Re: [Clamav-users] clamav-0.70-rc make probs

2004-04-06 Thread Fajar A. Nugraha
Schmidt, Patrick wrote: What's up? ./configure is done without errors, but make stop at the beginning (SuSE 8.2, kernel 2.4.20,gcc 3.3 20030226) ... How about the recent CVS snapshot? Last one compiles and installs OK on my Fedora Core 2 test 2. Usually some problems are already fixed in CVS

Re: [Clamav-users] Anyone know where I can find deb's of .70rc

2004-04-07 Thread Fajar A. Nugraha
robert wrote: I am using debian testing and althought clam is apt-get able it is .67 and I really want to use .70rc with the OLE option but I before to not have to compile. Has anyone made a build yet? Binary build of latest daily CVS snapshot is usually available on http://clamav.or.id. It's

Re: [Clamav-users] False positives

2004-04-07 Thread Fajar A. Nugraha
Kevin W. Gagel wrote: How/Where do I report false positives? The usual http://www.nervous.it/~nervous/cgi-bin/sendvirus.cgi or follow the link from www.clamav.net. There's a flag for false-positive there. Regards, Fajar -- Don't use GIF. Use PNG instead http://www.gnu.org/philosophy/gif.html

Re: [Clamav-users] Re: Use of CLAMAV as Corporate Antivirus

2004-04-09 Thread Fajar A. Nugraha
Alex Cherney wrote: Sergey wrote: Yesterday I download ClamWin and install it on windows client successfully. Now I would like to ask how I can use the virus database of server machine on Windows Clients so that I have to download latest virus definitions on server only. Well, currently

Re: [Clamav-users] configuring clamav

2004-04-09 Thread Fajar A. Nugraha
Nishant Shah wrote: Hi everyone, I downloaded the clamav-0.70 tar file and I am trying to install it. After reading the documentation and following the steps I reached upto running ./configure --syconfigdir=/etc. After I do that I am having an error: configure error: Need to know how to pack

Re: [Clamav-users] clamd.ctl not read at bootup

2004-04-09 Thread Fajar A. Nugraha
Karl Hakmiller wrote: Just installed clamav (0.68) on FC1 system. Freshclam works OK but system does not read clamd.ctl at bootup. It's not supposed to read it. Based on your config, clamd.ctl is a socket. There is a file named clamd.ctl in /var/run/clamav (which is the dir specified for

Re: [Clamav-users] RAR module failure

2004-04-13 Thread Fajar A. Nugraha
Niek wrote: Kevin Spicer wrote: clamscan --unrar=/path/to/unrar Hmmz, you guys reckon it would be a preformance hit if I start using clamscan instead of clamdscan (the latter hasn't got external rar support). YES! But if you only have low volume mail traffic, then it should not matter much.

Re: [Clamav-users] Clamav RPM

2004-04-13 Thread Fajar A. Nugraha
Mike van Vugt wrote: Tried to install the rpm file but keep getting the error listed below Any sugestions ??? # rpm -i clamav-0.68-2mdk.i586.rpm warning: clamav-0.68-2mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 error: Failed dependencies: It appears mandrake clamav packages are

Re: [Clamav-users] How to bypass milter scanning for selected users?

2004-04-13 Thread Fajar A. Nugraha
Andrei Bucur wrote: How can I configure my system so mail to abuse@ or postmaster@ are not rejected? clamav-milter.c, around line 750 /* * Whitelist of source e-mail addresses that we do NOT scan * TODO: read in from a file */ Ehm. SOURCE e-mail addresses. Are you sure this is what

[Clamav-users] new virus (?): automatically scanned for viruses using xxx

2004-04-15 Thread Fajar A. Nugraha
I see some occurences of emails containing compressed attachment, not detected by ClamAV, all claiming to be automatically scanned for viruses using xxx where xxx is either McAfee, Norton, or possibly other AV vendors, complete with their logo attached. The attachments are not password-protected,

Re: [Clamav-users] SMTP proxy

2004-04-18 Thread Fajar A. Nugraha
WipeOut wrote: Ian Armstrong wrote: I am looking for an SMTP proxy to use with Clamav. Can anyone recommend one? I am guessing you are meaning something to sit in front of your SMTP server that will scan the mail for viruses and then if clean pass the mail onto the mail server.. I am

Re: [Clamav-users] ClamAV and CGPro

2004-04-18 Thread Fajar A. Nugraha
Itzchak Rehberg wrote: Hi out there, I just try to set up ClamAV with CommuniGate Pro using the cgpav tool. But somehow it does not work: I want the engine to scan the mail and, if a virus is found, add a header to the mail (leaving the action to the user). So I updated the config accordingly,

