Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #11  
Old 15th March 2013, 08:29
florian030 florian030 is offline
Senior Member
 
Join Date: Oct 2012
Posts: 230
Thanks: 8
Thanked 64 Times in 55 Posts
Default

You should change your amavis-settings. But this doesn´t explain why clamd stopps on your system. Look at your clamd-Logfile.
__________________
regards
Florian

blog.schaal-24.de
Reply With Quote
Sponsored Links
  #12  
Old 15th March 2013, 17:46
sawa73 sawa73 is offline
Junior Member
 
Join Date: Mar 2013
Posts: 14
Thanks: 1
Thanked 0 Times in 0 Posts
Default

i have this in my /var/log/mail.err file :

Code:
amavis[28223]: (28223-08) (!!)WARN: all primary virus scanners failed, considering backups
amavis[28222]: (28222-09) (!!)WARN: all primary virus scanners failed, considering backups
amavis[28223]: (28223-09) (!!)WARN: all primary virus scanners failed, considering backups
amavis[28222]: (28222-09-2) (!!)WARN: all primary virus scanners failed, considering backups
amavis[28223]: (28223-09-2) (!!)WARN: all primary virus scanners failed, considering backups
amavis[28222]: (28222-09-3) (!!)WARN: all primary virus scanners failed, considering backups
amavis[28223]: (28223-10) (!!)WARN: all primary virus scanners failed, considering backups
postfix/smtp[10912]: fatal: mysql:/etc/postfix/mysql-virtual_relaydomains.cf(0,lock|fold_fix): table lookup problem
postfix/error[11129]: fatal: mysql:/etc/postfix/mysql-virtual_relaydomains.cf(0,lock|fold_fix): table lookup problem
postfix/qmgr[24426]: fatal: mysql:/etc/postfix/mysql-virtual_relaydomains.cf(0,lock|fold_fix): table lookup problem
Reply With Quote
  #13  
Old 15th March 2013, 18:44
florian030 florian030 is offline
Senior Member
 
Join Date: Oct 2012
Posts: 230
Thanks: 8
Thanked 64 Times in 55 Posts
Default

Again, this doesn´t explain why clamd stopped on your system.

"WARN: all primary virus scanners failed, considering backups" means, that clamd is not running or your amavis-config points to a wrong socket-file.

Clamd writes its own logfiles (or send messages to syslog). Check your clamd.conf for something like "LogFile /var/log/clamd.log" and check THIS log for any errors.
__________________
regards
Florian

blog.schaal-24.de
Reply With Quote
  #14  
Old 15th March 2013, 19:00
sawa73 sawa73 is offline
Junior Member
 
Join Date: Mar 2013
Posts: 14
Thanks: 1
Thanked 0 Times in 0 Posts
Default

This is my clamav log :

