Re: [clamav-users] Basic newbie question

2012-05-04 Thread stagni
On Fri, May 04, 2012 at 07:39:39AM -0700, Mr. Eddie Jackson wrote: > Is anything happening to the viruses that clamav (and amavis) is finding? If you set Amavis to quarantine them, look into Amavis' home (in Debian it is "/var/lib/amavis"). gc :-) ___

Re: [clamav-users] Basic newbie question

2012-05-04 Thread Pierre Dehaen
Hi Eddie, I'm not running debian squeeze but, from your question, I guess you are using clamav for scanning emails with the help of amavis. So it is not a question of scanning files and directories on the disk. In this case (emails), it is probably in the amavis configuration that you will f

Re: [clamav-users] Basic newbie question

2012-05-04 Thread Bowie Bailey
On 5/4/2012 10:39 AM, Mr. Eddie Jackson wrote: > Please answer this simple basic newbie webmaster question. I have spent hous > and read the entire clamav manual and it is not answered. > > I simply need to know if clamav deletes or quarantines viruses it finds in a > default debian squeeze apach

[clamav-users] Basic newbie question

2012-05-04 Thread Mr. Eddie Jackson
Please answer this simple basic newbie webmaster question. I have spent hous and read the entire clamav manual and it is not answered. I simply need to know if clamav deletes or quarantines viruses it finds in a default debian squeeze apache2 general web/mail/db etc server? I am seeing lots of

[clamav-users] Solved: False positive submission page down (for a few days now)?

2012-05-04 Thread Ralf Hildebrandt
> Could you PLEASE check the server's logs? I solved it. Your server doesn't like the "X-Forwarded-For: unknown" header! See http://www.squid-cache.org/Doc/config/forwarded_for/ On our squids it was set to: forwarded_for off which results in "X-Forwarded-For: unknown" and a subsequent error pa

Re: [clamav-users] False positive submission page down (for a few days now)?

2012-05-04 Thread Ralf Hildebrandt
* Luca Gibelli : > Most likely your proxy is issuing a HTTP/1.0 request upstream? Could you PLEASE check the server's logs? We're definitely sending HTTP/1.1 requests with all the headers, see below: output from tcpdump: GET /sendfp.cgi HTTP/1.1 Host: cgi.clamav.net Pragma: no-cache User-Agent

Re: [clamav-users] False positive submission page down

2012-05-04 Thread Ralf Hildebrandt
* G.W. Haywood : > Mt. Hildebrandt, you are being unreasonable. > > The problem has been clearly explained to you, and it is your problem > to solve. You must not expect people who are managing a Web resource > which may have many thousands of clients to solve problems for every > individual cli

Re: [clamav-users] False positive submission page down

2012-05-04 Thread G.W. Haywood
Hi there, On Fri, 4 May 2012, Ralf Hildebrandt wrote: * Luca Gibelli : $ telnet proxy.charite.de 8080 Trying 141.42.1.205... Connected to proxy.charite.de. Escape character is '^]'. GET http://cgi.clamav.net/sendfp.cgi HTTP/1.0 we use name based virtual hosting, you must switch to HTTP/1.1