On Tue, 05 Oct 2004 22:26:05 +0200 in
[EMAIL PROTECTED] Marcus Habermehl
<[EMAIL PROTECTED]> wrote:
> I hoped that I become a hint to the problem with a log. But when I
> activate the logging in the /etc/freshclam.conf I become this error.
>
> ERROR: Can't open /var/log/freshclam.log in append
At 14:17 5.10.2004 -0500, you wrote:
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Nigel Horne
> Sent: Tuesday, October 05, 2004 2:02 PM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] Detection problem?
>
>
> On Tuesday 05 Oct 2004 19:34, Sasa St
Hello again,
I am still getting the below message after starting clamd clamav-milter and
sendmail in that order. clamd and clamav-milter start without any errors
being reported in either clamd.log or /var/log/messages. When I start
sendmail, which starts without error itself I get the error mess
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> [EMAIL PROTECTED] wrote:
> | Hi All;
> |
> | I've followed qmailrocks.org's site to a "t" and got clamav working
> | properly, however, the clamav.log file does not update.
> |
> | It's still at 0 bytes and at the original date when I "touched"
>
After closer inspection of the logs I found the entry
Mon Oct 4 01:06:39 2004 -> Client disconnected
and have tracked the problem back to clamd/others.c. If I replace others.c with
the version from rc2 the problem disappears.
diff of the 2 files is:
141d140
< #undef HAVE_POLL /* temporari
Marcus Habermehl wrote:
> ERROR: Can't open /var/log/freshclam.log in append mode.
> ERROR: Problem with internal logger.
>
> Is there a general problem with my installation of clamav?
>
> Marcus
The user you're running freshclam as doesn't have permissions to make files in /var/log
Here's what
Am Dienstag, den 05.10.2004, 19:09 +0100 schrieb Matt:
> Brian Morrison wrote:
>
> > On Tue, 05 Oct 2004 19:00:43 +0200 in
> > [EMAIL PROTECTED] Marcus Habermehl
> > <[EMAIL PROTECTED]> wrote:
> >
> > > I execute freshclam like this
> > >
> > > su -c freshclam
> > >
> > >
> > > Perhaps is
Hi
> clamd logging during startup on all my HW:
> clamd daemon 0.80rc3 (OS: linux-gnu, ARCH:i386, CPU: i386)
This is the clamav build version.
> but 'uname -o -p -i' reports
> on PentiumIII: i686 i386 GNU/Linux
> on PentiumClassic: i586 i386 GNU/Linux
This is your hardware.
Regards,
Steffen
Hello,
clamd logging during startup on all my HW:
clamd daemon 0.80rc3 (OS: linux-gnu, ARCH:i386, CPU: i386)
but 'uname -o -p -i' reports
on PentiumIII: i686 i386 GNU/Linux
on PentiumClassic: i586 i386 GNU/Linux
Isnt CPU detection wrong?
Petr
___
http://l
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Nigel Horne
> Sent: Tuesday, October 05, 2004 2:02 PM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] Detection problem?
>
>
> On Tuesday 05 Oct 2004 19:34, Sasa Stupar wrote:
> > I am running a clama
On Tuesday 05 Oct 2004 19:34, Sasa Stupar wrote:
> I am running a clamav-milter with sendmail 8.13.0. I have made a test at
> www.testvirus.org and two tests passed thru: #24 and #25.
There is no signature to detect, so nothing to stop.
> In explanation it says that it should detect it but it do
Sasa Stupar wrote:
> Just forgot to mention that I am running Clamav 0.75.1.
>
> At 20:34 5.10.2004 +0200, you wrote:
>> I am running a clamav-milter with sendmail 8.13.0. I have made a
>> test at www.testvirus.org and two tests passed thru: #24 and #25.
>> In explanation it says that it should de
Just forgot to mention that I am running Clamav 0.75.1.
At 20:34 5.10.2004 +0200, you wrote:
I am running a clamav-milter with sendmail 8.13.0. I have made a test at
www.testvirus.org and two tests passed thru: #24 and #25.
In explanation it says that it should detect it but it doesn't.
