Re: [Clamav-users] WARNING: DNS record is older than 3 hours

2004-12-06 Thread Brian Morrison
On Mon, 6 Dec 2004 11:55:05 +0600 in [EMAIL PROTECTED] "Prasad" <[EMAIL PROTECTED]> wrote: >WARNING: DNS record is older than 3 hours. > WARNING: Invalid DNS reply. > Pl. help me if somebody knows that. It's a warning that the DNS lookup didn't work, fresh

RE: [Clamav-users] clamd segfaults

2004-12-06 Thread Nigel Horne
Try as I might I cannot reproduce your problem. Please send me a copy of the mail which reproduces the error when you scan it. -Nigel Horne > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Bernhard > Erdmann > Sent: 06 December 2004 05:51 > To: ClamAV u

Re: [Clamav-users] clamd segfaults

2004-12-06 Thread Nigel Horne
On Mon, 2004-12-06 at 07:25 +0100, Bernhard Erdmann wrote: > > I should have said that you will need to do this with the > > current version from CVS - my mistake! > > Here's another segfault using clamd-devel: I can't understand this, unless your clamd-devel is not the latest. > #0 parseMime

RE: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-06 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Jeremy > Kitchen > Sent: Friday, December 03, 2004 11:51 AM > To: ClamAV users ML > Subject: Re: [Clamav-users] RE: Re: This is how I use ClamAV > > > On Friday 03 December 2004 09:44 am, Kiril Todorov wr

RE: [Clamav-users] Re: This is how I use ClamAV

2004-12-06 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Matias Lopez > Bergero > Sent: Friday, December 03, 2004 2:40 PM > > > > We use Sendmail 8.13.0 (since 8.12.11) + Clamav-milter + Clamd. > > No quarantine, no postmaster/sender/recipient notice, just > reje

Re: [Clamav-users] Quarantining infected mails

2004-12-06 Thread Søren Schimkat
Thanks .. that was just what I needed. Sergey wrote: On Friday 03 December 2004 12:01, Søren Schimkat wrote: Im using Clamav with sendmail, and i've chosen to quarantine infected mail. My question is - what can I do with the files / emails that has been quarantined? Could they be resend someho

Re: [Clamav-users] Quarantining infected mails

2004-12-06 Thread Krištof Petr
Søren Schimkat wrote: Thanks .. that was just what I needed. Sergey wrote: On Friday 03 December 2004 12:01, Søren Schimkat wrote: Im using Clamav with sendmail, and i've chosen to quarantine infected mail. My question is - what can I do with the files / emails that has been quarantined? Could

Re: [Clamav-users] Re: clamav-milter not doing anything. . .

2004-12-06 Thread Tomasz Kojm
On Mon, 6 Dec 2004 09:57:24 +0700 (WIT) [EMAIL PROTECTED] wrote: > > I send myself an easy email virus [one of the bagel variants] as an > > attachment, and voila! clamav doesn't catch it. > > And when i move it from inbox to another mail folder > (/var/spool/mail/christopher to /home/christopher

Re: [Clamav-users] Not catching all viruses

2004-12-06 Thread Owen
> I use Clam AV on a linux server to scan all incoming email. The email is > then passed on to my Exchange server which also scans all emails for > viruses using Panda AV. >The problem is that every day I get a lot of emails getting through the >clam scanning and then the viruses are picked up on t

Re: [Clamav-users] Not catching all viruses

2004-12-06 Thread Tomasz Kojm
On Tue, 7 Dec 2004 03:52:51 +1000 "Owen" <[EMAIL PROTECTED]> wrote: > As you haven't stated how you call clamav I'm not sure if it's > relevant, but I used to have the same problem. > I run on a windows box and call clamscan (not clamdscan) on each > email. If I didn't use the --mbox option those

[Clamav-users] Help installing ClamAV and ClamAV-milter

2004-12-06 Thread Luis Vargas
Hi guys, I'm way too lost in the installation process of ClamAV and ClamAV-milter. I've downloaded ClamAV 0.80 and ClamAV-milter 0.80 in RPM packages; iv'e been told to read on the clamav-milter/INSTALL file to know how to install both packages and get it fine tuned with OpenWebmail. I'm lost.

