Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 8:34 PM, Al Varnell wrote: On 9/13/11 8:07 PM, "Dennis Peterson" wrote: On 9/13/11 8:05 PM, Dennis Peterson wrote: I've just sent the URL to validator.wc3.org and got the same problem with this message: My fat fingers intended to type http://validator.wc.org an

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Dennis Peterson
On 9/13/11 10:51 PM, Jim Preston wrote: Apple has chosen to go the Microsoft route of "our users are too stupid to be allowed to do their own customization" and as such we OS X users have to suffer as we do with the choices made in Redmond. I'm a Mac user for my personal workstation and I don'

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Dennis Peterson
On 9/14/11 12:29 AM, sys...@ra-schaal.de wrote: if you can´t connect to 88.198.67.125, you should fall back to 46.4.61.241. it seems, that freshclam won´t use the second ip. nslookup clamav.akxnet.de Server: 127.0.0.1 Address:127.0.0.1#53 Name: clamav.akxnet.de Address: 88.19

Re: [clamav-users] Obfuscated IP address.

2011-09-18 Thread Dennis Peterson
On 9/18/11 6:41 PM, Michael Orlitzky wrote: On 09/16/11 11:53, G.W. Haywood wrote: The string "11064393" concatenated after the string "95." is converted without fuss by browsers to the IP address of the criminal server. I use most of the third party databases available for ClamAV. Using clam

Re: [clamav-users] Obfuscated IP address.

2011-09-19 Thread Dennis Peterson
On 9/19/11 8:46 AM, Michael Orlitzky wrote: A hostname cannot be all digits and except when the IP is used there will be a TLD, so if you see a pattern such as http:// 123456789/ cgi-bin/innocent_code.pl (Ignore the spaces they are there to let this post slip by most antispam detection) the

Re: [clamav-users] [sanesecurity] Re: Long DB refresh times

2012-04-26 Thread Dennis Peterson
On 4/25/12 7:34 AM, Michael Orlitzky wrote: On 04/25/12 07:55, Török Edwin wrote: I don't know if this can help speeding up the process but I collected some statistics on clamscan of a small file (wallclock duration: ~25sec): I think I'm missing some context here: which DB files are slow to

Re: [clamav-users] [sanesecurity] Re: Long DB refresh times

2012-04-27 Thread Dennis Peterson
On 4/27/12 3:46 AM, G.W. Haywood wrote: It does seem odd to me that people appear to be running ClamAV on memeory constrained systems. I'd suggest that those systems might not be suitable for the task. Adding memory to an older Sparc system does not affect the signature loading time at all.

Re: [clamav-users] 10 years of ClamAV

2012-06-20 Thread Dennis Peterson
On 6/19/12 6:52 AM, Tomasz Kojm wrote: Dear ClamAV Users, While we are incredibly proud of this, it is time for us to make a change. I hope that "whoosh!" sound wasn't the passion for this product leaving the room. Thanks to all who have made this a good reliable and extensible product.

Re: [clamav-users] Can't update Clamav on RHEL 5

2012-06-23 Thread Dennis Peterson
On 6/23/12 9:54 AM, Frank Chan wrote: I've double checked that it is clamav-0.97.5.tar.gz with the new VRT signature and not the Tomaz signature. I also checked it I was compiling from the clamav-0.97.5 directory and check it was compiling correctly. I've been using clamav since 2004 so I've be

Re: [clamav-users] problem with clamd crashing on Solaris 9, SPARC

2012-06-24 Thread Dennis Peterson
On 6/23/12 9:14 PM, David Alix wrote: Hello- Since Thursday morning, sometime between the daily.cld 15065 and 15066 update, my clamd daemon has been abending regularly (every couple of minutes to every half hour). I am running clamd 0.97.2 on Solaris SPARC. I haven't seen mention of this from

Re: [clamav-users] problem with clamd crashing on Solaris 9, SPARC

2012-06-24 Thread Dennis Peterson
On 6/24/12 7:37 AM, David Alix wrote: which version of clamd are you running? Thanks David 9.7.2, 9.7.4, and 9.7.5. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] problem with clamd crashing on Solaris 9, SPARC

2012-06-25 Thread Dennis Peterson
On 6/25/12 12:41 AM, Benny Pedersen wrote: Den 2012-06-24 16:41, Dennis Peterson skrev: On 6/24/12 7:37 AM, David Alix wrote: which version of clamd are you running? 9.7.2, 9.7.4, and 9.7.5. all at once to be sure ? No - I have several systems around the world running ClamAV, each running

Re: [clamav-users] Help

2012-06-25 Thread Dennis Peterson
On 6/25/12 7:00 AM, mario.reyes@dot.gov wrote: Hey Tom, Thanks for the suggestion but it just gives me the same message over and over that I find in the log. " ClamAV update process started at Mon Jun 25 09:55:43 2012 WARNING: Can't query current.cvd.clamav.net WARNING: Invalid DNS reply.

