[Clamav-users] Sendmail, clamav-milter and libmilter errors.

I have installed clamav and clamav-milter on netbsd 1.6 (all packages,include sendmail, libmilter and pth, are current) and it appears to work fine (i.e. catching viruses). Most of the time it is reliable and gives proper warnings when attempting to send infected mails. Yesterday, how ever, it

Re: [Clamav-users] Temp file issues

Ha ha :-) Good answer but i don't have Debug enabled even... On Wed, May 05, 2004 at 06:29:15PM +0200, Jakub Jankowski wrote: > On 2004-05-05, Alex V. Kovirshin wrote: > > >First - hack milter ... > >Second - cron job rm -f /path/to/quarantine > > Zero - read docs. > > s. > > -- > (0> Ja

Re: [Clamav-users] Re: /temp directory

* Cecilia Mtz <[EMAIL PROTECTED]> [20040506 09:21]: wrote: > never mind! > sorry but I didn't see a message posted earlier with the same topic, that > answered my questions. > > Cecilia > - > > admins, you may delete this post If only that was so e

Re: [Clamav-users] Temp file issues

Ops, sorry. I just don't understand the point... I was talking about "quarantine_dir". I use local socket, and as said "When using Localsocket in %s\nyou may improve performance if you use the --quarantine_dir option\n" - i use --quarantine-dir, but i need only perfomance improvement, not all that

Re: [Clamav-users] Temp file issues

Btw, if you use quarantine-dir option(with localsocket of couse), for perfomance reason, but do not need all that quarantine files, you could make them deleted, by patching clamav-milter: --- clamav-milter.c.orig2004-05-06 11:20:10.0 +0400 +++ clamav-milter.c 2004-05-06 11:20:3

[Clamav-users] There is something I dont get here ...

Hello again everyone. I received a file that has been recognized as a virus by f-prot, but not by clam. Indeed it is a virus, since I can open it with my mailer and execute it, and really get infected. So I submitted it, and I got this response from Diego d'Ambra : "E-mail sample with missing h

[Clamav-users] Latest stable version 0.70 doesn't detect dummy viruses

Hi! I'm using sendmail with clamav-milter and the latest stable version 0.70. I used a german website which provides dummy viruses for checking clamav (http://www.heise.de/security/dienste/emailcheck/). I realised that the following dummy viruses pass clamav: Virus Bagle.Q Virus Netsky.P Anyon

RE: [Clamav-users] There is something I dont get here ...

> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Flynn > Sent: 6. maj 2004 09:50 > To: [EMAIL PROTECTED] > Subject: [Clamav-users] There is something I dont get here ... > > "E-mail sample with missing headers. SomeFool > found if header

Re: [Clamav-users] Latest stable version 0.70 doesn't detect dummy viruses

On Thu, 2004-05-06 at 09:10, Clamav wrote: > Hi! > I'm using sendmail with clamav-milter and the latest stable version > 0.70. > > I used a german website which provides dummy viruses for checking clamav > (http://www.heise.de/security/dienste/emailcheck/). > > I realised that the following dummy

[Clamav-users] Patching clamd to log to stdout

Dale Gallagher wrote: Hi everyone Anyone wishing to run clamd under daemontools http://cr.yp.to/daemontools.html can use the attached patch I hacked together, which is almost identical to Len Budney's patch: http://mysite.verizon.net/vze1ypud/software/qscanq/clamav-0.70-stderr.patch.gz I didn'

[Clamav-users] Clamav - Qmail - Ezmlm

I may be posting to the wrong link, but I am just trying to cover all angles: I am using qmail - qmailscanner - clamav-0.70 and ezmlm. All regular mail is passed to qmailscanner and thus virus scanned. But all mail sent to a mailing list is not. Is there anywhere in Ezmlm that i must configure fo

[Clamav-users] Unmatchet Entries

Title: is: Unmatchet Entries Hi, After installing Fedora C 1, SA the pakkage that follows Fedora C1, clamav and MailScanner. Used a very nise link to install clamav: (<>) (used yum to get the latest version (ClamAv)) and the program

[Clamav-users] Re: There is something I dont get here ...

> There are many ways to do this - using the --mbox option should detect > the virus if the _full_ e-mail is scanned by ClamAV. Well - let me clarify this situation very carefully : (v0.70)-clamscan --mbox does *NOT* recognized the _full_ email as a virus. snapshot-clamscan --mbox does *NOT* reco

Re: [Clamav-users] Mail confusion / savemail panics

On Wednesday 05 May 2004 7:53 pm, Søren Schimkat wrote: > When using the same config file at shown below .. and starting > clamav-milter with these options: > > --force-scan --config-file=/opt/clamav-0.70/etc/clamav.conf > --quarantine-dir =/var/quarantine /var/run/clamav/clmilter.sock > Could so

RE: [Clamav-users] Re: There is something I dont get here ...

> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Flynn > Sent: 6. maj 2004 10:46 > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Re: There is something I dont get here ... > > > There are many ways to do this - using the --mbox option

Re: [Clamav-users] Quarantine files (was Temp file issues)

On Thursday 06 May 2004 8:08 am, Alex V. Kovirshin wrote: > Ops, sorry. I just don't understand the point... > I was talking about "quarantine_dir". Ahah, that's different from the temporary files. Have you tried the latest version in CVS? -- Nigel Horne. Arranger, Composer, Typesetter. NJH Mus

Re: [Clamav-users] Patching clamd to log to stdout

Andrej Trobentar wrote: Really nobody knows an answer to this? I have found a solution on qmail list : >>> Jeremy Kitchen wrote: >>> >>> there's no reason to patch clamav to have clamd log to stderr. >>> >>> in clamav.conf: >>> LogFile /dev/stdout >>> LogFileUnlock >>> >>> works on every system I

Re: [Clamav-users] Sendmail, clamav-milter and libmilter errors.

On Thursday 06 May 2004 7:38 am, Mr Mailing List wrote: > www sendmail[4015]: i2UL7MvV004015: SYSERR(root): out of memory: > Cannot allocate memory > This is using ClamAV version 0.70, clamav-milter version 0.70 (the > released version) Please try the version in CVS, it has some fixes whic

Re: [Clamav-users] Re: There is something I dont get here ...

On Thursday 06 May 2004 9:46 am, Flynn wrote: > Honest: I am convinced we face a bug here. Have you tried with the latest version in CVS? If so and it still fails, zip the e-mail, password virus, and send me copy. > Rgds, > Flynn -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Musi

Re: [Clamav-users] Unmatchet Entries

On Thursday 06 May 2004 9:46 am, Jeany Zoita Jakobsen wrote: > **Unmatched Entries** [snip] > clamfi_close > What i am concerned about is the "**Unmatchet Entries**" messagees. > Is there sommething wrong? Yes, the yum people have configured clamav with "enable-debug". Best thing is to not use

Re: [Clamav-users] Re: There is something I dont get here ...

Flynn wrote: There are many ways to do this - using the --mbox option should detect the virus if the _full_ e-mail is scanned by ClamAV. Well - let me clarify this situation very carefully : (v0.70)-clamscan --mbox does *NOT* recognized the _full_ email as a virus. I have experienced th

[Clamav-users] Installation outdated error in freshclam

Sorry, I know this was discussed at the end of April, but apparently much of Aprils list archive is missing. When running freshclam directly or via cron it gives the error: WARNING: Your ClamAV installation is OUTDATED - please update immediately! I did update to the latest stable yesterday, whic

Re: [Clamav-users] segmentation fault in 0.70 ?due to filename of infected virus?

On Wed, 05 May 2004 13:55:29 -0400 Chris Conn <[EMAIL PROTECTED]> wrote: > > >>this segmentation fault that occurred at the exact second it scanned > > > >>this Klez virus? > > > > > > As a temporary work-around please disable the LogSyslog directive. > > The format string problem is connected

[Clamav-users] Re: Re: There is something I dont get here ...

