Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread Jason Haar
On Sun, May 16, 2004 at 09:19:51PM -0500, John Jolet wrote: > We, in fact, have smtp outbound blocked for ALL but our mail servers, for > that very reason. With the notable exception of our network monitoring box > and the 3 or 4 outbound smtp servers, nothing can send mail out without > passing t

RE: [Clamav-users] clamd dying: reasons

2004-05-16 Thread Rich
I would suggest to check the log for errors. Also you can use 'monit' monitor clamd, it can watch the mem usage as well as the clamd daemon. http://www.tildeslash.com/monit They have examples here; http://www.tildeslash.com/monit/examples.html#clamavd You can also use clamdwatch which is include

[Clamav-users] clamd dying: reasons

2004-05-16 Thread K. Shantanu
Hi, Are there any particular reasons why clamd might die all of sudden? It happens to me atleast once a week. And then I have to many a times remove the clamd file and restart clamd. And the worst part is that my messages starts bouncing if clamd dies stating that it cannot connect to clamd. What

Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread John Jolet
On Sun, May 16, 2004 at 05:41:11PM -0500, McKeever Chris wrote: > --- > Chris McKeever > If you want to reply directly to me, please use cgmckeever--at--prupref---dot---com > http://www.prupref.com > Prudential Preferred Properties > Chicago and Illinois Nort

Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread McKeever Chris
--- Chris McKeever If you want to reply directly to me, please use cgmckeever--at--prupref---dot---com http://www.prupref.com Prudential Preferred Properties Chicago and Illinois NorthShore Real Estate Experts On Sun, 16 May 2004 13:42 , Eric Becker <[EMAIL

Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread Steven P. Donegan
Eric Becker wrote: Well - in this case it was definitely from outside - and the >proxy I wrote and use passes all email, internal or external, >through clam and ?spam assassin and a bunch of custom rules... but thanks >:-) Well depending on the virus, it may be sending emails from it's own sm

Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread Eric Becker
>Well - in this case it was definitely from outside - and the >proxy I >wrote and use passes all email, internal or external, >through clam and ?spam assassin and a bunch of custom rules... but thanks >:-) Well depending on the virus, it may be sending emails from it's own smtp engine and not to

Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread Steven P. Donegan
McKeever Chris wrote: one thing that I noticed/learned was that if a users machines sends an email internally (ie a virus), it misses the clam-mail-gateway and goes right to the mailserver, hence avoiding clam (I have since denied all hosts to the mailserver other than the mail-gateway to stop thi

Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread McKeever Chris
one thing that I noticed/learned was that if a users machines sends an email internally (ie a virus), it misses the clam-mail-gateway and goes right to the mailserver, hence avoiding clam (I have since denied all hosts to the mailserver other than the mail-gateway to stop this)...so in a long-r

Re: [Clamav-users] One seems to have sneaked by W32.BEAGLE.X

2004-05-16 Thread Kevin Spicer
On Sun, 2004-05-16 at 02:26, Steven P. Donegan wrote: > This was a first for me - ClamAV has been - well about as perfect as any > software could be - today one sneaked by that Norton/Symantec caught. > I've only seen it twice recently.. One was a damaged Netsky/SomeFool that only Symantecs signa