I'm running clamav-0.70 with clamav-milter-0.70j+n_children_patch under
RedHat9 with their default sendmail (8.12.8-9.90).  ClamAV has been
remarkably stable, going for weeks at a time.  But today I got (US
Central Time):

May 31 11:36:23 astro clamd[1002]: Segmentation fault :-( Bye..

It wasn't timed with a freshclam update, database check, log rotation,
or anything like that.  However, my maillog indicates:

May 31 11:36:23 astro sendmail[22238]: i4VGaNfM022238: from=<[EMAIL PROTECTED]>, 
size=6612, class=-60, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, 
relay=mx0.hep.uiuc.edu [128.174.118.155]
May 31 11:36:23 astro clamav-milter[1087]: clamfi_eom: read nothing from clamd
May 31 11:36:23 astro sendmail[22238]: i4VGaNfM022238: Milter: data, reject=451 4.7.1 
Please try again later
May 31 11:36:23 astro sendmail[22238]: i4VGaNfM022238: to=<[EMAIL PROTECTED]>, 
delay=00:00:00, pri=141932, stat=Please try again later

So... the message that broke it was sent to this list, specifically the
message from Samuel Benzaquen with timestamp:
    Date: Mon, 31 May 2004 11:16:12 -0400
Anyone else have problems with that message?  I bounced it back to
myself again, and it didn't crash clamd again the second time through.

Also, from that time on my configuration was tempfailing connections
with "Milter: data, reject=451 4.7.1 Please try again later".  That
surprised me, because I configured the milter as:

INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamav/clmilter.sock, F=, 
T=S:4m;R:4m')dnl

It was my understanding that the "F=" part of that meant that a milter
failure would cause messages to come in as if the milter did not exist.
Perhaps the documentation could be improved?  I just figured out that
I need the -d option to clamav-milter to do what I want.  But I
figured that out from the source code, not from the manpage, which is
somewhat disturbing.

Damian Menscher
-- 
-=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| <[EMAIL PROTECTED]> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to