[Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Philipp Ringli
hi all, i am getting this message from my server every once in a while: Cron [EMAIL PROTECTED] nice -n 19 run-parts /etc/cron.daily run-parts: /etc/cron.daily/freshclam exited with return code 1 error: Ignoring xdm.rpmnew, because of .rpmnew ending is something wrong? cheers, phil

[Clamav-users] How infectious is the GPL?

2004-06-21 Thread Paul Smith
Sorry if this is a FAQ - I've searched and can't find anything about it anywhere.. We have a commercial product, which we want to keep commercial. It's some email server software, which has the capability to run an external virus scanner (currently it supports several commercial virus

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Jeremy Kitchen
IANAL. Take my answers below with a grain of salt. On Monday 21 June 2004 04:04 am, Paul Smith wrote: There are several possibilities I've come up with: - add support for our software to either load libclamav or talk to clamd directly, if those things are installed. This seems to me that we'd

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Jeremy Kitchen
On Monday 21 June 2004 04:45 am, Jeremy Kitchen wrote: IANAL. Take my answers below with a grain of salt. [snip] that would be horribly infectious. That's like saying Ooo, I wrote an GPL'd for outlook, now microsoft has to give me their source! *cough* GPL'd plugin. -Jeremy -- Jeremy

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread John Leach
On Mon, 2004-06-21 at 10:04 +0100, Paul Smith wrote: Sorry if this is a FAQ - I've searched and can't find anything about it anywhere.. I think this is more of a gpl FAQ http://www.gnu.org/licenses/licenses.html#GPL I believe any linking directly or indirectly (via a shim as you suggest) is a

Re: [Clamav-users] Sendmail pukes (more info)

2004-06-21 Thread Craig Green
Nigel Horne wrote: Are you running clamd with INET or UNIX domain sockets? If the former try telneting to clamd and see if it talks. If he's using FreeBSD, he can also telnet to a Unix socket with 'telnet -u /path/to/socket': - cgreen:VMail1:/home/cgreen# telnet -u

[Clamav-users] Re: bug in clamdscan

2004-06-21 Thread seph
As Designed, if this really is as designed, is IMO, a REALLY DUMB design. Defeats the whole idea of a daemon. If I remember correctly, you're complaining that the clamdscan only scans a single file at a time. This is not even a little contradictory, the point of the daemon is to decrease the

[Clamav-users] Virus W32.Erkez.B@mm getting through

2004-06-21 Thread Michael St. Laurent
The Norton Antivirus running on our mail server is catching the virus [EMAIL PROTECTED] which appears to be getting past Clamav. -- Michael St. Laurent Hartwell Corporation --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference

[Clamav-users] Bad Virus Signature?

2004-06-21 Thread Benjamin Sherman
I was wondering if false positives ever make it into the virus DB updates? Since the update on Jun18, all of my windows 2000 workstations with Service Pack 4 are showing what I beleive to be false positives for Worm.Lovgate.W-2. The file in question is spoolsv.exe and can be fond in:

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Tomasz Kojm
On Mon, 21 Jun 2004 10:04:39 +0100 Paul Smith [EMAIL PROTECTED] wrote: We have a commercial product, which we want to keep commercial. It's some email server software, which has the capability to run an [...] There are several possibilities I've come up with: - add support for our software

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Jeremy Kitchen
On Monday 21 June 2004 06:54 am, John Leach wrote: I don't believe talking to the daemon via TCP/IP (or even a socket) would be a violation [of the GPL], but along with Jeremy, IANAL (I can sleep at night). I don't see how it possibly could be. That'd be ludicrous. -Jeremy -- Jeremy

[Clamav-users] Scans mail but never finds virus

2004-06-21 Thread Chadwick Wachs
ClamAV is happily scanning all my incoming mail. However, it never finds a virus. I have tested it with known viruses, I have scanned suspect mail that arrived with a local virus scanner on my Mac and found viruses that slipped by and I have used on-line virus tests to send test files.

