Re: [Clamav-users] Clamav-milter and Logwatch

2003-10-16 Thread Soren Schimkat
Hi Tomasz Hi Guys If you want Logwatch to display clamav-milter logs - you can use the following files (a short description is located below the files): Please specify a license for your scripts (in their headers) and we will include them in the contrib dir. Sounds like at good idea. Her

[Clamav-users] clam no longer starts

2003-10-16 Thread Allyn Baskerville
I have a system running RH 9.0, qmail, qmail-scanner, and clam. Clam has been running fine for a few months now. As of today, the service has stopped, and I simply cannot get it running. When I try to start clam, it appears to start but doesn't. I can't find anything in the logs, other than

Re: [Clamav-users] CVS Reverted?

2003-10-16 Thread Graham Murray
Tomasz Kojm <[EMAIL PROTECTED]> writes: > Everything is OK. Actual changelog: > > Fri Oct 17 05:08:22 CEST 2003 (tk) > -- > * new Spanish documentation on ClamAV + Sendmail integration by > Erick Ivaan Lopez Carreon I have just performed a "cvs update" and th

Re: [Clamav-users] CVS Reverted?

2003-10-16 Thread Odhiambo Washington
* Tomasz Kojm <[EMAIL PROTECTED]> [20031017 06:36]: wrote: > On Thu, 16 Oct 2003 22:28:38 +0100 > Graham Murray <[EMAIL PROTECTED]> wrote: > > > Is it my imagination or has the (anonymous) CVS reverted to an older > > version? A couple of days ago I updated and the version reported as > > 20031014

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Stefan Schoeman
> On Thu, 16 Oct 2003 22:32:42 +0200 (SAST) > "Stefan Schoeman" <[EMAIL PROTECTED]> wrote: > >> I was wondering what it would take to add another database to ClamAV >> (something like spam.db) that could also be used in scanning for spam. >> > You can create your own spam database and install it in

[Clamav-users] Re: [Clamav-devel] New software using Clam AV: smtp-vilter, a sendmail milter

2003-10-16 Thread Marc Balmer
On Thu, 16 Oct 2003 08:01:26 -0600 "System Administrator a.k.a. The Root of the Problem" <[EMAIL PROTECTED]> wrote: > One other question, can you programme a filter for NNTP such as INN? > > Many newsgroups are showing up those M$ Virii. No idea. I have no infos for this... Would require some

Re: [Clamav-users] CVS Reverted?

2003-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2003 22:28:38 +0100 Graham Murray <[EMAIL PROTECTED]> wrote: > Is it my imagination or has the (anonymous) CVS reverted to an older > version? A couple of days ago I updated and the version reported as > 20031014. Now having done a "cvs update" again, it is reporting as > 20030829.

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2003 22:32:42 +0200 (SAST) "Stefan Schoeman" <[EMAIL PROTECTED]> wrote: > I was wondering what it would take to add another database to ClamAV > (something like spam.db) that could also be used in scanning for spam. > You can create your own spam database and install it into the cl

Re: [Clamav-users] scan stops after the first virus is found

2003-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2003 16:52:51 -0400 (EDT) Igor Brezac <[EMAIL PROTECTED]> wrote: > I get the same with CONTSCAN > > $ telnet localhost 3310 > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > CONTSCAN /var/src/clamav-devel-20031015/ > /var/src/clamav-devel-20031015//test/

[Clamav-users] Mail::ClamAV perl module available

2003-10-16 Thread Alex Krohn
Hi, We've put together a perl module that provides access to almost all of the C API for ClamAV. For example: my $scanner = Mail::ClamAV->new("/path/to/virus/db/"); $scanner->buildtrie; my $status = $scanner->scan("/path/to/file"); if ($status->virus) { print "Found: $stat

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Stefan Schoeman
> You could easily be right too. To be honest I didn't pick up that the > original poster was referring to attachments (my fault, should read more > carefully). As far as I can tell razor only processes text, whereas DCC > and pyzor aren't volunteering the information anywhere obvious. I > alwa

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Flinn Mueller
There is nothing stopping you from doing this. On Thursday, October 16, 2003, at 04:32 PM, Stefan Schoeman wrote: Hi everyone, I am new to this list but have been using ClamAV with good results together with MIMEDefang (www.mimedefang.org) and sendmail. MIMEDefang is a general purpose perl pr

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Kevin Spicer
On Thu, 2003-10-16 at 22:54, Antony Stone wrote: > Oh? Do these deal with image attachments as well? I thought they only > looked at text of spams... I could easily be wrong :) > You could easily be right too. To be honest I didn't pick up that the original poster was referring to attach

Re: [Clamav-users] Email not getting scanned

2003-10-16 Thread Odhiambo Washington
* Tom Bartos <[EMAIL PROTECTED]> [20031016 18:35]: wrote: > > Question: How do I configure Clamav to automatically scan incoming > email and detect virus's Intergrating Clamav with your mail server (MTA) is the solution.

