Re: [qmailtoaster] ClamAV 0.99.3

[Eric Broch]

And, Jeff

This DOES fix the problem.


On 1/27/2018 12:37 AM, Eric Broch wrote:


The patched 0.99.3-2 version...
The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) are 
available for download or you can use Yum with the 
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-2.qt.el7.x86_64.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-2.qt.el7.src.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-2.qt.el6.x86_64.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-2.qt.el6.i686.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-2.qt.el6.src.rpm 




Eric


On 1/26/2018 10:20 PM, Chris wrote:
I installed your 0.99.3 package on CentOS 7 a couple of hours ago, 
and I am no longer seeing a buildup of orphaned filehandles in my 
lsof output.


YMMV

-Chris



On Fri, Jan 26, 2018 at 6:20 PM, Eric Broch > wrote:


No. I'm going to have to patch it...ugh!

Patch is here:


https://src.fedoraproject.org/rpms/clamav/blob/master/f/clamav-0.99.2-temp-cleanup.patch




On 1/26/2018 6:44 PM, Jeff Koch wrote:

Eric - does anyone know if this solves the problem?  Jeff

On 1/26/2018 8:37 PM, Eric Broch wrote:

Hello list members,

The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7
(x86_64) are available for download or you can use Yum with the
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm





Eric



-

To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com









--
Eric Broch
White Horse Technical Consulting (WHTC)


--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] ClamAV 0.99.3

[Eric Broch]

The patched 0.99.3-2 version...
The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) are 
available for download or you can use Yum with the 
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-2.qt.el7.x86_64.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-2.qt.el7.src.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-2.qt.el6.x86_64.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-2.qt.el6.i686.rpm 



ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-2.qt.el6.src.rpm 




Eric


On 1/26/2018 10:20 PM, Chris wrote:
I installed your 0.99.3 package on CentOS 7 a couple of hours ago, and 
I am no longer seeing a buildup of orphaned filehandles in my lsof output.


YMMV

-Chris



On Fri, Jan 26, 2018 at 6:20 PM, Eric Broch > wrote:


No. I'm going to have to patch it...ugh!

Patch is here:


https://src.fedoraproject.org/rpms/clamav/blob/master/f/clamav-0.99.2-temp-cleanup.patch




On 1/26/2018 6:44 PM, Jeff Koch wrote:

Eric - does anyone know if this solves the problem?  Jeff

On 1/26/2018 8:37 PM, Eric Broch wrote:

Hello list members,

The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7
(x86_64) are available for download or you can use Yum with the
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm





ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm





Eric



-

To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com









--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] ClamAV 0.99.3

[Chris]

I installed your 0.99.3 package on CentOS 7 a couple of hours ago, and I am
no longer seeing a buildup of orphaned filehandles in my lsof output.

YMMV

-Chris



On Fri, Jan 26, 2018 at 6:20 PM, Eric Broch  wrote:

> No. I'm going to have to patch it...ugh!
>
> Patch is here:
>
> https://src.fedoraproject.org/rpms/clamav/blob/master/f/clamav-0.99.2-temp-cleanup.patch
>
>
> On 1/26/2018 6:44 PM, Jeff Koch wrote:
>
> Eric - does anyone know if this solves the problem?  Jeff
>
> On 1/26/2018 8:37 PM, Eric Broch wrote:
>
> Hello list members,
>
> The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) are
> available for download or you can use Yum with the --enablerepo=qmt-testing
> option
>
> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/
> x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm
>
> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/
> SRPMS/clamav-0.99.3-1.qt.el7.src.rpm
>
> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/
> x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm
>
> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/
> i386/clamav-0.99.3-1.qt.el6.i686.rpm
>
> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/
> SRPMS/clamav-0.99.3-1.qt.el6.src.rpm
>
>
> Eric
>
>
>
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>
>
>
>

Re: [qmailtoaster] ClamAV 0.99.3

[Sean P. Murphy]

This would explain why I was still seeing the soft reject errors even after the 
signature fix.

So, build  this fix from SRPM as we would any new version of Clam?  Or is there 
a different procedure?

-Sean

> On Jan 26, 2018, at 9:20 PM, Eric Broch  wrote:
> 
> No. I'm going to have to patch it...ugh!
> 
> Patch is here:
> 
> https://src.fedoraproject.org/rpms/clamav/blob/master/f/clamav-0.99.2-temp-cleanup.patch
> 
>> On 1/26/2018 6:44 PM, Jeff Koch wrote:
>> Eric - does anyone know if this solves the problem?  Jeff
>> 
>>> On 1/26/2018 8:37 PM, Eric Broch wrote:
>>> Hello list members, 
>>> 
>>> The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) are 
>>> available for download or you can use Yum with the --enablerepo=qmt-testing 
>>> option 
>>> 
>>> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm
>>>  
>>> 
>>> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm
>>>  
>>> 
>>> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm
>>>  
>>> 
>>> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm
>>>  
>>> 
>>> ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm
>>>  
>>> 
>>> 
>>> Eric 
>>> 
>>> 
>>> 
>>> - 
>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
>>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 
>>> 
>> 
> 

Re: [qmailtoaster] ClamAV 0.99.3

[Eric Broch]

No. I'm going to have to patch it...ugh!

Patch is here:

https://src.fedoraproject.org/rpms/clamav/blob/master/f/clamav-0.99.2-temp-cleanup.patch


On 1/26/2018 6:44 PM, Jeff Koch wrote:

Eric - does anyone know if this solves the problem?  Jeff

On 1/26/2018 8:37 PM, Eric Broch wrote:

Hello list members,

The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) 
are available for download or you can use Yum with the 
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm 




Eric



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Fwd: FW: [clamav-users] ClamAV® blog: Update on the recent File Descriptors issue in ClamAV

[Eric Broch]

eric

here is the culprit -- one of my servers has high traffic, and this issue was 
prevalent for the past over an year. i have simscan disabled on this server for 
the past over 1 year.

rajesh

- Original Message -
From: Joel Esler (jesler) [mailto:jes...@cisco.com]
To: clamav-us...@lists.clamav.net,clamav-de...@lists.clamav.net
Sent: Fri, 26 Jan 2018 20:14:45 +
Subject:



http://blog.clamav.net/2018/01/update-on-recent-file-descriptors-issue.html

Update on the recent "File Descriptors" issue in ClamAV
A signature introduced in daily.cvd version 24256 triggered bug that exists in 
all current stable releases of ClamAV.

The symptoms on a Linux/Unix machine running clamd under heavy load results in 
the system running out of file descriptors, because the file descriptors for 
deleted temp files were not being closed.  On Windows systems, a different 
error occurred wherein the system reported “permission denied” errors when 
closing (unlinking) the temp files.

The bug was reported as early as April 2016 here: 
https://bugzilla.clamav.net/show_bug.cgi?id=11549. A patch for this bug was 
applied towards the upcoming 0.100.0 feature release of ClamAV, but 
unfortunately the fix didn’t make it into the recent 0.99.3 security patch 
release.

For the time-being, the offending signature was pulled as of daily.cvd version 
24258, and changes to our backend processes have been implemented to prevent 
this from happening again.

We apologize for the inconvenience this has caused. Future releases of ClamAV 
will have a fix in place to prevent this issue from reocurring.



--
Joel Esler | Talos: Manager | jes...@cisco.com






___
clamav-users mailing list
clamav-us...@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ClamAV 0.99.3

[Eric Broch]

Are many people STILL experiencing these problems even after the ClamAV 
DB fix?


One could only hope 0.99.3 solves it, but...

These are the issues it covers according to Johannes W.'s email to the list:

- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname 
Vulnerability)

  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument 
Vulnerability)

    - these vulnerabilities could have allowed an unauthenticated,
  remote attacker to cause a denial of service (DoS) condition
  or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
    - these vulnerabilities could have allowed an unauthenticated,
  remote attacker to cause a denial of service (DoS) condition on 
an affected device.

