[Clamav-users] Re: Re: Solaris 9 / zziplib

2004-01-19 Thread Tommy McNeely
On Tue, 20 Jan 2004 03:30:38 +0100, Tomasz Kojm wrote: > On Mon, 19 Jan 2004 16:49:28 -0700 > Tommy McNeely <[EMAIL PROTECTED]> wrote: > >> I am afflicted with the __zzip_find_disk_trailer crash.. which I think >> this patch fixes.. but either my firewall is acting stupid, or there > > The patch

Re: [Clamav-users] Re: Solaris 9 / zziplib

2004-01-19 Thread Tomasz Kojm
On Mon, 19 Jan 2004 16:49:28 -0700 Tommy McNeely <[EMAIL PROTECTED]> wrote: > I am afflicted with the __zzip_find_disk_trailer crash.. which I think > this patch fixes.. but either my firewall is acting stupid, or there The patch was broken and has been reversed recently in CVS. Best regards, To

Re: [Clamav-users] sendmail-8.12.10+clamav-0.65+mimedefang-2.39 not catching some virii

2004-01-19 Thread Tomasz Kojm
On Mon, 19 Jan 2004 17:38:02 -0500 <[EMAIL PROTECTED]> wrote: > I'm wondering if there's an issue because Solaris ships with an unzip > but not a zip. I was hoping that someone also running Solaris would > be able to let me know if I just needed to install a third party zip > package with both bi

[Clamav-users] Re: Solaris 9 / zziplib

2004-01-19 Thread Tommy McNeely
On Wed, 24 Dec 2003 15:24:20 +0100, Tomasz Kojm wrote: > On Wed, 24 Dec 2003 00:05:45 + > Marty Lee <[EMAIL PROTECTED]> wrote: > >> Please find attached the patch; the code that was overloading the >> _trailer->z_magic area with the offset was the offending item. I've >> manually mapped the

Re: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Flinn Mueller
Ditto. My version of clamav-0.65 is running since 22 Dec 03 (last time I rebooted for security reasons). Before that it was pretty solid as well. Regards, Flinn On Jan 19, 2004, at 5:02 PM, Wouter de Vries wrote: Roy Morris wrote: It works fine on Openbsd 3.4 --stable, other then the items th

Re: [Clamav-users] sendmail-8.12.10+clamav-0.65+mimedefang-2.39 not catching some virii

2004-01-19 Thread arr
arr> Test #6: Eicar virus embedded within another MIME segment arr> Test #11: Eicar virus within a ZIP file arr> Test #13: Eicar virus sent in a Microsoft TNEF file (winmail.dat) tk> #6 and #13 should be handled by mimedefang (and it should execute clamscan tk> on already parsed files) however I

RE: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Roy Morris
how much email do you get? Mine usually runs for about 6 days or so then pops. I get around 200 msg/hr on the server. I stopped using it until the next version, hoping it would be more stable. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Wouter de Vrie

Re: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Wouter de Vries
Roy Morris wrote: It works fine on Openbsd 3.4 --stable, other then the items this list is already aware of like crashing without notice once in a while. rm I actually managed to get ClamAV 0.65 running rock solid. It has been running now for nearly 2 months without any problems. I am using OpenB

RE: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Roy Morris
It works fine on Openbsd 3.4 --stable, other then the items this list is already aware of like crashing without notice once in a while. rm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Flinn Mueller Sent: Monday, January 19, 2004 2:41 PM To: [EMAIL PROTE

Re: [Clamav-users] Bagle Virus/Worm Status?

2004-01-19 Thread Kevin Spicer
On Mon, 2004-01-19 at 21:31, Tim Wilde wrote: > On Mon, 19 Jan 2004, Kevin Spicer wrote: > > > Yeah, we had about 30 today so far. It seems to be spreading quite > > rapidly. Good news is its supposed to deactivate on the 28th. > > Only 30? I've seen over 500 on my mail systems since getting t

Re: [Clamav-users] Bagle Virus/Worm Status?

2004-01-19 Thread Tim Wilde
On Mon, 19 Jan 2004, Kevin Spicer wrote: > Yeah, we had about 30 today so far. It seems to be spreading quite > rapidly. Good news is its supposed to deactivate on the 28th. Only 30? I've seen over 500 on my mail systems since getting the new sigs late last night. Kudos to Diego for getting t

RE: [Clamav-users] Bagle Virus/Worm Status?

2004-01-19 Thread Tom Walsh
> Yeah, we had about 30 today so far. It seems to be spreading > quite rapidly. Good news is its supposed to deactivate on the 28th. I just have to say it... I love ClamAV. :) Thanks for the reports guys. Tom Walsh Network Administrator http://www.ala.net/

Re: [Clamav-users] Bagle Virus/Worm Status?

2004-01-19 Thread Kevin Spicer
On Mon, 2004-01-19 at 20:57, Tom Walsh wrote: > Anybody seen these yet? > > http://www.viruslist.com/eng/alert.html?id=783050 > > There has been some discussion on bugtraq about it's payload today. > > Just curious... > Yeah, we had about 30 today so far. It seems to be spreading quite rapidl

Re: [Clamav-users] Bagle Virus/Worm Status?

2004-01-19 Thread Rick Macdougall
Hi, Seen clamav catch a few on some of my servers today. Rick Tom Walsh wrote: Anybody seen these yet? http://www.viruslist.com/eng/alert.html?id=783050 There has been some discussion on bugtraq about it's payload today. Just curious... Tom Walsh Network Administrator http://www.ala.net/

[Clamav-users] Bagle Virus/Worm Status?

2004-01-19 Thread Tom Walsh
Anybody seen these yet? http://www.viruslist.com/eng/alert.html?id=783050 There has been some discussion on bugtraq about it's payload today. Just curious... Tom Walsh Network Administrator http://www.ala.net/ --- The SF.Net email is spon

Re: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Flinn Mueller
yes that is the latest, I have yet to play with the latest snaps. i need to test on 3.4, but I am not ready to deploy 3.4 on my server (mostly because of the change from a.out to elf). regards, flinn On Jan 19, 2004, at 9:43 AM, Andrea Riela wrote: http://www.activeintra.net/projects/clamav/.

Re: [Clamav-users] sendmail-8.12.10+clamav-0.65+mimedefang-2.39 not catching some virii

2004-01-19 Thread Tomasz Kojm
On Fri, 16 Jan 2004 15:04:57 -0500 <[EMAIL PROTECTED]> wrote: > Test #6: Eicar virus embedded within another MIME segment > Test #11: Eicar virus within a ZIP file > Test #13: Eicar virus sent in a Microsoft TNEF file (winmail.dat) ... > I'm not overly surprised about the last three, but it

[Clamav-users] Re: clamd network commands

2004-01-19 Thread Jim Ramsay
Laurent Wacrenier wrote: PING/PONG is useless. It could have been better if the server had send a banner at connection startup. Good point - that's much better for determining server state upon connection. This banner should also include the clamd version so that you don't have to use a separat

Re: [Clamav-users] clamd network commands

2004-01-19 Thread Laurent Wacrenier
Le Lun 19 jan 08:46:36 2004, Jim Ramsay écrit: > > 3 - The "PING" command doesn't seem to be very useful in the light of > each command running in its own TCP session. If I get a PONG back, I > know that the server is sane. But then I have to make another TCP > connection to do any other work

[Clamav-users] clamd network commands

2004-01-19 Thread Jim Ramsay
I was a bit confused when I first tried writing a script to connect to clamd 0.65 on a remote server and do scanning via the STREAM command: 1 - I expected to be able to do multiple commands per TCP session... for example: -- connection established C: PING S: PONG C: STREAM S: PORT ... S: s

RE: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Andrea Riela
> http://www.activeintra.net/projects/clamav/. Ok, It looks like it's working. That is the latest release for openbsd? Thanks Andrea --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integr

RE: [Clamav-users] clamd protocol

2004-01-19 Thread Philipp Grosswiler
> If you have can put an accurate time on when clamd stopped > responding, would it correspond to their being a virus DB update? I don't think so. > I assume that you do automatic updates and this is signalled > to clamd (probably via freshclam --daemon-notify). That's true, I am doing automat

RE: [Clamav-users] clamd protocol

2004-01-19 Thread Trog
Quoting Philipp Grosswiler <[EMAIL PROTECTED]>: > > So, how is clamd behaving with the patch and ThreadTimout=0? > > > > Is it any better? > > It is actually better, but unfortunately, there still seems to be a > problem > somewhere. If you have can put an accurate time on when clamd stopped r

Re: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Flinn Mueller
there is no problem with openbsd's libpthread. the problem has to do with the way clamav get's built. i would be surprised that you were able to build it then get an error like that. you don't have gnu pthreads installed do you? If so remove it, you don't need it. try the port though, it s

RE: [Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Jerome LOYET
Hello, There's a big problem with libpthread on obsd, a port exists on http://www.activeintra.net/projects/clamav/. I hope it'll work after. Bye, LOYET Jerome -> -Message d'origine- -> De : [EMAIL PROTECTED] -> [mailto:[EMAIL PROTECTED] De la part -> de Andrea Riela -> Envoyé : lund

[Clamav-users] Problem with openbsd 3.3

2004-01-19 Thread Andrea Riela
Hi folks, I need to install clamav to check my filesystem. I've tried with clamav-0.65 port: I've installed anything, I've created the /etc/clamav.conf and the _clamd user/group, but when I try to use freshclam or clamd I receive this message: /usr/libexec/ld.so: clamd: libpthread.so.20.20: No su

[Clamav-users] Clamav Problem Solaris 8

2004-01-19 Thread Clamav
Follwing problem with (devel-20040108, clamav-milter version '0.66c'): After several days I eventually get the following messages in clamd.log (about 200 times): Sat Jan 17 20:38:01 2004 -> ERROR: ScanStream: accept() failed. Sat Jan 17 20:40:20 2004 -> ERROR: accept() failed. Sat Jan 17 20:40:20