virus scanning
> single packets worth the cost of production. Not weather it can be done
> or rude and inconsiderate comments from individuals that obviously missed
> the intent of the question.
Ultimately that's a business decision, not a technical one.
--
t's mail.mrball.net (POC todd mrball.net).
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
_
Virus Naming" on the ClamAV site. You may
also want to look at the clamav-virusdb list:
http://lurker.clamav.net/list/clamav-virusdb.html
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
gout
I'd say that clamav can't write to the file you've specified. Try
specifying a FULL path to the file.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
hange dir to /usr/local/share/clamav
Correct the file permissions such that the user freshclam runs as has access.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster.
4) is needed by clamav-0.88-1.1.fc2.rf
>
> Anyone has idea how to solve this prob or if I am doing wrong then how to
> upgrade the clamav.
Either:
a) Install the updated version of the glibc RPM, as the error tells you
or
b) Install from source
--
Please keep list traffic
id you restart any running freshclam and clamd process?
> NB: i tried to upgrade to the cvs version
> and it happened on my two FreeBSD boxes 5.4 and 6.0
Are you installing via the ports or are you installing from the source?
--
Please keep list traffic on the lis
related files by doing:
find / -name "*clam*" -print
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
__
ion tells you - clamscan is a standalone scanner.
Clamdscan uses the daemon to do the actual scanning.
The main benefit is startup time - it's a lot faster to use clamdscan
than clamscan if you're doing lots of individual scans (such as on a
mail gateway).
--
Please keep lis
for help
There are plenty of apps I have to deal with that I wish had an equivalent
of postconf.
cheers
rob
___
http://lurker.clamav.net/list/clamav-users.html
libclamav.
# Default: disabled
#Debug
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
P--->
> Can anyone point me in the right direction for information regarding this?
Take a look at the config files for clamd and freshclam.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
On 04/12/05, PBR <[EMAIL PROTECTED]> wrote:
> On Sun, 4 Dec 2005 Rob MacGregor <[EMAIL PROTECTED]> wrote:
>
> > The last question is - version of ClamAV?
>
> Engine version: 0.87.1
My only guess is that it's some problem related to your
trashscan/procmail setu
; --unarj=/usr/bin/unarj --zoo=/usr/bin/zoo --lha=/usr/bin/lha \
> --jar=/usr/bin/unzip --tar=/bin/tar --tgz=/bin/tar"
The last question is - version of ClamAV?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters shoul
blem is most likely with trashscan)
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
with your mail server?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lu
ing, then start them again?
It sounds like either:
A) You forgot to stop and start the daemons
B) You've got an older version still in the path
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
n someone help me?thanks.
Exactly what is your problem? It looks like you've got lots of active
scanning going on, so the CPU is going to be busy.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
tart to search?
http://www.clamav.net/cvdinfo.html#existing
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
__
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
also
> sock files.
How about posting the actual errors!
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
_
; *** Error code 1
At a rough guess, you're trying to compile and install the milter and
don't have sendmail installed (probably postfix, or something else
that ships with a binary called "sendmail", but isn't).
--
Please keep list traffic on the list.
Rob
If you drop a copy to this address I'll (when I get a chance) run it
through my clamav setup and see what happens.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
does
an page and the clamd configuration file.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
__
On 21/08/05, Joanna Roman <[EMAIL PROTECTED]> wrote:
> Clamav.net down again ?
No
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Fried
ll hasn't hit 1.0 yet though.
I suspect you've a problem with the your install however. ClamAV
0.86.2 on my FreeBSD box identifies the virus you're still providing
via the URL in your intial post. ClamWin 0.86.2 also identifies it.
--
Please keep list traffic o
lease keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
o solve the problem, take a look at the list archive. I
know I've recently (last few days) responded to somebody else in a
similar position.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doe
ds to done to use
> latest clamav-0.86.1 version
Stop the old version and remove it from your system, then re-install
(if necessary) and start the new version.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process
was because I hadn't installed the version of
libmilter.a from sendmail-8.13.3.
Cheers,
Rob
--
E-Mail: [EMAIL PROTECTED] PHONE: +44 24 7652 3037
Rob McMahon, IT Services, Warwick University, Coventry, CV4 7AL, England
___
http
spot the problem, post your sendmail.mc (do not post your
sendmail.cf file!).
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Niet
real question is - upgraded WHAT to 2.3.1-rc3?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
the same type of
question in the same boat as yourself, that did not voice this concern.
It's a valid question from a sysadmin point of view. We have a
semi-automated install process as well, but when done over 100 servers,
with testing on each, it does take a li
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
sk my question.
>
> Is there any centralized spam scanner available for Linux
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a mo
desktops. But it's the only
> Windows server app I still have - if I could find a centralized system
> that could run on Linux, I could dump Windows completely.
