[Clamav-users] Re: 432 Mail filters temporarily unavailable help

2006-11-09 Thread Julian Mehnle
Sunet Sysadmin wrote:
 We have a courier mail server.  Running with courier:: filter with
 modules ClamAV(unix socket), SA and SPF. Every thing works good. But all
 of a sudden i get this error.

 submit: Transport endpoint is not connected
 Nov  5 04:03:55 jupiter courieresmtpd:
 error,relay=:::66.63.190.205,from=[EMAIL PROTECTED]: 432 Mail
 filters temporarily unavailable.

 When this error occurs checked if the unix socket is open but doesn't
 seems to be open.

 Once i restart Clamd, Courier it starts working again. Can any one
 please help me with this or point me to the right direction.

I am the author of Courier::Filter.

What Unix socket are you talking about seemingly not being open?  That of 
Courier::Filter, or that of clamd?



pgplICIMloYao.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] To ClamAV Developers: donation question

2006-11-09 Thread Ralph Angenendt
Nigel Horne wrote:
 The simplest way for company is to buy a CD via our site at cafepress
 (see http://www.cafepress.com/clamav.20597653).

Okay, that's a pretty cool idea.

Regards,

Ralph


pgphEKTM99qYM.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] let's all make a regular domation to ClamAV

2006-11-09 Thread Ralph Angenendt
Dennis Peterson wrote:
 Jim Maul wrote:
 Sergei Lavrov wrote:
 Then how about just donating $20 ??
 
 Personally? Sure - I have made past personal donations to various 
 groups.  I was speaking about a commerical donation which is difficult 
 when there is no paperwork submitted.
 
 It's a barrier for us, too. But an invoice implies a contract 
 (performance, term of service, payment schedule/terms, termination, blah 
 blah) and all contracts go through contract negotiation and renewal. It 
 is a legal commercial document that can and will be used in court. It's 
 not impossible to get there but somebody'd better lawyer up.

True. But we - on the other hand - are not allowed to make donations, so
it really is a problem getting someone in Manglement to give some money
to free software projects, even if we're using the software. 

Cheers,

Ralph


pgpR9wEaP884u.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Freshclam cwd error in 0.90rc2

2006-11-09 Thread Gavin Aiken
Hi,

I just upgraded from 0.88.2 to 0.90rc2 to test out the latest release. (OS
is Solaris 8). Everything seems to be working well except I am getting
errors logged by freshclam like this:

Nov  9 12:28:05 shadowfax freshclam[21654]: [ID 702911 local6.error]
getpatch: Can't get path of current working directory
Nov  9 12:28:05 shadowfax freshclam[21654]: [ID 702911 local6.warning]
Removing incremental directory daily.inc
Nov  9 12:28:05 shadowfax freshclam[21654]: [ID 702911 local6.warning]
Incremental update failed, downloading complete database

I'm running freshclam with just the -d switch, and it is starting up from an
rc script (which runs as root of course). The user I am using for all the
clamav processes is smmsp as this fits in well with sendmail. My databases
are in /usr/local/share/clamav which is owned by smmsp:

shadowfax:root:89:clamav:# ls -al /usr/local/share/clamav
total 14054
drwxrwxr-x   2 smmspsmmsp   2048 Nov  9 12:28 ./
drwxr-x--x  13 root other512 May 11  2006 ../
-rw-r--r--   1 smmspsmmsp 244200 Nov  9 12:28 daily.cvd
-rw-rw-r--   1 smmspsmmsp6924820 Nov  3 20:06 main.cvd

I tried changing to that dir in my rc script like this:

[ -x /usr/local/bin/freshclam ]  (cd /usr/local/share/clamav ;
/usr/local/bin/freshclam -d)

but it made no difference.

I never had this error with any of the 0.8x series, it only started when I
upgraded to the test 0.90rc2 release.

