Re: [Clamav-users] Can't get information about user vscan
> Hi, > > found a bug last weekend. > https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1518 > > Check if you have a adherent whitespace in your configuration file. Hi, Dont know where the space would be, but it is the same configuration file that used to work, so dont think that a space is the problem. / Ebbe > > Ebbe Hjorth schrieb: >> Hi, >> >> Im running a freebsd 7.1 / postfix server setup, where I use clamav to >> scan for viruses. >> >> After an upgrade last weekend, im now getting: "Can't get information >> about user vscan". >> >> The configuration file is still mine and it states that is uses the >> vscan >> user, and i have checked and the user is still in the system. Google >> says >> that the problem is that the user isnt in /etc/passwd. >> >> Please advice. >> >> >> Best regards, Ebbe >> >> >> >> ___ >> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >> http://www.clamav.net/support/ml >> > > ___ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] MaxQueue in clamd.conf?
Thu Apr 2 08:33:07 2009 -> ERROR: Configuration error: MaxQueue should be
at least twice MaxThreads
Thu Apr 2 08:33:07 2009 -> ERROR: thrmgr_new failed
...yet there is no such param as MaxQueue in clamd.conf, but
FreeBSD-7# find clamav-0.95 -type f -exec grep -li 'MaxQueue' {} \;
clamav-0.95/clamd/server-th.c
clamav-0.95/clamd/thrmgr.c
clamav-0.95/unit_tests/test-clamd.conf
clamav-0.95/shared/optparser.c
clamav-0.95/clamdtop/clamdtop.c
Did someone forget to add a new config variable in clamd.conf??
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
"The only time a woman really succeeds in changing a man is when he is a
baby."
- Natalie Wood
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
[Clamav-users] MaxQueue in clamd.conf?
Thu Apr 2 08:33:07 2009 -> ERROR: Configuration error: MaxQueue should be
at least twice MaxThreads
Thu Apr 2 08:33:07 2009 -> ERROR: thrmgr_new failed
...yet there is no such param as MaxQueue in clamd.conf, but
FreeBSD-7# find clamav-0.95 -type f -exec grep -li 'MaxQueue' {} \;
clamav-0.95/clamd/server-th.c
clamav-0.95/clamd/thrmgr.c
clamav-0.95/unit_tests/test-clamd.conf
clamav-0.95/shared/optparser.c
clamav-0.95/clamdtop/clamdtop.c
Did someone forget to add a new config variable in clamd.conf with 0.95??
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
"The only time a woman really succeeds in changing a man is when he is a
baby."
- Natalie Wood
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter crashing on Centos 5.2
oregon.wo...@gmail.com wrote: > The problem seems to be with "LogInfected Full" - if this option is > set this way, clamav-milter will crash, apparently every time it tries > to log an infection. I switched to "LogInfected Basic", and things > seem to be working properly. > > On Wed, Apr 1, 2009 at 15:41, wrote: > >> Hmmm... looks to be occurring after each infected message is detected >> >> This is https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1522 which will be fixed in 0.95.1. See http://lurker.clamav.net/message/20090330.125023.cac95b40.en.html -- binki ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter crashing on Centos 5.2
The problem seems to be with "LogInfected Full" - if this option is set this way, clamav-milter will crash, apparently every time it tries to log an infection. I switched to "LogInfected Basic", and things seem to be working properly. On Wed, Apr 1, 2009 at 15:41, wrote: > Hmmm... looks to be occurring after each infected message is detected > -- Pete Hanson http://www.well.com/user/wolfy http://www.flickr.net/wolfy ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter crashing on Centos 5.2
Hmmm... looks to be occurring after each infected message is detected ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] clamav-milter crashing on Centos 5.2
clamav-milter from 0.95 is crashing on my Centos 5.2 server after running for some period of time. Crashes look something like this in the log: Apr 1 15:18:29 wodehouse clamd[31741]: fd[9]: OK Apr 1 15:18:30 wodehouse clamd[31741]: fd[16]: OK Apr 1 15:18:30 wodehouse clamd[31741]: fd[10]: OK Apr 1 15:18:34 wodehouse last message repeated 4 times Apr 1 15:18:35 wodehouse clamd[31741]: fd[11]: Phishing.Heuristics.Email.SSL-Spoof FOUND Apr 1 15:18:35 wodehouse clamd[31741]: Client disconnected (FD 10) (this was 13 minutes after startup) Each crash seems to occur after one of finding this message: Apr 1 15:18:35 wodehouse clamd[31741]: fd[11]: Phishing.Heuristics.Email.SSL-Spoof FOUND I'm going to try disabling the HeuristicScanPrecedence to see if that's causing the problem, but in the meantime any suggestions? -- Pete Hanson http://www.well.com/user/wolfy http://www.flickr.net/wolfy ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Can't get information about user vscan
Hi, found a bug last weekend. https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1518 Check if you have a adherent whitespace in your configuration file. BR, Jens Ebbe Hjorth schrieb: > Hi, > > Im running a freebsd 7.1 / postfix server setup, where I use clamav to > scan for viruses. > > After an upgrade last weekend, im now getting: "Can't get information > about user vscan". > > The configuration file is still mine and it states that is uses the vscan > user, and i have checked and the user is still in the system. Google says > that the problem is that the user isnt in /etc/passwd. > > Please advice. > > > Best regards, Ebbe > > > > ___ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Sane Security defs integrity test fail
John Goubeaux wrote: > Does anyone have an idea why the following 2 Sane Security Defs (used > within ClamAV) are consistently (since I have started using them) > failing the integrity test ? > > I'm not sure if this is the best place to address this issue but I > imagine others here are seeing this too. > > -john > > > Testing updated database file: spam.ldb > gpg: Signature made Wed Apr 01 06:58:42 2009 PDT using DSA key ID 31EA4D9E > gpg: Good signature from "Sanesecurity (Sanesecurity Signatures) > " > Clamscan reports spam.ldb database integrity tested BAD - SKIPPING > > Testing updated database file: sanesecurity.ftm > gpg: Signature made Fri Mar 20 12:18:25 2009 PDT using DSA key ID 31EA4D9E > gpg: Good signature from "Sanesecurity (Sanesecurity Signatures) > " > Clamscan reports sanesecurity.ftm database integrity tested BAD - SKIPPING What happens if you try to load the database file directly? Try, for example: clamscan -d /path/to/spam.ldb /dev/null If it reports no error, then the most likely problem is that the script cannot locate the clamscan utility. Confirm that the location of clamscan is within your script's path statement. If that doesn't resolve it, contact me off-list, as this is not a ClamAV problem. Bill ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] Sane Security defs integrity test fail
Does anyone have an idea why the following 2 Sane Security Defs (used within ClamAV) are consistently (since I have started using them) failing the integrity test ? I'm not sure if this is the best place to address this issue but I imagine others here are seeing this too. -john Testing updated database file: spam.ldb gpg: Signature made Wed Apr 01 06:58:42 2009 PDT using DSA key ID 31EA4D9E gpg: Good signature from "Sanesecurity (Sanesecurity Signatures) " Clamscan reports spam.ldb database integrity tested BAD - SKIPPING Testing updated database file: sanesecurity.ftm gpg: Signature made Fri Mar 20 12:18:25 2009 PDT using DSA key ID 31EA4D9E gpg: Good signature from "Sanesecurity (Sanesecurity Signatures) " Clamscan reports sanesecurity.ftm database integrity tested BAD - SKIPPING -- John Goubeaux Systems Administrator Gevirtz Graduate School of Education UC Santa Barbara Phelps Hall 3534 805 893-8190 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] 0.95 compile problem on FreeBSD 4.8
> Anyone still using FreeBSD 4.x is on their own to make the ports tree work, > and would probably be better of installing/managing software on their own. > Which is what I've been doing. Upgrading GCC didn't do anything to help my cause and in_addr_t is declared in netinet/in.h as expected. I'm at a loss. No big deal, the plan was to retire this box this spring/summer anyway, but I was hoping that I was missing something simple that might enable me to limp along until then. Looks like this particular upgrade will be bumped up in priority. Thanks for the quick replies and suggestions. -S ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] AIX support
