Re: [Clamav-users] clamav-milter 0.85.1 processes not going away

2005-05-29 Thread N Fung
Ok! Having watched this when it happened, I can now confirm that these are the sequence of events for a hung clamav-milter process: clamav-milter finds virus and logs these in /var/log/maillog: May 29 17:27:28 idc131 clamav-milter[30450]: j4T8RRO3033496:

Re: [Clamav-users] Memory limit per process hit

2005-05-29 Thread Des Keane
On 27/05/05, Pablo Alsina [EMAIL PROTECTED] wrote: So what we did was to increment the number of childers to an even bigger value. But then we started to hit with other problems: clamav-milter[1932]: ClamAv: thread_create() failed: 12, try again We did an strace to that process, only to

Re: [Clamav-users] Memory limit per process hit

2005-05-29 Thread Joe Maimon
Pablo Alsina wrote: Hi We have been having some problems lately with our installation. We are using Sendmail+clamav-milter+clamd as our antivirus solution, over an RedHat Linux with a 2.4.21 kernel (RH9). This is somewhat outdated. Might I recommend you use the newer Fedora Core's or

[Clamav-users] Error on upgrade from .84 to .85

2005-05-29 Thread Rick Weinbender
When I recently upgraded from clamav .84 to .85 I got an error in freshclam.log as follows: ERROR: Clamd was NOT notified: Can't connect to clamd through /var/run/clamav/clamd.ctl (see log below) Subsequent freshclam updates have not produced this error. Do you think I should be concerned?

Re: [Clamav-users] Error on upgrade from .84 to .85

2005-05-29 Thread Odhiambo Washington
* Rick Weinbender [EMAIL PROTECTED] [20050529 20:03]: wrote: When I recently upgraded from clamav .84 to .85 I got an error in freshclam.log as follows: ERROR: Clamd was NOT notified: Can't connect to clamd through /var/run/clamav/clamd.ctl (see log below) Subsequent freshclam updates

Re: [Clamav-users] Re: Spam from ClamAv digest lists.

2005-05-29 Thread Luca Gibelli
Hello G.W. Haywood, Do you happen to know who this mysterious owner might be? I'll look into it asap. Best regards -- Luca Gibelli (luca at clamav.net) - ClamAV, a GPL virus scanner PGP Key Fingerprint: C782 121E 8C3A 90E3 7A87 D802 6277 8FF4 5EFC 5582 PGP Key Available on: Key Servers ||

[Clamav-users] freshclam - on error send email

2005-05-29 Thread Timothy Omer
Hello everyone, I have been asking on the forms and trying to solve this problem for a few weeks now - I hope you can help me. From cron I run freshclam every 4 hours with the following command. 15 */4 * * */usr/local/bin/freshclam --quiet || mail -s There has been an error updating

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Damian Menscher
On Sun, 29 May 2005, Timothy Omer wrote: From cron I run freshclam every 4 hours with the following command. 15 */4 * * */usr/local/bin/freshclam --quiet || mail -s There has been an error updating ClamAV on the Office Server [EMAIL PROTECTED] /var/log/clamav/freshclam.log Im sure that many

RE: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Timothy Omer
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Damian Menscher Sent: 29 May 2005 19:17 To: ClamAV users ML Subject: Re: [Clamav-users] freshclam - on error send email On Sun, 29 May 2005, Timothy Omer wrote: From cron I run freshclam every 4 hours

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Stephen Gran
On Sun, May 29, 2005 at 07:24:46PM +0100, Timothy Omer said: Thank you for your response Damian, I should have been clearer - the email needs to be sent to an external address. I don't know about your implementation of cron, but mine supports the MAILTO environment variable for exactly this

RE: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Timothy Omer
On Sun, May 29, 2005 at 07:24:46PM +0100, Timothy Omer said: Thank you for your response Damian, I should have been clearer - the email needs to be sent to an external address. I don't know about your implementation of cron, but mine supports the MAILTO environment variable for exactly this

RE: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Damian Menscher
On Sun, 29 May 2005, Timothy Omer wrote: On Sun, May 29, 2005 at 07:24:46PM +0100, Timothy Omer said: Thank you for your response Damian, I should have been clearer - the email needs to be sent to an external address. I don't know about your implementation of cron, but mine supports the

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Stephen Gran
On Sun, May 29, 2005 at 01:58:00PM -0500, Damian Menscher said: I'm not certain the MAILTO construct will work to send the output of different commands to different users, or if it's set for the entire crontab. (It will probably work, I just haven't tried it personally.) The following

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Dennis Peterson
Timothy Omer said: Hello everyone, I have been asking on the forms and trying to solve this problem for a few weeks now - I hope you can help me. From cron I run freshclam every 4 hours with the following command. 15 */4 * * */usr/local/bin/freshclam --quiet || mail -s There has been

