Re: [Clamav-users] Suggestion - make the source package available without the main.cvd database

2009-06-18 Thread James Kosin
you want. James Kosin signature.asc Description: OpenPGP digital signature ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Question of clamav/clamav-milter

2009-06-04 Thread James Kosin
Giorgio Bellussi wrote: Javier Lopez wrote: Hi community, man clamav-milter: ... -Q, --quarantine=EMAILADDRESS If this e-mail address is given, messages containing a virus or worm are redirected to it. ... WBR G ___

Re: [Clamav-users] Virus Infected Message for recipient

2009-04-30 Thread James Kosin
I Reject the messages, but for my own personal domain I like to have the notices of infected email go through to the intended local recipient just to keep track of things. James Kosin mentioned the backscatter with faked sender addresses, but we aren't looking to return the email notice

Re: [Clamav-users] Virus Infected Message for recipient

2009-04-29 Thread James Kosin
martinnitram wrote: At clamav 0.94, it can config clamav-milter that send a Virus Infected notify email to recipient when a virus scanned. But from 0.95.1, the milter only had 'Blackhole' option that direct drop the virus email without any user notification like 0.94. Is that had any option

Re: [Clamav-users] [ClamAV-users] HELP! unrecognized option `--pidfile=/var/run/clamav-milter/clamav-milter.pid'

2009-04-28 Thread James Kosin
Noel Jones wrote: Gomes, Rich wrote: Line referring to the pid has been removed from the conf file but it still throws the same error Root owns the files, (same as the old mail server) Do NOT use the --pidfile *command line* option when starting clamav-milter! Please read the

Re: [Clamav-users] clamav-0.95.1/clamav-milter does not insert headers in messages

2009-04-22 Thread James Kosin
Robert S wrote: You are probably looking for the AddHeader option. Thanks. That's fixed it. Just a minor point: Version 0.94 gave detailed headers: X-Virus-Scanned: ClamAV 0.94.2/9256/Sun Apr 19 09:13:04 2009 on myserver.mydomain.com.au Whereas 0.95 gives a brief header:

Re: [Clamav-users] clamav-milter 0.95.1 reject message

2009-04-13 Thread James Kosin
Jason Bertoch wrote: I use OnInfected Reject in my clamav-milter.conf and it seems the new behavior is to reject with an error of 5.7.1 Command rejected instead of the matching signature name. In the event of a false positive, it is extremely handy to have the signature logged both in the

[Clamav-users] clamav-milter 0.95

2009-04-06 Thread James Kosin
Everyone, I also ran across the ReadTimeout setting in clamav-milter.conf, this setting says setting to 0 disables the timeout. This does not appear to be the case. What happens is it honors a timeout of 0-seconds. Meaning clamav-milter reports that clamd is not running or responding. James

Re: [Clamav-users] Missing option on freshclam 0.95?

2009-04-02 Thread James Kosin
Charles Gregory wrote: Started getting these with my Centos4 package freshclam today: /etc/cron.hourly/freshclam: /usr/bin/freshclam: unrecognized option `--log-verbose' ERROR: Unknown option passed ERROR: Can't parse command line options The cron job is unchanged since installation.

Re: [Clamav-users] NULL dereference in clamav-milter 0.95

2009-03-30 Thread James Kosin
aCaB wrote: Hi, A bug has been reported affecting clamav-milter 0.95. If LogInfected is set to Full and the message being processed lacks either the Subject, Message-ID or Date headers a NULL pointer is dereferenced which will cause the program to be aborted. For SVN users the issue is

Re: [Clamav-users] 0.95RC1 availability

2009-02-27 Thread James Kosin
Nigel Horne wrote: Folks, 0.95 RC1 was published on Wednesday 25/2/09. For details of the new features please refer to the Changelog. A what's new document that gives an overview of the new and improved features is currently in preparation for publication on www.clamav.net. For

Re: [Clamav-users] Feature Request Scanlist

2009-01-29 Thread James Kosin
Tomasz Kojm wrote: On Thu, 29 Jan 2009 13:26:29 +0100 Andre Hübner andre.hueb...@gmx.de wrote: snip with fileselection which is base for clamscan. Thsi fileselection could be reduced by date of creation, special filetypes, chmod, whatever... Sure, a complete scan should also be done, but

Re: [Clamav-users] Twitter

2008-12-04 Thread James Kosin
McDonald, Dan wrote: On Thu, 2008-12-04 at 12:45 -0500, Nigel Horne wrote: Folks, how about: Daily CVD 8721 (sigs: 32788, new: 1) at 04 Dec 2008 13-26 + The proper phrasing is on and not at James signature.asc Description: OpenPGP digital signature

Re: [Clamav-users] SubmitDetectionStats with clamav-milter?

2008-11-13 Thread James Kosin
Ed Kasky wrote: I recently upgraded to ClamAV 0.94.1 and enabled SubmitDetectionStats. Is there a way to configure clamav-milter to write to clamd.log rather than the maillog? I would like to participate in the submissions if the viruses found by the milter would be useful. I generally

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-17 Thread James Kosin
Nigel Horne wrote: Folks, We are pleased to announce the availability of the first release candidate for ClamAV 0.94.1. 0.94.1RC1 is scheduled for release on Wednesday (15/10/08). Nigel, Everything works on gcc-3.3.6 with Redhat FC1. I managed to install check and perform the checks with

Re: [Clamav-users] Timed events

2008-10-14 Thread James Kosin
Jerry wrote: Is there any mechanism build into CM that would allow a user to set event to happen at either a predetermined time, or at some specific time interval. Other than checking for mail, I do not see any way of setting up a time specific event. If this is currently not available in

Re: [Clamav-users] problem during compilation

2008-10-06 Thread James Kosin
Chandra wrote: Hi, When I run the command make check while trying to install clamav-0.94, i get the following error: /usr/bin/ld: cannot find -lcheck collect2: ld returned 1 exit status make[2]: *** [check_clamav] Error 1 make[2]: Leaving directory

Re: [Clamav-users] Stop it!

2008-10-03 Thread James Kosin
Colin Alston wrote: I've had enough now, and I want all you ClamAV people to listen up. Hay, maybe the packagers could write a script or something to indicate a problem with the current configuration when it is being installed. Then users could take the appropriate action ASAP instead of

Re: [Clamav-users] Unable To Run Freshclam...still

2008-09-22 Thread James Kosin
Brandon Perry wrote: your logs are owned by amavis? On Mon, Sep 22, 2008 at 10:08 AM, Carlos Williams [EMAIL PROTECTED]wrote: mail:/var/log/clamav# ls -l total 112 -rw-r- 1 amavis adm 3401 2008-09-22 10:29 clamav.log -rw-r- 1 amavis adm 23918 2008-09-21 06:25 clamav.log.1

Re: [Clamav-users] Cannot compile clamav 0.94 on i386 openbsd 4.0

2008-09-17 Thread James Kosin
S.Madge wrote: That works! Are there any negative consequences by using this trick? Only down side is you will have to do it every time you rebuild samba; until you or someone else finds out why it isn't working. James signature.asc Description: OpenPGP digital signature

Re: [Clamav-users] Cannot compile clamav 0.94 on i386 openbsd 4.0

2008-09-17 Thread James Kosin
Török Edwin wrote: On 2008-09-17 17:28, James Kosin wrote: S.Madge wrote: That works! Are there any negative consequences by using this trick? Only down side is you will have to do it every time you rebuild samba; I don't see anybody talking about samba in this thread ;) Sorry

Re: [Clamav-users] Error scanning specific .pdf file

2008-09-11 Thread James Kosin
Data scanned: 2.27 MB Time: 10.309 sec (0 m 10 s) -bash-2.05b$ James Kosin signature.asc Description: OpenPGP digital signature ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Database correctly reloaded (0 signatures)

2008-07-14 Thread James Kosin
Oscar Usifer wrote: Please see clamav-0.93.3/libclamav/readdb.c:460 sigs++; From static int cli_loaddb() : 475 if(signo) 476 *signo += sigs; s/b 475 if (sigs == 0) 476 return CL_EMALFDB; 477 478 if(signo) 479 *signo += sigs; Oscar, I don't know if this is really necessary. A

Re: [Clamav-users] [ot?] oh no

2008-07-11 Thread James Kosin
Spiro Harvey, Knossos Networks Ltd wrote: X-Virus-Scanned: Debian amavisd-new at tad.clamav.net just found this in the headers of this mailing list :( Don't be surprised. I often use products I create in my spare time. If you aren't willing to use the product you are creating yourself

Re: [Clamav-users] 0.93.3 memory doubling problem

2008-07-11 Thread James Kosin
Russell Jones wrote: Sorry for the silly question, however with that patch, do I just replace the original thrmgr.c file with this one, then recompile/reinstall? I just want to make sure I do it correctly. Thanks! No, a patch is more of a difference between two files. You won't be able to

Re: [Clamav-users] [Fwd: [Clamav-devel] 0.93.1 / libclamav: no CL_EMAX*-Error-Codes for Applications?]

2008-06-23 Thread James Kosin
Marcus Neukert wrote: no answer does mean: there is no chance to change it? There may have been a chance to change it when the developers proposed the change in the functionality originally on this list. The change was to get rid of the ZipTooLarge virus definition; which caused more

Re: [Clamav-users] Limits still disabled?

2008-06-11 Thread James Kosin
Ken Williams wrote: I'm running the latest clamav on linux 2.4. Works fine. I noticed today after the upgrade my log file says: Jun 10 20:07:48 central clamd[301]: Limits: Global size limit protection disabled. Jun 10 20:07:48 central clamd[301]: Limits: File size limit protection disabled.

Re: [Clamav-users] 0.93.1RC1 (libbz issues)

2008-05-30 Thread James Kosin
Mark Fortescue wrote: Hi Stephen, The issue here is that clamav configure does not detect that the installed libbz is not compatible with clamav (the libbz API has changed changed in the latest bzip2 package). My solution was to download and compile the latest bzip2 package. This my not be

Re: [Clamav-users] 0.93.1RC1

2008-05-28 Thread James Kosin
Nigel Horne wrote: Dear All, As you may have seen, the first release candidate of 0.93.1 was published earlier this week. 0.93.1 http://downloads.sourceforge.net/clamav/clamav-0.93.1rc1.tar.gz is a maintenance release with bug fixes for issues raised with 0.93 for example portability

Re: [Clamav-users] 0.93.1RC1

2008-05-28 Thread James Kosin
Nigel Horne wrote: Dear All, As you may have seen, the first release candidate of 0.93.1 was published earlier this week. 0.93.1 http://downloads.sourceforge.net/clamav/clamav-0.93.1rc1.tar.gz is a maintenance release with bug fixes for issues raised with 0.93 for example portability

Re: [Clamav-users] No supported Database

2008-04-16 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis Peterson wrote: | So I currently have a main.cvd and a daily.cld, both files. Is this what | 0.93 uses or will main.cvd be swapped out with a cld container at some | point? | | dp Yes, when there is finally an update to main.cvd... I believe

Re: [Clamav-users] FreeBSD 4.11 and ports

2008-04-16 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | People who may have problems compiling ClamAV 0.93 with the FreeBSD | ports on 4.11 may need to patch the port Makefile as I had to. I am | not sure if it affects other FreeBSD versions or not, I didn't try it. | | ---

Re: [Clamav-users] Upgrade ClamAV

2008-04-16 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carlos Williams wrote: | I searched Google and could not find anything that was obvious to | resolving this dep. issue. | | When I go to search the archives manually, I went to | http://lurker.clamav.net/list/clamav-users.html and I get a blank page