Re: [clamav-users] Help

2012-06-25 Thread Dennis Peterson
On 6/25/12 7:52 AM, mario.reyes@dot.gov wrote: Truss isn't installed on this server, nor can I make any changes to the baseline... Do you think it could be a firewall issue somewhere? I can resolve manually db.local.clamav.net just no way to get a resolution on current.cvd.clamav.net? Can

Re: [clamav-users] Spam No Longer ID'd as Virus

2012-08-20 Thread Dennis Peterson
On 8/20/12 6:41 AM, G.W. Haywood wrote: The vast majority of those will be detected via third-party databases, in particular at the moment INetMsg.SpamDomain is running at about 50% and Sansecurity about 20% of detections. Unless something has changed again that I missed, the INetMsg signature

Re: [clamav-users] Form of clamscan invocation

2012-08-26 Thread Dennis Peterson
On 8/26/12 3:56 PM, G.W. Haywood wrote: What I wrote there is rubbish. Please ignore it and accept my apologies. The man page is clear that PATT is a pattern. It is not terribly clear on what sort of a pattern, so experiment. It definitely does not say that it's a regular expression. ...

Re: [clamav-users] clamav update from tar.gz

2012-08-28 Thread Dennis Peterson
On 8/28/12 3:51 AM, G.W. Haywood wrote: It is unrealistic to expect people to produce manuals or tutorials for every permutation of users' whim. You need to learn about the systems, learn about the packages, learn about their installation, learn about their operation and learn about how they mu

Re: [clamav-users] Generating signatures for malware

2012-08-30 Thread Dennis Peterson
On 8/30/12 4:21 AM, G.W. Haywood wrote: Please would someone explain to me the use of "{7-8}"? I do not recognize it as valid regular expression syntax. Here is an example used in a Sane Security signature: http://sane.mxuptime.com/s.aspx?id=Sanesecurity.Phishing.Auction.1749 It is an offs

Re: [clamav-users] DLP scan configuration using clamscan

2012-09-23 Thread Dennis Peterson
On 9/23/12 9:18 AM, Fredrich Maney wrote: I'm a little reluctant to fire up a daemon process just to scan a system once a month or once a quarter. As I said, we aren't looking for malware, so I don't really care if the database is somewhat out of date and we aren't scanning email, so I don't thin

Re: [clamav-users] Personal stats webpage

2012-09-25 Thread Dennis Peterson
On 9/25/12 8:29 AM, Bowie Bailey wrote: I posted this a few days ago with no response. I think it got lost in the mailing list etiquette discussion. I just visited the page and some idiot at SourceFire has decided I need to join one of several social sites and deal with yet another EULA in or

Re: [clamav-users] Personal stats webpage

2012-09-25 Thread Dennis Peterson
On 9/25/12 2:16 PM, Joel Esler wrote: On Sep 25, 2012, at 2:39 PM, Dennis Peterson wrote: On 9/25/12 8:29 AM, Bowie Bailey wrote: I posted this a few days ago with no response. I think it got lost in the mailing list etiquette discussion. I just visited the page and some idiot at

Re: [clamav-users] DLP scan configuration using clamscan

2012-09-26 Thread Dennis Peterson
On 9/25/12 5:16 PM, Fredrich Maney wrote: While a good idea, it's not really feasible for me. I'm dealing with several hundred terabytes of data and I simply do not have that much spare disk available. Fpsm This looks like another case where scanning only files that are new or changed from

Re: [clamav-users] Tutorial for installing ClamAV on FreeBSD?

2012-11-10 Thread Dennis Peterson
On 11/9/12 3:34 PM, Ed Flecko wrote: Thank you Chuck...that worked! I was going to use the port, but I *like* to try and use source when I can, only because they're current (of course) and I can use different ./config options, which I don't *think* you can do with a port...can you? Ed Type ./

Re: [clamav-users] SourceFire support - signature file updates

2012-11-27 Thread Dennis Peterson
Can we get a link to a SourceFire statement on the future of ClamAV? I just rolled it out to a very large enterprise and they won't be happy if this thing is going under or even looks like it is sputtering. The timing of this can't have been worse so getting out ahead of the rumors is in everyon

Re: [clamav-users] SourceFire support - signature file updates

2012-11-27 Thread Dennis Peterson
I was hoping to hear from someone higher up than a mentalist time lord. On 11/27/12 10:11 AM, Nigel Houghton wrote: On Nov 27, 2012, at 12:32 PM, Dennis Peterson wrote: Can we get a link to a SourceFire statement on the future of ClamAV? I just rolled it out to a very large enterprise and

