On Monday 02 May 2005 18:30, jef moskot wrote:
If I do the #24 testvirus test ( http://www.webmail.us/testvirus ), the
mail is delivered properly (which is fine, because there's no virus in
there), but I also get a little file in /var/tmp/clamav-partial named
something like partialmsg###
On Monday 02 May 2005 23:08, Pete 'Wolfy' Hanson wrote:
Upgrading didn't seem to help me, though maybe it slowed down the
crash rate - I just had another crash about an hour ago. I'm getting
slammed at postmaster each time it crashes. This was in the logs from
the latest crash:
May 2
On Mon, 2005-05-02 at 16:19 -0500, Jeremy Kitchen wrote:
I'm having lots of customers call up saying their clamd is segfaulting..
installations that have been around for many months (0.80) and all of a
sudden, later in the week last week.. everyone's been having problems with
clamd
On Fri, 2005-04-29 at 23:55 -0700, Joanna Roman wrote:
How are virues like IRC.LXD.A, IRC.Gadez.A encountered
? When a user submit a virus, how do clamav team know
that they are of IRC types ??? Just curious .
Generally because they are in the form of IRC client software macro
files (mIRC INI
Hi,
Is there any way of stopping freshclam from trying to notify clamd?
I use clamscan occasionally and I don't want to have the clamd daemon
running. When I run freshclam I always get the error:
ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310
I would like to tell
Andy Schofield wrote:
Hi,
Is there any way of stopping freshclam from trying to notify clamd?
I use clamscan occasionally and I don't want to have the clamd daemon
running. When I run freshclam I always get the error:
ERROR: Clamd was NOT notified: Can't connect to clamd on
On Tuesday 03 May 2005 13:13, Andy Schofield wrote:
Is there any way of stopping freshclam from trying to notify clamd?
man freshclam.conf
Andy
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk
Trog wrote:
Several. We don't release software updates for our own amusement. A
responsible system admin should always look to upgrade to the current
stable version as soon as possible after it is released.
The responsible admin will evaluate the pros and cons of _any_ software
release and choose
On Tue, 2005-05-03 at 08:23 -0400, Mike Lambert wrote:
The responsible admin will evaluate the pros and cons of _any_ software
release and choose what is best for his/her environment. The difficultly
with any project in development, including ClamAV, is that current and
stable do not
On Tuesday 03 May 2005 13:23, Mike Lambert wrote:
Now that we have reports of spam crashing v0.80, it is time for me to
test v0.84.
Your use the the word now makes it sound like this is something new only
recently
discovered. You seem to be ignoring the fact that this was known about, and
On Tue, 03 May 2005 08:23:38 -0400
Mike Lambert [EMAIL PROTECTED] wrote:
Now that we have reports of spam crashing v0.80, it is time for me to
test v0.84.
If I was your boss, I'd fire you. Admins who wait with an update until
a software (especially a mission critical one responsible for
Nigel Horne wrote:
On Tuesday 03 May 2005 13:23, Mike Lambert wrote:
Now that we have reports of spam crashing v0.80, it is time for me to
test v0.84.
Your use the the word now makes it sound like this is something new only recently
discovered.
Nope, just new to me. I read today's posts as
Trog wrote:
On Tue, 2005-05-03 at 08:23 -0400, Mike Lambert wrote:
The responsible admin will evaluate the pros and cons of _any_ software
release and choose what is best for his/her environment. The difficultly
with any project in development, including ClamAV, is that current and
stable do
On Tue, 3 May 2005, Mike Lambert wrote:
I meant the most stable before 0.84. Sorry for the confusion.
If you had stability problem on 0.81, 0.82, and 0.83 -- did you post them ?
Sorry if I missed it, but I don't recall seeing anything posted about
stability problems on those version.
Our
Tomasz Kojm wrote:
On Tue, 03 May 2005 08:23:38 -0400
Mike Lambert [EMAIL PROTECTED] wrote:
Now that we have reports of spam crashing v0.80, it is time for me to
test v0.84.
If I was your boss, I'd fire you. Admins who wait with an update until
a software (especially a mission critical one
ankush grover wrote at Montag, 2. Mai 2005 11:06:
a) ... in Postfix to make it run with Postfix.
b) ...
Check the Third-party software section on the clamav web site:
http://www.clamav.net/3rdparty.html#mta
c)I ran the clamscan on the FC3 and clamav says there are 8 infected
files.I
hi clamav-users;
i've been using clamav for a long time now, and love it
dearly. however, once in a great while i get burned by
outdated definitions. at one point it was just me not
paying attention to the freshclam logfiles (i needed to
upgrade) but
On Tuesday 03 May 2005 08:23 am, Christopher X. Candreva wrote:
On Tue, 3 May 2005, Mike Lambert wrote:
I meant the most stable before 0.84. Sorry for the confusion.
If you had stability problem on 0.81, 0.82, and 0.83 -- did you post them ?
