Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

2018-07-03 Thread Christopher X. Candreva
For everyone (or maybe the one) asking why the DNS system exists, as the person who came up with the idea in the first place (or the idea of stealing it from the DNSbls ) I thought I would provide a link to the original discussion in which is was hashed out ( beaten to death) back in 2004:

Re: [clamav-users] Problem compiling Clamav 0.98.1 on Solaris 10/x86 (fwd)

2014-02-28 Thread Christopher X. Candreva
Should anyone ever search for this, the problem was solved by upgrading gcc to 4.8.1 On Fri, 31 Jan 2014, Christopher X. Candreva wrote: Under Solaris 10 x86, gcc 4.7.1, gnu ld 2.21.1 libclamav is failing to link. Here is an exerpt from the compile: make[4]: Entering directory

[clamav-users] Problem compiling Clamav 0.98.1 on Solaris 10/x86 (fwd)

2014-01-31 Thread Christopher X. Candreva
Under Solaris 10 x86, gcc 4.7.1, gnu ld 2.21.1 libclamav is failing to link. Here is an exerpt from the compile: make[4]: Entering directory `/home/chris/apps/mail/clamav-0.98.1/libclamav' CC unrar15.lo CC unrar.lo CC unrar20.lo CC unrarppm.lo CC unrarvm.lo CC

Re: [clamav-users] false positives

2013-08-21 Thread Christopher X. Candreva
On Wed, 21 Aug 2013, Robert wrote: I've been hit by this also (started around 2:50pm today UK time). All the FP's are via the same MBL_349876. I've commented out the MBL lines in the /etc/clamav-unofficial-sigs.conf file and killed all MBL sigs for now. I had 10 different sigs in mbl.ndb

Re: [clamav-users] Availability of virus pettern for solaris

2013-06-18 Thread Christopher X. Candreva
On Tue, 18 Jun 2013, Joel Esler wrote: If I would have written back and said ClamAV's db includes detection for malware on all operating systems someone would have wrote back and said all operating systems? srsly? 4real? all? OK, who has some old Apple ][ boot sector viruses so we can

[clamav-users] Problem compiling clamav-0.97.6 on Solaris 10

2012-09-17 Thread Christopher X. Candreva
Solaris 10, gcc 4.6.3, Program.cc gives the folloing errors: .. CXXProgram.lo In file included from llvm/lib/System/Unix/Program.inc:34:0, from llvm/lib/System/Program.cpp:52: /usr/include/spawn.h:42:14: error: expected ',' or '...' before 'argv'

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Christopher X. Candreva
On Wed, 14 Sep 2011, Dan wrote: At 7:44 AM -0500 9/14/2011, Noel Jones wrote: On 9/14/2011 2:29 AM, sys...@ra-schaal.de wrote: i made some changes to the firewall. if it works be now, please mail me as soon as possible. I started getting successful updates from 88.198.67.125 a

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Christopher X. Candreva
On Wed, 7 Sep 2011, Luca Gibelli wrote: If anyone can provide a CVD mirror in US, please contact me directly. We definitely need more capacity in the db.us.clamav.net RR. What sort of bandwidth do the mirrors use, as in what would be a typical burst or peak load - 5mbit/sec, 10mbit/sec, etc.

Re: [clamav-users] improving ClamAV private mirroring?

2011-07-11 Thread Christopher X. Candreva
On Mon, 11 Jul 2011, James Ralston wrote: We are in a situation where we have multiple hosts that need to run ClamAV, but those hosts are highly restricted in what outbound Internet access they have. Thus, we need to run a local ClamAV mirror. I have one machine run freshclam, and use rsync

Re: [clamav-users] announcing ClamAV 0.97.1

2011-06-09 Thread Christopher X. Candreva
On Thu, 9 Jun 2011, Luca Gibelli wrote: Dear ClamAV users, This is a bugfix release recommended for all users. Please refer to the ChangeLog file for details. Download : http://downloads.sourceforge.net/clamav/clamav-0.97.1.tar.gz FYI to any Solaris users, my compile failed on

Re: [clamav-users] BC.PDF.Producer.JSHIP

2011-01-19 Thread Christopher X. Candreva
On Wed, 19 Jan 2011, Roy McMorran wrote: The virus submission page won't let me upload my sample though - Result: This file is not detected by ClamAV. How can this be? I've just tried to submit a virus sample and am running into the same issue. Some testing shows that neither clamscan not

Re: [clamav-users] BC.PDF.Producer.JSHIP

2011-01-19 Thread Christopher X. Candreva
On Wed, 19 Jan 2011, Christopher X. Candreva wrote: On Wed, 19 Jan 2011, Roy McMorran wrote: The virus submission page won't let me upload my sample though - Result: This file is not detected by ClamAV. How can this be? I've just tried to submit a virus sample and am running

Re: [clamav-users] WARNINGS on startup - ignore, comment out or?

