Re[2]: [Clamav-users] problem during compilling clamav-0.90.1
Sorry, but it didnt help. Hello Walter, Friday, March 16, 2007, 6:21:39 PM, you wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Sergio, do you have libgmp on your system ? If yes, do the following: setenv CFLAGS -O2 -I/usr/local/include setenv LDFLAGS -s -L/usr/local/lib ./configure ... The -L/usr/local/lib is to make sure, if libgmp is in /usr/local/lib, it will be found and linked against. If this doesn't help, edit the line: dependency_libs=' -L/usr/local/lib -lgmp' in ../libclamav/libclamav.la If you do not have libgmp, download, compile and install it. Best regards, Walter. sergio schrieb: Hello Matthias, Friday, March 16, 2007, 1:40:44 PM, you wrote: sergio schrieb: Hello clamav-users, I tried to install new clamav on my freebsd-4.8. ./configure with enable-experimental was good. but make ends with error code 1. Clamav-0.90.1 is not installable on freebsd-4.8,yes? Help please. Thanks. I have Clamav-0.90.1 running and compiled on freebsd-4.8 without any Problem. first i uninstalled Clamav-0.90 with make uninstall from the source folder of Clamav-0.90 then i changed to the folder where i unpacked the Clamav-0.90.1.tar.gz ./configure make make install some changes to freshclam.conf and clamd.conf and it is stable running since then . Matthias ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html Its good,but I just did like you and recieve this Making all in clamscan source='../shared/output.c' object='output.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o output.o `test -f '../shared/output.c' || echo './'`../shared/output.c source='../shared/getopt.c' object='getopt.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o getopt.o `test -f '../shared/getopt.c' || echo './'`../shared/getopt.c source='../shared/cfgparser.c' object='cfgparser.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o cfgparser.o `test -f '../shared/cfgparser.c' || echo './'`../shared/cfgparser.c source='../shared/misc.c' object='misc.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o misc.o `test -f '../shared/misc.c' || echo './'`../shared/misc.c source='../shared/options.c' object='options.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o options.o `test -f '../shared/options.c' || echo './'`../shared/options.c source='clamscan.c' object='clamscan.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c clamscan.c source='others.c' object='others.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c others.c source='manager.c' object='manager.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c manager.c In file included from /usr/include/sys/param.h:74, from ../libclamav/others.h:54, from manager.c:62: /usr/include/sys/syslimits.h:47: warning: `NAME_MAX' redefined ../shared/misc.h:29: warning: this is the location of the previous definition manager.c: In function `move_infected': manager.c:552: warning: assignment discards qualifiers from pointer target type source='treewalk.c' object='treewalk.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c treewalk.c /usr/local/bin/bash ../libtool --tag=CC --mode=link gcc -g -O2-o clamscan output.o getopt.o cfgparser.o misc.o options.o clamscan.o others.o manager.o treewalk.o ../libclamav/libclamav.la -pthread -lc_r gcc -g -O2 -o .libs/clamscan output.o getopt.o cfgparser.o misc.o options.o clamscan.o others.o
Re[2]: [Clamav-users] problem during compilling clamav-0.90.1
And, I found that I dont have libthread library on my server. Maybe, this is my problem. But if thats right, I dont know how to install this library to my pc... Hello Walter, Friday, March 16, 2007, 6:21:39 PM, you wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Sergio, do you have libgmp on your system ? If yes, do the following: setenv CFLAGS -O2 -I/usr/local/include setenv LDFLAGS -s -L/usr/local/lib ./configure ... The -L/usr/local/lib is to make sure, if libgmp is in /usr/local/lib, it will be found and linked against. If this doesn't help, edit the line: dependency_libs=' -L/usr/local/lib -lgmp' in ../libclamav/libclamav.la If you do not have libgmp, download, compile and install it. Best regards, Walter. sergio schrieb: Hello Matthias, Friday, March 16, 2007, 1:40:44 PM, you wrote: sergio schrieb: Hello clamav-users, I tried to install new clamav on my freebsd-4.8. ./configure with enable-experimental was good. but make ends with error code 1. Clamav-0.90.1 is not installable on freebsd-4.8,yes? Help please. Thanks. I have Clamav-0.90.1 running and compiled on freebsd-4.8 without any Problem. first i uninstalled Clamav-0.90 with make uninstall from the source folder of Clamav-0.90 then i changed to the folder where i unpacked the Clamav-0.90.1.tar.gz ./configure make make install some changes to freshclam.conf and clamd.conf and it is stable running since then . Matthias ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html Its good,but I just did like you and recieve this Making all in clamscan source='../shared/output.c' object='output.