[Clamav-users] wired sigtool

2004-03-09 Thread Andrei Bucur 



 have 
received the update daily: 172 from Denis De Messemacker<[EMAIL PROTECTED]>i 
can't find none of the viruses added in the last update 
!Example:=Submission: 1841Sender: 
Blake McNeillSubmitted virus name: Agobot.fiVirus name: 
Trojan.Gaobot.FIVirus name alias: Backdoor.Agobot.fi (kaspersky)Added: 
Yes=on server:# /usr/bin/freshclam 
--quiet -l /var/log/clam-update.log[EMAIL PROTECTED]:/var/log# 
sigtool --list-sigs | grep 
GaobotWorm.Gaobot.AWorm.Gaobot.BWorm.Gaobot.HWorm.Gaobot.AEWorm.Gaobot.AJWorm.Gaobot.AVWorm.Gaobot.AJ.2Worm.Gaobot.AQWorm.Gaobot.AGWorm.Gaobot.3Worm.Gaobot.3.BWorm.Gaobot.4Worm.Gaobot.4.uWorm.Gaobot.5Worm.Gaobot.CQWorm.Gaobot.3.66647what 
is wrong ?my server didn't update or sigtool doesn't work well 
?Andrei Bucur

[Clamav-users] sendmail does not use clamav ?!

2004-03-15 Thread Andrei Bucur 
i have:
clamav 0.70 + sendmail 8.12.11 ... both with milter
clamscan detects OK

clamav seems to work:
Proto RefCnt Flags   Type   State I-Node Path
unix  2  [ ACC ] STREAM LISTENING 20612
/var/clamd/clamd-milter.sock
unix  2  [ ACC ] STREAM LISTENING 20318  /var/run/clamd.sock

i add next lines in sendmail.mc:
INPUT_MAIL_FILTER(`clmilter',`S=local:/var/clamd/clamd-milter.sock,F=,
T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clmilter')

...generate sendmail.cf  restart sendmail
in log files no errors !

when i testing my clamav+sendmail ... NOT WORKING !
sendmail not use clamav or what ?

10x



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

[Clamav-users] reject=451 4.7.1 Please try again later

2004-03-19 Thread Andrei Bucur 
Hi,

when i receive bigger mails i got the folowing error:

reject=451 4.7.1 Please try again later

please help !
thank u


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] reject=451 4.7.1 Please try again later

2004-03-19 Thread Andrei Bucur 
no ... it's alive -- that's the BIG problem !
- Original Message - 
From: "Nigel Horne" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 19, 2004 3:44 PM
Subject: Re: [Clamav-users] reject=451 4.7.1 Please try again later


>
> > Mar 19 13:37:36 topaz clamav-milter[17382]: [ID 910239 mail.error] write
> > failure to clamd
>
> That reads to me that clamd has gone away
>
> -Nigel
>
> -- 
> Nigel Horne. Arranger, Composer, Typesetter.
> NJH Music, Barnsley, UK.  ICQ#20252325
> [EMAIL PROTECTED] http://www.bandsman.co.uk
>
>
>
> ---
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>
>



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] reject=451 4.7.1 Please try again later

2004-03-19 Thread Andrei Bucur 
yes that's it 

thank u Sergey
- Original Message - 
From: "Sergey" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 19, 2004 3:45 PM
Subject: Re: [Clamav-users] reject=451 4.7.1 Please try again later


> On Friday 19 March 2004 16:12, Andrei Bucur wrote:
> 
> > when i receive bigger mails i got the folowing error:
> > 
> > reject=451 4.7.1 Please try again later 
> > 
> > please help !
> 
> I write about it 25/02/2004 10:56. I not set purpose to check
> all mails and I use --dont-scan-on-error
> 
> -- 
> Regards,
> Sergey
> 
> 
> 
> ---
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
> 
> 


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] reject=451 4.7.1 Please try again later

2004-03-19 Thread Andrei Bucur 
Try to increase the MaxThreads and MaxConnectionQueueLength values.

i did:
MaxThreads 25
MaxConnectionQueueLength 30  

same error !

- Original Message - 
From: "Tomasz Kojm" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 19, 2004 4:46 PM
Subject: Re: [Clamav-users] reject=451 4.7.1 Please try again later




---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Milter reject something with no reason (new)

2004-03-25 Thread Andrei Bucur 
i had the same problem. Now i start the milter like this
/usr/sbin/clamav-milter --dont-scan-on-error
local:/var/run/clamav/clamd-milter.sock

BR
Adi. B
- Original Message - 
From: "Clamav" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, March 25, 2004 12:10 PM
Subject: [Clamav-users] Milter reject something with no reason (new)


> I have now an email with attachment which is rejected with this error
> (Milter: data, reject=451 4.7.1 Please try again later) - reproducable.
> Are the developers interested? Where to send it?
>
> Best regards
> Wolfgang
>
>
> ---
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id70&alloc_id638&opÌk
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>
>



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Re: Some viruses go through

2004-04-07 Thread Andrei Bucur 
Hi,

i have the same problem ... some viruses go through...
my NAV detect some mails with viruses who are detected by clam.
When NAV detect a virus i save it on my hdd and after that i run clamscan
he detect corectly the virus 
in the past because some e-mails was rejected "451 - try again later" i use
clamav-milter with --dont-scan-on-error --- maybe here is the problem.



- Original Message - 
From: "René Bellora" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, April 07, 2004 10:27 PM
Subject: Re: [Clamav-users] Re: Some viruses go through


> Tomasz Papszun wrote:
>
> >$ clamscan -m av-inet1.txt
> >
> >LibClamAV Warning: Multipart MIME message contains no boundary lines
> >av-inet1.txt: Worm.SomeFool.P FOUND
> >
> >$ clamscan -V
> >clamscan / ClamAV version devel-20040323
> >
> >So it _is_ detected.
> >
> >I'd bet: you've got old version or misconfigured system.
> >
> >
> >
> i had installed devel-20040320, it didn't detect it. I installed latest
> snapshot (20040407). Now it does detect it, but i'm having problems with
> a few emails that were correctly detected in the past... I'll send a
> couple of them to Nigel
>
>
> best regards,
> René
>
>
> ---
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id70&alloc_id638&opÌk
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Andrei Bucur 

- Original Message - 
From: "Jakub Jankowski" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 13, 2004 2:27 AM
Subject: Re: [Clamav-users] How to bypass milter scanning for selected
users?


> On 2004-04-12, Hokan wrote:
>
> >I am running clamav-milter with sendmail.
> >
> >My present configuration has sendmail rejecting emails
> >that contain a detected virus.
> >
> >How can I configure my system so mail to abuse@ or
> >postmaster@ are not rejected?
>
> clamav-milter.c, around line 750
>
> /*
>  * Whitelist of source e-mail addresses that we do NOT scan
>  * TODO: read in from a file
>  */
> static  const   char*ignoredEmailAddresses[] = {
> /*"[EMAIL PROTECTED]",
> "[EMAIL PROTECTED]",*/
> NULL
> };
>
i modify in clamav-milter.c

static  const   char*ignoredEmailAddresses[] = {
/*"[EMAIL PROTECTED]",*/
"[EMAIL PROTECTED]"
/*NULL*/
};

make
make install
etc...

but this mailbox is still scaned !
why ?

thank u



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Andrei Bucur 

- Original Message - 
From: "Fajar A. Nugraha" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 13, 2004 3:23 PM
Subject: Re: [Clamav-users] How to bypass milter scanning for selected
users?


> Andrei Bucur wrote:
>
> >>>How can I configure my system so mail to abuse@ or
> >>>postmaster@ are not rejected?
> >>>
> >>>
> >>clamav-milter.c, around line 750
> >>
> >>/*
> >> * Whitelist of source e-mail addresses that we do NOT scan
> >> * TODO: read in from a file
> >> */
> >>
> >>
> Ehm. SOURCE e-mail addresses.
> Are you sure this is what you need?
>
right ... i want destination address :)



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] How to bypass milter scanning for selectedusers?

2004-04-13 Thread Andrei Bucur 

- Original Message - 
From: "Nigel Horne" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 13, 2004 3:52 PM
Subject: Re: [Clamav-users] How to bypass milter scanning for selectedusers?


> > static  const   char*ignoredEmailAddresses[] = {
> > /*"[EMAIL PROTECTED]",*/
> > "[EMAIL PROTECTED]"
> > /*NULL*/
> > };
>
> > but this mailbox is still scaned !
>
> Because your domain is mediait.ro not .com
>
> > why ?
> >
> > thank u
>
> -Nigel
>
can i stop scaning email for selected users ? not from !

Adi



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users