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Jeremy Kitchen
On Monday 21 June 2004 04:04 pm, Tomasz Kojm wrote: However you cannot: - link against libclamav - directly use the virus databases - include our code in your software (obvious ;-)) could he write a shim that is LGPL'd that links to libclamav? -Jeremy -- Jeremy Kitchen ++ Systems

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Paul Smith
IANAL. Take my answers below with a grain of salt. Of course :-) - our software supports 'shim' DLLs with a standard interface which can talk to a third party antivirus product to add the capability for more virus scanners without recompilation. WE could make one of those to talk to clamav

[Clamav-users] clamd dieing again, got some debug information.

2004-06-21 Thread Christopher X. Candreva
My server's clamd (0.73) has starting dyeing off regularly again (every 10-30 minutes). I've managed to capture some debug information, but somehow haven't gotten it to make a core file yet. Again, compiled under gcc 3.4.0, Solaris 8 on UltraSparc hardware (Sun Ultra 2) Output from running

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Jeremy Kitchen
On Monday 21 June 2004 10:41 am, Paul Smith wrote: IANAL. Take my answers below with a grain of salt. Of course :-) - our software supports 'shim' DLLs with a standard interface which can talk to a third party antivirus product to add the capability for more virus scanners without

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Tomasz Kojm
On Mon, 21 Jun 2004 10:48:05 -0500 Jeremy Kitchen [EMAIL PROTECTED] wrote: On Monday 21 June 2004 04:04 pm, Tomasz Kojm wrote: However you cannot: - link against libclamav - directly use the virus databases - include our code in your software (obvious ;-)) could he write a shim that

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Gerardo Reynoso
On Monday 21 June 2004 04:04, Paul Smith wrote: We have a commercial product, which we want to keep commercial. It's some email server software, which has the capability to run an external virus scanner (currently it supports several commercial virus scanners) We tend to either use commercial

Re: [Clamav-users] clamd dieing again, got some debug information.

2004-06-21 Thread Trog
On Mon, 2004-06-21 at 17:02, Christopher X. Candreva wrote: My server's clamd (0.73) has starting dyeing off regularly again (every 10-30 minutes). I've managed to capture some debug information, but somehow haven't gotten it to make a core file yet. Again, compiled under gcc 3.4.0,

[Clamav-users] clamav-milter does not compile

2004-06-21 Thread Raul Elizondo
Hi guys, I've downloaded the latest version 0.73, and i used the same ./configure options i did with the last version ./configure --enable-milter --sysconfdir=/etc --prefix=/usr but somehow, when i do make i dont see clamav-milter compiled Making all in clamav-milter make[2]: Entering

Re: [Clamav-users] clamd dieing again, got some debug information.

2004-06-21 Thread Christopher X. Candreva
On Mon, 21 Jun 2004, Trog wrote: Are there any files left in this directory: LibClamAV debug: Saving attachment in /tmp/clamav/clamav-5bce8e8e51ede379/textportion clamav-5bce8e8e51ede379 is no longer there, although there are a number of leftover directories. I'll see what happens next

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Mark Mielke
On Mon, Jun 21, 2004 at 06:20:14PM -0400, Tomasz Kojm wrote: - link against libclamav - directly use the virus databases - include our code in your software (obvious ;-)) could he write a shim that is LGPL'd that links to libclamav? Well, I don't know. This is a question to a lawyer.

Re: [Clamav-users] clamav-milter does not compile

2004-06-21 Thread Nigel Horne
On Monday 21 Jun 2004 17:33, Raul Elizondo wrote: ./configure --enable-milter --sysconfdir=/etc --prefix=/usr but somehow, when i do make i dont see clamav-milter compiled Regards, -=Raul=- PD: i am usting RH9 Do you have the 'sendmail-devel' RPM installed? -Nigel -- Nigel Horne.

Re: [Clamav-users] clamd dieing again, got some debug information.

