[Clamav-users] milter in error state
I installed clamav on redhat 9 and also the clamav milter so that it will scan all mail coming in and out, and i also run the clamscan, it will detect virus. now my problem is milter is not communicating with sendmail (its not scanning mails). in the sendmail log file this message will came out: [10079]: j3K69E9C010079: Milter (clmilter): write(O) returned -1, expected 12: Broken pipe [10079]: j3K69E9C010079: Milter (clmilter): to error state [10079]: j3K69E9C010079: Milter (clmilter): init failed to open [10079]: j3K69E9C010079: Milter (clmilter): to error state please help me thanks choi choi ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Clamd install woes, I think
Hi, I have just setup clamd on my postfix/Amavisd box to be the main email AV scanner. I have sent some test eicar messages through, but none of them seem to be caught (all delivered ok) and the virus folder is empty. Running Amavisd in debug mode doesn't show anything about Clamd being used, and the headers of the emails don't show that they have been scanned for viruses. So, I guess my question(s) is this; Is it possible to get detailed instructions somewhere on integrating clamd with amavisd so that I can check my setup ? Also, Is it possible to have clamd/amavisd insert headers in each mail to say it was scanned, or have text inserted in the email ? Olly ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] log file
Hello, i use clamav from the 0.67 version, with clamav-milter ver 0.30, and sendmail, i've update at the actual 0.83 but i don't see any more the log file, or better, the log file start : +++ Started at Thu Mar 17 13:14:29 2005 clamd daemon 0.83 (OS: solaris2.8, ARCH: i386, CPU: i386) Log file size limited to 2097152 bytes. Reading databases from /usr/local/share/clamav Protecting against 31633 viruses. Unix socket file /var/run/clamd.sock Setting connection queue length to 15 Archive: Archived file size limit set to 2097152 bytes. Archive: Recursion level limit set to 8. Archive: Files limit set to 1000. Archive: Compression ratio limit set to 250. Archive support enabled. Archive: RAR support disabled. Portable Executable support enabled. Mail files support enabled. OLE2 support enabled. HTML support enabled. Self checking every 1800 seconds. after these messages i see in log file only a list of LibClamAV Warning: Ignoring empty field in charset= but nothing like old version of clamav stream: Worm.SomeFool.P FOUND when a virus is found in mail or Database correctly reloaded (24193 viruses) when db is checked. But the email with the notice of virus arrive at postmastert. I don't modify configuration of clamd.conf and obviously the option logfile is enable. Thanks everybody for the help __ TISCALI ADSL 6 MEGA FLAT a soli 29.95 euro/mese! Con Tiscali Adsl 6 Mega Flat navighi con la SuperVelocita' a soli 29.95 euro al mese, senza limiti di tempo. E se attivi entro il 30 aprile, 3 MESI sono GRATIS! Scopri come risparmiare navigando veloce su http://abbonati.tiscali.it/adsl/sa/6flat_tc/ ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] log file
On Wed, 20 Apr 2005 10:33:45 +0200 in [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I don't modify configuration of clamd.conf and obviously the option logfile is enable. You will need to do so, there have been a lot of changes since 0.67, and I suggest that you look at the example files supplied with the tarball and then alter the settings to reflect your particular system needs. A read of the list archives would help too. -- Brian Morrison bdm at fenrir dot org dot uk GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Submitting a virus file
On Tue, 2005-04-19 at 20:54 +0200, Christoph Cordes wrote: Niek wrote: On 4/19/2005 8:25 PM +0200, Tomasz Kojm wrote: Does it send itself via e-mail? No they didn't send themselves per e-mail. So what you're saying is, only selfspreading e-mail viruses qualify to make it through the submit process ? No, but Email borne malware has the highest priority.I know it´s a bit frustrating to send in samples without getting response. The problem is, that we receive dozens of samples every day and have only limited time. Clam wont pay our rent, so we have to waste time with other jobs - not that we dare to have a private life ;-) We are, of course, also looking for people to volunteer to become sig makers. Assuming that they have the time and the relevant skills. -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Submitting a virus file
Trog wrote: We are, of course, also looking for people to volunteer to become sig makers. Assuming that they have the time and the relevant skills. -trog Excellent idea, trog. If you can let me know what has to be done, I'd love to help making sigs. Cheers Bill -- What's the difference between Linux and Windoze? Linux - Thousands of programmers are working *WITH*you. Windoze - Thousands of programmers are working *AGAINST* you. ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Re: log file
Brian Morrison wrote: On Wed, 20 Apr 2005 10:33:45 +0200 in [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I don't modify configuration of clamd.conf and obviously the option logfile is enable. You will need to do so, there have been a lot of changes since 0.67, and I suggest that you look at the example files supplied with the tarball and then alter the settings to reflect your particular system needs. A read of the list archives would help too. I compare the configuration clamd.conf in tarball and mine, it's identical except for some option: LogFile /var/log/clamd.log LogFileMaxSize 2M LocalSocket /var/run/clamd.sock ScanMail ArchiveMaxFileSize 2M Thank, Guido __ TISCALI ADSL 6 MEGA FLAT a soli 29.95 euro/mese! Con Tiscali Adsl 6 Mega Flat navighi con la SuperVelocita' a soli 29.95 euro al mese, senza limiti di tempo. E se attivi entro il 30 aprile, 3 MESI sono GRATIS! Scopri come risparmiare navigando veloce su http://abbonati.tiscali.it/adsl/sa/6flat_tc/ ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Submitting a virus file
Trog a écrit : We are, of course, also looking for people to volunteer to become sig makers. Assuming that they have the time and the relevant skills. How would you define these skills ? Further I would say: how do actual sigmakers work ? Reverse-engineering on new virus ? Scan its with other AV products ? Mix of that and more other way to make a signature ? Is there a ClamAV virus lab somewhere to test suspicious exec ? There's no malicious intent in these questions, just curiosity. -- Guillaume Arcas --- Il dépend de celui qui passe que je sois tombe ou trésor. Paul Valéry ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] problem with zip file
Hi I got this from a clamscan. It's about a VIA Hyperion sata driver in a zip file: [EMAIL PROTECTED] samba]# clamscan hyperionPro64_update.zip LibClamAV Warning: Unknown machine type in PE header (0x8664) LibClamAV Warning: Broken PE header detected. LibClamAV Warning: Unknown machine type in PE header (0x8664) LibClamAV Warning: Broken PE header detected. LibClamAV Warning: Unknown machine type in PE header (0x8664) LibClamAV Warning: Broken PE header detected. hyperionPro64_update.zip: OK --- SCAN SUMMARY --- Known viruses: 33185 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.23 MB I/O buffer size: 131072 bytes Time: 2.568 sec (0 m 2 s) How can I fix this? Unpacked there are no virusses or whatsoever..is it a broken binary in one off the files? Thanks in advance for any help. Michiel ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Virus-bounce emails
I understand. Is it possible to send me the entire original file for me to look at? I'll then be in a better position to comment knowledgeably. Thanks for your help on this Nigel. I'll let you know if I manage to reproduce. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] LibClamAV Error: Can't create temporary file
Hello everybody. I have been suffering the following problem in my clamd.log: LibClamAV Error: Can't create temporary file /tmp/clamav-d0a0c6a5466f36fc/: Argumento inválido LibClamAV Error: fileblobDestroy: file not saved: report to [EMAIL PROTECTED] This have happended since I changed to 0.83 clamav version and only in one of the three servers where I have it installed. The three of them are running RedHat 9.0. Any idea why is this happening? Thanks in advance. Chemi. ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] LibClamAV Error: Can't create temporary file
