[Clamav-users] Calmav-milter

I saw the release of ivs-milter yesterday on freshmeat.net and I saw in the readme file that it's originally based on calmav-milter. Any of you guys using ivs-milter? I've got clamav-milter installed and running on my mailserver at the moment, but I need some of the features included in ivs-milter

Re: [Clamav-users] Re: Problem building 0.66 on OpenBSD 3.4

Do you have digital signature support? On Feb 11, 2004, at 7:13 PM, Vic Metcalfe wrote: I actually got it to build. I started over and couldn't duplicate the same problem I had before... Sorry to have jumped the gun. Here's how I made it work (I'm using bash): export LDFLAGS=-lpthread ./c

Re: [Clamav-users] Trouble with ClamAV-0.66

More news. I have tracked down the segfault to libclamav/str.c cli_strtok which is running off the end when called from cl_cvdparse looking for the digital signature. I am not a C programmer, but it looks like one or more of the servers has a malformed main.cvd which is breaking the 513 bytes al

[Clamav-users] Re: Problem building 0.66 on OpenBSD 3.4

I actually got it to build. I started over and couldn't duplicate the same problem I had before... Sorry to have jumped the gun. Here's how I made it work (I'm using bash): export LDFLAGS=-lpthread ./configure --disable-cr make make install I couldn't duplicate the odd linking problem I had in

Re: [Clamav-users] Problems updating virus sigs

On Thu, 12 Feb 2004, Luc de Louw wrote: > ERROR: CVD file not found on remote server > ERROR: Can't read main.cvd header from database.clamav.net (200.68.106.40) freshclam uses 'database.clamav.net' by default which resolves to multiple IP addresses. Your system's resolver picked one (200.68.106

RE: [Clamav-users] Proper milter settings?

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nigel Horne Sent: Wednesday, February 11, 2004 4:41 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Proper milter settings? On Wednesday 11 Feb 2004 9:59 pm, james nelson wrote: > I am using the foll

Re: [Clamav-users] Trouble with ClamAV-0.66

Ok, here's more info. freshclam is segfaulting. This is on a Celeron 1200 running RedHat 9. I have it working fine on an Athlon 600 RedHat 9 and on a Pentium III 1200 RedHat 7.2 Here's what I get when I run it non-daemon: ClamAV update process started at Thu Feb 12 10:07:53 2004 Connecting via

[Clamav-users] Access permissions [was .065 depracated]

Tomasz Papszun wrote: > When using clamdscan (which is just an interface to clamd), one can > scan only these files which clamd has access to. > > So if clamd is run as unpriviliged user and mail files are owned by > someone else, clamdscam / clamd can't scan them. Nige

Re: [Clamav-users] Proper milter settings?

On Wednesday 11 Feb 2004 9:59 pm, james nelson wrote: > I am using the following milter call in sendmail: > > INPUT_MAIL_FILTER(`clmilter',`S=inet:[EMAIL PROTECTED], > F=,T=S:4m;R:4m')dnl > > From our primary smtp, smtpserver.network.com. > > I began testing and everything is working great. Howev

[Clamav-users] Problems updating virus sigs

Hi all, since a few days I have problems to fetch updates of the virus DB The cron is /usr/lo/usr/local/bin/freshclam --quiet -l /var/log/clam-update.log and the cron-output is: ERROR: CVD file not found on remote server ERROR: Can't read main.cvd header from database.clamav.net (200.68.106.40

[Clamav-users] "make install" fails -- errant '@' sign?

I've just discovered ClamAV this weekend, but the latest development snapshot fails to correctly run a "make install" on OpenBSD because of an errant '@' sign in the ./database/Makefile created by the ./configure script. The error message given is this: /bin/sh ../mkinstalldirs /usr/local/share

[Clamav-users] libunrar.so support?

It appears that someone has adapted the UnRAR 3.0 code to be a linux/unix shared library similar to the uRarLib currently used to handle RARv2.0 archives. Are there any plans to include support for this in libclamav anytime soon? I would like to used clamd/clamdscan rather than clamscan for overh

Re: [Clamav-users] 0.65 is deprecated ?

On Wed, 11 Feb 2004 at 14:20:09 -0500, Rob Mangiafico wrote: > > We have been trying to get Trashscan to work with clamdscan / clamd > running as a regular user, but have run into problems with permissions it > seems. We'll keep tinkering with it. Seems they have a new version out as > well, v0

RE: [Clamav-users] Proper milter settings?

I am using the following milter call in sendmail: INPUT_MAIL_FILTER(`clmilter',`S=inet:[EMAIL PROTECTED], F=,T=S:4m;R:4m')dnl >From our primary smtp, smtpserver.network.com. I began testing and everything is working great. However after about an hr or so I started noticing it taking an increas

[Clamav-users] 0.66

Hello all, i have installed version 0.66, works great however clamav-milter from this release giving problems. it keeps complaining about /var/run/clamav.sock Don't have permissions and crashes. i do have clamav user with low user id. i did try to run it as root and it still crashes. I tried t

[Clamav-users] sendmail + auth smtp + clamav-milter

Okay, I'm using a self compiled sendmail 8.12.10 with auth smtp. Now auth smtp works fine until you plug clamav-milter in, in fact with it plugged in but not running it still works. However as soon as you activate clamav-milter (run clamd and the clamav-milter) boom authentication via auth smt

Re: [Clamav-users] v0.66 OK how about some virus samples

Quoting Kristof Hardy <[EMAIL PROTECTED]>: Now, something completely different, wouldn't it be usefull to have some 'spare' viruses of the latest detected available somewhere? (web/ftp site?) *NEVER* post live viruses to a public web/ftp site. It just spreads them (via search engines, etc). Would

Re: [Clamav-users] Problem building 0.66 on OpenBSD 3.4

Thank-you! Here's my uname -a: OpenBSD smtp1.zymsys.com 3.4 GENERIC#18 i386 and here's the first two lines of my dmesg: OpenBSD 3.4 (GENERIC) #18: Wed Sep 17 03:34:47 MDT 2003 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC I'd be happy to give you a shell account if it helps. Th

Re: [Clamav-users] Building RPMS from tarball

Hello Michael, [snip] > I would like to second that request. Does anyone on the list have a .spec > file that they would like to contribute? One can be found on the Fedora.us web site under http://www.fedora.us/tempspecs/ as well as .spec files for a few other things. TTFN -- Andrew Mills

RE: [Clamav-users] Problem building 0.66 on OpenBSD 3.4

Hi What is the version of your 3.4 Kernel ? I'll try to port clamav 0.66 to obsd 3.4. ++ Jerome -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Vic Metcalfe Envoyé : mercredi 11 février 2004 18:32 À : [EMAIL PROTECTED] Objet : [Clamav-users] Problem bu

Re: [Clamav-users] 0.65 is deprecated ?

> > How about if we are using clamdscan via procmail for our users? I assume > > the only way to use it is to use the internal mime features of clamdscan > > with the --mbox option? Or is there an easy way / process to use an > > With clamdscan (note "d" in it), you have to configure clamd in

[Clamav-users] Upgrading to 0.66 using up2date

Hi, I'd like to know if the new released version (0.66) will be available at http://crash.fce.vutbr.cz/crash-hat/1/clamav for automatic update (I was willing to test that this is currently working OK in my installation) Thanks, --Claudio Los mejores usados y las más tentadoras of

RE: [Clamav-users] Re: MD5 CVD checks in Cygwin version

> ClamAV-0.66 and ClamAV-devel, the last hunk of the patch failed, so > see the attached patch instead. I've tested it on Linux, but would > like to know if it works on Windows. According to MS library docs > it ought to work, but I'm not sure about the Cygwin runtime library. > Maybe you could t

[Clamav-users] command line mail scanning

Apologies in advance if this is a repeated question. Has anyone run clamscan from the command line in a .qmail file to scan messages on a per-user basis? I'd like to allow users to be scanned if they elect to, and infected mail should be moved. Anyone achieved anything similar? Thanks. -- Adam We

RE: [Clamav-users] Building RPMS from tarball

Mailing Lists wrote: > Not sure if this has been addressed before but I was wondering if it > is/would be possible to build rpms directly from the tarball. I can do > this currently with SpamAssassin by doing rpmbuild -ta and > it builds rpms for my system. Is this possi

[Clamav-users] Re: MD5 CVD checks in Cygwin version

On 11/02/2004 06:46, Andrey Cherezov wrote: read(stream) and write(stream) under Cygwin work as text functions instead of binary ones - expand LF to CRLF ? How to override this? I've added "|O_BINARY" to freshclam/manager.c[472]: if((fd = open(file, O_WRONLY|O_CREAT|O_EXCL|O_BINARY, 0644)) =

[Clamav-users] SRPM for the 0.66 release available anywhere yet?

Does anyone know if a SRPM is available for the 0.66 release anywhere yet? -- Michael St. Laurent Hartwell Corporation --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD

[Clamav-users] Problem building 0.66 on OpenBSD 3.4

I recently was able to build the 0.65 release under OpenBSD, but I'm now getting an error building freshclam: gcc -g -O2 -o .libs/freshclam freshclam.o options.o manager.o notify.o ../clamscan/getopt.o ../clamscan/others.o -L/usr/local/lib -L/home/vic/src/clamav-0.66/libclamav -L/home/vic/src/cl

Re: [Clamav-users] MyDoom.D - manual signature generation?

Tomasz, No need to apologize for the delay. I just needed some education as to how to add signatures temporarily. Computer Associates is the only commercial vendor I can find that detects MyDoom.D at the moment. Also, thanks to those who responded from the list - I'm better equipped to handle th

Re: [Clamav-users] MyDoom.D - manual signature generation?

That did it ! Ya ! > Zap the DOS line-ending and it should work. > > -- > Kevin M. Myer > Systems Administrator > Lancaster-Lebanon Intermediate Unit 13 > (717) 560-6140 > > --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build

Re: [Clamav-users] MyDoom.D - manual signature generation?

Zap the DOS line-ending and it should work. -- Kevin M. Myer Systems Administrator Lancaster-Lebanon Intermediate Unit 13 (717) 560-6140 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux

Re: [Clamav-users] MyDoom.D - manual signature generation?

David A. Lee wrote: I tried using this attachment and it causes my clamscan to report "Malformed Database" As a quick, temporary fix, you can use the attached file, containing the Works fine here. I copied the contents into my clipboard and created a new file with vi while logged into my linux. I

Re: [Clamav-users] MyDoom.D - manual signature generation?

I tried using this attachment and it causes my clamscan to report "Malformed Database" > On Wed, 11 Feb 2004 at 8:43:41 -0500, Kevin M. Myer wrote: > > Hello, > > > > The ClamAV team did a great job of getting the signature out for MyDoom.A > > (SCO.A) virus well before the commercial vendors

RE: [Clamav-users] RE: Clamav-milter not installing

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of james nelson Sent: Wednesday, January 28, 2004 8:00 AM To: [EMAIL PROTECTED] Subject: RE: [Clamav-users] RE: Clamav-milter not installing Afirmative. I compiled sendmail with milter support. The .configu

[Clamav-users] More on Clamav-milter runaway processes

Hi, Following up my previous mail about this, I've finally got round to running clamav-daemon in debug mode, and catching some more output. Hopefully it'll be useful. I started clamav-daemon, clamav-milter, and sendmail at 10:10:00:- Feb 11 10:09:56 castor clamav-milter[16265]: ClamAV version '

RE: [Clamav-users] MyDoom.D - manual signature generation?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Kevin M. Myer > Sent: 11. februar 2004 15:32 > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: [Clamav-users] MyDoom.D - manual signature generation? > > Thanks Eric, > > Tha

Re: [Clamav-users] MyDoom.D - manual signature generation?

On Wednesday 11 February 2004 2:31 pm, Kevin M. Myer wrote: > Thanks Eric, > > Thats exactly what I was looking for. I guess it helps to RTM when in > doubt... > > One question - in building the final CVD, it mentions a signing server. > Since I'm not planning on distributing my temporary signat

Re: [Clamav-users] MyDoom.D - manual signature generation?

On Wed, 11 Feb 2004 at 8:43:41 -0500, Kevin M. Myer wrote: > Hello, > > The ClamAV team did a great job of getting the signature out for MyDoom.A > (SCO.A) virus well before the commercial vendors had signatures. However, > yesterday, we started receiving what turns out to be MyDoom.D messages.

RE: [Clamav-users] MyDoom.D - manual signature generation?

Thanks Eric, Thats exactly what I was looking for. I guess it helps to RTM when in doubt... One question - in building the final CVD, it mentions a signing server. Since I'm not planning on distributing my temporary signature, what do I use for a signing server, since I presumably don't have ac

Re: [Clamav-users] Please Help .. Redolf out of control

Try here: Ted --On Wednesday, February 11, 2004 4:10 PM +0200 Gregory Machin <[EMAIL PROTECTED]> wrote: Before I setup the virus scanning the Redolf virus attacked my network. Does anyone know of a fix to remove the virus from infected file

[Clamav-users] Please Help .. Redolf out of control

Before I setup the virus scanning the Redolf virus attacked my network. Does anyone know of a fix to remove the virus from infected files, so that i don't have to format and reload all the windows machines ...   Many Thanks Gregory Machin

[Clamav-users] Building RPMS from tarball

Not sure if this has been addressed before but I was wondering if it is/would be possible to build rpms directly from the tarball. I can do this currently with SpamAssassin by doing rpmbuild -ta and it builds rpms for my system. Is this possible to do with clamav. I am not sure but I think a s

RE: [Clamav-users] MyDoom.D - manual signature generation?