2004-06-21 Thread Christopher X. Candreva
Going through the debug output since the last crash, I see about 20 errors where a VBA scan dir failed on a can't open. It seems to be in the same context as when the last crash occurred. Here is an example: LibClamAV debug: Recognized OLE2 container file LibClamAV debug: in cli_scanole2()

RE: [Clamav-users] clamav-milter does not compile

2004-06-21 Thread Raul Elizondo
Do you have the 'sendmail-devel' RPM installed? -Nigel I just figured it out before i got this answer. Now it compiles, thanks -=Raul=- --- This SF.Net email sponsored by Black Hat Briefings Training. Attend Black Hat Briefings

[Clamav-users] FW: Virus W32.Erkez.B@mm getting through

2004-06-21 Thread Michael St. Laurent
Michael St. Laurent wrote: The Norton Antivirus running on our mail server is catching the virus [EMAIL PROTECTED] which appears to be getting past Clamav. Please disregard. The autoupdater was not working. Erkez is detected by Clamav as Zafi. My mistake. -- Michael St. Laurent Hartwell

Re: [Clamav-users] clamd dieing again, got some debug information.

2004-06-21 Thread Christopher X. Candreva
Here's the latest crash output: LibClamAV debug: Recognized Raw mail file LibClamAV debug: Starting cli_scanmail(), reclev 3 LibClamAV debug: in mbox() LibClamAV debug: Recognized Raw mail file LibClamAV debug: Deal with header Received: by clamd LibClamAV debug: parseEmailHeader 'Received: by

[Clamav-users] Lib GNU MP on Solaris

2004-06-21 Thread Thomas Jackson
According to the FAQ and the configure script I need to install GNU MP on my Solaris 8 system so that clam will support digital signatures. I've installed GMP 2.0.2, 3.1, and 4.1.3 on test systems and none will satisfy the configure script. What am I missing?

Re: [Clamav-users] Lib GNU MP on Solaris

2004-06-21 Thread Peter Bonivart
Thomas Jackson wrote: According to the FAQ and the configure script I need to install GNU MP on my Solaris 8 system so that clam will support digital signatures. I've installed GMP 2.0.2, 3.1, and 4.1.3 on test systems and none will satisfy the configure script. What am I missing? Did you set

Re: [Clamav-users] bug in clamdscan

2004-06-21 Thread Philip Ershler
If you don't like the software, and are unhappy about how much you paid for it, contact the Clamav team and ask for a job. Just my 2 cents. Phil On Jun 20, 2004, at 10:25 PM, Dan Egli wrote: Fajar A. Nugraha wrote: Dan Egli wrote: [EMAIL PROTECTED] root]# clamdscan $PWD /root: Can't access the

[Clamav-users] clamav and stdin

2004-06-21 Thread seph
I'm slowly building a virus scanner for use with my MTA. I'd prefer to avoid juggling temp files, and want to send things to clamscan via stdin. But, clamscan doesn't detect things when passed via stdin. using clamscan 0.73 as downloaded today, and the test virus files on fedora: (0 is clean, 1

Re: [Clamav-users] bug in clamdscan

2004-06-21 Thread Dan Egli
Philip Ershler wrote: If you don't like the software, and are unhappy about how much you paid for it, contact the Clamav team and ask for a job. Just my 2 cents. Phil First, it was just a suggestion! Second, Fix your clock! It's not 11 pm Sunday! -- -- Dan

Re: [Clamav-users] bug in clamdscan

2004-06-21 Thread Phil Ershler
It was when I composed this message. I just couldn't get connected to a network until this morning. I was really quite serious. If you want to make a contribution, contact the the Clamav team. Phil On Jun 21, 2004, at 1:35 PM, Dan Egli wrote: Philip Ershler wrote: If you don't like the

Re: [Clamav-users] Bad Virus Signature?

2004-06-21 Thread [EMAIL PROTECTED]
Benjamin Sherman said: I was wondering if false positives ever make it into the virus DB updates? Since the update on Jun18, all of my windows 2000 workstations with Service Pack 4 are showing what I beleive to be false positives for Worm.Lovgate.W-2. The file in question is spoolsv.exe and

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Todd Lyons
Philipp Ringli wanted us to know: hi all, i am getting this message from my server every once in a while: Cron [EMAIL PROTECTED] nice -n 19 run-parts /etc/cron.daily run-parts: /etc/cron.daily/freshclam exited with return code 1 error: Ignoring xdm.rpmnew, because of .rpmnew ending is something

Re: [Clamav-users] Bad Virus Signature?

2004-06-21 Thread Kevin Spicer
On Mon, 2004-06-21 at 16:05, Benjamin Sherman wrote: I was wondering if false positives ever make it into the virus DB updates? They do Since the update on Jun18, all of my windows 2000 workstations with Service Pack 4 are showing what I beleive to be false positives for Worm.Lovgate.W-2.

Re: [Clamav-users] bug in clamdscan

2004-06-21 Thread Dan Egli
Phil Ershler wrote: It was when I composed this message. I just couldn't get connected to a network until this morning. I was really quite serious. If you want to make a contribution, contact the the Clamav team. Phil I would if I could code in C. I cann't do C to save my life. It has always

Re: [Clamav-users] Bad Virus Signature?

2004-06-21 Thread Benjamin Sherman
Sumbitted. Thanks for the suggestion... I hadn't realized one could submit false positives. Kevin Spicer wrote: On Mon, 2004-06-21 at 16:05, Benjamin Sherman wrote: I was wondering if false positives ever make it into the virus DB updates? They do Since the update on Jun18, all of my windows

Re: [Clamav-users] Bad Virus Signature?

2004-06-21 Thread Tomasz Papszun
On Mon, 21 Jun 2004 at 15:02:45 -0500, [EMAIL PROTECTED] wrote: Benjamin Sherman said: I was wondering if false positives ever make it into the virus DB updates? Since the update on Jun18, all of my windows 2000 workstations with Service Pack 4 are showing what I beleive to be false

Re: [Clamav-users] Bad Virus Signature?

2004-06-21 Thread Benjamin Sherman
Tomasz Papszun wrote: On Mon, 21 Jun 2004 at 15:02:45 -0500, [EMAIL PROTECTED] wrote: Benjamin Sherman said: I was wondering if false positives ever make it into the virus DB updates? Since the update on Jun18, all of my windows 2000 workstations with Service Pack 4 are showing what I beleive to

[Clamav-users] New install

2004-06-21 Thread Thomas Jackson
I've tested mimedefang SA and clamav and everything went nicely. Now comes the install of said software on two solaris 8 systems and clamav is acting up on one of the systems. Every so often clamav is dieing. I would like to get a little more information about the crash. I've turned on verbose

Re: [Clamav-users] Lib GNU MP on Solaris

2004-06-21 Thread Thomas Jackson
Setting LD_LIBRARY_PATH and copying a header file to /usr/include worked. On Mon, 2004-06-21 at 12:04, Peter Bonivart wrote: Thomas Jackson wrote: According to the FAQ and the configure script I need to install GNU MP on my Solaris 8 system so that clam will support digital signatures.

Re: [Clamav-users] Scans mail but never finds virus

2004-06-21 Thread Matt
ClamAV is happily scanning all my incoming mail. However, it never finds a virus. I have tested it with known viruses, I have scanned suspect mail that arrived with a local virus scanner on my Mac and found viruses that slipped by and I have used on-line virus tests to send test files.

Re: [Clamav-users] Bad Virus Signature?

2004-06-21 Thread [EMAIL PROTECTED]
Tomasz Papszun said: On Mon, 21 Jun 2004 at 15:02:45 -0500, [EMAIL PROTECTED] wrote: Benjamin Sherman said: I was wondering if false positives ever make it into the virus DB updates? Since the update on Jun18, all of my windows 2000 workstations with Service Pack 4 are showing what I

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Philipp Ringli
sorry. i am a bloody beginner... this is what i could find: [EMAIL PROTECTED] stats]# locate xdm /usr/share/doc/HOWTO/HTML/en/XDM-Xterm/xdm-advconfig.html /usr/share/doc/HOWTO/HTML/en/XDM-Xterm/xdm.html /usr/share/doc/HOWTO/HTML/en/XFree-Local-multi-user/dm_conf-xdm_kdm.html /usr/X11R6/bin/xdm

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Antony Stone
On Monday 21 June 2004 11:11 pm, Philipp Ringli wrote: sorry. i am a bloody beginner... this is what i could find: [EMAIL PROTECTED] stats]# locate xdm /usr/share/doc/HOWTO/HTML/en/XDM-Xterm/xdm-advconfig.html /usr/share/doc/HOWTO/HTML/en/XDM-Xterm/xdm.html

Re: [Clamav-users] bug in clamdscan

2004-06-21 Thread Lee W
Dan Egli wrote: Phil Ershler wrote: It was when I composed this message. I just couldn't get connected to a network until this morning. I was really quite serious. If you want to make a contribution, contact the the Clamav team. Phil I would if I could code in C. I cann't do C to save my life.

