CLAMAV errors

After doing a new install of Maia 1.02 I noticed the
following errors in the /var/log/mail log.
I suspect it's a permissions issue of some kind, but I'm not
sure where to start looking. 
Any ideas?

Thanks, 

-jt


Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) Using
ClamAV-clamd: (built-in interface)
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) ask_av
(ClamAV-clamd): query template1: CONTSCAN {}n
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) Using
(ClamAV-clamd) on dir: CONTSCAN
/var/spool/amavis/tmp/amavis-20070427T123419-31434/partsn
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9)
ClamAV-clamd: Connecting to socket  127.0.0.1:3306
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9)
ClamAV-clamd: Sending CONTSCAN
/var/spool/amavis/tmp/amavis-20070427T123419-31434/partsn
to INET socket 127.0.0.1:3306
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) ask_av
(ClamAV-clamd) result:
4000000n5.0.2600377~01008M[`RYG:00,242b0
20000000000000000000000000000+gH
pz8C*GhUP00200000013772304Bad handshake
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) ask_av
(ClamAV-clamd) FAILED - unexpected result:
4000000n5.0.2600377~01008M[`RYG:00,242b0
20000000000000000000000000000+gH
pz8C*GhUP00200000013772304Bad handshake
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) WARN: all
primary virus scanners failed, considering backups
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) Using
(ClamAV-clamscan): /usr/bin/clamscan --stdout
--disable-summary -r --tempdir=/var/spool/amavis/tmp
/var/spool/amavis/tmp/amavis-20070427T123419-31434/parts
Apr 27 12:38:12 maia amavis[31434]: (31434-01-9)
run_command: [31977] /usr/bin/clamscan --stdout
--disable-summary -r --tempdir=/var/spool/amavis/tmp
/var/spool/amavis/tmp/amavis-20070427T123419-31434/parts
</dev/null 2>&1




James Taylor
The East Cobb Group, Inc.
678-697-9420
james.tayloreastcobbgroup.com
http://www.eastcobbgroup
.com









_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Try using the LocalSocket instead of a TCP socket and see if
that helps. 
You need to uncomment and set the LocalSocket entry in
clamd.conf and
comment out the TCP socket info.  Once that is done, make
sure the value
in amavisd.conf matches.  Here's mine as an example:

['ClamAV-clamd',
  &ask_daemon, ["CONTSCAN {}n",
"/var/run/clamav/clamd.sock"],
  qr/bOK$/, qr/bFOUND$/,
  qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: the easiest is to run clamd under the same user as
amavisd;
match the
# # socket name (LocalSocket) in clamav.conf to the socket
name in this entry
# # When running chrooted one may prefer: ["CONTSCAN
{}n","$MYHOME/clamd"],

Ryan

> After doing a new install of Maia 1.02 I noticed the
following errors in
> the /var/log/mail log.
> I suspect it's a permissions issue of some kind, but
I'm not sure where to
> start looking.
> Any ideas?
>
> Thanks,
>
> -jt
>
>
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) Using
ClamAV-clamd:
> (built-in interface)
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) ask_av
(ClamAV-clamd):
> query template1: CONTSCAN {}n
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) Using
(ClamAV-clamd) on
> dir: CONTSCAN
/var/spool/amavis/tmp/amavis-20070427T123419-31434/partsn
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9)
ClamAV-clamd: Connecting
> to socket  127.0.0.1:3306
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9)
ClamAV-clamd: Sending
> CONTSCAN
/var/spool/amavis/tmp/amavis-20070427T123419-31434/partsn
to
> INET socket 127.0.0.1:3306
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) ask_av
(ClamAV-clamd)
> result:
>
4000000n5.0.2600377~01008M[`RYG:00,242b0
20000000000000000000000000000+gH
pz8C*GhUP00200000013772304Bad
> handshake
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) ask_av
(ClamAV-clamd)
> FAILED - unexpected result:
>
4000000n5.0.2600377~01008M[`RYG:00,242b0
20000000000000000000000000000+gH
pz8C*GhUP00200000013772304Bad
> handshake
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) WARN:
all primary virus
> scanners failed, considering backups
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9) Using
(ClamAV-clamscan):
> /usr/bin/clamscan --stdout --disable-summary -r
> --tempdir=/var/spool/amavis/tmp
>
/var/spool/amavis/tmp/amavis-20070427T123419-31434/parts
> Apr 27 12:38:12 maia amavis[31434]: (31434-01-9)
run_command: [31977]
> /usr/bin/clamscan --stdout --disable-summary -r
> --tempdir=/var/spool/amavis/tmp
>
/var/spool/amavis/tmp/amavis-20070427T123419-31434/parts
</dev/null 2>&1
>
>
>
>
> James Taylor
> The East Cobb Group, Inc.
> 678-697-9420
> james.tayloreastcobbgroup.com
> http://www.eastcobbgroup
.com
>
>
>
>
>
>
>
>
>
> _______________________________________________
> Maia-users mailing list
> Maia-usersrenaissoft.com
> http://www.renaissoft.com/mailman/listinfo/maia-users
>


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users