John Rudd wrote:
> Luis Miguel R. wrote:
>> El Monday, 24 December del 2007 a las 10:55:51AM, Dennis Peterson escribió:
>>> Paul Kosinski wrote:
In December 2006, we were running ClamAV 0.88.7, and there were still
a fair number of "real" viruses being detected in inbound email. Now
G.W. Haywood wrote:
> Hi there,
>
> On Tue, 25 Dec 2007 Paul Kosinski wrote:
>
>> In December 2006, we were running ClamAV 0.88.7, and there were still
>> a fair number of "real" viruses being detected in inbound email. Now
>> running 0.91.2 and 0.92, there seem to be only phishing attempts, and
Block all mails from dynamic IP.
They are 99,99% spam.
No they aren't that "rule" causes quite a few of my customers a
headache, as the (linux) mailserver I often install sends the email
direct, irrespective of whether there Ip is "dynamic" or "static". Some
ISPs charge an arm and a leg for
At 07:12 07/10/2004, you wrote:
Hello;
Any GUI for Clamav...I mean for Linux ???
and for SMEserver (aka e-smith)
http://sme.swerts-knudsen.dk/index.html?frame=http%3A//sme.swerts-knudsen.dk/howtos/howto_22.htm
Cheers
Brian
--
Brian J Read
www.abandonmicrosoft.co.uk
www.theonlineorganiser.com
www.t
At 18:53 16/08/2004, Mike Robinson wrote:
Why not just do what I've been working on. Just set up a procmail rule
that runs freshclam whenever you get a message from the clamav-virusdb
list. It should work just as good as the clamav team sending you a
virusdb "push" every time the database is upda
At 14:57 27/01/2004, you wrote:
Brian Read wrote:
I am getting lots of these, and clamav is detecting them fine, but it
clearly is trying to email back the "sender" with a notification.
As the reply to is spoofed, this makes no sense at all (and i am getting
lots of bounces). How
I am getting lots of these, and clamav is detecting them fine, but it
clearly is trying to email back the "sender" with a notification.
As the reply to is spoofed, this makes no sense at all (and i am getting
lots of bounces). How do we stop this happening?
Cheers
Brian
--
Brian J Read
www.ab
atest" from the CVS?
cheers
Brian
-Original Message-----
From: Brian Read [mailto:[EMAIL PROTECTED]
Sent: 21 November 2003 10:34
To: [EMAIL PROTECTED]
Subject: Re: [Clamav-users] over sized zips from 0.65
At 09:37 21/11/2003, you wrote:
>Brian Read wrote:
>
>>i am getting the
At 09:37 21/11/2003, you wrote:
Brian Read wrote:
i am getting these, since upgrading to 0.65 on RH7.3:
/home/e-smith/files/ibays/software1/files/OpenOffice/OOo_1.1.0_Win32Intel_install.zip:
Oversized Zip FOUND
/home/e-smith/files/ibays/software1/files/OpenOffice
i am getting these, since upgrading to 0.65 on RH7.3:
/home/e-smith/files/ibays/software1/files/OpenOffice/OOo_1.1.0_Win32Intel_install.zip:
Oversized Zip FOUND
/home/e-smith/files/ibays/software1/files/OpenOffice/OOo_1.0.3.1_Win32Intel_install.zip:
Oversized Zip FOUND
/home/e-smith/files/ibays/
At 22:09 18/09/2003, Darryl W. DeLao Jr wrote:
Anyone
know of a way to make clamscan email you when its done scanning with the
results included?
pipe the results into "mail"
viz:-
(cd /;/usr/bin/clamscan --recursive --quarantine /var/clamav/quarantine
--infected --stdout --log /var/clamav/log/c
.
Just run fresclam again.
Best regards,
Diego d'Ambra
-Original Message-----
From: Brian Read [mailto:[EMAIL PROTECTED]
Sent: 1. juli 2003 13:19
To: [EMAIL PROTECTED]
Subject: [clamav-users] checksum failure again?
My daily update has just failed with this:
Current working dir is /usr/share/clam
My daily update has just failed with this:
Current working dir is /usr/share/clamav
Checking for a new database - started at Tue Jul 1 12:00:01 2003
Connected to clamav.elektrapro.com.
Reading md5 sum (viruses.md5): OK
Reading md5 sum (viruses2.md5): OK
Downloading viruses.db
...
Got a stream of these this morning:
Checking for a new database - started at Mon Jun 23 12:00:01 2003
Current working dir is /usr/share/clamav
Connected to clamav.elektrapro.com.
Reading md5 sum (viruses.md5): OK
viruses.db is up to date.
