[clamav-users] Private Local Mirror with NFS

2018-04-26 Thread Kretschmer, Jens
Hi, I want to provide a private local mirror with NFS. On my server, which has access to the internet, I use freshclam to download the updates to a folder which is shared via NFS. On my clients I use LogSyslog yes ScriptedUpdates no DatabaseCustomURL file:///net//clamav/main.cvd DatabaseCustom

[clamav-users] CompressLocalDatabase does not work

2018-07-09 Thread Kretschmer, Jens
Hi, I'm trying to setup a private mirror at our site. I plan to download the signatures on a server using freshclam and then provide the signatures with an apache web server for the clients. On the server I set "CompressLocalDatabase yes" in /etc/freshclam.conf to reduce the filesize of the sig

[clamav-users] On Access Scanning: Exclude files starting with a "."

2018-07-18 Thread Kretschmer, Jens
Hi, is it possible to exclude files and folders starting with a "." when using on access scanning? We use the following configuration for on access scanning: ScanOnAccess yes OnAccessIncludePath /home/user1 OnAccessIncludePath /home/user2 OnAccessExtraScanning yes I have tried the following co

[clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-01 Thread Kretschmer, Jens
Hi, we have ScanOnAccess and OnAccessExtraScanning activated. When I open firefox I get a lot of messages written to /var/log/messages every couple of seconds: Aug 1 12:07:02 hostname1 clamd[4051]: ScanOnAccess: /home/user1/.cache/mozilla/firefox/0pnt0qc2.default/cache2/entries/3F5C8E984584F19

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-02 Thread Kretschmer, Jens
> How long as this been going on? Apparently it has been going on for a couple of days. I did not notice the "ScanOnAccess: ... (null) FOUND" messages, until I hid the "ScanOnAccess: Performing additional scanning on file ..." messages. The first occurrence was on July 23rd 13:00:08 with clamav

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-09 Thread Kretschmer, Jens
> Do you have the OnAccessExtraScanning option on by chance? Yes, OnAccessExtraScanning is turned on. I was able to reproduce this behavior on a different machine. It uses the same configuration as the first machine (the clamconf output can be found in my previous E-Mail). I rebooted the machi

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-09-05 Thread Kretschmer, Jens
ff extra scanning". We're getting near the end of our development cycle for 0.101 and still have some tough work left, but we'll try to find a solution to the OnAccessExtraScanning thread joining issue if time permits. Micah Snyder ClamAV Development Talos Cisco Systems, I

Re: [clamav-users] Using OnAccess scanning with Selinux

2019-02-11 Thread Kretschmer, Jens
Hi Rob, I'm facing the same issue. It's actually pretty easy to reproduce. 1) start clamd@scan service 2) login via ssh (with any user) 3) Error message shows up and clamd stops working In my opinion this is a bug and I will create a bug report. Did you find a workaround for this problem? Bes

[clamav-users] connect clamscan output to journal with systemd-cat

2019-04-03 Thread Kretschmer, Jens
Hi, I would like to redirect the output of clamscan to the journal, which should by possible by /usr/bin/clamscan -r /root/ 2>&1 | /usr/bin/systemd-cat --identifier="clamscan" or /usr/bin/systemd-cat --identifier="clamscan" /usr/bin/clamscan -r /root/ While both commands work when executed manuall

Re: [clamav-users] connect clamscan output to journal with systemd-cat

2019-04-04 Thread Kretschmer, Jens
log for your program, foo.log, and >> write it to /var/log/ directory. >> >> Others can comment about scanning a host every minute. >> >> Regards, Scott >> >> FROM: clamav-users ON BEHALF >> OF Kretschmer, Jens >> SENT: Wednesday, Apri

Re: [clamav-users] connect clamscan output to journal with systemd-cat

2019-04-05 Thread Kretschmer, Jens
syslog? Because rsyslog can monitor logfiles directly too. Your call to clamscan from cron might refuse to output info (because no tty perhaps), maybe first try to get logs from clamscan via cron directly? Franky Op Donderdag, 04-04-2019 om 09:46 schreef Kretschmer, Jens: I probably should have