Re: [Clamav-users] production issues?

2003-10-28 Thread Daniel Andersen
On Wednesday 29 October 2003 13:48, Vlad Jebelev wrote:
> Hi fellow clam users,
>
> I just installed ClamAV yesterday on my mail server and so far it works
> great - I am only using it to scan my personal mail so far. I've seen
> references in this list that clamd can fail once in a while  - and I can
> live with it, being a new product and all. Before I start using it on a
> wider scale - what kind of failures should I expect? Does it just die so I
> need a cron job to check and restart it when it happens or does it hang and
> if so, is there a good check for this, etc. Would appreciate feedback from
> admins who run heavy-dity environments.
>
> Thanks,
> Vlad Jebelev

I'm running the stable release of clamav on a fairly heavy duty (20k 
mailboxes) mail server without any significant problems. Clamd seems to lock 
up periodically (a couple of times a week), but this isn't really a big deal, 
jsut means mail backs up a bit before our cron job notifies us and we just 
restart the process, after which it continues to chug along happily. 
I'm told the cvs version is more reliable, but i'm not sure if i want to trust 
my users mail to cvs quality source code :)



---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] production issues?

2003-10-28 Thread Adam Williams
> I just installed ClamAV yesterday on my mail server and so far it works great

Recent snapshots work well, the 0.60 release is hopeless under any kind
of load.

>  - I am only using it to scan my personal mail so far. I've seen references in this
>  list that clamd can fail once in a while  - and I can live with it, being a new 
>  product and all. Before I start using it on a wider scale - what kind of failures 
>  should I expect? 

Once in a while it just seems to go into wedge mode and thus miltering
stops.

> Does it just die so I need a cron job to check and restart it when it happens 
> or does it hang and if so, is there a good check for this, etc. Would appreciate
> feedback from admins who run heavy-dity environments.

We've had good luck with recent snapshots,  our sendmail box hosts ~300
mail accounts.



---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clamav (snapshots+CVS) failures on FreeBSD 4.8

2003-10-28 Thread Tomasz Kojm
On Tue, 28 Oct 2003 10:51:26 +0300
Odhiambo Washington <[EMAIL PROTECTED]> wrote:
 
> Why does `make' fail eventually? I would like to run the new version.
> For now I am stuck with clamav-20030829 which core dumps quite
> randomly. This is a production box I am running this on, so some
> concrete help will be highly appreciated.

Wash,

thanks for the info. All the issues with FreeBSD (including the one with
GNU MP) will be fixed soon.

Best regards,
Tomasz Kojm
-- 
  oo.   http://www.clamav.net/gpg/tkojm.gpg
 (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B
\..._   Wed Oct 29 04:42:43 CET 2003
  //\   /\  


pgp0.pgp
Description: PGP signature


[Clamav-users] production issues?

2003-10-28 Thread Vlad Jebelev
Hi fellow clam users,

I just installed ClamAV yesterday on my mail server and so far it works great - I am 
only using it to scan my personal mail so far. I've seen references in this list that 
clamd can fail once in a while  - and I can live with it, being a new product and all. 
Before I start using it on a wider scale - what kind of failures should I expect? Does 
it just die so I need a cron job to check and restart it when it happens or does it 
hang and if so, is there a good check for this, etc. Would appreciate feedback from 
admins who run heavy-dity environments.

Thanks,
Vlad Jebelev


---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] FYI - OpenBSD 3.3 - Postfix - Amavisd-new - SA - clamav-devel-20031023 Up for 4 days without a problem.

2003-10-28 Thread Tomasz Kojm
On Tue, 28 Oct 2003 13:38:08 -0600
"Lynn Duerksen" <[EMAIL PROTECTED]> wrote:

> 4 days without a problem...Knock on wood!!  No restarts no stale
> sockets.
> 
> Things are looking good.

Lynn,

thanks for the good news ! I may confirm that all major (and most minor)
problems with clamd have been finally fixed. The new stable version will
be available in the next week and this time it's a very official
information.

