/var/lib/clamav/clamav-50739a1308fc9a72abcafd5bbdc93825.tmp that was
47GB with a file called h??? using most of the space. I listed the
contents of the directory below.
Is this related to the same issue? Is the workaround to downgrade
versions for now?
Thanks for your help.
Ryan
---
$ ll
-users] Database Mirror Issues
Two choices:
- wait. It will eventually sort itself out.
- remove mirrors.dat and run freshclam manually. Might have to do this more
than once.
-- Noel Jones
On 2/14/2013 12:59 PM, Ryan Goode wrote:
> Is that the only solution? We have to hit a ton
Is that the only solution? We have to hit a ton of servers as none of our
servers using clam have been able to update for a few hours.
-Original Message-
From: clamav-users-boun...@lists.clamav.net
[mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Dan Schwartz
Sent: Thursday, F
mav.c:748: error: 'struct cl_limits' has no member named
'maxmailrec'
scannedonlyd_clamav.c:749: error: 'struct cl_limits' has no member named
'maxratio'
make[1]: *** [scannedonlyd_clamav] Error 1
make[1]: Leaving directory `/usr/local/src/scannedonly-
t I suspected some sort of weird interaction with
ClamAV and Hotmail, but I've not actually been able to find any conclusive
evidence one way or the other.)
No, from a variety of different sources unfortunately.
Ryan Moore
--
Perigee.net Corpora
another box behind runs clamav 0.90.1 via amavis
without a problem, so the mail is still being scanned), or downgrade it.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
___
Help us build a comprehe
On Friday 18 August 2006 16:43, Dennis Peterson wrote with regard to - Re:
[Clamav-users] Clamav Uninstall :
> Scott Ryan wrote:
> > On Friday 18 August 2006 16:27, Dennis Peterson wrote with regard to -
> > Re:
> >
> > [Clamav-users] Clamav Uninstall :
> >> J
On Friday 18 August 2006 16:27, Dennis Peterson wrote with regard to - Re:
[Clamav-users] Clamav Uninstall :
> Jim Maul wrote:
> > Dennis Peterson wrote:
> >> Scott Ryan wrote:
> >>> On Friday 18 August 2006 06:02, Robert wrote with regard to - Re:
> >>
On Friday 18 August 2006 16:19, Jim Maul wrote with regard to - Re:
[Clamav-users] Clamav Uninstall :
> Dennis Peterson wrote:
> > Scott Ryan wrote:
> >> On Friday 18 August 2006 06:02, Robert wrote with regard to - Re:
> >>
> >> [Clamav-users] Clamav
?
Everything would be a whole lot easier...
--
Regards,
Scott Ryan
ISP Systems Development & Integration Specialist
Telkom Internet
-
Good judgement comes with experience.
Unfortunately, the experience
usua
even used tcpdump to see if there was
anything happening, but still nothing.
Any ideas would be greatly appreciated.
--
Regards,
Scott Ryan
Telkom Internet
-
Good judgement comes with experience.
Unfortunately, the experience
usually comes from bad
This one time, at band camp, Chris Hannam wrote:
> Hi,
> I`m running Clam AV 0.87 and have noticed some poor performance when
> scanning large (20Mb+) Power Point presentations. These scans can take
Of course it will take long to scan files of that size.
> upwards of 3 minutes. I had similar issu
gentoo-announce] [ GLSA 200506-23 ] Clam AntiVirus: Denial of Service
Vulnerability
Sorry if this has been discussed before:
I do not see anything on the ClamAV website indicating the status of this
potential DoS or whether is rectified or even no applicable. Can anyone shed
some light on this
don't
detect most of the variants.
Great work getting it right the first time. And thank you for all the work
and effort all of you guys put into this project.
Ryan
___
http://lurker.clamav.net/list/clamav-users.html
On Thursday 24 February 2005 11:29, Yatin Shah (QualiSpace, Sales) shaped the
electrons to say:
> Thank You!
>
> Thank you very much for mailing me. I will definitely check your mail and
get back to you. Meanwhile, please note:
> >>If you have any support related query, please send an email to
On Wednesday 16 February 2005 14:35, Scott Ryan shaped the electrons to say:
> Hi list, I have posted before about an issue with clamd hanging and
> yesterday we finally managed to find out what the underlying problem was.
> We came across an 800k mail that we initially thought was caus
On Tuesday 22 February 2005 16:32, Matt Fretwell shaped the electrons to say:
> DisableDefaultScanOptions
A prime example of rtfm...
thanks.
--
Scott Ryan
Telkom Internet
___
http://lurker.clamav.net/list/clamav-users.html
enabled.
2005-02-22 14:32:58.524754500 OLE2 support enabled.
2005-02-22 14:32:58.529606500 HTML support enabled.
2005-02-22 14:32:58.540238500 Self checking every 300 seconds
--
Scott Ryan
Telkom Internet
___
http://lurker.clamav.net/list/clamav
ut MailMaxMimeDepth and MailBlockMax directives ? Most other
> scanners I've used default to block any message with over 10 levels of
> mime nesting, maybe something like 25 is a good default though.
I even think that 25 is too much...
--
Scott Ryan
Telkom Internet
_
On Wednesday 16 February 2005 18:43, Tomasz Kojm shaped the electrons to say:
> On Wed, 16 Feb 2005 17:51:28 +0200
>
> Scott Ryan <[EMAIL PROTECTED]> wrote:
> > I will just have to allow these types of mails to go unscanned. Four
> > minutes to scan 1 will cause a DOS.
On Wednesday 16 February 2005 17:34, Nigel Horne shaped the electrons to say:
> On Wednesday 16 Feb 2005 15:15, Scott Ryan wrote:
> > On Wednesday 16 February 2005 16:26, Nigel Horne shaped the electrons to
say:
> > > On Wednesday 16 Feb 2005 14:18, Ted Fines wrote:
> &
ork around for these types of mails?
regards
--
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Can anyone shed some light on this / offer some advice, as obviously we want
to keep up with the latest stable version. I can provide the mail if anyone
wants to examine it further.
Many thanks
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi
> competition if they couldn't bully them or force them out some other
> way. They love that monopoly thing.
>
> Go get 'em Bill ! Lets see how many times your anti-virus solution
> crashes when you demo that at a show ;-) Yep I'd trust M$ with the
> security o
ytes):
> >
> > All the problem files I've had are Powerpoint and Word files. For the
> > Powerpoint files it was a common background image.
>
> P900\Beyonce Knowles - Crazy In Love (2).wav: Exploit.W32.MS05-002 FOUND
> p900\Evanescence - Bring Me To Life - Daredevil
7;rtfm' and check the
clamscan man page :S
--
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
On Wednesday 05 January 2005 14:59, Deon de Villiers wrote:
> Hi
>
> We are experiencing this as well.
>
> How stable is the current CVS version? Is it OK to use in a busy
> production environment? (I hope I am not asking a silly question...,
> but I need to get a fix for this asap).
We moved to
spamasssasin + clamav. Simscan reject spams and virus at smtp level which
> i dont feel there is a need to filter the spams. So maildrop is left out on
> this setup.
>
> ___
> http://lists.clamav.net/cgi-bin/mailman/listinfo
On Tuesday 30 November 2004 14:14, Trog wrote:
> On Tue, 2004-11-30 at 12:04, Scott Ryan wrote:
> > I am using clamdscan (clamav 0.80 - RHEL3) on 5 very intensively used
> > mail servers and generally, I have no issues and it works wonderfully.
> > But however, every now and
that somthing happens to clamd and I would appreciate any
pointers or advise for further information if required.
Many Thanks
--
Scott Ryan
Telkom Internet
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
..Zip module failure ERROR
It also may be worth noting that I get the following errors as well.
.MS CAB module failure ERROR
.omsa.net-2004.11.07.02.00.tar.gz: Input/Output error ERROR
.LibClamAV Error: cli_untar: unknown type flag X
.RAR module failure ERROR
Something to do with
On Wed, 2004-11-03 at 09:48 +1300, Jason Haar wrote:
> Hi there
>
> I think the TCP option needs some more explicit documentation, as I have
> begun seeing RPMs of clamav where the Socket option is *disabled* and the
> TCP option is *enabled* as the defaults.
>
> As far as I'm aware, that is *not
if any of you are ever in South Africa, beers are on me.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_ Telkom Internet - South Africa
+--+
He who controls the past, controls the future,
He who
On Wednesday 27 October 2004 22:27, Todd Lyons shaped the electrons to say:
> Scott Ryan wanted us to know:
> >> How many threads do you have set in clamd.conf?
> >
> >Ah. This could very well be the issue. I have threads set to 200, but it
> > could be possible tha
On Wednesday 27 October 2004 21:48, Todd Lyons shaped the electrons to say:
> Scott Ryan wanted us to know:
> >I am having a slight problem which appears to have stemmed from swapping
> > from tcp sockets to unix sockets. Every now and again, and across 5
> > identical servers
this issue is causing me a bit of
problem.
any help would be appreciated.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
He who controls the p
On Tuesday 26 October 2004 18:47, Jim Maul shaped the electrons to say:
> Scott Ryan wrote:
>
>
>
> > What are we arguing about here? I just know in my experience that you are
> > seriously shooting yourself in the foot by using clamscan to scan all
> > mails. Trog&#
On Tuesday 26 October 2004 17:57, Jim Maul shaped the electrons to say:
> Scott Ryan wrote:
> > On Tuesday 26 October 2004 09:52, Trog shaped the electrons to say:
> >>On Tue, 2004-10-26 at 03:45, Eric Worthy wrote:
> >>>This is a vanilla install off qmailrocks.org s
Same here. We use qmail and find that 128Mb Raid controller for the queue dir
increase the I/O immensely. Reiserfs helps as well.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+
27;s documentation, and then don't break it by
> linking clamdscan to clamscan.
>
> 2. If you want to use clamscan rather than clamdscan (for no reason,
> other then to send your CPU load to 100%, as per this thread), configure
> qmail-scanner to do so, it has a configure option f
d of clamdscan. We send/receive over a million mails a day and
the cpus were sitting at 100% constantly. The first thing i did was to change
to clamdscan and cpu usage dropped unbelievably.
--
+------+
(0> Scott Ryan
//\ Senior Unix/Linux Engine
On Tuesday 19 October 2004 16:38, Tomasz Kojm shaped the electrons to say:
> On Tue, 19 Oct 2004 16:09:54 +0200
>
> Scott Ryan <[EMAIL PROTECTED]> wrote:
> > ClamAV databases updated (2004.10.19 12:59 +): daily.cvd
> > version: 540
> >
> > Submi
On Tuesday 19 October 2004 16:34, Trog shaped the electrons to say:
> On Tue, 2004-10-19 at 15:07, Scott Ryan wrote:
> > I saw on my monitoring application just now that clamav was outdated and
> > that i must update immediately. I was running 0.80rc3, and the moment I
> > g
.
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
He who controls the past, controls the future,
He who controls the present, controls the p
problem went away, but i still get the
warning telling me to upgrade...
is there a release i am missing ??
--
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Afr
Edilmar wrote:
One doubt: the files viruses.db/db2 aren't supported by mirrors?
Correct:
http://sourceforge.net/forum/forum.php?forum_id=404052
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
are
machine, so perhaps you have an outdated or mangled glibc install? Might
try reinstalling the package that supplies that for your distro.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
___
htt
it means something else
--
Kind regards,
+--+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
He who controls the past, controls the future,
He who controls
only see the one
process?
Regards,
Nick Beacroft
How are you checking for multiple threads? If using 'ps' make sure you
use the 'm' paramter (ie: "ps auxm"), or you can use `pidof clamd` too.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-8
another file in their database
directory or something.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
r the url
Kind regards,
+------+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+--+
Email: [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Cell: +27-721164832
W
On Wednesday 22 September 2004 12:28, Brian Morrison shaped the electrons to
say:
> On Wed, 22 Sep 2004 10:37:31 +0200 in
> [EMAIL PROTECTED] Scott Ryan
>
> <[EMAIL PROTECTED]> wrote:
> > I am investigating the possibility of using a Unix socket as opposed
> > to
gards,
+---+
(0> Scott Ryan
//\ Senior Unix/Linux Engineer
V_/_Telkom Internet - South Africa
+---+
Email: [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Cell: +27-721164832
Wor
dmail, and is included as part of the clamav package.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to re
On Monday 20 September 2004 21:52, Daniel Alberto Cañas wrote:
> On Sep 20, 2004, at 12:41 PM, Matt Gourley wrote:
> > Niek wrote:
> >> On 9/20/2004 4:32 PM +0200, Matt Gourley wrote:
> >>> Hi all,
> >>>
> >>> I've been trying to get ClamAV to log via multilog so that I can
> >>> generate reports v
On Monday 13 September 2004 23:13, Adam Bernstein wrote:
> Howdy. We have a strange problem: We're running the latest
> stable, 0.75.1, with virus definitions updated via freshclam
> every hour (the latest log entry shows "version 488". We have
> a virus that keeps getting through, but it is rec
4 x Dell 6650s - 4 HT Xeons.
It used to be a CPU hog until we started using clamdscan instead of
clamscan :S
On Saturday 11 September 2004 11:44, Odhiambo Washington wrote:
> Anyone running ClamAv in an SMP server?
> Any exploits (good news) that you can share about running it under
> such a
On Friday 03 September 2004 07:13, Scott Ryan wrote:
> I had an issue with this a while back which was fixed by upgrading to
> latest devel and then eventually 0.75-1.
> I run qmail-scanner which in turn calls clamdscan. If i cat the message and
> pipe through clamdscan manually, clam
On Friday 03 September 2004 16:42, Chris Meadors wrote:
> On Fri, 2004-09-03 at 11:47 +0200, Scott Ryan wrote:
> > Maybe you want to read the mail i sent again.
> > I use clamdscan not clamscan
> >
> > # man clamdscan
>
> Then do you have the "ScanMail"
On Friday 03 September 2004 11:18, Rob MacGregor wrote:
> On Fri, 3 Sep 2004 10:26:49 +0200, Scott Ryan <[EMAIL PROTECTED]>
wrote:
> > No because I dont use mbox format. I cat the email message and pipe it
> > through clamdscan. It picks up that it has to scan scanning mail
i am picking up thousands of mails a day - like
i said earlier, i even have records in my logs that clam is catching some
my.doom.M viruses.
> On Fri, 3 Sep 2004 07:13:53 +0200, Scott Ryan <[EMAIL PROTECTED]>
wrote:
> > I had an issue with this a while back which was fixed by upgradi
e or clam
would not have been able to capture the virus when run manually.
Does anyone have any ideas or should I submit this as a bug?
Many thanks
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Intern
Jeremy Kitchen wrote:
On Thursday 05 August 2004 12:46 pm, Ryan Moore wrote:
Such that if freshclam downloads a signature and if the
signature has a 'engine version requirement' or some attribute that can
be compared against the installed engine, if the installed engine isn't
newe
stalled engine isn't
newer, give a nasty warning in the log.
Not sure if this has been discussed before, if so I appologize as I must
have missed the thread.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
On Monday 02 August 2004 17:15, Julio E. Gonzalez P. wrote:
> I just want to share this bash script to generate virus statistics. I
> know is not perfect, but do the work.
>
> Hope it helps someone.
>
> Julio.
Here is another
Again, not perfect - but will do a job.
virus_stats.pl
Description: Per
s of a million mails a day and
have no issues with it.
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+-+
Email: [EMAIL PROTECTED]
Ce
email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> ___
> Clamav-
t; ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
--
+-+
(0> Scott Ryan
//
bish that are harmless as they are not executable.
>
> This includes files that are zipped and doubly zipped.
>
> -trog
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+
line 163
> *** Error code 1
>
> can anyone help me with this probs??
>
> TIA
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+-+
Email
What about sheep ?
On Wednesday 28 July 2004 09:38, Andrzej Kukula wrote:
> Matt:
> > > On Tue, 2004-07-27 at 13:28, Kevin Spicer wrote:
> > > > On Tue, 2004-07-27 at 16:26, Scott Ryan wrote:
> > > > > I have not submitted any virii (correct word?)
0.75 distro (when I did `sigtool -l | grep -ci bagle`).
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE deve
nk it will work.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BE
/ ClamAV version 0.70
Is this normal (difference in version)?
You probably have an old (vendor package?) in /usr/bin, which also shows
up before /usr/local/bin in the $PATH, so it is executed.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
not My.Doom.o -
My question is, how do i get clamav to identify these files as a virus?
Many thanks
--
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Internet - SA
+-+
Email: [EM
t upgraded my workstation to 0.75 (from 0.72)
to make sure I had the latest version, ran freshclam to make sure I had
the latest definitions (already had daily v423), still doesn't detect
this new mydoom variant (not mydoom.m, have a sig for that).
Ryan Moore
--
Perigee.net Corpor
that matched
the base64_illegal SA rule even). So the payload is benign since it
can't be executed as far as I can tell, since the attachment is mangled.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
-
vledged user doesn't have
access to (ie: /root/). You can use clamscan there however, as it would
run as the user executing the command.
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
vast majority of
signatures, and would vastly improve performance for the majority of
clean emails.
If clamav already does something like this, then great. I'll admit to
not really having looked at the code. :-)
- Ryan
--
Ryan Thompson <[EMAIL PROTECTED]>
SaskNow Technologies - h
4MB email seems rather excessive, perhaps enforcing a lower limit on
how big emails can be, or if you plan on processing huge messages adding
a lot more ram?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
__
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
- --
Kindest Regards,
+-+
(0> Scott Ryan
//\ Unix/Linux Systems Engineer
V_/_Telkom Intern
of
freshclam/clamav itself rather than the DB's.
Is there an easy way of determing the current version other than
tail'ing the freshclam log file?
Regards
Lee
sigtool --info=/usr/local/share/clamav/daily.cvd
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-
f you so desire, which do indeed work.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at Jav
esses when I resolve db.us.clamav.net, though
I didn't check the whois records for all of them to see where they were
located, but I'd assume they're in the US. I did check a few and they
were indeed in the US.
$ host db.us.clamav.net
db.us.clamav.net is an alias for d
. Yet I still get
that stupid OUTDATED message in freshclam.log.
What am I missing?
did you check for older libclamav.so files laying around and making sure
all links pointed to the latest version and rerun ldconfig?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017
for it to be parsed
through qmail scanner before hitting the queue?
Thanks in advance
Scott Ryan
---
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to
deliver hi
sigs: 428, f-level: 1, builder: diego)
Database updated (20657 signatures) from database.clamav.net
(152.66.249.132).
Clamd successfully notified about the update.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
t virus?
I see that you did use --mbox, but what about other options you have
enabled in clamav.conf (for clamdscan) that weren't passed as parameters
to clamscan?
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
Tomasz Kojm wrote to [EMAIL PROTECTED]:
> On Sun, 14 Mar 2004 00:57:27 -0600 (CST)
> Ryan Thompson <[EMAIL PROTECTED]> wrote:
>
> >
> > Hi All,
> >
> > I'm using the following:
> > clamd / ClamAV version devel-20040310
> > ClamAV version dev
you don't want to mess with permissions and want to be able to scan
various things easily as root, you can use clamscan instead of clamdscan.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
;t thinking mail being delivered
locally (or how it would handle that). Our sendmail box is just a relay
gateway for a few rbls and milters before being passed onto
spamassassin/amavisd and a pop3 server.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
lamav/clamav-milter.sock
--
Steve
You probably want the -b option to reject the DATA phase of the SMTP
session if the milter detects a virus.
-
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
oblems with the milter itself crashing, but clamd
dies every other day or so it seems, but that problem was worked around
by running clamdwatch.pl in a cronjob every minute. I'm not sure how you
could check to make sure the milter itself hasn't gone to sleep, but it
might b
I am running 0.67-1 and was looking to get a copy of the virus to test
if clamd catches it. where would i be able to get a copy of it from?
Thanks
Scott Ryan
Telkom Internet
South Africa
signature.asc
Description: This is a digitally signed message part
gards,
Stephan
http://mikecathey.com/code/clamdwatch/
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perigee.net
---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by D
Fri, 2004-03-12 at 04:18, Scott Ryan wrote:
> > Hello all, I have upgraded clamav from 0.55 to 0.67-1 so I can now catch
> > the bagle-passwd worm. It works and it catches the virus, but I have
> > noticed a significant increase in the load on the machine. I am running
> >
ly a concern, either. :-)
I've since disabled the LogMaxFileSize option (=0), and would support
that as default behaviour in future versions.
Thanks,
- Ryan
--
Ryan Thompson <[EMAIL PROTECTED]>
SaskNow Technologies - http://www.sasknow.com
901-1st Avenue North - Saskatoon, SK - S7
oblem by disabling the size
limit and rotating the log file more frequently, but I don't think what
I've described, above, would be considered ideal behaviour in any
circumstance. See my response to the "Logging" thread that I'm about to
post.. :-)
- Ryan
--
R
load increase normal (from 4-5 average to 9-11 average) or is
there something i can do to drop the overhead?
cheers
Scott Ryan
Systems Administrator
Telkom Internet
South Africa
signature.asc
Description: This is a digitally signed message part
appen when clamd dies, or quits responding (even though
pidof/ps show clamd running still). I would verify clamdscan is working
or try restarting the milter/clamd.
--
Ryan Moore
--
Perigee.net Corporation
704-849-8355 (sales)
704-849-8017 (tech)
www.perige
1 - 100 of 113 matches
Mail list logo