Re: [clamav-users] SourceFire support - signature file updates

2012-11-27 Thread Dennis Peterson
On 11/27/12 2:19 PM, Nigel Houghton wrote: On Nov 27, 2012, at 2:17 PM, Dennis Peterson wrote: I was hoping to hear from someone higher up than a mentalist time lord. Well, if Rassilon wasn't in a time lock he might reply, but since he is, I'm it. It would have helped quite a

Re: [clamav-users] [Clamav-users] clamav no timestamp in the logs

2012-12-06 Thread Dennis Peterson
On 12/6/12 8:25 AM, franckm wrote: Thanks it works now but I am not getting the log line when a new file is getting scanned. I only get the result (OK line) Syslog uses a two-part record (facility.severity) to decide what to put into a log file. Assuming you are using the default LOCAL6 sy

Re: [clamav-users] [Clamav-users] clamav no timestamp in the logs

2012-12-06 Thread Dennis Peterson
On 12/6/12 9:20 AM, franckm wrote: Thanks Dennis. Do you mean LogSyslog can provide more detailed log than LogFile? Does the LogFacility setting apply to LogSyslog only or it also applies to LogFile. I have noticed my LogFacility setting does not have the default value. It is set to LOG_MAI

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-06 Thread Dennis Peterson
On 12/6/12 10:30 AM, TR Shaw wrote: Linux, bsd unix and MacOSX all support directory/folder changed actions. Tom On Dec 6, 2012, at 1:26 PM, Jari Fredriksson wrote: 06.12.2012 19:44, franckm kirjoitti: Is it possible to have clamd (clamav deamon) watch a specific folder (and only that one) a

Re: [clamav-users] [Clamav-users] clamav no timestamp in the logs

2012-12-06 Thread Dennis Peterson
On 12/6/12 10:44 AM, Gene Heskett wrote: Speaking of clamd.conf, I wonder if some of you might be editing the wrong clamd.conf file? I am not sure how it got to be, but according the the launcher script in /etc/init.d. it is using /etc/clamav/clamd.conf, but I have others also. You should mak

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-06 Thread Dennis Peterson
On 12/6/12 10:50 AM, Gene Heskett wrote: On Thursday 06 December 2012 13:45:09 franckm did opine: Is it possible to have clamd (clamav deamon) watch a specific folder (and only that one) and automatically scan the files as they are dropped into it? You can do better than that if you're a procm

[clamav-users] RPM vendor question

2012-12-06 Thread Dennis Peterson
Barely on topic but I have a question about RPM's. I'm rolling out an enterprise ClamAV solution for PCI compliance and need to use a reliably sourced RPM distribution from a third party. I've always done this myself but as a contractor that would not be appropriate as I won't be there forever.

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-06 Thread Dennis Peterson
On 12/6/12 11:14 AM, Gene Heskett wrote: On Thursday 06 December 2012 14:13:13 Dennis Peterson did opine: On 12/6/12 10:50 AM, Gene Heskett wrote: On Thursday 06 December 2012 13:45:09 franckm did opine: Is it possible to have clamd (clamav deamon) watch a specific folder (and only that one

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-06 Thread Dennis Peterson
> > > > > Just observing the OP did not specify email. > > > > dp > > Humm, an item I was remiss in not noting. Can I blame that on Oldtimers? > I certainly qualify at 78 I think. :) > I'm 67 and have so sure - you get a pass:) dp ___ Help us bu

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-06 Thread Dennis Peterson
On 12/6/12 6:34 PM, Jari Fredriksson wrote: 06.12.2012 20:44, Dennis Peterson kirjoitti: That is a functionality of the desktop, no? There are command line tools as well. Inode cron will do this. If you're not in a hurry and understand the risks of non-atomic file transfers you can do this

Re: [clamav-users] [Clamav-users] Specify a watch folder for clamav

2012-12-07 Thread Dennis Peterson
On 12/7/12 1:50 AM, franckm wrote: Dennis Peterson wrote: That is a functionality of the desktop, no? There are command line tools as well. Inode cron will do this. If you're not in a hurry and understand the risks of non-atomic file transfers you can do this with cron. Here's

Re: [clamav-users] RPM vendor question

2012-12-07 Thread Dennis Peterson
On 12/7/12 11:37 PM, Jim Preston wrote: I too have used Dag Weir's packages and found them to be reliable. Jim Thank you Jim and everyone that has responded. I have a solution now. dp ___ Help us build a comprehensive ClamAV guide: visit http://wik

