ClamAV-clamd av-scanner FAILED in ISPConfig3.0.2.1 3

Discussion in 'General' started by pinguinito, May 16, 2010.

  1. pinguinito

    pinguinito New Member

    Mail Queue:

    (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=14003-02, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.; ClamAV-clamscan av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval 88) line 516. (in reply to end of DATA command))

    And this is the Mail Error-log:

    May 15 17:40:43 server1 amavis[14904]: (14904-02-4) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.
    May 15 17:40:43 server1 amavis[14904]: (14904-02-4) (!!)WARN: all primary virus scanners failed, considering backups

    And I don't have this directory:
    /var/run/clamav/clamd.ctl

    I assume that creating this directory I will fix my problem but, how?

    thanks to all of you in this community
     
  2. falko

    falko Super Moderator

    Which distribution do you use? Did you use one of the "Perfect Server" guides to set it up?
     
  3. pinguinito

    pinguinito New Member

    ClamAV-CLamd av-scanner FAILED

    I used your how to The perfect server in debian lenny.
    ISPConfig 3.0.2.1

    This happen after I reinstall the clamav antivirus, think that I can eliminate the message clamav outdate
     
  4. pinguinito

    pinguinito New Member

    ClamAV-CLamd av-scanner FAILED

    Sun May 16 20:09:14 2010 -> +++ Started at Sun May 16 20:09:14 2010
    Sun May 16 20:09:14 2010 -> clamd daemon 0.94.2 (OS: linux-gnu, ARCH: i386, CPU: i486)
    Sun May 16 20:09:14 2010 -> Log file size limit disabled.
    Sun May 16 20:09:14 2010 -> Reading databases from /var/lib/clamav
    Sun May 16 20:09:14 2010 -> Not loading PUA signatures.
    Sun May 16 20:09:14 2010 -> ERROR: Malformed database

    This is the clamav-log
     
  5. falko

    falko Super Moderator

    Please add
    Code:
    deb http://volatile.debian.org/debian-volatile lenny/volatile main contrib non-free
    to /etc/apt/sources.list, run
    Code:
    aptitude update
    and install the latest ClamAV update.
     
  6. pinguinito

    pinguinito New Member

    ClamAV-CLamd av-scanner FAILED

    server1:~# apt-get install clamav
    Reading package lists... Done
    Building dependency tree
    Reading state information... Done
    clamav is already the newest version.
    0 upgraded, 0 newly installed, 0 to remove and 14 not upgraded.
    server1:~


    show mail log:

    May 17 13:54:56 server1 postfix/smtp[644]: 97F6473C67: to=, orig_to=, relay=127.0.0.1[127.0.0.1]:10024, delay=248073, delays=248038/18/0.02/17, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00369-06, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.; ClamAV-clamscan av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval 88) line 516. (in reply to end of DATA command))

    show freshclam-log:

    WARNING: Incremental update failed, trying to download daily.cvd
    Ignoring mirror 208.70.244.158 (due to previous errors)
    Ignoring mirror 24.215.0.24 (due to previous errors)
    Ignoring mirror 24.215.0.24 (due to previous errors)
    ERROR: Can't download daily.cvd from database.clamav.net
    Giving up on database.clamav.net...

    show mail error-log:

    May 17 13:56:06 server1 amavis[368]: (00368-06-5) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.; ClamAV-clamscan av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval 88) line 516.
    :(
    I am very sorry, I need help.
     
  7. pinguinito

    pinguinito New Member

    For my problem with ClamAV should I trait this:

    10 Install Amavisd-new, SpamAssassin, And Clamav
    To install amavisd-new, SpamAssassin, and ClamAV, we run

    apt-get install amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl


    from the howto the perfect server with debian lenny ?
     
  8. Hans

    Hans Moderator

    Pleas follow exactly the perfect howto and to install ClamAV do this:

    Add the line
    Code:
    deb http://volatile.debian.org/debian-volatile lenny/volatile main contrib non-free
    to your /etc/apt/sources.list

    After that execute:

    apt-get update
    apt-get install clamav
    apt-get upgrade
    /etc/init.d/amavis restart
    postsuper -r ALL
     
  9. pinguinito

    pinguinito New Member

    ClamAV-CLamd av-scanner FAILED

    ok. I did it but still I the problem continue.

    mail.info:

    May 18 01:21:07 server1 amavis[10439]: (10439-03-2) (!)ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: 2, retrying (2)
    May 18 01:21:07 server1 amavis[10438]: (10438-03-2) (!)ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: 2, retrying (2)
    May 18 01:21:13 server1 amavis[10439]: (10439-03-2) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/c$
    May 18 01:21:14 server1 amavis[10439]: (10439-03-2) (!!)WARN: all primary virus scanners failed, considering backups
    May 18 01:21:14 server1 amavis[10438]: (10438-03-2) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to

    can't connect to UNIX socket /var/run/clamav/clamd.ctl

    how can I create this directory? clamd.ctl
     
  10. edge

    edge HowtoForge Supporter

    pinguinito I have merged your two post.
    Please do not double post!
     
  11. Hans

    Hans Moderator

    @pinguinito, please execute: /etc/init.d/clamd restart
     
  12. bspark

    bspark New Member

    Hi I am having a similar problem but am coming from using the ISPmail tutorial for Debian Lenny from workaround.org.
    I have Dovecote, Amavis, Clamav Postfix and SpamAssassin installed
    Whenever I send a test email like this:

    sendmail john@example.com < /usr/share/doc/spamassassin/examples/sample-spam.txt

    I can see the following error messages in the mail.log

    May 18 19:46:10 debianLenny postfix/pickup[5502]: C502CE71: uid=0 from=<root>
    May 18 19:46:10 debianLenny postfix/cleanup[5839]: C502CE71: message-id=<GTUBE1.1010101@example.net>
    May 18 19:46:10 debianLenny postfix/qmgr[3235]: C502CE71: from=<root@debianlenny.bspark1.com>, size=943, nrcpt=1 (queue active)
    May 18 19:46:11 debianLenny amavis[5677]: (05677-07) (!)ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: 2, retrying (2)
    May 18 19:46:17 debianLenny amavis[5677]: (05677-07) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.
    May 18 19:46:17 debianLenny amavis[5677]: (05677-07) (!!)WARN: all primary virus scanners failed, considering backups
    May 18 19:46:27 debianLenny amavis[5677]: (05677-07) (!!)ClamAV-clamscan av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval 88) line 516.
    May 18 19:46:27 debianLenny amavis[5677]: (05677-07) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.; ClamAV-clamscan av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval 88) line 516.
    May 18 19:46:27 debianLenny amavis[5677]: (05677-07) (!)PRESERVING EVIDENCE in /var/lib/amavis/tmp/amavis-20100518T194610-05677
    May 18 19:46:27 debianLenny postfix/smtp[5841]: C502CE71: to=<john@example.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=0.05/0.01/0.01/16, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=05677-07, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.; ClamAV-clamscan av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval 88) line 516. (in reply to end of DATA command))

    I have tried re-installing as per your instructions

    deb http://volatile.debian.org/debian-volatile lenny/volatile main contrib non$

    It tells me I have all the latest versions
    o your /etc/apt/sources.list

    After that execute:

    apt-get update
    apt-get install clamav
    apt-get upgrade
    /etc/init.d/amavis restart
    postsuper -r ALL

    Restarted Clamav-daemon

    Then tried

    adding deb http://volatile.debian.org/debian-volatile lenny/volatile main contrib non-free to the /etc/apt/sources.list
    ran
    aptitude update

    Restarted Clamav-daemon
    Still have exactly the same error...
    Is this a bug in the new versions?

    BTW I am a newbie to Linux..
     
  13. pinguinito

    pinguinito New Member

    clamav problem

    Thank you for your fast respond. I appreciate.
    This is my out put

    server1:~# /etc/init.d/clamd restart
    -bash: /etc/init.d/clamd: No such file or directory
    server1:~# mc
     
  14. Hans

    Hans Moderator

    Then do an: /etc/init.d/clamav-daemon restart
     
  15. pinguinito

    pinguinito New Member

    ClamAV-CLamd av-scanner FAILED

    Hi.
    I appreciate your time.
    this is the output :

    Stopping ClamAV daemon: clamd.
    Starting ClamAV daemon: clamd LibClamAV Warning: **************************************************
    LibClamAV Warning: *** The virus database is older than 7 days! ***
    LibClamAV Warning: *** Please update it as soon as possible. ***
    LibClamAV Warning: **************************************************
    LibClamAV Warning: ***********************************************************
    LibClamAV Warning: *** This version of the ClamAV engine is outdated. ***
    LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq ***
    LibClamAV Warning: ***********************************************************
    LibClamAV Error: cli_hex2str(): Malformed hexstring: This ClamAV version has reached End of Life! Please upgrade to version 0.95 or later. For more information see www.clamav.net/eol-clamav-094 and www.clamav.net/download (length: 169)
    LibClamAV Error: Problem parsing database at line 741
    LibClamAV Error: Can't load daily.ndb: Malformed database
    LibClamAV Error: cli_tgzload: Can't load daily.ndb
    LibClamAV Error: Can't load /var/lib/clamav/daily.cld: Malformed database
    ERROR: Malformed database

    Can't load /var/lib/clamav/daily.cld: Malformed database
    ERROR: Malformed database

    how to fix this?
     
