Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: cc_skavenger on August 15, 2004, 05:35:45 AM

Title: Clamav - amavis problem
Post by: cc_skavenger on August 15, 2004, 05:35:45 AM

This error cropped up today, Clam stopped working and started putting all e-mail into the problems directory.  I tried to restart clam and received this error.

Starting clamd: LibClamAV Error: cl_hex2str(): Malformed hexstring: 633a5c312e626174000000003a2a3a456e61626c65643a636d7373637300000053797374656d5c43757272656e74 (length: 97)
LibClamAV Error: readdb(): Malformed pattern line 1617 (file /usr/share/clamav/viruses.db2).
ERROR: Malformed database.

I renamed the viruses.db2 file and reran the cron job to update the virus pattern, but get the same error.  
I have since disabled amavis and clam, so mail is passing again.  I have also already rebooted the system, but am lost on what to do to fix this.
Using SME 5.6, with all updates and a few extras.  Trying not to update yet, have not had any success migrating the users over to a new SME6 box.

TIA

Title: Clamav - amavis problem
Post by: MasterSleepy on August 16, 2004, 06:41:12 AM

Hello,

I have same problem.
I also running a 5.6 sme with the install proposed by www.pagefault.org, the problem is that version of clamav are pretty old, 0.60.1.
I upgrade the old version with the last one found Here (http://www.pagefault.org/download/). I have to remove the old one and install first the library and then clamav rpm.
I have one problem this night with freshclam but I only have to change in /etc/cron.daily/freshclam.cron for

Code: [Select]

#!/bin/sh

/usr/bin/freshclam --quiet
Regards.

Title: Clam problem
Post by: cc_skavenger on August 16, 2004, 04:24:50 PM

Thanks MasterSleepy!
Once again you have been a great help.  I was trying to get it to work without the library file.

Title: Clamav - amavis problem
Post by: MasterSleepy on August 16, 2004, 08:26:24 PM

I forgot some thing.
enable the following line in /etc/freshclam.conf if it's not.

Code: [Select]

NotifyClamd /etc/clamav.conf

Regs

Title: Clam File
Post by: cc_skavenger on August 17, 2004, 05:06:50 PM

MasterSleepy,
I don't have that file on my system.  What's it for?

Title: Clamav - amavis problem
Post by: MasterSleepy on August 17, 2004, 08:03:58 PM

Hy,
Witch rpm did you install??
I have installed
clamav-es-libs-0.72-es01.i386.rpm
and
clamav-es-0.72-es01.i386.rpm

Title: Clam
Post by: cc_skavenger on August 17, 2004, 09:29:06 PM

Used clamav-libs-0.65-6.i386.rpm and clamav-0.65-6.i386.rpm.  I see what you installed and will update to that.

Thanks
Marco

Title: Clamav - amavis problem
Post by: Jon_Reynolds on August 18, 2004, 03:07:51 AM

You wouldn't happen to be running Dans Gaurdian would you? I think I had this exact same problem and it was either DG or the firewall blocking it. I just remember the error didn't match the fix. I was using IPCop as my firewall and had DG setup on it and when I set DG to just 'stealth log' rather than block it worked.

Hope that helps,

Jon

Title: Clamav problem
Post by: cc_skavenger on August 18, 2004, 10:31:27 PM

Jon,

No not running Dansguardian.  I think they changed something in the virus defs and the very old version of clam that I was running didn't know what to do.  It happened right after a virus def update.  I was using a very old version of clam.  I just removed the old rpms and then installed the new rpms from http://www.pagefault.org and my server was happy once again.

Thanks anyway.

Marco