Re: [Clamav-users] clamav.conf

2004-04-09 Thread Steven Stern
On Fri, 09 Apr 2004 13:28:29 +0200, Mike van Vugt [EMAIL PROTECTED] wrote: Hello, Keep getting the message below over and over again. I am new to Linux and having a hard time to get this working. I want to uninstall Clamav and start over again. Can anyone tell me how to uninstall??? Regards,

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Steven Stern
On Fri, 09 Apr 2004 16:11:49 +0200, Mike van Vugt [EMAIL PROTECTED] wrote: Op vr 09-04-2004, om 15:44 schreef Steven Stern: On Fri, 09 Apr 2004 13:28:29 +0200, Mike van Vugt [EMAIL PROTECTED] wrote: Hello, Keep getting the message below over and over again. I am new to Linux and having

Re: [Clamav-users] Clamd

2004-04-13 Thread Steven Stern
On Tue, 13 Apr 2004 16:40:15 +0200, Mike van Vugt [EMAIL PROTECTED] wrote: Installed clamav, clamav-db and libclamav1. Tried to install and run clamd but got the next message # /usr/sbin/clamd LibClamAV Error: cli_cvdload(): Can't create temporary directory /root/tmp/163df1b13c4bdbca ERROR:

Re: [Clamav-users] clamav and milter - dedicated mailing list.

2004-04-14 Thread Steven Stern
On Wed, 14 Apr 2004 17:01:15 +0300, Odhiambo Washington [EMAIL PROTECTED] wrote: May I propose a separate mailing list for milter users? There seems to be alot of discussions about milter (now I even know it's some form of sendmail plugin) that warrants this. Some of us use Exiscan and we find

Re: [Clamav-users] know virus not detected

2004-04-15 Thread Steven Stern
On Thu, 15 Apr 2004 13:09:29 +0200, Andrea Trasatti [EMAIL PROTECTED] wrote: I update my virii DB once everyday this is my latest update status: ClamAV update process started at Thu Apr 15 02:00:00 2004 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES main.cvd is up to date (version: 22,

Re: [Clamav-users] Clamav 0.70 Strange Issue

2004-04-18 Thread Steven Stern
On Sun, 18 Apr 2004 05:05:50 +0100, Robert [EMAIL PROTECTED] wrote: through the mail server and clam spotted and quarantined it BUT when I run clamscan on the quarantine folder there is no mention of 'SomeFool' at all. Any insight.?? Many thanks. Robert. Use clamscan --mbox the --mbox

Re: [Clamav-users] w32.netsky.x

2004-04-20 Thread Steven Stern
On Tue, 20 Apr 2004 15:30:28 -0400, Daniel Corbe [EMAIL PROTECTED] wrote: Hey, I've got clamav installed on my mail server and am currently using it to scan E-Mail for viruses. Today, my users are getting hammered with W32.Netsky.X and I don't see that clamav's virus definitions have this one

Re: [Clamav-users] Newbie need help

2004-04-21 Thread Steven Stern
On Thu, 22 Apr 2004 00:20:03 +0800, Chan Ho [EMAIL PROTECTED] wrote: I set my server to download virus db automatically. However, do I need to reload it as I see that clamd has the reload command. If so, how to do so? Look at freshclam.conf. Edit the line 'NotifyUpdate'. -- Steve

Re: [Clamav-users] Newbie need help

2004-04-21 Thread Steven Stern
On Thu, 22 Apr 2004 02:24:57 +0800, Chan Ho [EMAIL PROTECTED] wrote: thats the problem, i don't really know how should I edit this line. - Original Message - From: Steven Stern [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 22, 2004 12:55 AM Subject: Re: [Clamav-users

Re: [Clamav-users] Re: clam-av/milter, segmentation fault

2004-04-22 Thread Steven Stern
On Thu, 22 Apr 2004 15:25:02 -0700, [EMAIL PROTECTED] wrote: In the message dated: Thu, 22 Apr 2004 16:35:01 EDT, The pithy ruminations from Don Levey on RE: [Clamav-users] Re: clam-av/milter, segmentation fault were: = [EMAIL PROTECTED] wrote: = [SNIP!] = Yes, it does - thanks! =

Re: [Clamav-users] Re: clam-av/milter, segmentation fault

2004-04-22 Thread Steven Stern
On Thu, 22 Apr 2004 21:25:21 -0400, Don Levey [EMAIL PROTECTED] wrote: On Thu, 2004-04-22 at 20:31, Don Levey wrote: Thank you again - this worked. As far as I can tell, it's functioning correctly now. Thanks all for your help! -Don Oops, I may have spoken too soon. My maillog is

Re: [Clamav-users] Re: clam-av/milter, segmentation fault

2004-04-22 Thread Steven Stern
On Thu, 22 Apr 2004 22:36:14 -0400, Don Levey [EMAIL PROTECTED] wrote: Change the security on /var/run/clamav to clamav:clamav $ ls -ld /var/run/clamav drwxr-xr-x 2 clamav clamav 4096 Apr 19 08:24 /var/run/clamav -- Steve, Unfortunately, that didn't seem to have an effect. The

Re: [Clamav-users] Re: clam-av/milter, segmentation fault

2004-04-23 Thread Steven Stern
On Fri, 23 Apr 2004 09:12:03 -0400, Don Levey [EMAIL PROTECTED] wrote: A search of my system doesn't turn up either a clamav-milter.sock or clamd.pid. The milter sock file should, at the very least, show up here since this is where I'm pointing in the sendmail.mc file. I had thought I was doing

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Steven Stern
On Mon, 10 May 2004 11:57:37 -0700, Bora [EMAIL PROTECTED] wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. So the question is do you recommend moving to? SuSE,

Re: [Clamav-users] Clamav error

2004-04-25 Thread Steven Stern
On Sun, 25 Apr 2004 13:22:28 +0200, John van Lit [EMAIL PROTECTED] wrote: All, At this moment I'm using clamav-0.70-rc. When I check my update log is see the following error. Your ClamAV installation is OUTDATED - please update immediately ! How can I resolve this? Can I aspect

Re: [Clamav-users] Can't get clamav-milter going

2004-04-26 Thread Steven Stern
On Mon, 26 Apr 2004 11:48:15 -0400, George Bell [EMAIL PROTECTED] wrote: I had clamav antivirus working fine for a couple months. Now after a reboot I can't it started to save my neck. After starting the clamd deamon, which creates /var/run/clamav/clamd.sock, and starting clamav-milter,

Re: [Clamav-users] problems using sendmail with clamav on rh7.3

2004-05-04 Thread Steven Stern
On Tue, 4 May 2004 11:16:20 -0600, Raul Elizondo [EMAIL PROTECTED] wrote: and when i run m4, this 2 lines does not even make any change in sendmail.cf. Run m4? make -C /etc/mail should compile the .m4 file into the .cf result. -- Steve

Re: [Clamav-users] Remove 0.68 before installing 0.70?

2004-05-07 Thread Steven Stern
On Fri, 7 May 2004 09:56:38 -0400, Ken Morley [EMAIL PROTECTED] wrote: I've read herein that it's recommended that you uninstall ClamAV 0.68 before you install 0.70. I apologize if this is a stupid question, but how do you uninstall 0.68? I think I've read all of the documentation that comes

Re: [Clamav-users] Exim + ClamAV + what?

2004-05-18 Thread Steven Stern
On Tue, 18 May 2004 16:34:08 +1200, Ray Jackson [EMAIL PROTECTED] wrote: does the list believe that ClamAV is ready for the mainstream? for what it's worth, CompuServe is now using ClamAV to scan mail for users of the compuserve classic service. -- Steve

Re: [Clamav-users] Still trying to get clamdscan working.

2004-05-18 Thread Steven Stern
On Tue, 18 May 2004 12:48:01 -0700, Harrell, Roger [EMAIL PROTECTED] wrote: I've been trying to get clamdscan working for quite some time now. I have installed clamav. clamscan works. Clamdscan fails with: connect(): Connection refused ERROR: Can't connect to clamd. Where is your .sock file for

Re: [Clamav-users] Still trying to get clamdscan working.

2004-05-18 Thread Steven Stern
On Tue, 18 May 2004 14:21:37 -0700, Harrell, Roger [EMAIL PROTECTED] wrote: I've been trying to get clamdscan working for quite some time now. I have installed clamav. clamscan works. Clamdscan fails with: connect(): Connection refused ERROR: Can't connect to clamd. Where is your .sock file for

Re: [Clamav-users] Still trying to get clamdscan working.

2004-05-18 Thread Steven Stern
On Tue, 18 May 2004 14:21:37 -0700, Harrell, Roger [EMAIL PROTECTED] wrote: I've been trying to get clamdscan working for quite some time now. I have installed clamav. clamscan works. Clamdscan fails with: connect(): Connection refused ERROR: Can't connect to clamd. More to check. What do you

[Clamav-users] quarantine files

2004-05-25 Thread Steven Stern
It seems that one of the changes from .70 to .71 is that the files in the quarantine directory are now stored in subdirectories based on the date. Have there been any changes in how long these files are kept before deletion? Are the subdirectories deleted along with the files? # ll

[Clamav-users] -t option for clamav-milter

2004-05-25 Thread Steven Stern
According to the man page, I should be able to use =t as an option for clamav-milter with no further argument. The page says that if no file name is supplied, a hard coded default is used. When I use just -t, the error is Starting clamav-milter: /usr/sbin/clamav-milter: option requires an

[Clamav-users] not getting notice to recipient

2004-05-27 Thread Steven Stern
Clamav-milter is catching viruses OK, but the ultimate recipient is not receiving any notice that there was an interception. What flag am I missing or misusing? -lo --max-children=10 --noreject --dont-log-clean --server=localhost local:/var/run/clamav/clamav-milter.sock

Re: [Clamav-users] not getting notice to recipient

2004-05-27 Thread Steven Stern
On Thu, 27 May 2004 09:03:14 -0500, Steven Stern [EMAIL PROTECTED] wrote: Clamav-milter is catching viruses OK, but the ultimate recipient is not receiving any notice that there was an interception. What flag am I missing or misusing? -lo --max-children=10 --noreject --dont-log-clean --server

Re: [Clamav-users] not getting notice to recipient

2004-05-27 Thread Steven Stern
On Thu, 27 May 2004 09:03:14 -0500, Steven Stern [EMAIL PROTECTED] wrote: Clamav-milter is catching viruses OK, but the ultimate recipient is not receiving any notice that there was an interception. What flag am I missing or misusing? -lo --max-children=10 --noreject --dont-log-clean --server

Re: [Clamav-users] not getting notice to recipient

2004-05-27 Thread Steven Stern
On Thu, 27 May 2004 18:56:25 +0100, Nigel Horne [EMAIL PROTECTED] wrote: That's because you've used the '-o' option to clamav-milter. I'll buy that. Why does scanning outgoing mail do that? -- Steve --- This SF.Net email is sponsored

Re: [Clamav-users] Changing the Virus Event message??????

2004-05-31 Thread Steven Stern
On Mon, 31 May 2004 13:40:48 +0100, Nigel Horne [EMAIL PROTECTED] wrote: On Monday 31 May 2004 13:19, Thomas Kinghorn wrote: How can I, as postmaster, receive a notification showing: Virus XYZ found in mail from: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] to [EMAIL PROTECTED]

Re: [Clamav-users] Clamd message Can't create temporary directory

2004-05-31 Thread Steven Stern
On Mon, 31 May 2004 08:19:47 -0400, Clive Dove [EMAIL PROTECTED] wrote: LibClamAV Error: cli_cvdload(): Can't create temporary directory /root/tmp/clamav-39c79127f6c8ccfa I tried resetting the permissions for /root/tmp/ but that made no difference. edit clamav.conf: # Optional path to the

Re: [Clamav-users] Freshclam not responding

2004-06-01 Thread Steven Stern
On Tue, 1 Jun 2004 12:45:29 -0500, McKeever Chris [EMAIL PROTECTED] wrote: I have found that freshclam just like to stop occasionally, I run a cron job to see that it is still running, I guess one could get a little more creative and set it to star tback p if it is ofund to be missing Why

Re: [Clamav-users] Comparison clamav with other anti virus software

2004-06-02 Thread Steven Stern
On Wed, 2 Jun 2004 17:33:30 +0200, Clamav [EMAIL PROTECTED] wrote: Hello! We are using clamav and clamav-milter on our mail gateway together with sendmail and it works perfectly - I'm really happy with it and think it is a great piece of software. I would be interested in differences between

Re: [Clamav-users] ClamAV 0.72 Released

2004-06-04 Thread Steven Stern
On Fri, 04 Jun 2004 22:25:14 +0200, Krištof Petr [EMAIL PROTECTED] wrote: To tell the truth, I unpacked wrong tarball by mistake. Sorry. Fixed now. Thanks for point out that. Petr http://crash.fce.vutbr.cz/crash-hat/2/clamav/ is empty! (Thanks for your builds!) -- Steve

Re: [Clamav-users] ClamAV 0.72 Released

2004-06-05 Thread Steven Stern
On Fri, 04 Jun 2004 22:25:14 +0200, Krištof Petr [EMAIL PROTECTED] wrote: Michael St. Laurent wrote: H... I went to the crash-hat repository and there are RPMs there with a timestamp from this morning but the filename is clamav-0.71-1.i386.rpm marketing fairytales We did run many

[Clamav-users] (fwd) Re: bug in clamav-milter loggin

2004-06-06 Thread Steven Stern
On Sun, 6 Jun 2004 18:21:39 +0400, Andrey Melnikoff [EMAIL PROTECTED] wrote: In article [EMAIL PROTECTED] you wrote: Version 0.72 seems to have a typo in the routine that does logging for clamav-milter: Jun 5 17:47:04 ciscy sendmail[28711]: i55Ml3ll028711: Milter add: header:

Re: [Clamav-users] bug in clamdscan

2004-06-19 Thread Steven Stern
On Sat, 19 Jun 2004 10:09:48 -0600, Dan Egli [EMAIL PROTECTED] wrote: I've encountered this bug a few times: [EMAIL PROTECTED] test]# touch file1 [EMAIL PROTECTED] test]# touch file2 [EMAIL PROTECTED] test]# touch file3 [EMAIL PROTECTED] test]# ls file1 file2 file3 [EMAIL PROTECTED] test]#

Re: [Clamav-users] bug in clamdscan

2004-06-20 Thread Steven Stern
On Sun, 20 Jun 2004 10:42:26 -0600, Dan Egli [EMAIL PROTECTED] wrote: But Mr. Stern was saying Working-As-Designed and I'm just saying Working-As-Designed makes no sense. If it's a bug then ok, it's a bug. I can understand that and forgive quite easily. As designed may not be the way you

Re: [Clamav-users] clamav-milter and sendmail 8.13.0 problem.

