[Clamav-users] Re: malformed pattern

Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of peter Sent: Monday, May 03, 2004 11:29 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] Re: malformed pattern Look at these lines bottom (/var/spool/qmailscan/qmail-queue.log). In qmail-scanner-q

RE: [Clamav-users] Mail taking a *long* time to hit the list

Michael St. Laurent Sent: Monday, May 03, 2004 2:11 PM > Wow. I posted a message to the list at 9:23 AM (PDT) and as of 11:06 AM > (PDT) it *still* hasn't posted. I wonder if this one will do any better? The list has been slow for me too. Welcome to SourceForge. Used to happen all the time on t

Re: [Clamav-users] Patching clamd to log to stderr (for use with multilog)

Dale Gallagher wrote: Hi everyone Anyone wishing to run clamd under daemontools http://cr.yp.to/daemontools.html can use the attached patch I hacked together, which is almost identical to Len Budney's patch: http://mysite.verizon.net/vze1ypud/software/qscanq/clamav-0.70-stderr.patch.gz I didn't no

Re: [Clamav-users] Patching clamd to log to stderr (for use with multilog)

Andrej Trobentar wrote > Hello, > > I have aplied the appended patch and now I see all the > output of clam in "ps axwww|grep readpro" insted of > /var/log/clamd/current. Currently I'm using clamav 0.67-1 > with a patch that Tomasz Kojm send in Hmmm... Did you patch clamav-0.70, or cla

[Clamav-users] Problem installing .70 on freebsd

Hi all, Attempting to upgrade to .70 on FreeBSD 4.7 I have installed gmp-4.1.3 ./configure without options make returns the following errers /usr/lib/libc.so: WARNING! setkey(3) not present in the system! /usr/lib/libc.so: warning: this program uses gets(), which is unsafe. /usr/lib/libc.so: warni

RE: [Clamav-users] Mail taking a *long* time to hit the list

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Michael > St. Laurent > Sent: Monday, May 03, 2004 5:11 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [Clamav-users] Mail taking a *long* time to hit the list > > > Antony Stone w

Re: [Clamav-users] sigtool not working correctly [solved]

All, What is odd is that I was using the /usr/local/share/clamav path but changed it to /var/lib/clamav because that is what freshclam.conf has as it's default. I changed the line in the /etc/clamav.conf to reflect the /var/lib/clamav location. Clam is catching the newest viruses, and the datab

RE: [Clamav-users] sigtool not working correctly

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Mark Novak > Sent: Monday, May 03, 2004 6:20 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] sigtool not working correctly > > > Jim, > > > On May 3, 2004, at 3:27 PM, Jim Maul wrote: > > > > > >

Re: [Clamav-users] Patching clamd to log to stderr (for use with multilog)

Dale Gallagher wrote: Hmmm... Did you patch clamav-0.70, or clamav-0.67? The patch I included, is for clamav-0.70 which is quite different to preceding versions. I'm guessing that you've patched clamav-0.67 which doesn't have the source files shared/output.c and shared/output.h which the patch al

[Clamav-users] no bounce notice

How could I stop clamav-milter from responding with a bounce notice while still rejecting infected messages from the incoming queue? The recipient of the infected message should still receive a notification from clamav. Someone suggested an option "-p" but it's not in the manpage or `clamav-mi

[Clamav-users] Numbers of viruses

Hi, I have a query. Most commercial AV software claims to catch something like 70,000+ viruses. On the other hand, ClamAV claims to catch 20,000+ viruses. Why the difference? Is it because McAfee, Sophos et al consider each and every variant to be a different virus, and ClamAV doesn't? Or does

[Clamav-users] clamd and clamav-milter won't start!

Clamd started 'hanging' this morning. I tried to start it again but it would not start! After several tries, I manually removed clamd.sock and the command 'service clamd status' throws 'clamd is stopped' Then 'service clamd start' takes a long time and then it shows this: Starting Clam AntiVirus D

RE: [Clamav-users] Numbers of viruses

Because the other 50,000 are mostly viruses from years ago which are dead and gone and very unlikeyl to infect anyones machine. -Original Message- From: Russ Phillips [mailto:[EMAIL PROTECTED] Sent: 04 May 2004 05:47 PM To: [EMAIL PROTECTED] Subject: [Clamav-users] Numbers of viruses Hi

Re: [Clamav-users] Numbers of viruses

On Tuesday 04 May 2004 4:46 pm, Russ Phillips wrote: > Hi, > > I have a query. Most commercial AV software claims to catch something > like 70,000+ viruses. On the other hand, ClamAV claims to catch 20,000+ > viruses. > > Why the difference? Is it because McAfee, Sophos et al consider each and > e

[Clamav-users] How to submit email from Exchange Server?

