On Tue, 10 Jul 2018, Robert Kudyba wrote:

>Hello hive,
>
>Running:
>clamav-0.100.0-2.fc28.x86_64
>
>clamd, freshclam and clamav-milter all up and running:
>ps -auwx | grep clam
>clamupd+ 20336  0.0  0.0  50672  4016 ?        Ss   Jun29   1:15
>/usr/bin/freshclam -d -c 4
>clamav   23713  0.0  0.0 176780  1160 ?        Ssl  13:23   0:00
>/usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf
>clamscan 25458  0.0  4.6 1405848 1142996 ?     Ssl  13:27   0:00
>/usr/sbin/clamd -c /etc/clamd.d/scan.conf
>root     25593  0.0  0.0   9156  1084 pts/1    S+   17:02   0:00 grep
>--color=auto clam
>
>However it fails with sendmail with these errors:
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273:
>milter_sys_read(clamav): cmd read returned 11, expecting 1431194445
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter (clamav): to
>error state
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter (clamav):
>init failed to open
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter (clamav): to
>error state
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter:
>initialization failed, temp failing commands
>
>Here's the relevant line in sendmail.mc:
>INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamd.scan/clamd.sock,
>F=T,T=S:4m;R:4m;E:10m')dnl


Your INPUT_MAIL_FILTER should be clamav-milter listening on socket
/var/run/clamav-milter/clamav-milter.socket (as defined below)
and not the clamd daemom which is listening on socket
/var/run/clamd.scan/clamd.sock


>
>Lines in /etc/mail/clamav-milter.conf
>MilterSocket /var/run/clamav-milter/clamav-milter.socket
>MilterSocket inet:7357
>ClamdSocket tcp:localhost:3310
>ClamdSocket unix:/var/run/clamd.scan/clamd.sock
>
>Lines in /etc/clamd.d/scan.conf
>
>TCPSocket 3310
>TCPAddr 127.0.0.1
>
>Everything I've read says that as long as ClamdSocket in the
>clamav-milter.conf and INPUT_MAIL_FILTER in sendmail.mc match it should
>work.
>
>Is my syntax wrong some where?
>



Regards,

Kees Theunissen.

-- 
Kees Theunissen,  System and network manager,   Tel: +31 (0)40-3334724
Dutch Institute For Fundamental Energy Research (DIFFER)
email address:    c.j.theunis...@differ.nl
postal address:   PO Box 6336, 5600 HH, Eindhoven, the Netherlands
visitors address: De Zaale 20, 5612 AJ, Eindhoven, the Netherlands

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to