Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Francesco Giordano]

Which flags have I to use in the statment rpm to install this packages? Have 
I remove before older?
Thank you.
_
Sig. Francesco Maria Giordano
Consiglio Nazionale delle Ricerche
Istituto per lo Studio dei Materiali Nanostrutturati
Sezione di Palermo
Via Ugo La Malfa 153
90146 Palermo - Italy

voice +39 091 68 09 358
fax   +39 091 68 09 399


-- Original Message ---
From: Krištof Petr <[EMAIL PROTECTED]>
To: ClamAV users ML 
Sent: Thu, 10 Feb 2005 18:41:40 +0100
Subject: Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

> Francesco Giordano wrote:
> 
> >Thank you a lot for your reply, but I'd like to use rpm. Can you help me? 
> >Thank you. 
> >  
> >
> 
> I did a quick rebuild of clamav-devel-20050210 as testing rpm for FC2
> 
> http://crash.fce.vutbr.cz/crash-hat/testing/2/clamav/
> 
> You can try it.
> 
> Petr
> 
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
--- End of Original Message ---

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Krištof Petr]

Francesco Giordano wrote:
Which flags have I to use in the statment rpm to install this packages? Have 
I remove before older?
Thank you.
 

rpm -Uvh new_packages.rpm will be enought. Look at 'man rpm' for details.
Petr
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] MailList Question!

[xterm1]

smime.p7m
Description: S/MIME encrypted message
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] MailList Question!

[Bogusław Brandys]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

xterm1 wrote:
>   
>   Has the list been quiet or do I have an error somewhere!
> 
>   Brian
> 
> 
> 
> 
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Hello :-)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCDJUituGICzHOh+YRAqOmAJ9Jz8nS+X0o/D5zFpDTiqEWQYaiPACfUwGF
alsLXVBJ8ZC6iFj6Y9eNQDs=
=2J7y
-END PGP SIGNATURE-
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] MailList Question!

[Odhiambo Washington]

* xterm1 <[EMAIL PROTECTED]> [20050211 13:59]: wrote:
>   
>   Has the list been quiet or do I have an error somewhere!
> 
>   Brian


Clamav has caught all viruses, so we are on holiday - Virus Holiday;)

-Wash

http://www.netmeister.org/news/learn2quote.html

--
+==+
|\  _,,,---,,_ | Odhiambo Washington<[EMAIL PROTECTED]>
Zzz /,`.-'`'-.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
   |,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
  '---''(_/--'  `-'\_) | GSM: +254 722 743223   +254 733 744121
+==+
Somewhere, just out of sight, the unicorns are gathering.
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Francesco Giordano]

this statment have problem with dependences. Have I to add --nodeps? Thank 
you.
P.s.: when you add the new release yum update will work normally?

_
Sig. Francesco Maria Giordano
Consiglio Nazionale delle Ricerche
Istituto per lo Studio dei Materiali Nanostrutturati
Sezione di Palermo
Via Ugo La Malfa 153
90146 Palermo - Italy

voice +39 091 68 09 358
fax   +39 091 68 09 399


-- Original Message ---
From: Krištof Petr <[EMAIL PROTECTED]>
To: ClamAV users ML 
Sent: Fri, 11 Feb 2005 11:45:01 +0100
Subject: Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

> Francesco Giordano wrote:
> 
> >Which flags have I to use in the statment rpm to install this packages? 
Have 
> >I remove before older?
> >Thank you.
> >  
> >
> 
> rpm -Uvh new_packages.rpm will be enought. Look at 'man rpm' for details.
> 
> Petr
> 
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
--- End of Original Message ---

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Clive Messer]

For the benefit of anyone else having issues '451' issues with the 
clamav-0.82-1 RPMS, and as suggested earlier, it would seem to be the fact 
that the clamav-milter.c is using 'SESSION' by default when running with 
'--external' that is causing the problem. I've been good for 24 hours now 
since rebuilding the SRPM with '#undef SESSION'. Perhaps SESSION should not 
have been enabled by default.

Regards

Clive
-- 
Clive Messer <[EMAIL PROTECTED]>
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Francesco Giordano]

So I can restart clamav-milter without --external to resolve the problem? Is 
it sure?
Thank you!

