[clamav-users] FreshClam - DNS issues since October 31st

2017-11-08 Thread Jeff
: raynman) ... I visited the archives and found a post describing the same exact issue but I did not find a post saying if the issue has been resolved. I also see others are not getting this warning. Is there something I can do on my end to fix this? I'm running ClamAV on Windows. Cheers,

Re: [clamav-users] FreshClam - DNS issues since October 31st

2017-11-08 Thread Jeff
The last three updates did not have the error. Below is the last error I got: -- ClamAV update process started at Wed Nov 08 13:13:12 2017 WARNING: DNS record is older than 3 hours. WARNING: Invalid DNS reply. Falling back to HTTP mode. securiteinfo.hdb is up to

[clamav-users] Batch file for Windows.

2018-09-17 Thread Jeff
particular directory, moves any infected files to another directory and emails an alert if a virus is detected. The email alert should contain info about the infected file(s) including the path. Keeping fingers crossed :-) Thanks, Jeff --

Re: [clamav-users] Batch file for Windows.

2018-09-18 Thread Jeff
th... :End PAUSE . How do I tweak the code above so that the command below is used if a virus is found: . SwithMail.exe /s /x "SwithMailSettings.xml" . If I use SwitchMail, I can have it use logs.txt as the body of the email alert. Thanks, Jeff -

[clamav-users] Clamd high CPU during clamdscan

2016-01-26 Thread Jeff Johnson
I have rolled out clamd to a handful of Red Hat systems and they all seem to have high CPU usage when clamdscan runs at 2am. The rest of the day, clamd drops down to minimal usage. There isn't a lot of change on these systems so I can't imagine it's finding much, but it really pegs the CPU's. What

Re: [clamav-users] Clamd high CPU during clamdscan

2016-01-27 Thread Jeff Johnson
ingle core. There is > no way > around the disk IO problem because it scans files. But - if you run it just > after a system backup chances are good it will find many of the files it > scans > in cache. That helps reduce disk IO but bumps up CPU load. > > dp > > > On 1/

[clamav-users] clamd does not bind to port when starting through init.d/service ubuntu 16.04

2016-08-26 Thread Jeff Dyke
i have the following in my config TCPSocket 3310 and if i start clamd with sudo -u clamav /usr/sbin/clamd --config-file=/etc/clamav/clamd.conf it *will* bind to that address and port. The following lines are in the log through a direct start: Fri Aug 26 17:09:53 2016 -> TCP: Bound to [0.0.0.0]:33

Re: [clamav-users] clamd does not bind to port when starting through init.d/service ubuntu 16.04

2016-08-29 Thread Jeff Dyke
oss servers via HAProxy, which works great when they are properly started. I'll try your suggestions and report back, i've been gone all weekend, so sorry for the delay and thanks for you response. On Sat, Aug 27, 2016 at 12:30 PM, G.W. Haywood wrote: > Hi there, > > On

Re: [clamav-users] clamd does not bind to port when starting through init.d/service ubuntu 16.04

2016-08-29 Thread Jeff Dyke
.08.2016 um 18:30 schrieb G.W. Haywood: > >> Hi there, >> >> On Sat, 27 Aug 2016, Jeff Dyke wrote: >> >> ... if i start clamd with >>> sudo -u clamav /usr/sbin/clamd --config-file=/etc/clamav/clamd.conf >>> it *will* bind to that address and por

Re: [clamav-users] clamd does not bind to port when starting through init.d/service ubuntu 16.04

2016-08-29 Thread Jeff Dyke
. On Mon, Aug 29, 2016 at 9:51 AM, Reindl Harald wrote: > > > Am 29.08.2016 um 15:34 schrieb Jeff Dyke: > >> our config locations for the .service files are in slightly different >> areas, so do you mind saying what distro you're running >> > > Fedora b

Re: [clamav-users] clamd does not bind to port when starting through init.d/service ubuntu 16.04

2016-08-31 Thread Jeff Dyke
-clamav-to-listen-on-tcp-3310?newreg=0a11acb857d341e7b3b4a44aed83553e https://answers.launchpad.net/ubuntu/+source/clamav/+question/357500 On Mon, Aug 29, 2016 at 10:01 AM, Jeff Dyke wrote: > thats what i assumed/knew just checking. It may be something odd with > this particular lxc con

[clamav-users] opinion requested - virus found, but only on clamscan, not other scanners.