Title: RE: [Clamav-users] MyDoom.D - manual signature generation? Check this out...I've done it a bunch of times. It works so good I've been thinking about offering to help generate sigs for the group. http://www.clamav.net/doc/signatures.pdf http://www.clamav.net/faq.html FAQ#10 -Orig

Re: [Clamav-users] Please, any tips....

On Wednesday 11 February 2004 2:50 pm, Mário Luis Ghoneim wrote: > > What spec is the server, what volume of emails is it processing > > (especially during the time when you get problems) > > It's only one simple mail/web/dns server... > > > and what MTA are you using? > sendmail-8.11.6-1U60_4cl

[Clamav-users] MyDoom.D - manual signature generation?

Hello, The ClamAV team did a great job of getting the signature out for MyDoom.A (SCO.A) virus well before the commercial vendors had signatures. However, yesterday, we started receiving what turns out to be MyDoom.D messages. I submitted a sample at about 9:00AM EST, on 2/10/2004 but am still a

Re: [Clamav-users] Please, any tips....

> What spec is the server, what volume of emails is it processing (especially > during the time when you get problems) It's only one simple mail/web/dns server... and what MTA are you using? sendmail-8.11.6-1U60_4cl tks, Mário > > Regards, > > Antony. > > -- > There are only 10 types of people i

Re: [Clamav-users] Clamav on my server not finding new viruses

> On Wednesday 11 of February 2004 01:37, David A. Lee wrote: > > Not running clamd. > > I'm running freshclam from cron once an hour > > OK, so let try to use a sigtool > sigtool --info=/path/to/main.cvd > and the same with a daily.cvd. You will see an information about your > database. Maybe it w

Re: [Clamav-users] Please, any tips....

On Wednesday 11 February 2004 1:45 pm, Mário Luis Ghoneim wrote: > Every day around 10:00am and 02:00pm my server go down because a lot of > process clamav, 11MB each, starting... What spec is the server, what volume of emails is it processing (especially during the time when you get problems) a

[Clamav-users] Please, any tips....

Hi List, (first of all, forgive me this (possible) off topic) I allways experiencing a truly hell, every day.. : ( Every day around 10:00am and 02:00pm my server go down because a lot of process clamav, 11MB each, starting... I just disable some options inner amavis to reduce the traffic # No

Re: [Clamav-users] v0.66 OK how about some virus samples

On Wednesday 11 February 2004 10:55 am, Kristof Hardy wrote: > Nothing compares to a real-life situation, the EICAR test is good for > basic 'does-it-detects-viruses' but in my opinion doesn't reflect 'the > world out there' :-) True. However you need a well-isolated network in order to do any

Re: [Clamav-users] v0.66 OK how about some virus samples

Antony Stone wrote: In other words, a highly risky and rather dangerous way of showing people something you could fake just as effectively if you want to impress non-technical management. (If technical management, who can see through something like this, advocate testing a production system wi

Re: [Clamav-users] v0.66 OK how about some virus samples

On Wednesday 11 February 2004 8:51 am, Kristof Hardy wrote: > Now, something completely different, wouldn't it be usefull to have some > 'spare' viruses of the latest detected available somewhere? (web/ftp > site?) Would be a neat way to show management it does indeed work like a > breeze.. It wo

Re: [Clamav-users] v0.66 OK how about some virus samples

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 El 11/02/2004, a las 9:51, Kristof Hardy escribió: Hi, Just informing some of you that the upgrade to 0.66 went good on my RH 9, CGPro 4.1.4, cgpav-1.3a. For me works great too in debian Testing 2.6.2 + qmail + qmailscanner + spamassassin. Regards

Re: [Clamav-users] 0.65 is deprecated ?

