[Clamav-users] ./clamav-wrapper: test: unknown operator pts/3

2004-03-08 Thread Grzegorz Staleñczyk
Hey! When I try use clamav-wrapper from my shell to try it I have this error: # ./clamav-wrapper /opt ./clamav-wrapper: test: unknown operator pts/3 # Why? Can I got something wrong? My system is Solaris 8, clamav 0.67 MS 4-28-5 -- ___

RE: [Clamav-users] ./clamav-wrapper: test: unknown operator pts/3

2004-03-08 Thread Steffen Heil
Hi Your mail does have some problems: demime acl condition: base64 line contains illegal character demime acl condition: base64 line length is not a multiple of 4 characters Is this intentional? I am thinking about dropping incorrectly mime-encoded mails. [As a lot of people seam to assume tha

Re: [Clamav-users] TCP on Clam Milter

2004-03-08 Thread Seve Ho
Chris Meadors wrote: Seve Ho wrote: I am trying to use Clamav-milter with sendmail. I found it cannot clean up it socket file(.sock) opened after killing the milter process.(I use kill -9 to kill the process, is there other prosper way to stop the milter?) And this make me have to remove the

Re: [Clamav-users] Bayes Style Antivirus???

2004-03-08 Thread Trog
On Sun, 2004-03-07 at 13:02, Tim B wrote: > I'm sure this idea has been knocked around before, but with the way > MyDoom, Bagle (beagle), and NeySky have gone through so many versions > with minor variations of their email message, has anyone thougth about > adding bayes style checking? > > It

Re: [Clamav-users] ./clamav-wrapper: test: unknown operator pts/3

2004-03-08 Thread Grzegorz Staleñczyk
Dzieс Dobry! SH> Your mail does have some problems: SH> demime acl condition: base64 line contains illegal character SH> demime acl condition: base64 line length is not a multiple of 4 characters SH> Is this intentional? Yes, ISO 8859-2 Now, I set none Windows 1251. SH> I am thinking about dropp

Re: [Clamav-users] Error with clamav-milter

2004-03-08 Thread Nigel Horne
On Thursday 04 Mar 2004 5:19 pm, James Barber wrote: > I've verified, and the clmilter.sock file is indeed in the > /var/clamav/clmilter.sock directory (srwxr-xr-x1 root root > 0 Mar 3 16:51 clmilter.sock). Do you have a "User" statement in clamav.conf which is lower than root? If so you

Re: [Clamav-users] TCP on Clam Milter

2004-03-08 Thread Nigel Horne
On Monday 08 Mar 2004 6:10 am, Seve Ho wrote: > But i > am not sure the format of > --server=HOSTNAME/ADDRESS. It is the same format that sendmail uses in sendmail.mc/sendmail.cf. > If i run clamd and milter on the same > machine, is it become: > > --server=127.0.0.1 > > do I need t

[Clamav-users] testvirus.org

2004-03-08 Thread Steffen Heil
Hi Have you ever used testvirus.org ? What do you think about it ? The following tests get trough exim4 w/ exiscan and clamav 0.67-2: #8 #5 #20 #22 #23 (and obviously #24) What can I do to prevent the first 5 ? Thanks, Steffen PS: As a lot of people recommended it on the exim4 mailing list

Re: [Clamav-users] Bayes Style Antivirus???

2004-03-08 Thread Lars Roland
I have already succefully tested a baysian virus filter (only problem has been getting my hand on a suficient amount of virus (including there emails)). I first testet using bogofilter, and wee a putting it into production now (including some extra features (eg. statistic about the virus itself and

Re: [Clamav-users] testvirus.org

2004-03-08 Thread Antony Stone
On Monday 08 March 2004 9:59 am, Steffen Heil wrote: > Hi > > Have you ever used testvirus.org ? > What do you think about it ? > > The following tests get through exim4 w/ exiscan and clamav 0.67-2: > #8 #5 #20 #22 #23 (and obviously #24) I'm thinking maybe a mention of these tests, and the expe

Re: [Clamav-users] Worm.SomeFool.Gen-1

2004-03-08 Thread Tomasz Kojm
On Sun, 7 Mar 2004 23:00:00 -0600 "Greg Ennis" <[EMAIL PROTECTED]> wrote: > I have upgraded to 0.67-1, but clamscan still does not recognize the > file as containing a virus. Looks like the upgrade did not resolve > the problem. > > Any other ideas? freshclam -- oo. Tomasz

Re: [Clamav-users] Bayes Style Antivirus???

