From David B Funk
Suggestions; completely kill and restart Amavis-new, see if it loads and
uses the new LibClamAV library. If that doesn't fix it, find -all-
instances of LibClamAV on your system, remove them, re-do the 0.96
install and restart. If it still isn't working, ask your question on the
Amavis list as there may be some update for Amavis-new that is also
needed.
Yes! Yes! Yes! You were right!! I get rid of every file related to Clamav
and reinstalled it. Now it's working again! Yes sir!
Thank you again!! I asked a question and in less than 24 hours you guys
helped me to resolve this issue. What a great community!
Christian
r...@mailserver2:/usr/src/packages# installpkg clamav-0.96-i686-3_SBo.tgz
Installing package clamav-0.96-i686-3_SBo...
PACKAGE DESCRIPTION:
clamav: clamav (a GPL-ed virus scanner)
clamav:
clamav: Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main
purpose
clamav: of this software is the integration with mail servers (attachment
clamav: scanning). The package provides a flexible and scalable
multi-threaded
clamav: daemon, a command line scanner, and a tool for automatic updating
via
clamav: Internet.
clamav: Most importantly, the virus database is kept up to date .
clamav: For setup, see README.slackware in the /usr/doc/clamav-*
directory.
clamav:
clamav: clamav info at http://www.clamav.net/
Executing install script for clamav-0.96-i686-3_SBo...
r...@mailserver2:/usr/src/packages# freshclam
ClamAV update process started at Tue Apr 27 22:05:57 2010
main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder:
sven)
WARNING: getfile: daily-10678.cdiff not found on remote server (IP:
194.8.197.22)
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
Trying host db.us.clamav.net (194.47.250.218)...
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from db.us.clamav.net (IP:
194.47.250.218): Operation now in progress
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
Trying host db.us.clamav.net (194.186.47.19)...
WARNING: getfile: daily-10678.cdiff not found on remote server (IP:
194.186.47.19)
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Trying host db.us.clamav.net (199.184.215.2)...
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from db.us.clamav.net (IP:
199.184.215.2): Operation now in progress
WARNING: Can't download daily.cvd from db.us.clamav.net
Trying again in 5 secs...
ClamAV update process started at Tue Apr 27 22:07:05 2010
main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder:
sven)
Trying host db.us.clamav.net (207.57.106.31)...
WARNING: getfile: daily-10678.cdiff not found on remote server (IP:
207.57.106.31)
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
Trying host db.us.clamav.net (208.72.56.53)...
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from db.us.clamav.net (IP:
208.72.56.53): Operation now in progress
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
Trying host db.us.clamav.net (209.209.47.66)...
WARNING: getfile: daily-10678.cdiff not found on remote server (IP:
209.209.47.66)
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Trying host db.us.clamav.net (209.222.131.222)...
nonblock_recv: recv timing out (30 secs)
WARNING: getfile: Error while reading database from db.us.clamav.net (IP:
209.222.131.222): Operation now in progress
WARNING: Can't download daily.cvd from db.us.clamav.net
Trying again in 5 secs...
ClamAV update process started at Tue Apr 27 22:08:12 2010
main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder:
sven)
Trying host db.us.clamav.net (213.165.80.159)...
WARNING: getfile: daily-10678.cdiff not found on remote server (IP:
213.165.80.159)
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
Trying host db.us.clamav.net (150.214.142.197)...
WARNING: getfile: daily-10678.cdiff not found on remote server (IP:
150.214.142.197)
WARNING: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
Trying host db.us.clamav.net (155.98.64.87)...
WARNING: getfile: daily-10678.cdiff not found on remote server (IP:
155.98.64.87)
ERROR: getpatch: Can't download daily-10678.cdiff from db.us.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Trying host db.us.clamav.net (168.143.19.95)...
Downloading daily.cvd [100%]
daily.cvd updated (version: 10847, sigs: 54161, f-level: 51, builder:
ccordes)
Downloading bytecode.cvd [100%]
bytecode.cvd updated (version: 12, sigs: 2, f-level: 51, builder: nervous)
Database updated (758890 signatures) from db.us.clamav.net (IP:
168.143.19.95)
WARNING: Clamd was NOT notified: Can't connect to clamd through
/home/amavis/tmp/clamd.socket
connect(): Permission denied
ERROR: SubmitDetectionStats: Can't open /var/adm/clamd/clamd.log for
reading
r...@mailserver2:/usr/src/packages# cd /usr/share/clamav/
r...@mailserver2:/usr/share/clamav# ls -lah
total 24M
drwxrwx--- 2 clamav clamav 4.0K 2010-04-27 22:08 ./
drwxr-xr-x 30 root root 4.0K 2010-04-27 22:02 ../
-rw-r--r-- 1 clamav clamav 15K 2010-04-27 22:08 bytecode.cvd
-rw-r--r-- 1 clamav clamav 1.3M 2010-04-27 22:08 daily.cvd
-rwxrwx--- 1 clamav clamav 22M 2010-04-27 22:02 main.cvd*
-rw------- 1 clamav clamav 624 2010-04-27 22:08 mirrors.dat
r...@mailserver2:/usr/share/clamav# clamd
LibClamAV debug: Initialized 0.96 engine
LibClamAV debug: Initializing phishcheck module
LibClamAV debug: Phishcheck: Compiling regex: ^
*(http|https|ftp:(//)?)?[0-9]{1,3}(\.[0-9]{1,3}){3}[/?:]? *$
LibClamAV debug: Phishcheck module initialized
host triple is: i386-pc-linux-gnu
host cpu is: k8-sse3
LibClamAV debug: Loading databases from /usr/share/clamav
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 5ea3840fad8f39b344eec9175a3a8cc7
LibClamAV debug: cli_versig: Decoded signature:
5ea3840fad8f39b344eec9175a3a8cc7
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: daily.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV debug: daily.cfg loaded
LibClamAV debug: Initializing engine->root[0]
LibClamAV debug: Initialising AC pattern matcher of root[0]
LibClamAV debug: cli_initroots: Initializing BM tables of root[0]
LibClamAV debug: Initializing engine->root[1]
LibClamAV debug: Initialising AC pattern matcher of root[1]
LibClamAV debug: cli_initroots: Initializing BM tables of root[1]
LibClamAV debug: Initializing engine->root[2]
LibClamAV debug: Initialising AC pattern matcher of root[2]
LibClamAV debug: Initializing engine->root[3]
LibClamAV debug: Initialising AC pattern matcher of root[3]
LibClamAV debug: Initializing engine->root[4]
LibClamAV debug: Initialising AC pattern matcher of root[4]
LibClamAV debug: Initializing engine->root[5]
LibClamAV debug: Initialising AC pattern matcher of root[5]
LibClamAV debug: Initializing engine->root[6]
LibClamAV debug: Initialising AC pattern matcher of root[6]
LibClamAV debug: Initializing engine->root[7]
LibClamAV debug: Initialising AC pattern matcher of root[7]
LibClamAV debug: Initializing engine->root[8]
LibClamAV debug: Initialising AC pattern matcher of root[8]
LibClamAV debug: Initializing engine->root[9]
LibClamAV debug: Initialising AC pattern matcher of root[9]
LibClamAV debug: Loaded 117 filetype definitions
LibClamAV debug: daily.ftm loaded
LibClamAV debug: daily.db loaded
LibClamAV debug: daily.hdb loaded
LibClamAV debug: daily.hdu loaded
LibClamAV debug: daily.mdb loaded
LibClamAV debug: daily.mdu loaded
LibClamAV debug: daily.ndb loaded
LibClamAV debug: daily.ndu loaded
