RE: [Clamav-users] Worm.Sober.K getting through...

2005-02-24 Thread Tim Howell
Tim Howell wrote: > [EMAIL PROTECTED] wrote: > >> Find a particular infected message and check the logs for errors or >> warnings around the time the message went through > > Which logs? There isn't anything at all about the message in the > qmailscanner viruses

RE: [Clamav-users] Worm.Sober.K getting through...

2005-02-24 Thread Tim Howell
[EMAIL PROTECTED] wrote: > Find a particular infected message and check the logs for errors or > warnings around the time the message went through Which logs? There isn't anything at all about the message in the qmailscanner viruses.log, and I don't think anything would be reported in the qmail

[Clamav-users] Worm.Sober.K getting through...

2005-02-24 Thread Tim Howell
Several of my users have received the virus classified by ClamAV as Worm.Sober.K today. I use qmail with SpamAssassin and ClamAV through qmailscanner. I'm not sure how it is getting through as: 1. All of my mail is scanned by ClamAV and Clam definitely recognizes this virus. If I take the zip

RE: [Clamav-users] Long running clamscan processes...

2005-02-24 Thread Tim Howell
Nigel Horne wrote: >> Same here, the thing suddenly crashes every now and then... > > > Try this patch and see if it helps in scanners.c: > /* Scan metadata */ > mdata = root->zip_mlist; > do { > if(mdata->encrypted != encrypted) > continue; > > Change to > > /* Scan metadata */

Re: [Clamav-users] Long running clamscan processes...

2005-02-24 Thread Tim Howell
On Feb 24, 2005, at 7:23 AM, Nigel Horne wrote: This is fixed in the version in CVS, though you may wish to forward the errant message to me to double check (as usual zip with the password 'virus'). -Nigel One other question: RE: sending you the errant message, I'm not quite sure how to get at the

Re: [Clamav-users] Long running clamscan processes...

2005-02-24 Thread Tim Howell
On Feb 24, 2005, at 7:23 AM, Nigel Horne wrote: This is fixed in the version in CVS, though you may wish to forward the errant message to me to double check (as usual zip with the password 'virus'). -Nigel I've just installed the CVS tarball on my test server. After make install I tried clamscan

[Clamav-users] Long running clamscan processes...

2005-02-24 Thread Tim Howell
I've got a Linux box running qmail with SpamAssassin and ClamAV (using clamscan because I've had stability problems with clamdscan) to filter all of the mail coming into and out of our network. The system works very well for the most part, but once in a while I end up with a number of long run

RE: [Clamav-users] Many clamscan processes

2004-12-14 Thread Tim Howell
Jason Haar wrote: > Tomasz Kojm wrote: > >>> I use ClamAV in association with qmailscanner and SpamAssassin to >>> filter email. Several times in the past three days this mail server >>> has become unresponsive. The only things that I can think of that >>> has changed in that time are the virus

RE: [Clamav-users] Many clamscan processes

2004-12-13 Thread Tim Howell
Tomasz Kojm wrote: > On Mon, 13 Dec 2004 14:18:00 -0800 > "Tim Howell" <[EMAIL PROTECTED]> wrote: > >> I use ClamAV in association with qmailscanner and SpamAssassin to >> filter email. Several times in the past three days this mail server >> has becom

[Clamav-users] Many clamscan processes

2004-12-13 Thread Tim Howell
I use ClamAV in association with qmailscanner and SpamAssassin to filter email. Several times in the past three days this mail server has become unresponsive. The only things that I can think of that has changed in that time are the virus definitions used by Clam. ps -A | grep clamscan | wc -l r

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Tim Howell
Jason Haar wrote: > No - you can do it. If you assign account "DOM\imapadmin" to have > full access rights to everyone's mailboxes, then you can login via > IMAP as "DOM/imapadmin/mailbox_alias" . Yes, it has to be "/", and > "mailbox_alias" is the alias associated with a mailbox - typically > e

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-09 Thread Tim Howell
[EMAIL PROTECTED] wrote: > On Mon, 8 Nov 2004 [EMAIL PROTECTED] wrote: > >> Tim Howell wrote: >>> Have any of you thought of what it would take to use Clam to scan >>> mailboxes stored on an Exchange server? >> >> Hmmm... >> Get a list of mailb

[Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread Tim Howell
I think a lot of us may use ClamAV on gateway SMTP servers that eventually deliver mail to Microsoft Exchange. Have any of you thought of what it would take to use Clam to scan mailboxes stored on an Exchange server? Clam is great, and it catches almost everything that gets sent to us, but there

RE: [Clamav-users] clamd hang in rc4

2004-10-12 Thread Tim Howell
[EMAIL PROTECTED] wrote: > For added reliability, can we have clamdscan call clamscan if clamd > is toast and has timed out? > > -Eric I would really like to see that as well. I would rather run clamdscan than clamscan but I don't because of reliability concerns. --TWH ___

[Clamav-users] DNSDatabaseInfo Directive...

2004-09-22 Thread Tim Howell
Can someone explain how to use the DNSDatabaseInfo directive in freshclam.conf? I would like to use DNS checks, but I don't see any reference to this option in the man pages, etc. Thanks! =) --TWH --- This SF.Net email is sponsored by: YOU B

[Clamav-users] Hooray for .80rc

2004-09-21 Thread Tim Howell
ClamAV development team-- Thank you very, very much for ClamAV. This product has done a remarkable job of keeping virii out of out network. Your support and continual improvement of ClamAV are quite remarkable. Thank you. =) --Tim Howell --MIS Supervisor, First Evangelical Free Church of

RE: [Clamav-users] Second-tier Mirrors...

2004-08-25 Thread Tim Howell
On Mon, 23 Aug 2004, Damian Menscher wrote: >> It would help if you could define what you mean by a second-tier mirror. >> If you allow just anyone to connect, then what makes you second-tier >> instead of primary-tier? And if you restrict your connections to come >> from within your domain,

[Clamav-users] Second-tier Mirrors...

2004-08-23 Thread Tim Howell
Someone recently suggested the idea of allowing sites with less than the mirror site requirements becoming second-tier mirrors. This thread is an attempt to see what kind of interest there is in such an idea and for the developers to respond whether or not the idea has merit. --TWH

[Clamav-users] ClamAV and qmail without qmail-scanner

2003-10-28 Thread Tim Howell
Title: ClamAV and qmail without qmail-scanner I've searched google and the list archives and didn't come up with much.  Is there a way to use ClamAV on a site-wide qmail installation without using qmail-scanner?  Has anyone written anything like the SpamAssassin qmail-spamc qmail-queue replac