[Clamav-users] Building with Separate Build Directories

2007-04-12 Thread Isaev Michael
Can developers fix the problem: impossible to do build clamav with separate dir tree? Example (OS Solaris 5.9, gcc 3.4.0): $ cd clamav-devel-mmdd $ BDIR=obj.`uname -s`.`uname -r`.`uname -m` #in the sendmail manner :) $ mkdir $BDIR $ cd $BDIR $ ../configure --enable-milter LDFLAGS="-L/usr/loca

[Clamav-users] *.cvd again!

2007-04-12 Thread Obantec Support
Hi clamd died again from clamd.log SelfCheck: Database modification detected. Forcing reload. Reading databases from /var/lib/clamav ERROR: reload db failed: Broken or not a CVD file Terminating because of a fatal error.Socket file removed. Pid file removed. --- Stopped at Thu Apr 12 04:25:08 20

Re: [Clamav-users] error stops clamd

2007-04-12 Thread Tomasz Kojm
On Wed, 11 Apr 2007 12:46:44 +0200 jacusy <[EMAIL PROTECTED]> wrote: > freshclam.log > > ClamAV update process started at Wed Apr 11 02:23:01 2007 > > nonblock_connect: connect timing out (30 secs) > > Can't connect to port 80 of host db.de.clamav.net (IP: 62.26.160.3) > > Trying host db.de.clamav

Re: [Clamav-users] Clamav suddenly died on several boxes

2007-04-12 Thread Tomasz Kojm
On Wed, 11 Apr 2007 15:07:32 +0200 Luigi Iotti <[EMAIL PROTECTED]> wrote: > Hi all > > I'm new on the list, is this is a FAQ please tell me so. I'm unsure if > my problem is related to the other one that today is discussed on the > list. > > I have several clamav installations. I use it with

Re: [Clamav-users] Building with Separate Build Directories

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 17:05:45 +1000 Isaev Michael <[EMAIL PROTECTED]> wrote: > Can developers fix the problem: impossible to do build clamav with separate > dir tree? Example (OS Solaris 5.9, gcc 3.4.0): > > $ cd clamav-devel-mmdd > $ BDIR=obj.`uname -s`.`uname -r`.`uname -m` #in the sendmail

Re: [Clamav-users] Clamdmon.sh

2007-04-12 Thread Xavier Beaudouin
Hi ! > I am amazed at the number of people here that apparently not using > SOMETHING to monitor clamd. Esp. when the developers include a nice > script to check and restart clamd. Montioring sensitive service is a normal process in a production environement IMHO. > I run three different mail

Re: [Clamav-users] Clamav suddenly died on several boxes

2007-04-12 Thread Luigi Iotti
> From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Tomasz Kojm > Sent: Thursday, April 12, 2007 10:19 AM > On Wed, 11 Apr 2007 15:07:32 +0200 > Luigi Iotti <[EMAIL PROTECTED]> wrote: > > > Hi all > > > > I'm new on the list, is this is a FAQ please tell me so. I'm unsure if > > my pro

Re: [Clamav-users] Clamdmon.sh

2007-04-12 Thread Robert Schetterer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Xavier Beaudouin schrieb: > Hi ! > >> I am amazed at the number of people here that apparently not using >> SOMETHING to monitor clamd. Esp. when the developers include a nice >> script to check and restart clamd. > > Montioring sensitive service is

[Clamav-users] ERROR: reload db failed: Broken or not a CVD file

2007-04-12 Thread Guillermo Gómez Valcárcel
Environment: clamav 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i386) – Fedora Core 4 This early morning my clamd daemon crash again. I restart the daemon deleting /var/lib/clamav/*.cvd file and executing “clamd reload” but I think this problem will repeat again. Anyone know what can be the root

Re: [Clamav-users] Clamdmon.sh

2007-04-12 Thread Clifford W. Hansen
I can vouch for monit aswell, not only can it monitor ClamAV but there are examples for a number of services, I also have monit reconnecting my internet connection when it drops... :) HTH Clifford. Robert Schetterer wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Xavier Beaudouin s

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Guillermo Gómez Valcárcel
I have the same symptoms. I wrote my symptoms in another post with subject: "ERROR: reload db failed: Broken or not a CVD file" Guillermo Gomez Valcarcel www.grafia.es Madrid, Spain -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de Obantec Support Enviado el:

Re: [Clamav-users] ERROR: reload db failed: Broken or not a CVD file

2007-04-12 Thread Luigi Iotti
> [mailto:[EMAIL PROTECTED] Behalf Of Guillermo > Gómez Valcárcel > Sent: Thursday, April 12, 2007 11:52 AM > To: 'ClamAV users ML' > Subject: [Clamav-users] ERROR: reload db failed: Broken or not a CVD > file > > > Environment: clamav 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i386) – Fedora > Core 4

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 11:57:12 +0200 Guillermo Gómez Valcárcel <[EMAIL PROTECTED]> wrote: > I have the same symptoms. > I wrote my symptoms in another post with subject: > "ERROR: reload db failed: Broken or not a CVD file" http://lurker.clamav.net/message/20070411.175950.b7329d9f.en.html -- o

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Bill Maidment
On Thu, 12 Apr 2007 12:20:17 +0200, Tomasz Kojm wrote > On Thu, 12 Apr 2007 11:57:12 +0200 > Guillermo Gómez Valcárcel <[EMAIL PROTECTED]> wrote: > > > I have the same symptoms. > > I wrote my symptoms in another post with subject: > > "ERROR: reload db failed: Broken or not a CVD file" > > http:

Re: [Clamav-users] *.cvd again! attachment fixed

2007-04-12 Thread Bill Maidment
On Thu, 12 Apr 2007 12:20:17 +0200, Tomasz Kojm wrote > On Thu, 12 Apr 2007 11:57:12 +0200 > Guillermo Gómez Valcárcel <[EMAIL PROTECTED]> wrote: > > > I have the same symptoms. > > I wrote my symptoms in another post with subject: > > "ERROR: reload db failed: Broken or not a CVD file" > > http:

Re: [Clamav-users] *.cvd again! attachment fixed

2007-04-12 Thread Guillermo Gómez Valcárcel
: Database modification > detected. Forcing reload. > Apr 11 21:05:56 mail7 clamd[31984]: Reading databases from > /usr/local/share/clamav > Apr 11 21:05:58 mail7 clamd[31984]: reload db failed: MD5 verification > error > Apr 11 21:05:58 mail7 clamd[31984]: Terminating because of a fatal > error. > Apr 11

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Obantec Support wrote: > Hi > > clamd died again > > from clamd.log > > SelfCheck: Database modification detected. Forcing reload. > Reading databases from /var/lib/clamav > ERROR: reload db failed: Broken or not a CVD file > Terminating because of a

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 09:46:39 -0400 James Kosin <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Obantec Support wrote: > > Hi > > > > clamd died again > > > > from clamd.log > > > > SelfCheck: Database modification detected. Forcing reload. > > Reading databases f

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Anton Yuzhaninov
Hello, Tomasz. You wrote on Thursday, April 12, 2007, 5:49:04 PM: >> (2) ClamAV needs to change to fix the issue of a 0-byte CVD file >> causing it to CRASH. > I _doesn't_ crash. It reports a critical error and terminates. Why it can't work with old bases in this situation? If it possible it

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 18:06:51 +0400 Anton Yuzhaninov <[EMAIL PROTECTED]> wrote: > Hello, Tomasz. > > You wrote on Thursday, April 12, 2007, 5:49:04 PM: > > >> (2) ClamAV needs to change to fix the issue of a 0-byte CVD file > >> causing it to CRASH. > > > I _doesn't_ crash. It reports a critic

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Bourne
On Thu, 12 Apr 2007, Tomasz Kojm wrote: > On Thu, 12 Apr 2007 18:06:51 +0400 >> Why it can't work with old bases in this situation? >> If it possible it will be more better than stop working. > > freshclam already takes care to not install broken data and in this case > the "broken" db (i.e. the e

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Gerard Seibert
On Thursday April 12, 2007 at 12:21:32 (PM) James Bourne wrote: > This brings a question to my mind. > > Is there any need for the old .cvd files now that clamd uses the incremental > files? I took this approach to the problem (freebsd) I shutdown clamav and freshclam. Deleted all of the files

