You should check this variable on the clamav.conf file
# Mark potential archive bombs as viruses (0 disables the limit)
ArchiveMaxCompressionRatio 20
-Samuel
- Original Message -
From: "Dave Stocker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 11, 2004 12:30 PM
Subject
Hello,
I'm using clamav 0.70, debian woody, kernel 2.4.18 and msg 'ERROR: You
must specify at least one database mirror.' is present.
with clamav 0.65 it was ok. I only made upgrade
thx.
---
This SF.Net email is sponsored by Sleepycat Softwar
On Tuesday 11 May 2004 7:02 pm, Matias Lopez Bergero wrote:
> I have seen one time that clamav-milter has had more processes than the
> number specified by the "--max-children" flag.
This is perfectly normal and is nothing to worry about.
> Should I first stop clamd and then try to stop clamav-
Hi,
I have to say that the answer to this problem was easier than we thought.
Just by adding the lines:
---
ulimit -s 2048
ulimit -n 10240
---
to the init.d script that starts clamav-milter, now I can have the 1024
threads that glibc 2.2 limits. (RED HAT 7.3)
The first line tells glibc to spawn t
On Mon, 2004-05-10 at 08:39, Kevin Spicer wrote:
> I submitted a false positive of Joke.BinLaden last week (through the web
> interface), but I haven't heard anything of it, and its not shown up in
> the virusdb list. Should I resubmit?
It will be removed from database soon.
Thanks,
/ddm
--
De
Is it advisable to use softlimits with clamd?
exec /usr/local/bin/setuidgid qscand \
/usr/local/bin/softlimit -a 4000 /usr/local/sbin/clamd
- Original Message -
From: "Lutz Petersen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 12, 2004 4:30 AM
Subject: Re: [
On Tue, May 11, 2004 at 05:05:24PM -0300, KlauX Anderson said:
> Hello,
>
> I'm using clamav 0.70, debian woody, kernel 2.4.18 and msg 'ERROR: You
> must specify at least one database mirror.' is present.
>
> with clamav 0.65 it was ok. I only made upgrade
What are the contents of /etc/clamav/f
Rich wrote:
Is it advisable to use softlimits with clamd?
exec /usr/local/bin/setuidgid qscand \
/usr/local/bin/softlimit -a 4000 /usr/local/sbin/clamd
An immediate solution would be to use softlimit and clamdwatch.
So,
clamd exceeds memory usage -> ulimit prevents allocationg memory ->
On Tue, 2004-05-11 at 00:58, Mitch (WebCob) wrote:
> I'm sure there are many (including myself) that could be convinced to host
> mirrors once the concept stabilizes...
>
> Or alternatively, you could allow download of the db and functions so people
> wouldn't have to keep hitting your server...
Hi,
since my freshclam got daily 308 yesterday I've experiencing an unusual
high load on my mail servers running clamd:
8:56am up 56 days, 22:54, 4 users, load average: 6,61, 5,17, 5,73
PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND
16070 mail 18 0 19500 19M 828 R
ClamAV will not tag a message if spamassassin marks it as SPAM.
Messages not marked as SPAM:
X-Clamav-status: No
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11)
X-Spam-Level:
X-Spam-Status: No, hits=0.3 required=5.0 tests=NO_REAL_NAME autolearn=no
version=2.63
Status:
Messa
Sorry for the delay in testing this.
On May 6, 2004, at 12:48, Mr Mailing List wrote:
On May 6, 2004, at 11:40, Nigel Horne wrote:
On Thursday 06 May 2004 7:38 am, Mr Mailing List wrote:
www sendmail[4015]: i2UL7MvV004015: SYSERR(root): out of memory:
Cannot allocate memory
This is using ClamA
At 08:01 11-05-2004 +0100, you wrote:
On Tue, 2004-05-11 at 00:58, Mitch (WebCob) wrote:
> I'm sure there are many (including myself) that could be convinced to host
> mirrors once the concept stabilizes...
I'm
certainly willing to open the front end, but I need to find out how easy
it is to mirror
Am Mo, 2004-05-10 um 20.18 schrieb Todd Lyons:
> [EMAIL PROTECTED] wanted us to know:
>
> ># Enable debug messages in libclamav.
> >Debug
>
> Turn that off. Wherever your temp directory is, it's full right now
> because debug mode doesn't delete the files after clamav is done
> scanning them.
Re
Hello, All!
I have installed Clamav stable release 0.70 (clamav-milter 0.70j) on
FreeBSD 4.8-RELEASE from FreeBSD ports. I have sendmail from base system
(8.12.8p1).
Clamav-milter flags are:
--postmaster-only --local --outgoing --max-children=50 \
[EMAIL PROTECTED] --dont-scan-on-error \
--hea
Christopher wrote:
ClamAV will not tag a message if spamassassin marks it as SPAM.
[..]
How do I know that ClamAV is scanning email marked as SPAM?
Christopher,
it must be problem in your procmails setting not in the clamav itself.
Im running three milters (SpamAss-milter -> ClamAV-milter ->
On Tue, May 11, 2004 at 04:33:26PM +0700, Alex Masterov wrote:
> Hello, All!
>
> I have installed Clamav stable release 0.70 (clamav-milter 0.70j) on
> FreeBSD 4.8-RELEASE from FreeBSD ports. I have sendmail from base system
> (8.12.8p1).