Anyone any ideas on this?

thanks,
Gavin


-- 
Gavin Aiken
Technical Director - UK

Tel: +44-1277-246000
Fax: +44-1277-228767
Web: http://www.dtint.com/

Digital Technology International Ltd.
Brentwood House
169 Kings Road
Brentwood
Essex
CM14 4EG

Registered in England No. 1876409


___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] How to test ClamAV

2006-11-09 Thread Richard Feldmann
raja semut spake thusly on Thu, Nov 09, 2006 at 01:15:44PM +0700:
 in Linux Fedora Core 4, i am install qmail-1.03 + qmail-scanner-2.01 + 
 Clamav-0.90rc2 + Mail-SpamAsssassin-3.1.7.
 How i can make sure that Clamav is running well in my qmail server ?
 i try in server /etc/init.d/clamd status
 it show Clamd is running
 but why i can receive e-mail contains virus ?
 
 any one know this problem, please advice me..
 thank you.

--- end quoted text ---

You mentioned that you are using qmail-scanner. Make sure to read the 
documentation for that package. You need to make sure you have the proper 
configuration.

-- 
Regards,
Richard
Did this email or post help you? If so, please rate
me at affero: http://rate.affero.net/RhunDraco


pgpH9jZm6ANkR.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] configure error

2006-11-09 Thread Lux, Linda
./configure on HP 11.0 getting this: configure:16443: error: Need to know
how to pack structures with this compiler

 

Solution please

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] configure error

2006-11-09 Thread Nigel Horne
On Thu, 2006-11-09 at 08:59 -0600, Lux, Linda wrote:
 ./configure on HP 11.0 getting this: configure:16443: error: Need to know
 how to pack structures with this compiler

This is a known problem.

 Solution please

I have asked HP for a help in providing a solution, and they did say
that they'd send one, however none has arrived yet (it was a few weeks
ago). For the moment only GCC is supported on HP-UX.

-Nigel

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Bart Silverstrim


On Nov 7, 2006, at 6:48 PM, Jim Redman wrote:


Chris,



Christopher X. Candreva wrote:

On Tue, 7 Nov 2006, Jim Redman wrote:
Your opinions, seem to be the prevalent attitude of the vocal  
members of this

list - if you don't suffer, it wasn't worth it.

I would disagree, in that I don't see it as suffering.
Forgive me if I missed it, but what is your specific problem ?  
Perhaps we have different definitions of suffering.
The only specific complaint I saw was the message Your version is  
outdated, and that seems to me to be a very simple English  
declarative sentence, with a simple solution. You are running an  
old version, get a new one.


Sorry, my point has nothing to do with my particular suffering or  
any particular aspect of that - or at least only indirectly.


My observation is that of all the modern packages ClamAV fails to  
install and run successfully and securely without operator  
intervention.  I think that this should be refined to reference  
Fedora packages and perhaps not all of them.


There are a number of reasons why I consider this a bad thing  
(other opinions have been expressed by others on the list).


1) It sucks my time because I immediately have to learn more than I  
want to about ClamAV (and freshclam and clamav-milter and the  
interactions between all these applications).


2) The installation is probably going to be sub-optimal because I  
don't have enough time to spend on ClamAV to become the expert that  
others on this list clearly are.


You don't have to be an expert to tune it if you're just reading the  
config file, though.  If you have problems with the server spiking  
CPU usage or running out of RAM, it's not hard to look and see what  
settings would affect that.


If you can't do this and the material is out there for people to  
easily refer to, maybe you're short on staff (and need more people in  
your department) or there's some management problems that keep you  
from effectively doing your job, from the sounds of it.


3) It encourages bad/insecure installations because people  
(including me) without enough time to spend on researching the best  
way to install ClamAV (and associated apps) will be ignorant of  
possible security hole (or not recognize the significance of  
them).  Bad installations could be REALLY bad - is there any way  
ClamAV could be instrumental in generating mails to the SENDER of a  
virus e-mail?


This can be a problem with ANY software.  I don't know anything about  
AutoCAD, yet am expected to install and troubleshoot it at times.  I  
rely on the people who know AutoCAD (but squat about computers) to  
tell me when something is wrong with their install and troubleshoot  
it from there (yes, we're understaffed, otherwise I'd dedicate more  
time to learning it; just the reality of the situation).


It means that either they hire more people, let me dedicate more time  
to troubleshooting and repairing server work, or suffer the  
consequences of the short staffed.  I'm not going to bitch to the  
software programmers that they need to fix my problems that are  
caused by management on my side, though, since there is documentation  
and references available for the software package...I just click  
through the defaults and mop up problems later on.


