Re: [Clamav-users] clamav-milter problem

2004-01-12 Thread Alikhani
Hi , I uncomment the line TCPSocket 3310 on /usr/local/etc/clamav.conf but when I run the command: /usr/local/sbin/clamav-milter -blo /var/run/clmilter.sock it says: connect: Connection refused Can't talk to clamd server at 127.0.0.1 on port 3310 Check your entry for TCPSocket in /usr/local/etc/cl

Re: [Clamav-users] Setting up Clamav-Milter correctly on RedHat Linux 8.0

2004-01-12 Thread Nigel Horne
On Monday 12 Jan 2004 5:36 am, STEPHEN_DAVID SCANLAN wrote: > I can't get clamav-milter to create a socket correctly. > I am particularly puzzled with the clamd errors. How can I tell if the > Daemon is running? > I don't see it with ps -aux Of the two problems you mention I suspect the second i

Re: [Clamav-users] clamav-milter problem

2004-01-12 Thread Nigel Horne
On Monday 12 Jan 2004 7:19 am, Alikhani wrote: > Hi , > I uncomment the line TCPSocket 3310 on /usr/local/etc/clamav.conf but > when I run the command: > /usr/local/sbin/clamav-milter -blo /var/run/clmilter.sock > it says: > connect: Connection refused > Can't talk to clamd server at 127.0.0.1 on p

[Clamav-users] problem in updating virus db

2004-01-12 Thread Abyot Asalefew
Hi All, Below is the output of freshclam while updating virus db. I am running clamav on sparc solaris 8 machine. freshclam was doing fine for previous version of clamav (0.60) the problem comes after updating to version 0.65 --- Clam

Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."

2004-01-12 Thread Mark Mielke
On Sun, Jan 11, 2004 at 05:50:38PM -0800, OpenMacNews wrote: > still no joy at 17:50 PST ... > -- On Sunday, January 11, 2004 8:05 PM -0500 "Christopher X. Candreva" > <[EMAIL PROTECTED]> wrote: > >On Sun, 11 Jan 2004, OpenMacNews wrote: > >>my db updates have *suddenly* stopped working afte

Re: [Clamav-users] clamav-milter problem

2004-01-12 Thread Alikhani
Hi Nigel Thank you very much for your help. I run clamd at first and the when I run clamav-milter it was OK. -- by regards -- Sophia Nigel Horne wrote: On Monday 12 Jan 2004 7:19 am, Alikhani wrote: Hi , I uncomment the line TCPSocket 3310 on /usr/local/etc/clamav.conf but when I run the comm

Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."

2004-01-12 Thread Mick Pollard
Just worked here after failing earlier in the day. Regards Mick Pollard ( lunix ) On Sun, 11 Jan 2004 23:44:29 -0500 (EST) "Christopher X. Candreva" <[EMAIL PROTECTED]> wrote: > On Mon, 12 Jan 2004, Payal Rathod wrote: > > > I updated my definitions just 1 mins back. They seem ok. > > -Pay

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread Tomasz Papszun
On Sun, 11 Jan 2004 at 16:45:30 -0500, jef moskot wrote: > Out of curiosity, what sort of viruses are typically being added to the > database? Are they mostly new viruses? Added are viruses which users submitted to us :-) . Or found by us. Of course we add new viruses as quickly as possible (th

Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."

2004-01-12 Thread Christopher X. Candreva
On Mon, 12 Jan 2004, Mick Pollard wrote: > Just worked here after failing earlier in the day. Checking the logs, updates started working at 4:50 AM this moring (Monday) == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Inte

Re: [Clamav-users] freshclam updates failing: sudden appearance of "ERROR: Verification: MD5 verification error."

2004-01-12 Thread Denis De Messemacker
On Sun, Jan 11, 2004 at 04:53:45PM -0800, OpenMacNews wrote : > hi, > > my db updates have *suddenly* stopped working after no prior problems > for ages. > > now, a: > >% /usr/local/clamav/bin/freshclam --log=/var/log/freshclam.log >--datadir=/var/clamav_db > > reports: >

[Clamav-users] scan problem

2004-01-12 Thread Robert L. Simpson
I have a problem with clamscan. When I scan the test files it reports the correct number of infected files but when I scan a copy of the EICAR Standard Antivirus Test File, clamscan ignores it. Whats up? Bob Simpson --- This SF.net email is

[Clamav-users] A few enhancements?

2004-01-12 Thread Carl Holtje ;021;vcsg6;
All- I was wondering, if after the mele last evening with the distribution of new defintions, if it would be possible to configure more control over the update process... Specifically, I'd like to think that if I had a mirror site geographically close (relatively) to me, that I would be more likel

Re: [Clamav-users] scan problem

2004-01-12 Thread Tomasz Papszun
On Mon, 12 Jan 2004 at 6:51:36 -0600, Robert L. Simpson wrote: > I have a problem with clamscan. When I scan the test files it reports the correct number of infected files but when I scan a copy of the EICAR Standard Antivirus Test File, clamscan ignores it. Whats up? Please, shorten lines len

Re: [Clamav-users] A few enhancements?