Take a look at SpamAssassin.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monst
't the best measure of true load on a system.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
__
s
filter programs). All you have to do is work out how.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
27;d advise posting the error...
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurker.clamav.net/list/clamav-users.html
ing it as has the correct permissions (ie owner with
read/write) for the log directory and files AND the database directory
and files.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process
ferent places depending on whether it's called from clamd or from the
> cron job.
And that suggests you've got multiple installations of clamav on your
system, which is quite probably the cause of your problems.
--
Please keep list traffic on the list.
Rob MacGregor
On Apr 12, 2005 1:16 PM, torrent man <[EMAIL PROTECTED]> wrote:
>
> for proxy I will be using socks proxy or squid
Well, if you trawl the archive, or goodness forbid, check the clamav
pages, you'll find details on squid plugins.
--
Please keep list traffic
t could simply be that at the time you scanned for it originally the
signature wasn't out.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster.
t to catch spam, use a
product such as spamassassin.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
pamassassin.
Efficiency - it's quicker to pass the mail to a single milter and let
it handle it than to use multiple milters to achieve the same result
(depending, of course, on your choice of milters).
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fig
tp://www.rpmfind.net/
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lurk
av as the first line of defence. It's rare for
anything to slip through, but it happens (well, twice so far - and in
each case by the time I reviewed the situation a signature had already
been released).
--
Please keep list traffic on the list.
Rob MacGregor
Whoever figh
Dunno. If you want to send me a copy direct I'll run it through my
system and see what comes out. At least that way you'll know for
certain if it's something linked to the document.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monster
o a DOC, coming out at 480 KB. That went through in ~3 seconds.
I suspect the possibility of a config problem on your box?
Worth checking - which milter are you using and are you using the
clamav from the ports?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever
l, there are a number documented on the ClamAV site:
http://www.clamav.net/3rdparty.html#proxy
But, of course, you've already looked there :-)
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
e a ~550 KB PDF
file scanned (through MIMEDefang) by both ClamAV and F-Prot in about 2
seconds. I haven't seen anything take longer than 10 seconds, even
with SpamAssassin.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters shou
n does
> not find any attachments and viruses.
> Virus attachments is identified with another virus-scanner like eTrust
> Antivirus.
Simple answer - use one of the many milter options available to scan
the mail within sendmail.
--
Please keep list traffic on the list.
Rob
(or the alternative command of your
choice) to locate where clamd really is. Update the script
accordingly.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become
Julian Mehnle wrote:
Rob Kudyba wrote:
[...] MPP Free Edition is tons faster than many of the perl interfaces
to SpamAssassin or ClamAV and will greatly reduce the load on your
servers if you are using perl tools for this purpose and you have a
heavily loaded email server. [...]
"
Message Partners has launched a free edition of our Message Processing
Platform (MPP) for those who want to use SpamAssassin and ClamAV with
Sendmail, QMail, Postfix, CGPro or SurgeMail email servers. MPP Free
Edition includes our comprehensive Webmin module, most of the features
of MPP-LE and
onf to tell logrotate to manage the
clam-update.log file?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
etc) that came with your
OS to handle this.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
"which freshclam" to
identify the prefix clamav was installed with) and reinstall the new
one.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
does
so suggest reading the list archive
where you'll get more information.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
_
ocus.com/archive/1/392097/2005-02-28/2005-03-06/0.
The CVE referenced in it
(http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0133), clearly
states 0.80 and earlier as being the problem.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should
hives and done a search on
> clamdwatch?
ok, forgive my lack of searching. Seems the EICAR pattern was updated in
the DB, and we need to upgrade clamdwatch as well. At least this little
incident forced us to upgrade clamav to the latest version, install GMP 4,
and update c
y of virus databases that freshclam retrieves. And you're 3
> versions behind the recommended version.
Although I appreciate the warning about being outdated, everything was
working fine until last night, which tells me something changed in the
database, as no scripts changed on the serve
ld version, did a database update remove the
test pattern or change the way clamdwatch.pl should be checking things?
Rob
___
http://lurker.clamav.net/list/clamav-users.html
failed packages (*:skipped / !:failed)
> ! security/clamav (clamav-0.82_1) (backup error)
> ---> Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed
What version of FreeBSD are you running, what securelevel and what
flags have you mounted your filesystems with?
--
, it must help the clamav server.
However, with freshclam's DNS support, you're not gaining much as
it'll only connect to the server when either the DNS record is
horribly out of date, or it indicates a new update is available.
--
Please keep list traffic on the
On Mon, 14 Feb 2005 22:42:37 +1100, Bill Maidment <[EMAIL PROTECTED]> wrote:
>
> Read my follow-up post about an hour ago.
Well, looks like it got lost along the way (maybe by some spam filter)
as I received it just fine.
--
Please keep list traffic on the list.
R
eeBSD 5.3, even with the "-p" option I don't see that.
Might be worth checking your umask value - I'm guessing you've got "".
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it t
On Mon, 7 Feb 2005 13:50:06 -, John Sullivan <[EMAIL PROTECTED]> wrote:
>
> uname -r = 5.2-CURRENT
5.2 was a developer preview - try upgrading to 5.3 (the release
version) and see if your problem goes away (I suspect it will).
--
Please keep list traffic on t
over this comes up regularly,
and the answer is always the same.
And no, I'm not supplying the answer :-)
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster
using or how you're linking the 2.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lists
they run unix?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
(and I've no idea how it could, but then I'm
not a programmer).
Hopefully this will be addressed, without the need for people to
update to 5.3 :)
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in th
On Tue, 25 Jan 2005 15:40:41 +0300, jijo <[EMAIL PROTECTED]> wrote:
> hello
> how to install the public key for clamav 0.71?
Don't use 0.71, use 0.80 (or the shortly to be released 0.81).
--
Please keep list traffic on the list.
Rob MacGregor
Whoeve
you trawl
the archive you'll find it.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
_
it's been answered a few times already.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
_
rsion and correct any
scripts that start freshclam/clamav.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
imilarly, what does "find / -name freshclam" show?
Oh, and please don't separate your additions from the previous post by
using "-- " - that's a signature separator, not a reply separator.
--
Please keep list traffic on the list.
Rob MacGregor
ot;freshclam --version" say?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
e then the last entry
Well, I'm did the same without problems.
However, you didn't say what version of FreeBSD you're running. I've
got 5.3-STABLE.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the
log (clamav-0.80_2) it works just
fine, at least on 5.3.
What's in your freshclam.conf?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster.
lying around.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
7;t be picked up by the MTAs.
In that case, I'd probably suggest using ClamAV on the mailhubs
(possibly along with Sophie) and use Sophos to sweep the files. That
way you're using each in a way it's designed for :)
--
Please keep list traffic on the list.
Rob M
t's designed to be used as, for
example, with your MTA to detect the viruses before they are
delivered.
I don't know how good it's MIME capabilities are.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in
/local. Whatever
you're running is *not* the port.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
_
get the
result you're expecting, especially with multipart or other MIME
emails.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a mon
On Thu, 6 Jan 2005 11:13:22 -0200, Ivan Carlos Ricci
<[EMAIL PROTECTED]> wrote:
> Thanks Nigel
>
> I forgot this, I´m using a FreeBSD 4.10
Then install it from the ports, to make your life even easier.
--
Please keep list traffic on the list.
Rob MacGregor
On Thu, 6 Jan 2005 03:31:03 +0100, Gwyll Gwyllin <[EMAIL PROTECTED]> wrote:
> What did i missed ?
Version of ClamAV?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't be
ot;egrep -i clmilter /etc/mail/sendmail.cf"?
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
d to add it to sendmail.)
> INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clamav/clmilter.sock,F=,T=S:4m;R:4m')
> define(' cinfINPUT_MAIL_FILTERS', 'clmilter')
Having updated your .mc file did you rebuild the .cf file, install it
and restart sendmail?
--
Please
672gf), so I suspect that your versions are known
by ClamAV.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietzsche
___
nning? Are you using Freshclam to
update your signatures? How are you integrating ClamAV with your mail
server?
(Translation - you've given pretty much zero useful information in your mail)
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monst
ead. It's either
that or open up access to /var/run itself, which isn't good.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monster. Friedrich Nietz
RROR: Can't connect to clamd.
> "
>
> I am newbe to all this.
>
> Please guide How to get rid of this error and start
> clamav.
>
> Thanks for support.
>
>
> __
> Do you Yahoo!?
> Yahoo! Mail - 250MB free storage. Do
rvice clamav and got error :
> "clamd: unrecognized service"
Because that's a RedHat thing - you'll need to create/add the
startup/shutdown scripts.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to
stall"
Reading documentation always helps, as does knowing something about
the platform you're running on...
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn&
owever, it would be much more sensible to move the software out of
root's home directory, and into somewhere like /usr/local/clamav-test.
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in th
S. graft is great for managing clamav installations:
http://www.gormand.com.au/peters/tools/graft/graft.html)
cheers
rob
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
We can test
new versions in place non-intrusively and switch easily between 'active'
versions.
http://www.gormand.com.au/peters/tools/graft/graft.html
cheers
rob
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
-milter on my system.
If you check the archive you'll discover a thread on this (from a week
or 2 ago I think).
--
Please keep list traffic on the list.
Rob MacGregor
Whoever fights monsters should see to it that in the process he
doesn't become a monst
201 - 300 of 382 matches
Mail list logo
