Page 1 of 2 12 LastLast
Results 1 to 10 of 18

Thread: Antivirus suddenly stop

  1. #1
    Join Date
    May 2006
    Posts
    118
    Rep Power
    9

    Default Antivirus suddenly stop

    here arethe log

    Jun 13 10:33:44 linux amavis[30515]: Net::Server: 2006/06/13-10:33:43 Server closing!
    Jun 13 10:33:49 linux clamd[30790]: Pid file removed.
    Jun 13 10:33:49 linux clamd[30790]: Exiting (clean)
    Jun 13 10:33:49 linux clamd[30790]: --- Stopped at Tue Jun 13 10:33:49 2006
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: antispam: Stopped
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: antivirus: Stopped
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: ldap: Running
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: logger: Running
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: mailbox: Running
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: mta: Running
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: snmp: Running
    Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: spell: Running
    Jun 13 10:34:37 linux clamd[27655]: Daemon started.
    Jun 13 10:34:37 linux clamd[27655]: clamd daemon 0.88 (OS: linux-gnu, ARCH: i386, CPU: i686)
    Jun 13 10:34:37 linux clamd[27655]: Log file size limited to 20971520 bytes.
    Jun 13 10:34:37 linux clamd[27655]: Reading databases from /opt/zimbra/clamav/db
    Jun 13 10:34:42 linux postfix/postmap[27663]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:34:46 linux postfix/postsuper[27665]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:34:48 linux postfix/postalias[27668]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:34:49 linux postfix[27670]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:34:57 linux clamd[27655]: Protecting against 59663 viruses.
    Jun 13 14:36:07 linux postfix/postqueue[27907]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: antispam: Stopped
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: antivirus: Stopped
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: ldap: Running
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: logger: Running
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: mailbox: Running
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: mta: Stopped
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: snmp: Running
    Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: spell: Running
    Jun 13 10:36:17 linux amavis[28028]: starting. /opt/zimbra/amavisd/sbin/amavisd at subox.zapto.org amavisd-new-2.3.3 (20050822), Unicode aware, LANG=C
    Jun 13 10:36:17 linux amavis[28028]: user=1001, EUID: 1001 (1001); group=, EGID: 1000 1000 51 5 (1000 1000 51 5)
    Jun 13 10:36:17 linux amavis[28028]: Perl version 5.008007
    Jun 13 10:36:19 linux amavis[28030]: Net::Server: Process Backgrounded
    Jun 13 10:36:19 linux amavis[28030]: Net::Server: 2006/06/13-10:36:19 Amavis (type Net::Server::PreForkSimple) starting! pid(28030)
    Jun 13 10:36:19 linux amavis[28030]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
    Jun 13 10:36:19 linux amavis[28030]: Net::Server: Group Not Defined. Defaulting to EGID '1000 1000 51 5'
    Jun 13 10:36:19 linux amavis[28030]: Net::Server: User Not Defined. Defaulting to EUID '1001'
    Jun 13 10:36:19 linux amavis[28030]: Module Amavis::Conf 2.043
    Jun 13 10:36:19 linux amavis[28030]: Module Archive::Tar 1.26
    Jun 13 10:36:19 linux amavis[28030]: Module Archive::Zip 1.16
    Jun 13 10:36:19 linux amavis[28030]: Module BerkeleyDB 0.27
    Jun 13 10:36:19 linux amavis[28030]: Module Compress::Zlib 1.41
    Jun 13 10:36:19 linux amavis[28030]: Module Convert::TNEF 0.17
    Jun 13 10:36:19 linux amavis[28030]: Module Convert::UUlib 1.06
    Jun 13 10:36:19 linux amavis[28030]: Module DBD::mysql 3.0002
    Jun 13 10:36:19 linux amavis[28030]: Module DBI 1.50
    Jun 13 10:36:19 linux amavis[28030]: Module DB_File 1.811
    Jun 13 10:36:19 linux amavis[28030]: Module MIME::Entity 5.418
    Jun 13 10:36:19 linux amavis[28030]: Module MIME::Parser 5.418
    Jun 13 10:36:19 linux amavis[28030]: Module MIME::Tools 5.418
    Jun 13 10:36:19 linux amavis[28030]: Module Mail::Header 1.67
