[Clamav-users] mail to recipient

2004-05-13 Thread Valerii Valeev
Hi all, is it possible to mail a failure message to the recipient, not only to postmaster? Valerii Valeev. --- This SF.Net email is sponsored by: SourceForge.net Broadband Sign-up now for SourceForge Broadband and get the fastest 6.0/768 conn

RE: [Clamav-users] mail to recipient

2004-05-13 Thread Jerome Loyet
> -Message d'origine- > De : [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] De la part > de Valerii Valeev > Envoyé : jeudi 13 mai 2004 17:10 > À : [EMAIL PROTECTED] > Objet : [Clamav-users] mail to recipient > > Hi all, > > is it possible to mail a failure message to the recipient, > n

[Clamav-users] Clam virus scanning through procmail

2004-05-13 Thread Kenneth Andresen
Hello all, I am in a position where I can't add milter to sendmail due to having Redhat Enterprise ES2.1 server and thus loose support on sendmail by recompiling it... I do believe however that it should be possible to avoid a milter by means of a procmail receipt. Anyone who have a tried and t

RE: [Clamav-users] sendmail-milter-clamav

2004-05-13 Thread Samuel Benzaquen
First, when you show a config file, please omit the comment lines... It makes the mail big and doesn't give any extra info. Answering your problem, I think you are lacking one option on the sendmail.cf file. We have sendmail(8.12.11) + clamav + clamav-milter and the options we have on the sendmail

Re: [Clamav-users] What is this Exploit.JUnksurf.A ? (Off topic)

2004-05-13 Thread bergman
In the message dated: Thu, 13 May 2004 14:21:55 +0200, The pithy ruminations from "Flynn" on were: => > => > If your md5sum does NOT match, then reinstalling is probably your best => > option. => > => => I would suggest to run this : => => for i in $(rpm -qa);do rpm -V $i | grep bin;done

Re: [Clamav-users] softlimit+clamav

2004-05-13 Thread Joe Maimon
Rich wrote: Jason, I Googled my clamav problem (memory usage grows!) and found this thread. I've had numerous OOM with my production box so I thought running Softlimit+Clamd would be a good idea. The problem is I get get segmentation fault error and all the clamd processes seems to hang. You me

[Clamav-users] sendmail-milter-clamav

2004-05-13 Thread Iulian
I try to install CLAMAV, on Slack 9.1, with sendmail and milter, My installation: 1. sendmail -d0 | grep MILTER on my PC: Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7 2. User clamav, ...: group clamav useradd -g clamav -d /dev/null clamav mkdir /var/clamav chown c

Re: [Clamav-users] sendmail-milter-clamav

2004-05-13 Thread Alex V. Kovirshin
On Thu, May 13, 2004 at 01:00:39PM +0300, Iulian wrote: > I try to install CLAMAV, on Slack 9.1, with sendmail and > milter, > My installation: > 1. > > sendmail -d0 | grep MILTER > on my PC: Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS > MILTER MIME7TO8 MIME8TO7 > > 2. User clamav, ...:

Re: [Clamav-users] sendmail-milter-clamav

2004-05-13 Thread Nigel Horne
Iulian <[EMAIL PROTECTED]> Wrote: > clamav-milter -blo /var/clamav/clmilter.sock Except for specific situations please don't use the -b option. > srwxrwxrwx 1 clamav clamav 0 May 13 09:17 /var/clamav/clamd.sock Publically writable named pipes could be a security risk. Please look into your uma

Re: [Clamav-users] What is this Exploit.JUnksurf.A ?

2004-05-13 Thread Flynn
> > If your md5sum does NOT match, then reinstalling is probably your best > option. > I would suggest to run this : for i in $(rpm -qa);do rpm -V $i | grep bin;done before taking the decision of reinstalling everything... Flynn --- Thi

Re: [Clamav-users] Clam virus scanning through procmail

2004-05-13 Thread Brian J. France
This is what I am using: --- clamav.rc --- :0 CLAMAV=|/usr/bin/clamdscan --mbox --disable-summary --stdout - :0 * CLAMAV ?? .*: \/.* FOUND { :0 fhw | /usr/bin/formail -a "X-ClamAV: ${MATCH}" } #:0E fhw #| /usr/bin/formail -a "X-ClamAV: clean" I didn't want to add a header to clean messag

Re: [Clamav-users] Clam virus scanning through procmail

2004-05-13 Thread Christopher X. Candreva
On Thu, 13 May 2004, Kenneth Andresen wrote: > Anyone who have a tried and tested receipt, or have suggestions for how > to accomplish this? This has been posted several times, but: # Change path to suit: VIRUS=`/usr/local/bin/clamdscan --mbox --disable-summary --stdout -` :0 Di * VIRUS ?? FOU

[Clamav-users] Re: What is this Exploit.Junksurf.A?

2004-05-13 Thread N S Srikanth
astro: [20:31] [10] ~>md5sum /usr/bin/kmail df82e822af0ecb12a2e04f832144a87d /usr/bin/kmail If your md5sum matches mine, then your box is safe and it's clamav that's screwy. You should update to 0.70 and run freshclam to update your database, then try again. = [EMAIL PROTECTED] srikanth]$

Re: [Clamav-users] What is this Exploit.JUnksurf.A ? (Off topic)

2004-05-13 Thread Damian Menscher
On Thu, 13 May 2004 [EMAIL PROTECTED] wrote: > In the message dated: Thu, 13 May 2004 14:21:55 +0200, > The pithy ruminations from "Flynn" on > were: > => > > => > If your md5sum does NOT match, then reinstalling is probably your best > => > option. > => > > => > => I would suggest to run this : >

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Lucas Albers
Fajar A. Nugraha said: > Did you add the script to kill clamd and start it when clamdwatch says > clamd dead/hung? What is clamdwatch, I have never heard of it? Where do you get it? -- Luke Computer Science System Administrator Security Administrator,College of Engineering Montana State Univers

Re: [Clamav-users] sendmail-milter-clamav

2004-05-13 Thread Per-Olov Sjöholm
-- I will do a top post here as it is to much to scroll and therefore not readable enough... (no comments on top postings please) -- The sendmail config (your section 7) is not ok. Two things here. 1. You should consider to use the macro configuration (the ".mc" file) and build a

RE: [Clamav-users] clamav-milter[xxx]: ClamAv: thread_create() failed: 11, try again

2004-05-13 Thread Samuel Benzaquen
Hi, As a matter of fact, the configuration I wrote about was correct. Setting the thread stack to 2Mb solved the problem and let the system create more than 256 threads of clamav-milter (till the hard limit of glibc). Regards, Samuel Benzaquen >Hi, > >I have to say that the answer to this probl

Re: [Clamav-users] What is this Exploit.JUnksurf.A ? (Off topic)

2004-05-13 Thread Kevin Spicer
On Thu, 2004-05-13 at 20:53, Damian Menscher wrote: > You are obviously correct in the case of an intrusion. But I don't know > many 1337 h4x0rs that would mess with: > //usr/share/doc/libxml2-devel-2.5.4/example.html: Exploit.Junksurf.A FOUND > which is why i recommended updating clamav before re

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Fajar A. Nugraha
Lucas Albers wrote: Fajar A. Nugraha said: Did you add the script to kill clamd and start it when clamdwatch says clamd dead/hung? What is clamdwatch, I have never heard of it? Where do you get it? It's a simple perl script to determine whether clamd is dead, hung, or alive. http://mike

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Rich
Found this Googling, good tool too to monitor clamd ;-) http://www.tildeslash.com/monit/ - Original Message - From: "Fajar A. Nugraha" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 14, 2004 12:41 PM Subject: Re: [Clamav-users] Clamd Leaking? > Lucas Albers wrote: > >

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Fajar A. Nugraha
Rich wrote: Found this Googling, good tool too to monitor clamd ;-) http://www.tildeslash.com/monit/ Yes, it's good indeed. So is daemontools. But when it comes to simplicity, clamdwatch is the simplest one. Which is (I think) why clamdwatch is included on the default clamav tarball package, r

[Clamav-users] Re: Clam virus scanning through procmail

2004-05-13 Thread Kalin Wilson
Check out clamassassin at http://drivel.com/clamassassin. It is a shell script which uses clamscan and formail to scan for viruses and modify the email header aka spamassassin. The README explains how to use procmail to invoke clamassassin and filter based on the header. Good luck. --