[Clamav-users] clamfi_eom: read nothing from clamd
Hello, I have installed ClamAV version 0.75.1 to our mail server on FreeBSD 5.0+ sendmailand have a same problem listed before: Any solution to this problem?? Thanks to answers. -messages from list From: Bill Pitz Subject: [Clamav-users] clamd segfault Date: Fri, 16 Apr 2004 11:23:46 -0700 I've had an occasional problem with clamd segfaulting. The basics of my system are as follows:Red Hat Linux 9 / 2.4.25 kernel Sendmail 8.12.11 clamav-0.68 + clamav-milterHere are a few lines from my clamd logfile, leading up to the point of the segfault:Thu Apr 15 13:16:09 2004 - /var/spool/quarantine/msg.RUn5yx: Worm.Bagle.N FOUNDThu Apr 15 13:16:10 2004 - /var/spool/quarantine/msg.cCKcwi: Worm.Bagle.N FOUNDThu Apr 15 13:16:17 2004 - /var/spool/quarantine/msg.4wGSbv: Worm.SomeFool.Gen-1 FOUNDThu Apr 15 13:16:28 2004 - /var/spool/quarantine/msg.65IM3b: Worm.SomeFool.Gen-1 FOUNDThu Apr 15 13:16:36 2004 - /var/spool/quarantine/msg.XtmPzP: Worm.SomeFool.Gen-1 FOUNDThu Apr 15 13:21:48 2004 - /var/spool/quarantine/msg.OMoBrW: Worm.SomeFool.Gen-2 FOUNDThu Apr 15 13:22:20 2004 - /var/spool/quarantine/msg.KJ6QsC: Worm.SomeFool.P FOUNDThu Apr 15 13:22:22 2004 - /var/spool/quarantine/msg.pdBMFc: Worm.SomeFool.P FOUNDThu Apr 15 13:22:58 2004 - Segmentation fault :-( Bye..At the same time, the following appears in /var/log/messages: Apr 15 13:22:58 svn clamav-milter: clamfi_eom: read nothing from clamdMy /etc/clamav.conf: --snip-- LogFile /var/log/clamd.log LogFileMaxSize 20M LogTime PidFile /var/run/clamav/clamd.pid DataDirectory /usr/share/clamav LocalSocket /var/run/clamav/clamd.sock StreamSaveToDisk StreamMaxLength 2M MaxThreads 20 ThreadTimeout 300 MaxDirectoryRecursion 15 User clamav ScanMail ScanArchive ArchiveMaxFileSize 10M ArchiveMaxRecursion 5 ArchiveMaxFiles 1000#ClamukoScanOnLine ClamukoScanOnOpen ClamukoScanOnClose ClamukoScanOnExec ClamukoIncludePath /home #ClamukoIncludePath /students #ClamukoExcludePath /home/guru ClamukoMaxFileSize 1M ClamukoScanArchive --snip--clamav-mitler is being started with the following arguments:--max-children=15 local:/var/run/clamav/clamav.sock -q -U /var/spool/quarantine -dAny ideas as to what could be causing this or what I can do to prevent it? Unfortunately, this is all of the information I have been able to get. It's happened twice now.. the first time was a couple of months ago, with clamav-0.67.Thanks,
Re: [Clamav-users] clamfi_eom: read nothing from clamd
On Mon, 2004-08-23 at 07:14, Derya ESEL ALTINEK wrote: __ clamav-0.68 + clamav-milter Any ideas as to what could be causing this or what I can do to prevent it? Unfortunately, this is all of the information I have been able to get. It's happened twice now.. the first time was a couple of months ago, with clamav-0.67. Upgrade to 0.75.1 immediately. Every version less than 0.75.1 has known crashing issues. -trog signature.asc Description: This is a digitally signed message part
Re: [Clamav-users] Downloading clam virus definition files automatically
Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? On Fri, 20 Aug 2004 08:35:56 +0200, Julio Canto [EMAIL PROTECTED] wrote: Phil Ershler wrote: Every 10 minutes is much to often. There was a thread about this issue just a while ago. The consensus was 1 to 4 hours and not exactly on the hour. If everybody ran freshclam every 10 minutes, the server would croak. Phil For the shake of reducing the 'unprotection window', every 10 minutes is a good time. It takes a little resources to check for new signatures (basically a GET to an HTTP site should not make croack one of the mirrors)... Anyway, I'm not using freshclam but a python script. Greetings, Julio Canto Hispasec Sistemas --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Rajanikanth P wrote: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? On Fri, 20 Aug 2004 08:35:56 +0200, Julio Canto [EMAIL PROTECTED] wrote: Phil Ershler wrote: Every 10 minutes is much to often. There was a thread about this issue just a while ago. The consensus was 1 to 4 hours and not exactly on the hour. If everybody ran freshclam every 10 minutes, the server would croak. Phil For the shake of reducing the 'unprotection window', every 10 minutes is a good time. It takes a little resources to check for new signatures(basically a GET to an HTTP site should not make croack one of the mirrors)... Anyway, I'm not using freshclam but a python script. Greetings, Julio Canto Hispasec Sistemas By the time the signature is released, you may already have had cartloads passing through your server. Another hour won't make a vast amount of difference. You should not be reliant on one method of detecting virii, pure and simple. If the AV software is your only means of ingress detection, your buggered anyway. Matt --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Mon, 23 Aug 2004 at 18:26:47 +0530, Rajanikanth P wrote: I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server No use? You are exaggerating. Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? No. P.S. Please stop top-posting. http://www.xs4all.nl/~hanb/documents/quotingguide.html http://www.netmeister.org/news/learn2quote.html -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Two Clamuko questions
