Re: [Clamav-users] can't download pgp sig to verify pkg.
Stephen Gran wrote: > On Fri, Jul 27, 2007 at 11:20:16AM -0300, Matias Lopez Bergero said: >> Thanks, but I have already try that way, and still the file is >> incomplete or it's something wrong with it. >> > -rw-r--r-- 1 steve steve 65 2007-07-16 22:11 clamav-0.91.1.tar.gz.sig > > What's the problem? > > Have you actually tried to use it to verify the tarball? Sorry, my mistake. I was sure I have done that, but now I have checked the signature and everything looks good. It seems that due to the strange output of the cat command(to me), I never tried to verify the file. But doing so turns out OK. [EMAIL PROTECTED] ~ $ gpg --verify clamav-0.91.1.tar.gz.sig gpg: Signature made Mon Jul 16 17:59:38 2007 ART using DSA key ID 985A444B gpg: Good signature from "Tomasz Kojm <[EMAIL PROTECTED]>" gpg: aka "Tomasz Kojm <[EMAIL PROTECTED]>" gpg: aka "Tomasz Kojm <[EMAIL PROTECTED]>" Sorry again, I guess I'm being working to much. BR, Matias. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] can't download pgp sig to verify pkg.
René Berber wrote:
> Matias Lopez Bergero wrote:
>
>> I'm being trying to download the signature file to verify the clamav
>> source package integrity but I just can't do it. The file is corrupt or
>> something.
>
>> There is a direct server where I can download this files??? all the
>> source forge mirror are at the same situation...
>
> No need for that.
>
> `wget
> http://internap.dl.sourceforge.net/sourceforge/clamav/clamav-0.91.1.tar.gz.sig`
Thanks, but I have already try that way, and still the file is
incomplete or it's something wrong with it.
[EMAIL PROTECTED] ~ $ wget
http://internap.dl.sourceforge.net/sourceforge/clamav/clamav-0.91.1.tar.gz.sig
--11:15:13--
http://internap.dl.sourceforge.net/sourceforge/clamav/clamav-0.91.1.tar.gz.sig
=> `clamav-0.91.1.tar.gz.sig'
Resolving internap.dl.sourceforge.net... 64.74.219.5
Connecting to internap.dl.sourceforge.net|64.74.219.5|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 65 [application/x-tar]
100%[=>]
65--.--K/s
11:15:13 (7.24 MB/s) - `clamav-0.91.1.tar.gz.sig' saved [65/65]
[EMAIL PROTECTED] ~ $ file clamav-0.91.1.tar.gz.sig
clamav-0.91.1.tar.gz.sig: data
[EMAIL PROTECTED] ~ $ cat clamav-0.91.1.tar.gz.sig
�?F��:T�-��ZDKV��{�&]t���'��i v�b�� ���["[EMAIL PROTECTED]
~ $
[EMAIL PROTECTED] ~ $
What happened here? I am the only one trying to verify the sources files
integrity? or I am the only one with this problem?
BR,
Matias.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] can't download pgp sig to verify pkg.
Hello, I'm being trying to download the signature file to verify the clamav source package integrity but I just can't do it. The file is corrupt or something. There is a direct server where I can download this files??? all the source forge mirror are at the same situation... Thanks, BR! Matias. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Re: Getting permission denied with /dev/console on 0.85
Nigel Horne wrote: On Wednesday 11 May 2005 21:47, Nigel Horne wrote: On Wednesday 11 May 2005 21:34, Brett Simpson wrote: I'm getting a permission denied message when trying to start clamav-milter under version 0.85. I says "/dev/console: Permission denied" Operating system, PERLEASE. Oh yes, and what user code as you starting clamav-milter with, and what's the output of "ls -l /dev/console" same problem here, linux 2.4.30 on redhat box. ls -l /dev/console crw---1 root root 5, 1 Apr 12 10:00 /dev/console BR, Matías. ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Re: failed to send SCAN (null) command to clamd
George Chelidze wrote: Hello Krištof, Krištof Petr wrote: George Chelidze wrote: When it happens on next time, try to run clamdscan to check the clamd is running fine and problem is in clamav-milter itself. It happened again on database reload. I followed your advice and seems clamd is ok, clamav-milter fails. I'll try daily snapshot and reply back soon. With clamdscan works OK. I have tried the nightly snapshot a it's working good. BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: failed to send SCAN (null) command to clamd
George Chelidze wrote: Hello, I have yesterday upgraded to 0.82 on two servers (RedHat 7.3 kernel 2.4.24) yesterday morning and everything went fine. This morning I found that on both servers clamd is running but viruses are not detected. >[...] Same problem here My log is full of this messages: Feb 9 11:06:01 anubis clamav-milter[6296]: failed to send SCAN (null) command to clamd Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: unable to start clamav-milter, weird error.
