[Clamav-users] Clamav Update with Fedora Core

2005-09-20 Thread doei
I'm use clamav versi 0.80 with Fedora Core 2, I want to upgrade my clamav software, where i can found the documentations clamav upgrade with fedora core 2. I can't upgrade because i don't wanna take a risk my mail server. Anyone can help me where I found the documentations ??? Thanks before ...

Re: [Clamav-users] Re: Clamav-milter passes some zipped virus files

2005-09-20 Thread Cevher
René Berber yazmış: >Cevher wrote: > > >>Hi list, >> >>Some zip files containing virus files are passed by milter. For example >>there is a zip file that contains a file called data.src. >>Clamav recognize data.src as Worm.Lovgate.R. >> >>$ clamscan data.zip >>data.zip: Worm.Lovgate.R FOUND >> >

Re: [Clamav-users] non reject and clean

2005-09-20 Thread Nigel Horne
Kevin B wrote: Hello clamav-milter man page says with '-N' I can set the milter not to reject an infected email. What is the correct syntax to add the option and will it still clean the virii?? I'm not sure where to add the -N amongst the quotes below... INPUT_MAIL_FILTER(`clamav-milter', `S=l

[Clamav-users] non reject and clean

2005-09-20 Thread Kevin B
Hello clamav-milter man page says with '-N' I can set the milter not to reject an infected email. What is the correct syntax to add the option and will it still clean the virii?? I'm not sure where to add the -N amongst the quotes below... INPUT_MAIL_FILTER(`clamav-milter', `S=local:/var/run/cla

[Clamav-users] clamav oddity w.r.t Worm.Bagle.Gen-3?

2005-09-20 Thread Fernando Durango
Hello all, Just wondering if anyone else noticed something strange recently with Worm.Bagle.Gen-3 viruses. Using exim+exiscan-acl+clamav, we have been seeing several of these viruses sneak thru. Decided to test out 0.87 (upgrading from 0.86.2) on one of the servers where the virus has been coming

[Clamav-users] clamd rar >=2.9

2005-09-20 Thread Sergey Prokopenko
Hello, All! clamscan has options: --unrar[=FULLPATH] Scan .rar files. --unarj[=FULLPATH] Scan .arj files. --unzoo[=FULLPATH] Scan .zoo files. --lha[=FULLPATH] Scan .lzh files. Why clamd hasn`t it? And aspac

[Clamav-users] Re: MailFollowURLs

2005-09-20 Thread Sergey Prokopenko
Hello, Nigel! You wrote on 20 Sep 2005 12:28:12 +0100: >> Mark the subj [warning: a big files in URLs] such messages with >> unscanabele >> URLs (overlimited by max urls|maxsize )... ;-) NH> clamav-milter already adds a header when StreamMaxLength is NH> added. NH> Since the FOLLOWURLS i

Re: [Clamav-users] Re: MailFollowURLs

2005-09-20 Thread Nigel Horne
On Tue, 2005-09-20 at 12:17, Sergey Prokopenko wrote: > Hello, Nigel! > You wrote on 20 Sep 2005 11:57:02 +0100: > > NH> There is already a hard-coded limit of 5. It is hard-coded for > NH> the same reason that the file size is limited (no access to > NH> configuration data at that level). >

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Nigel Horne
On Tue, 2005-09-20 at 12:20, Cami wrote: > Nigel Horne wrote: > > On Tue, 2005-09-20 at 11:53, Cami wrote: > > > >> I was wondering what the implications are of mails that > >> included a large number of external links with gif|jpg etc. > >> What about limiting the amount of URLs that will be foll

[Clamav-users] Re: MailFollowURLs

2005-09-20 Thread Sergey Prokopenko
Hello, Nigel! You wrote on 20 Sep 2005 11:57:02 +0100: NH> There is already a hard-coded limit of 5. It is hard-coded for NH> the same reason that the file size is limited (no access to NH> configuration data at that level). ToDo Mark the subj [warning: a big files in URLs] such messages wi

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Cami
Nigel Horne wrote: On Tue, 2005-09-20 at 11:53, Cami wrote: I was wondering what the implications are of mails that included a large number of external links with gif|jpg etc. What about limiting the amount of URLs that will be followed per mail or would this be a waste of time? There is alre

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Jan Pieter Cornet
On Tue, Sep 20, 2005 at 12:53:22PM +0200, Cami wrote: > >>Is there any way to specify what URLs ClamAV will download > >>based on the extension? (IE, only download+scan zip|exe|pif > >>etc which are found in the url inside a mail) > > > >No. And there are no plans for that, since the file would be

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Nigel Horne
On Tue, 2005-09-20 at 11:53, Cami wrote: > Nigel Horne wrote: > > On Tue, 2005-09-20 at 11:42, Cami wrote: > > > >>Nigel Horne wrote: > >> > >>>The limit is fixed to 50K at the moment. It would be useful to be able > >>>to use the StreamMaxLength directive from clamd.conf, but values > >>>in that

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Cami
Nigel Horne wrote: On Tue, 2005-09-20 at 11:42, Cami wrote: Nigel Horne wrote: The limit is fixed to 50K at the moment. It would be useful to be able to use the StreamMaxLength directive from clamd.conf, but values in that file are not made available to that layer of the software by the highe

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Nigel Horne
On Tue, 2005-09-20 at 11:42, Cami wrote: > Nigel Horne wrote: > > On Tue, 2005-09-20 at 09:12, Sergey Prokopenko wrote: > > > >>Hello, All! > >># If an email contains URLs ClamAV can download and scan them. > >># WARNING: This option may open your system to a DoS attack. > >># Never use i

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Cami
Nigel Horne wrote: On Tue, 2005-09-20 at 09:12, Sergey Prokopenko wrote: Hello, All! # If an email contains URLs ClamAV can download and scan them. # WARNING: This option may open your system to a DoS attack. # Never use it on loaded servers. # Default: disabled #MailFollowURLs How to

Re[2]: [Clamav-users] error compiling clamav 0.87

2005-09-20 Thread haplopelma lividum
NH> Read .../clamav-milter/INSTALL which tells you what to do when you get NH> that message. thanks nigel, it's worked === haplopelma lividum (aka pauk) e-mail: [EMAIL PROTECTED] icq uin: 32764934 ___

Re: [Clamav-users] MailFollowURLs

2005-09-20 Thread Nigel Horne
On Tue, 2005-09-20 at 09:12, Sergey Prokopenko wrote: > Hello, All! > # If an email contains URLs ClamAV can download and scan them. > # WARNING: This option may open your system to a DoS attack. > # Never use it on loaded servers. > # Default: disabled > #MailFollowURLs > > How to set up

Re: [Clamav-users] error compiling clamav 0.87

2005-09-20 Thread Nigel Horne
From: "haplopelma lividum" <[EMAIL PROTECTED]> > > and try run make, i get following error: > > > > gcc -g -O2 -o .libs/clamav-milter cfgparser.o getopt.o memory.o misc.o > > clamav-milter.o ../libclamav/.libs/libclamav.so -lz -lbz2 -lgmp > > -lmilter -lsmutil -lnsl -lpthread -Wl,--rpath -

[Clamav-users] MailFollowURLs

2005-09-20 Thread Sergey Prokopenko
Hello, All! # If an email contains URLs ClamAV can download and scan them. # WARNING: This option may open your system to a DoS attack. # Never use it on loaded servers. # Default: disabled #MailFollowURLs How to set up a maximum file size that are downloaded by this directive? äÏ Ó×É

Re: [Clamav-users] error compiling clamav 0.87

2005-09-20 Thread KOL Admin
Let try to upgrade ur OS to RH9 or higher to fix this problem and security vulnerability. My MX servers (RH9/FC3) had been upgraded to 0.87, It work fine RH7.x is too old. I think upgade OS is not a good idea to solv. this problem Have someone had a good idea ? Regards Tawee Moonton KOL Net Co

[Clamav-users] error compiling clamav 0.87

2005-09-20 Thread haplopelma lividum
hi all. my system: rh 7.3, sendmail 8.13.4, clamav 0.87 after i apply next patch: --- clamav-milter.c.old 2005-09-16 23:44:39.0 +0200 +++ clamav-milter.c 2005-09-16 23:56:50.0 +0200 @@ -3439,9 +3439,9 @@ { fd_set rfds; struct timeval tv; + int ret;