Re: [clamav-users] Problems subscribing to lists

2024-07-17 Thread Micah Snyder (micasnyd) via clamav-users
sday, July 17, 2024 6:21 AM To: Micah Snyder (micasnyd) ; ClamAV Subject: Re: [clamav-users] Problems subscribing to lists Thank you so much for your kind help Micah. Do I understand correctly that clam AV update announcements will now be sent to me automatically by email? Do I now send m

Re: [clamav-users] Problems subscribing to lists

2024-07-17 Thread sarahayre via clamav-users
ng to your information. I have not joined such a thing before so I am completely ignorant I'm afraid. Best wishes   Sarah Original message From: "Micah Snyder (micasnyd)" Date: 17/07/2024 5:30 am (GMT+12:00) To: ClamAV Cc: sarahayre Subject: Re: [clamav-users]

Re: [clamav-users] Problems subscribing to lists

2024-07-16 Thread Micah Snyder (micasnyd) via clamav-users
hed for your username and found we have the ClamAV server as a mutual server. Regards, Micah Micah Snyder (they/them) ClamAV Development Talos Cisco Systems, Inc. From: clamav-users on behalf of sarahayre via clamav-users Sent: Monday, July 15, 2024 3:11 PM

[clamav-users] Problems subscribing to lists

2024-07-15 Thread sarahayre via clamav-users
Hello I sent the following request for help to the ClamAV announce owners email address a few days ago and I'm now sending it to the Clam users list in case the first one did not reach its destination and in case anyone that is on this list also can help in any way.Please can you help me complet

Re: [clamav-users] problems with freshclam: Incremental update failed

2021-07-15 Thread Christian
Hi Joel, thanks so much for the info. So things seem to be alright in the future. That´s great news. Many thanks again and many greetings. Rosika and Christian jesler at cisco.com

Re: [clamav-users] problems with freshclam: Incremental update failed

2021-07-15 Thread Joel Esler (jesler) via clamav-users
Christian, The below is correct. We published a new main.cvd and daily.cvd yesterday, and in order to make your FreshClam instance force download the new files, we have to publish a “blank” file, so that FreshClam sees it as an error, and then fails over to pick up the full file. From that po

[clamav-users] problems with freshclam: Incremental update failed

2021-07-15 Thread Christian
Hi altogether, I´m on Linux/Lubuntu 20.04.2 LTS (kernel 5.4.0-77-generic) Clamav and clamav-freshclam are installed and everything was working perfectly - until today. All of a sudden a huge download began. It turned out *freshclam* was downloading something. It almost seemed never-ending. I

Re: [clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-17 Thread Micah Snyder (micasnyd) via clamav-users
No worries Michael! Yes we're doing traversal from root to avoid that issue. :-) Kevin: Any chance you can upgrade those old systems? We try to support roughly the last 2 LTS releases for major distros / operating systems but don't have time to go out of our way to maintain compatibility wit

Re: [clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-17 Thread Technik
Achtung, falscher Empfänger -Ursprüngliche Nachricht- Von: clamav-users Im Auftrag von Mark Fortescue via clamav-users Gesendet: Freitag, 17. Juli 2020 12:46 An: clamav-users@lists.clamav.net Cc: Mark Fortescue Betreff: Re: [clamav-users] Problems compiling 0.102.4 on OLD system Hi

Re: [clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-17 Thread Mark Fortescue via clamav-users
Hi Kevin, It looks like you will have to create/enable private versions of the openat(), ranameat() and unlinkat() functions. These can be simulated using regular C functions open(), unlink(), rename(), stat() and readdir(). You will need to get manual pages for openat(), ranameat() and un

Re: [clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-16 Thread Michael Orlitzky via clamav-users
On 2020-07-16 19:10, Michael Orlitzky via clamav-users wrote: > > Micah: openat() only provides "one level of safety" in that when opening > /foo/bar/baz, it ensures that "baz" is where you think it is. You may > want to investigate whether or not an attacker can replace "bar" by a > symlink in th

Re: [clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-16 Thread Michael Orlitzky via clamav-users
On 2020-07-16 17:22, Kevin A. McGrail via clamav-users wrote: > Hi, I have an old system I'm compiling. > > I have 0.102.3 working on it. > > Here's the config line: > > ... >   CCLD clamscan > actions.o: In function `traverse_to': > ../shared/actions.c:328: undefined reference to `openat' >

[clamav-users] Problems compiling 0.102.4 on OLD system

2020-07-16 Thread Kevin A. McGrail via clamav-users
Hi, I have an old system I'm compiling. I have 0.102.3 working on it. Here's the config line: CC=/usr/local/gcc4.2.4/bin/gcc ./configure --prefix=/usr/local/clamav --with-user=defang --with-group=defang --enable-llvm=no --with-openssl=/usr/local/ssl --with-pcre=/usr/local/pcre2 --with-zlib=/usr/

