[Clamav-users] 0.80rc build error

2004-09-20 Thread listuser
I have been unsuccessful at getting 0.80rc to build on my RH9 box.  0.75.1 
builds just fine with the exact same ./configure options.  The build 
error states it can't find -lssl.  OpenSSL is installed in its default 
(not the bastardized RH's default) location of /usr/local/ssl.  All my 
other custom builds that use lssl work just fine so I know that install 
is peachy (I build everything for source).  Any ideas?

/bin/sh ../libtool --mode=link gcc  -g -O2  -lnsl -o libclamav.la -rpath 
/usr/local/lib -thread-safe -version-info 1:4:0 matcher-ac.lo 
matcher-bm.lo matcher.lo md5.lo others.lo readdb.lo cvd.lo dsig.lo str.lo 
scanners.lo filetypes.lo unrarlib.lo zzip-dir.lo zzip-err.lo zzip-file.lo 
zzip-info.lo zzip-io.lo zzip-stat.lo zzip-zip.lo strc.lo blob.lo mbox.lo 
message.lo snprintf.lo strrcpy.lo table.lo text.lo ole2_extract.lo 
vba_extract.lo msexpand.lo pe.lo cabd.lo lzxd.lo mszipd.lo qtmd.lo 
system.lo upx.lo htmlnorm.lo chmunpack.lo rebuildpe.lo petite.lo fsg.lo 
line.lo untar.lo -lz -lbz2 -lgmp -lcurl -L/usr/kerberos/lib -lssl -lcrypto 
-lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl -lz 
-L/usr/kerberos/lib -lz -lssl -lcrypto -lssl -lcrypto -lgssapi_krb5 -lkrb5 
-lcom_err -lk5crypto -lresolv -ldl -lz -lz -lpthread -lnsl
rm -fr .libs/libclamav.la .libs/libclamav.* .libs/libclamav.*
gcc -shared  matcher-ac.lo matcher-bm.lo matcher.lo md5.lo others.lo 
readdb.lo cvd.lo dsig.lo str.lo scanners.lo filetypes.lo unrarlib.lo 
zzip-dir.lo zzip-err.lo zzip-file.lo zzip-info.lo zzip-io.lo zzip-stat.lo 
zzip-zip.lo strc.lo blob.lo mbox.lo message.lo snprintf.lo strrcpy.lo 
table.lo text.lo ole2_extract.lo vba_extract.lo msexpand.lo pe.lo cabd.lo 
lzxd.lo mszipd.lo qtmd.lo system.lo upx.lo htmlnorm.lo chmunpack.lo 
rebuildpe.lo petite.lo fsg.lo line.lo untar.lo  -lbz2 -lgmp -lcurl 
-L/usr/kerberos/lib -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err 
-lk5crypto -lresolv -ldl -lz -lpthread -lnsl  -Wl,-soname 
-Wl,libclamav.so.1 -o .libs/libclamav.so.1.0.4
/usr/bin/ld: cannot find -lssl
collect2: ld returned 1 exit status
make[2]: *** [libclamav.la] Error 1
make[2]: Leaving directory `/usr/local/src/clamav/clamav-0.80rc/libclamav'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/src/clamav/clamav-0.80rc'
make: *** [all] Error 2


Thanks
 Justin



---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] announcing ClamAV 0.80rc

2004-09-21 Thread listuser
On Tue, 21 Sep 2004, Trog wrote:

> On Tue, 2004-09-21 at 14:23, Frank Elsner wrote:
> > On Tue, 21 Sep 2004 13:03:32 +0200 Tomasz Kojm wrote:
> > 
> >   [ ... ]
> > 
> > > Almost all changes are backward compatible but the point of the renaming
> > > was to force users to review/edit their config files. Most of you are
> > > simply too lazy to add, activate, or tune new options without such
> > > dramatic changes.
> > 
> > Unfortunatly the "make install" overwrites an existing file.
> 
> No it doesn't.
> 
> -trog

So this has been fixed since I reported this problem on March 31?

Justin



---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] 0.80rc build error

2004-09-21 Thread listuser
On Tue, 21 Sep 2004, Jeremy Kitchen wrote:

> On Tuesday 21 September 2004 12:39 am, [EMAIL PROTECTED] wrote:
> > /usr/bin/ld: cannot find -lssl
> 
> make sure you have the openssl and openssl-devel packages installed.

Thanks for the reply.  I thought I implied that OpenSSL was compiled and
installed from source.  The libraries and headers are always installed in 
that case.

Justin



---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] 0.80rc build error

2004-09-22 Thread listuser
On Tue, 21 Sep 2004, Jeremy Kitchen wrote:

> On Tuesday 21 September 2004 04:09 pm, [EMAIL PROTECTED] wrote:
> > On Tue, 21 Sep 2004, Jeremy Kitchen wrote:
> > > On Tuesday 21 September 2004 12:39 am, [EMAIL PROTECTED] wrote:
> > > > /usr/bin/ld: cannot find -lssl
> > >
> > > make sure you have the openssl and openssl-devel packages installed.
> >
> > Thanks for the reply.  I thought I implied that OpenSSL was compiled and
> > installed from source.  The libraries and headers are always installed in
> > that case.
> 
> ok, then you'll probably want to make sure the path to your openssl libraries 
> is in /etc/ld.so.conf, and after you verify that make sure to run ldconfig.

It is.  The dozens (literally) of other packages I compiled from source 
demanded it.

/lib
/usr/X11R6/lib
/usr/lib/sane
/usr/lib/qt-3.1/lib
/usr/local/lib
#/usr/kerberos/lib
/usr/local/ssl/lib
/usr/local/lib/perl5/5.8.3/i686-linux/CORE/
/usr/local/pgsql/lib
/usr/local/db/lib

Like I said, the OpenSSL is just fine.  It's been working for over a year
now.  I do an identical install on all my servers.  The problems seems to
be a Clam problem.  0.75.1 and befoer works perfectly.  0.80* fails every
time.  What'd they change that had to do with detecting -lssl in the new 
version?

Thanks
 Justin



---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Clam SSL issues

2004-11-18 Thread listuser
Greetings all.  I'm still having the same problem we talked about back in
September.  The Clam make isn't find -lssl for some reason.  Every release
up to and including 0.75.1 worked perfectly with the exact same configure
options.  Anything after that gives the same error including today's 
devel.  I've been configuring Clam with this for some time now and it's 
always worked before:

./configure --prefix=/usr/local --sysconfdir=/etc/clamav 
--localstatedir=/var --disable-clamuko --no-create --no-
recursion

My server is a RH9 install that has most of RH's stupid choices and
mistakes corrected.  Most everything is current and I almost always build
from source.  OpenSSL is the latest greatest (0.9.7e) and installed in the
default location (OSSL default, not RH) of /usr/local/ssl.  ld.so.conf is
set up correctly and of course ldconfig has been run.  I've built dozens
of packages on this system against OpenSSL (and other idential systems)  
and only one other package ever had this problem (and that was a script
error in ATB).  Also, zlib is current.

gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./zziplib -I./mspack 
-I/usr/local/include -g -O2 -MT special.lo -MD -MP -MF .deps/special.Tpo 
-c special.c  -fPIC -DPIC -o .libs/special.lo
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./zziplib -I./mspack 
-I/usr/local/include -g -O2 -MT special.lo -MD -MP -MF .deps/special.Tpo 
-c special.c -o special.o >/dev/null 2>&1
mv -f .libs/special.lo special.lo
/bin/sh ../libtool --mode=link gcc  -g -O2  -lnsl -L/usr/local/lib -o 
libclamav.la -rpath /usr/local/lib -thread-safe -version-info 1:4:0 
-no-undefined matcher-ac.lo matcher-bm.lo matcher.lo md5.lo others.lo 
readdb.lo cvd.lo dsig.lo str.lo scanners.lo filetypes.lo unrarlib.lo 
zzip-dir.lo zzip-err.lo zzip-file.lo zzip-info.lo zzip-io.lo zzip-stat.lo 
zzip-zip.lo strc.lo blob.lo mbox.lo message.lo snprintf.lo strrcpy.lo 
table.lo text.lo ole2_extract.lo vba_extract.lo msexpand.lo pe.lo cabd.lo 
lzxd.lo mszipd.lo qtmd.lo system.lo upx.lo htmlnorm.lo chmunpack.lo 
rebuildpe.lo petite.lo fsg.lo line.lo untar.lo special.lo -L/usr/local/lib 
-lz -lbz2 -lgmp -lcurl -L/usr/kerberos/lib -lssl -lcrypto -lgssapi_krb5 
-lkrb5 -lcom_err -lk5crypto -lresolv -ldl -lz -L/usr/kerberos/lib -lz 
-lssl -lcrypto -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto 
-lresolv -ldl -lz -lz -lpthread -lnsl
rm -fr .libs/libclamav.la .libs/libclamav.* .libs/libclamav.*
gcc -shared  matcher-ac.lo matcher-bm.lo matcher.lo md5.lo others.lo 
readdb.lo cvd.lo dsig.lo str.lo scanners.lo filetypes.lo unrarlib.lo 
zzip-dir.lo zzip-err.lo zzip-file.lo zzip-info.lo zzip-io.lo zzip-stat.lo 
zzip-zip.lo strc.lo blob.lo mbox.lo message.lo snprintf.lo strrcpy.lo 
table.lo text.lo ole2_extract.lo vba_extract.lo msexpand.lo pe.lo cabd.lo 
lzxd.lo mszipd.lo qtmd.lo system.lo upx.lo htmlnorm.lo chmunpack.lo 
rebuildpe.lo petite.lo fsg.lo line.lo untar.lo special.lo  
-L/usr/local/lib -lbz2 -lgmp -lcurl -L/usr/kerberos/lib -lssl -lcrypto 
-lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl -lz -lpthread 
-lnsl  -Wl,-soname -Wl,libclamav.so.1 -o .libs/libclamav.so.1.0.4
/usr/bin/ld: cannot find -lssl
collect2: ld returned 1 exit status
make[2]: *** [libclamav.la] Error 1
make[2]: Leaving directory 
`/usr/local/src/clamav/clamav-devel-20041118/libclamav'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/src/clamav/clamav-devel-20041118'
make: *** [all] Error 2

I've tried with and without

CFLAGS="-I/usr/local/include -I/usr/local/ssl/include"
CPPLAGS="-I/usr/local/include -I/usr/local/ssl/include"

I'm trying to get ClamAV >=0.80 working to help take the strain off the
servers with the new DNSDatabaseInfo option.  Unfortunately I'm stuck and
not able to do that until I can get around this problem.  Has anyone else
seen anything simliar?  The rest of my system is working fine.  I compile
things all the time with OpenSSL support and never have trouble.  I didn't
mention it earlier but no there are no header or library conflicts with
the OSSL RPMs hanging around.  Everything has been cleaned up nicely and
the duplicates have been neutralized.  I'm at a loss on this one.  If no
one else is experiencing this problem then it must either be my setup or
something I'm doing.  Everything else seems to be working fine though so I
suspect the problem is elsewhere.  A fresh look on this problem would
certainly help though.  Tomasz, any ideas for me?  I'm stumped.

Thanks
 Justin

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Clam SSL issues

2004-11-23 Thread listuser
On Fri, 19 Nov 2004, Tomasz Kojm wrote:

> On Fri, 19 Nov 2004 00:00:12 -0600 (CST)
> [EMAIL PROTECTED] wrote:
> 
> > I'm doing.  Everything else seems to be working fine though so I
> > suspect the problem is elsewhere.  A fresh look on this problem would
> > certainly help though.  Tomasz, any ideas for me?  I'm stumped.
> 
> configure --without-libcurl

Tomasz.  Thanks for the reply.  Sorry for the delay in getting back with 
you; I've been AFK since Friday.

--without-libcurl worked like a charm.  I wasn't aware of any issues
between libssl and libcurl.  What version of curl does Clam need?  I have
curl-7.10.6 w/ the devel package installed already.  I didn't see a
version requirement in the readme.  I'll see if I can find something
newer and see if that works.  Anyhow many thanks for the reply.  

Justin

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Clam SSL issues

2004-11-23 Thread listuser
On Fri, 19 Nov 2004, Thomas Lamy wrote:

> The includes are found, obviously. Your problem are the libraries.
> Let's have a look:
> # ldd /usr/lib/libclamav.so.1.0.4
> libbz2.so.1.0 => /usr/lib/libbz2.so.1.0 (0x40049000)
> libgmp.so.3 => /usr/lib/libgmp.so.3 (0x40059000)
> libcurl.so.3 => /usr/lib/libcurl.so.3 (0x40087000)
> libidn.so.11 => /usr/lib/libidn.so.11 (0x400b7000)
> libssl.so.0.9.7 => /usr/lib/i686/cmov/libssl.so.0.9.7 (0x400e7000)
> libcrypto.so.0.9.7 => /usr/lib/i686/cmov/libcrypto.so.0.9.7 (0x40118000)
> libdl.so.2 => /lib/tls/libdl.so.2 (0x40215000)
> libz.so.1 => /usr/lib/libz.so.1 (0x40218000)
> libpthread.so.0 => /lib/tls/libpthread.so.0 (0x4022b000)
> libnsl.so.1 => /lib/tls/libnsl.so.1 (0x4023a000)
> libc.so.6 => /lib/tls/libc.so.6 (0x4024f000)
> /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x8000)
> 
> This is on a Debian box though. Note that at least here the ssl 
> libraries are in uncommon places. Would you mind to do a
> find /usr/local/lib -name libcrypto.so\* -print
> and see what you get?

Actually libcrypto.so resides in /usr/local/ssl on my box.

find /usr/local/ssl/lib -name libcrypto.so\* -print
/usr/local/ssl/lib/libcrypto.so.0.9.7
/usr/local/ssl/lib/libcrypto.so.0
/usr/local/ssl/lib/libcrypto.so
/usr/local/ssl/lib/libcrypto.so.4

But that's not the problem.  Tomasz pointed me in the right direction when
he told me to try --without-curl.  Sure enough that worked.  My curl
install was version 7.10.6 IIRC (I've already replaced it and I forget
what it was now).  After the succesful compile without curl I compiled
7.12.2 and recompiled clam without the disabling of libcurl support that 
time.  Sure enough it worked like a charm.  I don't know what the minimum 
version of Curl is that Clam requires but 7.12.2 certainly worked.  That 
should probably be put in the README or FAQ sometime.  It's an easy 
upgrade.

> > I'm trying to get ClamAV >=0.80 working to help take the strain off the
> > servers with the new DNSDatabaseInfo option.  Unfortunately I'm stuck and
> > not able to do that until I can get around this problem.  Has anyone else
> > seen anything simliar?  The rest of my system is working fine.  I compile
> > things all the time with OpenSSL support and never have trouble.  I didn't
> > mention it earlier but no there are no header or library conflicts with
> > the OSSL RPMs hanging around.  Everything has been cleaned up nicely and
> > the duplicates have been neutralized.  I'm at a loss on this one.  If no
> > one else is experiencing this problem then it must either be my setup or
> > something I'm doing.  Everything else seems to be working fine though so I
> > suspect the problem is elsewhere.  A fresh look on this problem would
> > certainly help though.  Tomasz, any ideas for me?  I'm stumped.
> > 
> > Thanks
> >  Justin
> After all it _might_ be an autoconf issue, but this is the first report 
> I ever read about this.

I've experienced autoconf issues w/ SSL before.  MySQL is a classic one.  
They had a bug for well over a year that always assumed SSL libraries on
RH boxes were in the standard RH place.  Setting CFLAGS and CPPFLAGS
didn't help one bit.  The solution required hacking up the MySQL source.  
It was pretty ugly.  After I inquired about it some user on the MySQL
mailing list sent me a patch that was widely distributed to fix the
problem.  For some reason the developers refused to fix the problem
themselves.  The own personal little war against certain library paths I
guess.  Oh well.  I think it finally works now.

Thanks for the reply,
 Justin

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


[clamav-users] Freshclam not working

2003-05-20 Thread listuser
Is anyone else having trouble with Freshclam not working?

Checking for a new database - started at Tue May 20 14:52:05 2003
Current working dir is /usr/local/share/clamav
yes not found in the data directory.
yes not found in the data directory.
Connected to clamav.elektrapro.com.
Reading md5 sum (viruses.md5): OK
Reading md5 sum (viruses2.md5): OK
ERROR: yes not found on remote server
ERROR: Can't download yes from clamav.elektrapro.com

I just installed ClamAV today (did it before last Fall).  I had freshclam 
working last year on that other machine but this time it's giving me an 
error.  To me the error implies that the problem isn't on my end.  Well, 
actually I guess it says that flat out.  Permissions aren't the problem.  
I'm running freshclam as root for this testing.  Can anyone else reproduce 
this?