Re: [clamav-users] [Clamav-users] clamav no timestamp in the logs

2012-12-08 Thread Dennis Peterson
On 12/7/12 11:44 PM, Jim Preston wrote: On 12/06/2012 12:12 PM, Gene Heskett wrote: On Thursday 06 December 2012 14:09:16 Dennis Peterson did opine: On 12/6/12 10:44 AM, Gene Heskett wrote: Speaking of clamd.conf, I wonder if some of you might be editing the wrong clamd.conf file? I am not

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Dennis Peterson
On 1/12/13 5:22 AM, Pancho wrote: All in all for me there is a fairly compelling argument for going this route so I thought I would put it out there to see what others think. Kind regards Ricki Is there something about real-time day one virus outbreaks and US government involvement that you se

Re: [clamav-users] How to pick / specify the correct mirror

2013-01-25 Thread Dennis Peterson
On 1/24/13 10:40 AM, Lee Graber wrote: I am just starting to try and get clamd + freshclam running on some Ubuntu servers running on EC2 servers in the US Standard Region (east coast). The documentation talks about specifying a mirror which is close to you but it seems to default to the round-rob

Re: [clamav-users] How to pick / specify the correct mirror

2013-01-28 Thread Dennis Peterson
Bill Landry's unofficial sigs script does it right by using a random function as an offset from cron time to actually initial a sig download. For those of us with a couple dozen or more systems this is a mirror-friendly way of not getting into lockstep with any fixed-offset scheme. Here is the

Re: [clamav-users] Extremely slow database mirror

2013-02-11 Thread Dennis Peterson
On 2/11/13 10:03 PM, Al Varnell wrote: On 2/11/13 12:32 PM, "azurIt" wrote: is it somehow possible to exclude a database mirror? The mirror clamav.mojhosting.sk is s slow that freshclam is freezeing while downloading main.cvd (download takes about 30 minutes). I've never figured out a wa

Re: [clamav-users] looking for Bill Landry

2013-03-20 Thread Dennis Peterson
On 11/25/12 7:19 PM, Paul Wise wrote: Hi all, Bill Landry is the developer of clamav-unofficial-sigs and since I'm the Debian maintainer of that, I need to discuss some things with him but his domain inetmsg.com doesn't respond to HTTP or SMTP connections. Does anyone know what happened to him o

Re: [clamav-users] Don't forget to lock access to the account - clamav

2013-05-13 Thread Dennis Peterson
On 5/13/13 7:15:45PM, Patrick Kennedy wrote: The manual says: If you are installing ClamAV for the first time, you have to add a new user and group to your system: # groupadd clamav # useradd -g clamav -s /bin/false -c "Clam AntiVirus" clamav Consult a system manual if your OS has not groupadd

Re: [clamav-users] ClamAV Yum Repositories

2013-05-16 Thread Dennis Peterson
On 5/16/13 9:03:42AM, Bob Cohen wrote: Hi Folks, My server runs CentOS 5.x and I use yum to keep it updated. For a few weeks, LogWatch has been complaining that my install is not current. Is there a better yum repository for keeping my install current? EPEL is also behind, still. http://dl.f

Re: [clamav-users] Availability of virus pettern for solaris

2013-06-18 Thread Dennis Peterson
On 6/14/13 8:40:16PM, Benny Pedersen wrote: Toni Habich skrev den 2013-06-13 13:56: is there any virus or common malware for solaris at all? i don't know. and that's the point. so I ask again - are there any virus patterns for solaris 10 in the clamav pattern db??? first define what is a viru

Re: [clamav-users] Availability of virus pettern for solaris

2013-06-18 Thread Dennis Peterson
On 6/18/13 8:08 AM, Alain Zidouemba wrote: As Joel Esler mentioned before, there are signatures for UNIX malware in the official ClamAV DB. - Alain You would think such a simple question would have a simple answer. UNIX is not Solaris. Solaris is one of a few UNIX's around. Are the UNIX sign

Re: [clamav-users] Availability of virus pettern for solaris

2013-06-18 Thread Dennis Peterson
On 6/18/13 12:35 PM, Greg Folkert wrote: On Tue, 2013-06-18 at 12:22 -0700, Dennis Peterson wrote: On 6/18/13 8:08 AM, Alain Zidouemba wrote: As Joel Esler mentioned before, there are signatures for UNIX malware in the official ClamAV DB. - Alain You would think such a simple question

Re: [clamav-users] Freshclam updates failing

2013-06-21 Thread Dennis Peterson
On 6/21/13 5:45 AM, Denis McMahon wrote: appear to suggest that my dns is fine (these are included in the log). I have another machine on the LAN which updates fine. Denis McMahon What do you get if you run freshclam --list-mirrors ? dp ___ H

