RE: [Clamav-users] Clamav failes to update {Scanned}

2004-03-23 Thread Ron Snyder
Dns answers have been too big for udp packets, so query gets redone as tcp. Some firewalls (or fw admins) block tcp dns requests. (Although I would have expected to see a "server failed" type of message rather than "non-existent host".) Something to investigate, anyway. > -Original Message-

[Clamav-users] Clamav failes to update {Scanned}

2004-03-23 Thread SW
I have clamav antivirus installed but a few days ago, it stopped getting updated because I can't seem to resolve 'database.clamav.net' and I'm not sure what the problem is. It seems I can resolve other sites, including clamav.net but not the database.clamav.net. Can someone help? Here is what I ge

RE: [Clamav-users] RFE: clamav-milter stuff

2004-03-23 Thread Damian Menscher
On Wed, 10 Mar 2004, Damian Menscher wrote: > On Wed, 10 Mar 2004, Nigel Horne wrote: > > ClamAV version 0.67-1, clamav-milter version 0.67a > Please be more specific by: (b) giving an example of a message that you think is missing some information, since all the messages I see

Re: [Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Fajar A. Nugraha
Jesse Guardiani wrote: Tomasz Kojm wrote: The problem may be connected with already discussed and fixed /dev/urandom issue. Please update to the latest CVS version. I'll consider it. This is a production server, so I'm not incredibly keen on running CVS code. Actually, with ClamAV CVS v

Re: [Clamav-users] Clamav 0.68-1 port for openbsd has been released

2004-03-23 Thread Tomasz Kojm
On Tue, 23 Mar 2004 20:44:49 +0100 "LOYET Jerome" <[EMAIL PROTECTED]> wrote: > Hello all, > > The port of clamav 0.68-1 has just been released and is available @ > http://www.fatbsd.com/openbsd Are you the current maintainer of the openbsd port ? > PS: There are still bugs with clamav on openbs

RE: [Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Ron Snyder
Jo Mills wrote: > packets for DNS sometime on Monday afternoon. I'll sort out > some DNS servers > from our ISP and (yet again!) work around the IT > guys. (Trog helped As an IT guy myself, I'd like to respectfully suggest that you let your IT team know that you've noticed a change in

[Clamav-users] RE: memory leak?

2004-03-23 Thread Jesse Guardiani
Lucas Albers wrote: > I'm a bit hesitant of upgrading to .68 or .70-rc if it appears to have a > memory leak. At what point can the developers say: > "this x release does not have a memory leak." :) Never, or about 2 years after the software is released and has run on virtually every machine know

[Clamav-users] Clamav 0.68-1 port for openbsd has been released

2004-03-23 Thread LOYET Jerome
Hello all, The port of clamav 0.68-1 has just been released and is available @ http://www.fatbsd.com/openbsd Enjoy, ++ Jerome PS: There are still bugs with clamav on openbsd. (Signals known problems on clamd and clamdscan (kill -HUP doesn't work fine))

[Clamav-users] Re: Time of signature in Virus DB Search

2004-03-23 Thread Jesse Guardiani
Peter Bonivart wrote: > I just noticed the new Virus DB Search function on the web site. That's > great, I will use that often but could you add the date and time (GMT) > the signature was added. I often get asked by managers when Clam added a > signature for comparison with other scanners and it

RE: [Clamav-users] memory leak?

2004-03-23 Thread Lucas Albers
I'm a bit hesitant of upgrading to .68 or .70-rc if it appears to have a memory leak. At what point can the developers say: "this x release does not have a memory leak." Pubs said: >> On Sun, Mar 21, 2004 at 01:14:53PM -0600, John Jolet wrote: >> > If anything, i'd say it leaked less...course, i j

Re: [Clamav-users] Clamav may crash when processing Certain RAR files.....

2004-03-23 Thread Lucas Albers
You won't detect some bagle rar virus unless you are using .68-1. .67 does not detect some virus's and core dumps. I filed this bug against the debian package last week and the maintainers (for debian) are releasing a .68-x package shortly. You need to upgrade to detect some bagle virus's. Jim sa

[Clamav-users] Time of signature in Virus DB Search

2004-03-23 Thread Peter Bonivart
I just noticed the new Virus DB Search function on the web site. That's great, I will use that often but could you add the date and time (GMT) the signature was added. I often get asked by managers when Clam added a signature for comparison with other scanners and it would make it real easy to

Re: [Clamav-users] Virus ID

2004-03-23 Thread Chris Meadors
On Tue, 2004-03-23 at 09:41 -0500, Bart Silverstrim wrote: > Silly question time... > > While I suppose the questions about the standard naming sequences may > help, I would propose one other idea (along with asking for help with > my question :-) > > First: I see a hit in my logfiles for Expl

Re: [Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Nigel Horne
On Tuesday 23 Mar 2004 3:06 pm, Jesse Guardiani wrote: > No, it's strictly text and just a LOT of characters. I can send it zipped > or a small sample if anyone is interested. It has a lot of repeating > characters, so it aught to compress rather well. Yes, please e-mail me a copy. -Nigel -- N

[Clamav-users] Clarification on header info from Clam

2004-03-23 Thread Dana Millaway
This is a newbie question, I'm sure. Please bear with me. I have searched the archives but either the answer is not in there or I haven't thought of the right search terms. When Clam AV notifies me that it detected (and deleted) a virus on my email server, it sends the message I have included b

[Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Jesse Guardiani
Adam Webb wrote: > softlimit set to low? Well, how much RAM does clamdscan eat then? Is it a flat memory footprint, or does it climb based on message size? I assumed that it would be a flat memory footprint and that clamdscan would simply write a large file to disk and pass it off to clamd. That

[Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Jesse Guardiani
Tomasz Kojm wrote: > On Mon, 22 Mar 2004 15:54:18 -0500 > Jesse Guardiani <[EMAIL PROTECTED]> wrote: > >> Any ideas on how to avoid this in the future? I'm running with >> ScanArchive and ScanMail (because I want the binhex feature on). > > The problem may be connected with already discussed and

[Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Jesse Guardiani
Nigel Horne wrote: >> > I attempted to push a 59M email through clamd via clamdscan >> > (all body, not attachment) and clamd has started chewing up >> > RAM and CPU. > > Does the e-mail include encapsulated RFC822 messages? If so, there has > been a fix to that recently. > > -Nigel No, it's st

RE: [Clamav-users] pthreads instability?

2004-03-23 Thread Trog
On Tue, 2004-03-23 at 13:37, Pubs wrote: > It seems evident now that clamd crashes when it has to scan some viruses, > any time I submit Bugbear, i have a segmentation fault ! fortunately, > clamscan relays the jobs . > > Hope it could helps > > clamd snapshot-20040323 / ama

[Clamav-users] Virus ID

2004-03-23 Thread Bart Silverstrim
Silly question time... While I suppose the questions about the standard naming sequences may help, I would propose one other idea (along with asking for help with my question :-) First: I see a hit in my logfiles for Exploit.HTML.Bagle.Gen-4-eml; is this the variant I've read about where if a

Re: [Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Jo Mills
On Tue, Mar 23, 2004 at 08:53:40PM +0700, Fajar A. Nugraha wrote: > Jo Mills wrote: > > >Hi, > > > >Is anybody else having problems getting database updates or is it just > >me? I haven't changed my clam setups for ages (it's on my todo list), > >yet recently (as from Mon, 22 Mar 2004 17:23:01 +

Re: [Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Fajar A. Nugraha
Jo Mills wrote: Hi, Is anybody else having problems getting database updates or is it just me? I haven't changed my clam setups for ages (it's on my todo list), yet recently (as from Mon, 22 Mar 2004 17:23:01 +) I get the following: [snip] With CVS freshclam version devel-20040129 C

RE: [Clamav-users] pthreads instability?

2004-03-23 Thread Pubs
It seems evident now that clamd crashes when it has to scan some viruses, any time I submit Bugbear, i have a segmentation fault ! fortunately, clamscan relays the jobs . Hope it could helps clamd snapshot-20040323 / amavisd-new / Freebsd5.0 > -Message d'origine- > De : [EMAI

[Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Jo Mills
Hi, Is anybody else having problems getting database updates or is it just me? I haven't changed my clam setups for ages (it's on my todo list), yet recently (as from Mon, 22 Mar 2004 17:23:01 +) I get the following: With freshclam 0.60: Current working dir is /usr/local/share/clamav

Re: [Clamav-users] bounce vs. quarantine

2004-03-23 Thread Nigel Horne
> The default value for --server is 127.0.0.1 so there's no need to add > --server=localhost. I have now documented this in the clamav-milter(8) manual page, and committed it to CVS, along with an overview of the ability of clamav-milter to talk to more than one clamd server. -Nigel -- Nigel

Re: [Clamav-users] bounce vs. quarantine

2004-03-23 Thread Nigel Horne
>new: >CLAMAV_FLAGS=" -lo --quarantine-dir=/var/spool/clamav --max-children=10 >--force-scan --quiet --dont-log-clean --server=localhost >local:/var/run/clamav/clamav-milter.sock" The default value for --server is 127.0.0.1 so there's no need to add --server=localhost. -Nigel -- Nigel Horne.

Re: [Clamav-users] bounce vs. quarantine

2004-03-23 Thread Krištof Petr
Steven Stern wrote: On second thought, maybe I should have a chance to look at incoming messages rather than bouncing them with a 550. I've removed the -b from the clamav-milter startup. I've replaced it with --quarantine=/var/spool/clamav. Is this what's necessary to quarantine messages in /var/