Re: [Clamav-users] new Wiki site

2004-11-06 Thread Luca Gibelli
Hello Graham Toal, What's needed is an installation script which installs a completely independent copy in one of two locations, so you can double-buffer the installs. ./configure --prefix=path can already do that. Best regards -- Luca Gibelli ([EMAIL PROTECTED]) - http://www.ClamAV.net

Re: [Clamav-users] new Wiki site

2004-11-06 Thread Thomas Lamy
Luca Gibelli wrote: Hello Graham Toal, What's needed is an installation script which installs a completely independent copy in one of two locations, so you can double-buffer the installs. ./configure --prefix=path can already do that. along with --program-prefix=test_ so clamd becomes

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

2004-11-06 Thread Tomasz Kojm
On Sat, 6 Nov 2004 19:13:25 +0530 Rishi [EMAIL PROTECTED] wrote: Hi I've been receiving a new virus which f-prot reports as W32/Kriz.4029.kernel http://www.clamav.net/sendvirus.html -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\.

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

2004-11-06 Thread Thomas Lamy
Rishi schrieb: Hi I've been receiving a new virus which f-prot reports as W32/Kriz.4029.kernel Can anyone tell me how to use sigtool program to get clamav to use f-prot to figure out how to detect this virus and update the clamav database too? Regards Rishi If you don't know how to use sigtool

Re: [Clamav-users] Logging Scanning Activity

2004-11-06 Thread Stephen Gran
On Fri, Nov 05, 2004 at 11:33:25PM -0500, Rick Sutphin said: I have ClamAV 0.80 install on Debian 3.0 using the backports.org package. My MTA is Exim. ClamAV is being called from procmail using clamscan-procfilter. I would like to have ClamAV log its' activity; i.e. what mail it scanned

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

2004-11-06 Thread Rishi
Better submit it through http://www.clamav.net/sendvirus.html. it's vital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for it to get done? I'd like to help the clam community by using sigtool to get this done. Can you

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

2004-11-06 Thread Thomas Lamy
Rishi schrieb: Better submit it through http://www.clamav.net/sendvirus.html. it's vital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for it to get done? I'm not a sigmaker, but just in case it's some polymorphic one it may

Re: [Clamav-users] Problem With Freshclam

2004-11-06 Thread Steven Stern
On Fri, 5 Nov 2004 20:12:01 -0400, Listas [EMAIL PROTECTED] wrote: Apologies for the snarky reply. My freshclam.conf is: DatabaseDirectory /var/lib/clamav UpdateLogFile /var/log/clamav/freshclam.log LogSyslog PidFile /var/run/clamav/freshclam.pid DatabaseOwner clamav DNSDatabaseInfo

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

2004-11-06 Thread Tomasz Kojm
On Sat, 06 Nov 2004 16:01:40 +0100 Thomas Lamy [EMAIL PROTECTED] wrote: Rishi schrieb: Better submit it through http://www.clamav.net/sendvirus.html. it'svital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

2004-11-06 Thread Damian Menscher
On Sat, 6 Nov 2004, Rishi wrote: If you don't know how to use sigtool to make yourself a new signature, then I guess it's better you don't do it. Creating signatures with sigtool may also violate your virus scanner's license, and is discouraged. I have a Debian machine with clamav and f-prot

[Clamav-users] Solaris 9 64-bit packages

2004-11-06 Thread Andy Fiddaman
I've set up a web page containing binary packages of ClamAV for 64-bit Solaris 9 on SPARC at http://clamav.citrus-it.net/ for anyone who wants an easy way of getting it up and running on this platform. The only package there at present is of 0.80 with the readdir_r patch backported from the

[Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Cory Megitt [ClamAV]
Hi All; The following command gets run at 2am each night. /usr/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I always find an email stating the following: ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310 connect(): Connection refused How can I fix this?

Re: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Niek
On 11/6/2004 9:57 PM +0200, Cory Megitt [ClamAV] wrote: Hi All; The following command gets run at 2am each night. /usr/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I always find an email stating the following: ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310

Re: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Steven Stern
On Sat, 6 Nov 2004 15:57:13 -0500, Cory Megitt [ClamAV] [EMAIL PROTECTED] wrote: Hi All; The following command gets run at 2am each night. /usr/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I always find an email stating the following: ERROR: Clamd was NOT notified: Can't connect

RE: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Cory Megitt [ClamAV]
In your clamd.conf file, are you set to use a TCP socket or a UNIX socket? Check for these lines in clamd.conf # TCP port address. #TCPSocket 3310 # Path to the local socket. The daemon doesn't change the mode of the # created file (portability reasons). You may want to create it in a directory

Re: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Steven Stern
On Sat, 6 Nov 2004 17:42:28 -0500, Cory Megitt [ClamAV] [EMAIL PROTECTED] wrote: The firewall is setup to allow incoming and outgoing on 127.0.0.1 on source and destination ports 3310. What do you recommend I change here? It appears I have a mixture of different settings. I suggest you use the

Re: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Christopher X. Candreva
On Sat, 6 Nov 2004, Niek wrote: Don't hijack threads, i.e.: do not start a new topic by replying to an old mail. You know what ? the people constantly saying Don't hijack threads is far more anoying then the hijacked threads. Some people have been replying to a message to pick up the To:

[Clamav-users] chroot random can't load library

2004-11-06 Thread Mailing_List
I am trying to install clamav 0.80 on OpenBSD 3.6 I used the code from www.fatbsd.com/openbsd/ When I try to run clamd in chroot (or freshclam -d or clamd -h) I get: # chroot -u _amavisd /var/amavisd /usr/local/bin/freshclam /usr/local/bin/freshclam: can't load library 'libgmp.so.6.3' # chroot -u

Re: [Clamav-users] chroot random can't load library - RESOLVED

2004-11-06 Thread Mailing_List
Thanks to [EMAIL PROTECTED]: cp /var/run/ld.so.hints /var/amavisd/var/run/ - Original Message - From: Mailing_List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, November 06, 2004 7:24 PM Subject: [Clamav-users] chroot random can't load library I am trying to install clamav

RE: [Clamav-users] Cron Job for CLAMD

2004-11-06 Thread Cory Megitt [ClamAV]
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Stern Sent: Saturday, November 06, 2004 7:02 PM To: ClamAV users ML Subject: Re: [Clamav-users] Cron Job for CLAMD On Sat, 6 Nov 2004 17:42:28 -0500, Cory Megitt [ClamAV] [EMAIL PROTECTED] wrote: The