Re: [Clamav-users] Latest daily.cld update causes segfault

2010-05-07 Thread C. Bensend
> See http://lurker.clamav.net/message/20100507.110656.573e90d7.en.html Interesting. My OpenBSD-CURRENT-ish (32-bit) system loaded the flawed update, but did not have issues. It's running 0.95.3 for the moment. Fri May 7 03:27:19 2010 -> Trying host db.us.clamav.net (213.165.80.159)... Fri Ma

Re: [Clamav-users] clamav-milter not properly detecting viruses

2010-08-10 Thread C. Bensend
>> On 10.08.10 06:35, Steve Thompson wrote: >>> Clamav-milter is used to check incoming e-mail. There are many examples >>> that are passed as clean and delivered, with these headers inserted: >>> >>> X-Virus-Scanned: clamav-milter 0.96.1 at >>> X-Virus-Status: Clean >>> >>> However, a clamscan o

Re: [Clamav-users] clamav-milter not properly detecting viruses

2010-08-10 Thread C. Bensend
>> I forget whether clamav-milter uses clamd, but I notice that you >> ran *clamscan* instead of *clamdscan*. Clamscan will load up >> the databases itself, so there exists the possibility that it's >> using *different* databases than clamd/clamav-milter is. > > You're right; I used clamscan and

[Clamav-users] freshclam 0.96.4 retrying too fast when no route exists to update server

2010-11-23 Thread C. Bensend
Hey folks, I ran into an interesting situation just a bit ago while building a new mail server. I did not have my firewall rules ready yet, so freshclam was not able to retrieve the databases. Unfortunately, though, it did not fail gracefully: [r...@host ~]# head -3 /var/log/freshclam.log

Re: [Clamav-users] freshclam 0.96.4 retrying too fast when no route exists to update server

2010-11-24 Thread C. Bensend
> This is already fixed for the upcoming 0.96.5: > https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2389 Fantastic. Thanks, Edwin! Benny -- "No matter how many shorts we have in the system, my guards will be instructed to treat every surveillance camera malfunction as a full-scale emergency.

[clamav-users] Source RPM for RHEL?

2011-08-23 Thread C. Bensend
Hey folks, So, I can't seem to find an SRPM for RHEL that actually matches its checksum, which makes me a bit .. uneasy, given the nature of the software. The RPMforge one fails its MD5 sum check. The second site listed on clamav.net doesn't even have it that I could find. Are there a

Re: [clamav-users] Source RPM for RHEL?

2011-08-23 Thread C. Bensend
> On 2011-08-23 21:48, C. Bensend wrote: >> >> Hey folks, >> >>So, I can't seem to find an SRPM for RHEL that actually matches >> its checksum, which makes me a bit .. uneasy, given the nature >> of the software. >> >>The RPMforge on

Re: [clamav-users] Source RPM for RHEL?

2011-08-23 Thread C. Bensend
> On 2011-08-23 22:27, C. Bensend wrote: >> >>> On 2011-08-23 21:48, C. Bensend wrote: >>>> >>>> Hey folks, >>>> >>>>So, I can't seem to find an SRPM for RHEL that actually matches >>>> its checksum, whic

Re: [Clamav-users] Clamav suddenly died on several boxes

2007-04-11 Thread C. Bensend
> Same here, three servers. Had this happen a few weeks ago on one of > those servers, but I thought it was an isolated incident.. Well, on the opposite end of the spectrum, all four of my OpenBSD servers running 0.90.1 got the update just fine, and none of them died. I saw a few complaints in

[Clamav-users] clamd 0.93.2 dying on CentOS 5.2 x86_x64

2008-07-10 Thread C. Bensend
Hey folks, Yesterday's yum update to the latest version of ClamAV on my mailserver doesn't seem to be doing real great for me... clamd is dying every now and again (I don't know that it's lasted more than a few hours so far): clone(Process 20592 attached child_stack=0x40f56250, flags=CLONE_V

Re: [Clamav-users] clamd 0.93.2 dying on CentOS 5.2 x86_x64

2008-07-10 Thread C. Bensend
> 0.93.2 had a pretty serious bug dealing with older definitions I believe. > From the log, it looks like that is what your problem is. Try upgrading to > 0.93.3. I absolutely will; it's just not available via my channels yet. Thanks, Benny -- "If I could drop dead right now, I'd be the happ

