[Clamav-users] notification

2003-10-29 Thread Pat Masterson
clamav-milter seems to send out a little notification to postmaster, and the original sender, when it discovers a virused email. But I have lots of spoofed Sender addresses. I dont want to send notifications to them. How can I turn off that feature? -pat

Re: [Clamav-users] notification

2003-10-29 Thread Marc Balmer
Am 29.10.2003 um 21:57 schrieb Pat Masterson: clamav-milter seems to send out a little notification to postmaster, and the original sender, when it discovers a virused email. But I have lots of spoofed Sender addresses. I dont want to send notifications to them. How can I turn off that feature? -

Re: [Clamav-users] notification

2003-10-31 Thread Nigel Horne
> clamav-milter seems to send out a little notification to postmaster, > and the original sender, when it discovers a virused email. But I have > lots of spoofed Sender addresses. I dont want to send > notifications to them. How can I turn off that feature? Use the --quiet option of clamav-milter.

Re: [Clamav-users] notification

2003-10-31 Thread Tobias Rice
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Use the --quiet option of clamav-milter. Where? When I compile? In my init script? Thanks. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQE/omao8SyNUqEG5J0RAv

Re: [Clamav-users] notification

2003-10-31 Thread Nigel
> | Use the --quiet option of clamav-milter. > > Where? When I compile? In my init script? In your init script, it's a run time option... > Thanks. -Nigel --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net h

Re: [Clamav-users] notification

2003-11-06 Thread Nigel Horne
On Friday 31 October 2003 8:01 pm, Nigel wrote: > > | Use the --quiet option of clamav-milter. > > > > Where? When I compile? In my init script? > > In your init script, it's a run time option... I should have added that on Linux it's best to add it to /etc/sysconfig/clamav-milter -Nigel -

[Clamav-users] Notification E-mail

2004-09-20 Thread Jonathan Pitcher
We have Clam Av installed and running. It is blocking virus e-mails but is not generating any notification. Is it possible to send a message onto the user that they had an e-mail blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to them? Thanks in advance. --

[Clamav-users] Notification template files

2005-10-05 Thread Stephen Cheboi
Hi , where do i find the syntax for the notification template files e.g. notify_sender.txt, notify_virus_sender.txt?, I intend to customize the various notification messages to suitable messages using the read_I10n_templates. Thank you, Stephen _

AW: [Clamav-users] Notification E-mail

2004-09-20 Thread Steffen Heil
Hi > We have Clam Av installed and running. It is blocking virus e-mails but is not generating any notification. Right. clamav is just a virus scanner. It's sole purpose is to detect virii. So, how are you passing your mails to clamav? That component or your mail server could do that. However,

Re: [Clamav-users] Notification E-mail

2004-09-20 Thread Peter Bonivart
Jonathan Pitcher wrote: Is it possible to send a message onto the user that they had an e-mail blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to them? http://www.mailscanner.info -- /Peter Bonivart --Unix lovers do it in the Sun

RE: [Clamav-users] Notification E-mail

2004-09-20 Thread Matthew.van.Eerde
Steffen Heil wrote: > Hi > >> We have Clam Av installed and running. It is blocking virus e-mails but >> is not generating any notification. > > ... PLEASE only send a notification to the > intended user, NOT to the author. This would cause lot of > collateral damage. With one caveat. It is per

Re: [Clamav-users] Notification E-mail

2004-09-20 Thread Christopher X. Candreva
On Mon, 20 Sep 2004, Jonathan Pitcher wrote: > Is it possible to send a message onto the user that they had an e-mail > blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to > them? Yes. It is also a bad idea. Since most viruses forge the From: address, you will not be p

Re: [Clamav-users] Notification E-mail

2004-09-20 Thread [EMAIL PROTECTED]
Christopher X. Candreva said: > On Mon, 20 Sep 2004, Jonathan Pitcher wrote: > >> Is it possible to send a message onto the user that they had an e-mail >> blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to >> them? > > Yes. > > It is also a bad idea. > > Since most viruses

RE: [Clamav-users] Notification E-mail

2004-09-20 Thread Mitch \(WebCob\)
> With one caveat. > It is perfectly acceptable to place an explanatory message in an SMTP > REJECT message. > > Something like > > EHLO (hi) > MAIL FROM (ok) > RCPT TO (ok) > DATA (can't accept for delivery, contains the EICAR virus!) > > If the mail is being sent by a virus, the virus will usuall

Re: [Clamav-users] Notification E-mail

2004-09-21 Thread Niek
On 9/20/2004 11:45 PM +0200, Jonathan Pitcher wrote: We have Clam Av installed and running. It is blocking virus e-mails but is not generating any notification. Is it possible to send a message onto the user that they had an e-mail blocked? Or to an admin stating that [EMAIL PROTECTED] had a viru

Re: [Clamav-users] Notification E-mail

2004-09-21 Thread Nigel Horne
On Monday 20 Sep 2004 22:45, Jonathan Pitcher wrote: > We have Clam Av installed and running. It is blocking virus e-mails > but is not generating any notification. > > Is it possible to send a message onto the user that they had an e-mail > blocked? Or to an admin stating that [EMAIL PROTECTED]

RE: [Clamav-users] Notification E-mail

2004-09-21 Thread Matthew.van.Eerde
Nigel Horne wrote: > On Monday 20 Sep 2004 22:45, Jonathan Pitcher wrote: >> Is it possible to send a message onto the user that they had an >> e-mail blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus >> sent to them? > > Yes it is, though the first option is not advisable. You c

Re: [Clamav-users] Notification E-mail

2004-09-21 Thread Brian Morrison
On Tue, 21 Sep 2004 08:44:45 -0700 in [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > If there is no way to do this currently, can I submit this as a > feature request for clamav-milter? But as you have already been told, it is up to the MTA to do this. When Exim passes incoming mail through cl

Re: [Clamav-users] Notification E-mail

2004-09-21 Thread Nigel Horne
On Tuesday 21 Sep 2004 16:44, [EMAIL PROTECTED] wrote: > Nigel Horne wrote: > > On Monday 20 Sep 2004 22:45, Jonathan Pitcher wrote: > >> Is it possible to send a message onto the user that they had an > >> e-mail blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus > >> sent to them

Re: [Clamav-users] Notification E-mail

2004-09-21 Thread Jan Pieter Cornet
On Mon, Sep 20, 2004 at 04:26:40PM -0700, [EMAIL PROTECTED] wrote: > It is perfectly acceptable to place an explanatory message in an SMTP > REJECT message. Acceptable, maybe, but I believe it's better to simply discard all viruses. Why? Since all you achieve with rejects is indirectly causing a

Re: [Clamav-users] Notification E-mail

2004-09-21 Thread Damian Menscher
On Wed, 22 Sep 2004, Jan Pieter Cornet wrote: On Mon, Sep 20, 2004 at 04:26:40PM -0700, [EMAIL PROTECTED] wrote: It is perfectly acceptable to place an explanatory message in an SMTP REJECT message. Acceptable, maybe, but I believe it's better to simply discard all viruses. And most sane people bel

Re: [Clamav-users] Notification E-mail

2004-09-21 Thread Ryan Moore
Brian Morrison wrote: You need to do something appropriate to sendmail.cf or the milter configuration (which I know nothing about I'm afraid) to do this. This is not something that can be configured in clamav AFAICS. He was referring to the clamav-milter, which *does* hook clamav into sendmail, an

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Jeremy Kitchen
On Tuesday 21 September 2004 06:39 pm, Damian Menscher wrote: > > Why? Since all you achieve with rejects is indirectly causing a lot of > > "virus bounces" to appear at innocent bystanders. > > No, you also guard against false positives. exactly. If the remote sender is sending a legitimate file

AW: [Clamav-users] Notification E-mail

2004-09-22 Thread Steffen Heil
Hi > Why? Since all you achieve with rejects is indirectly causing a lot of "virus bounces" to appear at innocent bystanders. NO. Virii are usually send directly from the virus and the virus will not send bounces... :D However, if a virus can send through an SMTP server, that server needs to be b

RE: [Clamav-users] Notification E-mail

2004-09-22 Thread Randal, Phil
Steffen wrote: > Hi > >> Why? Since all you achieve with rejects is indirectly > causing a lot of > "virus bounces" to appear at innocent bystanders. > > NO. > Virii are usually send directly from the virus and the virus > will not send bounces... :D However, if a virus can send > through an SMTP

