search for: uvscan

Hello List, I'm struggling to install samba-vscan with nai uvscan backend, hope somebody could help me... So far, I could compile vscan-mcdaemon module and also insert the correct vfs object on my smb.conf, like this: vfs object = vscan-mcdaemon vscan-mcdaemon: config-file = /etc/samba/vscan-mcdaemon.conf I also checked that make install copied...

That's pretty much the question. I've got Symantec NAVCE running on my NT server protecting itself, the Windows clients and the Exchange server, but what do i do about my Linux based Samba server? Will a linux based AV app search for Win32 based viruses? Thanks, VeKTeReX

...urce, and I found one audit.c , on examples/VFS...it looks like a kind of logging on create/modify/delete/chmod files and create/delete/rename directories. Looking by this side, we could change the audit.c, and instead of logging this actions, it could exec one command like: "/usr/local/av/uvscan --parameters... %var" I really don't know how to do this ( In fact I'm trying to find some docs about C to see if I find the parameter needed to change the audit.c to execute other command ), and I will try to learn a bit of C to change, but I don't know if I will make it... So,...

Date: Fri, 31 Mar 2000 10:49:21 +0900 (JST) From: Steve Frampton <frampton@j-com.co.jp> To: Multiple recipients of list SAMBA <samba@samba.org> Subject: PC Virus scanning on *nix side? Message-ID: <Pine.LNX.4.21.0003311046390.7302-100000@firewall.j-com.co.jp> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi:

...gonna replace it with Debian amd64-stable and Xen 3.0. The Xen dom''s consists of: Samba , file printer sharing most active all 25 users all the time network io is a lot. Mail 25 users, + webmail + clamav + spamassassin + amavis Proxy squid + squidguard + willowbark (uvscan, which cooperates with the www who does the actual scanning) WWW www server for about 25 concurrent users, who access the some of the samba files. Not very IO heavy but some disk IO is involved. dom0 Full spec''s at bottom: The server is a (overkill but it...

ugh :) Today I became infected with the bliss virus, any info on this would be appreciated! How do I scan for files infected and is it possible to remove it? I first noticed the infection when running a program (not as root) messages flashed on the screen about transversing directories and such. The program (gimp) had been working fine since I downloaded the binary for gimp from their main

...lad to find someone with the same problem than I have right now. I encountered the problem by scanning 6 NT4-Server shares smbmounted in linux 2.0.33 (CONFIG_SMB_FS=y and CONFIG_SMB_W95=y in make config; smbmount v2.0.2, mounted as follows: smbmount //server/share directory -I IP) with McAfee's uvscan for Linux. Doing this I screwed up timestamps of thousands of files. It's a nightmare for me and the programmers, which have to correct at least the distributions which will be shipped to our customers. By the way - this happens with both - NT4 Enterprise Server and NT4 Standard Server with Se...

...s-inspection.de> Date: Thu, 1 Aug 2002 21:57:28 +0200 The original message is kept in: clavin.ut.caldera.com:/var/spool/qmailscan/quarantine where the System Anti-Virus Administrator can further diagnose it. The Email scanner reported the following when it scanned that message: --- ---uvscan results --- /var/spool/qmailscan/clavin.ut.caldera.com102823193036110597/1554628_4204bc2dcd_1_.exe Found the W32/Klez.h@MM virus !!! /var/spool/qmailscan/working/new/clavin.ut.caldera.com102823193036110597 Found the W32/Klez.eml virus !!! ---

...: Fri, 23 Apr 2004 10:18:00 -0300 A mensagem original foi armazenada em: perseus.aganp.go.gov.br:/var/spool/qmailscan/quarantine onde o Administrador de Segurança em Redes pode efetuar maiores diagnosticos nela. O scanner de Email reportou o seguinte enquanto varria a mensagem: --- ---uvscan results --- Scanning /var/spool/qmailscan/perseus.aganp.go.gov.br108272652940618258/* Scanning file /var/spool/qmailscan/perseus.aganp.go.gov.br108272652940618258/1082726533.18317-0.perseus.aganp.go.gov.br Scanning file /var/spool/qmailscan/perseus.aganp.go.gov.br108272652940618258/document.txt...