Ken Jones wrote: Hello, I'm testing Clamav 0.81 for use with Sendmail 8.12 and update my current Clamav 0.80 installation, but I can't start clamav-milter. Wen I run clamav-milter like this: clamav-milter -D -d -e -H -o -N /var/run/clamav/clamav-milter.sock I get this error: Feb 3 19:04:58 probe clamav-milter[32666]: Starting ClamAV version 0.81, clamav-milter version 0.81b Feb 3 19:04:58 probe clamav-milter[32666]: ClamAv: Unable to bind to port /var/run/clamav/clamav-milter.sock: Address already in use clamd should use it's own sock not the same one as clamav-milter here is the entries from my directory: srwxrwxrwx 1 clamav clamav 0 Feb 2 09:31 clamd.sock srwxr-xr-x 1 clamav clamav 0 Feb 2 09:31 clmilter.sock :-X Thanks a lot Ken, I got the same config in the 0.80 version. Guess I need to sleep. BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] unable to start clamav-milter, weird error.
Hello, I'm testing Clamav 0.81 for use with Sendmail 8.12 and update my current Clamav 0.80 installation, but I can't start clamav-milter. Wen I run clamav-milter like this: clamav-milter -D -d -e -H -o -N /var/run/clamav/clamav-milter.sock I get this error: Feb 3 19:04:58 probe clamav-milter[32666]: Starting ClamAV version 0.81, clamav-milter version 0.81b Feb 3 19:04:58 probe clamav-milter[32666]: ClamAv: Unable to bind to port /var/run/clamav/clamav-milter.sock: Address already in use Feb 3 19:04:58 probe clamav-milter[32666]: ClamAv: Unable to create listening socket on conn /var/run/clamav/clamav-milter.sock Feb 3 19:04:58 probe clamav-milter[32666]: Stopping ClamAV version 0.81, clamav-milter version 0.81b Sounds weird to me because clamd is running and the socket it's there: srwxrwxrwx1 clamav clamav 0 Feb 3 19:04 /var/run/clamav/clamav-milter.sock What I'm doing wrong?? BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] clamav-milter -q ??
Hello, I would like to disable the virus intercepted message for postmaster, but keep it for the users who receive the email. There is a way to do this? BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: performace problems, need a hand
Nigel Horne wrote: On Wednesday 29 Dec 2004 20:26, Matias Lopez Bergero wrote: clamav-milter flags: --max-children=30 -HNfloCd -U /var/tmp/quarantine/ I'll look at the other options later, but first ask yourself if you really need the 'o' and 'f' flags. Yes, maybe the 'o' flag it's not required using the 'f' flag. I'll switch to the 'f' flag only. Question: Using only the -l option clamav-milter will scan the messages coming from Internet and my LAN? The thing is that the server it's in a DMZ, so, the LAN would be the DMZ right? BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: performace problems, need a hand
Nigel Horne wrote: What operating system? What options are you using to the various programs? Have you tried the version in CVS - is it better? Sorry, I forgot to answer the last question. No, I haven't tried the CVS version. Should I? I'm running a 'production environment' :-P BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: performace problems, need a hand
Nigel Horne wrote: What operating system? What options are you using to the various programs? Have you tried the version in CVS - is it better? Hi Nigel, Linux 2.4.22 it's a redhat distro. clamav-milter flags: --max-children=30 -HNfloCd -U /var/tmp/quarantine/ /var/run/clamav/clmilter.sock spamd flags: -d -c -m 10 this is the sendmail.mc part where I defined ths filters: dnl --- dnl milter-spamc dnl --- define(_FFR_MILTER)dnl INPUT_MAIL_FILTER( `milter-spamc', `S=unix:/var/run/milter-spamc/socket, T=C:1m;S:30s;R:6m;E:1m' )dnl dnl dnl clamav-milter dnl --- INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clmilter.sock, F=,T=S:4m;R:4m')dnl dnl define(`confINPUT_MAIL_FILTERS', `clamav')dnl BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] performace problems, need a hand
Hello, This probably isn't directly related to Clamav, but I'm not sure, and I think that this list is good place to ask about it :) My old mx server pass away, like most things does, and a new one came to replace it. The thing is that I'm having some problems with the speed of the SMTP/POP transactions, or communications with this new server. What I'm trying to say is... when I send an email, the time that the SMTP session is open is to long and I'm not sure what is cosing this, if it's Sendmail, Clamav, SA or something else. What I know is that this happens wen the Sendmail child goes up to 30 or at least I star to notes at that time. I have read the thread "Performance Help - 100% CPU usage" and I find many post there very interested, in particular the one that talks about the disk o/i bottle neck, maybe that is one of my problems. My server has an Intel Xeon 2.8GHz CPU with 1,5GB of memory, two SCSI HD and 1800 emails accounts, it's not big deal. I running Linux 2.4, Sendmail 8.12.11, ClamAV 0.80, clamav-milter 0.80j, SpamAssassin 3.0.1 and milter-spamc/0.25.321. I'm asking for help, because I don't know why this thing it's so slow. Wen the are a few Sendmail child processes it goes like a bullet, but wen the count goes up to 30 it start to slow down. I have not seeing more than 90 Sendmail child processes, but the email sending and receiving(pop) gets very slow. Also I have a high CPU usage in iowait, I think that is one of the causes of the lack of speed in the SMTP process like I said before, but I'm not sure, and I don't know how to figure out that. I being reading about SpamAssassin and ClamAV documentation, I changed a lot of settings, but I just solve a little bit of the problem. There is anyone with the same problem? Any help/comments/ideas are most welcome. BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: This is how I use ClamAV
We use Sendmail 8.13.0 (since 8.12.11) + Clamav-milter + Clamd. No quarantine, no postmaster/sender/recipient notice, just reject messages. Centralized freshclam on two servers at different times (minutes 23 and 53 respectively). OnUpdate it propagates vía sftp to the other 9 servers (including the other one that runs freshclam, so it doesn't have to update again). OnUpdate & OnError sends a message to postmaster. You can guess our monthly stats. We have more than 4 million mails daily, 150 clamav-milter and 26 clamd threads concurrently per server on peak hour. Damn, That's the kind of things that makes me fell like I'm managing a coffee maker :-P BR, Matías. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: recommended milter for spamassassin with clamav
I use milter-spamc http://www.milter.info/milter-spamc/index.shtml BR, Matías. Dale Morin wrote: Hello, I have had quite a lot of experience with clamav running under qmail-scanner, but none with using a sendmail milter to call it. clamav-milter works very well and the man page is quite thorough - well done. However I have had less than stellar success with a milter for spamassassin. spamass-milter (v0.20) seems to hang after a few minutes and needs to be restarted to get things flowing properly again. Does anyone have a recommended milter for spamassaassin to use with sendmail/clamav-milter/clamav? Many thanks in advance. Dale ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: contrib/init/RedHat suggested patch
Damian Menscher wrote: On Mon, 16 Aug 2004, Todd Lyons wrote: It shouldn't, however change if a virus is accepted - since sendmail should be tempfailing mail until the milters are functioning. Incorrect, depending on how you define your milter call for sendmail. So by not specifying an F=T setting, you're telling it to pass it through in the event of clamav-milter failure. I'm not sure what the case would be if clamav-milter was still fully functional, but clamd failed. It does bad things, by default (tempfailing the mail, as I recall). The fix is to give the --dont-scan-on-error option to your clamav-milter. My full set of clamav-milter flags are: CLAMAV_FLAGS="--quiet --headers --noxheader --dont-log-clean --dont-scan-on-error --max-children=10 local:/var/run/clamav/clmilter.sock" I have found that setting the --max-children flag to 10 or a close value of 10 may put a little bit slow your SMTP service. I don't like very much the --dont-scan-on-error option, what are the benefits of using it? Best Regards, Matías. --- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: Warning messages are queued after upgraded to 0.75.1
Nigel Horne wrote: Dear all, After upgraded to 0.75.1, the warning messages "Virus intercepted" are queued on the mqueue, is it configurable in clamav.conf? Turn off scanning of local messages. But...that means that an infected machine on the LAN will be able to send emails contained viruses using SMTP with RELAY??? Matías.- --- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: clamav-milter man page
Krzysztof Snopek wrote: The ChangeLog document for clamav 0.75 says: * clamav-milter: Added --dont-wait and --advisory options , at Jun 29 there is: * clamav-milter:Support --timeout option and earlier template files for clamav-milter are mentioned. But clamav-milter man page (0.75.tar.gz) seems to be very old and says nothing about above mentioned options. Where can I found some info about them ? Krzysztof Snopek clamav-milter -h shows the available options. Matías. --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: Loading clamd before service starts
I am using the script that come with clamav: contrib/init/RedHat with a little modification. There are prepared to star clamd and clamav-milter in that order using chkconfig. clamd:# chkconfig: 2345 90 60 clamav-milter:# chkconfig: 2345 91 30 Regards, Matías. --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_idG21&alloc_id040&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: ClamAV version 0.74 doesn't detect some viruses
Niek wrote: Matias Lopez Bergero wrote: Hello I haved installed clamav 0.74 on my email server, and I am using it with clamav-milter. Some of my users callme today to tould me that he was reciving viruses on his email acount. I said_ no way. But it's true. This is the virus: Worm.Bagle.AF.2 I test it agains the online scaner. Should I install a prior version? I was using 0.70 and It was working great. Best Regards! Matías. If you're sure you have the latest defs, and clamav doesn't catch it, submit it! http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi Regards, Niek The clamav 0.70 version detects it. --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_idG21&alloc_id040&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] ClamAV version 0.74 doesn't detect some viruses
Hello I haved installed clamav 0.74 on my email server, and I am using it with clamav-milter. Some of my users callme today to tould me that he was reciving viruses on his email acount. I said_ no way. But it's true. This is the virus: Worm.Bagle.AF.2 I test it agains the online scaner. Should I install a prior version? I was using 0.70 and It was working great. Best Regards! Matías. --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: it is posible to edit the virus intercepted msg?
Steven Stern wrote: On Thu, 15 Jul 2004 17:16:13 -0300, Matias Lopez Bergero <[EMAIL PROTECTED]> wrote: It is possible to edit the "virus intercepted" message?. [...] Look at the "-t" option in man clamav-milter. It lets you substitute a template. Unfortunately, the only variable that you can insert is %v, the name of the virus. If you want to use the standard message, you might just translate it in the code and recompile. Thanks! I am going to try that. Best Regards! Matías. --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_idG21&alloc_id040&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] it is posible to edit the virus intercepted msg?
Hi again, First I would like to say that this av it is excellent! Great work! I have a question, perhaps it is a little trivial. I am using ClamAV version 0.70 and clamav-milter version 0.70j. It is possible to edit the "virus intercepted" message?. This message is generated by clamav-milter right? I couldn't find and option to use a custom message. Perhaps someone can give me some advise. I want this because all the users of my email server are Spanish speaking. Everyone speaks English to( better than myself :-P ), so the message is legible, but, because that this service is in an Spanish speaking environment, I should change it, to generate a more homogeneous one(90% of the software that this people use is in Spanish). So, the only thing I want it is to translate it ;) Does anyone do this before? I would be glad to hear a "yes!" :-D Thank you for everything! with Best Regards, Matías. --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: query W32.Netsky.D@mm in database not found(??)
Antony Stone wrote: On Tuesday 22 June 2004 8:16 pm, Matias Lopez Bergero wrote: Where can I learn the know as aliases of this viruses?? The link "Virus Naming" on the ClamAV home page would be a good start: http://www.clamav.net/cvdinfo.html#pagestart [...] ups :-X Apologies for the silly question. I saw that link the first time that I get acquainted with clamavdon't know why I didn't see it now :-P Thanks for the answer Antony. Regards, Matías. --- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] query W32.Netsky.D@mm in database not found(??)
