Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Developers' Forum

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 4th March 2007, 18:21
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default ISPConfig and Clamassassin

Hi,

I encounter a strange problem with the ISPConfig 2.2.11 (Thats why I didnt release it yet).

Sometimes I get a Clamav error 50 which indicates a problem with the antivirus database, in this case clamav creates a directory in /tmp/ with "clamav" plus a random string as name which contains a antivirus database. This directory is owned by the user that received the mail.

Does anyone else encounter this with either the 2.2.11 beta or 2.2.10 and the clamasassin fix (--mbox removed in clamav option)? Any ideas what may cause this?
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Sponsored Links
  #2  
Old 4th March 2007, 18:46
edge edge is offline
Moderator
 
Join Date: Dec 2005
Location: The Netherlands
Posts: 2,033
Thanks: 260
Thanked 145 Times in 127 Posts
Default

Yes, I also have 2 directory's in my /tmp dir. (using ISPconfig 2.2.10 and the clamasassin fix)
Code:
host:/tmp# ls
clamav-1d03d1f461af0bde85a34f126a131995
clamav-24465acfba690eb49a98090fe5bd3f70
One of the dir's does have some stuff in it!
Code:
host:/tmp# cd clamav-24465acfba690eb49a98090fe5bd3f70
host:/tmp/clamav-24465acfba690eb49a98090fe5bd3f70# ls
COPYING  main.db  main.hdb  main.ndb
host:/tmp/clamav-24465acfba690eb49a98090fe5bd3f70#
I have no clue what's causing this..!
__________________
Never execute code written on a Friday or a Monday.

Last edited by edge; 4th March 2007 at 18:48.
Reply With Quote
  #3  
Old 4th March 2007, 19:29
jnsc jnsc is offline
rotaredoM
 
Join Date: Mar 2006
Location: Lausanne, Switzerland
Posts: 525
Thanks: 10
Thanked 170 Times in 77 Posts
Default

I also have this directories on a server not using clamasassin. And one is dated from december 2004, so this does not look as something new. But personally I nerver got an error 50.
Reply With Quote
  #4  
Old 4th March 2007, 19:37
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default

Quote:
Originally Posted by edge
Yes, I also have 2 directory's in my /tmp dir. (using ISPconfig 2.2.10 and the clamasassin fix)
Code:
host:/tmp# ls
clamav-1d03d1f461af0bde85a34f126a131995
clamav-24465acfba690eb49a98090fe5bd3f70
One of the dir's does have some stuff in it!
Code:
host:/tmp# cd clamav-24465acfba690eb49a98090fe5bd3f70
host:/tmp/clamav-24465acfba690eb49a98090fe5bd3f70# ls
COPYING  main.db  main.hdb  main.ndb
host:/tmp/clamav-24465acfba690eb49a98090fe5bd3f70#
I have no clue what's causing this..!
How old are the directories? Have they been created on the day you updated ISPConfig to 2.2.10 / 2.2.11 or later?
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 4th March 2007, 19:50
edge edge is offline
Moderator
 
Join Date: Dec 2005
Location: The Netherlands
Posts: 2,033
Thanks: 260
Thanked 145 Times in 127 Posts
Default

Both directories are from march the 3rd (yesterday) The last ISPconfig update was before that.

I do not have the directories on my other servers as I do not have email users on it.
__________________
Never execute code written on a Friday or a Monday.
Reply With Quote
  #6  
Old 4th March 2007, 21:28
Hans Hans is offline
Moderator
 
Join Date: Dec 2005
Location: Montfoort, The Netherlands
Posts: 2,256
Thanks: 210
Thanked 648 Times in 294 Posts
Send a message via Skype™ to Hans
Default

On my server with ISPConfig 2.2.10 i have also some files provided by ClamAV like these:

clamav-17e026743d5eb53079befc999f400211
clamav-1965d9ee836e5305662cf4d6c94f196e
clamav-267d1f325ab2cd5ab18bc762797d2b4d
clamav-3e1568b86157e54192153f8d04dc088a
clamav-4cbda0ff46b7ab0f1d5bfd11b813dbfd
clamav-75ddddcd3ce7258833105095fdc6cc17
clamav-a67137b8bf83fa7e7b4ae1d7953bb4ff
clamav-b298b1dcb6014422176f79df11c66bf0
clamav-c00c83d2c04dfe35efb468a669a53ffa
clamav-cb6c4d62b5f2ad5297e3a71ac2554a2f
clamav-ed89f07e5015ba43d1f29583772d3755
clamav-f38b2659af676d7d633aa296f584a5c7

I do not have that files on my testserver with ISPConfig 2.2.11 beta1, as i do not use that server as a mailserver.
__________________
Hans

BB-Hosting | Quality Web Hosting since 2005
Reply With Quote
  #7  
Old 5th March 2007, 12:36
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default

I searched a bit in the clamav mailing lists and this seems to be a common problem with the new release. It looks like almost all systems are broken that invoke clamav from different users. They created a patch release 0.90.1 that shall fix some of the issues and additionally a change in freshclam prevents that clamav can access the signature databases because they changed the chmod of the files from 0755 to 0700. I added some patches to ISPConfig and test it now. Lets hope that this fixes the problems
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #8  
Old 5th March 2007, 15:59
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
Default

I think I fixed it now

ISPConfig 2.2.11 Beta 2 download:
http://www.howtoforge.com/forums/showthread.php?t=10969
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #9  
Old 5th March 2007, 20:07
Hans Hans is offline
Moderator
 
Join Date: Dec 2005
Location: Montfoort, The Netherlands
Posts: 2,256
Thanks: 210
Thanked 648 Times in 294 Posts
Send a message via Skype™ to Hans
Smile

Till,

I've downloaded 2.2.11 beta2 on my testing-server with Debian Sarge.
Everything looks fine.

After that (i think i trust you a lot) i installed it on one of my production servers.
(Debian Sarge unofficial 64 bit)

Everything looks ok, but i have to wait to see if the strange clamav-files within /tmp do not appear again.

Thanks for your work, i think you did it!
__________________
Hans

BB-Hosting | Quality Web Hosting since 2005
Reply With Quote
  #10  
Old 5th March 2007, 20:10
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
 
Default

Thats great to hear

By the wy, I enabled logging in freshclam to the mail logfile, if you run a grep for clam or freshclam on the logfile, you should now be able to monitor if the update of the signatures is ok
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
clamassassin - centos 4.3 wcsmith Installation/Configuration 41 19th November 2007 23:30
ISPConfig 2.2.11 Beta available till Developers' Forum 2 5th March 2007 15:58
clamscan error 50 (ispconfig 2.2.6) narut0b0y Installation/Configuration 1 19th August 2006 13:33
ISPConfig 2.2.1 released till General 11 28th May 2006 10:39


All times are GMT +2. The time now is 21:03.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.