Re: [Clamav-users] RAR module failure

2004-04-13 Thread Kevin Spicer
On Mon, 2004-04-12 at 23:01, Niek wrote: > Hi list, > > Using devel of 20040412, and got this RAR module failure on a rar. > unfortunately qmail-scanner deleted it, so can't reproduce it. > > Isn't it possible to make clamav call the freeware unrar executable ? clamscan --unrar=/path/to/unrar

[Clamav-users] ClamAV Hangs with an error message

2004-04-13 Thread Jorge Rodríguez
Hi people, I have installed on Debian: Qmail 1.03 from debian w/Auth SMTPD patch + Qmail-Scanner 1.21 + SpamAssassin 2.63-0 + ClamAV 0.67-6. ClamAV works fine for various hours a day, but suddenly I begin to see messages in my mail.log file: Apr 13 00:03:29 imaggina X-Qmail-Scanner-1.21: [imaggin

Re: [Clamav-users] Schedule?

2004-04-13 Thread B. van Ouwerkerk
I have been using ClamWin more and more lately, really like it, fee scanner, etc... now running on my kids systems even! I thought you had mentioned that there were docs on SF about how to use the Windows Scheduler to schedule scans? For the life of me I cannot find them? I have tried to creat

Re: [Clamav-users] clamav-milter failure

2004-04-13 Thread Sergey
On Tuesday 13 April 2004 00:48, Stephen Gran wrote: > Change your sendmail.mc to read like this: > INPUT_MAIL_FILTER(`clamav-milter',`S=local:/var/run/clamav-milter/clamav.sock,F=, > T=S:4m;R:4m')dnl > define(`confINPUT_MAIL_FILTERS', `clamav-milter') last line isn't need if INPUT_MAIL_FILTER us

Re: [Clamav-users] "Session 1 stopped due to timeout"?

2004-04-13 Thread Trog
On Tue, 2004-04-13 at 03:32, Damian Menscher wrote: > Looking through my logs for unusual events, I find: > > Sun Mar 21 20:21:07 2004 -> Session 0 stopped due to timeout. > Wed Apr 7 19:00:57 2004 -> Session 1 stopped due to timeout. > Mon Apr 12 20:23:01 2004 -> Session 1 stopped due to timeout

Re: [Clamav-users] "Session 1 stopped due to timeout"?

2004-04-13 Thread B. van Ouwerkerk
For the record, I'm using clamav-0.67-1 with the stock RH9 sendmail (8.12.8). Clamav-milter is version 0.67a. I'm not feeling up to trying 0.68 or 0.70rc since reports are they're not particularly stable. I'm using 0.70rc one on a testbox for almost one month and about 2 weeks on a production b

Re: [Clamav-users] RAR module failure

2004-04-13 Thread Niek
Kevin Spicer wrote: clamscan --unrar=/path/to/unrar Hmmz, you guys reckon it would be a preformance hit if I start using clamscan instead of clamdscan (the latter hasn't got external rar support). Regards, Niek --- This SF.Net email is sponsore

Re: [Clamav-users] ClamAV Hangs with an error message

2004-04-13 Thread Niek
Jorge Rodríguez wrote: Hi people, I have installed on Debian: Qmail 1.03 from debian w/Auth SMTPD patch + Qmail-Scanner 1.21 + SpamAssassin 2.63-0 + ClamAV 0.67-6. ClamAV works fine for various hours a day, but suddenly I begin to see messages in my mail.log file: Apr 13 00:03:29 imaggina X-Qmail

RE: [Clamav-users] ClamAV Hangs with an error message

2004-04-13 Thread Jorge Rodríguez
Hi, I think database initialization is OK. I make the upgrade through freshclam and it seems everythink OK. Why is it working for hours and then stop? How can I fix the error 50: Database initialization error.?? Thanks Jorge >Jorge, > >from man clamscan: >RETURN CODES >50: Database initializat

Re: [Clamav-users] RAR module failure

2004-04-13 Thread Fajar A. Nugraha
Niek wrote: Kevin Spicer wrote: clamscan --unrar=/path/to/unrar Hmmz, you guys reckon it would be a preformance hit if I start using clamscan instead of clamdscan (the latter hasn't got external rar support). YES! But if you only have low volume mail traffic, then it should not matter much.