This morning I got a suspiscious email with executable attachments claiming to be a security update from Microsoft. This email made it past both clamav and Norton Antivirus. Thinking that this might be a sample of a new virus I wanted to submit it on the web page. However, since the mail is on a

Re: [Clamav-users] no bounce notice

On Tuesday 04 May 2004 4:38 pm, M.W. Chang wrote: > How could I stop clamav-milter from responding with a bounce notice > while still rejecting infected messages from the incoming queue? Don't use the -b (--bounce) optionb when starting the program. -- Nigel Horne. Arranger, Composer, Typesette

[Clamav-users] problems using sendmail with clamav on rh7.3

Hi agian, I finnally could compile it and it runs at least the tests, but now the problem comes when i try to add it in sendmail INPUT_MAIL_FILTER(`clamav', `S=local:/usr/local/clamav/clamav.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav')dnl and when i run m4, this 2 lines

[Clamav-users] A newbie question

Hi guys, I am a new user of clamav. I was testing clamAv against various worms and viruses I have collected from McAfee's AV. A lot of them dont trigger any alert. Also i would like to add my own signatures. Can someone suggest me what will be the best way to do that?? Should i just go through the

Re: [Clamav-users] Numbers of viruses

On Tue, 4 May 2004, Russ Phillips wrote: > Hi, > > I have a query. Most commercial AV software claims to catch something > like 70,000+ viruses. On the other hand, ClamAV claims to catch 20,000+ > viruses. > As a user I an assure you the clamav team is as fast (or faster in the case of MyDoom) th

Re: [Clamav-users] A newbie question

On Tuesday 04 May 2004 6:30 pm, chintan chintan wrote: > Hi guys, > > I am a new user of clamav. I was testing clamAv against various worms and > viruses I have collected from McAfee's AV. A lot of them dont trigger any > alert. Are you sure these are (still) viruses? Some commercial A-V produc

Re: [Clamav-users] problems using sendmail with clamav on rh7.3

Raul Elizondo wrote: Hi agian, I finnally could compile it and it runs at least the tests, but now the problem comes when i try to add it in sendmail INPUT_MAIL_FILTER(`clamav', `S=local:/usr/local/clamav/clamav.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav')dnl and when i

Re: [Clamav-users] no bounce notice

How could I stop clamav-milter from responding with a bounce notice while still rejecting infected messages from the incoming queue? The recipient of the infected message should still receive a notification from clamav. Someone suggested an option "-p" but it's not in the manpage or `clamav-mi

RE: [Clamav-users] How to submit email from Exchange Server?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Michael St. Laurent > Sent: 4. maj 2004 18:42 > To: '[EMAIL PROTECTED]' > Subject: [Clamav-users] How to submit email from Exchange Server? > > Does a procedure exist for exporting an emai

Re: [Clamav-users] Numbers of viruses

On Tue, 2004-05-04 at 10:46, Russ Phillips wrote: > Hi, > > I have a query. Most commercial AV software claims to catch something > like 70,000+ viruses. On the other hand, ClamAV claims to catch 20,000+ > viruses. > > Why the difference? Is it because McAfee, Sophos et al consider each and >

Re: [Clamav-users] Numbers of viruses

On Tuesday 04 May 2004 17:27, Antony Stone wrote: > Yes. ClamAV is not a commercial product with an associated marketing > division, and therefore the project does not have the same attitude towards > "one-upmanship" and "marketing b*llsh*t" which commercial vendors do. That's what I suspected,

Re: [Clamav-users] problems using sendmail with clamav on rh7.3

On Tue, 4 May 2004 11:16:20 -0600, "Raul Elizondo" <[EMAIL PROTECTED]> wrote: >and when i run m4, this 2 lines does not even make any change in >sendmail.cf. > Run m4? make -C /etc/mail should compile the .m4 file into the .cf result. -- Steve --

[Clamav-users] clamav-milter doesn't "see" virus on emails? (help!)

Hello list! After reading a little bit in google and in the list it self, I have successfully installed the clamav antivirus with the clamav-milter mail scanner. But I have one problem: clamav-milter do not stops or informs the presence of virus in the emails. I have redhat linux and sendmail fr

[Clamav-users] FreeBSD 4.8-RELEASE + clamd 0.70 (stable) hanging

Howdy folks, I'm running clamd 0.70 with: FreeBSD chortos.wingnet.net 4.8-RELEASE FreeBSD 4.8-RELEASE #0: Fri Apr 11 12:59:08 EDT 2003 [EMAIL PROTECTED]:/usr/src/sys/compile/CHORTOS i386 I am (and have been since a CVS upgrade sometime after 0.70-rc) having serious problems with clamd hang

Re: [Clamav-users] problems using sendmail with clamav on rh7.3

Check to see if it has compiled into the binary: $ sendmail -d0 < /dev/null | grep MILTER Compiled with: DNSMAP LOG MATCHGECOS MILTER MIME7TO8 MIME8TO7 At 10:16 AM Tuesday, 5/4/2004, Raul wrote -=> I finnally could compile it and it runs at least the tests, but now the problem comes when i try to

[Clamav-users] problems using sendmail with clamav on rh7.3

add the followings lines to sendmail.mc and run again m4 define(_FFR_MILTER)dnl INPUT_MAIL_FILTER(`clamav', `S=local:/var/clamav/clamav.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav')dnl Roberto - Original Message - From: "Steven Stern" <[EMAIL PROTEC

[Clamav-users] Re: clamav-milter doesn't "see" virus on emails? (help!)

I think that I have found the problem. Wen I regenerate the sendmail.cf the file laks of the filter options. I am doing this with the following command: m4 sendmail.mc > sendmail.cf It creates the file, but can't find anything about filters, milter, clamav or something like that. I hav add the fo

RE: [Clamav-users] How to submit email from Exchange Server?

Diego d'Ambra wrote: >> Does a procedure exist for exporting an email from Exchange Server >> in a format that is useable by the team? > > You may take a look at Spamsource > (http://www.daesoft.com/SpamSource/index.htm). > > It allows you easy to "extract the original

[Clamav-users] segmentation fault in 0.70 ?due to filename of infected virus?

Hello, I am running clamav-0.70 with mailscanner (rebuilt the Fedora RPMs on RHEL3), and I have had for the first time something I have not had in a very long time; Segmentation fault, :-( Bye.. I searched the logs, and this occurred as follows: Tue May 4 16:08:13 2004 -> Segmentation faul

Re: [Clamav-users] problems using sendmail with clamav on rh7.3

Raul Elizondo wanted us to know: >Perhaps rh7.3 (sendmail 8.11.6) need someother command rather than >INPUT_MAIL_FILTER and define? Make sure that sendmail-cf is installed. -- Regards... Todd They that can give up essential liberty to obtain a little temporary safety deserve neithe

Fw: [Clamav-users] Re: clamav-milter doesn't "see" virus on emails? (help!)

Hi I test adding the followings lines to sendmail.mc define(_FFR_MILTER)dnl INPUT_MAIL_FILTER(`clamav', `S=local:/var/clamav/clamav.sock, F=,T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav')dnl Now see the changes in sendmail.cf Roberto - Original Message - Fro

Fw: [Clamav-users] problems using sendmail with clamav on rh7.3

add the followings lines to sendmail.mc and run again m4 define(_FFR_MILTER)dnl INPUT_MAIL_FILTER(`clamav', `S=local:/var/clamav/clamav.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav')dnl Roberto - Original Message - From: "Todd Lyons" <[EMAIL PROTECTE

Re: [Clamav-users] clamav-milter doesn't "see" virus on emails? (help!)

On Tue, May 04, 2004 at 05:06:49PM -0300, Matias Lopez Bergero said: > Hello list! > After reading a little bit in google and in the list it self, I have > successfully installed the clamav antivirus with the clamav-milter mail > scanner. > But I have one problem: > clamav-milter do not stops or