Hi folks
being the lazy bum on the block, are there any config file changes
between 0.84 and 0.85. The changelog suggests none.
Thanks
Erich
___
http://lurker.clamav.net/list/clamav-users.html
On Thursday 12 May 2005 03:18, imacat wrote:
> The newly-released ClamAV 0.85 seems to have problem starting:
>
> [EMAIL PROTECTED]:~# /usr/sbin/clamav-milter -C -f -N -q -m 20 --pidfile
> /var/run/clamav-milter.pid -U /var/spool/virusmails
> /var/run/clamav-milter.sock
> [EMAIL PROTECTED]:~#
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
> I recently ran into a virus that amavisd-new/clamd doesn't detect but
> clamscan does.
>
> I'm running clamav-0.85 on FreeBSD 4.5.
>
> Here's the results from clamscan:
>
> root edoras[25]: clamscan --debug email-doc.scr
>
Hi,
I descovered an error in freshclam V0.85.
It is installed on an SuSE SLES 8 SP1, UL 1.0 SP3 box.
(Linux version 2.4.21-138-smp ([EMAIL PROTECTED]) (gcc version 3.2.2) #1
SMP Fri Oct 31 00:51:31 UTC 2003)
When I install from the sources and run "freshclam -v" the output stops
after the main.c
Hello from Stuttgart, Germany
we're also getting some strange zipfile problems, we can't solve.
For about half an year, we're using clamav (clamdscan) on our mailserver in
a qmail-setup launched from the qmail-scanner script. We didn't had no
problems at all.
On the 3rd of may, I updated to 0.84
On Wed, 11 May 2005 17:03:39 -0700
[EMAIL PROTECTED] wrote:
> LibClamAV debug: CVD -> No creation time in seconds (old file format)
Your databases are outdated.
--
oo. Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
\.
Douglas K. Fischer wrote:
I'm running ClamAV up front on my bastions and some other commerical
scanners behind it - I have yet to see a single intercept on one of the
commercial scanners due to a slip by ClamAV.
I get 60-100 messages per day which get past ClamAV but are picked up by
another AV
On Thu, 2005-05-12 at 11:16 +0100, Andy Saunders wrote:
> Douglas K. Fischer wrote:
> > I'm running ClamAV up front on my bastions and some other commerical
> > scanners behind it - I have yet to see a single intercept on one of the
> > commercial scanners due to a slip by ClamAV.
>
> I get 60-1
Andy Saunders wrote:
> I get 60-100 messages per day which get past ClamAV but are picked up by
> another AV product. Nonetheless, ClamAV is a credit to the developers.
Have you submitted them to www.clamav.net?
-Nigel
___
http://lurker.clamav.net/li
This error happened on RedHat enterprise Server 3.0
- Original Message -
From: "SPAMMER" <[EMAIL PROTECTED]>
To:
Sent: Thursday, May 12, 2005 5:23 PM
Subject: [Clamav-users] error in freshclam V0.85
Hi,
I descovered an error in freshclam V0.85.
It is installed on an SuSE SLES 8 SP1
This is not an error, but a goof on your upgrade process.
Some stale libraries, I think!
* clamav <[EMAIL PROTECTED]> [20050512 13:40]: wrote:
> This error happened on RedHat enterprise Server 3.0
>
>
>
> - Original Message -
> From: "SPAMMER"
think!
* clamav <[EMAIL PROTECTED]> [20050512 13:40]: wrote:
This error happened on RedHat enterprise Server 3.0
- Original Message -
From: "SPAMMER" <[EMAIL PROTECTED]>
To:
Sent: Thursday, May 12, 2005 5:23 PM
Subject: [Clamav-users] error in freshclam V0.85
I have a rather pointed question for the mailing-list. I currently manage a
dedicated RedHat 9 Linux system for a non-profit. This system comes
pre-installed with Qmail and Spam Assassin which is managed or configured via
Plesk (web-based) management tool. I have decided to try implementing C
I had the same problem with some ZIP files, but 0.85 version has solved
it. Well, at least don't drop my email if clamd can't unzip attached file.
With 0.84 version:
Thu May 12 00:24:03 2005 ->
/var/spool/qmailscan/tmp/zipi111585023548727222/Tienda.zip: Input/Output
error ERROR
and with 0.85 v
t a goof on your upgrade process.
>Some stale libraries, I think!
>
>
>* clamav <[EMAIL PROTECTED]> [20050512 13:40]: wrote:
>
>
>>This error happened on RedHat enterprise Server 3.0
>>
>>
>>
>>- Original Message -
>>From: "
Trog wrote:
Picked up as what, by what scanner(s)?
W32/Bagz-C,D and E by sophie using Sophos AVI.
Nigel Horne wrote:
Have you submitted them to www.clamav.net?
Yes, I've been submitting my quota of 2/day. I see something I sent in
was incorporated in update 873 as submission 36215 although that w
A simple way is to install qmail-scanner. This program replace your
qmail-queue program to analize virus using clamav. You only need to
install it and configure your env QMAILQUEUE variable related with your
SMTP service pointing to qmail-scanner. To make it work, your Qmail
must have applied
[EMAIL PROTECTED] wrote:
I have a rather pointed question for the mailing-list. I currently manage a dedicated RedHat 9 Linux system for a non-profit. This system comes pre-installed with Qmail and Spam Assassin which is managed or configured via Plesk (web-based) management tool. I have decided
I would be happy to implement the qmail-scanner tool, but I'm not sure how this
would or could impact the currently installed qmail system and Plesk. Also, I
do not know the impact or of the qmail patch can be applied without hurting the
pre-installed setup also. If I knew that qmail was pre-i
On Thu, 2005-05-12 at 05:55 -0500, [EMAIL PROTECTED] wrote:
>
> With that said, I would like to find a way of integrating this with qmail to
> scan all incoming and outgoing emails.
> My problem is that I also do not want to disturb or mess up the pre-installed
> qmail configuration preventin
On Thursday 12 May 2005 06:21, [EMAIL PROTECTED] wrote:
> I would be happy to implement the qmail-scanner tool, but I'm not sure how
> this would or could impact the currently installed qmail system and Plesk.
> Also, I do not know the impact or of the qmail patch can be applied without
> hurting
That not a bad idea, you only need another machine running qmail with
clamav in front of qmail servers. This way, you dont need to modify your
current email servers. If your are not sure about to requested changes,
this is the best solution.
John Jolet wrote:
On Thursday 12 May 2005 06:21, [EMA
Actually you could do this by just running a second instance of qmail on
the same box.
Jose Javier Sianes Ruiz wrote:
That not a bad idea, you only need another machine running qmail with
clamav in front of qmail servers. This way, you dont need to modify
your current email servers. If your ar
clamav wrote:
The error is that when run "freshclam -v" the output stops after the main.cvd
It is works correctly On Redhat8.0.
I see the same thing on Fedora Core 3. The bug is only in the output.
daily.cvd is properly tested and updated.
--
Steve
___
- Original Message -
From: "Jose Javier Sianes Ruiz" <[EMAIL PROTECTED]>
To: "ClamAV users ML"
Sent: Thursday, May 12, 2005 12:59 PM
Subject: Re: [Clamav-users] Further Zipfile Errors
> I had the same problem with some ZIP files, but 0.85 version has solved
> it. Well, at least don't d
My qmail-scanner version is 1.24 without patches.
List wrote:
- Original Message -
From: "Jose Javier Sianes Ruiz" <[EMAIL PROTECTED]>
To: "ClamAV users ML"
Sent: Thursday, May 12, 2005 12:59 PM
Subject: Re: [Clamav-users] Further Zipfile Errors
I had the same problem with some ZIP fi
> -Original Message-
> From: [EMAIL PROTECTED]
>
> [EMAIL PROTECTED] wrote:
> > Hi,
> >
> > I have a couple of hours looking on google and the lists if it has
> > been asked and it beats be.
> > Is there anywhere I can read about the DNS server software that
> > db.local.clamav.net uses? ho
On Wed, May 11, 2005 at 07:58:43PM -0700, Dennis Peterson said:
>
> It's harmless if it's a firewalled machine in your home. I'd never do it
> to a more exposed system or in a multi-user environment - but it can be
> done. What is the directive, BTW?
LogFile /path/to/file
--
---
Stephen Gran wrote:
> > It's harmless if it's a firewalled machine in your home. I'd never do
> > it to a more exposed system or in a multi-user environment - but it
> > can be done. What is the directive, BTW?
>
> LogFile /path/to/file
I think he meant what were the contents of the OP's log d
With several mentions of problems with 0.85, is there a date when 0.86
might be released? In the developers opinion, would it be better to
wait, or go ahead and upgrade now? Currently running 0.84.
No criticism intended, just trying to spend the time wisely if I do it.
Hi all,
Just a quick question. I didn't see RAR 3 support highlighted in the
release notes, but I know that it was mentioned that RAR 3 support is
in CVS. Can I assume that this support is not yet ready, and thus not
in 0.85?
Thanks!
--
Jason 'XenoPhage' Frisvold
[EMAIL PROTECTED]
___
Nigel Horne wrote:
On Wednesday 11 May 2005 21:47, Nigel Horne wrote:
On Wednesday 11 May 2005 21:34, Brett Simpson wrote:
I'm getting a permission denied message when trying to start clamav-milter under version 0.85. I says "/dev/console: Permission denied"
Operating system, PERLEASE.
Oh yes,
Upgrading took me less than 5 minutes earlier this morning (including
configure/make times on a RH3 box running postfix+amavisd), while the number
of fixes may look small its always wise to run the most recent releases.. if
only because it means the next version change is then a smaller hop away.
On Thu, 2005-05-12 at 09:45 -0400, Jason Frisvold wrote:
> Just a quick question. I didn't see RAR 3 support highlighted in the
> release notes, but I know that it was mentioned that RAR 3 support is
> in CVS. Can I assume that this support is not yet ready, and thus not
> in 0.85?
The 0.8x ver
On Thu, May 12, 2005 at 02:38:17PM +0100, Matt Fretwell said:
> Stephen Gran wrote:
>
> > > It's harmless if it's a firewalled machine in your home. I'd never do
> > > it to a more exposed system or in a multi-user environment - but it
> > > can be done. What is the directive, BTW?
> >
> > LogFil
On 5/12/05, Trog <[EMAIL PROTECTED]> wrote:
> The 0.8x versions are predominantly bug fix releases.
>
> As the RAR code has been completely re-written (including RAR version 1
> and 2 support), it is currently scheduled for the 0.90 release, which
> will have a longer testing period due to the new
LogFile /path/to/file
And using /dev/null as the log file would be the equivalent of not being
able to write to /dev/console and moving on. Since I am using SysLog
anyway, I chose this route.
--
David L. Crow Texas! It's like a
[EMAIL PROTECTED] whole other c
> clamav-milter under version 0.85. I says "/dev/console: Permission denied"
> same problem here, linux 2.4.30 on redhat box.
Fixed in CVS
> BR,
> Matías.
___
http://lurker.clamav.net/list/clamav-users.html
On May 12, 2005, at 8:48 AM, Kenneth Byrne wrote:
Upgrading took me less than 5 minutes earlier this morning (including
configure/make times on a RH3 box running postfix+amavisd), while
the number
of fixes may look small its always wise to run the most recent
releases.. if
only because it means
On 5/12/05, Phil Schilling <[EMAIL PROTECTED]> wrote:
> Thats fine and dandy when you only have one box to upgrade. I think
> the original question is valid. .84 lasted what? Week and a half,
> maybe two. And yes I am a contributor.
I package it in an RPM and use up2date (or preferred rpm handl
Jason Frisvold wrote:
> On 5/12/05, Phil Schilling <[EMAIL PROTECTED]> wrote:
> > Thats fine and dandy when you only have one box to upgrade. I think
> > the original question is valid. .84 lasted what? Week and a half,
> > maybe two. And yes I am a contributor.
>
> I package it in an RPM and
I have just installed clamav 0.84 with clamav-milter. I want
notifications to go ONLY to the local postmaster address specified in
/etc/sysconfig/clamav-milter. I do not want a message to go to the
sender (since most addresses are forged), nor do I want a message to go
to the recipient (becau
Phil Schilling wrote:
On May 12, 2005, at 8:48 AM, Kenneth Byrne wrote:
Upgrading took me less than 5 minutes earlier this morning (including
configure/make times on a RH3 box running postfix+amavisd), while the
number
of fixes may look small its always wise to run the most recent
releases.. if
On Thursday 12 May 2005 16:17, Chad Jones wrote:
> I have just installed clamav 0.84 with clamav-milter. I want
> notifications to go ONLY to the local postmaster address specified in
> /etc/sysconfig/clamav-milter. I do not want a message to go to the
> sender (since most addresses are forged
On May 12, 2005, at 10:04 AM, Matt Fretwell wrote:
Jason Frisvold wrote:
On 5/12/05, Phil Schilling <[EMAIL PROTECTED]> wrote:
Thats fine and dandy when you only have one box to upgrade. I think
the original question is valid. .84 lasted what? Week and a half,
maybe two. And yes I am a contribu
Phil Schilling wrote:
> > Not the most taxing of procedures.
