Re: [Clamav-users] Clamav error

[christian laubscher]

> In which way 0.68 (our running version) is "OUTDATED" ? 

CL_FLEVEL is still1 (2 in 0.70) in libclamav/others.c

that's why the developers told us to upgrade on or before 04-24, 
iirc...

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


---
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Re: clamav-milter, kill pid not working

[christian laubscher]

> in linux: killall -qw /path/to/clamav-milter

here (slack 9.1,, 2.4.24, sendmail 8.12.10) clamav-milter never honours 
a TERM signal (which is sent by killall by default).

it always has to be SIGKILL'ed.
i get bad feelings when testing... ;-)

-- 


---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] clamd crash triggered by THIS list

[christian laubscher]

On Tue, Jun 01, 2004 at 01:41:08AM -0500, Damian Menscher wrote:

> May 31 11:36:23 astro clamd[1002]: Segmentation fault :-( Bye..

> So... the message that broke it was sent to this list, specifically the
> message from Samuel Benzaquen with timestamp:
> Date: Mon, 31 May 2004 11:16:12 -0400

same happened here.
.070/.70j, no patch, slack 9.1

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

[Clamav-users] double quarantine?

[christian laubscher]

since rc3, maybe caused by my adapting all new config files, mails 
containing virus' are kept twice in quarantine; once as 'msg.xx' 
and once as 'msg.xx.virusname'.

most likely i did something stupid and/or misread some new 
documentation.

(slackware 9.1, sendmail 8.12.10, 0.80rc3 with clamav-milter 0.80c)

rtfms welcome!

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] milter version

[christian laubscher]

when i enter 'clamd -V' i get a version line reflecting the i get a 
version line indicating the current database version, eg .../535/..., 
currently.

the clamav-milter X-Virus-Scanned lines, however, seem to reflect the 
version feedback of clamd when the milter was started, not the current 
one.

since the pingServer function seems to be only called at initialization 
time, i presume this is a feature, not a bug - although it would be 
much more informative to have the X-Virus-Scanned line reflect the 
clamd version info valid at scanning time, not the historic one, imho?

btw: thank you for an *excellent* piece of software!

christian

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] clamav-milter kill

[christian laubscher]

not a bug, but maybe a samll wish for a small feature:

being a devout user of clamav-milter, and changing my clamav package 
ever so often upon the current recommendations of the development team, 
i always try to shutdown sendmail, calamav-milter, freshclam, and clamd 
prior to replacing the clamav package.
for killing the clamav components, i use the .pids in /var/run/clamav/.

while frechclam and clamd gracefully stop, clamav-milter doesn't - i am 
doing something wrong or am i simply expecting to much? i always have 
to issue SIGKILL to shutdown clamav-milter...

when looking at the code, i can easily find the event signal handling 
code for both clamd and freshclam, though not so for clamav-milter.

i guess it would be simpler for a lot of users if 
'kill `cat /var/run/clamav/clamav-milter.pid`
would get honoured.

a big 'thank you' to the developers!

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] clamd performance on Solaris vs Linux

[christian laubscher]

On Fri, Oct 29, 2004 at 09:11:26AM +0100, Nigel Horne wrote:

> clamAV does a LOT of malloc/frees especially when decoding emails.

maybe dlmalloc could help?



-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] freshclam .81rc1

[christian laubscher]

i am running freshclam as a daemon with 25 updates a day.

was always running smooth and reliably. :-)

since .81rc1, however, freshclam kind of 'freezes' after an update; though 
it seemingly updates the database, it doesn't notify clamd, as per  
freshclam.log and clamd.log, and it no longer gets its signal 14 from then 
on.

funny thing: if i'm killing it, it says 'terminating', and *afterwards* 
it logs the lines "clamd successfully notified' and '-' that should 
have written an hour ago.

it takes a second kill to really go away and make place for a new copy. ;-)

as i have changed nothing in my confs: what have i possibly done wrong?


but: thank you for clamav!
i am running small sendmail/clamav-milter operation *very* reliably for 
quite some time now.

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam .81rc1

[christian laubscher]

On Sun, Jan 23, 2005 at 02:35:03PM +0100, Tomasz Kojm wrote:

[...]
> /* #define SESSION */ /*
[...]
> recompile, install, restart, and let us know if it fixes the problem.

thank you - done.
i'll wait for the next few updates and let you know.

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam .81rc1

[christian laubscher]

On Sun, Jan 23, 2005 at 01:47:41PM +, Nigel Horne wrote:

> Are you running BSD?

sorry for having left out information i thought not relevant:

slack 9.1, sendmail 8.12.10, gcc 3.2.3, libc 2.3.2.
board is 440bx-ish, pentium-ii (deschutes) stepping 2.

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam .81rc1

[christian laubscher]

On Sun, Jan 23, 2005 at 02:12:49PM +, Nigel Horne wrote:
> > slack 9.1,
> Is that Linux? Interesting, I've never heard of this problem
> on Linux, only BSD.

it's a vanilla 2.4.26 linux kernel.

and: i *never* had freshclam hangs before .81rc1, and on two out of three 
db updates since.

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam .81rc1

[christian laubscher]

On Sun, Jan 23, 2005 at 02:35:03PM +0100, Tomasz Kojm wrote:

[...]
> /* #define SESSION */ /*
>  * Keep one command connection open to clamd, otherwise
> a new * command connection is created for each new email
>  */
> 
> recompile, install, restart, and let us know if it fixes the problem.

it just handled the third update since above change without hanging - seems 
the session thing really did the trick - thankxalot! :-)

btw: would this imply that my system is somehow 'wrong', os- or otherwise?

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] clamav-milter .83

[christian laubscher]

using clamav-milter .83 i get:
X-Virus-Scanned: ClamAV version 0.83, clamav-milter version 0.83 on ...
while using .82 i got:
X-Virus-Scanned: ClamAV version 0.82/databaselevel/databasedate on ...

i thought the .82 contents quite interesting - maybe the two info types 
could be merged, somehow, in a later version?

and my sincere thanks to the clamav tean for a *very* useful package, and 
signature service - working here reliably day in, day out!
(slack 9.1/linux 2.4.26, sendmail 8.12.10, clamav-milter w/o clamd)

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] clamav-milter .83

[christian laubscher]

[...]
> > X-Virus-Scanned: ClamAV version 0.83, clamav-milter version 0.83 on ...
[...]
> 
> That is because SESSION is no longer used by default.

oh - i misread the man page then:
"The default build is for SESSION to be enabled."
;-)

anyway - thanks!

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] clamav-milter .83

[christian laubscher]

> > using clamav-milter .83 i get:
> > X-Virus-Scanned: ClamAV version 0.83, clamav-milter version 0.83 on ...
> > while using .82 i got:
> > X-Virus-Scanned: ClamAV version 0.82/databaselevel/databasedate on ...
> > 
> > i thought the .82 contents quite interesting - maybe the two info types 
> > could be merged, somehow, in a later version?
> 
> That is because SESSION is no longer used by default.
> 

i now uncommented the `#define SESSION`, and i've got back what i have been 
missing. :-)

not meaning to annoy you -just for my understanding - please ignore this 
question if it's too stupid or too academic:

in .81rc1, i had to comment out the `#define SESSION` (freshclam freeze); 
in .82, not using clamd anymore, the enabled `#define SESSION` didn't hurt 
anymore (as it doesn't, seemingly, in .83).

but i'm not using clamd, so what's the difference between keeping a session 
open with something i haven't got, and having no session, at all?

#define SESSION /*
 * Keep one command connection open to clamd, otherwise a new
 * command connection is created for each new email
 *
 * FIXME: When SESSIONS are open, freshclam can hang when
 *  notfying clamd of an update. This is most likely to be a
 *  problem with the implementation of SESSIONS on clamd.
 *  The problem seems worst on BSD.
 */

thank you for your patience!

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] No announcement of 0.83 on clamav-announce ML

[christian laubscher]

On Tue, Feb 15, 2005 at 06:40:42PM -0700, Hal Goldfarb wrote:
> [...]   I also think RPM binaries 
> should be made available before an official release.  [...]

please not!

-- 
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] freshclam and milter --internal notification

[christian laubscher]

On Sun, Feb 20, 2005 at 10:47:53AM -0600, Damian Menscher wrote:

[...]
> freshclam[26975]: ERROR: Clamd was NOT notified: No socket specified in
> /usr/local/encap/clamav-0.83/etc/clamd.conf

may freshclam.conf still contains a 'NotifyClamd directive?
or rather, the invocation of freshclam specifies a '--daemon-notify' 
option?

> Now, clamav-milter will still see the updates, right?  [...]
i guess it does; id did so, here.

-- 
___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] clamav milter: loading new database

[christian laubscher]

i am running .83, clamav-milter w/o clamd, freshclam on slack 9.1.
low load, but persistent flow of incoming messages ( a few hundred mails 
a day, no bad peaks).

normally, shortly after a successful freshclam update, clamav milter logs 
a 'loading new database' message and the x-virus-scanned line is updated, 
accordingly.

the 761 update (by freshclam) happened here at 2005-03-10-22.25.59 cet; 
the update was successful (checked by sigtool -i).

but in the hours passed by since, clamav-milter doesn't seem to have seen 
the new version; no 'loading new database' was logged, and the 
x-virus-scanned line still reflects the 760 version.

as this is happening for the first time: am i doing something wrong?
and: how can i 'force' clamav-milter to reload the new database?

tia!

-- 
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamav milter: loading new database

[christian laubscher]

On Fri, Mar 11, 2005 at 09:02:14AM +, Nigel Horne wrote:
> Update to at least 0.83b.

would this be in the nightly snapshots (ie clamav-devel)?

-- 
___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] 84rc1 freshclam onupdateexecute

[christian laubscher]

84rc1 (same in cvs) freshclam, manager.c:

__cut__
   if(optl(opt, "on-update-execute"))
   arg = getargl(opt, "on-update-execute");
   else if((cpt = cfgopt(copt, "OnUpdateExecute")))
   arg = cpt->strarg;

   if(arg) {
   if(optc(opt, 'd'))
   execute( "OnUpdateExecute", pt );
   else
   system(pt);
   }
__cut__

is 'pt' useful here, at all?
or should rather 'arg' be used?

-- 
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] OnOutdatedExecute

[christian laubscher]

On Sat, Oct 08, 2005 at 04:15:33AM +, Mark wrote:

> Anyone? :) I'd really like to know, before I implement this new option.

a look into freshclam/manager.c could help you here, i think.

-- 
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Virus not detected by clamav

[christian laubscher]

> What version are you using? I am using and updated 87.1, and I think
> that this version is not working.

my clamscan (87.1/1213) definitely finds it here (Worm.Sober.U).

-- 
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] SCO virus - Clam 0.65

[christian laubscher]

> As the reply to is spoofed, this makes no sense at all (and i am getting 
> lots of bounces).  How do we stop this happening?

if it's clamav-milter:

- do away with the smfi_setreply statement (at or near line 1524)

- set 'rc = SMFIS_DISCARD;' (instead of SMFID_REJECT) (at or near line 
1522)

seems to run here ok.

-- 


---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] all this "complaining" about 0.65 vs CVS ...

[christian laubscher]

On Tue, Feb 10, 2004 at 08:53:48AM -0800, OpenMacNews wrote:
[...]
> just one man's opinion.

you are not alone - heartily seconded!

-- 


---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam not updating.

[christian laubscher]

> SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES

from the *fine* manual (docs/node10.html):

__cut__
The following packages are optional but highly recommended:

[...]

GNU MP 3

It's very important to install the GMP package because it allows
freshclam to verify the digital signature of the virus database.
If freshclam was compiled without GMP support it will display
"SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES" on every
update. You can download GNU MP
http://www.swox.com/gmp>

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam not updating.

[christian laubscher]

> ClamAV update process started at Mon Apr 19 10:16:50 2004
> SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
> 
> That's all it does.

btw: nothing in the log(s)?

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam not updating.

[christian laubscher]

> Strange that it used to update perfectly. I haven't changed a thing. Is
> this package really neccesary for freshclam?

for the warning to go away: yes.

as far as i can see in the code (freshclam/manager.c-downloadmanager()) 
the warning is not meant to hinder downloads though.

if you have download problems, then you may have other problems than 
the warning - maybe a newly established proxy/firewall?

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam not updating.

[christian laubscher]

> --
> ClamAV update process started at Tue Apr 20 06:30:00 2004
> SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
> main.cvd is up to date (version: 22, sigs: 20229, f-level: 1, builder:
> tkojm)
> daily.cvd is up to date (version: 269, sigs: 927, f-level: 1, builder:
> tomek)
> --

it's as updated as mine is - everything seems to be allright. :-)

> The first one is a manual "freshclam" from the commandline, the second
> one is automated in a cron and the third one is again manually.
> So it does work somehow. How long can an update take? Or can anything
> else be wrong?

how did you come to the conclusion something is 'wrong'?

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Re: [Clamav-users] Freshclam not updating.

[christian laubscher]

> Because when I entered "freshclam" before, it used to update in 10
> seconds. Now I can wait for hours when I enter "freshclam"  manually and
> still nothing.

oh. :-(
here it takes 2 to 5 seconds, just tried; i would expect your problem 
to be related to a dns/proxy/firewall issue, not to freshclam.

sorry to be of no help.

-- 
Please avoid sending me Microsoft Office attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users