2016-11-21 Thread Jeff Dyke
site, the only scanner that found it was clamscan and it seems that they use a number of big name scanners. (McAfee, Symantec, Kaspersky and many others) Has anyone had any experience with clamscan detecting items like this that other scanners don't? Thanks. Jeff __

Re: [clamav-users] opinion requested - virus found, but only on clamscan, not other scanners.

2016-11-21 Thread Jeff Dyke
I'm not sure that it is. But i can submit it, b/c i'm not sure that it is. Thanks Jeff On Mon, Nov 21, 2016 at 4:25 PM, Al Varnell wrote: > Suspected False Positives should be submitted to <http://www.clamav.net/ > reports/fp>. > > -Al- > ClamXav User >

Re: [clamav-users] opinion requested - virus found, but only on clamscan, not other scanners.

2016-11-21 Thread Jeff Dyke
Thanks again i have done that now On Mon, Nov 21, 2016 at 8:05 PM, Jeff Dyke wrote: > I'm not sure that it is. But i can submit it, b/c i'm not sure that it is. > > Thanks > Jeff > > On Mon, Nov 21, 2016 at 4:25 PM, Al Varnell wrote: > >> Suspected F

Re: [clamav-users] FP Pdf.Exploit.CVE_2016_1091-2

2016-11-23 Thread Jeff Dyke
I also submitted an FP a few days ago. I'm not as much of a fan of whitelisting what could be a fairly serious exploit that i'd be allowing people to download if it were valid. Hopefully it will be fixed up soon. The documents i found it in are public, so if there is way to expedite the process,

Re: [clamav-users] FP Pdf.Exploit.CVE_2016_1091-2

2016-11-29 Thread Jeff Dyke
ut knowing, have have a site user download an infected file. Thanks, happy to do anything i can. Jeff On Wed, Nov 23, 2016 at 12:11 PM, Jeff Dyke wrote: > I also submitted an FP a few days ago. I'm not as much of a fan of > whitelisting what could be a fairly serious exploit that i&#

Re: [clamav-users] FP Pdf.Exploit.CVE_2016_1091-2

2016-11-30 Thread Jeff Dyke
/en/file/8f40782bb1d729eac8d47733e6b3fa2a6a1d708c43342fed7f997551491620ac/analysis/1480514926/ Jeff On Wed, Nov 30, 2016 at 6:26 AM, Ralf Hildebrandt < ralf.hildebra...@charite.de> wrote: > * Ralf Hildebrandt : > > * Al Varnell : > > > > > > On Wed, Nov 30, 2

Re: [clamav-users] FP Pdf.Exploit.CVE_2016_1091-2

2016-11-30 Thread Jeff Dyke
Thanks Joel and Al, hopefully my hashes, files and virustotal urls are helpful. Jeff On Wed, Nov 30, 2016 at 10:21 AM, Joel Esler (jesler) wrote: > Gene, > > Al was simply asking, as he knows we may ask, and it helps us identify the > file faster. Otherwise we have to search thro

Re: [clamav-users] FP Pdf.Exploit.CVE_2016_1091-2

2016-11-30 Thread Jeff Dyke
Just a user or not Al, thanks for the quick update!! Also thank you to the folks that looked into this. I just rescanned everything i posted after running freshclam and it checks out. Thanks for the efforts! On Wed, Nov 30, 2016 at 5:44 PM, Al Varnell wrote: > And the signature appears to have

Re: [clamav-users] Unable to download database

2017-08-23 Thread Jeff Dyke
I've been experiencing the same thing throughout the day (from aws us-east-1), seems to be intermittent, at least for me. My HIDS has been going crazy :) Looks OK right now, only a couple failures $> host db.us.clamav.net | awk '/address/ { print $NF }' | xargs -L1 ping -c 1 PING 155.98.64.87 (1

Re: [Clamav-users] Out of Memory

2010-03-12 Thread jeff donovan
d out to be AutoWhitelist growing eating up Hardrive space, eventually the OS had no room for virtual memory. see; /var/clamav/.spamassassin/autowhitelist -jeff ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] clamd socket not accessable.

2010-09-02 Thread jeff donovan
On Sep 2, 2010, at 12:40 PM, Oliver Schinagl wrote: > Hello all, > > I've been stuffed with the old and known "(!!)ClamAV-clamd av-scanner > FAILED: run_av error: Too many retries to talk to > /var/run/clamav/clamd.sock (Can't connect to UNIX socket > /var/run/clamav/clamd.sock: Permission denie

Re: [Clamav-users] Tru64 cc error with 0.90.1

2007-04-04 Thread Jeff Donsbach
Tru64 UNIX Programmer's Guide, online here - < http://h30097.www3.hp.com/docs/base_doc/DOCUMENTATION/V51B_HTML/ARH9VDTE/TITLE.HTM Jeff D ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] looking for a stream of messages for testing purposes

2007-04-13 Thread Jeff Donsbach
that you use for your own testing and if so, could I get a copy of it? Btw, I'll be happy to share my results. I have to write up a presentation on what I find. Thanks in advance for any pointers. Jeff D ___ Help us build a comprehensive ClamAV gu

Re: [Clamav-users] looking for a stream of messages for testing purposes

2007-04-16 Thread Jeff Donsbach
On 4/13/07, I wrote: > > [I tried asking this on the developer's mailing list, but posting is > restricted there, so] > > I am looking to do some performance testing of ClamAV in various > configurations on various hardware. I am wondering if you have a stash of > email messages, with at l

Re: [Clamav-users] looking for a stream of messages for testing purposes

2007-04-16 Thread Jeff Donsbach
e has more some samples they can share, I'll take whatever I can get. Thanks a lot. Jeff D ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] is clamd STREAM mode multi-threaded?

2007-05-28 Thread Jeff Donsbach
When clamd is called in STREAM mode, is each STREAM handled by a different thread (assuming a moderate load), like MULTISCAN? Secondarily, does clamav-milter call clamd in STREAM mode? thanks in advance ___ Help us build a comprehensive ClamAV guide

[Clamav-users] clamav-milter won't start

2007-07-12 Thread Jeff Wasilko
Hi: I am having problems getting clamav-milter to start: When I start it it seems to load the fingerprint database, and then exit: Loaded ClamAV 0.91/3647/Thu Jul 12 12:13:27 2007 ClamAV: Protecting against 161006 viruses LibClamAV debug: Database loaded LibClamAV debug: Stat()ing files in /local

Re: [Clamav-users] clamav-milter won't start

2007-07-12 Thread Jeff Wasilko
On Thu, Jul 12, 2007 at 01:16:52PM -0400, Jeff Wasilko wrote: > Hi: > > I am having problems getting clamav-milter to start: When I start > it it seems to load the fingerprint database, and then exit: > > Loaded ClamAV 0.91/3647/Thu Jul 12 12:13:27 2007 > ClamAV: Prot

[Clamav-users] clamav.log not logging all infections found

2007-07-13 Thread Jeff Thurston
being logged, only the first instance, and then the subsequent instances are not. Apparently after 24hr period the next instance will be logged again however. I have enabled LogVerbose in clamd.conf and still no change. What am I missing?? Thank you for any assistance offered.

[Clamav-users] Greeting Card virus

2007-07-19 Thread Jeff Thurston
I thought ClamAV was able to catch these "Greeting Cards from family member", our domain keeps getting these emails in large quantities even after upgrading to ClamAV 0.90.3 recently. Do I need to upgrade again to .91?? I'm hesitant to do this so soon as it was a bit of a hassle going from 0.88.4

Re: [Clamav-users] Greeting Card virus

2007-07-19 Thread Jeff Thurston
> Jeff Thurston wrote: > > I thought ClamAV was able to catch these "Greeting Cards from family > > member", our domain keeps getting these emails in large quantities even > > after upgrading to ClamAV 0.90.3 recently. > > > > Do I need to upgrade again

Re: [Clamav-users] Greeting Card virus

2007-07-19 Thread Jeff Thurston
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of John Rudd > Sent: Thursday, July 19, 2007 11:19 AM > To: ClamAV users ML > Subject: Re: [Clamav-users] Greeting Card virus > > Jeff Thurston wrote: > >

Re: [Clamav-users] Greeting Card virus

2007-07-19 Thread Jeff Thurston
isit http://wiki.clamav.net > http://lurker.clamav.net/list/clamav-users.html Turns out this may be an Amavis-new related issue, see below: Jeff Thurston wrote: >> -Original Message- >> From: Bill Landry [mailto:[EMAIL PROTECTED] >> Sent: Thursday, July 19, 2007 3:31 PM >> To: Jeff

Re: [Clamav-users] Compile ClamAV 0.91.1 with gcc 3.4.3 on HPUX 10.20

2007-08-09 Thread Jeff Donsbach
HP-UX 10.20 is ancient and hasn't been supported by HP in a very long time. (It is of the same vintage as Linux 2.2 kernels, if not older). Consequently, the header files probably don't conform to the current POSIX standards that the ClamAV code is expecting. __

