Re: [Clamav-users] Configuring clamd.conf

2005-05-27 Thread Matt Fretwell
Lee Zelyck wrote: > Does this mean that if I don't 'uncomment' anything > below this point, I will have the default scan options > enabled? > Or do I have to enable each of the options below this > point to augment the Default Scan Options? > > In short: Does the apparent double-negative...:

[Clamav-users] Configuring clamd.conf

2005-05-27 Thread Lee Zelyck
Greetings all, I have been upgrading from 0.72 to 0.85-1 this afternoon, and came to the following blurb that has stumped me: # By default clamd uses scan options recommended by libclamav. This option # disables recommended options and allows you to enable selected ones below. # DO NOT TOUCH I

[Clamav-users] Spam from ClamAv digest lists.

2005-05-27 Thread Robert L Mathews
"G.W. Haywood" <[EMAIL PROTECTED]> wrote: I am subscribed to both the users and development digest lists. They are spamming me. Uh, well, that's not "spam" (since it's not "unsolicited"). A better description would be "They are annoying me". Anyway, I am also on the digest and see the same

Re: [Clamav-users] clamd lockup ?

2005-05-27 Thread Steffen Winther Soerensen
On Fri, 2005-05-27 at 14:49 -0400, Jason Frisvold wrote: > On 5/27/05, Samuel Benzaquen <[EMAIL PROTECTED]> wrote: > > If the process is trying some I/O to some not-available, hard-mounted NFS > > filesystem, then the process will not die with 'kill -9'. > > > > Just a thought. > > I use NFS to m

Re: [Clamav-users] Memory limit per process hit

2005-05-27 Thread Tomasz Kojm
On Fri, 27 May 2005 18:28:09 -0300 Pablo Alsina <[EMAIL PROTECTED]> wrote: > Hi > > We have been having some problems lately with our installation. We are > using Sendmail+clamav-milter+clamd as our antivirus solution, over an > RedHat Linux with a 2.4.21 kernel (RH9). Which version of ClamAV?

[Clamav-users] Memory limit per process hit

2005-05-27 Thread Pablo Alsina
Hi We have been having some problems lately with our installation. We are using Sendmail+clamav-milter+clamd as our antivirus solution, over an RedHat Linux with a 2.4.21 kernel (RH9). We added a sort of tarpitting solution to our sendmail in order to stop people from scanning our userbase. What

[Clamav-users] /dev/console and LogSyslog

2005-05-27 Thread imacat
Dear all, I had asked a question about the permission of /dev/console. It is solved in 0.85.1. Thanks for your effort. Now I have another question. My console is full of ClamAV messages now. From peeking the code I saw that is a replacement of LogFile. But LogSyslog is, too. I log w

Re: [Clamav-users] clamd lockup ?

2005-05-27 Thread Matt Fretwell
Samuel Benzaquen wrote: > > If a 'kill -9' will not kill the process, I would say your problem > > lies elsewhere than with Clam. That would be more indicative of a > > hardware or OS problem. > If the process is trying some I/O to some not-available, hard-mounted > NFS filesystem, then the pr

Re: [Clamav-users] clamd lockup ?

2005-05-27 Thread Jason Frisvold
On 5/27/05, Samuel Benzaquen <[EMAIL PROTECTED]> wrote: > If the process is trying some I/O to some not-available, hard-mounted NFS > filesystem, then the process will not die with 'kill -9'. > > Just a thought. I use NFS to mount the user mail directories, but clam should never touch that. The

RE: [Clamav-users] clamd lockup ?

2005-05-27 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Matt Fretwell > Sent: Friday, May 27, 2005 1:56 PM > To: ClamAV users ML > Subject: Re: [Clamav-users] clamd lockup ? > > > Jason Frisvold wrote: > > > Hi all, > > > > The clamd process on one of my mail

Re: [Clamav-users] clamd lockup ?

2005-05-27 Thread Matt Fretwell
Jason Frisvold wrote: > Hi all, > > The clamd process on one of my mail servers appears to have locked up > earlier today. I was unable to restart or kill the process. In fact, > I had to do a hard reset to fix the problem. > > So, Im wondering what steps I can take next time to a) determine w

[Clamav-users] clamd lockup ?

2005-05-27 Thread Jason Frisvold
Hi all, The clamd process on one of my mail servers appears to have locked up earlier today. I was unable to restart or kill the process. In fact, I had to do a hard reset to fix the problem. So, Im wondering what steps I can take next time to a) determine why clamd has locked up, b) gather suf

Re: [Clamav-users] Additional Signatures replication

2005-05-27 Thread Damian Menscher
On Fri, 27 May 2005, ramya wrote: I have a central server from which many servers of mine get their signatures. When there is a virus outbreak I would like to add the signatures to this central server so that the signatures get distributed from this server immediately. I cannot go to each serv

Re: [Clamav-users] Spam from ClamAv digest lists.

2005-05-27 Thread Kelson
G.W. Haywood wrote: I am subscribed to both the users and development digest lists. They are spamming me. Here are the last three clamav-users Digest mails in my ClamAv mailbox: 141 May 27 [EMAIL PROTECTED] (17K) clamav-users Digest, Vol 8, Issue 111 142 May 27 [EMAIL PROTECTED] (16K) clamav-u

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-27 Thread Todd Lyons
Damian Menscher wanted us to know: >On Fri, 27 May 2005, lattera wrote: > >>can't use strace, because I don't know the email that is making it >>hang. that is why I need to use gdb, so I can look through the >>stack/heap for the email... >You're saying it's hung, taking 100% of CPU. So just use t

[Clamav-users] Additional Signatures replication

2005-05-27 Thread ramya
I have a central server from which many servers of mine get their signatures. When there is a virus outbreak I would like to add the signatures to this central server so that the signatures get distributed from this server immediately. I cannot go to each server and add the signature file (*.hd

Re: [Clamav-users] Re: Virus naming conventions?

2005-05-27 Thread guenther
On Thu, 2005-05-26 at 17:07 -0500, René Berber wrote: > > So, in conclusion: Are my assumptions correct, that this partially is > > due to old names? Is there at least a consensus on the classified naming > > amongst AV vendors (as mentioned above)? And are dots and dashes treated > > equally these

[Clamav-users] Spam from ClamAv digest lists.

2005-05-27 Thread G.W. Haywood
Hi there, I am subscribed to both the users and development digest lists. They are spamming me. Here are the last three clamav-users Digest mails in my ClamAv mailbox: 141 May 27 [EMAIL PROTECTED] (17K) clamav-users Digest, Vol 8, Issue 111 142 May 27 [EMAIL PROTECTED] (16K) clamav-users Digest

Re: [Clamav-users] update failure

2005-05-27 Thread david thompson
Hi > Are you using some kind of (transparent?) proxy that may tamper > the file? Too my knowledge I do not use a proxy. To date, I have downgraded my kernel to the 2.4 series - that did not work. I have installed the latest devel version - that did not work. I have downgraded my firewall - sho

Re: [Clamav-users] don't del clmilter.sock

2005-05-27 Thread Tomasz Kojm
On Fri, 27 May 2005 13:49:23 +0300 haplopelma lividum <[EMAIL PROTECTED]> wrote: > we deviated from the subject, aren't we? I don't know, my coffee is still percolating... -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gp

Re[2]: [Clamav-users] don't del clmilter.sock

2005-05-27 Thread haplopelma lividum
>> >> permissions are: >> -rw-rw1 clamav clamav 5 __ 20 13:33 clamd.pid TK> The pid file is one week old. so what? :) one week ago (20/05/5005) i am update clamav from v.0.85 to 0.85.1. so clamd running one week without restarting!! (if you mean options FixStaleSocket

Re: [Clamav-users] don't del clmilter.sock

2005-05-27 Thread Tomasz Kojm
On Fri, 27 May 2005 12:09:13 +0300 haplopelma lividum <[EMAIL PROTECTED]> wrote: > my system is rh7.3 clamd + clamav-milter v.0.85.1 and i have a > little > problem. when i execute "service clamav-milter stop" > system is > answering "ok", but don't delete clmilter

Re[2]: [Clamav-users] don't del clmilter.sock

2005-05-27 Thread haplopelma lividum
my system is rh7.3 clamd + clamav-milter v.0.85.1 and i have a little problem. when i execute "service clamav-milter stop" system is answering "ok", but don't delete clmilter.sock. so when i execute "service clamav-milter start" system get error. what i am doing wr

RE: [Clamav-users] recurrsive scan problem on os x

2005-05-27 Thread Mowat, Darren
Thanks that did the trick. Darren -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Kojm Sent: 24 May 2005 12:50 To: ClamAV users ML Subject: Re: [Clamav-users] recurrsive scan problem on os x On Tue, 24 May 2005 10:17:08 +0100 "Mowat, Darren" <[EMA

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-27 Thread Trog
On Thu, 2005-05-26 at 16:13 +0100, Nigel Horne wrote: > > Would it be possible to have existing threads use the old loaded > > database and to have the new threads use a new loaded database? > > > > Destroy the old database when its ref_count hits 0. > > Of all the noise that's been put around on