Re: [Clamav-users] clamav.conf

2004-04-09 Thread Fajar A. Nugraha
Mike van Vugt wrote: Keep getting the message below over and over again. [EMAIL PROTECTED] root]# /usr/local/sbin/clamd ERROR: Please edit the example config file /etc/clamav//clamav.conf. ERROR: Can't open/parse the config file /etc/clamav//clamav.conf [EMAIL PROTECTED] root]# Edit the f

Re: [Clamav-users] clamav.conf

2004-04-09 Thread Fajar A. Nugraha
Mike van Vugt wrote: Edit the file to make sure it's appropriately configured. Make sure you look at the very top of the file. There's a line that contains "Example" that must be uncommented or you'll get the "Please edit..." message. Hmmm, second time reading this email I noticed something

Re: [Clamav-users] configuring clamav

2004-04-09 Thread Fajar A. Nugraha
Nishant Shah wrote: Hi everyone, I downloaded the clamav-0.70 tar file and I am trying to install it. After reading the documentation and following the steps I reached upto running ./configure --syconfigdir=/etc. After I do that I am having an error: configure error: Need to know how to pack st

Re: [Clamav-users] clamd.ctl not read at bootup

2004-04-09 Thread Fajar A. Nugraha
Karl Hakmiller wrote: Just installed clamav (0.68) on FC1 system. Freshclam works OK but system does not read clamd.ctl at bootup. It's not supposed to "read" it. Based on your config, clamd.ctl is a socket. There is a file named clamd.ctl in /var/run/clamav (which is the dir specified for Loc

Re: [Clamav-users] clamd.ctl not read at bootup

2004-04-12 Thread Fajar A. Nugraha
Karl Hakmiller wrote: I've verified that clamd is running so I suppose the problem is that clamav-milter is unable to communicate with clamd. It would help me in troubleshooting this if you could tell me the default location of the clamav-milter config file and, perhaps, indicate the content I sh

[Clamav-users] Clamd Virus stats using php/rrdtool

2004-04-12 Thread Fajar A. Nugraha
Korchmenuk Nickolay wrote: grep FOUND clamd.log | cut -d \ -f 2 | sort | uniq -c grep FOUND clamd.log | cut -d \ -f 2 | sort | uniq -c | awk '{print $2,$1}' grep FOUND clamd.log | awk '{print $8}' | sort | uniq -c | sort -k1nr,1 Who's next? ;-) me :-) top10 from clamd.log -

Re: [Clamav-users] RAR module failure

2004-04-13 Thread Fajar A. Nugraha
Niek wrote: Kevin Spicer wrote: clamscan --unrar=/path/to/unrar Hmmz, you guys reckon it would be a preformance hit if I start using clamscan instead of clamdscan (the latter hasn't got external rar support). YES! But if you only have low volume mail traffic, then it should not matter much.

Re: [Clamav-users] Clamav RPM

2004-04-13 Thread Fajar A. Nugraha
Mike van Vugt wrote: Tried to install the rpm file but keep getting the error listed below Any sugestions ??? # rpm -i clamav-0.68-2mdk.i586.rpm warning: clamav-0.68-2mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 error: Failed dependencies: It appears mandrake clamav packages are

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Fajar A. Nugraha
Andrei Bucur wrote: How can I configure my system so mail to abuse@ or postmaster@ are not rejected? clamav-milter.c, around line 750 /* * Whitelist of source e-mail addresses that we do NOT scan * TODO: read in from a file */ Ehm. SOURCE e-mail addresses. Are you sure this is what yo

[Clamav-users] new virus (?): "automatically scanned for viruses using xxx"

2004-04-15 Thread Fajar A. Nugraha
I see some occurences of emails containing compressed attachment, not detected by ClamAV, all claiming to be "automatically scanned for viruses using xxx" where xxx is either McAfee, Norton, or possibly other AV vendors, complete with their logo attached. The attachments are not password-protected,

Re: [Clamav-users] 0.70, no milter

2004-04-17 Thread Fajar A. Nugraha
Steven Stern wrote: I downloaded the .tar.gz file for .07 and did a ./configure --enable-milter (among other switches) After a make then make install, there was no clamav-milter. What else is needed to create the milter? do you have sendmail milter libraries? usually you need to have sendm

Re: [Clamav-users] SMTP proxy

2004-04-18 Thread Fajar A. Nugraha
WipeOut wrote: Ian Armstrong wrote: I am looking for an SMTP proxy to use with Clamav. Can anyone recommend one? I am guessing you are meaning something to sit in front of your SMTP server that will scan the mail for viruses and then if clean pass the mail onto the mail server.. I am lookin

Re: [Clamav-users] ClamAV and CGPro

2004-04-18 Thread Fajar A. Nugraha
Itzchak Rehberg wrote: Hi out there, I just try to set up ClamAV with CommuniGate Pro using the cgpav tool. But somehow it does not work: I want the engine to scan the mail and, if a virus is found, add a header to the mail (leaving the action to the user). So I updated the config accordingly, bu

Re: [Clamav-users] [freshclam] problem with temp file

2004-04-18 Thread Fajar A. Nugraha
Emmanuel Saracco wrote: Reading CVD header (daily.cvd): OK ERROR: Can't open new file ./clamav-c5c9e8986810b4fd to write open: Permission denied can someone point me the directory where freshclam try to create this "./clamav-c5c9e8986810b4fd" file? Whatever directory you set in clamav.conf

Re: [Clamav-users] ClamAV and CGPro

2004-04-18 Thread Fajar A. Nugraha
Itzchak Rehberg wrote: I just try to set up ClamAV with CommuniGate Pro using the cgpav tool. But somehow it does not work: EXTFILTER bad response: ADDHEADER "X-Virus-Flag: Yes" 3.5.9 is obsolete. Upgrade to 4.x immediately (CGP upgrade is free). You might have to rewrite your web interf

Re: [Clamav-users] Re: Re: Re: Re: Xclamav: error connecting to filter

2004-04-18 Thread Fajar A. Nugraha
Cecilia Mtz wrote: I checked on /usr/local/sbin and there is nothing for clamav-milter, On the other hand, /usr/local/man/man8/clamav-milter.8 exists, so where is clamav-milter?? Am I missing something? Perhaps you're missing sendmail-devel package? clamav-milter won't built without it. Reg

Re: [Clamav-users] Re: Re: Re: Re: Xclamav: error connecting to filter

2004-04-19 Thread Fajar A. Nugraha
Mike Nolan wrote: Perhaps you're missing sendmail-devel package? clamav-milter won't built without it. Is this a change from 0.65? I have built 0.65 on several Redhat 8 and 9 systems, including clamav-milter, using the sendmail 8.12.10 source with milter support enabled. But 0.70 will not

Re: [Clamav-users] Clamd + Exim. Support relay or not ?

2004-04-20 Thread Fajar A. Nugraha
Михаил wrote: Hello, htllp me please Does ClamAV supports mail server which relays mail ? I mean mail not to localhost but to other MTA's ? YES! That's exactly how I use my exim+exiscan+clamav. Mainly because my main server can't reject virus at SMTP time; exim CAN. I've installed Exim+eciscan an

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Fajar A. Nugraha
Andrea Trasatti wrote: Hello all, I have posted a few messages about clamd not detecting some SomeFool variants when scanning mail, but clamscan was detecting them. While reading some man pages and the conf files, I found another binary called clamdscan. I ran it and this is what turned out: d

Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments

2004-04-22 Thread Fajar A. Nugraha
Jon Roland wrote: If members of this list are serious about getting Linux to displace Windows, this is critical. IMHO, I don't think this is what we're discussing in this list. -- Please avoid sending me Microsoft Office attachments. See http://www.newsforge.com/software/04/03/27/0134204.shtml

Re: [Clamav-users] GNU MP warning

2004-04-22 Thread Fajar A. Nugraha
[EMAIL PROTECTED] wrote: i'm trying to configure clamav 0.70 on RH9 and I get message: WARNING: GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! What mean this? (I see that I have gmp libraries on default location /usr/lib) When building from source, you need to ha

Re: [Clamav-users] Clamd Leaking?

2004-05-11 Thread Fajar A. Nugraha
Rich wrote: Is it advisable to use softlimits with clamd? exec /usr/local/bin/setuidgid qscand \ /usr/local/bin/softlimit -a 4000 /usr/local/sbin/clamd An immediate solution would be to use softlimit and clamdwatch. So, clamd exceeds memory usage -> ulimit prevents allocationg memory ->

Re: [Clamav-users] Clamd Leaking?

2004-05-12 Thread Fajar A. Nugraha
Rich wrote: I tried softlimit but each clamscan process hangs :-/ clamscan should not have anything to do with clamd. Did you mean clamdscan? Did you also use clamdwatch? Did you add the script to kill clamd and start it when clamdwatch says clamd dead/hung? Just using softlimit is not e

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Fajar A. Nugraha
Lucas Albers wrote: Fajar A. Nugraha said: Did you add the script to kill clamd and start it when clamdwatch says clamd dead/hung? What is clamdwatch, I have never heard of it? Where do you get it? It's a simple perl script to determine whether clamd is dead, hung, or alive.

