Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: users

all primary virus scanners failed...

 

 

ClamAV users RSS feed   Index | Next | Previous | View Threaded


elvar at ooz

Aug 25, 2004, 12:02 AM

Post #1 of 4 (23514 views)
Permalink
all primary virus scanners failed...

Hello,
Can anyone offer any advice on what is causing the following errors...

Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
ask_av (ClamAV-clamd) FAILED - unexpected result:
/usr/local/etc/amavis/tmp/amavis-20040824T214852-01559/parts: Access
denied. ERROR\n
Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
WARN: all primary virus scanners failed, considering backups
Aug 25 01:50:04 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
Blocked INFECTED (Worm.SomeFool.P), [68.48.53.163]
<?@pcp08124019pcs.nrockv01.md.comcast.net> -> <tramp [at] hostnam>,
quarantine: virus-20040825-015000-01559-08, Message-ID:
<20040825064956.34E5EB0A0 [at] firewall>, Hits: -


I don't always get the above errors but on the majority of incoming
emails I do see this. When I start amavis it seems to detect clamd as
primary and clamscan as secondary without any problems. Thanks for your
time,


Kind regards,
Elvar



-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users


njh at bandsman

Aug 25, 2004, 12:41 AM

Post #2 of 4 (23621 views)
Permalink
Re: all primary virus scanners failed... [In reply to]

On Wednesday 25 Aug 2004 08:02, Elvar wrote:
> Hello,
> Can anyone offer any advice on what is causing the following errors...
>
> Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> ask_av (ClamAV-clamd) FAILED - unexpected result:
> /usr/local/etc/amavis/tmp/amavis-20040824T214852-01559/parts: Access
> denied. ERROR\n
> Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> WARN: all primary virus scanners failed, considering backups
> Aug 25 01:50:04 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> Blocked INFECTED (Worm.SomeFool.P), [68.48.53.163]
> <?@pcp08124019pcs.nrockv01.md.comcast.net> -> <tramp [at] hostnam>,
> quarantine: virus-20040825-015000-01559-08, Message-ID:
> <20040825064956.34E5EB0A0 [at] firewall>, Hits: -

This looks like a problem with Amavis. Either drop it and go to a 100% ClamAV
solution for virus checking or ask on their list.

> Kind regards,
> Elvar

-Nigel

--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
njh [at] despammed http://www.bandsman.co.uk


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users


steve at lobefin

Aug 25, 2004, 6:06 AM

Post #3 of 4 (23550 views)
Permalink
Re: all primary virus scanners failed... [In reply to]

On Wed, Aug 25, 2004 at 02:02:44AM -0500, Elvar said:
> Hello,
> Can anyone offer any advice on what is causing the following
> errors...
>
> Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> ask_av (ClamAV-clamd) FAILED - unexpected result:
> /usr/local/etc/amavis/tmp/amavis-20040824T214852-01559/parts: Access
> denied. ERROR\n
> Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> WARN: all primary virus scanners failed, considering backups
> Aug 25 01:50:04 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> Blocked INFECTED (Worm.SomeFool.P), [68.48.53.163]
> <?@pcp08124019pcs.nrockv01.md.comcast.net> -> <tramp [at] hostnam>,
> quarantine: virus-20040825-015000-01559-08, Message-ID:
> <20040825064956.34E5EB0A0 [at] firewall>, Hits: -
>
>
> I don't always get the above errors but on the majority of incoming
> emails I do see this. When I start amavis it seems to detect clamd as
> primary and clamscan as secondary without any problems. Thanks for your
> time,

Permission problems - is clamd running as user clamav? If so, make sure
user clamav is in group amavis (or whatever group owns those
directories, and add AllowSupplementaryGroups to clamav.conf
--
--------------------------------------------------------------------------
| Stephen Gran | Quod licet Iovi non licet bovi. (What |
| steve [at] lobefin | Jove may do, is not permitted to a |
| http://www.lobefin.net/~steve | cow.) |
--------------------------------------------------------------------------


elvar at ooz

Aug 25, 2004, 2:52 PM

Post #4 of 4 (24211 views)
Permalink
Re: all primary virus scanners failed... [In reply to]

Thank you very much for the quick response. Your advice fixed my problem. I
should have thought of that! Thanks a bunch,

Kind regards,
Elvar


On Wednesday 25 August 2004 08:06 am, Stephen Gran wrote:
> On Wed, Aug 25, 2004 at 02:02:44AM -0500, Elvar said:
> > Hello,
> > Can anyone offer any advice on what is causing the following
> > errors...
> >
> > Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> > ask_av (ClamAV-clamd) FAILED - unexpected result:
> > /usr/local/etc/amavis/tmp/amavis-20040824T214852-01559/parts: Access
> > denied. ERROR\n
> > Aug 25 01:50:01 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> > WARN: all primary virus scanners failed, considering backups
> > Aug 25 01:50:04 hostname /usr/local/sbin/amavisd[1559]: (01559-08)
> > Blocked INFECTED (Worm.SomeFool.P), [68.48.53.163]
> > <?@pcp08124019pcs.nrockv01.md.comcast.net> -> <tramp [at] hostnam>,
> > quarantine: virus-20040825-015000-01559-08, Message-ID:
> > <20040825064956.34E5EB0A0 [at] firewall>, Hits: -
> >
> >
> > I don't always get the above errors but on the majority of incoming
> > emails I do see this. When I start amavis it seems to detect clamd as
> > primary and clamscan as secondary without any problems. Thanks for your
> > time,
>
> Permission problems - is clamd running as user clamav? If so, make sure
> user clamav is in group amavis (or whatever group owns those
> directories, and add AllowSupplementaryGroups to clamav.conf


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

ClamAV users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.