This is a discussion on [AMaViS-user] amavis cannot contact clamd socket after upgradingclamav within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; I upgraded my OpenBSD system from 4.2 stable to 4.3 290408-snapshot and all was well. I'm ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I upgraded my OpenBSD system from 4.2 stable to 4.3 290408-snapshot
and all was well. I'm using Clamav as my sole virus checker. After upgrading Clamav from 0.92.1 to 0.93 by source I'm having problems. The amavisd-new daemon can no longer talk to clamav through the clamd socket: amavis[20611]: (20611-01) (!)run_av (ClamAV-clamd, built-in i/f): Too many retries to talk to /var/clamav/clamd_sock (timed out) at (eval 99) line 310. amavis[20611]: (20611-01) (!!)ClamAV-clamd av-scanner FAILED: CODE(0x87b45a44) Too many retries to talk to /var/clamav/clamd_sock (timed out) at (eval 99) line 310. at (eval 99) line 511. amavis[20611]: (20611-01) (!!)WARN: all primary virus scanners failed, considering backups amavis[20611]: (20611-01) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: CODE(0x87b45a44) Too many retries to talk to /var/clamav/clamd_sock (timed out) at (eval 99) line 310. at (eval 99) line 511. amavis[20611]: (20611-01) (!)PRESERVING EVIDENCE in /var/amavisd/tmp/amavis-20080601T002552-20611 $ su - amavisd -c 'ls /var/clamav/clamd_sock' srwxrwxrwx 1 amavisd amavisd 0B Jun 1 00:16 /var/clamav/clamd_sock I start clamd like this: su - amavisd -c /usr/local/clamav/sbin/clamd Any ideas on how I can troubleshoot this? /juan ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/...fo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ |
|
|||
|
Juan,
> I upgraded my OpenBSD system from 4.2 stable to 4.3 290408-snapshot > and all was well. I'm using Clamav as my sole virus checker. After > upgrading Clamav from 0.92.1 to 0.93 by source I'm having problems. > The amavisd-new daemon can no longer talk to clamav through the clamd > socket: > > amavis[20611]: (20611-01) (!)run_av (ClamAV-clamd, built-in i/f): Too > many retries to talk to /var/clamav/clamd_sock (timed out) > at (eval 99) line 310. clamd is alive, socket exists and is connectable, but clamd did not respond in reasonable time. > $ su - amavisd -c 'ls /var/clamav/clamd_sock' > srwxrwxrwx 1 amavisd amavisd 0B Jun 1 00:16 /var/clamav/clamd_sock > > I start clamd like this: > su - amavisd -c /usr/local/clamav/sbin/clamd Try using clamdscan or a plain socat (http://www.dest-unreach.org/socat/) running as user 'amavisd' to simulate a client, and see what happens. Turning up more verbose logging in clamd may provide more information. # su amavisd $ clamdscan 0.lis /usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND ----------- SCAN SUMMARY ----------- Infected files: 1 Time: 1.051 sec (0 m 1 s) patsy src# clamdscan -v 0.lis /usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND ----------- SCAN SUMMARY ----------- Infected files: 1 Time: 1.467 sec (0 m 1 s) or connect to a socket manually: $ socat -v readline unix-connect:/var/run/clamav/clamd SCAN /usr/local/src/0.lis > 2008/06/04 17:24:23.383344 length=26 from=0 to=25 SCAN /usr/local/src/0.lis < 2008/06/04 17:24:24.803284 length=69 from=0 to=68 /usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND /usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND Mark ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/...fo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ |
|
|||
|
2008/6/4 Charles Seeger <seeger@cise.ufl.edu>:
> +------ "Juan Miscaro" wrote (Sun, 1-Jun-2008, 09:05 -0400): > | > | I upgraded my OpenBSD system from 4.2 stable to 4.3 290408-snapshot > | and all was well. I'm using Clamav as my sole virus checker. After > | upgrading Clamav from 0.92.1 to 0.93 by source I'm having problems. > | The amavisd-new daemon can no longer talk to clamav through the clamd > | socket: > | > | amavis[20611]: (20611-01) (!)run_av (ClamAV-clamd, built-in i/f): Too > | many retries to talk to /var/clamav/clamd_sock (timed out) at (eval > | 99) line 310. > | amavis[20611]: (20611-01) (!!)ClamAV-clamd av-scanner FAILED: > | CODE(0x87b45a44) Too many retries to talk to /var/clamav/clamd_sock > | (timed out) at (eval 99) line 310. at (eval 99) line 511. > | amavis[20611]: (20611-01) (!!)WARN: all primary virus scanners failed, > | considering backups > | amavis[20611]: (20611-01) (!!)TROUBLE in check_mail: virus_scan > | FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner > | FAILED: CODE(0x87b45a44) Too many retries to talk to > | /var/clamav/clamd_sock (timed out) at (eval 99) line 310. at (eval 99) > | line 511. > | amavis[20611]: (20611-01) (!)PRESERVING EVIDENCE in > | /var/amavisd/tmp/amavis-20080601T002552-20611 > | > | $ su - amavisd -c 'ls /var/clamav/clamd_sock' > | srwxrwxrwx 1 amavisd amavisd 0B Jun 1 00:16 /var/clamav/clamd_sock > | > | I start clamd like this: > | > | su - amavisd -c /usr/local/clamav/sbin/clamd > | > | Any ideas on how I can troubleshoot this? > > Try this clamav patch: > > https://wwws.clamav.net/bugzilla/attachment.cgi?id=634 > > The corresponding bugid is: > > https://wwws.clamav.net/bugzilla/show_bug.cgi?id=885 That's nasty. Thanks for your reply. /juan ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/...fo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ |