Hi Ppl

Running Debian 3.1, with the following versions

sendmail       8.13.4-3
sendmail-base  8.13.4-3
sendmail-bin   8.13.4-3
sendmail-cf    8.13.4-3

clamav-base     0.84-2.sarge.1
clamav-freshclam        0.84-2.sarge.1
clamav-milter   0.84-2.sarge.1
libclamav1              0.84-2.sarge.1

sendmail seems to work fine for awhile then a start seeing mail.log entries
like this

Milter (clamav): timeout before data read
Milter (clamav): to error state

Then sendmail stops accepting connections and if I do a ps axf | grep
sendmail, I get the following and the only way for me to get sendmail
running again is to kill all of the below processes restart clamav-milter
then restart sendmail, then it works for awhile then it errors out again.

18492 ?        S      0:00 sendmail: MTA: ./j7G9f5OX018490 from queue
18498 ?        S      0:00 sendmail: MTA: ./j7G9ghUj018496 from queue
18516 ?        S      0:00 sendmail: MTA: ./j7G9qiNK018514 from queue
18520 ?        S      0:00 sendmail: MTA: ./j7G9u6EH018518 from queue
18523 ?        S      0:00 sendmail: MTA: ./j7G9uEYx018521 from queue
18524 ?        S      0:00 sendmail: MTA: j7G9vwe1018524 fw1.domain.co.za
[x.x.x.x]: RCPT To:<[EMAIL PROTECTED]>
18526 ?        S      0:00  \_ sendmail: MTA: ./j7G9vwdx018524 from queue
18549 ?        S      0:00 sendmail: MTA: ./j7GA2JsM018547 from queue
18578 ?        S      0:00 sendmail: MTA: ./j7GA336k018576 from queue
18584 ?        S      0:00 sendmail: MTA: ./j7GA5EZI018582 from queue
18599 ?        S      0:00 sendmail: MTA: ./j7GA7UxD018597 from queue
18602 ?        S      0:00 sendmail: MTA: ./j7GA7cdL018600 from queue
18603 ?        S      0:00 sendmail: MTA: j7GA7wbs018603 fw1.domain.co.za
[x.x.x.x]: RCPT To:<[EMAIL PROTECTED]>
18605 ?        S      0:00  \_ sendmail: MTA: ./j7GA7wbq018603 from queue
18817 ?        S      0:00 sendmail: MTA: ./j7GAgENv018789 from queue
18819 ?        Ss     0:00 sendmail: MTA: ./j7GAgHWb018791 from queue
19189 ?        Ss     0:00 sendmail: MTA: accepting connections


I have the following line in my sendmail.mc

include(`/etc/mail/m4/clamav-milter.m4')dnl


and the virus scanning seems to work, I have the same config running on a
couple of servers and since the upgrade from Debian woody to sarge they all
seem to be displaying the same problem.

cat /etc/default/clamav-milter
OPTIONS="--max-children=2 -ol"
#If you want to set an alternate pidfile (why?) please do it here:
#PIDFILE=/var/run/clamav/clamav-milter.pid
#If you want to set an alternate socket, do so here (remember to change
#  sendmail.mc):
#SOCKET=local:/var/run/clamav/clamav-milter.ctl


cat /etc/clamav/clamd.conf
#Automatically Generated by clamav-base postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-base
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket
User clamav
AllowSupplementaryGroups
ScanMail
ScanArchive
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ArchiveMaxCompressionRatio 250
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogFile /var/log/clamav/clamav.log
LogTime
LogFileMaxSize 0
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
ScanOLE2
ScanPE
DetectBrokenExecutables
ScanHTML
ArchiveBlockMax

Does anyone know where I can start looking ?



Thank you,

Mark Adrian Coetser
[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.bwbtrading.co.za http://www.thummb.com
cel: +27 83 296 1199
tel: +27 11 334 7779

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to