Sorry if I missed it, but I don't recall seeing
On Tue, 03 May 2005 11:05:28 -0400
henry j. mason [EMAIL PROTECTED] wrote:
hi clamav-users;
i've been using clamav for a long time now, and love it
dearly. however, once in a great while i get burned by
outdated definitions. at one point it was just me not
From: henry j. mason [mailto:[EMAIL PROTECTED]
i need to know when freshclam fails silently.
i know freshclam includes options to alert on errors,
but i'd rather have some other process looking at it
and making sure it's doing the right thing. has anyone
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Tomasz Kojm
Sent: dinsdag 3 mei 2005 14:51
To: ClamAV users ML
Subject: Re: [Clamav-users] clamd segfaulting as of about thursday
On Tue, 03 May 2005 08:23:38 -0400
Mike Lambert [EMAIL PROTECTED]
* Bowie Bailey [EMAIL PROTECTED] [20050503 18:38]: wrote:
From: henry j. mason [mailto:[EMAIL PROTECTED]
i need to know when freshclam fails silently.
i know freshclam includes options to alert on errors,
but i'd rather have some other process looking at it
and making
Bowie Bailey schrieb:
From: Odhiambo Washington [mailto:[EMAIL PROTECTED]
* Bowie Bailey [EMAIL PROTECTED] [20050503 18:38]: wrote:
From: henry j. mason [mailto:[EMAIL PROTECTED]
i need to know when freshclam fails silently.
i know freshclam includes options to alert on errors
Odhiambo Washington wrote:
Why don't people think about the KISS principle?
freshclam can run in foreground, just like clamd and daemontools were
written by DJB, no?
I run clamd via daemontools, and I believe freshclam can also be run
same way, so no re-invention of wheels.
uh, because
On Tue, 3 May 2005 18:58:48 +0200 in
[EMAIL PROTECTED] David [EMAIL PROTECTED]
wrote:
I have a problem with .RAR files version 3.
RAR module failure ERROR.
This error is for the version of .RAR file. Clamd does not support V3.
How I solve the problem of scan v3 Rar archives?
With
On Tue, May 03, 2005 at 06:18:13PM +0100, Brian Morrison wrote:
On Tue, 3 May 2005 18:58:48 +0200 in
[EMAIL PROTECTED] David [EMAIL PROTECTED]
wrote:
I have a problem with .RAR files version 3.
RAR module failure ERROR.
This error is for the version of .RAR file. Clamd does not
I am currently running ClamAV 0.83 with clamav-milter
and just recently received an infected email with a
zip attachment. Strange thing is that clamdscan does
not detect the virus while clamscan does.
# clamdscan error-mail_info.zip
/tmp/error-mail_info.zip: OK
--- SCAN SUMMARY
On Tue, 3 May 2005, Pete D wrote:
False alarm. I ended up restarting things and now both
clamdscan and clamscan detect the virus properly.
Weird.
You will still want to upgrade to 0.84
==
Chris Candreva -- [EMAIL PROTECTED] -- (914)
From: Odhiambo Washington [EMAIL PROTECTED]
Subject: Re: [Clamav-users] freshclam watchdog?
To: clamav-users@lists.clamav.net
Message-ID: [EMAIL PROTECTED]
Content-Type: text/plain; charset=us-ascii
* Bowie Bailey [EMAIL PROTECTED] [20050503 18:38]: wrote:
From: henry j. mason [mailto:[EMAIL
On Tue, 03 May 2005 18:55:15 +0100 in
[EMAIL PROTECTED] Trog [EMAIL PROTECTED]
wrote:
On Tue, 2005-05-03 at 18:18 +0100, Brian Morrison wrote:
Pretty sure that clamd from 0.84 supports RAR v3 archive scanning.
Only CVS currently supports RAR3 scanning.
Oh OK, I thought the new RAR code
Brian Morrison wrote:
On Tue, 03 May 2005 18:55:15 +0100 in
[EMAIL PROTECTED] Trog [EMAIL PROTECTED]
wrote:
On Tue, 2005-05-03 at 18:18 +0100, Brian Morrison wrote:
Pretty sure that clamd from 0.84 supports RAR v3 archive scanning.
Only CVS currently supports RAR3 scanning.
Oh OK, I thought the
On 5/2/05, Nigel Horne [EMAIL PROTECTED] wrote:
On Monday 02 May 2005 23:08, Pete 'Wolfy' Hanson wrote:
slammed at postmaster each time it crashes. This was in the logs from
the latest crash:
May 2 14:22:24 smtp clamav-milter[153]: ClamAv: setsockopt() failed
(Invalid argument)
If
Somehow or other, that -B flag is being set when clamav-milter
restarts following the reload.
