On Monday 02 May 2005 18:30, jef moskot wrote:
> If I do the #24 testvirus test ( http://www.webmail.us/testvirus ), the
> mail is delivered properly (which is fine, because there's no virus in
> there), but I also get a little file in /var/tmp/clamav-partial named
> something like partialmsg##
On Monday 02 May 2005 23:08, Pete 'Wolfy' Hanson wrote:
> Upgrading didn't seem to help me, though maybe it slowed down the
> crash rate - I just had another crash about an hour ago. I'm getting
> slammed at postmaster each time it crashes. This was in the logs from
> the latest crash:
>
> May
On Mon, 2005-05-02 at 16:19 -0500, Jeremy Kitchen wrote:
> I'm having lots of customers call up saying their clamd is segfaulting..
> installations that have been around for many months (0.80) and all of a
> sudden, later in the week last week.. everyone's been having problems with
> clamd segfa
On Fri, 2005-04-29 at 23:55 -0700, Joanna Roman wrote:
> How are virues like IRC.LXD.A, IRC.Gadez.A encountered
> ? When a user submit a virus, how do clamav team know
> that they are of IRC types ??? Just curious .
Generally because they are in the form of IRC client software macro
files (mIRC IN
Hi,
Is there any way of stopping freshclam from trying to notify clamd?
I use clamscan occasionally and I don't want to have the clamd daemon
running. When I run freshclam I always get the error:
ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310
I would like to tell freshc
* Andy Schofield <[EMAIL PROTECTED]> [20050503 15:12]: wrote:
> Hi,
>
> Is there any way of stopping freshclam from trying to notify clamd?
Yes! Read every line in your freshclam.conf or
man freshclam.
-Wash
http://www.netmeister.org/news/l
Andy Schofield wrote:
> Hi,
>
> Is there any way of stopping freshclam from trying to notify clamd?
>
> I use clamscan occasionally and I don't want to have the clamd daemon
> running. When I run freshclam I always get the error:
>
> ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0
On Tuesday 03 May 2005 13:13, Andy Schofield wrote:
> Is there any way of stopping freshclam from trying to notify clamd?
man freshclam.conf
> Andy
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk
Trog wrote:
Several. We don't release software updates for our own amusement. A
responsible system admin should always look to upgrade to the current
stable version as soon as possible after it is released.
The responsible admin will evaluate the pros and cons of _any_ software
release and choose
On Tue, 2005-05-03 at 08:23 -0400, Mike Lambert wrote:
> The responsible admin will evaluate the pros and cons of _any_ software
> release and choose what is best for his/her environment. The difficultly
> with any project in development, including ClamAV, is that "current" and
> "stable" do no
On Tuesday 03 May 2005 13:23, Mike Lambert wrote:
> Now that we have reports of spam crashing v0.80, it is time for me to
> test v0.84.
Your use the the word "now" makes it sound like this is something new only
recently
discovered. You seem to be ignoring the fact that this was known about, and
On Tue, 03 May 2005 08:23:38 -0400
Mike Lambert <[EMAIL PROTECTED]> wrote:
> Now that we have reports of spam crashing v0.80, it is time for me to
> test v0.84.
If I was your boss, I'd fire you. Admins who wait with an update until
a software (especially a mission critical one responsible for e-
Nigel Horne wrote:
On Tuesday 03 May 2005 13:23, Mike Lambert wrote:
Now that we have reports of spam crashing v0.80, it is time for me to
test v0.84.
Your use the the word "now" makes it sound like this is something new only recently
discovered.
Nope, just new to me. I read today's posts as thou
Trog wrote:
On Tue, 2005-05-03 at 08:23 -0400, Mike Lambert wrote:
The responsible admin will evaluate the pros and cons of _any_ software
release and choose what is best for his/her environment. The difficultly
with any project in development, including ClamAV, is that "current" and
"stable" d
On Tue, 3 May 2005, Mike Lambert wrote:
> I meant the most stable before 0.84. Sorry for the confusion.
If you had stability problem on 0.81, 0.82, and 0.83 -- did you post them ?
Sorry if I missed it, but I don't recall seeing anything posted about
stability problems on those version.
Our ow
Tomasz Kojm wrote:
On Tue, 03 May 2005 08:23:38 -0400
Mike Lambert <[EMAIL PROTECTED]> wrote:
Now that we have reports of spam crashing v0.80, it is time for me to
test v0.84.
If I was your boss, I'd fire you. Admins who wait with an update until
a software (especially a mission critical one res
ankush grover wrote at Montag, 2. Mai 2005 11:06:
> a) ... in Postfix to make it run with Postfix.
>
> b) ...
Check the "Third-party software" section on the clamav web site:
http://www.clamav.net/3rdparty.html#mta
> c)I ran the clamscan on the FC3 and clamav says there are 8 infected
> file
hi clamav-users;
i've been using clamav for a long time now, and love it
dearly. however, once in a great while i get burned by
outdated definitions. at one point it was just me not
paying attention to the freshclam logfiles (i needed to
upgrade) but
On Tuesday 03 May 2005 08:23 am, Christopher X. Candreva wrote:
> On Tue, 3 May 2005, Mike Lambert wrote:
> > I meant the most stable before 0.84. Sorry for the confusion.
>
> If you had stability problem on 0.81, 0.82, and 0.83 -- did you post them ?
> Sorry if I missed it, but I don't recall seei
On Tue, 03 May 2005 11:05:28 -0400
"henry j. mason" <[EMAIL PROTECTED]> wrote:
> hi clamav-users;
>
> i've been using clamav for a long time now, and love it
> dearly. however, once in a great while i get burned by
> outdated definitions. at one point it was just me not
>
From: henry j. mason [mailto:[EMAIL PROTECTED]
>
> i need to know when freshclam fails silently.
> i know freshclam includes options to alert on errors,
> but i'd rather have some other process looking at it
> and making sure it's doing the right thing. has anyone
> t
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Tomasz Kojm
> Sent: dinsdag 3 mei 2005 14:51
> To: ClamAV users ML
> Subject: Re: [Clamav-users] clamd segfaulting as of about thursday
>
> On Tue, 03 May 2005 08:23:38 -0400
> Mike Lambert <[EMAIL PR
* Bowie Bailey <[EMAIL PROTECTED]> [20050503 18:38]: wrote:
> From: henry j. mason [mailto:[EMAIL PROTECTED]
> >
> > i need to know when freshclam fails silently.
> > i know freshclam includes options to alert on errors,
> > but i'd rather
>>>Now that we have reports of spam crashing v0.80, it is time
>>>for me to test v0.84.
>>
>>If I was your boss, I'd fire you. Admins who wait with an update until
>>a software (especially a mission critical one responsible for e-mail
>>delivery) starts crashing are not worth any money.
>
>
> Tha
From: Odhiambo Washington [mailto:[EMAIL PROTECTED]
>
> * Bowie Bailey <[EMAIL PROTECTED]> [20050503 18:38]: wrote:
> > From: henry j. mason [mailto:[EMAIL PROTECTED]
> > >
> > > i need to know when freshclam fails silently.
> > > i know
Bowie Bailey schrieb:
> From: Odhiambo Washington [mailto:[EMAIL PROTECTED]
>
>>* Bowie Bailey <[EMAIL PROTECTED]> [20050503 18:38]: wrote:
>>
>>>From: henry j. mason [mailto:[EMAIL PROTECTED]
>>>
>>>>i need to know when freshclam fails
From: Thomas Lamy [mailto:[EMAIL PROTECTED]
>
> Bowie Bailey schrieb:
> > From: Odhiambo Washington [mailto:[EMAIL PROTECTED]
> > >
> > > Why don't people think about the KISS principle?
> > > freshclam can run in foreground, just like clamd and daemontools were
> > > written by DJB, no?
> > > I r
Odhiambo Washington wrote:
Why don't people think about the KISS principle?
freshclam can run in foreground, just like clamd and daemontools were
written by DJB, no?
I run clamd via daemontools, and I believe freshclam can also be run
same way, so no re-invention of wheels.
uh, because daem
Hello,
I have a problem with .RAR files version 3.
"RAR module failure ERROR".
This error is for the version of .RAR file. Clamd does not support V3.
How I solve the problem of scan v3 Rar archives?
With Clamscan I have --unrar option, but in Clamd this option is not
available.
Thank y
On Tue, 3 May 2005 18:58:48 +0200 in
[EMAIL PROTECTED] "David" <[EMAIL PROTECTED]>
wrote:
> I have a problem with .RAR files version 3.
>
> "RAR module failure ERROR".
>
> This error is for the version of .RAR file. Clamd does not support V3.
>
> How I solve the problem of scan v3 Rar archives
On Tue, 2005-05-03 at 18:18 +0100, Brian Morrison wrote:
> Pretty sure that clamd from 0.84 supports RAR v3 archive scanning.
Only CVS currently supports RAR3 scanning.
-trog
signature.asc
Description: This is a digitally signed message part
___
http
On Tue, May 03, 2005 at 06:18:13PM +0100, Brian Morrison wrote:
> On Tue, 3 May 2005 18:58:48 +0200 in
> [EMAIL PROTECTED] "David" <[EMAIL PROTECTED]>
> wrote:
>
> > I have a problem with .RAR files version 3.
> >
> > "RAR module failure ERROR".
> >
> > This error is for the version of .RAR fil
I am currently running ClamAV 0.83 with clamav-milter
and just recently received an infected email with a
zip attachment. Strange thing is that clamdscan does
not detect the virus while clamscan does.
# clamdscan error-mail_info.zip
/tmp/error-mail_info.zip: OK
--- SCAN SUMMARY -
Brian Morrison wrote:
>>I have a problem with .RAR files version 3.
>>
>> "RAR module failure ERROR".
>>
>>This error is for the version of .RAR file. Clamd does not support V3.
>>
>>How I solve the problem of scan v3 Rar archives?
>>
>>With Clamscan I have --unrar option, but in Clamd this option
On Tue, 3 May 2005, Pete D wrote:
> False alarm. I ended up restarting things and now both
> clamdscan and clamscan detect the virus properly.
> Weird.
You will still want to upgrade to 0.84
==
Chris Candreva -- [EMAIL PROTECTED] -- (914
is really no valid excuse to still be running 0.80,
> methinks.
>
> - Mark
>
> System Administrator Asarian-host.org
>
> ---
> "If you were supposed to understand it,
> we wouldn't call it code." - FedEx
>
>
>
>
--- Pete D <[EMAIL PROTECTED]> wrote:
> I am currently running ClamAV 0.83 with
> clamav-milter
> and just recently received an infected email with a
> zip attachment. Strange thing is that clamdscan
> does
> not detect the virus while clamscan does.
>
> # clamdscan error-mail_info.zip
> /tmp/er
On Tue, 03 May 2005 18:55:15 +0100 in
[EMAIL PROTECTED] Trog <[EMAIL PROTECTED]>
wrote:
> On Tue, 2005-05-03 at 18:18 +0100, Brian Morrison wrote:
> > Pretty sure that clamd from 0.84 supports RAR v3 archive scanning.
>
> Only CVS currently supports RAR3 scanning.
>
Oh OK, I thought the new RAR
Brian Morrison wrote:
On Tue, 03 May 2005 18:55:15 +0100 in
[EMAIL PROTECTED] Trog <[EMAIL PROTECTED]>
wrote:
On Tue, 2005-05-03 at 18:18 +0100, Brian Morrison wrote:
Pretty sure that clamd from 0.84 supports RAR v3 archive scanning.
Only CVS currently supports RAR3 scanning.
Oh OK, I thought the
On 5/2/05, Nigel Horne <[EMAIL PROTECTED]> wrote:
> On Monday 02 May 2005 23:08, Pete 'Wolfy' Hanson wrote:
> > slammed at postmaster each time it crashes. This was in the logs from
> > the latest crash:
> >
> > May 2 14:22:24 smtp clamav-milter[153]: ClamAv: setsockopt() failed
> > (Invalid argu
> Somehow or other, that -B flag is being set when clamav-milter
> restarts following the reload.
FWIW, the problem is happening on both Solaris 2.8 and 2.6 systems (on
the 2.8 system, there are no logged error messages - the milter simply
stops responding, and everything needs to be restarted).
environment: solaris 5.9, sendmail 8.13.2, clamav .84 (w/clamav-milter).
i upgraded to .84 yesterday with (as far as i could tell) no
problems. things started afterwards and ran as expected.
there were problems yesterday afternoon but i restarted things and
everything looked fine. this afternoon
On Tue, 3 May 2005, rick pim wrote:
> May 3 15:47:21 sennit sendmail[14381]: [ID 801593 mail.error]
> j43JlKch014381: Milter (clamav): error connecting to filter: Connection
> refused by /var/clamav/clmilter.sock
> May 3 15:47:21 sennit sendmail[14381]: [ID 801593 mail.info] j43JlKch014381:
>
> Not to be obvious, but was clamav-milter running ? (And clamd, if you run
> with --external ).
>
meant to include that. yesterday clamav-milter had died. today
it hadn't:
# ps -ef | grep clam
root 19241 21218 0 16:37:14 pts/30:00 grep clam
clamav 13432 1 0 20:20:17 ?
A. On Tue, 2005-05-03 at 21:41, rick pim wrote:
> environment: solaris 5.9, sendmail 8.13.2, clamav .84 (w/clamav-milter).
>
> i upgraded to .84 yesterday with (as far as i could tell) no
> problems. things started afterwards and ran as expected.
>
> there were problems yesterday afternoon b
I had the same problem (timeout before data read) and I fixed it by
starting clamav-milter with the option "--max-children=50".
Actually, I was receiving this error even with version .80, but I had
not realized that!
Currently, I use the following command to start the milter:
/usr/local/sbin/cla
On Tue, 3 May 2005, Nigel Horne wrote:
> clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc. Mind you I am
> worried about the mode 777 for clamd.sock, if nothing else that seems
> like a security breach to me.
I don't recall the particulars, but I ran into the same problem where
clamd.soc
I'm seeing similar symptoms on Solaris 8 and 6, as I reported in the
"clamd segfaulting as of about thursday" thread.The rest of this
is reposted from that thread:
- Post 1
I am not explicity using the -B flag, nor do I believe that I need it.
The error is occurring in clamav-milter (
> None without some information such as options used to start
> clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc.
clamav-milter is started with:
clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
here's an extract from clamd.conf:
# grep -v ^# clamd.conf | grep -
Ah, and here's my startup command:
/usr/local/sbin/clamav-milter --dont-log-clean --headers --local
--pidfile=/var/clamav/clamav-milter.pid --quiet
/var/clamav/clamav-milter.sock
--
Pete Hanson
http://www.well.com/user/wolfy
http://www.fotolog.net/wolfy
_
henry j. mason said:
> hi clamav-users;
> any ideas? i'm thinking about cobbling together something
> in perl to run from a cron job.
>
> tia
> henry
Screw the daemon - run it out of cron.
Script: freshclam.sh
#!/bin/bash
# run freshclam at random intervals 3 times
On Tue, 3 May 2005, rick pim wrote:
> clamav-milter is started with:
> clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
OK, without --external, clamav-milter isn't useing clamd, it's useing it's
calling libclamav directly.
You might try adding --external. It looks like the
> You might try adding --external. It looks like the people posting about
> clamav-milter problems are all not useing --external.
That´s true. It is not clear in the docs that --external is faster or more
reliable. I will change my configuration and test it. Thanks for the tip!
Jose Hime
__
On Tuesday 03 May 2005 22:07, rick pim wrote:
>
> > None without some information such as options used to start
> > clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc.
>
> clamav-milter is started with:
> clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
>
> here's
On Tuesday 03 May 2005 22:23, Jose Luis Hime wrote:
> > You might try adding --external. It looks like the people posting about
> > clamav-milter problems are all not useing --external.
>
> That´s true. It is not clear in the docs that --external is faster or more
> reliable.
It's more secure, u
On Tuesday 03 May 2005 22:26, Nigel Horne wrote:
> You don've have a
don't
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk
___
http://lurker.clamav.net/list/clamav-user
On Tue, 3 May 2005, Nigel Horne wrote:
> > That´s true. It is not clear in the docs that --external is faster or more
> > reliable.
>
> It's more secure, uses less memory and doesn't use IPC so it's faster.
I'm not saying it's more or less anything. However, since I'm using
--external and not
Excuse me for my misunderstanding, but is there any special configuration I
should do to use --external ?
I read the man page for clamav-milter and I have one doubt:
-e, --external
Usually clamav-milter scans the
> Mind you I am
> worried about the mode 777 for clamd.sock, if nothing else that seems
> like a security breach to me.
true. but it seems to do that itself:
# ls -al /var/clamav/
total 4
drwxr-x--- 2 clamav clamav 512 May 3 17:02 ./
drwxr-xr-x 32 root sys 512 Feb 11 13:21
rick pim wrote:
> > Mind you I am
> > worried about the mode 777 for clamd.sock, if nothing else that
> seems > like a security breach to me.
>
> true. but it seems to do that itself:
>
> srwxrwxrwx 1 clamav clamav 0 May 3 17:06 clamd.sock=
Stop me if I'm wrong but I think that's
On Tue, 3 May 2005 [EMAIL PROTECTED] wrote:
> > > Mind you I am
> > > worried about the mode 777 for clamd.sock, if nothing else that
> > seems > like a security breach to me.
> >
> > true. but it seems to do that itself:
> >
> > srwxrwxrwx 1 clamav clamav 0 May 3 17:06 clamd.soc
On Tue, 3 May 2005 16:24:04 -0700
<[EMAIL PROTECTED]> wrote:
> rick pim wrote:
> > > Mind you I am
> > > worried about the mode 777 for clamd.sock, if nothing else that
> > seems > like a security breach to me.
> >
> > true. but it seems to do that itself:
> >
> > srwxrwxrwx 1 clamav clam
Dennis Peterson wrote:
> > any ideas? i'm thinking about cobbling together something
> > in perl to run from a cron job.
> Screw the daemon - run it out of cron.
At last, a sensible suggestion :) Cronning it does make the daemon
hanging pretty much a moot point :)
Matt
_
Mark wrote:
> > If I was your boss, I'd fire you. Admins who wait with an update until
> > a software (especially a mission critical one responsible for e-mail
> > delivery) starts crashing are not worth any money.
> That seems a bit harsh.
Actually, I was thinking that Tomasz ought to stop bei
Matt Fretwell said:
> Dennis Peterson wrote:
>
>> >any ideas? i'm thinking about cobbling together something
>> >in perl to run from a cron job.
>
>
>> Screw the daemon - run it out of cron.
>
>
> At last, a sensible suggestion :) Cronning it does make the daemon
> hanging pretty much a mo
65 matches
Mail list logo