2010-12-22 Thread Christopher X. Candreva
On Wed, 22 Dec 2010, Tomasz Kojm wrote: It said these were deprecated so I commented the two lines out and now no more warnings. However, was this a wise thing to do or have I misinterpreted the deprecating message? What would those who are more familiar with clamav advocating? Those

Re: [clamav-users] WARNINGS on startup - ignore, comment out or?

2010-12-22 Thread Christopher X. Candreva
On Wed, 22 Dec 2010, Tomasz Kojm wrote: May I suggest for the future a --checkconfig option to clamd (and clamav-milter) that would parse the config file, report any such errors, and clamconf is already doing this. Thanks for reminding me about that !

Re: [Clamav-users] bytecode Rev 16 DoS

2010-05-11 Thread Christopher X. Candreva
On Tue, 11 May 2010, Wolfgang Breyha wrote: Hi! Most of my clamd died today after freshclam updated to... bytecode.cld (version: 16, sigs: 3, f-level: 51, builder: nervous) What version of ClamAV are you running ? == Chris Candreva

Re: [Clamav-users] [Clamav-announce] problem with daily.cvd 10938

2010-05-08 Thread Christopher X. Candreva
On Sat, 8 May 2010, G.W. Haywood wrote: http://www.mail-archive.com/clamav-de...@lists.clamav.net/msg03353.html I look forward to your patch. == Chris Candreva -- ch...@westnet.com -- (914) 948-3162 WestNet Internet Services of

Re: [Clamav-users] Latest daily.cld update causes segfault

2010-05-07 Thread Christopher X. Candreva
On Fri, 7 May 2010, Toby Bryans wrote: The very latest update causes the following debug output. A quick search on twitter finds someone else with similar issues too. @40004be3ecf5208b0ff4 LibClamAV debug: Initialized 0.95.3 engine

Re: [Clamav-users] [Clamav-announce] problem with daily.cvd 10938

2010-05-07 Thread Christopher X. Candreva
On Fri, 7 May 2010, G.W. Haywood wrote: Hi there, On Fri, 7 May 2010, Luca Gibelli wrote: We apologise for the inconvenience. http://www.mail-archive.com/clamav-users@lists.clamav.net/msg33265.html http://www.mail-archive.com/clamav-users@lists.clamav.net/msg34794.html

Re: [Clamav-users] Yet more clubbing of deceased equine.

2010-04-23 Thread Christopher X. Candreva
On Fri, 23 Apr 2010, Simon Hobson wrote: So, it still runs the software it used to run ? Yes It's running software that is EOL ? Most definitely And Microsoft have sent it a poison pill ? No they haven't And is it hitting Microsoft's servers for full updates even when it should only be

Re: [Clamav-users] Clubbing a deceased equine

2010-04-21 Thread Christopher X. Candreva
On Wed, 21 Apr 2010, lists wrote: Doesn't change a thing. If you threaten me with a course of action, if I fail to do something that is blackmail. It's nothing else. It does not matter if the product is free. Oh come on. If I tell you you'll get wet when if you go out in the rain without an

Re: [Clamav-users] No debian woody support anymore?

2010-04-21 Thread Christopher X. Candreva
On Wed, 21 Apr 2010, Simon Hobson wrote: No, according to certain people on this list, you are a cretin, and incompetent to even handle the off switch of a computer. If you check the list archives - particular for threads (no subject) and Those EOL tweets you'll see that you are far from

Re: [Clamav-users] No debian woody support anymore?

2010-04-21 Thread Christopher X. Candreva
On Wed, 21 Apr 2010, Simon Hobson wrote: No, according to certain people on this list, you are a cretin, and incompetent to even handle the off switch of a computer. If you check the list archives - particular for threads (no subject) and Those EOL tweets you'll see that you

Re: [Clamav-users] Clubbing a deceased equine

2010-04-21 Thread Christopher X. Candreva
On Wed, 21 Apr 2010, Eray Aslan wrote: Knowingly disabling running software on computers that is not your own is not acceptable. It is immoral, unethical and perhaps illegal. But that's not what happened. == Chris Candreva --

Re: [Clamav-users] illegal or not, make a valid argument (was no subject)

2010-04-21 Thread Christopher X. Candreva
On Wed, 21 Apr 2010, Bill Landry wrote: Doesn't agree with the example you provided, is all I'm saying, not without notification via certified mail or personal delivery, which takes notification to a much higher standard and requirement then you have been trying to justify. The example I

Re: [Clamav-users] illegal or not, make a valid argument (was no subject)