Hi! If i search for [EMAIL PROTECTED] or just Netsky in the clamav database I got no results. This virus is called in a different way for clamav? Where can I learn the know as aliases of this viruses?? Thanks. Regards, Matías. --- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: clamav-milter, kill pid not working
Alex V. Kovirshin wrote: On Thu, May 20, 2004 at 06:57:46PM +0400, Alex V. Kovirshin wrote: I installed clamav 0.71. Then i try to stop it: kill `head -1 /var/run/clamav/clamav-milter.pid ` Nothing happend. [...] Hello, I have the same problem. I can't stop clamav-milter, I have post this issue a week or so ago, but looks like there are not to many problems like this. I couldn't find a solution for this yet. Regards! Mati'as. --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: can't stop clamav-milter
Nigel Horne wrote: On Monday 10 May 2004 7:21 pm, Matias Lopez Bergero wrote: I can't stop clamav-milter with the term signal. (kill pid) I must use the kill switch to end the process and after that remove by hand the sock created by clamav-milter to star the process again. You don't say your operating system or version of clamav/clamav-milter or the arguments to clamav-milter so you've left a lot to guess work at this end. Hi, Clamav is running on Linux 2.4.2. ClamAV version 0.70 and clamav-milter version 0.70j. I am running clamav-milter in the following way: clamav-milter --max-children=7 -HCfloN -U /var/tmp/quarantine/ /var/run/clamav/clmilter.sock I have seen one time that clamav-milter has had more processes than the number specified by the "--max-children" flag. Have you tried with the latest version from CVS? No. I am running the 0.70/0.70j version. It is safe to run clamav from CVS in production environments? Are you using --max-children, if so look in /var/log/maillog and see if the message hit max-children limit occured anytime in the 60 seconds before you attempted to shutdown? Yes. I have a lot of "hit max-children limit" messages from clamav-milter in the maillog file. Should I first stop clamd and then try to stop clamav-milter? Thank you very much for your time. with Best Regards! Matías. --- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: clamav installed clamscan works clamdscan does not.
Harrell, Roger wrote: I've installed clamav. clamscan works, but the daemonized version clamdscan does not. It appears to be a permissions issue: clamd is running? Regards, Matías. --- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] can't stop clamav-milter
Hello again :) Please excuse me if this is a reviewed topic. I can't find similar posts on the lists. I am using ClamAV 0.70 with clamav-milter 0.70j. I can't stop clamav-milter with the term signal. (kill pid) I must use the kill switch to end the process and after that remove by hand the sock created by clamav-milter to star the process again. Could this be a load problem? I mean... it is possible that clamav-milter is to busy to stop?? or this is an other kind of problem? Please excuse me again for the lack of info. I don't know how to debug this issue. Many thanks, with Best Regards! Matías. --- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: Fw: Re: clamav-milter doesn't "see" virus on emails? (help!)
Nigel Horne wrote: On Wednesday 05 May 2004 6:27 pm, Matias Lopez Bergero wrote: There is a tool to generate reports on clamav-milter activity like viruses blocked, type of virus found, etc?? Yes. Look at some sample output at http://cgi.bandsman.co.uk/cgi-bin/virus/display.pl. You'll find the script author's name and e-mail address there as well. Hey, thanks! :) I was reading about netmrg(www.netmrg.net), it uses rrdtool, looks pretty good. There is anybody using this tool? Any comments? I am using MRTG to monitor my internet connection and it's G, the rrdtool it is based on mrtg technology, I guess that I can configure netmrg to monitor clamav-milter activity and other email server issues as shown in netmrg page. I'll post back results. ;) Best Regards! Matías. --- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: Fw: Re: clamav-milter doesn't "see" virus on emails? (help!)
Fixed!!
The space after the clmilter.sock, was wrong.
I write all the sentence in one line y regenerate the cf file and it's
working!! :D
There is a tool to generate reports on clamav-milter activity like
viruses blocked, type of virus found, etc??
Thanks a loot for the help!!
Best regards!
Matías.
Matias Lopez Bergero wrote:
Hi Roberto,
Thanks!! I can see the changes in sendmail.cf now!
But a new problem as occur :P
I have added to sendmail.mc:
define(_FFR_MILTER)dnl
INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clmilter.sock,
F=,T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clamav')dn
I use /var/run/clmilter.sock because I am running clamav-milter like
this: clamav-milter -DloHNP /var/run/clmilter.sock
Now I see the changes wen I run m4 sendmail.mc > sendmail.cf,
sendmail.cf:
[...]
# Input mail filters
O InputMailFilters=clamav
# Milter options
O Milter.macros.connect=j, _, {daemon_name}, {if_name}, {if_addr}
O Milter.macros.helo={tls_version}, {cipher}, {cipher_bits},
{cert_subject}, {cert_issuer}
O Milter.macros.envfrom=i, {auth_type}, {auth_authen}, {auth_ssf},
{auth_author}, {mail_mailer}, {mail_host}, {mail_addr}
O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}
[...]