Re: [clamav-users] Problems scanning for PUAs

2019-05-30 Thread Maarten Broekman via clamav-users
I think the PUA version are just potentially unwanted things that exhibit trojan-like behavior but aren't confirmed trojans. As for the original question, it looks like it's only using the first part of that to determine the group of PUAs to ignore. These are the 'PUA' families (and associated si

Re: [clamav-users] Problems scanning for PUAs

2019-05-30 Thread Daniel Quintiliani via clamav-users
Also, what is the difference between e.g. Win.Trojan and PUA.Win.Trojan? Why would a trojan be a PUA? -- -Dan Q On Thu, 30 May 2019 17:02:08 -0400 (EDT), Daniel Quintiliani via clamav-users wrote: > Hi, > > I'm trying to scan files for PUAs. > When you do that, you get a lot of packers show

[clamav-users] Problems scanning for PUAs

2019-05-30 Thread Daniel Quintiliani via clamav-users
Hi, I'm trying to scan files for PUAs. When you do that, you get a lot of packers show up. But when I type --detect-pua=yes --exclude-pua=Win.Packer it doesn't detect any PUAs at all (including PUA.Win.Malware etc). Am I typing something wrong or is this a bug? Running ClamAV v0.101.2 on Gent

[clamav-users] Problems with freshclam (Can't create new socket: Address family not supported by protocol)

2018-06-30 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi folks, since several months I get the message "Can't create new socket: Address family not supported by protocol" several times the day. It is only freshclam that acts this wrong, no other tool/service has this problem. The machine I use freshcl

Re: [clamav-users] Problems on your side (Server infrastructure)

2018-06-19 Thread Walter H.
No because since several days the mails where dropped because of this problem; I just noticed this now, that I didn't receive any mail since a few days ... On Tue, June 19, 2018 12:05, Al Varnell wrote: > Did you read the posting "clamav list spf problem" from Andrew McGlashan > about an hour and

[clamav-users] Problems on your side (Server infrastructure)

2018-06-19 Thread Walter H.
Hello, since a few days I get several messages like these Jun 18 14:40:46 vhost01 postfix/cleanup[21415]: 1A40240FB1: discard: header Authentication-Results: mail01.ipv6help.de; spf=fail smtp.mailfrom=clamav-virusdb-boun...@lists.clamav.net from local; from= to=<...>: 5.7.1 Mail is SPAM. SPF fail

Re: [clamav-users] Problems on your side (Server infrastructure)

2018-06-19 Thread Al Varnell
Did you read the posting "clamav list spf problem" from Andrew McGlashan about an hour and a half ago? -Al- On Tue, Jun 19, 2018 at 02:56 AM, Walter H. wrote: > Hello, > > since a few days I get several messages like these > > Jun 18 14:40:46 vhost01 postfix/cleanup[21415]: 1A40240FB1: discard

[clamav-users] Problems on your side (Server infrastructure)

2018-06-19 Thread Walter H.
Hello, since a few days I get several messages like these Jun 18 14:40:46 vhost01 postfix/cleanup[21415]: 1A40240FB1: discard: header Authentication-Results: mail01.ipv6help.de; spf=fail smtp.mailfrom=clamav-virusdb-boun...@lists.clamav.net from local; from= to=<...>: 5.7.1 Mail is SPAM. SPF fail

Re: [clamav-users] Problems with 3rd party sigs

2017-03-31 Thread Steve Basford
On 31 March 2017 18:45:58 Mark Foley wrote: Per advice on this list, I downloaded and installed the clamav-unofficial-sigs scripts from the link on Sanesecurity. 2. I run a cron'd clamscan job to scan mail folders several time a day. I get the following errors which are new since installin

Re: [clamav-users] Problems with 3rd party sigs

2017-03-31 Thread Steven Morgan
They can be ignored. For yara rules, ClamAV currently ignores any containing errors or unsupported features. Steve On Fri, Mar 31, 2017 at 2:30 PM, Mark Foley wrote: > On Fri, 31 Mar 2017 14:01:29 -0400 Steven Morgan > wrote: > > > > Thanks Steve. Is then there a way to disable the pe rules or

Re: [clamav-users] Problems with 3rd party sigs

2017-03-31 Thread Mark Foley
On Fri, 31 Mar 2017 14:01:29 -0400 Steven Morgan wrote: > Thanks Steve. Is then there a way to disable the pe rules or do I just have to ignore these messages? --Mark > Mark, > > The pe import module of yara rules is not currently implemented in ClamAV. > Other specifics of using yara rules in

Re: [clamav-users] Problems with 3rd party sigs

2017-03-31 Thread Steven Morgan
Mark, The pe import module of yara rules is not currently implemented in ClamAV. Other specifics of using yara rules in Clam may be found in docs/signatures.pdf. Also, looks like errors in EMAIL_Cryptowall.yar yara rule? Hope this helps, Steve On Fri, Mar 31, 2017 at 1:45 PM, Mark Foley wrote:

