Onderwerp: clamav problemen na update via update script

Ok, dan krijg ik

tcp 0 0 127.0.0.1:3310 0.0.0.0:* LISTEN 8336/clamd

dus dan zou je zeggen dat de exim.conf entry van
av_scanner = clamd:127.0.0.1 3310
correct is. (staat er nu in dus)
toch geeft exim/mainlog nog aan dat:

clamd: unable to connect to UNIX socket /tmp/clamd (No such file or directory)

waar komt die melding dan vandaan?

sorry, twee keer zelfde bericht.

doe je een exim restart ?

Doe eens exim geheel stoppen, zorgen dat alle threads weg zijn. Dan weer starten.

staat hij niet in clamd.conf op /tmp/clamd ? (LocalSocket)

als ik exim helemaal gestopt heb en dan weer opstart krijg ik meteen in de mainlog:

2010-04-17 22:42:11 exim 4.71 daemon started: pid=9886, -q15m, listening for SMTP on port 25 (IPv4) port 587 (IPv4)
2010-04-17 22:42:20 1O3EqJ-0002Zb-Rt malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (No such file or directory)

dus meteen na opstart eerst een foutmelding.

in /etc/clamav/clamd.conf

Code:

LocalSocket /var/run/clamav/clamd.ctl

in /etc/exim.conf

Code:

av_scanner = clamd:/var/run/clamav/clamd.ctl

ik heb in clamd.conf de socket nog op commentaar staan.

in centos is er volgens mij geen clamd.ctl maar wordt de localsocket verwezen naar die 127.0.0.1:3310???

Wat geeft :

exim -bP |grep clamd

krijg helemaal niets retour.??? klopt dat?

Oorspronkelijk geplaatst door rackhost.be

in /etc/clamd.conf

Code:

# Path to a local socket file the daemon will listen on.
# Default: disabled (must be specified by a user)
#LocalSocket /tmp/clamd

^^ centos

Oorspronkelijk geplaatst door terrabel

krijg helemaal niets retour.??? klopt dat?

Doe hem eens zonder grep, is exim wel gestart ?

ja inderdaad bij mij stond localsocket nog op commentaar, heb nu die 127.0.0.1:3310 nog geprobeerd (en # weggehaald), clamd opnieuw opgestart, maar geen verbetering.

zonder grep kreeg ik nu:

Code:

[root@server etc]# exim -bP
no_accept_8bitmime
acl_not_smtp =
acl_not_smtp_mime =
acl_not_smtp_start =
acl_smtp_auth =
acl_smtp_connect =
acl_smtp_data = check_message
acl_smtp_dkim =
acl_smtp_etrn =
acl_smtp_expn =
acl_smtp_helo =
acl_smtp_mail =
acl_smtp_mailauth =
acl_smtp_mime =
acl_smtp_notquit =
acl_smtp_predata =
acl_smtp_quit =
acl_smtp_rcpt = check_recipient
acl_smtp_starttls =
acl_smtp_vrfy =
admin_groups =
no_allow_domain_literals
no_allow_mx_to_ip
no_allow_utf8_domains
auth_advertise_hosts = *
auto_thaw = 0s
av_scanner = sophie:/var/run/sophie
bi_command =
bounce_message_file =
bounce_message_text =
bounce_return_body
bounce_return_message
bounce_return_size_limit = 100K
bounce_sender_authentication =
callout_domain_negative_expire = 3h
callout_domain_positive_expire = 1w
callout_negative_expire = 2h
callout_positive_expire = 1d
callout_random_local_part = $primary_hostname-$tod_epoch-testing
check_log_inodes = 0
check_log_space = 0
check_rfc2047_length
check_spool_inodes = 0
check_spool_space = 0
daemon_smtp_ports = 25 : 587
daemon_startup_retries = 9
daemon_startup_sleep = 30s
delay_warning = 1d
delay_warning_condition = ${if or {{ !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} }{ match{$h_precedence:}{(?i)bulk|list|junk} }{ match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} }} {no}{yes}}
no_deliver_drop_privilege
deliver_queue_load_max = 5.0
delivery_date_remove
no_disable_ipv6
dkim_verify_signers = $dkim_signers
dns_again_means_nonexist =
dns_check_names_pattern = (?i)^(?>(?(1)\.|())[^\W](?>[a-z0-9/_-]*[^\W])?)+(\.?)$
dns_csa_search_limit = 5
dns_csa_use_reverse
dns_ipv4_lookup =
dns_retrans = 0s
dns_retry = 0
no_drop_cr
dsn_from = Mail Delivery System <Mailer-Daemon@$qualify_domain>
envelope_to_remove
errors_copy =
errors_reply_to =
exim_group = mail
exim_path = /usr/sbin/exim
exim_user = mail
extra_local_interfaces =
extract_addresses_remove_arguments
finduser_retries = 0
freeze_tell =
gecos_name =
gecos_pattern =
no_gnutls_compat_mode
gnutls_require_kx =
gnutls_require_mac =
gnutls_require_protocols =
header_line_maxsize = 0
header_maxsize = 1048576
headers_charset = ISO-8859-1
helo_accept_junk_hosts =
helo_allow_chars = _
helo_lookup_domains = @ : @[]
helo_try_verify_hosts =
helo_verify_hosts =
hold_domains =
host_lookup = *
host_lookup_order = bydns:byaddr
host_reject_connection =
hosts_connection_nolog =
hosts_treat_as_local =
ignore_bounce_errors_after = 2d
ignore_fromline_hosts =
no_ignore_fromline_local
keep_malformed = 4d
local_from_check
local_from_prefix =
local_from_suffix =
local_interfaces = 0.0.0.0
local_scan_timeout = 5m
no_local_sender_retain
localhost_number =
log_file_path = /var/log/exim/%slog
log_selector = +delivery_size +sender_on_delivery +received_recipients +received_sender +smtp_confirmation +subject +smtp_incomplete_transaction -dnslist_defer -host_lookup_failed -queue_run -rejected_header -retry_defer -skip_delivery
no_log_timezone
lookup_open_max = 25
max_username_length = 0
no_message_body_newlines
message_body_visible = 3000
message_id_header_domain =
message_id_header_text =
message_logs
message_size_limit = 20M
no_move_frozen_messages
no_mua_wrapper
never_users = root
percent_hack_domains =
no_perl_at_start
perl_startup = do '/etc/exim.pl'
pid_file_path = /var/run/exim.pid
pipelining_advertise_hosts = *
no_preserve_message_logs
primary_hostname = server.rods.nl
print_topbitchars
process_log_path =
prod_requires_admin
qualify_domain = server.rods.nl
qualify_recipient = server.rods.nl
queue_domains =
queue_list_requires_admin
no_queue_only
queue_only_file =
queue_only_load =
queue_only_load_latch
queue_only_override
no_queue_run_in_order
queue_run_max = 5
queue_smtp_domains =
receive_timeout = 0s
received_header_text = Received: ${if def:sender_rcvhost {from $sender_rcvhost\n\t}{${if def:sender_ident {from ${quote_local_part:$sender_ident} }}${if def:sender_helo_name {(helo=$sender_helo_name)\n\t}}}}by $primary_hostname ${if def:received_protocol {with $received_protocol}} ${if def:tls_cipher {($tls_cipher)\n\t}}(Exim $version_number)\n\t${if def:sender_address {(envelope-from <$sender_address>)\n\t}}id $message_exim_id${if def:received_for {\n\tfor $received_for}}
received_headers_max = 30
recipient_unqualified_hosts =
recipients_max = 0
no_recipients_max_reject
remote_max_parallel = 2
remote_sort_domains =
retry_data_expire = 1w
retry_interval_max = 1d
return_path_remove
rfc1413_hosts = *
rfc1413_query_timeout = 0s
sender_unqualified_hosts =
smtp_accept_keepalive
smtp_accept_max = 100
smtp_accept_max_nonmail = 10
smtp_accept_max_nonmail_hosts = *
smtp_accept_max_per_connection = 1000
smtp_accept_max_per_host =
smtp_accept_queue = 0
smtp_accept_queue_per_connection = 10
smtp_accept_reserve = 0
smtp_active_hostname =
smtp_banner = $smtp_active_hostname ESMTP Exim $version_number $tod_full
smtp_check_spool_space
smtp_connect_backlog = 50
smtp_enforce_sync
smtp_etrn_command =
smtp_etrn_serialize
smtp_load_reserve =
smtp_max_synprot_errors = 3
smtp_max_unknown_commands = 3
smtp_ratelimit_hosts =
smtp_ratelimit_mail =
smtp_ratelimit_rcpt =
smtp_receive_timeout = 5m
smtp_reserve_hosts =
no_smtp_return_error_details
spamd_address = 127.0.0.1 783
split_spool_directory
spool_directory = /var/spool/exim
no_strict_acl_vars
no_strip_excess_angle_brackets
no_strip_trailing_dot
no_syslog_duplication
syslog_facility =
syslog_processname = exim
syslog_timestamp
system_filter = /etc/system_filter.exim
system_filter_directory_transport =
system_filter_file_transport =
system_filter_group =
system_filter_pipe_transport =
system_filter_reply_transport =
system_filter_user =
tcp_nodelay
timeout_frozen_after = 5d
timezone =
tls_advertise_hosts = *
tls_certificate = /etc/exim.cert
tls_crl =
tls_dhparam =
tls_on_connect_ports =
tls_privatekey = /etc/exim.key
no_tls_remember_esmtp
tls_require_ciphers = ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
tls_try_verify_hosts =
tls_verify_certificates =
tls_verify_hosts =
trusted_groups =
trusted_users = mail:majordomo:apache:diradmin
unknown_login =
unknown_username =
untrusted_set_sender =
uucp_from_pattern = ^From\s+(\S+)\s+(?:[a-zA-Z]{3},?\s+)?(?:[a-zA-Z]{3}\s+\d?\d|\d?\d\s+[a-zA-Z]{3}\s+\d\d(?:\d\d)?)\s+\d\d?:\d\d?
uucp_from_sender = $1
warn_message_file =
write_rejectlog
[root@server etc]#

av_scanner = sophie:/var/run/sophie

av_scanner = clamd:127.0.0.1 3310