Code:
root@ksxxxxx:~# cat /var/log/clamav/clamav.log
Sun Mar 10 07:01:58 2013 -> No stats for Database check - forcing reload
Sun Mar 10 07:01:59 2013 -> Reading databases from /var/lib/clamav
Sun Mar 10 07:02:05 2013 -> Database correctly reloaded (1954426 signatures)
Sun Mar 10 08:02:22 2013 -> SelfCheck: Database modification detected. Forcing reload.
Sun Mar 10 08:02:22 2013 -> Reading databases from /var/lib/clamav
Sun Mar 10 08:02:28 2013 -> Database correctly reloaded (1954600 signatures)
Sun Mar 10 09:02:28 2013 -> SelfCheck: Database status OK.
Sun Mar 10 10:02:40 2013 -> SelfCheck: Database status OK.
Sun Mar 10 11:02:46 2013 -> SelfCheck: Database status OK.
Sun Mar 10 12:02:49 2013 -> SelfCheck: Database status OK.
Sun Mar 10 13:02:57 2013 -> SelfCheck: Database modification detected. Forcing reload.
Sun Mar 10 13:02:57 2013 -> Reading databases from /var/lib/clamav
Sun Mar 10 13:03:04 2013 -> Database correctly reloaded (1954605 signatures)
Sun Mar 10 14:03:17 2013 -> SelfCheck: Database status OK.
Sun Mar 10 15:03:20 2013 -> SelfCheck: Database status OK.
Sun Mar 10 16:03:27 2013 -> SelfCheck: Database status OK.
Sun Mar 10 17:03:35 2013 -> SelfCheck: Database modification detected. Forcing reload.
Sun Mar 10 17:03:35 2013 -> Reading databases from /var/lib/clamav
Sun Mar 10 17:03:41 2013 -> Database correctly reloaded (1954606 signatures)
Sun Mar 10 18:03:53 2013 -> SelfCheck: Database status OK.
Sun Mar 10 19:04:11 2013 -> SelfCheck: Database modification detected. Forcing reload.
Sun Mar 10 19:04:11 2013 -> Reading databases from /var/lib/clamav
Sun Mar 10 19:04:17 2013 -> Database correctly reloaded (1954610 signatures)
Sun Mar 10 20:04:35 2013 -> SelfCheck: Database status OK.
Sun Mar 10 21:04:56 2013 -> SelfCheck: Database status OK.
Sun Mar 10 22:05:25 2013 -> SelfCheck: Database status OK.
Sun Mar 10 23:05:27 2013 -> SelfCheck: Database status OK.
Mon Mar 11 00:05:50 2013 -> SelfCheck: Database status OK.
Mon Mar 11 01:05:54 2013 -> SelfCheck: Database modification detected. Forcing reload.
Mon Mar 11 01:05:55 2013 -> Reading databases from /var/lib/clamav
Mon Mar 11 01:06:07 2013 -> Database correctly reloaded (1954868 signatures)
Mon Mar 11 02:06:22 2013 -> SelfCheck: Database status OK.
Mon Mar 11 03:06:37 2013 -> SelfCheck: Database status OK.
Mon Mar 11 04:06:41 2013 -> SelfCheck: Database status OK.
Mon Mar 11 05:06:57 2013 -> SelfCheck: Database modification detected. Forcing reload.
Mon Mar 11 05:06:57 2013 -> Reading databases from /var/lib/clamav
Mon Mar 11 05:07:03 2013 -> Database correctly reloaded (1954873 signatures)
Mon Mar 11 06:07:19 2013 -> SelfCheck: Database status OK.
Mon Mar 11 07:07:35 2013 -> SelfCheck: Database modification detected. Forcing reload.
Mon Mar 11 07:07:35 2013 -> Reading databases from /var/lib/clamav
Mon Mar 11 07:07:41 2013 -> Database correctly reloaded (1954875 signatures)
Mon Mar 11 08:11:36 2013 -> SelfCheck: Database status OK.
Mon Mar 11 09:56:00 2013 -> SelfCheck: Database modification detected. Forcing reload.
Mon Mar 11 09:56:01 2013 -> Reading databases from /var/lib/clamav
Mon Mar 11 09:56:07 2013 -> Database correctly reloaded (1955255 signatures)
