Hello,
I have amavisd-new-20020517 + clamav-0.54 working quite well
with clamscan.
To do so, I needed to added some lines given from Mark Martinec.
Now, I'm trying to get a better performance with clamd,
I just executed clamd, changed the words clamscan to clamdscan
in amavisd file, but it didn'
I found out what was wrong... the line Example in
clamd.conf file must be commented.
Ronan
On Thu, 28 Nov 2002 15:22:53 -0200
Ronan Lucio <[EMAIL PROTECTED]> wrote:
> Hello,
>
> I installed ClamAV-0.54 today, copied the /usr/local/etc/clamav.conf-dist
> file to /usr/local/et
Hello,
I installed ClamAV-0.54 today, copied the /usr/local/etc/clamav.conf-dist
file to /usr/local/etc/clamav.conf, but when I execute clamd, it returns
me an error.
# clamd
ERROR: Please edit the example config file /usr/local/etc/clamav.conf.
ERROR: Can't parse the config file /usr/local/etc/c
Ok Ken,
Thank you very much for the tip.
> clamd is amazingly fast, but it's VERY experimental. You don't want to
> run it right now.
Ronan
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PR
Tomasz,
Thank you very much for your answer.
So, I'll wait for the next release because I'm running
FreeBSD-4.6-STABLE.
Thank's,
Ronan
On Fri, 29 Nov 2002 10:06:57 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Thu, Nov 28, 2002 at 04:00:08PM -0500, Ed Phillips wrote:
> >
> > How would you
Chris,
Very good your answer. Thank you very very much.
Do you use FreeBSD, too?
If so, did you upgrade Perl to 5.8?
Amavisd-new is still in version 20020517 in FreeBSD
ports tree.
I've tried to install Amavisd-20021116 but I didn't
get to make it work yet because the incompatibility
of some per
Chris,
Please, clearify just this point to me
> Basically, I had the code below in my virus_scan() routine. It was then
> necessary to set ONE of $clamd_sockname (set to path to unix socket),
> $clamd (set to anything you like - will use INET socket), OR $clamscan
> (path to clamscan - uses clams
Chris,
I'm sorry for not understand something in the Unix world, yet.
> The code I supplied does fallback to clamscan if clamd fails.
>
> You should NOT specify a value for $clamscan in amavisd.conf - if you do
> clamscan will always be called, not just if clamd fails.
>
> Either define $clam_
Hello,
I have a FreeBSD box with Postfix-1.1.11 + Amavisd-new-20020517
+ ClamAV-0.54, working fine.
The eicar attach is being blocked but, today, I start receiveing
a new virus (Lirva) that the ClamAV isn't catching.
I have already executed freshclam but this virus is still
passing through the m
Thank you very much Tomasz,
It seems working fine to me, too.
Ronan
On Thu, 9 Jan 2003 13:07:43 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Thu, Jan 09, 2003 at 09:02:01AM +0100, Tomasz Kojm wrote:
> > On Wed, Jan 08, 2003 at 06:19:27PM -0600, Johan Kuuse wrote:
> > > This means that the
Hello,
I have seeing some messages like this on mail server:
Apr 2 07:50:10 salseiros /kernel: pid 52213 (clamscan), uid 13929 on /: file system
full
Apr 2 07:50:12 salseiros /kernel: pid 52213 (clamscan), uid 13929: exited on signal
11 (core dumped)
Well, it looks me that ClamAV are creatin
Hello (cyber) friends,
Thank you very much for the answers.
I think it should solve my problem.
PS: It's time to reinstall the server.
Ronan
On Wed, 2 Apr 2003 14:58:29 +0200
DEFFONTAINES Vincent <[EMAIL PROTECTED]> wrote:
> > Hello,
> >
> > I have seeing some messages like this on mail serv
Odhiambo,
I'm sorry by my english... let's try again... hehehe
> > Well, I did it now to the server works fine but,
> > I don't know it it's a good to leave the server
> > working this way, even no one having access to
> > the server via shell.
>
> I do not understand your last statement, but my
Odhiambo,
> There is no problem at all even when people have shell access.
> Simply do
>
> chmod 1777 /usr/tmp
>
> This way anyone can write their own files to tmp but cannot
> interfere with the other person's files.
>
> It is safe.
Thank you very much for the help. It's clarified my mind
an
Hi All,
I'm trying to install Postfix-2.0.6 + Amavisd-new-20021227.p2
+ ClamAV-0.54 in a FreeBSD-4.8-STABLE box.
When I make a test logging via telnet on port 10024,
it gives me an error from the Anti-virus:
-
May 5 11:06:17 salseiros.melim.com.br amavisd[94246]: (94
Dave,
On Mon, 5 May 2003 13:37:54 -0400
David Vasil <[EMAIL PROTECTED]> wrote:
> On Mon, May 05, 2003 at 02:23:14PM -0300, Ronan Lucio <[EMAIL PROTECTED]> wrote:
> > Mon May 5 11:29:41 2003 -> Unix socket file /tmp/clamd
> >
> > Does anyone know what coul
Dave,
> Try running clamd and amavisd-new as the
> same user to narrow down the problem.
Thank you very much. It's working fine, now.
Ronan
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PRO
Hello,
I'd like to make a report about the viruses catched by ClamAV.
So, to do this I tried to read the clamav log file and create
a txt file with the results, but, when I remove the clamd log
file, ClamAV don't create it againg. ClamAV only create a new
log file when I restart it.
So, If I want
TION: Use it for your own risk. Don't responsabilize me for anything#
#wrong that could be happen. #
#
I forgot to say that the virus stattitics will be write
in the file /var/log/virus_stat.log
Ronan
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Douglas,
The script that I posted isn't to count how many
viruses ClamAV protect against.
It's to say how many infected files/e-mails were detected
by the anti-virus per day.
Ronan
On Fri, 30 May 2003 12:05:14 -0400
Douglas J Hunley <[EMAIL PROTECTED]> wrote:
> -BEGIN PGP SIGNED MESSAGE---
Christian,
> There seems to be another morph of this, I see a few BugBear.B still
> get trough the clamav tests and being caught by the amavis test like:
So do I. And I have these virus saved here, if there is
a way to sent the virus for analyse, please, tell me.
Ronan
-
Hello,
I received an mail with Sobig.C virus.
Why could be wrong to ClamAV don't detect it?
I have ClamAV-0.54 and freshclam returns me OK.
It seems that clamav is updated.
My server has detected no virus Palyh ou Sobig:
2003Jun2-Exploit.IFrame 1
2003Jun2-Exploit.IFrame.HTML 46
2003Jun2-VBS/Hap
Tomasz,
I'm sorry. Please, forget the previous message.
I don't know how the virus passed throught the
anti-virus, but, when I tryed to send you, the
anti-virus blocked the message.
May by it was in the mail queue before I update
the database.
Ronan
On Thu, 5 Jun 2003 18:11:32 -
Tomasz,
On Thu, 5 Jun 2003 17:16:46 +0200 (CEST)
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> > Hello,
> >
> > I often receiving this virus, today and my viruses.db
> > is updated.
>
> No, your database isn't up to date.
Thank you very much, after I update the viruses database,
it started detecti
#wrong that could be happen. #
# #
# by Ronan Lucio #
#
Kevin,
> I guessing (from its name) that you could use this tool...
> http://sageshome.net/oss/mbox2mdir.php
> to extract all the messages to seperate files, which you could then scan
> with clamscan.
For all I have understood about the question I think it
don't solve his problem.
mbox2mdir shou
Hello,
I'm receiving many messages with a attached file saying
that is from Microsoft Corporation.
I think it should be the Swen virus.
Should I send these files to someone to analyse it and
make the vaccine?
Ronan
---
This sf.net email is sp
Tomasz,
> Oh, no, please don't do it.
>
> ClamAV has the signature for Swen (it's alias of Gibe.F) for a couple of
> days yet.
So, I think it should not be working properly because I received
some viruses today morning and the viruses database is updated
2 times a day.
Ronan
Tomasz,
> Just to make sure: please zip it with password "virus" and send it to my
> address in the sig below.
Sorry, it was my mistake.
As Antony said. The files had 0 Kb of size.
So, it's supposed to not contain virus.
BTW, I don't know why do these files have size 0 Kb, since
ClamAV don't re
I also could detect that ClamAV is catching Gibe
virus since Sep/19:
2003-09-18 (Exploit.IFrame.Gen) = 17
2003-09-18 (JS.FortNight.2) = 3
2003-09-18 (Joke.Schmilz) = 2
2003-09-18 (Trojan.Dropper.C) = 48
2003-09-18 (W32/Magistr.A) = 1
2003-09-18 (W97M/[EMAIL PROTECTED]) = 1
2003-09-18 (Worm.BugBear
Thiago,
When a new virus that fake the sender address is created,
you should add it to the list, too.
[]s
Ronan
On Wed, 24 Sep 2003 11:10:18 -0300
"Thiago Lima " <[EMAIL PROTECTED]> wrote:
>
>
> I'm using clam + amavis-new in my postfix mail system and I'm
> very happy with it. It's a v
Thiago,
On Wed, 24 Sep 2003 11:40:57 -0300
Ronan Lucio <[EMAIL PROTECTED]> wrote:
> Thiago,
>
> When a new virus that fake the sender address is created,
> you should add it to the list, too.
Just one more thing:
Pay attention that different viruses can have differente
names
33 matches
Mail list logo
