From: "Paul Smedley" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTPS id 8113079 for ecs-isp@2rosenthals.com; Sun, 15 Oct 2023 03:15:52 -0400 Received: from [192.168.200.201] (port=44768 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.96) (envelope-from ) id 1qrvLg-0004Rq-2M for ecs-isp@2rosenthals.com; Sun, 15 Oct 2023 03:15:40 -0400 Received: from dormouse.elm.relay.mailchannels.net ([23.83.212.50]:25562) by mail2.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1qrvLX-0001xN-0J for ecs-isp@2rosenthals.com; Sun, 15 Oct 2023 03:15:31 -0400 X-Sender-Id: perthwebhosting|x-authuser|paul@smedley.id.au Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id B1E2F141AFE; Sun, 15 Oct 2023 07:15:29 +0000 (UTC) Received: from colossiansvm.perthwebhosting.net.au (unknown [127.0.0.6]) (Authenticated sender: perthwebhosting) by relay.mailchannels.net (Postfix) with ESMTPA id 4C9D1141AD9 for ; Sun, 15 Oct 2023 07:15:28 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1697354128; a=rsa-sha256; cv=none; b=F4Xe+BSyfCy7WXb/JDYyz4ukCispXGoNLEARDMNnLqaPeNFa5DY/I0GOEC4+l2+5AjqMXI Y2hoPTtEcyAfP7skFJNh2ODHQ2gXfrS8udefGW6A71wSOBEuwf2L4v4haxn0oITAMuDPS8 REZIMYarpcxboLc2LcCFRKT8j2rHF/hdYemck9KG5cqZwkjFCZBA11f6F1tdB67s6CT25i 8ME4uyy3bb0VuQ5V9nVIF0YvKKzpC1rZwSeaNjIyrtBoVUGqB1eE7XsWjaNGklY7xso63/ fcJxuWacGtrzCfKnaO1tdvqy4Ewnu+KMKFv4y/8Tyx0HfJlN+ftfYhCgaHxnaQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1697354128; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=cmX+eHjSECyed4lMnmrK6h9lMVnkqEU6Q3yXJAB+euA=; b=QGFZgPuo31nWBx5dErAGbj7GLSZg7WCcS2vsvvD6irCEyDyAvhYlHu7a4713U1F9yFJdkM 20vpsfVsE8s/ODb5c4+NteVrh56Ih91vxF67iN/wh4G/jYl+wokqFu1ZN1IrbNIT0XrfRV y9pP8coZ6pYkYuzVhkWDeiD2+1RwRJXXdzL7FaToAGRU1ecpefk7sl8y60j6JI8h39oNgr PEazhV+SOJt30psPzl0qSvscQkl8WPLESKyTt3LtgKusqUMK/bUVeJeFjFKoaJX4JMC3/0 zGokBoA/5m95US7Yor1expn+3aEicD7v+3sSTVLW8hyz7z5cVllbRF6tCHPaVA== ARC-Authentication-Results: i=1; rspamd-549cb46585-lnfmc; auth=pass smtp.auth=perthwebhosting smtp.mailfrom=paul@smedley.id.au X-Sender-Id: perthwebhosting|x-authuser|paul@smedley.id.au X-MC-Relay: Neutral X-MC-Copy: stored-urls X-MailChannels-SenderId: perthwebhosting|x-authuser|paul@smedley.id.au X-MailChannels-Auth-Id: perthwebhosting X-Tasty-Eight: 1dcd05c736b0f8ba_1697354128960_1650018858 X-MC-Loop-Signature: 1697354128960:841427292 X-MC-Ingress-Time: 1697354128959 Received: from colossiansvm.perthwebhosting.net.au (colossiansvm.perthwebhosting.net.au [103.13.84.198]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.123.152.124 (trex/6.9.2); Sun, 15 Oct 2023 07:15:28 +0000 Received: from 218-215-61-148.sta.wbroadband.net.au ([218.215.61.148]:60402 helo=[192.168.1.159]) by colossiansvm.perthwebhosting.net.au with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.96.1) (envelope-from ) id 1qrvLS-001nHs-1E for ecs-isp@2rosenthals.com; Sun, 15 Oct 2023 15:15:25 +0800 Message-ID: Date: Sun, 15 Oct 2023 17:45:24 +1030 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [eCS-ISP] ClamAV To: eCS ISP Mailing List References: Content-Language: en-AU In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-AuthUser: paul@smedley.id.au Hi Steven, On 15/10/23 12:21, Steven Levine wrote: > In , on 10/14/23 > at 05:24 PM, "Paul Smedley" said: > > Hi Paul, > >>> I get to update libc later. On a positive note, I learned something new > After the libc update, I find that ClamAV had put me on timeout for too > many failures yesterday so I switched back to working on clamscan. IIRC - it creates a text file somewhere locally for this - remove the text file and you're un-banned :) > For some reason, at first is claimed > > clamscan --debug --verbose --database=/Internet/clamav/lib --recursive=yes > /tmp/ LibClamAV debug: searching for unrar, user-searchpath: /clamav/lib > LibClamAV debug: searching for unrar: libclamunrar_iface.dll.9.0.5 not > found LibClamAV debug: searching for unrar: libclamunrar_iface.dll.9 not > found LibClamAV debug: searching for unrar: libclamunrar_iface.dll not > found LibClamAV debug: searching for unrar: libclamunrar_iface.a not found > LibClamAV debug: Cannot dlopen libclamunrar_iface: dlopen rc=2 > extra=LIBCLAMUNRAR_IFACE.A - unrar support unavailable LibClamAV debug: > Initialized 0.103.6 engine > LibClamAV debug: Initializing phishcheck module > LibClamAV debug: Phishcheck: Compiling regex: ^ > *(http|https|ftp:(//)?)?[0-9]{1,3}(\.[0-9]{1,3}){3}[/?:]? *$ LibClamAV > debug: Phishcheck module initialized > LibClamAV debug: Bytecode initialized in interpreter mode > LibClamAV debug: Loading databases from /Internet/clamav/lib > LibClamAV Error: cli_loaddbdir(): No supported database files found in > /Internet/clamav/lib ERROR: Can't open file or directory > LibClamAV debug: Cleaning up phishcheck > LibClamAV debug: Freeing phishcheck struct > LibClamAV debug: Phishcheck cleaned up > > However, after some .cvd and .exe file shuffling, this went away. What I > did that actually fixed it is probably going to remain a mystery. Yep,  I've never seen that before :P > Does it make sense to update the sources to 0.103.10, which seems to be > the latest 0.103 LTS? The logs show mostly unrar fixes, which don't > really apply to us. However, as I read > > https://docs.clamav.net/faq/faq-eol.html#version-support-matrix > > it is possible that 0.103.6 could get locked out of access to .cvd updates > if the versions turns out to be problematic. Given that 0.103.6 is > already pretty old, this is probably not going to happen until 0.103 goes > out of support. your wish is my command - https://github.com/psmedley/clamav-os2 & https://smedley.id.au/tmp/clamav-0.103.10-os2-20231015-debug.zip Cheers, Paul