[Clamav-users] Should I submit...

2007-01-16 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 a very basic perl script which opens a listening socket and a shell? I found it after a hacker tried to gain entry. The script is nothing special (far from, 612 bytes) but I doubt people are actually using it for any legitimate means. BitDefender does

[Clamav-users] clamav-milter error question

2007-01-16 Thread Dennis Peterson
I've decided to explore clamav-milter. The objective is to have a single server where all clamAV process run. Think of it as a virtual AV appliance (Because that is what it is). The lab environment is a mail server (Solaris 9, Sparc) running sendmail and another server (Solaris 10, X86) that

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Dennis Peterson
Stephen Gran wrote: On Tue, Jan 16, 2007 at 09:47:45AM -0800, Chuck Swiger said: Edit the freshclam.conf and clamd.conf files and uncomment the User or DatabaseUser entries; these files will be under /etc/spam/clamav if you are using Apple's default location. Please see earlier discussion -

Re: [Clamav-users] Mailware passes undetected.... is this a failure within my MTA?

2007-01-16 Thread Dennis Peterson
Odhiambo Washington wrote: Is anyone using Exim with exiscan in this forum? That is where the subject is heading, as I can see. Peterson, what do you use? J-Chkmail from Jose-Marcio in France. Works great. dp ___ Help us build a comprehensive C

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Chuck Swiger
On Jan 16, 2007, at 3:52 PM, Stephen Gran wrote: I am sorry if I came across as harsher than I intended to. I know that you were part of the earlier discussion and provided valuable insight. No harm done. However, your research so far seems to have focused on freshclam rather than clamsc

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Stephen Gran
On Tue, Jan 16, 2007 at 03:40:26PM -0800, Chuck Swiger said: > On Jan 16, 2007, at 3:11 PM, Stephen Gran wrote: > >On Tue, Jan 16, 2007 at 09:47:45AM -0800, Chuck Swiger said: > >>Edit the freshclam.conf and clamd.conf files and uncomment the User > >>or DatabaseUser entries; these files will be un

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Chuck Swiger
On Jan 16, 2007, at 3:11 PM, Stephen Gran wrote: On Tue, Jan 16, 2007 at 09:47:45AM -0800, Chuck Swiger said: Edit the freshclam.conf and clamd.conf files and uncomment the User or DatabaseUser entries; these files will be under /etc/spam/clamav if you are using Apple's default location. Pleas

Re: [Clamav-users] Mailware passes undetected.... is this a failure within my MTA?

2007-01-16 Thread Stephen Gran
On Tue, Jan 16, 2007 at 08:58:39PM +0300, Odhiambo Washington said: > Is anyone using Exim with exiscan in this forum? That is where the > subject is heading, as I can see. > > Peterson, what do you use? Not exim, if I recall correctly. I do, if it helps any. I suspect you may have /defer_ok t

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Stephen Gran
On Tue, Jan 16, 2007 at 09:47:45AM -0800, Chuck Swiger said: > Edit the freshclam.conf and clamd.conf files and uncomment the User > or DatabaseUser entries; these files will be under /etc/spam/clamav > if you are using Apple's default location. Please see earlier discussion - this is a compil

[Clamav-users] the best way to update

2007-01-16 Thread heze54
Hi, I running ubuntu edgy 6.10. I've installed my clamav 0.88.4 using apt-get command but now if I use apt-get update /upgrade I now there is a new version but I can not upgrade it. Can I download from internet and recompile it? best regards heze54 Antes de imprimir piensa en tu respon

Re: [Clamav-users] My Bad, sorry

2007-01-16 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jay Lee wrote: > Steve Basford wrote: >> [EMAIL PROTECTED] wrote: >> >>> I am not available at the moment >>> >> etc. ;) >> > I apologize, I actually am testing the autoreply settings of our > mail client at the moment and only had it set for 3 min

Re: [Clamav-users] My Bad, sorry

2007-01-16 Thread Steve Basford
Jay Lee wrote: > one more. Again, sorry. > It's not me you have to worry about... it's the "others" ;) Good reminder to everyone though :) Cheers, Steve ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clama

[Clamav-users] My Bad, sorry (was: Mailware passes undetected.... is this a failure within my MTA?)

2007-01-16 Thread Jay Lee
Steve Basford wrote: [EMAIL PROTECTED] wrote: I am not available at the moment etc. ;) I apologize, I actually am testing the autoreply settings of our mail client at the moment and only had it set for 3 minutes, a list email managed to come at exactly that time unfortunately, m

Re: [Clamav-users] Re: Mailware passes undetected.... is this a failure within my MTA?

