[Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Departamento de Informatica
Hi, i've looking for information about this error(?) , the Logwatch of my CentOS send a daily mail to root, always appears this lines Milter (clamav-milter): local socket name /var/clamav/clmilter.sock' unsafe: 10 Time(s) Milter (clamav-milter): to error state: 10 Time(s) i have the clamav-milte

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Departamento de Informatica wrote: > Hi, i've looking for information about this error(?) , the Logwatch of > my CentOS send a daily mail to root, always appears this lines > > Milter (clamav-milter): local socket name /var/clamav/clmilter.sock' > uns

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Departamento de Informatica
That's what i want to do, so i put the line CLAMAV_USER='clamav' in /etc/sysconfig/clamav-milterso, how could i do to start clamav-milter as 'clamav' user?? Sorry for the 'newbie' question 2006/12/14, Steven Stern <[EMAIL PROTECTED]>: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Departa

Re: [Clamav-users] Protection from W32.Sality.U

2006-12-14 Thread Nigel Horne
BG Mahesh wrote: hi I am getting few emails which are passing thru clamav. Norton says the email is infected with W32.Sality.U Is there an update for clamav which can protect me from W32.Sality.U? I am using 0.88.7 Have you submitted a sample to www.clamav.net? _

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Nigel Horne
CLAMAV_FLAGS=" --config-file=/etc/clamd.conf --max-children=5 --force-scan --quiet --dont-log-clean --noreject [EMAIL PROTECTED] --postmaster-only -obl local:/var/clamav/clmilter.sock Don't use the -b option.

[Clamav-users] Re: Double notification when Defs update

2006-12-14 Thread Ian Abbott
On 13/12/06 21:07, Craig Jackson wrote: Hi, Sorry about the double post but I accidently hit control return before I was finished. I have configured Clamav to send me a email notice when it the definitions update. Yesterday I started receiving 2 of them which appear identical. Why is this happe

[Clamav-users] Re: Clamav-Milter Unsafe

2006-12-14 Thread Ian Abbott
On 14/12/06 13:51, Departamento de Informatica wrote: That's what i want to do, so i put the line CLAMAV_USER='clamav' in /etc/sysconfig/clamav-milterso, how could i do to start clamav-milter as 'clamav' user?? Sorry for the 'newbie' question You can put User=clamav in the clamd.conf f

Re: [Clamav-users] Re: Clamav-Milter Unsafe

2006-12-14 Thread Departamento de Informatica
# Run as a selected user (clamd must be started by root). # Default: disabled User root says in clamd.conf "clamd must be started by root", so nothing will gonna happens if i changue the line User root for User clamav ?? Well I'm gonna try this, hope it works, thanks again for patience 2006

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Ed Kasky
make sure the folloowing are in your init script? # Local clamav-milter config CLAMAV_FLAGS= test -f /etc/sysconfig/clamav-milter && . /etc/sysconfig/clamav-milter and start() { echo -n "Starting clamav-milter: " daemon clamav-milter ${CLAMAV_FLAGS} -loNP --max-children=8 --time

[Clamav-users] Re: Double notification when Defs update

2006-12-14 Thread Ian Abbott
On 14/12/06 14:31, Ian Abbott wrote: It's a minor bug fixed in 0.90rc2. If you don't want to upgrade to 0.90rc2, change line 1166 of freshclam/manager.c to check for "RC" Sorry, I mean line 1031. -- -=( Ian Abbott @ MEV Ltd.E-mail: <[EMAIL PROTECTED]>)=- -=( Tel: +44 (0)161 477 1

Re: [Clamav-users] Re: Clamav-Milter Unsafe

2006-12-14 Thread Dennis Peterson
Departamento de Informatica wrote: # Run as a selected user (clamd must be started by root). # Default: disabled User root says in clamd.conf "clamd must be started by root", so nothing will gonna happens if i changue the line User root for User clamav ?? Well I'm gonna try this, hope it wo

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Jerzy Sakol
- Original Message - From: "Departamento de Informatica" <[EMAIL PROTECTED]> # Run as a selected user (clamd must be started by root). # Default: disabled User root ~~ Check if you created user clamav and change in clamd.conf ( /etc/clamd.conf)

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Departamento de Informatica
That's Ok Ed, so , could i put in the line CLAMAV_FLAGS the options of clamav milter (ex. --postmaster-only ) etc ?? 2006/12/14, Ed Kasky <[EMAIL PROTECTED]>: make sure the folloowing are in your init script? # Local clamav-milter config CLAMAV_FLAGS= test -f /etc/sysconfig/clamav-milter &&

Re: [Clamav-users] Clamav-Milter Unsafe

2006-12-14 Thread Departamento de Informatica
Thanks Jurek, Now mi /var/clamav/clmilter.sock is "chowned" to clamav:clamav, but the permisions still are 744, how could establish to 700 when the system reboots? 2006/12/14, Jerzy Sakol <[EMAIL PROTECTED]>: - Original Message - From: "Departamento de Informatica" <[EMAIL PROTECTED]> >

[Clamav-users] Maybe Oversized.Zip bug in clamav 0.88.7

2006-12-14 Thread Simon Péter
Hi List, Yesterday I updated on my server from clamav 0.88.6 to clamav 0.88.7. In daytime ClamAV detected a lot of Oversized.Zip from our partners. It was a little bit starnge because they're sending mails as usually earlier. Ok. At first try I changed ArchiveMaxCompressionRatio upto 1000. It d

[Clamav-users] Clamav-milter installation

2006-12-14 Thread Arthur Sherman
Hi Blues, I need your help with clamav-milter configuration. OS=CentOS-4.4, MTA=Sendmail-8.13, ClamAV=0.88.7 4 packages installed: clamd-0.88.7-1.el4.rf clamav-0.88.7-1.el4.rf clamav-milter-0.88.7-1.el4.rf clamav-db-0.88.7-1.el4.rf It says in docs that the milter can work with libclam, which is

RE: [Clamav-users] Re: Double notification when Defs update

2006-12-14 Thread Craig Jackson
Q!-Original Message- Q!From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ian Abbott Q!Sent: Thursday, December 14, 2006 9:11 AM Q!To: ClamAV users ML Q!Subject: [Clamav-users] Re: Double notification when Defs update Q!On 14/12/06 14:31, Ian Abbott wrote: Q!> It's a minor b

RE: [Clamav-users] 0.88.7 possible error

2006-12-14 Thread Robert Isaac
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: 13 December 2006 21:13 > To: ClamAV users ML > Subject: Re: [Clamav-users] 0.88.7 possible error > > Robert Isaac wrote: > >> -Original Message- > >> From: [EMAIL

Re: [Clamav-users] 0.88.7 possible error

2006-12-14 Thread Jim Maul
Robert Isaac wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 13 December 2006 21:13 To: ClamAV users ML Subject: Re: [Clamav-users] 0.88.7 possible error Robert Isaac wrote: -Original Message- From: [EMAIL PROTE

Re: [Clamav-users] 0.88.7 possible error

2006-12-14 Thread kwijibo
Robert Isaac wrote: There was only one instance running. Killed it and restarted it. Then in today's LogWatch: **Unmatched Entries** clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 clamd startup succeeded Portable Executab

[Clamav-users] Newbie-inquiry

2006-12-14 Thread jean-paul natola
Hi everyone, I'm having a bit of a problem with clamav on my server- I'm getting about 3 to 4 of these per hour- and I dont know why its happening "malware acl condition: clamd: unable to read from socket (Operation timed out)" and yes mail is still coming in- and clamd is running if this

[Clamav-users] Re: Newbie-inquiry

2006-12-14 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jean-paul natola wrote: > Hi everyone, Hello. > I'm having a bit of a problem with clamav on my server- > I'm getting about 3 to 4 of these per hour- and I dont know why its > happening > > "malware acl condition: clamd: unable to read from socket

Re: [Clamav-users] 0.88.7 possible error

2006-12-14 Thread Dennis Peterson
Robert Isaac wrote: There was only one instance running. Killed it and restarted it. Then in today's LogWatch: **Unmatched Entries** clamd shutdown failed clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i386) Bound to address 127.0.0.1 on port 3310 clamd startup succeeded Portable Executa

Re: [Clamav-users] Re: Newbie-inquiry

2006-12-14 Thread Dennis Peterson
René Berber wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jean-paul natola wrote: Hi everyone, Hello. I'm having a bit of a problem with clamav on my server- I'm getting about 3 to 4 of these per hour- and I dont know why its happening "malware acl condition: clamd: unable to read

Re: [Clamav-users] Re: Newbie-inquiry

2006-12-14 Thread Tomasz Kojm
On Thu, 14 Dec 2006 16:59:23 -0800 Dennis Peterson <[EMAIL PROTECTED]> wrote: > Right about here I keep wishing clamd and freshclam had a --show-conf > argument that showed what the current config file says, where it found > it, sans comments. Like postconf in the postfix product, I suppose. How

Re: [Clamav-users] Re: Newbie-inquiry

2006-12-14 Thread Dennis Peterson
Tomasz Kojm wrote: On Thu, 14 Dec 2006 16:59:23 -0800 Dennis Peterson <[EMAIL PROTECTED]> wrote: Right about here I keep wishing clamd and freshclam had a --show-conf argument that showed what the current config file says, where it found it, sans comments. Like postconf in the postfix product,