2004-03-08 Thread clamav
On Mon, 8 Mar 2004, Lars Roland wrote: > I have already succefully tested a baysian virus filter (only problem has > been getting my hand on a suficient amount of virus (including there > emails)). How does your Bayes filter incorporate the changes in the binary? Is it some type of least-common

Re: [Clamav-users] Bayes Style Antivirus???

2004-03-08 Thread Tomasz Kojm
On Mon, 8 Mar 2004 11:15:17 +0100 (CET) Lars Roland <[EMAIL PROTECTED]> wrote: > I have already succefully tested a baysian virus filter (only problem > has been getting my hand on a suficient amount of virus (including > there emails)). I first testet using bogofilter, and wee a putting it > into

Re: [Clamav-users] testvirus.org

2004-03-08 Thread Mr Mailing List
On Mar 8, 2004, at 11:21, Antony Stone wrote: On Monday 08 March 2004 9:59 am, Steffen Heil wrote: Hi Have you ever used testvirus.org ? What do you think about it ? The following tests get through exim4 w/ exiscan and clamav 0.67-2: #8 #5 #20 #22 #23 (and obviously #24) I'm thinking maybe a

Re: [Clamav-users] Bayes Style Antivirus???

2004-03-08 Thread Lars Roland
The code we have in testing right now only looks at the email and compile time (this seams to work okay, but I have dificulties getting the positive rate above 90%) The idea with binary files (not in heavy testing, but it seams to get the positiv rate to about 95%), is to create a trace of the fil

Re: [Clamav-users] testvirus.org

2004-03-08 Thread Tomasz Papszun
On Mon, 08 Mar 2004 at 10:21:26 +, Antony Stone wrote: > > postings about them, and with the mailing list archive on sourceforge down, > people can't look up the previous responses. BTW, there is also a searchable archive at http://www.mail-archive.com/clamav-users%40lists.sourceforge.net -

[Clamav-users] Re: sendmail devel?

2004-03-08 Thread Virgo Pärna
On Fri, 5 Mar 2004 16:17:45 -0500, Jim Maul <[EMAIL PROTECTED]> wrote: > > On a (not so) side not, does sendmail support maildirs? I tried finding the > answer to this on the website, but no luck. > IIRC sendmail does not do delivery to mailbox by itself but uses something like procmail/ma

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Brett Simpson
Jesper Juhl wrote: Nope, that won't work. Besides blocking purely based on name we also run 'file' on the attachments and block based on the type of file returned by 'file'. So, a windows executable renamed from foo.exe to foo.txt will still be caught as a banned 'exe' file - blocking only based o

Re: [Clamav-users] sendmail devel?

2004-03-08 Thread Mike Brodbelt
Jim Maul wrote: > Well sorry to disappoint, but there is no recent support to my claims. > Indeed i do not wish to start any quarrels with anyone so i hope that does > not happen here. I was simply basing my claims on the history of the > software. I do not run sendmail so i can not vouch for it

Re: [Clamav-users] sendmail devel?

2004-03-08 Thread Mike Brodbelt
Jesper Juhl wrote: > On Fri, 5 Mar 2004, Antony Stone wrote: >>What has sendmail's *recent* history of security problems been like? Where >>can I see some tests showing postfix or qmail are better? >> > > Security issues aside, postfix is significantly simpler to setup and > maintain than sendma

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Lars Roland
On Mon, 8 Mar 2004, Brett Simpson wrote: > How did you impliment this? I like the idea of checking the file to see > if the extension matches what is returned by the file command. > > Brett > see the unix file command ("man file", will give you the information) - it uses /usr/share/magic to retri

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Antony Stone
On Monday 08 March 2004 1:44 pm, Brett Simpson wrote: > Jesper Juhl wrote: > >Nope, that won't work. Besides blocking purely based on name we also run > >'file' on the attachments and block based on the type of file returned by > >'file'. So, a windows executable renamed from foo.exe to foo.txt wi