Re: [Clamav-users] Tru64 cc error with 0.90.1

2007-09-05 Thread Jeff Donsbach
On 9/4/07, mike caplin <[EMAIL PROTECTED]> wroteJeff, > > I just tried to build 0.91.2 on Tru64 and this old error cropped-up. > Since DEC's cc has some C++ features, 'try' is a reserved word. Please > change the name of the variable 'try' (I tested substituing 'tries' and > the > program compi

[Clamav-users] clamd stuck at 100% cpu usage

2007-09-28 Thread Jeff Thurston
Im running clamav 91.2 (90.3 did the same thing). After about an hour or so the clamd process gets stuck at 100%. I've checked various logs for the cause and haven't found anything. Clamav is being run by amavis-new 2.3 if that info is of any interest. This is a recent problem, I ran 88.4 just f

Re: [Clamav-users] clamd stuck at 100% cpu usage

2007-09-28 Thread Jeff Thurston
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Chris Adams > Sent: Friday, September 28, 2007 11:48 AM > To: 'ClamAV users ML' > Subject: Re: [Clamav-users] clamd stuck at 100% cpu usage > > Once

Re: [Clamav-users] clamd stuck at 100% cpu usage

2007-09-28 Thread Jeff Thurston
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Dennis Peterson > Sent: Friday, September 28, 2007 12:07 PM > To: ClamAV users ML > Subject: Re: [Clamav-users] clamd stuck at 100% cpu usage > > Jeff Thurston w

Re: [Clamav-users] clamd stuck at 100% cpu usage

2007-09-28 Thread Jeff Thurston
> -Original Message- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Dennis Peterson > Sent: Friday, September 28, 2007 12:11 PM > To: ClamAV users ML > Subject: Re: [Clamav-users] clamd stuck at 100% cpu usage > > Dennis Peterson

Re: [Clamav-users] strace and threads (was Re: clamd stuck at 100% cpu usage)

2007-09-28 Thread Jeff Thurston
everything is just fine. Hopefully I won't be back on Monday asking for more help with strace ;) Thanks for the info and all the help! -Jeff ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Xandros infringing GPL and ClamAV copyrights

2007-11-25 Thread Jeff Donsbach
This seems like an issue to be settled between Xandros and SourceFire. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Clamd memory use

2007-12-11 Thread Jeff Donsbach
On Dec 10, 2007 11:07 PM, Jeffrey Rice <[EMAIL PROTECTED]> wrote: > > Hello, > Is there any way to reduce/control the memory use of clamd? Dennis is right. But to answer your question, use "ulimit -m" in your initscript for clamd . ___ Help us build a c

[Clamav-users] Using ClamAV with Dspam - how do I verify it's working?

2008-08-07 Thread Jeff Weinberger
Hi: Pardon me if this is obvious - I'm new to both Dspam and ClamAV. I built Dspam with --enable-clamav, ensured that: dspam.conf has: ClamAVPort 3310 ClamAVHost 127.0.0.1 and clamd.conf has: TCPSocket 3310 TCPAddr 127.0.0.1 I see (from the headers) that mail messages coming in to m

Re: [Clamav-users] Using ClamAV with Dspam - how do I verify it's working?

2008-08-09 Thread Jeff Weinberger
> - > > Message: 29 > Date: Thu, 7 Aug 2008 21:50:52 -0700 > From: Jeff Weinberger <[EMAIL PROTECTED]> > Subject: [Clamav-users] Using ClamAV with Dspam - how do I verify it's > working? > To: clamav-users@lists.clamav.

Re: [Clamav-users] Using ClamAV with Dspam - how do I verify it's working?

2008-08-10 Thread Jeff Weinberger
>> Message: 29 >> Date: Thu, 7 Aug 2008 21:50:52 -0700 >> From: Jeff Weinberger <[EMAIL PROTECTED]> >> Subject: [Clamav-users] Using ClamAV with Dspam - how do I verify >> it's >> working? >> To: clamav-users@lists.clamav.net >>

Re: [Clamav-users] Using ClamAV with Dspam - how do I verif y it's working?

