On Thu, Jan 7, 2010 at 6:31 AM, Noah Sheppard wrote:
>
> I'm running postfix-2.3.3 with clamav-milter-0.95.3 (and therefore
> clamd-0.95.3). Postfix is running as user "postfix". OS is RHEL5,
> x86_64.
>
> When I start clamd, it creates clamd.sock like so:
> $ ls -l /var/run/clamav/clamd.sock
> sr
On Tue, Jan 26, 2010 at 5:19 PM, Rob Jennings wrote:
> I work for a school district and our new xserves have just been updated to
> the 10.6 server operating system. The problem I am experiencing on all 4 of
> these servers which are in different schools is the same. The log files are
> filling
Hi all, I'm having issues with clamav 0.96.1 where freshclam running
in daemon mode is growing very large. Here are the results of ps aux
on some different machines:
smtp1 (i386) :
clamav4005 2.2 18.8 394008 390868 ? Ss Jun09 88:31
freshclam --daemon
smtp2 (i386) :
clamav4023 2.
On Tue, Jan 17, 2012 at 6:25 PM, David Kentwood
wrote:
> Sorry i am not experienced with exim configuration. When you say "reject at
> SMTP time", does adding the following to exim.conf suffice?
>
> check_message:
> deny message = This message contains malformed MIME ($demime_reason)
> demime =
On Thu, Jan 19, 2012 at 8:09 AM, David Kentwood
wrote:
> That's a neater solution than what I found. Thanks.
>
> Just wondering, how do you set variables such as $malware_name? or are the
> variables automatically set by Exim or by the ClamAV?
You'll want to read through the docs, chapter 41 if I
On Fri, Sep 14, 2012 at 5:59 AM, Siranjeevi wrote:
> I changed the items in clamd.conf
> MaxScanSize = "157286400"
> MaxFileSize = "104857600"
>
> But Still, the changes are not reflected in clamscan. I couldn't scan
> large files which is of 75MB in size.
Did you mean clamdscan? Or are you
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Mar 15, 2007 at 07:11:20PM -0400, John Fleming wrote:
>>>- And the clamav log is free of errors and indicated that the database is
>>>updated appropriately and clamd is being notified of changes.
>
>OK, clamav is finding viruses again, but th
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Mar 29, 2007 at 11:13:11AM +0200, Greg McCarthy wrote:
>
>Now to my question :) Does anyone have a script or know how I can
>monitor the clamav milter so if it ever dies again I get an email
>alert, or the script can even restart the milter.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, Apr 11, 2007 at 02:24:52PM -0400, Jim Maul wrote:
>However, it is illogical that clamd would die completely due to issues
>with a recently downloaded definition file. Why can it not just roll
>back to the old, previously working, definition
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, Apr 25, 2007 at 01:00:43AM +0200, Urban Hillebrand wrote:
>With the newly introduced delays during the initialization of clamscan this
>would cause us significant problems. So my question is: Will this get fixed,
>or is this "working as expe
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Apr 26, 2007 at 06:28:28PM +0500, Sergey wrote:
>> Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add:
>> header: X-Virus-Scanned: ClamAV version 0.90.2,
>It was working before 16:50:27, but is not working after 16:51:22 in
>this
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Apr 26, 2007 at 08:15:00PM +0500, Sergey wrote:
>On Thursday 26 April 2007, Todd Lyons wrote:
>> Apr 26 16:51:22 mx1 clamav-milter[30280]: Temporary quarantine file
>> /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.80JZZY cre
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Apr 27, 2007 at 05:49:35PM +0500, Sergey wrote:
>> Can you check the application/system logs for any problems with running
>> out of file descriptors, too many open files, or the like??
>Yes, I have not found problems. "messages" has only 21
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Apr 26, 2007 at 07:56:10AM -0500, Dave Dumbeck wrote:
>I have a problem with clamav-milter. It is working short time before
>going to error state.
Let's check your virus database to see if it's in the range of
acceptability. Does your number
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, May 28, 2007 at 10:01:49PM +0200, gianni sissa wrote:
>Hi,
>I'm a qmail/qmailscan/clam user. I upgraded clam (version 0.90.1) on
>three different servers, and in two cases I had to downgrade to te
>previous version due to an error:
>
> clam
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, May 30, 2007 at 04:28:03PM +0200, Salvatore wrote:
>Hi, in my clamav.spec I have:
>
>%files
>%defattr(0644,root,root,0755)
>%doc AUTHORS BUGS COPYING ChangeLog FAQ INSTALL NEWS README TODO
>%doc docs/*.pdf docs/html/ test/ RPM-clamav.txt
>#%la
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, May 30, 2007 at 05:43:59PM +0200, Salvatore wrote:
>..sorry but I don't have understood, what I must modify in clamav.spec ? or
>pheraps I must send to ml other information about my clamav.spec ?