Any commen
I am running a clamav-milter with sendmail 8.13.0. I have made a test at
www.testvirus.org and two tests passed thru: #24 and #25.
In explanation it says that it should detect it but it doesn't.
Any comment on that?
Regards,
Sasa Stupar
___
http://lis
Thank you for the answer.
This is the way that I am starting it now but in the docs it is specified
to start milter and clamd before sendmail and rc.local is started at the end.
Anyone with the knowledge of sysv style startup (redhat)?
Reagrds,
Sasa
At 09:02 5.10.2004 -0400, you wrote:
Sasa Stupa
Brian Morrison wrote:
> On Tue, 05 Oct 2004 19:00:43 +0200 in
> [EMAIL PROTECTED] Marcus Habermehl
> <[EMAIL PROTECTED]> wrote:
>
> > I execute freshclam like this
> >
> > su -c freshclam
> >
> >
> > Perhaps is this wrong?
>
> Not sure, but it might be.
>
> I run freshclam as a daemon fr
On Tue, 05 Oct 2004 19:00:43 +0200 in
[EMAIL PROTECTED] Marcus Habermehl
<[EMAIL PROTECTED]> wrote:
> I execute freshclam like this
>
> su -c freshclam
>
>
> Perhaps is this wrong?
Not sure, but it might be.
I run freshclam as a daemon from an /etc/rc.d/init script, so it is
running all t
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| Hi All;
|
| I've followed qmailrocks.org's site to a "t" and got clamav working
| properly, however, the clamav.log file does not update.
|
| It's still at 0 bytes and at the original date when I "touched" the file.
|
| The pe
Am Dienstag, den 05.10.2004, 17:45 +0100 schrieb Brian Morrison:
> On Tue, 05 Oct 2004 18:41:53 +0200 in
> [EMAIL PROTECTED] Marcus Habermehl
> <[EMAIL PROTECTED]> wrote:
>
> > Am Dienstag, den 05.10.2004, 17:32 +0100 schrieb Brian Morrison:
> > > On Tue, 05 Oct 2004 18:27:13 +0200 in
> > > [EMAIL
Scott Rothgaber wrote:
> I've built about half a dozen versions and ports of libgmp and
> 'configure' is *still* bitching. I even found a port called
> 'libgmp-freebsd'...
>
> GNU MP is a library for arbitrary precision arithmetic...
> [SNIP]
> Note: This package contains version the the libra
I've built about half a dozen versions and ports of libgmp and
'configure' is *still* bitching. I even found a port called
'libgmp-freebsd'...
GNU MP is a library for arbitrary precision arithmetic...
[SNIP]
Note: This package contains version the the library just before it was
removed from the
my system is not messed up, and I did not install a
3rd party package. I clearly explained the contents
of clamnightly, which simply runs clamscan and
freshclam every night
cat /etc/cron.daily/clamnightly
/usr/bin/freshclam --quiet -l /var/log/clam-update.log
/usr/bin/clamscan -r -i -l /share/CD
On Tue, 05 Oct 2004 18:41:53 +0200 in
[EMAIL PROTECTED] Marcus Habermehl
<[EMAIL PROTECTED]> wrote:
> Am Dienstag, den 05.10.2004, 17:32 +0100 schrieb Brian Morrison:
> > On Tue, 05 Oct 2004 18:27:13 +0200 in
> > [EMAIL PROTECTED] Marcus Habermehl
> > <[EMAIL PROTECTED]> wrote:
> >
> > > ClamAV
Am Dienstag, den 05.10.2004, 17:32 +0100 schrieb Brian Morrison:
> On Tue, 05 Oct 2004 18:27:13 +0200 in
> [EMAIL PROTECTED] Marcus Habermehl
> <[EMAIL PROTECTED]> wrote:
>
> > ClamAV update process started at Mon Oct 4 19:11:23 2004
> > ERROR: Can't get information about db.de.clamav.net host.
On Tue, 05 Oct 2004 18:27:13 +0200 in
[EMAIL PROTECTED] Marcus Habermehl
<[EMAIL PROTECTED]> wrote:
> ClamAV update process started at Mon Oct 4 19:11:23 2004
> ERROR: Can't get information about db.de.clamav.net host.
> ERROR: Connection with ??? failed.
What happens if you try:
dig db.de.cl
Hi.
I have installed clamav 0.80rc3 on my system (Slackware 10.0).
Now I want to update my virus database. But after starting freshclam I
become this error message.
ClamAV update process started at Mon Oct 4 19:11:23 2004
ERROR: Can't get information about db.de.clamav.net host.
ERROR: Connection
Hello,
man clamav-milter
[...]
--sign, -S
Add a hard-coded signature to each scanned file.
--signature-file, -F
Location of file to be appended to each scanned message.
Overrides -S.
[...]
Best regards
hug
On Tue, 5 Oct 2004, Richard Owen wrote:
> Hi
>
> Just finishing install on a
No, I do not.
I used the RPM from qmailrocks.org.
> Do you have a conf in /usr/local/etc also? If so, does it match what you
> have in /etc/clamav.conf ?
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
I wrote:
> I am uploading *TEST* code to handle this to CVS as we speak.
Yes, before anyone says it, I know I've been maintaining for sometime that
(a) it's not possible and (b) it's not the job of clamAV anyway. But I had a
brainwave on how to do it...
It is EXPERIMENTAL code, not compiled by d
John H. wrote:
I upgraded from .65 to .80rc3 on fedora core 2
machine(rpm from site), and I was told by a user of a
system I admin this morning, hours and hours later,
that clamav was using 100% cpu/ram.
I did ps auxw |grep clamav and saw the following
ps aux |grep clam
root 5616 0.0 0.1 38
On Tuesday 05 Oct 2004 16:36, Richard Owen wrote:
> Just finishing install on a Raq4 and would like to add a message
> At the end of each mail checked to say it was scanned ok
With the --sign and/or --sigature-file option of clamav-milter
> Richard
-Nigel
--
Nigel Horne. Arranger, Composer, T
On Tuesday 05 Oct 2004 16:27, Shane Wise wrote:
> May have been...looked like it was like eicar 1/5 through 5/5
I am uploading *TEST* code to handle this to CVS as we speak.
-Nigel
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
[EMAIL PROTECTED] http://ww
Richard Owen wrote:
> Hi
>
> Just finishing install on a Raq4 and would like to add a message
> At the end of each mail checked to say it was scanned ok
>
> Is this possible if so please can you let me know how
>
What software are you using to scan the email?
Matt
___
Title: Can I add message to end of email
Hi
Just finishing install on a Raq4 and would like to add a message
At the end of each mail checked to say it was scanned ok
Is this possible if so please can you let me know how
Thanks
Richard
__
May have been...looked like it was like eicar 1/5 through 5/5
Matt wrote:
Shane Wise wrote:
I just ran it against mine (.80rc3) and it worked pretty good...I did
have the 2 come through...however I had 5 of them that I was getting the
stream: Bad format or broken data ERROR message on them and m
I upgraded from .65 to .80rc3 on fedora core 2
machine(rpm from site), and I was told by a user of a
system I admin this morning, hours and hours later,
that clamav was using 100% cpu/ram.
I did ps auxw |grep clamav and saw the following
ps aux |grep clam
root 5616 0.0 0.1 3808 552 ?
Just like to say, by the way, the new ML server is great. It's lovely
to see the mails within a short while of posting :) Thanks chaps.
Matt
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Brent Clark wrote:
> Only 6
> Which I suppose aint to bad, but still.
> But your right, because 5 were (more an Exim issue):
There are five that I know of which should definitely be picked up by
virus scanning, so that's about right. The rest are down to scanning, by
some other means, for attac
Shane Wise wrote:
> I just ran it against mine (.80rc3) and it worked pretty good...I did
> have the 2 come through...however I had 5 of them that I was getting the
>
> stream: Bad format or broken data ERROR message on them and my server
> was rejecting with a Milter: data, reject=451 4.3.2 Pl
I just ran it against mine (.80rc3) and it worked pretty good...I did
have the 2 come through...however I had 5 of them that I was getting the
stream: Bad format or broken data ERROR message on them and my server
was rejecting with a Milter: data, reject=451 4.3.2 Please try again
later...
Dun
Brent Clark wrote:
Hi all
I just run a few mail test from www.gfi.com/emailsecuritytest and my clam
antivirus failed miserably.
I too ran the tests from testvirus.org, this second test was ok, only two
got through.
Could someone please share some help with this,
Both gfi and antivirus.org have some
> Remember that a lot of the GFI tests are for Outlook vulnerablities, no
>malicious code per se. How many did you trap?
Only 6
Which I suppose aint to bad, but still.
But your right, because 5 were (more an Exim issue):
200
Brent Clark wrote:
> Hi
>
> mail:~# clamscan -V
> clamscan / ClamAV version 0.75-1
> mail:~#
>
>
> Im using this with my Exim Mail server
>
Remember that a lot of the GFI tests are for Outlook vulnerablities, no
malicious code per se. How many did you trap?
Matt
Hi,
I've setted up the clamd this is the clamav.conf file:
#Automatically Generated by clamav-daemon postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-daemon
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket
User root
AllowSupplementaryGroups
ScanMail
ScanArchive
ArchiveMaxRecursion 5
Hi
mail:~# clamscan -V
clamscan / ClamAV version 0.75-1
mail:~#
Im using this with my Exim Mail server
Thanks for your help
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
On Tuesday 05 Oct 2004 14:11, Brent Clark wrote:
> Hi all
>
> I just run a few mail test from www.gfi.com/emailsecuritytest and my clam
> antivirus failed miserably.
What do you mean by "failed miserably". I can only assume you mean that 100%
of the emails got through.
I've just tried this test.
Hi, I use 0.75.1 .. test with testvirus.org are full ok but with
gfi.com/emailsecuritytest are failed eicar.com and hide.hta in fact the attached pass
through mail server and it arrive on mail client, but the file but gfi-test.txt not is
created on pc.
--
Salvatore.
--
On Tuesday 05 Oct 2004 14:11, Brent Clark wrote:
> Hi all
>
> I just run a few mail test from www.gfi.com/emailsecuritytest and my clam
> antivirus failed miserably.
You haven't said what version of clamAV you're using, so I can't advise you.
> Brent Clark
-Nigel
--
Nigel Horne. Arranger, Com
I just run a few mail test from www.gfi.com/emailsecuritytest and my clam
antivirus failed miserably.
I ran the above tests from gfi.com also, and I caught 11 of them. I'm also
running CLAMD (0.75.1) with the --mbox option. (ScanMail option in
clamav.conf)
Steve
_
On Tuesday 05 Oct 2004 14:11, Brent Clark wrote:
> Hi all
> I too ran the tests from testvirus.org, this second test was ok, only two
> got through.
Two will get through (24 and 25), but since they don't contain any virus there's
nothing to find and therefore nothing to stop.
> Brent Clark
-Nig
Hi all
I just run a few mail test from www.gfi.com/emailsecuritytest and my clam
antivirus failed miserably.
I too ran the tests from testvirus.org, this second test was ok, only two
got through.
Could someone please share some help with this,
Kind Regards
Brent Clark
__
Sasa Stupar wrote:
I don't know how to start clamd before sendmail and also do I have
to start it or do I need to start only clamav-milter as daemon.
It's been a l-o-n-g time since I messed with Linux, and I know nothing
about SYSV-style startups. I have always used rc.local for packages that
I
Do you have a conf in /usr/local/etc also? If so, does it match what you
have in /etc/clamav.conf ?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 8:18 AM
To: ClamAV users ML
Subject: [Clamav-users] Log File 0 Bytes
Hi All;
I've f
> Hi All;
>
> I've followed qmailrocks.org's site to a "t" and got clamav working
> properly, however, the clamav.log file does not update.
>
> It's still at 0 bytes and at the original date when I "touched" the file.
>
> The permissions seem right, and the configuration in freshclam.conf seems
> o
Hi All;
I've followed qmailrocks.org's site to a "t" and got clamav working
properly, however, the clamav.log file does not update.