Re: [Clamav-users] [freshclam] problem with temp file

2004-04-18 Thread Fajar A. Nugraha
Emmanuel Saracco wrote: Reading CVD header (daily.cvd): OK ERROR: Can't open new file ./clamav-c5c9e8986810b4fd to write open: Permission denied can someone point me the directory where freshclam try to create this ./clamav-c5c9e8986810b4fd file? Whatever directory you set in clamav.conf

Re: [Clamav-users] ClamAV and CGPro

2004-04-18 Thread Fajar A. Nugraha
Itzchak Rehberg wrote: I just try to set up ClamAV with CommuniGate Pro using the cgpav tool. But somehow it does not work: EXTFILTER bad response: ADDHEADER X-Virus-Flag: Yes 3.5.9 is obsolete. Upgrade to 4.x immediately (CGP upgrade is free). You might have to rewrite your web

Re: [Clamav-users] clamscan and clamd not synced?

2004-04-21 Thread Fajar A. Nugraha
Andrea Trasatti wrote: Hello all, I have posted a few messages about clamd not detecting some SomeFool variants when scanning mail, but clamscan was detecting them. While reading some man pages and the conf files, I found another binary called clamdscan. I ran it and this is what turned out:

Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments

2004-04-22 Thread Fajar A. Nugraha
Jon Roland wrote: If members of this list are serious about getting Linux to displace Windows, this is critical. IMHO, I don't think this is what we're discussing in this list. -- Please avoid sending me Microsoft Office attachments. See http://www.newsforge.com/software/04/03/27/0134204.shtml

Re: [Clamav-users] GNU MP warning

2004-04-22 Thread Fajar A. Nugraha
[EMAIL PROTECTED] wrote: i'm trying to configure clamav 0.70 on RH9 and I get message: WARNING: GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! What mean this? (I see that I have gmp libraries on default location /usr/lib) When building from source, you need to

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Fajar A. Nugraha
Lucas Albers wrote: Fajar A. Nugraha said: Did you add the script to kill clamd and start it when clamdwatch says clamd dead/hung? What is clamdwatch, I have never heard of it? Where do you get it? It's a simple perl script to determine whether clamd is dead, hung, or alive. http

Re: [Clamav-users] Clamd Leaking?

2004-05-13 Thread Fajar A. Nugraha
Rich wrote: Found this Googling, good tool too to monitor clamd ;-) http://www.tildeslash.com/monit/ Yes, it's good indeed. So is daemontools. But when it comes to simplicity, clamdwatch is the simplest one. Which is (I think) why clamdwatch is included on the default clamav tarball package,

Re: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Fajar A. Nugraha
Mitch (WebCob) wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Spicer Sent: Monday, May 10, 2004 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Re: Virus Alias Database Its running PHP MySQL on apache2, unfortunately this is my home

Re: [Clamav-users] Re: Virus Alias Database

2004-05-10 Thread Fajar A. Nugraha
Russ Phillips wrote: 2. If it could handle heavy loads, it would be useful if the form used GET instead of POST, so that links to specific viruses could be posted. Apparently it can handle GET too. I'd post an update to clamd-stat in a few hours which includes link to Kevin's alias database for

[Clamav-users] OT: clamd-stat 0.2 released

2004-05-10 Thread Fajar A. Nugraha
A new version of clamd-stat is available on http://clamav.or.id/contrib/clamd-stat/ Demo is on http://clamd-stat.clamav.or.id/ Shows links to Kevin Spicer's virus alias db on virus names. Mrtg-like graphs can show custom start and end times. Packaging still needs to be fixed (no ChangeLog,

Re: [Clamav-users] GNU MP warning

2004-04-25 Thread Fajar A. Nugraha
McWhirter,Julia wrote: I have this problem also and I am running on Solaris 8. Is gmp-devel included in the gmp sources or a build option or something else. It's included. I can see that gmp and gmp-devel are available as rpm's for RH, SUSI etc RPMS generaly split thir gmp package to gmp

Re: [Clamav-users] installation update require

2004-04-26 Thread Fajar A. Nugraha
Vito Pascali wrote: PC_Vito root # freshclam WARNING: Your ClamAV installation is OUTDATED - please update immediately ! WARNING: Current functionality level = 1, required = 2 PC_Vito root # freshclam -V freshclam / ClamAV version devel-20040408 So am I outdated? wich version I should install?

Re: [Clamav-users] installation update require

2004-04-26 Thread Fajar A. Nugraha
Marc wrote: Fajar A. Nugraha wrote: Either 0.70 (not the -rc one) or the lastest CVS snapshot version (mine is ClamAV version devel-20040426) I'm using clamav 0.70 stable. How can I get the version of clamav (including devel-x) Well, clamav source (both stable and devel) is always

Re: [Clamav-users] Trying to install on old machine

2004-04-26 Thread Fajar A. Nugraha
Christian Hack wrote: I'm running an old RH6.2 based box, which does most things OK for now (it's still kernel 2.2 though). I'm looking to upgrade soon, but would like to get ClamAV going on it for now. [snip] followed by a big bunch of errors. The same errors appear in my config.log. Rather

Re: [Clamav-users] ClamAV on Windows and Sendmail on Unix

2004-04-28 Thread Fajar A. Nugraha
Zoong Pham wrote: Can I install ClamAV on the Window server and have it scanning inbound and outbound mails for the mail server on the old Pentium ? If you use clamav-milter, the answer is yes. If you use other glues (e.g. mail-scanner, amavis, etc.) that depends on the glue. Try man

Re: [Clamav-users] Your ClamAV installation is OUTDATED

2004-04-29 Thread Fajar A. Nugraha
Guillermo Llenas wrote: This is from the Faq. :) If you don't upgrade immediately you will be in big trouble :) Well, perhaps not BIG trouble, but you will not be able to scan some types of virus. -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de John

Re: [Clamav-users] strlcpy - help required

2004-05-02 Thread Fajar A. Nugraha
Ajay S wrote: Hi, I have installed calmav on my linux 7.3 successfully but with clamav-milter. When I am trying to install it with ./configure --enable-milter. it gies me the error of strlcpy strlcat not found. A work around is to build staticly on other linux box, then run it on your

Re: [Clamav-users] ArchiveBlockEncrypted

2004-05-03 Thread Fajar A. Nugraha
Sam Smith wrote: I have not kept up with the password protected archive virus development. Is it still necessary to block password protected zip files? No need :) Or can clamd now detect viruses in a password protected zrchive? It has been for a long time. If you're paranoid, however, you can

Re: [Clamav-users] bin files - daily.cvd

2004-05-05 Thread Fajar A. Nugraha
Paul Bruce wrote: To attempt to bring clamav's virus database up to date I tried to load the bin files located at http://news.gmane.org/gmane.comp.security.virus.clamav.virusdb ??? This is just an archive of clamav-virusdb list. A typical file at this location looks like 329-001.bin ???

Re: [Clamav-users] ClamAV with Exim4 on Debian Sarge

2004-05-18 Thread Fajar A. Nugraha
Pradeeper wrote: Hi All I'm implementing a Spam and a Virus wall using Exim4, SA-Exim, SpamAssassin, Exiscan-ACL clamav-daemon and clamav on Debian Sarge. This is stand before my mail server and scan my mails for spam and viruses. Spam blocking is fine, but problem is in virus thing. You should

Re: [Clamav-users] Exim + ClamAV + what?

2004-05-18 Thread Fajar A. Nugraha
We currently use Sophos AV and we have a large number of corporate customers who need some assurance that the level of AV protection we are providing is more than respectable. Can anybody point me at any good documents or pages that I can put in front of our marketing people to reassure them

Re: [Clamav-users] ClamAV not scanning for viruses... Help please

2004-05-20 Thread Fajar A. Nugraha
Brian wrote: Hi all. Hoping someone can point me in the right direction with this issue. I have setup and configured (correctly I thought) ClamAV using cgpav with CommuniGate Pro on RedHat Enterprise Linux. When sending test emails containing the eicar.com virus, the messages aren't being

Re: [Clamav-users] Upgrade of Clamav breaks debian/exim/clamav

2004-05-21 Thread Fajar A. Nugraha
Brock Nanson wrote: I poked around the archives but didn't find anything that looked like my problem... I'm running exim4 on a debian box. Installed spamassassin and clamav a couple of months ago, using the Tim Jackson howto. Worked pretty much as advertised. Freshclam started telling me I

Re: [Clamav-users] clamd dying: reasons

2004-05-21 Thread Fajar A. Nugraha
[EMAIL PROTECTED] wrote: Had to revive the thread again. But I still haven't got a clue in which cases might clamd die without cleaning the socket file. Try a recent version (0.71 or even a CVS snapshot), and run clamdwatch on your crontab (included under contrib directory on source tarball).

