[clamav-users] how to release 16K FPs from quarantine?

2012-08-08 Thread Len Conrad
postfix + clamsmtpd + clam Received a bad sig from MBL. stef the clamsmtpd guy says it was clam that quarantined, not his software. I installed amavisd to try to use amavisd-release, but it's not working. Is there any clam tool to release from quarantine? thanks Len

Re: [clamav-users] how to release 16K FPs from quarantine?

2012-08-08 Thread Len Conrad
-- Original Message -- From: Rick Macdougall ri...@ummm-beer.com Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date: Wed, 08 Aug 2012 09:20:18 -0400 On 08/08/2012 9:17 AM, Len Conrad wrote: postfix + clamsmtpd + clam Received a bad sig from

Re: [clamav-users] how to release 16K FPs from quarantine?

2012-08-08 Thread Len Conrad
-- Original Message -- From: Noel Jones njo...@megan.vbhcs.org Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date: Wed, 08 Aug 2012 09:13:20 -0500 On 8/8/2012 9:02 AM, Len Conrad wrote: -- Original Message

Re: [clamav-users] Many false positives: MBL_312128 / MBL_303159

2012-08-07 Thread Len Conrad
-- Original Message -- From: Laurent CARON lca...@unix-scripts.info Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date: Tue, 07 Aug 2012 20:38:40 +0200 Hi, I'm currently experiencing lots of FP. Those FP range from automatic apticron debian

[clamav-users] how to release an FP

2012-04-24 Thread Len Conrad
Running postfix with content-filter clamsmtpd as i/f to clamav. I've got a couple FPs that I need to release for delivery. -rw--- 1 root root 9780704 Apr 23 10:53 /var/virus/virus.xPLLUp -rw--- 1 root root 9780704 Apr 23 10:53 /var/virus/virus.wkoiwc Can't find any tool to do it.

Re: [clamav-users] What happened to 12663 ?

2011-02-12 Thread Len Conrad
http://thewalter.net/stef/software/clamsmtp/postfix.html It looks like a ClamAV failure will cause mail to stop. Can anyone point me to a better solution? the direct cause is the postfix content-filter or policy not accepting mail, not ClamAV or clamdsmtp. A critical process like the clam

Re: [Clamav-users] exceptions where?

2009-08-15 Thread Len Conrad
How can I put Phishing.Heuristics.Email.SpoofedDomain ... in local.ign, if I can't find it in the files unpacked by sigtool? thanks Len ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[Clamav-users] exceptions where?

2009-08-14 Thread Len Conrad
All my users' headline alerts from NYTIMES.com got blocked for: status=VIRUS:Phishing.Heuristics.Email.SpoofedDomain ... this filter also catching true positives, so we'd like to keep it. In the man pages for clamd and clamsmtpd, I can't find any doc on whitelisting, although clamsmtpd

Re: [Clamav-users] exceptions where?

2009-08-14 Thread Len Conrad
-- Original Message -- From: Len Conrad lcon...@go2france.com Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date: Fri, 14 Aug 2009 15:53:44 +0200 All my users' headline alerts from NYTIMES.com got blocked for: status

[Clamav-users] Virus (W32.Elkern.C) blocked by Barracuda, passed by clam

2009-08-13 Thread Len Conrad
We have a submission/mailbox server running clam that is submission point for our networks, and relays to a Barracuda as outbound filter. clamsmtpd/clam are running fine, passing most as clean, naturally, while catching a few viruses. However, for two days, the Barracuda has been blocking

Re: [Clamav-users] Virus (W32.Elkern.C) blocked by Barracuda, passed by clam

2009-08-13 Thread Len Conrad
From: Tomasz Kojm tk...@clamav.net Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date: Thu, 13 Aug 2009 17:25:40 +0200 On Thu, 13 Aug 2009 17:14:45 +0200 Len Conrad lcon...@go2france.com wrote: We have a submission/mailbox server running clam that is submission point for our

Re: [Clamav-users] Virus (W32.Elkern.C) blocked by Barracuda, passed by clam

2009-08-13 Thread Len Conrad
From: Tomasz Kojm tk...@clamav.net Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date: Thu, 13 Aug 2009 18:37:16 +0200 On Thu, 13 Aug 2009 18:14:14 +0200 Len Conrad lcon...@go2france.com wrote: I don't think there is any problem with the postfix/clamsmtpd/clam handoff. The clam

Re: [Clamav-users] Virus (W32.Elkern.C) blocked by Barracuda, passed by clam

2009-08-13 Thread Len Conrad
-- Original Message -- From: Len Conrad lcon...@go2france.com Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date: Thu, 13 Aug 2009 19:43:32 +0200 From: Tomasz Kojm tk...@clamav.net Reply-To: ClamAV users ML clamav-users@lists.clamav.net Date

[Clamav-users] How-to for postfix + clamav without amavisd/SA

2009-08-10 Thread Len Conrad
We need to check for viruses at the point of submission rather than only at the outbound gateway. Is there a how-to around? thanks Len ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] How-to for postfix + clamav without amavisd/SA

2009-08-10 Thread Len Conrad
Len Conrad wrote: We need to check for viruses at the point of submission rather than only at the outbound gateway. Is there a how-to around? thanks Len Hi Len, Use clamav-milter (or any other milter/proxy with clam support, such as clamsmtp) I'm going with clamsmtp. Its rpm

[Clamav-users] the common ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log).

2008-07-24 Thread Len Conrad
freshclam.conf has: UpdateLogFile /var/log/clamav/freshclam.log the file: -rw-r- 1 clamav clamav 0 Jul 24 14:25 /var/log/clamav/freshclam.log the directory: /var/log/clamav ... is owned by clamav:clamav clamd.conf has: User clamav there is no freshclam process already in memory

[Clamav-users] nyt: Letter to the Secretary

2006-03-23 Thread Len Conrad
March 24, 2006 Op-Ed Columnist Letter to the Secretary By http://topics.nytimes.com/top/opinion/editorialsandoped/oped/columnists/paulkrugman/index.html?inline=nyt-perPAUL KRUGMAN Dear John Snow, secretary of the Treasury: I'm glad that you've started talking about income inequality,

[Clamav-users] oops, ClamAV passing virus that Norton desktop detects?

2006-01-21 Thread Len Conrad
We've been running f-prot on Imail/Windows. No problems, no users reporting email viruses. But the content-scanning on Imail has been really bogging the box down. So we set up an amavis/spamassassin/ClamAV content-scanning box in front of the Imail box, with the intention of turning off