On Tue, 21 Sep 2004 14:43:15 BST Trog wrote:
> On Tue, 2004-09-21 at 14:23, Frank Elsner wrote:
> > On Tue, 21 Sep 2004 13:03:32 +0200 Tomasz Kojm wrote:
> >
> > [ ... ]
> >
> > > Almost all changes are backward compatible but the point of the renaming
> > > was to force users to review/edit th
On Wednesday 22 September 2004 15:17, ahellary shaped the electrons to say:
> hi there
>
> im keen to start a web based stats page on virus es caught etc ... i seem
> to remember a thread where one of you guys were developing such a thing can
> you please advise
>
I used an application called clamd
freshclam needs to define
BIND_8_COMPAT
for compiling dns.c
Regards,
--
/jørgen nørgaard
[EMAIL PROTECTED]
Phone: +45 3332 5770
http://smarttv.dk/
Getting the following error when testing ClamAV RC2:
Starting clamd: LibClamAV Error: Signature for TR.DiskEraser.9 is too short
LibClamAV Error: cli_parse_add(): Problem adding signature
LibClamAV Error: Problem parsing signature at line 12089
LibClamAV Error: Problem parsing database at line 1208
Rick Macdougall wrote:
Grant Supp wrote:
I'm using qmail, qmail-scanner 1.23 and ClamAV 0.75.1 on CentOS 3.1
(recompile of RHEL3.) Ocassionally, I get the "Unable to open file or
directory ERROR" message in my clamd.log. Now I know this sounds like
a permissions problem, but bear with me. This o
> Can someone explain the on-access scanning bit to me? I'm not sure I =
> understand what dazuko is and how to use it... Off-list is fine, =
> although I'm sure others may have questions too... :)
On-access scanning means that files are being scanned each time you touch
them, i.e. perform cop
On Thu, Sep 23, 2004 at 10:56:57PM +1000, James Turnbull said:
> Getting the following error when testing ClamAV RC2:
>
> Starting clamd: LibClamAV Error: Signature for TR.DiskEraser.9 is too short
> LibClamAV Error: cli_parse_add(): Problem adding signature
> LibClamAV Error: Problem parsing sign
Grant Supp wrote:
Rick Macdougall wrote:
I had a similar problem Sunday but with qmail-scanner opening the
quarantine-attachments.db file. Turned out my softlimit was too low.
Perhaps this is your problem as well.
Regards,
RIck
My softlimit is set to 50MB which is pretty large as far as I kno
Stephen Gran wrote:
On Thu, Sep 23, 2004 at 10:56:57PM +1000, James Turnbull said:
Getting the following error when testing ClamAV RC2:
Starting clamd: LibClamAV Error: Signature for TR.DiskEraser.9 is too short
LibClamAV Error: cli_parse_add(): Problem adding signature
LibClamAV Error: Problem
On Thu, 2004-09-23 at 16:28, James Turnbull wrote:
> >>LibClamAV Error: Malformed database file
> >>/tmp/clamav-50dd544511651de2/viruses.db
You have a problem somewhere because this filename is not used anymore.
So you either have some stale db files, or your downloaded from a stale
site.
-trog
> -Original Message-
> From: Knut Hildebrandt [mailto:[EMAIL PROTECTED]
> On-access scanning means that files are being scanned each
> time you touch
> them, i.e. perform copy, open, save operations. H+BDV wrote a
> kernel module
> to provide this functionality, the so called dazuko (G
Trog wrote:
On Thu, 2004-09-23 at 16:28, James Turnbull wrote:
LibClamAV Error: Malformed database file
/tmp/clamav-50dd544511651de2/viruses.db
You have a problem somewhere because this filename is not used anymore.
So you either have some stale db files, or your downloaded from a stal
Jason Frisvold wanted us to know:
>Ah... Uhh.. Wow... Wouldn't that cause a HUGE amount of overhead? Esp on a server?
Yes it would, but if it prevents viruses from getting onto desktops, it
has served its purpose. Note that this mode of on-access scanning
doesn't seem to be so much intended f
I am using database.clamav.net - is this not a current site anymore?
Damn. The install reset my default database directory back to the
default /usr/local/ directory.
Fixed it! Thanks
James Turnbull
smime.p7s
Description: S/MIME Cryptographic Signature
On Thu, 23 Sep 2004 05:58:24 +0200
"Remi Thomas" <[EMAIL PROTECTED]> wrote:
> Ok, you can download the clam database handling and file scanner at
> http://uscanit.free.fr/lib.zip
It looks OK. Thanks for publishing it.
--
oo. Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\.
> -Original Message-
> From: Todd Lyons [mailto:[EMAIL PROTECTED]
>
>
> Yes it would, but if it prevents viruses from getting onto
> desktops, it
> has served its purpose. Note that this mode of on-access scanning
> doesn't seem to be so much intended for mail servers. Instead its
> u
I've just seen the following warnings in the console window I display
syslog entries in:
ClamAV update process started at Thu Sep 23 19:57:23 2004
WARNING: DNS record is older than 3 hours.
WARNING: Invalid DNS reply.
Now, it doesn't look like a biggie, but what hasn't updated for >3
hours? On
There seems to be a problem with clamav-milter's --pidfile option.
It successfully writes the PID to the file but then it also puts a trailing newline.
This makes it unsuitable for the standard
kill `cat /the/pidfile`
trick.
As a workaround this seems to work:
kill `head --bytes=-1 /the/pidfil
> > Ok, you can download the clam database handling and file scanner at
> > http://uscanit.free.fr/lib.zip
>
> It looks OK. Thanks for publishing it.
>
Can you clarify for the rest of us? Does that mean the clam team is
accepting this sort of usage of the db?
m/
---
Does anyone know of a site where I can download the clamav virus
definitions? The links that I used to use do not work anymore. I also did
an archive search and the links listed there no longer work. We are not
directly connected to the internet with our aix systems, but I would like
the peace o
Is there any simple way to specify which particular message in a mailbox
file is infected?
I asked about this before and it was suggested that I use the --debug tag,
but this generates a huge amount of data that I can't seem to pipe
anywhere useful. And even if I could, that doesn't translate int
On Thu, 23 Sep 2004 09:29:09 -0700
Todd Lyons <[EMAIL PROTECTED]> wrote:
> Jason Frisvold wanted us to know:
>
> >Ah... Uhh.. Wow... Wouldn't that cause a HUGE amount of overhead?
> >Esp on a server?
>
> Yes it would, but if it prevents viruses from getting onto desktops,
> it has served its
Using 0.80rc2 - Do pattern files include jpg exploits or
is this something each site deployes? If the latter, are
there guidelines for doing so? I've got several terrabytes
of images to be concerned about and little room to get it
wrong :-)
dp
jef moskot wrote:
Is there any simple way to specify which particular message in a mailbox
file is infected?
If you're referring to an mbox, you can user 'formail -s' to break the
mbox into individual messages. I'd probably pipe the result from
formail into procmail, and use procmail's filter
>
> I've just seen the following warnings in the console window I display
> syslog entries in:
>
> ClamAV update process started at Thu Sep 23 19:57:23 2004
> WARNING: DNS record is older than 3 hours.
> WARNING: Invalid DNS reply.
>
> Now, it doesn't look like a biggie, but what hasn't updat
On Thu, 23 Sep 2004 12:42:00 -0700
"Mitch (WebCob)" <[EMAIL PROTECTED]> wrote:
> > > Ok, you can download the clam database handling and file scanner
> > > at http://uscanit.free.fr/lib.zip
> >
> > It looks OK. Thanks for publishing it.
> >
>
> Can you clarify for the rest of us? Does that mean t
Hi,
I'm running clamav 0.75-3. I just happened to notice when I started
clamd I got some odd messages. Are these anything to worry about? Or
are these Not supported signature types for the .80 release of clamav?
LibClamAV debug: Loading /var/tmp/clamav-7762060f263cf476/daily.db
LibClamAV debug:
I have been running clamd and freshclam for quite
some time with amavis-new, and today, received this message and can't figure out
why it's happening. Any help is greatly appreciated!!
ClamAV update process started at Thu Sep 23 15:17:00 2004Reading CVD
header (main.cvd): OKmain.cvd is up
Rick Macdougall wrote:
Hi,
I know this was reported earlier, but just to back up the initial
posters message.
2004-09-21 17:03:04.990049500 LibClamAV Warning: Unsupported message
format `disposition-notification'
2004-09-21 17:03:04.990056500
[EMAIL PROTECTED]/work/./msg:
Bad format or broken
On Thu, 23 Sep 2004, jef moskot wrote:
> Is there any simple way to specify which particular message in a mailbox
> file is infected?
No.
You can use formail to split the mailbox into individual messages, procmail
to scan each message and sort to invected and good mailboxes.
This has been post
On Thu, 23 Sep 2004, Christopher X. Candreva wrote:
> On Thu, 23 Sep 2004, jef moskot wrote:
> > Is there any simple way to specify which particular message in a
> > mailbox file is infected?
> No.
Would it be difficult for the ClamAV team to offer such output when doing
a "clamscan --mbox"? Some
> > > > Ok, you can download the clam database handling and file scanner
> > > > at http://uscanit.free.fr/lib.zip
> > >
> > > It looks OK. Thanks for publishing it.
> > >
> >
> > Can you clarify for the rest of us? Does that mean the clam team is
> > accepting this sort of usage of the db?
>
> The
Hi,
I get this message a lot from the crod Daemon.
why?
i run linux crux 1.2 and mimedefang+SA
--
Sincerely,
Meni Shapiro
---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for
33 matches
Mail list logo