Re: [clamav-users] Freshclam updates failing

2013-06-22 Thread Dennis Peterson
On 6/22/13 9:08:48AM, Denis McMahon wrote: $ sudo find / -name mirrors.dat . nothing Rgds Denis Show the output of these commands: id clamav ls -ld /var/lib/clamav ls -l /var/lib/clamav/ clamconf dp ___ Help us build a comprehensive ClamAV g

Re: [clamav-users] Freshclam updates failing

2013-06-23 Thread Dennis Peterson
shadow: compat hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc:db files netgroup: nis $ On Sat, Jun 22, 2013 at 2:01 PM, Denis McMahon wrote: On 22/06/13 17:36, Dennis Peterson wrote:

Re: [clamav-users] Freshclam updates failing

2013-06-24 Thread Dennis Peterson
On 6/23/13 6:28:23PM, Denis McMahon wrote: On 23/06/13 23:10, Dennis Peterson wrote: One 'stupid' question and another test. Do you have any host table entries that can be confusing your resolver? Try running (via sudo or as root) strace -f freshclam >/tmp/freshclam.txt 2>&

Re: [clamav-users] Freshclam updates failing

2013-06-25 Thread Dennis Peterson
On 6/25/13 8:19:50AM, Denis McMahon wrote: I'm guessing that the interesting data here is: open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied) and sin_addr=inet_addr("127.0.0.1")}, 16) = 0 which, at a guess, I'd say meant that freshclam had been unable to open /etc/r

Re: [clamav-users] Freshclam updates failing

2013-06-25 Thread Dennis Peterson
On 6/25/13 12:28:39PM, Denis McMahon wrote: $ ping current.cvd.clamav.net ping: unknown host current.cvd.clamav.net My error - that should have been ping database.clamav.net. I blame my cut/paster :). I've installed Ubuntu server and can't replicate (yet) your error. dp __

Re: [clamav-users] Clam 0.97.8 not scanning rar

2013-07-07 Thread Dennis Peterson
On 7/7/13 8:38 AM, Benny Pedersen wrote: Nicholas Chua skrev den 2013-07-07 16:44: Don't seem to have that library compiled from source ? its part of clamav this lib maybe just have an old lib that is not working with 0.97.8 installed ? clamconf shows imho compile options, cant remember if

Re: [clamav-users] Clam 0.97.8 not scanning rar

2013-07-07 Thread Dennis Peterson
On 7/7/13 9:03 AM, Nicholas Chua wrote: It is not built in the Fedora RPMBuild process as a result. I build my own RPM files and don't include it either. Would you share your rpm or src with me? unrar is free, rar is paid, why the heck rpm have precompiled problems is beyong me I wonder why

Re: [clamav-users] Clam 0.97.8 not scanning rar

2013-07-08 Thread Dennis Peterson
On 7/8/13 8:15 AM, Joel Esler wrote: Instead of me having the scour the internet, can someone pass me the email address for the package maintainer here, and I’ll try and coordinate with them to fix this problem in their build? Thanks. -- Joel Esler If you fetch the source RPM from the EPE

Re: [clamav-users] Clam 0.97.8 not scanning rar

2013-07-08 Thread Dennis Peterson
On 7/8/13 8:39 AM, Nicholas Chua wrote: > Dear all, > > Please take note that the requirement is unrar and it is free. Rar is non free > > > Regards > Nic > Is unrar also unencumbered? That does not appear to be the case according to the license. dp __

Re: [clamav-users] Clam 0.97.8 not scanning rar

2013-07-09 Thread Dennis Peterson
On 7/9/13 8:33:33AM, Joel Esler wrote: We're just going to have to recommend that you build from source on Fedora. We'll have to put something on the website about it. The maintainers for Fedora will not build unrar into Fedora as it is "unfree". That's why I don't use it, too. RAR attach

Re: [clamav-users] Clam 0.97.8 not scanning rar

2013-07-09 Thread Dennis Peterson
On 7/9/13 8:48:46AM, Nicholas Chua wrote: Hmmm. Isn't there a libunrar? Regards Nic This conversation has been about the unrar library. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/m

Re: [clamav-users] clamd socket permissions

2013-07-31 Thread Dennis Peterson
Running clamd as root is probably a bad idea but I can imagine a lot of debate I'm not interested in rising from that statement. It is not something I would do. When I hit this problem of allowing clamd and my milters to share that and other sockets I put them all in the same UID/GID (not root)

Re: [clamav-users] clamd socket permissions

2013-08-02 Thread Dennis Peterson
On 7/30/13 11:18:36AM, Bob Miller wrote: Hello, I am trying to trace the reasoning behind behaviour I don't understand with regard to permissions on the clamd.socket and simscan. What is the state of selinux on your system? This is found in some distributions by running getenforce at the comm

Re: [clamav-users] clamd taking too long to restart?

2013-08-14 Thread Dennis Peterson
On 8/14/13 2:23:28PM, David Raynor wrote: I'll look a bit more at how we are loading the interim signature state and see what else we could do with the sorting. Meanwhile, this is a change you could put into practice now and get faster startup times. Before making any change on a server directly

Re: [clamav-users] ClamAV®: ClamAV 0.98 has been released!

2013-09-19 Thread Dennis Peterson
On 9/19/13 12:04 PM, Joel Esler wrote: http://blog.clamav.net/2013/09/clamav-098-has-been-released.html ClamAV 0.98 has been released! The link on the clamav.net site still references 0.97.8. dp ___ Help us build a comprehensive ClamAV guide: visi

Re: [clamav-users] ClamAV®: ClamAV 0.98 has been released!

2013-09-19 Thread Dennis Peterson
On 9/19/13 1:04 PM, Joel Esler wrote: which page? I’m seeing .98 http://www.clamav.net/lang/en/download/sources/ It's fixed now - thanks. dp On Sep 19, 2013, at 3:21 PM, Dennis Peterson wrote: On 9/19/13 12:04 PM, Joel Esler wrote: http://blog.clamav.net/2013/09/clamav-09

Re: [clamav-users] Database download problems

2013-09-20 Thread Dennis Peterson
On 9/20/13 2:01 AM, Jose-Marcio Martins wrote: Is there a problem with database mirrors ? The download behaviour I see from my side, since yesterday, when trying to get clamav databases (main.cvd, daily.cvd, ...) is something like a 600 K/s pic for (probably) just a single packet, then the down

Re: [clamav-users] Compiler error: 7z/Types.h:58: redefinition of `Byte'

2013-09-23 Thread Dennis Peterson
On 9/23/13 1:59:42PM, Shawn Webb wrote: Maybe this time I'll actually attach the patch. ;) I believe the list server discourages attachments. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/supp

Re: [clamav-users] scanning RPMs with clamav

2013-09-25 Thread Dennis Peterson
On 9/25/13 9:36 AM, David Raynor wrote: ClamAV does not currently have that functionality, though as you found in your testing it does have support for cpio if you unpack the contents. We are working on a bunch of things for upcoming releases, but as always I cannot make any promises about futu

Re: [clamav-users] clamd socket permissions

2013-09-27 Thread Dennis Peterson
On 9/27/13 5:14 PM, Bob Miller wrote: I am sorry that this reply is rather late, but for the sake of completeness and for the benefit of anyone who finds himself chasing this same problem, I would report that I have determined that the problem here was simscan, and not clamav. Thanks for coming

Re: [Clamav-users] Local socket unsafe

2007-03-07 Thread Dennis Peterson
Christopher X. Candreva wrote: On Thu, 8 Mar 2007, CPTeam Hostmaster wrote: I get this in maillog whenever I start clamav-milter: -- Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milter (clmilter): local socket name /var/run/clamav/clmilter.sock unsafe Mar 8 00:45:01 ns1 sendmail[7399]:

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-07 Thread Dennis Peterson
Alex Moore wrote: Has anyone seen 0.90.1's clamd die? I am running Solaris 9 SPARC. The daemon had been running for several days. The mail server only handles around 500 messages/day. So far, I have no clue. I have been running clamav for a few years now and have not seen this before. At th

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-08 Thread Dennis Peterson
Andy Fiddaman wrote: On Thu, 8 Mar 2007, Didi Rieder wrote: ; Lucky you, maybe to low message volume We have a several Solaris 10 servers running 0.90.1, each processing over 250K messages a day and have seen absolutely no problems. Experimental code isn't enabled. I wonder what the differen

Re: [Clamav-users] Freshclam not updating

2007-03-08 Thread Dennis Peterson
Kaplan, Andrew H. wrote: Hi there -- I recently upgraded clamav to version 0.90.1. The method that I used was downloading the Fedora Core 5 binaries into a single directory, and running the rpm -Uvh *.rpm command. The installation completed successfully. I checked the log files earlier today and

Re: [Clamav-users] How to download souce from the linux command line using WGET?

2007-03-09 Thread Dennis Peterson
Ken Morley wrote: I have a Linux (CentOS) server and I need to download the latest ClamAV stable source. The server doesn't have a web browser, so I need to use a command line to download the source. I've read the FAQ's and ClamAV documentation, but don't find instructions for using wget or oth

Re: [Clamav-users] FreshCalm log errors...

