Installing Clamav on Debian

[Carlos Williams]

I am installing clamav on Debian "Etch" and noticed that when it
resolves the dependencies for required packages, there appears to be a
missing file it does not install called "clamav-daemon" which sounds
very critical. When I download clamav, it does the following:

email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
Reading package lists... Done
Building dependency tree... Done
The following extra packages will be installed:
   clamav-base clamav-freshclam libclamav4 libgmp3c2
Suggested packages:
   unrar lha clamav-docs
Recommended packages:
   arj unzoo
*The following NEW packages will be installed*:
   clamav clamav-base clamav-freshclam libclamav4 libgmp3c2
0 upgraded, 5 newly installed, 0 to remove and 15 not upgraded.




Now do I need to manually install "clamav-daemon"?




email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav-daemon
Reading package lists... Done
Building dependency tree... Done
Suggested packages:
   daemon clamav-docs
The following NEW packages will be installed:
   clamav-daemon
0 upgraded, 1 newly installed, 0 to remove and 15 not upgraded.
Need to get 220kB of archives.
After unpacking 492kB of additional disk space will be used.
Get:1 http://www.backports.org etch-backports/main clamav-daemon
0.93.3.dfsg-1~bpo40+1 [220kB]
Fetched 220kB in 1s (164kB/s)
Selecting previously deselected package clamav-daemon.
(Reading database ... 16193 files and directories currently installed.)
Unpacking clamav-daemon (from
.../clamav-daemon_0.93.3.dfsg-1~bpo40+1_amd64.deb) ...
Setting up clamav-daemon (0.93.3.dfsg-1~bpo40+1) ...
Starting ClamAV daemon: clamd LibClamAV Warning:
***********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.
    ***
LibClamAV Warning: *** DON'T PANIC! Read
http://www.clamav.net/support/faq ***
LibClamAV Warning:
***********************************************************
LibClamAV Warning:
***********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.
    ***
LibClamAV Warning: *** DON'T PANIC! Read
http://www.clamav.net/support/faq ***
LibClamAV Warning:
***********************************************************


--
Carlos Williams <cwilliams@...>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Brandon Perry-2]

clamav-daemon is clamd. This is sgran's area, you may want to contact him in
IRC.

On Mon, Sep 8, 2008 at 11:37 AM, Carlos Williams
<cwilliams@...>wrote:

> I am installing clamav on Debian "Etch" and noticed that when it
> resolves the dependencies for required packages, there appears to be a
> missing file it does not install called "clamav-daemon" which sounds
> very critical. When I download clamav, it does the following:
>
> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
> Reading package lists... Done
> Building dependency tree... Done
> The following extra packages will be installed:
>   clamav-base clamav-freshclam libclamav4 libgmp3c2
> Suggested packages:
>   unrar lha clamav-docs
> Recommended packages:
>   arj unzoo
> *The following NEW packages will be installed*:
>   clamav clamav-base clamav-freshclam libclamav4 libgmp3c2
> 0 upgraded, 5 newly installed, 0 to remove and 15 not upgraded.
>
>
>
>
> Now do I need to manually install "clamav-daemon"?
>
>
>
>
> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav-daemon
> Reading package lists... Done
> Building dependency tree... Done
> Suggested packages:
>   daemon clamav-docs
> The following NEW packages will be installed:
>   clamav-daemon
> 0 upgraded, 1 newly installed, 0 to remove and 15 not upgraded.
> Need to get 220kB of archives.
> After unpacking 492kB of additional disk space will be used.
> Get:1 http://www.backports.org etch-backports/main clamav-daemon
> 0.93.3.dfsg-1~bpo40+1 [220kB]
> Fetched 220kB in 1s (164kB/s)
> Selecting previously deselected package clamav-daemon.
> (Reading database ... 16193 files and directories currently installed.)
> Unpacking clamav-daemon (from
> .../clamav-daemon_0.93.3.dfsg-1~bpo40+1_amd64.deb) ...
> Setting up clamav-daemon (0.93.3.dfsg-1~bpo40+1) ...
> Starting ClamAV daemon: clamd LibClamAV Warning:
> ***********************************************************
> LibClamAV Warning: ***  This version of the ClamAV engine is outdated.
>    ***
> LibClamAV Warning: *** DON'T PANIC! Read
> http://www.clamav.net/support/faq ***
> LibClamAV Warning:
> ***********************************************************
> LibClamAV Warning:
> ***********************************************************
> LibClamAV Warning: ***  This version of the ClamAV engine is outdated.
>    ***
> LibClamAV Warning: *** DON'T PANIC! Read
> http://www.clamav.net/support/faq ***
> LibClamAV Warning:
> ***********************************************************
>
>
> --
> Carlos Williams <cwilliams@...>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>

