AvClamdPort is: /tmp/clamd
And clamd.log startup says: Tue Mar 12 16:57:01 2019 -> +++ Started at Tue Mar 12 16:57:01 2019 Tue Mar 12 16:57:01 2019 -> Received 0 file descriptor(s) from systemd. Tue Mar 12 16:57:01 2019 -> clamd daemon 0.101.1 (OS: darwin18.2.0, ARCH: x86_64, CPU: x86_64) Tue Mar 12 16:57:01 2019 -> Log file size limited to 2097152 bytes. Tue Mar 12 16:57:01 2019 -> Reading databases from /usr/local/clamav Tue Mar 12 16:57:01 2019 -> Not loading PUA signatures. Tue Mar 12 16:57:01 2019 -> Bytecode: Security mode set to "TrustSigned". Tue Mar 12 16:57:51 2019 -> Loaded 10207782 signatures. Tue Mar 12 16:57:52 2019 -> LOCAL: Unix socket file /tmp/clamd Tue Mar 12 16:57:52 2019 -> LOCAL: Setting connection queue length to 200 James. > On 27 Mar 2019, at 7:17 pm, Thomas Eckardt <thomas.ecka...@thockar.com > <mailto:thomas.ecka...@thockar.com>> wrote: > > How is your setting of 'AvClamdPort' ? > > Thomas > > > > > > Von: "James Brown via Assp-test" <assp-test@lists.sourceforge.net > <mailto:assp-test@lists.sourceforge.net>> > An: "ASSP development mailing list" <assp-test@lists.sourceforge.net > <mailto:assp-test@lists.sourceforge.net>> > Kopie: "James Brown" <jlbr...@bordo.com.au > <mailto:jlbr...@bordo.com.au>> > Datum: 27.03.2019 01:23 > Betreff: Re: [Assp-test] fixes in assp 2.6.4 *SPAM-Evaporator* build > 19084 > > > > Thanks for fixing the block report right button. > > I’ve upgraded to AFC 5.04 and build 19084. Am now seeing this in the log: > > Mar-26-19 16:34:44 [Main_Thread] Warning: got unexpected signal ALRM in > Main_Thread: package - IO::Poll, file - > /usr/local/Cellar/perl/5.28.1/lib/perl5/5.28.1/darwin-thread-multi-2level/IO/Poll.pm, > line - 87! > > And Clamd.log is showing: > > Tue Mar 26 16:31:06 2019 -> ERROR: ScanStream 1513: accept timeout. > Tue Mar 26 16:31:21 2019 -> ERROR: ScanStream 2000: accept timeout. > > With ASSP showing: > > Mar-26-19 16:37:44 [Worker_1] Warning: ClamAV Temporary Off : > > And: > > Mar-26-19 16:39:04 id-78744-15314 [Worker_2] 192.168.1.2 [OIP: 34.209.37.225] > <bounces.notification+50cfe82278e847cf40011...@spemail.trello.com > <mailto:bounces.notification+50cfe82278e847cf40011...@spemail.trello.com>> > to:us...@bordo.com.au <mailto:us...@bordo.com.au> [Plugin] calling plugin > ASSP_AFC > Mar-26-19 16:39:12 id-78742-17493 [Worker_1] 192.168.1.2 [OIP: 52.32.110.55] > <bounces.notification+592e36fb1d877df5e8c42...@spemail.trello.com > <mailto:bounces.notification+592e36fb1d877df5e8c42...@spemail.trello.com>> > to:us...@bordo.com.au <mailto:us...@bordo.com.au> ClamAV: scanned 745 bytes > in whitelisted message - > Mar-26-19 16:39:12 [Worker_1] ClamAV Up > > Mar-26-19 16:39:42 [Worker_4] ClamAV Up > Mar-26-19 16:39:48 id-78768-18674 [Worker_1] 192.168.1.2 [OIP: 35.160.49.11] > <bounces.notification+55ee2f719a05579b99d44...@spemail.trello.com > <mailto:bounces.notification+55ee2f719a05579b99d44...@spemail.trello.com>> > to: us...@bordo.com.au <mailto:us...@bordo.com.au> ClamAV: scanned 26769 > bytes in whitelisted message - > Warning: ClamAV Temporary Off : (suppressed 9 concurrent equal 'Warning' > loglines from all Workers in the last 125 seconds) > Mar-26-19 16:39:48 [Worker_1] Warning: ClamAV Temporary Off : > > James. > > > On 26 Mar 2019, at 1:15 am, Thomas Eckardt <thomas.ecka...@thockar.com > > <mailto:thomas.ecka...@thockar.com>> wrote: > > > > Hi all, > > > > fixed in assp 2.6.4 *SPAM-Evaporator* build 19084: > > > > - the resend from block report using the right button failed, if the > > subject of the mail contained 'x' followed by two digits (eg: x30) > > > > - using the unix socket for the ClamAV communication failed on some systems > > > > - assp has thrown an error if the ClamAV, configuration was anyway invalid > > or not working, but UseAvClamd was disabled > > > > - the rebuildspamdb task crashed, if the HMMdb contained only one record > > > > - ASSP_AFC.pm version 5.04 is released > > > > ASSP_AFC.pm is now able to tell a local mail server or andvanced thread > > analyzer, if the attached files may need some further investigation or > > analysis > > This is done by adding a special (hiddenly configurable) MIME header tag. > > > > # advanced thread analyzing or deep thread inspection for incoming mails > > $ASSP_AFC::enableATA = 0; # 1- check ATA if an attachment failed, > > 2- check if any attachment is found, 3- check every mail > > $ASSP_AFC::ATAHeaderTag = "X-ASSP-Require-ATA: YES; > > RESENDLINK;SHOWMAIL;SHOWLOG\r\n"; # the literal RESENDLINK will be replaced > > by a mailto resendlink, which may be shown by an ATA report mail > > > > # SHOWMAIL offers the link to open the file in the assp file editor > > > > # SHOWLOG offers the link to show the log for the mail in maillogtail > > (an optional trailing number defines the days in the past e.g. SHOWLOG2 for > > example - two days is default and used if no number is given) > > > > # every link is preceeded by \r\n\t > > > > > > > > > > Thomas > > > > DISCLAIMER: > > ******************************************************* > > This email and any files transmitted with it may be confidential, legally > > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > > This email was multiple times scanned for viruses. There should be no known > > virus in this email! > > ******************************************************* > > > > _______________________________________________ > > Assp-test mailing list > > Assp-test@lists.sourceforge.net <mailto:Assp-test@lists.sourceforge.net> > > https://lists.sourceforge.net/lists/listinfo/assp-test > > <https://lists.sourceforge.net/lists/listinfo/assp-test> > > > > > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net <mailto:Assp-test@lists.sourceforge.net> > https://lists.sourceforge.net/lists/listinfo/assp-test > <https://lists.sourceforge.net/lists/listinfo/assp-test> > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no known > virus in this email! > ******************************************************* > > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net <mailto:Assp-test@lists.sourceforge.net> > https://lists.sourceforge.net/lists/listinfo/assp-test
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
