Hi Eric, I have used the above link to update on my COS7 and i got below error.
Status of toaster services send: up (pid 22800) 2 seconds smtp: up (pid 22806) 2 seconds smtps: up (pid 22804) 2 seconds submission: up (pid 22809) 2 seconds send/log: up (pid 22802) 2 seconds smtp/log: up (pid 22808) 2 seconds smtps/log: up (pid 22803) 2 seconds submission/log: up (pid 22801) 2 seconds systemd service: clamd@scan: [ OK ] systemd service: clamav-freshclam: [ FAILED ] systemd service: spamd: [ OK ] systemd service: dovecot: [ OK ] systemd service: mariadb: [ OK ] systemd service: httpd: [ OK ] systemd service: named: [ OK ] systemd service: ntpd: [ OK ] systemd service: sshd: [ OK ] systemd service: network: [ OK ] systemd service: crond: [ OK ] systemd service: acpid: [ OK ] systemd service: atd: [ OK ] systemd service: autofs: [ OK ] systemd service: smartd: [ OK ] systemd service: irqbalance: [ OK ] #freshclam ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!). ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log). ERROR: initialize: libfreshclam init failed. ERROR: Initialization error! Could you assist me On Wed, Jun 24, 2020 at 11:43 AM Eric Broch <ebr...@whitehorsetc.com> wrote: > https://www.qmailtoaster.org/qttoepelclam.html > > Just made some changes, let me know how it works. > > Eric > On 6/23/2020 9:41 PM, r...@mattei.org wrote: > > Sorry I just saw this where is the script at? Thanks > > Il giorno 23 giu 2020, alle ore 18:18, Philip Nix Guru <phi...@ows.ch> > <phi...@ows.ch> ha scritto: > > > > I only saw 2 rules in the logs, > > missed one so clamd was kinda starting and dying, which produced the multi > qq soft reject > > > so I just added all the log options in scan.conf, restarted > clamd@scan.service (reloading is not enough) > > check status of daemon and I caught the last signature that was remaining > .. it only showed after I cleaned the 2 first ones > > Just a stupid mistake, went too quick in analyzing the logs > > > All seems fine now, script is bullet proof :) > > > the scan.conf had limited logging compared to the "old" clamav.conf toaster > > I didnt check that at first .. > > > All good, I will run that on the other servers now .. > > Thank you > > > > > > On 6/24/20 2:48 AM, Eric Broch wrote: > > What'd you do to mitigate? > > > On 6/23/2020 6:47 PM, Philip Nix Guru wrote: > > Hello > > ok it was 3 signatures that seem to be faulty with clamav 0.102.3 > > EMAIL_Cryptowall.yar > > peid.yar > > rfxn.yara > > > Seems ok now .. > > added debuging in scan.conf to check if all is running good > > > Next time I will do that in the day, not at night :) > > > Cheers > > -P > > > > On 6/24/20 1:49 AM, Philip Nix Guru wrote: > > Hello > > something weird, I dont have any files scanned by simscan anymore > > all attachements are qq soft reject > > > nothing logged anymore in /var/log/wmail > > like /var/qmail/simscan/15929xxxx messages > > > > On 6/24/20 1:04 AM, Eric Broch wrote: > > A soft link is not okay? > > # ls -l /var/run > lrwxrwxrwx. 1 root root 6 Aug 3 2015 /var/run -> ../run > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com > > -- *Regards,Manikandan.C*