Re: [Clamav-users] outbound scanning

2006-10-23 Thread Chuck Swiger
On Oct 22, 2006, at 10:50 PM, Tom Metro wrote: [ ...heated debate aside :-), these questions are interesting... ] Is there really much practical value to outbound scanning? Yes. I've seen employees download viral mail from some other service (AOL, fastmail.fm, gmail, whatever) to their

Re: [Clamav-users] outbound scanning

2006-10-23 Thread Chuck Swiger
On Oct 23, 2006, at 11:02 AM, Gerard Seibert wrote: It doesn't stop all potential problems with outbound email from your domain, but together with adding SPF records and using a firewall to block outbound port 25 except from your legitimate mail relay, you can do a lot to keep your domain from

Re: [Clamav-users] outbound scanning

2006-10-23 Thread Chuck Swiger
On Oct 23, 2006, at 11:35 AM, Kevin W. Gagel wrote: From: Chuck Swiger [EMAIL PROTECTED] (I can't block senders just because they don't have reverse DNS configured, or because forward and reverse DNS does not match.) Chuck, Yes you can block them if they don't have a revers DNS. No you

Re: [Clamav-users] Re: How to run clamscan for a list of files from a file?

2006-11-28 Thread Chuck Swiger
On Nov 28, 2006, at 3:13 AM, Ian Abbott wrote: You'll also find that it fails for file names containing whitespace, quote marks, or backslashes. To work around that, you could use tr '\n' '\0' filelist | xargs -0 clamscan or generate the filelist with null-separated filenames in the

Re: [Clamav-users] ZIP files autodetected as virus

2006-12-05 Thread Chuck Swiger
On Dec 5, 2006, at 1:36 PM, Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem wrote: Is their any way to tell Clamav to look at a file before it is considered a Virus? I got a call from a customer who said that Zip files are getting intercepted by clamav and are

Re: [Clamav-users] Re: Curl-trouble on for clamav-0.88.7_1

2006-12-15 Thread Chuck Swiger
On Friday December 15, 2006 at 06:49:42 (AM) Mark wrote: I'm having trouble with curl on FreeBSD 4.11 and clamav-0.88.7_1: === Compressing manual pages for curl-7.15.5_1 === Running ldconfig /sbin/ldconfig -m /usr/local/lib === Registering installation for curl-7.15.5_1 readlink: not

Re: [Clamav-users] Re: DB Update email before actual update available?

2006-12-29 Thread Chuck Swiger
Dave Warren wrote: In message [EMAIL PROTECTED] Per Jessen [EMAIL PROTECTED] wrote: [ ... ] There is no reason that monitors can't monitor other monitors too, in the software world. Sure. But there's a setup cost in terms of admin time, and at least some resources being spent regardless of

Re: [Clamav-users] Why does clam die on a malformed database ?

2006-12-31 Thread Chuck Swiger
Bill Landry wrote: [ ... ] You are preaching to the choir here, as you have no argument from me. I raised the same issue the last time this happened to me a few weeks ago and clamd died twice on me in one day. The script work-around to check the databases before implementing them has saved my

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-15 Thread Chuck Swiger
On Jan 14, 2007, at 2:31 PM, bsd wrote: When I issue a simple command such as # clamscan -l /var/log/clamscan.log -r /Volumes/RAID/pacnisab/ I get an error stating : ERROR: Can't get information about user 0 This is problematic as I really need to scan this volume as root user (because of

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-15 Thread Chuck Swiger
On Jan 15, 2007, at 10:44 AM, Dennis Peterson wrote: Elsewhere in the thread: OS X always has a root account - what it doesn't always have is a root password. Phrase it as you wish: it is true that MacOS X ships with an /etc/ passwd that lists a uid-0 root user with the password locked, but

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-15 Thread Chuck Swiger
On Jan 15, 2007, at 10:57 AM, Tomasz Kojm wrote: Clamscan doesn't use that parameter. His issue is the system that shared out the file system(s) he'd like to scan did not share them out such that user root could read them. The real problem is trying to scan file I disagree and am still

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Chuck Swiger
On Jan 16, 2007, at 3:35 AM, bsd wrote: And with root you already know what happened ! superxserv:~ root# clamscan -l /var/log/clamscan.log -r -v /Volumes/ RAID/Users/ [1] 24605 superxserv:~ root# ERROR: Can't get information about user 0 [1]+ Exit 60 clamscan -l

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Chuck Swiger
On Jan 16, 2007, at 3:11 PM, Stephen Gran wrote: On Tue, Jan 16, 2007 at 09:47:45AM -0800, Chuck Swiger said: Edit the freshclam.conf and clamd.conf files and uncomment the User or DatabaseUser entries; these files will be under /etc/spam/clamav if you are using Apple's default location

Re: [Clamav-users] Clamscan error on OS X Server 10.4.8 impossible to execute as root !

2007-01-16 Thread Chuck Swiger
On Jan 16, 2007, at 3:52 PM, Stephen Gran wrote: I am sorry if I came across as harsher than I intended to. I know that you were part of the earlier discussion and provided valuable insight. No harm done. However, your research so far seems to have focused on freshclam rather than

Re: [Clamav-users] Upgrade to .90?

2007-03-07 Thread Chuck Swiger
On Mar 7, 2007, at 12:40 PM, Jay West wrote: Kevin wrote Follow-up: The above work-around almost works, but clamd occasionally dies without warning now. This is somewhat easier to live with than the previous behavior, where it would be alive but would stop responding, but it's still

Re: [Clamav-users] 0.90.1 - clamd died on Solaris 9

2007-03-12 Thread Chuck Swiger
Hi, Doug-- On Mar 12, 2007, at 6:01 AM, [EMAIL PROTECTED] wrote: I am experiencing the same problems. We have two quad CPU E450's running Solaris 9 handling the incomming mail on our domains. These servers are generally very busy. I initially installed clamav 0.90 with experimental code

Re: [Clamav-users] cannot upgrade to 90.1

2007-03-15 Thread Chuck Swiger
On Mar 15, 2007, at 11:25 AM, jean-paul natola wrote: I updated my ports and when when I install clamav it only brings me to 90_3 and upon running freshclam- it tells me to upgrade to 90.1 Why wont 90.1 install? I did from /usr/ports/security/clamav make deinstall then make install clean

Re: [Clamav-users] Compiling 0.90.1 on Mac OS X Server 10.3

2007-03-15 Thread Chuck Swiger
On Mar 15, 2007, at 5:08 PM, Dana Kashubeck wrote: On 3/15/07 7:04 PM, John Rudd wrote: Seems like, from reading this list, so far ClamAV 0.90.* is pretty much a disaster. I don't think I'm aware of anyone having a smooth experience with it. Yeah, those were my thoughts, too. On the

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 7:03 AM, [EMAIL PROTECTED] wrote: I'm running ClamAV 0.90.1 on FreeBSD 6.2. In front of this server I have 3 other, which gather traffic and run it through my ClamAV-server. Everything is running smothly, except some mails, that are large. Right now I have 4 mails on

Re: [Clamav-users] Problem with big mails

2007-03-29 Thread Chuck Swiger
On Mar 29, 2007, at 12:03 PM, Julio Canto wrote: Per Jessen wrote: Virus-scanning anything bigger than 1-2Mb makes little sense. ANything as big as 20Mb, I would just skip without further consideration. Nowadays it is not unusual to find malware samples exceeding that 2MB size limit.

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Chuck Swiger
On Apr 12, 2007, at 3:55 PM, Tomasz Kojm wrote: On Thu, 12 Apr 2007 16:42:07 -0600 (MDT) James Bourne [EMAIL PROTECTED] wrote: Yes it may be possible, but that's still no excuse for clamd to bail when presented with two sets of data files, one invalid and one valid. There's no perfect

Re: [Clamav-users] *.cvd again!

2007-04-12 Thread Chuck Swiger
On Apr 12, 2007, at 5:02 PM, Dennis Peterson wrote: Tomasz Kojm [EMAIL PROTECTED] wrote: for 3rd party databases this can be managed with a simple script, no need for adding a keyring manager to ClamAV I swear it was just 8 weeks ago or so when we last had this discussion and all manner

Re: [Clamav-users] Clamav-0.90.2 compile Error on FreeBSD 4.8

2007-04-13 Thread Chuck Swiger
On Apr 13, 2007, at 10:32 AM, Anton Yuzhaninov wrote: [EMAIL PROTECTED] wrote on Friday, April 13, 2007, 8:44:34 PM: i get a compile error on FreeBSD 4.8 i have 3 production Server running under FreeBSD 4.8 Try to build it from ports. Regrettably, FreeBSD 4.x is no longer supported by the

Re: [Clamav-users] CLAMAV LOGS VIRUS FILES

2007-05-11 Thread Chuck Swiger
On May 11, 2007, at 10:26 AM, Nestor Bautista wrote: Please , I need , Howto, Why ? CLAMAV, no send logs about virus detect ?? CLAMAV, where put it files viruses in system ?? Consider the following options to clamscan/clamdscan: -l FILE, --log=FILE Save scan report to

Re: [Clamav-users] PID file permissions for clamd and freshclam?

2007-06-05 Thread Chuck Swiger
On Jun 5, 2007, at 2:31 PM, Ken Morley wrote: I want clamd and freshclam (running in daemon mode) to create PID files in /var/run. Both are running as user and group amavisd. Amavisd does not have permissions to create files in /var/run. What is the best (safest) way to give amavisd

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Chuck Swiger
On Jun 18, 2007, at 12:19 PM, jef moskot wrote: On Mon, 18 Jun 2007, Dennis Peterson wrote: Clamscan is a terrible tool to use in real time with email. I would recommend it for low volume servers with cycles to burn, given that the other option is a daemon that can potentially fail.

Re: [Clamav-users] amavisd-new + clamAV ?

2007-07-04 Thread Chuck Swiger
Captain Hook wrote: I would like to ask one question. I currently updated amavisd-new-2.5.2,1 clamav-0.90.3 in FreeBSD, and it turned out the speed of sending out and receiving the email becomes so slow. I discovered that amavisd-new is proceeding the virus scanning by using clamscan, which

Re: [Clamav-users] need help

2007-07-09 Thread Chuck Swiger
On Jul 9, 2007, at 11:33 AM, Thomas Spuhler wrote: Nope, not really. That version of MailScanner should have native clamd support. Just start clamd, and tell MailScanner to use clamd, and the load will drop to lower than ever levels. I wish Amavis would support clamd. It's in the

Re: [Clamav-users] need help

2007-07-09 Thread Chuck Swiger
On Jul 9, 2007, at 12:17 PM, Ralf Hildebrandt wrote: Amavisd-new supports clamdscan just fine. Actually, it uses it's own code, which resembles clamdscan. You're right-- perhaps I should have said, it supports accessing clamd using the same mechanism that clamdscan uses. :-) -- -Chuck

Re: [Clamav-users] Compile ClamAV 0.91.1 with gcc 3.4.3 on HPUX 10.20

2007-08-08 Thread Chuck Swiger
On Aug 8, 2007, at 2:26 AM, Banny Lau wrote: I met the problem while I am running the make after finished configure as the following: ./configure CFLAGS=-D_XOPEN_SOURCE_EXTENDED --disable-dns -- disable-shared --disable-static gcc -D_XOPEN_SOURCE_EXTENDED -o clamscan output.o getopt.o

Re: [Clamav-users] speeding up clamav

2007-09-09 Thread Chuck Swiger
Mohsen Pahlevanzadeh wrote: Dear all, How can i speed up clamav scanning? The most straightforward method would be to buy faster hardware. A more complex approach would be to have a better understanding of your email traffic and only send stuff to ClamAV after you've done your best to refuse

Re: [Clamav-users] speeding up clamav

2007-09-10 Thread Chuck Swiger
On Sep 10, 2007, at 4:29 AM, Rick Cooper wrote: No argument from me, but it still begs the question why so much slower? I think clam is one of the best opensource projects in terms of impact on the community, and I certainly didn't mean to knock it in any way but I do wonder why so much

Re: [Clamav-users] High memory usage

2007-09-10 Thread Chuck Swiger
On Sep 10, 2007, at 8:00 AM, Francois CLAIRE wrote: The clamav-milter and clamd processes are using a lot of memory on my FC6 box: PID USERPR NI VIRT RES SHR S %CPU %MEM TIME+COMMAND 2909 clamav 20 0 102m 59m 1104 S 0.0 11.8 0:44.54 clamav-milter 2734 clamav 20 0 68424

Re: [Clamav-users] No Support for Digital Signatures

2007-10-01 Thread Chuck Swiger
On Oct 1, 2007, at 4:22 PM, Paul Arnone wrote: Prior to upgrading to ClamAV 91.2 on our FreeBSD 6.2 OS, I used portupgrade to install the latest version of the GMP library as suggested in the Troubleshooting section of FAQs. When I run freshclam, however, I still receive the message, NO

Re: [Clamav-users] No Support for Digital Signatures

2007-10-02 Thread Chuck Swiger
Paul Arnone wrote: Thanks. I updated the GMP library using portupgrade and then I installed ClamAV-0.91.2 from source code. When I run pkg_info -r clamav-0.91.2 I get can't find package 'clamav-0.91.2' installed or in a file and when I run portupgrade -fR clamav-0.91.2 I get no such

Re: [Clamav-users] Vote for ClamAV as the best anti-malware solution

2007-10-23 Thread Chuck Swiger
On Oct 23, 2007, at 8:32 AM, Mike Guiterman wrote: ClamAV has been nominated for the Best Anti-Malware Solution in the 2008 SC Magazine Readers Trust Awards. Please vote using the link below to make sure that ClamAV is recognized as the best anti-malware solution. These awards recognize

Re: [Clamav-users] Problem with internal logger

2007-12-05 Thread Chuck Swiger
On Dec 5, 2007, at 9:17 AM, David F. Skoll wrote: Enable LogSyslog instead of using the built-in logger. (While we're on the topic, removing the built-in logger would be an excellent code cleanup; there's really no need to reinvent syslog.) If ClamAV was intended to run only on Unix

Re: [Clamav-users] Sig version not reported correctly in 0.92

2007-12-20 Thread Chuck Swiger
On Dec 20, 2007, at 6:29 AM, Ugo Bellavance wrote: [EMAIL PROTECTED] clamd -V ClamAV 0.92/5110/Wed Dec 12 15:42:31 2007 [EMAIL PROTECTED] freshclam ClamAV update process started at Thu Dec 20 09:29:43 2007 main.cvd is up to date (version: 45, sigs: 169676, f-level: 21, builder: sven)

Re: [Clamav-users] Vasiliy Bochin в команд ировке

2008-03-26 Thread Chuck Swiger
On Mar 26, 2008, at 2:08 PM, Jan-Pieter Cornet wrote: Most users make sure their vacation program does not auto-respond to mailinglist mails, especially not to the list itself. On some mailinglists, it is grounds for immediate removal. Indeed-- properly written autoresponders or vacation

Re: [Clamav-users] Anti Virus Engine - Compilation Problem

2008-04-08 Thread Chuck Swiger
On Apr 8, 2008, at 3:26 PM, [EMAIL PROTECTED] wrote: [ ... ] configure: error: no acceptable C compiler found in $PATH] But I have GCC 4.0 and I have also copied it to /bin. How can I overcome this problem.Please help. Take a look at the last part of config.log; it will probably indicate

Re: [Clamav-users] Anti Virus Engine - Compilation Problem

2008-04-09 Thread Chuck Swiger
On Apr 9, 2008, at 10:14 AM, [EMAIL PROTECTED] wrote: [ ...building ClamAV on MacOS X... ] The configuration was also stopped by the PR28045 bug but configure prefixed with CFLAGS='-O0' bypassed the problem. Thanks once again for your expert help. Good to know things worked out for you; and

Re: [Clamav-users] Freshclam Update Failures

2008-04-14 Thread Chuck Swiger
On Apr 14, 2008, at 1:06 PM, Carlos Williams wrote: It is not fine, in the sense that you didn't update since a long time (55 DB versions got released in the mean time!) So does this freshclam run every night to update or how does this exactly work? I want to kind have this automated and

Re: [Clamav-users] FreeBSD 4.11 and ports

2008-04-16 Thread Chuck Swiger
On Apr 16, 2008, at 12:31 PM, Török Edwin wrote: Manpages indicate to use -pthread to link. Linux: man pthreads Compiling on Linux On Linux, programs that use the Pthreads API should be compiled using cc -pthread FreeBSD:

Re: [Clamav-users] clamav 0.93 on FreeBSD 4

2008-04-23 Thread Chuck Swiger
Hi, all-- On Apr 23, 2008, at 10:18 AM, Török Edwin wrote: I think this question was already asked, and the answer was to try the OpenBSD patch. Did you try the patch from here? https://wwws.clamav.net/bugzilla/show_bug.cgi?id=885 Thanks for the pointer, Török. This patch makes clamd work

Re: [Clamav-users] feature request?

2008-05-08 Thread Chuck Swiger
On May 8, 2008, at 4:08 PM, Rekrutacja wrote: is it possible that developers will add option to clamscan, to load file list to be scanned, from other file? Can't you do this via something like: % ls -1 /tmp/filelist_to_scan % xargs clamdscan /tmp/filelist_to_scan ...? the problem is i

Re: [Clamav-users] feature request?

2008-05-09 Thread Chuck Swiger
On May 8, 2008, at 5:43 PM, Dennis Peterson wrote: Can't you do this via something like: % ls -1 /tmp/filelist_to_scan % xargs clamdscan /tmp/filelist_to_scan The clamd user would need to be root for this to always work. That is probably not a good idea when scanning user space. If clamd

Re: [Clamav-users] clamdscan [file] shows access denied

2008-05-26 Thread Chuck Swiger
On May 26, 2008, at 7:56 PM, Chris wrote: Any ideas/suggestions? Sure: make sure whatever uid the clamd daemon is running as has permissions to access the file if you want to use clamdscan. If it doesn't, use clamscan instead for that case, or copy the file to /tmp or someplace like that

Re: [Clamav-users] 0.93.1RC1

2008-05-28 Thread Chuck Swiger
On May 28, 2008, at 7:08 AM, Nigel Horne wrote: We welcome any feedback and bugs on this RC prior to the release of 0.93.1, which is currently scheduled for 6th June. It doesn't matter if you don't have a test environment, you can still help us for example by downloading the release

Re: [Clamav-users] [ot?] oh no

2008-07-11 Thread Chuck Swiger
On Jul 11, 2008, at 7:20 AM, shuttlebox wrote: [ ... ] The header just says it was scanned by Amavis, not that Amavis used ClamAV. For what it's worth, this can easily be changed if you add the following: $X_HEADER_LINE = $myproduct_name+ClamAV at $mydomain; ...to your amavisd.conf.

Re: [Clamav-users] Using ClamAV with Dspam - how do I verify it's working?

2008-08-10 Thread Chuck Swiger
On Aug 9, 2008, at 10:06 PM, Jeff Weinberger wrote: The question is: if I were to look at the log file, what would/should I see there if: 1) ClamAV found something to be a virus? or Well, I tend to see something like this in clamd.log: SelfCheck: Database status OK.

Re: [Clamav-users] Clamav Config Debian Help

2008-08-12 Thread Chuck Swiger
Hi, Carlos-- On Aug 12, 2008, at 5:30 AM, Carlos Williams wrote: Now once I have that installed, I am confused as to where to get guidance to start getting Clamav to work with Amavisd. Anyone have any tips on how this works with my distribution? Look in your amavisd.conf for the @av_scanners

Re: [Clamav-users] Clamav Config Debian Help

2008-08-12 Thread Chuck Swiger
On Aug 12, 2008, at 10:25 AM, Carlos Williams wrote: I just installed amavisd so it has a very small vanilla config and I don't see what you mentioned above in my config. Here is what I have: Your config looks to be about the smallest valid config, but there might be a bigger one with

Re: [Clamav-users] How To Clean Infected Files

2008-09-10 Thread Chuck Swiger
On Sep 10, 2008, at 9:41 AM, Carlos Williams wrote: --remove Remove infected files. Be careful. Why is this dangerous or does it have a caveat warning? It's got a caveat because it's going to delete anything which matches it's signatures-- and even things with URLs which happen to trigger

Re: [Clamav-users] Error with make on Mac OS X 10.4.11 Intel - 0.94

2008-09-23 Thread Chuck Swiger
On Sep 23, 2008, at 8:22 AM, Faddah Steve Yuetsu Wolf wrote: whoops! somehow, my cut and paste of all that came after $ locate libclamunrar got truncated. here is the full listing of what that command returned — [ .../Users/yuetsu 1/Downloads/clamav-0.94... ] Try doing your builds under /tmp

Re: [Clamav-users] Problem with adding the option TCPSocket 3310 in my clamd.conf file - clamd doesn't launche anymore

2008-10-10 Thread Chuck Swiger
On Oct 10, 2008, at 12:39 PM, Cédric Rossé wrote: I read a lot about clamdrib and in order to not have connection problems, we have to append these two lines to the clamd.conf file : TCPAddr localhost TCPSocket 3310 When I add the line *TCPSocket 3310*, and reboot my computer the clamd

Re: [Clamav-users] Problem with adding the option TCPSocket 3310 in my clamd.conf file - clamd doesn't launche anymore

2008-10-12 Thread Chuck Swiger
On Oct 11, 2008, at 3:48 AM, Tomasz Kojm wrote: If you use TCP method of connectivity, you have to disable the named socket mechanism by commenting out the LocalSocket option, and probably FixStaleSocket also. In the 0.9x series TCP and local sockets can be used simultaneously That's

Re: [Clamav-users] How to scan MXF file?

2008-12-15 Thread Chuck Swiger
On Dec 15, 2008, at 11:14 AM, Aleksey Tsalolikhin wrote: Is there any way to force ClamAV to scan the file, please? Of course. Use clamscan --max-scansize=0 or set MaxScanSize 0 in clamd.conf if you are using clamdscan + clamd. -- -Chuck ___ Help

Re: [Clamav-users] opensuse11.1 loses network connection during a cronjob that utilizes freshclam and clamscan

2009-01-07 Thread Chuck Swiger
On Jan 7, 2009, at 8:03 AM, Kaplan, Andrew H. wrote: One of our servers had opensuse 11.1 installed as an upgrade from opensuse 10.3 on Monday of this week, and has lost its network connection twice in as many days. The network cards on the server, of which one is currently in use and the

Re: [Clamav-users] Mac virus question

2009-01-22 Thread Chuck Swiger
On Jan 22, 2009, at 3:14 PM, Dennis Peterson wrote: Anyone have any comments on the iServices.a virus found in illegal distributions of iLife '09? http://www.computerworld.com/action/article.do?command=viewArticleBasicarticleId=9126609intsrc=hm_list If you have a copy, please submit it to

Re: [Clamav-users] Can anybody direct me to the correct postfix/a mavis-new clamav configuration

2009-02-27 Thread Chuck Swiger
On Feb 27, 2009, at 9:32 AM, Bowie Bailey wrote: So long as Postfix can send mail to amavisd-new, and amavisd-new can send the mail back to Postfix, then all you have to do is make sure amavisd-new is configured to correctly use SA and Clam. Also, since amavisd-new incorporates SpamAssassin

Re: [Clamav-users] Script Update Name Change Announcement

2009-04-24 Thread Chuck Swiger
On Apr 24, 2009, at 9:24 AM, Bill Landry wrote: Some versions of 'find' don't understand the 'exec {} +' construct, so it might be safer not to use it. I guess I'll have to change this to exec {} \; even though it's much slower as it executes each command serially versus batch mode. How

Re: [Clamav-users] List bounces

2009-06-30 Thread Chuck Swiger
Hi, Tom-- On Jun 30, 2009, at 3:41 PM, Tom Shaw wrote: I have wasted my time trying to contact snigelpost.org, webnoice.se, swebase.com, wekudata.se and utfors.se who all seem to be part of the problem and who do not return emails sent to postmaster, abuse, and their whois contacts. If

Re: [Clamav-users] 64bit RH ES5 Compile Error for Clamav 0.95.3

2009-10-30 Thread Chuck Swiger
Hi-- On Oct 30, 2009, at 4:46 PM, George R. Kasica wrote: Why isn't there a .so file? Linking a .a file (compiled without - fPIC) into a .so file (compiled with -fPIC) is not going to work on x86_64. I have no idea - I just followed the zlib instructions to run ./configure make make install

Re: [Clamav-users] sorry this is a bit brief...

2009-11-26 Thread Chuck Swiger
steve wrote: [ ... ] and is all running fine again. Can anyone suggest where to start with sorting this one out?? Any config file changes I've missed, for example? It might be a problem with some of the many third-party signature databases you are loading; consider restarting 0.95.3 clamd

Re: [Clamav-users] ClamD Scan is not working on ubuntu9.04

2010-03-07 Thread Chuck Swiger
On Mar 7, 2010, at 8:29 PM, aman_none wrote: 1. After running the scan i m getting the following error clamdscan /var/ /var: lstat() failed: Permission denied. ERROR Whatever user clamd is running as does not have read permissions to scan the target. Use clamscan instead of clamdscan, or

Re: [Clamav-users] ClamD Scan is not working on ubuntu9.04

2010-03-07 Thread Chuck Swiger
On Mar 7, 2010, at 8:52 PM, aman_none wrote: Our scenerio is like this we have to install clamav for surgemail which will be installed on Ubuntu OS. We need to integrate with surgemail and hence we want to use clamdscan only. That decision means you need to give clamd's user to scan

Re: [Clamav-users] How Do You Integrate ClamAV?

2010-03-08 Thread Chuck Swiger
On Mar 8, 2010, at 6:56 AM, Carlos Mennens wrote: I was curious of what most of everyone on the list uses to integrate ClamAV into their MTA (specifically Postfix)? I was under the impression that I had to use Amavisd-new which allows me to integrate 'SpamAssassin' ' ClamAV'. Do you guys have

Re: [Clamav-users] clamav syslog and cron

2010-03-09 Thread Chuck Swiger
On Mar 9, 2010, at 3:08 PM, Timothy Legge wrote: The only question now is whether there is a noticable difference in speed between clamdscan and clamscan? They should scan files at the same speed, but it takes clamscan longer to get started since it has to load up the virus definitions. The

Re: [Clamav-users] quick question on freshclam

2010-03-09 Thread Chuck Swiger
On Mar 9, 2010, at 3:55 PM, Tom Shaw wrote: I want to change how I run freshclam on OSX from running as a deamon to running periodically using launchd. Unfortunately, freshclam's returning of 1 when no updates were required causes issues with launchd since it thinks freshclam exited

[Clamav-users] clamav-0.96: LLVM/JIT assumes gcc-4.x...?

2010-04-07 Thread Chuck Swiger
Hi-- There may be an issue with autoconf/configure mechanism not testing for warning flags before assuming they exist: /bin/sh ./libtool --silent --tag=CXX --mode=compile c++ -DHAVE_CONFIG_H -I. -I./../.. -I./.. -I./../../ -I./llvm/include -I./llvm/include -D__STDC_LIMIT_MACROS

[Clamav-users] clamav-0.96: struct cli_bc_ctx variables...

2010-04-07 Thread Chuck Swiger
Hi-- Also, I notice this in libclamav/c++/bytecode2llvm.cpp around line 1994: SMDiagnostic diag(ctx-file, ctx-line ? ctx-line : -1, ctx-col ? ctx-col-1 : -1, , std::string(lines-linev[ctx-line-1], lines-linev[ctx-line]-1)); struct cli_bc_ctx from

Re: [Clamav-users] clamav-0.96: make distclean fails in libclamav...

2010-04-07 Thread Chuck Swiger
Hi, Tomasz-- On Apr 7, 2010, at 11:50 AM, Tomasz Kojm wrote: could you please report bugs directly to our bugzilla at http://bugs.clamav.net I would be pleased to. However, I also like to involve the list to gain some insight as to whether the issue can be reproduced by others or whether it

Re: [Clamav-users] Compiler error

2010-04-07 Thread Chuck Swiger
Hi-- On Apr 7, 2010, at 12:45 PM, Török Edwin wrote: On 04/07/2010 10:31 PM, Jack Raats wrote: File /usr/local/lib/python2.5/threading.py, line 6, in module import thread ImportError: No module named thread Looks like an incomplete/broken install of python to me. lit.py does 'import

Re: [Clamav-users] Compiler error

2010-04-07 Thread Chuck Swiger
On Apr 7, 2010, at 1:05 PM, Török Edwin wrote: Is there a way to detect if python was built with THREADS on or off? I currently do this test: python -V || { echo Python not found, skipping LLVM tests; exit 77; } python EOF import sys if sys.hexversion 0x204: sys.exit(1) EOF test

Re: [Clamav-users] Version 0.96: WARNING: DNS record is older than 3 hours.

