[clamav-users] Usage of IPv6

2013-11-13 Thread Frank Elsner

Hello,

"./confure --help" says besides all other options:

   --disable-ipv6  disable IPv6 support

My call to .configure reads:

| ./configure CPPFLAGS="-I/usr/local/include" \
| LDFLAGS="-Wl,--rpath -Wl,/usr/local/lib" \
| --prefix=/usr/ClamAV --sbindir=/usr/ClamAV/bin \
| --datarootdir=/var/cache/clamav --datadir=/var/cache/clamav \
| --mandir=/usr/local/man \
| --disable-ipv6 --disable-clamav --disable-clamuko --with-user=exim
  ^^

But in the logfile I find:
freshclam[24201]: Using IPv6 aware code

How can I get rid of IPv6 completely?


Kind regards, Frank Elsner
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml


Re: [clamav-users] ClamAV®: ClamAV 0.98.5 beta has been posted!

2014-07-09 Thread Frank Elsner
On Tue, 8 Jul 2014 23:15:12 + Joel Esler (jesler) wrote:
> 
> ClamAV 0.98.5 beta has been posted!
> The ClamAV team is proud to announce the availability of ClamAV 0.98.5 beta 
> ready for testing!

Fedora 17, compiled ok, but

# service clamav restart
Stopping ClamAV[  OK  ]
Starting ERROR: This tool requires libclamav with functionality level 78 or 
higher (current f-level: 77)
   [FAILED]
#


Regards, Frank Elsner
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml


Re: [clamav-users] ClamAV®: ClamAV 0.98.5 beta has been posted!

2014-07-09 Thread Frank Elsner
On Wed, 9 Jul 2014 14:48:31 +0200 Matus UHLAR - fantomas wrote:
> >On Tue, 8 Jul 2014 23:15:12 + Joel Esler (jesler) wrote:
> >> ClamAV 0.98.5 beta has been posted!
> >> The ClamAV team is proud to announce the availability of ClamAV 0.98.5 
> >> beta ready for testing!
> 
> On 09.07.14 13:07, Frank Elsner wrote:
> >Fedora 17, compiled ok, but
> >
> ># service clamav restart
> >Stopping ClamAV[  OK  ]
> >Starting ERROR: This tool requires libclamav with functionality level 78 or 
> >higher (current f-level: 77)
> >   [FAILED]
> 
> do you have older clamav (library) installation somewhere by any chance?

No. Same call to configure as for clamav-0.98.4.


--Frank Elsner
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml


Re: [clamav-users] ClamAV®: ClamAV 0.98.5 beta has been posted!

2014-07-09 Thread Frank Elsner
On Wed, 09 Jul 2014 09:38:11 -0400 Greg Folkert wrote:
> On Wed, 2014-07-09 at 15:01 +0200, Frank Elsner wrote:
> > On Wed, 9 Jul 2014 14:48:31 +0200 Matus UHLAR - fantomas wrote:
> > > >On Tue, 8 Jul 2014 23:15:12 + Joel Esler (jesler) wrote:
> > > >> ClamAV 0.98.5 beta has been posted!
> > > >> The ClamAV team is proud to announce the availability of ClamAV 0.98.5 
> > > >> beta ready for testing!
> > > 
> > > On 09.07.14 13:07, Frank Elsner wrote:
> > > >Fedora 17, compiled ok, but
> > > >
> > > ># service clamav restart
> > > >Stopping ClamAV[  OK  ]
> > > >Starting ERROR: This tool requires libclamav with functionality level 78 
> > > >or higher (current f-level: 77)
> > > >   [FAILED]
> > > 
> > > do you have older clamav (library) installation somewhere by any chance?
> > 
> > No. Same call to configure as for clamav-0.98.4.
> 
> I would do some spelunking and check, assuming the answer is no, because
> you compiled it the same way, doesn't mean the old file was updated or
> removed and replaced. The Initialization scripts might have changed and
> look in a place earlier than it used to.

Removed all libs in /usr/local/clamav/lib, installed clamav-0.98.5-beta1.
It works.

BTW, I'm amused

Jul  9 17:24:18 seymour freshclam[10817]: Your ClamAV installation is OUTDATED!
Jul  9 17:24:18 seymour freshclam[10817]: Local version: 0.98.5-beta1 
Recommended version: 0.98.4

--FRank
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml


Re: [clamav-users] no new signatures

2016-03-19 Thread Frank Elsner
On Fri, 18 Mar 2016 14:45:49 +0100 polloxx wrote:
> Dear,
> 
> Since the migration we have no new signatures:
> freshclam.log shows:
> 
> Fri Mar 18 14:34:15 2016 -> --
> Fri Mar 18 14:34:15 2016 -> ClamAV update process started at Fri Mar 18
> 14:34:15 2016
> Fri Mar 18 14:34:15 2016 -> WARNING: Your ClamAV installation is OUTDATED!
> Fri Mar 18 14:34:15 2016 -> WARNING: Local version: 0.98.1 Recommended
> version: 0.99.1
> Fri Mar 18 14:34:15 2016 -> DON'T PANIC! Read
> http://www.clamav.net/support/faq
> Fri Mar 18 14:34:15 2016 -> main.cvd is up to date (version: 57, sigs:
> 4218790, f-level: 60, builder: amishhammer)
> Fri Mar 18 14:34:15 2016 -> daily.cvd is up to date (version: 21466, sigs:
> 83889, f-level: 63, builder: amishhammer)
> Fri Mar 18 14:34:15 2016 -> bytecode.cvd is up to date (version: 275, sigs:
> 45, f-level: 63, builder: amishhammer)
> 
> What's wrong with our config?

Nothing. Same here after last update:

Mar 17 12:08:48 main.cvd is up to date (version: 57, sigs: 4218790, f-level: 
60, builder: amishhammer)
Mar 17 12:20:52 daily.cvd updated (version: 21466, sigs: 83889, f-level: 63, 
builder: amishhammer)
Mar 17 12:21:34 bytecode.cvd updated (version: 275, sigs: 45, f-level: 63, 
builder: amishhammer)

Last run today:

Mar 18 14:15:05 seymour freshclam[2666]: main.cvd is up to date (version: 57, 
sigs: 4218790, f-level: 60, builder: amishhammer)
Mar 18 14:15:05 seymour freshclam[2666]: daily.cvd is up to date (version: 
21466, sigs: 83889, f-level: 63, builder: amishhammer)
Mar 18 14:15:05 seymour freshclam[2666]: bytecode.cvd is up to date (version: 
275, sigs: 45, f-level: 63, builder: amishhammer)


Have a nice weekend, Frank
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[Clamav-users] Incremental update failed, trying to download daily.cvd

2009-05-14 Thread Frank Elsner

Hello *,

is this a serious error to worry about?