# MAIL FILTER DEFINITIONS
Xclamav, S=local:/var/run/clmilter.sock,
F=,T=S:4m;R:4m
#^L
[...]
Wen I restart sendmail I get:
Starting sendmail: 554 5.0.0 /etc/sendmail.cf: line 1353: Xclamav: `='
expected
451 4.0.0 /etc/sendmail.cf: line 1354: fileclass: cannot open
',T=S:4m;R:4m': No such file or directory
451 4.0.0 InputFilter clamav not defined: No such file or directory
[FAILED]
How can I fix this?
Any ideas??
Thanks in advanced!
Best Regards!
Matías.
---
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: clamav-milter doesn't "see" virus on emails? (help!)
Nigel Horne wrote: On Tuesday 04 May 2004 10:25 pm, Matias Lopez Bergero wrote: I think that I have found the problem. Wen I regenerate the sendmail.cf the file laks of the filter options. I am doing this with the following command: m4 sendmail.mc > sendmail.cf On RedHat machines and derivatives (is that what you're using?), don't call m4 directly, instead edit sendmail.mc, type 'make' and then /sbin/service sendmail restart Hi Nigel, Yes, I am using rh7.1, but the make command doesn't rebuild the sendmail.cf, that is why I am using m4. I change a little bit the sendmail.mc config like Roberto sagest, and I can see the changes in sendmail.cf now, but looks like sendmail doesn't like the syntax of the cf file, I get this error wen I restart the service: Starting sendmail: 554 5.0.0 /etc/sendmail.cf: line 1353: Xclamav: `=' expected 451 4.0.0 /etc/sendmail.cf: line 1354: fileclass: cannot open ',T=S:4m;R:4m': No such file or directory 451 4.0.0 InputFilter clamav not defined: No such file or directory [FAILED] Any ideas?? Thanks for all the help! :) Best Regards! Matías. --- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: clamav-milter doesn't "see" virus on emails? (help!)
ups! :P Ur right! Thanks lot Stephen, I am going to change that. Regards! Matías. Stephen Gran wrote: On Tue, May 04, 2004 at 05:06:49PM -0300, Matias Lopez Bergero said: Hello list! After reading a little bit in google and in the list it self, I have successfully installed the clamav antivirus with the clamav-milter mail scanner. But I have one problem: clamav-milter do not stops or informs the presence of virus in the emails. I have redhat linux and sendmail from the rpms packages. I have installed the sendmail-devel package to compile clamav with milter support. I tested clamavscan and works ok. I have no problems updating the virus dbs. I can run clamd and clamav-milter with no problems and no error messages. sh-2.04# ps ax | grep clam 19746 ?S 0:00 clamd 19780 ?S 0:00 clamd 20405 ?S 0:00 clamav-milter -DloHNP /var/run/clmilter.sock sh-2.04# netstat --unix -nap | grep clam unix 2 [ ACC ] STREAM LISTENING 87640433 20405/clamav-milter /var/run/clmilter.sock unix 2 [ ACC ] STREAM LISTENING 87634193 19746/clamd /var/run/clamd.sock unix 2 [ ] DGRAM87640431 20405/clamav-milter unix 2 [ ] DGRAM87634184 19746/clamd sh-2.04# Everything looks good. I have added ed the line: INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav') at the end of the sendmail.mc and rebuild the sendmail.cf. (should I see some config instance of this in the cf file???) Note that clamav-milter is listening on the socket /var/run/clmilter.sock, but you told sendmail to connect to it over the socket at local:/var/run/clamav.sock. That will never work. --- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: Fw: Re: clamav-milter doesn't "see" virus on emails? (help!)
Hi Roberto,
Thanks!! I can see the changes in sendmail.cf now!
But a new problem as occur :P
I have added to sendmail.mc:
define(_FFR_MILTER)dnl
INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clmilter.sock,
F=,T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clamav')dn
I use /var/run/clmilter.sock because I am running clamav-milter like
this: clamav-milter -DloHNP /var/run/clmilter.sock
Now I see the changes wen I run m4 sendmail.mc > sendmail.cf,
sendmail.cf:
[...]