_
Sig. Francesco Maria Giordano
Consiglio Nazionale delle Ricerche
Istituto per lo Studio dei Materiali Nanostrutturati
Sezione di Palermo
Via Ugo La Malfa 153
90146 Palermo - Italy

voice +39 091 68 09 358
fax   +39 091 68 09 399


-- Original Message ---
From: Clive Messer <[EMAIL PROTECTED]>
To: ClamAV users ML 
Sent: Fri, 11 Feb 2005 12:37:40 +
Subject: Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

> For the benefit of anyone else having issues '451' issues with the 
> clamav-0.82-1 RPMS, and as suggested earlier, it would seem to be 
> the fact that the clamav-milter.c is using 'SESSION' by default when 
> running with '--external' that is causing the problem. I've been 
> good for 24 hours now since rebuilding the SRPM with '#undef 
> SESSION'. Perhaps SESSION should not have been enabled by default.
> 
> Regards
> 
> Clive
> -- 
> Clive Messer <[EMAIL PROTECTED]>
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
--- End of Original Message ---

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Clive Messer]

On Friday 11 Feb 2005 13:42, Francesco Giordano wrote:

Francesco,

> So I can restart clamav-milter without --external to resolve the problem?

Well, I'm not a guru, but if you remove '--external' the problem will go away, 
by virtue of the fact that it is no longer using the clam daemon. That's one 
way of resolving it. My preference would be to rebuild with '#undef SESSION' 
to revert to the old non-SESSION behaviour when the milter talks to clamd.

Regards

Clive
-- 
Clive Messer <[EMAIL PROTECTED]>
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[George Chelidze]

Seems devel-20050209 and devel-20050210 contain the same 
clamav-milter.c. AFAIK the problem is with clamav-milter, so it wouldn't 
help. Anyway, I'll give it a try...

Nigel Horne wrote:
On Thursday 10 Feb 2005 16:52, George Chelidze wrote:

Try 0.82c or later.
which snapshot corresponds to 0.82c? I have tried devel-20050209 and
problem is still there, at least on my box.

Try tonight's.
-Nigel
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
--
George Chelidze
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Clive Messer]

On Friday 11 Feb 2005 14:24, George Chelidze wrote:

> Seems devel-20050209 and devel-20050210 contain the same
> clamav-milter.c. AFAIK the problem is with clamav-milter, so it wouldn't
> help. Anyway, I'll give it a try...

FC3 rpms rebuilt with clamav-milter.c '#undef SESSION'

http://www.vacuumtube.org.uk/clamav/clamav-0.82-1.2.i386.rpm
http://www.vacuumtube.org.uk/clamav/clamav-milter-0.82-1.2.i386.rpm
http://www.vacuumtube.org.uk/clamav/clamav-devel-0.82-1.2.i386.rpm

SRC RPM (with session-undef.patch)

http://www.vacuumtube.org.uk/clamav/clamav-0.82-1.2.src.rpm

Clive
-- 
Clive Messer <[EMAIL PROTECTED]>
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Francesco Giordano]

and FC2?

_
Sig. Francesco Maria Giordano
Consiglio Nazionale delle Ricerche
Istituto per lo Studio dei Materiali Nanostrutturati
Sezione di Palermo
Via Ugo La Malfa 153
90146 Palermo - Italy

voice +39 091 68 09 358
fax   +39 091 68 09 399


-- Original Message ---
From: Clive Messer <[EMAIL PROTECTED]>
To: ClamAV users ML 
Sent: Fri, 11 Feb 2005 14:37:57 +
Subject: Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

> On Friday 11 Feb 2005 14:24, George Chelidze wrote:
> 
> > Seems devel-20050209 and devel-20050210 contain the same
> > clamav-milter.c. AFAIK the problem is with clamav-milter, so it wouldn't
> > help. Anyway, I'll give it a try...
> 
> FC3 rpms rebuilt with clamav-milter.c '#undef SESSION'
> 
> http://www.vacuumtube.org.uk/clamav/clamav-0.82-1.2.i386.rpm
> http://www.vacuumtube.org.uk/clamav/clamav-milter-0.82-1.2.i386.rpm
> http://www.vacuumtube.org.uk/clamav/clamav-devel-0.82-1.2.i386.rpm
> 
> SRC RPM (with session-undef.patch)
> 
> http://www.vacuumtube.org.uk/clamav/clamav-0.82-1.2.src.rpm
> 
> Clive
> -- 
> Clive Messer <[EMAIL PROTECTED]>
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
--- End of Original Message ---

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[George Chelidze]

Hello Clive,
Clive Messer wrote:
On Friday 11 Feb 2005 14:24, George Chelidze wrote:

Seems devel-20050209 and devel-20050210 contain the same
clamav-milter.c. AFAIK the problem is with clamav-milter, so it wouldn't
help. Anyway, I'll give it a try...

FC3 rpms rebuilt with clamav-milter.c '#undef SESSION'
I don't use FC3, neither rpms. I compile it from source. Both sources 
(mentioned above) seems to contain the same clamav-milter.c code, so why 
the last should work and the first not. #define SESSION /*bla bla bla*/ 
is commented in both of them so I think it's the same as #undef SESSION, 
isn't it?

http://www.vacuumtube.org.uk/clamav/clamav-0.82-1.2.i386.rpm
http://www.vacuumtube.org.uk/clamav/clamav-milter-0.82-1.2.i386.rpm
http://www.vacuumtube.org.uk/clamav/clamav-devel-0.82-1.2.i386.rpm
SRC RPM (with session-undef.patch)
http://www.vacuumtube.org.uk/clamav/clamav-0.82-1.2.src.rpm
Clive
Best Regards,
--
George Chelidze
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Clive Messer]

On Friday 11 Feb 2005 14:53, George Chelidze wrote:

Hi George,

> I don't use FC3, neither rpms. I compile it from source. Both sources
> (mentioned above) seems to contain the same clamav-milter.c code, so why
> the last should work and the first not. #define SESSION /*bla bla bla*/
> is commented in both of them so I think it's the same as #undef SESSION,
> isn't it?

I don't know. What I do know is that I had the issue when I installed 
clamav-0.82 from the RPM which originally had 'SESSION' defined eg.

LibClamAV Warning: Session 0 has gone down
LibClamAV Warning: Session 0 restarted OK
LibClamAV Warning: Session 1 has gone down
LibClamAV Warning: Session 1 restarted OK
LibClamAV Warning: Session 2 has gone down
LibClamAV Warning: Session 2 restarted OK
LibClamAV Warning: Session 3 has gone down
LibClamAV Warning: Session 3 restarted OK
LibClamAV Warning: Session 4 has gone down
LibClamAV Warning: Session 4 restarted OK
LibClamAV Warning: Session 5 has gone down
LibClamAV Warning: Session 5 restarted OK
LibClamAV Warning: Session 6 has gone down
LibClamAV Warning: Session 6 restarted OK
LibClamAV Warning: Session 7 has gone down
LibClamAV Warning: Session 7 restarted OK
LibClamAV Warning: Session 8 has gone down
LibClamAV Warning: Session 8 restarted OK
LibClamAV Warning: Session 9 has gone down
connect: Network is unreachable
connect: Connection refused
connect: Connection timed out
Wed Feb  9 13:29:23 2005 -> ERROR: ScanStream: accept timeout.
Wed Feb  9 13:29:23 2005 -> ERROR: ScanStream: accept timeout.

Since rebuilding clamav-0.82 with '#undef SESSION' I no longer have a clamd 
log full of errors and a maillog full of ... eg. 
'sb75g2 sendmail[14264]: j18J8ro6014264: Milter: data, reject=451
 4.3.2 Please try again later'. 

Milter and clamd were restarted 27 hours ago after rebuild with '#undef 
SESSION'. No errors since. If '#undef SESSION' does not explain that then I 
really don't know. YMMV.

Regards

Clive
-- 
Clive Messer <[EMAIL PROTECTED]>
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[George Chelidze]

Dear Clive,
Clive Messer wrote:
On Friday 11 Feb 2005 14:53, George Chelidze wrote:
Hi George,

I don't use FC3, neither rpms. I compile it from source. Both sources
(mentioned above) seems to contain the same clamav-milter.c code, so why
the last should work and the first not. #define SESSION /*bla bla bla*/
is commented in both of them so I think it's the same as #undef SESSION,
isn't it?

