Re: [Dspam-user] clamav / quarantine

2010-07-20 Thread John Espiro
Hi Stevan - I was out of the area for a while but wanted to check in to see if a newer version had been released that fixes this issue... do you know? Thanks, John On 4/18/2010 11:21 AM, john espiro wrote: > How _should_ I be creating this file? > > Stevan: > I don't know how you have created t

Re: [Dspam-user] clamav / quarantine

2010-07-02 Thread John Espiro
Hi Stevan - I was out of the area for a while but wanted to check in to see if a newer version had been released that fixes this issue... do you know? Thanks, John On 4/18/2010 11:21 AM, john espiro wrote: > How _should_ I be creating this file? > > Stevan: > I don't know how you have created th

Re: [Dspam-user] clamav / quarantine

2010-04-18 Thread john espiro
How _should_ I be creating this file? Stevan: I don't know how you have created the file but it is wrong. Anyway... I think we are not getting any further that way. I need to reproduce that here on my end. I mean the error. I was under the impression that it is fixed with the latest GIT changes

Re: [Dspam-user] clamav / quarantine

2010-04-17 Thread Stevan Bajić
r. I was under the impression that it is fixed with the latest GIT changes but it looks like that it is not. I will enable clamAV on my DSPAM setup and send me that eicar test file and then release it from quarantine. The problem is that I have a virtual domain setup and I don'

Re: [Dspam-user] clamav / quarantine

2010-04-17 Thread john espiro
for name: john_es 21971: [04/17/2010 11:27:34] DSPAM Instance Shutdown. Exit Code: 0 From: Stevan Bajić To: john espiro Cc: dspam-user@lists.sourceforge.net Sent: Sat, April 17, 2010 4:22:59 PM Subject: Re: [Dspam-user] clamav / quarantine On Sat, 17 Apr 2010 04:39:05 -0700 (PDT) john

Re: [Dspam-user] clamav / quarantine

2010-04-17 Thread Stevan Bajić
On Sat, 17 Apr 2010 04:39:05 -0700 (PDT) john espiro wrote: > > > okay. The signature is not correctly displayed. Maybe I made an error > yesterday when allocating the signature. However... is the message delivered > after that or is it still dropped? > ---

Re: [Dspam-user] clamav / quarantine

2010-04-17 Thread Stevan Bajić
On Sat, 17 Apr 2010 04:39:05 -0700 (PDT) john espiro wrote: > > > okay. The signature is not correctly displayed. Maybe I made an error > yesterday when allocating the signature. However... is the message delivered > after that or is it still dropped? > ---

Re: [Dspam-user] clamav / quarantine

2010-04-17 Thread Stevan Bajić
On Sat, 17 Apr 2010 04:16:01 -0700 (PDT) john espiro wrote: > does the message get delivered? > > No (I sent you another message with a weird line in the dspam.debug file, > hopefully you got it. > I got the message and wrote back but used the DSPAM mailing list instead of writing directly to

Re: [Dspam-user] clamav / quarantine

2010-04-17 Thread Stevan Bajić
On Sat, 17 Apr 2010 03:35:18 -0700 (PDT) john espiro wrote: > Hi Stevan - > Hallo John, > If I choose to deliver a virus message from the quarantine > does the message get delivered? > it seems that it affects the statistics... it shouldn't right? > That is a good question. I would say that

Re: [Dspam-user] clamav / quarantine

2010-04-17 Thread Stevan Bajić
On Sat, 17 Apr 2010 02:56:23 -0700 (PDT) john espiro wrote: > Hi Stevan - > Hallo John, > I see somethign interesting in the dspam.debug. note the line that says: > 13883: [04/17/2010 02:53:39] Skipping retraining for signature > '^X^R"^H^H' with 0 tokens > okay. The signature is not correc

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 14:56:42 -0700 (PDT) john espiro wrote: > Perhaps the make install is not overwriting the existing files? What file(s) > should be different once I install the new build? > By new build you mean the one with the patched file or the one from GIT? Are you running the daemon

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 14:38:57 -0700 (PDT) john espiro wrote: > Hi Stevan -- > Hallo John, > I patched the file and did make clean, make install, and I see the same > behavior as before. > really? Could you attach debug logs? > I will try to install git on my server, but looks like there are

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 14:18:52 -0700 (PDT) john espiro wrote: > Hi Stevan - > Hallo John, > Wow - that was fast :) > well... I could not let you alone with that bug. > I am not familiar with git (but I am with svn). What URL do I want to use to > check out the latest version so I can compile

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
:41 PM Subject: Re: [Dspam-user] clamav / quarantine On Fri, 16 Apr 2010 11:23:41 -0700 (PDT) john espiro wrote: > Oh... so you are saying this is a bug and not a result of my screwup? > Stevan, I hope you don't get the impression that I was looking for a code > solution

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 13:15:43 -0700 (PDT) john espiro wrote: > 1.) Downloaded 3.9.0 source from sf > 2.) un-tarred it > 2.1.) cd dspam-3.9.0 2.2.> patch -p0 < /path/to/libdspam-3.9.0.patch > 3.) ./configure (with the options I've pasted in here already) > 4.) make install > 5.) do some tests 6.)