[Clamav-users] problem starting clamd

2004-03-08 Thread Robin Wood
I am having trouble starting clamd on a debian box and was hoping someone could help. The basic error I am getting is ... connect(): No such file or directory ERROR: Can't connect to clamd. --- SCAN SUMMARY --- Infected files: 0 Time: 0.007 sec (0 m 0 s) The problem seems to be

[Clamav-users] Weird messages in /var/log/messages

2004-03-08 Thread R. Scott Baer
Could someone please help me out here.. I'm having some weird meesages that I cant figure out. Heres my set up: - Fedora Core 1 - clamav & clamav-millter rpms - sendmail Scott Here is the part of the log file: Mar 7 07:21:25 chesty clamd[2665]: SelfCheck: Database status OK. Mar 7 07:55:52

Re: [Clamav-users] sendmail devel?

2004-03-08 Thread Jesper Juhl
On Mon, 8 Mar 2004, Mike Brodbelt wrote: > Jesper Juhl wrote: > > On Fri, 5 Mar 2004, Antony Stone wrote: > >>What has sendmail's *recent* history of security problems been like? Where > >>can I see some tests showing postfix or qmail are better? > >> > > > > Security issues aside, postfix is si

Re: [Clamav-users] Weird messages in /var/log/messages

2004-03-08 Thread Robert Schmidt
Yes, those are due to a bug in the RPMs (--enable-debug is on). I'm sure Krištof will have an update shortly. Otherwise you can rpmbuild from the src rpms and just remove that line under configure in the SPEC file. Mainly it isn't an error. On Mon, 2004-03-08 at 09:59, R. Scott Baer wrote: > Cou

Re: [Clamav-users] Re: Simple patch for dealing with password zipfiles

2004-03-08 Thread Brett Simpson
>>> [EMAIL PROTECTED] 3/4/2004 5:35:34 PM >>> > Nope, that won't work. Besides blocking purely based on name we also run > 'file' on the attachments and block based on the type of file returned by > 'file'. So, a windows executable renamed from foo.exe to foo.txt will > still be caught as a banned

Re: [Clamav-users] Weird messages in /var/log/messages

2004-03-08 Thread Nigel Horne
On Monday 08 Mar 2004 2:59 pm, R. Scott Baer wrote: > Could someone please help me out here.. I'm having some weird meesages > that I cant figure out. > clamfi_header clamfi_header clamfi_header clamfi_header clamfi_header > clamfi_header clamfi_header clamfi_header clamfi_header clamfi_header >

Re: [Clamav-users] Weird messages in /var/log/messages

2004-03-08 Thread Krištof Petr
Robert Schmidt wrote: Yes, those are due to a bug in the RPMs (--enable-debug is on). I'm sure KriÃÂtof will have an update shortly. Yes. The new build is already done. Download clamav-0.67-3.i386.rpm , please. Petr ---

RE: [Clamav-users] Worm.SomeFool.Gen-1

2004-03-08 Thread Jeremy Kitchen
On Sun, 2004-03-07 at 23:00, Greg Ennis wrote: > Antony, > > I have upgraded to 0.67-1, but clamscan still does not recognize the file as > containing a virus. Looks like the upgrade did not resolve the problem. ok. > Any other ideas? using clamscan --mbox to scan it? -Jeremy -- Jeremy Kitc

[Clamav-users] clamav-milter dies after database update.

2004-03-08 Thread Orion Poplawski
This doesn't happen all the time, but about once a week. Running clamav 0.67. clamav/clamav-update.log.1:ClamAV update process started at Sat Mar 6 04:03:23 2004 clamav/clamd.log.2:Sat Mar 6 04:10:13 2004 -> Reading databases from /var/lib/clamav clamav/clamd.log.2:Sat Mar 6 04:10:13 2004 -

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Jesper Juhl
On Mon, 8 Mar 2004, Brett Simpson wrote: > Jesper Juhl wrote: > > >Nope, that won't work. Besides blocking purely based on name we also run > >'file' on the attachments and block based on the type of file returned by > >'file'. So, a windows executable renamed from foo.exe to foo.txt will > >still

Re: [Clamav-users] Re: Simple patch for dealing with password zipfiles

2004-03-08 Thread Nigel Kukard
ivs-milter (http://freshmeat.net/projects/ivsmilter/) has had this feature since design date. On Mon, Mar 08, 2004 at 11:03:55AM -0500, Brett Simpson wrote: > >>> [EMAIL PROTECTED] 3/4/2004 5:35:34 PM >>> > > Nope, that won't work. Besides blocking purely based on name we also run > > 'file' on

Re: [Clamav-users] sendmail devel?

2004-03-08 Thread Nigel Kukard
> > > Security issues aside, postfix is significantly simpler to setup and > > > maintain than sendmail and deals just fine with heavy loads. It might be > > > slightly less flexible, but for 99% of all users I'd say it's more than > > > flexible enough. > > > > If you know what you're doing with m

Re: [Clamav-users] clamav-milter dies after database update.

2004-03-08 Thread Tomasz Kojm
On Mon, 08 Mar 2004 09:49:17 -0700 Orion Poplawski <[EMAIL PROTECTED]> wrote: > This doesn't happen all the time, but about once a week. Running > clamav 0.67. Please update to the latest CVS version or wait for 0.70-rc (will be released in this week). -- oo. Tomasz Kojm <[E

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread John Jolet
On Monday 08 March 2004 10:51 am, Jesper Juhl wrote: --snip-- > The first "qr" block checks for double extensions like file.foo.exe and > ban such files if the last extension is one of vbs|pif|scr|bat|com|exe|dll > the next two "qr" blocks block files purely based on the last extension. > The next

Re: [Clamav-users] sendmail devel?

2004-03-08 Thread Betsy Schwartz
At 09:05 AM 3/8/2004, Mike Brodbelt wrote: You shouldn't underestimate how different the world was then. Sendmail started life as "delivermail", which predated *both* TCP/IP and SMTP, and was released in 1979. Mail then was implemented as a series of hackish extensions tacked onto the FTP protocol

RE: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Jean-Francois Guilmard
What about .html ??? Jeff -Original Message- From: John Jolet [mailto:[EMAIL PROTECTED] Sent: Monday, March 08, 2004 10:12 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Re: Simple patch for dealing with password zip files On Monday 08 March 2004 10:51 am, Jesper Juhl wrote: --s

[Clamav-users] help clamav wont start

2004-03-08 Thread Bryce
I installed the clamav port for freebsd 4.7. I did not get any errors when installing but after rebooting i did a "ps -aux" and i don't see clamd running. What can i do to make sure that it runs on boot up.   Bryce

[Clamav-users] Freshclam 0.67 doesn't switch user

2004-03-08 Thread Faejon
I upgraded from version 0.65 to 0.67 and now my freshclam wont recognize the -u or --user switch. It does not give an error it simply ignores the command and runs as clamav. This used to work in version 0.65. I run my clamd as user avscan so that it ties in with amavisd-new. The problem I have is

[Clamav-users] clamd and Amavis-new conflict?

2004-03-08 Thread Michael Shekman
I have an Amavis-new - SA - Postfix installation, and for some reason have never been able to make clamd work with amavisd; it looks like they just don't see each other. At every mail checked amavisd.log has a message: amavisd[950]: (00950-05) No anti-virus code loaded, skipping this section #(n

Re: [Clamav-users] help clamav wont start

2004-03-08 Thread Jeff Ramsey
On Mar 8, 2004, at 10:33 AM, Bryce wrote: I installed the clamav port for freebsd 4.7. I did not get any errors when installing but after rebooting i did a "ps -aux" and i don't see clamd running. What can i do to make sure that it runs on boot up.   Bryce Search the message board archives. I s

Re: [Clamav-users] problem starting clamd

2004-03-08 Thread John Vestrum
> I am having trouble starting clamd ... > > connect(): No such file or directory > ERROR: Can't connect to clamd. > >--- SCAN SUMMARY --- >Infected files: 0 >Time: 0.007 sec (0 m 0 s) This looks like an error from clamdscan, not clamd. What's the full command line you are using t

[Clamav-users] MyDoom.G detected by clamscan but not by clamd

2004-03-08 Thread Stuart Mycock
Hi All, There's probably a very simple explanation for this. However, would anybody have any idea why my clamd cannot spot MyDoom.G within a message yet clamscan --mbox can? My clamd is working for 99% of emails, is all up to date (must be for clamscan to see the virus in the first place), and

[Clamav-users] Re: MyDoom.G detected by clamscan but not by clamd

2004-03-08 Thread Stuart Mycock
> There's probably a very simple explanation for this. Ignore me, there is! It seems clamd had not reloaded it's virus db since the last update, it now detects the virus fine after I restarted the daemon. Stuart. --- This SF.Net email is s

[Clamav-users] Your Experience with Clamav and Proxy Server ???

2004-03-08 Thread Yussef ElSirgany
Has anyone here implemented a Transparent proxy or a standard proxy server with virus scanning? I am looking at implementing this and would sure appreciate your experience! It looks like http://dansguardian.org/ is the main clam + proxy solution right now. There is also http://software.othell

Re: [Clamav-users] clamd and Amavis-new conflict?

2004-03-08 Thread John Vestrum
On Monday 08 March 2004 12:45 pm, you wrote: > At every mail checked amavisd.log has a message: > > amavisd[950]: (00950-05) No anti-virus code loaded, skipping this section > #(numbers, obviously, vary), > > even though clamd was started manually, the path to socket name > (clamd.sock) is identica

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Eric Rostetter
Quoting John Jolet <[EMAIL PROTECTED]>: This brings up an interesting point. I've never seen a legitimate file on a windows box with two or more 3-character extensions. Would it be a bad assumption to make? Yes. Because not all machines are windows machines. Because the e-mail may just be going

Re: [Clamav-users] clamd and Amavis-new conflict?

2004-03-08 Thread Thomas Lamy
Michael Shekman schrieb: I have an Amavis-new - SA - Postfix installation, and for some reason have never been able to make clamd work with amavisd; it looks like they just don't see each other. At every mail checked amavisd.log has a message: amavisd[950]: (00950-05) No anti-virus code loaded, s

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Antony Stone
On Monday 08 March 2004 6:12 pm, John Jolet wrote: > This brings up an interesting point. I've never seen a legitimate file on > a windows box with two or more 3-character extensions. Would it be a bad > assumption to make? Yes, because not everyone uses Windows :) and things like filename.tar.

Re: [Clamav-users] Re: MyDoom.G detected by clamscan but not by clamd

2004-03-08 Thread John Vestrum
> It seems clamd had not reloaded it's virus db since the last update, it now > detects the virus fine after I restarted the daemon. > > Stuart. You might want to check the NotifyClamd option in your freshclam.conf. JohnV --- This SF.Net email

RE: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-08 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Jean-Francois Guilmard > Sent: Monday, March 08, 2004 1:30 PM > To: [EMAIL PROTECTED] > Subject: RE: [Clamav-users] Re: Simple patch for dealing with password > zip files > > > What about .html ??? >

[Clamav-users] PB: ClamAV works but doesn't detect viruses

2004-03-08 Thread Jean-Francois Guilmard
Hi guys, Clamav is on my servers for quite a while, with clamscan: 0.65. spamassassin: 2.61 qmail-scanner-queue 1.16 I was quite happy about all of that, but I recently figured out that clamv doesnât intercept the virusesâ I launched the tests from www.testvirus.org and all of them pass throu

RE: [Clamav-users] Freshclam 0.67 doesn't switch user

2004-03-08 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Faejon > Sent: Monday, March 08, 2004 1:28 PM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Freshclam 0.67 doesn't switch user > > > I upgraded from version 0.65 to 0.67 and now my freshclam wont re

Re: [Clamav-users] MyDoom.G detected by clamscan but not by clamd

2004-03-08 Thread Tomasz Papszun
On Mon, 08 Mar 2004 at 19:10:34 +, Stuart Mycock wrote: > > However, would anybody have any idea why my clamd cannot spot MyDoom.G > within a message yet clamscan --mbox can? > > My clamd is working for 99% of emails, is all up to date (must be for > clamscan to see the virus in the first pla

Re: [Clamav-users] clamd and Amavis-new conflict?

