Your message dated Sat, 26 Feb 2005 12:56:19 -0500
with message-id <[EMAIL PROTECTED]>
and subject line Bug#296953: Milter (clamav): timeout before data read
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 25 Feb 2005 22:59:10 +0000
>From [EMAIL PROTECTED] Fri Feb 25 14:59:10 2005
Return-path: <[EMAIL PROTECTED]>
Received: from 178.230.13.217.in-addr.dgcsystems.net (yxa.extundo.com)
[217.13.230.178] (root)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D4oQP-0007Dv-00; Fri, 25 Feb 2005 14:59:10 -0800
Received: from latte.josefsson.org (c494102a.s-bi.bostream.se [217.215.27.65])
(authenticated bits=0)
by yxa.extundo.com (8.13.3/8.13.3/Debian-6) with ESMTP id j1PMvdc6009872
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK)
for <[EMAIL PROTECTED]>; Fri, 25 Feb 2005 23:59:06 +0100
From: Simon Josefsson <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Milter (clamav): timeout before data read
OpenPGP: id=B565716F; url=http://josefsson.org/key.txt
X-Hashcash: 1:21:050225:[EMAIL PROTECTED]::0JEjhBYdv8vnWJRj:4Mcc
Date: Fri, 25 Feb 2005 23:57:29 +0100
Message-ID: <[EMAIL PROTECTED]>
User-Agent: Gnus/5.110003 (No Gnus v0.3) Emacs/22.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Virus-Scanned: ClamAV version 0.81, clamav-milter version 0.81b on
yxa.extundo.com
X-Virus-Status: Clean
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: clamav-milter
Version: 0.81-2
Hi. I'm using clamav-milter on a pretty busy mail server that uses
sendmail (from debian, 8.13.3-6). We have run 'testing' for a long
time, and it has worked well until recently (perhaps a few weeks at
most). Sometimes, in the syslog I get these:
Feb 25 23:47:53 yxa sm-mta[9481]: j1PMhp23009481: Milter (clamav): timeout
before data read
Feb 25 23:47:53 yxa sm-mta[9481]: j1PMhp23009481: Milter (clamav): to error
state
And when this happen, I have tons of clamav-milter processes running:
...
clamav 9529 0.0 0.2 391440 2812 ? S 23:46 0:00
/usr/sbin/clamav-milter --max-children=2 -ol --external --quiet -Q [EMAIL
PROTECTED] --pidfile /var/run/clamav/clamav-milter.pid
local:/var/run/clamav/clamav-milter.ctl
clamav 9570 0.0 0.2 391440 2812 ? S 23:47 0:00
/usr/sbin/clamav-milter --max-children=2 -ol --external --quiet -Q [EMAIL
PROTECTED] --pidfile /var/run/clamav/clamav-milter.pid
local:/var/run/clamav/clamav-milter.ctl
clamav 9573 0.0 0.2 391440 2812 ? S 23:47 0:00
/usr/sbin/clamav-milter --max-children=2 -ol --external --quiet -Q [EMAIL
PROTECTED] --pidfile /var/run/clamav/clamav-milter.pid
local:/var/run/clamav/clamav-milter.ctl
clamav 9584 0.0 0.2 391440 2812 ? S 23:47 0:00
/usr/sbin/clamav-milter --max-children=2 -ol --external --quiet -Q [EMAIL
PROTECTED] --pidfile /var/run/clamav/clamav-milter.pid
local:/var/run/clamav/clamav-milter.ctl
...
yxa-iv:~# ps auxww|grep clama|wc -l
196
yxa-iv:~#
Both clamd and freshclam are still running.
It is not clear exactly what real problems this causes. Delivering
mail to local users (which should be virus scanned) appear to be
suspended. No mail is discarded or bounced, as far as I can tell.
If I restart the 'clamav-milter' service, everything starts to work
again.
It doesn't seem to recover from this condition by itself.
Any ideas?
Config files below, at least clamav-milter has been slightly modified.
Thanks,
Simon
/etc/clamav/clamd.conf:
#Automatically Generated by clamav-daemon postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-daemon
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket
User clamav
AllowSupplementaryGroups
ScanMail
ScanArchive
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogFile /var/log/clamav/clamav.log
LogTime
LogFileMaxSize 0
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav/
SelfCheck 3600
ScanOLE2
ScanPE
DetectBrokenExecutables
ScanHTML
ArchiveBlockMax
/etc/default/clamav-milter:
OPTIONS="--max-children=2 -ol --external --quiet -Q [EMAIL PROTECTED]"
#If you want to set an alternate pidfile (why?) please do it here:
#PIDFILE=/var/run/clamav/clamav-milter.pid
#If you want to set an alternate socket, do so here (remember to change
# sendmail.mc):
#SOCKET=local:/var/run/clamav/clamav-milter.ctl
---------------------------------------
Received: (at 296953-done) by bugs.debian.org; 26 Feb 2005 17:56:21 +0000
>From [EMAIL PROTECTED] Sat Feb 26 09:56:21 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mail.lobefin.net [216.158.52.98] (Debian-exim)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D56Av-0005wh-00; Sat, 26 Feb 2005 09:56:21 -0800
Received: from lobefin.net ([216.158.52.108] ident=Debian-exim)
by mail.lobefin.net with asmtp (TLS-1.0:RSA_ARCFOUR_SHA:16)
(Exim 4.34)
id 1D56Au-0001fi-3R; Sat, 26 Feb 2005 12:56:20 -0500
Received: from steve by lobefin.net with local (Exim 4.34)
id 1D56At-0004iC-EW; Sat, 26 Feb 2005 12:56:19 -0500
Date: Sat, 26 Feb 2005 12:56:19 -0500
From: Stephen Gran <[EMAIL PROTECTED]>
To: Simon Josefsson <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
Subject: Re: Bug#296953: Milter (clamav): timeout before data read
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="RnlQjJ0d97Da+TV1"
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
User-Agent: Mutt/1.3.28i
X-Editor: VIM - Vi IMproved 6.1
X-OS: Linux hadrian 2.4.26-2-686-smp i686
X-Uptime: 136 days
X-Latin: Hodie quarto Kalendas Martias MMDCCLVIII ab urbe condita est
X-Date: Today is Boomtime, the 57th day of Chaos in the YOLD 3171
X-DDate: Only 2431184 Shopping Days Left Before X-Day. Keep the Lasagna flying!
X-Motto: debian/rules
Sender: Stephen Gran <[EMAIL PROTECTED]>
X-Authenticated-Sender: steve
X-Scanned-By: ClamAV at mail.lobefin.net
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--RnlQjJ0d97Da+TV1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
This one time, at band camp, Simon Josefsson said:
> Stephen Gran <[EMAIL PROTECTED]> writes:
> >
> > You have hit MaxThreads/MaxConnectionQueueLength limit.
>=20
> Thanks for quick response! I've changed the numbers to 30/20, I'll
> see if it helps.
>=20
> Is this documented in a FAQ somewhere? I searched briefly before
> reporting, but didn't locate anything useful. I think the problem
> here is finding out that the error message really meant that a soft
> limit was reached, that could be fixed by modifying the configuration.
Not very well, I'm afraid. The manpage for clamd.conf and clamd mention
it, but don't do a very good job of explaining it. It is also briefly
mentioned in the clamav-milter manpage, under --max-children.
It is difficult to make the milter know that the reason it timed out is
because a soft limit was reached, rather than a failure internal to clamd,
or something else altogether. It might be useful to put the method
for figuring out how many pending connections you can have somewhere,
so I will certainly discuss that part of it with upstream.
> Closing the report is fine by me.
OK, doing so.
--=20
-----------------------------------------------------------------
| ,''`. Stephen Gran |
| : :' : [EMAIL PROTECTED] |
| `. `' Debian user, admin, and developer |
| `- http://www.debian.org |
-----------------------------------------------------------------
--RnlQjJ0d97Da+TV1
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFCILhDSYIMHOpZA44RAribAKDPI4FdlLoOA+VKUGm/zBS68iO4vACfTsz0
oCIUh1Uc1M94tLDI9gr9BB8=
=dKy1
-----END PGP SIGNATURE-----
--RnlQjJ0d97Da+TV1--
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
