RE: [Clamav-users] Autochecking script for clamd

2003-12-01 Thread Lynn Duerksen
> > > > > > Well, but why run freshclam all the time? > > > > > > > I suppose that I could have run a cron job. But in dealing > > Am I wrong in thinking this way? That: > > You are wasting your bandwidth running freshclam (well, at > some point the virus db files are up to date so no dat

[Clamav-users] Undefined symbol "_deny_severity"

2004-02-18 Thread Lynn Duerksen
Just update a system running .65 to .67-1 /usr/libexec/ld.so: Undefined symbol "_deny_severity" in clamd:/usr/lib/libwrap.so.3.0 I tried the OpenBSD port as well as the stable code. Same results Any suggestions? Lynn Duerksen Technical Manager Futureware Distributing, Inc OpenBSD 3

[Clamav-users] ERROR: You must specify at least one database mirror.

2004-02-18 Thread Lynn Duerksen
I went back to .66 since .67-1 is having trouble on OpenBSD 3.3 right now but now I get the following when running freshclam ERROR: You must specify at least one database mirror. The command I used is: /usr/local/bin/freshclam -l /var/amavisd/var/log/clam-update.log --datadir=/var/amavisd/usr/l

RE: [Clamav-users] Undefined symbol "_deny_severity"

2004-02-18 Thread Lynn Duerksen
; +int deny_severity = LOG_ERR; > + > #endif > > #if defined(CL_DEBUG) && defined(C_LINUX) > > -Igor > > On Wed, 18 Feb 2004, Lynn Duerksen wrote: > > > Just update a system running .65 to .67-1 > > > > /usr/libexec/ld.so: Undefine

RE: [Clamav-users] Undefined symbol "_deny_severity"

2004-02-18 Thread Lynn Duerksen
/libbz2.so.10.2 (0x4004a000) -lgmp.6 => /usr/local/lib/libgmp.so.6.2 (0x40059000) -lpthread.1 => /usr/lib/libpthread.so.1.0 (0x40083000) -lc.29 => /usr/lib/libc.so.29.0 (0x4009a000) > -Igor > > On Wed, 18 Feb 2004, Lynn Duerksen w

RE: [Clamav-users] OpenBSD Port

2004-02-19 Thread Lynn Duerksen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Flinn Mueller > Sent: Thursday, February 19, 2004 7:12 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] OpenBSD Port > > > Doesn't milter need tcpwrappers? > > > On Feb 19, 2004, at 5:50

[Clamav-users] RE: [AMaViS-user] Zip File Password

2004-03-03 Thread Lynn Duerksen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Ted Cabeen > Yep. Some scanners are now able to detect the virus like > this, but they have to scan the entire message in order to do > so. I've written a two line patch that copies the email.t

RE: [Clamav-users] OpenBSD clamav Port (0.67-1) RAR Files

2004-03-16 Thread Lynn Duerksen
> > Fajar A. Nugraha wrote: > > > Helmut Schneider wrote: > > > >>> seems that the clamav Port (0.67-1) has problems with RAR Files > >>> (e.g. > >>> Bagle.N): > >> > >> To avoid missunderstandings, I know the file is pwd, but > clamav does > >> not recognize the virus within the archive (ma

RE: [Clamav-users] OpenBSD clamav Port (0.67-1) RAR Files

2004-03-17 Thread Lynn Duerksen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Helmut Schneider > Sent: Wednesday, March 17, 2004 2:40 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] OpenBSD clamav Port (0.67-1) RAR Files > INFECTED (Worm.Bag

RE: [Clamav-users] clamassassin and procmail config

2004-03-18 Thread Lynn Duerksen
> > Do someone have an HOWTO for > postfix+clamav+amavis+spamassassin under RH9 ? > > Phil CREATING A SPAMFILTER RELAY SERVER By Scott L. Henderson http://www.geocities.com/scottlhenderson/spamfilter.html Don't know if he has anything on adding Clamav but the rest is there. >From what I re

RE: [Clamav-users] wbmclamav

2004-04-09 Thread Lynn Duerksen
> Henry Harvey > I just found this utility > wbmclamav > http://wbmclamav.labs.libre-entreprise.org/ > A webmin utility for ClamAV > to manage quaratined emails, etc. > It's still in Alpha stage though according to Freshmeat. > > Anyone tried this? The features are neat and just what I wanted. >

[Clamav-users] Sasser Worm Virus not shown with sigtool

2004-05-05 Thread Lynn Duerksen
igs: 1196, f-level: 2, builder: trog) However when I run: sigtool -l | grep -i sasser I get nothing. Shouldn't Worm.Sasser.A, Worm.Sasser.D and Worm.Sasser.B all show up using this? Lynn Duerksen Technical Manager Futureware Distribut

RE: [Clamav-users] Sasser Worm Virus not shown with sigtool

2004-05-05 Thread Lynn Duerksen
|Subject: [Clamav-users] Sasser Worm Virus not shown with sigtool | |Freshclam reports: | |RELAY:root>[sbin] freshclam |ClamAV update process started at Wed May 5 10:07:25 2004 |Reading CVD header (main.cvd): OK main.cvd is up to date |(version: 22, sigs: 20229, f-level: 1, builder: |tkojm)

RE: [Clamav-users] Sasser Worm Virus not shown with sigtool

2004-05-06 Thread Lynn Duerksen
| |You probably have 2 versions of the database. Happened to me I finally figured that out when I tried doing sigtool --unpack-current and it prepended the directory it was using to my entry. |and many others. Simple to rectify: search for main.cvd on |your box. Then find which one is being u

[clamav-users] clamd dropping out with no aparent reason

2003-06-25 Thread Lynn Duerksen
Running OpenBSD3.3, Postfix, amavisd-new-20030616, spamassassin, clamd. Everything seems to run great for awhile and until the maillog indicates "Can't connect to UNIX socket /var/amavisd/clamd:" and by then the dameon process is no longer running. Sometimes it runs for a couple days, sometimes

Re: [clamav-users] clamd dropping out with no aparent reason

2003-06-26 Thread Lynn Duerksen
Tomasz Kojm <[EMAIL PROTECTED]> wrote .. > > I'm experiencing the same trouble running a similar setup: OpenBSD3.3, > > Postfix, amavisd-new-20030314-p2 (running chrooted), spamassassin, clamd > > > > What I noticed is that the problem occurs after a db update via > > freshclam. I notice that it

RE: [clamav-users] Question on clamd and amavis

2003-07-22 Thread Lynn Duerksen
You should have the same thing here as you have in the clamav.conf. Below is my configuration. clamav.conf # Path to the local socket. The daemon doesn't change the mode of the # created file (portability reasons). You may want to create it in a directory # which is only accessible for a user runn

RE: [clamav-users] OpenBSD Port

2003-07-21 Thread Lynn Duerksen
How well does freshclam work in this release, if clamd is run with amavisd-new in chroot and the following clamav.conf settings - - - - - - - - - - - - - - - - - - - # Path to the local socket. The daemon doesn't change the mode of the # created file (portability reasons). You may want to create it

[Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix

2003-08-15 Thread Lynn Duerksen
Was wondering if anyone had any more suggestions. At this point I would even accept a script that would run from crontab to check if clamd is running. If not start it up again. I tried the script below and works well from a command line but not from crontab. It starts multiple clamd daemons. *

RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix

2003-08-18 Thread Lynn Duerksen
I finally got a ktrace trap as well. 13403 clamdGIO fd 6 read 16 bytes "17433d48097703e9" 13403 clamdRET read 8192/0x2000 13403 clamdPSIG SIGSEGV SIG_DFL code 2 addr=0x38383263 trapno=2 13403 clamdPSIG SIGSEGV SIG_DFL code 0 addr=0x0 trapno=0 13403 clamdNAMI

RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix

2003-08-18 Thread Lynn Duerksen
> > #!/bin/sh > > exec 1>>/var/log/messages > > exec 2>&1 > > TIMESTAMP=`date +"%b %e %H:%M:%S"` > > # check for clamd daemon > > if skill -n clamd > > then > > echo $TIMESTAMP " clamd is running" > > else > > echo $TIMESTAMP " restarting clamd daemon" > > rm /var/amavisd/cl

RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix

2003-08-18 Thread Lynn Duerksen
> > Tomasz Kojm asked for "core" file :-) . I assume the list does not want a 12MB core dump file so I will forward it directly to Tomasz. It took me some time to figure out where the file was stored. It ended up in the root of chroot jail not the clamd working directory. > PS. Please, respon

RE: [Clamav-users] Still Fighting Problem with clamd bombing out on Openbsd 3.3 w amavisd-new and postfix

2003-08-18 Thread Lynn Duerksen
> From: [EMAIL PROTECTED] > > Oh, seems that you already tried to mail it to me and of > course my server rejected it. Lynn, if you haven't an easy > way of placing it on the WWW, drop me a note and I'll > increase the message size limit temporarily. Your wish is my command. I have placed

RE: [Clamav-users] are there any statistic tools out there?

2003-08-26 Thread Lynn Duerksen
> > > > I'd like to do some statistics about scanned emails. > > I use postfix + amavisd + clamav + cyrus. > > > Search the list archives. There are so many solutions like > this posted there long ago. > "long ago" solutions are not searchable since the move to sourceforge. There are only 2

RE: [Clamav-users] OpenBSD port: clamav-20030829

2003-09-09 Thread Lynn Duerksen
This port looks like it has solved my problem with clamd bombing on me. I would like to summarize how I did the setup and install for others running Postfix, Amavisd-new, and Spamassassin on OpenBSD 3.3 in chroot jail that have reported similar problem. Is there an ftp or http site were the previo

RE: [Clamav-users] clamd dies

2003-09-15 Thread Lynn Duerksen
I have not seen anyone with a solution so far for my Postfix-Spamassassin-Openbsd3.3-Amavisd-new setup. On the latest version freshclam even bombs now. Run the following script from crontab --- checkclam start -- #!/bin/sh exec 1>>/var/log/checkclam exec 2>&1 TIMESTAMP=`date +"%b %e %H:%M:%S

RE: [Clamav-users] clamd dies

2003-09-16 Thread Lynn Duerksen
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Tomasz Kojm > Sent: Tuesday, September 16, 2003 10:23 AM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] clamd dies > > > > I have not seen anyone with a solution so far for my > > Postfix-

RE: [Clamav-users] Fwd: Ruh-Roh SOBIG.G?

2003-10-07 Thread Lynn Duerksen
I had two separate system getting hit pretty hard with SOBIG.G. One a wholesale distributor and one a trucking company. Both running Amavisd-new - Postfix - Clamd - OpenBSD 3.3. I noticed that most of the traffic was from less than a couple dozen IP addresses. I set my packet filters to reject a

[Clamav-users] FYI - OpenBSD 3.3 - Postfix - Amavisd-new - SA - clamav-devel-20031023 Up for 4 days without a problem.

2003-10-28 Thread Lynn Duerksen
4 days without a problem...Knock on wood!! No restarts no stale sockets. Things are looking good. Amavisd-new running chroot as user amavisd in directory /var/amavisd Installed clamav as follows First: run "configure" with shown options ./configure --disable-clamav --enable-dependency-trackin

[Clamav-users] 3 Days on 0.65 and all is well

2003-11-17 Thread Lynn Duerksen
Installed latest stable version at 9:00 CSt 11/14 and has run without problems. L. A. Duerksen Technical Manager Futureware Distributing, Inc OpenBSD 3.3 amavisd-new-20030616-p2 spamassassin 2.55 postfix-2.0.10 ClamAV version 20030829 --- Thi

RE: [Clamav-users] Autochecking script for clamd

2003-11-28 Thread Lynn Duerksen
> Subject: Re: [Clamav-users] Autochecking script for clamd > > > At 08:50 PM 11/27/2003, Brian Bruns wrote: > >Well, I should have put this in the last message. > > > >I guess the one I threw together doesn't require anything special > >(doesn't need daemontools), and only needs bash. I have

RE: [Clamav-users] Autochecking script for clamd

2003-11-28 Thread Lynn Duerksen
> > echo $TIMESTAMP " restarting freshclam daemon" > > /usr/local/bin/freshclam -d -c 4 > > --datadir=/var/amavisd/usr/local/share/clamav --log-verbose > > fi > > > > > > FYI - Since installing 0.65 this has recorded no restarts > > Well, but why run freshclam all the time? > I suppose