[clamav-users] Mail contains virus ? MBL_162040584.UNOFFICIAL and some errors.

2022-07-22 Thread Thomas Barth via clamav-users
Hello, I use ClamAV unofficial signatures and it seems that I get a false positiv, I m not sure. A known person with a gmail-address and MS Outlook 16.0 X-Mailer tries to send me a mail with a link to google docs (Google Sheets) and Amavis refuses to accept this mail. I scanned this file in t

Re: [clamav-users] Mail contains virus ? MBL_162040584.UNOFFICIAL and some errors.

2022-07-22 Thread Thomas Barth via clamav-users
Hi, after checking the decoded signature I tried to whitelist the signature as described on your website https://www.securiteinfo.com/services-cybersecurite/anti-spam-anti-virus/whitelisting_clamav_signatures.shtml One line of the decoded sig was like DECODED SIGNATURE: d o c s . g o o g l e

Re: [clamav-users] Mail contains virus ? MBL_162040584.UNOFFICIAL and some errors.

2022-07-22 Thread Thomas Barth via clamav-users
Hi! Am 2022-07-22 13:31, schrieb G.W. Haywood via clamav-users: Having said that I don't see the problem that you've found. In case it helps you, here's the directory listing and md5sum of the file currently in use here. It's pretty old, and I can't say that I've noticed very many useful dete

[clamav-users] Same system but different daily

2024-05-25 Thread Thomas Barth via clamav-users
Hello, I've two equal system, but today I saw that on server 1 there is a daily.cld (202299904 Bytes) and on server 2 a daily.cvd instead (63677565 Bytes). On both servers I see the message "daily... database is up-to-date". Server 1 ls -al /var/lib/clamav/daily.cld -rw-r--r-- 1 clamav clama

[clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-08-31 Thread Thomas Barth via clamav-users
Hallo Mailinglist, sometimes I get in Postfix the error messages "451 4.3.0 Error: queue file write error". There is a warning timeout talking to localhost:10024 (Amavis) Aug 31 14:14:19 mx2 postfix/smtpd[15861]: connect from unknown[177.37.96.254] Aug 31 14:14:20 mx2 postfix/smtpd[15861]:

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-08-31 Thread Thomas Barth via clamav-users
Not the spammer. On Sat, Aug 31, 2019 at 04:25:05PM +0200, Thomas Barth via clamav-users wrote: Hallo Mailinglist, sometimes I get in Postfix the error messages "451 4.3.0 Error: queue file write error". There is a warning timeout talking to localhost:10024 (Amavis) Aug 31

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-01 Thread Thomas Barth via clamav-users
Am 2019-08-31 20:35, schrieb G.W. Haywood via clamav-users: That's exactly what the patch in #10979 does. Unfortunately, although as I've said it's simple enough to apply the patch, it's by no means a simple patch and it would greatly benefit from some serious testing by the community - especi

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-02 Thread Thomas Barth via clamav-users
Am 2019-09-01 19:12, schrieb G.W. Haywood via clamav-users: Hi there, On Sun, 1 Sep 2019, Thomas Barth via clamav-users wrote: Am 2019-08-31 20:35, schrieb G.W. Haywood via clamav-users: That's exactly what the patch in #10979 does. ... And where can I find this patch? If you nav

[clamav-users] Am I allowed to use yara rules?

2019-09-02 Thread Thomas Barth via clamav-users
Hello, today I got informed that I should not use the yara rules. They have major issues with clamav 1.0.1, ie memory leaks and complete failure of clamav. ls -al /var/lib/clamav/*.yar* -rw-r--r-- 1 clamav clamav 465 Sep 2 17:50 /var/lib/clamav/CVE-2010-0805.yar -rw-r--r-- 1 clamav clama

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-04 Thread Thomas Barth via clamav-users
Am 2019-09-01 19:30, schrieb Joel Esler (jesler) via clamav-users: Alright. I think we’ve beat the proverbial dead horse here. The devs know this is a request and they will get it into their dev queue for examination. I saw that clamd use just one core at a time to load the databases. top - 1

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-04 Thread Thomas Barth via clamav-users
Am 2019-09-05 00:30, schrieb G.W. Haywood via clamav-users: The database load times are a couple of orders of magnitude shorter than the database update periods. It makes no sense to try to make the load times shorter when they can already be done by a separate thread, while scanning continues,

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-05 Thread Thomas Barth via clamav-users
Am 2019-09-05 09:14, schrieb Sergey: On Thursday 05 September 2019, Thomas Barth via clamav-users wrote: Please, where can I change the interval value or times for loading the databases? You can run freshclam by cron for example. ps aux | grep clam clamav 439 0.0 0.0 51152 11360

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-05 Thread Thomas Barth via clamav-users
Am 2019-09-05 11:35, schrieb G.W. Haywood via clamav-users: It seems that the two hour loading is hardcoded in the daemon. No. There are two ways to trigger reloading the databases. One is to set the 'SelfCheck' interval. The other is to send a 'RELOAD' command on the port or socket on whic

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-07 Thread Thomas Barth via clamav-users
Am 2019-09-07 21:03, schrieb Robert M. Stockmann via clamav-users: Why everyone needs two minutes for this task, independent from which hardware is used, is a puzzle to me. Anyone who has the clamd .cvd files loaded on a fast SSD storage ? I also use unofficial signatures from several vendors

Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-13 Thread Thomas Barth via clamav-users
Am 2019-09-13 00:57, schrieb Micah Snyder (micasnyd) via clamav-users: Henrik, all: Alberto Wu, a former ClamAV core developer, has very kindly provided a patch to us today that he created to perform clamd database reloads in a separate thread. I have attached his work, with some minor tweaks o