I was referencing Linux ... Specifically Fedora 11
-Original Message-
From: clamav-users-boun...@lists.clamav.net
[mailto:clamav-users-boun...@lists.clamav.net]on Behalf Of Nathan Gibbs
Sent: Thursday, May 13, 2010 3:32 PM
To: ClamAV users ML
Subject: Re: [Clamav-users] notification when
* Scott Mohnkern wrote:
> Are you on Windows or linux machines?
>
>
That all depends on where I'm sitting
Why?
--
Sincerely,
Nathan Gibbs
Systems Administrator
Christ Media
http://www.cmpublishers.com
___
Help us build a comprehensive ClamAV guide
Are you on Windows or linux machines?
Scott Mohnkern
On Thu, May 13, 2010 at 3:56 PM, Nathan Gibbs wrote:
> * Cliff Hayes wrote:
> > Hello,
> >
> > I am a system administrator who manages many servers and need a way to
> > programatically ping clamd on a server and get a response which I can
>
* Nathan Gibbs wrote:
>
> Blah Blah Blah
>
Sorry all,
Didn't intend to do that on list.
:-)
--
Sincerely,
Nathan Gibbs
Systems Administrator
Christ Media
http://www.cmpublishers.com
signature.asc
Description: OpenPGP digital signature
___
Help
* Cliff Hayes wrote:
> Hello,
>
> I am a system administrator who manages many servers and need a way to
> programatically ping clamd on a server and get a response which I can
> interpret to mean clamd is ok or the engine needs to be updated.
>
Howdy,
I'm the developer of clamd.monitor a moni
Subject: Re: [Clamav-users] notification when clamd engine outdated
Quoting Cliff Hayes :
> I am a system administrator who manages many servers and need a way to
> programatically ping clamd on a server and get a response which I can
> interpret to mean clamd is ok or the engine needs to b
Quoting Cliff Hayes :
I am a system administrator who manages many servers and need a way to
programatically ping clamd on a server and get a response which I can
interpret to mean clamd is ok or the engine needs to be updated.
If you're willing to do the reverse, you can have the servers not
On 5/13/10 7:54 AM, Cliff Hayes wrote:
Hello,
I am a system administrator who manages many servers and need a way to
programatically ping clamd on a server and get a response which I can
interpret to mean clamd is ok or the engine needs to be updated.
Unfortunately, I often get overwhelmed and d
Hello,
I am a system administrator who manages many servers and need a way to
programatically ping clamd on a server and get a response which I can
interpret to mean clamd is ok or the engine needs to be updated.
Unfortunately, I often get overwhelmed and don't have time to read all the
logs on a
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
ClamAV update process started at Thu Mar 29 21:21:52 2007
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
See the FAQ at http://www.clamav.net/support/faq for an explanation.
main.cvd is up to date (version: 42, sigs: 83951, f-level: 10,
builde
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yes, I did.
Am 30. Mrz 2007 um 10:10 schrieb Greg McCarthy:
Thanks - I'll give those programs a try out.
It happened again last night - for some reason the freshclam could not
connect to the update site and for some reason it looks like it never
ti
Greg McCarthy schrieb:
Thanks - I'll give those programs a try out.
It happened again last night - for some reason the freshclam could not
connect to the update site and for some reason it looks like it never
times out and keeps running. This somehow causes the clamav milter to
die. I'll go thr
Thanks - I'll give those programs a try out.
It happened again last night - for some reason the freshclam could not
connect to the update site and for some reason it looks like it never
times out and keeps running. This somehow causes the clamav milter to
die. I'll go through the logs and see if I
Greg McCarthy wrote:
I found a problem on one of our clamav servers - freshclam kept timing
out when updating (My fault - a firewall rule problem) For some reason
this caused the clamav milter to die which is not a huge problem as
sendmail continues to deliver mail.
The error I got was:
Mar 28 1
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Mar 29, 2007 at 11:13:11AM +0200, Greg McCarthy wrote:
>
>Now to my question :) Does anyone have a script or know how I can
>monitor the clamav milter so if it ever dies again I get an email
>alert, or the script can even restart the milter.
I found a problem on one of our clamav servers - freshclam kept timing
out when updating (My fault - a firewall rule problem) For some reason
this caused the clamav milter to die which is not a huge problem as
sendmail continues to deliver mail.
The error I got was:
Mar 28 15:15:45 pdcsmtp01 send
Hi ,
where do i find the syntax for the notification template files e.g.
notify_sender.txt, notify_virus_sender.txt?, I intend to customize the
various notification messages to suitable messages using the
read_I10n_templates.
Thank you,
Stephen
_
Dear all,
I'm currently running clamav + amavisd-new for some time, and having read
through the arguments on notification here:-
http://lists.clamav.net/lurker/thread/20040922.180416.24842818.en.html
I decided to enforce this notification policy in amavisd-new (slight
modification from amavisd-n
On Wed, 22 Sep 2004, Matt wrote:
The easiest way to distinguish this is if you are scanning the mail AFTER
you have accepted delivery of the email, then discard, do not bounce.
However, if you are filtering before accepting the email, then reject.
Agreed. If you're filtering your mail after it was
On Wed, 22 Sep 2004, Kelson wrote:
Simple solution to the question of whether to send a notice:
You know what virus was detected. You know whether it's a mass-mailer or
something else. (starts with Worm., ends with @mm, a few specific others)
Based on that, you can decide whether to reject it or
As a riposte: I'm not alone in this, far from it, actually. A similar
request was recently issued by virusalert.nl, a dutch organisation
on virus prevention.
See http://www.virusalert.nl/?show=nieuws&id=559
I attempted to use the Fish to translate, and looked at their little
picture of the situat
Damian Menscher wrote:
> Maybe I'm missing something, but they're not talking about not
> rejecting. They're talking about not bouncing (sending out non-delivery
> notifications in response to EVERY virus). There's a huge difference. I
> think you'd be hard-pressed to find a legitimate company s
Simple solution to the question of whether to send a notice:
You know what virus was detected. You know whether it's a mass-mailer
or something else. (starts with Worm., ends with @mm, a few specific others)
Based on that, you can decide whether to reject it or discard it.
--
Kelson Vibber
Speed
On Wed, 22 Sep 2004, Jan Pieter Cornet wrote:
On Tue, Sep 21, 2004 at 06:39:25PM -0500, Damian Menscher wrote:
As a riposte: I'm not alone in this, far from it, actually. A similar
request was recently issued by virusalert.nl, a dutch organisation
on virus prevention.
See http://www.virusalert.nl/?
On Tue, Sep 21, 2004 at 06:39:25PM -0500, Damian Menscher wrote:
> On Wed, 22 Sep 2004, Jan Pieter Cornet wrote:
> >On Mon, Sep 20, 2004 at 04:26:40PM -0700, [EMAIL PROTECTED]
> >wrote:
> >>It is perfectly acceptable to place an explanatory message in an SMTP
> >>REJECT message.
> >
> >Acceptable,
On Wednesday 22 September 2004 04:10 am, Randal, Phil wrote:
> > > Why? Since all you achieve with rejects is indirectly
> > > causing a lot of
> > > "virus bounces" to appear at innocent bystanders.
> >
> > NO.
> > Virii are usually send directly from the virus and the virus
> > will not send boun
On Tue, 21 Sep 2004 15:21:22 -0400 in [EMAIL PROTECTED] Ryan
Moore <[EMAIL PROTECTED]> wrote:
> Brian Morrison wrote:
> > You need to do something appropriate to sendmail.cf or the milter
> > configuration (which I know nothing about I'm afraid) to do this.
> >
> > This is not something that can
Steffen wrote:
> Hi
>
>> Why? Since all you achieve with rejects is indirectly
> causing a lot of
> "virus bounces" to appear at innocent bystanders.
>
> NO.
> Virii are usually send directly from the virus and the virus
> will not send bounces... :D However, if a virus can send
> through an SMTP
Hi
> Why? Since all you achieve with rejects is indirectly causing a lot of
"virus bounces" to appear at innocent bystanders.
NO.
Virii are usually send directly from the virus and the virus will not send
bounces... :D
However, if a virus can send through an SMTP server, that server needs to be
b
On Tuesday 21 September 2004 06:39 pm, Damian Menscher wrote:
> > Why? Since all you achieve with rejects is indirectly causing a lot of
> > "virus bounces" to appear at innocent bystanders.
>
> No, you also guard against false positives.
exactly. If the remote sender is sending a legitimate file
Brian Morrison wrote:
You need to do something appropriate to sendmail.cf or the milter
configuration (which I know nothing about I'm afraid) to do this.
This is not something that can be configured in clamav AFAICS.
He was referring to the clamav-milter, which *does* hook clamav into
sendmail, an
On Wed, 22 Sep 2004, Jan Pieter Cornet wrote:
On Mon, Sep 20, 2004 at 04:26:40PM -0700, [EMAIL PROTECTED] wrote:
It is perfectly acceptable to place an explanatory message in an SMTP
REJECT message.
Acceptable, maybe, but I believe it's better to simply discard all
viruses.
And most sane people bel
On Mon, Sep 20, 2004 at 04:26:40PM -0700, [EMAIL PROTECTED] wrote:
> It is perfectly acceptable to place an explanatory message in an SMTP
> REJECT message.
Acceptable, maybe, but I believe it's better to simply discard all
viruses.
Why? Since all you achieve with rejects is indirectly causing a
On Tuesday 21 Sep 2004 16:44, [EMAIL PROTECTED] wrote:
> Nigel Horne wrote:
> > On Monday 20 Sep 2004 22:45, Jonathan Pitcher wrote:
> >> Is it possible to send a message onto the user that they had an
> >> e-mail blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus
> >> sent to them
On Tue, 21 Sep 2004 08:44:45 -0700 in
[EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
> If there is no way to do this currently, can I submit this as a
> feature request for clamav-milter?
But as you have already been told, it is up to the MTA to do this.
When Exim passes incoming mail through cl
Nigel Horne wrote:
> On Monday 20 Sep 2004 22:45, Jonathan Pitcher wrote:
>> Is it possible to send a message onto the user that they had an
>> e-mail blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus
>> sent to them?
>
> Yes it is, though the first option is not advisable. You c
On Monday 20 Sep 2004 22:45, Jonathan Pitcher wrote:
> We have Clam Av installed and running. It is blocking virus e-mails
> but is not generating any notification.
>
> Is it possible to send a message onto the user that they had an e-mail
> blocked? Or to an admin stating that [EMAIL PROTECTED]
On 9/20/2004 11:45 PM +0200, Jonathan Pitcher wrote:
We have Clam Av installed and running. It is blocking virus e-mails
but is not generating any notification.
Is it possible to send a message onto the user that they had an e-mail
blocked? Or to an admin stating that [EMAIL PROTECTED] had a viru
Le Mon 20/09/2004, Steffen Heil disait
> However, if you do such things, PLEASE only send a notification to the
> intended user, NOT to the author. This would cause lot of collateral damage.
And ONLY if the intended recipient is a local one...
--
Erwan David
> With one caveat.
> It is perfectly acceptable to place an explanatory message in an SMTP
> REJECT message.
>
> Something like
>
> EHLO (hi)
> MAIL FROM (ok)
> RCPT TO (ok)
> DATA (can't accept for delivery, contains the EICAR virus!)
>
> If the mail is being sent by a virus, the virus will usuall
Christopher X. Candreva said:
> On Mon, 20 Sep 2004, Jonathan Pitcher wrote:
>
>> Is it possible to send a message onto the user that they had an e-mail
>> blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to
>> them?
>
> Yes.
>
> It is also a bad idea.
>
> Since most viruses
On Mon, 20 Sep 2004, Jonathan Pitcher wrote:
> Is it possible to send a message onto the user that they had an e-mail
> blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to
> them?
Yes.
It is also a bad idea.
Since most viruses forge the From: address, you will not be p
Steffen Heil wrote:
> Hi
>
>> We have Clam Av installed and running. It is blocking virus e-mails
but
>> is not generating any notification.
>
> ... PLEASE only send a notification to the
> intended user, NOT to the author. This would cause lot of
> collateral damage.
With one caveat.
It is per
Jonathan Pitcher wrote:
Is it possible to send a message onto the user that they had an e-mail
blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to
them?
http://www.mailscanner.info
--
/Peter Bonivart
--Unix lovers do it in the Sun
Hi
> We have Clam Av installed and running. It is blocking virus e-mails but
is not generating any notification.
Right. clamav is just a virus scanner. It's sole purpose is to detect virii.
So, how are you passing your mails to clamav? That component or your mail
server could do that.
However,
We have Clam Av installed and running. It is blocking virus e-mails
but is not generating any notification.
Is it possible to send a message onto the user that they had an e-mail
blocked? Or to an admin stating that [EMAIL PROTECTED] had a virus sent to
them?
Thanks in advance.
--
On Friday 31 October 2003 8:01 pm, Nigel wrote:
> > | Use the --quiet option of clamav-milter.
> >
> > Where? When I compile? In my init script?
>
> In your init script, it's a run time option...
I should have added that on Linux it's best to add it to
/etc/sysconfig/clamav-milter
-Nigel
-
> | Use the --quiet option of clamav-milter.
>
> Where? When I compile? In my init script?
In your init script, it's a run time option...
> Thanks.
-Nigel
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net h
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| Use the --quiet option of clamav-milter.
Where? When I compile? In my init script?
Thanks.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQE/omao8SyNUqEG5J0RAv
> clamav-milter seems to send out a little notification to postmaster,
> and the original sender, when it discovers a virused email. But I have
> lots of spoofed Sender addresses. I dont want to send
> notifications to them. How can I turn off that feature?
Use the --quiet option of clamav-milter.
Am 29.10.2003 um 21:57 schrieb Pat Masterson:
clamav-milter seems to send out a little notification to postmaster,
and the original sender, when it discovers a virused email. But I have
lots of spoofed Sender addresses. I dont want to send
notifications to them. How can I turn off that feature? -
clamav-milter seems to send out a little notification to postmaster,
and the original sender, when it discovers a virused email. But I have
lots of spoofed Sender addresses. I dont want to send
notifications to them. How can I turn off that feature? -pat
52 matches
Mail list logo
