Re: [Clamav-users] Default clamscan tmp dir custom uid/gid set during configure

2007-09-22 Thread Dennis Peterson
Bill Landry wrote: Tomasz Kojm wrote the following on 9/22/2007 2:29 PM -0800: On Sat, 22 Sep 2007 13:31:20 -0700 Bill Landry [EMAIL PROTECTED] wrote: And yes, I did try: clamscan --debug --leave-temps -d /var/tmp/rsync/MSRBL-Images.hdb - /dev/null and still no temp file left.

Re: [Clamav-users] Default clamscan tmp dir custom uid/gid set during configure

2007-09-22 Thread Dennis Peterson
Bill Landry wrote: And this works even with the clamav and amavis users and groups removed. I'll be updating and testing my script and will release an updated version soon. Thanks everyone for the feedback, I think all of this shows that the issue appears to be with access to /dev/null,

Re: [Clamav-users] Default clamscan tmp dir custom uid/gid set during configure

2007-09-22 Thread Dennis Peterson
Bill Landry wrote: In a default configure (simply ./configure without any config options set) and build of clamav, what temporary directory does clamav use by default - that is, the temporary directory that can be overridden with the following clamscan flag?: Poking around in the code again

Re: [Clamav-users] Backup clamd server

2007-09-21 Thread Dennis Peterson
Maciej Kedzierski wrote: Hello, How can I set up a backup clamd server that my clamav-milter use this server when a primary clamd server is died? Is it possible? It is possible, but since you have an available machine it may be a better idea to simply run both at the same time. In my

Re: [Clamav-users] Reloading config files?

2007-09-20 Thread Dennis Peterson
micah wrote: You will note that i've tried -HUP, -USR1 and -USR2. I still do appreciate your replies, micah I got out the source code for a quick read and didn't see anywhere in there where signals would force reloading the config file. Given that it can result in inconsistent results I

Re: [Clamav-users] Reloading config files?

2007-09-20 Thread Dennis Peterson
micah wrote: On Thu, 20 Sep 2007 12:59:04 -0700, Dennis Peterson wrote: micah wrote: You will note that i've tried -HUP, -USR1 and -USR2. I still do appreciate your replies, micah I got out the source code for a quick read and didn't see anywhere in there where signals would force

Re: [Clamav-users] Unix job in Seattle

2007-09-20 Thread Dennis Peterson
Dennis Peterson wrote: http://tinyurl.com/23stze Email is not a requirement - it's being outsourced. There's probably going to be another opening posted within days. It's a great location to work in. http://tinyurl.com/29zu3w dp ___ Help us build

Re: [Clamav-users] performance on solaris

2007-09-19 Thread Dennis Peterson
rick pim wrote: Trog writes: You've taken note of the recent postings on trouble with the standard Solaris regex library? And how to switch to using PCRE, which solves the problem. i have. i got this box mostly finished back in early august and then took off on holidays before

Re: [Clamav-users] performance on solaris

2007-09-19 Thread Dennis Peterson
Andrew Watkins wrote: Rick, I guess your best bet is to switch off the PhishingScanURLs, if you don't like the idea of using new code at this stage. I am still testing the PCRE on a test server, and I still have my main server running a crontab script which kills clamscan every now and

Re: [Clamav-users] logrotation not working

2007-09-19 Thread Dennis Peterson
micah wrote: I have a logrotate.d/clamav-daemon setup to rotate my clamav logs as shown below: Whereas before the logrotation the log contained a lot more clamav information, including what viruses were caught. Is there a better way to rotate the log? Are you sending clamd a SIGHUP

Re: [Clamav-users] logrotation not working

2007-09-19 Thread Dennis Peterson
micah wrote: On Wed, 19 Sep 2007 18:37:13 +, micah wrote: The logrotate.d/clamav does this: 1. Moves clamav.log to clamav.log.1 2. runs: /etc/init.d/clamav-daemon reload-log, which is effectively a kill -1 (ie. HUP). I've got the following associated config lines in clamd.conf:

Re: [Clamav-users] clamscan does not terminate on specific HTML file.

