[clamav-users] ERROR: NotifyClamd: Can't connect to clamd on 127.0.0.1:3310: Connection refused

[Chris]

On Thu, 2018-02-01 at 07:51 -0800, Dennis Peterson wrote:
> Use the nc tool to connect to that port. If you get a connection then
> type PING. 
> It should return PONG and disconnect. If that doesn't happen you have
> a config 
> misunderstanding.
> 
> dp
> 
Dennis, Reindl, Benny, Kris - It's working now. On start of sudo
clamav-daemon start I see in my syslog

TCP: Received AF_INET SOCK_STREAM socket from systemd

I believe the changes I made to /etc/systemd/system/clamav-
daemon.socket.d/extend.conf made the difference which were shown here
- https://serverfault.com/questions/798587/debian-8-cant-get-clamav-to-
listen-on-tcp-3310 fixed it.

[Socket]
ListenStream=/var/lib/clamav/clamd.socket
ListenStream=127.0.0.1:3310
SocketUser=clamav
SocketGroup=clamav

And these changes to /lib/systemd/system/clamav-daemon.socket

[Unit]
Description=Socket for Clam AntiVirus userspace daemon
Documentation=man:clamd(8) man:clamd.conf(5) http://www.clamav.net/lang
/en/doc/
# Check for database existence
ConditionPathExistsGlob=/var/lib/clamav/main.{c[vl]d,inc}
ConditionPathExistsGlob=/var/lib/clamav/daily.{c[vl]d,inc}

[Socket]
#ListenStream=/run/clamav/clamd.ctl
#ListenStream=/var/lib/clamav/clamd.socket
#ListenStream=127.0.0.1:3310
SocketUser=clamav
SocketGroup=clamav
RemoveOnStop=True

[Install]
WantedBy=sockets.target

And when running the check for the SaneSecurity unofficial sigs after
downloading updates it's back to reloading the database.

= Update(s) detected, reloaded ClamAV databases =

I want to thank all of you for chiming in with what to check and
possible fixes. Not sure why this upgrade went south this time it
should have been as all the others, just upgrade, restart and you're
back to running again.

> On 2/1/18 6:49 AM, Chris wrote:
> > 
> > First of all regarding my previous post - "Cannot connect to unix
> > socket '/var/lib/clamav/clamd.socket': connect: No such file or
> > directory" on Tuesday, I at least have that working. However, now
> > whenever an update is done to a database I'm seeing - ERROR:
> > NotifyClamd: Can't connect to clamd on 127.0.0.1:3310: Connection
> > refused. This is:
> > 
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
16:47:58 up 21 min, 1 user, load average: 0.96, 0.88, 1.48
Description:	Ubuntu 16.04.3 LTS, kernel 4.13.0-32-generic
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180201/7b415ac4/attachment.sig>