Re: [Clamav-users] W32.Netsky.D@mm virus

2005-01-07 Thread Tomasz Papszun
On Fri, 07 Jan 2005 at 14:22:57 +0700, [EMAIL PROTECTED] wrote: > I'am using ClamAV 0.80 with clamav-milter 0.80j to scan all my incoming mail. > > This morning i receive email that contains [EMAIL PROTECTED] virus (NAV > version) in attachment my_details.pif. > > Why clamav-milter cannot detect

Re: [Clamav-users] corrupt mailbox after clamav works on it

2005-01-07 Thread James Lick
Nitin wrote: I revoke spamassassin and clamav through /user/home/.procmailrc. It works fine until I call clamav (just spamassassin). BTW, I use : :0fw: clamAV.lock | clamscan to call clamav for user. ClamAV is not designed to be used as a procmail filter. You probably want to use clamassassin

[Clamav-users] clamd rejecting supervise parent

2005-01-07 Thread Shaun Bugler
I am having a problem running clamd with supervise. Actually, it does this without supervise. It seems to run, then kill itselfs and daemonise itself. Then subsequent clamd's uses it as its parent instead on supervise This started after I upgraded to the latest CVS version, so I have fiddled and a

Re: [Clamav-users] clamd rejecting supervise parent

2005-01-07 Thread Trog
On Fri, 2005-01-07 at 10:11, Shaun Bugler wrote: > I am having a problem running clamd with supervise. > Actually, it does this without supervise. > It seems to run, then kill itselfs and daemonise itself. > Then subsequent clamd's uses it as its parent instead on supervise > This started after I u

Re: [Clamav-users] clamd rejecting supervise parent

2005-01-07 Thread Shaun Bugler
On Friday 07 January 2005 12:15, Trog wrote: > On Fri, 2005-01-07 at 10:11, Shaun Bugler wrote: > > I am having a problem running clamd with supervise. > > Actually, it does this without supervise. > > It seems to run, then kill itselfs and daemonise itself. > > Then subsequent clamd's uses it as i

Re: [Clamav-users] initial configure

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 10:19 [EMAIL PROTECTED] (Bill Maidment) wrote to ClamAV users ML : >>> Don't >>>understand, why online access should/must be only one way to receive updates. >> We can send them to you every two weeks by a carrier pigeon. Firstly buy me devocote for them. :) BM> Be fair,

Re: [Clamav-users] initial configure

2005-01-07 Thread Arkady V.Belousov
Hi! 6-Янв-2005 17:32 [EMAIL PROTECTED] (Daniel J McDonald) wrote to ClamAV users ML : >> >> "Fetch" from where (without online)? (BTW, updates for my >> >> previous >> My English is poor, but me looks, that above is irony/sarcasm. Don't >> understand, why online access should/must

Re: [Clamav-users] initial configure

2005-01-07 Thread Bill Maidment
Arkady V.Belousov wrote: Hi! Firstly buy me devocote for them. :) I was thinking, "buy me an oven" Mmm, Pigeon Pie. BM> Be fair, Tomasz. The guy's Russian and you know what they do with BM> carrier pigeons, don't you :-) Earlier, cultivating pigeons was popular in our country, but n

Re: [Clamav-users] W32.Netsky.D@mm virus

2005-01-07 Thread Daniel J McDonald
On Fri, 2005-01-07 at 14:22 +0700, [EMAIL PROTECTED] wrote: > I'am using ClamAV 0.80 with clamav-milter 0.80j to scan all my incoming mail. Are you certain? I'm not familiar with qmail-scanner, so it might be a red herring, but: > Received: from [EMAIL PROTECTED] by ns1.tjipta.com by uid 501 wit

Re: [Clamav-users] initial configure

2005-01-07 Thread Daniel J McDonald
On Fri, 2005-01-07 at 13:37 +0300, Arkady V.Belousov wrote: > Hi! > > 6-Янв-2005 17:32 [EMAIL PROTECTED] (Daniel J McDonald) wrote to > ClamAV users ML : > > >> >> "Fetch" from where (without online)? (BTW, updates for my > >> >> previous > >> My English is poor, but me looks, that

[Clamav-users] Milter increasing nchildren and failed mutex assertion

2005-01-07 Thread Raj Mathur
Hi, Running the following on a Debian Sarge machine: clamav-milter 0.80-7 clamav-daemon 0.80-7 kernel-image 2.6.8-10 libc6 2.3.2.ds1-18 Averaging about 200 incoming SMTP connections per minute. Also running SpamAssassin and spamass-milter. No local delivery (except to the spam con

[Clamav-users] ERROR: Can't connect to port 80 of host database.clamav.net (80.95.80.7)

2005-01-07 Thread Mark G. Thomas
Hi, As of early this morning, I'm getting error messages like this: ERROR: Can't connect to port 80 of host database.clamav.net (80.95.80.7) Broken Pipe I've confirmed that my network appears to be being filtered from access to database.clamav.net, since I can connect to port 80 there succe

Re: [Clamav-users] initial configure

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 07:08 [EMAIL PROTECTED] (Daniel J McDonald) wrote to ClamAV users ML : >> >> >> "Fetch" from where (without online)? (BTW, updates for my >> >> My English is poor, but me looks, that above is irony/sarcasm. Don't >> >> understand, why online access should/must be only one

Re: [Clamav-users] Milter increasing nchildren and failed mutex assertion

2005-01-07 Thread Nigel Horne
On Friday 07 Jan 2005 13:45, Raj Mathur wrote: > Hi, > > Running the following on a Debian Sarge machine: > > clamav-milter 0.80-7 Is the problem present in the version in CVS? -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] htt

Re: [Clamav-users] initial configure

2005-01-07 Thread Tomasz Kojm
On Fri, 7 Jan 2005 16:48:44 +0300 (MSK) "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > (Does this mean, that ClamAV developers suggest, that _all_ > machines, > where ClamAV will work, - at home, at corporations, at Nuclear Plants > - should be internet-connected?) You should visit h

Re: [Clamav-users] initial configure

2005-01-07 Thread Matt
Arkady V.Belousov wrote: > Again. :( My machine have no web server runned and I doubt that it > will. > > (Does this mean, that ClamAV developers suggest, that _all_ > machines, > where ClamAV will work, - at home, at corporations, at Nuclear Plants - > should be internet-connected?

Re: [Clamav-users] ERROR: Can't connect to port 80 of host database.clamav.net (80.95.80.7)

2005-01-07 Thread Daniel J McDonald
On Fri, 2005-01-07 at 08:50 -0500, Mark G. Thomas wrote: > Hi, > > As of early this morning, I'm getting error messages like this: > > ERROR: Can't connect to port 80 of host database.clamav.net (80.95.80.7) > Broken Pipe > > I've confirmed that my network appears to be being filtered from a

Re: [Clamav-users] initial configure

2005-01-07 Thread Brian Morrison
On Fri, 7 Jan 2005 16:48:44 +0300 (MSK) in [EMAIL PROTECTED] "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > (Does this mean, that ClamAV developers suggest, that _all_ > machines, > where ClamAV will work, - at home, at corporations, at Nuclear Plants > - should be internet-connec

[Fwd: Re: [Clamav-users] initial configure]

2005-01-07 Thread Daniel J McDonald
> DJM> That's fine - download them from the internet > > How? Is there ftp? Is there email lists (which sends updated bases > directly, not only notification about "what new in last updated")? Is there > local (to me) BBSes? Nope. http. Use wget if you want a command line interface. > DJM

Re: [Clamav-users] Milter increasing nchildren and failed mutex assertion

2005-01-07 Thread Raj Mathur
> "Nigel" == Nigel Horne <[EMAIL PROTECTED]> writes: Nigel> On Friday 07 Jan 2005 13:45, Raj Mathur wrote: >> Hi, >> >> Running the following on a Debian Sarge machine: >> >> clamav-milter 0.80-7 Nigel> Is the problem present in the version in CVS? Haven't tried

Re: [Clamav-users] initial configure

2005-01-07 Thread Dennis Peterson
Arkady V.Belousov said: > Hi! > > 7-ñÎ×-2005 07:08 [EMAIL PROTECTED] (Daniel J McDonald) wrote > to > ClamAV users ML : > >>> >> >> "Fetch" from where (without online)? (BTW, updates for my >>> >> My English is poor, but me looks, that above is irony/sarcasm. >>> Don't >>> >> understand,

Re: [Clamav-users] Milter increasing nchildren and failed mutex assertion

2005-01-07 Thread Nigel Horne
On Friday 07 Jan 2005 15:15, Raj Mathur wrote: >> clamav-milter 0.80-7 > > Nigel> Is the problem present in the version in CVS? > > Haven't tried that, since I'm paranoid about non-packaged software on > production boxes. However if you feel that will help solve/trace the > problem I can

