Re: [clamav-users] New Version of ClamAV

2013-03-20 Thread Spiro Harvey
> We're currently scoping out the next version of ClamAV.  We have a
> number of ideas in house, but I wanted to solicit some feedback from
> our users about what you might be interested in seeing.

Timely release announcement on the mailing list. 

/ducks ;)


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[clamav-users] Here's a HOWTO on building your own RPMs for ClamAV

2011-02-13 Thread Spiro Harvey
I always build my own RPMs of ClamAV when new releases come out, so
I've written up a quick HOWTO for those who may find it useful.

http://wtf.geek.nz/2011/02/building-clamav-rpms/


-- 
Spiro Harvey   Knossos Networks Ltd
(04) 460-2531 : (021) 295-1923  www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [clamav-users] [Clamav-announce] announcing ClamAV 0.97rc

2011-01-31 Thread Spiro Harvey
-02-01 15:39:25 (216 KB/s) - Connection closed at byte 1202630.
Retrying.

--2011-02-01 15:39:33--  (try: 9)
http://master.dl.sourceforge.net/project/clamav/clamav/0.97/clamav-0.97rc.tar.gz
Connecting to master.dl.sourceforge.net|216.34.181.56|:80... connected.
HTTP request sent, awaiting response... 206 Partial Content Length:
41778857 (40M), 40576227 (39M) remaining [application/x-gzip] Saving
to: `clamav-0.97rc.tar.gz'

 3% [+  ] 1,552,777326K/s   in
1.0s

2011-02-01 15:39:34 (326 KB/s) - Connection closed at byte 1552777.
Retrying.

--2011-02-01 15:39:43--  (try:10)
http://master.dl.sourceforge.net/project/clamav/clamav/0.97/clamav-0.97rc.tar.gz
Connecting to master.dl.sourceforge.net|216.34.181.56|:80... connected.
HTTP request sent, awaiting response... ^C




-- 
Spiro Harvey   Knossos Networks Ltd
(04) 460-2531 : (021) 295-1923  www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] OSX configure command

2010-11-14 Thread Spiro Harvey

> Raven:clamav-0.96.4 tshaw$ ./configure


Configure isn't a system command. It's a script which comes with every
program that uses it to build itself. See the "./" in front of
configure? That means find it in the current directory. 

Your configure is working perfectly fine. 


> checking for gcc... gcc
> checking whether the C compiler works... no

This is where your trouble started. This is telling you it can't find
an appropriate C compiler (gcc).

> configure:3749: found /Developer/usr/bin/gcc
> configure:3760: result: gcc
> configure:3989: checking for C compiler version
> configure:3998: gcc --version >&5

It looks like it found one, but it isn't happy with it.

It seems to have plodded along for a bit anyway until it got to..

> ld: library not found for -lcrt1.10.6.o

This is where it looks like it borked. You don't have version 1.10.6
of the crt lib. But it looks like it's not happy with GCC either.


When configure runs, you need to read the output and figure out what
broke. Then you fix the broken stuff and re-run. Repeat until success
or you have no hair left.



-- 
Spiro Harvey   Knossos Networks Ltd
(04) 460-2531 : (021) 295-1923  www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] (no subject)

2010-04-21 Thread Spiro Harvey
On Thu, 22 Apr 2010 08:51:00 +1200
Steve Wray  wrote:

> This would be ok if the distros maintained the servers which their 
> distributed version of Clamav updated from.
> They don't. The responsibility in this case is that of those who
> maintain Clamav, not the distros.
> I would suggest that distros may want to take note of this situation;
> its perhaps not unreasonable for them to maintain eg their own Clamav
> update servers.

But the distro are the ones who gave you outdated unsupported software.
Had they provided you with a newer package, you wouldn't have had this
problem.

Are you suggesting that if your distribution had packaged ClamAV 0.96
and your server(s) didn't break, that you would *still* be upset? Just
on principle?

I honestly doubt it for one simple reason: You don't read the
announcement list, nor do you follow their twitter account, nor do you
read sites like LWN, (all of which, among others, had announcements 6
months ago) so you would never have known.


