[Clamav-users] clamdscan versus clamscan
I am using clamassassin, built with clamdscan instead of clamscan, through procmail. Do I need to change my procmail script to reflect the use of clamdscan? Im not pulling out any viruses. thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] high load condition
My mail server has been choking under high load for about 3 months now. I have about 725 user accounts, using sendmail, imapd and horde for webmail. Top shows the load average climbing above 30. Server is a 4 gb+ memory and Dual pIII. I use clamav with procmail. Top shows clamscan in the top portion of utilization everytime. My clamav isnt logging (doesnt look like it has for sometime). I disabled clamscan in procmail and mail utilization went way down. Does anyone know how I can start troubleshooting this? I am running ClamAV 0.88.4/1742. My clamav.conf is pretty normal. I havent changed it in quite sometime though. Procmail script: # send through clamav #:0fw #| /usr/local/bin/clamassassin # quarantine if clamav found virus #:0: #* ^X-Virus-Status: Yes #/opt/viruses/clamav-viruses thanks, ddh -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Re: clamav-users Digest, Vol 8, Issue 75
[EMAIL PROTECTED] wrote: Send clamav-users mailing list submissions to clamav-users@lists.clamav.net To subscribe or unsubscribe via the World Wide Web, visit http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than Re: Contents of clamav-users digest... Today's Topics: 1. Re: 0.85 0.81.1 tha same troubles with milter (Jason Frisvold) 2. Re: 0.85 0.81.1 tha same troubles with milter (Brian Morrison) 3. Re: 0.85 0.81.1 tha same troubles with milter (Dennis Peterson) 4. Re: 0.85 0.81.1 tha same troubles with milter (Jim Maul) 5. Re: 0.85 0.81.1 tha same troubles with milter (Dennis Peterson) 6. Re: Re: virus passing through clamav-milter, but not through clamdscan! (Stephen Gran) 7. Re: sober.p and german adverts? ([EMAIL PROTECTED]) 8. Re: sober.p and german adverts? (Matt Fretwell) 9. Re: sober.p and german adverts? ([EMAIL PROTECTED]) -- Message: 1 Date: Tue, 17 May 2005 14:26:46 -0400 From: Jason Frisvold [EMAIL PROTECTED] Subject: Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter To: ClamAV users ML clamav-users@lists.clamav.net Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=ISO-8859-1 On 5/17/05, Dennis Peterson [EMAIL PROTECTED] wrote: You said it shouldn't log to / and there's no reason it shouldn't if that is where one wishes it to log. There's lots of reasons why that would be a bad idea, but it's an admin decision, not an application issue. It sounds like clam is creating the log files *before* the root startup process hands over control to the user defined in the config files. In 0.84 and prior, it sounds like there was something that handed off an open filehandle to the defined user, but that filehandle was opened by root... I'm not sure if that's possible or not, so please correct me if I'm wrong.. :) It seems that the current behaviour is more correct, but still not completely correct.. I would expect that when clamav starts, all control should be handed to the defined user immediately and then files should be created, opened, etc... It's possible that the current problems are mostly due to pre-existing logfiles that are already owned by root, as opposed to new installations. To be honest, I haven't tried a new install to see if the files are still created with improper permissions. dp ... did I mention I'm anal? Isn't anal a required attribute for those who are security conscious? ;) Im having a problem with this new virus Trojan.Ascetic.C. I have clamav scanning mail through clamassassin (procmail). It isnt catching any of them. I have upgraded to the latest version of clamav and am using clamassassin 1.2.2. Any ideas how I can get it to start? ddh ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] (no subject)
So sorry, Viruses are being detected. clamd is running. The mails are being processed correctly through procmail. Its just this particular virus that isnt getting detected (Trojan.Ascetic.C). Sorry to be so vague. Its my first post to the list. If any more info is needed just let me know. Im just wondering why the emails arent getting flagged. ddh A bit more information would be useful. Is clamd running? Are the mails being processed correctly through procmail? Are the virii detected when you manually run clamscan/clamdscan on them? With such a vague question, not much can be proferred in the way of advice. Matt -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Re: clamav-users Digest, Vol 8, Issue 7
? freshclam can run in foreground, just like clamd and daemontools were written by DJB, no? I run clamd via daemontools, and I believe freshclam can also be run same way, so no re-invention of wheels. -Wash http://www.netmeister.org/news/learn2quote.html -- +==+ |\ _,,,---,,_ | Odhiambo Washington[EMAIL PROTECTED] Zzz /,`.-'`'-. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +==+ Information Center, n.: A room staffed by professional computer people whose job it is to tell you why you cannot have the information you require. -- ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users End of clamav-users Digest, Vol 8, Issue 7 ** -- Dwayne Hottinger Network Administrator Harrisonburg City Public Schools ___ http://lurker.clamav.net/list/clamav-users.html
