Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
Doubtful. There will always be diversity in computing, and as long as users don't care one way or the other, Windows will always exist and probably will hold the desktop for a LNG time. Which is fine. The user only asks if he/she can do whatever needed on the OS that runs on the desktop. They don't really care how it's called. An OS, any OS, is a tool nothing more, nothing less. B. --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
On Thu, 22 Apr 2004 22:36:14 -0400, Don Levey <[EMAIL PROTECTED]> wrote: >> Change the security on /var/run/clamav to clamav:clamav >> >> $ ls -ld /var/run/clamav >> drwxr-xr-x 2 clamav clamav 4096 Apr 19 08:24 /var/run/clamav >> >> -- >Steve, >Unfortunately, that didn't seem to have an effect. >The owner:group were already at clamav, and the permissions were set at >700. I reset to 755 as in your example, but there was no difference in >behaviour. > > What are the permissions on the files? $ ls -l /var/run/clamav/ total 4 srwx-- 1 clamav clamav 0 Apr 19 08:24 clamav-milter.sock -rw-rw 1 clamav clamav 5 Apr 18 09:20 clamd.pid srwxrwxrwx 1 clamav clamav 0 Apr 18 09:20 clamd.sock -- Steve --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] GNU MP warning
[EMAIL PROTECTED] wrote: i'm trying to configure clamav 0.70 on RH9 and I get message: WARNING: GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! What mean this? (I see that I have gmp libraries on default location /usr/lib) When building from source, you need to have gmp-devel too. Regards, Fajar -- Don't use GIF. Use PNG instead http://www.gnu.org/philosophy/gif.html --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
On Thu, 2004-04-22 at 22:20, Steven Stern wrote: > >Oops, I may have spoken too soon. My maillog is showing the following: > > > >Apr 22 20:57:07 davinci sendmail[11572]: i3N0v70t011572: Milter > >(clmilter): local socket name /var/run/clamav/clamav-milter.sock unsafe > >Apr 22 20:57:07 davinci sendmail[11572]: i3N0v70t011572: Milter > >(clmilter): to error state > > > > > Change the security on /var/run/clamav to clamav:clamav > > $ ls -ld /var/run/clamav > drwxr-xr-x 2 clamav clamav 4096 Apr 19 08:24 /var/run/clamav > > -- Steve, Unfortunately, that didn't seem to have an effect. The owner:group were already at clamav, and the permissions were set at 700. I reset to 755 as in your example, but there was no difference in behaviour. Thanks, -Don --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
On Thu, 22 Apr 2004 21:25:21 -0400, Don Levey <[EMAIL PROTECTED]> wrote: >On Thu, 2004-04-22 at 20:31, Don Levey wrote: > >> Thank you again - this worked. As far as I can tell, it's functioning >> correctly now. Thanks all for your help! >> -Don >> >Oops, I may have spoken too soon. My maillog is showing the following: > >Apr 22 20:57:07 davinci sendmail[11572]: i3N0v70t011572: Milter >(clmilter): local socket name /var/run/clamav/clamav-milter.sock unsafe >Apr 22 20:57:07 davinci sendmail[11572]: i3N0v70t011572: Milter >(clmilter): to error state > Change the security on /var/run/clamav to clamav:clamav $ ls -ld /var/run/clamav drwxr-xr-x 2 clamav clamav 4096 Apr 19 08:24 /var/run/clamav -- Steve --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
On Thu, 2004-04-22 at 20:31, Don Levey wrote: > Thank you again - this worked. As far as I can tell, it's functioning > correctly now. Thanks all for your help! > -Don > Oops, I may have spoken too soon. My maillog is showing the following: Apr 22 20:57:07 davinci sendmail[11572]: i3N0v70t011572: Milter (clmilter): local socket name /var/run/clamav/clamav-milter.sock unsafe Apr 22 20:57:07 davinci sendmail[11572]: i3N0v70t011572: Milter (clmilter): to error state >From what I was able to get in the archives, this can happen if the sock is named differently in the sendmail.mc and clamav-milter files. However: sendmail.mc: define(`confINPUT_MAIL_FILTERS', `clmilter')dnl INPUT_MAIL_FILTER(`clmilter', `S=local:/var/run/clamav/clamav-milter.sock, F=, T=S:4m;R:4m')dnl clamav-milter: CLAMAV_FLAGS="--headers --noreject --outgoing --quarantine-dir=/var/run/clamav/quarantine --max-children=10 --force-scan --local --postmaster-only --server=localhost local:/var/run/clamav/clamav-milter.sock" >From what I see here, they seem to be named the same. I tried to make sure that the owner and group of the /var/run/clamav/clamav-milter.sock file were clamav, and permissions were 600, but now restarting clamd gives an error in the clamd log that the sock file is in use by another process. I've not found anything yet in the archives which discusses this; stopping and restarting the processes doesn't seem to help. I hope I'm getting somewhere... -Don --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
On Thu, 2004-04-22 at 18:25, [EMAIL PROTECTED] wrote: > In the message dated: Thu, 22 Apr 2004 16:35:01 EDT, > The pithy ruminations from "Don Levey" on > were: > > RTFEM (Read The Fine Error Message): > > => Starting sendmail: 451 4.0.0 InputFilter clmilter not defined: No such file > > > OK, sendmail is looking for an InputFilter named clmilter, and complaining when > it doesn't exist. > Ah, OK - thanks. I was following the instructions - but actually understanding what I was doing would have helped more... > > => or directory > => WARNING: Xclamav: local socket name /var/run/clamav/clamav-milter.sock > => missing > => > => The lines in sendmail.mc are: > => INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, > ^^ > You've named your filter "clamav". > > => T=S:4m;R:4m')dnl > => define(`confINPUT_MAIL_FILTERS', `clmilter')dnl > > Then you tell sendmail to use a filter named "clmilter". No wonder the poor > thing is confused. > > => Thank you again - this worked. As far as I can tell, it's functioning correctly now. Thanks all for your help! -Don --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Re: clam-av/milter, segmentation fault
My sendmail.mc
divert(0)dnl
VERSIONID(`$Id: generic-bsd4.4.mc,v 8.10 1999/02/07 07:26:02 gshapiro Exp $')
OSTYPE(bsd4.4)dnl
DOMAIN(generic)dnl
FEATURE(use_cw_file)
FEATURE(mailertable)
FEATURE(virtusertable)
FEATURE(access_db)
FEATURE(relay_based_on_MX)
FEATURE(blacklist_recipients)
FEATURE(`enhdnsbl', `relays.ordb.org', `"Spam blocked see:
http://www.ordb.org/faq/\#why_rejected";', `t')dnl
FEATURE(`enhdnsbl', `bl.spamcop.net', `"Spam blocked see:
http://www.spamcop.net/w3m?action=checkblock&ip="$&{client_addr}', `t')dnl
FEATURE(`enhdnsbl', `list.dsbl.org', `"Spam blocked see:
http://dsbl.org/listing?"$&{client_addr}', `t')dnl
FEATURE(`enhdnsbl', `multihop.dsbl.org', `"Spam blocked see:
http://dsbl.org/listing?"$&{client_addr}', `t')dnl
MAILER(local)dnl
MAILER(smtp)dnl
INPUT_MAIL_FILTER(`spamassassin', `S=/var/run/spammilter/spamass.sock, F=,
T=C:15m;S:4m;R:4m;E:10m')
INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav-milter.sock, F=,
T=S:4m;R:4m')dnl
define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl
define(`confDONT_BLAME_SENDMAIL', `GroupReadableSASLDBFile')dnl
define(`confPRIVACY_FLAGS', `authwarnings, novrfy, noreceipts,
needmailhelo, noexpn')dnl
define(`confMAX_MESSAGE_SIZE', `400')dnl
define(`confLOG_LEVEL', `15')dnl
define(`confTRUSTED_USERS', `root')dnl
define(`confTRUSTED_USERS', `majordomo')dnl
define(`ALIAS_FILE', `/etc/mail/aliases,/etc/mail/majordomo.aliases')dnl
define(`confAUTH_OPTIONS', `A')dnl
define(`confDELAY_LA', `3')dnl
TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
My startup:
#!/bin/sh
case "$1" in
start)
/usr/local/sbin/clamd && echo -n ' clamd'
/bin/sleep 2
/usr/local/sbin/clamav-milter [EMAIL PROTECTED]
-ol /var/run/clamav-milter.sock && echo -n ' clamav-milter'
;;
stop)
killall clamav-milter && echo -n ' clamav-milter'
killall clamd && echo -n ' clamd'
;;
*)
echo "unknown option: $1 - should be 'start' or 'stop'" >&2
;;
esac
exit 0
Running under FreeBSD 4.9-RELEASE
Configure command line:
configure --with-user=root --with-group=wheel --enable-milter
--disable-pthreads --enable-bigstack
All works fine. ;)
At 04:17 PM 4/22/2004 -0700, you wrote:
On Thu, 2004-04-22 at 13:35, Don Levey wrote:
> Starting sendmail: 451 4.0.0 InputFilter clmilter not defined: No such file
> or directory
> The lines in sendmail.mc are:
> INPUT_MAIL_FILTER(`clamav',
`S=local:/var/run/clamav/clamav-milter.sock, F=,
> T=S:4m;R:4m')dnl
> define(`confINPUT_MAIL_FILTERS', `clmilter')dnl
The first line gives the milter the name "clamav" and the second line
says it's named "clmilter". Make them both the same and regen the
sendmail.cf and it will work.
Blue skies... Todd
Dan Sjolseth
The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you received
this in error, please contact the sender and delete the material from any
computer.
Bulk Mailers and Email address compilers may purchase this email
address for $250,000.00 for use in their products. Anyone selling
this email address or utilizing this email address for any commercial
usage without a license from Myself is in violation of private property
rights and violators WILL be be invoiced for usage. Selling what you do not
own is THEFT of private property!
If builders built buildings they way Microsoft programmers wrote programs,
the first woodpecker that comes along would destroy civilization.
Time stamp on this message is accurate to 1/1000th of a second, traceable
to the National Institute of Standards and Technology (NIST).
Main Entry: con·scious·ness - Pronunciation: -n&s Function: noun
1 : that annoying time between naps.
KeyID: 0x09A06435
FingerPrint: 2ED3 4E03 6541 68FA 4623 3DFA 93F9 DC54 09A0 6435
---
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg297
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
what I meant was changing filter name to be consistent with "define(confINPUT_MAIL_FILTERS', `clmilter')dnl" As far as i understand, confINPUT_MAIL_FILTERS says which filter(s) to use and INPUT_MAIL_FILTER define it. Don defined filter named "clamav" but wanted to use undefined "clmilter". excuse my poor english, A. Joe Maimon wrote: Andrzej Migdalski wrote: Don Levey wrote: The lines in sendmail.mc are: INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, ^^ change it to `clmilter' I think what you are trying to say is that this part of the config line "local:/var/run/clamav/clamav-milter.sock" must match the socket that the clamav-milter process works. --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter Segmentation fault [Solved]
Nigel Horne wrote: On Thursday 22 Apr 2004 12:44 am, Tristan Griffiths wrote: I've got the same issue. clamd, clamscan and clamdscan all run happily. But when you try to run clamav-milter, either by hand or the rc script, it fails with "Segmentation fault (core dumped)". Try the following: 1) Add Foreground and Debug into clamav.conf. 2) Run "strace clamav-milter" and e-mail the results to me. 3) Reset Foreground and Debug to their original values -Nigel I've solved the problem (at least the one I was having). The glibc was version 2.2. I've since upgraded to 2.3 and recompiled clamav and clamav-milter starts without core dumping. Using strace it showed clamav-milter stopping when trying to read in the library file /lib/libm.so.6 which is part of glibc. Thanks for pointing me in the direction of strace Nigel. I'll remember that one. Now to see if clamav will run happily on a low volume backup MX mail server running a Pentium 120 ;-P --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
On Thu, 22 Apr 2004 15:25:02 -0700, [EMAIL PROTECTED] wrote: > > >In the message dated: Thu, 22 Apr 2004 16:35:01 EDT, >The pithy ruminations from "Don Levey" on > were: >=> [EMAIL PROTECTED] wrote: >=> > [SNIP!] > >=> Yes, it does - thanks! >=> Running that permitted the milter to start without incident or error. >=> >=> Of course now (you just knew there had to be something else), trying to >=> start sendmail with the example lines included in sendmail.mc gives me the >=> following: >=> > >RTFEM (Read The Fine Error Message): > >=> Starting sendmail: 451 4.0.0 InputFilter clmilter not defined: No such file > > >OK, sendmail is looking for an InputFilter named clmilter, and complaining when >it doesn't exist. > > >=> or directory >=> WARNING: Xclamav: local socket name /var/run/clamav/clamav-milter.sock >=> missing >=> >=> The lines in sendmail.mc are: >=> INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, > ^^ >You've named your filter "clamav". > >=> T=S:4m;R:4m')dnl >=> define(`confINPUT_MAIL_FILTERS', `clmilter')dnl > >Then you tell sendmail to use a filter named "clmilter". No wonder the poor >thing is confused. > >=> >=> I had thought that the order might affect the execution, and reversed them, >=> but the results were the same. What might I have forgotten? > >In fact, the confINPUT_MAIL_FILTERS probably isn't necessary in this case >(depending on your version onf sendmail). > The two need to match. You define the term clmilter as a mail filter and define clmilter itself. This is from my sendmail.mc (lines are wrapped): INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clamav/clamav-milter.sock,F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') -- Steve --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Re: clam-av/milter, segmentation fault
On Thu, 2004-04-22 at 13:35, Don Levey wrote: > Starting sendmail: 451 4.0.0 InputFilter clmilter not defined: No such file > or directory > The lines in sendmail.mc are: > INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, > T=S:4m;R:4m')dnl > define(`confINPUT_MAIL_FILTERS', `clmilter')dnl The first line gives the milter the name "clamav" and the second line says it's named "clmilter". Make them both the same and regen the sendmail.cf and it will work. Blue skies... Todd --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
Bart Silverstrim wrote: On Apr 22, 2004, at 1:03 PM, Jon Roland wrote: As for Linux and Windows, eventually "there can be only one". I prefer it be Linux or its descendant. As for Chevy and Ford, eventually "there can be only one". I prefer it be Chevy or its descendant. Operating systems are more like railroad tracks than railroad cars. Once there were different grade tracks, but now variant-grade tracks survive in only a few specialized situations, like mines and amusement parks. Once there were DC electric transmission lines. Remember beta, or OSI, or vinyl, or CP/M. Yes, there will be diversity in computer choices, but the implementation will become automated,just as much programming has already become modularized and abstracted using IDEs, class libraries and GUI program generators. How many program in binary or assembler any more? Most of the application software I used to write doesn't get written anymore. It's mostly just modified or reused. Sysadms should not count on having a job for more than a few more years. What can be automated will be automated, and that means almost everything. -- Jon Starflight Corporation7793 Burnet Road #37, Austin, TX 78757 512/374-9585 www.the-spa.com/jon.roland/ [EMAIL PROTECTED] --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
Andrzej Migdalski wrote: Don Levey wrote: The lines in sendmail.mc are: INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, ^^ change it to `clmilter' I think what you are trying to say is that this part of the config line "local:/var/run/clamav/clamav-milter.sock" must match the socket that the clamav-milter process works. A. --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
In the message dated: Thu, 22 Apr 2004 16:35:01 EDT, The pithy ruminations from "Don Levey" on were: => [EMAIL PROTECTED] wrote: => [SNIP!] => Yes, it does - thanks! => Running that permitted the milter to start without incident or error. => => Of course now (you just knew there had to be something else), trying to => start sendmail with the example lines included in sendmail.mc gives me the => following: => RTFEM (Read The Fine Error Message): => Starting sendmail: 451 4.0.0 InputFilter clmilter not defined: No such file OK, sendmail is looking for an InputFilter named clmilter, and complaining when it doesn't exist. => or directory => WARNING: Xclamav: local socket name /var/run/clamav/clamav-milter.sock => missing => => The lines in sendmail.mc are: => INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, ^^ You've named your filter "clamav". => T=S:4m;R:4m')dnl => define(`confINPUT_MAIL_FILTERS', `clmilter')dnl Then you tell sendmail to use a filter named "clmilter". No wonder the poor thing is confused. => => I had thought that the order might affect the execution, and reversed them, => but the results were the same. What might I have forgotten? In fact, the confINPUT_MAIL_FILTERS probably isn't necessary in this case (depending on your version onf sendmail). Mark => => Thanks again, => -Don => => Mark Bergman http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=bergman%40merctech.com --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] ERROR: Malformed CVD header
Greetings, Installed on SuSE 9.0 with all services running, passed a virus through the mail to test, and nothing detected. I ran freshclam it kicks this: ClamAV update process started at Thu Apr 22 06:58:14 2004 Reading CVD header (main.cvd): ERROR: Malformed CVD header detected. ERROR: Can't read main.cvd header from database.clamav.net (196.40.71.226) Giving up... When I stop and start the amavisd no errors are thrown. Any ideas? Thanks Steven - The Software said, Windows98 or better, so I installed Linux! --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Re: clam-av/milter, segmentation fault
Don Levey wrote: The lines in sendmail.mc are: INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, ^^ change it to `clmilter' A. --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Re: clam-av/milter, segmentation fault
[EMAIL PROTECTED] wrote: > The startup-scipt nomally resides in, lets say /etc/rc.d/init.d/ on > Redhat Linux. > > Here is how my /etc/sysconfig/clamav-milter looks like: (beware of > line-wraps) > CLAMAV_FLAGS="--headers --noreject --outgoing > --quarantine-dir=/var/run/clamav/quarantine --max-children=10 > --force-scan --local --postmaster-only --server=localhost > local:/var/run/clamav/clamav-milter.sock" > > Hope it helps. > > /Joacim > > Yes, it does - thanks! Running that permitted the milter to start without incident or error. Of course now (you just knew there had to be something else), trying to start sendmail with the example lines included in sendmail.mc gives me the following: Starting sendmail: 451 4.0.0 InputFilter clmilter not defined: No such file or directory WARNING: Xclamav: local socket name /var/run/clamav/clamav-milter.sock missing The lines in sendmail.mc are: INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clamav-milter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter')dnl I had thought that the order might affect the execution, and reversed them, but the results were the same. What might I have forgotten? Thanks again, -Don --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clam-av/milter, segmentation fault
On Thursday 22 Apr 2004 7:48 pm, Don Levey wrote: > However, when trying to start clamav-milter I receive a segmentation fault. > No further information, just that error. Please do the following to help to track this: 1) Enable Debug and Foreground in clamav.conf 2) Start clamav-milter directly from strace, not using the shell script you mentioned, but using the settings in /etc/sysconfig/clamav-milter 3) Reset Debug & Foreground values 4) Email the output of strace to me -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: clam-av/milter, segmentation fault
Don Levey wrote: However, when trying to start clamav-milter I receive a segmentation fault. No further information, just that error. (snip) In case it helps, I've got the clamav-milter file below. Thank you for any help you can offer, -Don /etc/sysconfig/clamav-milter: #!/bin/sh # # clamav-milter This script starts and stops the clamav-milter daemon # # chkconfig: 2345 91 30 # (more snip) Wait a minute... Are you SURE this is the file /etc/sysconfig/clamav-milter ? No wonder it's failing! /etc/sysconfig/clamav-milter is supposed to be a config-file, not a startup-script! The startup-scipt nomally resides in, lets say /etc/rc.d/init.d/ on Redhat Linux. Here is how my /etc/sysconfig/clamav-milter looks like: (beware of line-wraps) CLAMAV_FLAGS="--headers --noreject --outgoing --quarantine-dir=/var/run/clamav/quarantine --max-children=10 --force-scan --local --postmaster-only --server=localhost local:/var/run/clamav/clamav-milter.sock" Hope it helps. /Joacim --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
On Apr 22, 2004, at 1:03 PM, Jon Roland wrote: As for Linux and Windows, eventually "there can be only one". I prefer it be Linux or its descendant. As for Chevy and Ford, eventually "there can be only one". I prefer it be Chevy or its descendant. Doubtful. There will always be diversity in computing, and as long as users don't care one way or the other, Windows will always exist and probably will hold the desktop for a LNG time. Which is fine. I don't ~want~ Linux abstracted for "ease of use" until it no longer works :-) -Bart --- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] clam-av/milter, segmentation fault
First - I've searched the archives. Any failure to find information to my
question in the archives is mine alone.
I am attempting to install and v0.70 for use with Sendmail. I am running on
RedHat 9, Athlon.
I've downloaded and compiled source for both clamav and clamav-milter, and I
did enable the milter when compiling clam-av. Here's the problem:
I am able to run freshclam, and clamd.
However, when trying to start clamav-milter I receive a segmentation fault.
No further information, just that error.
I'm not at the point where I've restarted Sendmail (with new conf) yet.
I don't see anything in whatever logs I can find.
In case it helps, I've got the clamav-milter file below.
Thank you for any help you can offer,
-Don
/etc/sysconfig/clamav-milter:
#!/bin/sh
#
# clamav-milter This script starts and stops the clamav-milter daemon
#
# chkconfig: 2345 91 30
#
# description: clamav-milter is a daemon which hooks into sendmail and
routes
# email messages to clamav
# processname: clamav-milter
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Local clamav-milter config
CLAMAV_FLAGS=
test -f /etc/sysconfig/clamav-milter && . /etc/sysconfig/clamav-milter
# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
[ -x /usr/local/sbin/clamav-milter ] || exit 0
PATH=$PATH:/usr/bin:/usr/local/sbin:/usr/local/bin
RETVAL=0
start() {
echo -n "Starting clamav-milter: "
daemon clamav-milter ${CLAMAV_FLAGS}
RETVAL=$?
echo
test $RETVAL -eq 0 && touch /var/lock/subsys/clamav-milter
return $RETVAL
}
stop() {
echo -n "Shutting down clamav-milter: "
killproc clamav-milter
RETVAL=$?
echo
test $RETVAL -eq 0 && rm -f /var/lock/subsys/clamav-milter
}
restart() {
stop
start
}
# See how we were called.
case "$1" in
start)
# Start daemon.
start
;;
stop)
# Stop daemon.
stop
;;
restart|reload)
restart
;;
condrestart)
test -f /var/lock/subsys/clamav-milter && $0 restart || :
;;
status)
status clamav-milter
;;
*)
echo "Usage: $0 {start|stop|reload|restart|condrestart|status}"
exit 1
esac
exit $?
