Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: robert on June 27, 2003, 06:57:10 PM

Title: Quarantined messages
Post by: robert on June 27, 2003, 06:57:10 PM

This is so weird from around 11 am today my installation of Clamav 0.6 with amavis has started quarantining all the messages sent to the mail server. It even quarantined messages from this forum.

Anybody got ideas on what to do the antivirus wasn't even working but this behavior just won my vote for weird event of the year.

Heeelp

Title: Re: Quarantined messages
Post by: jeroen on June 28, 2003, 04:10:03 AM

Did you check the logfiles for possible clues?

Title: Re: Quarantined messages
Post by: David S. Helmuth on June 28, 2003, 07:42:33 AM

I had a similar situation a few days ago.  Clamd had stopped.  Try:

service clamd restart

It should fail to stop clamd and then re-start it.

I have not taken the time to investigate why it stopped.

I hope this helps!

-Dave

Title: Re: Quarantined messages
Post by: Brian Read on June 28, 2003, 09:32:28 AM

you sometimes have to delete the socket file to get Clamd to re-start.

/var/lib/clamav/clamd.sock

Cheers

Brian

Title: Re: Quarantined messages
Post by: Ray Mitchell on June 28, 2003, 09:56:34 AM

We had a similar issue on a production server and after some investigation found that the clamd service not starting; for some reason the symbolic link to
the clamd service was missing:
ln -s /etc/rc.d/init.d/clamd /etc/rc.d/rc7.d/S80clamd

Adding this got clamd starting on bootup.

Thanks to GR for sorting this out.

Regards
Ray

Title: Re: Quarantined messages
Post by: robert on June 30, 2003, 11:25:02 AM

Thanks guys that helped. Now all I need to do is get the antivirus working and am all set.