Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
On 11/01/2013 02:45 AM, Dennis Peterson wrote: On 10/31/13, 5:08 PM, Paolo De Michele wrote: hi everybody, I installed a web/mail server correctly with the suite ispconfig. between the packages I installed amavis and clamav However, the email will be populated with the object UNCECKED and the system logs I see this: Run the clamconf file and send the output to the list. Scan it yourself as you may find the problem on your own. dp ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml dennis, thank you for your reply this is my clamd.conf #Automatically Generated by clamav-base postinst #To reconfigure clamd run #dpkg-reconfigure clamav-base #Please read /usr/share/doc/clamav-base/README.Debian.gz for details LocalSocket /var/run/clamav/clamd.ctl FixStaleSocket true LocalSocketGroup clamav LocalSocketMode 666 # TemporaryDirectory is not set to its default /tmp here to make overriding # the default with environment variables TMPDIR/TMP/TEMP possible User clamav AllowSupplementaryGroups true ScanMail true ScanArchive true ArchiveBlockEncrypted false MaxDirectoryRecursion 15 FollowDirectorySymlinks false FollowFileSymlinks false ReadTimeout 180 MaxThreads 12 MaxConnectionQueueLength 15 LogSyslog false LogFacility LOG_LOCAL6 LogClean false LogVerbose false PidFile /var/run/clamav/clamd.pid DatabaseDirectory /var/lib/clamav SelfCheck 3600 Foreground false Debug false ScanPE true ScanOLE2 true ScanHTML true DetectBrokenExecutables false ExitOnOOM false LeaveTemporaryFiles false AlgorithmicDetection true ScanELF true IdleTimeout 30 PhishingSignatures true PhishingScanURLs true PhishingAlwaysBlockSSLMismatch false PhishingAlwaysBlockCloak false DetectPUA false ScanPartialMessages false HeuristicScanPrecedence false StructuredDataDetection false CommandReadTimeout 5 SendBufTimeout 200 MaxQueue 100 ExtendedDetectionInfo true OLE2BlockMacros false StreamMaxLength 25M LogFile /var/log/clamav/clamav.log LogTime true LogFileUnlock false LogFileMaxSize 0 Bytecode true BytecodeSecurity TrustSigned BytecodeTimeout 6 OfficialDatabaseOnly false CrossFilesystems true ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
On 11/01/2013 10:11 AM, Paolo De Michele wrote: On 11/01/2013 02:45 AM, Dennis Peterson wrote: On 10/31/13, 5:08 PM, Paolo De Michele wrote: hi everybody, I installed a web/mail server correctly with the suite ispconfig. between the packages I installed amavis and clamav However, the email will be populated with the object UNCECKED and the system logs I see this: Run the clamconf file and send the output to the list. Scan it yourself as you may find the problem on your own. dp ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml dennis, thank you for your reply this is my clamd.conf #Automatically Generated by clamav-base postinst #To reconfigure clamd run #dpkg-reconfigure clamav-base #Please read /usr/share/doc/clamav-base/README.Debian.gz for details LocalSocket /var/run/clamav/clamd.ctl FixStaleSocket true LocalSocketGroup clamav LocalSocketMode 666 # TemporaryDirectory is not set to its default /tmp here to make overriding # the default with environment variables TMPDIR/TMP/TEMP possible User clamav AllowSupplementaryGroups true ScanMail true ScanArchive true ArchiveBlockEncrypted false MaxDirectoryRecursion 15 FollowDirectorySymlinks false FollowFileSymlinks false ReadTimeout 180 MaxThreads 12 MaxConnectionQueueLength 15 LogSyslog false LogFacility LOG_LOCAL6 LogClean false LogVerbose false PidFile /var/run/clamav/clamd.pid DatabaseDirectory /var/lib/clamav SelfCheck 3600 Foreground false Debug false ScanPE true ScanOLE2 true ScanHTML true DetectBrokenExecutables false ExitOnOOM false LeaveTemporaryFiles false AlgorithmicDetection true ScanELF true IdleTimeout 30 PhishingSignatures true PhishingScanURLs true PhishingAlwaysBlockSSLMismatch false PhishingAlwaysBlockCloak false DetectPUA false ScanPartialMessages false HeuristicScanPrecedence false StructuredDataDetection false CommandReadTimeout 5 SendBufTimeout 200 MaxQueue 100 ExtendedDetectionInfo true OLE2BlockMacros false StreamMaxLength 25M LogFile /var/log/clamav/clamav.log LogTime true LogFileUnlock false LogFileMaxSize 0 Bytecode true BytecodeSecurity TrustSigned BytecodeTimeout 6 OfficialDatabaseOnly false CrossFilesystems true in the /var/log/clamav/clamav.log I see: Thu Oct 31 02:05:03 2013 - +++ Started at Thu Oct 31 02:05:03 2013 Thu Oct 31 02:05:03 2013 - clamd daemon 0.97.8 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Thu Oct 31 02:05:03 2013 - Log file size limited to -1 bytes. Thu Oct 31 02:05:03 2013 - Reading databases from /var/lib/clamav Thu Oct 31 02:05:03 2013 - Not loading PUA signatures. Thu Oct 31 02:05:03 2013 - Bytecode: Security mode set to TrustSigned. Thu Oct 31 02:05:11 2013 - Loaded 2865687 signatures. Thu Oct 31 02:05:12 2013 - LOCAL: Unix socket file /var/run/clamav/clamd.ctl Thu Oct 31 02:05:12 2013 - LOCAL: Setting connection queue length to 15 Thu Oct 31 02:05:12 2013 - ERROR: daemonize() failed: Cannot allocate memory Thu Oct 31 02:05:12 2013 - Socket file removed. # free -m total used free shared buffers cached Mem: 497425 71 0 8 75 -/+ buffers/cache:341155 Swap:0 0 0 this is DigitalOcean's VPS - there are problems? ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
Paolo De Michele skrev den 2013-11-01 01:08: how can I fix it? freshclam -D show us the error in case its stock, delete the mirrors.dat file in databasedir maybe even delete all content of that dir except main.* and daily.* ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
On Fri, Nov 1, 2013 at 5:51 AM, Paolo De Michele pa...@paolodemichele.itwrote: On 11/01/2013 10:11 AM, Paolo De Michele wrote: On 11/01/2013 02:45 AM, Dennis Peterson wrote: On 10/31/13, 5:08 PM, Paolo De Michele wrote: hi everybody, I installed a web/mail server correctly with the suite ispconfig. between the packages I installed amavis and clamav However, the email will be populated with the object UNCECKED and the system logs I see this: Run the clamconf file and send the output to the list. Scan it yourself as you may find the problem on your own. dp __**_ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/**clamav-faqhttps://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/**ml http://www.clamav.net/support/ml dennis, thank you for your reply this is my clamd.conf #Automatically Generated by clamav-base postinst #To reconfigure clamd run #dpkg-reconfigure clamav-base #Please read /usr/share/doc/clamav-base/**README.Debian.gz for details LocalSocket /var/run/clamav/clamd.ctl FixStaleSocket true LocalSocketGroup clamav LocalSocketMode 666 # TemporaryDirectory is not set to its default /tmp here to make overriding # the default with environment variables TMPDIR/TMP/TEMP possible User clamav AllowSupplementaryGroups true ScanMail true ScanArchive true ArchiveBlockEncrypted false MaxDirectoryRecursion 15 FollowDirectorySymlinks false FollowFileSymlinks false ReadTimeout 180 MaxThreads 12 MaxConnectionQueueLength 15 LogSyslog false LogFacility LOG_LOCAL6 LogClean false LogVerbose false PidFile /var/run/clamav/clamd.pid DatabaseDirectory /var/lib/clamav SelfCheck 3600 Foreground false Debug false ScanPE true ScanOLE2 true ScanHTML true DetectBrokenExecutables false ExitOnOOM false LeaveTemporaryFiles false AlgorithmicDetection true ScanELF true IdleTimeout 30 PhishingSignatures true PhishingScanURLs true PhishingAlwaysBlockSSLMismatch false PhishingAlwaysBlockCloak false DetectPUA false ScanPartialMessages false HeuristicScanPrecedence false StructuredDataDetection false CommandReadTimeout 5 SendBufTimeout 200 MaxQueue 100 ExtendedDetectionInfo true OLE2BlockMacros false StreamMaxLength 25M LogFile /var/log/clamav/clamav.log LogTime true LogFileUnlock false LogFileMaxSize 0 Bytecode true BytecodeSecurity TrustSigned BytecodeTimeout 6 OfficialDatabaseOnly false CrossFilesystems true in the /var/log/clamav/clamav.log I see: Thu Oct 31 02:05:03 2013 - +++ Started at Thu Oct 31 02:05:03 2013 Thu Oct 31 02:05:03 2013 - clamd daemon 0.97.8 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Thu Oct 31 02:05:03 2013 - Log file size limited to -1 bytes. Thu Oct 31 02:05:03 2013 - Reading databases from /var/lib/clamav Thu Oct 31 