[Clamav-users] clamd segment violations

2004-07-28 Thread Doug Hardie
I am running FreeBSD 4.6 ClamAV version devel-20040728 clamav-milter version 0.75b Sendmail 8.12.3p3 I was using clamav-0.70-rc for a long time because it was stable and never crashed. However, it started missing a lot of newer viruses so I upgraded to the version above. Clamd is giving a

Re: [Clamav-users] clamd segment violations

2004-07-29 Thread Doug Hardie
On Jul 29, 2004, at 00:32, Trog wrote: On Wed, 2004-07-28 at 23:16, Doug Hardie wrote: I was using clamav-0.70-rc for a long time because it was stable and never crashed. However, it started missing a lot of newer viruses so I upgraded to the version above. Clamd is giving a segment violation

Re: [Clamav-users] clamd segment violations

2004-07-30 Thread Doug Hardie
I just noticed that clamd has a large number of files opened that the directory entries have been deleted. There are well over a hundred of them. The sizes appear to be about right for emails. On Jul 28, 2004, at 15:16, Doug Hardie wrote: I am running FreeBSD 4.6 ClamAV version devel-20040728

[Clamav-users] Unusual Problem

2004-08-22 Thread Doug Hardie
I have two mail servers. One is used by users sending mail, the other receives mail. When a user sends me mail it goes through both servers. Both are running sendmail with clamav-milter and clamav. Normally I see the following header elements in such mail: X-Virus-Scanned: clamd / ClamAV

[Clamav-users] Virus Distribution

2004-09-08 Thread Doug Hardie
I have a cron job that scans the clamd.log file every day and counts the specific virusus found. While the numbers tend to vary a bit from day to day the relative ratios between the various viruses found tend to stay the same - except for Worm.Zafi.B. One day it will find 1100 of them and

Re: [Clamav-users] Virus Distribution

2004-09-08 Thread Doug Hardie
Those certainly could be it, but it is unusual compared with the other viruses we see daily. I wonder if there is more to this one than has been foun yet. On Sep 8, 2004, at 12:40, Timo Schöler wrote: Thus spake Doug Hardie sometime Today... On Sep 8, 2004, at 12:16, Timo Schöler wrote: Doug

Re: [Clamav-users] announcing ClamAV 0.80rc

2004-09-21 Thread Doug Hardie
I have looked all over the clamav.net web pages and I can't find it. Where is it? --- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your

Re: [Clamav-users] bug in clamav-milter PID file handling

2004-09-24 Thread Doug Hardie
On Sep 24, 2004, at 13:48, [EMAIL PROTECTED] wrote: Matthew.van.Eerde wrote: There seems to be a problem with clamav-milter's --pidfile option. I retract this. The --pidfile option is fine. Line 1408 of clamav-milter.c has fprintf(fd, %d\n, (int)getpid()); which

Re: [Clamav-users] bug in clamav-milter PID file handling

2004-09-24 Thread Doug Hardie
On Sep 24, 2004, at 16:30, [EMAIL PROTECTED] wrote: Doug Hardie wrote: On Sep 24, 2004, at 13:48, [EMAIL PROTECTED] wrote: Matthew.van.Eerde wrote: There seems to be a problem with clamav-milter's --pidfile option. I retract this. The --pidfile option is fine. Line 1408 of clamav-milter.c has

[Clamav-users] clamav-milter parameters

2004-10-11 Thread Doug Hardie
I would like to see clamav-milter be able to read its parameters from a file (clamd.conf or a separate file would be fine). The command line I am using is just too long to manage easily. ___

Re: [Clamav-users] clamav-milter configuration options

2004-10-12 Thread Doug Hardie
On Oct 11, 2004, at 18:43, Scott Rothgaber wrote: Doug Hardie wrote: The list of parameters I use is too long for a command line. Oh, come on! What's so bad about... /usr/local/sbin/clamav-milter -l -i /var/run/clamav/clmilter.pid -F /usr/local/etc/sig.txt /var/run/clamav/clmilter.sock ;-) Take

Re: [Clamav-users] clamav-milter configuration options

2004-10-12 Thread Doug Hardie
No. FreeBSD On Oct 12, 2004, at 01:25, Nigel Horne wrote: On Monday 11 Oct 2004 23:22, Doug Hardie wrote: I would like to see clamav-milter have a configuration file. Either clamd.conf or a separate one would be fine. The list of parameters I use is too long for a command line. Are you using

[Clamav-users] clamav-milter configuration options

2004-10-11 Thread Doug Hardie
I would like to see clamav-milter have a configuration file. Either clamd.conf or a separate one would be fine. The list of parameters I use is too long for a command line. --- This SF.net email is sponsored by: IT Product Guide on

Re: [Clamav-users] Performance Help - 100% cpu usage

2004-10-26 Thread Doug Hardie
On Oct 25, 2004, at 23:05, Odhiambo Washington wrote: I would suggest that you DisableDefaultScanOptions in clamd.conf and tune values according to your system. My servers do slightly more than 800 smtp transfers per hour and I found out that working with the DisableDefaultScanOptions commented

Re: [Clamav-users] Re: TCP and UDP ports used by clamd

2004-11-01 Thread Doug Hardie
On Nov 1, 2004, at 09:53, René Berber wrote: Nico, Now my question: why is clamd listening on a TCP port (only one port but the This is fine, ClamD has to listen on a port otherwise no program would be able to communicate with it. The port should be identical with the one listed in the clamd.pid

Re: [Clamav-users] ClamAV should not try to detect phishingandother social engineering attacks

2004-11-15 Thread Doug Hardie
On Nov 15, 2004, at 04:37, Julian Mehnle wrote: Trog [EMAIL PROTECTED] wrote: I am, unfortunately, familiar with SpamCop (and all the other similar 'tools'). As a listed contact for over 16million Internet IP addresses I receive notices from such 'tools' all the time, and I've *never* had one

Re: [Clamav-users] clamd exiting on signal 4 (FreeBSD)

2004-11-18 Thread Doug Hardie
On Nov 18, 2004, at 05:11, Robert Blayzor wrote: I've been running clamd 0.80 for the past several weeks without any problems. Suddenly in the last two days two different machines had clamd die and exit on signal 4. (SIGILL) I tried looking for a core file but could not find one and the

[Clamav-users] Postmaster Notifications

2004-02-10 Thread Doug Hardie
I am running clamav-milter from clamav-devel-20040209 and trying to get it to not send mail to postmaster when it finds a virus. With version 0.65 I used clamav-milter -ol local:/var/run/virus.sock and it worked properly. However, things have changed. As best as I can tell the equivallent

[Clamav-users] Re: Postmaster Notifications

2004-02-10 Thread Doug Hardie
In article [EMAIL PROTECTED], Doug Hardie [EMAIL PROTECTED] wrote: I am running clamav-milter from clamav-devel-20040209 and trying to get it to not send mail to postmaster when it finds a virus. With version 0.65 I used clamav-milter -ol local:/var/run/virus.sock and it worked properly

Re: [Clamav-users] Postmaster Notifications

2004-02-10 Thread Doug Hardie
On Feb 10, 2004, at 05:47, Nigel Horne wrote: I am running clamav-milter from clamav-devel-20040209 and trying to get it to not send mail to postmaster when it finds a virus. With version 0.65 I used clamav-milter -ol local:/var/run/virus.sock and it worked properly. What version are you

[Clamav-users] Saved virus files

2004-02-10 Thread Doug Hardie
Running clamav-devel-20040209. At first I found it left a lot of files reamining with no entries in the file structures. However, previous messages here identified the issue and I switched to using quarantine-dir to give them a home. However, at this time the number of viruses being blocked

Re: [Clamav-users] Postmaster Notifications

2004-02-10 Thread Doug Hardie
On Feb 10, 2004, at 02:20, Nigel Horne wrote: On Tuesday 10 Feb 2004 8:30 am, Doug Hardie wrote: However, things have changed. As best as I can tell the equivallent should be clamav-milter -f -q local:/var/run/virus.sock but that still sends mail to postmaster for each virus found. -q does

[Clamav-users] ClamAV versions

2004-02-14 Thread Doug Hardie
I have been running with devel-20040209 for a week or so since 0.65 didn't meet my needs. The development version does. However, 0.66 has now been released. Is it based on 0.65 or the development branch? --- SF.Net is sponsored by: Speed

[Clamav-users] Error Message

2004-02-15 Thread Doug Hardie
I am occasionally receiving a number of the following entries in /var/log/messages: Feb 15 19:14:18 1.4 zoon clamav-milter: ClamAv: private data not NULL Shortly after they start, some threads start returning an error to sendmail. Some time after that all the threads are returning an error.

