Re: [Clamav-users] bounce vs. quarantine

2004-03-23 Thread Kritof Petr
Steven Stern wrote: On second thought, maybe I should have a chance to look at incoming messages rather than bouncing them with a 550. I've removed the -b from the clamav-milter startup. I've replaced it with --quarantine=/var/spool/clamav. Is this what's necessary to quarantine messages in

Re: [Clamav-users] bounce vs. quarantine

2004-03-23 Thread Nigel Horne
new: CLAMAV_FLAGS= -lo --quarantine-dir=/var/spool/clamav --max-children=10 --force-scan --quiet --dont-log-clean --server=localhost local:/var/run/clamav/clamav-milter.sock The default value for --server is 127.0.0.1 so there's no need to add --server=localhost. -Nigel -- Nigel Horne.

Re: [Clamav-users] bounce vs. quarantine

2004-03-23 Thread Nigel Horne
The default value for --server is 127.0.0.1 so there's no need to add --server=localhost. I have now documented this in the clamav-milter(8) manual page, and committed it to CVS, along with an overview of the ability of clamav-milter to talk to more than one clamd server. -Nigel -- Nigel

[Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Jo Mills
Hi, Is anybody else having problems getting database updates or is it just me? I haven't changed my clam setups for ages (it's on my todo list), yet recently (as from Mon, 22 Mar 2004 17:23:01 +) I get the following: With freshclam 0.60: Current working dir is /usr/local/share/clamav

Re: [Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Fajar A. Nugraha
Jo Mills wrote: Hi, Is anybody else having problems getting database updates or is it just me? I haven't changed my clam setups for ages (it's on my todo list), yet recently (as from Mon, 22 Mar 2004 17:23:01 +) I get the following: [snip] With CVS freshclam version devel-20040129

Re: [Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Jo Mills
On Tue, Mar 23, 2004 at 08:53:40PM +0700, Fajar A. Nugraha wrote: Jo Mills wrote: Hi, Is anybody else having problems getting database updates or is it just me? I haven't changed my clam setups for ages (it's on my todo list), yet recently (as from Mon, 22 Mar 2004 17:23:01 +) I get

RE: [Clamav-users] pthreads instability?

2004-03-23 Thread Trog
On Tue, 2004-03-23 at 13:37, Pubs wrote: It seems evident now that clamd crashes when it has to scan some viruses, any time I submit Bugbear, i have a segmentation fault ! fortunately, clamscan relays the jobs . Hope it could helps clamd snapshot-20040323 / amavisd-new / Freebsd5.0

[Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Jesse Guardiani
Nigel Horne wrote: I attempted to push a 59M email through clamd via clamdscan (all body, not attachment) and clamd has started chewing up RAM and CPU. Does the e-mail include encapsulated RFC822 messages? If so, there has been a fix to that recently. -Nigel No, it's strictly text

[Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Jesse Guardiani
Tomasz Kojm wrote: On Mon, 22 Mar 2004 15:54:18 -0500 Jesse Guardiani [EMAIL PROTECTED] wrote: Any ideas on how to avoid this in the future? I'm running with ScanArchive and ScanMail (because I want the binhex feature on). The problem may be connected with already discussed and fixed

[Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Jesse Guardiani
Adam Webb wrote: softlimit set to low? Well, how much RAM does clamdscan eat then? Is it a flat memory footprint, or does it climb based on message size? I assumed that it would be a flat memory footprint and that clamdscan would simply write a large file to disk and pass it off to clamd.

[Clamav-users] Clarification on header info from Clam

2004-03-23 Thread Dana Millaway
This is a newbie question, I'm sure. Please bear with me. I have searched the archives but either the answer is not in there or I haven't thought of the right search terms. When Clam AV notifies me that it detected (and deleted) a virus on my email server, it sends the message I have included

Re: [Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Nigel Horne
On Tuesday 23 Mar 2004 3:06 pm, Jesse Guardiani wrote: No, it's strictly text and just a LOT of characters. I can send it zipped or a small sample if anyone is interested. It has a lot of repeating characters, so it aught to compress rather well. Yes, please e-mail me a copy. -Nigel --

Re: [Clamav-users] Virus ID

2004-03-23 Thread Chris Meadors
On Tue, 2004-03-23 at 09:41 -0500, Bart Silverstrim wrote: Silly question time... While I suppose the questions about the standard naming sequences may help, I would propose one other idea (along with asking for help with my question :-) First: I see a hit in my logfiles for

[Clamav-users] Time of signature in Virus DB Search

2004-03-23 Thread Peter Bonivart
I just noticed the new Virus DB Search function on the web site. That's great, I will use that often but could you add the date and time (GMT) the signature was added. I often get asked by managers when Clam added a signature for comparison with other scanners and it would make it real easy to

Re: [Clamav-users] Clamav may crash when processing Certain RAR files.....

2004-03-23 Thread Lucas Albers
You won't detect some bagle rar virus unless you are using .68-1. .67 does not detect some virus's and core dumps. I filed this bug against the debian package last week and the maintainers (for debian) are releasing a .68-x package shortly. You need to upgrade to detect some bagle virus's. Jim

RE: [Clamav-users] memory leak?

2004-03-23 Thread Lucas Albers
I'm a bit hesitant of upgrading to .68 or .70-rc if it appears to have a memory leak. At what point can the developers say: this x release does not have a memory leak. Pubs said: On Sun, Mar 21, 2004 at 01:14:53PM -0600, John Jolet wrote: If anything, i'd say it leaked less...course, i jumped

[Clamav-users] Clamav 0.68-1 port for openbsd has been released

2004-03-23 Thread LOYET Jerome
Hello all, The port of clamav 0.68-1 has just been released and is available @ http://www.fatbsd.com/openbsd Enjoy, ++ Jerome PS: There are still bugs with clamav on openbsd. (Signals known problems on clamd and clamdscan (kill -HUP doesn't work fine))

[Clamav-users] RE: memory leak?

2004-03-23 Thread Jesse Guardiani
Lucas Albers wrote: I'm a bit hesitant of upgrading to .68 or .70-rc if it appears to have a memory leak. At what point can the developers say: this x release does not have a memory leak. :) Never, or about 2 years after the software is released and has run on virtually every machine known to

RE: [Clamav-users] Malformed CVD header detected {Scanned}

2004-03-23 Thread Ron Snyder
Jo Mills wrote: packets for DNS sometime on Monday afternoon. I'll sort out some DNS servers from our ISP and (yet again!) work around the IT guys. (Trog helped As an IT guy myself, I'd like to respectfully suggest that you let your IT team know that you've noticed a change in

Re: [Clamav-users] Clamav 0.68-1 port for openbsd has been released

2004-03-23 Thread Tomasz Kojm
On Tue, 23 Mar 2004 20:44:49 +0100 LOYET Jerome [EMAIL PROTECTED] wrote: Hello all, The port of clamav 0.68-1 has just been released and is available @ http://www.fatbsd.com/openbsd Are you the current maintainer of the openbsd port ? PS: There are still bugs with clamav on openbsd.

Re: [Clamav-users] Re: clamav 0.70-rc on FreeBSD 4.8-RELEASE

2004-03-23 Thread Fajar A. Nugraha
Jesse Guardiani wrote: Tomasz Kojm wrote: The problem may be connected with already discussed and fixed /dev/urandom issue. Please update to the latest CVS version. I'll consider it. This is a production server, so I'm not incredibly keen on running CVS code. Actually, with ClamAV CVS

RE: [Clamav-users] RFE: clamav-milter stuff

2004-03-23 Thread Damian Menscher
On Wed, 10 Mar 2004, Damian Menscher wrote: On Wed, 10 Mar 2004, Nigel Horne wrote: ClamAV version 0.67-1, clamav-milter version 0.67a Please be more specific by: (b) giving an example of a message that you think is missing some information, since all the messages I see already contain the

[Clamav-users] Clamav failes to update {Scanned}

2004-03-23 Thread SW
I have clamav antivirus installed but a few days ago, it stopped getting updated because I can't seem to resolve 'database.clamav.net' and I'm not sure what the problem is. It seems I can resolve other sites, including clamav.net but not the database.clamav.net. Can someone help? Here is what I

RE: [Clamav-users] Clamav failes to update {Scanned}

2004-03-23 Thread Ron Snyder
Dns answers have been too big for udp packets, so query gets redone as tcp. Some firewalls (or fw admins) block tcp dns requests. (Although I would have expected to see a server failed type of message rather than non-existent host.) Something to investigate, anyway. -Original Message-