Re: [Clamav-users] clamav-milter dies after awhile
On Thu, 15 Jul 2010 17:35:49 -0700 Jim Preston jimli...@commspeed.net wrote: On Jul 15, 2010, at 5:14 PM, Jim Preston wrote: On Jul 15, 2010, at 1:40 PM, Török Edwin wrote: On Thu, 15 Jul 2010 16:22:49 -0400 Shawn Bakhtiar shashan...@hotmail.com wrote: having a sinister problem. I have modfied a SysV script to start the clamd and than clam- milter. when I check status I get: [r...@smtp ~]# /etc/init.d/clamav-milter status clamav-milter (pid 3432) is running... clamd (pid 3426) is running... I send an email and the header has : X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.96 at smtp.inksystemsinc.com I come back a few days later and I get this: [r...@smtp ~]# /etc/init.d/clamav-milter status clamav-milter dead but subsys locked clamd (pid 5152) is running... This is very similar to what I get with my mail server. Seemed to be happening every time freshclam ran which is handled via a cron task. I could not figure out was was causing it and just went to a workaround of having a cron task restart of the clamav-milter 2 min after the freshclam task. I will be happy to try any solutions that get posted here regarding a fix for this. It is a personal test mail server so I am not terribly concerned about having the restart task. Thanks, Jim___ Edwin, This may have nothing to do with Shawn's problem but .. Could this be a problem with SELinux on my system? /var/log/clamav-milter.log.scan:audit/audit.log:type=ANOM_ABEND msg=audit(1264972228.023:953): auid=4294967295 uid=46 gid=46 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 pid=25871 comm=clamav- milter sig=25 I do get this in the audit log ... That doesn't look like an SELinux message (they are all AVC something...), rather it looks like it just logs the fact that the milter crashed. So yes it might be the same problem as Shawn's. Do you have core files enabled? Did it leave a core file behind? You could also try to attach gdb to clamav-milter, and get a stacktrace when it crashes: # gdb /usr/sbin/clamav-milter `pidof clamav-milter` ... (gdb) continue . SIGSEGV (gdb) thread apply bt full Best regards, --Edwin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter dies after awhile
Date: Fri, 16 Jul 2010 09:39:55 +0300
From: edwinto...@gmail.com
To: clamav-users@lists.clamav.net
Subject: Re: [Clamav-users] clamav-milter dies after awhile
On Thu, 15 Jul 2010 17:35:49 -0700
Jim Preston jimli...@commspeed.net wrote:
On Jul 15, 2010, at 5:14 PM, Jim Preston wrote:
On Jul 15, 2010, at 1:40 PM, Török Edwin wrote:
On Thu, 15 Jul 2010 16:22:49 -0400
Shawn Bakhtiar shashan...@hotmail.com wrote:
having a sinister problem.
I have modfied a SysV script to start the clamd and than clam-
milter.
when I check status I get:
[r...@smtp ~]# /etc/init.d/clamav-milter status
clamav-milter (pid 3432) is running...
clamd (pid 3426) is running...
I send an email and the header has :
X-Virus-Status: Clean
X-Virus-Scanned: clamav-milter 0.96 at smtp.inksystemsinc.com
I come back a few days later and I get this:
[r...@smtp ~]# /etc/init.d/clamav-milter status
clamav-milter dead but subsys locked
clamd (pid 5152) is running...
This is very similar to what I get with my mail server. Seemed to
be happening every time freshclam ran which is handled via a cron
task. I could not figure out was was causing it and just went to a
workaround of having a cron task restart of the clamav-milter 2
min after the freshclam task.
I will be happy to try any solutions that get posted here
regarding a fix for this. It is a personal test mail server so I am
not terribly concerned about having
the restart task.
Thanks, Jim___
Edwin,
This may have nothing to do with Shawn's problem but ..
Could this be a problem with SELinux on my system?
/var/log/clamav-milter.log.scan:audit/audit.log:type=ANOM_ABEND
msg=audit(1264972228.023:953): auid=4294967295 uid=46 gid=46
subj=root:system_r:unconfined_t:s0-s0:c0.c1023 pid=25871
comm=clamav- milter sig=25
I do get this in the audit log ...
That doesn't look like an SELinux message (they are all AVC
something...), rather it looks like it just logs the fact that the
milter crashed.
So yes it might be the same problem as Shawn's. Do you have core files
enabled? Did it leave a core file behind?
You could also try to attach gdb to clamav-milter, and get a stacktrace
when it crashes:
# gdb /usr/sbin/clamav-milter `pidof clamav-milter`
...
(gdb) continue
.
SIGSEGV
(gdb) thread apply bt full
Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
I have freshclam running every hour. If freshclam was the the problem I
would imaging it would be reproduce-able.
Here is all lines (grep milt) in /var/log/clamav.log
Jul 4 09:56:46 smtp clamav-milter[24943]: +++ Started at Sun Jul 4 09:56:46
2010
Jul 6 14:11:29 smtp clamav-milter[11442]: +++ Started at Tue Jul 6 14:11:29
2010
Jul 6 20:05:04 smtp clamav-milter[11443]: Message from
8429142657.12...@e2ma.net to sjacob...@postoffice.inksystemsinc.com
infected by Heuristics.Phishing.Email.SpoofedDomain
Jul 8 11:04:52 smtp clamav-milter[11443]: Message from
fail_con...@conway.com to uhir...@postoffice.inksystemsinc.com infected by
Heuristics.Phishing.Email.SpoofedDomain
Jul 10 16:10:50 smtp clamav-milter[5157]: +++ Started at Sat Jul 10 16:10:50
2010
Jul 15 13:03:19 smtp clamav-milter[3431]: +++ Started at Thu Jul 15 13:03:19
2010
Jul 15 13:03:39 smtp clamav-milter[3432]: Message from fail_con...@conway.com
to uhir...@postoffice.inksystemsinc.com infected by
Heuristics.Phishing.Email.SpoofedDomain
here is (/var/log/messages | grep clam) which shows some of the same stuff,
however my SELinux is set to passive (log only) - I have had so many problems
with SEL, like the theory, suffered in practice.
...
