I was running 0.80o which exhibited this behaviour but when I moved to 0.80p the problem had been resolved (thanks Nigel). So it would help to know what version you are running?
The milter is: kirk:/usr/local/etc/rc.d# clamav-milter --version ClamAV version devel-20041204, clamav-milter version 0.80w
This is the log:
Sat Dec 4 20:04:20 2004 -> +++ Started at Sat Dec 4 20:04:20 2004
Sat Dec 4 20:04:20 2004 -> clamd daemon devel-20041204 (OS: freebsd4.10, ARCH: i386, CPU: i386)
Sat Dec 4 20:04:20 2004 -> Log file size limited to 2097152 bytes.
Sat Dec 4 20:04:20 2004 -> Verbose logging activated.
Sat Dec 4 20:04:20 2004 -> Running as user clamav (UID 999, GID 999)
Sat Dec 4 20:04:20 2004 -> Reading databases from /usr/local/share/clamav
Sat Dec 4 20:04:21 2004 -> Protecting against 27923 viruses.
Sat Dec 4 20:04:21 2004 -> Bound to address 127.0.0.1 on port 3330
Sat Dec 4 20:04:21 2004 -> Setting connection queue length to 30
Sat Dec 4 20:04:21 2004 -> Listening daemon: PID: 44772
Sat Dec 4 20:04:21 2004 -> Archive: Archived file size limit set to 15728640 bytes.
Sat Dec 4 20:04:21 2004 -> Archive: Recursion level limit set to 8.
Sat Dec 4 20:04:21 2004 -> Archive: Files limit set to 1500.
Sat Dec 4 20:04:21 2004 -> Archive: Compression ratio limit set to 300.
Sat Dec 4 20:04:21 2004 -> Archive: Limited memory usage.
Sat Dec 4 20:04:21 2004 -> Archive support enabled.
Sat Dec 4 20:04:21 2004 -> Archive: RAR support enabled.
Sat Dec 4 20:04:21 2004 -> Archive: Blocking encrypted archives.
Sat Dec 4 20:04:21 2004 -> Archive: Blocking archives that exceed limits.
Sat Dec 4 20:04:21 2004 -> Portable Executable support enabled.
Sat Dec 4 20:04:21 2004 -> Detection of broken executables enabled.
Sat Dec 4 20:04:21 2004 -> Mail files support enabled.
Sat Dec 4 20:04:21 2004 -> Mail: URL scanning enabled.
Sat Dec 4 20:04:21 2004 -> OLE2 support enabled.
Sat Dec 4 20:04:21 2004 -> HTML support enabled.
Sat Dec 4 20:04:21 2004 -> Self checking every 3600 seconds.
Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END Sat Dec 4 20:04:26 2004 -> SESSION: Client disconnected without END [...]
The config is:
--> begin <-- ### Logs ### LogFile /var/log/clamav/clamd.log LogFileMaxSize 2M LogTime LogSyslog LogVerbose
PidFile /var/run/clamav/clamd.pid DatabaseDirectory /usr/local/share/clamav TemporaryDirectory /var/tmp
### Socket ### TCPSocket 3330 TCPAddr 127.0.0.1
MaxConnectionQueueLength 30 StreamMaxLength 20M MaxThreads 20 ReadTimeout 300 IdleTimeout 30 MaxDirectoryRecursion 20
SelfCheck 3600 VirusEvent /usr/local/sbin/clamav-report.sh %f %v >> /var/log/clamav/report.log User clamav
### Scanning ### ScanPE DetectBrokenExecutables ScanOLE2 ScanMail MailFollowURLs ScanHTML ScanArchive ScanRAR
ArchiveMaxFileSize 15M ArchiveMaxRecursion 8 ArchiveMaxFiles 1500 ArchiveMaxCompressionRatio 300 ArchiveLimitMemoryUsage ArchiveBlockEncrypted ArchiveBlockMax
--> end <--
In the sendmail.mc I have: INPUT_MAIL_FILTER(`clmilter',`S=inet:[EMAIL PROTECTED],F=,T=S:4m;R:4m')
and the startup script is:
---> begin <---
[...]
DAEMON="clamd"
DAEMON_HOME="${PREFIX}/clamav"
DAEMON_CONF="${PREFIX}/etc/clamd.conf"
DAEMON_FLAG="-c ${DAEMON_CONF}"MILTER="clamav-milter"
MILTER_FLAG="-t /usr/local/etc/clamav.msg -c ${DAEMON_CONF} -P -p virusalert -C -H -N -f -s localhost"
MILTER_PORT="inet:[EMAIL PROTECTED]"
case "$1" in
start)
rm -rf /var/run/clamav/*
${BIN_DIR}/${DAEMON} ${DAEMON_FLAG}
sleep 5
${BIN_DIR}/${MILTER} ${MILTER_FLAG} ${MILTER_PORT}
echo -n ' clamav milter'
;;
[...]
--> end <---Any help is very appreciated.
Best Regards, Gianmarco Giovannelli , "Unix expert since yesterday" http://utenti.gufi.org/~gmarco/
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
