On Thursday 17 Mar 2005 02:54, Daniel Suen wrote:
> Dear All,
>
> Is there any way of discarding infected message with clamav-milter in
> version 0.83?
What options are you currently giving? What do you mean by "discarding"?
Do you mean stop quarantining, stop forwarding to someone?
>
> Best,
hai
Does any one know how to filter mails using clamAV milter using with sendmail
I don't want to use spamassassin it will only mark as junk I don't want to send
it to users i want to move it to a perticular mail box
thanks
On Wed, 16 Mar 2005 22:12:57 -0800, Ed Kasky <[EMAIL PROTECTED]> wrote:
On Thursday 17 Mar 2005 09:06, Jijos wrote:
> Does any one know how to filter mails using clamAV milter using with sendmail
> I don't want to use spamassassin it will only mark as junk I don't want to
> send
> it to users i want to move it to a perticular mail box
spamass-milter
> thanks
--
N
Jijos a écrit :
> hai
>
> Does any one know how to filter mails using clamAV milter using with sendmail
> I don't want to use spamassassin it will only mark as junk I don't want to
> send
> it to users i want to move it to a perticular mail box
Hi.
ClamAV is not an antispam solution but an anti
Hi,
I am trying to use clamav with sendmail in FC-3. I heard that sendmail in FC-3
is
precompiled with milter. Using the command: sendmail -d0.1 bv root also
confirms that
sendmail is complied with milter support.
Also, while installing clamav-0.83.tar.gz with the following option:
./config
This is all covered in .../clamav-milter/INSTALL.
You have not installed sendmail-devel.rpm as instructed
in that document.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Nabin Limbu
> Sent: 17 March 2005 10:54
> To: clamav-users@lists.clamav.net
> Sub
Nabin Limbu wrote:
Hi,
I am trying to use clamav with sendmail in FC-3. I heard that sendmail in FC-3 is
precompiled with milter. Using the command: sendmail -d0.1 bv root also confirms that
sendmail is complied with milter support.
Also, while installing clamav-0.83.tar.gz with the following o
hi,
Version of Clamav 0.83/764 with HP-UX 11.11.
PROBLEM
When i try to scan "tar" archives this is the message:
hpux11# /opt/clamav/bin/clamscan -r -v --debug --leave-temps aa.tar
LibClamAV debug: Loading databases from /opt/clamav/share/clamav
LibClamAV debug: Loading /opt/clamav/share/clamav/ma
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Nigel Horne
> Sent: donderdag 17 maart 2005 9:51
> To: ClamAV users ML
> Subject: Re: [Clamav-users] clamAV 0.83 milter discard
> infected message...
>
>
> On Thursday 17 Mar 2005 02:54, Daniel S
Hello,
this is my first post here so be gentle...
Clamscan does not find some attachments in some types of mail.
Most attachments are, but not all. This have me somewhat concerned,
since the receiving email client will not be as ignorant :(
Seems like it is related to how a buggy(?), attached jp
On Mar 17, 2005, at 05:48, Administrator wrote:
hi,
Version of Clamav 0.83/764 with HP-UX 11.11.
PROBLEM
When i try to scan "tar" archives this is the message:
hpux11# /opt/clamav/bin/clamscan -r -v --debug --leave-temps aa.tar
LibClamAV debug: Loading databases from /opt/clamav/share/clamav
LibCla
> LibClamAV Error: Can't create temporary file : No such file or directory
Define NAME_MAX, since it is not in sys/param.h.
I.e.
#define NAME_MAX 255
//Daniel
___
http://lurker.clamav.net/list/clamav-users.html
Hi,
What is the difference between using clamd only and clamd + clamav-milter with
mailserver. What additional benefits do we get while using clamav-milter.
Regards
Nabin Limbu
___
http://lurker.clamav.net/list/clamav-users.html
Hi,
Before to run ./configure and make i have tested the parameter with "getconf
NAME_MAX /var" and the result was 255.
Now, with the new define in sys/param.h the clamscan command function
correctly and libclamav does not return any error.
Thanks for your help.
//Alberto
>
>--
>From: [EM
LibClamAV Warning: Ignoring empty field in " charset="
> > When trying to scan some messages in my quarantine directory, i
> am getting
> > the following output:
> >
> > LibClamAV Warning: Ignoring empty field in " charset="
>
> > Anyone have any ideas what might be causing this?
