Hi,
After upgrade from 0.70 to 0.81, we found the following message in our
clamd.log for all Clean Message
clamav-milter[32063]: Failed to delete X-Virus-Status header 1
We currently using ClamAV version 0.81, clamav-milter version 0.81b
and use
CLAMAV_FLAGS="--max-children=20 -CNlH /var/run/cl
On Monday 31 Jan 2005 08:40, [EMAIL PROTECTED] wrote:
>
> Hi,
>
> After upgrade from 0.70 to 0.81, we found the following message in our
> clamd.log for all Clean Message
> clamav-milter[32063]: Failed to delete X-Virus-Status header 1
It is a warning that you should ignore.
> Teresa
--
Nig
Hi,
I noticed running clam 0.80 (yes i should update quickly) that
clamd exited:
Jan 29 20:14:00 relay3 kernel: pid 553 (clamd), uid 106: exited on signal
11
Any hints what this could be? Not hardware failure i hope?
Bye,
Mipam.
___
http://lists.clam
Hi!
I installed just before the new clamav version. Due to the reason that I
use clamav together with sendmail to scan my emails I appreciate that
the new milter doesn't need clamd anymore.
My problem: If I start clamav-milter with the following command
/usr/local/sbin/clamav-milter -qlo -N -m 20 /
On Saturday 29 Jan 2005 16:34, aikempshall wrote:
> Hi
>
> Got problems with freshclam since upgrading to 0.81. This is the before
> are after of my /var/log/clamav-update
>
> --
> ClamAV update process started at Fri Jan 28 19:53:36 2005
> main.cvd is up to date
On Mon, 31 Jan 2005 10:53:47 +0100
"Clamav" <[EMAIL PROTECTED]> wrote:
> I don't have any information about which viruses are detected. I only
This is recorded in my syslog:
Jan 31 17:21:08 rinse clamav-milter[2798]: File quarantined as
/var/spool/virusmails/050131/j0V9Kvin002795.Worm.SomeFo
On Sun, 30 Jan 2005 at 18:30:47 +, marlon brown wrote:
> Hi i've installed Clamav and the scan runs ok but when
> I freshclam I recieve this message.
>
> [EMAIL PROTECTED]:~> freshclam
> ERROR: Please edit the example config file
> /etc/freshclam.conf.
> ERROR: Please edit the example config f
> "Clamav" <[EMAIL PROTECTED]> wrote:
> > I don't have any information about which viruses are
> detected. I only
>
> This is recorded in my syslog:
>
> Jan 31 17:21:08 rinse clamav-milter[2798]: File quarantined
> as /var/spool/virusmails/050131/j0V9Kvin002795.Worm.SomeFool.P
>
> Also
On Mon, 31 Jan 2005 10:38:13 +0100 (MET)
Mipam <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I noticed running clam 0.80 (yes i should update quickly) that
> clamd exited:
>
> Jan 29 20:14:00 relay3 kernel: pid 553 (clamd), uid 106: exited on signal
> 11
>
> Any hints what this could be? Not hardware f
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of jijo
> Sent: Sunday, January 30, 2005 7:05 AM
> To: clamav-users@lists.clamav.net
> Subject: [Clamav-users] updateerror
>
>
> I have ClamAV 0.80-2 and I want to update it to clamAV 0.81-2
> I have instal
edit it with vi in /etc/clamd.conf
for help check the man page of clamd.conf
and check the pdf docs with it
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Made change to account for milter logging changes in ClamAV 0.81
Enjoy,
Brett
Options:
-h Help
-f Log file
-l Log type - valid types are: amavis and milter - Defaults to milter
-r Show recipients
-s Show senders - Milter only
-c Minimum virus count for unique hosts
-v Minimum virus type c
--- Stefan Hornburg <[EMAIL PROTECTED]> wrote:
> On Mon, 31 Jan 2005 10:38:13 +0100 (MET)
> Mipam <[EMAIL PROTECTED]> wrote:
>
> > Hi,
> >
> > I noticed running clam 0.80 (yes i should update
> quickly) that
> > clamd exited:
> >
> > Jan 29 20:14:00 relay3 kernel: pid 553 (clamd), uid
> 106: e
On Mon, 31 Jan 2005, N Fung wrote:
>
> --- Stefan Hornburg <[EMAIL PROTECTED]> wrote:
>
> > On Mon, 31 Jan 2005 10:38:13 +0100 (MET)
> > Mipam <[EMAIL PROTECTED]> wrote:
> >
> > > Hi,
> > >
> > > I noticed running clam 0.80 (yes i should update
> > quickly) that
> > > clamd exited:
> > >
> >
Hi,
I think there is a bug in clamd.
