On Thu, 10 Aug 2006 17:57:18 -0500 René Berber <[EMAIL PROTECTED]> wrote:
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Steve Holdoway wrote: > > > Last night, clamav fell over. This is just about the first time it's > > happened. The problem is, it took out the mail server completely. > > > > I'm integrating into sendmail using the following line in sendmail.mc > > > > INPUT_MAIL_FILTER(`clamav',`S=unix:/var/run/clamav/clmilter.sock, F=T, > > T=S:4m;R:4m')dnl > > > > and I get pairs of lines like > > > > Aug 11 02:47:30 server sm-mta[29787]: k7AElU70029787: Milter (clamav): > > local socket name /var/run/clamav/clmilter.sock unsafe > > Aug 11 02:47:30 server sm-mta[29787]: k7AElU70029787: Milter (clamav): to > > error state > > Aug 11 02:47:30 server sm-mta[29787]: k7AElU70029787: Milter: > > initialization failed, temp failing commands > > > > in the sendmail logs, and no mail is delivered. > > > > Is there any way I can set my mail server up ( debian, sendmail 8.13.7 ) > > such that it keeps on delivering unchecked mail in these circumstances??? > > - From the clamav-milter/INSTALL doc: > > "If you see an unsafe socket error from sendmail, it means that the > permissions > of the /var/run/clamav directory are too open. Check you have correctly run > chown and chmod, it may also mean that clamav-milter hasn't started, run > ps and check your logs." Thet'll need to be reworded then, as this message is also shown when the socket is not there. > > and also: > > "You may also think about the F= entry in sendmail.mc, since it tells sendmail > what to do with emails if clamav-milter is not running. Setting F=T will tell > the remote end to resend later (temporary failure), setting F=R will reject > the email (permanent failure) and setting F= will pass the email through as > though clamav-milter were not installed, in this case you should warn your > users that emails are not being scanned. We recommend setting F=T." Thanks for that, I had a good read of the pros and cons thanks to Mr. O'Reilly, and will be taking that path. > > I no instances should sendmail have stopped, so you may have other problems. Sendmail has not stopped, it's just not allowing any mail to be delivered as I said. Well actually, what I meant, rather than what I said (: > - -- > René Berber > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.4 (Cygwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFE27nOL3NNweKTRgwRAiMWAKD6XchRre0lG9/4LKQYMWkeNMiSzgCfSre9 > 3vS1TzT5/Q9QB1deE2BbxUY= > =u9fG > -----END PGP SIGNATURE----- > > _______________________________________________ > http://lurker.clamav.net/list/clamav-users.html > Cheers, Steve. _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
