Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Sergey
On Tuesday 08 February 2022, Andrea Venturoli via clamav-users wrote:

> > That is the problem of the server that is contacting mine. 
> > They should not be relaying such crap to me anyway. 
> 
> No, this is *your* problem.

No. Marc is absolutely right. That is sender's server problem and
its server's administrator.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamav milter + sendmail, sendmail not reporting reject

2022-02-08 Thread Sergey
On Tuesday 08 February 2022, Marc wrote:

>  I have a bit of experience with mailfromd and if I reject a message
>  there the MTA processes it correctly but different from clamav-milter. 

b.t.w. mailfromd can replace clamav-milter:

prog eom
do
  if clamav(current_message(),clamd_port)
  reject 554 5.7.0 "virus %clamav_virus_name detected by ClamAV - 
http://www.clamav.net;
  fi
done

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.103.2 security patch release

2021-04-10 Thread Sergey
On Wednesday 07 April 2021, Joel Esler (jesler) via clamav-users wrote:

> CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. Affects 
> 0.103.0 and 0.103.1 only.
> 
> CVE-2021-1405: Fix for mail parser NULL-dereference crash. Affects 0.103.1 
> and prior.
 
I seems you got the CVE description mixed between: 1405 about PDF (and in 
NEWS.md).

-- 
Regards,
Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] understanding clamd.conf: TemporaryDirectory and clamonacc

2021-04-10 Thread Sergey
On Saturday 10 April 2021, G.W. Haywood via clamav-users wrote:

> > Does clamonacc have to watch in /tmp ?
> 
> No.  But we do not know what you have told clamonacc to watch because
> you have not told us.  My guess is that you have told it to watch the
> entire filesystem, which will cause problems.  You need to think about
> what you are doing - and you need to tell us what you are doing.  Read
> about the 'clamconf' utility.  If you can post the output of
> 
> clamconf -n

Good utility, thanks! I found an error in my clamd.conf. :-)
This is my first experience to run the clamonacc.

-- 
Regards,
Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] understanding clamd.conf: TemporaryDirectory and clamonacc

2021-04-09 Thread Sergey
Hello.

clamd.conf contains default setting

# Optional path to the global temporary directory.
# Default: system specific (usually /tmp or /var/tmp).
#TemporaryDirectory /var/tmp

It cause error message when clamonacc starting:

clamonacc[103181]: ERROR: ClamInotif: Not watching path '/tmp'
clamonacc[103181]: ERROR: ClamInotif: ClamOnAcc should not watch the directory 
clamd is using for temp files
clamonacc[103181]: ERROR: ClamInotif: Consider setting TemporaryDirectory in 
clamd.conf to a different directory.

I attempt to use "OnAccessExcludePath /tmp" but it unsusseful. 

> Consider setting TemporaryDirectory in clamd.conf to a different directory.

I thought about it. /tmp is system default and it tmpfs usually now (in Linux
based OS). And that's good. I can certainly make a separate tmpfs for clamd, 
but so far this does not seem to me a good idea. But I'm wrong maybe.

Does clamonacc have to watch in /tmp ?

-- 
Regards,
Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.103.0 released!

2020-10-08 Thread Sergey
On Thursday 08 October 2020, Sergey wrote:

> the title

option's name

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.103.0 released!

2020-10-08 Thread Sergey
On Friday 02 October 2020, Micah Snyder (micasnyd) via clamav-users wrote:

> It looks like you have Verbose enabled in your freshclam.conf file,
> which is causing extra output from libcurl to be displayed despite
> the --quiet option.  

Yes. But the option is called LogVerbose:

# Enable verbose logging.
# Default: no
LogVerbose yes

I thought that it does not affect to foreground messages. Should the
title and comment should be changed maybe?

And the second problem remains: the "Connecting via proxy" message
shown in any cases

> The thing that was fixed was that "Testing database: ..." was being printed
> instead of logged, meaning it ignored the --quiet option. See: 
> https://github.com/Cisco-Talos/clamav-devel/commit/095abcc28bc86fe25798be564d685f76530b19bd#diff-144511dd46e128d7d330578040a81f23
>  

Thanks.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.103.0 released!

2020-10-01 Thread Sergey
On Monday 14 September 2020, Joel Esler (jesler) via clamav-users wrote:

> Bug fixes
>
> Fixed behavior of freshclam --quiet option. Patch courtesy of Reio Remma.

What has been fixed? I keep seeing the message "Connecting via proxy" and
the virusdb update reports.

# freshclam --version
ClamAV 0.103.0/25943/Wed Sep 30 17:54:21 2020

without update:

# /usr/bin/freshclam --quiet --daemon-notify
Connecting via proxy

with update (a snippet):

# /usr/bin/freshclam --quiet --daemon-notify
Connecting via proxy
*   Trying x.x.x.x:3128...
* TCP_NODELAY set
* Connected to proxy (213.156.192.11) port 3128 (#0)
* allocate connect buffer!
* Establish HTTP proxy tunnel to database.clamav.net:443
> CONNECT database.clamav.net:443 HTTP/1.1
Host: database.clamav.net:443
User-Agent: ClamAV/0.103.0 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Proxy-Connection: Keep-Alive

< HTTP/1.1 200 Connection established

> GET /daily-25943.cdiff HTTP/2

* Connection #0 to host proxy left intact


without proxy and with update (a snippet):

# /usr/bin/freshclam --quiet --daemon-notify
*   Trying 104.16.219.84:443...
* TCP_NODELAY set
* Connected to database.clamav.net (104.16.219.84) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1

> GET /daily-25943.cdiff HTTP/2

* Connection #0 to host database.clamav.net left intact


-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.103.0 released!

2020-09-29 Thread Sergey
On Monday 14 September 2020, Joel Esler (jesler) via clamav-users wrote:

> ClamAV 0.103.0 released!

/lib/systemd/system/clamav-clamonacc.service is installed without
replacing @APP_CONFIG_DIRECTORY@ as far as I can see.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] --quiet and "Connecting via proxy" message

2020-06-17 Thread Sergey
On Monday 15 June 2020, Sergey wrote:

> # /usr/bin/freshclam --quiet --daemon-notify
> Connecting via proxy

The message about connection displayed sometime also:

Connecting via proxy
*   Trying x.x.x.x:3128...
* TCP_NODELAY set
* Connected to proxy (x.x.x.x) port 3128 (#0)
* allocate connect buffer!
...
* Connection #0 to host proxy left intact

or same without proxy. This started after the updates
0.101.5 to 0.102.3.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] --quiet and "Connecting via proxy" message

2020-06-14 Thread Sergey
Hello.

I seems this is a small bug:

# /usr/bin/freshclam --quiet --daemon-notify
Connecting via proxy

Quiet should be quiet at this case.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.102.2 security patch released

2020-02-11 Thread Sergey
On Wednesday 05 February 2020, Joel Esler (jesler) via clamav-users wrote:

> Today, we're publishing 0.102.2.
> ClamAV 0.102.2 is a security patch release to address the following issues.

Are you forgot to increase DNS version?

Tue Feb 11 16:27:01 2020 -> fc_dns_query_update_info: Software version from 
DNS: 0.102.1

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-11-27 Thread Sergey
On Tuesday 26 November 2019, Micah Snyder (micasnyd) via clamav-users wrote:

> In addition to the improvements in 0.101.5, 0.102.1, we shipped an update
> to main & daily yesterday 

I known and my test was with new main & daily for 0.101.4 and 0.101.5 both.
So it shows improvement of clamd's code in clear. Nice works, thanks!

Special thanks for the new main also.

-- 
Regards,
Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-11-26 Thread Sergey
On Tuesday 26 November 2019, Sergey wrote:

> 0.101.5 (22 sec):
> Tue Nov 26 21:12:02 2019 -> Bytecode: Security mode set to "TrustSigned".
> Tue Nov 26 21:12:24 2019 -> Loaded 6565044 signatures.
 
Hm... It's for big cld files. More compact cvd files loaded about 10 seconds
longer:

Tue Nov 26 21:37:35 2019 -> Bytecode: Security mode set to "TrustSigned".
Tue Nov 26 21:38:03 2019 -> Loaded 6565044 signatures.

Previously the difference between cvd and cld was not so visible.

-- 
Regards,
Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-11-26 Thread Sergey
On Wednesday 04 September 2019, Sergey wrote:

> Since some time there has been a noticeable increase a launch time. 

Good acceleration in the new version!

0.101.4 (124 sec):
Tue Nov 26 21:08:26 2019 -> Bytecode: Security mode set to "TrustSigned".
Tue Nov 26 21:10:30 2019 -> Loaded 6565044 signatures.


0.101.5 (22 sec):
Tue Nov 26 21:12:02 2019 -> Bytecode: Security mode set to "TrustSigned".
Tue Nov 26 21:12:24 2019 -> Loaded 6565044 signatures.

-- 
Regards,
Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-10-07 Thread Sergey
On Friday 13 September 2019, Markus Kolb via clamav-users wrote:

> I've opened an enhacement bug for this: 
> https://bugzilla.clamav.net/show_bug.cgi?id=12389

Thanks. But I have one more question. Do I understand correctly
that when loading main.cvd base rules are created quickly and 
the problem is in their subsequent update from daily.* files?

Maybe it's time to update main.cvd and reduce daily.* while
bug 12389 is being processed?

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-09-13 Thread Sergey
On Tuesday 10 September 2019, Markus Kolb wrote:

> Maybe these signatures got added in the last months. My logfiles tell
> me that the startup time of clamd was ok until February/March 2019.

Yes, I didn't notice any problems at the beginning of the year either.

Meanwhile, the time increased by another 14 seconds since 4 sep:

Fri Sep 13 13:56:47 2019 -> Bytecode: Security mode set to "TrustSigned".
Fri Sep 13 14:00:44 2019 -> Loaded 6315135 signatures.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-05 Thread Sergey
On Thursday 05 September 2019, Thomas Barth via clamav-users wrote:

> It seems that the two hour loading is hardcoded in the daemon.
 
You can use freshclam without "-d" option. You can stop freshclam 
daemon and create /etc/cron.d/freshclam with

22 1  * * * root/usr/bin/freshclam --quiet --daemon-notify
22 3  * * * root/usr/bin/freshclam --quiet --daemon-notify
22 5  * * * root/usr/bin/freshclam --quiet --daemon-notify
22 8  * * * root/usr/bin/freshclam --quiet --daemon-notify

22 12 * * * root/usr/bin/freshclam --quiet --daemon-notify

for example.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] How to boost clamav? Reloading database results in a talking timeout?

2019-09-05 Thread Sergey
On Thursday 05 September 2019, Thomas Barth via clamav-users wrote:

> Please, where can I change the interval value or times for loading
> the databases?
 
You can run freshclam by cron for example.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-09-04 Thread Sergey
On Wednesday 04 September 2019, Sergey wrote:

> Since some time there has been a noticeable increase a launch time. 
> Startup with all databases takes about 220 seconds now. Startup 
> without daily.cld takes 12 seconds. What's happened with daily.cld?
 
freshclam downloaded "daily.cvd" in next iteration:

142362624 Sep  3 13:21 daily.cld.bak
 46896980 Sep  4 12:11 daily.cvd

nothing has changed, 223 seconds:

Wed Sep  4 12:17:37 2019 -> Bytecode: Security mode set to "TrustSigned".
Wed Sep  4 12:21:20 2019 -> Loaded 6304055 signatures.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] Continuous increase of startup time (is daily.cld broken?)

2019-09-04 Thread Sergey
Hello.

Since some time there has been a noticeable increase a launch time. 
Startup with all databases takes about 220 seconds now. Startup 
without daily.cld takes 12 seconds. What's happened with daily.cld?

Thu Jul 18 12:36:51 2019 -> clamd daemon 0.101.2 (OS: linux-gnu, ARCH: x86_64, 
CPU: x86_64)
...
Thu Jul 18 12:36:51 2019 -> Bytecode: Security mode set to "TrustSigned".
Thu Jul 18 12:39:10 2019 -> Loaded 6215816 signatures.

139 sec between last two line

Mon Aug 12 17:28:22 2019 -> clamd daemon 0.101.3 (OS: linux-gnu, ARCH: x86_64, 
CPU: x86_64)
...
Mon Aug 12 17:28:22 2019 -> Bytecode: Security mode set to "TrustSigned".
Mon Aug 12 17:31:34 2019 -> Loaded 6267938 signatures.

192 sec between last two line

ClamAV version does not matter. I tested 0.101.1, 0.101.2 and 0.101.3 at Aug 12:

0.101.1, 194 sec:
Mon Aug 12 17:58:17 2019 -> Bytecode: Security mode set to "TrustSigned".
Mon Aug 12 18:01:31 2019 -> Loaded 6267938 signatures.

0.101.2, 184 sec
Mon Aug 12 18:02:20 2019 -> Bytecode: Security mode set to "TrustSigned".
Mon Aug 12 18:05:33 2019 -> Loaded 6267938 signatures.

0.101.3, 193 sec
Mon Aug 12 18:07:25 2019 -> Bytecode: Security mode set to "TrustSigned".
Mon Aug 12 18:10:38 2019 -> Loaded 6267938 signatures.

Now:

0.101.3, 225 sec
Wed Sep  4 11:46:13 2019 -> Bytecode: Security mode set to "TrustSigned".
Wed Sep  4 11:49:58 2019 -> Loaded 6304055 signatures.

0.101.4, 223 sec
Wed Sep  4 11:36:05 2019 -> Bytecode: Security mode set to "TrustSigned".
Wed Sep  4 11:39:48 2019 -> Loaded 6304055 signatures.

The bases:

Mon Aug 12 17:34:01 2019 -> main.cvd is up to date (version: 58, sigs: 4566249, 
f-level: 60, builder: sigmgr)
Mon Aug 12 17:34:01 2019 -> daily.cvd version from DNS: 25539
Mon Aug 12 17:34:01 2019 -> daily.cld is up to date (version: 25539, sigs: 
1711610, f-level: 63, builder: raynman)
Mon Aug 12 17:34:01 2019 -> bytecode.cvd version from DNS: 330
Mon Aug 12 17:34:01 2019 -> bytecode.cld is up to date (version: 330, sigs: 94, 
f-level: 63, builder: neo)

Wed Sep  4 11:21:01 2019 -> main.cvd is up to date (version: 58, sigs: 4566249, 
f-level: 60, builder: sigmgr)
Wed Sep  4 11:21:01 2019 -> daily.cvd version from DNS: 25561
Wed Sep  4 11:21:01 2019 -> daily.cld is up to date (version: 25561, sigs: 
1747964, f-level: 63, builder: raynman)
Wed Sep  4 11:21:01 2019 -> bytecode.cvd version from DNS: 330
Wed Sep  4 11:21:01 2019 -> bytecode.cld is up to date (version: 330, sigs: 94, 
f-level: 63, builder: neo)

0.101.3 without daily.cld, 12 (!) sec:
Wed Sep  4 11:57:21 2019 -> Bytecode: Security mode set to "TrustSigned".
Wed Sep  4 11:57:33 2019 -> Loaded 4566343 signatures.

0.101.4 is speedup same.

-- 
Regards, Sergey

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] [Clamav-devel] ClamAV® blog: ClamAV 0.101.1 Patch has been released

2019-01-12 Thread Sergey
On Monday 07 January 2019, Joel Esler (jesler) wrote:

> > ClamAV 0.101.1 Patch has been released

I seen that systemd's unit files exist now for clamd and frashclam
but this file isn't exist for clamav-milter. This is a small problem,
but it may be should to add a file for uniformity.

-- 
Regards,
Sergey
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.100.0 has been released!

2018-07-19 Thread Sergey
On Tuesday 17 July 2018, Micah Snyder (micasnyd) wrote:

> If you don't provide the older LLVM 3.6 for ClamAV, it will
> use it's built-interpreter rather than just-in-time-compile
> the signatures.   
 
b.t.w. Can you describe differences between built-interpreter
and LLVM in short ? Which is more preferable to use ?

-- 
Regards, Sergey
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.100.0 has been released!

2018-07-17 Thread Sergey
On Tuesday 17 July 2018, Micah Snyder (micasnyd) wrote:

> If you don't provide the older LLVM 3.6 for ClamAV, it will use
> it's built-interpreter rather than just-in-time-compile the signatures.  

Thanks.

-- 
Regards,
Sergey
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.100.0 has been released!

2018-07-17 Thread Sergey
On Tuesday 17 July 2018, Al Varnell wrote:

> It's best to use the bytecode interpreter for ClamAV
> bytecode signatures, but if for some reason you feel
> you must use LLVM-JIT  

I thought it was necessary to use llvm to use bytecode
signatures. Was I wrong? Is ClamAV not lost functionality
without LLVM?

-- 
Regards, Sergey
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.100.0 has been released!

2018-07-17 Thread Sergey
On Tuesday 17 July 2018, Al Varnell wrote:

> > Yes. But LLVM < 3.7 deprecated also.
> 
> No, deprecated refers to the use of LLVM greater than 3.6 by
> ClamAV 0.100.0, not LLVM itself.

Deprecated refers to use deprecated LLVM 3.6 which can be absent
in modern distro. Therefore deprecating internal LLVM code support
is not good idea I think.

-- 
Regards, Sergey
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.100.0 has been released!

2018-07-17 Thread Sergey
On Tuesday 17 July 2018, tschmidt wrote:

> >> ClamAV 0.100.0 has been released!
> > 
> >>   *   Deprecating internal LLVM code support. The configure script has 
> >> changed to search the system for an installed instance of the LLVM 
> >> development libraries, and to otherwise use the bytecode interpreter for 
> >> ClamAV bytecode signatures. To use the LLVM Just-In-Time compiler for 
> >> executing bytecode signatures, please ensure that the LLVM development 
> >> package at version 3.6 or lower is installed. Using the deprecated LLVM 
> >> code is possible with the command: ./configure --with-system-llvm=no, but 
> >> it no longer compiles on all platforms.
> > 
> > 
> > Hm. But 3.x updated to 3.8 about 2 years ago.
> 
> That's the meaning of the word "deprecating".

Yes. But LLVM < 3.7 deprecated also.

-- 
Regards, Sergey
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] ClamAV® blog: ClamAV 0.100.0 has been released!

2018-07-17 Thread Sergey
On Monday 09 April 2018, Joel Esler (jesler) wrote:

> ClamAV 0.100.0 has been released!

>   *   Deprecating internal LLVM code support. The configure script has 
> changed to search the system for an installed instance of the LLVM 
> development libraries, and to otherwise use the bytecode interpreter for 
> ClamAV bytecode signatures. To use the LLVM Just-In-Time compiler for 
> executing bytecode signatures, please ensure that the LLVM development 
> package at version 3.6 or lower is installed. Using the deprecated LLVM code 
> is possible with the command: ./configure --with-system-llvm=no, but it no 
> longer compiles on all platforms.


Hm. But 3.x updated to 3.8 about 2 years ago.

-- 
Regards, Sergey
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] freshclam and various formats of base

2014-06-26 Thread Sergey
Hello.

Several years ago database format changed sometimes when
upgrading ClamAV. This does caused problems when restart
clamd after upgrade. This could be solved by means of
the package manager, RPM for example:

%post
for FNAME in `ls --ignore=*.socket /var/lib/clamav`; do
[ -h /var/lib/clamav/$FNAME ]  continue
[ -d /var/lib/clamav/$FNAME ]  rm -rf /var/lib/clamav/$FNAME
[ -f /var/lib/clamav/$FNAME ]  rm -f /var/lib/clamav/$FNAME
done

Can it be not used it now ? The virus database is 
large now and download continues for a long time. Can
clamd ignore wrong format now ? Can freshclam to clear
/var/lib/clamav independently ?

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml


Re: [clamav-users] freshclam and various formats of base

2014-06-26 Thread Sergey
On Thursday 26 June 2014, Al Varnell wrote:

 You refer to an event that has happened once in what,
 ten years ? 

Like that, but a little less. And this happened several
times.

 And you are suggesting changes to package managers
 which, as far as I am aware, ClamAV® has no control
 over ?  

No. Сonversely. I want to cleanup my spec-file. :-)
I want to remove this work around now. But I want to
be sure that it will never needed.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Re: [clamav-users] ClamAV 0.97.8 has been released!

2013-04-25 Thread Sergey
On Friday 26 of April 2013 02:08:49 Sergey wrote:
 
 Which public key from http://www.clamav.net/gpg/ should be used ?

Sorry, I found the message about 
http://pgp.mit.edu:11371/pks/lookup?search=Sourcefire+VRTop=index

-- 
Regards, Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] ClamAV 0.97.8 has been released!

2013-04-25 Thread Sergey
On Tuesday 23 of April 2013 14:12:18 Joel Esler wrote:

  http://sourceforge.net/projects/clamav/files/clamav/0.97.8/clamav-0.97.8.tar.gz.sig/download
 
 Sorry about that, I had it right in my post, but when the email went out, it 
 didn't take.

Hm...

$ gpg --verify clamav-0.97.8.tar.gz.sig
gpg: Signature made Thu Apr 18 00:19:53 2013 SAMT using DSA key ID 64221D53
gpg: Can't check signature: public key not found

Which public key from http://www.clamav.net/gpg/ should be used ?

vrt.gpg 13-Jun-2012 21:02   2.5K

gpg: key 15497F03: public key Sourcefire VRT (Sourcefire VRT GPG Key) 
resea...@sourcefire.com imported
 
-- 
Regards, Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[clamav-users] ClamAV not update

2012-01-30 Thread Sergey Tsabolov ( aka linuxman )

Hello to all on list,
I installed ClamAV 0.96.5 on ubuntu server 10.04.3 but after 3-4 days 
all messages about update is error if I run freshclam


freshclam
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, 
builder: sven)

WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, 
builder: sven)

WARNING: getpatch: Can't download daily-14351.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd

My Version installed is
ClamAV 0.96.5/14350/Wed Jan 25 02:54:59 2012  and my freshclam.conf

DatabaseOwner clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogVerbose false
LogSyslog false
LogFacility LOG_LOCAL6
LogFileMaxSize 0
LogTime true
Foreground false
Debug false
MaxAttempts 5
DatabaseDirectory /var/lib/clamav
DNSDatabaseInfo current.cvd.clamav.net
AllowSupplementaryGroups false
PidFile /var/run/clamav/freshclam.pid
ConnectTimeout 30
ReceiveTimeout 30
TestDatabases yes
ScriptedUpdates yes
CompressLocalDatabase no
Bytecode true
NotifyClamd /etc/clamav/clamd.conf
# Check for new database 24 times a day
Checks 24
DatabaseMirror db.gr.clamav.net
DatabaseMirror database.clamav.net
DatabaseMirror clamav.citrin.ru

Can some one tell  me what I can do, because I need it for MailScanner

Thanks.

--
--
Don't send me documents in .doc , .docx, .xls, .ppt . , .pptx
Send it with ODF format : .odt , .odp , .ods or .pdf .
Try to use Open Document Format : http://el.libreoffice.org/
Save you money   use GNU/Linux Distro http://distrowatch.com/
-
First they ignore you, then they ridicule you, then they fight you, then you 
win!!!

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] ClamAV not update

2012-01-30 Thread Sergey Tsabolov ( aka linuxman )



Στις 30/01/2012 12:51 μμ, ο/η Tomasz Kojm έγραψε:

On Mon, 30 Jan 2012 12:18:51 +0200 Sergey Tsabolov ( aka linuxman )
serg...@greeklug.gr  wrote:

Hello to all on list,
I installed ClamAV 0.96.5 on ubuntu server 10.04.3 but after 3-4 days
all messages about update is error if I run freshclam

freshclam
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60,
builder: sven)
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from db.gr.clamav.net
main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60,
builder: sven)
WARNING: getpatch: Can't download daily-14351.cdiff from
database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from
database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from
database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from
database.clamav.net
WARNING: getpatch: Can't download daily-14351.cdiff from
database.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd

Were there any error messages? It looks like in the end freshclam
succeeded to grab the .cvd file.

I not need worry about all this WARNING ?
Because I  get other warnings from MailScanner

Jan 30 12:43:04 localhost ClamAV-autoupdate[17306]: ClamAV update 
warning: ERROR: getpatch: Can't download daily-14351.cdiff from 
database.clamav.net
Jan 30 12:43:04 localhost ClamAV-autoupdate[17306]: ClamAV update 
warning: ERROR: Can't download daily.cvd from database.clamav.net


If is normal I not need wornings about this messages I'am correct ?





--
--
Don't send me documents in .doc , .docx, .xls, .ppt . , .pptx
Send it with ODF format : .odt , .odp , .ods or .pdf .
Try to use Open Document Format : http://el.libreoffice.org/
Save you money   use GNU/Linux Distro http://distrowatch.com/
-
First they ignore you, then they ridicule you, then they fight you, then you 
win!!!

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[clamav-users] (SOLVED) Re: ClamAV not update

2012-01-30 Thread Sergey Tsabolov ( aka linuxman )



Στις 30/01/2012 01:40 μμ, ο/η Tomasz Kojm έγραψε:

On Mon, 30 Jan 2012 13:37:52 +0200 Sergey Tsabolov ( aka linuxman )
serg...@greeklug.gr  wrote:


Στις 30/01/2012 01:09 μμ, ο/η Tomasz Kojm έγραψε:

On Mon, 30 Jan 2012 12:58:55 +0200 Sergey Tsabolov ( aka linuxman )
serg...@greeklug.gr   wrote:


I not need worry about all this WARNING ?
Because I  get other warnings from MailScanner

Jan 30 12:43:04 localhost ClamAV-autoupdate[17306]: ClamAV update
warning: ERROR: getpatch: Can't download daily-14351.cdiff from
database.clamav.net
Jan 30 12:43:04 localhost ClamAV-autoupdate[17306]: ClamAV update
warning: ERROR: Can't download daily.cvd from database.clamav.net

If is normal I not need wornings about this messages I'am correct ?

Please post the complete output of 'freshclam -v'

This is output of 'freshclam -v'

http://pastebin.ubuntu-gr.org/m296a3ff

You're running a *very old* version of ClamAV. Please upgrade it first.
Ok , I get , I upgrade it using the  
https://launchpad.net/~ubuntu-clamav/+archive/ppa

and now I not get any warning again.

Thank you for help and have I  nice day




--
--
Don't send me documents in .doc , .docx, .xls, .ppt . , .pptx
Send it with ODF format : .odt , .odp , .ods or .pdf .
Try to use Open Document Format : http://el.libreoffice.org/
Save you money   use GNU/Linux Distro http://distrowatch.com/
-
First they ignore you, then they ridicule you, then they fight you, then you 
win!!!

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[clamav-users] clamd and IPv6

2011-12-26 Thread Sergey
Hello.

Does anybody use clamd with IPv6 ? I attempted to do it, but
it not works. All complicated by the fact that it is my first
experience with IPv6 also. I attemted to bind clamd to localhost.

clamd.conf part:

TCPSocket 3310
TCPAddr ::1

Error:

Dec 26 12:06:56 clamd: ERROR: TCP: Couldn't configure socket, check your 
configuration
Dec 26 12:06:56 clamd: Closing the main socket.

# ip a|grep -B3 ::1
1: lo: LOOPBACK,UP,LOWER_UP mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
inet6 ::1/128 scope host

As can be seen that clamd assembled correctly with IPv6 support ?

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[clamav-users] Virus database in tarball

2011-06-24 Thread Sergey
Hello.

Whether to place the virus database in tarball ? It become obsolete
very quickly and take up space. Update is required after installation
in any case.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Virus database in tarball

2011-06-24 Thread Sergey
On Friday, June 24, 2011, Al Varnell wrote:

 Yes, but it doesn't take as long or as much bandwidth to incrementally
 update it as it does to download the entire database every time there
 is an update.

Why? Old base may remain after update. User can do it.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Virus database in tarball

2011-06-24 Thread Sergey
On Friday, June 24, 2011, aCaB wrote:

 Rationale is: shipping the db in the tarball helps a lot in reducing
 load and bw usage on our mirrors (which are provided for free to all
 our userbase) and still allows for quick incremental updates.

Is it statisc or opinion ? 

I  thought about it. User download db in any case, in tarball or by
update. Reducing load can be in case of downloading tarball from other
places. But DB archive can be downloaded separatly also.

Or is it a way of fight with human laziness ? :-)


-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Warning: zlib version at runtime is older

2011-01-22 Thread Sergey
On Friday 10 December 2010, Török Edwin wrote:

  Probably it is the case for handmade distributives. But package
  managers can control this too. I have this case now: apt-get install
  clamav did updated clamav but did not updated zlib. Repository
  contain new zlib and ClamAV builded with it, but package manager use
  symbol versioning and update of zlib does not occur.
 
 In that case we should add something for packagers to turn off this
 warning. Please open a bug.

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2488

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [clamav-users] Warning: zlib version at runtime is older

2010-12-10 Thread Sergey
On Friday 10 December 2010, Török Edwin wrote:

  Repository contain new zlib and ClamAV builded with it, but package
  manager use symbol versioning and update of zlib does not occur.
 
 In that case we should add something for packagers to turn off this
 warning. Please open a bug.

Are You say about --disable-zlib-vcheck ? But this is more then build 
version control. Some time it is good.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[clamav-users] Warning: zlib version at runtime is older

2010-12-09 Thread Sergey
Hello.

I see in log:

LibClamAV Warning: zlib version at runtime is older than compile time:
1.2.3  1.2.5
LibClamAV info: Make sure zlib is built as shared library, and that
the new zlib library is installed in the proper place

Are you sure what it is needed ? zlib have symbol versioning and 
this should be sufficient.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Warning: zlib version at runtime is older

2010-12-09 Thread Sergey
On Thursday 09 December 2010, Török Edwin wrote:

  Are you sure what it is needed ? zlib have symbol versioning and 
  this should be sufficient.
 
 Sure, 1.2.3 and 1.2.5 are compatible at API level.
 
 But you probably had a reason for installing 1.2.5, and want it to be
 used. If ClamAV had not warned you probably wouldn't know you're still
 using the old version.

Probably it is the case for handmade distributives. But package managers
can control this too. I have this case now: apt-get install clamav did
updated clamav but did not updated zlib. Repository contain new zlib and
ClamAV builded with it, but package manager use symbol versioning and
update of zlib does not occur.

-- 
Regards,
Sergey

PS: It is not Debian or it clone.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] a big binaries in clamav-0.96.2/libclamav/c++/llvm

2010-08-18 Thread Sergey
Hello.

Are libclamav/c++/llvm/Debug and libclamav/c++/llvm/Release forgotten
to remove ?

$ du -s Debug Release
23M Debug
23M Release

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Quarantine issue with new 0.95.x clamav-milter

2009-11-19 Thread Sergey
On Tuesday 10 November 2009, Mark Costlow wrote:

 Does anyone know a way to make sendmail return a 550 for quarantined
 messages?  I'm using Sendmail 8.14.3.
 
What do you think about replace (possible temporary) clamav-milter to
mailfromd ? It is possible but need of some programming on internal
script language of mailfromd.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Quarantine issue with new 0.95.x clamav-milter

2009-11-19 Thread Sergey
On Thursday 19 November 2009, G.W. Haywood wrote:

 left me with the impression that it would not be an ideal replacement
 for ClamAV

Not for ClamAV, for clamav-milter only. It repeats the some functionality
of clamav-milter without quarantine:

http://www.sisyphus.ru/en/srpm/Sisyphus/mailfromd/sources/12

 Sergey, assuming you are the author of mailfromd,

No, I only have the same name. :-)

 Almost no state is stored for a scanned line, so milter-regex can't
 for example tell if the same pattern is matched more than once in a
 given message. That's the kind of flexibility I've been looking for.

If I understand you correctly, it is possible. This is not a precise
example but it should be like:

http://www.sisyphus.ru/en/srpm/Sisyphus/mailfromd/sources/0

In this line

set ma_hit_num massallocated_hit(${client_ptr}, %massallocated_regexps)

massallocated_hit returns a number of regular expression which matched 
with client_ptr. massallocated_hit is a user defined function:

http://www.sisyphus.ru/en/srpm/Sisyphus/mailfromd/sources/6

%massallocated_regexps defined in

http://www.sisyphus.ru/en/srpm/Sisyphus/mailfromd/sources/5

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] Clamd socket stops responding during databas reload

2009-08-05 Thread Sergey Yudin
Hello, All !

I am using latest stable Clamav 0.95.2 on OpenBSD 4.5
built from source with options:
./configure \
--prefix=/opt \
--sysconfdir=/etc/clamav \
--datadir=/var/db \
--localstatedir=/var/run \
--enable-bigstack \
--enable-clamdtop \
--with-user=proxy \
--with-group=proxy \
--with-libbz2-prefix=/usr/local \

When clamd reloads new database it stops responding requests via local
socket. For example DansGuardian reports Exception whist reading ClamD
socket: Can't read from socket

Is there any workaround for this issue ?

Regards
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] clamav-milter 95.2

2009-03-26 Thread Sergey
christian wrote:

 i think i'll have to stay for quite some time on 94.2.
 or shall be giving up, eventually. :-(
 maybe somebody knows an easy way out... ;-)

I started using mailfromd a few years ago.  It can replace the
clamav-milter, among other possibilities.

-- 
Regards.
Sergey.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] 0.94 and 0.94-exp

2008-10-08 Thread Sergey
On Tuesday 07 October 2008, Török Edwin wrote:

 This has already been fixed:
 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1174
 
Ok, thanks.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Stop it!

2008-10-08 Thread Sergey
On Wednesday 08 October 2008, Tomasz Kojm wrote:

 1. the requested functionality has been implemented in SVN
 (and will be included in 0.94.1):
 
 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1213
 
Can you put URL to this patch ?

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] 0.94, checking for CVE-2008-1372 and bzip2 1.0.5

2008-10-07 Thread Sergey
On Tuesday 07 October 2008, Sergey wrote:

 Why has check not passed ?
 
 checking for bzlib.h... yes
 checking for CVE-2008-1372... bugged
 configure: WARNING: ** bzip2 libraries are affected by the CVE-2008-1372 
 bug
 configure: WARNING: ** We strongly suggest you to update to bzip2 1.0.5.
 configure: WARNING: ** Please do not report stability problems to the 
 ClamAV developers!
 
Sorry, I found tread bzip2 1.0.5 and clamav 0.94.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] 0.94, checking for CVE-2008-1372 and bzip2 1.0.5

2008-10-07 Thread Sergey
Hello.

Why has check not passed ?

checking for bzlib.h... yes
checking for CVE-2008-1372... bugged
configure: WARNING: ** bzip2 libraries are affected by the CVE-2008-1372 bug
configure: WARNING: ** We strongly suggest you to update to bzip2 1.0.5.
configure: WARNING: ** Please do not report stability problems to the 
ClamAV developers!


$ bzip2 --version
bzip2, a block-sorting file compressor.  Version 1.0.5, 10-Dec-2007.

   Copyright (C) 1996-2007 by Julian Seward.

   This program is free software; you can redistribute it and/or modify
   it under the terms set out in the LICENSE file, which is included
   in the bzip2-1.0.5 source distribution.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   LICENSE file for more details.


-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] 0.94 and 0.94-exp

2008-10-07 Thread Sergey
Hello.

I found in log 

Tue Oct  7 16:41:18 2008 - Software version from DNS: 0.94
Tue Oct  7 16:41:18 2008 - WARNING: Your ClamAV installation is OUTDATED!
Tue Oct  7 16:41:18 2008 - WARNING: Local version: 0.94-exp Recommended 
version: 0.94
Tue Oct  7 16:41:18 2008 - DON'T PANIC! Read http://www.clamav.net/support/faq

ClamAV was built with --enable-experimental. I think what this a small bug.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV Plugin for Spamassassin

2008-07-01 Thread Sergey
On Wednesday 25 June 2008, metamorph wrote:

 I really appreciate any help or suggestions.  
 
What MTA are you using ? If it is Postfix or Sendmail you can use
another way: Spamassassin and ClamAV can be called from Mailfromd
milter.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Freshclam with FreeBSD 6.0 segfaulting

2007-07-25 Thread Sergey Shilov
Hi!
The same situation is shown and at me on FreBSD-6.0 with clamav-0.90.3 from 
ports.
Is also other problems on FreBSD6.0, for example with support cuadX...
Probably it is necessary to pass on FreBSD-6.2


S Török Edvin wrote:
 On 7/19/07, Steven [EMAIL PROTECTED] wrote:
 I am running many different versions of FreeBSD but I only see this problem 
 on
 6.0.  I have tried it on versions 4.10, 4.11, 5.3, 5.4, 6.1, and 6.2 without
 any problems.  I have two boxes running 6.0 and they both exhibit this 
 problem.
 One is running 6.0-STABLE and one is running 6.0-RELEASE-p17.
 
 To me this indicates that the problem probably is in FreeBSD 6.0.

S I believe you are correct, or at least when the port is used with 6.0.

 
 I have tried compiling with debugging options (--enable-debug) but it did 
 not
 give me any further information.  I have also tried compiling with debugging
 symbols (-g) and starting the program in gdb but gdb was telling me it could
 not find any symbols.  I could very well be doing this wrong with gdb though
 as I do not have much familiarity with gdb.
 
 See http://www.clamav.net/bugs/ for some details on how to use gdb.
 Try to get a core file at least, and then use gdb on it.

S I worked out some of my retardation with gdb and I get the following:

S Starting program: /usr/local/bin/freshclam
S (no debugging symbols found)...(no debugging symbols found)...(no
S debugging symbols found)...(no debugging symbols found)...(no debugging 
symbols
S found)...(no debugging symbols found)...[New LWP 100161]
S (no debugging symbols found)...(no debugging symbols found)...(no
S debugging symbols found)...[New Thread 0x805c100 (LWP 100161)]
S ClamAV update process started at Thu Jul 19 10:20:31 2007
S main.cvd is up to date (version: 43, sigs: 104500, f-level: 14, builder: 
sven)
S ERROR: Can't get information about test.clamav.net: Host not found
S ERROR: Can't download daily.cvd from test.clamav.net
S Trying again in 5 secs...

S Program received signal SIGSEGV, Segmentation fault.
S [Switching to Thread 0x805c100 (LWP 100161)]
S 0x282668c7 in _nanosleep () from /usr/lib/libpthread.so.2
S (gdb) bt
S #0  0x282668c7 in _nanosleep () from /usr/lib/libpthread.so.2
S #1  0x282b1a25 in sleep () from /lib/libc.so.6
S #2  0x2824ae53 in sleep () from /usr/lib/libthr.so.2
S #3  0x0804e788 in getopt_long_only ()
S #4  0x0804f0b8 in getopt_long_only ()
S #5  0x0804a32a in ?? ()
S #6  0x0001 in ?? ()
S #7  0xbfbfec1c in ?? ()
S #8  0xbfbfec24 in ?? ()
S #9  0x0010 in ?? ()
S #10 0x08052ea8 in getopt_long_only ()
S #11 0x0001 in ?? ()

 
 Everything is built from ports.
 
 Build it from sources downloaded from clamav.net

S I built it from the source and not through the ports and it appears
S not to have the problem anymore.  It looks like an incompatibility
S between pthread and clamav.

S I have looked through the Makefile for the port and I see this:

S # This port has a problem with -pthread,
S # force to use -lthr until it's not fixed.
.if ${OSVERSION} = 601000
S PTHREAD_LIBS=   -lthr
S .endif

S I changed 601000 to 60 to force it to use -lthr for FreeBSD
S version 6.0 and recompiled the port.  Freshclam no longer segfaults
S on me so this definitely looks like a minor bug in the port Makefile.

S Thanks for the assistance.

S Steven
S ___
S Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
S http://lurker.clamav.net/list/clamav-users.html




Sergey
-
Powered by ClamAV
www.clamav.net 
 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] [EMAIL PROTECTED] is getting thru

2007-06-04 Thread Sergey
On Monday 04 June 2007, BG Mahesh wrote:

 Since many users had performance issues with the latest version of clamav we 
 thought of postponing the upgrade.

Wed May 30 23:24:29 CEST 2007
-
  V 0.90.3
  * Bugfixes:
skip
- libclamav/matcher-ac.c: optimize memory allocation, patch from Anton
  Yuzhaninov
skip

I think what it resolved performance issue.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] daily.wmd/daily.cvd trouble (was daily.wmd trouble with 0.91rc1)

2007-06-02 Thread Sergey
On Saturday 02 June 2007, Noel Jones wrote:

 new main.cvd and daily.cvd.  Deleting daily.cvd stopped clamscan from
 dumping core for me.

It helped me too. But I use 0.90.2 and 0.90.3

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] daily.wmd/daily.cvd trouble (was daily.wmd trouble with 0.91rc1)

2007-06-02 Thread Sergey
On Saturday 02 June 2007, Tomasz Kojm wrote:

  and... Broken update is not good, but core dumping of clamd is very bad.
  It would be good to make clamd steadier with broken updates...
 
 First of all, the update itself was OK.

The problem appeared at Jun  2 04:53:33 GMT+5 in first time with 0.90.3

 Secondly, it's not possible to predict software crashes on XX platforms 
 at various conditions. 

I understand, but I see what it is not only my problem.

