[Clamav-users] ClamAV 0.80 on FreeBSD, Milter Issues.

2005-01-18 Thread Ed Stover
A little history for you, I have run clamav up till the .7x line died and the StreamSaveToDisk option has always been there. But for some odd reason it is excluded from the configuration files that I have seen both by building clamav0.80 from sources and from FreeBSD ports. It escapes me why it isn

Re: [Clamav-users] ClamAV 0.80 on FreeBSD, Milter Issues.

2005-01-18 Thread Ed Stover
Oh, and the tutorial that was recommended on this list a couple of weeks back is wrong. It calls for StreamSaveToDisk option on clam version 0.80. http://www.technoids.org/clamav-milter.html The change log for clamav 0.80 says "Mon Sep 20 10:09:55 BST 2004 (njh) --

Re: [Clamav-users] ClamAV 0.80 on FreeBSD, Milter Issues.

2005-01-18 Thread Odhiambo Washington
* Ed Stover <[EMAIL PROTECTED]> [20050118 15:32]: wrote: > A little history for you, I have run clamav up till the .7x line died > and the StreamSaveToDisk option has always been there. But for some odd > reason it is excluded from the configuration files that I have seen bot

Re: [Clamav-users] ClamAV 0.80 on FreeBSD, Milter Issues.

2005-01-18 Thread Odhiambo Washington
* Ed Stover <[EMAIL PROTECTED]> [20050118 16:03]: wrote: > Oh, and the tutorial that was recommended on this list a couple of weeks > back is wrong. It calls for StreamSaveToDisk option on clam version > 0.80. http://www.technoids.org/clamav-milter.html HOWTOs are likely to ru

Re: [Clamav-users] ClamAV 0.80 on FreeBSD, Milter Issues.

2005-01-18 Thread Ed Stover
Yay!, clamav-milter is semi-working, it was a PEBCAK error. Whats weird is, now that it is running it marks every piece of mail that passes through it as clean even dirty mail (more tinkering should take care of it). Thanks clamav people, your all gooder. And yes I know that online material has a

[Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
Hello! I'm running clamav-milter, clamd, and sendmail on CentOS 3.3 (RHEL3). I'm trying to verify that my milter works. I've sent test emails from testvirus.org but they don't appear to be getting flagged. I don't see anything in the logs to indicate they were. Is there a sure-fire way to know? Als

[Clamav-users] mails not getting scanned

2005-01-18 Thread Torsten Bauer
hi,   i'm running clamv 0.80 on a suse 8.2 box. i can scan locally files and viruses are noticed.. the problem i have is that an incoming mail with a test virus attached (the clam.exe out of the test dir) is not flagged as a virus.   i tried it with ClamAV plugin for spamassassin or iwth clamassa

Re: [Clamav-users] mails not getting scanned

2005-01-18 Thread Gian Carlo
On Tue, Jan 18, 2005 at 05:14:33PM +0100, Torsten Bauer wrote: > > > > [...] > any idea what is going wrong? Yes, I suspect it has something to do with the format of your message... :-/ Bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listi

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Nigel Horne
On Tuesday 18 Jan 2005 14:50, Joe Polk wrote: > Hello! > I'm running clamav-milter, clamd, and sendmail on CentOS 3.3 (RHEL3). I'm > trying to verify that my milter works. I've sent test emails from > testvirus.org but they don't appear to be getting flagged. I don't see > anything in the logs to i

Re: [Clamav-users] Writing a clamd client library

2005-01-18 Thread Todd Lyons
Phil Endecott wanted us to know: >IMO, blacklists are crap, don't use them. There are better ways to >avoid spam. Those of us in operational contexts who block 60%+ of inbound mail for being spam would beg to differ with you. Known spam supporting operations should be spanked for allowing massi

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
Thanks, Nigel. Here's the info! > What version of clamav-milter? (clamav-milter --version) ClamAV version 0.80, clamav-milter version 0.80j > Have you started clamav-milter? (ps -ef | fgrep clam) clamav4972 1 0 11:05 ?00:00:00 clamd clamav4997 1 0 11:05 ?