Reading md5 sum (viruses2.md5): OK
Downloading viruses.db2
Wash
Thanks for that, and a useful little trick as well!!
cheers
Brian
At 06:41 16/05/2003, you wrote:
* Brian Read <[EMAIL PROTECTED]> [20030516 08:34]: wrote:
> One of my customers would like to know if he is covered for the Fizzer
> virus?
>
> Cheers
>
[EMAIL PROTECTED]
One of my customers would like to know if he is covered for the Fizzer virus?
Cheers
B.
Brian J Read
www.abandonmicrosoft.co.uk
www.theonlineorganiser.com
www.thepersonalknowledgebase.com
Moderator for Mitel SMEserver Contributions and Howtos: www.contribs.org
+44 1695 723723
-
At 13:10 01/04/2003, Magnus Sundberg wrote:
Hi,
I while ago, I read an article that stated that opensource anti-virus
scanners did not catch any of the recent viruses.
From scanning the archive this seems to not be true.
Does anybody know of any comparisons between Clam anti virus and other
comme
Also here, we seem to go through this every 2-3 months!
Cheers
Brian
At 09:38 18/03/2003, Nicklas Hardman wrote:
Yes I was just wondering about this. I also get errors on updating the
virus database.
Checking for a new database - started at Tue Mar 18 08:00:00 2003
ERROR: Can't connect to port 8
I will change them to 765 tomorrow and check that it still works.
Thanks for the help.
Brian
At 18:53 29/12/2002, you wrote:
>No problem, but like I said, be careful when dolling out 777 perms, a
>virus may be the least of your worries then... Perms are still important....
>
>Bria
how it goes...
>
>I should be back tomorrow around noon or so...
>
>Good Luck,
>-Matt
>
>
>Brian Read wrote:
>
>>Ok, set /var/run to 777, and that eliminated the error message about
>>/var/run/clamd.pid
>>
>>but still get bind() error
>>
&
s change the UID/GID that clamd is running under I
>have clamd running as it's own user with UID/GID at 102/102, my perms for
>/tmp are 777 owned by root.root and perms for /var/run are 755 root.root
>as well. my clamav user is also in the root group, allwing me to give it
>m
At 20:15 27/12/2002, you wrote:
>On Fri, 27 Dec 2002 12:38:11 -0700
>Matt Blecha <[EMAIL PROTECTED]> wrote:
>
> > Here's another question... Does the qmailq user have perms to bind to
> > unix or tcp sockets, if it can't bind a unix or tcp socket, that would
> > be why the crash happens... clamd do
At 18:05 27/12/2002, you wrote:
>On Fri, 27 Dec 2002 16:58:13 +0000
>Brian Read <[EMAIL PROTECTED]> wrote:
>
> >
> > I am trying to start clamd (from the command line), and it does not
> give me
> > any error messages, but it fails to start, that is it do
I am trying to start clamd (from the command line), and it does not give me
any error messages, but it fails to start, that is it does not appear in
the ps -ax list. where should I look for an error messages, ort what might
be the trouble?
It was starting yesterday, something seems to have ch
I get:
In file included from zziplib/zzip-dir.c:15:
zziplib/zzip-file.h:20:18: zlib.h: No such file or directory
make[1]: *** [zzip-dir.lo] Error 1
make[1]: Leaving directory `/usr/RPMs/ClamAV/clamav-0.54/libclamav'
make: *** [all-recursive] Error 1
I have tried (re) installing zlib, but it makes
Ok, upgraded to 0.53, and the error has gone!
many thanks
Brian
At 09:56 06/11/2002, you wrote:
> > I'm also gettig this error, on version 0.50, sonce the last db revision.
>
>You shouldn't use 0.50.
>
>Best regards,
>Tomasz Kojm
>--
> oo. [EMAIL PROTECTED]
> (\/)\.
I'm also gettig this error, on version 0.50, sonce the last db revision.
Cheers
Brian
At 08:10 06/11/2002, you wrote:
> > hi there is any one else haveing this problem wit .51 ??
> >
> > the culprit is bellow from virus.db2
> >
> > W98/Hybris.E (Clam)=10400081*75f16800104000c3
> >
> > a
clamd recognizes the following commands:
>PING Check server's state. It should reply with "PONG".
>
>RELOAD Reload the databases.
>
>QUIT Perform a clean exit.
>
>SCAN file/directory
> Scan a file or directory (recursively) with archive
>
Dear Wash
At 12:22 01/11/2002, you wrote:
>I believe the functionality you are looking for is documented within
>Amavis-ng. Once clamd is up and running, all that remains is for you
>to hook it up to Amavis.
Yes, I am quite happy to hook it up to AMavis-ng, if I only knew how to
pass the command
I am trying to use Clamd (under Linux), to see if it avoids the clagging up
of my system that Clamscan creates (using aMavis-ng).