Hi List, On the bugzilla we see a raising amount of AIX related tickets. According to them, stuff that works on every other *nix tends to fail miserably and randomly on AIX. For those who care about AIX support, please be aware that we currently have no chance to hunt these bugs down due to lack of such platform in our compile/test farm. This means that most of those bug reports will not be processed at all. If you feel like opening up a *permanent* shell access to your AIX box for the clamav developers please contact me or edwin privately. As with other borrowed resources we are careful not to disrupt running services. We also take limited cpu and ram only when actively compiling or running tests. Thanks, -aCaB ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Problems with clamdscan : access denied
On Wed, Apr 1, 2009 at 18:59, Dale Patterson wrote: <---SNIP---> > When I invoke clamdscan [filename or folder] I get > dpatt...@quarantine:~$ clamdscan po.conf > /home/dpatters/po.conf: Access denied. ERROR > > This happens on all directories except /tmp. My directories are world > readable and executable, as are the files. The clamd user is clamav. So, the user clamav almost certainly doesn't have access to the file. Have you considered using clamscan (as a user with access to the file) instead? -- Please keep list traffic on the list. Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] Problems with clamdscan : access denied
I have searched through the archives and can't find a solution to my problem. I have a fresh install of Ubuntu 8.10 and installed clamav through its Synaptic Package Manager. It installed version 0.94.2. When I invoke clamdscan [filename or folder] I get dpatt...@quarantine:~$ clamdscan po.conf /home/dpatters/po.conf: Access denied. ERROR This happens on all directories except /tmp. My directories are world readable and executable, as are the files. The clamd user is clamav. There is no AppArmor running (I did a ps and a ps | grep apparmor with variations and found nothing.) Also, another piece of software I have installed needs to use clamdscan does not make use of the pipe ( clamdscan - < file name -- this does work.) I've also set clamav to listen to tcpsocket 3310 and then telneted there to execute commands. I get the same access denied response. I tried this because the piece of software I have needs to communicate with clamav by that port. In short none of the excellent clues and hints I've found in the mailing list archives and on the net in general have solved this problem for me. Any ideas? Thanks so much. -- Dale Patterson ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] Can't get information about user vscan
Hi, Im running a freebsd 7.1 / postfix server setup, where I use clamav to scan for viruses. After an upgrade last weekend, im now getting: "Can't get information about user vscan". The configuration file is still mine and it states that is uses the vscan user, and i have checked and the user is still in the system. Google says that the problem is that the user isnt in /etc/passwd. Please advice. Best regards, Ebbe ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] 0.95 compile problem on FreeBSD 4.8
On April 1, 2009 8:13 am Mark wrote: > -Original Message- > From: clamav-users-boun...@lists.clamav.net > [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Steffan > Vigano Sent: dinsdag 31 maart 2009 23:01 > To: clamav-users@lists.clamav.net > Subject: [Clamav-users] 0.95 compile problem on FreeBSD 4.8 > > > We're getting compilation errors trying to compile the latest version > > on an older FreeBSD box. Prior to 0.95 all versions compiled up fine > > and we are not seeing the same thing on some of our newer fBSD > > machines. No special switches during configure, we just use the > > vanilla: ../configure, make, make install. I've trolled the mailing > > list, Google, etc and can't find anything that stands out. Can anyone > > shed some light? > > Running ./configure seems to suggest you weren't installing from ports. > Correct? If so, that's not very wise (unless you REALLY know what you're > doing,) as the ports usually contain specific, local FreeBSD patches. > > I'm still using a FreeBSD 4.11 system myself, and so far so good. :) For > stuff that won't compile any more, what's to stop you from going to > /usr/ports/lang/gcc44, and compile yourself a shiny new compiler? The FreeBSD ports tree removed support for 4.x systems many a year ago. Using the ports tree updated beyond the EOL date is not guaranteed to work, and no PRs or bug reports will be looked at if using a 4.x system. Anyone still using FreeBSD 4.x is on their own to make the ports tree work, and would probably be better of installing/managing software on their own. -- Freddie fjwc...@gmail.com ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] 0.95 compile problem on FreeBSD 4.8
-Original Message- From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Steffan Vigano Sent: dinsdag 31 maart 2009 23:01 To: clamav-users@lists.clamav.net Subject: [Clamav-users] 0.95 compile problem on FreeBSD 4.8 > We're getting compilation errors trying to compile the latest version > on an older FreeBSD box. Prior to 0.95 all versions compiled up fine > and we are not seeing the same thing on some of our newer fBSD > machines. No special switches during configure, we just use the > vanilla: ../configure, make, make install. I've trolled the mailing > list, Google, etc and can't find anything that stands out. Can anyone > shed some light? Running ./configure seems to suggest you weren't installing from ports. Correct? If so, that's not very wise (unless you REALLY know what you're doing,) as the ports usually contain specific, local FreeBSD patches. I'm still using a FreeBSD 4.11 system myself, and so far so good. :) For stuff that won't compile any more, what's to stop you from going to /usr/ports/lang/gcc44, and compile yourself a shiny new compiler? - Mark ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Probelm with clamdscan in ClamAV 0.95
At 7:41 AM -0600 4/1/09, s...@softhome.net wrote: >I had no problem in installing ClamAV 0.95 on my Macintosh with OS X 10.4.11 >like before. Also with earlier versions after running freshclam I used to >get the confirmation 'Clamd successfully notified about the update.' I am >getting the same response from 0.95 > >Again with earlier versions I sometimes scanned a file on Terminal with >clamdscan without any problem. With 0.95 however I get an error: > >ERROR: Command rejected by clamd (wrong clamd version?) > >What does it mean and how can it be corrected? > >I had uninstalled 0.94.2 before installing 0.95. Sounds like you didn't kill clamd and restart the new clamd. If you are using launchd to run it, just kill the existing clamd and then launchd should restart the new of if you have launchd set correctly. Tom ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Probelm with clamdscan in ClamAV 0.95
On 2009-04-01 16:41, s...@softhome.net wrote: > I had no problem in installing ClamAV 0.95 on my Macintosh with OS X 10.4.11 > like before. Also with earlier versions after running freshclam I used to > get the confirmation 'Clamd successfully notified about the update.' I am > getting the same response from 0.95 > > Again with earlier versions I sometimes scanned a file on Terminal with > clamdscan without any problem. With 0.95 however I get an error: > > ERROR: Command rejected by clamd (wrong clamd version?) > > What does it mean and how can it be corrected? > It means that an 0.95 clamdscan is trying to talk to an 0.94.x clamd, or that clamd was built differently than clamdscan. > I had uninstalled 0.94.2 before installing 0.95. > Did you restart clamd? What does clamdscan --version say? Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Probelm with clamdscan in ClamAV 0.95
I had no problem in installing ClamAV 0.95 on my Macintosh with OS X 10.4.11 like before. Also with earlier versions after running freshclam I used to get the confirmation 'Clamd successfully notified about the update.' I am getting the same response from 0.95 Again with earlier versions I sometimes scanned a file on Terminal with clamdscan without any problem. With 0.95 however I get an error: ERROR: Command rejected by clamd (wrong clamd version?) What does it mean and how can it be corrected? I had uninstalled 0.94.2 before installing 0.95. Cheers ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Starting Clam AntiVirus Daemon: LibClamAV Warning: Cannot dlopen: file not found - unrar support unavailable
Hello Török Edwin, I have created a symlink, and it works. Thanks for your help. greetings Ralf Török Edwin schrieb: > On 2009-04-01 10:50, Ralf Heidenreich wrote: >> Hello, >> >> I have updated clamav to version 0.95-1. >> I know there is a bug within, see subject. >> Does anybody knows, when the bug is fixed? >> I have installed the RPM clamav-0.95-1.el5.rf.x86_64.rpm and >> clamav-db-0.95-1.el5.rf.x86_64.rpm >> on my Centos 5 from http://packages.sw.be/clamav/ > > Make sure there is a symlink /usr/lib64/libclamunrar_iface.so -> > /usr/lib64/libclamunrar_iface.so.6, run ldconfig again if necessary. > > Best regards, > --Edwin > ___ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] 0.95 compile problem on FreeBSD 4.8
On 2009-03-31 23:50, Steffan Vigano wrote: > Hello, > > We're getting compilation errors trying to compile the latest version on > an older FreeBSD box. FreeBSD 4.x is EOL http://www.freebsd.org/portmgr/policies_releng_4.html See here for the list of current releases: http://www.freebsd.org/security/#sup Is there a reason why you can't upgrade to a supported FreeBSD release? Running an EOLed product is not wise, as there may be known security issues without a fix available. > Prior to 0.95 all versions compiled up fine and > we are not seeing the same thing on some of our newer fBSD machines. > No special switches during configure, we just use the vanilla: > ./configure, make, make install. I've trolled the mailing list, > Google, etc and can't find anything that stands out. Can anyone shed > some light? > > Thanks > -S > > As of 0.95 I'm now seeing the following during our make: > > >> SNIP - >> libtool: link: ( cd ".libs" && rm -f >> "libclamav_internal_utils_nothreads.la" && ln -s >> "../libclamav_internal_utils_nothreads.la" >> "libclamav_internal_utils_nothreads.la" ) >> Making all in clamscan >> gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I.. -I.. -I../shared >> -I../libclamav -I/usr/local/include -O2 -I/usr/local/include -MT >> output.o -MD -MP -MF .deps/output.Tpo -c -o output.o `test -f >> '../shared/output.c' || echo './'`../shared/output.c >> mv -f .deps/output.Tpo .deps/output.Po >> gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I.. -I.. -I../shared >> -I../libclamav -I/usr/local/include -O2 -I/usr/local/include -MT >> getopt.o -MD -MP -MF .deps/getopt.Tpo -c -o getopt.o `test -f >> '../shared/getopt.c' || echo './'`../shared/getopt.c >> mv -f .deps/getopt.Tpo .deps/getopt.Po >> gcc -DHAVE_CONFIG_H -DCL_NOTHREADS -I. -I.. -I.. -I../shared >> -I../libclamav -I/usr/local/include -O2 -I/usr/local/include -MT >> optparser.o -MD -MP -MF .deps/optparser.Tpo -c -o optparser.o `test -f >> '../shared/optparser.c' || echo './'`../shared/optparser.c >> In file included from ../shared/misc.h:24, >> from ../shared/optparser.c:41: >> /usr/include/netinet/in.h:235: error: syntax error before "in_addr_t" >> Looks like in_addr_t is not declared in netinet/in.h as it should be. Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Starting Clam AntiVirus Daemon: LibClamAV Warning: Cannot dlopen: file not found - unrar support unavailable
On 2009-04-01 10:50, Ralf Heidenreich wrote: > Hello, > > I have updated clamav to version 0.95-1. > I know there is a bug within, see subject. > Does anybody knows, when the bug is fixed? > I have installed the RPM clamav-0.95-1.el5.rf.x86_64.rpm and > clamav-db-0.95-1.el5.rf.x86_64.rpm > on my Centos 5 from http://packages.sw.be/clamav/ Make sure there is a symlink /usr/lib64/libclamunrar_iface.so -> /usr/lib64/libclamunrar_iface.so.6, run ldconfig again if necessary. Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[Clamav-users] Starting Clam AntiVirus Daemon: LibClamAV Warning: Cannot dlopen: file not found - unrar support unavailable
Hello, I have updated clamav to version 0.95-1. I know there is a bug within, see subject. Does anybody knows, when the bug is fixed? I have installed the RPM clamav-0.95-1.el5.rf.x86_64.rpm and clamav-db-0.95-1.el5.rf.x86_64.rpm on my Centos 5 from http://packages.sw.be/clamav/ greetings Ralf ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
