[Clamav-users] strange SegFault in 0.81

2005-02-01 Thread ..
Hello, all I have installed clamav 0.81 on FreeBSD 4.11 (ports version), after running it - Segmentation fault. Here run from gdb: gdb /usr/local/sbin/clamd GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and

Re: [Clamav-users] strange SegFault in 0.81

2005-02-01 Thread Trog
On Tue, 2005-02-01 at 11:48 +0300, .. wrote: Hello, all I have installed clamav 0.81 on FreeBSD 4.11 (ports version), after running it - Segmentation fault. (gdb) run Starting program: /usr/local/sbin/clamd (no debugging symbols found)...(no debugging symbols found)...(no debugging

Re[2]: [Clamav-users] strange SegFault in 0.81

2005-02-01 Thread ..
Hello Trog, Tuesday, February 1, 2005, 11:53:56 AM, you wrote: T Upgrade to zlib 1.2.2 Thanks, it help. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] exited on signal 11

2005-02-01 Thread N Fung
--- Nigel Horne [EMAIL PROTECTED] wrote: On Monday 31 Jan 2005 13:57, N Fung wrote: I'm seeing quite a few signal-11 with my clamav-milter too: pid 47506 (clamav-milter), uid 32768: exited on signal 11 Attach a gdb stack trace to an email to [EMAIL PROTECTED] I've tried: gdb

AW: [Clamav-users] SESSION BUG - PERFORMANCE?

2005-02-01 Thread Christian Hilgers
-Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Trog Gesendet: Monday, January 31, 2005 5:22 PM An: ClamAV users ML Betreff: RE: [Clamav-users] SESSION BUG - PERFORMANCE? On Mon, 2005-01-31 at 16:06 +0100, Christian Hilgers wrote:

Re: AW: [Clamav-users] SESSION BUG - PERFORMANCE?

2005-02-01 Thread Trog
On Tue, 2005-02-01 at 11:31 +0100, Christian Hilgers wrote: I guess it is scheduling problem too, but I think it's up to clamd. Maybe it is caused by pthread? I did some further testing: You can put the sleep wherever you want to fix it. A for loop can also cancel it out. A

Re: [Clamav-users] Strange behavior of ArchiveMaxCompressionRatio

2005-02-01 Thread Maxim Cherniavsky
Tomasz Kojm wrote: Nothing strange about compression ratio ... Well, the calculations are bad... That's all? :) -- Best regards, Maxim Cherniavsky Comstar-UTS, Internet Division

Re: [Clamav-users] W32.Spybot.IVQ?

2005-02-01 Thread Daniel J McDonald
On Sun, 2005-01-30 at 08:57 -0500, Gary Weinfurther wrote: Sounds like the answer is no? No, the answer is - if it is one of the ~1000 variants previously reported, clamav will detect it. If not, then clamav will detect it after you send a sample to the maintainers so they can create another

Re: [Clamav-users] strange SegFault in 0.81

2005-02-01 Thread Tomasz Kojm
On Tue, 1 Feb 2005 11:48:17 +0300 Ëóãîâñêèé Ì.Â. [EMAIL PROTECTED] wrote: Hello, all I have installed clamav 0.81 on FreeBSD 4.11 (ports version), after running it - Segmentation fault. Here run from gdb: gdb /usr/local/sbin/clamd GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software

[Clamav-users] Error on clamav.net

2005-02-01 Thread Gary Buckmaster
This *just* started because I was able to see this page yesterday. Clicking on the following link: http://lists.clamav.net/mailman/listinfo/clamav-users Yields the following error: Lurker - failed to render page: Bad command (listinfo): The requested command is not supported.

Re: [Clamav-users] Error on clamav.net

2005-02-01 Thread Giorgio Bellussi
Gary Buckmaster wrote: This *just* started because I was able to see this page yesterday. Clicking on the following link: http://lists.clamav.net/mailman/listinfo/clamav-users Yields the following error: Lurker - failed to render page: Bad command (listinfo): The

Re: [Clamav-users] Strange behavior of ArchiveMaxCompressionRatio

2005-02-01 Thread Tomasz Kojm
On Tue, 01 Feb 2005 14:43:11 +0300 Maxim Cherniavsky [EMAIL PROTECTED] wrote: Well, the calculations are bad... That's all? :) You may want to report the problem to the unrar maintainers. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\.

