Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Tomasz Kojm
On Mon, 08 Nov 2004 10:57:01 +0700 "Fajar A. Nugraha" <[EMAIL PROTECTED]> wrote: > Hi, > > I got these errors on Linux Console running ClamAV 0.80 : > > LibClamAV Error: cli_calloc(): Can't allocate memory (131282 bytes). > calloc_problem: Cannot allocate memory > LibClamAV Error: cli_calloc()

[Clamav-users] Logging and SIGHUP

2004-11-08 Thread Dominic Hulewicz
Due to the low LogFileMaxSize limit I have set in clamd.conf, my clamd log file occasionally hits the maximum size and correctly reports "LOGGING DISABLED (Maximal log file size exceeded)". A weekly logrotate script renames clamd.log and SIGHUP's the clamd process, but this does not restart loggin

Re: [Clamav-users] Logging and SIGHUP

2004-11-08 Thread Tomasz Kojm
On Mon, 8 Nov 2004 10:07:58 + Dominic Hulewicz <[EMAIL PROTECTED]> wrote: > Due to the low LogFileMaxSize limit I have set in clamd.conf, my clamd > log file occasionally hits the maximum size and correctly reports > "LOGGING DISABLED (Maximal log file size exceeded)". > > A weekly logrotate

Re: [Clamav-users] Logging and SIGHUP

2004-11-08 Thread Trog
On Mon, 2004-11-08 at 10:14, Tomasz Kojm wrote: > On Mon, 8 Nov 2004 10:07:58 + > Dominic Hulewicz <[EMAIL PROTECTED]> wrote: > > > Due to the low LogFileMaxSize limit I have set in clamd.conf, my clamd > > log file occasionally hits the maximum size and correctly reports > > "LOGGING DISABLED

Re: [Clamav-users] Logging and SIGHUP

2004-11-08 Thread Dominic Hulewicz
On Mon, Nov 08, 2004 at 10:20:11AM +, Trog wrote: | Well, it should rotate the log file on a SIGHUP, and indeed does on the | two systems I do it on. My setup: > clamd daemon 0.80 (OS: linux-gnu, ARCH: i386, CPU: i686) > Log file size limited to 1048576 bytes. > Running as user clamav (UID 66

Re: [Clamav-users] Logging and SIGHUP

2004-11-08 Thread Trog
On Mon, 2004-11-08 at 10:26, Dominic Hulewicz wrote: > On Mon, Nov 08, 2004 at 10:20:11AM +, Trog wrote: > | Well, it should rotate the log file on a SIGHUP, and indeed does on the > | two systems I do it on. > > My setup: > > > clamd daemon 0.80 (OS: linux-gnu, ARCH: i386, CPU: i686) > > Log

Re: [Clamav-users] Logging and SIGHUP

2004-11-08 Thread Tomasz Kojm
On Mon, 8 Nov 2004 10:26:57 + Dominic Hulewicz <[EMAIL PROTECTED]> wrote: > On Mon, Nov 08, 2004 at 10:20:11AM +, Trog wrote: > | Well, it should rotate the log file on a SIGHUP, and indeed does on > the| two systems I do it on. > > My setup: > > > clamd daemon 0.80 (OS: linux-gnu, ARCH:

Re: [Clamav-users] Cron Job for CLAMD

2004-11-08 Thread Tomasz Papszun
On Sat, 06 Nov 2004 at 18:51:13 -0500, Christopher X. Candreva wrote: > On Sat, 6 Nov 2004, Niek wrote: > > > Don't hijack threads, i.e.: do not start a new topic by replying to an old > > mail. > > You know what ? the people constantly saying "Don't hijack threads" is far > more anoying then th

[Clamav-users] New Clamav Logwatch scripts

2004-11-08 Thread Søren Schimkat
Hi Guys New scripts available, for those of you using Logwatch: http://www.schimkat.dk/clamav/ Regards Søren Schimkat ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Jason Frisvold
> -Original Message- > From: Nigel Horne [mailto:[EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clamav and the CR Vulnerability > > It was blocked by my set up. Maybe qmail-scanner is the > problem, try using clamav's internal scanner. I'm not running qmail-scanner, I'm running simscan

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Fajar A. Nugraha
Tomasz Kojm wrote: On Mon, 08 Nov 2004 10:57:01 +0700 "Fajar A. Nugraha" <[EMAIL PROTECTED]> wrote: LibClamAV Error: cli_calloc(): Can't allocate memory (131282 bytes). calloc_problem: Cannot allocate memory Fixed in CVS: Mon Nov 8 10:01:48 CET 2004 (tk) -

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Lionel Bouton
Fajar A. Nugraha wrote the following on 11/08/2004 02:39 PM : Tomasz Kojm wrote: From http://cvs.sourceforge.net/viewcvs.py/clamav/clamav-devel/ChangeLog? it has been over six hours and the change hasn't make it there yet. (Humming, still waiting patiently :) ) I don't know how they handle viewcvs

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Joe Maimon
Fajar A. Nugraha wrote: Hi, I got these errors on Linux Console running ClamAV 0.80 : LibClamAV Error: cli_calloc(): Can't allocate memory (131282 bytes). calloc_problem: Cannot allocate memory LibClamAV Error: cli_calloc(): Can't allocate memory (131282 bytes). calloc_problem: Cannot allocate

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Tomasz Kojm
On Mon, 08 Nov 2004 09:08:30 -0500 Joe Maimon <[EMAIL PROTECTED]> wrote: > Perhaps this should be configurable for the folk who want clamd to > exit on memory alloc failure and those who do not? No problem: Mon Nov 8 15:24:18 CET 2004 (tk) - * clamd: new direct

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Simon Burr
On Mon, Nov 08, 2004 at 08:30:18AM -0500, Jason Frisvold wrote: [Test #17 (Eicar virus hidden using the "CR Vulnerability") from ] [www.testvirus.org ] >I'm not running qmail-scanner, I'm running simscan. Either way, the email >that comes in doesn't ap

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Joe Maimon
Tomasz Kojm wrote: On Mon, 08 Nov 2004 09:08:30 -0500 Joe Maimon <[EMAIL PROTECTED]> wrote: Perhaps this should be configurable for the folk who want clamd to exit on memory alloc failure and those who do not? No problem: Mon Nov 8 15:24:18 CET 2004 (tk) -

[Clamav-users] clamuko - howto scan downloads while save them?

2004-11-08 Thread Alexander Stielau
my setup: Debian/sid vendor-kernel 2.6.8-1-k7 dazuko-module 2.0.4 (vanilla, debian-package is very old) clamv 0.80 (vanilla, because of the debian-package clamav-daemon 0.80-2 seems not to use the clamuk/dazuko-interface: Nov 8 16:59:47 taurus2 clamd[2814]: Clamuko is no

Re: [Clamav-users] clamuko - howto scan downloads while save them?

2004-11-08 Thread Matt
Alexander Stielau wrote: > | taurus2:/tmp/foo# cp clam.cab /tmp/ > | cp: cannot open `clam.cab' for reading: Operation not permitted > | > | BUT: > | > | taurus2:/tmp/foo# mv clam.cab /tmp/ > | taurus2:/tmp/foo# > ` > > Is it possible to use something like ClamukoScanOnWri

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Jason Haar
Joe Maimon wrote: Since when was this decided to be a good idea? Suppose I am running clamd under ulimit to control its memory usage. I dont want it to die on out of memory issues caused by scan jobs, making it unavailable for possible jobs that wont cause OOM and terminating all other scanning

Re: [Clamav-users] clamuko - howto scan downloads while save them?

2004-11-08 Thread Tomasz Kojm
On Mon, 8 Nov 2004 17:32:10 +0100 Alexander Stielau <[EMAIL PROTECTED]> wrote: > but it is possible to download 'infected' files, and write them to > disk: You must tune some #defines in dazuko sources IIRC. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http

Re: [Clamav-users] clamav-milter segfault

2004-11-08 Thread Internet Helpdesk
I tried clamav-devel-20041105 (with clamav-milter version 0.80p) and now everything seems to start OK, but it doesn't do anything... It must be my server that is f***ed up, but if you can give me some pointers, I would be grateful. I tested clamav-devel-20041105 on another server, and it works jus

[Clamav-users] Problems with clamav-milter

2004-11-08 Thread Ken Jones
After downloading and installing the nightly snapshot(11/7 -> 11/8), I am experencing problems with the clamav-milter. during processing the first email, the milter dies and in the clamd log file the following error is logged. Any attempt to start the milter again produces the same error being log