José Miguel López Coronado wrote: Hello everybody. I have been suffering the following problem in my clamd.log: LibClamAV Error: Can't create temporary file /tmp/clamav-d0a0c6a5466f36fc/: Argumento inválido LibClamAV Error: fileblobDestroy: file not saved: report to [EMAIL PROTECTED] This have happended since I changed to 0.83 clamav version and only in one of the three servers where I have it installed. The three of them are running RedHat 9.0. Any idea why is this happening? Thanks in advance. Chemi. I believe i saw on this list that 0.84RCx fixes this problem. Check the archives. -Jim ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Submitting a virus file
On 04/20/05 12:57, Guillaume Arcas wrote: Trog a écrit : We are, of course, also looking for people to volunteer to become sig makers. Assuming that they have the time and the relevant skills. How would you define these skills ? Sorry I'm in a hurry, but just to quote some: Proper knoweledge and handling of malware, deep knoweledge of the win32 environment and how (recent and not so recent) malware behaves. Basic knoweledge of the win32 internals, registry, executable format, IE, and so on... General skills in software reversing, in specific malware aspects or in related file formats. Skills in IT security, experience in the field, the ability to code or to contribute to someone else's code and stuff like that is generally a bonus. Further I would say: how do actual sigmakers work ? Reverse-engineering on new virus ? Scan its with other AV products ? Mix of that and more other way to make a signature ? Some of the above and something more. Mostly depending on the target. Is there a ClamAV virus lab somewhere to test suspicious exec ? Sure but it's very well hidden and you'll never find it;) There's no malicious intent in these questions, just curiosity. If you're interested in joining the team, mail me off list (acabATclamavPOINTnet). ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
On Wed, 20 Apr 2005, Pete Sherwin S. Villanueva wrote:
I installed clamav on redhat 9 and also the clamav milter so that it will scan
all mail coming in and out, and i also run the
clamscan, it will detect virus.
now my problem is milter is not communicating with sendmail (its not scanning
mails).
in the sendmail log file this message will came out:
[10079]: j3K69E9C010079: Milter (clmilter): write(O) returned -1, expected 12:
Broken pipe
[10079]: j3K69E9C010079: Milter (clmilter): to error state
[10079]: j3K69E9C010079: Milter (clmilter): init failed to open
[10079]: j3K69E9C010079: Milter (clmilter): to error state
please help me
How are you defining the milter in sendmail.mc?
The docs say that you should add a
define('confINPUT_MAIL_FILTERS','clmilter)
after INPUT_MAIL_FILTER(clmilter',...)
if you did this - remove the define entry - it is redefines the milter and
causes problems.
--
-sg
___
http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
i did add this line to my sendmail.mc and recompile it.
INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,
T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clmilter')
- Original Message -
From: Subhendu Ghosh [EMAIL PROTECTED]
To: ClamAV users ML clamav-users@lists.clamav.net
Sent: Thursday, April 21, 2005 7:15 AM
Subject: Re: [Clamav-users] milter in error state
On Wed, 20 Apr 2005, Pete Sherwin S. Villanueva wrote:
I installed clamav on redhat 9 and also the clamav milter so that it
will scan all mail coming in and out, and i also run the
clamscan, it will detect virus.
now my problem is milter is not communicating with sendmail (its not
scanning mails).
in the sendmail log file this message will came out:
[10079]: j3K69E9C010079: Milter (clmilter): write(O) returned -1,
expected 12: Broken pipe
[10079]: j3K69E9C010079: Milter (clmilter): to error state
[10079]: j3K69E9C010079: Milter (clmilter): init failed to open
[10079]: j3K69E9C010079: Milter (clmilter): to error state
please help me
How are you defining the milter in sendmail.mc?
The docs say that you should add a
define('confINPUT_MAIL_FILTERS','clmilter)
after INPUT_MAIL_FILTER(clmilter',...)
if you did this - remove the define entry - it is redefines the milter and
causes problems.
