Hi, Yesterday I upgraded my mailserver to ClamAV 0.90 (compiled from source), but tonight the server gave some problems. In the syslog I found:
Feb 15 22:35:29 njord X-Antivirus-FormMailer.Net-1.25-st-qms: [njord.formmailer.nl117157412980126604] Requeuing: Maximum time exceeded. Something cannot handle this message. at /var/qmail/bin/qmail-scanner-queue.pl line 685. Feb 15 22:35:49 njord X-Antivirus-FormMailer.Net-1.25-st-qms: [njord.formmailer.nl117157414880126625] Requeuing: Maximum time exceeded. Something cannot handle this message. at /var/qmail/bin/qmail-scanner-queue.pl line 685. Also the selfcheck stopped functioning for some reason: Thu Feb 15 17:10:13 2007 -> SelfCheck: Database status OK. Thu Feb 15 17:13:45 2007 -> /var/spool/qmailscan/tmp/njord.formmailer.nl117155602580111843/1171556025.11845-0.njord.formmaile r.nl: HTML.Phishing.Azon-19 FOUND Thu Feb 15 17:13:45 2007 -> /var/spool/qmailscan/tmp/njord.formmailer.nl117155602580111843/orig-njord.formmailer.nl1171556025 80111843: Phishing.Email FOUND Thu Feb 15 17:20:32 2007 -> /var/spool/qmailscan/tmp/njord.formmailer.nl117155643180112199/part2.zip: Worm.SomeFool.Gen-2 FOU ND Thu Feb 15 17:20:32 2007 -> /var/spool/qmailscan/tmp/njord.formmailer.nl117155643180112199/orig-njord.formmailer.nl1171556431 80112199: Worm.SomeFool.Gen-2 FOUND Thu Feb 15 17:40:29 2007 -> SelfCheck: Database status OK. Thu Feb 15 18:10:48 2007 -> SelfCheck: Database modification detected. Forcing reload. Thu Feb 15 18:10:48 2007 -> Reading databases from /var/lib/clamav Thu Feb 15 18:10:52 2007 -> Database correctly reloaded (91793 signatures) Thu Feb 15 18:44:20 2007 -> SelfCheck: Database modification detected. Forcing reload. Thu Feb 15 18:44:20 2007 -> Reading databases from /var/lib/clamav Thu Feb 15 18:44:23 2007 -> Database correctly reloaded (91794 signatures) Thu Feb 15 19:01:07 2007 -> /var/spool/qmailscan/tmp/njord.formmailer.nl117156246780116320/1171562467.16322-0.njord.formmaile r.nl: HTML.Phishing.Azon-19 FOUND Thu Feb 15 19:01:07 2007 -> /var/spool/qmailscan/tmp/njord.formmailer.nl117156246780116320/orig-njord.formmailer.nl1171562467 80116320: HTML.Phishing.Azon-19 FOUND Thu Feb 15 22:39:38 2007 -> +++ Started at Thu Feb 15 22:39:38 2007 Thu Feb 15 22:39:38 2007 -> clamd daemon 0.90 (OS: linux-gnu, ARCH: i386, CPU: i686) Thu Feb 15 22:39:39 2007 -> Log file size limited to 1048576 bytes. Thu Feb 15 22:39:39 2007 -> Reading databases from /var/lib/clamav Thu Feb 15 22:39:43 2007 -> Loaded 91794 signatures. Thu Feb 15 22:39:43 2007 -> WARNING: Socket file /tmp/clamd exists. Unclean shutdown? Removing... Thu Feb 15 22:39:43 2007 -> Unix socket file /tmp/clamd Thu Feb 15 22:39:43 2007 -> Setting connection queue length to 15 Thu Feb 15 22:39:43 2007 -> Archive: Archived file size limit set to 10485760 bytes. Thu Feb 15 22:39:43 2007 -> Archive: Recursion level limit set to 8. Thu Feb 15 22:39:43 2007 -> Archive: Files limit set to 1000. Thu Feb 15 22:39:43 2007 -> Archive: Compression ratio limit set to 250. Thu Feb 15 22:39:43 2007 -> Archive support enabled. Thu Feb 15 22:39:43 2007 -> Algorithmic detection enabled. Thu Feb 15 22:39:43 2007 -> Portable Executable support enabled. Thu Feb 15 22:39:43 2007 -> ELF support enabled. Thu Feb 15 22:39:43 2007 -> Mail files support enabled. Thu Feb 15 22:39:43 2007 -> Mail: Recursion level limit set to 64. Thu Feb 15 22:39:43 2007 -> OLE2 support enabled. Thu Feb 15 22:39:43 2007 -> HTML support enabled. Thu Feb 15 22:39:43 2007 -> Self checking every 1800 seconds. At Thu Feb 15 22:39:38 2007 I restarted clamd, and this took a very long time. Does anyone have any idea what could be wrong here? Thanks in advance! -- Best regards, Jasper _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