>thanks.
In your first email, you pasted some
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Jul 05, 2007 at 07:12:21AM -0700, Thomas Spuhler wrote:
>> > ..there is a problem with in CPU or in clamscan ?
>> use clamdscan instead
>Why continuing with this answer. Clamdscan takes 50% of the time of clamscan
>and that still much to slow
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, Jul 16, 2007 at 11:49:15AM -0600, Gary V wrote:
>Looks like I can no longer resolve (from a couple different networks):
>www.sanesecurity.co.uk
This is from Savvis networks:
sanesecurity.co.uk. 172800 IN NS ns1129.dizinc.com.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tue, Aug 14, 2007 at 03:18:42PM -0600, Joshua Rubin wrote:
>Tue Aug 14 15:08:40 2007 -> No stats for Database check - forcing reload
>Tue Aug 14 15:08:40 2007 -> Reading databases from /var/share/clamav
>Tue Aug 14 15:09:16 2007 -> Database correct
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, Sep 30, 2007 at 02:03:10PM -0500, René Berber wrote:
>> information from ClamScan about which email contains the hit? Is there a way
>> to have the line number of the hit spit out? Or the signature that was
>> matched revealed?
>http://www.c
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, Oct 21, 2007 at 08:50:17AM -0700, P T wrote:
>I downloaded clam av from the clam av site. However when I check the
>signature I get that basically it isn't a trusted signature. How am I doing
>this wrong?
># to get the key
>> gpg --keyserv
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, Oct 31, 2007 at 11:33:17AM -0600, Milton Calnek wrote:
>[EMAIL PROTECTED] ~]# host -t txt current.cvd.clamav.net
>current.cvd.clamav.net descriptive text "0.91.2:44:4641:1193798066:1"
>[EMAIL PROTECTED] ~]# host db.ca.clamav.net
>db.ca.clamav.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Nov 01, 2007 at 08:02:58AM -0600, Milton Calnek wrote:
>>> With no other options, this smells like selinux.
>> I second that.
>Yah... I'm a die hard RedHat fan... but I haven't had time to explore
>selinux, so when I build a system, I turn it
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, Jan 09, 2008 at 11:14:33AM +0200, Jean Jacques Siebrits wrote:
>Hey all
>As soon as I try and run my companies custom configuration for ClamAV (After
>extracted) it gives me this error message and configuration stops:
>checking how to run the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, Apr 06, 2008 at 12:18:22PM +0200, Robert Schetterer wrote:
>since yesterday update two older files on my sharedweb where marked as virus
>Submission-ID: 2142059
>Sender: Virus Total
>Submission notes: Signature by Michael Cichosz
>Added: Troja
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, Apr 16, 2008 at 07:33:20PM +0100, Nigel Frankcom wrote:
>Similar problems here on CentOS 4.6/64 bit. I did find some info on
>...
> I'll probably give it a couple of days and if it doesn't
>resolve I'll do a manual build.
DAG rebuilt the pack
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, Apr 17, 2008 at 12:03:42PM -0400, Jerry Ferguson wrote:
>Problem: clamav-milter loads and immediately terminates
You gave lots of good build information, but didn't say how you were
calling the milter itself. To give you something to compare
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Just reporting to the ClamAV team:
I have repeatedly been getting failures downloading cdiffs from one
particular mirror:
WARNING: getpatch: Can't download daily-7359.cdiff from db.us.clamav.net
WARNING: getfile: daily-7359.cdiff not found on remote
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Jul 11, 2008 at 04:20:21PM +0200, shuttlebox wrote:
>>> > X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
>>> just found this in the headers of this mailing list :(
>> honestly expect others to. This just means they are using clamav on
On a stock RedHat 9.0 box (3 boxen load balanced) with updated kernel
(2.4.20-20.9smp), I have stability problems with clamd.
I'm using sendmail -> clamav-milter -> clamd. Our mail servers accept
about 50K mail per day (each box), of which about 35K gets rejected by
spamassassin before it ever re
On Thu, 2004-03-18 at 17:03, Tomasz Kojm wrote:
> > On a stock RedHat 9.0 box (3 boxen load balanced) with updated kernel
> > (2.4.20-20.9smp), I have stability problems with clamd.
> > I'm using sendmail -> clamav-milter -> clamd. Our mail servers accept
> 1) Which version of clamd ?
> 2) Which v
On Fri, 2004-03-19 at 01:41, Sergey wrote:
> > On a stock RedHat 9.0 box (3 boxen load balanced) with updated kernel
> > (2.4.20-20.9smp), I have stability problems with clamd.
> Possible it's similar with my problem... What is in clamd.log at this
> time ?
> I my logs:
> Tue Mar 16 18:52:25 200
On Fri, 2004-03-19 at 02:13, pi wrote:
> $virus_admin = "[EMAIL PROTECTED]"; # line 463
$virus_admin = '[EMAIL PROTECTED]';
> $mailfrom_notify_admin = "[EMAIL PROTECTED]"; # line496
> $mailfrom_notify_recip = "[EMAIL PROTECTED]"; # line497
> $mailfrom_notify_spamadmin = "[E
On Fri, 2004-03-19 at 12:04, Sergey wrote:
> Fri Mar 19 10:15:31 2004 -> ERROR: accept() failed: Too many open files
> Fri Mar 19 10:15:32 2004 -> ERROR: accept() failed: Too many open files
> Fri Mar 19 10:15:33 2004 -> ERROR: accept() failed: Too many open files
How do your numbers compare to t
On Mon, 2004-03-22 at 00:38, Trog wrote:
> On Mon, 2004-03-22 at 05:59, Pubs wrote:
>
> > Thu Mar 18 17:51:05 2004 -> Segmentation fault :-( Bye..
> When this happens, you need to capture the file(s) it was scanning at
> the time.
Pardon my ignorance, but could you provide a method of capturing t
On Wed, 2004-03-24 at 05:39, Clamav wrote:
> I run clamav 0.70rc with sendmail-8.12.9 and sometimes I get the
> message:
> Milter: data, reject=451 4.7.1 Please try again later
> Clamd is running - nothing crashed!!! After that messsage I receive
> normally my mails and they are scanned by clamav!!
On Thu, 2004-03-25 at 08:36, Claudio Alonso wrote:
> Hi,
> Yesterday I installed clamav-0.70rc-1 from rpm on my RedHat 9.0 (kernel 2.4.20-30.9)
> and started
> clamd just to test it's current stability
> The computer was on all night and today I found the following in the rotated logs:
> Thu Mar 2
On Tue, 2004-03-30 at 23:39, Trog wrote:
> On Wed, 2004-03-31 at 04:24, Miles Davis wrote:
> >
> > I tried setting the LD_ASSUME_KERNEL env var as I saw in one of your
> > previous posts, but now clamd seems to lock up
Ran the following ./configure:
./configure --disable-urandom --disable-clamav --enable-milter
--with-user="clamav" --with-group="clamav" --with-dbdir=/var/clamav
When trying to build, the milter build fails because it's still looking
for cfgfile.h. Changed clamav-milter/clamav-milter.c to includ
The following seems to work on my system. YMMV.
--- clamav-0.70pre2/clamav-milter/Makefile.am 2004-03-31
10:32:40.0 -0800
+++ clamav-0.70pre.new/clamav-milter/Makefile.am2004-03-31
12:35:06.0 -0800
@@ -24,6 +24,8 @@
clamav_milter_SOURCES = \
$(top_srcdir)/shared/cf
On Wed, 2004-03-31 at 15:15, Howie Grapek wrote:
> Hello All
>
> How do I get clamav and clamav-milter not to send auto-reply /
> autoresponses to the senders of email viruses.
[EMAIL PROTECTED] root]# cat /etc/sysconfig/clamav-milter
### Simple config file for clamav-milter, you should
### rea
On Wed, 2004-03-31 at 21:14, jamie wrote:
> >
> > You probably saw some of my issues. I'm using RH 9.0 as well and have
> > problems with spamd SegFaulting. I personally think it's pthread
> > related, but have zero data to back it up. On my system, clamd handles
> > 20K or 30K messages in about
On Thu, 2004-04-01 at 08:27, Kai Lien wrote:
> /etc/mail/sendmail.cf: line 1639: fileclass: cannot open ',': No such file
> or directory
This looks like something tried to see the F class to a ','.
> I added these to sendmail.mc:
>
> INPUT_MAIL_FILTER(`clmilter',`S=local:/var/clamav/clmilter.so
On Mon, 2004-02-02 at 14:08, Nigel Horne wrote:
> Since your arguments go across multiple lines you need to escape the end
> of lines thus. For more info do "man sh"
I don't have it that way in mine and the milter starts up just fine.
What's the reason that having it that way is not acceptable?
On Fri, 2004-04-02 at 08:30, Jesse Guardiani wrote:
> > I there any chance this bug has been fixed in the
> > latest CVS?
> There must be some special email out there that triggers
> this behavior. I've had to kill -9 the clamd process 3
> times since my first message about this problem to this
>
On Fri, 2004-04-02 at 09:40, Orion Poplawski wrote:
> Mar 28 07:55:53 earth clamav-milter[953]: write failure to clamd
> Mar 28 07:55:53 earth sendmail[18248]: i2SEqA0C018248: Milter: data,
> reject=451 4.7.1 Please try again later
> I had the same problem, regardless of message size, and downgrad
On Fri, 2004-04-02 at 14:09, Jesse Guardiani wrote:
> Mar 31 didn't work for me. See other email on the subject.
You can download the tarball that I used for mine at
http://downloads.mrball.net/SpamAssassin/clamav-0.70pre2.tar.gz
The naming convention does not jive with clamav's official naming,
On Wed, 2004-04-07 at 22:12, turgut kalfaoglu wrote:
> Hi there - I seem to have much trouble compiling last night's snapshot.
> I checked, and I have automake 1.8 installed, and yet I get this
> complaint during make :
> aclocal.m4:4200: version mismatch. This is Automake 1.6, but aclocal.m4
>
On Tue, 2004-04-13 at 07:56, Howie Grapek wrote:
> Hi.
> I've been seeing a lot of these:
>
> Apr 13 08:50:58 r2d2 sendmail[9587]: i3DEn0dw009587: Milter:
> from=<[EMAIL PROTECTED]>, reject=451 4.7
> .1 Please try again later
> what does it mean?
For some reason, the milter is unable to connec
On Tue, 2004-04-13 at 08:00, Howie Grapek wrote:
> Apr 13 08:50:54 r2d2 clamav-milter[13074]: hit max-children limit (176
> >= 40): waiting for some to exit
> what do you think the recommended settings for max-children limit is
> for a linux mail server (reasonably busy server - with multiple cpus
On Tue, 2004-04-13 at 08:34, Karl Hakmiller wrote:
> It looks as if I'll have to do as you suggest -- just give up on clamav-milter --
> but before I do, I'll spend a few more days
> hacking at it. I did come across the information in the user
> manual for the 0.70 release of ClamAV that clamav-mi
On Wed, 2004-04-14 at 10:21, [EMAIL PROTECTED] wrote:
> WOOHOO, or so I thought because when I do cat ./test/test1 | mail root -s "Testing"
> I get the one line and nothing has been flagged and nothing in the header has
> changed.
ps auxwww | grep "clamav-milter" | grep -v grep
This will show
On Mon, 2004-04-19 at 01:42, Andrea Trasatti wrote:
> Hello all,
> today I found about 8-10 email messages that were not filtered out by Clam,
> but saving the attachment and checking it with the online checker it gets detected.
>
> Is there anything I can do? Reset and redownload the virii
On Fri, 2004-04-16 at 09:09, Bill Pitz wrote:
> I've had an occasional problem with clamd segfaulting. The basics of my
> system are as follows:
> Red Hat Linux 9 / 2.4.25 kernel
> Sendmail 8.12.11
> clamav-0.68 + clamav-milter
Running the exact same system here. You should upgrade to CVS (anyt
On Fri, 2004-04-16 at 13:44, [EMAIL PROTECTED] wrote:
> PidFile /var/run/pid.file
> freshclam -d --config-file=/etc/freshclam.conf --pid=/var/run/pid.file
> But I can't get a freshclam to create a PID file.
The user that freshclam runs as cannot write to that directory.
Assuming you have it runn
On Mon, 2004-04-19 at 09:34, Alton Yu wrote:
> How do I set it so that it doesn't send any rejects or messages to the
> postmaster, but just rejects the mail?
If you use rpms, it will attempt to read /etc/sysconfig/clamav-milter
for an environment setting for commandline options. Here's what mine
On Wed, 2004-04-21 at 03:25, Trog wrote:
> Is that file an email? If so, RTFM on clamscan.
Maybe a feature could be if the first 4 bytes match the regex /From/
then clamscan could assume --mbox.
Blue skies... Todd
---
This S
On Thu, 2004-04-22 at 13:35, Don Levey wrote:
> Starting sendmail: 451 4.0.0 InputFilter clmilter not defined: No such file
> or directory
> The lines in sendmail.mc are:
> INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=,
> T=S:4m;R:4m')dnl
> define(`confINPUT_MAIL_FILTE
Steven Stern wrote:
Just FYI, after failing several times to build clamav and clamav-milter, I
used the RPMs from the "crash-hat" site to install version 0.70. One thing
I just roll my own due to some specific settings that I want to use.
Once you get a good SRPM, you can make adjustments pretty
B. van Ouwerkerk wrote:
On my system I had to chmod /var/run/clamav to 700 owned by
clamav:clamav. You have that dir set to 755. I'm not sure this will work
exactly the same on all distro's but on Slackware this works just fine.
It works fine at mode 755. If you're using an
/etc/sysconfig/clama
[EMAIL PROTECTED] wanted us to know:
># Enable debug messages in libclamav.
>Debug
Turn that off. Wherever your temp directory is, it's full right now
because debug mode doesn't delete the files after clamav is done
scanning them.
--
Regards... Todd
They that can give up essential
Raul Elizondo wanted us to know:
>Perhaps rh7.3 (sendmail 8.11.6) need someother command rather than
>INPUT_MAIL_FILTER and define?
Make sure that sendmail-cf is installed.
--
Regards... Todd
They that can give up essential liberty to obtain a little temporary
safety deserve neithe
Soren Schimkat wanted us to know:
>Hi guys
>
>New version of the Clamav / Clamav-milter Logwatch scripts awailable. You may
>download from here: http://www.schimkat.dk/clamav/clamav-logwatch-0.30.tar.gz
I'm going to assume that these scripts are not intended to be run from
the commandline. I ha
Antony Stone wanted us to know:
>> accepting every single message, MailScanner would be fine. If, like me,
>> you prefer to 5xx reject messages that you don't like (virus, spam,
>But, what is the advantage of this? It does not reduce your bandwidth by
No it does not reduce the bandwidth, howev
Ing. Germán González B. wanted us to know:
>CLAMAV_FLAGS="--quarantine-dir=/var/clamav/quarantine --max-children=200
Holy cow! 200 ??? Is there a reason that you have it set that high?
--
Regards... Todd
They that can give up essential liberty to obtain a little temporary
safety
Miguel Saturnino wanted us to know:
>Sorry, forgot to answer your question. I've tried
>av-scanner = clamd:/usr/bin/clamscan
>but exim panic log says: malware acl condition: clamd: unable to connect
>to UNIX socket /usr/bin/clamscan (Permission denied)
That's not the socket, that's the binary. P
Mr Mailing List wanted us to know:
>Just noticed that scanning files with clamdscan does not scan files
>that are not world readable.
In this case, you must make the clamd daemon run as root instead of (the
default) clamav.
--
Regards... Todd
They that can give up essential libert
Martin R Morales wanted us to know:
>I've installed ClamAV 0.70 and am curious as to how to have a
>client/server configuration setup. More exact, how do I tell
>the clamscan/clamdscan client to connect to a remote host that
>is running 'clamd'. I have looked at the docs on the site, but
>do not s
Mitch (WebCob) wanted us to know:
>While you are mentioning bad ideas... what about this trend of sending
>bounce messages to the sender or postmaster based on the From or envelope
>address of messages with virii in them. Does Clam-milter do this? (I don't
Only if you start it with the -b (--boun
Gervase wanted us to know:
>"host database.clamav.net" attracted:
>"truncated, retrying in TCP mode,
The reply in UDP came back and said "too big to fit into a single UDP
packet" and the resolver says "ok, I'm going to try using TCP instead."
>timed out -no servers could be reached".
Your firew
Gervase wanted us to know:
>> if you do a 'dig database.clamav.net' or a 'host database.clamav.net', do
>> you get useful answers?
>No. Both merely say:
>"truncated, retrying in TCP mode,
>timed out -no servers could be reached".
tcpdump -n -p port 53 > dig.cap 2>&1
What do you see?
