RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Diego d'Ambra
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Tim Howell > Sent: 9. november 2004 23:55 > To: ClamAV users ML > Subject: RE: [Clamav-users] ClamAV and Exchange mailboxes... > > Jason Haar wrote: > > > > No - you can do it. If you as

Re: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Jason Haar
Tim Howell wrote: How do you grant an account full access to all mailboxes? --TWH one at a time Obviously there will be some tool you can get/buy that will allow you to automate it, but via the "Great GUI" - one at a time... :-( Jason ___ http://

[Clamav-users] Return value "72" from clamd <-> mimedefang.pl [help?]

2004-11-09 Thread gfb
Tue Nov 9 22:03:30 EST 2004 Hello, I am looking for some assistance in tracking down a failure of clamd after an upgrade to ClamAV 0.80/582/. Interactively, clamscan and clamd appear to function normally and correctly but when called from MIMEDefang-filter (mimedefang.pl) , clamd returns an erro

RE: [Clamav-users] MailFollowUrls only available in mbox scan ?

2004-11-09 Thread zbuckholz
What is going to be involved with creating another function such as "FollowUrls". Can the stream pass a pointer to such a function?   Thanks zack   Zachary Buckholz - Linux Administrator - GoDaddy.com14455 North Hayden Road, Suite 226, Scottsdale, AZ 85260480-505-8871 x4322 - 480-215-5218 (Cell) --

Re: [Clamav-users] Bofra?

2004-11-09 Thread Tomasz Kojm
On Tue, 9 Nov 2004 14:54:05 -0500 "Kevin Hanser" <[EMAIL PROTECTED]> wrote: > I read a security blurb from Watchguard today that mentions a new > virus dubbed Bofra.A. I looked thru the mailing list and haven't seen > any mention of it yet... Does ClamAV catch this one yet? -> clamav-virusdb ar

RE: [Clamav-users] Building clamav, freshclam dns error

2004-11-09 Thread Jon Dossey
[EMAIL PROTECTED] clamav-devel]$ uname -a Linux hostname 2.4.25 #2 Wed Mar 17 17:03:25 CST 2004 i686 i686 i386 GNU/Linux I want to say this was originally a Redhat 8 machine, judging from the following output: [EMAIL PROTECTED] clamav-devel]# gcc -v gcc version 3.2 20020903 (Red Hat Linux 8.0 3

Re: [Clamav-users] Building clamav, freshclam dns error

2004-11-09 Thread Matt
Jon Dossey wrote: > Yes - I searched the archives, and it was definitely helpful. Trying to > build clamav 0.80, already have .70rc1 installed. Which O.S? Matt p.s: Please post in plaintext. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clam

[Clamav-users] Building clamav, freshclam dns error

2004-11-09 Thread Jon Dossey
Yes – I searched the archives, and it was definitely helpful.  Trying to build clamav 0.80, already have .70rc1 installed.    [EMAIL PROTECTED] clamav-0.80]# clamd --version clamd / ClamAV version 0.70-rc   Now, onto the problem.  Here’s how I’m configuring it:   $ ./configure –sysc

Re: [Clamav-users] clamav-milter logs

2004-11-09 Thread Matt
Internet Helpdesk wrote: > > check your quarantine dir /clamquar and ensure it as well as any sub > > directories have correct permissions. > Did it before. They're fine. Parent directory perms? Matt ___ http://lists.clamav.net/cgi-bin/mailman/listi

[Clamav-users] How to restore false virus ?

2004-11-09 Thread BK
Hello, I have maybe a stupid question but how can I restore mail that is false virus positives and is saved in quarantine-dir ? Thanx. BK ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] clamav-milter logs

2004-11-09 Thread Internet Helpdesk
check your quarantine dir /clamquar and ensure it as well as any sub directories have correct permissions. Did it before. They're fine. I would look in the clamd.conf file at specifically these settings: LogFile /var/adm/clamd/clamd.log TemporaryDirectory /tmp Those are fine too. Any other ideas

Re: [Clamav-users] MailFollowUrls only available in mbox scan ?

2004-11-09 Thread Nigel Horne
On Tuesday 09 Nov 2004 10:26 pm, [EMAIL PROTECTED] wrote: > I was trying to get MailFollowUrls to work today on a test server and > had some issues. After looking at the clamav-0.80 source code I think > that it's only possible to use this feature when you have ScanMail > enabled? Is this correct?

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Tim Howell
Jason Haar wrote: > No - you can do it. If you assign account "DOM\imapadmin" to have > full access rights to everyone's mailboxes, then you can login via > IMAP as "DOM/imapadmin/mailbox_alias" . Yes, it has to be "/", and > "mailbox_alias" is the alias associated with a mailbox - typically > e

Re: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Jason Haar
[EMAIL PROTECTED] wrote: Doesn't that idea forces you to have everyone's password to connect via the IMAP server? That would tear it. Exchange does allow you to declare administrative accounts with complete access to all mailboxes. But I don't know enough about IMAP to know if you can log in

[Clamav-users] MailFollowUrls only available in mbox scan ?

2004-11-09 Thread zbuckholz
I was trying to get MailFollowUrls to work today on a test server and had some issues. After looking at the clamav-0.80 source code I think that it's only possible to use this feature when you have ScanMail enabled? Is this correct? Currently I am using the clamav daemon that listens on a port.

[Clamav-users] clamd dies

2004-11-09 Thread paul
Hi all, new to the list and not seeing a resolve in the archives. Thought perhaps you could help. I am running ClamAV 0.80 on FreeBSD 5.2.1. I did a pretty "standard setup" with MIMEDefang, Sendmail, and Spamassassin. I set up clamd to run as mailnull (which is the user that mimedefang and sendmai

[Clamav-users] Foreground problems under Cygwin

2004-11-09 Thread René Berber
Hi all, Has anyone seen that clamd under MS Windows doesn't work if you have the Foreground option set? My setup is Windows XP Pro / Cygwin (snapshot Oct.20) / ClamAV 0.80 using the shared library. I'm trying to debug a problem specific to this setup, the large amount of UDP sockets left open, w

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Andrej Trobentar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Gourley wrote: | Andrej Trobentar wrote: |> Put |> |> "exec /usr/local/bin/softlimit -a 4000 /usr/local/sbin/clamd" |> |> and |> |> "exec /usr/local/bin/multilog t s100 n20 /var/log/clamd" |> |> in your startups files (without setuidgid). W

[Clamav-users] Daemontools and Clamav

2004-11-09 Thread Jorge Valdes
Hi all, I have recently seen on this list that Matt Gourly has had problems getting clamd to start correctly under daemontools and log to the specified directory. The following has been tested (by me) to work on a RedHat 7.3 installation: /etc/clamd.conf: --BEGIN-- LogFile /dev/stderr LocalSocke

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Matthew.van.Eerde
Samuel Benzaquen wrote: Hmmm... Get a list of mailboxes via LDAP Connect to each mailbox in turn using Mail::IMAPClient Walk through > > Doesn't that idea forces you to have everyone's password to connect > via the IMAP server? That would tear it. Exchange does allow you to declare

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Matt Gourley
Andrej Trobentar wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Macdougall wrote: | /service/clamd/run: | | #!/bin/sh | exec 2>&1 | exec /usr/local/bin/softlimit -a 4000 \ /usr/local/bin/setuidgid qscand /usr/local/sbin/clamd | | | /service/clamd/log/run: | | #!/bin/sh | exec /usr/lo

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Tim Howell > Sent: Tuesday, November 09, 2004 3:44 PM > > > [EMAIL PROTECTED] wrote: > > On Mon, 8 Nov 2004 [EMAIL PROTECTED] wrote: > > > >> Tim Howell wrote: > >>> Have any of you thought of what it would

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Andrej Trobentar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Macdougall wrote: | /service/clamd/run: | | #!/bin/sh | exec 2>&1 | exec /usr/local/bin/softlimit -a 4000 \ /usr/local/bin/setuidgid qscand /usr/local/sbin/clamd | | | /service/clamd/log/run: | | #!/bin/sh | exec /usr/local/bin/setuidgid qscand

Re: [Clamav-users] clamav-milter logs

2004-11-09 Thread Ken Jones
> Drat! > > In my logs I've noticed lots of messages like: > --> Nov 9 13:45:25 mail clamd[4635]: /clamquar/041109/msg.FsV5ns: Unable > to > open file or directory ERROR <-- check your quarantine dir /clamquar and ensure it as well as any sub directories have correct permissions. I would look in

[Clamav-users] clamav-milter logs

2004-11-09 Thread Internet Helpdesk
Drat! In my logs I've noticed lots of messages like: --> Nov 9 13:45:25 mail clamd[4635]: /clamquar/041109/msg.FsV5ns: Unable to open file or directory ERROR <-- Nov 9 13:45:27 mail clamd[4635]: /clamquar/041109/msg.W4MIYF: Worm.SomeFool.P FOUND Nov 9 13:45:27 mail clamav-milter[1021

[Clamav-users] Bofra?

2004-11-09 Thread Kevin Hanser
I read a security blurb from Watchguard today that mentions a new virus dubbed Bofra.A. I looked thru the mailing list and haven't seen any mention of it yet... Does ClamAV catch this one yet? Here's the article where I got the info from: http://www.watchguard.com/RSS/showarticle.aspx?pack=RSS.B

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Tim Howell
[EMAIL PROTECTED] wrote: > On Mon, 8 Nov 2004 [EMAIL PROTECTED] wrote: > >> Tim Howell wrote: >>> Have any of you thought of what it would take to use Clam to scan >>> mailboxes stored on an Exchange server? >> >> Hmmm... >> Get a list of mailboxes via LDAP >> Connect to each mailbox in turn usin

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Rick Macdougall
Matt Gourley wrote: Logfile /dev/stdout (or stderr) in clamd.conf I tried that. If I do that, I get either: ERROR: Problem with internal logger. Please check the permissions on the /dev/stdout file. ERROR: Can't open /dev/stdout in append mode (check permissions!). or the same for /dev/stderr. R

Re: [Clamav-users] clamav-milter max-children?

2004-11-09 Thread Internet Helpdesk
Do you have MaxThreads set in clamd.conf? Yes. Sorry, I also wasn't looking at a recent man page for clamav-milter. I now see the reference under --max-children -Troy ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] delay scanning where a new virus occurs

2004-11-09 Thread clamav
On Tue, 9 Nov 2004 [EMAIL PROTECTED] wrote: > i d like to know if it s possible with clamav to delay scanning new emails > with attachments for 6 hours in case of the discovery of a new virus. Wow, you are a brave soul. If our customers were delayed by 6 hours they would go elsewhere. A scanni

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Matt Gourley
Rick Macdougall wrote: Matt Gourley wrote: Rick Macdougall wrote: Matt Gourley wrote: clamd.conf: FixStaleSocket Foreground LocalSocket /tmp/clamd LogVerbose MaxThreads 20 ScanArchive ScanHTML ScanMail User qscand Hi, Logfile /dev/stdout (or stderr) in clamd.conf I tried that. If I do that, I

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Rick Macdougall
Matt Gourley wrote: Rick Macdougall wrote: Matt Gourley wrote: clamd.conf: FixStaleSocket Foreground LocalSocket /tmp/clamd LogVerbose MaxThreads 20 ScanArchive ScanHTML ScanMail User qscand Hi, Logfile /dev/stdout (or stderr) in clamd.conf I tried that. If I do that, I get either: ERROR: Probl

Re: [Clamav-users] clamav-milter max-children?

2004-11-09 Thread Nigel Horne
On Tuesday 09 Nov 2004 6:33 pm, Internet Helpdesk wrote: > In my logs I'm seeing messages like: > hit max-children limit (40 >= 40): waiting for some to exit > > This occurs whether or not I specify --max-children=0 in the clamav-milter > command line or not. (normally not specified) Do you have

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Matt Gourley
Rick Macdougall wrote: Matt Gourley wrote: I've just installed ClamAV 0.80 onto a new mail server. It's running well through daemontools, as the test EICAR virus I send it through qmail-scanner is caught, marked and quarantined. However, I cannot get it to log to /var/log/clamd. /service/cla

Re: [Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Rick Macdougall
Matt Gourley wrote: I've just installed ClamAV 0.80 onto a new mail server. It's running well through daemontools, as the test EICAR virus I send it through qmail-scanner is caught, marked and quarantined. However, I cannot get it to log to /var/log/clamd. /service/clamd/run: #!/bin/sh exec

[Clamav-users] clamav-milter max-children?

2004-11-09 Thread Internet Helpdesk
In my logs I'm seeing messages like: hit max-children limit (40 >= 40): waiting for some to exit This occurs whether or not I specify --max-children=0 in the clamav-milter command line or not. (normally not specified) Clamav-milter 0.80q, Linux kernel 2.4.22 Did I miss something? -Troy ___

[Clamav-users] ClamAV 0.80, daemontools and logging

2004-11-09 Thread Matt Gourley
I've just installed ClamAV 0.80 onto a new mail server. It's running well through daemontools, as the test EICAR virus I send it through qmail-scanner is caught, marked and quarantined. However, I cannot get it to log to /var/log/clamd. /service/clamd/run: #!/bin/sh exec 2>&1 exec /usr/local/

[Clamav-users] Issue with CVS / Nightly snapshot

2004-11-09 Thread Ken Jones
g the clam version / database version. X-Virus-Scanned: ClamAV version devel-20041109, clamav-milter version 0.80q on host - - Ken - -- Ken Jones [EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (SunOS) iD8DBQFBkQxGhmzY3eSPw9ERAhfvAJ0WHt8G1OiizrF0OBiV93Yec4

Re: [Clamav-users] Problems with clamav-milter

2004-11-09 Thread Joacim Ekroth
the same error being logged. After installing 80q, from the CVS source, the problems are resolved. Thanks ! - Ken Yay! I also upgraded to ClamAV version devel-20041109, clamav-milter version 0.80q. It works just fine as far as I can tell right now, even on my crappy old i586 server-wannabe. (had

[Clamav-users] ClamAV Milter and SHUT_RD, SHUT_WR

2004-11-09 Thread Dug Stokes
I've just spent the last couple of hours trying to compile just the ClamAV-Milter, and was having errors like; clamav-milter.c: In function `main': clamav-milter.c:1175: `SHUT_RD' undeclared (first use this function) clamav-milter.c:1175: (Each undeclared identifier is reported only once clamav-mi

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-09 Thread Jason Frisvold
> -Original Message- > From: Tomasz Kojm [mailto:[EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clamav and the CR Vulnerability > > > In 0.80 --mbox is enabled by default, and --no-mail disables it. > There's no --mail switch, though. I thought it was --mbox, but there was no --mbox sw

Re: [Clamav-users] delay scanning where a new virus occurs

2004-11-09 Thread Dave Ewart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday, 09.11.2004 at 11:20 +0100, [EMAIL PROTECTED] wrote: > i d like to know if it s possible with clamav to delay scanning new emails > with attachments for 6 hours in case of the discovery of a new virus. > > That would be for not being attac

[Clamav-users] delay scanning where a new virus occurs

2004-11-09 Thread zdust
hi i d like to know if it s possible with clamav to delay scanning new emails with attachments for 6 hours in case of the discovery of a new virus. That would be for not being attacked between the time the virus is found and the updated signature clamav is there thx all (by the way is there s