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
1.) Downloaded 3.9.0 source from sf 2.) un-tarred it 3.) ./configure (with the options I've pasted in here already) 4.) make install From: Stevan Bajić To: dspam-user@lists.sourceforge.net Sent: Fri, April 16, 2010 8:58:07 PM Subject: Re: [Dspam-user] c

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 11:23:41 -0700 (PDT) john espiro wrote: > Oh... so you are saying this is a bug and not a result of my screwup? > Stevan, I hope you don't get the impression that I was looking for a code > solution like right now... Personally it's an annoyance, but not a show > stoppe

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 11:23:41 -0700 (PDT) john espiro wrote: > Oh... so you are saying this is a bug and not a result of my screwup? > Stevan, I hope you don't get the impression that I was looking for a code > solution like right now... Personally it's an annoyance, but not a show > stoppe

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 11:23:41 -0700 (PDT) john espiro wrote: > Oh... so you are saying this is a bug and not a result of my screwup? > Yes. > Stevan, I hope you don't get the impression that I was looking for a code > solution like right now... > No, no. I am not blaming any one. It is goo

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
Oh... so you are saying this is a bug and not a result of my screwup? Stevan, I hope you don't get the impression that I was looking for a code solution like right now... Personally it's an annoyance, but not a show stopper. If the message has a virus, the message contents can still be read

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 10:59:00 -0700 (PDT) john espiro wrote: > Indeed - and I am sorry for this dragging out... > In German we have an expression: Den Wald vor lauter Bäumen nicht sehen. Aka: not being able to see the forest because of the trees. > if I ever make it to CH I owe you a dri

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
Indeed - and I am sorry for this dragging out... if I ever make it to CH I owe you a drink. Re: signature data: select * from dspam_signature_data where signature = "1,4bc896c2201651763413809"; +-+---+--+++ | uid | signature

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 19:23:08 +0200 Stevan Bajić wrote: > > No - when I ran the command, it gave me no error, and exited with 0, but > > the message was not delivered. > > > > Well, I ran a couple more test messages and even with text in the body and > > subject, there are no tokens... Wait a

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 09:59:03 -0700 (PDT) john espiro wrote: > No - when I ran the command, it gave me no error, and exited with 0, but the > message was not delivered. > > Well, I ran a couple more test messages and even with text in the body and > subject, there are no tokens... > the header

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
pache) gid=548 groups=548 uid=551(dspam) gid=105(monit) groups=105(monit),12(mail),51(smmsp) From: Stevan Bajić To: dspam-user@lists.sourceforge.net Sent: Fri, April 16, 2010 6:13:52 PM Subject: Re: [Dspam-user] clamav / quarantine On Fri, 16 Apr 2010 09:06:40

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 09:06:40 -0700 (PDT) john espiro wrote: > 1.) There are no errors returned when running the command. > 2.) Debug log is at the end of the message > 3.) stat on /usr/bin/dspam > File: `/usr/bin/dspam' > Size: 134841 Blocks: 272IO Block: 4096 regular file

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
1.) There are no errors returned when running the command. 2.) Debug log is at the end of the message 3.) stat on /usr/bin/dspam File: `/usr/bin/dspam' Size: 134841 Blocks: 272IO Block: 4096 regular file Device: 95h/149dInode: 66554704Links: 1 Access: (2510/-r-x-

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 05:43:59 -0700 (PDT) john espiro wrote: [...] > trusted.users is located at /var/dspam. It has an edit time of a couple > years ago, so I have no idea why it is there... > Delete it. It is not used in stock DSPAM. Could you save the mail from quarantine into a file and p

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
Response(s) below... this is a cut and paste error or a typo? should be IMHO '--with-storage-driver=mysql_drv' [John]: weird... I copied and pasted it directly from the putty session. I just double checked the output and it is correct (yahoo mail must have done something fucnky with teh apost