We are using samba to give our NT users access to our UNIX servers (running Solaris 2.5.1) and to give our UNIX users, using Wincenter, access to their UNIX directories. We want to be able to run a virus checker (Network Associates VirusScan) from a NT 4.0 workstation and have it check the samba (UNIX directories). Since we want to centralize this activity, I want to be"root" on the

...5.222.162]) by lists.samba.org (Postfix) with SMTP id 036A841AB for <samba@lists.samba.org>; Sat, 25 Aug 2001 10:44:34 -0700 (PDT) Received: (qmail 11903 invoked by uid 0); 25 Aug 2001 17:47:48 -0000 Received: from john@pmbbs.demon.co.uk by pluto.office.internal with qmail-scanner-0.96 (uvscan: v4.1.40/v4121. . Clean. Processed in 0.837916 secs); 25 Aug 2001 17:47:48 -0000 Received: from host217-32-112-4.in-addr.btopenworld.com (HELO john) (217.32.112.4) by pluto.office.internal with SMTP; 25 Aug 2001 17:47:47 -0000 Message-ID: <01c501c12d8f$3060ad60$fe00000a@john> From: &quo...

...04.191.23.254]) by lists.samba.org (Postfix) with SMTP id 525A6449A for <samba@lists.samba.org>; Thu, 31 May 2001 06:48:36 -0700 (PDT) Received: (qmail 29359 invoked by uid 1006); 31 May 2001 12:51:50 -0000 Received: from ndressler@dinmar.com by porky.dinmar.com with qmail-scanner-0.96 (uvscan: v4.1.40/v4130. . Clean. Processed in 0.192736 secs); 31 May 2001 12:51:50 -0000 Received: from inside52.dinmar.com (HELO ndrlaptop) (192.168.40.52) by bugs.dinmar.com with SMTP; 31 May 2001 12:51:50 -0000 From: "Norm Dressler" <ndressler@dinmar.com> To: "Matt Stevenson&quo...

...64.63.42.245]) by lists.samba.org (Postfix) with SMTP id 143635965 for <samba@lists.samba.org>; Fri, 24 Aug 2001 13:49:26 -0700 (PDT) Received: (qmail 31169 invoked by uid 517); 24 Aug 2001 20:56:38 -0000 Received: from kourosh@loop.com by hera.atlanticpearl.com with qmail-scanner-0.96 (uvscan: v4.1.40/v4155. . Clean. Processed in 0.332326 secs); 24 Aug 2001 20:56:38 -0000 Received: from (HELO ryoko.loop.com) () by hera.atlanticpearl.com with SMTP; 24 Aug 2001 20:56:38 -0000 Message-Id: <5.1.0.14.0.20010824135034.00aaf748@pop.loop.com> X-Sender: kourosh@pop.loop.com X-Mailer:...

...[64.63.42.245]) by lists.samba.org (Postfix) with SMTP id 93E9B52B4 for <samba@lists.samba.org>; Wed, 5 Sep 2001 23:04:51 -0700 (PDT) Received: (qmail 12861 invoked by uid 517); 6 Sep 2001 06:11:54 -0000 Received: from kourosh@loop.com by hera.atlanticpearl.com with qmail-scanner-0.96 (uvscan: v4.1.40/v4157. . Clean. Processed in 0.835642 secs); 06 Sep 2001 06:11:54 -0000 Received: from (HELO ryoko.loop.com) () by hera.atlanticpearl.com with SMTP; 6 Sep 2001 06:11:53 -0000 Message-Id: <5.1.0.14.0.20010905230048.0382c890@pop.loop.com> X-Sender: kourosh@pop.loop.com X-Mailer: Q...

...216.63.180.37]) by lists.samba.org (Postfix) with SMTP id 1E98A44D5 for <samba@lists.samba.org>; Thu, 9 Aug 2001 21:14:10 -0700 (PDT) Received: (qmail 16006 invoked by uid 104); 10 Aug 2001 03:43:24 -0000 Received: from barry@arhosting.com by dns1.arhosting.com with qmail-scanner-0.96 (uvscan: v4.1.50/v4147. . Clean. Processed in 1.024168 secs); 10 Aug 2001 03:43:24 -0000 Received: from unknown (HELO piii600) (10.10.5.2) by arhosting.com with SMTP; 10 Aug 2001 03:43:23 -0000 From: "Barry Smoke" <barry@arhosting.com> To: <samba@lists.samba.org> Subject: windows/...

...[204.191.23.254]) by lists.samba.org (Postfix) with SMTP id DCC0D4E74 for <samba@lists.samba.org>; Wed, 6 Jun 2001 06:25:15 -0700 (PDT) Received: (qmail 6096 invoked by uid 1006); 6 Jun 2001 12:27:45 -0000 Received: from ndressler@dinmar.com by porky.dinmar.com with qmail-scanner-0.96 (uvscan: v4.1.40/v4130. . Clean. Processed in 0.189777 secs); 06 Jun 2001 12:27:45 -0000 Received: from inside52.dinmar.com (HELO ndrlaptop) (192.168.40.52) by bugs.dinmar.com with SMTP; 6 Jun 2001 12:27:45 -0000 From: "Norm Dressler" <ndressler@dinmar.com> To: "Gerald Carter"...

...204.191.23.254]) by lists.samba.org (Postfix) with SMTP id CBE6A4720 for <samba@lists.samba.org>; Wed, 6 Jun 2001 09:04:49 -0700 (PDT) Received: (qmail 12603 invoked by uid 1006); 6 Jun 2001 15:07:19 -0000 Received: from ndressler@dinmar.com by porky.dinmar.com with qmail-scanner-0.96 (uvscan: v4.1.40/v4130. . Clean. Processed in 0.192847 secs); 06 Jun 2001 15:07:19 -0000 Received: from inside52.dinmar.com (HELO ndrlaptop) (192.168.40.52) by bugs.dinmar.com with SMTP; 6 Jun 2001 15:07:18 -0000 From: "Norm Dressler" <ndressler@dinmar.com> To: "Michael L Torrie&qu...

...64.63.42.245]) by lists.samba.org (Postfix) with SMTP id 2A35843E4 for <samba@lists.samba.org>; Fri, 27 Jul 2001 10:29:29 -0700 (PDT) Received: (qmail 30456 invoked by uid 517); 27 Jul 2001 17:39:53 -0000 Received: from kourosh@loop.com by hera.atlanticpearl.com with qmail-scanner-0.96 (uvscan: v4.1.40/v4144. . Clean. Processed in 0.340355 secs); 27 Jul 2001 17:39:53 -0000 Received: from (HELO ryoko.loop.com) () by hera.atlanticpearl.com with SMTP; 27 Jul 2001 17:39:53 -0000 Message-Id: <5.0.2.1.0.20010727102531.03a64740@pop.loop.com> X-Sender: kourosh@pop.loop.com X-Mailer: Q...

...ect=subscribe> List-Id: General questions regarding Samba <samba.lists.samba.org> List-Unsubscribe: <http://lists.samba.org/mailman/listinfo/samba>, <mailto:samba-request@lists.samba.org?subject=unsubscribe> List-Archive: http://lists.samba.org/pipermail/samba/ Fernando I use uvscan to scan my linux and solaris samba box. It is from MacAfee (NAI) and use the same pc4s DAT files. I think you can download a trial version from: http://www.nai.com/naicommon/buy-try/try/products-evals.asp search for "McAfee VirusScan for Unix" I use crontab to scan samba servers at a gi...

...[64.63.42.245]) by lists.samba.org (Postfix) with SMTP id C05C94EA9 for <samba@lists.samba.org>; Thu, 6 Sep 2001 13:43:07 -0700 (PDT) Received: (qmail 15754 invoked by uid 517); 6 Sep 2001 20:51:30 -0000 Received: from kourosh@loop.com by hera.atlanticpearl.com with qmail-scanner-0.96 (uvscan: v4.1.40/v4157. . Clean. Processed in 0.549892 secs); 06 Sep 2001 20:51:30 -0000 Received: from (HELO ryoko.loop.com) () by hera.atlanticpearl.com with SMTP; 6 Sep 2001 20:51:30 -0000 Message-Id: <5.1.0.14.0.20010906134904.03cb5008@pop.loop.com> X-Sender: kourosh@pop.loop.com X-Mailer: Q...