Re: [Clamav-users] Switching from clamscan to clamdscan

2007-07-05 Thread Eric Rostetter
Quoting David Boltz <[EMAIL PROTECTED]>: > Thank you for the information. I have given it a try and setup the > clamd.conf file to connect to the already existing spf-milter. I then Huh? No way that would work! You didn't read what I wrote, or you way misunderstood it. > changed the clamav-w

Re: [Clamav-users] amavisd-new + clamAV ?

2007-07-05 Thread Gary V
>..but in my situation I haven't group vscan but I have group 'amavis' and >in >this group is already present the user 'clamav' but the problem is still >present ! :-( >Thanks. > >-- >Salvatore. I have seen that a few times before and the answer is to run clamav as amavis. This is the second

Re: [Clamav-users] Switching from clamscan to clamdscan

2007-07-05 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Boltz wrote: > Thank you for the information. I have given it a try and setup the > clamd.conf file to connect to the already existing spf-milter. I then > changed the clamav-wrapper to use clamdscan instead of clamscan. Is better to change

Re: [Clamav-users] CPU & clamscan

2007-07-05 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Jul 05, 2007 at 07:12:21AM -0700, Thomas Spuhler wrote: >> > ..there is a problem with in CPU or in clamscan ? >> use clamdscan instead >Why continuing with this answer. Clamdscan takes 50% of the time of clamscan >and that still much to slow

Re: [Clamav-users] Switching from clamscan to clamdscan

2007-07-05 Thread David Boltz
Thank you for the information. I have given it a try and setup the clamd.conf file to connect to the already existing spf-milter. I then changed the clamav-wrapper to use clamdscan instead of clamscan. I then restarted MailScanner and it seems to be ok because if I run "top -d1 | grep clam" I

Re: [Clamav-users] Switching from clamscan to clamdscan

2007-07-05 Thread Eric Rostetter
Quoting David Boltz <[EMAIL PROTECTED]>: > I?m hoping that someone can shed some light for me here. My current > setup is MailScanner/SpamAssassin/Sendmail/spf-milter and ClamAV .90.3 > using clamscan. ClamAV has caused the server to come to a screeching > halt recently due to clamscan timeouts

Re: [Clamav-users] CPU & clamscan

2007-07-05 Thread Dennis Peterson
Dennis Peterson wrote: > Thomas Spuhler wrote: >> On Wednesday 04 July 2007 23:38, Alexandros G. Fragkiadakis wrote: > >>> use clamdscan instead >> Why continuing with this answer. Clamdscan takes 50% of the time of clamscan >> and that still much to slow. >> > > Here's five reasons - there's mo

Re: [Clamav-users] Switching from clamscan to clamdscan

2007-07-05 Thread David Boltz
I should add to this a little. I don't have a test system to try getting this to work and this is why I don't want bring the server down while trying to get this to work. If anyone has gone through this switch before I would appreciate any advice I can get. Thanks, Dave B.

Re: [Clamav-users] CPU & clamscan

2007-07-05 Thread Dennis Peterson
Thomas Spuhler wrote: > On Wednesday 04 July 2007 23:38, Alexandros G. Fragkiadakis wrote: >> use clamdscan instead > > Why continuing with this answer. Clamdscan takes 50% of the time of clamscan > and that still much to slow. > Here's five reasons - there's more: 1. If I could do something

[Clamav-users] Prevent HTML malicious code with clamav

2007-07-05 Thread Gioia Ba
Hi everybody ! does anybody know how to creare a *.hdb or *.ndb signature file to catch some pattern link iframetags, javascript, and other malicious code in HTML file ? I tried following the signatures.pdf guide, creating the *.hdb file with sigtool --md5 iframe-test.html > iframe.hdb, after ha

Re: [Clamav-users] CPU & clamscan

2007-07-05 Thread Thomas Spuhler
On Wednesday 04 July 2007 23:38, Alexandros G. Fragkiadakis wrote: > On Wed, July 4, 2007 18:00, Salvatore wrote: > > Hi, I use clamav-0.90.3 (with amavisd-new-2.2.1, maia-1.0.2 and > > postfix-2.2.8) but for some days the system is very slow, pheraps the > > problem is in the cpu load (my CPU is I

[Clamav-users] Switching from clamscan to clamdscan

2007-07-05 Thread David Boltz
I?m hoping that someone can shed some light for me here. My current setup is MailScanner/SpamAssassin/Sendmail/spf-milter and ClamAV .90.3 using clamscan. ClamAV has caused the server to come to a screeching halt recently due to clamscan timeouts and therefore I had to disable ClamAV. I want t

Re: [Clamav-users] CPU & clamscan

2007-07-05 Thread Salvatore
Hi, I have modified amavisd.conf and amavisd.conf-maia for to enable av primary and I have correct the path about local_socket , in particular: ['ClamAV-clamd', \&ask_daemon, ["CONTSCAN {}\n", "/tmp/clamd"], qr/\bOK$/, qr/\bFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ], ..and now

Re: [Clamav-users] amavisd-new + clamAV ?

2007-07-05 Thread Salvatore
..but in my situation I haven't group vscan but I have group 'amavis' and in this group is already present the user 'clamav' but the problem is still present ! :-( Thanks. -- Salvatore. - Original Message - From: "Kevin" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Thursday, Ju

Re: [Clamav-users] amavisd-new + clamAV ?

2007-07-05 Thread Salvatore
Hi, my problem is descript in thread with subject "CPU & clamscan" also I have forgotten of say that I use in addition freshclam..now I have amavid running with user 'amavis' and clamscan with user 'amavis' and in the group called 'amavis' I have user 'clamav', and I have enable parameter: Allo

Re: [Clamav-users] amavisd-new + clamAV ?

2007-07-05 Thread Kevin
Thank you for your help, Although i didn't see which one for primary virus scanning in clamd socket of var/log/maillog, I added clamav userid in vscan in /etc/group, then the receiving and sending the email becomes quite normal. /etc/group ... vscan:*:123:clamav clamav:*:124: I appreciate f

Re: [Clamav-users] CPU & clamscan

2007-07-05 Thread Salvatore
Hi, pherpas my problem is equal at problem descript in thread with subject "amavisd-new + clamAV", also on my mail server Same here I have: > I discovered that amavisd-new is proceeding the virus scanning by using > clamscan, which takes 2 process by capacity 60%-90% of CPU, > meanwhile it takes