I'm using SuSE 9.1 and the nightly clamav built. I tied different versions
also.
Clamed hangs if you send
SESSION
STREAM
as fast as possible. You get no response. You have to send STREAM again.
If you insert a delay between SESSION and STREAM everything wor
On Mon, 2005-01-31 at 15:12 +0100, Christian Hilgers wrote:
> Hi,
>
> I think there is a bug in clamd.
>
> I'm using SuSE 9.1 and the nightly clamav built. I tied different versions
> also.
>
> Clamed hangs if you send
>
> SESSION
> STREAM
>
> as fast as possible. You get no response. You have
Hi everybody
I try to update my database virus with freshclam but i
can't, i obtain :
yavin:/var/lib/clamav# freshclam
ClamAV update process started at Thu Jan 27 16:42:05
2005
ERROR: Can't query current.cvd.clamav.net
Connecting via proxy
Reading CVD header (main.cvd): ERROR: Malformed CVD
header
My clamav-daemon install on a Debian Woody machine died over the weekend,
complaining about a corrupt main.cvd. Restarting it generates the following
error:
Starting ClamAV daemon: LibClamAV Error: cli_cvdload(): Can't create
temporary directory /tmp/clamav-4b99171a8ec40453
LibClamAV Error: Malf
Gary Buckmaster wrote:
Starting ClamAV daemon: LibClamAV Error: cli_cvdload(): Can't create
temporary directory /tmp/clamav-4b99171a8ec40453
Dude, is your /tmp writable by clamav user? perhaps it's full ... :)
I once had thousands of clamav-* directory on my /tmp.
Remove those, and clamd is hap
On Sun, 30 Jan 2005 22:35:47 -0500
Stephen Gran <[EMAIL PROTECTED]> wrote:
> The debian init script has been sending the kill signal to the whole
> process group for some time, and now it checks if the pid is negative
> first. If htere is a problem with the package supplied init script, let
> me k
On Mon, 2005-01-31 at 09:03 -0600, Gary Buckmaster wrote:
> Sure enough, /tmp was filled and clamd was able to start again, albeit
> complaining about an out-of-date install. The error message was very
> misleading. Maybe something for the developers to consider.
>
>
> >Starting ClamAV daemon:
> -Ursprüngliche Nachricht-
> Von: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Im Auftrag von Trog
> Gesendet: Monday, January 31, 2005 3:14 PM
> An: ClamAV users ML
> Betreff: Re: [Clamav-users] SESSION BUG?
>
>
> On Mon, 2005-01-31 at 15:12 +0100, Christian Hilgers wrote:
> > Hi,
>
>Not misleading at all - "Can't create temporary directory
>/tmp/clamav-4b99171a8ec40453" points directly to the problem.
>
>-trog
I was referring more to this portion of the error:
LibClamAV Error: Malformed database file /var/lib/clamav//main.cvd
In retrospect makes sense, but was still very
> Made change to account for milter logging changes in ClamAV 0.81
>
> Enjoy,
> Brett
>
> Options:
> -h Help
> -f Log file
> -l Log type - valid types are: amavis and milter - Defaults to milter
> -r Show recipients
> -s Show senders - Milter only
> -c Minimum virus count for unique hosts
>
Sure enough, /tmp was filled and clamd was able to start again, albeit
complaining about an out-of-date install. The error message was very
misleading. Maybe something for the developers to consider.
Thanks for your help!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECT
On Mon, 31 Jan 2005 at 22:50:29 +0800, imacat wrote:
>
> Than you for your hint, though I cannot access
> http://people.debian.org/~sgran/debian now. (people.debian.org and
> packages.debian.org are down?)
Yes.
http://lists.debian.org/debian-devel-announce/2005/01/msg00013.html
Though the d
Made change to account for milter logging changes in ClamAV 0.81
Enjoy,
Brett
Options:
-h Help
-f Log file
-l Log type - valid types are: amavis and milter - Defaults to milter
-r Show recipients
-s Show senders - Milter only
-c Minimum virus count for unique hosts
-v Minimum virus type c
On Monday 31 January 2005 10:25, Ken Jones wrote:
> > Made change to account for milter logging changes in ClamAV 0.81
> In the heading you refer to version .36. The attached version if .35 and
> appears not to function on the new logs
Oops... accidentally sent the .35 version. I just resent
All,
My understanding was that with version 81 that previous X-Virus headers
would be removed by the milter. Here are the errors I am getting from the
logs ...
Jan 31 09:08:22 mail01 clamav-milter[11685]: Failed to delete
X-Virus-Status header 1
Jan 31 09:08:22 mail01 clamav-milter[11685]: Faile
On Mon, 2005-01-31 at 16:06 +0100, Christian Hilgers wrote:
> >
> > It's a known limitation.
>
> Will this be fixed?
I expect so, when the protocol is replaced with something else.
>
> I did some performance testing when using SESSION.
> The first scan is ok but then the performance gets bad.
Folks,
I made a how-to guide showing the build steps to make an anti-spam / anti-virus
gateway on a redhat box. Please feel free to use this guide to build your own.
I've built a few using these instructions and they seem to work fine.
Also, if you see any improvements - feel free to send me ed
On Mon, 31 Jan 2005 11:44:21 -0500
[EMAIL PROTECTED] wrote:
> Folks,
>
> I made a how-to guide showing the build steps to make an anti-spam /
> anti-virus
> gateway on a redhat box. Please feel free to use this guide to build your
> own.
> I've built a few using these instructions and they se
oops - follow thru is everything:
http://www.carbonite.com/guides/scannerbuild.html
sorry about the snafu.
Brian G
Quoting Stefan Hornburg <[EMAIL PROTECTED]>:
> On Mon, 31 Jan 2005 11:44:21 -0500
> [EMAIL PROTECTED] wrote:
>
> > Folks,
> >
> > I made a how-to guide showing the build steps to
On Mon, 31 Jan 2005 [EMAIL PROTECTED] wrote:
> oops - follow thru is everything:
>
> http://www.carbonite.com/guides/scannerbuild.html
>
> sorry about the snafu.
This won't work with sendmail huh?
___
http://lists.clamav.net/cgi-bin/mailman/listin
You can get Mailscanner - Spamassassin - ClamAV to work with sendmail, but I
just prefer postfix better. The conf file is easier to understand.
The mailscanner web site has some good docs on building with sendmail.
Brian G
Quoting Sam <[EMAIL PROTECTED]>:
> On Mon, 31 Jan 2005 [EMAIL PROTECTE
Mailscanner was designed to work with postfix (for better or worse if you
follow the various Mailscanner/Postfix flamewars). If you want to use a
scenario like this with sendmail, amavisd-new includes a sendmail milter
that apparently works very well.
-Original Message-
From: [EMAIL PROTE
On Monday 31 Jan 2005 13:57, N Fung wrote:
> I'm seeing quite a few signal-11 with my clamav-milter too:
>
> pid 47506 (clamav-milter), uid 32768: exited on signal 11
Attach a gdb stack trace to an email to [EMAIL PROTECTED]
___
http://lists.clamav.net/
Hi all
On some mail attachments Clamav(0.80) reports Oversized.Zip, but the
compression ratio of this attachment is good
For example:
In raw mail message
--
Content-Type: application/msword;
name="Vane2 OFF-design without mesh.doc"
Content-Transfer-Encoding: base64
Content-Disposition: attach
On Mon, 31 Jan 2005 20:50:30 +0300
Maxim Cherniavsky <[EMAIL PROTECTED]> wrote:
> unzip -lv
> /tmp/mesh.doc
> Archive: /tmp/mesh.doc
> Length MethodSize Ratio Date Time CRC-32Name
> -- --- - -
On Mon, 31 Jan 2005 09:18:30 -0600
"Gary Buckmaster" <[EMAIL PROTECTED]> wrote:
> >Not misleading at all - "Can't create temporary directory
> >/tmp/clamav-4b99171a8ec40453" points directly to the problem.
