Clamav problem - ISPConfig 3 -Lenny

[ChristianFe]

Hallo,

nachdem die Installation von ISPConfig 3 auf einem Lenny vServer super funktioniert hat habe ich nun ein Problem mit clamd.

Clamd scheint nicht zu starten. Ich kann jedoch den Fehler nicht nachvollziehen.

/etc/init.d/clamav-daemon status
clamd is not running failed!

daraufhin probiert mit

/etc/init.d/clamav-daemon start

den daemon zu starten führt zu folgender Ausgabe:

Starting ClamAV daemon: clamd  failed!

Was Failed da ? (Die outdated meldung hab ich nicht mit gepostet, die kennt ja jeder)

dmesg sagt nichts.

/var/log/clamav/clamav.log sagt:

Fri Apr 17 15:47:22 2009 -> +++ Started at Fri Apr 17 15:47:22 2009
Fri Apr 17 15:47:22 2009 -> clamd daemon 0.94.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Fri Apr 17 15:47:22 2009 -> Log file size limit disabled.
Fri Apr 17 15:47:22 2009 -> Reading databases from /var/lib/clamav
Fri Apr 17 15:47:22 2009 -> Not loading PUA signatures.
Fri Apr 17 15:47:39 2009 -> Loaded 541181 signatures.
Fri Apr 17 15:48:00 2009 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
Fri Apr 17 15:48:00 2009 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Fri Apr 17 15:48:00 2009 -> LOCAL: Setting connection queue length to 15
Fri Apr 17 15:48:00 2009 -> ERROR: daemonize() failed

mit dem "daemonize() failed" an sich kann nich so nicht weiter was anfangen. Google hat auch nicht geholfen. Wie komme ich weiter ?
Kann ich bis das Problem gelöst ist den virenscan abschalten, damit die mails wenigstens durchgehen ?

Vielen Dank im Vorraus

Christian

[ChristianFe]

Once again in english, totally didn't realize that I wrote my original post in German.

Hi,

now that the installation of ISPConfig 3 on a Lenny vServer has worked flawlessly I have a problem with clamd.

Clamd seems to be unable to start, however I can't find the reason.

/etc/init.d/clamav-daemon status
clamd is not running failed!

I then tried

/etc/init.d/clamav-daemon start

to start the daemon and got the following reply.

Starting ClamAV daemon: clamd  failed!

What exaclty has failed? (I cut out the ClamAV is outdated... message)

dmesg doesn't tell me anything

/var/log/clamav/clamav.log:

Fri Apr 17 15:47:22 2009 -> +++ Started at Fri Apr 17 15:47:22 2009
Fri Apr 17 15:47:22 2009 -> clamd daemon 0.94.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Fri Apr 17 15:47:22 2009 -> Log file size limit disabled.
Fri Apr 17 15:47:22 2009 -> Reading databases from /var/lib/clamav
Fri Apr 17 15:47:22 2009 -> Not loading PUA signatures.
Fri Apr 17 15:47:39 2009 -> Loaded 541181 signatures.
Fri Apr 17 15:48:00 2009 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
Fri Apr 17 15:48:00 2009 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
Fri Apr 17 15:48:00 2009 -> LOCAL: Setting connection queue length to 15
Fri Apr 17 15:48:00 2009 -> ERROR: daemonize() failed

The "daemonize() failed" doesn't give me any hints on what is wrong. google didn't help either. How do I proceed ? Can I deactivate the virus scan until finding the problem to ensure that mails are delivered ?

Thanks in advance

Christian

[falko]

What's in/etc/init.d/clamav-daemon? That might help in that we know under what condition the script shows the various error messages.

[ChristianFe]

It's the standard start/stop script that came with Lenny. I've attached it to this post.

[ChristianFe]

Can anyone help me out with this ? Postfix seems to be completely stuck as well, no mails get delivered. Fortunately I haven't changed the MX record of my domains to this server yet, but I'd really like to get this working soon.

Postfix is building up a queue of mails at the moment.

Some more error logs i found:

/0/0.05, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Apr 19 15:28:48 vsr019 postfix/error[21503]: 6938756E09: to=, relay=none, delay=155774, delays=155774/0.11/0/0.34, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Apr 19 15:28:48 vsr019 postfix/error[21504]: A144857376: to=, relay=none, delay=407, delays=406/0.05/0/0.07, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Apr 19 15:28:48 vsr019 postfix/error[21503]: 6938756E09: to=, relay=none, delay=155774, delays=155774/0.11/0/0.4, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)

Any help on how to start tracking this problem is appreciated. If this thread is in the wrong forum category please do move it accordingly.

It looks to me at the moment that amavis doesn't work b/c the clamav daemon isnt working, which then causes postfix not to work. What exactly is stuck I don't understand.

[falko]

Does the command

daemon --name=clamd --respawn /usr/sbin/clamd -F /var/run/clamav/daemon-clamd.pid

show any errors?

[ChristianFe]

Good evening.
When the server got terribly slow today I found the problem.
It was running out of memory.

After adding a swap file and rebooting all services including amavis (that had crashed just before adding the swap space) and clamav came up and the server seems to be working now.

The server still is slow so I'm wondering what amount of RAM u guys would suggest would be necessary along with how much swap space ?

[falko]

I think you should at least have 512MB RAM. My swap space is usually the double size of my RAM.