Here's wh
Damian Menscher wanted us to know:
>> Wow! We got 2 Gb of mail a day, but mine is always:
>> 24064 clamav 9 0 13260 12M 868 S 0.0 1.7 0:00 0 clamd
>I call Bull.
>2 Gb of mail a day, and clamd hasn't used even a second of CPU time?
>Yeah, right. You're confused.
>My stats for cla
Gervase wanted us to know:
>Does this tell you anything more? Others have said that my firewall is
>blocking port 53, but the problem persists when I turn the firewall
Slight distinction, it's allowing UDP port 53, but blocking TCP port 53.
If you did indeed turn it off as you say you did:
ipt
Bill Maidment wanted us to know:
>>Are you sure it's not still writing to the old file? If it was already
>Yep that was it. So I need to stop freshclam and clamd before logrotate
>and start them after logrotate? What a bore!
Similar to this:
[EMAIL PROTECTED] root]# cat /etc/logrotate.d/clamav
ce provided
>by SuSE, but have now turned the rules off again as suggested by Todd
>Lyons through
> iptables -F
> iptables -P INPUT ACCEPT
> iptables -P OUTPUT ACCEPT
>(how do I reverse this I wonder?)
I know how to do it in RedHat and Mandrake, not sure about Suse.
>I then g
Stephen Moore wanted us to know:
>Jun 8 02:51:42 mail64 clamd[2532]: Protecting against 504391128 viruses.
I suspect that 504 M viruses is part of the reason.
[EMAIL PROTECTED] root]# sigtool --stdout -i /var/clamav/daily.cvd | grep "#"
# of signatures: 761
[EMAIL PROTECTED] root]# sigtool --st
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tomasz Kojm wanted us to know:
>./configure --prefix=/home/gary/clamav --disable-clamav
>make; make install
>
>~/clamav/bin/freshclam
>~/clamav/bin/clamscan ~
This might be worth putting in the README. Many times newbies need a
little bit of handhol
Gary Weinfurther wanted us to know:
>>This might be worth putting in the README. Many times newbies need a
>>little bit of handholding for this type of stuff.
>Great idea, Todd. It would have saved me a lot of effort, and it was so
>easy once I was told how to do it.
However, Gary, I will say
Rick Macdougall wanted us to know:
>>While the discussion of top-posting is fascinating, can I take it that we
>>are the only two people with this problem ?
>Mine died last night. 0.72. I'll upgrade today to 0.73 and see if that
>helps.
I have similar problems with milter (but sometimes it's
Philipp Ringli wanted us to know:
>hi all,
>
>i am getting this message from my server every once in a while:
>Cron <[EMAIL PROTECTED]> nice -n 19 run-parts /etc/cron.daily
>run-parts: /etc/cron.daily/freshclam exited with return code 1
>error: Ignoring xdm.rpmnew, because of .rpmnew ending
>is so
Antony Stone wanted us to know:
>> /etc/pam.d/xdm
>> /etc/pam.d/xdm.rpmnew
>> /etc/logrotate.d/xdm
>> /etc/logrotate.d/xdm.rpmnew
>> so which one shal i eliminate?
>Rather than searching for xdm (which is what you want to leave in place) you
>would have got a shorter output from a search for xdm.
Philipp Ringli wanted us to know:
>+ /usr/bin/freshclam --quiet --datadir=/var/lib/clamav
>--log=/var/log/clamav/freshclam.log
Run it from the commandline like this:
/usr/bin/freshclam --datadir=/var/lib/clamav --log=/var/log/clamav/freshclam.log
You can also add --verbose into that line.
Her
Philipp Ringli wanted us to know:
>i did that and i get this:
>
>[EMAIL PROTECTED] /]# /usr/bin/freshclam --datadir=/var/lib/clamav
>--log=/var/log/clamav/freshclam.log --verbose
>Current working dir is /var/lib/clamav
That's good. It means it can access /var/lib/clamav and the files
inside of
Don Levey wanted us to know:
>Whether or not I specify the file (-c /etc/sysconfig/clamav-milter) I get an
>error:
> clamav-milter: No socket-addr given
>If I specify the socket address on the command-line also, I get:
> ERROR: Parse error at line 10: Unknown option CLAMAV_FLAGS=".
>
Don Levey wanted us to know:
>> I've attached my clamav-milter init script. Note that I've adjusted
>Unfortunately, the script didn't make it through. Here's what I've got in
>the init.d/clamav-milter script:
Well that is because I apparently forgot to attach it. Look for it on
this one.