1) I want to be notified of a virus found but under VirusEvent in clamav.conf, how do I get the infected file's path? 2) I noticed that if I run a scan with Clamuko enabled, it shows permission denied when it tries to scan the test eicar.com virus I have. Does this mean that while doing the scan, every file is being scanned twice? Thank you, Joel Shellman --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Sendmail perms error
Getting this error starting sendmail with clamav-milter set in sendmail.cf: Xclmilter: local socket name /var/run/clamav/clmilter.sock unsafe: Group writable directory /var/run is 775 /var/run/clamav is 750 Does sendmail require /var/run to not be group writable? -- Randall Perry sysTame Xserve Web Hosting/Co-location Website Design/Development WebObjects Hosting Mac Consulting/Sales http://www.systame.com/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Sendmail perms error
On Monday, August 23, 2004 3:51 PM, Randall Perry danced on the keyboard and produced: Does sendmail require /var/run to not be group writable? Yes. PLEASE - keep list traffic on the list. Email sent directly to me may be ignored utterly. -- Rob | What part of no was it you didn't understand? --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Sendmail perms error
I ended up putting the clam stuff in /var/clamav defined as: drwx-- 2 clamav clamav 512 Aug 23 01:17 /var/clamav// Sendmail is - justifiably - paranoid about directory permissions, and will complain loudly if a directory is group writable. On Mon, 23 Aug 2004 10:50:55 -0400, Randall Perry [EMAIL PROTECTED] wrote: Getting this error starting sendmail with clamav-milter set in sendmail.cf: Xclmilter: local socket name /var/run/clamav/clmilter.sock unsafe: Group writable directory /var/run is 775 /var/run/clamav is 750 Does sendmail require /var/run to not be group writable? -- Randall Perry sysTame Xserve Web Hosting/Co-location Website Design/Development WebObjects Hosting Mac Consulting/Sales http://www.systame.com/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users -- Pete Hanson http://www.well.com/user/wolfy http://www.fotolog.net/wolfy --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Rajanikanth P said: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
seems to work fine for us tony - Original Message - From: Dennis Peterson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 23, 2004 4:35 PM Subject: Re: [Clamav-users] Downloading clam virus definition files automatically Rajanikanth P said: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Quoting Dennis Peterson [EMAIL PROTECTED]: Rajanikanth P said: Thanks Julio Canto. Thats what i have to do. Hello D J Fan I know that it takes 4 - 5 hrs for an AV company to get the sample analyse it and create a signature for it then alert all its subscribers...and then publish the updates..I know this..but what i was trying to tell this group was atleast after the signatures are published i should be getting it within 10 mins ...or else it is of no use to me...as many viruses would have passed through my server After it taking hours to receive virus sample, inspect, generate signature, test, and finally distribute, if you dont then receive the signature within the next 10 minutes its now useless to you? If you absolutely must have the signature right now, why not generate it yourself? Moreover i wont be using freshclam as i will be writing my own program to monitor all the servers for new updates ( so for every 10 mins it can check 5 different locations..right ? Is this a good idea ? So you want virus protection, instant new outbreak detection, your own personal freshclam that hits multiple servers every 10 minutes AND you want it all for free. I see. Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. Indeed. Jim --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Greetings, Julio Canto --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Monday 23 August 2004 11:14 am, ahellary wrote: seems to work fine for us I really hope the mirrors take note of your ip and just block people like you.. It shows great ignorance when you really think this is how you need to run your servers, or home computer.. Jeff -- === Jabber: tradergt@(smelser.org|jabber.org) Quote: Error: Remove disk, spit on it, insert disk and retry. === pgpHxkiFJyjp3.pgp Description: PGP signature
