Re: [Clamav-users] clamd dieing again, got some debug information.

2004-06-24 Thread Trog
On Mon, 2004-06-21 at 18:35, Christopher X. Candreva wrote: > Segmentation Fault Please test with current CVS (as of now). Thanks -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-users] [Fwd: memory hog in 0.72 and 0.73]

2004-06-24 Thread Tomasz Papszun
On Wed, 23 Jun 2004 at 17:40:19 -0300, René Bellora wrote: > i found the offending email. It's a 134mb email. It contains a 100mb > file. If i scan the file alone, memory consumption reaches 13mb. If i > scan the raw email, the memory consumption reaches 360mb. Any I don't consider a 134 mb ema

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-24 Thread Philipp Ringli
On 24.06.2004, at 03:21, Todd Lyons wrote: Philipp Ringli wanted us to know: + /usr/bin/freshclam --quiet --datadir=/var/lib/clamav --log=/var/log/clamav/freshclam.log Run it from the commandline like this: /usr/bin/freshclam --datadir=/var/lib/clamav --log=/var/log/clamav/freshclam.log You can a

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-24 Thread Tomasz Papszun
On Thu, 24 Jun 2004 at 11:32:15 +0200, Philipp Ringli wrote: > > todd, > > i did that and i get this: > > [EMAIL PROTECTED] /]# /usr/bin/freshclam --datadir=/var/lib/clamav > --log=/var/log/clamav/freshclam.log --verbose > Current working dir is /var/lib/clamav > ClamAV update process started a

Re: [Clamav-users] clamd dieing again, got some debug information.

2004-06-24 Thread Net . Admin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 24 Jun 2004, Trog wrote: > On Mon, 2004-06-21 at 18:35, Christopher X. Candreva wrote: > > Segmentation Fault > Please test with current CVS (as of now). > Thanks > -trog Before proceeding I have to appoligise in advance for this email. yest

[Clamav-users] no socket mode on SuSE 9.1

2004-06-24 Thread Schoenwaelder Oliver
Title: no socket mode on SuSE 9.1 Hi, I've just made a fresh installation of SuSE 9.1 and installed clamav. I changed the default SuSE clamav.conf to use a local socket but whatever I use clamavd won't start. Without sockets it works. SuSE currently distributes version 0.70 which is not the

[Clamav-users] Not catching W32.Netsky.P ???

2004-06-24 Thread Ken Morley
I have ClamAV 0.71 installed on RHES3 and updated to the latest definitions as of 06/24/2004. I don't know the AV signature file version number, but it's protecting against 22076 viruses. This is integrated as a mail filter using SendMail, SpamAssassin & MIMEDefang and seems to be working correct

Re: [Clamav-users] clamav and smtp-vilter: not scan for certain domains

2004-06-24 Thread SAITOU Toshihide
> I am using smtp-vilter-1.1.4 and ClamAV0.73 on OpenBSD-3.5 > Is there any way to customise smtp-vilter or ClamAV > so mails from certain domain are scanned for virus? > Or mails from certain domain are NOT scanned for virus? I dont't know about smtp-vilter, but calmav-milter may do this by --loc

Re: [Clamav-users] Not catching W32.Netsky.P ???

2004-06-24 Thread Niek
Ken Morley wrote: I have ClamAV 0.71 installed on RHES3 and updated to the latest definitions as of 06/24/2004. I don't know the AV signature file version number, but it's protecting against 22076 viruses. This is integrated as a mail filter using SendMail, SpamAssassin & MIMEDefang and seems to b

[Clamav-users] Help Setup Newbie Please

2004-06-24 Thread John Fleming
Hello - Fresh newbie meat here for the first time - Be gentle please... I'm using procmail to call clamassassin, which calls clamscan. I'm getting X- headers added by clamav, but I'm not detecting the EICAR string in emails. I'm using ClamAV v0.73 obtained and installed via the Debian Sid dist

Re: [Clamav-users] Help Setup Newbie Please

2004-06-24 Thread Hanford, Seth
> Hello - Fresh newbie meat here for the first time - Be gentle please... > > I'm using procmail to call clamassassin, which calls clamscan. I'm > getting X- headers added by clamav, but I'm not detecting the EICAR > string in emails. I'm using ClamAV v0.73 obtained and installed via the > Debian

Re: [Clamav-users] Help Setup Newbie Please

2004-06-24 Thread John Fleming
Hanford, Seth wrote: clamav.conf is used by clamd for configuration parameters. Try running clamscan --mbox to get the detection. It _may_ not work because of the definition of EICAR, which IIRC is fairly strict and has the "virus" starting at the very beginning of the file. It should work with

Re: [Clamav-users] /etc/cron.daily/freshclam exited with return code 1

2004-06-24 Thread Todd Lyons
Philipp Ringli wanted us to know: >i did that and i get this: > >[EMAIL PROTECTED] /]# /usr/bin/freshclam --datadir=/var/lib/clamav >--log=/var/log/clamav/freshclam.log --verbose >Current working dir is /var/lib/clamav That's good. It means it can access /var/lib/clamav and the files inside of

Re: [Clamav-users] Help Setup Newbie Please

2004-06-24 Thread Jim Maul
Quoting John Fleming <[EMAIL PROTECTED]>: Hanford, Seth wrote: clamav.conf is used by clamd for configuration parameters. Try running clamscan --mbox to get the detection. It _may_ not work because of the definition of EICAR, which IIRC is fairly strict and has the "virus" starting at the very be

Re: [Clamav-users] Help Setup Newbie Please

2004-06-24 Thread Mike Cathey
John, On Thu, 2004-06-24 at 14:18, John Fleming wrote: > Maybe I should try starting with an original clamav download instead of > using apt-get and whatever comes with the Debian dist. Isn't it a > problem that I don't even have clamav.conf?? I'll see if I get any > other responses/ideas bef

Re: [Clamav-users] Scans mail but never finds virus

2004-06-24 Thread Chadwick Wachs
That discard is another external helper and rule combination that runs after the ClamAV helper that basically takes messages with certain file extensions and moves them to another quarantine folder. It is designed as a safety incase virus checkers miss the file or new virus come out before def

Re: [Clamav-users] Is this possible? (clamdscan on one server, clamd on another)

2004-06-24 Thread Nigel Horne
On Thursday 24 Jun 2004 21:33, Thomas Jackson wrote: > Sounds like the perfect job for an email gateway. That's why I run clamav-milter on one machine and clamd on another. Indeed clamav-milter can load balance between more than one clamd server. -Nigel -- Nigel Horne. Arranger, Composer, Types

Re: [Clamav-users] Is this possible? (clamdscan on one server, clamd on another)

2004-06-24 Thread Thomas Jackson
Sounds like the perfect job for an email gateway. --- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches,

Re: [Clamav-users] [Fwd: memory hog in 0.72 and 0.73]

2004-06-24 Thread Jason Haar
On Thu, Jun 24, 2004 at 11:03:18AM +0200, Tomasz Papszun wrote: > On Wed, 23 Jun 2004 at 17:40:19 -0300, René Bellora wrote: > > i found the offending email. It's a 134mb email. It contains a 100mb > > file. If i scan the file alone, memory consumption reaches 13mb. If i > > scan the raw email, t

[Clamav-users] clamscan via stdin

2004-06-24 Thread calicant
Do you know why this happens? Thanks. [EMAIL PROTECTED] ~/downloads $ cat message.scr | clamscan - stdin: Worm.SomeFool.P FOUND --- SCAN SUMMARY --- Known viruses: 22079 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.03 MB I/O buffer size: 131072 bytes

Re: [Clamav-users] no socket mode on SuSE 9.1

2004-06-24 Thread Fajar A. Nugraha
Schoenwaelder Oliver wrote: Hi, I've just made a fresh installation of SuSE 9.1 and installed clamav. I changed the default SuSE clamav.conf to use a local socket but whatever I use clamavd won't start. Without sockets it works. SuSE currently distributes version 0.70 which is not the latest. I in