[Clamav-users] Additional Resources

2004-12-24 Thread D Walsh
It seems that the same problems are reoccurring and I thought a 'What I Know Is/Frequently Asked Question / WIKI-FAQ' page to house answers and related information should be publicly available so I have established what I think will be a useful resource for this. http://www.macftphttp.serverbox

Re: [Clamav-users] GDI+ bug exploit Mutations

2004-10-17 Thread D Walsh
On Oct 17, 2004, at 22:49, Tomasz Kojm wrote: On Sun, 17 Oct 2004 21:36:22 -0500 (CDT) Damian Menscher <[EMAIL PROTECTED]> wrote: For those running 0.80rc4 or 0.80 final, you can catch all jpeg exploits with the following signature (add it to a local.ndb file in your database directory): Exploit.JP

[Clamav-users] daily.cvd and main.cvd

2004-10-16 Thread D Walsh
While I am very happy with clamav, I see room for expansion and potential in a limited global environment. Is it possible to have clamd on other servers utilize the db files on a dedicated server in a local network? I think that it makes sense to have the ability to use a single instance of fr

[Clamav-users] daily.cvd & main.cvd

2004-10-16 Thread D Walsh
While I am very happy with clamav, I see room for expansion and potential in a limited global environment. Is it possible to have clamd on other servers utilize the db files on a dedicated server in a local network? I think that it makes sense to have the ability to use a single instance of fr

Re: [Clamav-users] Good old 'SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES' with a twist

2004-10-12 Thread D Walsh
On Oct 12, 2004, at 23:47, Greg Deputy wrote: I've been scanning the archives and have followed all suggestions there that I can find, but still no luck. I'm running clamav 0.80rc4 on fedora core 2. Just installed over rc3. In the logs when the database update runs I have the very familiar (after

Re: [Clamav-users] Adding Virus type to the X-Virus-Flag: Yes

2004-10-12 Thread D Walsh
On Oct 12, 2004, at 12:17, Nigel Horne wrote: On Tuesday 12 Oct 2004 15:51, marvin wrote: Although it logs the virus to the /var/log/clamd.log, I would like it added to the header e.g. X-Virus-Flag: Yes - Worm.SomeFool.P Any ideas how I can achieve this ? Use the --advisory flag of clamav-milter.

Re: [Clamav-users] ClamAV unable to open directory

2004-10-10 Thread D Walsh
How about telling us what app is trying to write to this file? What is it's user ID? What is it's group ID? Biggest problem I've seen is that people are using amavisd and clamav and these apps are controlled by different user/groups and this conflict causes lots of problems. If you have this c

Re: [Clamav-users] clamd problems

2004-10-10 Thread D Walsh
On Oct 10, 2004, at 15:38, Steven Westbrook wrote: Ok.. I don't see UnixSocket. I've included my clamd.conf file... thanks, steve -- ## ## Example config file for the Clam AV daemon ## Please read the clamd.conf(5) manual before editing this file. ## # Comme

Re: [Clamav-users] A suggestion....

2004-10-09 Thread D Walsh
While this is good, it doesn't address the issue with the '-devel' While reading deep into the source files and readme's, I came across some information that had me examining the build process. If a basic './configure' or './configure --prefix=/usr --mandir=/usr/share/man --sysconfdir=/etc' is i

Re: [Clamav-users] [Solved] Digital Signature Support

2004-10-06 Thread D Walsh
I installed GNU MP but forgot to rebuild clamav, did a fresh './configure --prefix=/usr --mandir=/usr/share/man --sysconfdir=/etc; make; make install' and it corrected the issue. Sometimes reading the instructions once isn't enough!! -- Dale On Oct 06, 2004, at 18:26, D Walsh wr

[Clamav-users] Digital Signature Support

2004-10-06 Thread D Walsh
Here is an excerpt from the freshclam.log. -- Received signal 14, wake up ClamAV update process started at Wed Oct 6 17:07:02 2004 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES main.cvd is up to date (version: 27, sigs: 23982, f-level: 2, builder: tomek)

[Clamav-users] to display original sender of virus/banned - READ

2004-09-28 Thread D Walsh
Using your favorite editor, create the following patch file and save as amavisd-212.patch --- amavisd Mon Sep 27 18:47:15 2004 +++ amavisd Mon Sep 27 18:47:15 2004 @@ -11848,9 +11848,10 @@ Date: %d From: %f Subject: [? %#V |

Re: [Clamav-users] New jpeg "virus" and 0.75?

2004-09-27 Thread D Walsh
On Sep 27, 2004, at 23:06, Matthew Daubenspeck wrote: Will there be an updated signature for the new jpeg "virus" for the 0.75 series of ClamAV? You don't say what virus your talking about... try this... it goes in amavisd,conf in the av_scanner section... copy/paste/save and restart amavisd T

Re: [Clamav-users] Re: Re: Windows port ?

2004-09-22 Thread D Walsh
I concur with Bart, from following this thread, it appears that theft is not the issue but interpretation of the license. While the virii database is proprietary, it is licensed under the GPL and from what I can tell, unless of course it carries it's own independent license, giving credit where

Re: [Clamav-users] Windows port ?

2004-09-19 Thread D Walsh
What else besides cygwin are you using??? -- Dale On Sep 19, 2004, at 06:40, [EMAIL PROTECTED] wrote: Hi, Is there any reason why Windows port of clamav exists only based on cygwin ? Regards Boguslaw Brandys --- This SF.Net email is sponsored b

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-15 Thread D Walsh
On Sep 15, 2004, at 01:48, Fajar A. Nugraha wrote: D Walsh wrote: I sat down in front of a Solaris 9 system, installed clamav as instructed and yes indeed there appears to be a problem with the implementation of free(), in 30 mins of sending e-mail from the EICAR test site memory did climb

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread D Walsh
On Sep 14, 2004, at 23:38, Fajar A. Nugraha wrote: Nigel Horne wrote: On Tuesday 14 Sep 2004 10:34, D Walsh wrote: Would you consider the following a sign of a memory leak? IDname user cpu threads real mem virtual mem

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

2004-09-14 Thread D Walsh
On Sep 14, 2004, at 03:38, Trog wrote: On Tue, 2004-09-14 at 06:30, Meni Shapiro wrote: Clamd works great for lots of people, but some have reported memory leaks on latest stable (0.75.1), which could cause your system to be "out of memory". A few people (out of the thousands who run ClamAV) have r

Re: [Clamav-users] ClamAV on a Knoppix disk?

2004-09-13 Thread D Walsh
On Sep 13, 2004, at 15:30, <[EMAIL PROTECTED]> wrote: Brad Morgan wrote: Does anyone know if ClamAV has been packaged with any of the Live Linux CDs? I've got a Windows PC that keeps rebooting over and over and we suspect a virus. It would be nice to have a Live Linux CD with ClamAV that can freshc

Re: [Clamav-users] Question about sending 400 not knowing viruses to the database

2004-09-13 Thread D Walsh
On Sep 13, 2004, at 15:49, [EMAIL PROTECTED] wrote: Hi. I scanned the catched Virus files of the mailserver&Proxy which are protected with some commercial stuff So i get 300 Files which arent in the Clamav Virus Database, all stuff seems to be known by other Anti Virus Companies. Most stuff is

Re: [Clamav-users] Next Stable?

2004-09-13 Thread D Walsh
On Sep 13, 2004, at 04:34, Trog wrote: On Mon, 2004-09-13 at 09:24, D Walsh wrote: They only problem with updating versions is when the tools required to build the update change as well. autoconf is only required to build devel/CVS versions. I updated autocon to 2.59 (latest), ./configure went OK

Re: [Clamav-users] Next Stable?

2004-09-13 Thread D Walsh
On Sep 13, 2004, at 03:03, Brian Morrison wrote: On Sun, 12 Sep 2004 16:58:46 -0500 in [EMAIL PROTECTED] Alex S Moore <[EMAIL PROTECTED]> wrote: On Sun, 2004-09-12 at 14:58, Jeff Smelser wrote: On Sunday 12 September 2004 02:52 pm, Björn Ketelaars wrote: Out of curiosity; when is a development vers

Re: [Clamav-users] ClamAV update failed

2004-09-12 Thread D Walsh
On Sep 12, 2004, at 02:35, Dave Filchak wrote: ERROR: Can't open new file ./clamav-a088d48c982fbf38 to write open: Permission denied ERROR: Can't download main.cvd from 65.75.154.69 These look like permission errors, can't write to the folder or files. -- Dale

Re: [Clamav-users] Mail antivirus help

2004-09-11 Thread D Walsh
On Sep 10, 2004, at 09:33, Stelian wrote: Please help me, i have a very urgent problem. I must provide a virus free mail service for my employer, and I must do it fast or my job is on the line :) We curently have about 6 POP3 acounts stored on our ISP server. The viral trafic (incoming, of course)

Re: [Clamav-users] Clamav and freshclam

2004-09-11 Thread D Walsh
On Sep 11, 2004, at 02:41, Rushan Sobar wrote: Dear All, my freshclam log show that my database contain Received signal 14, wake up ClamAV update process started at Mon Sep  6 20:22:55 2004 main.cvd is up to date (version: 26, sigs: 22925, f-level: 2, builder: tomek) daily.cvd updated (version

Re: [Clamav-users] freshclam update and the minute of the hour

2004-09-10 Thread D Walsh
On Sep 10, 2004, at 13:32, Dennis Peterson wrote: Dennis Peterson said: A long time ago when I worked at a large aircraft company in Seattle I helped develop a DNS resource balancing methodology that evaluated system load of each server being managed to determine that server's position in the DNS

Re: [Clamav-users] ENC: Clamav, amavisd-new and postfix not detecting zafi

2004-09-10 Thread D Walsh
On Sep 09, 2004, at 19:51, Erick Dantas Rotole wrote: I am using Clamav, amavisd-new, spamassassin and postfix (all latest version and updated)but It doesn´t detect zafi. When i scan the infected file using clamscan --mbox, the virus is detected, but using amavisd-new with clamd as the primary an

Re: [Clamav-users] Upgrade clamav on Debian and now service creates error when starting

2004-09-10 Thread D Walsh
On Sep 09, 2004, at 17:49, Daniel J McDonald wrote: On Thu, 2004-09-09 at 13:37, Jim wrote: After I upgraded clamav via apt-get I now get an error during restart of /etc/init.d/clamav-daemon. This is on a debian system and the error created is: /etc/init.d/clamav-daemon restart Restarting clamav

Re: [Clamav-users] ClamAV 0.75.1 building problems. [RESOLVED]

2004-09-09 Thread D Walsh
In my attempt to correct the mandir in the configure script I accidentally inserted a foreign character that caused this problem. found by comparing changes between my modified and the unmodified configure script. --- This SF.Net email is spo

[Clamav-users] ClamAV 0.75.1 building problems.

2004-09-08 Thread D Walsh
In an attempt to upgrade my server and make use of this software, I've done the following: cd /build gnutar -xzvf clamav-0.75.1.tar.gz mv ./clamav-0.75.1 ./clamav cd clamav ./configure --prefix=/usr sudo make sudo make install > build.txt The program doesn't run, from what I can tell, the conf fi