RE: [Clamav-users] "Session 1 stopped due to timeout"?

2004-04-13 Thread Bussel, Robert van
I had the same problem using clamav-0.67 in combination with Amavis and Sendmail. It seemed a problem with decoding large ZIP files. When a relatively small ZIP-file contained a large text document (so it had been compressed very much) then Clamav had a problem processing it. I received the sa

Re: [Clamav-users] Clamd Virus stats using php/rrdtool

2004-04-13 Thread Dilip M
[..] Is anyone using mrtg to gather stats on spam/virus activity? So, I created something using php and rrdtool (not mrtg, but similar). Why php? Because I like it best :) Even though it IS written in PHP, it is intended (for now) as command line application, not web based application. Changing

[Clamav-users] Clamav RPM

2004-04-13 Thread Mike van Vugt
Tried to install the rpm file but keep getting the error listed below Any sugestions ??? Regards, # rpm -i clamav-0.68-2mdk.i586.rpm warning: clamav-0.68-2mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 error: Failed dependencies: libclamav1 = 0.68-2mdk is needed by clamav-0.

Re: [Clamav-users] ClamAV Hangs with an error message

2004-04-13 Thread Tomasz Kojm
On Tue, 13 Apr 2004 11:04:26 +0200 Jorge Rodríguez <[EMAIL PROTECTED]> wrote: > Hi, > > I think database initialization is OK. I make the upgrade through > freshclam and it seems everythink OK. Why is it working for hours and > then stop? How can I fix the error 50: Database initialization > err

[Clamav-users] clamav-milter compile issue

2004-04-13 Thread Pad Hosmane
Hi, I am compiling clamav-milter on HP-UX 11.00. Without clamav-milter the compile was successful. Know I am trying to compile with --enable-milter. I am getting the following error: Making all in clamav-milter

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Andrei Bucur
- Original Message - From: "Jakub Jankowski" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 13, 2004 2:27 AM Subject: Re: [Clamav-users] How to bypass milter scanning for selected users? > On 2004-04-12, Hokan wrote: > > >I am running clamav-milter with sendmail. > > >

Re: [Clamav-users] Clamd Virus stats using php/rrdtool

2004-04-13 Thread Dilip M
[...] So I created static linux php binary ready to use. It's available at http://clamav.or.id/contrib/clamd-stat RRD files are stored under rra, and graphs are stored under html/graph. I tried and i'm getting this error: # /opt/php5 bin/parse_log.php < /var

Re: [Clamav-users] Clamav RPM

2004-04-13 Thread Fajar A. Nugraha
Mike van Vugt wrote: Tried to install the rpm file but keep getting the error listed below Any sugestions ??? # rpm -i clamav-0.68-2mdk.i586.rpm warning: clamav-0.68-2mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 error: Failed dependencies: It appears mandrake clamav packages are

[Clamav-users] RPM Files....

2004-04-13 Thread Mike van Vugt
Can anyone tell me what goes wrong here Downloaded the files but keep getting errors Regards, Mike # rpm -ivh clamav-0.66-0.20031204.1mdk.i586.rpm error: Failed dependencies: libclamav1 = 0.66-0.20031204.1mdk is needed by clamav-0.66-0.20031204.1mdk clamav-db is needed b

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Fajar A. Nugraha
Andrei Bucur wrote: How can I configure my system so mail to abuse@ or postmaster@ are not rejected? clamav-milter.c, around line 750 /* * Whitelist of source e-mail addresses that we do NOT scan * TODO: read in from a file */ Ehm. SOURCE e-mail addresses. Are you sure this is what yo

[Clamav-users] Re: Schedule?

2004-04-13 Thread Alex Cherney
B. van Ouwerkerk wrote: I have been using ClamWin more and more lately, really like it, fee scanner, etc... now running on my kids systems even! I thought you had mentioned that there were docs on SF about how to use the Windows Scheduler to schedule scans? For the life of me I cannot find t

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Nigel Horne
> static const char*ignoredEmailAddresses[] = { > /*"[EMAIL PROTECTED]",*/ > "[EMAIL PROTECTED]" > /*NULL*/ > }; > but this mailbox is still scaned ! Because your domain is mediait.ro not .com > why ? > > thank u -Nigel

[Clamav-users] clamd consuming cpu?

2004-04-13 Thread Shannon Werb
Hi All, I am using clamav, running clamd under daemontools, version 0.70rc on FreeBSD 4.7, my run script is at the end... Clamd is being called from qmail-scanner 1.21 What is odd is every once in a while I notice the processor hit 100% with clamd using it all. This continues for 5, 10 or even 1

Re: [Clamav-users] Clamav RPM

2004-04-13 Thread Mike van Vugt
On Tue, 2004-04-13 at 14:15, Fajar A. Nugraha wrote: > Mike van Vugt wrote: > > >Tried to install the rpm file but keep getting the error listed > >below Any sugestions ??? > > > ># rpm -i clamav-0.68-2mdk.i586.rpm > >warning: clamav-0.68-2mdk.i586.rpm: V3 DSA signature: NOKEY, key ID > >d535

[Clamav-users] Updating Virus databases

2004-04-13 Thread Gary S. Searing
Hello, I would appreciate it if someone could give me basic instructions on how to set up one of my mail gateways(running clamav) to act as a master for virus databases... and have all of my other mail gateways pointing at this master to get the database updates from it. This would enable me to

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Andrei Bucur
- Original Message - From: "Fajar A. Nugraha" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 13, 2004 3:23 PM Subject: Re: [Clamav-users] How to bypass milter scanning for selected users? > Andrei Bucur wrote: > > >>>How can I configure my system so mail to abuse@ or >

Re: [Clamav-users] False positives on Worm.Bagle.P.2

2004-04-13 Thread Keith G. Murphy
Antony Stone wrote: On Monday 12 April 2004 5:10 pm, Keith G. Murphy wrote: I'm finding this detected on C:\WINDOWS\directcc.exe on some Win98 shares, even when the executable in question has been freshly installed. So submit the file as a false positive on the ClamAV website then. No point i

Re: [Clamav-users] Updating Virus databases

2004-04-13 Thread Antony Stone
On Tuesday 13 April 2004 2:28 pm, Gary S. Searing wrote: > Hello, > > I would appreciate it if someone could give me basic instructions on how > to set up one of my mail gateways(running clamav) to act as a master for > virus databases... and have all of my other mail gateways pointing at > this m

Re: [Clamav-users] How to bypass milter scanning for selectedusers?

2004-04-13 Thread Andrei Bucur
- Original Message - From: "Nigel Horne" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 13, 2004 3:52 PM Subject: Re: [Clamav-users] How to bypass milter scanning for selectedusers? > > static const char*ignoredEmailAddresses[] = { > > /*"[EMAIL PROTECTE

RE: [Clamav-users] RPM Files....

2004-04-13 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Mike van > Vugt > Sent: Tuesday, April 13, 2004 8:16 AM > To: ClamAV Mail List > Subject: [Clamav-users] RPM Files > > > Can anyone tell me what goes wrong here Downloaded the files but > keep ge

RE: [Clamav-users] RPM Files....

2004-04-13 Thread Jason Balicki
>You need to rpm -ivh the dependencies first and then instal the clamav >package. Just because they are in the same directory as the >package you are >trying to install doesnt mean that they will automatically be >installed as >well. Jim is correct, however a minor clarification: RPM is smart

[Clamav-users] Clamd

2004-04-13 Thread Mike van Vugt
Installed clamav, clamav-db and libclamav1. Tried to install and run clamd but got the next message # /usr/sbin/clamd LibClamAV Error: cli_cvdload(): Can't create temporary directory /root/tmp/163df1b13c4bdbca ERROR: Unable to create temporary directory. [EMAIL PROTECTED] clamav]# Anyone ???

