Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Lutz Petersen
> >Can clamd be made to exit on memory errors? That way daemontools can just > >start it from scratch again > > > Can't you use clamdwatch.pl with it ? Sure, but that's only a workaround. We have mailservers that get clamd restartet (via clamdwatch.pl) nearly 10-15 times a day. Every time clam

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Fajar A. Nugraha
Jason Haar wrote: On Tue, Aug 17, 2004 at 12:57:15PM +0100, Brian Morrison wrote: Yes, there's almost no point to having free physical memory on a machine, if it is freed and not claimed by something else the VM will remember the last use and not overwrite or swap unless something else needs to

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Jason Haar
On Tue, Aug 17, 2004 at 12:57:15PM +0100, Brian Morrison wrote: > Yes, there's almost no point to having free physical memory on a > machine, if it is freed and not claimed by something else the VM will > remember the last use and not overwrite or swap unless something else > needs to commit memory

Re: [Clamav-users] Error building on FreeBSD 4.10-STABLE (II)

2004-08-18 Thread Nigel Horne
mbox.c:382: curl/curl.h: No such file or directory This has been reported and has already been fixed. You need to be patient with sourceforge, there is nothing I can do to speed it up getting to the public server. Please report bugs to [EMAIL PROTECTED], especially those relating to CVS develop

Re: [Clamav-users] Getting signature file versions in PERL

2004-08-18 Thread Robert Blayzor
Thanks all for the suggestions. I wasn't aware that the version numbers were in plain obvious sight, but thanks for pointing that out. -- Robert Blayzor, BOFH INOC, LLC [EMAIL PROTECTED] PGP: http://www.inoc.net/~dev/ Key fingerprint = 1E02 DABE F989 BC03 3DF5 0E93 8D02 9D0B CB1A A7B0 That's a

[Clamav-users] Error building on FreeBSD 4.10-STABLE (II)

2004-08-18 Thread Gianmarco
Hi all and hi rob (FreeBSD clamv port mantainer). I am using a build box FreeBSD 4.10-STABLE to build a daily clamav binary. For some reason I can't use the FreeBSD port system so I am obliged to build it by hand. I get the latest daily cvs tarball: http://www.clamav.net/snapshot/clamav-devel-la

Re: [Clamav-users] Getting signature file versions in PERL

2004-08-18 Thread Matt
Todd Lyons <[EMAIL PROTECTED]> wrote: > Robert Blayzor wanted us to know: > > >[foo:/usr/local/share/clamav] sigtool -i daily.cvd > >Version: 459 > >I'm really interested in just getting Version #'s from within a PERL > >script. Anyone know how I can accomplish this natively without having > >

Re: [Clamav-users] Getting signature file versions in PERL

2004-08-18 Thread Jakub Jankowski
On 2004-08-18, Robert Blayzor wrote: I'm really interested in just getting Version #'s from within a PERL script. open(FH, " HTH -- (0> Jakub Jankowski [url]: s.atn.pl "Nawet w Krainie Czarow //\ [EMAIL PROTECTED] [rlu]: 174516 latwiej jest spotkac V_/_ [EMAIL PROTECTED] [ekg]: 921514

Re: [Clamav-users] Getting signature file versions in PERL

2004-08-18 Thread Stephen Gran
On Wed, Aug 18, 2004 at 11:48:56AM -0400, Robert Blayzor said: > I know I can do the following with sigtool: [snip] > I'm really interested in just getting Version #'s from within a PERL > script. Anyone know how I can accomplish this natively without having > to rely on system calling sigtool

[Clamav-users] fyi: MacOSX installation howto

2004-08-18 Thread OpenMacNews
hi, for those interested, here are my unadorned, somewhat dusty, 'from scratch' install notes for clamav. for me, works great on OSX 10.3.5. richard gmp -- GNU Multiple Precision Arithmetic Library # http://www.swox.c

Re: [Clamav-users] Getting signature file versions in PERL

2004-08-18 Thread Todd Lyons
Robert Blayzor wanted us to know: >[foo:/usr/local/share/clamav] sigtool -i daily.cvd >Version: 459 >I'm really interested in just getting Version #'s from within a PERL >script. Anyone know how I can accomplish this natively without having >to rely on system calling sigtool externally? Well b

Re: [Clamav-users] clamav and queue files of CGPro

2004-08-18 Thread Tomasz Papszun
On Wed, 18 Aug 2004 at 16:20:44 +0400, Vladimir Mendelevich wrote: > You wrote to <[EMAIL PROTECTED]> on Wed, 18 Aug 2004 > 11:58:59 +0200: > > TK> The -devel version handles such files. > > You are right. It;s works fine for me now. Any news about incorporate this > changes in stable? In the e

Re: [Clamav-users] Getting signature file versions in PERL

2004-08-18 Thread Tomasz Papszun
On Wed, 18 Aug 2004 at 11:48:56 -0400, Robert Blayzor wrote: > I know I can do the following with sigtool: > > [foo:/usr/local/share/clamav] sigtool -i daily.cvd > Build time: 17 Aug 2004 14-49 +0100 > Version: 459 > # of signatures: 1653 > Functionality level: 2 > Builder: trog > MD5: 56716b5ea7f

Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}

2004-08-18 Thread Tomasz Papszun
On Wed, 18 Aug 2004 at 7:22:35 -0700, Dennis Peterson wrote: > Tomasz Kojm wrote: > > > >You can setup your own (internal) database mirror. Freshclam connects to > >the httpd (80) port of DatabaseMirror, so you only need to download > >databases into a root directory of your www server (freshclam

Re: [Clamav-users] contrib/init/RedHat suggested patch

2004-08-18 Thread Dennis Peterson
Christopher X. Candreva said: > On Tue, 17 Aug 2004, Damian Menscher wrote: > >> If user A emails user B and the email doesn't go through in under 2 >> minutes, there will be complaints. Tempfail is just too dangerous. >> Yes, nothing will be lost. But you have to admit it's pretty bad for >> ema

[Clamav-users] Getting signature file versions in PERL

2004-08-18 Thread Robert Blayzor
I know I can do the following with sigtool: [foo:/usr/local/share/clamav] sigtool -i daily.cvd Build time: 17 Aug 2004 14-49 +0100 Version: 459 # of signatures: 1653 Functionality level: 2 Builder: trog MD5: 56716b5ea7fb38e049ba3f3657e5ab35 Digital signature: sBj2SGZrCm7xW+p67J+n7mbTJqxpgwtoYgGjM0

Re: [Clamav-users] Mac OS X installation?

2004-08-18 Thread Pascal Oberndoerfer
> On Wednesday 18 Aug 2004 11:03, Derek Tom wrote: > >> Would very much appreciate some basic info on getting it installed on OS X. > > Use the same method as any other system: download the latest tarball (stable > or > development, the choice is yours), run configure with various options then >

Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}

2004-08-18 Thread Dennis Peterson
Tomasz Kojm wrote: On Tue, 17 Aug 2004 11:36:30 +0100 (BST) [EMAIL PROTECTED] wrote: If we currently have four servers checking every hour. With a cache, just one update (through both our and clamav's valuable banmdwidth) You can setup your own (internal) database mirror. Freshclam connects to th

Re: [Clamav-users] contrib/init/RedHat suggested patch

2004-08-18 Thread Christopher X. Candreva
On Tue, 17 Aug 2004, Damian Menscher wrote: > If user A emails user B and the email doesn't go through in under 2 > minutes, there will be complaints. Tempfail is just too dangerous. > Yes, nothing will be lost. But you have to admit it's pretty bad for > email to be down. A few viruses leaking

Re: [Clamav-users] Mac OS X installation?

2004-08-18 Thread Nigel Horne
On Wednesday 18 Aug 2004 11:03, Derek Tom wrote: > Would very much appreciate some basic info on getting it installed on OS X. Use the same method as any other system: download the latest tarball (stable or development, the choice is yours), run configure with various options then 'make install'

Re: [Clamav-users] Mac OS X installation?

2004-08-18 Thread Bart Silverstrim
On Aug 18, 2004, at 6:03 AM, Derek Tom wrote: Hello, Mac OS X is listed as a supported platform but beyond that, there's no info on actually getting ClamAV installed on OS X. I looked through the FAQ, binary packages and ports (OS X not even listed), documentation, WikiWiki, and did a quick mail

Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}

2004-08-18 Thread Graham Toal
> How do I (as admin) stop internal clients going outside for updates and > force them to use my cache. (Once I set it up). You need a transparent proxy in-line on your network connection (eg just in front of your firewall or router). G --- SF

Re: [Clamav-users] clamav and queue files of CGPro

2004-08-18 Thread Vladimir Mendelevich
Hello, Tomasz! You wrote to <[EMAIL PROTECTED]> on Wed, 18 Aug 2004 11:58:59 +0200: TK> The -devel version handles such files. You are right. It;s works fine for me now. Any news about incorporate this changes in stable? ? ?, ?? ??? ? "1?-?" UIN:92

[Clamav-users] Bagle.AQ not detected

2004-08-18 Thread Nicolas Aulas
Hello all, I have a amavis-clamav(0.75.1)-postfix system installed on a fedora core 1 and it works very well. My "little" problem is about the "price_new.zip" virus (seems to be bagle.aq) tht's is not detected. Have you the same problem ? ---

Re: [Clamav-users] clamav and queue files of CGPro

2004-08-18 Thread Vladimir Mendelevich
Hello, Tomasz! You wrote to <[EMAIL PROTECTED]> on Wed, 18 Aug 2004 11:58:59 +0200: TK> The -devel version handles such files. Trying to compile devel. 1st problem - in mbox.c written - no curl.h needed anymore. It isn't true. :-)) Now installing curl-devel. About my problem. Thanks. Will see.

Re: [Clamav-users] clamav and queue files of CGPro

2004-08-18 Thread Vladimir Mendelevich
Hello, Tomasz! You wrote to <[EMAIL PROTECTED]> on Wed, 18 Aug 2004 11:45:11 +0200: TP> Which version of ClamAV? 0.75.1 TP> Have you tried also the current devel version? Nop. TP> Email scanning has been improved significantly in devel. Ok. Will try it. Thanks. ? ?, ?

Re: [Clamav-users] clamav and queue files of CGPro

2004-08-18 Thread Tomasz Kojm
On Wed, 18 Aug 2004 12:44:47 +0400 "Vladimir Mendelevich" <[EMAIL PROTECTED]> wrote: > Hello! > > I have some strange problem. > > I have files from CGPro Queue with viruses. Drweb can find viruses in > those files. ClamAV can too but with some modications. > > Like that. > > Original file. CL

[Clamav-users] Mac OS X installation?

2004-08-18 Thread Derek Tom
Hello, Mac OS X is listed as a supported platform but beyond that, there's no info on actually getting ClamAV installed on OS X. I looked through the FAQ, binary packages and ports (OS X not even listed), documentation, WikiWiki, and did a quick mailing list archive search but could not find an

Re: [Clamav-users] clamav and queue files of CGPro

2004-08-18 Thread Tomasz Papszun
On Wed, 18 Aug 2004 at 12:44:47 +0400, Vladimir Mendelevich wrote: > > I have files from CGPro Queue with viruses. Drweb can find viruses in those > files. ClamAV can too but with some modications. > > Original file. CLAMAV cannot find a virus. [...] Which version of ClamAV? Have you tried also

Re: [Clamav-users] contrib/init/RedHat suggested patch

2004-08-18 Thread Joe Maimon
Damian Menscher wrote: On Mon, 16 Aug 2004, Richard A Nelson wrote: On Mon, 16 Aug 2004, Todd Lyons wrote: It shouldn't, however change if a virus is accepted - since sendmail should be tempfailing mail until the milters are functioning. Incorrect, depending on how you define your

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Fajar A. Nugraha
Nigel Horne wrote: People here seem to be under the misunderstanding that free(3) will always reduce the amount of memory used by an application, returning memory back to the operating system. So it isn't? So the fact that "top" returns VIRT 3 GB but RES only 11M is normal? I'm confused then.

Re: [Clamav-users] Clam or clamassassin problem

2004-08-18 Thread Jeff Smelser
On Tuesday 17 August 2004 02:22 pm, lnx wrote: > X-Virus-Status: Failed > X-Virus-Report: Internal error mktemp MSGTMP failed > X-Virus-Checker-Version: clamassassin 1.2.1 with clamdscan / ClamAV version > 0.75.1 signatures 24.457 Status: Its a clamassassin problem. Whatever directory you using, i

Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}

2004-08-18 Thread Trog
On Tue, 2004-08-17 at 16:40, [EMAIL PROTECTED] wrote: > so in addition to our servers, there are some 50 client machines all > querying the clamav databases, probably every hour most likely more often > if I know M$ lovers. > > Making all users aware of the proxy cache will now mean we will only

RE: [Clamav-users] Re: False positive or problem with zipped exe

2004-08-18 Thread Diego d'Ambra
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Xavier Poinsard > Sent: 18. august 2004 09:49 > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Re: False positive or problem with zipped exe > > Tomasz Papszun wrote: > > On Tue, 17 Aug 2

[Clamav-users] clamav and queue files of CGPro

2004-08-18 Thread Vladimir Mendelevich
Hello! I have some strange problem. I have files from CGPro Queue with viruses. Drweb can find viruses in those files. ClamAV can too but with some modications. Like that. Original file. CLAMAV cannot find a virus. <---> P I 18-08-2004 07:12:53

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Nigel Horne
People here seem to be under the misunderstanding that free(3) will always reduce the amount of memory used by an application, returning memory back to the operating system. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www

Re: [Clamav-users] Freshclam cron interval {Revisado por Antivirus}

2004-08-18 Thread Net . Admin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is this in the manual/docs ? if so then IAP I realised after my post that nearly all our clients are using win32 clamav so in addition to our servers, there are some 50 client machines all querying the clamav databases, probably every hour most like

[Clamav-users] Re: False positive or problem with zipped exe

2004-08-18 Thread Xavier Poinsard
Tomasz Papszun wrote: On Tue, 17 Aug 2004 at 10:44:56 +0200, Xavier Poinsard wrote: Today, clamav reported that some old files where just infected with Trojan.Delf.CB-1-enc I suspect a false positive seems the files weren't modified since several months. All the infected files are executables aut

[Clamav-users] Another Clam newbie

2004-08-18 Thread Chris Rooney
I hope you can help me; I'm having several problems ClamAV.   The manual says that clamd responds to the following commands: ping, reload...etc.  But how do I send these commands? I have clamuko running, but how do I know if it has detected a virus? How does it tell me? Is i

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Daniel Tiefnig
Trog wrote: The problem is that clamd is using nearly twice as much memory as it was a minute before... It uses memory to scan files, especially to scan email messages. An email message could make the memory usage jump. I agree it would jump up and down of course, maybe increasing over the time w

Re: [Clamav-users] clam newbie

2004-08-18 Thread Kevin Spicer
On Wed, 2004-08-18 at 07:48, Tomasz Papszun wrote: > Please, make sure you do NOT send notifications to senders (they are > almost always spoofed nowadays), maybe except pertaining MS Office > macros and test signatures (EICAR and ClamAV-Test-Signature). I completely agree with that, but... > Als

Re: [Clamav-users] clam newbie

2004-08-18 Thread Tomasz Papszun
On Tue, 17 Aug 2004 at 16:06:02 -0400, Kern, Tom wrote: > [...] > also, where can i configure clamav to send a notification if when a virus is detected? > Please, make sure you do NOT send notifications to senders (they are almost always spoofed nowadays), maybe except pertaining MS Office macros