Justin


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: [clamav-users] Freshclam not working

2003-05-20 Thread listuser
On Tue, 20 May 2003, David Vasil wrote:

> On Tue, May 20, 2003 at 02:54:36PM -0500, [EMAIL PROTECTED] wrote:
> > yes not found in the data directory.
> > yes not found in the data directory.
> > ERROR: yes not found on remote server
> > ERROR: Can't download yes from clamav.elektrapro.com
> 
> Not sure if this is anything related, but 'yes' is a binary
> that repeats a string until the process is killed.
> 
> Do you have the binary 'yes' installed on your system?

I believe it's required by POSIX.  Anyhow, I do have that.  I forgot to 
mention that I checked for that.

> > actually I guess it says that flat out.  Permissions aren't the problem.  
> > I'm running freshclam as root for this testing.  Can anyone else reproduce 
> 
> Secondly, running freshclam as root does not matter, freshclam
> drops privs to the clamav user.  Unless you specified in the
> configure script --with-uid=0 --with-gid=0 (bad idea) then
> it should drop privs to the clamav user.

Ah, I didn't realize it did that when run manually.  Nevertheless the 
permissions should be ok.

[EMAIL PROTECTED] ~]$> ls -la /usr/local/share/clamav/
total 1020
drwxrwxr-x2 clamav   clamav   4096 May 20 14:52 .
drwxr-xr-x   13 root root 4096 May 20 14:40 ..
-rw-rw-r--1 clamav   clamav1027045 May 20 14:40 viruses.db
-rw-rw-r--1 clamav   clamav566 May 20 14:40 viruses.db2

If I had a decent traffic analyzer handy I'd look deeper into the 
conversation.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: [clamav-users] Freshclam not working

2003-05-20 Thread listuser
On Tue, 20 May 2003, David Vasil wrote:

> On Tue, May 20, 2003 at 02:54:36PM -0500, [EMAIL PROTECTED] wrote:
> > yes not found in the data directory.
> > yes not found in the data directory.
> > ERROR: yes not found on remote server
> > ERROR: Can't download yes from clamav.elektrapro.com
> 
> Not sure if this is anything related, but 'yes' is a binary
> that repeats a string until the process is killed.
> 
> Do you have the binary 'yes' installed on your system?

I forgot I could use snort as a psuedo stand-in replacement for a nce GUI 
traffic analyzer.

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

05/20-15:25:26.918868 65.66.95.179:35508 -> 62.149.225.70:80
TCP TTL:64 TOS:0x0 ID:17555 IpLen:20 DgmLen:180 DF
***AP*** Seq: 0xBF67F961  Ack: 0x4990242F  Win: 0x16D0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 4636161 136753927 
GET /database/yes HTTP/1.1..Host: clamav.elektrapro.com..User-Ag
ent: clamav/0.54..Cache-Control: no-cache..Connection: close

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+



=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

05/20-15:25:27.098580 62.149.225.70:80 -> 65.66.95.179:35508
TCP TTL:39 TOS:0x0 ID:38713 IpLen:20 DgmLen:614 DF
***AP*** Seq: 0x4990242F  Ack: 0xBF67F9E1  Win: 0x16A0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 136753944 4636161 
HTTP/1.1 404 Not Found..Date: Tue, 20 May 2003 20:26:42 GMT..Ser
ver: Apache/1.3.27 (Unix)  (Red-Hat/Linux) mod_ssl/2.8.12 OpenSS
L/0.9.6b DAV/1.0.2 PHP/4.1.2 mod_perl/1.26..Connection: close..T
ransfer-Encoding: chunked..Content-Type: text/html; charset=iso-
8859-111c404 Not Found..No
t Found.The requested URL /database/yes was not found on th
is server...Apache/1.3.27 Server at clamav.elekt
rapro.com Port 800
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+


/database/yes doesn't exist on clamav.elektrapro.com.  I guess that 
answers that question.  Now I have to ask if anyone knows when it will be 
fixed?  I'm not sure what that file contains.  Perhaps it's auto-generated 
and I just happened to catch it in the middle of that generation.  Beats 
me though.

Justin


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: [clamav-users] Freshclam not working

2003-05-20 Thread listuser
On Tue, 20 May 2003, David Vasil wrote:

> On Tue, May 20, 2003 at 03:22:15PM -0500, [EMAIL PROTECTED] wrote:
> > > On Tue, May 20, 2003 at 02:54:36PM -0500, [EMAIL PROTECTED] wrote:
> > > > yes not found in the data directory.
> > > > yes not found in the data directory.
> > > > ERROR: yes not found on remote server
> > > > ERROR: Can't download yes from clamav.elektrapro.com
> 
> After looking at the source code for freshclam.c and manager.c
> in the ${CLAMSOURCEDIR}/freshclam directory it looks like 'yes'
> is actually a #DEFINE for the database names (in this case,
> DB1NAME and DB2NAME).
> 
> The database names should be defined in the makefile with these
> flags: -DDB1NAME=\"viruses.db\" -DDB2NAME=\"viruses.db2\"
> 
> How did you run your configure script?  Check your Makefile in
> the freshclam directory and see what the DEFS line shows.  What
> are DB1NAME and DB2NAME set to?  I think this should fix your
> problem.

I configured it with...

./configure --prefix=/usr/local --sysconfdir=/etc/clamav 
--localstatedir=/var --disable-clamuko --with-db1 --with-db

I left the name of db1 and db2 blank which typically makes most configure 
scripts insert a default filename or path.  I reconfigured it with 

--with-db1=viruses.db --with-db2=viruses.db2

I reran freshclam and the output changed to this:

Checking for a new database - started at Tue May 20 15:59:22 2003
Current working dir is /usr/local/share/clamav
yes not found in the data directory.
yes not found in the data directory.
Connected to clamav.elektrapro.com.
Reading md5 sum (viruses.md5): OK
Reading md5 sum (viruses2.md5): OK
ERROR: yes not found on remote server
ERROR: Can't download yes from clamav.elektrapro.com


Interesting.  So it's now checking the md5sums but it still can't find 
"yes".

Ah ha!  If you don't provide a filename at all it uses the following in 
DEFS:

-DDB1NAME=\"yes\" -DDB2NAME=\"yes\"

That explains it.  It would appear in fact that you don't need to specify 
--with-db1 or --with-db2 at all unless you want to change the filenames.  
By not using them with configure it still creates the appropriate DEFS 
line.  It looks like the only way you can go wrong here is if you don't 
define the filename.

Well, that seems to have fixed my problem.  Thanks for pointing me in the 
right direction.

Justin


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: [clamav-users] Mime mails

2003-05-23 Thread listuser
On Fri, 23 May 2003, Sean Rima wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Does clamav (0.54) read understand mime. I am just curious
> 
> Sean
> - -- 
> Q: Because it reverses the logical flow of conversation.
> A: Why is top posting frowned upon?

Does whatever glues your installation of ClamAV to your MTA do this for 
you?  I would expect that MIMEDefang would.  In fact IIRC MD decodes the 
message, put it into a temporary directory, and directs ClamAV to check 
the decoded files there.  You might look into that and see for sure.  
That's what I recall though.

Justin


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: [clamav-users] Virus summary

2003-05-28 Thread listuser
On Tue, 27 May 2003, Ronan Lucio wrote:

> Hello,
> 
> I'd like to make a report about the viruses catched by ClamAV.
> So, to do this I tried to read the clamav log file and create
> a txt file with the results, but, when I remove the clamd log
> file, ClamAV don't create it againg. ClamAV only create a new
> log file when I restart it.
> 
> So, If I want to leave the file blank each time I read it,
> should I restart clamd?
> 
> It's not so good to an automated process.
> 
> Any tip would be appreciated.

I hope you already rotate that log with logrotate.  How often do you want 
to generate the report?  Weekly?  Rotate the log weekly and logrotate will 
take care of the log file recreation.  If you want to rotate the log 
monthly and generate the report weekly then a trick I frequently use will 
work for you.  First get a copy of LogCheck.

http://freshmeat.net/redir/logcheck/40274/url_tgz/logcheck-1.1.1.tar.gz

Ungz and untar that file.  Compile logcheck.  You don't have to install it 
if you don't want the whole thing (handy tool though).  Copy src/logtail 
to somewhere useful like /usr/local/bin/.  Usage is simple:

logtail  /path/to/your/log  offsetFile  >  tempFile

Logtail stores the decimal offset and inode of the file in file to
remember exactly what it last read from the log file.  It outputs the
remaining log to STDOUT.  Dump that to a temp file and use that file as a
collection of data for your report generating.  Automate this with crons.  
First call a script that calls logtail.  Then call your report generation
script.  Or merge the two and pipe logtail's output into your report
generation script.  I always dump it to file because I pull multiple data
sources from that output (like POP and IMAP client connections or spam
rejections of various types in a 5 minute period).

I threw together the shell script below to call logtail and handle simple
instance locking in one go.

#!/bin/bash

LOGTAIL=/usr/local/bin/logtail
workDir=/noc/mail-stats
tmpFile=$workDir/current-log.out
offsetFile=$workDir/current-log.offset
lockFile=.logtail-lock

# Local lock file check/creation
if [ -f $workDir/$lockFile ];
 then
  echo ERROR: Local lock "$workDir/$lockFile" exists.;
  exit 1;
else
   date > $workDir/$lockFile 
fi

# remove the old temp file if it exists
# Not really needed but...
if [ -f $tmpFile ]; then
 rm -f $tmpFile 
fi

$LOGTAIL /var/log/maillog $offsetFile > $tmpFile

# Remove the lock file.
 rm -f $workDir/$lockFile || echo "ERROR: Can't remove $workDir/$lockFile."



Good luck
 Justin


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: [clamav-users] Missing binaries for clamd/clamdscan

2003-05-28 Thread listuser
George,

You probably already thought of this but just in case you didn't..

echo $PATH

is any /usr/local in there?

ls -l /usr/local/bin/clamscan

Your prompt indicates that you weren't root when you ran make install.  
Were you?

Justin

On Tue, 27 May 2003, George Szekely wrote:

> Hi all!
> 
> I'm quite new to clamav and having some problems compiling it for OSX.
> I'm using the standard process:
> 
> $ tar zxpvf clamav-x.yz.tar.gz
> $ cd clamav-x.yz
> $ ./configure; make
> $ make install
> 
> But somehow it does not compile nor install  clamd/clamdscan.
> The end of "make install" process does not indicate any error.
> 
> Any help would be appreciated.
> 
> George
> 
> 
> 
> /bin/sh ../mkinstalldirs /usr/local/include
>   /usr/bin/install -c -m 644 clamav.h /usr/local/include/clamav.h
> Making install in clamscan
> /bin/sh ../mkinstalldirs /usr/local/bin
>/bin/sh ../libtool --mode=install /usr/bin/install -c clamscan 
> /usr/local/bin/clamscan
> /usr/bin/install -c .libs/clamscan /usr/local/bin/clamscan
> make[2]: Nothing to be done for `install-data-am'.
> Making install in freshclam
> /bin/sh ../mkinstalldirs /usr/local/bin
>/bin/sh ../libtool --mode=install /usr/bin/install -c freshclam 
> /usr/local/bin/freshclam
> /usr/bin/install -c .libs/freshclam /usr/local/bin/freshclam
> make[2]: Nothing to be done for `install-data-am'.
> Making install in database
> /bin/sh ../mkinstalldirs /usr/local/share/clamav
> Making install in docs
> make[2]: Nothing to be done for `install-exec-am'.
> /bin/sh ../mkinstalldirs /usr/local/man/man1
>   /usr/bin/install -c -m 644 ./clamscan.1 /usr/local/man/man1/clamscan.1
>   /usr/bin/install -c -m 644 ./freshclam.1 /usr/local/man/man1/freshclam.1
>   /usr/bin/install -c -m 644 ./sigtool.1 /usr/local/man/man1/sigtool.1
>   /usr/bin/install -c -m 644 ./clamdscan.1 /usr/local/man/man1/clamdscan.1
> /bin/sh ../mkinstalldirs /usr/local/man/man5
>   /usr/bin/install -c -m 644 ./clamav.conf.5 /usr/local/man/man5/clamav.conf.5
> /bin/sh ../mkinstalldirs /usr/local/man/man8
>   /usr/bin/install -c -m 644 ./clamd.8 /usr/local/man/man8/clamd.8
> Making install in sigtool
> /bin/sh ../mkinstalldirs /usr/local/bin
>/bin/sh ../libtool --mode=install /usr/bin/install -c sigtool 
> /usr/local/bin/sigtool
> /usr/bin/install -c .libs/sigtool /usr/local/bin/sigtool
> make[2]: Nothing to be done for `install-data-am'.
> Making install in clamd
> 
> /bin/sh ../mkinstalldirs /usr/local/sbin
> make[2]: Nothing to be done for `install-data-am'.
> Making install in clamdscan
> /bin/sh ../mkinstalldirs /usr/local/bin
> make[2]: Nothing to be done for `install-data-am'.
> Making install in etc
> make[2]: Nothing to be done for `install-exec-am'.
> make[2]: Nothing to be done for `install-data-am'.
> make[2]: Nothing to be done for `install-exec-am'.
> make[2]: Nothing to be done for `install-data-am'.
> [adsl-66:~/clamav-0.54] root#
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Re: [clamav-users] Missing binaries for clamd/clamdscan

2003-05-28 Thread listuser
Ah.  An OS X user.  I don't have an OS X box handy anymore to test this 
on.  I'd suspect that's the same reason it's set to no; the author didn't 
have an OS X box to test on, or couldn't get testing and feedback from an 
OS X user.  I can't say that with any degree of certainty though.  It's 
plausible.  Good luck!

Justin


On Tue, 27 May 2003, George Szekely wrote:

> Justin,
> 
> Thanks for the feedback.
> 
> As it turns out the configure file for compiling clamav-0.54 sets
> "have_pthreads" to "no" if it detect Darwin (OSX) and clamd/clamdscan 
> requires POSIX threads support. Hence the absence of installation for 
> daemon.
> I was under the impression that OSX being FreeBSD, is supporting threads.
> 
> "use_netinfo="yes"
>  have_pthreads="no"
>  echo "$as_me:$LINENO: result: Darwin detected. Disabling thread 
> support." >&5
> echo "${ECHO_T}Darwin detected. Disabling thread support." >&6
>  ;;
> "
> I've flipped "no" to "yes" and it did compile and install, but the question
> in my mind remains if that is OK or it's set to "no" for a reason. It 
> works from the command line, but not from Exim yet.
> 
> George
> 
> 
> 
> [adsl-66:~] root# clamdscan clamav-0.54
> /var/root/clamav-0.54/test/test1: ClamAV-Test-Signature FOUND
> /var/root/clamav-0.54: OK
> 
> --- SCAN SUMMARY ---
> Infected files: 1
> Time: 1.826 sec (0 m 1 s)
> [adsl-66:~] root#
> 
> 
> 
> 
> +++ Started at Tue May 27 18:58:58 2003
> Log file size limited to 1048576 bytes.
> Reading databases from /usr/local/share/clamav
> Protecting against 7286 viruses.
> Unix socket file /tmp/clamd
> Setting connection queue length to 15
> Maximal number of threads: 5
> Archive: Archived file size limit set to 10485760 bytes.
> Archive: Recursion level limit set to 5.
> Archive: Files limit set to 1000.
> Archive support enabled.
> Self checking every 3600 seconds.
> Timeout set to 180 seconds.
> 
> 
> 
> >George,
> >
> >You probably already thought of this but just in case you didn't..
> >
> >echo $PATH
> >
> >is any /usr/local in there?
> >
> >ls -l /usr/local/bin/clamscan
> >
> >Your prompt indicates that you weren't root when you ran make install. 
> >Were you?
> >
> >Justin
> >
> >On Tue, 27 May 2003, George Szekely wrote:
> >
> >>  Hi all!
> >>
> >>  I'm quite new to clamav and having some problems compiling it for OSX.
> >>  I'm using the standard process:
> >>
> >>  $ tar zxpvf clamav-x.yz.tar.gz
> >>  $ cd clamav-x.yz
> >>  $ ./configure; make
> >>  $ make install
> >>
> >>  But somehow it does not compile nor install  clamd/clamdscan.
> >>  The end of "make install" process does not indicate any error.
> >>
> >>  Any help would be appreciated.
> >>
> >  > George
> >  >
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]