Re: [clamav-users] temporary directories left in /var/lib/clamav

2017-06-20 Thread Steven Morgan
David, Thanks, so when you say freshclam "completed successfully" you mean there were no temp files left? Steve On Tue, Jun 20, 2017 at 11:21 AM, David Pullman wrote: > Steve, > > Yes, we run freshclam and then clamscan once each day at 00:03 UTC. There > were many days of tmp directories. We

Re: [clamav-users] issues with mirror - 194.186.47.19

2017-06-20 Thread Orrick, Diana
Still having issues with this IP in the mirrors, could it be pulled please?? Thanks for any assistance, this download failed twice overnight... --2017-06-20 09:20:01-- http://db.us.clamav.net/daily.cvd Resolving db.us.clamav.net (db.us.clamav.net)... 208.72.56.53, 194.186.47.19, 128.199.133.36

Re: [clamav-users] Question on GUI notifications of virus detection

2017-06-20 Thread Bryan Everly
On Mon, 2017-06-19 at 20:44 +0200, Michael D. wrote: > Hi Bryan, > > The problem isn't with ClamAV, it's the difference in sessions between a > daemon and a user. > > A user that is logged in, is in a shell with lot's of environment > variables set, whereas a daemon is running in a bare-minimu

Re: [clamav-users] temporary directories left in /var/lib/clamav

2017-06-20 Thread David Pullman
Steve, Yes, we run freshclam and then clamscan once each day at 00:03 UTC. There were many days of tmp directories. We ran the freshclam utility by hand yesterday, on the instance the logs are from, at about 22:00 UTC, and it completed the download. The subsequent update at 00:03 this morning comp

Re: [clamav-users] temporary directories left in /var/lib/clamav

2017-06-20 Thread Steven Morgan
David, So freshclam runs every day at ~00:03:00, and to confirm, the temp directories/files are left for each of these runs? Which version of ClamAV are you using? Steve On Tue, Jun 20, 2017 at 7:51 AM, David Pullman wrote: > Hi Steve, > > I've gathered some logs from one of the servers that

Re: [clamav-users] issues with mirror - 194.186.47.19

2017-06-20 Thread Paul Kosinski
According to my filtering logs, I get *lots* of spam from ".edu" domains. But I never see it in my mail reader, because it gets rejected by 'bogofilter' analysis -- thus blanket ".edu" blocking is neither necessary nor desirable. On Tue, 20 Jun 2017 08:11:07 +0200 "Walter H." wrote: > On Sat,

[clamav-users] partition-intersection ?

2017-06-20 Thread Zvi Kave
Where can I find deeper explanation of --partition-intersection - Not clear enough. Also: --block-encrypted - Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR). Zip/rar files are secured by password. Why it says encrypted

Re: [clamav-users] temporary directories left in /var/lib/clamav

2017-06-20 Thread David Pullman
Hi Steve, I've gathered some logs from one of the servers that had a bunch of the clamor-nn.tmp directories over a number of days. I've aggregated seven days of them below (we rotate the log daily). We run freshclam from cron each day. Please let me know if there's any suggestion on how I