[prev in list] [next in list] [prev in thread] [next in thread] 

List:       amavis-user
Subject:    Re: [AMaViS-user] ClamAV-clamd: Can't connect to UNIX socket
From:       Gary V <lists () johnmecham ! com>
Date:       2006-01-27 22:21:50
Message-ID: 624920087.20060127152150 () johnmecham ! com
[Download RAW message or body]

Al wrote:

> Am Freitag, 27. Januar 2006 21:19 schrieb Gary V:

>> First off, have you installed clamav-daemon? If not, do so.
>> Either way, you need to add the clamav user to the amavis group and
>> then restart both programs:
>>
>> gpasswd -a clamav amavis

> Thanks Gary,

> you are great. Since I am testing amavisd-new (old and new version) I forgot 
> to modify the group. But there is still a problem.

> Jan 27 22:33:28 client2 amavis[4235]: (04235-01) ask_av (ClamAV-clamd) FAILED 
> - unexpected result: /var/lib/amavis/tmp/amavis-20060127T223327-04235/parts: 
> Access denied. ERROR\n

Make sure /etc/clamav/clamd.conf has this entry:
AllowSupplementaryGroups

Then Try:
chown -R amavis:amavis /var/lib/amavis
chmod -R 750 /var/lib/amavis
/etc/init.d/amavis stop
/etc/init.d/clamav-daemon stop
/etc/init.d/clamav-daemon start
/etc/init.d/amavis start

> For more details, please see http://members.inode.at/pinguin/mail.log.txt 
> (mail with attachment was forwarded to mod)

> I don't understand primary and secondary av scanner.

> Found primary av scanner H+BEDV AntiVir or CentralCommand Vexira Antivirus 
> at /usr/bin/antivir
> Found primary av scanner BitDefender at /usr/bin/bdc
> Using internal av scanner code for (primary) check-jpeg
> Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
> Found secondary av scanner FRISK F-Prot Antivirus at /usr/bin/f-prot

Secondary scanners are not used if at least one primary scanner is
functional. Move the f-prot section:

  ### http://www.f-prot.com/   - backs up F-Prot Daemon
  ['FRISK F-Prot Antivirus', ['f-prot','f-prot.sh'],
    '-dumb -archive -packed {}', [0,8], [3,6],
    qr/Infection: (.+)/ ],

from the backup scanner section up into the primary scanner section.
Don't move clamscan because you are using clamd and that would be a
waste.

> I want that the mail is checked with all 4 scanners.
> Al

Gary V



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[prev in list] [next in list] [prev in thread] [next in thread]