I don't know. What I do know is that I had the issue when I installed 
clamav-0.82 from the RPM which originally had 'SESSION' defined eg.

LibClamAV Warning: Session 0 has gone down
LibClamAV Warning: Session 0 restarted OK
LibClamAV Warning: Session 1 has gone down
LibClamAV Warning: Session 1 restarted OK
LibClamAV Warning: Session 2 has gone down
LibClamAV Warning: Session 2 restarted OK
LibClamAV Warning: Session 3 has gone down
LibClamAV Warning: Session 3 restarted OK
LibClamAV Warning: Session 4 has gone down
LibClamAV Warning: Session 4 restarted OK
LibClamAV Warning: Session 5 has gone down
LibClamAV Warning: Session 5 restarted OK
LibClamAV Warning: Session 6 has gone down
LibClamAV Warning: Session 6 restarted OK
LibClamAV Warning: Session 7 has gone down
LibClamAV Warning: Session 7 restarted OK
LibClamAV Warning: Session 8 has gone down
LibClamAV Warning: Session 8 restarted OK
LibClamAV Warning: Session 9 has gone down
connect: Network is unreachable
connect: Connection refused
connect: Connection timed out
Wed Feb  9 13:29:23 2005 -> ERROR: ScanStream: accept timeout.
Wed Feb  9 13:29:23 2005 -> ERROR: ScanStream: accept timeout.
Since rebuilding clamav-0.82 with '#undef SESSION' I no longer have a clamd 
log full of errors and a maillog full of ... eg. 
'sb75g2 sendmail[14264]: j18J8ro6014264: Milter: data, reject=451
 4.3.2 Please try again later'. 

Milter and clamd were restarted 27 hours ago after rebuild with '#undef 
SESSION'. No errors since. If '#undef SESSION' does not explain that then I 
really don't know. YMMV.
I understand your point. I have just replied to Nigel who adviced me to 
use devel-20050210 and stated that I think it wouldn't help as it's the 
same code of clamav-miter.c. Anyway, it's up and running and waiting for 
a new db update to hang it or pass through, who knows:)

Regards
Clive
Best Regards,
--
George Chelidze
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Perl scripts for sorting log virus entries - [clamstat] version 0.40

[Brett Simpson]

I have an updated set of Perl scripts that now tie into a Mysql database. So 
if you have multiple Mail servers and/or you want to query for past virus 
statistics then this is it.

Three main sets of scripts are provided do the following:
push.pl - Puts the virus log entries into a table
source_virus_count.pl - Command line script for showing the past 24 hours of 
virus statistics
Webmin module - Graphical view of statistics with the ability to query on a 
date range. Also has Bar and Pie charts.

This version lacks Amavis support and must have a Mysql database.

Check out this screen shot. 
http://www.hillsboroughcounty.org/images/clamstat.png

Thanks,
Brett


clamstat.tar.gz
Description: application/tgz
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] crash-hat clamav-milter keeps dieing....

[R. Scott Baer]

First my apologies for not replying correctly to this e-mail... I had 
mail delivers off.., so this e-mail will break the threading 
capabilities for this thread.

Moving on...
Petr, I tried the below files, and when I try to start the clamd service 
I get the following error.

Starting Clam AV daemon: LibClamAV Error: Can't load 
/var/lib/clamav/daily.cvd: Broken or not a CVD file

the file is present, -rw-r--r-r , but empty.
Scott
*Author: *Krištof Petr
*Date: * 2005-02-10 13:09 -500
*To: *ClamAV users ML
*Subject: *Re: [Clamav-users] crash-hat clamav-milter keeps dieing
R. Scott Baer wrote:
/
> The clamav-milter keeps dieing, I believe. What is happening is when
> I try to send mail.. thurnderbird will just sit there and spin its
> wheels
> If I restart the (only) clamav-milter, the mail flys threw.
> OS: FC1
> Crashat
> clamd: clamav-0.82-1
> clamav-milter: clamav-milter-0.82-1
> sendmail: sendmail-8.12.10-1.1.1
>
> /var/log/clamd/clamd.log:
> ERROR: ScanStream: accept timeout. <--- a lot of these/
Try clamav-devel-20050210 snaphot
http://crash.fce.vutbr.cz/crash-hat/testing/1/clamav/
Petr
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Clive Messer]

On Friday 11 Feb 2005 15:32, George Chelidze wrote:

Hi George,

> I understand your point. I have just replied to Nigel who adviced me to
> use devel-20050210 and stated that I think it wouldn't help as it's the
> same code of clamav-miter.c. Anyway, it's up and running and waiting for
> a new db update to hang it or pass through, who knows:)

Well, you got me thinking about whether I have had a db update since I 
restarted, so I just forced it by zapping daily.cvd .

