Re: [Clamav-users] clamav-milter problem
Hi , I uncomment the line TCPSocket 3310 on /usr/local/etc/clamav.conf but when I run the command: /usr/local/sbin/clamav-milter -blo /var/run/clmilter.sock it says: connect: Connection refused Can't talk to clamd server at 127.0.0.1 on port 3310 Check your entry for TCPSocket in /usr/local/etc/clamav.conf --- I user Suse-2.4.7-SMP version on mainframe . Is there any problem with this port on this type of machine. -- by regards --Sophia Alikhani Odhiambo Washington wrote: * Alikhani <[EMAIL PROTECTED]> [20040110 09:47]: wrote: Hi all I am new that use clamav on my server suse-smp. I install clamav.0-65 , when I use this command : /usr/local/sbin/clamav-milter -blo /var/run/clmilter.sock it saya You must select server type (local/TCP) in /usr/local/etc/clamav.conf What must I do ? "You must select server type (local/TCP) in /usr/local/etc/clamav.conf" ;) Look at that file and comment out the line that has: TCPSocket 3310 (My recommendation). YMMV. cheers - wash +--+-+ Odhiambo Washington . WANANCHI ONLINE LTD (Nairobi, KE) | . 1ere Etage, Loita Hse, Loita St., | GSM: (+254) 722 743 223 . # 10286, 00100 NAIROBI | GSM: (+254) 733 744 121 . (+254) 020 313 985 - 9 | +-+--+ "Oh My God! They killed init! You Bastards!" --from a /. post --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Setting up Clamav-Milter correctly on RedHat Linux 8.0
On Monday 12 Jan 2004 5:36 am, STEPHEN_DAVID SCANLAN wrote: > I can't get clamav-milter to create a socket correctly. > I am particularly puzzled with the clamd errors. How can I tell if the > Daemon is running? > I don't see it with ps -aux Of the two problems you mention I suspect the second is the important issue. Two sockets are created, one by the milter framework to talk to clamav-milter, one by clamd for clamav-milter and clamdscan to talk to it. Since clamd isn't running you should concentrate your efforts in that area, not clamav-milter, clamav-milter won't start unless it finds a clamd to talk to. I suggest running clamd in the Foreground (see clamav.conf) and noting any errors that it gives. If that doesn't give you any guidance post the errors here and we'll see what we can do. -Nigel Horne -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter problem
On Monday 12 Jan 2004 7:19 am, Alikhani wrote: > Hi , > I uncomment the line TCPSocket 3310 on /usr/local/etc/clamav.conf but > when I run the command: > /usr/local/sbin/clamav-milter -blo /var/run/clmilter.sock > it says: > connect: Connection refused > Can't talk to clamd server at 127.0.0.1 on port 3310 > Check your entry for TCPSocket in /usr/local/etc/clamav.conf Have you started 'clamd' first? Does 'ps -ef' show it to be running? Have you tried using a UNIX domain socket rather than TCP/IP? -Nigel Horne -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] problem in updating virus db
Hi All, Below is the output of freshclam while updating virus db. I am running clamav on sparc solaris 8 machine. freshclam was doing fine for previous version of clamav (0.60) the problem comes after updating to version 0.65 --- ClamAV update process started at Mon Jan 12 05:06:38 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from database.clamav.net (212.162.12.159) ClamAV update process started at Mon Jan 12 05:08:56 2004 --- can any one help me on this ? Thank you. --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."