>
[EMAIL PROTECTED] wanted us to know:
>I just installed clamav for the first time today, so please bear with me.
>Although clamscan finds a lot of HTML naztyness, the Virus #1, I´m receiving
>Netsky.P totally gets away.
Clam named the virus SomeFool before the mainstream media latched onto
the nam
Marc Hultquist wanted us to know:
>checking for C compiler default output... conftest.c
>checking whether the C compiler works... configure: error: cannot run C
>compiled programs.
rpm -qa | grep gcc
Sounds like you may not have the gcc-cpp package installed (the c
pre-processor).
--
Regards..
Bill Randle wanted us to know:
>On Tue, 2004-07-13 at 17:41, A.R.S. KA9QLQ Alvin Koffman wrote:
>> I'm using clam 0.54-7mdk and was wondering should I upgrade and if so
>> what's the easyest way? I'm using Mandrake 9.1
>2. You can either rebuild from the SRPM in Mandrake cooker, or you
> can gr
Bill Randle wanted us to know:
>Good point, Todd. 9.1 used perl 5.601, while 9.2 uses 5.8.1. However,
>I'm not aware of any Perl files/modules used by clamav. Am I missing
>something? If this were SpamAssassin we were talking about, I would
>agree.
You're spot on. I was writing clam and thinking
A.R.S. KA9QLQ Alvin Koffman wanted us to know:
>Where can I get libbz2? Here's rom my atempt
>
>[EMAIL PROTECTED] Download]# [EMAIL PROTECTED] clam]# rpm -ivh *.rpm
>warning: clamav-0.74-1mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889
>error: Failed dependencies:
> devel(libbz2) is n
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Trog wanted us to know:
>> > Could we perhaps stop adding features for a few days and get a stable
>> > release out? It would really help.
>> I'd like to second that. Those of us depending on clamav to catch stuff
>> can't afford to upgrade in the m
In the default clamav.conf exists the following verbage:
# By default the built-in RAR unpacker is disabled by default because
# the code terribly leaks, however it's probably a good idea to enable
# it.
#ScanRAR
Does anybody know if that's still accurate?
--
Regards... Todd
They th
Christopher McCrory wanted us to know:
>FWIW , I updated to 0.75.1 today and it is working well. broken MIME
I'm reporting success for the same upgrade. I've gotten 24 hours of
troublefree operation, which is a good sign since one of my machines is
notoriously picky about clamd.
>Mydoom.M are
Robert Blayzor wanted us to know:
>>USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
>>clamav5089 0.1 0.6 31736 14288 ? SJul30 2:44 clamd
>>clamav3897 0.2 1.3 32760 14168 ? SJul30 3:31 clamd
>>clamav 30246 0.2 2.9 57260 30332 ? S
Christopher McCrory wanted us to know:
>Once per week we send a newsletter out to many people. This takes ~10
>hours as it's not very optimized. One message per receipent, not one
>message -> many.
>clamd keeps failing over
>I added "--dont-scan-on-error " to the clamav-milter args, the
>freque
Brett Simpson wanted us to know:
>Is there a way I can configure the following log entry for Clamav-milter to also
>output the origin address? The reason I'm asking is because I'm using a script to go
>through the log file and count all of the big virus senders but it takes forever to
>run sinc
Christoph Cordes wanted us to know:
>ClamAV database updated (2004.08.09 18:34 GMT): daily.cvd, viruses.db2
>Version: 445
>
>Submission: 5037-web, 5038-web, 5039-web, 5040-web, 5042-web,
>5049-web, 5050-web, 5051-web, 5052-web, 5053-web, 5054-web, 5055-web,
>5056-web, 5057-web, 5058-web, 5059-web,
John Twyman wanted us to know:
>I haven't changed my clamav.conf file at all between versions. Its contents
>are:
>LocalSocket /tmp/clamd
>FixStaleSocket
>TCPAddr x.x.x.x
You can't have both a TCP and a unix file socket. Gotta comment one or
the other out.
--
Regards... Todd
They
Erich Titl wanted us to know:
>>I've also thought about rsync -- if putting the cvd files on an rsync
>>server would lighten the load at all.
>Oh it would, rsync is quite effective. Another possibility might be to
>patch the .cvd file(s)
Agree with rsync, depends how much changes in the file
1 - 100 of 228 matches
Mail list logo
