Re: [Clamav-users] Freshclam + My Problem

2004-12-01 Thread Thomas Lamy
Luca Gibelli schrieb: Hello xterm1, Is there any way to tell freshclam what ip to use to get it's updates. We have a problem with our main ip being locked out due to an attack. Now there is no way to do that, afaik. As a temp. fix, add a static route for some mirrors and specify them in

Re: [Clamav-users] NotifyClamd command doesn't work

2004-12-01 Thread Nigel Horne
On Wednesday 01 Dec 2004 06:54, Sasa Stupar wrote: Clamd was reloading correctly but clamav-milter not. Is this a bug At the risk of repeating myself from yesterday, this is fixed in CVS. Sasa -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL

[Clamav-users] handling database updates

2004-12-01 Thread spamdetect
Hello! I'm working on an smtp content filter which does virus scanning with libclamav (I do not use any clamav daemon). I pondered about how to handle av database updates and want to find an elegant solution not want to stop and start the filter daemon. I tried the following: when my content

Re: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread alan premselaar
Gianmarco Giovannelli wrote: At 16.22 29/11/2004, you wrote: On Thu, 2004-11-25 at 13:00, Gareth Blades wrote: I am running Suse Openexchange - Amavis (clamd) - Postfix. Mine lets through 24, 25, 27. In my configuration: FreeBSD, sendmail-milter, noattach, clamav-milter 0.80j I got no virus

Re: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Nigel Horne
And now a wish: Is possible to implement in clamav-milter or clamd itself the possibility to define a list of suffix I'd like to consider as: UNAUTHORIZED ATTACH TYPE That is not the job of a virus-scanner, it's the job of a content- filter. -Nigel

Re: [Clamav-users] NotifyClamd command doesn't work

2004-12-01 Thread Sasa Stupar
V sre, 01.12.2004 ob 10:11 je Nigel Horne napisal(a): On Wednesday 01 Dec 2004 06:54, Sasa Stupar wrote: Clamd was reloading correctly but clamav-milter not. Is this a bug At the risk of repeating myself from yesterday, this is fixed in CVS. Well, when it will be official? This is a

Re: [Clamav-users] NotifyClamd command doesn't work

2004-12-01 Thread Nigel Horne
On Wed, 2004-12-01 at 14:01 +0100, Sasa Stupar wrote: Clamd was reloading correctly but clamav-milter not. Is this a bug At the risk of repeating myself from yesterday, this is fixed in CVS. Well, when it will be official? This is a production machine so I do not want to use CVS

Re: [Clamav-users] NotifyClamd command doesn't work

2004-12-01 Thread Brian Morrison
On Tue, 30 Nov 2004 15:15:51 + in [EMAIL PROTECTED] Nigel Horne [EMAIL PROTECTED] wrote: On Tuesday 30 Nov 2004 15:12, Brian Morrison wrote: On Tue, 30 Nov 2004 14:55:25 + in [EMAIL PROTECTED] Nigel Horne [EMAIL PROTECTED] wrote: This has been fixed in CVS. Any ideas on

Re: [Clamav-users] handling database updates

2004-12-01 Thread Tomasz Kojm
On Wed, 1 Dec 2004 10:41:57 +0100 (CET) [EMAIL PROTECTED] wrote: when my content filter daemon starts, it calls a function called init_cl(). when I upgrade the av database I send a HUP signal to my daemon and call reload_cl(). It should be called periodically and not only depend on SIGHUP.

Re: [Clamav-users] NotifyClamd command doesn't work

2004-12-01 Thread Sasa Stupar
V sre, 01.12.2004 ob 14:05 je Nigel Horne napisal(a): On Wed, 2004-12-01 at 14:01 +0100, Sasa Stupar wrote: Clamd was reloading correctly but clamav-milter not. Is this a bug At the risk of repeating myself from yesterday, this is fixed in CVS. Well, when it will be

Re: [Clamav-users] NotifyClamd command doesn't work

2004-12-01 Thread Nigel Horne
On Wed, 2004-12-01 at 14:13 +0100, Sasa Stupar wrote: thanks. Is it possible to use command OnUpdateExecute to reload clamav-milter directly? I saw this option in freshclam.conf. No need, using the model in CVS. Sasa ___

Re: [Clamav-users] NotifyClamd command doesn't work

2004-12-01 Thread Jim Maul
Sasa Stupar wrote: V tor, 30.11.2004 ob 16:32 je Trog napisal(a): On Tue, 2004-11-30 at 15:24, Sasa Stupar wrote: V tor, 30.11.2004 ob 16:20 je Trog napisal(a): On Tue, 2004-11-30 at 15:13, Sasa Stupar wrote: -- From the log I can see that Clamd has a self check every 1800 sec and