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o output.o `test -f '../shared/output.c' || echo './'`../shared/output.c source='../shared/getopt.c' object='getopt.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o getopt.o `test -f '../shared/getopt.c' || echo './'`../shared/getopt.c source='../shared/cfgparser.c' object='cfgparser.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o cfgparser.o `test -f '../shared/cfgparser.c' || echo './'`../shared/cfgparser.c source='../shared/misc.c' object='misc.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o misc.o `test -f '../shared/misc.c' || echo './'`../shared/misc.c source='../shared/options.c' object='options.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o options.o `test -f '../shared/options.c' || echo './'`../shared/options.c source='clamscan.c' object='clamscan.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c clamscan.c source='others.c' object='others.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c others.c source='manager.c' object='manager.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c manager.c In file included from /usr/include/sys/param.h:74, from ../libclamav/others.h:54, from manager.c:62: /usr/include/sys/syslimits.h:47: warning: `NAME_MAX' redefined ../shared/misc.h:29: warning: this is the location of the previous definition manager.c: In function `move_infected': manager.c:552: warning: assignment discards qualifiers from pointer target type source='treewalk.c' object='treewalk.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c treewalk.c /usr/local/bin/bash ../libtool --tag=CC --mode=link gcc -g -O2-o clamscan output.o getopt.o cfgparser.o misc.o options.o clamscan.o others.o manager.o treewalk.o
[Clamav-users] more detail from clamd.log
Hi everyone, My clamava seems to be disconnecting quite often- and my paniclog is full of timed out entries- how can I get the clamlog to give me more detail- and timestamp the entries- here's a portion of my clamlog /var/spool/exim/scan/1HTHbI-0003XF-LE/1HTHbI-0003XF-LE.eml: HTML.Phishing.Bank-1156 FOUND /var/spool/exim/scan/1HTHbr-0003XL-Vj/1HTHbr-0003XL-Vj.eml: HTML.Phishing.Bank-1156 FOUND Client disconnected Client disconnected Client disconnected Client disconnected Client disconnected Client disconnected Client disconnected /var/spool/exim/scan/1HTHes-0003Xq-JA/1HTHes-0003Xq-JA.eml: HTML.Phishing.Bank-1156 FOUND here's a portion of my paniclog 2007-03-19 09:13:42 1HTHeE-0003Xj-E9 malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:14:03 1HTHec-0003Xn-TF malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:14:17 1HTHer-0003Xp-0v malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:14:30 1HTHf2-0003Xr-8p malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:16:57 1HTHhP-0003Y4-VN malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:21:58 1HTHld-0003Yh-W1 malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:23:57 1HTHoC-0003Z9-0m malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:24:06 1HTHoK-0003ZR-TY malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:24:38 1HTHoE-0003Yh-Id malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:24:39 1HTHoo-0003ZW-A1 malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:24:41 1HTHou-0003Za-1H malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:24:51 1HTHp4-0003Zc-Fy malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:25:16 1HTHoq-0003ZZ-GI malware acl condition: clamd: unable to read from socket (Operation timed out) 2007-03-19 09:25:20 1HTHpV-0003Zj-Og malware acl condition: clamd: unable to read from socket (Operation timed out) running clamav 90.1 exim 4.66 Freebsd 5.4 _ Live Search Maps find all the local information you need, right when you need it. http://maps.live.com/?icid=hmtag2FORM=MGAC01 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] problem during compilling clamav-0.90.1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Sergio, I assume you mean 'libpthread' instead of 'libthread'. Please try this: # ./configure --sysconfdir=/etc --disable-pthreads --with-user=amavis - --with-group=amavis --enable-experimental Please substitute --with-user= and --with-group= with your preferences. Best regards, Walter. sergio schrieb: And, I found that I dont have libthread library on my server. Maybe, this is my problem. But if thats right, I dont know how to install this library to my pc... Hello Walter, Friday, March 16, 2007, 6:21:39 PM, you wrote: Hi Sergio, do you have libgmp on your system ? If yes, do the following: setenv CFLAGS -O2 -I/usr/local/include setenv LDFLAGS -s -L/usr/local/lib ./configure ... The -L/usr/local/lib is to make sure, if libgmp is in /usr/local/lib, it will be found and linked against. If this doesn't help, edit the line: dependency_libs=' -L/usr/local/lib -lgmp' in ../libclamav/libclamav.la If you do not have libgmp, download, compile and install it. Best regards, Walter. sergio schrieb: Hello Matthias, Friday, March 16, 2007, 1:40:44 PM, you wrote: sergio schrieb: Hello clamav-users, I tried to install new clamav on my freebsd-4.8. ./configure with enable-experimental was good. but make ends with error code 1. Clamav-0.90.1 is not installable on freebsd-4.8,yes? Help please. Thanks. I have Clamav-0.90.1 running and compiled on freebsd-4.8 without any Problem. first i uninstalled Clamav-0.90 with make uninstall from the source folder of Clamav-0.90 then i changed to the folder where i unpacked the Clamav-0.90.1.tar.gz ./configure make make install some changes to freshclam.conf and clamd.conf and it is stable running since then . Matthias ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html Its good,but I just did like you and recieve this Making all in clamscan source='../shared/output.c' object='output.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o output.o `test -f '../shared/output.c' || echo './'`../shared/output.c source='../shared/getopt.c' object='getopt.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o getopt.o `test -f '../shared/getopt.c' || echo './'`../shared/getopt.c source='../shared/cfgparser.c' object='cfgparser.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o cfgparser.o `test -f '../shared/cfgparser.c' || echo './'`../shared/cfgparser.c source='../shared/misc.c' object='misc.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o misc.o `test -f '../shared/misc.c' || echo './'`../shared/misc.c source='../shared/options.c' object='options.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c -o options.o `test -f '../shared/options.c' || echo './'`../shared/options.c source='clamscan.c' object='clamscan.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c clamscan.c source='others.c' object='others.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c others.c source='manager.c' object='manager.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I. -I.. -I.. -I../shared -I../libclamav -I/usr/include -I/usr/local/include -g -O2 -c manager.c In file included from /usr/include/sys/param.h:74, from ../libclamav/others.h:54, from manager.c:62: /usr/include/sys/syslimits.h:47: warning: `NAME_MAX' redefined ../shared/misc.h:29: warning: this is the location of the previous definition manager.c: In function `move_infected': manager.c:552: warning: assignment discards qualifiers from pointer target type source='treewalk.c' object='treewalk.o' libtool=no DEPDIR=.deps depmode=gcc /usr/local/bin/bash ../depcomp gcc
Re: [Clamav-users] reload db failed
Robert wrote: It's only happened the once. By the time I inspected the /usr/local/share/clamav directory there was no sign of a .dbLock file. However, the database directory is definitely writable by clamd. It's owned by the clamav user. Since the restart of clamd it has been behaving itself. Robert R.___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html Here it happend a few times since 0.9(.1) (never before), always synchronized with massive error messages in freshclam (daemonized) due to connection problems to the local mirror. Before the last failure (early sunday) only some of the servers were affected. This time clamd went dead on all servers. clamd log: Sun Mar 18 02:55:04 2007 - SelfCheck: Database status OK. Sun Mar 18 03:16:47 2007 - SelfCheck: Database modification detected. Forcing reload. Sun Mar 18 03:16:47 2007 - Reading databases from /var/lib/clamav Sun Mar 18 03:18:57 2007 - ERROR: reload db failed: Unable to lock database directory (try 1) Sun Mar 18 03:21:07 2007 - ERROR: reload db failed: Unable to lock database directory (try 2) Sun Mar 18 03:23:17 2007 - ERROR: reload db failed: Unable to lock database directory (try 3) Sun Mar 18 03:23:17 2007 - ERROR: reload db failed: Unable to lock database directory Sun Mar 18 03:23:17 2007 - Terminating because of a fatal error.Sun Mar 18 03:23:17 2007 - Socket file removed. Sun Mar 18 03:23:17 2007 - Pid file removed. Sun Mar 18 03:23:17 2007 - --- Stopped at Sun Mar 18 03:23:17 2007 freshclam log: -- Received signal: wake up ClamAV update process started at Sun Mar 18 01:51:46 2007 main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm) daily.inc is up to date (version: 2860, sigs: 16072, f-level: 14, builder: ccordes) -- Received signal: wake up ClamAV update process started at Sun Mar 18 02:51:47 2007 main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm) nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net WARNING: Incremental update failed, trying to download daily.cvd nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: Can't download daily.cvd from db.ro.clamav.net Trying again in 5 secs... ClamAV update process started at Sun Mar 18 02:57:52 2007 main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm) nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net WARNING: Incremental update failed, trying to download daily.cvd nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: Can't download daily.cvd from db.ro.clamav.net Trying again in 5 secs... ClamAV update process started at Sun Mar 18 03:03:57 2007 main.cvd is up to date (version: 42, sigs: 83951, f-level: 10, builder: tkojm) nonblock_connect: connect timing out (60 secs) Can't connect to port 80 of host db.ro.clamav.net (IP: 192.129.4.120) ERROR: getpatch: Can't download daily-2861.cdiff from db.ro.clamav.net
Re: [Clamav-users] Handling the daily.cvd to daily.inc transition in a packaging context
On Sat, Mar 10, 2007 at 11:38:47AM +0100, Jan-Pieter Cornet wrote: On Sat, Mar 10, 2007 at 11:26:10AM +0100, Marc Haber wrote: On Sat, Mar 10, 2007 at 11:11:39AM +0100, Jan-Pieter Cornet wrote: Just put this in your freshclam.conf: ScriptedUpdates no It will make sure only .cvd files are downloaded. This is the quick fix I have taken, but is this the right way in the long term? Scripted updates were implemented for a reason, and I don't think that it is the right way to turn them off again to fix the issues that came up with them. Ah, I assumed for a moment you would only build the .cvd package centrally for the entire debian distribution, so it wouldn't make much of a difference. I see now what you mean... We are using the same script to build a central .cvd, and I have understood in the mean time that if we want our packages to be compatible with the outdated engines in Debian stable, we _need_ to disable Scripted Updates. And so be it ;) Thanks for helping me realize this. I guess packing up the entire contents of the database directory would work just as well. Verification can be done by pointing clamscan to the downloaded directory and trying to scan a test-file. (That's not signature verification, but you'd assume that freshclam already did that). The test file signatures, though, are in the main.cvd, and thus a botched daily.cvd won't be noticed here. Signature Verification is much better. Greetings Marc -- - Marc Haber | I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things.Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] clamscan-procfilter.pl stops working after upgrade to 0.9X clamav