Jul 13 04:01:02 smtp freshclam[19049]: ClamAV update process started at Tue Jul
13 04:01:02 2010
Jul 13 04:01:02 smtp freshclam[19049]: main.cvd is up to date (version: 52,
sigs: 704727, f-level: 44, builder: sven)
Jul 13 04:01:02 smtp freshclam[19049]: daily.cld is up to date (version: 11359,
sigs: 102693, f-level: 53, builder: ccordes)
Jul 13 04:01:02 smtp freshclam[19049]: bytecode.cld is up to date (version: 31,
sigs: 7, f-level: 53, builder: nervous)
Jul 13 04:05:39 smtp clamd[5152]: SelfCheck: Database status OK.
Jul 13 04:14:29 smtp kernel: type=1400 audit(1279019669.096:110): avc: denied
{ getattr } for pid=19613 comm=sendmail
path=/var/run/clamd/clamav-milter.socket dev=dm-0 ino=2850822
scontext=system_u:system_r:sendmail_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
Jul 13 04:14:29 smtp kernel: type=1400 audit(1279019669.096:111): avc: denied
{ write } for pid=19613 comm=sendmail name=clamav-milter.socket dev=dm-0
ino=2850822 scontext=system_u:system_r:sendmail_t:s0
tcontext
[Clamav-users] clamav-milter dies after awhile
having a sinister problem.
I have modfied a SysV script to start the clamd and than clam-milter. when I
check status I get:
[r...@smtp ~]# /etc/init.d/clamav-milter status
clamav-milter (pid 3432) is running...
clamd (pid 3426) is running...
I send an email and the header has :
X-Virus-Status: Clean
X-Virus-Scanned: clamav-milter 0.96 at smtp.inksystemsinc.com
I come back a few days later and I get this:
[r...@smtp ~]# /etc/init.d/clamav-milter status
clamav-milter dead but subsys locked
clamd (pid 5152) is running...
and my emails do not include the X-Virus-Status info.
Files to follow (- comment sections):
[r...@smtp ~]# more /usr/local/etc/clamd.conf
LogFacility LOG_LOCAL6
PidFile /var/run/clamd/clamd.pid
OfficialDatabaseOnly no
LocalSocket /var/run/clamd/clamd.socket
[r...@smtp ~]# more /usr/local/etc/clamav-milter.conf
MilterSocket /var/run/clamd/clamav-milter.socket
User clamav
PidFile /var/run/clamd/clamav-milter.pid
ClamdSocket unix:/var/run/clamd/clamd.socket
ReportHostname smtp.inksystemsinc.com
LogTime yes
LogSyslog yes
LogFacility LOG_LOCAL6
LogInfected Basic
[r...@smtp ~]# more /etc/init.d/clamav-milter
#!/bin/sh
. /etc/rc.d/init.d/functions
. /etc/sysconfig/network
CLAMAV_FLAGS=
test -f /etc/sysconfig/clamav-milter . /etc/sysconfig/clamav-milter
[ ${NETWORKING} = no ] exit 0
PATH=$PATH:/usr/bin:/usr/local/sbin:/usr/local/bin
RETVAL=0
start_clamd() {
# ADD BY SHAWN 04122010 for new ClamAV implementation
echo -n Starting clam AV Server:
touch /var/lock/subsys/clamd
if [ -x /sbin/restorecon ] ; then
/sbin/restorecon /var/lock/subsys/clamd
fi
LANG= daemon clamd ${CLAMD_FLAGS}
RETVAL=$?
echo
test $RETVAL -eq 0
return $RETVAL
}
start_clamilt() {
echo -n Starting clamav-milter:
# Don't allow files larger than 20M to be created, to limit DoS
# Needs to be large enough to extract the signature files
ulimit -f 2
touch /var/lock/subsys/clamav-milter
# SE Linux Fix from http://webui.sourcelabs.com/fedora/issues/447247 (and in
spamass-miter)
if [ -x /sbin/restorecon ] ; then
/sbin/restorecon /var/lock/subsys/clamav-milter
fi
LANG= daemon clamav-milter ${CLAMAV_FLAGS}
RETVAL=$?
echo
test $RETVAL -eq 0
return $RETVAL
}
start() {
start_clamd
start_clamilt
}
stop_clamd() {
echo -n Shuttung down clamd:
killproc clamd
RETVAL=$?
echo
test $RETVAL -eq 0 rm -f /var/lock/subsys/clamd
}
stop_clamilt() {
echo -n Shutting down clamav-milter:
killproc clamav-milter
RETVAL=$?
echo
test $RETVAL -eq 0 rm -f /var/lock/subsys/clamav-milter
}
stop() {
stop_clamilt
stop_clamd
}
restart() {
stop
start
}
# See how we were called.
case $1 in
start)
case $2 in
clamd)
start_clamd
;;
clamilt)
start_clamilt
;;
*)
start
;;
esac
;;
stop)
case $2 in
clamd)
stop_clamd
;;
clamilt)
stop_clamilt
;;
*)
stop
;;
esac
;;
restart|reload)
restart
;;
condrestart)
test -f /var/lock/subsys/clamav-milter -f /var/lock/subsys/clamd
restart || :
;;
status)
status clamav-milter
status clamd
;;
*)
echo Usage: $0
{start[clamd|clamilt]|stop[clamd|clamilt]|reload|restart|condrestart|status}
exit 1
esac
exit $?
_
The New Busy think 9 to 5 is a cute idea. Combine multiple calendars with
Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multicalendarocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_5
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter dies after awhile
On Thu, 15 Jul 2010 16:22:49 -0400
Shawn Bakhtiar shashan...@hotmail.com wrote:
having a sinister problem.
I have modfied a SysV script to start the clamd and than clam-milter.
when I check status I get:
[r...@smtp ~]# /etc/init.d/clamav-milter status
clamav-milter (pid 3432) is running...
clamd (pid 3426) is running...
I send an email and the header has :
X-Virus-Status: Clean
X-Virus-Scanned: clamav-milter 0.96 at smtp.inksystemsinc.com
I come back a few days later and I get this:
[r...@smtp ~]# /etc/init.d/clamav-milter status
clamav-milter dead but subsys locked
clamd (pid 5152) is running...
Look in dmesg, are there any messages about crashes (segfault)?
In case you rebooted since,
check /var/log/syslog, /var/log/messages, /var/log/boot.log for
anything about clamav-milter.
and my emails do not include the X-Virus-Status info.
Files to follow (- comment sections):
[r...@smtp ~]# more /usr/local/etc/clamd.conf
LogFacility LOG_LOCAL6
PidFile /var/run/clamd/clamd.pid
OfficialDatabaseOnly no
LocalSocket /var/run/clamd/clamd.socket
[r...@smtp ~]# more /usr/local/etc/clamav-milter.conf
MilterSocket /var/run/clamd/clamav-milter.socket
User clamav
PidFile /var/run/clamd/clamav-milter.pid
ClamdSocket unix:/var/run/clamd/clamd.socket
ReportHostname smtp.inksystemsinc.com
LogTime yes
LogSyslog yes
LogFacility LOG_LOCAL6
LogInfected Basic
[r...@smtp ~]# more /etc/init.d/clamav-milter
#!/bin/sh
. /etc/rc.d/init.d/functions
. /etc/sysconfig/network
CLAMAV_FLAGS=
test -f /etc/sysconfig/clamav-milter . /etc/sysconfig/clamav-milter
[ ${NETWORKING} = no ] exit 0
PATH=$PATH:/usr/bin:/usr/local/sbin:/usr/local/bin
RETVAL=0
start_clamd() {
# ADD BY SHAWN 04122010 for new ClamAV implementation
echo -n Starting clam AV Server:
touch /var/lock/subsys/clamd
if [ -x /sbin/restorecon ] ; then
/sbin/restorecon /var/lock/subsys/clamd
fi
LANG= daemon clamd ${CLAMD_FLAGS}
RETVAL=$?
echo
test $RETVAL -eq 0
return $RETVAL
}
start_clamilt() {
echo -n Starting clamav-milter:
# Don't allow files larger than 20M to be created, to limit DoS
# Needs to be large enough to extract the signature files
ulimit -f 2
touch /var/lock/subsys/clamav-milter
# SE Linux Fix from http://webui.sourcelabs.com/fedora/issues/447247
(and in spamass-miter)
if [ -x /sbin/restorecon ] ; then
/sbin/restorecon /var/lock/subsys/clamav-milter
fi
LANG= daemon clamav-milter ${CLAMAV_FLAGS}
RETVAL=$?
echo
test $RETVAL -eq 0
return $RETVAL
}
start() {
start_clamd
start_clamilt
}
stop_clamd() {
echo -n Shuttung down clamd:
killproc clamd
RETVAL=$?
echo
test $RETVAL -eq 0 rm -f /var/lock/subsys/clamd
}
stop_clamilt() {
echo -n Shutting down clamav-milter:
killproc clamav-milter
RETVAL=$?
echo
test $RETVAL -eq 0 rm -f /var/lock/subsys/clamav-milter
}
stop() {
stop_clamilt
stop_clamd
}
restart() {
stop
start
}
# See how we were called.
case $1 in
start)
case $2 in
clamd)
start_clamd
;;
clamilt)
start_clamilt
;;
*)
start
;;
esac
;;
stop)
case $2 in
clamd)
stop_clamd
;;
clamilt)
stop_clamilt
;;
*)
stop
;;
esac
;;
restart|reload)
restart
;;
condrestart)
test -f /var/lock/subsys/clamav-milter
-f /var/lock/subsys/clamd restart || : ;;
status)
status clamav-milter
status clamd
;;
*)
echo Usage: $0
{start[clamd|clamilt]|stop[clamd|clamilt]|reload|restart|condrestart|status}
exit 1 esac
exit $?
_
The New Busy think 9 to 5 is a cute idea. Combine multiple calendars
with Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multicalendarocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_5
___ Help us build a
comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter dies after awhile
On Jul 15, 2010, at 1:40 PM, Török Edwin wrote: On Thu, 15 Jul 2010 16:22:49 -0400 Shawn Bakhtiar shashan...@hotmail.com wrote: having a sinister problem. I have modfied a SysV script to start the clamd and than clam-milter. when I check status I get: [r...@smtp ~]# /etc/init.d/clamav-milter status clamav-milter (pid 3432) is running... clamd (pid 3426) is running... I send an email and the header has : X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.96 at smtp.inksystemsinc.com I come back a few days later and I get this: [r...@smtp ~]# /etc/init.d/clamav-milter status clamav-milter dead but subsys locked clamd (pid 5152) is running... This is very similar to what I get with my mail server. Seemed to be happening every time freshclam ran which is handled via a cron task. I could not figure out was was causing it and just went to a workaround of having a cron task restart of the clamav-milter 2 min after the freshclam task. I will be happy to try any solutions that get posted here regarding a fix for this. It is a personal test mail server so I am not terribly concerned about having the restart task. Thanks, Jim ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter dies after awhile
On Jul 15, 2010, at 5:14 PM, Jim Preston wrote: On Jul 15, 2010, at 1:40 PM, Török Edwin wrote: On Thu, 15 Jul 2010 16:22:49 -0400 Shawn Bakhtiar shashan...@hotmail.com wrote: having a sinister problem. I have modfied a SysV script to start the clamd and than clam- milter. when I check status I get: [r...@smtp ~]# /etc/init.d/clamav-milter status clamav-milter (pid 3432) is running... clamd (pid 3426) is running... I send an email and the header has : X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.96 at smtp.inksystemsinc.com I come back a few days later and I get this: [r...@smtp ~]# /etc/init.d/clamav-milter status clamav-milter dead but subsys locked clamd (pid 5152) is running... This is very similar to what I get with my mail server. Seemed to be happening every time freshclam ran which is handled via a cron task. I could not figure out was was causing it and just went to a workaround of having a cron task restart of the clamav-milter 2 min after the freshclam task. I will be happy to try any solutions that get posted here regarding a fix for this. It is a personal test mail server so I am not terribly concerned about having the restart task. Thanks, Jim___ Edwin, This may have nothing to do with Shawn's problem but .. Could this be a problem with SELinux on my system? /var/log/clamav-milter.log.scan:audit/audit.log:type=ANOM_ABEND msg=audit(1264972228.023:953): auid=4294967295 uid=46 gid=46 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 pid=25871 comm=clamav- milter sig=25 I do get this in the audit log ... Thanks, Jim ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] clamav-milter dies after update by freshclam
Михаил Исаев wrote: ClamAV version - snapshot 20061026 (also testing v0.90RC1.1) OS - Solaris 5.9 (with updated zlib v1.2.3, gcc v3.4.0) I have a problem with clamav-milter: it's die when freshclam gots errors. See also bug 113. -- Nigel Horne. Arranger, Adjudicator, Band Trainer, Composer, Tutor, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies after update by freshclam
Hi, Nigel. See also bug 113. I can't see this bug: You are not authorized to access bug #113 (i am logged in to Bugzilla before search). Can you post this bug here? Best regards, Michael Isaev ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies after update by freshclam
On Mon, 30 Oct 2006 09:52:11 +0900 Михаил Исаев [EMAIL PROTECTED] wrote: ClamAV version - snapshot 20061026 (also testing v0.90RC1.1) OS - Solaris 5.9 (with updated zlib v1.2.3, gcc v3.4.0) Do you use the experimental code (--enable-experimental)? -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon Oct 30 10:51:23 CET 2006 ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] clamav-milter dies after update by freshclam
ClamAV version - snapshot 20061026 (also testing v0.90RC1.1) OS - Solaris 5.9 (with updated zlib v1.2.3, gcc v3.4.0) I have a problem with clamav-milter: it's die when freshclam gots errors. freshclam log: -- Received signal: wake up Max retries == 3 ClamAV update process started at Fri Oct 27 16:26:24 2006 Querying current.cvd.clamav.net TTL: 900 Software version from DNS: 0.88.5 main.cvd version from DNS: 40 main.cvd is up to date (version: 40, sigs: 64138, f-level: 8, builder: tkojm) daily.cvd version from DNS: 2116 Retrieving http://db.RU.clamav.net/daily-2115.cdiff Trying to download http://db.RU.clamav.net/daily-2115.cdiff (IP: 62.181.41.8) Downloading daily-2115.cdiff [100] cdiff_apply: Parsed 10 lines and executed 10 commands Retrieving http://db.RU.clamav.net/daily-2116.cdiff Trying to download http://db.RU.clamav.net/daily-2116.cdiff (IP: 62.181.41.8) Downloading daily-2116.cdiff [*] ERROR: cdiff_apply: lseek(desc, -350, SEEK_END) failed ERROR: getpatch: Can't apply patch WARNING: Removing incremental directory daily.inc WARNING: Incremental update failed, downloading complete database Retrieving http://db.RU.clamav.net/daily.cvd Trying to download http://db.RU.clamav.net/daily.cvd (IP: 62.181.41.8) Downloading daily.cvd [100] daily.cvd updated (version: 2116, sigs: 10401, f-level: 8, builder: ccordes) Database updated (74539 signatures) from db.RU.clamav.net (IP: 62.181.41.8) -- Right after that clamav-milter dies. Here is sendmail log: -- Oct 27 16:26:36 bella sendmail[1099]: [ID 801593 mail.error] k9R6QaAT001099: Milter (clamav): local socket name /usr/local/var/run/clamav/clmilter.sock unsafe Oct 27 16:26:36 bella sendmail[1099]: [ID 801593 mail.info] k9R6QaAT001099: Milter (clamav): to error state Oct 27 16:26:36 bella sendmail[1099]: [ID 801593 mail.info] k9R6QaAT001099: Milter: initialization failed, temp failing commands ... and so on ... -- How to correct freshclam (or milter)? Is it bug? Best regards, Michael Isaev ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
[EMAIL PROTECTED] wrote: To clarify, the milter isn't dying... it's just refusing to accept inputs (there's a difference). And the issue is with the milter, not with libclamav. In my case the milter is dying, and needs to be re-started... (started should I say). ___ http://lurker.clamav.net/list/clamav-users.html In the previous thread it was pointed out that due to the behavior of sendmail libmilter, which is compiled either staticaly into the milter or on some distributions as a shared object library, there is little difference in refusing to accept connections and dying. This is because libmilter will abort a milter that has consecutive errors responding to a sendmail's connection attempts. ( I was explored the possibility of changing this behavior but its not quite clear what the absolute correct course of action is: for more information see http://groups-beta.google.com/group/comp.mail.sendmail/browse_frm/thread/65658b2f5797c626/8a61ae5f825ca3aa ) Therefore milters must always do all that is neccesary to handle every sendmail connection. If scanning is not possible they need to either TEMPFAIL immediately or after a (very) short wait for resources to become available or let the message pass through unscanned. ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
Try not to use this in /etc/clamd.conf # If an email contains URLs ClamAV can download and scan them. # WARNING: This option may open your system to a DoS attack. # Never use it on loaded servers. # Default: disabled #MailFollowURLs I've detect that in my clmd.log LibClamAV Warning: URL http://us.rd.yahoo.com/mail/uk/taglines/gmail_com/photos/*http://uk.photos.yahoo.com/ failed to download LibClamAV Error: Segmentation fault :-( Bye.. [EMAIL PROTECTED] wrote: To clarify, the milter isn't dying... it's just refusing to accept inputs (there's a difference). And the issue is with the milter, not with libclamav. In my case the milter is dying, and needs to be re-started... (started should I say). ___ http://lurker.clamav.net/list/clamav-users.html In the previous thread it was pointed out that due to the behavior of sendmail libmilter, which is compiled either staticaly into the milter or on some distributions as a shared object library, there is little difference in refusing to accept connections and dying. This is because libmilter will abort a milter that has consecutive errors responding to a sendmail's connection attempts. ( I was explored the possibility of changing this behavior but its not quite clear what the absolute correct course of action is: for more information see http://groups-beta.google.com/group/comp.mail.sendmail/browse_frm/thread/65658b2f5797c626/8a61ae5f825ca3aa ) Therefore milters must always do all that is neccesary to handle every sendmail connection. If scanning is not possible they need to either TEMPFAIL immediately or after a (very) short wait for resources to become available or let the message pass through unscanned. ___ http://lurker.clamav.net/list/clamav-users.html ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] clamav-milter dies
Hi, Since the last version - ClamAV version 0.85.1, clamav-milter version 0.85, we are getting constant crashes of clamav-milter, syslog errors below: clamav-milter[10246]: ClamAv: thread_create() failed: 12, try again clamav-milter[10246]: ClamAv: thread_create() failed: 12, abort Any ideas? Cheers, Luci ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
At 12:44 PM 6/1/2005, you wrote: What OS and version? Did you install from precompiled binaries or source? Thomas Fedora Core 2, compiled form source. This issue was not present in previous milter versions. Some startup issues were also encountered, but were not documented when first installed. ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
--- [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi, Since the last version - ClamAV version 0.85.1, clamav-milter version 0.85, we are getting constant crashes of clamav-milter, syslog errors below: clamav-milter[10246]: ClamAv: thread_create() failed: 12, try again clamav-milter[10246]: ClamAv: thread_create() failed: 12, abort What are the entries in /var/log/clamd.log (or whatever you use?) N. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