  * CVE-2017-6420 (bsc#1052448)
    - this vulnerability allowed remote attackers to cause a denial of 
service

  (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
    - ClamAV allowed remote attackers to cause a denial of service
  (heap-based buffer overflow and application crash) or possibly
  have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
    - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
  allowed remote attackers to cause a denial of service
  (stack-based buffer over-read and application crash) via a 
crafted CAB file.

  * CVE-2017-6418 (bsc#1052466)
    - ClamAV 0.99.2 allowed remote attackers to cause a denial
  of service (out-of-bounds read) via a crafted e-mail message.


On 1/26/2018 6:44 PM, Jeff Koch wrote:

Eric - does anyone know if this solves the problem?  Jeff

On 1/26/2018 8:37 PM, Eric Broch wrote:

Hello list members,

The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) 
are available for download or you can use Yum with the 
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm 




Eric



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] 回覆︰ [qmailtoaster] ClamAV 0.99.3

[Henry]

Eric,

I need for Centos 5 version ClamAV, pls help 

Eric Broch  於 2018年01月27日 (週六) 9:38 AM 寫道﹕
 

 Hello list members,

The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) are 
available for download or you can use Yum with the 
--enablerepo=qmt-testing option

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm


Eric



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



   

Re: [qmailtoaster] ClamAV 0.99.3

[Jeff Koch]

Eric - does anyone know if this solves the problem?  Jeff

On 1/26/2018 8:37 PM, Eric Broch wrote:

Hello list members,

The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) are 
available for download or you can use Yum with the 
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm 



ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm 




Eric



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] ClamAV 0.99.3

[Eric Broch]

Hello list members,

The ClamAV 0.99.3 RPMS/SRPMS for COS 6 (i386, x86_64) & 7 (x86_64) are 
available for download or you can use Yum with the 
--enablerepo=qmt-testing option


ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/x86_64/clamav-0.99.3-1.qt.el7.x86_64.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/7/testing/SRPMS/clamav-0.99.3-1.qt.el7.src.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/clamav-0.99.3-1.qt.el6.x86_64.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/i386/clamav-0.99.3-1.qt.el6.i686.rpm

ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/clamav-0.99.3-1.qt.el6.src.rpm


Eric



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Sean Murphy]

Just tried the new version and simscan still throws up the soft reject 
error, so that did not, in fact, fix the problem.



On 1/26/2018 1:08 PM, Michele Federici wrote:

Hi,

A new versione was released 24258
http://lists.clamav.net/pipermail/clamav-virusdb/2018-January/thread.html

Other news from clamav

http://lists.clamav.net/pipermail/clamav-users/2018-January/005737.html

Thank you all

--
Michele Federici
Polo Telematico Avantgarde S.r.l.
Passaggio Ungaretti n.4, 24020 Gorle BG
Web:www.ptavant.it

Tel: +39 035 657510 (09.00-12.00 15.00-18.30)
Fax: +39 035 657515

Il 26/01/2018 18:31, Eric Broch ha scritto:
>
> I think you're right...a server that all of a sudden stops working with no 
> changes except clamav definitions

>
>
> On 1/26/2018 10:16 AM, Jeff Koch wrote:
>> Hi - I don't think this has anything to do with the problem - the ClamAV team 
>> at Cisco released a buggy set of definitions last night and they need patch 
>> that before ClamAV works properly again. Plus they need to fix the clamav 
>> code so that a buggy set of definitions will fall back to something that 
>> won't kill a mailserver.

>>
>> http://lists.clamav.net/pipermail/clamav-users/2018-January/005687.html
>>
>> Jeff
>>
>> On 1/26/2018 11:38 AM, Remo Mattei wrote:
>>> Here is what is mine set to
>>>
>>> -rws--x--x  1 clamav root   34774 Apr  6  2016 simscan
>>>
>>> And increased the exec /usr/bin/softlimit -m 6400 \
>>>
>>> All good here.
>>>
>>> Remo
>>>
 On Jan 26, 2018, at 11:55 AM, Havrla > wrote:


 Can't create temporary file
>>>
>>
>
> -- 
> Eric Broch

> White Horse Technical Consulting (WHTC)

- To
unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For
additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Current simscan problems due to clamav issues

[Johannes Weberhofer]

Dear all!

I have seen the same issues as you have seen today. Attackers send e-mails 
containing PDFs causing DoS problems.

German readers might read 
https://www.heise.de/security/meldung/Jetzt-patchen-Angriffe-auf-Viren-Scanner-ClamAV-3951801.html

Everyone should update to 0.99.3 asap. This is openSUSEs current log for the 
latest clamav version covering several issues:

- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
- these vulnerabilities could have allowed an unauthenticated,
  remote attacker to cause a denial of service (DoS) condition
  or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
- these vulnerabilities could have allowed an unauthenticated,
  remote attacker to cause a denial of service (DoS) condition on an 
affected device.
  * CVE-2017-6420 (bsc#1052448)
- this vulnerability allowed remote attackers to cause a denial of service
  (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
- ClamAV allowed remote attackers to cause a denial of service
  (heap-based buffer overflow and application crash) or possibly
  have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
- The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
  allowed remote attackers to cause a denial of service
  (stack-based buffer over-read and application crash) via a crafted CAB 
file.
  * CVE-2017-6418 (bsc#1052466)
- ClamAV 0.99.2 allowed remote attackers to cause a denial
  of service (out-of-bounds read) via a crafted e-mail message.


--
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Michele Federici]

  
  
Hi,
A new versione was released
  24258
  http://lists.clamav.net/pipermail/clamav-virusdb/2018-January/thread.html
Other news from clamav

http://lists.clamav.net/pipermail/clamav-users/2018-January/005737.html
Thank you all

-- 
Michele Federici
Polo Telematico Avantgarde S.r.l.
Passaggio Ungaretti n.4, 24020 Gorle BG
Web: www.ptavant.it

Tel: +39 035 657510 (09.00-12.00 15.00-18.30)
Fax: +39 035 657515 
Il 26/01/2018 18:31, Eric Broch ha
  scritto:


  
  I think you're right...a server that all of a sudden stops
working with no changes except clamav definitions
  
  
  On 1/26/2018 10:16 AM, Jeff Koch
wrote:
  
  

Hi - I don't think
  this has anything to do with the problem - the ClamAV team at
  Cisco released a buggy set of definitions last night and they
  need patch that before ClamAV works properly again. Plus they
  need to fix the clamav code so that a buggy set of definitions
  will fall back to something that won't kill a mailserver. 

http://lists.clamav.net/pipermail/clamav-users/2018-January/005687.html

Jeff

On 1/26/2018 11:38 AM, Remo Mattei
  wrote:


  
  Here is what is mine set to
  
  
  -rws--x--x  1 clamav root   34774 Apr  6  2016
simscan
  
  
  And increased the exec /usr/bin/softlimit -m
6400 \
  
  
  All good here. 
  
  
  Remo 

  
On Jan 26, 2018, at 11:55 AM, Havrla 
  wrote:

Can't create temporary file 
  


  


  
  
  -- 
Eric Broch
White Horse Technical Consulting (WHTC)



  


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[hav...@lhotkanet.cz]

Run  lsofH. Odesláno z mobil. zařízení Huawei Původní zpráva Předmět: Re: [qmailtoaster] clamav KO - ERROR: accept() failedOdesílatel: Remo Mattei Komu: qmailtoaster-list@qmailtoaster.comKopie: I remember that my qmail7 is running on mem simscan-disk            /var/qmail/simscan      tmpfs size=5100M,nodev,noexec,noatime,uid=46,gid=46,mode=2750 0 0Wonder if that does anything since I do not have any /tmp/clamav stuffOn Jan 26, 2018, at 6:00 PM, Havrla  wrote:
  

  
  
Remo:
  
  Good
  Temporarily 
  
  ClamAV not close file descriptor:
  
  lsof | grep clamav | grep delete
  
  more more more
  clamd 160821 171659    clamav   26u  REG 
  253,0   2  672063
  /tmp/clamav-6066a4d288b5c900926781c172bc116b.tmp (deleted)
  clamd 160821 171659    clamav   27u  REG 
  253,0  23  672065
  /tmp/clamav-b4caea19b543ad25e02fa960a92f0aa2.tmp (deleted)
  clamd 160821 171659    clamav   28u  REG 
  253,0   2  672066
  /tmp/clamav-fb78c6f53c4d6a6b8ac253e6621fa3a9.tmp (deleted)
  clamd 160821 171659    clamav   29u  REG 
  253,0  23  672068
  /tmp/clamav-a52275713035f14c03d3193879a5a164.tmp (deleted)
  more more more
  [root@tonda clamav]# 
  
  
  Havrla

  
  Dne 26.1.2018 v 17:38 Remo Mattei napsal(a):

Here is what is mine set to
  
  
  -rws--x--x  1 clamav root   34774 Apr  6  2016
simscan
  
  
  And increased the exec /usr/bin/softlimit -m
6400 \
  
  
  All good here. 
  
  
  Remo 


  

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Remo Mattei]

I remember that my qmail7 is running on mem 

simscan-disk/var/qmail/simscan  tmpfs 
size=5100M,nodev,noexec,noatime,uid=46,gid=46,mode=2750 0 0

Wonder if that does anything since I do not have any /tmp/clamav stuff



> On Jan 26, 2018, at 6:00 PM, Havrla  wrote:
> 
> Remo:
> 
> Good Temporarily 
> 
> ClamAV not close file descriptor:
> 
> lsof | grep clamav | grep delete
> 
> more more more
> clamd 160821 171659clamav   26u  REG  253,0   
> 2  672063 /tmp/clamav-6066a4d288b5c900926781c172bc116b.tmp (deleted)
> clamd 160821 171659clamav   27u  REG  253,0  
> 23  672065 /tmp/clamav-b4caea19b543ad25e02fa960a92f0aa2.tmp (deleted)
> clamd 160821 171659clamav   28u  REG  253,0   
> 2  672066 /tmp/clamav-fb78c6f53c4d6a6b8ac253e6621fa3a9.tmp (deleted)
> clamd 160821 171659clamav   29u  REG  253,0  
> 23  672068 /tmp/clamav-a52275713035f14c03d3193879a5a164.tmp (deleted)
> more more more
> [root@tonda clamav]# 
> 
> 
> Havrla
> 
> 
> Dne 26.1.2018 v 17:38 Remo Mattei napsal(a):
>> Here is what is mine set to
>> 
>> -rws--x--x  1 clamav root   34774 Apr  6  2016 simscan
>> 
>> And increased the exec /usr/bin/softlimit -m 6400 \
>> 
>> All good here. 
>> 
>> Remo 
> 

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Eric Broch]

I think you're right...a server that all of a sudden stops working with 
no changes except clamav definitions



On 1/26/2018 10:16 AM, Jeff Koch wrote:
Hi - I don't think this has anything to do with the problem - the 
ClamAV team at Cisco released a buggy set of definitions last night 
and they need patch that before ClamAV works properly again. Plus they 
need to fix the clamav code so that a buggy set of definitions will 
fall back to something that won't kill a mailserver.


http://lists.clamav.net/pipermail/clamav-users/2018-January/005687.html

Jeff

On 1/26/2018 11:38 AM, Remo Mattei wrote:

Here is what is mine set to

-rws--x--x  1 clamav root   34774 Apr  6  2016 simscan

And increased the exec /usr/bin/softlimit -m 6400 \

All good here.

Remo

On Jan 26, 2018, at 11:55 AM, Havrla > wrote:


Can't create temporary file






--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Remo Mattei]

On my qmail centos 5 
Still good and running an older version 

ClamAV update process started at Fri Jan 26 10:29:30 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.97 Recommended version: 0.99.3
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder: 
sigmgr)
daily.cld is up to date (version: 24257, sigs: 1835982, f-level: 63, builder: 
neo)
bytecode.cld is up to date (version: 319, sigs: 75, f-level: 63, builder: neo)
[LibClamAV] ***
[LibClamAV] ***  This version of the ClamAV engine is outdated. ***
[LibClamAV] *** DON'T PANIC! Read http://www.clamav.net/support/faq ***
[LibClamAV] ***
[LibClamAV] ***
[LibClamAV] ***  This version of the ClamAV engine is outdated. ***
[LibClamAV] *** DON'T PANIC! Read http://www.clamav.net/support/faq ***
[LibClamAV] ***
Qmail  ~ vmw >current2

But no issues there either. 



> On Jan 26, 2018, at 6:16 PM, Jeff Koch  wrote:
> 
> Hi - I don't think this has anything to do with the problem - the ClamAV team 
> at Cisco released a buggy set of definitions last night and they need patch 
> that before ClamAV works properly again. Plus they need to fix the clamav 
> code so that a buggy set of definitions will fall back to something that 
> won't kill a mailserver. 
> 
> http://lists.clamav.net/pipermail/clamav-users/2018-January/005687.html 
> 
> 
> Jeff
> 
> On 1/26/2018 11:38 AM, Remo Mattei wrote:
>> Here is what is mine set to
>> 
>> -rws--x--x  1 clamav root   34774 Apr  6  2016 simscan
>> 
>> And increased the exec /usr/bin/softlimit -m 6400 \
>> 
>> All good here. 
>> 
>> Remo 
>> 
>>> On Jan 26, 2018, at 11:55 AM, Havrla >> > wrote:
>>> 
>>> Can't create temporary file 
>> 
> 

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Remo Mattei]

On Centos 7

Qmail7 clamav  >ls -al
total 244040
drwxr-xr-x   3 clamav clamav  4096 Jan 26 07:41 .
drwxr-xr-x. 47 root   root4096 Dec 16 08:17 ..
-rw-r--r--   1 clamav clamav766976 Dec  6 20:20 bytecode.cld
drwxr-xr-x   2 clamav clamav  4096 Dec  7 18:36 
clamav-abc62f88d8d32a49f443829c35db.tmp
-rw-r--r--   1 clamav clamav 131212800 Jan 26 01:41 daily.cld
-rw-r--r--   1 clamav clamav 117892267 Jul 17  2017 main.cvd
-rw---   1 clamav clamav  1144 Jan 26 07:41 mirrors.dat
Qmail7 clamav  >freshclam
'ClamAV update process started at Fri Jan 26 09:28:42 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.99.2 Recommended version: 0.99.3
DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
main.cvd is up to date (version: 58, sigs: 4566249, f-level: 60, builder: 
sigmgr)
daily.cld is up to date (version: 24257, sigs: 1835982, f-level: 63, builder: 
neo)
bytecode.cld is up to date (version: 319, sigs: 75, f-level: 63, builder: neo)
Qmail7 clamav  >’

All good here!


Remo 


> On Jan 26, 2018, at 6:16 PM, Jeff Koch  wrote:
> 
> Hi - I don't think this has anything to do with the problem - the ClamAV team 
> at Cisco released a buggy set of definitions last night and they need patch 
> that before ClamAV works properly again. Plus they need to fix the clamav 
> code so that a buggy set of definitions will fall back to something that 
> won't kill a mailserver. 
> 
> http://lists.clamav.net/pipermail/clamav-users/2018-January/005687.html 
> 
> 
> Jeff
> 
> On 1/26/2018 11:38 AM, Remo Mattei wrote:
>> Here is what is mine set to
>> 
>> -rws--x--x  1 clamav root   34774 Apr  6  2016 simscan
>> 
>> And increased the exec /usr/bin/softlimit -m 6400 \
>> 
>> All good here. 
>> 
>> Remo 
>> 
>>> On Jan 26, 2018, at 11:55 AM, Havrla >> > wrote:
>>> 
>>> Can't create temporary file 
>> 
> 

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Jeff Koch]

Hi - I don't think this has anything to do with the problem - the ClamAV 
team at Cisco released a buggy set of definitions last night and they 
need patch that before ClamAV works properly again. Plus they need to 
fix the clamav code so that a buggy set of definitions will fall back to 
something that won't kill a mailserver.


http://lists.clamav.net/pipermail/clamav-users/2018-January/005687.html

Jeff

On 1/26/2018 11:38 AM, Remo Mattei wrote:

Here is what is mine set to

-rws--x--x  1 clamav root   34774 Apr  6  2016 simscan

And increased the exec /usr/bin/softlimit -m 6400 \

All good here.

