Re: [Clamav-users] Problem with clamscan .vs. clamdscan

2004-04-28 Thread Tomasz Kojm
On Wed, 28 Apr 2004 08:20:03 +1000 Bill Maidment <[EMAIL PROTECTED]> wrote: > My point is that if we could make the names of the processes more > distinguishable and match the conf files (if any) then we remove the > chance of error. For example clamscan could be renamed to scanclam > (with NO s

Re: [Clamav-users] Re: clam-av/milter, NOW: that one resolved, moved on

2004-04-28 Thread Joe Maimon
Don Levey wrote: Apr 27 21:38:54 davinci sendmail[7174]: i3S1csjm007174: from=<[EMAIL PROTECTED]>, size=700, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=smtp03.mrf.mail.rcn.net [207.172.4.62] Apr 27 21:42:54 davinci sendmail[7174]: i3S1csjm007174: Milter (clmilte

[Clamav-users] Re: Trying to install on old machine

2004-04-28 Thread Leonid Zeitlin
"Christian Hack" <[EMAIL PROTECTED]> ???/ ? ?: news:[EMAIL PROTECTED] > I'm running an old RH6.2 based box, which does most things OK for now (it's > still kernel 2.2 though). I'm looking to upgrade soon, but would like to get > ClamAV going on it for now. > > When I ru

[Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Ralf Guenthner
Hi First of all: Kudos to the ClamAV team it's so useful in stopping worms. On to my question: For some reason, clamav is labelling almost each virus it finds in incoming mail as "Win32.Mix" like so Wed Apr 28 12:28:30 2004 -> /var/spool/qmailscan/tmp/mx2108314810947010970/data.rtf

Re: [Clamav-users] Re: clam-av/milter, NOW: that one resolved, moved on

2004-04-28 Thread Don Levey
On Wed, 2004-04-28 at 05:57, Joe Maimon wrote: > Don Levey wrote: > > > > >Apr 27 21:38:54 davinci sendmail[7174]: i3S1csjm007174: > >from=<[EMAIL PROTECTED]>, size=700, class=0, nrcpts=1, > >msgid=<[EMAIL PROTECTED]>, proto=ESMTP, > >daemon=MTA, relay=smtp03.mrf.mail.rcn.net [207.172.4.62] > >Apr

Re: [Clamav-users] [PATCH] clamav-milter --max-child-wait

2004-04-28 Thread Joe Maimon
This is actualy a lot worse than I thought. Apr 27 04:25:50 nameserver2 clamav-milter[4431]: ClamAv: private data not NULL Apr 27 04:25:50 nameserver2 clamav-milter[4417]: ClamAv: private data not NULL Apr 27 04:25:52 nameserver2 clamav-milter[4427]: ClamAv: private data not NULL Apr 27 04:25:5

Re: [Clamav-users] Re: clam-av/milter, NOW: that one resolved, moved on

2004-04-28 Thread Joe Maimon
Don Levey wrote: On My sendmail and sendmail-devel are both 8.12.8-9.90. Is this known to cause problems? Thanks again! -Don I dont know. Perhaps you would like to try compiling sendmail,libmilter,clamav from source? --- This SF.

Re: [Clamav-users] Problem with clamscan .vs. clamdscan

2004-04-28 Thread Eric Wieling
On Fri, 2004-04-23 at 14:40, Stephen Gran wrote: > > What DOES read clamav.conf? > > clamd, clamdscan, and clamav-milter. freshclam also looks at it to find > out how to notify clamd if you have it set to notify clamd after updates. > It _is_ in the various docs, you know :) The RPM I'm using ha

Re[2]: [Clamav-users] External script for clamav-milter (VirusEvent?)

2004-04-28 Thread Marin Alexey
Hello Tomasz, Monday, April 26, 2004, 11:56:22 PM, you wrote: TK> On Mon, 26 Apr 2004 19:21:15 +0400 TK> Marin Alexey <[EMAIL PROTECTED]> wrote: >> Hello, clamav-users, >> >> Using Clamav above 3 month. >> Now prepare to deal with realtime DRBL blocking for virus-source hosts >> (above 100 host

[Clamav-users] scanning streams

2004-04-28 Thread Marc
We are using clamd and clamscan for our mail and are very pleased with it. Keep up the good work. I was wondering if it is possible to scan streams too (http-traffic, ...)? Marc --- This SF.Net email is sponsored by: Oracle 10g Get certified