2004-03-08 Thread Michael Shekman
Thomas- Sure I did ...:-) Thank you so much - works like a champ. I cant's see "children" of clamd, though - does this mean, that my messages load is too low? Thanks again! >>> [EMAIL PROTECTED] 03/08/04 02:36PM >>> Michael Shekman schrieb: > I have an Amavis-new - SA - Postfix installation

RE: [Clamav-users] Re: Simple patch for dealing with password zipfiles

2004-03-08 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Eric > Rostetter > Sent: Monday, March 08, 2004 2:32 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Re: Simple patch for dealing with password > zipfiles > > > Quoting John Jolet <[EMAIL PROTE

Re: [Clamav-users] clamd and Amavis-new conflict?

2004-03-08 Thread John Vestrum
> I cant's see "children" of clamd, though - does this mean, that my messages > load is too low? Try showing threads. On Solaris, it's ps -elL. On Linux, it's ps -elm. On FreeBSD, hmm, I can't find "thread" or "light weight process" in the ps man page. JohnV --

Re: [Clamav-users] Problems with clamd

2004-03-08 Thread Doug Hardie
On Mar 5, 2004, at 15:26, Doug Hardie wrote: On Mar 5, 2004, at 02:41, Trog wrote: On Fri, 2004-03-05 at 01:15, Doug Hardie wrote: I just uncommented the thread timeout the last time I restarted clamd a couple minutes ago so I don't know what effect that will have. ThreadTimeout isn't used in t

Re: [Clamav-users] Re: Simple patch for dealing with password zipfiles

2004-03-08 Thread Antony Stone
On Monday 08 March 2004 8:36 pm, Jim Maul wrote: > > Quoting John Jolet <[EMAIL PROTECTED]>: > > > This brings up an interesting point. I've never seen a legitimate file > > > on a windows box with two or more 3-character extensions. Would it be a > > > bad assumption to make? > > > > Yes. Beca

[Clamav-users] Status of --mbox?

2004-03-08 Thread Bob George
Sorry if this is an old subject, but it keeps coming up again and again on the procmail and spamassassin lists. I have tried searching archives and the web for answers. I noticed that there can be differences in results returned by clamscan and clamdscan when called directly from procmail to sc

Re: [Clamav-users] Problems with clamd

2004-03-08 Thread Doug Hardie
After a review of clamd/session.c and the developers forum archives I know what the cause of my problem is, but not necessarily why. The version that works (clamd / ClamAV version devel-20040209', clamav-milter version '0.66m) does not use either poll or select. At least neither is called dir

Re: [Clamav-users] PB: ClamAV works but doesn't detect viruses

2004-03-08 Thread Tomasz Papszun
On Mon, 08 Mar 2004 at 12:07:33 -0800, Jean-Francois Guilmard wrote: > > Clamav is on my servers for quite a while, with clamscan: 0.65. Please upgrade. spamassassin: 2.61 qmail-scanner-queue 1.16 > Please shorten the line length

RE: [Clamav-users] Your Experience with Clamav and Proxy Server ???

2004-03-08 Thread Jean-Francois Guilmard
Yeap I did that. Our config is qmail as proxy server with spamassassin and clamAV with qmail-queue-scanner. This proxy relay to a basic vpopmail-qmail config which deliver to the mailbox. It works well despite the fact that ClamAV is currently not working, but it's surely a pb of config. BUT, I

Re: [Clamav-users] Freshclam 0.67 doesn't switch user

2004-03-08 Thread Tomasz Kojm
On Mon, 8 Mar 2004 10:28:00 -0800 "Faejon" <[EMAIL PROTECTED]> wrote: > I upgraded from version 0.65 to 0.67 and now my freshclam wont > recognize the -u or --user switch. It does not give an error it simply > ignores the command and runs as clamav. This used to work in version > 0.65. There's a

RE: [Clamav-users] PB: ClamAV works but doesn't detect viruses

2004-03-08 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Jean-Francois Guilmard > Sent: Monday, March 08, 2004 3:08 PM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] PB: ClamAV works but doesn't detect viruses > > > > Hi guys, > > Clamav is on my serve

[Clamav-users] Re: Your Experience with Clamav and Proxy Server ???