02:05:03 2013 - Not loading PUA signatures. Thu Oct 31 02:05:03 2013 - Bytecode: Security mode set to TrustSigned. Thu Oct 31 02:05:11 2013 - Loaded 2865687 signatures. Thu Oct 31 02:05:12 2013 - LOCAL: Unix socket file /var/run/clamav/clamd.ctl Thu Oct 31 02:05:12 2013 - LOCAL: Setting connection queue length to 15 Thu Oct 31 02:05:12 2013 - ERROR: daemonize() failed: Cannot allocate memory Thu Oct 31 02:05:12 2013 - Socket file removed. # free -m total used free shared buffers cached Mem: 497425 71 0 8 75 -/+ buffers/cache:341155 Swap:0 0 0 It looks like you need more memory. Here's the relevant line from your log file: Thu Oct 31 02:05:12 2013 - ERROR: daemonize() failed: Cannot allocate memory And indeed your `free -m` output shows that you're out of memory and you don't have any swap installed. Adding more memory would fix your problem. Thanks, Shawn ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
On 11/01/2013 02:26 PM, Shawn Webb wrote: On Fri, Nov 1, 2013 at 5:51 AM, Paolo De Michele pa...@paolodemichele.itwrote: On 11/01/2013 10:11 AM, Paolo De Michele wrote: On 11/01/2013 02:45 AM, Dennis Peterson wrote: On 10/31/13, 5:08 PM, Paolo De Michele wrote: hi everybody, I installed a web/mail server correctly with the suite ispconfig. between the packages I installed amavis and clamav However, the email will be populated with the object UNCECKED and the system logs I see this: Run the clamconf file and send the output to the list. Scan it yourself as you may find the problem on your own. dp __**_ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/**clamav-faqhttps://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/**ml http://www.clamav.net/support/ml dennis, thank you for your reply this is my clamd.conf #Automatically Generated by clamav-base postinst #To reconfigure clamd run #dpkg-reconfigure clamav-base #Please read /usr/share/doc/clamav-base/**README.Debian.gz for details LocalSocket /var/run/clamav/clamd.ctl FixStaleSocket true LocalSocketGroup clamav LocalSocketMode 666 # TemporaryDirectory is not set to its default /tmp here to make overriding # the default with environment variables TMPDIR/TMP/TEMP possible User clamav AllowSupplementaryGroups true ScanMail true ScanArchive true ArchiveBlockEncrypted false MaxDirectoryRecursion 15 FollowDirectorySymlinks false FollowFileSymlinks false ReadTimeout 180 MaxThreads 12 MaxConnectionQueueLength 15 LogSyslog false LogFacility LOG_LOCAL6 LogClean false LogVerbose false PidFile /var/run/clamav/clamd.pid DatabaseDirectory /var/lib/clamav SelfCheck 3600 Foreground false Debug false ScanPE true ScanOLE2 true ScanHTML true DetectBrokenExecutables false ExitOnOOM false LeaveTemporaryFiles false AlgorithmicDetection true ScanELF true IdleTimeout 30 PhishingSignatures true PhishingScanURLs true PhishingAlwaysBlockSSLMismatch false PhishingAlwaysBlockCloak false DetectPUA false ScanPartialMessages false HeuristicScanPrecedence false StructuredDataDetection false CommandReadTimeout 5 SendBufTimeout 200 MaxQueue 100 ExtendedDetectionInfo true OLE2BlockMacros false StreamMaxLength 25M LogFile /var/log/clamav/clamav.log LogTime true LogFileUnlock false LogFileMaxSize 0 Bytecode true BytecodeSecurity TrustSigned BytecodeTimeout 6 OfficialDatabaseOnly false CrossFilesystems true in the /var/log/clamav/clamav.log I see: Thu Oct 31 02:05:03 2013 - +++ Started at Thu Oct 31 02:05:03 2013 Thu Oct 31 02:05:03 2013 - clamd daemon 0.97.8 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Thu Oct 31 02:05:03 2013 - Log file size limited to -1 bytes. Thu Oct 31 02:05:03 2013 - Reading databases from /var/lib/clamav Thu Oct 31 02:05:03 2013 - Not loading PUA signatures. Thu Oct 31 02:05:03 2013 - Bytecode: Security mode set to TrustSigned. Thu Oct 31 02:05:11 2013 - Loaded 2865687 signatures. Thu Oct 31 02:05:12 2013 - LOCAL: Unix socket file /var/run/clamav/clamd.ctl Thu Oct 31 02:05:12 2013 - LOCAL: Setting connection queue length to 15 Thu Oct 31 02:05:12 2013 - ERROR: daemonize() failed: Cannot allocate memory Thu Oct 31 02:05:12 2013 - Socket file removed. # free -m total used free shared buffers cached Mem: 497425 71 0 8 75 -/+ buffers/cache:341155 Swap:0 0 0 It looks like you need more memory. Here's the relevant line from your log file: Thu Oct 31 02:05:12 2013 - ERROR: daemonize() failed: Cannot allocate memory And indeed your `free -m` output shows that you're out of memory and you don't have any swap installed. Adding more memory would fix your problem. Thanks, Shawn hi Shawn, thank you for your reply I asked my provider if they can attivarmi swap. if there is a way by configuring clamav to force it? ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
