Re: [clamav-users] ClamAV 1.4 and RHEL7 problem

2025-03-13 Thread Marc via clamav-users
> > Subject: RE: [clamav-users] ClamAV 1.4 and RHEL7 problem > > > From what I check, RHEL7 is still 'Extend Life support' till Jun > 2028, it could be a good idea to continue compile and build Clamav on > Centos7 or RHEL7. > > > I guess there is not some centos7/el7 repo publically av

Re: [clamav-users] ClamAV consumes so much memory that my Postfix service gets killed by OOM Killer from time to time

2025-03-04 Thread Marc via clamav-users
> > > > > > I personally don't use this one but I wouldn't blame them much. > > > It's users who have no idea how things work configuring the first > > > simplest > > > possible option and then have problems like this one. > > > > > > True, but don't forget about the people creating them, they also

Re: [clamav-users] *****SPAM***** RE: ClamAV consumes so much memory that my Postfix service gets killed by OOM Killer from time to time

2025-03-04 Thread Marc via clamav-users
> >Good to know that such 'panels' are still crappy. Sometimes I wonder if > I should use them. > > I personally don't use this one but I wouldn't blame them much. > It's users who have no idea how things work configuring the first > simplest > possible option and then have problems like this one.

Re: [clamav-users] *****SPAM***** RE: ClamAV consumes so much memory that my Postfix service gets killed by OOM Killer from time to time

2025-03-04 Thread Marc via clamav-users
Good to know that such 'panels' are still crappy. Sometimes I wonder if I should use them. > I don't think I can run ClamAV in a container because I am using > Virtualmin web hosting control panel in a Virtual Private Server (VPS). > > > > > That is why I run it in a container and have front

Re: [clamav-users] ClamAV consumes so much memory that my Postfix service gets killed by OOM Killer from time to time

2025-03-04 Thread Marc via clamav-users
That is why I run it in a container and have front end mail servers connect to it. I also reported that the milter is not able to find clamd when it oom and is redeployed with a new ip. Still do not know if they implemented my advisded changes, there is still a bit of old-fashioned perspective h

Re: [clamav-users] Snyder fascist

2025-01-31 Thread Marc via clamav-users
> this was the first email I noticed, as I don't check > the list as often as I probably should. I admit I am more distracted > these days than I have been in the past, for a handful of reasons that I > won't get into. > I did not get this, until I read a bit further. :D > > > Val Snyder (the

Re: [clamav-users] Scanning multiple uploads at the same time

2025-01-22 Thread Marc via clamav-users
> > I wonder what would happen if many users were uploading at the same > time. Would the scan requests be executed one at the time? I imagine > that could lead to long waiting times for the uploading users. > > If that is so, I need to either configure clamav in a way that a new > instance is loa

Re: [clamav-users] TCP socket vs. local Unix socket

2025-01-18 Thread Marc via clamav-users
> > In brief, I am planning a large ClamAV deployment with varying > requirements. A few of the file servers will have their own instance of > clamd running locally. The remaining file servers will utilize (via > clamdscan and/or clamonacc) a remote TCP clamd daemon. > afaik is clam not 'smart

Re: [clamav-users] CVE-2025-21298 vulnerability

2025-01-16 Thread Marc via clamav-users
I have the impression this is some binary that is being attached, next to that isn't clamav mostly used as email scanner? ;) > Subject: Re: [clamav-users] CVE-2025-21298 vulnerability > > ClamAV is an AV/file scanner. Not a Vulnerability scanner. > > > On Jan 16, 2

[clamav-users] CVE-2025-21298 vulnerability

2025-01-16 Thread Marc via clamav-users
I am just a bit curious are such vulnerabilities added to clamav? https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21298 ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav

Re: [clamav-users] Simple text email scan occasionally takes many minutes

2024-11-06 Thread Marc via clamav-users
> > I'm running a product called cleanmail (byteplant [dot] com) on a Debian > 10.13 VM, which uses clamdscan to check incoming e-mails. Once a day, > one of my other VMs sends a very simple combination clear text/HTML > mail.  Recently this has occasionally failed to appear in the target > mailbo

Re: [clamav-users] Feedback: Confusing branding, off putting to new users

2024-06-23 Thread Marc via clamav-users
> > * andre nz: > > > Just in regards to the website and logo etc it comes across as quite > > odd. [...] > > That may be your personal, non-representative opinion, to which you are > of course entitled. I don't personally find anything odd about the > website or logo, and the latter in particul

Re: [clamav-users] reject/flag files based on extension

2024-05-20 Thread Marc via clamav-users
> > Is it possible to configure clamav, so it rejects or marks files as virus > just based on their file extension? > When it processes data from milter. Maybe someone has experience with this? I have the impression from these pages that somewhere filenames are available within clamav, so I gu

[clamav-users] reject/flag files based on extension

2024-05-19 Thread Marc via clamav-users
Is it possible to configure clamav, so it rejects or marks files as virus just based on their file extension? ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a

Re: [clamav-users] more false positives?

2024-05-11 Thread Marc via clamav-users
> > > > I run clamav on linux, but I also have windows 7 installed. > > I mounted the windows partition and ran a clamav scan, > > which found the following viruses: > > > > /mnt/windows/Windows/System32/cliconfg.exe: Win.Virus.Expiro-9965977-0 > > /mnt/windows/Windows/System32/spool/tools/PrintBrm

Re: [clamav-users] more false positives?

2024-05-11 Thread Marc via clamav-users
> > I run clamav on linux, but I also have windows 7 installed. > I mounted the windows partition and ran a clamav scan, > which found the following viruses: > > /mnt/windows/Windows/System32/cliconfg.exe: Win.Virus.Expiro-9965977-0 > /mnt/windows/Windows/System32/spool/tools/PrintBrmEngine.exe:

Re: [clamav-users] ClamAV 1.0.X for EPEL 7 & 8

2024-04-29 Thread Marc via clamav-users
> > With the help of John Sullivan and Sérgio M. Basto we have gotten the > Fedora ClamAV 1.0.X package in shape to be built for EPEL 7 and 8. We > have a COPR available now with builds of 1.0.6 ready for testing here: > Hi Orion, I wrote Sergio a few months ago about implementing ip/port look

Re: [clamav-users] Help with clamav

2024-04-10 Thread Marc
You can use smbclient on linux not? But I have the impression you are handling this incorrectly I am always disabling file and printersharing. Maybe better is to scan a snapshot of the vm disk image? You also have to consider the traffic you are generating, I am already having issues getting my

Re: [clamav-users] Help with clamav

2024-04-05 Thread Marc
> Hi, I hope I am emailing the right address. > > I would like some help setting up clamav to scan remote hosts form a > clamd server is this possible? > Don't you mean you want to scan hosts with a remote clamd server? ___ Manage your clamav-users ma

Re: [clamav-users] How does one Obtain ClamAV Linux Anvi-Virus Database File Updates for Systems not Connected to the internet

2024-03-25 Thread Marc
> > How does one Obtain ClamAV Linux Anvi-Virus Database File Updates for > Systems not Connected to the internet? All our systems are air-gapped (not > internet connected) so as ClamAV provides Linux Anvi-Virus Database File > Updates for viruses as they are identified, what link or website can

Re: [clamav-users] Error installing from source

2023-10-13 Thread Marc
off topic a bit. I have the impression distributions are ending for anything other than being an os. Over the last view years you can just notice how they have problems with maintaining packages. This redhat is just taking source and redesigning functionality for their own interests. On the othe

Re: [clamav-users] Freshclam version 1.0.2 warnings

2023-09-03 Thread Marc via clamav-users
then you can add --no-warnings to your freshclam execution Von / From: Jorge Bastos An / To: Newcomer01 Gesendet / Sent: Sonntag, September 03, 2023 um 19:55 (at 07:55 PM) +0200 Betreff / Subject: Re: [clamav-users] Freshclam versio

Re: [clamav-users] Cloudflare ban?

2023-07-11 Thread Marc
> > Today I did a clean cvd update, meaning I removed everything in > /var/lib/clamav, I flushed my fw rules, so it won't block anything, I > have clamav version 0.103.8 which is LTS, so it shouldn't be banned. > Here is the full log of freshclam: https://pastebin.com/RbSNnM5C > It specifically sa

Re: [clamav-users] clamdscan streaming over TCP

2023-06-10 Thread Marc
> > I'm trying to scan a files (email, so not huge load) over my_internal_ > LAN. > > I have a dockerized clamd running on hostA, and on hostB, I can run > clamdtop hostA, and get the expected output. > > However, from within the same container that I just started clamdtop, I > can't do the same

Re: [clamav-users] dry run freshclam

2023-05-02 Thread Marc
> > On 01.05.23 10:34, Marc wrote: > > this freshclam needs to have something like a --dry-run or so. Super > > annoying if you test with something like proxy auth and you are > constantly > > having this cdn throttling. > > what should it do? Just parse the

[clamav-users] dry run freshclam

2023-05-01 Thread Marc
this freshclam needs to have something like a --dry-run or so. Super annoying if you test with something like proxy auth and you are constantly having this cdn throttling. ___ Manage your clamav-users mailing list subscription / unsubscribe: https:

Re: [clamav-users] run freshclam without notifying clamd

2023-04-30 Thread Marc
ERROR: NotifyClamd: Can't find or parse configuration file /etc/clamav/clamd.conf [1] /etc/clamav # cat /etc/clamav/clamd.conf [freshclam.conf] > > Just comment the line NotifyClamd path-to-clamd.conf in freshclam.conf > > [freshclam.conf] > . > . > # NotifyClamd

[clamav-users] run freshclam without notifying clamd

2023-04-26 Thread Marc
I am running freshclam in a build layer in docker to download default databases for the docker image. Obviously nothing else is installed at this stage. apk add freshclam --no-cache touch /etc/clamav/clamd.conf (added this, otherwise freshclam complained about it not existing) freshclam resu

Re: [clamav-users] Freshclam to not write to syslog?

2023-04-06 Thread Marc
> > Good day Guys > > I would like to double check something per taining to Freshclam > > Is it possible to get Freshclam to not write to syslog (want all logging > to /var/log/clamav/freshclam.log )? > > Currently I have the following in my freshclam conf file. > > UpdateLogFile /var/log/clam

Re: [clamav-users] Funny --include-dir behaviour

2023-03-22 Thread Marc via clamav-users
gt;        nice -n -20 clamscan \ > --include-dir="^/home/$SUDO_USER/.thunderbird/Marc/Mail/" \ >        --recursive="yes" \ >        --quiet \ >        --infected \ >        --alert-broken

[clamav-users] clamav milter auto ip address update

2023-03-07 Thread Marc
I recently had an issue where mail was temporarily rejected because clamav-milter/spamass-milter could not connect to clamd/spamd. Clamd/Spamd are a tasks that can automatically change hosts and thus their ips. A simple restart of the milter fixes this (resolves the new ip). However, it would

Re: [clamav-users] 0 length bytecode.cvd causing problems with clamav daemon

2023-02-27 Thread Marc via clamav-users
i would suggest, to delete alle libraries in /var/lib/clamav and download all complete new. CLD Files comes not regularly, normally we have CVD only. If i understand this well, CLD Files comes only when error occures while updating. https:/blog.clamav.net/2021/03/clamav-cvds-cdiffs-and-magic-be

Re: [clamav-users] ClamAV Private Mirror Question

2023-01-30 Thread Marc
> > I have setup a private mirror for ClamAV. I have pointed it to the private > mirror on freshclam.conf. My question is how do i test this to make sure I am > pulling the most up to date definitions from the private mirror to the server > being scanned? Thanks in advance. > turn off gateway /

Re: [clamav-users] remove me

2022-09-09 Thread Marc
> > perhaps it could contain better unsubscribe info, the top-down link: > https://docs.clamav.net/#mailing-lists-and-chat > does not contain unsubscribe What about doing some sort of IQ test before users subscribe something like 2+2=? ;) ___ clamav-

Re: [clamav-users] remove me

2022-09-08 Thread Marc
moron, search at least how to be removed from a mailinglist ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/

Re: [clamav-users] Permanently banned from clamav

2022-07-02 Thread Marc
> > Please clarify what "regularly" means in this case? > > Once a day / hour / week / month / other? > > Regular just implies a cadence without specifying what that cadence is. :) :) Better not go and reply on Instagram. The users there tend to have their own definition of words, and totally

Re: [clamav-users] Patent troll attacks AV vendors

2022-04-14 Thread Marc
Just move the legal entity to Europe, and end of story with such claims. > > Is Clam affected by this? > > lawsuit-malware-detection-endpoint-security> > > > > In early March, cybersecurity firm Webroot and its paren

Re: [clamav-users] Reservations towards clamAV

2022-02-14 Thread Marc
> I keep running into reservations about clamAV. It is often claimed that > clamAV has a poor detection rate compared to other solutions. I then often > lack an answer based on hard facts. Do you also have this problem? If so, > is there good data somewhere to compare clamAV with other solutions?

Re: [clamav-users] is there a kill signal to have freshclam do an update check?

2022-02-13 Thread Marc
> >>> Is there a command that can make a running freshclam daemon do an > update > >> request instantly? > >> > >> SIGUSR1, assuming it's compiled with it enabled. > > > > Yes thanks, I was already trying with this command > > > > kill -s SIGUSR1 $(pidof freshclam) > > > > However it gets the wrong

Re: [clamav-users] is there a kill signal to have freshclam do an update check?

2022-02-13 Thread Marc
> > > Is there a command that can make a running freshclam daemon do an update > request instantly? > > SIGUSR1, assuming it's compiled with it enabled. > Yes thanks, I was already trying with this command kill -s SIGUSR1 $(pidof freshclam) However it gets the wrong pid from the container env

Re: [clamav-users] CLAMAV: Docker Tag 0.104.2 has 9 Medium Vulnerabilities for Busy Box

2022-02-13 Thread Marc
> > My team is new to maintaining images on Docker Hub. We hadn't yet > identified the best practices for how to publish an image for the same > ClamAV version with a new base image. After a little investigation, I > settled on this on this scheme. > Maybe it is time to allow environment variabl

Re: [clamav-users] CLAMAV: Docker Tag 0.104.2 has 9 Medium Vulnerabilities for Busy Box

2022-02-13 Thread Marc
> My team is new to maintaining images on Docker Hub. We hadn't yet > identified the best practices for how to publish an image for the same > ClamAV version with a new base image. After a little investigation, I > settled on this on this scheme. > I can see ;) This is of course crap. # Wait fo

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-10 Thread Marc
> > > > > > > > this looks like your sendmail DID reject mail from client. > > > > > > > I think you are maybe right, however this is not being reported and it > > gets stuck in my delivering mail server. Which I do not get because if I > > put my own email address on the email blacklist, I am gett

[clamav-users] is there a kill signal to have freshclam do an update check?

2022-02-09 Thread Marc
Is there a command that can make a running freshclam daemon do an update request instantly? ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV

Re: [clamav-users] Locating clamav-milter to match v0.104.2

2022-02-08 Thread Marc
> > I am hoping to find a clamav-milter to match the current version of > clamav. > > The current link on website seems to go to GitHub. > > GitHub then says that you need to get software from ClamAV. > > If there is somewhere that I can get a clamav-milter v0.104.2 RPM, it > would be much appr

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Marc
> > > > > this looks like your sendmail DID reject mail from client. > > > > I think you are maybe right, however this is not being reported and it > gets stuck in my delivering mail server. Which I do not get because if I > put my own email address on the email blacklist, I am getting the delive

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Marc
> > That is the problem of the server that is contacting mine. They should > not be relaying such crap to me anyway. > > No, this is *your* problem. > If you start annoying people with inappropriate bounces, you'll get into > blacklists fast. > > In any case, we are OT, so I'll stop here. > Try

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Marc
> >Normally when a client connection is reject by my sendmail server, the > > client is notified of the Reject message and the client server is > > generating a NDR. This is listed in my log as [1] > > > however when I send a virus > > what's the difference between "you" and a "client connecti

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Marc
> > > So please explain, why should I not do this, and why I should care about > a server that is delivering a spam message to mine? > > You might not care about the server that sent a virus to you, but you > should care about the *apparent* sender, which has probably nothing to > do with this; s

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Marc
> > Normally when a client connection is reject by my sendmail server, > > the client is notified of the Reject message and the client server > > is generating a NDR. This is listed in my log as [1] however when I > > send a virus it looks like sendmail is not reporting the reject back > > to the c

Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Marc
> On 2/7/22 22:36, Marc wrote: > > however when I send a virus it looks like sendmail is not reporting the > reject back to the client server. > > How should I 'enable' this? > > Don't. > Viruses are usually sent with a spoofed sender address; you would o

[clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-07 Thread Marc
Normally when a client connection is reject by my sendmail server, the client is notified of the Reject message and the client server is generating a NDR. This is listed in my log as [1] however when I send a virus it looks like sendmail is not reporting the reject back to the client server. How

Re: [clamav-users] Malware alert???

2018-10-13 Thread Matthes, Marc
Same here Marc Matthes Director of Computer Networking Programs Iowa Central CC 5155741099 From: clamav-users on behalf of Jean-Francois Tasse Sent: Saturday, October 13, 2018 10:10:56 AM To: ClamAV users ML Subject: [clamav-users] Malware alert??? Today

Re: [Clamav-users] Subject: False Positive about Phishing.Heuristics.Email.SSL-Spoof

2007-08-30 Thread Jean-Marc Pigeon
On Thu, 2007-08-30 at 15:42 +0200, Doug Andrews wrote: > Hi Jean-Marc, > I am seeing the same problem - did you manage to resolve this? > I'd appreciate any advice you can give. > Thanks, The only way for us to resolve the problem was to remove the CL_DB_PHISHING_

[Clamav-users] False Positive about Phishing.Heuristics.Email.SSL-Spoof

2007-07-19 Thread Jean-Marc Pigeon
Is there somebody else getting the same problem?, will the spoofing detection code "fixed"? (if it can?) Thanks... -- A bientôt ====== Jean-Marc Pigeon

[Clamav-users] Clamd use up 99.9 % cpu

2007-05-17 Thread Marc
Q, if not then please let me know. Best regards Marc ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Handling the daily.cvd to daily.inc transition in a packaging context

2007-03-19 Thread Marc Haber
On Sat, Mar 10, 2007 at 11:38:47AM +0100, Jan-Pieter Cornet wrote: > On Sat, Mar 10, 2007 at 11:26:10AM +0100, Marc Haber wrote: > > On Sat, Mar 10, 2007 at 11:11:39AM +0100, Jan-Pieter Cornet wrote: > > > Just put this in your freshclam.conf: > > > > > > Scr

Re: [Clamav-users] Handling the daily.cvd to daily.inc transition in a packaging context

2007-03-10 Thread Marc Haber
rectory. That one is already excluded. Greetings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things."Winona Ryder | Fon: *49 621 7

[Clamav-users] How to verify daily.inc?

2007-03-10 Thread Marc Haber
Hi, sigtool --stdout --info= does neither like to be pointed to the daily.inc directory nor does it correctly verify any single file inside daily.inc. Is there any possibility to verify the contents of the downloaded daily.inc directory before actually activating it? Greetings Marc

[Clamav-users] Handling the daily.cvd to daily.inc transition in a packaging context

2007-03-10 Thread Marc Haber
y one take precedence, or is this an error which requires manual intervention? Any hints will be appreciated. Greetings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Head

Re: [Clamav-users] Strange behaviour on x86_64 (was 'Memory leakon x86_64!?')

2007-01-27 Thread Jean-Marc Pigeon
> Stephan > ___ Help us build a comprehensive > ClamAV guide: visit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html -- A bientôt == Jean-Marc Pigeon

[Clamav-users] Clamav 0.88.4 MD5 and OpenSSL (Crash!)

2006-08-10 Thread Jean-Marc Pigeon
either use openssl/md5 or (may be easier in your case) change the MD5_xxx name to something else. (a simple define within your md5.h could do the trick). -- A bientôt == Jean-Marc Pigeon

Re: [Clamav-users] ClamAv

2005-11-29 Thread Marc Haber
v do with virus files? Clamav does only detect them. What you do with them depends on the configuration of the MTA. You are off-topic here. Since the ACL statement you posted recently seems to be OK, it looks like you have added it to y

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-19 Thread Marc Haber
On Fri, Aug 19, 2005 at 04:37:43PM +0100, Brian Morrison wrote: > On Fri, 19 Aug 2005 17:31:17 +0200 in > [EMAIL PROTECTED] Marc Haber > <[EMAIL PROTECTED]> wrote: > > > On Fri, Aug 19, 2005 at 08:26:05AM -0700, Todd Lyons wrote: > > > What he needs to do is wri

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-19 Thread Marc Haber
file, presumably finds out where the databases are located and then accesses the daily.cvd before printing the version number. Greetings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadr

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-19 Thread Marc Haber
the socket, and reports back immediately the new database number even if it has not been loaded according to the log. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse i

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-19 Thread Marc Haber
ld be nice to obtain the currently loaded database from the daemon without having to parse the log files. Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, G

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-19 Thread Marc Haber
On Fri, Aug 19, 2005 at 11:44:24AM -0300, Julio Maidanik wrote: > Marc Haber wrote: > > On Fri, Aug 19, 2005 at 07:10:39AM -0700, Dennis Peterson wrote: > >> And you're certain the database has not been reloaded while you're > >> examining this? > > >

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-19 Thread Marc Haber
t a given moment? Greetings Marc -- ----- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things."Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature |

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-19 Thread Marc Haber
On Fri, Aug 19, 2005 at 12:09:36AM -0700, Dennis Peterson wrote: > Marc Haber said: > > On Thu, Aug 18, 2005 at 11:30:38AM -0500, René Berber wrote: > >> Marc Haber wrote: > >> > the clamd docs say quite clearly that it is necessary to either send > >> > t

Re: [Clamav-users] Re: RELOAD/VERSION issues

2005-08-18 Thread Marc Haber
On Thu, Aug 18, 2005 at 11:30:38AM -0500, René Berber wrote: > Marc Haber wrote: > > the clamd docs say quite clearly that it is necessary to either send > > the RELOAD command to the daemon or to send SIGUSR2 to the daemon to > > have it reload the database. > > >

[Clamav-users] RELOAD/VERSION issues

2005-08-18 Thread Marc Haber
) is correct, could please the docs be updated to clearly state that RELOAD is currently unneeded but might be neede in a future daemon version and that it is recommended that database RELOAD is issued to the daemon after touching the databases? Thanks for the clarification. Greetings Marc

[Clamav-users] Problem to compile clamav+milter under Linux/Debian

2004-09-22 Thread Marc ROMERO
Dear clamav-users I've a Linux Debian (2.4.20) whose running clamav-0.75.1. I'm trying to compile clamav-0.80rc2 and I didn't manage to compile a new version because I'm getting the following error message (The error message is given at the end of the message). Can you he

[Clamav-users] upgrade to 0.75.1: Not suported signature type detected

2004-08-17 Thread Marc
signature type detected at line 15. Skipping. LibClamAV debug: Not suported signature type detected at line 1039. Skipping. . . Should I take some action for the 'Not suported signature' message? What does it mean to the clamav syste

Re: [Clamav-users] Re: Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-23 Thread Marc Berenschot
> > Tomasz and I are already in discussions about this... I have just installed 0.75. It detects the virus. Thank you very much for the prompt reply! Marc. -- Marc Berenschot Email: [EMAIL PROTECTED] UNIX Systeembeheerder

Re: [Clamav-users] Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-22 Thread Marc Berenschot
On 22-jul-04, at 17:32, Nigel Horne wrote: On Thursday 22 Jul 2004 13:38, Marc Berenschot wrote: Hello all, I am currently receiving e-mails with incorrect Mime_base64 encoding. From the ChangeLog: Tue Jul 20 15:38:03 BST 2004 (njh) -- * libclamav: Some MyDoom.I

[Clamav-users] Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-22 Thread Marc Berenschot
cting other viruses. There are no errors in the log file. Thanks for any help or pointers, Marc Berenschot. -- Marc Berenschot Email: [EMAIL PROTECTED] UNIX Systeembeheerder Phone: 053 4894615 ---

Re: [Clamav-users] clamwin issue - last one

2004-07-14 Thread Marc Hultquist
On Wednesday, 14 July 2004 11:00, Fajar A. Nugraha wrote: > Marc Hultquist wrote: > >I was unable to find > >anything about changing which database clamwin uses :\ > Last I heard, it is HARDCODED to database.clamav.net :) > Regards, > Fajar Ya, but with the latest ver

[Clamav-users] clamwin issue - last one

2004-07-14 Thread Marc Hultquist
find anything about changing which database clamwin uses :\ Kind Regards -- Marc Hultquist ([EMAIL PROTECTED]) Computerkit Systems (Pty) Ltd http://www.cks.co.za (P) +27 11 695 5317 (F) +27 11 312 1408 (C) +27 82 563 2861 Quote: Its a bad idea for geeks to be on low-carb diets. Low-carb

[Clamav-users] Malformed CVD ?

2004-07-13 Thread Marc Hultquist
just fine ? Please can someone help me here as I am at the end of my string ! :\ Kind Regards -- Marc Hultquist ([EMAIL PROTECTED]) Computerkit Systems (Pty) Ltd http://www.cks.co.za (P) +27 11 695 5317 (F) +27 11 312 1408 (C) +27 82 563 2861 Quote: Its a bad idea for geeks to be on low

[Clamav-users] clam-db-0.72 ?

2004-07-13 Thread Marc Hultquist
Does anyone know where I can download the 0.72 clamav-dv file ? I looked on rpmfind.net, freshmeat.net, clamav.net and as of yet I have not been able to find _anything_ :\ Any help would be greatly appreciated ! Kind Regards -- Marc Hultquist ([EMAIL PROTECTED]) Computerkit Systems (Pty

[Clamav-users] new to clamav

2004-07-13 Thread Marc Hultquist
m-tmp.86120 (%build) [EMAIL PROTECTED] clam]# Any ideas ? :\ -- Marc Hultquist ([EMAIL PROTECTED]) Computerkit Systems (Pty) Ltd http://www.cks.co.za (P) +27 11 695 5317 (F) +27 11 312 1408 (C) +27 82 563 2861 Quote: Its a bad idea for geeks to be on low-carb diets. Low-carb means no suga

Re: [Clamav-users] ERROR: You must specify at least one database mirror.

2004-05-12 Thread Marc
the contents of /etc/clamav/freshclam.conf? Do you have a DataBaseMirror option there? It could be that freshclam.conf is installed in /usr/local/etc (which is the default for clamav) after installing clamav 0.70 manually. Marc --- This

Re: [Clamav-users] freshclam --quiet isn't

2004-05-03 Thread Marc
option. Checking the source it looks like freshclam completely ignores the --quiet option. It would be nice if it only added one line per run, rather than five. I'm using freshclam 0.70 and with the --quiet options there is no output. Marc ---

Re: [Clamav-users] clamav attachment not deleted from /tmp

2004-04-29 Thread jean-marc pouchoulon
Are you running in debug mode? When doing so, all tmp files are left for debugging purposes. Jim That was the problem thanks to all. Jean-Marc --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit

[Clamav-users] clamav attachment not deleted from /tmp

2004-04-29 Thread jean-marc pouchoulon
Hi, On fedora core B using mimedefang 2.42 and clamav-0.70 or 0.68 or last from cvs I have /tmp full of directories drwx-- 2 defang defang 4096 avr 29 10:28 clamav-cf15fe6738d54335 drwx-- 2 defang defang 4096 avr 29 10:28 clamav-628ab4bef9112b1d drwx--

[Clamav-users] scanning streams

2004-04-28 Thread Marc
We are using clamd and clamscan for our mail and are very pleased with it. Keep up the good work. I was wondering if it is possible to scan streams too (http-traffic, ...)? Marc --- This SF.Net email is sponsored by: Oracle 10g Get certified

Re: [Clamav-users] installation update require

2004-04-26 Thread Marc
Fajar A. Nugraha wrote: Either 0.70 (not the -rc one) or the lastest CVS snapshot version (mine is ClamAV version devel-20040426) I'm using clamav 0.70 stable. How can I get the version of clamav (including devel-xxxxx) Marc --- This S

Re: [Clamav-users] Virus Alias Database

2004-04-26 Thread Marc
eel it is worth pursuing then I'll try and find time to add some other vendors and maybe even make it less ugly (and validate the html!) Great idea, keep up the good work... Marc --- This SF.net email is sponsored by: The Robotic Monkeys at Thi

[Clamav-users] 70rc1 problems

2004-04-21 Thread Marc Balmer
Hi all I updated a few servers to ClamAV 70rc1. We only use clamd. OS is OpenBSD 3.5. The problem we have: clamd terminates. Seems unstable like the 6x series. Did anyone succed to use this software in a production environment? - Marc Balmer

Re: [Clamav-users] clamdscan gives wrong output

2004-03-03 Thread Marc Cuypers
Tomasz Papszun wrote: On Wed, 03 Mar 2004 at 11:18:15 +0100, Marc Cuypers wrote: Hi, I'm using clamav 0.67 on Debian Woody. When I run 'clamdscan file1'. I get the message it contains the virus Worm.Gibe.F FOUND. When I run 'clamdscan file1'. I get the file is

[Clamav-users] clamdscan gives wrong output

2004-03-03 Thread Marc Cuypers
Hi, I'm using clamav 0.67 on Debian Woody. When I run 'clamdscan file1'. I get the message it contains the virus Worm.Gibe.F FOUND. When I run 'clamdscan file1'. I get the file is OK. What could be wrong? -- Marc --

Re: [Clamav-users] clamdscan: input via stdin

2004-03-02 Thread Marc Cuypers
Adam Webb - Network Manager wrote: cat filename | clamdscan - Marc Cuypers [EMAIL PROTECTED] wrote: Hi, I'm running clamav 0.60 on Debian. Can I 'cat' a file to clamdscan, or must it be a physical file on the disk? Thanks for your time, --Marc When I run clamdscan this wa

Re: [Clamav-users] clamdscan: input via stdin

2004-03-02 Thread Marc Cuypers
When I run clamdscan this way I get an OK-message and return value of 0 when there is no virus. I don't get any messages if the e-mail contains a virus, only a return value of 141. Is this OK? According to the man page I should get 0 1 or 2. Marc Adam Webb - Network Manager wrote:

[Clamav-users] E-mail Notice Replies

2004-03-01 Thread Marc Brooks
Hello All, Is it possible to turn off the e-mail notification that is returned to the user (who sent the virus)? Running Clamav 0.67 w/ milter on FreeBSD 4.7 Marc S. Brooks Programmer/Systems Admin 975 Andreasen Escondido, CA 92029 760-740-2625 ph 760-740-2643 fx

[Clamav-users] clamdscan: input via stdin

2004-03-01 Thread Marc Cuypers
Hi, I'm running clamav 0.60 on Debian. Can I 'cat' a file to clamdscan, or must it be a physical file on the disk? Thanks for your time, --Marc --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and de

RE: [Clamav-users] ClamAV 0.67 upgrade from.065 doesn't work [SOL VED]

2004-02-27 Thread Marc Brooks
This has been solved.. The sendmail.mc for some strange reason needed to be rebuilt. -Original Message- From: Marc Brooks [mailto:[EMAIL PROTECTED] Sent: Friday, February 27, 2004 10:37 AM To: '[EMAIL PROTECTED]' Subject: [Clamav-users] ClamAV 0.67 upgrade from.065 doesn'

[Clamav-users] ClamAV 0.67 upgrade from.065 doesn't work

2004-02-27 Thread Marc Brooks
After upgrading from 0.65 to 0.67 on FreeBSD clamav went from finding 100+ viruses a day to 0 a day.. Any suggestions? The daemon and milter are running. Marc S. Brooks Programmer/Systems Admin 975 Andreasen Escondido, CA 92029 760-740-2625 ph 760-740-2643 fx

[Clamav-users] (no subject)

2004-02-26 Thread Marc Brooks
to port /var/run/clmilter.sock: Address already in use Feb 26 14:50:45 xcon5 clamav-milter: ClamAv: Unable to create listening socket on conn /var/run/clmilter.sock Port? What port? currently my machine has one port open.. Any help would be super.. Marc S. Brooks Programmer/Systems Admin 975

[Clamav-users] Clmilter: Unable to bind to port /var/run/clmilter.sock: Address already in use

2004-02-26 Thread Marc Brooks
Hello all, When I try to start the clamav-milter under sendmail on my BSD box I get the following error.. *** Unable to bind to port /var/run/clmilter.sock: Address already in use Marc S. Brooks Programmer/Systems Admin 975 Andreasen Escondido, CA 92029 760-740-2625 ph 760-740-2643 fx

  1   2   >