2004-03-08 Thread Brett Simpson
Yussef ElSirgany wrote: Has anyone here implemented a Transparent proxy or a standard proxy server with virus scanning? I am looking at implementing this and would sure appreciate your experience! It looks like http://dansguardian.org/ is the main clam + proxy solution right now. There is als

[Clamav-users] CVS 20040308 doesnt build

2004-03-08 Thread Krištof Petr
Hi, it doesnt build on linux with ./configure \ --enable-milter \ --enable-id-check \ --disable-clamav \ --with-user=clamav \ --with-group=clamav \ --with-dbdir=/var/lib/clamav make[2]: Entering directory `/usr/src/redhat/BUILD/clamav-20040308

RE: [Clamav-users] PB: ClamAV works but doesn't detect viruses

2004-03-08 Thread Jean-Francois Guilmard
Hi Thomasz Thanks for your help, I will update clamav How to shorten the line length of my MUA? Thanks a lot Jeff -Original Message- From: Tomasz Papszun [mailto:[EMAIL PROTECTED] Sent: Monday, March 08, 2004 1:26 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] PB: ClamAV works b

[Clamav-users] Question about ulimits and core-dumps.

2004-03-08 Thread Robert Schmidt
I'm tweaking RPMs for our use and trying to give decent feedback to Kristof regarding changes in the RPMs that he publically provides and I wondered if anyone could provide some feedback on ulimits. On RedHat there is an option when starting a daemon to start it using the user so: su - -s /bin/b

Re: [Clamav-users] sendmail devel?

2004-03-08 Thread clamav
> > Postfix doesn't implement something like milter, does it? > > This in my eyes is a serious drawback if you want to run 3rd party > opensource plugins which add cool features. > True, postfix doesn't support milter and I don't know enough about milter specifically to speak intelligently abo

[Clamav-users] Re: Freshclam 0.67 doesn't switch user

2004-03-08 Thread Faejon
"Tomasz Kojm" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] On Mon, 8 Mar 2004 10:28:00 -0800 >"Faejon" <[EMAIL PROTECTED]> wrote: > >> I upgraded from version 0.65 to 0.67 and now my freshclam wont >> recognize the -u or --user switch. It does not give an error it simply >> ignores

Re: [Clamav-users] clamdscan gives wrong output

2004-03-08 Thread Tomasz Papszun
On Wed, 03 Mar 2004 at 11:56:50 +0100, Marc Cuypers wrote: > Tomasz Papszun wrote: > >On Wed, 03 Mar 2004 at 11:18:15 +0100, Marc Cuypers wrote: > > > >>I'm using clamav 0.67 on Debian Woody. > >> > >>When I run 'clamdscan file1'. I get the message it contains the virus > >>Worm.Gibe.F FOUND. > >

[Clamav-users] Re: Status of --mbox?

2004-03-08 Thread Bob George
Bob George wrote: Updating my own questions... 1. Is --mbox recommended for use for scanning mail streams (i.e. from procmail)? Is the fixed, or to be fixed shortly? As in "as of 0.67 it seems fixed". Also, mail options in clamd seem fine. 2. Is the lack of --mbox on clamdscan permanent? IF --mb

Re: [Clamav-users] problem starting clamd

2004-03-08 Thread Robin Wood
I am starting it with clamd, nothing more, nothing less! I also get the same if I run clamdscan. does that help diagnosis? >> I am having trouble starting clamd ... >> >> connect(): No such file or directory >> ERROR: Can't connect to clamd. >> >>--- SCAN SUMMARY --- >>Infec

[Clamav-users] clamav-0.67 hangs periodically (postfix+amavisd-new+clamav)

2004-03-08 Thread Christopher Malek
Hello all I've got a postfix + amavisd-new + clamav + spamassasin setup here. In my efforts to fight the password encrypted virus problem of last week, I upgraded clamav from a 20030829 snapshot to version 0.67 to make sure I was using the current stable version and be in sync with what people we

RE: [Clamav-users] help clamav wont start

2004-03-08 Thread bryce
Well, I got it! Was a setting in the .conf file. Now after already installing the port how do I configure it to run clamav-milter? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bryce Sent: Monday, March 08, 2004 10:34 AM To: [EMAIL PROTECTED

[Clamav-users] FreshClam fail to connect database.clamav.net

2004-03-08 Thread Seve Ho
I have been unable to use freshclam to update for 2 days, My machine is a Freebsd 5.1 with ClamAV version devel-20040306 ( This is a CVS version ) following are when on the screen when i run freshclam # freshclam ClamAV update process started at Tue Mar 9 12:20:42 2004 SECURITY WARNING: NO