Re: [Clamav-users] Problem after upgrade
> > >Yes, seems the message was coming from Qmail-Scanner. But the Clamd > consume > > >a lot of CPU resource. > > >I upgraded the new version for 11 servers. All servers have same > > >configuration (setting) and but only 1 server that gave me such error. > the > > >user of clamd. The user of clamd has not been changed since ClamAV > version > > >0.7x. I run the clamd with daemontools. > > Hi Todd, > > > Typically you spawn apps with softlimit in the qmail world. Tests: > > 1) Remove softlimit completely. It will probably start to work. > > The Clamd run under daemontools with a very high CPU usage. The qmail did > not directly use (load) Clamd but through Qmail-scanner. Jim explained that > Clamd did not work well (yes, it is). Of course, Qmail-scanner unable run > well without "normal" clamd. > > I am very curios, why clamd run with a very high CPU usage. Hi All, I re-installed the latest version of ClamAV from very beginning. seems it work normally now. Thx & Rgds, Awie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Problem after upgrade
> >Yes, seems the message was coming from Qmail-Scanner. But the Clamd consume > >a lot of CPU resource. > >I upgraded the new version for 11 servers. All servers have same > >configuration (setting) and but only 1 server that gave me such error. the > >user of clamd. The user of clamd has not been changed since ClamAV version > >0.7x. I run the clamd with daemontools. Hi Todd, > Typically you spawn apps with softlimit in the qmail world. Tests: > 1) Remove softlimit completely. It will probably start to work. The Clamd run under daemontools with a very high CPU usage. The qmail did not directly use (load) Clamd but through Qmail-scanner. Jim explained that Clamd did not work well (yes, it is). Of course, Qmail-scanner unable run well without "normal" clamd. I am very curios, why clamd run with a very high CPU usage. Thx & Rgds, Awie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Problem after upgrade
> >>> After upgrading to ClamAV 0.90.1, I got problem with message below: > >>> > >>> clamdscan: corrupt or unknown clamd scanner error or > > memory/resource/perms > >>> problem - exit status 512/2 > >>> > >>> Would you tell me the source of such problem? Your answer is very > >>> appreciated and waited for. > >>> > >>> > >> This is not a clamav issue. You are probably running clamd as a > >> different user or maybe your install configured things as a different > >> user than you had in the past. Check to see what user clamd is running > >> as and make sure all clamav directories are accessible by that user. > >> > >> Also, is clamd running? > >> > >> -Jim > > > > Thanks Jim, > > > > Yes, seems the message was coming from Qmail-Scanner. But the Clamd consume > > a lot of CPU resource. > > > > I upgraded the new version for 11 servers. All servers have same > > configuration (setting) and but only 1 server that gave me such error. the > > user of clamd. The user of clamd has not been changed since ClamAV version > > 0.7x. I run the clamd with daemontools. > > > > Does it related with "ldconfig -v" that I did not run it yet? > > > > Please advise. > > I dont really know. The error that qmail-scanner is giving you > basically means that clamdscan exited with an error for some reason. > > Is clamd running? Yes, it run with a very high CPU consumption > Can you manually clamdscan a file? I did not test it yet and I immediately removed (deactived) the Clamd from daemontools to reduce the CPU usage. I plan to re-install the ClamAV Thx & Rgds, Awie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Problem after upgrade
> > After upgrading to ClamAV 0.90.1, I got problem with message below: > > > > clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms > > problem - exit status 512/2 > > > > Would you tell me the source of such problem? Your answer is very > > appreciated and waited for. > > > > > > This is not a clamav issue. You are probably running clamd as a > different user or maybe your install configured things as a different > user than you had in the past. Check to see what user clamd is running > as and make sure all clamav directories are accessible by that user. > > Also, is clamd running? > > -Jim Thanks Jim, Yes, seems the message was coming from Qmail-Scanner. But the Clamd consume a lot of CPU resource. I upgraded the new version for 11 servers. All servers have same configuration (setting) and but only 1 server that gave me such error. the user of clamd. The user of clamd has not been changed since ClamAV version 0.7x. I run the clamd with daemontools. Does it related with "ldconfig -v" that I did not run it yet? Please advise. Thx & Rgds, Awie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Problem after upgrade
Hi all, After upgrading to ClamAV 0.90.1, I got problem with message below: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 Would you tell me the source of such problem? Your answer is very appreciated and waited for. Thx & Rgds, Awie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] WARNING: Your ClamAV installation is OUTDATED!
>no, no need to reinstall. One of the recent cvd had the wrong >functionality level. We published an update and now the warning should >be gone. >Sorry for the trouble. Thanks a lot, Luca ! Thx & Rgds, Awie - Original Message - From: "Luca Gibelli" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Friday, November 03, 2006 06:25 Subject: Re: [Clamav-users] WARNING: Your ClamAV installation is OUTDATED! > ___ > http://lurker.clamav.net/list/clamav-users.html > ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] WARNING: Your ClamAV installation is OUTDATED!
My ClamAV version is 0.88.5, but I got message below. Should I re-download and re-install the 0.88.5 or using the RC (that unstable) version? Thx & Rgds, Awie --SNIP-- ClamAV update process started at Fri Nov 3 04:32:43 2006 Querying current.cvd.clamav.net TTL: 844 Software version from DNS: 0.88.5 main.cvd version from DNS: 40 main.cvd is up to date (version: 40, sigs: 64138, f-level: 8, builder: tkojm) daily.cvd version from DNS: 2151 daily.cvd is up to date (version: 2151, sigs: 11160, f-level: 10, builder: ccordes) WARNING: Your ClamAV installation is OUTDATED! WARNING: Current functionality level = 9, recommended = 10 DON'T PANIC! Read http://www.clamav.net/faq.html Freeing option list...done ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Freshclam fall back to HTTP
THANKS A LOT to Tomasz, Guy, Daniel and others. I decide to use NTP to sync my machine time and it works !!! Freshclam run in DNS mode. My apologize to Tomasz for ignoring his advise to check system time. Again, thanks a lot. Thx & Rgds, Awie - Original Message - From: "Daniel J McDonald" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Tuesday, May 17, 2005 10:56 PM Subject: Re: [Clamav-users] Freshclam fall back to HTTP > On Tue, 2005-05-17 at 22:39 +0800, Awie wrote: > > Hi Guy, > > > > This is the captured text from Ethereal (Text mode) > > > > > > I open 2 screen console > > > > Screen 1: > > > > [EMAIL PROTECTED] src]# tethereal -F libpcap -f udp > > add -V so we can see the packet details. > > -- > Daniel J McDonald, CCIE # 2495, CNX > Austin Energy > > [EMAIL PROTECTED] > > ___ > http://lurker.clamav.net/list/clamav-users.html > ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Freshclam fall back to HTTP
Hi Guy, This is the captured text from Ethereal (Text mode) I open 2 screen console Screen 1: [EMAIL PROTECTED] src]# tethereal -F libpcap -f udp Capturing on eth0 0.00 202.136.73.3 -> 202.136.64.52 DNS Standard query TXT current.cvd.clamav.net 0.707822 202.136.64.52 -> 202.136.73.3 DNS Standard query response TXT 0.708643 202.136.73.3 -> 202.136.64.52 DNS Standard query A db.sg.clamav.net 2.520258 202.136.64.52 -> 202.136.73.3 DNS Standard query response A 203.81.37.58 Screen 2: [EMAIL PROTECTED] root]# freshclam ClamAV update process started at Tue May 17 22:39:18 2005 WARNING: DNS record is older than 3 hours. WARNING: Invalid DNS reply. Falling back to HTTP mode. Reading CVD header (main.cvd): OK (IMS) main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder: tkojm) Reading CVD header (daily.cvd): OK daily.cvd is up to date (version: 882, sigs: 1320, f-level: 5, builder: arnaud) Please advise. Thx & Rgds, Awie - Original Message - From: "Guy Van Den Bergh" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Tuesday, May 17, 2005 9:46 PM Subject: Re: [Clamav-users] Freshclam fall back to HTTP > On Tue, 2005-05-17 at 15:34, Awie wrote: > > > > > > All is looking good as far as I'm concerned. > > > I would start sniffing on your server (with ethereal) to see what's > > > happening on the wire. Any experience with that? > > > > > > > I never use Ethereal (for Linux) before. However, I will learn how to use > > it. > > One last hint: use a filter like "udp port 53" to see only dns traffic. > Otherwise you will probably get lots and lots of noise. > > > > > I will inform you when I will be ready. Thanks for your kind help. > > Good luck! > > -- > Guy Van Den Bergh > Netwerkbeheerder > Hogeschool Antwerpen > > http://www.ha.be > ___ > http://lurker.clamav.net/list/clamav-users.html > ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Freshclam fall back to HTTP