>
> Clamav-milter flags are:
>
> --postmaster-only --lo
On Monday 10 May 2004 7:21 pm, Matias Lopez Bergero wrote:
> I can't stop clamav-milter with the term signal. (kill pid)
> I must use the kill switch to end the process and after that remove by
> hand the sock created by clamav-milter to star the process again.
You don't say your operating syste
> Please forward the original e-mail to me, zipped with password 'virus'.
>
Hello !
I've got some of these too, and I sent'm through your submission form,
without any feed-back yet. I sent some other samples two days ago, still no
feed back
Actually, anything I sent through your submission form
On Tue, 11 May 2004, Alex Masterov wrote:
> Hello, All!
>
> I have installed Clamav stable release 0.70 (clamav-milter 0.70j) on
> FreeBSD 4.8-RELEASE from FreeBSD ports. I have sendmail from base system
> (8.12.8p1).
>
> Clamav-milter flags are:
>
> --postmaster-only --local --outgoing --max-chil
- Original Message -
From: "Kevin Spicer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 11, 2004 3:01 AM
Subject: RE: [Clamav-users] Re: Virus Alias Database
> On Tue, 2004-05-11 at 00:58, Mitch (WebCob) wrote:
> > I'm sure there are many (including myself) that could b
On Fri, 7 May 2004, Noel Jones wrote:
> At 12:27 PM 5/7/04, Mike Lambert wrote:
>
> >The advantage is sending a 5xx reject instead of a 2xx "message accepted
> >for delivery" to the connecting mta. It is now up to the connecting mta
> >to deal with the message.
> >
> >It does reduce bandwidth if y
On Tuesday 11 May 2004 1:47 pm, Mike Lambert wrote:
> On Tue, 11 May 2004, Alex Masterov wrote:
>
> > --postmaster-only --local --outgoing --max-children=50 \
> > [EMAIL PROTECTED] --dont-scan-on-error \
> > --headers --quarantine-dir=/usr/local/share/clamav/infected
> I have expereinced this as w
I haven;t had any problems with other compilations, but this time the
'latest' gives me a hard time:
Making all in clamscan
make[2]: Entering directory
`/export/home/turgut/sunos/clamav-devel-20040511/clamscan'
source='../shared/output.c' object='output.o' li
Kevin Spicer wrote:
> On Mon, 2004-05-10 at 18:24, jef moskot wrote:
>> So, if I type in "Netsky", I don't see any ties to SomeFool. If I put in
>> "SomeFool", I don't see any immediate reference to Netsky, but if I poke
>> around a little, it becomes apparent that we're talking about the same
>>
>>>From /etc/clamav.conf
>>>
>>># TCP port address.
>>>#TCPSocket 3310
>>>
>>>clamd will only run as local socket or inet socket not both at the same
>>>time. You probably have clamd running as local so when clamdscan tries
>>>to connect to the port it gets a connection refused. You will need to
On Tue, May 11, 2004 at 05:22:02PM +0300, turgut kalfaoglu wrote:
> I haven;t had any problems with other compilations, but this time the
> 'latest' gives me a hard time:
>
>
> Making all in clamscan
> make[2]: Entering directory
> `/export/home/turgut/sunos
I have several entries like the following on my maillog:
May 11 00:01:56 myserver.com sendmail[10505]: i4B4wPY10505:
milter_write(clamav): write(D) returned -1, expected 5: Broken pipe
What does it mean?
Thanks
Cecilia Mtz
---
This SF.Net
Hi All,
We have seen instances where we are sending out zip files which are
picked up as virus-Oversized Zip.
Can we disable this particular option without disabling scanning of
Archives?
Typical size ~ 15Mb before compression 600Kb after compression.
Regards,
Dave
On Tue, 11 May 2004 17:30:13 +0100
Dave Stocker <[EMAIL PROTECTED]> wrote:
> Hi All,
>
> We have seen instances where we are sending out zip files which
> are
> picked up as virus-Oversized Zip.
> Can we disable this particular option without disabling scanning of
> Archives?
> Typical
Nigel Horne wrote:
On Monday 10 May 2004 7:21 pm, Matias Lopez Bergero wrote:
I can't stop clamav-milter with the term signal. (kill pid)
I must use the kill switch to end the process and after that remove by
hand the sock created by clamav-milter to star the process again.
You don't say your
> This might be slightly off-base here, but anyone know if clamd leaks and if
> there's any current patch? I'm running 0.70-rc. Below's the memory usage
> showing clamd eating up the mem resource.
> 2621 qscand15 0 815M 477M 352 S 0.5 47.4 462:01 1 clamd
Same problem here, on diff
- Original Message -
From: "Dave Stocker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 11, 2004 12:30 PM
Subject: [Clamav-users] Problems with False Positives for Oversized Zip.
> Hi All,
>
> We have seen instances where we are sending out zip files which are
> pick
On Tue, 11 May 2004, Alex V. Kovirshin wrote:
; On Tue, May 11, 2004 at 05:22:02PM +0300, turgut kalfaoglu wrote:
; > I haven;t had any problems with other compilations, but this time the
; > 'latest' gives me a hard time:
; >
; >
; > Making all in clamscan
; > ../shared/output.c:296: error: `LOG
Is it even possible for ClamAV on an MTA to block WALLON-style virii that
only include a link to themselves?
http://secunia.com/virus_information/9323/
[EMAIL PROTECTED]805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
perl -e"print join er,reverse',',
35 matches
Mail list logo
