Re: [Clamav-users] Clamd protocol

2004-04-09 Thread Przemyslaw Wegrzyn
On Thursday 08 of April 2004 02:11, Tomasz Kojm wrote: > On Wed, 7 Apr 2004 01:57:23 +0200 > > For a "very simple mail scanner" the (b) solution seems to be the best > IMHO. Well, anyway it would be great, if someday ClamAV distribution includes something like "libclamdclient". Looking at clamdsc

[Clamav-users] Re: Clamav-0.70-rc missed email messages

2004-04-09 Thread Mimmus
I had same problem. Read 'Some viruses go through' thread dated 5-apr. Solved in CVS. Mimmus --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies

Re: [Clamav-users] Cleaning MBOX files?

2004-04-09 Thread Tomasz Kojm
On Fri, 9 Apr 2004 00:01:42 -0400 (EDT) jef moskot <[EMAIL PROTECTED]> wrote: > Is there no way to get Clam to report which message the infected file > (or at least the FIRST infected file) is in? Or does that add too > much overhead? Someone once suggested turning verbose mode on, but > that st

Re: [Clamav-users] Re: Use of CLAMAV as Corporate Antivirus

2004-04-09 Thread Tomasz Kojm
On Fri, 09 Apr 2004 14:30:24 +1000 Alex Cherney <[EMAIL PROTECTED]> wrote: > > Can you use samba on server ? If yes, you can share /var/lib/clamav > > in read-only, I think... > > > Well, currently ClamWin uses database mirror "database.clamav.net" > hardcoded. I will add it to the ClamWin.conf

Re: [Clamav-users] Re: Use of CLAMAV as Corporate Antivirus

2004-04-09 Thread Fajar A. Nugraha
Alex Cherney wrote: Sergey wrote: Yesterday I download ClamWin and install it on windows client successfully. Now I would like to ask how I can use the virus database of server machine on Windows Clients so that I have to download latest virus definitions on server only. Well, currently ClamWin

[Clamav-users] sendmail - viruses not cleaned

2004-04-09 Thread Spades
heya, Just installed clamav-0.70-rc with ScanMail option enabled. i'm running sendmail 8.12.11 on a FreeBSD 4.9stable and all the user mailboxes are in /var/mail, not in their homedir. The clamd and freshclam daemon is running by clamav. How come the emails are still attached with viruses, not c

Re: [Clamav-users] Trouble compiling clamav-latest..

2004-04-09 Thread Fajar A. Nugraha
turgut kalfaoglu wrote: Hi there - I seem to have much trouble compiling last night's snapshot. I checked, and I have automake 1.8 installed, and yet I get this complaint during make : (...) creating sigtool make[2]: Leaving directory `/export/home/turgut/sunos/clamav-devel-20040407/sigtool' M

[Clamav-users] clamav.conf

2004-04-09 Thread Mike van Vugt
Hello, Keep getting the message below over and over again. I am new to Linux and having a hard time to get this working. I want to uninstall Clamav and start over again. Can anyone tell me how to uninstall??? Regards, Mike [EMAIL PROTECTED] root]# /usr/local/sbin/clamd ERROR: Please edit the ex

Re: [Clamav-users] Violation of the GPL ?

2004-04-09 Thread Krištof Petr
Tomasz Kojm wrote: On Thu, 8 Apr 2004 01:06:27 -0400 "Brian Bruns" <[EMAIL PROTECTED]> wrote: Regardless of what ClamAV is licensed as, is the database being published under the GPL as well? Is it public domain? We've run into very similar type questions with the AHBL stuff - what are we going

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Daniel J McDonald
On Fri, 2004-04-09 at 06:28, Mike van Vugt wrote: > Hello, > > Keep getting the message below over and over again. Have you edited /etc/clamav/clamav.conf? Lots of important things there you need to set up. > I am new to Linux > and having a hard time to get this working. I want to uninstall C

Re: [Clamav-users] clamav.conf

2004-04-09 Thread ThistleAir Computing
Mike van Vugt <[EMAIL PROTECTED]> wrote:Hello, Keep getting the message below over and over again. I am new to Linux and having a hard time to get this working. I want to uninstall Clamav and start over again. Can anyone tell me how to uninstall??? Regards, Mike [EMAIL PROTECTED] root]# /usr/l

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Joe Maimon
Daniel J McDonald wrote: On Fri, 2004-04-09 at 06:28, Mike van Vugt wrote: Hello, Keep getting the message below over and over again. Have you edited /etc/clamav/clamav.conf? Lots of important things there you need to set up. I am new to Linux and having a hard time to get this wor

RE: [Clamav-users] Cleaning MBOX files?