> > > > Below attached lines in the file > > All is looking good as far as I'm concerned. > I would start sniffing on your server (with ethereal) to see what's > happening on the wire. Any experience with that? > I never use Ethereal (for Linux) before. However, I will learn how to use it. I will inform you when I will be ready. Thanks for your kind help. Thx & Rgds, Awie ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Freshclam fall back to HTTP
> This looks fine to me. > My DNS servers were messing up the expiration time (900 seconds right > here, as it should be...). > > In my freshclam.conf, I have a section that says: > > # Use DNS to verify virus database version. Freshclam uses DNS TXT > records > # to verify database and software versions. We highly recommend enabling > # this option. > # Default: disabled > DNSDatabaseInfo current.cvd.clamav.net I use a new freshclam.conf. > -- > What is your configuration? > Does it have a DNSDatabaseInfo directive? > Maybe you're still using a configuration file from a previous version, > from before the DNSDatabasInfo days? Below attached lines in the file > (just guessing, I have no clue what else could be happening at this > point.) . :( Thx & Rgds, Awie ---SNIP--- [EMAIL PROTECTED] src]# cat /usr/local/etc/freshclam.conf ## ## Example config file for freshclam ## Please read the clamav.conf(5) manual before editing this file. ## This file may be optionally merged with clamav.conf. ## # You can change the default database directory here. #DatabaseDirectory /var/lib/clamav # Path to the config file (make sure it has proper permissions) #UpdateLogFile /var/log/freshclam.log # Enable verbose logging. #LogVerbose # By default when freshclam is started by root it drops privileges and # switches to the "clamav" user. You can change this behaviour here. #DatabaseOwner clamav # Use DNS to verify virus database version. Freshclam uses DNS TXT records # to verify database and software versions. With this directive you can change # the database verification domain. # Default: enabled, pointing to current.cvd.clamav.net DNSDatabaseInfo current.cvd.clamav.net # The main database mirror is database.clamav.net (this is a round-robin # DNS that points to many mirrors on the world) and in most cases you # SHOULD NOT change it. DatabaseMirror db.sg.clamav.net DatabaseMirror database.clamav.net # How many attempts to make before giving up. MaxAttempts 3 # How often check for a new database. We suggest checking for it every # two hours. Checks 12 # Proxy settings #HTTPProxyServer myproxy.com #HTTPProxyPort 1234 #HTTPProxyUsername myusername #HTTPProxyPassword mypass # Send the RELOAD command to clamd. #NotifyClamd [/optional/config/file/path] # Run command after database update. #OnUpdateExecute command # Run command if database update failed. #OnErrorExecute command ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Freshclam fall back to HTTP
Hello, > > System time? > > Or maybe your local DNS servers. > > I had a similar problem a few weeks ago. > I was using Windows 2000 DNS servers, and they were having trouble > caching the TXT record for ClamAV updates. Restarting the DNS server > services on the Windows machines helped me out. > > You can ask your local dns server what it knows about clamav updates > with the command: > > dig current.cvd.clamav.net txt Below the result of dig in my machine. It seems can reach current.cvd.clamav.net. Please advise. Thx & Rgds, Awie ===SNIP=== [EMAIL PROTECTED] root]# dig current.cvd.clamav.net txt ; <<>> DiG 9.2.4 <<>> current.cvd.clamav.net txt ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35447 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;current.cvd.clamav.net.IN TXT ;; ANSWER SECTION: current.cvd.clamav.net. 900 IN TXT "0.85.1:31:882:1116329341:0" ;; Query time: 1482 msec ;; SERVER: 202.136.64.52#53(202.136.64.52) ;; WHEN: Tue May 17 19:54:59 2005 ;; MSG SIZE rcvd: 79 ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Freshclam fall back to HTTP
