Re: [Clamav-users] Error libclamav.so.6

[Ed Kasky]

At 07:58 PM Sunday, 6/28/2009, you wrote -=>

Dear all,

I tried to install ClamAV to OpenSuSE 11.1. Installation progress 
was OK, but got error while running :


Clambox:/usr/src # freshclam
freshclam: error while loading shared libraries: libclamav.so.6: 
cannot open shared object file: No such file or directory

Clambox:/usr/src # clamd
clamd: error while loading shared libraries: libclamav.so.6: cannot 
open shared object file: No such file or directory


Would you advise me why the libclamav.so.6 unable to be accessed?

Thank you very much for your help

wong


I had to run ldconfig after the latest install.  Whenever you see 
that error, first see if the lib file exists and then run ldconfig - 
et voila


HTH,

Ed

...

Randomly Generated Quote (213 of 1543):
"To climb steep hills requires slow pace at first."
 - William Shakespeare

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Error libclamav.so.6

[Ed Kasky]

When you rebooted, it created the necessary link.  You could have 
just run ldconfig and it more than likely would have solved the 
problem.  From the man page:


ldconfig creates the necessary links and cache to the most recent 
shared libraries found in the directories specified on the command 
line, in the file /etc/ld.so.conf, and in the trusted directories 
(/lib and /usr/lib). The cache is used by the run-time linker, ld.so 
or ld-linux.so. ldconfig checks the header and filenames of the 
libraries it encounters when determining which versions should have 
their links updated.


Ed
At 09:03 PM Sunday, 6/28/2009, you wrote -=>

Hi Dennis,

Here what I found

Clambox:~ # ldd /usr/local/bin/freshclam
   linux-gate.so.1 =>  (0xe000)
   libclamav.so.6 => /usr/local/lib/libclamav.so.6 (0xb7ed7000)
   libdl.so.2 => /lib/libdl.so.2 (0xb7ed2000)
   libz.so.1 => /lib/libz.so.1 (0xb7ebd000)
   libresolv.so.2 => /lib/libresolv.so.2 (0xb7ea7000)
   libpthread.so.0 => /lib/libpthread.so.0 (0xb7e8c000)
   libc.so.6 => /lib/libc.so.6 (0xb7d3)
   /lib/ld-linux.so.2 (0xb7fa2000)
Clambox:~ # ls /usr/local/lib/libclamav.so.6
/usr/local/lib/libclamav.so.6

FYI, after restarting SuSE the problem has gone by itself. Good 
result but makes me confuse :(


Wong


- Original Message - From: "Dennis Peterson" 
To: "ClamAV users ML" 
Sent: Monday, June 29, 2009 11:43
Subject: Re: [Clamav-users] Error libclamav.so.6



Wong wrote:

Yes Jim, it is in /usr/local/lib

Thx & Rgds,

Wong


In a terminal window go to the directory where the application is 
(freshclam) and run the ldd (list dynamic dependancies) command:


ldd freshclam

This will tell you what libraries are needed and where freshclam is 
looking for them. It may be necessary to use LD_LIBRARY_PATH or 
ldconfig to help freshclam find the needed libraries.


dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml



___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


...

Randomly Generated Quote (810 of 1543):
It depends on what the meaning of the word "is" is.
  - President Clinton, during his grand jusry testimony

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] RLIMIT_DATA

[Ed Kasky]

At 10:05 AM Tuesday, 9/21/2010, Clayton Keller wrote -=>



How I can change the RLIMIT_DATA??


ulimit -d

Best regards,
--Edwin


Edwin, can this warning safely be ignored, or should we look at
modifying this value, even on non-FreeBSD systems?

Clay


Sorry to answer my own post.

I've gone ahead and added the following into my startup script:

ulimit -d 200

A ulimit -f 4 follows.

Would this be the preferred method for many of those on the list to 
handle these settings?


I googled the error and came up with the following:

ulimit -d 2097151 added just before clamd in the init script will 
keep things just below the 2GB threshold


I just added it myself and got rid of the error onstartup.

HTH...

Ed Kasky
~
Randomly Generated Quote (491 of 1230):
Every great achievement was once considered impossible.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] What's broken?

[Ed Kasky]

It's working now:

# /usr/local/bin/freshclam --config-file=/etc/freshclam.conf -l 
/var/log/clamav/clam-update.log --daemon-notify=/etc/clamd.conf
ClamAV update process started at Tue Apr 10 19:04:32 2007
main.inc is up to date (version: 43, sigs: 104500, f-level: 14, builder: sven)
daily.inc is up to date (version: 3065, sigs: 3293, f-level: 14, builder: sven)

At 06:55 PM Tuesday, 4/10/2007, Don Drake wrote -=>
>I'm seeing the same thing.  Even my ClamWin puked.
>
>-Don
>
>On 4/10/07, Dennis Peterson <[EMAIL PROTECTED]> wrote:
> >
> > Has the ClamAV backbone died?
> >
> > Trying host db.us.clamav.net (129.64.99.170)...
> > nonblock_connect: connect timing out (30 secs)

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (162 of 1211):
"Opportunities multiply as they are seized."
- Sun Tzu

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Sourcefire acquires ClamAV

[Ed Kasky]

At 04:00 AM Friday, 8/17/2007, Tomasz Kojm wrote -=>
>Dear ClamAV users,
>
>On August 17, Sourcefire, the creators of Snort, acquired the ClamAV project.
>
>What's most important is that from the end-user perspective very little will
>change beyond the additional resources Sourcefire will provide in our
>continued efforts to advance the ClamAV technology and improve our ability to
>interact with the open source community. The core team will continue to lead
>the advancement of ClamAV and the CVD as employees of Sourcefire. Both the
>ClamAV engine and the signature database will remain under GPL.

Until they start charging for current updates, etc. like they do with Snort...

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (729 of 1261):
It's always darkest just before the lights go out.
 -- Alex Clark

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Sourcefire acquires ClamAV

[Ed Kasky]

At 07:53 AM Friday, 8/17/2007, Tomasz Kojm wrote -=>
>On Fri, 17 Aug 2007 05:26:14 -0700
>Ed Kasky <[EMAIL PROTECTED]> wrote:
>
> > >lead the advancement of ClamAV and the CVD as employees of Sourcefire.
> > >Both the ClamAV engine and the signature database will remain under GPL.
> >
> > Until they start charging for current updates, etc. like they do with
> > Snort...
>
>Hi Ed,
>
>you should rest assured that the virus database will stay GPL and will be
>distributed the same way as so far, Sourcefire has no intention of changing
>this.

Tomasz,

Thanks for the clarification.  I am just so used to these things 
changing based on the quantity of beans the acquiring company needs 
to stay afloat.  And not that I am against anyone making a buck.  We 
all need to pay the bills.  I would just hate to see another great 
open source project get squeezed for a few bucks.

I also hope you guys made some money on the deal or will at least in 
the future base don the work you will be doing for them.  thanks 
again for a great tool.

Ed Kasky
~
Randomly Generated Quote (308 of 568):
For all our conceits about being the center of the universe, we live in a
routine planet of a humdrum star stuck away in an obscure corner ... on an
unexceptional galaxy which is one of about 100 billion galaxies. ... That
is the fundamental fact of the universe we inhabit, and it is very good for
us to understand that. -Carl Sagan, astronomer and writer (1934-1996)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] announcing ClamAV 0.92

[Ed Kasky]

At 07:01 AM Monday, 12/17/2007, you wrote -=>

>Dear ClamAV users,
>
>This release provides various bugfixes, optimisations and improvements
>to the scanning engine. The new features include support for ARJ and
>SFX-ARJ archives, AutoIt, basic SPF parser in clamav-milter (to reduce
>phishing false-positives), faster scanning and others (see ChangeLog).
>To get a consistent behaviour of the anti-phishing module on all platforms,
>libclamav now includes the regex library from OpenBSD.

And don't forget to run ldconfig after updating.  I got the following:

Starting clamav-milter: clamav-milter: error while loading shared 
libraries: libclamav.so.3: cannot open shared object file: No such 
file or directory

Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (542 of 1319):
Fortune and love befriend the bold.
 -- Ovid

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] announcing ClamAV 0.92

[Ed Kasky]

At 09:09 PM Monday, 12/17/2007, Steven Stern wrote -=>
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA1
>
>On 12/17/2007 08:05 PM, Ed Kasky wrote:
> > At 07:01 AM Monday, 12/17/2007, you wrote -=>
> >
> >> Dear ClamAV users,
> >>
> >> This release provides various bugfixes, optimisations and improvements
> >> to the scanning engine. The new features include support for ARJ and
> >> SFX-ARJ archives, AutoIt, basic SPF parser in clamav-milter (to reduce
> >> phishing false-positives), faster scanning and others (see ChangeLog).
> >> To get a consistent behaviour of the anti-phishing module on all 
> platforms,
> >> libclamav now includes the regex library from OpenBSD.
> >
> > And don't forget to run ldconfig after updating.  I got the following:
> >
> > Starting clamav-milter: clamav-milter: error while loading shared
> > libraries: libclamav.so.3: cannot open shared object file: No such
> > file or directory
> >
> > Ed
>
>I saw ldconfig run during the make process.
>
>- --
>
>   Steve

I saw the following during "make install"

(cd /usr/local/lib && { ln -s -f libclamav.so.3.0.3 libclamav.so || { 
rm -f libclamav.so && ln -s libclamav.so.3.0.3 libclamav.so; }; })

and

PATH="$PATH:/sbin" ldconfig -n /usr/local/lib

However, for some reason, on FC6, I had to manually update the lib links...

Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (295 of 1319):
A hermit is a deserter from the army of humanity.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] announcing ClamAV 0.92

[Ed Kasky]

At 09:36 PM Monday, 12/17/2007, Mark wrote -=>
>-Original Message-
>[mailto:[EMAIL PROTECTED] On Behalf Of Ed Kasky
>Sent: dinsdag 18 december 2007 6:28
> > > Starting clamav-milter: clamav-milter: error while loading
> > > shared libraries: libclamav.so.3: cannot open shared object
> > > file: No such file or directory
> > >
> > > Ed
> >
> > I saw the following during "make install"
> >
> >(cd /usr/local/lib && { ln -s -f libclamav.so.3.0.3 libclamav.so || {
> > rm -f libclamav.so && ln -s libclamav.so.3.0.3 libclamav.so; }; })
>
>Hmm, maybe because milter is looking for libclamav.so.3, whereas
>symlinks seems to be made for libclamav.so.3.0.3 only?
>http://lurker.clamav.net/list/clamav-users.html

Actually, both clamd and clamav-milter complained...

Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (315 of 1319):
A man who carries a cat by its tail learns something he can learn
in no other way.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] TK53 Advisory #2: Multiple vulnerabilities in ClamAV

[Ed Kasky]

At 06:07 AM Monday, 12/31/2007, you wrote -=>
>Chris wrote:
>>Saw this link at SANS today, anything to it?
>>
>>http://seclists.org/fulldisclosure/2007/Dec/0625.html
>>
>>Or is this a rehash of something already known about
>I'm attaching a patch for it, so you can patch and rebuild your version.
>
>
>--- libclamav/others.c(revision 3475)
>+++ libclamav/others.c(working copy)
>@@ -492,7 +492,7 @@
>if(!*name)
> return CL_EMEM;
>
>- *fd = open(*name, O_RDWR|O_CREAT|O_TRUNC|O_BINARY, S_IRWXU);
>+ *fd = open(*name, O_RDWR|O_CREAT|O_TRUNC|O_BINARY|O_EXCL, S_IRWXU);
>if(*fd == -1) {
> cli_errmsg("cli_gentempfd: Can't create temporary file %s: 
> %s\n", *name, strerror(errno));
> free(*name);

FYI -

When applying this patch, I get the following:

"patch:  malformed patch at line 4: if(!*name)"

Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (1201 of 1329):
Two wrongs do not make a right; it usually takes three or more.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] MRTG

[Ed Kasky]

At 04:06 AM Saturday, 3/15/2008, Tarak Ranjan wrote -=>

>On Sat, 2008-03-15 at 11:29 +1100, Andrew McGlashan wrote:
> > Hi Tarak,
> >
> > Tarak Ranjan wrote:
> > > i m trying to configured MRTG for clamd but it;s giving me 0 out put
> > >
> > > Title[clamd]: clamd - mail.example.com
> > > MaxBytes[clamd]: 1
> > > AbsMax[clamd]: 10
> > > Options[clamd]: gauge
> > > Target[clamd]: `/usr/local/bin/qmailmrtg7 C /var/log/clamav`
> > > PageTop[clamd]: mail.example.com ClamAV
> > > ShortLegend[clamd]: Msg
> > > YLegend[clamd]: viri/hour
> > > Legend1[clamd]: a 
> > > LegendI[clamd]: found 
> > > LegendO[clamd]: errors: 
> > > WithPeak[clamd]: ymwd
> > > XSize[clamd]: 350
> > > YSize[clamd]: 150
> >
> > That is probably because MRTG is a "Multi-Router Traffic Grapher" and all
> > your clamav traffic is local, ie not routing anywhere.
> >
>i know the full form of MRTG, that was not my query to the list

Have you looked at
http://pandaemail.sourceforge.net/cgi-bin/virus/display.pl
??


. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (1214 of 1375):
To freely bloom - that is my definition of success.
-Gerry Spence, lawyer (b. 1929)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamav 0.93.3 working OK

[Ed Kasky]

At 01:30 PM Monday, 7/7/2008, Noel Jones wrote -=>
>Clamav 0.93.3 appears to be working fine here on FreeBSD 5.3.
>
>Thanks for the quick fix.

All is well of FC 6 as well...

Ed Kasky
~
Randomly Generated Quote (663 of 1229):
Imagine a world in which generations of human beings come to believe
that certain films were made by God or that specific software was
coded by him. Imagine a future in which millions of our descendants
murder each other over rival interpretations of Star Wars or Windows
98. Could anything -- anything -- be more ridiculous? And yet, this
would be no more ridiculous than the world we are living in.
-Sam Harris, author (1967- )

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Unsubscribe

[Ed Kasky]

The proper method to unsubscribe is in the headers:

List-Unsubscribe:
,



At 03:29 AM Tuesday, 9/23/2008, you wrote -=>



>Khalid Iqbal
>P.O Box 282133
>Dubai,United Arab Emirates.
>
>Tel:  +971 4 338 7718
>Fax: +971 4 338 7719
>[EMAIL PROTECTED]
>
>
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:clamav-users-
> > [EMAIL PROTECTED] On Behalf Of Faddah Steve Yuetsu Wolf
> > Sent: 23 September 2008 12:30
> > To: clamav-users@lists.clamav.net
> > Subject: Re: [Clamav-users] Error with make on Mac OS X 10.4.11 Intel -
> > 0.94
> >
> >
> > i want folks to know i'm also seeing these same sorts of errors on mac
> > os x 10.5.5 (leopard), all current apple security updates, on a
> > macbook intel core2duo 2.16 GHz, 2 GB of ram, xcode 3.1.1, and using
> > gcc 4.2.1.
> >
> > my make line i try is:  $ make CC=/usr/bin/gcc-4.2
> >
> > here are the errors i see (also with libclamunrar.la) —
> >
> > ...
> > /bin/sh ../libtool --tag=CC   --mode=link /usr/bin/gcc-4.2  -g -O2 -
> > version-info 5:1:0 -no-undefined -Wl,-M,../libclamav/libclamav.map  -o
> > libclamav.la -rpath /usr/local/lib matcher-ac.lo matcher-bm.lo
> > matcher.lo md5.lo others.lo readdb.lo cvd.lo dsig.lo str.lo
> > scanners.lo textdet.lo filetypes.lo rtf.lo blob.lo mbox.lo message.lo
> > table.lo text.lo ole2_extract.lo vba_extract.lo msexpand.lo pe.lo
> > disasm.lo upx.lo htmlnorm.lo chmunpack.lo rebuildpe.lo petite.lo
> > wwunpack.lo unsp.lo aspack.lo packlibs.lo fsg.lo mew.lo upack.lo
> > line.lo untar.lo unzip.lo inflate64.lo special.lo binhex.lo is_tar.lo
> > tnef.lo autoit.lo strlcpy.lo regcomp.lo regerror.lo regexec.lo
> > regfree.lo unarj.lo bzlib.lo nulsft.lo infblock.lo pdf.lo spin.lo
> > yc.lo elf.lo sis.lo uuencode.lo phishcheck.lo phish_domaincheck_db.lo
> > phish_whitelist.lo regex_list.lo regex_suffix.lo mspack.lo cab.lo
> > entconv.lo hashtab.lo dconf.lo lzma_iface.lo explode.lo textnorm.lo
> > dlp.lo js-norm.lo uniq.lo version.lo ../libclamunrar_iface/
> > libclamunrar_iface.la lzma/liblzma.la  -lz -lbz2 -liconv  -lz
> > ../libtool: line 3296: cd: 1/Downloads/clamav-0.94/libclamunrar: No
> > such file or directory
> > libtool: link: warning: cannot determine absolute directory name of `1/
> > Downloads/clamav-0.94/libclamunrar'
> > grep: 1/Downloads/clamav-0.94/libclamunrar/libclamunrar.la: No such
> > file or directory
> > sed: 1/Downloads/clamav-0.94/libclamunrar/libclamunrar.la: No such
> > file or directory
> > libtool: link: `1/Downloads/clamav-0.94/libclamunrar/libclamunrar.la'
> > is not a valid libtool archive
> > make[4]: *** [libclamav.la] Error 1
> > make[3]: *** [all-recursive] Error 1
> > make[2]: *** [all] Error 2
> > make[1]: *** [all-recursive] Error 1
> > make: *** [all] Error 2
> >
> > here's the thing — i also have tried "$ locate libclamunrar," and when
> > i do, it finds it, both versions 4 & 5, in *both* the /usr/local/
> > clamXav/lib/  and in the ... /.libs/ ... where you folks say it should
> > be, as well as other places —
> >
> > $ locate libclamunrar
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrar.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrar15.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrar20.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrarcmd.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrarfilter.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrarhlp.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrarppm.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.deps/unrarvm.Plo
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.0.1.dylib
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.0.1.dylib.dSYM
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.0.1.dylib.dSYM/Contents
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.0.1.dylib.dSYM/Contents/Info.plist
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.0.1.dylib.dSYM/Contents/Resources
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.0.1.dylib.dSYM/Contents/Resources/DWARF
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.0.1.dylib.dSYM/Contents/Resources/DWARF/libclamunrar.5.0.1.dylib
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.
> > 5.dylib
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/libclamunrar.a
> > /Users/yuetsu 1/Downloads/clamav-0.94/libclamunrar/.libs/
> > libclamunrar.dylib
> >
> > ...
> >
> > so how do i look up and stay notified on this bug #1162 that j

[Clamav-users] SubmitDetectionStats with clamav-milter?

[Ed Kasky]

I recently upgraded to ClamAV 0.94.1 and enabled 
SubmitDetectionStats.  Is there a way to configure clamav-milter to 
write to clamd.log rather than the maillog?  I would like to 
participate in the submissions if the viruses found by the milter 
would be useful.  I generally catch about 25-35 a week:

http://www.wrenkasky.com/cgi-bin/virus/display.pl?number

Thanks in advance.

Ed


...
Randomly Generated Quote (49 of 1466):
"Dear Auntie Em, hate you, hate Kansas, took the dog."
  - Dorothy

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] SubmitDetectionStats with clamav-milter?

[Ed Kasky]

At 09:25 AM Thursday, 11/13/2008, you wrote -=>
>Ed Kasky wrote:
> > I recently upgraded to ClamAV 0.94.1 and enabled
> > SubmitDetectionStats.  Is there a way to configure clamav-milter to
> > write to clamd.log rather than the maillog?  I would like to
> > participate in the submissions if the viruses found by the milter
> > would be useful.  I generally catch about 25-35 a week:
> >
> > http://www.wrenkasky.com/cgi-bin/virus/display.pl?number
> >
> > Thanks in advance.
> >
> > Ed
> >
>
>Ed,
>
>I believe clamav-milter uses clamd for scanning; so, it should be
>logging already as a found virus?
>
>James

A found virus is logged in the maillog:

Nov 13 10:51:35 yoda sendmail[30006]: mADIpNtj030006: Milter: data,
reject=554 5.7.1 virus Email.Trojan.GZC detected by ClamAV -
http://www.clamav.net

Is there a way to log these to clamd.log or to scan the maillog?
Not knowing all that much about how the milter works with sendmail,
this log entry would seem to be generated by sendmail.

Ed

...
Randomly Generated Quote (998 of 1466):
Persons appear to us according to the light we throw upon them from
our own minds. -Laura Ingalls Wilder, author (1867-1957)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] SubmitDetectionStats with clamav-milter?

[Ed Kasky]

At 04:02 PM Thursday, 11/13/2008, you wrote -=>
>On Thu, 13 Nov 2008 14:37:53 -0800
>Ed Kasky <[EMAIL PROTECTED]> wrote:
>
> > Nov 13 10:51:35 yoda sendmail[30006]: mADIpNtj030006: Milter: data,
> > reject=554 5.7.1 virus Email.Trojan.GZC detected by ClamAV -
> > http://www.clamav.net
> >
> > Is there a way to log these to clamd.log or to scan the maillog?
>
>Ed,
>
>to log to clamd.log you would need to configure and start clamd and then
>run clamav-milter with the --external option (which instructs it to use clamd
>for scanning instead of the built-in mechanisms)
>
>Regards,


Tom,

Thanks - I made the adjustment and will see what happens...

Ed


...
Randomly Generated Quote (202 of 1466):
"There is only one way to coast, and that is down hill."

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] please remove - 27 emails and counting

[Ed Kasky]

At 07:04 PM Friday, 2/20/2009, you wrote -=>
>I have been trying to get off this fucking list for over 12 months... no
>luck...

 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] please remove - 27 emails and counting

[Ed Kasky]

At 07:04 PM Friday, 2/20/2009, you wrote -=>
>I have been trying to get off this fucking list for over 12 months... no
>luck...




___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Failed milter upgrade to .95rc2

[Ed Kasky]

So I attempted an upgrade to .95rc2 last night and clamd started fine 
but the milter complained about --quiet and --max-children.

Since I use about 6 flags, I decided to back rev and see if anyone 
else experienced the same.

Ed



Randomly Generated Quote (276 of 713)
In a dark time, the eye begins to see. -Theodore Roethke

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Failed milter upgrade to .95rc2

[Ed Kasky]

>Author: <mailto:edwinto...@gmail.com>Török Edwin
>Date: 2009-03-17 08:122009-03-17 15:12 -700UTC
>To: <mailto:clamav-users@lists.clamav.net>ClamAV users ML
>Subject: Re: [Clamav-users] Failed milter upgrade to .95rc2
>On 2009-03-17 17:10, Ed Kasky wrote:
> > So I attempted an upgrade to .95rc2 last night and clamd started fine
> > but the milter complained about --quiet and --max-children.
> >
> > Since I use about 6 flags, I decided to back rev and see if anyone
> > else experienced the same.
> >
> >
>
>Please read the upgrade instructions:
><https://wiki.clamav.net/Main/UpgradeNotes095#Using_the_new_clamav_milter>https://wiki.clamav.net/Main/UpgradeNotes095#Using_the_new_clamav_milter
> 
>
>
>In short: the new milter uses a configuration file instead of the flags,
>and there is a perl script to convert the flags to a config file.
>
>Best regards,
>--Edwin

Doh...  Looks like I missed that one.  Thanks.

Does the required entry in sendmail.mc change at all?

INPUT_MAIL_FILTER(`clamav', 
`S=local:/var/run/clamav/clmilter.sock, F=, T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `spf-milter,clamav')dnl

Ed

...

Randomly Generated Quote (1311 of 1520):
Those who put out the people's eyes, reproach them
for their blindness.  -John Milton, poet (1608-1674)
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Failed milter upgrade to .95rc2

[Ed Kasky]

At 09:00 PM Wednesday, 3/18/2009, Steve Holdoway wrote -=>
>On Tue, 17 Mar 2009 19:50:20 -0700
>Ed Kasky  wrote:
>
> > Does the required entry in sendmail.mc change at all?
> >
> > INPUT_MAIL_FILTER(`clamav',
> > `S=local:/var/run/clamav/clmilter.sock, F=, T=S:4m;R:4m')dnl
> > define(`confINPUT_MAIL_FILTERS', `spf-milter,clamav')dnl
> >
> > Ed
>I'm running with a couple extra timeous defined...
>
>INPUT_MAIL_FILTER(`clamav',`S=local:/var/run/clamav/clmilter.sock, 
>F=, T=S:4m;R:4m;C:30s;E:10m')dnl
>
>but the real work is getting the milter running from the config 
>file, and separate from the clamd stuff.
>
>I've been running from svn for a while ( the last stable release 
>proving unstable on my VPS-based implementation - which by design 
>has no swap ), and it's been solid as a rock.
>
>Steve

Thanks.  I will give it a shot over the weekend.  I went through the 
config file pretty carefully but know there are always one or two 
things that will pop up when I do an upgrade such as this one.  I'll 
let you know how it goes...

Ed

...

Randomly Generated Quote (712 of 1520):
I'd rather see a sermon than hear one any day; I'd rather
one should walk with me than merely tell the way.
-Edgar Guest, poet (1881-1959)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Failed milter upgrade to .95rc2

[Ed Kasky]

At 09:00 PM Wednesday, 3/18/2009, Steve Holdoway wrote -=>
>On Tue, 17 Mar 2009 19:50:20 -0700
>Ed Kasky  wrote:
>
> > Does the required entry in sendmail.mc change at all?
> >
> > INPUT_MAIL_FILTER(`clamav',
> > `S=local:/var/run/clamav/clmilter.sock, F=, T=S:4m;R:4m')dnl
> > define(`confINPUT_MAIL_FILTERS', `spf-milter,clamav')dnl
> >
> > Ed
>I'm running with a couple extra timeous defined...
>
>INPUT_MAIL_FILTER(`clamav',`S=local:/var/run/clamav/clmilter.sock, 
>F=, T=S:4m;R:4m;C:30s;E:10m')dnl
>
>but the real work is getting the milter running from the config 
>file, and separate from the clamd stuff.
>
>I've been running from svn for a while ( the last stable release 
>proving unstable on my VPS-based implementation - which by design 
>has no swap ), and it's been solid as a rock.
>
>Steve

Still having a problem getting the milter started.  I am using the 
init script from the source package for Redhat and get the following:

Starting clamav-milter: clamav-milter: unrecognized option 
`--pidfile=/var/run/clamav/clamav-milter.pid'
ERROR: Unknown option passed
ERROR: Can't parse command line options
[FAILED]

I did find the setting in the milter.conf file for the pid and tried 
setting it there and removing the option from the script but could 
not get it to work.  I can't seem to find an init script that works on FC6...

Ed

...

Randomly Generated Quote (932 of 1520):
Moderation is a fatal thing.  Nothing succeeds like excess.
 -- Oscar Wilde

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Failed milter upgrade to .95rc2

[Ed Kasky]

On Sat, 21 Mar 2009, Steve Holdoway wrote:

> On Fri, 20 Mar 2009 21:38:47 -0700
> Ed Kasky  wrote:
>
>> At 09:00 PM Wednesday, 3/18/2009, Steve Holdoway wrote -=>
>>> On Tue, 17 Mar 2009 19:50:20 -0700
>>> Ed Kasky  wrote:
>>>
>>>> Does the required entry in sendmail.mc change at all?
>>>>
>>>> INPUT_MAIL_FILTER(`clamav',
>>>> `S=local:/var/run/clamav/clmilter.sock, F=, T=S:4m;R:4m')dnl
>>>> define(`confINPUT_MAIL_FILTERS', `spf-milter,clamav')dnl
>>>>
>>>> Ed
>>> I'm running with a couple extra timeous defined...
>>>
>>> INPUT_MAIL_FILTER(`clamav',`S=local:/var/run/clamav/clmilter.sock,
>>> F=, T=S:4m;R:4m;C:30s;E:10m')dnl
>>>
>>> but the real work is getting the milter running from the config
>>> file, and separate from the clamd stuff.
>>>
>>> I've been running from svn for a while ( the last stable release
>>> proving unstable on my VPS-based implementation - which by design
>>> has no swap ), and it's been solid as a rock.
>>>
>>> Steve
>>
>> Still having a problem getting the milter started.  I am using the
>> init script from the source package for Redhat and get the following:
>>
>> Starting clamav-milter: clamav-milter: unrecognized option
>> `--pidfile=/var/run/clamav/clamav-milter.pid'
>> ERROR: Unknown option passed
>> ERROR: Can't parse command line options
>> [FAILED]
>>
>> I did find the setting in the milter.conf file for the pid and tried
>> setting it there and removing the option from the script but could
>> not get it to work.  I can't seem to find an init script that works on FC6...
>>
>
> There are *NO* command line options for clamav-milter. All is configured 
> through the config file. When built from source, the milter is started with 
> the command line
>
> /usr/local/sbin/clamav-milter
>
> The config file is /usr/local/etc/clamav-milter.conf. In there, for example 
> the line...
>
> PidFile /var/run/clamav/clamav-milter.pid
>
> will set up what you're trying to achieve.

Thanks for the reply.  I had pretty much figured that out.

I was just looking to see if anyone had an init script that encorporated 
those  changes to the milter.  The one that shipped with the source 
package for Redhat does not work as it uses the pid file as a command 
line option.

Ed


Randomly generated quote:
There is no character, howsoever good and fine, but it can
be destroyed by ridicule, howsoever poor and witless.
-Mark Twain, author and humorist (1835-1910)
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Failed milter upgrade to .95rc2

[Ed Kasky]

At 09:00 PM Wednesday, 3/18/2009, Steve Holdoway wrote -=>
>On Tue, 17 Mar 2009 19:50:20 -0700
>Ed Kasky  wrote:
>
> > Does the required entry in sendmail.mc change at all?
> >
> > INPUT_MAIL_FILTER(`clamav',
> > `S=local:/var/run/clamav/clmilter.sock, F=, T=S:4m;R:4m')dnl
> > define(`confINPUT_MAIL_FILTERS', `spf-milter,clamav')dnl
> >
> > Ed
>I'm running with a couple extra timeous defined...
>
>INPUT_MAIL_FILTER(`clamav',`S=local:/var/run/clamav/clmilter.sock, 
>F=, T=S:4m;R:4m;C:30s;E:10m')dnl
>
>but the real work is getting the milter running from the config 
>file, and separate from the clamd stuff.
>
>I've been running from svn for a while ( the last stable release 
>proving unstable on my VPS-based implementation - which by design 
>has no swap ), and it's been solid as a rock.
>
>Steve

I think I'm almost there...

I figured out the init script but now the milter is having trouble 
with the clamd socket.

 From the milter log:
Sat Mar 21 13:42:02 2009 -> +++ Started at Sat Mar 21 13:42:02 2009
Sat Mar 21 13:42:02 2009 -> ERROR: Failed to parse ClamdSocket 
directive '/var/run/clamav/clamd.sock'
Sat Mar 21 13:42:02 2009 -> ERROR: Failed to init the socket pool

srwxrwxrwx 1 clamav clamav 0 Mar 21 13:41 /var/run/clamav/clamd.sock

 From clamd.conf:
LocalSocket /var/run/clamav/clamd.sock
FixStaleSocket yes
TCPSocket 3310
TCPAddr 127.0.0.1

 From clamav-milter.conf:
User clamav
ClamdSocket /var/run/clamav/clamd.sock
ClamdSocket tcp:127.0.0.1:3310

Not sure what to check next...

Ed

...

Randomly Generated Quote (932 of 1520):
Moderation is a fatal thing.  Nothing succeeds like excess.
 -- Oscar Wilde

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Failed milter upgrade to .95rc2

[Ed Kasky]

At 02:11 PM Saturday, 3/21/2009, you wrote -=>
>On 2009-03-21 23:03, Ed Kasky wrote:
> > At 09:00 PM Wednesday, 3/18/2009, Steve Holdoway wrote -=>
> >
> >> On Tue, 17 Mar 2009 19:50:20 -0700
> >> Ed Kasky  wrote:
> >>
> >>
> >>> Does the required entry in sendmail.mc change at all?
> >>>
> >>> INPUT_MAIL_FILTER(`clamav',
> >>> `S=local:/var/run/clamav/clmilter.sock, F=, T=S:4m;R:4m')dnl
> >>> define(`confINPUT_MAIL_FILTERS', `spf-milter,clamav')dnl
> >>>
> >>> Ed
> >>>
> >> I'm running with a couple extra timeous defined...
> >>
> >> INPUT_MAIL_FILTER(`clamav',`S=local:/var/run/clamav/clmilter.sock,
> >> F=, T=S:4m;R:4m;C:30s;E:10m')dnl
> >>
> >> but the real work is getting the milter running from the config
> >> file, and separate from the clamd stuff.
> >>
> >> I've been running from svn for a while ( the last stable release
> >> proving unstable on my VPS-based implementation - which by design
> >> has no swap ), and it's been solid as a rock.
> >>
> >> Steve
> >>
> >
> > I think I'm almost there...
> >
> > I figured out the init script but now the milter is having trouble
> > with the clamd socket.
> >
> >  From the milter log:
> > Sat Mar 21 13:42:02 2009 -> +++ Started at Sat Mar 21 13:42:02 2009
> > Sat Mar 21 13:42:02 2009 -> ERROR: Failed to parse ClamdSocket
> > directive '/var/run/clamav/clamd.sock'
> > Sat Mar 21 13:42:02 2009 -> ERROR: Failed to init the socket pool
> >
> > srwxrwxrwx 1 clamav clamav 0 Mar 21 13:41 /var/run/clamav/clamd.sock
> >
> >  From clamd.conf:
> > LocalSocket /var/run/clamav/clamd.sock
> > FixStaleSocket yes
> > TCPSocket 3310
> > TCPAddr 127.0.0.1
> >
> >  From clamav-milter.conf:
> > User clamav
> > ClamdSocket /var/run/clamav/clamd.sock
>
>Hi,
>
>Use "ClamdSocket unix:/var/run/clamav/clamd.sock"
>
>Best regards,
>--Edwin

It is always something right in front of my nose that I miss.  Thanks 
- that did the trick

# The first syntax specifies a local unix socket (needs an bsolute path) e.g.:
# ClamdSocket unix:/var/run/clamd/clamd.socket

Ed

...

Randomly Generated Quote (513 of 1520):
Desist from enumerating your fowl prior to their emergence from the shell.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] clamav-milter 0.95

[Ed Kasky]

Any idea when a new release can be expected?  My 0.95 milter install 
has found nothing since upgrading and was quarantining between 8 and 
20 weekly (small company) since my first installation.

Our stats from the last 5 weeks:

http://www.wrenkasky.com/cgi-bin/virus/display.pl?number

Ed

>Author: Lyubomir Russev
>Date: 2009-04-04 03:242009-04-04 10:24 -700UTC
>To: ClamAV users ML
>Subject: Re: [Clamav-users] clamav-milter 0.95
>Hi!
>
>This is a confirmed bud of 0.95 clamav-milter. Fix to be expected soon:
>
>See: 
>https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1531
> 
>
>
>Regards,
>Lyubomir
>- Original Message -
>From: "Steffan Henke" <hen...@evendi.de>
>To: <clamav-users@lists.clamav.net>
>Sent: Saturday, April 04, 2009 12:49 PM
>Subject: [Clamav-users] clamav-milter 0.95
>
>
> >
> > I tried to upgrade my previous 0.94 installation and have issues with the
> > new milter, although I went through the docs, eg. at
> > 
> http://lurker.clamav.net/message/20081205.152347.a7d7c9ee.en.html
>  
>
> >
> > I installed clamav-0.95-1.el4.rf.src.rpm , removed
> > /etc/sysconfig/clamav-milter and modified my /etc/clamav-milter.conf.
> > However, sendmail does not access the milter properly, no matter if I use
> > local: or inet: mode.
> > To avoid any permission issues, I use
> >
> > MilterSocket inet:7...@127.0.0.1
> >
> > in my conf and access that port in my sendmail.mc via
> > INPUT_MAIL_FILTER(`clamav', 
> `S=inet:7...@127.0.0.1, F=, T=S:4m;R:4m')dnl
> >
> > - but the Eicar test string isn't detected, all messages pass.
> > The port is open:
> > telnet localhost 7357
> > Trying 127.0.0.1...
> > Connected to localhost.
> > Escape character is '^]'.
> >
> > and sendmail complains immediately once I shutdown the milter, but no
> > emails get scanned.
> > clamd is up and running, both accessible via socket and on port 3310.
> >
> > I noticed the announcement that the "old" milter is included in the 0.95
> > tarball - are there any instructions how to compile that one ? A
> > configure --enable-milter doesn't build the old milter, only the new one.


...

Randomly Generated Quote (1144 of 1520):
Talk does not cook rice. -Ancient Proverb
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] clamav-milter 0.95

[Ed Kasky]

At 09:42 AM Saturday, 4/4/2009, you wrote -=>
>Ed Kasky schrieb:
> > Any idea when a new release can be expected?  My 0.95 milter install
> > has found nothing since upgrading and was quarantining between 8 and
> > 20 weekly (small company) since my first installation.
> >
> > Our stats from the last 5 weeks:
> >
> > http://www.wrenkasky.com/cgi-bin/virus/display.pl?number
> >
> > Ed
> >
>Hi , what are you trying to say, isnt your milter working ?
>Or are you only suprised no to get any viri?
>you may test your inst with
>http://www.gfi.com/emailsecuritytest/
>until eicar is catched
>
>did you try disabling LogInfected Full ?
>
>you can try compile from cvs version, perhaps your Problem is allready fixed
>http://www.clamav.net/snapshot/clamav-devel-latest.tar.gz
>
>i just finished implement new milter and it works with postfix 2.5.5
>
>--
>Best Regards
>MfG Robert Schetterer
>Germany/Munich/Bavaria

Thanks for suggesting the test emails.  I watched the maillog as they 
arrived and confirmed that they were detected and quarantined.

I had assumed that there was a problem as my stats script was not 
picking anything up since upgrading.  The issue I found is due to two 
changes in 0.95:
1.  It is writing to maillog instead of syslog
2.  The message itself has changed also:
~~
-pre 0.95 from /var/log/messages:
Mar 15 14:49:45 yoda clamav-milter[30297]: Email quarantined as 
/tmp/quarantine/090315/n2FLmnwt016170.Phishing.Heuristics.Email.SSL-Spoof
Mar 15 14:49:45 yoda clamav-milter[30297]: n2FLmnwt016170: 
/tmp/quarantine/msg.wGhydu: Phishing.Heuristics.Email.SSL-Spoof 
Intercepted virus from "CartaSi S.p.A" to ed
~~
-0.95 from /var/log/maillog:
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: 
from=, size=6474, class=0, nrcpts=1, 
msgid=, proto=ESMTP, 
daemon=MTA, relay=[216.134.217.100]
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter add: 
header: Received-SPF: pass (yoda.wrenkasky.com: domain of 
emailtest...@gfi.com designates 216.134.217.100 as permitted sender)
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change 
(add): header: X-Virus-Scanned: clamav-milter 0.95 at yoda.wrenkasky.com
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change 
(add): header: X-Virus-Status: Infected (Exploit.GFI)
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: milter=clamav, 
quarantine=quarantined by clamav-milter
~~

So I can confirm that it works with sendmail 8.14.3 as well :-)

Ed

...

Randomly Generated Quote (1148 of 1520):
That man is truly good who knows his own dark places. -Beowulf

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] logging to maillog

[Ed Kasky]

At 05:43 AM Monday, 4/6/2009, you wrote -=>
>Hi
>
>I am having trouble getting the clamav-milter to log what has been scanned
>or infected to the maillog.
>
>I have enable the following settings in clamav-milter.conf
>
>AddHeader yes
>LogSyslog yes
>LogFacility LOG_MAIL
>LogVerbose yes
>
>Can someone please assist.
>
>Regards
>
>
>Ebrahim Abrahams

With:
AddHeader yes
...and these 3 set to defaults:
#LogSyslog no
#LogFacility LOG_MAIL
#LogVerbose yes

...this is what I get in maillog with sendmail:
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: 
from=, size=6474, class=0, nrcpts=1, 
msgid=, proto=ESMTP, 
daemon=MTA, relay=[216.134.217.100]
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter add: 
header: Received-SPF: pass (yoda.wrenkasky.com: domain of 
emailtest...@gfi.com designates 216.134.217.100 as permitted sender)
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change 
(add): header: X-Virus-Scanned: clamav-milter 0.95 at yoda.wrenkasky.com
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change 
(add): header: X-Virus-Status: Infected (Exploit.GFI)
Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: milter=clamav, 
quarantine=quarantined by clamav-milter

What mailer program are you using?

Ed Kasky
~
Randomly Generated Quote (124 of 1229):
"It is better to offer no excuse than a bad one."
--George Washington

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] logging to maillog

[Ed Kasky]

Not to ask the obvious or anything -but- did you restart the daemons?

Have you checked syslog and any other log settings in clamav-milter.conf?

Did you run any tests?
http://www.aleph-tec.com/eicar/index.php
http://www.gfi.com/emailsecuritytest/

At 11:34 PM Monday, 4/6/2009, you wrote -=>
>I use sendmail and I have now tried changing AddHeader to be enabled and the
>others on default but it does the same thing. It still doesn't show in the
>logs that my mails are being scanned.
>
>At 05:43 AM Monday, 4/6/2009, you wrote -=>
> >Hi
> >
> >I am having trouble getting the clamav-milter to log what has been scanned
> >or infected to the maillog.
> >
> >I have enable the following settings in clamav-milter.conf
> >
> >AddHeader yes
> >LogSyslog yes
> >LogFacility LOG_MAIL
> >LogVerbose yes
> >
> >Can someone please assist.
> >
> >Regards
> >
> >
> >Ebrahim Abrahams
>
>With:
>AddHeader yes
>...and these 3 set to defaults:
>#LogSyslog no
>#LogFacility LOG_MAIL
>#LogVerbose yes
>
>...this is what I get in maillog with sendmail:
>Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957:
>from=, size=6474, class=0, nrcpts=1,
>msgid=, proto=ESMTP,
>daemon=MTA, relay=[216.134.217.100]
>Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter add:
>header: Received-SPF: pass (yoda.wrenkasky.com: domain of
>emailtest...@gfi.com designates 216.134.217.100 as permitted sender)
>Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change
>(add): header: X-Virus-Scanned: clamav-milter 0.95 at yoda.wrenkasky.com
>Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: Milter change
>(add): header: X-Virus-Status: Infected (Exploit.GFI)
>Apr  4 19:43:43 yoda sendmail[21957]: n352hWTb021957: milter=clamav,
>quarantine=quarantined by clamav-milter
>
>What mailer program are you using?

Ed Kasky
~
Randomly Generated Quote (383 of 1229):
All is well that ends well.
 -- John Heywood

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] HELP! unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid'

[Ed Kasky]

At 02:06 PM Monday, 4/27/2009, Gomes, Rich wrote -=>

>I get the following error:
>
>Starting clamav-milter: clamav-milter: unrecognized option 
>`--pidfile=/var/run/clamav-milter/clamav-milter.pid'
>ERROR: Unknown option passed
>ERROR: Can't parse command line options
>[FAILED]

This option is parsed through the conf file and not as a startup 
option - hence the error.  Try removing the option from the startup 
and uncommenting the line in the conf file and see what 
happens.  Just make sure that the user running the milter has rights 
to pid file...

HTH...

Ed

...

Randomly Generated Quote (77 of 1542):
"Genius is 1 percent inspiration, 99 percent perspiration."
 - Thomas Edison

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Help with New Install clamav-milter

[Ed Kasky]

I finally got around to installing clamscan / ClamAV version 0.67 and 
clamav-milter 0.66n on a RH7.2 machine with Sendmail is 8.12.9.

/etc/clamav.conf:
PidFile /var/run/clamav/clamd.pid
LocalSocket /var/run/clamav/clamav.sock
FixStaleSocket
StreamSaveToDisk
User clamav
ScanMail
ScanArchive
#ls -al /var/run/clamav
drwxr-xr-x2 clamav   clamav   4096 Mar 10 17:52 .
drwxr-xr-x6 root root 4096 Mar 10 17:57 ..
srwxr-xr-x1 clamav   clamav  0 Mar 10 17:52 clamav.sock
-rw-rw1 clamav   clamav  4 Mar 10 17:52 clamd.pid
When I start clamd, it loads just fine and I can use clamdscan just 
fine.  However, running clamav-milter through sendmail results in the 
following from the maillog:

Mar 10 17:57:11 clam-milter[5623]: recv failed from clamd getting PORT
Mar 10 17:57:11 Milter: from=<[EMAIL PROTECTED]>, reject=451 4.7.1 
Please try again later

I assume it's rejecting because clamd can't get port?

How does one go about fixing this?

Thanks in advance for any tips...

Ed
. . . . . . . .
When things look dark, hold your head high so it can rain up your nose.


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Help with New Install clamav-milter

[Ed Kasky]

On Thu, 11 Mar 2004, [windows-1252] Krištof Petr wrote:

> > When I start clamd, it loads just fine and I can use clamdscan just 
> > fine.  However, running clamav-milter through sendmail results in the 
> > following from the maillog: 
> 
> 
> Did you started clamav-milter daemon? If yes, does it open socket for 
> communication with sendmail?
> What are the file permissions of this socket?
> 
> How did you configure your sendmail.mc?

$ ps -U clamav
 PID TTY  TIME CMD
 1575 ?00:00:00 clamd
 1578 ?00:00:00 clamd
 1579 ?00:00:00 clamd
 1602 ?00:00:00 clamav-milter
 1605 ?00:00:00 clamav-milter
 1606 ?00:00:00 clamav-milter


Is this the correct switch to use when loading the daemon?
local:/var/run/clamav/clamav.sock
(This is also set in clamav.conf)

If it is:
srwxr-xr-x   1 clamav   clamav   0 Mar 10 23:13 
/var/run/clamav/clamav.sock

INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav.sock, 
T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clamav')dnl

Ed

Randomly generated quote:
There is so much good in the worst of us and so much bad
in the best of us that it ill behooves us to find fault
with the rest of us. -Mom



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Help with New Install clamav-milter

[Ed Kasky]

On Thu, 11 Mar 2004, Nigel Horne wrote:

> > Mar 10 17:57:11 clam-milter[5623]: recv failed from clamd getting PORT
> > Mar 10 17:57:11 Milter: from=<[EMAIL PROTECTED]>, reject=451 4.7.1
> > Please try again later
> >
> > I assume it's rejecting because clamd can't get port?
> 
> Is clamd running?

 $ ps -U clamav
 PID TTY  TIME CMD
 1575 ?00:00:00 clamd
 1578 ?00:00:00 clamd
 1579 ?00:00:00 clamd
 1602 ?00:00:00 clamav-milter
 1605 ?00:00:00 clamav-milter
 1606 ?00:00:00 clamav-milter

The log files do not indicate that either has died...

Ed

Randomly generated quote:
The large print giveth, and the small print taketh away. -Tom Waits



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Help with New Install clamav-milter

[Ed Kasky]

At 06:20 AM Thursday, 3/11/2004, Krištof Petr wrote -=>

Is this the correct switch to use when loading the daemon?
local:/var/run/clamav/clamav.sock
(This is also set in clamav.conf)
Beware! In /etc/clamav.conf you are setting socket for communication
between clamd <-> clamav-milter what if different from socket
for sendmail <-> clamav-milter.
That fixed it!

Here's what I have now -

- in /etc/clamav.conf:
LocalSocket /var/run/clamav/clamd.sock
- in startup for clamav-milter:
local:/var/run/clamav/clamavmr.sock
- in sendmail.mc:
INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamavmr.sock, F=S, 
T=S:4m;R:4m;E:10m')dnl
define(`confINPUT_MAIL_FILTERS', `clamavmr')dnl

In what instance would one enable the following?
# TCP port address.
#TCPSocket 3310
Thanks a lot for the help in this.

Ed
. . . . . . . .
Living in the now is a gift.  That's why they call it the present.


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] problems using sendmail with clamav on rh7.3

[Ed Kasky]

Check to see if it has compiled into the binary:

$ sendmail -d0 < /dev/null | grep MILTER
 Compiled with: DNSMAP LOG MATCHGECOS MILTER MIME7TO8 MIME8TO7
At 10:16 AM Tuesday, 5/4/2004, Raul wrote -=>
I finnally could compile it and it runs at least the tests, but now the
problem comes when i try to add it in sendmail
INPUT_MAIL_FILTER(`clamav', `S=local:/usr/local/clamav/clamav.sock, F=,
T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clamav')dnl


This worked for me on RH 7.2, Sendmail 8.12.11.  Try it step by step:
http://sial.org/howto/clamav/clamav-milter/
"Adding MILTER support to Sendmail usually involves adding the following 
entries to a site.config.m4 used to build Sendmail from source then 
rebuilding Sendmail. The second entry is disabled here by default for 
debugging, though can be enabled if clamav-milter is not running as the 
root user."

APPENDDEF(`confENVDEF', `-DMILTER')
dnl APPENDDEF(`conf_libmilter_ENVDEF', `-D_FFR_MILTER_ROOT_UNSAFE')
Then add the following to the sendmail.mc and rebuild the cf:

INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clmilter.sock, F=S, 
T=S:4m;R:4m;E:10m')dnl
define(`confINPUT_MAIL_FILTERS', `clamav')dnl

I tried to copy/paste these lines in a sendmail.cf from another running
Never a good idea

Ed
. . . . . . . .
An optimist is someone who hasn't learned all the facts yet.


---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

[Clamav-users] Error starting clamd 8.0rc2

[Ed Kasky]

I was attempting to upgrade to 8.0rc2 and get the following when trying to 
start clamd:

Starting clamd: ERROR: Parse error at line 81: Unknown option StreamSaveToDisk.
ERROR: Can't open/parse the config file /etc/clamav.conf
I added only -enable-milter to the configure and everything else is 
default.  It will start if I disable the StreamSaveToDisk.

Anyone else having similar issue??  Was that removed at some point and I 
missed that part somehow??

Ed
. . . . . . . .
I distrust those people who know so well what God wants them to
do because I notice it always coincides with their own desires.
-Susan B Anthony, reformer and suffragist (1820-1906)

---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Error starting clamd 8.0rc2

[Ed Kasky]

At 04:19 PM Friday, 9/24/2004, Ed Kasky wrote -=>
At 03:35 PM Friday, 9/24/2004, you wrote -=>
On Fri, Sep 24, 2004 at 02:22:33PM -0700, Ed Kasky said:
> I was attempting to upgrade to 8.0rc2 and get the following when 
trying to
> start clamd:
>
> Starting clamd: ERROR: Parse error at line 81: Unknown option
> StreamSaveToDisk.
> ERROR: Can't open/parse the config file /etc/clamav.conf
>
> I added only -enable-milter to the configure and everything else is
> default.  It will start if I disable the StreamSaveToDisk.
>
> Anyone else having similar issue??  Was that removed at some point and I
> missed that part somehow??

It was removed, and you missed it somehow :)
When did it get removed?  I looked through the docs but couldn't locate any 
mention of the change...

Ed
. . . . . . . .
I distrust those people who know so well what God wants them to
do because I notice it always coincides with their own desires.
-Susan B Anthony, reformer and suffragist (1820-1906)

---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Unpacking archive

[Ed Kasky]

On Sat, 25 Sep 2004, Tim Rupp wrote:

> Try following that prdownloads link until you get to a page that prompts 
> you to save a file, the one I used for instance to get the file was

As a sugestion, I think the link to the downloads page is a bit confusing.  
It would help those not so familiar with the process at sourceforge to name the link 
"mirrors" and not the file name.

I did the same thing myself.  If I click on a file name in a browser I 
usually get a file and not a page that links you to the file...

Ed 
. . . . . . . . . . . . . . .
Randomly generated quote:
If you're sending someone some Styrofoam, what do you pack it in?
 -Steven Wright



---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Error starting clamd 8.0rc2

[Ed Kasky]

On Sat, 25 Sep 2004, Brian Morrison wrote:

> On Fri, 24 Sep 2004 17:34:57 -0700 (PDT) in
> [EMAIL PROTECTED] "Dennis Peterson"
> <[EMAIL PROTECTED]> wrote:
> 
> >  I think I found it in the README or NEWS file, but it is definitely
> >  there- I also had this error before I finished reading the docs.
> 
> The only mention that it is gone seems to be in the Changelog.

Yup - found it there...

Sept. 18 it was removed from clamd and clamav-milter on Sept. 20...

Ed 
. . . . . . . . . . . . . . .
Randomly generated quote:
If you're sending someone some Styrofoam, what do you pack it in?
 -Steven Wright



---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Error starting clamd 8.0rc2

[Ed Kasky]

On Sat, 25 Sep 2004, Brian Morrison wrote:

> On Sat, 25 Sep 2004 06:51:26 -0700 (PDT) in
> [EMAIL PROTECTED] Ed Kasky
> <[EMAIL PROTECTED]> wrote:
> 
> >  Sept. 18 it was removed from clamd and clamav-milter on Sept. 20...
> 
> Very late in the day then, probably explains why the docs are a bit
> thin.

Kind of like my day yesterday ;-)

Ed
. . . . . . . . . . . . . . .
Randomly generated quote:
Please write all your complaints in space reserved --> []



---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Problems with clamav-milter...

[Ed Kasky]

At 12:38 PM Monday, 1/10/2005, you wrote -=>
Jan 10 15:33:49 ermail sendmail[5685]: j0AKXnnD005685: Milter (clmilter): 
error connecting to filter: Connection refused by /var/clamav/clmilter.sock
It's telling you that it needs to communicate with the sock and 
can't.  What do you get when you check /var/clamav/ ?

Mine reads:
-rw-rw1 clamav   clamav  5 Jan  9 04:02 clamd.pid
srwxrwxrwx1 clamav   clamav  0 Jan  9 04:02 clamd.sock
srwx--1 clamav   clamav  0 Jan  9 04:02 clmilter.sock
 Apparently, SendMail can't communicate with the clamav-milter.  Doing a 
ps -Af | grep clam, I don't see any services running that I would 
associate with the ClamAV milter.  What is the correct procedure for 
starting the milter service?  How can I troubleshoot this further?
It should have installed an rc script.  For RH, look in /etc/rc.d/init.d 
for clamav-milter

-or-
# chkconfig --list | grep clam
clamd   0:off   1:off   2:on3:on4:on5:on6:off
clamav-milter   0:off   1:off   2:off   3:on4:on5:on6:off
In which case you can run /sbin/service clamav-milter start
HTH
Ed
. . . . . . . .
Randomly generated quote:
I envy people who drink - at least they
know what to blame everything on.
-Oscar Levant, composer (1906-1972)
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] How to Filter Spam Mails

[Ed Kasky]

http://www.spamassassin.org
At 09:55 PM Wednesday, 3/16/2005, you wrote -=>
I am using Sendmail with clamav Milter I want to know how can I filter spam
Mails coming and I want to forward  it to one user account  Like email Admin
how can I add more domains name to filter mails
thanks in advance
. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (179 of 476):
"The problem of power is how to achieve its responsible use rather
than its irresponsible and indulgent use--of how to get men of
power to live for the public rather than off the public."
   --Robert Fitzgerald Kennedy
___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Error compiling ClamAV 0.86

[Ed Kasky]

I am experiencing a problem when trying to compile 0.86 with milter that 
sems to be happening only in this release.  0.85.1 compiles no problem on 
the same system.


With 0.86 I get the following running "make":
/usr/src/clamav-0.86/clamav-milter/clamav-milter.c:1577: undefined 
reference to `smfi_opensocket'

collect2: ld returned 1 exit status
make[2]: *** [clamav-milter] Error 1
make[2]: Leaving directory `/usr/src/clamav-0.86/clamav-milter'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/clamav-0.86'

My searches indicated that this is related to sendmail's mfapi.h.  I am 
running sendmail 8.13.3.  There is only one instance of the file (aside 
from the src) at:

-rw-r--r-- 1 root root 13830 Aug 20 2004 /usr/include/libmilter/mfapi.h

Also, the configure script reports:
checking libmilter/mfapi.h usability... yes
checking libmilter/mfapi.h presence... yes
checking for libmilter/mfapi.h... yes

Any ideas??

Thanks...

Ed Kasky
~
Randomly Generated Quote (95 of 478):
"If government is to serve any purpose it is to do for others what
they are unable to do for themselves."   --Lyndon Baines Johnson

___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Error compiling ClamAV 0.86

[Ed Kasky]

At 11:35 AM Tuesday, 6/21/2005, you wrote -=>

Ed Kasky wrote:
I am experiencing a problem when trying to compile 0.86 with milter that 
sems to be happening only in this release.  0.85.1 compiles no problem on 
the same system.


With 0.86 I get the following running "make":
/usr/src/clamav-0.86/clamav-milter/clamav-milter.c:1577: undefined 
reference to `smfi_opensocket'

collect2: ld returned 1 exit status
make[2]: *** [clamav-milter] Error 1
make[2]: Leaving directory `/usr/src/clamav-0.86/clamav-milter'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/clamav-0.86'

My searches indicated that this is related to sendmail's mfapi.h.  I am 
running sendmail 8.13.3.  There is only one instance of the file (aside 
from the src) at:

-rw-r--r-- 1 root root 13830 Aug 20 2004 /usr/include/libmilter/mfapi.h
I had similar issue.  Backup libmilter/mfapi.h and replace with the one 
from the 8.13.3 source. (maybe make clean and start over from configure?)


make darned sure there's not another mfapi.h around too!


Only one instance:
# find  / -name 'mfapi.h'
/usr/include/libmilter/mfapi

0.86 still complains about the `smfi_opensocket' _BUT_ 0.85.1 compiles just 
fine...



Ed Kasky
~
Randomly Generated Quote (349 of 478):
It is only with the heart... that one can see rightly.
What is essential is invisible to the eye.
- The Little Prince, Antoine de Saint-Exupery

___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Re: Error compiling ClamAV 0.86

[Ed Kasky]

At 01:43 PM Tuesday, 6/21/2005, you wrote -=>

Since sendmail 8.13.3 was released 1/12/2005, and your mfapi.h files date 
shows

Aug 20 2004, its probably from a previous (older) version of sendmail.

Get the latest/greatest sendmail and install it and libmilter.
mfapi.h is dated Aug 20 2004 for both the 8.13.3 and 8.13.4 versions of 
sendmail, 8.13.4 being the latest non-alpha/beta.  But if that works, PLMK!


I too get this when trying to compile clamAV from CVS (.86rc1) with 
Sendmail 8.13.3 & libmilter installed of course.


In fact, the libmilter folders are identical in both versions:

# ls -al sendmail-8.13.3/include/libmilter/
total 16
drwxr-xr-x2 1037 root 4096 Jun 21 11:57 .
drwxr-xr-x6 1037 root 4096 Jan 11 20:36 ..
-rw-r--r--1 1037 root13830 Aug 20  2004 mfapi.h
-rw-r--r--1 1037 root 3725 Jul  7  2004 mfdef.h
-rw-r--r--1 1037 root 1447 Dec  1  2003 milter.h

# ls -al sendmail-8.13.4/include/libmilter/
total 16
drwxr-xr-x2 1037 root 4096 Jun 21 11:57 .
drwxr-xr-x6 1037 root 4096 Jan 11 20:36 ..
-rw-r--r--1 1037 root13830 Aug 20  2004 mfapi.h
-rw-r--r--1 1037 root 3725 Jul  7  2004 mfdef.h
-rw-r--r--1 1037 root 1447 Dec  1  2003 milter.h

But, I'm game so I built a new sendmail from src and then clamav 0.86.  I 
am happy to report that it worked!


I may be a little thick here, but I still fail to understand why 0.85.1 
will compile with sendmail 8.13.3 but 0.86 will not...


Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (132 of 978):
"Let no one come to you without leaving better and happier."
- Mother Teresa

___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Error compiling ClamAV 0.86

[Ed Kasky]

At 09:19 PM Tuesday, 6/21/2005, Nigel Horne wrote -=>

On Tuesday 21 Jun 2005 19:28, Ed Kasky wrote:
> I am experiencing a problem when trying to compile 0.86 with milter that
> sems to be happening only in this release.  0.85.1 compiles no problem on
> the same system.
>
> With 0.86 I get the following running "make":
> /usr/src/clamav-0.86/clamav-milter/clamav-milter.c:1577: undefined
> reference to `smfi_opensocket'
> collect2: ld returned 1 exit status
> make[2]: *** [clamav-milter] Error 1
> make[2]: Leaving directory `/usr/src/clamav-0.86/clamav-milter'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/usr/src/clamav-0.86'
>
> My searches indicated that this is related to sendmail's mfapi.h.  I am
> running sendmail 8.13.3.  There is only one instance of the file (aside
> from the src) at:
> -rw-r--r-- 1 root root 13830 Aug 20 2004 /usr/include/libmilter/mfapi.h

Did you (re-)install sendmail from source?


Yes.  Sendmail is one of the things I always install from source.

For some reason,  re-installing sendmail fixed the problem that seems to 
have popped up between 0.85.1 and 0.86.


Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (86 of 978):
"I have always found that mercy bears richer fruits than strict
justice."   --Abraham Lincoln, speech in Washington D.C., 1865

___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Error compiling ClamAV 0.86

[Ed Kasky]

On Wed, 22 Jun 2005, Nigel Horne wrote:


At 09:19 PM Tuesday, 6/21/2005, Nigel Horne wrote -=>

On Tuesday 21 Jun 2005 19:28, Ed Kasky wrote:

I am experiencing a problem when trying to compile 0.86 with milter

that

sems to be happening only in this release.  0.85.1 compiles no problem

on

the same system.

With 0.86 I get the following running "make":
/usr/src/clamav-0.86/clamav-milter/clamav-milter.c:1577: undefined
reference to `smfi_opensocket'
collect2: ld returned 1 exit status
make[2]: *** [clamav-milter] Error 1
make[2]: Leaving directory `/usr/src/clamav-0.86/clamav-milter'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/clamav-0.86'

My searches indicated that this is related to sendmail's mfapi.h.  I

am

running sendmail 8.13.3.  There is only one instance of the file

(aside

from the src) at:
-rw-r--r-- 1 root root 13830 Aug 20 2004

/usr/include/libmilter/mfapi.h

Did you (re-)install sendmail from source?


Yes.  Sendmail is one of the things I always install from source.

For some reason,  re-installing sendmail fixed the problem that seems to
have popped up between 0.85.1 and 0.86.


The problem was that your mfapi.h was not in sync with your version of
sendmail.

When you installed sendmail prior to your reinstallation yesterday, did
you remember to (re-)install libmilter?


I had assumed based on my reading that building sendmail with milter 
functionality installed libmilter.  That didn't happen with 8.13.3.


I went ahead and did a build and install in the libmilter folder as well 
just in case this time.


Thanks for the tip.

Ed
. . . . . . . . . . . . . . .
Randomly generated quote:
"Reason often makes mistakes, but conscience never does."
- Josh Billings
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamav-milter bug (and workaround)

[Ed Kasky]

At 07:27 PM Sunday, 7/24/2005, Damian Menscher wrote -=>

Just a warning to others who are about to upgrade:

0.86.2 changes the clamav-milter default timeout from 0 to 5 minutes 
(never mind the manpage, which still says it's 0).  You can't specify a 
timeout in --internal mode (default) and so I (and probably many others) 
just let it default to 0.  Now that the default is 300, you MUST specify 
--timeout=0 for the internal scanning to work.


Thanks for the heads up!   You probably saved me a headache or two...

Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (914 of 994):
We are born naked, wet, and hungry - then things get worse.

___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Error making 0.87 with milter enabled

[Ed Kasky]

This is a RedHat 7.2 machine with sendmail 8.13.4.  When trying to compile 
0.87 with milter, I get the following error during "make":


if gcc -DHAVE_CONFIG_H -I. -I. -I.. -I../clamd -I../libclamav 
-I../shared-g -O2 -MT clamav-milter.o -MD -MP -MF 
".deps/clamav-milter.Tpo" -c -o clamav-milter.o clamav-milter.c; \
then mv -f ".deps/clamav-milter.Tpo" ".deps/clamav-milter.Po"; else rm -f 
".deps/clamav-milter.Tpo"; exit 1; fi

clamav-milter.c: In function `clamd_recv':
clamav-milter.c:3444: parse error before `int'
clamav-milter.c:3448: `ret' undeclared (first use in this function)
clamav-milter.c:3448: (Each undeclared identifier is reported only once
clamav-milter.c:3448: for each function it appears in.)
make[2]: *** [clamav-milter.o] Error 1
make[2]: Leaving directory `/usr/src/clamav-0.87/clamav-milter'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/clamav-0.87'
make: *** [all] Error 2

Don't think this is related to the sendmail milter but I've been wrong 
before ;-)


Any ideas/suggestions are appreciated

Ed Kasky
~
Randomly Generated Quote (112 of 488):
"It had long since come to my attention that people of
 accomplishment rarely sat back and let things happen
 to them. They went out and happened to things."  - Elinor Smith

___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Error making 0.87 with milter enabled

[Ed Kasky]

At 01:48 PM Friday, 9/16/2005, you wrote -=>

Ed Kasky wrote:




This is a RedHat 7.2 machine with sendmail 8.13.4.  When trying to 
compile 0.87 with milter, I get the following error during "make":


There appears to have been a backporting mistake from CVS to 0.87. Please 
report to [EMAIL PROTECTED]


Done...


"It had long since come to my attention that people of
 accomplishment rarely sat back and let things happen
 to them. They went out and happened to things."  - Elinor Smith


"They went out and happened to things"? What sort of English dialect is 
that? I doubt your

English would pass a grammar checker!


Just a play on verbs and indirect object pronouns.  You'd have to ask 
Elinor for more information ;-)


Ed Kasky
~
Randomly Generated Quote (67 of 489):
"Force is all-conquering, but its victories are short-lived."
   --Abraham Lincoln

___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Error making 0.87 with milter enabled

[Ed Kasky]

At 03:00 PM Friday, 9/16/2005, Doc wrote -=>

Ed Kasky wrote:

make[2]: *** [clamav-milter.o] Error 1
make[2]: Leaving directory `/usr/src/clamav-0.87/clamav-milter'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/clamav-0.87'
make: *** [all] Error 2
Don't think this is related to the sendmail milter but I've been wrong 
before ;-)

Any ideas/suggestions are appreciated


I have the same problem. Also using RedHat 7.2 and Sendmail 8.13.4 trying 
to compile clamav-milter.


So keep us all informed of what you find.


From Tomasz Kojm <[EMAIL PROTECTED]>

Please apply the attached patch or compile clamav-milter with gcc 3.x
or higher.

Worked for me...

Ed Kasky
~
Randomly Generated Quote (294 of 489):
Experience is not what happens to a man;
it is what a man does with what happens to him. -Aldous Huxley
--- clamav-milter.c.old 2005-09-16 23:44:39.0 +0200
+++ clamav-milter.c 2005-09-16 23:56:50.0 +0200
@@ -3439,9 +3439,9 @@
 {
fd_set rfds;
struct timeval tv;
+   int ret;
 
assert(sock >= 0);
-   int ret;
 
if(readTimeout == 0) {
do
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] How to unsub off the list

[Ed Kasky]

You just need to know how to view them...

List-Id: ClamAV users ML 
List-Unsubscribe: 
,


List-Post: 
List-Help: 
List-Subscribe: 
,



At 04:00 AM Sunday, 4/23/2006, you wrote -=>

Please pardon this stupid question.I have lost my first registration
e-mail, and the info is not in the headers...Can someone provide me the
instructions on how to unsubscribe?  Ive tried the web interface, but the
messages keep coming.

Thanks,
Sam

___
http://lurker.clamav.net/list/clamav-users.html


. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (957 of 1048):
Warranty and guarantee clauses are voided by payment of the invoice.

___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Clamav-Milter Unsafe

[Ed Kasky]

make sure the folloowing are in your init script?

# Local clamav-milter config
CLAMAV_FLAGS=
test -f /etc/sysconfig/clamav-milter && . /etc/sysconfig/clamav-milter

and

start() {
echo -n "Starting clamav-milter: "
daemon clamav-milter ${CLAMAV_FLAGS} -loNP --max-children=8 --timeout=0 
\
local:/var/run/clamav/clmilter.sock -c /etc/clamav.conf \
-U /tmp/quarantine
RETVAL=$?
echo
test $RETVAL -eq 0 && touch /var/lock/subsys/clamav-milter
return $RETVAL
}

Your deamon settings may vary but the ${CLAMAV_FLAGS} is the impt. one...

hth

Ed
. . . . . . . . . . . . . . .
Randomly generated quote:
Until he extends the circle of his compassion to all living
things, man will not himself find peace. -Albert Schweitzer

On Thu, 14 Dec 2006, Departamento de Informatica wrote:


That's what i want to do, so i put the line

CLAMAV_USER='clamav'

in /etc/sysconfig/clamav-milterso, how could i do to start
clamav-milter as 'clamav' user??

Sorry for the 'newbie' question

2006/12/14, Steven Stern <[EMAIL PROTECTED]>:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Departamento de Informatica wrote:
> Hi, i've looking for information about this error(?) , the Logwatch of
> my CentOS send a daily mail to root, always appears this lines
>
> Milter (clamav-milter): local socket name /var/clamav/clmilter.sock'
> unsafe: 10 Time(s)
> Milter (clamav-milter): to error state: 10 Time(s)
>
> i have the clamav-milter as a service , so clamd.  Here i send the
> listing of /var/clamav
>
> [EMAIL PROTECTED] ~]# ll /var/clamav/
> total 14580
> srwxr-xr-x  1 root   root 0 dic 13 17:14 clmilter.sock
> -rw-r--r--  1 clamav clamav  848771 dic 14 06:42 daily.cvd
> -rw-r--r--  1 clamav clamav  170372 nov  5 17:16 daily.cvd.rpmnew
> -rw-r--r--  1 clamav clamav 6924820 nov  4 06:30 main.cvd
> -rw-r--r--  1 clamav clamav 6924820 nov  5 17:16 main.cvd.rpmnew
>
>
> i think this is a permission trouble, btu i'm not sure, here is the
> /etc/sysconfig/clamav-milter file:

[snip]

On my system,

srwx-- 1 clamav clamav 0 Dec 13 18:23 clamav-milter.sock



- --

  Steve
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFFgVCmeERILVgMyvARAmmYAJwNhbobntAP2C6/WYfEN4nfPpuRgACfczaZ
3MqFcidcPUijCh1i83HpfJ0=
=LFTa
-END PGP SIGNATURE-
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html