found in the wild, RFC compliant or not, including both \r\n and \n.
yea, the message is coming from qmail-scanner, not clamav.. he should check
the qmail-scanner documentation and/or mailing list.
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was The Word and The Wor
ng into account that, for viruses
> database updates, I am using a Pay per Use ADSL Internet connection.
what do you want to do with clamav?
If you have some sort of script that runs whenever you connect the ADSL, have
that fire off freshclam to update the definitions.
-Jeremy
--
Jeremy Kitc
ext ---
>
> I believe that whenever you upgrade any program that qmail-scanner will
> run, you need to update qmail-scanner as well.
no, you just run qmail-scanner-queue.pl -g, as documented in qmail-scanner
documentation.
> The process is on the qmailrocks page.
ugh.
-Jeremy
--
J
rus scanning package)
> Any hints what is wrong?
it's not clamav. Your mail<->clamav shim is probably outright rejecting .pif
files without scanning them with clamav.
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was The Word and The Word was C
[EMAIL PROTECTED] wrote:
> The company I work for has implemented a firewall that only allows certain
> activity through it. I have requested that the user agent string
> "clamav/*" be allowed to communicate with the internet.
sorry, but blocking at the firewall/proxy level based on user-agent
ver, you should
investigate how to implement clamav into it. (unless of course your mail
server is running on windows, then I don't know ;)
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was The Word and The Word was Content-type: text/plain
-- The Word of Bob.
p
ould fail, try
again, checksum fail, try again
I would say just ban the use of p2p apps like kazaa, limewire on your network,
and police it very closely. Anyone who doesn't follow the rules gets the
door.
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was Th
ke AOL users seriously? ;)
/duck
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was The Word and The Word was Content-type: text/plain
-- The Word of Bob.
pgpnT5vtkXbef.pgp
Description: PGP signature
___
http://lurker.clamav.net
have client-side virus
scanning support is because some providers don't do their own scanning.
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was The Word and The Word was Content-type: text/plain
-- The Word of Bob.
pgpGvi2REl7R4.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html
On Friday 06 January 2006 10:35, Steven Spence wrote:
> Jeremy Kitchen wrote:
> >>I wouldn't say never. If you had authenticated SMTP set up you could
> >>always send the notification back to the sender using the username
> >>supplied during the SMTP authentica
On Friday 06 January 2006 09:55, Steven Spence wrote:
> Jeremy Kitchen wrote:
> > On Friday 06 January 2006 02:24, Michael wrote:
> >>Ok,
> >>your massages convinced me only to report the sender.
> >>I don't want only blackhole the message and nothing else,
view. I've considered
doing stuff like this myself, but I realized after investigating it how
stupid difficult it is to even start trying to do it.
good idea, but the infrastructure is not in place in the backend to be able to
make it possible.
-Jeremy
--
Jeremy
ify a fake REAL EXIST mail address?
yes, almost all modern viruses forge their envelope sender.
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was The Word and The Word was Content-type: text/plain
-- The Word of Bob.
pgpSsuhMx34YC.pgp
Descr
ou can also optionally send them a report,
but they will probably get pissed off.
At any rate, DO NOT SEND NOTIFICATIONS TO THE SENDER.
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was The Word and The Word was Content-type: text/plain
-- The Word of Bob.
pgpYxN7
nd send it to the White House with a Post-It note
> saying "we weren't able to deliver this package to the recipient because it
> looks like a bomb"
I like this analogy. However, you said "white house" and "bomb" in the same
email, the FBI will be coming ove
file you've configured in clamd.conf has grown too large, and clamd is
refusing to write to it anymore.
truncate the log file, or switch to a solution where this won't happen (ie,
running clamd under daemontools)
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
In the beginning was
On Thursday 05 January 2006 09:49, Daniel J McDonald wrote:
> On Thu, 2006-01-05 at 09:44 -0800, Jeremy Kitchen wrote:
> > On Thursday 05 January 2006 08:08, Shayne Lebrun wrote:
> > > Still probably bad form, as you'd be spamming the living daylights out
> > > of
sender (ie, it's
the virus connecting directly) it will just go to the bitbucket. If,
however, the virus has been relayed through another server, that server might
bounce it back to the 'sender'... but that's the other server's problem, not
yours. They're the ones
really a clamav problem :)
> The shell script is simply
>
> DATE=`date '+%Y%m%d'`
> echo "Current date is "$DATE
> cd /
> clamscan --recursive --infected >
> /home/andy/Desktop/$DATE"_infected.txt" &
which clamscan
[EMAIL
er in that all of the world's (and the internet's) problems
can be solved by education. Sure, I could let you shoot yourself in the
foot, but that bullet might ricochet and hit me, so it's in my best interests
to pull the gun out of your hand.
