Mark Martinec wrote:
> Bill,
> 
>> 451 4.5.0 Error in processing,
>> id=29363-02, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED:
>> ClamAV-clamscan av-scanner FAILED: Not a CODE reference at (eval 87)
>> line 403, <GEN54> line 65.;
> 
>> @av_scanners_backup = (
>>
>> ### http://www.clamav.net/   - backs up clamd or Mail::ClamAV
>> ['ClamAV-clamscan', 'clamscan',
>>   "--stdout --no-summary -r --tempdir=$TEMPBASE {}", [0], [1],
>                                                             ^^^^^
>>   qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],
>> );
> 
> One argument too many.
> 
> Either use [1] or qr/:.*\sFOUND$/, you can't have both
> in that position.
> 
>   Mark

Thanks for the reply, Mark.  I've updated my clamscan entry in
amavisd.conf, so it now looks like:

### http://www.clamav.net/   - backs up clamd or Mail::ClamAV
['ClamAV-clamscan', 'clamscan',
  "--stdout --no-summary -r --tempdir=$TEMPBASE {}", [0],
  qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],
);

Then did an "amavisd reload", but I am still seeing in the mailq:

0F6B65A53CB     2037 Fri Feb 13 16:46:50  [email protected]
(host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing,
id=01189-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED:
ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk
to /var/amavis/clamd.sock (Can't connect to UNIX socket
/var/amavis/clamd.sock: No such file or directory) at (eval 87) line
325, <GEN51> line 37.; ClamAV-clamscan av-scanner FAILED: run_av error:
run_av: Exceeded allowed time at (eval 87) line 532, <GEN51> line 37.
(in reply to end of DATA command))
                                         [email protected]

And in the maillog:

Feb 13 16:46:50 mail postfix/qmgr[28813]: 0F6B65A53CB:
from=<[email protected]>, size=2037, nrcpt=1 (queue active)
Feb 13 16:46:51 mail amavis[1189]: (01189-01) (!)ClamAV-clamd: Can't
connect to UNIX socket /var/amavis/clamd.sock: No such file or
directory, retrying (2)
Feb 13 16:46:57 mail amavis[1189]: (01189-01) (!!)ClamAV-clamd
av-scanner FAILED: run_av error: Too many retries to talk to
/var/amavis/clamd.sock (Can't connect to UNIX socket
/var/amavis/clamd.sock: No such file or directory) at (eval 87) line
325, <GEN51> line 37.
Feb 13 16:46:57 mail amavis[1189]: (01189-01) (!!)WARN: all primary
virus scanners failed, considering backups
Feb 13 16:47:07 mail amavis[1189]: (01189-01) (!)killing process [1320]
running ClamAV-clamscan (reason: on reading: timed out)
Feb 13 16:47:08 mail amavis[1189]: (01189-01) (!)process [1320] running
ClamAV-clamscan is still alive, using a bigger hammer
Feb 13 16:47:08 mail amavis[1189]: (01189-01) (!)run_av
(ClamAV-clamscan): collect_results - reading aborted: timed out at
/usr/local/sbin/amavisd line 3202, <GEN51> line 37.
Feb 13 16:47:08 mail amavis[1189]: (01189-01) (!!)ClamAV-clamscan
av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval
87) line 532, <GEN51> line 37.
Feb 13 16:47:08 mail amavis[1189]: (01189-01) (!!)TROUBLE in check_mail:
virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd
av-scanner FAILED: run_av error: Too many retries to talk to
/var/amavis/clamd.sock (Can't connect to UNIX socket
/var/amavis/clamd.sock: No such file or directory) at (eval 87) line
325, <GEN51> line 37.; ClamAV-clamscan av-scanner FAILED: run_av error:
run_av: Exceeded allowed time at (eval 87) line 532, <GEN51> line 37.
Feb 13 16:47:08 mail amavis[1189]: (01189-01) (!)PRESERVING EVIDENCE in
/var/amavis/tmp/amavis-20090213T164650-01189
Feb 13 16:47:08 mail postfix/smtp[1318]: 0F6B65A53CB:
to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=18,
delays=0.13/0.02/0.04/18, dsn=4.5.0, status=deferred (host
127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=01189-01,
virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd
av-scanner FAILED: run_av error: Too many retries to talk to
/var/amavis/clamd.sock (Can't connect to UNIX socket
/var/amavis/clamd.sock: No such file or directory) at (eval 87) line
325, <GEN51> line 37.; ClamAV-clamscan av-scanner FAILED: run_av error:
run_av: Exceeded allowed time at (eval 87) line 532, <GEN51> line 37.
(in reply to end of DATA command))

Any other thoughts?

Thanks!

Bill

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
AMaViS-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to