RE: [Clamav-users] Cron Job for CLAMD

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Stern Sent: Saturday, November 06, 2004 7:02 PM To: ClamAV users ML Subject: Re: [Clamav-users] Cron Job for CLAMD On Sat, 6 Nov 2004 17:42:28 -0500, "Cory Megitt [ClamAV]" <[EMAIL PROTECTED]> wrote:

Re: [Clamav-users] chroot random "can't load library" - RESOLVED

Thanks to [EMAIL PROTECTED]: cp /var/run/ld.so.hints /var/amavisd/var/run/ - Original Message - From: "Mailing_List" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, November 06, 2004 7:24 PM Subject: [Clamav-users] chroot random "can't load library" I am trying to install cl

[Clamav-users] chroot random "can't load library"

I am trying to install clamav 0.80 on OpenBSD 3.6 I used the code from www.fatbsd.com/openbsd/ When I try to run clamd in chroot (or "freshclam -d" or "clamd -h") I get: # chroot -u _amavisd /var/amavisd /usr/local/bin/freshclam /usr/local/bin/freshclam: can't load library 'libgmp.so.6.3' # chroot

Re: [Clamav-users] Cron Job for CLAMD

On Sat, 6 Nov 2004, Niek wrote: > Don't hijack threads, i.e.: do not start a new topic by replying to an old > mail. You know what ? the people constantly saying "Don't hijack threads" is far more anoying then the hijacked threads. Some people have been replying to a message to pick up the To:

Re: [Clamav-users] Cron Job for CLAMD

On Sat, 6 Nov 2004 17:42:28 -0500, "Cory Megitt [ClamAV]" <[EMAIL PROTECTED]> wrote: >The firewall is setup to allow incoming and outgoing on 127.0.0.1 on source >and destination ports 3310. > >What do you recommend I change here? It appears I have a mixture of >different settings. I suggest you

RE: [Clamav-users] Cron Job for CLAMD

In your clamd.conf file, are you set to use a TCP socket or a UNIX socket? Check for these lines in clamd.conf # TCP port address. #TCPSocket 3310 # Path to the local socket. The daemon doesn't change the mode of the # created file (portability reasons). You may want to create it in a directory

Re: [Clamav-users] Cron Job for CLAMD

On Sat, 6 Nov 2004 15:57:13 -0500, "Cory Megitt [ClamAV]" <[EMAIL PROTECTED]> wrote: >Hi All; > >The following command gets run at 2am each night. >/usr/bin/freshclam --quiet -l /var/log/clamav/clam-update.log > > >I always find an email stating the following: > ERROR: Clamd was NOT notified: Can'

Re: [Clamav-users] Cron Job for CLAMD

On 11/6/2004 9:57 PM +0200, Cory Megitt [ClamAV] wrote: Hi All; The following command gets run at 2am each night. /usr/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I always find an email stating the following: ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310 conn

[Clamav-users] Cron Job for CLAMD

Hi All; The following command gets run at 2am each night. /usr/bin/freshclam --quiet -l /var/log/clamav/clam-update.log I always find an email stating the following: ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310 connect(): Connection refused How can I fix this? Runn

[Clamav-users] Solaris 9 64-bit packages

I've set up a web page containing binary packages of ClamAV for 64-bit Solaris 9 on SPARC at http://clamav.citrus-it.net/ for anyone who wants an easy way of getting it up and running on this platform. The only package there at present is of 0.80 with the readdir_r patch backported from the devel

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

On Sat, 6 Nov 2004, Rishi wrote: If you don't know how to use sigtool to make yourself a new signature, then I guess it's better you don't do it. Creating signatures with sigtool may also violate your virus scanner's license, and is discouraged. I have a Debian machine with clamav and f-prot instal

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

On Sat, 06 Nov 2004 16:01:40 +0100 Thomas Lamy <[EMAIL PROTECTED]> wrote: > Rishi schrieb: > > >>Better submit it through . > >it's>vital for Clamav's detection to get virus samples from it's > >users. > > > > > > > > I did that last week. Any idea how muc

Re: [Clamav-users] Problem With Freshclam

On Fri, 5 Nov 2004 20:12:01 -0400, Listas <[EMAIL PROTECTED]> wrote: Apologies for the snarky reply. My freshclam.conf is: DatabaseDirectory /var/lib/clamav UpdateLogFile /var/log/clamav/freshclam.log LogSyslog PidFile /var/run/clamav/freshclam.pid DatabaseOwner clamav DNSDatabaseInfo current.c

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Rishi schrieb: Better submit it through . it's vital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for it to get done? I'm not a sigmaker, but just in case it's some polymorphic one it may t

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

> If you don't know how to use sigtool to make yourself a new signature, > then I guess it's better you don't do it. > Creating signatures with sigtool may also violate your virus scanner's > license, and is discouraged. Sounds scary. :-) However, I can test it on a dummy machine (my workstation

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

> Better submit it through . it's > vital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for it to get done? I'd like to help the clam community by using sigtool to get this done. Can you p

Re: [Clamav-users] Logging Scanning Activity

On Fri, Nov 05, 2004 at 11:33:25PM -0500, Rick Sutphin said: > I have ClamAV 0.80 install on Debian 3.0 using the backports.org > package. My MTA is Exim. ClamAV is being called from procmail using > clamscan-procfilter. I would like to have ClamAV log its' activity; > i.e. what mail it scanned

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Rishi schrieb: Hi I've been receiving a new virus which f-prot reports as "W32/Kriz.4029.kernel" Can anyone tell me how to use sigtool program to get clamav to use f-prot to figure out how to detect this virus and update the clamav database too? Regards Rishi If you don't know how to use sigtool

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

On Sat, 6 Nov 2004 19:13:25 +0530 Rishi <[EMAIL PROTECTED]> wrote: > Hi > > I've been receiving a new virus which f-prot reports as > "W32/Kriz.4029.kernel" http://www.clamav.net/sendvirus.html -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV

[Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Hi I've been receiving a new virus which f-prot reports as "W32/Kriz.4029.kernel" Can anyone tell me how to use sigtool program to get clamav to use f-prot to figure out how to detect this virus and update the clamav database too? Regards Rishi ___ h

Re: [Clamav-users] new Wiki site

Luca Gibelli wrote: Hello Graham Toal, What's needed is an installation script which installs a completely independent copy in one of two locations, so you can double-buffer the installs. "./configure --prefix=path" can already do that. along with --program-prefix=test_ so clamd becomes test_cl

Re: [Clamav-users] new Wiki site

Hello Graham Toal, > What's needed is an installation script which installs a completely > independent copy in one of two locations, so you can double-buffer > the installs. "./configure --prefix=path" can already do that. Best regards -- Luca Gibelli ([EMAIL PROTECTED]) - http://www.ClamAV