-Jeremy
--
Jeremy Kitchen ++ [
thread you replied
to, so I'll assume that you simply replied to the wrong message by accident.
If you had not top posted, and properly trimmed the message like you should,
you would have noticed that you were replying to the wrong email.
-Jeremy
--
Jeremy Kitchen ++ [EMAIL PROTECTED]
exposed to the danger of alteration.
>
> Well d'uh
of course, with the use of cryptographic signing (such as PGP, S/MIME, etc)
you can confirm if a message has not been modified (assuming the private key
didn't get leaked, and used)
-Jeremy
--
Jeremy Kitchen ++ [EMAIL
is on a cronjob every hour.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
GnuPG Key I
e sight, I can assure
you :)
http://lurker.clamav.net/message/20050216.123538.5a838448.en.html
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on
email :(
Was there a bug that might be causing this that was fixed since 0.80 was
released?
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on
x27;s not
a problem.
Thanks :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
GnuPG Key ID:
ext disclaimer
thing...)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
GnuPG Key ID: 481BF7E2
; does.
should be working fine now.. we just moved to our new server over the weekend
and had a netmask issue on one of our interfaces that was discovered this
morning that was causing some routing issues to the 65.0.0.0/8 network :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administ
e shell script that 'saves' your configure options.
Or keep your old sources around and look at config.log.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int
t;
> > Why ?
>
> Because you don't read what it prints.
or somehow interpret that this means libclamav wasn't installed
*boggle*
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.353
bly out of date, or it indicates a new update is available.
or as it should, after 15 minutes, which is the TTL on the dns record. 901
seconds would qualify as "horribly out of date"
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROT
would not know it. If it fails as a
> cron job, then cron will let you know something is wrong.
*cough*
http://cr.yp.to/daemontools.html
http://smarden.org/runit/
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.c
ister share the same tagline.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
GnuPG Key ID: 48
ld you want to?
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
GnuPG Key ID: 481BF7
ar_
>available_for_download.html
or to this non-shitty browser:
http://mozilla.org/firefox
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail
yor server.
2) you should read the qmail-scanner FAQ.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
st the result here.
>
> Sorry but I can receive no mail at the time (relaying troubles for my
> domain). Can you put the .db file somewere I can download it?
http://scriptkitchen.com/clamav/test-20041217.db
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologie
will solve your problem (check cronjobs, etc)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
not? :)
The wording is kinda funky, it seems we can, but we just can't install it for
the person. So then there's the question of "what's installing?" etc etc
etc... sounds very funky :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies
in the
first place, you wouldn't have had to reject the message yourself.
Any legit emails that get rejected because of infections (false positive or
not) should go back to the original sender without any problems.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Tec
before?
post your freshclam.conf ... or better yet.. read it first, and if you still
can't figure it out, post it :)
My guess is you have it set to daemonize.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.in
s it very easy to send signals to applications.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
12:01 -0400, Listas <[EMAIL PROTECTED]> wrote:
> > DatabaseMirror db.si.clamav.net
> > DatabaseMirror db.local.clamav.net
> > DatabaseMirror database.clamav.net
That looks fine. How are you starting up freshclam?
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Int
mation -- in the
> output.
ok, so a couple fprintf's combined with stat() should make this happen. Feel
free to submit a patch :)
Disclaimer: IANAP (I am not a programmer)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED]
nning
the two under daemontools or runit (both do essentially the same thing)
http://cr.yp.to/daemontools.html
http://smarden.org/runit/
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.94
admin.net-abuse.sightings
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
GnuPG Ke
email. Jeremy saw it and jumped out of our window and has
broken his leg.
Please stop sending your malware to this mailing list.
-Catherine
(ps, the above is a joke ;)
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7
ell are you doing all of that for?
[EMAIL PROTECTED] ~ $ cat /service/clamd/run
#!/bin/sh
exec /usr/local/sbin/clamd
Then set up your clamd.conf properly, and voila.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com
On Wednesday 20 October 2004 02:52 pm, Nigel Horne wrote:
> 2) What is IRIX?
IRIX is SGI's UNIX.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #
wever, your intention is to
only provide users in a certain group dns access, then it must be at least
group readable. :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.
