Re: [Clamav-users] clamav latest version cant install

2006-01-12 Thread Stephen Gran
On Thu, Jan 12, 2006 at 01:46:14PM +0600, Meshbah Uddin Ahmed said: > hi, > i m using debian + postfix + mailscanner + clamav. all wrere running > well. i want to install recent published clamav, but there was so many > warning. and its not work. If you're running Debian, there are binary pakages

Re: [Clamav-users] anti-virus imap scanner

2006-01-12 Thread Eric Cunningham
Would ClamSMTP be sufficient? Would Amivisd be overkill? I found several listed on the Postfix website but would be interested in hearing what others have used and why. I'm using postfix/amavis/spamassassin/clam on my home mail server. Not sure what you mean by overkill, but it wasn't diffic

[Clamav-users] Secunia 18379

2006-01-12 Thread Steve Brown
Hi guys, Can somebody confirm that the upx.c buffer overflow vulnerability referred to at http://secunia.com/advisories/18379 (2006-01-10) is the one that was fixed in CVS on Sept 16. Steve ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Secunia 18379

2006-01-12 Thread Tomasz Kojm
On Thu, 12 Jan 2006 12:08:46 + Steve Brown <[EMAIL PROTECTED]> wrote: > Hi guys, > > Can somebody confirm that the upx.c buffer overflow vulnerability > referred to at http://secunia.com/advisories/18379 (2006-01-10) is the > one that was fixed in CVS on Sept 16. No, that's not that one. --

Re: [Clamav-users] Secunia 18379

2006-01-12 Thread Stephen Gran
On Thu, Jan 12, 2006 at 12:08:46PM +, Steve Brown said: > Hi guys, > > Can somebody confirm that the upx.c buffer overflow vulnerability > referred to at http://secunia.com/advisories/18379 (2006-01-10) is the > one that was fixed in CVS on Sept 16. That is certainly my impression. -- -

Re: [Clamav-users] Secunia 18379

2006-01-12 Thread Stephen Gran
On Thu, Jan 12, 2006 at 12:52:16PM +, Stephen Gran said: > On Thu, Jan 12, 2006 at 12:08:46PM +, Steve Brown said: > > Hi guys, > > > > Can somebody confirm that the upx.c buffer overflow vulnerability > > referred to at http://secunia.com/advisories/18379 (2006-01-10) is the > > one that

[Clamav-users] Re: Secunia 18379

2006-01-12 Thread Steve Brown
Tomasz Kojm wrote: >>Can somebody confirm that the upx.c buffer overflow vulnerability >>referred to at http://secunia.com/advisories/18379 (2006-01-10) is the >>one that was fixed in CVS on Sept 16. > No, that's not that one. Ok, thanks for the prompt answer. Can you tell me if the Secunia vuln

Re: [Clamav-users] freshclam daemon dying

2006-01-12 Thread Nepenthes Development Team
Hi, On 1/11/06, Dale Blount <[EMAIL PROTECTED]> wrote: > It (finally?) happened again, here's the debugging data I've collected > so far. I've left it running incase you need me to attach gdb to it > (please provide gdb commands you'd like me to run). > Having a look on the debug data you provid

[Clamav-users] Re: Secunia 18379

2006-01-12 Thread Steve Brown
Stephen Gran wrote: > No, sorry, it should be the CVS commit on Tue Jan 10 00:46:40 2006 - I > had Sept 16 selected for diffs and got stupid about which was which. Aha, got it! Thanks very much for your help. -S ___ http://lurker.clamav.net/list/clama

[Clamav-users] (no subject)

2006-01-12 Thread Clay Hummer
running ClamAV on Mac OSX.4.4 via fink and the ClamAVX GUI. tried to update to .88 on fink and received this message: configure: WARNING: resolv.h: present but cannot be compiled configure: WARNING: resolv.h: check for missing prerequisite headers? configure: WARNING: resolv.h: see the Aut

Re: [Clamav-users] freshclam daemon dying

2006-01-12 Thread Dale Blount
On Thu, 2006-01-12 at 14:22 +0100, Nepenthes Development Team wrote: > Hi, > > On 1/11/06, Dale Blount <[EMAIL PROTECTED]> wrote: > > It (finally?) happened again, here's the debugging data I've collected > > so far. I've left it running incase you need me to attach gdb to it > > (please provide

