Julio wrote:
> I have set clamav to scan incoming mail, and for efficiency purposes
> I have decided to use the daemon.
...
> d) Using clamscan instead of the daemon will be less efficient?
The daemon should be started at system bootup. It will take care of starting
additional daemonic threads
Hi,
I am a newbie clam user.
I have set clamav to scan incoming mail, and for efficiency purposes I have
decided to use the daemon.
When using "top" to list running processes I see that
1) clamd is listed twice and using 14M of memory each
2) whenever a mail is processed a new process starts, term
If you chose the LocalSocket method of communicating with clamd, you
ca use a very cool piece of software called socat to send commands to
clamd. You can read about it here: http://www.dest-unreach.org/socat/.
Read the instructions on how to compile it, and then do:
socat - /tmp/clamd (
Try submitting the infected file to http://virusscan.jotti.org and
http://www.virustotal.com and see if any of their scanners detect it.
Thank for all the answers, I found that only clamav on July 12th included
that signature, but now, where can I find information about the associated
risks?
On Tuesday 26 Jul 2005 16:43, Ken Jones wrote:
> On Tue, July 26, 2005 10:35, Bob Hutchinson wrote:
> > On Tuesday 26 Jul 2005 13:03, Daniel J McDonald wrote:
> >> On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote:
> >>> How can I make sure that my clamav protection working correctly ?
> >>
> >> ht
Steven Spence wrote:
Diego d'Ambra wrote:
Steven Spence wrote:
Or you can just edit
/var/spool/qmailscan/qmail-scanner-queue-version.txt
with the correct version. I am not quite sure why qmail-scanner just
doesn't pull the version from the clamd binary instead of a text file.
Performan
Steven Spence wrote:
Diego d'Ambra wrote:
Steven Spence wrote:
Or you can just edit
/var/spool/qmailscan/qmail-scanner-queue-version.txt
with the correct version. I am not quite sure why qmail-scanner just
doesn't pull the version from the clamd binary instead of a text file.
Performan
On Tue, July 26, 2005 10:35, Bob Hutchinson wrote:
> On Tuesday 26 Jul 2005 13:03, Daniel J McDonald wrote:
>
>> On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote:
>>
>>> How can I make sure that my clamav protection working correctly ?
>>>
>>
>> http://www.webmail.us/testvirus
>>
>>
>> That sends
On Tuesday 26 Jul 2005 13:03, Daniel J McDonald wrote:
> On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote:
> > How can I make sure that my clamav protection working correctly ?
>
> http://www.webmail.us/testvirus
>
> That sends 30 or so variations on the eicar virus to your mail system.
> There ar
Gerard wrote:
> When I issue the command as root:
>
> clamd PING
That doesn't work. PING is not a command-line argument.
If you telnet TO THE SOCKET [1], then write "PING\n" to the socket, you should
receive "PONG\n" from the socket.
[1]Yes, on some systems you really can telnet to a socket.
Diego d'Ambra wrote:
Steven Spence wrote:
Or you can just edit /var/spool/qmailscan/qmail-scanner-queue-version.txt
with the correct version. I am not quite sure why qmail-scanner just
doesn't pull the version from the clamd binary instead of a text file.
Performance?
Qmail-scanner proba
Erich Titl <[EMAIL PROTECTED]> writes:
> I used to run clamav-milter without --external under 0.85. After
> upgrading to 0.86.2 I see an error --timeout must not be given when
> --external is not given. There is no such thing as timeout in my config
> so this is really weird. The only way getting
On Tue, 26 Jul 2005, Erich Titl wrote:
I used to run clamav-milter without --external under 0.85. After
upgrading to 0.86.2 I see an error --timeout must not be given when
--external is not given. There is no such thing as timeout in my config
so this is really weird. The only way getting rid of
On Tue, 2005-07-26 at 08:52 -0500, Pablo Chamorro C. wrote:
> I installed clamwin under windows 2000 and it found a file infected with
> Trojan.Briss-1 but looking up in
> http://www.rainingfrogs.co.uk/index.orig.php?search=num&vid=97961 I'm
> noting that only clamav detect that virus.
