Re: [Clamav-users] clamav gcc dependendencies ...

2007-12-18 Thread Leonardo Rodrigues Magalhães
Török Edwin escreveu: > You don't need to upgrade to 4.1.2/4.2.x. > gcc-3.4 can be nicely installed side-by-side with a 4.0.x/4.1.0 series > gcc, all you need to do is: > > # apt-get install gcc-3.4 > $ export CC=gcc-3.4 > $ ./configure > Compiling clamav-0.92 with an old gcc (gcc 3.2 in m

Re: [Clamav-users] Sanesecurity mirror hosed

2007-12-21 Thread Leonardo Rodrigues Magalhães
im using latest script and had problems in several servers this morning . the bad file was scam.ndb which was invalid but still 'accepted' by UpdateSaneSecurity.txt script, latest version i had to manually remove them and restart things this morning ... my queues were also fi

Re: [Clamav-users] Email viruses almost non-existent?

2007-12-28 Thread Leonardo Rodrigues Magalhães
Xavier Beaudouin escreveu: > Hello, > In December 2006, we were running ClamAV 0.88.7, and there were still a fair number of "real" viruses being detected in inbound email. Now running 0.91.2 and 0.92, there seem to be only phishing attempts, and not even very many of them. In

Re: [Clamav-users] Clamd returned error: Files number limit exceeded

2008-02-07 Thread Leonardo Rodrigues Magalhães
Roberto Ullfig escreveu: We've recently been getting these messages in mimedefang: Clamd returned error: Files number limit exceeded What would the problem be? Thanks! Hmm let me guess . maybe the file number limit is exceeded How about that ??? Check your clamd.co

Re: [Clamav-users] How to tell Clam about MX servers?

2008-02-13 Thread Leonardo Rodrigues Magalhães
clamav DOESNT scan emails, clamav scan files. If you're using clamav for scanning emails, then you have something working with your MTA which writes mails as files, ask clamav to scan files, and deals with clamav results. there's nothing to be done in clamav to whitelist some MX or som

Re: [Clamav-users] How to tell Clam about MX servers?

2008-02-13 Thread Leonardo Rodrigues Magalhães
Jason Bertoch escreveu: On Tuesday, February 12, 2008 10:00 PM Steven Stern wrote: Clam is reporting that one of my MX servers is a 'virus' source. How do I tell it that the mailhop.org server is innocent and that the source of the mail is farther up the line? The infected machine is lik

[Clamav-users] comment on db files

2008-03-25 Thread Leonardo Rodrigues Magalhães
i'm developing a virus definition file, simple .db one, VirusName=HexadecimalDefinition. Is it possible, somehow, to have comments inside the .db file ?? I have tried # but it makes clamav reject the file with Malformed Database I have also noticed that clamav is extremely ha

Re: [Clamav-users] ClamAV engine is outdated

2008-06-17 Thread Leonardo Rodrigues Magalhães
Hermann T. Ribeiro escreveu: > Hi folks, > > I got this message "ClamAV engine is outdated" in the clamd.log file. How > can I fix this ? I looked at the faq in clamav.net but I didn´t find an > answer. I´m using ClamAV 0.93. > easy fix update to the latest stable version, which is 0

[Clamav-users] Problems with logrotate and freshclam

2006-04-16 Thread Leonardo Rodrigues Magalhães
Hello Guys, I'm facing a strange problem with freshclam and log rotation using logrotate. Let me explain Altough i'm not using pre-compiled RPMs, i took some files from the RPMs. One of these files is the /etc/logrotate.d/freshclam. I did some adjusts on the user/group, so my

Re: [Clamav-users] Problems with logrotate and freshclam

2006-04-16 Thread Leonardo Rodrigues Magalhães
[EMAIL PROTECTED] escreveu: I'm not certain, but I think the problem is that you're creating the log file while freshclam is still using it. The "create" command in logrotate says: Immediately *after* rotation (*before* the postrotate script is run) the log file is created (with t

Re: [Clamav-users] clamscan error and requirements

2006-04-16 Thread Leonardo Rodrigues Magalhães
roger martinez escreveu: LibClamAV Error: fileblobAddData: Can't write 76 bytes to temporary file textpart: No space left on device LibClamAV Error: fileblobAddData: Can't write 76 bytes to temporary file textpart: No space left on device LibClamAV Error: fileblobAddData: Can't write 76 bytes t

Re: [Clamav-users] Need to add email address to whitelist

2006-04-19 Thread Leonardo Rodrigues Magalhães
Derek Dirks escreveu: Can anyone tell me how to add email addresses to a whitelist so that they are not rejected? We are currently running 0.85 on an OS 10.3.9 machine along with SpamAssassin & amavisd. clamav doesnt deal with email addresses. If you need address whitelists, please check

Re: [Clamav-users] problem with cpu and memory consume

2006-04-21 Thread Leonardo Rodrigues Magalhães
Dennis Peterson escreveu: Eduardo Reitz wrote: Hello All, I have ClamAV+Spamassassin+Postfix in a Debian. The problem is that I have a lot of clamscan process and they consume to much cpu and memory of the machine (I have 900M in RAM and 2CPU of 2G). I'm no expert, but the last thing

