 main.cvd

Re: [Clamav-users] update with rpm

2005-07-26 Thread Daniel J McDonald
On Tue, 2005-07-26 at 10:43 +0100, Brian Morrison wrote: On Tue, 26 Jul 2005 11:18:06 +0200 in [EMAIL PROTECTED] Salvatore Basso [EMAIL PROTECTED] wrote: Hi, in the binary packages and ports I don't find rpm file for version 0.86.2 (in particular for Fedora Core 2), but there will be ??

Re: [Clamav-users] Upgrading clamav-0.83 to clamav-0.86.1 problem.

2005-07-26 Thread ads nat
I am new to this . Can you guide me to remove old version of clamav. Thanks for support. --- Rob MacGregor [EMAIL PROTECTED] wrote: On 17/07/05, ads nat [EMAIL PROTECTED] wrote: Hi, I have installed clamav-0.83 as per documentation and it works fine for me. Now i have installed

[Clamav-users] protection

2005-07-26 Thread Mad Unix
How can I make sure that my clamav protection working correctly ? Thanks ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] protection

2005-07-26 Thread Steven Stern
Mad Unix wrote: How can I make sure that my clamav protection working correctly ? Use this site: http://www.webmail.us/testvirus to send the Eicar test virus signature to your server. -- Steve ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] protection

2005-07-26 Thread Rushan Sobar
- Original Message - From: Mad Unix [EMAIL PROTECTED] To: clamav-users@lists.clamav.net Sent: Tuesday, July 26, 2005 1:55 PM Subject: [Clamav-users] protection How can I make sure that my clamav protection working correctly ? Thanks ___

Re: [Clamav-users] protection

2005-07-26 Thread Daniel J McDonald
On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote: How can I make sure that my clamav protection working correctly ? http://www.webmail.us/testvirus That sends 30 or so variations on the eicar virus to your mail system. There are two or three that should pass (I think it's 17 and 18, but it has

Re: [Clamav-users] protection

2005-07-26 Thread Mad Unix
okay ... thats for the internet mail server, and what about a Intranet Mail server with local use only Thanks On 7/26/05, Daniel J McDonald [EMAIL PROTECTED] wrote: On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote: How can I make sure that my clamav protection working correctly ?

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Jim Maul
Thomas Booms wrote: Hello all, I've just upgraded from 0.86.1 to 0.86.2. The test tells me this: freshclam -v Current working dir is /usr/local/share/clamav Max retries == 3 ClamAV update process started at Tue Jul 26 13:17:22 2005 Querying current.cvd.clamav.net TTL: 900 Software version from

Re: [Clamav-users] protection

2005-07-26 Thread Daniel J McDonald
On Tue, 2005-07-26 at 16:26 +0400, Mad Unix wrote: okay ... thats for the internet mail server, and what about a Intranet Mail server with local use only go to eicar.org, grab http://eicar.org/download/eicar.com , and send that file to your mailserver. Thanks On 7/26/05, Daniel J

RE: [Clamav-users] protection

2005-07-26 Thread Kenneth Byrne
-Original Message- From: Mad Unix [mailto:[EMAIL PROTECTED] Sent: 26 July 2005 13:26 To: ClamAV users ML Subject: Re: [Clamav-users] protection okay ... thats for the internet mail server, and what about a Intranet Mail server with local use only Simplest way would be just to

RE: [Clamav-users] protection

2005-07-26 Thread Samuel Benzaquen
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mad Unix Sent: Tuesday, July 26, 2005 8:26 AM To: ClamAV users ML Subject: Re: [Clamav-users] protection okay ... thats for the internet mail server, and what about a Intranet Mail server with local

Re: [Clamav-users] announce?

2005-07-26 Thread Jan Pieter Cornet
On Mon, Jul 25, 2005 at 12:33:37PM -0700, Christopher McCrory wrote: What are the chances of getting new version announcements to the 'users' list also? It seems easy and would save a lot of people the trouble of I think it would be way better if the announce list, and/or possibly the users

[Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Pablo Chamorro C.
I installed clamwin under windows 2000 and it found a file infected with Trojan.Briss-1 but looking up in http://www.rainingfrogs.co.uk/index.orig.php?search=numvid=97961 I'm noting that only clamav detect that virus. How can we know that virus is really a virus if any other antivirus

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Steven Spence
Jim Maul wrote: And in the latest emails i got I see this: Received: (qmail 13171 invoked by uid 567); 26 Jul 2005 11:13:53 - Received: from 83.195.210.114 by host1 (envelope-from [EMAIL PROTECTED], uid 502) with qmail-scanner-1.25 (clamdscan: 0.86.1/993. spamassassin: 3.0.4.

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Diego d'Ambra
Steven Spence wrote: Or you can just edit /var/spool/qmailscan/qmail-scanner-queue-version.txt with the correct version. I am not quite sure why qmail-scanner just doesn't pull the version from the clamd binary instead of a text file. Performance? Best regards, Diego d'Ambra

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Jim Maul
Steven Spence wrote: Jim Maul wrote: And in the latest emails i got I see this: Received: (qmail 13171 invoked by uid 567); 26 Jul 2005 11:13:53 - Received: from 83.195.210.114 by host1 (envelope-from [EMAIL PROTECTED], uid 502) with qmail-scanner-1.25 (clamdscan: 0.86.1/993.