On Sun, Jan 11, 2004 at 05:50:38PM -0800, OpenMacNews wrote: > still no joy at 17:50 PST ... > -- On Sunday, January 11, 2004 8:05 PM -0500 "Christopher X. Candreva" > <[EMAIL PROTECTED]> wrote: > >On Sun, 11 Jan 2004, OpenMacNews wrote: > >>my db updates have *suddenly* stopped working after no prior > >>problems for ages. > >Same here for update at 19:50 EST (GMT -500) > >Rerunning at 20:03 is going very slowig -- about a minute so far at > >Reading CVD header (main.cvd): OK Same here. I suspect the 'very slowly' is a result of crontab entries around the world trying to successfully download the file from the mirrors over and over again... :-( mark -- [EMAIL PROTECTED]/[EMAIL PROTECTED]/[EMAIL PROTECTED] __ . . _ ._ . . .__. . ._. .__ . . . .__ | Neighbourhood Coder |\/| |_| |_| |/|_ |\/| | |_ | |/ |_ | | | | | | \ | \ |__ . | | .|. |__ |__ | \ |__ | Ottawa, Ontario, Canada One ring to rule them all, one ring to find them, one ring to bring them all and in the darkness bind them... http://mark.mielke.cc/ --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter problem
Hi Nigel Thank you very much for your help. I run clamd at first and the when I run clamav-milter it was OK. -- by regards -- Sophia Nigel Horne wrote: On Monday 12 Jan 2004 7:19 am, Alikhani wrote: Hi , I uncomment the line TCPSocket 3310 on /usr/local/etc/clamav.conf but when I run the command: /usr/local/sbin/clamav-milter -blo /var/run/clmilter.sock it says: connect: Connection refused Can't talk to clamd server at 127.0.0.1 on port 3310 Check your entry for TCPSocket in /usr/local/etc/clamav.conf Have you started 'clamd' first? Does 'ps -ef' show it to be running? Have you tried using a UNIX domain socket rather than TCP/IP? -Nigel Horne --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."
Just worked here after failing earlier in the day. Regards Mick Pollard ( lunix ) On Sun, 11 Jan 2004 23:44:29 -0500 (EST) "Christopher X. Candreva" <[EMAIL PROTECTED]> wrote: > On Mon, 12 Jan 2004, Payal Rathod wrote: > > > I updated my definitions just 1 mins back. They seem ok. > > -Payal > > 23:36 EST -- started to go like it was working, then it hung up about a > minute ago. > > == > Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 > WestNet Internet Services of Westchester > http://www.westnet.com/ > > > --- > This SF.net email is sponsored by: Perforce Software. > Perforce is the Fast Software Configuration Management System offering > advanced branching capabilities and atomic changes on 50+ platforms. > Free Eval! http://www.perforce.com/perforce/loadprog.html > ___ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
On Sun, 11 Jan 2004 at 16:45:30 -0500, jef moskot wrote: > Out of curiosity, what sort of viruses are typically being added to the > database? Are they mostly new viruses? Added are viruses which users submitted to us :-) . Or found by us. Of course we add new viruses as quickly as possible (they have priority higher than old ones). > Sometimes it's obvious when a user has submitted a large library of old > viruses, but in general it's tough to tell whether the latest crop of > updates have been recently discovered or if the project is just finally I wouldn't use the word "finally" about this :-). This is a process, not a one-time event. > catching up with a bunch of old and relatively rare viruses. > > I'm not making a judgement about what should be done, I'm just curious as > to what is actually happening. The newest, spreading viruses should be (and are) added qucker. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."
On Mon, 12 Jan 2004, Mick Pollard wrote: > Just worked here after failing earlier in the day. Checking the logs, updates started working at 4:50 AM this moring (Monday) == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/ --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."
On Sun, Jan 11, 2004 at 04:53:45PM -0800, OpenMacNews wrote : > hi, > > my db updates have *suddenly* stopped working after no prior problems > for ages. > > now, a: > >% /usr/local/clamav/bin/freshclam --log=/var/log/freshclam.log >--datadir=/var/clamav_db > > reports: > >ClamAV update process started at Sun Jan 11 16:50:28 2004 >Reading CVD header (main.cvd): OK >Downloading main.cvd [*] >ERROR: Verification: MD5 verification error. >Trying again... >ClamAV update process started at Sun Jan 11 16:50:54 2004 >Reading CVD header (main.cvd): OK >Downloading main.cvd [*] >ERROR: Verification: MD5 verification error. >Trying again... >ClamAV update process started at Sun Jan 11 16:51:06 2004 >Reading CVD header (main.cvd): OK >Downloading main.cvd [*] >ERROR: Verification: MD5 verification error. >Giving up... > > > > any ideas? > > richard As seen Mick Pollard, this problem was corrected with morning update. Best regards, /ddm -- Denis De Messemacker GnuPG Key-ID: 0x02787880 [EMAIL PROTECTED] http://www.e-labs.org [EMAIL PROTECTED] http://www.ClamAV.net - A GPL virus scanner --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] scan problem
I have a problem with clamscan. When I scan the test files it reports the correct number of infected files but when I scan a copy of the EICAR Standard Antivirus Test File, clamscan ignores it. Whats up? Bob Simpson --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] A few enhancements?
All- I was wondering, if after the mele last evening with the distribution of new defintions, if it would be possible to configure more control over the update process... Specifically, I'd like to think that if I had a mirror site geographically close (relatively) to me, that I would be more likely to use this mirror than one accross the globe... something of a priority listing a-la the NTP configuration tag... Secondly, is there a way to determine which version of the definitions are currently used in the system? Freshclam reports this information upon update, but I'd like this information available, if even in the 'freshclam -V' output... Thanks so much! Carl - -- "There are 10 types of people in the world: Those who understand binary and those that don't." $>whoami: Carl Holtje $>mail holtje: [EMAIL PROTECTED] $>cu: http://www.cs.rit.edu/~cwh0803 $>whois holtje: System Administrator Group Computer Science Department Rochester Institute of Technology $> --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] scan problem
On Mon, 12 Jan 2004 at 6:51:36 -0600, Robert L. Simpson wrote: > I have a problem with clamscan. When I scan the test files it reports the correct number of infected files but when I scan a copy of the EICAR Standard Antivirus Test File, clamscan ignores it. Whats up? Please, shorten lines length in your mail program. Which file, exactly? Don't send it to the list, of course :-). -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] A few enhancements?
On Mon, 12 Jan 2004 at 7:54:54 -0500, Carl Holtje ;021;vcsg6; wrote: > > I was wondering, if after the mele last evening with the distribution of > new defintions, if it would be possible to configure more control over the > update process... Specifically, I'd like to think that if I had a mirror > site geographically close (relatively) to me, that I would be more likely > to use this mirror than one accross the globe... something of a priority > listing a-la the NTP configuration tag... Maybe someone else will comment on this. > Secondly, is there a way to determine which version of the definitions are > currently used in the system? Freshclam reports this information upon > update, but I'd like this information available, if even in the 'freshclam > -V' output... $ sigtool -i /path/to/daily.cvd (main.cvd) -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] A few enhancements?
Carl Holtje ;021;vcsg6; wrote: All- I was wondering, if after the mele last evening with the distribution of new defintions, if it would be possible to configure more control over the update process... Specifically, I'd like to think that if I had a mirror site geographically close (relatively) to me, that I would be more likely to use this mirror than one accross the globe... something of a priority listing a-la the NTP configuration tag... Isn't that what mirros.txt is for? Or /usr/local/etc/freshclam.conf, on newer versions? Just change the first entry in mirrors.txt to your closest mirror. If you use freshclam.conf, just add another DatabaseMirror line before database.clamav.net. --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] clamav-milter compile problem
Hello, list! I can't compile clamav-milter on my FREE-BSD 4.4-RELEASE system :( Everything looks fine, except a few warnings about crypt, but no errors... clamav-milter itself isn't appears after make. Any ideas? p.s. sendmail compiled with milter - actually I run a drweb mail filter via it... //EyedMax --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter compile problem
On Monday 12 Jan 2004 3:31 pm, EyedMax wrote: > Hello, list! > p.s. sendmail compiled with milter - actually I run a drweb mail filter > via it... Running a milter from within sendmail (i.e. having a sendmail which supports mailters at runtime) is not the same as being able to build new milters. You will need to have the milter SDK for that. > //EyedMax -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] False positive on big files
Hi all, I have got some false positives but the files are too big for the form at http://www.nervous.it/~nervous/cgi-bin/sendvirus.cgi The false positives are occuring with boot disk images and iso files. The implicated signatures are : - HLLC.GodSquad - Constructor.Dos.DBCK - HLLO.C-Virus.4096 Any way to report them ? Thanks. Xavier POINSARD. --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter compile problem
Nigel Horne wrote: On Monday 12 Jan 2004 3:31 pm, EyedMax wrote: Hello, list! p.s. sendmail compiled with milter - actually I run a drweb mail filter via it... Running a milter from within sendmail (i.e. having a sendmail which supports mailters at runtime) is not the same as being able to build new milters. You will need to have the milter SDK for that. //EyedMax -Nigel H Sounds pretty good... "milter SDK" I don't wanna write my own milter filter... I just want to compile clamav-milter. //EyedMax --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: [Clamav-users]clamav-milter
>> At any rate, is there way to make clamav-milter produce a log or at least >> produce some output on the terminal screen? The man page for >>clamav-milter >> mentions a -x or --debug-level but these options are not recognized. >They are recognised if you recompile with CL_DEBUG. >It is already on my to do list to correct this inconsistency in the >documentation. What do the different debug levels log? Specifically, what log level only logs error? When enabling debug is there an option to direct the output to syslog? >> -Troy >-Nigel --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] RE: FD_SETSIZE error
I made the change to the sys/types.h and everything now works fine without any errors. Thanks... Marc S. Brooks Programmer/Systems Admin Tech Deck/Modifiers Cars/Skumm/X Concepts 975 Andreasen Escondido, CA 92029 760-740-2625 ph 760-740-2643 fx [EMAIL PROTECTED] > On Monday 29 Dec 2003 7:52 pm, Marc Brooks wrote: > > > I have recently installed Clamav w/ clamav-milter and everything seems to > > work o.k. > > Occasionally clamd will stop and the /var/messages logs the errors below. > > > > Dec 25 11:09:59 localhost clamav-milter: ClamAv: fd 2224 is larger than > > FD_SETSIZE 1024 > > This is a sendmail issue. As I understand it (and someone will no doubt > gleefully shout at me if I am wrong), the problem is that whilst the number of > file descriptors available per process is configurable on some operating systems (you > didn't state which you are using), sendmail uses hard coded Posix values. Look up > FD_SETSIZE in /usr/include and set you number of per process file descriptors to that, > restart the milter and then see what happens, on mine (Linux - Fedora Core 1) it is > 1024. > Please report back to here since it will be useful to include in the documentation. > > -Nigel > > -- > Nigel Horne. Arranger, Composer, Typesetter. > NJH Music, Barnsley, UK. ICQ#20252325 > > >-Original Message- >From: Marc Brooks >Sent: Mon, 29 Dec 2003 13:04:27 -0800 >To:'[EMAIL PROTECTED]' >Subject: FD_SETSIZE error > > Hello, > > I have recently installed Clamav w/ clamav-milter and everything seems to > work o.k. > Occasionally clamd will stop and the /var/messages logs the errors below. > > Dec 25 11:09:59 localhost clamav-milter: ClamAv: fd 2224 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:02 localhost clamav-milter: ClamAv: fd 2225 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:05 localhost clamav-milter: ClamAv: fd 2225 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:05 localhost clamav-milter: ClamAv: fd 2226 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:05 localhost clamav-milter: ClamAv: fd 2225 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:11 localhost last message repeated 3 times > Dec 25 11:10:11 localhost clamav-milter: ClamAv: fd 2226 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:13 localhost clamav-milter: ClamAv: fd 2225 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:33 localhost last message repeated 10 times > Dec 25 11:10:37 localhost clamav-milter: ClamAv: fd 2228 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:38 localhost last message repeated 2 times > Dec 25 11:10:38 localhost clamav-milter: ClamAv: fd 2229 is larger than > FD_SETSIZE 1024 > Dec 25 11:10:39 localhost clamav-milter: ClamAv: fd 2228 is larger than > FD_SETSIZE 1024 > Dec 25 11:11:08 localhost last message repeated 12 times > Dec 25 11:11:17 localhost clamav-milter: ClamAv: fd 2233 is larger than > FD_SETSIZE 1024 > Dec 25 11:11:49 localhost last message repeated 21 times > Dec 25 11:13:04 localhost last message repeated 50 times > Dec 25 11:13:04 localhost clamav-milter: ClamAv: fd 2234 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:04 localhost clamav-milter: ClamAv: fd 2233 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:37 localhost last message repeated 10 times > Dec 25 11:13:43 localhost last message repeated 5 times > Dec 25 11:13:43 localhost clamav-milter: ClamAv: fd 2234 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:43 localhost clamav-milter: ClamAv: fd 2235 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:46 localhost clamav-milter: ClamAv: fd 2233 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:48 localhost clamav-milter: ClamAv: fd 2233 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:48 localhost clamav-milter: ClamAv: fd 2234 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:48 localhost clamav-milter: ClamAv: fd 2233 is larger than > FD_SETSIZE 1024 > Dec 25 11:13:48 localhost clamav-milter: ClamAv: fd 2234 is larger than > FD_SETSIZE 1024 > Been pulling my hair out on this one. I realy don't understand why this is > happening. > Is this a file descriptor issue. If so what do I need to change to avoid > this issue in the future. > > Currently my # limit 's are: > > cputime unlimited > filesizeunlimited > datasize524288 kbytes > stacksize 65536 kbytes > coredumpsizeunlimited > memoryuse unlimited > vmemoryuse unlimited > descriptors unlimited > memorylockedunlimited > maxproc unlimited > sbsize unlimited > > Thanks in advance... > > M. Brooks > Sys Admin/Programmer --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinf
Re: [Clamav-users] problem in updating virus db
I'm just wondering if you have GMP on your machine? It's needed to verify the signatures of the new database files introduced with 0.65. /Peter Bonivart --Unix lovers do it in the Sun Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14, SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP Abyot Asalefew wrote: ClamAV update process started at Mon Jan 12 05:06:38 2004 ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from database.clamav.net (212.162.12.159) ClamAV update process started at Mon Jan 12 05:08:56 2004 --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
On Mon, 12 Jan 2004, Tomasz Papszun wrote: > Added are viruses which users submitted to us :-) . Or found by us. Well, yes, obviously, but could you maybe take a recent representative update and give us an idea of what the added viruses are like? Just so that we get an approximate feeling of what's going on. For example, you mentioned that the newest threats are added the most quickly, but I don't know if the last time you added an ancient virus was today or six months ago. I'm not asking for precise figures, just something a little more concrete than "we add old and new viruses". Jeffrey Moskot System Administrator [EMAIL PROTECTED] --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
Are you subscribed to clamav-virusdb? If not, try that first. /Peter Bonivart --Unix lovers do it in the Sun Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14, SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP jef moskot wrote: Well, yes, obviously, but could you maybe take a recent representative update and give us an idea of what the added viruses are like? Just so that we get an approximate feeling of what's going on. For example, you mentioned that the newest threats are added the most quickly, but I don't know if the last time you added an ancient virus was today or six months ago. I'm not asking for precise figures, just something a little more concrete than "we add old and new viruses". --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
On Mon, 2004-01-12 at 12:20, jef moskot wrote: > On Mon, 12 Jan 2004, Tomasz Papszun wrote: > > Added are viruses which users submitted to us :-) . Or found by us. > > Well, yes, obviously, but could you maybe take a recent representative > update and give us an idea of what the added viruses are like? Just so > that we get an approximate feeling of what's going on. are you on the clamav-virusdb mailing list? That would let you know pretty quickly. Tomasz Kojm sent out an update on Saturday with about 200 old viruses (main 15) Denis De Messemacker sent out an update of about 50 newer viri (daily 84) Diego d'Ambra sent out an update of 5 hot viruses (Dropper.Xombe.A, Trojan.Xombe.A, HTML_CITIFRAUD.A, and another damaged Swen) (daily 83). > > For example, you mentioned that the newest threats are added the most > quickly, but I don't know if the last time you added an ancient virus was > today or six months ago. > > I'm not asking for precise figures, just something a little more concrete > than "we add old and new viruses". > > Jeffrey Moskot > System Administrator > [EMAIL PROTECTED] > > > --- > This SF.net email is sponsored by: Perforce Software. > Perforce is the Fast Software Configuration Management System offering > advanced branching capabilities and atomic changes on 50+ platforms. > Free Eval! http://www.perforce.com/perforce/loadprog.html > ___ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users -- Daniel J McDonald <[EMAIL PROTECTED]> Austin Energy --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
On Mon, 12 Jan 2004, Daniel J McDonald wrote: > are you on the clamav-virusdb mailing list? Yes, but it doesn't say whether the viruses are old or new, and looking them up given the various names used and the quantity of updates is not very convenient. > Tomasz Kojm sent out an update on Saturday with about 200 old viruses > (main 15) Denis De Messemacker sent out an update of about 50 newer viri > (daily 84) Diego d'Ambra sent out an update of 5 hot viruses > (Dropper.Xombe.A, Trojan.Xombe.A, HTML_CITIFRAUD.A, and another damaged > Swen) (daily 83). Thanks, that puts things into a little perspective. I'm really just looking for a GENERAL idea. For example, if you had to explain to the average user what sort of viruses were being added to the database...is it MOSTLY new ones? MOSTLY old ones? About half and half? Would it be fair to say that when a new update comes out that it has likely been triggered by a recent discovery? Jeffrey Moskot System Administrator [EMAIL PROTECTED] --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: [Clamav-users]clamav-milter
On Monday 12 Jan 2004 6:06 pm, Internet Helpdesk wrote: > What do the different debug levels log? Specifically, what log level only > logs error? The higher the level the more that is debugged (-x9 debugs more than -x4). There is no logic to it, only what I needed to debug when developing the software. > When enabling debug is there an option to direct the output to syslog? Not yet. Though some debug messages honour UseSyslog. > >> -Troy -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
> Would it be fair to say that when a new update comes out that it has > likely been triggered by a recent discovery? In most cases yes, since it's a fairly young project and specialized for scanning e-mail it's not that interesting to pump up the number of recognized viruses like the commercial alternatives with boot sector floppy viruses from the 80's, it's what's in the wild that counts. However, last week 7000 signatures were added at once so I guess that must have been a lot of old ones. /Peter Bonivart --Unix lovers do it in the Sun Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14, SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Can't get viruses2.md5 sum from clamav.elektrapro.com
ERROR: Error while reading md5 sum of database from clamav.elektrapro.com ERROR: Can't get viruses2.md5 sum from clamav.elektrapro.com Someone knows what's happened? tks Mário --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
On Mon, Jan 12, 2004 at 01:56:47PM -0500, jef moskot wrote : [...] > > Thanks, that puts things into a little perspective. > > I'm really just looking for a GENERAL idea. For example, if you had to > explain to the average user what sort of viruses were being added to the > database...is it MOSTLY new ones? MOSTLY old ones? About half and half? > > Would it be fair to say that when a new update comes out that it has > likely been triggered by a recent discovery? > We have mainly two types of contributors: - ISP or domain administrators. All those people send mainly new versions of virii. With their help, we have newest viruses in very short time. I think we can say that we have samples of new spreading virii in record times. An example ? When the Sober.C worm began to spread, we received about 4 submissions in some hours. And many more after it was added to the database. > Submissions: 315, 316, 317, 321 > Senders: Christian Kühn, Peter Surda, Joerg Seyfried, Andreas Grundler > Virus name: Sober.C > Added: Worm.Sober.C Since submissions are checked many times a day, I think we can say that new viruses that were sent to us are added to database on a 1 day delay. - Independant or personal contributors: Can send various types of viruses. New, old ones, unknown, Trojans, etc. Some of them are crawling the www to find the virii we don't have. Their contributions are important since they submit mainly more uncommon viruses that ISP do not often receive. There are actually a _balance_ between old and new viruses we receive. But, as said T. Papszun, the newests ones have all our attention and are processed in first. In conclusion, and to answer your question, we receive actually a majority of current worms,trojans and viruses that are still in activity. Those are analysed on a fifo base. At any time, if fast spreading new virus is received, it preempts the other submissions. Hope this mail answers your questions. /ddm -- Denis De Messemacker GnuPG Key-ID: 0x02787880 [EMAIL PROTECTED] http://www.e-labs.org [EMAIL PROTECTED] http://www.ClamAV.net - A GPL virus scanner --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Can't get viruses2.md5 sum from clamav.elektrapro.com
At 08:07 AM 13/01/04, [EMAIL PROTECTED] wrote: >ERROR: Error while reading md5 sum of database from clamav.elektrapro.com >ERROR: Can't get viruses2.md5 sum from clamav.elektrapro.com > >Someone knows what's happened? I got the same log entry around midnight local time (GMT+11 with Daylight Savings Time :) - when I ran it manually this morning, it worked fine. As per the string of emails on a similar subject earlier in the list, it would appear that there was some delay with mirror updates and such (eg: MD5 file gets updated then the DB gets updated) that is now becoming visible/obvious due to the larger DB's taking longer to update (perhaps). Each morning when I review my machine's log entries (sent via email :) I manually try a "freshclam" if I see any update ERRORs. I only get worried about it if I can't get an update to work after trying for an entire day... Cheers, Grant - c2o Systems Administration and Technical Team Community Communications Online (c2o) www.c2o.org --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.560 / Virus Database: 352 - Release Date: 8/01/04
Re: [Clamav-users] type of viruses being added to database
At 11:02 AM 12/01/04, Flinn Mueller wrote: >Maybe a browsable virus database would be in order. Something ala >http://securityresponse.symantec.com/avcenter/. The description data >from sendvirus.cgi would need to go right in there. Anyone working on >something like this already? Even making accepting a link to a >commercial av's db entry would do a good job for tracking purposes for >the user. How about a community run WIKKI database. If a submission process was set up such that when a new virus signature was added to the DB an entry with the signature name was easily added to the WIKKI. A basic description can be provided (eg: that supplied when the virus was submitted, etc). This can then be enhanced as required by the community. If the resource is something the community wants, it can put a bit of time and effort into it to make it grow without having to significantly increase the workload of the ClamAV team. Cheers, Grant - c2o Systems Administration and Technical Team Community Communications Online (c2o) www.c2o.org --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.560 / Virus Database: 352 - Release Date: 8/01/04
Re: [Clamav-users] type of viruses being added to database
c2o Technical Support wrote: At 11:02 AM 12/01/04, Flinn Mueller wrote: >Maybe a browsable virus database would be in order. Something ala >http://securityresponse.symantec.com/avcenter/. The description data >from sendvirus.cgi would need to go right in there. Anyone working on >something like this already? Even making accepting a link to a >commercial av's db entry would do a good job for tracking purposes for >the user. How about a community run WIKKI database. If a submission process was set up such that when a new virus signature was added to the DB an entry with the signature name was easily added to the WIKKI. A basic description can be provided (eg: that supplied when the virus was submitted, etc). This can then be enhanced as required by the community. If the resource is something the community wants, it can put a bit of time and effort into it to make it grow without having to significantly increase the workload of the ClamAV team. Has anyone looked through the documentation/website licenses of the "big (money) players" like NAI, Sophos, Trend... ? For sure it'd be ok to _link to_ their sites, but maybe it's also possible to collect descriptions from their sites to build our own... I'm not sure if a WiKi would be a good idea, perhaps something like a "documentation team" (as loosely organized as we like) and some sql driven, searchable site would be better? Thomas --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
On Mon, 12 Jan 2004, Denis De Messemacker wrote: > In conclusion, and to answer your question, we receive actually a > majority of current worms,trojans and viruses that are still in activity. > Those are analysed on a fifo base. > At any time, if fast spreading new virus is received, it preempts the > other submissions. > > Hope this mail answers your questions. Thanks very much, it did. For what it's worth, the response time of the ClamAV team to new outbreaks is very often better than expensive commercial services, and is one of the main selling points of the system. Jeffrey Moskot System Administrator [EMAIL PROTECTED] --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
I don't see any reason to re-invent the wheel. If there are no legal or technical problems with linking to another commercial site, I think it makes more sense to just add an URL to our list, as opposed to generating fresh content for thousands of entries. Jeffrey Moskot System Administrator [EMAIL PROTECTED] --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
On Jan 12, 2004, at 7:48 PM, jef moskot wrote: I don't see any reason to re-invent the wheel. If there are no legal or technical problems with linking to another commercial site, I think it makes more sense to just add an URL to our list, as opposed to generating fresh content for thousands of entries. True. I do like the Wiki idea lot though. Jeffrey Moskot System Administrator [EMAIL PROTECTED] --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] problems with spamcop
As this is not a clamav-issue, this message should not be here. However, Fritz Mesedilla wrote: How come I got this message from spamcop that I am sending spam? Based on the Mail relay test on abuse.net, I am clean. Besides, I am protected by amavisd-new,clamav, and spamassassin. As a general rule, DNSBLs can pretty much block whatever they want. No software can 100% prevent you from being listed in at least one DNSBL. Looking at the link mentioned http://www.spamcop.net/w3m?i=z599828475z2238fb26fc967fc197f197a3717d2d94z "This report is concerning a web site (* http://www.mesedilla.com *) mentioned in the body of an unwanted email." which simple means that someone has submit a spam sample to SpamCop in which yor website was mentioned or linked. That's all. It does not say that you send spam, nor that it blocks your mail server in any way. Regards, Fajar A. Nugraha --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] type of viruses being added to database
Heya, At 01:27 PM 13/01/04, you wrote: >> I don't see any reason to re-invent the wheel. If there are no legal >> or >> technical problems with linking to another commercial site, I think it >> makes more sense to just add an URL to our list, as opposed to >> generating >> fresh content for thousands of entries. Agreed regarding "no legal problems" - wasn't sure how the "Big Guys" would like it to find us linking our entries to their descriptions :) If we can get away with it, just have the ability to enter links to one or more of the other DB's that describe what the virus does. Definitely save effort if we're able :) Cheers, Grant - c2o Systems Administration and Technical Team Community Communications Online (c2o) www.c2o.org --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.560 / Virus Database: 352 - Release Date: 8/01/04
RE: [Clamav-users] problems with spamcop
Sorry but it was through this mailing list that I got this message. I sent a message to this list [clamav-users] concerning freshclam update problems yesterday then after that I got this message from spamcop. Anyway, thanks for that clarification. Cheers, fritz --- + Basta Ikaw Lord -Original Message- From: Fajar A. Nugraha [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 13, 2004 1:29 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] problems with spamcop As this is not a clamav-issue, this message should not be here. However, Fritz Mesedilla wrote: >How come I got this message from spamcop that I am sending spam? >Based on the Mail relay test on abuse.net, I am clean. >Besides, I am protected by amavisd-new,clamav, and spamassassin. > > > As a general rule, DNSBLs can pretty much block whatever they want. No software can 100% prevent you from being listed in at least one DNSBL. Looking at the link mentioned >http://www.spamcop.net/w3m?i=z599828475z2238fb26fc967fc197f197a3717d2d94z > > > "This report is concerning a web site (* http://www.mesedilla.com *) mentioned in the body of an unwanted email." which simple means that someone has submit a spam sample to SpamCop in which yor website was mentioned or linked. That's all. It does not say that you send spam, nor that it blocks your mail server in any way. Regards, Fajar A. Nugraha --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender immediately by e-mail and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. Overture Media, Inc. Direct Line: (632) 635-4785 Trunkline: (632) 631-8971 Local 146 Fax: (632) 637-2206 Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 1100 --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] problems with spamcop
How come I got this message from spamcop that I am sending spam? Based on the Mail relay test on abuse.net, I am clean. Besides, I am protected by amavisd-new,clamav, and spamassassin. Cheers, fritz --- + Basta Ikaw Lord -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, 12 January 2004 11:49 AM To: Mags Castro Subject: [SpamCop (http://www.mesedilla.com) id:599828475]RE: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error." [ SpamCop V1.3.4 ] This message is brief for your comfort. Please use links below for details. Spamvertised website: http://www.mesedilla.com http://www.mesedilla.com is 202.138.137.106; Mon, 12 Jan 2004 08:11:37 GMT http://www.spamcop.net/w3m?i=z599828475z2238fb26fc967fc197f197a3717d2d94z -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender immediately by e-mail and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. Overture Media, Inc. Direct Line: (632) 635-4785 Trunkline: (632) 631-8971 Local 146 Fax: (632) 637-2206 Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 1100 --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