---
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Problem with clamscan .vs. clamdscan
I'm having a problem where clamscan does not detect an encrypted .zip file, but clamdscan does. Does anyone have any suggestions? [EMAIL PROTECTED] tmp]# /usr/bin/clamdscan --tempdir=/tmp -r -i bob.zip /tmp/bob.zip: Encrypted.Zip FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.002 sec (0 m 0 s) [EMAIL PROTECTED] tmp]# /usr/bin/clamscan --tempdir=/tmp -r -i bob.zip --- SCAN SUMMARY --- Known viruses: 21192 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.00 MB I/O buffer size: 131072 bytes Time: 3.306 sec (0 m 3 s) [EMAIL PROTECTED] tmp]# clamscan --version clamscan / ClamAV version 0.70 [EMAIL PROTECTED] tmp]# clamdscan --version clamdscan / ClamAV version 0.70 [EMAIL PROTECTED] tmp]# grep Encr /etc/clam*.conf /etc/clamav.conf:# Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR). /etc/clamav.conf:ArchiveBlockEncrypted /etc/clamd.conf:# Mark encrypted archives as viruses (Encrypted.Zip, Encrypted.RAR). /etc/clamd.conf:ArchiveBlockEncrypted [EMAIL PROTECTED] tmp]# grep Stream /etc/clam*.conf /etc/clamav.conf:StreamSaveToDisk /etc/clamav.conf:StreamMaxLength 16M /etc/clamd.conf:StreamSaveToDisk /etc/clamd.conf:StreamMaxLength 16M [EMAIL PROTECTED] tmp]# grep User /etc/clam*.conf /etc/clamav.conf:User root /etc/clamd.conf:User root [EMAIL PROTECTED] tmp]# find / -name "clam*.conf" -print /etc/clamav.conf /etc/clamd.conf [EMAIL PROTECTED] tmp]# whereis clamscan clamscan: /usr/bin/clamscan /usr/share/man/man1/clamscan.1.bz2 [EMAIL PROTECTED] tmp]# whereis clamdscan clamdscan: /usr/bin/clamdscan /usr/share/man/man1/clamdscan.1.bz2 [EMAIL PROTECTED] tmp]# -- Eric Wieling * BTEL Consulting * 504-899-1387 x2111 "In a related story, the IRS has recently ruled that the cost of Windows upgrades can NOT be deducted as a gambling loss." --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
B. van Ouwerkerk wrote: This goes well beyond the perpose of this list. Would be nice if you want to use Linux on the desktop. Perhaps you can create a sort of windows installer look-alike and have it install everything needed. So, if you have some time left.. Not beyond the purpose of this list if this message eventually reaches and inspires a frustrated or time-limited user who is also a competent programmer who wants to build his reputation. Alas, as much fun as it would be to do it myself, after a heart attack and a stroke the days of life I have left are too few and precious to spend them doing things just for fun. Someone will eventually do it, so it might as well be someone on this list or someone to whom the suggestion is forwarded from this list. As for Linux and Windows, eventually "there can be only one". I prefer it be Linux or its descendant. -- Jon Starflight Corporation7793 Burnet Road #37, Austin, TX 78757 512/374-9585 www.the-spa.com/jon.roland/ [EMAIL PROTECTED] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] clamav.conf file
Title: Message -Original Message-From: Wiltshire, Michael Sent: Thursday, April 22, 2004 12:05 PMTo: '[EMAIL PROTECTED]'Cc: '[EMAIL PROTECTED]'Subject: RE: [Clamav-users] clamav.conf file -Original Message-From: Wiltshire, Michael [mailto:[EMAIL PROTECTED] Sent: Thursday, April 22, 2004 10:24 AMTo: [EMAIL PROTECTED]Cc: '[EMAIL PROTECTED]'Subject: RE: [Clamav-users] clamav.conf file => Hi all again, => => When I run clamdscan, I get the following error: => => # clamdscan -v => ERROR: Clamd is not configured properly. => => This only happens when I uncomment the line below. => => # TCP port address. => TCPSocket 3310 If that's uncommented, then I believe that you also need to comment out LocalSocket, and possibly assign a value to (uncomment) TCPAddr. => => If I leave it commented, I get this error: => => # clamdscan -v => connect(): Socket operation on non-socket => ERROR: Can't connect to clamd. Do you have a definition for LocalSocket? => => Which I guess is to be expected. => => => Any help ? => => Mike. I uncommented theTCP port address and TCPAddr (127.0.0.1), and commented Localsocket and got the message : # clandscan /etc Connect () : Invalid argument ERROR: Can't connect to clamd
RE: [Clamav-users] clamav.conf file
Title: Message -Original Message-From: Wiltshire, Michael [mailto:[EMAIL PROTECTED] Sent: Thursday, April 22, 2004 10:24 AMTo: [EMAIL PROTECTED]Cc: '[EMAIL PROTECTED]'Subject: RE: [Clamav-users] clamav.conf file => Hi all again, => => When I run clamdscan, I get the following error: => => # clamdscan -v => ERROR: Clamd is not configured properly. => => This only happens when I uncomment the line below. => => # TCP port address. => TCPSocket 3310 If that's uncommented, then I believe that you also need to comment out LocalSocket, and possibly assign a value to (uncomment) TCPAddr. => => If I leave it commented, I get this error: => => # clamdscan -v => connect(): Socket operation on non-socket => ERROR: Can't connect to clamd. Do you have a definition for LocalSocket? => => Which I guess is to be expected. => => => Any help ? => => Mike. I uncommented theTCP port address and TCPAddr (127.0.0.1), and commented Localsocket and got the message : # clandscan /etc Connect () : Invalid argument ERROR: Can't connect to clamd
RE: [Clamav-users] ClamAV 0.70 (FreeBSD port) + clamav-milter (FreeBSD port) + Sendmail 8.12.8p1/8.12.8
> That it means? In a result sendmail ceases to accept a mail. How > to struggle with this problem? Do you have the --outgoing option enabled for clamav-milter? > Best regards, > RShibrick mailto:[EMAIL PROTECTED] -- Nigel Horne. Arranger, Composer, Conductor, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk/music.htm --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] GNU MP warning
i'm trying to configure clamav 0.70 on RH9 and I get message: WARNING: GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! What mean this? (I see that I have gmp libraries on default location /usr/lib) Thanks, Iulian --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] ClamAV 0.70 (FreeBSD port) + clamav-milter (FreeBSD port) + Sendmail 8.12.8p1/8.12.8
Hello clamav-users, I'm ClamAV 0.70 (FreeBSD port) + clamav-milter (FreeBSD port) + Sendmail 8.12.8p1/8.12.8 I see in maillog : Apr 22 11:57:59 ns1 sm-mta[4978]: i3M7vfbD004978: from=<[EMAIL PROTECTED]>, size=41927, class=0, nrcpts=1, msgid=<200404 [EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, relay=[217.70.18.29] Apr 22 11:57:59 ns1 clamav-milter[4185]: i3M7vfbD004978: stream: Worm.SomeFool.P FOUND Intercepted virus from <[EMAIL PROTECTED] ne.dp.ua> to ... Apr 22 11:58:51 ns1 sm-mta[4196]: rejecting connections on daemon MTA: load average: 12 Apr 22 11:58:51 ns1 sm-mta[4196]: rejecting connections on daemon MSA: load average: 12 ... Apr 22 12:01:59 ns1 sm-mta[4978]: i3M7vfbD004978: Milter (clmilter): timeout before data read Apr 22 12:01:59 ns1 sm-mta[4978]: i3M7vfbD004978: Milter (clmilter): to error state That it means? In a result sendmail ceases to accept a mail. How to struggle with this problem? -- Best regards, RShibrick mailto:[EMAIL PROTECTED] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] clamav.conf file
Title: RE: [Clamav-users] clamav.conf file => Hi all again, => => When I run clamdscan, I get the following error: => => # clamdscan -v => ERROR: Clamd is not configured properly. => => This only happens when I uncomment the line below. => => # TCP port address. => TCPSocket 3310 If that's uncommented, then I believe that you also need to comment out LocalSocket, and possibly assign a value to (uncomment) TCPAddr. => => If I leave it commented, I get this error: => => # clamdscan -v => connect(): Socket operation on non-socket => ERROR: Can't connect to clamd. Do you have a definition for LocalSocket? => => Which I guess is to be expected. => => => Any help ? => => Mike. I uncomment the TCP port address and TCPAddr (127.0.0.1), anf commect the Localsocket and the the message: # clandscan /etc Connect () : Invalid argument ERROR: Can't connect to clamd
RE: [Clamav-users] New User
Thanks... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Stern Sent: Wednesday, April 21, 2004 9:52 AM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] New User On Wed, 21 Apr 2004 07:45:53 -0400, "Chalonec Roger" <[EMAIL PROTECTED]> wrote: >I am new to Fedora and so new to clamav. Can someone provide me with >the easiest way to download, install, and run clamav? I am interested >in protecting inbound ftp file transfers and periodically scanning my >fedora system. I am not running samba nor NFS. Is there a way to >download and install via up2date? How do I get new virus profiles and >software updates? I am running fedora 2.4.22-1.2174.nptl (i386) on a >Pentium II 400Mhz. > Get the binaries at http://www.clamav.net/binary.html#pagestart. I used the ones from crash-hat. There are also instructions on how to add the crash-hat repository to up2date. -- Steve --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Newbie need help
I am also new to Fedora, so I use the gui that it offers when I am not sure what to do. I use gedit for editing text files. Its on the CD's and easy to use. Just save the original of all files before you make a change. Hope this helps. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Stern Sent: Wednesday, April 21, 2004 3:00 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Newbie need help On Thu, 22 Apr 2004 02:24:57 +0800, "Chan Ho" <[EMAIL PROTECTED]> wrote: >thats the problem, i don't really know how should I edit this line. > >- Original Message - >From: "Steven Stern" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Thursday, April 22, 2004 12:55 AM >Subject: Re: [Clamav-users] Newbie need help > > >On Thu, 22 Apr 2004 00:20:03 +0800, "Chan Ho" <[EMAIL PROTECTED]> wrote: > >>I set my server to download virus db automatically. However, do I need to >reload it as I see that clamd has the reload command. If so, how to do so? > >Look at freshclam.conf. Edit the line 'NotifyUpdate'. Here's mine: # Send the RELOAD command to clamd. NotifyClamd /etc/clamav.conf If you have your clamav.conf file elsewhere, make the appropriate change. -- Steve --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Remote clamav implementation
On Apr 21, 2004, at 5:04 PM, Tom Walsh wrote: I know that Tomasz had mentioned that the clamav developers were working on the ICAP (i-cap.org) implementation of clamd back in March. I have not heard anything about the status of this recently and was curious to see where this is at. I am really interested in offloading my clamd scanning to a dedicated box. Any information would be appreciated. I don't know about the ICAP implementation, but on way to achieve this is to create a gateway server through which mail is scanned then forwarded to the actual email server... Just an idea to consider if this is a matter that's becoming pressing in your situation. It's worked well for us and it's transparent to our users (we're only scanning incoming mail though, to shield the Exchange server we're currently using...) --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
At 02:24 22-04-2004 -0500, you wrote: B. van Ouwerkerk wrote: I've seen a message to this list about a GUI to maintain Clamav. What I'm calling for is not just a GUI to set up and maintain clamav, but a more comprehensive setup/maintenance utility for the complete package of MUA (Mozilla by default), fetchmail, sendmail, procmail, milter, clamav, and spamassassin, or variants for some of these, like postfix or qmail. In other words, something that will enable Windows users to make an easy transition to Linux and adopt it for the critical application of email. This goes well beyond the perpose of this list. Would be nice if you want to use Linux on the desktop. Perhaps you can create a sort of windows installer look-alike and have it install everything needed. So, if you have some time left.. If members of this list are serious about getting Linux to displace Windows, this is critical. Knowing both worlds :-) I don't see Linux replacing Windows in the near future. Most business apps will not run. Yes you can probably replace those but thirth parties still require windows. B. --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Runaway clamav-milter
On Thursday 22 Apr 2004 10:10 am, Soeren Thing Andersen wrote: > clamav-milter was started using these parameters: > > sudo /usr/local/sbin/clamav-milter --local --outgoing --postmaster-only > > --headers /var/run/clamd/clmilter.sock I have a theory. To test it please let me know if removing the --local option fixes the problem. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
Jon Roland wrote: If members of this list are serious about getting Linux to displace Windows, this is critical. IMHO, I don't think this is what we're discussing in this list. -- Please avoid sending me Microsoft Office attachments. See http://www.newsforge.com/software/04/03/27/0134204.shtml --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Runaway clamav-milter
Hello. About my setup: OpenBSD 3.4 stable on i386, Jerome's port from www.fatbsd.com, ClamAV 0.70, sendmail+clamav-milter+clamd: > clamd --version clamd / ClamAV version 0.70 > clamav-milter --version ClamAV version 0.70, clamav-milter version 0.70j Two days in a row I have seen several clamav-milters suck up all available CPU-power. Clamd still works with clamdscan. A few mails did get through after the first clamav-milter "hung". Below are outputs from ps, gdb, logfiles etc. [EMAIL PROTECTED]:~> ps ax -O lstart| grep -e clam -e sendmail | cut -c-84 PID STARTED TT STAT TIME COMMAND 21472 Tue Apr 20 10:41:18 2004 ?? Is 0:05.65 sendmail: rejecting connectio 930 Wed Apr 21 11:13:15 2004 ?? Is 0:10.09 /usr/local/sbin/clamd 14546 Wed Apr 21 11:13:20 2004 ?? Is 0:02.22 /usr/local/sbin/clamav-milter 14496 Wed Apr 21 13:56:56 2004 ?? R 98:41.40 /usr/local/sbin/clamav-milter 25574 Wed Apr 21 13:57:54 2004 ?? R 98:17.59 /usr/local/sbin/clamav-milter 29185 Wed Apr 21 14:00:31 2004 ?? R 97:22.44 /usr/local/sbin/clamav-milter 13584 Wed Apr 21 14:05:36 2004 ?? R 95:42.91 /usr/local/sbin/clamav-milter 26025 Wed Apr 21 14:12:14 2004 ?? R 94:16.91 /usr/local/sbin/clamav-milter 16485 Wed Apr 21 14:22:06 2004 ?? R 92:17.35 /usr/local/sbin/clamav-milter 17487 Wed Apr 21 14:22:09 2004 ?? R 92:21.99 /usr/local/sbin/clamav-milter 6193 Wed Apr 21 14:22:21 2004 ?? R 92:59.21 /usr/local/sbin/clamav-milter 31450 Wed Apr 21 14:28:09 2004 ?? R 91:59.44 /usr/local/sbin/clamav-milter 19058 Wed Apr 21 14:33:23 2004 ?? R 92:06.55 /usr/local/sbin/clamav-milter 44 Wed Apr 21 14:33:35 2004 ?? R 92:36.04 /usr/local/sbin/clamav-milter 10025 Wed Apr 21 14:34:52 2004 ?? R 92:44.65 /usr/local/sbin/clamav-milter 3158 Thu Apr 22 09:01:43 2004 ?? I 0:00.03 sendmail: i3M71hod003158 fupA 26972 Thu Apr 22 09:01:44 2004 ?? R 0:08.71 /usr/local/sbin/clamav-milter I tried to gdb process 14496, and here is the output: [EMAIL PROTECTED]:~> sudo gdb /usr/local/sbin/clamav-milter 14496 GNU gdb 4.16.1 Copyright 1996 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-unknown-openbsd3.4"...(no debugging symbols found)... /datavol/home/thing/14496: No such file or directory. Attaching to program `/usr/local/sbin/clamav-milter', process 14496 Reading symbols from /usr/local/lib/libclamav.so.1.4...done. Reading symbols from /usr/lib/libz.so.2.0...done. Reading symbols from /usr/local/lib/libbz2.so.10.2...done. Reading symbols from /usr/local/lib/libgmp.so.6.2...done. Reading symbols from /usr/lib/libpthread.so.2.1...done. Reading symbols from /usr/lib/libc.so.30.1...done. Reading symbols from /usr/libexec/ld.so...done. 0x7b6000 in ?? () (gdb) info shared >FromTo Syms Read Shared Object Library 0x0ff86000 0x2ff92b40 Yes /usr/local/lib/libclamav.so.1.4 0x02c5c000 0x22c61940 Yes /usr/lib/libz.so.2.0 0x0ea09000 0x2ea0d880 Yes /usr/local/lib/libbz2.so.10.2 0x0dc36000 0x2dc3bc00 Yes /usr/local/lib/libgmp.so.6.2 0x0767c000 0x27685ae0 Yes /usr/lib/libpthread.so.2.1 0x0f04f000 0x2f0870b0 Yes /usr/lib/libc.so.30.1 0x07756000 0x2775b640 Yes /usr/libexec/ld.so (gdb) shared . Symbols already loaded for /usr/local/lib/libclamav.so.1.4 Symbols already loaded for /usr/lib/libz.so.2.0 Symbols already loaded for /usr/local/lib/libbz2.so.10.2 Symbols already loaded for /usr/local/lib/libgmp.so.6.2 Symbols already loaded for /usr/lib/libpthread.so.2.1 Symbols already loaded for /usr/lib/libc.so.30.1 Symbols already loaded for /usr/libexec/ld.so (gdb) info thr (gdb) bt #0 0x7b6000 in ?? () #1 0xf08e100 in popen () #2 0x1c004dba in getopt_long_only () #3 0x1c00852f in getopt_long_only () #4 0x1c007b88 in getopt_long_only () #5 0x1c007859 in getopt_long_only () #6 0x1c0070f5 in getopt_long_only () #7 0x7682c5d in _thread_start () #8 0x1f in ?? () Error accessing memory address 0x: Invalid argument. (gdb) clamav-milter was started using these parameters: > sudo /usr/local/sbin/clamav-milter --local --outgoing --postmaster-only --headers > /var/run/clamd/clmilter.sock clamd still runs fine: [EMAIL PROTECTED]:~> clamdscan -v eicar.com /datavol/home/thing/eicar.com: Eicar-Test-Signature FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.146 sec (0 m 0 s) Nothing unusual in /var/log/clamd (via syslog, local6.debug): Apr 21 12:30:26 turquoise clamd[930]: Reading databases from /usr/local/share/clamav Apr 21 12:30:28 turquoise clamd[930]: Database correctly reloaded (21