LibClamAV debug: daily.ldb loaded
LibClamAV debug: daily.zmd loaded
LibClamAV debug: daily.idb loaded
LibClamAV debug: daily.fp loaded
LibClamAV debug: Loading regex_list
LibClamAV debug: daily.pdb loaded
LibClamAV debug: Loading regex_list
LibClamAV debug: daily.wdb loaded
LibClamAV debug: /usr/share/clamav/daily.cvd loaded
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 59b7133605b0857b1a76bfe8b3645ff5
LibClamAV debug: cli_versig: Decoded signature:
59b7133605b0857b1a76bfe8b3645ff5
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.db loaded
LibClamAV debug: main.hdb loaded
LibClamAV debug: main.mdb loaded
LibClamAV debug: main.ndb loaded
LibClamAV debug: main.zmd loaded
LibClamAV debug: main.fp loaded
LibClamAV debug: /usr/share/clamav/main.cvd loaded
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 8a671097942f12ac2ab2a5483513b8e7
LibClamAV debug: cli_versig: Decoded signature:
8a671097942f12ac2ab2a5483513b8e7
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: bytecode.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV debug: Loading trusted bytecode
LibClamAV debug: bytecode: Parsed 5 APIcalls, maxapi 16
LibClamAV debug: Parsed 34 BBs, 189 instructions
LibClamAV debug: Parsed 1 functions
LibClamAV debug: Bytecode 37.cbc(1) has logical signature:
BC.Win32.Patched.User32.096.{};Target:1,Engine:51-51;(0&(2=0)&1);*:49006e007400650072006e0061006c004e0061006d006500000075007300650072003300;*:43006f006d00700061006e0079004e0061006d006500000000004d006900630072006f0073006f0066007400200043006f00720070006f007200610074006900;*:41007000700049006e00690074005f0044004c004c00730000
LibClamAV debug: 37.cbc loaded
LibClamAV debug: Loading trusted bytecode
LibClamAV debug: Skipping bytecode with functionality level: 7 (current 6)
LibClamAV debug: 38.cbc loaded
LibClamAV debug: Loading trusted bytecode
LibClamAV debug: bytecode: Parsed 6 APIcalls, maxapi 15
LibClamAV debug: Parsed 9 BBs, 93 instructions
LibClamAV debug: Parsed 1 functions
LibClamAV debug: Bytecode 19.cbc(2) has logical signature:
BC.ClamAV-Test-File-detected-via-bytecode.{};Target:1;(0&2&1);0:4d5a50000200000004000f00ffff0000;EOF-544:4d5a50000200000004000f00ffff0000;S0+0:4d5a50000200000004000f00ffff0000
LibClamAV debug: 19.cbc loaded
LibClamAV debug: /usr/share/clamav/bytecode.cvd loaded
LibClamAV debug: Using filter for trie 0
LibClamAV debug: matcher[0]: GENERIC: AC sigs: 6069 (reloff: 4, absoff: 0)
BM sigs: 29980 (reloff: 14, absoff: 99) maxpatlen 380
LibClamAV debug: Using filter for trie 1
LibClamAV debug: matcher[1]: PE: AC sigs: 13340 (reloff: 4366, absoff: 0)
BM sigs: 46657 (reloff: 42714, absoff: 3943) maxpatlen 392
LibClamAV debug: matcher[2]: OLE2: AC sigs: 1721 (reloff: 0, absoff: 0) BM
sigs: 0 (reloff: 0, absoff: 0) maxpatlen 176 (ac_only mode)
LibClamAV debug: matcher[3]: HTML: AC sigs: 5638 (reloff: 0, absoff: 0) BM
sigs: 0 (reloff: 0, absoff: 0) maxpatlen 382 (ac_only mode)
LibClamAV debug: Using filter for trie 4
LibClamAV debug: matcher[4]: MAIL: AC sigs: 1114 (reloff: 0, absoff: 0) BM
sigs: 0 (reloff: 0, absoff: 0) maxpatlen 255 (ac_only mode)
LibClamAV debug: matcher[5]: GRAPHICS: AC sigs: 6 (reloff: 0, absoff: 0)
BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 93 (ac_only mode)
LibClamAV debug: matcher[6]: ELF: AC sigs: 23 (reloff: 4, absoff: 0) BM
sigs: 0 (reloff: 0, absoff: 0) maxpatlen 304 (ac_only mode)
LibClamAV debug: Using filter for trie 7
LibClamAV debug: matcher[7]: ASCII: AC sigs: 1450 (reloff: 0, absoff: 0)
BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 335 (ac_only mode)
LibClamAV debug: matcher[8]: NOT USED: AC sigs: 0 (reloff: 0, absoff: 0)
BM sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode)
LibClamAV debug: matcher[9]: MACH-O: AC sigs: 0 (reloff: 0, absoff: 0) BM
sigs: 0 (reloff: 0, absoff: 0) maxpatlen 0 (ac_only mode)
LibClamAV debug: Building regex list
LibClamAV debug: Using filter for trie 0
LibClamAV debug: hashtab: Freeing hashset, elements: 0, capacity: 0
LibClamAV debug: Building regex list
LibClamAV debug: Using filter for trie 0
LibClamAV debug: hashtab: Freeing hashset, elements: 0, capacity: 0
LibClamAV debug: Converting hashset to array: 38998 entries
LibClamAV debug: hashtab: Freeing hashset, elements: 38998, capacity:
65536
LibClamAV debug: Dynamic engine configuration settings:
LibClamAV debug: --------------------------------------
LibClamAV debug: Module PE: On
LibClamAV debug: * Submodule PARITE: On
LibClamAV debug: * Submodule KRIZ: On
LibClamAV debug: * Submodule MAGISTR: On
LibClamAV debug: * Submodule POLIPOS: On
LibClamAV debug: * Submodule MD5SECT: On
LibClamAV debug: * Submodule UPX: On
LibClamAV debug: * Submodule FSG: On
LibClamAV debug: * Submodule SWIZZOR: On
LibClamAV debug: * Submodule PETITE: On
LibClamAV debug: * Submodule PESPIN: On
LibClamAV debug: * Submodule YC: On
LibClamAV debug: * Submodule WWPACK: On
LibClamAV debug: * Submodule NSPACK: On
LibClamAV debug: * Submodule MEW: On
LibClamAV debug: * Submodule UPACK: On
LibClamAV debug: * Submodule ASPACK: On
LibClamAV debug: Module ELF: On
LibClamAV debug: Module MACHO: On
LibClamAV debug: Module ARCHIVE: On
LibClamAV debug: * Submodule RAR: On
LibClamAV debug: * Submodule ZIP: On
LibClamAV debug: * Submodule GZIP: On
LibClamAV debug: * Submodule BZIP: On
LibClamAV debug: * Submodule ARJ: On
LibClamAV debug: * Submodule SZDD: On
LibClamAV debug: * Submodule CAB: On
LibClamAV debug: * Submodule CHM: On
LibClamAV debug: * Submodule OLE2: On
LibClamAV debug: * Submodule TAR: On
LibClamAV debug: * Submodule CPIO: On
LibClamAV debug: * Submodule BINHEX: On
LibClamAV debug: * Submodule SIS: On
LibClamAV debug: * Submodule NSIS: On
LibClamAV debug: * Submodule AUTOIT: On
LibClamAV debug: * Submodule ISHIELD: On
LibClamAV debug: * Submodule 7zip: On
LibClamAV debug: Module DOCUMENT: On
LibClamAV debug: * Submodule HTML: On
LibClamAV debug: * Submodule RTF: On
LibClamAV debug: * Submodule PDF: On
LibClamAV debug: * Submodule SCRIPT: On
LibClamAV debug: * Submodule HTMLSKIPRAW: On
LibClamAV debug: * Submodule JSNORM: On
LibClamAV debug: Module MAIL: On
LibClamAV debug: * Submodule MBOX: On
LibClamAV debug: * Submodule TNEF: On
LibClamAV debug: Module OTHER: On
LibClamAV debug: * Submodule UUENCODED: On
LibClamAV debug: * Submodule SCRENC: On
LibClamAV debug: * Submodule RIFF: On
LibClamAV debug: * Submodule JPEG: On