2007-03-10 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: I found this error in the freshclam log file today on 2 of my servers. -- Received signal: wake up ClamAV update process started at Fri Mar 9 16:00:05 2007 main.cvd is up to date (version: 42, sigs: 839

Re: [Clamav-users] How to make ClamAV scan incoming email received by qmail on Plesk

2007-03-10 Thread Dennis Peterson
fcgmail wrote: And also if it's made to work with qmail, how can i make it not to scan outgoing email? Any hint will be greatly appreciated! If you checked your outgoing mail I wouldn't have to check it when it gets to my server. The only reason I have to check other people's mail at all

Re: [Clamav-users] How to make ClamAV scan incoming email received by qmail on Plesk

2007-03-11 Thread Dennis Peterson
Gerard Seibert wrote: On Sat, 10 Mar 2007 20:20:37 -0800 Dennis Peterson <[EMAIL PROTECTED]> wrote: [...] If you checked your outgoing mail I wouldn't have to check it when it gets to my server. The only reason I have to check other people's mail at all is because they don&#x

Re: [Clamav-users] How to make ClamAV scan incoming email received by qmail on Plesk

2007-03-11 Thread Dennis Peterson
Török Edvin wrote: On 3/11/07, Gerard Seibert <[EMAIL PROTECTED]> wrote: On Sat, 10 Mar 2007 20:20:37 -0800 [...] Personally, I think you are being slightly naive if you actually believe that everyone is going to be running an AV scanner on their outgoing traffic. Why are we having this discus

Re: [Clamav-users] Upgrade to .90? - Update

2007-03-12 Thread Dennis Peterson
Mark wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin W. Gagel Sent: maandag 12 maart 2007 18:00 To: ClamAV users ML Subject: Re: [Clamav-users] Upgrade to .90? - Update - Original Message - So, its been a few days. How is everyon

Re: [Clamav-users] Virustotal Clamav Engine Problem!!!

2007-03-13 Thread Dennis Peterson
mr.dan.watson wrote: Hello There seems to be a problem with virustotal.com clamav scan engine. Did you send them an email registering your bewilderment? dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.c

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Dennis Peterson
Alex Moore wrote: On Mon, 12 Mar 2007 15:01:06 +0200 (SAST) "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: I am experiencing the same problems. We have two quad CPU E450's running Solaris 9 handling the incomming mail on our domains. These servers are generally very busy. No experimental cod

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-14 Thread Dennis Peterson
Alex Moore wrote: On Wed, 14 Mar 2007 17:54:12 -0700 Dennis Peterson <[EMAIL PROTECTED]> wrote: My systems handle about 1 million messages/week and none have suffered a crashed clamd since I installed a self-built version 0.90.1. I did not enable experimental, and I don't use scrip

Re: [Clamav-users] 0.90.1 not finding viruses

2007-03-14 Thread Dennis Peterson
John Fleming wrote: I just realized to my horror that clamav has not found a virus in any email handled by my server since March 5th when I upgraded to clamav 0.90.1. The messages are being tagged appropriately, e.g.: X-Virus-Status: No X-Virus-Checker-Version: Luke wa9als.com running clamass

Re: [Clamav-users] Massive problems clamav-0.90.x under Solaris 10

2007-03-15 Thread Dennis Peterson
Christian Kuehn wrote: Hi, we detect some massive problems with the 0.90-series of clamav under Solaris 10, the clamd use 90-99% of all CPU after 15min and the maschine got a load of minimum 50. The logfile shows like that: Thu Mar 15 07:22:31 2007 -> /var/spool/exim/scan/1HRqqc-0002q2-MA/1HRq

Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1 not finding viruses

2007-03-15 Thread Dennis Peterson
John Fleming wrote: - And the clamav log is free of errors and indicated that the database is updated appropriately and clamd is being notified of changes. OK, clamav is finding viruses again, but they are not being LOGGED in /var/log/clamav.log. The database upgrades and any restarts ARE be

Re: [Clamav-users] Re: 0.90.1 - clamd died on Solaris 9

2007-03-15 Thread Dennis Peterson
René Berber wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alex Moore wrote: On Mon, 12 Mar 2007 15:01:06 +0200 (SAST) "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: I am experiencing the same problems. We have two quad CPU E450's running Solaris 9 handling the incomming mail on our

Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1 not findingviruses

2007-03-15 Thread Dennis Peterson
John Fleming wrote: If not syslog, then the the clamd run-as user have write permissions to the log? Yes, clamav:clamav both owner and group 0640 Just saw your next post come in - check for sure the run-as user is clamav. Is the log < 2gig in size? Yeah, only about 5K right now. It'

Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1not findingviruses

2007-03-15 Thread Dennis Peterson
John Fleming wrote: clamd 22702clamav3w REG3,1 53702682197 /var/log/clamav/clamav.log There's the log, but I need help understanding what's happening. - John That's not where you were describing the log to be earlier. Your original post said /var/log/c

Re: [Clamav-users] System Requirements?

2007-03-16 Thread Dennis Peterson
Dana Kashubeck wrote: Are the System Requirements for Clam AntiVirus listed anywhere? It seems to me that this would have helped several people who have had issues with 0.90. I couldn't find anything, but maybe I missed it. There's a start here: http://wiki.clamav.net/Main/ClamRequirements.

Re: [Clamav-users] reload db failed

2007-03-16 Thread Dennis Peterson
Zbigniew Szalbot wrote: Hello, Any thoughts would be greatly appreciated as it was several hours before I spotted this and manually restarted clamd. Oddly, mail was still being delivered, but without any virus checks ?? Ok, this is what I meant - clamd was not working. I had to manually resta

Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1 not findingviruses

2007-03-16 Thread Dennis Peterson
Tomasz Kojm wrote: On Fri, 16 Mar 2007 19:45:10 -0400 "John Fleming" <[EMAIL PROTECTED]> wrote: X-Virus-Status: Yes X-Virus-Report: Eicar-Test-Signature FOUND X-Virus-Checker-Version: clamassassin 1.2.4 with clamscan / ClamAV Tha

Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1 notfindingviruses

2007-03-16 Thread Dennis Peterson
John Fleming wrote: - Original Message - From: "Tomasz Kojm" <[EMAIL PROTECTED]> To: Sent: Friday, March 16, 2007 7:49 PM Subject: Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1 notfindingviruses On Fri, 16 Mar 2007 19:45:10 -0400 "John Fleming" <[EMAIL PROTECTED]> wrote:

[Clamav-users] Clamd reload cpu loading

2007-03-18 Thread Dennis Peterson
I wrote a short perl script to send a command to clamd's Unix socket to force 0.90.1 clamd to reload: #!/usr/local/bin/perl use IO::Socket::UNIX; $clamSocket = "/var/spool/clamav/clamd.socket"; $timeout = 60; $mysock = new IO::Socket::UNIX(Type => SOCK_STREAM, Timeout => $timeout,

[Clamav-users] FYI: MSRBL rsync mirrors

2007-03-25 Thread Dennis Peterson
The rsync mirrors at msrbl.com are not in sync and may create some confusion in your dl scripts. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Does clamav have any certificate?

2007-03-28 Thread Dennis Peterson
Hacı DAYI wrote: Fajar A. Nugraha wrote On 03/28/2007 03:57 AM: Gregory Carter wrote: I would ban this user from this list as it is a Ad in disguise. He just cross posted this same question to the iptables list. Why would that be an Ad? Are you 100% sure (or at least sure enough to de

Re: [Clamav-users] 0.90.1 issues on solaris 5.9

2007-04-03 Thread Dennis Peterson
Gary Casterline wrote: On Tue, Apr 03, 2007 at 07:36:11PM +0300, Henrik Krohns wrote: On Tue, Apr 03, 2007 at 12:29:07PM -0400, Gerard Seibert wrote: On Tue, 3 Apr 2007 11:29:06 -0400 Rick Pim <[EMAIL PROTECTED]> wrote: system: 4 CPU Sun E450, solaris 5.9, gcc 3.4.3 before i start: i don't h

Re: [Clamav-users] Re: freshclam problem

2007-04-06 Thread Dennis Peterson
Gerard Seibert wrote: Did you bother to read this? If so, does it pertain to you? It seems quite probably that English is not the OP's first language and that the message, via translation, is not accurately understood. That is my impression. That message is capable of creating more discomfo

[Clamav-users] What's broken?

2007-04-10 Thread Dennis Peterson
Has the ClamAV backbone died? Trying host db.us.clamav.net (129.64.99.170)... nonblock_connect: connect timing out (30 secs) Can't connect to port 80 of host db.us.clamav.net (IP: 129.64.99.170) Trying host db.us.clamav.net (199.239.233.95)... nonblock_connect: connect timing out (30 secs) Can't c

Re: [Clamav-users] What's broken?

2007-04-10 Thread Dennis Peterson
Fajar A. Nugraha wrote: > Don Drake wrote: >> I'm seeing the same thing. Even my ClamWin puked. >> >> -Don >> >> On 4/10/07, Dennis Peterson <[EMAIL PROTECTED]> wrote: >> >>> Has the ClamAV backbone died? >>> >>>

Re: [Clamav-users] What's broken?

2007-04-10 Thread Dennis Peterson
Fajar A. Nugraha wrote: > Dennis Peterson wrote: >> Fajar A. Nugraha wrote: >> >>>> On 4/10/07, Dennis Peterson <[EMAIL PROTECTED]> wrote: >>>> >>>> >>>>> Has the ClamAV backbone died? >>>>> >&g

<    1   2   3   4   5   6   7   8   9   10   >