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Fajar A. Nugraha
Rich wrote: Found this Googling, good tool too to monitor clamd ;-) http://www.tildeslash.com/monit/ Yes, it's good indeed. So is daemontools. But when it comes to simplicity, clamdwatch is the simplest one. Which is (I think) why clamdwatch is included on the default clamav tarball package, r

Re: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Fajar A. Nugraha
Mitch (WebCob) wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Spicer Sent: Monday, May 10, 2004 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Re: Virus Alias Database Its running PHP & MySQL on apache2, unfortunately this is my home

Re: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Fajar A. Nugraha
Russ Phillips wrote: 2. If it could handle heavy loads, it would be useful if the form used GET instead of POST, so that links to specific viruses could be posted. Apparently it can handle GET too. I'd post an update to clamd-stat in a few hours which includes link to Kevin's alias database for

[Clamav-users] OT: clamd-stat 0.2 released

2004-05-10 Thread Fajar A. Nugraha
A new version of clamd-stat is available on http://clamav.or.id/contrib/clamd-stat/ Demo is on http://clamd-stat.clamav.or.id/ Shows links to Kevin Spicer's virus alias db on virus names. Mrtg-like graphs can show custom start and end times. Packaging still needs to be fixed (no ChangeLog, Copyin

Re: [Clamav-users] GNU MP warning

2004-04-25 Thread Fajar A. Nugraha
McWhirter,Julia wrote: I have this problem also and I am running on Solaris 8. Is gmp-devel included in the gmp sources or a build option or something else. It's included. I can see that gmp and gmp-devel are available as rpm's for RH, SUSI etc RPMS generaly split thir gmp package to gmp (lib

Re: [Clamav-users] installation update require

2004-04-26 Thread Fajar A. Nugraha
Vito Pascali wrote: PC_Vito root # freshclam WARNING: Your ClamAV installation is OUTDATED - please update immediately ! WARNING: Current functionality level = 1, required = 2 PC_Vito root # freshclam -V freshclam / ClamAV version devel-20040408 So am I outdated? wich version I should install?

Re: [Clamav-users] installation update require

2004-04-26 Thread Fajar A. Nugraha
Marc wrote: Fajar A. Nugraha wrote: Either 0.70 (not the -rc one) or the lastest CVS snapshot version (mine is ClamAV version devel-20040426) I'm using clamav 0.70 stable. How can I get the version of clamav (including devel-x) Well, clamav source (both stable and devel) is a

Re: [Clamav-users] Trying to install on old machine

2004-04-26 Thread Fajar A. Nugraha
Christian Hack wrote: I'm running an old RH6.2 based box, which does most things OK for now (it's still kernel 2.2 though). I'm looking to upgrade soon, but would like to get ClamAV going on it for now. [snip] followed by a big bunch of errors. The same errors appear in my config.log. Rather

Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Fajar A. Nugraha
Zoong Pham wrote: Can I install ClamAV on the Window server and have it scanning inbound and outbound mails for the mail server on the old Pentium ? If you use clamav-milter, the answer is yes. If you use other "glues" (e.g. mail-scanner, amavis, etc.) that depends on the glue. Try man clamav-

Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Fajar A. Nugraha
Zoong Pham wrote: The Windows server has cyswin installed as well. Should I install ClamAV natively to windows or to cygwin? I don't know how to install (read : compile) ClamAV natively to Windows (using MS-VC or Borland CPP). If you know how, that would be great. Just make sure you use the lat

Re: [Clamav-users] Your ClamAV installation is OUTDATED

2004-04-29 Thread Fajar A. Nugraha
Guillermo Llenas wrote: This is from the Faq. :) If you don't upgrade immediately you will be in big trouble :) Well, perhaps not BIG trouble, but you will not be able to scan some types of virus. -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de John M

Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-29 Thread Fajar A. Nugraha
Brad Morgan wrote: I don't know anybody who actually runs ClamAV on Windows (with cygwin, usually) for mail scanning on PRODUCTION servers. I'm running ClamAV on a PRODUCTION Windows email server using the snapshots that Fajar provides. WOW. Is it stable? How are you using it, with clamd o

Re: [Clamav-users] strlcpy - help required

2004-05-02 Thread Fajar A. Nugraha
Ajay S wrote: Hi, I have installed calmav on my linux 7.3 successfully but with clamav-milter. When I am trying to install it with ./configure --enable-milter. it gies me the error of strlcpy & strlcat not found. A work around is to build staticly on other linux box, then run it on your (R

Re: [Clamav-users] ArchiveBlockEncrypted

2004-05-03 Thread Fajar A. Nugraha
Sam Smith wrote: I have not kept up with the password protected archive virus development. Is it still necessary to block password protected zip files? No need :) Or can clamd now detect viruses in a password protected zrchive? It has been for a long time. If you're paranoid, however, you can