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Brian Morrison
On Tue, 21 Sep 2004 15:21:22 -0400 in [EMAIL PROTECTED] Ryan Moore <[EMAIL PROTECTED]> wrote: > Brian Morrison wrote: > > You need to do something appropriate to sendmail.cf or the milter > > configuration (which I know nothing about I'm afraid) to do this. > > > > This is not something that can

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Jeremy Kitchen
On Wednesday 22 September 2004 04:10 am, Randal, Phil wrote: > > > Why? Since all you achieve with rejects is indirectly > > > causing a lot of > > > "virus bounces" to appear at innocent bystanders. > > > > NO. > > Virii are usually send directly from the virus and the virus > > will not send boun

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Jan Pieter Cornet
On Tue, Sep 21, 2004 at 06:39:25PM -0500, Damian Menscher wrote: > On Wed, 22 Sep 2004, Jan Pieter Cornet wrote: > >On Mon, Sep 20, 2004 at 04:26:40PM -0700, [EMAIL PROTECTED] > >wrote: > >>It is perfectly acceptable to place an explanatory message in an SMTP > >>REJECT message. > > > >Acceptable,

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Damian Menscher
On Wed, 22 Sep 2004, Jan Pieter Cornet wrote: On Tue, Sep 21, 2004 at 06:39:25PM -0500, Damian Menscher wrote: As a riposte: I'm not alone in this, far from it, actually. A similar request was recently issued by virusalert.nl, a dutch organisation on virus prevention. See http://www.virusalert.nl/?

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Kelson
Simple solution to the question of whether to send a notice: You know what virus was detected. You know whether it's a mass-mailer or something else. (starts with Worm., ends with @mm, a few specific others) Based on that, you can decide whether to reject it or discard it. -- Kelson Vibber Speed

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Matt
Damian Menscher wrote: > Maybe I'm missing something, but they're not talking about not > rejecting. They're talking about not bouncing (sending out non-delivery > notifications in response to EVERY virus). There's a huge difference. I > think you'd be hard-pressed to find a legitimate company s

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread B. van Ouwerkerk
As a riposte: I'm not alone in this, far from it, actually. A similar request was recently issued by virusalert.nl, a dutch organisation on virus prevention. See http://www.virusalert.nl/?show=nieuws&id=559 I attempted to use the Fish to translate, and looked at their little picture of the situat

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Damian Menscher
On Wed, 22 Sep 2004, Kelson wrote: Simple solution to the question of whether to send a notice: You know what virus was detected. You know whether it's a mass-mailer or something else. (starts with Worm., ends with @mm, a few specific others) Based on that, you can decide whether to reject it or

Re: [Clamav-users] Notification E-mail

2004-09-22 Thread Damian Menscher
On Wed, 22 Sep 2004, Matt wrote: The easiest way to distinguish this is if you are scanning the mail AFTER you have accepted delivery of the email, then discard, do not bounce. However, if you are filtering before accepting the email, then reject. Agreed. If you're filtering your mail after it was

Re: AW: [Clamav-users] Notification E-mail

2004-09-20 Thread Erwan David
Le Mon 20/09/2004, Steffen Heil disait > However, if you do such things, PLEASE only send a notification to the > intended user, NOT to the author. This would cause lot of collateral damage. And ONLY if the intended recipient is a local one... -- Erwan David

[Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Cliff Hayes
Hello, I am a system administrator who manages many servers and need a way to programatically ping clamd on a server and get a response which I can interpret to mean clamd is ok or the engine needs to be updated.  Unfortunately, I often get overwhelmed and don't have time to read all the logs on a

[Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Greg McCarthy
I found a problem on one of our clamav servers - freshclam kept timing out when updating (My fault - a firewall rule problem) For some reason this caused the clamav milter to die which is not a huge problem as sendmail continues to deliver mail. The error I got was: Mar 28 15:15:45 pdcsmtp01 send

[Clamav-users] Notification E-mail: clamav + amavisd-new

2004-10-24 Thread Senandung Mendonan
Dear all, I'm currently running clamav + amavisd-new for some time, and having read through the arguments on notification here:- http://lists.clamav.net/lurker/thread/20040922.180416.24842818.en.html I decided to enforce this notification policy in amavisd-new (slight modification from amavisd-n

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Dennis Peterson
On 5/13/10 7:54 AM, Cliff Hayes wrote: Hello, I am a system administrator who manages many servers and need a way to programatically ping clamd on a server and get a response which I can interpret to mean clamd is ok or the engine needs to be updated. Unfortunately, I often get overwhelmed and d

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Eric Rostetter
Quoting Cliff Hayes : I am a system administrator who manages many servers and need a way to programatically ping clamd on a server and get a response which I can interpret to mean clamd is ok or the engine needs to be updated.  If you're willing to do the reverse, you can have the servers not

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Cliff Hayes
Subject: Re: [Clamav-users] notification when clamd engine outdated Quoting Cliff Hayes : > I am a system administrator who manages many servers and need a way to > programatically ping clamd on a server and get a response which I can > interpret to mean clamd is ok or the engine needs to b

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Nathan Gibbs
* Cliff Hayes wrote: > Hello, > > I am a system administrator who manages many servers and need a way to > programatically ping clamd on a server and get a response which I can > interpret to mean clamd is ok or the engine needs to be updated. > Howdy, I'm the developer of clamd.monitor a moni

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Nathan Gibbs
* Nathan Gibbs wrote: > > Blah Blah Blah > Sorry all, Didn't intend to do that on list. :-) -- Sincerely, Nathan Gibbs Systems Administrator Christ Media http://www.cmpublishers.com signature.asc Description: OpenPGP digital signature ___ Help

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Scott Mohnkern
Are you on Windows or linux machines? Scott Mohnkern On Thu, May 13, 2010 at 3:56 PM, Nathan Gibbs wrote: > * Cliff Hayes wrote: > > Hello, > > > > I am a system administrator who manages many servers and need a way to > > programatically ping clamd on a server and get a response which I can >

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Nathan Gibbs
* Scott Mohnkern wrote: > Are you on Windows or linux machines? > > That all depends on where I'm sitting Why? -- Sincerely, Nathan Gibbs Systems Administrator Christ Media http://www.cmpublishers.com ___ Help us build a comprehensive ClamAV guide

Re: [Clamav-users] notification when clamd engine outdated

2010-05-13 Thread Cliff Hayes
I was referencing Linux ... Specifically Fedora 11 -Original Message- From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net]on Behalf Of Nathan Gibbs Sent: Thursday, May 13, 2010 3:32 PM To: ClamAV users ML Subject: Re: [Clamav-users] notification when

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Mar 29, 2007 at 11:13:11AM +0200, Greg McCarthy wrote: > >Now to my question :) Does anyone have a script or know how I can >monitor the clamav milter so if it ever dies again I get an email >alert, or the script can even restart the milter.

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Clifford Hansen
Greg McCarthy wrote: I found a problem on one of our clamav servers - freshclam kept timing out when updating (My fault - a firewall rule problem) For some reason this caused the clamav milter to die which is not a huge problem as sendmail continues to deliver mail. The error I got was: Mar 28 1

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-30 Thread Greg McCarthy
Thanks - I'll give those programs a try out. It happened again last night - for some reason the freshclam could not connect to the update site and for some reason it looks like it never times out and keeps running. This somehow causes the clamav milter to die. I'll go through the logs and see if I

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-30 Thread Matthias Häker
Greg McCarthy schrieb: Thanks - I'll give those programs a try out. It happened again last night - for some reason the freshclam could not connect to the update site and for some reason it looks like it never times out and keeps running. This somehow causes the clamav milter to die. I'll go thr

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-30 Thread Bernd Kaskas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yes, I did. Am 30. Mrz 2007 um 10:10 schrieb Greg McCarthy: Thanks - I'll give those programs a try out. It happened again last night - for some reason the freshclam could not connect to the update site and for some reason it looks like it never ti

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-30 Thread Bernd Kaskas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ClamAV update process started at Thu Mar 29 21:21:52 2007 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES See the FAQ at http://www.clamav.net/support/faq for an explanation. main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builde