Re: [Clamav-users] /root/clamav-0.80: Access denied. ERROR while testing clamav

2004-12-06 Thread Todd Lyons
Brian Morrison wanted us to know: >If you do ls -l in /tmp you'll be able to see the socket if it exists. >And check the permissions on /tmp from /, it needs to be 666 I think. Most people use mode 1777 for /tmp directory. -- Regards... Todd OS X: We've been fighting the "It's a mac

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-06 Thread Todd Lyons
Sasa Stupar wanted us to know: >Guys, how do you make this stats? I am running Sendmail 8.13.1 on FC3 >with clamav-milter. Is there some settings on sendmail or Clamav? cat /var/log/clamav/clamd.log | showviruses.pl The showviruses.pl is attached to this email. It's very very simple, no error c

Re: [Clamav-users] clamd segfaults

2004-12-06 Thread Bernhard Erdmann
#0 parseMimeHeader (m=0x84b0ba0, cmd=0x85356ae "; name=\"/usr/local/apache/htdocs/ftp/www.pressedienst.saarland.de/prd/anhaenge/anhang_6781.pdf\"", rfc821Table=0x84aa5c8, arg=0x0) at string2.h:1092 #1 0x4002faac in parseEmailHeader (m=0x84b0ba0, line=0x85356a0 "Content-Type", rfc821

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-06 Thread Sasa Stupar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Todd Lyons wrote: | Sasa Stupar wanted us to know: | | |>Guys, how do you make this stats? I am running Sendmail 8.13.1 on FC3 |>with clamav-milter. Is there some settings on sendmail or Clamav? | | | cat /var/log/clamav/clamd.log | showviruses.pl | | T

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-06 Thread Matías López Bergero
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sasa Stupar wrote: | Todd Lyons wrote: | | Sasa Stupar wanted us to know: | | | | | |>Guys, how do you make this stats? I am running Sendmail 8.13.1 on FC3 | |>with clamav-milter. Is there some settings on sendmail or Clamav? | | | | | | cat /var/log/cl

[Clamav-users] How to recover quarantine virus email

2004-12-06 Thread Amir Prync
Hello, my question is simple and i hope someone can tell me the answer :). I have my postfix with amavis-new. The problem that i have is that one of the email went to the /var/virusmail folder that is the one configured for quarantine virus emails. Im sure that the email is 100 % secure so i want

Re: [Clamav-users] clamd segfaults

2004-12-06 Thread Bernhard Erdmann
#0 parseMimeHeader (m=0x84b0ba0, cmd=0x85356ae "; name=\"/usr/local/apache/htdocs/ftp/www.pressedienst.saarland.de/prd/anhaenge/anhang_6781.pdf\"", rfc821Table=0x84aa5c8, arg=0x0) at string2.h:1092 #1 0x4002faac in parseEmailHeader (m=0x84b0ba0, line=0x85356a0 "Content-Type", rfc821

Re: [Clamav-users] clamd segfaults

2004-12-06 Thread Bernhard Erdmann
Nigel Horne wrote: Try as I might I cannot reproduce your problem. Please send me a copy of the mail which reproduces the error when you scan it. Don't know how to get a copy. The mail is scanned before accepting it. smime.p7s Description: S/MIME Cryptographic Signature __

[Clamav-users] Testing clamd

2004-12-06 Thread Dale Walsh
I've got clamd running on TCPAddr 127.0.0.1 and TCPSocket 3310 as a requirement and I need to test it by sending something to it and checking for some kind of response, the docs that came with ClamAV offer no help. -- Dale ___ http://lists.clamav.net/

Re: [Clamav-users] Testing clamd

2004-12-06 Thread Tomasz Kojm
On Mon, 6 Dec 2004 15:42:38 -0500 Dale Walsh <[EMAIL PROTECTED]> wrote: > I've got clamd running on TCPAddr 127.0.0.1 and TCPSocket 3310 as a > requirement and I need to test it by sending something to it and > checking for some kind of response, the docs that came with ClamAV > offer no help.

Re: [Clamav-users] Testing clamd

2004-12-06 Thread Amir Prync
Try with http://www.testvirus.org/ You´ll be able to test you antivirus. Good Luck On Mon, 6 Dec 2004 21:44:30 +0100, Tomasz Kojm <[EMAIL PROTECTED]> wrote: > On Mon, 6 Dec 2004 15:42:38 -0500 > Dale Walsh <[EMAIL PROTECTED]> wrote: > > > I've got clamd running on TCPAddr 127.0.0.1 and TCPSocke

Re: [Clamav-users] /root/clamav-0.80: Access denied. ERROR while testing clamav

2004-12-06 Thread Brian Morrison
On Mon, 6 Dec 2004 10:50:21 -0800 in [EMAIL PROTECTED] Todd Lyons <[EMAIL PROTECTED]> wrote: > Brian Morrison wanted us to know: > > >If you do ls -l in /tmp you'll be able to see the socket if it > >exists. And check the permissions on /tmp from /, it needs to be 666 > >I think. > > Most people

Re: [Clamav-users] /root/clamav-0.80: Access denied. ERROR while testing clamav

2004-12-06 Thread Tomasz Kojm
On Mon, 6 Dec 2004 22:05:24 + Brian Morrison <[EMAIL PROTECTED]> wrote: > On Mon, 6 Dec 2004 10:50:21 -0800 in [EMAIL PROTECTED] > Todd Lyons <[EMAIL PROTECTED]> wrote: > > > Brian Morrison wanted us to know: > > > > >If you do ls -l in /tmp you'll be able to see the socket if it > > >exists

Re: [Clamav-users] /root/clamav-0.80: Access denied. ERROR while testing clamav

2004-12-06 Thread Brian Morrison
On Mon, 6 Dec 2004 23:13:15 +0100 in [EMAIL PROTECTED] Tomasz Kojm <[EMAIL PROTECTED]> wrote: > > Fair enough, I meant to say _at least_ 666 > > a) 666 wouldn't allow to enter the directory > b) 777 would allow all users to remove files owned by others > > Only 1777 is proper for _public

Re: [Clamav-users] OpenBSD 3.6 (and others?) build problem

2004-12-06 Thread C. Bensend
>> Could someone offer me some assistance so I can find out where this is >> breaking for me? I use the unofficial port, and it works great. I had to do some pthread and lib fiddling to get it to build natively on my 3.6 machines. Benny -- "... i want to be a farting burping maniac."

Re: [Clamav-users] OpenBSD 3.6 (and others?) build problem

2004-12-06 Thread ed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 6 Dec 2004 16:59:37 -0600 (CST) "C. Bensend" <[EMAIL PROTECTED]> wrote: > I use the unofficial port, and it works great. > > I had to do some pthread and lib fiddling to get it to build nativel

Re: [Clamav-users] RE: Re: This is how I use ClamAV

2004-12-06 Thread Jan Pieter Cornet
On Fri, Dec 03, 2004 at 02:54:44PM -0800, Todd Lyons wrote: > Jan Pieter Cornet wanted us to know: > >What I find really odd is your complete lack of Worm.Sober-I. Our stats for > >Thu Dec 2: > > Good point. I had totally missed that too. > > >Top-5: > >W32/Sober-I : 1078544 > >W32/Netsk

Re: [Clamav-users] OpenBSD 3.6 (and others?) build problem

2004-12-06 Thread Todd Lyons
ed wanted us to know: >Can you state what you did in both cases, I had to modify the headers to >get past curl include.. but that didn't get me a build. There are some environment variable that you can set to specify arguments to gcc, such as additional include paths and additional library paths.

Re: [Clamav-users] Testing clamd [SOLVED]

2004-12-06 Thread Dale Walsh
Well I found a solution using telnet 127.0.0.1 3310 (STREAM) to get the actual communication port, and in issuing a telnet 127.0.0.1 (paste data followed by the required EOF) and it appears to work. -- Dale On Dec 06, 2004, at 15:44, Tomasz Kojm wrote: On Mon, 6 Dec 2004 15:42:38 -0500 Dale Wals

Re: [Clamav-users] OpenBSD 3.6 (and others?) build problem

2004-12-06 Thread C. Bensend
> There are some environment variable that you can set to specify > arguments to gcc, such as additional include paths and additional > library paths. Something like: > CFLAGS="-I/usr/local/include -L/usr/local/lib" > > I don't often have to specify them, so I can't remember exactly what > they

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

2004-12-06 Thread Rishi
> We (the users) don't want your signature. We want you to submit an > infected file, so the maintainers can develop a signature. The reason > is simple: we don't trust you. It would be too easy for a malicious > person to contribute a signature that would cause false positives. > > Damian Mens

Re: [Clamav-users] Testing clamd [SOLVED]

2004-12-06 Thread Dennis Peterson
Dale Walsh wrote: Well I found a solution using telnet 127.0.0.1 3310 (STREAM) to get the actual communication port, and in issuing a telnet 127.0.0.1 (paste data followed by the required EOF) and it appears to work. -- Dale Telnet to that port and type in: SCAN (or RAWSCAN) /path_to_file_or_dir