Package: clamav-daemon Version: 0.100.2+dfsg-1 Severity: normal Tags: patch
I just got bitten by a very annoying bug on my mail server. postfix gave me "milter-reject: END-OF-MESSAGE" which was caused by clamav-milter because clamav-daemon cut the connection with clamav-milter after 5 seconds while it was still sending the message to analyze. The clamav-milter log was not very helpful to find this out: Fri Nov 30 12:11:50 2018 -> ERROR: clamfi_eom: FD send failed: Broken pipe Fri Nov 30 12:11:50 2018 -> ERROR: FD send failed FWIW, I found the solution in this message: https://i-mscp.net/thread/9756-clamav-plugin-error-with-clamav-milter/?postID=38368#post38368 So here's the patch that you should IMO apply: --- clamav-0.100.2+dfsg/debian/clamav-daemon.postinst.in 2018-10-09 21:46:08.000000000 +0200 +++ clamav-0.100.2+dfsg/debian/clamav-daemon.postinst.in 2018-11-30 14:11:12.000000000 +0100 @@ -183,7 +183,7 @@ [ -z "$ExtendedDetectionInfo" ] && ExtendedDetectionInfo=true [ -z "$DatabaseDirectory" ] && DatabaseDirectory='/var/lib/clamav' [ -z "$OfficialDatabaseOnly" ] && OfficialDatabaseOnly=false - [ -z "$CommandReadTimeout" ] && CommandReadTimeout=5 + [ -z "$CommandReadTimeout" ] && CommandReadTimeout=30 [ -z "$SendBufTimeout" ] && SendBufTimeout=200 [ -z "$MaxQueue" ] && MaxQueue=100 [ -z "$IdleTimeout" ] && IdleTimeout=30 I have lost multiple mails with big attachments due to this bad default configuration value. Cheers, -- System Information: Debian Release: buster/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'oldoldstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages clamav-daemon depends on: ii adduser 3.118 pn clamav-base <none> pn clamav-freshclam | clamav-data <none> ii debconf [debconf-2.0] 1.5.69 ii dpkg 1.19.2 ii init-system-helpers 1.56 ii libc6 2.28-1 pn libclamav7 <none> ii libncurses5 6.1+20181013-1 ii libncurses6 6.1+20181013-1 ii libssl1.0.0 1.0.1t-1+deb8u8 ii libssl1.1 1.1.1a-1 ii libsystemd0 239-13 ii libtinfo5 6.1+20181013-1 ii libtinfo6 6.1+20181013-1 ii lsb-base 10.2018112800 ii procps 2:3.3.15-2 ii ucf 3.0038 ii zlib1g 1:1.2.11.dfsg-1 Versions of packages clamav-daemon recommends: pn clamdscan <none> Versions of packages clamav-daemon suggests: ii apparmor 2.13.1-3+b1 pn clamav-docs <none> pn daemon <none>