Re: [Clamav-users] Clamav 0.71 - freshclam problem

2004-05-24 Thread Fajar A. Nugraha
Clamav wrote: I'm using clamav with Solaris 8 and have a problem with the latest stable version with freshclam - what could be the reason for this? # /usr/local/bin/freshclam ClamAV update process started at Mon May 24 11:34:26 2004 Reading CVD header (main.cvd): OK Downloading main.cvd [*] ERROR:

Re: [Clamav-users] Re: Question regarding virus detection

2004-05-25 Thread Fajar A. Nugraha
Jim Gunkel wrote: Jim Maul [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Any more ideas? I just installed ClamAV 0.71 (Windows build devel-20040520) today (upgraded from 0.70) and now I'm getting virii through to our email accounts with similar symptoms. One of the original

Re: Res: Re: [Clamav-users] ERROR: Parse error at line 67: Unknown option ThreadTimeout

2004-05-30 Thread Fajar A. Nugraha
Mário L. Ghoneim wrote: Seems like the problem is a mixed installation of old/new ClamAV. It´s true. I upgraded from 0.68. So, how can I to fix it? Just remove that line from clamav.conf. -- Please avoid sending me Microsoft Office attachments. See

Re: [Clamav-users] Re: Freshclam not responding

2004-06-01 Thread Fajar A. Nugraha
Gervase wrote: ERROR: Can't get information about database.clamav.net host. Seems like DNS problem. Configure your DNS server properly, or use proxy (edit freshclam.conf) What does nslookup database.clamav.net or host database.clamav.net says? It should say something like [EMAIL PROTECTED]

Re: [Clamav-users] windows version

2004-06-03 Thread Fajar A. Nugraha
Kent Emia wrote: downloaded the windows version and have some problems in the updating of virus definition, search for the FAQ but still no to avail ... is there any updates regarding this problem .. im having these error Where from? Try http://clamav.or.id/ Regards, Fajar -- Don't use GIF.

Re: [Clamav-users] CommuniGate Pro and ClamAV

2004-06-03 Thread Fajar A. Nugraha
Jeff Wark wrote: We have recently gotten the CommuniGate Cluster [2 front-ends/2 back ends] and I am currently testing clamav on it. I use clamav + cgpav on frontends only. Backends only process direct traffic for webmail, so I save some CPU load by not installing it there. Consequently, my

Re: [Clamav-users] Re: Freshclam not responding

2004-06-03 Thread Fajar A. Nugraha
Gervase wrote: On Wed, 2004-06-02 at 15:49, Ron Snyder wrote: if you do a 'dig database.clamav.net' or a 'host database.clamav.net', do you get useful answers? No. Both merely say: truncated, retrying in TCP mode, timed out -no servers could be reached. I am baffled, especially by the

Re: [Clamav-users] Dealing with a flood of mail

2004-06-03 Thread Fajar A. Nugraha
Brock Nanson wrote: I've got a server running a Discus forum in addition to Exim4, Clamav and spamassassin. One of the functions of the forum is to send the latest posting to all on the mail list. The result is a flood of mail that Exim sends on to Clam and Spamassassin. Prior to adding Clam

Re: [Clamav-users] ClamAV 0.72 Released - binaries

2004-06-04 Thread Fajar A. Nugraha
Brian May wrote: Since it was not posted here, ClamAV 0.72 is available for download. Major bugfixes in this release include crashes with corrupted BinHex messages and some Excel documents. Protection against archive bombs (not fully functional since 0.70) was improved and a number of other

Re: [Clamav-users] Difference between clamscan and clamd

2004-06-07 Thread Fajar A. Nugraha
Mike Robinson wrote: No, you just need to start clamd as a background daemon and then run clamdscan in place of clamscan. As far as I know clamdscan is 100% command line compatible with clamscan, Actually there's permission problem too. If you run it on Windows, or if you run clamd as root, it

Re: [Clamav-users] still not working in windows

2004-06-08 Thread Fajar A. Nugraha
Kent Emia wrote: hi there ... im still worried that my clamAV windows version is still not able to update virus definition to the internet what is the proper url for the download of virus definition Generally, it involves running freshclam.exe. BTW, If you use clamav to scan your PC files (e.g

Re: [Clamav-users] limit file size

2004-06-08 Thread Fajar A. Nugraha
K. Shantanu wrote: Hi, How do I make clamdscan scan files less than X bytes only? You can limit to scan archives less than x bytes, (ArchiveMaxFileSize) but there's no setting to limit other types. If you use exim+exiscan, the limitation for message size to be scanned is implemented in exim,

Re: [Clamav-users] still not working in windows

2004-06-08 Thread Fajar A. Nugraha
Kent Emia wrote: yah im using the clamWin but still can't get it download a definition If you're using it to scan mail for a mail server : Step 1 : try downloading new clamav Win32 binary from http://clamav.or.id/snapshot/clamav-devel-latest.cygwin.zip Step 2 : follow installation instructions

Re: [Clamav-users] Installing ClamAV 0.72 on FC2

2004-06-08 Thread Fajar A. Nugraha
Darren wrote: Just a follow-up I copied the file into a different directory for example /home/darren instead of /home/darren/Clamav Antivirus and it installed fine. So, I'm guessing it's problem with space on path ? -- Please avoid sending me Microsoft Office attachments. See

