Re: [clamav-users] Update Clamav with Debian Lenny

2012-08-04 Thread G.W. Haywood

Hi there,

On Sat, 4 Aug 2012, n22e113 wrote:


To solve the problem (as root) ...


Were you also going to explain why you're installing a security
product on a distribution for which security updates have been
discontinued since February 6th 2012?

http://www.debian.org/releases/lenny/

--

73,
Ged.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Update Clamav with Debian Lenny

2012-08-04 Thread Jim Preston

On 08/04/2012 03:21 AM, G.W. Haywood wrote:

Hi there,

On Sat, 4 Aug 2012, n22e113 wrote:


To solve the problem (as root) ...


Were you also going to explain why you're installing a security
product on a distribution for which security updates have been
discontinued since February 6th 2012?

http://www.debian.org/releases/lenny/

--

73,
Ged.

Probably because the person has a too complicated system like I have 
(Fedora Core 7) and the update from 6 to 7 was so difficult and time 
consuming that I choose to just forgo upgrading again and went to 
compiling from sources updates to vulnerable programs.


And please do not start a rant, this is meant to be somewhat humorous if 
also somewhat sad and definitely not SOP or recommended. I have since 
built a new box but am still (after several months) trying to get 
application and data set moved over and working.


Jim

--
Jim Preston



___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[clamav-users] Update Clamav with Debian Lenny

2012-08-03 Thread n22e113

Hi, list,
To solve the problem (as root) :) My bad! I know!

1. Make sure you have zlib-devl, gcc and make (I use gcc-4.3):
# aptitude -y install zlib1g-dev gcc-4.3 make

2. Download the latest (July 2012) stable source:
# cd /usr/src  wget 
http://sourceforge.net/projects/clamav/files/clamav/0.97.5/clamav-0.97.5.tar.gz

3. Decompress:
# cd /usr/src  tar xvzf clamav-0.97.5.tar.gz

4. Complie with make
# cd /usr/src/clamav-0.97.5  ./configure –sysconfdir=/etc/clamav –exec_prefix=/usr  
make  make install

5. Once complete:
# /etc/init.d/clamav-daemon restart

That’s it! Cheers!

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] update clamav

2012-07-09 Thread Bruno Barosa

Hello again,

Good morning and a good week for all

anyone has got news on this issue?

Regards
Bruno

On 27-06-2012 19:29, Nigel Houghton wrote:

On Jun 27, 2012, at 8:12 AM, Matthew Olney wrote:


Apparently, the answer to this is on the wiki, but it is having issues.


Begin forwarded message:


From: Ilyas Doskhozhayevidoskhozha...@gmail.com
Date: June 27, 2012, 5:45:28 AM EDT
To: jes...@sourcefire.com
Subject: update clamav

Hi thank all you team for this antivirus tool/

My question is on debian i have servers that can not update virus database  
directly from internet, so they update from local repository on network
So can i make clamav update from my local repository on server that has 
internet ?


I use this source list to update from repository on server

deb http://10.0.1.11/localrepository /

Thank in advanse

Here's the relevant information from the wiki:

Solution 1: Use an HTTP proxy

This solution is really easy to implement and is bandwidth efficient.

Install a proxy server (i.e. squid) and then tell your freshclam clients to use 
it. This can be done by setting the HTTPProxyServer parameter in freshclam.conf 
(see man 5 freshclam.conf for the details).

Solution 2: Serve .cvd files from a local web server

This solution is really simple to implement but it's only effective if your 
clients are all on the same local network and bandwidth is not an issue for you.

Configure a local webserver on one of your machines (say machine1.mylan) and 
let freshclam download the *.cvd files from http://database.clamav.net to the 
webserver's DocumentRoot.

Add this line to freshclam.conf on machine1.mylan:

   ScriptedUpdates off

First the database will be downloaded to the local webserver and then the other 
clients on the network will update their copy of the database from it. For this 
to work you have to change freshclam.conf on your clients so that it reads:

   DatabaseMirror machine1.mylan

   ScriptedUpdates off

--
Nigel Houghton
Head Mentalist, Time Lord
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/;  http://labs.snort.org/



___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] update clamav

2012-07-09 Thread Joel Esler
What issue?

-- 
Joel Esler

On Jul 9, 2012, at 5:08 AM, Bruno Barosa bruno.bar...@pessoaseprocessos.com 
wrote:

 Hello again,
 
 Good morning and a good week for all
 
 anyone has got news on this issue?
 
 Regards
 Bruno
 
 On 27-06-2012 19:29, Nigel Houghton wrote:
 On Jun 27, 2012, at 8:12 AM, Matthew Olney wrote:
 
 Apparently, the answer to this is on the wiki, but it is having issues.
 
 Begin forwarded message:
 
 From: Ilyas Doskhozhayevidoskhozha...@gmail.com
 Date: June 27, 2012, 5:45:28 AM EDT
 To: jes...@sourcefire.com
 Subject: update clamav
 
 Hi thank all you team for this antivirus tool/
 
 My question is on debian i have servers that can not update virus 
 database  directly from internet, so they update from local repository on 
 network
 So can i make clamav update from my local repository on server that has 
 internet ?
 
 
 I use this source list to update from repository on server
 
 deb http://10.0.1.11/localrepository /
 
 Thank in advanse
 Here's the relevant information from the wiki:
 
 Solution 1: Use an HTTP proxy
 
 This solution is really easy to implement and is bandwidth efficient.
 
 Install a proxy server (i.e. squid) and then tell your freshclam clients to 
 use it. This can be done by setting the HTTPProxyServer parameter in 
 freshclam.conf (see man 5 freshclam.conf for the details).
 
 Solution 2: Serve .cvd files from a local web server
 
 This solution is really simple to implement but it's only effective if your 
 clients are all on the same local network and bandwidth is not an issue for 
 you.
 
 Configure a local webserver on one of your machines (say machine1.mylan) and 
 let freshclam download the *.cvd files from http://database.clamav.net to 
 the webserver's DocumentRoot.
 
 Add this line to freshclam.conf on machine1.mylan:
 
   ScriptedUpdates off
 
 First the database will be downloaded to the local webserver and then the 
 other clients on the network will update their copy of the database from it. 
 For this to work you have to change freshclam.conf on your clients so that 
 it reads:
 
   DatabaseMirror machine1.mylan
 
   ScriptedUpdates off
 
 --
 Nigel Houghton
 Head Mentalist, Time Lord
 SF VRT Department of Intelligence Excellence
 http://vrt-blog.snort.org/;  http://labs.snort.org/
 
 
 
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] update clamav

2012-07-09 Thread Matt Olney
Bruno,

Nigel Houghton replied on Jun 27th:

Here's the relevant information from the wiki:

Solution 1: Use an HTTP proxy

This solution is really easy to implement and is bandwidth efficient.

Install a proxy server (i.e. squid) and then tell your freshclam
clients to use it. This can be done by setting the HTTPProxyServer
parameter in freshclam.conf (see man 5 freshclam.conf for the
details).

Solution 2: Serve .cvd files from a local web server

This solution is really simple to implement but it's only effective if
your clients are all on the same local network and bandwidth is not an
issue for you.

Configure a local webserver on one of your machines (say
machine1.mylan) and let freshclam download the *.cvd files from
http://database.clamav.net to the webserver’s DocumentRoot.

Add this line to freshclam.conf on machine1.mylan:

  ScriptedUpdates off

First the database will be downloaded to the local webserver and then
the other clients on the network will update their copy of the
database from it. For this to work you have to change freshclam.conf
on your clients so that it reads:

  DatabaseMirror machine1.mylan

  ScriptedUpdates off

Matt

On Mon, Jul 9, 2012 at 7:43 AM, Joel Esler jes...@sourcefire.com wrote:
 What issue?

 --
 Joel Esler

 On Jul 9, 2012, at 5:08 AM, Bruno Barosa bruno.bar...@pessoaseprocessos.com 
 wrote:

 Hello again,

 Good morning and a good week for all

 anyone has got news on this issue?

 Regards
 Bruno

 On 27-06-2012 19:29, Nigel Houghton wrote:
 On Jun 27, 2012, at 8:12 AM, Matthew Olney wrote:

 Apparently, the answer to this is on the wiki, but it is having issues.

 Begin forwarded message:

 From: Ilyas Doskhozhayevidoskhozha...@gmail.com
 Date: June 27, 2012, 5:45:28 AM EDT
 To: jes...@sourcefire.com
 Subject: update clamav

 Hi thank all you team for this antivirus tool/

 My question is on debian i have servers that can not update virus 
 database  directly from internet, so they update from local repository 
 on network
 So can i make clamav update from my local repository on server that has 
 internet ?


 I use this source list to update from repository on server

 deb http://10.0.1.11/localrepository /

 Thank in advanse
 Here's the relevant information from the wiki:

 Solution 1: Use an HTTP proxy

 This solution is really easy to implement and is bandwidth efficient.

 Install a proxy server (i.e. squid) and then tell your freshclam clients to 
 use it. This can be done by setting the HTTPProxyServer parameter in 
 freshclam.conf (see man 5 freshclam.conf for the details).

 Solution 2: Serve .cvd files from a local web server

 This solution is really simple to implement but it's only effective if your 
 clients are all on the same local network and bandwidth is not an issue for 
 you.

 Configure a local webserver on one of your machines (say machine1.mylan) 
 and let freshclam download the *.cvd files from http://database.clamav.net 
 to the webserver's DocumentRoot.

 Add this line to freshclam.conf on machine1.mylan:

   ScriptedUpdates off

 First the database will be downloaded to the local webserver and then the 
 other clients on the network will update their copy of the database from 
 it. For this to work you have to change freshclam.conf on your clients so 
 that it reads:

   DatabaseMirror machine1.mylan

   ScriptedUpdates off

 --
 Nigel Houghton
 Head Mentalist, Time Lord
 SF VRT Department of Intelligence Excellence
 http://vrt-blog.snort.org/;  http://labs.snort.org/



 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] update clamav

2012-07-09 Thread Bruno Barosa

Hi,

The issue is not beeing able to update the clamav core.
Nigel posted about databse updates, if i understood it right.

I'm quoting my original post:


Hi, can anyone help?
Running on Centos 5.x (various versions from 5.4 to 5.8) 64bit.
Epel installed, RPMForge unninstalled, and prefer to keep it this way.

Logwatch:

Last ClamAV update process started at Thu Jun 21 04:02:02 2012

 Last Status:
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97.3 Recommended version: 0.97.5
DON'T PANIC! Readhttp://www.clamav.net/support/faq
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: 
sven)
daily.cld is up to date (version: 15065, sigs: 219026, f-level: 63, 
builder: guitar)
bytecode.cld is up to date (version: 185, sigs: 39, f-level: 63, builder: 
neo)

 The following ERRORS and/or WARNINGS were detected when
 running the ClamAV update process.  If these ERRORS and/or
 WARNINGS do not show up in the Last Status section above,
 then their underlying cause has probably been corrected.

 WARNINGS:
Local version: 0.97.3 Recommended version: 0.97.5: 2 Time(s)
Your ClamAV installation is OUTDATED!: 2 Time(s)


-
Trying to update:

[root@myserver ~]# yum update clamav
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base:ftp.dei.uc.pt
 * epel:ftp.rediris.es
 * extras:ftp.dei.uc.pt
 * updates:ftp.dei.uc.pt
base
  | 1.1 kB 00:00
epel
  | 3.4 kB 00:00
extras  
  | 2.1 kB 00:00
updates 
  | 1.9 kB 00:00
Setting up Update Process
No Packages marked for Update
[root@reticulum ~]# yum update clam*
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base:ftp.dei.uc.pt
 * epel:ftp.rediris.es
 * extras:ftp.dei.uc.pt
 * updates:ftp.dei.uc.pt
Setting up Update Process
No Packages marked for Update


Thanks

Bruno


Regards,
Bruno
**

On 09-07-2012 13:58, Matt Olney wrote:

Bruno,

Nigel Houghton replied on Jun 27th:

Here's the relevant information from the wiki:

Solution 1: Use an HTTP proxy

This solution is really easy to implement and is bandwidth efficient.

Install a proxy server (i.e. squid) and then tell your freshclam
clients to use it. This can be done by setting the HTTPProxyServer
parameter in freshclam.conf (see man 5 freshclam.conf for the
details).

Solution 2: Serve .cvd files from a local web server

This solution is really simple to implement but it's only effective if
your clients are all on the same local network and bandwidth is not an
issue for you.

Configure a local webserver on one of your machines (say
machine1.mylan) and let freshclam download the *.cvd files from
http://database.clamav.net to the webserver’s DocumentRoot.

Add this line to freshclam.conf on machine1.mylan:

   ScriptedUpdates off

First the database will be downloaded to the local webserver and then
the other clients on the network will update their copy of the
database from it. For this to work you have to change freshclam.conf
on your clients so that it reads:

   DatabaseMirror machine1.mylan

   ScriptedUpdates off

Matt

On Mon, Jul 9, 2012 at 7:43 AM, Joel Eslerjes...@sourcefire.com  wrote:

What issue?

