I've looked around on some of the old mailing list archives and I've seen that a few other people are having this problem.
clamd 0.60 on Debian Woody with Postfix + Amavis-new. I noticed one of the mail relays here was just queuing up mail and not sending it. Postfix and amavis were fine. A ps -ef | grep clamd revealed defunct clamd processes and every other clamd process was owned by init. I was able to get clamd up and running again only to have it die a few minutes later. I finally was able to trace it down to the following log entries: Aug 8 09:55:38 smtp1 amavis[28419]: (28419-10) ESMTP::10024 /var/lib/amavis/amavis-20030808T094257-28419: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Received: SIZE=1418815 from smtp1.oregonstate.edu ([127.0.0.1]) by localhost (smtp1 [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28419-10 for <[EMAIL PROTECTED]>; Fri, 8 Aug 2003 09:55:38 -0700 (PDT) Aug 8 09:55:38 smtp1 amavis[28419]: (28419-10) Checking: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Aug 8 09:55:38 smtp1 amavis[28419]: (28419-10) Decoding of part-00002 (Zip archive data, at least v2.0 to extract) failed, leaving it unpacked: error: inflate error -3 Followed shortly thereafter by: Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) Clam Antivirus-clamd FAILED - unknown status: Session(0): Time out ERROR\n Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) WARN: all primary virus scanners failed, trying backups Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) Virus scanner failure: /usr/bin/clamscan (exit status: 139) Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) TROUBLE in check_mail: virus_scan FAILED: ALL VIRUS SCANNERS FAILED: Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) PRESERVING EVIDENCE in /var/lib/amavis/amavis-20030808T094257-28419 Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) TIMING [total 38761 ms] - SMTP EHLO: 2 (0%), SMTP pre-MAIL: 0 (0%), SMTP pre-DATA-flush: 2 (0%), SMTP DATA: 109 (0%), body hash: 11 (0%), mime_decode: 107 (0%), get-file-type: 9 (0%), get-f ile-type: 6 (0%), decompose_part: 1 (0%), decompose_part: 6 (0%), get-file-type: 6 (0%), decompose_part: 1 (0%), parts: 0 (0%), AV-scan-1: 38348 (99%), AV-scan-2: 152 (0%), rundown: 1 (0%) Aug 8 09:56:16 smtp1 postfix/smtp[28517]: 278B3128255: to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1], delay=6234, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=28419-10, virus_scan FA ILED: ALL VIRUS SCANNERS FAILED: ) Immediately following this clamd would go belly up. Once I deleted that message from my queue, all was well. Anybody else see this problem? Its got to have something to do with the the attachment in that file. Unfortunately I deleted it just to get mail moving again. Thoughts? Scott Kveton -- Network Engineering Oregon State University ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