>
> How
> Hi Folks
>
> I used to run clamav-milter without --external under 0.85. After
> upgrading to 0.86.2 I see an error --timeout must not be given when
> --external is not given. There is no such thing as timeout in my config
> so this is really weird. The only way getting rid of this was to specify
Pablo Chamorro C. said
>
> I installed clamwin under windows 2000 and it found a file
> infected with Trojan.Briss-1 but looking up in
> http://www.rainingfrogs.co.uk/index.orig.php?search=num&vid=97961
> I'm noting that only clamav detect that virus.
>
> How can we know that virus is really a v
On Tue, 2005-07-26 at 08:52 -0500, Pablo Chamorro C. wrote:
> I installed clamwin under windows 2000 and it found a file infected with
> Trojan.Briss-1 but looking up in
> http://www.rainingfrogs.co.uk/index.orig.php?search=num&vid=97961 I'm
> noting that only clamav detect that virus.
>
> How
Hi Folks
I used to run clamav-milter without --external under 0.85. After
upgrading to 0.86.2 I see an error --timeout must not be given when
--external is not given. There is no such thing as timeout in my config
so this is really weird. The only way getting rid of this was to specify
--external.
When I issue the command as root:
clamd PING
I receive the following error message:
ERROR: You must select server type (local/tcp).
I assume that I am suppose to change something in the clamd.conf file,
but I am unsure as to what.
--
Gerard E. Seibert
[EMAIL PROTECTED]
__
Steven Spence wrote:
Jim Maul wrote:
And in the latest emails i got I see this:
Received: (qmail 13171 invoked by uid 567); 26 Jul 2005 11:13:53 -
Received: from 83.195.210.114 by host1 (envelope-from
<[EMAIL PROTECTED]>, uid 502) with qmail-scanner-1.25
(clamdscan: 0.86.1/993. spamassa
Steven Spence wrote:
Or you can just edit /var/spool/qmailscan/qmail-scanner-queue-version.txt
with the correct version. I am not quite sure why qmail-scanner just
doesn't pull the version from the clamd binary instead of a text file.
Performance?
Best regards,
Diego d'Ambra
___
Jim Maul wrote:
And in the latest emails i got I see this:
Received: (qmail 13171 invoked by uid 567); 26 Jul 2005 11:13:53 -
Received: from 83.195.210.114 by host1 (envelope-from
<[EMAIL PROTECTED]>, uid 502) with qmail-scanner-1.25
(clamdscan: 0.86.1/993. spamassassin: 3.0.4.
Clear:RC:0
I installed clamwin under windows 2000 and it found a file infected with
Trojan.Briss-1 but looking up in
http://www.rainingfrogs.co.uk/index.orig.php?search=num&vid=97961 I'm
noting that only clamav detect that virus.
How can we know that virus is really a virus if any other antivirus
softwa
On Mon, Jul 25, 2005 at 12:33:37PM -0700, Christopher McCrory wrote:
> What are the chances of getting new version announcements to the 'users'
> list also? It seems easy and would save a lot of people the trouble of
I think it would be way better if the announce list, and/or possibly the
users l
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Mad Unix
> Sent: Tuesday, July 26, 2005 8:26 AM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] protection
>
>
> okay ... thats for the internet mail server, and what about a
> Intranet Mail server
>
> -Original Message-
> From: Mad Unix [mailto:[EMAIL PROTECTED]
> Sent: 26 July 2005 13:26
> To: ClamAV users ML
> Subject: Re: [Clamav-users] protection
>
>
> okay ... thats for the internet mail server, and what about a
> Intranet Mail server
> with local use only
Simplest way would b
On Tue, 2005-07-26 at 16:26 +0400, Mad Unix wrote:
> okay ... thats for the internet mail server, and what about a
> Intranet Mail server
> with local use only
>
go to eicar.org, grab http://eicar.org/download/eicar.com , and send
that file to your mailserver.
>
> Thanks
>
> On 7/26/05, Daniel
Thomas Booms wrote:
Hello all,
I've just upgraded from 0.86.1 to 0.86.2. The test tells me this:
freshclam -v
Current working dir is /usr/local/share/clamav
Max retries == 3
ClamAV update process started at Tue Jul 26 13:17:22 2005
Querying current.cvd.clamav.net
TTL: 900
Software version from
okay ... thats for the internet mail server, and what about a
Intranet Mail server
with local use only
Thanks
On 7/26/05, Daniel J McDonald <[EMAIL PROTECTED]> wrote:
> On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote:
> > How can I make sure that my clamav protection working correctly ?