[freshclam.log]
main.cvd is up to date (version: 29, sigs: 29086, f-level: 3, builder: tomek)
daily.cvd updated (version: 704, sigs: 1579, f-level: 4, builder: trog)
Database updated (30665 signatures) from db.gb.clamav.net (IP: 193.1.219.100)
Clamd successfully notified about the update.

[clamd.log]
Fri Feb 11 15:49:20 2005 -> Reading databases from /var/lib/clamav
Fri Feb 11 15:49:21 2005 -> Database correctly reloaded (30665 viruses)

[sendmail.log]
Feb 11 15:51:07 sb75g2 sendmail[1354]: j1BFp61W001354: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.82, clamav-milter version 0.82 on localhost
Feb 11 15:51:07 sb75g2 sendmail[1354]: j1BFp61W001354: Milter add: header: 
X-Virus-Status: Clean

So I would seem to be fine. Fingers crossed. ;)

Clive
-- 
Clive Messer <[EMAIL PROTECTED]>
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] crash-hat clamav-milter keeps dieing....

[Krištof Petr]

R. Scott Baer wrote:
First my apologies for not replying correctly to this e-mail... I had 
mail delivers off.., so this e-mail will break the threading 
capabilities for this thread.

Moving on...
Petr, I tried the below files, and when I try to start the clamd 
service I get the following error.

Starting Clam AV daemon: LibClamAV Error: Can't load 
/var/lib/clamav/daily.cvd: Broken or not a CVD file

the file is present, -rw-r--r-r , but empty.

I did forget about one fact. Devel snapshot comes with empty db files.
Solution is to remove these files by hand and restart freshclam.
Sorry for that.
Seems the 0.82 is buggy in same way as 0.81 was. I will try to remake
needed patches (no-session, false-possitive, etc.) and rebuild
packages on next days (not tonight).
Petr
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Deleting temporary files

[Jamie Saunders]

Hi all,
I've recently installed clamav along with qmail-scanner on RedHat 9. 
Everything's working fine except that clamav is taking up all disk space 
on '/tmp with it's temporary database update files. As soon as '/tmp' is 
full it cannot download any more updates and spits out an error which 
prevents qmail from delivering any mail. I've currently setup a daily 
cron job to clear out all clamav-* folders on '/tmp', but I'm hoping 
there's a way of changing how clamav handles temporary files in it's 
configuration.  Any help much appreciated.

--
Jamie
[EMAIL PROTECTED]
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Jim Maul]

Jamie Saunders wrote:
Hi all,
I've recently installed clamav along with qmail-scanner on RedHat 9. 
Everything's working fine except that clamav is taking up all disk space 
on '/tmp with it's temporary database update files. As soon as '/tmp' is 
full it cannot download any more updates and spits out an error which 
prevents qmail from delivering any mail. I've currently setup a daily 
cron job to clear out all clamav-* folders on '/tmp', but I'm hoping 
there's a way of changing how clamav handles temporary files in it's 
configuration.  Any help much appreciated.

Sounds like debugging is enabled.
-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Jamie Saunders]

Jim Maul wrote:
Jamie Saunders wrote:
Hi all,
I've recently installed clamav along with qmail-scanner on RedHat 9. 
Everything's working fine except that clamav is taking up all disk 
space on '/tmp with it's temporary database update files. As soon as 
'/tmp' is full it cannot download any more updates and spits out an 
error which prevents qmail from delivering any mail. I've currently 
setup a daily cron job to clear out all clamav-* folders on '/tmp', 
but I'm hoping there's a way of changing how clamav handles temporary 
files in it's configuration.  Any help much appreciated.

Sounds like debugging is enabled.
-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Debugging is turned off in clamd.conf.  Here is the directory structure 
of one of the clamav folders in /tmp:

clamav-e3b114abc93db32
   |
   --- COPYING (17992)
   |
   --- main.db (3794792)
   |  
   --- main.hdb (136626)
   |
   --- main.ndb (30528)

It looks to me like these are virus database files.  They are all owned 
by the user 'apache' which seems a little strange to me.

Jamie
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Reject -> 451 4.3.2 Please try again later

[Clive Messer]

On Friday 11 Feb 2005 14:53, Francesco Giordano wrote:

Francesco,

> and FC2?

If you have rpmbuild installed you can try ...

'rpmbuild --rebuild 
http://www.vacuumtube.org.uk/clamav/clamav-0.82-1.3.src.rpm'

... to build FC2 RPMS yourself. This contains two patches to the original 
clamav-0.82-1. 

#
* Fri Feb 11 2005 Clive Messer 0.82-1.3

- Add patch to resolve Exploit.W32.MS05-002 False Positives
- Only scan animated icons

* Fri Feb 11 2005 Clive Messer 0.82-1.2

- Add patch to undef SESSION in clamav-milter.c

#

Or wait for KriÅtof Petr to make the 'official' updates. Today he said, 'I 
will try to remake needed patches (no-session, false-positive, etc.) and 
rebuild packages on next days (not tonight).'

Sorry, but I do not have a FC2 environment to build the RPMS for you.

Regards

Clive
-- 
Clive Messer <[EMAIL PROTECTED]>
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Jim Maul]

Jamie Saunders wrote:
Jim Maul wrote:
Jamie Saunders wrote:
Hi all,
I've recently installed clamav along with qmail-scanner on RedHat 9. 
Everything's working fine except that clamav is taking up all disk 
space on '/tmp with it's temporary database update files. As soon as 
'/tmp' is full it cannot download any more updates and spits out an 
error which prevents qmail from delivering any mail. I've currently 
setup a daily cron job to clear out all clamav-* folders on '/tmp', 
but I'm hoping there's a way of changing how clamav handles temporary 
files in it's configuration.  Any help much appreciated.

Sounds like debugging is enabled.
-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Debugging is turned off in clamd.conf.  Here is the directory structure 
of one of the clamav folders in /tmp:

clamav-e3b114abc93db32
   |
   --- COPYING (17992)
   |
   --- main.db (3794792)
   | --- main.hdb (136626)
   |
   --- main.ndb (30528)
It looks to me like these are virus database files.  They are all owned 
by the user 'apache' which seems a little strange to me.

Jamie

Virus database files would be owned by the user that freshclam is 
running as.  So unless you are running clamav as 'apache' then i dont 
see how these tmp files could be created by clamav.

The other weird thing is that you should .db and .ndb files.  Clamav 
doesnt use these files by default.  In the more recent versions its 
using .cvd files.

Who is clamav running as?  Did you compile clamav from source or did you 
 use rpm, etc?

-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Openbsd port?

[Penny Rand]

I'm running Openbsd 3.6, can't seem to find a port for clamav-0.82. When I
try to install from the version I downloaded I get stops in the make
process, specifically;

collect2: ld returned 1 exit status
*** Error code 1

Stop in /root/clamav-0.82/clamscan (line 291 of Makefile).
*** Error code 1

Stop in /root/clamav-0.82 (line 351 of Makefile).
*** Error code 1

Stop in /root/clamav-0.82 (line 216 of Makefile).


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

RE: [Clamav-users] Openbsd port?

[LOYET Jérôme]

Check in the archive of openbsd port mailing list or clamav-users mailing
list, a port has been submited.

++ jerome

> -Message d'origine-
> De : [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] De la part de Penny Rand
> Envoyé : vendredi 11 février 2005 18:53
> À : 'ClamAV users ML'
> Objet : [Clamav-users] Openbsd port?
> 
> I'm running Openbsd 3.6, can't seem to find a port for clamav-0.82. When I
> try to install from the version I downloaded I get stops in the make
> process, specifically;
> 
> collect2: ld returned 1 exit status
> *** Error code 1
> 
> Stop in /root/clamav-0.82/clamscan (line 291 of Makefile).
> *** Error code 1
> 
> Stop in /root/clamav-0.82 (line 351 of Makefile).
> *** Error code 1
> 
> Stop in /root/clamav-0.82 (line 216 of Makefile).
> 
> 
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Jamie Saunders]

Jim Maul wrote:
Jamie Saunders wrote:
Jim Maul wrote:
Jamie Saunders wrote:
Hi all,
I've recently installed clamav along with qmail-scanner on RedHat 
9. Everything's working fine except that clamav is taking up all 
disk space on '/tmp with it's temporary database update files. As 
soon as '/tmp' is full it cannot download any more updates and 
spits out an error which prevents qmail from delivering any mail. 
I've currently setup a daily cron job to clear out all clamav-* 
folders on '/tmp', but I'm hoping there's a way of changing how 
clamav handles temporary files in it's configuration.  Any help 
much appreciated.

Sounds like debugging is enabled.
-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Debugging is turned off in clamd.conf.  Here is the directory 
structure of one of the clamav folders in /tmp:

clamav-e3b114abc93db32
   |
   --- COPYING (17992)
   |
   --- main.db (3794792)
   | --- main.hdb (136626)
   |
   --- main.ndb (30528)
It looks to me like these are virus database files.  They are all 
owned by the user 'apache' which seems a little strange to me.

Jamie

Virus database files would be owned by the user that freshclam is 
running as.  So unless you are running clamav as 'apache' then i dont 
see how these tmp files could be created by clamav.

The other weird thing is that you should .db and .ndb files.  Clamav 
doesnt use these files by default.  In the more recent versions its 
using .cvd files.

Who is clamav running as?  Did you compile clamav from source or did 
you  use rpm, etc?

-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
I've confirmed that clamav is running as qscand and is accessing the 
normal .cvd database files.  I remembered looking into a module for PHP 
that utilised the clamav api called, surprisingly enough, php-clamav 
.  I'm assuming this module was 
compiled against an older version of clamav which uses the .db files.  
If this is the cause of the mysterious temp files I don't want to simply 
disable the module as it's been used in a webmail PHP script.  However, 
I'm still no nearer to undestanding why these files are appearing in 
/tmp, where they're coming from and why they aren't being removed.

Jamie
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Jim Maul]

Jamie Saunders wrote:
I've confirmed that clamav is running as qscand and is accessing the 
normal .cvd database files.  I remembered looking into a module for PHP 
that utilised the clamav api called, surprisingly enough, php-clamav 
.  I'm assuming this module was 
compiled against an older version of clamav which uses the .db files.  
If this is the cause of the mysterious temp files I don't want to simply 
disable the module as it's been used in a webmail PHP script.  However, 
I'm still no nearer to undestanding why these files are appearing in 
/tmp, where they're coming from and why they aren't being removed.

Well that would explain why they are owned by apache.  I tried checking 
out the link to php-clam you posted but the homepage 
(http://software.fotopic.net/) has no mention whatsoever about php-clam 
and there isnt a whole lot of info on the freshmeat page so its 
difficult to find out why this is happening.  Regardless, i dont believe 
its anything related to clamav directly.  Is there a php-clam list 
somewhere?

-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Jamie Saunders]

Jim Maul wrote:
Jamie Saunders wrote:
I've confirmed that clamav is running as qscand and is accessing the 
normal .cvd database files.  I remembered looking into a module for 
PHP that utilised the clamav api called, surprisingly enough, 
php-clamav .  I'm assuming 
this module was compiled against an older version of clamav which 
uses the .db files.  If this is the cause of the mysterious temp 
files I don't want to simply disable the module as it's been used in 
a webmail PHP script.  However, I'm still no nearer to undestanding 
why these files are appearing in /tmp, where they're coming from and 
why they aren't being removed.

Well that would explain why they are owned by apache.  I tried 
checking out the link to php-clam you posted but the homepage 
(http://software.fotopic.net/) has no mention whatsoever about 
php-clam and there isnt a whole lot of info on the freshmeat page so 
its difficult to find out why this is happening.  Regardless, i dont 
believe its anything related to clamav directly.  Is there a php-clam 
list somewhere?

-Jim
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
I agree, I was pretty certain this problem was related to the php 
module, and now it seems we were right.  I sent an e-mail to the address 
on the freshmeat site and this is the reply I received (very quickly I 
might add):

   "I did wonder if this'd be an issue tbh.
   Basically, libclamav shuffles things over to /tmp for some reason
   (not 100% sure why). I'll email the clamav dev team and see what
   they can suggest.
   For now, you may want to add a crontab line that does a find over
   /tmp for any files older than say 2-3 days and rm's them. Bit of a
   hack, I know - but until I work out the "right" way to cure this,
   it'll be best to hack it."
This was obviously an oversight by a developer somewhere along the line, 
I'm hoping they can come up with a fix.  Thanks for your help Jim.

Jamie
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Tomasz Kojm]

On Fri, 11 Feb 2005 18:58:28 +
Jamie Saunders <[EMAIL PROTECTED]> wrote:

> "I did wonder if this'd be an issue tbh.
> 
> Basically, libclamav shuffles things over to /tmp for some reason
> (not 100% sure why). I'll email the clamav dev team and see what
> they can suggest.

He should search his software for a call to:

void cl_settempdir(const char *dir, short leavetemps);

and set the second argument to 0.

-- 
   oo. Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Fri Feb 11 19:59:00 CET 2005


pgpXH3EciAwp2.pgp
Description: PGP signature
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Deleting temporary files

[Jamie Saunders]

Tomasz Kojm wrote:
He should search his software for a call to:
void cl_settempdir(const char *dir, short leavetemps);
and set the second argument to 0.
Thanks, I'll forward it on to him.
Jamie
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Perl scripts for sorting log virus entries - [clamstat] version 0.41

[Brett Simpson]

I have an updated set of Perl scripts that now tie into a Mysql database. So 
if you have multiple Mail servers and/or you want to query for past virus 
statistics then this is it.

Three main sets of scripts are provided do the following:
push.pl - Puts the virus log entries into a table
source_virus_count.pl - Command line script for showing the past 24 hours of 
virus statistics
Webmin module - Graphical view of statistics with the ability to query on a 
date range. Also has Bar and Pie charts.

This version lacks Amavis support and must have a Mysql database.

Check out this screen shot. 
http://www.hillsboroughcounty.org/images/clamstat.png

Changes since 0.40:
Corrected Refresh bug on PNG images
Fixed Database creation script
Added ability to select year on push.pl script
Added a server pie chart
Added in code to ensure hours, days, months come out in proper dated order

Thanks,
Brett


clamstat.tar.gz
Description: application/tgz
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Is anyone using Michael Lang's SquidClamAV Redirector ?

[Joanna Roman]

If so you, have you encountered the following errors
?/

Feb 11 14:50:37 localhost SquidClamAV: Unable to get
Size from Url
http://home.netscape.com/bookmark/7_2/home.html:
[Errno socket error] timed out
Feb 11 14:50:37 localhost SquidClamAV: Ignored Request
http://home.netscape.com/bookmark/7_2/home.html
127.0.0.1/localhost.localdomain - GET
Feb 11 14:50:37 localhost SquidClamAV: Unable to get
Size from Url
http://home.netscape.com/bookmark/7_2/home.html:
[Errno socket error] (111, 'Connection refused')
Feb 11 14:50:37 localhost SquidClamAV: Ignored Request
http://home.netscape.com/bookmark/7_2/home.html
127.0.0.1/localhost.localdomain - GET
Feb 11 14:50:37 localhost SquidClamAV: Unable to get
Size from Url http://www.yahoo.com/: [Errno socket
error] (111, 'Connection refused')
Feb 11 14:50:37 localhost SquidClamAV: Ignored Request
http://www.yahoo.com/ 12.1.1.100/- - GET
Feb 11 14:50:37 localhost SquidClamAV: Unable to get
Size from Url
http://home.netscape.com/bookmark/7_2/home.html:
('http error', 503, 'Service Unavailable',
)
Feb 11 14:50:37 localhost SquidClamAV: Ignored Request
http://home.netscape.com/bookmark/7_2/home.html
12.1.1.100/- - GET
Feb 11 14:50:37 localhost SquidClamAV: Unable to get
Size from Url
http://home.netscape.com/bookmark/7_2/home.html:
('http error', 503, 'Service Unavailable',
)




__ 
Do you Yahoo!? 
Yahoo! Mail - 250MB free storage. Do more. Manage less. 
http://info.mail.yahoo.com/mail_250
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users