Remo

On Jan 26, 2018, at 11:55 AM, Havrla > wrote:


Can't create temporary file

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Michele Federici]

  
  
Hi,
I have the same in temp 

#ls -ila
[..]
 202457136 drwx-- 2 clamav   clamav  6 26 gen 10.51
clamav-007dd5550d9cb969386d676f774cf578.tmp
2551809303 drwx-- 2 clamav   clamav  6 26 gen 12.04
clamav-009b4151d2dd18e473124895476a503d.tmp
1677724965 drwx-- 3 clamav   clamav 20 26 gen 11.53
clamav-00a5d9051747c0f79f44319ccfc91aa7.tmp
 134460708 drwx-- 2 clamav   clamav  6 26 gen 10.09
clamav-00b78066031474f86a0f5d2e6a3261b3.tmp
2416025685 drwx-- 3 clamav   clamav 20 26 gen 09.06
clamav-00cadcd7f8e9ccc16a51394234407b3f.tmp
2619085158 drwx-- 3 clamav   clamav 20 26 gen 10.07
clamav-00cc20d58c2364c4ffa1dbd020f0aac6.tmp
 805455041 drwx-- 2 clamav   clamav  6 26 gen 10.13
clamav-00cd6395dfc6761f3f6db75d24c517ae.tmp
1476432742 drwx-- 2 clamav   clamav  6 26 gen 12.29
clamav-00d9ba3ae1314cd084a92d2148a14303.tmp
 872463799 drwx-- 2 clamav   clamav  6 26 gen 12.29
clamav-012755fc8254649eaeb3f2276a070093.tmp
2348886705 drwx-- 3 clamav   clamav 20 26 gen 10.51
clamav-012e3d16fdbe8684d80191999aac97fa.tmp
  [..]
  
 >  120  of clamav-*.tmp files 

Thank you

-- 
Michele Federici

Il 26/01/2018 18:00, Havrla ha scritto:


  
  Remo:

Good Temporarily 

ClamAV not close file descriptor:

lsof | grep clamav | grep delete

more more more
clamd 160821 171659    clamav   26u 
REG  253,0   2  672063
/tmp/clamav-6066a4d288b5c900926781c172bc116b.tmp (deleted)
clamd 160821 171659    clamav   27u 
REG  253,0  23  672065
/tmp/clamav-b4caea19b543ad25e02fa960a92f0aa2.tmp (deleted)
clamd 160821 171659    clamav   28u 
REG  253,0   2  672066
/tmp/clamav-fb78c6f53c4d6a6b8ac253e6621fa3a9.tmp (deleted)
clamd 160821 171659    clamav   29u 
REG  253,0  23  672068
/tmp/clamav-a52275713035f14c03d3193879a5a164.tmp (deleted)
more more more
[root@tonda clamav]# 


Havrla
  

Dne 26.1.2018 v 17:38 Remo Mattei napsal(a):
  
  Here is what is mine set to


-rws--x--x  1 clamav root   34774 Apr  6  2016
  simscan


And increased the exec /usr/bin/softlimit -m
  6400 \


All good here. 


Remo 
  
  
  


  


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Eric Broch]

-rw-r--r-- 1 clamav clamav    766976 Dec  6 20:54 bytecode.cld
-rw-r--r-- 1 clamav clamav 131212800 Jan 26 03:46 daily.cld
-rw-r--r-- 1 clamav clamav 307499008 Jun  7  2017 main.cld
-rw--- 1 clamav clamav  1716 Jan 26 09:46 mirrors.dat

ClamAV update process started at Fri Jan 26 10:10:06 2018
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.99.2 Recommended version: 0.99.3
DON'T PANIC! Read http://www.clamav.net/documents/upgrading-clamav
main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, 
builder: sigmgr)
daily.cld is up to date (version: 24257, sigs: 1835982, f-level: 63, 
builder: neo)
bytecode.cld is up to date (version: 319, sigs: 75, f-level: 63, 
builder: neo)


This server is working fine


On 1/26/2018 10:05 AM, Michele Federici wrote:


Hi,

I have in my centos 7

drwxr-x---   2 clamav root 6 26 gen 17.44 simscan

and

exec /usr/bin/softlimit -m 6400 \

The server configuration did not change and the anomaly start this 
morning.


What versions do you have of the virus definitions?

Jan 26 17:18:13 mailbox freshclam: daily.cld updated (version: 24257, 
sigs: 1835982, f-level: 63, builder: neo)



thank you

--
Michele Federici
Il 26/01/2018 17:46, Remo Mattei ha scritto:

Michele a me funziona con la versione che hai tu.

I have the same version and it’s all working permissions check my email

Inviato da iPhone


Il giorno 26 gen 2018, alle ore 16:47, Peter Peltonen 
 ha scritto:

First thing that comes to my mind is to check qmail directory
ownerships and permissions?


On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici  wrote:
Hi,

I have a qmail server that today returns in the smtp log "mail server
temporarily rejected message (# 4.3.0)".

Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 ->
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or
directory ERROR
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316:
Can't create new file ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or
directory ERROR
[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return "Unable to
open file or directory ERROR"

I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com


-
To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com


-
To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com




- 
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 


--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] ERROR: accept() failed

[Michele Federici]

  
  
Hi, 

I have in my centos 7 

drwxr-x---   2 clamav root 6 26 gen 17.44 simscan
  
  and

exec /usr/bin/softlimit -m 6400 \
The server configuration did not change and the anomaly start
  this morning.

What versions do you have of the virus definitions?

Jan 26 17:18:13 mailbox freshclam: daily.cld updated (version:
  24257, sigs: 1835982, f-level: 63, builder: neo)


  thank you 
-- 
Michele Federici

Il 26/01/2018 17:46, Remo Mattei ha
  scritto:


  Michele a me funziona con la versione che hai tu. 

I have the same version and it’s all working permissions check my email 

Inviato da iPhone


  
Il giorno 26 gen 2018, alle ore 16:47, Peter Peltonen  ha scritto:

First thing that comes to my mind is to check qmail directory
ownerships and permissions?



  On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici  wrote:
Hi,

I have a qmail server that today returns in the smtp log "mail server
temporarily rejected message (# 4.3.0)".

Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 ->
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or
directory ERROR
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316:
Can't create new file ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or
directory ERROR
[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return "Unable to
open file or directory ERROR"

I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


  
  

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com





  


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Sean Murphy]

Well, I spoke too soon, soft reject messages started popping up on my 
CentOS 5 server.  I have disabled ClamAV and will continue to monitor.



On 1/26/2018 11:00 AM, Eric Broch wrote:

Ahhh! ClamAV again.


On 1/26/2018 8:57 AM, Havrla wrote:

Peter:
detail my log:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files


Havrla

Dne 26.1.2018 v 16:47 Peter Peltonen napsal(a):

First thing that comes to my mind is to check qmail directory
ownerships and permissions?

On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici 
 wrote:

Hi,

I have a qmail server that today returns in the smtp log "mail server
temporarily rejected message (# 4.3.0)".

Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 ->
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: 
OK

Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open 
file or

directory ERROR
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: 
OK

Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316: 


Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316: 


Can't create new file ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open 
file or

directory ERROR
[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return 
"Unable to

open file or directory ERROR"

I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com






-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Havrla]

Remo:

Good Temporarily 

ClamAV not close file descriptor:

lsof | grep clamav | grep delete

more more more
clamd 160821 171659clamav   26u  REG 253,0   2  
672063 /tmp/clamav-6066a4d288b5c900926781c172bc116b.tmp (deleted)
clamd 160821 171659clamav   27u  REG 253,0  23  
672065 /tmp/clamav-b4caea19b543ad25e02fa960a92f0aa2.tmp (deleted)
clamd 160821 171659clamav   28u  REG 253,0   2  
672066 /tmp/clamav-fb78c6f53c4d6a6b8ac253e6621fa3a9.tmp (deleted)
clamd 160821 171659clamav   29u  REG 253,0  23  
672068 /tmp/clamav-a52275713035f14c03d3193879a5a164.tmp (deleted)

more more more
[root@tonda clamav]#


Havrla


Dne 26.1.2018 v 17:38 Remo Mattei napsal(a):

Here is what is mine set to

-rws--x--x  1 clamav root   34774 Apr  6  2016 simscan

And increased the exec /usr/bin/softlimit -m 6400 \

All good here.

Remo

[qmailtoaster] 回覆︰ [qmailtoaster] ERROR: accept() failed

[Henry]

I also face this problem at centos 5, centos 6
centos 6:clamav-0.99.2-3.qt.el6.x86_64

centos 5:clamav-toaster-0.99.2-1.4.14
 

Remo Mattei  於 2018年01月27日 (週六) 12:33 AM 寫道﹕
 

 I recall to fix this with some permissions I am in Europe now will check ASAP 
and share my settings. 

Inviato da iPhone

> Il giorno 26 gen 2018, alle ore 11:24, Michele Federici 
>  ha scritto:
> 
> Hi,
> 
> I have a qmail server that today returns in the smtp log "mail server 
> temporarily rejected message (# 4.3.0)".
> 
> Everything works fine until the start of these errors on simscan
> 
> Fri Jan 26 10:00:52 2018 -> 
> /var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/textfile0: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/textfile1: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/textfile2: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/textfile2: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or 
> directory ERROR
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/image001.png: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
> Fri Jan 26 10:01:23 2018 -> 
> /var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316: Can't 
> open file or directory ERROR
> Fri Jan 26 10:01:23 2018 -> 
> /var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316: 
> Can't create new file ERROR
> Fri Jan 26 10:01:23 2018 -> 
> /var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or 
> directory ERROR
> [..]
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> 
> So I restart
> 
> # systemctl restart clamav-daemon.service
> # systemctl restart clamav-daemon.socket
> 
> and then everything works fine until simscan restarts to return "Unable to 
> open file or directory ERROR"
> 
> I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.
> 
> Any suggestions?
> 
> -- 
> Michele Federici
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


   

Re: [qmailtoaster] This day - ClamAV problem

[Havrla]

"statement"

Problem:

Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or directory 
ERROR

or

Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't create 
temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav96c37f51f984623e21bb7af92cbbf08.tmp:
 Too many open files

or

qmail-smtpd: qq soft reject (mail server temporarily rejected message


#

ClamAV after baseAntivir update 25.1.2018 -> 26.1.2018

ClamAV not close file descriptor:

more more more
clamd 160821 171659clamav   26u  REG  253,0   2 
 672063 /tmp/clamav-6066a4d288b5c900926781c172bc116b.tmp (deleted)
clamd 160821 171659clamav   27u  REG  253,0  23 
 672065 /tmp/clamav-b4caea19b543ad25e02fa960a92f0aa2.tmp (deleted)
clamd 160821 171659clamav   28u  REG  253,0   2 
 672066 /tmp/clamav-fb78c6f53c4d6a6b8ac253e6621fa3a9.tmp (deleted)
clamd 160821 171659clamav   29u  REG  253,0  23 
 672068 /tmp/clamav-a52275713035f14c03d3193879a5a164.tmp (deleted)
more more more
[root@tonda clamav]#

Havrla

Re: [qmailtoaster] ERROR: accept() failed

[Remo Mattei]

Michele a me funziona con la versione che hai tu. 

I have the same version and it’s all working permissions check my email 

Inviato da iPhone

> Il giorno 26 gen 2018, alle ore 16:47, Peter Peltonen 
>  ha scritto:
> 
> First thing that comes to my mind is to check qmail directory
> ownerships and permissions?
> 
>> On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici  
>> wrote:
>> Hi,
>> 
>> I have a qmail server that today returns in the smtp log "mail server
>> temporarily rejected message (# 4.3.0)".
>> 
>> Everything works fine until the start of these errors on simscan
>> 
>> Fri Jan 26 10:00:52 2018 ->
>> /var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
>> Fri Jan 26 10:01:16 2018 ->
>> /var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
>> Fri Jan 26 10:01:16 2018 ->
>> /var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
>> Fri Jan 26 10:01:16 2018 ->
>> /var/qmail/simscan/1516957274.430368.10271/textfile0: OK
>> Fri Jan 26 10:01:16 2018 ->
>> /var/qmail/simscan/1516957274.430368.10271/textfile1: OK
>> Fri Jan 26 10:01:16 2018 ->
>> /var/qmail/simscan/1516957274.430368.10271/textfile2: OK
>> Fri Jan 26 10:01:20 2018 ->
>> /var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
>> Fri Jan 26 10:01:20 2018 ->
>> /var/qmail/simscan/1516957279.523709.10292/textfile2: OK
>> Fri Jan 26 10:01:20 2018 ->
>> /var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or
>> directory ERROR
>> Fri Jan 26 10:01:20 2018 ->
>> /var/qmail/simscan/1516957279.523709.10292/image001.png: OK
>> Fri Jan 26 10:01:20 2018 ->
>> /var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
>> Fri Jan 26 10:01:23 2018 ->
>> /var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
>> Can't open file or directory ERROR
>> Fri Jan 26 10:01:23 2018 ->
>> /var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316:
>> Can't create new file ERROR
>> Fri Jan 26 10:01:23 2018 ->
>> /var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or
>> directory ERROR
>> [..]
>> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>> 
>> So I restart
>> 
>> # systemctl restart clamav-daemon.service
>> # systemctl restart clamav-daemon.socket
>> 
>> and then everything works fine until simscan restarts to return "Unable to
>> open file or directory ERROR"
>> 
>> I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.
>> 
>> Any suggestions?
>> 
>> --
>> Michele Federici
>> 
>> 
>> -
>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Remo Mattei]

Here is what is mine set to

-rws--x--x  1 clamav root   34774 Apr  6  2016 simscan

And increased the exec /usr/bin/softlimit -m 6400 \

All good here. 

Remo 

> On Jan 26, 2018, at 11:55 AM, Havrla  wrote:
> 
> Can't create temporary file 

Re: [qmailtoaster] ERROR: accept() failed

[Remo Mattei]

I recall to fix this with some permissions I am in Europe now will check ASAP 
and share my settings. 