> >
> >-trog
>
> I was referring more to this portion of the error:
>
> LibClamAV Error:
Came across this and thought many of you may enjoy it.
http://www.eweek.com/article2/0,1759,1756636,00.asp?kc=ewnws013105dtx1k599
--
Sam Morris, Owner
Loganet Internet Service
Logan IA, United States of America
712-644-3578
___
http://lists.clamav
On Jan 31, 2005, at 1:35 PM, Sam wrote:
Came across this and thought many of you may enjoy it.
http://www.eweek.com/article2/0,1759,1756636,00.asp?
kc=ewnws013105dtx1k599
Is it better than the previous one I didn't think we'd ever see as
working?
Write virus
email to random people with subj
> just prefer postfix better.
Getting OT, please help me understand what Mailscanner does - offlist
probably would be best.
I'm currently running Postfix/ClamAV/SpamAssassin on a relatively low-volume
mail server, calling via procmail. What benefits would I get by using
Mailscanner or Amavis-ne
On Mon, 31 Jan 2005 12:35:13 -0600 (CST)
Sam <[EMAIL PROTECTED]> wrote:
> Came across this and thought many of you may enjoy it.
>
> http://www.eweek.com/article2/0,1759,1756636,00.asp?kc=ewnws013105dtx1k599
"Administrators who have seen .rar-packed malware say that none of the
messages have
On Mon, 31 Jan 2005, Tomasz Kojm wrote:
> "Administrators who have seen .rar-packed malware say that none of the
> messages have been stopped by their anti-virus defenses."
>
> ClamAV has been successfully stopping most of the Goldun variants with
> its (often generic) signatures for RAR archives.
On Mon, 31 Jan 2005 13:23:10 -0600 (CST)
Sam <[EMAIL PROTECTED]> wrote:
> On Mon, 31 Jan 2005, Tomasz Kojm wrote:
> > "Administrators who have seen .rar-packed malware say that none of
> > the messages have been stopped by their anti-virus defenses."
> >
> > ClamAV has been successfully stopping
"Experts say .rar files carrying viruses have been sailing past commercial
anti-virus products and finding their way into the mailboxes of users, who
are often unfamiliar with the file format. Administrators who have seen
.rar-packed malware say that none of the messages have been stopped by their
On Mon, 31 Jan 2005 13:41:48 -0600
"Gary Buckmaster" <[EMAIL PROTECTED]> wrote:
> "Experts say .rar files carrying viruses have been sailing past
> commercial anti-virus products and finding their way into the
> mailboxes of users, who are often unfamiliar with the file format.
> Administrators wh
Hi!
I was using 0.80 and getting excellents results with it.
Today i upgraded to 0.81 but when the clamdscan is called (from the
MailScanner program) it says:
WARNING: Ignoring option --unzip: please edit clamd.conf instead.
WARNING: Ignoring option --unarj: please edit clamd.conf instead.
WARNING
On Mon, 31 Jan 2005 14:37:50 -0600
Mario Alberto Cruz Gartner <[EMAIL PROTECTED]> wrote:
> Hi!
> I was using 0.80 and getting excellents results with it.
> Today i upgraded to 0.81 but when the clamdscan is called (from the
> MailScanner program) it says:
>
> WARNING: Ignoring option --unzip: ple
Tomasz Kojm wrote:
Is there some licensing issue prohibiting them from unpacking the
A technical issue - the archives are encrypted.
I see it's possible to use unrar as an external tool with clamscan. Is
there a way to get clamd to do the same? We've been seeing a jump in
"RAR module failure ER
On Mon, 31 Jan 2005, Kelson wrote:
> > A technical issue - the archives are encrypted.
>
> I see it's possible to use unrar as an external tool with clamscan. Is there
> a way to get clamd to do the same? We've been seeing a jump in "RAR module
I think the problem is, if the archive is encryp
Ok, but the thing its that with 0.80 version works very fine!
