Re: [clamav-users] clamav-milter fails on large attachments

2013-05-25 Thread Rich Rauenzahn
$ rpm -qa | grep clamav clamav-data-0.97.8-1.fc18.noarch clamav-milter-systemd-0.97.8-1.fc18.noarch clamav-update-0.97.8-1.fc18.i686 clamav-server-sysvinit-0.97.8-1.fc18.noarch clamav-lib-0.97.8-1.fc18.i686 clamav-filesystem-0.97.8-1.fc18.noarch clamav-milter-0.97.8-1.fc18.i686 clamav-0.97.8-1.fc18

[clamav-users] clamav-milter fails on large attachments

2013-05-24 Thread Rich Rauenzahn
ly not very helpful. It feels like something is timing out, or hitting a max file size limit -- or timing out due to the increased time to scan the larger file. I've turned on debug and verbose. I've increased the timeouts and max filesizes where I've found them. T

[Clamav-users] Help! Connection refused by /var/clamav/clmilter.socket

2009-05-04 Thread Gomes, Rich
are the same as the old server, which is running without issue, albeit an older version) What else could cause this? Rich ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] [ClamAV-users] HELP!unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid'

2009-04-30 Thread Gomes, Rich
Does anyone have a fix for this? -Original Message- From: Gomes, Rich Sent: Tuesday, April 28, 2009 10:40 AM To: ClamAV users ML Subject: RE: [Clamav-users] [ClamAV-users] HELP!unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid' Thanks, this is a new install

Re: [Clamav-users] [ClamAV-users] HELP!unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid'

2009-04-28 Thread Gomes, Rich
: initialization failed, temp failing commands Permissions on the directory: drwxr-xr-x 2 clamav clamav 4096 Apr 28 06:35 clamav (These are the same as the old server, which is running without issue, albeit an older version) What else could cause this? Rich -Original Message- From: clamav

Re: [Clamav-users] [ClamAV-users] HELP! unrecognizedoption `--pidfile=/var/run/clamav-milter/clamav-milter.pid'

2009-04-28 Thread Gomes, Rich
: Tuesday, April 28, 2009 9:36 AM To: ClamAV users ML Subject: Re: [Clamav-users] [ClamAV-users] HELP! unrecognizedoption `--pidfile=/var/run/clamav-milter/clamav-milter.pid' Gomes, Rich wrote: > Line referring to the pid has been removed from the conf file but it still > throws the

Re: [Clamav-users] [ClamAV-users] HELP! unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid'

2009-04-28 Thread Gomes, Rich
Behalf Of Ed Kasky Sent: Monday, April 27, 2009 9:31 PM To: ClamAV users ML; ClamAV users ML Subject: Re: [Clamav-users] HELP! unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid' At 02:06 PM Monday, 4/27/2009, Gomes, Rich wrote -=> >I get the following error: > &g

[Clamav-users] HELP! unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid'

2009-04-27 Thread Gomes, Rich
Is this no longer the case? Thanks in advance, Rich ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Can clamav-milter quarantine ALL messages?

2008-04-18 Thread Gomes, Rich
quarantine ALL messages? Gomes, Rich wrote: > It seems like this is rejecting the mail with a 'reject=553 5.3.0 > QUARANTINE' error instead of quarantining it to a folder. Yes, older versions of sendmail cannot quarantine the mail. "QUARANTINE" option appears in sendmail sin

Re: [Clamav-users] Can clamav-milter quarantine ALL messages?

2008-04-18 Thread Gomes, Rich
can "quarantine reason here" be anything or is there specific sytntax needed? From: [EMAIL PROTECTED] on behalf of Michael Isaev Sent: Thu 4/17/2008 7:57 PM To: ClamAV users ML Subject: Re: [Clamav-users] Can clamav-milter quarantine ALL messages? G

Re: [Clamav-users] Can clamav-milter quarantine ALL messages?

2008-04-17 Thread Gomes, Rich
It seems like this is rejecting the mail with a 'reject=553 5.3.0 QUARANTINE' error instead of quarantining it to a folder. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gomes, Rich Sent: Thursday, April 17, 2008 9:03 AM To: ClamAV users

Re: [Clamav-users] Can clamav-milter quarantine ALL messages?

2008-04-17 Thread Gomes, Rich
Thanks, Michael. I didn't see QUARANTINE as a access file option in the man pages. I will try that. Thanks again! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Isaev Sent: Wednesday, April 16, 2008 11:30 PM To: ClamAV users ML Subject: Re: [C

[Clamav-users] Can clamav-milter quarantine ALL messages?

2008-04-16 Thread Gomes, Rich
build right now. Thanks in advance Rich ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Can clamav-milter quarantine ALL messages?