Re: [Clamav-users] bin files - daily.cvd

2004-05-05 Thread Fajar A. Nugraha
Paul Bruce wrote: To attempt to bring clamav's virus database up to date I tried to load the bin files located at http://news.gmane.org/gmane.comp.security.virus.clamav.virusdb ??? This is just an archive of clamav-virusdb list. A typical file at this location looks like 329-001.bin ??? N

Re: [Clamav-users] ClamAV with Exim4 on Debian Sarge

2004-05-18 Thread Fajar A. Nugraha
Pradeeper wrote: Hi All I'm implementing a Spam and a Virus wall using Exim4, SA-Exim, SpamAssassin, Exiscan-ACL clamav-daemon and clamav on Debian Sarge. This is stand before my mail server and scan my mails for spam and viruses. Spam blocking is fine, but problem is in virus thing. You should

Re: [Clamav-users] Exim + ClamAV + what?

2004-05-18 Thread Fajar A. Nugraha
We currently use Sophos AV and we have a large number of corporate customers who need some assurance that the level of AV protection we are providing is more than respectable. Can anybody point me at any good documents or pages that I can put in front of our marketing people to reassure them that

Re: [Clamav-users] ClamAV not scanning for viruses... Help please

2004-05-20 Thread Fajar A. Nugraha
Brian wrote: Hi all. Hoping someone can point me in the right direction with this issue. I have setup and configured (correctly I thought) ClamAV using cgpav with CommuniGate Pro on RedHat Enterprise Linux. When sending test emails containing the eicar.com virus, the messages aren't being scanned

Re: [Clamav-users] Upgrade of Clamav breaks debian/exim/clamav

2004-05-21 Thread Fajar A. Nugraha
Brock Nanson wrote: I poked around the archives but didn't find anything that looked like my problem... I'm running exim4 on a debian box. Installed spamassassin and clamav a couple of months ago, using the Tim Jackson howto. Worked pretty much as advertised. Freshclam started telling me I n

Re: [Clamav-users] clamd dying: reasons

2004-05-21 Thread Fajar A. Nugraha
[EMAIL PROTECTED] wrote: Had to revive the thread again. But I still haven't got a clue in which cases might clamd die without cleaning the socket file. Try a recent version (0.71 or even a CVS snapshot), and run clamdwatch on your crontab (included under contrib directory on source tarball). Wi

Re: [Clamav-users] Clamav 0.71 - freshclam problem

2004-05-24 Thread Fajar A. Nugraha
Clamav wrote: I'm using clamav with Solaris 8 and have a problem with the latest stable version with freshclam - what could be the reason for this? # /usr/local/bin/freshclam ClamAV update process started at Mon May 24 11:34:26 2004 Reading CVD header (main.cvd): OK Downloading main.cvd [*] ERROR:

Re: [Clamav-users] Re: Question regarding virus detection

2004-05-25 Thread Fajar A. Nugraha
Jim Gunkel wrote: "Jim Maul" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] Any more ideas? I just installed ClamAV 0.71 (Windows build devel-20040520) today (upgraded from 0.70) and now I'm getting virii through to our email accounts with similar symptoms. One of the original

Re: [Clamav-users] Re: Question regarding virus detection

2004-05-25 Thread Fajar A. Nugraha
Jim Gunkel wrote: "Fajar A. Nugraha" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] I tested your file on a W2K server, with 0.71 and devel-20040524, both found the virus. Try updating your installation. It was the latest available from http://www.sosdg.

Re: Res: Re: [Clamav-users] ERROR: Parse error at line 67: Unknown option ThreadTimeout

2004-05-30 Thread Fajar A. Nugraha
Mário L. Ghoneim wrote: Seems like the problem is a mixed installation of old/new ClamAV. It´s true. I upgraded from 0.68. So, how can I to fix it? Just remove that line from clamav.conf. -- Please avoid sending me Microsoft Office attachments. See http://www.fsf.org/philosophy/no-word-attachm

Re: [Clamav-users] Running Clamd as root?

2004-05-31 Thread Fajar A. Nugraha
Sean Matheson wrote: Hi all; We have a need to run clamd as root for it to function properly, does anyone know a reason this is a bad idea? We have changed the config to make it listen on the unix socket. The recommended way to run unix daemon is running as non-root user. That way, should tha

Re: [Clamav-users] Re: Freshclam not responding

2004-06-01 Thread Fajar A. Nugraha
Gervase wrote: ERROR: Can't get information about database.clamav.net host. Seems like DNS problem. Configure your DNS server properly, or use proxy (edit freshclam.conf) What does "nslookup database.clamav.net" or "host database.clamav.net" says? It should say something like [EMAIL PROTECTED] d

