Re: [Clamav-users] call for MacOffice sample documents
Trog, Where do you want them posted? I have Mac Office on OSX Panther. Thanks, Mark On Mar 17, 2004, at 5:51 AM, Trog wrote: I order to test the clam VBA decoder, I need some samples of MacOffice documents. ** They MUST have VBA in them in order to be of any use. ** I don't care if they contain viruses or just other VBA code (but if they contain viruses, please zip with the password of 'virus'). If you have privacy concerns, please go ahead and delete all the content of the document (except the VBA, obviously), as that is of no interest. Thanks -trog --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] cannot update
David, See below. On Mar 17, 2004, at 8:00 AM, david wrote: Hi I am a new user of clam. I installed version clamav-0.67-1 as an rpm. However upon trying to update I get this... ClamAV update process started at Tue Mar 16 18:42:49 2004 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES Reading CVD header (main.cvd): OK ERROR: Can't open new file ./e456f6640da6112f to write open: Permission denied ERROR: Can't download main.cvd from 62.210.153.201 Trying again... ClamAV update process started at Tue Mar 16 18:42:58 2004 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES Reading CVD header (main.cvd): OK ERROR: Can't open new file ./cddc7ebb2493bb97 to write open: Permission denied ERROR: Can't download main.cvd from 24.73.112.74 Trying again... ClamAV update process started at Tue Mar 16 18:43:13 2004 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES Reading CVD header (main.cvd): OK ERROR: Can't open new file ./80dd74849915a32e to write open: Permission denied ERROR: Can't download main.cvd from 62.210.153.202 Giving up... I read the instructions and what I thought were relavent parts of the manual. I gathered that the main.cvd file needed to have the permissions changed. So I did this. But now I get - ERROR: Can't open new file ./80dd74849915a32e to write Where is it trying to write this file to so that I can change the permissions for this directory. Any help will be much appreciated. dave I ran into the exact same problem. In the /etc/freshclam.conf, uncomment the following line: # You can change the default database directory here. DatabaseDirectory /var/lib/clamav The DatabaseDirectory line was commented out by default and caused me these same problems. HTH, Mark Novak --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clam not fresh
See below - On Mar 25, 2004, at 3:28 PM, Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Colin A. Bartlett Sent: Thursday, March 25, 2004 2:47 PM To: [EMAIL PROTECTED] Subject: RE: [Clamav-users] clam not fresh Another poster pointed to testvirus.org for testing. I think you'll find some methods of delivery more effective than others and that clamav will miss some of these. They're not being detected by clam even when running them right through clamscan on the command prompt. I think it's because SomeFool.P isn't in my sig list even though freshclam says I'm up to date. My server shows the following: [EMAIL PROTECTED] bin]# sigtool -l |grep -i somefool Worm.SomeFool Worm.SomeFool.B Worm.SomeFool.B.2 Worm.SomeFool.D Worm.SomeFool.E Worm.SomeFool.F Worm.SomeFool.Gen-1 Worm.SomeFool.Gen-2 Worm.SomeFool.Gen-unp Worm.SomeFool.I Worm.SomeFool.K Worm.SomeFool.L Worm.SomeFool.M Worm.SomeFool.O Worm.SomeFool.P Worm.SomeFool.P-dll If running the same command on your server does not show the SomeFool.P then your definitions are NOT up to date. If freshclam insists on saying they are up to date, i would try deleting them totally and running freshclam again. Maybe that will clear up the problem. And don't eat bad clams. I had a bad oyster the other day but never a bad clam. I stay away from seafood altogether... Jim I did exactly that, deleted the cvd files and re-ran freshclam. I am only showing through SomeFool.M, no O, P or P-dll. Any ideas or tips appreciated. Thanks, Mark --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clam not fresh
