[Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Greg McCarthy
I found a problem on one of our clamav servers - freshclam kept timing out when updating (My fault - a firewall rule problem) For some reason this caused the clamav milter to die which is not a huge problem as sendmail continues to deliver mail. The error I got was: Mar 28 15:15:45 pdcsmtp01

[Clamav-users] Re: Does clamav have any certificate?

2007-03-29 Thread Ian Abbott
On 28/03/2007 06:59, Hacı DAYI wrote: You seem to have changed your name since your previous post? Fajar A. Nugraha wrote On 03/28/2007 03:57 AM: Gregory Carter wrote: I would ban this user from this list as it is a Ad in disguise. He just cross posted this same question to the iptables

[Clamav-users] problem with clamav and cpu

2007-03-29 Thread master
Hi, usually clamav use 100% of my cpu making the load average very hight, latelay i have had even a big error in the log : clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms problem - exit status 40 i use qmail with qmail-scanner, is there a way to make clamav use less cpu

Re: [Clamav-users] problem with clamav and cpu

2007-03-29 Thread Tomasz Kojm
On Thu, 29 Mar 2007 11:54:18 +0200 (CEST) [EMAIL PROTECTED] wrote: Hi, usually clamav use 100% of my cpu making the load average very hight, latelay i have had even a big error in the log : clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms problem - exit status 40

Re: [Clamav-users] problem with clamav and cpu

2007-03-29 Thread master
On Thu, 29 Mar 2007 11:54:18 +0200 (CEST) [EMAIL PROTECTED] wrote: Hi, usually clamav use 100% of my cpu making the load average very hight, latelay i have had even a big error in the log : clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms problem - exit status 40

Re: [Clamav-users] problem with clamav and cpu

2007-03-29 Thread Jim Maul
[EMAIL PROTECTED] wrote: On Thu, 29 Mar 2007 11:54:18 +0200 (CEST) [EMAIL PROTECTED] wrote: Hi, usually clamav use 100% of my cpu making the load average very hight, latelay i have had even a big error in the log : clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms

[Clamav-users] Problem with big mails

2007-03-29 Thread samir
Hey all; I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on one of the servers that vary in size from 20MB to 60

Re: [Clamav-users] Notification when clamav milter dies?

2007-03-29 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Mar 29, 2007 at 11:13:11AM +0200, Greg McCarthy wrote: Now to my question :) Does anyone have a script or know how I can monitor the clamav milter so if it ever dies again I get an email alert, or the script can even restart the milter.

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 7:03 AM, [EMAIL PROTECTED] wrote: I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Per Jessen
[EMAIL PROTECTED] wrote: Hey all; I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on one of the servers

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Julio Canto
Per Jessen wrote: Virus-scanning anything bigger than 1-2Mb makes little sense. ANything as big as 20Mb, I would just skip without further consideration. Nowadays it is not unusual to find malware samples exceeding that 2MB size limit. -- Regards, Julio Canto | VirusTotal.com | Hispasec

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 12:03 PM, Julio Canto wrote: Per Jessen wrote: Virus-scanning anything bigger than 1-2Mb makes little sense. ANything as big as 20Mb, I would just skip without further consideration. Nowadays it is not unusual to find malware samples exceeding that 2MB size limit.

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Julio Canto
Chuck Swiger wrote: It's certainly possible for a large Word/Excel/whatever file to be infected, but they aren't very common. Out of the 400+ viruses quarantined over the past week or so on one of my mail servers, the average size was 11KB, and the largest malicious email was 116KB (it

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Michael Brown
I have to agree, in the technical sense that if you allow larger attachments it really starts to sap the resources. I originally allowed 400MB attachment scanning and it would really load down the server at times. I set it back to default setting of 10MB and resource usage was much better. I

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Maurice Lucas
Chuck Swiger wrote: It's certainly possible for a large Word/Excel/whatever file to be infected, but they aren't very common. Out of the 400+ viruses quarantined over the past week or so on one of my mail servers, the average size was 11KB, and the largest malicious email was 116KB

RE: [Clamav-users] Problem with big mails

2007-03-29 Thread CPTeam Hostmaster
Virus-scanning anything bigger than 1-2Mb makes little sense. ANything as big as 20Mb, I would just skip without further consideration. Nowadays it is not unusual to find malware samples exceeding that 2MB size limit. It's certainly possible for a large Word/Excel/whatever file