Re: [Clamav-users] Problem with clamav on Linux

2008-01-29 Thread Jim Maul
Török Edwin wrote: Quỳnh H Nguyễn wrote: After remove it manual. There is still error when clamd start, it will create /tmp/clamd.socket And this is the next error. If solve this problem, I think you fixed my error. I'm so sorry because I can not understand to config and fix it by myself!

Re: [Clamav-users] RPM 0.90.2 FC4

2007-04-19 Thread Jim Maul
Steven Stern wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis Peterson wrote: Steven Stern wrote: Robert Niepel wrote: Hello, an anyone tell me where i can get RPM?s for Fedora Core 4? Or has anyone have an hotwo to build those rpm from tar.gz? download the unpack the

Re: [Clamav-users] Install clamav on CentOS 4.4

2007-04-18 Thread Jim Maul
Rob MacGregor wrote: On 4/18/07, Gustavo Gouvea [EMAIL PROTECTED] wrote: Hi there, has anyone instaled clamav on CentOS 4.4 before?? Any tips??? Which version of Openssl do I need to use? Will I have to do it from the source code? By now, Ive been using the rpm packages from Petr Kristof.

Re: [Clamav-users] error stops clamd

2007-04-11 Thread Jim Maul
Jason Frisvold wrote: On 4/11/07, John Rudd [EMAIL PROTECTED] wrote: Depends on what your goals are. For me, a reliable email system does not just mean mail gets delivered. It also means that we reliably reject detectable viruses. If we're letting viruses through because our pants are

Re: [Clamav-users] problem with clamav and cpu

2007-03-29 Thread Jim Maul
[EMAIL PROTECTED] wrote: On Thu, 29 Mar 2007 11:54:18 +0200 (CEST) [EMAIL PROTECTED] wrote: Hi, usually clamav use 100% of my cpu making the load average very hight, latelay i have had even a big error in the log : clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms

Re: [Clamav-users] clamscan-procfilter.pl stops working after upgrade to 0.9X clamav

2007-03-19 Thread Jim Maul
Michael Brown wrote: Hi Everyone, I'm new to this list, but a long time user of ClamAV. For years I've been using this simple procmail (clamscan-procfilter.pl) script from http://www.virtualblueness.net/~blueness/clamscan-procfilter/ It's worked great, until I upgraded to the 0.9X ClamAV and

Re: [Clamav-users] Re: 0.90.1 freshclam error

2007-03-14 Thread Jim Maul
Daniel T. Staal wrote: On Wed, March 14, 2007 10:08 am, Robert Isaac said: Thanks. This gave [EMAIL PROTECTED] etc]# grep LocalSocket clamd.conf # LocalSocket /tmp/clamd LocalSocket /usr/sbin Ouch, pointing LocalSocket to /usr/sbin is not a good idea. -- oo. Tomasz Kojm

Re: [Clamav-users] Problem after upgrade

2007-03-07 Thread Jim Maul
Awie wrote: Hi all, After upgrading to ClamAV 0.90.1, I got problem with message below: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 Would you tell me the source of such problem? Your answer is very appreciated and waited for. This

Re: [Clamav-users] clamav vs norton

2007-03-02 Thread Jim Maul
Sean Pinegar wrote: I trusted clamav for a long time but ran across an interesting problem today. I received an e-mail from a friend that included a powerpoint. I opened the powerpoint in linux and wine flagged it as a virus (not sure how wine knew there was a virus...can anyone enlighten me

Re: [Clamav-users] Local mirror with .90

2007-02-23 Thread Jim Maul
Shawn Badger wrote: I'm sure this has been asked already, but I haven't been able to find it. How do I get the .cdiff files? I had a local mirror set up, but since .90 was installed they are looking for the .cdiff files. Before I was just doing a symbolic link on my server to .cvd files it was

Re: [Clamav-users] Auto scan problems

2007-02-15 Thread Jim Maul
carren stuart wrote: carren stuart wrote: A while back, I wrote: I'm running Clamav on DesktopBSD, with Klamav as the front end. Clamav is working fine and has detected the eicar test files as expected but I cannot get auto-scanning to work. Whenever I enable auto-scan I get the following

Re: [Clamav-users] Re: ClamAV version mismatch

2007-01-04 Thread Jim Maul
Mathias wrote: What mail server do you run? And how does the mailserver determine the clamdscan header? I'm running qmail with qmailscan 1.25. I guess something has got to be compiled in there although I thougt that qmailscan was just a perlscript (qmail-scanner-queue.pl). I'll dig into it

Re: [Clamav-users] Update / upgrade questions

2007-01-04 Thread Jim Maul
Vanco, Don wrote: Hello all - New user here, couple quick questions. Background: I am trying to support a customer under a bit of duress. I know Linux, but have not worked with ClamAV directly myself, so am a bit hesitant because this is an env. that processes 250k emails a day. I've read

Re: [Clamav-users] Why does clam die on a malformed database ?