>
> Virus writers
> Hi,
>
> What is the difference between using clamd only and clamd + clamav-milter
> with
> mailserver. What additional benefits do we get while using clamav-milter.
>
Clamav-milter is a "milter" interface for sendmail. Although not the only
way to interface clam with a host running sendmail, it
Dale Walsh said:
> I'm wondering if someone can help me, I've got an application that
> copies files, what I'd like to do is utilize the clamd daemon to scan
> the file if the daemon is running.
Probably 90% of what you need is already in clamdwatch so with it as a
starting point and with a little
hi,
Version of Clamav 0.83/764 with HP-UX 11.11.
when i try to scan a sendmail spool directory /var/spool/mqueue that
contains mail infected by EICAR test virus and others virus Clamscan does
not find any attachments and viruses.
Virus attachments is identified with another virus-scanner like eTru
Jijos said:
> hai
>
> Does any one know how to filter mails using clamAV milter using with
> sendmail
> I don't want to use spamassassin it will only mark as junk I don't want to
> send
> it to users i want to move it to a perticular mail box
>
> thanks
J-chkmail and probably spamassassin will do
hai
Does any one know how to filter mails using clamAV milter using with
sendmail
I don't want to use spamassassin it will only mark as junk I don't want to
send
it to users i want to move it to a perticular mail box
thanks
This is rather simple with spamassassin err I should say spamassassin
Nabin Limbu said:
> Hi,
>
> What is the difference between using clamd only and clamd + clamav-milter
> with
> mailserver. What additional benefits do we get while using clamav-milter.
>
> Regards
> Nabin Limbu
The milter is the component that communicates with both the smtp server
and the clamav
Dennis Peterson wrote:
> It is frequently most efficient to test for spam content prior to scanning
> for viruses - there is no point in virus scanning a file if it has
> failed a spam content test. That's more than you asked but not bad to
> know.
The reverse is also true. There is no point in
[EMAIL PROTECTED] wanted us to know:
>Dennis Peterson wrote:
>> It is frequently most efficient to test for spam content prior to scanning
>> for viruses - there is no point in virus scanning a file if it has
>> failed a spam content test. That's more than you asked but not bad to
>> know.
>The r
>>hai
>>
>>Does any one know how to filter mails using clamAV milter using with
>>sendmail
>>I don't want to use spamassassin it will only mark as junk I don't want to
>>send
>>it to users i want to move it to a perticular mail box
>>
>>thanks
>>
>>
Look at the following document on integrati
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Administrator
> Sent: donderdag 17 maart 2005 17:31
> To: 'clamav-users@lists.clamav.net'
> Subject: [Clamav-users] Virus not identified in /var/spool/mqueue
>
>
> hi,
> Version of Clamav 0.83/764
[EMAIL PROTECTED] said:
> Dennis Peterson wrote:
>> It is frequently most efficient to test for spam content prior to
>> scanning
>> for viruses - there is no point in virus scanning a file if it has
>> failed a spam content test. That's more than you asked but not bad to
>> know.
>
> The reverse i
Howdy-
Now that > a week has gone by with absolutely no problems with our
clamd hanging, I thought I would write in to provide the good news that
I think we have this problem licked. Though we also rev'd exim on Wed,
I think it was the upgrade for 0.83 to devel-20050308 that solved our
probl
Received signal 14, wake up
ClamAV update process started at Thu Mar 17 17:44:40 2005
main.cvd is up to date (version: 30, sigs: 31086, f-level: 4,
builder: tkojm)
daily.cvd updated (version: 767, sigs: 562, f-level: 4, builder: diego)
Database updated (31648 signatures) from
db.gb.clamav.net(IP:6
Dale Walsh said:
>
> On Mar 17, 2005, at 00:03, Dennis Peterson wrote:
>
>> Dale Walsh said:
>>>
>>> On Mar 16, 2005, at 19:33, Dennis Peterson wrote:
>>>
Dale Walsh said:
>
>>
>> Where are the archives of this list, like for last week? I remember
>> someone mentioned how
So, I've been using ClamAV quite successfully since the days of .66,
and I've got a new problem. A user of mine is sending out a large (but
not humongous - ~500kb) that is filled with lots of equations and other
complicated stuff from Outlook (though
there are problems with other mailers too).