LibClamAV debug: * Submodule CRYPTFF: On
LibClamAV debug: * Submodule DLP: On
LibClamAV debug: * Submodule MYDOOMLOG: On
LibClamAV debug: * Submodule PREFILTERING: On
LibClamAV debug: Module PHISHING On
LibClamAV debug: * Submodule ENGINE: On
LibClamAV debug: * Submodule ENTCONV: On
LibClamAV debug: Module BYTECODE On
LibClamAV debug: * Submodule INTERPRETER: On
LibClamAV debug: * Submodule JIT X86: On
LibClamAV debug: * Submodule JIT PPC: On
LibClamAV debug: * Submodule JIT ARM: ** Off **
bytecode JIT: emitted function bc1f0_wrap of 16 bytes at 0xaf60b010
bytecode JIT: emitted function bc1f0 of 752 bytes at 0xaf60b030
bytecode JIT: emitted function bc2f0_wrap of 16 bytes at 0xaf60b330
bytecode JIT: emitted function bc2f0 of 555 bytes at 0xaf60b350
r...@mailserver2:/usr/share/clamav# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 Apr26 ? 00:00:00 init [3]
root 2 1 0 Apr26 ? 00:00:00 [migration/0]
root 3 1 0 Apr26 ? 00:00:00 [ksoftirqd/0]
root 4 1 0 Apr26 ? 00:00:00 [events/0]
root 5 1 0 Apr26 ? 00:00:00 [khelper]
root 6 1 0 Apr26 ? 00:00:00 [kthread]
root 7 6 0 Apr26 ? 00:00:00 [xenwatch]
root 8 6 0 Apr26 ? 00:00:00 [xenbus]
root 14 6 0 Apr26 ? 00:00:00 [kblockd/0]
root 16 6 0 Apr26 ? 00:00:00 [kseriod]
root 59 6 0 Apr26 ? 00:00:00 [kswapd0]
root 60 6 0 Apr26 ? 00:00:00 [aio/0]
root 597 6 0 Apr26 ? 00:00:00 [kmirrord]
root 655 6 0 Apr26 ? 00:00:00 [kjournald]
root 776 1 0 Apr26 ? 00:00:00 /sbin/udevd --daemon
root 974 1 0 Apr26 ? 00:00:01 /usr/sbin/syslogd
root 978 1 0 Apr26 ? 00:00:00 /usr/sbin/klogd -c 3 -x
root 1098 1 0 Apr26 ? 00:00:00 /usr/sbin/inetd
root 1103 1 0 Apr26 ? 00:00:00 /usr/sbin/sshd
root 1110 1 0 Apr26 ? 00:00:00 /usr/sbin/ntpd -l
/var/adm/ntp.log -g -p /var/run/ntpd.pid
root 1122 1 0 Apr26 ? 00:00:00 /usr/sbin/crond -l10
root 1189 1 0 Apr26 tty1 00:00:00 /sbin/agetty 38400 tty1
linux
root 1190 1 0 Apr26 tty2 00:00:00 /sbin/agetty 38400 tty2
linux
root 1191 1 0 Apr26 tty3 00:00:00 /sbin/agetty 38400 tty3
linux
root 1192 1 0 Apr26 tty4 00:00:00 /sbin/agetty 38400 tty4
linux
root 1193 1 0 Apr26 tty5 00:00:00 /sbin/agetty 38400 tty5
linux
root 1194 1 0 Apr26 tty6 00:00:00 /sbin/agetty 38400 tty6
linux
root 1207 1103 0 Apr26 ? 00:00:00 sshd: r...@pty/s0
root 1211 1207 0 Apr26 ttyp0 00:00:00 -bash
root 1225 1103 0 Apr26 ? 00:00:00 sshd: r...@pty/s1
root 1229 1225 0 Apr26 ttyp1 00:00:00 -bash
root 1397 1 0 Apr26 ? 00:00:01
/usr/libexec/postfix/master
root 1402 1 0 Apr26 ? 00:00:00 dovecot
root 1403 1402 0 Apr26 ? 00:00:00 dovecot-auth
dovecot 1407 1402 0 Apr26 ? 00:00:00 pop3-login
dovecot 1408 1402 0 Apr26 ? 00:00:00 pop3-login
dovecot 1409 1402 0 Apr26 ? 00:00:00 pop3-login
root 5939 1103 0 Apr26 ? 00:00:00 sshd: r...@pty/s2
root 5943 5939 0 Apr26 ttyp2 00:00:00 -bash
root 6444 6 0 Apr26 ? 00:00:00 [pdflush]
amavis 8795 1 0 12:01 ? 00:00:00 amavisd (master)
postfix 8845 1397 0 12:05 ? 00:00:00 qmgr -l -t fifo -u
postfix 8849 1397 0 12:05 ? 00:00:00 tlsmgr -l -t unix -u
root 9840 1402 0 15:44 ? 00:00:00 dovecot-auth -w
root 10167 1211 0 17:04 ttyp0 00:00:00 tail -f -n 30
/var/adm/maillog
dovecot 11209 1402 0 20:56 ? 00:00:00 imap-login
amavis 11213 8795 0 20:57 ? 00:00:02 amavisd (ch16-11213-16)
dovecot 11278 1402 0 21:19 ? 00:00:00 imap-login
root 28102 1229 0 21:55 ttyp1 00:00:00 vi amavisd.conf
amavis 28966 8795 0 21:58 ? 00:00:00 amavisd (ch3-avail)
root 2441 6 0 22:02 ? 00:00:00 [pdflush]
postfix 2642 1397 0 22:05 ? 00:00:00 pickup -l -t fifo -u
dovecot 2645 1402 0 22:06 ? 00:00:00 imap-login
postfix 2646 1397 0 22:07 ? 00:00:00 smtpd -n smtp -t inet -u
-o stress
postfix 2648 1397 0 22:07 ? 00:00:00 anvil -l -t unix -u
postfix 2650 1397 0 22:07 ? 00:00:00 cleanup -z -t unix -u
postfix 2651 1397 0 22:07 ? 00:00:00 smtp -n smtp-amavis -t
unix -u -o smtp_data_done_timeout 1200 -o smtp_send_xforward_command yes
-o disable_dns
postfix 2652 1397 0 22:07 ? 00:00:00 trivial-rewrite -n rewrite
-t unix -u
postfix 2653 1397 0 22:07 ? 00:00:00 smtp -n smtp-amavis -t
unix -u -o smtp_data_done_timeout 1200 -o smtp_send_xforward_command yes
-o disable_dns
postfix 2654 1397 0 22:07 ? 00:00:00 smtpd -n 127.0.0.1:10025
-t inet -u -c -o content_filter -o local_recipient_maps -o
relay_recipient_maps -o
postfix 2655 1397 0 22:07 ? 00:00:00 pipe -n dovecot -t unix
flags=DRhu user=vmail vmail argv=/usr/libexec/dovecot/deliver -d
${recipient}
postfix 2657 1397 0 22:07 ? 00:00:00 smtpd -n 127.0.0.1:10025
-t inet -u -c -o content_filter -o local_recipient_maps -o
relay_recipient_maps -o
clamav 2664 1 0 22:09 ? 00:00:00 clamd
root 2666 5943 0 22:09 ttyp2 00:00:00 ps -ef
r...@mailserver2:/usr/share/clamav# uptime
22:09:57 up 1 day, 21:27, 3 users, load average: 0.36, 0.38, 0.53
r...@mailserver2:/usr/share/clamav#
Apr 27 22:13:22 mailserver2 postfix/smtpd[2690]: connect from
mail-vw0-f41.google.com[209.85.212.41]
Apr 27 22:13:23 mailserver2 postfix/smtpd[2690]: 3613385DF7:
client=mail-vw0-f41.google.com[209.85.212.41]
Apr 27 22:13:23 mailserver2 postfix/cleanup[2694]: 3613385DF7:
message-id=<n2n9211a9c11004271801wd2f1ff15ye6010cc642679...@mail.gmail.com>
Apr 27 22:13:23 mailserver2 postfix/qmgr[8845]: 3613385DF7:
from=<zulso...@gmail.com>, size=1879, nrcpt=1 (queue active)
Apr 27 22:13:23 mailserver2 amavis[2688]: (02688-01) ESMTP::10024
/home/amavis/tmp/amavis-20100427T221323-02688: <zulso...@gmail.com> ->
<ch...@chf.info.tm> SIZE=1879 Received: from mailserver2.tallernet
([127.0.0.1]) by localhost (mailserver2.tallernet [127.0.0.1])
(amavisd-new, port 10024) with ESMTP for <ch...@chf.info.tm>; Tue, 27 Apr
2010 22:13:23 -0300 (ART)
Apr 27 22:13:23 mailserver2 amavis[2688]: (02688-01) Checking:
cKHkUAMksUNN [209.85.212.41] <zulso...@gmail.com> -> <ch...@chf.info.tm>
Apr 27 22:13:23 mailserver2 clamd[2674]: Received POLLIN|POLLHUP on fd 5
Apr 27 22:13:23 mailserver2 clamd[2674]: Got new connection, FD 10
Apr 27 22:13:23 mailserver2 clamd[2674]: Received POLLIN|POLLHUP on fd 6
Apr 27 22:13:23 mailserver2 clamd[2674]: fds_poll_recv: timeout after 5
seconds
Apr 27 22:13:23 mailserver2 clamd[2674]: Received POLLIN|POLLHUP on fd 10
Apr 27 22:13:23 mailserver2 clamd[2674]: got command CONTSCAN
/home/amavis/tmp/amavis-20100427T221323-02688/parts (60, 7), argument:
/home/amavis/tmp/amavis-20100427T221323-02688/parts
Apr 27 22:13:23 mailserver2 clamd[2674]: mode -> MODE_WAITREPLY
Apr 27 22:13:23 mailserver2 clamd[2674]: Breaking command loop, mode is no
longer MODE_COMMAND
Apr 27 22:13:23 mailserver2 clamd[2674]: Consumed entire command
Apr 27 22:13:23 mailserver2 clamd[2674]: Number of file descriptors
polled: 1 fds
Apr 27 22:13:23 mailserver2 clamd[2674]: fds_poll_recv: timeout after 600
seconds
Apr 27 22:13:23 mailserver2 clamd[2674]: THRMGR: queue (single) crossed
low threshold -> signaling
Apr 27 22:13:23 mailserver2 clamd[2674]: THRMGR: queue (bulk) crossed low
threshold -> signaling
Apr 27 22:13:23 mailserver2 clamd[2674]: Finished scanthread
Apr 27 22:13:23 mailserver2 clamd[2674]: Scanthread: connection shut down
(FD 10)
Apr 27 22:13:23 mailserver2 amavis[2688]: (02688-01) lookup_sql_field(id)
(WARN: no such field in the SQL table), "ch...@chf.info.tm" result=undef
Apr 27 22:13:24 mailserver2 clamd[2674]: THRMGR: queue (single) crossed
low threshold -> signaling
Apr 27 22:13:24 mailserver2 clamd[2674]: THRMGR: queue (bulk) crossed low
threshold -> signaling
Apr 27 22:13:33 mailserver2 dovecot: auth(default): new auth connection:
pid=2697
Apr 27 22:13:33 mailserver2 postfix/smtpd[2697]: connect from
unknown[127.0.0.1]
Apr 27 22:13:33 mailserver2 postfix/smtpd[2697]: ABFBB85DF8:
client=unknown[127.0.0.1]
Apr 27 22:13:33 mailserver2 postfix/cleanup[2694]: ABFBB85DF8:
message-id=<n2n9211a9c11004271801wd2f1ff15ye6010cc642679...@mail.gmail.com>
Apr 27 22:13:33 mailserver2 postfix/qmgr[8845]: ABFBB85DF8:
from=<zulso...@gmail.com>, size=2720, nrcpt=1 (queue active)
Apr 27 22:13:33 mailserver2 amavis[2688]: (02688-01) FWD via SMTP:
<zulso...@gmail.com> -> <ch...@chf.info.tm>,BODY=7BIT 250 2.0.0 Ok,
id=02688-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as
ABFBB85DF8
Apr 27 22:13:33 mailserver2 amavis[2688]: (02688-01) Passed CLEAN,
[209.85.212.41] [209.85.212.41] <zulso...@gmail.com> ->
<ch...@chf.info.tm>, Message-ID:
<n2n9211a9c11004271801wd2f1ff15ye6010cc642679...@mail.gmail.com>, mail_id:
cKHkUAMksUNN, Hits: 2.614, size: 1879, queued_as: ABFBB85DF8,
dkim_...@gmail.com,zulso...@gmail.com, 10058 ms
Apr 27 22:13:33 mailserver2 postfix/smtp[2695]: 3613385DF7:
to=<ch...@chf.info.tm>, relay=127.0.0.1[127.0.0.1]:10024, delay=11,
delays=0.68/0.01/0.01/10, dsn=2.0.0, status=sent (250 2.0.0 Ok,
id=02688-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as
ABFBB85DF8)
Apr 27 22:13:33 mailserver2 postfix/qmgr[8845]: 3613385DF7: removed
Apr 27 22:13:33 mailserver2 dovecot: auth(default): master in:
user^i1^ich...@chf.info.tm^iservice=deliver
Apr 27 22:13:33 mailserver2 dovecot: auth(default):
passwd(ch...@chf.info.tm): lookup
Apr 27 22:13:33 mailserver2 dovecot: auth(default):
passwd(ch...@chf.info.tm): unknown user
Apr 27 22:13:33 mailserver2 dovecot: auth(default): master out:
user^i1^ich...@chf.info.tm^iuid=5000^igid=5000^ihome=/home/vmail/chf.info.tm/chris
Apr 27 22:13:33 mailserver2 postfix/pipe[2698]: ABFBB85DF8:
to=<ch...@chf.info.tm>, relay=dovecot, delay=0.18,
delays=0.03/0.02/0/0.13, dsn=2.0.0, status=sent (delivered via dovecot
service)
Apr 27 22:13:33 mailserver2 postfix/qmgr[8845]: ABFBB85DF8: removed
__________ Information from ESET NOD32 Antivirus, version of virus
signature database 5060 (20100426) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