Re: [Clamav-users] database.clamav.net resolution

2004-06-14 Thread Fajar A. Nugraha
Ryan Moore wrote: Damian Menscher wrote: What do you get when you do host database.clamav.net ? Yea, doh. Is the DNS supposed to return a RR based on your location? Actually, for database.clamav.net, the answer is yes. Or to be specific, based on your IP address. It's an effort to balance mirror

Re: [Clamav-users] database.clamav.net resolution

2004-06-15 Thread Fajar A. Nugraha
Damian Menscher wrote: On Tue, 15 Jun 2004, Fajar A. Nugraha wrote: Ryan Moore wrote: Damian Menscher wrote: What do you get when you do host database.clamav.net ? Yea, doh. Is the DNS supposed to return a RR based on your location? Actually, for database.clamav.net

Re: [Clamav-users] Freshclam not updating

2004-06-15 Thread Fajar A. Nugraha
Neil Aggarwal wrote: Jim: Thanks for catching my typo. Now, when I run these commands: touch /var/log/clamav/clam-update.log ; chmod 0600 /var/log/clamav/clam-update.log ; chown clamav.clamav /var/log/clamav/clam-update.log ; /usr/local/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I

Re: [Clamav-users] Clamav 0.72 on Solaris 9: Bus Error on zip files?

2004-06-15 Thread Fajar A. Nugraha
Christer Mort Boräng wrote: In message [EMAIL PROTECTED], Alex S Moore writes: On Fri, 11 Jun 2004 16:22:34 +0200 [EMAIL PROTECTED] (Christer Mort Boräng) wrote: I've installed clamav 0.72 on our new shiny SunFire 880 running Solaris 9, but for some reason it gives a Bus Error when trying

Re: [Clamav-users] OT: Virus page almost ready to go

2004-06-16 Thread Fajar A. Nugraha
George Chelidze wrote: admin is notified about infection incident. I'm guessing you only get small amount of infections (e.g. less than 10.000 a day) ? Regards, Fajar -- Please avoid sending me Microsoft Office attachments. See http://www.newsforge.com/software/04/03/27/0134204.shtml

Re: [Clamav-users] bug in clamdscan

2004-06-20 Thread Fajar A. Nugraha
Dan Egli wrote: [EMAIL PROTECTED] root]# clamdscan $PWD /root: Can't access the file ERROR Ok, clamd was running as clamav (I never know what daemons maintain the 0 uid and which ones call set_uid()). But my above question stands. Where is this ERROR file coming from? ERROR is not a file name

Re: [Clamav-users] no socket mode on SuSE 9.1

2004-06-24 Thread Fajar A. Nugraha
Schoenwaelder Oliver wrote: Hi, I've just made a fresh installation of SuSE 9.1 and installed clamav. I changed the default SuSE clamav.conf to use a local socket but whatever I use clamavd won't start. Without sockets it works. SuSE currently distributes version 0.70 which is not the latest. I

Re: [Clamav-users] clamav-milter install problem

2004-07-06 Thread Fajar A. Nugraha
orv wrote: I'm trying to install clamav .74 on an ensim box for use with sendmail. Your ensim box probably does not have the necessary package to build milter. Is sendmail-devel rpm installed? --- This SF.Net email sponsored by Black Hat

Re: [Clamav-users] ERROR in new setup...

2004-07-08 Thread Fajar A. Nugraha
Kevin W. Gagel wrote: I'm setting up a new server and my initail testing is giving me only errors. I have ClamAV installed OK but following the manuals example of: clamdscan -r -l scan.txt testdir Give me Access denied. ERROR That's because you're trying to scan root's files when clamav is

Re: [Clamav-users] clamwin issue - last one

2004-07-14 Thread Fajar A. Nugraha
Marc Hultquist wrote: I was unable to find anything about changing which database clamwin uses :\ Last I heard, it is HARDCODED to database.clamav.net :) Regards, Fajar --- This SF.Net email sponsored by Black Hat Briefings Training. Attend

Re: [Clamav-users] Fedora Core 2_64 Problems.

2004-07-14 Thread Fajar A. Nugraha
David wrote: Hi, I'm having problems installing clamav on fedora core 2_64. If I use the rpm I get the errors below. Is it rpm for amd64? rpm for i386 might not work rpm -ivh --test /root/clamav-0.74-1.i386.rpm error: Failed dependencies: libbz2.so.1 is needed by clamav-0.74-1

Re: [Clamav-users] Problem with CVS?