2007-01-02 Thread Jim Maul
Chuck Swiger wrote: Bill Landry wrote: [ ... ] You are preaching to the choir here, as you have no argument from me. I raised the same issue the last time this happened to me a few weeks ago and clamd died twice on me in one day. The script work-around to check the databases before

Re: [Clamav-users] Freshclam stability as a daemon [was: DB Update email before actual update available?]

2006-12-29 Thread Jim Maul
Dennis Peterson wrote: G.W. Haywood wrote: Hi there, Some time ago somebody wrote, and somebody else replied: Why not just run freshclam as a daemon? Then you really need to have a daemon watcher to keep it going. Talk of freshclam dying gives me some discomfort, yet in almost two years

Re: [Clamav-users] Freshclam stability as a daemon [was: DB Update email before actual update available?]

2006-12-29 Thread Jim Maul
Dennis Peterson wrote: Jim Maul wrote: Dennis Peterson wrote: This is not rocket science. Who said it was? The OP clearly asked for people who run freshclam as a daemon who have NOT had problems with it in the setup. You are not one of those people so im still trying to figure out

Re: [Clamav-users] 0.88.7 possible error

2006-12-14 Thread Jim Maul
Robert Isaac wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 13 December 2006 21:13 To: ClamAV users ML Subject: Re: [Clamav-users] 0.88.7 possible error Robert Isaac wrote: -Original Message- From: [EMAIL

Re: [Clamav-users] 0.88.7 possible error

2006-12-13 Thread Jim Maul
[EMAIL PROTECTED] wrote: Robert Isaac wrote: Yesterday I installed 0.88.7 on our server running RHESL-4 using the rpms from DAG, previously using 0.88.6. Our LogWatch file this morning shows: **Unmatched Entries** clamd shutdown succeeded clamd shutdown failed Oops, look at that, it didnt

Re: [Clamav-users] clamscan sped

2006-11-27 Thread Jim Maul
Erez Epstein wrote: well, i'm not sure if thats the right solution, as smart virus or old file with new virus definiton will not be found. also i know all other virus scanners do scan all files. Then perhaps you should be using other virus scanners. Use the tool that best fits the job. If

Re: FW: [Clamav-users] clamscan sped

2006-11-27 Thread Jim Maul
, -- Arthur Sherman +972-52-4878851 CPTeam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Maul Sent: Monday, November 27, 2006 3:18 PM To: ClamAV users ML Subject: Re: [Clamav-users] clamscan sped Erez Epstein wrote: well, i'm not sure if thats

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread Jim Maul
Bart Silverstrim wrote: On Nov 9, 2006, at 2:09 PM, Jim Redman wrote: Folks, I have to say, of all the lists I subscribe to, the vocal members of this list are the most arrogant and insulting. However, I consider comments such as Luca Gibelli's, bandwidth wasting, We are happy to suffer

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread Jim Maul
James Kosin wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Maul wrote: Maybe i missed it, but where in his original email did he ask anyone to help him by doing something for him? From what i can see, he didnt even ask for help at all. The way i took it was: Gee, I downloaded

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread Jim Maul
Dennis Peterson wrote: Jim Maul wrote: Bart Silverstrim wrote: On Nov 9, 2006, at 2:09 PM, Jim Redman wrote: Folks, I have to say, of all the lists I subscribe to, the vocal members of this list are the most arrogant and insulting. However, I consider comments such as Luca Gibelli's

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread Jim Maul
Bart Silverstrim wrote: On Nov 9, 2006, at 2:40 PM, Daniel J McDonald wrote: On Thu, 2006-11-09 at 10:24 -0500, Bart Silverstrim wrote: On Nov 7, 2006, at 6:48 PM, Jim Redman wrote: Chris, Christopher X. Candreva wrote: On Tue, 7 Nov 2006, Jim Redman wrote: My observation is that of

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-10 Thread Jim Maul
Dennis Peterson wrote: Dennis Peterson wrote: Jim Maul wrote: somebody else wrote: Gee, I downloaded this package for clamav and installed it and now there are all sorts of other things that still need to be done to get it working correctly. Maybe clamav developers could work

Re: [Clamav-users] let's all make a regular domation to ClamAV

2006-11-08 Thread Jim Maul
Sergei Lavrov wrote: --- Jim Maul [EMAIL PROTECTED] wrote: Per Jessen wrote: Sergei Lavrov wrote: Dear ClamAV users, If you are using ClamAV in your business and you are happy about it, I would like to call upon you to make a regular donation to the ClamAV project. Those

Re: [Clamav-users] let's all make a regular domation to ClamAV

2006-11-03 Thread Jim Maul
Per Jessen wrote: Sergei Lavrov wrote: Dear ClamAV users, If you are using ClamAV in your business and you are happy about it, I would like to call upon you to make a regular donation to the ClamAV project. Those folks have spent great deal of time to provide us with timely virus

Re: [Clamav-users] Freshclam says 0.90RC1.1 is outdated

2006-10-26 Thread Jim Maul
Eric Peabody wrote: Installed an update of clamav using the only download available from the 'stable' link on the website, which is 0.90RC1.1. Am now getting a message that says that the installation is 'OUTDATED'. Should I be using a different entry for /DNSDatabaseInfo/? Here is the

Re: [Clamav-users] how to decern what to scan?

2006-10-05 Thread Jim Maul
Jim Shupert, Jr. wrote: I have clam av on a redhat ES3 linux machine. I do not see where i can declare what directory it is to scan? pass it on the command line? what do I config to make that happen? your brain? like if I wanted to scan mnt/data ( where data is a mounted 2nd drive )

Re: [Clamav-users] clamav scan crashes server

2006-09-06 Thread Jim Maul
David Woolley wrote: Hi Dennis, Have I done something to offend you? Perhaps asking a question which is easily answered with a command you have already run? I have posted to this list to ask for help with an issue that the developers of the Linux distro I use have marked as WONTFIX

Re: [Clamav-users] bash script to split mbox file and scan individual messages

2006-08-28 Thread Jim Maul
[EMAIL PROTECTED] wrote: jef moskot wrote: I have a small script I modify to do the job of lifting the offending messages out of the mbox files. On a large scale, there's the obvious problem of modifying files that could be in use or files that the user could modifying during the stripping

Re: [Clamav-users] bash script to split mbox file and scan individual messages

2006-08-28 Thread Jim Maul
[EMAIL PROTECTED] wrote: Jim Maul wrote: You seem to be missing the point here. Nowhere that i saw did anyone say that they are scanning the mailboxes INSTEAD of at smtp time. This mailbox scanning is in addition to smtp scanning. I think anyone could agree that additional scanning

Re: [Clamav-users] Rewrite subject and remove virus questions

2006-08-09 Thread Jim Maul
Alejandro wrote: Nigel Horne wrote: Finally I could install my first mail server with sendmail+clamav+clamav-milter among others packages. Because I'm a newbie I have these two short questions: 1) Does clamav remove virus from mail messages or it just scan and warn about virus ???

Re: [Clamav-users] (no subject)

2006-07-26 Thread Jim Maul
Tim Jordan wrote: Is this really a virus? No, but thats debatable. HTML.Phishing.Pay-157 I think its junk mail but CLAMAV reports it as a virus. What else would clamav report it as? Its a virus scanner. Call it junk mail, spam, just plain garbage, etc. The point is, its potentially

Re: [Clamav-users] Small number of ClamAV known viruses ?

2006-07-18 Thread Jim Maul
Daniel J McDonald wrote: On Tue, 2006-07-18 at 17:11 +0200, Zvi Kave wrote: Why ClamAV has significally small number of known viruses in comparison to other AV software ? I don't think that's true. 62 thousand signatures is a healthy amount. main.cvd is up to date (version: 39, sigs: 58116,

Re: [Clamav-users] Virus Definitions on a Private Network

2006-07-18 Thread Jim Maul
Kathy Rossi wrote: Greetings, I am a new CLAMAV user. Is there any documentation anywhere that descibes how to load new Virus definitions onto a system (and network) that is not attached to the internet? http://www.clamav.net/faq.html#pagestart #26 -Jim

Re: [Clamav-users] Bug with --remove??

2006-06-15 Thread Jim Maul
Daniel T. Staal wrote: On Thu, June 15, 2006 11:13 am, Kevin Lowe said: Hi, I accidentally issued the following command where I mis-spelled remove: $ ./clamscan --remov /usr/home/projects/virus/ And it actually removed the file. I would expect either an error or the flag to be ignored. Is

Re: Out of Office AutoReply: [Clamav-users] Question About Quarantine

2006-05-17 Thread Jim Maul
Dennis Peterson wrote: Wiltshire, Michael wrote: I am currently out of office and will return on Wednesday 31st May 2006 . Please report any urgent matters to the help desk at 4008, or the computer room at 6013. People - please think long and hard before enabling broken auto-responders.

Re: Out of Office AutoReply: [Clamav-users] Question About Quarantine

2006-05-17 Thread Jim Maul
Daniel T. Staal wrote: On Wed, May 17, 2006 12:12 pm, Jim Maul said: If you are on a mail list such as this, think longer and harder than usual. Then don't do it. Right. That seems like an acceptable solution. Hell, why even have autoresponders at all then? I figure autoresponders

Re: Clam is run or not ?? was:[Re: [Clamav-users] Can't initializethe virus database]

2006-05-15 Thread Jim Maul
Rob MacGregor wrote: On 5/15/06, Salvatore Basso [EMAIL PROTECTED] wrote: ..I do not know like executing freshclam !!, with the previous clamav version I executed: #/usr/local/bin/freshclam - d ...but after the installation of the new clamav version I don't have nothing in

Re: [Clamav-users] aucun objet

2006-04-27 Thread Jim Maul
larondedesarts wrote: What can I do when I've done a scan and this appear. See the attachement Please help umm...what attachment? -Jim ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Clam-AV Corrupt

2006-04-21 Thread Jim Maul
Fahmi (JN) wrote: Dear All. I had problem with Clam-AV, see the error below: Apr 21 09:52:18 mx1a X-Qmail-Scanner-1.25: [mx1a.ha.jetcoms.net114558793049323571] clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms problem - exit status 64 Question: What does cause this

Re: [Clamav-users] clamscan error and requirements

2006-04-20 Thread Jim Maul
roger martinez wrote: i saw your message and i tried So , no succes ! i just modify clamd.conf in TemporaryDirectory uncomment line and put /usr/local/tmp clamav continue to work with /tmp i don't know what to do Best regards Roger Martinez Did you kill clamd and restart it? dp

Re: [Clamav-users] hostnames and aliases reported incorrectly on inux

2006-04-14 Thread Jim Maul
Blackburn, Marvin wrote: I am running cfg2html-linux 1.14-3 for rhel 3.0 up5 I cloned this system from another and the report is generating the wrong hostname and alias information. I've checked /etc/hosts and /etc/sysconfig/network and /etc/sysconfig/network-scripts and all the information

Re: [Clamav-users] clamscan delete the entire mailbox

2006-02-23 Thread Jim Maul
Jason Haar wrote: Richard Feldmann wrote: It might be best to find a scanning system that checks at the smtp level, rather than scanning the mailbox of the user manually. This would delete the virus as it's being transferred while preserving the message, and you wouldn't have the same issue

Re: [Clamav-users] Clamav and qmail-scanner problem?

2006-02-14 Thread Jim Maul
Sam DeForest wrote: Does this look right? I have been watching the full header information lately to see if mails are being scanned with purpose. Im noticing that (or what seems like) Clamav is using an older database. Here is a snippet of the header of one message.. [EMAIL PROTECTED],

Re: [Clamav-users] minor bug in manager.c

2006-01-20 Thread Jim Maul
Bob Hutchinson wrote: There is a thread going on in the logwatch ML, pertaining to a bug found in the freshclam logging. It would appear to occur when syslog is used rather than freshclam's own log in Fedora. Looking at clamav-devel/freshclam/manager.c Line 67 logg(ClamAV update process

Re: [Clamav-users] minor bug in manager.c

2006-01-20 Thread Jim Maul
Bob Hutchinson wrote: On Friday 20 Jan 2006 18:01, Jim Maul wrote: Bob Hutchinson wrote: There is a thread going on in the logwatch ML, pertaining to a bug found in the freshclam logging. It would appear to occur when syslog is used rather than freshclam's own log in Fedora. Looking at clamav

Re: [Clamav-users] Report infected mail to the user

2006-01-05 Thread Jim Maul
[EMAIL PROTECTED] wrote: Hi, I'm using Exim4, Courier and clamav. Clamav works fine on my server. When an infected message is detected, clamav removes it and sends a report to the sender. Is it possible to inform the recipient about the rejected mail? Yes it is possible, but clamav doesnt

Re: [Clamav-users] what is the default port that clamav (clamd) runs on

2005-11-28 Thread Jim Maul
Todd Lyons wrote: Grant Basson wanted us to know: Should you ever come back to visit this list you'll learn that everything you need to know about this can be found in your clamd.conf file. That leaves for you the challenge of finding that clamd.conf file. I feel like a twit, but here goes