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Antony Stone
On Thursday 16 October 2003 10:05 pm, Marc Balmer wrote: > Spam is not a virus. It should be treated by different software. This is true, however I think Stefan has a useful idea, and he is certainly correct that ClamAV has the required characteristics to be able to recognise email attachments

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Antony Stone
On Thursday 16 October 2003 10:24 pm, Kevin Spicer wrote: > On Thu, 2003-10-16 at 21:32, Stefan Schoeman wrote: > > I was wondering what it would take to add another database to ClamAV > > (something like spam.db) that could also be used in scanning for spam. I > > would think that this should be

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Kevin Spicer
On Thu, 2003-10-16 at 21:32, Stefan Schoeman wrote: > I was wondering what it would take to add another database to ClamAV > (something like spam.db) that could also be used in scanning for spam. I > would think that this should be fairly easy to implement into clamscan and > freshclam and anyone

[Clamav-users] CVS Reverted?

2003-10-16 Thread Graham Murray
Is it my imagination or has the (anonymous) CVS reverted to an older version? A couple of days ago I updated and the version reported as 20031014. Now having done a "cvs update" again, it is reporting as 20030829. Is this reversion deliberate (eg because of a problem) or has the Sourceforge cvs pse

Re: [Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Marc Balmer
Spam is not a virus. It should be treated by different software. --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services:

Re: [Clamav-users] scan stops after the first virus is found

2003-10-16 Thread Igor Brezac
On Thu, 16 Oct 2003, Tomasz Kojm wrote: > On Thu, 16 Oct 2003 12:24:18 -0400 (EDT) > Igor Brezac <[EMAIL PROTECTED]> wrote: > > > $ telnet localhost 3310 > > Trying 127.0.0.1... > > Connected to localhost. > > Escape character is '^]'. > > SCAN /var/src/clamav-devel-20031015 > > /var/src/clamav-de

[Clamav-users] Adding a Spam DB to ClamAV ?

2003-10-16 Thread Stefan Schoeman
Hi everyone, I am new to this list but have been using ClamAV with good results together with MIMEDefang (www.mimedefang.org) and sendmail. MIMEDefang is a general purpose perl programmable mail filter that caters for detecting viruses with a number of anti-virus scanners (incl ClamAV), spam throu

Re: [Clamav-users] scan stops after the first virus is found

2003-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2003 12:24:18 -0400 (EDT) Igor Brezac <[EMAIL PROTECTED]> wrote: > $ telnet localhost 3310 > Trying 127.0.0.1... > Connected to localhost. > Escape character is '^]'. > SCAN /var/src/clamav-devel-20031015 > /var/src/clamav-devel-20031015/test/test1: ClamAV-Test-Signature FOUND > Con

Re: [Clamav-users] Freshclam cfgfile.c out of sync

2003-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2003 13:10:20 -0400 [EMAIL PROTECTED] wrote: > Having just snagged clamav and did a make from source: > clamav-devel-20031016, I discovered a minor problem. It appears the > cfgfile.c in the freshclam directory is different that that in the > clamd directory. T

Re: [Clamav-users] Clamav-milter and Sendmail problem.

2003-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2003 11:18:38 -0400 (EDT) "Stewart MacLund" <[EMAIL PROTECTED]> wrote: > > A better idea might be to put the "more stable" version into > sourceforge for download finally. Just after the next stable version there will be a new release model - stable versions will be released for e

Re: [Clamav-users] Clamav-milter and Logwatch

2003-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2003 10:26:22 +0200 Soren Schimkat <[EMAIL PROTECTED]> wrote: > Hi Guys > > If you want Logwatch to display clamav-milter logs - you can use the > following files (a short description is located below the files): Please specify a license for your scripts (in their headers) and we

Re: [Clamav-users] Requesting another declaration

2003-10-16 Thread Tomasz Kojm
On Tue, 14 Oct 2003 06:11:18 +0200 "Mark" <[EMAIL PROTECTED]> wrote: > /var/FTP/ftpuser/upload/test/e/EAR-HOME.COM: Homecoming FOUND > /var/FTP/ftpuser/upload/test/e/EAR-QUAK.COM: Ear.Quake FOUND > /var/FTP/ftpuser/upload/test/e/EAR-SUIC.COM: Suicide.2048 FOUND > /var/FTP/ftpuser/upload/test/e/Ear

[Clamav-users] Freshclam cfgfile.c out of sync

2003-10-16 Thread jim
Having just snagged clamav and did a make from source: clamav-devel-20031016, I discovered a minor problem. It appears the cfgfile.c in the freshclam directory is different that that in the clamd directory. Specifically, the freshclam version doesn't recognize TCPAddr in the clamav.conf

RE: [Clamav-users] clam-update log file...

2003-10-16 Thread Kevin Spicer
On Thu, 2003-10-16 at 12:09, Informacion wrote: > Hi, > > Check the: /etc/cron.hourly/msec and /etc/cron.daily/msec ... > > This is the problem, the script msec, chown all files in /var/log to root > user. Rather than turning those scripts off you can easily customise how they behave... You nee

Re: [Clamav-users] False Positive, what next?

2003-10-16 Thread Tomasz Papszun
On Thu, 16 Oct 2003 at 11:48:25 +0100, David Watson wrote: [...] > I have a false positive on: > Trojan.Stealth.D > (Clam)=c441a2d0f44000a1a8f54000890da4f44fb70c904166890c90e999feb8e2fe33c98bf68dbc > in viruses.db2 > > (Submission 560 I think) That's right, thanks for precision

[Clamav-users] scan stops after the first virus is found

2003-10-16 Thread Igor Brezac
Hello, I am testing the latest clamd snapshot (Oct 15th) and the scanning stops after the first virus is found. There are more viruses in the 'test' directory. $ telnet localhost 3310 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. SCAN /var/src/clamav-devel-20031015 /var/

[Clamav-users] Email not getting scanned

2003-10-16 Thread Tom Bartos
-- Forwarded message - Hello, New to Clamav. My goal is to successfully scan and intercept incoming virus into my email. But virus's keep going into my email. If I manually scan my email with the command clamscan -r --mbox /var/spool/mail the virus is detected. I delete the

Re: [Clamav-users] Clamav-milter and Sendmail problem.

2003-10-16 Thread Stewart MacLund
A better idea might be to put the "more stable" version into sourceforge for download finally. Sundie... Fajar Arief Nugraha said: > On Wed, 15 Oct 2003 12:31:37 +0200 (CEST) > Tomasz Kojm <[EMAIL PROTECTED]> wrote: > >>Please don't use 0.60, download CVS version (snapshots >>available at >>ht

[Clamav-users] Re: [Clamav-devel] New software using Clam AV: smtp-vilter, a sendmail milter

2003-10-16 Thread System Administrator a.k.a. The Root of the Problem
On Thu, Oct 16, 2003 at 09:51:41AM +0200, Marc Balmer wrote: > Today I made available our software smtp-vilter, a high performance content filter > for sendmail using the milter API. > > smtp-vilter can be configured to use different backends to connect to the actual > scan engine, Clam AVs clam

[Clamav-users] Configuring Clam to scan incoming mail on a sendmail server

2003-10-16 Thread iTechSolutions
Please could you assit. We have installed clamav to scan for viruses on our Linux-Redhat MailServer running sendmail. At current we can run the clamscan with no problem however we would like to scan incomming mail automatically so that when users POP their mail it is virus free. We have config

RE: [Clamav-users] clam-update log file...

2003-10-16 Thread Informacion
Hi, Check the: /etc/cron.hourly/msec and /etc/cron.daily/msec ... This is the problem, the script msec, chown all files in /var/log to root user. -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre de [EMAIL PROTECTED] Enviado el: jueves, 16 de octubre de 2003 09:36

[Clamav-users] False Positive, what next?

2003-10-16 Thread David Watson
Hello, Firstly thanks for providing ClamAV its great and has helped us out here a lot. I have a false positive on: Trojan.Stealth.D (Clam)=c441a2d0f44000a1a8f54000890da4f44fb70c904166890c90e999feb8e2fe33c98bf68dbc in viruses.db2 (Submission 560 I think) It is from a pocket PC

[Clamav-users] Clamav-milter and Logwatch

2003-10-16 Thread Soren Schimkat
Hi Guys If you want Logwatch to display clamav-milter logs - you can use the following files (a short description is located below the files): clamav-milter.conf: --- # clamav-milter script for L

[Clamav-users] New software using Clam AV: smtp-vilter, a sendmail milter

2003-10-16 Thread Marc Balmer
Today I made available our software smtp-vilter, a high performance content filter for sendmail using the milter API. smtp-vilter can be configured to use different backends to connect to the actual scan engine, Clam AVs clamd being the default. smtp-vilter is in productive use since about thre

[Clamav-users] clam-update log file...

2003-10-16 Thread clamav
Hi, I'm runing freshclam daily (or at least I want it to do that): # touch /var/log/clam-update.log # chmod 600 /var/log/clam-update.log # chown clamav /var/log/clam-update.log I placed a cronjob in crontab to run every morning to update clamav: 0 8 * * * /usr/local/bin/freshclam --quiet -l /var