> Point still missed. I never said it was hard. But 2 hours of time to
> upgrade and test all boxes is not easy to come by.
Finding time to do anything is not easy. We still cope :)
Matt
On May 12, 2005, at 10:43 AM, Matt Fretwell wrote:
Phil Schilling wrote:
Not the most taxing of procedures.
Point still missed. I never said it was hard. But 2 hours of time to
upgrade and test all boxes is not easy to come by.
Finding time to do anything is not easy. We still cope :)
Ok, you
> Phil Schilling wrote:
>
> > > Not the most taxing of procedures.
>
>
> > Point still missed. I never said it was hard. But 2 hours of time to
> > upgrade and test all boxes is not easy to come by.
Phil, do not feel alone. There are many of us that have the same type of
question in the sam
> Ok, your better than me. Still didn't get my point though and I
> don't have a we to do it.
You could always employ me to do it for you...
> Phil
-Nigel
___
http://lurker.clamav.net/list/clamav-users.html
> with testing on each, it does take a little but of that "free time". :)
Well, you can employ me as well ;-)
> Rob
-Nigel
___
http://lurker.clamav.net/list/clamav-users.html
Phil Schilling wrote:
> > Finding time to do anything is not easy. We still cope :)
> Ok, your better than me. Still didn't get my point though and I
> don't have a we to do it.
I understood your point perfectly. Why upgrade, using precious time, when
another upgrade may be required very
Matt Fretwell wrote:
> not do do something
That should have been, 'not to do something'.
Matt
___
http://lurker.clamav.net/list/clamav-users.html
Unfortunately the -b option doesn't fix this.
When the -b option is set then a notification goes to the sender and the
postmaster, which is what I would expect since that's what the man page
says that -b does. I don't want the notification to go to the sender,
just to the postmaster.
Here is m
On May 12, 2005, at 10:56 AM, Nigel Horne wrote:
Ok, your better than me. Still didn't get my point though and I
don't have a we to do it.
You could always employ me to do it for you...
You get me clients to understand why they need to pay bi-weekly for
upgrades, I will. ;-)
Phil
I've been examine the log entries since I've updated to 2.3.1-rc3,
I'm seeing 'quarantine' which I wasn't seeing in 2.2.1, is this
normal entries for mail being delivered?
May 12 11:59:12 daleenterprise.com /usr/bin/amavisd[18983]:
(18983-04) Passed, <[EMAIL PROTECTED]> ->
<[EMAIL PROTE
On 5/12/05, Dale Walsh <[EMAIL PROTECTED]> wrote:
> I've been examine the log entries since I've updated to 2.3.1-rc3,
> I'm seeing 'quarantine' which I wasn't seeing in 2.2.1, is this
> normal entries for mail being delivered?
The real question is - upgraded WHAT to 2.3.1-rc3?
--
I will be out of the office starting 12.05.2005 and will not return until
23.05.2005.
Ich werde Ihre Nachricht nach meiner Rückkehr beantworten. In dringenden
Fällen kontaktieren Sie bitte meine Kollegen telefonisch oder per Mail.
___
http://lurker.cla
On May 12, 2005, at 12:19 PM, Rob MacGregor wrote:
On 5/12/05, Dale Walsh <[EMAIL PROTECTED]> wrote:
I've been examine the log entries since I've updated to 2.3.1-rc3,
I'm seeing 'quarantine' which I wasn't seeing in 2.2.1, is this
normal entries for mail being delivered?
The real question is - up
On Thu, 2005-05-12 at 17:19 +0100, Rob MacGregor wrote:
> On 5/12/05, Dale Walsh <[EMAIL PROTECTED]> wrote:
> > I've been examine the log entries since I've updated to 2.3.1-rc3,
> > I'm seeing 'quarantine' which I wasn't seeing in 2.2.1, is this
> > normal entries for mail being delivered?
