Re: [clamav-users] Detected duplicate databases

2018-01-18 Thread Tom Judge (tomjudge)
It sounds like at some point the freshclam process being used to populate the private mirror failed to delete the CVD file after applying a CDIFF and generating the CLD. The client in private mirror mode will look for both a CVD and a CLD and download the file with the correct version number af

Re: [clamav-users] Detected duplicate databases

2018-01-18 Thread Thomas McCourt (tmccourt)
Hello, Please enter a bug ticket in https://bugzilla.clamav.net/ For the private mirror issue. I will look into it. Thank you, Tom M On 1/18/18, 4:45 PM, "clamav-users on behalf of Al Varnell" wrote: >As I mentioned before, I don't use a private mirror, so I've dropped out of >the convers

Re: [clamav-users] Detected duplicate databases

2018-01-18 Thread Al Varnell
As I mentioned before, I don't use a private mirror, so I've dropped out of the conversation. Someone who does use option 2 needs to double-check your settings here. -Al- On Thu, Jan 18, 2018 at 10:07 AM, Hugo Deprez wrote: > Hello, > > I don't think I'm the only one having this issue. It seem

[clamav-users] 1 - cl_scanfile return value checking, 2 - JIT and SElinux

2018-01-18 Thread Jose
(second resend) contents: 1: an observation and caution regarding the cl_scanfile() return value 2: a question about JIT and SElinux === 1: cl_scanfile() The php function cl_scanfile() returns an int, where 0 means the file is clean, and a nonzero value indicates an infection of some sort. T

[clamav-users] Error : LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offset 19, got 0

2018-01-18 Thread bal.luc
Hello, I ran ClamAv (0.99.2) on my PC where I installed Xubuntu. In the final report there are 18990 errors. --- SCAN SUMMARY --- Known viruses: 6388948 Engine version: 0.99.2 Scanned directories: 30607 Scanned files: 131061 Infected files: 0 Total errors: 18990 Data scanned: 5

Re: [clamav-users] Detected duplicate databases

2018-01-18 Thread Hugo Deprez
Hello, I don't think I'm the only one having this issue. It seems that I used the official configuration from http://www.clamav.net/doc/mirrors-faq.html Should I report the issue somewhere ? The only way I see to avoid this issue is to create a shell script and to push the updates my self on all

Re: [clamav-users] Matching variant patterns in logical or Yara signatures

2018-01-18 Thread G.W. Haywood
Hello again, On Wed, 17 Jan 2018, Kris Deugau wrote: "All over the place". ... ... hard block on Spamhaus hits and a handful of sender addresses; ... more aggressive IP blocking result in blocked legitimate mail ... local DNSBL, but ... we don't get enough volume ... also don't see these broadl