Re: [Clamav-users] Re: Freshclam not responding
Gervase wrote: Following my own question of Tue, 2004-06-01 at 15:05, in which I wrote: I have been using Clamav 0.70 without problem for some time but without warning freshclam recently stopped responding. No error message except the usual notification that I had no digital signature, which is another problem which I have not solved but am not too concerned about at this stage. The link just stopped responding. I then updated to 0.71 hoping in vain that the problem would go away. It didn't of course. Can anyone suggest the answer, or help a relative newbie to identify the problem? I have read all the help files and read all recent suggestions for upgrading with interest but none seem to help. I first did a make uninstall, then removed (I think) all traces of 0.70, and freshclam -V only throws up 0.71. File permissions don't seem to be a problem either. I am now stumped. Thanks in advance. If I leave it alone long enough, I get the following message: ClamAV update process started at Tue Jun 1 16:31:59 2004 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES ERROR: Can't get information about database.clamav.net host. ERROR: Connection with database.clamav.net (IP: ???) failed. Trying again... Does this help anyone identify the problem? Check for dns lookup problems. Also, update to clamav 0.71 Niek --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] bug? clamdscan doesn't follow links
I'm running clamav-0.70. [EMAIL PROTECTED] tmp]# echo '[EMAIL PROTECTED](P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*' eicar.txt [EMAIL PROTECTED] tmp]# ln -s eicar.txt eicar.lnk [EMAIL PROTECTED] tmp]# clamscan eicar.??? eicar.lnk: Eicar-Test-Signature FOUND eicar.txt: Eicar-Test-Signature FOUND --- SCAN SUMMARY --- Known viruses: 21758 Scanned directories: 0 Scanned files: 2 Infected files: 2 Data scanned: 0.00 MB I/O buffer size: 131072 bytes Time: 0.416 sec (0 m 0 s) [EMAIL PROTECTED] tmp]# clamdscan eicar.txt /tmp/eicar.txt: Eicar-Test-Signature FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.001 sec (0 m 0 s) [EMAIL PROTECTED] tmp]# clamdscan eicar.lnk /tmp/eicar.lnk: OK --- SCAN SUMMARY --- Infected files: 0 Time: 0.000 sec (0 m 0 s) I find it highly nonintuitive that clamscan will follow links, and clamdscan will not. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: FreeBSD 4.8-RELEASE + clamd 0.70 (stable) hanging
Hello Jesse, The OS on the hanging machines is Linux Redhat 7.3, kernel 2.4.20, Clamd 0.71. Hardware: Dual Xeon 2.4 GHz, 1Gb memory, Adaptec Raid 5 controller, 4 * 36Gb HD On the stable platform we use Debian 2.4.25. Clamd version 0.70j Hardware: 2 Dual Xeon 2.8 GHz machines with 256 Mb memory, Adaptec Ultra 160 SCSI controller + 36 Gb Hd. In front of this 2 machines we use a loadbalancer. We use a seperate machine as queue-runner, using nfs mounts on both smtp machines. Last week we had 750 session per second on this Debian platform without any problems. If we have the same problem, it is a bug in clamd, not in FreeBSD. We also do everything to find the problem for a few weeks, hope we can find a solution! Bas van Oosterum - Solcon Internetdiensten B.V. Het Spaarne 11 - 8253 PE Dronten - The Netherlands T: +31 321-385646 - F: +31 321-380698 - W: www.solcon.net - Original Message - From: Jesse Guardiani [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 01, 2004 11:46 PM Subject: [Clamav-users] Re: FreeBSD 4.8-RELEASE + clamd 0.70 (stable) hanging NOC - St. Ichthus ICT wrote: Hello Jesse, I am affraid you are NOT the only person who is experiancing this kind of problems. We are a Dutch internetprovider using Clamav as virusscanner for our mailplatform using clamavmilter / sendmail. One or two times a day clamav hangs. We have tried to use network and file sockets: does not make any difference. When the load is high, clamd hangs more than under normal load. On an other platform with 2 loadbalanced fast intel machines, we have no troubles. If clamd hangs, we only have left 2 clamd processes and 1 milter process. Well, it's good to know I'm not alone. Just to clarify: What is your clamav version? What is your OS? I experienced some really regular hanging all last week, and I think I found the email that causes the problem, but I can't reproduce it yet. My experience with Bacula on FreeBSD leads me to suspect a pthreads (libc_r) bug, but it may very well just be a ClamAV bug. I'm personally doing everything I can to track this down, but it's slow going. -- Jesse Guardiani, Systems Administrator WingNET Internet Services, P.O. Box 2605 // Cleveland, TN 37320-2605 423-559-LINK (v) 423-559-5145 (f) http://www.wingnet.net --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Problems with clamd in local network {Scanned}
--- Samuel Benzaquen [EMAIL PROTECTED] schrieb: [mailto:[EMAIL PROTECTED] nombre de Pippi Langstrumpf Enviado el: Martes, 01 de Junio de 2004 09:26 a.m. thats what I try to do. But how can I say PC2 to use the clamd (or the virus database) of PC1? I'm 'guessing' that if you configure /etc/clamav.conf on PC2: - Commenting local socket - Configuring TCPAddr to PC1 clamdscan will read that conf and connect to that clamd daemon. - extract from /etc/clamav.conf -- # Path to the local socket. The daemon doesn't change the mode of the # created file (portability reasons). You may want to create it in a directory # which is only accessible for a user running daemon. # LocalSocket /tmp/clamd # TCP port address. #TCPSocket 3310 # TCP address. # By default we bind to INADDR_ANY, probably not wise. # Enable the following to provide some degree of protection # from the outside world. #TCPAddr 127.0.0.1 --- Be sure to use clamdscan. clamscan will not try to connect to a clamd deamon. -samuel I tried it with the TCP Port and Socked (PC1), but freshclam on pc2 was not able to connect. got the error: ERROR: Can't connect to port 80 of host 10.1.0.6 (10.1.0.6) ERROR: Connection with 10.1.0.6 (IP: 10.1.0.6) failed. but there must be a way, that the pc without internetconnection is up to date Mit schönen Grüßen von Yahoo! Mail - http://mail.yahoo.de --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] bug? clamdscan doesn't follow links
I'm running clamav-0.70. (command below obfuscated to bypass virus filters) [EMAIL PROTECTED] tmp]# echo '[EMAIL PROTECTED](P^)7CC)7}$EICAR-STAN'\ 'DARD-ANTIVIRUS-TEST-FILE!$H+H*' eicar.txt [EMAIL PROTECTED] tmp]# ln -s eicar.txt eicar.lnk [EMAIL PROTECTED] tmp]# clamscan eicar.??? eicar.lnk: Eicar-Test-Signature FOUND eicar.txt: Eicar-Test-Signature FOUND --- SCAN SUMMARY --- Known viruses: 21758 Scanned directories: 0 Scanned files: 2 Infected files: 2 Data scanned: 0.00 MB I/O buffer size: 131072 bytes Time: 0.416 sec (0 m 0 s) [EMAIL PROTECTED] tmp]# clamdscan eicar.txt /tmp/eicar.txt: Eicar-Test-Signature FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.001 sec (0 m 0 s) [EMAIL PROTECTED] tmp]# clamdscan eicar.lnk /tmp/eicar.lnk: OK --- SCAN SUMMARY --- Infected files: 0 Time: 0.000 sec (0 m 0 s) I find it highly nonintuitive that clamscan will follow links, and clamdscan will not. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Re: Freshclam not responding
On Tue, 2004-06-01 at 23:31, Ron Snyder wrote: Following my own question of Tue, 2004-06-01 at 15:05, in which I wrote: I have been using Clamav 0.70 without problem for some time but without warning freshclam recently stopped responding. There were a spate of these a couple of months back when the database started getted hosted at a lot of places and they all received dns records. When the udp dns response comes back, it can't all fit in the packet so your dns resolver is supposed to query again via tcp. If your firewall has recently been modified to not allow tcp dns queries, you would probably see just what you are seeing above. To narrow down the problem further (and eliminate either dns or clamav), try doing the dns query from wherever freshclam is running. I tried disabling my firewall with no effect. host database.clamav.net attracted: truncated, retrying in TCP mode, timed out -no servers could be reached. I can't believe the problem is just that the servers are busy. I get the same lack of response at all times of the day. Sorry, but I don't understand what a DNS query means. I am incidentally running SuSE 9.1 Pro on a desktop (no network). Gervase --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd crash triggered by THIS list
Hi, same/similar thing here, at 1719 BST on 31 May. It looks like message id: [EMAIL PROTECTED] Clam segfaulted and died: Mon May 31 17:19:50 2004 - Segmentation fault :-( Bye.. using version 0.71 on RedHat 9 with qmail/vmailmgr John. On Tue, 2004-06-01 at 01:41 -0500, Damian Menscher wrote: I'm running clamav-0.70 with clamav-milter-0.70j+n_children_patch under RedHat9 with their default sendmail (8.12.8-9.90). ClamAV has been remarkably stable, going for weeks at a time. But today I got (US Central Time): May 31 11:36:23 astro clamd[1002]: Segmentation fault :-( Bye.. It wasn't timed with a freshclam update, database check, log rotation, or anything like that. However, my maillog indicates: May 31 11:36:23 astro sendmail[22238]: i4VGaNfM022238: from=[EMAIL PROTECTED], size=6612, class=-60, nrcpts=1, msgid=[EMAIL PROTECTED], proto=ESMTP, daemon=MTA, relay=mx0.hep.uiuc.edu [128.174.118.155] May 31 11:36:23 astro clamav-milter[1087]: clamfi_eom: read nothing from clamd May 31 11:36:23 astro sendmail[22238]: i4VGaNfM022238: Milter: data, reject=451 4.7.1 Please try again later May 31 11:36:23 astro sendmail[22238]: i4VGaNfM022238: to=[EMAIL PROTECTED], delay=00:00:00, pri=141932, stat=Please try again later So... the message that broke it was sent to this list, specifically the message from Samuel Benzaquen with timestamp: Date: Mon, 31 May 2004 11:16:12 -0400 Anyone else have problems with that message? I bounced it back to myself again, and it didn't crash clamd again the second time through. -- GPG: B89C D450 5B2C 74D8 58FB A360 9B06 B5C2 26F0 3047 URL: http://www.johnleach.co.uk --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] ScanStream: accept timeout
Hello, Nigel Horne wrote: On Wednesday 02 Jun 2004 06:38, George Chelidze wrote: Also I wonder what happens to message which triggers the following warning: WARNING: ScanStream: Size limit reached ( max: 10485760) Is it bounced back or pass through without scanning? That depends on the options you give to clamav-milter. CLAMAV_FLAGS=-c /etc/clamav.conf -nlPH local:/ctl/clamav-milter.ctl INPUT_MAIL_FILTER(`clamav', `S=unix:/usr/local/clamav/ctl/clamav-milter.ctl, F=, T=S:4m;R:4m')dnl Do you mean 'F=' part of my conf? Best Regards, -Nigel Best Regards, -- George Chelidze --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd crash triggered by THIS list
On Wednesday 02 Jun 2004 11:45, John Leach wrote: using version 0.71 on RedHat 9 with qmail/vmailmgr Fixed in CVS. John. -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] clamd doesn't work
I have installed clamav 0.67 with no problem. I have this one though after installing:) : clamd running clamscan successfully detects infected file included path to /var/spool/mail in clamav.conf when I send an email containing the infected file clam doesn't delete the mail. What seems to be the problem? 10ks in advance --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] ScanStream: accept timeout
On Wednesday 02 Jun 2004 12:57, George Chelidze wrote: CLAMAV_FLAGS=-c /etc/clamav.conf -nlPH local:/ctl/clamav-milter.ctl That's the place - now do 'man clamav-milter' and look under the 'd' option and you'll have your answer on whether the messages are failed or passed through unscanned. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] ClamAV and Virtuozzo VPS - has anyone installed it on this system?
Hi All We would like to install ClamAV on a Virtuozzo VPS (virtual private server) from SW-Soft, the makers of Plesk Has anyone done this? We were told that it should probably be okay unless it would attempt: - install new kernel modules (to perform on-access scanning) - work with ext2/ext3 filesystem directly (from VPS, there is no access to the physical device for obvious reason) Does anyone see a problem? Thanks :-) -- ___ Sign-up for Ads Free at Mail.com http://promo.mail.com/adsfreejump.htm --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] ClamAV and Virtuozzo VPS - has anyone installed it on this system?
Hi All We would like to install ClamAV on a Virtuozzo VPS (virtual private server) from SW-Soft, the makers of Plesk Has anyone done this? We were told that it should probably be okay unless it would attempt: - install new kernel modules (to perform on-access scanning) - work with ext2/ext3 filesystem directly (from VPS, there is no access to the physical device for obvious reason) Does anyone see a problem? Thanks :-) Hi, I have it working on a Virtuozzo VPS (Red Hat Linux) with no problems :) Miguel --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd doesn't work
On 2004-06-02, Crucificator wrote: I have installed clamav 0.67 with no problem. Why 0.67 when there's 0.71 out? [...] when I send an email containing the infected file clam doesn't delete the mail. What seems to be the problem? clamd isn't supposed to delete anything. Please RTM. s. -- (0 Jakub Jankowski [url]: s.atn.pl Nawet w Krainie Czarow //\ [EMAIL PROTECTED] [rlu]: 174516 latwiej jest spotkac V_/_ [EMAIL PROTECTED] [ekg]: 921514 Babe Jage niz Alicje Fingerprint: FCBF F03D 9ADB B768 8B92 BB52 0341 9037 A875 942D --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Re: Freshclam not responding
To narrow down the problem further (and eliminate either dns or clamav), try doing the dns query from wherever freshclam is running. I tried disabling my firewall with no effect. host database.clamav.net attracted: truncated, retrying in TCP mode, timed out -no servers could be reached. This message is telling you that when the resolver tried to do the lookup in tcp mode (because there was too much information for the udp response), something got in the way. There are a lot of somethings that could be causing the problem, but I think you can rule out a problem with clamav at this point. If your host is resolving via your own dns server, there may be some firewalling (or configuration issues) getting in the way of your dns server being able to do a query via tcp. Are the nameservers listed in /etc/resolv.conf in your control, or do they belong to your isp? Sorry, but I don't understand what a DNS query means. I am incidentally running SuSE 9.1 Pro on a desktop (no network). if you do a 'dig database.clamav.net' or a 'host database.clamav.net', do you get useful answers? (Something that looks like this (output from dig): ; DiG 9.2.1 database.clamav.net ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 64172 ;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 5, ADDITIONAL: 0 ;; QUESTION SECTION: ;database.clamav.net. IN A ;; ANSWER SECTION: database.clamav.net.5 IN CNAME db.local.clamav.net. db.local.clamav.net.6907IN CNAME db.other.clamav.net. db.other.clamav.net.5 IN A 213.73.255.243 db.other.clamav.net.5 IN A 24.244.193.21 db.other.clamav.net.5 IN A 64.18.103.6 db.other.clamav.net.5 IN A 65.75.154.69 db.other.clamav.net.5 IN A 80.69.67.3 db.other.clamav.net.5 IN A 129.64.99.170 db.other.clamav.net.5 IN A 193.1.219.100 db.other.clamav.net.5 IN A 209.8.40.140 db.other.clamav.net.5 IN A 209.204.175.217 db.other.clamav.net.5 IN A 212.31.160.239 db.other.clamav.net.5 IN A 212.113.16.74 ;; AUTHORITY SECTION: clamav.net. 7200IN NS ns3.clamav.net. clamav.net. 7200IN NS ns4.clamav.net. clamav.net. 7200IN NS ns5.clamav.net. clamav.net. 7200IN NS ns1.oltrelinux.com. clamav.net. 7200IN NS ns2.oltrelinux.com. ;; Query time: 195 msec ;; SERVER: 10.68.5.162#53(10.68.5.162) ;; WHEN: Wed Jun 2 14:46:52 2004 ;; MSG SIZE rcvd: 363 * end of dig output *** freshclam needs the records that have the 'A' in the 4th column-- if you are not getting those records, it's probably because there's still some kind of restriction against tcp dns queries. -ron --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] clamd doesn't work
-Original Message- From: [EMAIL PROTECTED] [mailto:clamav-users- [EMAIL PROTECTED] On Behalf Of Crucificator Sent: Wednesday, June 02, 2004 8:55 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] clamd doesn't work I have installed clamav 0.67 with no problem. I have this one though after installing:) : [Michael Varre] I'm pretty sure there is a much newer version out than 0.67. clamd running clamscan successfully detects infected file included path to /var/spool/mail in clamav.conf when I send an email containing the infected file clam doesn't delete the mail. What seems to be the problem? [Michael Varre] Clamd just scans it, it doesn't actually handle the infected file. Look at http://qmail-scanner.sourceforge.net and RTM. 10ks in advance --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Comparison clamav with other anti virus software
Hello! We are using clamav and clamav-milter on our mail gateway together with sendmail and it works perfectly - I'm really happy with it and think it is a great piece of software. I would be interested in differences between clamav and commercial available anti virus software for our configuration (means only for mail scanning). Are there differences/advantages between clamav and other products? Are there types of viruses not detected by clamav but by other products? I'm interested in this point because some people think that free software must have disadvantages compared to commercial available software. Any information would be helpful. Thanks Wolfgang --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Comparison clamav with other anti virus software
On Wed, 2 Jun 2004 17:33:30 +0200, Clamav [EMAIL PROTECTED] wrote: Hello! We are using clamav and clamav-milter on our mail gateway together with sendmail and it works perfectly - I'm really happy with it and think it is a great piece of software. I would be interested in differences between clamav and commercial available anti virus software for our configuration (means only for mail scanning). Are there differences/advantages between clamav and other products? Are there types of viruses not detected by clamav but by other products? I'm interested in this point because some people think that free software must have disadvantages compared to commercial available software. Just a couple of points based on having run Symantec AntiVirus on an Exchange server: 1. Support: Support from Symantec was non-existent. It was impossible to get anyone on the phone. Email support was slow. Support for Clam is excellent. Every problem I've had has been answered quickly and thoroughly on this list. 2. Definition updates: Symantec's Live Update would fetch definitions when they were available, but Live Update is limited to once-a-week or big events. You have to write and schedule batch files to get daily updates. Clam's team produces updates frequently and the Freshclam tool makes it easy to get updated definitions. 3. Cost. I paid something several thousand dollars for the mail server portion of Symantec. Were I using Clam on a commercial system, I would pay for it, but I'd pay on what I perceived its value to be, not on the what the traffic will bear basis used by Symantec. -- Steve --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd doesn't work
So what is the complete solution? --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd doesn't work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 02 June 2004 02:18 pm, Crucificator wrote: So what is the complete solution? You could start by telling us why its not working.. such as, showing us error logs or the like.. Our answers would be as worthless as your question so far. - -- That which does not kill me had better be able to run away damn fast. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAvihild4MRA3gEwYRAjlDAKDbC625AOiq0Aym6g9mhqyP9LurIACePA62 YyACoJL7wIl0IjuO6tXPygg= =IY4i -END PGP SIGNATURE- --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd doesn't work
On 2004-06-02, Crucificator wrote: So what is the complete solution? Have you tried googling around, and reading docs? s. -- (0 Jakub Jankowski [url]: s.atn.pl Nawet w Krainie Czarow //\ [EMAIL PROTECTED] [rlu]: 174516 latwiej jest spotkac V_/_ [EMAIL PROTECTED] [ekg]: 921514 Babe Jage niz Alicje Fingerprint: FCBF F03D 9ADB B768 8B92 BB52 0341 9037 A875 942D --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd doesn't work
Crucificator wrote: I have installed clamav 0.67 with no problem. I have this one though after installing:) : clamd running clamscan successfully detects infected file included path to /var/spool/mail in clamav.conf If you are running clamd you probably don't want to run clamscan, you want to run clamdscan. However if you are looking for the scanner to delete the infected files you have to use clamscan as clamdscan will not do this for you. Try: clamscan --remove For more info see, man clamd, clamdscan and clamscan. -- Robert Blayzor, BOFH INOC, LLC [EMAIL PROTECTED] PGP: http://www.inoc.net/~dev/ Key fingerprint = 1E02 DABE F989 BC03 3DF5 0E93 8D02 9D0B CB1A A7B0 Windows NT: Insert wallet into Drive A: and press any key to empty --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: Freshclam not responding
Gervase wanted us to know: host database.clamav.net attracted: truncated, retrying in TCP mode, The reply in UDP came back and said too big to fit into a single UDP packet and the resolver says ok, I'm going to try using TCP instead. timed out -no servers could be reached. Your firewall is blocking TCP port 53. -- Regards... Todd They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. --Benjamin Franklin Linux kernel 2.6.3-8mdkenterprise 1 user, load average: 0.07, 0.05, 0.00 --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Configuring ClamAV for allowing certain attachments
Hi again, Since upgrading to ClamAV 0.71 ( just prior to that the latest version of Amavis-new), I notice that our server is now rejecting certain attachments it didn't under ClamAV 0.65, such as .exe etc..., out of hand, without being scanned. Is this a function of ClamAV, or is it set in the Amavis-new config? Any assistance much appreciated. -- Bye for now, Terry Allen ___ hEARd Postal Address: hEARd, 26B Glenning Rd, Glenning Valley, NSW 2261, Australia Internet - WWW: http://heard.com.au http://itavservices.com EMAIL: [EMAIL PROTECTED] Phone: Australia - 02 4388 1400 / International - + 61 2 43881400 Mobile: Australia - 04 28881400 / International - 61 4 28881400 --- Non profit promotion for new music - since 1994 --- --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Configuring ClamAV for allowing certain attachments
Clam doesn't reject anything. It just scans and returns a result. Terry Allen said: Hi again, Since upgrading to ClamAV 0.71 ( just prior to that the latest version of Amavis-new), I notice that our server is now rejecting certain attachments it didn't under ClamAV 0.65, such as .exe etc..., out of hand, without being scanned. Is this a function of ClamAV, or is it set in the Amavis-new config? Any assistance much appreciated. -- --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Dealing with a flood of mail
I've got a server running a Discus forum in addition to Exim4, Clamav and spamassassin. One of the functions of the forum is to send the latest posting to all on the mail list. The result is a flood of mail that Exim sends on to Clam and Spamassassin. Prior to adding Clam and SpamAssassin to the system, the discus mail flowed without a hitch. Now, however, I seem to be hitting a bottle neck with one or the other of the new additions (Exim winds up running 20 or more times and turning away mail - 'too many connections'). I'm wondering it has to do with the number of consecutive connections allowed by the clamav conf file. If this is the case, I don't think the solution is to increase the number to something exceeding the number of mail list members... ;-) The logs are sort of chicken-egg. It's not apparent where the problem starts, so I don't know what sort of 'relevant' configuration data to post. Hence, I'm really just asking if mass mailings like this *could* be an issue for Clamav, or if I should look elsewhere. Thanks, Brock --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamd doesn't work
Wow, I've been following this list for a week now and I'm amazed how nice you are to people who want to be spoon-fed. There are patient people on the planet! ;) Robert Blayzor wrote: Crucificator wrote: I have installed clamav 0.67 with no problem. I have this one though after installing:) : clamd running clamscan successfully detects infected file included path to /var/spool/mail in clamav.conf If you are running clamd you probably don't want to run clamscan, you want to run clamdscan. However if you are looking for the scanner to delete the infected files you have to use clamscan as clamdscan will not do this for you. Try: clamscan --remove For more info see, man clamd, clamdscan and clamscan. --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Dealing with a flood of mail
Brock Nanson wrote: I've got a server running a Discus forum in addition to Exim4, Clamav and spamassassin. One of the functions of the forum is to send the latest posting to all on the mail list. The result is a flood of mail that Exim sends on to Clam and Spamassassin. Prior to adding Clam and SpamAssassin to the system, the discus mail flowed without a hitch. Now, however, I seem to be hitting a bottle neck with one or the other of the new additions (Exim winds up running 20 or more times and turning away mail - 'too many connections'). I'm wondering it has to do with the number of consecutive connections allowed by the clamav conf file. If this is the case, I don't think the solution is to increase the number to something exceeding the number of mail list members... ;-) Hi, It's unlikely it's clamav, but very likely it's SA. I don't run Exim, but with Qmail I do not scan mail coming from 127.0.0.1, I just accept it and pass it along. Regards, Rick --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Dealing with a flood of mail
Brock Nanson wrote: I've got a server running a Discus forum in addition to Exim4, Clamav and spamassassin. One of the functions of the forum is to send the latest posting to all on the mail list. The result is a flood of mail that Exim sends on to Clam and Spamassassin. Prior to adding Clam and SpamAssassin to the system, the discus mail flowed without a hitch. Now, however, I seem to be hitting a bottle neck with one or the other of the new additions (Exim winds up running 20 or more times and turning away mail - 'too many connections'). I'm wondering it has to do with the number of consecutive connections allowed by the clamav conf file. If this is the case, I don't think the solution is to increase the number to something exceeding the number of mail list members... ;-) The logs are sort of chicken-egg. It's not apparent where the problem starts, so I don't know what sort of 'relevant' configuration data to post. Hence, I'm really just asking if mass mailings like this *could* be an issue for Clamav, or if I should look elsewhere. Set Exim4 to use ClamAV only on incoming mail perhaps? --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] ClamAV and Virtuozzo VPS - has anyone installed it on this system?
Hi, I have it working on a Virtuozzo VPS (Red Hat Linux) with no problems :) Miguel Hi Miguel I'm assuming that you're talking about a totally default installation of ClamAV, no special settings or other adjustments? Many thanks :-) -- ___ Sign-up for Ads Free at Mail.com http://promo.mail.com/adsfreejump.htm --- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