2007-09-18 Thread Dennis Peterson
Andrew Watkins wrote: Thanks for the information, but is there a simple way to configure clamAV or do I have to edit all the files manually to replace regex.h and add the libraries as mentioned previously on the list, since I can find an option like --with-pcre. Andrew Build but don't

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-16 Thread Dennis Peterson
Graeme Nichols wrote: Hello Bill, On 17/09/2007, Bill Randle [EMAIL PROTECTED] wrote: I'm not sure why they did this, but I guess it helps reduce the number of programs required for a minimal install. Still, to update a server running clamd, you would need to update clamav, clamav-data

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-15 Thread Dennis Peterson
Graeme Nichols wrote: Hi Dennis, On 15/09/2007, Dennis Peterson [EMAIL PROTECTED] wrote: John Rudd wrote: Graeme Nichols wrote: Anyone any ideas please? Build and install from source? Works every time it's tried as the rpm creators have discovered. One option. But one

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-15 Thread Dennis Peterson
Pavel Urban wrote: Seems like Fedora team decided to remove clamav from public repositories. Dunno why. I'll try to report it as a bug. Freshclam used to be a part of clamav-update, though. Maybe they're not happy about the new ownership. dp

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-15 Thread Dennis Peterson
Graeme Nichols wrote: Hello Dennis, Thank you. On 16/09/2007, Dennis Peterson [EMAIL PROTECTED] wrote: Graeme Nichols wrote: Hi Dennis, On 15/09/2007, Dennis Peterson [EMAIL PROTECTED] wrote: John Rudd wrote: Graeme Nichols wrote: Anyone any ideas please? Build and install from

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-14 Thread Dennis Peterson
John Rudd wrote: Graeme Nichols wrote: Anyone any ideas please? Build and install from source? Works every time it's tried as the rpm creators have discovered. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-13 Thread Dennis Peterson
Graeme Nichols wrote: Hello, I upgraded to the above version of clamav (yum update clamav) which went well and without error and rpm -qi clamav report that it is indeed installed. Problem is that freshclam no longer exists, 'bash: freshclam: command not found'. A complete filesystem

Re: [Clamav-users] Handling mail surges

2007-09-12 Thread Dennis Peterson
Paul Griffith wrote: Greetings, Does any one have any suggestions for handling spam surges? We had a spam mail surge and exim was getting connection timeout errors from the clamd socket, for spamassassin we can increase the number of child processes to handle more connections. Any

Re: [Clamav-users] signature names

2007-09-12 Thread Dennis Peterson
Karsten Bräckelmann wrote: On Wed, 2007-09-12 at 07:28 -0700, John Rudd wrote: (to the developers, not in answer to Burnie) See, the current name scheme needs to be fixed. And no one responded at all to my proposed scheme from a month or two ago. Coincidentally, my very first question on

Re: [Clamav-users] signature names

2007-09-12 Thread Dennis Peterson
John Rudd wrote: Dennis Peterson wrote: Karsten Bräckelmann wrote: On Wed, 2007-09-12 at 07:28 -0700, John Rudd wrote: (to the developers, not in answer to Burnie) See, the current name scheme needs to be fixed. And no one responded at all to my proposed scheme from a month or two ago

[Clamav-users] Unix job in Seattle

2007-09-12 Thread Dennis Peterson
http://tinyurl.com/23stze Email is not a requirement - it's being outsourced. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] MBL?

2007-09-11 Thread Dennis Peterson
Noel Jones wrote: At 12:18 PM 9/11/2007, John Rudd wrote: Did something happen to the MBL signature source? yesterday my automated script got all errors for the download content, and today it's complaining about it not existing. Is it as simple as the URL changing? or did it go away

Re: [Clamav-users] speeding up clamav

2007-09-09 Thread Dennis Peterson
Rick Cooper wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Swiger Sent: Sunday, September 09, 2007 10:42 AM To: ClamAV users ML Subject: Re: [Clamav-users] speeding up clamav Mohsen Pahlevanzadeh wrote:

Re: [Clamav-users] speeding up clamav

2007-09-09 Thread Dennis Peterson
Res wrote: On Sun, 9 Sep 2007, Dennis Peterson wrote: F-PROT Antivirus for Solaris Mail Servers Number of Users Annual license fee 1-10US$ 130 11-24 US$ 250 25-49 US$ 399 50-99 US$ 499 100-199 US$ 799

Re: [Clamav-users] Automatic reloading of signature files

2007-08-31 Thread Dennis Peterson
Gerard wrote: On Friday August 31, 2007 at 09:24:03 (AM) Lyle Giese wrote: [snip] But I also see in /var/log/messages, clamd doing a selfcheck on the databases every 30 minutes. [snip] I have nothing in the message log; however, I don't have clamd configured to use that log either. I

Re: [Clamav-users] Automatic reloading of signature files

2007-08-31 Thread Dennis Peterson
Gerard wrote: On Friday August 31, 2007 at 09:24:03 (AM) Lyle Giese wrote: [snip] But I also see in /var/log/messages, clamd doing a selfcheck on the databases every 30 minutes. [snip] I have nothing in the message log; however, I don't have clamd configured to use that log either. I

