Re: [Clamav-users] Maybe a virus Sober.P

2005-05-06 Thread Eric Wieling aka ManxPower
Dennis Peterson wrote: My webmail is configured to use our standard smtp servers for all inbound/outbound mail. It really isn't all that difficult. I think they mean webmail systems that are not on your network and that you don't manage. i.e. Hotmail. _

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Jim Maul
Bart Silverstrim wrote: On May 5, 2005, at 2:38 PM, Matt Fretwell wrote: Bart Silverstrim wrote: This is actually two separate scenarios. That was Daniel's fault instigated by his being vague :) "Now, a clever man would put the poison into his own goblet, because he would know that only a great

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Bit Fuzzy
> > "Now, a clever man would put the poison into his own goblet, because he > would know that only a great fool would reach for what he was given. I > am not a great fool, so I can clearly not choose the wine in front of > you. But you must have known I was not a great fool, you would have > c

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Bart Silverstrim
On May 5, 2005, at 2:38 PM, Matt Fretwell wrote: Bart Silverstrim wrote: This is actually two separate scenarios. That was Daniel's fault instigated by his being vague :) "Now, a clever man would put the poison into his own goblet, because he would know that only a great fool would reach for what

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Bart Silverstrim wrote: > This is actually two separate scenarios. That was Daniel's fault instigated by his being vague :) > To which someone replied that in a *PROPER* network that is *well > managed* this isn't a worry because we block all external mail hosts > and use a proxy for web tra

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Bart Silverstrim
On May 5, 2005, at 10:45 AM, Matt Fretwell wrote: Bart Silverstrim wrote: My webmail is configured to use our standard smtp servers for all inbound/outbound mail. It really isn't all that difficult. My understanding was that we were talking about people accessing Yahoo or Hotmail from work, not you

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
this Dennis Peterson spake: > Todd Lyons said: > >>Matt Fretwell wanted us to know: >> >> as it is harder to scan those messages for viruses >>> >>>Nonsense. Mail is mail. If you are running a mailserver, it should be >>>able to cope with all types of mail, irrelevant of (creation|submission)

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Dennis Peterson
Todd Lyons said: > Matt Fretwell wanted us to know: > >>> as it is harder to scan those messages for viruses >> Nonsense. Mail is mail. If you are running a mailserver, it should be >>able to cope with all types of mail, irrelevant of (creation|submission) >>method. > > Nonsense. A user clicks on

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Todd Lyons
Matt Fretwell wanted us to know: >> as it is harder to scan those messages for viruses > Nonsense. Mail is mail. If you are running a mailserver, it should be >able to cope with all types of mail, irrelevant of (creation|submission) >method. Nonsense. A user clicks on a webmail message, opens th

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Daniel J McDonald spake: > On Thu, 2005-05-05 at 09:32 -0500, John Madden wrote: > >>>If they were running their systems properly we wouldn't be having this >>>conversation. The clients of those systems are able to retrieve mail and >>>attachments straight to local storage while by-passing lo

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Daniel J McDonald wrote: > Maybe, but we have blocked > web-based-outside-e-mail-such-as-yahoo-or-msn-or-gmail-that-doesn't-use > -our-MTA (Hopefully that is explicit enough for the nit-pickers who > can't read context) Explicit, but terrible punctuation :) Matt ___

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Dennis Peterson wrote: > Very true - but policy is far less expensive than new hardware, and > there are no licensing fees. I'd have to see the business reason to go > there. The one business reason I can think of offhand, which is irrespective of any other consideration, is stupidity. People ig

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Daniel J McDonald
On Thu, 2005-05-05 at 09:32 -0500, John Madden wrote: > > If they were running their systems properly we wouldn't be having this > > conversation. The clients of those systems are able to retrieve mail and > > attachments straight to local storage while by-passing local filters (and > > policy). No

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Bart Silverstrim wrote: > > My webmail is configured to use our standard smtp servers for all > > inbound/outbound mail. It really isn't all that difficult. > > My understanding was that we were talking about people accessing Yahoo > or Hotmail from work, not your own internal mail servers with

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Dennis Peterson
Matt Fretwell said: > Dennis Peterson wrote: > >> If they were running their systems properly we wouldn't be having this >> conversation. The clients of those systems are able to retrieve mail and >> attachments straight to local storage while by-passing local filters >> (and policy). Not very diff

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread John Madden
> If they were running their systems properly we wouldn't be having this > conversation. The clients of those systems are able to retrieve mail and > attachments straight to local storage while by-passing local filters (and > policy). Not very different from browsing ftp sites in that regard, and >

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Matt Fretwell spake: > Dennis Peterson wrote: > > >>If they were running their systems properly we wouldn't be having this >>conversation. The clients of those systems are able to retrieve mail and >>attachments straight to local storage while by-passing local filters >>(and policy). Not ver

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Bart Silverstrim
On May 5, 2005, at 9:40 AM, Dennis Peterson wrote: Bart Silverstrim said: On May 5, 2005, at 8:02 AM, Matt Fretwell wrote: Daniel J McDonald wrote: as it is harder to scan those messages for viruses Nonsense. Mail is mail. If you are running a mailserver, it should be able to cope with all types

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Dennis Peterson wrote: > If they were running their systems properly we wouldn't be having this > conversation. The clients of those systems are able to retrieve mail and > attachments straight to local storage while by-passing local filters > (and policy). Not very different from browsing ftp sit

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Dennis Peterson
John Madden said: >>> Exactly. Whatever numpty would have a web based application sending >>> mail >>> directly, bypassing your smtp, >> >> Yahoo, gmail, etc > > (No, their web mail applications work as they're supposed to, sending mail > to > their pool of MTA's.) > If they were running thei

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Daniel J McDonald wrote: > Right, so they should be blocked. The likes of those webmail systems are no worse that admins who do not configure their outgoing smtp to scan for virii. An outbreak can originate from any poorly configured mail system, regardless of type. > Did you read the original

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread John Madden
>> Exactly. Whatever numpty would have a web based application sending mail >> directly, bypassing your smtp, > > Yahoo, gmail, etc (No, their web mail applications work as they're supposed to, sending mail to their pool of MTA's.) -- John Madden UNIX Systems Engineer Ivy Tech State Coll

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Dennis Peterson
Matt Fretwell said: > Dennis Peterson wrote: > >> >>> as it is harder to scan those messages for viruses >> >> >> >> Nonsense. Mail is mail. If you are running a mailserver, it should >> >be> able to cope with all types of mail, irrelevant of >> >> (creation|submission) >> >> method. >> > >> > But

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Daniel J McDonald
On Thu, 2005-05-05 at 14:51 +0100, Matt Fretwell wrote: > Dennis Peterson wrote: > > > >>> as it is harder to scan those messages for viruses > > >> > > >> Nonsense. Mail is mail. If you are running a mailserver, it should > > >be> able to cope with all types of mail, irrelevant of > > >> (creati

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Dennis Peterson wrote: > >>> as it is harder to scan those messages for viruses > >> > >> Nonsense. Mail is mail. If you are running a mailserver, it should > >be> able to cope with all types of mail, irrelevant of > >> (creation|submission) > >> method. > > > > But...if they're using webmail, it

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Dennis Peterson spake: > Bart Silverstrim said: > >>On May 5, 2005, at 8:02 AM, Matt Fretwell wrote: >> >> >>>Daniel J McDonald wrote: >>> >>> as it is harder to scan those messages for viruses >>> >>> Nonsense. Mail is mail. If you are running a mailserver, it should be >>>able to cope w

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Dennis Peterson
Bart Silverstrim said: > > On May 5, 2005, at 8:02 AM, Matt Fretwell wrote: > >> Daniel J McDonald wrote: >> >>> as it is harder to scan those messages for viruses >> >> Nonsense. Mail is mail. If you are running a mailserver, it should be >> able to cope with all types of mail, irrelevant of >> (

