[Clamav-users] Compiling ClamAV permissions problem

2004-05-19 Thread Graham Dodd
Hello All, I have finally got Clamd running with Exim 4 (a long story), but it will only run as root :-{ I compiled and installed clam (0.70) as root In clamav.conf I have user clamav I have added user clamav and group clamav clamscan works clamdscan returns an error that it cannot open file or d

[Clamav-users] clamd new virusses

2004-05-19 Thread Jona Tallieu
Hi all, We have CLAMD up & running with our CommunigatePro mailserver and CGPAV filter. We do an hourly check for fresh virusses using cron and freshclam, and it works perfectly. Some questions: will clamd automatically use the new virus-defenitions freshclam has downloaded, or do we need to rel

Re: [Clamav-users] clamd new virusses

2004-05-19 Thread Antony Stone
On Wednesday 19 May 2004 10:38 am, Jona Tallieu wrote: > Hi all, > > We have CLAMD up & running with our CommunigatePro > mailserver and CGPAV filter. > > We do an hourly check for fresh virusses using cron > and freshclam, and it works perfectly. Hopefully you are doing this at a random number o

[Clamav-users] Mail with W32/Netsky.d@MM virus get by clam undetected

2004-05-19 Thread Mr Mailing List
Hi, I just received a returned (fake) mail that clam did not catch (your_website.mail is the raw message): clamscan --mbox your_website.mail .../your_website.mail: OK --- SCAN SUMMARY --- Known viruses: 21612 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanne

Re: [Clamav-users] Compiling ClamAV permissions problem

2004-05-19 Thread George Chelidze
Hello, Graham Dodd wrote: Hello All, I have finally got Clamd running with Exim 4 (a long story), but it will only run as root :-{ I compiled and installed clam (0.70) as root In clamav.conf I have user clamav I have added user clamav and group clamav clamscan works clamdscan returns an error that

Re: [Clamav-users] Getting virus size from signature file.

2004-05-19 Thread Roger Fishwick
--On 18 May 2004 11:34 -0500 Damian Menscher <[EMAIL PROTECTED]> wrote: On Tue, 18 May 2004, Antony Stone wrote: On Tuesday 18 May 2004 3:39 pm, Samuel Benzaquen wrote: > I'm trying to do a report of how clamav have reduced disk usage by > blocking virus emails. Huh? That seems like a very stran

Re: [Clamav-users] clamd new virusses

2004-05-19 Thread George Chelidze
Hello, Jona Tallieu wrote: Hi all, We have CLAMD up & running with our CommunigatePro mailserver and CGPAV filter. We do an hourly check for fresh virusses using cron and freshclam, and it works perfectly. Some questions: will clamd automatically use the new virus-defenitions freshclam has download

[Clamav-users] name that worm: agobot,gaobot,polybot

2004-05-19 Thread Betsy Schwartz
Some PC's on our network have been flagged as having "agobot,gaobot,polybot" (or a sasser variant), by the perimiter security system. I have looked at Kevin's excellent database at http://www.rainingfrogs.co.uk and don't see any matches made between these names and clamav. Reading the vendor d

Re: [Clamav-users] name that worm: agobot,gaobot,polybot

2004-05-19 Thread Antony Stone
On Wednesday 19 May 2004 12:54 pm, Betsy Schwartz wrote: > Some PC's on our network have been flagged as having > "agobot,gaobot,polybot" (or a sasser variant), by the perimiter security > system. I have looked at Kevin's excellent database at > http://www.rainingfrogs.co.uk and don't see any mat

Re: [Clamav-users] name that worm: agobot,gaobot,polybot

2004-05-19 Thread Jakub Jankowski
On 2004-05-19, Betsy Schwartz wrote: Some PC's on our network have been flagged as having "agobot,gaobot,polybot" (or a sasser variant), by the perimiter security system. I have looked at Kevin's excellent database at http://www.rainingfrogs.co.uk and don't see any matches made between these na

[Clamav-users] Re: name that worm: agobot,gaobot,polybot

2004-05-19 Thread Virgo Pärna
On Wed, 19 May 2004 07:54:54 -0400, Betsy Schwartz wrote: > Some PC's on our network have been flagged as having > "agobot,gaobot,polybot" (or a sasser variant), by the perimiter security > dragon:~> sigtool -l | grep -i gaobot | wc -l 73 -- Virgo Pärna [EMAIL PROTECTED] ---

RE: [Clamav-users] exiscan and clamav

2004-05-19 Thread Miguel Saturnino
Thanks, for your help. I think I should have said it sooner, I'm using a Mailscanner binary from CPanel which already includes Clamav. Maybe I need to install Clamv separately? grep Socket /etc/clamav.conf returns: LocalSocket /tmp/clam TCPSocket 3310 (both those lines were previously commented, b

Re: [Clamav-users] name that worm: agobot,gaobot,polybot

2004-05-19 Thread K. Shantanu
* Antony Stone <[EMAIL PROTECTED]> [040519 08:30]: > ClamAV knows about several gaobot varieties. > > Try a "sigtool -l | grep -i gaobot" on your system. Not related, but is -l undocumented in man page of sigtool. I have clamdscan / ClamAV version 0.70 In 0.67 version the switch itself was not wo

RE: [Clamav-users] exiscan and clamav

2004-05-19 Thread Miguel Saturnino
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Joseph A. Nagy, Jr. > Sent: Wednesday, May 19, 2004 3:20 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] exiscan and clamav > > On Tue, May 18, 2004 at 10:00:34PM -0400, Stephen G

[Clamav-users] OpenBSD bugs still there

2004-05-19 Thread Jerome Loyet
Hello all, There is still a bug in clamav on OpenBSD (3.4 / 3.5). Version 0.71. Clamd running fine. If I run clamdscan, it work fine. If I kill -HUP clamdscan until a scan, it stops and Clamd does'nt stop (as in previous version) But if I do that many times, clamd continues to scan the file. J

Re: [Clamav-users] exiscan and clamav

2004-05-19 Thread Todd Lyons
Miguel Saturnino wanted us to know: >Sorry, forgot to answer your question. I've tried >av-scanner = clamd:/usr/bin/clamscan >but exim panic log says: malware acl condition: clamd: unable to connect >to UNIX socket /usr/bin/clamscan (Permission denied) That's not the socket, that's the binary. P

[Clamav-users] searchable archive update

2004-05-19 Thread Alex Krohn
Hi, Just a quick note that I've added all the ClamAV lists to our searchable mailing list archive available at: http://gossamer-threads.com/lists/clamav/ Cheers, Alex -- Alex Krohn <[EMAIL PROTECTED]> --- This SF.Net email is sponsored b

RE: [Clamav-users] Starting cland in openbsd 3.4

2004-05-19 Thread Jerome Loyet
Title: Starting cland in openbsd 3.4 hello,   Do you use the package from www.fatbsd.com/openbsd ?? Do you have configured clamav.conf ? first, to run clamd maualy: #/usr/local/sbin/clamd to run clamd at boot time, add this to your /etc/rc.local   if [ -x /usr/local/sbin/clamd ]; then   echo -

[Clamav-users] Starting cland in openbsd 3.4

2004-05-19 Thread Wiltshire, Michael
Title: Starting cland in openbsd 3.4 How do I start the clamd daemon in openbsd 3.4 ?

Re: [Clamav-users] freshclam not restarting clamd

2004-05-19 Thread Mariano Absatz
El 18 May 2004 a las 23:02, Stephen Gran escribió: > On Tue, May 18, 2004 at 06:12:45PM -0300, Mariano Absatz said: > > > > ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310 > > connect(): Connection refused > > > > Is there a way to tell freshclam to not try to notify clam

Re: [Clamav-users] exiscan and clamav

2004-05-19 Thread Stephen Gran
On Tue, May 18, 2004 at 09:19:56PM -0500, Joseph A. Nagy, Jr. said: > On Tue, May 18, 2004 at 10:00:34PM -0400, Stephen Gran wrote the following: > > On Tue, May 18, 2004 at 07:43:54PM +0100, Miguel Saturnino said: > > > Hi, all, > > > > > > I have clamav running perfectly with Mailscanner but I w

Re: [Clamav-users] freshclam not restarting clamd

2004-05-19 Thread Stephen Gran
On Wed, May 19, 2004 at 05:44:45PM -0300, Mariano Absatz said: > El 18 May 2004 a las 23:02, Stephen Gran escribió: > > > On Tue, May 18, 2004 at 06:12:45PM -0300, Mariano Absatz said: > > > > > > ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310 > > > connect(): Connection

[Clamav-users] After upgrading...

2004-05-19 Thread Chadwick Wachs
After upgrading to 0.71, I get the following error message in Communigate Pro: 20:31:01.48 2 QUEUE([456077]) from <[EMAIL PROTECTED]>, 1252 bytes (<[EMAIL PROTECTED]>) 20:31:01.48 2 ENQUEUERRULES [456077] rule(ClamAV) action #0: added header 'X-VirusScan-2: SUBMITTED' 20:31:01.48 4 EXTFILTER(cg

[Clamav-users] clamav-0.71 released

2004-05-19 Thread Damian Menscher
Just getting the word out, since the lack of an announcement in here means most of us never find out about it. Damian -- -=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- --