Mon Mar 11 11:01:29 2013 -> SelfCheck: Database status OK.
Mon Mar 11 12:25:15 2013 -> SelfCheck: Database status OK.
Mon Mar 11 13:25:49 2013 -> SelfCheck: Database status OK.
Mon Mar 11 14:33:48 2013 -> SelfCheck: Database status OK.
Mon Mar 11 15:35:39 2013 -> SelfCheck: Database status OK.
Mon Mar 11 16:37:34 2013 -> SelfCheck: Database status OK.
Mon Mar 11 17:49:30 2013 -> SelfCheck: Database status OK.
Mon Mar 11 18:50:31 2013 -> SelfCheck: Database modification detected. Forcing reload.
Mon Mar 11 18:50:31 2013 -> Reading databases from /var/lib/clamav
Mon Mar 11 18:50:38 2013 -> Database correctly reloaded (1955582 signatures)
Mon Mar 11 20:02:02 2013 -> SelfCheck: Database status OK.
Mon Mar 11 21:02:25 2013 -> SelfCheck: Database status OK.
Wed Mar 13 06:14:06 2013 -> +++ Started at Wed Mar 13 06:14:06 2013
Wed Mar 13 06:14:06 2013 -> clamd daemon 0.97.6 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Wed Mar 13 06:14:06 2013 -> Log file size limited to -1 bytes.
Wed Mar 13 06:14:06 2013 -> Reading databases from /var/lib/clamav
Wed Mar 13 06:14:06 2013 -> Not loading PUA signatures.
Wed Mar 13 06:14:06 2013 -> Bytecode: Security mode set to "TrustSigned".
Wed Mar 13 06:14:11 2013 -> Loaded 1973564 signatures.
Wed Mar 13 06:14:12 2013 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
Wed Mar 13 06:14:12 2013 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Wed Mar 13 06:14:12 2013 -> LOCAL: Setting connection queue length to 15
Wed Mar 13 06:14:12 2013 -> Limits: Global size limit set to 104857600 bytes.
Wed Mar 13 06:14:12 2013 -> Limits: File size limit set to 26214400 bytes.
Wed Mar 13 06:14:12 2013 -> Limits: Recursion level limit set to 16.
Wed Mar 13 06:14:12 2013 -> Limits: Files limit set to 10000.
Wed Mar 13 06:14:12 2013 -> Archive support enabled.
Wed Mar 13 06:14:12 2013 -> Algorithmic detection enabled.
Wed Mar 13 06:14:12 2013 -> Portable Executable support enabled.
Wed Mar 13 06:14:12 2013 -> ELF support enabled.
Wed Mar 13 06:14:12 2013 -> Mail files support enabled.
Wed Mar 13 06:14:12 2013 -> OLE2 support enabled.
Wed Mar 13 06:14:12 2013 -> PDF support enabled.
Wed Mar 13 06:14:12 2013 -> HTML support enabled.
Wed Mar 13 06:14:12 2013 -> Self checking every 3600 seconds.
Wed Mar 13 07:14:28 2013 -> No stats for Database check - forcing reload
Wed Mar 13 07:14:29 2013 -> Reading databases from /var/lib/clamav
Wed Mar 13 07:14:35 2013 -> Database correctly reloaded (1973565 signatures)
Wed Mar 13 08:14:47 2013 -> SelfCheck: Database status OK.
Wed Mar 13 09:15:00 2013 -> SelfCheck: Database status OK.
Wed Mar 13 10:15:16 2013 -> SelfCheck: Database status OK.
Wed Mar 13 11:15:39 2013 -> SelfCheck: Database status OK.
Wed Mar 13 12:15:56 2013 -> SelfCheck: Database status OK.
Wed Mar 13 13:16:23 2013 -> SelfCheck: Database status OK.
Wed Mar 13 14:16:29 2013 -> SelfCheck: Database status OK.
Wed Mar 13 16:26:32 2013 -> +++ Started at Wed Mar 13 16:26:32 2013
Wed Mar 13 16:26:32 2013 -> clamd daemon 0.97.6 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Wed Mar 13 16:26:32 2013 -> Log file size limited to -1 bytes.
Wed Mar 13 16:26:32 2013 -> Reading databases from /var/lib/clamav