> > Honest: I am convinced we face a bug here. > > I'm not, but you're welcome to submit the _full_ e-mail (I suspect the > sample I'm looking at is only a partial bounced sample) :-) > I sent the full emails as sub. number 3074 & 3075 I should have done that first, but the fact that your remote s

Re: [Clamav-users] Quarantine files (was Temp file issues)

Nope, but i made little hack to clamav-milter, see my previose post... it works good. But thanx, i'll check it out. On Thu, May 06, 2004 at 10:32:40AM +0100, Nigel Horne wrote: > On Thursday 06 May 2004 8:08 am, Alex V. Kovirshin wrote: > > Ops, sorry. I just don't understand the point... > > I wa

[Clamav-users] Re: Re: There is something I dont get here ...

> I'm not, but you're welcome to submit the _full_ e-mail (I suspect the > sample I'm looking at is only a partial bounced sample) :-) > Hello again, To fullfill with Nigel Horne's request, I downloaded the latest tarball, and one of my samples is now detected. So please ignore submission n# 3075

Re: [Clamav-users] Sendmail, clamav-milter and libmilter errors.

On May 6, 2004, at 11:40, Nigel Horne wrote: On Thursday 06 May 2004 7:38 am, Mr Mailing List wrote: www sendmail[4015]: i2UL7MvV004015: SYSERR(root): out of memory: Cannot allocate memory This is using ClamAV version 0.70, clamav-milter version 0.70 (the released version) Please try the versi

Re: [Clamav-users] Sendmail, clamav-milter and libmilter errors.

On Thursday 06 May 2004 11:48 am, Mr Mailing List wrote: > Do the changes address the 'timeout before data read' issue also? It's all part and parcel of the same issue. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.ba

Re: [Clamav-users] Unmatchet Entries

Nigel Horne wrote: On Thursday 06 May 2004 9:46 am, Jeany Zoita Jakobsen wrote: **Unmatched Entries** [snip] clamfi_close What i am concerned about is the "**Unmatchet Entries**" messagees. Is there sommething wrong? Yes, the yum people have configured clamav with "enable

SV: [Clamav-users] Unmatchet Entries

Do you mean that i can install clamav-0.70.tar.gz 2292 kb Apr 17, 2004 02:07 over the actual version? (I installed for to days ago) Or i have to uninstall firt the actual ClamAv befor i download and install the new version. And one more question :) Please point me to the best version of ClamAv f

SV: [Clamav-users] Unmatchet Entries

Title: is: SV: [Clamav-users] Unmatchet Entries Hi Peter, Do you mean that i should disable the debug in clamav.conf? If you mean that, so it is allredy disabled. May be i should eneble it? Thanks, Jeany -Opprinnelig melding- Fra:    [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED

Re: SV: [Clamav-users] Unmatchet Entries

On Thu, 2004-05-06 at 13:20, Jeany Zoita Jakobsen wrote: > Do you mean that i can install > clamav-0.70.tar.gz 2292 kb Apr 17, 2004 02:07 > over the actual version? (I installed for to days ago) > Or i have to uninstall firt the actual ClamAv befor i download and install the new > version. Unin

RE: [Clamav-users] Installation outdated error in freshclam

From: Phil Schilling <[EMAIL PROTECTED]> Sorry, I know this was discussed at the end of April, but apparently much of Aprils list archive is missing. When running freshclam directly or via cron it gives the error: WARNING: Your ClamAV installation is OUTDATED - please update immediately! I did upd

Re: [Clamav-users] /temp directory

On May 6, 2004, at 1:54 AM, Cecilia Mtz wrote: Hello I noticed that space used on my server went up more than 1 GB in two days. I searched for possible causes and found that on the /temp directory there are hundreds of folders with names like: /clamav-32a04d8981dc9029 /clamav-64c3234be1ab21c8

[Clamav-users] FAQ update?

