Re: [Declude.Virus] Current Version of Clam AV
The error in the clamav log shows:
- d:\imail\spool\proc\work\d716a0~1.vir\/0: Unable to create
temporary directory ERROR
I think it's a clamav bug when it is running as a service. I don't think
it's a declude or service wrapper issue.
We run clamd as a service and access it from two different
applications(not Declude). One (ASSP) accesses it by streaming to TCP
Socket 3310, and the other (hMailserver) calls the clamdscan
executable directly. Neither one has any of the symptoms that have
been described here using clamAV running as a service.
From the log:
Thu Mar 01 15:27:12 2007 -
d:\hMailServer\Data\{9559F48A-A47A-41C7-A381-0C2451B11445}.eml:
Email.Img.Gen018.Sanesecurity.06122000 FOUND
Thu Mar 01 15:27:12 2007 -
d:\hMailServer\Data\{D87307A7-7112-4322-84E5-28E40C7AB4C8}.eml: OK
Thu Mar 01 15:27:35 2007 - Accepted connection on port 1704, fd 792
Thu Mar 01 15:27:37 2007 - stream 1704: OK
Thu Mar 01 15:27:39 2007 -
d:\hMailServer\Data\{F31D6EF2-C94B-4B00-8120-8FA719C83E7F}.eml: OK
Thu Mar 01 15:28:49 2007 - Accepted connection on port 1091, fd 668
Thu Mar 01 15:28:50 2007 - stream 1091:
Email.Img.Gen016.Sanesecurity.06121201 FOUND
Doug Traylor
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
Re: [Declude.Virus] runclamd and runclamscan
On 11/2/06, Michael Jaworski [EMAIL PROTECTED] wrote: These files are within the latest version in clamav-0.88.5-1. (http://www.sosdg.org/clamav-win32/index.php) Just need to make sure you check the Contributed Tools check box during the installation. The directories/files will be installed in C:\clamav-devel\thirdparty directory. Did that on a new install and the directories were created but there were no files in it. As if they have been removed. Did I miss something? I ended up getting them from the wayback machine, but those links have since started returning corrupted files so I post the runclamd.zip in a couple of places. I have uploaded the runclamd.zip file to my Yahoo briefcase and my eggdisk.com folder. Both have been verified as working. Don't know why the wayback machine started failing. http://www.eggdisk.com/files/95445_cbapo/runclamd.zip or (no direct link to Yahoo briefcase files): http://briefcase.yahoo.com/rz_racer_69 click on Files select runclamd Good Luck, Doug Traylor --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] runclamd and runclamscan
Looks like the web page for runclamd and runclamscan http://www.smartbusiness.com/imail/declude/ has been removed. For the time being, it, and the files linked to, can still be accessed at Google's cache: http://72.14.203.104/search?q=cache:XBeX2LhdbnoJ:www.smartbusiness.com/imail/declude/ or http://tinyurl.com/y4j2yl Just in case you need it, Doug (master of the obvious) --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] OT - Server Room Temperature
We just looked at the operating spec of our servers from the Manufacturer's (Dell) website. The max is listed as 95* F and we run around 80* F during the day on weekdays and up to 92* F on the weekends when they turn off the AC in the plant. We have our own AC which runs 24/7 in the computer room/closet. So far we have not had any noticeable system problems in the five years we have been operating this way. When we had a large IBM mainframe with all the dressing, we kept it in a large computer room that was kept at a chilly 66* F. I was a computer operator then and worked in there for 8-12 hours a day. I would wear two shirts and longs sleeves to work,even when it was 110* F outside - Texas. Doug - Original Message - From: Jeff To: Declude.Virus@declude.com Sent: Thursday, August 11, 2005 8:58 AM Subject: [Declude.Virus] OT - Server Room Temperature Can someone point me to a source of information regarding what temperaturea server room should be at ? Thank you.
Re: [Declude.Virus] OT - Server Room Temperature
I agree that the room should be much cooler, I hatecoming in on the weekends here,but the management has an "if it ain't broke don't fix it" attitude and point out that we have had no significant problems over 5 years so why change things now. We have had a few drives (4 out of 20)fail over the years, some internal, some in a Powervault,but nothing that seems out of the ordinary for 5 year old 10k rpm drives that are always on. Since they are all raided, it has not caused us any trouble yet and we simply replace the drive under our sevice contract. I always look at it as an opportunity to get more drive space as they don't make drives that small anymore. Upgrading our drives one at a time. :o) 4 failures out of 20 drives over 5 years. Does that seem too high a failure rate or about average? If it could be proven that the high temps are causing drive failures the management might be a bit more interested in upgrading the AC system in the computer room. Doug - Original Message - From: Matt To: Declude.Virus@declude.com Sent: Friday, August 12, 2005 11:30 AM Subject: Re: [Declude.Virus] OT - Server Room Temperature Doug,Hard drives are probably the most sensitive components that you have in your servers, and I am not aware of any hard drives that should be run above 50C/122F. My server runs about 35F hotter for the system temp than the environment and about 40F hotter for the CPU's than the environment. Note that these readings are under normal load, but when the server redlines, the CPU's increase by about 15F and the system by about 5F. Considering that the hard drives create heat themselves and their much lower tolerance for heat in comparison to solid state components, it would seem that going over 30C/85F for the ambient temperature would be very dangerous as far as the hard drives go in an active server. Hard drives will likely go over their operating temperature long before the system or the processors unless you have a broken fan or bad connection with a heat sync. My system is spec'd at 15C/27F over the hard drive's tolerance, and my CPU's at 27C/50F over.IMO, 66F is the proper server room temperature, and it gives some leeway for adding more equipment and other issues that can crop up such as A/C failures. 72F would be the high end normal temp that I would want to see. If my colo was over 75F, I would definitely complain. The guy next to me with 25 TB's of 15,000 RPM SCSI drives would probably complain louder :)MattDoug Traylor wrote: We just looked at the operating spec of our servers from the Manufacturer's (Dell) website. The max is listed as 95* F and we run around 80* F during the day on weekdays and up to 92* F on the weekends when they turn off the AC in the plant. We have our own AC which runs 24/7 in the computer room/closet. So far we have not had any noticeable system problems in the five years we have been operating this way. When we had a large IBM mainframe with all the dressing, we kept it in a large computer room that was kept at a chilly 66* F. I was a computer operator then and worked in there for 8-12 hours a day. I would wear two shirts and longs sleeves to work,even when it was 110* F outside - Texas. Doug - Original Message - From: Jeff To: Declude.Virus@declude.com Sent: Thursday, August 11, 2005 8:58 AM Subject: [Declude.Virus] OT - Server Room Temperature Can someone point me to a source of information regarding what temperaturea server room should be at ? Thank you.
Re: [Declude.Virus] about Imail1.exe security issue
Any advice on how to solve this problem? This has been discussed on the Imail forum in the recent past. See a direct search of the archives with many posts about this at: http://www.mail-archive.com/cgi-bin/htsearch?config=imail_forum_list_ipswitch_comrestrict=exclude=words=imail1.exe+hacked If you have problems with the above long link try: http://tinyurl.com/6xd5u Additional help can be gained by subscribing and posting to the Imail list at: http://www.ipswitch.com/support/mailing-lists.html Be sure to read all the posts in the archive before posting to the Imail list as some of the list denizens don't suffer fools too well. (meaning they occasionally get tired of answering the same old questions over and over again and can be a bit rude to new list members, but don't be deterred, as there is a lot of knowledge there) also, hit the new forum for Imail at(which didn't find anything when I searched): http://www.ipswitch.com/forums/messages.aspx?ForumID=10 Hope this leads to some help, Good luck, Doug Traylor PS. You might also want to research the Blackice server software firewall(~$200 at some reseller--mentioned on the list). That has been discussed a bunch lately on the list as a useful tool to block dictionary attacks. I don't have it yet, but I think the traffic analysis and logging would help you track down any unusual behavior. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
