Juan,

> I upgraded my OpenBSD system from 4.2 stable to 4.3 290408-snapshot
> and all was well.  I'm using Clamav as my sole virus checker.  After
> upgrading Clamav from 0.92.1 to 0.93 by source I'm having problems.
> The amavisd-new daemon can no longer talk to clamav through the clamd
> socket:
>
> amavis[20611]: (20611-01) (!)run_av (ClamAV-clamd, built-in i/f): Too
> many retries to talk to /var/clamav/clamd_sock (timed out)
> at (eval 99) line 310.

clamd is alive, socket exists and is connectable, but clamd did
not respond in reasonable time.

> $ su - amavisd -c 'ls /var/clamav/clamd_sock'
> srwxrwxrwx  1 amavisd  amavisd     0B Jun  1 00:16 /var/clamav/clamd_sock
>
> I start clamd like this:
> su - amavisd -c /usr/local/clamav/sbin/clamd

Try using clamdscan or a plain socat (http://www.dest-unreach.org/socat/)
running as user 'amavisd' to simulate a client, and see what happens.
Turning up more verbose logging in clamd may provide more information.


# su amavisd

$ clamdscan 0.lis
/usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 1.051 sec (0 m 1 s)
patsy src# clamdscan -v 0.lis
/usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 1.467 sec (0 m 1 s)


or connect to a socket manually:

$ socat -v readline unix-connect:/var/run/clamav/clamd
SCAN /usr/local/src/0.lis

  > 2008/06/04 17:24:23.383344  length=26 from=0 to=25
  SCAN /usr/local/src/0.lis
  < 2008/06/04 17:24:24.803284  length=69 from=0 to=68
  /usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND
  /usr/local/src/0.lis: Email.ScamL.Gen293.Sanesecurity.07043019 FOUND


Mark


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to