--
Joel Esler

On Jul 9, 2012, at 5:08 AM, Bruno Barosabruno.bar...@pessoaseprocessos.com  
wrote:


Hello again,

Good morning and a good week for all

anyone has got news on this issue?

Regards
Bruno

On 27-06-2012 19:29, Nigel Houghton wrote:

On Jun 27, 2012, at 8:12 AM, Matthew Olney wrote:


Apparently, the answer to this is on the wiki, but it is having issues.


Begin forwarded message:


From: Ilyas Doskhozhayevidoskhozha...@gmail.com
Date: June 27, 2012, 5:45:28 AM EDT
To: jes...@sourcefire.com
Subject: update clamav

Hi thank all you team for this antivirus tool/

My question is on debian i have servers that can not update virus database  
directly from internet, so they update from local repository on network
So can i make clamav update from my local repository on server that has 
internet ?


I use this source list to update from repository on server

deb http://10.0.1.11/localrepository /

Thank in advanse

Here's the relevant information from the wiki:

Solution 1: Use an HTTP proxy

This solution is really easy to implement and is bandwidth efficient.

Install a proxy server (i.e. squid) and then tell your freshclam clients to use 
it. This can be done by setting the HTTPProxyServer parameter in freshclam.conf 
(see man 5 freshclam.conf for the details).

Solution 2: Serve .cvd files from a local web server

This solution is really simple to implement but 

Re: [clamav-users] update clamav

2012-07-09 Thread Benny Pedersen

Den 2012-07-09 15:05, Bruno Barosa skrev:


The issue is not beeing able to update the clamav core.
Nigel posted about databse updates, if i understood it right.


if 0.97.4 and 0.97.5 is stable why not tell package maintainers on 
centos about it ?


0.97.3 is still latest stable on gentoo/funtoo


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] update clamav

2012-07-09 Thread Kris Deugau
Bruno Barosa wrote:
 Hi,
 
 The issue is not beeing able to update the clamav core.
 Nigel posted about databse updates, if i understood it right.
 
 I'm quoting my original post:
 
 
 Hi, can anyone help?
 Running on Centos 5.x (various versions from 5.4 to 5.8) 64bit.
 Epel installed, RPMForge unninstalled, and prefer to keep it this way.

And as previously responded, you have 3 choices to keep the Clam
software up to date if you don't want to use RPMForge:

- Wait for EPEL to update their Clamav package(s)

- Take an existing source package and rebuild for the current Clamav
release

- Uninstall the packages and install straight from source

(There may be other groups building addon packages for RHEL and its
community rebuilds;  I haven't bothered looking since RPMForge works for
me.)

If you absolutely have to get the current version, and you can't build
from source (either straight source install or package rebuild), and you
don't want to use the RPMForge package, you'll have to bug the EPEL
folks for an updated package.

I used to build my own packages for quite a few things before I came
across Dag Wieers' efforts a number of years ago (which have since been
brought under the RPMForge umbrella), and aside from some personal
preference issues with how they've declared dependencies on some of the
more complex Perl(-using) packages (MIMEDefang and SpamAssassin) I
haven't had any issues with their packages.

-kgd
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] update clamav

2012-06-27 Thread Nigel Houghton

On Jun 27, 2012, at 8:12 AM, Matthew Olney wrote:

 Apparently, the answer to this is on the wiki, but it is having issues.
 
 Begin forwarded message:
 
 From: Ilyas Doskhozhayev idoskhozha...@gmail.com
 Date: June 27, 2012, 5:45:28 AM EDT
 To: jes...@sourcefire.com
 Subject: update clamav
 
 Hi thank all you team for this antivirus tool/
 
 My question is on debian i have servers that can not update virus database  
 directly from internet, so they update from local repository on network
 So can i make clamav update from my local repository on server that has 
 internet ?
 
 
 I use this source list to update from repository on server 
 
 deb http://10.0.1.11/localrepository /
 
 Thank in advanse

Here's the relevant information from the wiki:

Solution 1: Use an HTTP proxy

This solution is really easy to implement and is bandwidth efficient.