RE: [Clamav-users] RPM Files....

2004-04-13 Thread Mark Jeremy
You need to run this command all in one line #rpm -ivh clamav-db-0.66-0.20031204.1mdk.i586.rpm libclamav1-0.66-0.20031204.1mdk.i586.rpm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike van Vugt Sent: Tuesday, April 13, 2004 8:16 AM To: ClamAV Mail Lis

Re: [Clamav-users] RPM Files....

2004-04-13 Thread Steven Stern
On Tue, 13 Apr 2004 14:15:31 +0200, Mike van Vugt <[EMAIL PROTECTED]> wrote: >Can anyone tell me what goes wrong here Downloaded the files but >keep getting errors > >Regards, > >Mike > ># rpm -ivh clamav-0.66-0.20031204.1mdk.i586.rpm >error: Failed dependencies: >libclamav1 = 0.6

Re: [Clamav-users] Clamav RPM

2004-04-13 Thread Bill Randle
On Tue, 2004-04-13 at 06:20, Mike van Vugt wrote: > On Tue, 2004-04-13 at 14:15, Fajar A. Nugraha wrote: > > Mike van Vugt wrote: [cut] > > Next step: told evolution to use a filter with a pipe message to shell > command /usr/bin/clamscan "returns=1" and dump it into a folder how > can i see

[Clamav-users] what does: reject=451 4.7 mean?

2004-04-13 Thread Howie Grapek
Hi. I've been seeing a lot of these:   Apr 13 08:50:58 r2d2 sendmail[9587]: i3DEn0dw009587: Milter: from=<[EMAIL PROTECTED]>, reject=451 4.7.1 Please try again later   in my mail log (of course, with different from addresses.   what does it mean?   Thanks, Howie. Tax headache? MSN Money provide

[Clamav-users] recommended setting for 'max-children'.

2004-04-13 Thread Howie Grapek
we've been hit hard in the last 24 hours for incoming mail (floods, etc). because of it, i've seen:   Apr 13 08:50:54 r2d2 clamav-milter[13074]: hit max-children limit (176 >= 40): waiting for some to exitApr 13 08:50:54 r2d2 clamav-milter[13074]: hit max-children limit (176 >= 40): waiting for so

Re: [Clamav-users] How to bypass milter scanning for selectedusers?

2004-04-13 Thread Nigel Horne
On Tuesday 13 Apr 2004 3:11 pm, Andrei Bucur wrote: > can i stop scaning email for selected users ? not from ! No-one has ever asked for that before, so the answer is currently no means to do that. > Adi -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EM

Re: [Clamav-users] How to bypass milter scanning for selectedusers?

2004-04-13 Thread Antony Stone
On Tuesday 13 April 2004 4:30 pm, Nigel Horne wrote: > On Tuesday 13 Apr 2004 3:11 pm, Andrei Bucur wrote: > > can i stop scaning email for selected users ? not from ! > > No-one has ever asked for that before, so the answer is currently no means > to do that. You could try http://www.mailscanner

[Clamav-users] Scanning outgoing mail....

2004-04-13 Thread Mike van Vugt
Is there a way to tell Clamav to scan outgoing pop3 mail??? I am using Mandrake 10 with evolution. $ more /etc/mandrake-release ; rpm -qa|grep -i kernel Mandrake Linux release 10.0 (RC1) for i586 kernel-2.6.2.3mdk-1-1mdk Regards, -- - Mike van Vugt - ICQ: 291077353 -

Re: [Clamav-users] clamav-milter failure

2004-04-13 Thread Glenn W. Bach
Shoot. I was hoping this wasn't a dumb mistake. Thanks for pointing this out. Glenn Stephen Gran wrote: On Mon, Apr 12, 2004 at 12:13:13PM -0700, Glenn W. Bach said: * I've configured clamav (w/ #Example): LocalSocket /var/run/clamd.milter/clamd.sock StreamSaveToDisk * I've configured sendmail

Re: [Clamav-users] what does: reject=451 4.7 mean?