2008-08-11 Thread Jeff Weinberger
Dennis, Chuck: Thank you - this helps. I think I have it all working now. I appreciate your help. --Jeff ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] [0.0] Re: simplest replacement for ancient amavis-perl

2008-08-12 Thread Jeff Dairiki
On Tue, Aug 12, 2008 at 07:57:57AM -0400, Charles Gregory wrote: > > I don't suppose anyone has a list of these available for a "whitelist" or > "avoid greylisting"? Preferably a list of IP's not domains? > I been using the dnswl.org DNSWL. ___ Help us

Re: [Clamav-users] Compiling on Tru64 unix

2008-10-31 Thread Jeff Donsbach
On Fri, Oct 31, 2008 at 11:53 AM, Allen, Geoff <[EMAIL PROTECTED]> wrote: > This might be a long-shot, but has anyone compiled ClamAV (and > specifically, clamav-milter) on Tru64 Unix? I'm trying, but can't get > configure to generate a proper Makefile that will compile clamav-milter. > > > > I'd l

Re: [Clamav-users] Compiling on Tru64 unix

2008-10-31 Thread Jeff Donsbach
On Fri, Oct 31, 2008 at 5:11 PM, Török Edwin <[EMAIL PROTECTED]> wrote: > meaning clamd won't be built either > > configure:13401: checking pthread.h usability > configure:13418: gcc -c -g -O2 conftest.c >&5 > In file included from conftest.c:94: > /usr/include/pthread.h:312:4: #error "Please comp

Re: [Clamav-users] freshclam version logic

2008-11-26 Thread jeff donovan
On Nov 26, 2008, at 10:25 AM, Jason Bertoch wrote: > freshclam[29375]: Local version: 0.94.2 Recommended version: 0.94.1 is my math wrong or is the error message recommending the previous version ? ___ Help us build a comprehensive ClamAV guide: visit

[clamav-users] Clamav signature

2020-09-17 Thread Jeff Koch
HI Looking through our scanning logs we see what appears to be a signature that looks like this clamav: 0.102.4/m:59/d:25920 '0.102.4' refers to the clamav version but what does the rest mean - m:59/d:25920 ? Thanks, Jeff ___ cl

Re: [clamav-users] Clamav signature

2020-09-17 Thread Jeff Koch
Thanks. The freshclam logs show daily.cvd signature file version 25930 is installed but simscan: clamscan currently shows version 25920 being used. How do I get clamscan to use the latest version downloaded? version 25920 appears to be from September 4th. Jeff On 9/17/2020 1:31 PM, Alain

Re: [clamav-users] Clamav signature

2020-09-17 Thread Jeff Koch
Thu Sep 19 12:12:33 2019 main.cld: version 59, sigs: 4564902, built on Mon Nov 25 08:56:15 2019 Total number of signatures: 8884274 Thanks, Jeff On 9/17/2020 6:21 PM, G.W. Haywood via clamav-users wrote: Hi there, On Thu, 17 Sep 2020, Jeff Koch wrote: The freshclam logs show daily.cvd signat

Re: [Clamav-users] SOT: SCO.A disappearing?

2004-01-28 Thread Jeff Gojkovich
Nope, still getting hit with it. -- Jeff > I noticed that the virus count has dropped back to pre-SCO.A levels > starting around 0330 UTC this morning. I have not seen a single SCO.A > since then. Has anyone also seen this? &g

Re: [Clamav-users] Worm.SCO.A

2004-01-29 Thread Jeff Gojkovich
You are exactly right. Hit us on Monday and hasn't stopped since. -- Jeff > Hi. > > My SMTP filter running ClamAV is blocking a huge amount of messages > with the Worm.SCO.A. > It seams to be the same virus as MyDoom or Novarg. > Can anyone confir

[Clamav-users] Re: RAR support

2004-01-31 Thread Jeff Gojkovich
I guess this is my problem? http://sourceforge.net/mailarchive/message.php?msg_id=6609507 -- Jeff > I have looked in archives and can't find the answer to this. > > When starting clamd I get > Fri Jan 30 15:06:13 2004 -> RAR support disabled. > > I read in the docs that

[Clamav-users] RAR support

2004-01-31 Thread Jeff Gojkovich
ll I get this error. Amavis finds and loads rar support now also. Can you please inform me of how to enable this. -- Jeff --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration

[Clamav-users] Re: TNEF?

2004-02-17 Thread Jeff Potter
tor if this happens to you. I don't know if Outlook itself can decode TNEF, but I would think so (haven't checked!), so I suspect it would also be possible to deliver a payload TNEF-encoded. best, Jeff --- SF.Net is sponsored by: Sp

Re: [Clamav-users] Postfix gateway to clamav

2004-02-20 Thread Jeff Gojkovich
> Thanks for your answers. > > My MTA is Postfix (subject: ...) > More suggestions about a Postfix interface to ClamAV ? I use amavis-new and it works great. Here is a great page on how to set it up, although this is the FreeBSD set-up. http://mail.x-si.org/articles/av.ht

[Clamav-users] Freshclam error in log file

2004-03-04 Thread Jeff Ramsey
and filename of the clamav.conf file, this said something else, the change I made was in effort to fix the error I'm posting about...) Any help would be appreciated. Jeff Ramsey MIS Administrator Tubafor Mill, Inc.

Re: [Clamav-users] Freshclam error in log file

2004-03-04 Thread Jeff Ramsey
clam.conf that says NotifyClamd [/etc/clamav.conf], (before I changed this to the path and filename of the clamav.conf file, this said something else, the change I made was in effort to fix the error I'm posting about...) Any help would be appreciated. Jeff Ramsey MIS Administrator Tubafor M

Re: [Clamav-users] Re: Simple patch for dealing with password zip files

2004-03-04 Thread Jeff Ramsey
x27;s-my-own- fault-an d-I-promise-not-to-blame-the-email-system This particular extension could be exempted from executable/zip magic detection. :) Where can I get the patch that started this thread? Jeff Ramsey MIS Administrator Tubafor Mill, Inc. --

Re: [Clamav-users] sendmail devel?

2004-03-05 Thread Jeff Ramsey
re is any more security in another MTA, and if you take the time to learn it, you'll enjoy it's flexibility. And while we're digging up old hatchets that have been buried long ago, I use vi over emacs. Jeff On Mar 5, 2004, at 12:32 PM, Antony Stone wrote: On Friday 05 March 2004 8:22 p

Re: [Clamav-users] help clamav wont start

2004-03-08 Thread Jeff Ramsey
ard archives. I seem to remember this topic coming up like wednesday or so of last week. Jeff Ramsey MIS Administrator Tubafor Mill, Inc. --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins

Re: [Clamav-users] queries about clamscan

2004-03-15 Thread Jeff Ramsey
r mailserver gets backed up, it should queue messages until it gets caught up. If this is happening too often, you may need an upgrade for your server or another server. If you set up freshclam, your virus DB should stay up to date, within a two hour window. Jeff Ramsey MIS Administrator Tubaf

RE:[Clamav-users] ClamAV missing 100% of "Worm.SomeFool.Gen-1"

2004-03-25 Thread Jackson, Jeff
n the Exchange server catches them. I've captured several of the messages on the mail relay, and ClamAV detects it just fine once's it's saved to an mbox. My config is RH9 and Postfix with Anomy calling ClamAV (20040323) and then pu

[Clamav-users] ClamAV on NetBSD 1.6.2

2004-03-27 Thread Jeff Workman
/clamav-devel-20040327 *** Error code 1 Stop. make: stopped in /var/src/clamav-devel-20040327 TIA, -J -- Jeff Workman | [EMAIL PROTECTED] | http://www.pimpworks.org --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presen

Re: [Clamav-users] ClamAV on NetBSD 1.6.2

2004-03-27 Thread Jeff Workman
--On Saturday, March 27, 2004 5:43 PM -0500 Jeff Workman <[EMAIL PROTECTED]> wrote: I found where somebody had posted this same issue in the archives, but I didn't find an answer. What kind of magic do I have to work to get ClamAV to compile on NetBSD/i386 1.6.2?: To answer my own q

[Clamav-users] Supervised Clamd

2004-04-06 Thread Jeff Bilder
:20 run drwx-- 2 root qmail 512 Apr 6 14:06 supervise but when I run clamdctl stat I get: [EMAIL PROTECTED] log]# clamdctl stat /service/clamd: up (pid 1526) 658 seconds /service/clamd/log: supervise not running Any ideas? Thanks! - Jeff

RE: [Clamav-users] Supervised Clamd

2004-04-07 Thread Jeff Bilder
14:02 clamd and when I try your suggestion: [EMAIL PROTECTED] clamd]# svc -u /service/clamd/log svc: warning: unable to control /service/clamd/log: supervise not running I appreciate all the help, I just cant think of why this would not be working. Thanks! - Jeff ---

[Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-07 Thread Jeff Ramsey
Do I have to use a CVS version to get this one to be detected? Sophos detects it fine on this machine. -Jeff --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-09 Thread Jeff Ramsey
the clamav user executable permissions to, like unzip or ? I'd really like to drop Sophos altogether, but right now as it stands, I'd being cleaning Netsky.P all day long. Thanks, Jeff Ramsey On Apr 8, 2004, at 8:41 AM, Amish Munshi wrote: On Wed, 7 Apr 2004 20:22:07 +0100, &qu

Re: [Clamav-users] sendmail - viruses not cleaned

2004-04-09 Thread Jeff Ramsey
Google for sendmail with milter support. Recompile sendmail with the milter libraries enabled. And then read the docs included with clamav on using clam-milter. Or you can use an app called amavisd-new, compiled with milter support. Jeff Ramsey MIS Administrator Tubafor Mill, Inc. On Apr 9

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-10 Thread Jeff Ramsey
On Apr 10, 2004, at 9:27 AM, Colin A. Bartlett wrote: Jeff Ramsey Sent: Friday, April 09, 2004 4:23 PM I have done some further testing, and I am blocking Somefool and Somefool.B, but I am not blocking variant P. FWIW, this same thing happened to me when I upgraded from Clam .60 to the latest

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-11 Thread Jeff Ramsey
On Apr 10, 2004, at 5:44 PM, Bill Randle wrote: On Sat, 2004-04-10 at 16:49, Jeff Ramsey wrote: On Apr 10, 2004, at 9:27 AM, Colin A. Bartlett wrote: Jeff Ramsey Sent: Friday, April 09, 2004 4:23 PM I have done some further testing, and I am blocking Somefool and Somefool.B, but I am not

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-11 Thread Jeff Ramsey
local/etc/. Also, I called freshclam from the command line with the switch for the same config file. Is there any current (0.70 or newer) RPMs available for Redhat 9/Fedora? Thanks again. Jeff --- This SF.Net email is sponsored by: IBM Linux T

Re: [Clamav-users] what does: reject=451 4.7 mean?

2004-04-13 Thread Jeff Ramsey
N Money provides relief with tax tips, tools, IRS forms and more! And if you are still getting 4.7,1, check the write permissions on the mail spool. Add the user that clamav, clam-milter, clamd. amavis or whatever is running as should be a member of the group that owns the

Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

2004-04-13 Thread Jeff Ramsey
onf to call the clamscan and clamd commands with the necessary switches to use the correct config files. I cannot remember for sure, but I think the switch is --config-file=/etc/freshclam.conf for freshclam and --config-file=/etc/clamav.conf fo

[Clamav-users] Compile errors

2004-04-17 Thread Jeff Ball
I can no longer build on my old Cobalt RaQ2... I have gcc-2.7.2, glibc-2.0.7-29.4C2 and make-3.78.1. I have built clamav-0.66 previously this is what I get... ./configure --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/us r/sbin --sysconfdir=/etc --datadir=/usr/share --includedi

Re: [Clamav-users] W32.Netsky.B@mm not removed

2004-04-19 Thread Jeff Ramsey
Because Somefool and Netsky are the same virus. Variants matched to variants, of course... Jeff --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technolog

[Clamav-users] Your ClamAV installation is OUTDATED

2004-04-29 Thread Jeff Lanzarotta
could find out why I am getting this? I have versions: clamscan / ClamAV version 0.70-rc freshclam / ClamAV version 0.70-rc Regards, Jeff Lanzarotta --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever t

Re: [Clamav-users] clamd doesn't work

2004-06-02 Thread Jeff Smelser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 02 June 2004 02:18 pm, Crucificator wrote: > So what is the complete solution? You could start by telling us why its not working.. such as, showing us error logs or the like.. Our answers would be as worthless as your question so far.

[Clamav-users] CommuniGate Pro and ClamAV

2004-06-03 Thread Jeff Wark
to scan, it would work fine. If anyone knows the upper and lower limits on message size that will probably/most likely contain viruses, that may be helpful. Can you get viruses that are in 5K messages? How many viruses are transmitted

Re: [Clamav-users] clamav is not rejecting virus emails.

2004-06-04 Thread Jeff Smelser
reject anything. It scans and reports what it finds. The rejecting is up to you.. I use procmail to reject things.. Others use other programs.. what are you using?? Jeff - -- Always lurk before you leap... -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU

Re: [Clamav-users] How to disinfect an mbox file?

2004-06-16 Thread Jeff Smelser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 16 June 2004 11:09 am, Bert Koelewijn wrote: > Oh, come on! This is just shortcoming of ClamAV. Why have a --mbox > option if you can't identify the infected email?! RAV did this better. The idea wasn't to do an entire file, it was to do

Re: [Clamav-users] bug in clamdscan

2004-06-19 Thread Jeff Smelser
t's the daemon do the scanning, and it > just acts as an interface. Doesn't make much sense to then cripple it by > only working on one file at a time. Slow down. Its has to be a bug. Its worked here several times in the past. I take it you never wrot

[Clamav-users] Scanning BinHex Attachment

2004-06-30 Thread Jeff Masud
encoded.    Here’s an example email that the *.pif which it didn’t catch.   clamscan / ClamAV version 0.74   Known viruses: 0   bash-2.05a$ clamdscan 1088626977.9122.webmail,S\=20149\:2, /home/vpopmail/domains/sudjam.com/jeff/Maildir/cur/1088626977.9122.webmail,S=20149:2,: OK

Re: [Clamav-users] about the virus definition databases....

2004-07-05 Thread Jeff Smelser
I get >1000 messages a day myself. 10% of those someone trying to send me patches and all kinds of neat viruses. Point is, clamd shouldn't be a bottle neck. If your running it as clamscan, I would change it as 99% of it is loading the sig's over an

Re: [Clamav-users] Amavis-new and Clamd

2004-08-04 Thread Jeff Ramsey
On Aug 4, 2004, at 7:48 PM, <[EMAIL PROTECTED]> wrote: - Original Message - From: "Cody Dabb" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, August 04, 2004 4:11 PM Subject: [Clamav-users] Amavis-new and Clamd What is the best way to setup clamd with amavis-new? When email pa

Re: [Clamav-users] Freshclam errors

2004-08-16 Thread Jeff Smelser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 16 August 2004 10:23 pm, Randall Perry wrote: > SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES http://www.clamav.net/faq.html - -- === Jabber: tradergt@(smelser.org|ja

Re: [Clamav-users] Clam or clamassassin problem

2004-08-18 Thread Jeff Smelser
On Tuesday 17 August 2004 02:22 pm, lnx wrote: > X-Virus-Status: Failed > X-Virus-Report: Internal error mktemp MSGTMP failed > X-Virus-Checker-Version: clamassassin 1.2.1 with clamdscan / ClamAV version > 0.75.1 signatures 24.457 Status: Its a clamassassin problem. Whatever directory you using, i

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-23 Thread Jeff Smelser
On Monday 23 August 2004 11:14 am, ahellary wrote: > seems to work fine for us I really hope the mirrors take note of your ip and just block people like you.. It shows great ignorance when you really think this is how you need to run your servers, or home computer.. J

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-23 Thread Jeff Smelser
ch.. You need to really think about ALL the issues, not just a head check. Jeff -- === Jabber: tradergt@(smelser.org|jabber.org) Quote: But you can sure get nothing

Re: [Clamav-users] List Down

2004-09-01 Thread Jeff Wimmer
300 baud telephone cup modem here.then 1200when I got 2400 and the screen scrolled by faster than I could read, I KNEW I was in tall cotton then.:-) Jeff [EMAIL PROTECTED] - Original Message - From: "Michael St. Laurent" <[EMAIL PROTECTED]> To: <[EMA

Re: [Clamav-users] freshclam: crontab vs. daemon

2004-09-06 Thread Jeff Smelser
On Monday 06 September 2004 01:25 pm, Thomas Lamy wrote: > It's a matter of taste. I prefer running it in daemon mode, as freshclam > is rock solid (eg. it hasn't crashed here for months), and due to it's > random start time does not tend to overload the mirrors. > You have to use bashisms or perl

Re: [Clamav-users] Next Stable?

2004-09-12 Thread Jeff Smelser
On Sunday 12 September 2004 02:52 pm, Björn Ketelaars wrote: > Out of curiosity; when is a development version considered a stable one? > I’m asking this because the latest stable is from the 30th of July. Are > there plans to release a stable version any time soon? I thought Tom just said not two

Re: [Clamav-users] Qmail, clamav on a separate box]

2004-09-20 Thread Jeff Hardy
hoose, figuring out how to separate the clam components may not be necessary (for instance, amavis on the remote box calling clamdscan/clamd locally). Or, that an external box isn't necessary. -Jeff > From: Starting out <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: [Clama

[Clamav-users] Freshclam warning

2004-09-23 Thread Jeff Wimmer
I have been running clamd and freshclam for quite some time with amavis-new, and today, received this message and can't figure out why it's happening.  Any help is greatly appreciated!!   ClamAV update process started at Thu Sep 23 15:17:00 2004Reading CVD header (main.cvd): OKmain.cvd is up

[Clamav-users] Cobalt RaQ2 Compile Errors

2004-10-10 Thread Jeff Ball
The Cobalt RaQ2 has the following... gcc-c++-2.7.2-c3r2 gcc-objc-2.7.2-c3r2 gcc-2.7.2-c3r2 glibc-2.0.7-29.4C2 and 0.80rc3 will not build. again. I'm wondering if I should work on making a new patch, wait longer, or just give up because I will never have a newer compiler, etc... and clamav will

  1   2   >