[clamav-users] Problems with 3rd party sigs

2017-03-31 Thread Mark Foley
Per advice on this list, I downloaded and installed the clamav-unofficial-sigs scripts from the link on Sanesecurity. I've not been able to get it running. Two problems: 1. The /etc/cron.d/clamav-unofficial-sigs cron script won't run from crond. I get an email: /bin/sh: clamav: command not foun

Re: [clamav-users] Problems with safe browsing

2016-11-11 Thread TR Shaw
You missed my point. It was it was a shame that safe browsing sigs only for of files that look like email. > On Nov 11, 2016, at 12:43 AM, Gene Heskett wrote: > > On Thursday 10 November 2016 17:45:24 TR Shaw wrote: > >> Thanks, all. >> >> However its a real shame that it will not scan generi

Re: [clamav-users] Problems with safe browsing

2016-11-10 Thread Gene Heskett
On Thursday 10 November 2016 17:45:24 TR Shaw wrote: > Thanks, all. > > However its a real shame that it will not scan generic files looking > for bad urls rather than only scanning email files. > > I was going to to use clamav to scan disk drives for scripts that used > uris in safe browsing So m

Re: [clamav-users] Problems with safe browsing

2016-11-10 Thread TR Shaw
Thanks, all. However its a real shame that it will not scan generic files looking for bad urls rather than only scanning email files. I was going to to use clamav to scan disk drives for scripts that used uris in safe browsing So much of that :-( Tom > On Nov 10, 2016, at 3:46 PM, Steve basfo

Re: [clamav-users] Problems with safe browsing

2016-11-10 Thread Steve basford
Hi Tom, Create a standard header body formatted email and then insert the address at the end. It will be detected. Just placing on a line.. it won't be detected, Cheers, Steve Twitter: @sanesecurity On 10 November 2016 19:53:05 TR Shaw wrote: I have freshclam set to load safe browsin

Re: [clamav-users] Problems with safe browsing

2016-11-10 Thread Steven Morgan
Hi Tom, Is it an email file? Looks like the safebrowsing checks only occur during email file parsing. Hope this helps, Steve ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help

[clamav-users] Problems with safe browsing

2016-11-10 Thread TR Shaw
I have freshclam set to load safe browsing: -rw-r--r-- 1 _clamav admin 57874944 Nov 10 11:51 daily.cld -rw-r--r-- 1 _clamav admin 103419904 Nov 10 13:51 safebrowsing.cld I placed http://ianfette[.]org/ in a file safebrowsingtest.txt Then I run clam and expect to hit safe browsing but I

Re: [clamav-users] Problems with daily db?

2015-10-20 Thread Al Varnell
Just wanted to close out my report on this. Results of running sigtool -i on daily.cld: > File: /usr/local/clamXav/share/clamav/daily.cld > Build time: 21 Sep 2015 12:36 -0400 > Version: 20930 > Signatures: 1587117 > Functionality level: 63 > Builder: neo > LibClamAV Warning:

Re: [clamav-users] Problems with daily db?

2015-10-19 Thread Shaun Hurley
All, This is a set of regex signatures I published. These lines in the signature database should have been ignored by ClamAV versions previous to 0.99. Given the problems that alternate versions of ClamAV have, I am going to drop these signatures. Thanks, Shaun Hurley On Mon, Oct 19, 2015 at 1:

Re: [clamav-users] Problems with daily db?

2015-10-18 Thread Rafael Ferreira
Hey folks, just closing the loop on this, unsurprisingly, this turned out to be a problem on our side. I had forgotten but we were running a custom build of clamav a couple of commits before the 0.98.7 release that apparently had a signature parsing regression, upgrading to the release commit fixed

Re: [clamav-users] Problems with daily db?

2015-10-18 Thread Al Varnell
I just had a Mac OS X 10.11/ClamXav 2.8.5/ClamAV 0.98.7 user with a similar situation. Appears to be in the US, but I need to get more information to verify that and the results of sigtool -i: Checking official ClamAV definitions -- ClamAV update process star

Re: [clamav-users] Problems with daily db?

2015-10-15 Thread Rafael Ferreira
Odd, we run Debian (Jessie) Linux and we see this problem on quite a few of our hosts; nothing obviously relevant seems to have changed on our side. We will keep looking and report back. > On Oct 15, 2015, at 1:15 PM, Steven Morgan wrote: > > Thanks, that is working for me with ClamAV 0.98.7.

Re: [clamav-users] Problems with daily db?

2015-10-15 Thread Steven Morgan
Thanks, that is working for me with ClamAV 0.98.7. It even worked using http://scanii-assets.s3.amazonaws.com/daily.cvd. What OS and hardware are you using? On Thu, Oct 15, 2015 at 1:30 PM, Rafael Ferreira wrote: > 0.98.7 > > > On Oct 15, 2015, at 8:46 AM, Steven Morgan > wrote: > > > > Rafael,

Re: [clamav-users] Problems with daily db?