Jim, On Mar 26, 2004, at 8:43 AM, Jim Maul wrote: I did exactly that, deleted the cvd files and re-ran freshclam. I am only showing through SomeFool.M, no O, P or P-dll. Any ideas or tips appreciated. Thanks, Mark Well, being that this makes no sense, the only thing i can suggest is to try another mirror. If you are not specifying one explicitly then you should get a different one almost every time you run freshclam so i dont know why this would matter, but i am running out of ideas. What is the total number of viruses it says for your database? Try this [EMAIL PROTECTED] jmaul]# sigtool -i /var/lib/clamav/main.cvd Build time: 29 Feb 2004 18-19 +0100 Version: 21 # of signatures: 20094 Functionality level: 1 Builder: tkojm MD5: a20b254aa5f6b97dcafc115a63c8af4e Digital signature: rpzUhP4jcYOSj/tMnkU5zPs3GbJWsdmj2+7Z4BkUGOfN8pS0XnQ2qJY1TF/ 1P4jeadvBVNoCwJiI wamnGtBO8fTnLiMgMXSiy/ L1odsalY0iCyRmxzYNqWUoG6Q3CMhEJ8M9c8idT7LBGYHwtKCBv0hH hIIrkqS2jh5V0XAxIwh Verification OK. [EMAIL PROTECTED] jmaul]# sigtool -i /var/lib/clamav/daily.cvd Build time: 26 Mar 2004 10-20 +0100 Version: 217 # of signatures: 615 Functionality level: 1 Builder: diego MD5: 4c963cdbafb148be77556bf0cc9a Digital signature: QhYZD+fLArMzj4Eukpl7HCNZVgPw3aNNYyx860Mb2tj8CFXTHNZSM6L0k+pUtLKXa8wFbLj FPQCF fnmiE0GiB5zjzT/oyzeFpXhmNH3axBrhQZ/h/qkN/XZgDgX2Dl4g9tv75uzu/ XbAtNcbWBl04TPE wkbu2Dq1aE5Ml0hlZfh Verification OK. see if the "# of signatures" matches what i have here. Jim My number of signatures is exactly the same as yours. When I grep for somefool, I stop at M. I do still have the old style signatures located in /usr/share/clamav from clam-0.65. Tomasz mentioned in an earlier post that this could be the problem. I am wondering if I should change the freshclam.conf database line from /var/lib/clamav to /usr/share/clamav? It seems to me that I am updated, as I have the same number of signatures as you do, but when I grep it for somefool, maybe it is going to the old set in the other directory? What do you think? Thanks, Mark --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clam not fresh [Solved]
All, I think it is time for you to erase ALL of your clamAV files, wherever you have them scattered, and reinstall and reconfigure, so you only have one set of .conf files and one set of .cvd files, and then reboot. At least then you'll know where to look and/or get meaningful error messages. I solved the problem by changing the DatabaseDirectory to /usr/local/share/clamav instead of /var/lib/clamav. I then ran freshclam and it updated correctly and shows the correct number of somefool signatures. Last, I deleted the /var/lib/clamav directory that I should never have created. Thanks for everyone's help! Thanks, Mark Novak --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] sigtool not working correctly
Hello all, I recently upgraded my Clamav from 0.70-rc to clamav-0.70. After the upgrade my sigtool stopped working as it used to. For example: [EMAIL PROTECTED] log]# sigtool -i /var/lib/clamav/daily.cvd Build time: 29 Apr 2004 07-50 +0200 Version: 294 # of signatures: 1075 Functionality level: 2 Builder: diego MD5: 4a5bcb4e2e696c4e918ef8dd8d0b2ae2 Digital signature: FUJWP7lblQugBK02KPsQMF2Seg/ IHEAanlB56P7AxZ84pLAfGnH1zxtW+B2YZyJelLSEyZOprZhHSccdoAzXMD9Q4hUipjpMJ8+ v9RlqHJpXrogrpP8vDJsjeb+N93ikPEa4TwEVmZ8aHgcfNUbhXIOQD4wOEWBWdcya9GRS+Ke Verification OK. [EMAIL PROTECTED] log]# But if I try to grep for a specific virus, I get nothing: [EMAIL PROTECTED] log]# sigtool -l |grep -i somefool [EMAIL PROTECTED] log]# Clam is catching a ton of somefool variants every hour, as well as the newest Bagle variants that I see listed in the update emails, but sigtool won't show them. Any and all ideas are appreciated! Thanks, Mark Novak --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] sigtool not working correctly
Jim, On May 3, 2004, at 3:27 PM, Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mark Novak Sent: Monday, May 03, 2004 2:44 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] sigtool not working correctly What is odd is that I was using the /usr/local/share/clamav path but changed it to /var/lib/clamav because that is what freshclam.conf has as it's default. I changed the line in the /etc/clamav.conf to reflect the /var/lib/clamav location. Clam is catching the newest viruses, and the database is getting updated. It is just sigtool that doesn't work when I do a "sigtool -l | grep -i somevirusnamehere" Because sigtool uses a virus database path that is specified at compile time. It does not use and .conf Jim Thanks! That makes sense. I'll move the DataDir back and see if that fixes it. Thanks, Mark --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] sigtool not working correctly
Niek, On May 3, 2004, at 3:58 AM, Niek wrote: Mark Novak wrote: Hello all, I recently upgraded my Clamav from 0.70-rc to clamav-0.70. After the upgrade my sigtool stopped working as it used to. For example: [EMAIL PROTECTED] log]# sigtool -i /var/lib/clamav/daily.cvd Build time: 29 Apr 2004 07-50 +0200 Version: 294 # of signatures: 1075 Functionality level: 2 Builder: diego MD5: 4a5bcb4e2e696c4e918ef8dd8d0b2ae2 Digital signature: FUJWP7lblQugBK02KPsQMF2Seg/ IHEAanlB56P7AxZ84pLAfGnH1zxtW+B2YZyJelLSEyZOprZhHSccdoAzXMD9Q4hUipjpMJ 8+ v9RlqHJpXrogrpP8vDJsjeb+N93ikPEa4TwEVmZ8aHgcfNUbhXIOQD4wOEWBWdcya9GRS+ Ke Verification OK. [EMAIL PROTECTED] log]# But if I try to grep for a specific virus, I get nothing: [EMAIL PROTECTED] log]# sigtool -l |grep -i somefool [EMAIL PROTECTED] log]# Clam is catching a ton of somefool variants every hour, as well as the newest Bagle variants that I see listed in the update emails, but sigtool won't show them. Any and all ideas are appreciated! Thanks, Mark Novak Mark, Maybe the path for the cvd files changed after your upgrade, and sigtool and clam are looking in the old location for cvd files? Regards, Niek What is odd is that I was using the /usr/local/share/clamav path but changed it to /var/lib/clamav because that is what freshclam.conf has as it's default. I changed the line in the /etc/clamav.conf to reflect the /var/lib/clamav location. Clam is catching the newest viruses, and the database is getting updated. It is just sigtool that doesn't work when I do a "sigtool -l | grep -i somevirusnamehere" Kind of strange. Thanks, Mark --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] sigtool not working correctly [solved]
All, What is odd is that I was using the /usr/local/share/clamav path but changed it to /var/lib/clamav because that is what freshclam.conf has as it's default. I changed the line in the /etc/clamav.conf to reflect the /var/lib/clamav location. Clam is catching the newest viruses, and the database is getting updated. It is just sigtool that doesn't work when I do a "sigtool -l | grep -i somevirusnamehere" Because sigtool uses a virus database path that is specified at compile time. It does not use and .conf I went ahead and left the .CVD files where they were at: /var/lib/clamav since that is the default for freshclam. I then linked /var/lib/clamav to /usr/local/share/clamav using ln -s, as per Henry Harvey. Now sigtool works! Thanks for everyone's help! Thanks, Mark --- [This E-mail scanned for viruses by Declude Virus] --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] clam antivirus and spamassassin
Stop amavsid and then #amavisd debug That should show you whether or not clam is really running. On my machine, I couldn't get it to work in daemon mode, but it uses clam just fine when called from the command line (as one of the "backup" scanners). Thanks, Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Thelv Sent: Friday, August 29, 2003 7:17 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] clam antivirus and spamassassin I have installed Clam on a Redhat 8 server with amavisd new installed. The spam filtering program is running fine and relaying mail. I decided to give clam a try and I went by the documentation. I commented out the appropriate lines in the amavisxxx.conf file for clam antivirus. The clamd service is running but I cannot see if its scanning or catching anything. I made sure I commented out the line telling clamd to to scan mail. Any help would be appreciated. Thanks, thelv --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: RE: [Clamav-users] clam antivirus and spamassassin
Thelv,
Here is what I have in my amavisd.conf file:
@av_scanners_backup = (
['Clam Antivirus - clamscan', 'clamscan',
'--stdout --disable-summary -r {}', [0], [1],
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
);
The way I understand it is that if amavisd can't find the daemon (which it
didn't in my case), or any other daemonized AV programs that are listed,
then it will use the "backup" scanners. So, it will call clamscan for each
email that comes through. I would assume that this would cause (possibly
significant) overhead on a busy mail server - but my mail server is not busy
by any stretch.
#amavisd debug
-snip-
Aug 29 12:34:43 taz amavisd[8702]: Found secondary av scanner Clam
Antivirus - clamscan at /usr/local/bin/clamscan
Aug 29 12:34:43 taz amavisd[8702]: Found secondary av scanner FRISK F-Prot
Antivirus at /usr/local/bin/f-prot
Aug 29 12:34:43 taz amavisd[8702]: SpamControl: initializing
Mail::SpamAssassin
debug: Score set 0 chosen.
debug: running in taint mode? no
Aug 29 12:34:43 taz amavisd[8702]: SpamControl: turning on SA
auto-whitelisting (AWL)
#cat /var/log/amavisd.log
-snip-
Aug 10 04:58:15 taz amavisd[4699]: (04699-03) WARN: all primary virus
scanners failed, trying backups
Aug 10 04:58:15 taz amavisd[4699]: (04699-03) Using Clam Antivirus -
clamscan: /usr/local/bin/clamscan --stdout --disable-summary -r
/var/amavisd/tmp/amavis-20030810T035957-04699/parts
Aug 10 04:58:15 taz amavisd[4699]: (04699-03) run_command: [10845]
/usr/local/bin/clamscan --stdout --disable-summary -r
/var/amavisd/tmp/amavis-20030810T035957-04699/parts &1
Aug 10 04:58:17 taz amavisd[4699]: (04699-03) run_av:
/usr/local/bin/clamscan status=0
(0 ),/var/amavisd/tmp/amavis-20030810T035957-04699/parts/part-1: OK
Aug 10 04:58:17 taz amavisd[4699]: (04699-03) run_av: clean
Thanks,
Mark
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Friday, August 29, 2003 12:01 PM
To: [EMAIL PROTECTED]
Subject: Re: RE: [Clamav-users] clam antivirus and spamassassin
I guess I am unsure how the command line as backup works. I had configured
the amavisd.conf file in the av scanners. This we both agree on does not
work. I then commented it out and let the next group (backup scanners) to
find the clamd and run that way. I am assuming that is what your talking
about. Or are you talking about starting clamscan another way. Sorry just
a little green on the clam. I am wanting clam to scan the email. Thanks.
thelv
---
[This E-mail scanned for viruses by Declude Virus]
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: RE: RE: [Clamav-users] clam antivirus and spamassassin
Thelv,
Do you still have the Clamd uncommented in the primary list? This is the
error that I couldn't get around. This is what I tried, maybe it will work
for you...
/etc/amavisd.conf
@av_scanners = (
# ### http://clamav.elektrapro.com/
['Clam Antivirus-clamd',
\&ask_daemon, ["CONTSCAN {}\n", '/var/amavisd/clamd'],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd,
# # match the socket name in clamav.conf to the socket name in this entry
Notice the /var/amavisd/clamd path.
/etc/clamav.conf
# LocalSocket /tmp/clamd
LocalSocket /var/amavisd/clamd
-snip-
# Run as selected user (clamd must be started by root).
# By default it doesn't drop privileges.
# User clamav
User amavisd
Changed the LocalSocket to match the location in the amavisd.conf file.
Also changed the user from clamav to amavisd.
But, this still didn't work for me, I started getting different errors. So,
I gave up messing with it as it works fine when called from the "Backup"
scanners list...
Thanks,
Mark
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Friday, August 29, 2003 1:57 PM
To: [EMAIL PROTECTED]
Subject: Re: RE: RE: [Clamav-users] clam antivirus and spamassassin
ok..its me again. Now I am getting this. Any comments:
ug 29 14:46:54 mailr amavis[2141]: (02141-01) Clam Antivirus-clamd: Can't
connect to UNIX socket /usr/local/sbin/clamd: Connection refused, retrying
(2)
Aug 29 14:46:55 mailr amavis[2142]: (02142-01) Clam Antivirus-clamd: Can't
connect to UNIX socket /usr/local/sbin/clamd: Connection refused, retrying
(2)
Aug 29 14:47:00 mailr amavis[2141]: (02141-01) Clam Antivirus-clamd: Can't
connect to UNIX socket /usr/local/sbin/clamd: Connection refused, retrying
(3)
Aug 29 14:47:01 mailr amavis[2142]: (02142-01) Clam Antivirus-clamd: Can't
connect to UNIX socket /usr/local/sbin/clamd: Connectio
thelv
---
[This E-mail scanned for viruses by Declude Virus]
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] clam antivirus and spamassassin
Thelv, No problem at all. As an aside, if anyone has figured out how to make the daemon work, I'd be interested in knowing how they did it. Thanks, Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Thelv Sent: Saturday, August 30, 2003 7:53 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] clam antivirus and spamassassin I got it running. I commented out the dameon and let it use the backup virus scan...thanks thelv --- [This E-mail scanned for viruses by Declude Virus] --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] clam antivirus and spamassassin
Rick, I'd love a copy! Thanks, Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rick Macdougall Sent: Wednesday, September 03, 2003 10:21 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] clam antivirus and spamassassin Mark Novak wrote: > Thelv, > > No problem at all. > > As an aside, if anyone has figured out how to make the daemon work, I'd be > interested in knowing how they did it. > Hi, I just wrote my own for clamd and manually put in it qmail-scanner.pl, if you want a copy, just let me know. Regards, Rick --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Amavis and clamav
Gerard,
Are you running your Amavis chroot'd?
I'm running mine on Linux, not FreeBSD, but I would think that this would
for you as well.
Set the LocalSocket in clamav.conf to a socket in your amavisd directory.
Mine is /var/amavisd/clamd
Then in your amavisd.conf file, change the line to
### http://clamav.elektrapro.com/
['Clam Antivirus-clamd',
\&ask_daemon, ["CONTSCAN {}\n", '/var/amavisd/clamd'],
Thanks,
Mark
---
[This E-mail scanned for viruses by Declude Virus]
---
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want to know what you know. Tell us and you have a chance to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] user/group question
Tom, Just build ClamAV without any special options. When it is done, you can set the user/group that it will run under in the clamav.conf file. Thanks, Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tom Allison Sent: Monday, October 20, 2003 11:14 PM To: [EMAIL PROTECTED] Subject: [Clamav-users] user/group question I'm trying to build clamav to run with amavisd-new. According to amavisd-new, it is recommended that I run clamav under the same user as amavisd-new (vscan:nogroup). ./configure --with-user=vscan --with-group=nogroup make make install When I run 'freshclam' I get: ERROR: Can't get information about user clamav. huh? How do I get around this? I'm not sure what's the best way to go about solving this. The amavisd-new is a package install and is probably much harder to change than clamav will be since I'm compiling it. This is why I just figured I would go with vscan:nogroup. help? --- This SF.net email is sponsored by OSDN developer relations Here's your chance to show off your extensive product knowledge We want to know what you know. Tell us and you have a chance to win $100 http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This SF.net email is sponsored by OSDN developer relations Here's your chance to show off your extensive product knowledge We want to know what you know. Tell us and you have a chance to win $100 http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