Re: [Clamav-users] clamdscan doens't recognize virus

2005-09-22 Thread Jim Maul
Marco Berizzi wrote: AAAHH!!! Find! ;-) Here is the option: ArchiveMaxFileSize 500k Commenting this option has solved the problem. I really don't undestand. Umm..i wouldnt comment it. You might want to just consider raising the limit. Its there for a

Re: [Clamav-users] handle_user: unable to find user

2005-09-01 Thread Jim Maul
Fast Johnny wrote: I keep seeing these messages in my mail.info: Aug 31 10:46:40 localhost spamd[19280]: connection from localhost.localdomain [127.0.0.1] at port 60582 Aug 31 10:46:40 localhost spamd[19280]: handle_user: unable to find user '[EMAIL PROTECTED]'! Aug 31 10:46:40 localhost

Re: [Clamav-users] viruses database is not updating

2005-08-01 Thread Jim Maul
Lingeshwar Pothani wrote: Dear All, We have installed and configured Clamscan in 2004. when i run /usr/local/bin/freshclam --quiet -l /var/log/clam-update.log it gives the following error in above log file ERROR: md5 sum not found on remote server ERROR: Can't get viruses.md5 sum from

Re: [Clamav-users] uncompressed zip size of Zero

2005-07-27 Thread Jim Maul
q# wrote: On Wed, Jul 27, 2005 at 10:46:42AM -0700, [EMAIL PROTECTED] wrote: Is there currently a work around to avoid this situation? Is anyone just rejecting messages with a zip that has a zip header that says the file size is Zero when uncompressed? Could you be more specific, I don't

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Jim Maul
Thomas Booms wrote: Hello all, I've just upgraded from 0.86.1 to 0.86.2. The test tells me this: freshclam -v Current working dir is /usr/local/share/clamav Max retries == 3 ClamAV update process started at Tue Jul 26 13:17:22 2005 Querying current.cvd.clamav.net TTL: 900 Software version from

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Jim Maul
Steven Spence wrote: Jim Maul wrote: And in the latest emails i got I see this: Received: (qmail 13171 invoked by uid 567); 26 Jul 2005 11:13:53 - Received: from 83.195.210.114 by host1 (envelope-from [EMAIL PROTECTED], uid 502) with qmail-scanner-1.25 (clamdscan: 0.86.1/993

Re: [Clamav-users] Wrong version info in header after upgrade

2005-07-26 Thread Jim Maul
Steven Spence wrote: Diego d'Ambra wrote: Steven Spence wrote: Or you can just edit /var/spool/qmailscan/qmail-scanner-queue-version.txt with the correct version. I am not quite sure why qmail-scanner just doesn't pull the version from the clamd binary instead of a text file.

Re: [Clamav-users] Libclamav and zip files

2005-07-22 Thread Jim Maul
Eric Scopinho wrote: But if I do that, some side effects could happen like: - I'll need free space to store the file. - The infected packets may get in while I store the next packets to scan. - I have to download the whole file before send it to the end-user. I'm trying to develop some sort of

Re: [Clamav-users] virusDB update issue

2005-07-21 Thread Jim Maul
Dawson wrote: I upgraded from an earlier version of clamav due to outdated db and had problems. The only one I will mention at the moment is that the freshclam.log keeps being overwritten by root and rendering it unable to be opened. I change the ownership to clamav (which is running clamav

Re: [Clamav-users] Problem with zip password

2005-07-19 Thread Jim Maul
Marcos Dutra wrote: Hi guys, I use actually clamav 0.86.1 version in my e-mail server, but I have problems with zip files protected by password. I made a test with clamdscan -v *.zip and the result is: clamdscan -v *.zip /home/ricardo/Cpa.zip: Zip module failure ERROR /home/ricardo/Dbf.zip:

Re: [Clamav-users] Clamav + Exim on FreeBSD

2005-07-07 Thread Jim Maul
Odhiambo Washington wrote: * Christopher X. Candreva [EMAIL PROTECTED] [20050707 17:10]: wrote: On Thu, 7 Jul 2005, Trog wrote: What I wrote and what you wrote are different, hence different results. You are correct. You wrote: http://www.gzip.org/ However, The last modified date of

Re: [Clamav-users] Clamav 0.86 for REDHAT 9

2005-07-05 Thread Jim Maul
Eric Rostetter wrote: Quoting Scott Woodford [EMAIL PROTECTED]: No, unfortunately I don't know of any site that has the 86 rpm packages. Sorry about that. Is there some particular reason you can't use 0.85.1 for now? Scott crash-hat always gets the newest releases out asap for FC1, which

Re: [Clamav-users] Clamav 0.86 for REDHAT 9

2005-07-05 Thread Jim Maul
Damian Mantelli (AUTORED) wrote: Thanks Eric and Jim for your help, this site seems very good but they don´t have the DB file, and Clamd file :( And I don´t know how make the rpm file since the SRC.RPM file :( I really appreciate all your help. best regards Damian Im not sure what you mean

Re: [Clamav-users] Why no actual data in mail header?

2005-07-01 Thread Jim Maul
Jim Maul schrieb: Thomas Booms wrote: Thanks, this works. I didnt understood the text passage above before. My next question is about the option --on-update-execute= in freshclam: is it possible to call qmail-scanner-queue.pl -z with || after reload or on which way could I run both

Re: [Clamav-users] clamav updates - freshclam versus recompiling

2005-06-30 Thread Jim Maul
Casey Allen Shobe wrote: Why do we have to recompile clamav all the time to get updates? I thought that's what freshclam was for. Because something is broken? I've never had to to do that. We were running clamav 0.86 with freshclam, and Worm.Mytob.FM was making it past the filter.

Re: [Clamav-users] 99% CPU load during boot, server freezing

2005-06-14 Thread Jim Maul
Emanuel Nacht wrote: Okay, I think I found the evil-doer, and it's, gladly, not related to clamav. It appears there was an attack running towards one virtual host, which made the load skyrocket of the server - giving clamav only so much cpu time. It's still interesting that clamav showed up in

Re: [Clamav-users] Question about clamd commands

2005-06-07 Thread Jim Maul
Robert Hogan wrote: I don't think it's possible to telnet to a unix socket from the command line... Actually, i believe that with the telnet that comes with freebsd, this is entirely possible. However ive never used any bsd so im really just going on what someone else said. I imagine

Re: [Clamav-users] Clamscan slow on large attachements

2005-05-31 Thread Jim Maul
Fajar A. Nugraha wrote: Jan Alphenaar wrote: open. The problem is now that attachements 4Mb are taking ages to scan. The CPU is now busy for 100% running clamscan. Because the users connect with Outlook Express this application will now say to the user that the mailserver is not responding

Re: [Clamav-users] Clamscan slow on large attachements

2005-05-31 Thread Jim Maul
Fajar A. Nugraha wrote: Jim Maul wrote: 2) Can I configure qmail-scanner to disconnect the smtp session and starts clamav in the background (probably a qmail-scanner question) ? I don't think any MTA is able to do that. I believe qmail does this by default. It does not keep

Re: [Clamav-users] Bug

2005-05-24 Thread Jim Maul
Dennis Peterson wrote: Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem said: Looks like since Clamav 0.84, clamav-milter is crashing every time fleshclam get new definitions. I am running clamav on BSD/OS 4.3.1 It's probably trying to tell you your From:

Re: [Clamav-users] option -V reports wrong database

2005-05-19 Thread Jim Maul
didier.georgieff wrote: On 18 May 2005 09:53:28 +0200 Tomasz Kojm wrote: I just noticed that clamav freshclam 0.85.1 seems to report wrong informations about the virus database There's a bug in your configuration then... == OK, I can imagine that, but unfortunatelly it seems that's this is not

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Sergey wrote: Hello Dennis, Tuesday, May 17, 2005, 5:11:43 PM, you wrote: DP Sergey said: Hello Andrzej, Tuesday, May 17, 2005, 3:52:31 PM, you wrote: AZ Sergey wrote: AZ [...] -rw-r- 1 rootclamav 1265 May 17 15:40 clamd.log AZ ^^ AZ How clamd (in realy user

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Dennis Peterson wrote: Jim Maul said: DP We have a winner! Now if you put that in your startup script and log DP rotation tool you'll have the job finished. why is that? if i'll restart clamd it won't going to change the permissions of clamd.log. and by the way i don't need any log rotation

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Dennis Peterson wrote: Jim Maul said: Dennis Peterson wrote: That would be a good trick if the directory it is found in is owned ro by root. I suppose it could be created by root then chowned to clam_user, but that too presumes much. To make it entirely turnkey the process should see if the user

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Matt Fretwell wrote: Jim Maul wrote: Call me old fashioned, but this is something I like to deal with myself. There's still a roll for the thinking admin. No, dont get me wrong here, im not saying clamav should predict anything. Nor should it have to deal with misconfigured software

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Matt Fretwell wrote: Jim Maul wrote: touch /var/log/test.log Now why does it create the logfile as root? While i get your point, it is irrelevant because it should not log in /var/log/ directly. It should log in /var/log/clamav/ The main point of my point, (I know that sounds weird

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Matt Fretwell wrote: Jim Maul wrote: The main point of my point, (I know that sounds weird), is that an admin who relies upon any piece of software to correctly create and set permissions on the logfile is asking for trouble. Clam is not alone in this. This is not a bug in Clam, it is poor admin

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Dennis Peterson wrote: Jim Maul said: Matt Fretwell wrote: Jim Maul wrote: Call me old fashioned, but this is something I like to deal with myself. There's still a roll for the thinking admin. No, dont get me wrong here, im not saying clamav should predict anything. Nor should it have to deal

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Dennis Peterson wrote: Jim Maul said: Dennis Peterson wrote: Jim Maul said: Matt Fretwell wrote: Jim Maul wrote: Call me old fashioned, but this is something I like to deal with myself. There's still a roll for the thinking admin. No, dont get me wrong here, im not saying clamav should

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Dennis Peterson wrote: Jim Maul said: Dennis Peterson wrote: To the program itself, no. If you tell it to log to / it will, however, it SHOULDNT. See what im saying? To say that clamav *has* to create the log file as root because only root can write to /var/log/ is irrelevant to the issue

Re: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Jim Maul
Dennis Peterson wrote: Jim Maul said: SNIP That doesn't happen if you start it as the run-as user. It happens if you start it as root. That is why I say this bug is not necessarily a bug, but an administrative issue. This was the key piece to the puzzle that i was missing. From the posts

Re: [Clamav-users] Lars Gierling/B-W ist außer Haus. [Scan Mail hat diese Mail auf Viren überprüft]

2005-05-12 Thread Jim Maul
[EMAIL PROTECTED] wrote: I will be out of the office starting 12.05.2005 and will not return until 23.05.2005. Ich werde Ihre Nachricht nach meiner Rückkehr beantworten. In dringenden Fällen kontaktieren Sie bitte meine Kollegen telefonisch oder per Mail. Great, so we get to see this crap for

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-05 Thread Jim Maul
Bart Silverstrim wrote: On May 5, 2005, at 2:38 PM, Matt Fretwell wrote: Bart Silverstrim wrote: This is actually two separate scenarios. That was Daniel's fault instigated by his being vague :) Now, a clever man would put the poison into his own goblet, because he would know that only a great

Re: [Clamav-users] Not accepting input?

2005-05-05 Thread Jim Maul
Mike Nolan wrote: This question was asked, and advised upon, less than four hours ago. Check the archives. Matt, I don't think that thread got to me, I certainly don't recall having seeing it, and I've been watching the list closely because this problem has been bugging me for several days.

Re: [Clamav-users] Maybe a virus Sober.P

2005-05-04 Thread Jim Maul
Bart Silverstrim wrote: On May 4, 2005, at 11:12 AM, Nigel Horne wrote: On Wednesday 04 May 2005 16:02, [EMAIL PROTECTED] wrote: . If you have received this communication in error, please notify me immediately by telephone or fax But you haven't given your telephone and fax number, so how can

Re: [Clamav-users] CLAMD+SIMSCAN+RAR V3 SUPPORT

2005-05-03 Thread Jim Maul
Brian Morrison wrote: On Tue, 03 May 2005 18:55:15 +0100 in [EMAIL PROTECTED] Trog [EMAIL PROTECTED] wrote: On Tue, 2005-05-03 at 18:18 +0100, Brian Morrison wrote: Pretty sure that clamd from 0.84 supports RAR v3 archive scanning. Only CVS currently supports RAR3 scanning. Oh OK, I thought the

Re: [Clamav-users] Zip module failures and Malformed hexstrings and0viruses, Oh my!

2005-04-29 Thread Jim Maul
Brian Morrison wrote: On Fri, 29 Apr 2005 12:09:16 -0500 in [EMAIL PROTECTED] Scott Henderson @ Bunzl Phoenix [EMAIL PROTECTED] wrote: I don't see how to upgrade... Which OS are you using? It may be possible to get a packaged version and install that, if it is in a different directory then you

Re: [Clamav-users] Clamav log file not logging viruses

2005-04-29 Thread Jim Maul
Jose Luis Hime wrote: If I use the option LogSyslog, then the viruses are logged into the file /var/log/maillog correctly. Thanks for your tip, it opened my eyes to that. The problem is that I want a specific logfile to be used, not through the Linux syslog function. So I commented out the

