> >orig_to=<yyy>, relay=none, delay=357, status=deferred (delivery temporarily > Is that delay in seconds? Sorry, I'm used to sendmail's way of showing > delays in time format hh:mm:ss.
yep i think... > Why do you say "amavis can't connect to clamd"? Mar 13 06:41:54 service amavis[12311]: (12311-03) Clam Antivirus-clamd: Can't connect to UNIX socket /var/run/clamav/clamd.ctl: Connection refused, retrying (2) "connection refused", but when i check if clamav is running (ps ax | grep clam), it is... > Is clamd using a tcp socket (at 127.0.0.1:3310) not a "unix domain" a.k.a. > file socket? we are using file socket (/var/run/clamav/clamd.ctl) > The log doesn't say anything about amavis or clamd, it says qmgr... have > you checked if clamd responds to clamdscan or better yet, to clamdwatch? i didn't, i will try tomorrow (now it's too late, there are few (500) mails in a minute, i am waiting for an hour and still working ( -> can it be some "load" problem? too much sockets opened? i think standard unix 1024 file descriptors should be enough...) > If clamd in debug mode really doesn't say anything that would be strange. > You probably mean you didn't see anything out of the ordinary in the output. last message in debug log is "Self checking every 3600 seconds.", then sometimes "...virus FOUND" -- -- Jakub Suchy <[EMAIL PROTECTED]> -- LOGIOS s.r.o, V Podhájí 776/30, 400 01 Ústí nad Labem -- tel.: +420 474 745 159, fax: +420 474 745 160 -- e-mail: [EMAIL PROTECTED], web: http://www.logios.cz _______________________________________________ http://lurker.clamav.net/list/clamav-users.html