Ubuntu Security :: Real Time Email Virus Scanning In Lucid?
Jun 14, 2010
I am building a PC that dual boots Kubuntu and Windows and want to share the email store. Therefore, I would like to have real time or on access scanning of emails in an antivirus program like Windows does. I am not running an email server, just a desktop using pop3 and eventually imap email.
In previous Debian versions ClamAV and Dazuko used to do this. However, I understand that this setup doesn't work in Lucid. I tried p3scan but that hasn't been updated since 2008, once I managed to install it, it failed to find clamd even though it was running. I understand that clamdrib no longer works for Thunderbird 3. Amavisd as a replacement for p3scan, but this seems to be for mail servers.
I would be really grateful if anyone could tell me how to get on access/real time virus scanning of pop3 and imap emails on a desktop running Lucid with either Thunderbird 3 or Kmail, without having to buy an antivirus program like Avast Or point me to an existing tutorial that I might have missed.
As an aside (don't want much do I?) does anyone know if Kmail can be setup to only download the headers like Thunderbird does?
Unable to send mail thus adjust protocol port and it worked. Things moving slow on computer. Thus ran clamtk virus scanner. It found a virus. Tried to quarantine it but not successful. Have GUI version 4.15 Antivirus engine .95.3. Virus is located at /home/kim/.mozilla-thunderbird/zrlm4cOj.default/Mail/LocalFolders/Inbox Phishing.Heristics.Email.SpoofedDomain What do I do to get rid of it?
I have the latest release of Lucid Lynx installed. I want to try out audio recording on Linux so I want to know if it's possible to use a real time kernel with Lucid. So I installed the 2.6.31 real time kernel. It shows up in GRUB, but when I boot it gives me the message:
mounting none on /dev failed No such device
It then takes me to the login screen, and once I enter my password it just takes me back to the login.
install the latest real-time kernal into my current Lucid 10.04 distro? I know I could download and use Ubuntu Studio, but 1.7Gb is too much for my monthly download allowance to handle, especially when all I need it for is to address the major latency issues I have with Audacity.
Would I need to scan the (root /) directory with sudo clamtk or would running clamtk be sufficient? Theoretically, if Ubuntu did get a virus; would this virus try to establish itself in / rather than /home? Also is it correct to presume that to scan the /home directory; running sudo clamtk wont do any more than just running clamtk?
My Windows machine crashed, and I am at the mercy of my Ubuntu live-CD to solve all of my problems. I am backing up my data as I write this post. I was wondering two things: 1.) Is there a way to scan my Windows partition for viruses through the Ubuntu live-CD? I don't care much about repairing the partition, I just want to know what happened.
2.) And a few non-linux question: If I back up an infected file to an external hard disk, is it possible to infect another computer by merely connecting the disk to it? Is it possible that multiple, or all of my files have been infected? Is there a way I can open files safely on another (Windows) machine without (or at least minimalizing) fear of crashing it?
what the recommended way to set up real-time (or near real-time) folder synchronization among 2+ servers. I looked a rsync but that doesn't sound real-time and it looks like its something that you might put in a cron once an hour.
how to unblock email with attachment .zip should be all attachment through to my email i have below message when people sent me email to my domain
Warning: This message has had one or more attachments removed Warning: (the entire message). Warning: Please read the "Apex-Attachment-Warning.txt" attachment(s) for more information.
This is a message from the MailScanner E-Mail Virus Protection Service The original e-mail message contained potentially dangerous content, which has been removed for your safety. The content is dangerous as it is often used to spread viruses or to gain personal or confidential information from you, such as passwords or credit card numbers.
I have a dual boot computer. The WindowsXP "side" has been infected with a rootkit virus. So far UBUNTU has not been affected to my knowledge. I have not yet removed the virus from the WindowsXP "side". I am thinking of deleting the NTFS partition and have the computer fully dedicated to UBUNTU. Now for my question. Is there a possibility that the virus resides in the MBR and that I need to "rebuild" the MBR to actually remove the virus?
Even more extreme, should I totally re-install UBUNTU in the name of safety and precaution.
I am hosting two Virtual Servers both running Centos 5.3 on a host machine also running the same OS. The VM software in use is Xen, as supplied with the OS.The host machine's time and date is fine, however both Virtual Servers are running ahead of real time consitantly.Running /etc/init.d/ntpd restart will resolve the issue however one of these is running MailScanner and when the time suddenly goes backwards, sometimes by as much as an hour, it stops working properly.
I used the following command to get the unix time of root user creation:
Code: awk -F":" '$1 == "root" {print $3}' /etc/shadow How can i convert this into the date/time of creation?
I am writing a shell script, which determines the OS installation date among other stuff, and i am assuming the root user's account creation date should be a pretty accurate pointer. Are there reasons why i should not be assuming so?I would be open to other suggestion for getting this date/time, but it would nevertheless be interesting to convert the unix time to "real" time without doing complex manual(or otherwise) computation..
I have the eight Debian dvds listed in my sources.list, along with security, nonfree, and multimedia repositories. It does this for all eight dvds, re-scanning them for the update.These dvds have already been scanned (from the apt-cdrom add command). New updates are NOT going to suddenly appear on these already scanned dvds, so this is a completely unnecessary endeavour.Is there a way to stop this?It didn't happen with Lenny, and I'd like to stop it with Squeeze.
if I want to use an rt kernel in ubuntu studio, how do i use the kernel? say for instance, Ubuntu studio is installed with generic kernel.then i download the rt kernel.
I'm new in UBUNTU and would like to get a real-time antivirus.Maybe it's not necessary, but I still want it (I've got an iMAC and have installed an antivirus... ) So, please... which antivirus is good and in real-time (I mean that, if I try to open an infected file or go to a bad website, it stops it). Is KLAMav good and in Real time?
Just installed a real time kernel on my new computer so I can record music. My problem is that I have no GUI. I noted that I would not when fglrx drivers could not be installed/applied to the new kernel when installing it.
I run SSH on a publicly open server and see following attempts in /var/log/auth.log which I was told by some one could be port scanning attempts.(Not sure though)
Code: Nov 18 23:50:19 server sshd[21716]: Did not receive identification string from 186.0.80.197 Nov 19 00:05:57 server sshd[24056]: Did not receive identification string from 85.108.110.66
I was testing the security of my Ubuntu 10.04 64bit install by running a port scan from [URL] and I came upon some odd results. It appears that basically all my ports are closed, but only Port 646 is dropping packets silently. Furthermore, Port 80 is open.
I've been struggling with the problem of scanning an external drive that is used to store the backup from a Windows 7 machine. The Windows 7 machine was infected but the user continued to backup to the external drive. He has since formatted his machine and reinstalled Windows 7, but now he would like restore whatever he can from the backup on the external drive. I've been attempting to scan the external drive for viruses using ClamTK by connecting it to my laptop running Ubuntu 10.04, but it has not worked. There is supposed to be about 10 gigs of backed up data, but I haven't seen any. I don't know why it is not mounted.
Running qjackctl as root allows me to run the audio in realtime so it seems to be a permissions problem and it seems to me that lubuntu does not read the /etc/security/limits.d/audio.conf file when I boot.
I have been using Lucid Lynx for almost 2 weeks and have got everything working, thanks to the "ubuntu" spirit in this forum. Now I am ready to upgrade my Wubi install to its separate partition. I have searched the forum and googled to find a way to do this, but I am still stuck.
I used lvpm (despite knowing that there is no confirmation of its working on Lucid Lynx), it didn't work. The installation happened alright but it wasn't able to show up the login screen (GDM?). It was stuck around the screen before that (Xsplash?).
There is this thread http://ubuntuforums.org/showthread.php?t=438591 that explains this process very well but remains silent on Lucid Lynx version.
I am sure there must be many other first timers who wanted to get their feet wet the easy way using wubi and would like to make it "permament" OS on their computers.
Is there anyone who can suggest if :
1. There is any way I can still use lvpm to transfer wubi install to separate installation (Ubuntu 10.04 release) ?
I created filesystem XFS on partition hda8 with subvolume real-time on partition hda5: Code: mkfs.xfs -r rtdev=/dev/hda5 /dev/hda8 and i mounted it: Code: mount -t xfs -o rtdev=/dev/hda5 /dev/hda8 /xfs But I don't know how can I use this partition hda5 with subvolume real-time. I don't know how to create directories, copy files to it and another. Thanks for all answers!
EDIT:in manual it is writen: The realtime section is used to store the data of realtime files.These files had an attribute bit set through xfsctl(3) after file creation, before any data was written to the file.
This script puts a natural number 5 times a second.
3. Then in the second bash window I type (as root):
Code:
The script test2 looks as follows:
Code:
While true; do true; done
During the following 15 seconds test2 is the process with the highest real-time priority. As far as I know the script doesn't perform any system calls so it shouldn't be suspended even for a minimal timeslice. My question is: why the process test1 manages to put a few numbers on the screen before test2 stops. I thought that test2 would exclusivly own the processor for 15 seconds.
I have to write one Shell script where i have to find one word in current generated log.Log name has specific format like 'NAME_DDMMYY_HHMMSS'.log.Each time i have to go and check the word in newly generated log.How can i pass the newly generated log name in my Script?
I am currently using curlftps to mount a directory on a ftp server locally as /backup , I then use rsync to do an incremental backup to this directory every night and a full backup at the weekend.A requirement has arose for a similar set up but one that syncs in real time, so if a user puts a file in a directory it immediately copies that file to my ftp server, in this case it immediately copies it to /backup
I seed a suggesting related asychron io. I'm write a program which use completion ports, but wandor how avoiding loops like for(; below...i.e I want parse proto with count in first and then computing some quantity of pieces. how that make with aio?
I was wondering if there's a way for me to get real-time kernel support on regular Ubuntu 9.10 through some sort of update. I know Ubuntu Studio has a real-time kernel, but I'd prefer not to use it. I'm a fan of the original Ubuntu.
