Re: clamav ports
On Mar 11, 2004, at 12:00 AM, Paul Murphy wrote: Just a thought, do you have '#NotifyClamd [/optional/config/file/path]' uncommented in freshclam.conf I didn't, but I did uncomment it now. I don't have a freshclam running from the rc.conf; I have a crontab file for root that is 0 */4 * * * /usr/local/bin/freshclam Should I be running the script file instead from rc.conf? Do both ways still notify clamd?...I don't know what config file it should be pointing to, but since it was "optional" I didn't add one (just have a line in freshclam.conf stating "NotifyClamd"). I still have no idea why the system just started magically picking up the virus that after the rebuild it was letting through. Maybe it happened after it did a database consistency check? Thank you! -Bart ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: clamav ports
On Wed, 10 Mar 2004 21:34:44 -0500 Bart Silverstrim <[EMAIL PROTECTED]> wrote: > > On Mar 10, 2004, at 9:26 PM, Jonathan T. Sage wrote: > > > Bart - > > > > just a thought, but it is possible that the port updated the virus > > database to the possibly older version in the distfile. You may > > want to run freshclam and see if this clears up the issue. Hopefully > > thats all the problem is. > > > > hope this helps > > > > On a lark, I reran the test (situation: I ssh to my home account that > isn't filtered, and send myself two small viruses that some MS user > was so kind to have unknowingly sent to me...I'm using Mac to > store/send them, so I guess it's nice to be immune when I have to test > these things :-) > > Weird. It caught it this time. And I did run a freshclam, thinking > something odd happened to the database. Perhaps clamd just doesn't > see the update right away? (there's also a freshclam run from a cron > script every four hours or so). I doublechecked and I wasn't > imagining things; one virus I sent slipped right through the first > time, but this time in an identical test almost five hours later the > antivirus on the FreeBSD filter slapped it right down. > > Not gonna question it though, as long as it's working! Thanks! > Just a thought, do you have '#NotifyClamd [/optional/config/file/path]' uncommented in freshclam.conf -- Cogeco ergo sum pgp0.pgp Description: PGP signature
Re: clamav ports
On Mar 10, 2004, at 9:26 PM, Jonathan T. Sage wrote: Bart - just a thought, but it is possible that the port updated the virus database to the possibly older version in the distfile. You may want to run freshclam and see if this clears up the issue. Hopefully thats all the problem is. hope this helps On a lark, I reran the test (situation: I ssh to my home account that isn't filtered, and send myself two small viruses that some MS user was so kind to have unknowingly sent to me...I'm using Mac to store/send them, so I guess it's nice to be immune when I have to test these things :-) Weird. It caught it this time. And I did run a freshclam, thinking something odd happened to the database. Perhaps clamd just doesn't see the update right away? (there's also a freshclam run from a cron script every four hours or so). I doublechecked and I wasn't imagining things; one virus I sent slipped right through the first time, but this time in an identical test almost five hours later the antivirus on the FreeBSD filter slapped it right down. Not gonna question it though, as long as it's working! Thanks! ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: clamav ports
Bart - just a thought, but it is possible that the port updated the virus database to the possibly older version in the distfile. You may want to run freshclam and see if this clears up the issue. Hopefully thats all the problem is. hope this helps ~j (my appologies if this is a duplicate, mail client freaking out) Bart Silverstrim wrote: I've emailed the maintainer about this a few hours ago, but wondered if anyone else had experienced this... I'm running postfix with amavisd-new and clamav (clamd) to scan incoming email from the Internet then forward it to an internal Exchange server (a spam/virus filter server, essentially). I just finished updating to the latest 4.9 bug fixes, and afterwards did a portupgrade of my installed ports. Clamav was updated to the latest version, and now clamd is missing some viruses that it was catching before (and clamscan, I believe, can still catch...somefool.b-petite, for example). The version is 0.67-1. It is still reporting that it is quarantining some viruses, so I know it is "working", but I don't know why it would have just "stopped" catching some of the emailed viruses. Anyone else run into this problem? Is there a new setting that I'm missing? -- Jonathan T. Sage Theatrical Lighting / Set Designer Professional Web Design [HTTP://www.JTSage.com] [EMAIL PROTECTED] [See Headers for Contact Info] signature.asc Description: OpenPGP digital signature
clamav ports
I've emailed the maintainer about this a few hours ago, but wondered if anyone else had experienced this... I'm running postfix with amavisd-new and clamav (clamd) to scan incoming email from the Internet then forward it to an internal Exchange server (a spam/virus filter server, essentially). I just finished updating to the latest 4.9 bug fixes, and afterwards did a portupgrade of my installed ports. Clamav was updated to the latest version, and now clamd is missing some viruses that it was catching before (and clamscan, I believe, can still catch...somefool.b-petite, for example). The version is 0.67-1. It is still reporting that it is quarantining some viruses, so I know it is "working", but I don't know why it would have just "stopped" catching some of the emailed viruses. Anyone else run into this problem? Is there a new setting that I'm missing? I wanted to post this question to the clamav-users list, but I subscribed late last week and while I get the messages it says I'm a non-member and posts are held for moderator approval, and I haven't heard anything from the moderator after three messages to the list and one to the address that I thought might be a maintainer's address :-( I thought it could be somewhat FreeBSD related since it just started happening after I upgraded from ports, though. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