--
-sg
___
http://lurker.clamav.net/list/clamav-users.html
___
http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i did add this line to my sendmail.mc and recompile it. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') The INPUT_MAIL_FILTER should be one line (assuming email wrap) Delete the define(.. entry It effectively remove the defininition from the line above. not what you want. (ref: http://www.sendmail.org/m4/adding_mailfilters.html) recompile sendmail.mc and restart sendmail. The clamav-milter docs need to be updated. -- -sg ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
The INPUT_MAIL_FILTER is in one line.i comment out this line define(`confINPUT_MAIL_FILTERS', `clmilter') but still error occured. - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 7:38 AM Subject: Re: [Clamav-users] milter in error state On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i did add this line to my sendmail.mc and recompile it. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') The INPUT_MAIL_FILTER should be one line (assuming email wrap) Delete the define(.. entry It effectively remove the defininition from the line above. not what you want. (ref: http://www.sendmail.org/m4/adding_mailfilters.html) recompile sendmail.mc and restart sendmail. The clamav-milter docs need to be updated. -- -sg ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
On Thu, Apr 21, 2005 at 07:26:45AM +0800, Pete Sherwin S. Villanueva said: i did add this line to my sendmail.mc and recompile it. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') That's fine - the difference between INPUT_MAIL_FILTER and MAIL_FILTER is that INPUT_MAIL_FILTER also populates the define macro. It makes no difference if you use only one milter. It will if you use several. So, if you only use clamav-milter, you can use either INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,T=S:4m;R:4m')dnl or MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') If you use several milters, you'll want either INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,T=S:4m;R:4m')dnl INPUT_MAIL_FILTER(`foo',`blah blah')dnl or MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=,T=S:4m;R:4m')dnl MAIL_FILTER(`foo',`blah blah')dnl define(`confINPUT_MAIL_FILTERS', `clmilter, foo') This is all assuming my memory matches reality. Not always a realistic assumption :) -- -- | Stephen Gran | Your society will be sought by people | | [EMAIL PROTECTED] | of taste and refinement.| | http://www.lobefin.net/~steve | | -- pgpdCEOzcQRpe.pgp Description: PGP signature ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
does the path to the socket match between sendmail and clamav-milter ? permissions on socket? On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: The INPUT_MAIL_FILTER is in one line.i comment out this line define(`confINPUT_MAIL_FILTERS', `clmilter') but still error occured. - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 7:38 AM Subject: Re: [Clamav-users] milter in error state On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i did add this line to my sendmail.mc and recompile it. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') The INPUT_MAIL_FILTER should be one line (assuming email wrap) Delete the define(.. entry It effectively remove the defininition from the line above. not what you want. (ref: http://www.sendmail.org/m4/adding_mailfilters.html) recompile sendmail.mc and restart sendmail. The clamav-milter docs need to be updated. -- -sg ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html -- ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
clamd and clamav-milter both need to run as the same user I think. On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i didn't run clamd as clamav user. do i need to change the permission of the socket and run as clamav user? - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 8:20 AM Subject: Re: [Clamav-users] milter in error state does the path to the socket match between sendmail and clamav-milter ? permissions on socket? On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: The INPUT_MAIL_FILTER is in one line.i comment out this line define(`confINPUT_MAIL_FILTERS', `clmilter') but still error occured. - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 7:38 AM Subject: Re: [Clamav-users] milter in error state On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i did add this line to my sendmail.mc and recompile it. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') The INPUT_MAIL_FILTER should be one line (assuming email wrap) Delete the define(.. entry It effectively remove the defininition from the line above. not what you want. (ref: http://www.sendmail.org/m4/adding_mailfilters.html) recompile sendmail.mc and restart sendmail. The clamav-milter docs need to be updated. -- -sg ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html -- ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html -- ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
