Re: [Clamav-users] usefulness of complaining to abuse@whatever.com for Netsky/Bagle

2004-03-14 Thread Brian W. Antoine
At 11:57 AM 3/14/04, you wrote: >It looks like you get the proper IP of the offending machine firing off >these worms in the header (even though everything else is forged). > >Is there any point in telling [EMAIL PROTECTED] that one of their DSL >customers is spamming the Internet with noxious mess

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Brian W. Antoine
At 02:56 PM 3/25/2004, you wrote: On Thursday 25 March 2004 10:36 pm, Mark Novak wrote: > > If running the same command on your server does not show the > > SomeFool.P then > > your definitions are NOT up to date. If freshclam insists on saying > > they > > are up to date, i would try deleting th

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Brian W. Antoine
At 05:24 PM 3/25/04, Tomasz Papszun wrote: >On Thu, 25 Mar 2004 at 16:18:38 -0800, Brian W. Antoine wrote: >> >> I'm updating from clamav.elektrapro.com and starting a short time ago it >> now wants >> to update viruses.db, but the checksum fails after the downl

Re: [Clamav-users] clam not fresh

2004-03-25 Thread Brian W. Antoine
At 07:09 PM 3/25/04, you wrote: >On Thu, 25 Mar 2004 at 18:39:29 -0800, Brian W. Antoine wrote: >> At 05:24 PM 3/25/04, Tomasz Papszun wrote: >> >On Thu, 25 Mar 2004 at 16:18:38 -0800, Brian W. Antoine wrote: >> >> >> >> I'm updating from clamav.

Re: [Clamav-users] clam not fresh

2004-03-26 Thread Brian W. Antoine
At 01:11 PM 3/26/2004, you wrote: On Thu, 25 Mar 2004 at 21:42:57 -0800, Brian W. Antoine wrote: > > I just ran freshclam again and instead of downloading viruses.db and > then giving me a checksum error it now claims: > > Connected to clamav.elektrapro.com. > Reading md

[Clamav-users] clamd dieing

2003-09-02 Thread Brian W. Antoine
stable since then, but tonight it failed again. Any suggestions on how to narrow down the problem? Can a debug log be turned on to get a better idea where it's failing, or can I force a core file somehow when it's sitting in that half defunct state? --

Re: [Clamav-users] clamd dieing

2003-09-02 Thread Brian W. Antoine
At 11:17 PM 9/2/03, you wrote: >On Wed, 2003-09-03 at 01:17, Brian W. Antoine wrote: >> I'm on a Mandrake 9.1 system using clamav-milter with sendmail and about >> once a day I find the following: > > >I had the exact same problems myself, with RH 8.0 and Sendmail, u

Re: [Clamav-users] clamd dieing

2003-09-03 Thread Brian W. Antoine
At 11:21 PM 9/2/03, you wrote: >Brian W. Antoine wrote: >>At 11:17 PM 9/2/03, you wrote: >> >>>On Wed, 2003-09-03 at 01:17, Brian W. Antoine wrote: >>> >>>> I'm on a Mandrake 9.1 system using clamav-milter with sendmail and about >>>>o

Re: [Clamav-users] clamd dieing

2003-09-03 Thread Brian W. Antoine
At 08:12 AM 9/3/2003, you wrote: On Wed, Sep 03, 2003 at 07:51:32AM -0700, Brian W. Antoine wrote: > would provide a way to fail more gracefully. Blocking all incoming mail might be > an option for an individual user, but an ISP would probably want an option to > simply let the

Re: [Clamav-users] clamd dieing

2003-09-03 Thread Brian W. Antoine
At 10:09 AM 9/3/03, you wrote: >On Wed, Sep 03, 2003 at 08:51:26AM -0700, Brian W. Antoine wrote: >> At 08:12 AM 9/3/2003, you wrote: >> >On Wed, Sep 03, 2003 at 07:51:32AM -0700, Brian W. Antoine wrote: >> >> would provide a way to fail more gracefully. Blocking a

Re: [Clamav-users] clamd dieing

2003-09-03 Thread Brian W. Antoine
At 06:58 PM 9/3/03, you wrote: >On Wed, Sep 03, 2003 at 06:01:55PM -0700, Brian W. Antoine wrote: >> At 10:09 AM 9/3/03, you wrote: >> >On Wed, Sep 03, 2003 at 08:51:26AM -0700, Brian W. Antoine wrote: >> > >> >Xclamav, S=local:/var/run/clmilter.sock, F=, T

[Clamav-users] clamd crashing in mbox.c

2003-09-03 Thread Brian W. Antoine
Looking over the clamd failures on my mail server I noticed that it was always leaving behind a work directory in /tmp, which pretty much narrows it down to the mbox.c code that pulls apart a mail message for scanning. James Stevens had posted a message to the clamav-devel list about replacing m

Re: [Clamav-users] clamd dieing

2003-09-04 Thread Brian W. Antoine
At 07:28 PM 9/3/03, you wrote: >I'm using a modified version of: > > *SpamAssassin Milter version 0.5.5 > * For use with the SpamAssassin http://www.spamassassin.org/ ``spamd'' That's one of the ones I looked at, it's another SF project I believe now. Their mailing list has as m

RE: [Clamav-users] Problems making ClamAV with Milter

2003-09-05 Thread Brian W. Antoine
At 10:29 AM 9/5/03, you wrote: >Unfortunately, that doesn't seem to have made a bit of difference. > >INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, >T=S:4m;R:4m')dnl >define(`confINPUT_MAIL_FILTERS', `clmilter') > >Still no changes to clamd.log, and no headers added to incoming

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Brian W. Antoine
At 11:11 AM 11/27/03, you wrote: >Unfortunately not all our users are happy of the situation >when they cannot get e-mails with viruses in them. You've got to be kidding. Did the user take the hint when you had trouble replying because you were laughing too hard? ---

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Brian W. Antoine
At 01:10 PM 11/27/03, you wrote: >Hello Brian, > >Thursday, November 27, 2003, 9:25:01 PM, you wrote: > >BWA> At 11:11 AM 11/27/03, you wrote: >>>Unfortunately not all our users are happy of the situation >>>when they cannot get e-mails with viruses in them. > >BWA> You've got to be kiddi

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-27 Thread Brian W. Antoine
-mail, but still deliver it to addressee ? > > >> On Thu, Nov 27, 2003 at 12:25:01PM -0800, Brian W. Antoine wrote: >> > At 11:11 AM 11/27/03, you wrote: >> > >Unfortunately not all our users are happy of the situation >> > >when they cannot get e

Re: [Clamav-users] clamav-milter: is it possble to mark infected e-mail, but still deliver it to addressee ?

2003-11-28 Thread Brian W. Antoine
At 11:29 PM 11/27/03, you wrote: >Hello Brian, > >I hope you donĀ“t laugh too much and think about the problems of filtering mails from >time to time: > >67.106.13.26 does not like recipient. >... Schicken Sie hat abgelehnt ab. Es war >entweder werbe, dumm, oder nur Drgern. >Giving up on 67.106.13.