Inviato da iPhone

> Il giorno 26 gen 2018, alle ore 11:24, Michele Federici 
>  ha scritto:
> 
> Hi,
> 
> I have a qmail server that today returns in the smtp log "mail server 
> temporarily rejected message (# 4.3.0)".
> 
> Everything works fine until the start of these errors on simscan
> 
> Fri Jan 26 10:00:52 2018 -> 
> /var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/textfile0: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/textfile1: OK
> Fri Jan 26 10:01:16 2018 -> 
> /var/qmail/simscan/1516957274.430368.10271/textfile2: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/textfile2: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or 
> directory ERROR
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/image001.png: OK
> Fri Jan 26 10:01:20 2018 -> 
> /var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
> Fri Jan 26 10:01:23 2018 -> 
> /var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316: Can't 
> open file or directory ERROR
> Fri Jan 26 10:01:23 2018 -> 
> /var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316: 
> Can't create new file ERROR
> Fri Jan 26 10:01:23 2018 -> 
> /var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or 
> directory ERROR
> [..]
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> 
> So I restart
> 
> # systemctl restart clamav-daemon.service
> # systemctl restart clamav-daemon.socket
> 
> and then everything works fine until simscan restarts to return "Unable to 
> open file or directory ERROR"
> 
> I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.
> 
> Any suggestions?
> 
> -- 
> Michele Federici
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Michele Federici]

  
  
Hi,

I confirm you: after 1 hour the problem caming back

I prefer do not stop clamav. I've create a script who check every
few minutes "/var/log/clamd/clamd.log" and if there is an errore it
restart clamav

thank you 
-- 
Michele Federici

Il 26/01/2018 17:18, Havrla ha scritto:


  
  Hi

Restart clamav fix only for cca 1 hour. After
problem back.


I turned off simscan for clamav.    
file /var/qmail/control/simcontrol
:clam=no,spam=yes,spam_hits=12,attach=.src:.bat:.pif:.js

/etc/init.d/qmail cdb


I'm waiting for another update clamav (antivir base).
  We'll see tomorrow.

  H.

  
Dne 26.1.2018 v 17:08 Michele Federici napsal(a):
  
  
Hi,
I have more than 200 GB
  free.
But i think is the
  current clamav signature problem. This post is similar http://lists.clamav.net/pipermail/clamav-users/2018-January/005658.html

If i restart clamav
  works all fine. 

Thank you 
  
  
  


  


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Havrla]

Hi

Restart clamav fix only for cca 1 hour. After problem back.


I turned off simscan for clamav.
file /var/qmail/control/simcontrol
:clam=no,spam=yes,spam_hits=12,attach=.src:.bat:.pif:.js

/etc/init.d/qmail cdb


I'm waiting for another update clamav (antivir base).
We'll see tomorrow.

H.


Dne 26.1.2018 v 17:08 Michele Federici napsal(a):


Hi,

I have more than 200 GB free.

But i think is the current clamav signature problem. This post is 
similar 
http://lists.clamav.net/pipermail/clamav-users/2018-January/005658.html


If i restart clamav works all fine.

Thank you

Re: [qmailtoaster] ERROR: accept() failed

[Sean Murphy]

This seems like the situation we were experiencing back in March of last 
year, where a bad daily hit servers running CentOS 5 until they changed 
how clamav used pcre to link the database.  I don't know if it's the 
same case here.


Our CentOS 5 server (32-bit) and CentOS 7 server (64-bit) are not affected.

Unfortunately, ClamAV 99.3 isn't supported on CentOS 5, so it looks as 
though I'll be having to make that migration I've been putting off :)



On 1/26/2018 11:00 AM, Eric Broch wrote:

Ahhh! ClamAV again.


On 1/26/2018 8:57 AM, Havrla wrote:

Peter:
detail my log:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files


Havrla

Dne 26.1.2018 v 16:47 Peter Peltonen napsal(a):

First thing that comes to my mind is to check qmail directory
ownerships and permissions?

On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici 
 wrote:

Hi,

I have a qmail server that today returns in the smtp log "mail server
temporarily rejected message (# 4.3.0)".

Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 ->
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: 
OK

Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open 
file or

directory ERROR
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: 
OK

Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316: 


Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316: 


Can't create new file ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open 
file or

directory ERROR
[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return 
"Unable to

open file or directory ERROR"

I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com






-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Michele Federici]

  
  
Hi,
I have more than 200 GB free.
But i think is the current
  clamav signature problem. This post is similar
  http://lists.clamav.net/pipermail/clamav-users/2018-January/005658.html

If i restart clamav works
  all fine. 

Thank you 

-- 
Michele Federici

Il 26/01/2018 16:59, Eric Broch ha
  scritto:

Hi 
  Michele
  
  
  Is the directory /var/qmail/simscan full? How much space do you
  have?
  
  
  Check out this link on the mailing list for permissions issues
  some have had:
  
  
https://www.mail-archive.com/search?q=SOLVED+-+qq+soft+reject+with+Centos+7=qmailtoaster-list%40qmailtoaster.com
  
  
  On 1/26/2018 8:47 AM, Peter Peltonen wrote:
  
  First thing that comes to my mind is to
check qmail directory

ownerships and permissions?


On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici
 wrote:

Hi,
  
  
  I have a qmail server that today returns in the smtp log "mail
  server
  
  temporarily rejected message (# 4.3.0)".
  
  
  Everything works fine until the start of these errors on
  simscan
  
  
  Fri Jan 26 10:00:52 2018 ->
  
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf:
  OK
  
  Fri Jan 26 10:01:16 2018 ->
  
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271:
  OK
  
  Fri Jan 26 10:01:16 2018 ->
  
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271:
  OK
  
  Fri Jan 26 10:01:16 2018 ->
  
  /var/qmail/simscan/1516957274.430368.10271/textfile0: OK
  
  Fri Jan 26 10:01:16 2018 ->
  
  /var/qmail/simscan/1516957274.430368.10271/textfile1: OK
  
  Fri Jan 26 10:01:16 2018 ->
  
  /var/qmail/simscan/1516957274.430368.10271/textfile2: OK
  
  Fri Jan 26 10:01:20 2018 ->
  
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292:
  OK
  
  Fri Jan 26 10:01:20 2018 ->
  
  /var/qmail/simscan/1516957279.523709.10292/textfile2: OK
  
  Fri Jan 26 10:01:20 2018 ->
  
  /var/qmail/simscan/1516957279.523709.10292/textfile3: Can't
  open file or
  
  directory ERROR
  
  Fri Jan 26 10:01:20 2018 ->
  
  /var/qmail/simscan/1516957279.523709.10292/image001.png: OK
  
  Fri Jan 26 10:01:20 2018 ->
  
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf:
  OK
  
  Fri Jan 26 10:01:23 2018 ->
  
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
  
  Can't open file or directory ERROR
  
  Fri Jan 26 10:01:23 2018 ->
  
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316:
  
  Can't create new file ERROR
  
  Fri Jan 26 10:01:23 2018 ->
  
  /var/qmail/simscan/1516957282.930250.10316/textfile0: Can't
  open file or
  
  directory ERROR
  
  [..]
  
  Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
  
  Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
  
  Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
  
  Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
  
  Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
  
  Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
  
  Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
  
  
  So I restart
  
  
  # systemctl restart clamav-daemon.service
  
  # systemctl restart clamav-daemon.socket
  
  
  and then everything works fine until simscan restarts to
  return "Unable to
  
  open file or directory ERROR"
  
  
  I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.
  
  
  Any suggestions?
  
  
  --
  
  Michele Federici
  
  
  
-
  
  To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
  
  For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
  
  

-

  

Re: [qmailtoaster] ERROR: accept() failed

[Eric Broch]

Ahhh! ClamAV again.


On 1/26/2018 8:57 AM, Havrla wrote:

Peter:
detail my log:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files


Havrla

Dne 26.1.2018 v 16:47 Peter Peltonen napsal(a):

First thing that comes to my mind is to check qmail directory
ownerships and permissions?

On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici 
 wrote:

Hi,

I have a qmail server that today returns in the smtp log "mail server
temporarily rejected message (# 4.3.0)".

Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 ->
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: 
OK

Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: 
OK

Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open 
file or

directory ERROR
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: 
OK

Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316: 


Can't create new file ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open 
file or

directory ERROR
[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return 
"Unable to

open file or directory ERROR"

I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



--
Eric Broch
White Horse Technical Consulting (WHTC)


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Eric Broch]

Hi  Michele

Is the directory /var/qmail/simscan full? How much space do you have?

Check out this link on the mailing list for permissions issues some have 
had:


https://www.mail-archive.com/search?q=SOLVED+-+qq+soft+reject+with+Centos+7=qmailtoaster-list%40qmailtoaster.com

On 1/26/2018 8:47 AM, Peter Peltonen wrote:

First thing that comes to my mind is to check qmail directory
ownerships and permissions?

