On Tue, Apr 20, 2004 at 12:03:05AM -0700, [EMAIL PROTECTED] said: > Behavior: > --------- > clamscan works fine > clamdscan works fine > > When sending mail to clamd via a milter (either clamav-milter or > smtp-vilter), there seems to be a problem contacting the mail daemon, > generating a temporary failure. > > (I'm also setting up spamassassin with spamass-milter, which works fine. > It's disabled while I test clamav, but it does confirm that sendmail > is built with milter support.)
This smells like clamav-milter can't connect to clamd. > Logs: > ----- > > [while using clamav-milter-0.70-rc1] > Apr 19 22:06:38 server1 clamav-milter[30731]: clamd / ClamAV version 0.70rc, > clamav-milter version 0.70 > Apr 19 22:06:49 server1 clamav-milter[30731]: clamfi_connect: hostaddr is null > Apr 19 22:06:49 server1 clamav-milter[30731]: clamfi_close > Apr 19 22:06:49 server1 spamass-milter[29268]: NULL context in mlfi_close! Should > not happen! > Apr 19 22:06:49 server1 sendmail[30755]: i3K36nT6030755: Milter: connect: > host=localhost, addr=0, temp failing commands clamfi_connect: hostaddr is null That seems like a problem. Sendmail connects to clamav-milter over unix sockets, specified by the local: lines in sendmail.mc and the clamav-milter start script. It looks like they are the same, and working, because the message is getting as far as clamav-milter. Then clamav-milter connects to clamd, and to do so, it looks at clamav.conf for how to do so (unix socket, tcp socket, etc). Turn on verbose logging in clamd (LogVerbose, LogClean) and see if you even see the connection attempts from the milter - my bet is no. One of the problems I have had in the past with clamav-milter and clamd is firewalling - the connection works much like the ftp data session, where clamd sends back a new port for the transaction to happen on, and then they both switch. If you only have one port open, the rest of the transaction is going to be blocked. If you don't have firewall issues, and you still can't figure it out, send a copy of clamav.conf - it sounds like either something is blocking -milter from connecting to clamd, or it can't figure out how to. -- -------------------------------------------------------------------------- | Stephen Gran | lp1 on fire -- One of the more | | [EMAIL PROTECTED] | obfuscated kernel messages | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------
pgp00000.pgp
Description: PGP signature