Re: [Clamav-users] windows version

2004-06-03 Thread Fajar A. Nugraha
Kent Emia wrote: downloaded the windows version and have some problems in the updating of virus definition, search for the FAQ but still no to avail ... is there any updates regarding this problem .. im having these error Where from? Try http://clamav.or.id/ Regards, Fajar -- Don't use GIF. Use

Re: [Clamav-users] CommuniGate Pro and ClamAV

2004-06-03 Thread Fajar A. Nugraha
Jeff Wark wrote: We have recently gotten the CommuniGate Cluster [2 front-ends/2 back ends] and I am currently testing clamav on it. I use clamav + cgpav on frontends only. Backends only process direct traffic for webmail, so I save some CPU load by not installing it there. Consequently, my cgpa

Re: [Clamav-users] Re: Freshclam not responding

2004-06-03 Thread Fajar A. Nugraha
Gervase wrote: On Wed, 2004-06-02 at 15:49, Ron Snyder wrote: if you do a 'dig database.clamav.net' or a 'host database.clamav.net', do you get useful answers? No. Both merely say: "truncated, retrying in TCP mode, timed out -no servers could be reached". I am baffled, especially by the f

Re: [Clamav-users] Dealing with a flood of mail

2004-06-03 Thread Fajar A. Nugraha
Brock Nanson wrote: I've got a server running a Discus forum in addition to Exim4, Clamav and spamassassin. One of the functions of the forum is to send the latest posting to all on the mail list. The result is a flood of mail that Exim sends on to Clam and Spamassassin. Prior to adding Clam

Re: [Clamav-users] ClamAV 0.72 Released - binaries

2004-06-04 Thread Fajar A. Nugraha
Brian May wrote: Since it was not posted here, ClamAV 0.72 is available for download. Major bugfixes in this release include crashes with corrupted BinHex messages and some Excel documents. Protection against archive bombs (not fully functional since 0.70) was improved and a number of other impro

Re: [Clamav-users] Difference between clamscan and clamd

2004-06-07 Thread Fajar A. Nugraha
Mike Robinson wrote: No, you just need to start clamd as a background daemon and then run clamdscan in place of clamscan. As far as I know clamdscan is 100% command line compatible with clamscan, Actually there's permission problem too. If you run it on Windows, or if you run clamd as root, it s

Re: [Clamav-users] still not working in windows

2004-06-07 Thread Fajar A. Nugraha
Kent Emia wrote: hi there ... im still worried that my clamAV windows version is still not able to update virus definition to the internet what is the proper url for the download of virus definition Generally, it involves running freshclam.exe. BTW, If you use clamav to scan your PC files (e.g n

Re: [Clamav-users] limit file size

2004-06-08 Thread Fajar A. Nugraha
K. Shantanu wrote: Hi, How do I make clamdscan scan files less than X bytes only? You can limit to scan archives less than x bytes, (ArchiveMaxFileSize) but there's no setting to limit other types. If you use exim+exiscan, the limitation for message size to be scanned is implemented in exim, not

Re: [Clamav-users] still not working in windows

2004-06-08 Thread Fajar A. Nugraha
Kent Emia wrote: yah im using the clamWin but still can't get it download a definition If you're using it to scan mail for a mail server : Step 1 : try downloading new clamav Win32 binary from http://clamav.or.id/snapshot/clamav-devel-latest.cygwin.zip Step 2 : follow installation instructions o

Re: [Clamav-users] Starting Clamav on RH9

2004-06-08 Thread Fajar A. Nugraha
sarky wrote: Does anyone out there have a Script or can explain how to get it to start with a system reboot? At the moment i have in rc.local but it is not coming up. On source tarball, look under contrib directory, init/RedHat/* Regards, Fajar -- Please avoid sending me Microsoft Office attachmen

Re: [Clamav-users] Installing ClamAV 0.72 on FC2

2004-06-08 Thread Fajar A. Nugraha
Darren wrote: Just a follow-up I copied the file into a different directory for example /home/darren instead of /home/darren/Clamav Antivirus and it installed fine. So, I'm guessing it's problem with space on path ? -- Please avoid sending me Microsoft Office attachments. See http://www.fsf.org/

Re: [Clamav-users] does vbs.pub recognized by clamav?