--
http://www.volatileminds.net
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Carlos Williams]

Brandon Perry wrote:
> clamav-daemon is clamd. This is sgran's area, you may want to contact him in
> IRC.

It does not appear to be so in the Debian packaging. When I install
clamav, I don't have clamav-daemon installed. I have to manually do an
apt-get install clamav-daemon. It then installs and adds an /etc/init.d/
script.

I don't know who sgran is or how to contact him. I don't use IRC.

--
Carlos Williams <cwilliams@...>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Stephen Gran-2]

On Mon, Sep 08, 2008 at 12:37:31PM -0400, Carlos Williams said:
> I am installing clamav on Debian "Etch" and noticed that when it
> resolves the dependencies for required packages, there appears to be a
> missing file it does not install called "clamav-daemon" which sounds
> very critical. When I download clamav, it does the following:
>
> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav

Please use the volatile archive (volatile.debian.org) for clamav
packages aimed at debian stable.  The same people are involved in those
packages and the ones targetted at the main archive, and they are
uploaded much sooner than backports tends to.

To answer your question, apt-get install clamav-daemon.
--
 --------------------------------------------------------------------------
|  Stephen Gran                  | Your CHEEKS sit like twin NECTARINES    |
|  steve@...             | above a MOUTH that knows no BOUNDS --   |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------


_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Carlos Williams]

Stephen Gran wrote:

> On Mon, Sep 08, 2008 at 12:37:31PM -0400, Carlos Williams said:
>> I am installing clamav on Debian "Etch" and noticed that when it
>> resolves the dependencies for required packages, there appears to be a
>> missing file it does not install called "clamav-daemon" which sounds
>> very critical. When I download clamav, it does the following:
>>
>> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
>
> Please use the volatile archive (volatile.debian.org) for clamav
> packages aimed at debian stable.  The same people are involved in those
> packages and the ones targetted at the main archive, and they are
> uploaded much sooner than backports tends to.

So since I already have Clamav installed and working from backports, can
I simply just add "volatile.debian.org" to my source.list and simply:

- apt-get update
- apt-get -t volatile install clamav clamav-daemon

Will that work or break my current working config?

--
Carlos Williams <cwilliams@...>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Brandon Perry-2]

you shouldn't have to specify the repo (apt is pretty good about stuff like
that). just apt-get update ; apt-get upgrade.

On Mon, Sep 8, 2008 at 2:52 PM, Carlos Williams <cwilliams@...>wrote:

> Stephen Gran wrote:
> > On Mon, Sep 08, 2008 at 12:37:31PM -0400, Carlos Williams said:
> >> I am installing clamav on Debian "Etch" and noticed that when it
> >> resolves the dependencies for required packages, there appears to be a
> >> missing file it does not install called "clamav-daemon" which sounds
> >> very critical. When I download clamav, it does the following:
> >>
> >> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
> >
> > Please use the volatile archive (volatile.debian.org) for clamav
> > packages aimed at debian stable.  The same people are involved in those
> > packages and the ones targetted at the main archive, and they are
> > uploaded much sooner than backports tends to.
>
> So since I already have Clamav installed and working from backports, can
> I simply just add "volatile.debian.org" to my source.list and simply:
>
> - apt-get update
> - apt-get -t volatile install clamav clamav-daemon
>
> Will that work or break my current working config?
>
> --
> Carlos Williams <cwilliams@...>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>

--
http://www.volatileminds.net
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Carlos Williams]

Brandon Perry wrote:
> you shouldn't have to specify the repo (apt is pretty good about stuff like
> that). just apt-get update ; apt-get upgrade.

