Re: [Clamav-users] Is this a safe use of /tmp?

2003-09-23 Thread Thomas Lamy
Philip Mak wrote: Is this a safe way to use /tmp? Or is it vulnerable to the local symlink attack where another user on the system predicts the filename I am going to create, and makes a symlink using that name and does nasty things? TIME=$(/bin/date "+%s") FILE="/tmp/clamscan.$TIME.$PPID.orig" DIR

Re: [Clamav-users] Clamd and logrotate

2003-09-23 Thread Tomasz Kojm
> Mon Sep 22 08:02:53 2003 -> SelfCheck: Integrity OK > Mon Sep 22 09:02:59 2003 -> SelfCheck: Database status OK. > Mon Sep 22 09:02:59 2003 -> SelfCheck: Integrity OK > Mon Sep 22 09:37:01 2003 -> SIGHUP catched: log file re-opened. > Mon Sep 22 09:37:01 2003 -> ERROR: accept() failed. > Mon Sep

Re: [Clamav-users] Can ClamAV scan inside MIME messages?

2003-09-23 Thread Tomasz Papszun
On Tue, 23 Sep 2003 at 8:35:57 +0200, Thomas Lamy wrote: > Philip Mak wrote: > >On Tue, Sep 23, 2003 at 12:34:41AM -0400, Flinn Mueller wrote: > >>On Tuesday, September 23, 2003, at 12:13 AM, Philip Mak wrote: > >>>When I scan a MIME message using ClamAV, can I just feed the raw > >>>message into

[Clamav-users] clamav-milter help setup with inet sockets

2003-09-23 Thread Alex Barger
> Just recently installed clamav works fine. Yesterday finally found a post on > here so I could compile clamav-milter. > I had to build the helper-progs from libmilter, so I could get lbsm.a and to > add libs option in Makefile. > > Does anyone know how to test this milter? > > I have a redhat 7.3

Re: [Clamav-users] Worm.Gibe.F

2003-09-23 Thread Ray Slakinski
Still not working, is there a way to generate some sort of log? It doesn't appear to be getting any viruses now :( FYI I should note I am using spamassassin via procmailrc as well, is there an order I should follow? Ray On Monday, September 22, 2003, at 05:24 PM, Ray Slakinski wrote: Switch

Re: [Clamav-users] Worm.Gibe.F

2003-09-23 Thread Ray Slakinski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 /usr/local/bin/uudeview is better than /usr/bin/local/uudeview Sorry for the trouble ^^;; Ray On Tuesday, September 23, 2003, at 02:09 PM, Ray Slakinski wrote: Still not working, is there a way to generate some sort of log? It doesn't appear to be

[Clamav-users] procmail

2003-09-23 Thread Ed Thompson
Is there anything wrong with this? I amd running clamav from procmail: :0HB * ! ? /usr/local/bin/clamscan --quiet - VIRUS Do I NEED clamav-milter if I am doing this? __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuil

Re: [Clamav-users] clamav-milter+sendmail-8.12.9

2003-09-23 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 20 Sep 2003 10:21 am, Tommi Rintala wrote: > if, instead it is started with: > > /usr/local/sbin/clamd >/dev/null 2>&1 > /usr/local/sbin/clamav-milter -lo local:/var/run/clmilter.sock >/dev/null > 2>&1 Good suggestion and may be it sh

[Clamav-users] (no subject)

2003-09-23 Thread Christopher Tan
>From my kernel logs, > pid 24297 (clamscan), uid 0: exited on signal 6 (core dumped) > Sep 23 03:11:50 freebsd /kernel: pid 24297 (clamscan), uid 0: exited on signal 6 (core dumped) > pid 75167 (clamd), uid 1012: exited on signal 11 > Sep 23 04:25:40 freebsd /kernel: pid 75167 (clamd), uid 1012: e

RE: [Clamav-users] (no subject)

2003-09-23 Thread Nigel Horne
>From what I gather from google, signal 6 is the Abort trap. why is it doing that ? Can I see the output of stdout/stderr please. -Nigel --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _

[Clamav-users] Can clamav filter Swen

2003-09-23 Thread Stephen Liu
Hi all folks, RH9 Evolution 1.4 = Just join this list. W32/Swen has been continued attacking my PC for more than 3 days. It disguised as M$ support mails, junk mails, and transformed rapidly, changing Sender and Recipient Addresses, Subject, etc. Although it causes no damage to my

Re: [Clamav-users] Trouble compiling clamav-milter...

2003-09-23 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 22 Sep 2003 11:48 pm, Edward Thompson wrote: > Under RedHat 9, after Do you have the sendmail-devel RPM installed? - -Nigel - -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://

Re: [Clamav-users] clamav-milter+sendmail-8.12.9

2003-09-23 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 22 Sep 2003 6:47 am, Tommi Rintala wrote: > Yes, the clamd is running, but something like this: > > > clamav 11691 11689 0 Sep17 ?00:00:00 [clamd ] In that case it isn't running (that's what the defunct means). It's died. Please u

Re: [Clamav-users] clamscan chokes on this email

2003-09-23 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 22 Sep 2003 4:59 pm, René Bellora wrote: > clamscan: message.c:739: decodeLine: Assertion `strlen(line) <= 76' failed. Thank you for the sample file. I ran it against the latest version and got this output: LibClamAV Warning: Illegal chara

Re: [Clamav-users] Can ClamAV scan inside MIME messages?

2003-09-23 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Sep 23, 2003 at 12:34:41AM -0400, Flinn Mueller wrote: > Actually, I just found a message where if I clamscan the whole > message, it claims the message is clean, but if I save the attachment > file and clamscan that, it finds a virus. > > So