>
>
On Tue, 2005-07-26 at 15:55 +0400, Mad Unix wrote:
> How can I make sure that my clamav protection working correctly ?
http://www.webmail.us/testvirus
That sends 30 or so variations on the eicar virus to your mail system.
There are two or three that should pass (I think it's 17 and 18, but it
has
- Original Message -
From: "Mad Unix" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, July 26, 2005 1:55 PM
Subject: [Clamav-users] protection
How can I make sure that my clamav protection working correctly ?
Thanks
___
http://lurker.clamav.net/list
Mad Unix wrote:
How can I make sure that my clamav protection working correctly ?
Use this site: http://www.webmail.us/testvirus
to send the Eicar test virus signature to your server.
--
Steve
___
http://lurker.clamav.net/list/clamav-users.html
How can I make sure that my clamav protection working correctly ?
Thanks
___
http://lurker.clamav.net/list/clamav-users.html
I am new to this . Can you guide me to remove old
version of clamav.
Thanks for support.
--- Rob MacGregor <[EMAIL PROTECTED]> wrote:
> On 17/07/05, ads nat <[EMAIL PROTECTED]> wrote:
> > Hi,
> > I have installed clamav-0.83 as per documentation
> and
> > it works fine for me.
> > Now i have in
On Tue, 2005-07-26 at 10:43 +0100, Brian Morrison wrote:
> On Tue, 26 Jul 2005 11:18:06 +0200 in
> [EMAIL PROTECTED] "Salvatore Basso"
> <[EMAIL PROTECTED]> wrote:
>
> > Hi, in the "binary packages and ports" I don't find rpm file for
> > version 0.86.2 (in particular for Fedora Core 2), but ther
Hello all,
I've just upgraded from 0.86.1 to 0.86.2. The test tells me this:
freshclam -v
Current working dir is /usr/local/share/clamav
Max retries == 3
ClamAV update process started at Tue Jul 26 13:17:22 2005
Querying current.cvd.clamav.net
TTL: 900
Software version from DNS: 0.86.2
main.cvd
> I am sure that this question has been asked before; however, I am unable
> to locate the answer I need.
>
> I am a new user of Clam. I have it installed on a FreeBSD 5.4 machine.
> Upon bootup, this message is displayed:
>
> /usr/local/sbin/clamav-milter: socket-addr
> (local:/var/run/clamav/clam
I am sure that this question has been asked before; however, I am unable
to locate the answer I need.
I am a new user of Clam. I have it installed on a FreeBSD 5.4 machine.
Upon bootup, this message is displayed:
/usr/local/sbin/clamav-milter: socket-addr (local:/var/run/clamav/clamav.sock)
does
On Tuesday 26 Jul 2005 04:19, [EMAIL PROTECTED] wrote:
> hello all
>
> how do i know if the incomming mail's are being scanned. i have 2 log file
> in
>
> /var/log/clamd.log
> and
> /var/log/freshclam.log
>
> when i do tail -f /var/log/clamd.log then following are the out put
>
> [EMAIL PROTECTED]
On Monday 25 Jul 2005 04:38, OpenMacNews wrote:
> hi luca,
>
> per your a0.86.2 announcement, i just ul'd & installed v0.86.2 on OSX
> 10.4.2; i had previously been running v0.86.1.
>
> after install, a 'freshclam' results in:
>
> ClamAV update process started at Sun Jul 24 19:38:48 2005
>
On Tue, 26 Jul 2005 11:18:06 +0200 in
[EMAIL PROTECTED] "Salvatore Basso"
<[EMAIL PROTECTED]> wrote:
> Hi, in the "binary packages and ports" I don't find rpm file for
> version 0.86.2 (in particular for Fedora Core 2), but there will be ??
> thanks.
Well, you could just download the new source
Hi, in the "binary packages and ports" I don't find rpm file for version
0.86.2 (in particular for Fedora Core 2), but there will be ??
thanks.
Salvatore.
---
[This E-mail scanned for viruses by Declude Virus]
___
http://lurker.clamav.net/list
hello all
how do i know if the incomming mail's are being scanned. i have 2 log file in
/var/log/clamd.log
and
/var/log/freshclam.log
when i do tail -f /var/log/clamd.log then following are the out put
[EMAIL PROTECTED] /]# tail -f /var/log/clamd.log
Archive: Recursion level limit set to 8.
Ar
43 matches
Mail list logo
