Since some days,

without any modification, update or others...

primary internal av scanner code for IKARUS scan.server starting give these errors:

May  9 16:58:42 mail amavis[1542]: (01542-01) (!)IKARUS scan.server: Error reading from socket: Connection reset by peer at /usr/sbin/amavisd-new line 8246., retrying (2) May  9 16:58:45 mail amavis[1543]: (01543-01) (!)IKARUS scan.server: Error reading from socket: Connection reset by peer at /usr/sbin/amavisd-new line 8246., retrying (2) May  9 16:59:18 mail amavis[1542]: (01542-01) (!)IKARUS scan.server av-scanner FAILED: run_av error: Too many retries to talk to 127.0.0.1:81 (Error reading from socket: Connection reset by peer at /usr/sbin/amavisd-new line 8246.) at (eval 110) line 613.\n

But scanner (IKARUS) works fine, and socket available, as confirmed by:

curl http://127.0.0.1:81/virusscan?filename=/tmp/eicar_com.zip

return expected output:

<?xml version="1.0" encoding="UTF-8"?><info><context><vdbbuild>09.05.2022 09:48:46 (104843)</vdbbuild><engineversion>6.0.24.0</engineversion></context><scan><filename>/tmp/eicar_com.zip</filename><crc64>0x92ae23450b2ebe95</crc64><status>infected</status><infection><name>EICAR-Test-File</name><id>462103</id></infection></scan></info>

In my 15-av_scanners scanner definition is:

['IKARUS scan.server',
   \&ask_daemon,
   ["GET /virusscan?filename={}/../email.txt HTTP/1.0\r\n\r\n", '127.0.0.1:81'],
   qr/<status>clean<\/status>/,
   qr/<status>infected<\/status>/,
   qr/<name>(.+)<\/name>/ ],

in accordance with amavisd.conf example

I use:

amavisd-new 2.10.1-4 on Debian 9.13

any help is appreciated

AlessandroLota

--
è facile registrare un dominio con bitName!https://www.bitname.it

Reply via email to