Re: [Clamav-users] freshclam vs selfcheck

2004-04-30 Thread Frank Elsner
On Thu, 29 Apr 2004 14:49:49 EDT "Jim Maul" wrote: > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Frank > > Elsner > > Sent: Thursday, April 29, 2004 1:19 PM > > To: [EMAIL PROTECTED] > > Subject: [Clamav-users] freshclam vs selfcheck > > > > > >

Re: [Clamav-users] Problem

2004-04-30 Thread Bernard Elbourn
Kevin Spicer wrote: On Thu, 2004-04-29 at 21:42, Bernard Elbourn wrote: From a 1 year old installation [snip] Is it time to upgrade? Oh yes. It was probably time to upgrade some months ago! Virus scanning (and virus production) is an arms race, really well advised to keep pace. BMRB Intern

Re: [Clamav-users] Problem

2004-04-30 Thread Kevin Spicer
On Fri, 2004-04-30 at 08:05, Bernard Elbourn wrote: > Unfortunately this installation is remote to me so not so easy to just > update. Shame I did not get any warning! > > How can I find out when I should update so I can plan ahead? > Subscribe to clamav-announce list. Generally speaking its a

Re: [Clamav-users] OT: Just some interesting stats

2004-04-30 Thread Kristof Hardy
Colin A. Bartlett wrote: http://mail.limelyte.net/admin/virus/ NICE! We do something similar. http://www.kineticweb.biz/virusreport.htm I have a script that parses the log file and reads it into SQL. From there, the rest is easy. Just some wishfull thinking.. Would any of you care to share some sam

Re: [Clamav-users] Problem

2004-04-30 Thread Bernard Elbourn
Kevin Spicer wrote: On Fri, 2004-04-30 at 08:05, Bernard Elbourn wrote: Unfortunately this installation is remote to me so not so easy to just update. Shame I did not get any warning! How can I find out when I should update so I can plan ahead? Subscribe to clamav-announce list. Generally spe

Re: [Clamav-users] clamav and postfix

2004-04-30 Thread Bart Silverstrim
On Apr 29, 2004, at 3:03 PM, Jim Maul wrote: Hi: I have a question about the setup of clamav and postfix: Use two instances of postfix is the only way to integrate clamav with postfix? Thanks. I don't know if it's the *only* way, but it's how we use it (first instance listens for incoming mail and

Re: [Clamav-users] Patching clamd to log to stderr (for use with multilog)

2004-04-30 Thread Dale Gallagher
Nigel Horne wrote > LogFile /dev/stderr will work on many systems Slackware Linux complains if one uses the above - hence the patch ;-) I'd be interested to know which OS's are ok with the above? In my original post, I forgot to mention the use of the 'Foreground' config entry when usi

Re: [Clamav-users] [PATCH] clamav-milter --max-child-w

2004-04-30 Thread Andy Fiddaman
Having a maximum at all makes it easy for someone to DoS you because a thread is created for each new SMTP connection.. just connect X times and don't start entering a sender address. I think the thread maximum should be implemented around the actual virus scan because having a thread which is ju

Re: [Clamav-users] Patching clamd to log to stderr (for use with multilog)

2004-04-30 Thread Rick Macdougall
Dale Gallagher wrote: Nigel Horne wrote LogFile /dev/stderr will work on many systems Slackware Linux complains if one uses the above - hence the patch ;-) I'd be interested to know which OS's are ok with the above? In my original post, I forgot to mention the use of the 'Foreground

RE: [Clamav-users] freshclam vs selfcheck

2004-04-30 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Frank > Elsner > Sent: Friday, April 30, 2004 2:46 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] freshclam vs selfcheck > > > On Thu, 29 Apr 2004 14:49:49 EDT "Jim Maul" wrote: > > > -Origi

Re: [Clamav-users] [PATCH] clamav-milter --max-child-w

2004-04-30 Thread Joe Maimon
Andy Fiddaman wrote: Having a maximum at all makes it easy for someone to DoS you because a thread is created for each new SMTP connection.. just connect X times and don't start entering a sender address. You dont have a max process/children configuration for sendmail? That enables the same

Re: [Clamav-users] Patching clamd to log to stderr (for use with multilog)

2004-04-30 Thread Nigel Horne
On Fri, 2004-04-30 at 13:06, Dale Gallagher wrote: > Nigel Horne wrote > > LogFile /dev/stderr will work on many systems > > Slackware Linux complains if one uses the above - hence the > patch ;-) I'd be interested to know which OS's are ok with > the above? Perhaps on slackware (a dist

[Clamav-users] clamdwatch exit code

2004-04-30 Thread Joe Maimon
Hello Mike, I appreciate your work on clamdwatch. Very nice utility. Should serve my purpose well. I do have one suggestion. The exit code for clamdwatch should probably stick to standards, as true && echo $?; false || echo $? can demonstrate. 0 exit success, anything else error. (yes this is

Re: [Clamav-users] Patching clamd to log to stderr (for use with multilog)

2004-04-30 Thread Joe Maimon
Nigel Horne wrote: On Fri, 2004-04-30 at 13:06, Dale Gallagher wrote: Nigel Horne wrote LogFile /dev/stderr will work on many systems Slackware Linux complains if one uses the above - hence the patch ;-) I'd be interested to know which OS's are ok with the above? Pe

RE: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-30 Thread Brad Morgan
> >I'm running ClamAV on a PRODUCTION Windows email server using > the snapshots > >that Fajar provides. > > > WOW. Is it stable? How are you using it, with clamd or clamscan? > > >The server runs Ipswitch's IMail with Declude Virus > >and Declude JunkMail addons. > > > > > > > AFAIK Declude runs c

Re: [Clamav-users] [PATCH] clamav-milter --max-child-w

2004-04-30 Thread Andy Fiddaman
On Fri, 30 Apr 2004, Joe Maimon wrote: ; Andy Fiddaman wrote: ; >How about implementing this as a semaphore in the eom callback, i.e. ; > ; >decrement semaphore; ; >scan using clamd ; >increment semaphore; ; > ; >That would limit the number of simultaneous scans and keep the ; >synchronisation com

Re: [Clamav-users] You might not see OUTDATED warning...

2004-04-30 Thread Dennis Skinner
On Thu, 2004-04-29 at 15:05, Tomasz Kojm wrote: > On Thu, 29 Apr 2004 09:06:23 -0700 > "Mitch (WebCob)" <[EMAIL PROTECTED]> wrote: > > > Just so all will know ;-) > > > > It seems that 0.65 isn't smart enough to notice the difference - I > > didn't get the warning on that box... but I'm upgrading

[Clamav-users] malformed pattern

2004-04-30 Thread peter
Hi, I have problem with clamav 0.70 stable. Malformed patter line 13898 (file /var/spool/qmailscan/tmp/../viruses.db) Incomplete block read cli_cvdload(): Can't unpack CVD file CVD extraction failure This problem I see just with clamscan. I tried scan (by qmail-scanner) with clamd/clamdscan

Re: [Clamav-users] [PATCH] clamav-milter --max-child-w

2004-04-30 Thread Joe Maimon
Andy Fiddaman wrote: What I actually want to limit on my boxes is the number of concurrent scans, not the number of milter threads since 1 thread == 1 incoming email (over the initial signal threads etc.) and sendmail can control that itself. Other people may have different priorities. So

RE: [Clamav-users] malformed pattern

2004-04-30 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of peter > Sent: Friday, April 30, 2004 12:05 PM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] malformed pattern > > > Hi, I have problem with clamav 0.70 stable. > Malformed patter line 13898 (file > /v

[Clamav-users] This is new and I haven't change anything....

2004-04-30 Thread Ken Goods
Installed this machine about 2 weeks ago using the latest and greatest version. This morning I am getting the following message when running freshclam. I added asterisks to the new lines in question. Checked the announce list and do not see a newer version. Is there a new version? Thanks, Ken Cla

[Clamav-users] oops....

2004-04-30 Thread Ken Goods
Should have said I'm running clamav-0.70rc-1.i386.rpm Is there a newer version than this?  

Re: [Clamav-users] This is new and I haven't change anything....

2004-04-30 Thread Antony Stone
On Friday 30 April 2004 6:08 pm, Ken Goods wrote: > Installed this machine about 2 weeks ago using the latest and greatest > version. This morning I am getting the following message when running > freshclam. I added asterisks to the new lines in question. Checked the > announce list and do not see

Re: [Clamav-users] oops....

2004-04-30 Thread Antony Stone
On Friday 30 April 2004 6:21 pm, Ken Goods wrote: > Should have said I'm running clamav-0.70rc-1.i386.rpm Is there a newer > version than this? Clicking on the "Download - stable" link from http://www.clamav.net leads to http://prdownloads.sourceforge.net/clamav where the latest version shown is

Re: [Clamav-users] OT: Just some interesting stats

2004-04-30 Thread Stephen Gran
On Fri, Apr 30, 2004 at 09:26:14AM +0200, Kristof Hardy said: > Colin A. Bartlett wrote: > >>http://mail.limelyte.net/admin/virus/ > >NICE! We do something similar. > >http://www.kineticweb.biz/virusreport.htm > >I have a script that parses the log file and reads it into SQL. From there, > >the res

RE: [Clamav-users] This is new and I haven't change anything....

2004-04-30 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Ken Goods > Sent: Friday, April 30, 2004 1:08 PM > To: Clamav-Users (E-mail) > Subject: [Clamav-users] This is new and I haven't change anything > > > Installed this machine about 2 weeks ago using

RE: [Clamav-users] oops....

2004-04-30 Thread Ken Goods
Thank you much! > -Original Message- > From: Antony Stone [mailto:[EMAIL PROTECTED] > Sent: Friday, April 30, 2004 10:39 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] oops > > > On Friday 30 April 2004 6:21 pm, Ken Goods wrote: > > > Should have said I'm running clamav-0.

Re: [Clamav-users] oops....

2004-04-30 Thread Daniel J McDonald
On Fri, 2004-04-30 at 12:21, Ken Goods wrote: > Should have said I'm running clamav-0.70rc-1.i386.rpm Is there a newer > version than this? > Yes, clamav-0.70 (not the release candidate) is out. -- Daniel J McDonald <[EMAIL PROTECTED]> Austin Energy

[Clamav-users] Mail::ClamAV

2004-04-30 Thread Glen Eustace
I have just incorporated ClamAV, using Mail::ClamAV in our mail filter software. But every message, including the EICAR test returns 'clean'. Is there any debugging I can enable that will tell me what is going on? Any clues as to what I am doing that might be wrong. I am calling it via: my $oSta