At 01:08 PM 1/06/2005, you wrote: What are the entries in /var/log/clamd.log (or whatever you use?) N. The last relevant bits: LibClamAV Warning: Not reloading database until idle - waiting for 2 children LibClamAV Warning: Not accepting inputs at the moment LibClamAV Warning: Not accepting inputs at the moment LibClamAV Warning: Not accepting inputs at the moment ... and so on. The milter is also started with --max-children (but I assume that is not causing the thread creation problem when limit reached). ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
On Wed, 1 Jun 2005, [EMAIL PROTECTED] wrote: LibClamAV Warning: Not reloading database until idle - waiting for 2 children LibClamAV Warning: Not accepting inputs at the moment LibClamAV Warning: Not accepting inputs at the moment LibClamAV Warning: Not accepting inputs at the moment ... and so on. The milter is also started with --max-children (but I assume that is not causing the thread creation problem when limit reached). Please read my post to this list on Mon, 30 May 2005 10:58:58 -0500 with subject line Clamav not accepting inputs. I suppose I should add that to the wiki at some point, though hopefully a new release will be out soon anyway. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
If the issue is with clamav, the milter should probably not die as a side effect. At 01:51 PM 1/06/2005, you wrote: Please read my post to this list on Mon, 30 May 2005 10:58:58 -0500 with subject line Clamav not accepting inputs. I suppose I should add that to the wiki at some point, though hopefully a new release will be out soon anyway. ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
On Wed, 1 Jun 2005, [EMAIL PROTECTED] wrote: If the issue is with clamav, the milter should probably not die as a side effect. To clarify, the milter isn't dying... it's just refusing to accept inputs (there's a difference). And the issue is with the milter, not with libclamav. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies
To clarify, the milter isn't dying... it's just refusing to accept inputs (there's a difference). And the issue is with the milter, not with libclamav. In my case the milter is dying, and needs to be re-started... (started should I say). ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Clamav-milter dies after working ok for some hours
On Monday 23 May 2005 20:18, [EMAIL PROTECTED] wrote: Hi. I try this option, but i still have the same problem... Thanks JCallero On Monday 23 May 2005 02:46 am, George Chelidze wrote: [EMAIL PROTECTED] wrote: Hi We have a fairly big sendmail+clamav+clamav-milter setup, with 15000+ accounts. Since last week we are experimenting several errors with this combination. Tried to upgrade to latest version, with same results, so now we downgraded to our last stable situation, running clamav and milter version 0.83, and sendmail 8.12.8. Basically what happens is that clamav-milter dies, and then sendmail starts to refuse commands. I believe it is a 3 face thing. First it is common to see logs like this one, but mail still works: May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): read returned -1: Connection reset by remote.host.com May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): init failed to open May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter: initialization failed, rejecting commands Some minutes laters, we start to see: May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): to error state May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter: initialization failed, rejecting commands May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): to error state When it finally dies, we see: May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): write(D) returned -1, expected 5: Broken pipe May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter: [EMAIL PROTECTED], reject=550 5.7.1 Command rejected May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): local socket name /var/clamav/clmilter.socket unsafe May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter: initialization failed, rejecting commands At this point, clamav-milter is gone, and the sockets is non existant. Sendmail accepts connections, but refuses to receive any command. If we restart clamav-milter, it works again smoothly for about 3-6 hours. Any clue? Please let us know what other information might me useful to debug this. The relevant configuration parts are: clamd.conf: PidFile /var/run/clamav/clamd.pid LocalSocket /var/run/clamav/clamd.sock /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=240 --force-scan --quiet --dont-log-clean --noreject --dont-scan-on-error -ol local:/var/clamav/clmilter.socket /etc/mail/sendmail.cf: Xclamav, S=local:/var/clamav/clmilter.socket, F=R, T=S:10m;R:10m;E:10m 10 minutes is very high for the timeouts. ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Clamav-milter dies after working ok for some hours
Hi. The OS is RedHat 9 whit 2.4.21-27.ELsmp kernel. And the server is a IBM X235 whit 6 SCSI 360 36Gb. (in raid5 by software) The processors are 2 Intel(R) XEON(TM) CPU 1.80GHz. Have 2Gb of RAM and cero swap used. Thanks Jose I. Callero On Monday 23 May 2005 02:53 am, Damian Menscher wrote: On Sun, 22 May 2005, [EMAIL PROTECTED] wrote: We have a fairly big sendmail+clamav+clamav-milter setup, with 15000+ accounts. What OS (be specific) and hardware? Do the failures have a strong time correlation with database updates? Damian Menscher ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Clamav-milter dies after working ok for some hours
Hi. I try this option, but i still have the same problem... Thanks JCallero On Monday 23 May 2005 02:46 am, George Chelidze wrote: [EMAIL PROTECTED] wrote: Hi We have a fairly big sendmail+clamav+clamav-milter setup, with 15000+ accounts. Since last week we are experimenting several errors with this combination. Tried to upgrade to latest version, with same results, so now we downgraded to our last stable situation, running clamav and milter version 0.83, and sendmail 8.12.8. Basically what happens is that clamav-milter dies, and then sendmail starts to refuse commands. I believe it is a 3 face thing. First it is common to see logs like this one, but mail still works: May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): read returned -1: Connection reset by remote.host.com May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): init failed to open May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter: initialization failed, rejecting commands Some minutes laters, we start to see: May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): to error state May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter: initialization failed, rejecting commands May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): to error state When it finally dies, we see: May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): write(D) returned -1, expected 5: Broken pipe May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter: [EMAIL PROTECTED], reject=550 5.7.1 Command rejected May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): local socket name /var/clamav/clmilter.socket unsafe May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter: initialization failed, rejecting commands At this point, clamav-milter is gone, and the sockets is non existant. Sendmail accepts connections, but refuses to receive any command. If we restart clamav-milter, it works again smoothly for about 3-6 hours. Any clue? Please let us know what other information might me useful to debug this. The relevant configuration parts are: clamd.conf: PidFile /var/run/clamav/clamd.pid LocalSocket /var/run/clamav/clamd.sock /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=240 --force-scan --quiet --dont-log-clean --noreject --dont-scan-on-error -ol local:/var/clamav/clmilter.socket /etc/mail/sendmail.cf: Xclamav, S=local:/var/clamav/clmilter.socket, F=R, T=S:10m;R:10m;E:10m Thanks. ___ http://lurker.clamav.net/list/clamav-users.html try --external Best Regards, ___ http://lurker.clamav.net/list/clamav-users.html
[Clamav-users] Clamav-milter dies after working ok for some hours
Hi We have a fairly big sendmail+clamav+clamav-milter setup, with 15000+ accounts. Since last week we are experimenting several errors with this combination. Tried to upgrade to latest version, with same results, so now we downgraded to our last stable situation, running clamav and milter version 0.83, and sendmail 8.12.8. Basically what happens is that clamav-milter dies, and then sendmail starts to refuse commands. I believe it is a 3 face thing. First it is common to see logs like this one, but mail still works: May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): read returned -1: Connection reset by remote.host.com May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): init failed to open May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter: initialization failed, rejecting commands Some minutes laters, we start to see: May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): to error state May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter: initialization failed, rejecting commands May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): to error state When it finally dies, we see: May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): write(D) returned -1, expected 5: Broken pipe May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter: [EMAIL PROTECTED], reject=550 5.7.1 Command rejected May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): local socket name /var/clamav/clmilter.socket unsafe May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter: initialization failed, rejecting commands At this point, clamav-milter is gone, and the sockets is non existant. Sendmail accepts connections, but refuses to receive any command. If we restart clamav-milter, it works again smoothly for about 3-6 hours. Any clue? Please let us know what other information might me useful to debug this. The relevant configuration parts are: clamd.conf: PidFile /var/run/clamav/clamd.pid LocalSocket /var/run/clamav/clamd.sock /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=240 --force-scan --quiet --dont-log-clean --noreject --dont-scan-on-error -ol local:/var/clamav/clmilter.socket /etc/mail/sendmail.cf: Xclamav, S=local:/var/clamav/clmilter.socket, F=R, T=S:10m;R:10m;E:10m Thanks. ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Clamav-milter dies after working ok for some hours
[EMAIL PROTECTED] wrote: Hi We have a fairly big sendmail+clamav+clamav-milter setup, with 15000+ accounts. Since last week we are experimenting several errors with this combination. Tried to upgrade to latest version, with same results, so now we downgraded to our last stable situation, running clamav and milter version 0.83, and sendmail 8.12.8. Basically what happens is that clamav-milter dies, and then sendmail starts to refuse commands. I believe it is a 3 face thing. First it is common to see logs like this one, but mail still works: May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): read returned -1: Connection reset by remote.host.com May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): init failed to open May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter (clamav): to error state May 21 05:16:14 smtp sendmail[32374]: j4L8F5qX032374: Milter: initialization failed, rejecting commands Some minutes laters, we start to see: May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter (clamav): to error state May 21 05:32:01 smtp sendmail[5757]: j4L8R3qX005757: Milter: initialization failed, rejecting commands May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): error connecting to filter: Connection refused by /var/clamav/clmilter.socket May 21 05:32:01 smtp sendmail[6018]: j4L8RRqX006018: Milter (clamav): to error state When it finally dies, we see: May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): write(D) returned -1, expected 5: Broken pipe May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[16664]: j4L7kBqY016664: Milter: [EMAIL PROTECTED], reject=550 5.7.1 Command rejected May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): local socket name /var/clamav/clmilter.socket unsafe May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter (clamav): to error state May 21 05:55:34 smtp sendmail[18695]: j4L8tYqX018695: Milter: initialization failed, rejecting commands At this point, clamav-milter is gone, and the sockets is non existant. Sendmail accepts connections, but refuses to receive any command. If we restart clamav-milter, it works again smoothly for about 3-6 hours. Any clue? Please let us know what other information might me useful to debug this. The relevant configuration parts are: clamd.conf: PidFile /var/run/clamav/clamd.pid LocalSocket /var/run/clamav/clamd.sock /etc/sysconfig/clamav-milter: CLAMAV_FLAGS= --config-file=/etc/clamd.conf --max-children=240 --force-scan --quiet --dont-log-clean --noreject --dont-scan-on-error -ol local:/var/clamav/clmilter.socket /etc/mail/sendmail.cf: Xclamav, S=local:/var/clamav/clmilter.socket, F=R, T=S:10m;R:10m;E:10m Thanks. ___ http://lurker.clamav.net/list/clamav-users.html try --external Best Regards, -- George Chelidze ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Clamav-milter dies after working ok for some hours
On Sun, 22 May 2005, [EMAIL PROTECTED] wrote: We have a fairly big sendmail+clamav+clamav-milter setup, with 15000+ accounts. What OS (be specific) and hardware? Do the failures have a strong time correlation with database updates? Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] clamav-milter dies, mail goes through un scanned.
On Thu, 1 Apr 2004, Christopher X. Candreva wrote: I've noticed that if clamd dies, clamav-milter returns a 4.x.x error so mail is queued up. However, it clamav-milter itself dies, such that the milter socket isn't there, sendmail logs an error but mail continues through unscanned. Is there a way to set up the milter so that mail receives a similar 4xx error and is queued ? Your answer lies in the sendmail docs decribing how to use a milter, or, alternatively, in the email Jason Williams sent to this list 3.5 hours ago. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers: |#=- -=#| UIUC CITES Security Group || Beckman Imaging Technology Group |#=- --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter dies after database update.
Orion Poplawski wrote: This doesn't happen all the time, but about once a week. Running clamav 0.67. clamav/clamav-update.log.1:ClamAV update process started at Sat Mar 6 04:03:23 2004 clamav/clamd.log.2:Sat Mar 6 04:10:13 2004 - Reading databases from /var/lib/clamav clamav/clamd.log.2:Sat Mar 6 04:10:13 2004 - Database correctly reloaded (20388 viruses) clamav/clamd.log.2:Sat Mar 6 04:26:25 2004 - SelfCheck: Database status OK. clamav/clamd.log.2:Sat Mar 6 04:40:33 2004 - Session 0 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:34 2004 - Session 1 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:35 2004 - Session 2 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:36 2004 - Session 3 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:37 2004 - Session 4 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:38 2004 - Session 5 stopped due to timeout. I had this problem until I updated to the CVS version, haven't had it happen since. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] clamav-milter dies after database update.
This doesn't happen all the time, but about once a week. Running clamav 0.67. clamav/clamav-update.log.1:ClamAV update process started at Sat Mar 6 04:03:23 2004 clamav/clamd.log.2:Sat Mar 6 04:10:13 2004 - Reading databases from /var/lib/clamav clamav/clamd.log.2:Sat Mar 6 04:10:13 2004 - Database correctly reloaded (20388 viruses) clamav/clamd.log.2:Sat Mar 6 04:26:25 2004 - SelfCheck: Database status OK. clamav/clamd.log.2:Sat Mar 6 04:40:33 2004 - Session 0 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:34 2004 - Session 1 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:35 2004 - Session 2 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:36 2004 - Session 3 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:37 2004 - Session 4 stopped due to timeout. clamav/clamd.log.2:Sat Mar 6 04:40:38 2004 - Session 5 stopped due to timeout. Mar 6 04:09:17 earth sendmail[23420]: i26B5Fkq023420: Milter (clmilter): timeout before d ata read Mar 6 04:09:17 earth sendmail[23420]: i26B5Fkq023420: Milter (clmilter): to error state If there is any additional logging I can enable that might be a help, let me know. -- Orion Poplawski System Administrator 303-415-9701 x222 Colorado Research Associates/NWRA FAX: 303-415-9702 3380 Mitchell Lane, Boulder CO 80301 http://www.co-ra.com --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter dies after database update.
On Mon, 08 Mar 2004 09:49:17 -0700 Orion Poplawski [EMAIL PROTECTED] wrote: This doesn't happen all the time, but about once a week. Running clamav 0.67. Please update to the latest CVS version or wait for 0.70-rc (will be released in this week). -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon Mar 8 19:02:41 CET 2004 pgp0.pgp Description: PGP signature
RE: [Clamav-users] clamav-milter dies after reaching max-thread count
But, I posit that clamav-milter shouldn't *crash* because of it. The bug has been fixed and will in included in the 0.66 release. Orion Poplawski -Nigel --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] clamav-milter dies after reaching max-thread count
Noticed that clamav-milter wasn't running and then found the following in the logs. I'm running clamd 0.65 and clamav-milter 0.60p. I'm afraid I don't have much other information. Jan 29 04:46:18 earth clamav-milter[983]: hit max-children limit (20 = 20): waiting for some to exit Jan 29 04:46:18 earth clamav-milter[983]: clamfi_connect: connection from [62.113.89.162] [62.113.89.162] Jan 29 04:46:19 earth clamav-milter[983]: hit max-children limit (20 = 20): waiting for some to exit Jan 29 04:46:19 earth clamav-milter[983]: hit max-children limit (20 = 20): waiting for some to exit Jan 29 04:46:34 earth clamav-milter[983]: clamfi_connect: connection from [62.113.89.162] [62.113.89.162] Jan 29 04:46:34 earth clamav-milter[983]: hit max-children limit (20 = 20): waiting for some to exit Jan 29 04:46:41 earth clamav-milter[983]: clamfi_connect: connection from escom-gw.customer.0rbitel.net [195.24.44.213] Jan 29 04:46:41 earth clamav-milter[983]: hit max-children limit (20 = 20): waiting for some to exit Jan 29 04:47:18 earth clamav-milter[983]: Timeout waiting for a child to die Jan 29 04:47:34 earth clamav-milter[983]: Timeout waiting for a child to die Jan 29 04:47:41 earth clamav-milter[983]: Timeout waiting for a child to die Jan 29 04:47:44 earth clamav-milter[983]: clamfi_connect: connection from 82-36-32-123.cable.ubr03.smal.blueyonder.co.uk [82.36.32.123] Jan 29 04:47:45 earth clamav-milter[983]: hit max-children limit (24 = 20): waiting for some to exit Jan 29 04:48:23 earth clamav-milter[983]: clamfi_connect: connection from 217-165-200.adsl.tele2.no [193.217.165.200] Jan 29 04:48:23 earth clamav-milter[983]: hit max-children limit (24 = 20): waiting for some to exit Jan 29 04:48:25 earth clamav-milter[983]: clamfi_connect: connection from [62.117.66.66] [62.117.66.66] Jan 29 04:48:26 earth clamav-milter[983]: hit max-children limit (24 = 20): waiting for some to exit Jan 29 04:48:32 earth clamav-milter[983]: clamfi_connect: connection from ellada.com.ua [193.138.84.106] Jan 29 04:48:37 earth clamav-milter[983]: clamfi_connect: connection from [62.117.66.66] [62.117.66.66] Jan 29 04:48:37 earth clamav-milter[983]: hit max-children limit (24 = 20): waiting for some to exit Jan 29 04:48:42 earth clamav-milter[983]: clamfi_connect: connection from [62.32.51.198] [62.32.51.198] Jan 29 04:48:44 earth clamav-milter[983]: hit max-children limit (24 = 20): waiting for some to exit Jan 29 04:48:45 earth clamav-milter[983]: Timeout waiting for a child to die Jan 29 04:48:47 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:48:48 earth clamav-milter[983]: clamfi_connect: connection from [62.117.66.66] [62.117.66.66] Jan 29 04:48:48 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:48:58 earth clamav-milter[983]: clamfi_connect: connection from ds81-30-200-53.ufanet.ru [81.30.200.53] Jan 29 04:48:59 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:49:00 earth clamav-milter[983]: clamfi_connect: connection from ellada.com.ua [193.138.84.106] Jan 29 04:49:04 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:49:09 earth clamav-milter[983]: clamfi_connect: connection from [62.117.66.66] [62.117.66.66] Jan 29 04:49:09 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:49:11 earth clamav-milter[983]: clamfi_connect: connection from ds81-30-200-53.ufanet.ru [81.30.200.53] Jan 29 04:49:12 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:49:12 earth clamav-milter[983]: clamfi_connect: connection from [62.32.51.198] [62.32.51.198] Jan 29 04:49:13 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:49:20 earth clamav-milter[983]: clamfi_connect: connection from [64.243.77.136] [64.243.77.136] Jan 29 04:49:20 earth clamav-milter[983]: hit max-children limit (25 = 20): waiting for some to exit Jan 29 04:49:23 earth clamav-milter[983]: Timeout waiting for a child to die Jan 29 04:49:25 earth clamav-milter[983]: clamfi_connect: connection from [62.32.51.198] [62.32.51.198] Jan 29 04:49:26 earth clamav-milter[983]: Timeout waiting for a child to die Jan 29 04:49:26 earth clamav-milter[983]: hit max-children limit (27 = 20): waiting for some to exit Jan 29 04:49:37 earth sendmail[17144]: i0TBnbQU017144: Milter (clmilter): error connecting to filter: Connection refused by /var/run/clamav/clamav-milter.sock -- Orion Poplawski System Administrator 303-415-9701 x222 Colorado Research Associates/NWRA FAX: 303-415-9702 3380 Mitchell Lane, Boulder CO 80301 http://www.co-ra.com --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the
Re: [Clamav-users] clamav-milter dies after reaching max-thread count
On Fri, 30 Jan 2004, Orion Poplawski wrote: Noticed that clamav-milter wasn't running and then found the following in the logs. I'm running clamd 0.65 and clamav-milter 0.60p. I'm afraid I don't have much other information. Jan 29 04:46:18 earth clamav-milter[983]: hit max-children limit (20 = 20): waiting for some to exit Jan 29 04:46:18 earth clamav-milter[983]: clamfi_connect: connection from [62.113.89.162] [62.113.89.162] Jan 29 04:46:19 earth clamav-milter[983]: hit max-children limit (20 = 20): waiting for some to exit That is due to hi traffic of SCO virus. Increase max-children in CLAMAV_FLAGS of clamav-milter . Try with 40 Best Regards - Germán González PoderNet León http://leon.podernet.com.mx - --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter dies after reaching max-thread count
[EMAIL PROTECTED] wrote: That is due to hi traffic of SCO virus. Increase max-children in CLAMAV_FLAGS of clamav-milter . Try with 40 I understand why it hit the limit, and I'm happy to increase it. But, I posit that clamav-milter shouldn't *crash* because of it. -- Orion Poplawski System Administrator 303-415-9701 x222 Colorado Research Associates/NWRA FAX: 303-415-9702 3380 Mitchell Lane, Boulder CO 80301 http://www.co-ra.com --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter dies (still)
On Saturday 15 Nov 2003 6:27 pm, J.D. Bronson wrote: Using: clamav-devel-20031114 Where: clamav-milter -V ClamAV version devel-20031114, clamav-milter version 0.60p I am running on solaris9 and clam* built very well. Clamd does not die and the log files look good. Please try running it in the foreground and note any errors that you see. -Nigel --- This SF. Net email is sponsored by: GoToMyPC GoToMyPC is the fast, easy and secure way to access your computer from any Web browser or wireless device. Click here to Try it Free! https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] clamav-milter dies (still)
At 12:49 AM 11/17/2003, you wrote: On Saturday 15 Nov 2003 6:27 pm, J.D. Bronson wrote: Using: clamav-devel-20031114 Where: clamav-milter -V ClamAV version devel-20031114, clamav-milter version 0.60p I am running on solaris9 and clam* built very well. Clamd does not die and the log files look good. Please try running it in the foreground and note any errors that you see. -Nigel When run in the foreground (I think I got that to work) - the program will not die. I used a config file just like I did for clamd (/etc/clamav.conf) and set the Run in foreground option. Unless there is another way to run it in the foreground, it will not die. -- J.D. Bronson - The Cisco Kid Aurora Health Care // Information Services // Milwaukee, WI USA Office: 414.978.8282 // Fax: 414.328.8282 // Pager: 414.314.8282 --- This SF. Net email is sponsored by: GoToMyPC GoToMyPC is the fast, easy and secure way to access your computer from any Web browser or wireless device. Click here to Try it Free! https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] clamav-milter dies (still)
Using: clamav-devel-20031114 Where: clamav-milter -V ClamAV version devel-20031114, clamav-milter version 0.60p I am running on solaris9 and clam* built very well. Clamd does not die and the log files look good. I tried this on 11/14 - I ran only the clamav-milter program without any sendmail running nor integrated. So in otherwords, nothing would actually be using or calling clamav-milter. I started it as root as: clamav-milter -blo /var/run/clmilter.sock ..the socket DOES get created and all 'seems' well and then at some point it vanishes from running and exits with NO error. (no one else has any access to this machine but me..) How can I help someone troubleshoot this? - this is a great program (if I could get it to run!) -- J.D. Bronson - The Cisco Kid Aurora Health Care // Information Services // Milwaukee, WI USA Office: 414.978.8282 // Fax: 414.328.8282 // Pager: 414.314.8282 --- This SF. Net email is sponsored by: GoToMyPC GoToMyPC is the fast, easy and secure way to access your computer from any Web browser or wireless device. Click here to Try it Free! https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