[Clamav-users] support for external unpackers

2004-12-01 Thread Daniel Tiefnig
Hej, I don't know whether this has been discussed allready, I can't find it in the ML archive at least. What do you people think about support for external unpackers in clamd? I know I can use them with clamscan, so why not within clamd too? I think this would be a great feature, as I (and others

[Clamav-users] handling database updates

2004-12-01 Thread spamdetect
Hello Tomasz! Ok, I'll check for database updates in every hour (or shall I do that more often?) But I would like to know what code is preferred doing so. I tried the following: void init_cl(){ int ret, no=0; if((ret = cl_loaddbdir(cl_retdbdir(), root, no))){ syslog(LOG_PRIORITY,

Re: [Clamav-users] handling database updates

2004-12-01 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: Hello Tomasz! Ok, I'll check for database updates in every hour (or shall I do that more often?) But I would like to know what code is preferred doing so. I tried the following: This appears to have nothing to do with improving the ClamAV project. Not that I'm a topic

[Clamav-users] Re: handling database updates

2004-12-01 Thread spamdetect
Hello Dennis! Sorry to bothering the list. Where can I find info about using the clamav library? SJ ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Re: handling database updates

2004-12-01 Thread Matt
[EMAIL PROTECTED] wrote: Sorry to bothering the list. Where can I find info about using the clamav library? If I remember correctly, it is documented to some degree on the website. I think the final say as to whether this topic is suitable for the list is down to Tomasz, no one else.

RE: [Clamav-users] uninstalling issues

2004-12-01 Thread Roy Kidder
Did you edit your crontab using 'crontab -e'? If not, the cron daemon probably won't reread the file on disk and is still acting upon the old crontab. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Green Sent: Monday, November 29,

Re: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Gianmarco Giovannelli
At 12.08 01/12/2004, you wrote: And now a wish: Is possible to implement in clamav-milter or clamd itself the possibility to define a list of suffix I'd like to consider as: UNAUTHORIZED ATTACH TYPE That is not the job of a virus-scanner, it's the job of a content- filter. I know, but what if

Re: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Matt
Gianmarco Giovannelli wrote: I know, but what if I want to consider them by default undesiderable ? I think clamav-milter should do the job quite easily. If it found such attachment it threat like a virus name : UNAUTHORIZED ATTACH TYPE Stop... :-) That is what a content filter is for.

RE: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Mitch (WebCob)
-Original Message- At 12.08 01/12/2004, you wrote: And now a wish: Is possible to implement in clamav-milter or clamd itself the possibility to define a list of suffix I'd like to consider as: UNAUTHORIZED ATTACH TYPE That is not the job of a virus-scanner, it's the job of a

Re: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Gianmarco Giovannelli
At 20.17 01/12/2004, you wrote: Gianmarco Giovannelli wrote: I know, but what if I want to consider them by default undesiderable ? I think clamav-milter should do the job quite easily. If it found such attachment it threat like a virus name : UNAUTHORIZED ATTACH TYPE Stop... :-) That is

RE: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Shayne Lebrun
I am only trying to understand if it is possible to do with a single program (clamav-milter) the job of two programs (clamav-milter and noattach). Ideally, you wouldn't be using clamav-milter; you'd be using a milter that does content filtering (amavis?), and as part of that content filtering,

Re: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Jason Haar
Gianmarco Giovannelli wrote: UNAUTHORIZED ATTACH TYPE Stop... :-) Do you think the idea is wrong ? In this way, as I said, you could also lower the cpu load on the antivir box (you discard without check) and you could fight better the new virus (If my sig doesn't detect, probably the attach

RE: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Matthew.van.Eerde
Jason Haar wrote: However, a lot of sites complained. They actually looked at the logs and they didn't like seeing that 44% of their quarantine events were PIF blocked - they wanted to know WHAT VIRUS IT WAS. But you have the PIF in quarantine anyway. Couldn't you save CPU by PIF-blocking

RE: [Clamav-users] Virus Tests from www.testvirus.org

2004-12-01 Thread Gianmarco Giovannelli
At 22.24 01/12/2004, you wrote: Jason Haar wrote: However, a lot of sites complained. They actually looked at the logs and they didn't like seeing that 44% of their quarantine events were PIF blocked - they wanted to know WHAT VIRUS IT WAS. But you have the PIF in quarantine anyway. Couldn't