2004-06-10 Thread Fajar A. Nugraha
Liew Toh Seng wrote: hi, can i know currently the Virus Database is updated and maintained by who ? http://www.clamav.net/team.html#pagestart is there any mirror site for the Virus database so that when the current server is down, i can change the update scripts to download the latest vi

Re: [Clamav-users] clam 0.72 + linux + ntfs + ole2 = segfault :(

2004-06-11 Thread Fajar A. Nugraha
Mehmet Ekiz wrote: Hi, I am using clamav binaries from Crashhat for Fedora Core 1. And have an NTFS filesystem mounted through http://linux-ntfs.sourceforge.net/. After upgrading 0.72, there is two problems with OLE2 files: 1. clamscan and clamd both segfaults when trying to scan OLE2 files loca

Re: [Clamav-users] database.clamav.net resolution

2004-06-14 Thread Fajar A. Nugraha
Ryan Moore wrote: Damian Menscher wrote: What do you get when you do "host database.clamav.net" ? Yea, doh. Is the DNS supposed to return a RR based on your location? Actually, for database.clamav.net, the answer is yes. Or to be specific, based on your IP address. It's an effort to balance mirror

Re: [Clamav-users] database.clamav.net resolution

2004-06-14 Thread Fajar A. Nugraha
Damian Menscher wrote: On Tue, 15 Jun 2004, Fajar A. Nugraha wrote: Ryan Moore wrote: Damian Menscher wrote: What do you get when you do "host database.clamav.net" ? Yea, doh. Is the DNS supposed to return a RR based on your location? Act

Re: [Clamav-users] Freshclam not updating

2004-06-15 Thread Fajar A. Nugraha
Neil Aggarwal wrote: Jim: Thanks for catching my typo. Now, when I run these commands: touch /var/log/clamav/clam-update.log ; chmod 0600 /var/log/clamav/clam-update.log ; chown clamav.clamav /var/log/clamav/clam-update.log ; /usr/local/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I get

Re: [Clamav-users] Clamav 0.72 on Solaris 9: Bus Error on zip files?

2004-06-15 Thread Fajar A. Nugraha
Christer Mort Boräng wrote: In message <[EMAIL PROTECTED]>, Alex S Moore writes: On Fri, 11 Jun 2004 16:22:34 +0200 [EMAIL PROTECTED] (Christer "Mort" Boräng) wrote: I've installed clamav 0.72 on our new shiny SunFire 880 running Solaris 9, but for some reason it gives a Bus Error when tryi

Re: [Clamav-users] OT: Virus page almost ready to go

2004-06-15 Thread Fajar A. Nugraha
George Chelidze wrote: admin is notified about infection incident. I'm guessing you only get small amount of infections (e.g. less than 10.000 a day) ? Regards, Fajar -- Please avoid sending me Microsoft Office attachments. See http://www.newsforge.com/software/04/03/27/0134204.shtml ---

Re: [Clamav-users] bug in clamdscan

2004-06-20 Thread Fajar A. Nugraha
Dan Egli wrote: [EMAIL PROTECTED] root]# clamdscan $PWD /root: Can't access the file ERROR Ok, clamd was running as clamav (I never know what daemons maintain the 0 uid and which ones call set_uid()). But my above question stands. Where is this ERROR file coming from? ERROR is not a file name

Re: [Clamav-users] no socket mode on SuSE 9.1

2004-06-24 Thread Fajar A. Nugraha
Schoenwaelder Oliver wrote: Hi, I've just made a fresh installation of SuSE 9.1 and installed clamav. I changed the default SuSE clamav.conf to use a local socket but whatever I use clamavd won't start. Without sockets it works. SuSE currently distributes version 0.70 which is not the latest. I in

Re: [Clamav-users] clamav-milter install problem

2004-07-06 Thread Fajar A. Nugraha
orv wrote: I'm trying to install clamav .74 on an ensim box for use with sendmail. Your ensim box probably does not have the necessary package to build milter. Is sendmail-devel rpm installed? --- This SF.Net email sponsored by Black Hat Briefing

Re: [Clamav-users] ERROR in new setup...

2004-07-08 Thread Fajar A. Nugraha
Kevin W. Gagel wrote: I'm setting up a new server and my initail testing is giving me only errors. I have ClamAV installed OK but following the manuals example of: clamdscan -r -l scan.txt testdir Give me "Access denied. ERROR" That's because you're trying to scan root's files when clamav is run

Re: [Clamav-users] clamwin issue - last one

2004-07-14 Thread Fajar A. Nugraha
Marc Hultquist wrote: I was unable to find anything about changing which database clamwin uses :\ Last I heard, it is HARDCODED to database.clamav.net :) Regards, Fajar --- This SF.Net email sponsored by Black Hat Briefings & Training. Attend

Re: [Clamav-users] Fedora Core 2_64 Problems.

2004-07-14 Thread Fajar A. Nugraha
David wrote: Hi, I'm having problems installing clamav on fedora core 2_64. If I use the rpm I get the errors below. Is it rpm for amd64? rpm for i386 might not work rpm -ivh --test /root/clamav-0.74-1.i386.rpm error: Failed dependencies: libbz2.so.1 is needed by clamav-0.74-1 libgmp.

Re: [Clamav-users] Problem with CVS?

2004-07-22 Thread Fajar A. Nugraha
Shane Wise wrote: Running slackware 8.1sendmail version is 8.13.0 All has been running fine with clamav-milter .73we downloaded the CVS yesterday morning(showed version devel-20040721)...in order to catch some of the newer bugs that said the cvs was required... All went fine until we

Re: [Clamav-users] Redhat 7.2 and 7.3 clamav-devel-latest

2004-08-02 Thread Fajar A. Nugraha
Vernon A. Fort wrote: Attempting to compile clamav-devel-latest on a redhat 7.2 or 7.3 box but I'm getting autoconf / automake errors. Can I re-run the automake and autoconf and if so, what are the command line args. On the untarred-dir, try running aclocal autoconf automake That should work,

Re: [Clamav-users] ClamAV-20040805

2004-08-05 Thread Fajar A. Nugraha
Rick Macdougall wrote: Jeremy Kitchen wrote: On Thursday 05 August 2004 07:44 pm, René Bellora wrote: bugs to [EMAIL PROTECTED] Thank you ! I'm testing against old viruses, it seems to miss JS.FortNight.B. Same files, with 0.75 and same signatures are caught *cough* Hi, What's that mean Jeremy

Re: [Clamav-users] Building latest CVS on Fedora Core 1

2004-08-06 Thread Fajar A. Nugraha
Dan O'Brien wrote: Don't ususally do the CVS builds, but I want to try the new template features. I've got automake-1.7.8-1 and autoconf-2.57-3 installed. Can I build with this configuration? On build dir, try running aclocal, autoconf, and automake. That should work. Regards, Fajar -- h

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-09 Thread Fajar A. Nugraha
Damian Menscher wrote: On Mon, 9 Aug 2004, Christopher X. Candreva wrote: Suppose there was a DNS entry, say virusdb.clamav.net (or version.virusdb.clamav.net, etc), that returned simply a text record with the current DB version in it. After seeing a Defcon talk on putting arbitrary data in D

Re: [Clamav-users] OpenSource Clamav not ready?

2004-08-12 Thread Fajar A. Nugraha
Eric Becker wrote: Although, he does bring up a good point about the ScanMail option still not being officially supported. While I haven't had any problems with the feature on my work's server, it certainly does raise problems with some network admins. ScanMail is not the only way to scan mai

Re: [Clamav-users] error in Clamav 0.72 with EXIM 4.41

2004-08-12 Thread Fajar A. Nugraha
Silly Billy wrote: Hi, I'm configuring my EXIM 4.41 with Clamav 0.72 .. You should try 0.75.1. 2004-08-12 12:50:28 1Bv9Pw-r3-I6 malware acl condition: clamd: unable to connect to UNIX socket /var/run/clamav/clamd (Permission denied) /var/run/clamav/clamd must be writable by exim user.

[Clamav-users] multiple signature for the same virus name in daily.cvd

2004-08-13 Thread Fajar A. Nugraha
Hi, This is really a question for db maintainer, but I think it wouldn't hurt for normal user to know about this too. I'm parsing viruses.db2 (from daily.cvd with sigtool -u) for an application that I'm working on, and I found multiple signature for several virus names. For example : Trojan.Clic

[Clamav-users] daily.db.clamav.or.id : clamav db update via DNS

2004-08-13 Thread Fajar A. Nugraha
Hi, Following the long thread of "Idea for more timely virusdb updates", I have put together a basic system of putting daily.cvd in DNS TXT records. It stores current version of daily.cvd, new signatures, and what time a particular signature was added. Which means the next time clamav come up wit

Re: [Clamav-users] Clamd - reloading of database delayed after freshclam update

2004-08-15 Thread Fajar A. Nugraha
Brian Morrison wrote: Anyone any ideas as to why when freshclam updates daily.cvd, clamd does not reload the database until the next integrity check time arrives? I have told freshclam to notify clamd in freshclam.conf and passed the correct config file to clamd to ensure it gets the correct config

Re: [Clamav-users] Clamd - reloading of database delayed after freshclam update

2004-08-16 Thread Fajar A. Nugraha
Brian Morrison wrote: You'll have something like this on freshclam.log : -- Received signal 14, wake up ClamAV update process started at Sun Aug 15 17:27:15 2004 main.cvd is up to date (version: 24, sigs: 21793, f-level: 2, builder: tomek) daily.cvd updated (vers

Re: [Clamav-users] Leak on Linux 2.4

2004-08-17 Thread Fajar A. Nugraha
Trog wrote: Also, the libc memory allocation routines will almost certainly not free the used memory, but keep it in reserve to later usage. Eh? So if at some point it decides to use over 3GB of memory (like once happened here, Solaris/Sparc, for devel versions after 0.75.1), it will not free

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Fajar A. Nugraha
Nigel Horne wrote: People here seem to be under the misunderstanding that free(3) will always reduce the amount of memory used by an application, returning memory back to the operating system. So it isn't? So the fact that "top" returns VIRT 3 GB but RES only 11M is normal? I'm confused then.

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Fajar A. Nugraha
Jason Haar wrote: On Tue, Aug 17, 2004 at 12:57:15PM +0100, Brian Morrison wrote: Yes, there's almost no point to having free physical memory on a machine, if it is freed and not claimed by something else the VM will remember the last use and not overwrite or swap unless something else needs to

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-20 Thread Fajar A. Nugraha
Julio Canto wrote: Phil Ershler wrote: Every 10 minutes is much to often. There was a thread about this issue just a while ago. The consensus was 1 to 4 hours and not exactly on the hour. If everybody ran freshclam every 10 minutes, the server would croak. Phil For the shake of reducing the 'u

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-20 Thread Fajar A. Nugraha
Nigel Horne wrote: Is it possible to use HEAD to reduce load? I believe it already uses RANGE, so traffic wise the load is greatly reduced. However, if every user decides to set checks every minutes the bottleneck will be in maximum connection. This will not happen if version checks is done vi

Re: [Clamav-users] Idea for more timely virusdb updates

2004-08-23 Thread Fajar A. Nugraha
Tomasz Kojm wrote: Hi, new freshclam is ready for testing: [snip] We're not willing to use DNS for database updates. Ouch ... On September 1, the databases will be restructured and the size of daily.cvd limited. Well, at least there's that :) I'm concerned about the fact that you only use o

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-24 Thread Fajar A. Nugraha
Julio Canto wrote: Dennis Peterson wrote: It would quickly stop being the quickest responding server as you can well imagine, and the owner just may decide to withdraw it as a mirror. Yes, I got it now... I didn't really thought the Clam park of users were so big. Well, yeah :) Thank you for th

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-24 Thread Fajar A. Nugraha
Julio Canto wrote: (www.virustotal.com), and to keep av signatures fully updated is one of the most important things to keep in mind. This is mostly because we pretend to offer the 'best' of that engines, and because from time to time we publish information of when was detected new viruses so p

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-24 Thread Fajar A. Nugraha
Dennis Peterson wrote: The ClamAV vendor can offer a push of the AV patterns to paying customers with special needs. That way you will receive the updates as quickly as do the mirrors and the vendor recovers some of the cost of maintaining ClamAV. Eh? Really? This is something new :)

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Fajar A. Nugraha
Andy Fiddaman wrote: On Tue, 24 Aug 2004, Dennis Peterson wrote: ; > > The ClamAV ; > > vendor can offer a push of the AV patterns to paying customers with ; > > special needs. That way you will receive the updates as quickly as do the ; > > mirrors and the vendor recovers some of the cost of maint

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Fajar A. Nugraha
Dennis Peterson wrote: Shayne Lebrun wrote: Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. Hmm ... which makes me wonder. Say ... 1) I host an official public mirror, which

[Clamav-users] FYI : recent clamav db updates, Google groups

2004-09-01 Thread Fajar A. Nugraha
FYI, this is the time and number of new virus added to daily.cvd in the last 11 days. The numbers are pretty impressive. The details, including virus names, is available on clamav-virusdb archive. [EMAIL PROTECTED] fajar]$ for file in 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475;do

Re: [Clamav-users] FYI : recent clamav db updates, Google groups

2004-09-01 Thread Fajar A. Nugraha
Tomasz Papszun wrote: built.473.daily.db.clamav.or.id text "31 Aug 2004 21-27 +0200" newcount.473.daily.db.clamav.or.id text "0" Why 0? There were 1 signature added (in new file malware.hdb contained in daily.cvd). Because I only check the unpacked viruses.db2, not the hdb (yet). It still m

Re: [Clamav-users] Install Clam-dev

2004-09-01 Thread Fajar A. Nugraha
Wilson Mak wrote: Hi all, I like to install clamav dev version, but got these errors when running "make": [snip] I am using RH9. Is there a way to install dev version without upgrading Autoconf to 2.58? Try running aclocal && autoconf && automake on the source dir, then run ./configure - or -

[Clamav-users] Warning : clamdwatch.pl incompatible with the "new" EICAR signature

2004-09-02 Thread Fajar A. Nugraha
With the signature update for EICAR test virus, clamdwatch.pl no longer works. To use clamav test virus file instead, change the lines # EICAR Test "file" to # ClamAV Test "file" The signature is on file "test" in "test" directory of clamav source. You also need to change the expected respo

<    1   2   3   4   5   >