Wed Mar 13 16:26:32 2013 -> Not loading PUA signatures.
Wed Mar 13 16:26:32 2013 -> Bytecode: Security mode set to "TrustSigned".
Wed Mar 13 16:26:37 2013 -> Loaded 1973567 signatures.
Wed Mar 13 16:26:38 2013 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
Wed Mar 13 16:26:38 2013 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Wed Mar 13 16:26:38 2013 -> LOCAL: Setting connection queue length to 15
Wed Mar 13 16:26:38 2013 -> Limits: Global size limit set to 104857600 bytes.
Wed Mar 13 16:26:38 2013 -> Limits: File size limit set to 26214400 bytes.
Wed Mar 13 16:26:38 2013 -> Limits: Recursion level limit set to 16.
Wed Mar 13 16:26:38 2013 -> Limits: Files limit set to 10000.
Wed Mar 13 16:26:38 2013 -> Archive support enabled.
Wed Mar 13 16:26:38 2013 -> Algorithmic detection enabled.
Wed Mar 13 16:26:38 2013 -> Portable Executable support enabled.
Wed Mar 13 16:26:38 2013 -> ELF support enabled.
Wed Mar 13 16:26:38 2013 -> Mail files support enabled.
Wed Mar 13 16:26:38 2013 -> OLE2 support enabled.
Wed Mar 13 16:26:38 2013 -> PDF support enabled.
Wed Mar 13 16:26:38 2013 -> HTML support enabled.
Wed Mar 13 16:26:38 2013 -> Self checking every 3600 seconds.
Wed Mar 13 17:26:46 2013 -> No stats for Database check - forcing reload
Wed Mar 13 17:26:46 2013 -> Reading databases from /var/lib/clamav
Wed Mar 13 17:26:53 2013 -> Database correctly reloaded (1980049 signatures)
Wed Mar 13 18:26:56 2013 -> SelfCheck: Database status OK.
Wed Mar 13 19:27:06 2013 -> SelfCheck: Database modification detected. Forcing reload.
Wed Mar 13 19:27:06 2013 -> Reading databases from /var/lib/clamav
Wed Mar 13 19:27:12 2013 -> Database correctly reloaded (1980669 signatures)
Wed Mar 13 20:27:12 2013 -> SelfCheck: Database status OK.
Wed Mar 13 21:27:13 2013 -> SelfCheck: Database status OK.
Wed Mar 13 22:27:25 2013 -> SelfCheck: Database status OK.
Wed Mar 13 23:27:31 2013 -> SelfCheck: Database modification detected. Forcing reload.
Wed Mar 13 23:27:31 2013 -> Reading databases from /var/lib/clamav
Wed Mar 13 23:27:38 2013 -> Database correctly reloaded (1982668 signatures)
Thu Mar 14 00:27:43 2013 -> SelfCheck: Database status OK.
Thu Mar 14 01:27:56 2013 -> SelfCheck: Database status OK.
Thu Mar 14 02:28:09 2013 -> SelfCheck: Database status OK.
Thu Mar 14 03:28:20 2013 -> SelfCheck: Database status OK.
Thu Mar 14 04:28:22 2013 -> SelfCheck: Database status OK.
Thu Mar 14 05:28:36 2013 -> SelfCheck: Database modification detected. Forcing reload.
Thu Mar 14 05:28:36 2013 -> Reading databases from /var/lib/clamav
Thu Mar 14 05:28:43 2013 -> Database correctly reloaded (1982669 signatures)
Thu Mar 14 06:28:44 2013 -> SelfCheck: Database status OK.
Thu Mar 14 07:28:56 2013 -> SelfCheck: Database modification detected. Forcing reload.
Thu Mar 14 07:28:57 2013 -> Reading databases from /var/lib/clamav
Thu Mar 14 07:29:03 2013 -> Database correctly reloaded (1982670 signatures)
Thu Mar 14 08:29:10 2013 -> SelfCheck: Database status OK.
Thu Mar 14 09:29:17 2013 -> SelfCheck: Database status OK.
Thu Mar 14 10:29:33 2013 -> SelfCheck: Database status OK.
Thu Mar 14 14:46:37 2013 -> +++ Started at Thu Mar 14 14:46:37 2013
