is happens, I have no shortage of coredumps for debugging. Where
should I look next?
Thanks,
- Ryan
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse
greatly appreciated!
- Ryan
--
Ryan Thompson <[EMAIL PROTECTED]>
SaskNow Technologies - http://www.sasknow.com
901-1st Avenue North - Saskatoon, SK - S7K 1Y4
Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon
Toll-Free: 877-727-5669 (877-SASKNOW)
Nigel Horne wrote to [EMAIL PROTECTED]:
> On Thursday 05 Feb 2004 1:00 am, Ryan wrote:
> > Hi again,
> >
> > Please see my original post for background information:
> > http://www.mail-archive.com/[EMAIL PROTECTED]/msg04704.htm
>
> I couldn't see the versio
Nigel Horne wrote to [EMAIL PROTECTED]:
> On Thursday 05 Feb 2004 3:38 pm, you wrote:
>
> > ttyp1 [EMAIL PROTECTED]:/staff/ryan $> clamav-milter --version ClamAV
> > version 0.65, clamav-milter version 0.60p
>
> This is very old, but it is true that it is th
Ryan wrote to Nigel Horne:
> > This is very old, but it is true that it is the most up to date
> > release version. The new version of clamAV, 0.66, will include many
> > bug fixes, including one for this. I suggest either waiting for it
> > or, if you need the bug fi
Michael St. Laurent wrote to '[EMAIL PROTECTED]':
> Ryan <mailto:[EMAIL PROTECTED]> wrote:
> > OK. I tested and am now running the following:
> >
> > ttyp0 [EMAIL PROTECTED]:/etc/mail #> clamav-milter --version
> > ClamAV version devel-20
Ryan wrote to '[EMAIL PROTECTED]':
> > Ryan <mailto:[EMAIL PROTECTED]> wrote:
> > > OK. I tested and am now running the following:
> > >
> > > ttyp0 [EMAIL PROTECTED]:/etc/mail #> clamav-milter --version
> [...]
> However, the sys
Is that the only solution? We have to hit a ton of servers as none of our
servers using clam have been able to update for a few hours.
-Original Message-
From: clamav-users-boun...@lists.clamav.net
[mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Dan Schwartz
Sent: Thursday, F
-users] Database Mirror Issues
Two choices:
- wait. It will eventually sort itself out.
- remove mirrors.dat and run freshclam manually. Might have to do this more
than once.
-- Noel Jones
On 2/14/2013 12:59 PM, Ryan Goode wrote:
> Is that the only solution? We have to hit a ton
another box behind runs clamav 0.90.1 via amavis
without a problem, so the mail is still being scanned), or downgrade it.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
___
Help us build a comprehe
t I suspected some sort of weird interaction with
ClamAV and Hotmail, but I've not actually been able to find any conclusive
evidence one way or the other.)
No, from a variety of different sources unfortunately.
Ryan Moore
--
Perigee.net Corpora
mav.c:748: error: 'struct cl_limits' has no member named
'maxmailrec'
scannedonlyd_clamav.c:749: error: 'struct cl_limits' has no member named
'maxratio'
make[1]: *** [scannedonlyd_clamav] Error 1
make[1]: Leaving directory `/usr/local/src/scannedonly-
/var/lib/clamav/clamav-50739a1308fc9a72abcafd5bbdc93825.tmp that was
47GB with a file called h??? using most of the space. I listed the
contents of the directory below.
Is this related to the same issue? Is the workaround to downgrade
versions for now?
Thanks for your help.
Ryan
---
$ ll
Hello,
I was looking for a way to set up a cron job to, once per day, scan only
files that have changed in the last day. find works pretty well for that,
but the question is how to get the data to clamscan. My first thought was
xargs, but xargs isn't the most consistent when dealing with spaces/
I don't think it needs write access to the socket file itself, but it
does need read+exec privs to the directory containing the socket at
least afaik.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
John Jolet wrote:
James Barber
ther
viruses in my inbox, but it's missing all of the SCO ones, as
far as I can tell. I have over 200 of them saved in a separate
directory and clamscan misses all of those.
Thanks,
Dominic
Try running 'clamscan --mbox email'
Ryan Moore
--
Perigee.net Corpora
amd.log.2:Sat Mar 6 04:40:38 2004 -> Session 5 stopped due to
timeout.
I had this problem until I updated to the CVS version, haven't had it
happen since.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
wondering if there was a way to do this with clamdscan?
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial
;ScanMail' option in clamav.conf, which I think is the same
as --mbox for clamscan.
3. Is a wrapper script to un-encode email 1st, then scan the resulting
files a good / the best approach?
Thanks,
- Bob
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-80
appen when clamd dies, or quits responding (even though
pidof/ps show clamd running still). I would verify clamdscan is working
or try restarting the milter/clamd.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
load increase normal (from 4-5 average to 9-11 average) or is
there something i can do to drop the overhead?
cheers
Scott Ryan
Systems Administrator
Telkom Internet
South Africa
signature.asc
Description: This is a digitally signed message part
oblem by disabling the size
limit and rotating the log file more frequently, but I don't think what
I've described, above, would be considered ideal behaviour in any
circumstance. See my response to the "Logging" thread that I'm about to
post.. :-)
- Ryan
--
R
ly a concern, either. :-)
I've since disabled the LogMaxFileSize option (=0), and would support
that as default behaviour in future versions.
Thanks,
- Ryan
--
Ryan Thompson <[EMAIL PROTECTED]>
SaskNow Technologies - http://www.sasknow.com
901-1st Avenue North - Saskatoon, SK - S7
Fri, 2004-03-12 at 04:18, Scott Ryan wrote:
> > Hello all, I have upgraded clamav from 0.55 to 0.67-1 so I can now catch
> > the bagle-passwd worm. It works and it catches the virus, but I have
> > noticed a significant increase in the load on the machine. I am running
> >
gards,
Stephan
http://mikecathey.com/code/clamdwatch/
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by D
I am running 0.67-1 and was looking to get a copy of the virus to test
if clamd catches it. where would i be able to get a copy of it from?
Thanks
Scott Ryan
Telkom Internet
South Africa
signature.asc
Description: This is a digitally signed message part
oblems with the milter itself crashing, but clamd
dies every other day or so it seems, but that problem was worked around
by running clamdwatch.pl in a cronjob every minute. I'm not sure how you
could check to make sure the milter itself hasn't gone to sleep, but it
might b
lamav/clamav-milter.sock
--
Steve
You probably want the -b option to reject the DATA phase of the SMTP
session if the milter detects a virus.
-
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
;t thinking mail being delivered
locally (or how it would handle that). Our sendmail box is just a relay
gateway for a few rbls and milters before being passed onto
spamassassin/amavisd and a pop3 server.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
you don't want to mess with permissions and want to be able to scan
various things easily as root, you can use clamscan instead of clamdscan.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
Tomasz Kojm wrote to [EMAIL PROTECTED]:
> On Sun, 14 Mar 2004 00:57:27 -0600 (CST)
> Ryan Thompson <[EMAIL PROTECTED]> wrote:
>
> >
> > Hi All,
> >
> > I'm using the following:
> > clamd / ClamAV version devel-20040310
> > ClamAV version dev
t virus?
I see that you did use --mbox, but what about other options you have
enabled in clamav.conf (for clamdscan) that weren't passed as parameters
to clamscan?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
sigs: 428, f-level: 1, builder: diego)
Database updated (20657 signatures) from database.clamav.net
(152.66.249.132).
Clamd successfully notified about the update.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
for it to be parsed
through qmail scanner before hitting the queue?
Thanks in advance
Scott Ryan
---
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to
deliver hi
. Yet I still get
that stupid OUTDATED message in freshclam.log.
What am I missing?
did you check for older libclamav.so files laying around and making sure
all links pointed to the latest version and rerun ldconfig?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017
esses when I resolve db.us.clamav.net, though
I didn't check the whois records for all of them to see where they were
located, but I'd assume they're in the US. I did check a few and they
were indeed in the US.
$ host db.us.clamav.net
db.us.clamav.net is an alias for d
f you so desire, which do indeed work.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at Jav
of
freshclam/clamav itself rather than the DB's.
Is there an easy way of determing the current version other than
tail'ing the freshclam log file?
Regards
Lee
sigtool --info=/usr/local/share/clamav/daily.cvd
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-
__
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
- --
Kindest Regards,
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Intern
4MB email seems rather excessive, perhaps enforcing a lower limit on
how big emails can be, or if you plan on processing huge messages adding
a lot more ram?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
vast majority of
signatures, and would vastly improve performance for the majority of
clean emails.
If clamav already does something like this, then great. I'll admit to
not really having looked at the code. :-)
- Ryan
--
Ryan Thompson <[EMAIL PROTECTED]>
SaskNow Technologies - h
vledged user doesn't have
access to (ie: /root/). You can use clamscan there however, as it would
run as the user executing the command.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
that matched
the base64_illegal SA rule even). So the payload is benign since it
can't be executed as far as I can tell, since the attachment is mangled.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
-
t upgraded my workstation to 0.75 (from 0.72)
to make sure I had the latest version, ran freshclam to make sure I had
the latest definitions (already had daily v423), still doesn't detect
this new mydoom variant (not mydoom.m, have a sig for that).
Ryan Moore
--
Perigee.net Corpor
not My.Doom.o -
My question is, how do i get clamav to identify these files as a virus?
Many thanks
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+-+
Email: [EM
/ ClamAV version 0.70
Is this normal (difference in version)?
You probably have an old (vendor package?) in /usr/bin, which also shows
up before /usr/local/bin in the $PATH, so it is executed.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
nk it will work.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BE
0.75 distro (when I did `sigtool -l | grep -ci bagle`).
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE deve
What about sheep ?
On Wednesday 28 July 2004 09:38, Andrzej Kukula wrote:
> Matt:
> > > On Tue, 2004-07-27 at 13:28, Kevin Spicer wrote:
> > > > On Tue, 2004-07-27 at 16:26, Scott Ryan wrote:
> > > > > I have not submitted any virii (correct word?)
line 163
> *** Error code 1
>
> can anyone help me with this probs??
>
> TIA
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+-+
Email
bish that are harmless as they are not executable.
>
> This includes files that are zipped and doubly zipped.
>
> -trog
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+
t; ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
--
+-+
(0> Scott Ryan
//
email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> ___
> Clamav-
s of a million mails a day and
have no issues with it.
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+-+
Email: [EMAIL PROTECTED]
Ce
On Monday 02 August 2004 17:15, Julio E. Gonzalez P. wrote:
> I just want to share this bash script to generate virus statistics. I
> know is not perfect, but do the work.
>
> Hope it helps someone.
>
> Julio.
Here is another
Again, not perfect - but will do a job.
virus_stats.pl
Description: Per
stalled engine isn't
newer, give a nasty warning in the log.
Not sure if this has been discussed before, if so I appologize as I must
have missed the thread.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
Jeremy Kitchen wrote:
On Thursday 05 August 2004 12:46 pm, Ryan Moore wrote:
Such that if freshclam downloads a signature and if the
signature has a 'engine version requirement' or some attribute that can
be compared against the installed engine, if the installed engine isn't
newe
e or clam
would not have been able to capture the virus when run manually.
Does anyone have any ideas or should I submit this as a bug?
Many thanks
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Intern
i am picking up thousands of mails a day - like
i said earlier, i even have records in my logs that clam is catching some
my.doom.M viruses.
> On Fri, 3 Sep 2004 07:13:53 +0200, Scott Ryan <[EMAIL PROTECTED]>
wrote:
> > I had an issue with this a while back which was fixed by upgradi
On Friday 03 September 2004 11:18, Rob MacGregor wrote:
> On Fri, 3 Sep 2004 10:26:49 +0200, Scott Ryan <[EMAIL PROTECTED]>
wrote:
> > No because I dont use mbox format. I cat the email message and pipe it
> > through clamdscan. It picks up that it has to scan scanning mail
On Friday 03 September 2004 16:42, Chris Meadors wrote:
> On Fri, 2004-09-03 at 11:47 +0200, Scott Ryan wrote:
> > Maybe you want to read the mail i sent again.
> > I use clamdscan not clamscan
> >
> > # man clamdscan
>
> Then do you have the "ScanMail"
On Friday 03 September 2004 07:13, Scott Ryan wrote:
> I had an issue with this a while back which was fixed by upgrading to
> latest devel and then eventually 0.75-1.