2004-07-13 Thread Steven Stern
On Tue, 13 Jul 2004 11:19:19 -0500, James Nelson [EMAIL PROTECTED] wrote: I previously read there was a similar problem with clamav-milter but it was fixed.  Is this possibly its return?  Or could something else be causing it? Check the name(s) of the sock file defined (1) in the milter

Re: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.

2004-07-13 Thread Steven Stern
On Tue, 13 Jul 2004 13:09:38 -0500, James Nelson [EMAIL PROTECTED] wrote: Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to error state The .sock file

Re: [Clamav-users] it is posible to edit the virus intercepted msg?

2004-07-15 Thread Steven Stern
On Thu, 15 Jul 2004 17:16:13 -0300, Matias Lopez Bergero [EMAIL PROTECTED] wrote: Hi again, First I would like to say that this av it is excellent! Great work! I have a question, perhaps it is a little trivial. I am using ClamAV version 0.70 and clamav-milter version 0.70j. It is possible to

Re: [Clamav-users] Loading clamd before service starts

2004-07-24 Thread Steven Stern
On Sat, 24 Jul 2004 15:40:49 +0100, sarky [EMAIL PROTECTED] wrote: I got the init file from the Redhat directory and did it manualy for clamav-milter but i can not figure out the one from clamd. can you send me the init file clamd then i can just edit and get it to run before and shutdown

Re: [Clamav-users] Loading clamd before service starts

2004-07-26 Thread Steven Stern
On Mon, 26 Jul 2004 10:27:48 -0300, Mariano Absatz [EMAIL PROTECTED] wrote: Would these RPMs work OK on fc1? Or will there be updates for the fc1 releases? I couldn't tell you. I'm running FC2 with the crash-hat RPM for 0.75. FC1 is oh so 2003. -- Steve

Re: [Clamav-users] My.Doom.o

2004-07-27 Thread Steven Stern
On Tue, 27 Jul 2004 15:26:30 +, Scott Ryan [EMAIL PROTECTED] wrote: I have not submitted any virii (correct word?) before, so please bear with me. I always run latest stable, currently 0.75 and have not had any virus issues up until now. I am seeing a high number of mails in the below format

Re: [Clamav-users] Sigtool Build Time

2004-07-28 Thread Steven Stern
On Wed, 28 Jul 2004 10:15:53 -0500, Vernon A. Fort [EMAIL PROTECTED] wrote: I'm tring to understand the Build time string in the sigtoo -i daily.cvd file: Build time: 27 Jul 2004 15-12 +0200 specifically with the 15-12 +0200. I want to convert this to Central time (US), any pointers.

Re: [Clamav-users] Trojan.JS.RunMe?

2004-08-09 Thread Steven Stern
On Mon, 9 Aug 2004 11:03:27 -0700 (PDT), Scott Call [EMAIL PROTECTED] wrote: I'm seeing a huge quantity of Trojan.JS.RunMe both with 0.75.1 and the latest snapshot. I can't seem to find any information on this signature (nothing in the virusdb list and nothing on google). As usual, ClamAV's

Re: [Clamav-users] Trojan.JS.RunMe?

2004-08-09 Thread Steven Stern
On Mon, 9 Aug 2004 23:34:04 +0100, Matt [EMAIL PROTECTED] wrote: As usual, ClamAV's name came out too soon ironic adj 1: humorously sarcastic or mocking; dry humor; an ironic remark often conveys an intended meaning obliquely; an ironic novel; an ironical smile; with a wry Scottish wit

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-19 Thread Steven Stern
On Fri, 20 Aug 2004 02:15:51 +0530, Rajanikanth P [EMAIL PROTECTED] wrote: Hello All, I want to write a script/program which checks for clam virus updates every 10 minutes and updates the respective files. Can anybody provide me some information on sites that host clam av definitions and also

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-19 Thread Steven Stern
On Thu, 19 Aug 2004 16:41:04 -0700, Todd Lyons [EMAIL PROTECTED] wrote: Steven Stern wanted us to know: NO! Once an hour is reasonable, but not 6 times an hour! I was showing the OP how, not condoning his schedule. I run freshclam on th 17th minute every 4 hours. -- Steve