Re: [Clamav-users] OT: Download script

2006-04-24 Thread Leonardo Rodrigues Magalhães
Steve Basford escreveu: In order to optimize the use of my bandwidth for the unofficial phishing signatures, I want to put up a few example scripts on the main page of my site that users should use to download the phish.ndb file. I know this is a silly suggestion, but why not gzip/bzip2

Re: [Clamav-users] OT: Download script

2006-04-24 Thread Leonardo Rodrigues Magalhães
Bob Hutchinson escreveu: or rsync? compression as part of the protocol, and only transfers the diffs ;-) sanesecurity.com would need rsync daemon running. Sure it will work. But is it rsync really needed for syncinc a single file that bzip/gzipped will hardly get over 300k ?? --

Re: [Clamav-users] OT: Download script

2006-04-24 Thread Leonardo Rodrigues Magalhães
Steve Basford escreveu: I'm going to upload both compressed and un-compressed versions for quite a while...but before I pull all this together... should the filename be: a) phish.ndb.gz b) phish.gz I think a) myself... but feedback welcome ;) phish.ndb.gz .. just add the .gz beca

Re: [Clamav-users] OT: Download script

2006-04-24 Thread Leonardo Rodrigues Magalhães
Steve Basford escreveu: Okay folks, I've put together a dos script to create the phish.ndb.gz file and have just updated both the compressed and un-compressed versions. The file you need is: http://www.sanesecurity.com/clamav/phish.ndb.gz It would be too much if I ask some instructions

Re: [Clamav-users] freshclam - ERROR: Can't lock database directory

2007-02-27 Thread Leonardo Rodrigues Magalhães
I have no script OnUpdateExecute script and got the lock problem today, right after a completly buggy freshclam run. Watch the logs: Received signal: wake up ClamAV update process started at Tue Feb 27 07:31:00 2007 main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: t

[Clamav-users] another problem on 0.90 dying

2007-02-27 Thread Leonardo Rodrigues Magalhães
Hi Guys, Im having another problem with clamd 0.90 dying I'm not using update scripts, tough i do have a script that runs and grab a clamav-format malware database file (www.malware.com.br). When a new definition file is downloaded, the update script issues a 'service clamd reload'

Re: [Clamav-users] can eamils from local network be excluded from scanning at MTA

2007-03-02 Thread Leonardo Rodrigues Magalhães
Zbigniew Szalbot escreveu: Hello, The subject says it all - I wonder if it is possible to exclude certain local IPs from being scanned by clamd when they connect to my MTA? Of course ... but this is certainly not a clamav configuration thing. Certainly you do have some piece of softwa

Re: [Clamav-users] Does ClamAV scan the header?

2007-03-03 Thread Leonardo Rodrigues Magalhães
No, clamav does not scan headers. In fact, clamav does not scan emails. Certainly, if you're using clamav in a email-server environment, you have some middle-software that integrates your MTA (sendmail/postfix/exim) with clamav antivirus. This middle-software will get the email tex

Re: [Clamav-users] Clamd does not block virusmails

2007-03-05 Thread Leonardo Rodrigues Magalhães
Rob MacGregor escreveu: On 3/5/07, Jens Strohschnitter <[EMAIL PROTECTED]> wrote: Hi there, I'm using the old amavis-0.3.13per2 Version of amavis. I know it's very old, but there for today is no chance to install amavis-new or something else. <---SNIP---> amavis[19687]: /var/amavis/amavis-1

Re: [Clamav-users] Clamd does not block virusmails

2007-03-05 Thread Leonardo Rodrigues Magalhães
Dennis Peterson escreveu: Rob MacGregor wrote: On 3/5/07, Leonardo Rodrigues Magalhães <[EMAIL PROTECTED]> wrote: Or maybe clamav is configured to PASS infected emails !!! It´s not an intelligent thing to do, but amavisd allows it. The point is, clamav doesn't block or pass

[Clamav-users] still on unable to lock database directory

2007-03-06 Thread Leonardo Rodrigues Magalhães
Hello Guys, I'm still getting, sometimes, the 'unable to lock database directory' even with 0.90.1, which should have addressed this. That was on the changelog ... Tue Mar 6 14:50:57 2007 -> +++ Started at Tue Mar 6 14:50:57 2007 Tue Mar 6 14:50:57 2007 -> clamd daemon 0.90.1 (

Re: [Clamav-users] Clamd does not block virusmails

2007-03-06 Thread Leonardo Rodrigues Magalhães
Jens Strohschnitter escreveu: But I think it's a bug in amavis-0.3.13pre2. So I have to update to amavis-new. The problem is, that the mashine runs as a productive system - and never change a running system ;-) That's because you surely have some test servers and some downtime schedule

[Clamav-users] RESENDING: still on unable to lock database directory

2007-03-07 Thread Leonardo Rodrigues Magalhães
No one is experiencing this problem with 0.90.1 ??? Leonardo Rodrigues Magalhães escreveu: Hello Guys, I'm still getting, sometimes, the 'unable to lock database directory' even with 0.90.1, which should have addressed this. That was on the changelog ... T