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Daniel J McDonald spake: > On Thu, 2005-05-05 at 14:12 +0200, Timo Schoeler wrote: > >>thus Daniel J McDonald spake: >> >> >>>On Wed, 2005-05-04 at 16:24 +0100, Nigel Horne wrote: >>> >>> On Wednesday 04 May 2005 16:16, [EMAIL PROTECTED] wrote: >Man that never gets old. haha

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Bart Silverstrim
On May 5, 2005, at 8:02 AM, Matt Fretwell wrote: Daniel J McDonald wrote: as it is harder to scan those messages for viruses Nonsense. Mail is mail. If you are running a mailserver, it should be able to cope with all types of mail, irrelevant of (creation|submission) method. But...if they're usin

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Matt Fretwell spake: > Daniel J McDonald wrote: > > >>as it is harder to scan those messages for viruses > > > Nonsense. Mail is mail. If you are running a mailserver, it should be > able to cope with all types of mail, irrelevant of (creation|submission) > method. partly agreed. if the

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Randal, Phil spake: > [EMAIL PROTECTED] wrote: > >>On Wed, 2005-05-04 at 16:24 +0100, Nigel Horne wrote: >> >>>On Wednesday 04 May 2005 16:16, [EMAIL PROTECTED] wrote: >>> Man that never gets old. hahahaha not funny. I have no control over this warning. >>> >>>Yes you do. Us

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Timo Schoeler
thus Daniel J McDonald spake: > On Wed, 2005-05-04 at 16:24 +0100, Nigel Horne wrote: > >>On Wednesday 04 May 2005 16:16, [EMAIL PROTECTED] wrote: >> >>>Man that never gets old. hahahaha not funny. >>> >>>I have no control over this warning. >> >>Yes you do. Use a hotmail/yahoo/gmail account.

[OT] was: Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Slightly off topic, but has anyone noticed some numpty, (mentioning no names), replying to their posts with a test message? Matt ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Christopher X. Candreva
On Thu, 5 May 2005, Daniel J McDonald wrote: > At our company, all webmail is blocked and policy forbids it's use, as > it is harder to scan those messages for viruses (and the last time we > got hit by a mass-mailing worm - Melisa - was due to a person using > web-mail.) We still sell Unix shell

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Matt Fretwell
Daniel J McDonald wrote: > as it is harder to scan those messages for viruses Nonsense. Mail is mail. If you are running a mailserver, it should be able to cope with all types of mail, irrelevant of (creation|submission) method. Matt ___ http://lurke

RE: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Randal, Phil
[EMAIL PROTECTED] wrote: > On Wed, 2005-05-04 at 16:24 +0100, Nigel Horne wrote: >> On Wednesday 04 May 2005 16:16, [EMAIL PROTECTED] wrote: >>> Man that never gets old. hahahaha not funny. >>> >>> I have no control over this warning. >> >> Yes you do. Use a hotmail/yahoo/gmail account. > >

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Daniel J McDonald
On Wed, 2005-05-04 at 16:24 +0100, Nigel Horne wrote: > On Wednesday 04 May 2005 16:16, [EMAIL PROTECTED] wrote: > > Man that never gets old. hahahaha not funny. > > > > I have no control over this warning. > > Yes you do. Use a hotmail/yahoo/gmail account. At our company, all webmail is blo

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Dennis Peterson
Bart Silverstrim said: > > I've always wondered...why do people put confidentiality notices saying > "if this is not meant for you, erase it, yadda yadda..." at the END of > the message, so you already know what you're not supposed to know? > > I mean, they do know that these "disclaimers" haven't

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Jim Maul
Bart Silverstrim wrote: On May 4, 2005, at 11:12 AM, Nigel Horne wrote: On Wednesday 04 May 2005 16:02, [EMAIL PROTECTED] wrote: . If you have received this communication in error, please notify me immediately by telephone or fax But you haven't given your telephone and fax number, so how can you