Re: [Clamav-users] Downloading clam virus definition files automatically
On Monday 23 August 2004 12:21 pm, Julio Canto wrote: Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Obviously looking at the big picture isnt your native tounge either.. One person, or even 20 doing it, isnt probably a big deal.. Lets talk 1000´s, or even 10,000 hits per 10 minutes.. Someone here has the numbers.. When a update happens, now you have everyone downloading it within a 10 minute period.. Thats to much.. You need to really think about ALL the issues, not just a head check. Jeff -- === Jabber: tradergt@(smelser.org|jabber.org) Quote: But you can sure get nothing for something! === pgpJx6u3yGu1T.pgp Description: PGP signature
Re: [Clamav-users] Downloading clam virus definition files automatically
Julio Canto wanted us to know: Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Not one, no. How about 1000 people doing this? How about 1? More? -- Regards... Todd We should not be building surveillance technology into standards. Law enforcement was not supposed to be easy. Where it is easy, it's called a police state. -- Jeff Schiller on NANOG Linux kernel 2.6.3-15mdkenterprise 2 users, load average: 0.11, 0.07, 0.02 --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Downloading clam virus definition files automatically
On Mon, 23 Aug 2004, Julio Canto wrote: Imagine how quickly we could destroy this fine free service if we all did what you suggest. It sounds to me like you want more than you are paying for. dp Are you still sugesting that one HTTP Get request every 10 minutes would crash all the signature mirrors of Clam all over the world? Excuse me if you don't mean that, English is not my native tongue. Yes, that's what we're saying. You seem to be forgetting that there are thousands of machines that use ClamAV. If you really want updates instantly, there *is* a solution. Volunteer to run a mirror. All mirrors are given updates within 2 minutes. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Clamd 0-.75 Segmentation fault :-( Bye..
Is there a fix? I am Segment faulting serveral times a day. The system is a FreeBSD 5.0. I am running Qmail with qmail-scanner calling clamd. I switched from clamscan because clamscan was clogging the mail system with to many scans at the same time. clamdscan is good until it segment faults. I not sure where to turn next. Any Ideas? Calling clamdscan with this line clamdscan -r --disable-summary --max-recursion=10 --max-space=100 ___ Do you Yahoo!? Win 1 of 4,000 free domain names from Yahoo! Enter now. http://promotions.yahoo.com/goldrush --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Downloading clam virus definition files automatically
If you really want updates instantly, there *is* a solution. Volunteer to run a mirror. All mirrors are given updates within 2 minutes. Damian Menscher Joining this thread a little late - sorry... Then we get back to the level of committment required to do that... With things as they are now, the 100GB / month (iirc) and massive number of hits is too big for all but larger organizations to commit to - and they normally often have politics involved that make such a decision more than one sysop can make (unless he's not worried about his job)... I for one would love to set up a mirror... if it was 10GB / 20GB / maybe even 30GB... but 100 and growing is a little too much of an unknown for me. I wouldn't want to opt in, and then have to opt out due to unanticipated and growing load... I've seen the notes about the new cap on daily sizes, maybe that will reduce download size... or maybe at some point a multi levle approach will be used... (main, monthly, daily, etc...) or something through the setup of the DNS that could allow people to volunteer to mirror at a second tier with some fraction of main-mirror bandwidth. Then we could get more mirrors, and reduce the load on each. Already the DNS system will eliminate downloads / connections to the mirrors if the version hasn't changed - right? So eventually we should be able to query more often. m/ --- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users