Re: clamav?
Marc G. Fournier wrote: On Fri, 6 May 2005, Jim Levie wrote: On Thu, 2005-05-05 at 16:35, Marc G. Fournier wrote: On Fri, 6 May 2005, Sergey wrote: On Tuesday 03 May 2005 01:21, Amos wrote: Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe for the Sieve virus check test? It is very bad idea. Anti-virus check should be made at a stage of smtp-session. The sender should receive reject after data. It is not a problem of cyrus-imap. It is a task of MTA. 'k, I use postfix right now, and amavisd for the virus scanning ... as far as I know, the sender doesn't receive a 'reject ' that way either ... or is there something that I need to setup for this to happen? I use MailScanner to to A/V scanning and spam control and it can be configured to send a reject back to the sender of a virus infected message. But in the general case it is a bad idea since most of what you'll see will have a forged envelope sender. So any notice you send back is unlikely to reach the real sender and winds up just being an annoyance to some innocent party. During the recent Sober outbreak I was getting about 30 reject warnings an hour from all over the place. Given that I don't have any windows boxes and thus could never have been the source of a Sober infected email it was just a major annoyance. 'k, I thought maybe he was suggesting some way of doing it at the SMTP 'handshake' level, so that it was rejected before even hitting the queue ... Check out clamsmptd http://memberwebs.com/nielsen/software/clamsmtp/ Works with postfix, believe has to be chrooted. Sends back SMTP error on virus Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
On Fri, 6 May 2005, Jim Levie wrote: On Thu, 2005-05-05 at 16:35, Marc G. Fournier wrote: On Fri, 6 May 2005, Sergey wrote: On Tuesday 03 May 2005 01:21, Amos wrote: Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe for the Sieve virus check test? It is very bad idea. Anti-virus check should be made at a stage of smtp-session. The sender should receive reject after data. It is not a problem of cyrus-imap. It is a task of MTA. 'k, I use postfix right now, and amavisd for the virus scanning ... as far as I know, the sender doesn't receive a 'reject ' that way either ... or is there something that I need to setup for this to happen? I use MailScanner to to A/V scanning and spam control and it can be configured to send a reject back to the sender of a virus infected message. But in the general case it is a bad idea since most of what you'll see will have a forged envelope sender. So any notice you send back is unlikely to reach the real sender and winds up just being an annoyance to some innocent party. During the recent Sober outbreak I was getting about 30 reject warnings an hour from all over the place. Given that I don't have any windows boxes and thus could never have been the source of a Sober infected email it was just a major annoyance. 'k, I thought maybe he was suggesting some way of doing it at the SMTP 'handshake' level, so that it was rejected before even hitting the queue ... Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
On Thu, 2005-05-05 at 16:35, Marc G. Fournier wrote: > On Fri, 6 May 2005, Sergey wrote: > > > On Tuesday 03 May 2005 01:21, Amos wrote: > > > >> Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe > >> for the Sieve virus check test? > > > > It is very bad idea. Anti-virus check should be made at a stage of > > smtp-session. The sender should receive reject after data. > > It is not a problem of cyrus-imap. It is a task of MTA. > > 'k, I use postfix right now, and amavisd for the virus scanning ... as far > as I know, the sender doesn't receive a 'reject ' that way > either ... or is there something that I need to setup for this to happen? > I use MailScanner to to A/V scanning and spam control and it can be configured to send a reject back to the sender of a virus infected message. But in the general case it is a bad idea since most of what you'll see will have a forged envelope sender. So any notice you send back is unlikely to reach the real sender and winds up just being an annoyance to some innocent party. During the recent Sober outbreak I was getting about 30 reject warnings an hour from all over the place. Given that I don't have any windows boxes and thus could never have been the source of a Sober infected email it was just a major annoyance. -- The instructions said to use Windows 98 or better, so I installed RedHat. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
On Friday 06 May 2005 02:35, Marc G. Fournier wrote: > 'k, I use postfix right now, and amavisd for the virus scanning ... as far > as I know, the sender doesn't receive a 'reject ' that way > either ... or is there something that I need to setup for this to happen? I do not know about Postfix unfortunately. :-( I use Sendmail and clamav-milter for it. -- С уважением, Сергей [EMAIL PROTECTED] --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
On Fri, 6 May 2005, Sergey wrote: On Tuesday 03 May 2005 01:21, Amos wrote: Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe for the Sieve virus check test? It is very bad idea. Anti-virus check should be made at a stage of smtp-session. The sender should receive reject after data. It is not a problem of cyrus-imap. It is a task of MTA. 'k, I use postfix right now, and amavisd for the virus scanning ... as far as I know, the sender doesn't receive a 'reject ' that way either ... or is there something that I need to setup for this to happen? Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
On Tuesday 03 May 2005 01:21, Amos wrote: > Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe > for the Sieve virus check test? It is very bad idea. Anti-virus check should be made at a stage of smtp-session. The sender should receive reject after data. It is not a problem of cyrus-imap. It is a task of MTA. -- Regards, Sergey --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
On Tue, 3 May 2005, Marc G. Fournier wrote: 'k, just downloaded the patch, and took a scan through it, and am confused ... first, i did read through the 'thread' on the bugzilla page talking about what was hoped to be implemented, so I have an idea of where Igor is going, just not sure if he's there yet, or I'm missing something ... Namely ... how does this talk to clamd/spamd on a remote host? It does not use clamd, it uses libclamav. There is no backend for spamd yet. -- Igor Looking at the various config_get* calls, nothing is jumping out at me ... so I'm guessing this is only good for running spamd/clamd on the localhost right now? Great work so far, glad to see this is coming ... On Mon, 2 May 2005, Ken Murchison wrote: Amos wrote: Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe for the Sieve virus check test? https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2400 -- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key--http://www.oceana.com/~ken/ksm.pgp --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html -- Igor --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
'k, just downloaded the patch, and took a scan through it, and am confused ... first, i did read through the 'thread' on the bugzilla page talking about what was hoped to be implemented, so I have an idea of where Igor is going, just not sure if he's there yet, or I'm missing something ... Namely ... how does this talk to clamd/spamd on a remote host? Looking at the various config_get* calls, nothing is jumping out at me ... so I'm guessing this is only good for running spamd/clamd on the localhost right now? Great work so far, glad to see this is coming ... On Mon, 2 May 2005, Ken Murchison wrote: Amos wrote: Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe for the Sieve virus check test? https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2400 -- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key--http://www.oceana.com/~ken/ksm.pgp --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: clamav?
Amos wrote: Hmmm... what's this about ClamAV? Integrated virus scanning? Maybe for the Sieve virus check test? https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=2400 -- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key--http://www.oceana.com/~ken/ksm.pgp --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
