[Clamav-users] clamav-milter vs clamscan

2006-10-06 Thread Carl Thompson
Does anyone have an answer to the question does clamscan act differently than clamav-milter/clamd when mail is scanned. I have taken attachment files from the emails and created custom signatures using sigtool. The extracted attachment is identified properly by clamscan but emails containing t

Re: [Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
, ect). Carl *** REPLY SEPARATOR *** On 10/4/2006 at 5:28 PM Dennis Peterson wrote: >Carl Thompson wrote: >> making the signature isnt the problem. the problem is that clamav >> will only identify the signature if its on its own (such as the >> signature

Re: [Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
identifiable virus in it. Carl *** REPLY SEPARATOR *** On 10/5/2006 at 12:43 AM Christoph Cordes wrote: >Carl Thompson wrote: >> I have followed the documentation i've found and created custom database >files that identify files that stand alone without a problem usi

Re: [Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
identifiable virus in it. Carl *** REPLY SEPARATOR *** On 10/5/2006 at 12:43 AM Christoph Cordes wrote: >Carl Thompson wrote: >> I have followed the documentation i've found and created custom database >files that identify files that stand alone without a problem usi

[Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
I have followed the documentation i've found and created custom database files that identify files that stand alone without a problem using sigtool --md5 > /path/to/custom.db However when I tested emails containing these files I did not get a positive result. I have tried both the encoded ver

[Clamav-users] compile fail on 0.87

2005-09-19 Thread Carl Thompson
I get a compilation failure on redhat 7.2 box if gcc -DHAVE_CONFIG_H -I. -I. -I.. -I../clamd -I../libclamav -I../shared-g -O2 -MT clamav-milter.o -MD -MP -MF ".deps/clamav-milter.Tpo" -c -o clamav-milter.o clamav-milter.c; \ then mv -f ".deps/clamav-milter.Tpo" ".deps/clamav-milter.Po"; else

[Clamav-users] 0.85.1 milter crashing alot

2005-06-06 Thread Carl Thompson
I've had lots of problems with clamav-milter (running inet or .sock) crashing. I know that .82 didn't have issues like this and I would like to track them down and post any results I can find to possibly help the developers. Is there any special configuration options or start/configuration opti

RE: [Clamav-users] remove scanner serve

2005-04-15 Thread Carl Thompson
*** REPLY SEPARATOR *** On 4/15/2005 at 5:49 PM Nigel Horne wrote: >> *** REPLY SEPARATOR *** >> >> On 4/15/2005 at 3:58 PM Nigel Horne wrote: >> >> >On Friday 15 Apr 2005 15:56, Carl Thompson wrote: >&g

Re: [Clamav-users] remove scanner serve

2005-04-15 Thread Carl Thompson
*** REPLY SEPARATOR *** On 4/15/2005 at 3:58 PM Nigel Horne wrote: >On Friday 15 Apr 2005 15:56, Carl Thompson wrote: >> >> *** REPLY SEPARATOR *** >> >> On 4/14/2005 at 10:24 PM Nigel Horne wrote: >> >> >> Okay th

RE: [Clamav-users] remove scanner serve

2005-04-15 Thread Carl Thompson
*** REPLY SEPARATOR *** On 4/14/2005 at 10:24 PM Nigel Horne wrote: >> Okay this is what i have for clamav-milter on remote server > >Remote to sendmail? Or remote to clamd? Or both? > >> CLAMAV_FLAGS="-qlm5 --external --server=xxx.xxx.xxx.xxx >> local:/var/run/clamav/clmilter.

Re: [Clamav-users] remove scanner serve

2005-04-14 Thread Carl Thompson
*** REPLY SEPARATOR *** On 4/14/2005 at 9:14 AM Nigel Horne wrote: >On Thursday 14 Apr 2005 00:00, Carl Thompson wrote: > >> I looked at the document and it gives a milter rule for sendmail to >connect to a remote clamav-milter process: >> >> INP

RE: [Clamav-users] remove scanner serve

2005-04-13 Thread Carl Thompson
*** REPLY SEPARATOR *** On 4/13/2005 at 5:12 PM [EMAIL PROTECTED] wrote: >Carl Thompson wrote: >> I believe the problem is a hard code issue. The setting --server >> isn't telling clamav-milter to listen on a specified IP for >> connections it

RE: [Clamav-users] remove scanner serve

2005-04-13 Thread Carl Thompson
*** REPLY SEPARATOR *** On 4/13/2005 at 4:05 PM [EMAIL PROTECTED] wrote: >Carl Thompson wrote: >> I can only get clamd to open port 3311 as a listening TCP socket. > >Default is 3310, no? Why can't you open port 3310? Is there something >else already

Re: [Clamav-users] remove scanner serve

2005-04-13 Thread Carl Thompson
*** REPLY SEPARATOR *** On 4/13/2005 at 5:49 PM Nigel Horne wrote: >On Wednesday 13 Apr 2005 17:19, Carl Thompson wrote: >> Does anyone know of a good walkthru for the new system (clamav-milter >not requiring clamd) so that I can setup a dedicated server for vir

[Clamav-users] remove scanner serve

2005-04-13 Thread Carl Thompson
Does anyone know of a good walkthru for the new system (clamav-milter not requiring clamd) so that I can setup a dedicated server for virus scanning? Thanks Carl ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] centralized clamd

2005-01-10 Thread Carl Thompson
*** REPLY SEPARATOR *** On 1/10/2005 at 8:14 PM Nigel Horne wrote: >On Monday 10 Jan 2005 20:10, Carl Thompson wrote: > >> Its still connecting to the local machine via unix socket and not >attempting connection to the remote machine. > >Check you don'

[Clamav-users] centralized clamd

2005-01-10 Thread Carl Thompson
Hello, I seem to have an error somewhere and can't seem to find it so asking for a spare set of eyes on this one. I have clamd running on machine a bound to its main ip on port 3310 I have clamav-milter running on another machine with the following clamav-milter -ql -s xxx.xxx.xxx.xxx:3310 /va

Re: [Clamav-users] Error while "./configure --milter"

2004-12-02 Thread Carl Thompson
*** REPLY SEPARATOR *** On 12/2/2004 at 2:51 AM ads nat wrote: >Hi, >I am using Redhat 9.0 mail server with sendmail 8.13 >working properly. >I am trying to configure clamav-0-80 as follows in >"/root/clamav-0.80 " directory. >I am getting following error : > >configure

[Clamav-users] dev virus database

2004-08-29 Thread Carl Thompson
I currently run 0.74a without any problems. Today however I recieved a virus attachment in an email that was identified by McAffee as mydoom.o I went and forced an immediate update of my database files and scanned my imap directories and the virus was not identified. I then submitted it to the