okay thanks. il try it - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 8:31 AM Subject: Re: [Clamav-users] milter in error state clamd and clamav-milter both need to run as the same user I think. On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i didn't run clamd as clamav user. do i need to change the permission of the socket and run as clamav user? - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 8:20 AM Subject: Re: [Clamav-users] milter in error state does the path to the socket match between sendmail and clamav-milter ? permissions on socket? On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: The INPUT_MAIL_FILTER is in one line.i comment out this line define(`confINPUT_MAIL_FILTERS', `clmilter') but still error occured. - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 7:38 AM Subject: Re: [Clamav-users] milter in error state On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i did add this line to my sendmail.mc and recompile it. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') The INPUT_MAIL_FILTER should be one line (assuming email wrap) Delete the define(.. entry It effectively remove the defininition from the line above. not what you want. (ref: http://www.sendmail.org/m4/adding_mailfilters.html) recompile sendmail.mc and restart sendmail. The clamav-milter docs need to be updated. -- -sg ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html -- ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html -- ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] LibClamAV Error: Can't create temporary file
Hi All, You are not the only one, I even upgrade it to 0.84RC1 and still have the same problem. My machine is using Fedora Core 2. I posted this question previously. I was told to turn on the debug, i.e., --enable-debug. Any way, I even tried to fall back to use the old version in order to get rid of this problem but in vail. It gives me another problem. To the worst, I think I need to reinstall the whole machine. Since it really gives me a headache since the upgrade! Before I reinstall the whole machine, can anyone tell me what the best way to reinstall just the old version of clamd 0.80? Best Regards Gene Leung Jim Maul wrote: José Miguel López Coronado wrote: Hello everybody. I have been suffering the following problem in my clamd.log: LibClamAV Error: Can't create temporary file /tmp/clamav-d0a0c6a5466f36fc/: Argumento inválido LibClamAV Error: fileblobDestroy: file not saved: report to [EMAIL PROTECTED] This have happended since I changed to 0.83 clamav version and only in one of the three servers where I have it installed. The three of them are running RedHat 9.0. Any idea why is this happening? Thanks in advance. Chemi. I believe i saw on this list that 0.84RCx fixes this problem. Check the archives. -Jim ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] LibClamAV Error: Can't create temporary file [Solution]
On Apr 20, 2005, at 12:25, José Miguel López Coronado wrote: Hello everybody. I have been suffering the following problem in my clamd.log: LibClamAV Error: Can't create temporary file /tmp/clamav-d0a0c6a5466f36fc/: Argumento inválido LibClamAV Error: fileblobDestroy: file not saved: report to [EMAIL PROTECTED] This have happended since I changed to 0.83 clamav version and only in one of the three servers where I have it installed. The three of them are running RedHat 9.0. Any idea why is this happening? Thanks in advance. Chemi The only real solution I have seen that works on all OS's is to place the ClamAV sock, pid and tmp directory in /var/clamav since running chrooted causes problems with permissions. [daleenterprise:~] websrvr% ls -lsa /var/clamav total 16 0 drwxr-xr-x 6 vscan vscan 204 20 Apr 11:10 . 0 drwxr-xr-x 33 root wheel 1122 20 Apr 11:11 .. 8 -rw-rw 1 vscan vscan 3 20 Apr 11:10 clamd.pid 0 srwxrwxrwx 1 vscan vscan0 20 Apr 11:10 clamd.sock 8 -rw-rw 1 vscan vscan3 20 Apr 11:10 freshclam.pid 0 drwxrwxrwx 2 vscan vscan 68 20 Apr 20:18 tmp This allows it to run without any difficulties (don't forget to adjust your clamd.conf and freshclam.conf files). -- Dale ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] LibClamAV Error: Can't create temporary file
On Apr 20, 2005, at 21:01, Gene Leung wrote: Hi All, You are not the only one, I even upgrade it to 0.84RC1 and still have the same problem. My machine is using Fedora Core 2. I posted this question previously. I was told to turn on the debug, i.e., --enable-debug. Any way, I even tried to fall back to use the old version in order to get rid of this problem but in vail. It gives me another problem. To the worst, I think I need to reinstall the whole machine. Since it really gives me a headache since the upgrade! Before I reinstall the whole machine, can anyone tell me what the best way to reinstall just the old version of clamd 0.80? Best Regards Gene Leung Jim Maul wrote: José Miguel López Coronado wrote: Hello everybody. I have been suffering the following problem in my