2004-04-13 Thread Nigel Horne
I can't be bothered to sift through the HTML you seem to have insisted on using for an e-mail. But the subject matter gives enough of a clue. You don't say what version of clamav-milter (well it may be in your HTML code somewhere I suppose), but the best guess is that you should try the latest vers

Re: [Clamav-users] Scanning outgoing mail....

2004-04-13 Thread Patrick Boutilier
Mike van Vugt wrote: Is there a way to tell Clamav to scan outgoing pop3 mail??? I am using Mandrake 10 with evolution. Do you mean incoming POP3 mail or outgoing SMTP mail? $ more /etc/mandrake-release ; rpm -qa|grep -i kernel Mandrake Linux release 10.0 (RC1) for i586 kernel-2.6.2.3mdk-1-1mdk

Re: [Clamav-users] Clamd

2004-04-13 Thread Bill Randle
Mike van Vugt wrote: Installed clamav, clamav-db and libclamav1. Tried to install and run clamd but got the next message # /usr/sbin/clamd LibClamAV Error: cli_cvdload(): Can't create temporary directory /root/tmp/163df1b13c4bdbca ERROR: Unable to create temporary directory. [EMAIL PROTECTED]

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Jakub Jankowski
On 2004-04-13, Fajar A. Nugraha wrote: >Andrei Bucur wrote: > How can I configure my system so mail to abuse@ or postmaster@ are not rejected? >>>clamav-milter.c, around line 750 >>> >>>/* >>> * Whitelist of source e-mail addresses that we do NOT scan >>> * TODO: read in from a file >

Re: [Clamav-users] Clamd

2004-04-13 Thread Ben Holt
# /usr/sbin/clamd LibClamAV Error: cli_cvdload(): Can't create temporary directory /root/tmp/163df1b13c4bdbca ERROR: Unable to create temporary directory. [EMAIL PROTECTED] clamav]# Anyone ??? Regards, File permissions Check your clamav.conf and set the temporary directory to somewhere y

Re: [Clamav-users] what does: reject=451 4.7 mean?

2004-04-13 Thread Jeff Ramsey
On Apr 13, 2004, at 9:21 AM, Nigel Horne wrote: I can't be bothered to sift through the HTML you seem to have insisted on using for an e-mail. But the subject matter gives enough of a clue. You don't say what version of clamav-milter (well it may be in your HTML code somewhere I suppose), but the

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Jakub Jankowski
On 2004-04-13, Andrei Bucur wrote: >> >My present configuration has sendmail rejecting emails >> >that contain a detected virus. >> > >> >How can I configure my system so mail to abuse@ or >> >postmaster@ are not rejected? >> >> clamav-milter.c, around line 750 [...] >i modify in clamav-milter.c >

Re: [Clamav-users] Clamd

2004-04-13 Thread Steven Stern
On Tue, 13 Apr 2004 16:40:15 +0200, Mike van Vugt <[EMAIL PROTECTED]> wrote: >Installed clamav, clamav-db and libclamav1. Tried to install and run >clamd but got the next message > ># /usr/sbin/clamd >LibClamAV Error: cli_cvdload(): Can't create temporary directory >/root/tmp/163df1b13c4bdbca

Re: [Clamav-users] Clamd

2004-04-13 Thread Tomasz Papszun
On Tue, 13 Apr 2004 at 16:40:15 +0200, Mike van Vugt wrote: > Installed clamav, clamav-db and libclamav1. Tried to install and run > clamd but got the next message > > # /usr/sbin/clamd > LibClamAV Error: cli_cvdload(): Can't create temporary directory > /root/tmp/163df1b13c4bdbca > ERROR: Un

Re: [Clamav-users] what does: reject=451 4.7 mean?