It's still at 0 bytes and at the original date when I "touched" the file.
The permissions seem right, and the configuration in freshclam.conf seems
okay.
Anyone ha
gillian wrote:
> Thank you so much for your response, but boy, now I am confused. Are you
> saying I should be using amavis not clamav? This is the 2nd response
> with an amavis url in it.
Which method of virus scanning are you wishing to achieve?
1) Scanning emails coming through your MTA.
2)
On Oct 5, 2004, at 6:08 AM, gillian wrote:
Thank you so much for your response, but boy, now I am confused. Are
you
saying I should be using amavis not clamav? This is the 2nd response
with an amavis url in it.
Amavis is a program that can work in conjunction with ClamAV.
Most UNIX systems work in
Thank you so much for your response, but boy, now I am confused. Are you
saying I should be using amavis not clamav? This is the 2nd response
with an amavis url in it.
Hi again,
Gillian, the 2 pieces of software complement each other -
Amavis-new is a 'conduit' which passes stuff out to something
On Tuesday 05 Oct 2004 11:08, gillian wrote:
> Thank you so much for your response, but boy, now I am confused. Are you
> saying I should be using amavis not clamav? This is the 2nd response
> with an amavis url in it.
If you're using sendmail there is no need for any other software.
-Nigel
--
Thank you so much for your response, but boy, now I am confused. Are
you
saying I should be using amavis not clamav? This is the 2nd response
with an amavis url in it.
amavis/amavisd-new is used as kind of 'glue' between your MTA and
clamav (e.g.).
___
Thank you so much for your response, but boy, now I am confused. Are you
saying I should be using amavis not clamav? This is the 2nd response
with an amavis url in it.
On Tue, 2004-10-05 at 19:40, Maurizio Marini wrote:
> On Tuesday 05 October 2004 09:23, gillian wrote:
> better, http://www.ijs.s
I have installed Clamav 0.75-1 with enabled milter for sendmail on my
RH8 box. I have read the install paper which comes with clamav source
but I don't know how to start clamd before sendmail and also do I have
to start it or do I need to start only clamav-milter as daemon.
I allready have confi
Hi!
I have installed Clamav 0.75-1 with enabled milter for sendmail on my RH8
box. I have read the install paper which comes with clamav source but I
don't know how to start clamd before sendmail and also do I have to start
it or do I need to start only clamav-milter as daemon.
I allready have c
On Tuesday 05 October 2004 09:23, gillian wrote:
better, http://www.ijs.si/software/amavisd/
M.
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
On Tuesday 05 October 2004 09:23, gillian wrote:
> this, but none of the doc mentions having to do this. So what am I
> missing here?
http://www.amavis.org
Maurizio
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
gillian wrote:
> OK, before you all shudder I appologise if this is blatently obvious and
> staring me in the face.
>
> I have read the doco and searched google but I still am not able to
> understand some fundamental things about clamav.
>
> 1. clamav daemon runs - what does it actually do?
>
On Tue, 05 Oct 2004 at 9:23:31 +0200, Steffen Breitbach wrote:
> Hi there!
>
> One of our scanners printed this in its logfile:
>
> /usr/share/doc/automake-stable-1.4p6/COPYING: COPYING FOUND
> /usr/share/doc/common-licenses/GPL-2: COPYING FOUND
> /usr/share/doc/common-licenses/GPL-2.0: COPYING
Hi there!
One of our scanners printed this in its logfile:
/usr/share/doc/automake-stable-1.4p6/COPYING: COPYING FOUND
/usr/share/doc/common-licenses/GPL-2: COPYING FOUND
/usr/share/doc/common-licenses/GPL-2.0: COPYING FOUND
Why does clamav report those?
Mit freundlichen Grüssen
Steffen Breitbach
-
OK, before you all shudder I appologise if this is blatently obvious and
staring me in the face.
I have read the doco and searched google but I still am not able to
understand some fundamental things about clamav.
1. clamav daemon runs - what does it actually do?
2. clamscan actually scans files
69 matches
Mail list logo