RE: [Clamav-users] Re: Clamav upgrade

2005-05-26 Thread Souza Simbota
checking for mi_stop in -lmilter... no checking for library containing strlcpy... no checking for mi_stop in -lmilter... no configure: error: Cannot find libmilter Install sendmail-devel Am running postfix as a mail server. So should I still install sendmail-devel? Souza Simbota Computer Land

Re: [Clamav-users] Re: Clamav upgrade

2005-05-26 Thread Matt Fretwell
Souza Simbota wrote: checking for mi_stop in -lmilter... no checking for library containing strlcpy... no checking for mi_stop in -lmilter... no configure: error: Cannot find libmilter Install sendmail-devel Am running postfix as a mail server. So should I still install sendmail-devel?

Re[2]: [Clamav-users] don't del clmilter.sock

2005-05-26 Thread haplopelma lividum
my system is rh7.3 clamd + clamav-milter v.0.85.1 and i have a little problem. when i execute service clamav-milter stop system is answering ok, but don't delete clmilter.sock. so when i execute service clamav-milter start system get error. what i am doing wrong? TL man clamd.conf

Re: [Clamav-users] Re: Clamav upgrade

2005-05-26 Thread Brian Morrison
On Thu, 26 May 2005 07:25:22 +0100 in [EMAIL PROTECTED] Matt Fretwell [EMAIL PROTECTED] wrote: From memory, (so may be wrong), supply the following option to configure: --without-milter --without milter is the correct syntax. -- Brian Morrison bdm at fenrir dot org dot uk GnuPG

Re: [Clamav-users] update failure

2005-05-26 Thread david thompson
Sorry, I did not know about freshclam -v. Anyway here is some of the output. freshclam -v Current working direstory is /usr/local/share/clamav max retries ===3 ClamAv update process started at thu May 26 10:10:37 2005 Querying current.cvd.clamav.net TTL:900 software version from DNS: 0.85.1

RE: [Clamav-users] Re: Clamav upgrade

2005-05-26 Thread Erik Slooff
Thank you, it worked and am now running the new clamav. However I got these messages: checking for curl = 7.10.0... FAILED configure: WARNING: curl-config was not found checking for mi_stop in -lmilter... no checking for library containing strlcpy... no checking for mi_stop in

[Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread guenther
Hey folks, About a week ago I installed ClamAV on my local machine and it is doing a great job so far, catching Virii and even Phishing Mails. Database updated: ClamAV 0.85.1/894/Wed May 25 14:53:16 2005 signatures 31.894 However, within the last 12 hours I got 9 Phishing Mails (obviously

Re: [Clamav-users] Virus naming conventions?

2005-05-26 Thread guenther
I just started using ClamAV and it is performing great so far. :) As I prefer to call ClamAV from procmail (actually, I used YAVR before, a procmail only based virus signature scanner) my current setup is procmail / clamassassin / clamdscan. Rather than dumping all Virii to a single

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-26 Thread Joe Maimon
Damian Menscher wrote: On Tue, 24 May 2005, Doug Hardie wrote: On May 24, 2005, at 13:21, Stephen Gran wrote: snip Just to bring you (and anyone else joining us) up to speed, here's a description of how it's supposed to work: When there's a database update, the milter wants everything

Re: [Clamav-users] don't del clmilter.sock

2005-05-26 Thread Todd Lyons
haplopelma lividum wanted us to know: my system is rh7.3 clamd + clamav-milter v.0.85.1 and i have a little problem. when i execute service clamav-milter stop system is answering ok, but don't delete clmilter.sock. so when i execute service clamav-milter start system get error. what

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-26 Thread Nigel Horne
Would it be possible to have existing threads use the old loaded database and to have the new threads use a new loaded database? Destroy the old database when its ref_count hits 0. Of all the noise that's been put around on this issue recently, that's the first good suggestion. I like the

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread Damian Menscher
On Thu, 26 May 2005, guenther wrote: However, within the last 12 hours I got 9 Phishing Mails (obviously basically the same one) slipping through. So, should I go on and report one or two samples? Yes, to the SpamAssassin team. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U

[Clamav-users] LibClamAV Error

2005-05-26 Thread Vasiliy Boulytchev
Tomasz Kojm wrote: On Wed, 25 May 2005 14:12:14 -0600 Vasiliy Boulytchev [EMAIL PROTECTED] wrote: Gents, I am getting this error from MailScanner: LibClamAV Error: cl_free: root == NULL LibClamAV Error: cl_free: root == NULL However, I can clamscan any dire/file. Please

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread guenther
On Thu, 2005-05-26 at 10:42 -0500, Damian Menscher wrote: On Thu, 26 May 2005, guenther wrote: However, within the last 12 hours I got 9 Phishing Mails (obviously basically the same one) slipping through. So, should I go on and report one or two samples? Yes, to the SpamAssassin

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread aCaB
On 05/26/05 18:26, guenther wrote: So ClamAV obviously is meant to trigger on phishing mails, but you don't want new ones to be reported? ..guenther Don't mind him, some people never learn. Yes, please submit your phishing samples using the link on clamav homepage. Cheers, acab

Re: [Clamav-users] ACME Labs mail filtering tutorial

2005-05-26 Thread clamav
On Wed, 25 May 2005, Dennis Peterson wrote: Jef Poskanzer said: I've been working on this for a few months, and just published it today: http://www.acme.com/mail_filtering/ ClamAV gets a prominent mention. --- Jef Nice work, Jef - where does one contribute to the defense

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread guenther
On Thu, 2005-05-26 at 18:43 +0200, aCaB wrote: Yes, please submit your phishing samples using the link on clamav homepage. Done, with the Received: and To: headers removed. Hope that's ok. Thanks aCaB for your response. As I mentioned, I'm fairly new to ClamAV, and I think I should ask if in

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread Daniel J McDonald
On Thu, 2005-05-26 at 18:26 +0200, guenther wrote: On Thu, 2005-05-26 at 10:42 -0500, Damian Menscher wrote: On Thu, 26 May 2005, guenther wrote: However, within the last 12 hours I got 9 Phishing Mails (obviously basically the same one) slipping through. So, should I go on and

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread guenther
On Thu, 2005-05-26 at 12:08 -0500, Daniel J McDonald wrote: Damian - give it up. The clamav team has already agreed to filter those out for you in version 0.90. A good portion of the rest of us do want clamav to catch these. Thanks for the details Daniel, now I see. Bad me asked about the

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-26 Thread Damian Menscher
On Thu, 26 May 2005, aCaB wrote: some people never learn. Agreed ;) Looking forward to 0.90, when these debates can finally end. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-

[Clamav-users] Re: Virus naming conventions?

2005-05-26 Thread René Berber
guenther wrote: Anyone? Does the absence of any replies mean, there is no real naming convention and it is kind of random? ;-) Have you seen? http://clamav.net/cvdinfo.html#pagestart -- René Berber ___

Re: [Clamav-users] update failure

2005-05-26 Thread Luca Gibelli
Hello david thompson, Sorry, I did not know about freshclam -v. Anyway here is some of the output. freshclam -v main.cvd is up to date (version: 31, sigs:33079, f-level: 4, builder:tkojm) daily.cvd version from DNS:894 Retrieving http://db.uk.clamav.net/daily.cvd Downloading daily.cvd

Re: [Clamav-users] Re: Virus naming conventions?

2005-05-26 Thread guenther
On Thu, 2005-05-26 at 13:59 -0500, Ren Berber wrote: Does the absence of any replies mean, there is no real naming convention and it is kind of random? ;-) Have you seen? http://clamav.net/cvdinfo.html#pagestart Yes, I read that page before posting to the list. Unfortunately it doesn't

[Clamav-users] clamd dies on reload with devel-20050524

2005-05-26 Thread Christopher X. Candreva
I've been trying out the 20050524 devel snapshot on one of my servers since the post regarding the buffer overrun problem. System is Solaris 8 on UltraSparc, gcc 3.4.0 The 20050524 clamd is now dieing on database reloads. (I just upgraded to the 20050526 snap, same behavior) Enableing debug

[Clamav-users] Re: Virus naming conventions?

2005-05-26 Thread René Berber
guenther wrote: So, in conclusion: Are my assumptions correct, that this partially is due to old names? Is there at least a consensus on the classified naming amongst AV vendors (as mentioned above)? And are dots and dashes treated equally these days? I'm not an expert, but it seems to me

RE: [Clamav-users] Re: Virus naming conventions?

2005-05-26 Thread Matthew.van.Eerde
Ren Berber wrote: Perhaps your question is more general, not only the clamav database, but about a taxonomy for viruses. The way I see it, when a new virus is found, the developers or database maintainers try to get the detection strings ASAP and would not like to loose time looking up rules

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-26 Thread lattera
Well, clamscan still hangs. I'm using version 0.85.1. I cannot gdb attach to tell you guys why/where it's hanging, I'm sorry. -- lattera http://lattera.antitech.org/ http://lattera.retoros.org/ http://retoros.org/ ___

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-26 Thread Damian Menscher
On Fri, 27 May 2005, lattera wrote: Well, clamscan still hangs. I'm using version 0.85.1. I cannot gdb attach to tell you guys why/where it's hanging, I'm sorry. What about an strace (or whatever your OS equivalent is)? Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois

Re: [Clamav-users] Re: Virus naming conventions?

2005-05-26 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: Ren Berber wrote: Perhaps your question is more general, not only the clamav database, but about a taxonomy for viruses. The way I see it, when a new virus is found, the developers or database maintainers try to get the detection strings ASAP and would not like to

Re: [Clamav-users] Re: Virus naming conventions?

2005-05-26 Thread clamav
On Thu, 26 May 2005, Dennis Peterson wrote: [EMAIL PROTECTED] wrote: with friendly-names being attached to the virus, AFTER the developer has submitted into the database? After the dust has settled, there should be plenty of time to agree on what to call each virus. Seriously, if

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-26 Thread lattera
can't use strace, because I don't know the email that is making it hang. that is why I need to use gdb, so I can look through the stack/heap for the email... On 5/27/05, Damian Menscher [EMAIL PROTECTED] wrote: On Fri, 27 May 2005, lattera wrote: Well, clamscan still hangs. I'm using version

Re: [Clamav-users] clamav hung taking up 100% of CPU

2005-05-26 Thread Damian Menscher
On Fri, 27 May 2005, lattera wrote: can't use strace, because I don't know the email that is making it hang. that is why I need to use gdb, so I can look through the stack/heap for the email... You're saying it's hung, taking 100% of CPU. So just use top to find the PID of the hung process,