We recently use ClamAV on our mail servers (Linux Slamd64 12.0.0). Even though clamd seems to be catching viruses, we are getting a lot of "Input/Output" errors on all our mail servers:
Mar 20 11:09:33 dillinger sm-mta[23292]: n2KF9Ahj023292: from=<us...@concordia.ca>, size=1093213, class=0, nrcpts=1, msgid=<messageID>, proto=ESMTP, daemon=MTA, relay=relayserver Mar 20 11:09:33 dillinger mimedefang.pl[19707]: n2KF9Ahj023292: Clamd returned error: Input/Output error Mar 20 11:09:33 dillinger mimedefang.pl[19707]: n2KF9Ahj023292: clamd error: code=999, category=swerr, action=tempfail Mar 20 11:09:33 dillinger mimedefang.pl[19707]: filter: n2KF9Ahj023292: tempfail=1 Mar 20 11:09:33 dillinger mimedefang[18284]: n2KF9Ahj023292: Tempfailing because filter instructed us to Mar 20 11:09:33 dillinger sm-mta[23292]: n2KF9Ahj023292: Milter: data, reject=451 4.3.0 error: problem running ClamAV virus scanner Mar 20 11:09:33 dillinger sm-mta[23292]: n2KF9Ahj023292: to=<us...@concordia.ca>, delay=00:00:02, pri=1123213, stat=error: problem running ClamAV virus scanner (I have redacted the value of "from", "to", "msgid" and "relay") We are not sure why the category=swerr. Would "Input/Output" occur because of our "Max" sizes are not big enough? (df shows we are nowhere more than 60% usage.) From the log, it looks like all those mail messages are not being relayed at all :-( . Any help would be very much appreciated. Tan ============================== Linux Slamd64 12.0.0 # clamd --version ClamAV 0.94.2/9144/Fri Mar 20 06:51:14 2009 Our clamd.conf file: PidFile /local/var/spam/clamd.pid DatabaseDirectory /local/pkg/clamav/root-clamav-0.94.2/share/clamav LocalSocket /local/var/spam/clamd.sock FixStaleSocket yes MaxConnectionQueueLength 30 StreamMaxLength 50M MaxThreads 20 ReadTimeout 300 MaxDirectoryRecursion 15 SelfCheck 1800 User amavis DetectPUA yes AlgorithmicDetection yes ScanPE yes ScanELF yes DetectBrokenExecutables yes ScanOLE2 yes ScanPDF yes ScanMail yes PhishingSignatures yes PhishingScanURLs yes ScanHTML yes ScanArchive yes MaxScanSize 100M MaxFileSize 50M MaxRecursion 16 MaxFiles 10000 freshclam is fine; databases have been updated successfully. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