2004-07-22 Thread Fajar A. Nugraha
Shane Wise wrote: Running slackware 8.1sendmail version is 8.13.0 All has been running fine with clamav-milter .73we downloaded the CVS yesterday morning(showed version devel-20040721)...in order to catch some of the newer bugs that said the cvs was required... All went fine until

Re: [Clamav-users] Redhat 7.2 and 7.3 clamav-devel-latest

2004-08-02 Thread Fajar A. Nugraha
Vernon A. Fort wrote: Attempting to compile clamav-devel-latest on a redhat 7.2 or 7.3 box but I'm getting autoconf / automake errors. Can I re-run the automake and autoconf and if so, what are the command line args. On the untarred-dir, try running aclocal autoconf automake That should

Re: [Clamav-users] ClamAV-20040805

2004-08-05 Thread Fajar A. Nugraha
Rick Macdougall wrote: Jeremy Kitchen wrote: On Thursday 05 August 2004 07:44 pm, René Bellora wrote: bugs to [EMAIL PROTECTED] Thank you ! I'm testing against old viruses, it seems to miss JS.FortNight.B. Same files, with 0.75 and same signatures are caught *cough* Hi, What's that mean Jeremy

Re: [Clamav-users] Building latest CVS on Fedora Core 1

2004-08-06 Thread Fajar A. Nugraha
Dan O'Brien wrote: Don't ususally do the CVS builds, but I want to try the new template features. I've got automake-1.7.8-1 and autoconf-2.57-3 installed. Can I build with this configuration? On build dir, try running aclocal, autoconf, and automake. That should work. Regards, Fajar --

Re: [Clamav-users] OpenSource Clamav not ready?

2004-08-12 Thread Fajar A. Nugraha
Eric Becker wrote: Although, he does bring up a good point about the ScanMail option still not being officially supported. While I haven't had any problems with the feature on my work's server, it certainly does raise problems with some network admins. ScanMail is not the only way to scan

Re: [Clamav-users] error in Clamav 0.72 with EXIM 4.41

2004-08-12 Thread Fajar A. Nugraha
Silly Billy wrote: Hi, I'm configuring my EXIM 4.41 with Clamav 0.72 .. You should try 0.75.1. 2004-08-12 12:50:28 1Bv9Pw-r3-I6 malware acl condition: clamd: unable to connect to UNIX socket /var/run/clamav/clamd (Permission denied) /var/run/clamav/clamd must be writable by exim user.

Re: [Clamav-users] Clamd - reloading of database delayed after freshclam update

2004-08-15 Thread Fajar A. Nugraha
Brian Morrison wrote: Anyone any ideas as to why when freshclam updates daily.cvd, clamd does not reload the database until the next integrity check time arrives? I have told freshclam to notify clamd in freshclam.conf and passed the correct config file to clamd to ensure it gets the correct

Re: [Clamav-users] Clamd - reloading of database delayed after freshclam update

2004-08-16 Thread Fajar A. Nugraha
Brian Morrison wrote: You'll have something like this on freshclam.log : -- Received signal 14, wake up ClamAV update process started at Sun Aug 15 17:27:15 2004 main.cvd is up to date (version: 24, sigs: 21793, f-level: 2, builder: tomek) daily.cvd updated

Re: [Clamav-users] Leak on Linux 2.4

2004-08-17 Thread Fajar A. Nugraha
Trog wrote: Also, the libc memory allocation routines will almost certainly not free the used memory, but keep it in reserve to later usage. Eh? So if at some point it decides to use over 3GB of memory (like once happened here, Solaris/Sparc, for devel versions after 0.75.1), it will not free

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Fajar A. Nugraha
Nigel Horne wrote: People here seem to be under the misunderstanding that free(3) will always reduce the amount of memory used by an application, returning memory back to the operating system. So it isn't? So the fact that top returns VIRT 3 GB but RES only 11M is normal? I'm confused then.

Re: [Clamav-users] Leak on Linux 2.4

2004-08-18 Thread Fajar A. Nugraha
Jason Haar wrote: On Tue, Aug 17, 2004 at 12:57:15PM +0100, Brian Morrison wrote: Yes, there's almost no point to having free physical memory on a machine, if it is freed and not claimed by something else the VM will remember the last use and not overwrite or swap unless something else needs to

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-20 Thread Fajar A. Nugraha
Nigel Horne wrote: Is it possible to use HEAD to reduce load? I believe it already uses RANGE, so traffic wise the load is greatly reduced. However, if every user decides to set checks every minutes the bottleneck will be in maximum connection. This will not happen if version checks is done

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-24 Thread Fajar A. Nugraha
Dennis Peterson wrote: The ClamAV vendor can offer a push of the AV patterns to paying customers with special needs. That way you will receive the updates as quickly as do the mirrors and the vendor recovers some of the cost of maintaining ClamAV. Eh? Really? This is something new :)

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Fajar A. Nugraha
Andy Fiddaman wrote: On Tue, 24 Aug 2004, Dennis Peterson wrote: ; The ClamAV ; vendor can offer a push of the AV patterns to paying customers with ; special needs. That way you will receive the updates as quickly as do the ; mirrors and the vendor recovers some of the cost of maintaining

Re: [Clamav-users] Downloading clam virus definition files automatically

2004-08-25 Thread Fajar A. Nugraha
Dennis Peterson wrote: Shayne Lebrun wrote: Any reason why that percentage should be less than 100? Cost of bandwidth, cost of equipment, and cost of administrating the purchase/access system? And liability insurance. Hmm ... which makes me wonder. Say ... 1) I host an official public mirror,

[Clamav-users] FYI : recent clamav db updates, Google groups

2004-09-01 Thread Fajar A. Nugraha
FYI, this is the time and number of new virus added to daily.cvd in the last 11 days. The numbers are pretty impressive. The details, including virus names, is available on clamav-virusdb archive. [EMAIL PROTECTED] fajar]$ for file in 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475;do

Re: [Clamav-users] Warning : clamdwatch.pl incompatible with the new EICAR signature

2004-09-02 Thread Fajar A. Nugraha
Tomasz Kojm wrote: On Thu, 02 Sep 2004 15:17:45 +0700 Fajar A. Nugraha [EMAIL PROTECTED] wrote: Using the latest snapshot and database (ClamAV devel-20040902/477/01 Sep 2004 16:20 +0200), clamdwatch.pl complains Clamd didn't find the EICAR pattern. Your virus database(s) could be borked

Re: [Clamav-users] Virus getting through

2004-09-03 Thread Fajar A. Nugraha
ralf bosz wrote: Submit the virus, that way your helping the community. There is a way to check which names are in the clamav-database, but the command slipped my mind... sigtool -l OR http://213.152.53.60/index.php?virus=WindFindsearch=containsSearch=Search (Kevin Spicer's virus alias db, from

[Clamav-users] Virus with p0rn picture attachment?

2004-09-09 Thread Fajar A. Nugraha
Hi, Few days ago, I got several mail with picture attachment (Life.jpg, p0rn, same picture in all mail), and another file (The_movie_3zip.z, which was unfortunately removed by another antivirus that my company runs beacuse it was of type DOS EXE). Seems like Bagle or Netsky-type virus. I don't

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-13 Thread Fajar A. Nugraha
Nigel Horne wrote: On Friday 10 Sep 2004 19:01, Meni Shapiro wrote: hi guys, I got clamd running on a rh9 machine with mimedefang sendmail 8.12.8 (yes i know...should upgrade to 8.13.x ) [snip] Sep 10 19:16:46 kernel: Out of Memory: Killed process x (clamd). [snip] How

Re: OT: Linux/Sun (was: Re: [Clamav-users] SuSE 9.1 RPM of ClamAV 0.75.1)

2004-09-14 Thread Fajar A. Nugraha
On Sun, 12 Sep 2004 20:50:06 +0200, Timo Schöler [EMAIL PROTECTED] wrote: Itzchak Rehberg http://www.qumran.org/homes/izzy/ http://www.izzysoft.de/ We have joy, we have fun, we boot Linux on our SUN... Never! flame A wanna-be-OS that is too stupid to use my Sun's (P)MMU? ROTFL

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Trog wrote: On Tue, 2004-09-14 at 06:30, Meni Shapiro wrote: Clamd works great for lots of people, but some have reported memory leaks on latest stable (0.75.1), which could cause your system to be out of memory. A few people (out of the thousands who run ClamAV) have reported memory

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Nigel Horne wrote: On Tuesday 14 Sep 2004 06:30, Meni Shapiro wrote: Hi Fajar, Thanks for you answer. It's the most usefull i got 'till today. I will take a look at the tools you suguested... The leak is from clamd...i checked 'top' and saw how it swallows all avialble memory until it is

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Trog wrote: I know that the amount of memory used should be varied depending on system activity, but when clamd uses 1 or 2 GB memory when it does nothing (well, it WAS very busy earlier, but it's doing nothing now) is _weird_ If you're scanning multiple 1GB files concurrently, then your

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Nigel Horne wrote: Though I probably should rephrase my statements from now, and no longer use the phrase memory leak but high memory usage instead. That is different. High memory usage != memory leak Actually, that is my point. Right now I'm not sure whether there IS any memory leak at

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread Fajar A. Nugraha
Nigel Horne wrote: On Tuesday 14 Sep 2004 10:34, D Walsh wrote: Would you consider the following a sign of a memory leak? IDname user cpu threads real mem virtual mem 1899 freshclam

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-15 Thread Fajar A. Nugraha
Ralf Hildebrandt wrote: * Fajar A. Nugraha [EMAIL PROTECTED]: Which brings my earlier suggestion. Is there any way to put a built-in memory limiter (not external program like softlimit) to clamd? Why add code to clamd when a good unix-like solution already exists? Because softlimit

Re: [Clamav-users] Re: kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-15 Thread Fajar A. Nugraha
David Champion wrote: [snip] All this is just to throw in with that camp that says these are no indications of memory leaks. Now back to your regularly-scheduled virus discussion. Your comment has been the most enlightning so far on memory allocation :) Okay, now suppose that clamd works in a

Re: [Clamav-users] Re: kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-15 Thread Fajar A. Nugraha
Trog wrote: Apache has been moving away from the prefork-kind of daemon towards threads for a number of years. Yes, but in case you didn't notice prefork is STILL the default MPM if no specific one is chosen. It's for compatibility purposes mostly, for modules that are not thread-safe yet. So

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-15 Thread Fajar A. Nugraha
Ralf Hildebrandt wrote: Fact: We've been running clamd for a week now, scanning 130.000 mails per week. With that amount you shouldn't have any problem. Try 1157851 mail per day (that's yesterday's count on one of my MTAs). Question: Why do I see 4 clamd processes? Might be threads

Re: [Clamav-users] Re: kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-18 Thread Fajar A. Nugraha
Trog wrote: You can limit the number of concurrent threads, and hence memory by using the MaxThreads directive. That also limits the number of concurrent scans. I did. MaxThreads 32 This clamd has been running for 7 hours, on a not-so-busy maliserver. PID USERNAME LWP PRI NICE SIZE RES

Re: [Clamav-users] announcing ClamAV 0.80rc

2004-09-20 Thread Fajar A. Nugraha
Luca Gibelli wrote: -) clamd + clamav.conf was renamed clamd.conf Um, this has got the one of the most annoying change for me in the history of clamav (the other ones was the change of libclamav.so.1.0.3 to libclamav.so.1.0.4, and the now-missing ThreadTimeout option.) Tomasz, can you

Re: [Clamav-users] announcing ClamAV 0.80rc

2004-09-21 Thread Fajar A. Nugraha
Tomasz Kojm wrote: Tomasz, can you please make future changes to clamav backward-compatible? In this case, renaming my clamav.conf to Almost all changes are backward compatible but the point of the renaming was to force users to review/edit their config files. Most of you are simply too lazy

Re: [Clamav-users] Re: Re: Windows port ?

2004-09-21 Thread Fajar A. Nugraha
Remi Thomas wrote: Tomasz Kojm wrote: Please remember that the license of ClamAV databases require your software to follow a GPL compliant license. The ClamAV database uses the GNU general license. I don't modify the DB, I only use it. The license is extracted and displayed in the About

Re: [Clamav-users] announcing ClamAV 0.80rc

2004-09-21 Thread Fajar A. Nugraha
Tomasz Kojm wrote: Well, DNSDatabaseInfo does not affect virus recognition. What IS the default behaviour of clamav when a particular default option does not exists? Is running clamd (and freshclam) with empty clamd.conf and freshclam.conf (if it is possible) be the same as running with the

Re: [Clamav-users] Re: Re: Windows port ?

2004-09-21 Thread Fajar A. Nugraha
Tomasz Kojm wrote: I didn't use any source code from orginal project. This full object oriented C++ rewriting. I can send source code to project manager I you want to check about this. I don't modify the DB, I only download it and use it. I display DB copyright in the About Window. The

Re: [Clamav-users] Re: Re: Windows port ?

2004-09-22 Thread Fajar A. Nugraha
Ralph Angenendt wrote: Fajar A. Nugraha wrote: Isn't LGPL more suitable for libraries? Why should it be? *IF* the authors chose to license it to you in a way, which *only* allows you to incorporate it into Programs with GPL compatible licenses, it should be respected. Forget my

Re: [Clamav-users] Cobalt RaQ2 Compile Errors

2004-10-11 Thread Fajar A. Nugraha
Jeff Ball wrote: The Cobalt RaQ2 has the following... gcc-c++-2.7.2-c3r2 gcc-objc-2.7.2-c3r2 gcc-2.7.2-c3r2 glibc-2.0.7-29.4C2 and 0.80rc3 will not build. again. I'm wondering if I should work on making a new patch, wait longer, that could work. Possibly. Maybe. Eventually. or just give up

Re: [Clamav-users] Cobalt RaQ2 Compile Errors

2004-10-11 Thread Fajar A. Nugraha
Jeff Ball wrote: In file included from others.h:24, from chmunpack.c:44: cltypes.h:35: warning: redefinition of `int8_t' /usr/include/sys/types.h:103: warning: `int8_t' previously declared here cltypes.h:40: warning: redefinition of `int16_t' /usr/include/sys/types.h:105: warning:

  1   2   3   4   >