Re: [Clamav-users] Milter increasing nchildren and failed mutex assertion

2005-01-07 Thread Nigel Horne
On Friday 07 Jan 2005 15:15, Raj Mathur wrote: >> clamav-milter 0.80-7 > > Nigel> Is the problem present in the version in CVS? > > Haven't tried that, since I'm paranoid about non-packaged software on > production boxes. However if you feel that will help solve/trace the > problem I can

[Clamav-users] Requesting Recommendations (clamav, amavis, spamassassin, sendmail, procmail, etc)

2005-01-07 Thread Diane Rolland
I am looking for some recommendations on the best (and hopefully easiest way) to set up Virus and Spam protection for my server. I've played around with some of the combinations, but havn't really got everything working together like I want. I'll list the tools I already have available, and then

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Arkady V.Belousov
Hi! 6-Янв-2005 20:25 [EMAIL PROTECTED] (Jim Maul) wrote to "ClamAV users ML" : >> Ok, let me get this right. Clamav cannot clean? What good is it? JM> What good is it? It detects viruses! I'd say thats pretty good. 1. When (I hope, not "if") disinfection will be implemented? 2. How handled vir

Re: [Clamav-users] initial configure

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 14:11 [EMAIL PROTECTED] (Brian Morrison) wrote to ClamAV users ML : >> (Does this mean, that ClamAV developers suggest, that _all_ >> machines, >> where ClamAV will work, - at home, at corporations, at Nuclear Plants >> - should be internet-connected?) BM> ClamAV is p

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Nigel Horne
On Friday 07 Jan 2005 17:30, Arkady V.Belousov wrote: > 1. When (I hope, not "if") disinfection will be implemented? http://www.clamav.net/faq.htm, answer 26. -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk _

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread K. Shantanu
* Nigel Horne <[EMAIL PROTECTED]> [050107 10:46]: > On Friday 07 Jan 2005 17:30, Arkady V.Belousov wrote: > > > 1. When (I hope, not "if") disinfection will be implemented? > > http://www.clamav.net/faq.htm, answer 26. For records it is, http://www.clamav.net/faq.html i.e. faq.html and not faq.

RE: [Clamav-users] Requesting Recommendations (clamav, amavis, sp amassassin, sendmail, procmail, etc)

2005-01-07 Thread Ken Goods
Diane Rolland wrote: > I am looking for some recommendations on the best (and hopefully > easiest way) to set up Virus and Spam protection for my server. I've > played around with some of the combinations, but havn't really got > everything working together like I want. > > I'll list the tools I

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Lionel Bouton
Arkady V.Belousov wrote the following on 01/07/2005 06:30 PM : Hi! 6-Янв-2005 20:25 [EMAIL PROTECTED] (Jim Maul) wrote to "ClamAV users ML" : Ok, let me get this right. Clamav cannot clean? What good is it? JM> What good is it? It detects viruses! I'd say thats pretty good. 1. When (I h

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Arkady V.Belousov
Hi! 6-Янв-2005 21:37 [EMAIL PROTECTED] (Noel Jones) wrote to clamav-users@lists.clamav.net: NJ> "Cleaning" of viruses is a marketing ploy. Not agreed. We use antiviruses from middle of 80th, and they save us many programs, which else be losted... NJ> after "cleaning" but a corrupted file.

Re: [Fwd: Re: [Clamav-users] initial configure]

2005-01-07 Thread Tomasz Kojm
On Fri, 07 Jan 2005 08:38:18 -0600 Daniel J McDonald <[EMAIL PROTECTED]> wrote: > if you are running clamd, you can't manually signal it that it has > fresh data It's possible by sending SIGUSR2 to the main clamd process. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Jim Maul
Arkady V.Belousov wrote: Hi! 6-Янв-2005 20:25 [EMAIL PROTECTED] (Jim Maul) wrote to "ClamAV users ML" : Ok, let me get this right. Clamav cannot clean? What good is it? JM> What good is it? It detects viruses! I'd say thats pretty good. 1. When (I hope, not "if") disinfection will be implemented

Re: [Clamav-users] Requesting Recommendations (clamav, amavis, sp amassassin, sendmail, procmail, etc)

