Jef Poskanzer wrote:
> >> >Does clamdscan detect it?
> >>
> >> Let's see... Yes.
> >
> > clam*d*scan, not clamscan.
>
> YES.
My apologies. Misinterpreted your previous post.
Matt
___
http://lurker.clamav.net/list/clamav-users.html
>> >> % clamscan -V
>> >> ClamAV 0.84/875/Tue May 10 04:27:59 2005
>> >> % clamscan 473844
>> >> 473844: Worm.Bagz.C FOUND
>> >
>> >Does clamdscan detect it?
>>
>> Let's see... Yes.
>
> clam*d*scan, not clamscan.
YES.
---
Jef
Jef Poskanzer [EMAIL PROTECTED] http://www.
Jef Poskanzer wrote:
> >> % clamscan -V
> >> ClamAV 0.84/875/Tue May 10 04:27:59 2005
> >> % clamscan 473844
> >> 473844: Worm.Bagz.C FOUND
> >
> >Does clamdscan detect it?
>
> Let's see... Yes.
clam*d*scan, not clamscan.
Matt
___
h
>> % clamscan -V
>> ClamAV 0.84/875/Tue May 10 04:27:59 2005
>> % clamscan 473844
>> 473844: Worm.Bagz.C FOUND
>
>Does clamdscan detect it?
Let's see... Yes.
---
Jef
Jef Poskanzer [EMAIL PROTECTED] http://www.acme.com/jef/
___
On Thu, 12 May 2005 15:01:34 -0700
Jef Poskanzer <[EMAIL PROTECTED]> wrote:
> The latter has a mod date of yesterday, and freshclam.log says
> it is version 875. A clamscan of one of the false-negatives:
>
> % clamscan -V
> ClamAV 0.84/875/Tue May 10 04:27:59 2005
> % clamscan 473844
>>By the way I tried using --external as suggested and it did not
>>fix the false-negative problems I've been seeing since 01may.
>>I'm still getting about 5000 messages per day that clamav-milter
>>says are clean but that clamscan correctly says have Bagz.something.
>
>Please post your clamd.conf
On Thu, 12 May 2005 10:10:23 -0700
Jef Poskanzer <[EMAIL PROTECTED]> wrote:
> By the way I tried using --external as suggested and it did not
> fix the false-negative problems I've been seeing since 01may.
> I'm still getting about 5000 messages per day that clamav-milter
> says are clean but that
From: Nigel Horne
Date: 2005-05-03 14:26 -700
To: ClamAV users ML
Subject: Re: [Clamav-users] problems after .84 upgrade
>>You might try adding --external. It looks like the people posting about
>>clamav-milter problems are all not useing --external.
>
On Wednesday 04 May 2005 17:27, rick pim wrote:
> some of the responses i received yesterday suggesting increasing
> the -m (max-children) switch on clamav-milter. i was running
> with:
> clamav-milter -PHl --postmaster=root -m 64
> i increased this to:
> clamav-milter -PHl --postmaster=root -
On 5/4/05, Nigel Horne <[EMAIL PROTECTED]> wrote:
> There is a current limitation: if you don't give the --external option, you
> must
> use --max-children, otherwide clamav-milter will fail to start.
Thank, you Nigel. Interestingly, clamav-milter *was* starting and
running for extended periods,
On Wednesday 04 May 2005 17:27, rick pim wrote:
> both clamd and clamav-milter processes were still running.
>
> two things:
>
>- i have freshclam running via cron at xx:37 -- this failure started
> about ten minutes after a freshclam run. yesterday's failure also
> started about
followup from yesterday.
some of the responses i received yesterday suggesting increasing
the -m (max-children) switch on clamav-milter. i was running
with:
clamav-milter -PHl --postmaster=root -m 64
i increased this to:
clamav-milter -PHl --postmaster=root -m 96
and restarted clam late yeste
On Tuesday 03 May 2005 22:09, Pete 'Wolfy' Hanson wrote:
> Ah, and here's my startup command:
>
> /usr/local/sbin/clamav-milter --dont-log-clean --headers --local
> --pidfile=/var/clamav/clamav-milter.pid --quiet
> /var/clamav/clamav-milter.sock
There is a current limitation: if you don't give th
On Tuesday 03 May 2005 22:48, Jose Luis Hime wrote:
> Excuse me for my misunderstanding, but is there any special configuration I
> should do to use --external ?
>
> I read the man page for clamav-milter and I have one doubt:
>
> =
On Tue, 3 May 2005 16:24:04 -0700
<[EMAIL PROTECTED]> wrote:
> rick pim wrote:
> > > Mind you I am
> > > worried about the mode 777 for clamd.sock, if nothing else that
> > seems > like a security breach to me.
> >
> > true. but it seems to do that itself:
> >
> > srwxrwxrwx 1 clamav clam
On Tue, 3 May 2005 [EMAIL PROTECTED] wrote:
> > > Mind you I am
> > > worried about the mode 777 for clamd.sock, if nothing else that
> > seems > like a security breach to me.
> >
> > true. but it seems to do that itself:
> >
> > srwxrwxrwx 1 clamav clamav 0 May 3 17:06 clamd.soc
rick pim wrote:
> > Mind you I am
> > worried about the mode 777 for clamd.sock, if nothing else that
> seems > like a security breach to me.
>
> true. but it seems to do that itself:
>
> srwxrwxrwx 1 clamav clamav 0 May 3 17:06 clamd.sock=
Stop me if I'm wrong but I think that's
> Mind you I am
> worried about the mode 777 for clamd.sock, if nothing else that seems
> like a security breach to me.
true. but it seems to do that itself:
# ls -al /var/clamav/
total 4
drwxr-x--- 2 clamav clamav 512 May 3 17:02 ./
drwxr-xr-x 32 root sys 512 Feb 11 13:21
Excuse me for my misunderstanding, but is there any special configuration I
should do to use --external ?
I read the man page for clamav-milter and I have one doubt:
-e, --external
Usually clamav-milter scans the
On Tue, 3 May 2005, Nigel Horne wrote:
> > That´s true. It is not clear in the docs that --external is faster or more
> > reliable.
>
> It's more secure, uses less memory and doesn't use IPC so it's faster.
I'm not saying it's more or less anything. However, since I'm using
--external and not
On Tuesday 03 May 2005 22:26, Nigel Horne wrote:
> You don've have a
don't
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk
___
http://lurker.clamav.net/list/clamav-user
On Tuesday 03 May 2005 22:23, Jose Luis Hime wrote:
> > You might try adding --external. It looks like the people posting about
> > clamav-milter problems are all not useing --external.
>
> That´s true. It is not clear in the docs that --external is faster or more
> reliable.
It's more secure, u
On Tuesday 03 May 2005 22:07, rick pim wrote:
>
> > None without some information such as options used to start
> > clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc.
>
> clamav-milter is started with:
> clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
>
> here's
> You might try adding --external. It looks like the people posting about
> clamav-milter problems are all not useing --external.
That´s true. It is not clear in the docs that --external is faster or more
reliable. I will change my configuration and test it. Thanks for the tip!
Jose Hime
__
On Tue, 3 May 2005, rick pim wrote:
> clamav-milter is started with:
> clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
OK, without --external, clamav-milter isn't useing clamd, it's useing it's
calling libclamav directly.
You might try adding --external. It looks like the
Ah, and here's my startup command:
/usr/local/sbin/clamav-milter --dont-log-clean --headers --local
--pidfile=/var/clamav/clamav-milter.pid --quiet
/var/clamav/clamav-milter.sock
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
_
> None without some information such as options used to start
> clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc.
clamav-milter is started with:
clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
here's an extract from clamd.conf:
# grep -v ^# clamd.conf | grep -
I'm seeing similar symptoms on Solaris 8 and 6, as I reported in the
"clamd segfaulting as of about thursday" thread.The rest of this
is reposted from that thread:
- Post 1
I am not explicity using the -B flag, nor do I believe that I need it.
The error is occurring in clamav-milter (
On Tue, 3 May 2005, Nigel Horne wrote:
> clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc. Mind you I am
> worried about the mode 777 for clamd.sock, if nothing else that seems
> like a security breach to me.
I don't recall the particulars, but I ran into the same problem where
clamd.soc
I had the same problem (timeout before data read) and I fixed it by
starting clamav-milter with the option "--max-children=50".
Actually, I was receiving this error even with version .80, but I had
not realized that!
Currently, I use the following command to start the milter:
/usr/local/sbin/cla
A. On Tue, 2005-05-03 at 21:41, rick pim wrote:
> environment: solaris 5.9, sendmail 8.13.2, clamav .84 (w/clamav-milter).
>
> i upgraded to .84 yesterday with (as far as i could tell) no
> problems. things started afterwards and ran as expected.
>
> there were problems yesterday afternoon b
> Not to be obvious, but was clamav-milter running ? (And clamd, if you run
> with --external ).
>
meant to include that. yesterday clamav-milter had died. today
it hadn't:
# ps -ef | grep clam
root 19241 21218 0 16:37:14 pts/30:00 grep clam
clamav 13432 1 0 20:20:17 ?
On Tue, 3 May 2005, rick pim wrote:
> May 3 15:47:21 sennit sendmail[14381]: [ID 801593 mail.error]
> j43JlKch014381: Milter (clamav): error connecting to filter: Connection
> refused by /var/clamav/clmilter.sock
> May 3 15:47:21 sennit sendmail[14381]: [ID 801593 mail.info] j43JlKch014381:
>
environment: solaris 5.9, sendmail 8.13.2, clamav .84 (w/clamav-milter).
i upgraded to .84 yesterday with (as far as i could tell) no
problems. things started afterwards and ran as expected.
there were problems yesterday afternoon but i restarted things and
everything looked fine. this afternoon
34 matches
Mail list logo