clamd.log: LibClamAV Error: Can't create temporary file /tmp/clamav-d0a0c6a5466f36fc/: Argumento inválido LibClamAV Error: fileblobDestroy: file not saved: report to [EMAIL PROTECTED] This have happended since I changed to 0.83 clamav version and only in one of the three servers where I have it installed. The three of them are running RedHat 9.0. Any idea why is this happening? Thanks in advance. Chemi. I believe i saw on this list that 0.84RCx fixes this problem. Check the archives. -Jim This is occurring because the shared libraries are no longer built and the lazy binding or bind at load actually work differently on different OS's. I've already seen issues in Mac OSX with iostream and I have generated my own work-around that is unique to my OS due to heavy modification by manually (shell script) generating the shared libraries because everything seems to work better with them. -- Dale ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] milter in error state
it matches... - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 8:20 AM Subject: Re: [Clamav-users] milter in error state does the path to the socket match between sendmail and clamav-milter ? permissions on socket? On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: The INPUT_MAIL_FILTER is in one line.i comment out this line define(`confINPUT_MAIL_FILTERS', `clmilter') but still error occured. - Original Message - From: Subhendu Ghosh [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Thursday, April 21, 2005 7:38 AM Subject: Re: [Clamav-users] milter in error state On Thu, 21 Apr 2005, Pete Sherwin S. Villanueva wrote: i did add this line to my sendmail.mc and recompile it. INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter') The INPUT_MAIL_FILTER should be one line (assuming email wrap) Delete the define(.. entry It effectively remove the defininition from the line above. not what you want. (ref: http://www.sendmail.org/m4/adding_mailfilters.html) recompile sendmail.mc and restart sendmail. The clamav-milter docs need to be updated. -- -sg ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html -- ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] LibClamAV Error: Can't create temporary file
On Wed, Apr 20, 2005 at 06:25:50PM +0200, José Miguel López Coronado said: Hello everybody. I have been suffering the following problem in my clamd.log: LibClamAV Error: Can't create temporary file /tmp/clamav-d0a0c6a5466f36fc/: Argumento inválido LibClamAV Error: fileblobDestroy: file not saved: report to [EMAIL PROTECTED] This have happended since I changed to 0.83 clamav version and only in one of the three servers where I have it installed. The three of them are running RedHat 9.0. Any idea why is this happening? Thanks in advance. The c library function mkstemp is failing on your system for some reason - this is rather unusual for a linux system. I expect that something else is actually going on, and it is not that actually an error that strange. You most likely have a mixture of old and new versions of the clam libraries in /usr/local/lib or /usr/lib. On Thu, Apr 21, 2005 at 09:01:47AM +0800, Gene Leung said: Hi All, You are not the only one, I even upgrade it to 0.84RC1 and still have the same problem. My machine is using Fedora Core 2. I posted this question previously. I was told to turn on the debug, i.e., --enable-debug. Any way, I even tried to fall back to use the old version in order to get rid of this problem but in vail. It gives me another problem. To the worst, I think I need to reinstall the whole machine. Since it really gives me a headache since the upgrade! Before I reinstall the whole machine, can anyone tell me what the best way to reinstall just the old version of clamd 0.80? cd $old/source/dir make uninstall cd $new/source/dir ./configure $args make make install Reinstalling is so Microsoft. You really shouldn't need to do that, unless RedHat is worse than I think. On Wed, Apr 20, 2005 at 09:21:34PM -0400, Dale Walsh said: This is occurring because the shared libraries are no longer built and the lazy binding or bind at load actually work differently on different OS's. Of course the shared libraries are built. There is either something very wrong with your build environment, or with OSX (although I doubt the latter). I've already seen issues in Mac OSX with iostream and I have generated my own work-around that is unique to my OS due to heavy modification by manually (shell script) generating the shared libraries because everything seems to work better with them. Please report to your vendor that their c++ libraries (irrelevant to clamav, but still) are broken in some way. This will help others get over the same problems you have enountered. -- -- | Stephen Gran | I'd love to go out with you, but I'm | | [EMAIL PROTECTED] | converting my calendar watch from | | http://www.lobefin.net/~steve | Julian to Gregorian. | -- pgpe7Joe2zIYt.pgp Description: PGP signature ___ http://lurker.clamav.net/list/clamav-users.html