On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici  wrote:

Hi,

I have a qmail server that today returns in the smtp log "mail server
temporarily rejected message (# 4.3.0)".

Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 ->
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or
directory ERROR
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316:
Can't create new file ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or
directory ERROR
[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return "Unable to
open file or directory ERROR"

I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



--
Eric Broch
White Horse Technical Consulting (WHTC)


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Havrla]

Peter:
detail my log:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files


Havrla

Dne 26.1.2018 v 16:47 Peter Peltonen napsal(a):

First thing that comes to my mind is to check qmail directory
ownerships and permissions?

On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici  wrote:

Hi,

I have a qmail server that today returns in the smtp log "mail server
temporarily rejected message (# 4.3.0)".

Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 ->
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 ->
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or
directory ERROR
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 ->
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316:
Can't create new file ERROR
Fri Jan 26 10:01:23 2018 ->
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or
directory ERROR
[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return "Unable to
open file or directory ERROR"

I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ERROR: accept() failed

[Peter Peltonen]

First thing that comes to my mind is to check qmail directory
ownerships and permissions?

On Fri, Jan 26, 2018 at 12:24 PM, Michele Federici  wrote:
> Hi,
>
> I have a qmail server that today returns in the smtp log "mail server
> temporarily rejected message (# 4.3.0)".
>
> Everything works fine until the start of these errors on simscan
>
> Fri Jan 26 10:00:52 2018 ->
> /var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
> Fri Jan 26 10:01:16 2018 ->
> /var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
> Fri Jan 26 10:01:16 2018 ->
> /var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
> Fri Jan 26 10:01:16 2018 ->
> /var/qmail/simscan/1516957274.430368.10271/textfile0: OK
> Fri Jan 26 10:01:16 2018 ->
> /var/qmail/simscan/1516957274.430368.10271/textfile1: OK
> Fri Jan 26 10:01:16 2018 ->
> /var/qmail/simscan/1516957274.430368.10271/textfile2: OK
> Fri Jan 26 10:01:20 2018 ->
> /var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
> Fri Jan 26 10:01:20 2018 ->
> /var/qmail/simscan/1516957279.523709.10292/textfile2: OK
> Fri Jan 26 10:01:20 2018 ->
> /var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or
> directory ERROR
> Fri Jan 26 10:01:20 2018 ->
> /var/qmail/simscan/1516957279.523709.10292/image001.png: OK
> Fri Jan 26 10:01:20 2018 ->
> /var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
> Fri Jan 26 10:01:23 2018 ->
> /var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316:
> Can't open file or directory ERROR
> Fri Jan 26 10:01:23 2018 ->
> /var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316:
> Can't create new file ERROR
> Fri Jan 26 10:01:23 2018 ->
> /var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or
> directory ERROR
> [..]
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
> Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
>
> So I restart
>
> # systemctl restart clamav-daemon.service
> # systemctl restart clamav-daemon.socket
>
> and then everything works fine until simscan restarts to return "Unable to
> open file or directory ERROR"
>
> I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.
>
> Any suggestions?
>
> --
> Michele Federici
>
>
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Simscan

[Eric Broch]

Thanks, Rajesh!!!


On 1/26/2018 8:34 AM, Rajesh M wrote:

hi

the temporary resolution is as such

cd /var/lib/clamav

service clamd stop

mv daily.cld daily.cld.BAK
mv main.cld main.cld.BAK
mv bytecode.cld bytecode.cld.BAK

also rename any
main.cvd
daily.cvd
bytecode.cvd


keep foxhole_all and badmacro.ndb unoffical which handles all kinds of bad 
attachments (even if they are zipped / archived) / macros.

also have spam-assassin with oledb macro plugin.

service clamd start

with this config you can have simscan working

clam will work and stop a major amount of viruses which comes in the form of 
attachments and macros.

rajesh



- Original Message -
From: Tommi Järvilehto [mailto:tommi.jarvile...@datavahti.fi]
To: qmailtoaster-list@qmailtoaster.com
Sent: Fri, 26 Jan 2018 17:19:48 +0200
Subject:

Same here one of our servers (CentOs6 64bit). CentOS5 and CentOS7
servers currently ok.
I disabled now simscan temporarily.

On 26.1.2018 16:24, Havrla wrote:

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
create temporary file
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp:
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
create temporary file
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp:
Too many open files


Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:

Hi Eric - we're having massive problems this morning with soft
rejects. How do we bypass simscan?  I can't find the email in which
you explained

Jeff





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] Simscan

[Eric Broch]

Thanks, Havrla!!!


On 1/26/2018 7:24 AM, Havrla wrote:

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown 
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp: 
Too many open files



Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff





--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] Simscan

[Rajesh M]

hi

the temporary resolution is as such

cd /var/lib/clamav

service clamd stop

mv daily.cld daily.cld.BAK
mv main.cld main.cld.BAK
mv bytecode.cld bytecode.cld.BAK

also rename any
main.cvd
daily.cvd
bytecode.cvd


keep foxhole_all and badmacro.ndb unoffical which handles all kinds of bad 
attachments (even if they are zipped / archived) / macros.

also have spam-assassin with oledb macro plugin.

service clamd start

with this config you can have simscan working

clam will work and stop a major amount of viruses which comes in the form of 
attachments and macros.

rajesh



- Original Message -
From: Tommi Järvilehto [mailto:tommi.jarvile...@datavahti.fi]
To: qmailtoaster-list@qmailtoaster.com
Sent: Fri, 26 Jan 2018 17:19:48 +0200
Subject:

Same here one of our servers (CentOs6 64bit). CentOS5 and CentOS7
servers currently ok.
I disabled now simscan temporarily.

On 26.1.2018 16:24, Havrla wrote:
> Hi, Eric
>
> problem = clamav  after update (antivir base)
>
> simscan no problem
>
>
> LOG:
> Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
> create temporary file
> /tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp:
> Too many open files
> Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname
> == NULL
> Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown
> not saved: report to http://bugs.clamav.net
> Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't
> create temporary file
> /tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp:
> Too many open files
>
>
> Havrla
>
> Dne 26.1.2018 v 15:11 Eric Broch napsal(a):
>> On 1/26/2018 7:04 AM, Jeff Koch wrote:
>>> Hi Eric - we're having massive problems this morning with soft
>>> rejects. How do we bypass simscan?  I can't find the email in which
>>> you explained
>>>
>>> Jeff
>
>

--
Tommi Järvilehto
DataVahti Oy
040 732 8032


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Simscan

[Tommi Järvilehto]

Same here one of our servers (CentOs6 64bit). CentOS5 and CentOS7 
servers currently ok.

I disabled now simscan temporarily.

On 26.1.2018 16:24, Havrla wrote:

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown 
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp: 
Too many open files



Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff





--
Tommi Järvilehto
DataVahti Oy
040 732 8032

Re: [qmailtoaster] Simscan

[Havrla]

Hi, Eric

problem = clamav  after update (antivir base)

simscan no problem


LOG:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown 
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp: 
Too many open files



Havrla

Dne 26.1.2018 v 15:11 Eric Broch napsal(a):

On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff

Re: [qmailtoaster] Simscan

[Eric Broch]

# qmailctl stop

# qmailctl stat (make sure it's stopped)

In /etc/tcprules.d/tcp.smtp

change

QMAILQUEUE="/var/qmail/bin/simscan"

to

QMAILQUEUE="/var/qmail/bin/qmail-queue.orig"

qmailctl cdb

qmailctl start


On 1/26/2018 7:04 AM, Jeff Koch wrote:
Hi Eric - we're having massive problems this morning with soft 
rejects. How do we bypass simscan?  I can't find the email in which 
you explained


Jeff


On 1/26/2018 8:58 AM, Eric Broch wrote:


Hi List,

It seems we have more simscan issues with qq soft rejects of late 
though this has been plaguing qmail for a very long time. I'm sick of 
this issue and decided to build a version of simscan with more 
extensive debugging using thelibexplain 
 libraries.


Simscan and [lib]explain[-devel] packages have been built with mock 
so they were built in a clean environment with the latest package 
requirements.


In order to use at this time simply download these packages (CentOS 6 
or 7 x86_64):


ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/explain-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/simscan-1.4.0-2.qt.el7.x86_64.rpm

ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/explain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-devel-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/simscan-1.4.0-2.qt.el6.x86_64.rpm

Install as follows:

# qmailctl stop

# yum localinstall explain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-devel-1.4-4.el6.x86_64.rpm

# yum localupdate/localinstall simscan-1.4.0-1.qt.el6.x86_64.rpm

add SIMSCAN_DEBUG="3" to /etc/tcprules.d/tcp.smtp

AND keep QMAILQUEUE="/var/qmail/bin/simscan"

# qmailctl cdb

# qmailctl start

The debugging will be in /var/qmail/control/smtp/current

# tail -f /var/log/qmail/smtp/current | tai64nlocal

Debugging info will be as follows:

The debugging info will be of the form below:

error no.: ('3') error msg.: ('This is an error')

Let me know how it goes

Eric
--
Eric Broch
White Horse Technical Consulting (WHTC)




--
Eric Broch
White Horse Technical Consulting (WHTC)

[qmailtoaster] Simscan

[Eric Broch]

Hi List,

It seems we have more simscan issues with qq soft rejects of late though 
this has been plaguing qmail for a very long time. I'm sick of this 
issue and decided to build a version of simscan with more extensive 
debugging using thelibexplain  
libraries.


Simscan and [lib]explain[-devel] packages have been built with mock so 
they were built in a clean environment with the latest package requirements.


In order to use at this time simply download these packages (CentOS 6 or 
7 x86_64):


ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/explain-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/libexplain-devel-1.4-4.el7.centos.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/7/development/x86_64/simscan-1.4.0-2.qt.el7.x86_64.rpm

ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/explain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/libexplain-devel-1.4-4.el6.x86_64.rpm
ftp://ftp.qmailtoaster.org/pub/repo/qmt/CentOS/6/development/x86_64/simscan-1.4.0-2.qt.el6.x86_64.rpm

Install as follows:

# qmailctl stop

# yum localinstall explain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-1.4-4.el6.x86_64.rpm

# yum localinstall libexplain-devel-1.4-4.el6.x86_64.rpm

# yum localupdate/localinstall simscan-1.4.0-1.qt.el6.x86_64.rpm

add SIMSCAN_DEBUG="3" to /etc/tcprules.d/tcp.smtp

AND keep QMAILQUEUE="/var/qmail/bin/simscan"

# qmailctl cdb

# qmailctl start

The debugging will be in /var/qmail/control/smtp/current

# tail -f /var/log/qmail/smtp/current | tai64nlocal

Debugging info will be as follows:

The debugging info will be of the form below:

error no.: ('3') error msg.: ('This is an error')

Let me know how it goes

Eric

--
Eric Broch
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] how to disable clamav updates

[Havrla]

systemctl stop clamav-freshclam.service
systemctl disable clamav-freshclam.service

or

/etc/init.d/freshclam sto
chkconfig --level 0123456 freshclam off


H.


Dne 26.1.2018 v 11:59 Rajesh M napsal(a):

hi all,

how to disable clamav updates

basically i do not want clamav downloading the daily.cvd and other files 
automatically

i removed the following but in sometime these got automatically updated

daily.cld
main.cld
bytecode.cld
mirrors.dat

rajesh




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] how to disable clamav updates

[Rajesh M]

hi all,

how to disable clamav updates

basically i do not want clamav downloading the daily.cvd and other files 
automatically

i removed the following but in sometime these got automatically updated

daily.cld
main.cld
bytecode.cld
mirrors.dat

rajesh


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] clamav KO - ERROR: accept() failed

[Havrla]

heloo

yes same:
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-696c37f51f984623e21bb7af92cbbf08.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: unknown 
not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-576c58385e2b2488934fd90e8c45efa4.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: 
VydanyDoklad_5161047937.pdf not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-29422cafd61dc5ef337c2670745e6503.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: 
Prijemka_ASRE18061612.pdf not saved: report to http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-42a6d50823f341c2b542e245149e382d.tmp: 
Too many open files
Jan 26 11:24:50 tonda clamd: LibClamAV Warning: fileblobScan, fullname 
== NULL
Jan 26 11:24:50 tonda clamd: LibClamAV Error: fileblobDestroy: 
ASRE18061612_ASRE18061612_ReklamacePrijemka.pdf not saved: report to 
http://bugs.clamav.net
Jan 26 11:24:50 tonda clamd: LibClamAV Error: cli_gentempfd: Can't 
create temporary file 
/tmp/clamav-4cfa012223685613cbdd51ea20c64a9a.tmp/clamav-49b2ac5321688dacaeacd20dd0245107.tmp: 
Too many open files

Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:
Jan 26 11:24:53 tonda clamd: ERROR: accept() failed:


HOTFIX  clamav disable:
modify:
[root@tonda ~]# cat /var/qmail/control/simcontrol
:clam=no,spam=yes,spam_hits=12,attach=.src:.bat:.pif:.js


and
 /etc/init.d/qmail cdb


and wait for solutions clamav OK :-)


Havrla




Dne 26.1.2018 v 11:24 Michele Federici napsal(a):

Hi,

I have a qmail server that today returns in the smtp log "mail server 
temporarily rejected message (# 4.3.0)".


Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 -> 
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: 
OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: 
OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: 
OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: 
OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file 
or directory ERROR
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: 
OK
Fri Jan 26 10:01:23 2018 -> 
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316: 
Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 -> 
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316: 
Can't create new file ERROR
Fri Jan 26 10:01:23 2018 -> 
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file 
or directory ERROR

[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return 
"Unable to open file or directory ERROR"


I'm running qmailtoaster on Centos 7 with ClamAV 

[qmailtoaster] ERROR: accept() failed

[Michele Federici]

Hi,

I have a qmail server that today returns in the smtp log "mail server 
temporarily rejected message (# 4.3.0)".


Everything works fine until the start of these errors on simscan

Fri Jan 26 10:00:52 2018 -> 
/var/qmail/simscan/1516957251.438820.10197/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/msg.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/addr.1516957274.430368.10271: OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/textfile0: OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/textfile1: OK
Fri Jan 26 10:01:16 2018 -> 
/var/qmail/simscan/1516957274.430368.10271/textfile2: OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/addr.1516957279.523709.10292: OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/textfile2: OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/textfile3: Can't open file or 
directory ERROR
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/image001.png: OK
Fri Jan 26 10:01:20 2018 -> 
/var/qmail/simscan/1516957279.523709.10292/doc05577520180126111044.pdf: OK
Fri Jan 26 10:01:23 2018 -> 
/var/qmail/simscan/1516957282.930250.10316/msg.1516957282.930250.10316: 
Can't open file or directory ERROR
Fri Jan 26 10:01:23 2018 -> 
/var/qmail/simscan/1516957282.930250.10316/addr.1516957282.930250.10316: 
Can't create new file ERROR
Fri Jan 26 10:01:23 2018 -> 
/var/qmail/simscan/1516957282.930250.10316/textfile0: Can't open file or 
directory ERROR

[..]
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:
Fri Jan 26 10:09:15 2018 -> ERROR: accept() failed:

So I restart

# systemctl restart clamav-daemon.service
# systemctl restart clamav-daemon.socket

and then everything works fine until simscan restarts to return "Unable 
to open file or directory ERROR"


I'm running qmailtoaster on Centos 7 with ClamAV 0.99.2.

Any suggestions?

--
Michele Federici


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com