Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 7th July 2010, 09:30
datahellas datahellas is offline
Junior Member
 
Join Date: Aug 2005
Location: Athens, Greece
Posts: 13
Thanks: 0
Thanked 4 Times in 1 Post
Exclamation ClamAV-clamd av-scanner FAILED: run_av error

Hi I followed the Perfect setup for OpenSuse 11.2 64bit / ISPConfig 3. All went fine except from the clamav thats throughs an error in the log files.

The error message:

Jul 7 09:13:35 hades amavis[21674]: (21674-01) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd (Can't connect to UNIX socket /var/run/clamav/clamd: No such file or directory) at (eval 101) line 325.

This folder does not exist: /var/run/clamav/

I restarted clamd and amavis several times. The problem does not solved. I created that folder by hand and restart clamd, nothing. I update/re-install clamav (yast2 -i clamav clamav-db) but the problem remains.

On an other server I have with the same setup (with an older ISPConfig 3.x revision) that folder does not exist but clamd works fine...

Any ideas how to solve this issue?
__________________
Elxis CMS | Is Open Source

Last edited by datahellas; 7th July 2010 at 09:34.
Reply With Quote
Sponsored Links
  #2  
Old 8th July 2010, 14:18
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
Default

What's in your clamd.conf or clamav.conf in the /etc directory?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 9th July 2010, 18:26
datahellas datahellas is offline
Junior Member
 
Join Date: Aug 2005
Location: Athens, Greece
Posts: 13
Thanks: 0
Thanked 4 Times in 1 Post
Question contents of clamd.conf

There is no clamav.conf file in /etc directory. There is a clamd.conf and clamav-milter.conf.

Here are the contents of clamd.conf file with the commented text removed.

#LogFile /tmp/clamd.log
#LogFileUnlock yes
#LogFileMaxSize 2M
#LogTime yes
#LogClean yes
LogSyslog yes
LogFacility LOG_MAIL
#LogVerbose yes
PidFile /var/lib/clamav/clamd.pid
#TemporaryDirectory /var/tmp
#DatabaseDirectory /var/lib/clamav
#OfficialDatabaseOnly no
LocalSocket /var/lib/clamav/clamd-socket
#LocalSocketGroup virusgroup
#LocalSocketMode 660
#FixStaleSocket yes
# TCP port address.
# Default: no
TCPSocket 3310
# TCP address.
# By default we bind to INADDR_ANY, probably not wise.
# Enable the following to provide some degree of protection
# from the outside world.
# Default: no
TCPAddr 127.0.0.1
#MaxConnectionQueueLength 30
#StreamMaxLength 10M
#StreamMinPort 30000
#StreamMaxPort 32000
#MaxThreads 20
# Default: 120
#ReadTimeout 300
#CommandReadTimeout 5
#SendBufTimeout 200
#MaxQueue 200
#IdleTimeout 60
#ExcludePath ^/proc/
#ExcludePath ^/sys/
#MaxDirectoryRecursion 20
#FollowDirectorySymlinks yes
#FollowFileSymlinks yes
#CrossFilesystems yes
#SelfCheck 600
#VirusEvent /usr/local/bin/send_sms 123456789 "VIRUS ALERT: %v"
User vscan
#AllowSupplementaryGroups no
#ExitOnOOM yes
#Foreground yes
#Debug yes
#LeaveTemporaryFiles yes
#DetectPUA yes
#ExcludePUA NetTool
#ExcludePUA PWTool
#IncludePUA Spy
#IncludePUA Scanner
#IncludePUA RAT
#AlgorithmicDetection yes
#ScanPE yes
#ScanELF yes
#DetectBrokenExecutables yes

## Documents
#ScanOLE2 yes
#ScanPDF yes
## Mail files
#ScanMail yes
#ScanPartialMessages yes
#PhishingSignatures yes
#PhishingScanURLs yes
#PhishingAlwaysBlockSSLMismatch no
#PhishingAlwaysBlockCloak no
#HeuristicScanPrecedence yes

## Data Loss Prevention (DLP)
#StructuredDataDetection yes
#StructuredMinCreditCardCount 5
#StructuredMinSSNCount 5
#StructuredSSNFormatNormal yes
#StructuredSSNFormatStripped yes

## HTML
#ScanHTML yes

## Archives
#ScanArchive yes
#ArchiveBlockEncrypted no

## Limits
#MaxScanSize 150M
#MaxFileSize 30M
#MaxRecursion 10
#MaxFiles 15000

## Clamuko settings
#ClamukoScanOnAccess yes
#ClamukoScannerCount 3
#ClamukoMaxFileSize 10M
#ClamukoScanOnOpen yes
#ClamukoScanOnClose yes
#ClamukoScanOnExec yes
#ClamukoIncludePath /home
#ClamukoIncludePath /students
#ClamukoExcludePath /home/bofh
#Bytecode yes
#BytecodeSecurity TrustSigned
#BytecodeTimeout 60000
__________________
Elxis CMS | Is Open Source
Reply With Quote
  #4  
Old 10th July 2010, 12:40
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
Default

The socket in clamd.conf is defined as /var/lib/clamav/clamd-socket, so you either change it to /var/run/clamav/clamd, or you change the clamd socket location in your amavisd.conf to /var/lib/clamav/clamd-socket.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
The Following User Says Thank You to falko For This Useful Post:
st2xo (27th April 2013)
  #5  
Old 12th July 2010, 13:27
datahellas datahellas is offline
Junior Member
 
Join Date: Aug 2005
Location: Athens, Greece
Posts: 13
Thanks: 0
Thanked 4 Times in 1 Post
Thumbs up Solved!

Thank you very much, problem solved!
__________________
Elxis CMS | Is Open Source
Reply With Quote
  #6  
Old 15th November 2010, 17:27
fredo fredo is offline
Junior Member
 
Join Date: Nov 2010
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default ClamAV-clamd av-scanner FAILED: run_av error

Hello,

I have a similar issue, I followed the tutorial Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail (CentOS 5.3 x86_64).

I have these lines in the log:

(!)run_av (ClamAV-clamd) FAILED - unexpected , output="/var/amavis/tmp/amavis-20101112T174537-24356/parts: lstat() failed: Permission denied. ERROR\n"
Nov 15 09:33:55 mail1 amavis[24356]: (24356-05) (!)ClamAV-clamd av-scanner FAILED: CODE(0x1b6fda0) unexpected , output="/var/amavis/tmp/amavis-20101112T174537-24356/parts: lstat() failed: Permission denied. ERROR\n" at (eval 48) line 594.


I added the amavis user to the clamav group and vice versa and restarted postfix amavisd clamd
Any suggestions?
Reply With Quote
  #7  
Old 16th November 2010, 17:24
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
Default

IS SELinux disabled? What's the output of
Code:
getenforce
?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #8  
Old 17th November 2010, 20:21
fredo fredo is offline
Junior Member
 
Join Date: Nov 2010
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default

SELinux is disabled.

mail1 ~ # getenforce
Disabled

I replaced the username of clamd with amavis instead of clamav and everything works fine. Thanks!!
Reply With Quote
  #9  
Old 14th May 2011, 19:43
mty620 mty620 is offline
Junior Member
 
Join Date: Feb 2008
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Fredo, what exactly did you do?
Reply With Quote
  #10  
Old 23rd August 2011, 04:52
cesararnold cesararnold is offline
Junior Member
 
Join Date: Aug 2011
Posts: 1
Thanks: 0
Thanked 1 Time in 1 Post
 
Default Solved to me too!

Quote:
Originally Posted by falko View Post
The socket in clamd.conf is defined as /var/lib/clamav/clamd-socket, so you either change it to /var/run/clamav/clamd, or you change the clamd socket location in your amavisd.conf to /var/lib/clamav/clamd-socket.
Falko is the man.
Reply With Quote
The Following User Says Thank You to cesararnold For This Useful Post:
falko (23rd August 2011)
Reply

Bookmarks

Tags
amavis, clamav, clamd, opensuse, scanner

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
LB1 Not Taking Over Shared IP Using Heartbeat 2.1.3 On FC10 64Bit asyadiqin Installation/Configuration 5 11th February 2009 21:11
installing Perl module GD - ran into problems Ovidiu Installation/Configuration 6 19th September 2006 10:32
How to install BFD (Brute Force Detection) domino Tips/Tricks/Mods 9 31st March 2006 23:40
Could not make OpenSSL yontengyatso Installation/Configuration 3 3rd November 2005 11:50
Install stop at uuwish, UUDeview SeaWolf Installation/Configuration 6 5th October 2005 00:53


All times are GMT +2. The time now is 00:51.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.