First off: FreeBSD 4.10-RELEASE Clamav built out of the ports collection ClamAV version 0.86.1, clamav-milter version 0.86 clamav_milter_flags="--postmaster-only -N -l --max-children=25"
I have searched the web and the archives, I see a few references to problems similar to mine, but I don't see any solution offered that I could find. I keep having this happen, it has happened for several versions now (at least back to .84). Clamav-milter will go nuts for whatever reason and start creating lots of zombie processes, and sendmail will start to refuse to accept smtp send connections from my users. Eventually, it starts to bog the server down, and I have a script that will catch it when the load average gets too high, but I would like it to not do it at all. Lots of stuff like this in the clamd.log, with nothing before it to suggest a problem: Thu Jul 14 22:04:49 2005 -> /var/tmp//clamav-a0a7c70833aead1c/msg.hOR6GI: Worm.Maslan.A FOUND LibClamAV Error: Segmentation fault :-( Bye.. Thu Jul 14 22:42:28 2005 -> /var/tmp//clamav-a0a7c70833aead1c/msg.rG81VK: Worm.Mytob.FJ FOUND LibClamAV Error: Segmentation fault :-( Bye.. Thu Jul 14 22:42:54 2005 -> /var/tmp//clamav-a0a7c70833aead1c/msg.sMNVEV: Worm.Mytob.FJ FOUND LibClamAV Error: Segmentation fault :-( Bye.. Thu Jul 14 22:43:20 2005 -> /var/tmp//clamav-a0a7c70833aead1c/msg.SD6bRp: Worm.Mytob.FJ FOUND The appropriate maillog entries for that first one: Jul 14 22:04:49 ns1 sendmail[32017]: j6F34ibr032017: from=<[EMAIL PROTECTED]>, size=109357, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=IPv4, relay=168-103-216-61.dnvr.qwest.net [168.103.216.61] Jul 14 22:04:49 ns1 sendmail[32017]: j6F34ibr032017: Milter add: header: X-Virus-Scanned: ClamAV version 0.86.1, clamav-milter version 0.86 on ns1.coursetrends.com Jul 14 22:04:49 ns1 sendmail[32017]: j6F34ibr032017: Milter add: header: X-Virus-Status: Infected with Worm.Maslan.A Jul 14 22:08:49 ns1 sendmail[32017]: j6F34ibr032017: Milter (clmilter): timeout before data read Jul 14 22:08:49 ns1 sendmail[32017]: j6F34ibr032017: Milter (clmilter): to error state Jul 14 22:08:49 ns1 sendmail[32127]: j6F34ibr032017: to=<[EMAIL PROTECTED]>, delay=00:04:05, xdelay=00:00:00, mailer=local, pri=139860, relay=local, dsn=2.0.0, stat=Sent Any thoughts? _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