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread Stevan Bajić
On Fri, 16 Apr 2010 00:16:15 -0700 (PDT) john espiro wrote: > dspam --version: > > DSPAM Anti-Spam Suite 3.9.0 (agent/library) > Configuration parameters: '--prefix=/usr' '--sysconfdir=/etc' > '--with-logdir=/var/dspam' '--enable-debug' '-ith-storage-driver=mysql_drv' > this is a cut and paste

Re: [Dspam-user] clamav / quarantine

2010-04-16 Thread john espiro
dspam --version: DSPAM Anti-Spam Suite 3.9.0 (agent/library) Configuration parameters: '--prefix=/usr' '--sysconfdir=/etc' '--with-logdir=/var/dspam' '--enable-debug' '-ith-storage-driver=mysql_drv' '--with-mysql-includes=/usr/include/mysql' '--with-mysql-libraries=/usr/lib' '-nable-virtual-us

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 16:37:02 -0700 (PDT) john espiro wrote: > > For older messages that had viruses attached, I saw the following line in the > maillog: > dspam[5873]: virus warning: infected message from 60.249.84.10 > > However when I send viruses from my account to another domain account,

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
user@lists.sourceforge.net Sent: Fri, April 16, 2010 1:10:17 AM Subject: Re: [Dspam-user] clamav / quarantine On Thu, 15 Apr 2010 15:36:55 -0700 (PDT) john espiro wrote: > Hi Stevan - > Hallo John, > I have no idea... how would I determine the answer to your questions? I > never configured proc

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 15:36:55 -0700 (PDT) john espiro wrote: > Hi Stevan - > Hallo John, > I have no idea... how would I determine the answer to your questions? I > never configured procmail, and it was installed on my system from the very > beginning. That line in the dspam.conf always pea

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
are the only ones affected), I never thought anything about it. John From: Stevan Bajić To: dspam-user@lists.sourceforge.net Sent: Thu, April 15, 2010 10:27:20 PM Subject: Re: [Dspam-user] clamav / quarantine On Thu, 15 Apr 2010 12:23:10 -0700 (PDT) john

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 12:23:10 -0700 (PDT) john espiro wrote: > Yes - procmail v3.22 2001/09/10 > And the web server user is able to call /usr/bin/procmail? And have you configured procmail to work on your setup or is it just installed but not configured? > John > -- Kind Regards from Switzer

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
Yes - procmail v3.22 2001/09/10 John From: Stevan Bajić Do you have procmail installed on your system? -- Download Intel® Parallel Studio Eval Try the new software tools for you

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 11:51:08 -0700 (PDT) john espiro wrote: > TrustedDeliveryAgent "/usr/bin/procmail" > UntrustedDeliveryAgent "/usr/bin/procmail -d %u" > Do you have procmail installed on your system? > "DeliveryHost", "DeliveryPort", "DeliveryIdent" and "DeliveryProto" are all > commented

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread john espiro
TrustedDeliveryAgent "/usr/bin/procmail" UntrustedDeliveryAgent "/usr/bin/procmail -d %u" "DeliveryHost", "DeliveryPort", "DeliveryIdent" and "DeliveryProto" are all commented out. John From: Stevan Bajić What do you use for "TrustedDeliveryAgent" and for "U

Re: [Dspam-user] clamav / quarantine

2010-04-15 Thread Stevan Bajić
On Thu, 15 Apr 2010 10:25:38 -0700 (PDT) john espiro wrote: > I am guessing this is a clamav question -- feel free to tell me to move it to > another list. > > If I have a message in quarantine that was marked with a virus, and I choose > to "deliver" the message via the quarantine UI, it remo

Re: [Dspam-user] Clamav response

2010-04-15 Thread Stevan Bajić
rn the message would be to corpusfeed the message. > John > -- Kind Regards from Switzerland, Stevan Bajić > > > > > From: Stevan Bajić > To: dspam-user@lists.sourceforge.net > Sent: Thu, April 15, 2010 2:03:49 AM > Subject: Re: [Dspam

Re: [Dspam-user] Clamav response

2010-04-14 Thread Stevan Bajić
On Wed, 14 Apr 2010 16:36:33 -0700 (PDT) john espiro wrote: > Stevan was right... I just dropped in ClamAV and changed the three lines in > dspam.conf, and it just worked. That's 2 for 2 of things just working! > > Now, this might be a question for the clamav forum, but I thought I would ask

Re: [Dspam-user] ClamAV...

2010-04-14 Thread Stevan Bajić
On Tue, 13 Apr 2010 23:54:03 -0700 (PDT) john espiro wrote: > I am going to start setting up sendmail to use clamav. > > >From a dspam perspective, is there anything I need to configure apart from > >the following: > > Preference "optOutClamAV=on"# { on | off } -> default:off > ClamA