Re: [Clamav-users] FRESHCLAM WARNING

2005-02-03 Thread Dennis Peterson
[EMAIL PROTECTED] said: > Please help me !!! > Thanx You need to upgrade to .81. Not a big deal. configure, make, make install. How hard could it be? At least you got a warning. All those Winclam users out there are out of the loop. dp ___ http://lis

Re: [Clamav-users] FRESHCLAM WARNING

2005-02-03 Thread List
[EMAIL PROTECTED] root]#freshclam --version ClamAV 0.81rc1/700/Fri Feb 4 06:33:15 2005 [EMAIL PROTECTED] root]#clamd --version ClamAV 0.81rc1/700/Fri Feb 4 06:33:15 2005 [EMAIL PROTECTED] root]#clamdscan --version ClamAV 0.81rc1/700/Fri Feb 4 06:33:15 2005 [EMAIL PROTECTED] root]#clamscan --version

Re: [Clamav-users] FRESHCLAM WARNING

2005-02-03 Thread alan premselaar
[EMAIL PROTECTED] wrote: Please help me !!! Thanx [EMAIL PROTECTED] root]#freshclam ClamAV update process started at Fri Feb 4 11:23:33 2005 main.cvd is up to date (version: 29, sigs: 29086, f-level: 3, builder: tomek) daily.cvd is up to date (version: 700, sigs: 1256, f-level: 4, builder:ccordes)

[Clamav-users] FRESHCLAM WARNING

2005-02-03 Thread christopher
Please help me !!! Thanx [EMAIL PROTECTED] root]#freshclam ClamAV update process started at Fri Feb 4 11:23:33 2005 main.cvd is up to date (version: 29, sigs: 29086, f-level: 3, builder: tomek) daily.cvd is up to date (version: 700, sigs: 1256, f-level: 4, builder:ccordes) WARNING: Your ClamAV in

Re: [Clamav-users] Sending mail when virus is found

2005-02-03 Thread Bob Hutchinson
On Thursday 03 Feb 2005 22:24, Olaf wrote: > Rob MacGregor schrieb: > > Well, first off, given that most email borne viruses forge the sender > > address, sending a "we blocked a virus from you" email is antisocial. > > This is true, no question about it. But I am also interested in a "how > to wri

[Clamav-users] Re: ClamSMTP in Transparent Proxy Mode

2005-02-03 Thread René Berber
Mason, Chris, VF UK - Technology (TS) wrote: [snip] This is off-topic... but interesting. Sorry, I thought this list was regarding clamsmtp as well. Clamsmtp uses clamav, but setting 3rd party software is not really the point of this list, there are many 3rd party packages it would be very diffi

Re: [Clamav-users] Sending mail when virus is found

2005-02-03 Thread Terry Hickey
On 3 Feb 2005 at 23:24, Olaf wrote: > Rob MacGregor schrieb: > > Well, first off, given that most email borne viruses forge the > > sender address, sending a "we blocked a virus from you" email is > > antisocial. > > This is true, no question about it. But I am also interested in a "how > to wr

Re: [Clamav-users] Sending mail when virus is found

2005-02-03 Thread Olaf
Rob MacGregor schrieb: Well, first off, given that most email borne viruses forge the sender address, sending a "we blocked a virus from you" email is antisocial. This is true, no question about it. But I am also interested in a "how to write email notifiation scripts". At my site, I would like to

RE: [Clamav-users] Re: ClamSMTP in Transparent Proxy Mode

2005-02-03 Thread Mason, Chris, VF UK - Technology (TS)
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > René Berber > Sent: 03 February 2005 21:20 > To: clamav-users@lists.clamav.net > Subject: [Clamav-users] Re: ClamSMTP in Transparent Proxy Mode > > Mason, Chris, VF UK - Technology (TS) wrote: >

RE: [Clamav-users] Virus Name

2005-02-03 Thread Julian Mehnle
Jason Frisvold [EMAIL PROTECTED] wrote: > If this trojan were to be widespread, then RBL's could become virtually > non-effective. Or, the RBL's could start putting legitimate hosts in > the list. There is no such thing as a "legitimate host". There are only hosts that send spam and viruses, and

[Clamav-users] Re: ClamSMTP in Transparent Proxy Mode

2005-02-03 Thread René Berber
Mason, Chris, VF UK - Technology (TS) wrote: Hi, Hello. I am trying to setup ClamSMTP in Transparent Proxy mode, but running into a problem. This is off-topic... but interesting. I have got a Client setup to use machine X as my SMTP Proxy which gets sent through a NetScreen 5 FW which does a destin

[Clamav-users] Re: unable to start clamav-milter, weird error.

2005-02-03 Thread Matias Lopez Bergero
Ken Jones wrote: Hello, I'm testing Clamav 0.81 for use with Sendmail 8.12 and update my current Clamav 0.80 installation, but I can't start clamav-milter. Wen I run clamav-milter like this: clamav-milter -D -d -e -H -o -N /var/run/clamav/clamav-milter.sock I get this error: Feb 3 19:04:58 probe c

Re: [Clamav-users] unable to start clamav-milter, weird error.

2005-02-03 Thread Ken Jones
> Hello, > > I'm testing Clamav 0.81 for use with Sendmail 8.12 and update my current > Clamav 0.80 installation, but I can't start clamav-milter. > > Wen I run clamav-milter like this: > clamav-milter -D -d -e -H -o -N /var/run/clamav/clamav-milter.sock > > I get this error: > > Feb 3 19:04:58 p

[Clamav-users] unable to start clamav-milter, weird error.

2005-02-03 Thread Matias Lopez Bergero
Hello, I'm testing Clamav 0.81 for use with Sendmail 8.12 and update my current Clamav 0.80 installation, but I can't start clamav-milter. Wen I run clamav-milter like this: clamav-milter -D -d -e -H -o -N /var/run/clamav/clamav-milter.sock I get this error: Feb 3 19:04:58 probe clamav-milter[32

Re: [Clamav-users] Virus Name

2005-02-03 Thread Brian Morrison
On Thu, 3 Feb 2005 19:25:39 + in [EMAIL PROTECTED] Matt <[EMAIL PROTECTED]> wrote: > > You could scan through the added signatures in the clamav-virusdb > > list and see what's there. I have not done so myself but there have > > been a fair few updates in the last few days. > > > > Not

Re: [Clamav-users] Virus Name

2005-02-03 Thread Matt
Brian Morrison wrote: > > > Seems like any other sort of trojan to me, I can't see why > > > the signature > > > would be different because the zombie is using the ISP's smarthost > > > for outgoing mail. Of course ClamAV will be able to detect such a > > > thing... > > > > Wow.. I guess

Re: [Clamav-users] Virus Name

2005-02-03 Thread Brian Morrison
On Thu, 3 Feb 2005 13:44:50 -0500 in [EMAIL PROTECTED] "Jason Frisvold" <[EMAIL PROTECTED]> wrote: > > Seems like any other sort of trojan to me, I can't see why > > the signature > > would be different because the zombie is using the ISP's smarthost > > for outgoing mail. Of course ClamAV wi

RE: [Clamav-users] Virus Name

2005-02-03 Thread Jason Frisvold
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Brian Morrison > Subject: Re: [Clamav-users] Virus Name > > > Seems like any other sort of trojan to me, I can't see why > the signature > would be different because the zombie is using the ISP's

Re: [Clamav-users] Virus Name

2005-02-03 Thread Brian Morrison
On Thu, 03 Feb 2005 10:05:39 -0800 in [EMAIL PROTECTED] Kelson <[EMAIL PROTECTED]> wrote: > Brian Morrison wrote: > > Well two things come to mind. It isn't ClamAV's job to block spam, > > only viruses and immediately identifiable deceptions like phishing > > attacks. > > ...like a trojan spread

Re: [Clamav-users] Virus Name

2005-02-03 Thread Kelson
Brian Morrison wrote: Well two things come to mind. It isn't ClamAV's job to block spam, only viruses and immediately identifiable deceptions like phishing attacks. ...like a trojan spread by email that, after installing itself, serves as a spam proxy? Secondly, the only clue about the path taken

Re: [Clamav-users] Virus Name

2005-02-03 Thread Brian Morrison
On Thu, 3 Feb 2005 09:01:42 -0500 in [EMAIL PROTECTED] "Jason Frisvold" <[EMAIL PROTECTED]> wrote: > There is an article on zdnet regarding a new type of trojan that > uses an ISP's mailserver to send spam. I'm not at all > interested in getting into a discussion regarding this.

Re: [Clamav-users] Sending mail when virus is found

2005-02-03 Thread Rob MacGregor
On Thu, 3 Feb 2005 17:45:06 +0100 (CET), Maarten <[EMAIL PROTECTED]> wrote: > Hey, > > Can someone explain me how I can configure my machine to send an e-mail > when a virus is found? Because now he is rejecting it without notice. Well, first off, given that most email borne viruses forge the sen

RE: [Clamav-users] Virus Name

2005-02-03 Thread Jason Frisvold
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Randal, Phil > Subject: RE: [Clamav-users] Virus Name > > > Look at the thread on > http://news.gmane.org/gmane.comp.security.virus.clamav.user entitled > "RAR Module Failure". ClamAV supports RAR

[Clamav-users] ClamSMTP in Transparent Proxy Mode

2005-02-03 Thread Mason, Chris, VF UK - Technology (TS)
Hi, I am trying to setup ClamSMTP in Transparent Proxy mode, but running into a problem. I have got a Client setup to use machine X as my SMTP Proxy which gets sent through a NetScreen 5 FW which does a destination NAT to change the IP to Y.Y.Y.Y:10025 (my ClamSMTP machine). In mail.log I have th

[Clamav-users] pop toaster update

2005-02-03 Thread Bob Hutchinson
The pop toaster at http://shupp.org/toaster/ now supports clamav-0.81 This includes patches for daemontools multilog support. This implementation uses simscan from inter7.com Enjoy -- - Bob Hutchinson Midwales dot com - _

[Clamav-users] Sending mail when virus is found

2005-02-03 Thread Maarten
Hey, Can someone explain me how I can configure my machine to send an e-mail when a virus is found? Because now he is rejecting it without notice. Thanx Maarten ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

RE: [Clamav-users] Virus Name

2005-02-03 Thread Randal, Phil
Look at the thread on http://news.gmane.org/gmane.comp.security.virus.clamav.user entitled "RAR Module Failure". ClamAV supports RAR 2 and not RAR 3 format archives. Cheers, Phil Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: [EMAIL

Re: [Clamav-users] installing on fedora1

2005-02-03 Thread Brian Morrison
On Thu, 3 Feb 2005 09:20:14 -0500 in [EMAIL PROTECTED] Bowie Bailey <[EMAIL PROTECTED]> wrote: > Interesting. That may solve my problem as well. What are the > consequences of doing this? zlib-1.2.2.2 must have been specified > for a reason... Yes, because there is a bug in zlib-1.2.x earl

Re: [Clamav-users] patch for freshclam 0.81 for "Malformed CVD header detected" pb

2005-02-03 Thread Tomasz Kojm
On 3 Feb 2005 11:11:05 +0100 "didier.georgieff" <[EMAIL PROTECTED]> wrote: > Hello, > > For freshclam 0.81 and http conexion (behind a proxy) you get this > error. ...only when using --no-dns -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.

[Clamav-users] clamav-milter error: accept() returned invalid socket (Result too large)

2005-02-03 Thread Hazard
Hello clamav-users, first sorry for my poor english :), well, I have FreeBSD 5.3-RELEASE, clamav 0.81 stable and sendmail 8.13.3, clamd starts with local socket, clamav-milter starts over it with inet:3311 socket, then I configure sendmails (8.12.11,

RE: [Clamav-users] installing on fedora1

2005-02-03 Thread Bowie Bailey
From: Tim Rupp [mailto:[EMAIL PROTECTED] > > jijo wrote: > > how can I install clamav0.81.2 on fedora core1 by using the > > rpms I go through tht pdf documents to install the minum > > recodmaedation that is specified in clamav doc but it is asking > > for new zlib 1.2.2.2 and I tryied to update

[Clamav-users] Virus Name

2005-02-03 Thread Jason Frisvold
Hi all, There is an article on zdnet regarding a new type of trojan that uses an ISP's mailserver to send spam. I'm not at all interested in getting into a discussion regarding this.. What I am interested in is to know if anyone has seen this in the wild, and whether or not ClamAV cur

[Clamav-users] patch for freshclam 0.81 for "Malformed CVD header detected" pb

2005-02-03 Thread didier.georgieff
Hello, For freshclam 0.81 and http conexion (behind a proxy) you get this error. Reading CVD header (main.cvd): ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from db.fr.clamav.net Digging thru the CVS this problem is corrected, and this is a small patch to help those wh

Re: [Clamav-users] update

2005-02-03 Thread Krištof Petr
jijo wrote: if any one know how to install clamav0.81.2 on fedora core1 by using RPM packages [..] is any one have idea to solve this prblm .. thanks There is several ways, how to do it. You can go to some repozitory (for example crash.fce.vutbr.cz), click through directory structure until yo

AW: [Clamav-users] update

2005-02-03 Thread Dörfler Andreas
please stay on one post and dont make multible with the same problem ! if you got problems with the rpms, download source and compile it if you get problems with zlib version read the output how to ignore the versioncheck configure --options make make install greetings andy >-Ursprüngliche N

[Clamav-users] update

2005-02-03 Thread jijo
if any one know how to install clamav0.81.2 on fedora core1 by using RPM packages i found 4 rpms in the site and downloaded and tryed to install i created one group clamav and one user then i downloded the rpm key then i try to install by using the rpms .but it wants zlib 1.2.2.1 i try to update by