[Clamav-users] warning - all interception message methods are off ?

2007-04-19 Thread Elizabeth Schwartz
My server is running Solaris 10, Sendmail 8.13.8, I upgraded clamav from 0.88.7 to 0.90.2. (Blastwave build). I first got a bunch of errors of the form : ERROR: Parse error at line 228: Option ScanArchive requires boolean argument. /opt/csw/sbin/clamav-milter: Can't parse the config file

Re: [Clamav-users] Information about Virus Sober.Y

2005-11-28 Thread Elizabeth Schwartz
On 11/25/05, Richard Pijnenburg [EMAIL PROTECTED] wrote: Okay, So if i understand you correctly, Sober.Y == Sober.U ? Viruses mutate frequently, and different vendors give different names to viruses as they get ahold of samples. And, there's no strict line between versions; one program might

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Elizabeth Schwartz
Mine's doing the same. Solaris 9, clamav 0.87, blastwave build. I took a look with truss and it seems to be looping doing this over and over and over (I don't se any values changing here): /2: open(/opt/csw/share/clamav, O_RDONLY|O_NDELAY|O_LARGEFILE) = 7 /2: fstat64(7, 0xFEEFBD00) = 0 /2:

Re: [Clamav-users] Clamav-milter CPU usage

2005-09-28 Thread Elizabeth Schwartz
Thanks all, for the fast responses! I had indeed set ReadTimeout to 0 at some point in the dim past. I have changed it to a positive number and clamav-milter seems MUCH happier. ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Zotob - same as Worm.Mytob.CL?

2005-08-16 Thread Elizabeth Schwartz
Just wondering if anyone knew whether Worm.Mytob.CL is the same as the worm the media is calling Zotob(zotob.a or zotob.b) ? Circumstantial evidence points that way but I don't have any samples to play with. I've searched the usual sites with nothing conclusive either way... thanks Betsy

Re: [Clamav-users] Error while starting sendmail

2005-06-15 Thread Elizabeth Schwartz
On 6/15/05, ladha [EMAIL PROTECTED] wrote: Here is my sendmail.mc INPUT_MAIL_FILTER(`clmilter', `S-local:/var/run/clmilter.sock, F=, T=S:4m;R:4m') dnl I see two typos. try INPUT_MAIL_FILTER(`clmilter', `S=local:/var/run/clmilter.sock, F=T,T=S:4m;R:4m')dnl Make sure you don't have extra

[Clamav-users] Clamav-milter and freshsclam not playing nice

2005-06-14 Thread Elizabeth Schwartz
Last Tuesday I updated from Clamav 0.83 to Clamav 0.85.1 (Blastwave package). My server runs Solaris 9 and sendmail 8.13.3 (also blastwave). Clamav-milter runs with these flags: # cat /opt/csw/etc/clamav-milter -q -lo /opt/csw/run/clmilter.sock

Re: [Clamav-users] Clamav-milter and freshsclam not playing nice

2005-06-14 Thread Elizabeth Schwartz
On 6/14/05, Damian Menscher [EMAIL PROTECTED] wrote: The problem is it's not documented in TFM, it's documented in the FAQ: http://wiki.clamav.net/index.php/FrequentlyAskedQuestions Thanks, actually I missed that because I searched on the *whole* error string. I've switched back to

Re: [Clamav-users] should Broken.Executable files be submitted?

2005-06-02 Thread Elizabeth Schwartz
On 6/2/05, Matt Fretwell [EMAIL PROTECTED] wrote: Broken is broken :) It is pretty irrelevant, if they are broken, whether you block them or not, one might suggest. It's still worth blocking them, because otherwise they trigger virus alerts on the end-user's machines running local virus

Re: [Clamav-users] Mirrors are not fully synchronized.

2005-04-06 Thread Elizabeth Schwartz
I am getting the same thing. ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamd on Solaris ceases functioning after a while

2005-03-24 Thread Elizabeth Schwartz
On Mon, 7 Mar 2005 19:52:55 -0500, David Blank-Edelman [EMAIL PROTECTED] wrote: I just wanted to pop in and provide the latest update on our saga (clamd 0.83 just stops playing nice after running for a while) with some more interesting information like stack traces. This sounds like exactly

Re: [Clamav-users] Clueless Newbies [was: (no subject)]

2005-02-28 Thread Elizabeth Schwartz
I'd like to see one list, for similar reasons. I run Solaris but I can see that a lot of folks here run Linux, and if they were on a separate list probably all their general QA's would end up on that list, and I'd end up reading it anyway. And if most of the users migrated over there, it would be