Re: [qmailtoaster] Clamav service stopped

2018-07-17 Thread Eric Broch 

Chandran,

your procedure:

1) update zlib zlib-devel (Many packages depend on this, do at your risk)

# wget 
https://rpmfind.net/linux/fedora-secondary/development/rawhide/Everything/i386/os/Packages/z/zlib-1.2.11-8.fc29.i686.rpm
# wget 
https://rpmfind.net/linux/fedora-secondary/development/rawhide/Everything/i386/os/Packages/z/zlib-devel-1.2.11-8.fc29.i686.rpm


# rpm --nodeps -Uvh zlib-1.2.11-8.fc29.i686.rpm
# rpm --nodeps -Uvh zlib-devel-1.2.11-8.fc29.i686.rpm

2) Get clamav-0.100 w/zlib >= 1.2.11 and install
# wget 
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.100.0-4.qt.zlib1211.el6.i686.rpm

# yum localupdate clamav-0.100.0-4.qt.zlib1211.el6.i686.rpm

3) or build from sources and install
# cd ~/rpmbuild/SRPMS
# wget 
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.100.0-4.qt.zlib1211.src.rpm
# rpmbuild --rebuild --define "dist .qt.zlib1211.el6" 
clamav-0.100.0-4.qt.zlib1211.src.rpm
#  yum localupdate 
/root/rpmbuild/RPMS/i686/clamav-0.100.0-4.qt.zlib1211.el6.i686.rpm


4) ***Problems/Issues*** If you have problems you can always downgrade
# yum downgrade zlib zlib-devel
# yum downgrade clamav

Eric


On 7/16/2018 10:55 PM, ChandranManikandan wrote:

Hi Peter, Eric,

Thank you sharing your ref.
I have the problem still now.

Could you help me to fix this issue.


On Tue, Jul 17, 2018 at 7:05 AM, Eric Broch > wrote:


That sure looks like the problem. Thanks, Peter.



On 7/16/2018 2:58 PM, Peter Peltonen wrote:

Stumbled on this on the CentOS mailing list: it seems 32bit
CentOS6
has a zlib that doesn't play along with the new clamav:

https://bugzilla.redhat.com/show_bug.cgi?id=1600458


I am wondering if this is an issue with qmailtoaster's clamav
as well?

Peter

On Thu, Jul 12, 2018 at 9:40 AM, ChandranManikandan
mailto:kand...@gmail.com>> wrote:

Hi Eric,

Thanks for your support.
The clamd service started successfully
But freshclam shown the below error.

ClamAV update process started at Thu Jul 12 14:37:30 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version: 0.100.1
DON'T PANIC! Read
https://www.clamav.net/documents/upgrading-clamav

Downloading main.cvd [100%]
WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header
ERROR: Verification: Malformed database
Giving up on database.clamav.net...
Update failed. Your network may be down or none of the
mirrors listed in
/etc/freshclam.conf

File /var/log/clamav/freshclam.log not changed so no
update needed


On Thu, Jul 12, 2018 at 1:11 PM, Eric Broch
mailto:ebr...@whitehorsetc.com>>
wrote:

you could download the databases manually here:

https://www.clamav.net/downloads


and put them in the folder /var/lib/clamav


On 7/11/2018 10:47 PM, ChandranManikandan wrote:

Hi Friends,

I have updated latest simscan and clamav on my COS6 32
bit.

My clamav service stopped and unable to start again.
the below message
come.
Could anyone help me.

# service clamd restart
Stopping Clam AntiVirus Daemon:         [FAILED]
Starting Clam AntiVirus Daemon: LibClamAV Error:
cli_loaddbdir(): No
supported d
atabase files found in /var/lib/clamav
ERROR: Can't open file or directory
Closing the main socket.
          [FAILED]
freshclam command come below message.


freshclam
ClamAV update process started at Thu Jul 12 12:46:31 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version:
0.100.1
DON'T PANIC! Read
https://www.clamav.net/documents/upgrading-clamav

WARNING: Can't download main.cvd from db.sg.clamav.net

Trying again in 5 secs...
ClamAV update process started at Thu Jul 12 12:46:36 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.100.0 Recommended version:
0.100.1
DON'T PANIC! Read

Re: [qmailtoaster] DKIM vs domainkeys

2018-07-17 Thread Eric Broch 

Will do. I already did this on my own machines


On 7/17/2018 6:59 AM, Aleksander Podsiadły wrote:

DomainKeys standard (RFC-4870) is obsoleted by DKIM (RFC-4871,
obsoleted by RFC-6376).

IMHO shell script qmail-queue.pl.sh should be patched:
8<-- qmail-queue.pl.sh patch
--- old/qmail-queue.pl.sh   2018-07-17 14:33:27.0 +0200
+++ new/qmail-queue.pl.sh   2018-07-17 14:56:19.0 +0200
@@ -5,8 +5,7 @@
  if [ "${DKVERIFY+x}" ] ; then
tmp=`mktemp -t dk.verify.XXX`
cat - >"$tmp"
-   ( dktest -v < "$tmp" 2>&1 ; \
-   /usr/local/bin/dkimverify.pl  < "$tmp"  | sed 's/\r//'; \
+   ( /var/qmail/bin/dkimverify.pl  < "$tmp"  | sed 's/\r//'; \
[ "$TCPREMOTEIP" ] && printf 'X-Originating-IP:
'$TCPREMOTEIP'\n' ; \
cat "$tmp" ) | \
$DKQUEUE "$@"
8<-- EOT

* dtest is unnecessary,
* path of dkimverify.pl is different in instruction of instalation
DKIM.




--
Eric Broch
White Horse Technical Consulting (WHTC)


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] DKIM vs domainkeys

2018-07-17 Thread Aleksander Podsiadły 
DomainKeys standard (RFC-4870) is obsoleted by DKIM (RFC-4871,
obsoleted by RFC-6376).

IMHO shell script qmail-queue.pl.sh should be patched:
8<-- qmail-queue.pl.sh patch
--- old/qmail-queue.pl.sh   2018-07-17 14:33:27.0 +0200
+++ new/qmail-queue.pl.sh   2018-07-17 14:56:19.0 +0200
@@ -5,8 +5,7 @@
 if [ "${DKVERIFY+x}" ] ; then
tmp=`mktemp -t dk.verify.XXX`
cat - >"$tmp"
-   ( dktest -v < "$tmp" 2>&1 ; \
-   /usr/local/bin/dkimverify.pl  < "$tmp"  | sed 's/\r//'; \
+   ( /var/qmail/bin/dkimverify.pl  < "$tmp"  | sed 's/\r//'; \
[ "$TCPREMOTEIP" ] && printf 'X-Originating-IP:
'$TCPREMOTEIP'\n' ; \
cat "$tmp" ) | \
$DKQUEUE "$@"
8<-- EOT

* dtest is unnecessary,
* path of dkimverify.pl is different in instruction of instalation
DKIM.


-- 
Pozdrawiam/Regards,
Aleksander Podsiadły


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com