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Bart Silverstrim
On May 4, 2005, at 11:12 AM, Nigel Horne wrote: On Wednesday 04 May 2005 16:02, [EMAIL PROTECTED] wrote: . If you have received this communication in error, please notify me immediately by telephone or fax But you haven't given your telephone and fax number, so how can you expect anyone to do th

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Brian Morrison
On Wed, 04 May 2005 17:15:40 +0200 in [EMAIL PROTECTED] Timo Schoeler <[EMAIL PROTECTED]> wrote: > > But you haven't given your telephone and fax number, so how can you > > expect anyone to do that? > > sometimes i think lawyers must be screaming of pain (caused by their > stupidity/silliness

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread GVeri
Nigel, Unfortunately, we have web surfing policies that watch total usage. Though it is valid, it is not worth mentioning. With the mailing list being so active I could miss out on alot of threads and great information.. Gord CONFIDENTIALITY WARNING: The information in the e:mail is confidentia

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Nigel Horne
On Wednesday 04 May 2005 16:16, [EMAIL PROTECTED] wrote: > Man that never gets old. hahahaha not funny. > > I have no control over this warning. Yes you do. Use a hotmail/yahoo/gmail account. -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTE

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread GVeri
Man that never gets old. hahahaha not funny. I have no control over this warning. CONFIDENTIALITY WARNING: The information in the e:mail is confidential and privileged. It is intended only for the use of the individual or entity it is addressed to. If the reader of this message is not the

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Timo Schoeler
thus Nigel Horne spake: > On Wednesday 04 May 2005 16:02, [EMAIL PROTECTED] wrote: > >>. If you have received this >>communication in error, please notify me immediately by telephone or fax > > > But you haven't given your telephone and fax number, so how can you expect > anyone to do that? so

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Nigel Horne
On Wednesday 04 May 2005 16:02, [EMAIL PROTECTED] wrote: >. If you have received this > communication in error, please notify me immediately by telephone or fax But you haven't given your telephone and fax number, so how can you expect anyone to do that? -- Nigel Horne. Arranger, Composer, Typ

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread GVeri
Joe, Thanks for the problem resolution. I was in the same boat and I made both DatabaseDirectory directive in the freshclam.conf and clamd.conf the same. I then restarted clam and checked the version, all is good. I then checked the logs and clam caught 10 Worm.Sober.P in 3 minutes. Thanks, Go

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Joe Kletch
On May 4, 2005, at 9:09 AM, Bowie Bailey wrote: From: Joe Kletch [mailto:[EMAIL PROTECTED] I am still not catching this one on two of my four servers. Any pointers to troubleshooting will be immediately pursued. Data from one that doesn't work: Definitions are current: mail joe $ freshclam ClamAV u

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Alex Pleiner
* Joe Kletch <[EMAIL PROTECTED]> [2005-05-04 16:07]: > I am still not catching this one on two of my four servers. Any > pointers to troubleshooting will be immediately pursued. Some look like W32/[EMAIL PROTECTED] (by McAfee): http://vil.mcafeesecurity.com/vil/content/v_132158.htm ~/virus > cl

RE: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Bowie Bailey
From: Joe Kletch [mailto:[EMAIL PROTECTED] > > I am still not catching this one on two of my four servers. Any > pointers to troubleshooting will be immediately pursued. > > Data from one that doesn't work: > > Definitions are current: > mail joe $ freshclam > ClamAV update process started at W

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Tomasz Kojm
On Wed, 4 May 2005 09:00:41 -0500 Joe Kletch <[EMAIL PROTECTED]> wrote: > Yet clamscan does not: > mail joe $ clamscan account_info-text.zip > account_info-text.zip: OK > > Nor does clamdscan: > mail joe $ clamdscan account_info-text.zip > /usr/home/joe/account_info-text.zip: OK > > ---

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Joe Kletch
I am still not catching this one on two of my four servers. Any pointers to troubleshooting will be immediately pursued. Data from one that doesn't work: Definitions are current: mail joe $ freshclam ClamAV update process started at Wed May 4 08:27:53 2005 main.cvd is up to date (version: 31, si