Best regards,
Tomasz Kojm
-- 
  oo.   http://www.clamav.net/gpg/tkojm.gpg
 (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B
\..._   Wed Oct 29 03:12:26 CET 2003
  //\   /\  


pgp0.pgp
Description: PGP signature


Re: [Clamav-users] Re: found a bug in v0.60+BugFixesFromCVS-20030916

2003-10-28 Thread Tomasz Kojm
On Tue, 28 Oct 2003 19:43:53 +0300
"Sergey V. Burchu" <[EMAIL PROTECTED]> wrote:

> > 1) abram -- original file I have, this a returned mail from
> > mailer-daemon with infected mail inside.
> > 2) Mail delivery failed_ returning message to sender.eml -- infected
> > mail which is inside (1).

No, it isn't. The difference between the original file in (2) [which is
detected by clamav] and the one in (1) is:

--- DIFF START ---

--- Mail delivery failed_ returning message to sender.eml   Mon Oct 27 12:55:34 
2003
+++ Mail delivery failed_ returning message to sender2.eml  Wed Oct 29 04:05:20 
2003
@@ -1,4 +1,32 @@
-From [EMAIL PROTECTED] Wed Aug 27 18:25:37 2003
+From [EMAIL PROTECTED] Sun Oct 26 22:34:16 2003
+>From MAILER-DAEMON Mon Oct 27 00:34:17 2003
+Received: from mail.iitp.ru ([195.19.65.51]:2521)
+   by pier.botik.ru with esmtp (Exim 4.02)
+   id 1ADsWe-0007Fh-00
+   for [EMAIL PROTECTED]; Mon, 27 Oct 2003 00:34:16 +0300
+Received: from mailnull by mail.iitp.ru with local (Exim)
+   id 1ADsWS-0005wS-00
+   for <[EMAIL PROTECTED]>; Mon, 27 Oct 2003 00:34:04 +0300
+X-Failed-Recipients: system-filter
+From: Mail Delivery System <[EMAIL PROTECTED]>
+To: [EMAIL PROTECTED]
+Subject: Mail delivery failed: returning message to sender
+Message-Id: <[EMAIL PROTECTED]>
+Date: Mon, 27 Oct 2003 00:34:04 +0300
+X-Botik-Recipient: [EMAIL PROTECTED]
+Status: RO
+
+This message was created automatically by mail delivery software
(Exim).
+
+A message that you sent could not be delivered to one or more of its
+recipients. This is a permanent error. The following address(es)
failed:
+
+  pipe to |/usr/local/drweb/clients/exim/drweb-exim
--conf=/usr/local/drweb/clients/exim/drweb_exim.conf -f $sender_address
-- $recipients
+generated by system-filter
+local delivery failed
+
+-- This is a copy of the message, including all the headers. --
+
 Return-path: <[EMAIL PROTECTED]>
 Received: from pier.botik.ru ([193.232.174.1])
by mail.iitp.ru with esmtp (Exim)
@@ -19,9 +47,6 @@
 X-List-Unsubscribe: [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 X-List-Unsubscribe: [EMAIL PROTECTED]
-Status: RO
-Content-Length: 98066
-Lines: 1291
 
 OTYQDGWXCC8HYQ
 Content-Type: text/plain; charset=us-ascii

--- DIFF END ---

Best regards,
Tomasz Kojm
-- 
  oo.   http://www.clamav.net/gpg/tkojm.gpg
 (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B
\..._   Wed Oct 29 04:06:44 CET 2003
  //\   /\  


pgp0.pgp
Description: PGP signature


Re: [Clamav-users] ClamAV and qmail without qmail-scanner

2003-10-28 Thread Tomasz Kojm
On Tue, 28 Oct 2003 15:40:25 -0800
"Tim Howell" <[EMAIL PROTECTED]> wrote:

> I've searched google and the list archives and didn't come up with
> much. Is there a way to use ClamAV on a site-wide qmail installation
> without using qmail-scanner?  Has anyone written anything like the
> SpamAssassin qmail-spamc qmail-queue replacement?
> 
> Any ideas would be appreciated.  =)

Please search freshmeat.net. There's a project that supports clamav and
the CPAN/Clamd perl module.