 And lastly, we're talking about an _experimental_ code and using it (0.91rc1 
 or
 --enable-experimental in 0.90.x)

I understand it too. And you are right, I found --enable-experimental now in 
configure call. But 0.90.3/0.90.2 was working before Jun  2 04:53:33 GMT+5

 Also what's worth mentioning here is that no-one reported this bug to our
 bugzilla so far!

It is very new problem. :-)

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed

2007-04-27 Thread Sergey
On Friday 27 April 2007, Steve Holdoway wrote:

  Apr 26 16:51:28 mx1 clamav-milter[30761]: Temporary quarantine file 
  /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.1kSiUY creation failed 
 [snip]
 
 Can you check the application/system logs for any problems with running 
 out of file descriptors, too many open files, or the like?? 

Yes, I have not found problems. messages has only 2166 records 26 Apr.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed

2007-04-27 Thread Sergey
On Friday 27 April 2007, Todd Lyons wrote:

 I have a problem with clamav-milter. It is working short time before
 going to error state.
 
 Let's check your virus database to see if it's in the range of
 acceptability.  Does your number come close to this one?
 
 [EMAIL PROTECTED] ~]# sigtool --list-sigs | wc -l
 112462

# sigtool --list-sigs | wc -l
112491

And it's not bug of clamd, clamd is working (but I apply a patch
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=434).

 On Fri, Apr 27, 2007 at 12:00:59AM +0500, Sergey wrote:
 
 84K /tmp/clamav-834f5ef6b9795ab1c6a4aab1b6e22957
 4,0K/tmp/clamav-ab8db180f18e07399a3aa277f9bd0596
 
 Kill sendmail, clamav-milter, (and clamd if you're running it, it's not
 clear here which mode you're running it in), blow away all those
 /tmp/clamav-* directories, then start clamd (if you're running it),
 start clamav-milter, and start sendmail.  

I attempted it before first message. :-(

 Running out of ideas...  What else runs on this machine?  

It's a dual Xeon Intel server with 3Gb memory. It's only SMTP server. Main
processes: sendmail, clamd. Last night I changed clamav-milter to mailfromd,
but to latest svn, not to release. It have some problem too but not with 
communication to clamd. Possible it will be solution for me.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed

2007-04-26 Thread Sergey
Hello.

I have a problem with clamav-milter. It is working short time before going to 
error state.
/tmp in a /,
/dev/sda2 4,0G  294M  3,5G   8% /

Has somebody any ideas ?

Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:27 mx1 sendmail[28728]: l3QBoD32028728: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:28 mx1 sendmail[28726]: l3QBoFhq028726: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:29 mx1 sendmail[28764]: l3QBoF3V028764: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:29 mx1 sendmail[28617]: l3QBo9iP028617: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:30 mx1 clamav-milter[28799]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.tSH0j7 creation failed

first problem

Apr 26 16:50:30 mx1 sendmail[19010]: l3QBiojI019010: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:31 mx1 sendmail[28908]: l3QBoKnR028908: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:31 mx1 clamav-milter[28891]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.Mj8QJR creation failed
Apr 26 16:50:31 mx1 sendmail[28933]: l3QBoLj5028933: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:31 mx1 sendmail[28634]: l3QBoBtL028634: Milter add: header: 
X-Virus-Scanned: ClamAV version 0.90.2, clamav-milter version 0.90.2 on 
mx1.kraft-s.net
Apr 26 16:50:32 mx1 clamav-milter[28598]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.S5S8vl creation failed
Apr 26 16:50:33 mx1 clamav-milter[28941]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.U2FSr1 creation failed
Apr 26 16:50:33 mx1 clamav-milter[29082]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.vAnTAJ creation failed
Apr 26 16:50:34 mx1 clamav-milter[29238]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.LcChkT creation failed

skip

Apr 26 16:51:22 mx1 clamav-milter[30280]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.80JZZY creation failed
Apr 26 16:51:23 mx1 clamav-milter[30588]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.r32Kk7 creation failed
Apr 26 16:51:23 mx1 clamav-milter[30579]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.f90f1G creation failed
Apr 26 16:51:23 mx1 clamav-milter[28543]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.d68Rtg creation failed
Apr 26 16:51:24 mx1 clamav-milter[30299]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.k6bM9L creation failed
Apr 26 16:51:24 mx1 clamav-milter[30588]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.mpXhcW creation failed
Apr 26 16:51:24 mx1 clamav-milter[30588]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.c8aKx8 creation failed
Apr 26 16:51:26 mx1 clamav-milter[30310]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.wwE2Uw creation failed
Apr 26 16:51:26 mx1 clamav-milter[30850]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.gQlYfB creation failed
Apr 26 16:51:28 mx1 clamav-milter[30702]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.aOzgqC creation failed
Apr 26 16:51:28 mx1 clamav-milter[30761]: Temporary quarantine file 
/tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.1kSiUY creation failed

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed

2007-04-26 Thread Sergey
Dave Dumbeck wrote:

 Does the clamav user account have write access to /tmp?

of course !

 Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add:
 header: X-Virus-Scanned: ClamAV version 0.90.2, 

It was working before 16:50:27, but is not working after 16:51:22 in
this example.

 Apr 26 16:51:22 mx1 clamav-milter[30280]: Temporary quarantine file
 /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57/msg.80JZZY creation failed

clamav-milter is working some time after restart.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed

2007-04-26 Thread Sergey
On Thursday 26 April 2007, Todd Lyons wrote:

  Apr 26 16:50:27 mx1 sendmail[27486]: l3QBnJ1T027486: Milter add:
  header: X-Virus-Scanned: ClamAV version 0.90.2,

 It was working before 16:50:27, but is not working after 16:51:22 in
 this example.
 
 Show us the results of df -h and df -i.  Chances are that one of them
 has hit 95% (only root can write to the final 5% of a mount).

# df -h (df for / was in the first mail)
FilesystemSize  Used Avail Use% Mounted on
/dev/sda2 4,0G  293M  3,5G   8% /

# df -i
FilesystemInodes   IUsed   IFree IUse% Mounted on
/dev/sda2   512K 27K486K6% /

0.88.7 worked well on this system.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] [0.90.2 clamav-milter] Temporary quarantine file ... creation failed

2007-04-26 Thread Sergey
On Thursday 26 April 2007, Todd Lyons wrote:

 So /tmp is not a seperate file system on your installation then. 

I can do it a seperate...

 If it 
 was, it would have shown up in here.  Since the issue is being unable to
 create files in /tmp, let's dig into the contents of /tmp:
   du -h --max-depth=1 /tmp

4,0K/tmp/downloads
64K /tmp/.private
4,0K/tmp/.ICE-unix
4,0K/tmp/.X11-unix
4,0K/tmp/.esd
4,0K/tmp/.font-unix
4,0K/tmp/.winbindd
84K /tmp/clamav-834f5ef6b9795ab1c6a4aab1b6e22957
4,0K/tmp/clamav-ab8db180f18e07399a3aa277f9bd0596
25M /tmp/clamav-partial
100K/tmp/clamav-0875ac240c38f48e46a9e4777ffa2a13
1,4M/tmp/clamav-6f2f2201c17d86795c857ee7579ebaf9
1,1M/tmp/clamav-e660d71b75810230d857d9acb84d0486
12K /tmp/clamav-47b78a7c4796898170578e4bfb4ffa88
768K/tmp/clamav-e4bfbe00950667df0e3f6edcd296d7c7
16K /tmp/clamav-db5fe7f81e62a48f8c91bcf1d09e2d57
4,0K/tmp/clamav-405dac474aebb9f2a240334d0428910b
49M /tmp

   find /tmp | wc -l

# find /tmp | wc -l
128

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re[4]: [Clamav-users] again SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES

2007-03-15 Thread Sergey Shilov
to Rob MacGregor and Gerard Seibert

Many thanks for your help!
Updating of ports has helped.
I'll watch now a urgency of ports with the help portsnap and cron

Thanks, Flanker
-
Powered by ClamAV
www.clamav.net 
 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] race condition with restart clamd clamav-milter

2007-03-14 Thread Sergey
Hello.

I found a problem with start clamd and clamav-milter:

# service clamd restart  service clamav-milter restart
Stopping clamd service: 
 [ DONE ]
Starting clamd service: 
 [ DONE ]
Stopping clamav-milter service: 
 [ DONE ]
Starting clamav-milter service: /var/lib/clamav/clamd.socket: No such file or 
directory
Can't talk to clamd server via /var/lib/clamav/clamd.socket
Check your entry for LocalSocket in /etc/clamav/clamd.conf

 [FAILED]
But it can be fixed by

# service clamd restart  sleep 1  service clamav-milter restart
Stopping clamd service: 
 [ DONE ]
Starting clamd service: 
 [ DONE ]
Stopping clamav-milter service: 
 [ DONE ]
Starting clamav-milter service: 
 [ DONE ]

I added a sleep to my startup script for clamd, but I think that clamd
must wait for creating socket during startup.

OS: Linux, ClamAV 0.90.1

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Clamav-milter

2007-03-14 Thread Sergey
On Tuesday 13 March 2007, Claudio Mundin wrote:

 I'm using clamav 0.9 and for integrate with sendmail i use clamav-milter.
 Now I want that when a virus is detected in a mail, in automatic form
 send mail of notification to the address destination of the mail.

1. Are you sure that you need it ?
2. Yes ? Then think again. :-)

All still yes ? Ok. :-( 
clamav-milter can not do it, if I am not mistaken. But you can attempt to
use mailfomd as replacement for clamav-milter. It is mail scanner (milter 
also) with big number features. One of feature the scanning via clamd.
mailfomd can generate mail for any events to any recipients with any text.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re[2]: [Clamav-users] again SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES

2007-03-14 Thread Sergey Shilov
Rob MacGregor [EMAIL PROTECTED] wrote:

RM Have you tried using the ports to install clamav?  That will almost
RM certainly resolve your problem.

First, as well as it is usual, I installed from sources taken with 
www.clamav.net
After, I tried to install from ports.

RM Just remember to update your ports
RM tree first:

Ok, I shall try to update ports and to recompile clamav


Thanks, Flanker
---
Powered by ClamAV
www.clamav.net

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] race condition with restart clamd clamav-milter

2007-03-14 Thread Sergey
On Wednesday 14 March 2007, Nigel Horne wrote:

 You haven't found the problem, it's been known about for some time which is
 why the startup script in .../contrib/init/RedHat/clamav-milter already has 
 that
 sleep. 
 
Ou, ok. Sorry. :-) although... No, this is a bug: sleep must be placed to 
clamd's
startup. Not only clamav-milter can use clamd.

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re[2]: [Clamav-users] again SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES

2007-03-14 Thread Sergey Shilov

 Gerard Seibert [EMAIL PROTECTED] wrote:
GS You might want to make sure that you kill all of the running clamav
GS processes first as a precaution. Also, if you have not all ready, place
GS the following in the '/etc/rc.conf' file.

GS clamav_clamd_enable=YES
GS clamav_freshclam_enable=YES

GS Make any changes you require to both the /usr/local/etc/clamd.conf and
GS freshclam.conf files.

GS Reboot and you should be good to go.

GS Ciao!

It is a little not on a theme:
Ciao is cheerfully. You probably from Italy? I have brother, he lives
in Italy in place Forni di Sotto ...

And now on a theme:
The problem is visible into logs at a stage of configure.
Clamav-0.87 finds GMP libraries (libgmp-4.1.4_2), and clamav-0.90.1 does not 
find



Thanks, Flanker

-
Powered by ClamAV
www.clamav.net 
 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Clamav-milter

2007-03-14 Thread Sergey
On Wednesday 14 March 2007, Claudio Mundin wrote:

 I try to search information of mailfomd but I cant't find anything.
 You can tell me where I can found this information?

http://puszcza.gnu.org.ua/projects/mailfromd/

You need of flex-2.5.4a (not never !), texinfo-4.8 and mailutils-1.0
(http://www.gnu.org/software/mailutils/mailutils.html) for building. 
mailutils needs the patch (this is impotant for sending mail from
mailfromd):

Index: mailbox/sendmail.c
===
RCS file: /cvsroot/mailutils/mailutils/mailbox/sendmail.c,v
retrieving revision 1.33
diff -p -u -r1.33 sendmail.c
--- mailbox/sendmail.c  26 Apr 2006 11:56:31 -  1.33
+++ mailbox/sendmail.c  13 Dec 2006 08:50:43 -
@@ -441,10 +441,15 @@ sendmail_send_message (mu_mailer_t maile

if (rc  0)
  {
-   status = errno;
-   MAILER_DEBUG2 (mailer, MU_DEBUG_TRACE,
-  waitpid(%d) failed: %s\n,
-  sendmail-pid, strerror (status));
+   if (errno == ECHILD)
+  status = 0;
+   else
+  {
+   status = errno;
+   MAILER_DEBUG2 (mailer, MU_DEBUG_TRACE,
+  waitpid(%d) failed: %s\n,
+  sendmail-pid, strerror (status));
+  }
  }
else if (WIFEXITED (exit_status))
  {


-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] race condition with restart clamd clamav-milter

2007-03-14 Thread Sergey
On Wednesday 14 March 2007, Nigel Horne wrote:

 the startup script in .../contrib/init/RedHat/clamav-milter already has that
 sleep.

1 second is too low in some case. :-( 

# service clamd restart  ls /var/lib/clamav/*  sleep 5  ls 
/var/lib/clamav/*  service clamav-milter restart
Stopping clamd service: 
 [ DONE ]
Starting clamd service: 
 [ DONE ]
/var/lib/clamav/daily.cvd  /var/lib/clamav/main.cvd
/var/lib/clamav/daily.cvd  /var/lib/clamav/main.cvd
Stopping clamav-milter service: 
 [ DONE ]
Starting clamav-milter service: /var/lib/clamav/clamd.socket: No such file or 
directory
Can't talk to clamd server via /var/lib/clamav/clamd.socket
Check your entry for LocalSocket in /etc/clamav-milter.conf

 [FAILED]
I use 2 seconds in clamd's init. So, 7 seconds too low for
2xPentium III 450 system. :-(

load average: 2.29, 1.78, 1.30

-- 
Regards,
Sergey
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] again SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES

2007-03-13 Thread Sergey Shilov

Hi to all!
Help me, please.
After installing clamav-0.90  I see into freshclam.log a warning SECURITY 
WARNING: NO SUPPORT FOR DIGITAL SIGNATURES !
GMP and zlib libraryes is installed and a previous clamav-0.87 worked  without 
this warning.
I tried compiling with prefix and path to these libraryes , but result is same 
I don't understand where is a problem on my FreeBSB-5.4(6.1)?

Thanks, Flanker

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Sendmail X and clamav-milter

2005-10-31 Thread Sergey
On Tuesday 30 August 2005 12:48, Sergey wrote:

 2005-08-27 smX-0.0.Beta0.0 has been released. Do you have a plans 
 on adaptation clamav-milter for smX ?

Sendmail X 0.0.0.0 was released yesterday:
http://www.sendmail.org/sm-X/release.html

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] clamav-milter: /var/log/clamav/clamd.log: Permission denied

2005-10-06 Thread Sergey
Hello.

Why subj ?  should the clamav-milter  write to clamd.log ?

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] MailFollowURLs

2005-09-20 Thread Sergey Prokopenko
Hello, All!
# If an email contains URLs ClamAV can download and scan them.
# WARNING: This option may open your system to a DoS attack.
#  Never use it on loaded servers.
# Default: disabled
#MailFollowURLs

How to set up a maximum file size that are downloaded by this directive?


  äÏ Ó×ÉÄÁÎÉÑ, ÕÓÐÅÈÏ×!

 óÅÒÇÅÊ ðÒÏËÏÐÅÎËÏ. ÷ ÍÏ£Í ÁÄÒÅÓÅ ×ÓÅ ÂÕË×Ù ÎÁÓÔÏÑÝÉÅ.



___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: MailFollowURLs

2005-09-20 Thread Sergey Prokopenko
Hello, Nigel!
You wrote  on 20 Sep 2005 11:57:02 +0100:

 NH There is already a hard-coded limit of 5. It is hard-coded for
 NH the same reason that the file size is limited (no access to
 NH configuration data at that level).

 ToDo
 Mark the subj [warning: a big files in URLs] such messages with unscanabele
URLs (overlimited by max urls|maxsize )... ;-)



WBR



___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Re: MailFollowURLs

2005-09-20 Thread Sergey Prokopenko
Hello, Nigel!
You wrote  on 20 Sep 2005 12:28:12 +0100:

   Mark the subj [warning: a big files in URLs] such messages with
  unscanabele
  URLs (overlimited by max urls|maxsize )... ;-)

 NH clamav-milter already adds a header when StreamMaxLength is
 NH added.

 NH Since the FOLLOWURLS is hard coded at another module, it isn't
 NH possible for clamav-milter to know about that and add a header.
 NH I completely that it would be useful if it did and will add it
 NH to the TODO list.

 Sorry, it would be useful by rules in Outlook Express, but OE don`t support
a rule based on a header strings, but subj substring - very well... User
like alternative - subj|header by own choice... but not like pay $. ;-)

 Sorry for my english... WBR



___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] clamd rar =2.9

2005-09-20 Thread Sergey Prokopenko
Hello, All!

clamscan has options:

   --unrar[=FULLPATH]
  Scan .rar files.

   --unarj[=FULLPATH]
  Scan .arj files.

   --unzoo[=FULLPATH]
  Scan .zoo files.

   --lha[=FULLPATH]
  Scan .lzh files.


Why clamd hasn`t it?

And  aspack, lxlite, unp, cab...



___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] zlib security error

2005-09-11 Thread Sergey
On Friday 09 September 2005 12:10, Chantal Rosmuller wrote:

 configure

--disable-zlib-vcheck

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] zlib security error

2005-09-11 Thread Sergey
On Monday 12 September 2005 09:49, Sergey wrote:

  configure
 
 --disable-zlib-vcheck

Sorry, I have not read up the message up to the end :-(


-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Sendmail X and clamav-milter

2005-08-31 Thread Sergey
On Tuesday 30 August 2005 20:51, Thomas Cameron wrote:

  What is Sendmail X?  Enquiring minds want to know!
 
 Never mind, I found it - it looks like there is not full support for
 milters yet:

Yes, but I think that functionality is sufficient now: beta package 
contain modified milter-regex and milter-spamd in contrib directory.

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Sendmail X and clamav-milter

2005-08-30 Thread Sergey
Hello.

2005-08-27 smX-0.0.Beta0.0 has been released. Do you have a plans 
on adaptation clamav-milter for smX ?

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Sergey
Hello clamav-users,

   i've just tried to use 0.85 and 0.85.1 instead of my 0.84 but i
   found an error massage on starting clamav-milter (Permission
   denied). is there any chance to solve this little problem?


   p.s. sorry about my english...
-- 
Best regards,
 Sergey  mailto:[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


Re[2]: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Sergey
Hello Tomasz,

Tuesday, May 17, 2005, 2:58:41 PM, you wrote:

TK On Tue, 17 May 2005 12:55:36 +0200
TK Krištof Petr [EMAIL PROTECTED] wrote:

 Sergey is right. This bug is not fixed.
 
 
 May 17 12:36:41 server clamd: clamd startup succeeded
 May 17 12:36:41 server clamd[27991]: HTML support enabled.
 May 17 12:36:41 server clamd[27991]: Self checking every 1800 seconds.
 May 17 12:36:54 server clamav-milter: /var/log/clamav/clamd.log: 
 Permission denied

TK The original bug was related to /dev/console. The above seems like
TK a standard permission problem.


 no it's not. beleve me because i'm not the only one who has such
 problem.

-- 
Best regards,
 Sergeymailto:[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


Re[2]: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Sergey
Hello Tomasz,

Tuesday, May 17, 2005, 2:27:00 PM, you wrote:

TK On Tue, 17 May 2005 11:16:54 +0400
TK Sergey [EMAIL PROTECTED] wrote:

 Hello clamav-users,
 
i've just tried to use 0.85 and 0.85.1 instead of my 0.84 but i
found an error massage on starting clamav-milter (Permission
denied). is there any chance to solve this little problem?

TK I don't believe you've installed 0.85.1 properly.


what do you mean by properly?
 there were no errors while i was installing it.
 i used just the same option that i used for installing 0.84 or there
 is in 0.85 some new extra installation stuff that i missed?
 

-- 
Best regards,
 Sergeymailto:[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


Re[2]: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Sergey
Hello Tomasz,

Tuesday, May 17, 2005, 3:17:34 PM, you wrote:

TK On Tue, 17 May 2005 15:10:12 +0400
TK Sergey [EMAIL PROTECTED] wrote:

 Hello Tomasz,
 
 Tuesday, May 17, 2005, 2:27:00 PM, you wrote:
 
 TK On Tue, 17 May 2005 11:16:54 +0400
 TK Sergey [EMAIL PROTECTED] wrote:
 
  Hello clamav-users,
  
 i've just tried to use 0.85 and 0.85.1 instead of my 0.84 but i
 found an error massage on starting clamav-milter (Permission
 denied). is there any chance to solve this little problem?
 
 TK I don't believe you've installed 0.85.1 properly.
 
 
 what do you mean by properly?
  there were no errors while i was installing it.
  i used just the same option that i used for installing 0.84 or there
  is in 0.85 some new extra installation stuff that i missed?

TK The only 'essential' information you have provided is that
TK clamav-milter prints Permission denied on startup so don't expect
TK constructive help from me.


1) i use freebsd 4,7
2) clamav is configured with such options as --prefix=/usr/local/clamav
--enable-milter
3) clamd, freshclam and clamav-milter starts by user clamav
4) /usr/local/clamav # ls -l
total 14
drwxr-xr-x  2 rootclamav  512 May 17 15:39 bin
drwxr-xr-x  2 rootclamav  512 May 17 15:31 etc
drwxr-xr-x  2 rootclamav  512 May 17 15:38 include
drwxr-xr-x  3 rootclamav  512 May 17 15:39 lib
drwxr-xr-x  2 rootclamav  512 May 17 15:39 sbin
drwxr-xr-x  3 rootclamav  512 May 17 15:39 share
drwxr-x---  4 clamav  clamav  512 May 17 15:39 var

5) /usr/local/clamav/var # ls -l
total 12
-rw-r-  1 clamav  clamav   583 May 17 15:40 clamd-update.log
-rw-r-  1 rootclamav  1265 May 17 15:40 clamd.log
-rw-rw  1 clamav  clamav 5 May 17 15:39 clamd.pid
srwxrwxrwx  1 clamav  clamav 0 May 17 15:39 clamd.sock
-rw-rw  1 clamav  clamav 5 May 17 15:39 freshclam.pid
drwx--  4 clamav  clamav   512 May 17 00:45 quarantine
drwxr-xr-x  4 clamav  clamav   512 May 17 15:44 tmp

6)  cat /usr/local/etc/rc.d/clamav.sh
#!/bin/sh
/usr/local/clamav/sbin/clamd
/usr/local/clamav/sbin/clamav-milter -lofU
/usr/local/clamav/var/quarantine /usr/local/clamav/var/clmilter.sock
-p [EMAIL PROTECTED] --max-children=3
/usr/local/clamav/bin/freshclam -d -c 6 -l 
/usr/local/clamav/var/clamd-update.log


what do i do wrong?

-- 
Best regards,
 Sergeymailto:[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


Re[4]: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Sergey
Hello Trog,

Tuesday, May 17, 2005, 3:13:49 PM, you wrote:

T On Tue, 2005-05-17 at 15:10 +0400, Sergey wrote:
 
 what do you mean by properly?
  there were no errors while i was installing it.
  i used just the same option that i used for installing 0.84 or there
  is in 0.85 some new extra installation stuff that i missed?
  

T Check the permissions on your log file. They must be accessible by the
T user the milter runs as.

T -trog


they are accesseble

-- 
Best regards,
 Sergeymailto:[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


Re[2]: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Sergey
Hello Kritof,

Tuesday, May 17, 2005, 3:22:21 PM, you wrote:

KP Tomasz Kojm wrote:

On Tue, 17 May 2005 12:55:36 +0200
Kritof Petr [EMAIL PROTECTED] wrote:

  

Sergey is right. This bug is not fixed.


May 17 12:36:41 server clamd: clamd startup succeeded
May 17 12:36:41 server clamd[27991]: HTML support enabled.
May 17 12:36:41 server clamd[27991]: Self checking every 1800 seconds.
May 17 12:36:54 server clamav-milter: /var/log/clamav/clamd.log: 
Permission denied



The original bug was related to /dev/console. The above seems like
a standard permission problem.
  


KP I reported this bug one week before. But once again:

KP # uname -mpio
KP i686 i686 i386 GNU/Linux

KP # clamd -V
KP ClamAV 0.85.1/882/Tue May 17 08:48:03 2005

KP # clamav-milter -V
KP ClamAV version 0.85.1, clamav-milter version 0.85

KP # ll /var/log
KP total 42860
KP drwxr-xr-x  14 rootroot   4096 May 17 12:36 .
KP drwxr-xr-x  23 rootroot   4096 Jan  7 14:52 ..
KP -rw---   1 rootroot  21573 Feb  1 04:02 boot.log.4
KP drwxr-xr-x   2 clamav  clamav 4096 May 17 13:05 clamav
KP -rw-r--r--   1 rootroot 183414 May 17 13:01 cron

KP # ll /var/log/clamav/
KP total 16
KP drwxr-xr-x   2 clamav clamav 4096 May 17 13:08 .
KP drwxr-xr-x  14 root   root   4096 May 17 12:36 ..
KP -rw-r-   1 clamav clamav  474 May 17 13:05 freshclam.log

KP # service clamd start
KP Starting Clam AV daemon:   [  OK  ]

KP # ll /var/log/clamav/
KP total 20
KP drwxr-xr-x   2 clamav clamav 4096 May 17 13:09 .
KP drwxr-xr-x  14 root   root   4096 May 17 12:36 ..
KP -rw-r-   1 root   root   1417 May 17 13:09 clamd.log
KP -rw-r-   1 clamav clamav  474 May 17 13:05 freshclam.log

KP # service clamav-milter start
KP Starting clamav-milter:[FAILED]

KP # tail -f /var/log/messages
KP May 17 13:13:42 server clamav-milter: /var/log/clamav/clamd.log: 
KP Permission denied

KP and clamav-milter is not running.

KP # grep User /etc/clamd.conf
KP User clamav

KP My observation is: clamav creates log file with root permission,
KP so user clamav cannt write to log.

KP Are there some developers who believes that non-priviledged user clamav
KP can write to logfile with bad permissions (0640 root.root clamd.log)?
KP This assumption is wrong on some unix like OSes, Im affraid.

KP Clamav should create log file with same owner as defined in clamd.conf
KP to work it properly.

i've just noticed the same thing. clamd.log is made by root. but 0.84
doesn't care about that it works properly.


-- 
Best regards,
 Sergeymailto:[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


Re[4]: [Clamav-users] 0.85 0.81.1 tha same troubles with milter

2005-05-17 Thread Sergey
Hello Dennis,

Tuesday, May 17, 2005, 5:11:43 PM, you wrote:

DP Sergey said:
 Hello Andrzej,

 Tuesday, May 17, 2005, 3:52:31 PM, you wrote:

 AZ Sergey wrote:
 AZ [...]
 -rw-r-  1 rootclamav  1265 May 17 15:40 clamd.log
 AZ   ^^
 AZ How clamd (in realy user clamav.clamav) can write to this file??

 AZ [...]


  i've no idea, but 0.84 does.

 i've just found a solution. if clamd makes clamd.log it's useless to
 change the permissions. so before running clamd and so on i made
 touch clamd.log and than set all the permissions that is needed.
 now it works.


DP We have a winner! Now if you put that in your startup script and log
DP rotation tool you'll have the job finished.

why is that? if i'll restart clamd it won't going to change the
permissions of clamd.log. and by the way i don't need any log rotation
because my clamd.log doesn't eveê become big or something like that.

-- 
Best regards,
 Sergeymailto:[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] ClamAV 0.85 and RAR 3

2005-05-13 Thread Sergey
On Friday 13 May 2005 01:43, Jason Frisvold wrote:

 Gotcha..  :)  I thought it was more of a the creator of rar 3 wasn't
 allowing anyone to create unrar programs without paying him tons of
 cash type thing..  :)

Not. libunrar available as ftp://ftp.rarlab.com/rar/unrarsrc-version.tar.gz
It have one main limitation: source code can't be used for creating rar. 

And I think that creation GPL unrar can be incompatible with the license 
for algorithm rar: this code _can_ be used for rar.

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Milter (clamav): timeout before data read

2005-05-07 Thread Sergey
On Thursday 05 May 2005 16:06, Eugene Kurmanin wrote:

 I think, it's not a clamd or clamav-milter error.
 Probably it's a Sendmail 8.12.X and higher Milter API interface
 features/bugs. I don't see this error with 8.11.7

I have not this error. I use 

INPUT_MAIL_FILTER(`milter-clamav', `S=inet:[EMAIL PROTECTED], T=C:15s;R:30s')dnl

xxx.xxx.xxx.xxx - virtual server on quad Intel Xeon 750. I think what you should
increase R timeout.

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] For remember (Fwd: Re: [clamd/clamscan (?)] Oversized.RAR false positives)

2005-05-05 Thread Sergey
Hello.

Is it not implemented ?

--  Forwarded Message  --

Subject: Re: [clamd/clamscan (?)] Oversized.RAR false positives
Date: Monday 29 November 2004 01:37
From: Tomasz Kojm tkojm * clamav.net
To: Sergey Y. Afonin asy * kraft-s.ru

On Sat, 27 Nov 2004 10:42:04 +0400
Sergey Y. Afonin asy * kraft-s.ru wrote:

 Subject: [wish] ArchiveMaxCompressionRatio
 Date: Wednesday 24 November 2004 12:16
 From: Sergey a_s_y * sama.ru
 To: clamav-users * lists.sourceforge.net
  ^
should be * lists.clamav.net

 checked archive and to not check Compression Ratio for archives, which
 in the unpacked no more X:
 
 NoCheckCompressionRatioBefore 10M 

Good idea!

-- 
   oo. Tomasz Kojm tkojm * clamav.net
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Sun Nov 28 22:37:04 CET 2004


---

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Worm.Plexus.B

2005-02-25 Thread Sergey Yudin
  ===
  ClamAV Virus Database
  -
  --- Result: 
  This virus is already recognized by ClamAV 0.83/722/Thu Feb 24
  00:32:10 2005 as  Worm.Plexus.B . Be careful when submitting samples
  and remember to run freshclam! ===
  
  strange thing
 
 That's quite an old worm (its signature is now in main.cvd and not
 daily.cvd). If I remember correctly, the signature requires UPX
 decompression so you may be running some old (= 0.7x) clamscan/clamd
 _binary_. freshclam's output doesn't report any warning so it's
 definitely 0.83, just make sure you've not mixed old packages (in
 /usr/bin and /usr/local/bin for example). Anyway that's a problem with
 your local configuration and not ClamAV.

thank you Tomasz, I've compiled and installed /usr/local/bin/upx. I'll wait for 
another 
Plexus ;) What else clamav tries to use for unpacking ? unzip unrar upx 
un_WHAT_ELSE ? 

With best regards...

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] Worm.Plexus.B

2005-02-25 Thread Sergey Yudin
  thank you Tomasz, I've compiled and installed /usr/local/bin/upx. I'll
 
 ???
 
 ClamAV has built-in UPX unpacker.

then I dont undestand why clamav make Plexus pass. I have only one copy of 
clamav. Just 
only in /usr/local/bin/clamav. May be you wish to look at that Emails with 
Plexus 
samples. If you do - I'll send it of cause

With best regards...

___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Worm.Plexus.B

2005-02-24 Thread Sergey Yudin
I've got
===
ClamAV update process started at Thu Feb 24 13:06:27 2005
main.cvd is up to date (version: 29, sigs: 29086, f-level: 3, builder: tomek)
daily.cvd is up to date (version: 722, sigs: 2007, f-level: 4, builder: ccordes)
===

today i've got 2 viruses, missed by clamav missed. But KAV caught them. I 
wanted to 
submit these viruses and got:

===
ClamAV Virus Database

Result: 
This virus is already recognized by ClamAV 0.83/722/Thu Feb 24 00:32:10 2005 as 
Worm.Plexus.B . Be careful when submitting samples and remember to run 
freshclam!
===

strange thing

With best regards...


___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] aliases.db Permission denied

2005-02-15 Thread Sergey Yudin
Please can someone tell me, what these errors means ? 
Does clamav try to rehash aliases.db ? 

==
 
Feb 15 13:49:17 mail.crit astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav): Cannot 
open hash database /etc/mail/aliases.db: Permission denied 

Feb 15 13:49:17 mail.crit astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav): 
collect: Cannot write ./dfj1F8nHog003469 (bfcommit, uid=121, gid=25): 
Permission denied 

Feb 15 13:49:17 mail.alert astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav): 
queueup: cannot create queue file ./qfj1F8nHog003469, euid=121, fd=-1, fp=0x0: 
Permission denied 
==
 

with best regards... 


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Re: aliases.db Permission denied

2005-02-15 Thread Sergey Yudin
?? Please can someone tell me, what these errors means ?
?? Does clamav try to rehash aliases.db ?
??
?? 
==
?? Feb 15 13:49:17 mail.crit astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav): Cannot
?? open hash database /etc/mail/aliases.db: Permission denied
??
?? Feb 15 13:49:17 mail.crit astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav):
?? collect: Cannot write ./dfj1F8nHog003469 (bfcommit, uid=121, gid=25): 
Permission denied
??
?? Feb 15 13:49:17 mail.alert astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav):
?? queueup: cannot create queue file ./qfj1F8nHog003469, euid=121, fd=-1, 
fp=0x0:
?? Permission denied
?? 
==
RB It means you have a wrong sendmail configuration and probably a full
RB file system in top of that.
RB As already pointed out, it has nothing to do with clamav, but the
RB SYSERR(clamav) part means you are running sendmail as user clamav...
RB which is probably not what you wanted to do.
Hello Rene!
let me post more logs
=Beginning of the citation==
Feb 15 13:49:15 mail.info astra sendmail[3467]: NOQUEUE: connect from 
srv.rasprodaga.ru
[83.222.5.53]
Feb 15 13:49:15 mail.info astra sendmail[3467]: j1F8nFvV003467: dns 
53.5.222.83.in-addr.arpa.
= srv.rasprodaga.ru
Feb 15 13:49:15 mail.info astra sendmail[3467]: j1F8nFvV003467: Milter 
(spfmilter): init
success to negotiate
Feb 15 13:49:15 mail.info astra sendmail[3467]: j1F8nFvV003467: Milter 
(clamav): init success
to negotiate
Feb 15 13:49:15 mail.info astra sendmail[3467]: j1F8nFvV003467: Milter: 
connect to filters
Feb 15 13:49:17 mail.info astra sendmail[3467]: j1F8nFvV003467: from=, 
size=42859, class=0,
nrcpts=1, [EMAIL PROTECTED],
proto=SMTP, daemon=MTA, relay=srv.rasprodaga.ru [83.222.5.53]
Feb 15 13:49:17 mail.info astra sendmail[3467]: j1F8nFvV003467: Milter add: 
header: Received-SPF:
none (astra.ufa.iib.ru: [EMAIL PROTECTED] does not designate permitted sender
hosts) receiver=astra.ufa.iib.ru; client-ip=83.222.5.53; helo=srv.rasprodaga.ru;
envelope-from=; x-software=spfmilter 0.95 
http://www.acme.com/software/spfmilter/ with libspf2;
Feb 15 13:49:17 mail.info astra sendmail[3467]: j1F8nFvV003467: Milter add: 
header: X-Virus-Scanned:
ClamAV version 0.83, clamav-milter version 0.83 on astra.ufa.iib.ru
Feb 15 13:49:17 mail.info astra sendmail[3467]: j1F8nFvV003467: Milter add: 
header: X-Virus-Status:
Infected with Worm.SomeFool.P
=== Here Clamav is reporting a virus
Can you explain how clavav sends EMAIL ? via smtp:25 or running 
/usr/sbin/sendmail -t ?
by the way
sendmail has atrributes:
# ls -l /usr/sbin/sendmail
-r-xr-sr-x  1 root  smmsp  562348 Feb 11 22:03 /usr/sbin/sendmail
Press any key to continue...
Feb 15 13:49:17 mail.info astra sendmail[3469]: NOQUEUE: connect from [EMAIL 
PROTECTED]
Feb 15 13:49:17 mail.crit astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav): Cannot open
hash database /etc/mail/aliases.db: Permission denied
Feb 15 13:49:17 mail.info astra sendmail[3469]: j1F8nHog003469: alias postmaster 
= root
Feb 15 13:49:17 mail.info astra sendmail[3469]: j1F8nHog003469: alias root = 
sergey
Feb 15 13:49:17 mail.crit astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav): collect:
Cannot write ./dfj1F8nHog003469 (bfcommit, uid=121, gid=25): Permission denied
Feb 15 13:49:17 mail.info astra sendmail[3469]: j1F8nHog003469: from=clamav, 
size=447,
class=0, nrcpts=2, [EMAIL PROTECTED]
Feb 15 13:49:17 mail.debug astra sendmail[3469]: j1F8nHog003469:   0: fl=0x2, 
mode=1: FIFO:
dev=0/0, ino=0, nlink=0, u/gid=0/0, size=0
Feb 15 13:49:17 mail.debug astra sendmail[3469]: j1F8nHog003469:   1: fl=0x1, 
mode=20666: CHR:
dev=131/131072, ino=4499, nlink=1, u/gid=0/0, size=0
Feb 15 13:49:17 mail.debug astra sendmail[3469]: j1F8nHog003469:   2: fl=0x1, 
mode=20666: CHR:
dev=131/131072, ino=4499, nlink=1, u/gid=0/0, size=0
Feb 15 13:49:17 mail.debug astra sendmail[3469]: j1F8nHog003469:   3: fl=0x2, 
mode=140666:
SOCK [0]-[[UNIX: /var/run/log]]
Feb 15 13:49:17 mail.debug astra sendmail[3469]: j1F8nHog003469:   4: fl=0x1, 
mode=20666: CHR:
dev=131/131072, ino=4499, nlink=1, u/gid=0/0, size=0
Feb 15 13:49:17 mail.alert astra sendmail[3469]: j1F8nHog003469: 
SYSERR(clamav): queueup:
cannot create queue file ./qfj1F8nHog003469, euid=121, fd=-1, fp=0x0: 
Permission denied
Feb 15 13:49:17 mail.info astra sendmail[3467]: j1F8nFvV003467: Milter: data, 
reject=554
5.7.1 virus Worm.SomeFool.P detected by ClamAV - http://www.clamav.net
=The end of the citation
With best regards... 

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Quarantining infected mails

2004-12-04 Thread Sergey
On Friday 03 December 2004 12:01, Søren Schimkat wrote:

 Im using Clamav with sendmail, and i've chosen to quarantine infected 
 mail. My question is - what can I do with the files / emails that has 
 been quarantined? Could they be resend somehow - or used i some other 
 manner?

You can remove first 3 lines of quarantined file and run:
cat file|sendmail -it

I hope what you will be clean viruses before. ;-)

-- 
Regards,
Sergey
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


[Clamav-users] make check error on FreeBSD 4.10-STABLE

2004-11-25 Thread Sergey S. Shilov
Hi, All!

When I make check clamav-0.80 on FreeBSD-4.10-STABLE I have a error

--begin cut--
# make check
Making check in libclamav
Making check in clamscan
/bin/sh ../libtool --mode=link gcc  -g -O2   -lcipher -o clamscan  output.o 
getopt.o  memory.o cfgparser.o misc.o  clamscan.o options.o others.o  manager.o 
treewalk.o  ../libclamav/libclamav.la
gcc -g -O2 -o .libs/clamscan output.o getopt.o memory.o cfgparser.o misc.o 
clamscan.o options.o others.o manager.o treewalk.o  
../libclamav/.libs/libclamav.so -lcipher -lz -lbz2 /usr/local/lib/libgmp.so 
-lc_r -Wl,--rpath -Wl,/usr/local/lib
/usr/lib/libc.so: warning: this program uses gets(), which is unsafe.
/usr/lib/libc.so: warning: mktemp() possibly used unsafely; consider using 
mkstemp()
/usr/lib/libc.so: warning: tmpnam() possibly used unsafely; consider using 
mkstemp()
/usr/lib/libc.so: warning: this program uses f_prealloc(), which is not 
recommended.
/usr/lib/libc.so: warning: tempnam() possibly used unsafely; consider using 
mkstemp()
../libclamav/.libs/libclamav.so: undefined reference to `mpz_powm'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_get_ui'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_tdiv_qr_ui'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_add'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_clear'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_init_set_str'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_mul_2exp'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_init'
../libclamav/.libs/libclamav.so: undefined reference to `mpz_set_ui'
*** Error code 1

Stop in /usr/distrib/clamav-0.80/clamscan.
*** Error code 1

Stop in /usr/distrib/clamav-0.80.

--end cut--

Where is a problem! Help me, please!!!

Thanks a lot,
 Sergey  mailto:[EMAIL PROTECTED]

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


  1   2   >