[Clamav-users] clamd PING

2005-07-26 Thread Gerard Seibert
When I issue the command as root: clamd PING I receive the following error message: ERROR: You must select server type (local/tcp). I assume that I am suppose to change something in the clamd.conf file, but I am unsure as to what. -- Gerard E. Seibert [EMAIL PROTECTED]

[Clamav-users] Weird timeout problem starting clmav milter after upgrade to 0.86.2

2005-07-26 Thread Erich Titl
Hi Folks I used to run clamav-milter without --external under 0.85. After upgrading to 0.86.2 I see an error --timeout must not be given when --external is not given. There is no such thing as timeout in my config so this is really weird. The only way getting rid of this was to specify

Re: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Daniel J McDonald
On Tue, 2005-07-26 at 08:52 -0500, Pablo Chamorro C. wrote: I installed clamwin under windows 2000 and it found a file infected with Trojan.Briss-1 but looking up in http://www.rainingfrogs.co.uk/index.orig.php?search=numvid=97961 I'm noting that only clamav detect that virus. How can we

RE: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Randal, Phil
Pablo Chamorro C. said I installed clamwin under windows 2000 and it found a file infected with Trojan.Briss-1 but looking up in http://www.rainingfrogs.co.uk/index.orig.php?search=numvid=97961 I'm noting that only clamav detect that virus. How can we know that virus is really a virus if

Re: [Clamav-users] Weird timeout problem starting clmav milter after upgrade to 0.86.2

2005-07-26 Thread Nigel Horne
Hi Folks I used to run clamav-milter without --external under 0.85. After upgrading to 0.86.2 I see an error --timeout must not be given when --external is not given. There is no such thing as timeout in my config so this is really weird. The only way getting rid of this was to specify

Re: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Daniel J McDonald
On Tue, 2005-07-26 at 08:52 -0500, Pablo Chamorro C. wrote: I installed clamwin under windows 2000 and it found a file infected with Trojan.Briss-1 but looking up in http://www.rainingfrogs.co.uk/index.orig.php?search=numvid=97961 I'm noting that only clamav detect that virus. How can we

Re: [Clamav-users] Weird timeout problem starting clmav milter after upgrade to 0.86.2

2005-07-26 Thread Graham Murray
Erich Titl [EMAIL PROTECTED] writes: I used to run clamav-milter without --external under 0.85. After upgrading to 0.86.2 I see an error --timeout must not be given when --external is not given. There is no such thing as timeout in my config so this is really weird. The only way getting rid

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Steven Spence
Diego d'Ambra wrote: Steven Spence wrote: Or you can just edit /var/spool/qmailscan/qmail-scanner-queue-version.txt with the correct version. I am not quite sure why qmail-scanner just doesn't pull the version from the clamd binary instead of a text file. Performance? Qmail-scanner

RE: [Clamav-users] clamd PING

2005-07-26 Thread Matthew.van.Eerde
Gerard wrote: When I issue the command as root: clamd PING That doesn't work. PING is not a command-line argument. If you telnet TO THE SOCKET [1], then write PING\n to the socket, you should receive PONG\n from the socket. [1]Yes, on some systems you really can telnet to a socket. --

Re: [Clamav-users] protection

2005-07-26 Thread Ken Jones
On Tue, July 26, 2005 10:35, Bob Hutchinson wrote: On Tuesday 26 Jul 2005 13:03, Daniel J McDonald wrote: On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote: How can I make sure that my clamav protection working correctly ? http://www.webmail.us/testvirus That sends 30 or so variations

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Jim Maul
Steven Spence wrote: Diego d'Ambra wrote: Steven Spence wrote: Or you can just edit /var/spool/qmailscan/qmail-scanner-queue-version.txt with the correct version. I am not quite sure why qmail-scanner just doesn't pull the version from the clamd binary instead of a text file.

Re: [Clamav-users] protection

2005-07-26 Thread Bob Hutchinson
On Tuesday 26 Jul 2005 16:43, Ken Jones wrote: On Tue, July 26, 2005 10:35, Bob Hutchinson wrote: On Tuesday 26 Jul 2005 13:03, Daniel J McDonald wrote: On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote: How can I make sure that my clamav protection working correctly ?

RE: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Pablo Chamorro C.
Try submitting the infected file to http://virusscan.jotti.org and http://www.virustotal.com and see if any of their scanners detect it. Thank for all the answers, I found that only clamav on July 12th included that signature, but now, where can I find information about the associated risks?

Re: [Clamav-users] clamd PING

2005-07-26 Thread Ronny Nussbaum
If you chose the LocalSocket method of communicating with clamd, you ca use a very cool piece of software called socat to send commands to clamd. You can read about it here: http://www.dest-unreach.org/socat/. Read the instructions on how to compile it, and then do: socat - /tmp/clamd COMMAND

[Clamav-users] Clamd processes and memory

2005-07-26 Thread Julio Maidanik
Hi, I am a newbie clam user. I have set clamav to scan incoming mail, and for efficiency purposes I have decided to use the daemon. When using top to list running processes I see that 1) clamd is listed twice and using 14M of memory each 2) whenever a mail is processed a new process starts,

RE: [Clamav-users] Clamd processes and memory

2005-07-26 Thread Matthew.van.Eerde
Julio wrote: I have set clamav to scan incoming mail, and for efficiency purposes I have decided to use the daemon. ... d) Using clamscan instead of the daemon will be less efficient? The daemon should be started at system bootup. It will take care of starting additional daemonic threads as