2004-04-13 Thread Todd Lyons
On Tue, 2004-04-13 at 07:56, Howie Grapek wrote: > Hi. > I've been seeing a lot of these: > > Apr 13 08:50:58 r2d2 sendmail[9587]: i3DEn0dw009587: Milter: > from=<[EMAIL PROTECTED]>, reject=451 4.7 > .1 Please try again later > what does it mean? For some reason, the milter is unable to connec

Re: [Clamav-users] Clamd

2004-04-13 Thread Jakub Jankowski
On 2004-04-13, Mike van Vugt wrote: >Installed clamav, clamav-db and libclamav1. Tried to install and run >clamd but got the next message [...] Have you configured your clamav properly? Have you read the documentation? s. -- (0> Jakub Jankowski [url]: s.atn.pl "Nawet w Krainie Czarow //

Re: [Clamav-users] Clamd

2004-04-13 Thread Mike van Vugt
> [ ] > > > > > Mike, > > Use the init script that's installed with the RPMs to start clamd > (/etc/init.d/clamd). It sets the home directory and tmpdir prior > to starting clamd. Typically, this will be /var/lib/clamav or > /var/lib/amavis if running amavisd. Since you started it as root,

Re: [Clamav-users] Scanning outgoing mail....

2004-04-13 Thread jjolet
if your smtp outgoing server is the same server clam is running on, that should happen. for instance, i'm running postfix and clam on the same server via amavis..if i'm on that box, or using that box as outgoing smtp, it gets scanned. in fact, it gets scanned user to user local to the box via

Re: [Clamav-users] recommended setting for 'max-children'.

2004-04-13 Thread Todd Lyons
On Tue, 2004-04-13 at 08:00, Howie Grapek wrote: > Apr 13 08:50:54 r2d2 clamav-milter[13074]: hit max-children limit (176 > >= 40): waiting for some to exit > what do you think the recommended settings for max-children limit is > for a linux mail server (reasonably busy server - with multiple cpus

[Clamav-users] RE: Scanning outgoing mail

2004-04-13 Thread Mark Moshe Kaye
> From: Mike van Vugt <[EMAIL PROTECTED]> > Scanning outgoing mail > 2004-04-13 09:02 > Is there a way to tell Clamav to scan outgoing pop3 mail??? > I am using Mandrake 10 with evolution. > > $ more /etc/mandrake-release ; rpm -qa|grep -i kernel > Mandrake Linux release 10.0 (RC1)

Re: [Clamav-users] Clamd

2004-04-13 Thread Antony Stone
On Tuesday 13 April 2004 6:43 pm, Mike van Vugt wrote: > $ /usr/sbin/clamd > ERROR: Problem with internal logger. Please check the permissions on the > /var/log/clamav/clamd.log file Which user are you trying to run clamd as? > $ ls -al > total 16 > drwxr-xr-x 2 clamav clamav 4096 Apr 13 16:36

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-13 Thread Henry Harvey
I also have the same problem. Apparently, I have two locations where the updates are stored. ClamAV was using /usr/local/share/clamav and freshclam was storing updates in /var/lib/clamav. So I made clamav.conf point to /var/lib/clamav also. And just to make sure that nothing is using /usr/local/sh

Re: [Clamav-users] Scanning outgoing mail....

2004-04-13 Thread B. van Ouwerkerk
At 18:02 13-04-2004 +0200, you wrote: Is there a way to tell Clamav to scan outgoing pop3 mail??? I am using Mandrake 10 with evolution. $ more /etc/mandrake-release ; rpm -qa|grep -i kernel Mandrake Linux release 10.0 (RC1) for i586 kernel-2.6.2.3mdk-1-1mdk http://www.clamav.net/3rdparty.html Look

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-13 Thread Jeff Ramsey
On Apr 13, 2004, at 11:13 AM, Henry Harvey wrote: I restarted clamd, amavisd and all went ok. But when I run sigtool --list it tells me ERROR: Can't open directory /usr/local/share/clamav How can I make it point to the new location of the database files? And how can I make sure that my clamd is now

Re: [Clamav-users] Clamd

2004-04-13 Thread Bill Randle
Mike van Vugt wrote: [ ] Mike, Use the init script that's installed with the RPMs to start clamd (/etc/init.d/clamd). It sets the home directory and tmpdir prior to starting clamd. Typically, this will be /var/lib/clamav or /var/lib/amavis if running amavisd. Since you started

[Clamav-users] clamd is not scanning my email.

2004-04-13 Thread darkalchemist
I have done everything in the docs and still it just does not work. I am on RH9 so I had to use the rpm version to even get clamd to work but there it is in the processes but check the maillog and not one mention of scanning the test file. I am stumped and been at this almost all day so can som

RE: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-13 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Henry > Harvey > Sent: Tuesday, April 13, 2004 2:14 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc > > > I also have the same problem. > Apparently, I h

Re: [Clamav-users] clamd is not scanning my email.

2004-04-13 Thread Dennis Skinner
On Tue, 2004-04-13 at 15:38, [EMAIL PROTECTED] wrote: > I have done everything in the docs and still it just does not work. I am on RH9 so > I had to use the rpm version to even get clamd to work but there it is in the > processes but check the maillog and not one mention of scanning the test fi

Re: [Clamav-users] clamd is not scanning my email.

2004-04-13 Thread Antony Stone
On Tuesday 13 April 2004 8:38 pm, [EMAIL PROTECTED] wrote: > I have done everything in the docs and still it just does not work. I am > on RH9 so I had to use the rpm version to even get clamd to work but there > it is in the processes but check the maillog and not one mention of > scanning the t

[Clamav-users] virus names (any reference?)

2004-04-13 Thread Henry Harvey
I hope this is not a redundant question here. I joined this list just recently so I hope somebody can point me in the right direction. Is there anywhere I can check the corresponding virus names for ClamAV? I understand that the names from some other AVs are not the same as how ClamAV calls it. L

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-13 Thread Henry Harvey
I actually did check both config files and made sure both point to the same database directory. The only weird part is that when I do sigtool --list, it still looks at the old database path. What I did to fix it is just remove the old directory, and made a link to the correct path so that sigtool

Re: [Clamav-users] clamd consuming cpu?

2004-04-13 Thread Tomasz Kojm
On Tue, 13 Apr 2004 08:15:12 -0500 "Shannon Werb" <[EMAIL PROTECTED]> wrote: > What is odd is every once in a while I notice the processor hit 100% > with clamd using it all. This continues for 5, 10 or even 15 minutes > sometimes and if I go to my /var/spool/qmailscan/working/new folder > (where

RE: [Clamav-users] clamd is not scanning my email.

2004-04-13 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > [EMAIL PROTECTED] > Sent: Tuesday, April 13, 2004 3:39 PM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] clamd is not scanning my email. > > > I have done everything in the docs and still it just doe

Re: [Clamav-users] virus names (any reference?)

2004-04-13 Thread Antony Stone
On Tuesday 13 April 2004 9:51 pm, Henry Harvey wrote: > Is there anywhere I can check the corresponding > virus names for ClamAV? I understand that > the names from some other AVs are not the > same as how ClamAV calls it. Like Netsky.P > is actually in SomeFool.P in ClamAV. > > I'm looking at the

Re: [Clamav-users] virus names (any reference?)

2004-04-13 Thread Peter Bonivart
Henry Harvey wrote: I'm looking at the ClamAV website and can't find info. Where do I check how ClamAV calls these viruses? The best place right now is the archive for the virus db update list. You can search there for the Clam name, often names of commercial products are mentioned there. http:/

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-13 Thread Steve King
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I had this same problem with 0.70-rc; I was finding that the virus got missed when it was in email but could be detected in a stand-alone file. I picked up each day's snapshot until it started to be detected: this was ClamAV version devel-20040327.