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread JamesDR
Tomasz Kojm wrote: > On Thu, 12 Apr 2007 18:06:51 +0400 > Anton Yuzhaninov <[EMAIL PROTECTED]> wrote: > >> Hello, Tomasz. >> >> You wrote on Thursday, April 12, 2007, 5:49:04 PM: >> (2) ClamAV needs to change to fix the issue of a 0-byte CVD file causing it to CRASH. >>> I _doesn't_ cr

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 13:17:12 -0400 JamesDR <[EMAIL PROTECTED]> wrote: > Tomasz Kojm wrote: > > On Thu, 12 Apr 2007 18:06:51 +0400 > > Anton Yuzhaninov <[EMAIL PROTECTED]> wrote: > > > >> Hello, Tomasz. > >> > >> You wrote on Thursday, April 12, 2007, 5:49:04 PM: > >> > (2) ClamAV needs to

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Steve Woods
Same problem here... I had to update clamd server and the database then the problem was resolved. Steve ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Luigi Iotti
To who is experiencing the *.cvd problem due to the "3rd party scripts" in the RPM packages maintained by Petr Kristof , available on http://crash.fce.vutbr.cz/crash-hat/5/ : Petr just released an upddated version of his packages, including the patches to the script I suggested on the list. Now th

[Clamav-users] Problem With Upgrade From 0.88.7

2007-04-12 Thread Jim Goode
I am currently running version 0.88.7 on SME 6.0.1-01 (built on Red Hat 7.x). [EMAIL PROTECTED] tmp]# rpm -qa | grep clam clamav-es-libs-0.88.7-es01 clamav-es-0.88.7-es01 I downloaded: [EMAIL PROTECTED] tmp]# ls -l *.rpm -rw-r--r--    1 root root   779061 Mar 10 07:35 clamav-0.90.1-4.rh7.r

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Luigi Iotti wrote: > To who is experiencing the *.cvd problem due to the "3rd party > scripts" in the RPM packages maintained by Petr Kristof , available > on http://crash.fce.vutbr.cz/crash-hat/5/ : > > Petr just released an upddated version of his p

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 18:08:06 -0400 James Kosin <[EMAIL PROTECTED]> wrote: > I just tested and clamd will try to read any file with the extension > of .cvd in the /var/lib/clamav directory. > My simple question is: > "Could this pose a security or virus scanning problem if someone > managed to pl

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Bourne
On Fri, 13 Apr 2007, Tomasz Kojm wrote: > On Thu, 12 Apr 2007 18:08:06 -0400 > James Kosin <[EMAIL PROTECTED]> wrote: > >> I just tested and clamd will try to read any file with the extension >> of .cvd in the /var/lib/clamav directory. >> My simple question is: >> "Could this pose a security or

Re: [Clamav-users] Problem With Upgrade From 0.88.7

2007-04-12 Thread Kris Deugau
Jim Goode wrote: > I am currently running version 0.88.7 on SME 6.0.1-01 (built on Red Hat > 7.x). > [EMAIL PROTECTED] tmp]# rpm -qa | grep clam > clamav-es-libs-0.88.7-es01 > clamav-es-0.88.7-es01 OK, so you've got a pair of packages called "clamav-es-libs" and "clamav-es". > I downloaded: > [EM

Re: [Clamav-users] Problem With Upgrade From 0.88.7

2007-04-12 Thread Daniel J McDonald
On Thu, 2007-04-12 at 16:26 -0500, Jim Goode wrote: > I am currently running version 0.88.7 on SME 6.0.1-01 (built on Red Hat > 7.x). > [EMAIL PROTECTED] tmp]# rpm -qa | grep clam > clamav-es-libs-0.88.7-es01 > clamav-es-0.88.7-es01 > > I downloaded: > [EMAIL PROTECTED] tmp]# ls -l *.rpm > -rw-r--

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 16:22:51 -0600 (MDT) James Bourne <[EMAIL PROTECTED]> wrote: > On Fri, 13 Apr 2007, Tomasz Kojm wrote: > > > On Thu, 12 Apr 2007 18:08:06 -0400 > > James Kosin <[EMAIL PROTECTED]> wrote: > > > >> I just tested and clamd will try to read any file with the extension > >> of .cvd

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Bourne
On Fri, 13 Apr 2007, Tomasz Kojm wrote: > On Thu, 12 Apr 2007 16:22:51 -0600 (MDT) > James Bourne <[EMAIL PROTECTED]> wrote: > >> On Fri, 13 Apr 2007, Tomasz Kojm wrote: >> >>> On Thu, 12 Apr 2007 18:08:06 -0400 >>> James Kosin <[EMAIL PROTECTED]> wrote: >>> I just tested and clamd will try t

