[Clamav-users] race condition with restart clamd & clamav-milter

2007-03-14 Thread Sergey
Hello. I found a problem with start clamd and clamav-milter: # service clamd restart && service clamav-milter restart Stopping clamd service: [ DONE ] Starting clamd service:

Re: [Clamav-users] Clamav-milter

2007-03-14 Thread Sergey
On Tuesday 13 March 2007, Claudio Mundin wrote: > I'm using clamav 0.9 and for integrate with sendmail i use clamav-milter. > Now I want that when a virus is detected in a mail, in automatic form > send mail of notification to the address destination of the mail. 1. Are you sure that you need it

Re: [Clamav-users] race condition with restart clamd & clamav-milter

2007-03-14 Thread Nigel Horne
Sergey wrote: Hello. I found a problem with start clamd and clamav-milter: # service clamd restart && service clamav-milter restart Stopping clamd service: [ DONE ] Starting clamd service:

Re: [Clamav-users] Where to submit a supposed false positive ?

2007-03-14 Thread Tomasz Kojm
On Tue, 13 Mar 2007 23:07:43 +0100 Pascal Duchatelle <[EMAIL PROTECTED]> wrote: > As a hint : it is a zipped file with a size that is about the sum of its > unzipped content. Maybe not that much interesting. Please tune your archive settings instead of submitting this file. -- oo.

Re[2]: [Clamav-users] again "SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES"

2007-03-14 Thread Sergey Shilov
Rob MacGregor <[EMAIL PROTECTED]> wrote: RM> Have you tried using the ports to install clamav? That will almost RM> certainly resolve your problem. First, as well as it is usual, I installed from sources taken with www.clamav.net After, I tried to install from ports. RM> Just remember to updat

Re: [Clamav-users] Virustotal Clamav Engine Problem!!!

2007-03-14 Thread Trog
On Wed, 2007-03-14 at 07:37 +0100, Julio Canto wrote: > > There seems to be a problem with virustotal.com clamav scan engine. > The engine we're using now is very old. The versions that theoretically > could fix that problem doesn't fit well in the VirusTotal framework (for > instance, it needs

Re: [Clamav-users] ClamAV on an local network without internet connection

2007-03-14 Thread Tomasz Kojm
On Tue, 13 Mar 2007 17:25:06 +0100 [EMAIL PROTECTED] wrote: > Hi the list, > > I'm running ClamAV on many clients and I want to have a server for > updating client database. My server isn't connected to internet. So no > updating is possible. > > How can i setup my server for delivering the t

Re: [Clamav-users] ClamAV 0.90.1 and amavis 0.3.13pre2 Error Code:44

2007-03-14 Thread Tomasz Kojm
On Tue, 13 Mar 2007 09:29:31 +0100 Jens Strohschnitter <[EMAIL PROTECTED]> wrote: > Hi list, > > after updating my installation of clamav 0.88 to 0.90.1 the clamscan > failed with the following error: > > Virus scanner failure: /usr/local/bin/clamscan (error code: 40) 40 means that clamscan did

Re: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Tomasz Kojm
On Tue, 13 Mar 2007 21:09:48 - "Robert Isaac" <[EMAIL PROTECTED]> wrote: > > >> >> clamd.conf is shown 644 root:root, should it be 644 clamav:clamav? > >> > > >> >That's not the problem. /var/lib/clamav/clamd.socket, or > >wherever you > >> >have put it, is the likely issue. > >> > > >> >--

Re: [Clamav-users] race condition with restart clamd & clamav-milter

2007-03-14 Thread Sergey
On Wednesday 14 March 2007, Nigel Horne wrote: > You haven't found the problem, it's been known about for some time which is > why the startup script in .../contrib/init/RedHat/clamav-milter already has > that > sleep. Ou, ok. Sorry. :-) although... No, this is a bug: sleep must be placed to

Re: Re[2]: [Clamav-users] again "SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES"

2007-03-14 Thread Rob MacGregor
On 3/14/07, Sergey Shilov <[EMAIL PROTECTED]> wrote: Ok, I shall try to update ports and to recompile clamav Well, update the ports tree, uninstall/remove the existing clamav install and then install clamav from the ports instead :) -- Please keep list traffic on the list. Ro

Re: [Clamav-users] Virustotal Clamav Engine Problem!!!

2007-03-14 Thread Julio Canto
Julio Canto wrote: mr.dan.watson wrote: Hello There seems to be a problem with virustotal.com clamav scan engine. The engine we're using now is very old. The versions that theoretically could fix that problem doesn't fit well in the VirusTotal framework (for instance, it needs .NET for workin

Re: [Clamav-users] Freshclam can't parse INTERMITTENT error?

2007-03-14 Thread John Fleming
- Original Message - From: "Gary V" <[EMAIL PROTECTED]> To: Sent: Tuesday, March 13, 2007 9:13 PM Subject: Re: [Clamav-users] Freshclam can't parse INTERMITTENT error? > BTW, I didn't have any problems getting the install from volatile to take automatically. I'm not sure what you

Re: [Clamav-users] again "SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES"

2007-03-14 Thread Gerard Seibert
On Wednesday March 14, 2007 at 06:28:20 (AM) Rob MacGregor wrote: > Well, update the ports tree, uninstall/remove the existing clamav > install and then install clamav from the ports instead :) You might want to make sure that you kill all of the running clamav processes first as a precaution. Al

Re: [Clamav-users] Clamav-milter

2007-03-14 Thread Claudio Mundin
I try to search information of mailfomd but I cant't find anything. You can tell me where I can found this information? Thank 2007/3/14, Sergey <[EMAIL PROTECTED]>: On Tuesday 13 March 2007, Claudio Mundin wrote: > I'm using clamav 0.9 and for integrate with sendmail i use clamav-milter. > No

Re[2]: [Clamav-users] again "SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES"

2007-03-14 Thread Sergey Shilov
Gerard Seibert <[EMAIL PROTECTED]> wrote: GS> You might want to make sure that you kill all of the running clamav GS> processes first as a precaution. Also, if you have not all ready, place GS> the following in the '/etc/rc.conf' file. GS> clamav_clamd_enable="YES" GS> clamav_freshclam_enable="Y

Re: [Clamav-users] again "SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES"

2007-03-14 Thread Gerard Seibert
On Wednesday March 14, 2007 at 08:15:15 (AM) Sergey Shilov wrote: > > And now on a theme: > The problem is visible into logs at a stage of configure. > Clamav-0.87 finds GMP libraries (libgmp-4.1.4_2), and clamav-0.90.1 does not > find OK, we have ascertained that you are using FreeBSD. Try thi

Re: Re[2]: [Clamav-users] again "SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES"

2007-03-14 Thread Rob MacGregor
On 3/14/07, Sergey Shilov <[EMAIL PROTECTED]> wrote: And now on a theme: The problem is visible into logs at a stage of configure. Clamav-0.87 finds GMP libraries (libgmp-4.1.4_2), and clamav-0.90.1 does not find But does the port find it (translation - the people responsible for the FreeBSD

Re: [Clamav-users] ClamAV 0.90.1 and amavis 0.3.13pre2 Error Code:44

2007-03-14 Thread Jens Strohschnitter
> > > > after updating my installation of clamav 0.88 to 0.90.1 the clamscan > > failed with the following error: > > > > Virus scanner failure: /usr/local/bin/clamscan (error code: 40) > > 40 means that clamscan didn't recognize some command line option, make sure > amavis is not calling clamsc

Re: [Clamav-users] Clamav-milter

2007-03-14 Thread Sergey
On Wednesday 14 March 2007, Claudio Mundin wrote: > I try to search information of mailfomd but I cant't find anything. > You can tell me where I can found this information? http://puszcza.gnu.org.ua/projects/mailfromd/ You need of flex-2.5.4a (not never !), texinfo-4.8 and mailutils-1.0 (http:/

RE: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Robert Isaac
>> Thanks. This gave >> >> [EMAIL PROTECTED] etc]# grep LocalSocket clamd.conf >> # LocalSocket /tmp/clamd >> LocalSocket /usr/sbin > >Ouch, pointing LocalSocket to /usr/sbin is not a good idea. > >-- > oo. Tomasz Kojm <[EMAIL PROTECTED]> > (\/)\. http://www.Cl

[Clamav-users] New freshclam error

2007-03-14 Thread Robert Isaac
I have removed all clamav/clamd and reinstalled the 0.90.1 rpms (DAG). When I run freshclam I get [EMAIL PROTECTED] etc]# freshclam ERROR: Please edit the example config file /etc/freshclam.conf. WARNING: You must specify at least one database mirror. This is what I have in freshclam.conf # U

RE: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Daniel T. Staal
On Wed, March 14, 2007 10:08 am, Robert Isaac said: > >>> Thanks. This gave >>> >>> [EMAIL PROTECTED] etc]# grep LocalSocket clamd.conf >>> # LocalSocket /tmp/clamd >>> LocalSocket /usr/sbin >> >>Ouch, pointing LocalSocket to /usr/sbin is not a good idea. >> >>-- >> oo. Tomasz Ko

Re: [Clamav-users] Clamav-milter

2007-03-14 Thread Jose-Marcio Martins da Cruz
Claudio Mundin wrote: I try to search information of mailfomd but I cant't find anything. You can tell me where I can found this information? Another milter able to do that is j-chkmail : http://j-chkmail.ensmp.fr Thank 2007/3/14, Sergey <[EMAIL PROTECTED]>: On Tuesday 13 March 2007, Cla

Re: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Jim Maul
Daniel T. Staal wrote: On Wed, March 14, 2007 10:08 am, Robert Isaac said: Thanks. This gave [EMAIL PROTECTED] etc]# grep LocalSocket clamd.conf # LocalSocket /tmp/clamd LocalSocket /usr/sbin Ouch, pointing LocalSocket to /usr/sbin is not a good idea. -- oo. Tomasz Kojm <[EM

Re: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Gary V
Yes, you seem to be confusing the binary program /usr/bin/clamd with the socket file which is created by clamd when it starts up. With the clamd.conf setting you had originally: LocalSocket /usr/sbin You are attempting to overwrite the clamd executable with the socket. I cant even imag

RE: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Robert Isaac
>>Yes, you seem to be confusing the binary program >/usr/bin/clamd with the >>socket file which is created by clamd when it starts up. With the >>clamd.conf setting you had originally: >> >> LocalSocket /usr/sbin >> >>You are attempting to overwrite the clamd executable with the >socket.

RE: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Kevin W. Gagel
- Original Message - >>>Yes, you seem to be confusing the binary program >>/usr/bin/clamd with the >>>socket file which is created by clamd when it starts up. With the >>>clamd.conf setting you had originally: >>> >>> LocalSocket /usr/sbin >>> >>>You are attempting to overwrite the

[Clamav-users] clamd dying.

2007-03-14 Thread fchan
Hello, Last night my clamd died on my server here what my logs say: Tue Mar 13 20:48:07 2007 -> SelfCheck: Database status OK. Tue Mar 13 20:58:10 2007 -> SelfCheck: Database modification detected. Forcing reload. Tue Mar 13 20:58:10 2007 -> Reading databases from /var/lib/clamav Tue Mar 13 20:

[Clamav-users] mailbox to maildir transform help

2007-03-14 Thread Pascal Duchatelle
Hello, I don't understand how formail works. It is said in the clamav FAQ that it can change mailbox format to maildir. I would like to do that to a thunderbird mailbox in order to get rid of a message that is infected. I did not find options to do that. What syntax should I use with formail ?