2007-01-16 Thread Steve Basford
[EMAIL PROTECTED] wrote: > I am not available at the moment etc. ;) ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Re: Mailware passes undetected.... is this a failure within my MTA?

2007-01-16 Thread jlee
I am not available at the moment. Jay Lee ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Mailware passes undetected.... is this a failure within my MTA?

2007-01-16 Thread Brian Morrison
On Tue, 16 Jan 2007 20:58:39 +0300 Odhiambo Washington <[EMAIL PROTECTED]> wrote: > Is anyone using Exim with exiscan in this forum? Yes, I do, currently have exim 4.66 running. I'll give you any help I can, which may not be a great deal in all honesty but I'm prepared to try. -- Brian Morriso

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread bsd
I have done that but It has not changed anything… Unfortunately. … Should I change the User to "root" instead of clamav ?? Le 16 janv. 07 à 18:47, Chuck Swiger a écrit : On Jan 16, 2007, at 3:35 AM, bsd wrote: And with root you already know what happened ! superxserv:~ root# clamscan -l /va

Re: [Clamav-users] Mailware passes undetected.... is this a failure within my MTA?

2007-01-16 Thread Odhiambo Washington
* On 15/01/07 21:23 -0800, Dennis Peterson wrote: | Odhiambo Washington wrote: | >* On 15/01/07 21:12 -0800, Dennis Peterson wrote: | >| Odhiambo Washington wrote: | >| >Hi, | >| > | >| >For some strange reasons, I've seen some malware go past my filters | >| >on several occasions. | >| >One such c

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Chuck Swiger
On Jan 16, 2007, at 3:35 AM, bsd wrote: And with root you already know what happened ! superxserv:~ root# clamscan -l /var/log/clamscan.log -r -v /Volumes/ RAID/Users/ & [1] 24605 superxserv:~ root# ERROR: Can't get information about user 0 [1]+ Exit 60 clamscan -l /var/log/c

[Clamav-users] test av

2007-01-16 Thread sasa
Hi, I have used: testvirus.org gfi.com .. for test my clamv installation, but now there aren't this tools on web sites, there are another test available ? thanks. -- Salvatore. ___ Help us build a comprehensive ClamAV guide: visit http://w

Re: [Clamav-users] Bypassing clamav-milter

2007-01-16 Thread kwijibo
Bryan Vest wrote: We have a mail server that gets filtered through postini. But for some reason management has decided to open it up to connections other than postini. Is there anyway that the clamav-milter can be told to only scan mail that was not relayed through postini? I have searched a go

[Clamav-users] Bypassing clamav-milter

2007-01-16 Thread Bryan Vest
We have a mail server that gets filtered through postini. But for some reason management has decided to open it up to connections other than postini. Is there anyway that the clamav-milter can be told to only scan mail that was not relayed through postini? I have searched a good bit and cant an

[Clamav-users] Exclude attach file from Scan

2007-01-16 Thread Lucio de Aquino Marinho
Hi Guys I have a trouble , a need a way to exclude some attached files scanning because this file is encrypted and clamav identify as virus . I am using qmail with qmail-scanner and clamav Thanks for all ___ Help us build a comprehensive ClamAV

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread bsd
Thanks for all these answers ! To be more precise : 1. OS X Server has root user account AKA "System Administrator" configured on BSD local files, Local Netinfo DB, and LDAP (as It is activated in my case). 2. I am scanning a bunch of files, but I am not scanning It through the Network b

[Clamav-users] Re: ClamAV upgrade

2007-01-16 Thread Gerard Seibert
On Tuesday January 16, 2007 at 12:44:15 (AM) Nick wrote: > Hi? > I am running a FreeBSD 6.0 and clamav 0.88.2_4. I have done a port upgrade > intending to upgrade to 0.88.7 but still this is what I get : > > # portupgrade -v clamav > ---> Session started at: Tue, 16 Jan 2007 08:38:20 +0300 > **

Re: [Clamav-users] Mailware passes undetected.... is this a failure within my MTA?

2007-01-16 Thread Steve Holdoway
On Tue, 16 Jan 2007 08:15:41 +0300 Odhiambo Washington <[EMAIL PROTECTED]> wrote: > * On 15/01/07 21:12 -0800, Dennis Peterson wrote: > | Odhiambo Washington wrote: > | >Hi, > | > > | >For some strange reasons, I've seen some malware go past my filters > | >on several occasions. > | >One such case