[clamav-users] No such file or directory + after milter-reject

[maurizio at caloro.ch]

Hello

I found the issue ... wau this was tricky 😊

apt-get purge --remove clamav clamav-base clamav-daemon clamav-freshclam clamav-milter libclamav9:amd64 apt-get install clamav-daemon clamav-freshclam clamav-milter


/etc/systemd/system/clamav-daemon.socket.d/extend.conf
	[Socket]
	ListenStream=127.0.0.1:3310

And now the port 3310 are ready
	Fri Mar  6 00:45:35 2020 -> TCP: Received AF_INET SOCK_STREAM socket from systemd.


But please what would mean this ???  " unreasonable packet length", and "read error"

Mar  6 00:52:32 mail postfix/smtps/smtpd[20006]: warning: milter inet:[127.0.0.1]:3310: unreasonable packet length: 1431194446 > 1073741823 Mar  6 00:52:32 mail postfix/smtps/smtpd[20006]: warning: milter inet:[127.0.0.1]:3310: read error in initial handshake


Thanks for our possible update.

-----Ursprüngliche Nachricht-----
Von: G.W. Haywood <clamav at jubileegroup.co.uk> 
Gesendet: Freitag, 6. März 2020 00:47
An: maurizio at caloro.ch; ClamAV users ML <clamav-users at lists.clamav.net>
Betreff: Re: [clamav-users] No such file or directory + after milter-reject

Hi there,

On Thu, 5 Mar 2020, mauri via clamav-users wrote:

> I try now this way..... but also no chance... for any help, thanks ...
> Main.cf - Postfix

I can't help you with Postfix configuration I'm afraid, but you'll probably need to check that you have it right.

> cat clamav-milter.conf
>
> MilterSocket "inet:7357 at localhost"
> ClamdSocket "tcp:127.0.0.1:3310"

Remove the quotes.

> FixStaleSocket true

Useless directive - applies to Unix sockets.

> cat clamd.conf
> ...
> LocalSocket /var/run/clamav/clamd.ctl
> FixStaleSocket true
> LocalSocketGroup clamav
> LocalSocketMode 666
> ...

I've never actually checked, but I'd be surprised if you can use _both_ a local (Unix) socket _and_ a TCP socket for clamd, and since you appear to have configured the milter for TCP then I think you should remove all these local socket directives.  But you might be better off using Unix (local) sockets.  I do not like the use of the word 'local' applied to sockets, I think it's confusing, but we have what we have.

> TCPSocket "3310"
> TCPAddr "localhost"

Remove the quotes.

Have you checked that clamav-milter and clamd actually start and continue to run?  Do you know how to do that?

-- 

73,
Ged.