Menu
▾
▴
[Efw-user] Problem with ClamAV and SMTP
|
From: Werner S. <w.s...@ne...> - 2008-05-02 21:23:35
|
Hi, it looks like that the virus signature update dated 01.May is killing the clamav process, if I enable the virus scanner no smtp mail comes in: SMTP Log: May 3 01:32:37 amavis[3807]: (03807-01) (!)Clam Antivirus-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2) May 3 01:32:43 amavis[3807]: (03807-01) (!)run_av (Clam Antivirus-clamd, built-in i/f): Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293. May 3 01:32:43 amavis[3807]: (03807-01) (!!)Clam Antivirus-clamd av-scanner FAILED: CODE(0x9dabe00) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293. at (eval 40) line 491. May 3 01:32:43 amavis[3807]: (03807-01) (!!)WARN: all primary virus scanners failed, considering backups May 3 01:34:37 postfix/smtpd[3953]: connect from dslb-084-063-018-112.pools.arcor-ip.net[84.63.18.112] May 3 01:34:38 postfix/smtpd[3953]: NOQUEUE: reject: RCPT from dslb-084-063-018-112.pools.arcor-ip.net[84.63.18.112]: 554 Service unavailable; Client host [84.63.18.112] blocked using dul.dnsbl.sorbs.net; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?84.63.18.112; from= to= proto=ESMTP helo= May 3 01:34:39 postfix/smtpd[3953]: disconnect from dslb-084-063-018-112.pools.arcor-ip.net[84.63.18.112] May 3 01:37:59 postfix/anvil[3954]: statistics: max connection rate 1/60s for (smtp:84.63.18.112) at May 3 01:34:37 May 3 01:37:59 postfix/anvil[3954]: statistics: max connection count 1 for (smtp:84.63.18.112) at May 3 01:34:37 May 3 01:37:59 postfix/anvil[3954]: statistics: max cache size 1 at May 3 01:34:37 May 3 01:39:18 amavis[3807]: (03807-01) (!)killing process [3929] running Clam Antivirus - clamscan (reason: on reading: timed out) May 3 01:39:19 amavis[3807]: (03807-01) (!)run_av (Clam Antivirus - clamscan): collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671. May 3 01:39:19 amavis[3807]: (03807-01) (!!)Clam Antivirus - clamscan av-scanner FAILED: /usr/bin/clamscan collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671. at (eval 40) line 491. May 3 01:39:19 amavis[3807]: (03807-01) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: Clam Antivirus-clamd av-scanner FAILED: CODE(0x9dabe00) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293. at (eval 40) line 491.; Clam Antivirus - clamscan av-scanner FAILED: /usr/bin/clamscan collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671. at (eval 40) line 491. May 3 01:39:19 amavis[3807]: (03807-01) (!)PRESERVING EVIDENCE in /var/amavis/amavis-20080503T013235-03807 May 3 01:39:20 postfix/smtp[3891]: EF5FC62E: to=, relay=127.0.0.1[127.0.0.1], delay=8457, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=03807-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: Clam Antivirus-clamd av-scanner FAILED: CODE(0x9dabe00) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293. at (eval 40) line 491.; Clam Antivirus - clamscan av-scanner FAILED: /usr/bin/clamscan collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671. at (eval 40) line 491. (in reply to end of DATA command)) I have to disable virus scanning to make the SMTP Proxy working. -- Werner Seifert NetComp Netzwerk- und Computerservice Hilling 16 4702 Wallern Austria +43 699 100 66 570 Novell CNS, CNA, MCNE, MCNI, CDE MS MCPi UID: ATU61405759 |