2004-01-12 Thread Tomasz Papszun
On Mon, 12 Jan 2004 at 7:54:54 -0500, Carl Holtje ;021;vcsg6; wrote: > > I was wondering, if after the mele last evening with the distribution of > new defintions, if it would be possible to configure more control over the > update process... Specifically, I'd like to think that if I had a mirror

Re: [Clamav-users] A few enhancements?

2004-01-12 Thread Fajar A. Nugraha
Carl Holtje ;021;vcsg6; wrote: All- I was wondering, if after the mele last evening with the distribution of new defintions, if it would be possible to configure more control over the update process... Specifically, I'd like to think that if I had a mirror site geographically close (relatively) t

[Clamav-users] clamav-milter compile problem

2004-01-12 Thread EyedMax
Hello, list! I can't compile clamav-milter on my FREE-BSD 4.4-RELEASE system :( Everything looks fine, except a few warnings about crypt, but no errors... clamav-milter itself isn't appears after make. Any ideas? p.s. sendmail compiled with milter - actually I run a drweb mail filter via it...

Re: [Clamav-users] clamav-milter compile problem

2004-01-12 Thread Nigel Horne
On Monday 12 Jan 2004 3:31 pm, EyedMax wrote: > Hello, list! > p.s. sendmail compiled with milter - actually I run a drweb mail filter > via it... Running a milter from within sendmail (i.e. having a sendmail which supports mailters at runtime) is not the same as being able to build new milters.

[Clamav-users] False positive on big files

2004-01-12 Thread Xavier Poinsard
Hi all, I have got some false positives but the files are too big for the form at http://www.nervous.it/~nervous/cgi-bin/sendvirus.cgi The false positives are occuring with boot disk images and iso files. The implicated signatures are : - HLLC.GodSquad - Constructor.Dos.DBCK - HLLO.C-Virus.4096 An

Re: [Clamav-users] clamav-milter compile problem

2004-01-12 Thread EyedMax
Nigel Horne wrote: On Monday 12 Jan 2004 3:31 pm, EyedMax wrote: Hello, list! p.s. sendmail compiled with milter - actually I run a drweb mail filter via it... Running a milter from within sendmail (i.e. having a sendmail which supports mailters at runtime) is not the same as being ab

Re: [Clamav-users] Re: [Clamav-users]clamav-milter

2004-01-12 Thread Internet Helpdesk
>> At any rate, is there way to make clamav-milter produce a log or at least >> produce some output on the terminal screen? The man page for >>clamav-milter >> mentions a -x or --debug-level but these options are not recognized. >They are recognised if you recompile with CL_DEBUG. >It is already

[Clamav-users] RE: FD_SETSIZE error

2004-01-12 Thread Marc Brooks
I made the change to the sys/types.h and everything now works fine without any errors. Thanks... Marc S. Brooks Programmer/Systems Admin Tech Deck/Modifiers Cars/Skumm/X Concepts 975 Andreasen Escondido, CA 92029 760-740-2625 ph 760-740-2643 fx [EMAIL PROTECTED] > On Monday 29 Dec 2003 7:52

Re: [Clamav-users] problem in updating virus db

2004-01-12 Thread Peter Bonivart
I'm just wondering if you have GMP on your machine? It's needed to verify the signatures of the new database files introduced with 0.65. /Peter Bonivart --Unix lovers do it in the Sun Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14, SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 +

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread jef moskot
On Mon, 12 Jan 2004, Tomasz Papszun wrote: > Added are viruses which users submitted to us :-) . Or found by us. Well, yes, obviously, but could you maybe take a recent representative update and give us an idea of what the added viruses are like? Just so that we get an approximate feeling of wha

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread Peter Bonivart
Are you subscribed to clamav-virusdb? If not, try that first. /Peter Bonivart --Unix lovers do it in the Sun Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14, SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP jef moskot wrote: Well, yes, obviously, but could you maybe take a recen

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread Daniel J McDonald
On Mon, 2004-01-12 at 12:20, jef moskot wrote: > On Mon, 12 Jan 2004, Tomasz Papszun wrote: > > Added are viruses which users submitted to us :-) . Or found by us. > > Well, yes, obviously, but could you maybe take a recent representative > update and give us an idea of what the added viruses are

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread jef moskot
On Mon, 12 Jan 2004, Daniel J McDonald wrote: > are you on the clamav-virusdb mailing list? Yes, but it doesn't say whether the viruses are old or new, and looking them up given the various names used and the quantity of updates is not very convenient. > Tomasz Kojm sent out an update on Saturday

Re: [Clamav-users] Re: [Clamav-users]clamav-milter

2004-01-12 Thread Nigel Horne
On Monday 12 Jan 2004 6:06 pm, Internet Helpdesk wrote: > What do the different debug levels log? Specifically, what log level only > logs error? The higher the level the more that is debugged (-x9 debugs more than -x4). There is no logic to it, only what I needed to debug when developing the so

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread Peter Bonivart
> Would it be fair to say that when a new update comes out that it has > likely been triggered by a recent discovery? In most cases yes, since it's a fairly young project and specialized for scanning e-mail it's not that interesting to pump up the number of recognized viruses like the commercial

[Clamav-users] Can't get viruses2.md5 sum from clamav.elektrapro.com

2004-01-12 Thread Mário Luis Ghoneim
ERROR: Error while reading md5 sum of database from clamav.elektrapro.com ERROR: Can't get viruses2.md5 sum from clamav.elektrapro.com Someone knows what's happened? tks Mário --- This SF.net email is sponsored by: Perforce Software. Perf

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread Denis De Messemacker
On Mon, Jan 12, 2004 at 01:56:47PM -0500, jef moskot wrote : [...] > > Thanks, that puts things into a little perspective. > > I'm really just looking for a GENERAL idea. For example, if you had to > explain to the average user what sort of viruses were being added to the > database...is it MO

Re: [Clamav-users] Can't get viruses2.md5 sum from clamav.elektrapro.com

2004-01-12 Thread c2o Technical Support
At 08:07 AM 13/01/04, [EMAIL PROTECTED] wrote: >ERROR: Error while reading md5 sum of database from clamav.elektrapro.com >ERROR: Can't get viruses2.md5 sum from clamav.elektrapro.com > >Someone knows what's happened? I got the same log entry around midnight local time (GMT+11 with Daylight Saving

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread c2o Technical Support
At 11:02 AM 12/01/04, Flinn Mueller wrote: >Maybe a browsable virus database would be in order. Something ala >http://securityresponse.symantec.com/avcenter/. The description data >from sendvirus.cgi would need to go right in there. Anyone working on >something like this already? Even making ac

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread Thomas Lamy
c2o Technical Support wrote: At 11:02 AM 12/01/04, Flinn Mueller wrote: >Maybe a browsable virus database would be in order. Something ala >http://securityresponse.symantec.com/avcenter/. The description data >from sendvirus.cgi would need to go right in there. Anyone working on >something

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread jef moskot
On Mon, 12 Jan 2004, Denis De Messemacker wrote: > In conclusion, and to answer your question, we receive actually a > majority of current worms,trojans and viruses that are still in activity. > Those are analysed on a fifo base. > At any time, if fast spreading new virus is received, it preempts t

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread jef moskot
I don't see any reason to re-invent the wheel. If there are no legal or technical problems with linking to another commercial site, I think it makes more sense to just add an URL to our list, as opposed to generating fresh content for thousands of entries. Jeffrey Moskot System Administrator [EMA

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread Flinn Mueller
On Jan 12, 2004, at 7:48 PM, jef moskot wrote: I don't see any reason to re-invent the wheel. If there are no legal or technical problems with linking to another commercial site, I think it makes more sense to just add an URL to our list, as opposed to generating fresh content for thousands of

Re: [Clamav-users] problems with spamcop

2004-01-12 Thread Fajar A. Nugraha
As this is not a clamav-issue, this message should not be here. However, Fritz Mesedilla wrote: How come I got this message from spamcop that I am sending spam? Based on the Mail relay test on abuse.net, I am clean. Besides, I am protected by amavisd-new,clamav, and spamassassin. As a general

Re: [Clamav-users] type of viruses being added to database

2004-01-12 Thread c2o Technical Support
Heya, At 01:27 PM 13/01/04, you wrote: >> I don't see any reason to re-invent the wheel. If there are no legal >> or >> technical problems with linking to another commercial site, I think it >> makes more sense to just add an URL to our list, as opposed to >> generating >> fresh content for thous

RE: [Clamav-users] problems with spamcop

2004-01-12 Thread Fritz Mesedilla
Sorry but it was through this mailing list that I got this message. I sent a message to this list [clamav-users] concerning freshclam update problems yesterday then after that I got this message from spamcop. Anyway, thanks for that clarification. Cheers, fritz --- + Basta Ikaw Lord -

[Clamav-users] problems with spamcop

2004-01-12 Thread Fritz Mesedilla
How come I got this message from spamcop that I am sending spam? Based on the Mail relay test on abuse.net, I am clean. Besides, I am protected by amavisd-new,clamav, and spamassassin. Cheers, fritz --- + Basta Ikaw Lord -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTEC