Hi everyone, I'm running clamav with mailscanner and I'm seeing lots of problems with clamd crashing.
I did use some of the additional sigs from sanesecurity but I've had to remove these as when using them, mail just doesn't get processed. The servers are quite heavily used. I've removed them now, but still in my logs I see this a lot - May 1 14:30:58 btn-mailfilter-v2 MailScanner[3271]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:30:58 btn-mailfilter-v2 MailScanner[3277]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:30:58 btn-mailfilter-v2 MailScanner[3278]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:30:58 btn-mailfilter-v2 MailScanner[3280]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:30:58 btn-mailfilter-v2 MailScanner[3284]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:30:59 mailfilter9 MailScanner[87503]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:30:59 btn-mailfilter-v2 MailScanner[3301]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:01 btn-mailfilter-v2 MailScanner[3316]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:05 btn-mailfilter-v2 MailScanner[3345]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:05 btn-mailfilter-v2 MailScanner[3353]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:06 mailfilter9 MailScanner[87553]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:07 btn-mailfilter-v2 MailScanner[3369]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:07 btn-mailfilter-v2 MailScanner[3374]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:07 btn-mailfilter-v2 MailScanner[3377]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:08 btn-mailfilter-v2 MailScanner[3383]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:11 btn-mailfilter-v2 MailScanner[3411]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:11 btn-mailfilter-v2 MailScanner[3415]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:11 btn-mailfilter-v2 MailScanner[3418]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:12 btn-mailfilter-v2 MailScanner[3430]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:12 btn-mailfilter-v2 MailScanner[3432]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:12 btn-mailfilter-v2 MailScanner[3433]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:14 btn-mailfilter-v2 MailScanner[3444]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:14 btn-mailfilter-v2 MailScanner[3447]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:14 btn-mailfilter-v2 MailScanner[3452]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:18 btn-mailfilter-v2 MailScanner[3495]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:18 btn-mailfilter-v2 MailScanner[3492]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:18 btn-mailfilter-v2 MailScanner[3493]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:21 btn-mailfilter-v2 MailScanner[3523]: Cannot find Socket (/var/run/clamav/clamd) Exiting! May 1 14:31:22 btn-mailfilter-v2 MailScanner[3528]: Cannot find Socket (/var/run/clamav/clamd) Exiting! The socket is set to /var/run/clamav/clamd in my mailscanner.conf file so this is not the problem. Most of the time clamd runs happily but I see this a lot during the day. I can provide clamscan -n or clamscan -debug, but I'm not sure what is best. I've looked at a lot of different threads with some of the messages I have seen but I can't trace where the problem might be. I do see this message a lot when I verbose log - Scanthread: connection shut down (FD 9) I just built a new freebsd10 server and that doesn't seem to have the problem, yet... I put that in the loop this morning and it seems to be working fine. I've not loaded any third party databases yet, but ideally I would like to use them as they obviously catch more stuff. Thanks, Rich _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml