Dennis Peterson írta:

Thanks for the answer!
> Berényi Attila wrote:
>   
>> Hi there,
>>
>> I have this annoying problem, and I don't know what to do. I've tried to 
>> set up a mailfiltering system with postfix, amavis, spamassassin and 
>> clamav, and the first three is working great, but if I enable the virus 
>> scanning in amavis, postfix throws the mail away beacuse it couldn't 
>> connect to clamav's local soket.
>>
>>     
>
> Print the output of the clamconf command. Hide any passwords (proxy...)
>   
mordor:/etc/amavis# clamconf
/etc/clamav/clamd.conf: clamd directives
-----------------
LogFile = "/var/log/clamav/clamd.log"
LogFileUnlock = no
LogFileMaxSize = 1048576
LogTime = yes
LogClean = no
LogVerbose = yes
LogSyslog = no
LogFacility = "LOG_LOCAL6"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory not set
ScanPE = yes
ScanELF = yes
DetectBrokenExecutables = no
ScanMail = yes
MailFollowURLs = no
MailMaxRecursion = 64
PhishingSignatures = yes
AlgorithmicDetection = yes
ScanHTML = yes
ScanOLE2 = yes
ScanPDF = no
ScanArchive = yes
ArchiveMaxFileSize = 10485760
ArchiveMaxRecursion = 8
ArchiveMaxFiles = 1000
ArchiveMaxCompressionRatio = 250
ArchiveLimitMemoryUsage = no
ArchiveBlockEncrypted = no
ArchiveBlockMax = no
DatabaseDirectory = "/var/lib/clamav"
TCPAddr not set
TCPSocket not set
LocalSocket = "/var/run/clamav/clamd.ctl"
MaxConnectionQueueLength = 15
StreamMaxLength = 10485760
StreamMinPort = 1024
StreamMaxPort = 2048
MaxThreads = 10
ReadTimeout = 120
IdleTimeout = 30
MaxDirectoryRecursion = 15
FollowDirectorySymlinks = no
FollowFileSymlinks = no
ExitOnOOM = no
Foreground = no
Debug = yes
LeaveTemporaryFiles = no
FixStaleSocket = yes
User not set
AllowSupplementaryGroups = no
SelfCheck = 1800
VirusEvent not set
NodalCoreAcceleration = no
ClamukoScanOnAccess not set
ClamukoScanOnOpen not set
ClamukoScanOnClose not set
ClamukoScanOnExec not set
ClamukoIncludePath not set
ClamukoExcludePath not set
ClamukoMaxFileSize = 5242880

/etc/clamav/freshclam.conf: clamd and freshclam directives
-----------------

[common]
LogVerbose = no
LogSyslog = no
LogFacility = "LOG_LOCAL6"
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav/"
Foreground = no
Debug = no
AllowSupplementaryGroups = no

[clamd]
LogFile not set
LogFileUnlock = no
LogFileMaxSize = 0
LogTime = no
LogClean = no
TemporaryDirectory not set
ScanPE = yes
ScanELF = yes
DetectBrokenExecutables = no
ScanMail = yes
MailFollowURLs = no
MailMaxRecursion = 64
PhishingSignatures = yes
AlgorithmicDetection = yes
ScanHTML = yes
ScanOLE2 = yes
ScanPDF = no
ScanArchive = yes
ArchiveMaxFileSize = 10485760
ArchiveMaxRecursion = 8
ArchiveMaxFiles = 1000
ArchiveMaxCompressionRatio = 250
ArchiveLimitMemoryUsage = no
ArchiveBlockEncrypted = no
ArchiveBlockMax = no
TCPAddr not set
TCPSocket not set
LocalSocket not set
MaxConnectionQueueLength = 15
StreamMaxLength = 10485760
StreamMinPort = 1024
StreamMaxPort = 2048
MaxThreads = 10
ReadTimeout = 120
IdleTimeout = 30
MaxDirectoryRecursion = 15
FollowDirectorySymlinks = no
FollowFileSymlinks = no
ExitOnOOM = no
LeaveTemporaryFiles = no
FixStaleSocket = no
User not set
SelfCheck = 1800
VirusEvent not set
NodalCoreAcceleration = no
ClamukoScanOnAccess not set
ClamukoScanOnOpen not set
ClamukoScanOnClose not set
ClamukoScanOnExec not set
ClamukoIncludePath not set
ClamukoExcludePath not set
ClamukoMaxFileSize = 5242880

[freshclam]
DatabaseOwner = "clamav"
Checks = 24
UpdateLogFile = "/var/log/clamav/freshclam.log"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.local.clamav.net"
MaxAttempts = 5
ScriptedUpdates = yes
HTTPProxyServer not set
HTTPProxyPort not set
HTTPProxyUsername not set
HTTPProxyPassword not set
HTTPUserAgent not set
NotifyClamd not set
OnUpdateExecute not set
OnErrorExecute not set
OnOutdatedExecute not set
LocalIPAddress not set
ConnectTimeout = 30
ReceiveTimeout = 30

> There is no clamd.ctl socket in /var/run/clamav and that suggests a 
> problem with the clamd.conf file.
>
> Your clamd process is running as user root. Probably not what you want.
>   
You're right, but I thought I'll change the uid after this problem is 
solved.
> Also, when looking at the process table you can eliminate the "grep" 
> command from the output this way:
>
> Instead of:
> # ps aux |grep clamd
>
> use:
> # ps aux |grep [c]lamd
>
> The square brackets are your friend.
>
> dp
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://lurker.clamav.net/list/clamav-users.html
>
>   

Thanks again,

Attila
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to