2005-01-07 Thread Matt
Ken Goods wrote: > > Tools: > > sendmail (currently my MTA) > > postfix > > procmail > > clamav > > spamassassin > > amavis-new (but willing to use something else) > > > You may want to take a look at MailScanner. It works extremely well for > me and is highly configurable. And my number one r

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 13:27 [EMAIL PROTECTED] (Jim Maul) wrote to ClamAV users ML : JM> make it into a users mailbox. ClamAV is not intended to be run after JM> the fact on an already infected machine. JM> I really dont see what the issue is here. You appear to be in a rare JM> situation Infecte

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Brian Morrison
On Fri, 7 Jan 2005 22:22:56 +0300 (MSK) in [EMAIL PROTECTED] "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > This is only one example, that there is exists ways outside > internet. Those alternatives have been out-evolved in the main -- Brian Morrison bdm at fenrir dot org d

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Peter J. Holzer
On 2005-01-07 22:22:56 +0300, Arkady V.Belousov wrote: > 7-???-2005 13:27 [EMAIL PROTECTED] (Jim Maul) wrote to ClamAV users ML > : > > JM> make it into a users mailbox. ClamAV is not intended to be run after > JM> the fact on an already infected machine. > JM> I really dont see what the issue is

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Jim Maul
Arkady V.Belousov wrote: Hi! 7-Янв-2005 13:27 [EMAIL PROTECTED] (Jim Maul) wrote to ClamAV users ML : JM> make it into a users mailbox. ClamAV is not intended to be run after JM> the fact on an already infected machine. JM> I really dont see what the issue is here. You appear to be in a rare JM>

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Calvin Dodge
On Fri, Jan 07, 2005 at 03:38:41PM -0500, Jim Maul wrote: > Arkady V.Belousov wrote: > > And thats the problem. ClamAV wasnt really designed to be an av > solution on a home machine. It doesnt disinfect, quaratine, or have a > fancy gui like some other commercial av solutions. What it does do

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Jim Maul
Calvin Dodge wrote: On Fri, Jan 07, 2005 at 03:38:41PM -0500, Jim Maul wrote: Arkady V.Belousov wrote: And thats the problem. ClamAV wasnt really designed to be an av solution on a home machine. It doesnt disinfect, quaratine, or have a fancy gui like some other commercial av solutions. What i

Re: [Clamav-users] initial configure

2005-01-07 Thread Arkady V.Belousov
Hi! 6-Янв-2005 20:22 [EMAIL PROTECTED] (Jim Maul) wrote to "ClamAV users ML" : JM> http://www.clamav.net/abstract.html#pagestart JM> "The package provides a flexible and scalable multi-threaded daemon, a JM> command line scanner, and a tool for automatic updating via Internet." Let me rephr

Re: [Clamav-users] initial configure

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 15:00 [EMAIL PROTECTED] (Tomasz Kojm) wrote to ClamAV users ML : >> (Does this mean, that ClamAV developers suggest, that _all_ >> machines, >> where ClamAV will work, - at home, at corporations, at Nuclear Plants >> - should be internet-connected?) TK> You should visit h

Re: [Clamav-users] initial configure

2005-01-07 Thread Tomasz Kojm
On Sat, 8 Jan 2005 01:57:41 +0300 (MSK) "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > I mean, unacceptable, that there are not seen other > ways for bases updating. (I hope, now I clearly express my question?) It's now your homework to find the other ways. Not very subtle, but well... --

Re: [Clamav-users] initial configure

2005-01-07 Thread Stefan Hornburg
On Sat, 8 Jan 2005 01:50:35 +0300 (MSK) "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > Hi! > > 6-___-2005 20:22 [EMAIL PROTECTED] (Jim Maul) wrote to "ClamAV users ML" > : > > JM> http://www.clamav.net/abstract.html#pagestart > JM> "The package provides a flexible and scalable multi-threaded

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 18:46 [EMAIL PROTECTED] (Lionel Bouton) wrote to ClamAV users ML : >>1. When (I hope, not "if") disinfection will be implemented? LB> disinfection is implemented by your backup software, just restore the LB> last backup to restore infected files clamav will delete. If you don't LB>

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 21:32 [EMAIL PROTECTED] (Peter J. Holzer) wrote to ClamAV users ML : >> Infected machine _isn't_ _rare_ situation. PJH> No, but PJH> 1) I think real viruses which infect other programs are getting rare. For me, as victim of virus like CIH, is unimportant that this virus

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 15:38 [EMAIL PROTECTED] (Jim Maul) wrote to ClamAV users ML : >> JM> BBSes?? I ran one of those when i was 12... >> This is only one example, that there is exists ways outside internet. JM> Of course, but for open source software, how many methods can you really JM> expect?