However I have editted clamav.conf ,and got the demon running, but can't
see how to get the scan to run, I'm sorry if this is obvious, but I can't
find it documentae
>mc
>What versions of clamav and amavis-ng are you using ? Please try to disable
>the internal unarchiver with "--disable-archive" option.
Amavis-ng is 0.1.4.1 and Clamav is 0.50.
>Yesterday, I have
>found a small problem with RAR, causing it to work very slowly with some
>archives. amavis-ng
eers
Brian
At 03:00 17/10/2002, you wrote:
>Ok I used the --exclude command. But it still outputs the /proc
>directory . The command I ran is
>
># clamscan --exclude=/proc --stdout -r -I /
>
>I also tried these commands
># clamscan --exclude=proc --stdout -r -I /
># cla
At 15:21 16/10/2002, you wrote:
> >"Return-Path: <[EMAIL PROTECTED]> "
>
>That's not right. Your MTA or MUA is lying to you. The proper
>Return-Path should look like:
>
>Return-Path: <[EMAIL PROTECTED]>
Well my MTA is qmail, and my MUA is Eudora, i guess it must be Eudora
getting it wrong, or my
At 15:00 16/10/2002, you wrote:
>So my vote goes to (and I have no illusions about this being a democracy, but
>if it were...) dump the subject tag and add a List-ID: header.
My vote as well.
As long as it is unique, my email rules will work...
Cheers
Brian
Brian J Read
www.abandonmicrosoft.co
At 13:30 16/10/2002, you wrote:
>[Please don't top-post. If you don't know what top-posting is, check
>Google.]
sorry, a slip of the brain.
> >Not at all, [subject tags] are ideal to use for email rules to sort
> >into different folders.
>
>No, they suck for filtering messages into different fol
Not at all, they are ideal to use for email rules to sort into different
folders. I get between 50-100 emails a day, and need to prioritise which i
read immediatly, and which I leave until later.
Cheers
Brian
At 12:53 16/10/2002, you wrote:
>Personally, I think subject prefixes are annoying a
Use the --exclude parameter
B.
At 10:59 16/10/2002, you wrote:
>is
>there a way to disable testing on the /proc directory?
Brian J Read
www.abandonmicrosoft.co.uk
www.theonlineorganiser.com
www.thepersonalknowledgebase.com
Mitel SMEserver Contributions and Howtos:
www.abandonmicrosoft.co.uk/aba
as this
>
># clamscan --stdout .
>
>
>But WHERE is the stdout file? ... I did a updatedb but I could not find
>that file. So where does clamscan reports the filename to? Or should I
>put more options? .. If so what are the options..
>
>
>Thanks
>
>-Original
Yes, my email rules would work much better then. Lots of other mailing
list also just use [users].
Isn't it just a parameter to the mailing list software?
cheers
Brian
At 10:02 16/10/2002, you wrote:
>It would be nice to prepend the subject of posts to this list with
>[clamav-users],
>no?
Freshclam.log must be owned by clamav, whereas clamscan.log is root owned.
Cheers
Brian
At 06:50 16/10/2002, you wrote:
>Hi guys, I just installed the clamav as a rpm package. It seems that I
>cannot run the freshclam with this options as per in the manual.
>
># freshclam --quiet -l /var/log/cl
At 09:14 16/10/2002, you wrote:
>How do I make the report file to SHOW WHICH files are being infected?
>The option -i -l report.txt does not yield much info. It only shows HOW
>MANY files are infected. But not WHICH files. Can someone throw me a
>bone here?
I think the infected file names goes ou
I have just moved to 0.50 from 0.24, and am now getting the following after
the scan:
/home/e-smith/files/users/brianr/home/bjr/backup.zip: Mid/Kakworm-Z FOUND
The filename is obviously truncated (why?), but is probably one of 5 files,
3 of which are gifs, and the other two are Eudora mbx/toc f
Tomasz
Yup, that was it.
many thanks
Brian
At 10:53 10/10/2002, you wrote:
> > Now when I do a Freshclam - I get:
> >
> > [EMAIL PROTECTED] root]# freshclam
> > Checking for a new database - started at Thu Oct 10 08:18:40 2002
> > Current working dir is /usr/share/clamav
> > Connected to clama
I have just insdtalled ClamAv 0.50 on my Mirel-SMEServer (Linux Rh 7.2).
Now when I do a Freshclam - I get:
[EMAIL PROTECTED] root]# freshclam
Checking for a new database - started at Thu Oct 10 08:18:40 2002
Current working dir is /usr/share/clamav
Connected to clamav.elektrapro.com.
Reading md5
44 matches
Mail list logo
