Re: [gentoo-user] kmail and clamav
On Fri, 2004-01-30 at 16:29, Paul Stear wrote: > hi all, > I use kmail and have installed clamav. I updated clamav db using freshclam > and then run clamscan on my mail dir, it found 4 infected files:- > > /home/paul/Mail/trash/cur/1075475535.2312.nh0h: Worm.Gibe.F FOUND > /home/paul/Mail/trash/cur/1075475726.2312.qiyM: Exploit.IFrame.Gen FOUND > /home/paul/Mail/trash/cur/1075475722.2312.Z2xn: Worm.Gibe.F FOUND > /home/paul/Mail/trash/cur/1075475538.2312.xlv0: Exploit.IFrame.Gen FOUND > > I have 3 questions > 1.How can I get freshclam ( runs as root ) to run once each day when I switch > my computer on? install anacron and put a freshclam script in /etc/cron.daily Anacron will make sure that cron commands are run on systems that are not always on. > 2.How can I set things up so that clamscan runs and checks the mail either > during or straight after loading from my isp? I'm not 100% sure about kmail, but I have this in Evolution. Use a filter that parses the mail through a shell script, you can use the exit code of clamscan to determine if a mail is infected, and determine an action. > 3.How do I get the infected files deleted automatically so there is no chance > of anybody opening them? > > Thanks in advance for any help > Paul -- __ Guy Van Sanden http://unixmafia.port5.com Registered Linux user #249404 - September 1997 __ -- [EMAIL PROTECTED] mailing list
Re: [gentoo-user] kmail and clamav
Paul Stear wrote: hi all, I use kmail and have installed clamav. I updated clamav db using freshclam and then run clamscan on my mail dir, it found 4 infected files:- /home/paul/Mail/trash/cur/1075475535.2312.nh0h: Worm.Gibe.F FOUND /home/paul/Mail/trash/cur/1075475726.2312.qiyM: Exploit.IFrame.Gen FOUND /home/paul/Mail/trash/cur/1075475722.2312.Z2xn: Worm.Gibe.F FOUND /home/paul/Mail/trash/cur/1075475538.2312.xlv0: Exploit.IFrame.Gen FOUND I have 3 questions 1. How can I get freshclam ( runs as root ) to run once each day when I switch my computer on? 2. How can I set things up so that clamscan runs and checks the mail either during or straight after loading from my isp? 3. How do I get the infected files deleted automatically so there is no chance of anybody opening them? Thanks in advance for any help Paul Since you are running gentoo ... the package installs a script to do this. # rc-update add freshclam default # /etc/init.d/freshclam start If you want to start it manually as a daemon: # /usr/bin/freshclam -d -c 2 -l /var/log/clamav/clam-update.log As far as getting to scan your mail ... it is best for clamav to do it at your mail server. It depends upon the MTA as to what solution to use. I use postfix and amavisd-new and email is quarantined immediately upon arrival and never makes it to any mailbox at all. Tom Veldhouse pgp0.pgp Description: PGP signature
[gentoo-user] kmail and clamav
hi all, I use kmail and have installed clamav. I updated clamav db using freshclam and then run clamscan on my mail dir, it found 4 infected files:- /home/paul/Mail/trash/cur/1075475535.2312.nh0h: Worm.Gibe.F FOUND /home/paul/Mail/trash/cur/1075475726.2312.qiyM: Exploit.IFrame.Gen FOUND /home/paul/Mail/trash/cur/1075475722.2312.Z2xn: Worm.Gibe.F FOUND /home/paul/Mail/trash/cur/1075475538.2312.xlv0: Exploit.IFrame.Gen FOUND I have 3 questions 1. How can I get freshclam ( runs as root ) to run once each day when I switch my computer on? 2. How can I set things up so that clamscan runs and checks the mail either during or straight after loading from my isp? 3. How do I get the infected files deleted automatically so there is no chance of anybody opening them? Thanks in advance for any help Paul -- PLEASE NOTE, Only text messages will be downloaded, others will be deleted at the server. This message was sent using gentoo linux and kmail. -- [EMAIL PROTECTED] mailing list