And, i've found a similar report from other user on this list... :S
On Mon, 31 Jan 2005 21:40:12 +0100, Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Mon, 31 Jan 2005 14:37:50 -0600
> Mario Alberto Cruz Gartner <[EMAIL PROTECTED]> wrote
Mario Alberto Cruz Gartner wrote:
Hi!
I was using 0.80 and getting excellents results with it.
Today i upgraded to 0.81 but when the clamdscan is called (from the
MailScanner program) it says:
WARNING: Ignoring option --unzip: please edit clamd.conf instead.
WARNING: Ignoring option --unarj: pleas
OH really thanks, i did the mentioned change and everything it's
working right now.
Again, Thks a lot! =)
On Mon, 31 Jan 2005 15:56:09 -0500, Chris Conn <[EMAIL PROTECTED]> wrote:
>
>
> Mario Alberto Cruz Gartner wrote:
> > Hi!
> > I was using 0.80 and getting excellents results with it.
> > To
On Mon, Jan 31, 2005 at 10:50:29PM +0800, imacat said:
> On Sun, 30 Jan 2005 22:35:47 -0500 Stephen Gran <[EMAIL PROTECTED]>
> wrote:
> > The debian init script has been sending the kill signal to the whole
> > process group for some time, and now it checks if the pid is
> > negative first. If hte
Why should clamav-milter be picky about this? Suppose I am using a tcp
socket and the sendmail server is not local? This error checking can
cause problems for people that have the sendmail package installed, but
are not using for clamav.
While one could argue that it isn't reasonable to have
Hi,
this issue/bug is already known and patched in CVS.
Try the lastest CVS or my attached patch.
For more information see:
http://thread.gmane.org/gmane.comp.security.virus.clamav.devel/1572
Greetings Sven
PS: I hope the attachment plain-text :-/.
begin 666 freshclam-http10.patch
M+2TM(&[
On Mon, 31 Jan 2005 17:41:43 -0500
Stephen Gran <[EMAIL PROTECTED]> wrote:
> The problem is that when you kill `cat $pidfile`, you don't end up
> signalling the thread that is listening for signal events, and it has to
> be communicated over to that thread by the thread that wrote the pid
> file.
Hi clamav-users;
today i tried to upgrade my clamav to the latest CVS version ( and
usually it goes smoothly), but today i stumble a error while doing
make process the error was:
gcc -g -O2 -o .libs/clamscan output.o getopt.o memory.o cfgparser.o misc.o
clamscan.o options.o others.o manager.o tr
On Tue, 1 Feb 2005 09:44:41 +0700
zen <[EMAIL PROTECTED]> wrote:
> Hi clamav-users;
>
> today i tried to upgrade my clamav to the latest CVS version ( and
> usually it goes smoothly), but today i stumble a error while doing
> make process the error was:
>
> gcc -g -O2 -o .libs/clamscan output.o
Hello Tomasz,
Tuesday, February 1, 2005, 9:48:49 AM, you wrote:
> On Tue, 1 Feb 2005 09:44:41 +0700
> zen <[EMAIL PROTECTED]> wrote:
>> Hi clamav-users;
>>
>> today i tried to upgrade my clamav to the latest CVS version ( and
>> usually it goes smoothly), but today i stumble a error while doing
I'd like to be able to redirect the infected email to a quarantine folder
or someplace where I can look at the headers to see where it's really
coming from. Looking throug the .81 docs (and using the adobe search
feature) I only find two mentions of quarantine, and neither do this.
Is it possib
On Mon, 31 Jan 2005 22:20:12 -0600 (CST)
Sam <[EMAIL PROTECTED]> wrote:
> I'd like to be able to redirect the infected email to a quarantine folder
I suppose you can check the man page:
man clamav-milter
I believe it's "-U, --quarantine-dir=DIR".
--
imacat ^_*'
[EMAIL PROTECTED]
Hi,
I want to use clamav to filter incoming and outgoing
files from http, ftp, etc. on Redhat 9 box.
presently using clamav to filter sendmail mails,
working fine.
Please guide me which is available better and free
solution.
Thanks for support
__
65 matches
Mail list logo