Re: [Clamav-users] Clamav-milter

2007-03-14 Thread Jan-Pieter Cornet
On Wed, Mar 14, 2007 at 05:33:05PM +0400, Sergey wrote: > On Wednesday 14 March 2007, Claudio Mundin wrote: > > > I try to search information of mailfomd but I cant't find anything. > > You can tell me where I can found this information? [removed build info requiring unmaintained software, exact p

RE: [Clamav-users] mailbox to maildir transform help

2007-03-14 Thread MrC
> I don't understand how formail works. It is said in the > clamav FAQ that it can change mailbox format to maildir. I > would like to do that to a thunderbird mailbox in order to > get rid of a message that is infected. I did not find options > to do that. What syntax should I use with formai

[Clamav-users] did a funny experiment, found a weird result !!

2007-03-14 Thread Pascal Duchatelle
Since I was looking for a way to split my mailbox (mailbox format) in maildir format, I looked around. I installed Sylpheed-claws since I read in the doc that it handles both formats. After the install I opened it and in the menus I choose to import mail from a mbox type mailbox i.e. the Inbox

Re: [Clamav-users] mailbox to maildir transform help

2007-03-14 Thread Pascal Duchatelle
MrC a écrit : I don't understand how formail works. It is said in the clamav FAQ that it can change mailbox format to maildir. I would like to do that to a thunderbird mailbox in order to get rid of a message that is infected. I did not find options to do that. What syntax should I use with fo

[Clamav-users] clamav log file mystery on 0.90.1

2007-03-14 Thread Bill Maidment
Hi I have a small mystery on file permissions for the clamav log file. I am running clamd through mimedefang (user defang) and so in /etc/group I have: > defang:x:2504: > clamav:x:2505:clamav,defang and the log file has: > -rw-rw 1 clamav clamav 35736 Mar 6 15:13 /var/log/clam-update.log But,

RE: [Clamav-users] clamav log file mystery on 0.90.1

2007-03-14 Thread Mark
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Bill Maidment > Sent: donderdag 15 maart 2007 0:28 > To: clamav-users@lists.clamav.net > Subject: [Clamav-users] clamav log file mystery on 0.90.1 > > But, I get the following when I start clamd > St

[Clamav-users] Re: mailbox to maildir transform help

2007-03-14 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Pascal Duchatelle wrote: > I don't understand how formail works. [snip] You have to read the manual... from the examples in `man formail` I would guess that you need something like: formail -Ys < old_mailbox | tee temp.file | clamdscan --quiet - &

RE: [Clamav-users] clamav log file mystery on 0.90.1

2007-03-14 Thread Bill Maidment
On Wed, 14 Mar 2007 23:45:05 GMT, Mark wrote > > -Original Message- > > Did you put this in its new format? (with booleans). > > "AllowSupplementaryGroups true" > Ah! The new feature :-) I missed that. Thanks. All working well now. -- Bill Maidment Maidment Enterprises Pty Ltd www

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Alex Moore
On Mon, 12 Mar 2007 15:01:06 +0200 (SAST) "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I am experiencing the same problems. > > We have two quad CPU E450's running Solaris 9 handling the incomming > mail on our domains. These servers are generally very busy. No experimental code here. This

Re: [Clamav-users] New freshclam error

2007-03-14 Thread Marco Garza
edit freshclam.conf and comment out the word example. -Marco - Original Message - From: "Robert Isaac" <[EMAIL PROTECTED]> To: "'ClamAV users ML'" Sent: Wednesday, March 14, 2007 10:08 AM Subject: [Clamav-users] New freshclam error I have removed all clamav/clamd and reinstalled t

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Dennis Peterson
Alex Moore wrote: On Mon, 12 Mar 2007 15:01:06 +0200 (SAST) "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: I am experiencing the same problems. We have two quad CPU E450's running Solaris 9 handling the incomming mail on our domains. These servers are generally very busy. No experimental cod

