Re: [Clamav-users] zip files and clamav-milter

2005-09-23 Thread Nick Golder
On 2005-09-21 11:50 -0700, [EMAIL PROTECTED] wrote: > clamd is used by clamav-milter iff --external is used. > > If --external is NOT used, clamav-milter does its own scanning via > libclamav. In which case, the question of virus definition update > notification becomes important. How/when does

Re: [Clamav-users] zip files and clamav-milter

2005-09-23 Thread Cevher
Hi All, Zip files and exe files with the Worm.Bagz.D payload passing through the clamav-milter. I've saved the attachments from the infected messages and tried to resend them. In this case clamav-milter recognize them. On the other hand, if I forward or redirect the infected message, it passes the

RE: [Clamav-users] zip files and clamav-milter

2005-09-21 Thread Matthew.van.Eerde
Nick Golder wrote: > On 2005-09-21 09:51 -0700, [EMAIL PROTECTED] wrote: >> Are you using --external? > > Currenlty I am using LocalSocket. Using --external didn't make a > difference. Did you manually scan with clamscan or clamdscan? Try both ways. > Is clamd, via LocalSocket, being used by c

Re: [Clamav-users] zip files and clamav-milter

2005-09-21 Thread Nick Golder
On 2005-09-21 09:51 -0700, [EMAIL PROTECTED] wrote: > Are you using --external? Currenlty I am using LocalSocket. Using --external didn't make a difference. > > How does clamav-milter know when new virus definitions are available? > I assume freshclam doesn't notify clamav-milter threads. Is c

RE: [Clamav-users] zip files and clamav-milter

2005-09-21 Thread Matthew.van.Eerde
Nick Golder wrote: > I am consistently seeing zip files with the Worm.Bagle.Gen-* payload > getting through the clamav-milter (clamav-0.87). The milter is at > least partially working: > X-Virus-Scanned: ClamAV version 0.87, clamav-milter version 0.87 on > xxx.xxx.xxx X-Virus-Status: Clean > Are