Hi Everyone, I'm new to this list, but a long time user of ClamAV. For years I've been using this simple procmail (clamscan-procfilter.pl) script from http://www.virtualblueness.net/~blueness/clamscan-procfilter/ It's worked great, until I upgraded to the 0.9X ClamAV and it no longer is able to pass e-mails to the clamav daemon. I'm not sure why, but as far as I can tell everything is peachy with clamav, freshclam runs just fine, the clamd process is running. The configuration file is correct. The only thing I can guess (and after searching the mail list since no one else has reported this yet) is maybe some scanning parameters for the new clamav has changed and that's why this script is not working. The script has a section where it passes the e-mail to the clamdscan script to scan and then later in the file does other things to redirect virus infected e-mails, etc. As far as I can tell, the files are being sent over to scan, but they remain (never removed after a successful scan). I thought maybe this is not using the right command to scan the file (updated version has new parameters) and thus that's why e-mails are not getting a proper clamav scan. If anyone has experience with this procmail script, any information would be greatly appreciated. # Where are your binaries? # $MKTEMP='/bin/mktemp' ; $CLAMSCAN='/usr/bin/clamdscan' ; $FORMAIL='/usr/bin/formail' ; # # Read in the email from stdin # @file = ; # # Create/open a temp file for the output of clamscan # $TMPFILE=`$MKTEMP /tmp/clamtemp.XX` ; chomp $TMPFILE ; open CLAM, |$CLAMSCAN --stdout --mbox - $TMPFILE ; print CLAM @file ; close CLAM ; Thanks, Michael ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamscan-procfilter.pl stops working after upgrade to 0.9X clamav
Michael Brown wrote: Hi Everyone, I'm new to this list, but a long time user of ClamAV. For years I've been using this simple procmail (clamscan-procfilter.pl) script from http://www.virtualblueness.net/~blueness/clamscan-procfilter/ It's worked great, until I upgraded to the 0.9X ClamAV and it no longer is able to pass e-mails to the clamav daemon. I'm not sure why, but as far as I can tell everything is peachy with clamav, freshclam runs just fine, the clamd process is running. The configuration file is correct. The only thing I can guess (and after searching the mail list since no one else has reported this yet) is maybe some scanning parameters for the new clamav has changed and that's why this script is not working. The script has a section where it passes the e-mail to the clamdscan script to scan and then later in the file does other things to redirect virus infected e-mails, etc. As far as I can tell, the files are being sent over to scan, but they remain (never removed after a successful scan). I thought maybe this is not using the right command to scan the file (updated version has new parameters) and thus that's why e-mails are not getting a proper clamav scan. If anyone has experience with this procmail script, any information would be greatly appreciated. # Where are your binaries? # $MKTEMP='/bin/mktemp' ; $CLAMSCAN='/usr/bin/clamdscan' ; $FORMAIL='/usr/bin/formail' ; # # Read in the email from stdin # @file = ; # # Create/open a temp file for the output of clamscan # $TMPFILE=`$MKTEMP /tmp/clamtemp.XX` ; chomp $TMPFILE ; open CLAM, |$CLAMSCAN --stdout --mbox - $TMPFILE ; Im not running 0.9X but im pretty sure --mbox isnt valid anymore. And why is the variable CLAMSCAN when its calling clamDscan? Its just a little confusing... print CLAM @file ; close CLAM ; Thanks, Michael ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamscan-procfilter.pl stops working after upgrade to 0.9X clamav
Jim Maul wrote: Im not running 0.9X but im pretty sure --mbox isnt valid anymore. And why is the variable CLAMSCAN when its calling clamDscan? Its just a little confusing... Wow, you guys are amazing, that's exactly what it was! I removed the --mbox and everything works again!! The Clamscan is just a variable that the original script author wrote so that people could plug in the script locations (it was using the clamscan, I changed mine to use the clamdscan for faster scanning), in mine for example. It's been working for so many years without problems, one loses track of it until they upgrade to the latest builds and it no longer works, LOL. Just so for future people in case they run into this issue like I did. In the script clamscan-procfilter.pl look for open CLAM, |$CLAMSCAN --stdout --mbox - $TMPFILE ; and change it to (remove the --mbox since it's no longer valid) open CLAM, |$CLAMSCAN --stdout - $TMPFILE ; Save your file and you are good to go. Thanks to Jim Maul for pointing this out, saved me hours of trying to find the solution on the web! Thanks, Michael ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