Re: [Clamav-users] clamav and gmp

2006-01-12 Thread Brian Morrison
On Thu, 12 Jan 2006 17:06:40 +0300 in [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Maybe configure seek gmp somwhere in wrong place. > > Can anybody help me??? Try configure --help and see if there is an option to tell configure where gmp can be found. -- Brian Morrison bdm at fenrir dot o

Re: [Clamav-users] freshclam daemon dying

2006-01-12 Thread Nepenthes Development Team
On 1/12/06, Dale Blount <[EMAIL PROTECTED]> wrote: > The hung freshclam is still running and I will be happy to run gdb on it > if you provide me the sequence of commands I need to run. Last time I > did something like this I managed to completely crash the hung app > instead of getting more data

Re: [Clamav-users] freshclam daemon dying

2006-01-12 Thread Stephen Gran
On Thu, Jan 12, 2006 at 03:46:17PM +0100, Nepenthes Development Team said: > http://phpfi.com/95896 > thats what i'd recommend to patch this, everything else is _much_ more work. I'm not sure that SO_RCVTIMEO is fully portable (at last the first docs I found seem to imply it's not defined everywhe

Re: [Clamav-users] freshclam daemon dying - GDB Backtrace included

2006-01-12 Thread Dale Blount
> gdb --pid= > > once attached > > bt > > will give the backtrace. > Here it is, it's a long one. # gdb --pid=17435 GNU gdb 6.3 Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute c

Re: [Clamav-users] freshclam daemon dying - GDB Backtrace included

2006-01-12 Thread Nepenthes Development Team
On 1/12/06, Dale Blount <[EMAIL PROTECTED]> wrote: > # gdb --pid=17435 > GNU gdb 6.3 looks like compiled without debugging symbols to me, so its pretty useless ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Large number of Mytob.MM this morning?

2006-01-12 Thread Jay Lee
Anyone else seeing a lot of Mytob.MM getting thru today? ClamAV doesn't seem to be blocking it on the mail server, Norton catches it if the virus defs are up to date (today's work, yesterday's don't). I've already submitted a sample to the website, any hope of getting this blocked soon? Jay

Re: [Clamav-users] Large number of Mytob.MM this morning?

2006-01-12 Thread Dennis Peterson
Jay Lee said: > Anyone else seeing a lot of Mytob.MM getting thru today? ClamAV doesn't > seem to be blocking it on the mail server, Norton catches it if the > virus defs are up to date (today's work, yesterday's don't). I've > already submitted a sample to the website, any hope of getting this >

Re: [Clamav-users] Large number of Mytob.MM this morning?

2006-01-12 Thread Jay Lee
Dennis Peterson wrote: Jay Lee said: Anyone else seeing a lot of Mytob.MM getting thru today? ClamAV doesn't seem to be blocking it on the mail server, Norton catches it if the virus defs are up to date (today's work, yesterday's don't). I've already submitted a sample to the website, any hop

RE: [Clamav-users] Large number of Mytob.MM this morning?

2006-01-12 Thread Randal, Phil
Jay Lee wrote: > >>I've already submitted a sample to the website, any hope of getting > >>this blocked soon? > > Did you submit it to the online testing web page to see if > that system > > handles it differently from yours? > > I have now yes, I tried sending the raw email message, the > at

Re: [Clamav-users] Large number of Mytob.MM this morning?

2006-01-12 Thread Jay Lee
_ Scan results File: qvyexy.zip Date: 01/12/2006 18:03:37 (CET) AntiVir 6.33.0.77/20060112 found [HEUR-DBLEXT/Worm.Gen] Avast 4.6.695.0/20060111 found nothing AVG 718/20060111found [BackDoor.Wootbot.LD] Avira 6.33.0.77/20060112 found [HEUR-DBLEXT/Worm.G

[Clamav-users] Re: [Clamav-devel] Patch to fix broken sendfile on Linux 2.6

2006-01-12 Thread imacat
Hi, I'm a ClamAV user from Taiwan. I'm experiencing this same problem. But I did not see this issue solved in the just-released ClamAV 0.88. Now I have to patch ClamAV in order for it to work properly. Will it be solved in the future version of ClamAV? -- Best regards, imacat ^_*' <[EMAIL

Re: [Clamav-users] cpu utilization suddenly over 90% all the time

2006-01-12 Thread Bill Shupp
Trog wrote: On Mon, 2006-01-09 at 15:37 -0800, Bill Shupp wrote: First, I would check the filesystem type of /tmp (or whatever you are using). Make sure it is not sync'ed or journalling. Next, I would investigate the pthreads libraries. If your system has more than one to choose from, try the ot

[Clamav-users] scanning over tcp/ip

2006-01-12 Thread Bill Shupp
Is clamdscan/clamd scanning supported over TCP/IP? As far as I could tell in the documentation, there is stream support, but it's not ready for network connections. My failed tests support that (clamd was looking for the local file, rather than the file getting passed over the stream). It al

Re: [Clamav-users] scanning over tcp/ip

2006-01-12 Thread John Jolet
On Thursday 12 January 2006 13:46, Bill Shupp wrote: > Is clamdscan/clamd scanning supported over TCP/IP? As far as I could > tell in the documentation, there is stream support, but it's not ready > for network connections. My failed tests support that (clamd was > looking for the local file, rat

Re: [Clamav-users] scanning over tcp/ip

2006-01-12 Thread Bill Shupp
John Jolet wrote: On Thursday 12 January 2006 13:46, Bill Shupp wrote: Is clamdscan/clamd scanning supported over TCP/IP? As far as I could tell in the documentation, there is stream support, but it's not ready for network connections. My failed tests support that (clamd was looking for the l

Re: [Clamav-users] scanning over tcp/ip

2006-01-12 Thread Craig Green
Bill Shupp wrote: Is clamdscan/clamd scanning supported over TCP/IP? AFAIK, clamdscan won't use STREAM. This was posted a while back, but I haven't actually tried it (since I use the milter, which does support STREAM): http://sourceforge.net/projects/clamd-stream-cl/ Craig. -- __

Re: [Clamav-users] scanning over tcp/ip

2006-01-12 Thread Bill Shupp
Craig Green wrote: Bill Shupp wrote: Is clamdscan/clamd scanning supported over TCP/IP? AFAIK, clamdscan won't use STREAM. This was posted a while back, but I haven't actually tried it (since I use the milter, which does support STREAM): http://sourceforge.net/projects/clamd-stream-cl

Re: [Clamav-users] freshclam daemon dying - GDB Backtrace included

2006-01-12 Thread David Kohn
Yes it'd be nice if you recompiled with -g flag and gave it another go... Your backtrace does look kind of wacky though. A depth of almost 400 frames??! Also, if you look at the frame addresses, you see a bunch of bogus-looking addresses like 0x and 0x2020202020, which could imply some

Re: [Clamav-users] scanning over tcp/ip

2006-01-12 Thread Bill Shupp
Craig Green wrote: Bill Shupp wrote: Is clamdscan/clamd scanning supported over TCP/IP? AFAIK, clamdscan won't use STREAM. This was posted a while back, but I haven't actually tried it (since I use the milter, which does support STREAM): http://sourceforge.net/projects/clamd-stream-cl

Re: [Clamav-users] scanning over tcp/ip

2006-01-12 Thread Stephen Gran
On Thu, Jan 12, 2006 at 04:40:15PM -0500, Craig Green said: > > > Bill Shupp wrote: > >Is clamdscan/clamd scanning supported over TCP/IP? > > AFAIK, clamdscan won't use STREAM. I thought it did if you specified stdin (e.g., cat foo | clamdscan - ), but I wouldn't be surprised if I was wrong he

[Clamav-users] Upgrading the clamav 0.86 to 0.88

2006-01-12 Thread Sandeep Saini
I am new to this clamav, I have Fedora core 2 and trying to upgrade the clamav 0.86 to 0.88 . I installed the following rpm's clamav-0.88-1.1.fc2.rf.i386.rpm clamav-db-0.88-1.1.fc2.rf.i386.rpm clamav-devel-0.88-1.1.fc2.rf.i386.rpm clamav-milter-0.88-1.1.fc2.rf.i386.rpm clamd-0.88-1.1.fc2.