[Clamav-users] clamdscan / clamscan / --move option

2004-11-16 Thread C. Bensend
Hey folks, I am just starting to use ClamAV on an OpenBSD 3.5-STABLE machine, and I needed to verify a thing or two. I am running clamd and freshclam successfully. I'd like to use clamdscan to speed things up, but it doesn't appear to support the --move option that clamscan does. It poin

Re: [Clamav-users] clamdscan / clamscan / --move option

2004-11-17 Thread C. Bensend
> Adding "--move" feature to clamd/clamdscan is on the "TODO" list for > 0.81 version. Excellent. Thank you! :) > Until it is added, you'll have to use clamscan. Note though, that if you > scan many files at once (with one launching of clamscan), performance > increasing thanks to using clamds

Re: [Clamav-users] clamdscan / clamscan / --move option

2004-11-17 Thread C. Bensend
> Or as a workaround, clamd can be wrapped in a shell script which will > move the infected files to a quarantine directory. I'm assuming you meant 'clamdscan' above? I thought about that, but I don't think I need to worry that much about using one over the other yet. I was mostly concerned wi

Re: [Clamav-users] --move function and file attributes. . .

2004-11-23 Thread C. Bensend
> Already fixed in CVS: > > Tue Nov 23 23:23:45 CET 2004 (tk) > - > * clamscan: --move: preserve original access and modification times > (requested by Tomasz Papszun); optimise Out of hopeful curiousity, will this also be the case for the upcoming

Re: [Clamav-users] --move function and file attributes. . .

2004-11-28 Thread C. Bensend
>> Out of hopeful curiousity, will this also be the case for the upcoming >> addition of --move to clamdscan? :) > > Done. > > Mon Nov 29 00:23:55 CET 2004 (tk) > - > * clamdscan: added support for --move and --remove options Thank you very much, Tomasz. It's g

Re: [Clamav-users] Compile woes.

2004-11-29 Thread C. Bensend
> # ls -l /usr/ccs/bin/ar > -r-xr-xr-x 1 root bin30140 May 10 2004 /usr/ccs/bin/ar OK. > # echo $PATH > /usr/bin:/usr/sbin:/usr/bin:/usr/openwin/bin:/bin:/usr/ucb:/usr/dt/bin:/usr/openwin/bin:/usr/ccs/bin OK again. What does 'which ar' say? -- "Fry cracked corn, and I don't c

Re: [Clamav-users] OpenBSD 3.6 (and others?) build problem

2004-12-06 Thread C. Bensend
>> Could someone offer me some assistance so I can find out where this is >> breaking for me? I use the unofficial port, and it works great. I had to do some pthread and lib fiddling to get it to build natively on my 3.6 machines. Benny -- "... i want to be a farting burping maniac."

Re: [Clamav-users] OpenBSD 3.6 (and others?) build problem

2004-12-06 Thread C. Bensend
> There are some environment variable that you can set to specify > arguments to gcc, such as additional include paths and additional > library paths. Something like: > CFLAGS="-I/usr/local/include -L/usr/local/lib" > > I don't often have to specify them, so I can't remember exactly what > they

[Clamav-users] How does freshclam execute OnUpdateExecute program?

2004-12-15 Thread C. Bensend
Hey folks, I'm working on a new server, and things are running beautifully. I did, however, notice something I thought was a little odd... I wrote a pair of shell scripts that will email me an alert when freshclam updates the database successfully, and also if it fails. I tested, and it

RE: [Clamav-users] How does freshclam execute OnUpdateExecute program?

2004-12-15 Thread C. Bensend
> This is the way I do it: > OnUpdateExecute BASH_ENV=~clamav/.bashrc HOME=~clamav > /usr/local/bin/propagate_bd_clamav.sh | mail [EMAIL PROTECTED] -s "Freshclam > update $HOSTNAME" > OnErrorExecute tail /var/log/clamav/freshclam.log | mail [EMAIL PROTECTED] -s > "Freshclam error $HOSTNAME" > > pr

Re: [Clamav-users] problems compiling

2005-01-19 Thread C. Bensend
> I'm running OpenBSD 3.1 and have ClamAV 0.60 - should have upgraded long > ago... Yes. Both ClamAV _and_ the OS. They're working on 3.7 now. ;) > I can't get ClamAV 0.80 to compile with the following error: > > gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I./zziplib -I./mspack -g -O2 -c > mbox.c

Re: [Clamav-users] problems compiling

2005-01-20 Thread C. Bensend
> The libclamav build step gets linked with -lpthread, which should then > get built into clamscan as well. > > All I can suggest at the moment is you try and link it by hand, with > something like: > > cd clamscan > gcc -g -O2 -o clamscan output.o getopt.o memory.o cfgparser.o misc.o > clamscan.o

Re: [Clamav-users] Phishing Questions

2005-01-27 Thread C. Bensend
> Ok, so its not a virus, and its not spam. So neither product should > detect it your saying? How about both products detect it, we have > overlap, and users are happy cause they dont have to deal with this crap > in their inbox. Personally, I'd love to have it as a config option in clamd.conf.

Re: [Clamav-users] 0.81 on OpenBsd 3.5

2005-02-01 Thread C. Bensend
> ./configure --disable-clamav --enable-dependency-tracking > --disable-clamuko --enable-bigstack \ > --with-user=_clamav --with-group=_clamav --disable-cr > --with-dbdir=/usr/local/share/clamav \ > --disable-gethostbyname_r --prefix=/usr/local --sysconfdir=/etc > --disable-zlib-vcheck > > and get

Re: [Clamav-users] 0.81 on OpenBsd 3.5

2005-02-01 Thread C. Bensend
> How about you guys checking Jerome LOYET's page? I think he maintains > OBSD ports, somehow. > Of late I believe he's on sabbatical from this list ;) Check it now. :) He's passed the port on to Marc Balmer, and Marc is not going to release packages for 3.5 and 3.6 -STABLE like Jerome did. Ma

RE: [Clamav-users] 0.81 on OpenBsd 3.5

2005-02-02 Thread C. Bensend
> I'll made a port for 3.6-STABLE. I can't do it thoses days because I'm > very > busy. I'll try to do it early last week. That is very much appreciated, Jerome. Thank you. :) Benny -- "I'm on the Zoloft to keep from killing y'all." -- Mike

Re: [Clamav-users] How to use clamd?

2005-02-17 Thread C. Bensend
> No such file as /etc/ld.so.conf. I checked on gmp.h, and did find it > in /usr/local/include, so I assume I'm OK on that front. I even went > so far as to install the OpenBSD package (similar to an RPM) for GMP > v4.1.2 (I had originally compiled source for 4.1.3) and it still > didn't work.

Re: [Clamav-users] Tool to upgrade

2005-03-01 Thread C. Bensend
> Seriously though, why don't you just make a small script which > contains the "settings" and use that every time? This is exactly what I do on my OpenBSD systems. I have a script called 'reconfig' that simply does a ./configure with the options that I prefer. A new version is released, I do a

Re: [Clamav-users] Compile problems ClamAV on OpenBSD 3.6

2005-09-21 Thread C. Bensend
> Thanks for this alternative, but I've tried this option as well. But > after a successful installation, the binary 'clamd' was missing on the > system. What I normally do with my OpenBSD servers, is manually apply the patches from the official port to the new source. They usually apply cleanly

[Clamav-users] Hmmmm. Trojan.Clicker.Small-100 ?

2006-02-19 Thread C. Bensend
Hey folks, So, my Samba server did its weekly scan this morning, and imagine my surprise when it tagged Google's video player installer as "Trojan.Clicker.Small-100". I looked this up in the database, and it didn't give a lot of information, really. Of all the companies out there that I'd

Re: [Clamav-users] Hmmmm. Trojan.Clicker.Small-100 ?

2006-02-21 Thread C. Bensend
> The signature was removed a couple of days ago: > > http://lurker.clamav.net/message/20060219.164618.4a9cd08f.en.html Ah, thank you for the replies, everyone. I appreciate it. :) Benny -- "A computer lets you make more mistakes faster than any invention in human history, with the possible

Re: [Clamav-users] LibClamAV Warning: The virus database is older than 7 days.

2006-05-19 Thread C. Bensend
> Okay I did that and still the same warning message. > > > snip > > # cd /usr/local/share/clamav > # ls -l > total 4544 > -rw-r--r-- 1 clamav clamav 641509 May 19 08:48 daily.cvd > -rw-r--r-- 1 clamav clamav 3950054 Apr 22 01:11 main.cvd > # date > Fri May 19 08:55:13 PDT 2006 >

Re: [Clamav-users] Database is update or not ?

2006-06-05 Thread C. Bensend
> Hi, I use the 0.88.2 but I don't understood if the database is updated or > no > !...in mail from 'Content-filter at mail' there is writes: > > The message WAS NOT delivered to: > <[EMAIL PROTECTED]>: >250 2.7.1 Ok, discarded, id=01254-03 - VIRUS: Worm.Nyxem.E, Worm.VB-9 > > Virus scanner ou