FWIW, the problem is happening on both Solaris 2.8 and 2.6 systems (on
the 2.8 system, there are no logged error messages - the milter simply
stops responding, and everything needs to be restarted).
environment: solaris 5.9, sendmail 8.13.2, clamav .84 (w/clamav-milter).
i upgraded to .84 yesterday with (as far as i could tell) no
problems. things started afterwards and ran as expected.
there were problems yesterday afternoon but i restarted things and
everything looked fine. this
On Tue, 3 May 2005, rick pim wrote:
May 3 15:47:21 sennit sendmail[14381]: [ID 801593 mail.error]
j43JlKch014381: Milter (clamav): error connecting to filter: Connection
refused by /var/clamav/clmilter.sock
May 3 15:47:21 sennit sendmail[14381]: [ID 801593 mail.info] j43JlKch014381:
Not to be obvious, but was clamav-milter running ? (And clamd, if you run
with --external ).
meant to include that. yesterday clamav-milter had died. today
it hadn't:
# ps -ef | grep clam
root 19241 21218 0 16:37:14 pts/30:00 grep clam
clamav 13432 1 0 20:20:17 ?
A. On Tue, 2005-05-03 at 21:41, rick pim wrote:
environment: solaris 5.9, sendmail 8.13.2, clamav .84 (w/clamav-milter).
i upgraded to .84 yesterday with (as far as i could tell) no
problems. things started afterwards and ran as expected.
there were problems yesterday afternoon but i
On Tue, 3 May 2005, Nigel Horne wrote:
clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc. Mind you I am
worried about the mode 777 for clamd.sock, if nothing else that seems
like a security breach to me.
I don't recall the particulars, but I ran into the same problem where
clamd.sock
None without some information such as options used to start
clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc.
clamav-milter is started with:
clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
here's an extract from clamd.conf:
# grep -v ^# clamd.conf | grep -v
henry j. mason said:
hi clamav-users;
any ideas? i'm thinking about cobbling together something
in perl to run from a cron job.
tia
henry
Screw the daemon - run it out of cron.
Script: freshclam.sh
#!/bin/bash
# run freshclam at random intervals 3 times/hour
On Tue, 3 May 2005, rick pim wrote:
clamav-milter is started with:
clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
OK, without --external, clamav-milter isn't useing clamd, it's useing it's
calling libclamav directly.
You might try adding --external. It looks like the
You might try adding --external. It looks like the people posting about
clamav-milter problems are all not useing --external.
That´s true. It is not clear in the docs that --external is faster or more
reliable. I will change my configuration and test it. Thanks for the tip!
Jose Hime
On Tuesday 03 May 2005 22:07, rick pim wrote:
None without some information such as options used to start
clamav-milter, clamd.conf, /etc/mail/sendmail.mc etc etc.
clamav-milter is started with:
clamav-milter -PHl --postmaster=root -m 64 /var/clamav/clmilter.sock
here's an
On Tuesday 03 May 2005 22:23, Jose Luis Hime wrote:
You might try adding --external. It looks like the people posting about
clamav-milter problems are all not useing --external.
That´s true. It is not clear in the docs that --external is faster or more
reliable.
It's more secure, uses
On Tue, 3 May 2005, Nigel Horne wrote:
That´s true. It is not clear in the docs that --external is faster or more
reliable.
It's more secure, uses less memory and doesn't use IPC so it's faster.
I'm not saying it's more or less anything. However, since I'm using
--external and not
Excuse me for my misunderstanding, but is there any special configuration I
should do to use --external ?
I read the man page for clamav-milter and I have one doubt:
-e, --external
Usually clamav-milter scans the
Mind you I am
worried about the mode 777 for clamd.sock, if nothing else that seems
like a security breach to me.
true. but it seems to do that itself:
# ls -al /var/clamav/
total 4
drwxr-x--- 2 clamav clamav 512 May 3 17:02 ./
drwxr-xr-x 32 root sys 512 Feb 11 13:21
rick pim wrote:
Mind you I am
worried about the mode 777 for clamd.sock, if nothing else that
seems like a security breach to me.
true. but it seems to do that itself:
srwxrwxrwx 1 clamav clamav 0 May 3 17:06 clamd.sock=
Stop me if I'm wrong but I think that's just the
On Tue, 3 May 2005 [EMAIL PROTECTED] wrote:
Mind you I am
worried about the mode 777 for clamd.sock, if nothing else that
seems like a security breach to me.
true. but it seems to do that itself:
srwxrwxrwx 1 clamav clamav 0 May 3 17:06 clamd.sock=
Stop me if
On Tue, 3 May 2005 16:24:04 -0700
[EMAIL PROTECTED] wrote:
rick pim wrote:
Mind you I am
worried about the mode 777 for clamd.sock, if nothing else that
seems like a security breach to me.
true. but it seems to do that itself:
srwxrwxrwx 1 clamav clamav 0 May 3
Dennis Peterson wrote:
any ideas? i'm thinking about cobbling together something
in perl to run from a cron job.
Screw the daemon - run it out of cron.
At last, a sensible suggestion :) Cronning it does make the daemon
hanging pretty much a moot point :)
Matt
51 matches
Mail list logo