On 11/01/2013 04:48 PM, Paolo De Michele wrote: On 11/01/2013 02:26 PM, Shawn Webb wrote: On Fri, Nov 1, 2013 at 5:51 AM, Paolo De Michelepa...@paolodemichele.itwrote: On 11/01/2013 10:11 AM, Paolo De Michele wrote: On 11/01/2013 02:45 AM, Dennis Peterson wrote: On 10/31/13, 5:08 PM, Paolo De Michele wrote: hi everybody, I installed a web/mail server correctly with the suite ispconfig. between the packages I installed amavis and clamav However, the email will be populated with the object UNCECKED and the system logs I see this: Run the clamconf file and send the output to the list. Scan it yourself as you may find the problem on your own. dp __**_ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/**clamav-faqhttps://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/**ml http://www.clamav.net/support/ml dennis, thank you for your reply this is my clamd.conf #Automatically Generated by clamav-base postinst #To reconfigure clamd run #dpkg-reconfigure clamav-base #Please read /usr/share/doc/clamav-base/**README.Debian.gz for details LocalSocket /var/run/clamav/clamd.ctl FixStaleSocket true LocalSocketGroup clamav LocalSocketMode 666 # TemporaryDirectory is not set to its default /tmp here to make overriding # the default with environment variables TMPDIR/TMP/TEMP possible User clamav AllowSupplementaryGroups true ScanMail true ScanArchive true ArchiveBlockEncrypted false MaxDirectoryRecursion 15 FollowDirectorySymlinks false FollowFileSymlinks false ReadTimeout 180 MaxThreads 12 MaxConnectionQueueLength 15 LogSyslog false LogFacility LOG_LOCAL6 LogClean false LogVerbose false PidFile /var/run/clamav/clamd.pid DatabaseDirectory /var/lib/clamav SelfCheck 3600 Foreground false Debug false ScanPE true ScanOLE2 true ScanHTML true DetectBrokenExecutables false ExitOnOOM false LeaveTemporaryFiles false AlgorithmicDetection true ScanELF true IdleTimeout 30 PhishingSignatures true PhishingScanURLs true PhishingAlwaysBlockSSLMismatch false PhishingAlwaysBlockCloak false DetectPUA false ScanPartialMessages false HeuristicScanPrecedence false StructuredDataDetection false CommandReadTimeout 5 SendBufTimeout 200 MaxQueue 100 ExtendedDetectionInfo true OLE2BlockMacros false StreamMaxLength 25M LogFile /var/log/clamav/clamav.log LogTime true LogFileUnlock false LogFileMaxSize 0 Bytecode true BytecodeSecurity TrustSigned BytecodeTimeout 6 OfficialDatabaseOnly false CrossFilesystems true in the /var/log/clamav/clamav.log I see: Thu Oct 31 02:05:03 2013 - +++ Started at Thu Oct 31 02:05:03 2013 Thu Oct 31 02:05:03 2013 - clamd daemon 0.97.8 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Thu Oct 31 02:05:03 2013 - Log file size limited to -1 bytes. Thu Oct 31 02:05:03 2013 - Reading databases from /var/lib/clamav Thu Oct 31 02:05:03 2013 - Not loading PUA signatures. Thu Oct 31 02:05:03 2013 - Bytecode: Security mode set to TrustSigned. Thu Oct 31 02:05:11 2013 - Loaded 2865687 signatures. Thu Oct 31 02:05:12 2013 - LOCAL: Unix socket file /var/run/clamav/clamd.ctl Thu Oct 31 02:05:12 2013 - LOCAL: Setting connection queue length to 15 Thu Oct 31 02:05:12 2013 - ERROR: daemonize() failed: Cannot allocate memory Thu Oct 31 02:05:12 2013 - Socket file removed. # free -m total used free shared buffers cached Mem: 497425 71 0 8 75 -/+ buffers/cache:341155 Swap:0 0 0 It looks like you need more memory. Here's the relevant line from your log file: Thu Oct 31 02:05:12 2013 - ERROR: daemonize() failed: Cannot allocate memory And indeed your `free -m` output shows that you're out of memory and you don't have any swap installed. Adding more memory would fix your problem. Thanks, Shawn hi Shawn, thank you for your reply I asked my provider if they can attivarmi swap. if there is a way by configuring clamav to force it? the support reply: While it is possible, due to the nature of SSD storage we do not support swap space on droplets. honestly, I do not think that increasing my VPS to 1gb of ram solve the situation how can I fix it? thanks in advance regards ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