2010-04-21 Thread Christopher X. Candreva
On Wed, 21 Apr 2010, Bill Landry wrote: For me, the lesson I take is to always be aware of the laws in your locality. And the policies of the software you use. Oh yeah, and I bet you read the public notifications in your local paper Be aware of the laws != read the public notifications in

Re: [Clamav-users] Clubbing a deceased equine

2010-04-21 Thread Christopher X. Candreva
On Wed, 21 Apr 2010, Simon Hobson wrote: - It is a simple fact that the purpose of this update was to make running software break. I disagree with that statement because it's incomplete.. The purpose of this update was to make running software break WITH A DESCRIPTIVE ERROR . Important

Re: [Clamav-users] (no subject)

2010-04-21 Thread Christopher X. Candreva
On Thu, 22 Apr 2010, Steve Wray wrote: This is part of the attitude problem from many open source projects. They are (too often) run by technicians and programmers with no input from the business side. IMHO, open source projects don't have a business side. Opensource projects exist for the

Re: [Clamav-users] EOL

2010-04-18 Thread Christopher X. Candreva
On Sun, 18 Apr 2010, Simon Hobson wrote: And you can cut the crap about well you should have configured your system to not stop when ClamAV stopped - that's rubbish because it's already been made perfectly clear right at the start of one of these threads that the project team consider any

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Christopher X. Candreva
On Fri, 16 Apr 2010, Giampaolo Tomassoni wrote: It is not something to do know, but instead something that could have been done introducing 0.96... Giampaolo: There are lots of things that COULD be done, but it is not the philosophy of the ClamAV project. As I said, the devs have made it

Re: [Clamav-users] What mental midget shut down my server?

2010-04-16 Thread Christopher X. Candreva
On Fri, 16 Apr 2010, Gary MacKay wrote: OK, who's the mental midget that decided to just up and kill all installations of clamav ??? I am flooded today with calls that email servers are not working! Every d*(n one of them is the same thing. ClamAV just died. Stupid I have never

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Christopher X. Candreva
On Fri, 16 Apr 2010, Giampaolo Tomassoni wrote: The ClamAV team have commanded old versions of its product to stop working. I would not describe what they did that way. Older versions of clamd were going to crash on signatures that newer versions would accept, and the devs have been prevented

[Clamav-users] llvm/jit CPU dependant

2010-03-11 Thread Christopher X. Candreva
-- Forwarded message -- Date: Thu, 11 Mar 2010 15:25:43 -0500 (EST) From: Christopher X. Candreva ch...@westnet.com To: cla...@lists.clamav.net Subject: llvm/jit CPU dependant I just did a compile of 0.96rc1 on a Sparc server, and received this message: configure: error

[Clamav-users] Compile error Solaris/Intel

2010-03-11 Thread Christopher X. Candreva
Trying to compile on Solaris 10 i386, gcc 4.4.3 gives the following make all-recursive make[1]: Entering directory `/home/chris/apps/mail/clamav-0.96rc1' Making all in libltdl make[2]: Entering directory `/home/chris/apps/mail/clamav-0.96rc1/libltdl' make all-am make[3]: Entering directory

Re: [Clamav-users] Compile error Solaris/Intel

2010-03-11 Thread Christopher X. Candreva
On Thu, 11 Mar 2010, Török Edwin wrote: Solaris defines CS as 15, which causes an error when CS is used as a parameter/variable name. Please open a bugreport on bugs.clamav.net so we can track this. Bug #1878 openeed == Chris Candreva

[Clamav-users] Extracting information from the new clamav-milter

2009-03-18 Thread Christopher X. Candreva
I have started testing the new clamav-milter. We had been doing some specialized procvessing with the old one, and I am trying to see if we can do this with the new one. We reject (5xx) viruses in the initial connection. We use the postmaster notify feature, and feed those message to a script

Re: [Clamav-users] Stop it!

2008-10-03 Thread Christopher X. Candreva
Yes, I know I am about to contradict myself. GESBBB wrote: Is there any reason you cannot read the documentation prior to installing a newer version? Anyone using a package manager will have the new software installed before they can read the documentation. On Fri, 3 Oct 2008, Colin

Re: [Clamav-users] Stop it!

2008-10-03 Thread Christopher X. Candreva
On Fri, 3 Oct 2008, Eric Rostetter wrote: Not true. I have a package manager installed on all my machines. But they do NOT do automatic updates... The above is only true of those who have a package manager installed and configured to do automatic upgrades. But you are on this mailing list,

Re: [Clamav-users] Webinar Recording

2008-09-08 Thread Christopher X. Candreva
On Tue, 9 Sep 2008, Andrew McGlashan wrote: It was hard enough finding a player that works in Windows. is there a better format? If you view the stream, it downloads a Java player that worked in Linux. Maybe they have a stand-alone java player that will let you play the downloaded file

Re: [Clamav-users] announcing ClamAV 0.94rc1

2008-08-21 Thread Christopher X. Candreva
On Thu, 21 Aug 2008, Henrik K wrote: Who cares if it scans 100ms or 20ms. I prefer features and stability more For those of us who use it as an incoming mail scanner (which I seem to recall being the primary focus of clam from statements on this list) it matters a great deal. The rate of

Re: [Clamav-users] announcing ClamAV 0.94rc1

2008-08-18 Thread Christopher X. Candreva
On Mon, 18 Aug 2008, Brian Morrison wrote: FWIW it built quite happily on my RH9 (I know!) box with no changes needed to my spec file. As yet I have not actually installed and run the resulting rpms. Built and run here on Solaris 8. I have clamav-milter running on a test machine.

Re: [Clamav-users] simplest replacement for ancient amavis-perl

2008-08-11 Thread Christopher X. Candreva
On Mon, 11 Aug 2008, David F. Skoll wrote: S:220 smtp.example.net Go ahead C:MAIL FROM:[EMAIL PROTECTED] S:220 Sender OK C:RCPT TO:[EMAIL PROTECTED] S:451 Greylisted... try again later C:RCPT TO:[EMAIL PROTECTED] S:451 Greylisted... try again later C:DATA S:500 Need recipient first

[Clamav-users] 0.93.2 segfaults on Solaris 8 Sparc

2008-07-07 Thread Christopher X. Candreva
Just built and the resultant clamscan and clamav-milter both segfault when I attempt to run them. built with gcc 4.3.0 on Solaris 8 Sparc The last lines with --debug enabled are LibClamAV debug: Loading databases from /usr/local/share/clamav LibClamAV debug: in cli_cvdload() LibClamAV debug:

Re: [Clamav-users] 0.93.1 RC1

2008-05-22 Thread Christopher X. Candreva
On Thu, 22 May 2008, [EMAIL PROTECTED] wrote: http://downloads.sourceforge.net/clamav/clamav-0.93rc1.tar.gz That's an old version -- 0.93rc1 not 0.93.1rc1 However, the initial message said that the new release candidate would be released SOON -- not that it has been released.

Re: [Clamav-users] Clamav-0.93 hang on FreeBsd 4.8

2008-04-14 Thread Christopher X. Candreva
On Mon, 14 Apr 2008, Matthias Häker wrote: is there any change in the conf ? ort anything else i should look for ? Uhm, yes: * clamd: - NEW CONFIG FILE OPTIONS: MaxScanSize, MaxFileSize, MaxRecursion, MaxFiles - ** THE FOLLOWING OPTIONS ARE NO LONGER SUPPORTED **: MailMaxRecursion,

Re: [Clamav-users] all my ClamAV daemons died last night

2008-04-07 Thread Christopher X. Candreva
On Mon, 7 Apr 2008, Tilman Schmidt wrote: I have ClamAV running on several Linux mailservers. All of them stopped working last night with similar symptoms: In terms of the freshlcam failing, I had the same problem last night. However, I run freshclam on a separate machine from my mail

Re: [Clamav-users] all my ClamAV daemons died last night

2008-04-07 Thread Christopher X. Candreva
The same problem seems to have just happened again. For the past few hours my jobs has been returning errors . Before I post the details I'll put the question here -- is anyone else seeing mirror issues or should I be looking for a local problem ? These were the errors my regular job

Re: [Clamav-users] all my ClamAV daemons died last night

2008-04-07 Thread Christopher X. Candreva
On Mon, 7 Apr 2008, leonel wrote: the daemons of 1 server died to last night but that server had the freshclam as a daemon the other servers have the freshclam in the crontab I should say -- I'm not the one who had servers die last night, just errors, What I wanted to find out was anyone

Re: [Clamav-users] clamd running full throttle

2008-03-03 Thread Christopher X. Candreva
On Mon, 3 Mar 2008, Independent Edit wrote: Currently running ClamAV 0.90.3 on an OS X Server installation. You are running an outdated version. Current release is 0.92.1 There were many performance improvements since 0.90.x == Chris

Re: [Clamav-users] ClamAV 0.92.1 anomaly

2008-02-12 Thread Christopher X. Candreva
On Tue, 12 Feb 2008, shuttlebox wrote: I thought so since I had tried scanning with it and it worked but when I try to get the version info mine also segfaults. :-( Interesting -- yes, it does actually scan, just --version causes the segfault.

