Re: [Clamav-users] same error with Linux and BSD

2003-08-27 Thread R W C
Hello, Yes, we do, well I call it highly loaded but that is relative so I will post the status below, we have 12,000 users or so. We have two slackware linux MX boxes that prescan for spam and viruses (the scan is done in the data stream and 550 error is produced so we have no bounce message we le

[Clamav-users] clamd 0.60 problems

2003-08-27 Thread Marc Balmer
Hi I am again experiencing problems with clamd on OpenBSD 3.3 on Sparc64. clamd suddenly terminates, no entry in the log, no entry elsewhere. It just silently dies. I have abolsutely no indication as to what might be the cause. If you have any idea, it's more than welcome! - Marc --

Re: [Clamav-users] Clamd Socket Already Exist Error [REPOST]

2003-08-27 Thread Mark Mielke
On Tue, Aug 26, 2003 at 05:53:57PM +0200, Tomasz Kojm wrote: > > As I don't usually do networking in C, and there were one/some style > > complaints: Tomasz, are you accepting the patch as-is? > Of course, I do. However I'd like to see Mark's version and after that > we can update the CVS with the

Re: [Clamav-users] How stable is 0.60?

2003-08-27 Thread Marc Balmer
On Tue, 26 Aug 2003 15:25:04 +0200 (CEST) Tomasz Kojm <[EMAIL PROTECTED]> wrote: >> > In my maillog I find the following entry: > > > > Aug 25 13:53:36 harbart smtp-vilter[19777]: smtp-vilter: accept() > > returned invalid socket (Too many open files), try again > > there are known problems with

[Clamav-users] Clamdscan Command Not Found

2003-08-27 Thread Ian Scott
I'm sorry for taking up so much of your time over the past day! Sometimes, I am a slow learner. I finally got clamav working great, along with clamav-milter and Sendmail 8.2.19. Everything was working great! For about 16 hours. Then, I started experiencing time out issues sending mail through

Re: [Clamav-users] Proxy and Scanning?

2003-08-27 Thread Kevin Spicer
On Wed, 2003-08-27 at 00:20, Mark wrote: > Is it possible to scan the traffic (via plug in or so) with SQUID or an > SOCKS-Proxy (like Dante)? > If not: Feature Request -> TrafficScan via PlugIN, own mod or Daemon :) > Dansguardian (http://www.dansguardian.org) is a content filter for squid which

[Clamav-users] Re: Suggestions for build process

2003-08-27 Thread David Jansen
On Tue, Aug 26, 2003 at 18:15:52 +0200 (CEST) Tomasz Kojm <[EMAIL PROTECTED]> wrote: > > 1) clamav-milter links with -lmilter but that (at least on RedHat) references > > a function strlcpy which is in libsmutil.a (also from the sendmail-devel > > rpm), so I needed to add -lsmutil in clamav-milter/

RE: [Clamav-users] Proxy and Scanning?

2003-08-27 Thread Diego d'Ambra
> -Original Message- > From: Mark [mailto:[EMAIL PROTECTED] > Sent: 27. august 2003 01:21 > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Proxy and Scanning? > > > Is it possible to scan the traffic (via plug in or so) with > SQUID or an SOCKS-Proxy (like Dante)? If not: Feature Reque

Re: [Clamav-users] Clamdscan Command Not Found

2003-08-27 Thread Tomasz Papszun
On Wed, 27 Aug 2003 at 0:19:25 -0400, Ian Scott wrote: [...] > It's a very quiet time, so I thought I'd just reboot the darn machine, > to see what would happen. In my /etc/rc.d/rc.local file, I have: > > # update clamav databases > freshclam -d -c 2 -l /var/log/clam-update.log > > # start clam

[Clamav-users] Building CLAMd Snapshot fails

2003-08-27 Thread Adam Williams
I'm trying to use the spec file from the 0.60 src rpm, to build an RPM from the clamav-20030806.tar.gz snapshot (to see if the milter/clamd is more stable). Just unpacking the tar ball, running ./configure, and make works. But rpmbuild -bb clam.spec dies with - source='clamav-milter.c' object='c

