[Clamav-users] Re: Recent CVS - broken logging to /dev/stderr ?

2005-06-10 Thread Steve Brown
I said: with perms = rw--- root.root. It was fine (and still is) on cvs from Stephen Gran wrote: Yes, that is the problem. This does however fix the problem of clamav opening all it's descriptors (including the logfile) as root, breaking permissions for anything else that needs to write

[Clamav-users] Clamav does not scan foreign languages attachments

2005-06-10 Thread José Miguel López-Coronado
Hello everybody. I have just detected something I think can be a bug in clamav during the scanning of the attached files. I'm using RedHat 9 and sendmail in a Pentium IV machine as a mail server. For such a long time (I think it has been from version 0.73 but I'm not sure) I have seen these

Re: [Clamav-users] How does ClamAV classify Worm and Trojan ?

2005-06-10 Thread Diego d'Ambra
Joanna Roman wrote: When someone submit a virus sample (in the format of email, exe file, *.hml file), what criteria does ClamAV team use to classify the virus sample as Worm or Trojan ? The format of a submission isn't a criteria, but how the possible malware behave is. Best regards,

Re: [Clamav-users] Clamav does not scan foreign languages attachments

2005-06-10 Thread Nigel Horne
Hello everybody. I have just detected something I think can be a bug in clamav during the scanning of the attached files. This is a known problem which is already under investigation. The work-around is to clear the LANG variable when starting clamd. It is not yet known if the problem lies

[Clamav-users] Question about sendmail.mc settings.

2005-06-10 Thread Thomas Cameron
Hi all - I am using clamav-milter, spamass-milter, and milter-greylist 1.6. I am not an m4 expert by any stretch of the imagination. My sendmail.mc file looks like this: dnl INPUT_MAIL_FILTER(`greylist',`S=local:/var/milter-greylist/milter- greylist.sock')dnl define(`confMILTER_MACROS_HELO',

[Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
clamd 0.85.1 has been running pretty smoothly for a while, ever since install the day after it was released. the last few days though, i've been running into an odd problem - first off, this is freebsd 5.2.1 release. dual PIII 1GHZ server, 895MB ram. the server does *only* spam and virus

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread N Fung
--- [EMAIL PROTECTED] wrote: clamd 0.85.1 has been running pretty smoothly for a while, ever since install the day after it was released. the last few days though, i've been running into an odd problem - first off, this is freebsd 5.2.1 release. dual PIII 1GHZ server, 895MB ram.

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Odhiambo Washington
* N Fung [EMAIL PROTECTED] [20050610 20:45]: wrote: --- [EMAIL PROTECTED] wrote: clamd 0.85.1 has been running pretty smoothly for a while, ever since install the day after it was released. the last few days though, i've been running into an odd problem - first off

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
At 10:44 AM 6/10/2005, you wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log? nothing interesting. records of viruses found, and the startup logging. that's it. i've adjusted the number of concurrent connections inbound to the AS/AV

RE: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matthew.van.Eerde
Odhiambo Washington [EMAIL PROTECTED] wrote: * N Fung [EMAIL PROTECTED] [20050610 20:45]: wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log? Liar!! Liar!! I run 0.85.1 on FreeBSD 4.11, 5.2.1, 5.3 and 5.4 and in all cases I don't have

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Odhiambo Washington
* [EMAIL PROTECTED] [EMAIL PROTECTED] [20050610 22:49]: wrote: At 10:44 AM 6/10/2005, you wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log? nothing interesting. records of viruses found, and the startup logging. that's it. i've

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Odhiambo Washington
* [EMAIL PROTECTED] [EMAIL PROTECTED] [20050610 22:52]: wrote: Odhiambo Washington [EMAIL PROTECTED] wrote: * N Fung [EMAIL PROTECTED] [20050610 20:45]: wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log? Liar!! Liar!! I run

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matt Fretwell
[EMAIL PROTECTED] wrote: usually a restart of clamd does the trick, although yesterday even that didn't seem to do the trick - after restart of clamd the message woudl still trickle, so i rebooted the server, and everything returned to normal... By the sounds of the above, I personally

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matt Fretwell
Odhiambo Washington wrote: I run 0.85.1 on FreeBSD 4.11, 5.2.1, 5.3 and 5.4 and in all cases I don't have a problem at all. None of my machines is as high specs as his. Easy, cowboy. When he says that problems are confined to FreeBSD, that does not imply that all FreeBSD

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
At 12:54 PM 6/10/2005, you wrote: * [EMAIL PROTECTED] [EMAIL PROTECTED] [20050610 22:49]: wrote: At 10:44 AM 6/10/2005, you wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log? nothing interesting. records of viruses found

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread clamav
At 12:57 PM 6/10/2005, you wrote: By the sounds of the above, I personally would say that wouldn't appear to be a problem with Clam, rather some other part of your setup or system, possibly even hardware related. i have a vague recollection that there may be various memory leaks in 5.2.1,

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Doug Hardie
On Jun 10, 2005, at 13:21, [EMAIL PROTECTED] wrote: At 12:54 PM 6/10/2005, you wrote: * [EMAIL PROTECTED] [EMAIL PROTECTED] [20050610 22:49]: wrote: At 10:44 AM 6/10/2005, you wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log

RE: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Matthew.van.Eerde
Samuel wrote: From: [EMAIL PROTECTED] and what of a virus zipped into a larger zip file? Since the largest message we'll accept is 100M, then that's what my StreamMaxLength is set at, per the comments in clamd.conf. on the other hand, it would take an awfully determined virus distributed to

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread N Fung
--- Odhiambo Washington [EMAIL PROTECTED] wrote: * [EMAIL PROTECTED] [EMAIL PROTECTED] [20050610 22:52]: wrote: Odhiambo Washington [EMAIL PROTECTED] wrote: * N Fung [EMAIL PROTECTED] [20050610 20:45]: wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting