[Clamav-users] Proxy and Scanning?

2003-08-26 Thread Mark
Is it possible to scan the traffic (via plug in or so) with SQUID or an SOCKS-Proxy (like Dante)? If not: Feature Request -> TrafficScan via PlugIN, own mod or Daemon :) Mark p.s. How to install UNRAR 3.xx on OpenBSD 3.3 STABLE? I can't use the Antivirus because the prcompilered binarys requiere

RE: [Clamav-users] Core dump?

2003-08-26 Thread Jonathan Baker-Bates
Ahh. That might be it - thanks. Jonathan > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Tomasz > Kojm > Sent: 26 August 2003 14:59 > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Core dump? > > > > I've just installed ClamAV 0.60 on a RedHat 7

Re: [Clamav-users] same error with Linux and BSD

2003-08-26 Thread Olaf Zaplinski
Hi, Tomasz Papszun wrote: I recommend Amavisd-new ( http://www.ijs.si/software/amavisd/ ) as the interface between a MTA and clamd/clamscan (Amavisd-new enables you to use _both_ clamd and clamscan in case clamd fails for some reason). Ah, now we are getting somewhere! ;-) I tried to to email vir

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Olaf Zaplinski
[EMAIL PROTECTED] wrote: Does anyone have a signature that will catch the current version of this virus? Did you check your logs? Here, Sobig is detected: binky:~# grep -i sobig /var/clamav/*log /var/clamav/clamav.log:Fri Aug 22 10:47:54 2003 -> stream: Worm.Sobig.F FOUND Olaf -

[Clamav-users] Problems installing on OS X

2003-08-26 Thread Ken Gordon
I am trying to install clamav-0.60 on my Mac running OS10.1.5, and I encounter an error in the Make. I have configured with and without pthreads - taking a hint from some previous messages here. If I use ./configure --disable-pthreads I do not get the error, but it doesn't compile clamd. I get c

[Clamav-users] Compil error clamav 0.60 on HP-UX 11

2003-08-26 Thread guy lafaille
Hello I get the following error during 'make' , when i compile clamav version 0.60 on HP-UX 11 with gcc compiler 3.02 and zlib 1.1.14 gcc -g -O2 -o .libs/clamd options.o cfgfile.o clamd.o tcpserver.o localserver.o server.o scanner.o others.o clamuko.o dazukoio.o tests.o ../clamscan/getopt.o - L

Re: [Clamav-users] clamav & FreeBSD - arghh ;-)

2003-08-26 Thread Olaf Zaplinski
ODHIAMBO Washington wrote: Hi Olaf, I run FreeBSD, both 5.1-RELEASE and 4.8-STABLE and in bot cases I have installed clamav. [...] Hi Odhiambo, it was all my fault - just a typo in the config file... Anyway, now here I have the same problem with clamav-milter that I have on Linux. Olaf

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > After I changed your sample into mbox format (by inserting 1 line > beginning with "From [EMAIL PROTECTED]"), ' Adding a "From" line isn't enough. You also need to change the file so that all subsequent lines starting with "From" have a ">" prepend

RE: [Clamav-users] are there any statistic tools out there?

2003-08-26 Thread Lynn Duerksen
> > > > I'd like to do some statistics about scanned emails. > > I use postfix + amavisd + clamav + cyrus. > > > Search the list archives. There are so many solutions like > this posted there long ago. > "long ago" solutions are not searchable since the move to sourceforge. There are only 2

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Tomasz Papszun
On Tue, 26 Aug 2003 at 8:24:41 -0700, [EMAIL PROTECTED] wrote: > Quoting Tomasz Papszun <[EMAIL PROTECTED]>: > > > > About the sample you sent to me: this is a message in Maildir format, > > not Mailbox. As it has been already written a couple of times here > > lately, clamscan does not (yet) rec

Re: [Clamav-users] clamav & FreeBSD - arghh ;-)

2003-08-26 Thread ODHIAMBO Washington
* Olaf Zaplinski <[EMAIL PROTECTED]> [20030826 02:38]: wrote: > Hi, > > since we had much problems with milter scanners running on Linux (including > clamav) I installed my 1st FreeBSD box now (5.1-RELEASE). > > Now we installed clamav-0.60 from the ports collection,

Re: [Clamav-users] Win32 Virii Scanner

2003-08-26 Thread Gerardo Reynoso Cobos
Adam Williams wrote: I'm curious if there is, or anyone is working on, a Win32 client filesystem scanner that uses clamd? Or if there is a good trick for scanning Win32 workstations with clam? If you share (and mount) the disk via samba, you can use clamscan to scan files a win disk. True, I wa

Re: [Clamav-users] Suggestions for build process

2003-08-26 Thread Tomasz Papszun
On Tue, 26 Aug 2003 at 18:15:52 +0200, Tomasz Kojm wrote: > > 1) clamav-milter links with -lmilter but that (at least on RedHat) references > > a function strlcpy which is in libsmutil.a (also from the sendmail-devel > > rpm), so I needed to add -lsmutil in clamav-milter/Makefile > > I'm not sure i

Re: [Clamav-users] Suggestions for build process

2003-08-26 Thread Tomasz Kojm
> 1) clamav-milter links with -lmilter but that (at least on RedHat) references > a function strlcpy which is in libsmutil.a (also from the sendmail-devel > rpm), so I needed to add -lsmutil in clamav-milter/Makefile > I'm not sure if this is specific to this version of RedHat's sendmail > packagi

Re: [Clamav-users] [clamd ]

2003-08-26 Thread Tomasz Kojm
> I'm trying to use clamav-milter. But clamd goes walk about after awhile > - > > [EMAIL PROTECTED] root]# ps ax | grep clam > 6878 ?S 0:00 clamd > 6879 ?Z 0:00 [clamd ] > 15107 pts/1S 0:00 grep clam > [EMAIL PROTECTED] root]# rpm -q clamd > clamd-0.60-4 > [EM

Re: [Clamav-users] Clamd Socket Already Exist Error [REPOST]

2003-08-26 Thread Tomasz Kojm
> As I don't usually do networking in C, and there were one/some style > complaints: Tomasz, are you accepting the patch as-is? Of course, I do. However I'd like to see Mark's version and after that we can update the CVS with the better one ;) Best regards, Tomasz Kojm -- oo.

Re: [Clamav-users] Clamd Socket Already Exist Error [REPOST]

2003-08-26 Thread Thomas Lamy
ODHIAMBO Washington wrote: * Thomas Lamy <[EMAIL PROTECTED]> [20030825 00:26]: wrote: [..] OK, but this will be an option (something like FixSocket or so) in clamav.conf. Ok, the diff against snapshot 20030823 is attached. The new option is named "FixStaleSocket". No snapshot by that name. Did

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread mrsmith
Quoting Tomasz Papszun <[EMAIL PROTECTED]>: > On Mon, 25 Aug 2003 at 20:12:46 -0700, [EMAIL PROTECTED] wrote: > > Jay, > > > > This one doesn't seem to match either. I am literally getting > > hundreds of these every day. Thanks for the details. > > > > Mike > > Mr Smith, could you please sto

RE: [Clamav-users] Compressed files not being scanned

2003-08-26 Thread Matlock , Justin
No go on catching eicar in a ZIP file; sending from Yahoo, Hotmail, and another server. Grr... I have three separate servers, and all three are missing ZIP files. Clamscan catches everything in ZIP files if I run it from the command line, and it catches everything in emails that is uncompressed

Re: [Clamav-users] Win32 Virii Scanner

2003-08-26 Thread Adam Williams
> > I'm curious if there is, or anyone is working on, a Win32 client > > filesystem scanner that uses clamd? Or if there is a good trick for > > scanning Win32 workstations with clam? > If you share (and mount) the disk via samba, you can use clamscan to > scan files a win disk. True, I was just

[Clamav-users] [clamd ]

2003-08-26 Thread Adam Williams
I'm trying to use clamav-milter. But clamd goes walk about after awhile - [EMAIL PROTECTED] root]# ps ax | grep clam 6878 ?S 0:00 clamd 6879 ?Z 0:00 [clamd ] 15107 pts/1S 0:00 grep clam [EMAIL PROTECTED] root]# rpm -q clamd clamd-0.60-4 [EMAIL PROTECTED] root]

Re: [Clamav-users] Win32 Virii Scanner

2003-08-26 Thread Adam Williams
> > I'm curious if there is, or anyone is working on, a Win32 client > > filesystem scanner that uses clamd? Or if there is a good trick for > > scanning Win32 workstations with clam? > I'm going to write a simple (graphical) win32 client for clamd in September. Excellent! > Currently you can mo

Re: [Clamav-users] scan not picking up SoBig, help?

2003-08-26 Thread Yuval Kogman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 24 Aug 2003, Marc Balmer wrote: > clamav requires a mail file to begin with "From " to be recognised as > a mail message. It is certainly not a good solution. In case you ment that's not what it's going to do: [eris:~] nothingmuch% cat < To

Re: [Clamav-users] Clamav-Milter - Not Working?

2003-08-26 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ian Scott <[EMAIL PROTECTED]> wrote: > Sent myself an email with a virus.. and it arrived. > > So, I'm not sure what I've done wrong. I'm running Sendmail 8.12.9 on > RH 8. Have you installed the sendmail-devel RPM? - -Nigel - -- Nigel Horne.

Re: [Clamav-users] Clamav-Milter - Not Working?

2003-08-26 Thread Ian Scott
On Tue, 2003-08-26 at 03:06, Marc Balmer wrote: > > Maybe your sendmail has no milter support. Enter the following command and seed if > you "Compiled with: ... MILTER ...": > > sendmail -bt -d0.4 Goal Centered Internet Solutions http://www.pairowoodies.com All About Fly Fishing http://www.a

Re: [Clamav-users] Win32 Virii Scanner

2003-08-26 Thread Tomasz Kojm
> I'm curious if there is, or anyone is working on, a Win32 client > filesystem scanner that uses clamd? Or if there is a good trick for > scanning Win32 workstations with clam? I'm going to write a simple (graphical) win32 client for clamd in September. Currently you can mount windows directorie

Re: [Clamav-users] Core dump?

2003-08-26 Thread Tomasz Kojm
> I've just installed ClamAV 0.60 on a RedHat 7.0 i386 machine from source. It > seemed to configure and compile OK. I then updated the virus database and > tested clamscan on eicar.com. > > But clamscan just dumps a core file. Hope you're not using that "famous" gcc-2.96 compiler. Please go to

Re: [Clamav-users] Clamd Socket Already Exist Error

2003-08-26 Thread Tomasz Kojm
> Do you need a patch? Mark, all patches are welcome. Please send it to the devel ml and we will check it. Thanks. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] (\/)\. http://www.konarski.edu.pl/~zolw \..._ I nie zapomnij kliknac w brz

Re: [Clamav-users] How stable is 0.60?

2003-08-26 Thread Tomasz Kojm
> Hi all > > I am using clamav 0.60 on OpenBSD/sparc64. I have written a sendmail > milter in C which connects to clamd to have emails scanned. > > This morning I found that clamd was no longer running. Is this software > considered stable (I am a relatively new user of clamav...)? > > > In

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Tomasz Papszun
On Mon, 25 Aug 2003 at 20:12:46 -0700, [EMAIL PROTECTED] wrote: > Jay, > > This one doesn't seem to match either. I am literally getting > hundreds of these every day. Thanks for the details. > > Mike Mr Smith, could you please stop doing "top-posting"? Answering should be done _under_ the pre

Re: [Clamav-users] Clamd Socket Already Exist Error [REPOST]

2003-08-26 Thread ODHIAMBO Washington
* Thomas Lamy <[EMAIL PROTECTED]> [20030825 00:26]: wrote: [..] > >OK, but this will be an option (something like FixSocket or so) in > >clamav.conf. > > > Ok, the diff against snapshot 20030823 is attached. The new option is > named "FixStaleSocket". No snapshot by that name. Did you mean the -

[Clamav-users] can't read mail after clamav scan

2003-08-26 Thread Taliesin
Hi to you all. I've installed clamav in conjuction with qmail & qmail scanner. It works well, but I can display only the header of every mail (with sylpheed, but the same problem is on the web mail too) end not the body. To see the body I must display the message source. How can I stop clamav to

RE: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Diego d'Ambra
There're so many different copies of damaged Sobig.F that a new signature will only detect a portion of them. Some mail-scanners strip the offending portion of the e-mail and send the rest through. In Sobig.F' case the only thing left is an almost empty e-mail with a subject and some text in the b

Re: [Clamav-users] Clamd Socket Already Exist Error

2003-08-26 Thread Tomasz Kojm
> clamd shouldn't be checking whether the file exists. I suspect that simply > removing that check will eliminate the problem. The proposed patch chooses I don't see any race condition there. We simply check if the socket exists just after bind() fails. Best regards, Tomasz Kojm -- oo.

[Clamav-users] Core dump?

2003-08-26 Thread Jonathan Baker-Bates
Hi - I've been having a look on the archives and can't seem to see anything relevant - so any help much appreciated. I've just installed ClamAV 0.60 on a RedHat 7.0 i386 machine from source. It seemed to configure and compile OK. I then updated the virus database and tested clamscan on eicar.com.

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Antony Stone
On Tuesday 26 August 2003 4:12 am, [EMAIL PROTECTED] wrote: > Jay, > > This one doesn't seem to match either. I am literally getting > hundreds of these every day. Thanks for the details. Well, please send at least one of us a copy of one of these files which is not being recognised, and we ca

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread mrsmith
Jay, This one doesn't seem to match either. I am literally getting hundreds of these every day. Thanks for the details. Mike Quoting Jay Swackhamer <[EMAIL PROTECTED]>: > On Monday, August 25, 2003 8:57 PM, Butch Evans wrote: > > I am not sure if this is the same one, but my uvscan has detecte

Re: [Clamav-users] Clamav-Milter - Not Working?

2003-08-26 Thread Marc Balmer
On Tue, 26 Aug 2003 02:54:05 -0400 Ian Scott <[EMAIL PROTECTED]> wrote: > Sent myself an email with a virus.. and it arrived. > > So, I'm not sure what I've done wrong. I'm running Sendmail 8.12.9 on > RH 8. > > Any thoughts or suggestions or places where I went wrong? Maybe your sendmail

[Clamav-users] Clamav-Milter - Not Working?

2003-08-26 Thread Ian Scott
Hi Again! I cannot seem to get Clamav-Milter working. I am postive I have followed the directions to a 'T', and yet I can send an email with a virus and it is not blocked/returned/quarantined or whatever clamav-milter is supposed to do. It's delivered normally. I configured with --enable-milter

Re: [Clamav-users] Build Problems - RH 8- DISREGARD!!

2003-08-26 Thread Ian Scott
Please disregard my last message this email refers to. It seems that for some reason, my copy of libmilter.a was an old one. I built a new and everything seemed to work. Please accept my apologies for the extra and un-needed noise! -- Ian Scott <[EMAIL PROTECTED]> Goal Centered Internet Solutio

[Clamav-users] Build Problems - RH 8

2003-08-26 Thread Ian Scott
Hi Folks, I managed to compile and install Clamav on RH 7.3 with Qmail and qmail-scanner. Works like a charm - great job, and thank you! I'm now trying to compile it on a box with RH 8 and Sendmail 8.12.9. I configured with --enable-milter. However, make quits with an error: /usr/lib/gcc-lib/

[Clamav-users] How stable is 0.60?

2003-08-26 Thread Marc Balmer
Hi all I am using clamav 0.60 on OpenBSD/sparc64. I have written a sendmail milter in C which connects to clamd to have emails scanned. This morning I found that clamd was no longer running. Is this software considered stable (I am a relatively new user of clamav...)? In my maillog I find th

[Clamav-users] Using Clam from a non-standard MTA

2003-08-26 Thread Toby Reiter
Hello all, Just joined the list. I just downloaded Clam AV and am impressed with its speed and its autodownload capabilities (freshclam). I need some help, though. I use XMail, which I really like as an MTA but it doesn't offer any of the hooks that QMail or Postfix have which Clam already cate

[Clamav-users] ask help

2003-08-26 Thread edy
  any body want to help me? i am newbie in linux, i just finished install mail server using qmail and under linux redhat 7.1 and now i want to install antivirus and anti spam to mail server? i want to ask some question 1 . when we finished install mail server using qmail is it           have 

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Antony Stone
On Tuesday 26 August 2003 1:57 am, Butch Evans wrote: > On Tue, 26 Aug 2003, Antony Stone wrote: > >Which other antivirus engine/s tell you the file contains Sobig.F? > > I am not sure if this is the same one, but my uvscan has detected > what it calls "Sobig.f.dam" and this is missed by clamav.

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Jay Swackhamer
On Monday, August 25, 2003 8:57 PM, Butch Evans wrote: > I am not sure if this is the same one, but my uvscan has detected > what it calls "Sobig.f.dam" and this is missed by clamav. I will > try to get a sample of the file, but do not have one at this time. I submitted a new Sobig-f signature a

Re: [Clamav-users] W32.Sobig.F@mm Undetected by current signature

2003-08-26 Thread Butch Evans
On Tue, 26 Aug 2003, Antony Stone wrote: >Which other antivirus engine/s tell you the file contains Sobig.F? I am not sure if this is the same one, but my uvscan has detected what it calls "Sobig.f.dam" and this is missed by clamav. I will try to get a sample of the file, but do not have one at

[Clamav-users] Suggestions for build process

2003-08-26 Thread David Jansen
When upgrading clamav 0.60 to the latest devel snapshot (20030820) I encountered a few problems with the build and install process, so here are some suggestions. The mail server is running RedHat Linux 7.2 with all available patches installed, sendmail 8.11.6-25.72 1) clamav-milter links with -lm

Re: [Clamav-users] Win32 Virii Scanner

2003-08-26 Thread Gerardo Reynoso Cobos
Adam Williams wrote: I'm curious if there is, or anyone is working on, a Win32 client filesystem scanner that uses clamd? Or if there is a good trick for scanning Win32 workstations with clam? If you share (and mount) the disk via samba, you can use clamscan to scan files a win disk. You can mou