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tomasz Kojm wrote: <--snip--> > This can be solved using file permissions as well, eg. by running > clamd with only read privileges to the database directory. > I was thinking about the possible VIRUS or TROJAN being able to gain root access by some

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 16:42:07 -0600 (MDT) James Bourne <[EMAIL PROTECTED]> wrote: > Yes it may be possible, but that's still no excuse for clamd to bail when > presented with two sets of data files, one invalid and one valid. There's no perfect solution to this problem. The only good one I could t

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 18:54:30 -0400 James Kosin <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Tomasz Kojm wrote: > > <--snip--> > > This can be solved using file permissions as well, eg. by running > > clamd with only read privileges to the database directory.

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tomasz Kojm wrote: > On Thu, 12 Apr 2007 16:42:07 -0600 (MDT) James Bourne > <[EMAIL PROTECTED]> wrote: > >> Yes it may be possible, but that's still no excuse for clamd to >> bail when presented with two sets of data files, one invalid and >> one val

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 19:03:09 -0400 James Kosin <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Tomasz Kojm wrote: > > On Thu, 12 Apr 2007 16:42:07 -0600 (MDT) James Bourne > > <[EMAIL PROTECTED]> wrote: > > > >> Yes it may be possible, but that's still no excuse

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Chuck Swiger
On Apr 12, 2007, at 3:55 PM, Tomasz Kojm wrote: > On Thu, 12 Apr 2007 16:42:07 -0600 (MDT) > James Bourne <[EMAIL PROTECTED]> wrote: >> Yes it may be possible, but that's still no excuse for clamd to >> bail when >> presented with two sets of data files, one invalid and one valid. > > There's no

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Tomasz Kojm
On Thu, 12 Apr 2007 16:25:01 -0700 Chuck Swiger <[EMAIL PROTECTED]> wrote: > It seems to me that there are two issues here, not one, and that we > don't have to achieve a perfect solution to both in order to still > improve the situation. > > By this I mean that it would be nice if clamd/fres

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Dennis Peterson
Tomasz Kojm wrote: > > for 3rd party databases this can be managed with a simple script, no need for > adding a keyring manager to ClamAV > I swear it was just 8 weeks ago or so when we last had this discussion and all manner of fine ideas and scripts came out of it. Me thinks some folks need

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Chuck Swiger
On Apr 12, 2007, at 5:02 PM, Dennis Peterson wrote: > Tomasz Kojm <[EMAIL PROTECTED]> wrote: >> for 3rd party databases this can be managed with a simple script, >> no need for >> adding a keyring manager to ClamAV > > I swear it was just 8 weeks ago or so when we last had this discussion > and a

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Dennis Peterson
Chuck Swiger wrote: > On Apr 12, 2007, at 5:02 PM, Dennis Peterson wrote: >> Tomasz Kojm <[EMAIL PROTECTED]> wrote: >>> for 3rd party databases this can be managed with a simple script, >>> no need for >>> adding a keyring manager to ClamAV >> I swear it was just 8 weeks ago or so when we last ha

[Clamav-users] Bug in 0.90.2

2007-04-12 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, While building clamav-0.90.2 I saw these messages: unrar/unrar.c: In function `cli_unrar_extract_next_prepare': unrar/unrar.c:1549: warning: integer constant is too large for "long" type unrar/unrar.c:1550: warning: integer constant is too larg

Re: [Clamav-users] Bug in 0.90.2

2007-04-12 Thread Dennis Peterson
René Berber wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Hi, > > While building clamav-0.90.2 I saw these messages: > > unrar/unrar.c: In function `cli_unrar_extract_next_prepare': > unrar/unrar.c:1549: warning: integer constant is too large for "long" type > unrar/unrar.c:1550

Re: [Clamav-users] Bug in 0.90.2

2007-04-12 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dennis Peterson wrote: [snip] > I saw a huge number of warnings building it with Studio 11 on Sol10-x86, > but nothing unusual building with gcc on Sol8 64-bit Sparc with GCC 3.3.2. The warnings are there in Solaris 9, gcc 3.3.2, regular build (32