Re: [Clamav-users] Error Message

2004-02-16 Thread Doug Hardie
On Feb 16, 2004, at 00:34, Nigel Horne wrote: On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: Feb 15 19:14:18 1.4 zoon clamav-milter: ClamAv: private data not NULL What does the message mean and is there a configuration parameter I need to alter to avoid it? This sounds like an error thrown

Re: [Clamav-users] Error Message

2004-02-16 Thread Doug Hardie
On Feb 16, 2004, at 01:52, Andy Fiddaman wrote: On Mon, 16 Feb 2004, Nigel Horne wrote: ; On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: ; ; Feb 15 19:14:18 1.4 zoon clamav-milter: ClamAv: private data not NULL ; What does the message mean and is ; there a configuration parameter I

[Clamav-users] TCP Wrapper Support in clamav-milter

2004-02-21 Thread Doug Hardie
I am trying to get clamd / ClamAV version devel-20040221, clamav-milter version 0.67g working. There have been some changes in TCP Wrapper support that leave me a bit confused. smfi_getsymval is called to get {if_name}. Where is that set? The messages in syslog indicate that its not set.

[Clamav-users] Problems with clamd

2004-03-04 Thread Doug Hardie
I am trying to use clamav to scan mail on a prduction mail server that has fairly high volume of mail and quite a large volume of viruses being receivied. The only version of clamd I can run for any duration is clamav-devel-20040209. That version runs for 4 to 5 days on my production mail

Re: [Clamav-users] Problems with clamd

2004-03-04 Thread Doug Hardie
On Mar 4, 2004, at 15:02, Doug Hardie wrote: I am trying to use clamav to scan mail on a prduction mail server that has fairly high volume of mail and quite a large volume of viruses being receivied. The only version of clamd I can run for any duration is clamav-devel-20040209. That version

Re: [Clamav-users] Problems with clamd

2004-03-05 Thread Doug Hardie
On Mar 5, 2004, at 02:41, Trog wrote: On Fri, 2004-03-05 at 01:15, Doug Hardie wrote: I just uncommented the thread timeout the last time I restarted clamd a couple minutes ago so I don't know what effect that will have. ThreadTimeout isn't used in the current CVS version. Here is some more

Re: [Clamav-users] ScanMail destabilizing clamd?

2004-03-06 Thread Doug Hardie
On Mar 5, 2004, at 11:54, Everton da Silva Marques wrote: Hi, I'm testing clamd from CVS as of 2004-03-04 under Solaris 7 on Sparc with the following basic config: # clamav.conf LogFile /var/adm/clamav/clamd.log LogFileMaxSize 10M LogTime PidFile /var/adm/clamav/clamd.pid TCPSocket 3310 TCPAddr

Re: [Clamav-users] usefulness of complaining to abuse@whatever.com for Netsky/Bagle

2004-03-14 Thread Doug Hardie
On Mar 14, 2004, at 11:57, jef moskot wrote: It looks like you get the proper IP of the offending machine firing off these worms in the header (even though everything else is forged). Is there any point in telling [EMAIL PROTECTED] that one of their DSL customers is spamming the Internet with

Re: [Clamav-users] Problems with clamd

2004-03-15 Thread Doug Hardie
On Mar 8, 2004, at 13:18, Doug Hardie wrote: After a review of clamd/session.c and the developers forum archives I know what the cause of my problem is, but not necessarily why. The version that works (clamd / ClamAV version devel-20040209', clamav-milter version '0.66m) does not use either

Re: [Clamav-users] Problems with clamd

2004-03-15 Thread Doug Hardie
On Mar 15, 2004, at 18:44, Doug Hardie wrote: On Mar 8, 2004, at 13:18, Doug Hardie wrote: After a review of clamd/session.c and the developers forum archives I know what the cause of my problem is, but not necessarily why. The version that works (clamd / ClamAV version devel-20040209

Re: [Clamav-users] Troubles with recent clamav's

2004-03-16 Thread Doug Hardie
, but after some minutes, it stops processing emails. It is still running, in fact, it uses up to 85% of the CPU(!), but no email goes thru. Did anyone else experience this problem? Yes. I have posted a similiar issue here: http://www.mail-archive.com/[EMAIL PROTECTED]/ msg06462.html Doug Hardie

Re: [Clamav-users] Troubles with recent clamav's

2004-03-19 Thread Doug Hardie
On Mar 19, 2004, at 05:17, Robert Blayzor wrote: On 3/18/04 5:40 PM, Doug Hardie [EMAIL PROTECTED] wrote: My quick look at the code behind --disable-urandom gave me the impression that it only disabled the test for urandom and forced clamd to use urandom. Thats why I manually deleted the define

Re: [Clamav-users] syslog facility

2004-04-05 Thread Doug Hardie
On Apr 5, 2004, at 15:56, rosander wrote: Can anyone comment if clamd support setting specific syslog facilities and if so how I would set it in the conf file? I paroused the documentation but nothing poped out at me except the switch to enable output to syslog. The facility is hard coded to

[Clamav-users] clamav 0.90 - FreeBSD 6.1

2007-02-22 Thread Doug Hardie
Another data point. I upgraded from 0.88.7 to 0.90. I use just clamav-milter driven from sendmail. Version 0.88.7 worked fine. Generally about every 2 to 3 weeks it will hang and I have to restart it. Its processing a couple hundred thousand email daily. Version 0.90 seemed at first

[Clamav-users] Virus Volumes

2005-04-13 Thread Doug Hardie
I have been running clamav for quite some time now. For most of that time I was receiving between 1500 and 2000 viruses per day. However, lately the number is down to about 200 per day. I don't have any users complaining about receiving viruses so I don't think there is a problem with

Re: [Clamav-users] Virus Volumes

2005-04-13 Thread Doug Hardie
We have a number of those in operation, but they haven't really chnged since introducing clamav On Apr 13, 2005, at 09:12, Christopher X. Candreva wrote: On Wed, 13 Apr 2005, Doug Hardie wrote: I have been running clamav for quite some time now. For most of that time I was receiving between

[Clamav-users] clamav-milter logging

2005-05-17 Thread Doug Hardie
I have been running clamav 0.82.1 for some time without any known problems. However, I finally have the time to upgrade and brought down the FreeBSD port for 0.85.1 and installed it. Everything seems to work properly except for clamav-milter logging. I had been running clamav-milter

Re: [Clamav-users] clamav-milter logging

2005-05-17 Thread Doug Hardie
On May 17, 2005, at 17:24, Doug Hardie wrote: I have been running clamav 0.82.1 for some time without any known problems. However, I finally have the time to upgrade and brought down the FreeBSD port for 0.85.1 and installed it. Everything seems to work properly except for clamav-milter

[Clamav-users] Force email scanning

2005-05-19 Thread Doug Hardie
I am using sendmail with clamav-milter to scan email. Normally clamav-milter does not scan messages from the LAN or the machine unless you direct it to do so via the flags. I would like to be able to put something into a message such that it would be scanned even though it would

[Clamav-users] clamav-milter quits

2005-05-20 Thread Doug Hardie
clamav 0.85.1 on two servers. Both quit right about midnight. I found the following log entries on one of them: May 19 23:40:07 zoon clamav-milter[75664]: ClamAv: accept() returned invalid socket (Result too large), try again May 19 23:40:43 zoon last message repeated 8 times May 19

Re: [Clamav-users] Re: clamav-milter quits (Doug Hardie)

2005-05-20 Thread Doug Hardie
On May 20, 2005, at 02:32, Trog wrote: On Fri, 2005-05-20 at 10:22 +0100, G.W. Haywood wrote: Hi there, On Fri, 20 May 2005 Doug Hardie wrote: clamav 0.85.1 on two servers. Both quit right about midnight. I found the following log entries on one of them: ... I don't find an accept() anwhere

Re: [Clamav-users] clamav-milter quits

2005-05-21 Thread Doug Hardie
On May 21, 2005, at 02:23, Nigel Horne wrote: On Friday 20 May 2005 14:44, Craig Green wrote: clamav 0.85.1 on two servers. Both quit right about midnight. I found the following log entries on one of them: Are you using FreeBSD? We've had the milter quit on a couple of FreeBSD

Re: [Clamav-users] Re: clamav-milter quits (Doug Hardie)

2005-05-22 Thread Doug Hardie
On May 20, 2005, at 19:02, Stephen Gran wrote: On Fri, May 20, 2005 at 08:49:32PM -0500, Damian Menscher said: On Fri, 20 May 2005, Doug Hardie wrote: On May 20, 2005, at 02:32, Trog wrote: The accept call is done within Sendmail, I believe. That would make sense except

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-24 Thread Doug Hardie
On May 24, 2005, at 08:56, Damian Menscher wrote: On Tue, 24 May 2005, N Fung wrote: --- N Fung [EMAIL PROTECTED] wrote: --- Christopher X. Candreva [EMAIL PROTECTED] wrote: Try with clamd and use the --external option to clamav-milter. Would the 'internal' mode be working again

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-24 Thread Doug Hardie
On May 24, 2005, at 11:53, Stephen Gran wrote: On Tue, May 24, 2005 at 11:43:45AM -0700, Doug Hardie said: I believe I can make this occur at will (as long as there is a newer database available). However, I am running FreeBSD and don't know for sure the equivallent to strace - ktrace

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-24 Thread Doug Hardie
On May 24, 2005, at 13:21, Stephen Gran wrote: On Tue, May 24, 2005 at 12:54:47PM -0700, Doug Hardie said: ktrace is effectively the same thing as truss so I used it. There are two files available: http://www.lafn.org/clamav/ktrace.html http://www.lafn.org/clamav/clamd.html ktrace.html

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-24 Thread Doug Hardie
On May 24, 2005, at 19:30, Damian Menscher wrote: On Tue, 24 May 2005, Doug Hardie wrote: On May 24, 2005, at 13:21, Stephen Gran wrote: On Tue, May 24, 2005 at 12:54:47PM -0700, Doug Hardie said: http://www.lafn.org/clamav/ktrace.html http://www.lafn.org/clamav/clamd.html clamav

Re: [Clamav-users] Re: Clamav-milter dies after working ok for some hours

2005-05-25 Thread Doug Hardie
On May 25, 2005, at 13:38, Stephen Gran wrote: On Tue, May 24, 2005 at 11:43:45AM -0700, Doug Hardie said: I believe I can make this occur at will (as long as there is a newer database available). However, I am running FreeBSD and don't know for sure the equivallent to strace - ktrace

Re: [Clamav-users] odd problem w/clamd

2005-06-10 Thread Doug Hardie
On Jun 10, 2005, at 13:21, [EMAIL PROTECTED] wrote: At 12:54 PM 6/10/2005, you wrote: * [EMAIL PROTECTED] [EMAIL PROTECTED] [20050610 22:49]: wrote: At 10:44 AM 6/10/2005, you wrote: Problems with 0.85.1 seem to be confined to FreeBSD. Anything interesting in /var/log/clamd.log?

[clamav-users] Error Message from clamd

2023-04-01 Thread Doug Hardie
I have started receiving the following error message on every received email: Unable to determine the filepath given the file descriptor FreeBSD 13.1, Postfix, clamav-milter, clamd clamav-1.0.1,1 As a result the test virus is not detected, but the email gets a X-Virus-Status: Clean header

Re: [clamav-users] Error Message from clamd

2023-04-01 Thread Doug Hardie
nd your maildir the same permissions? > > > Von / From: Doug Hardie <mailto:bc...@lafn.org> > An / To: Newcomer01 <mailto:newcome...@posteo.de> > Gesendet / Sent: Samstag, April 01, 2023 um 10:17 (at 10:17 AM) +0200 > Betreff / Subject: [clamav-users] Error Message from cl