Newsgroup: it.comp.os.linux.sys
Titolo: clamsmtpd + postfix == errori

Ciao,
Ho un problema con clamsmtpd, il quale pare schiantarsi processando
determinate email:
# more /var/log/mail.log | grep clamsmtpd | grep 12E995
Jun 30 08:57:14 dns1 clamsmtpd: 12E995: accepted connection from: 127.0.0.1
Jun 30 09:00:14 dns1 clamsmtpd: 12E995: CLAMAV: network read operation timed
out
Jun 30 09:00:14 dns1 clamsmtpd: 12E995: unexepected response from clamd:
Jun 30 09:00:14 dns1 clamsmtpd: 12E995: from=
a...@bbb.it
, to=
c...@ddd.com
,
status=CLAMAV-ERROR
Jun 30 09:03:15 dns1 clamsmtpd: 12E995: CLAMAV: couldn't connect
to: /var/run/clamav/clamd.ctl: Resource temporarily unavailable
Seguono le versioni di clam installate sul server:
# dpkg -l | grep clam
ii  clamav           0.90.1-3etch7    antivirus scanner for Unix
ii  clamav-base      0.90.1-3etch7    base package for clamav, an anti-virus
utili
ii  clamav-daemon    0.90.1-3etch7    antivirus scanner daemon
ii  clamav-freshclam 0.90.1-3etch7    downloads clamav virus databases from
the In
ii  clamsmtp         1.8-5            virus-scanning SMTP proxy
ii  libclamav2       0.90.1-3etch7    virus scanner library
Il problema è che quando si verifica questa situazione le mail vengono
fermate nella active queue e non avviene nè il delivery, nè il relay.
E' un bug di clam oppure si risolve in qualche modo?
 
Grazie
-- 
g4b0, linux user n. 369000
http://gabo.homelinux.com

g4b0 ha scritto:

Non so se può essere questo il rimedio, però sicuramente la versione è di 
qualche tempo fa, adesso siamo alla 0.93.1
-- 
Roberto Tagliaferri-Linux user #30785 <-> r.tagliaferri@(forse)
tosnet.it
Advertising is a valuable economic factor because it is the cheapest
way of selling goods, particularly if the goods are worthless.
		-- Sinclair Lewis

Roberto Tagliaferri wrote:

Dopo un apt-get upgrade ho le seguenti versioni (su debian etch):
dns1:/var/run/clamav# dpkg -l | grep clam
ii  clamav            0.90.1dfsg-3etch11  antivirus scanner for Unix
ii  clamav-base       0.90.1dfsg-3etch11  base package for clamav, an
ii  clamav-daemon     0.90.1dfsg-3etch11  antivirus scanner daemon
ii  clamav-freshclam  0.90.1dfsg-3etch11  downloads clamav virus databases
ii  clamsmtp          1.8-5               virus-scanning SMTP proxy
ii  libclamav2        0.90.1dfsg-3etch11  virus scanner library
Domani saprò dirvi se continua con i problemi del post precedente o se è
cambiato qualcosa..
Una cosa che non ho capito è il seguente log:
# tail -n 30 /var/log/clamav/clamav.log
Mon Jun 30 09:54:50 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 10:11:42 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 10:55:08 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Mon Jun 30 10:55:08 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 11:12:00 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 11:55:36 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Mon Jun 30 11:55:36 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 12:12:29 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 12:55:40 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Mon Jun 30 12:55:40 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 13:12:35 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 13:57:57 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Mon Jun 30 13:57:57 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 14:14:51 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 14:58:35 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Mon Jun 30 14:58:35 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 15:15:28 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 15:59:29 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Mon Jun 30 15:59:29 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 16:16:20 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 17:10:36 2008 -> SelfCheck: Database modification detected.
Forcing reload.
Mon Jun 30 17:10:36 2008 -> Reading databases from /var/lib/clamav
Mon Jun 30 17:27:29 2008 -> Database correctly reloaded (327534 signatures)
Mon Jun 30 17:43:12 2008 -> Socket file removed.
Mon Jun 30 17:43:12 2008 -> Pid file removed.
Mon Jun 30 17:43:12 2008 -> --- Stopped at Mon Jun 30 17:43:12 2008
Mon Jun 30 17:43:14 2008 -> +++ Started at Mon Jun 30 17:43:14 2008
Mon Jun 30 17:43:14 2008 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386,
CPU: i486)
Mon Jun 30 17:43:14 2008 -> Log file size limit disabled.
Mon Jun 30 17:43:14 2008 -> Reading databases from /var/lib/clamav
il sefcheck dice che "Database modification detected.", ma poi il numero
delle signature non cambia.. E la cosa succede apparentemente ogni 40-45
minuti..


Wow,
Ho dato il mio primo  `apt-get -u upgrade` a distanza (il server è a 3 ore
di macchina dal mio ufficio). Sono tutto sudato :)
Anche perchè mi ha aggiornato anche i moduli del kernel, ed ho dovuto
riavviare, dopo 244 gloriosi giorni di uptime! Devo dire che da
slackwarista convertito per l'occasione a debian sono rimasto abbastanza
stupito dal fatto che tutto funzioni ancora.. E mentre il ping non mi dava
nessun risultato le goccioline di sudore freddo hanno bagnato la
scrivania.. poi tutto ha ripreso il suo corso, ed il server è nuovamente
up!
Tornando IT, ecco qua:
# dpkg -l | grep clam
ii  clamav           0.93.1.dfsg-volatile1 anti-virus utility for Unix
ii  clamav-base      0.93.1.dfsg-volatile1 anti-virus utility for Unix
ii  clamav-daemon    0.93.1.dfsg-volatile1 anti-virus utility for Unix
ii  clamav-freshclam 0.93.1.dfsg-volatile1 anti-virus utility for Unix
ii  clamsmtp         1.8-5                 virus-scanning SMTP proxy
rc  libclamav2       0.91.2-1~volatile1    virus scanner library
ii  libclamav4       0.93.1.dfsg-volatile1 anti-virus utility for Unix
Clam* tutto bello aggiornato all'ultima versione, ed i log dicono ciò:
# tail -n21 -f /var/log/clamav/clamav.log
Tue Jul  1 10:30:10 2008 -> +++ Started at Tue Jul  1 10:30:10 2008
Tue Jul  1 10:30:10 2008 -> clamd daemon 0.93.1 (OS: linux-gnu, ARCH: i386,
CPU: i486)
Tue Jul  1 10:30:10 2008 -> Log file size limit disabled.
Tue Jul  1 10:30:10 2008 -> Reading databases from /var/lib/clamav
Tue Jul  1 10:30:10 2008 -> Not loading PUA signatures.
Tue Jul  1 10:30:13 2008 -> Loaded 306247 signatures.
Tue Jul  1 10:30:13 2008 -> LOCAL: Unix socket
file /var/run/clamav/clamd.ctl
Tue Jul  1 10:30:13 2008 -> LOCAL: Setting connection queue length to 15
Tue Jul  1 10:30:13 2008 -> Limits: Global size limit set to 104857600
bytes.
Tue Jul  1 10:30:13 2008 -> Limits: File size limit set to 26214400 bytes.
Tue Jul  1 10:30:13 2008 -> Limits: Recursion level limit set to 16.
Tue Jul  1 10:30:13 2008 -> Limits: Files limit set to 10000.
Tue Jul  1 10:30:13 2008 -> Archive support enabled.
Tue Jul  1 10:30:13 2008 -> Algorithmic detection enabled.
Tue Jul  1 10:30:13 2008 -> Portable Executable support enabled.
Tue Jul  1 10:30:13 2008 -> ELF support enabled.
Tue Jul  1 10:30:13 2008 -> Mail files support enabled.
Tue Jul  1 10:30:13 2008 -> OLE2 support enabled.
Tue Jul  1 10:30:13 2008 -> PDF support disabled.
Tue Jul  1 10:30:13 2008 -> HTML support enabled.
Tue Jul  1 10:30:13 2008 -> Self checking every 3600 seconds.
# tail -n20 -f /var/log/clamav/freshclam.log
--------------------------------------
freshclam daemon 0.93.1 (OS: linux-gnu, ARCH: i386, CPU: i486)
ClamAV update process started at Tue Jul  1 10:30:36 2008
Downloading main-47.cdiff [100%]
main.cld updated (version: 47, sigs: 312304, f-level: 31, builder: sven)
WARNING: getfile: daily-7359.cdiff not found on remote server (IP:
193.206.139.37)
WARNING: getpatch: Can't download daily-7359.cdiff from 
db.local.clamav.net
WARNING: getfile: daily-7359.cdiff not found on remote server (IP:
213.92.8.5)
WARNING: getpatch: Can't download daily-7359.cdiff from 
db.local.clamav.net
WARNING: getfile: daily-7359.cdiff not found on remote server (IP:
193.206.139.37)
WARNING: getpatch: Can't download daily-7359.cdiff from 
db.local.clamav.net
WARNING: getfile: daily-7359.cdiff not found on remote server (IP:
213.92.8.5)
WARNING: getpatch: Can't download daily-7359.cdiff from 
db.local.clamav.net
WARNING: getfile: daily-7359.cdiff not found on remote server (IP:
193.206.139.37)
WARNING: getpatch: Can't download daily-7359.cdiff from 
db.local.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 7597, sigs: 21239, f-level: 31, builder:
ccordes)
Database updated (333543 signatures) from 
db.local.clamav.net
 (IP:
213.92.8.5)
--------------------------------------
A parte il fatto che non è riuscito a fare l'update incrementale delle
definizioni dei virus (ed ha risolto scaricando l'intero file), sembra
tutto a posto.. Stiamo a vedere se clamsmtp continua a schiatarsi!
