On Fri, Dec 28, 2012 at 9:50 AM, McGranahan, Jamen < jamen.mcgrana...@vanderbilt.edu> wrote:
> I'm not sure why we are getting this error, but on all four RedHat servers > (RedHat 5 x86_64) we have Clamd/ClamAV running, we are seeing these errors > in the clamav-milter.log - once every minute: > > Fri Dec 28 08:44:14 2012 -> ERROR: clamfi_eom: FD send failed: Broken pipe > Fri Dec 28 08:44:14 2012 -> ERROR: FD send failed > > But the clamd.log files just shows that the database is OK: > > Fri Dec 28 08:29:45 2012 -> SelfCheck: Database status OK. > Fri Dec 28 08:40:01 2012 -> SelfCheck: Database status OK. > > What can I do to correct this error? Is it a timeout issue, as what was > suggested earlier this year ( > http://www.gossamer-threads.com/lists/clamav/users/55170)? It just > doesn't make sense to me that all four of our servers are doing this. > Please advise. Thanks! > > Jamen McGranahan > Systems Services Librarian > Vanderbilt University LIbrary > Central Library > Room 811 > 419 21st Avenue South > Nashville, TN 37214 > > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > If clamd closed the sockets for inactivity or housekeeping, it did not log anything. All I can tell you for certain right now is that something is causing the EPIPE return code on the milter-side of the connection. You'll need to do some more investigation. Things I would check next: Are you running clamd on these 4 servers using local sockets or networked? What are your MaxThreads and MaxQueue settings? What are your ReadTimeout and CommandReadTimeout settings? [And are either of these set to 60?] You may also want to run a test email with an EICAR attachment to make sure that shows up in your logs. [I'm hoping you're just abbreviating.] What if any filtering are you doing before calling the clamav-milter? Are there any mails that are getting impacted or are these nuisance messages? Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
