Re: [Clamav-users] clamd crash triggered by THIS list

2004-06-01 Thread christian laubscher
On Tue, Jun 01, 2004 at 01:41:08AM -0500, Damian Menscher wrote: > May 31 11:36:23 astro clamd[1002]: Segmentation fault :-( Bye.. > So... the message that broke it was sent to this list, specifically the > message from Samuel Benzaquen with timestamp: > Date: Mon, 31 May 2004 11:16:12 -0400

Re: [Clamav-users] Running Clamd as root?

2004-06-01 Thread Nigel Horne
On Tuesday 01 Jun 2004 07:36, Mr Mailing List wrote: > Non-priviliged users that uses clamdscan to scan files (and not > clamscan) cannot scan files that are only accessible to the user unless > clamd runs as root. And let's hope it stays that way. -- Nigel Horne. Arranger, Composer, Typesett

Re: [Clamav-users] clamd crash triggered by THIS list

2004-06-01 Thread Nigel Horne
On Tuesday 01 Jun 2004 07:41, Damian Menscher wrote: > INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clmilter.sock, F=, > T=S:4m;R:4m')dnl > > It was my understanding that the "F=" part of that meant that a milter > failure would cause messages to come in as if the milter did not exist. >

[Clamav-users] Freshclam problem since update

2004-06-01 Thread Remco Bressers
Hi, I'm running clamav on FreeBSD 5.2.1 and since i upgraded from 0.70 to 0.71 i get the following errors when running freshclam : # freshclam ClamAV update process started at Tue Jun 1 10:06:04 2004 Reading CVD header (main.cvd): OK main.cvd is up to date (version: 23, sigs: 21096, f-level: 2, bu

[Clamav-users] Customize the virus varnings.

2004-06-01 Thread Rajesh Prakasan
Hi, How can I customize the Virus warning message. Thanks in Advance. - Rajesh --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll

Re: [Clamav-users] Freshclam problem since update

2004-06-01 Thread Cedric Foll
Hi, have a look to the file freshclam.conf. Especialy directives "DatabaseDirectory" and "DatabaseOwner". I think that it's the problem. The DatabaseOwner doens't have write access to the DatabaseDirectory. Regards. Le mar 01/06/2004 à 10:15, Remco Bressers a écrit : > Hi, > > I'm running clam

Re: [Clamav-users] Freshclam problem since update

2004-06-01 Thread Remco Bressers
Hi, Thanks! That fixed my problem. The database owner was different :) Remco Cedric Foll wrote: Hi, have a look to the file freshclam.conf. Especialy directives "DatabaseDirectory" and "DatabaseOwner". I think that it's the problem. The DatabaseOwner doens't have write access to the DatabaseDirecto

[Clamav-users] (no subject)

2004-06-01 Thread Alex V. Kovirshin
Hello. I got lots of shuch mesages in log: ---SNIP--- Jun 1 15:04:02 spamd clamav-milter[885]: Access Denied: Host Unknown ([221.143.124.239]) ---SNIP--- Im using: Jun 1 15:12:37 spamd clamav-milter[15432]: clamd / ClamAV version 0.71, clamav-milter version 0.71 This happened after we moved

Re: [Clamav-users] (no subject), clamav-milter with tcpwrappers, gethostbyname for {if_name} failed

2004-06-01 Thread Alex V. Kovirshin
On Tue, Jun 01, 2004 at 03:23:42PM +0400, Alex V. Kovirshin wrote: > Hello. > > I got lots of shuch mesages in log: > ---SNIP--- > Jun 1 15:04:02 spamd clamav-milter[885]: Access Denied: Host Unknown > ([221.143.124.239]) > ---SNIP--- > > Im using: > Jun 1 15:12:37 spamd clamav-milter[15432]:

RE: [Clamav-users] Problems with clamd in local network {Scanned}

2004-06-01 Thread Pippi Langstrumpf
thats what I try to do. But how can I say PC2 to use the clamd (or the virus database) of PC1? --- Samuel Benzaquen <[EMAIL PROTECTED]> schrieb: > > > > [mailto:[EMAIL PROTECTED] > nombre de Jo Mills > > Enviado el: Jueves, 27 de Mayo de 2004 07:33 a.m. > > > > > > On Thu, May 27, 2004 at 01:06

RE: [Clamav-users] clamd crash triggered by THIS list

2004-06-01 Thread Samuel Benzaquen
> -Mensaje original- > De: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] nombre de christian > laubscher > Enviado el: Martes, 01 de Junio de 2004 03:28 a.m. > Para: [EMAIL PROTECTED] > Asunto: Re: [Clamav-users] clamd crash triggered by THIS list > > > On Tue, Jun 01, 2004 at 01:41:08AM

RE: [Clamav-users] clamd dead but subsys locked

2004-06-01 Thread Don Levey
[EMAIL PROTECTED] wrote: > Folks, > I am again in the situation where the clamav-milter seems unable to > connect to clamd. In my maillog I get the following: > > Milter: data, reject=451 4.7.1 Please try again later > > Previously, I had thought that this was a problem with the milter > its

[Clamav-users] Freshclam not responding

2004-06-01 Thread Gervase
I have been using Clamav 0.70 without problem for some time but without warning freshclam recently stopped responding. No error message except the usual notification that I had no digital signature, which is another problem which I have not solved but am not too concerned about at this stage. The

[Clamav-users] OT: Question Re: possibly infected W2K Server

2004-06-01 Thread Shaun T. Erickson
Is there anything free that I can use to scan a possibly infected Windows 2000 Server system. Norton's Internet Security says it's trying to DoS my Windows clients, on port 1433. The server is sending "MSSQL_Null_Packet_DoS" from port 445. I need to know the state of this system, asap.

RE: [Clamav-users] Problems with clamd in local network {Scanned}

2004-06-01 Thread Samuel Benzaquen
> [mailto:[EMAIL PROTECTED] nombre de Pippi > Langstrumpf > Enviado el: Martes, 01 de Junio de 2004 09:26 a.m. > > > thats what I try to do. But how can I say PC2 to use > the clamd (or the virus database) of PC1? > I'm 'guessing' that if you configure /etc/clamav.conf on PC2: - Commenting local

Re: [Clamav-users] OT: Question Re: possibly infected W2K Server

2004-06-01 Thread Rick Macdougall
http://housecall.trendmicro.com/ Regards, Rick Shaun T. Erickson wrote: Is there anything free that I can use to scan a possibly infected Windows 2000 Server system. Norton's Internet Security says it's trying to DoS my Windows clients, on port 1433. The server is sending "MSSQL_Null_Packet_DoS"

RE: [Clamav-users] OT: Question Re: possibly infected W2K Server

2004-06-01 Thread Shayne Lebrun
http://housecall.trendmicro.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Shaun T. Erickson Sent: Tuesday, June 01, 2004 10:08 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] OT: Question Re: possibly infected W2K Server Is there anything free that I

Re: [Clamav-users] OT: Question Re: possibly infected W2K Server

2004-06-01 Thread [EMAIL PROTECTED]
Shaun T. Erickson said: > Is there anything free that I can use to scan a possibly infected > Windows 2000 Server system. Norton's Internet Security says it's trying > to DoS my Windows clients, on port 1433. The server is sending > "MSSQL_Null_Packet_DoS" from port 445. I need to know the state of

RE: [Clamav-users] Clamd troubles

2004-06-01 Thread Harrell, Roger
>If you walk through the following steps, your trouble should be repaired. As you have not shared your full clamav and procmail >configuration, I will be as comprehensive as possible. Thanks for the response. I got clamdscan working late last week. I'm working on getting auto email checking under

[Clamav-users] clamav + amavis_new

2004-06-01 Thread Harald Arnold
I installed yesterday clamav (Linux). Clamd (over TCP), clamscan and clamdscan are all working fine. Now I want to continue with the step to install and configurate amavis_new using clamav. Clamd can work with sockets OR tcp. How must I configure amavis_new and clamav to cooperate. I would pref

Re: [Clamav-users] OT: Question Re: possibly infected W2K Server

2004-06-01 Thread Alex S Moore
On Tue, 2004-06-01 at 09:07, Shaun T. Erickson wrote: > Is there anything free that I can use to scan a possibly infected > Windows 2000 Server system. Norton's Internet Security says it's trying > to DoS my Windows clients, on port 1433. The server is sending > "MSSQL_Null_Packet_DoS" from port

[Clamav-users] clamav + amavis_new

2004-06-01 Thread Harald Arnold
I installed yesterday clamav (Linux). Clamd (over TCP), clamscan and clamdscan are all working fine. Now I want to continue with the step to install and configurate amavis_new using clamav. Clamd can work with sockets OR tcp. How must I configure amavis_new and clamav to cooperate. I would pre

Re: [Clamav-users] Update of multiple machines

2004-06-01 Thread Security Personnel
Chris, Clamd seems like a much better option, IMHO. Install the daemon on ONE machine, and then have all the other clients connect to it with their files-to-be-scanned. Then you only have ONE machine scanning, and one machine updating it's lists. I wish I had a link offhand to send you, hope

RE: [Clamav-users] Clamd troubles

2004-06-01 Thread [EMAIL PROTECTED]
Harrell, Roger said: >>If you walk through the following steps, your trouble should be repaired. > As you have not shared your full clamav and procmail >>configuration, I will be as comprehensive as possible. > > Thanks for the response. I got clamdscan working late last week. I'm > working > on ge

Re: [Clamav-users] Freshclam not responding

2004-06-01 Thread McKeever Chris
I have found that freshclam just like to stop occasionally, I run a cron job to see that it is still running, I guess one could get a little more creative and set it to star tback p if it is ofund to be missing --- Chris McKeever If you want to reply dire