Re: [Clamav-users] Automatic reloading of signature files

2007-08-31 Thread Dennis Peterson
Gerard wrote: On Friday August 31, 2007 at 12:05:58 (PM) Dennis Peterson wrote: [snip] A proper script will send clamd a reload command on completion of downloading, testing, and distributing third party files. This can be as simple as sending kill -USR2 to the clamd PID, or using

Re: [Clamav-users] As soon as Sourcefire starts charging for viru... STOP it already

2007-08-30 Thread Dennis Peterson
Tilman Schmidt wrote: Now that this dead horse has been beaten into pulp and is slowly seeping into the gravel, can we please, pretty please leave that fruitless discussion? Thank you very much for your understanding. Classic post, Herr Schmidt. Well done - you still have the fire.

Re: [Clamav-users] Sourcefire acquires ClamAV

2007-08-30 Thread Dennis Peterson
Paul Kosinski wrote: There is another aspect to the acquisition of ClamAV that seems not to have been discussed. What happens to the people who made monetary donations to the ClamAV project? (I am not in this group, as I never quite got around to it.) I'm one of those who donated cash and

Re: [Clamav-users] clamav 0.91.2 is out. Don't use it.

2007-08-21 Thread Dennis Peterson
John Rudd wrote: It has a dangerous (lack of) value for CL_SCAN_STDOPT. You're better off not upgrading until they fix it. Is this a pet peeve, ravings of crack addled pomeranian, or real problem most of us will experience? Under what conditions would we expect dangerous failures? How will

Re: [Clamav-users] clamd PDF Scanning Problem

2007-08-20 Thread Dennis Peterson
Roberto Ullfig wrote: I had to disable PDF scanning on our servers. We were receiving 9 MB PDF files and clamd started consuming 100% CPU and not completing the scan. Anyone else have issues with PDF scanning? One solution is to avoid scanning files that large. dp

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-18 Thread Dennis Peterson
Arnaud Jacques wrote: Hello Clamav users, With more than 14 official signatures, Clamav's detection rate is excellent. However, because of many viruses, trojans, spywares, and other badwares on the Wild, SecuriteInfo.com has created its own signatures. These signatures will be

Re: [Clamav-users] Sourcefire acquires ClamAV

2007-08-17 Thread Dennis Peterson
Tomasz Kojm wrote: Dear ClamAV users, On August 17, Sourcefire, the creators of Snort, acquired the ClamAV project. The full announcement is available here: http://www.sourcefire.com/products/clamav/ We'd like to thank everyone in the ClamAV community for their dedication to the

Re: [Clamav-users] Sourcefire acquires ClamAV

2007-08-17 Thread Dennis Peterson
David F. Skoll wrote: Mike Guiterman wrote: [some things] Mike, would you care to comment on these remarks from Wayne Jackson, CEO of Sourcefire? After a clean-up of the project's code base, Sourcefire will likely create a new license for third party providers of the technology

Re: [Clamav-users] latest worry-free version on solaris sparc?

2007-08-16 Thread Dennis Peterson
rick pim wrote: i have one gateway machine running clamav; it's a running solaris 5.9 on sparc hardware. every couple of years i upgrade it to a new box (well, since i use cast-off hardware for it, a new old box, but you know what i mean) with up to date OS, sendmail, etc. right now i'm

Re: [Clamav-users] Anything major going on with the

2007-08-13 Thread Dennis Peterson
list was too long, so I had to delete them a few at a time. On Fri, Aug 10, 2007 at 10:19:27PM -0700, Dennis Peterson said: Try: rm *[a-m];rm *[n-z];rm *[0-9] On Sat, Aug 11, 2007 at 11:09:20AM +0100, G.W. Haywood said: man xargs On Mon, Aug 13, 2007 at 08:10:08AM -0700, Ken Sandberg said

Re: [Clamav-users] clamscan crashes server

2007-08-10 Thread Dennis Peterson
Marshall Dudley wrote: I was running clamscan, and the var partition of the drive filled up. This partition had 300 Meg free on it, and clamscan created a huge number of files like mixedtextportion05GJ4k in the /tmp/clamav-ec6d3e4e4e253eaf directory and filled it up. To make matters

[Clamav-users] Oddness

2007-08-10 Thread Dennis Peterson
Several times yesterday clamd stopped. My daemon watching script restarted it immediately, but I could not find a reason for the failures. This was happening on multiple servers so was all the more puzzling. Add to that the fact that one other server never had the problem, but it is a fallback

Re: [Clamav-users] clamav cannot update daily.cvd

2007-08-08 Thread Dennis Peterson
David F. Skoll wrote: doughairfield wrote: I read the bug report. So what does disabling scripted updates actually change? It means freshclam only tries to download one file (daily.cvd) instead of lots of small .cdiff files. Because it only makes one download attempt, it's less likely

Re: [Clamav-users] clamav cannot update daily.cvd

2007-08-08 Thread Dennis Peterson
David F. Skoll wrote: Dennis Peterson wrote: Presumably the state of the mirrors is maintained between runs somewhere (mirrors.dat). Is it not possible to alter that table with a utility or null the table? Sure it is; just delete clamav_lib_dir/mirrors.dat. However, that does not fix

Re: [Clamav-users] Missed Virus

2007-08-08 Thread Dennis Peterson
Jason Bennett wrote: Hi everyone, We're using ClamAV on our mail gateway which is in front of our exchange server. It's been running great for a long time and stops thousands of virus per day for us. Lately however our McAfee which is installed on exchange itself is picking up this

Re: [Clamav-users] New user--can't get signatures

2007-08-06 Thread Dennis Peterson
Rob MacGregor wrote: On 8/6/07, Richard [EMAIL PROTECTED] wrote: Shouldn't that be sudo su -? ;) Hey, at least I typo'd with another vowel :-P Still too many letters. Try sudo -s. dp ___ Help us build a comprehensive ClamAV guide: visit

Re: [Clamav-users] need help

2007-07-09 Thread Dennis Peterson
Ralf Hildebrandt wrote: * Chuck Swiger [EMAIL PROTECTED]: On Jul 9, 2007, at 12:17 PM, Ralf Hildebrandt wrote: Amavisd-new supports clamdscan just fine. Actually, it uses it's own code, which resembles clamdscan. You're right-- perhaps I should have said, it supports accessing clamd using

Re: [Clamav-users] CPU clamscan

2007-07-05 Thread Dennis Peterson
Thomas Spuhler wrote: On Wednesday 04 July 2007 23:38, Alexandros G. Fragkiadakis wrote: use clamdscan instead Why continuing with this answer. Clamdscan takes 50% of the time of clamscan and that still much to slow. Here's five reasons - there's more: 1. If I could do something this

Re: [Clamav-users] CPU clamscan

2007-07-05 Thread Dennis Peterson
Dennis Peterson wrote: Thomas Spuhler wrote: On Wednesday 04 July 2007 23:38, Alexandros G. Fragkiadakis wrote: use clamdscan instead Why continuing with this answer. Clamdscan takes 50% of the time of clamscan and that still much to slow. Here's five reasons - there's more: 1. If I

Re: [Clamav-users] Everything gets marked as a virus

2007-07-04 Thread Dennis Peterson
David Boltz wrote: I'm using MailScanner / SpamAssassin / Sendmail /ClamAV .09.3 This weekend my MailScanner started acting up. I?ve gone through everything that I could think of and I ran into a lot of brick walls along the way. In the end I?ve got the problem narrowed down to clamav.

Re: [Clamav-users] [Fwd: [ClamAV] Clamd High Memory usage]

2007-06-30 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: Correction: Clamd is using about 85MB of RAM. One if my installations is using 71MB (Solaris 8, Sparc) and the other is using 48M (Solaris 10, Intel). Both have been running for months. These are pretty normal values. dp

Re: [Clamav-users] clamav needs 3 minutes to start

2007-06-27 Thread Dennis Peterson
Schramm e.K. [ Deutschland ] wrote: That means 3:13 for 256049 signatures. [...] log file That means 0:24 for 130435 signatues. ^^ This is with ClamAV 0.90.3/3541/Wed Jun 27 14:44:24 2007 Why do you have so much more signatures? I have no idea. i always only

Re: [Clamav-users] clamdscan extremely fast

2007-06-26 Thread Dennis Peterson
guenther wrote: On Sun, 2007-06-24 at 20:56 -0400, Paul Kosinski wrote: When I originally started using clamav, clamscan could handle my low (SOHO) volume of email quite well, but recently, it started taking over 20 secs to scan a short email, [...] So I decided to try clamdscan, again.

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Dennis Peterson
Peter Boosten wrote: Eric Rostetter wrote: 1) Yes, it is slow. 2) Yes, it wasn't always like this (and hence you could down-grade to an older version if you needed). 3) Newer versions are faster (see below). 4) Yes, it still can be used for a mail server (I know, as I'm still

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Dennis Peterson
jef moskot wrote: On Mon, 18 Jun 2007, Dennis Peterson wrote: Clamscan is a terrible tool to use in real time with email. I would recommend it for low volume servers with cycles to burn, given that the other option is a daemon that can potentially fail. Neither is entirely ideal, but we

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Dennis Peterson
Eric Rostetter wrote: Quoting Dennis Peterson [EMAIL PROTECTED]: Not exactly. But I did say that I am using it in production. Now, if it is a good way or not, that is a subjective matter. Not exactly - it is measurable. And it is really bad. No, it _IS_ subjective, and it depends

Re: [Clamav-users] clamscan extremly slow

2007-06-16 Thread Dennis Peterson
Thomas Spuhler wrote: I posted on another list as well, but thought this may gets more attention from the developers: Clamscan is extremely slow and CPU hungry. clamscan a pdf file of about 1.2 MB and it takes about 1 minute. Same file with a commercial scanner takes 2 sec. This wasn't

Re: [Clamav-users] Re(2): Temporary file name

2007-06-13 Thread Dennis Peterson
SYPECom-AV-Dev wrote: Not needed. It would be too easy for virus writers to just change the name and/or some property to trick defenses, so anti virus software doesn't care about that. Ok, from what you are saying, ClamAV should therefore be as effective to scan a file named 1.temp

Re: [Clamav-users] Duplicate signatures?

2007-06-05 Thread Dennis Peterson
Török Edvin wrote: On 6/4/07, Fajar A. Nugraha [EMAIL PROTECTED] wrote: # ls -sR1 /var/clamav.bad 9145 main.cvd 0 main.inc You have both a main.inc, and a main.cvd. Thus those signatures are loaded twice. This problem has been discussed on this list a while ago, look in the archives.

Re: [Clamav-users] Duplicate signatures?

2007-06-05 Thread Dennis Peterson
Fajar A. Nugraha wrote: Dennis Peterson wrote: How does one get a main.inc directory? I thought it was having ScriptedUpdates yes in the conf file and experimental code enabled at build time but that doesn't do it. I believe ScriptedUpdates is enabled by default on non-experimental

Re: [Clamav-users] Freeze after reading db ?

2007-06-05 Thread Dennis Peterson
Marco Simioni wrote: Hi, i'm using Clamav inside the Zimbra Collaboration Suite on ubuntu 6. Clamav version 0.90.2, on ubuntu 6.06.1 server. This behaviour happened with 0.90.3 too. I see that amavisd cannot connect to Clamav Any idea? Run clamconf and put the results here. dp

Re: [Clamav-users] Freeze after reading db ?

2007-06-05 Thread Dennis Peterson
Marco Simioni wrote: Run clamconf and put the results here. The clamd is started with the option --config-file /opt/zimbra/conf/clamd.conf so i started the clamconf with the option --config-dir /opt/zimbra/conf/. Here is the output: TCPAddr not set TCPSocket = 3310 I think I'd

Re: [Clamav-users] Freeze after reading db ?

2007-06-05 Thread Dennis Peterson
Marco Simioni wrote: TCPAddr not set TCPSocket = 3310 I think I'd start here. It appears you have not updated your config file correctly. Very strange, because it is a fresh zimbra install into a fresh ubuntu, i usually don't have to modify ANY config file. Also, the comment in the

Re: [Clamav-users] Stream connection timeouts while reading database

2007-06-04 Thread Dennis Peterson
Robert Blayzor wrote: René Berber wrote: The timeout is caused by clamd taking 100% of the CPU for those 30 seconds, if you cannot increase the value then perhaps using 0.91rc1 is a better option (reloading databases is 10x faster, yep back to the 3 sec mark). That's fine. All I really

Re: [Clamav-users] daily.wmd trouble with 0.91rc1

2007-06-02 Thread Dennis Peterson
Noel Jones wrote: At 11:39 PM 6/1/2007, Dennis Peterson wrote: Noel Jones wrote: I'm running Solaris 10 x86 here and cannot duplicate your error. I moved the daily.wdb file to /tmp and clamd died. I restarted it with svcadm and it started and ran file. I then rsync'd daily.wdb from /tmp back

Re: [Clamav-users] daily.wmd trouble with 0.91rc1

2007-06-01 Thread Dennis Peterson
Noel Jones wrote: At 09:56 PM 6/1/2007, Christopher X. Candreva wrote: On Fri, 1 Jun 2007, Noel Jones wrote: I seem to be having trouble with clamscan 0.91rc1 choking with the current daily.wmd file. It was working fine until the most recent db update. I don't have this problem, but I don't

Re: [Clamav-users] ClamAV 0.91rc1 config. change

2007-05-30 Thread Dennis Peterson
Luca Gibelli wrote: Dear ClamAV users, Starting from 0.91rc1, the default value for LocalSocket in clamd.conf has been changed from /tmp/clamd to /tmp/clamd.socket to avoid confusion. You must update the configuration of all programs that connect to clamd through unix socket to point to

Re: [Clamav-users] MSRBL-Images.hdb same size since 25 May

2007-05-28 Thread Dennis Peterson
Chris wrote: I tried leaving a message on the MSRBL web site, however, in order to send my message I'm asked: Captcha: Enter the text from the image on the left except there isn't any and therefore the message can't be sent. What I'm trying to ask is that on the 25th there was a

Re: [Clamav-users] Clamd use up 99.9 % cpu

2007-05-20 Thread Dennis Peterson
Thomas Spuhler wrote: Hello: I just joined the list and found this thread in the archive. It seems, I have a very similar problem. Clamscan is using up to 100% cpu and memory lately and sometimes cannot even keep up with the e-mail flood. It happened twice in about a month. I deleted all

Re: [Clamav-users] unreponsive under solaris - 0.90.2

2007-05-17 Thread Dennis Peterson
G.W. Haywood wrote: Hello again, On Wed, 17 May 2007 Dennis Peterson wrote: ... I also don't scan (or accept) most file formats declared unsafe by Microsoft. How do you determine this? From Microsoft's web page: http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631 Um

Re: [Clamav-users] problem installing .90 on UltraSparc

2007-05-17 Thread Dennis Peterson
.rp wrote: trying to install clamav on mail servers and running into the following error: make all-recursive make[1]: Entering directory `/usr/src/clamav-0.90.1' Making all in libclamav make[2]: Entering directory `/usr/src/clamav-0.90.1/libclamav' source='matcher-ac.c'

Re: [Clamav-users] Upgrade to 0.90.2

2007-05-17 Thread Dennis Peterson
Aaron Schubert wrote: Thanks I'll give it a try. You should also be aware the configuration files have changed significantly since 0.88 was released. And don't forget to stop the old version before starting the new version. dp ___ Help us build a

Re: [Clamav-users] unreponsive under solaris - 0.90.2

2007-05-16 Thread Dennis Peterson
Tom Bombadil wrote: I see old posts describing similar problem, but since I see no workaround, here it goes: Clamav seems to work alright when load is low, but when the load increases, it becomes unresponsive, and I get tons of these errors: Tue May 15 04:35:40 2007 - ERROR: ScanStream

Re: [Clamav-users] unreponsive under solaris - 0.90.2

2007-05-16 Thread Dennis Peterson
G.W. Haywood wrote: Hi there, On Wed, 16 May 2007 Dennis Peterson wrote: ... I also don't scan (or accept) most file formats declared unsafe by Microsoft. How do you determine this? From Microsoft's web page: http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631 dp

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Dennis Peterson
Noel Jones wrote: At 03:17 AM 5/8/2007, Alexander Grüner wrote: Ralf, I wrote a small script by myself - very simpel. It seems to work now for months. #!/bin/sh cd /tmp # Unofficial Phising rules for ClamAV wget -nd -m http://ftp.tiscali.nl/sanesecurity/phish.ndb.gz wget -nd -m

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-08 Thread Dennis Peterson
Dennis Peterson wrote: A kinder, gentler usage of wget would include -N to prevent getting the same file over and over thereby burning off Steve's bandwidth. Just be sure to preserve the name and time stamp of the gz files when you ungzip them. Use: gunzip -c phish.ndb phish.ndb.gz

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Dennis Peterson
Steve Basford wrote: Christopher X. Candreva wrote: If the script could be on the file name instead of the directory name it would be better. Hmm... would this work for you script? http://www.sanesecurity.com/clamav/phishsigs/index.php

Re: [Clamav-users] OT: Sanesecurity Sigs: Important News

2007-05-05 Thread Dennis Peterson
Steve Basford wrote: Due to me nearly running out of bandwidth last month (17gb out of a 20gb host package), some urgent changes were needed to the signature hosting, otherwise I'd start getting charged for the extra bandwidth :( So, to keep this short, here's a to-do list ;) *** One:

Re: [Clamav-users] Install clamav on CentOS 4.4

2007-04-20 Thread Dennis Peterson
Ralph Angenendt wrote: [EMAIL PROTECTED] wrote: I have installed it just fine using the source from the ClamAV site. It works quite well. I use the OpenSSL version that comes default in ClamAV. My only ./configure switches that are used are: --disable-zlib-check and --enable-experimental.

Re: [Clamav-users] clamav-0.90.2 on Solaris10 box.

2007-04-20 Thread Dennis Peterson
Dj Helmes wrote: I just upgraded Clamav from clamav-0.88.7 to clamav-0.90.2. on my Solaris10 box. I received no issues during the build / make or the install. When I started my mailRelay I started receiving the following. Has anyone else experienced this? Apr 20 07:27:11 smtp1

Re: [Clamav-users] RPM 0.90.2 FC4

2007-04-19 Thread Dennis Peterson
Steven Stern wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis Peterson wrote: Steven Stern wrote: Robert Niepel wrote: Hello, an anyone tell me where i can get RPM?s for Fedora Core 4? Or has anyone have an hotwo to build those rpm from tar.gz? download the unpack

Re: [Clamav-users] RPM 0.90.2 FC4

2007-04-18 Thread Dennis Peterson
Steven Stern wrote: Robert Niepel wrote: Hello, an anyone tell me where i can get RPM?s for Fedora Core 4? Or has anyone have an hotwo to build those rpm from tar.gz? download the unpack the tar.gz file In the directory, ./configure make make install Here's how I

Re: [Clamav-users] clamav-0.90.2 crashes - solved

2007-04-17 Thread Dennis Peterson
Bill Maidment wrote: Guys A couple of days ago I reported clamav crashing on my 64 bit machine. It turns out that the fc5/fc6 rpms for xen kernels 2.6.20 are *all* broken. Backtracking to the 2.6.19-1.2911 kernel solved it. Sorry for the noise. So it sounds like a problem with the rpm, not

Re: [Clamav-users] how to set cron to run freshclam

2007-04-15 Thread Dennis Peterson
Pascal Duchatelle wrote: Le Fri, 13 Apr 2007 08:26:42 -0700, Dennis Peterson [EMAIL PROTECTED] a écrit : Roger M wrote: On Fri, 2007-04-13 at 13:26 +0200, Pascal Duchatelle wrote: Hello, I am not that much experienced with linux. I would like to have freshclam doing updates by itself

Re: [Clamav-users] how to set cron to run freshclam

2007-04-13 Thread Dennis Peterson
Roger M wrote: On Fri, 2007-04-13 at 13:26 +0200, Pascal Duchatelle wrote: Hello, I am not that much experienced with linux. I would like to have freshclam doing updates by itself. Until now I did the update manually. The clamav-update file in my /etc/cron.d directory is as follow: ##

Re: [Clamav-users] how to set cron to run freshclam

2007-04-13 Thread Dennis Peterson
Dennis Peterson wrote: if [ -z $1 ]; then /usr/bin/bash -c 'sleep $[ RANDOM % 1800 ]' fi This creates a random number between 1 and 900 that becomes the number of seconds the code sleeps before jumping into the fray. Damn - that should have been '1 and 1800'. First coffee

Re: [Clamav-users] *.cvd again!

2007-04-13 Thread Dennis Peterson
Freddie Cash wrote: On Thursday 12 April 2007 06:53 pm, Dennis Peterson wrote: And just an fyi, be cautious of the MSRBL-Images file. Rechecking it while I was typing this shows that with it in place it will cause the clamd cpu to rise to 90% and stay there. At 11M it may be too big

Re: [Clamav-users] *.cvd again!

2007-04-13 Thread Dennis Peterson
On Friday 13 April 2007 09:25 am, Dennis Peterson wrote: Freddie Cash wrote: Heh, lucky you. =A0:) Out of the 4199 messages blocked as infected so far this month, 289 of = them were marked as MSRBL-Images/* by amavisd-new and clamav. =A0 $ tail -5000 /var/j*/*virus |grep -c MSRBL 106

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Dennis Peterson
Tomasz Kojm wrote: for 3rd party databases this can be managed with a simple script, no need for adding a keyring manager to ClamAV I swear it was just 8 weeks ago or so when we last had this discussion and all manner of fine ideas and scripts came out of it. Me thinks some folks need to

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Dennis Peterson
Chuck Swiger wrote: On Apr 12, 2007, at 5:02 PM, Dennis Peterson wrote: Tomasz Kojm [EMAIL PROTECTED] wrote: for 3rd party databases this can be managed with a simple script, no need for adding a keyring manager to ClamAV I swear it was just 8 weeks ago or so when we last had

Re: [Clamav-users] Solaris 9 and clamd

2007-04-11 Thread Dennis Peterson
[EMAIL PROTECTED] wrote: Hi Has anybody else noticed this. When running clamd with the ScanArchive config option set to yes, after a couple of minutes of running cpu usage will look like this: last pid: 2470; load averages: 6.43, 4.06, 2.71

Re: [Clamav-users] error stops clamd

2007-04-11 Thread Dennis Peterson
John Rudd wrote: Dennis Peterson wrote: You need to have better monitoring and notification, and a mail system that delivers mail even if there is a fatal error in the AV tool. This is hardly a ClamAV problem. Depends on what your goals are. For me, a reliable email system does

Re: [Clamav-users] error stops clamd

2007-04-11 Thread Dennis Peterson
Luigi Iotti wrote: Notification is a part of the solution IMHO. If clamd recognizes that it's not able to load the new ones because the update process is still occurring, then it should continue running *AND* notify the sysadmin that it's running in what should be considered a degraded

[Clamav-users] What's broken?

2007-04-10 Thread Dennis Peterson
Has the ClamAV backbone died? Trying host db.us.clamav.net (129.64.99.170)... nonblock_connect: connect timing out (30 secs) Can't connect to port 80 of host db.us.clamav.net (IP: 129.64.99.170) Trying host db.us.clamav.net (199.239.233.95)... nonblock_connect: connect timing out (30 secs) Can't

Re: [Clamav-users] What's broken?

2007-04-10 Thread Dennis Peterson
Fajar A. Nugraha wrote: Don Drake wrote: I'm seeing the same thing. Even my ClamWin puked. -Don On 4/10/07, Dennis Peterson [EMAIL PROTECTED] wrote: Has the ClamAV backbone died? It might be related with main.cvd update today. My apache says 205 requests currently being

Re: [Clamav-users] What's broken?

2007-04-10 Thread Dennis Peterson
Fajar A. Nugraha wrote: Dennis Peterson wrote: Fajar A. Nugraha wrote: On 4/10/07, Dennis Peterson [EMAIL PROTECTED] wrote: Has the ClamAV backbone died? It might be related with main.cvd update today. Are you running a ClamAV mirror, Fajar? Yes

Re: [Clamav-users] Re: freshclam problem

2007-04-06 Thread Dennis Peterson
Gerard Seibert wrote: Did you bother to read this? If so, does it pertain to you? It seems quite probably that English is not the OP's first language and that the message, via translation, is not accurately understood. That is my impression. That message is capable of creating more

Re: [Clamav-users] 0.90.1 issues on solaris 5.9

2007-04-03 Thread Dennis Peterson
Gary Casterline wrote: On Tue, Apr 03, 2007 at 07:36:11PM +0300, Henrik Krohns wrote: On Tue, Apr 03, 2007 at 12:29:07PM -0400, Gerard Seibert wrote: On Tue, 3 Apr 2007 11:29:06 -0400 Rick Pim [EMAIL PROTECTED] wrote: system: 4 CPU Sun E450, solaris 5.9, gcc 3.4.3 before i start: i don't

Re: [Clamav-users] Does clamav have any certificate?

2007-03-28 Thread Dennis Peterson
Hacı DAYI wrote: Fajar A. Nugraha wrote On 03/28/2007 03:57 AM: Gregory Carter wrote: I would ban this user from this list as it is a Ad in disguise. He just cross posted this same question to the iptables list. Why would that be an Ad? Are you 100% sure (or at least sure enough to

[Clamav-users] Clamd reload cpu loading

2007-03-18 Thread Dennis Peterson
I wrote a short perl script to send a command to clamd's Unix socket to force 0.90.1 clamd to reload: #!/usr/local/bin/perl use IO::Socket::UNIX; $clamSocket = /var/spool/clamav/clamd.socket; $timeout = 60; $mysock = new IO::Socket::UNIX(Type = SOCK_STREAM, Timeout = $timeout,

Re: [Clamav-users] System Requirements?

2007-03-16 Thread Dennis Peterson
Dana Kashubeck wrote: Are the System Requirements for Clam AntiVirus listed anywhere? It seems to me that this would have helped several people who have had issues with 0.90. I couldn't find anything, but maybe I missed it. There's a start here:

Re: [Clamav-users] reload db failed

2007-03-16 Thread Dennis Peterson
Zbigniew Szalbot wrote: Hello, Any thoughts would be greatly appreciated as it was several hours before I spotted this and manually restarted clamd. Oddly, mail was still being delivered, but without any virus checks ?? Ok, this is what I meant - clamd was not working. I had to manually

Re: ClamAV not LOGGING viruses was [Clamav-users] 0.90.1 not findingviruses

2007-03-16 Thread Dennis Peterson
Tomasz Kojm wrote: On Fri, 16 Mar 2007 19:45:10 -0400 John Fleming [EMAIL PROTECTED] wrote: X-Virus-Status: Yes X-Virus-Report: Eicar-Test-Signature FOUND X-Virus-Checker-Version: clamassassin 1.2.4 with clamscan / ClamAV That

<    5   6   7   8   9   10   11   12   13   14   >