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Damian Menscher
On Sun, 29 May 2005, Dennis Peterson wrote: Timothy Omer said: 15 */4 * * */usr/local/bin/freshclam --quiet || mail -s There has been an error updating ClamAV on the Office Server [EMAIL PROTECTED] /var/log/clamav/freshclam.log use: 15 */4 * * */usr/local/bin/freshclam --quiet 21 | mail -s

RE: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Timothy Omer
use: 15 */4 * * */usr/local/bin/freshclam --quiet 21 | mail -s There has been an error updating ClamAV on the Office Server [EMAIL PROTECTED] This should send stderr output to mail and will contain the error message. There is no stdout to capture because of the --quiet parameter. Simpler even

RE: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Timothy Omer
Uhh, unless I'm missing something obvious, that would send an email every 4 hours, usually with no message body, but containing one when there were errors. Definitely NOT what is desired. Or perhaps your mail command works differently than mine? Damian Menscher -- -=#| Physics Grad Student

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Dennis Peterson
Damian Menscher said: On Sun, 29 May 2005, Dennis Peterson wrote: Timothy Omer said: 15 */4 * * */usr/local/bin/freshclam --quiet || mail -s There has been an error updating ClamAV on the Office Server [EMAIL PROTECTED] /var/log/clamav/freshclam.log use: 15 */4 * *

RE: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Dennis Peterson
Timothy Omer said: Thank you all for your help, MAILTO does seem to work. I will try the suggestion above as I can add my own subject. Not sure what 21 does, is there any way I can create an error to test this? (Obviously I can not disconnect the internet to create an update error, as I

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Stephen Gran
On Sun, May 29, 2005 at 09:15:46PM +0100, Timothy Omer said: Thank you all for your help, MAILTO does seem to work. I will try the suggestion above as I can add my own subject. Good. This is the simplest, unless you are managing a farm of multiple platforms and need a script that works on all

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Stephen Gran
On Sun, May 29, 2005 at 01:42:32PM -0700, Dennis Peterson said: You could try a trivial example by creating a cron job that will fail. This can be done by requesting execution of a process that doesn't exist. * * * * * /tmp/junk 2$1 |/usr/bin/mail -s this is a test [EMAIL PROTECTED] If you

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Dennis Peterson
Stephen Gran said: On Sun, May 29, 2005 at 01:42:32PM -0700, Dennis Peterson said: You could try a trivial example by creating a cron job that will fail. This can be done by requesting execution of a process that doesn't exist. * * * * * /tmp/junk 2$1 |/usr/bin/mail -s this is a test [EMAIL

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-29 Thread Jan Pieter Cornet
On Thu, May 26, 2005 at 12:34:03PM -0500, Damian Menscher wrote: some people never learn. Looking forward to 0.90, when these debates can finally end. They can end NOW, for two reasons: first because subject has been beaten to death and then some more already, and second because there's a

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Stephen Gran
On Sun, May 29, 2005 at 03:29:03PM -0700, Dennis Peterson said: Stephen Gran said: And I said in the next post this is not the way I'd do it. And you've spoiled the fun that was sure to come in the OP's next question, so let's get right to the issue at hand. I am not sure what the point of

Re: [Clamav-users] Reporting Phishing Mails?

2005-05-29 Thread Matt Fretwell
Jan Pieter Cornet wrote: Looking forward to 0.90, when these debates can finally end. They can end NOW, for two reasons: first because subject has been beaten to death and then some more already, and second because there's a documented solution NOW, too. Well, you have just made sure

Re: [Clamav-users] freshclam - on error send email

2005-05-29 Thread Dennis Peterson
Stephen Gran said: On Sun, May 29, 2005 at 03:29:03PM -0700, Dennis Peterson said: Stephen Gran said: And I said in the next post this is not the way I'd do it. And you've spoiled the fun that was sure to come in the OP's next question, so let's get right to the issue at hand. I am not sure

[Clamav-users] Zip files not being scanned

2005-05-29 Thread Frode Egeland
Hi all, I'm not 100% sure this is the correct list to ask this, but as the problem relates to ClamAV, I hope someone will have the answer for me. I've got a mail filter server set up, running postfix, amavisd-new, SpamAssassin and ClamAV. This morning, it was found that a worm had somehow

[Clamav-users] Re: Zip files not being scanned

2005-05-29 Thread René Berber
Frode Egeland wrote: Hi all, Howdy. I'm not 100% sure this is the correct list to ask this, but as the problem relates to ClamAV, I hope someone will have the answer for me. I've got a mail filter server set up, running postfix, amavisd-new, SpamAssassin and ClamAV. This morning, it

RE: [Clamav-users] Re: Zip files not being scanned

2005-05-29 Thread Frode Egeland
Any hints will be very much appreciated! Was the zip file encrypted? Doesn't sound like it was since you ran it through the online scanner, but those are potentially the only zip files that can pass through. Not encrypted, as you expected. What version of clamav are you using? or more