I did an upgrade and it asked me if I would like to install the new
config file for /etc/clamav/clam.conf and /etc/clamav/freshclam.conf. I
elected to keep my version rather than the package maintainers new
version. Now when I restart Clamav, I get the following error:

email:~# /etc/init.d/clamav-daemon restart
Stopping ClamAV daemon: clamd.
Starting ClamAV daemon: clamd ERROR: Parse error at line 41: Unknown
option PhishingRestrictedScan.
ERROR: Can't open/parse the config file /etc/clamav/clamd.conf

Do I just comment line 41 out? Has anyone seen this before or know what
I did wrong? Please help!

--
Carlos Williams <cwilliams@...>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Andrew McGlashan]

Hi,

Carlos Williams wrote:
> Brandon Perry wrote:
> Do I just comment line 41 out? Has anyone seen this before or know
> what I did wrong? Please help!

You may need to do:
apt-get dist-upgrade

I found when I did an upgrade alone, it only updated half the required
packages -- dist-upgrade to the rest sorted (running on sarge) for me.

Kind Regards
AndrewM

Andrew McGlashan
Broadband Solutions now including VoIP

Current Land Line No: 03 9912 0504
Mobile: [phone] Fax: [phone]

National No: 1300 85 3804

Affinity Vision Australia Pty Ltd
http://www.affinityvision.com.au
http://adsl2choice.net.au

In Case of Emergency --  http://www.affinityvision.com.au/ice.html 

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Carlos Williams]

Andrew McGlashan wrote:
> Hi,
>
> You may need to do:
> apt-get dist-upgrade

I did do an apt-get dist-upgrade. I wanted to make sure nothing was
marked as skipped for the upgrade.

> I found when I did an upgrade alone, it only updated half the required
> packages -- dist-upgrade to the rest sorted (running on sarge) for me.

I am running "Etch" however I would think that it does not matter. I
commented out the line 41:

PhishingSignatures true
PhishingScanURLs true
#PhishingRestrictedScan true
PhishingAlwaysBlockSSLMismatch false
PhishingAlwaysBlockCloak false

And with that line commented out, I am now able to  run Clamav with out
any errors:

email:~# /etc/init.d/clamav-daemon restart
Stopping ClamAV daemon: clamd.
Starting ClamAV daemon: clamd .
email:~# /etc/init.d/clamav-freshclam restart
Stopping ClamAV virus database updater: freshclam.
Starting ClamAV virus database updater: freshclam.

Anyone know if there is a way to run the config w/o having to comment
out that one line entry? Should I simply change that to "false"? I am
not even sure what the line entry does if it did work.

--
Carlos Williams <cwilliams@...>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Andrew McGlashan]

Hi,

Carlos Williams wrote:
> Andrew McGlashan wrote:
> I am running "Etch" however I would think that it does not matter. I
> commented out the line 41:

Umm, sorry, so am I ..... Etch,, NOT sarge.
- whoops

> PhishingSignatures true
> PhishingScanURLs true
> #PhishingRestrictedScan true
> PhishingAlwaysBlockSSLMismatch false
> PhishingAlwaysBlockCloak false
>
> And with that line commented out, I am now able to  run Clamav with
> out any errors:

I have no lines commented out and it works fine for me.

# dpkg-query -l |grep -i clam
ii  clamav                    0.94.dfsg-1~volatile1 anti-virus utility for
Unix - command-line i
ii  clamav-base               0.94.dfsg-1~volatile1 anti-virus utility for
Unix - base package
ii  clamav-daemon             0.94.dfsg-1~volatile1 anti-virus utility for
Unix - scanner daemon
ii  clamav-docs               0.94.dfsg-1~volatile1 anti-virus utility for
Unix - documentation
ii  clamav-freshclam          0.94.dfsg-1~volatile1 anti-virus utility for
Unix - virus database
ii  clamav-testfiles          0.94.dfsg-1~volatile1 anti-virus utility for
Unix - test files
rc  libclamav2                0.91.2-1~volatile1                   virus
scanner library
rc  libclamav3                0.92.1~dfsg-1volatile2               virus
scanner library
ii  libclamav4                0.93.3.dfsg-volatile1 anti-virus utility for
Unix - library
ii  libclamav5                0.94.dfsg-1~volatile1 anti-virus utility for
Unix - library

Don't know why libcalmav4 is still there though.

Kind Regards
AndrewM

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Carlos Williams]

Andrew McGlashan wrote:
> Umm, sorry, so am I ..... Etch,, NOT sarge.
> - whoops

Oh - OK. That makes sense.

> I have no lines commented out and it works fine for me.

Is your entry on line 41 set to "True" or "False"?

> # dpkg-query -l |grep -i clam
> ii  clamav                    0.94.dfsg-1~volatile1 anti-virus utility for
> Unix - command-line i
> ii  clamav-base               0.94.dfsg-1~volatile1 anti-virus utility for
> Unix - base package
> ii  clamav-daemon             0.94.dfsg-1~volatile1 anti-virus utility for
> Unix - scanner daemon
> ii  clamav-docs               0.94.dfsg-1~volatile1 anti-virus utility for
> Unix - documentation
> ii  clamav-freshclam          0.94.dfsg-1~volatile1 anti-virus utility for
> Unix - virus database
> ii  clamav-testfiles          0.94.dfsg-1~volatile1 anti-virus utility for
> Unix - test files
> rc  libclamav2                0.91.2-1~volatile1                   virus
> scanner library
> rc  libclamav3                0.92.1~dfsg-1volatile2               virus
> scanner library
> ii  libclamav4                0.93.3.dfsg-volatile1 anti-virus utility for
> Unix - library
> ii  libclamav5                0.94.dfsg-1~volatile1 anti-virus utility for
> Unix - library
>
> Don't know why libcalmav4 is still there though.

I appear to have the same...

email:/# dpkg-query -l |grep -i clam
ii  clamav                     0.94.dfsg-1~volatile1
anti-virus utility for Unix - command-line i
ii  clamav-base                0.94.dfsg-1~volatile1
anti-virus utility for Unix - base package
ii  clamav-daemon              0.94.dfsg-1~volatile1
anti-virus utility for Unix - scanner daemon
ii  clamav-freshclam           0.94.dfsg-1~volatile1
anti-virus utility for Unix - virus database
ii  libclamav4                 0.93.3.dfsg-volatile1
anti-virus utility for Unix - library
ii  libclamav5                 0.94.dfsg-1~volatile1
anti-virus utility for Unix - library

--
Carlos Williams <cwilliams@...>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Andrew McGlashan]

Hi,

Carlos Williams wrote:
> I am running "Etch" however I would think that it does not matter. I
> commented out the line 41:
>
> PhishingSignatures true
> PhishingScanURLs true
> #PhishingRestrictedScan true
> PhishingAlwaysBlockSSLMismatch false
> PhishingAlwaysBlockCloak false

The new default file doesn't have the "PhishingRestrictedScan true" line at
all:

# grep -ni PhishingRestrictedScan *
clamd.conf.ucf-old:41:PhishingRestrictedScan true

I compared the updated clamd.conf file with my existing one during upgrade
time and decided to go with the current package default.  So, perhaps
"PhishingRestrictedScan" shouldn't be used any longer.


# grep -ni Phishing *
clamd.conf:39:PhishingSignatures true
clamd.conf:40:PhishingScanURLs true
clamd.conf:41:PhishingAlwaysBlockSSLMismatch false
clamd.conf:42:PhishingAlwaysBlockCloak false
clamd.conf.ucf-old:39:PhishingSignatures true
clamd.conf.ucf-old:40:PhishingScanURLs true
clamd.conf.ucf-old:41:PhishingRestrictedScan true
clamd.conf.ucf-old:42:PhishingAlwaysBlockSSLMismatch false
clamd.conf.ucf-old:43:PhishingAlwaysBlockCloak false

If you like, I will send you a copy of the new default clamd.conf file
privately (off-list), just let me know.

Checking for "PhishingRestrictedScan" in the example file yeilds no results
either.
    /usr/share/doc/clamav-base/examples/clamd.conf

Okay, found some extra information for you, see here:
http://www.nabble.com/PhishingRestrictedScan-is-gone--td18332907.html

There is a solution by Edwin to effectively get the same behaviour as you
had before as well.

Kind Regards
AndrewM

Andrew McGlashan
Broadband Solutions now including VoIP

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml