Re: [clamav-users] TCP socket vs. local Unix socket

2025-01-18 Thread Paul via clamav-users
Not sure if you're planning on communicating via the internet but it's not recommended per the ClamAV Docs. On Jan 18, 2025, 2:42 PM -0500, Diggy via clamav-users , wrote: > I have a few questions about TCP sockets and local sockets. > > FYI, I am using ClamAV 1.0.7 packages provided by el9 EPEL.

Re: [clamav-users] Difference between clamscan and clamdscan scanning time

2024-12-06 Thread Paul Silvestri via clamav-users
Ah my apologies, I misread the first part of your message. It may be worth checking your clamd.conf and recreate those options via the CLI commands when running clamscan. On Dec 6, 2024, 10:21 PM -0500, neel roy , wrote: > Hello Paul, > > Thanks for reply. Yes, I have read that. I am

Re: [clamav-users] Difference between clamscan and clamdscan scanning time

2024-12-06 Thread Paul Silvestri via clamav-users
Per the docs: "clamscan is a command line tool which uses libclamav to scan files and/or directories for viruses. Unlike clamdscan, clamscan does not require a running clamd instance to function. Instead, clamscan will create a new engine and load in the virus database each time it is run. It w

Re: [clamav-users] Simple text email scan occasionally takes many minutes

2024-11-13 Thread Paul Netpresto via clamav-users
On 13/11/2024 17:39, Eddie via clamav-users wrote: On 11/13/2024 1:17 AM, Matus UHLAR - fantomas via clamav-users wrote: On 12.11.24 23:41, Paul Netpresto via clamav-users wrote: I would set "ConcurrentDatabaseReload no" to avoid clamd wanting to allocate in excess of 3G towards th

Re: [clamav-users] Simple text email scan occasionally takes many minutes

2024-11-12 Thread Paul Netpresto via clamav-users
not be an issue On 12/11/2024 22:43, Eddie via clamav-users wrote: On 11/12/2024 2:39 PM, Paul Netpresto via clamav-users wrote: How much ram does system have ? It's a VM running under ESXi with 4GB. On 12/11/2024 08:03, Matus UHLAR - fantomas via clamav-users wrote: On 11/7/2024 3:27

Re: [clamav-users] Simple text email scan occasionally takes many minutes

2024-11-12 Thread Paul Netpresto via clamav-users
How much ram does system have ? On 12/11/2024 08:03, Matus UHLAR - fantomas via clamav-users wrote: On 11/7/2024 3:27 AM, Virgo Pärna via clamav-users wrote: On Wed, 6 Nov 2024 18:42:33 -0800, Eddie via clamav-users wrote: Nope, there's nothing like that running. What about database up

Re: [clamav-users] Simple text email scan occasionally takes many minutes

2024-11-07 Thread Paul Netpresto via clamav-users
Hi Can the problem be replicated using clamscan ? On 07/11/2024 23:33, Eddie via clamav-users wrote: On 11/7/2024 3:27 AM, Virgo Pärna via clamav-users wrote: On Wed, 6 Nov 2024 18:42:33 -0800, Eddie via clamav-users wrote: Nope, there's nothing like that running. What about database

Re: [clamav-users] Inquiry About Security Measures for Remote Scanning Using Clamdscan

2024-07-06 Thread Paul Silvestri via clamav-users
uning where it > does not overwhelm my system > > > From: Paul Silvestri > Sent: Saturday, July 6, 2024 5:07 PM > To: Paul Kosinski ; Matus UHLAR - fantomas via > clamav-users ; Khodor Barakat > > Subject: Re: [clamav-users] Inquiry About Security Measures fo

Re: [clamav-users] Inquiry About Security Measures for Remote Scanning Using Clamdscan

2024-07-06 Thread Paul Silvestri via clamav-users
hat you're looking to do? On Jul 6, 2024, 4:55 PM -0400, Khodor Barakat , wrote: > Thanks Paul for the clarification, > > There is a misunderstanding, initially our developers are using the "clamscan > -" to scan the streamed data in the upload form of the app, as i mentione

Re: [clamav-users] Inquiry About Security Measures for Remote Scanning Using Clamdscan

2024-07-05 Thread Paul Silvestri via clamav-users
mscan within my app, but the problem with clamscan > has to load the entire virus database and initialize the scanning engine from > scratch. > > Scanning a file with few kb took what a mb file would need for scanning > around 20 to 30s > From: Paul Silvestri > Sent: Fri

Re: [clamav-users] Inquiry About Security Measures for Remote Scanning Using Clamdscan

2024-07-05 Thread Paul Silvestri via clamav-users
t via clamav-users , wrote: > Thanks Paul, > > This was something i was looking into, like building an ssh tunnel , but it > is a burden as tunnel failure would broke the entire process , > > I might reconsider running clamdscan locally while tunning the config and > using syste

Re: [clamav-users] Inquiry About Security Measures for Remote Scanning Using Clamdscan

2024-07-05 Thread Paul Kosinski via clamav-users
I don't think there is anything builtin to clamd, but you might consider setting up a secure tunnel(s) from the client machine(s) to the scanning machine. For example, each client machine has a little daemon that listens on a UNIX socket and is connected securely (SSH, OpenVPN etc.) to the scan

Re: [clamav-users] Debian 12.6 - clamav-deamon does not use a socket

2024-06-30 Thread Paul Kosinski via clamav-users
Did you check the permissions on the clamd socket to see if it allows access by rspamd? (I sometimes get burned by mismatched permissions.) On Sun, 30 Jun 2024 17:45:17 +0200 christian via clamav-users wrote: > Am 30.06.2024 um 17:28 schrieb Matus UHLAR - fantomas via clamav-users: > > > >

[clamav-users] Question about additional processing on Documents in Clamd Configuration File

2024-06-27 Thread Paul via clamav-users
Hello everyone, In the clamd.conf file there are several different document types (PDF, SWF, OLE2, etc.) that have an option for additional processing. For example: # This option enables scanning within PDF files. > # If you turn off this option, the original files will still be scanned, > but >

Re: [clamav-users] New Tool: ClamAV Large Archive Scanner

2024-06-04 Thread Paul Kosinski via clamav-users
A good start, and the ISO should be good for scanning CDs and such. I wonder if it could find (given the right signature) the malware on Sony's old music CDs that AV companies ignored, but some independent researcher discovered, and then the DHS (!) cited as being a nasty security issue. On T

Re: [clamav-users] ON-ACCESS MONITORING

2024-04-29 Thread Paul Kosinski via clamav-users
"I'm not familiar with KMail." Kmail is KDE's standard email client/MUA (like e.g., Thunderbird), while Sendmail is one of the earliest SMTP email servers/MTAs (like e.g., Postfix). So they are quite different pieces of software. Paul P.S. I use ClamAV with Postfix (b

Re: [clamav-users] Unable to download daily.cvd after upgrade to RHEL 8

2024-03-07 Thread John Paul Guay via clamav-users
:* clamav-users on behalf of > Joel Esler via clamav-users > *Sent:* Thursday, March 7, 2024 2:44 PM > *To:* ClamAV users ML > *Cc:* Joel Esler > *Subject:* Re: [clamav-users] Unable to download daily.cvd after upgrade > to RHEL 8 > > Looks like you’re trying to conn

[clamav-users] Unable to download daily.cvd after upgrade to RHEL 8

2024-03-07 Thread John Paul Guay via clamav-users
Hello, We have performed an In-Place upgrade to RHEL 8 on our system that ClamAV resides on and afterwards we are no longer able to download the daily.cvd. Just a little history. The system is in a lab behind a corporate proxy and it requires proxy rules to be able to reach database.clamav.net an

[clamav-users] An example of why ClamAV should be able to scan disk images (which are typically over 2 GB)

2024-01-05 Thread Paul Kosinski via clamav-users
CVE-2021-44879 Wenqing Liu reported a NULL pointer dereference in the f2fs implementation. An attacker able to mount a specially crafted image ^^^ can take advantage of this flaw for denial of service. >From "Debian S

Re: [clamav-users] Question About MaxFileSize / news of upcoming Large Archive Scanner tool

2023-11-13 Thread Paul Kosinski via clamav-users
Large archive files may be the most obvious case, especially if things like disk images and installation images are included, but make sure that large multimedia files are also handled. In today's Internet environment, there are probably far, far more large video files floating around than trad

Re: [clamav-users] first questioon????

2023-10-25 Thread Paul Kosinski via clamav-users
On Wed, 25 Oct 2023 17:18:46 +0100 (BST) Andrew C Aitchison via clamav-users wrote: > On Sun, 22 Oct 2023, Rahim Fakir via clamav-users wrote: > > > I would like to know if it is possible to have clamav on the desktop and > > remotely scan the phone. > > for example: clamscan -r -i remove=yes ip

Re: [clamav-users] Error installing from source

2023-10-13 Thread Paul Netpresto
HI You need to find a later version of GCC for your servers. I had a similar problem with some legacy Ubuntu machines. Fortunately an upgrade to GCC 7.5 was available in the Ubuntu release archive. The C++ code in libunrar has been uplifted as well as a very nasty bug being fixed. Paul

Re: [clamav-users] Error installing from source

2023-10-12 Thread Paul Netpresto
Hi What version of GCC is installed on the server you are seeing this problem ? Regards Paul On 12/10/2023 13:40, Nikos Gatsis via clamav-users wrote: NG> Hello list. NG>  I am try to install from source 0.103.10 on some mailservers, most of them have NG>  Centos 7 last versio

Re: [clamav-users] Question About MaxFileSize

2023-06-09 Thread Paul Kosinski via clamav-users
You are right. But more than that, merely *reading* a file will exercise such code. I wonder if anybody has devised a file which exploits such a kernel bug? (Shudder.) After I wrote my objection, I realized that to be even more safe, one should scan removable disks at the block level before mou

Re: [clamav-users] Question About MaxFileSize

2023-06-09 Thread Paul Kosinski via clamav-users
ock device -- a clear kernel involvement. Of course, scanning any file might conceivably trigger a ClamAV bug, and thus a compromise, but that is no reason to add another layer of vulnerability to things. (But it is a good reason not to run ClamAV as root.) Paul Kosinski On Thu, 8 Jun 2023

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Paul Netpresto
duced . Now it runs amok in my opinion certainly 3G of errors in logs within an hour is not good Thanks for the links I will check if the current scripts used for unofficial db's can be improved. Regards Paul On 24/05/2023 21:57, Steve Basford via clamav-users wrote: when there is no previou

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Paul Netpresto
t; ERROR: accept() failed: Too many open files Mon May 22 13:45:02 2023 -> ERROR: accept() failed: Too many open files Mon May 22 13:45:02 2023 -> ERROR: accept() failed: Too many open files 3.5 G later /var/ is full !! On 24/05/2023 19:39, Steve Basford via clamav-users wrote: On 24 May

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Paul Netpresto
en it cannot continue. Regards Paul On 24/05/2023 07:17, Steve Basford via clamav-users wrote: On 23 May 2023 21:59:22 Paul Netpresto wrote: Hello What should the behaviour of a running clamd be when it comes across a malformed database during a signature-reload. Clamd.conf has se

[clamav-users] ClamAV 1.0.1

2023-05-23 Thread Paul Netpresto
Hello What should the behaviour of a running clamd be when it comes across a malformed database during a signature-reload. Clamd.conf has setting "ConcurrentDatabaseReload no" Regards Paul ___ Manage your clamav-users mailing list su

Re: [clamav-users] End of life (EOL) policy change, 0.103 one year extension, 0.105 past end of life

2023-05-18 Thread Paul Kosinski via clamav-users
On Tue, 16 May 2023 20:32:56 + "Micah Snyder (micasnyd)" wrote: > Hi Paul, > > Unlike Java or C#, Rust does not have any additional runtime library > requirement. > > Regards, > Micah > > > Micah Snyder > ClamAV Development > Talos > C

Re: [clamav-users] End of life (EOL) policy change, 0.103 one year extension, 0.105 past end of life

2023-05-08 Thread Paul Kosinski via clamav-users
Micah, Great decision! I was worried about needing Rust on some of our systems. Not only for compiling, but doesn't Rust also need its own run time libraries? I'm still trying to figure out how to move from iptables to nftables, so not having also to use Rust "immediately" is a relief. (They

Re: [clamav-users] Be wary of emails with attachments targeting clamav-users list members

2023-03-22 Thread Paul Kosinski via clamav-users
I have just started getting these claiming to be relevant to ClamAV, but I have *also* been receiving this sort of thing claiming to be from the Firefox ESR list for months now. I am posting (one of) the HTMLs "about" ClamAV to https://www.clamav.net/reports/malware. Should I also post (one of)

Re: [clamav-users] The database server doesn't have the latest patch

2023-03-16 Thread Paul Kosinski via clamav-users
My main point (which wasn't emphasized enough) was that one of the Cloudflare "anycast" mirrors (my local one, "BOS"), which host the ClamAV files, was often missing the *latest* version of the daily signature file. So I wondered if the same kind of Cloudflare problem might be affecting you. I

Re: [clamav-users] The database server doesn't have the latest patch

2023-03-15 Thread Paul Kosinski via clamav-users
A few years ago, when I was attempting local mirroring, I was having a recurring problem with my local Cloudflare "anycast" server ("BOS"). I wonder if you might be having a similar problem. I was running a crontab triggered procedure a few times an hour which would do a DNS TXT query to see wh

[clamav-users] Memory allocation issue

2023-03-14 Thread Paul Netpresto
Any pointers welcome Paul ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-docum

Re: [clamav-users] What was detected?

2023-02-27 Thread Paul Netpresto
On 27/02/2023 21:33, joe a wrote: On 2/27/2023 4:24 PM, Paul Netpresto wrote: On 27/02/2023 20:57, joe a wrote: On 2/27/2023 3:52 PM, joe a wrote: On 2/27/2023 3:47 PM, joe a wrote: Got an email marked as infected by clamav.  I cannot determine what was detected. A long time ago I asked

Re: [clamav-users] What was detected?

2023-02-27 Thread Paul Netpresto
On 27/02/2023 20:57, joe a wrote: On 2/27/2023 3:52 PM, joe a wrote: On 2/27/2023 3:47 PM, joe a wrote: Got an email marked as infected by clamav.  I cannot determine what was detected. A long time ago I asked here and someone described how to scan an individual email file, log the results

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Paul Kosinski via clamav-users
I am using ClamAV 0.103.6 on Buster, but I have always built it from source (since way before Cisco and even SourceFire), hence I'm a bit obsolete. I did this -- and still do it -- because ClamAV has always been a bit experimental. Thus I install each version under "/opt/clamav.d/version" so I

Re: [clamav-users] Strange Problem when trying update after reboot (Ubuntu 22.04.1 ClamAV 0.103.6)

2023-02-16 Thread Paul Netpresto
Hi it would appear your calling your script before the network and dns are up and working. What if your use of the 'host' command returns NXDOMAIN in you script . Paul On 16/02/2023 17:23, newcomer01 via clamav-users wrote: yes, unfortunately i use the ClamAV (0.103.6) which are

Re: [clamav-users] Subject: behaviour of clamAV with password protected pdf file.

2023-02-14 Thread Paul Kosinski via clamav-users
Compared to the following, encrypted PDFs are a very minor issue (in my opinion). Most websites these days use HTTPS ("for security"), and make extensive use of Javascript (find a site that doesn't). This means that browsers are always executing code that can't be scanned (at least by ClamAV).

Re: [clamav-users] About scanning files larger than 2 GB in size

2023-01-26 Thread Paul Kosinski via clamav-users
izes and offsets some years ago, so the infrastructure is there. Also, the analogous Y2038 problem, which requires going from 32 to 64 bit as well (for time-stamps), is being seriously worked on. (And note that the Y2K problem, which was a *much* bigger issue, was indeed fixed.) Paul P.S. Do many

Re: [clamav-users] About scanning files larger than 2 GB in size

2023-01-21 Thread Paul Kosinski via clamav-users
On Sun, 22 Jan 2023 05:40:18 +0900 Tsutomu Oyamada wrote: > How do I set up clamd? > Setting MaxFileSize to "0" is unlimited, but internally files larger than 2GB > in size cannot be scanned. > In this case, do you treat the file as clean without scanning it at all? I've complained about the

Re: [clamav-users] Anyone else having trouble reaching the ClamAV website?

2023-01-06 Thread Paul Kosinski via clamav-users
I occasionally see a similar message from sites other than clamav.net saying something equivalent to Cloudflare's "review the security of your connection". The phrasing is pure gaslighting. It isn't for *connection* security -- HTTPS provides *that*. What it really means is that the site is tryi

Re: [clamav-users] Inquire about clamav latest stable version -

2022-08-01 Thread Paul Kosinski via clamav-users
On Thu, 28 Jul 2022 17:38:20 -0400 Joel Esler wrote: > ClamAV is a Cisco project. There’s no arguing that. > > All of the original team are observed here: https://www.clamav.net/about > > So, not sure what you’re getting at. The phrase "*the* authors of the software" rather implies that Ci

Re: [clamav-users] No daily sig since July 28th

2022-08-01 Thread Paul Kosinski via clamav-users
On Mon, 1 Aug 2022 16:24:50 +0100 (BST) Andrew C Aitchison via clamav-users wrote: > On Mon, 1 Aug 2022, Shawn Iverson via clamav-users wrote: > > > Hello, > > > > I've noticed that a daily hasn't been posted since the 28th of July. Are > > daily sigs being posted? > > # clamscan --version >

Re: [clamav-users] Inquire about clamav latest stable version -

2022-07-28 Thread Paul Kosinski via clamav-users
> At the moment three versions are officially supported by Cisco's Talos, the > authors of the software. Cisco's Talos are the *current* authors of the software. ClamAV was started in 2001 by Tomasz Kojm and a group of Open Source enthusiasts. In 2007, they sold the software to Sourcefire (of S

[clamav-users] ClamAV's 'configure' doesn't seem to complain about invalid options

2022-07-21 Thread Paul Kosinski via clamav-users
Building 0.103.6, I ran 'configure' with the option "--disable-clamonaccess" (instead of "--disable-clamonacc") and got no error or warning that the option was not recognized. I did this because I realized that I had still been using the old "--disable-clamuko", which also had no effect, and g

[clamav-users] Scan reports

2022-05-31 Thread John Paul Guay via clamav-users
Hello, I’m new to ClamAV and I need help to fix our master server so it will scan each agent daily. I work in a federal department in government and I’ve been working in our lab environment. We had a consultant who had setup our ClamAV to scan all of our Linux VM’s and he left good documentation b

Re: [clamav-users] Update problem today

2022-04-25 Thread Paul Smith via clamav-users
e The problem 'magically' disappeared as soon as the 26522 update was published, so, to me, it really looks as if there were bad files on one of the mirrors. The later update would have replaced that with a correct file, so it all works again. Paul -- Paul Smith Computer Services

Re: [clamav-users] Update problem today

2022-04-23 Thread Paul Smith via clamav-users
On 23/04/2022 18:34, Paul Smith via clamav-users wrote: It downloads (what looks like) the wrong version. Then when it sees the mismatch, it downloads the patch, but then can't merge them. Maybe it downloaded the right file, with the wrong version identifier, so the patch fails? FWIW,

Re: [clamav-users] Update problem today

2022-04-23 Thread Paul Smith via clamav-users
ken file on it, and I'm just unlucky to be allocated that mirror most of the time. Paul -- Paul Smith Computer Services Tel: 01484 855800 Vat No: GB 685 6987 53 Sign up for news & updates at http://www.pscs.co.uk/go/subscribe ___

[clamav-users] Update problem today

2022-04-23 Thread Paul Smith via clamav-users
y: Parsed 228 lines and executed 228 commands ERROR: buildcld: Can't add daily.ldb to new daily.cld - please check if there is enough disk space available ERROR: updatedb: Incremental update failed. Failed to build CLD. ERROR: Unexpected error when attempting to update daily: Failed to up

Re: [clamav-users] clamdscan: Output detailed scan results to STDOUT or to configurable file?

2022-02-17 Thread Paul Kosinski via clamav-users
On Thu, 17 Feb 2022 14:08:45 +0100 An Schall via clamav-users wrote: > When using clamdscan, I would like to have verbose output logged to a > file. Specifically, the timestamp, file path and file name as well as > the scan results should be logged to a specified file. > > In comparison, clamsca

[clamav-users] Error 403 downloading virus updates

2022-02-10 Thread Paul Furnival via clamav-users
I am running CLAMAV on a number of servers running different linux distributions and, therefore, different versions of the clamav engine. 2 of the servers have started to give errors when trying to upload the definition files. These errors came to light as emails I received, In following this

Re: [clamav-users] ClamAV 0.103.5 and 0.104.2 security patch release; 0.102 past EOL

2022-01-16 Thread Paul Kosinski via clamav-users
On Wed, 12 Jan 2022 20:12:42 + "Micah Snyder \(micasnyd\) via clamav-users" wrote: > Find this announcement online at: > https://blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html > > > ClamAV versions 0.103.5 and 0.104.2 are now available for download on the > clamav.net

Re: [clamav-users] Problem installing ClamAV 104.1 on CentOS 7

2021-12-06 Thread Paul Kosinski via clamav-users
On Mon, 6 Dec 2021 16:41:51 -0500 Bowie Bailey via clamav-users wrote: > I followed the instructions to install the prerequisites and then went > through the > steps for the default build.  Everything went fine until I got to the last > step. > > $ sudo cmake --build . --target install > sudo

Re: [clamav-users] Fail to download source archive with 403 forbitten

2021-11-17 Thread Paul Kosinski via clamav-users
On Mon, 15 Nov 2021 13:23:49 + "Joel Esler \(jesler\) via clamav-users" wrote: > On Nov 14, 2021, at 19:11, Yasuhiro Kimura > mailto:y...@utahime.org>> wrote: > > These results means server checks User-Agent header of HTTP request > and returns 403 forbitten if the value doesn't look like t

Re: [clamav-users] Clam updates failing

2021-10-23 Thread Paul Kosinski via clamav-users
On Fri, 22 Oct 2021 18:47:01 + "Joel Esler (jesler)" wrote: > > On Oct 22, 2021, at 14:16, Paul Kosinski via clamav-users > > wrote: > > > > On Fri, 22 Oct 2021 13:27:46 + > > "Joel Esler \(jesler\) via clamav-users" > > wrote

Re: [clamav-users] Clam updates failing

2021-10-22 Thread Paul Kosinski via clamav-users
On Fri, 22 Oct 2021 13:27:46 + "Joel Esler \(jesler\) via clamav-users" wrote: > > On Oct 21, 2021, at 18:55, Kenneth Porter wrote: > > > > On 10/21/2021 10:14 AM, Paul Kosinski via clamav-users wrote: > >> I've never seen a DNS age warni

Re: [clamav-users] Clam updates failing

2021-10-22 Thread Paul Kosinski via clamav-users
On Thu, 21 Oct 2021 15:55:54 -0700 Kenneth Porter wrote: > On 10/21/2021 10:14 AM, Paul Kosinski via clamav-users wrote: > > I've never seen a DNS age warning, but that might be because, for several > > years now, I only run freshclam when the DNS TXT record (which I che

Re: [clamav-users] Clam updates failing

2021-10-21 Thread Paul Kosinski via clamav-users
On Thu, 21 Oct 2021 10:20:58 +0100 (BST) "G.W. Haywood via clamav-users" wrote: > Hi there, > > On Thu, 21 Oct 2021, Ben Argyle via clamav-users wrote: > > > Has anyone been having trouble downloading updates for the last 20 > > hours or so? ... > > Yesterday I saw a couple of warnings abou

[clamav-users] clamconf not installed by package manager

2021-09-22 Thread Paul Furnival via clamav-users
I have installed CLAMAV following the documentation and it mentions creating / checking configuration settings with clamconf. However, clamconf has not been installed nor can I see it as a separate package. Can anyone please advise how I get this installed. Thanks System Info: ==

Re: [clamav-users] QNAP Antivirus Updates

2021-09-21 Thread Paul Kosinski via clamav-users
weird, given the use of Anycast). So I tested it the best I could (without traveling a lot, or setting up VMs in different countries). On Tue, 21 Sep 2021 13:21:20 +0200 Matus UHLAR - fantomas wrote: > >On Mon, 20 Sep 2021 17:17:34 + > >"Joel Esler (jesler)&qu

Re: [clamav-users] QNAP Antivirus Updates

2021-09-20 Thread Paul Kosinski via clamav-users
On Mon, 20 Sep 2021 17:17:34 + "Joel Esler (jesler)" wrote: > > On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users > > wrote: > > > > These two IPs are Anycast addresses, and have been unchanged for well over > > 2 years. (Anycast ad

Re: [clamav-users] QNAP Antivirus Updates

2021-09-20 Thread Paul Kosinski via clamav-users
On Mon, 20 Sep 2021 08:18:01 +0100 (BST) "G.W. Haywood via clamav-users" wrote: > Hi there, > > On Sun, 19 Sep 2021, Gregory Poveda via clamav-users wrote: > > > I have several QNAPs > > It might be worth searching for 'QNAP' in the list archives. At least > some of those devices will strug

[clamav-users] Virus DB updates?

2021-09-19 Thread Paul Kosinski via clamav-users
I haven't seen any virus database update since the afternoon of Thu 16 Sep 2021, when it was updated to 26297. Are updates really this stagnant, or does the DNS TXT record at "current.cvd.clamav.net" no longer reflect the state of things? (For a bit more bandwidth savings, I only run freshclam

Re: [clamav-users] IP List for Virus Definition Domain

2021-09-15 Thread Paul Kosinski via clamav-users
When I do a DNS lookup I also get: 104.16.218.84 104.16.219.84 This is the same result that I got well over a year ago, when I had to add these IP addresses as holes in my firewall so that my normally isolated internal server could update its ClamAV instance. These are Anycast addresses, s

Re: [clamav-users] error code 429

2021-09-05 Thread Paul Kosinski via clamav-users
On Sun, 5 Sep 2021 18:27:09 + "Joel Esler (jesler)" wrote: > Now? - All 3 systems updated successfully as soon as our DNS TXT test said the 26285 update was available (see below). This is again as it is almost every time since the download limiting mechanism s

Re: [clamav-users] error code 429

2021-09-05 Thread Paul Kosinski via clamav-users
go, when we were downloading full-blown CVDs (not just CDIFFs), I was able to use another mirror which was up to date on the same day "BOS" was behind. Now even the small CDIFFs are behind? Thanks, Paul Kosinski -- Saturday 04 September 2021 at 22:05:01

[clamav-users] Clamav download problems

2021-09-05 Thread Paul Netpresto via clamav-users
tabase is up-to-date (version: 333, sigs: 92, f-level: 63, builde r: awillia2) Regards Paul On 05/09/2021 16:08, Joel Esler (jesler) via clamav-users wrote: This is useful. Thank you. Each host should have a different rate limit under the new system (I turned it back off last night, which is why eve

Re: [clamav-users] error code 429

2021-09-05 Thread Paul Netpresto via clamav-users
Hi Do I have reason to be concerned that my systems could not download yesterday's daily cdiff until the early hours of today. They are all  0.103.(2|3) release.version The experiment did not appear to impact many folk Regards Paul On 05/09/2021 03:45, Joel Esler (jesler) via clamav-

Re: [clamav-users] error code 429

2021-09-04 Thread Paul Kosinski via clamav-users
On Sat, 4 Sep 2021 15:01:00 +0100 Paul Netpresto via clamav-users wrote: > Hi all > > Similar issue from Manchester UK. 4 mx's  all failing to collect today's > update apparently first available 9:50 am today Not rate limited (as we only check about once per hour, f

Re: [clamav-users] error code 429

2021-09-04 Thread Paul Netpresto via clamav-users
Hi all Similar issue from Manchester UK. 4 mx's  all failing to collect today's update apparently first available 9:50 am today ClamAV update process started at Sat Sep  4 14:55:38 2021 daily database available for update (local version: 26283, remote version: 26284 ) WARNING: downloadPatch

Re: [clamav-users] ClamAV® blog: Changes to ClamAV end-of-life policy and a new Long Term Support policy

2021-09-03 Thread Paul Kosinski via clamav-users
LTS is great! Earlier this year it seemed like I was spending 1 day per week trying to keep up with ClamAV updates, lockouts etc. Now I have time to do more forward looking software work. On Fri, 3 Sep 2021 15:52:10 + "Joel Esler \(jesler\) via clamav-users" wrote: > > > > https://blog.c

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Second Release Candidate is here!

2021-08-25 Thread Paul Kosinski via clamav-users
On Tue, 24 Aug 2021 23:08:52 + "Micah Snyder (micasnyd)" wrote: > This conversation is a fun read! But don't worry really no point removing > the docs from the source package or the pre-compiled packages. Including it > is painless at this point. If you're curious why, here's the process

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Second Release Candidate is here!

2021-08-24 Thread Paul Kosinski via clamav-users
On Tue, 24 Aug 2021 10:48:48 +0100 (BST) "G.W. Haywood via clamav-users" wrote: > Hi there, > > On Mon, 23 Aug 2021, Paul Kosinski via clamav-users wrote: > > > On Sun, 22 Aug 2021 14:42:06 + > > "Joel Esler via clamav-users" wrote: > >

Re: [clamav-users] Yara regular expression finds only first match in ClamAV ?

2021-08-22 Thread Paul Kosinski via clamav-users
On Sun, 22 Aug 2021 20:10:00 +0100 (BST) "G.W. Haywood via clamav-users" wrote: > Hi there, > > On Sun, 22 Aug 2021, Richard Graham via clamav-users wrote: > > On Sun, Aug 22, 2021 at 10:41 AM Zvi Kave wrote: > >> On 8/19/2021 9:33 PM, G.W. Haywood via clamav-users wrote: > >>> On Thu, 19 Au

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Second Release Candidate is here!

2021-08-22 Thread Paul Kosinski via clamav-users
On Sun, 22 Aug 2021 14:42:06 + "Joel Esler \(jesler\) via clamav-users" wrote: > I’m a fan of the thought of removing the user manual completely from the > downloaded packages and including a link to docs.ClamAV.net. Since that’s > more dynamic. I think that's a bad idea for three reas

Re: [clamav-users] Long Term Support (LTS) program proposal

2021-08-03 Thread Paul Kosinski via clamav-users
On Tue, 3 Aug 2021 07:53:24 +0200 Damian via clamav-users wrote: > > The current "stable" Debian is 10/Buster. It has ClamAV 0.103.2, patched by > > Debian to "deb10u1" (whatever that implies) > > https://security-tracker.debian.org/tracker/source-package/clamav Interesting, but *much* more

Re: [clamav-users] clamav-users Digest, Vol 200, Issue 19

2021-08-03 Thread Paul Rogers via clamav-users
ager? Can you not install VirtualBox? On a 512MB, 1GHz Pentium III? I did say "legacy", I believe. Don't ask why. If even possible, isn't that masochism? -- Paul Rogers paulgrog...@fastmail.fm Rogers' Second Law: "Everything you do communicates." (I

Re: [clamav-users] Long Term Support (LTS) program proposal

2021-08-02 Thread Paul Kosinski via clamav-users
On Sat, 31 Jul 2021 20:32:23 +0200 Matus UHLAR - fantomas wrote: > can't count on Debian? They are very conservative, which is usually nice. But for security software, not so nice. The current "stable" Debian is 10/Buster. It has ClamAV 0.103.2, patched by Debian to "deb10u1" (whatever that i

Re: [clamav-users] Long Term Support (LTS) program proposal

2021-07-31 Thread Paul Kosinski via clamav-users
On Sat, 31 Jul 2021 02:37:53 + "Joel Esler (jesler)" wrote: > > On Jul 30, 2021, at 14:41, Paul Kosinski via clamav-users > > wrote: > > > > (I don't see exactly how a LTS would have helped with the bandwidth issue, > > but I suppose

Re: [clamav-users] Opinion wanted: Change default config directory usr/clamav

2021-07-31 Thread Paul Kosinski via clamav-users
On Sat, 31 Jul 2021 12:03:36 + "Micah Snyder \(micasnyd\) via clamav-users" wrote: > Hi all, > > I could use your opinion about a change we'd planned to make in 0.104. By > request, I'd made this pull request to change the default directory for the > config files from /etc to /etc/clamav.

Re: [clamav-users] [OT] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-30 Thread Paul Kosinski via clamav-users
On Thu, 29 Jul 2021 23:33:02 +0100 (BST) "G.W. Haywood via clamav-users" wrote: > Hi there, > > On Thu, 29 Jul 2021, Paul Kosinski via clamav-users wrote: > > > ... do any firewall distros address inter-LAN filtering? > > We're well off-topic here so

Re: [clamav-users] Long Term Support (LTS) program proposal

2021-07-30 Thread Paul Kosinski via clamav-users
LTS sounds like a great idea! Recently, the bandwidth hogging episodes have resulted in rapid changes to ClamAV versions, followed by EOL of versions that many people (not including me) were still using. So recently I have had to spend far more time on updating ClamAV than updating anything els

Re: [clamav-users] can't cmake 1.0.4rc

2021-07-29 Thread Paul Kosinski via clamav-users
On Thu, 29 Jul 2021 08:52:57 +0100 (BST) "G.W. Haywood via clamav-users" wrote: > Maybe there's no need to worry about that. I've seen cases where the > build process looks for a shared object, finds a 32 bit version when > it's building for 64 bit, and then complains that it doesn't exist. > It

Re: [clamav-users] [OT] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-29 Thread Paul Kosinski via clamav-users
On Wed, 28 Jul 2021 12:53:38 +0100 (BST) "G.W. Haywood via clamav-users" wrote: > I'd recommend not using any big distro for your perimiter firewall. > I use one of the purpose-built stripped-down firewall distributions. "..our home firewall and gateway -- with iptables, multi-LAN routing (with

Re: [clamav-users] [OT] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-29 Thread Paul Kosinski via clamav-users
On Wed, 28 Jul 2021 23:31:05 +1000 "Gary R. Schmidt" wrote: > I second what Ged is saying here, for firewalls and so on the Raspberry > Pi and its ilk are a much better choice than a full-on system, they use > /much/ less power, and keeping a spare or three isn't a board- (or > wife-) level bu

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-28 Thread Paul Kosinski via clamav-users
On Wed, 28 Jul 2021 09:59:14 +0200 Matus UHLAR - fantomas wrote: > a bit OT, but I upgrade debian servers for years in a short steps, combining > > "apt-get upgrade" so only safe packages are upgraded > and manual upgrades a few at once via aptitude > (so packages with complicated dependencies a

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Paul Kosinski via clamav-users
On Tue, 27 Jul 2021 16:41:03 +0100 Mark Fortescue via clamav-users wrote: > Hi Joel, > > One quick answer to why people do not upgrade the OS is that the > hardware does not support the upgrade (mostly due to memory and x86_64). > > I work with embedded systems where the code is very specific

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Paul Kosinski via clamav-users
On Tue, 27 Jul 2021 15:30:05 + "Joel Esler (jesler)" wrote: > You can’t support everything, forever. When you are part of critical infrastructure -- as computers have become -- you must. (Well, not quite forever.) Compare the rollout of IPv6 with the rollout of x86_64 (not to mention the

Re: [clamav-users] ClamAV® blog: ClamAV 0.104.0 Release Candidate is here!

2021-07-27 Thread Paul Kosinski via clamav-users
On Mon, 26 Jul 2021 11:35:29 -0400 "Rick Cooper" wrote: > And what, exactly, is the reason for moving to cmake? I am sure you know > it's going to be problematic for thousands of people so I am curious what > tremendous gain of speed, size, memory usage or seciurity the other users > get from thi

Re: [clamav-users] New installation 103.3; failing freshclam

2021-07-19 Thread Paul Rogers via clamav-users
ly has llvm installed and that because it's a Mesa dependency, nothing higher. This is not a kitchen-sink distro. >> drwxr-xr-x 2 root root4096 Jul 7 22:42 private > Those permissions look wrong to me. It's empty anyhow. What should it be? (I was running freshclam

Re: [clamav-users] New installation 103.3; failing freshclam

2021-07-18 Thread Paul Rogers via clamav-users
\ -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \ > /etc/ssl/local/CAcert_Class_3_root.pem && (make install 2>&1 | tee log.inst && exit $PIPESTATUS) && -- Paul Rogers paulgrog...@fastmail.fm Rogers' Second Law: "Everything yo

Re: [clamav-users] New installation 103.3; failing freshclam

2021-07-18 Thread Paul Rogers via clamav-users
g my ducks in a row". It led me down a rabbit-hole, just making sure. -- Paul Rogers paulgrog...@fastmail.fm Rogers' Second Law: "Everything you do communicates." (I do not personally endorse any additions after this line. TANSTAAFL :-) ___

Re: [clamav-users] New installation 103.3; failing freshclam

2021-07-18 Thread Paul Rogers via clamav-users
ot root 7266 Apr 10 12:48 03179a64.pem lrwxrwxrwx 1 root root 12 Apr 10 12:49 062cdee6.0 -> 062cdee6.pem -rw-r--r-- 1 root root 4531 Apr 10 12:48 062cdee6.pem lrwxrwxrwx 1 root root 12 Apr 10 12:49 064e0aa9.0 -> 064e0aa9.pem -- Paul Rogers paulgrog...@fastm

Re: [clamav-users] New installation 103.3; failing freshclam

2021-07-17 Thread Paul Rogers via clamav-users
41 net-05-openssl-1.0.2u (./config --prefix=/usr --libdir=lib --openssldir=/etc/ssl \ zlib-dynamic shared 2>&1 | tee log.conf && exit $PIPESTATUS) && I wonder if I'm building these packages to "play well together" (I thought I was), and if I've ev

Re: [clamav-users] Freshclam updates problem

2021-07-14 Thread Paul Kosinski via clamav-users
On Wed, 14 Jul 2021 23:55:06 + "Micah Snyder \(micasnyd\) via clamav-users" wrote: > Hi Paul, all: > > We're triaging this issue now, also reported by a user on Discord. > > We issue a zero-byte CDIFF database patch file whenever we want Freshclam to >

[clamav-users] Freshclam updates problem

2021-07-14 Thread Paul Netpresto via clamav-users
Hello This has started occurring on all our 103.2 systems.  Is this related to the " New Main & Daily CVD's are incoming" email from Joel earlier today ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed ERROR: downloadPatch: Can't apply patch The database server doesn't have the latest pat

Re: [clamav-users] New Main & Daily CVD's are incoming

2021-07-13 Thread Paul Kosinski via clamav-users
On Tue, 13 Jul 2021 14:05:53 + "Joel Esler \(jesler\) via clamav-users" wrote: > Tomorrow, Wednesday July 14th, we are planning on publishing a brand new > main.cvd and daily.cvd, as we do periodically to move more of the long term > signatures into the main.cvd and make the daily.cvd small

  1   2   3   4   5   6   7   8   >