(preferably with patches) may be sent
directly to me.
Damian Menscher
--
http://www.uiuc.edu/~menscher/
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
are for phishing. Of course, those signatures are
responsible for 84% of the email that clamav blocks [1] and, based on
reports in #clamav, a similar fraction of the false positives.
[1] based on the past 10,000 messages blocked by clamav at my site
Damian Menscher
--
-=#| [EMAIL PROTECTED
reports and feature requests (preferably with patches) may be sent
directly to me.
Damian Menscher
--
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Ofc:(650)253-2757 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-
___
http
://mail.yahoo.com
___
http://lurker.clamav.net/list/clamav-users.html
Damian Menscher
--
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Ofc:(650)253-2757 |#=-
-=#| The above opinions are not necessarily those of my employers
to decode mail, the dangers of
automatic malware propagation is largely reduced.
For your reference, here are headers from your email:
___
http://lurker.clamav.net/list/clamav-users.html
Damian Menscher
--
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Ofc
, and please don't go onto some
OT thread about running ssh on some high-numbered port, or disabling
password auth, or using port-knocking.)
Damian Menscher
--
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Ofc:(650)253-2757 |#=-
-=#| The above opinions are not necessarily those of my employers
? If not, go do that, and then stand in the
corner until an update comes out.
Damian Menscher
--
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Ofc:(650)253-2757 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-
___
http
On Wed, 28 Sep 2005, Nigel Horne wrote:
On Wed, 2005-09-28 at 02:13, Damian Menscher wrote:
If you look up --bounce in man
clamav-milter, it says Send a spam to the spoofed sender. This will
help advertize ClamAV. Note: this may cause you to be referred to as an
`idiot' by clueful
.
As I said, I suggested changes to Dag on Aug 14, but they didn't make it
into his .spec file. And, until they do, I'll continue to warn people
away from using his clamav package.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green
. Any ideas?
Care to tell us what OS/distro you're running? I'm guessing it's
redhat-related?
It would probably be wise to strace the process to see what it's doing.
Checking obvious stuff like full partitions would also be a good idea.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U
that to Nigel.)
If you didn't set ReadTimeout to 0 or 1, the next step is probably to
enable debugging so we can get a better idea of exactly where it's
looping, and possibly even why it's looping.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP
, but got no
response. I'll try pinging him again on it, since having a fairly
standard RPM would be helpful for many smalltime-admins out there.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
On Tue, 27 Sep 2005, [EMAIL PROTECTED] wrote:
Damian Menscher wrote:
On Tue, 27 Sep 2005, Michael Torrie wrote:
Also Dag Wieers has packages (fairly up-to-date) of clamav for all
the RedHat distros including EL and FC.
See http://dag.wieers.com/home-made/apt/packages.php
I would recommend
). Could you please remove
that functionality? Spamming is bad.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074
of a milter failure, it should
continue processing as if the milter did not exist.
There are more details of how to configure clamav-milter intelligently
(assuming I'm intelligent ;) on my website:
http://www.itg.uiuc.edu/~menscher/clamav_notes_0.87.html
Damian Menscher
--
-=#| Physics Grad
.
It should (by default) reject infected email, and it is up to the
sending server to generate a bounce message to the sender.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038
On Fri, 5 Aug 2005, Rupak wrote:
^^^
My clamav is out dated.
That or you're living a few days in the future
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038
reports and feature requests (preferably with patches) may be sent
directly to me. Requests that this utility be included in the contrib
tree of ClamAV should be sent to the ClamAV authors.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP
/nonzero usage of field 4.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu
. Now that the default is 300, you MUST specify
--timeout=0 for the internal scanning to work.
Otherwise, it seems to be working.
HTH, HAND, etc.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
-- you might be getting stale data. It's
possible that your ISP is caching the DNS record for 24 hours or some
other abnormally-long time. (It's supposed to be cached for 15
minutes.)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110
crystal ball is clouded.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu
(all as one line, of course)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu
On Sun, 10 Jul 2005, Brian Bruns wrote:
On Sunday, July 10, 2005 12:48 PM [EDT], Damian Menscher wrote:
So yes, there's a huge amount of trust placed in the database
maintainers, and we have to hope they don't go bonkers on us. (Anyone
remember that spam RBL site that decided to announce
have to hope they don't go bonkers on us. (Anyone
remember that spam RBL site that decided to announce they were going to
stop running by blacklisting the entire internet?)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St
very limited physical access). Many of
the lines getting logged there look important (and tell me to report to
[EMAIL PROTECTED]) but since I never see them, I can't report the bugs.
Thanks,
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP
to tell me exactly what's going on with the
databases.
I'll probably take a closer look at the source next week, if this is
still an open issue by then.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc
running, or isn't updating the
signatures in the same directory that clamav-milter is looking for them
in? Are you catching any viruses at all? For example, can you catch an
eicar? It might help to use clmilter_watch to test.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois
On Thu, 23 Jun 2005, Luca Gibelli wrote:
Hello Damian Menscher,
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.86 Recommended version: 0.85.1
Any ideas what's going on?
Don't worry about it... apparently the human updating the DNS record
just goofed, but it looks
On Thu, 23 Jun 2005, Luca Gibelli wrote:
Hello Damian Menscher,
(BTW, this was reported in #clamav, here, and I saw it in my own logs.
So it wasn't just a fluke of someone's local DNS server getting confused
and giving the wrong info. Also, the fact that the timestamp was
correct indicates
to factor a really big
number (or one of the signature maintainers goes crazy).
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244
-milter 0.86.1 is using 9 meg ram
(per thread, 1.5 meg shared) even after 6 hours of running. Of course,
I never saw a problem on 0.85.1 either.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
/sendmail? Try running ./configure from within your chroot
next time. Or ./configure --help and learn how to tell it which
sendmail binary to use.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
://cgi.clamav.net/sendvirus.cgi
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED
) as
that will be much easier for you.
By the way, if you have procmail, you could filter off the base64
encoding there (since procmail doesn't decode it first).
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
the 15th time, I really start to hate those @#$%! OoO replies...
There would be less of them if we stopped talking about it
This actually isn't too terribly painful. It's far more interesting
when the autoresponder responds to itself ;)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin
allows mail through if clamd dies. The default
behavior is to tempfail it (which might be desirable if you have a
Windows environment with gullible users).
Information on this and more is available with my install notes, linked
from http://www.itg.uiuc.edu/~menscher/
Damian Menscher
=S:4m;R:4m')dnl
It's worth noting that there was only one typo. Setting F= is valid,
and for some organizations, the appropriate action.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038
On Wed, 15 Jun 2005, Cevher wrote:
How to use clamav-milter?
I prefer to use it with sendmail, but feel free to do whatever you want
with it.
With or without clamd?
Yes. But probably not both.
Care to ask a real question?
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U
/itg_software/clmilter_watch/
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu
that was
version 0.82. But that was a short-lived version, so I don't have notes
for it.
Damian Menscher [was a historian in a previous existence]
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038
. Especially if you run 2000-user
mailing lists, as we do. ;)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL
enough times. Let me know if the FAQ isn't clear enough -- it's
difficult to know how much detail to add.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS
On Tue, 14 Jun 2005, Elizabeth Schwartz wrote:
On 6/14/05, Damian Menscher [EMAIL PROTECTED] wrote:
The problem is it's not documented in TFM, it's documented in the FAQ:
http://wiki.clamav.net/index.php/FrequentlyAskedQuestions
Thanks, actually I missed that because I searched
the NFS mount has had time to take place. But now I'm
guessing about your network setup We'd probably need more details
about that (and where this lies in your boot sequence) to debug further.
Good luck!
Damian Menscher [loves interesting problems]
--
-=#| Physics Grad Student SysAdmin @ U
On Sun, 5 Jun 2005, Damian Menscher wrote:
Assuming the problem really is due to not using a FQDN, this might still be
worth fixing in clamav-milter, since it can affect others (even those with
proper setups) as well. Here is the offending code:
ptr = strstr(privdata-from, me
-long systems freeze , no updating system software
during finals period)
Unless you need to do load-balancing to multiple scanning servers, my
recommendation is to stick with the milter-only configuration. It's
simpler, which is always a good thing.
Damian Menscher
--
-=#| Physics Grad Student
check out fedoralegacy.org and patch your systems.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL
On Mon, 6 Jun 2005, Jason Englander wrote:
On Sun, 5 Jun 2005, Damian Menscher wrote:
If you already have it set up properly, please compile/run this program on
your mailserver and tell us what it outputs for your hostname:
This is just a FYI, I don't use clamav-milter, so I don't
it'd require some serious effort to get the first
prototype to work.
Someone tell me if I got any of this anywhere close to being right. ;)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
On Sun, 5 Jun 2005, .rp wrote:
On 31 May 2005 at 14:14, Damian Menscher wrote:
On Tue, 31 May 2005, .rp wrote:
When using the -L option, all email from netzero was getting
trapped. Is the bug in clamav-milter or netzero's email server?
ClamAV has no bugs, so it must be netzero's fault
. Those numbers should be
removed (or not) depending on whether the other vendor filters that type
of mail.
I'm in agreement with Tomasz -- you ask some of the strangest questions.
Mind telling us all what you're up to?
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois
such a thing.
That functionality is useful if you have a client that needs to submit
mail to a remote mailserver. It doesn't make much sense to avoid the
loopback interface when talking to localhost.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign
strongly suspect they're at fault, but having that kind of
proof will make it easier to convince them to change their ways.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602
the completion of
his patch and its inclusion in the main tree.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074
the config file stuff will be
re-done in version 0.90, does that still apply?
Scroll up and uncomment DisableDefaultScanOptions. Note that you'll
have to manually enable/disable anything below that line if you do that.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana
at some point, though hopefully
a new release will be out soon anyway.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074
On Wed, 1 Jun 2005, [EMAIL PROTECTED] wrote:
If the issue is with clamav, the milter should probably not die as a side
effect.
To clarify, the milter isn't dying... it's just refusing to accept
inputs (there's a difference). And the issue is with the milter, not
with libclamav.
Damian
recommended... but I wanted to point out that you
don't have to drop all the way back to 0.70.
Ask again if this isn't clear enough (hard to explain when there are so
many possibilities).
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110
will automagically email any output to the owner of the crontab.
And the --quiet means there won't be any output unless there's an error.
There's really no need for additional complexity here
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W
.)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819
something obvious, that would send an email
every 4 hours, usually with no message body, but containing one when
there were errors. Definitely NOT what is desired.
Or perhaps your mail command works differently than mine?
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana
of it to the client machines. Clam will read anything in
the signatures directory.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217
On Thu, 26 May 2005, guenther wrote:
However, within the last 12 hours I got 9 Phishing Mails (obviously
basically the same one) slipping through.
So, should I go on and report one or two samples?
Yes, to the SpamAssassin team.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U
On Thu, 26 May 2005, aCaB wrote:
some people never learn.
Agreed ;)
Looking forward to 0.90, when these debates can finally end.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038
On Fri, 27 May 2005, lattera wrote:
Well, clamscan still hangs. I'm using version 0.85.1. I cannot gdb
attach to tell you guys why/where it's hanging, I'm sorry.
What about an strace (or whatever your OS equivalent is)?
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois
, and attach strace to that PID (strace -p
PID). It'll probably at least give the developers a hint of what is
going wrong, even if it doesn't provide them with a reproducible
test-case.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110
that have/have not
seen this bug would also be helpful. For example, upgrading to a 2.6
kernel might be a solution, based on the reports I've seen.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
condition, or even a locking issue.
The hope was that getting an strace of each thread of a hung milter
would provide information on which of those causes was at fault, and
perhaps enable us to actually locate the bug.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana
On Sun, 22 May 2005, [EMAIL PROTECTED] wrote:
We have a fairly big sendmail+clamav+clamav-milter setup, with 15000+
accounts.
What OS (be specific) and hardware?
Do the failures have a strong time correlation with database updates?
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U
. :)
I suggest you direct IRIX-specific questions to comp.sys.sgi.admin.
There are plenty of experts there.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS
the bug this evening,
but thought others would be interested in these details.
Damian Menscher (Hydrogenum in #clamav on freenode)
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman
Trog was right: the error message is generated by mi_listener()
in sendmail's .../libmilter/listener.c. It's rather silly of sendmail
to log as if it's the milter, but there you have it.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110
.
[0] http://www.itg.uiuc.edu/itg_software/clmilter_watch/
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074
of
eliminating the spam problem.
Kill two birds with one stone... I like it.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074
about replacing SMTP are a bit
off-topic for this list.
[0] http://www.itg.uiuc.edu/~menscher/soberP.cf
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS
On Tue, 17 May 2005, Dennis Peterson wrote:
Damian Menscher said:
Since you are speaking for all of us what do we think of your 5 line sig?
I bet some of us think it sux.
As do I. But I think you'll agree it is about as dense as possible
given the amount of information (I work two jobs, and my
On Tue, 17 May 2005, Dennis Peterson wrote:
Damian Menscher said:
I found Stephen Gran's comment interesting, in that he beat me to
finding the bug (I'd wasted time looking in clamav-milter.c first).
The rest of the posts, including your arrogant ramblings, were
worthless.
I'll be damned. And here
)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819
On Sun, 15 May 2005, imacat wrote:
[EMAIL PROTECTED]:~# /dev/console: Permission denied
It's considered polite to at least look at the past week's worth of
subject lines before posting to an email list with hundreds of
recipients.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U
the mail
F=: pass it through unscanned
Obviously I always choose the F= option so my mailservers will continue
to work in the event of a milter failure. (Email is a service, virus
scanning is a feature.) It sounds like you made a different (and IMHO
wrong) decision.
Damian Menscher
clamav-milter happy, plus syslogging to get clamav-milter
logs.
I believe that is a bug that was introduced in 0.85 and has already been
fixed in CVS. This is one of the many reasons my core servers are still
running 0.83.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois
On Sat, 14 May 2005, Mark wrote:
Damian Menscher wrote:
Obviously I always choose the F= option so my mailservers
will continue to work in the event of a milter failure.
That is your prerogative. I, on the other hand, would never configure
sendmail in that fashion. Clamav-scans are a critical part
On Sat, 14 May 2005, Dennis Peterson wrote:
Damian Menscher said:
Both of us run watchdog scripts (I run clmilter_watch every 15 minutes)
so, at worst, clamav-milter will be down for 15 minutes. In your case,
all mail delivery will stop, and I think outgoing mail will also be
broken. So
^
* You have a -b here that you don't want. *
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074
Nigel and I
are saying to remove the -b.
Hope it's finally clear.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074
running on three different CPUs.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED
On Fri, 6 May 2005, Nigel Horne wrote:
From: Damian Menscher [EMAIL PROTECTED]
Sent: Friday, May 06, 2005 7:05 AM
My silly university spent $0.5M on a commercial product to perform spam
and virus filtering (they have the if it costs that much, it MUST be
good mentality). And, just after they put
than having to wait for
you to fix it.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED
socket in a round-robin fashion. But
it would be good to hear people's experiences with something on this
large of a scale before I make the proposal.
Thanks a bunch,
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL
there should be a signature for the GPL license? ;)
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL
).
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819
On Sun, 10 Apr 2005, Jose Celestino wrote:
Words by Damian Menscher [Sun, Apr 10, 2005 at 09:34:58AM -0500]:
Actually, it's worse than you think. Try piping through sort before
Worse? How come worse?
sending it through uniq, and you'll find another 400 duplicates (you
by the original authors. But if the project were forked, that would be
trivial to fix also (requires a one-line change to the source code).
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038
On Wed, 6 Apr 2005, Guillaume Arcas wrote:
Damian Menscher a écrit :
http://www.clamav.net/doc/0.75/signatures.pdf
They removed the functionality in 0.80 and above, but that's because
it's simplest for users to create md5 signatures of unknown binaries
(and the automatic signature generation
Gran for Debian testing and patches). As such,
please send any bug reports or feature requests (preferably with
patches) to me at [EMAIL PROTECTED]
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333
On Tue, 8 Mar 2005, Thomas Lamy wrote:
Damian Menscher schrieb:
I'm seeing logs like:
Intercepted virus from [EMAIL PROTECTED] to [EMAIL PROTECTED]
[EMAIL PROTECTED]
Seems strange to me that the invalid users would have made it past
sendmail's RCPT TO and into the AV engine. I'm guessing it's
not.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819
stuff and try to make it more readable.
Right now it's probably only readable by me, and only if I'm lucky.
Damian Menscher
--
-=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS
,
rather than waiting for the next selfcheck (every 10 minutes, as I
recall). Similarly, you could run the milter without the --external
flag, in which case it checks for updates on (nearly) every message.
Sorry I wasn't more helpful in #clamav last night, but it was nearly 4am
here in -0600.
Damian
1 - 100 of 218 matches
Mail list logo
