Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread N Fung
--- Odhiambo Washington <[EMAIL PROTECTED]> wrote: > * [EMAIL PROTECTED] > <[EMAIL PROTECTED]> [20050610 22:52]: wrote: > > Odhiambo Washington [EMAIL PROTECTED] wrote: > > > * N Fung <[EMAIL PROTECTED]> [20050610 20:45]: wrote: > > >>

RE: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matthew.van.Eerde
Samuel wrote: >> From: [EMAIL PROTECTED] >> and what of a virus zipped into a larger zip file? Since the largest >> message we'll accept is 100M, then that's what my StreamMaxLength is >> set at, per the comments in clamd.conf. on the other hand, it would >> take an awfully determined virus distrib

RE: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Samuel Benzaquen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > [EMAIL PROTECTED] > Sent: Friday, June 10, 2005 4:21 PM > To: ClamAV users ML > Subject: Re: [Clamav-users] odd problem w/clamd > > > and what of a virus zipped into a larger zip file? Since the largest

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Doug Hardie
On Jun 10, 2005, at 13:21, [EMAIL PROTECTED] wrote: At 12:54 PM 6/10/2005, you wrote: * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [20050610 22:49]: wrote: > At 10:44 AM 6/10/2005, you wrote: > > >Problems with 0.85.1 seem to be confined to FreeBSD. > >Anything

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
At 12:57 PM 6/10/2005, you wrote: By the sounds of the above, I personally would say that wouldn't appear to be a problem with Clam, rather some other part of your setup or system, possibly even hardware related. i have a vague recollection that there may be various memory leaks in 5.2.1, whi

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
At 12:54 PM 6/10/2005, you wrote: * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [20050610 22:49]: wrote: > At 10:44 AM 6/10/2005, you wrote: > > >Problems with 0.85.1 seem to be confined to FreeBSD. > >Anything interesting in /var/log/clamd.log? > > nothing interesting.

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matt Fretwell
Odhiambo Washington wrote: > > > I run 0.85.1 on FreeBSD 4.11, 5.2.1, 5.3 and 5.4 and in all cases I > > > don't have a problem at all. None of my machines is as high specs > > > as his. > > Easy, cowboy. When he says that problems are confined to FreeBSD, > > that does not imply that all FreeBS

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matt Fretwell
[EMAIL PROTECTED] wrote: > usually a restart of clamd does the trick, although yesterday even that > didn't seem to do the trick - after restart of clamd the message woudl > still trickle, so i rebooted the server, and everything returned to > normal... By the sounds of the above, I personall

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Odhiambo Washington
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [20050610 22:52]: wrote: > Odhiambo Washington [EMAIL PROTECTED] wrote: > > * N Fung <[EMAIL PROTECTED]> [20050610 20:45]: wrote: > >> Problems with 0.85.1 seem to be confined to FreeBSD. > >> Anything interesting in

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Odhiambo Washington
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [20050610 22:49]: wrote: > At 10:44 AM 6/10/2005, you wrote: > > >Problems with 0.85.1 seem to be confined to FreeBSD. > >Anything interesting in /var/log/clamd.log? > > nothing interesting. records of viruses found, and the

RE: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matthew.van.Eerde
Odhiambo Washington [EMAIL PROTECTED] wrote: > * N Fung <[EMAIL PROTECTED]> [20050610 20:45]: wrote: >> Problems with 0.85.1 seem to be confined to FreeBSD. >> Anything interesting in /var/log/clamd.log? > > > Liar!! Liar!! > > I run 0.85.1 on FreeBSD 4.11, 5

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
At 10:44 AM 6/10/2005, you wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log? nothing interesting. records of viruses found, and the startup logging. that's it. i've adjusted the number of concurrent connections inbound to the AS/AV serv

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Odhiambo Washington
* N Fung <[EMAIL PROTECTED]> [20050610 20:45]: wrote: > > > --- [EMAIL PROTECTED] wrote: > > > clamd 0.85.1 has been running pretty smoothly for a > > while, ever since > > install the day after it was released. the last few days > > though,

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread N Fung
--- [EMAIL PROTECTED] wrote: > clamd 0.85.1 has been running pretty smoothly for a > while, ever since > install the day after it was released. the last few days > though, i've > been running into an odd problem - > > first off, this is freebsd 5.2.1 release. dual PIII 1GHZ > server, > 895MB

[Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
clamd 0.85.1 has been running pretty smoothly for a while, ever since install the day after it was released. the last few days though, i've been running into an odd problem - first off, this is freebsd 5.2.1 release. dual PIII 1GHZ server, 895MB ram. the server does *only* spam and virus scann

[Clamav-users] Question about sendmail.mc settings.

2005-06-10 Thread Thomas Cameron
Hi all - I am using clamav-milter, spamass-milter, and milter-greylist 1.6. I am not an m4 expert by any stretch of the imagination. My sendmail.mc file looks like this: dnl INPUT_MAIL_FILTER(`greylist',`S=local:/var/milter-greylist/milter- greylist.sock')dnl define(`confMILTER_MACROS_HELO', `{

Re: [Clamav-users] Clamav does not scan foreign languages attachments

2005-06-10 Thread Nigel Horne
> Hello everybody. > I have just detected something I think can be a bug in clamav during the > scanning of the attached files. This is a known problem which is already under investigation. The work-around is to clear the LANG variable when starting clamd. It is not yet known if the problem lies w

Re: [Clamav-users] How does ClamAV classify Worm and Trojan ?

2005-06-10 Thread Diego d'Ambra
Joanna Roman wrote: When someone submit a virus sample (in the format of email, exe file, *.hml file), what criteria does ClamAV team use to classify the virus sample as Worm or Trojan ? The format of a submission isn't a criteria, but how the possible malware behave is. Best regards, Die

[Clamav-users] Clamav does not scan foreign languages attachments

2005-06-10 Thread José Miguel López-Coronado
Hello everybody. I have just detected something I think can be a bug in clamav during the scanning of the attached files. I'm using RedHat 9 and sendmail in a Pentium IV machine as a mail server. For such a long time (I think it has been from version 0.73 but I'm not sure) I have seen these mesages

[Clamav-users] Re: Recent CVS - broken logging to /dev/stderr ?

2005-06-10 Thread Steve Brown
I said: with perms = rw--- root.root. It was fine (and still is) on cvs from Stephen Gran wrote: Yes, that is the problem. This does however fix the problem of clamav opening all it's descriptors (including the logfile) as root, breaking permissions for anything else that needs to write t