[Clamav-users] Permission denied when sending notifications

2004-11-08 Thread Jose Gervasio Gomiz
Hi everyone.   I'm using clamd/clamav-milter 0.80 + Sendmail 8.12.11-4.6 on Fedora Core 2.   I have "--postmaster-only" in /etc/sysconfig/clamav-milter, because I need to get email notifications when a virus is found.   The problem is that notifications fail. Extract from /var/log/maillog: No

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Jason Frisvold
> -Original Message- > From: Simon Burr [mailto:[EMAIL PROTECTED] > Subject: Re: [Clamav-users] Clamav and the CR Vulnerability > > Interesting; I've just tested the email www.testvirus.org > sends out for > test #17 and I've found that ClamAV detects the Eicar virus > via both the > ho

RE: [Clamav-users] Problems with clamav-milter

2004-11-08 Thread Evan Pierce
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Jones Sent: Monday, November 08, 2004 8:34 PM To: [EMAIL PROTECTED] Subject: [Clamav-users] Problems with clamav-milter After downloading and installing the nightly snapshot(11/7 -> 11/8), I am expere

[Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread Tim Howell
I think a lot of us may use ClamAV on gateway SMTP servers that eventually deliver mail to Microsoft Exchange. Have any of you thought of what it would take to use Clam to scan mailboxes stored on an Exchange server? Clam is great, and it catches almost everything that gets sent to us, but there

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread Matthew.van.Eerde
Tim Howell wrote: > Have any of you thought of what it would take to use Clam to scan mailboxes > stored on an > Exchange server? Hmmm... Get a list of mailboxes via LDAP Connect to each mailbox in turn using Mail::IMAPClient Walk through all folders in the mailbox Download each mail item to a te

Re: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread Matt
[EMAIL PROTECTED] wrote: > Tim Howell wrote: > > Have any of you thought of what it would take to use Clam to scan > > mailboxes stored on an Exchange server? > > Hmmm... > Get a list of mailboxes via LDAP > Connect to each mailbox in turn using Mail::IMAPClient > Walk through all folders in the

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread Matthew.van.Eerde
Matt wrote: > [EMAIL PROTECTED] wrote: > >> Tim Howell wrote: >>> Have any of you thought of what it would take to use Clam to scan >>> mailboxes stored on an Exchange server? >> >> Hmmm... >> Get a list of mailboxes via LDAP >> Connect to each mailbox in turn using Mail::IMAPClient >> Walk throu

Re: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread Niek
On 11/8/2004 10:30 PM +0200, Tim Howell wrote: I think a lot of us may use ClamAV on gateway SMTP servers that eventually deliver mail to Microsoft Exchange. Have any of you thought of what it would take to use Clam to scan mailboxes stored on an Exchange server? Clam is great, and it catches alm

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread clamav
On Mon, 8 Nov 2004, Tomasz Kojm wrote: > > I also dont particulary think its wise for a library to include any > > calls to exit. Libraries you link your program to should not terminate > > your program without your direct permission. > > libclamav doesn't contain any exit()-like calls. Many de

Re: [Clamav-users] Problems with clamav-milter

2004-11-08 Thread clamav
On Mon, 8 Nov 2004, Ken Jones wrote: > After re-installing .80 release code, I need to re-boot before the milter > will sucessfully start. > > I have tried this on both a Solaris 9 X86 and a Solaris 8 X86 box, both > running .80 release just fine. Wow! I've not seen a unix proggie protected fro

RE: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread clamav
On Mon, 8 Nov 2004, Jason Frisvold wrote: > > Looks like something is stripping the virus out before it ever hit > clamav.. However, I did get a copy with the virus in it, and clamscan > doesn't detect it... I'm not sure why though ... > > [EMAIL PROTECTED] cur]# clamscan --mail > 1099939661

Re: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread clamav
On Mon, 8 Nov 2004, Tim Howell wrote: > I think a lot of us may use ClamAV on gateway SMTP servers that > eventually deliver mail to Microsoft Exchange. Have any of you thought > of what it would take to use Clam to scan mailboxes stored on an > Exchange server? Clam is great, and it catches al

RE: [Clamav-users] ClamAV and Exchange mailboxes...