4) (Altruism) It limits the adoption of ClamAV which in turn  
increase the number/penetration of viruses.


Maybe the project doesn't WANT people who have problems with their  
installs caused by willful ignorance...just a thought.  The OP showed  
this right off with the title cherishing my ignorance.  If someone  
wants a labor-centric job with no skills to enhance, apply at  
McBurger King.  They cherish employees who cherish ignorance because  
they're easy to hire and fire.


IT isn't a McJob that it seems to get treated as.  One person doing  
overlapping job skills without an adequate staff to support them will  
cause problems, and the business needs to recognize that.

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Bart Silverstrim


On Nov 7, 2006, at 6:16 PM, Jim Redman wrote:


Steve,

Steve Holdoway wrote:
 You really do need to get out of the mindset that you don't  
actually need to know what you're doing to administer a server. It  
is *NOT* a trivial task, requires skills to support it, and years  
of experience to do it well.


Your opinions, seem to be the prevalent attitude of the vocal  
members of this list - if you don't suffer, it wasn't worth it.


Is it really suffering if the steps are documented and you can follow  
them?


Suffering to me would be if the steps are outlined somewhere and in  
the course of following those directions, you get errors and  
failures.  Or the routine isn't documented anywhere so you have to  
dig and hunt and infer how to configure something.


If you're a sysadmin and following directions is defined as  
suffering, I think you may have other problems to deal with...


I would argue that I'm know enough about server administration to  
realize that my knowledge of ClamAV will never be as deep as others  
on this list, how much better if they create a secure, stable,  
successful, packaged configuration and everyone (which happens to  
also include me!) benefits from their knowledge.  Or does that  
sound like flamebait?


Because what fits your needs may not fit other people's needs when  
you stop to consider how draconian or how absolutely loose-and-free  
different mail admins can be?  There are still idiots running open  
relays out there. Encouraging people to know what the hell they're  
doing helps separate those idiots from the rest of the populace.


Maybe what would actually be helpful is an automated uninstall/ 
reinstall that asks what options you want set to what values, and  
compares changes from the previous install.  Makes it more tedious  
though.


-Bart
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Re: To ClamAV Developers: donation question

2006-11-09 Thread Per Jessen
Gerard Seibert wrote:

 On Wednesday November 08, 2006 at 11:16:21 (AM) Sergei Lavrov wrote:
 
 Some of the businesses I know do want to make
 donations. But is ClamAV able to issue invoice ?
 
 In other words, you are looking for a tax write off.

No, it's got nothing to do with taxes - it's a matter of practicality;
getting budget approval for a business expense is much easier than for
charity. 



/Per Jessen, Zürich

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Jim Redman

Folks,

I have to say, of all the lists I subscribe to, the vocal members of 
this list are the most arrogant and insulting.  However, I consider 
comments such as Luca Gibelli's, bandwidth wasting, We are happy to 
suffer this loss. and Dennis Peterson's His specific problem is he 
lacks the skill to install and manage the product reflect more about 
the person making the comment, rather than the target.


I would also consider the prevalent attitude misplaced and wrong, and 
before you berate me for knowing nothing, let me say this I've been 
managing mail systems on Linux since the late 1.x releases and build and 
support embedded Linux distros.  If you're following the logic here, 
that still doesn't prove that I know much, but at least I have some 
background...


Somewhere between my teenage years and now, I have enough experience to 
realize that I don't know everything.  I can't create faster/better 
optimized programs using assembler than a high level language, and I'm 
not the worlds most knowledgeable Linux security expert.  The many 
packages that make up Linux are better understood by those who created 
and maintain them and these people are the most qualified to produce 
secure configurations of these packages.  Even if I DID understand a 
package better than the maintainer, or have a better grasp of security 
than the person producing configuration, I would recognize that having 
more people look at the configuration WILL improve the system.  This is 
one of the basic arguments of Eric Raymond's The Cathedral and the 
Bazaar http://www.firstmonday.org/issues/issue3_3/raymond/


I no longer possess the desire to build Linux systems from scratch, or 
to customize them so heavily that I cannot benefit from the work of some 
of the greats in the community, although I may occasionally humbly make 
suggestions that I think might be of benefit (some of these are not 
necessarily accepted as such).


I'll further encourage these efforts because, having done this for a 
while, I realize that it _IS_ now possible for someone who knows almost 
nothing about Linux administration to take a distro, install it, update 
it using one of the package managers and have a secure, if sub-optimal 
installation, taking the defaults at installation.  When I realize that 
this person might otherwise have put Windows on the net and become 
another spam and virus spewing Bot I feel that anything that can be done 
to make the standard distros easier to use, and so to encourage their 
uptake, is good.


And yet, when you suggest that one of the advances that ClamAV could 
make is to be in a position to help these people, the responses 
represent an elitist (and mis-guided) attitude that everyone should be a 
highly skill sysadmin more knowledgeable of the ClamAV system.


So, now you have some more flamebait.  I'm signing off, because, for the 
vocal members of this list at least, Scott Adams seems to have the right 
idea (http://dilbertblog.typepad.com/):


Let me begin by saying I don’t debate with advocates. An advocate says 
that everything is right about one position and everything is wrong 
about the other side. You might as well debate with a doorknob.


Jim

--
Jim Redman
(505) 662 5156 x85
http://www.ergotech.com
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Daniel J McDonald
On Thu, 2006-11-09 at 10:24 -0500, Bart Silverstrim wrote:
 On Nov 7, 2006, at 6:48 PM, Jim Redman wrote:
 
  Chris,
 
 
 
  Christopher X. Candreva wrote:
  On Tue, 7 Nov 2006, Jim Redman wrote:

  My observation is that of all the modern packages ClamAV fails to  
  install and run successfully and securely without operator  
  intervention.  I think that this should be refined to reference  
  Fedora packages and perhaps not all of them.

I don't use Fedora - I use Mandriva.  And my experience has been that
the RPMS provided by Mandriva do allow you to run out of the box with
very little tweaking.  That is important to me - I manage about 20 linux
servers, but my primary responsibility is 196 routers and firewalls.
I'm not ignorant of the build process - I learned how to build SRPM's
working with this package - I merely don't have the time to mess with
it.  So, I understand the sentiment.

 
  There are a number of reasons why I consider this a bad thing  
  (other opinions have been expressed by others on the list).
 

  4) (Altruism) It limits the adoption of ClamAV which in turn  
  increase the number/penetration of viruses.
 
 Maybe the project doesn't WANT people who have problems with their  
 installs caused by willful ignorance...just a thought.  

I personally think that's a poor attitude.  Clueless newbies are
important too.  I personally will dump a project that takes too long to
get working at all.  As long as I can see progress it will keep my
interest.

For example, the Hobbitmonitor project is buried deep on my todo list -
There are about 15 post release patches that have to be individually
applied in a certain order, and I have yet to get it right and have it
compile.  So I ignore it, and think If I ever get about 4 hours of
un-interrupted time, I'm going to tackle that beast.  Of course, I
don't have 4 hours, so it just gets deeper on the pile, and I never get
my monitoring server built, and I never am able to contribute back to
the project by helping other clueless newbies...

-- 
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
Austin Energy
http://www.austinenergy.com
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Christopher X. Candreva
On Thu, 9 Nov 2006, Daniel J McDonald wrote:

   My observation is that of all the modern packages ClamAV fails to  
   install and run successfully and securely without operator  
   intervention.  I think that this should be refined to reference  
   Fedora packages and perhaps not all of them.
 
 I don't use Fedora - I use Mandriva.  And my experience has been that
 the RPMS provided by Mandriva do allow you to run out of the box with

You've just hit the problem: Which distributions should the Clam Team be 
spending time on  - Fedora, Mandriva, Ubuntu, SUSE - - - my favorite, your 
favorite ?

This is not a unique complaint to Clam - I see similar problems on the 
MailMan list, and RedHat/Fedora again is a big source of complaints.

As far as I know, across Linux, packages for distibutions are the 
responibility of the distro, not the project in question.  Fedora is fairly 
well known for making changes to the default way that applications are set 
up, often moving things around (files, sockets, etc).

I think what the OP is asking for misses this fact. When you install Clam 
from Fedora packages, basicly you need to get support from Fedora. 

Maybe you need a different distro, that keeps things in default locations.


==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my Hobbitses.