Paolo De Michele skrev den 2013-11-01 16:59: honestly, I do not think that increasing my VPS to 1gb of ram solve the situation hmp how can I fix it? try another vps ? btw swap can be on a swap file, not just a special swap partion other then that you can try resolve clamd to max 1 threads, so it uses less ram, there is póssible other ways of reduce ram usage, but unless some create a ticket for this it will not be solved ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
Paolo De Michele wrote: the support reply: While it is possible, due to the nature of SSD storage we do not support swap space on droplets. honestly, I do not think that increasing my VPS to 1gb of ram solve the situation how can I fix it? If you won't add RAM, and your hosting provider won't add swap, you'll have to look into cutting down on the number of definitions ClamAV uses so it doesn't use as much memory. There was a thread on this in a very similar situation not too long ago, check the list archives. Content scanning is resource-intensive. -kgd ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
[clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
hi everybody, I installed a web/mail server correctly with the suite ispconfig. between the packages I installed amavis and clamav However, the email will be populated with the object UNCECKED and the system logs I see this: Oct 29 16:28:51 urano amavis[2410]: (02410-01) (!)connect to /var/run/clamav/clamd.ctl failed, attempt #1: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory Oct 29 16:28:52 urano amavis[2410]: (02410-01) (!)connect to /var/run/clamav/clamd.ctl failed, attempt #1: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory Oct 29 16:28:52 urano amavis[2410]: (02410-01) (!)ClamAV-clamd: All attempts (1) failed connecting to /var/run/clamav/clamd.ctl, retrying (2) Oct 29 16:28:58 urano amavis[2410]: (02410-01) (!)connect to /var/run/clamav/clamd.ctl failed, attempt #1: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory Oct 29 16:28:58 urano amavis[2410]: (02410-01) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (All attempts (1) failed connecting to /var/run/clamav/clamd.ctl) at (eval 113) line 603.\n Oct 29 16:28:58 urano amavis[2410]: (02410-01) (!)WARN: all primary virus scanners failed, considering backups Oct 29 16:29:04 urano amavis[2410]: (02410-01) (!)ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan KILLED, signal 9 (0009) at (eval 113) line 899. Oct 29 16:29:04 urano amavis[2410]: (02410-01) (!!)AV: ALL VIRUS SCANNERS FAILED the clamav version is 0.97.8 the os installed is debian wheezy x64 how can I fix it? thanks in advance best regards ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] - Can't connect to UNIX, socket /var/run/clamav/clamd.ctl
On 10/31/13, 5:08 PM, Paolo De Michele wrote: hi everybody, I installed a web/mail server correctly with the suite ispconfig. between the packages I installed amavis and clamav However, the email will be populated with the object UNCECKED and the system logs I see this: Run the clamconf file and send the output to the list. Scan it yourself as you may find the problem on your own. dp ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [Clamav-users] Can't connect to UNIX socket
First off, thanks for all your help guys. It turns out patience was my worst enemy. It took more than 5-10 minutes for clamd to start up and create the socket. All is well now, guess its time to upgrade clamav. Thanks again, Morgan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stuart J. Browne Sent: Tuesday, November 20, 2007 6:39 PM To: 'ClamAV users ML' Subject: Re: [Clamav-users] Can't connect to UNIX socket snip Wait a couple minutes, and see if the socket is created: srwxrwxrwx 1 clamav clamav 0 2007-11-20 16:05 clamd.ctl -rw-rw 1 clamav clamav 4 2007-11-20 16:05 clamd.pid -rw-rw 1 clamav clamav 4 2007-11-20 16:00 freshclam.pid What source did you install from (sarge volatile?). When I have problems in this type of setup, I --purge remove clamav, then reinstall it. For example (sarge volatile source): # apt-get --purge remove clamav clamav-base clamav-daemon clamav-freshclam libclamav2 # apt-get -t sarge install clamav clamav-daemon clamav-freshclam # gpasswd -a clamav amavis # /etc/init.d/clamav-daemon restart YMMV, use at your own risk (use apt-get -s --purge remove... to first simulate removal). Ah, I remember that.. It happened with 0.90 series of releases. The 0.91.2 release fixed this pause for me. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Can't connect to UNIX socket
Guys and gals, I have been working on this problem for 2 days to still no avail. This is the error I am getting: #4.5.0 smtp; 451 4.5.0 Error in processing, id=08486-07, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462. Clamd.ctl doesn't get created in /var/run/clamav/. All the permissions are correct. My /etc/clamav/clamd.conf has the local socket pointing to LocalSocket /var/run/clamav/clamd.ctl. I'm not sure what is going on here. DNS is working properly (sometimes I have gotten this error when clamav was unable to update the database). Any help would be greatly appreciated. Debian 2.6.8-3-686 Postfix (not sure what version) SpamAssassin version 3.1.7-deb ClamAV 0.90.1/4855/Tue Nov 20 04:49:20 2007 with freshclam Razor Agents 2.81, protocol version 3 Thanks in advance, Morgan Morgan Walker Systems Administrator/Engineer M*CAM, Inc. 210 Ridge-McIntire Rd., Suite 300 Charlottesville, VA 22903 434-979-7240 x311 http://www.m-cam.com = This message, including any attachments, is intended solely for the use of the named recipient(s) and may contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution of this communication(s) is expressly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy any and all copies of the original message. Thank you. = ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Can't connect to UNIX socket
Hello! May be you frogot to join clamav user to the amavis group: # usermod -a -G amavis clamav I hope this helps you ! ;) Gerardo Ponce Soporte Interno | Administrador de Red Delsat Group SA Tel. +54 (223) 4945001 / Fax: +54 (223) 4945111 Mar del Plata - Argentina www.delsatgroup.com Morgan Walker wrote: Guys and gals, I have been working on this problem for 2 days to still no avail. This is the error I am getting: #4.5.0 smtp; 451 4.5.0 Error in processing, id=08486-07, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462. Clamd.ctl doesn't get created in /var/run/clamav/. All the permissions are correct. My /etc/clamav/clamd.conf has the local socket pointing to LocalSocket /var/run/clamav/clamd.ctl. I'm not sure what is going on here. DNS is working properly (sometimes I have gotten this error when clamav was unable to update the database). Any help would be greatly appreciated. Debian 2.6.8-3-686 Postfix (not sure what version) SpamAssassin version 3.1.7-deb ClamAV 0.90.1/4855/Tue Nov 20 04:49:20 2007 with freshclam Razor Agents 2.81, protocol version 3 Thanks in advance, Morgan Morgan Walker Systems Administrator/Engineer M*CAM, Inc. 210 Ridge-McIntire Rd., Suite 300 Charlottesville, VA 22903 434-979-7240 x311 http://www.m-cam.com = This message, including any attachments, is intended solely for the use of the named recipient(s) and may contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution of this communication(s) is expressly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy any and all copies of the original message. Thank you. = ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Can't connect to UNIX socket
I'm pretty sure clamav user belonged to the amavis group. Tried your command anyway, restarted amavis and clamav-daemon, still no dice. I even followed this tutorial, http://www200.pair.com/mecham/spam/clamav-amavisd-new.html, where I made amavis the user for all clamav activities but that didn't work either. I am at a loss. Also, FYI, this machine had been working properly for almost two years, then I all of a sudden started receiving these errors. Either way, thanks for the advice. -Morgan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerardo Ponce Sent: Tuesday, November 20, 2007 2:06 PM To: ClamAV users ML Subject: Re: [Clamav-users] Can't connect to UNIX socket Hello! May be you frogot to join clamav user to the amavis group: # usermod -a -G amavis clamav I hope this helps you ! ;) Gerardo Ponce Soporte Interno | Administrador de Red Delsat Group SA Tel. +54 (223) 4945001 / Fax: +54 (223) 4945111 Mar del Plata - Argentina www.delsatgroup.com Morgan Walker wrote: Guys and gals, I have been working on this problem for 2 days to still no avail. This is the error I am getting: #4.5.0 smtp; 451 4.5.0 Error in processing, id=08486-07, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 44) line 268.; ClamAV-clamscan av-scanner FAILED: /usr/bin/clamscan timed out at (eval 44) line 462. Clamd.ctl doesn't get created in /var/run/clamav/. All the permissions are correct. My /etc/clamav/clamd.conf has the local socket pointing to LocalSocket /var/run/clamav/clamd.ctl. I'm not sure what is going on here. DNS is working properly (sometimes I have gotten this error when clamav was unable to update the database). Any help would be greatly appreciated. Debian 2.6.8-3-686 Postfix (not sure what version) SpamAssassin version 3.1.7-deb ClamAV 0.90.1/4855/Tue Nov 20 04:49:20 2007 with freshclam Razor Agents 2.81, protocol version 3 Thanks in advance, Morgan Morgan Walker Systems Administrator/Engineer M*CAM, Inc. 210 Ridge-McIntire Rd., Suite 300 Charlottesville, VA 22903 434-979-7240 x311 http://www.m-cam.com = This message, including any attachments, is intended solely for the use of the named recipient(s) and may contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution of this communication(s) is expressly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy any and all copies of the original message. Thank you. = ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Can't connect to UNIX socket
I'm pretty sure clamav user belonged to the amavis group. Tried your command anyway, restarted amavis and clamav-daemon, still no dice. I even followed this tutorial, http://www200.pair.com/mecham/spam/clamav-amavisd-new.html, where I made amavis the user for all clamav activities but that didn't work either. I am at a loss. Also, FYI, this machine had been working properly for almost two years, then I all of a sudden started receiving these errors. Either way, thanks for the advice. -Morgan First, I would run freshclam. Then I would see in clamd is running, then I would stop it, see if it did stop, then restart it and see if it did restart. msa:~# ps aux | grep clamd clamav1566 83.5 7.7 35532 30084 ?Rs 16:00 0:31 /usr/sbin/clamd root 2293 0.0 0.1 3052 628 pts/0R+ 16:01 0:00 grep clamd msa:~# /etc/init.d/clamav-daemon stop Stopping ClamAV daemon: clamd. msa:~# ps aux | grep clamd root 2841 0.0 0.1 3048 628 pts/0R+ 16:01 0:00 grep clamd msa:~# /etc/init.d/clamav-daemon start Starting ClamAV daemon: clamd Running as user clamav (UID 109, GID 111) . msa:~# ps aux | grep clamd clamav2975 0.0 0.1 5536 732 ?Ss 16:01 0:00 /usr/sbin/clamd root 3059 0.0 0.1 3048 628 pts/0R+ 16:01 0:00 grep clamd Wait a couple minutes, and see if the socket is created: srwxrwxrwx 1 clamav clamav 0 2007-11-20 16:05 clamd.ctl -rw-rw 1 clamav clamav 4 2007-11-20 16:05 clamd.pid -rw-rw 1 clamav clamav 4 2007-11-20 16:00 freshclam.pid What source did you install from (sarge volatile?). When I have problems in this type of setup, I --purge remove clamav, then reinstall it. For example (sarge volatile source): # apt-get --purge remove clamav clamav-base clamav-daemon clamav-freshclam libclamav2 # apt-get -t sarge install clamav clamav-daemon clamav-freshclam # gpasswd -a clamav amavis # /etc/init.d/clamav-daemon restart YMMV, use at your own risk (use apt-get -s --purge remove... to first simulate removal). Gary V _ Connect and share in new ways with Windows Live. http://www.windowslive.com/connect.html?ocid=TXT_TAGLM_Wave2_newways_112007 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Can't connect to UNIX socket
snip Wait a couple minutes, and see if the socket is created: srwxrwxrwx 1 clamav clamav 0 2007-11-20 16:05 clamd.ctl -rw-rw 1 clamav clamav 4 2007-11-20 16:05 clamd.pid -rw-rw 1 clamav clamav 4 2007-11-20 16:00 freshclam.pid What source did you install from (sarge volatile?). When I have problems in this type of setup, I --purge remove clamav, then reinstall it. For example (sarge volatile source): # apt-get --purge remove clamav clamav-base clamav-daemon clamav-freshclam libclamav2 # apt-get -t sarge install clamav clamav-daemon clamav-freshclam # gpasswd -a clamav amavis # /etc/init.d/clamav-daemon restart YMMV, use at your own risk (use apt-get -s --purge remove... to first simulate removal). Ah, I remember that.. It happened with 0.90 series of releases. The 0.91.2 release fixed this pause for me. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
RE: [Clamav-users] Can't connect to UNIX socket /var/run/clamav/clamd
Thanks, everyone. The problem has been solved. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Wednesday, June 08, 2005 8:29 PM To: ClamAV users ML Subject: Re: [Clamav-users] Can't connect to UNIX socket /var/run/clamav/clamd - Original Message - From: mj [EMAIL PROTECTED] To: clamav-users@lists.clamav.net Sent: Wednesday, June 08, 2005 9:52 AM Subject: [Clamav-users] Can't connect to UNIX socket /var/run/clamav/clamd Hi, Can someone help me on the following error? Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.error] (00703-08) ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var /run/clamav/clamd (Can't connect to UNIX socket /var/run/clamav/clamd: No such file or directory) at (eval 39) line 264. Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.error] (00703-08) WARN: all primary virus scanners failed, considering backups Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.debug] (00703-08) Using (ClamAV-clamscan): /usr/local/bin/clamscan --stdout --disa ble-summary -r --tempdir=/var/amavis/tmp /var/amavis/tmp/amavis-20050608T173814-00703/parts See the responses to your same question on the amavisd list. Bill ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Can't connect to UNIX socket /var/run/clamav/clamd
Hi, Can someone help me on the following error? Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.error] (00703-08) ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var /run/clamav/clamd (Can't connect to UNIX socket /var/run/clamav/clamd: No such file or directory) at (eval 39) line 264. Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.error] (00703-08) WARN: all primary virus scanners failed, considering backups Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.debug] (00703-08) Using (ClamAV-clamscan): /usr/local/bin/clamscan --stdout --disa ble-summary -r --tempdir=/var/amavis/tmp /var/amavis/tmp/amavis-20050608T173814-00703/parts ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Can't connect to UNIX socket /var/run/clamav/clamd
- Original Message - From: mj [EMAIL PROTECTED] To: clamav-users@lists.clamav.net Sent: Wednesday, June 08, 2005 9:52 AM Subject: [Clamav-users] Can't connect to UNIX socket /var/run/clamav/clamd Hi, Can someone help me on the following error? Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.error] (00703-08) ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var /run/clamav/clamd (Can't connect to UNIX socket /var/run/clamav/clamd: No such file or directory) at (eval 39) line 264. Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.error] (00703-08) WARN: all primary virus scanners failed, considering backups Jun 8 18:06:19 sune amavis[703]: [ID 702911 mail.debug] (00703-08) Using (ClamAV-clamscan): /usr/local/bin/clamscan --stdout --disa ble-summary -r --tempdir=/var/amavis/tmp /var/amavis/tmp/amavis-20050608T173814-00703/parts See the responses to your same question on the amavisd list. Bill ___ http://lurker.clamav.net/list/clamav-users.html