Best regards,
Tomasz Kojm
-- 
  oo.   http://www.clamav.net/gpg/tkojm.gpg
 (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B
\..._   Wed Oct 29 03:26:08 CET 2003
  //\   /\  


pgp0.pgp
Description: PGP signature


Re: [Clamav-users] clamav and procmail

2003-10-28 Thread Tomasz Kojm
On Tue, 28 Oct 2003 14:55:19 +0100
Marc Cuypers <[EMAIL PROTECTED]> wrote:

> > Try to increase a value of StreamMaxLength, clamdscan stdin scanning
> > is broken and can't handle some clamd's exceptions.
> > 
> This seems to work.

Thanks for the confirmation, I will try to fix it ASAP.

Best regards,
Tomasz Kojm
-- 
  oo.   http://www.clamav.net/gpg/tkojm.gpg
 (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B
\..._   Wed Oct 29 03:24:05 CET 2003
  //\   /\  


pgp0.pgp
Description: PGP signature


Re: [Clamav-users] ClamAV and qmail without qmail-scanner

2003-10-28 Thread Rick Macdougall
Hi,

Tim Howell wrote:
I've searched google and the list archives and didn't come up with much.
Is there a way to use ClamAV on a site-wide qmail installation without
using qmail-scanner?  Has anyone written anything like the SpamAssassin
qmail-spamc qmail-queue replacement?
Check out http://projects.gasperino.org/scrubber/  I have no idea how 
well it might work but I was just cleaning out my email box and came 
across that.

Regards,

Rick



---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] ClamAV and qmail without qmail-scanner

2003-10-28 Thread Tim Howell
Title: ClamAV and qmail without qmail-scanner






I've searched google and the list archives and didn't come up with much.  Is there a way to use ClamAV on a site-wide qmail installation without using qmail-scanner?  Has anyone written anything like the SpamAssassin qmail-spamc qmail-queue replacement?

Any ideas would be appreciated.  =)


Thanks!  =)


--TWH





[Clamav-users] New freshclam not working?

2003-10-28 Thread Steve King
Hello

I tried clamav-devel-20031028 just now. The segmentation fault in freshclam is 
gone, but in its place I get the following:

ClamAV update process started at Tue Oct 28 22:04:25 2003
Reading CVD header (main.cvd): OK
main.cvd is up to date (version: 2, sigs: 9882, f-level: 1, builder: tkojm)
Reading CVD header (daily.cvd): ERROR: CVD file not found on remote server
ERROR: Can't read daily.cvd header from 203.208.228.153 (203.208.228.153)
Waiting 10 seconds...
ClamAV update process started at Tue Oct 28 22:04:38 2003
Reading CVD header (main.cvd): OK
main.cvd is up to date (version: 2, sigs: 9882, f-level: 1, builder: tkojm)
Reading CVD header (daily.cvd): ERROR: CVD file not found on remote server
ERROR: Can't read daily.cvd header from 203.208.228.153 (203.208.228.153)
Waiting 10 seconds...
ClamAV update process started at Tue Oct 28 22:04:50 2003
ERROR: Can't connect to port 80 of host database.clamav.net (IP: 
207.201.202.70)
ERROR: Connection with database.clamav.net (207.201.202.70) failed.
Waiting 10 seconds...


I am on linux 2.4.10

Regards

Steve.



---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] gmane

2003-10-28 Thread Luca 'NERvOus' Gibelli

Hi Chris, 

Our mailing-list is configured to not accept posts from non subscribed
addresses. 
It would be too much work to moderate posts from Gmane by hand.