Thu Mar 14 14:46:37 2013 -> clamd daemon 0.97.6 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Thu Mar 14 14:46:37 2013 -> Log file size limited to -1 bytes.
Thu Mar 14 14:46:37 2013 -> Reading databases from /var/lib/clamav
Thu Mar 14 14:46:37 2013 -> Not loading PUA signatures.
Thu Mar 14 14:46:37 2013 -> Bytecode: Security mode set to "TrustSigned".
Thu Mar 14 14:46:42 2013 -> Loaded 1986269 signatures.
Thu Mar 14 14:46:43 2013 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
Thu Mar 14 14:46:43 2013 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Thu Mar 14 14:46:43 2013 -> LOCAL: Setting connection queue length to 15
Thu Mar 14 14:46:43 2013 -> Limits: Global size limit set to 104857600 bytes.
Thu Mar 14 14:46:43 2013 -> Limits: File size limit set to 26214400 bytes.
Thu Mar 14 14:46:43 2013 -> Limits: Recursion level limit set to 16.
Thu Mar 14 14:46:43 2013 -> Limits: Files limit set to 10000.
Thu Mar 14 14:46:43 2013 -> Archive support enabled.
Thu Mar 14 14:46:43 2013 -> Algorithmic detection enabled.
Thu Mar 14 14:46:43 2013 -> Portable Executable support enabled.
Thu Mar 14 14:46:43 2013 -> ELF support enabled.
Thu Mar 14 14:46:43 2013 -> Mail files support enabled.
Thu Mar 14 14:46:43 2013 -> OLE2 support enabled.
Thu Mar 14 14:46:43 2013 -> PDF support enabled.
Thu Mar 14 14:46:43 2013 -> HTML support enabled.
Thu Mar 14 14:46:43 2013 -> Self checking every 3600 seconds.
Thu Mar 14 15:46:52 2013 -> No stats for Database check - forcing reload
Thu Mar 14 15:46:53 2013 -> Reading databases from /var/lib/clamav
Thu Mar 14 15:46:59 2013 -> Database correctly reloaded (1986269 signatures)
Thu Mar 14 16:47:11 2013 -> SelfCheck: Database status OK.
Thu Mar 14 17:47:28 2013 -> SelfCheck: Database status OK.
Thu Mar 14 18:47:29 2013 -> SelfCheck: Database modification detected. Forcing reload.
Thu Mar 14 18:47:30 2013 -> Reading databases from /var/lib/clamav
Thu Mar 14 18:47:36 2013 -> Database correctly reloaded (1990264 signatures)
Thu Mar 14 19:47:44 2013 -> SelfCheck: Database status OK.
Thu Mar 14 22:15:26 2013 -> +++ Started at Thu Mar 14 22:15:26 2013
Thu Mar 14 22:15:26 2013 -> clamd daemon 0.97.6 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Thu Mar 14 22:15:26 2013 -> Log file size limited to -1 bytes.
Thu Mar 14 22:15:26 2013 -> Reading databases from /var/lib/clamav
Thu Mar 14 22:15:26 2013 -> Not loading PUA signatures.
Thu Mar 14 22:15:26 2013 -> Bytecode: Security mode set to "TrustSigned".
Thu Mar 14 22:15:31 2013 -> Loaded 1990271 signatures.
Thu Mar 14 22:15:32 2013 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
Thu Mar 14 22:15:32 2013 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Thu Mar 14 22:15:32 2013 -> LOCAL: Setting connection queue length to 15
Thu Mar 14 22:15:32 2013 -> Limits: Global size limit set to 104857600 bytes.
Thu Mar 14 22:15:32 2013 -> Limits: File size limit set to 26214400 bytes.
Thu Mar 14 22:15:32 2013 -> Limits: Recursion level limit set to 16.
Thu Mar 14 22:15:32 2013 -> Limits: Files limit set to 10000.
Thu Mar 14 22:15:32 2013 -> Archive support enabled.
Thu Mar 14 22:15:32 2013 -> Algorithmic detection enabled.