Re: [Clamav-users] virus names (any reference?)

2004-04-13 Thread Jesper Juhl
On Tue, 13 Apr 2004, Henry Harvey wrote: > I hope this is not a redundant question here. > I joined this list just recently so I hope > somebody can point me in the right direction. > > Is there anywhere I can check the corresponding > virus names for ClamAV? Not currently, no. I've been working

RE: [Clamav-users] clamd is not scanning my email.

2004-04-13 Thread darkalchemist
"Jim Maul" <[EMAIL PROTECTED]> wrote .. > We _may_ be able to help you if you provide us with more information. > so > far all we know is you are trying to install some version of clamav on > a > redhat 9 machine and it doesnt work. Could you provide some more > information? > > what version of

Re: [Clamav-users] virus names (any reference?)

2004-04-13 Thread jef moskot
On Wed, 14 Apr 2004, Jesper Juhl wrote: > I've been working on a website to allow users to do exactely that, but > due to being overworked and various other issues it has not progressed > as fast as I had hoped - still working on it when I have a chance > though, so expect something like that in th

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-13 Thread Stephen Gran
On Tue, Apr 13, 2004 at 03:50:48PM -0400, Jim Maul said: > > I also have the same problem. Apparently, I have two locations > > where the updates are stored. ClamAV was using > > /usr/local/share/clamav and freshclam was storing updates in > > /var/lib/clamav. So I made clamav.conf point to /var/l

Re: [Clamav-users] virus names (any reference?)

2004-04-13 Thread Antony Stone
On Wednesday 14 April 2004 12:16 am, jef moskot wrote: > I think if the website just said "What we call 'SomeFool' others call > 'Netsky'," 95% of all questions would be covered. That seems like a good idea to me. > Personally, I don't understand why this particular name has not been > changed,

Re: [Clamav-users] virus names (any reference?)

2004-04-13 Thread jef moskot
On Wed, 14 Apr 2004, Antony Stone wrote: > The problem here is that it's only possible to measure "prevalence" once > there's been quite a lot of it under the old name... I agree with this in principle, but I think this is a special case. There's no denying that this is one of the most "popular" d

Re: [Clamav-users] Cleaning MBOX files?

2004-04-13 Thread jef moskot
On Fri, 9 Apr 2004, Tomasz Kojm wrote: > jef moskot <[EMAIL PROTECTED]> wrote: > > Is there no way to get Clam to report which message the infected file > > (or at least the FIRST infected file) is in? > You may try with clamscan -m --debug Could you give some tips on how to use that to figure out

Re: [Clamav-users] virus names (any reference?)

2004-04-13 Thread Antony Stone
On Wednesday 14 April 2004 1:09 am, jef moskot wrote: > On Wed, 14 Apr 2004, Antony Stone wrote: > > The problem here is that it's only possible to measure "prevalence" once > > there's been quite a lot of it under the old name... > > Other viruses/worms have been renamed in the past, and while I

Re: [Clamav-users] clamd.ctl not read at bootup

2004-04-13 Thread Karl Hakmiller
On Mon, 12 Apr 2004 22:26:24 +0700 "Fajar A. Nugraha" <[EMAIL PROTECTED]> wrote: > Karl Hakmiller wrote: > > > > >I've verified that clamd is running so I suppose the problem is > >that clamav-milter is unable to communicate with clamd. It would > >help me in troubleshooting this if you could te

Re: [Clamav-users] Clamd

2004-04-13 Thread Mike van Vugt
> [ ] > > > The RPMs should create the directories with the correct permissions, and > what you > have above looks right. Try doing what I suggested the first time and > start clamd from > the init script. As root: > # /etc/init.d/clamd start > > -Bill Good morning there, If i ta

Re: [Clamav-users] Scanning outgoing mail....

2004-04-13 Thread Mike van Vugt
[ ] > > Do you mean incoming POP3 mail or outgoing SMTP mail? > > Outgoing smtp, sorry was sleeping a bit at the time I think ;-)) Mike --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel