d any conclusive
evidence one way or the other.)
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
he rate of about 200K messages per day, with
a peak of about 300 messages per minute. We've had no problems with this
config in the 0.87 and 0.88 series of clamav.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
imilar load and crash issues on Solaris 8. I'm about to
back it out.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav
fused when I
found a reference to a space entered into a configuration file during (I'm
assuming) the compiling of clamd/freshclam. But this Google reference was
talking about version 0.88.1.
Never had a problem with clamav on various Linux distros until now. Could
anyone shed some light on this
On Thu, Oct 12, 2006 at 06:54:51PM +0100, Pete wrote:
> Hello,
>
> For the first time ever, I can't seem to get either clamd or freshclam to
> work on my Slackware Linux 11.0 (2.4.33.3) system.
>
> I've just installed clamav 0.88.4, using (as I always have wit
ent problem for me since I have some simple monitors that
restart clamav-milter as needed.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
er clamav
> ArchiveMaxFileSize 1M
> ArchiveMaxRecursion 8
> ArchiveMaxFiles 1000
> ArchiveMaxCompressionRatio 250
>
Okay, thanks Tomasz - something in those settings seem to have done the
trick. We're now catching Sober.U.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
ther viruses and worms - but Worm.Sober.U is slipping
through in large quantities. I can stop it elsewhere, but would rather have
ClamAV handle it like it should.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://l
Maybe, but it doesn't seem to have anything to do with the problem at hand.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
>
> DisableDefaultScanOptions
> DetectBrokenExecutables
>
No change in behavior with those opts
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
<http://127.0.0.1>
MaxConnectionQueueLength 20
StreamMaxLength 2M
MaxThreads 151
ReadTimeout 60
MaxDirectoryRecursion 1
SelfCheck 1800
User clamav
ScanOLE2
ScanMail
ScanHTML
ScanArchive
ArchiveMaxFileSize 1M
ArchiveMaxRecursion 1
ArchiveMaxFiles 25
ArchiveMaxCompressionRatio 200
--
Pete Hanson
http://www.
external.
which has worked well for a long time.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
ting
> clamd and/or clamav-mitler (I've never used the milter, so I'm not sure
> what's necessary) and see if that does it.
>
I've already tried a couple of restarts to no avail.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
__
nds the message, and generates no errors,
but clamav-milter does not find the message when it comes in. clamd.logshows:
Nov 21 14:08:18 paz clamav-milter[26450]: [ID 788897 local7.notice]
jALM6n0R027652: clean message from <[EMAIL PROTECTED]>
for the scanned message.
--
Pete Hanson
htt
iv'e recieve 50 failed login attempts every day
psv
- Original Message -
From: "Dennis Peterson" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, May 18, 2005 9:58 AM
Subject: [Clamav-users] Sober.P sidebar topic
> Anyone noticing any increase in failed login attempts via ssh? I have and
>
lockups since making the change yesterday.
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
Ah, and here's my startup command:
/usr/local/sbin/clamav-milter --dont-log-clean --headers --local
--pidfile=/var/clamav/clamav-milter.pid --quiet
/var/clamav/clamav-milter.sock
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/
ScanOLE2
ScanMail
ScanHTML
ScanArchive
ArchiveMaxFileSize 1M
ArchiveMaxRecursion 2
ArchiveMaxFiles 25
ArchiveMaxCompressionRatio 100
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
tarted). Both systems
are running sendmail 8.13.0
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
___
http://lurker.clamav.net/list/clamav-users.html
On 5/2/05, Nigel Horne <[EMAIL PROTECTED]> wrote:
> On Monday 02 May 2005 23:08, Pete 'Wolfy' Hanson wrote:
> > slammed at postmaster each time it crashes. This was in the logs from
> > the latest crash:
> >
> > May 2 14:22:24 smtp clamav-milter[153
--- Pete D <[EMAIL PROTECTED]> wrote:
> I am currently running ClamAV 0.83 with
> clamav-milter
> and just recently received an infected email with a
> zip attachment. Strange thing is that clamdscan
> does
> not detect the virus while clamscan does.
>
> # clamds
sec (0 m 1 s)
Any ideas/suggestions? Also, can anyone suggest a
good set of flags to use on clamav-milter? Here is
what I am currently using:
MILTER_FLAGS="-H -C -e -l -n -N -o -P -m 10 -U
/var/spool/virusmails"
Thanks,
--Pete
__
Do
Upgrading didn't seem to help me, though maybe it slowed down the
crash rate - I just had another crash about an hour ago. I'm getting
slammed at postmaster each time it crashes. This was in the logs from
the latest crash:
May 2 14:22:24 smtp clamav-milter[153]: ClamAv: setsockopt() failed
(Inv
On Mon, May 02, 2005 at 04:19:53PM -0500, Jeremy Kitchen wrote:
>I'm having lots of customers call up saying their clamd is segfaulting..
>installations that have been around for many months (0.80) and all of a
>sudden, later in the week last week.. everyone's been having problems with
>clamd se
clamav-milter ?
> permissions on socket?
>
> On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote:
>
> > The INPUT_MAIL_FILTER is in one line.i comment out this line
> > define(`confINPUT_MAIL_FILTERS', `clmilter')
> > but still error occured.
> >
>
e user I think.
>
>
> On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote:
>
> > i didn't run clamd as clamav user. do i need to change the permission of
the
> > socket and run as clamav user?
> > - Original Message -
> > From: "Subhendu Ghos
av-users] milter in error state
>
> does the path to the socket match between sendmail and clamav-milter ?
> permissions on socket?
>
> On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote:
>
> > The INPUT_MAIL_FILTER is in one line.i comment out this line
> > def
5 7:38 AM
Subject: Re: [Clamav-users] milter in error state
> On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote:
>
> > i did add this line to my sendmail.mc and recompile it.
> >
> > INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,
> > T=
TED]>
To: "ClamAV users ML"
Sent: Thursday, April 21, 2005 7:15 AM
Subject: Re: [Clamav-users] milter in error state
> On Wed, 20 Apr 2005, Pete Sherwin S. Villanueva wrote:
>
> > I installed clamav on redhat 9 and also the clamav milter so that it
will scan all mail comin
I installed clamav on redhat 9 and also the clamav milter so that it will scan
all mail coming in and out, and i also run the
clamscan, it will detect virus.
now my problem is milter is not communicating with sendmail (its not scanning
mails).
in the sendmail log file this message will came
i've set up clamav in my redhat 9 and i'm using clamav-0.83. i attach the test
file for my mails but it didnt scan. please help me how to.
thanks
choi
___
http://lurker.clamav.net/list/clamav-users.html
If not you're welcome to my exim.conf, clamd.conf and freshclam.conf if
you would like them.
That would be great.
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
-0007QF-RR malware acl condition: clamd: unable
to read from socket (Connection reset by peer)
2004-11-25 18:26:45 1CXOJe-0007QQ-TO H=(pete) [###.###.###.###]
F=<[EMAIL PROTECTED]> temporarily rejected after DATA
2004-11-25 18:26:45 SMTP connection from (pete) [###.###.###.###] clos
CXOJC-0007QF-RR malware acl condition: clamd: unable to
read from socket (Connection reset by peer)
2004-11-25 18:26:45 1CXOJe-0007QQ-TO H=(pete) [###.###.###.###]
F=<[EMAIL PROTECTED]> temporarily rejected after DATA
2004-11-25 18:26:45 SMTP connection from (pete) [###.###.###.###]
sn't catch, the amavisd/clamd does.
This is a bit off topic, but I noticed that there is a
clamav-milter for sendmail. Would using this simply
do away with having to use amavisd?
Thanks.
--- Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Tue, 19 Oct 2004 08:26:36 -0700 (PDT)
> Pete
Thanks for the great tip! The sigtool command works
beautifully. However, it does make me wonder if there
is a bug with the leave-temps flag.
Thanks again.
--- aCaB <[EMAIL PROTECTED]> wrote:
> On 10/19/04 17:26, Pete D wrote:
> > Hello all.
> >
> > I just upgraded
Hello all.
I just upgraded to the new ClamAV 0.80. I use the
clamscan command along with the --leave-temps flag to
generate the main.db and daily.db files. I am using a
SMTP proxy spam program called ASSP that uses these db
files for preliminary virus detection. The
--leave-temps flag, which wo
On Tue, 12 Oct 2004, Evan Pierce wrote:
Pete
You did rebuild your sendmail.cf file from a mc file with the milter
configuration included?
Here is my sendmail.mc file
---Star sendmail.mc ---
include(`../m4/cf.m4')
VERSIONID(`default setup for Slackware Linux')dnl
OSTYPE(`linux'
On Mon, 11 Oct 2004, Evan Pierce wrote:
Pete
Build your clamav from source using
configure --enable-milter
make
make install
And then configure Sendmail correctly for your milter and it all works fine
- I have this successfully running on Slack 10 and sendmail 8.13.1
If you have any questions ust
On Fri, 8 Oct 2004 09:06:40 -0500 (CDT), you wrote:
>Pete,
>
>In order to work with sendmail, you will seen to rebuild your sendmail.cf
>file. Also, in addition to having sendmail compiled with milter support,
>you will need the lib files for the sendmail milter. You can get these
version of Sendmail.
(BTW, I've checked my version of Sendmail's docs, and it *does* have milter
support built in.)
Thanks for your time and any information you might have.
Regards,
Pete.
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
9_108_r285
> ___
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
>
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
-
o try milter, but can't
> find any docs anywhere on where to get milter and how to configure it.
--
Pete Hanson
System Administrator
The WELL
http://www.fotolog.net/wolfy
http://www.well.com/user/wolfy
---
This SF.Net email is sponsored
to install
> monit to make sure it'll trigger a restart once it exceeds 100mb.
--
Pete Hanson
System Administrator
The WELL
http://www.fotolog.net/wolfy
http://www.well.com/user/wolfy
---
This SF.Net email is sponsored by BEA Weblogic
I've had clamd (0.73) die silently on me twice this morning on two
separate systems each (total 4 deaths), one Soalris 2.8 the other
Solaris 2.6. Has someone managed to figure out how to shut it down
remotely?
--
Pete Hanson
System Administrator
The
45 matches
Mail list logo