2004-11-08 Thread clamav
On Mon, 8 Nov 2004 [EMAIL PROTECTED] wrote: > Tim Howell wrote: > > Have any of you thought of what it would take to use Clam to scan mailboxes > > stored on an > > Exchange server? > > Hmmm... > Get a list of mailboxes via LDAP > Connect to each mailbox in turn using Mail::IMAPClient > Walk thr

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Simon Burr
On Mon, Nov 08, 2004 at 01:52:42PM -0500, Jason Frisvold wrote: >Looks like something is stripping the virus out before it ever hit clamav.. >However, I did get a copy with the virus in it, and clamscan doesn't detect >it... I'm not sure why though ... Okay, this is getting strange. I've taken t

Re: [Clamav-users] Problems with clamav-milter

2004-11-08 Thread Ken Jones
> On Mon, 8 Nov 2004, Ken Jones wrote: >> After re-installing .80 release code, I need to re-boot before thepolitely >> milterimmediately >> will sucessfully start. >> >> I have tried this on both a Solaris 9 X86 and a Solaris 8 X86 box, both >> running .80 release just fine. > > > Wow! I've not

Re: [Clamav-users] Problems with clamav-milter

2004-11-08 Thread Ken Jones
> After downloading and installing the nightly snapshot(11/7 -> 11/8), I am > experencing problems with the clamav-milter. > > during processing the first email, the milter dies and in the clamd log > file the following error is logged. Any attempt to start the milter again > produces the same err

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Graham Toal
> > Looks like something is stripping the virus out before it ever hit > > clamav.. However, I did get a copy with the virus in it, and clamscan > > doesn't detect it... I'm not sure why though ... > > > > [EMAIL PROTECTED] cur]# clamscan --mail > > 1099939661.22577.jake.emcyber.com\,S\=1306\:2

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Fajar A. Nugraha
Tomasz Kojm wrote: On Mon, 08 Nov 2004 09:08:30 -0500 Joe Maimon <[EMAIL PROTECTED]> wrote: Perhaps this should be configurable for the folk who want clamd to exit on memory alloc failure and those who do not? No problem: Mon Nov 8 15:24:18 CET 2004 (tk) -

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Joe Maimon
Fajar A. Nugraha wrote: Tomasz Kojm wrote: On Mon, 08 Nov 2004 09:08:30 -0500 Joe Maimon <[EMAIL PROTECTED]> wrote: Perhaps this should be configurable for the folk who want clamd to exit on memory alloc failure and those who do not? No problem: Mon Nov 8 15:24:18 CET 2004 (tk) ---

Re: [Clamav-users] Clamav and the CR Vulnerability

2004-11-08 Thread Tomasz Kojm
On Mon, 08 Nov 2004 21:41:56 -0600 Graham Toal <[EMAIL PROTECTED]> wrote: > > > Looks like something is stripping the virus out before it ever hit > > > clamav.. However, I did get a copy with the virus in it, and > > > clamscan doesn't detect it... I'm not sure why though ... > > > > > > [EMAI

Re: [Clamav-users] new Wiki site

2004-11-08 Thread Rob Chanter
On Sat, Nov 06, 2004 at 01:33:41PM +0100, Thomas Lamy wrote: > Luca Gibelli wrote: > >Hello Graham Toal, > > > > > >>What's needed is an installation script which installs a completely > >>independent copy in one of two locations, so you can double-buffer > >>the installs. > > > > > >"./configure -

Re: [Clamav-users] Permission denied when sending notifications

2004-11-08 Thread George Chelidze
Hello, Jose Gervasio Gomiz wrote: Hi everyone. I'm using clamd/clamav-milter 0.80 + Sendmail 8.12.11-4.6 on Fedora Core 2. I have "--postmaster-only" in /etc/sysconfig/clamav-milter, because I need to get email notifications when a virus is found. The problem is that notifications fail. Extr

Re: [Clamav-users] clamd don't die on memory allocation problem?

2004-11-08 Thread Tomasz Kojm
On Tue, 09 Nov 2004 10:34:53 +0700 "Fajar A. Nugraha" <[EMAIL PROTECTED]> wrote: > Tue Nov 9 10:28:54 2004 -> > /var/spool/exim/scan/1CRMgW-0004yX-Mv/1CRMgW-0004yX-Mv.eml: > Worm.Bagle.AU FOUND > Tue Nov 9 10:28:55 2004 -> ERROR: pthread_create failed > Tue Nov 9 10:28:55 2004 -> ERROR: pthre