Re: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Tomasz Papszun
On Wed, 28 Apr 2004 at 13:42:07 +0200, Ralf Guenthner wrote: > > First of all: Kudos to the ClamAV team it's so useful in stopping worms. > > On to my question: > For some reason, clamav is labelling almost each virus it finds in > incoming mail as "Win32.Mix" like so > > Wed Apr 28 12:28:30 20

RE: [Clamav-users] Re: clam-av/milter, NOW: that one resolved, moved on

2004-04-28 Thread Don Levey
[EMAIL PROTECTED] wrote: > Don Levey wrote: > >> On >> >> My sendmail and sendmail-devel are both 8.12.8-9.90. >> Is this known to cause problems? Thanks again! >> -Don >> >> >> >> >> > > I dont know. Perhaps you would like to try compiling > sendmail,libmilter,clamav from source? > Well, I'm will

RE: [Clamav-users] Problem with clamscan .vs. clamdscan

2004-04-28 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Joe Maimon > Sent: Tuesday, April 27, 2004 5:01 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Problem with clamscan .vs. clamdscan > > > > > Jim Maul wrote: > > > > > > >> > > > >Exactly

Re: [Clamav-users] error on make in OS X/Panther clamav

2004-04-28 Thread Huw Jenkins
I'm getting similar errors during make, however I can't see an answer in the error ;-) depmode=gcc3 /bin/sh ../depcomp \ /bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./zziplib-g -O2 -c -o matcher.lo `test -f 'matcher.c' || echo './'`matcher.c ../libtool: line 1: s

Re: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Ralf Guenthner
I guess that you use very old database - Win32.Mix isn't present in the database since the end of February 2004. Tomasz, thanks a lot for replying. I'm afraid that's not the problem, though. Here's the result of a fresclam: ClamAV update process started at Wed Apr 28 16:00:00 2004 SECURITY WARNIN

RE: [Clamav-users] Re: clam-av/milter, NOW: that one resolved, moved on

2004-04-28 Thread Don Levey
[EMAIL PROTECTED] wrote: > Don Levey wrote: > >> On >> >> My sendmail and sendmail-devel are both 8.12.8-9.90. >> Is this known to cause problems? Thanks again! >> -Don >> >> >> >> >> > > I dont know. Perhaps you would like to try compiling > sendmail,libmilter,clamav from source? > You mentioned

Re: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Kristof Hardy
Ralf Guenthner wrote: ClamAV update process started at Wed Apr 28 16:00:00 2004 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES main.cvd is up to date (version: 22, sigs: 20229, f-level: 1, builder: tkojm) daily.cvd is up to date (version: 291, sigs: 1072, f-level: 2, builder: ccordes) What

Re: [Clamav-users] clamav 0.70 gmp-devel

2004-04-28 Thread cH4os
I actually had to load: gnump Description is GNU MP3 Streaming?? but once I installed that package it all worked... Running SuSE 9 pro On Apr 23, 2004, at 10:26 AM, Alex S Moore wrote: On Fri, 2004-04-23 at 10:07, McWhirter,Julia wrote: Can you just verify gmp-devel is part of gmp? I think th

Re: [Clamav-users] error on make in OS X/Panther clamav

2004-04-28 Thread Huw Jenkins
>> I'm getting similar errors during make, however I can't see an answer in the >> error ;-) >> >> >> depmode=gcc3 /bin/sh ../depcomp \ >> /bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. >> -I./zziplib-g -O2 -c -o matcher.lo `test -f 'matcher.c' || echo >> './'`matcher

Re: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Tomasz Papszun
On Wed, 28 Apr 2004 at 16:09:57 +0200, Ralf Guenthner wrote: > >I guess that you use very old database - Win32.Mix isn't present in > >the database since the end of February 2004. > > Tomasz, > thanks a lot for replying. I'm afraid that's not the problem, though. > Here's the result of a fresclam

RE: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Ralf > Guenthner > Sent: Wednesday, April 28, 2004 10:10 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clam assigns wrong virus name?? > > > > I guess that you use very old database - Win32.Mix

Re[2]: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Christoph Cordes
On Wednesday, April 28, 2004, 4:09:57 PM, Ralf Guenthner wrote: >> I guess that you use very old database - Win32.Mix isn't present in >> the database since the end of February 2004. RG> Tomasz, RG> thanks a lot for replying. I'm afraid that's not the problem, though. RG> Here's the result of a f