Re: [Clamav-users] ClamAV 0.92.1 anomaly

2008-02-12 Thread Christopher X. Candreva
On Tue, 12 Feb 2008, shuttlebox wrote: Maybe you could also try the packages from Blastwave? http://www.blastwave.org/packages.php/clamav Wow, this is a switch -- don't we usually tell people they are better of compiling from source ? :-) Seriously, do you have a reason to think this

Re: [Clamav-users] ClamAV 0.92.1 anomaly

2008-02-12 Thread Christopher X. Candreva
On Tue, 12 Feb 2008, Randal, Phil wrote: clamscan --version behaves differently in 0.92.1 to 0.92 # clamscan --version ClamAV 0.92.1 I seem to have a bigger problem: [castor]:~/apps/mail/clamav-0.92.1/clamscan$ ./clamscan --version Segmentation Fault Solaris 8, gcc 4.2.2

Re: [Clamav-users] fc 6

2007-12-07 Thread Christopher X. Candreva
On Fri, 7 Dec 2007, john wrote: am running fedora 6 Fedora 6 is end of life -- there aren't going to be updated packages for it. You can compile it youself from source, or upgrade to Fedora 7 or 8 == Chris Candreva -- [EMAIL PROTECTED]

Re: [Clamav-users] false positive of Email.FreeGame on MySQL DB

2007-09-28 Thread Christopher X. Candreva
On Fri, 28 Sep 2007, Jon Wagoner - Red Cheetah wrote: Yes, I'm periodically doing scans of the full drive. I could just skip the mysql directory, but that seems pretty bad security practice. Why does it seem that way to you ? I don't think scanning raw mysql database files is going to give

Re: [Clamav-users] false positive of Email.FreeGame on MySQL DB

2007-09-28 Thread Christopher X. Candreva
On Fri, 28 Sep 2007, Jon Wagoner - Red Cheetah wrote: It appears clamav just does a substring match on the exclude, so it would be easy to hide viruses. E.g. If I excluded .MYD, then you could just have your virus named somevirus.MYD and it would not be caught. If I would not exclude *.MYD

Re: [Clamav-users] false positive of Email.FreeGame on MySQL DB

2007-09-28 Thread Christopher X. Candreva
On Fri, 28 Sep 2007, Jon Wagoner - Red Cheetah wrote: hidden in /home/someuser/var/lib/mysql/my-virus-here. Users should not be able to write to that directory at all, it should be Take a closer look, that's not the real mysql directory, just a subdirectory under the users home

Re: [Clamav-users] Scanning hardware devices fails

2007-09-24 Thread Christopher X. Candreva
On Mon, 24 Sep 2007, [EMAIL PROTECTED] wrote: after a while I get this: /sys/devices/pci:00/:00:06.0/config: OK /sys/devices/pci:00/:00:06.0/:17:00.0/host1/sfp: OK /sys/devices/pci:00/:00:06.0/:17:00.0/host1/vpd: Empty file

Re: [Clamav-users] clamav 0.91.2 is out. Don't use it.

2007-08-21 Thread Christopher X. Candreva
On Tue, 21 Aug 2007, John Rudd wrote: (filed as bug 631, but it's nothing new: CL_SCAN_STDOPT still doesn't include CL_SCAN_PHISHING_DOMAINLIST; that omission can cause crashing The bug is protected so I can't look at it. However, is it enough to add CL_SCAN_PHISHING_DOMAINLISt to the

Re: [Clamav-users] latest worry-free version on solaris sparc?

2007-08-16 Thread Christopher X. Candreva
On Thu, 16 Aug 2007, Dennis Peterson wrote: I am running clamav on various versions (5.8 - 5.10) of Solaris on Sparc and Intel and have no problems with stability. I've built everything from scratch except gcc. I'm very happy with it. I'm running clamav/clamav-milter 0.91.1 on Solaris 8

Re: [Clamav-users] 0.91 - high load under solaris

2007-07-17 Thread Christopher X. Candreva
On Tue, 17 Jul 2007, Tom Bombadil wrote: Is anybody else experience a much higher load with 0.91 compared to 0.90.3? Not seeing any higher load her, Solaris 8 on UltraSparc Using clamav-milter with direct access to libclamav however, not the tcp socket.

[Clamav-users] My script for third party signature databases:

2007-07-12 Thread Christopher X. Candreva
I thought this problem had been pretty well beaten to death when Sanesecurity added their mirrors. In any case I put the set of scripts/Makefile I use on my web site: http://www.westnet.com/~chris/Clamav/ These were not written for general distribution, so it is your responsibility to check

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Christopher X. Candreva
On Mon, 18 Jun 2007, Peter Boosten wrote: clamdscan solved that issue, although I would have appreciated this effect *before* I upgraded to a newer release. This keeps comming up, perhaps it needs to be addressed in the docs. Could you tell us why you used clamscan instead of clamd/clamdscan