Re: [Clamav-users] clamscan

2005-04-26 Thread Jim Maul
Dwayne Hottinger wrote: Does clamscan automatically delete virus infected files if I run clamscan from the server prompt? For example, If I run clamscan /home/* to scan all home files will it delete the viruses found or just list them? It just lists them. -Jim

Re: [Clamav-users] LibClamAV Error: Can't create temporary file

2005-04-20 Thread Jim Maul
José Miguel López Coronado wrote: Hello everybody. I have been suffering the following problem in my clamd.log: LibClamAV Error: Can't create temporary file /tmp/clamav-d0a0c6a5466f36fc/: Argumento inválido LibClamAV Error: fileblobDestroy: file not saved: report to [EMAIL PROTECTED] This have

Re: [Clamav-users] Can't parse configuration file

2005-04-19 Thread Jim Maul
Mike Partyka wrote: Hello, i only just started working on ClamAV version 0.83 this morning, with a mail server product based on HP's Open Mail, running on a SuSE Ent. Server 9. I am a little confused about the two configuration files /etc/freshclam.conf and /etc/clamav.conf, they seem to overlap

Re: [Clamav-users] Can't parse configuration file

2005-04-19 Thread Jim Maul
Mike Partyka wrote: Hello Jim, Thanks for the response. Um..clamav 0.83 uses clamd.conf, not clamav.conf. This also confused me, when i looked at the man page it indicated that since 0.80 the config file name was changed to clamd.conf, but this does not seem to be the problem as i sym-linked the

Re: [Clamav-users] Re: 0.83 potentially not catching some NetSky/SomeFool virus

2005-04-18 Thread Jim Maul
René Berber wrote: Tomasz Kojm wrote: On Mon, 18 Apr 2005 14:10:35 -0500 René Berber [EMAIL PROTECTED] wrote: does not enable detecting them. Why? because you have to uncomment DisableDefaultScanOptions to enable or disable the other options; even if you have DetectBrokenExecutables uncommented

Re: [Clamav-users] Can phishing be considered one kind of spam ?

2005-04-15 Thread Jim Maul
Samuel Benzaquen wrote: Sweet... here are my selections [x] viruses [x] phishing [x] spam [x] stupid jokes [x] urban myths [x] (company) will pay you $ for every person you forward this to [x] cute puppies [x] sob stories ... [x] completly useless messages from useful mailing lists Oh, no! This

Re: [Clamav-users] Flagging with ClamAV - Not Quarantine

2005-04-01 Thread Jim Maul
Jason Williard wrote: Is it possible to flag mail as infected without actually quarantining the mail using ClamAV? Preferably, I would like to be able to add a header value, such as X-Virus-Status: Yes(or No). This could then be used on the client side or by other custom filtering to decide what

Re: [Clamav-users] eicar within tnef

2005-03-25 Thread Jim Maul
Nigel Horne wrote: I have added decoding for TNEF (winmail.dat) to the CVS version. Well damn, that didnt take very long ;) Keep up the great work guys. -Nigel -Jim ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] eicar within tnef

2005-03-22 Thread Jim Maul
Nigel Horne wrote: On Tue, 2005-03-22 at 21:26, jef moskot wrote: Is anyone having trouble detecting Test #14 (the TNEF test) from http://www.webmail.us/testvirus ? TNEF is on my list of things to do. To be honest it had slipped my memory, and I have spare time at the moment so I'll have a look.

Re: [Clamav-users] freshclam and milter --internal notification

2005-02-22 Thread Jim Maul
Damian Menscher wrote: [6th try to get this sent out.] And i've seen this messages 6 times already. I'm using clamav-milter in the default mode (no --external flag). As such, I see no need to run clamd. But freshclam doesn't like this very much: freshclam[26975]: ERROR: Clamd was NOT

Re: [Clamav-users] Disabling ScanArchive ?

2005-02-22 Thread Jim Maul
Daniel J McDonald wrote: On Tue, 2005-02-22 at 09:57 -0800, [EMAIL PROTECTED] wrote: At 09:39 AM 2/22/2005, you wrote: Due to license issues with the original RAR3.0 unpacker one of our developers is working on a new version written from scratch. It's planned for 0.90. secondly, is there a way to

Re: [Clamav-users] Broken zlib version?

2005-02-16 Thread Jim Maul
Tarjei Knapstad wrote: On Wed, 2005-02-16 at 15:11, Trog wrote: On Wed, 2005-02-16 at 14:57 +0100, Tarjei Knapstad wrote: On Wed, 2005-02-16 at 08:49, Dennis Peterson wrote: snip A simple search in the archive for zlib 1.2.2 turns this up:

  1   2   3   >