Re: [Clamav-users] clamd.sock
On Thursday 22 Apr 2004 5:53 am, David B. Reyes wrote: > Good day everyone. > > Where does the clamd.sock reside? isn't it created automatically? Am > using clamav-0.70 1) Where ever you set it in clamav.conf 2) Yes -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter Segmentation fault
On Thursday 22 Apr 2004 12:44 am, Tristan Griffiths wrote: > I've got the same issue. clamd, clamscan and clamdscan all run happily. > But when you try to run clamav-milter, either by hand or the rc script, > it fails with "Segmentation fault (core dumped)". Try the following: 1) Add Foreground and Debug into clamav.conf. 2) Run "strace clamav-milter" and e-mail the results to me. 3) Reset Foreground and Debug to their original values -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
B. van Ouwerkerk wrote: I've seen a message to this list about a GUI to maintain Clamav. What I'm calling for is not just a GUI to set up and maintain clamav, but a more comprehensive setup/maintenance utility for the complete package of MUA (Mozilla by default), fetchmail, sendmail, procmail, milter, clamav, and spamassassin, or variants for some of these, like postfix or qmail. In other words, something that will enable Windows users to make an easy transition to Linux and adopt it for the critical application of email. That means they should be totally relieved of the need to know or provide anything but the name of their incoming and outgoing mail servers, account name, and password, to set up email service that filters out almost all spam, viruses, and virus warnings silently, putting the rest into their inboxes and without further intervention (other than "training" the system to more accurately filter, and diversion of messages to folders on the MUA). Virus databases should be updated automatically and silently. If members of this list are serious about getting Linux to displace Windows, this is critical. -- Jon Starflight Corporation7793 Burnet Road #37, Austin, TX 78757 512/374-9585 www.the-spa.com/jon.roland/ [EMAIL PROTECTED] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: WORM_SWEN.A undetected
On Wed, 21 Apr 2004 13:11:41 -0400, Bit Fuzzy <[EMAIL PROTECTED]> wrote: > > clamav-0.67-1 > >> what does sigtool --list-sigs | grep -i gibe show > Worm.Gibe.1 > Well, at least sigtool seems to find correct descriptions. Version is little bit old, but... Do you scan whole messages or you use external mime unpacker? Was this virus mail possibli some bounce message? Clamav had some problems with it's mime unpacker in past versions... Unfortunatly I don't have any other ideas right now. -- Virgo Pärna [EMAIL PROTECTED] --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] upgrading clamav changes permissions on direct ories?
> > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf > Of Kristof > > Petr > > Sent: Wednesday, April 21, 2004 5:02 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [Clamav-users] upgrading clamav changes permissions on > > directories? > > > > Hello Jim, > > > > thanks for feedback. > > > > RPM has ability to enforce file/directory permissions and > owners. This > > is usualy used for security reason on critical > directories/files as a > > protection against > > inexperienced admins. > > > > But your request is valid. > > > > I will try to change package behaviour to > > - first instance of package on system will install these > directories > > with clamav user > > - all next pieces will respect the actual setting, so if > you changed > > owner, your setting will be untouched. > > > > Does it meet your needing? > > > > Petr Petr: I also use your RPM's and I've stumbled across the same ownership quirk that Jim mentioned. Your suggested solution would be warmly welcomed. --Micha --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] 70rc1 problems
On Wed, 2004-04-21 at 21:02, Marc Balmer wrote: > Hi all > > I updated a few servers to ClamAV 70rc1. We only use clamd. OS is > OpenBSD 3.5. > Use 0.70, the current verion. -tony signature.asc Description: This is a digitally signed message part
Re: [Clamav-users] Fw: [Bug 105169] Filter for Attachments
At 14:49 21-04-2004 -0500, you wrote: FYI. This is my last submission to the Mozilla Bugzilla that partially addresses the needs of newbies who want a user-friendly gui or wizard to set up and configure everything, requiring the user only to make choices among easily-understood menu options. I've seen a message to this list about a GUI to maintain Clamav. A perl script taking user input (shell) and writing the config file to disc would help? Simply telling newbies to "learn Linux" doesn't suffice. We need to provide solutions for non-techies (which, though we might not admit it, are also likely to be useful to techies). I hope none of the techies are looking forward to an introduction on how to use either vi(m) or pico :-) If you dive into the water that doesn't mean you can swim, you'll have to learn it first.. Now why should it be so much different if someone tries to use a computer or an OS? AFAIK all docs are pretty clear. I found the .pdf files very helpful in order to get going with Clamav. I did find a few things missing from the clamdoc.pdf (in the chapter about clamav-milter). I'm going to write a few mods and mail it to the maintainer of that doc so he can compile a new version. B. --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
