I have two email servers, both recently started scanning email with clamscan instead of clamd. This obviously puts an unreasonable load on the servers. They worked fine for a long time, but package updates in the last few months seem to have caused a problem. (I have disabled virus scanning until the problem can be fixed. Server loads were spiking way too high)
If I build a test server from scratch, everything seems to work fine. So how do I fix the production servers, so they start correctly using clamd again? The amavisd debug startup seems to show it sees clamd, but why won't it use it anymore? As far as I can tell, everything is configured properly! I first saw errors from ClamAV's Freshclam updater. Restarting clamd got me a bunch of config errors. I had to remove and clear out ClamAV before it'd work again. Clam's package was updated several times in February and March, and Amavis was updated in early February. Server specs: * CentOS 4.4 * Postfix 2.2.11 (from source) * Dovecot 0.99.11-4.EL4 (RPM) * ClamAV 0.90.1-4.el4 (RPMforge) * Amavisd-new 2.4.5-1.el4 (RPMforge) clamd.conf: LocalSocket /var/run/clamav/clamd # TCPSocket 3310 amavisd.conf: @bypass_spam_checks_maps = (1); $mydomain = 'microlnk.net'; ### http://www.clamav.net/ ['ClamAV-clamd', \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd"], qr/\bOK$/, qr/\bFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ], Amavis debug: Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: starting. /usr/sbin/amavisd at arquebus.microlnk.prv amavisd-new-2.4.5 (20070130), Unicode aware, LANG="en_US.UTF-8" Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: user=, EUID: 0 (0); group=, EGID: 0 10 6 4 3 2 1 0 (0 10 6 4 3 2 1 0) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Perl version 5.008005 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: 2007/03/21-09:06:14 Amavis (type Net::Server::PreForkSimple) starting! pid(31496) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Binding to UNIX socket file /var/amavis/amavisd.sock using SOCK_STREAM Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Setting gid to "104 104" Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Setting uid to "101" Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Setting up serialization via flock Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Amavis::Conf 2.078 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Archive::Tar 1.30 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Archive::Zip 1.16 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module BerkeleyDB 0.31 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Compress::Zlib 1.42 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Convert::TNEF 0.17 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Convert::UUlib 1.051 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Digest::MD5 2.33 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module MIME::Entity 5.420 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module MIME::Parser 5.420 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module MIME::Tools 5.420 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Mail::Header 1.74 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Mail::Internet 1.74 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Net::Cmd 2.26 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Net::SMTP 2.29 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Net::Server 0.95 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Time::HiRes 1.55 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Module Unix::Syslog 0.100 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Amavis::DB code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Amavis::Cache code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: SQL base code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: SQL::Log code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: SQL::Quarantine NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Lookup::SQL code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Lookup::LDAP code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: AM.PDP-in proto code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: SMTP-in proto code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Courier proto code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: SMTP-out proto code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Pipe-out proto code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: BSMTP-out proto code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Local-out proto code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: OS_Fingerprint code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: ANTI-VIRUS code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: ANTI-SPAM code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: ANTI-SPAM-SA code NOT loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Unpackers code loaded Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found $file at /usr/bin/file Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No $dspam, not using it Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .mail Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .asc Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .uue Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .hqx Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .ync Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .F at /usr/bin/unfreeze Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .Z at /usr/bin/uncompress Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .gz at /usr/bin/gzip -d Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .gz (backup, not used) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .bz2 at /usr/bin/bzip2 -d Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .lzo at /usr/bin/lzop -d Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .rpm at /usr/bin/rpm2cpio Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .cpio at /usr/bin/pax Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .tar at /usr/bin/pax Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .tar (backup, not used) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .deb at /usr/bin/ar Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .zip Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .rar at /usr/bin/unrar Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .arj at /usr/bin/unarj Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .arc at /usr/bin/nomarch Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .zoo at /usr/bin/zoo Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .lha at /usr/bin/lha Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .cab at /usr/bin/cabextract Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No decoder for .tnef tried: tnef Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Internal decoder for .tnef Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found decoder for .exe at /usr/bin/unrar; /usr/bin/lha; /usr/bin/unarj Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Using primary internal av scanner code for ClamAV-clamd Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: KasperskyLab AVP - aveclient Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: KasperskyLab AntiViral Toolkit Pro (AVP) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: KasperskyLab AVPDaemonClient Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: CentralCommand Vexira (new) vascan Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: Avira AntiVir Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: Command AntiVirus for Linux Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: Symantec CarrierScan via Symantec CommandLineScanner Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: Symantec AntiVirus Scan Engine Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: F-Secure Antivirus for Linux servers Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: CAI InoculateIT Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: CAI eTrust Antivirus Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: MkS_Vir for Linux (beta) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: MkS_Vir daemon Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: ESET NOD32 for Linux Mail servers Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: ESET NOD32 for Linux File servers Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: Norman Virus Control v5 / Linux Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: Panda CommandLineSecure 9 for Linux Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: NAI McAfee AntiVirus (uvscan) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: VirusBuster Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: CyberSoft VFind Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: avast! Antivirus Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: Ikarus AntiVirus for Linux Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No primary av scanner: BitDefender Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No secondary av scanner: FRISK F-Prot Antivirus Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No secondary av scanner: Trend Micro FileScanner Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No secondary av scanner: drweb - DrWeb Antivirus Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: No secondary av scanner: Kaspersky Antivirus v5.5 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Creating db in /var/amavis/db/; BerkeleyDB 0.31, libdb 4.2 Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Beginning prefork (2 processes) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Starting "2" children Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31500]: Net::Server: Child Preforked (31500) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31501]: Net::Server: Child Preforked (31501) Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31500]: TIMING [total 14 ms] - bdb-open: 13 (100%)100, rundown: 0 (0%)100Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31496]: Net::Server: Parent ready for children. Mar 21 09:06:14 arquebus.microlnk.prv /usr/sbin/amavisd[31501]: TIMING [total 14 ms] - bdb-open: 14 (100%)100, rundown: 0 (0%)100 Postfix main.cf: content_filter=smtp-amavis:[127.0.0.1]:10024 Postfix master.cf: smtp-amavis unix - - n - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - n - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_delay_reject=no -o smtpd_client_restrictions=permit_mynetworks,reject -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_data_restrictions=reject_unauth_pipelining -o smtpd_end_of_data_restrictions= -o mynetworks=127.0.0.0/8 -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o smtpd_client_connection_count_limit=0 -o smtpd_client_connection_rate_limit=0 -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks -- Jason Byrns Production Manager System Administrator http://www.MicroLnk.com/ 402-328-8600 ext. 653 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
