Did you check the permissions on the clamd socket to see if it allows access by 
rspamd? (I sometimes get burned by mismatched permissions.)



On Sun, 30 Jun 2024 17:45:17 +0200
christian via clamav-users <clamav-users@lists.clamav.net> wrote:

> Am 30.06.2024 um 17:28 schrieb Matus UHLAR - fantomas via clamav-users:
> 
> > 
> > why should clamav connect to rspamd, shouldn't it be the other way?  
> 
> RSPAMD accesses the socket, correct.
> But the socket doesn't work.
> 
> > I don't use sockstat, but did you run "lsof /var/run/clamav/clamd.ctl"?  
> 
>   lsof /run/clamav/clamd.ctl
> COMMAND    PID   USER   FD   TYPE             DEVICE SIZE/OFF     NODE NAME
> systemd      1   root   45u  unix 0x00000000ef95edba      0t0 18287808 
> /run/clamav/clamd.ctl type=STREAM (LISTEN)
> clamd   916671 clamav    3u  unix 0x00000000ef95edba      0t0 18287808 
> /run/clamav/clamd.ctl type=STREAM (LISTEN)
> 
> But nothing happens. I set Rspamd to this socket but clamav doesn't 
> accept any emails. Nothing happens in /var/log/clamav/clamav.log. It 
> just checks itself every 3600 seconds.
> 
> 
> >> I uninstalled everything from clamav again and deleted the directories 
> >> by hand. Then I downloaded everything again from the Debian 12 
> >> repository. Everything is created and a new socket is created, but the 
> >> same thing happens again: the socket doesn't work.  
> > 
> > deleted directories? This should not be needed in debian.
> > Did you just uninstall clamav packages or also purge them?
> >   
> >> LocalSocket /var/run/clamav/clamd.ctl
> >> The logs show that the signatures are loaded and the function is 
> >> checked every 3600 seconds. But the socket is not working.  
> > 
> > "not working" how?

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

Reply via email to