Install a proxy server (i.e. squid) and then tell your freshclam clients to use 
it. This can be done by setting the HTTPProxyServer parameter in freshclam.conf 
(see man 5 freshclam.conf for the details).

Solution 2: Serve .cvd files from a local web server

This solution is really simple to implement but it's only effective if your 
clients are all on the same local network and bandwidth is not an issue for you.

Configure a local webserver on one of your machines (say machine1.mylan) and 
let freshclam download the *.cvd files from http://database.clamav.net to the 
webserver’s DocumentRoot.

Add this line to freshclam.conf on machine1.mylan:

  ScriptedUpdates off

First the database will be downloaded to the local webserver and then the other 
clients on the network will update their copy of the database from it. For this 
to work you have to change freshclam.conf on your clients so that it reads:

  DatabaseMirror machine1.mylan

  ScriptedUpdates off

--
Nigel Houghton
Head Mentalist, Time Lord
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/  http://labs.snort.org/



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

RE: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.

2004-07-13 Thread James Nelson

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of James Nelson
Sent: Tuesday, July 13, 2004 9:53 AM
To: [EMAIL PROTECTED]
Subject: [Clamav-users] clamav-milter and sendmail 8.13.0 problem.

I am running Fedora Core 1, with sendmail 8.13.0 and installed clamav .74
1.1 from the following rpms:

clamav-0.74-1.1.fc1.dag.i386.rpm    
clamav-db-0.74-1.1.fc1.dag.i386.rpm  
clamav-devel-0.74-1.1.fc1.dag.i386.rpm   
clamav-milter-0.74-1.1.fc1.dag.i386.rpm  
clamd-0.74-1.1.fc1.dag.i386.rpm    

My sendmail.mc contains:

INPUT_MAIL_FILTER(`clmilter',`S=inet:[EMAIL PROTECTED],
F=,T=S:10m;R:10m;E:10m')dnl
define(`confINPUT_MAIL_FILTERS', `clmilter')dnl

Upon reload of sendmail I get the following errors when mail is received by
sendmail:

Jul 12 17:39:08 mail4 sm-mta[32103]: i6CMd8en032103: SYSERR(root): out of
memory: Cannot allocate memory


I previously read there was a similar problem with clamav-milter but it was
fixed.  Is this possibly its return?  Or could something else be causing it?

Thanks,
James
---

I switched form TCP sockets to local sockets for sake of testing.  The
memory error has ceased but a new error is occurring when clamav-milter
attempts to scan the email.  The error is below:

Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter):
local socket name /var/run/clmilter.sock unsafe
Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to
error state

Any clue?

James




---
This SF.Net email sponsored by Black Hat Briefings  Training.
Attend Black Hat Briefings  Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.

2004-07-13 Thread Brian Morrison
On Tue, 13 Jul 2004 13:09:38 -0500 in
[EMAIL PROTECTED] James Nelson
[EMAIL PROTECTED] wrote:

  I switched form TCP sockets to local sockets for sake of testing. 
  The memory error has ceased but a new error is occurring when
  clamav-milter attempts to scan the email.  The error is below:
 
  Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter
  (clmilter): local socket name /var/run/clmilter.sock unsafe
  Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter
  (clmilter): to error state
 
  Any clue?

Permissions on the socket perhaps?

-- 

Brian Morrison

bdm at fenrir dot org dot uk

GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html


---
This SF.Net email sponsored by Black Hat Briefings  Training.
Attend Black Hat Briefings  Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.

2004-07-13 Thread Alex S Moore
On Tue, 13 Jul 2004 13:09:38 -0500
James Nelson [EMAIL PROTECTED] wrote:

 Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter):
 local socket name /var/run/clmilter.sock unsafe
 Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to
 error state

The times that I have seen this message, it was because directories are group or world 
writable.  See the sendmail Security document.  Check permissions with:
ls -ld /var and ls -ld /var/run

Alex


---
This SF.Net email sponsored by Black Hat Briefings  Training.
Attend Black Hat Briefings  Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.

2004-07-13 Thread Steven Stern
On Tue, 13 Jul 2004 13:09:38 -0500, James Nelson [EMAIL PROTECTED] wrote:

Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter):
local socket name /var/run/clmilter.sock unsafe
Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to
error state

The .sock file should be CHMOD to srwx--  under the owner of the clamav
process, probably the user clamav.  Change the clam* programs to use

/var/run/clamav

Create the directory manually and set the ownershp to clamav:clamav and the
permissions to 755 and you should be OK.
--
   Steve
   


---
This SF.Net email sponsored by Black Hat Briefings  Training.
Attend Black Hat Briefings  Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.

2004-07-13 Thread Nigel Horne
  Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter
  (clmilter): local socket name /var/run/clmilter.sock unsafe
  Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter
  (clmilter): to error state
 
  Any clue?

This is discussed in clamav-milter/INSTALL. If that doesn't work (and
it usually does) then let me know.

Just look for the string 'unsafe' in that file.

-Nigel 


---
This SF.Net email sponsored by Black Hat Briefings  Training.
Attend Black Hat Briefings  Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users



[Clamav-users] Update Clamav

2004-04-29 Thread Marco Draghi
I've received the warning about the outdated version of my clamav-0.67 too.
For install the new clamav-0.70.tar.gz do I need to uninstall the first one
and after install the new one, or just install the last version over 0.67??

Thanks, Marco.



---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149alloc_id=8166op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Update Clamav

2004-04-29 Thread rené BEDDOK
Marco Draghi a écrit :

I've received the warning about the outdated version of my clamav-0.67 too.
For install the new clamav-0.70.tar.gz do I need to uninstall the first one
and after install the new one, or just install the last version over 0.67??
Thanks, Marco.

 

install over.

René



---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149alloc_id66op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Update: clamav-milter child process issues

2004-04-16 Thread Mike Lambert
On Wed, 14 Apr 2004, I wrote:

 On Fri, 9 Apr 2004, I wrote:

  I have been running ClamAV version devel-20040405 for three days without
  issue, until this morning.

 Actually, clamav-milter had been running for about 28 hours before the
 start of the errors.

  Now, for each virus rejected, the following
  entry appears in the syslog:
 
  /kernel: pid 72343 (clamav-milter), uid 3001: exited on signal 11
 
  These appear to be from children as the parent proccess continues to
  run. All else appears normal.
 
  System info:
  FreeBSD 4.9-RELEASE-p2
  clamd / ClamAV version devel-20040405
  ClamAV version devel-20040405, clamav-milter version 0.70g
 
  # ps ax | grep clam
  17139  ??  Is 0:00.07 /usr/local/bin/freshclam -d -c 13
  40560  ??  Ss 2:41.65 /usr/local/sbin/clamd
  40568  ??  Ss 0:13.25 /usr/local/sbin/clamav-milter -lonHP -m50

 This has happened again. After nearly four days of error free operation,
 clamav-milter children that find a virus exit sig 11. Also, I found one
 clamav-milter child stuck consuming 100% CPU.

 Please note:
 - Some amount of time passes from the start of the clamav-milter
   parent process before problems with child processes begin.
 - ONLY clamav-milter children that report a virus exit sig 11
 (or consume 100% cpu).
 - clamav-milter children that DO NOT report a virus exit cleanly.
 - Both clamd.log and maillog look normal. Only syslog has errors.
   These are milters reporting a virus...

 Apr 13 10:03:12 copland /kernel: pid 33341 (clamav-milter), uid 3001:
 exited on signal 11

Shortly after sending the above I realized that in my environment the
only functional difference between a milter that reports a virus and one
that does not is the email notification. I looked through my logs and
found that when a clamav-milter process had reported a virus and exited
cleanly, the event was correctly logged in the syslog and the email
notification was sent, but when the clamav-milter processes began to sig
11, correct logging to the syslog continued, but email notifications
stopped.

I have since restarted clamav-milter with the --quiet option. Time
will tell if this is effective.

-- 
Michael Lambert
Systems Admin, IT Dept
JEOL USA Inc
http://www.jeol.com


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[clamav-users] Update: Clamav Port for OpenBSD

2003-06-29 Thread Flinn Mueller
I have update the port for the -0.60 port for OpenBSD.

Please test.

http://activeintra.net/openbsd/article.php?id=5




clamav-snapshot.tgz
Description: GNU Zip compressed data


clamav.tgz
Description: GNU Zip compressed data


Regards,
Flinn
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [clamav-users] Update: Clamav Port for OpenBSD

2003-06-29 Thread Wouter de Vries
I just tried your port of the latest snapshot.. it works perfeclty well!

Wouter

Flinn Mueller wrote:


I have update the port for the -0.60 port for OpenBSD.

Please test.

http://activeintra.net/openbsd/article.php?id=5




Regards,
Flinn




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]