[Clamav-users] clamav-milter on debian. How to run supervised?

2004-09-16 Thread Robert S
I have recently installed woody with clamav-daemon and clamav-milter. I see that the /etc/init.d/clamav-milter has the following at the start of the startup script: SUPERVISOR=/usr/bin/daemon SUPERVISORPIDFILE="/var/run/clamav/daemon-clamav-milter.pid" SUPERVISORARGS="-F $SUPERVISORPIDFILE --name

[Clamav-users] freshclam - clamd notity

2004-09-16 Thread Jürgen Walch
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, we are running clamd in combination with clamdscan to scan incoming mails for viruses on smtp level with courier-mta here. Works fine. The signature files are updated using freshclam started via crontab. The crontab entry used is - --8<-- # #

Re: [Clamav-users] clamav-milter on debian. How to run supervised?

2004-09-16 Thread Nigel Horne
On Thursday 16 Sep 2004 12:41, Robert S wrote: > I've compiled daemon from source from http://www.libslack.org/daemon/ (too > many dependencies to risk installing it from "testing"). I've added > RUN_SUPERVISED=yes to /etc/defaults/clamav-milter. When I try to run it > (after shutting down clama

[Clamav-users] illegal instruction (NEW)

2004-09-16 Thread Marek Florianczyk
Hi all, clamav-0.75.1 I've few servers based on RH 6.0 ( or RH 5.0 ) in fact that's are Cobalt Raq 3i servers. Because Cobalt Networks ( now Sun Microsystems ) set free license on that system, I've transfered all system ( binaries, usera accounts, all filesystems ) to the new platform ( Intel

Re: [Clamav-users] clamav-milter on debian. How to run supervised?

2004-09-16 Thread Stephen Gran
On Thu, Sep 16, 2004 at 09:41:06PM +1000, Robert S said: > I have recently installed woody with clamav-daemon and clamav-milter. I see > that the /etc/init.d/clamav-milter has the following at the start of the > startup script: > > SUPERVISOR=/usr/bin/daemon > SUPERVISORPIDFILE="/var/run/clamav/d

[Clamav-users] CLAM AV ERROR

2004-09-16 Thread Shajan D Kay
Hi - I get the following error when I try to update CLAMAV via freshclam. . . .should I pay attention to this? I am wondering if the software is even being updated. [EMAIL PROTECTED] name]# freshclam Checking for new database - started at Thu Sep 16 10:25:34 2004 Connecting to www.mat.uni.tor

[Clamav-users] Clamav and pictures

2004-09-16 Thread Vladimir Potapov
Every day I have received about 30 email's with pictures which have strange names( for example sevwqwso.gif, iwhfetsn.gif, qfwecqtf.jpg) and nonexistent's senders ([EMAIL PROTECTED], [EMAIL PROTECTED]). Clamav don't find any viruses in this email's . Can Clamav find viruses in pictures? --

Re: [Clamav-users] freshclam - clamd notity

2004-09-16 Thread Thomas Lamy
Jürgen Walch wrote: Hi there, we are running clamd in combination with clamdscan to scan incoming mails for viruses on smtp level with courier-mta here. Works fine. The signature files are updated using freshclam started via crontab. The crontab entry used is --8<-- # # clamav # 23 1,9,17 * * * roo

Re: [Clamav-users] Clamav and pictures

2004-09-16 Thread Nigel Horne
On Thursday 16 Sep 2004 16:51, Vladimir Potapov wrote: > Every day I have received about 30 email's with pictures which have strange > names( for example sevwqwso.gif, iwhfetsn.gif, qfwecqtf.jpg) and > nonexistent's senders ([EMAIL PROTECTED], [EMAIL PROTECTED]). Clamav don't > find any viruses i

Re: [Clamav-users] Clamav and pictures

2004-09-16 Thread Timo Schöler
Every day I have received about 30 email's with pictures which have strange names( for example sevwqwso.gif, iwhfetsn.gif, qfwecqtf.jpg) and nonexistent's senders ([EMAIL PROTECTED], [EMAIL PROTECTED]). Clamav don't find any viruses in this email's . Can Clamav find viruses in pictures? It is p

Re: [Clamav-users] Clamav and pictures

2004-09-16 Thread Jeremy Kitchen
On Thursday 16 September 2004 12:56 pm, Nigel Horne wrote: > On Thursday 16 Sep 2004 16:51, Vladimir Potapov wrote: > > Every day I have received about 30 email's with pictures which have > > strange names( for example sevwqwso.gif, iwhfetsn.gif, qfwecqtf.jpg) and > > nonexistent's senders ([EMAIL

Re: [Clamav-users] Clamav and pictures

2004-09-16 Thread Kelson
Vladimir Potapov wrote: Every day I have received about 30 email's with pictures which have strange names( for example sevwqwso.gif, iwhfetsn.gif, qfwecqtf.jpg) and nonexistent's senders ([EMAIL PROTECTED], [EMAIL PROTECTED]). Clamav don't find any viruses in this email's . Are you sure it's not

[Clamav-users] How to use clamav-milter with sendmail???