Thu Mar 14 22:15:32 2013 -> Portable Executable support enabled.
Thu Mar 14 22:15:32 2013 -> ELF support enabled.
Thu Mar 14 22:15:32 2013 -> Mail files support enabled.
Thu Mar 14 22:15:32 2013 -> OLE2 support enabled.
Thu Mar 14 22:15:32 2013 -> PDF support enabled.
Thu Mar 14 22:15:32 2013 -> HTML support enabled.
Thu Mar 14 22:15:32 2013 -> Self checking every 3600 seconds.
Fri Mar 15 16:56:51 2013 -> +++ Started at Fri Mar 15 16:56:51 2013
Fri Mar 15 16:56:51 2013 -> clamd daemon 0.97.6 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Fri Mar 15 16:56:51 2013 -> Log file size limited to -1 bytes.
Fri Mar 15 16:56:51 2013 -> Reading databases from /var/lib/clamav
Fri Mar 15 16:56:51 2013 -> Not loading PUA signatures.
Fri Mar 15 16:56:51 2013 -> Bytecode: Security mode set to "TrustSigned".
Fri Mar 15 16:56:56 2013 -> Loaded 1990562 signatures.
Fri Mar 15 16:56:57 2013 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
Fri Mar 15 16:56:57 2013 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Fri Mar 15 16:56:57 2013 -> LOCAL: Setting connection queue length to 15
Fri Mar 15 16:56:57 2013 -> Limits: Global size limit set to 104857600 bytes.
Fri Mar 15 16:56:57 2013 -> Limits: File size limit set to 26214400 bytes.
Fri Mar 15 16:56:57 2013 -> Limits: Recursion level limit set to 16.
Fri Mar 15 16:56:57 2013 -> Limits: Files limit set to 10000.
Fri Mar 15 16:56:57 2013 -> Archive support enabled.
Fri Mar 15 16:56:57 2013 -> Algorithmic detection enabled.
Fri Mar 15 16:56:57 2013 -> Portable Executable support enabled.
Fri Mar 15 16:56:57 2013 -> ELF support enabled.
Fri Mar 15 16:56:57 2013 -> Mail files support enabled.
Fri Mar 15 16:56:57 2013 -> OLE2 support enabled.
Fri Mar 15 16:56:57 2013 -> PDF support enabled.
Fri Mar 15 16:56:57 2013 -> HTML support enabled.
Fri Mar 15 16:56:57 2013 -> Self checking every 3600 seconds.
Fri Mar 15 17:57:08 2013 -> No stats for Database check - forcing reload
Fri Mar 15 17:57:08 2013 -> Reading databases from /var/lib/clamav
Fri Mar 15 17:57:15 2013 -> Database correctly reloaded (1990562 signatures)
Reply With Quote
  #15  
Old 16th March 2013, 09:13
florian030 florian030 is offline
Senior Member
 
Join Date: Oct 2012
Posts: 230
Thanks: 8
Thanked 64 Times in 55 Posts
 
Default

Your log seems ok. It doesn´t explain why your clamd suddenly stopped.

You can use a cronjob as a workaround and (re)start clamd daily or use something like nagios to monitor your system.

Maybe you should post your problem on the clamav-user-mailinglist.
__________________
regards
Florian

blog.schaal-24.de
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
error.log is full of notices mod_fcgid 007007 Installation/Configuration 13 8th September 2012 11:29
Need help with ISPConfig Mail and Squirrelmail m.xander Installation/Configuration 109 3rd February 2012 00:15
Can't receive mails baicunko Server Operation 12 3rd August 2011 22:02
Systemimager (rsync) doesn't copy all comedit HOWTO-Related Questions 11 19th January 2007 17:17
How to install BFD (Brute Force Detection) domino Tips/Tricks/Mods 9 31st March 2006 22:40


All times are GMT +2. The time now is 12:20.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.