[Clamav-users] Analyze Perl Script

2005-06-20 Thread Dave Wells
Hi, I have written a perl script called Analyze that will run through sendmail's log files and pull out information regarding Infected mails captured by ClamAV. I wrote this script as we needed greater visibilty of what ClamAV was dropping and I couldn't find anything that would give me the info

Re: [Clamav-users] For those who submitted adware/spyware samples

2005-06-20 Thread Bart Silverstrim
On Jun 17, 2005, at 4:21 PM, Jim Popovitch wrote: On Fri, 2005-06-17 at 12:08 -0800, Matthew Schumacher wrote: IMHO, anything malicious sent though email should be detected by the virus scanner. I agree. What will it take for clamav to support all files/emails deemed malicious? A procmail

Re: [Clamav-users] For those who submitted adware/spyware samples

2005-06-20 Thread Bart Silverstrim
On Jun 17, 2005, at 4:08 PM, Matthew Schumacher wrote: Kelson wrote: Niek wrote: If you want protection from ad- spyware, get anti-spyware software. I don't want to start up another flame war, but I really have to ask this question: Isn't email-borne spyware more in a virus scanner's dom

Re: [Clamav-users] ClamAV on Exchange 200x

2005-06-20 Thread Bart Silverstrim
On Jun 17, 2005, at 3:01 PM, Patrick Andry wrote: Does Exchange 2000 still accept mail for non-existent users, as it does for 5.5? Unless there's a feature/setting I'm missing, yes it does. ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Analyze Perl Script

2005-06-20 Thread nizar
Hi, What is the difference between running clamav-milter with --headers --noreject [EMAIL PROTECTED] ?! On Mon, 2005-06-20 at 10:51 +0100, Dave Wells wrote: > Hi, > > I have written a perl script called Analyze that will run through > sendmail's log files and pull out information regarding I

[Clamav-users] Password protected ZIP's---howto?

2005-06-20 Thread Johnny Stork
Is there any way to get clamav to handle password protected zip files? We receive and send many files as pw protected zips and since deploying clamav, they have all been flagged as viruses? Thanks If there is no way this can be done, what needs to change in the clamd.conf to allow

RE: [Clamav-users] Password protected ZIP's---howto?

2005-06-20 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Johnny Stork > Sent: Monday, June 20, 2005 11:49 AM > To: clamav-users@lists.clamav.net > Subject: [Clamav-users] Password protected ZIP's---howto? > > >Is there any way to get clamav to handle passwo

RE: [Clamav-users] Password protected ZIP's---howto?

2005-06-20 Thread Johnny Stork
Thanks kindly, but I guess this means that they pass through without being scanned/checked? -Original Message- From: Samuel Benzaquen [mailto:[EMAIL PROTECTED] Sent: June 20, 2005 8:51 AM To: ClamAV users ML Subject: RE: [Clamav-users] Password protected ZIP's---howto? > -Original M

RE: [Clamav-users] Password protected ZIP's---howto?

2005-06-20 Thread Matthew.van.Eerde
Johnny Stork wrote: > From: Samuel Benzaquen [mailto:[EMAIL PROTECTED] >> Johnny Stork: >>>Is there any way to get clamav to handle password protected >>> zip files? We >>>receive and send many files as pw protected zips and since >>deploying clamav, they have all been flagged as viruse

[Clamav-users] Using clamav to scan adware

2005-06-20 Thread Joanna Roman
IS anyone using clamav to scan adware ? If so, have you been successful ? Does your clamav scanner listen on port 80 only ? Or it also listens on port 21 ? - Yahoo! Sports Rekindle the Rivalries. Sign up for Fantasy Football _

Re: [Clamav-users] Using clamav to scan adware

2005-06-20 Thread Matt Fretwell
Joanna Roman wrote: > IS anyone using clamav to scan adware ? If so, have you been successful > ? Does your clamav scanner listen on port 80 only ? Or it also listens > on port 21 ? Wouldn't it just be easier to list the complete list of specific goals you wish to achieve, and then someone can

Re: [Clamav-users] Using clamav to scan adware

2005-06-20 Thread JamesDR
Joanna Roman wrote: IS anyone using clamav to scan adware ? If so, have you been successful ? Does your clamav scanner listen on port 80 only ? Or it also listens on port 21 ? - Yahoo! Sports Rekindle the Rivalries. Sign up for Fantasy Football

Re: [Clamav-users] Using clamav to scan adware

2005-06-20 Thread Joanna Roman
--- Matt Fretwell <[EMAIL PROTECTED]> wrote: > Joanna Roman wrote: > > > IS anyone using clamav to scan adware ? If so, > have you been successful > > ? Does your clamav scanner listen on port 80 only > ? Or it also listens > > on port 21 ? > > > Wouldn't it just be easier to list the comple

[Clamav-users] ClamAV Patch

2005-06-20 Thread Jorge Valdes
Hi, Sometime ago I posted a message which provided a patch so that clamd could log to /dev/stdout or /dev/stderr with any version of solaris (2.6+). I needed to do this because I wanted to log output via daemontool's multilog, and kept getting the dreaded "Could not open logfile" error. I a

Re: [Clamav-users] Password protected ZIP's---howto?

2005-06-20 Thread Des Keane
On 20/06/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Johnny Stork wrote: > >>>Is there any way to get clamav to handle password protected > >>> zip files? We > >>>receive and send many files as pw protected zips and since > >>deploying clamav, they have all been flagged as viruse

[Clamav-users] problem with clamav-0.85.1

2005-06-20 Thread suneel cumar
i have upgraded the clamav 0.74 to 0.85.1. In the previous version it was working fine when i did upgradation. Am finding this error. Jun 20 14:10:02 sunil amavis[3078]: (03078-09) ClamAV-clamd: Can't connect to UNIX socket /tmp/clamd: Connection refused, retrying (2) Jun 20 14:10:08 sunil amav

RE: [Clamav-users] ClamAV on Exchange 200x

2005-06-20 Thread John Gallagher
Depending on your active directory structure it is relatively simple to grab the exchange users so your mail relay can make this decision before passing the mail on to the exchange server. You may need to work on the script a little to pull aliases and mail forward info. Check out this link: http

Re: [Clamav-users] Creating your own signatures

2005-06-20 Thread jef moskot
On Sat, 18 Jun 2005, jef moskot wrote: > If I forward the spam with the attached image to myself, clamscan picks > it up. If I forward the image itself in a different message to myself, > clamscan also detects it. > > However, if I clamscan the original mail file with the spam in it, > clamscan do