Re: [clamav-users] reduce memory footprint by removing some virusdefinitions on a low memory server

2018-01-26 Thread Rajesh M
hi this is what i did on my mail server cd /var/lib/clamav mv daily.cld daily.cld.BAK mv main.cld main.cld.BAK mv bytecode.cld bytecode.cld.BAK mv mirrors.dat mirrors.dat.BAK kept foxhole_all and badmacro.ndb unoffical which handles all kinds of bad attachments / macros. also have

Re: [clamav-users] reduce memory footprint by removing some virus definitions on a low memory server

2018-01-26 Thread Reindl Harald
Am 26.01.2018 um 09:41 schrieb Sophie Loewenthal: Hi everybody, Would removing some of the virus definitions on a memory sparse server still leave a semi-usable clamav scanner? e.g if I just left main.cvd bytecode.cvd and dropped daily.cvd? Or some other config. e.g just kept the

[clamav-users] reduce memory footprint by removing some virus definitions on a low memory server

2018-01-26 Thread Sophie Loewenthal
Hi everybody, Would removing some of the virus definitions on a memory sparse server still leave a semi-usable clamav scanner? e.g if I just left main.cvd bytecode.cvd and dropped daily.cvd? Or some other config. e.g just kept the unoffical sigs and the bytecode. I realize this is

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Rajesh M
yes all our servers are stuck disabled official signatures we have sanesecurity foxhole foxhole_all.cdb -- customized for our use which blocks all bad attachments it seems to work now. rajesh - Original Message - From: Reindl Harald [mailto:h.rei...@thelounge.net] To:

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Reindl Harald
Am 26.01.2018 um 09:19 schrieb Marco: Il 26/01/2018 09:00, Reindl Harald ha scritto: freshclam and a custom script downloads anything to /var/lib/clamav-download and then for the two "/var/lib/clamav" and "/var/lib/clamav-sa" basend on file-lists hardlinks are set - from the official only

Re: [clamav-users] Anyone notice any issues with clamav 0.99.2 and recent patterns?

2018-01-26 Thread maxal
On Fri, 2018-01-26 at 08:11 +0100, lukn wrote: > Same on a machine with clamav-milter: > > clamav-milter[8241]: Failed to initiate streaming/fdpassing > clamav-milter[8241]: Unknown reply from clamd > clamd[11895]: instream(127.0.0.1@49958): Can't open file or directory > ERROR >

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Marco
Il 26/01/2018 09:00, Reindl Harald ha scritto: freshclam and a custom script downloads anything to /var/lib/clamav-download and then for the two "/var/lib/clamav" and "/var/lib/clamav-sa" basend on file-lists hardlinks are set - from the official only "safebrowsing" is active We have the

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Reindl Harald
Am 26.01.2018 um 08:32 schrieb Dianne Skoll: Something went badly wrong with clamd recently; it's stuck with hundreds/thousands of open files per process and interrupting mail flow. When a scanning thread finishes, I see this in the strace output. (I ran clamdscan /etc/hosts as a test): [pid

<    1   2