Well I changed sendmail.mc to:

INPUT_MAIL_FILTER(`clamav-milter',`S=local:/var/run/clamav-milter/clamav-milter.socket,F=, T=S:4m;R:4m')dnl

But now in clamav-milter.log I see these errors:

Thu Jul 12 13:46:40 2018 -> Probe for slot 1 returned: success
Thu Jul 12 13:46:40 2018 -> Probe for slot 2 returned: success
Thu Jul 12 13:47:08 2018 -> ERROR: Connection closed while reading from socket
Thu Jul 12 13:47:08 2018 -> ERROR: No reply from clamd
Thu Jul 12 13:47:18 2018 -> connect failed: Connection refused
Thu Jul 12 13:47:18 2018 -> ERROR: Failed to initiate streaming/fdpassing

But:

ps -auwx | grep clam
clamupd+ 2252 0.0 0.0 50680 4240 ?        Ss   Jul11   0:07 /usr/bin/freshclam -d -c 4
clamilt   2831 0.0 0.0 250512 1132 ?        Ssl 13:42   0:00 /usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf
clamscan 6704 0.0 4.6 1406420 1141724 ?     Ssl 13:49   0:00 /usr/sbin/clamd -c /etc/clamd.d/scan.conf
root     22999 0.0 0.0 119104 3216 ?        Ss   12:00   0:00 /bin/bash /usr/share/clamav/freshclam-sleep

And:

systemctl status clamav-milter
* clamav-milter.service - Milter module for the Clam Antivirus scanner
   Loaded: loaded (/usr/lib/systemd/system/clamav-milter.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2018-07-12 13:42:02 EDT; 8min ago
Process: 2830 ExecStart=/usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf (code=exited, status=0/SUCCESS)
Main PID: 2831 (clamav-milter)
    Tasks: 3 (limit: 4915)
   Memory: 1.9M
   CGroup: /system.slice/clamav-milter.service
           `-2831 /usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf

Jul 12 13:42:02 systemd[1]: Starting Milter module for the Clam Antivirus scanner...
Jul 12 13:42:02 systemd[1]: Started Milter module for the Clam Antivirus scanner.

As well as:

systemctl status clamd@scan
* clamd@scan.service - Generic clamav scanner daemon
   Loaded: loaded (/usr/lib/systemd/system/clamd@scan.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2018-07-12 13:49:38 EDT; 40s ago
Process: 5816 ExecStart=/usr/sbin/clamd -c /etc/clamd.d/scan.conf (code=exited, status=0/SUCCESS)
Main PID: 6704 (clamd)
    Tasks: 2 (limit: 4915)
   Memory: 1.0G
   CGroup: /system.slice/system-clamd.slice/clamd@scan.service
           `-6704 /usr/sbin/clamd -c /etc/clamd.d/scan.conf

Jul 12 13:48:31 clamd[5816]: LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 14217 undefined identifier "pe"
Jul 12 13:48:31 clamd[5816]: LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 14241 undefined identifier "pe"
Jul 12 13:48:31 clamd[5816]: LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 14253 undefined identifier "pe"
Jul 12 13:48:31 clamd[5816]: LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 14265 undefined identifier "pe"
Jul 12 13:48:31 clamd[5816]: LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 14277 undefined identifier "pe"
Jul 12 13:48:31 clamd[5816]: LibClamAV Error: yyerror(): /var/lib/clamav/packer.yar line 14290 undefined identifier "pe"
Jul 12 13:49:32 systemd-journald[623]: Suppressed 420 messages from clamd@scan.service
Jul 12 13:49:32 clamd[5816]: LibClamAV Error: yyerror(): /var/lib/clamav/maldoc_somerules.yar line 245 undefined identifier "uint32be"
Jul 12 13:49:32 clamd[5816]: LibClamAV Warning: cli_loadyara: failed to parse or load 1 yara rules from file /var/lib/clamav/maldoc_somerule>
Jul 12 13:49:38 [1]: Started Generic clamav scanner daemon.

What else can I check?

On Tue, Jul 10, 2018 at 7:24 PM, Kees Theunissen <C.J.Theunissen@differ.nl> wrote:

On Tue, 10 Jul 2018, Robert Kudyba wrote:

>Hello hive,
>
>Running:
>clamav-0.100.0-2.fc28.x86_64
>
>clamd, freshclam and clamav-milter all up and running:
>ps -auwx | grep clam
>clamupd+ 20336 0.0 0.0 50672 4016 ? Ss Jun29 1:15
>/usr/bin/freshclam -d -c 4
>clamav 23713 0.0 0.0 176780 1160 ? Ssl 13:23 0:00
>/usr/sbin/clamav-milter -c /etc/mail/clamav-milter.conf
>clamscan 25458 0.0 4.6 1405848 1142996 ? Ssl 13:27 0:00
>/usr/sbin/clamd -c /etc/clamd.d/scan.conf
>root 25593 0.0 0.0 9156 1084 pts/1 S+ 17:02 0:00 grep
>--color=auto clam
>
>However it fails with sendmail with these errors:
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273:
>milter_sys_read(clamav): cmd read returned 11, expecting 1431194445
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter (clamav): to
>error state
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter (clamav):
>init failed to open
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter (clamav): to
>error state
>Jul 10 17:03:45 storm sendmail[26273]: w6AL3j2R026273: Milter:
>initialization failed, temp failing commands
>
>Here's the relevant line in sendmail.mc:
>INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamd.scan/clamd.sock,
>F=T,T=S:4m;R:4m;E:10m')dnl

Your INPUT_MAIL_FILTER should be clamav-milter listening on socket
/var/run/clamav-milter/clamav-milter.socket (as defined below)
and not the clamd daemom which is listening on socket
/var/run/clamd.scan/clamd.sock

>
>Lines in /etc/mail/clamav-milter.conf
>MilterSocket /var/run/clamav-milter/clamav-milter.socket
>MilterSocket inet:7357
>ClamdSocket tcp:localhost:3310
>ClamdSocket unix:/var/run/clamd.scan/clamd.sock
>
>Lines in /etc/clamd.d/scan.conf
>
>TCPSocket 3310
>TCPAddr 127.0.0.1
>
>Everything I've read says that as long as ClamdSocket in the
>clamav-milter.conf and INPUT_MAIL_FILTER in sendmail.mc match it should
>work.
>
>Is my syntax wrong some where?
>

Regards,

Kees Theunissen.

--
Kees Theunissen, System and network manager, Tel: +31 (0)40-3334724
Dutch Institute For Fundamental Energy Research (DIFFER)
email address: C.J.Theunissen@differ.nl
postal address: PO Box 6336, 5600 HH, Eindhoven, the Netherlands
visitors address: De Zaale 20, 5612 AJ, Eindhoven, the Netherlands

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.clamav.net_cgi-2Dbin_mailman_listinfo_clamav-2Dusers&d=DwICAg&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=jiz7EwfK1t__Is3kNPegVMEo3iMKj7lQSiyfXtHn-0Y&s=cKhQ-Xlw7TVUG-GqVe60_drnT9hMi0VO190LkoqnZeI&e=

Help us build a comprehensive ClamAV guide:
https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_vrtadmin_clamav-2Dfaq&d=DwICAg&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=jiz7EwfK1t__Is3kNPegVMEo3iMKj7lQSiyfXtHn-0Y&s=TQ-IubMYKtH8xbKsyLjRUUzACmXdh7izwdfDkwZI3og&e=

https://urldefense.proofpoint.com/v2/url?u=http-3A__www.clamav.net_contact.html-23ml&d=DwICAg&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=jiz7EwfK1t__Is3kNPegVMEo3iMKj7lQSiyfXtHn-0Y&s=ZyYBPSklcpmGQSwBOvBidde4Yg7Ti-ZmleLteA3hp2Y&e=