On Thu, 17 Mar 2005 18:06:00 +
Brian Morrison <[EMAIL PROTECTED]> wrote:
> Received signal 14, wake up
> ClamAV update process started at Thu Mar 17 17:44:40 2005
> main.cvd is up to date (version: 30, sigs: 31086, f-level: 4,
> builder: tkojm)
> daily.cvd updated (version: 767, sigs: 562, f-
> Received signal 14, wake up
> ClamAV update process started at Thu Mar 17 17:44:40 2005
> main.cvd is up to date (version: 30, sigs: 31086, f-level: 4,
> builder: tkojm)
> daily.cvd updated (version: 767, sigs: 562, f-level: 4, builder: diego)
> Database updated (31648 signatures) from
> db.gb.c
On Thu, 17 Mar 2005 19:15:44 +0100 in
[EMAIL PROTECTED] Tomasz Kojm <[EMAIL PROTECTED]>
wrote:
> > So, why the difference between what freshclam thinks the number of
> > signatures is, and what clamd thinks?
>
> Your clamd doesn't support meta-data signatures.
So that will be a feature of 0.8
On Thu, 17 Mar 2005 18:21:04 +
Brian Morrison <[EMAIL PROTECTED]> wrote:
> On Thu, 17 Mar 2005 19:15:44 +0100 in
> [EMAIL PROTECTED] Tomasz Kojm <[EMAIL PROTECTED]>
> wrote:
>
> > > So, why the difference between what freshclam thinks the number
> > > of signatures is, and what clamd thinks
Dennis Peterson wanted us to know:
>> Of the two processes (spam scanning and virus scanning), spam scanning is
>> more resource-intensive (at least the way I do it) - so I virus scan
>> first, and spam-scan second.
>Interesting - that is exactly the opposite of my experiences so I'm
>interested i
On Thu, 17 Mar 2005 19:15:44 +0100 in
[EMAIL PROTECTED] Tomasz Kojm <[EMAIL PROTECTED]>
wrote:
> Your clamd doesn't support meta-data signatures.
Should the daily.cvd not be showing as f-level: 5 if a new format has
been added?
--
Brian Morrison
bdm at fenrir dot org dot uk
GnuPG key ID DE3
Tomasz Kojm a écrit :
> Your clamd doesn't support meta-data signatures.
What is a meta-date signature ?
BTW, what's in the .zmd file ? Patterns for password-protected zip file
detection ?
Regards,
--
Guillaume Arcas
J'ai personnelleme
Hello,
Looking for a way to scan all incoming web content using ClamAV. Is anyone
aware of any integration of ClamAV into the Squid Cache proxy server? Similar
open-source solutions?
THANKS!
Jon Kibler
--
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC USA
(843) 849-8214
On Thu, 17 Mar 2005 17:29:57 +0100, Administrator
<[EMAIL PROTECTED]> wrote:
> hi,
> Version of Clamav 0.83/764 with HP-UX 11.11.
>
> when i try to scan a sendmail spool directory /var/spool/mqueue that
> contains mail infected by EICAR test virus and others virus Clamscan does
> not find any atta
Todd Lyons wrote:
> Dennis Peterson wanted us to know:
>> But yes, no point in double-damning a message when once will do, and
>> I guess that was my point, and clearly the most efficient method
>> should be first.
>
> When a milter is configured to reject at the SMTP level, it never gets
> to the
On Thu, 17 Mar 2005 12:10:28 -0600, Dan Bongert <[EMAIL PROTECTED]> wrote:
> So, I've been using ClamAV quite successfully since the days of .66,
> and I've got a new problem. A user of mine is sending out a large (but
> not humongous - ~500kb) that is filled with lots of equations and other
> com
[EMAIL PROTECTED] wanted us to know:
>> When a milter is configured to reject at the SMTP level, it never gets
>> to the second milter in the chain. So if clamav-milter detects a
>> virus, the CPU intensive content scanning process never sees the
>> message (hence much lower load).
>Your site pol
On Thu, 17 Mar 2005 13:43:11 -0500, Jon R. Kibler <[EMAIL PROTECTED]> wrote:
> Hello,
>
> Looking for a way to scan all incoming web content using ClamAV. Is anyone
> aware of any integration of ClamAV into the Squid Cache proxy server? Similar
> open-source solutions?