Re: [Clamav-users] Clamav 0.93 - clamd and freshclam fail to start with relocation error

2008-04-15 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian Morrison wrote: | On Mon, 14 Apr 2008 20:38:21 +0300 | Török Edwin [EMAIL PROTECTED] wrote: | | Brian Morrison wrote: | Török Edwin wrote: | | Brian Morrison wrote: | | I've just built and installed 0.93, when the new versions try and

Re: [Clamav-users] Clamav 0.93 - clamd and freshclam fail to start with relocation error

2008-04-15 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Kosin wrote: | Brian Morrison wrote: | | On Mon, 14 Apr 2008 20:38:21 +0300 | | Török Edwin [EMAIL PROTECTED] wrote: | | | | Brian Morrison wrote: | | Török Edwin wrote: | | | | Brian Morrison wrote: | | | | I've just built

Re: [Clamav-users] Clamav 0.93 - clamd and freshclam fail to start with relocation error

2008-04-15 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian Morrison wrote: | On Tue, 15 Apr 2008 14:59:27 -0400 | James Kosin [EMAIL PROTECTED] wrote: | | | I think I have a clue. | | For some reason, clamav is linking against the old version of | | libclamunrar_iface.so.3 file. I'll try uninstalling

Re: [Clamav-users] Clamav 0.93 - clamd and freshclam fail to start with relocation error

2008-04-15 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steve Holdoway wrote: | Having just been spending quite some time writing .spec files, it could be because rpm -U actually runs the uninstall script of the superseeded package ( with $1 set to a different value to if you're running -e ) as a part

Re: [Clamav-users] ClamAv-Milter Configuration Troubles

2008-04-11 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Kosin wrote: | Everyone, | | I've got clamav-milter using a .sock file and would like to change it to | use the IP socket address interface to clamd. | Any ideas on what I have to do? If I just change clamav-milter options | to use --external

[Clamav-users] ClamAv-Milter Configuration Troubles

2008-04-09 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Everyone, I've got clamav-milter using a .sock file and would like to change it to use the IP socket address interface to clamd. Any ideas on what I have to do? If I just change clamav-milter options to use --external and remove the local socket

Re: [Clamav-users] Clam update issue, *.cvd

2008-04-08 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Fraser wrote: | I am having a problem with clam occasionally when it does an update. | Specifically what happens is that my /var/amavis/tmp directory fills up with | temp files. This seems to happens when clam fails to download an update. My |

Re: [Clamav-users] Memory usage for clamd is huge

2008-03-31 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ben wrote: | I run clamd on a CentOS server, with freshclam, and clamsmtpd to scan mail. | And I use it interfacing with postfix. | However, just clamd alone uses 23 Megabytes when idle! | | Can someone post configuration options to limit or lower

Re: [Clamav-users] A small survey about limits (Oversized.Zip and friends)

2008-01-29 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 aCaB wrote: | So now the real questions are: | 1- Do you have a real usage scenario for Oversized.Zip and friends? Maybe, put a warning in the email message clarifying that the file could not be checked by clamav instead of flagging as an

Re: [Clamav-users] Problem with clamav on Linux

2008-01-28 Thread James Kosin
René Berber wrote: [snip] [snip] That will never work, you have to choose between using a local socket or a tcp socket, can't have both... and clamd should be advising you with a message to the log. No this is not correct. It depends on the version of clamav installed. The newer

Re: [Clamav-users] ClamAV-0.92 very high CPU usage

2008-01-11 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen Gran wrote: | On Fri, Jan 11, 2008 at 08:16:06AM -0600, Roberto Ullfig said: | What version of Kernel are you using? | ~There is a kernel BUG that could cause this. | | Pointer to documentation about it would be great. Looking for that

Re: [Clamav-users] ClamAV-0.92 very high CPU usage

2008-01-11 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sandeep Agarwal wrote: | hello all, | | I am experiencing a very high CPU usage by clamd | process. Top always shows the CPU usage more than | 100%. | | I have clamav to scan AV for my mail server. Its a | qmail installtion with simscan. Clamav is

Re: [Clamav-users] ClamAV-0.92 very high CPU usage

2008-01-11 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Kosin wrote: | Stephen Gran wrote: | | On Fri, Jan 11, 2008 at 08:16:06AM -0600, Roberto Ullfig said: | | What version of Kernel are you using? | | ~There is a kernel BUG that could cause this. | | | | Pointer to documentation about

Re: [Clamav-users] 0.92 and memory usage

2007-12-20 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Blaise wrote: Fabio, We've seen this too. See if my patch helps. https://wwws.clamav.net/bugzilla/show_bug.cgi?id=736 Chris Chris, The patch causes the acept() to FAIL. Thu Dec 20 12:32:03 2007 - ERROR: accept() failed:

Re: [Clamav-users] 0.92 and memory usage

2007-12-20 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Kosin wrote: Chris Blaise wrote: Fabio, We've seen this too. See if my patch helps. https://wwws.clamav.net/bugzilla/show_bug.cgi?id=736 Chris Chris, The patch causes the acept() to FAIL. Thu Dec 20 12:32:03 2007 - ERROR: accept

[Clamav-users] [main.cvd] Issues when both main.cvd and main.inc are available

2007-12-19 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Everyone, I'm hoping someone knows a quick solution. If main.cvd and main.inc are installed, the signatures seem to double themselves. daily.cvd is also installed; but the files goes away with the first update. Any idea on how to get freshclam to

Re: [Clamav-users] clamav gcc dependendencies ...

2007-12-17 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Per Jessen wrote: I guess there was no other way than to make clamav dependent on gcc, but it sure is bad timing. Only a week before Christmas, most systems are frozen, people have already left for vacation etc. Updating clamav is within reason

Re: [Clamav-users] Help needed

2007-12-03 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mohammed Ejaz wrote: Dear tkojm, Many thanks i have updated to the suggested version, but when i do freshclam -v i got followin messages Please help what i did wrong TTL: 71 Software version from DNS: 0.91.2 main.cvd version from DNS: 44

Re: [Clamav-users] Recent viruses

2007-10-29 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel T. Staal wrote: On Mon, October 29, 2007 8:58 am, Gomes, Rich said: Daniel, I've been searching for how to configure this without much luck. Could you point me in the right direction? Again, it Sendmail on RH being called by clamav-milter.

Re: [Clamav-users] Quiet period for viruses?

2007-10-16 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 fchan wrote: Hi, Maybe it just me but I noticed that the clamav definitions are still at 4540 dated 14 October 2007 0143 UTC or has the virus writers has called a truce. No, this is probably the LULL before the STORM. - -James -BEGIN PGP

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis Peterson wrote: Sean McGlynn wrote: Dennis, Thank you for taking the time to reply. Yes, I am running the scan as root. Sean Is the home directory mounted? Dennis ___ Should also

Re: [Clamav-users] clamav-milter startup very slow

2007-09-11 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen Gran wrote: On Tue, Sep 11, 2007 at 08:35:54PM +1200, Dylan Carruthers said: Hi I'm not sure if this is the correct mailing list but I've got a question about clamav-milter startup times that I can't find an existing answer for. I'm

Re: [Clamav-users] Sourcefire's acquisition of ClamAV -- Will ClamAV become close source ?

2007-08-27 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sergei Lavrov wrote: Does this mean ClamAV will become close source sometime in the future ? Lavrov Boardwalk for $500? In 2007? Ha! Play Monopoly

Re: [Clamav-users] Sourcefire acquires ClamAV

2007-08-17 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tomasz Kojm wrote: On Fri, 17 Aug 2007 05:26:14 -0700 Ed Kasky [EMAIL PROTECTED] wrote: lead the advancement of ClamAV and the CVD as employees of Sourcefire. Both the ClamAV engine and the signature database will remain under GPL. Until they