2006-11-09 Thread Rob Munsch
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Daniel J McDonald wrote:

 For example, the Hobbitmonitor project is buried deep on my todo list -
 There are about 15 post release patches that have to be individually
 applied in a certain order, 

You want the allinone.patch referenced on that page, which is exactly
what its name implies :).  If you apply that you may proceed with
./configure et. al., and all will Just Work.

- --
Rob Munsch
Solutions For Progress IT
www.solutionsforprogress.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFU4UuBvBcJFK6xYURAuheAJ4qgAo414hjntjRnYKHBqA3qfF0MgCfcGUU
RJDriFBSOT0GjBnoN2XR5iw=
=C/BW
-END PGP SIGNATURE-
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread John Hinton

Jim Redman wrote:

snippage

I no longer possess the desire to build Linux systems from scratch, or 
to customize them so heavily that I cannot benefit from the work of 
some of the greats in the community, although I may occasionally 
humbly make suggestions that I think might be of benefit (some of 
these are not necessarily accepted as such).



more snippage

I have to agree with the general request made by Jim. Unfortunately, 
most of us end user sysadmins have a lot on our plates. Compiling is not 
that hard, but it is definitely harder than using something like an RPM. 
And as the config file is normally not replaced, setting things up the 
way you want it normally is left alone. I really can't imagine trying to 
keep up with a full linux server these days with all the security 
issues, if I had to compile each and every update to each and every 
program... thus the success of distros such as Redhat, Suse and Debian 
to name just a few.


I personally run CentOS for all my systems. I use the dag repository for 
many additional packages, ClamAV being one of the main packages. I find 
his ClamAV RPM works right out of the box, and is updated as needed, 
which allows the use of yum or up2date to keep Clam updated. But his 
repository is aimed at Redhat.


I have to compliment the ClamAV team for providing a great list of other 
sources for obtaining ClamAV. Perhaps taking a careful look there first 
is something we should all consider, if that resource has been overlooked.


http://clamav.net/binary.html


Thanks for a great product.

John Hinton
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my oops

2006-11-09 Thread Rob Munsch
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

sorry, meant that to be a private reply back to the OP  -.-

- --
Rob Munsch
Solutions For Progress IT
www.solutionsforprogress.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFU49kBvBcJFK6xYURApogAJ9nM08ECu0ia5fJS/JIIWDSzuGJ9gCff61R
ak0UDNpdGhEE48aX8STQxxM=
=4vIq
-END PGP SIGNATURE-
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Problem when building clamd on

2006-11-09 Thread Mark Hennessy
I have three servers all running FreeBSD 4.11.  I can build clamd on two of
them just fine, but when I build it on one particular machine, I get these
warnings when building:

/usr/lib/libc_r.so: the use of `pthread_attr_getstackaddr' is deprecated, use
`pthread_attr_getstack'
/usr/lib/libc_r.so: the use of `pthread_attr_setstackaddr' is deprecated, use
`pthread_attr_setstack'

When I try to execute clamd, I get Bus error.

All files returned when listing /usr/lib/libc* appear to be identical in size
on all three machines.
The config.log from the build on one of the machines where clamd is working
looks nearly identical to the config.log from the build on the machine where
clamd dies on Bus error.

I tried to build with --disable-pthreads but clamd doesn't build then (I
assume that it requires threads).

Anyone have any ideas what else I can check?

What other information might be required?

Failing getting it to work this way, how would I try building the clamav
distribution with LinuxThreads on FreeBSD 4.11?

--
 Mark Hennessy
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread tBB
Jim Redman wrote:

 I have to say, of all the lists I subscribe to, the vocal members of
 this list are the most arrogant and insulting.  However, I consider
 comments such as Luca Gibelli's, bandwidth wasting, We are happy to
 suffer this loss. and Dennis Peterson's His specific problem is he
 lacks the skill to install and manage the product reflect more about
 the person making the comment, rather than the target.

I really hope this thread dies a quick death. If you consider
L.Gibelli's and D.Petterson's replys a bandwidth wasting, what are you
calling your repetitive mindless blather like I'm not spending another
two days monkeying with configuration?

None of the comparably few and well documented options in ClamAv's
config files should be hard to understand for someone who is allegedly
administrating Linux servers since late 1.x release, not to mention a
software developer like you also alleged to be.  As for your comparison
with a doorknob, if a doorknob has the better arguments it's reasonable
that  you don't want to debate with it.

