* Tomasz Kojm ([EMAIL PROTECTED]) [071006 01:24] wrote: > On Wed, 3 Oct 2007 16:16:32 +0200 > Jacek Zapala <[EMAIL PROTECTED]> wrote: > > > My setup is sendmail with clamav-milter on 4 machines (freebsd 6.2 and 4.9, > > problem seen on 6.2) and remote clamd on 2 other (freebsd 6.2). > > clamav-0.91.2 (from ports). Actually, problem has been seen about two months > > ago, so version could be a bit lower (up to date in those days). > > > > My first guess is that during scanning of a clean file some signal from > > another thread/server scanning the real virus in the same time is somehow > > received and misinterpreted as a virus in a clean file. > > > > Any ideas how to track this down? > > Please post the output of clamconf
/usr/local/etc/clamd.conf: clamd directives ----------------- LogFile = "/var/log/clamav/clamd.log" LogFileUnlock = no LogFileMaxSize = 104857600 LogTime = yes LogClean = no LogVerbose = no LogSyslog = yes LogFacility = "LOG_MAIL" PidFile = "/var/run/clamav/clamd.pid" TemporaryDirectory not set ScanPE = yes ScanELF = yes DetectBrokenExecutables = no ScanMail = yes MailFollowURLs = no MailMaxRecursion = 64 PhishingSignatures = yes PhishingScanURLs = yes PhishingAlwaysBlockCloak = no PhishingAlwaysBlockSSLMismatch = no PhishingRestrictedScan = yes DetectPUA = no AlgorithmicDetection = yes ScanHTML = yes ScanOLE2 = yes ScanPDF = no ScanArchive = yes ArchiveMaxFileSize = 204800 ArchiveMaxRecursion = 8 ArchiveMaxFiles = 30 ArchiveMaxCompressionRatio = 250 ArchiveLimitMemoryUsage = no ArchiveBlockEncrypted = no ArchiveBlockMax = no DatabaseDirectory = "/var/db/clamav" TCPAddr = "aa.bb.cc.dd" TCPSocket = 3310 LocalSocket not set MaxConnectionQueueLength = 120 StreamMaxLength = 31457280 StreamMinPort = 1024 StreamMaxPort = 2048 MaxThreads = 30 ReadTimeout = 120 IdleTimeout = 30 MaxDirectoryRecursion = 10 FollowDirectorySymlinks = no FollowFileSymlinks = no ExitOnOOM = no Foreground = no Debug = no LeaveTemporaryFiles = no FixStaleSocket = yes User = "clamav" AllowSupplementaryGroups = yes SelfCheck = 1800 VirusEvent not set NodalCoreAcceleration = no ClamukoScanOnAccess not set ClamukoScanOnOpen not set ClamukoScanOnClose not set ClamukoScanOnExec not set ClamukoIncludePath not set ClamukoExcludePath not set ClamukoMaxFileSize = 5242880 /usr/local/etc/freshclam.conf: freshclam directives ----------------- LogVerbose = yes LogSyslog = no LogFacility = "LOG_LOCAL6" PidFile = "/var/run/clamav/freshclam.pid" DatabaseDirectory = "/var/db/clamav" Foreground = no Debug = no AllowSupplementaryGroups = yes DatabaseOwner = "clamav" Checks = 24 UpdateLogFile = "/var/log/clamav/freshclam.log" DNSDatabaseInfo = "current.cvd.clamav.net" DatabaseMirror = "db.pl.clamav.net" MaxAttempts = 3 ScriptedUpdates = yes HTTPProxyServer = "w3cache.xxxxx" HTTPProxyPort = 8080 HTTPProxyUsername not set HTTPProxyPassword not set HTTPUserAgent not set NotifyClamd = "/usr/local/etc/clamd.conf" OnUpdateExecute not set OnErrorExecute not set OnOutdatedExecute not set LocalIPAddress not set ConnectTimeout = 30 ReceiveTimeout = 30 _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net