Re: [Clamav-users] ArchiveMaxFileSize

2007-05-23 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom Bombadil wrote: This is what the conf file says: # Files in archives larger than this limit won't be scanned. # Value of 0 disables the limit. # Default: 10M What won't be scanned? - files larger than this limit inside an archive? - Or

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Obantec Support wrote: Hi clamd died again from clamd.log SelfCheck: Database modification detected. Forcing reload. Reading databases from /var/lib/clamav ERROR: reload db failed: Broken or not a CVD file Terminating because of a fatal

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Luigi Iotti wrote: To who is experiencing the *.cvd problem due to the 3rd party scripts in the RPM packages maintained by Petr Kristof , available on http://crash.fce.vutbr.cz/crash-hat/5/ : Petr just released an upddated version of his

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tomasz Kojm wrote: --snip-- This can be solved using file permissions as well, eg. by running clamd with only read privileges to the database directory. I was thinking about the possible VIRUS or TROJAN being able to gain root access by some

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tomasz Kojm wrote: On Thu, 12 Apr 2007 16:42:07 -0600 (MDT) James Bourne [EMAIL PROTECTED] wrote: Yes it may be possible, but that's still no excuse for clamd to bail when presented with two sets of data files, one invalid and one valid.

Re: [Clamav-users] Clamav suddenly died on several boxes

2007-04-11 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, Deleting the database directory and restarting freshclam to get the databases again seems to have fixed the problem on both systems. This problem may be related to getting incremental updates and not being able to update the .CVD database

Re: [Clamav-users] Clamav suddenly died on several boxes

2007-04-11 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Luigi Iotti wrote: Hi all I'm new on the list, is this is a FAQ please tell me so. I'm unsure if my problem is related to the other one that today is discussed on the list. I have several clamav installations. I use it with Postfix on CentOS

Re: [Clamav-users] Re: first impressions on 0.90

2007-02-16 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ian Abbott wrote: On 14/02/2007 20:09, Rick Pim wrote: it's true; if i start clamd and then check, the clamd socket isn't there. but if i leave clamd alone for a few seconds the socket appears and clamav-milter starts happily after that.

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Maul wrote: Maybe i missed it, but where in his original email did he ask anyone to help him by doing something for him? From what i can see, he didnt even ask for help at all. The way i took it was: Gee, I downloaded this package for

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Maul wrote: Are they really no package maintainers on this list? I find that hard to believe. Is it really necessary to punish someone for thinking that maybe, just maybe, a message about clamav packages on the clamav-users list might

Re: [Clamav-users] Cherishing my ignorance - An appeal to packagers

2006-11-07 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Redman wrote: Of all the packages I install (Fedora), clamav is the only modern package that fails to install and just work. -- snip -- Jim You are ranting to the wrong group of people. ClamAV has nothing to do with RPM packages or

Re: [Clamav-users] I-Worm/Generic.RX undetected

2006-09-20 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Hertanu wrote: Hi Yesterday I received 3 emails in which the local antivirus (AVG for Windows, Free edition) has detected a virus named I-Worm/Generic.RX. The email server is a sendmail with clamav-milter. Having a look into the log file

Re: [Clamav-users] Scan Signature

2006-08-18 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Diego Lorenzo - OJC wrote: Hello, folks! I´m needing to mark all incoming and outgoing e-mails with a virus scanned message, kindda This e-mail was scanned by Clamav (or Amavis), something like that. Is there any flag I can set it? Regards,

Re: [Clamav-users] broken zlib version

2006-06-19 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fixed. You can safely ignore the error about that version. - -James Thomas Cameron wrote: All - I'm not reporting a stability problem with an old version, I just have a question. I am running Red Hat Enterprise Linux 4, update 3. The

Re: [Clamav-users] nested attachements question

2006-06-07 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nick wrote: Hi all, I'm doing some research for my Boss and have been asked whether ClamAV can handle multiple nested archive files. That is, if an attachment has a zip of a zip of a zip (etc., etc.) with a virus embedded somewhere, can it

Re: [Clamav-users] Question About Quarantine

2006-05-17 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kaplan, Andrew H. wrote: Hi there -- As a general rule of thumb, what is the oldest a file should be from any given day that is in the quarantine directory before it should be deleted from the system? Depends on how often you check the

[Clamav-users] Croxx-Platform Virus

2006-05-01 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Everyone, I just ran over this, and it sounds legit. I'm afraid the bird-flu is spreading to the humans (Linux) now. http://www.ddj.com/dept/security/184429859?cid=RSSfeed_DDJ_Security - -James -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3

Re: [Clamav-users] cannot use yum to upgrade to 0.88.1

2006-04-12 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ralf Durkee wrote: Has anybody built trustworthy rpm's for ClamAV for Fedora Core 4, or would be willing to make them available if I built them? -- Ralf Durkee, CISSP, GSEC, GCIH Principal Security Consultant http://rd1.net DAG does a good job.

Re: [Clamav-users] Problem with milter-greylist and clamav 0.88.1

2006-04-07 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Davin Flatten wrote: I just today tried to upgrade to 0.88.1, but I am having a problem. I can configure, make, and make install fine and I am able to start clamd fine using the config files from 0.88, but when I start up scanning with

Re: [Clamav-users] clamscan and file access times

2006-04-06 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Miner, Jonathan W (CSC) (US SSA) wrote: Hi - I've just started to use ClamAV as part of an evaluation of several anti-virus products for our UNIX/Linux networks. Our primary need is to scan filesystems. The first thing I noticed was that there

Re: [Clamav-users] clamscan and file access times

2006-04-06 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Miner, Jonathan W (CSC) (US SSA) wrote: Hi, Clamscan shouldn't be modifying the (modification time)... The access time should be OK being modified; otherwise you would backup/etc every time someone viewed a file. Clamscan does not change the

Re: [Clamav-users] clamav Samba with on access anti virus scans

2006-04-05 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul Matthews wrote: I've googled samba-vscan-clamav and I have come up with a few hits, but I can't find anything to do with Fedora and does it require samba to be installed by source, not by default installation from Fedora install? Paul,

Re: [Clamav-users] clamav Samba with on access anti virus scans

2006-04-04 Thread James Kosin
programs should be used? any information on this topical at all would be helpful. Google the web for samba-vscan-clamav ... It is very simple to setup; although, you get a serious performance hit for using on large files. James Kosin -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (MingW32) Comment

Re: [Clamav-users] 100% CPU clamav samba-vscan thunderbird

2006-02-02 Thread James Kosin
could also try the 0.40 snapshot for samba-vscan-clamav. I have a copy in my RPM. http://support.intcomgrp.com/mirror/fedora-core/beta/src/samba-vscan-clamav-0.4.0-2.fc1.src.rpm You probably are using IMAP or a huge inbox, try the max file size limit first. Let me know, James Kosin -BEGIN

Re: Re :Re: [Clamav-users] 100% CPU clamav samba-vscan thunderbird

2006-02-02 Thread James Kosin
all email clients, won't like the mail-box files disappearing on them. Had this problem many times especially with outlook. You don't need to scan twice; especially if you already have clamav-milter installed and running. Let me know, James Kosin -BEGIN PGP SIGNATURE- Version

Re: [Clamav-users] Squirriel Mail clamav scanner

2006-01-09 Thread James Kosin
. This is of course dependant on the chance you operate your own emial server. If not, be sure to get clamdscan to scan for viruses or get a script to scan when checking email. There are plenty of choices out there. James Kosin -- Scanned by ClamAV - http://www.clamav.net

Re: [Clamav-users] clamd.conf not recognizing TemporaryDirectory

2006-01-03 Thread James Kosin
, James Kosin Brian McDonald wrote: You will have to explain what you mean by HUP the process -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Odhiambo Washington Sent: Tuesday, January 03, 2006 10:04 AM To: clamav-users@lists.clamav.net Subject: Re: [Clamav