> On Tue, 2005-05-17 at 12:12, Tomasz Kojm wrote: > > On Tue, 17 May 2005 12:50:58 +0800 > > "Awie" <[EMAIL PROTECTED]> wrote: > > > > WARNING: DNS record is older than 3 hours. > > > > [...] > > > > > but why Freshclam cannot run in DNS? What things should I fix? > > > > System time? System time seems OK. Below the display. [EMAIL PROTECTED] root]# date Tue May 17 19:52:57 EDT 2005 Thx & Rgds, Awie ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Freshclam fall back to HTTP
All, I cannot run Freshclam in DNS mode, it always fall back to HTTP. Below attached the message from my machine; [EMAIL PROTECTED] root]# freshclam ClamAV update process started at Tue May 17 12:43:32 2005 WARNING: DNS record is older than 3 hours. WARNING: Invalid DNS reply. Falling back to HTTP mode. Reading CVD header (main.cvd): OK (IMS) main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder: tkojm) Reading CVD header (daily.cvd): OK (IMS) daily.cvd is up to date (version: 880, sigs: 1312, f-level: 5, builder: ccordes) Then I check the DNS resolv; --- SNIP --- [EMAIL PROTECTED] root]# host -t txt current.cvd.clamav.net current.cvd.clamav.net text "0.85.1:31:881:1116300541:0" [EMAIL PROTECTED] root]# nslookup current.cvd.clamav.net Server: 202.155.0.10 Address:202.155.0.10#53 Non-authoritative answer: *** Can't find current.cvd.clamav.net: No answer -- Compare to resolve yahoo.com ---SNIP--- [EMAIL PROTECTED] root]# nslookup yahoo.com Server: 202.155.0.10 Address:202.155.0.10#53 Non-authoritative answer: Name: yahoo.com Address: 66.94.234.13 Name: yahoo.com Address: 216.109.112.135 --- The DNS can get the TXT record (not A record) of current.cvd.clamav.net, but why Freshclam cannot run in DNS? What things should I fix? Your answer is very appreciated Thx & Rgds, Awie ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Freshclam with OpenNA Linux
All, I found a different Freshclam result in Linux RH 9 and OpenNA Linux 1.0. In OpenNA Linux 1.0, I *always* cannot run Freshclam with DNS (always fall to HTTP Mode), even I use same hardware, ISP and DNS Server. Does someone have same experience and solution of this issue? Thx & Rgds, Awie ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Still cannot get daily.cvd update
All, I still get problem (perhaps my misunderstanding of update mechanism). I cannot get the latest of daily.cvd. Yesterday, I updgrade to .85 and my daily.cvd was still version 874. Then I forced to retrieve the update by deleting the file and did Freshclam. ClamAV got the latest update (875). Today the daily is 876, but I cannot get the update (progress as below) Would someone tell me the mechanism of update progress? Does the update based on date of file? Thx & Rgds, Awie === SNIP === -rw-r--r--1 clamav users 142007 May 12 19:35 daily.cvd -rw-rw-r--1 clamav clamav2014018 May 9 05:03 main.cvd Current working dir is /usr/local/share/clamav Max retries == 3 ClamAV update process started at Fri May 13 10:57:02 2005 Connected to database.clamav.net (IP: 61.8.0.16). Trying to retrieve http://database.clamav.net/main.cvd If-Modified-Since: Mon, 09 May 2005 09:03:20 GMT Reading CVD header (main.cvd): OK (IMS) main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder: tkojm) Connected to database.clamav.net (IP: 61.8.0.16). Trying to retrieve http://database.clamav.net/daily.cvd If-Modified-Since: Thu, 12 May 2005 23:35:41 GMT Reading CVD header (daily.cvd): OK (IMS) daily.cvd is up to date (version: 875, sigs: 1218, f-level: 4, builder: diego) Freeing option list...done ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Cannot get new update