> I run qmail-scanner which in turn calls clamdscan. If i cat the message and
> pipe through clamdscan manually, clam
4 x Dell 6650s - 4 HT Xeons.
It used to be a CPU hog until we started using clamdscan instead of
clamscan :S
On Saturday 11 September 2004 11:44, Odhiambo Washington wrote:
> Anyone running ClamAv in an SMP server?
> Any exploits (good news) that you can share about running it under
> such a
On Monday 13 September 2004 23:13, Adam Bernstein wrote:
> Howdy. We have a strange problem: We're running the latest
> stable, 0.75.1, with virus definitions updated via freshclam
> every hour (the latest log entry shows "version 488". We have
> a virus that keeps getting through, but it is rec
On Monday 20 September 2004 21:52, Daniel Alberto Cañas wrote:
> On Sep 20, 2004, at 12:41 PM, Matt Gourley wrote:
> > Niek wrote:
> >> On 9/20/2004 4:32 PM +0200, Matt Gourley wrote:
> >>> Hi all,
> >>>
> >>> I've been trying to get ClamAV to log via multilog so that I can
> >>> generate reports v
dmail, and is included as part of the clamav package.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to re
gards,
+---+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+---+
Email: [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Cell: +27-721164832
Wor
On Wednesday 22 September 2004 12:28, Brian Morrison shaped the electrons to
say:
> On Wed, 22 Sep 2004 10:37:31 +0200 in
> [EMAIL PROTECTED] Scott Ryan
>
> <[EMAIL PROTECTED]> wrote:
> > I am investigating the possibility of using a Unix socket as opposed
> > to
r the url
Kind regards,
+------+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
Email: [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Cell: +27-721164832
W
are
machine, so perhaps you have an outdated or mangled glibc install? Might
try reinstalling the package that supplies that for your distro.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
___
htt
Edilmar wrote:
One doubt: the files viruses.db/db2 aren't supported by mirrors?
Correct:
http://sourceforge.net/forum/forum.php?forum_id=404052
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
another file in their database
directory or something.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
only see the one
process?
Regards,
Nick Beacroft
How are you checking for multiple threads? If using 'ps' make sure you
use the 'm' paramter (ie: "ps auxm"), or you can use `pidof clamd` too.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-8
it means something else
--
Kind regards,
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
He who controls the past, controls the future,
He who controls
problem went away, but i still get the
warning telling me to upgrade...
is there a release i am missing ??
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Afr
.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
He who controls the past, controls the future,
He who controls the present, controls the p
On Tuesday 19 October 2004 16:34, Trog shaped the electrons to say:
> On Tue, 2004-10-19 at 15:07, Scott Ryan wrote:
> > I saw on my monitoring application just now that clamav was outdated and
> > that i must update immediately. I was running 0.80rc3, and the moment I
> > g
On Tuesday 19 October 2004 16:38, Tomasz Kojm shaped the electrons to say:
> On Tue, 19 Oct 2004 16:09:54 +0200
>
> Scott Ryan <[EMAIL PROTECTED]> wrote:
> > ClamAV databases updated (2004.10.19 12:59 +): daily.cvd
> > version: 540
> >
> > Submi
d of clamdscan. We send/receive over a million mails a day and
the cpus were sitting at 100% constantly. The first thing i did was to change
to clamdscan and cpu usage dropped unbelievably.
--
+------+
(0> Scott Ryan
//\ Senior Unix/Linux Engine
27;s documentation, and then don't break it by
> linking clamdscan to clamscan.
>
> 2. If you want to use clamscan rather than clamdscan (for no reason,
> other then to send your CPU load to 100%, as per this thread), configure
> qmail-scanner to do so, it has a configure option f
Same here. We use qmail and find that 128Mb Raid controller for the queue dir
increase the I/O immensely. Reiserfs helps as well.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+
On Tuesday 26 October 2004 17:57, Jim Maul shaped the electrons to say:
> Scott Ryan wrote:
> > On Tuesday 26 October 2004 09:52, Trog shaped the electrons to say:
> >>On Tue, 2004-10-26 at 03:45, Eric Worthy wrote:
> >>>This is a vanilla install off qmailrocks.org s
On Tuesday 26 October 2004 18:47, Jim Maul shaped the electrons to say:
> Scott Ryan wrote:
>
>
>
> > What are we arguing about here? I just know in my experience that you are
> > seriously shooting yourself in the foot by using clamscan to scan all
> > mails. Trog&#
this issue is causing me a bit of
problem.
any help would be appreciated.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
He who controls the p
On Wednesday 27 October 2004 21:48, Todd Lyons shaped the electrons to say:
> Scott Ryan wanted us to know:
> >I am having a slight problem which appears to have stemmed from swapping
> > from tcp sockets to unix sockets. Every now and again, and across 5
> > identical servers
On Wednesday 27 October 2004 22:27, Todd Lyons shaped the electrons to say:
> Scott Ryan wanted us to know:
> >> How many threads do you have set in clamd.conf?
> >
> >Ah. This could very well be the issue. I have threads set to 200, but it
> > could be possible tha
if any of you are ever in South Africa, beers are on me.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_ Telkom Internet - South Africa
+--+
He who controls the past, controls the future,
He who
On Wed, 2004-11-03 at 09:48 +1300, Jason Haar wrote:
> Hi there
>
> I think the TCP option needs some more explicit documentation, as I have
> begun seeing RPMs of clamav where the Socket option is *disabled* and the
> TCP option is *enabled* as the defaults.
>
> As far as I'm aware, that is *not
..Zip module failure ERROR
It also may be worth noting that I get the following errors as well.
.MS CAB module failure ERROR
.omsa.net-2004.11.07.02.00.tar.gz: Input/Output error ERROR
.LibClamAV Error: cli_untar: unknown type flag X
.RAR module failure ERROR
Something to do with
that somthing happens to clamd and I would appreciate any
pointers or advise for further information if required.
Many Thanks
--
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
On Tuesday 30 November 2004 14:14, Trog wrote:
> On Tue, 2004-11-30 at 12:04, Scott Ryan wrote:
> > I am using clamdscan (clamav 0.80 - RHEL3) on 5 very intensively used
> > mail servers and generally, I have no issues and it works wonderfully.
> > But however, every now and
spamasssasin + clamav. Simscan reject spams and virus at smtp level which
> i dont feel there is a need to filter the spams. So maildrop is left out on
> this setup.
>
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo
On Wednesday 05 January 2005 14:59, Deon de Villiers wrote:
> Hi
>
> We are experiencing this as well.
>
> How stable is the current CVS version? Is it OK to use in a busy
> production environment? (I hope I am not asking a silly question...,
> but I need to get a fix for this asap).
We moved to
7;rtfm' and check the
clamscan man page :S
--
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
ytes):
> >
> > All the problem files I've had are Powerpoint and Word files. For the
> > Powerpoint files it was a common background image.
>
> P900\Beyonce Knowles - Crazy In Love (2).wav: Exploit.W32.MS05-002 FOUND
> p900\Evanescence - Bring Me To Life - Daredevil
> competition if they couldn't bully them or force them out some other
> way. They love that monopoly thing.
>
> Go get 'em Bill ! Lets see how many times your anti-virus solution
> crashes when you demo that at a show ;-) Yep I'd trust M$ with the
> security o
Can anyone shed some light on this / offer some advice, as obviously we want
to keep up with the latest stable version. I can provide the mail if anyone
wants to examine it further.
Many thanks
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi
ork around for these types of mails?
regards
--
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
On Wednesday 16 February 2005 17:34, Nigel Horne shaped the electrons to say:
> On Wednesday 16 Feb 2005 15:15, Scott Ryan wrote:
> > On Wednesday 16 February 2005 16:26, Nigel Horne shaped the electrons to
say:
> > > On Wednesday 16 Feb 2005 14:18, Ted Fines wrote:
> &
On Wednesday 16 February 2005 18:43, Tomasz Kojm shaped the electrons to say:
> On Wed, 16 Feb 2005 17:51:28 +0200
>
> Scott Ryan <[EMAIL PROTECTED]> wrote:
> > I will just have to allow these types of mails to go unscanned. Four
> > minutes to scan 1 will cause a DOS.
1 - 100 of 113 matches
Mail list logo