Re: [Clamav-users] [OT] Symantec update frequency

2004-09-01 Thread Steven Stern
On Wed, 01 Sep 2004 02:02:30 +0200, Niek [EMAIL PROTECTED] wrote: On 8/31/2004 11:02 PM +0200, John Jolet wrote: [snip] Symantec's corporate products can be configured to update more often, than standard liveupdate. Kind regards, Niek Baakman I use the following script to update my Windows

Re: [Clamav-users] ERROR: Can't open /var/log/clamd.log in append mode

2004-09-25 Thread Steven Stern
On Thu, 23 Sep 2004 12:31:13 +0200, Meni Shapiro [EMAIL PROTECTED] wrote: Hi, I get this message a lot from the crod Daemon. why? i run linux crux 1.2 and mimedefang+SA Usually, this means that the clamd process doesn't have write access to the log. If you're running clamd as the user clamav,

[Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Steven Stern
After going from .75 to .80rc, I'm finding an error reported by logwatch from clamav-milter. Example: Can't rename /var/spool/clamav/040924/msg.ShraVX to _var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P # clamd --version ClamAV 0.80rc/503/Thu Sep 23 14:32:44 2004 clamav-milter is run as #

Re: [Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Steven Stern
On Sat, 25 Sep 2004 09:41:01 -0500, Steven Stern [EMAIL PROTECTED] wrote: After going from .75 to .80rc, I'm finding an error reported by logwatch from clamav-milter. Example: Can't rename /var/spool/clamav/040924/msg.ShraVX to _var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P # clamd

Re: [Clamav-users] Renaming quarantined files by clamav-milter

2004-09-25 Thread Steven Stern
On Sat, 25 Sep 2004 16:24:43 +0100, Nigel Horne [EMAIL PROTECTED] wrote: On Saturday 25 Sep 2004 15:41, Steven Stern wrote: Can't rename /var/spool/clamav/040924/msg.ShraVX to _var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P # clamd --version ClamAV 0.80rc/503/Thu Sep 23 14:32:44 2004

Re: [Clamav-users] Clamd.conf setting

2004-10-30 Thread Steven Stern
On Sat, 30 Oct 2004 23:17:06 +0800, Awie [EMAIL PROTECTED] wrote: All, I found clamd write the LOG into /var/log/message. I want clamdscan not write LOG anymore. What parameter shoudl I remove or add in clamd.conf? in /etc/clamd.conf # Use system logger (can work together with LogFile).

Re: [Clamav-users] please fix your freshclam setup

2004-11-01 Thread Steven Stern
On Mon, 1 Nov 2004 01:26:23 +0100, Luca Gibelli [EMAIL PROTECTED] wrote: We ask you to verify that your freshclam setup is correct, in particular: 1) if you run freshclam from crontab, check that you have an entry like the following: N * * * * /usr/local/bin/freshclam --quiet where N is a

Re: [Clamav-users] Problem With Freshclam

2004-11-05 Thread Steven Stern
On Fri, 5 Nov 2004 20:12:01 -0400, Listas [EMAIL PROTECTED] wrote: # Uncomment the following line and replace XY with your country # code. See http://www.iana.org/cctld/cctld-whois.htm for the full list. # Default: There is no default, which results in an error when running freshclam

Re: [Clamav-users] Problem With Freshclam

2004-11-06 Thread Steven Stern
On Fri, 5 Nov 2004 20:12:01 -0400, Listas [EMAIL PROTECTED] wrote: Apologies for the snarky reply. My freshclam.conf is: DatabaseDirectory /var/lib/clamav UpdateLogFile /var/log/clamav/freshclam.log LogSyslog PidFile /var/run/clamav/freshclam.pid DatabaseOwner clamav DNSDatabaseInfo

Re: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Steven Stern
On Sat, 6 Nov 2004 15:57:13 -0500, Cory Megitt [ClamAV] [EMAIL PROTECTED] wrote: Hi All; The following command gets run at 2am each night. /usr/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I always find an email stating the following: ERROR: Clamd was NOT notified: Can't connect

Re: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Steven Stern
On Sat, 6 Nov 2004 17:42:28 -0500, Cory Megitt [ClamAV] [EMAIL PROTECTED] wrote: The firewall is setup to allow incoming and outgoing on 127.0.0.1 on source and destination ports 3310. What do you recommend I change here? It appears I have a mixture of different settings. I suggest you use the

Re: [Clamav-users] quarantine not working with clamav-milter

2004-11-11 Thread Steven Stern
On Thu, 11 Nov 2004 11:56:16 -0500, Ronnie Taylor [EMAIL PROTECTED] wrote: both clamd and clamav-milter are running as the clamav usersee my output from the ps command: clamav 30686 0.0 0.5 38740 1440 ?S09:58 0:00 /usr/sbin/clamav-milter --quiet --dont-wait --force-scan