Well, there are a number
Todd Lyons said:
> Dennis Peterson wanted us to know:
>
>>> Of the two processes (spam scanning and virus scanning), spam scanning
>>> is
>>> more resource-intensive (at least the way I do it) - so I virus scan
>>> first, and spam-scan second.
>>Interesting - that is exactly the opposite of my expe
Tomasz Kojm said:
> On Thu, 17 Mar 2005 18:21:04 +
> Brian Morrison <[EMAIL PROTECTED]> wrote:
>
>> On Thu, 17 Mar 2005 19:15:44 +0100 in
>> [EMAIL PROTECTED] Tomasz Kojm <[EMAIL PROTECTED]>
>> wrote:
>>
>> > > So, why the difference between what freshclam thinks the number
>> > > of signatur
On Thu, 17 Mar 2005 11:29:31 -0800 (PST)
"Dennis Peterson" <[EMAIL PROTECTED]> wrote:
> It appears that quite a lot is happening in the CVS now - is .84 near?
> I'm uncomfortable dropping CVS code into production as many are.
Yes, 0.84rc1 is relatively near.
--
oo. Tomasz Koj
"Jon R. Kibler" <[EMAIL PROTECTED]> schrieb im Newsbeitrag
news:[EMAIL PROTECTED]
> Hello,
>
> Looking for a way to scan all incoming web content using ClamAV. Is anyone
> aware of any integration of ClamAV into the Squid Cache proxy server?
> Similar open-source solutions?
I prefer/use Dansgua
At 10:24 AM 3/17/2005, Tomasz Kojm wrote:
>Yes, it will (already supported in CVS).
this is ridiculous. my clamd system is now broken due to these changes that
are being propogated. i'm running the current .83 release. you should at
least support your current RELEASE version for all clients out th
On Thu, 17 Mar 2005 12:33:42 -0800
[EMAIL PROTECTED] wrote:
> >At 10:24 AM 3/17/2005, Tomasz Kojm wrote:
> > >Yes, it will (already supported in CVS).
>
> this is ridiculous. my clamd system is now broken due to these changes
> that are being propogated. i'm running the current .83 release. you
>
Thank's Tood
I used --max-children=20 and the system is running 24 hours without errors.
Junior
-Mensagem original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Em nome de Todd Lyons
Enviada em: quarta-feira, 16 de março de 2005 17:28
Para: clamav-users@lists.clamav.net
Assunto: Re:
On Thu, 17 Mar 2005 21:40:43 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Thu, 17 Mar 2005 12:33:42 -0800
> [EMAIL PROTECTED] wrote:
>
> > >At 10:24 AM 3/17/2005, Tomasz Kojm wrote:
> > > >Yes, it will (already supported in CVS).
> >
> > this is ridiculous. my clamd system is now broken due
[EMAIL PROTECTED] wanted us to know:
>>>Yes, it will (already supported in CVS).
>this is ridiculous. my clamd system is now broken due to these changes that
>are being propogated. i'm running the current .83 release. you should at
>S60clamd start
>LibClamAV Error: Wrote 0 instead of 512
>(/var/tm
> >At 10:24 AM 3/17/2005, Tomasz Kojm wrote:
> > >Yes, it will (already supported in CVS).
>
> this is ridiculous. my clamd system is now broken due to these changes
> that are being propogated. i'm running the current .83 release. you
> should at least support your current RELEASE version for all
On Thu, 17 Mar 2005 12:48:10 -0800
[EMAIL PROTECTED] wrote:
> got any other brilliant suggestions, einstein?
I commiserate with your users.
--
oo. Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
\..._ 0DCA5A084
At 12:48 PM 3/17/2005, [EMAIL PROTECTED] wrote:
you've broken something in the distributed CVD's. i've seen other reports
of this problem today.
correction, the other reports are regarding changes to the CVD format
apparently, but don't match what i'm experiencing. as i said, plenty of
disk, ple
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
At 12:48 PM 3/17/2005, [EMAIL PROTECTED] wrote:
>>you've broken something in the distributed CVD's. i've seen other reports
>>of this problem today.
>correction, the other reports are regarding changes to the C
[EMAIL PROTECTED] wrote:
> that's why this suggested to me a problem with the CVD's.
Might one enquire then as to why no one else, upto just, are experiencing
this problem? Double check your system before blaming the software.
Matt
___
http://lurker.
At 01:05 PM 3/17/2005, Matt Fretwell wrote:
[EMAIL PROTECTED] wrote:
> that's why this suggested to me a problem with the CVD's.
Might one enquire then as to why no one else, upto just, are experiencing
this problem? Double check your system before blaming the software.
uh, that's essentially what
On Thu, 17 Mar 2005 13:10:57 -0800
[EMAIL PROTECTED] wrote:
> At 01:05 PM 3/17/2005, Matt Fretwell wrote:
>
> >[EMAIL PROTECTED] wrote:
> >
> > > that's why this suggested to me a problem with the CVD's.
> >
> > Might one enquire then as to why no one else, upto just, are
> > experiencing
> >th
On Thu, 17 Mar 2005 22:25:44 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Thu, 17 Mar 2005 13:10:57 -0800
> [EMAIL PROTECTED] wrote:
>
> > At 01:05 PM 3/17/2005, Matt Fretwell wrote:
> >
> > >[EMAIL PROTECTED] wrote:
> > >
> > > > that's why this suggested to me a problem with the CVD's.
>
I would recommend Bogofilter .
___
http://lurker.clamav.net/list/clamav-users.html
On Thu, Mar 17, 2005 at 07:24:15PM +0100, Tomasz Kojm wrote:
> > > Your clamd doesn't support meta-data signatures.
> > So that will be a feature of 0.84 then?
> Yes, it will (already supported in CVS).
Great! I've been "using" meta-data signatures, via procmail, probably since
"sircam" came out
Hi,
I recently upgraded from 0.80 to 0.83. I have seen a dramatic increase in
CPU usage. Running inside of amavisd-new, my five amavis servers hog the CPU
with around 20% each and up to 50% or more for one server process when the
others are idling. Word had it that there was a "Digest bug" in
On Thu, 17 Mar 2005 18:58:46 +
Rob MacGregor <[EMAIL PROTECTED]> wrote:
> On Thu, 17 Mar 2005 12:10:28 -0600, Dan Bongert
> <[EMAIL PROTECTED]> wrote:
> > So, I've been using ClamAV quite successfully since the days of .66,
> > and I've got a new problem. A user of mine is sending out a larg
Has anyone considered or requested that the URL for upgrading Clamav might
be put in the notice the admin receives when the following message is
sent:
WARNING: Your ClamAV installation is OUTDATED - please update immediately!
I may just poke through the source code, but my time can be better spen
Does anyone know of a gtk gui frontend to clamav?I have looked around
and havnt found one yet.
M
___
http://lurker.clamav.net/list/clamav-users.html
On Thu, 17 Mar 2005 17:55:16 -0500
Michael <[EMAIL PROTECTED]> wrote:
> Does anyone know of a gtk gui frontend to clamav?I have looked around
> and havnt found one yet.
This one looks nice but it depends on an additional library:
http://wolfpack.twu.net/Endeavour2/contrib/index.html#avscan
--
Yes, I mean the DISCARD in the milter, anyone knows how to do it? As far as
I know, there are connection-oriented and message-oriented kind of things
in milters, and I do not know where to modify the code to do what I want.
Best,
Daniel.
___
http://lur
Greetings,
Clamd works correctly in foreground.
/var/log/clamd.log
...
+++ Started at Thu Mar 17 22:56:17 2005
clamd daemon 0.83 (OS: linux-gnu, ARCH: i386, CPU: i686)
Log file size limited to 10485760 bytes.
Verbose logging activated.
Reading databases from /var/lib/clamav
Protecting against 31635
On Thu, 17 Mar 2005 16:39:40 -0600, Dan Bongert <[EMAIL PROTECTED]> wrote:
>
>
> It's a pretty beefy box (though not even close to cutting-edge): dual
> PIII 1.13GHz processors, 1GB of RAM, FreeBSD 4.8. It's not
> particularly processor-bound--the load average is usually less than
> 1, and top on
Hi,
I will use MailScanner from http://www.sng.ecs.soton.ac.uk/mailscanner/.
Alberto
>
>--
>From: [EMAIL PROTECTED] on behalf of Rob
MacGregor[SMTP:[EMAIL PROTECTED]
>Sent: Thursday, March 17, 2005 7:52:46 PM
>To:ClamAV users ML
>Subject: Re: [Clamav-users] Virus not identified
71 matches
Mail list logo