On Thursday 30 September 2004 01:34 pm, Kelsey Cummings wrote:
> My mail sorting rules are going crazy already! And I thought I was messing
> something up.
hah. Hence the beauty of the .qmail file:
[EMAIL PROTECTED] ~ $ cat .qmail-clamav
./Maildir/.lists.clamav/
-Jeremy
--
Jeremy K
seeing extra emails in your inbox :)
Keep up the good work folks :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkit
hanks and sorry for the big cross post :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
Gn
en is the DNSDatabaseInfo checked? If it's the same time as the normal
Checks value, does that mean we can now increase that number to say.. 48, so
it will check every 30 minutes? Thanks :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED]
h, in my opinion, is the problem of the MTA who relayed the virus
in the first place.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFn
hat come into my mailbox (which,
since I'm not a huge provider, isn't much, but I do take the time to review
each one)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
On Tuesday 21 September 2004 04:09 pm, [EMAIL PROTECTED] wrote:
> On Tue, 21 Sep 2004, Jeremy Kitchen wrote:
> > On Tuesday 21 September 2004 12:39 am, [EMAIL PROTECTED] wrote:
> > > /usr/bin/ld: cannot find -lssl
> >
> > make sure you have the openssl and op
0postfix%20howto
http://www.postfix.org/docs.html (ctrl-f clamav )
http://www.google.com/search?q=site:clamav.net%20postfix
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
k
On Tuesday 21 September 2004 12:39 am, [EMAIL PROTECTED] wrote:
> /usr/bin/ld: cannot find -lssl
make sure you have the openssl and openssl-devel packages installed.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.
s' in it.
On a side note, a buddy of mine once showed me a company that "guaranteed"
that when a user opened an email from them, it was tracked, when in actuality
it was no new fangled technology, it was the same old 1x1 transparent gif
image cgi script bullshit :)
-Jerem
nc can't be used here. It can easily do incremental
updates.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/
> months but MS took the idea, added the obvious and patented it :-(. MS even
> cites the KDE ml as the source of the initial idea.)
IANAL... but wouldn't that count as 'prior art' ?
Perhaps the dude sold out. Mike Rowe, anyone?
-Jeremy
--
Jeremy Kitchen ++ Systems Ad
;ll see huge performance increases.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
---
he developers: please don't feel like you have to code up any
> of our random ideas. I'm just having fun brainstorming about how to
> optimize this process. I expect in another few days of discussion we'll
> have converged on a fairly sane idea.
or scrap the whole id
On Tuesday 10 August 2004 04:57 am, Jeremy Kitchen wrote:
> Tomasz, et al.: Please expect to see an email from me by the end of the
> work day tomorrow (or rather, today, but I haven't slept yet)
sigh, and after saying that I now have tons of work to do so I won't be able
to g
itely is interesting.
> [I haven't given up on DNS updates yet, but it's hard to come up with a
> clean way to distribute >256 bytes of data that way, which means even
> single rules don't always fit.]
I wouldn't distribute the rule in DNS, however, a timestamp of
have an internal mirror. It's not difficult to do, and has been
discussed on this list, and in the clamav documentation many times.
Just a few ideas...
hey, brainstorming is good, it's just the ideas aren't always ;)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Inte
On Thursday 05 August 2004 07:44 pm, René Bellora wrote:
> > > bugs to [EMAIL PROTECTED] Thank you !
> I'm testing against old viruses, it seems to miss JS.FortNight.B. Same
> files, with 0.75 and same signatures are caught
*cough*
-Jeremy
--
Jeremy Kitchen ++ Systems Adm
give a nasty warning in the log.
it already does this. search the archives for 'functionality level'
> WARNING: Your ClamAV installation is OUTDATED - please update immediately !
> WARNING: Current functionality level = 1, required = 2
-Jeremy
--
Jeremy Kitchen ++ Systems Ad
o the qmail-scanner FAQ as this is a
VERY VERY VERY VERY VERY (like, at least 20 times a day in #qmail) frequently
asked question.
> 2 - is there a way to ensure that clamd doesnt die (or
> starts itself again if so)
http://cr.yp.to/daemontools.html
http://smarden.org/runit/
pick one.
hin our own server.
sounds like whatever you're using to call clamav on this email is broken.
Please ask the mailing list of whatever you are using to call clamav.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED]
needlessly trying to match a
file against a signature it is VERY UNLIKEY to match :)
if it's only a few hundred non-email-borne virii, it's not worth the effort,
but if it's at least 20-30% or something, it is something I would take a look
at doing, myself.
-Jeremy
--
to gentoo, to freebsd, to solaris.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scri
tch make it in the current release? Will it? Are there special
> reasons not to incorporate that patch into clamav?
LogFile /dev/stdout should do the trick. I use it on many many many many
systems.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, In
il installed on the system via the package system (is that
possible?) and if so, echo '&root' > /var/qmail/alias/.qmail-clamav ... that
is.. if the clamav user doesn't have an actual home directory, that it owns,
otherwise qmail won't look at ~alias.
-Jeremy
--
Jerem
On Friday 25 June 2004 10:36 pm, Stephen Gran wrote:
> On Fri, Jun 25, 2004 at 05:53:13PM -0500, Jeremy Kitchen said:
> > On Friday 25 June 2004 04:27 pm, Stephen Gran wrote:
> > > Take a look at /usr/share/doc/clamav-base/README.Debian. The suggested
> > > fix for thi
actually need and implement
> newaliases, and what are testable ways to deal wth them?