People who want to post from Gmane should subscribe to
[EMAIL PROTECTED] and then turn off mail delivery for
their account. There is a specific option in the mailman control panel,
see https://lists.sourceforge.net/lists/listinfo/clamav-users:

---cut---
Disable mail delivery 
Turn this on if you want mail to not be delivered to you for a little
while.
---cut---


They will be able to post to the mailing-list from Gmane and won't receive 
any message via mail.


best regards

-- 
Luca 'NERvOus' Gibelli ([EMAIL PROTECTED] || [EMAIL PROTECTED])
Home Page: http://www.nervous.it

BOFH excuse 3323:
 * Browser's cookie is corrupted -- someone's been nibbling on it.



---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] Found a form in HTML message

2003-10-28 Thread Spicer, Kevin
Ged Warren wrote:
> The following report relates to an email newsletter which one of our

> Report: Found a form in HTML message
> 
> What does ClamAV mean by "Found a form in HTML message"? 

You're on the wrong mailing list - thats a message from MailScanner.   And it means 
what it says! You can configure whether emails with form tags are bounced, dropped or 
have their html stripped in MailScanner.conf (search for Form). If you want more info 
please subscribe to the MailScanner list.




BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.




---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Posting to this email list/newsgroup

2003-10-28 Thread Chris Barnes
Please note, this email list is carried by the news server
news.gmane.org, which mirrors many email lists (mostly computer/it
related).  It's a rather nice service in that a person can participate
in the email lists (or simply search them) without having to fill up
their inbox.

The vast majority of the email lists mirrored are moderated, but the
moderators allow the posts through (assuming they are on-topic).

This email list doesn't.

I am considering using ClamAV, but have some rather newbie type
questions (not unlike what I see other people asking).  But the owner of
this list did not approve my messages.

So this is an appeal - please let those messages through.


--

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes   AOL IM: CNBarnes
[EMAIL PROTECTED]Yahoo IM: chrisnbarnes
Computer Systems Manager   ph: 979-845-7801
Department of Physics fax: 979-845-2590
Texas A&M University





---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] FYI - OpenBSD 3.3 - Postfix - Amavisd-new - SA - clamav-devel-20031023 Up for 4 days without a problem.

2003-10-28 Thread Lynn Duerksen
4 days without a problem...Knock on wood!!  No restarts no stale
sockets.

Things are looking good.

Amavisd-new running chroot as user amavisd in directory /var/amavisd

Installed clamav as follows

First: run "configure" with shown options

./configure --disable-clamav --enable-dependency-tracking
--disable-clamuko --enable-bigstack --with-user=amavisd
--with-group=amavisd --disable-cr

Next: edit */Makefile and change all pthread to lpthread

clamav-milter/Makefile
clamd/Makefile
clamdscan/Makefile
clamscan/Makefile
database/Makefile
docs/Makefile
etc/Makefile
freshclam/Makefile
libclamav/Makefile
sigtool/Makefile

Then: /etc/clamav.conf has following settings

LogFile /var/amavisd/var/log/clamd.log
LogTime
LogVerbose
PidFile /var/amavisd/var/run/clamd.pid
DataDirectory /var/amavisd/usr/local/share/clamav
LocalSocket /var/amavisd/clamd.sock
FixStaleSocket
MaxDirectoryRecursion 15
User amavisd
ArchiveMaxFileSize 10M
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000


L. A. Duerksen
Technical Manager
Futureware Distributing, Inc
OpenBSD 3.3
amavisd-new-20030616-p2
spamassassin 2.55
postfix-2.0.10
clamav-devel-20031023



---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] email scanning not working

2003-10-28 Thread Laurent Wacrenier
Cedric Foll wrote:
> > Here are three infected mails (http://oban.ac-rouen.fr/virus/) get from
> > my postfix server.
> > When I extract manualy the attachement (with a mimencode -u) viruses are
> > detected by clamscan. When I scan them directly with clamscan they
> > aren't detected (I'm using clamav0.6).
> 
> I works well with the last devel version and option --mbox.

Clamav version 0.60 is only able to check mails in mbox format, that
is with a "From foobar date" as first line and "From " sequences
quoted as ">From ". A small script should do the convertion.

> Can we use this version on a production environnement ?

I think it is more stable than 0.60. My clamd crash sometime but not
too much. I'm trying to make it to dump a core and sending to it about
5 mails per day.


---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Re: found a bug in v0.60+BugFixesFromCVS-20030916

2003-10-28 Thread Sergey V. Burchu
Mon, Oct 27, 2003 at 04:28:40PM +0300, you(Sergey V. Burchu) wrote:
> Hello where.
> Hope this will help:
> 
> Here (http://joker.botik.ru/~sayd/tmp/letter.tar.bz2) are 3 files:

Oops.. I'm sorry, I forgot something. Archive can be found here:
http://up.botik.ru/~sayd/tmp/letter.tar.bz2

> 1) abram -- original file I have, this a returned mail from mailer-daemon
> with infected mail inside.
> 2) Mail delivery failed_ returning message to sender.eml -- infected mail
> which is inside (1).
> 3) readme.exe -- Worm.BugBear.B infected.
> 
> So I have that 3 files, here is result of scanning:
> 
> sayd:~> clamdscan abram 
> /home/sayd/abram: OK
> 
> --- SCAN SUMMARY ---
> Infected files: 0
> Time: 0.046 sec (0 m 0 s)
> 
> sayd:~> clamdscan Mail\ delivery\ failed_\ returning\ message\ to\ sender.eml 
> /home/sayd/Mail delivery failed_ returning message to sender.eml: OK
> 
> --- SCAN SUMMARY ---
> Infected files: 0
> Time: 0.023 sec (0 m 0 s)
> 
> sayd:~> clamdscan readme.exe 
> /home/sayd/readme.exe: Worm.BugBear.B FOUND
> 
> --- SCAN SUMMARY ---
> Infected files: 1
> Time: 0.004 sec (0 m 0 s)
> 
> Here is my config:
> LocalSocket /var/run/clamd.ctl
> ScanArchive
> StreamSaveToDisk
> ArchiveMaxRecursion 5
> ArchiveMaxFiles 1000
> ArchiveMaxFileSize 10M
> ThreadTimeout 180
> MaxThreads 5
> MaxConnectionQueueLength 15
> PidFile /var/run/clamd.pid
> DataDirectory /var/lib/clamav/
> SelfCheck 3600
> LogFile /var/log/clamd.log
> LogTime
> ScanMail
> 
> 
> I use Debian unstable if it can help.

-- 
Burchu Sergey.


---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] email scanning not working

2003-10-28 Thread Marc Balmer
Am 28.10.2003 um 17:07 schrieb Cedric Foll:

Here are three infected mails (http://oban.ac-rouen.fr/virus/) get 
from
my postfix server.
When I extract manualy the attachement (with a mimencode -u) viruses 
are
detected by clamscan. When I scan them directly with clamscan they
aren't detected (I'm using clamav0.6).
I works well with the last devel version and option --mbox.
Can we use this version on a production environnement ?
We use the "development" at least in three productive environments.

- Marc



---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] email scanning not working

2003-10-28 Thread Cedric Foll
> Here are three infected mails (http://oban.ac-rouen.fr/virus/) get from
> my postfix server.
> When I extract manualy the attachement (with a mimencode -u) viruses are
> detected by clamscan. When I scan them directly with clamscan they
> aren't detected (I'm using clamav0.6).

I works well with the last devel version and option --mbox.
Can we use this version on a production environnement ?

Regards


signature.asc
Description: Ceci est une partie de message	=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=


[Clamav-users] I am verry sorry

2003-10-28 Thread Takeshi Fukumoto
To you 
I made you trouble very much lately. 
I am very sorry, it was solvable by your power come out of and carried
out Thank you. 
Up to apology people gratitude Since I will be careful from now on, I
need your help well. 
I am not so good at English -- please pardon

clamscan -r 

--- SCAN SUMMARY ---
Known viruses: 9886
Scanned directories: 246
Scanned files: 698
Infected files: 0
Data scanned: 7.84 Mb
I/O buffer size: 131072 bytes
Time: 8.847 sec (0 m 8 s)



Takeshi Fukumoto





---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] email scanning not working

2003-10-28 Thread Cedric Foll

> What is the format of your mail files ? We may need some samples to
> implement support for it.
> 

Here are three infected mails (http://oban.ac-rouen.fr/virus/) get from
my postfix server.
When I extract manualy the attachement (with a mimencode -u) viruses are
detected by clamscan. When I scan them directly with clamscan they
aren't detected (I'm using clamav0.6).

Regards.

-- 
==
Cedric Foll
Ingénieur réseaux, Rectorat de Rouen
mèl: [EMAIL PROTECTED]
tèl: 02 35 14 77 51

"L'orgueil a plus de part que la bonté 
aux remontrances que nous faisons à 
ceux qui commettent des fautes; et nous 
ne les reprenons pas tant pour les en 
corriger que pour leur persuader que 
nous en sommes exempts."
La rochefoucauld
===



signature.asc
Description: Ceci est une partie de message	=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=


[Clamav-users] I am Very sorry

2003-10-28 Thread Takeshi Fukumoto
To you 
I made you trouble very much lately. 
I am very sorry, it was solvable by your power come out of and carried
out Thank you. 
Up to apology people gratitude Since I will be careful from now on, I
need your help well. 
I am not so good at English -- please pardon

Takeshi Fukumoto 




---
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamav and procmail

2003-10-28 Thread Marc Cuypers
Tomasz Kojm wrote:

On Mon, 27 Oct 2003 11:42:51 +0100
Marc Cuypers <[EMAIL PROTECTED]> wrote:

it works.  So the problem prolly lies only with the communication 
between clamdscan and clamd.

How can I solve this problem?


Try to increase a value of StreamMaxLength, clamdscan stdin scanning is
broken and can't handle some clamd's exceptions.
This seems to work.

Thanks.



---
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Clarity regarding updated virus definitions....

2003-10-28 Thread Tomasz Kojm
On Tue, 28 Oct 2003 11:06:06 +0300
Odhiambo Washington <[EMAIL PROTECTED]> wrote:

> > Are the latest def version #'s posted in the change log, CVS or on
> > the website or anywhere so I can verify I'm current? I don't see
> > them on the website.
> 
> Hmm, I don't think so, but you can run freshclam from within a shell
> script that would include diff-ing so that you see what changes were
> made.

Or better subscribe to the clamav-virusdb@ mailing list.

Best regards,
Tomasz Kojm
-- 
  oo.   http://www.clamav.net/gpg/tkojm.gpg
 (\/)\. 0DCA5A08407D5288279DB43454822DC8985A444B
\..._   Tue Oct 28 13:11:26 CET 2003
  //\   /\  


pgp0.pgp
Description: PGP signature


Re: [Clamav-users] Clarity regarding updated virus definitions....

2003-10-28 Thread Odhiambo Washington
* Kevin Brouelette <[EMAIL PROTECTED]> [20031025 07:56]: wrote:
> Hello
> 
> I have been testing clamav stable and CVS on two different pc's 
> and have questions re: the updates I fetch via cron:
> 
> If I'm running stable on one box and CVS on another am I running
> the same virus def's on both or are they specific to the version of
> clamav I'm running?

If you install the CVS version, I believe it uses the new CVD format,
so yes, the db are different. By stable you mean 0.60 yes?


> Second,  how do I know I'm running the 'lastest' version of the virus
> definitions?  I can look at the log file but is there another way
> to see if I actually pulled the latest so I'm not out of date?

Write the freshclam output to a logfile and analyse it. From what I
think, updating the db 3 times a day could mean "upto date". Let the
db maintainers tell us what the reality is though ;)


> Maybe a switch on 'freshclam' would be cool.  "freshclam --defs"
> or something.

man freshclam.


> Are the latest def version #'s posted in the change log, CVS or on the
> website or anywhere so I can verify I'm current? I don't see them
> on the website.

Hmm, I don't think so, but you can run freshclam from within a shell
script that would include diff-ing so that you see what changes were
made.




cheers
   - wash 
+--+-+
Odhiambo Washington . WANANCHI ONLINE LTD (Nairobi, KE)  |
  . 1ere Etage, Loita Hse, Loita St.,  |
GSM: (+254) 722 743 223 . # 10286, 00100 NAIROBI |
GSM: (+254) 733 744 121 . (+254) 020 313 985 - 9 |
+-+--+
"Oh My God! They killed init! You Bastards!"  
 --from a /. post


---
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Clamav (snapshots+CVS) failures on FreeBSD 4.8

2003-10-28 Thread Odhiambo Washington
I have some data output from ./configure and `make` for clamav CVS posted
at http://ns2.wananchi.com/~wash/Clamav

The configure is done like this:
export LDFLAGS="-L/usr/local/lib $LDFLAGS"
export CFLAGS="-I/usr/local/include $CFLAGS"


./configure --enable-bigstack --with-group=mail


Why does `make' fail eventually? I would like to run the new version.
For now I am stuck with clamav-20030829 which core dumps quite randomly.
This is a production box I am running this on, so some concrete help
will be highly appreciated.



cheers
   - wash 
+--+-+
Odhiambo Washington . WANANCHI ONLINE LTD (Nairobi, KE)  |
  . 1ere Etage, Loita Hse, Loita St.,  |
GSM: (+254) 722 743 223 . # 10286, 00100 NAIROBI |
GSM: (+254) 733 744 121 . (+254) 020 313 985 - 9 |
+-+--+
"Oh My God! They killed init! You Bastards!"  
 --from a /. post


---
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re[2]: [Clamav-users] configure

2003-10-28 Thread zen
Hello Odhiambo,


> Okay. You are in the same situation as myself. Some folks have gotten this
> to work for them. I know it works (sometimes) in FreeBSD 5.x but not 4.8
> FreeBSD 4.x comes with gnu mp in the base system. Perhaps you can overwrite
> this with the port and try again. Not that I haven't tried it, but you may
> be luckier than I am because it did not work for me this way too.

> PS: Learn to edit your messages ;)


yeah that still didn't work too(overwrite it with the port) .
may be i'm not that lucky...

PS:done  :)






-- 
Best regards,
 zenmailto:[EMAIL PROTECTED]



---
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] configure

2003-10-28 Thread Odhiambo Washington
* zen <[EMAIL PROTECTED]> [20031028 10:01]: wrote:
> Hello Odhiambo,
> 
> Tuesday, October 28, 2003, 11:37:00 AM, you wrote:
> 
> > * zen <[EMAIL PROTECTED]> [20031028 04:51]: wrote:
> >> Hello clamav-users,
> >> 
> >> i got this msg when i tried to compile latest clamav snapshot which
> >> support new virus database
> >> 
> >> WARNING: GNU MP 3 or newer NOT FOUND - digital signature support will be disabled 
> >> !
> >> 
> >> i`m running on FBSD 4.9
> 
> > Install /usr/ports/math/libgmp4 and try again.
> > Although I haven't had very good results even with this. I seriously suspect
> > someting in the clamav "configure" guess process, but I am not familiar with
> > those intricacies..

> 
> unfortunately i already installed /usr/ports/math/libgmp4 too.
> still gave me nothing...

Okay. You are in the same situation as myself. Some folks have gotten this
to work for them. I know it works (sometimes) in FreeBSD 5.x but not 4.8
FreeBSD 4.x comes with gnu mp in the base system. Perhaps you can overwrite
this with the port and try again. Not that I haven't tried it, but you may
be luckier than I am because it did not work for me this way too.

PS: Learn to edit your messages ;)




cheers
   - wash 
+--+-+
Odhiambo Washington . WANANCHI ONLINE LTD (Nairobi, KE)  |
  . 1ere Etage, Loita Hse, Loita St.,  |
GSM: (+254) 722 743 223 . # 10286, 00100 NAIROBI |
GSM: (+254) 733 744 121 . (+254) 020 313 985 - 9 |
+-+--+
"Oh My God! They killed init! You Bastards!"  
 --from a /. post


---
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users