Re: [Clamav-users] Building CLAMd Snapshot fails

2003-08-27 Thread Adam Williams
> I'm trying to use the spec file from the 0.60 src rpm, to build an RPM > from the clamav-20030806.tar.gz snapshot (to see if the milter/clamd is > more stable). > Just unpacking the tar ball, running ./configure, and make works. > But rpmbuild -bb clam.spec dies with - > source='clamav-milter.c'

[Clamav-users] Re: clamd [defunct]

2003-08-27 Thread Marian Eichholz
Well, I can prove the failure for root # /usr/clamav/sbin/clamd --version clamd / ClamAV version 20030806 selfbuilt with exim/exiscan 4.21. one thread goes defunct, the master thread idles around and the third is stuck in an empty event loop. Exim connections pile up to (in this

Re: [Clamav-users] Building CLAMd Snapshot fails

2003-08-27 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 27 Aug 2003 12:19 pm, Adam Williams wrote: > It is --enable-milter that causes this, even in a standard tar-pack > build. Without milter support it compiles. The problem is with line 260 of clamd/others.c, change the call from cli_mall

[Clamav-users] clamav-milter and bouncemessages

2003-08-27 Thread tomte
Hi there, I have a question about the mails that (I assume) clamav-milter sends to both the sender and the receiver of an infected mail. Is there any way to turn this off ? >From my point of view this is unneccessary, and I would like the scanner to quietly toss the mail away instead. I've read

Re: [Clamav-users] Re: clamd [defunct]

2003-08-27 Thread Adam Williams
> Well, I can prove the failure for > root # /usr/clamav/sbin/clamd --version > clamd / ClamAV version 20030806 > selfbuilt with exim/exiscan 4.21. > one thread goes defunct, the master thread idles around and the third is > stuck in an empty event loop. > Exim connections pile up to (i

[Clamav-users] Clamd can't remove socket on reload

2003-08-27 Thread Wouter de Vries
Hi, Sometimes clamd seems to be unable to remove the socket before restarting, and the reload (when the viruses db is updated) fails. I just turned on Verbose Logging to be sure the reload fails because the clamd socket still exists, but I am quite sure about it. Clamd has full priveleges to t

[Clamav-users] clamav-milter, clamd, and high volume mail (SoBig.F)

2003-08-27 Thread Eric Jarman
I'm having a problem with clamd and clamav-milter. We just implemented a virus-scanning mail proxy for our university. When using clamav-milter and clamd, clamd seems to be exiting unexpectedly when trying to deal with a high volume of mail traffic, most of it generated by the SoBig.F worm. (Ple

Re: [Clamav-users] clamav-milter, clamd, and high volume mail (SoBig.F)

2003-08-27 Thread Support ePaxsys/FRWS
Had/have the same problem. Switch to MailScanner from http://www.mailscanner.info until they can get that found and fixed. Seriously. We want to use the Milter also but cannot. JP At 11:23 AM 8/25/03 -0500, you wrote: I'm having a problem with clamd and clamav-milter. We just implemented a vir

Re: [Clamav-users] Using Clam from a non-standard MTA

2003-08-27 Thread ODHIAMBO Washington
* Toby Reiter <[EMAIL PROTECTED]> [20030826 06:03]: wrote: > Hello all, > Just joined the list. I just downloaded Clam AV and am impressed with > its speed and its autodownload capabilities (freshclam). > > I need some help, though. I use XMail, which I really like as an MTA > but it doesn't off

Re: [Clamav-users] same error with Linux and BSD

2003-08-27 Thread Marc Balmer
On Tue, 26 Aug 2003 00:05:14 +0200 Olaf Zaplinski <[EMAIL PROTECTED]> wrote: > And: is somebody here using clamav on a rather high loaded email server? If > yes, what configuration? What OS? HOW TO do? We use Clam AV in conjunction with smtp-vilter, a flexible milter written in C, on OpenBSD-3.

Re: [Clamav-users] Re: clamd [defunct]

2003-08-27 Thread Tomasz Kojm
> So, which version *is* stable? > > You know: > > - not leaking threads > - not leaking memory > - not leaking zombies > - not segfaulting... > - reliably restartable. There will be a new version available on Friday - it should handle that problems more gently :) Best regards, Tomasz Kojm --

Re: [Clamav-users] clamav-milter woes

2003-08-27 Thread Support ePaxsys/FRWS
We too had some trouble with the ClamAV milter on our servers, we went to MailScanner and it does the job nicely. (Though I would rather have a Non-Perl solution, we can wait) http://ww.mailscanner.info Enjoy. Jerome At 04:32 PM 8/25/03 -0700, you wrote: On 8/25/2003 4:16 PM, Tomasz Papszun w

Re: [Clamav-users] Build Problems - RH 8

2003-08-27 Thread Marc Balmer
On Tue, 26 Aug 2003 00:04:03 -0400 Ian Scott <[EMAIL PROTECTED]> wrote: > I'm now trying to compile it on a box with RH 8 and Sendmail 8.12.9. > I configured with --enable-milter. > > However, make quits with an error: > > /usr/lib/gcc-lib/i386-redhat-linux/2.96/../../../libmilter.a(main.o): >

[Clamav-users] clamd RELOAD

2003-08-27 Thread slim
I know there is a socket command for clamd that can tell clamd to reload the virus defintion databases. Is this something that clamd does on its own after a set period of time? Or is there maybe a helper application (clamdscan with a command line switch?) that could trigger this behavior? I

Re: [Clamav-users] clamav-milter woes

2003-08-27 Thread Marc Balmer
On Mon, 25 Aug 2003 19:00:23 -0600 Support ePaxsys/FRWS <[EMAIL PROTECTED]> wrote: > We too had some trouble with the ClamAV milter on our servers, we went > to MailScanner and it does the job nicely. (Though I would rather have > a Non-Perl solution, we can wait) We have smtp-vilter which is wri

Re: [Clamav-users] clamd RELOAD

2003-08-27 Thread Iván Baldo
Hello! slim wrote: SelfCheck: Database status OK. SelfCheck: Integrity OK Yes, if a new database is installed, then you should see something like this: SelfCheck: Database modification detected. Forcing reload. SelfCheck: Integrity OK Goodbye! P.s.: I don't know if there is a way to t

Re: [Clamav-users] clamd RELOAD

2003-08-27 Thread Thomas Lamy
slim wrote: I know there is a socket command for clamd that can tell clamd to reload the virus defintion databases. Is this something that clamd does on its own after a set period of time? Or is there maybe a helper application (clamdscan with a command line switch?) that could trigger this beha

[Clamav-users] Problems compiling 0.60 under Solaris 2.6

2003-08-27 Thread Steve Pfister
I'm trying to compile 0.60 under Solaris 2.6, and I'm stuck: - Make gives me: ld: fatal: library -lz: not found - I can't seem to find zlib-devel (I've got zlib). I'm assuming this is related to the first problem. Thanks, Steve Pfister // [EMAIL PROTECTED] --

[Clamav-users] Re: clamd RELOAD

2003-08-27 Thread slim
Yes, if a new database is installed, then you should see something like this: SelfCheck: Database modification detected. Forcing reload. SelfCheck: Integrity OK Goodbye! P.s.: I don't know if there is a way to tell clamd explicitly that a new virus database is installed and it should r

[Clamav-users] viruses.db.local ? (or wildcard signature for *.exe *.pif *.scr)

2003-08-27 Thread Jim Mercer
i'm finding clamav to be quite nice for my setup. however, our local policies also consider any attachment ending with .exe, .scr, .pif, etc, etc, etc to be viruses. (i mean, really, who needs to send a .pif file as an attachment to an email?) would it be possible to add to clamav the ability t

Re: [Clamav-users] viruses.db.local ? (or wildcard signature for *.exe *.pif *.scr)

2003-08-27 Thread Antony Stone
On Wednesday 27 August 2003 11:37 pm, Jim Mercer wrote: > i'm finding clamav to be quite nice for my setup. > > however, our local policies also consider any attachment ending with > .exe, .scr, .pif, etc, etc, etc to be viruses. > > (i mean, really, who needs to send a .pif file as an attachment