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] (no subject)

2010-04-21 Thread Spiro Harvey
On Thu, 22 Apr 2010 08:19:31 +1200
Steve Wray  wrote:

> Don't get distracted by issues such as "Oh those bad silly sysadmins
> out there who messed up, its really *their* fault not the fault of
> the Clamav developers!" That is just *not* helpful. The damage is
> already done; damage to peoples systems and damage to the reputation
> not only of Clamav but of OSS in general.

If you were to talk about helpful, perhaps you should be proposing a
way for them to do it better next time. That would really be in the
spirit of OSS. 


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] (no subject)

2010-04-21 Thread Spiro Harvey
On Wed, 21 Apr 2010 14:36:17 +1200
Steve Wray  wrote:

> I know that in certain jurisdictions, reaching out to someone elses 
> computer (ie not your property) and disabling functionality on it
> could constitute a criminal act.
> I sincerely hope that someone somewhere under such a jurisdiction
> goes to the police and reports the Clamav developers for such an
> offense.

Points to consider:

1. Everybody on the planet had 6 months warning. (In fact more if you
look at the "outdated software" warnings in your logs).

2. They chose to stop releasing updates for a prehistoric version of
the software.

3. Had they continued to allow these updates, and your systems got
borked because it wasn't stopping any current viruses, you'd still want
to sue. So basically, they were damned if they did, and they'd be
damned if they didn't.

4. What did you pay for the software?

5. Where's your contract with them?

6. The only people who are pissy about it appear to be set and forget
admins -- the ones who don't seem to properly maintain their systems
and monitor really important software like ClamAV. 

7. The only systems that broke were badly configured ones. I can stop
ClamAV on my mail servers and mail will continue to flow happily, and
other milters will continue to scan mail. It's just Clam that stops. 

8. Had the developers just silently stopped publishing updates for old
versions of ClamAV, then the customers of set-and-forget mail admins
would potentially be in a world of crap. Doing it this way *forced*
people to realise that their software was old and out of date, and
potentially harmful to them and their customers.



signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] EOL

2010-04-18 Thread Spiro Harvey
> So ClamAV as a package won't silently 'not work' for the safety of 
> users - and this has been the justification for their approach to 
> this issue. But at the very same time they are recommending a setup 
> which will silently not scan mail if there's a problem with ClamAV.

I guess it depends on the definition of "silent" and which point of
view is pertinent.

Just 30 minutes ago I was battling one of our clam installs. Being a
higher usage (outgoing only) server, the upgrade from 0.95.x to 0.96
just happened after I was happy that everything was working well on the
others.

Long story short, the active clamav-milter.conf was pointing to the
wrong directory for the socket (but it was similar enough I didn't
notice on first (or fourth) glance).

Sendmail couldn't connect to clamd thru the milter. Everything else
worked fine, mail kept flowing, spamassassin went about its business,
but nothing was clammed for 20 minutes. 

So from the remote point of view, mail kept flowing, and the errors
were "silent."

The log files, of course, were not silent. 


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] (no subject)

2010-04-18 Thread Spiro Harvey
> 1) If it aint broke, don't fix it. It works, has worked reliably for 
> several years, and was working fine yesterday. It's uptime is 

And now it's broken. So you have to fix it. Life on the edge is scary
for some sysadmins, eh?

> currently 405 days, and then the last downtime was to physically move 
> the server.

So for 405 days you've done no kernel patches? Awesome. I bet that
server's a bunch of remote exploits waiting to happen (if they haven't
already).

Using massive uptimes to prove how cool your server is actually just
shows that you're not doing the right maintenance.

> 2) If it aint broke - don't fix it. There's no way I'd attempt a 
> major upgrade in-place when it's a live server used 24*7. For various 
> internal reasons (which I'm sure you can guess) I don't have the 
> resources to do anything but an in-place upgrade if I want to upgrade.

Well if they don't want patches on it, and they're not prepared to give
you money to have a backup server to do upgrades on, then it can't be
as critical as they're telling you.

> 3) I can accept that software will go out of support - but I never 
> expected a Miscrosoft-esque remote shutdown.

You should have expected it 6 months ago when the announcement was made.




signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] (no subject)

2010-04-18 Thread Spiro Harvey
> Shame you haven't talked to to others - like havp for example - before
> doing this.

The announcement to EOL the old releases was made at the start of
october last year. If people using clam as an integral part of their
software don't read announcements, what fault is that of the clam
developers?

They had 6 months to sort it out.

-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923  www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] News about 0.95

2009-03-11 Thread Spiro Harvey
On Wed, 11 Mar 2009 17:56:22 +
Ian Eiloart  wrote:

> That sounds good. What does it do, though?
> My guess is that it enables freshclam to download copies of files 
> containing URLs that Google considers "unsafe", and then clamd will
> block emails that contain those URLs. Is that right?

http://code.google.com/apis/safebrowsing/

Sounds like it.. might be possible to check realtime too.. but the
quick blurb on the site just mentions downloading a lookup table to the
local machine.

Looks good to me tho.

-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] TROLL NEST (was Non-Windows Malware)

2008-12-09 Thread Spiro Harvey
On Tue, 09 Dec 2008 14:02:08 -0500
Derek Currie <[EMAIL PROTECTED]> wrote:
> Of course not. The arrogance of certain dysfunctional clowns on this  
> list is outrageous. I never run into this rubbish except at troll  
> dens, which apparently this is.
> A big BITE ME to you trolls. You DAMAGE the reputation of Clamav
> with your baby behavior. I don't baby sit any more. Go get yourself
> some more decent people to ABUSE you moronic parasites.

Derek, will you please stop trolling about trolls?


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Non-Windows Malware

2008-12-07 Thread Spiro Harvey
On Sat, 06 Dec 2008 18:24:28 -0500
Derek Currie <[EMAIL PROTECTED]> wrote:

> - A pile of provoking rubbish.
> I obviously know more about the subject than you, and have been
> doing all the work to change the situation. Meanwhile, do please
> enjoy sitting back and making fun of the world to which you don't  
> contribute. You are on my 'ignore' list. Ever think of getting an  
> official certification as a T.R.O.L.L.?

irony. meter. blowing. off. scale.


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Non-Windows Malware

2008-12-07 Thread Spiro Harvey
> >> What then is the benefit of Clamav on the Mac platform?
> > same reason why it's on Linux.. to protect windows users.
> Yes, but I already acknowledged that, as found in the next sentence  
> of my post:

actually, that quote you refer to is from a completely separate post.
One which I hadn't read when I was replying to your initial post.



-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Non-Windows Malware

2008-12-04 Thread Spiro Harvey
> What then is the benefit of Clamav on the Mac platform? 

same reason why it's on Linux.. to protect windows users.

It's my experience that malware and virus scares for Macs are bogus. 

I work for an ISP and we have ClamAV and the sendmail milter running to
scan all incoming and outgoing emails. Check the headers of this
message.

No doubt some people run mail servers on OS-X that are delivering mail
to windows users, so it is possible for those people to run clam.


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Twitter

2008-12-04 Thread Spiro Harvey
> We'd like to hear any feedback people have who are following our
> Twitter channel at http://twitter.com/clamav.

Who is the intended audience? If an admin is not running freshclam out
of cron or equivalent scheduler, then they obviously don't care about
updates.

If they are running it out of cron, then surely they don't care about
the twitter feed because their database is getting updated
automatically.

In the instance of wanting to know what the latest update is, we can
refer to the mentioned "host" method or we can visit the clamav.net
website.



> If you're finding these updates useful please let us know. Also let
> us know if there is anything else that you'd like us to put on that
> channel.

The only thing I think the feed is really useful for is announcements
such as the webinar which is on the twitter feed, but will eventually
be lost in the flood of db updates.

The mailing lists are a better vehicle for these announcements because
they can hold more information and can be stored and accessible longer.

I don't see the twitter feed adding any value.


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] clamav-milter dying with HUP

2008-12-01 Thread Spiro Harvey
I'm running clamd and clamav-milter on a few CentOS 5.2 boxes and have
noticed the last few weeks that clamav-milter has been dying on Sunday
nights...

This seems to have started with 0.94.1, and I've just upgraded to 0.94.2 this 
morning.