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Alex Moore
On Wed, 14 Mar 2007 17:54:12 -0700 Dennis Peterson <[EMAIL PROTECTED]> wrote: > My systems handle about 1 million messages/week and none have > suffered a crashed clamd since I installed a self-built version > 0.90.1. I did not enable experimental, and I don't use scripted > updates. My milter is

[Clamav-users] 0.90.1 not finding viruses

2007-03-14 Thread John Fleming
I just realized to my horror that clamav has not found a virus in any email handled by my server since March 5th when I upgraded to clamav 0.90.1. The messages are being tagged appropriately, e.g.: X-Virus-Status: No X-Virus-Checker-Version: Luke wa9als.com running clamassassin 1.2.1 with Cla

Re: [Clamav-users] 0.90.1 not finding viruses

2007-03-14 Thread Gerard Seibert
On Wed, 14 Mar 2007 21:12:37 -0400 "John Fleming" <[EMAIL PROTECTED]> wrote: > I just realized to my horror that clamav has not found a virus in any > email handled by my server since March 5th when I upgraded to clamav > 0.90.1. The messages are being tagged appropriately, e.g.: > > X-Virus-Sta

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Dennis Peterson
Alex Moore wrote: On Wed, 14 Mar 2007 17:54:12 -0700 Dennis Peterson <[EMAIL PROTECTED]> wrote: My systems handle about 1 million messages/week and none have suffered a crashed clamd since I installed a self-built version 0.90.1. I did not enable experimental, and I don't use scripted updates.

Re: [Clamav-users] 0.90.1 not finding viruses

2007-03-14 Thread Dennis Peterson
John Fleming wrote: I just realized to my horror that clamav has not found a virus in any email handled by my server since March 5th when I upgraded to clamav 0.90.1. The messages are being tagged appropriately, e.g.: X-Virus-Status: No X-Virus-Checker-Version: Luke wa9als.com running clamass

Re: [Clamav-users] 0.90.1 not finding viruses

2007-03-14 Thread John Fleming
- Original Message - From: "Gerard Seibert" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Wednesday, March 14, 2007 9:24 PM Subject: Re: [Clamav-users] 0.90.1 not finding viruses X-Virus-Status: No X-Virus-Checker-Version: Luke wa9als.com running clamassassin 1.2.1 with ClamAV 0.9

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Alex Moore
On Wed, 14 Mar 2007 18:34:14 -0700 Dennis Peterson <[EMAIL PROTECTED]> wrote: > ScanArchive = yes > ArchiveMaxFileSize = 0 > ArchiveMaxRecursion = 8 > ArchiveMaxFiles = 1000 > ArchiveMaxCompressionRatio = 250 > ArchiveLimitMemoryUsage = no > ArchiveBlockEncrypted = no > ArchiveBlockMax = yes > >

Re: [Clamav-users] 0.90.1 not finding viruses

2007-03-14 Thread John Fleming
- Original Message - From: "Dennis Peterson" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Wednesday, March 14, 2007 9:40 PM Subject: Re: [Clamav-users] 0.90.1 not finding viruses John Fleming wrote: I just realized to my horror that clamav has not found a virus in any email hand

Re: [Clamav-users] race condition with restart clamd & clamav-milter

2007-03-14 Thread Sergey
On Wednesday 14 March 2007, Nigel Horne wrote: > the startup script in .../contrib/init/RedHat/clamav-milter already has that > sleep. 1 second is too low in some case. :-( # service clamd restart && ls /var/lib/clamav/* && sleep 5 && ls /var/lib/clamav/* && service clamav-milter restart Stopp

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Rob MacGregor
On 3/15/07, Alex Moore <[EMAIL PROTECTED]> wrote: <---SNIP---> Anyone else on Solaris with ScanArchive enabled having problems? Not Solaris, but on FreeBSD 5.4 I'm finding 0.90.1 (built from the FreeBSD ports) silently dying at random intervals, when 0.90 didn't. I've got it running with debug