2015-10-15 Thread Alain Zidouemba
Can you paste here the output of running "sigtool -i" against your daily.cvd? Thanks, - Alain On Thu, Oct 15, 2015 at 1:30 PM, Rafael Ferreira wrote: > 0.98.7 > > > On Oct 15, 2015, at 8:46 AM, Steven Morgan > wrote: > > > > Rafael, > > > > I don't see this. Which version of ClamAV are you us

Re: [clamav-users] Problems with daily db?

2015-10-15 Thread Rafael Ferreira
0.98.7 > On Oct 15, 2015, at 8:46 AM, Steven Morgan wrote: > > Rafael, > > I don't see this. Which version of ClamAV are you using? > > Steve > > > On Thu, Oct 15, 2015 at 11:24 AM, Rafael Ferreira > wrote: > >> Howdy folks, we started noticing problems with daily.cvd: >> >> Retrieving h

Re: [clamav-users] Problems with daily db?

2015-10-15 Thread Steven Morgan
Rafael, I don't see this. Which version of ClamAV are you using? Steve On Thu, Oct 15, 2015 at 11:24 AM, Rafael Ferreira wrote: > Howdy folks, we started noticing problems with daily.cvd: > > Retrieving http://scanii-assets.s3.amazonaws.com/daily.cvd > > Trying to download http://scanii-asset

[clamav-users] Problems with daily db?

2015-10-15 Thread Rafael Ferreira
Howdy folks, we started noticing problems with daily.cvd: Retrieving http://scanii-assets.s3.amazonaws.com/daily.cvd Trying to download http://scanii-assets.s3.amazonaws.com/daily.cvd (IP: 54.231.34.41) Downloading daily.cvd [100%] Loading signatures from daily.cvd WARNING: [LibClamAV] cli_par

Re: [clamav-users] problems with SWF and TNEF

2015-08-17 Thread Al Varnell
My suggestion would be to conduct a debug scan of the folder which will produce a ton of data, but should allow you to pinpoint the files involved. clamscan --debug -Al- On Mon, Aug 17, 2015 at 12:22 PM, Walter Lapchynski wrote: > > I have a folder that includes some backups that is triggerin

[clamav-users] problems with SWF and TNEF

2015-08-17 Thread Walter Lapchynski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I have a folder that includes some backups that is triggering this: LibClamAV info: scancws: Error decompressing SWF file. No data decompr essed. That folder has several SWFs in it, so I'm a little unclear as to how to figure out which one is the

Re: [clamav-users] Problems with obfuscated code (php)

2014-01-31 Thread Steven Morgan
Sorry, I mistyped my previous reply, meant to say: You may find the ClamAV "bytecode compiler" useful in doing this. http://www.clamav.net/lang/en/download/sources/ On Fri, Jan 31, 2014 at 2:53 PM, Steven Morgan wrote: > Torge, > > You may find the ClamAV useful in doing this. > > http://www.

Re: [clamav-users] Problems with obfuscated code (php)

2014-01-31 Thread Steven Morgan
Torge, You may find the ClamAV useful in doing this. http://www.clamav.net/lang/en/download/sources/ On Fri, Jan 31, 2014 at 12:08 PM, Torge Husfeldt wrote: > Hi List, > > I have a problem with obfuscated php-code of well-known shells. > I have prepared an example where clamav correctly detect

[clamav-users] Problems with obfuscated code (php)

2014-01-31 Thread Torge Husfeldt
Hi List, I have a problem with obfuscated php-code of well-known shells. I have prepared an example where clamav correctly detects the shell itself, but happily flags as OK all the obfuscated variations. You will find the files I'm talking about in the following zipfile (protected with password

Re: [clamav-users] Problems with signature mirrors today?

2012-11-09 Thread Al Varnell
On 11/9/12 11:37 PM, "sys...@ra-schaal.de" wrote: > Am 09.11.2012 18:23, schrieb Chris Stone: >> Seeing a lot of: >> >> Current working dir is /usr/local/share/clamav >> Max retries == 3 >> ClamAV update process started at Fri Nov 9 10:22:52 2012 >> Using IPv6 aware code >> If-Modified-Since: T

Re: [clamav-users] Problems with signature mirrors today?

2012-11-09 Thread sys...@ra-schaal.de
Am 09.11.2012 18:23, schrieb Chris Stone: > Seeing a lot of: > > Current working dir is /usr/local/share/clamav > Max retries == 3 > ClamAV update process started at Fri Nov 9 10:22:52 2012 > Using IPv6 aware code > If-Modified-Since: Tue, 11 Oct 2011 14:34:20 GMT > Reading CVD header (main.cvd):

Re: [clamav-users] Problems with signature mirrors today?

2012-11-09 Thread Chris Stone
Yes, looks good to me now Thanks! Chris On Fri, Nov 9, 2012 at 11:21 AM, Matt Olney wrote: > Folks, > > We seem to have resolved the issue. Mirrors should be syncing now. Let us > know if you see anything else. > > Matt > > On Fri, Nov 9, 2012 at 12:51 PM, Nigel Houghton >wrote: > >

Re: [clamav-users] Problems with signature mirrors today?

2012-11-09 Thread Matt Olney
Folks, We seem to have resolved the issue. Mirrors should be syncing now. Let us know if you see anything else. Matt On Fri, Nov 9, 2012 at 12:51 PM, Nigel Houghton wrote: > > On Nov 9, 2012, at 12:38 PM, José Celestino wrote: > > > On Sex, 2012-11-09 at 10:23 -0700, Chris Stone wrote: > >>

Re: [clamav-users] Problems with signature mirrors today?

2012-11-09 Thread Nigel Houghton
On Nov 9, 2012, at 12:38 PM, José Celestino wrote: > On Sex, 2012-11-09 at 10:23 -0700, Chris Stone wrote: >> Seeing a lot of: >> >> Current working dir is /usr/local/share/clamav >> Max retries == 3 >> ClamAV update process started at Fri Nov 9 10:22:52 2012 >> Using IPv6 aware code >> If-Mod

Re: [clamav-users] Problems with signature mirrors today?

2012-11-09 Thread Matt Olney
Hey guys, thanks for the heads up. We're checking into it now. Matt On Fri, Nov 9, 2012 at 12:38 PM, José Celestino wrote: > On Sex, 2012-11-09 at 10:23 -0700, Chris Stone wrote: > > Seeing a lot of: > > > > Current working dir is /usr/local/share/clamav > > Max retries == 3 > > ClamAV update

Re: [clamav-users] Problems with signature mirrors today?

2012-11-09 Thread José Celestino
On Sex, 2012-11-09 at 10:23 -0700, Chris Stone wrote: > Seeing a lot of: > > Current working dir is /usr/local/share/clamav > Max retries == 3 > ClamAV update process started at Fri Nov 9 10:22:52 2012 > Using IPv6 aware code > If-Modified-Since: Tue, 11 Oct 2011 14:34:20 GMT > Reading CVD header

[clamav-users] Problems with signature mirrors today?

2012-11-09 Thread Chris Stone
Seeing a lot of: Current working dir is /usr/local/share/clamav Max retries == 3 ClamAV update process started at Fri Nov 9 10:22:52 2012 Using IPv6 aware code If-Modified-Since: Tue, 11 Oct 2011 14:34:20 GMT Reading CVD header (main.cvd): Ignoring mirror 63.141.241.106 (due to previous errors) I

Re: [clamav-users] Problems detecting PHP bots

2012-08-20 Thread Joel Esler
On Aug 20, 2012, at 6:46 AM, Henri Salo wrote: > Is there a way to configure ClamAV to scan also files with starting > GIF87a/GIF89a? We get attacks like this daily. I assume you mean detecting PHP files with that at the beginning? -- Joel Esler Senior Research Engineer, VRT OpenSource Commu

Re: [clamav-users] Problems detecting PHP bots

2012-08-20 Thread Maarten Broekman
> -Original Message- > From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users- > boun...@lists.clamav.net] On Behalf Of Henri Salo > Subject: [clamav-users] Problems detecting PHP bots > > Hello, > > Is there a way to configure ClamAV to scan also file

[clamav-users] Problems detecting PHP bots

2012-08-20 Thread Henri Salo
Hello, Is there a way to configure ClamAV to scan also files with starting GIF87a/GIF89a? We get attacks like this daily. fgeek@example:~/samples-2012-05-09$ clamdscan x.php* /home/fgeek/samples-2012-05-09/x.php: OK /home/fgeek/samples-2012-05-09/x.php.2: PHP.Bot FOUND --- SCAN SUMMARY

Re: [clamav-users] Problems with clamav-milter: "clamfi_eom: FD send failed: Broken pipe"

2012-06-08 Thread G.W. Haywood
Hi there, On Fri, 8 Jun 2012, c0re wrote: Architecture is pretty simple: 1st server with clamd, clamav-milter. 2nd server with sendmail. You're stil being pretty economical with the information. What's the network connection between the servers? What volumes of traffic does it carry? So w

Re: [clamav-users] Problems with clamav-milter: "clamfi_eom: FD send failed: Broken pipe"

2012-06-07 Thread aCaB
On 06/07/12 11:40, c0re wrote: > I decided to move clamav to dedicated server. Hi, I assume you are running the milter on the same machine as clamd and letting them talk over a unix socket. > Jun 7 12:37:08 avsrv clamav-milter[29989]: clamfi_eom: FD send > failed: Broken pipe > Jun 7 12:37:08 a

Re: [clamav-users] Problems with clamav-milter: "clamfi_eom: FD send failed: Broken pipe"

2012-06-07 Thread c0re
2012/6/7 G.W. Haywood : > Hi there, > > > On Thu, 7 Jun 2012, c0re wrote: > >> In clamav-milter logs I see only this: >> >> Jun  7 12:37:08 avsrv clamav-milter[29989]: clamfi_eom: FD send >> failed: Broken pipe >> Jun  7 12:37:08 avsrv clamav-milter[29989]: FD send failed >> >> So what's happening

Re: [clamav-users] Problems with clamav-milter: "clamfi_eom: FD send failed: Broken pipe"

2012-06-07 Thread G.W. Haywood
Hi there, On Thu, 7 Jun 2012, c0re wrote: In clamav-milter logs I see only this: Jun 7 12:37:08 avsrv clamav-milter[29989]: clamfi_eom: FD send failed: Broken pipe Jun 7 12:37:08 avsrv clamav-milter[29989]: FD send failed So what's happening here? I don't know. :) The exact architecture

[clamav-users] Problems with clamav-milter: "clamfi_eom: FD send failed: Broken pipe"

2012-06-07 Thread c0re
Hi clamav users and developers! I had servers with sendmail and clamav at each one, all was fine working via local socket. I decided to move clamav to dedicated server. So I changed socket from local to inet and everything was OK. But about 40 days later I noticed in sendmail logs such messages:

Re: [clamav-users] Problems with permissions and clamav-unofficial-sigs

2011-11-24 Thread Bryan Burke
> I've enabled AllowSupplementalGroups, and the DatabaseOwner is > clamupdate, as per the default. I've also added amavis (the clamd > user) to the clamupdate group. > > However, freshclam still fails to communicate with clamd with > "connect(): Permission denied" because the socket is owned by am

Re: [clamav-users] Problems with permissions and clamav-unofficial-sigs

2011-11-23 Thread Alex
Hi, >> clamd runs as user amavis.amavis, which is who should own >> /var/lib/clamav and the files within, correct? And >> /var/lib/clamav-unofficial-sigs is owned by clamupdate.clamupdate. >> >> freshclam.conf has the database owner set to amavis. > > I actually just finished a from-scratch setup

Re: [clamav-users] Problems with permissions and clamav-unofficial-sigs

2011-11-21 Thread Bryan Burke
> clamd runs as user amavis.amavis, which is who should own > /var/lib/clamav and the files within, correct? And > /var/lib/clamav-unofficial-sigs is owned by clamupdate.clamupdate. > > freshclam.conf has the database owner set to amavis. I actually just finished a from-scratch setup like this, h

[clamav-users] Problems with permissions and clamav-unofficial-sigs

2011-11-21 Thread Alex
Hi, I have a fedora15 system with clamav-0.97.3 and amavis-2.6.6 with clamav-unofficial-sigs-3.7.1-5 and am having problems with permissions. clamd runs as user amavis.amavis, which is who should own /var/lib/clamav and the files within, correct? And /var/lib/clamav-unofficial-sigs is owned by cl

Re: [clamav-users] problems with daily.cld 13960

2011-11-17 Thread David Alix
Still on 0.97.1, but since daily.cld updated to 13961 (and later 13962), the clamd daemon has remained running. (I will update to 0.97.3 in the morning). Thanks David --On Thursday, November 17, 2011 7:47 PM +0200 Török Edwin wrote: On 11/17/2011 06:57 PM, David Alix wrote: Is anyone els

Re: [clamav-users] problems with daily.cld 13960

2011-11-17 Thread Török Edwin
On 11/17/2011 06:57 PM, David Alix wrote: > Is anyone else having problems with clamd after the daily.cld updated to > version 13960. I'm running clamd 0.97.1, on Solaris 9 SPARC. SInce 13960 > was installed, clamd abends, with no error messages > anywhere. Sometimes clamd will run for up to 2

Re: [clamav-users] problems with daily.cld 13960

2011-11-17 Thread David Alix
My versions are the same: main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven) daily.cld is up to date (version: 13960, sigs: 30564, f-level: 60, builder: ccordes) bytecode.cld is up to date (version: 152, sigs: 38, f-level: 60, builder: edwin) --On Thursday, Nove

Re: [clamav-users] problems with daily.cld 13960

2011-11-17 Thread Pierre Dehaen
On 17 Nov 2011 at 8:57, David Alix wrote: > Is anyone else having problems with clamd after the daily.cld updated to > version 13960. I'm running clamd 0.97.1, on Solaris 9 SPARC. SInce 13960 > was installed, clamd abends, with no error messages anywhere. Sometimes > clamd will run for up to

[clamav-users] problems with daily.cld 13960

2011-11-17 Thread David Alix
Is anyone else having problems with clamd after the daily.cld updated to version 13960. I'm running clamd 0.97.1, on Solaris 9 SPARC. SInce 13960 was installed, clamd abends, with no error messages anywhere. Sometimes clamd will run for up to 20 minutes; it is now dying every 2 minutes. _

Re: [clamav-users] Problems compiling 0.97.2 on Solaris 9

2011-08-19 Thread René Berber
On 8/19/2011 2:40 PM, Tom Goerger wrote: > I'm attempting to compile a 64 bit version of 0.97.2 on Solaris 9, and > running into some issues. Version 0.96.4 compiled fine in the same > environment that we're using now, but both this version and 0.97.1 did not > seem to compile correctly. The con

Re: [clamav-users] Problems compiling 0.97.2 on Solaris 9

2011-08-19 Thread Chuck Swiger
Hi-- On Aug 19, 2011, at 12:40 PM, Tom Goerger wrote: > I'm attempting to compile a 64 bit version of 0.97.2 on Solaris 9, and > running into some issues. Version 0.96.4 compiled fine in the same > environment that we're using now, but both this version and 0.97.1 did not > seem to compile correc

[clamav-users] Problems compiling 0.97.2 on Solaris 9

2011-08-19 Thread Tom Goerger
Hi, I'm attempting to compile a 64 bit version of 0.97.2 on Solaris 9, and running into some issues. Version 0.96.4 compiled fine in the same environment that we're using now, but both this version and 0.97.1 did not seem to compile correctly. The configure does not come out with any errors, but

Re: [clamav-users] Problems with bytecode.cvd

2011-01-19 Thread Tony Finch
On Wed, 19 Jan 2011, Daniel Gomes wrote: > Today my freshclam updated the bytecode.cld to version 118. The problem > is that, after update, my servers has greatly increased the load > averages. You can limit the consequences of bad bytecode by reducing the bytecode timeout. The default is 60s but

[clamav-users] Problems with bytecode.cvd

2011-01-19 Thread Daniel Gomes
Today my freshclam updated the bytecode.cld to version 118. The problem is that, after update, my servers has greatly increased the load averages. In http://www.clamav.net/, the release version is 117. See below my log: LibClamAV Warning: [Bytecode JIT]: Bytecode run timed out, timeout flag set

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-05 Thread René Berber
On 10/5/2010 5:08 PM, Tom Goerger wrote: > Now, I'm seeing > > configure:3438: ./conftest > ld.so.1: conftest: fatal: libstdc++.so.4: open failed: No such file or > directory > ./configure: line 1: 5623 Killed ./conftest$ac_cv_exeext > configure:3442: $? = 137 > configure:3449:

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-05 Thread Tom Goerger
Okay, that helps. Thanks. Now, I'm seeing configure:3438: ./conftest ld.so.1: conftest: fatal: libstdc++.so.4: open failed: No such file or directory ./configure: line 1: 5623 Killed ./conftest$ac_cv_exeext configure:3442: $? = 137 configure:3449: error: in `/src/objss9/clamav-0

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-05 Thread René Berber
On 10/5/2010 4:11 PM, Tom Goerger wrote: > Well, that's part of the problem. Even when I explicitly set CXX=g++, I > don't see any errors relating to g++ in config.log. The only reference I'm > seeing to "cannot run C++ compiled programs" comes in STDOUT, and isn't > repeated in the log. You ar

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-05 Thread Tom Goerger
Well, that's part of the problem. Even when I explicitly set CXX=g++, I don't see any errors relating to g++ in config.log. The only reference I'm seeing to "cannot run C++ compiled programs" comes in STDOUT, and isn't repeated in the log. This is what I'm seeing in STDOUT, if it helps: checking

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-05 Thread René Berber
On 10/5/2010 3:06 PM, Tom Goerger wrote: > The first error I'm seeing has to do with ac_nonexistent.h being not found. > I'm not sure what package that module should be part of. I do have g++ > installed, maybe we're running an outdated version? It's 3.4.5. Could be > totally offbase with that

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-05 Thread Tom Goerger
The first error I'm seeing has to do with ac_nonexistent.h being not found. I'm not sure what package that module should be part of. I do have g++ installed, maybe we're running an outdated version? It's 3.4.5. Could be totally offbase with that, but it's certainly the first failure I encounter

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-04 Thread René Berber
On 10/4/2010 2:24 PM, Tom Goerger wrote: > We're using gcc to compile. No parameters on configure. The same setup was > used to compile 0.95.2 just fine, without any problems, but it's bailing > here without giving me a reason that I can decipher, at least. When you get a "cannot run C++ compil

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-04 Thread Tom Goerger
We're using gcc to compile. No parameters on configure. The same setup was used to compile 0.95.2 just fine, without any problems, but it's bailing here without giving me a reason that I can decipher, at least. On Mon, Oct 4, 2010 at 2:19 PM, René Berber wrote: > On 10/4/2010 1:28 PM, Tom Goer

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-04 Thread René Berber
On 10/4/2010 1:28 PM, Tom Goerger wrote: > I'm having problems building 0.96.3 on Solaris 9 and 10. I believe I've > copied in the appropriate sections of configure and make below. Can anyone > tell me why this might be failing? Or, what other information I can provide > that might help? What

Re: [Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-04 Thread Peter Bonivart
On Mon, Oct 4, 2010 at 8:28 PM, Tom Goerger wrote: > I'm having problems building 0.96.3 on Solaris 9 and 10.  I believe I've > copied in the appropriate sections of configure and make below.  Can anyone > tell me why this might be failing?  Or, what other information I can provide > that might he

[Clamav-users] Problems building 0.96.3 on Solaris 9/10

2010-10-04 Thread Tom Goerger
* Hi, I'm having problems building 0.96.3 on Solaris 9 and 10. I believe I've copied in the appropriate sections of configure and make below. Can anyone tell me why this might be failing? Or, what other information I can provide that might help? Thanks, Tom >From configure: checking whether

Re: [Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-25 Thread Frank Bures
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Preston wrote: > On Apr 23, 2010, at 8:01 AM, Frank Bures wrote: > >> I've seen lots of problems with db.ca.clamav.net mirror in the last >> couple >> of days. I am getting >> >> freshclam[31063]: getfile: Error while reading database from >> db.

Re: [Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-23 Thread Dennis Peterson
> > On 4/23/10 10:46 AM, "Dennis Peterson" wrote: > > > On 4/23/10 8:41 AM, Jim Preston wrote: > > > >> Just a question, but what time is freshclam running? Most of the time a > >> majority of people run freshclam at the top of the hour which means you > >> are in heavy competition for resource

Re: [Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-23 Thread Daniel McDonald
On 4/23/10 10:46 AM, "Dennis Peterson" wrote: > On 4/23/10 8:41 AM, Jim Preston wrote: > >> Just a question, but what time is freshclam running? Most of the time a >> majority of people run freshclam at the top of the hour which means you >> are in heavy competition for resources. I have mine se

Re: [Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-23 Thread Jim Preston
On Apr 23, 2010, at 8:46 AM, Dennis Peterson wrote: On 4/23/10 8:41 AM, Jim Preston wrote: Just a question, but what time is freshclam running? Most of the time a majority of people run freshclam at the top of the hour which means you are in heavy competition for resources. I have mine set

Re: [Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-23 Thread Dennis Peterson
On 4/23/10 8:41 AM, Jim Preston wrote: Just a question, but what time is freshclam running? Most of the time a majority of people run freshclam at the top of the hour which means you are in heavy competition for resources. I have mine set to run via cron at ten minutes after the hour. Jim You

Re: [Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-23 Thread Jim Preston
On Apr 23, 2010, at 8:01 AM, Frank Bures wrote: I've seen lots of problems with db.ca.clamav.net mirror in the last couple of days. I am getting freshclam[31063]: getfile: Error while reading database from db.ca.clamav.net several times a day. The freshclam then defaults to db.us.clam

[Clamav-users] Problems with db.ca.clamav.net mirror

2010-04-23 Thread Frank Bures
I've seen lots of problems with db.ca.clamav.net mirror in the last couple of days. I am getting freshclam[31063]: getfile: Error while reading database from db.ca.clamav.net several times a day. The freshclam then defaults to db.us.clamav.net and everything is fine. Does anyone know what is g

Re: [Clamav-users] Problems installing 0.95.3

2009-11-08 Thread jef moskot
On Sun, 8 Nov 2009, Török Edwin wrote: You should apply the patch with: patch -p1 Ah, thank you! The "-p1" was the necessary voodoo. It wasn't on the download page or on the Bug #1737 page, which is where you are directed for more information. I didn't think to look on the wiki. It might

Re: [Clamav-users] Problems installing 0.95.3

2009-11-08 Thread Török Edwin
On 2009-11-08 00:58, jef moskot wrote: > Will a patched version of the installation package be made publically > available? We don't have git installed and there are many system > complaints when a patch attempt is made. (Maybe due to the "--git" > option in the diff lines?) > > Installing git di

Re: [Clamav-users] Problems installing 0.95.3

2009-11-07 Thread jef moskot
Will a patched version of the installation package be made publically available? We don't have git installed and there are many system complaints when a patch attempt is made. (Maybe due to the "--git" option in the diff lines?) Installing git didn't make the error magically go away, and rat

Re: [Clamav-users] Problems installing 0.95.3

2009-10-29 Thread dborg
clamav-0.95.3 now compiles and installs on FreeBSD 7.0 after applying the patch. http://git.clamav.net/gitweb?p=clamav-devel.git;a=commitdiff_plain;h=6238a5ca06c07931b2f6ace62601ef43807df8e2;hp=55d97736bd289b53c93b652d88e5acd1886ec1bc Thanks very much to everyone for your help. Regards, Daniel

Re: [Clamav-users] Problems installing 0.95.3

2009-10-29 Thread Rick Cooper
Original Message From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Francis Stevens Sent: Thursday, October 29, 2009 11:02 AM To: ClamAV users ML Subject: Re: [Clamav-users] Problems installing 0.95.3 > Bug #1738 raised. Sorry ab

  1   2   3   4   5   6   >