Re: [Clamav-users] some trouble using clamscan options...

2006-02-07 Thread Marco Gaiarin
Mandi! Bob Hutchinson
  In chel di` si favelave...

 try
 --exclude-dir=quarantena
 as it is a pattern, not a path, might work ;-)

Ok, works. But as i've stated yesterday, if some user create a
``quarantena'' folder somewhere, that folder are not scanned. This is
not so good...
There's some way that i can match an exact path? Some ``standard''
regular expression library are used, like ereg, or shell globbing, ...
that i can start playing with?


And again:

  Also, i've noted that even if i've put --no-mail, this script quarantine
  a Thunderbird mailbox, that is in unix mailbox format.
  What i'm missing here?

i'm doing something wrong or can i do something to prevent the
--no-mail to fail?


Many thanks.

-- 
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it  tel +39-0434-842711  fax +39-0434-842797
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Issues with clamav 0.88 on Solaris 7

2006-02-07 Thread Marco Gaiarin
Mandi! Nicolas MacPherson
  In chel di` si favelave...

 I don't understand how to work around this issue.  When these start 

You have restarted clamd? Some month ago (not 0.88 version) i've found
clamd ``stalled'', like this.

-- 
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it  tel +39-0434-842711  fax +39-0434-842797
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] question about running ClamAV on dedicated server

2006-02-07 Thread Nigel Horne

Dennis Peterson wrote:

Nicolas MacPherson wrote:


Hello,

   Just out of curiosity, is there a way to run clamd on a dedicated 
server, so that clamdscan could process the messages on the remote 
machine?  I'm curious because I work for an ISP that currently runs a 
dedicated Spamassassin server, and would like to investigate the 
possibility of doing the same for ClamAV.  Any assistance would be 
greatly appreciated.



I have five mail servers. All have the same tools installed for mta 
(Sendmail), milter (J-Chkmail), Antivirus (Clamav), syslog-ng for 
logging. All are under configuration control of Cfengine.


These systems are in a 5-way DNS roundrobin arrangement whereby any one 
of them can handle any function, or all of them. If a system goes down 
there are 4 more to do the work and I don't get a call-out. All you need 
is to enable your various tools to use tcp sockets. Otherwise it matters 
not where the binaries are running.


Clamav-milter can do this automagically with no need to set up DNS or
any other system.



dp




--
Nigel Horne. Arranger, Adjudicator, Band Trainer, Composer, Tutor, 
Typesetter.

NJH Music, Barnsley, UK.  ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] question about running ClamAV on dedicated server

2006-02-07 Thread Dennis Peterson

Nigel Horne wrote:

Dennis Peterson wrote:


Nicolas MacPherson wrote:


Hello,

   Just out of curiosity, is there a way to run clamd on a dedicated 
server, so that clamdscan could process the messages on the remote 
machine?  I'm curious because I work for an ISP that currently runs a 
dedicated Spamassassin server, and would like to investigate the 
possibility of doing the same for ClamAV.  Any assistance would be 
greatly appreciated.




I have five mail servers. All have the same tools installed for mta 
(Sendmail), milter (J-Chkmail), Antivirus (Clamav), syslog-ng for 
logging. All are under configuration control of Cfengine.


These systems are in a 5-way DNS roundrobin arrangement whereby any 
one of them can handle any function, or all of them. If a system goes 
down there are 4 more to do the work and I don't get a call-out. All 
you need is to enable your various tools to use tcp sockets. Otherwise 
it matters not where the binaries are running.



Clamav-milter can do this automagically with no need to set up DNS or
any other system.


Quite nicely, too, and I'd use it but I'd set up my systems before clamav-milter 
was an option, and the spam milter I use has clamav support integrated. This 
gives me one less milter to run. The DNS configuration also opens up a lot of 
nice options for system resiliance like last evening when one of the machines 
decided to shed a boot mirror. :(


So to the OP, yes, there are lots of ways to do it.

dp
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] DNS record older than 3 hours - happening since yesterday?

2006-02-07 Thread Brian Morrison
I'm seeing the freshclam warning here for about a day now, so something
somewhere appears to be at fault with the DNS record.

Anyone have any news about this? I don't think it's at my end as all
other DNS activity is normal.

-- 

Brian Morrison

bdm at fenrir dot org dot uk

GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] DNS record older than 3 hours - happening since yesterday?

2006-02-07 Thread Rick Macdougall

Brian Morrison wrote:

I'm seeing the freshclam warning here for about a day now, so something
somewhere appears to be at fault with the DNS record.

Anyone have any news about this? I don't think it's at my end as all
other DNS activity is normal.



Hi,

I only see that when the clock on the server has the wrong time.

Rick

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] question about running ClamAV on dedicated server

2006-02-07 Thread Nicolas MacPherson

Dennis Peterson wrote:

Nigel Horne wrote:

Dennis Peterson wrote:


Nicolas MacPherson wrote:


Hello,

   Just out of curiosity, is there a way to run clamd on a 
dedicated server, so that clamdscan could process the messages on 
the remote machine?  I'm curious because I work for an ISP that 
currently runs a dedicated Spamassassin server, and would like to 
investigate the possibility of doing the same for ClamAV.  Any 
assistance would be greatly appreciated.




I have five mail servers. All have the same tools installed for mta 
(Sendmail), milter (J-Chkmail), Antivirus (Clamav), syslog-ng for 
logging. All are under configuration control of Cfengine.


These systems are in a 5-way DNS roundrobin arrangement whereby any 
one of them can handle any function, or all of them. If a system 
goes down there are 4 more to do the work and I don't get a 
call-out. All you need is to enable your various tools to use tcp 
sockets. Otherwise it matters not where the binaries are running.



Clamav-milter can do this automagically with no need to set up DNS or
any other system.


Quite nicely, too, and I'd use it but I'd set up my systems before 
clamav-milter was an option, and the spam milter I use has clamav 
support integrated. This gives me one less milter to run. The DNS 
configuration also opens up a lot of nice options for system 
resiliance like last evening when one of the machines decided to shed 
a boot mirror. :(


So to the OP, yes, there are lots of ways to do it.

dp
___
http://lurker.clamav.net/list/clamav-users.html



I want to thank everyone for all the input so far, currently I am 
calling clamdscan through simscan on a QMail box running vpopmail.  In 
order to call the clamav-milter, would I just change the configure 
options for simscan to use that instead of clamdscan?  I'm just trying 
to finalize the procedure involved in migrating it over to the dedicated 
server setup.  One of the previous responses said I just needed to 
change the clamd.conf to specify the
IP of the server and the port, which would be more effective, the milter 
or the clamdscan configuration?


Thanks again,
Nicolas MacPherson
[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] RE: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread Kaplan, Andrew H.
Hi there --

 

I mounted an NFS directory that has a newer version of gcc/ I then mounted tthe
following lines to my .cshrc file:

 

 setenv GCC_PATH /usr/tools/gcc3

 setenv PATH ${GCC_PATH}/bin:${PATH}

 setenv LD_LIBRARY_PATH ${GCC_PATH}/lib

 

 alias gcc /usr/tools/gcc3/

 

After the changes were made, I ran source .cshrc to have them go into effect.

 

I then went through the motions of running the configure script and then the
make command. I encountered an Exit Status 1 error, although the cause of the
error seems different than before. 

 

I've included it in this e-mail as an attachment. Is there something else I need
to do? Thanks. 

 

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] RE: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread Jeff Donsbach
Unless you know what version of HP-UX that version of gcc 3 was built
on, I wouldn't trust that it will run on your 10.20 machine. If the
compiler you are trying to use was built on 11.0 or later, don't count
on it working at all.

You know how old HP-UX 10.20 is, right? HP has not supported 10.20 in
more than 3 years. I have access to lots of HP-UX machines, but no
10.20 machines.

Jeff D

On 2/7/06, Kaplan, Andrew H. [EMAIL PROTECTED] wrote:
 Hi there --



 I mounted an NFS directory that has a newer version of gcc/ I then mounted 
 tthe
 following lines to my .cshrc file:



  setenv GCC_PATH /usr/tools/gcc3

  setenv PATH ${GCC_PATH}/bin:${PATH}

  setenv LD_LIBRARY_PATH ${GCC_PATH}/lib



  alias gcc /usr/tools/gcc3/



 After the changes were made, I ran source .cshrc to have them go into effect.



 I then went through the motions of running the configure script and then the
 make command. I encountered an Exit Status 1 error, although the cause of the
 error seems different than before.



 I've included it in this e-mail as an attachment. Is there something else I 
 need
 to do? Thanks.

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread René Berber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Kaplan, Andrew H. wrote:

 I mounted an NFS directory that has a newer version of gcc/ I then mounted 
 tthe
 following lines to my .cshrc file:
 
  setenv GCC_PATH /usr/tools/gcc3
  setenv PATH ${GCC_PATH}/bin:${PATH}

This far is OK.

  setenv LD_LIBRARY_PATH ${GCC_PATH}/lib

This won't work, get rid of it.

  alias gcc /usr/tools/gcc3/

What's this for?  Don't use this, first check if changing your path gives you
the new gcc: `which gcc` and `gcc --version`

 After the changes were made, I ran source .cshrc to have them go into effect.

You can do this if you have a cc on the PATH:

CC=gcc ./configure ...

Or to avoid the older gcc:

CC=/usr/tools/gcc3/bin/gcc ./configure ...

 I then went through the motions of running the configure script and then the
 make command. I encountered an Exit Status 1 error, although the cause of the
 error seems different than before. 
 
 I've included it in this e-mail as an attachment. Is there something else I 
 need
 to do? Thanks. 

No attachment.  But first correct the part with LD_LIBRARY_PATH above.
- --
René Berber
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (Cygwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iEYEARECAAYFAkPo3yAACgkQL3NNweKTRgwYtACeNBxCyfrR8l4H4Gc5cDeY6ndQ
99EAniJtQslvHCZVlEBGdwEdwYYF04TE
=E5of
-END PGP SIGNATURE-

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread Jeff Donsbach
On 2/7/06, René Berber [EMAIL PROTECTED] wrote:
 But first correct the part with LD_LIBRARY_PATH above.

René is right. I missed that. On 10.20, LD_LIBRARY_PATH is not what
you want. SHLIB_PATH is the environment variable. That still assumes
the binary was linked to allow searches for the shared libraries
though.

Jeff D
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread Kaplan, Andrew H.
I made the changes you had suggested to the .cshrc file.

 

  setenv LD_LIBRARY_PATH ${GCC_PATH}/lib

  This won't work, get rid of it.

 

I commented out that line.

 

  alias gcc /usr/tools/gcc3/

 What's this for?  Don't use this, first check if changing your path gives you
the new gcc: `which gcc` and `gcc --version`

 

I commented out that line as well, ran source .cshrc and then ran which gcc and
gcc --version. The which gcc command gave me

the following output: gcc: aliased to /usr/tools/gcc3/. When I ran the gcc
--version command, I got the following message: 

/usr/tools/gcc3/: Permission denied. When I ran the gcc --version command as
sudo user, the following appeared onscreen: 

Gcc (GCC) 3.1

 

 You can do this if you have a cc on the PATH:

 CC=gcc ./configure ...

 Or to avoid the older gcc:

 CC=/usr/tools/gcc3/bin/gcc ./configure ...

 

I didn't make changes to the PATH as of yet.

 

When I ran the make command as sudo and a regular user, the following error
message appeared:

Cc1: warning: changing search order for system directory /usr/local/include

Cc1: warning: as it has already been specified as a non-system directory

Manager.c: In function 'wwwconnect':

Manager.c:503: 'h_errno' undeclared (first use in this function)

Manager.c:503: (each undeclared identifier is reported only once

Manager.c:503: for each function it appears in.)

*** Error exit code 1

 

Stop

*** Error exit code 1

 

Stop

*** Error exit code 1

 

Stop.

 

Let me know if you need me to send you the attachment.

 

 

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread René Berber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Kaplan, Andrew H. wrote:

 I made the changes you had suggested to the .cshrc file.
[snip]
 I commented out that line as well, ran source .cshrc and then ran which gcc 
 and
 gcc --version. The which gcc command gave me
 
 the following output: gcc: aliased to /usr/tools/gcc3/.

The alias is still in effect.

 When I ran the gcc --version command, I got the following message: 
 
 /usr/tools/gcc3/: Permission denied. When I ran the gcc --version command as
 sudo user, the following appeared onscreen: 
 
 Gcc (GCC) 3.1

Good, but by using sudo what really happened is that you got rid of the alias.
It was easier to use alias gcc= (at least that is the way to do it in bash,
defined as empty).

[snip]
 I didn't make changes to the PATH as of yet.
 
 When I ran the make command as sudo and a regular user, the following error
 message appeared:
 
 Cc1: warning: changing search order for system directory /usr/local/include
 Cc1: warning: as it has already been specified as a non-system directory

This is normal, but did you cleaned up before configure (i.e. make distclean);
we need configure to find and use the new compiler.

 Manager.c: In function 'wwwconnect':
 Manager.c:503: 'h_errno' undeclared (first use in this function)

Back to the original problem.

h_errno is declared in /usr/include/netdb.h; there's something wrong with the
environment gcc is using... you could see the output of gcc -print-search-dirs
but that won't say where the headers are searched for.

Perhaps setting the header path explicitly, as in:

CFLAGS=-I/usr/include ./configure ...

 Manager.c:503: (each undeclared identifier is reported only once
 Manager.c:503: for each function it appears in.)
 *** Error exit code 1
 Stop
 *** Error exit code 1
 Stop
 *** Error exit code 1
 Stop.
 
 Let me know if you need me to send you the attachment.

No, no need for that.
- --
René Berber
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (Cygwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iEYEARECAAYFAkPo9ewACgkQL3NNweKTRgyomACggPBCxfy+9KdswB7DDloBXOxS
EcAAniiSUIiNKlIjKbpkosfZ+a72WGaP
=RWTs
-END PGP SIGNATURE-

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] question about running ClamAV on dedicated server

2006-02-07 Thread Js Lists
On Tue, 2006-02-07 at 12:13 -0500, Nicolas MacPherson wrote:
 I want to thank everyone for all the input so far, currently I am 
 calling clamdscan through simscan on a QMail box running vpopmail.  In 
 order to call the clamav-milter, would I just change the configure 
 options for simscan to use that instead of clamdscan?  I'm just trying 
 to finalize the procedure involved in migrating it over to the dedicated 
 server setup.  One of the previous responses said I just needed to 
 change the clamd.conf to specify the
 IP of the server and the port, which would be more effective, the milter 
 or the clamdscan configuration?

Since you are running simscan/qmail/vpopmail you may want to look at
using simscan to call clamd-stream-client on the mail server.  I don't
think you even need to have clamav installed on the mail server, as
clamd-stream-client doesn't require it.  I don't believe there is
support in simscan for clamd-stream-client, but the last time I looked
at the source, it didn't look like it would be too hard to hack it in.
You may want to ask over on the simscan list if anyone has already done
so.  The milter is only for Sendmail installations and won't work if you
are using Qmail.  Its usually important to specify that you are using
Qmail, otherwise most people will assume you are running Sendmail, which
can utilize the clamav-milter.

Although, it would be nice if load balancing was added to
clamd-stream-client someday.  And yes I know, I am free to write it
myself...just a lack of time though.


Jay Tortorelli

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Easiest way to set up a whitelist?

2006-02-07 Thread IT Purchases


Hello,

I'm constructing a SPAM / AV mechanism to reduce the incoming debris.

I'm using Postfix with amavisd-new, Clam-AV and SpamAssassin.

What is the easiest way to setup a whitelist for Clam-AV?

A.

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread Kaplan, Andrew H.
 Perhaps setting the header path explicitly, as in:

 

 CFLAGS=-I/usr/include ./configure ...

 

I don't know into which file the CFLAGS line goes, or if it gets executed from
the command prompt. 

When I ran the make script as a regular user, I got an error 1 message due to a
permission denied error.

 

I also tried adding the SHLIB_PATH variable to the .cshrc file. The results were
the same if I tried to 

compile as a regular or sudo user. 

 

 

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread René Berber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Kaplan, Andrew H. wrote:

Perhaps setting the header path explicitly, as in:
CFLAGS=-I/usr/include ./configure ...
 
 I don't know into which file the CFLAGS line goes, or if it gets executed from
 the command prompt.

No file, the above is the command typed on a terminal to configure the package.
 It may be different under csh, but you can use 'setenv CFLAGS -I/usr/include'
before running ./configure

 When I ran the make script as a regular user, I got an error 1 message due to 
 a
 permission denied error.

I have a question: did you execute configure just before make?

There may be left over temporary files wich belong to root and no regular user
can delete.  I think that's the reason for the permission denied message.

 I also tried adding the SHLIB_PATH variable to the .cshrc file. The results 
 were
 the same if I tried to 

I wouldn't set SHLIB_PATH or any library path; the reason is that you were
setting it to the mounted directory and it's better to leave the path pointing
to the regular libraries which won't dissapear when you unmount the directory.
- --
René Berber
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (Cygwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iEYEARECAAYFAkPpD6EACgkQL3NNweKTRgw+sACfaJoJsuMYVQDPM37XnSbPQlZq
1W4An2vEC5nggHFU1XCOtosbrbDyZdLG
=kAmb
-END PGP SIGNATURE-

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread Kaplan, Andrew H.
 No file, the above is the command typed on a terminal to configure the
package.

 It may be different under csh, but you can use 'setenv CFLAGS
-I/usr/include'

 before running ./configure

 

I ran the command setenv CFLAGS -I/usr/include as a regular user and it seemed
to accept the command.

When I did the same thing as root, I needed to include the full pathname to the
setenv binary.

 

 I have a question: did you execute configure just before make?

 There may be left over temporary files wich belong to root and no regular user
can delete.  I think that's the reason for the permission denied  message.

 

I did execute configure just before make, but that was after I ran the make
distclean command. That should have taken care of all files, unless there is
another directory involved in the compilation procedure.

 

 I wouldn't set SHLIB_PATH or any library path; the reason is that you were
setting it to the mounted directory and it's better to leave the path  pointing
to the regular libraries which won't dissapear when you unmount the directory.

 

I removed the SHLIB_PATH command from the .cshrc file, and tried the procedure
again, without success...I am at a loss here.

 

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread René Berber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Kaplan, Andrew H. wrote:
[snip]
 I removed the SHLIB_PATH command from the .cshrc file, and tried the procedure
 again, without success...I am at a loss here.

Same message about h_errno?
- --
René Berber
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (Cygwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iEYEARECAAYFAkPpJIAACgkQL3NNweKTRgxTjgCgsDvV30/aBKqkCl2FDngpW57U
DOMAn1UZvoeFzD9iaS/+TetfyrvSLxO9
=5beC
-END PGP SIGNATURE-

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread Kaplan, Andrew H.
 Same message about h_errno?
 
Yes -- the message is the same.
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: Problem Upgrading ClamAV on HP-UX 10.20

2006-02-07 Thread René Berber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Kaplan, Andrew H. wrote:

Same message about h_errno?
 
 Yes -- the message is the same.

OK, let's analyze the output of running configure.

There are 3 tests inside configure that use netdb.h and h_errno, they seem to be
testing to see what variant of gethostbyname_r does the system have.  You should
have the result in config.log, look for lines that say checking for
gethostbyname_r and everything below that should be interesting, but we are
really looking for something like result: yes, and it takes 5 arguments about
9 lines below.