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Todd Lyons
Antony Stone wanted us to know: /etc/pam.d/xdm /etc/pam.d/xdm.rpmnew /etc/logrotate.d/xdm /etc/logrotate.d/xdm.rpmnew so which one shal i eliminate? Rather than searching for xdm (which is what you want to leave in place) you would have got a shorter output from a search for xdm.rpmnew

Re: [Clamav-users] Scans mail but never finds virus

2004-06-21 Thread Chadwick Wachs
Well, can you give me a starting point to check the config? I guess this is where I am stuck at this point. I have checked the config to the best of my knowledge. It used to work perfectly on my previous version but after updating both ClamAV and cgpav, it has since stopped. I kept my old

Re: [Clamav-users] Scans mail but never finds virus

2004-06-21 Thread Matt
Well, can you give me a starting point to check the config? I guess this is where I am stuck at this point. I have checked the config to the best of my knowledge. It used to work perfectly on my previous version but after updating both ClamAV and cgpav, it has since stopped. I kept

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Dan Egli
Philipp Ringli wrote: sorry. i am a bloody beginner... We all have to start somewhere. /etc/logrotate.d/xdm.rpmnew so which one shal i eliminate? That one. And xdm.rpmnew has nothing to do with clam. You're seeing two different messages in the logwatch. logrotate ignores files ending in

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Philipp Ringli
On 22.06.2004, at 02:17, Dan Egli wrote: Philipp Ringli wrote: sorry. i am a bloody beginner... We all have to start somewhere. /etc/logrotate.d/xdm.rpmnew so which one shal i eliminate? That one. And xdm.rpmnew has nothing to do with clam. You're seeing two different messages in the logwatch.

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Damjan
However you cannot: - directly use the virus databases How come? As far as I know, copyright law doesn't protect databases. -- damjan | This is my jabber ID -- [EMAIL PROTECTED] -- not my mail address!!! --- This SF.Net email sponsored

Re: [Clamav-users] How infectious is the GPL?

2004-06-21 Thread Joseph A. Nagy, Jr.
On Tue, Jun 22, 2004 at 03:30:19AM +0200, Damjan wrote the following: However you cannot: - directly use the virus databases How come? As far as I know, copyright law doesn't protect databases. You haven't been keeping up. Congress is pushing really hard (if they haven't already passed

Re: [Clamav-users] Error Loading Bootup Script

2004-06-21 Thread sarky
Okie let me try and give you guys more details OS: RH 9 Clamav : 0.72 GCC: gcc version 3.2.2 20030222 Error i am getting from log/maillog Jun 22 02:47:43 sendmail[15427]: i5M1lhE9015427: Milter (clmilter): local socket name /var/run/clamav/clmilter.sock unsafe Jun 22 02:47:43 sendmail[15427]:

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-21 Thread Dan Egli
Philipp Ringli wrote: That one. And xdm.rpmnew has nothing to do with clam. You're seeing two different messages in the logwatch. logrotate ignores files ending in .rpm[new|old]. That is one error. The other, indicating frashclam existed with a return code of 1 is completely unrelated. I'd run

Re: [Clamav-users] Error Loading Bootup Script

2004-06-21 Thread Nigel Horne
On Tuesday 22 Jun 2004 02:55, sarky wrote: Error i am getting from log/maillog Jun 22 02:47:43 sendmail[15427]: i5M1lhE9015427: Milter (clmilter): local socket name /var/run/clamav/clmilter.sock unsafe Jun 22 02:47:43 sendmail[15427]: i5M1lhE9015427: Milter (clmilter): to error state Have