[Clamav-users] Re: malformed pattern

Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of peter Sent: Friday, April 30, 2004 12:05 PM To: [EMAIL PROTECTED] Subject: [Clamav-users] malformed pattern Hi, I have problem with clamav 0.70 stable. Malformed patter line 13898 (file /var/spoo

Re: [Clamav-users] freshclam --quiet isn't

Damian Menscher wrote: Every 2 hours I get the following in my logs: May 2 13:31:34 hostname freshclam[3193]: Received signal 14, wake up May 2 13:31:34 hostname freshclam[3193]: ClamAV update process started at Sun May 2 13:31:34 2004 May 2 13:31:35 hostname freshclam[3193]: main.cvd is u

[Clamav-users] Re: malformed pattern

peter wrote: Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of peter Sent: Friday, April 30, 2004 12:05 PM To: [EMAIL PROTECTED] Subject: [Clamav-users] malformed pattern Hi, I have problem with clamav 0.70 stable. Malformed patter line 13898

Re: [Clamav-users] sigtool not working correctly

Mark Novak wrote: Hello all, I recently upgraded my Clamav from 0.70-rc to clamav-0.70. After the upgrade my sigtool stopped working as it used to. For example: [EMAIL PROTECTED] log]# sigtool -i /var/lib/clamav/daily.cvd Build time: 29 Apr 2004 07-50 +0200 Version: 294 # of signatures: 1075

Re: [Clamav-users] problems using clamav in supervised mode

> it works beautifully ti fails only in supervised mode. > > My run script is, > # cat run > #!/bin/sh > exec 2>&1 > #exec /usr/local/bin/chpst -u clamav \ > #/usr/local/bin/chpst -m 4000 /usr/local/sbin/clamd > #exec /usr/local/bin/chpst -m 8000 > /usr/local/sbin/clamd > exec /usr/local/

[Clamav-users] LibClamAV Warning: Unknown encoding type "us-ascii"

I'm running ClamAv 0.70 supervised using qscanq 0.42 scanner. Everything seems to be running fine however this afternoon I find the following warning in the logfile: LibClamAV Warning: Unknown encoding type "us-ascii" What is happening in this case? I cannot re-produce the error and don't know f

Re: [Clamav-users] problems using clamav in supervised mode

* Dale Gallagher <[EMAIL PROTECTED]> [040503 03:16]: > My /service/clamd/run script: [...] It looks similar to mine. > Have you applied this patch? (for logging to stderr) > http://www.qscanq.org/clamav-0.70-stderr.patch.gz No. Is it necessary for my suitation? > What are your clamav.conf param

[Clamav-users] Re: malformed pattern

peter wrote: peter wrote: Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of peter Sent: Friday, April 30, 2004 12:05 PM To: [EMAIL PROTECTED] Subject: [Clamav-users] malformed pattern Hi, I have problem with clamav 0.70 stable. Malformed patte

[Clamav-users] Clamav on IA-64

Hi All, I am going to install ClamAV on an Itanium2(IA-64). I found that gcc have dedicated compile options for different platform. I am just quite interested to know if any of these options can make clamav more efficient (faster ?) on IA-64? The full sets of IA-64 options can be found at: h

[Clamav-users] Strlcpy Problem

Hi ,   I am having problem with clamav-mitler while installing the application i am getting problem of strlcpy. Can any one help.   Regards  

Re: [Clamav-users] problems using clamav in supervised mode

> > Have you applied this patch? (for logging to stderr) > > http://www.qscanq.org/clamav-0.70-stderr.patch.gz > > No. Is it necessary for my suitation? Not unless you're piping stderr to a logging facility like multilog. > Do you have any more ideas on what might be wrong? > Or shall I try it

Re: [Clamav-users] OT: qscanq with qmail (+clamd)

> qscanq: fatal: unable to chdir to > /var/qmail/qscanq/root/scanq: access denied > > clamd is running under daemontools as user clamav; this > shouldn't pose an issue, as qscanq connects to clamd using > the clamdscan client. I'm running clamav supervised as described on http://www.clamav.

Re: [Clamav-users] LibClamAV Warning: Unknown encoding type "us-ascii"

On Monday 03 May 2004 10:27 am, Frank Rabitsch wrote: > LibClamAV Warning: Unknown encoding type "us-ascii" > > What is happening in this case? I cannot re-produce the error and don't > know for sure whether the email is delivered or rejected. Should I worry? No need to worry. It can safely be ig

Re: [Clamav-users] Docs on using clamd & clamav-milter with tcpserver?

On Monday 03 May 2004 3:15 am, Alton Yu wrote: > Does anyone have experience with this? I'm interested in making the > services more available just in case they crash. Specifically, what do you want to know? > Thanks, > Alton -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley,

[Clamav-users] ArchiveBlockEncrypted

I have not kept up with the password protected archive virus development. Is it still necessary to block password protected zip files? Or can clamd now detect viruses in a password protected zrchive? thanks, Sam Smith --- This SF.Net email is s

Re: [Clamav-users] OT: qscanq with qmail (+clamd)

Thanks for responding Frank. Frank Rabitsch wrote > with the exception that clamd is running as user qscanq > and it logs to > stderr using the qscanlog user and the std-err patch. > > Try to run clamd as qscanq and see what happens. I tried this over the weekend without luck. This sho

[Clamav-users] Zero byte clamd.socket and clmilter.socket

Just installed clamav-0.70-1 (rhfc1.dag). /etc/clamav.conf has LocalSocket set to /var/clamav. During boot report from that loader is the clamd.socket does not exist in /var/clamav and the clmilter ( also, 0.70-1.rhfc1.dag) fails to load. Checking /var/clamav I find a zero byte clamav.socke

[Clamav-users] Clamd starts failing after DB reload

Hi, can anyone help with this: I am runing clamd 0.68 on RH8 & Sendmail 8.12. Sometimes, during a self-check, calmd detects a pattern DB change, and forces a reload, as it's supposed to do. However, after this, it seems to fall over when trying to re-load the DB, untill it is started manually. S

[Clamav-users] Search tool on www.clamav.net

Would it be possible for the online search at http://clamav-du.securesites.net/cgi-bin/clamgrok to show the time that the signature was added to the database? This would be real handy. Jim --- This SF.Net email is sponsored by: Oracle 10g Get

RE: [Clamav-users] Re: malformed pattern

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of peter > Sent: Monday, May 03, 2004 6:39 AM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Re: malformed pattern > > > peter wrote: > > peter wrote: > > > >> Jim Maul wrote: > >> > >>> > -Origi

Re: [Clamav-users] Zero byte clamd.socket and clmilter.socket

On Mon, 3 May 2004 09:48:16 -0400 Karl Hakmiller <[EMAIL PROTECTED]> wrote: > Just installed clamav-0.70-1 (rhfc1.dag). /etc/clamav.conf has LocalSocket set to > /var/clamav. During boot report from that loader > is the clamd.socket does not exist in /var/clamav and the clmilter > ( also, 0.7

Re: [Clamav-users] Zero byte clamd.socket and clmilter.socket

On Monday 03 May 2004 2:48 pm, Karl Hakmiller wrote: > Checking /var/clamav I find a zero byte clamav.socket and no > clmilter.socket. So, I delete 0-byte clamav.socket, and restart clamd > (also, 0.70-1.rhfc1.dag) and clamav-milter in Services. Now I have the > 0-byte clamav.socket back in /var/

Re: [Clamav-users] Zero byte clamd.socket and clmilter.socket

* Karl Hakmiller <[EMAIL PROTECTED]> [20040503 18:27]: wrote: > Just installed clamav-0.70-1 (rhfc1.dag). /etc/clamav.conf has LocalSocket set to > /var/clamav. During boot report from that loader > is the clamd.socket does not exist in /var/clamav and the clmilter > ( also

[Clamav-users] Re: malformed pattern

Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of peter Sent: Monday, May 03, 2004 6:39 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] Re: malformed pattern peter wrote: peter wrote: Jim Maul wrote: -Original Message- From: [EMAIL

Re: [Clamav-users] Docs on using clamd & clamav-milter with tcpserver?

From: Nigel Horne <[EMAIL PROTECTED]> Organization: NJH Music (bandsman.co.uk) To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Docs on using clamd & clamav-milter with tcpserver? Date: Mon, 3 May 2004 12:42:29 +0100 Reply-To: [EMAIL PROTECTED] On Monday 03 May 2004 3:15 am, Alton Yu wrote: > Doe

RE: [Clamav-users] Clamd starts failing after DB reload

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Jaap > Scholten > Sent: Monday, May 03, 2004 10:28 AM > To: Clamav-Users > Subject: [Clamav-users] Clamd starts failing after DB reload > > > Hi, can anyone help with this: > > I am runing clamd 0.68 on R

[Clamav-users] Does the Sasser signature catch all variants?

According to http://sarc.com/ there are several variants of the Sasser worm running around on the net. A "sigtool -l | grep -i sasser" command reports "Worm.Sasser.A" but no others. Does this one signature catch all the variants? -- Michael St. Laurent Hartwell Corporation ---

Re: [Clamav-users] Zero byte clamd.socket and clmilter.socket

On Mon, 3 May 2004 18:32:50 +0300 Odhiambo Washington <[EMAIL PROTECTED]> wrote: > * Karl Hakmiller <[EMAIL PROTECTED]> [20040503 18:27]: wrote: > > Just installed clamav-0.70-1 (rhfc1.dag). /etc/clamav.conf has LocalSocket set to > > /var/clamav. During boot repor

Re: [Clamav-users] Zero byte clamd.socket and clmilter.socket

On Mon, 3 May 2004 16:14:55 +0100 Nigel Horne <[EMAIL PROTECTED]> wrote: > On Monday 03 May 2004 2:48 pm, Karl Hakmiller wrote: > > > Checking /var/clamav I find a zero byte clamav.socket and no > > clmilter.socket. So, I delete 0-byte clamav.socket, and restart clamd > > (also, 0.70-1.rhfc1.dag)

Re: [Clamav-users] freshclam --quiet isn't

On Sun, 2004-05-02 at 16:22, Damian Menscher wrote: > Every 2 hours I get the following in my logs: > > May 2 13:31:34 hostname freshclam[3193]: Received signal 14, wake up > May 2 13:31:34 hostname freshclam[3193]: ClamAV update process started at Sun May > 2 13:31:34 2004 > May 2 13:31:35 h

RE: [Clamav-users] Re: malformed pattern

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of peter > Sent: Monday, May 03, 2004 11:29 AM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Re: malformed pattern > > > Look at these lines bottom (/var/spool/qmailscan/qmail-queue.log). In > qmail-scan

Re: [Clamav-users] problems compiling on rh7.3

On Monday 03 May 2004 10:21 pm, Raul Elizondo wrote: > main.o(.text+0x74): undefined reference to `strlcpy' Try the latest version of clamav from CVS. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --

RE: [Clamav-users] problems compiling on rh7.3

> Hi > > Te problems is that you don´t have strlcpy function. You can resolve it > adding it to ./clamav-0.70/clamav-milter/clamav-milter.c > > size_t strlcpy(char *dst, const char *src, size_t dstsize) { > if (strlen(src) < dstsize) { > strcpy(dst,src); > } else { > strncpy(dst,src

Re: [Clamav-users] Docs on using clamd & clamav-milter with tcpserver?

On Monday 03 May 2004 5:03 pm, Alton Yu wrote: > > Does anyone have experience with this? I'm interested in making the > > services more available just in case they crash. > > Specifically, what do you want to know? > > Actually, it was a mistake. What I meant was how it would run with > tcpserver

Re: [Clamav-users] freshclam without 'net access?

On Mon, 2004-05-03 at 15:12, Steve Brorens wrote: > Some of the boxes I have running ClamAV will be behind behind > restrictive firewalls. > They receive smtp email, and can do DNS calls, but have no http/80 > access to the > internet. I *do* have ssh access though from the outside, and could > s

Re: [Clamav-users] sigtool not working correctly

Jim, On May 3, 2004, at 3:27 PM, Jim Maul wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mark Novak Sent: Monday, May 03, 2004 2:44 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] sigtool not working correctly What is odd is that I was using

[Clamav-users] problems compiling on rh7.3

Hi Te problems is that you don´t have strlcpy function. You can resolve it adding it to ./clamav-0.70/clamav-milter/clamav-milter.c size_t strlcpy(char *dst, const char *src, size_t dstsize) { if (strlen(src) < dstsize) { strcpy(dst,src); } else { strncpy(dst,src,dstsize-

Re: [Clamav-users] problems compiling on rh7.3

looks like libsm from sendmail Try downloading and installing the sendmail-devel kit Or downloading and compiling libmilter from sendmail source distribution and using that path to the configure script Raul Elizondo wrote: Hi, I am having this problem to compile clamav, the problem comes whe

RE: [Clamav-users] sigtool not working correctly

This also happened to me. Just so you won't confuse yourself with two db paths, delete the other one and just ln -s to the other one. That way either way you go, it takes you to the same place. > > What is odd is that I was using the > /usr/local/share/clamav path but > > changed it to /var/lib/cl

Re: [Clamav-users] Mail taking a *long* time to hit the list

On Monday 03 May 2004 10:11 pm, Michael St. Laurent wrote: > Antony Stone wrote: > > On Monday 03 May 2004 7:10 pm, Michael St. Laurent wrote: > >> Wow. I posted a message to the list at 9:23 AM (PDT) and as of > >> 11:06 AM (PDT) it *still* hasn't posted. I wonder if

RE: [Clamav-users] sigtool not working correctly

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Mark Novak > Sent: Monday, May 03, 2004 2:44 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] sigtool not working correctly > > > What is odd is that I was using the /usr/local/share/clamav path b

[Clamav-users] Compiling With GNU MP in /sw/lib

I am trying to compile clamav. I am on Mac OS X Server 10.3. I use fink , which makes it easier to compile/install open source software. I have install GMP in /sw/lib, but I can't figure out how to tell configure where to find it. As such, clamav doesn't compile

RE: [Clamav-users] Does the Sasser signature catch all variants?

> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Michael St. Laurent > Sent: 3. maj 2004 18:27 > To: '[EMAIL PROTECTED]' > Subject: [Clamav-users] Does the Sasser signature catch all variants? > > According to http://sarc.com/ there are

Re: [Clamav-users] ArchiveBlockEncrypted

Sam Smith wrote: I have not kept up with the password protected archive virus development. Is it still necessary to block password protected zip files? No need :) Or can clamd now detect viruses in a password protected zrchive? It has been for a long time. If you're paranoid, however, you can

[Clamav-users] Mail taking a *long* time to hit the list

Wow. I posted a message to the list at 9:23 AM (PDT) and as of 11:06 AM (PDT) it *still* hasn't posted. I wonder if this one will do any better? -- Michael St. Laurent Hartwell Corporation --- This SF.Net email is sponsored by: Oracle 10g Ge

[Clamav-users] problems compiling on rh7.3

Hi, I am having this problem to compile clamav, the problem comes when i do --enable-milter in the ./configure then make. If i dont use that, it compile with no problem. Any hint or help? Regards... -=Raul=- gcc -DHAVE_CONFIG_H -DSENDMAIL_BIN=\"/usr/sbin/sendmail\" -I. -I. -I.. -I../ clam d -

Re: [Clamav-users] Mail taking a *long* time to hit the list

On Monday 03 May 2004 7:10 pm, Michael St. Laurent wrote: > Wow. I posted a message to the list at 9:23 AM (PDT) and as of 11:06 AM > (PDT) it *still* hasn't posted. I wonder if this one will do any better? You mean the one saying: "According to http://sarc.com/ there are several variants of t

Re: [Clamav-users] problems compiling on rh7.3

On Monday 03 May 2004 7:27 pm, Raul Elizondo wrote: > I am having this problem to compile clamav, the problem comes when i > do --enable-milter in the ./configure then make. If i dont use that, it > compile with no problem. Have you followed the instructions in the INSTALL document, including in

RE: [Clamav-users] Mail taking a *long* time to hit the list

Antony Stone wrote: > On Monday 03 May 2004 7:10 pm, Michael St. Laurent wrote: > >> Wow. I posted a message to the list at 9:23 AM (PDT) and as of >> 11:06 AM (PDT) it *still* hasn't posted. I wonder if this one will >> do any better? > > You mean the one saying: "A

RE: [Clamav-users] problems compiling on rh7.3

>Sent: Monday, May 03, 2004 1:19 PM > >looks like libsm from sendmail > >Try downloading and installing the sendmail-devel kit > >Or > >downloading and compiling libmilter from sendmail source distribution >and using that path to the configure script Hi again, Sendmail-devel for this distro/versi

Re: [Clamav-users] problems compiling on rh7.3

Hi Te problems is that you don´t have strlcpy function. You can resolve it adding it to ./clamav-0.70/clamav-milter/clamav-milter.c size_t strlcpy(char *dst, const char *src, size_t dstsize) { if (strlen(src) < dstsize) { strcpy(dst,src); } else { strncpy(dst,src,dstsize-1); d

Re: [Clamav-users] freshclam without 'net access?

On Monday 03 May 2004 9:12 pm, Steve Brorens wrote: > Some of the boxes I have running ClamAV will be behind behind > restrictive firewalls. > They receive smtp email, and can do DNS calls, but have no http/80 > access to the internet. I *do* have ssh access though from the outside, and > could sc

[Clamav-users] freshclam without 'net access?

Some of the boxes I have running ClamAV will be behind behind restrictive firewalls. They receive smtp email, and can do DNS calls, but have no http/80 access to the internet. I *do* have ssh access though from the outside, and could schedule a task to ssh in twice daily... How would you update

Re: [Clamav-users] sigtool not working correctly

Niek, On May 3, 2004, at 3:58 AM, Niek wrote: Mark Novak wrote: Hello all, I recently upgraded my Clamav from 0.70-rc to clamav-0.70. After the upgrade my sigtool stopped working as it used to. For example: [EMAIL PROTECTED] log]# sigtool -i /var/lib/clamav/daily.cvd Build time: 29 Apr 2004