Re: [Clamav-users] Aborting clamdscan with ctrl-c

2007-03-07 Thread Tomasz Kojm
On Thu, 8 Mar 2007 01:18:19 + Mark Allan <[EMAIL PROTECTED]> wrote: > When I cancel clamdscan by using ctrl-c or killall clamdscan the > clamdscan process dies but clamd continues to scan the file it's > currently on. clamd will automatically detect that clamdscan disconnected and termin

Re: [Clamav-users] Local socket unsafe

2007-03-07 Thread Dennis Peterson
Christopher X. Candreva wrote: On Thu, 8 Mar 2007, CPTeam Hostmaster wrote: I get this in maillog whenever I start clamav-milter: -- Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milter (clmilter): local socket name /var/run/clamav/clmilter.sock unsafe Mar 8 00:45:01 ns1 sendmail[7399]:

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-07 Thread Dennis Peterson
Alex Moore wrote: Has anyone seen 0.90.1's clamd die? I am running Solaris 9 SPARC. The daemon had been running for several days. The mail server only handles around 500 messages/day. So far, I have no clue. I have been running clamav for a few years now and have not seen this before. At th

[Clamav-users] Debian 0.90.1-0vol

2007-03-07 Thread clamav
Stephen, I see a new lib - libclamav2, and the new version of clamav is available on volatile now. What precautions or config updates should I do before updating this on a running mail server. Thanks, Ken ___ Help us build a comprehensive ClamAV gui

RE: [Clamav-users] ClamAV 0.90 on FreeBSD 6.3 = CPU hog [fixed]

2007-03-07 Thread David Peall
> David Peall wrote: > > Hi All > > > > I've been googling for 2 days now and this mail describes my > situation: > > http://lists.roaringpenguin.com/pipermail/mimedefang/2007- > February/03213 > > 6.html > > > > I've got two servers. > > > > Server 1 > > 4.10-RELEASE-p3 > > exim-4.60-1 > > clamav-

[Clamav-users] ClamAV 0.90 on FreeBSD 6.3 = CPU hog

2007-03-07 Thread David Peall
Hi All I've been googling for 2 days now and this mail describes my situation: http://lists.roaringpenguin.com/pipermail/mimedefang/2007-February/03213 6.html I've got two servers. Server 1 4.10-RELEASE-p3 exim-4.60-1 clamav-0.90_3 Works fine Server 2 FreeBSD 6.2 exim-4.66-3 clamav-0.90_3

Re: [Clamav-users] Viruses caught

2007-03-07 Thread Paul Bijnens
On 2007-03-07 02:16, Dennis Peterson wrote: > Paul Bijnens wrote: >> On 2007-03-05 20:07, Dennis Peterson wrote: >>> Paul Bijnens wrote: >>> Be careful about using clamav with the MSRBL image-spams database!! It seems to me like detecting the image spams with clamav signatures a

Re: [Clamav-users] db refresh load

2007-03-07 Thread Luca Gibelli
Hello Dennis, > Sidebar - continuing to see freshclam update failures - trussed > freshclam and watched it walking through the list of mirrors looking for > data and never finding it. That seems to be a lot of mirrors out of > service or busy doing other things. Did I catch them at a bad time

Re: [Clamav-users] ClamAV 0.90 on FreeBSD 6.3 = CPU hog

2007-03-07 Thread Peter Boosten
David Peall wrote: [snip] > Anyone else having the same problems ? > David, I'm running 6.2 release (with postfix) but no problems whatsoever. Peter -- http://www.boosten.org ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav

Re: [Clamav-users] ClamAV 0.90 on FreeBSD 6.3 = CPU hog

2007-03-07 Thread Brian Morrison
David Peall wrote: > Hi All > > I've been googling for 2 days now and this mail describes my situation: > http://lists.roaringpenguin.com/pipermail/mimedefang/2007-February/03213 > 6.html > > I've got two servers. > > Server 1 > 4.10-RELEASE-p3 > exim-4.60-1 > clamav-0.90_3 > > Works fine > >

Re: [Clamav-users] msrbl sigs: rsync

2007-03-07 Thread Dennis Davis
On Tue, 6 Mar 2007, Dennis Peterson wrote: > From: Dennis Peterson <[EMAIL PROTECTED]> > To: ClamAV users ML > Date: Tue, 06 Mar 2007 11:18:30 -0800 > Subject: Re: [Clamav-users] msrbl sigs: rsync > Reply-To: ClamAV users ML ... > if [ -f "$RunFlag" ]; then > echo "This script already runnin

Re: [Clamav-users] Zip module failure ERROR

2007-03-07 Thread Daniel J McDonald
On Wed, 2007-03-07 at 00:55 +0100, Tomasz Kojm wrote: > On Tue, 06 Mar 2007 16:10:41 -0600 > Daniel J McDonald <[EMAIL PROTECTED]> wrote: > > > Suggestions welcome. I will try to hunt done a failure that is nabbed > > by quarantine or by a user who would be amenable to sharing the file. > > Did

Re: [Clamav-users] Clamd does not block virusmails

2007-03-07 Thread Jens Strohschnitter
> > > mails scanned by clamscan are blocked correctly. The only thing I changed > > in amavisd is to replace clamscan with clamd. > > But I think it's a bug in amavis-0.3.13pre2. So I have to update to > > amavis-new. > > The problem is, that the mashine runs as a productive system - and never

Re: [Clamav-users] Upgrade to .90?

2007-03-07 Thread Abdul Rehman Gani
On 06 Mar 2007, at 4:55 PM, Scott Oertel wrote: Just installed the 0.90_3 port, same problem, except it took a little bit less time for the IO to get real high, for some reason clam just can't keep up. I guess I'll wait until the next version hits the ports tree and try again. I just i

Re: [Clamav-users] Viruses caught

2007-03-07 Thread Dennis Peterson
Paul Bijnens wrote: On 2007-03-07 02:16, Dennis Peterson wrote: Paul Bijnens wrote: On 2007-03-05 20:07, Dennis Peterson wrote: Paul Bijnens wrote: Be careful about using clamav with the MSRBL image-spams database!! It seems to me like detecting the image spams with clamav signatures are no

Re: [Clamav-users] msrbl sigs: rsync

2007-03-07 Thread Dennis Peterson
Dennis Davis wrote: On Tue, 6 Mar 2007, Dennis Peterson wrote: From: Dennis Peterson <[EMAIL PROTECTED]> To: ClamAV users ML Date: Tue, 06 Mar 2007 11:18:30 -0800 Subject: Re: [Clamav-users] msrbl sigs: rsync Reply-To: ClamAV users ML ... if [ -f "$RunFlag" ]; then echo "This script alr

[Clamav-users] Problem after upgrade

2007-03-07 Thread Awie
Hi all, After upgrading to ClamAV 0.90.1, I got problem with message below: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 Would you tell me the source of such problem? Your answer is very appreciated and waited for. Thx & Rgds, Awie _

[Clamav-users] ArchiveMaxFileSize have no affect

2007-03-07 Thread Andreas Keller
Hi all, why function ArchiveMaxFileSize in clamd.conf only if ArchiveBlockMax is activated? If ArchiveBlockMax is deactivated clamd scan all archives, even if they are larger than set in ArchiveMaxFileSize. Andi ___ Help us build a compre

Re: [Clamav-users] Upgrade to .90?

2007-03-07 Thread Scott Oertel
Abdul Rehman Gani wrote: On 06 Mar 2007, at 4:55 PM, Scott Oertel wrote: Just installed the 0.90_3 port, same problem, except it took a little bit less time for the IO to get real high, for some reason clam just can't keep up. I guess I'll wait until the next version hits the ports tree an

Re: [Clamav-users] Problem after upgrade

2007-03-07 Thread Jim Maul
Awie wrote: Hi all, After upgrading to ClamAV 0.90.1, I got problem with message below: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 Would you tell me the source of such problem? Your answer is very appreciated and waited for. This

Re: [Clamav-users] Problem after upgrade

2007-03-07 Thread Awie
> > After upgrading to ClamAV 0.90.1, I got problem with message below: > > > > clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms > > problem - exit status 512/2 > > > > Would you tell me the source of such problem? Your answer is very > > appreciated and waited for. > > >

Re: [Clamav-users] Problem after upgrade

2007-03-07 Thread Jim Maul
Awie wrote: After upgrading to ClamAV 0.90.1, I got problem with message below: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 Would you tell me the source of such problem? Your answer is very appreciated and waited for. This is not a

Re: [Clamav-users] Problem after upgrade

2007-03-07 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Mar 08, 2007 at 12:51:36AM +0800, Awie wrote: >Yes, seems the message was coming from Qmail-Scanner. But the Clamd consume >a lot of CPU resource. >I upgraded the new version for 11 servers. All servers have same >configuration (setting) and b

[Clamav-users] Zip module failure ERROR

2007-03-07 Thread Don Drake
I'm running 0.90.1 and started to get a bunch of these messages when scanning PDF's (usually inside a zip file). I have unzipped the .zip files containing the PDF's, and tried scanning those manually and I get the same error. I use clamdscan (with 'ScanPDF yes' in my config) and even tried clams

Re: [Clamav-users] Zip module failure ERROR

2007-03-07 Thread Török Edvin
On 3/7/07, Don Drake <[EMAIL PROTECTED]> wrote: I'm running 0.90.1 and started to get a bunch of these messages when scanning PDF's (usually inside a zip file). I have unzipped the .zip files containing the PDF's, and tried scanning those manually and I get the same error. I use clamdscan (with

[Clamav-users] RESENDING: still on unable to lock database directory

2007-03-07 Thread Leonardo Rodrigues Magalhães
No one is experiencing this problem with 0.90.1 ??? Leonardo Rodrigues Magalhães escreveu: Hello Guys, I'm still getting, sometimes, the 'unable to lock database directory' even with 0.90.1, which should have addressed this. That was on the changelog ... Tue Mar 6 14:50:57

Re: [Clamav-users] Upgrade to .90?