Re: [Clamav-users] Clamav doubt

2005-11-08 Thread James Kosin
of Fedora http://fedora.redhat.com ... He needs to really tell someone on the fedora-development list that the packages are out of date now. This is a normal WARNING that happens often when the version of clamav updates. Double Cheers, James Kosin -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1

Re: [Clamav-users] INFO: clamav-0.87.1 pacakges for FC-4

2005-11-07 Thread James Kosin
as the application needed them. Just some random ideas, James Kosin -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDb15HkNLDmnu1kSkRAxpqAJsEfMUcc/99jDlzhqOSIiaq8U+uJwCfQAJX UWOfrGKvy/6zkU7/nStFvVg= =g3cB -END PGP

Re: [Clamav-users] Problem: clamd dead but subsys locked

2005-11-07 Thread James Kosin
fixing the problem. Good Luck, James Kosin -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDb2XwkNLDmnu1kSkRA4UUAJ0ViuV6YjRSktzQDvFXRsx8tI8VBwCfaRiw E2AmEORcILQIcmraz+sRRcE= =bv2V -END PGP SIGNATURE

Re: [Clamav-users] INFO: clamav-0.87.1 pacakges for FC-4

2005-11-07 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Tomasz Kojm wrote: On Mon, 07 Nov 2005 09:01:43 -0500 James Kosin [EMAIL PROTECTED] wrote: Maybe it would be better to look into compressing the databases somehow. Having a run-time decompresser to extract the information from the database

Re: [Clamav-users] INFO: clamav-0.87.1 pacakges for FC-4

2005-11-07 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Krištof Petr wrote: James Kosin wrote: The only problem I see with the change is that users who don't already have a database loaded on their system will need to download and install the db package first before installing the main clamav

Re: [Clamav-users] main.cvd corrupt?

2005-10-21 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 See Kar Leong wrote: Dear All, I'm using clamav with qmail-scanner, I found out my qmail not sending email today, and in the qmail-scanner log file, there is some error log. Fri, 21 Oct 2005 10:29:40 +0800:3251: --output of clamscan was:

Re: [Clamav-users] ClamAntivirus NOT detecting viruses

2005-09-30 Thread James Kosin
this file to enable scanning of e-amail files | before sending to user mailboxes. | Will appreciate any assistance. | | Thank you. | Stephen | | ___ | http://lurker.clamav.net/list/clamav-users.html Look at setting up clamav-milter. James Kosin

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread James Kosin
. James Kosin -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDOxGdkNLDmnu1kSkRAwK8AJ0dqF2wj08y+pu6J7Iuzf8pSAyKZACfSTy6 f4J+ft+qPryqdvvrly9hna4= =n73s -END PGP SIGNATURE- -- Scanned by ClamAV - http

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread James Kosin
it when you had posted | it. Mine had the same loop.. | | Thanks, Brian | Maybe it needs to check that ReadTimeout - 1 is non negative. I bet if it is negative, it is suppose to not-timeout and non-negative delays (waits) that many seconds before timing out. James Kosin -BEGIN PGP SIGNATURE

Re: [Clamav-users] Issues with ClamAV and RedHat Enterprise 2

2005-09-27 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 David Shows wrote: | Morning all, | | My version of ClamAV .85 has become outdated and I need to upgrade. |Unfortunately I get error messages when I try to use RPM to upgrade because |of incompatibilities with zlib packages. I have not tried

Re: [Clamav-users] clamav-milter nscd problem

2005-08-09 Thread James Kosin
]: j75G2dHC029124: Milter (clmilter): to error state (1) What platform are you using? Debian, Redhat, Fedora, Gentoo? Good Luck, James Kosin -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFC

Re: [Clamav-users] Re: clamav-users Digest, Vol 10, Issue 26

2005-07-29 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dawson wrote: | My problem is probably very simple for all the | experts out there but has stumped me | | my freshclam.og is in /var/log | | I set the ownership to clamav | | It gets reset to root and then prevents the | program from running.