>
> T
[EMAIL PROTECTED] wrote:
I will be out of the office starting 12.05.2005 and will not return until
23.05.2005.
Ich werde Ihre Nachricht nach meiner Rückkehr beantworten. In dringenden
Fällen kontaktieren Sie bitte meine Kollegen telefonisch oder per Mail.
Great, so we get to see this crap for ano
Hi All,
The clamav installed on fedora 3 while updating gives me this error:
Can't connect to port 80 of host db.sa.clamav.net (IP: 195.184.96.15)
Trying host db.sa.clamav.net (195.214.240.53)...
Can't connect to port 80 of host db.sa.clamav.net (IP: 195.214.240.53)
Trying host db.sa.clamav.net
I wonder if I could get a clarification of the following message from
the -users mailing list? Nigel seems to be saying that telling clamav-milter
to use clamd via --external doesn't use IPC and is faster than using
the milter's built-in scanner. I would guess the reverse to be true.
From: N
What did the old "-D" switch used to do? In upgrading my Mac OS X 10.4
Server installation, I noticed it runs freshclam thusly:
freshclam -d -D -p freshclam.pid -c 24
If I try to run the 0.85 version that way, it errors out saying:
/usr/local/bin/freshclam: invalid option -- D
ERROR: Unknown opt
It seems that the foreground option is only available via the
freshclam.conf file, is this an oversight? because it shows as a valid
option when freshclam -h is issued at the command-line.
This can be solved with:
*** ../../clamav-0.84/freshclam/options.c Tue Apr 19 17:33:16 2005
--- optio
On Thu, 12 May 2005, Chad Jones wrote:
Unfortunately the -b option doesn't fix this.
Of course not, it's the problem. ;)
When the -b option is set then a notification goes to the sender and the
postmaster, which is what I would expect since that's what the man page says
that -b does. I don't wa
Just noticed the change in freshclam:
Software version from DNS: 0.85
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.84 Recommended version: 0.85
DON'T PANIC! Read http://www.clamav.net/faq.html
Nice touch.
___
http://lurker.clam
Phil wrote:
> Thats fine and dandy when you only have one box to upgrade. I think
> the original question is valid. .84 lasted what? Week and a half,
> maybe two.
Only too recently, I myself have argued in favor of a short waiting period
before upgrading -- precisely to avoid your typical "oopse
I run clamd .80 on Solaris 2.7 and call File::Scan::ClamAV from perl to scan
messages.
With .80 top shows clamd < 5%, but on occasion once or twice a week climbs
to 20% - 30%. Really bogs down the system until clamd is restarted.
I installed .84 on test system that already had .80, hoping CPU
Usman Zajil wrote:
> The clamav installed on fedora 3 while updating gives me this error:
> Can't connect to port 80 of host db.sa.clamav.net (IP: 195.184.96.15)
>
> Trying host db.sa.clamav.net (195.214.240.53)...
[snip]
These messages mean that freshclam tried DNS then http (port 80) to update
* Mike Sanchez <[EMAIL PROTECTED]> [20050512 22:19]: wrote:
> I run clamd .80 on Solaris 2.7 and call File::Scan::ClamAV from perl to scan
> messages.
>
> With .80 top shows clamd < 5%, but on occasion once or twice a week climbs
> to 20% - 30%. Really bogs down t
Mark wrote:
> > I understood your point perfectly. Why upgrade, using
> > precious time, when another upgrade may be required very shortly,
> > requiring said time to again be used. I am just pointing out a
> > pitfall. There is always a good excuse not to do something. It is,
> > however, exactly
Hello Samuel Benzaquen,
> > http://www.squish.net/dnscheck/
> > look up "db.local.clamav.net" record type "ANY"
> >
> > ns1.clamav.net 69.61.68.204BIND: 9.2.5
> I still can't figure out how can BIND know which IP belongs to which
> country.
It's impossible. We just _try_ to do that. Ou
--- Odhiambo Washington <[EMAIL PROTECTED]> wrote:
> * Mike Sanchez <[EMAIL PROTECTED]> [20050512 22:19]: wrote:
> > I run clamd .80 on Solaris 2.7 and call File::Scan::ClamAV from perl to
> scan
> > messages.
> >
> > With .80 top shows clamd < 5%,
Gee, my own little flame war. Not my intention when I asked the
original question. Here's how my thoughts went:
1. The developers obviously thought that the changes since 0.84 were
significant enough to release a new version, and obviously hoped that
people would upgrade to 0.85.
2. Sin
At 02:39 PM 5/12/2005, email builder wrote:
Why would that help? If amavis/clam CPU usage with .80 is lower than with
.84 (and .83 for me), then the problem seems to point right at clam (unless
the OP upgraded amavis or whatever).
Your response is more of *another* idea rather than a fix/solution,
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Matt Fretwell
> And yes, I will echo what Tomasz said in this regard. These
> gentleman|lady admins are paid to keep these systems in prime working
> condition, inclusive of updates for new threats or sec
> > > http://www.squish.net/dnscheck/
> > > look up "db.local.clamav.net" record type "ANY"
> > >
> > > ns1.clamav.net69.61.68.204BIND: 9.2.5
> > I still can't figure out how can BIND know which IP belongs to which
> > country.
>
> It's impossible. We just _try_ to do that. Our primary goal
* email builder <[EMAIL PROTECTED]> [20050512 22:40]: wrote:
>
> --- Odhiambo Washington <[EMAIL PROTECTED]> wrote:
> > * Mike Sanchez <[EMAIL PROTECTED]> [20050512 22:19]: wrote:
> > > I run clamd .80 on Solaris 2.7 and call File::Scan::Clam
> "Tomasz" == Tomasz Kojm <[EMAIL PROTECTED]> writes:
Tomasz> [EMAIL PROTECTED] wrote:
>> LibClamAV debug: CVD -> No creation time in seconds (old file format)
Tomasz> Your databases are outdated.
OK, it looks like clamscan tries to read the compiled in database
location even th
On Thu, 12 May 2005 10:03:05 -0400
Jason Frisvold <[EMAIL PROTECTED]> wrote:
> On 5/12/05, Trog <[EMAIL PROTECTED]> wrote:
> > The 0.8x versions are predominantly bug fix releases.
> >
> > As the RAR code has been completely re-written (including RAR
> > version 1 and 2 support), it is currently
On 5/12/05, Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> "the RAR code has been completely re-written"
>
> and now Trog holds all licensing restrictions :-)
Gotcha.. :) I thought it was more of a "the creator of rar 3 wasn't
allowing anyone to create unrar programs without paying him tons of
cash"
Samuel Benzaquen wrote:
> That is why they are called (I.T|Network) Administrators.
> >
>
> Your are right. We are paid.
> Our time is company money and if the product needs too much Admin time,
> then it is not that _gratis_ as we presented it to our bosses in the
> first place.
Nothing is tru
On Thu, 12 May 2005 10:10:23 -0700
Jef Poskanzer <[EMAIL PROTECTED]> wrote:
> By the way I tried using --external as suggested and it did not
> fix the false-negative problems I've been seeing since 01may.
> I'm still getting about 5000 messages per day that clamav-milter
> says are clean but that
Mike Sanchez wrote:
> I run clamd .80 on Solaris 2.7 and call File::Scan::ClamAV from perl to scan
> messages.
Old Solaris version on an old Sparc with not much RAM?
> With .80 top shows clamd < 5%, but on occasion once or twice a week climbs
> to 20% - 30%. Really bogs down the system until c
On Thu, 12 May 2005 12:31:01 -0700
"Mike Sanchez" <[EMAIL PROTECTED]> wrote:
> I run clamd .80 on Solaris 2.7 and call File::Scan::ClamAV from perl
> to scan messages.
Does your script need to load the virus databases for each and every
message?
--
oo. Tomasz Kojm <[EMAIL PR
On Thu, 12 May 2005 13:35:47 -0700
Bob Finch <[EMAIL PROTECTED]> wrote:
> LibClamAV debug: Raw mode: No support for special files
This is a configuration issue with clamd.
--
oo. Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
Hello Samuel Benzaquen,
> > > > ns1.clamav.net 69.61.68.204BIND: 9.2.5
> > > I still can't figure out how can BIND know which IP belongs to which
> > > country.
> > It's impossible. We just _try_ to do that. Our primary goal is to
> > distribute the load among mirrors. The secondary goal is
Ren? Berber wrote:
> Old Solaris version on an old Sparc with not much RAM?
No, it's got 3G ram 4CPU, processes peaks of 100,000 msgs/hr.
Solaris is tuned, played with the clamd config options.
When problem occurs under .80, clamd can't scan messages quick enough and
messages wait in queue. K
>>By the way I tried using --external as suggested and it did not
>>fix the false-negative problems I've been seeing since 01may.
>>I'm still getting about 5000 messages per day that clamav-milter
>>says are clean but that clamscan correctly says have Bagz.something.
>
>Please post your clamd.conf
On Thu, 12 May 2005 15:01:34 -0700
Jef Poskanzer <[EMAIL PROTECTED]> wrote:
> The latter has a mod date of yesterday, and freshclam.log says
> it is version 875. A clamscan of one of the false-negatives:
>
> % clamscan -V
> ClamAV 0.84/875/Tue May 10 04:27:59 2005
> % clamscan 473844
Have you guys looked/heard of 7zip?
http://www.7-zip.org/
*7-Zip* is free software distributed under the *GNU LGPL*.
They have a way to "extract" RAR archives using their own algorithm,
also a SourceForge Project. I stumbled upon it the other day and now can
say goodbye to the WinRar demo :)
--
On Thu, 12 May 2005 16:07:43 -0600
Jorge Valdes <[EMAIL PROTECTED]> wrote:
> Have you guys looked/heard of 7zip?
> http://www.7-zip.org/
> *7-Zip* is free software distributed under the *GNU LGPL*.
>
> They have a way to "extract" RAR archives using their own algorithm,
We have it too.
--
>> % clamscan -V
>> ClamAV 0.84/875/Tue May 10 04:27:59 2005
>> % clamscan 473844
>> 473844: Worm.Bagz.C FOUND
>
>Does clamdscan detect it?
Let's see... Yes.
---
Jef
Jef Poskanzer [EMAIL PROTECTED] http://www.acme.com/jef/
___
Jef Poskanzer wrote:
> >> % clamscan -V
> >> ClamAV 0.84/875/Tue May 10 04:27:59 2005
> >> % clamscan 473844
> >> 473844: Worm.Bagz.C FOUND
> >
> >Does clamdscan detect it?
>
> Let's see... Yes.
clam*d*scan, not clamscan.
Matt
___
h
Mike Sanchez wrote:
>>Old Solaris version on an old Sparc with not much RAM?
>
>
> No, it's got 3G ram 4CPU, processes peaks of 100,000 msgs/hr.
> Solaris is tuned, played with the clamd config options.
You wrote "Solaris 2.7" that's Solaris 7, I haven't seen it in a long time (I
use 8 and 9, h
>> >> % clamscan -V
>> >> ClamAV 0.84/875/Tue May 10 04:27:59 2005
>> >> % clamscan 473844
>> >> 473844: Worm.Bagz.C FOUND
>> >
>> >Does clamdscan detect it?
>>
>> Let's see... Yes.
>
> clam*d*scan, not clamscan.
YES.
---
Jef
Jef Poskanzer [EMAIL PROTECTED] http://www.
At 03:50 PM 5/12/2005, René Berber wrote:
You wrote "Solaris 2.7" that's Solaris 7, I haven't seen it in a long time (I
use 8 and 9, haven't tried 10), does it even support multiple CPUs?
Solaris has always supported multiple CPUs, going back to the 1980's.
Paul Theodoropoulos
http://www.anastrophe
Jef Poskanzer wrote:
> >> >Does clamdscan detect it?
> >>
> >> Let's see... Yes.
> >
> > clam*d*scan, not clamscan.
>
> YES.
My apologies. Misinterpreted your previous post.
Matt
___
http://lurker.clamav.net/list/clamav-users.html
--- Noel Jones <[EMAIL PROTECTED]> wrote:
> At 02:39 PM 5/12/2005, email builder wrote:
>
> >Why would that help? If amavis/clam CPU usage with .80 is lower than with
> >.84 (and .83 for me), then the problem seems to point right at clam
> (unless
> >the OP upgraded amavis or whatever).
> >
> >Y
> If you are not doing real benchmarking those numbers are meaningless. So
> it was
> 60% but under what real load (messages per second)? Is clamd doing the
> same
> work or perhaps the 60% was with some really nasty zip inside zip virus?
>
> If you only look occasionally at load (and BTW using
1 - 100 of 109 matches
Mail list logo