2004-04-09 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Jack > London Networks > Sent: Thursday, April 08, 2004 6:47 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Cleaning MBOX files? > > > If I use the --remove flag, it removes the whole mailbox fi

[Clamav-users] Re: Use of CLAMAV as Corporate Antivirus

2004-04-09 Thread Alex Cherney
Fajar A. Nugraha wrote: Alex Cherney wrote: Well, currently ClamWin uses database mirror "database.clamav.net" hardcoded. I will add it to the ClamWin.conf as a parameter so it is possible to repoint to a local server. I don't think this needs to be configurable in the GUI, possibly having se

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Nigel Horne
On Friday 09 Apr 2004 12:28 pm, Mike van Vugt wrote: > ERROR: Please edit the example config file /etc/clamav//clamav.conf. Have you done what it tells you to do yet? Namely edit the file /etc/clamav/clamav.conf. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK.

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Mike van Vugt
Op vr 09-04-2004, om 14:49 schreef Daniel J McDonald: > On Fri, 2004-04-09 at 06:28, Mike van Vugt wrote: > > Hello, > > > > Keep getting the message below over and over again. > > Have you edited /etc/clamav/clamav.conf? Lots of important things there > you need to set up. > > > I am new to L

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Steven Stern
On Fri, 09 Apr 2004 13:28:29 +0200, Mike van Vugt <[EMAIL PROTECTED]> wrote: >Hello, > >Keep getting the message below over and over again. I am new to Linux >and having a hard time to get this working. I want to uninstall Clamav >and start over again. Can anyone tell me how to uninstall??? > >Reg

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Antony Stone
On Friday 09 April 2004 2:35 pm, Mike van Vugt wrote: > My Steps > > groupadd clamav > useradd -g clamav -s /bin/false -c "Clam AntiVirus" clamav > > tar xzvf clamav-versie.tar.gz > * cd clamav-versie > * ./configure --sysconfdir=/etc/clamav > * make > * als root: make inst

Re: [Clamav-users] Re: Use of CLAMAV as Corporate Antivirus

2004-04-09 Thread Keith Patton
Fajar A. Nugraha wrote: Alex Cherney wrote: Sergey wrote: Yesterday I download ClamWin and install it on windows client successfully. Now I would like to ask how I can use the virus database of server machine on Windows Clients so that I have to download latest virus definitions on server only.

Re: [Clamav-users] Re: Use of CLAMAV as Corporate Antivirus

2004-04-09 Thread Antony Stone
On Friday 09 April 2004 3:03 pm, Keith Patton wrote: > Fajar A. Nugraha wrote: > > > > ClamWin seems like a good program, Alex. Can you modify it so that it > > could connect to a remote clamd server? > > Possibly as an option. > > The distributed clamav.exe on clamav source's contrib directory do

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Mike van Vugt
Op vr 09-04-2004, om 15:44 schreef Steven Stern: > On Fri, 09 Apr 2004 13:28:29 +0200, Mike van Vugt <[EMAIL PROTECTED]> wrote: > > >Hello, > > > >Keep getting the message below over and over again. I am new to Linux > >and having a hard time to get this working. I want to uninstall Clamav > >and

[Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Henry Harvey
Would it be possible to report what viruses (names) are not being detected by ClamAV, instead of submitting a sample? We have Symantec Corporate Ed AV running on all workstations and it blocks those files from even saving to any pc. I have the logs which says that [EMAIL PROTECTED] [EMAIL PROTEC

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Tomasz Papszun
On Fri, 09 Apr 2004 at 15:35:40 +0200, Mike van Vugt wrote: [...] > User clamav > ScanMai ^ ?! Is this the exact quote (ScanMai instead of ScanMail)? Or a typo only in this message? -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED]

Re: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Antony Stone
On Friday 09 April 2004 3:15 pm, Henry Harvey wrote: > Would it be possible to report what > viruses (names) are not being detected by ClamAV, > instead of submitting a sample? That isn't much use, since without a sample we can't generate a signature. > We have Symantec Corporate Ed AV running o

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Hanford, Seth
> [EMAIL PROTECTED] root]# /usr/local/sbin/clamd > ERROR: Please edit the example config file /etc/clamav//clamav.conf. > ERROR: Can't open/parse the config file /etc/clamav//clamav.conf ^^ This

[Clamav-users] wbmclamav

2004-04-09 Thread Henry Harvey
I just found this utility wbmclamav http://wbmclamav.labs.libre-entreprise.org/ A webmin utility for ClamAV to manage quaratined emails, etc. It's still in Alpha stage though according to Freshmeat. Anyone tried this? The features are neat and just what I wanted. _

RE: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Henry > Harvey > Sent: Friday, April 09, 2004 10:16 AM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] submitting samples (name instead?) > > > Would it be possible to report what > viruses (names) are

Re: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Tomasz Papszun
On Fri, 09 Apr 2004 at 7:15:54 -0700, Henry Harvey wrote: > > [EMAIL PROTECTED] [...] > [EMAIL PROTECTED] > [EMAIL PROTECTED] > > A search on the database of ClamAV results > with nothing with those same variants. Tip: search archives of clamav-virusdb mailing list. -- Tomasz Papszun SysAd

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Steven Stern
On Fri, 09 Apr 2004 16:11:49 +0200, Mike van Vugt <[EMAIL PROTECTED]> wrote: >Op vr 09-04-2004, om 15:44 schreef Steven Stern: >> On Fri, 09 Apr 2004 13:28:29 +0200, Mike van Vugt <[EMAIL PROTECTED]> wrote: >> >> >Hello, >> > >> >Keep getting the message below over and over again. I am new to Lin

Re: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Niek
Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Henry Harvey Sent: Friday, April 09, 2004 10:16 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] submitting samples (name instead?) Would it be possible to report what viruses (names) are not be

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Fajar A. Nugraha
Mike van Vugt wrote: Keep getting the message below over and over again. [EMAIL PROTECTED] root]# /usr/local/sbin/clamd ERROR: Please edit the example config file /etc/clamav//clamav.conf. ERROR: Can't open/parse the config file /etc/clamav//clamav.conf [EMAIL PROTECTED] root]# Edit the f

[Clamav-users] ClamAV and SYSERR?

2004-04-09 Thread Steven Stern
On Fri, 9 Apr 2004 17:16:59 +0200, Gert Doering <[EMAIL PROTECTED]> wrote: >Hi, > >(I hope I got the e-mail right - the archives omit the e-mail addresses, >so I had to do some googling and guessing) > >I googled your mail to the clamav users list a few weeks ago: > >- snip -- >I'v

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Fajar A. Nugraha
Mike van Vugt wrote: Edit the file to make sure it's appropriately configured. Make sure you look at the very top of the file. There's a line that contains "Example" that must be uncommented or you'll get the "Please edit..." message. Hmmm, second time reading this email I noticed something

RE: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Niek > Sent: Friday, April 09, 2004 11:16 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] submitting samples (name instead?) > > > Jim Maul wrote: > > > > >>-Original Message- > >>From: [

[Clamav-users] clmilter errors - i'm lost, help?