I'm sorry for the probably arrogant and insulting tone but you're
literally asking for it.

-- 

 Q: Because it reverses the logical flow of conversation.
 A: Why is putting a reply at the top of the message frowned upon?




































___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Tom Metro

Dennis Peterson wrote:

Jim Redman wrote:

Your opinions, seem to be the prevalent attitude of the vocal
members of this list - if you don't suffer, it wasn't worth it.


His specific problem is he lacks the skill to install and manage the product.


It's rather sad to see that this elitist attitude - which was 
commonplace on Usenet back in the early 90's - is still alive and well 
here in 2006. I'm not sure why people who otherwise are enthusiastic 
supporters of open source don't see how this damages the community.


The argument is also flawed. So, the people criticizing the OP's premise 
all build their software from scratch, build their own OS distributions, 
 and never used packaged software - right? No? Do you at least review 
all the source code before you install a package? No?


We've built up these layers not always because the end users don't have 
the knowledge to reproduce them themselves, but because it would be a 
waste of effort to replicate them. This hold as true for rewriting a 
virus scanning engine from scratch as it does for writing your own 
installation script. (If your environment requires custom behavior, then 
by all means, write your own installation script...or for that matter, 
customize the virus scanning engine.)


Ease of installation is valued by knowledgeable users also. Why spend 
time on a problem that others have already solved hundreds of times 
over. I'd much rather use my time in solving unexpected problems that 
are specific to my environment.


There are good reasons why distributions providing packaged software are 
the dominant distributions in use today.


Instead of attacking the OP's premise, a more productive response is 
suggesting other repositories that offer better packages, and other 
distributions that provide better designed packages, and fortunately 
this information was provided by others in among the noise.


It would also be nice to see the project leaders show a better attitude 
towards package maintainers. Not to say they necessarily have a poor 
attitude towards them, but there wasn't anything positive put forth in 
this thread. No one expects ClamAV to natively support specific 
distributions, but a statement along the lines of yeah, we've heard the 
Fedora RPM isn't the smoothest install, but we're working with the 
maintainer to improve it. Or, we've accepted and incorporated numerous 
patches from downstream packagers, so if you're having a problem with a 
specific package, your best recourse is to report the problem to the 
maintainer and have them report to us any changes that need to be made.


A related issue is how often it is recommended on the list just to build 
from source. It's an understandable way to respond to packaging problems 
on a project list, where the project has no direct control over the 
packages. It's the fastest work-around, and the only short-term 
solution. But it suggests that packaging for ClamAV seems to be more 
problematic than for other comparable apps., and maybe that's because 
more could be done in the core project to accommodate packagers.


 -Tom

--
Tom Metro
Venture Logic, Newton, MA, USA
Enterprise solutions through open source.
Professional Profile: http://tmetro.venturelogic.com/
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread John Rudd

tBB wrote:


I'm sorry for the probably arrogant and insulting tone but you're
literally asking for it.




Perhaps he is asking for it, but he's also right.


___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Stephen Gran
On Thu, Nov 09, 2006 at 07:23:22PM -0500, Tom Metro said:
 Dennis Peterson wrote:
 Jim Redman wrote:
 Your opinions, seem to be the prevalent attitude of the vocal
 members of this list - if you don't suffer, it wasn't worth it.
 
 His specific problem is he lacks the skill to install and manage the 
 product.
 
 It's rather sad to see that this elitist attitude - which was 
 commonplace on Usenet back in the early 90's - is still alive and well 
 here in 2006. I'm not sure why people who otherwise are enthusiastic 
 supporters of open source don't see how this damages the community.

I agree that the argument you don't want to spend your time looking
at gdb/valgrind/whatever output, so your input isn't welcome is a
flawed argument.  I do feel that we have to ask a little bit from people
who intend to run servers, though.  I have always felt that one of the
reasons we have giant waves of botnets is the idea that anyone can run
an internet facing computer.  Not to say we can't be more welcoming to
newcomers, but I do think we have to ask for something in return.

 It would also be nice to see the project leaders show a better attitude 
 towards package maintainers. Not to say they necessarily have a poor 
 attitude towards them, but there wasn't anything positive put forth in 
 this thread. No one expects ClamAV to natively support specific 
 distributions, but a statement along the lines of yeah, we've heard the 
 Fedora RPM isn't the smoothest install, but we're working with the 
 maintainer to improve it. Or, we've accepted and incorporated numerous 
 patches from downstream packagers, so if you're having a problem with a 
 specific package, your best recourse is to report the problem to the 
 maintainer and have them report to us any changes that need to be made.

Speaking as a downstream packager, I have always had a very good
relationship with all of the clamav team members, except when I manage
to put my foot in my mouth.  They have always been curteous, respectful,
and willing to accomodate issues that arise from the specific wierdnesses
of working within distro restraints.  Even when I manage to put my
foot in my mouth, they have managed to have the good grace to forget
reasonably quickly :)

It's true that, in general, it's best to run as recent a version of the
code base as possible for support and/or security issues, but that's the
same with every codebase, and not particular to clamav.
-- 
 --
|  Stephen Gran  | Catharsis is something I associate with |
|  [EMAIL PROTECTED] | pornography and crossword puzzles.   -- |
|  http://www.lobefin.net/~steve | Howard Chaykin  |
 --


signature.asc
Description: Digital signature
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Dennis Peterson
 
 Dennis Peterson wrote:
  Jim Redman wrote:
  Your opinions, seem to be the prevalent attitude of the vocal
  members of this list - if you don't suffer, it wasn't worth it.
  
  His specific problem is he lacks the skill to install and manage the 
  product.
 
 It's rather sad to see that this elitist attitude - which was 
 commonplace on Usenet back in the early 90's - is still alive and well 
 here in 2006. I'm not sure why people who otherwise are enthusiastic 
 supporters of open source don't see how this damages the community.

Everyone is a volunteer - the best that can be done in an all-volunteer
market place is being done now. In this case it was not good enough for
the OP. He could have offered to pay somebody to teach him or an employee
how to package things to his liking but he did not. Like you, he expects
that somebody will hear the whine and respond with a turnkey package. And
in a year when an upgrade is needed he will wonder why that volunteer
abandonded the project and left all his customers hanging, never realizing
they he has no customers, as he volunteered his labor.

Open source is a beautiful thing but it does not come with a promise of
endentured servitude on the part of the maintainers. If one cannot do what
is needed to install and maintain a product one should hire it out or find
another product. One should not get pissy with the volunteer support group
that is a keystone to this product's success.

Better than ranting here about it you could write the turnkey package for
him in the spirit of Kum-Bay-Yah and good fellowship. He's desperate for a
solution as long as he doesn't have to put any effort into it. As for providing
alternate solutions, that what Google is for - this is 2006, afterall.

dp

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Bit Fuzzy

My god!
This topic hasn't been killed yet?!?


___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] open source project management

2006-11-09 Thread Tom Metro

Dennis Peterson wrote:

Everyone is a volunteer - the best that can be done in an all-volunteer
market place is being done now.

...

Open source is a beautiful thing but it does not come with a promise of
endentured servitude on the part of the maintainers.


Yes, it's a volunteer effort, but it is also perfectly legitimate for 
end-users of open source applications to provide feedback to the project 
developers. I'm not a code contributor on ClamAV, and I don't think you 
are either, but on projects where I do contribute, I look forward to 
end-user feedback, as it helps direct your efforts.


It's a mistake to take the stance that just because it is an open source 
project, there is no legitimate feedback other than code patches. 
However, that doesn't mean that end-users should expect their needs to 
be met on their time table, or at all, if resources aren't available.


Again, rather than attacking the premise, a more legitimate response 
from someone who isn't actually writing the code is to offer an opinion 
on where you think the OPs request should fall on the list of priorities.


For the actual developers, they could point the OP toward the correct 
down-steam parties, agree with his point and say where it is or isn't on 
the priority list, or provide an explanation for why they think it isn't 
an area where they will spend their time. Any of those are perfectly 
fine responses.


 -Tom

--
Tom Metro
Venture Logic, Newton, MA, USA
Enterprise solutions through open source.
Professional Profile: http://tmetro.venturelogic.com/
___
http://lurker.clamav.net/list/clamav-users.html