May 14 18:23:55 freshclam[18958]: ClamAV update process started at Thu May 14 
18:23:55 2009 
May 14 18:23:56 freshclam[18958]: main.cld is up to date (version: 51, sigs: 
545035, f-level: 42, builder: sven) 
May 14 18:23:56 freshclam[18958]: Downloading daily-9358.cdiff [*] 
May 14 18:23:56 freshclam[18958]: cdiff_apply: lseek(desc, -350, SEEK_END) 
failed 
May 14 18:23:56 freshclam[18958]: getpatch: Can't apply patch   
   <--- !
May 14 18:23:56 freshclam[18958]: Incremental update failed, trying to download 
daily.cvd  <--- 1
May 14 18:23:57 freshclam[18958]: Downloading daily.cvd [100%] 
May 14 18:23:57 freshclam[18958]: daily.cvd updated (version: 9358, sigs: 4794, 
f-level: 42, builder: sven) 
May 14 18:23:57 freshclam[18958]: Database updated (549829 signatures) from 
db.DE.clamav.net (IP: 193.27.50.222) 
May 14 18:23:57 freshclam[18958]: Clamd successfully notified about the update.

 Kind regards   _____ 
 Frank Elsner  / |
 _/Snail Mail: Moltkestr. 28 A   |
|  D-12203 Berlin(-Lichterfelde) |
| Phone: +49 30 834 66 30  Germany   |
| eMail: frank.els...@spamfence-net  |
| http://www.B.Shuttle.DE/moltke28___|
|_| In dubio pro exim
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] clamd missed

2010-06-30 Thread Frank Elsner
On Tue, 29 Jun 2010 18:39:13 -0700 (PDT) Hook wrote:
> Hi there
> 
> I am using last ClamAv in FreeBSD 8.
> I did install as normal, from .tar
> 
> After some time, by external issue, my server was rebooted by the ´button´, 
> ie hard way.
> After that, the clamd file is missingzero lenght!
> 
> argos [/var/log/clamav]# ll /usr/local/sbin/clamd
> srw-rw-rw-  1 root  wheel  0 Jun  2 08:37 /usr/local/sbin/clamd
> argos [/var/log/clamav]# 
> 
> So if I do a start, i get:
> 
> argos [/var/log/clamav]# /usr/local/etc/rc.d/clamav-clamd start
> /usr/local/etc/rc.d/clamav-clamd: WARNING: run_rc_command: cannot run 
> /usr/local/sbin/clamd

The X-bit is missing, /usr/local/sbin/clamd isnot eXecutable.


--Frank Elsner
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] clamav needs 3 minutes to start

2007-06-27 Thread Frank Elsner
On Wed, 27 Jun 2007 15:09:00 +0200 Schramm e.K. [ Deutschland ] wrote:

  [ ... ]

> Wed Jun 27 13:35:23 2007 -> +++ Started at Wed Jun 27 13:35:23 2007
> Wed Jun 27 13:35:23 2007 -> clamd daemon 0.90.3 (OS: linux-gnu, ARCH:
> i386, CPU: i386)
> Wed Jun 27 13:35:23 2007 -> Log file size limit disabled.
> Wed Jun 27 13:35:23 2007 -> Reading databases from /var/lib/clamav
> Wed Jun 27 13:37:11 2007 -> +++ Started at Wed Jun 27 13:37:11 2007
> Wed Jun 27 13:37:11 2007 -> clamd daemon 0.90.3 (OS: linux-gnu, ARCH:
> i386, CPU: i386)
> Wed Jun 27 13:37:11 2007 -> Log file size limit disabled.
> Wed Jun 27 13:37:11 2007 -> Reading databases from /var/lib/clamav
> Wed Jun 27 13:40:24 2007 -> Loaded 256049 signatures.
> Wed Jun 27 13:40:24 2007 -> Unix socket file /var/run/amavis/clamd.ctl

That means 3:13 for 256049 signatures.
^^

My startup shows 

Jun 27 15:35:30 seymour clamd[26760]: clamd daemon 0.90.3 (OS: linux-gnu, ARCH: 
i386, CPU: i686) 
Jun 27 15:35:30 seymour clamd[26760]: Log file size limited to 1048576 bytes. 
Jun 27 15:35:30 seymour clamd[26760]: Reading databases from /usr/ClamAV/data/ 
Jun 27 15:35:54 seymour clamd[26760]: Loaded 130435 signatures. 
Jun 27 15:35:54 seymour clamd[26760]: Unix socket file /usr/ClamAV/etc/clamd

That means 0:24 for 130435 signatues.
^^

This is with ClamAV 0.90.3/3541/Wed Jun 27 14:44:24 2007

Why do you have so much more signatures?



--Frank Elsner

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Sourcefire acquires ClamAV

2007-08-17 Thread Frank Elsner
On Fri, 17 Aug 2007 16:52:56 +0100 Nigel Horne wrote:
> From the FAQ:
> 
>   "*  Q. What is the impact on ClamAV users?
>   o A. From the end-user perspective, very little will change beyond 
> the additional resources Sourcefire will provide in our continued efforts to 
> advance the ClamAV technology and improve our ability to interact with the 
> open source community.
> Sourcefire is totally committed to investing in ClamAV as an open source 
> project licensed under the GPL."
> 
> In practice that means that we plan to continue to provide the software and 
> signature database free of charge under the GPL.

Who is "WE"? The developer team or Sourcefire?

--Frank Elsner
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] freshclam / sigtool problems

2008-04-16 Thread Frank Elsner

Hello *,

my "freshclam.conf" contains

   OnUpdateExecute /usr/ClamAV/bin/freshclam.mail

and the refenced "/usr/ClamAV/bin/freshclam.mail" reads


| #!/bin/sh
| 
| cd /usr/ClamAV/data
| DIFF="/tmp/clamav-signatures.$$" ; /bin/rm -f $DIFF
| 
| MAIL="[EMAIL PROTECTED]"
| 
| /bin/mv signatures signatures.old
| /usr/bin/host -t txt current.cvd.clamav.net > signatures
| /usr/ClamAV/bin/sigtool --list-sigs | sort  >> signatures
| 
| /usr/bin/diff signatures.old signatures > $DIFF
| 
| if [ -s "$DIFF" ]
| then 
|  /usr/bin/Mail -s "ClamAV signatures updated" $MAIL < $DIFF
| fi
| 
| /bin/rm -f $DIFF
| 
| exit


This gave me a list of added signatures in the past. 
After switching to clamav-0.93 the output only shows

| 1c1
| < current.cvd.clamav.net descriptive text "0.93:46:6792:1208312590:1"
| ---
| > current.cvd.clamav.net descriptive text "0.93:46:6793:1208318674:1"


Why this? Is sigtool broken? Is my procedure broken in respect to version 0.93?
>From the log freshclam obviously does the job, but ...


--Frank Elsner 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] freshclam / sigtool problems

2008-04-16 Thread Frank Elsner
On Wed, 16 Apr 2008 15:08:41 +0300 Török Edwin wrote:
> Frank Elsner wrote:
> > Why this? Is sigtool broken? Is my procedure broken in respect to version 
> > 0.93?
> > From the log freshclam obviously does the job, but ...
> >   
> 
> Please try the patch from here:
> https://wwws.clamav.net/bugzilla/show_bug.cgi?id=938

Thanks, this patch fixed my problem.


--Frank Elsner

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] freshclam (0.93.1) error

2008-07-01 Thread Frank Elsner

Hello ALL,

today my freshclam (0.93.1) showed the error

ERROR: cdiff_cmd_close: Can't apply XCHG at line 1 of daily.ign
ERROR: cdiff_apply: Can't execute command CLOSE
ERROR: cdiff_apply: Error executing command at line 4
ERROR: getpatch: Can't apply patch


What's behind? Should I worry about this?



--Frank Elsner
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[clamav-users] clamav-0.99.3 on fedora 27

2018-01-29 Thread Frank Elsner
Hello,

I try to compile clamav on my fulle updates fedora 27 system but it fails with

..
checking for xmlTextReaderRead in -lxml2... yes
configure: Compiling and linking with libxml2 from /usr
checking for OpenSSL installation... configure: error: OpenSSL not found.

I don't understand this as  OpenSSL package is installed:
# rpm -qa | grep ^openssl
openssl-libs-1.1.0g-1.fc27.i686
openssl-1.1.0g-1.fc27.i686
openssl-devel-1.1.0g-1.fc27.i686

How to solve this problem?

PS: Due to reasons I must compile myself and can not use the Fedora RPM.


Cheers, 
Frank
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-30 Thread Frank Elsner
On Mon, 29 Jan 2018 15:44:51 +0100 Frank Elsner wrote:
> Hello,
> 
> I try to compile clamav on my fulle updates fedora 27 system but it fails with

  [ ... ]

> PS: Due to reasons I must compile myself and can not use the Fedora RPM.

Besides the reasons for former self-compile I will use the RPM from now on.
One question: Where is freshclam? Obviosly not in the clamav RPM.


Cheers, frank
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamav-0.99.3 on fedora 27

2018-01-30 Thread Frank Elsner
On Tue, 30 Jan 2018 14:16:55 +0100 Frank Elsner wrote:

  [ ... ]

> One question: Where is freshclam? Obviosly not in the clamav RPM.

Forget it. Found it.


Sorry, Frank
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] No updates since Monday 26th - daily 24352 ?

2018-02-28 Thread Frank Elsner
On Wed, 28 Feb 2018 12:52:42 + Mark Allan wrote:
> Hi there,
> 
> I just noticed that there don't appear to have been any updates to daily.cvd 
> since v24352 on Monday 26th, which seems unlikely.
> 
> Is this correct or has something gone wrong with the update process?  Could 
> it be related to the update of the clamav.net backend that you blogged 
> about...on Monday.

I think it is correct. My logfile shows

Feb 28 14:22:10 ... daily.cld is up to date (version: 24352, sigs: 1861789, 
f-level: 63, builder: neo)
  ^
 
Cheers, 
   Frank
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[Clamav-users] 'make install' enhancement

2004-02-19 Thread Frank Elsner

Hi,

after the upgrade from version 0.66 to 0.67 I encountered the annoying fact
that 'make install' overwrites an existing clamav.conf :-(

Suggestion:

If clamav.conf is existing DO NOT OVERWRITE it. 

Instead copy the clamav.conf from the distribution to clamav.conf.NEW 
for investigation what's new inside.

Kind regards,
       Frank Elsner




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamd/freshclam logging

2004-03-04 Thread Frank Elsner
On Thu, 04 Mar 2004 15:21:26 +0100 Tomasz Kojm wrote:
> On Wed, 03 Mar 2004 18:51:05 +0100
> Frank Elsner <[EMAIL PROTECTED]> wrote:
> 
> > 
> > Dear developers,
> >  here's my wishlist item:
> > 
> > Please use the same format for log lines for both clamd and freshclam.
> > 
> > The current logging (to file, not syslog which seems unsupported by
> > freshclam) looks ugly ans is unpasable, see this example:
> 
> Are you using the same log file for clamd and freshclam ?!

Yes. 

--Frank Elsner




---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamd/freshclam logging

2004-03-04 Thread Frank Elsner
On Thu, 04 Mar 2004 17:23:31 +0100 Tomasz Kojm wrote:
> On Thu, 04 Mar 2004 16:26:35 +0100
> Frank Elsner <[EMAIL PROTECTED]> wrote:
> 
> > > Are you using the same log file for clamd and freshclam ?!
> > 
> > Yes. 
> 
> That's a very bad idea.

Tell me why. Clamd and freshclam belong together so the logging of both
 should go to one file. 

Freshclam should support logging via syslogd (as clamd already does).

--frank Elsner




---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamd/freshclam logging

2004-03-05 Thread Frank Elsner
On Fri, 05 Mar 2004 08:40:25 +0100 Tomasz Kojm wrote:
> On Thu, 04 Mar 2004 22:00:14 +0100
> Frank Elsner <[EMAIL PROTECTED]> wrote:
> 
> > > > > Are you using the same log file for clamd and freshclam ?!
> > > > 
> > > > Yes. 
> > > 
> > > That's a very bad idea.
> > 
> > Tell me why. Clamd and freshclam belong together so the logging of
> > both
> >  should go to one file. 
> 
> Two separate processes shouldn't write to the one file without
> synchronization.

ACK. So I repeat my request for syslog logging support for freshclam.

--Frank Elsner




---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] clamd/freshclam logging

2004-03-03 Thread Frank Elsner

Dear developers,
 here's my wishlist item:

Please use the same format for log lines for both clamd and freshclam.

The current logging (to file, not syslog which seems unsupported by freshclam)
looks ugly ans is unpasable, see this example:

| ClamAV update process started at Wed Mar  3 18:07:00 2004
| main.cvd is up to date (version: 21, sigs: 20094, f-level: 1, builder: tkojm)
| daily.cvd updated (version: 162, sigs: 278, f-level: 1, builder: diego)
| Database updated (20372 signatures) from database.clamav.net (196.40.71.226).
| Clamd successfully notified about the update.
| Wed Mar  3 18:07:04 2004 -> Reading databases from /usr/local/clamav/data
| Wed Mar  3 18:07:07 2004 -> Database correctly reloaded (20372 viruses)
| Wed Mar  3 18:36:27 2004 -> SelfCheck: Database status OK.
| Wed Mar  3 18:36:27 2004 -> SelfCheck: Integrity OK

Thanks in advance for dealing with this.

Kind regards   _______ 
Frank Elsner  / c/o  Technische Universitaet Berlin   |
 /   ZRZ, Sekr. E-N 50|
|Einsteinufer 17  |
| Phone: +49 30 314 23897D-10587 Berlin   |
| eMail: [EMAIL PROTECTED] Germany _|
|___| Aus die Maut





---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clamd + Exim. Support relay or not ?

2004-04-20 Thread Frank Elsner
On Tue, 20 Apr 2004 16:36:16 +0400 "=?windows-1251?Q?=CC=E8=F5=E0=E8=EB?=" wrote:
> Hello, htllp me please
> 
> Does ClamAV supports mail server which relays mail ?
> I mean mail not to localhost but to other MTA's ?
> 
> I've installed Exim+eciscan and ClamAV
> all log information is ok
> for example:
> Tue Apr 20 16:16:05 2004 -> +++ Started at Tue Apr 20 
> 16:16:05 2004
> Tue Apr 20 16:16:05 2004 -> Log file size limited to 
> 2097152 bytes.
> Tue Apr 20 16:16:05 2004 -> Verbose logging activated.
> Tue Apr 20 16:16:05 2004 -> Running as user clamav (UID 
> 1003, GID 1003)
> Tue Apr 20 16:16:05 2004 -> Reading databases from 
> /usr/local/share/clamav
> Tue Apr 20 16:16:06 2004 -> Protecting against 21157 
> viruses.
> Tue Apr 20 16:16:06 2004 -> Bound to address 127.0.0.1 on 
> port 3310
> Tue Apr 20 16:16:06 2004 -> Setting connection queue 
> length to 15
> Tue Apr 20 16:16:06 2004 -> Listening daemon: PID: 149
> Tue Apr 20 16:16:06 2004 -> Maximal number of threads: 20
> Tue Apr 20 16:16:06 2004 -> Archive: Archived file size 
> limit set to 10485760 bytes.
> Tue Apr 20 16:16:06 2004 -> Archive: Recursion level limit 
> set to 5.
> Tue Apr 20 16:16:06 2004 -> Archive: Files limit set to 
> 1000.
> Tue Apr 20 16:16:06 2004 -> Archive: Compression ratio 
> limit set to 200.
> Tue Apr 20 16:16:06 2004 -> Archive support enabled.
> Tue Apr 20 16:16:06 2004 -> RAR support enabled.
> Tue Apr 20 16:16:06 2004 -> Mail files support enabled.
> Tue Apr 20 16:16:06 2004 -> Self checking every 3600 
> seconds.
> Tue Apr 20 16:16:06 2004 -> Timeout set to 180 seconds.
> Tue Apr 20 16:16:06 2004 -> SelfCheck: Database status OK.
> Tue Apr 20 16:16:06 2004 -> SelfCheck: Integrity OK
> 
> 
> But it DOES NOT see any virus in the attachment!

Maybe you haven't configured exim to call clamd ?

You should show us your ACLs from the exim configuration.

--Frank Elsner




---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Your ClamAV installation is OUTDATED

2004-04-29 Thread Frank Elsner
On Thu, 29 Apr 2004 08:38:04 CDT "John Madden" wrote:
> > Update to ClamAV version 0.70
> 
> What are the consequences of not upgrading?  I'd have to plan downtime,
> etc...

Downtime because of clamav update ?

--Frank Elsner




---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] freshclam vs selfcheck

2004-04-29 Thread Frank Elsner

RedHat 7.3, ClamAV version 0.70

Can anybody explain this ? freshclam says "up to date" but selfcheck reloads ?

Apr 29 10:07:00 freshclam[7761]: Freshclam started. 
Apr 29 10:07:00 freshclam[7761]: ClamAV update process started at Thu Apr 29 10:07:00 
2004 
Apr 29 10:07:00 freshclam[7761]: main.cvd is up to date (version: 22, sigs: 20229, 
f-level: 1, builder: tkojm) 
Apr 29 10:07:01 freshclam[7761]: daily.cvd is up to date (version: 294, sigs: 1075, 
f-level: 2, builder: diego) 
Apr 29 10:10:04 clamd[656]: SelfCheck: Database modification detected. Forcing reload. 
Apr 29 10:10:04 clamd[656]: Reading databases from /usr/local/clamav/data 
Apr 29 10:10:07 clamd[656]: Database correctly reloaded (21304 viruses)


--Frank Elsner




---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] freshclam vs selfcheck

2004-04-30 Thread Frank Elsner
On Thu, 29 Apr 2004 14:49:49 EDT "Jim Maul" wrote:
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Frank
> > Elsner
> > Sent: Thursday, April 29, 2004 1:19 PM
> > To: [EMAIL PROTECTED]
> > Subject: [Clamav-users] freshclam vs selfcheck
> >
> >
> >
> > RedHat 7.3, ClamAV version 0.70
> >
> > Can anybody explain this ? freshclam says "up to date" but
> > selfcheck reloads ?
> >
> > Apr 29 10:07:00 freshclam[7761]: Freshclam started.
> > Apr 29 10:07:00 freshclam[7761]: ClamAV update process started at
> > Thu Apr 29 10:07:00 2004
> > Apr 29 10:07:00 freshclam[7761]: main.cvd is up to date (version:
> > 22, sigs: 20229, f-level: 1, builder: tkojm)
> > Apr 29 10:07:01 freshclam[7761]: daily.cvd is up to date
> > (version: 294, sigs: 1075, f-level: 2, builder: diego)
> > Apr 29 10:10:04 clamd[656]: SelfCheck: Database modification
> > detected. Forcing reload.
> > Apr 29 10:10:04 clamd[656]: Reading databases from /usr/local/clamav/data
> > Apr 29 10:10:07 clamd[656]: Database correctly reloaded (21304 viruses)
> >
> 
> I believe clam reloads every [insert value from clamav.conf here] regardless
> of whether or not there was a change to the database.

You believe incorrect. There are entries of this kind

Apr 30 04:00:05 clamd[656]: SelfCheck: Database status OK.


--Frank Elsner




---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] SelfCheck problems

2004-06-11 Thread Frank Elsner


RHL 7.3, ClamAv 0.72, Config file contains "SelfCheck 3600", 
^^
but /var/log/messages shows:

Jun 10 16:40:05 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 10 20:30:04 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 10 22:10:05 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 10 23:20:04 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 01:30:06 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 02:40:05 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 04:00:05 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 07:40:05 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 10:10:04 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 11:50:05 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 15:20:04 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 16:40:05 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 18:00:06 moltke clamd[663]: SelfCheck: Database status OK. 
Jun 11 19:20:05 moltke clamd[663]: SelfCheck: Database status OK.

This are obviously not 3600 sec intervals.


Kind regards   _______ 
Frank Elsner  / c/o  Technische Universitaet Berlin   |
 /   ZRZ, Sekr. E-N 50|
|Einsteinufer 17  |
| Phone: +49 30 314 23897D-10587 Berlin   |
| eMail: [EMAIL PROTECTED] Germany   ___|
|_| Wegen dem Gedanken





---
This SF.Net email is sponsored by the new InstallShield X.
>From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] /tmp directory filling up

2004-06-13 Thread Frank Elsner
On Sat, 12 Jun 2004 11:44:30 EDT Miles Fidelman wrote:
> I wonder if someone can help me:
> 
> I'm running clamav-milter and clamd v.70 on a Redhat 9 machine.
> 
> My /tmp directory keeps filling up with directories of the form:   
> clamav-006dc8fd472d18e9, and after a while /tmp fills up to the point 
> where new files can't be created and all kinds of things on the machine 
> start failing.

I second this. The directories contain 2 files, COPYING and viruses.db.
They must be left over from freshclam. Right ?

--Frank ELsner




---
This SF.Net email is sponsored by the new InstallShield X.
>From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.73

2004-06-15 Thread Frank Elsner
On Mon, 14 Jun 2004 19:49:38 +0200 Luca Gibelli wrote:
> Dear users,
> 
> ClamAV 0.73 is available for download.

Just upgraded from version 0.72 to 0.73 on RHL 7.3 and encountered:


freshclam gives error "ERROR: setgroups() failed."


Rehards_______ 
Frank Elsner  / c/o  Technische Universitaet Berlin   |
 /   ZRZ, Sekr. E-N 50|
|Einsteinufer 17  |
| Phone: +49 30 314 23897D-10587 Berlin   |
| eMail: [EMAIL PROTECTED] Germany   ___|
|_| Wegen dem Gedanken





---
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Install Clam-dev

2004-09-01 Thread Frank Elsner
On Wed, 01 Sep 2004 17:26:43 +0800 Wilson Mak wrote:
> I like to install clamav dev version, but got these errors when running 
> "make":
> 
> cd . && /bin/sh /usr/local/src/clamav-devel-latest/missing --run autoconf
> configure.in:20: error: Autoconf version 2.58 or higher is required
> aclocal.m4:529: AM_INIT_AUTOMAKE is expanded from...
> configure.in:20: the top level
> autom4te: /usr/bin/m4 failed with exit status: 1
> make: *** [configure] Error 1

Strange. No problem with RH-7.3, autoconf-2.13-17

--Frank Elsner




---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] announcing ClamAV 0.80rc

2004-09-21 Thread Frank Elsner
On Tue, 21 Sep 2004 13:03:32 +0200 Tomasz Kojm wrote:

  [ ... ]

> Almost all changes are backward compatible but the point of the renaming
> was to force users to review/edit their config files. Most of you are
> simply too lazy to add, activate, or tune new options without such
> dramatic changes.

Unfortunatly the "make install" overwrites an existing file.

--Frank Elsner




---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] announcing ClamAV 0.80rc

2004-09-23 Thread Frank Elsner
On Tue, 21 Sep 2004 14:43:15 BST Trog wrote:
> On Tue, 2004-09-21 at 14:23, Frank Elsner wrote:
> > On Tue, 21 Sep 2004 13:03:32 +0200 Tomasz Kojm wrote:
> > 
> >   [ ... ]
> > 
> > > Almost all changes are backward compatible but the point of the renaming
> > > was to force users to review/edit their config files. Most of you are
> > > simply too lazy to add, activate, or tune new options without such
> > > dramatic changes.
> > 
> > Unfortunatly the "make install" overwrites an existing file.
> 
> No it doesn't.

And what about this sequence from "make install" ?

| make[1]: Entering directory `/home/elsn4000/ClamAV/clamav-0.80rc2/etc'
| /bin/sh ../mkinstalldirs /usr/local/clamav/etc
| /usr/bin/install -c -m 644 ./clamd.conf /usr/local/clamav/etc
| /usr/bin/install -c -m 644 ./freshclam.conf /usr/local/clamav/etc
| make[1]: Leaving directory `/home/elsn4000/ClamAV/clamav-0.80rc2/etc'

Confused   ___ 
Frank Elsner  / c/o  Technische Universitaet Berlin   |
 /   ZRZ, Sekr. E-N 50|
|Einsteinufer 17  |
| Phone: +49 30 314 23897D-10587 Berlin   |
| eMail: [EMAIL PROTECTED] Germany__|
|__| Alpha, Beta, Gaga





---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] SPAM[RBL] version 0.54

2004-10-11 Thread Frank Elsner
On Mon, 11 Oct 2004 12:19:14 +0300 darius wrote:
> I have version 0.54 and from september 2004 i can't update clamav. 
 
Rather old. We are at 0.80rc3. You should upgrade due to significant changes.

--Frank Elsner


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Make install overwriting clamd.conf

2004-10-01 Thread Frank Elsner
On Fri, 01 Oct 2004 12:19:39 EDT Dennis Skinner wrote:
> I think I recall someone else reporting that make install on 0.80rc3
> overwrites any existing clamd.conf file.  I just confirmed (twice) that
> it does just that.

I've reported that at least two times, last on Tue, 21 Sep 2004 15:23:41 +0200.

On Tue, 21 Sep 2004 14:43:15 BST Trog wrote:
> No it doesn't.

What is obviously wrong.
 
Citing my reply to him on Thu, 23 Sep 2004 09:22:42 +0200
>  And what about this sequence from "make install" ?

> | make[1]: Entering directory `/home/elsn4000/ClamAV/clamav-0.80rc2/etc'
> | /bin/sh ../mkinstalldirs /usr/local/clamav/etc
> | /usr/bin/install -c -m 644 ./clamd.conf /usr/local/clamav/etc
> | /usr/bin/install -c -m 644 ./freshclam.conf /usr/local/clamav/etc
> | make[1]: Leaving directory `/home/elsn4000/ClamAV/clamav-0.80rc2/etc'

No reaction to this until now.

I've "*.local" versions which will be copied to the corresponding 
"*.conf" files in rc.clamd. This way I overcome their ignorance.


Regards___ 
Frank Elsner  / c/o  Technische Universitaet Berlin   |
 /   ZRZ, Sekr. E-N 50|
|Einsteinufer 17  |
| Phone: +49 30 314 23897D-10587 Berlin   |
| eMail: [EMAIL PROTECTED] Germany__|
|__| Alpha, Beta, Gaga



___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] GUI for Clamav

2004-10-06 Thread Frank Elsner
On Thu, 07 Oct 2004 06:12:34 - "Syed Zuhdi Syed Salim" wrote:
> Hello;
> Any GUI for Clamav...I mean for Linux ???

For what ? 

BTW, mine is named "vi".


--Frank Elsner


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Problems after upgrading to 0.80

2004-10-19 Thread Frank Elsner
On Tue, 19 Oct 2004 15:03:13 +0700 "Fajar A. Nugraha" wrote:

  [ ... ]

> exim 4.24 (the exiscan patch of it, to be exact) seems to have that 
> problem. Use exim 4.41 instead.

Or use the newest exim-4.43/exiscan-acl-4.43-28 combination.
Works great with ClamAV 0.80.

--Frank Elsner


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Problems after upgrading to 0.80

2004-10-19 Thread Frank Elsner
On Tue, 19 Oct 2004 13:23:21 +0200 "Graham Dodd" wrote:

  [ ... ]

> av_scanner = clamd:127.0.0.1 3310

That means your clamd listems for TCP connections on port 3310

> And in check_data have the following:
> 
> # Check for Virus/virii exiscan
>   deny message = This message contains malware ($malware_name)
>   demime = *
>   malware = *
>   delay = 10s
> 
> 
> Until 0.80 this worked

Your "clamd.conf" should contain

#LocalSocket /tmp/clamd
TCPSocket 3310

This works perfect with exim-4.43 including exiscan-acl-4.43-28

--Frank Elsner



___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] 80 question: clamav.conf

2004-10-19 Thread Frank Elsner
On Tue, 19 Oct 2004 08:12:31 EDT [EMAIL PROTECTED] wrote:
> Trying to upgrade to .80 on SuSE Linux PPC distro, from 0.75.
> 
> It looks like /etc/clamav.conf in the .75 release, has been replaced by
> /etc/clamd.conf in the 80 release.  Can anyone confirm, because this will
> effect my upgrade procedures.

Confirmed. 

--Frank Elsner


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


[Clamav-users] cl_loaddbdir(): Can't open directory

2004-10-20 Thread Frank Elsner

Just installed version 0.80.

"clamdscan ." runs fine saying 
 ---
/usr/local/clamav/etc/./TestFile: ClamAV-Test-Signature FOUND

--- SCAN SUMMARY ---
Infected files: 1
Time: 0.044 sec (0 m 0 s)



BUT "clamscan -r ." gives error message
 - 
LibClamAV Error: cl_loaddbdir(): Can't open directory /usr/ClamAV/data0
ERROR: Unable to open file or directory

--- SCAN SUMMARY ---
Known viruses: 0
Scanned directories: 0
Scanned files: 0
Infected files: 0
Data scanned: 0.00 MB
I/O buffer size: 131072 bytes
Time: 0.004 sec (0 m 0 s)


Both "freshclam.conf" and "clamd.conf" contain
   DatabaseDirectory /usr/ClamAV/data/

What's causing the error ?


--Frank Elsner


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] cl_loaddbdir(): Can't open directory

2004-10-20 Thread Frank Elsner
On Wed, 20 Oct 2004 08:59:22 MDT Mikel Bauer wrote:
> Not to sound too obvious, but, does the directory /usr/ClamAV/data/
> exist? (case sensitive)

YES.

ls -la /usr/ClamAV/data/
total 1378
drwxrwxr-x2 clamav   exim 2048 Oct 20 17:08 .
drwxrwxr-x   10 clamav   root 2048 Oct  7 22:28 ..
-rw-r--r--1 clamav   exim   111540 Oct 20 17:08 daily.cvd
-rw-r--r--1 clamav   exim  1284637 Oct 19 17:39 main.cvd

On Wed, 20 Oct 2004 22:07:25 +0700 Fajar A. Nugraha said:
> You DID compile it from source, right? Last time I check clamscan use
> compiled-time database directory (in this  case seems to be /usr/
> ClamAV/data0), and ignores clamd.conf completely. You COULD use "-d
> FILE/DIR" command line parameter. 

> My guess is you have a typo during ./configure so it says /usr/ClamAV/
> data0 (note the 0) instead of /usr/ClamAV/data. Try "clamscan -r -d 
> /usr/ClamAV/data ."

No typo in configure which reads

./configure --prefix=/usr/ClamAV --sbindir=/usr/ClamAV/bin \
--datadir=/usr/ClamAV/data --mandir=/usr/local/man \
--disable-clamav 

"clamscan -r -d /usr/ClamAV/data ." did it.


--Frank Elsner



___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Problem: sigtool --list-sigs

2004-11-26 Thread Frank Elsner
On Thu, 25 Nov 2004 19:03:11 +0100 Frank Elsner wrote 
   to <[EMAIL PROTECTED]>:
> 
> I've a problem with listing the signatures.
> 
> ClamAV 0.80 configured by 
> 
>./configure --prefix=/usr/ClamAV --sbindir=/usr/ClamAV/bin \
>--datadir=/usr/ClamAV/data --mandir=/usr/local/man \
>--disable-clamav --disable-clamuko --with-user=exim
> 
> compiled, installed and working like a charme.
> 
> But "sigtool --list-sigs" gives 
>  ERROR: Can't open directory /usr/ClamAV/data0
> 
> The "/usr/ClamAV/data" directory seens to be ok
> 
> drwxrwxr-x2 clamav   exim 2048 Nov 24 15:50 ./
> drwxrwxr-x   10 clamav   root 2048 Nov 19 15:22 ../
> -rw-r--r--1 clamav   exim66385 Nov 24 15:50 daily.cvd
> -rw-r--r--1 clamav   exim  1455358 Nov 20 02:18 main.cvd
> 
> I'd like to be able to list the signatures but how ?

Answering my own question:

I've found the bug. 

After ./configure (see above) file clamav-config.h contains 

  /* Path to virus database directory. */
  #define DATADIR "/usr/ClamAV/share/clamav"
    Refer to ./configure above

Changing this to 

  /* Path to virus database directory. */
  #define DATADIR "/usr/ClamAV/data"
     
         solved the problem.


Kind regards   ___ 
Frank Elsner  / c/o  Technische Universitaet Berlin   |
 /   ZRZ, Sekr. E-N 50|
|Einsteinufer 17  |
| Phone: +49 30 314 23897D-10587 Berlin   |
| eMail: [EMAIL PROTECTED] Germany  |
|_| Exim rulez



___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Clamd version mismatch

2004-12-16 Thread Frank Elsner
On Thu, 16 Dec 2004 14:31:08 GMT Fernando Azevedo wrote:

> My clamd-update keeps complaining that my clamd engine needs to be uptaded.
> It reports a 0.80rc4 instead of the installed 0.80 I have running.
> 
> It is a fact that before installing 0.80 I had the 0.80rc4 but I've changed
> that. Below are some log lines to have a better view of the situation.

Old version still laying around in path.


--Frank Elsner


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] URL.Spoof.gen

2004-12-22 Thread Frank Elsner
On Wed, 22 Dec 2004 15:13:09 +0300 Odhiambo Washington wrote:
> * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [20041222 15:11]: wrote:
> > danke für deine eamil
> 
> 
> Where is the list moderator?

I second your cry.

> This address - [EMAIL PROTECTED] - please ban it! Or is it just me
> getting the crap from it?

You are not alone. 

--Frank Elsner


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.81

2005-01-27 Thread Frank Elsner
On Thu, 27 Jan 2005 13:17:16 +0100 Ralph Angenendt wrote:
> Luca Gibelli wrote:
> > Dear ClamAV users,
> > 
> > release 0.81 is now available for download.
> 
> [ NOTHING ABOUT FUNCTIONALITY UPGRADE ]
> 
> WARNING: Your ClamAV installation is OUTDATED - please update immediately!
> WARNING: Current functionality level = 3, required = 4
> 
> This is the second time, that this happened (last time was to 0.80).

And it sounds a bit unpolite :-([at least to me]

I suggest 
 s/please update immediately!/Please update as soon as possible./


--Frank Elsner

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.81

2005-01-27 Thread Frank Elsner
On Thu, 27 Jan 2005 13:42:12 +0100 Tomasz Kojm wrote:
> On Thu, 27 Jan 2005 13:37:33 +0100
> Frank Elsner <[EMAIL PROTECTED]> wrote:
> 
> > > WARNING: Your ClamAV installation is OUTDATED - please update
> > > immediately! WARNING: Current functionality level = 3, required = 4
> > > 
> > > This is the second time, that this happened (last time was to 0.80).
> > 
> > And it sounds a bit unpolite :-([at least to me]
> > 
> > I suggest 
> >  s/please update immediately!/Please update as soon as
> >  possible./
> 
> Will ASCII-art flowers printed by freshclam satisfy you as well?

Yes, put it on the wishlist for 0.82 ;-)


--Frank Elsner

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Version 0.83

2005-02-15 Thread Frank Elsner
On Tue, 15 Feb 2005 11:56:02 +0100 Moritz Winterberg wrote:
> Hi,
> 
> I just subscribed to the list, so forgive me if this question
> has already been answered.
> 
> When executing freshclam I get a notice telling me to update
> to clamav Version 0.83. I'm running 0.82 which looking at the web
> seems to be the latest version ?

Look at http://www.clamav.net/stable.php#pagestart

Regards_______ 
Frank Elsner  / c/o  Technische Universitaet Berlin   |
 /   ZRZ, Sekr. E-N 50|
|Einsteinufer 17  |
| Phone: +49 30 314 23897D-10587 Berlin   |
| eMail: [EMAIL PROTECTED] Germany  |
|_| Exim rulez
http://www.clamav.net/stable.php#pagestart 

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] aliases.db Permission denied

2005-02-15 Thread Frank Elsner
On Tue, 15 Feb 2005 18:00:20 +0500 Sergey Yudin wrote:
> Please can someone tell me, what these errors means ? 
> Does clamav try to rehash aliases.db ? 
> 
> 
> == Feb 15 13:49:17  astra sendmail[3469]: j1F8nHog003469:
> SYSERR(clamav): Cannot open hash database /etc/mail/aliases.db: Permission
> denied 

This message is from sendmail, in no way related to clamav.


--Frank Elsner

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: AW: [Clamav-users] Re: not updating clam

2005-02-15 Thread Frank Elsner
On Tue, 15 Feb 2005 08:54:09 -0500 akshat wrote:
> Why not possible, earlier it was updated
> automatically. An entry is made in
> crontab. 

Don't mix up a) update of database
 b) update of the software (binaries)


--Frank Elsner

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: AW: [Clamav-users] not updating clam

2005-02-15 Thread Frank Elsner
On Tue, 15 Feb 2005 09:12:41 -0500 akshat wrote:
> Thanks for reply. 
> 
> But how earlier updates were done automatically , and these update(0.83) is 
> not updated automatically. 

You are wrong, definitly.


--Frank Elsner

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Starting clamd: execvp: No such file or directory

2005-03-15 Thread Frank Elsner
On Wed, 16 Mar 2005 02:22:52 + shams rahman wrote:
> hi,
> i installed the clamav-0.82.tar.gz in fc3 ,now when i want to start clamd 
  ^^

This is the source. Did you compile and install ?

> this is the error:
> /etc/rc.d/initd/clamd start
> Starting clamd: execvp: No such file or directory

Obviously not installed.


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] clamav needed

2005-03-22 Thread Frank Elsner
On Tue, 22 Mar 2005 16:49:51 +0545 (NPT) [EMAIL PROTECTED] wrote:
> does any one can point me to a site where i can download the whole
> stuff[rpm's stuff{milter,clamav etc..} and other educational resources on
> clamav also]

Ever heard of http://www.clamav.net ?


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] "Mirrors are not fully synchronized."

2005-04-06 Thread Frank Elsner
On Wed, 6 Apr 2005 09:59:13 +0100 Dave Ewart wrote:
> Freshclam seems to be giving me "ERROR: Mirrors are not fully
> synchronized. Please try again later." rather a lot in the last few
> weeks.

I've seen this message for the first and only (so far) time yesterda evening:

Apr  5 20:34:27 freshclam[7929]: Daemon started. 
Apr  5 20:34:27 freshclam[7929]: ClamAV update process started at Tue Apr  5 
20:34:27 2005 
Apr  5 20:34:27 freshclam[7929]: main.cvd is up to date (version: 30, sigs: 
31086, f-level: 4, builder: tkojm) 
Apr  5 20:34:29 freshclam[7929]: ERROR: Mirrors are not fully synchronized. 
Please try again later. 
Apr  5 20:34:29 freshclam[7929]: Trying again in 5 secs... 
 ^

Apr  5 20:34:34 freshclam[7929]: ClamAV update process started at Tue Apr  5 
20:34:34 2005 
Apr  5 20:34:34 freshclam[7929]: main.cvd is up to date (version: 30, sigs: 
31086, f-level: 4, builder: tkojm) 
Apr  5 20:34:35 freshclam[7929]: daily.cvd updated (version: 809, sigs: 1441, 
f-level: 4, builder: arnaud) 
Apr  5 20:34:35 freshclam[7929]: Database updated (32527 signatures) from 
db.DE.clamav.net (IP: 213.203.254.4) 
Apr  5 20:34:35 freshclam[7929]: Clamd successfully notified about the update.


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] version info

2005-04-18 Thread Frank Elsner
On Mon, 18 Apr 2005 16:15:15 +0800 cc wrote:
> Hi,
> 
> I need a bit of a clarification regarding
> clamscan --version.  I don't know if I'm going
> crazy or what, but I did a clamscan --version,
> and it showed yesterday's date, which I assumed
> it meant the date of compilation.
> 
> But I *don't* even remember compiling it yeserday.
> 
> ClamAV 0.83/837/Sun Apr 17 23:25:32 2005
  

This is the date if the "daily.cvd" which is version 837.


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Re: which scans mail

2005-06-17 Thread Frank Elsner
On Fri, 17 Jun 2005 09:01:33 -0400 [EMAIL PROTECTED] wrote:
> I will be away from the office until Monday, June 27.  If you need an
> immediate response, please send your email to [EMAIL PROTECTED]

Can one of the administrators please delete 

  <[EMAIL PROTECTED]>

from the mailing list ? Thanks in advance.


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Problem to check virus within RAR archives ?

2005-10-26 Thread Frank Elsner
On Wed, 26 Oct 2005 15:15:46 +0200 Pierre-Emmanuel Brinette wrote:

  [ ... ]

> $ rar -h
> RAR 3.50 beta 1   Copyright (c) 1993-2005 Alexander Roshal   30 Mar 2005
> [...]
> $ unrar -h 
> UNRAR 3.50 beta 3 freeware  Copyright (c) 1993-2005 Alexander Roshal
> [...]

  [ ... ]

> Somebody know how to solve this problem ?

http://www.clamav.net/abstract.html#pagestart says

| - built-in support for RAR (2.0), Zip, Gzip, Bzip2, Tar, MS OLE2, MS Cabinet 
files,
|   MS CHM (Compressed HTML), MS SZDD

Please note the "RAR (2.0)".


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Relaying only from internal network for an alias mail

2005-11-02 Thread Frank Elsner
On Wed, 2 Nov 2005 13:23:27 +0100 bsd wrote:
> Hello,
> 
> We are using postfix version 2.x with amavisd-new
> 
> We have setup a mail server with a list of e.mail addresses in a  
> virtual_alias file.
> 
> We would like to restrict the access to one of the mail on the  
> virtual_alias file only to our network.
> 
> How would you suggest to do that ??

I would suggest to use a postfix related mailing list to ask this question.
See http://www.postfix.org/lists.html


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] freshclam takes forever to run

2006-04-05 Thread Frank Elsner
On Thu, 06 Apr 2006 16:56:02 +0300 Karolis Dautartas wrote:

  [ ... ]

> I also tried to fetch the main.cvd file with wget. It took several 
> minutes to establish connection, and the transfer rate is about 100 
> bytes per second.

I bet your connecion ist the problem.


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] freshclam takes forever to run

2006-04-05 Thread Frank Elsner
On Thu, 06 Apr 2006 17:40:12 +0300 Karolis Dautartas wrote:
> >> I also tried to fetch the main.cvd file with wget. It took several 
> >> minutes to establish connection, and the transfer rate is about 100 
> >> bytes per second.
> > 
> > I bet your connecion ist the problem.
> 
> I tried to download clamav binaries from various mirrors from 
> sourceforge. The size of the file is 5.3 MB
> 
> mesh.dl.sourceforge.net: avg 425.25 KB/s, total 12.515 seconds
> jaist.dl.sourceforge.net: avg 311.16 KB/s, total 17.190 seconds
> heanet.dl.sourceforge.net: avg 491.30 KB/s, total 10.881 seconds
> 
> For some reason I am sure that our connection can handle more than 100 
> bytes per second :)
> 
> I have also tried to download this file:
> http://clamav-sj.viaverio.com/daily.cvd
> 
> It took less than a second (0.949s, 384.85 KB/s).
> 
> However, downloading from http://database.clamav.net/daily.cvd agian 
> takes forever... no matter how many times I try.

traceoute may help you to detect the bottleneck.
Thy it with the location mentioned.


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] cannot use yum to upgrade to 0.88.1

2006-04-10 Thread Frank Elsner
On Mon, 10 Apr 2006 12:04:09 +0100 Obantec Support wrote:
> Hi
> 
> i am using FC3 and currently running 0.88, freshclam log reports out of date
> clamav so i did yum update clamav
> only to get the response
> 
> "Could not find update match for clamav
> No Packages marked for Update/Obsoletion"
> 
> i am using http://crash.fce.vutbr.cz/yum-repository.html and did use it last
> time i upgraded. have i missed something?

Yes. FC3 is legacy. See http://fedoraproject.org/wiki/Legacy



--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Exim4 and clamav

2006-04-11 Thread Frank Elsner
On Wed, 12 Apr 2006 00:01:50 +0200 jkfloris wrote:
> Hello,
> 
> I'm using Exim 4, Clamav, fetchmail, Spamassassin and Courier-Imap as my 
> mail server
> everything is working fine, so that's not the issue.
> 
> But I want Clamav to ad a line to every email body or header. For 
> example: "virus scanned by Clamav"
> or in the header "X-Virus status: No"
> 
> Is this possible with this software?

Not with clamav, but exim can do it.

My exim onfig contains

|  acl_smtp_data = check_smtp_data
|  acl_not_smtp  = check_non_smtp
|..
|  check_smtp_data:
|..
|denymessage = Message contains malware ($malware_name)
|log_message = Malware ($malware_name) for $recipients
|malware = *
|  
|warnmessage = :after_received:X-Virus-Check: \
|${run{/usr/ClamAV/bin/clamd --version}\
|{${extract{1}{/}{$value}}/${extract{2}{/}{$value}}}\
|{unchecked}} on $primary_hostname; $tod_full
|  
|accept
|  
|  check_non_smtp:
|..
|denycondition = ${if !eq {$sender_address}{}{yes}{no}}
|message = Message contains malware ($malware_name)
|log_message = Malware ($malware_name) for $recipients
|malware = *
|control = freeze
|  
|warnmessage = :after_received:X-Virus-Check: \
|${run{/usr/ClamAV/bin/clamd --version}\
|{${extract{1}{/}{$value}}/${extract{2}{/}{$value}}}\
|{unchecked}} on $primary_hostname; $tod_full
|  
|accept


Regards______ 
Frank Elsner  /c/o  Technische Universitaet Berlin   |
 /  ZRZ, Sekr. E-N 50|
|   Einsteinufer 17  |
| Phone: +49 30 314 23897   D-10587 Berlin   |
| eMail: [EMAIL PROTECTED]Germany  |
|___| RIAS Berlin

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Re: weird log lines

2006-07-15 Thread Frank Elsner
On Sat, 15 Jul 2006 05:36:13 -0500 [EMAIL PROTECTED] wrote:
> I will be out of office July 22nd through the 28th.  I will be back in the 
> office Thursday, July 29th.  In case of emergency, please contact Jeff 
> Slutzky or Joni Largent.  Thanks. 

Please remove this addr from the list immediately.


--Frank Elsner

___
http://lurker.clamav.net/list/clamav-users.html