 | | | virus scanner | virus scanner 2004-02-04 - By Graeme Nichols
Back
On Thu, 2004-01-29 at 11:53, Rick Stevens wrote:
> Mark Knecht wrote:
> > On Wed, 2004-01-28 at 09:36, Rick Stevens wrote:
> >
> > >Mick Mearns wrote:
> > >
> > > >Hello list;
> > > > with the new MS virus out 'n about I am looking for recommendations on a
> > > >scanner.
> > > >Is there one that uses Nortons definitions that runs under Linux?
> > > >I want to scan the families Win98se partition.
> > > >We do not use any MS mail programs, or address books.
> > > >
> > > >I want to do a stand alone scan.
> > >
> > >ClamAV (www.clamav.net) is one I use.
> >
> >
> > Imagine my surprise. I 've just started checking this out today and
> > here 's Rick recommending it.
>
> Hey, it works for my sendmail system! It ties in well and it 's
> fast (I handle 12-18M messages a day--I need SPEED!).
>
> > Question - how do I set this up on my workstation to work with
> > Evolution? I 'm not running any mail servers. Currently Evolution just
> > goes to my ISP to get mail.
>
> Good question. Looking at Evolution, it appears you could set up
> a wildcard filter that runs clamscan on each message, and depending on
> clamscan 's result code (0=clean, 1=virus), do something with it.
>
> You could also use "fetchmail " to get your mail and have procmail call
> clamscan for you. Then have Evolution pick up the mail from your
> local mailbox.
>
> I don 't use Evolution that much (hardly ever, actually). I generally
> use Mozilla Mail or fetchmail/Mozilla.
You will find all your Evolution mail under
~/evolution/local/(your_folders). Each folder has a file called mbox
which contains the text of all your emails. The uses for the other files
will be obvious. Simply clamscan -r ~/evolution should do the trick. It
appears to work for me. Runs to conclusion, puts up the summary, all OK.
Now I have a question....
I ran it to just scan my home directory, [graeme@(protected) Memories]$
clamscan --debug /home/graeme, not recursively, and it appeared to stop
for a while so I ^C to stop it and run it in debug mode which resulted
in the following error a couple of times.
LibClamAV debug: in cli_scangzip()
LibClamAV debug: Gzip- >desc(4): Size exceeded (stopped at 10485760, max:
10485760)
It carried on to completion and the summary but there was another
instance after the above of the first error line in the above, if I make
myself perfectly clear :-)
Is this something to worry about? What is it trying to tell me?
Another fairly important question... how does one obtain updated virus
signature files?
--
Kind regards,
Graeme Nichols
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- --
Faith is under the left nipple.
-- Martin Luther
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- --
- IMPORTANT. -
- The contents of this email and any attachments, which may be con- -
- fidential, are sent for the personal attention of the addressee/s -
- only. If you receive this email and are not the intended addressee -
- please inform the sender and delete this email immediately. Use, -
- copying, disclosure or forwarding of the contents of this email -
- and/or any attachment/s is not authourised. -
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- --
|
|
|