[clamav-users] clamdscan and TCPAddr

[Hajo Locke]

Hello List,

have an odd behaviour of clamav. Version is 0.100.1+dfsg-1ubuntu0.16.04.2
Short:
clamscan is able to find a virus in file, clamdscan not. 1st i thought 
about deprecation of AllowSupplementaryGroups, but was not confirmed.

clamdscan -v tells only about an error, but no detailed info, so I did a 
strace to clamdscan and found this errormessage:

connect(3, {sa_family=AF_INET6, sin6_port=htons(3310), 
inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, 
sin6_scope_id=0}, 28) = -1 EADDRNOTAVAIL (Cannot assign requested address)

In clamd.conf i have:

TCPSocket 3310
By default clamav binds on any configured IP-Adress, i can see this with 
lsof.
It looks like that clamdscan tries to connect to ipv6 Adress first and 
ends up in this errormessage and exits, thats my reading of the line.
It is working again if i add "TCPAddr 127.0.0.1" to my clamd.conf.

Is this an expected behaviour? ipv6 is disabled on this machine, 
clamdscan should not try to use it.

Thanks,
Hajo