[Clamav-users] Pblm with Clamscan on FC3

2004-11-23 Thread Steven Stern
clamd and clamav-milter seem to be working OK, but I'm running into this after compiling clam from source for FC3: $ clamscan . LibClamAV Error: cl_loaddbdir(): Can't open directory Ù/lib/clamav ERROR: Unable to open file or directory --- SCAN SUMMARY --- Known viruses: 0 Scanned

Re: [Clamav-users] Pblm with Clamscan on FC3

2004-11-24 Thread Steven Stern
On Wed, 24 Nov 2004 09:05:18 +0100, Ralf Bosz [EMAIL PROTECTED] wrote: LibClamAV Error: cl_loaddbdir(): Can't open directory Ù/lib/clamav ERROR: Unable to open file or directory Looks like a problem with permissions. Check the permissions on your lib-directory. You have to make it readable to

Re: [Clamav-users] Pblm with Clamscan on FC3

2004-11-24 Thread Steven Stern
On Wed, 24 Nov 2004 12:06:03 +0100, Tomasz Kojm [EMAIL PROTECTED] wrote: It looks like the directory name is somehow being munged. What should I be looking at to fix this? Please run clamscan under valgrind and post the output here. Here's the configure line: ./configure --enable-milter

Re: [Clamav-users] Re: How do yo start clamd?

2004-11-28 Thread Steven Stern
On Sun, 28 Nov 2004 12:07:02 -0500, Tom [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] sbin]# /sbin/service clamd restart clamd: unrecognized service chkconfig --add clamd chkconfig --levels 345 clamd on /sbin/service clamd start This assumes that you have the file /etc/init.d/clamd. # cat

[Clamav-users] (no subject)

2004-12-19 Thread Steven Stern
-- Steve ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] help

2004-12-29 Thread Steven Stern
On Thu, 30 Dec 2004 09:50:45 +0530, manu [EMAIL PROTECTED] wrote: Dear sir, please help me out for our mail server. we want to have a antivirus software for our linux mail server with spam block. please help me for this OK, Manu. Let's start with the basics: What Linux distro? What MTA?

Re: [Clamav-users] help

2004-12-29 Thread Steven Stern
On Thu, 30 Dec 2004 09:50:45 +0530, manu [EMAIL PROTECTED] wrote: Dear sir, please help me out for our mail server. we want to have a antivirus software for our linux mail server with spam block. please help me for this OK, Manu. Let's start with the basics: What Linux distro? What MTA?

Re: [Clamav-users] [OT] Url spoofing

2004-12-31 Thread Steven Stern
On Fri, 31 Dec 2004 16:15:34 +, Matt [EMAIL PROTECTED] wrote: Well, this must be a classic even for M$. http://support.microsoft.com/?id=833786 Subject of advisory: Steps that you can take to help identify and to help protect yourself from deceptive (spoofed) Web sites and malicious

Re: [Clamav-users] clamd refuses to start

2005-01-15 Thread Steven Stern
On Sat, 15 Jan 2005 13:53:14 -0600 (CST), Sam [EMAIL PROTECTED] wrote: Hi Everyone This is my first post on this list. I spent the better part of last night into the wee hours of this morning trying to get clam to run. I'm using RH EL3. I've compiled clam, created /var/run/clamav, touch'd

Re: [Clamav-users] Setting clamd, clam-milter, and sendmail to start in correct order

2005-01-16 Thread Steven Stern
On Sun, 16 Jan 2005 14:33:58 -0600, Sam Morris [EMAIL PROTECTED] wrote: Hi Everyone Well, after much hair loss I finally have Clam running correctly on my server. I'm fairly inexpeienced with Linux, but am working on it... :) I have a question. How have you found the best way to ensure that the

[Clamav-users] clamav-milter without clamd

2005-01-27 Thread Steven Stern
It's a great idea to have clamav-milter do it's own thing. BUT, what is its relationship with freshclam? In the clamav-milter - clamd, you could be assured that clamd would always be aware of updates installed by freshclam. How does this work in the all milter, all the time, world? -- Steve

Re: [Clamav-users] clamav-milter without clamd

2005-01-28 Thread Steven Stern
On Fri, 28 Jan 2005 06:16:01 -, Nigel Horne [EMAIL PROTECTED] wrote: There is a thread within clamav-milter which wakes up from time to time and reloads the database when freshclam has been run. Thanks. Exactly what I needed to know. Suggestion for .82: Have freshclam notify clamav-milter

[Clamav-users] sendmail out of memory after enabling clmilter

2004-03-19 Thread Steven Stern
Pardon if this has been discussed in the archives. I searched on various keywords with either no luck or too many hits to be useful. I've installed clam 0.70RC and clam-mailter 0.70RC from the RPMs onto a system running Fedora Core 1 with sendmail 8.12.10. clamav runs fine, but when I put the