What we are trying to do is see what is causing the build failure.  In theory
configure should have catched any problem.
- --
René Berber
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (Cygwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iEYEARECAAYFAkPpTksACgkQL3NNweKTRgwzSACg3Muej+tfVdWj0Hj1N/oGUflo
cl4AoLoFpNjwnbb85WdUEfVDAgj5bgSW
=q/Xs
-END PGP SIGNATURE-

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] DNS record older than 3 hours - happening since yesterday?

2006-02-07 Thread steven collins
On Tue, 2006-02-07 at 12:05 -0500, Rick Macdougall wrote:
 Brian Morrison wrote:
  I'm seeing the freshclam warning here for about a day now, so something
  somewhere appears to be at fault with the DNS record.
  
  Anyone have any news about this? I don't think it's at my end as all
  other DNS activity is normal.
  
 
 Hi,
 
 I only see that when the clock on the server has the wrong time.
 
 Rick


I've been seeing this on a lot of servers as well but the time/date on
the servers are correct. Many of them are even timing out trying to grab
the dns record occasionally. Anyone else seeing this?

-steven 

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] DNS record older than 3 hours - happening since yesterday?

2006-02-07 Thread BitFuzzy



I've been seeing this on a lot of servers as well but the time/date on
the servers are correct. Many of them are even timing out trying to grab
the dns record occasionally. Anyone else seeing this?
 

Here too, and server time is correct though the log entries seem to 
point to DNS issues.


Im my case current.cvd.clamav.net and db.us.clamav.net seem to have 
intermittent problems perhaps related to traffic?

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] DNS record older than 3 hours - happening since yesterday?

2006-02-07 Thread Noel Jones

At 08:39 PM 2/7/2006, steven collins wrote:

On Tue, 2006-02-07 at 12:05 -0500, Rick Macdougall wrote:
 Brian Morrison wrote:
  I'm seeing the freshclam warning here for about a day 
now, so something

  somewhere appears to be at fault with the DNS record.
 
  Anyone have any news about this? I don't think it's 
at my end as all

  other DNS activity is normal.
 

 Hi,

 I only see that when the clock on the server has the 
wrong time.


 Rick


I've been seeing this on a lot of servers as well but the 
time/date on
the servers are correct. Many of them are even timing out 
trying to grab

the dns record occasionally. Anyone else seeing this?

-steven



Yes, I've been getting:
WARNING: DNS record is older than 3 hours.
WARNING: Invalid DNS reply. Falling back to HTTP mode.
here for about the last 36 hours.

Dig doesn't seem to have any trouble getting a record, 
date/time on my server is correct.


% dig current.cvd.clamav.net txt

;  DiG 9.3.0  current.cvd.clamav.net txt
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 20662
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 7, 
ADDITIONAL: 7


;; QUESTION SECTION:
;current.cvd.clamav.net.IN  TXT

;; ANSWER SECTION:
current.cvd.clamav.net. 
592 IN  TXT 0.88:35:1278:1139243341:1


;; AUTHORITY SECTION:
cvd.clamav.net. 3078IN  NS  ns2.clamav.net.
cvd.clamav.net. 3078IN  NS  ns3.clamav.net.
cvd.clamav.net. 3078IN  NS  ns4.clamav.net.
cvd.clamav.net. 3078IN  NS  ns5.clamav.net.
cvd.clamav.net. 3078IN  NS  ns6.clamav.net.
cvd.clamav.net. 3078IN  NS  ns7.clamav.net.
cvd.clamav.net. 3078IN  NS  ns1.clamav.net.

;; ADDITIONAL SECTION:
ns1.clamav.net. 60143   IN  A   69.61.68.204
ns2.clamav.net. 60143   IN  A   63.166.28.2
ns3.clamav.net. 60143   IN  A   195.70.36.141
ns4.clamav.net. 60143   IN  A   80.69.69.69
ns5.clamav.net. 60143   IN  A   213.92.8.2
ns6.clamav.net. 57886   IN  A   208.201.249.238
ns7.clamav.net. 57886   IN  A   209.204.159.15

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Feb  7 22:42:11 2006
;; MSG SIZE  rcvd: 316

%


--
Noel Jones 


___
http://lurker.clamav.net/list/clamav-users.html