I guess I don't understand what the purpose of
running /var/qmail/bin/qmail-newu when installing clamav is... if you could
elaborate on that, I may be able to provide my input.
-Jeremy
--
Jer
should have a look at those.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
and tried and wasn't actually able to get it to work like
that. I simply run my clamd as the qscand user (I do this on production
systems as well) and it works dandy.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED
ial
products, so I would assume it is similar.
If nothing else, perhaps you can work something out with the copyright owner
of clamav (Tomasz Kojm <[EMAIL PROTECTED]>) or whatever.
Good Luck :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technolo
On Monday 21 June 2004 04:04 pm, Tomasz Kojm wrote:
> However you cannot:
>
> - link against libclamav
> - directly use the virus databases
> - include our code in your software (obvious ;-))
could he write a shim that is LGPL'd that links to libclamav?
-Jeremy
--
Jerem
On Monday 21 June 2004 06:54 am, John Leach wrote:
> I don't believe talking to the daemon via TCP/IP (or even a socket)
> would be a violation [of the GPL], but along with Jeremy, IANAL (I can sleep
at
> night).
I don't see how it possibly could be. That'd be ludicro
On Monday 21 June 2004 04:45 am, Jeremy Kitchen wrote:
> IANAL. Take my answers below with a grain of salt.
[snip]
> that would be horribly infectious. That's like saying "Ooo, I wrote an
> GPL'd for outlook, now microsoft has to give me their source!"
*c
t;different" I assume you mean in a legal sense, not in functionality.
Obviously loading the clamav library and keeping the virus databases in
memory would be a lot faster than running clamscan all of the time (talking
to clamd is far more efficient, but if you can keep it all in ho
;s home directory.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/qmail
---
s I will just had to write a slightly more detailed script than I
> originally though.
like what?
sigtool --info=/usr/local/share/clamav/daily.cvd | head -l 1
wow. tough. ;)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTE
ng list posts) from
Worm.Bagle.* (with .gen-vbs probably being the top one)
amazing that virus actually got anywhere as well, since, even if my virus
scanner didn't catch it, it never would have been delivered to me :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inte
propogate and they were very successful.
The stupid shit people will do if you tell them to is simply amazing.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitch
mmand not found
>
> Any idea?
yea, why don't you post your /etc/cron.daily/clamscan file?
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
#FixStaleSocket
To:
FixStaleSocket
pretty simple! :)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EFnet ++ scriptkitchen.com/q
machine I've used it on. No patch
required.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmai
foreground instead of forking into the background.
it's available at http://scriptkitchen.com/qmail/freshclam-foreground.patch
so far it has been patching successfully against all versions of clamav (at
least 0.70+, not sure about earlier ones) including the latest, 0.73.
enjoy.
-Jeremy
--
ed HTML.
>
> How do you think Outlook implements "Rich Text"? By attaching a rich
> text format file?
it puts it in quoted-printable instead of text/html
:)
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.
hers I'm sure, but those are the ones I have experience with, and
both are quite good.
Perhaps if you want a better answer you should post more relevant information
about your setup, or just hit google or freshmeat.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Tech
ejected message (#5.3.0)
USTL
[EMAIL PROTECTED] /usr/local/src/mail/qmail/netqmail-1.05/netqmail-1.05 $
grep 'permanently rejected' *
qmail.c:case 31: return "Dmail server permanently rejected message
(#5.3.0)";
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator +
lize they're commented, so it doesn't really affect me directly)
I was wondering if the changes are backward compatible. We have a lot of
customers using clamav, and it'd be a real pain to have to change their .conf
file every time we update them...
-Jeremy
--
Jeremy Kitchen ++ Syst
t with an html only email, good idea!
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 847.492.0470 int'l
kitchen @ #qmail #gentoo on EF
mer's mail cluster and brought the system load to over
75, yet the system was completely responsive to everything. It was as
if the machine was idle. And you are using a far more powerful machine
than this was :)
-Jeremy
--
Jeremy Kitchen
Systems Administrator
[EMAIL PROTECTED]
Kit
o/daemontools/multilog.html)
use /dev/stdout for the logfile in the config, and make sure to disable
log file locking.
works great :)
-Jeremy
--
Jeremy Kitchen
Systems Administrator
[EMAIL PROTECTED]
Kitchen @ #qmail on EFNet - Join the party!
.
Inter7 Internet Technologies, Inc.
On Sun, 2004-03-07 at 23:00, Greg Ennis wrote:
> Antony,
>
> I have upgraded to 0.67-1, but clamscan still does not recognize the file as
> containing a virus. Looks like the upgrade did not resolve the problem.
ok.
> Any other ideas?
using clamscan --mbox to scan it?
-Jer
1 - 100 of 103 matches
Mail list logo
