Re: [clamav-users] reduce memory footprint by removing some virusdefinitions on a low memory server

2018-01-26 Thread Al Varnell
The problem is clearly with daily.cld which was the only thing updated today, so disabling it should work for now. mirrors.dat has nothing to do with signatures. It just keeps track of the mirrors used and any failures associated with them to prevent their use if necessary. -Al- On Fri, Jan 2

Re: [clamav-users] Anyone notice any issues with clamav 0.99.2 and recent patterns?

2018-01-26 Thread Ralf Hildebrandt
* Karl Pielorz : > This ends up with a lot of wedged mail processes (and we slowly run out of > fd's as the process table fills up). Same here on Ubuntu 16.04 with official patterns. -- Ralf Hildebrandt Charite Universitätsmedizin Berlin ralf.hildebra...@charite.deCamp

Re: [clamav-users] reduce memory footprint by removing some virusdefinitions on a low memory server

2018-01-26 Thread Rajesh M
hi this is what i did on my mail server cd /var/lib/clamav mv daily.cld daily.cld.BAK mv main.cld main.cld.BAK mv bytecode.cld bytecode.cld.BAK mv mirrors.dat mirrors.dat.BAK kept foxhole_all and badmacro.ndb unoffical which handles all kinds of bad attachments / macros. also have spam-assas

Re: [clamav-users] reduce memory footprint by removing some virus definitions on a low memory server

2018-01-26 Thread Reindl Harald
Am 26.01.2018 um 09:41 schrieb Sophie Loewenthal: Hi everybody, Would removing some of the virus definitions on a memory sparse server still leave a semi-usable clamav scanner? e.g if I just left main.cvd bytecode.cvd and dropped daily.cvd? Or some other config. e.g just kept the unoffica

[clamav-users] reduce memory footprint by removing some virus definitions on a low memory server

2018-01-26 Thread Sophie Loewenthal
Hi everybody, Would removing some of the virus definitions on a memory sparse server still leave a semi-usable clamav scanner? e.g if I just left main.cvd bytecode.cvd and dropped daily.cvd? Or some other config. e.g just kept the unoffical sigs and the bytecode. I realize this is reducing

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Rajesh M
yes all our servers are stuck disabled official signatures we have sanesecurity foxhole foxhole_all.cdb -- customized for our use which blocks all bad attachments it seems to work now. rajesh - Original Message - From: Reindl Harald [mailto:h.rei...@thelounge.net] To: clamav-users@l

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Reindl Harald
Am 26.01.2018 um 09:19 schrieb Marco: Il 26/01/2018 09:00, Reindl Harald ha scritto: freshclam and a custom script downloads anything to /var/lib/clamav-download and then for the two "/var/lib/clamav" and "/var/lib/clamav-sa" basend on file-lists hardlinks are set - from the official only "s

Re: [clamav-users] Anyone notice any issues with clamav 0.99.2 and recent patterns?

2018-01-26 Thread maxal
On Fri, 2018-01-26 at 08:11 +0100, lukn wrote: > Same on a machine with clamav-milter: > > clamav-milter[8241]: Failed to initiate streaming/fdpassing > clamav-milter[8241]: Unknown reply from clamd > clamd[11895]: instream(127.0.0.1@49958): Can't open file or directory > ERROR > clamav-milter[824

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Marco
Il 26/01/2018 09:00, Reindl Harald ha scritto: freshclam and a custom script downloads anything to /var/lib/clamav-download and then for the two "/var/lib/clamav" and "/var/lib/clamav-sa" basend on file-lists hardlinks are set - from the official only "safebrowsing" is active We have the same

Re: [clamav-users] URGENT: Clamd is wedged on multiple installations

2018-01-26 Thread Reindl Harald
Am 26.01.2018 um 08:32 schrieb Dianne Skoll: Something went badly wrong with clamd recently; it's stuck with hundreds/thousands of open files per process and interrupting mail flow. When a scanning thread finishes, I see this in the strace output. (I ran clamdscan /etc/hosts as a test): [pid

<    1   2