Re: [Clamav-users] ClamAntivirus NOT detecting viruses

2005-10-02 Thread Tomasz Kojm
On Fri, 30 Sep 2005 15:26:46 +0300
Stephen Cheboi [EMAIL PROTECTED] wrote:

 I have gone through the clamav.conf file and everything looks fine.

You should upgrade your installation first. clamav.conf was supported by
ClamAV 0.6x and 0.7x. We're at 0.87 now.

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Sun Oct  2 20:20:36 EST 2005


pgpae2U0lwndG.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] ClamAntivirus NOT detecting viruses

2005-09-30 Thread James Kosin

-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

Stephen Cheboi wrote:

| Hi there,
| I have clamantivirus installed in my server, but recently a virus
| [EMAIL PROTECTED] infected some pcs on my network.
| I have gone through the clamav.conf file and everything looks fine.
| How can i change this file to enable scanning of e-amail files
| before sending to user mailboxes.
| Will appreciate any assistance.
|
| Thank you.
| Stephen
|
| ___
| http://lurker.clamav.net/list/clamav-users.html

Look at setting up clamav-milter.
James Kosin

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDPTYMkNLDmnu1kSkRAylkAJ9oZo2xKNLxLi30bkvj+w7eHhtruwCfauy2
Y30FKJZRj9tC/m1cgCHT3rU=
=m1OZ
-END PGP SIGNATURE-

--
Scanned by ClamAV - http://www.clamav.net

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] ClamAntivirus NOT detecting viruses

2005-09-30 Thread Tomasz Papszun
On Fri, 30 Sep 2005 at 15:26:46 +0300, Stephen Cheboi wrote:
 Hi there,
 I have clamantivirus installed in my server, but recently a virus 
 [EMAIL PROTECTED] infected some pcs on my network.
 I have gone through the clamav.conf file and everything looks fine. How can 
 i change this file to enable scanning of e-amail files before sending to 
 user mailboxes.
 Will appreciate any assistance.

http://www.clamav.net/sendvirus.html

-- 
 Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only
 tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros.
 tomek at clamav.net   http://www.ClamAV.net/   A GPL virus scanner
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] ClamAntivirus NOT detecting viruses

2005-09-30 Thread Julio Maidanik

James Kosin wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: RIPEMD160

 Stephen Cheboi wrote:

 Hi there,
 I have clamantivirus installed in my server, but recently a virus
 [EMAIL PROTECTED] infected some pcs on my network.
 I have gone through the clamav.conf file and everything looks fine.
 How can i change this file to enable scanning of e-amail files
 before sending to user mailboxes.
 Will appreciate any assistance.

 Thank you.
 Stephen


 Look at setting up clamav-milter.
 James Kosin


There are several options in clamd.conf that are related to email scanning:
ScanMail, ScanHTML, etc. which are enabled by default.

As for clamav-milter I have not used it, but it seems that it is not what
you are looking for 

On a mail server, you would typically check incoming mails before delivering
to the user accounts, through procmail, etc.
I am currently just using clamassassin which is a simple script, which I
further customized to my needs.
Read the Clam AntiVirus User Manual,  chapter 8,  Third party software.

Since I've installed ClamAV I havn't had serious virus infections on the
network I manage, although users still get infected by trojans and spyware
from websites and all kinds of  free downloads.

Julio Maidanik

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] ClamAntivirus NOT detecting viruses

2005-09-30 Thread Dennis Peterson
 There are several options in clamd.conf that are related to email scanning:
 ScanMail, ScanHTML, etc. which are enabled by default.
 
 As for clamav-milter I have not used it, but it seems that it is not what
 you are looking for 
 
 On a mail server, you would typically check incoming mails before delivering
 to the user accounts, through procmail, etc.

Hopefully not. Hopefully your mail server will examine the message while you
still have the sending system on line and if your system detects a virus it
will reject the message and leave it to the sending system to create the
bounce. On way to achieve this if your MTA is Sendmail (tm) is to use a milter
such as ClamAv's clamav-milter. I use J-Chkmail for my AV milter as it is also
a very effective anti-spam filter and does not require Perl.

dp
___
http://lurker.clamav.net/list/clamav-users.html


RE: [Clamav-users] ClamAntivirus NOT detecting viruses

2005-09-30 Thread Bill Baird
--
 There are several options in clamd.conf that are related to email scanning:
 ScanMail, ScanHTML, etc. which are enabled by default.

 As for clamav-milter I have not used it, but it seems that it is not 
 what you are looking for 

 On a mail server, you would typically check incoming mails before 
 delivering to the user accounts, through procmail, etc.

Hopefully not. Hopefully your mail server will examine the message while you 
still have the sending system on line and if your system detects a virus it 
will reject the message and leave it to the sending system to create the 
bounce. On way to achieve this if your MTA is Sendmail (tm) is to use a milter 
such as ClamAv's clamav-milter. I use J-Chkmail for my AV milter as it is also 
a very effective anti-spam filter and does not require Perl.

dp
--

I prefer to use clamsmtp(http://memberwebs.com/nielsen/software/clamsmtp/) 
which sits in front of my real smtp server as a proxy. When the data section of 
the message is sent, clamsmtp intercepts the data and scans it with clamav.  
This also might be easier if you aren't using a very popular email server(like 
me!) or want to make minimal changes to your existing setup. I have had very 
good luck with this software on my incoming smtp server and internal submission 
smtp server. 

--Bill



___
http://lurker.clamav.net/list/clamav-users.html