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Christopher X. Candreva
On Mon, 18 Jun 2007, Peter Boosten wrote: I had some problems running clamd on one of the machines a long time ago, and with mimedefang running clamscan is the second option (which had worked until sometime ago). So I configured mimedefang for clamscan. Maybe it's time to ask the mimedefang

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Christopher X. Candreva
On Mon, 18 Jun 2007, Eric Rostetter wrote: Anyway, my point is, your millage may vary. Don't try to impose your views on everyone else. Whoa here. Did you chime and and give a good way to use clamscan on production ? Every time this comes up the answer is don't do it. If that is the answer,

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Christopher X. Candreva
On Mon, 18 Jun 2007, Chris wrote: [EMAIL PROTECTED] ~]$ clamdscan phish1.txt /home/chris/phish1.txt: Access denied. ERROR I can't figure out why I keep getting this Access denied error. Anyone with any ideas? Because you didn't RTFM. :-) clamdscan passes the file name to clamd, which

Re: [Clamav-users] daily.wmd trouble with 0.91rc1

2007-06-01 Thread Christopher X. Candreva
On Fri, 1 Jun 2007, Noel Jones wrote: I seem to be having trouble with clamscan 0.91rc1 choking with the current daily.wmd file. It was working fine until the most recent db update. I don't have this problem, but I don't seem to have a daily.wmd file in my daily.inc either. I have

Re: [Clamav-users] daily.wmd trouble with 0.91rc1

2007-06-01 Thread Christopher X. Candreva
On Fri, 1 Jun 2007, Noel Jones wrote: fatfinger error on the name, I am referring to daily.wdb as the pasted session shows. Ah, sorry. Bleary-eyed error not catching it in the sesion. :-) Are you using 91rc1? It's very repeatable here. I have Yes, so far it has been running fine. My

Re: [Clamav-users] OT: Sanesecurity: new urls?

2007-05-08 Thread Christopher X. Candreva
On Tue, 8 May 2007, Steve Basford wrote: (depending if you want the phishing sigs or the scam sigs) Main: http://www.sanesecurity.co.uk/clamav/phishsigs/ http://www.sanesecurity.co.uk/clamav/scamsigs/ The only problem is the lack of the final file-name in the URL. This breaks my perl

Re: [Clamav-users] Local socket unsafe

2007-03-07 Thread Christopher X. Candreva
On Thu, 8 Mar 2007, CPTeam Hostmaster wrote: I get this in maillog whenever I start clamav-milter: -- Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milter (clmilter): local socket name /var/run/clamav/clmilter.sock unsafe Mar 8 00:45:01 ns1 sendmail[7399]: l27Mj1nM007399: Milter

Re: [Clamav-users] msrbl sigs: rsync

2007-03-05 Thread Christopher X. Candreva
On Mon, 5 Mar 2007, Dennis Peterson wrote: It makes a great deal of sense to move the files into the clam DB directory to insure an atomic operation. If clamd/clamav-milter should happen to reload with a half-copied file in the DB dir, it will likely stop running. Yah - I realized that

Re: [Clamav-users] Re: first impressions on 0.90

2007-02-16 Thread Christopher X. Candreva
On Fri, 16 Feb 2007, Stephen Gran wrote: What would be the point of having a socket ready before clamd is ready to do any work? Maybe I'm missing something. It would be something for other programs to connect to and wait for a response, instead of generating a socket does not exist error.

Re: [Clamav-users] Re: first impressions on 0.90

2007-02-16 Thread Christopher X. Candreva
On Fri, 16 Feb 2007, Stephen Gran wrote: It would be something for other programs to connect to and wait for a response, instead of generating a socket does not exist error. So that they could potentially wait around until their internal timeout, instead of immediately returning? That

Re: [Clamav-users] Upgrade to .90?

2007-02-15 Thread Christopher X. Candreva
On Thu, 15 Feb 2007, Dennis Peterson wrote: In my case the only difference from every previous build was to enable experimental. I have just one build script I've used for years. Try without experimental. I have a similar set-up (Sun Sparc Ultra 2s, Solaris 8, gcc 4.1.1) I was running

Re: [Clamav-users] Upgrade to .90?

2007-02-15 Thread Christopher X. Candreva
On Fri, 16 Feb 2007, Steve Holdoway wrote: Have you patched 8.14.0. I had everything falling over until I did that... FWIW the problems I had were with 8.13.8 == Chris Candreva -- [EMAIL PROTECTED] -- (914) 948-3162 WestNet Internet

Re: [Clamav-users] 0.90rc3 on Sparc Solaris 9

2007-02-02 Thread Christopher X. Candreva
On Fri, 2 Feb 2007, Stephen Gran wrote: What breaks? I agree that at first glance it seems like an unnecessary include, but I'm curious what error you get. Here are the errors I get building rc3 with --enable-experimental gcc 4.1.1 binutils 2.17 gcc -DHAVE_CONFIG_H -I. -I. -I.. -I..