2007-03-07 Thread Török Edvin
On 3/7/07, Abdul Rehman Gani <[EMAIL PROTECTED]> wrote: On 06 Mar 2007, at 4:55 PM, Scott Oertel wrote: > > Just installed the 0.90_3 port, same problem, except it took a > little bit less time for the IO to get real high, for some reason > clam just can't keep up. I guess I'll wait until the n

Re: [Clamav-users] Upgrade to .90?

2007-03-07 Thread Kevin Way
Kevin Way wrote: > Craig Green wrote: > >> Kevin Way wrote: >> >>> I had the same problems. FreeBSD/i386 6.2p1 and 6.2p0. Compiled >>> directly from the ports collection, without --experimental. >>> >>> As far as we could tell, it just scanned slower and slower and then >>> stopped scanni

Re: [Clamav-users] ArchiveMaxFileSize have no affect

2007-03-07 Thread Tomasz Kojm
On Wed, 7 Mar 2007 16:54:08 +0100 "Andreas Keller" <[EMAIL PROTECTED]> wrote: > why function ArchiveMaxFileSize in clamd.conf only if ArchiveBlockMax is > activated? > > If ArchiveBlockMax is deactivated clamd scan all archives, even if they are > larger than set in ArchiveMaxFileSize. ArchiveM

Re: [Clamav-users] Upgrade to .90?

2007-03-07 Thread Jay West
Kevin wrote Follow-up: The above work-around almost works, but clamd occasionally dies without warning now. This is somewhat easier to live with than the previous behavior, where it would be alive but would stop responding, but it's still broken. Doesn't the port currently in the FreeBSD

Re: [Clamav-users] Upgrade to .90?

2007-03-07 Thread Chuck Swiger
On Mar 7, 2007, at 12:40 PM, Jay West wrote: Kevin wrote Follow-up: The above work-around almost works, but clamd occasionally dies without warning now. This is somewhat easier to live with than the previous behavior, where it would be alive but would stop responding, but it's still br

[Clamav-users] Local socket unsafe

2007-03-07 Thread CPTeam Hostmaster
I get this in maillog whenever I start clamav-milter: -- Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milter (clmilter): local socket name /var/run/clamav/clmilter.sock unsafe Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milter (clmilter): to error state -- Googling brought advices

Re: [Clamav-users] Local socket unsafe

2007-03-07 Thread Christopher X. Candreva
On Thu, 8 Mar 2007, CPTeam Hostmaster wrote: > I get this in maillog whenever I start clamav-milter: > > -- > Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milter (clmilter): local > socket name /var/run/clamav/clmilter.sock unsafe > Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milte

[Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-07 Thread Alex Moore
Has anyone seen 0.90.1's clamd die? I am running Solaris 9 SPARC. The daemon had been running for several days. The mail server only handles around 500 messages/day. So far, I have no clue. I have been running clamav for a few years now and have not seen this before. At this time, I have reve

RE: [Clamav-users] Local socket unsafe --SOLVED

2007-03-07 Thread CPTeam Hostmaster
> I have my socket set to /var/clamav/clmilter.sock > > /varr/clamav is owned by clamav.clamav, mode 775 > > I don't recall why I used /var/clamav instead of /var/run/clamav This is so stupid! I have put some comments in /etc/sysconfig/clamav-milter and the deamon started with the comments as p

[Clamav-users] Re: 0.90.1 - clamd died on Solaris 9

2007-03-07 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex Moore wrote: > Has anyone seen 0.90.1's clamd die? I am running Solaris 9 SPARC. No, same platform, running fine. > ... around 500 messages/day. So far, I have no clue. Are you using the log? nothing there? in syslog does something in the

Re: [Clamav-users] Problem after upgrade

2007-03-07 Thread Awie
> >>> After upgrading to ClamAV 0.90.1, I got problem with message below: > >>> > >>> clamdscan: corrupt or unknown clamd scanner error or > > memory/resource/perms > >>> problem - exit status 512/2 > >>> > >>> Would you tell me the source of such problem? Your answer is very > >>> appreciated and

Re: [Clamav-users] Problem after upgrade

2007-03-07 Thread Awie
> >Yes, seems the message was coming from Qmail-Scanner. But the Clamd consume > >a lot of CPU resource. > >I upgraded the new version for 11 servers. All servers have same > >configuration (setting) and but only 1 server that gave me such error. the > >user of clamd. The user of clamd has not bee

[Clamav-users] Aborting clamdscan with ctrl-c

2007-03-07 Thread Mark Allan
Hi, When I cancel clamdscan by using ctrl-c or killall clamdscan the clamdscan process dies but clamd continues to scan the file it's currently on. Can someone please tell me if there is any way to tell clamd to abort the files it's currently scanning? Just now the only way I can see