Re: [Clamav-users] error on make in OS X/Panther clamav

2004-04-28 Thread Matt
On Wed, 28 Apr 2004 16:50:19 +0100 Huw Jenkins wrote: > > > /usr/bin/ld: -o: multiply specified > make[2]: *** [libclamav.la] Error 1 > make[1]: *** [all-recursive] Error 1 > make: *** [all] Error 2 > > Each time I have had a compilation error, it's been down to an oldish version of gcc on t

Re: [Clamav-users] clamav 0.70 gmp-devel

2004-04-28 Thread Brad Tarver
gnu math precision cH4os wrote on 4/28/2004 10:35 AM: I actually had to load: gnump Description is GNU MP3 Streaming?? but once I installed that package it all worked... Running SuSE 9 pro On Apr 23, 2004, at 10:26 AM, Alex S Moore wrote: On Fri, 2004-04-23 at 10:07, McWhirter,Julia wrote:

Re: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread Niek
Ralf Guenthner wrote: I guess that you use very old database - Win32.Mix isn't present in the database since the end of February 2004. sigtool -l |grep -i mix .. .. W32.Mix.1852 Tomasz, thanks a lot for replying. I'm afraid that's not the problem, though. Here's the result of a fresclam: ClamAV

Re: [Clamav-users] error on make in OS X/Panther clamav

2004-04-28 Thread OpenMacNews
Apologies for the top post, I've had a long day :( I've made some progress, running $export SED=sed seems to fix the original error. However I have another problem. The following error message will hopefully shed some light on my problems: /usr/bin/ld: -o: multiply specified make[2]: *** [libclam

[Clamav-users] Clamscan didn't work in the real world

2004-04-28 Thread Victor Yu
Greeting, I just installed Clam on a Linux server. After installation, I run #clamscan /usr/local/share/clamav/test, it found the virus, the output like this: - /usr/local/share/clamav/test/test1: ClamAV-Test-Signature FOUND /usr

Re: [Clamav-users] Clam assigns wrong virus name??

2004-04-28 Thread B. van Ouwerkerk
Wed Apr 28 12:28:30 2004 -> /var/spool/qmailscan/tmp/mx2108314810947010970/data.rtf .scr: Win32.Mix FOUND I am sure that is rather a sample of the Netsky worm, which other systems running clam identify as "Worm.Somefool.xx" What could be the cause of the wrong name? Clamav is having it's own

Re: [Clamav-users] Clamscan didn't work in the real world

2004-04-28 Thread Vernon A. Fort
Victor Yu wrote: Greeting, I just installed Clam on a Linux server. After installation, I run #clamscan /usr/local/share/clamav/test, it found the virus, the output like this: - /usr/local/share/clamav/test/test1: ClamAV-Test-Sig

[Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Zoong Pham
I currently have ClamAV (0.65) and Sendmail running on the same server Pentium 200 MHz. ClamAV scans inbound and outbound mails for Sendmail via local TCP (localhost, port ) The performance is not that great given the specs of the server. I have a Windows 2000 Advance Server on a AMD 2.6 GHz

Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Fajar A. Nugraha
Zoong Pham wrote: Can I install ClamAV on the Window server and have it scanning inbound and outbound mails for the mail server on the old Pentium ? If you use clamav-milter, the answer is yes. If you use other "glues" (e.g. mail-scanner, amavis, etc.) that depends on the glue. Try man clamav-

RE: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Zoong Pham
> -Original Message- > From: Fajar A. Nugraha [mailto:[EMAIL PROTECTED] > Sent: Thursday, 29 April 2004 12:05 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix > If you use clamav-milter, the answer is yes. > If you use other "glues" (e.g. ma

Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Fajar A. Nugraha
Zoong Pham wrote: The Windows server has cyswin installed as well. Should I install ClamAV natively to windows or to cygwin? I don't know how to install (read : compile) ClamAV natively to Windows (using MS-VC or Borland CPP). If you know how, that would be great. Just make sure you use the lat

RE: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Zoong Pham
> -Original Message- > From: Fajar A. Nugraha [mailto:[EMAIL PROTECTED] > Sent: Thursday, 29 April 2004 1:41 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix > > >> Latest CVS snapshot version (devel-20040429) compiles OK on cygwin. > My bi