Trouble with clamav-milter
JORGE CARMINATI
"La información transmitida en este mensaje está destinada únicamente a la persona o entidad a la cual el mismo está dirigido, y puede contener material confidencial, reservado o sujeto al secreto profesional. Cualquier revisión, retransmisión, divulgación u otro uso de la misma, o la realización de cualquier acción basada en ella por personas o entidades distintas de la indicada, no está permitida. Si usted ha recibido este mensaje por error, tenga la amabilidad de destruirlo, sin copiarlo ni divulgar su contenido. Muchas gracias."
The information contained in this message is directed exclusively to the person or entity to whom the message is addressed, and it might contain information that is confidential, privileged or otherwise legally exempt from disclosure. Any action based on it, performed by an individual or entity different from the one it was intended, is not allowed and its contents should not be read, forwarded, disclosed, or used in any other way. If you have received it by mistake please delete it from your system, you should also not copy the message nor disclose its contents to anyone. Thank you.
Jerry
JORGE CARMINATI <jcarm...@pluspetrol.net> articulated:
What is the 'miltersocket' setting in the 'clamav-milter.conf' file?
BTW, you should post the complete output of 'postconf -n'. It is
possible the problem lies somewhere else.
--
Jerry
postfi...@yahoo.com
TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail
TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html
Wietse Venema
> Hi all, I'm trying to integrate Postfix with clamav-milter but am getting some errors:
>
> Dec 22 16:16:47 relay1 postfix/cleanup[1177]: warning: cannot receive milters via service cleanup socket socket
> Dec 22 16:16:47 relay1 postfix/cleanup[1177]: fatal: cleanup_milter_receive: milter receive failed
> Dec 22 16:16:48 relay1 postfix/smtpd[846]: warning: cannot send milters to service public/cleanup socket
Perhaps your kernel does not like the way that Postfix smtpd sends
the Milter sockets to Postfix cleanup.
There have been some incompatible changes in Postfix workarounds
for broken file descriptor passing implementations.
The workaround for OpenBSD 3.something was removed because 1)
OpenBSD 4.something no longer needs it; 2) it broke on 64-bit
NetBSD; 3) other systems never needed the workaround.
What is your OS, and what is your Postfix version?
Wietse
JORGE CARMINATI
> From: owner-pos...@postfix.org [mailto:owner-postfix-
> us...@postfix.org] On Behalf Of Jerry
> Sent: Tuesday, December 22, 2009 16:55
> To: postfi...@postfix.org
> Subject: Re: Trouble with clamav-milter
>
> On Tue, 22 Dec 2009 16:26:31 -0300
> JORGE CARMINATI <jcarm...@pluspetrol.net> articulated:
>
> >getting some errors:
> >
> >Dec 22 16:16:47 relay1 postfix/cleanup[1177]: warning: cannot
> receive
> >milters via service cleanup socket socket Dec 22 16:16:47 relay1
> >postfix/cleanup[1177]: fatal: cleanup_milter_receive: milter receive
> >failed Dec 22 16:16:48 relay1 postfix/smtpd[846]: warning: cannot
> send
> >postfix/smtpd[846]: > unknown[172.16.1.3]: 354 End data with
> ><CR><LF>.<CR><LF> Dec 22 16:16:48 relay1 postfix/master[19502]:
> >warning: process /usr/libexec/postfix/cleanup pid 1177 exit status 1
> >Dec 22 16:16:48 relay1 postfix/master[19502]:
> >warning: /usr/libexec/postfix/cleanup: bad command startup --
> >throttling
> >
> >postconf -n:
> >command_directory = /usr/sbin
> >config_directory = /etc/postfix
> >daemon_directory = /usr/libexec/postfix
> >data_directory = /var/lib/postfix
> >debug_peer_level = 2
> >debug_peer_list = 10.1.240.3
> >mail_owner = postfix
> >milter_protocol = 2
> >queue_directory = /var/spool/postfix
> >smtpd_milters = inet:localhost:7777
> >unknown_local_recipient_reject_code = 550
> >
> >Any idea what could be wrong here? Is this a Postfix issue or
> >clamav-milter ? Thanks in advance for any advice.
>
> What is the 'miltersocket' setting in the 'clamav-milter.conf' file?
> BTW, you should post the complete output of 'postconf -n'. It is
> possible the problem lies somewhere else.
>
Hi! here's it is: MilterSocket inet:7777@localhost
That's the complete output from postconf -n due that it's only for testing purposes.
Regards.
"Cuidar la naturaleza es vivir mejor... hag?moslo juntos. Imprime s?lo lo necesario."
"La informaci?n transmitida en este mensaje est? destinada ?nicamente a la persona o entidad a la cual el mismo est? dirigido, y puede contener material confidencial, reservado o sujeto al secreto profesional. Cualquier revisi?n, retransmisi?n, divulgaci?n u otro uso de la misma, o la realizaci?n de cualquier acci?n basada en ella por personas o entidades distintas de la indicada, no est? permitida. Si usted ha recibido este mensaje por error, tenga la amabilidad de destruirlo, sin copiarlo ni divulgar su contenido. Muchas gracias."
JORGE CARMINATI
> From: owner-pos...@postfix.org [mailto:owner-postfix-
> us...@postfix.org] On Behalf Of Wietse Venema
> Sent: Tuesday, December 22, 2009 17:17
> To: Postfix users
> Subject: Re: Trouble with clamav-milter
>
> > Hi all, I'm trying to integrate Postfix with clamav-milter but am
> getting some errors:
> >
> > Dec 22 16:16:47 relay1 postfix/cleanup[1177]: warning: cannot
> receive milters via service cleanup socket socket
> > Dec 22 16:16:47 relay1 postfix/cleanup[1177]: fatal:
> cleanup_milter_receive: milter receive failed
> > Dec 22 16:16:48 relay1 postfix/smtpd[846]: warning: cannot send
> milters to service public/cleanup socket
>
> the Milter sockets to Postfix cleanup.
>
> There have been some incompatible changes in Postfix workarounds
> for broken file descriptor passing implementations.
>
> The workaround for OpenBSD 3.something was removed because 1)
> OpenBSD 4.something no longer needs it; 2) it broke on 64-bit
> NetBSD; 3) other systems never needed the workaround.
>
> What is your OS, and what is your Postfix version?
>
> Wietse
Hi Wietse!, here's the information you're asking:
mail_version = 2.6.5 (package from Simon J Mudd)
Red Hat Enterprise Linux Server release 5.4 (Tikanga)
Kernel: 2.6.18-164.9.1.el5 #1 SMP Wed Dec 9 03:27:37 EST 2009 x86_64 x86_64
additionally:
clamav-db-0.95.3-1.el5.rf
clamav-milter-0.95.3-1.el5.rf
clamav-0.95.3-1.el5.rf
Thanks in advance for any other comments.
Jorge.
Wietse Venema
> Hi all, I'm trying to integrate Postfix with clamav-milter but am
> getting some errors:
>
> Dec 22 16:16:47 relay1 postfix/cleanup[1177]: warning: cannot receive milters via service cleanup socket socket
> Dec 22 16:16:47 relay1 postfix/cleanup[1177]: fatal: cleanup_milter_receive: milter receive failed
> Dec 22 16:16:48 relay1 postfix/smtpd[846]: warning: cannot send milters to service public/cleanup socket
Wietse:
> Perhaps your kernel does not like the way that Postfix smtpd sends
> the Milter sockets to Postfix cleanup.
>
> There have been some incompatible changes in Postfix workarounds
> for broken file descriptor passing implementations.
>
> The workaround for OpenBSD 3.something was removed because 1)
> OpenBSD 4.something no longer needs it; 2) it broke on 64-bit
> NetBSD; 3) other systems never needed the workaround.
>
> What is your OS, and what is your Postfix version?
JORGE CARMINATI:
> Hi Wietse!, here's the information you're asking:
>
> mail_version = 2.6.5 (package from Simon J Mudd)
> Red Hat Enterprise Linux Server release 5.4 (Tikanga)
> Kernel: 2.6.18-164.9.1.el5 #1 SMP Wed Dec 9 03:27:37 EST 2009 x86_64 x86_64
I am not aware of problems with Linux kernels.
I have two pieces of home work for you.
1) Perhaps your system runs "security" software that is not configured
to allow Postfix to send file descriptors over UNIX-domain sockets.
In that case there may be errors in the logfile. that explains
WHY it cannot
2) There is more mail logging from the process 1177 BEFORE it gives
up. Please show the complete record.
Wietse
Ralf Hildebrandt
performs if you can't get it running...
But you'll probably get it running, fear not.
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hil...@charite.de | http://www.charite.de
JORGE CARMINATI
>
> JORGE CARMINATI:
> > Hi Wietse!, here's the information you're asking:
> >
> > mail_version = 2.6.5 (package from Simon J Mudd)
> > Red Hat Enterprise Linux Server release 5.4 (Tikanga)
> > Kernel: 2.6.18-164.9.1.el5 #1 SMP Wed Dec 9 03:27:37 EST 2009
> x86_64 x86_64
>
> I am not aware of problems with Linux kernels.
>
> I have two pieces of home work for you.
>
> 1) Perhaps your system runs "security" software that is not
> configured
> to allow Postfix to send file descriptors over UNIX-domain sockets.
> In that case there may be errors in the logfile. that explains
> WHY it cannot
>
> 2) There is more mail logging from the process 1177 BEFORE it gives
> up. Please show the complete record.
>
> Wietse
Process 1177 doesn't show anything before or after, only what I sent previously:
$ sudo cat /var/log/maillog | egrep '\[1177\]'
Dec 22 16:16:47 relay1 postfix/cleanup[1177]: warning: cannot receive milters via service cleanup socket socket
Dec 22 16:16:47 relay1 postfix/cleanup[1177]: fatal: cleanup_milter_receive: milter receive failed
Anyway, following your first comment, I completely disabled SELinux and repeated some tests and now clamav-milter is working!:
Dec 23 09:18:30 relay1 postfix/smtpd[11074]: > unknown[172.16.2.3]: 354 End data with <CR><LF>.<CR><LF>
Dec 23 09:18:38 relay1 postfix/cleanup[11138]: 5558A1F182D9: message-id=<>
Dec 23 09:18:38 relay1 clamd[2951]: fd[11]: Eicar-Test-Signature FOUND
Dec 23 09:18:39 relay1 postfix/cleanup[11138]: 5558A1F182D9: milter-hold: END-OF-MESSAGE from unknown[172.16.2.3]: milter triggers HOLD action; from=<us...@relay1.example.net> to=<supe...@relay1.example.net> proto=SMTP
Dec 23 09:18:39 relay1 postfix/smtpd[11074]: public/cleanup socket: wanted attribute: status
I had a couple of issues with SELinux in the past but it always logged the events to dmesg or /var/log/messages but this time nothing is been logged so my post... I'll have to look deeper in order to find what's going on with SELinux.
Thanks once again and my best wishes.