Is there any chance of getting the FAQ entry for the functionality level problem a bit more detailed? It might stop the regular postings to the list. A reference to removing old versions first would be particularly useful (and a reminder of the flag to identify the running version). Something

Re: SV: [Clamav-users] Unmatchet Entries

Jeany Zoita Jakobsen wrote: Hi Peter, Do you mean that i should disable the debug in clamav.conf? If you mean that, so it is allredy disabled. May be i should eneble it? Hello Jeany Zoita, the 'enable-debug' is compile-time option. High level of debugging is interesting for developers only. Norm

RE: [Clamav-users] Re: Worm/virus not recognized locally

Hi, I have also the same problem with netsky.ab or Worm.SomeFool.AB. The message could not be recognized by clamscan. But the attached file abuses.pif alone was recognized. I'm using clamav-0.70-1 + qmail + qmail-scan combination on my mail erver. What can be the problem ? And how to solve it? Any

Re: [Clamav-users] Clamav - Qmail - Ezmlm

Scott Ryan wrote: I may be posting to the wrong link, but I am just trying to cover all angles: I am using qmail - qmailscanner - clamav-0.70 and ezmlm. All regular mail is passed to qmailscanner and thus virus scanned. But all mail sent to a mailing list is not. Is there anywhere in Ezmlm that i

RE: [Clamav-users] Sasser Worm Virus not shown with sigtool

| |You probably have 2 versions of the database. Happened to me I finally figured that out when I tried doing sigtool --unpack-current and it prepended the directory it was using to my entry. |and many others. Simple to rectify: search for main.cvd on |your box. Then find which one is being u

[OT] Re: [Clamav-users] Quarantine files (was Temp file issues)

On 2004-05-06, Alex V. Kovirshin wrote: >Nope, but i made little hack to clamav-milter, see my previose post... >it works good. But thanx, i'll check it out. > >On Thu, May 06, 2004 at 10:32:40AM +0100, Nigel Horne wrote: >> On Thursday 06 May 2004 8:08 am, Alex V. Kovirshin wrote: [...] Please d

[Clamav-users] New to the list w an install issue

Greetings all. I found out about clamav through the qmail list. I'm trying to install clamAV to work with qmail and qscanq. I followed the instructions in the INSTALL doc with clamav 0.70. That all went fine. In addition I am running clamd per instructions under "Running Clamd" on: http://www.qscan

[Clamav-users] Problems Compiling clamav-devel-20040506

Hi When I compile clamav-devel-20040506 I obtain: undefined reference to `messageAddLineAtTop' If I compile clamav-devel-20040505 version everything works fine. Is a clamav-devel-20040506 error or I am doing something wrong. Regards Germán Gon

[Clamav-users] undefined reference to `messageAddLineAtTop'

when compiling 20040506 clamav-devel snapshot i've got: gcc -g -O2 -o .libs/clamscan output.o getopt.o memory.o clamscan.o options.o others.o manager.o treewalk.o -L/blabla/clamav-devel/libclamav /blabla/clamav-devel/libclamav/.libs/libclamav.so -lz -lbz2 -lgmp -lpthread /blabla/clamav-

Re: [Clamav-users] Problems Compiling clamav-devel-20040506

On Thursday 06 May 2004 6:38 pm, Ing. Germán González B. wrote: > When I compile clamav-devel-20040506 I obtain: > > undefined reference to `messageAddLineAtTop' Fixed in CVS. > Germán González -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley,

Re: [Clamav-users] Mail confusion / savemail panics

Hi Nigel Citat Nigel Horne <[EMAIL PROTECTED]>: > On Wednesday 05 May 2004 7:53 pm, S=F8ren Schimkat wrote: > > > When using the same config file at shown below .. and starting > > clamav-milter with these options: > > > > --force-scan --config-file=3D/opt/clamav-0.70/etc/clamav.conf > > --quara

[Clamav-users] New Clamav / Clamav-milter Logwatch scripts

Hi guys New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz Regards Søren Schimkat --- This SF.Net email is sponsored by Sleepycat Softw

Re: [Clamav-users] undefined reference to `messageAddLineAtTop'

On Thu, 06 May 2004 19:55:01 +0200 Andrzej Migdalski <[EMAIL PROTECTED]> wrote: > when compiling 20040506 clamav-devel snapshot i've got: > > gcc -g -O2 -o .libs/clamscan output.o getopt.o memory.o clamscan.o > options.o others.o manager.o treewalk.o -L/blabla/clamav-dev

[Clamav-users] freebsd port: (clamav-milter), uid 1029: exited on signal 11

I'm using the freebsd port of clamav and clamav milter, and I get the message in the kernel log: pid 1812 (clamav-milter), uid 1029: exited on signal 11 pid 1852 (clamav-milter), uid 1029: exited on signal 11 pid 1883 (clamav-milter), uid 1029: exited on signal 11 pid 1885 (clamav-milter), uid 10

Re: [Clamav-users] freebsd port: (clamav-milter), uid 1029: exited on signal 11

On Thursday 06 May 2004 8:01 pm, Koos van den Hout wrote: > I'm using the freebsd port of clamav and clamav milter, and I get the > message in the kernel log: > > pid 1812 (clamav-milter), uid 1029: exited on signal 11 Please update to the latest version from CVS. If the problem still occurs let m

Re: [Clamav-users] New Clamav / Clamav-milter Logwatch scripts

How do they differ from the ones from the Logwatch site? Soren Schimkat wrote: > Hi guys > > New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may > download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz > > Regards Søren Schimkat > > > > > ---

Re: [Clamav-users] New Clamav / Clamav-milter Logwatch scripts

I wrote the ones included in the Logwatch distribution .. and this new version is an update matching the latest Clamav stable version. This update will, in a few days, be sent to the maintainer of logwatch if no errors is reported. - Original Message - From: "Richard Humphrey" <[EMAIL PR

Re: [Clamav-users] New Clamav / Clamav-milter Logwatch scripts

Soren Schimkat wanted us to know: >Hi guys > >New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may >download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz I'm going to assume that these scripts are not intended to be run from the commandline. I ha

[Clamav-users] Re: clamd still hangs with 0.70

Jason Haar wrote: > On Wed, May 05, 2004 at 02:15:29PM -0400, Jesse Guardiani wrote: >> past 0.70-rc a month or two ago. 0.70 (upgraded just yesterday) does the >> same thing. I'm running FreeBSD 4.8-RELEASE + daemontools. I don't see >> the seg fault, but my clamd is hanging every 5 or 10 minutes

[Clamav-users] Failure to recognise known viruses

I hope you don't mind me starting a new thread when this is related to several existing threads, but I wanted to get away from the topics where the problem is being assigned to reasons like incompatible versions or multiple config files. My explorations started a few days ago when a SomeFool virus

[Clamav-users] Source install vs RPM install

Title: Source install vs RPM install Hello all, I've installed Clamav using the clamav-0.70-rc.tar.gz and now I'd like to move to a RPM install of the most current flavor. Any issues just using the RPM or should I remove the source install first? Also is there an RPM version for RHE 3? Thank

Re: [Clamav-users] Failure to recognise known viruses

On Thu, 06 May 2004 21:41:48 -0500, Graham Toal <[EMAIL PROTECTED]> wrote: >-- >pizzabox:/usr/local/src/clamav-devel-20040505 # freshclam --version >freshclam / ClamAV version devel-20040505 >pizzabox:/usr/local/src/clamav-devel-20040505 # clamscan --version >clamscan / ClamAV version devel-2

Re: [Clamav-users] Failure to recognise known viruses

Steven Stern wrote: On Thu, 06 May 2004 21:41:48 -0500, Graham Toal <[EMAIL PROTECTED]> wrote: -- pizzabox:/usr/local/src/clamav-devel-20040505 # freshclam --version freshclam / ClamAV version devel-20040505 pizzabox:/usr/local/src/clamav-devel-20040505 # clamscan --version clamscan / Cl

Re: [Clamav-users] Failure to recognise known viruses

> Try > > clamscan --mbox /tmp/virus.test > > This tells clamscan to treat it as a mail (mime/uuencoded) file. Doh! Excuse me while I make myself very small and hide. I did actually know this when I first picked up clamav many months ago, but then I built it into my spamfilter and never had to

Re: [Clamav-users] New Clamav / Clamav-milter Logwatch scripts

Hi Tod > > > >New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may > >download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz > > I'm going to assume that these scripts are not intended to be run from > the commandline. I had to hack at it a bit befo