Re: [Clamav-users] Clamd Socket Already Exist Error [REPOST]

2003-08-24 Thread Thomas Lamy
Tomasz Kojm wrote: On Fri, 22 Aug 2003 22:23:00 +0200 Thomas Lamy <[EMAIL PROTECTED]> wrote: Tomasz Kojm wrote: On Thu, 21 Aug 2003 11:40:29 -0400 "Travis Robertson" <[EMAIL PROTECTED]> wrote: I have tried running clamd in local socket mode. The first time it runs everything is ok, it creates

Re: [Clamav-users] scan not picking up SoBig, help?

2003-08-24 Thread Marc Balmer
On Sun, 24 Aug 2003 20:35:15 +0100 Antony Stone <[EMAIL PROTECTED]> wrote: > > clamav requires a mail file to begin with "From " to be recognised > > as a mail message. It is certainly not a good solution. > > Depends whether you want it to be a good mail scanner, or a good > anti-virus engine.

Re: [Clamav-users] Clamd Socket Already Exist Error

2003-08-24 Thread Mark Mielke
I believe this is the wrong way of fixing this problem. To prove this, consider the race condition betweens stat(), connect() and bind(). Have you tried the documented method? Window 1: $ perl -e 'use Socket; socket($s, PF_UNIX, SOCK_STREAM, 0) || die "socket: $!\n"; bind($s, sockaddr_un("/tmp/f

Re: [Clamav-users] scan not picking up SoBig, help?

2003-08-24 Thread Antony Stone
On Sunday 24 August 2003 7:48 pm, Marc Balmer wrote: > clamav requires a mail file to begin with "From " to be recognised as a > mail message. It is certainly not a good solution. Depends whether you want it to be a good mail scanner, or a good anti-virus engine. I find ClamAV does an excellen

Re: [Clamav-users] scan not picking up SoBig, help?

2003-08-24 Thread Marc Balmer
clamav requires a mail file to begin with "From " to be recognised as a mail message. It is certainly not a good solution. marc --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single mach

Re: [Clamav-users] scan not picking up SoBig, help?

2003-08-24 Thread Yuval Kogman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 22 Aug 2003, Keith Pettit wrote: > Hi all, > > I just setup clamd and it seems to be scanning ok, it picked up the test > virus, but I can't get it to detect SoBig. I have a couple of files in > my INBOX I know have SoBIG but it dosen't seem

Re: [Clamav-users] Clamd Socket Already Exist Error

2003-08-24 Thread Thomas Lamy
Tomasz Kojm wrote: On Fri, 22 Aug 2003 22:23:00 +0200 Thomas Lamy <[EMAIL PROTECTED]> wrote: Tomasz Kojm wrote: On Thu, 21 Aug 2003 11:40:29 -0400 "Travis Robertson" <[EMAIL PROTECTED]> wrote: I have tried running clamd in local socket mode. The first time it runs everything is ok, it creates

Re: [Clamav-users] Clamd Socket Already Exist Error

2003-08-24 Thread Mark Mielke
On Sat, Aug 23, 2003 at 08:04:34PM -0400, Mark Mielke wrote: > Use open(O_CREAT) to create the file, bind() to try to get exclusive > access to it, and listen() to begin accepting connections. > This behaviour should not be optional. This behaviour is how it should > have been done all along. > J

[Clamav-users] Re: [Clamav-virusdb] Signature factory

2003-08-24 Thread Antony Stone
On Sunday 24 August 2003 2:23 am, Yuval Kogman wrote: (I've moved this over to the discussion list from the database announce list) > Is there any project to create automated signatures via a database? > > I've recently tried to write a script for fun, which, like sigtool, > creates minimal signa

[Clamav-users] Help with gzip attachments

2003-08-24 Thread Ricardo Kleemann
Hi everyone, I have my system setup such that it uses ripmime to extract attachments from messages, then I run clamdscan on the directory that contains the extracted attachments. That works quite well in most cases. However, I cannot get clamd to detect a virus which is contained in a gzip file.

Re: [Clamav-users] Can't Compile Clam on OPENBSD 3.3 STABLE

2003-08-24 Thread Michael Sullenszino
There is an informal port. Check out: http://activeintra.net/projects/clamav/ Mike On Sat, Aug 23, 2003 at 06:50:22PM +0200, Mark wrote: > I can't compile CLAM AV on OpenBSD 3.3 STABLE > > configure (i took the example with etc as installationfolder) works well. > But make... > > > collect

Re: [Clamav-users] attaching a message file (rfc822) to a message goes by unnoticed

2003-08-24 Thread Ricardo Kleemann
Hi Nigel, I'm running clamd / ClamAV version 20030720 The august snapshot of clamav was hanging on me so I went down to the July version. Anyway, I'm going to try and send you a gzip file of a message which has an embedded virus in it, and see if your clamd catches that. I know my clamd does not

Re: [Clamav-users] Clamd Socket Already Exist Error

2003-08-24 Thread Mark Mielke
On Sat, Aug 23, 2003 at 09:22:08PM +0200, Tomasz Kojm wrote: > On Fri, 22 Aug 2003 22:23:00 +0200 > Thomas Lamy <[EMAIL PROTECTED]> wrote: > > > You should stop clamd cleanly - eg. by sending the SIGTERM signal. > > > Best regards, > > > Tomasz Kojm > > What about the following pseudo-code at start