[Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Greg McCarthy
I found a problem on one of our clamav servers - freshclam kept timing out when updating (My fault - a firewall rule problem) For some reason this caused the clamav milter to die which is not a huge problem as sendmail continues to deliver mail. The error I got was: Mar 28 15:15:45 pdcsmtp01 send

[Clamav-users] Re: Does clamav have any certificate?

2007-03-29 Thread Ian Abbott
On 28/03/2007 06:59, Hacı DAYI wrote: You seem to have changed your name since your previous post? Fajar A. Nugraha wrote On 03/28/2007 03:57 AM: Gregory Carter wrote: I would ban this user from this list as it is a Ad in disguise. He just cross posted this same question to the iptables li

[Clamav-users] problem with clamav and cpu

2007-03-29 Thread master
Hi, usually clamav use 100% of my cpu making the load average very hight, latelay i have had even a big error in the log : clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms problem - exit status 40 i use qmail with qmail-scanner, is there a way to make clamav use less cpu

Re: [Clamav-users] problem with clamav and cpu

2007-03-29 Thread Tomasz Kojm
On Thu, 29 Mar 2007 11:54:18 +0200 (CEST) [EMAIL PROTECTED] wrote: > Hi, usually clamav use 100% of my cpu making the load average very hight, > latelay i have had even a big error in the log : > clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms > problem - exit status 40

Re: [Clamav-users] problem with clamav and cpu

2007-03-29 Thread master
> On Thu, 29 Mar 2007 11:54:18 +0200 (CEST) > [EMAIL PROTECTED] wrote: > >> Hi, usually clamav use 100% of my cpu making the load average very >> hight, >> latelay i have had even a big error in the log : >> clamscan: corrupt or unknown ClamAV scanner error or >> memory/resource/perms >> problem -

Re: [Clamav-users] problem with clamav and cpu

2007-03-29 Thread Jim Maul
[EMAIL PROTECTED] wrote: On Thu, 29 Mar 2007 11:54:18 +0200 (CEST) [EMAIL PROTECTED] wrote: Hi, usually clamav use 100% of my cpu making the load average very hight, latelay i have had even a big error in the log : clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms probl

[Clamav-users] Problem with big mails

2007-03-29 Thread samir
Hey all; I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on one of the servers that vary in size from 20MB to 60 MB

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Mar 29, 2007 at 11:13:11AM +0200, Greg McCarthy wrote: > >Now to my question :) Does anyone have a script or know how I can >monitor the clamav milter so if it ever dies again I get an email >alert, or the script can even restart the milter.

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Clifford Hansen
Greg McCarthy wrote: I found a problem on one of our clamav servers - freshclam kept timing out when updating (My fault - a firewall rule problem) For some reason this caused the clamav milter to die which is not a huge problem as sendmail continues to deliver mail. The error I got was: Mar 28 1

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 7:03 AM, [EMAIL PROTECTED] wrote: I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on one

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Per Jessen
[EMAIL PROTECTED] wrote: > Hey all; > I'm running ClamAV 0.90.1 on FreeBSD 6.2. > In front of this server I have 3 other, which gather traffic and run > it through my ClamAV-server. > > Everything is running smothly, except some mails, that are large. > Right now I have 4 mails on one of the serv

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Julio Canto
Per Jessen wrote: > Virus-scanning anything bigger than 1-2Mb makes little sense. ANything > as big as 20Mb, I would just skip without further consideration. > Nowadays it is not unusual to find malware samples exceeding that 2MB size limit. -- Regards, Julio Canto | VirusTotal.com | Hispase

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 12:03 PM, Julio Canto wrote: Per Jessen wrote: Virus-scanning anything bigger than 1-2Mb makes little sense. ANything as big as 20Mb, I would just skip without further consideration. Nowadays it is not unusual to find malware samples exceeding that 2MB size limit. It

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Julio Canto
Chuck Swiger wrote: > It's certainly possible for a large Word/Excel/whatever file to be > infected, but they aren't very common. Out of the 400+ viruses > quarantined over the past week or so on one of my mail servers, the > average size was 11KB, and the largest malicious email was 116KB (it > c

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Michael Brown
I have to agree, in the technical sense that if you allow larger attachments it really starts to sap the resources. I originally allowed 400MB attachment scanning and it would really load down the server at times. I set it back to default setting of 10MB and resource usage was much better. I fi

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Maurice Lucas
> Chuck Swiger wrote: > > It's certainly possible for a large Word/Excel/whatever file to be > > infected, but they aren't very common. Out of the 400+ viruses > > quarantined over the past week or so on one of my mail servers, the > > average size was 11KB, and the largest malicious email was

RE: [Clamav-users] Problem with big mails

2007-03-29 Thread CPTeam Hostmaster
> >> Virus-scanning anything bigger than 1-2Mb makes little sense. > >> ANything > >> as big as 20Mb, I would just skip without further consideration. > > > > Nowadays it is not unusual to find malware samples exceeding that > > 2MB size limit. > > It's certainly possible for a large Word/Exc