it looks like that the virus signature update dated 01.May is killing the clamav process,
if I enable the virus scanner no smtp mail comes in:
SMTP Log:
May 3 01:32:37 amavis[3807]: (03807-01) (!)Clam Antivirus-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
May 3 01:32:43 amavis[3807]: (03807-01) (!)run_av (Clam Antivirus-clamd, built-in i/f): Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293.
May 3 01:32:43 amavis[3807]: (03807-01) (!!)Clam Antivirus-clamd av-scanner FAILED: CODE(0x9dabe00) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293. at (eval 40) line 491.
May 3 01:32:43 amavis[3807]: (03807-01) (!!)WARN: all primary virus scanners failed, considering backups
May 3 01:34:37 postfix/smtpd[3953]: connect from dslb-084-063-018-112.pools.arcor-ip.net[84.63.18.112]
May 3 01:34:38 postfix/smtpd[3953]: NOQUEUE: reject: RCPT from dslb-084-063-018-112.pools.arcor-ip.net[84.63.18.112]: 554 Service unavailable; Client host [84.63.18.112] blocked using dul.dnsbl.sorbs.net; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?84.63.18.112; from= to= proto=ESMTP helo=
May 3 01:34:39 postfix/smtpd[3953]: disconnect from dslb-084-063-018-112.pools.arcor-ip.net[84.63.18.112]
May 3 01:37:59 postfix/anvil[3954]: statistics: max connection rate 1/60s for (smtp:84.63.18.112) at May 3 01:34:37
May 3 01:37:59 postfix/anvil[3954]: statistics: max connection count 1 for (smtp:84.63.18.112) at May 3 01:34:37
May 3 01:37:59 postfix/anvil[3954]: statistics: max cache size 1 at May 3 01:34:37
May 3 01:39:18 amavis[3807]: (03807-01) (!)killing process [3929] running Clam Antivirus - clamscan (reason: on reading: timed out)
May 3 01:39:19 amavis[3807]: (03807-01) (!)run_av (Clam Antivirus - clamscan): collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671.
May 3 01:39:19 amavis[3807]: (03807-01) (!!)Clam Antivirus - clamscan av-scanner FAILED: /usr/bin/clamscan collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671. at (eval 40) line 491.
May 3 01:39:19 amavis[3807]: (03807-01) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: Clam Antivirus-clamd av-scanner FAILED: CODE(0x9dabe00) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293. at (eval 40) line 491.; Clam Antivirus - clamscan av-scanner FAILED: /usr/bin/clamscan collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671. at (eval 40) line 491.
May 3 01:39:19 amavis[3807]: (03807-01) (!)PRESERVING EVIDENCE in /var/amavis/amavis-20080503T013235-03807
May 3 01:39:20 postfix/smtp[3891]: EF5FC62E: to=, relay=127.0.0.1[127.0.0.1], delay=8457, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=03807-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: Clam Antivirus-clamd av-scanner FAILED: CODE(0x9dabe00) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 40) line 293. at (eval 40) line 491.; Clam Antivirus - clamscan av-scanner FAILED: /usr/bin/clamscan collect_results - reading aborted: timed out at /usr/sbin/amavisd line 2671. at (eval 40) line 491. (in reply to end of DATA command))
I have to disable virus scanning to make the SMTP Proxy working.
--
Werner Seifert
NetComp Netzwerk- und Computerservice
Hilling 16
4702 Wallern
Austria
+43 699 100 66 570
Novell CNS, CNA, MCNE, MCNI, CDE
MS MCPi
UID: ATU61405759
BEGIN:VCARD VERSION:2.1 X-GWTYPE:USER FN:Werner Seifert TEL;WORK:+43 (0)676 3602856 ORG:;Technik TEL;PREF;FAX:+43 (0)7249 488902 EMAIL;WORK;PREF;NGW:[EMAIL PROTECTED] N:Seifert;Werner TITLE:TCO END:VCARD
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user