[Clamav-users] sendmail: clmilter.sock is unsafe

2004-03-19 Thread Steven Stern
I've made some progress. The sendmail out of memory stuff is gone, but now sendmail is complaining that the clmilter.sock is unsafe. I've Googled myself into a tizzy, but can't find a fix. These errors are in /var/log/maillog. Mar 19 15:22:45 ciscy sendmail[18114]: i2JLMjNR018114: Milter

[Clamav-users] sendmail: clmilter.sock is unsafe: I AM AN IDIOT

2004-03-19 Thread Steven Stern
I am an idiot. The sock file was defined with one name in sendmail.mc and another in the configuration file for the milter itself. I made them the same and sendmail is happy. so what's supposed to happen when it detects a virus? When I send myself a message with eicar.com attached, this header

Re: [Clamav-users] sendmail: clmilter.sock is unsafe

2004-03-19 Thread Steven Stern
On Fri, 19 Mar 2004 18:25:25 -0500 (EST), Pat Masterson [EMAIL PROTECTED] wrote: Stve, I had the same problem, and do this in my start script: rm /var/run/clamav/clmilter.sock chmod 777 /var/run/clamav/ = start milter here = chmod 755 /var/run/clamav/ = start sendmail here = And nobody

Re: [Clamav-users] sendmail: clmilter.sock is unsafe: I AM AN IDIOT

2004-03-19 Thread Steven Stern
On Fri, 19 Mar 2004 17:51:11 -0500, Ryan Moore [EMAIL PROTECTED] wrote: You probably want the -b option to reject the DATA phase of the SMTP session if the milter detects a virus. I added the -b option to clamav-milter. As root, i typed cat eircar.com | mail steve -s test Sendmail didn't

Re: [Clamav-users] [Survey] Who use clamav on large network ?

2004-03-22 Thread Steven Stern
On Mon, 22 Mar 2004 15:42:01 +0100, Cedric Foll [EMAIL PROTECTED] wrote: I'd like to know where clamav is used too on large networks. I think it should be a good idea to put a 'testify' page on the web site in order to list which are users of clamav. Regards.

[Clamav-users] bounce vs. quarantine

2004-03-22 Thread Steven Stern
On second thought, maybe I should have a chance to look at incoming messages rather than bouncing them with a 550. I've removed the -b from the clamav-milter startup. I've replaced it with --quarantine=/var/spool/clamav. Is this what's necessary to quarantine messages in /var/spool/clamav? old:

Re: [Clamav-users] sendmail: clmilter.sock is unsafe: I AM AN IDIOT

2004-03-22 Thread Steven Stern
On Mon, 22 Mar 2004 16:33:36 +0100, Krištof Petr [EMAIL PROTECTED] wrote: Be sure your virus db is up to date by running freshclam. Petr crontab -l [snip] 17 */4 * * * /usr/bin/freshclam --quiet -l /var/log/clam-update.log -- Steve

Re: [Clamav-users] clam not fresh

2004-03-26 Thread Steven Stern
On Fri, 26 Mar 2004 09:14:08 -0600, Mark Novak [EMAIL PROTECTED] wrote: Jim My number of signatures is exactly the same as yours. When I grep for somefool, I stop at M. I do still have the old style signatures located in /usr/share/clamav from clam-0.65. Tomasz mentioned in an earlier

Re: [Clamav-users] RPM Stability

2004-04-02 Thread Steven Stern
On Fri, 02 Apr 2004 11:22:11 +0100, WipeOut [EMAIL PROTECTED] wrote: Hi is anyone have stability issues with Petr Kristov's RPM's ?? I am running them on Fedora Core 1.. The problem is when I try to use clamscan or clamdscan/clamd with my mail server it causes the mail server to crash.. The

Re: [Clamav-users] RPM Stability

2004-04-02 Thread Steven Stern
On Fri, 02 Apr 2004 15:49:00 +0100, WipeOut [EMAIL PROTECTED] wrote: I am using a mail server called surgemail which calls the command line virus scanner.. Aha. I don't know enough of the internals to know if that's more or less efficient than a sendmail milter. -- Steve

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Departamento de Informatica wrote: Hi, i've looking for information about this error(?) , the Logwatch of my CentOS send a daily mail to root, always appears this lines Milter (clamav-milter): local socket name /var/clamav/clmilter.sock' unsafe:

Re: [Clamav-users] ClamAV OUTDATED

2007-04-13 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clovis Tristao wrote: Hi, When run command freshclam -v, appears this messages: WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.88.7 Recommended version: 0.90.2 How I make to bring up to date the version of the

Re: [Clamav-users] RPM 0.90.2 FC4

2007-04-18 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Niepel wrote: Hello, an anyone tell me where i can get RPM?s for Fedora Core 4? Or has anyone have an hotwo to build those rpm from tar.gz? download the unpack the tar.gz file In the directory, ./configure make make

Re: [Clamav-users] RPM 0.90.2 FC4

2007-04-18 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis Peterson wrote: Steven Stern wrote: Robert Niepel wrote: Hello, an anyone tell me where i can get RPM?s for Fedora Core 4? Or has anyone have an hotwo to build those rpm from tar.gz? download the unpack the tar.gz file

Re: [Clamav-users] What is Email.Faketube?

2007-08-26 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/26/2007 12:24 AM, BG Mahesh wrote: I am using Clamav 0.91.2 with Surgemail. The email I sent has no attachments but the server bounced back the message stating the attachment is infected with Email.Faketube. What is Email.Faketube?

Re: [Clamav-users] I need to refute a 'security expert'

2007-11-16 Thread Steven Stern
[EMAIL PROTECTED] wrote: Hello all. We've had some consultant make the spurious claim that Clam AV only scans for 'windows viruses' and is really only useful for 'scanning email'. Despite the fact that I know this to be patently false, is there documentation out there I can slap him with

Re: [Clamav-users] announcing ClamAV 0.92

2007-12-17 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/17/2007 08:05 PM, Ed Kasky wrote: At 07:01 AM Monday, 12/17/2007, you wrote -= Dear ClamAV users, This release provides various bugfixes, optimisations and improvements to the scanning engine. The new features include support for ARJ and

Re: [Clamav-users] 0.92 and memory usage

2007-12-18 Thread Steven Stern
Fabio Pedretti wrote: I just upgraded my servers after a little testing: 0.92 seems to be about 20% faster than 0.91.2 and about 15% faster than 0.92rc2. The initial memory usage seems to be a little improved also (from 36m to 35m). Remains, however, the problem of icreased memory usage

Re: [Clamav-users] 0.92 and memory usage

2007-12-18 Thread Steven Stern
Steven Stern wrote: Fabio Pedretti wrote: I just upgraded my servers after a little testing: 0.92 seems to be about 20% faster than 0.91.2 and about 15% faster than 0.92rc2. The initial memory usage seems to be a little improved also (from 36m to 35m). Remains, however, the problem

Re: [Clamav-users] 0.92 and memory usage

2007-12-18 Thread Steven Stern
Steven Stern wrote: Fabio Pedretti wrote: I just upgraded my servers after a little testing: 0.92 seems to be about 20% faster than 0.91.2 and about 15% faster than 0.92rc2. The initial memory usage seems to be a little improved also (from 36m to 35m). Remains, however, the problem

Re: [Clamav-users] Updated to Version 0.92 but Logwatch Utility Reports Version is still 0.91.2

2007-12-27 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/27/2007 07:16 AM, Kaplan, Andrew H. wrote: Hi there - I recently upgraded ClamAV from version 0.91.2 to 0.92 via the source upgrade procedure shown on the ClamAV website. The clamd and freshclam binaries are running fine, and when

Re: [Clamav-users] Issue starting clamd

2008-01-02 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/02/2008 07:23 AM, Joseph L. Casale wrote: Not on CentOS it can't. CentOS has SELinux enabled by default. HTH T. Yup, that was the ticket. Looking on rpmforge's mailing list there was an issue raised about the package not setting up

Re: [Clamav-users] Clamav Update Database

2008-01-25 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/25/2008 06:53 AM, Clovis Tristao wrote: | Hi All, | | I'm using Clamav in Server Fedora Core. | Please, How I up to date clamav databases automatically and I receive | e-mails saying that the system was brought up to date? | Thanks a lot, The

Re: [Clamav-users] Problem with clamav on Linux

2008-01-27 Thread Steven Stern
Quỳnh H Nguyễn wrote: Hello, I'm very newbie in Linux, but I learn much to install a complete Linux system. However, antivirus is one of the most important for a current server. And I choose ClamAV to deploy an antivirus for server and mail server too. I did following the instruction

[Clamav-users] How to tell Clam about MX servers?

2008-02-12 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clam is reporting that one of my MX servers is a 'virus' source. How do I tell it that the mailhop.org server is innocent and that the source of the mail is farther up the line? The infected machine is likely to be here: from localhost ([127.0.0.1]

Re: [Clamav-users] How to tell Clam about MX servers?

2008-02-13 Thread Steven Stern
on that software that is in the middle of | your MTA and clamav. That's the right point of whitelisting things ! | | | Steven Stern escreveu: | Clam is reporting that one of my MX servers is a 'virus' source. How do | I tell it that the mailhop.org server is innocent and that the source of | the mail

Re: [Clamav-users] what does it scan

2008-02-21 Thread Steven Stern
Jim Shupert, Jr. wrote: Friends, I have ClamAV running on a RedHat es3 server that is used for file sharing ( with windows machines ) and FTP. My location of share ftp dir is on a second drive [ mnt/data ] So I am thinking that is where ...trouble would come through the door My

  1   2   >