Clamav problem - ISPConfig 3 -Lenny

Discussion in 'HOWTO-Related Questions' started by ChristianFe, Apr 17, 2009.

  1. ChristianFe

    ChristianFe New Member

    Hallo,

    nachdem die Installation von ISPConfig 3 auf einem Lenny vServer super funktioniert hat habe ich nun ein Problem mit clamd.

    Clamd scheint nicht zu starten. Ich kann jedoch den Fehler nicht nachvollziehen.

    Code:
    /etc/init.d/clamav-daemon status
    clamd is not running failed!
    daraufhin probiert mit
    Code:
    /etc/init.d/clamav-daemon start
    den daemon zu starten führt zu folgender Ausgabe:

    Code:
    Starting ClamAV daemon: clamd  failed!
    
    Was Failed da ? (Die outdated meldung hab ich nicht mit gepostet, die kennt ja jeder)

    dmesg sagt nichts.

    /var/log/clamav/clamav.log sagt:
    Code:
    Fri Apr 17 15:47:22 2009 -> +++ Started at Fri Apr 17 15:47:22 2009
    Fri Apr 17 15:47:22 2009 -> clamd daemon 0.94.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
    Fri Apr 17 15:47:22 2009 -> Log file size limit disabled.
    Fri Apr 17 15:47:22 2009 -> Reading databases from /var/lib/clamav
    Fri Apr 17 15:47:22 2009 -> Not loading PUA signatures.
    Fri Apr 17 15:47:39 2009 -> Loaded 541181 signatures.
    Fri Apr 17 15:48:00 2009 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
    Fri Apr 17 15:48:00 2009 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
    Fri Apr 17 15:48:00 2009 -> LOCAL: Setting connection queue length to 15
    Fri Apr 17 15:48:00 2009 -> ERROR: daemonize() failed
    

    mit dem "daemonize() failed" an sich kann nich so nicht weiter was anfangen. Google hat auch nicht geholfen. Wie komme ich weiter ?
    Kann ich bis das Problem gelöst ist den virenscan abschalten, damit die mails wenigstens durchgehen ?

    Vielen Dank im Vorraus

    Christian
     
  2. ChristianFe

    ChristianFe New Member

    Once again in english, totally didn't realize that I wrote my original post in German.

    Hi,

    now that the installation of ISPConfig 3 on a Lenny vServer has worked flawlessly I have a problem with clamd.

    Clamd seems to be unable to start, however I can't find the reason.

    Code:
    /etc/init.d/clamav-daemon status
    clamd is not running failed!
    I then tried
    Code:
    /etc/init.d/clamav-daemon start
    to start the daemon and got the following reply.

    Code:
    Starting ClamAV daemon: clamd  failed!
    
    What exaclty has failed? (I cut out the ClamAV is outdated... message)

    dmesg doesn't tell me anything

    /var/log/clamav/clamav.log:
    Code:
    Fri Apr 17 15:47:22 2009 -> +++ Started at Fri Apr 17 15:47:22 2009
    Fri Apr 17 15:47:22 2009 -> clamd daemon 0.94.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
    Fri Apr 17 15:47:22 2009 -> Log file size limit disabled.
    Fri Apr 17 15:47:22 2009 -> Reading databases from /var/lib/clamav
    Fri Apr 17 15:47:22 2009 -> Not loading PUA signatures.
    Fri Apr 17 15:47:39 2009 -> Loaded 541181 signatures.
    Fri Apr 17 15:48:00 2009 -> LOCAL: Removing stale socket file /var/run/clamav/clamd.ctl
    Fri Apr 17 15:48:00 2009 -> LOCAL: Unix socket file /var/run/clamav/clamd.ctl
    Fri Apr 17 15:48:00 2009 -> LOCAL: Setting connection queue length to 15
    Fri Apr 17 15:48:00 2009 -> ERROR: daemonize() failed
    
    The "daemonize() failed" doesn't give me any hints on what is wrong. google didn't help either. How do I proceed ? Can I deactivate the virus scan until finding the problem to ensure that mails are delivered ?

    Thanks in advance

    Christian
     
  3. falko

    falko Super Moderator

    What's in/etc/init.d/clamav-daemon? That might help in that we know under what condition the script shows the various error messages.
     
  4. ChristianFe

    ChristianFe New Member

    It's the standard start/stop script that came with Lenny. I've attached it to this post.
     

    Attached Files:

  5. ChristianFe

    ChristianFe New Member

    Can anyone help me out with this ? Postfix seems to be completely stuck as well, no mails get delivered. Fortunately I haven't changed the MX record of my domains to this server yet, but I'd really like to get this working soon.

    Postfix is building up a queue of mails at the moment.

    Some more error logs i found:

    Code:
    /0/0.05, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
    Apr 19 15:28:48 vsr019 postfix/error[21503]: 6938756E09: to=, relay=none, delay=155774, delays=155774/0.11/0/0.34, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
    Apr 19 15:28:48 vsr019 postfix/error[21504]: A144857376: to=, relay=none, delay=407, delays=406/0.05/0/0.07, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
    Apr 19 15:28:48 vsr019 postfix/error[21503]: 6938756E09: to=, relay=none, delay=155774, delays=155774/0.11/0/0.4, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
    
    Any help on how to start tracking this problem is appreciated. If this thread is in the wrong forum category please do move it accordingly.

    It looks to me at the moment that amavis doesn't work b/c the clamav daemon isnt working, which then causes postfix not to work. What exactly is stuck I don't understand.
     
  6. falko

    falko Super Moderator

    Does the command
    Code:
    daemon --name=clamd --respawn /usr/sbin/clamd -F /var/run/clamav/daemon-clamd.pid
    show any errors?
     
  7. ChristianFe

    ChristianFe New Member

    Good evening.
    When the server got terribly slow today I found the problem.
    It was running out of memory.

    After adding a swap file and rebooting all services including amavis (that had crashed just before adding the swap space) and clamav came up and the server seems to be working now.

    The server still is slow so I'm wondering what amount of RAM u guys would suggest would be necessary along with how much swap space ?
     
    Last edited: Apr 20, 2009
  8. falko

    falko Super Moderator

    I think you should at least have 512MB RAM. My swap space is usually the double size of my RAM.
     

Share This Page