Hey folks,
I recently installed a production server using -CURRENT as of
January 4th's snapshot. This is on an i386 machine. Dmesg at
the bottom.
This system uses Postfix and ClamAV, and I use clamav-milter to
scan all messages for viruses. Unfortunately, this installation
was necessitated by a system failure, so I didn't have a lot of
time to stress test the environment.
Now I am having issues with clamav-milter either going off into
la-la land or dying completely after a short period of time, usually
between 5-20 minutes. It doesn't always seem to die (ie, the
process dying), sometimes it just appears to not respond any longer.
Either way, Postfix starts returning a 451 (service not available)
when the milter fails.
I am running clamav-milter as follows:
>From /etc/rc.conf.local (wrapped for readability):
clamav_milter="--sendmail-cf= --headers --force-scan
--max-children=3 --timeout=60
--quarantine-dir=/var/clamav/quarantine
/var/spool/postfix/clamav/clamav-milter"
>From /etc/rc.local (wrapped for readability):
if [ X"${clamav_milter}" != X"NO" -a
-x /usr/local/sbin/clamav-milter ]; then
/usr/local/sbin/clamav-milter ${clamav_milter} && \
echo -n ' clamav-milter'
sleep 10
chmod 777 /var/spool/postfix/clamav/clamav-milter
fi
I see nothing in /var/log/clamd.log when the milter fails. I have,
however, caught a failure via ktrace:
3798 clamav-milter RET mmap -1989517312/0x896a6000
3798 clamav-milter CALL mkdir(0x85553730,0x1c0)
3798 clamav-milter NAMI
"/tmp//clamav-b6abac6c8c009b68944a2ae8e8a6bccd/rfc2397"
3798 clamav-milter RET mkdir 0
3798 clamav-milter CALL open(0x85553730,0x601,0x180)
3798 clamav-milter NAMI
"/tmp//clamav-b6abac6c8c009b68944a2ae8e8a6bccd/nocomment.html"
3798 clamav-milter RET open 10/0xa
3798 clamav-milter CALL fcntl(0xa,0x3,0)
3798 clamav-milter RET fcntl 1
3798 clamav-milter CALL fcntl(0xa,0x4,0x5)
3798 clamav-milter RET fcntl 0
3798 clamav-milter CALL open(0x85553730,0x601,0x180)
3798 clamav-milter NAMI
"/tmp//clamav-b6abac6c8c009b68944a2ae8e8a6bccd/notags.html"
3798 clamav-milter RET open 11/0xb
3798 clamav-milter CALL fcntl(0xb,0x3,0)
3798 clamav-milter RET fcntl 1
3798 clamav-milter CALL fcntl(0xb,0x4,0x5)
3798 clamav-milter RET fcntl 0
3798 clamav-milter PSIG SIGSEGV caught handler=0x1cb7104 mask=0x0
addr=0x85541c6c trapno=2
Crap, OK, it looks like it died checking the HTML content of an
email. I disabled that in clamd.conf (ScanHTML no) and have restarted
it, and it's behaving exactly the same (still failing).
Have any of you seen any issues with the recent snapshots? I
upgraded to last night's snapshot, but the packages are in flux with
another build so I haven't been able to update all my packages yet.
Any help would be appreciated!
Benny
dmesg (beware of line wraps):
OpenBSD 4.4-current (GENERIC) #1648: Fri Jan 9 10:26:32 MST 2009
[email protected]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Genuine Intel(R) CPU 2140 @ 1.60GHz ("GenuineIntel" 686-class) 1.60 GHz
cpu0:FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CF
LUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,CX16,xTPR
real mem = 1072193536 (1022MB)
avail mem = 1028505600 (980MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 01/23/07, BIOS32 rev. 0 @ 0xfa020,
SMBIOS
rev. 2.4 @ 0xf0000 (39 entries)
bios0: vendor Phoenix Technologies, LTD version "6.00 PG" date 01/23/2007
bios0: Biostar 945GZ Micro 775 SE
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP _HPT MCFG APIC SSDT SSDT
acpi0: wakeup devices SLPB(S5) PEX0(S5) PEX1(S5) PEX2(S5) PEX3(S5)
PEX4(S5) PEX5(S5) HUB0(S5) UAR1(S5) USB0(S1) USB1(S1) USB2(S1) USB3(S1)
USBE(S1) AC97(S5) AZA L(S5) PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 199MHz
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 4 pa 0xfec00000, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 4
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEX0)
acpiprt2 at acpi0: bus -1 (PEX1)
acpiprt3 at acpi0: bus -1 (PEX2)
acpiprt4 at acpi0: bus -1 (PEX3)
acpiprt5 at acpi0: bus -1 (PEX4)
acpiprt6 at acpi0: bus -1 (PEX5)
acpiprt7 at acpi0: bus 1 (HUB0)
acpicpu0 at acpi0: FVS, 1600, 1200 MHz
acpitz0 at acpi0: critical temperature 80 degC
acpibtn0 at acpi0: PWRB
acpibtn1 at acpi0: SLPB
bios0: ROM list: 0xc0000/0xaa00! 0xcc000/0x8000! 0xd4000/0x1000
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945G Host" rev 0x02
vga1 at pci0 dev 2 function 0 "Intel 82945G Video" rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xc0000000, size 0x10000000
inteldrm0 at vga1: apic 4 int 16 (irq 10)
drm0 at inteldrm0
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: apic 4 int
23 (irq 12)
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: apic 4 int
19 (irq 5)
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x01: apic 4 int
18 (irq 15)
uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x01: apic 4 int
16 (irq 10)
ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x01: apic 4 int
23 (irq 12)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb0 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xe1
pci1 at ppb0 bus 1
twe0 at pci1 dev 3 function 0 "3ware 7000/8000 series RAID" rev 0x01: apic
4 int 18 (irq 15)
twe0: Escalade V1.3
scsibus0 at twe0: 16 targets, initiator 16
sd0 at scsibus0 targ 0 lun 0: <3WARE, Host drive #00, > SCSI2 0/direct fixed
sd0: 239371MB, 512 bytes/sec, 490232704 sec total
rl0 at pci1 dev 5 function 0 "Realtek 8139" rev 0x10: apic 4 int 20 (irq
11), address 00:e0:4d:28:d2:f1
rlphy0 at rl0 phy 0: RTL internal PHY
ichpcib0 at pci0 dev 31 function 0 "Intel 82801GB LPC" rev 0x01: PM disabled
pciide0 at pci0 dev 31 function 1 "Intel 82801GB IDE" rev 0x01: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
pciide0: channel 0 disabled (no drives)
pciide0: channel 1 ignored (disabled)
ichiic0 at pci0 dev 31 function 3 "Intel 82801GB SMBus" rev 0x01: apic 4
int 19 (irq 5)
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity PC2-4200CL5
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb4 at uhci3: USB revision 1.0
uhub4 at usb4 "Intel UHCI root hub" rev 1.00/1.00 addr 1
isa0 at ichpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
it0 at isa0 port 0x2e/2: IT8712F rev 8, EC port 0x290
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
mtrr: Pentium Pro MTRR support
softraid0 at root
root on sd0a swap on sd0b dump on sd0b