RE: [Clamav-users] Error on clamav.net

2005-02-01 Thread Gary Buckmaster
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Giorgio Bellussi Sent: Tuesday, February 01, 2005 8:11 AM To: ClamAV users ML Subject: Re: [Clamav-users] Error on clamav.net Gary Buckmaster wrote: This *just* started because I was able to see this

Re: [Clamav-users] Error on clamav.net

2005-02-01 Thread Tomasz Kojm
On Tue, 1 Feb 2005 08:26:49 -0600 Gary Buckmaster [EMAIL PROTECTED] wrote: Gary Buckmaster wrote: This *just* started because I was able to see this page yesterday. maybe you missed cgi-bin ? Perhaps, but then the link on: http://www.clamav.net/ml.html#pagestart is broken as it

[Clamav-users] 0.81 on OpenBsd 3.5

2005-02-01 Thread Abdul Rehman Gani
Hi, I run with the ff. configure line:- ./configure --disable-clamav --enable-dependency-tracking --disable-clamuko --enable-bigstack \ --with-user=_clamav --with-group=_clamav --disable-cr --with-dbdir=/usr/local/share/clamav \ --disable-gethostbyname_r --prefix=/usr/local --sysconfdir=/etc

[Clamav-users] ArchiveMaxCompressionRatio

2005-02-01 Thread Shaun Bugler
Hi, just want to know why does this option exist? We have had a couple emails containing legit zips being stopped because of this option, just want to know the benifits of having this option enabled. tx shaun bugler ___

[Clamav-users] What's the trick to get v0.81 to work on PPC, YDL 4.0

2005-02-01 Thread Butler, Paul
When I build v0.81 and install it, I get this: freshclam: error while loading shared libraries: /usr/local/lib/libclamav.so.1: R_PPC_REL24 relocation at 0x0ff8fdb0 for symbol `fwrite' out of range I can uninstall v0.81, and build/install v0.80 from scratch and all's well, except the complaint

Re: [Clamav-users] ArchiveMaxCompressionRatio

2005-02-01 Thread Brian Morrison
On Tue, 1 Feb 2005 17:03:18 +0200 in [EMAIL PROTECTED] Shaun Bugler [EMAIL PROTECTED] wrote: Hi, just want to know why does this option exist? We have had a couple emails containing legit zips being stopped because of this option, just want to know the benifits of having this option

[Clamav-users] FW: [ GLSA 200501-46 ] ClamAV: Multiple issues

2005-02-01 Thread Jon Dossey
Just wanted to make sure everyone was aware of this. If you're not running 0.81, now is a good time to upgrade! -Original Message- From: Sune Kloppenborg Jeppesen [mailto:[EMAIL PROTECTED] Sent: Monday, January 31, 2005 1:42 PM To: [EMAIL PROTECTED] Cc: bugtraq@securityfocus.com;

Re: [Clamav-users] 0.81 on OpenBsd 3.5

2005-02-01 Thread C. Bensend
./configure --disable-clamav --enable-dependency-tracking --disable-clamuko --enable-bigstack \ --with-user=_clamav --with-group=_clamav --disable-cr --with-dbdir=/usr/local/share/clamav \ --disable-gethostbyname_r --prefix=/usr/local --sysconfdir=/etc --disable-zlib-vcheck and get the

[Clamav-users] clamav-milter-0.81e caused sendmail to stop accepting mails

2005-02-01 Thread Alexander Piavka
Hi, i have sendmail server, the clamav-milter is running on a remote host. In sendmail.cf server i have clamav configured like this: Xclamav, S=inet:[EMAIL PROTECTED], T=C:1m;S:30s;R:30s;E:5m On the clamserver calamav-milter runs with following flags: -x 1 --external

Re: [Clamav-users] 0.81 on OpenBsd 3.5

2005-02-01 Thread Odhiambo Washington
* C. Bensend [EMAIL PROTECTED] [20050201 18:51]: wrote: ./configure --disable-clamav --enable-dependency-tracking --disable-clamuko --enable-bigstack \ --with-user=_clamav --with-group=_clamav --disable-cr --with-dbdir=/usr/local/share/clamav \ --disable-gethostbyname_r --prefix=/usr

Re: [Clamav-users] 0.81 on OpenBsd 3.5

2005-02-01 Thread C. Bensend
How about you guys checking Jerome LOYET's page? I think he maintains OBSD ports, somehow. Of late I believe he's on sabbatical from this list ;) Check it now. :) He's passed the port on to Marc Balmer, and Marc is not going to release packages for 3.5 and 3.6 -STABLE like Jerome did. Marc

Re: [Clamav-users] Strange behavior of ArchiveMaxCompressionRatio

2005-02-01 Thread Tomasz Kojm
On Tue, 1 Feb 2005 15:10:25 +0100 Tomasz Kojm [EMAIL PROTECTED] wrote: On Tue, 01 Feb 2005 14:43:11 +0300 Maxim Cherniavsky [EMAIL PROTECTED] wrote: Well, the calculations are bad... That's all? :) You may want to report the problem to the unrar maintainers. Sorry, to the

Re: [Clamav-users] Strange behavior of ArchiveMaxCompressionRatio

2005-02-01 Thread Robert Hogan
Well, the calculations are bad... That's all? :) Maxim, The calculations from unzip are 'correct' insofar as the percentage in your output represents: (unzipped size - zipped size)/(unzipped size) * 100 so: 874796 Defl:N 151104 83% 04-09-04 13:53 f9d40334 file_name = (874796 -

[Clamav-users] RAR module failure

2005-02-01 Thread Ben Stuyts
Hi, I'm running clamav 0.81 under FreeBSD 5.3. Clamav has been letting some (probably) trojans through which come in rar attachments. For example this file: [aurora:/var/mail]167: unrar l NewPassword.rar UNRAR 3.40 freeware Copyright (c) 1993-2004 Alexander Roshal Archive NewPassword.rar

Re: [Clamav-users] RAR module failure

2005-02-01 Thread Ben Stuyts
I might add a few things: On 1 Feb 2005, at 18:06, Ben Stuyts wrote: [aurora:/var/mail]169: clamscan NewPassword.rar NewPassword.rar: RAR module failure The file is not password protected, and I have rar scanning enabled. Here is a the clamd log: Tue Feb 1 17:57:28 2005 - clamd daemon 0.81 (OS:

Re: [Clamav-users] RAR module failure

2005-02-01 Thread Stephen Gran
On Tue, Feb 01, 2005 at 06:06:45PM +0100, Ben Stuyts said: Hi, I'm running clamav 0.81 under FreeBSD 5.3. Clamav has been letting some (probably) trojans through which come in rar attachments. For example this file: [aurora:/var/mail]167: unrar l NewPassword.rar UNRAR 3.40 freeware

Re: [Clamav-users] RAR module failure

2005-02-01 Thread Ken Jones
I might add a few things: On 1 Feb 2005, at 18:06, Ben Stuyts wrote: [aurora:/var/mail]169: clamscan NewPassword.rar NewPassword.rar: RAR module failure Check what version of RAR was used to create the archive. I beleive from the conversations this week, that Clamav supports through

Re: [Clamav-users] RAR module failure

2005-02-01 Thread Tomasz Kojm
On Tue, 1 Feb 2005 12:20:06 -0500 Stephen Gran [EMAIL PROTECTED] wrote: Yes, the internal unpacker for rar archives doesn't handle v3 rar archives. Try clamscan --unrar /path/to/unrar for this. The correct syntax is: clamscan --unrar file.rar or clamscan --unrar=/path/to/unrar file.rar

Re: [Clamav-users] RAR module failure

2005-02-01 Thread Ben Stuyts
On 1 Feb 2005, at 18:20, Stephen Gran wrote: Yes, the internal unpacker for rar archives doesn't handle v3 rar archives. Try clamscan --unrar /path/to/unrar for this. Thanks, that is indeed the problem. Now it says Trojan.LdPinch.JM1-3 FOUND. I'm using clamav as a milter with sendmail. I can't

Re: [Clamav-users] RAR module failure

2005-02-01 Thread Niek
On 2/1/2005 6:32 PM +0100, Ben Stuyts wrote: On 1 Feb 2005, at 18:20, Stephen Gran wrote: Yes, the internal unpacker for rar archives doesn't handle v3 rar archives. Try clamscan --unrar /path/to/unrar for this. Thanks, that is indeed the problem. Now it says Trojan.LdPinch.JM1-3 FOUND. I'm

Re: [Clamav-users] RAR module failure

2005-02-01 Thread Brett Simpson
On Tuesday 01 February 2005 12:40, Niek wrote: unfortunately, the --unrar parameter is for clamscan only. The clamd.conf file says... # Due to license issues libclamav does not support RAR 3.0 archives (only the # old 2.0 format is supported). If this is still an issue then maybe a

[Clamav-users] Failed to delete X-Virus-Status header 1

2005-02-01 Thread Joe Polk
I've been getting this error for 3 days on some emails. Anyone know what this is? Failed to delete X-Virus-Status header 1 -- JAV ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Failed to delete X-Virus-Status header 1

2005-02-01 Thread Brian Morrison
On Tue, 1 Feb 2005 14:26:20 -0400 in [EMAIL PROTECTED] Joe Polk [EMAIL PROTECTED] wrote: I've been getting this error for 3 days on some emails. Anyone know what this is? Failed to delete X-Virus-Status header 1 This is in the latest cvs changes, so it looks like it will be fixed in the

[Clamav-users] RV: Clamav's Clamd 0.81 stops from time to time with error:: clamd: unable to connect to UNIX socket /tmp/clamd

2005-02-01 Thread Alejandro Lengua
I were running Exiscan+Exim 4.43 and Clamav 0.80 in a Linux Redhat 9 box, but today I updated to Clamav 0.81, and from time (40 minutes avg) the clamd service stops, so I get the following error from exim clamd: unable to connect to UNIX socket /tmp/clamd It is courious, everything was fine,

Re: [Clamav-users] RAR module failure

2005-02-01 Thread jef moskot
Is there an eicar sample wrapped up using this version of rar available? Jeffrey Moskot System Administrator [EMAIL PROTECTED] ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] ClamAV scans relayed mail twice

2005-02-01 Thread Mathieu Sanichar
Hi guys, I've got a test mail server running handling mail for mail.net and mail.nl, the mail coming in for mail.nl is relayed to mail.net. From the log files (attached) it seems that clamav is scanning the message both times, while spamd waits until sendmail is completely done with the delivery

RE: [Clamav-users] Failed to delete X-Virus-Status header 1

2005-02-01 Thread Nigel Horne
I've been getting this error for 3 days on some emails. Anyone know what this is? Failed to delete X-Virus-Status header 1 This is fixed in CVS. JAV ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

RE: [Clamav-users] Failed to delete X-Virus-Status header 1

2005-02-01 Thread Sam
On Tue, 1 Feb 2005, Nigel Horne wrote: I've been getting this error for 3 days on some emails. Anyone know what this is? Failed to delete X-Virus-Status header 1 This is fixed in CVS. At the risk of showing my ignorance...what is a CVS, and how does one go about applying one?

RE: [Clamav-users] Failed to delete X-Virus-Status header 1

2005-02-01 Thread Nigel Horne
At the risk of showing my ignorance...what is a CVS, and how does one go about applying one? If you don't know about CVS you can still get the latest version, from www.clamav.net - look for snapshot under download. It should be no more that 24 hours behind the version in CVS. -Nigel

Re: [Clamav-users] What's the trick to get v0.81 to work on PPC, YDL 4.0

2005-02-01 Thread Nigel Horne
On Tue, 2005-02-01 at 15:10, Butler, Paul wrote: When I build v0.81 and install it, I get this: freshclam: error while loading shared libraries: /usr/local/lib/libclamav.so.1: R_PPC_REL24 relocation at 0x0ff8fdb0 for symbol `fwrite' out of range I can uninstall v0.81, and

[Clamav-users] How does freshclam send reload notifications to clamav-milter running in internal mode?

2005-02-01 Thread Matthew Schumacher
The subject says it all, according to the freshclam man page it sends updates to clamd via the socket: --daemon-notify=/path/to/clamd.conf Notify the daemon about the new database. By default it reads a hardcoded config file but you can use an another one. Both local and TCP sockets are

RE: [Clamav-users] Failed to delete X-Virus-Status header 1

2005-02-01 Thread Samuel Benzaquen
At the risk of showing my ignorance...what is a CVS, and how does one go about applying one? You can never be ignorant if you have the Internet on your hands ;) You can read some about it here: http://en.wikipedia.org/wiki/Concurrent_Versions_System -Samuel

Re: [Clamav-users] How does freshclam send reload notifications to clamav-milter running in internal mode?

2005-02-01 Thread Nigel Horne
This was discussed in this list last week. Start at http://www.mail-archive.com/clamav-users@lists.clamav.net/msg15571.html and follow the thread through. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] ClamAV scans relayed mail twice

2005-02-01 Thread Brian Morrison
On Tue, 1 Feb 2005 17:57:24 +0100 in [EMAIL PROTECTED] Mathieu Sanichar [EMAIL PROTECTED] wrote: From the log files (attached) They were placed inline, without MIME boundaries, and as such are not easily retrievable without some work. Could you try again after adjusting your settings please.

[Clamav-users] Re: ClamAV scans relayed mail twice

2005-02-01 Thread Mathieu Sanichar
http://www.sanichar.net/clamav/maillog.txt The original message is send to spamtest at sanichar dot nl, which is relayed to spamtest at sanichar dot net Brian Morrison [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] On Tue, 1 Feb 2005 17:57:24 +0100 in [EMAIL PROTECTED] Mathieu

Re: [Clamav-users] strange SegFault in 0.81

2005-02-01 Thread Rob MacGregor
On Tue, 1 Feb 2005 13:42:22 +0100, Tomasz Kojm [EMAIL PROTECTED] wrote: This shows how irresponsible FreeBSD maintainers and/or port system are. They were the ones who demanded removing the zlib check, and for them --disable-zlib-vcheck has been implemented. As printed by ./configure when

[Clamav-users] Updating clamav0.81

2005-02-01 Thread jijo
hello I am using clamAV 0.80.2 in my redhat 9 and I have one fedora Core when I am trying to Install clamAV 0.81.1 it wants the packages libc.so.6(GLIBC_2.3.4) is needed by clamav-0.81-1 libcurl.so.3 is needed by clamav-0.81-1 libidn is needed by clamav-0.81-1 libidn.so.11 is needed