Clamav

[Chris Kloiber]

On Wed, 2004-05-19 at 20:15, Alexander Dalloz wrote:
> Am Mi, den 19.05.2004 schrieb Chris Kloiber um 13:29:
> 
> > > May 19 17:37:08 harry sendmail[3820]: i4J7b7u0003820: SYSERR(root): out
> > > of memory: Cannot allocate memory
> > >
> > > Phil
> > 
> > Sounds like a good default behavior to me. If you really want to enable
> > it, look in /etc/sysconfig/clamav-milter and get rid of the --quiet
> > flag. Remember that alot of virus' use faked From: addresses so
> > notifying the 'sender' is a useless thing, and in most cases generates
> > spam. I haven't used Windows to send email in years, yet I get several
> > "Norton AV found: <foo!> in an email from you..." almost daily from
> > people that I do not know.
> >
> > Chris Kloiber
> 
> Chris,
> 
> that was my very first thought too. Since a long time those notification
> mails make no sense any more. At least the OP seems to not notify the
> potential sender about sending a virus mail, does he mix recipient and
> sender? I do not see a switch to decide whether the recipient should get
> a notification or not. I only see the --bounce option which is certainly
> nasty for the reasons you spoke Chris about. The default behaviour
> (without explicit overriding switches) is to send an SMTP code 550 to
> the sender MTA if a virus/worm is detected by clamd. That should be
> sufficient in the very most cases.
> 
> Despite that, the behaviour of clamav / clamav-milter (?) looks not
> correct to me, when it exits with such an error message in the log. Like
> for the OP on my FC1 mail host Sendmail and clamav-milter are working
> without any problems. So what may cause the error on FC2? From the
> fedora.us bugzilla entry I do not see an explanation.
> 
> Alexander

DoH!, I didn't even look at the error message. 

Time to upgrade clamav I think. I was getting those, and an upgrade to
0.70 fixed it (for me, for now).

-- 
Chris Kloiber