Re: [Clamav-users] clamav installed clamscan works clamdscan does not.

2004-05-10 Thread Josh
Harrell, Roger wrote: From /etc/clamav.conf # TCP port address. #TCPSocket 3310 clamd will only run as local socket or inet socket not both at the same time. You probably have clamd running as local so when clamdscan tries to connect to the port it gets a connection refused. You will need to

Re: [Clamav-users] Clamd logging to syslog. level ? Facility ?

2004-05-10 Thread Tomasz Kojm
On Sun, 9 May 2004 12:57:45 +0200 (CEST) Per-Olov Sjholm [EMAIL PROTECTED] wrote: It'd be nice if the local6.* could be user-defined at runtime. It was a bit of a hassle here since we were using local6 for something else already. I definetly agree on that. The facility is now fully

[Clamav-users] Clamd Leaking?

2004-05-10 Thread Rich
This might be slightly off-base here, but anyone know if clamd leaks and if there's any current patch? I'm running 0.70-rc. Below's the memory usage showing clamd eating up the mem resource. 2621 qscand15 0 815M 477M 352 S 0.5 47.4 462:01 1 clamd Tia, -Rich

Re: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Fajar A. Nugraha
Mitch (WebCob) wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Spicer Sent: Monday, May 10, 2004 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Re: Virus Alias Database Its running PHP MySQL on apache2, unfortunately this is my home

[Clamav-users] clamav-milter[xxx]: ClamAv: thread_create() failed: 11, try again

2004-05-10 Thread Samuel Benzaquen
Hello all, We've installed clamav / clamav-milter on a sendmail server with HIGH trafic. It worked well most of the time, but on peak hours (more than 400 concurrent connections per server and 150K mail per hour) the clamav-milter thorws these errors on the syslog and slows down the process: May

Re: [Clamav-users] clamav-milter[xxx]: ClamAv: thread_create() failed: 11, try again

2004-05-10 Thread Joe Maimon
Samuel Benzaquen wrote: Hello all, We've installed clamav / clamav-milter on a sendmail server with HIGH trafic. It worked well most of the time, but on peak hours (more than 400 concurrent connections per server and 150K mail per hour) the clamav-milter thorws these errors on the syslog and

Re: [Clamav-users] Virus Alias Database

2004-05-10 Thread jef moskot
On Sun, 9 May 2004, Kevin Spicer wrote: I've put a little more work into my virus alias database (at http://www.kevinspicer.co.uk) What's the suggested method for dealing with the ClamAV-calls-it- something-else problem? I know other AV authors have this same issue, but they tend to have

Re: [Clamav-users] Virus Alias Database

2004-05-10 Thread Kevin Spicer
On Mon, 2004-05-10 at 18:24, jef moskot wrote: So, if I type in Netsky, I don't see any ties to SomeFool. If I put in SomeFool, I don't see any immediate reference to Netsky, but if I poke around a little, it becomes apparent that we're talking about the same thing. But if you put in

[Clamav-users] clamav installed clamscan works clamdscan does not.

2004-05-10 Thread Harrell, Roger
I've installed clamav. clamscan works, but the daemonized version clamdscan does not. It appears to be a permissions issue: connect(): Connection refused ERROR: Can't connect to clamd. --- SCAN SUMMARY --- Infected files: 0 Time: 0.001 sec (0 m 0 s) What is is trying to connect

Re: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Kevin Spicer
On Mon, 2004-05-10 at 11:38, Russ Phillips wrote: I had a look, and I have a couple of thoughts/comments. 1. Will it handle heavy loads? It may start to get a lot of hits once people start to find out about it Its running PHP MySQL on apache2, unfortunately this is my home box (that said

Re: [Clamav-users] Unable to create temporary directory

2004-05-10 Thread Todd Lyons
[EMAIL PROTECTED] wanted us to know: # Enable debug messages in libclamav. Debug Turn that off. Wherever your temp directory is, it's full right now because debug mode doesn't delete the files after clamav is done scanning them. -- Regards... Todd They that can give up essential

