Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
> Perhaps you should look into MailScanner and MailWatch. Mailscanner (package > for Suse available) will handle the interaction with spamassassin and clamd > (as well as other A/V solutions) and MailWatch provides a nice GUI for > quarantine and archive. Once set they just work. > > Rick > Th

Re: [clamav-users] FreshClam can't download database

2021-02-24 Thread Joel Esler (jesler) via clamav-users
You’re not sending “server-name” in your test there: echo | openssl s_client -connect database.clamav.net:443 -servername database.clamav.net | openssl x509 -text -noout > On Feb 24, 2021, at 5:05 PM, Royce Souther via clamav-users > wrote: > > It looks like the SSL cert for database.clamav

[clamav-users] FreshClam can't download database

2021-02-24 Thread Royce Souther via clamav-users
It looks like the SSL cert for database.clamav.net expired in October of last year. ClamAV update process started at Wed Feb 24 21:42:46 2021 daily database available for download (remote version: 26090) WARNING: Download failed (77) WARNING: Message: Problem with the SSL CA cert (path? access ri

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Rick Cooper
Perhaps you should look into MailScanner and MailWatch. Mailscanner (package for Suse available) will handle the interaction with spamassassin and clamd (as well as other A/V solutions) and MailWatch provides a nice GUI for quarantine and archive. Once set they just work. Rick Joe Acquisto-j4 wro

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Arjen de Korte via clamav-users
Citeren Matus UHLAR - fantomas : you can use amavisd-new, as milter (using amavisd-milter) or maybe postfix content_filter (but that's post-queue which means you can't reject it anymore and sending bounces is not safe) Postfix has also a smtpd_proxy_filter, which does basically the same as c

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Matus UHLAR - fantomas
This has probably drifted as far OT for this list as it should go. Welcome to the delights of running your own mail server. I've been doing it for over a quarter of a century, and I wouldn't have it any other way, but it ain't all roses. Perhaps you could share with us why you feel the need to d

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 24 Feb 2021, Joe Acquisto-j4 wrote: ... limited familiarity ... Of course. It all takes time and neurone cycles. There's a simple-minded but reasonable view of the milter API at https://howto.lintel.in/what-is-milter/ which has a useful diagram although it's inaccurate.

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Grant Taylor via clamav-users
On 2/24/21 9:47 AM, Joe Acquisto-j4 wrote: Back OT, my post was about dealing with items that have already been processed and are in the posfix HOLD queue, per the action of clamav-milter, waiting for disposition in some way. Hypothetically, a milter, such as clamav-milter, could say: ``` Thi

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Grant Taylor via clamav-users
On 2/24/21 9:56 AM, Joe Acquisto-j4 wrote: Thanks. Workable. *nod* Ah. Well I did not mean to suggest the milter should "manage" the postfix queue at all, but could alter any "directive" as to disposition. The log messages I noticed, for "infected" mail (/var/log/mail) seem to suggest p

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
> On 2/24/21 6:26 AM, Joe Acquisto-j4 wrote: >> For now I will settle on a cron job script that peeks at the hold queue >> every so often and alerts someone (me) with an alert. > > *nod*nod* > > I have a daily cron job that runs a script which shows me: > >- Number of messages which are:

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
. . . > This has probably drifted as far OT for this list as it should go. > Welcome to the delights of running your own mail server. I've been > doing it for over a quarter of a century, and I wouldn't have it any > other way, but it ain't all roses. Perhaps you could share with us > why you fee

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Grant Taylor via clamav-users
On 2/24/21 6:26 AM, Joe Acquisto-j4 wrote: For now I will settle on a cron job script that peeks at the hold queue every so often and alerts someone (me) with an alert. *nod*nod* I have a daily cron job that runs a script which shows me: - Number of messages which are: - Normally queue

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 24 Feb 2021, Joe Acquisto-j4 wrote: I tend to agree with the "NO" votes. But, in the postfix "FILTER_README" the author(s) suggest it is not a great idea, these days, to send the email back to the sender, as the sender is very likely to be "spoofed". You need to understand t

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread Joe Acquisto-j4
>> Citeren Joe Acquisto-j4 : >> >>> Another question from the peanut gallery (a kids TV show reference from >>> the 1950's. Which should tell you something) . . . >>> >>> With a local test email EICAR is detected and fed back to postfix. >>> Ends up in hold queue as you would expect as >>> per

Re: [clamav-users] signature exists, but not detecting

2021-02-24 Thread G.W. Haywood via clamav-users
Hi there, On Tue, 23 Feb 2021, Al Varnell via clamav-users wrote: On Tue, Feb 23, 2021 at 19:12 PM, Ron Seguin via clamav-users wrote: Yes, my apologies. It was VirusTotal. Here's the link. Thanks. I noted that the scan was from six months ago, so I reanalyzed the file and see that ClamA

Re: [clamav-users] Clamav-milter finds postive, goes to hold queue

2021-02-24 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 24 Feb 2021, Andrew C Aitchison via clamav-users wrote: On Tue, 23 Feb 2021, Joe Acquisto-j4 wrote: Wondering now what people generally do with infected mail? That is, is there a general consensus? Would it be "safe" (for the systems) to simply send the mail through, to th