Clamav problem with qmailscanner
Chenthil Manavalan
Hi ,
I am having a problem with Clamav with qmailscanner . scanning
get failed in the qmailscanner due to clamav .
Please see the below log .
qmail-scanner log
tail -f /var/spool/qmailscan/qmail-queue.log
Thu, 01 Jul 2010 13:49:46 IST:31361: ------ Process 31361 finished.
Total of 0.055557 secs
Thu, 01 Jul 2010 14:16:20 IST:7576: +++ starting debugging for process
7576 (ppid=7575) by uid=511
Thu, 01 Jul 2010 14:16:20 IST:7576: w_c: elapsed time from start
0.001468 secs
Thu, 01 Jul 2010 14:16:20 IST:7576: return-path='ad...@192.168.1.5',
recips='chenthi...@gmail.com'
Thu, 01 Jul 2010 14:16:20 IST:7576: from='"admin"
<ad...@192.168.1.5>', subj='test mail ', via SMTP from 10.7.175.253
Thu, 01 Jul 2010 14:16:20 IST:7576: error_condition: X-Antivirus-
MYDOMAIN-1.25-st-qms: clamdscan: corrupt or unknown clamd scanner
error or memory/resource/perms problem - exit status 512/2
Thu, 01 Jul 2010 14:16:20 IST:7576: ------ Process 7576 finished.
Total of 0.042164 secs
Clamav log
tail -f /var/log/clamav/clamd.log
Thu Jul 1 13:59:46 2010 -> SelfCheck: Database status OK.
Thu Jul 1 14:09:46 2010 -> SelfCheck: Database status OK.
Thu Jul 1 14:16:20 2010 -> WARNING: lstat() failed on: /var/spool/
qmailscan/tmp/bapmail01.bhelrpt.co.in12779739808017576
Each time when the mail is sent , i get a lstat( ) failed .
clamav is running as the user qscand .
[root@bapmail01 qmailscan]# ls -l /var/spool/qmailscan/
total 6048
-rw-r----- 1 qscand qscand 1043 May 5 16:32 log-report.sh
-rw------- 1 qscand qscand 782477 Jul 1 14:16 qmail-queue.log
-rw------- 1 qscand qscand 4758927 Jun 30 16:47 qmail-
queue.log.ori30Jun2010
-rw------- 1 qscand qscand 67 May 5 16:33 qmail-scanner-queue-
version.txt
-rw------- 1 qscand qscand 575876 Jul 1 14:16 qms-events.log
drwxrwx--- 5 qscand qscand 4096 May 5 16:32 quarantine
-rw-r----- 1 qscand qscand 12288 Jul 1 12:05 quarantine-
attachments.db
-rw-rw---- 1 qscand qscand 7646 May 5 16:32 quarantine-
attachments.txt
-rw-rw---- 1 qscand qscand 405 May 8 16:44 quarantine.log
-rw-r----- 1 qscand qscand 2739 May 5 16:32
settings_per_domain.txt
drwx------ 2 qscand qscand 4096 Jul 1 14:16 tmp
-rw-r--r-- 1 qscand qscand 0 Jun 30 17:19 tmp.txt
lrwxrwxrwx 1 qscand qscand 31 May 5 16:32 viruses -> /var/spool/
qmailscan/quarantine
lrwxrwxrwx 1 qscand qscand 35 May 5 16:32 viruses.log -> /var/
spool/qmailscan/quarantine.log
drwxrwx--- 5 qscand qscand 4096 May 5 16:32 working
[root@bapmail01 qmailscan]#
When i googled , pple requested me to check for the permission which
seems to be fine in my setup .
Please suggest ur comments.
Regards
Chenthil
Jigar Raval
Hello,
Increase softlimit (eg. suppose present value is like 23000000 than make 300000000 or 350000000) in /var/qmail/supervise/qmail-smtpd/run file and restart qmail-smtpd service.
Jigar
--- On Thu, 7/1/10, Chenthil Manavalan <chenthi...@gmail.com> wrote:
> --
> Please read http://www.catb.org/~esr/faqs/smart-questions.html
> before posting.
> You received this message because you are subscribed to the
> "Vibrant GNU/Linux User Group".
> To stop receiving emails from this group, mail to VGLUG-un...@googlegroups.com
> To post to this group, send email to VG...@googlegroups.com
> For more options, visit this group at http://groups.google.com/group/VGLUG
>
Chenthil Manavalan
Please suggest on this .. Thanks for answering the question .
Regards
Chenthil
On Jul 1, 3:11 pm, Jigar Raval <jigar_...@yahoo.com> wrote:
> Hello,
>
> Increase softlimit (eg. suppose present value is like 23000000 than make 300000000 or 350000000) in /var/qmail/supervise/qmail-smtpd/run file and restart qmail-smtpd service.
>
> Jigar
>
> > From: Chenthil Manavalan <chenthil.li...@gmail.com>
> > Subject: [VGLUG] Clamav problem with qmailscanner
> > To: "VGLUG" <vg...@googlegroups.com>
> > Date: Thursday, July 1, 2010, 2:27 PM
>
> > Hi ,
> > I am having a problem with Clamav with
> > qmailscanner . scanning
> > get failed in the qmailscanner due to clamav .
>
> > Please see the below log .
>
> > qmail-scanner log
>
> > tail -f /var/spool/qmailscan/qmail-queue.log
>
> > Thu, 01 Jul 2010 13:49:46 IST:31361: ------ Process 31361
> > finished.
> > Total of 0.055557 secs
> > Thu, 01 Jul 2010 14:16:20 IST:7576: +++ starting debugging
> > for process
> > 7576 (ppid=7575) by uid=511
> > Thu, 01 Jul 2010 14:16:20 IST:7576: w_c: elapsed time from
> > start
> > 0.001468 secs
> > Thu, 01 Jul 2010 14:16:20 IST:7576:
> > return-path='ad...@192.168.1.5',
Jigar Raval
Hello,
Try with 600000000. This is not based on number of users. This is required for mail scanning process by qmail-scanner. The observation is also based on virus signature database size. Also, check permission of all the signature file. If you are running clamav as qscand user than make sure permission of entire clamav directory and subdirectory must be qscand.
Regards
Jigar
--- On Thu, 7/1/10, Chenthil Manavalan <chenthi...@gmail.com> wrote:
> --
> Please read http://www.catb.org/~esr/faqs/smart-questions.html