  16. Hans

    Hans Moderator

    If you have the line
    Code:
    deb http://volatile.debian.org/debian-volatile  lenny/volatile main contrib non-free
    added to your file /etc/apt/sources.list then do this:

    apt-get update
    apt-get install clamav
    apt-get upgrade
    /etc/init.d/amavis restart
     
  17. pinguinito

    pinguinito New Member

    ClamAV-CLamd av-scanner FAILED

    My friends after all, I still continue getting the some error from clamav :

    7E9B673B8F 759 Sat May 15
    (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=27390-09, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: No such file or directory) at (eval 88) line 309.; ClamAV-clamscan av-scanner FAILED: run_av error: run_av: Exceeded allowed time at (eval 88) line 516. (in reply to end of DATA command))

    And is just this is directory:

    /var/run/clamav/clamd.ctl

    that is making my life difficult.
    Thanks to all of you for take time in this, the best forum on Internet to help people like me.

    How can I creed this " clamd.ctl "
     
  18. bspark

    bspark New Member

    clamd.ctl file error

    I have experienced a similar problem to you with a Postfix Amavis and Clamav installation.I have searched the net, and cant find anyone that seems to have posted a fix.
    For some reason it appears as if the clamd.ctl file is not being created, or alternatively there is some permissions that are blocking it from being made.

    Having tried re-installing and removing Clamav and getting the message numerous times that the latest version is installed I would be very confidant in stating that unless there is a problem with the latest version then that is not the problem.
    I have also followed the instructions about stopping and restarting Clamav and Amavis... and it is not that either.
    Adding users... it does not help

    Being new to Linux, it has been a learning curve getting this far relatively easily, but I having being searching for a fix for this for over a week now , and cant find any solution - this is like a Brick wall
     
  19. g2im

    g2im New Member

    help

    Hi,
    I have also this error in my log file :
    Code:
    amavis[584]: (00584-01) (!)ClamAV-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: 2, retrying (2)
    and
    Code:
    amavis[584]: (00584-01) (!!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket /var/run/clamav/clamd.ctl: Aucun fichier ou r\303\251pertoire de ce type) at (eval 86) line 309.
    and
    Code:
    amavis[584]: (00584-01) (!!)WARN: all primary virus scanners failed, considering backups
    My configuration :
    • Debian Lenny
    • Postfix install and ready
    • I use also spamassassin and without clamav AND amavis it's run perfectly

    Configuration :
    main.cf :
    Code:
    content_filter = smtp-amavis:[127.0.0.1]:10024
    master.cf :
    Code:
    #
    # Amavisd-new
    #
    smtp-amavis unix -      -       -     -       2  smtp
        -o smtp_data_done_timeout=1200
        -o smtp_send_xforward_command=yes
        -o disable_dns_lookups=yes
        -o max_use=20
    
    127.0.0.1:10025 inet n  -       -     -       -  smtpd
        -o content_filter=
        -o local_recipient_maps=
        -o relay_recipient_maps=
        -o smtpd_restriction_classes=
        -o smtpd_delay_reject=no
        -o smtpd_client_restrictions=permit_mynetworks,reject
        -o smtpd_helo_restrictions=
        -o smtpd_sender_restrictions=
        -o smtpd_recipient_restrictions=permit_mynetworks,reject
        -o smtpd_data_restrictions=reject_unauth_pipelining
        -o smtpd_end_of_data_restrictions=
        -o mynetworks=127.0.0.0/8,,[::1]/128
        -o smtpd_error_sleep_time=0
        -o smtpd_soft_error_limit=1001
        -o smtpd_hard_error_limit=1000
        -o smtpd_client_connection_count_limit=0
        -o smtpd_client_connection_rate_limit=0
        -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks

    i don't know how to correct this bug !!
    thx for your help
    Micael
     
  20. g2im

    g2im New Member

    resolv

    Hi
    Just for information, i have resolv the problem :
    You must reconfigure clamav and choose Unix socket and not TCP socket ^^
    Code:
    dpkg-reconfigure clamav-base
    M
     

Share This Page