[clamav-users] clamav-milter with sendmail on Fedora 28: init failed to open, to error state, initialization failed, temp failing commands

Robert Kudyba rkudyba at fordham.edu
Mon Jul 30 10:23:47 EDT 2018


Any other suggestions on this? Still getting /var/log/clamav-milter.log:
Mon Jul 30 08:55:09 2018 -> Probe for slot 1 returned: success

So I'm pretty sure it's the setting in /etc/mail/sendmail.mc that needs
updating. Here's what we have:
INPUT_MAIL_FILTER(`clamav-milter',`S=local:/var/run/clamav-m
ilter/clamav-milter.socket,F=T,T=S:4m;R:4m;E:10m')dnl

What's the difference between `clamav-milter' vs `clamav' in that line?


On Mon, Jul 23, 2018 at 11:51 AM, Robert Kudyba <rkudyba at fordham.edu> wrote:

> However I still get these errors in sendmail:
>>> Milter: data, reject=451 4.3.2 Please try again later
>>>
>>
>> the syslog entry should give us more information.
>>
>
>
> Jul 23 11:45:33 storm systemd[1]: clamd at scan.service: Main process
> exited, code=killed, status=6/ABRT
> Jul 23 11:45:33 storm systemd[1]: clamd at scan.service: Failed with result
> 'signal'.
> Jul 23 11:45:33 storm systemd[1]: clamd at scan.service: Service hold-off
> time over, scheduling restart.
> Jul 23 11:45:33 storm systemd[1]: clamd at scan.service: Scheduled restart
> job, restart counter is at  4.
> Jul 23 11:45:33 storm systemd[1]: Stopped Generic clamav scanner daemon.
> Jul 23 11:45:33 storm systemd[1]: Starting Generic clamav scanner daemon...
> Jul 23 11:45:39 storm clamd[22351]: LibClamAV Error: yyerror():
> /var/lib/clamav/packer.yar line 82 undefined identifier "pe"
> [... snip]
> Jul 23 11:46:48 storm systemd-journald[623]: Suppressed 418 messages from
> clamd at scan.service
> Jul 23 11:46:48 storm clamd[22351]: LibClamAV Error: yyerror():
> /var/lib/clamav/maldoc_somerules.yar line 245 undefined identifier
> "uint32be"
> Jul 23 11:46:48 storm clamd[22351]: LibClamAV Warning: cli_loadyara:
> failed to parse or load 1 yara rules from file /var/lib/clamav/maldoc_somerules.yar,
> successfully loaded 15 rules.
> Jul 23 11:46:55 storm systemd[1]: Started Generic clamav scanner daemon.
>
>
> The sendmail.mc ClamAV line looks like this:
>>> INPUT_MAIL_FILTER(`clamav-milter',`S=local:/var/run/clamav-m
>>> ilter/clamav-milter.socket,F=T,T=S:4m;R:4m;E:10m')dnl
>>>
>>
>> Some relevant results from clamconf:
>>>
>>> ClamdSocket = "unix:/var/run/clamd.scan/clamd.sock"
>>> MilterSocket = "/var/run/clamav-milter/clamav-milter.socket"
>>>
>>
>> note that both sendmail and clamav-milter need read/write access to the
>> socket as
>> long as read/execute access to the directory (to access the socket).
>>
>> I believe you mean "as well as"? Here are the permissions:
> drwx--x---  2 clamilt        clamilt          60 Jul 17 15:49 clamav-milter
> drwx--x---  2 clamscan       clamscan         80 Jul 17 15:49 clamd.scan
>
> srw-r--r-- 1 clamilt virusgroup 0 Jul 17 15:49 clamav-milter.socket
>
> -rw-rw-r-- 1 clamscan clamscan 4 Jul 17 15:49 clamd.pid
> srw-rw-rw- 1 clamscan clamscan 0 Jul 17 15:49 clamd.sock
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180730/0a1ec0ce/attachment.html>


More information about the clamav-users mailing list