Re: [Clamav-users] Migration from 'clamscan' to 'clamdscan' Unsuccessful

2004-07-23 Thread James Lick
Mike McCandless wrote: Thinking that maybe there is a permission problem somewhere, I commented out TCPAddr (127.0.0.1) and TCPPort (3310) from /etc/clamav.conf and used the LocalSocket option (/var/run/clamav/clamd.sock). Now email goes through just fine, and quickly. Can someone help me explain

[Clamav-users] Migration from 'clamscan' to 'clamdscan' Unsuccessful

2004-07-23 Thread Mike McCandless
We have been successfully using clamassassin, in combination with clamav, for several months. In an effort to reduce the load on our mail server, we installed clamd and changed from the use of clamscan to clamdscan. With clamd started, and /usr/local/bin/clamassassin variable CLAMSCAN set to /usr

[Clamav-users] ClamAV 0.67 vs 0.70

2004-07-23 Thread Lucky Leavell
I am using clamav 0.67 on SuSE 9.0 and 0.70 on SuSE 9.1. I used some previously quarantined messages identified by the 0.67 server to test the new 0.70 and found many were also detected but Worm.Gibe.F was missed by 0.70. Databases on the two systems are current and appear to be the same size.

RE: [Clamav-users] clamd 0.75 segfault on mime boundry

2004-07-23 Thread Christopher X. Candreva
On Fri, 23 Jul 2004, Nigel Horne wrote: > Operating system? Solaris 8, gcc 3.4.0 . Sorry. > Please send me a sample which crashes on your machine, zipped with > password "virus" please. Will do -- but the mail that is crashing it isn't even a virus. Seems to be spam however. ===

Re: [Clamav-users] Template question

2004-07-23 Thread David Champion
* On 2004.07.23, in <[EMAIL PROTECTED]>, * "Dan O'Brien" <[EMAIL PROTECTED]> wrote: > >From the clamav-milter man page: > > Any occurance of strings in braces are > > replaced with the appropriate {sendmail-variable}. If > > the -t option is not given, clamav-milter defaults to a > >

[Clamav-users] Template question

2004-07-23 Thread Dan O'Brien
>From the clamav-milter man page: > Any occurance of strings in braces are > replaced with the appropriate {sendmail-variable}. If > the -t option is not given, clamav-milter defaults to a > hardcoded message. This is great... I've been waiting for this since the template feature came out

Re: [Clamav-users] clamdscan change from 0.74 to 0.75 with procmail call?

2004-07-23 Thread Rob Mangiafico
> > >Upgraded tonight on our development box to clamav 0.75. After upgrading > > >getting a lot of: > > > > > >ERROR: ScanStream: accept timeout. > > > > > >Calling clamdscan from procmail with: > > >VIRUS=`/usr/local/bin/clamdscan --disable-summary --stdout -` > > It appears that the patch to fix

RE: [Clamav-users] clamd 0.75 segfault on mime boundry

2004-07-23 Thread Nigel Horne
Operating system? Please send me a sample which crashes on your machine, zipped with password "virus" please. -Nigel > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Christopher X. Candreva > Sent: 23 July 2004 18:42 > To: [EMAIL PROTECTED] > Subject:

[Clamav-users] Public lists not viewable

2004-07-23 Thread John Fleming
Newbie here - My lists are all set to be publicly viewable. However, when I go to www.mydomain.com/mailman/listinfo, I get the page that says there are no publicly viewable lists at that domain. However, if I go to any list's admin page, login, and immediately logout without doing anything, and t

[Clamav-users] OH GEEZ SORRY

2004-07-23 Thread John Fleming
wrong list! --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click __

[Clamav-users] clamd 0.75 segfault on mime boundry

2004-07-23 Thread Christopher X. Candreva
clamd 0.75 (called from clamav-milter) is segfaulting on me, I can't keep it running for more than 1 or 2 messages. It seems to be doing this on mime boundries. Here is debug output: LibClamAV debug: parseEmailHeader 'Mime-Version: 1.0' LibClamAV debug: parseMimeHeader: cmd='Mime-Version', arg

[Clamav-users] ERROR: Verification: Broken or not a CVD file

2004-07-23 Thread Jim Robinson
Hello, Wondering if anyone had seen an error like this one when running freshclam. This is a fully patched FC1 server. We have other servers like this (same setup) that do not experience this issue. Any ideas why and fixes? I have already tried adding a proxy server, reinstalling from RPM and

[Clamav-users] Plesk 7 & ClamAV

2004-07-23 Thread Eric J Merkel
Has anyone out there integrated ClamAV into Plesk 7? If so, how did you do it? Plesk is so tightly integrated with qmail I want to see if someone else had done it before tinkering around on a production system. FWIW, the system Plesk is running on is a Mandrake 9.2 box. Eric Merkel / MetaLINK Tec

Re: [Clamav-users] Bug in clamdscan/client.c 0.75

2004-07-23 Thread Christopher X. Candreva
On Fri, 23 Jul 2004, Paul Bijnens wrote: > +peer_size = sizeof(peer); > +if(getpeername(sockd, (struct sockaddr *) &peer, &peer_size) < 0) { > + perror("getpeername()"); > + mprintf("@Can't get socket peer name.\n"); > + return -1; > +} > + > +server.sin_addr.s_ad

Re: [Clamav-users] ClamAV update from .70 to .75

2004-07-23 Thread Daniel J McDonald
On Fri, 2004-07-23 at 08:52, Jeffrey Kroll wrote: > Can someone please assist me in upgrading .70 to .75 on a production > machine. This is the first time I have ever done this and I want to ‘ > watch ‘ someone upgrade it on my mailserver. The cleanest process would be: unpack the old distributio

[Clamav-users] ClamAV update from .70 to .75

2004-07-23 Thread Jeffrey Kroll
Can someone please assist me in upgrading .70 to .75 on a production machine. This is the first time I have ever done this and I want to ‘ watch ‘ someone upgrade it on my mailserver.   It’s a  FreeBSD 5.2.1 with Qmail, Qmailscan, SA, ClamAV   ~Jeffrey Kroll

Re: [Clamav-users] Anyone heard about Oyster being faster than ClamAV?

2004-07-23 Thread Jim Maul
Quoting Jason Haar <[EMAIL PROTECTED]>: FYI http://www.fsl.cs.sunysb.edu/docs/avfs-security04/index.html They apparently have used ClamAV to base their "Oyster" AV on, and claim that it runs >4 times faster as a result. One thing that I see immediately would be if clamd could cache a checksum of a

Re: [Clamav-users] dazuko on FreeBSD

2004-07-23 Thread Odhiambo Washington
* Rob Evers <[EMAIL PROTECTED]> [20040707 11:57]: wrote: > Hi all, > > I'm trying to get dazuko working with clamav under FreeBSD > 4.10-PRERELEASE. I installed dazuko as stated on the dazuko website: > > dokus# kldstat > Id Refs AddressSize Name > 12 0xc010 1aabf4 kernel > 3

Re: [Clamav-users] clamdscan change from 0.74 to 0.75 with procmail call?

2004-07-23 Thread Stephen Gran
On Fri, Jul 23, 2004 at 08:05:29AM +0100, Björn Ketelaars said: > >Upgraded tonight on our development box to clamav 0.75. After upgrading > >getting a lot of: > > > >ERROR: ScanStream: accept timeout. > > > >Calling clamdscan from procmail with: > >VIRUS=`/usr/local/bin/clamdscan --disable-summary

Re: [Clamav-users] Anyone heard about Oyster being faster than ClamAV?

2004-07-23 Thread Tomasz Kojm
On Fri, 23 Jul 2004 12:44:49 +1200 Jason Haar <[EMAIL PROTECTED]> wrote: > FYI > > http://www.fsl.cs.sunysb.edu/docs/avfs-security04/index.html > > > They apparently have used ClamAV to base their "Oyster" AV on, and > claim that it runs >4 times faster as a result. The CVS version of ClamAV i

Re: [Clamav-users] clamav-milter man page

2004-07-23 Thread Nigel Horne
On Friday 23 Jul 2004 09:30, Krzysztof Snopek wrote: > and only when I remove those two .TP , 'man clamav-milter' shows all > what's inside. Please raise this at [EMAIL PROTECTED] > Krzysztof Snopek -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK.

[Clamav-users] Bug in clamdscan/client.c 0.75

2004-07-23 Thread Paul Bijnens
In clamdscan/client.c this was changed in 0.75: @@ -129,6 +131,15 @@ server.sin_family = AF_INET; server.sin_port = htons(port); +peer_size = sizeof(peer); +if(getpeername(sockd, (struct sockaddr *) &peer, &peer_size) < 0) { + perror("getpeername()"); + mprintf("@Can'

Re: [Clamav-users] clamav-milter man page

2004-07-23 Thread Krzysztof Snopek
On Fri, 23 Jul 2004, Nigel Horne wrote: > > I would hardly call 9 days "very old". > clamav-milter.8 already has these options described in it and yes I did remember > to commit to CVS. Ah, now I see what is a problem. Doing 'cat clamav-milter.8' shows (unformatted, of course) full man page with o

Re: [Clamav-users] clamav-milter man page

2004-07-23 Thread Nigel Horne
On Friday 23 Jul 2004 08:20, Krzysztof Snopek wrote: > The ChangeLog document for clamav 0.75 says: > * clamav-milter: Added --dont-wait and --advisory options , > at Jun 29 there is: > * clamav-milter: Support --timeout option > and earlier template files for clamav-milter are mentioned. But

[Clamav-users] clamav-milter man page

2004-07-23 Thread Krzysztof Snopek
The ChangeLog document for clamav 0.75 says: * clamav-milter: Added --dont-wait and --advisory options , at Jun 29 there is: * clamav-milter:Support --timeout option and earlier template files for clamav-milter are mentioned. But clamav-milter man page (0.75.tar.gz) seems to be very old and

Re: [Clamav-users] Loading clamd before service starts

2004-07-23 Thread Brian Morrison
On Fri, 23 Jul 2004 04:41:48 +0100 in [EMAIL PROTECTED] sarky <[EMAIL PROTECTED]> wrote: > Hello all > How do i load clamd before the service clamav-milter start in RH? > > Sorted out the service but i can not figure out in which init file i > should put clamd, rc.local starts after i think. > >

Re: [Clamav-users] clamdscan change from 0.74 to 0.75 with procmail call?

2004-07-23 Thread Björn Ketelaars
>Upgraded tonight on our development box to clamav 0.75. After upgrading >getting a lot of: > >ERROR: ScanStream: accept timeout. > >(Never received these errors on previous versions) > >Calling clamdscan from procmail with: >:0 >* multipart >{ >VIRUS=`/usr/local/bin/clamdscan --disable-summary --s

Re: [Clamav-users] Re: Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-23 Thread Marc Berenschot
On Thu, 22 Jul 2004, Nigel Horne wrote: > On Thursday 22 Jul 2004 17:45, Jesse Guardiani wrote: > > > In my opinion a bug that major should warrant a new release, if only 0.74a > > or 0.74.1. Asking people to update to CVS to fix a serious bug doesn't make > > sense. > > Tomasz and I are already i