2004-09-16 Thread Ken Morley
I have a mail server that I've equipped with ClamAV 0.751, sendmail & RH Linux 7. I would like to get sendmail to discard any messages/attachments that ClamAV determines are infected. I read the ClamAV documentation pdf and installed ClamAV, clamd, freshclam & clamav-milter as instructed therein.

Re: [Clamav-users] Clamav and pictures

2004-09-16 Thread Graham Toal
> Every day I have received about 30 email's with pictures which have strange > names( for example sevwqwso.gif, iwhfetsn.gif, qfwecqtf.jpg) and > nonexistent's senders ([EMAIL PROTECTED], [EMAIL PROTECTED]). Clamav don't > find any viruses in this email's . > Can Clamav find viruses in pictures?

Re: [Clamav-users] How to use clamav-milter with sendmail???

2004-09-16 Thread Todd Lyons
Ken Morley wanted us to know: >I have a mail server that I've equipped with ClamAV 0.751, sendmail & RH >Linux 7. I would like to get sendmail to discard any messages/attachments >that ClamAV determines are infected. That's a function of the clamav-milter. Here's how I start it on my Gentoo box

Re: [Clamav-users] Clamav and pictures

2004-09-16 Thread Paul Bijnens
Jeremy Kitchen wrote: On a side note, a buddy of mine once showed me a company that "guaranteed" that when a user opened an email from them, it was tracked, when in actuality it was no new fangled technology, it was the same old 1x1 transparent gif image cgi script bullshit :) See: www.confirm

Re: [Clamav-users] Clamav and pictures

2004-09-16 Thread Niek
On 9/16/2004 5:51 PM +0200, Vladimir Potapov wrote: Every day I have received about 30 email's with pictures which have strange names( for example sevwqwso.gif, iwhfetsn.gif, qfwecqtf.jpg) and nonexistent's senders ([EMAIL PROTECTED], [EMAIL PROTECTED]). Clamav don't find any viruses in this emai

[Clamav-users] JPEG vulnerability

2004-09-16 Thread Kevin Spicer
I guess everyones heard about the jpeg vulnerability in certain Microsoft products? CERT have put out an advisory, and it is being ranked as critical. Now I know that strictly speaking this isn't a virus, its a vulnerability - but there have been, in the past, signatures added for some exploits

[Clamav-users] Re: clamav-milter on debian. How to run supervised?

2004-09-16 Thread Robert S
>Also make sure you have FixStaleSocket set in clamav.conf - it should be >by default. Let me know if you have problems after doing this - I don't >run it that wat myself, all the work was done for someone who did want >to run it under daemon. Since I haven't gotten a bug report from them >recent

Re: [Clamav-users] JPEG vulnerability

2004-09-16 Thread Kevin Spicer
On Thu, 2004-09-16 at 22:24, Kevin Spicer wrote: > It looks like there are two possible four byte sequences that can > trigger the exploit. I guess this is probably too small to avoid an > unacceptable level of false positives(?) Presumably this could be > combined with the 'magic' numbers for jp

Re: [Clamav-users] JPEG vulnerability

2004-09-16 Thread Tomasz Kojm
On Thu, 16 Sep 2004 22:58:54 +0100 Kevin Spicer <[EMAIL PROTECTED]> wrote: > On Thu, 2004-09-16 at 22:24, Kevin Spicer wrote: > > It looks like there are two possible four byte sequences that can > > trigger the exploit. I guess this is probably too small to avoid an > > unacceptable level of fal

Re: [Clamav-users] illegal instruction (NEW)

2004-09-16 Thread Tomasz Kojm
On Thu, 16 Sep 2004 16:13:18 +0200 Marek Florianczyk <[EMAIL PROTECTED]> wrote: > Any advice, maybe recompile some system libraries, but which one? > And maybe some signatures in main.cvd is fatal for old libraries ( > freshclam crash when downloading main.cvd and clamd crash when reading > main.

Re: [Clamav-users] illegal instruction (NEW)

2004-09-16 Thread James Lick
Marek Florianczyk wrote: But when I run freshclam it tries to download main.cvd and fails after few seconds with: "Illegal Instructions" When I get main.cvd and daily.cvd from other servers ( with an old architecture ) clamd doesn't start at all. By default, libgmp tries to compile itself for t