Re: [Clamav-users] initial configure

2005-01-07 Thread Arkady V.Belousov
Hi! 8-Янв-2005 00:40 [EMAIL PROTECTED] (Tomasz Kojm) wrote to ClamAV users ML : >> I mean, unacceptable, that there are not seen other >> ways for bases updating. (I hope, now I clearly express my question?) TK> It's now your homework to find the other ways. Not very subtle, but TK> well...

Re: [Fwd: Re: [Clamav-users] initial configure]

2005-01-07 Thread Arkady V.Belousov
Hi! 7-Янв-2005 08:38 [EMAIL PROTECTED] (Daniel J McDonald) wrote to Clamav Users : >> DJM> run freshclam, >> What does freshclam such, that I can't reproduce manually (for example, >> by simple placing updated bases into ClamAV directories)? DJM> You can't validate the cvd's you receive manu

Re: [Fwd: Re: [Clamav-users] initial configure]

2005-01-07 Thread Stefan Hornburg
On Sat, 8 Jan 2005 04:02:22 +0300 (MSK) "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > Hi! > > 7-___-2005 08:38 [EMAIL PROTECTED] (Daniel J McDonald) wrote to > Clamav Users : > > >> DJM> run freshclam, > >> What does freshclam such, that I can't reproduce manually (for > >> example, >

Re: [Fwd: Re: [Clamav-users] initial configure]

2005-01-07 Thread Tomasz Kojm
On Sat, 8 Jan 2005 04:02:22 +0300 (MSK) "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > Stop. Does this sentence mean, that I may just copy (received) > .cvd files into ClamAV directories Yes, you can do that. > and at next (re)start they will be used clamd will automatically reload

Re: [Clamav-users] initial configure

2005-01-07 Thread Tomasz Kojm
On Sat, 8 Jan 2005 03:35:20 +0300 (MSK) "Arkady V.Belousov" <[EMAIL PROTECTED]> wrote: > use commercial solution (like F-PROT or Dr.Web I highly recommend buying a commercial a-v scanner with a 24h assistance in your case. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\..

RE: [Clamav-users] Requesting Recommendations (clamav, amavis, spamassassin, sendmail, procmail, etc)

2005-01-07 Thread Diane Rolland
> Ken Goods wrote: > > > > You may want to take a look at MailScanner. It works extremely well > > for me and is highly configurable. And my number one > reason for using > > Just as a caution, I noticed that you also list Postfix in > your repertiore of software. If you are planning on

Re: [Clamav-users] initial configure

2005-01-07 Thread Dennis Peterson
Arkady V.Belousov said: > Hi! > > 8-ñÎ×-2005 00:40 [EMAIL PROTECTED] (Tomasz Kojm) wrote to ClamAV users ML > : > >>> I mean, unacceptable, that there are not seen other >>> ways for bases updating. (I hope, now I clearly express my question?) > TK> It's now your homework to find the other ways. No

Re: [Clamav-users] Requesting Recommendations (clamav, amavis, spamassassin, sendmail, procmail, etc)

2005-01-07 Thread Peter Bonivart
Diane Rolland wrote: Ken & Matt; Thanks for the tips; this was exactly what I was looking for!!! MailScanner looks Extremely promising! (And it was a breeze to install). I think I'll still be ablt to use ProcMail for the business mail rules. Make sure to subscribe to the MailScanner list also, you

RE: [Clamav-users] Requesting Recommendations (clamav, amavis, spamassassin, sendmail, procmail, etc)

2005-01-07 Thread Terry Allen
> Ken Goods wrote: > > > > You may want to take a look at MailScanner. It works extremely well > > for me and is highly configurable. And my number one > reason for using > > Just as a caution, I noticed that you also list Postfix in > your repertiore of software. If you are planning on

Re: [Clamav-users] Requesting Recommendations (clamav, amavis, spamassassin, sendmail, procmail, etc)

2005-01-07 Thread Terry Allen
Diane Rolland wrote: >Ken & Matt; Thanks for the tips; this was exactly what I was looking for!!! >MailScanner looks Extremely promising! (And it was a breeze to install). >I think I'll still be ablt to use ProcMail for the business mail rules. Make sure to subscribe to the MailScanner list also,