[Clamav-users] can't stop clamav-milter

2004-05-10 Thread Matias Lopez Bergero
Hello again :) Please excuse me if this is a reviewed topic. I can't find similar posts on the lists. I am using ClamAV 0.70 with clamav-milter 0.70j. I can't stop clamav-milter with the term signal. (kill pid) I must use the kill switch to end the process and after that remove by hand the

RE: [Clamav-users] clamav installed clamscan works clamdscan does not.

2004-05-10 Thread Jim Maul
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Harrell, Roger Sent: Monday, May 10, 2004 1:45 PM To: '[EMAIL PROTECTED]' Subject: [Clamav-users] clamav installed clamscan works clamdscan does not. I've installed clamav. clamscan works, but the

Re: [Clamav-users] clamav installed clamscan works clamdscan does not.

2004-05-10 Thread Josh
Do you have clamd running? Harrell, Roger wrote: I've installed clamav. clamscan works, but the daemonized version clamdscan does not. It appears to be a permissions issue: connect(): Connection refused ERROR: Can't connect to clamd. ---

[Clamav-users] Re: clamav installed clamscan works clamdscan does not.

2004-05-10 Thread Matias Lopez Bergero
Harrell, Roger wrote: I've installed clamav. clamscan works, but the daemonized version clamdscan does not. It appears to be a permissions issue: clamd is running? Regards, Matías. --- This SF.Net email is sponsored by Sleepycat Software Learn

[Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Bora
Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. So the question is do you recommend moving to? SuSE, Mandrake? I want to use something similar so I don't have to learn

[Clamav-users] Results from virustest.org

2004-05-10 Thread Scott Harris
Below are some results from a recent run of all the tests on www.testvirus.org. Let me state for the record that I love ClamAV, I just like to be especially paranoid. The reason for this set of tests is that I just installed GFI MailSecurity on our internal exchange server. Our current

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread German Staltari
On Mon, 10 May 2004 11:57:37 -0700, Bora [EMAIL PROTECTED] wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. So the question is do you recommend moving to?

RE: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Michael St. Laurent
Bora mailto:[EMAIL PROTECTED] wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. So the question is do you recommend moving to? SuSE, Mandrake? I want to use

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Kevin Spicer
On Mon, 2004-05-10 at 19:57, Bora wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. When starting a new topic please would you create a fresh message rather

Re: [Clamav-users] Results from virustest.org

2004-05-10 Thread Antony Stone
On Monday 10 May 2004 8:14 pm, Scott Harris wrote: Below are some results from a recent run of all the tests on www.testvirus.org. #5 Got through Clam but BitDefender caught it. #8 MimeDefang removed eicar.com #12 Got through Clam but GFI quarantined #19 Got through Clam but Kaspersky

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Kelson Vibber
At 11:57 AM 5/10/2004, Bora wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. Actually, you *can* still download older versions of RH from their FTP site. Just

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Jon Roland
Most of us seem to be migrating to Fedora and Debian. I have chosen Fedora for the time being, but get my support from the independent repos led by Freshrpms.net rather than from the Fedora site itself. See http://www.constitution.org/comp/linux.htm Those repos are the main reason for going

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Steven Stern
On Mon, 10 May 2004 11:57:37 -0700, Bora [EMAIL PROTECTED] wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. So the question is do you recommend moving to? SuSE,

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Daniel J McDonald
On Mon, 2004-05-10 at 13:57, Bora wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9. So the question is do you recommend moving to? SuSE, Mandrake? I want to

Re: [Clamav-users] clamav installed clamscan works clamdscan does not.

2004-05-10 Thread Josh
From /etc/clamav.conf # TCP port address. #TCPSocket 3310 clamd will only run as local socket or inet socket not both at the same time. You probably have clamd running as local so when clamdscan tries to connect to the port it gets a connection refused. You will need to check your config and

Re: [Clamav-users] Recommendation RedHat replacement

2004-05-10 Thread Josh
For my desktop I now use fedora and for my server I just installed SuSe 9.0 and am quite happy with it. Bora wrote: Sorry, this may not be appropriate to post here, but I know many of you are using RH and are figuring new options as they are no longer offering free download for RH 7, 8 and 9.

RE: [Clamav-users] clamav installed clamscan works clamdscan does not.

2004-05-10 Thread Harrell, Roger
From /etc/clamav.conf # TCP port address. #TCPSocket 3310 clamd will only run as local socket or inet socket not both at the same time. You probably have clamd running as local so when clamdscan tries to connect to the port it gets a connection refused. You will need to check your config and

RE: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Mitch \(WebCob\)
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Spicer Sent: Monday, May 10, 2004 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Re: Virus Alias Database Its running PHP MySQL on apache2, unfortunately this is my home box (that

Re: [Clamav-users] Unable to create temporary directory

2004-05-10 Thread [EMAIL PROTECTED]
Do you have enough inodes ? (df -i) I think yes: Permission problems? I thought about the same, but the server is running half a year. And sometimes it is good, sometimes it cannot create temp...dir. I have about 500 vhosts on this server. May be I must setup something diffrent then

[Clamav-users] Flase positive

2004-05-10 Thread Kevin Spicer
I submitted a false positive of Joke.BinLaden last week (through the web interface), but I haven't heard anything of it, and its not shown up in the virusdb list. Should I resubmit? BMRB International http://www.bmrb.co.uk +44 (0)20 8566 5000

Re: [Clamav-users] SomeFool.Q passed the clamscan clamav-milter

2004-05-10 Thread Nigel Horne
Please forward the original e-mail to me, zipped with password 'virus'. -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.Net email is sponsored by

Re: [Clamav-users] Still problems after upgrading to 0.70-1 from 0.70-rc1

2004-05-10 Thread Kritof Petr
Mimmus wrote: Hi, after upgrading to 0.70-rc1 to 0.70-1, I still have problems (see older messages...). Only some viruses are catched but the great part gets through. Here is my conf: - Linux Red Hat 9 2.4.20-28.9smp - sendmail-8.12.8-9.90 - clamav-0.70-1 - clamav-milter-0.70-1 This is known

[Clamav-users] Re: Still problems after upgrading to 0.70-1 from 0.70-rc1

2004-05-10 Thread Mimmus
Sic! Tomasz, please help me! Mimmus Kristof Petr [EMAIL PROTECTED] ha scritto nel messaggio news:[EMAIL PROTECTED] Mimmus wrote: Hi, after upgrading to 0.70-rc1 to 0.70-1, I still have problems (see older messages...). Only some viruses are catched but the great part gets through.

[Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Russ Phillips
I've put a little more work into my virus alias database (at http://www.kevinspicer.co.uk) and it is now indexing virus definitions SNIP I hope people find this useful, any constructive comments or suggestions gratefully received. I had a look, and I have a couple of thoughts/comments. 1. Will

Re: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Fajar A. Nugraha
Russ Phillips wrote: 2. If it could handle heavy loads, it would be useful if the form used GET instead of POST, so that links to specific viruses could be posted. Apparently it can handle GET too. I'd post an update to clamd-stat in a few hours which includes link to Kevin's alias database for

[Clamav-users] OT: clamd-stat 0.2 released

2004-05-10 Thread Fajar A. Nugraha
A new version of clamd-stat is available on http://clamav.or.id/contrib/clamd-stat/ Demo is on http://clamd-stat.clamav.or.id/ Shows links to Kevin Spicer's virus alias db on virus names. Mrtg-like graphs can show custom start and end times. Packaging still needs to be fixed (no ChangeLog,