# Input mail filters
O InputMailFilters=clamav
# Milter options
O Milter.macros.connect=j, _, {daemon_name}, {if_name}, {if_addr}
O Milter.macros.helo={tls_version}, {cipher}, {cipher_bits},
{cert_subject}, {cert_issuer}
O Milter.macros.envfrom=i, {auth_type}, {auth_authen}, {auth_ssf},
{auth_author}, {mail_mailer}, {mail_host}, {mail_addr}
O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}
[...]
# MAIL FILTER DEFINITIONS
Xclamav, S=local:/var/run/clmilter.sock,
F=,T=S:4m;R:4m
#^L
[...]
Wen I restart sendmail I get:
Starting sendmail: 554 5.0.0 /etc/sendmail.cf: line 1353: Xclamav: `='
expected
451 4.0.0 /etc/sendmail.cf: line 1354: fileclass: cannot open
',T=S:4m;R:4m': No such file or directory
451 4.0.0 InputFilter clamav not defined: No such file or directory
[FAILED]
How can I fix this?
Any ideas??
Thanks in advanced!
Best Regards!
Matías.
Roberto Espinosa wrote:
Hi
I test adding the followings lines to sendmail.mc
define(_FFR_MILTER)dnl
INPUT_MAIL_FILTER(`clamav', `S=local:/var/clamav/clamav.sock,
F=,T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clamav')dnl
Now see the changes in sendmail.cf
Roberto
- Original Message -
From: "Matias Lopez Bergero" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 04, 2004 4:25 PM
Subject: [Clamav-users] Re: clamav-milter doesn't "see" virus on emails?
(help!)
I think that I have found the problem.
Wen I regenerate the sendmail.cf the file laks of the filter options.
I am doing this with the following command:
m4 sendmail.mc > sendmail.cf
It creates the file, but can't find anything about filters, milter,
clamav or something like that.
I hav add the following lines in sendmail.mc:
INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav.sock, F=,
T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `clamav')
>>
---
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: clamav-milter doesn't "see" virus on emails? (help!)
I think that I have found the problem. Wen I regenerate the sendmail.cf the file laks of the filter options. I am doing this with the following command: m4 sendmail.mc > sendmail.cf It creates the file, but can't find anything about filters, milter, clamav or something like that. I hav add the following lines in sendmail.mc: INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav') I have installed the sendmail-cf rpm packege. What can be wrong??? Thanks in advanced. Regards! Matías. Matias Lopez Bergero wrote: Hello list! After reading a little bit in google and in the list it self, I have successfully installed the clamav antivirus with the clamav-milter mail scanner. But I have one problem: clamav-milter do not stops or informs the presence of virus in the emails. >[...] --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] clamav-milter doesn't "see" virus on emails? (help!)
Hello list! After reading a little bit in google and in the list it self, I have successfully installed the clamav antivirus with the clamav-milter mail scanner. But I have one problem: clamav-milter do not stops or informs the presence of virus in the emails. I have redhat linux and sendmail from the rpms packages. I have installed the sendmail-devel package to compile clamav with milter support. I tested clamavscan and works ok. I have no problems updating the virus dbs. I can run clamd and clamav-milter with no problems and no error messages. sh-2.04# ps ax | grep clam 19746 ?S 0:00 clamd 19780 ?S 0:00 clamd 20405 ?S 0:00 clamav-milter -DloHNP /var/run/clmilter.sock 20406 ?S 0:00 clamav-milter -DloHNP /var/run/clmilter.sock 20407 ?S 0:00 clamav-milter -DloHNP /var/run/clmilter.sock sh-2.04# netstat --unix -nap | grep clam unix 2 [ ACC ] STREAM LISTENING 87640433 20405/clamav-milter /var/run/clmilter.sock unix 2 [ ACC ] STREAM LISTENING 87634193 19746/clamd /var/run/clamd.sock unix 2 [ ] DGRAM87640431 20405/clamav-milter unix 2 [ ] DGRAM87634184 19746/clamd sh-2.04# Everything looks good. I have added ed the line: INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav') at the end of the sendmail.mc and rebuild the sendmail.cf. (should I see some config instance of this in the cf file???) I have restarted sendmail, clamav and clamav-milter several times and search for errors in the logs, but I found nothing. I have read a post about this, it says that this problem occurs wen sendmail have being compiled with out milter support. In my case installing the sendmail-devel package will solve this issue? Because I did it :) Any help will be most welcome! with Best Regards! Matías. --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