2010-04-07 Thread Chuck Swiger
Hi-- On Apr 7, 2010, at 4:43 PM, Markus Egg wrote: I solved it: in my /etc/freshclam.conf there was still #DatabaseMirror db.XY.clamav.net obviously freshclam then takes a default server ( database.clamav.net ?) which has no DST and therefore the DNS record is older than 3 hours. message.

Re: [Clamav-users] Can't map file into memory - mostly PDFs

2010-04-08 Thread Chuck Swiger
think that this is because of the LLVM issue in bug 1934 reported by Chuck Swiger. If you're running FreeBSD 7.x, you should already have gcc-4.2.1 or thereabouts with the base OS. Anyway, even the gcc-3.4.6 version from FreeBSD-6.x seems to be doing OK with LLVM/JIT bytecode enabled once I removed

Re: [Clamav-users] Can't map file into memory - mostly PDFs

2010-04-08 Thread Chuck Swiger
Hi-- On Apr 8, 2010, at 12:26 PM, Royce Williams wrote: Heh - sorry for the extraneous 'T' at the end of your name. No worries, I've been called worse. :-) If you're running FreeBSD 7.x, you should already have gcc-4.2.1 or thereabouts with the base OS. Anyway, even the gcc-3.4.6 version

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Chuck Swiger
On Apr 16, 2010, at 11:16 AM, Giampaolo Tomassoni wrote: The sysadmins could have done this by turning off freshclam.. and saved themselves from having to deal with the upgrade. Who is the sysadmin of an unmanaged box? The owner of the box. They may not be qualified to manage the

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Chuck Swiger
On Apr 16, 2010, at 1:42 PM, Giampaolo Tomassoni wrote: The owner of the box. They may not be qualified to manage the machine, but computers don't plug themselves into the network-- every machine belongs to someone who pays for electrical power and network connectivity. What if your PS3

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Chuck Swiger
On Apr 16, 2010, at 4:24 PM, Giampaolo Tomassoni wrote: What if your PS3 stops working because the maker thinks it is a too-old model to still go? A fine question. Let's suppose a certain old PS3 model has a serious manufacturing defect, such that it can overheat and catch fire. Which

Re: [Clamav-users] error in make

2010-04-18 Thread Chuck Swiger
On Apr 18, 2010, at 7:14 AM, neidorff wrote: Thanks. That did help. Now I'm getting a problem starting the daemon. The error that I am getting is: [r...@neidorff ~]# /etc/init.d/clamd start Starting Clam AV daemon: ERROR: Missing argument for option at line 33 ERROR: Can't open/parse the

Re: [Clamav-users] The EOL tweets

2010-04-19 Thread Chuck Swiger
Hi, all-- On Apr 19, 2010, at 9:59 AM, Paul Reading wrote: I am using OSX Server 10.4.11 and it is at least five years old and the latest version of Snow Leopard server includes a more recent version of clamav. I assumed that the use of clamav was negotiated by Apple and Clamav and that

Re: [Clamav-users] Clubbing a deceased equine

2010-04-21 Thread Chuck Swiger
Simon-- After ~20+ postings from you on this topic, you're not saying anything new. Unlike the poor folks running McAfee on Windows who are having their machines rendered unbootable due to a false positive with v5958 of their database, it would require far less effort on your part to either

Re: [Clamav-users] Can't map file into memory - mostly PDFs

2010-04-22 Thread Chuck Swiger
Hi-- [ CC:ing Jason as the domain expert. :-) ] On Apr 22, 2010, at 10:01 AM, Royce Williams wrote: 2010/4/8 Török Edwin edwinto...@gmail.com: On 04/08/2010 11:03 PM, Chuck Swiger wrote: [ ... ] # sysctl vm.max_proc_mmap vm.max_proc_mmap: 78951 It's the number of mmap() entries which

Re: [Clamav-users] Can't map file into memory - mostly PDFs

2010-04-22 Thread Chuck Swiger
Hi, Jason-- On Apr 22, 2010, at 12:33 PM, Jason Evans wrote: The failure mode was trimmed before I was CC'ed, so I'm missing background information. Thanks for the response. The bug report here: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1941 ...contains the useful details, but the

Re: [Clamav-users] Yet more clubbing of deceased equine.

2010-04-24 Thread Chuck Swiger
Hi, all-- On Apr 24, 2010, at 1:19 AM, Simon Hobson wrote: Forget it, it's been covered, and you'll never persuade this group of people that a) there was any alternative, You have plenty of alternatives. You can switch to using other AV software from Norton, McCafee, TrendMicro, Panda,

Re: [Clamav-users] excluding signatures on SMTP

2010-05-11 Thread Chuck Swiger
On May 11, 2010, at 2:27 PM, Matus UHLAR - fantomas wrote: I'm working on code that would prevent rejecting some kinds of signarures at SMTP level. For example, phishing reports sent to abuse@ contact should pass, even if they contain phishing signatures. You haven't mentioned which MTA or

Re: [Clamav-users] Tiered freshclam updates on port443

2010-05-14 Thread Chuck Swiger
On May 14, 2010, at 11:42 AM, Nathan Gibbs wrote: * Alain Zidouemba wrote: Feature requests are always welcome. However a resounding NO after putting in the effort is not. It has been my experience to post a feature request and be told that. 1. The lake short pier are to your right. 2.

Re: [Clamav-users] Clamav Memory/System requirements

2010-05-26 Thread Chuck Swiger
Hi, Alex-- On May 26, 2010, at 3:04 PM, Alex wrote: Is it expected that clamd on Linux should take 315MB of RAM with a normal configuration? The system is pretty busy, with clamdtop being IDLE for no longer than two seconds at a time, with apparently three instances running. v0.96.1 clamd

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-16 Thread Chuck Swiger
On Jun 16, 2010, at 11:26 AM, Vivien Raoul wrote: I will try it and I'll tell you. About RAM, I didn't explain well. I meant, how to do to make clamav use more RAM than swap ; i.e. how to reserve RAM to clamav in order to avoid swap. While you didn't mention which OS you are using (or I forgot

Re: [Clamav-users] Some questions about clamav update warning messages

2010-07-06 Thread Chuck Swiger
Hi, JD-- On Jul 6, 2010, at 9:19 AM, JD wrote: WARNING: Current functionality level = 44, recommended = 53 DON'T PANIC! Read http://www.clamav.net/support/faq I read the FAQ and it does not tell me where this setting is set. It's set by ClamAV within the source code itself; this

Re: [Clamav-users] Some questions about clamav update

2010-07-06 Thread Chuck Swiger
Hi-- On Jul 6, 2010, at 12:32 PM, JD wrote: For example, the packages installed from the build failed to create user clamupdate, which freshclam needs. That username isn't the default one which the clamav sources assume, namely: # By default when started freshclam drops privileges and

Re: [Clamav-users] possible bug

2010-08-12 Thread Chuck Swiger
Hi-- On Aug 12, 2010, at 1:37 PM, ulises gonzalez wrote: how I can report a Clamav's bug?? http://bugs.clamav.net, which takes you to an HTTPS Bugzilla site. Regards, -- -Chuck ___ Help us build a comprehensive ClamAV guide: visit

Re: [Clamav-users] RLIMIT_DATA

2010-09-21 Thread Chuck Swiger
Hi-- On Sep 21, 2010, at 11:09 AM, Török Edwin wrote: [ ... ] If it shows ~120M your OS is buggy. Then run again with ulimit -d 2097151, and see if it reports any higher value. Interesting; even on FreeBSD I get: % ./a.out failed after 15529 mmap() calls, allocated 2426 MB memory [1]1500

Re: [Clamav-users] What ever happened to the Release Candidate for 0.96.3??

2010-09-22 Thread Chuck Swiger
Hi, all-- On Sep 22, 2010, at 9:40 AM, Larry Stone wrote: Download the bzip2 security release and compile. I have to go back to my office to check what compile settings are necessary as the dedault make file is nor good enough. There is, of course, more than one way to get to the same

Re: [Clamav-users] ClamAV 96.2 does not compile on macintosh 10.4

2010-09-23 Thread Chuck Swiger
On Sep 23, 2010, at 5:56 PM, Syed Zubair wrote: There never was a problem compiling ClamAV on Tiger but 96.2 does not compile and returns the following errors. make[3]: *** [libclamav.la] Error 1 make[2]: *** [install-recursive] Error 1 make[1]: *** [install] Error 2 make: ***

Re: [Clamav-users] freshclam alternate dowload port 80

2010-09-29 Thread Chuck Swiger
On Sep 29, 2010, at 9:42 AM, omonte7 wrote: Yeah, I saw that in the man page but unfortunately I'm not using a proxy. I can't connect on port 80 through the firewall so I'm restricted to any other port. Thanks. If you need HTTP access to download ClamAV security updates, presumably the

Re: [Clamav-users] Whitelisting special accounts

2010-09-29 Thread Chuck Swiger
Hi, Jason-- On Sep 29, 2010, at 12:18 PM, Jason Bertoch wrote: I currently use clamav-milter with 3rd party sigs in sendmail and am writing the list to see how people are handling special accounts like abuse@ or postmas...@. clamav-milter has the ability to whitelist e-mail accounts, but

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-10-01 Thread Chuck Swiger
On Oct 1, 2010, at 8:50 AM, Dennis Peterson wrote: The bzip2 source is a mess that requires much customization to build as the author hasn't the resources to put it together right. The build infrastructure for bzip uses a plain-jane Makefile with defaults oriented towards ELF/Linux. With

Re: [Clamav-users] Upcoming release of ClamAV

2010-10-21 Thread Chuck Swiger
Hi, all-- On Oct 19, 2010, at 7:24 AM, Tomasz Kojm wrote: You can help by testing (or just running ./configure make check) the latest code available in our Git repository - the latest snapshot tarball can be grabbed here: Appears to pass all checks and work fine here using gcc-4.2.5:

  1   2   >