> > I found that my Freshclam cannot get new update (latest is 871, mine is > > still 870). I use HTTP mode instead of --enable-DNS > > > > Is my IP in blacklist? What is the symptom to be blacklisted? > > I re-installed the ClamAV from very begining, the database is updated now Today I found exactly same problem the daily.cvd is 872, mine is still 871 (after doing re-installation). I compare to some other machines (have same setting with ours), they can update the daily.cvd very well. Would someone tell me what source of this problem? Thx & Rgds, Awie ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Cannot get new update
> I found that my Freshclam cannot get new update (latest is 871, mine is > still 870). I use HTTP mode instead of --enable-DNS > > Is my IP in blacklist? What is the symptom to be blacklisted? I re-installed the ClamAV from very begining, the database is updated now Thx & Rgds, Awie ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Cannot get new update
All, I found that my Freshclam cannot get new update (latest is 871, mine is still 870). I use HTTP mode instead of --enable-DNS Is my IP in blacklist? What is the symptom to be blacklisted? Thx & Rgds, Awie ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Clamd.conf setting
> > > >I found clamd write the LOG into /var/log/message. I want clamdscan not > >write LOG anymore. What parameter shoudl I remove or add in clamd.conf? > > > in /etc/clamd.conf > > # Use system logger (can work together with LogFile). > LogSyslog > > Comment out the LogSyslog line and restart clamd. > -- > Steve Thanks Steve. I did not restart clamd after editing clamd.conf, that's why clamd still wrote LOG. Thx & Rgds, Awie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Clamd.conf setting
> > I found clamd write the LOG into /var/log/message. I want clamdscan not > > write LOG anymore. What parameter shoudl I remove or add in clamd.conf? > > > It is recommended to have a look at the manual page(s) before asking > questions to the list. Yes, I did. > Anyway, remove or disable the "LogSyslog" directive in clamd.conf will > do what you want. And I did it, but clamd is still write LOG to /var/log/message. That's why I post a question here. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Clamd.conf setting
All, I found clamd write the LOG into /var/log/message. I want clamdscan not write LOG anymore. What parameter shoudl I remove or add in clamd.conf? Your answer is very appreciated. Thx & Rgds, Awie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] buglet in how clamdscan reports perm issues
> Keep up the good work guys - ClamAV is superb!!! This means QS will continue support ClamAV, right. :D Thx & Rgds, Awie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] New version Clamd with Daemontools
> > However, Qmail-scanner still has unrecognize command that I sure it should > > be OK. > > > > Wed, 20 Oct 2004 11:50:22 EDT:4600: run > > /usr/local/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space > > =10 /var/spool/qmailscan/tmp/Cybergate10982874224824600 2>&1 > > > > WARNING: Ignoring option -r: please edit clamd.conf instead. > > > > WARNING: Ignoring option --max-recursion: please edit clamd.conf instead. > > > > WARNING: Ignoring option --max-space: please edit clamd.conf instead. > > > > Not OK. These command-line options were never supported in clamdscan. > They were just silently ignored previously. Now the explicit warnings > are printed. So far my system run well (around 4 hours since upgraded), with those condition. The command run well in the older version of Clamdscan. It is indicated I did not find the WARNING. However, it is better not running unsupported parameter. > Type 'man clamdscan' or 'clamdscan -h' for the list of accepted > command-line options. Other options can be enabled in clamd.conf, as > shown in the warnings. Yes, there is no parameter above that be supported by version 0.80. I have email the developer of Qmail-Scanner to change their code to remove the wrong line. As it is not ClamAV portion to fix those issue. Thx & Rgds, Awie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] New version Clamd with Daemontools
Finally I can supervise new version of clamd. There are some parameter of clamav.conf that no need anymore in clamd.conf. After editing some lines, it works well. However, Qmail-scanner still has unrecognize command that I sure it should be OK. Wed, 20 Oct 2004 11:50:22 EDT:4600: run /usr/local/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space =10 /var/spool/qmailscan/tmp/Cybergate10982874224824600 2>&1 WARNING: Ignoring option -r: please edit clamd.conf instead. WARNING: Ignoring option --max-recursion: please edit clamd.conf instead. WARNING: Ignoring option --max-space: please edit clamd.conf instead. /var/spool/qmailscan/tmp/Cybergate10982874224824600: OK Thx & Rgds, Awie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] New version Clamd with Daemontools
All, When will the version of ClamAV 0.75-1 be expired? I hope it will be after I solve my problem of supervise clamd of new version. Thx & Rgds, Awie - Original Message - From: "Awie" <[EMAIL PROTECTED]> To: "ClamAV users ML" <[EMAIL PROTECTED]> Sent: Tuesday, October 19, 2004 7:57 PM Subject: Re: [Clamav-users] New version Clamd with Daemontools > > I use daemontools to run clamd. > > I didn't change a thing when upgrading from 0.75.1 > > to 0.80rc-series, and 0.80 final. > > > > My run script and clamd.conf attached. > > > > Regards, > > Niek > > -- > > Hello Niek, > > I used your script and clamd.conf. The readproctitle said error in > Library..bla.. bla... > > Then I renamed my clamav.conf to clamd.conf, below my readproctitle said: > > root 590 0.0 0.0 1332 232 ?S19:39 0:00 readproctitle > service errors: ...en file or directory?Warning: bad sy > root 591 0.0 0.1 1340 268 ?S19:39 0:00 supervise > clamd > root 592 0.0 0.1 1340 268 ?S19:39 0:00 supervise log > root 593 0.0 0.1 1340 268 ?S19:39 0:00 supervise > qmail-smtpd > root 594 0.0 0.1 1340 268 ?S19:39 0:00 supervise log > root 595 0.0 0.1 1340 268 ?S19:39 0:00 supervise > qmail-send > root 596 0.0 0.1 1340 268 ?S19:39 0:00 supervise log > root 597 0.0 0.1 1340 268 ?S19:39 0:00 supervise > dnscache > root 598 0.0 0.1 1340 268 ?S19:39 0:00 supervise log > qscand 600 0.0 0.1 1352 268 ?S19:39 0:00 > /usr/local/bin/multilog t s100 n20 /var/log/clamd > qmaild 601 0.0 0.1 1412 448 ?S19:39 0:00 > /usr/local/bin/tcpserver -v -R -H -l 0 -x /etc/tcp.smtp.cdb -c 20 -u > qmails 602 0.0 0.1 1392 352 ?S19:39 0:00 qmail-send > qmaill 603 0.0 0.1 1352 268 ?S19:39 0:00 > /usr/local/bin/multilog t /var/log/qmail/smtpd > qmaill 604 0.0 0.1 1352 268 ?S19:39 0:00 > /usr/local/bin/multilog t /var/log/qmail > dnscache 605 0.0 11.5 30968 29660 ? S19:39 0:00 > /usr/local/bin/dnscache > dnslog 606 0.0 0.1 1352 268 ?S19:39 0:00 multilog t > ./main > root 616 0.0 0.1 1352 292 ?S19:39 0:00 qmail-lspawn > ./Mailbox > qmailr 617 0.0 0.1 1348 292 ?S19:39 0:00 qmail-rspawn > qmailq 618 0.0 0.1 1344 300 ?S19:39 0:00 qmail-clean > root 1951 0.0 0.0 00 ? Z19:46 0:00 [run] > > > I followed all of Jesse's script (I attached it) that be included in old > version of ClamAV. > > Does clamd.conf have different parameter from clamav.conf? > > Thx & Rgds, > > Awie > > > ___ > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] New version Clamd with Daemontools
> I use daemontools to run clamd. > I didn't change a thing when upgrading from 0.75.1 > to 0.80rc-series, and 0.80 final. > > My run script and clamd.conf attached. > > Regards, > Niek > -- Hello Niek, I used your script and clamd.conf. The readproctitle said error in Library..bla.. bla... Then I renamed my clamav.conf to clamd.conf, below my readproctitle said: root 590 0.0 0.0 1332 232 ?S19:39 0:00 readproctitle service errors: ...en file or directory?Warning: bad sy root 591 0.0 0.1 1340 268 ?S19:39 0:00 supervise clamd root 592 0.0 0.1 1340 268 ?S19:39 0:00 supervise log root 593 0.0 0.1 1340 268 ?S19:39 0:00 supervise qmail-smtpd root 594 0.0 0.1 1340 268 ?S19:39 0:00 supervise log root 595 0.0 0.1 1340 268 ?S19:39 0:00 supervise qmail-send root 596 0.0 0.1 1340 268 ?S19:39 0:00 supervise log root 597 0.0 0.1 1340 268 ?S19:39 0:00 supervise dnscache root 598 0.0 0.1 1340 268 ?S19:39 0:00 supervise log qscand 600 0.0 0.1 1352 268 ?S19:39 0:00 /usr/local/bin/multilog t s100 n20 /var/log/clamd qmaild 601 0.0 0.1 1412 448 ?S19:39 0:00 /usr/local/bin/tcpserver -v -R -H -l 0 -x /etc/tcp.smtp.cdb -c 20 -u qmails 602 0.0 0.1 1392 352 ?S19:39 0:00 qmail-send qmaill 603 0.0 0.1 1352 268 ?S19:39 0:00 /usr/local/bin/multilog t /var/log/qmail/smtpd qmaill 604 0.0 0.1 1352 268 ?S19:39 0:00 /usr/local/bin/multilog t /var/log/qmail dnscache 605 0.0 11.5 30968 29660 ? S19:39 0:00 /usr/local/bin/dnscache dnslog 606 0.0 0.1 1352 268 ?S19:39 0:00 multilog t ./main root 616 0.0 0.1 1352 292 ?S19:39 0:00 qmail-lspawn ./Mailbox qmailr 617 0.0 0.1 1348 292 ?S19:39 0:00 qmail-rspawn qmailq 618 0.0 0.1 1344 300 ?S19:39 0:00 qmail-clean root 1951 0.0 0.0 00 ?Z19:46 0:00 [run] I followed all of Jesse's script (I attached it) that be included in old version of ClamAV. Does clamd.conf have different parameter from clamav.conf? Thx & Rgds, Awie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] New version Clamd with Daemontools
All, I stuck to use clamd of version 0.80 with daemontools (I used this scheme very nicely for older version). Does anyone know how to do it? Thx & Rgds, Awie ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] ICAP
All, Will Clamav support ICAP? Please advise. Thx & Rgds, Awie --- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] GNU MP 3
Yes I make it work now. Seems I miss to install gmp-devel-4.1.2-2.i386.rpm. Thanks for your kind advise Thx & Rgds, Awie --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] GNU MP 3
All, As my previous problem to install version 0.66 on RH 9, then I check my error message I got from qmail-scanner X-Qmail-Scanner-1.20:[Server107666415546125773] clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms problem - exit status 50 50: Virus database initialization error. Probably it doesn't exist at the default location or it's malformed (e.g. broken digital signature) I saw an error message when running freshclam, that I think my ClamAV did not support DIGITAL SIGNATURES. SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES In ClamAV manual, there is statement "It's highly recommended to install the GNU MP 3 library in order to enable support for a database digital signatures." What RPM of RH9 should I install to get GNU MP 3 library and enabling DIGITAL SIGNATURES? I assume that DIGITAL SIGNATURES is the source of problem to "integrate" ClamAV 0.66 to qmail-scanner. Thx & Rgds, Awie --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Problem with version 0.66
Hi All, After upgrading my ClamAV to 0.66 and recompile qmail-scanner, my smtpd got problem with message "qq temporary problem" if I send email with big attachment. I tried to increase softlimit to 1200, but problem still happen (seems softlimit has no relation with such problem). Then I check into log file and found message below: X-Qmail-Scanner-1.20:[Cybergate107666415546125773] clamscan: corrupt or unknown ClamAV scanner error or memory/resource/perms problem - exit status 50 Then I downgrade the ClamAV to 0.65 (I used it for pretty long time), recompile qmail-scanner. And everything back to normal FYI, by using vesion 0.66, I can scan my HDD and do Freshclam normally Is it any suggestion? Thx & Rgds, Awie --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
