error clamav

i run clamd as daemon and during the sample test i get this
error when sending a spam

(!)run_av (ClamAV-clamd, built-in i/f): Too many retries to
talk to /var/run/clamav/clamd (Can't connect to UNIX socket
/var/run/clamav/clamd: No such file or directory) at (eval
41) line 293.
Feb  9 19:29:35 pepino amavis[19856]: (19856-02)
(!!)ClamAV-clamd av-scanner FAILED: CODE(0x8130a70) Too many
retries to talk to /var/run/clamav/clamd (Can't connect to
UNIX socket /var/run/clamav/clamd: No such file or
directory)

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

why does the connection fail if its there 

bash-3.1# ls ../clamav-milter/
clamd.pid  clamd.sock

 pepino amavis[20459]: (20459-02) (!)ClamAV-clamd: Can't
connect to UNIX socket /var/run/clamav-milter/clamd: No such
file or

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

boricua,

> in my previous version of 2.2.1 i had
>
> >  ### http://www.clamav.net/   -
backs up clamd or Mail::ClamAV
>   ['ClamAV-clamscan', 'clamscan',
>     "--stdout --disable-summary -r
--tempdir=$TEMPBASE {}", [0], [1],
>     qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],

Both the 2.2.1 as well as 2.4.5 contain two ClamAV entries,
one is for a command line clamscan, and the other for
interfacing
with a daemonized clamd. No change from 2.2.1 in this
regard.

Use whichever you prefer: clamscan is terribly slow and
easy
to install. It is suitable for a home mailer or as a backup
scanner.
Clamd should be used for the more usual setups as a primary
scanner.

> # ### http://www.clamav.net/
>  ['ClamAV-clamd',
>    &ask_daemon, ["CONTSCAN {}n",
"/var/run/clamav-milter/clamd"],  
<<<<<
> i change to that b/c qr/bOK$/, qr/bFOUND$/,
>    qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],

You are editing the wrong AV entry.

> bash-3.1# ps aux|grep spamd
> root     20145  1.2  4.0  22876 20636 pts/2    S   
19:53   0:02
> /usr/bin/perl5.8.8 -T -w /usr/bin/spamd root     20147 
0.0  4.0  22876
> 20640 pts/2    S    19:53   0:00 spamd child root    
20148  0.0  4.0 
> 22876 20640 pts/2    S    19:53   0:00 spamd child root
    20168  0.0  0.1
>   1788   604 pts/2    S+   19:56   0:00 grep spamd
>
> i can't find the pid now but i know its running
> how do i know where the socket is

Why do you bother with spamd? It is not needed in an amavisd
setup,
just shut it down. Perhaps you wanted to look for clamd (not
spamd)?!
In that case, lsof -p <PID> will show open files and
sockets of a running
process - but you can just as well look into its config
file.

  Mark

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

boricua,

> why does the connection fail if its there
>
> bash-3.1# ls ../clamav-milter/
> clamd.pid  clamd.sock
>
> pepino amavis[20459]: (20459-02) (!)ClamAV-clamd: Can't
connect to UNIX
> socket /var/run/clamav-milter/clamd: No such file or

Why do you bother with clamav-milter?
It is not used in an amavisd-new setup.
You should be looking for clamd,
which comes with a ClamAV package.

  Mark

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

> 
> You are editing the wrong AV entry.



which one then?

> 
> Why do you bother with spamd? It is not needed in an
amavisd setup,


my confusion, i am looking for clamd
bash-3.1# lsof -p 20473
COMMAND   PID   USER   FD   TYPE     DEVICE    SIZE    NODE
NAME
clamd   20473 clamav  cwd    DIR        3,4    4096       2
/
clamd   20473 clamav  rtd    DIR        3,4    4096       2
/
clamd   20473 clamav  txt    REG        3,4   55848 1275809
/usr/sbin/clamd
clamd   20473 clamav  mem    REG        3,4  104536  394176
/lib/ld-2.3.6.so
clamd   20473 clamav  mem    REG        3,4   39243  394136
/lib/libnss_compat-2.3.6.so
clamd   20473 clamav  mem    REG        3,4   41139  394140
/lib/libnss_nis-2.3.6.so
clamd   20473 clamav  mem    REG        3,4   45361  394139
/lib/libnss_files-2.3.6.so
clamd   20473 clamav  mem    REG        3,4  281440  720465
/usr/lib/libclamav.so.1.0.19
clamd   20473 clamav  mem    REG        3,4   70640  720928
/usr/lib/libz.so.1.2.3
clamd   20473 clamav  mem    REG        3,4   66456  394207
/lib/libbz2.so.1.0.3
clamd   20473 clamav  mem    REG        3,4  206896  720932
/usr/lib/libgmp.so.3.4.1
clamd   20473 clamav  mem    REG        3,4   92279  394134
/lib/libnsl-2.3.6.so
clamd   20473 clamav  mem    REG        3,4   88256  394141
/lib/libpthread-0.10.so
clamd   20473 clamav  mem    REG        3,4 1421670  394130
/lib/libc-2.3.6.so
clamd   20473 clamav    0u  unix 0xd43b9040          262681
/var/run/clamav-milter/clamd.sock
clamd   20473 clamav    1w   CHR        1,3          200066
/dev/null
clamd   20473 clamav    2w   CHR        1,3          200066
/dev/null
clamd   20473 clamav    3w   REG        3,2   45362   68033
/var/log/clamd
clamd   20473 clamav    4u  unix 0xd116fac0          262659
socket
clamd   20473 clamav    5w   CHR        1,3          200066
/dev/null