Basically, when logrotate does its weekly run, it executes this:

/var/log/clamav/clamd.log {
missingok
notifempty
create 644 clamav clamav
postrotate
killall -HUP clamav-milter 2>/dev/null || :
endscript
}


Once this is HUPed, clamav-milter fails.

doing a "service clamav-milter status" resulted in:

# service clamav-milter status
clamav-milter dead but subsys locked
# echo $?
2

Starting the service works fine and it goes until next sunday.

This logrotate HUP of clamav-milter seems to have been working ok for
months, but only has failed in the last 3 (?) weeks.


clamav-milter 0.94.2 is still exhibiting this behaviour if I HUP
it.

Should I be able to HUP it, or should I be fixing my logrotate? 


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] <<< 550 This message was detected as possible malware (Zip.ExceededFileSize).

2008-11-17 Thread Spiro Harvey
> I also don't like blindly following advice.

it's in your best interests to upgrade.

from the FAQ: "In order to detect all the latest viruses, it’s not
enough to keep your database up to date. You also need to run the
latest version of the scanner."


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz


signature.asc
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] mirrors and cdiff files?

2008-09-10 Thread Spiro Harvey, Knossos Networks Ltd
> daily-7912?  we're at daily-8212.cdiff as of 15 minutes ago, you're 200
> patches behind... 7912 was loaded on Aug. 1 16:53:05 (CDT).

I see. It must have been an issue with my cache..

I just looked closer at the last message I posted and it says it's using
8212, but for some reason was just trying to download an old one.

I blew away everything in the /var/clamav directory, redownloaded the
main.cvd and daily.cvd from db.local.clamav.net, and ran freshclam.

Now it all seems to be ok.

I'll keep an eye on it, but it's looking happier at least. :)

Thanks very much Rene.

-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] mirrors and cdiff files?

2008-09-10 Thread Spiro Harvey, Knossos Networks Ltd
I've posted a couple of pleas which have gone unanswered, so I'll post a
bit more info in the hopes that I'm being clearer..

I'm in New Zealand, and I'm trying to sync my freshclam with
db.nz.clamav.net. Sometimes it seems to work, other times it doesn't.

I'll get this error:


WARNING: getfile: main-48.cdiff not found on remote server (IP:
203.16.234.78)


so I changed to db.uk.clamav.net and the main-48.cdiff downloaded
correctly, however, immediately after that, I got:

WARNING: getpatch: Can't download daily-7912.cdiff from db.uk.clamav.net

I got the same error about daily-7912.cdiff from db.us.clamav.net

>From the UK and US servers, my freshclam seems to have updated:


daily.cvd updated (version: 8212, sigs: 22057, f-level: 35, builder:
ccordes)
Database updated (421321 signatures) from db.us.clamav.net (IP:
194.47.250.218)


but from db.nz.clamav.net, it just fails, waits 5 seconds, and tries
again, etc..


Is anyone else having issues downloading daily-7912.cdiff? Is this a
mirror problem, or a problem with my local cache, or something else
entirely?


Any info or help greatly appreciated.

thanks


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] problems syncing from mirror

2008-09-09 Thread Spiro Harvey, Knossos Networks Ltd
I had this problem last week when trying to update clamav to 0.94, but 
never got a response from the list...

I figured it was related to the overloading problem others were 
reporting, so let it sit.. this week I updated them and all seemed to 
work.. until this morning.. there was nothing in my freshclam log files.

so I tried to manually run freshclam. one server worked fine, and the 
other got these errors (same as last week):

is the NZ mirror having issues?


# freshclam
ClamAV update process started at Wed Sep 10 08:42:46 2008
main.cld is up to date (version: 48, sigs: 399264, f-level: 35, builder: 
sven)
WARNING: getfile: daily-8196.cdiff not found on remote server (IP: 
203.16.234.78)
WARNING: getpatch: Can't download daily-8196.cdiff from db.nz.clamav.net
WARNING: getfile: daily-8196.cdiff not found on remote server (IP: 
203.16.234.78)
WARNING: getpatch: Can't download daily-8196.cdiff from db.nz.clamav.net
WARNING: getfile: daily-8196.cdiff not found on remote server (IP: 
203.16.234.78)
WARNING: getpatch: Can't download daily-8196.cdiff from db.nz.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
WARNING: Mirror 203.16.234.78 is not synchronized.
Trying again in 5 secs...
ClamAV update process started at Wed Sep 10 08:42:56 2008


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] problems syncing from mirror

2008-09-04 Thread Spiro Harvey, Knossos Networks Ltd
I just tried the following on one of our mail servers:

[EMAIL PROTECTED] ~]# rpm -Uvh clam*94*
Preparing...### 
[100%]
1:clamav-db  ### 
[ 20%]
2:clamav ### 
[ 40%]
3:clamd  warning: /etc/clamd.conf created as 
/etc/clamd.conf.rpmnew
### [ 60%]
4:clamav-devel   ### 
[ 80%]
5:clamav-milter  ### 
[EMAIL PROTECTED] ~]# freshclam
ClamAV update process started at Fri Sep  5 14:00:14 2008
WARNING: getfile: main-48.cdiff not found on remote server (IP: 
203.16.234.78)
WARNING: getpatch: Can't download main-48.cdiff from db.nz.clamav.net
WARNING: getfile: main-48.cdiff not found on remote server (IP: 
203.16.234.78)
WARNING: getpatch: Can't download main-48.cdiff from db.nz.clamav.net
WARNING: getfile: main-48.cdiff not found on remote server (IP: 
203.16.234.78)
WARNING: getpatch: Can't download main-48.cdiff from db.nz.clamav.net
WARNING: Incremental update failed, trying to download main.cvd
Downloading main.cvd [100%]
WARNING: Mirror 203.16.234.78 is not synchronized.
Trying again in 5 secs...
ClamAV update process started at Fri Sep  5 14:01:18 2008

etc etc

it would just loop.. download 100%, then say the mirror isn't sync'd, 
then do the same again, ad infinitum.

I deleted all the packages and installed 0.93.3, and tried to freshclam 
that, and got the same problems. In the end I nuked the files in 
/var/clamav and copied them over from another mail server.

how do I get it to sync from another mirror, or give it a list of 
mirrors to try in order?




-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] announcing ClamAV 0.94rc1

2008-08-19 Thread Spiro Harvey, Knossos Networks Ltd
> Bandwidth costs money.  How big will the database have to grow before
> the ClamAV team starts to take notice?  Fifty megabytes?  A hundred?

Americans don't understand this dilemma. To them traffic is free because 
it's all national. International traffic costs money but that only 
affects countries outside the US because we have to ship most of our 
traffic over international links to get to them.

Of course, this is usually resolved by talking to national mirrors. And 
it's even better when those mirrors are up to date. :)

-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] clamd 0.93.2 dying on CentOS 5.2 x86_x64

2008-07-21 Thread Spiro Harvey, Knossos Networks Ltd
Thanks I should have thought of that but...it still does not work or at 
least I am not putting the link in the correct spot. The script, 
rpm-tmp.x, contains the line "rm -rf clamav-0.93" which removes the 
link if I put it in BUILD where it extracts the tarball.
I have not built any other rpms so could it be a problem with my 
installation? i.e. Do I need to setup the system to build rpms?


I think if you've got this far and you've got the rpmbuild binary, you 
should be ok. going by what giorgio said, I've attached an updated spec 
file. try this one and see how it goes.


--
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] clamd 0.93.2 dying on CentOS 5.2 x86_x64

2008-07-20 Thread Spiro Harvey, Knossos Networks Ltd
> It correctly unzips the clamav-0.93.3.tar.gz AND creates a clamav-0.93.3 
> directory BUT tries to go to clamav-0.93 instead of clamav-0.93.3.  Any 
> suggestions?

ln -s clamav-0.93.3 clamav-0.93

:)

I can't find a line in the spec that only refers to clamav-%{version} .. 
they've all got -%{release} on the end, so don't know why you're getting 
that issue. but if you unzip it yourself, and then make a symlink, you 
should be ok..


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] [ot?] oh no

2008-07-13 Thread Spiro Harvey, Knossos Networks Ltd
>>  > X-Virus-Scanned: Debian amavisd-new at tad.clamav.net
>> just found this in the headers of this mailing list :(
> Don't be surprised.  I often use products I create in my spare time.  If 
> you aren't willing to use the product you are creating yourself than how 
> can you honestly expect others to.  This just means they are using 
> clamav on their own mailing list.  No special feet...

I thought amavis was an alternative to clamav, thus thinking they 
*weren't* using clam on their own mailing list.


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] [ot?] oh no

2008-07-10 Thread Spiro Harvey, Knossos Networks Ltd
 > X-Virus-Scanned: Debian amavisd-new at tad.clamav.net

just found this in the headers of this mailing list :(


-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] clamd 0.93.2 dying on CentOS 5.2 x86_x64

2008-07-10 Thread Spiro Harvey, Knossos Networks Ltd
looks like my attachment got clipped.

here is the SPEC file I use (with changelog snipped for brevity):


# $Id: clamav.spec 6047 2007-12-19 11:20:08Z dag $
# Authority: dag
# Upstream: 

### FIXME: Sysv script does not have condrestart option (redo sysv script)
### FIXME: amavisd-new requires clamd to run as user vscan, solution needed
### REMINDER: Look and sync with Petr Kristof's work

### sendmail has been updated on EL2, no longer true.
#%{?el2:#define _without_milter 1}

Summary: Anti-virus software
Name: clamav
Version: 0.93
Release: 3
License: GPL
Group: Applications/System
URL: http://www.clamav.net/

#Source: http://www.clamav.net/clamav-%{version}.tar.gz
#Source: http://dl.sf.net/clamav/clamav-%{version}.tar.gz
Source: /usr/src/redhat/SOURCESS/clamav-%{version}.%{release}.tar.gz
Source1: clamav.init
Source2: clamav-milter.init
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root

BuildRequires: bzip2-devel, zlib-devel, gmp-devel, curl-devel
%{!?_without_milter:BuildRequires: sendmail-devel >= 8.12}
Requires: clamav-db = %{version}-%{release}

### Fedora Extras introduced them differently :(
Obsoletes: libclamav <= %{version}-%{release}
Obsoletes: clamav-lib <= %{version}-%{release}
Provides: libclamav

%description
Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of
this software is the integration with mail servers (attachment scanning).
The package provides a flexible and scalable multi-threaded daemon, a
command line scanner, and a tool for automatic updating via Internet.

The programs are based on a shared library distributed with the Clam
AntiVirus package, which you can use with your own software. Most
importantly, the virus database is kept up to date

%package -n clamd
Summary: The Clam AntiVirus Daemon
Group: System Environment/Daemons
Requires: clamav = %{version}-%{release}
Requires(pre): /usr/sbin/groupadd
Requires(pre): /usr/sbin/useradd

### Fedora Extras introduced them differently :(
Obsoletes: clamav-server <= %{version}-%{release}

%description -n clamd
The Clam AntiVirus Daemon

%package milter
Summary: The Clam AntiVirus sendmail-milter Daemon
Group: Applications/System
Requires: clamd = %{version}-%{release}
Requires: sendmail

%description milter
The Clam AntiVirus sendmail-milter Daemon

%package db
Summary: Virus database for %{name}
Group: Applications/Databases
### Remove circular dependency
#Requires: clamav = %{version}-%{release}
Requires(pre): /usr/sbin/groupadd
Requires(pre): /usr/sbin/useradd

### Fedora Extras introduced them differently :(
Obsoletes: clamav-update <= %{version}-%{release}
Obsoletes: clamav-data <= %{version}-%{release}

%description db
The actual virus database for %{name}

%package devel
Summary: Header files, libraries and development documentation for %{name}
Group: Development/Libraries
Requires: clamav = %{version}-%{release}

### Fedora Extras introduced them differently :(
Obsoletes: libclamav-static-devel <= %{version}-%{release}
Obsoletes: libclamav-devel <= %{version}-%{release}
Provides: libclamav-static-devel, libclamav-devel

%description devel
This package contains the header files, static libraries and development
documentation for %{name}. If you like to develop programs using %{name},
you will need to install %{name}-devel.

%prep
%setup

%{__perl} -pi.orig -e 's|/lib\b|/%{_lib}|g;' libtool configure

%{__perl} -pi.orig -e '
 s|[EMAIL PROTECTED]@|\$(localstatedir)/clamav|g;
 s|[EMAIL PROTECTED]@|\$(localstatedir)/clamav|g;
 s|[EMAIL PROTECTED]@|\$(sysconfdir)|g;
 s|[EMAIL PROTECTED]@|\$(sysconfdir)|g;
 s|[EMAIL PROTECTED]@|\t|g;
 s|[EMAIL PROTECTED]@|\t|g;
 ' database/Makefile.in etc/Makefile.in

%{__perl} -pi.orig -e '
 s|^(Example)|#$1|;
 s|^#(LogFile) .+$|$1 %{_localstatedir}/log/clamav/clamd.log|;
 s|^#(LogFileMaxSize) .*|$1 0|;
 s|^#(LogTime)|$1|;
 s|^#(LogSyslog)|$1|;
 s|^#(PidFile) .+$|$1 %{_localstatedir}/run/clamav/clamd.pid|;
 s|^#(TemporaryDirectory) .+$|$1 %{_localstatedir}/tmp|;
 s|^#(DatabaseDirectory) .+$|$1 %{_localstatedir}/clamav|;
 s|^#(LocalSocket) .+$|$1 %{_localstatedir}/run/clamav/clamd.sock|;
 s|^#(FixStaleSocket)|$1|;
 s|^#(TCPSocket) .+$|$1 3310|;
 s|^#(TCPAddr) .+$|$1 127.0.0.1|;
 s|^#(MaxConnectionQueueLength) .+$|$1 30|;
 s|^#(StreamSaveToDisk)|$1|;
 s|^#(MaxThreads) .+$|$1 50|;
 s|^#(ReadTimeout) .+$|$1 300|;
 s|^#(User) .+$|$1 clamav|;
 s|^#(AllowSupplementaryGroups).*$|$1 yes|;
 s|^#(ScanPE) .+$|$1 yes|;
 s|^#(ScanELF) .+$|$1 yes|;
 s|^#(DetectBrokenExecutables)|$1|;
 s|^#(ScanOLE2) .+$|$1 yes|;
 s|^#(ScanMail)|$1|;
 s|^#(ScanArchive) .+$|$1 yes|;
 s|^#(ArchiveMaxCompressionRatio) .+|$1 300|;
 s|^#(ArchiveBlockEncrypted)|$1|;
 s|^#(ArchiveBlockMax)|$1|;
 ' etc/clamd.conf

%{__perl} -pi.orig -e '
  

Re: [Clamav-users] clamd 0.93.2 dying on CentOS 5.2 x86_x64

2008-07-10 Thread Spiro Harvey, Knossos Networks Ltd

Revert to 0.93.1 until the current 0.93.3 is available to you.


or even better, build an RPM from source.

here's how I do it:

attached is a file called clamav.spec. save that into /usr/src/redhat/SPECS/

then put clamav-0.93.3.tar.gz into /usr/src/redhat/SOURCES/


build the rpms:

# rpmbuild -ba /usr/src/redhat/SPECS/clamav.spec

the created RPMs will be in /usr/src/redhat/RPMS/

either install them all:
# rpm -Fvh /usr/src/redhat/RPMS/i386/clam*-0.93.3*.rpm

or just the ones you want. we use clamav-milter and all sorts, but ymmv.

then run freshclam and restart your clam services (chkconfig --list|grep 
clam)



we run centos 5.1 i386, but I see no reference to architecture in the 
SPEC file, so it should build happily from source as is. all I ever 
change is the version number and release, and it builds happily each time.




--
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] version jump?

2008-07-07 Thread Spiro Harvey, Knossos Networks Ltd
I just went on to clamav.net expecting 0.93.2 as per yesterday's 
announcement, and found the site lists the latest stable version as 0.93.3.

did I get stuck in a time warp when I fell asleep last night? I've got 
this overwhelming feeling telling me I should be making a jump to the left.

-- 
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml