update_virus_scanners

Dave Filchak dfilchak at sympatico.ca
Wed Oct 27 06:41:45 IST 2004


So, I finally got this working but I need to have a few things clarified.
The fix seems to be that when I updated to ClamAV 0.80 that I ended up with
two sets of conf files. One freshclam.conf at /usr/local/etc/freshclam.conf
(the old one) and one at /etc/freshclam.conf (the new one). As well, I had
/usr/local/etc/clamd.conf (the old one) and /etc/clamd.conf. Have the
default directories changed from /usr/local/etc or is /etc/ the default
directory for these conf files?  Whatever the case, freshclam seems to be
looking for these conf files under /etc/. Where should these conf files be
and if mine are in the wrong place (even though it seems to be working) how
do I set it back to the default?

Cheers

Dave

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Dave Filchak
Sent: Tuesday, October 26, 2004 1:52 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: [MAILSCANNER] update_virus_scanners

Are you saying to add this to the update_virus_scanners script in
cron.hourly or if not, where are you referring to? My path is as follows and
should be OK:

/usr/kerberos/sbin:/usr/kerberos/bin:/bin:/sbin:/usr/bin:/usr/sbin:/usr/loca
l/bin:/usr/local/sbin:/usr/bin/X11:/usr/X11R6/bin:/root/bin:/usr/local/mysql
:/usr/sbin:/sbin:/usr/local/bin

Thanks

Dave

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Hans Melgers
Sent: Tuesday, October 26, 2004 12:05 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: [MAILSCANNER] update_virus_scanners

Is your path ok ?
Try adding a path statement in the script, something like

# could be needed for cron
export PATH=$PATH:/bin:/usr/bin:/usr/local/bin

Hans

> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Dave Filchak
> Sent: dinsdag 26 oktober 2004 16:38
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: update_virus_scanners
>
>
> Permissions on /tmp are right:
>
> stat /tmp
>   File: `/tmp'
>   Size: 11264           Blocks: 22         IO Block: 4096   Directory
> Device: 801h/2049d      Inode: 2           Links: 11
> Access: (1777/drwxrwxrwt)  Uid: (    0/    root)   Gid: (
> 0/    root)
> Access: 2004-10-26 09:15:24.000000000 -0400
> Modify: 2004-10-26 10:33:16.000000000 -0400
> Change: 2004-10-26 10:33:16.000000000 -0400
>
> And  perl -w /usr/lib/MailScanner/clamav-autoupdate shows no errors.
>
> Dave
>
> -----Original Message-----
> From: David Jacobson [mailto:davidj at synaq.com]
> Sent: Tuesday, October 26, 2004 10:03 AM
> To: dfilchak at sympatico.ca
> Cc: MAILSCANNER at JISCMAIL.AC.UK
> Subject: RE: update_virus_scanners
>
> Hi,
>
> Does "perl -w /usr/lib/MailScanner/clamav-autoupdate" show any errors?
>
> Also what are your /tmp directory permissions? (Should be
> 1777) you can see this by issuing "stat /tmp"
>
>
> On Tue, 2004-10-26 at 15:10, Dave Filchak wrote:
> > Thanks for your reply. Tried what you suggested and really
> cannot see
> > anything weird. It finds ClamAV installed and finds generic
> installed
> > but nothing else, which is normal.
> >
> > + SCANNERSCONF=/etc/MailScanner/virus.scanners.conf
> > + LOCKFILE=/tmp/MailScanner.autoupdate.lock
> > ++ perl -e 'print "young" if -f
> "/tmp/MailScanner.autoupdate.lock" &&
> > ++ -M
> > "/tmp/MailScanner.autoupdate.lock"<0.042'
> > + '[' x = xyoung ']'
> > + trap 'rm -f /tmp/MailScanner.autoupdate.lock' EXIT touch
> > + /tmp/MailScanner.autoupdate.lock umask 022
> > ++ uname
> > + OS=Linux
> > + '[' Linux = SunOS ']'
> > + GREP=grep
> > + cat /etc/MailScanner/virus.scanners.conf
> > + sed -e 's/#.*$//'
> > + grep -e -wrapper
> >
> > <SNIP>
> >
> > + read NAME WRAPPER PACKAGEDIR
> > ++ echo /usr/lib/MailScanner/clamav-wrapper
> > ++ sed -e 's/-wrapper$/-autoupdate/'
> > + UPDATER=/usr/lib/MailScanner/clamav-autoupdate
> > + '[' -n clamav -a -n /usr/lib/MailScanner/clamav-wrapper
> -a -n /usr ']'
> > + /usr/lib/MailScanner/clamav-wrapper /usr -IsItInstalled logger -p
> > + mail.info -t update.virus.scanners Found clamav installed '[' -x
> > + /usr/lib/MailScanner/clamav-autoupdate ']'
> > + logger -p mail.info -t update.virus.scanners Running
> autoupdate for
> > + clamav /usr/lib/MailScanner/clamav-autoupdate /usr
> >
> > <SNIP>
> >
> > + read NAME WRAPPER PACKAGEDIR
> > ++ echo /usr/lib/MailScanner/generic-wrapper
> > ++ sed -e 's/-wrapper$/-autoupdate/'
> > + UPDATER=/usr/lib/MailScanner/generic-autoupdate
> > + '[' -n generic -a -n /usr/lib/MailScanner/generic-wrapper
> -a -n / ']'
> > + /usr/lib/MailScanner/generic-wrapper / -IsItInstalled logger -p
> > + mail.info -t update.virus.scanners Found generic installed '[' -x
> > + /usr/lib/MailScanner/generic-autoupdate ']'
> > + logger -p mail.info -t update.virus.scanners Running
> autoupdate for
> > generic
> > + /usr/lib/MailScanner/generic-autoupdate /
> >
> > I have edited out the non-pertinent portions. So, as far as I can
> > tell, this part seems fine. The only thing might be the
> lockfile. I do
> > not see this being created when this is run but it is hard to tell.
> >
> > Any other ideas??
> >
> > Dave
> >
> > -----Original Message-----
> > From: David Jacobson [mailto:davidj at synaq.com]
> > Sent: Tuesday, October 26, 2004 2:49 AM
> > To: dfilchak at sympatico.ca
> > Subject: Re: update_virus_scanners
> >
> > Hi,
> >
> > Perhaps try appending -x to the end of the #!/bin/bash line in
> > /usr/sbin/update_virus_scanners and look for any glaring errors.
> >
> > On Tue, 2004-10-26 at 06:34, Dave Filchak wrote:
> > > OK .. I have managed to confuse the hell out of myself and really
> > > could use someone to put me out of my misery. I have just updated
> > > one of my servers to Mail::ClamAV 0.12 and MailScanner
> 4.35.5. After
> > > a bit of fiddling that went OK. However, while I was
> doing that, I
> > > decided to again tackle the update_virus_scanners issue I
> have been
> > > having in that I keep getting an error like the following
> when I run
> > > or cron runs
> > update_virus_scanners:
> > >
> > > Oct 26 00:00:21 ebony update.virus.scanners: Found clamav
> installed
> > > Oct 26 00:00:21 ebony update.virus.scanners: Running
> autoupdate for
> > > clamav Oct 26 00:00:21 ebony ClamAV-autoupdate[13664]: ClamAV
> > > updater failed
> > >
> > > However, if I run freshclam -v I get:
> > >
> > > Current working dir is /usr/local/share/clamav Max retries == 3
> > > ClamAV update process started at Tue Oct 26 00:01:13 2004
> Connected
> > > to database.clamav.net (65.110.48.11).
> > > Reading CVD header (main.cvd): OK
> > > main.cvd is up to date (version: 27, sigs: 23982,
> f-level: 2, builder:
> > > tomek)
> > > Connected to database.clamav.net (65.110.48.11).
> > > Reading CVD header (daily.cvd): OK daily.cvd is up to date
> > > (version: 550, sigs: 1607,
> f-level: 3, builder:
> > > trog)
> > > Freeing option list...done
> > >
> > > Finally, if I run /usr/lib/MailScanner/clamav-autoupdate I get:
> > >
> > > Oct 26 00:03:29 ebony ClamAV-autoupdate[14073]: ClamAV
> did not need
> > > updating
> > >
> > > in my maillog. Also, in clamav-autoupdate, I have changed the log
> > > directory to /var/log/clamav/ClamAV.update.log and in there I get:
> > >
> > > ClamAV update process started at Tue Oct 26 00:03:28 2004
> main.cvd
> > > is up to date (version: 27, sigs: 23982, f-level: 2, builder:
> > > tomek)
> > > daily.cvd is up to date (version: 550, sigs: 1607,
> f-level: 3, builder:
> > > trog)
> > >
> > > So, apparently /etc/cron.hourly/update_virus_scanners if
> not working
> > > and also apparently, I am too dull to figure out why.
> > >
> > > Can someone PLEASE help me out and tell me what they
> think is going
> > > on
> > here?
> > > I know it is probably stupid of me but sometimes you just gotta
> > > throw your hands in the air and yell for help.
> > >
> > > Dave
> > >
> > > ------------------------ MailScanner list
> ------------------------
> > > To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> > > 'leave mailscanner' in the body of the email.
> > > Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and
> > > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> > --
> > Regards,
> >
> > David Jacobson
> > Technical Director
> > SYNAQ (Pty) Ltd
> >
> > Tel:  011 290 6388
> > Cell: 083 235 0760
> > Mail: davidj at synaq.com
> > WWW:  http://www.synaq.com
> >
> > Key Fingerprint
> > 8246 FCE1 3C22 7EFB E61B  18DF 6E8B 65E8 BD50 78A1
> --
> Regards,
>
> David Jacobson
> Technical Director
> SYNAQ (Pty) Ltd
>
> Tel:    011 290 6388
> Cell:   083 235 0760
> Mail:   davidj at synaq.com
> WWW:    http://www.synaq.com
>
> Key Fingerprint
> 8246 FCE1 3C22 7EFB E61B  18DF 6E8B 65E8 BD50 78A1
>
> ------------------------ MailScanner list
> ------------------------ To unsubscribe, email jiscmail at jiscmail.ac.uk
> with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).




More information about the MailScanner mailing list