Tue, Oct 23, 2007 at 05:31:37PM +0200, Ludek Finstrle napsal(a): > I've noticed that clamav has some problems. I've found two strange > situations (logs): > > 1) > > Oct 23 06:46:40 server sendmail[9505]: l9N4kcJE009505: from=<[EMAIL > PROTECTED]>, size=24270, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, > proto=ESMTP, daemon=MTA, relay=p54ACF66C.dip.t-dialin.net [84.172.246.108] > Oct 23 06:46:40 server clamav-milter[7502]: > /tmp/clamav-06caa41c9bc06f15eb78a6234dc2fb90/msg.U2hvF8: Worm.SomeFool.D FOUND > Oct 23 06:46:40 server sendmail[9505]: l9N4kcJE009505: Milter add: header: > X-Virus-Scanned: ClamAV 0.91.2/4568/Tue Oct 23 06:23:16 2007 on smtp.domain > Oct 23 06:46:40 server sendmail[9505]: l9N4kcJE009505: Milter add: header: > X-Virus-Status: Infected with Worm.SomeFool.D > Oct 23 06:50:40 server sendmail[9505]: l9N4kcJE009505: Milter (clamav): > timeout during data read > Oct 23 06:50:40 server sendmail[9505]: l9N4kcJE009505: Milter (clamav): to > error state > Oct 23 06:50:46 server sendmail[9505]: l9N4kcJE009505: Milter add: header: > X-Spam-Flag: YES > ... > > It seems to me all messages with virus timed out (why?).
Not all viruses cause this problem. After restarting clamav-milter this problem disappear (for how long?). I'll report more (strace -f ...) when clamav-milter goes into wrong state. I think about separating the milter and virus scaning (with using clamav-milter with clamd). Is it more stable configuration? Regards, Luf _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