Re: [Clamav-users] Release-Date for 0.90 ??

2007-02-01 Thread Christopher X. Candreva
On Thu, 1 Feb 2007, Arnaud Jacques wrote: Yeah, we all waiting for this new stable release :) I've been running 0.90rc2 here for a few months. IMHO it is more stable than the 0.88.x I was running previously. Just yeaterday I received a Bugzilla note from one I had submitted that it was fixed

Re: [Clamav-users] Release-Date for 0.90 ??

2007-02-01 Thread Christopher X. Candreva
On Thu, 1 Feb 2007, Dennis Peterson wrote: 50-50 isn't bad. Can you share your configure params? Compiled fine on Solaris 8 Sparc, gcc 4.1.1, binutils 2.17 I configure with just ./configure --enable-milter == Chris Candreva -- [EMAIL

Re: [Clamav-users] Re: scan performance

2007-01-26 Thread Christopher X. Candreva
On Fri, 26 Jan 2007, Helmut Schneider wrote: The 0.90rc2 release has greatly improved performance. OK. Could you define greatly improved? I'm quite happy with clamav but I use postfix/amavis with pre-queueing and therefore... :) It's been a while, but things that took minutes to scan now

Re: [Clamav-users] scan performance

2007-01-25 Thread Christopher X. Candreva
On Thu, 25 Jan 2007, Helmut Schneider wrote: I don't want to discuss about performance in general, I would just like to know if this is normal and/or if there is a way to tune up that process. I use 0.88.7 Yes, it is normal for 0.88.x The 0.90rc2 release has greatly improved performance.

Re: [Clamav-users] Phishing, my webserver hacked

2007-01-23 Thread Christopher X. Candreva
On Tue, 23 Jan 2007, Todd Lyons wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey, who's the guy who maintains the phishing sigs? They hacked my http://www.sanesecurity.com/clamav/ == Chris Candreva -- [EMAIL PROTECTED] --

Re: [Clamav-users] Should I submit...

2007-01-17 Thread Christopher X. Candreva
On Wed, 17 Jan 2007, Sander Holthaus wrote: a very basic perl script which opens a listening socket and a shell? I found it after a hacker tried to gain entry. The script is nothing special (far from, 612 bytes) but I doubt people are actually using it for any legitimate means. BitDefender

[Clamav-users] Why does clam die on a malformed database ?

2006-12-30 Thread Christopher X. Candreva
Is there a compelling reason for clam to die on a malformed database, instead of just ignoring the bad line and continuing with all the other sigs ? == Chris Candreva -- [EMAIL PROTECTED] -- (914) 948-3162 WestNet Internet Services of

Re: [Clamav-users] Why does clam die on a malformed database ?

2006-12-30 Thread Christopher X. Candreva
On Sat, 30 Dec 2006, Sander Holthaus wrote: A malformed database points to: - - serious system malfunction - - security breach - - security breach / system malfunction between you and (or at) the database provider In my experience, it means a database maintainer who made a simple

Re: [Clamav-users] Why does clam die on a malformed database ?

2006-12-30 Thread Christopher X. Candreva
On Sat, 30 Dec 2006, Bill Landry wrote: The MSRBL-Images.hdb database started showing up corrupted yesterday and This is not the only reason I ask, but the most recent. I have a script that checks that evidenly has a bug. I can either spend time fixing that, or fixing clam so it ignores the

Re: [Clamav-users] Why does clam die on a malformed database ?

2006-12-30 Thread Christopher X. Candreva
On Sat, 30 Dec 2006, Tomasz Kojm wrote: Freshclam provides this and much more. Except the ability to operate from a given specific URL pointing to a file. If the only updates come from freshclam-verified sources it wouldn't be so bad. The problem comes up that other mechanisims are necessry

Re: [Clamav-users] Why does clam die on a malformed database ?

2006-12-30 Thread Christopher X. Candreva
On Sat, 30 Dec 2006, Dennis Peterson wrote: There's no limitation for choosing a URL - you can put anything you like in the freshclam.conf file. Using the --config-file=FILE option of freshclam in The only option I see in man freshclam.conf is for a database mirror server name, not a URL.

Re: [Clamav-users] Why does clam die on a malformed database ?

2006-12-30 Thread Christopher X. Candreva
On Sun, 31 Dec 2006, Luca Gibelli wrote: How exactly is this better then a possibe false-positive, if a corrupted sig happens to match some valid piece of mail ? It's better to delay N emails rather than delete N emails. A false-positive won't delete the mail - it will cause an

Re: [Clamav-users] Re: Newbie-inquiry

2006-12-19 Thread Christopher X. Candreva
On Tue, 19 Dec 2006, G.W. Haywood wrote: Has anyone else observed such large improvements? Yes. 0.8.x boggs down on some MIME types. The 0.9x RC's have been much faster. == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet

Re: [Clamav-users] Compiling Clamav-0.9RC2 on Solaris Intel

2006-11-27 Thread Christopher X. Candreva
On Mon, 27 Nov 2006, Jonathan Armitage wrote: I have just tried to configure, make and install Clamav-0.9RC2 on a Dell PC running Solaris 10. I have previously done the same with various 0.8 versions I don't know if this is your issue, but if you have bash installed, try editing the first

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

2006-11-13 Thread Christopher X. Candreva
On Tue, 14 Nov 2006, zamri wrote: I assume the answer is yes. :) No, it probably means you didn't provide any of the information that was asked for -- what it found, your platform and OS, etc. Your premise that rc.2 isn't updated is wrong. There may be a language barrier causing this, but it

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

2006-11-10 Thread Christopher X. Candreva
On Fri, 10 Nov 2006, zamri wrote: I use clamav 0.90rc2 and my friend uses clamav 0.88.5 (the latest stable). Just now, after I ran freshclam, i run clamdscan for a worm. His could detect it as worm and mine didn't. Why is that? It would be helpful to state what platform and what worm. IE, I

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

2006-11-10 Thread Christopher X. Candreva
On Fri, 10 Nov 2006, Ken Jones wrote: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=89 Access Denied You are not authorized to access bug #89. I think the clam Bugzilla require you to have an account and be logged in to watch bugs.

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

2006-11-10 Thread Christopher X. Candreva
On Fri, 10 Nov 2006, Ken Jones wrote: I do have an account I even have open reported bugs that I am working on with the developers :) (ok, I've reported and they are trying to fix) Look man, I just use the bugzulla. I don't want to have to understand how it works. Ducks for cover . . .

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

2006-11-10 Thread Christopher X. Candreva
On Fri, 10 Nov 2006, Dennis Peterson wrote: He scores! Thank you, I'll be here all week. Don't forget to tip your waitresses. I get the same login error, btw, and since I use Solaris exclusively, I'm interested. Look like it's been clasified as a security bug, so I'll let the devel

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-09 Thread Christopher X. Candreva
On Thu, 9 Nov 2006, Daniel J McDonald wrote: My observation is that of all the modern packages ClamAV fails to install and run successfully and securely without operator intervention. I think that this should be refined to reference Fedora packages and perhaps not all of them.

Re: [Clamav-users] Compiling rc2 on Solaris

2006-11-07 Thread Christopher X. Candreva
On Tue, 7 Nov 2006, Tomasz Kojm wrote: Please report the problem to http://bugs.clamav.net Opened. Sorry, I just assumed it was Sun's problem. == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

2006-11-07 Thread Christopher X. Candreva
On Tue, 7 Nov 2006, Jim Redman wrote: Your opinions, seem to be the prevalent attitude of the vocal members of this list - if you don't suffer, it wasn't worth it. I would disagree, in that I don't see it as suffering. Forgive me if I missed it, but what is your specific problem ? Perhaps we

[Clamav-users] Compiling rc2 on Solaris

2006-10-31 Thread Christopher X. Candreva
I don't know if this helps anyone else, but on Solaris 8 I had to tell configure explicily to use bash instead of stock sun /bin/sh . It was generating an error on the check for the clamav user (looked like it was trying to run a program called clamav:: )

Re: [Clamav-users] Clamav-milter with Postfix

2006-10-23 Thread Christopher X. Candreva
On Mon, Oct 23, 2006 at 05:53:30AM -0400, Gerard Seibert wrote: Anyway, we send out several times a week flyers to our customers. These mailings range from 750 to 2000 messages per run. To scan 2000 identical messages is insane, not to mention a total waste of system resources. Other than

[Clamav-users] 0.90rc1 missing thing 0.88.5 catches

2006-10-21 Thread Christopher X. Candreva
I have a sample of W97M.Lafool.U caught by 0.88.5 that 0.90rc1.1 says is clean. I also received an almost identical mail that both say is clean. The second I've submitted as a new virus sample. The first isn't taken, since the web form's 0.88.5 catches it. I assumed I had missed a config

Re: [Clamav-users] 0.90rc1 missing thing 0.88.5 catches

2006-10-21 Thread Christopher X. Candreva
On Sat, 21 Oct 2006, Christopher X. Candreva wrote: I have a sample of W97M.Lafool.U caught by 0.88.5 that 0.90rc1.1 says is clean. I also received an almost identical mail that both say is clean. Looks like this may be a word/unpacker problem on Solaris/Sparc, as it is properly detected

  1   2   3   >