Re: [Clamav-users] Clamdscan Upgrading Problem.
On Wed, 2005-12-28 at 12:24 +0500, Shahzad Abid wrote: I an running clamdscan on FC3 I have default installation clamdscan: 0.83/1218 and I am trying to upgrade older version with new one which is available on website. When I upgrade by rpm -Uvh clamdscan.new.version.rpm it show that there are some dependencies on older version. So I disables the clamdscan service and installed from clamdscan.tar.gz. My issue is that I want to upgrade clamdscan properly using .rpm. you need to upgrade clam, clamd, freshclam, libclam, etc all at the same time. The Mandriva packages I use are split in this way: clamav clamav-db clamav-milter clamd libclamav1 libclamav1-devel since I don't use milter or -devel, my upgrade statement could look like: rpm -Fvh clamav-0.87.1-0.1.20060mdk.rpm \ clamav-db-0.87.1-0.1.20060mdk.rpm clamd-0.87.1-0.1.20060mdk.rpm \ libclamav1-0.87.1-0.1.20060mdk.rpm Or, since I use urpmi, I just do: urpmi.update update_source urpmi --update clamav and urpmi prompts me with a list of packages that it will install to meet the dependencies -- Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281 Austin Energy [EMAIL PROTECTED] gpg Key: http://austinnetworkdesign.com/pgp.key Key fingerprint = B527 F53D 0C8C D38B DCC7 901D 2F19 A13A 22E8 A76A ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Timeout before data read
Dec 28 17:35:56 apple clamav-milter[27256]: 00: clamfi_helo: helo/ehlo: vladimir Dec 28 17:35:56 apple clamav-milter[27256]: jBSEZuqX027255: clamfi_envfrom: non first message in smtp connection (00 first) Dec 28 17:35:56 apple clamav-milter[27256]: jBSEZuqX027255: clamfi_envfrom: [EMAIL PROTECTED] Dec 28 17:35:56 apple clamav-milter[27256]: jBSEZuqX027255: clamfi_envfrom: hit max-children limit (119 = 50): waiting for some to exit Dec 28 17:35:56 apple imapd[27257]: imap service init from 192.168.0.194 Dec 28 17:35:59 apple sendmail[27243]: jBSEZmu7027243: Milter (clmilter): timeout before data read Dec 28 17:35:59 apple sendmail[27243]: jBSEZmu7027243: Milter (clmilter): to error state Dec 28 17:35:59 apple clamav-milter[27074]: 00: clamfi_close: clear helo data (helo: mailsrv.nvk.int) Dec 28 17:35:59 apple clamav-milter[27074]: 00: clamfi_close: clear ConnectMesgID data Dec 28 17:35:59 apple clamav-milter[27074]: jBSEV0Yp027068: clamfi_close. Dec 28 17:36:06 apple sendmail[27255]: jBSEZuqX027255: Milter (clmilter): timeout before data read Dec 28 17:36:06 apple sendmail[27255]: jBSEZuqX027255: Milter (clmilter): to error state Dec 28 17:36:06 apple sendmail[27255]: jBSEZuqX027255: from=[EMAIL PROTECTED], size=1097, class=0, nrcpts=1, msgid=[EMAIL PROTECTED], proto=SMTP, daemon=MTA, relay=[192.168.0.168] Dec 28 17:36:06 apple sendmail[27266]: jBSEZuqX027255: to=[EMAIL PROTECTED], ctladdr=[EMAIL PROTECTED] (825/825), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=31273, dsn=2.0.0, stat=Sent ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Timeout before data read
On Wed, 2005-12-28 at 16:43 +0300, Vladimir Pazuhin wrote: Dec 28 17:35:56 apple clamav-milter[27256]: jBSEZuqX027255: clamfi_envfrom: hit max-children limit (119 = 50): waiting for some to exit Looks like you need to raise your max-children, based on load. Or the children are hanging - without more details it's impossible to know. But that's where you should look first. Dec 28 17:35:59 apple sendmail[27243]: jBSEZmu7027243: Milter (clmilter): timeout before data read -- Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281 Austin Energy [EMAIL PROTECTED] gpg Key: http://austinnetworkdesign.com/pgp.key Key fingerprint = B527 F53D 0C8C D38B DCC7 901D 2F19 A13A 22E8 A76A ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Triggering freshclam with procmail
Harry Phillips wrote: I was wondering if it is possible and if it is advisable to trigger freshclam when I receive a message that the daily database has been updated. I used to do this, but it's no longer necessary now that freshclam can check for updates via a DNS query. You can run it as a daemon, or hourly via cron and not put too much load on the update servers. Linking it to the mailing list no longer provides much of an advantage. ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Too many Clamscan processes
Every couple of weeks my server slows down from too many clamscan processes running. They seem to be running on the bounced mail account as a result of spammers. I changed /etc/clamav.conf to MaxThreads 5 but I still get dozens of clamscan threads running. Procmail Trashscan Clamscan Any way to keep the number of clamscan processes down? Thanks. -pbr ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Timeout before data read
Look, please. [EMAIL PROTECTED] sysconfig]# /etc/init.d/clamav-milter restart Stopping clamav-milter service: start-stop-daemon: warning: failed to send signal 9 to 28902: No such process start-stop-daemon: warning: failed to send signal 9 to 28870: No such process start-stop-daemon: warning: failed to send signal 9 to 28868: No such process start-stop-daemon: warning: failed to send signal 9 to 28832: No such process start-stop-daemon: warning: failed to send signal 9 to 28817: No such process What does it mean? Are the children hanging? I raised the number of them from 50 to 150. Now he write in /var/log/mail/errors following Dec 28 18:21:40 apple sendmail[23860]: jBSDLeUJ023860: Milter (clmilter): write(A) returned -1, expected 5: Broken pipe Dec 28 18:22:58 apple sendmail[23931]: jBSDMw04023931: Milter (clmilter): write(A) returned -1, expected 5: Broken pipe Dec 28 18:24:09 apple sendmail[23975]: jBSDO9V6023975: Milter (clmilter): write(A) returned -1, expected 5: Broken pipe Dec 28 18:25:19 apple sendmail[24013]: jBSDPJAE024013: Milter (clmilter): write(A) returned -1, expected 5: Broken pipe And later he writes 301150 etc. Daniel J McDonald wrote: without more details it's impossible to know What details do you need? ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Too many Clamscan processes
PBR said: Every couple of weeks my server slows down from too many clamscan processes running. They seem to be running on the bounced mail account as a result of spammers. I changed /etc/clamav.conf to MaxThreads 5 but I still get dozens of clamscan threads running. clamav.conf and the binaries that expect it are obsolete. Unless you mistyped the file name, you seem to be out of date on your installation, or are unaware that the current conf file is clamd.conf. If you are out of date it is urgently advised you upgrade soon. Procmail Trashscan Clamscan Any way to keep the number of clamscan processes down? Use clamdscan and clamd instead of clamscan. It doesn't have to load the virus pattern files each time it runs (they are loaded once by clamd) and is more efficient as a result. Or even better, use ClamAV's milter with sendmail and don't do virus checking with procmail. The added benefit is you can reject the message before it's accepted, and you can be a force in stopping these at the source. dp ___ http://lurker.clamav.net/list/clamav-users.html