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
Nigel, I also installed sendmail-devel which apparently installs libmilter. I realized I was missing this at some point. -- <> -- Original Message --- From: "Joe Polk" <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tue, 18 Jan 2005 15:35:38 -0400 Subject: Re: [Clamav-users] clama

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Nigel Horne
On Tue, 2005-01-18 at 19:35, Joe Polk wrote: > Thanks, Nigel. Here's the info! > > > What version of clamav-milter? (clamav-milter --version) > ClamAV version 0.80, clamav-milter version 0.80j > > > Have you started clamav-milter? (ps -ef | fgrep clam) > clamav4972 1 0 11:05 ?

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
Okay, cool! I made the changes to sendmail and /etc/sysconfig/clamav-milter. I restarted both. What can I look for specifically in the logs to help me know what's happening? -- <> -- Original Message --- From: Nigel Horne <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tue, 18 Ja

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Nigel Horne
On Tue, 2005-01-18 at 20:11, Joe Polk wrote: > Okay, cool! > I made the changes to sendmail and /etc/sysconfig/clamav-milter. I restarted > both. What can I look for specifically in the logs to help me know what's > happening? Look in /var/log/maillog, you should see things going on. Look in the

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
I'm seeing this in the maillog: Jan 18 15:12:10 mail sendmail[6612]: j0IKCADB006612: Milter (clmilter): local socket name /var/run/clamav/clmilter.sock unsafe Jan 18 15:12:10 mail sendmail[6612]: j0IKCADB006612: Milter (clmilter): to error state -- <> -- Original Message --- Fro

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Nigel Horne
On Tue, 2005-01-18 at 20:41, Joe Polk wrote: > I'm seeing this in the maillog: > Jan 18 15:12:10 mail sendmail[6612]: j0IKCADB006612: Milter (clmilter): local > socket name /var/run/clamav/clmilter.sock unsafe > Jan 18 15:12:10 mail sendmail[6612]: j0IKCADB006612: Milter (clmilter): to > error stat

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
After. I see a ton of them in there but they stop mysteriously at 16:22:44. -- <> -- Original Message --- From: Nigel Horne <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tue, 18 Jan 2005 20:51:59 + Subject: Re: [Clamav-users] clamav-milter verification > On Tue, 2005-01-1

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Nigel Horne
On Tue, 2005-01-18 at 21:32, Joe Polk wrote: > After. I see a ton of them in there but they stop mysteriously at > 16:22:44. What happened at 16:22? What is the output of "ls -ld /var/run/clamav"? > > > -- > <> > > > -- Original Message --- > From: Nigel Horne <[EMAIL PROTEC

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
[EMAIL PROTECTED] clamav]# ls -ld /var/run/clamav/ drwxr-xr-x2 clamav clamav 4096 Jan 18 15:09 /var/run/clamav/ I got another one of those errors at 16:33. I think I get these when clamav-milter is invoked. I sent myself 2 testviruses and I think that triggered the last one maybe. --

RE: [Clamav-users] clamav-milter verification

2005-01-18 Thread itnews
Hello, Don't know if I could help, but I think I recall this error from the permissions on the directory the file is in, or the permissions on the file itself. I had this months ago when I was first setting up too. Directory Permission: drwxr-xr-x2 clamav clamav 4096 Dec 7 12:26 clam

RE: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
Directory perms match. Here's the other: -rw-rw1 clamav clamav 4 Jan 18 11:05 clamd.pid srwxrwxrwx1 clamav clamav 0 Jan 18 11:05 clamd.sock srwx--1 clamav clamav 0 Jan 18 15:09 clmilter.socket Should I be running freshclam as a daemon? There app

RE: [Clamav-users] clamav-milter verification

2005-01-18 Thread Nigel Horne
On Tue, 2005-01-18 at 22:05, Joe Polk wrote: > Directory perms match. Here's the other: > -rw-rw1 clamav clamav 4 Jan 18 11:05 clamd.pid > srwxrwxrwx1 clamav clamav 0 Jan 18 11:05 clamd.sock I wouldn't have a publicly writable clamd.sock if I were you. > srwx

RE: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
I don't think I chmod'd it this way. I will correct it. Any ideas on the error? -- <> -- Original Message --- From: Nigel Horne <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tue, 18 Jan 2005 22:14:35 + Subject: RE: [Clamav-users] clamav-milter verification > On Tue, 2005-0

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Brian Morrison
On Tue, 18 Jan 2005 22:14:35 + in [EMAIL PROTECTED] Nigel Horne <[EMAIL PROTECTED]> wrote: > On Tue, 2005-01-18 at 22:05, Joe Polk wrote: > > Directory perms match. Here's the other: > > -rw-rw1 clamav clamav 4 Jan 18 11:05 clamd.pid > > srwxrwxrwx1 clamav clamav

Re: [Clamav-users] clamav-milter verification

2005-01-18 Thread Joe Polk
Grepping "milter" in maillog produces pretty-much nothing but these errors. The thing is, the perms on the clmilter.sock are: srwx--1 clamav clamav 0 Jan 18 15:09 clmilter.socket So only clamav has any rights on that file. Jan 18 17:27:40 mail sendmail[7717]: j0IMRdv7007717: Mil

[Clamav-users] RFC: squidclam

2005-01-18 Thread Daniel Lord
Hello Kristof, On Tue, Jan 18, 2005 at 07:18:45PM +0100, Kri??tof Petr wrote: > Im trying your squidclam, but it is not working. > > b

Re: [Clamav-users] RFC: squidclam

2005-01-18 Thread Tomasz Kojm
On Wed, 19 Jan 2005 00:19:59 +0100 Daniel Lord <[EMAIL PROTECTED]> wrote: > I'll have a look at why clamlib doesn't detect you test file. > If I use clamscan it's found. Fix archive limits. Currently you're using: limits.maxfiles = 2; /* max files */ .. limits.maxreclevel = 2; /* ma

Re: [Clamav-users] **FIXED**clamav-milter verification

2005-01-18 Thread Joe Polk
Okay, so someone pointed out that in my sendmail.mc I had the socket referenced as clmilter.sock but the actual filename is clmilter.socket. Fixed that, m4, restart sendmail and WOO-HOO! Thanks for all of your help! -- <> -- Original Message --- From: "Joe Polk" <[EMAIL PROTECTE

Re: [Clamav-users] RFC: squidclam

2005-01-18 Thread Daniel Lord
Hi Tomasz, Kristof, On Wed, Jan 19, 2005 at 12:36:54AM +0100, Tomasz Kojm wrote: > On Wed, 19 Jan 2005 00:19:59 +0100 > Daniel Lord <[EMAIL PROTECTED]> wrote: > > > I'll have a look at why clamlib doesn't detect you test file. > > If I use clamscan it's found. sorry blamed libclam too fast :\ it

Re: [Clamav-users] gfi.com iframe tests

2005-01-18 Thread Kev
> Hi, > > at http://www.gfi.com/emailsecuritytest/ you can submit your mailserver > to some testing to see if it catches all viruses/exploits being sent to > it. Now there seem to be 2 exploits that are not catched by clamav: > "ActiveX vulnerability test" and "Iframe remote vumnerability test".

Re: [Clamav-users] mails not getting scanned

2005-01-18 Thread James Lick
Torsten Bauer wrote: i'm running clamv 0.80 on a suse 8.2 box. i can scan locally files and viruses are noticed.. the problem i have is that an incoming mail with a test virus attached (the clam.exe out of the test dir) is not flagged as a virus. There is a bug in 0.80 that clam.exe will ofte

Re: [Clamav-users] mails not getting scanned

2005-01-18 Thread Torsten Bauer
James Lick wrote on 19.01.2005, 07:48: > Torsten Bauer wrote: > > > > > i'm running clamv 0.80 on a suse 8.2 box. i can scan locally files and > > viruses are noticed.. the problem i have is that an incoming mail with > > a test virus attached (the clam.exe out of the test dir) is not > > fla