2008-04-16 Thread Gomes, Rich
build right now. Thanks in advance Rich ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] quarantine on specific from address

2008-02-19 Thread Gomes, Rich
.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gomes, Rich Sent: Tuesday, February 19, 2008 3:42 PM To: ClamAV users ML Subject: Re: [Clamav-users] quarantine on specific from address Scratch that!! It works!!! Now to go back to the developers and

Re: [Clamav-users] quarantine on specific from address

2008-02-19 Thread Gomes, Rich
Scratch that!! It works!!! Now to go back to the developers and have them fix their email forms ; ) Thanks everyone! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gomes, Rich Sent: Tuesday, February 19, 2008 3:31 PM To: ClamAV users ML Subject

Re: [Clamav-users] quarantine on specific from address

2008-02-19 Thread Gomes, Rich
2008, Gomes, Rich wrote: > How do you run sigtool in interactive mode? Just type "sigtool --hex-dump" (without the quotes) at the command line. Whatever you type in will be converted into hex on the next line (although, again, it will also convert the linefeed, so strip off the last

Re: [Clamav-users] quarantine on specific from address

2008-02-19 Thread Gomes, Rich
PM To: ClamAV users ML Subject: Re: [Clamav-users] quarantine on specific from address On Tue, 19 Feb 2008, Gomes, Rich wrote: > How do you run sigtool in interactive mode? Just type "sigtool --hex-dump" (without the quotes) at the command line. Whatever you type in will be converted in

Re: [Clamav-users] quarantine on specific from address

2008-02-19 Thread Gomes, Rich
When I run these, it just seems to hang. How do you run sigtool in interactive mode? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of jef moskot Sent: Tuesday, February 19, 2008 2:51 PM To: ClamAV users ML Subject: Re: [Clamav-users] quarantine on specific

Re: [Clamav-users] quarantine on specific from address

2008-02-19 Thread Gomes, Rich
19, 2008 12:41 PM To: ClamAV users ML Subject: Re: [Clamav-users] quarantine on specific from address On Tue, 19 Feb 2008, Gomes, Rich wrote: > I have a specific need to quarantine emails coming from a particular > email address. A quick hack would be to make a signature that includes the add

[Clamav-users] quarantine on specific from address

2008-02-19 Thread Gomes, Rich
email address to a specific directory. Is there any way to do this in ClamAV or clamav-milter? Is there anyway to do this in Sendmail? (I would even accept quarantining all messages for this brief time.) Thanks, Rich ___ Help us build a comprehensive C

Re: [Clamav-users] Recent viruses

2007-10-29 Thread Gomes, Rich
. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel T. Staal Sent: Monday, October 29, 2007 10:07 AM To: clamav-users@lists.clamav.net Subject: Re: [Clamav-users] Recent viruses On Mon, October 29, 2007 8:58 am, Gomes, Rich said: > Daniel, I've been s

Re: [Clamav-users] Recent viruses

2007-10-29 Thread Gomes, Rich
Daniel, I've been searching for how to configure this without much luck. Could you point me in the right direction? Again, it Sendmail on RH being called by clamav-milter. Thanks! Rich -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan

Re: [Clamav-users] Recent viruses

2007-10-25 Thread Gomes, Rich
[mailto:[EMAIL PROTECTED] On Behalf Of Gomes, Rich Sent: 25 October 2007 18:20 To: ClamAV users ML Subject: Re: [Clamav-users] Recent viruses Dennis, Thanks for the reply. I understand all of what you are saying, having worked as a sysadmin for many years now. My issue is that even with most

Re: [Clamav-users] Recent viruses

2007-10-25 Thread Gomes, Rich
, Rich said: > Would anyone know the syntax for such? What's your MTA, and how are you calling clamav? It all depends on your setup. Daniel T. Staal --- This email copyright the author. Unless otherwise noted, you are expressly

Re: [Clamav-users] Recent viruses

2007-10-25 Thread Gomes, Rich
al to configure your MTA/clamav to make a copy of such files, you can take a look on it when you are curious what was it ;-). Names are not really important. just my 0.03 cents Regards, /rl Gomes, Rich wrote: > I received some emails yesterday matching the following: > > Inf

Re: [Clamav-users] Recent viruses

2007-10-25 Thread Gomes, Rich
#x27;t find any data on these messages and would like to know what other malware names they match up to so I can present it to management. At this point I can't even give a risk assessment. Rich -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

[Clamav-users] Recent viruses

2007-10-25 Thread Gomes, Rich
I received some emails yesterday matching the following: Infected messages: Email.Ecard-28: 2 Message(s) Email.Phishing.RB-1804: 2 Message(s) Email.Phishing.RB-1806: 2 Message(s) I think these are ClamAV-specific names, how can I find out more detailed info on each one? I do not see

Re: [Clamav-users] whitelist in 0.80

2004-12-27 Thread Rich Graves
Tayfun ASKER wrote: in 0.80, structure of clamav-milter.c is totally changed. I'm trying to use the localnets part of the new clamav-milter.c to build a whitelist. When I add an ip address with 32 bit netmask to the localnets list, clamav stops scanning not just emails originating from that ip bu

Re: [Clamav-users] ClamAV JPEG Exploit - False Positives

2004-11-17 Thread Rich Graves
/bboard/q-and-a-fetch-msg?msg_id=003j8d PhotoShop's "special" jpegs cause problems for other applications, including IE and Mozilla. The "save for web" wizard should be used instead of "save." ClamAV shouldn't detect them as viruses, though. -- Rich Grav

[Clamav-users] Logging infected remoteIP with clamav-milter

2004-11-12 Thread Rich Graves
ng too far from the supported code base -- but I'd imagine others might appreciate this feature. I can work on the patch if you'd prefer... -- Rich Graves <[EMAIL PROTECTED]> UNet Systems Administrator ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

RE: [Clamav-users] clamd dying: reasons

2004-05-16 Thread Rich
h which is included in the clamav package. Hth, -rich -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of K. Shantanu Sent: Monday, May 17, 2004 12:52 PM To: [EMAIL PROTECTED] Subject: [Clamav-users] clamd dying: reasons Hi, Are there any particular reasons why clamd

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Rich
Found this Googling, good tool too to monitor clamd ;-) http://www.tildeslash.com/monit/ - Original Message - From: "Fajar A. Nugraha" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 14, 2004 12:41 PM Subject: Re: [Clamav-users] Clamd Leaking? > Lucas Albers wrote: > >

[Clamav-users] softlimit+clamav

2004-05-12 Thread Rich
Jason, I Googled my clamav problem (memory usage grows!) and found this thread. I've had numerous OOM with my production box so I thought running Softlimit+Clamd would be a good idea. The problem is I get get segmentation fault error and all the clamd processes seems to hang. You mentioned that y

Re: [Clamav-users] Clamd Leaking?

2004-05-12 Thread Rich
I tried softlimit but each clamscan process hangs :-/ - Original Message - From: "Fajar A. Nugraha" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 12, 2004 1:20 PM Subject: Re: [Clamav-users] Clamd Leaking? > Rich wrote: > > >

RE: [Clamav-users] Clamd Leaking?

2004-05-12 Thread Rich
Yes thanks. I did update to .70, everything's OK so far. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Niek Sent: Wednesday, May 12, 2004 6:07 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Clamd Leaking? Rich wrote: > This might be slig

Re: [Clamav-users] Clamd Leaking?

2004-05-11 Thread Rich
Is it advisable to use softlimits with clamd? exec /usr/local/bin/setuidgid qscand \ /usr/local/bin/softlimit -a 4000 /usr/local/sbin/clamd - Original Message - From: "Lutz Petersen" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 12, 2004 4:30 AM Subject: Re: [

[Clamav-users] Clamd Leaking?

2004-05-10 Thread Rich
This might be slightly off-base here, but anyone know if clamd leaks and if there's any current patch? I'm running 0.70-rc. Below's the memory usage showing clamd eating up the mem resource. 2621 qscand15 0 815M 477M 352 S 0.5 47.4 462:01 1 cl

Re: [clamav-users] Very annoying problem with freshclam

2003-05-23 Thread Rich Ramos
viruses.db database. -- Checking for a new database - started at Tue May 6 11:22:22 2003 ERROR: Can't create md5 checksum of the viruses.db database. After I re-ran freshclam manually, it worked. -Rich --- Original --- From: Ed Phillips <[EMAIL PROTECTED]

[clamav-users] weird problem with clamd on OpenBSD 3.2

2003-03-13 Thread Rich Ramos
27;_waitq_insert: Already in queue' at line 280 in file /usr/src/lib/libc_r/uthread/uthread_priority_queue.c (errno = 4) Any suggestions? -Rich - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [clamav-users] How to use clamav with sendmail

2003-03-07 Thread Rich Ramos
ching for something to fit the bill of being a milter that integrates virus checking into sendmail. Any other suggestions? On a side note, just starting using ClamAV and I really like it. Keep up the good work. Thanks in advance for any help. -Rich -

[clamav-users] getting clamscan to work on OBSD

2003-03-05 Thread Rich Ramos
cat >>confdefs.h <<\_ACEOF #define CL_THREAD_SAFE 1 In other words I had to add -lc_r to the libraries linked. I'm not sure if this was the best solution or not, but it worked. -Rich - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]