2004-04-09 Thread unruhtech
i just got clamav 0.70-rc up and running on rh 7.3. this is from my /var/log/maillog Apr 9 11:11:48 shell mta-daemon[5840]: i39GBmxu005840: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Apr 9 11:11:48 shell mta-daemon[5840]: i39GBmxu005840: Milter (clmilter): to error sta

[Clamav-users] clamav-milter exited on signal 11

2004-04-09 Thread Mike Lambert
Greetings, I have been running ClamAV version devel-20040405 for three days without issue, until this morning. Now, for each virus rejected, the following entry appears in the syslog: /kernel: pid 72343 (clamav-milter), uid 3001: exited on signal 11 These appear to be from children as the parent

Re: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Antony Stone
On Friday 09 April 2004 5:10 pm, Jim Maul wrote: > > >>We have Symantec Corporate Ed AV running on > > >>all workstations and it blocks those files > > >>from even saving to any pc. I have the logs > > >>which says that > > >> > > >>[EMAIL PROTECTED] > > >>[EMAIL PROTECTED] > > >>[EMAIL PROTECTED]

Re: [Clamav-users] clamav-milter exited on signal 11

2004-04-09 Thread Antony Stone
On Friday 09 April 2004 5:21 pm, Mike Lambert wrote: > Greetings, > > I have been running ClamAV version devel-20040405 for three days without > issue, until this morning. Now, for each virus rejected, the following > entry appears in the syslog: > > /kernel: pid 72343 (clamav-milter), uid 3001: e

Re: [Clamav-users] clmilter errors - i'm lost, help?

2004-04-09 Thread Joe Maimon
unruhtech wrote: i just got clamav 0.70-rc up and running on rh 7.3. this is from my /var/log/maillog Apr 9 11:11:48 shell mta-daemon[5840]: i39GBmxu005840: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Apr 9 11:11:48 shell mta-daemon[5840]: i39GBmxu005840: Milter (clmi

RE: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Brad Morgan
> > he said: those virusses are caught by norton on workstations, > clamav didn't catch them on the mailserver. Given that the workstations > received them by mail. > I don't know how Norton is configured in this case, but in my case I have a quarantine area with the original virus intact. Submit

Re: [Clamav-users] submitting samples (name instead?)

2004-04-09 Thread Antony Stone
On Friday 09 April 2004 5:52 pm, Brad Morgan wrote: > > he said: those virusses are caught by norton on workstations, > > clamav didn't catch them on the mailserver. Given that the workstations > > received them by mail. > > I don't know how Norton is configured in this case, but in my case I have

Re: [Clamav-users] clmilter errors - i'm lost, help?

2004-04-09 Thread Stephen Gran
On Fri, Apr 09, 2004 at 11:17:01AM -0500, unruhtech said: > i just got clamav 0.70-rc up and running on rh 7.3. > > this is from my /var/log/maillog > > Apr 9 11:11:48 shell mta-daemon[5840]: i39GBmxu005840: Milter (clmilter): local > socket name /var/run/clmilter.sock unsafe > Apr 9 11:11:48

RE: [Clamav-users] wbmclamav

2004-04-09 Thread Lynn Duerksen
> Henry Harvey > I just found this utility > wbmclamav > http://wbmclamav.labs.libre-entreprise.org/ > A webmin utility for ClamAV > to manage quaratined emails, etc. > It's still in Alpha stage though according to Freshmeat. > > Anyone tried this? The features are neat and just what I wanted. >

Re: [Clamav-users] Re: Use of CLAMAV as Corporate Antivirus

2004-04-09 Thread Flinn Mueller
On Apr 9, 2004, at 9:22 AM, Alex Cherney wrote: Fajar, thanks for the suggestions and I agree with Tomasz. I need to think how to do that in the UI so that an ordinary user (as far I understand - the target audience) is not overwhelmed with number of options. I think you should add the ability t

[Clamav-users] configuring clamav

2004-04-09 Thread Nishant Shah
Hi everyone, I downloaded the clamav-0.70 tar file and I am trying to install it. After reading the documentation and following the steps I reached upto running ./configure --syconfigdir=/etc. After I do that I am having an error: configure error: Need to know how to pack structures with this com

[Clamav-users] clamd.ctl not read at bootup

2004-04-09 Thread Karl Hakmiller
Just installed clamav (0.68) on FC1 system. Freshclam works OK but system does not read clamd.ctl at bootup. There is a file named clamd.ctl in /var/run/clamav (which is the dir specified for LocalSocket in /etc/clamav.conf). The bootlog reports that clamav-milter failed to load. My clamav.con

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-09 Thread Jeff Ramsey
I have done some further testing, and I am blocking Somefool and Somefool.B, but I am not blocking variant P. My Sophos is picking it up as Netsky P. Both Sophos and clamav are being called by Amavisd-new via sendmail milter. Is there some sort of binary on my box that I have forgotten to give

[Clamav-users] Install on Redhat 7.3

2004-04-09 Thread Jean-Francois Guilmard
Hi I'm using ClamAv 0.65 on a redhat 7.3 I'd like to upgrade to ClamAv 7.0, but if I use the official rpm, it stops saying it needs lib.so.6 and so on.. seems like it was built for Redhat 8.0 So After searching in archives, I decided to build it by myself. I do 'rpm -I clamav-0.70rc-1.src.rpm'

[Clamav-users] sendmail - viruses not cleaned

2004-04-09 Thread Spades
heya, how do i link clamav with sendmail? Just installed clamav-0.70-rc with ScanMail option enabled. i'm running sendmail 8.12.11 on a FreeBSD 4.9stable and all the user mailboxes are in /var/mail, not in their homedir. The clamd and freshclam daemon is running by clamav. How come the emails a

Re: [Clamav-users] sendmail - viruses not cleaned

2004-04-09 Thread Antony Stone
On Friday 09 April 2004 9:34 pm, Spades wrote: > heya, > > how do i link clamav with sendmail? I use http://www.MailScanner.info - very configurable, supports other AV engines at the same time as ClamAV if you want, and integrates nicely with SpamAssassin too - also does some very useful tests

Re: [Clamav-users] sendmail - viruses not cleaned

2004-04-09 Thread Jeff Ramsey
Google for sendmail with milter support. Recompile sendmail with the milter libraries enabled. And then read the docs included with clamav on using clam-milter. Or you can use an app called amavisd-new, compiled with milter support. Jeff Ramsey MIS Administrator Tubafor Mill, Inc. On Apr 9, 200

RE: [Clamav-users] Install on Redhat 7.3

2004-04-09 Thread Jason Balicki
>It occurs after I installed tcp_wrappers as required (I just did an rpm >-Uvh on tcp_wrappers) You probably need tcp_wrappers-devel too. --J(K) --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Danie

RE: [Clamav-users] Install on Redhat 7.3

2004-04-09 Thread Jean-Francois Guilmard
Ok sorry for being noob, I used the tar.gz version and ./configure ./make ./make install and it works perfectly Jeff --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CE

Re: [Clamav-users] Trouble compiling clamav-latest..

2004-04-09 Thread Todd Lyons
On Wed, 2004-04-07 at 22:12, turgut kalfaoglu wrote: > Hi there - I seem to have much trouble compiling last night's snapshot. > I checked, and I have automake 1.8 installed, and yet I get this > complaint during make : > aclocal.m4:4200: version mismatch. This is Automake 1.6, but aclocal.m4 >

Re: [Clamav-users] clamav-milter exited on signal 11

2004-04-09 Thread Mike Lambert
On Fri, 9 Apr 2004, Antony Stone wrote: > On Friday 09 April 2004 5:21 pm, Mike Lambert wrote: > > > I have been running ClamAV version devel-20040405 for three days without > > issue, until this morning. Now, for each virus rejected, the following > > entry appears in the syslog: > > > > /kernel:

Re: [Clamav-users] configuring clamav

2004-04-09 Thread Fajar A. Nugraha
Nishant Shah wrote: Hi everyone, I downloaded the clamav-0.70 tar file and I am trying to install it. After reading the documentation and following the steps I reached upto running ./configure --syconfigdir=/etc. After I do that I am having an error: configure error: Need to know how to pack st

Re: [Clamav-users] clamd.ctl not read at bootup

2004-04-09 Thread Fajar A. Nugraha
Karl Hakmiller wrote: Just installed clamav (0.68) on FC1 system. Freshclam works OK but system does not read clamd.ctl at bootup. It's not supposed to "read" it. Based on your config, clamd.ctl is a socket. There is a file named clamd.ctl in /var/run/clamav (which is the dir specified for Loc