On Fri, Nov 1, 2013 at 5:51 AM, Paolo De Michele <[email protected]>wrote:

>
> On 11/01/2013 10:11 AM, Paolo De Michele wrote:
>
>>
>> On 11/01/2013 02:45 AM, Dennis Peterson wrote:
>>
>>> On 10/31/13, 5:08 PM, Paolo De Michele wrote:
>>>
>>>>
>>>>
>>>>
>>>>
>>>> hi everybody,
>>>>
>>>> I installed a web/mail server correctly with the suite ispconfig.
>>>> between the packages I installed amavis and clamav
>>>> However, the email will be populated with the object UNCECKED and the
>>>> system
>>>> logs I see this:
>>>>
>>>>
>>> Run the clamconf file and send the output to the list. Scan it yourself
>>> as you may find the problem on your own.
>>>
>>> dp
>>>
>>> ______________________________**_________________
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/vrtadmin/**clamav-faq<https://github.com/vrtadmin/clamav-faq>
>>> http://www.clamav.net/support/**ml <http://www.clamav.net/support/ml>
>>>
>> dennis,
>>
>> thank you for your reply
>> this is my clamd.conf
>>
>>
>> #Automatically Generated by clamav-base postinst
>> #To reconfigure clamd run #dpkg-reconfigure clamav-base
>> #Please read /usr/share/doc/clamav-base/**README.Debian.gz for details
>> LocalSocket /var/run/clamav/clamd.ctl
>> FixStaleSocket true
>> LocalSocketGroup clamav
>> LocalSocketMode 666
>> # TemporaryDirectory is not set to its default /tmp here to make
>> overriding
>> # the default with environment variables TMPDIR/TMP/TEMP possible
>> User clamav
>> AllowSupplementaryGroups true
>> ScanMail true
>> ScanArchive true
>> ArchiveBlockEncrypted false
>> MaxDirectoryRecursion 15
>> FollowDirectorySymlinks false
>> FollowFileSymlinks false
>> ReadTimeout 180
>> MaxThreads 12
>> MaxConnectionQueueLength 15
>> LogSyslog false
>> LogFacility LOG_LOCAL6
>> LogClean false
>> LogVerbose false
>> PidFile /var/run/clamav/clamd.pid
>> DatabaseDirectory /var/lib/clamav
>> SelfCheck 3600
>> Foreground false
>> Debug false
>> ScanPE true
>> ScanOLE2 true
>> ScanHTML true
>> DetectBrokenExecutables false
>> ExitOnOOM false
>> LeaveTemporaryFiles false
>> AlgorithmicDetection true
>> ScanELF true
>> IdleTimeout 30
>> PhishingSignatures true
>> PhishingScanURLs true
>> PhishingAlwaysBlockSSLMismatch false
>> PhishingAlwaysBlockCloak false
>> DetectPUA false
>> ScanPartialMessages false
>> HeuristicScanPrecedence false
>> StructuredDataDetection false
>> CommandReadTimeout 5
>> SendBufTimeout 200
>> MaxQueue 100
>> ExtendedDetectionInfo true
>> OLE2BlockMacros false
>> StreamMaxLength 25M
>> LogFile /var/log/clamav/clamav.log
>> LogTime true
>> LogFileUnlock false
>> LogFileMaxSize 0
>> Bytecode true
>> BytecodeSecurity TrustSigned
>> BytecodeTimeout 60000
>> OfficialDatabaseOnly false
>> CrossFilesystems true
>>
> in the /var/log/clamav/clamav.log I see:
>
> Thu Oct 31 02:05:03 2013 -> +++ Started at Thu Oct 31 02:05:03 2013
> Thu Oct 31 02:05:03 2013 -> clamd daemon 0.97.8 (OS: linux-gnu, ARCH:
> x86_64, CPU: x86_64)
> Thu Oct 31 02:05:03 2013 -> Log file size limited to -1 bytes.
> Thu Oct 31 02:05:03 2013 -> Reading databases from /var/lib/clamav
> Thu Oct 31 02:05:03 2013 -> Not loading PUA signatures.
> Thu Oct 31 02:05:03 2013 -> Bytecode: Security mode set to "TrustSigned".
> Thu Oct 31 02:05:11 2013 -> Loaded 2865687 signatures.
> Thu Oct 31 02:05:12 2013 -> LOCAL: Unix socket file
> /var/run/clamav/clamd.ctl
> Thu Oct 31 02:05:12 2013 -> LOCAL: Setting connection queue length to 15
> Thu Oct 31 02:05:12 2013 -> ERROR: daemonize() failed: Cannot allocate
> memory
> Thu Oct 31 02:05:12 2013 -> Socket file removed.
>
>
> # free -m
>                    total       used       free     shared buffers
> cached
> Mem:           497        425         71          0 8         75
> -/+ buffers/cache:        341        155
> Swap:            0           0          0
>

It looks like you need more memory. Here's the relevant line from your log
file: Thu Oct 31 02:05:12 2013 -> ERROR: daemonize() failed: Cannot
allocate memory

And indeed your `free -m` output shows that you're out of memory and you
don't have any swap installed. Adding more memory would fix your problem.

Thanks,

Shawn
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Reply via email to