Re: [Clamav-users] OT: Question Re: possibly infected W2K Server

2004-06-01 Thread McKeever Chris
housecall.trendmicro.com symantec.com both have free checking utilities On Tue, 1 Jun 2004 10:16 , [EMAIL PROTECTED] <[EMAIL PROTECTED]> sent: >Shaun T. Erickson said: >> Is there anything free that I can use to scan a possibly infected >> Windows 2000 Server system. Norton's Internet Security

Re: Bad ideas WAS RE: [Clamav-users] Zero bytes vbs & cpl attachment

2004-06-01 Thread Todd Lyons
Mitch (WebCob) wanted us to know: >While you are mentioning bad ideas... what about this trend of sending >bounce messages to the sender or postmaster based on the From or envelope >address of messages with virii in them. Does Clam-milter do this? (I don't Only if you start it with the -b (--boun

Re: [Clamav-users] Freshclam not responding

2004-06-01 Thread Steven Stern
On Tue, 1 Jun 2004 12:45:29 -0500, McKeever Chris <[EMAIL PROTECTED]> wrote: >I have found that freshclam just like to stop occasionally, I run a cron job to see >that it is still running, I guess one could get a little more >creative and set it to star tback p if it is ofund to be missing > W

RE: [Clamav-users] Clamd troubles

2004-06-01 Thread Harrell, Roger
>>If you walk through the following steps, your trouble should be repaired. > As you have not shared your full clamav and procmail >>configuration, I will be as comprehensive as possible. > > Thanks for the response. I got clamdscan working late last week. I'm > working > on getting auto email chec

[Clamav-users] Re: Freshclam not responding

2004-06-01 Thread Gervase
Following my own question of Tue, 2004-06-01 at 15:05, in which I wrote: > I have been using Clamav 0.70 without problem for some time but without > warning freshclam recently stopped responding. No error message except > the usual notification that I had no digital signature, which is another > p

Re: [Clamav-users] Re: Freshclam not responding

2004-06-01 Thread Fajar A. Nugraha
Gervase wrote: ERROR: Can't get information about database.clamav.net host. Seems like DNS problem. Configure your DNS server properly, or use proxy (edit freshclam.conf) What does "nslookup database.clamav.net" or "host database.clamav.net" says? It should say something like [EMAIL PROTECTED] d

Re: [Clamav-users] FreeBSD 4.8-RELEASE + clamd 0.70 (stable) hanging

2004-06-01 Thread NOC - St. Ichthus ICT
Hello Jesse, I am affraid you are NOT the only person who is experiancing this kind of problems. We are a Dutch internetprovider using Clamav as virusscanner for our mailplatform using clamavmilter / sendmail. One or two times a day clamav hangs. We have tried to use network and file sockets: does

[Clamav-users] Re: FreeBSD 4.8-RELEASE + clamd 0.70 (stable) hanging

2004-06-01 Thread Jesse Guardiani
NOC - St. Ichthus ICT wrote: > Hello Jesse, > > I am affraid you are NOT the only person who is experiancing this kind of > problems. We are a Dutch internetprovider using Clamav as virusscanner for > our mailplatform using clamavmilter / sendmail. One or two times a day > clamav hangs. We have t

Re: [Clamav-users] Re: Freshclam not responding

2004-06-01 Thread Kevin Spicer
On Tue, 2004-06-01 at 22:09, Fajar A. Nugraha wrote: > Gervase wrote: > > >ERROR: Can't get information about database.clamav.net host. > > > > > Seems like DNS problem. Configure your DNS server properly, > or use proxy (edit freshclam.conf) Make sure your firewall allows DNS over both UDP _an

RE: [Clamav-users] Re: Freshclam not responding

2004-06-01 Thread Ron Snyder
> Following my own question of Tue, 2004-06-01 at 15:05, in > which I wrote: > > I have been using Clamav 0.70 without problem for some time > but without > > warning freshclam recently stopped responding. No error > message except > > the usual notification that I had no digital signature, >

Re: [Clamav-users] Re: FreeBSD 4.8-RELEASE + clamd 0.70 (stable) hanging

2004-06-01 Thread Robert Blayzor
Jesse Guardiani wrote: Well, it's good to know I'm not alone. Just to clarify: What is your clamav version? What is your OS? I experienced some really regular hanging all last week, and I think I found the email that causes the problem, but I can't reproduce it yet. My experience with Bacula on Fre

[Clamav-users] License limit error

2004-06-01 Thread Chadwick Wachs
I have updated to ClamAV 0.71 and am running CGPAV 1.3b on OS X 10.3.3 I forgot to uninstall the old ClamAV before installing the new one... However, when the mail server now gets messages, I get the following log information: 17:29:16.92 2 QUEUE([460002]) from <[EMAIL PROTECTED]>, 1459 bytes

[Clamav-users] ScanStream: accept timeout

2004-06-01 Thread George Chelidze
Hello, I am using clamav 0.71 on RH 7.3 2.4.24 and it works fine. No major problems. I have found several messages in clamd.log like this: ERROR: ScanStream: accept timeout. What does this message mean? Also I wonder what happens to message which triggers the following warning: WARNING: ScanStrea