On Tue, 10 Feb 2004 at 13:28:14 -0500, Rob Mangiafico wrote: > On Tue, 10 Feb 2004, Tomasz Papszun wrote: > > I admit that I'm quite focused on "Postfix + Amavisd-new + ClamAV" > > solution (I don't know details of milter and so on) so maybe I'm missing > > something... But what do you mean by "I

RE: [Clamav-users] v0.66 OK how about some virus samples

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Kristof Hardy > > Now, something completely different, wouldn't it be usefull > to have some > 'spare' viruses of the latest detected available somewhere? (web/ftp > site?) Would be a neat way to

Re: [Clamav-users] clamscan don't detects virus

yes, was that the problem. tnx, pacho Scrive Trog <[EMAIL PROTECTED]>: > On Wed, 2004-02-11 at 08:33, [EMAIL PROTECTED] wrote: > > ok for the cvd then. but i'm not happy cause no virus is setected yet. > > also notice that if i do "clamscan /var/spool" all virus are correctly > detected > > but

Re: [Clamav-users] Postmaster Notifications

On Wednesday 11 Feb 2004 3:03 am, Doug Hardie wrote: > > What version are you running now (clamav-milter --version)? > > > > -Nigel > > > > clamav-devel-20040209 There is no such version of clamav-milter. Did you run the command I requested? -Nigel -- Nigel Horne. Arranger, Composer, Typesette

Re: [Clamav-users] clamscan don't detects virus

On Wed, 2004-02-11 at 08:33, [EMAIL PROTECTED] wrote: > ok for the cvd then. but i'm not happy cause no virus is setected yet. > also notice that if i do "clamscan /var/spool" all virus are correctly detected > but when clamscan analyzes mail trough qmail-scanner never detects virus. see > here: >

Re: [Clamav-users] clamscan don't detects virus

ok for the cvd then. but i'm not happy cause no virus is setected yet. also notice that if i do "clamscan /var/spool" all virus are correctly detected but when clamscan analyzes mail trough qmail-scanner never detects virus. see here: Tue, 10 Feb 2004 15:52:12 +0100:15277: clamscan: starting scan

[Clamav-users] v0.66 OK how about some virus samples

Hi, Just informing some of you that the upgrade to 0.66 went good on my RH 9, CGPro 4.1.4, cgpav-1.3a. Now, something completely different, wouldn't it be usefull to have some 'spare' viruses of the latest detected available somewhere? (web/ftp site?) Would be a neat way to show management it

Re: [Clamav-users] Clamav on my server not finding new viruses

On Wednesday 11 of February 2004 01:37, David A. Lee wrote: > Not running clamd. > I'm running freshclam from cron once an hour OK, so let try to use a sigtool sigtool --info=/path/to/main.cvd and the same with a daily.cvd. You will see an information about your database. Maybe it will help you

RE: [Clamav-users] Re: MD5 CVD checks in Cygwin version

> Great ! > > Could anybody briefly explain wich parts of Cygwin are > necessary to build > Clamav under Win32 ? I have some knowledge of C but don't have any > experience in Cygwin tools. Is the C compiler the only needed tool to > compiler Clamav ? Compilation under cygwin is the same as in unix

[Clamav-users] Re: MD5 CVD checks in Cygwin version

Great ! Could anybody briefly explain wich parts of Cygwin are necessary to build Clamav under Win32 ? I have some knowledge of C but don't have any experience in Cygwin tools. Is the C compiler the only needed tool to compiler Clamav ? Best regards, Ignasi Prat "Andrey Cherezov" <[EMAIL PROTE

Re: [Clamav-users] DEBUG LOG (was: Calling andrey@cherezov.koenig.su :)

On Wednesday 11 Feb 2004 7:03 am, Andrey Cherezov wrote: > #else > (void)mktemp(filename); > fd = open(filename, O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_BINARY, 0600); > #endif Thanks. Will look into this. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. I

Re: [Clamav-users] Problems with compilation

I wrote: > No, it's not a .h issue, its that the configure script didn't realise it had to > include > a sendmail development library. Check you have the -lsmutil library on your system. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTE

Re: [Clamav-users] Problems with compilation

On Wednesday 11 Feb 2004 7:44 am, Magazinov Igor wrote: > I installed sendmail-devel. > And I did: > > #./configure --sysconfdir=/etc --enable-milter > #make > > And I received: > What's wrong? > May be "linker" can't resolve reference to function because it can't find > some .h file(s). But I don

RE: [Clamav-users] MD5 CVD checks in Cygwin version

> read(stream) and write(stream) under Cygwin work as text > functions instead of binary ones - expand LF to CRLF ? > How to override this? I've added "|O_BINARY" to freshclam/manager.c[472]: if((fd = open(file, O_WRONLY|O_CREAT|O_EXCL|O_BINARY, 0644)) == -1) { and now freshclam.exe works rig