RE: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of James Nelson Sent: Tuesday, July 13, 2004 9:53 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] clamav-milter and sendmail 8.13.0 problem. I am running Fedora Core 1, with sendmail 8.13.0 and installed clamav .74 1.1 from the following rpms: clamav-0.74-1.1.fc1.dag.i386.rpm clamav-db-0.74-1.1.fc1.dag.i386.rpm clamav-devel-0.74-1.1.fc1.dag.i386.rpm clamav-milter-0.74-1.1.fc1.dag.i386.rpm clamd-0.74-1.1.fc1.dag.i386.rpm My sendmail.mc contains: INPUT_MAIL_FILTER(`clmilter',`S=inet:[EMAIL PROTECTED], F=,T=S:10m;R:10m;E:10m')dnl define(`confINPUT_MAIL_FILTERS', `clmilter')dnl Upon reload of sendmail I get the following errors when mail is received by sendmail: Jul 12 17:39:08 mail4 sm-mta[32103]: i6CMd8en032103: SYSERR(root): out of memory: Cannot allocate memory I previously read there was a similar problem with clamav-milter but it was fixed. Is this possibly its return? Or could something else be causing it? Thanks, James --- I switched form TCP sockets to local sockets for sake of testing. The memory error has ceased but a new error is occurring when clamav-milter attempts to scan the email. The error is below: Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to error state Any clue? James --- This SF.Net email sponsored by Black Hat Briefings Training. Attend Black Hat Briefings Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.
On Tue, 13 Jul 2004 13:09:38 -0500 in [EMAIL PROTECTED] James Nelson [EMAIL PROTECTED] wrote: I switched form TCP sockets to local sockets for sake of testing. The memory error has ceased but a new error is occurring when clamav-milter attempts to scan the email. The error is below: Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to error state Any clue? Permissions on the socket perhaps? -- Brian Morrison bdm at fenrir dot org dot uk GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html --- This SF.Net email sponsored by Black Hat Briefings Training. Attend Black Hat Briefings Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.
On Tue, 13 Jul 2004 13:09:38 -0500 James Nelson [EMAIL PROTECTED] wrote: Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to error state The times that I have seen this message, it was because directories are group or world writable. See the sendmail Security document. Check permissions with: ls -ld /var and ls -ld /var/run Alex --- This SF.Net email sponsored by Black Hat Briefings Training. Attend Black Hat Briefings Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.
On Tue, 13 Jul 2004 13:09:38 -0500, James Nelson [EMAIL PROTECTED] wrote: Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to error state The .sock file should be CHMOD to srwx-- under the owner of the clamav process, probably the user clamav. Change the clam* programs to use /var/run/clamav Create the directory manually and set the ownershp to clamav:clamav and the permissions to 755 and you should be OK. -- Steve --- This SF.Net email sponsored by Black Hat Briefings Training. Attend Black Hat Briefings Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] UPDATE: clamav-milter and sendmail 8.13.0 problem.
Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): local socket name /var/run/clmilter.sock unsafe Jul 13 13:03:26 mail4 sm-mta[16326]: i6DI3E3a016326: Milter (clmilter): to error state Any clue? This is discussed in clamav-milter/INSTALL. If that doesn't work (and it usually does) then let me know. Just look for the string 'unsafe' in that file. -Nigel --- This SF.Net email sponsored by Black Hat Briefings Training. Attend Black Hat Briefings Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