> just shut it down. Perhaps you wanted to look for clamd
(not spamd)?!
> In that case, lsof -p <PID> will show open files
and sockets of a running
> process - but you can just as well look into its config
file.


but i still get this message 
pepino amavis[20458]: (20458-05) (!)ClamAV-clamd: Can't
connect to UNIX socket /var/run/clamav-milter/clamd: No such
file or

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

> 
> Why do you bother with clamav-milter?
> It is not used in an amavisd-new setup.
> You should be looking for clamd,
> which comes with a ClamAV package.

just directory name that what the pkg 
called it in my instalation

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

boricua,

> > You are editing the wrong AV entry.
>
> which one then?

If you want clamd (you do), then edit (if necessary) the
entry:

  ['ClamAV-clamd',
    &ask_daemon, ["CONTSCAN {}n",
"/var/run/clamav/clamd"],
    qr/bOK$/, qr/bFOUND$/,
    qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],

If you want clamscan (probably as a backup scanner, in
a av_scanners_backup list), then edit (if necessary)
the:

  ['ClamAV-clamscan', 'clamscan',
    "--stdout --no-summary -r --tempdir=$TEMPBASE
{}",
    [0], qr/:.*sFOUND$/, qr/^.*?: (?!Infected Archive)(.*)
FOUND$/ ],

> # lsof -p 20473 

> clamav    0u  unix 0xd43b9040          262681
>   /var/run/clamav-milter/clamd.sock

Aha, this one.

> but i still get this message
> pepino amavis[20458]: (20458-05) (!)ClamAV-clamd: Can't
connect to UNIX
> socket /var/run/clamav-milter/clamd: No such file or

The  /var/run/clamav/clamd  != 
/var/run/clamav-milter/clamd.sock

Adjust one or the other, does not matter, but both must be
the same.

  Mark

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

> >   /var/run/clamav-milter/clamd.sock
> 
> Aha, this one.
> 
> > but i still get this message
> > pepino amavis[20458]: (20458-05) (!)ClamAV-clamd:
Can't connect to UNIX
> > socket /var/run/clamav-milter/clamd: No such file
or
> 
> The  /var/run/clamav/clamd  != 
/var/run/clamav-milter/clamd.sock
> 
> Adjust one or the other, does not matter, but both must
be the same.


ok i adjusted and it seems to work with the sample spam and
sample virus ,however i did see
this warning on the log 
Feb  9 20:45:17 pepino amavis[20650]: (20650-02) (!!)ask_av
(ClamAV-clamd) FAILED - unexpected result:
/var/amavis/tmp/amavis-20070209T2041$Feb  9 20:45:17 pepino
amavis[20650]: (20650-02) (!!)WARN: all primary virus
scanners failed, considering backups

so which one worked if the log says it failed 

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

On Fri, 9 Feb 2007 20:47:06 -0500
boricua <boricuadespiertapr.com> wrote:

> > >   /var/run/clamav-milter/clamd.sock
> > 
> > Aha, this one.
> > 
> > > but i still get this message
> > > pepino amavis[20458]: (20458-05)
(!)ClamAV-clamd: Can't connect to UNIX
> > > socket /var/run/clamav-milter/clamd: No such
file or


i guess the question is why primary fails and secondary
works

# ### http://www.clamav.net/
 ['ClamAV-clamd',
   &ask_daemon, ["CONTSCAN {}n",
"/var/run/clamav-milter/clamd.sock"],
   qr/bOK$/, qr/bFOUND$/,
   qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],

 ### http://www.clamav.net/   -
backs up clamd or Mail::ClamAV
  ['ClamAV-clamscan', 'clamscan',
    "--stdout --no-summary -r --tempdir=$TEMPBASE
{}",
    [0], qr/:.*sFOUND$/, qr/^.*?: (?!Infected Archive)(.*)
FOUND$/ ],

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

boricua,

> > >   /var/run/clamav-milter/clamd.sock

> ok i adjusted and it seems to work with the sample spam
and sample virus
> ,however i did see this warning on the log
> Feb  9 20:45:17 pepino amavis[20650]: (20650-02)
(!!)ask_av (ClamAV-clamd)
> FAILED - unexpected result:
/var/amavis/tmp/amavis-20070209T2041

Because you are letting amavisd speak to clamav-milter,
instead of to a clamd daemon.

  Mark

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/