    Jun 13 10:36:19 linux amavis[28030]: Module Mail::Internet 1.67
    Jun 13 10:36:19 linux amavis[28030]: Module Mail::SpamAssassin 3.001000
    Jun 13 10:36:19 linux amavis[28030]: Module Net::Cmd 2.26
    Jun 13 10:36:19 linux amavis[28030]: Module Net:NS 0.55
    Jun 13 10:36:19 linux amavis[28030]: Module Net::LDAP 0.33
    Jun 13 10:36:19 linux amavis[28030]: Module Net::SMTP 2.29
    Jun 13 10:36:19 linux amavis[28030]: Module Net::Server 0.90
    Jun 13 10:36:19 linux amavis[28030]: Module Razor2::Client::Version 2.72
    Jun 13 10:36:19 linux amavis[28030]: Module Time::HiRes 1.86
    Jun 13 10:36:19 linux amavis[28030]: Module Unix::Syslog 0.99
    Jun 13 10:36:19 linux amavis[28030]: Amavis:B code loaded
    Jun 13 10:36:19 linux amavis[28030]: Amavis::Cache code loaded
    Jun 13 10:36:19 linux amavis[28030]: SQL base code NOT loaded
    Jun 13 10:36:19 linux amavis[28030]: SQL::Log code NOT loaded
    Jun 13 10:36:19 linux amavis[28030]: SQL::Quarantine NOT loaded
    Jun 13 10:36:19 linux amavis[28030]: Lookup::SQL code NOT loaded
    Jun 13 10:36:19 linux amavis[28030]: Lookup::LDAP code loaded
    Jun 13 10:36:19 linux amavis[28030]: AM.PDP prot code NOT loaded
    Jun 13 10:36:19 linux amavis[28030]: SMTP-in prot code loaded
    Jun 13 10:36:19 linux amavis[28030]: ANTI-VIRUS code loaded
    Jun 13 10:36:19 linux amavis[28030]: ANTI-SPAM code loaded
    Jun 13 10:36:19 linux amavis[28030]: Unpackers code loaded
    Jun 13 10:36:19 linux amavis[28030]: Found $file at /usr/bin/file
    Jun 13 10:36:19 linux amavis[28030]: Found $dspam at /opt/zimbra/dspam/bin/dspam
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .mail
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .asc
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .uue
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .hqx
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .ync
    Jun 13 10:36:19 linux amavis[28030]: No decoder for .F tried: unfreeze, freeze -d, melt, fcat
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .Z at /usr/bin/gzip -d
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .gz
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .bz2 at /usr/bin/bzip2 -d
    Jun 13 10:36:19 linux amavis[28030]: No decoder for .lzo tried: lzop -d
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .rpm at /usr/bin/rpm2cpio
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .cpio at /usr/bin/pax
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .tar at /usr/bin/pax
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .deb at /usr/bin/ar
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .zip
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .rar at /usr/bin/unrar
    Jun 13 10:36:19 linux amavis[28030]: No decoder for .arj tried: arj, unarj
    Jun 13 10:36:19 linux amavis[28030]: No decoder for .arc tried: nomarch, arc
    Jun 13 10:36:19 linux amavis[28030]: No decoder for .zoo tried: zoo
    Jun 13 10:36:19 linux amavis[28030]: No decoder for .lha tried: lha
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .cab at /usr/bin/cabextract
    Jun 13 10:36:19 linux amavis[28030]: No decoder for .tnef tried: tnef
    Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .tnef
    Jun 13 10:36:19 linux amavis[28030]: Found decoder for .exe at /usr/bin/unrar
    Jun 13 10:36:19 linux amavis[28030]: Using internal av scanner code for (primary) ClamAV-clamd
    Jun 13 10:36:19 linux amavis[28030]: Creating db in /opt/zimbra/amavisd/db/; BerkeleyDB 0.27, libdb 4.2
    Jun 13 10:36:19 linux amavis[28030]: SpamControl: initializing Mail::SpamAssassin
    Jun 13 10:36:24 linux amavis[28030]: SpamControl: done
    Jun 13 10:36:29 linux clamd[28155]: Daemon started.
    Jun 13 10:36:29 linux clamd[28155]: clamd daemon 0.88 (OS: linux-gnu, ARCH: i386, CPU: i686)
    Jun 13 10:36:29 linux clamd[28155]: Log file size limited to 20971520 bytes.
    Jun 13 10:36:29 linux clamd[28155]: Reading databases from /opt/zimbra/clamav/db
    Jun 13 10:36:31 linux clamd[28155]: Protecting against 59663 viruses.
    Jun 13 10:36:31 linux postfix/postfix-script: refreshing the Postfix mail system


    I restart the antivurus with the zmantivirusctl comman and everything seems to be fine
    Last edited by kowell; 06-13-2006 at 09:20 AM.

  2. #2
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Default

    So does this happen randomly? or just one time?

    I think this is your problem:
    Code:
      Jun 13 10:34:42 linux postfix/postmap[27663]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:34:46 linux postfix/postsuper[27665]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:34:48 linux postfix/postalias[27668]: fatal: bad numerical configuration: message_size_limit =
    Jun 13 10:34:49 linux postfix[27670]: fatal: bad numerical configuration: message_size_limit =

  3. #3
    Join Date
    May 2006
    Posts
    118
    Rep Power
    9

    Default

    It just happend 1 day ago and havent happend again

  4. #4
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Default

    Well, if it happens again, let me know and we'll investigate.

    john

  5. #5
    Join Date
    May 2006
    Posts
    118
    Rep Power
    9

    Default

    today the error that stop my antivirus is other

    here is the log


    Jun 14 11:22:51 linux postfix/qmgr[756]: 4CB96564E1: from=<forums@zimbra.com>, size=1975, nrcpt=1 (queue active)
    Jun 14 11:22:51 linux postfix/qmgr[756]: E8B5E543ED: from=<>, size=10960, nrcpt=1 (queue active)
    Jun 14 11:22:51 linux amavis[645]: (00645-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645: <> -> <m_l758tn4_@linux.site> Received: SIZE=10960 from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00645-01 for <m_l758tn4_@linux.site>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
    Jun 14 11:22:51 linux amavis[644]: (00644-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644: <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org> Received: SIZE=1975 BODY=8BITMIME from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00644-01 for <mathiaskowoll@subox.zapto.org>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
    Jun 14 11:22:51 linux amavis[644]: (00644-01) Checking: 8TPygBaWPGvO [4.78.240.39] <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org>
    Jun 14 11:22:51 linux amavis[645]: (00645-01) Checking: C6CKSuh94vL5 [201.215.213.14] <> -> <m_l758tn4_@linux.site>
    Jun 14 11:22:51 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
    Jun 14 11:22:51 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
    Jun 14 11:22:52 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
    Jun 14 11:22:52 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
    Jun 14 11:22:58 linux amavis[644]: (00644-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[644]: (00644-01) WARN: all primary virus scanners failed, considering backups
    Jun 14 11:22:58 linux amavis[644]: (00644-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[644]: (00644-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644
    Jun 14 11:22:58 linux amavis[644]: (00644-01) extra modules loaded: Net/LDAP/Bind.pm
    Jun 14 11:22:58 linux postfix/smtp[17545]: 4CB96564E1: to=<mathiaskowoll@subox.zapto.org>, relay=127.0.0.1[127.0.0.1], delay=1721, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00644-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command))
    Jun 14 11:22:58 linux amavis[645]: (00645-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[645]: (00645-01) WARN: all primary virus scanners failed, considering backups
    Jun 14 11:22:58 linux amavis[645]: (00645-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[645]: (00645-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645
    Jun 14 11:22:58 linux amavis[645]: (00645-01) extra modules loaded: Net/LDAP/Bind.pm
    Jun 14 11:22:58 linux postfix/smtp[17547]: E8B5E543ED: to=<m_l758tn4_@linux.site>, relay=127.0.0.1[127.0.0.1], delay=1822, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00645-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command)


    P.S. Ypu can delete this thread http://www.zimbra.com/forums/showthread.php?t=3372
    it has the same information (sorry ithink is better to treat all the anitvirus problems in one post an not all separatly )
    Last edited by kowell; 06-14-2006 at 05:11 PM.

  6. #6
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Default

    Okay,
    It looks like it the error I posted above. . .unfortunetly, I don't have the config file.

    I would suggest a reinstall because I"m sure it doesn't save the config.

    john
    Quote Originally Posted by kowell
    today the error that stop my antivirus is other

    here is the log


    Jun 14 11:22:51 linux postfix/qmgr[756]: 4CB96564E1: from=<forums@zimbra.com>, size=1975, nrcpt=1 (queue active)
    Jun 14 11:22:51 linux postfix/qmgr[756]: E8B5E543ED: from=<>, size=10960, nrcpt=1 (queue active)
    Jun 14 11:22:51 linux amavis[645]: (00645-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645: <> -> <m_l758tn4_@linux.site> Received: SIZE=10960 from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00645-01 for <m_l758tn4_@linux.site>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
    Jun 14 11:22:51 linux amavis[644]: (00644-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644: <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org> Received: SIZE=1975 BODY=8BITMIME from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00644-01 for <mathiaskowoll@subox.zapto.org>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
    Jun 14 11:22:51 linux amavis[644]: (00644-01) Checking: 8TPygBaWPGvO [4.78.240.39] <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org>
    Jun 14 11:22:51 linux amavis[645]: (00645-01) Checking: C6CKSuh94vL5 [201.215.213.14] <> -> <m_l758tn4_@linux.site>
    Jun 14 11:22:51 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
    Jun 14 11:22:51 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
    Jun 14 11:22:52 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
    Jun 14 11:22:52 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
    Jun 14 11:22:58 linux amavis[644]: (00644-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[644]: (00644-01) WARN: all primary virus scanners failed, considering backups
    Jun 14 11:22:58 linux amavis[644]: (00644-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[644]: (00644-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644
    Jun 14 11:22:58 linux amavis[644]: (00644-01) extra modules loaded: Net/LDAP/Bind.pm
    Jun 14 11:22:58 linux postfix/smtp[17545]: 4CB96564E1: to=<mathiaskowoll@subox.zapto.org>, relay=127.0.0.1[127.0.0.1], delay=1721, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00644-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command))
    Jun 14 11:22:58 linux amavis[645]: (00645-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[645]: (00645-01) WARN: all primary virus scanners failed, considering backups
    Jun 14 11:22:58 linux amavis[645]: (00645-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
    Jun 14 11:22:58 linux amavis[645]: (00645-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645
    Jun 14 11:22:58 linux amavis[645]: (00645-01) extra modules loaded: Net/LDAP/Bind.pm
    Jun 14 11:22:58 linux postfix/smtp[17547]: E8B5E543ED: to=<m_l758tn4_@linux.site>, relay=127.0.0.1[127.0.0.1], delay=1822, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00645-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command)


    P.S. Ypu can delete this thread http://www.zimbra.com/forums/showthread.php?t=3372
    it has the same information (sorry ithink is better to treat all the anitvirus problems in one post an not all separatly )

  7. #7
    Join Date
    May 2006
    Posts
    118
    Rep Power
    9

    Default

    if I upgrade to the new version can the error to be fixed???
    Last edited by kowell; 06-14-2006 at 10:50 PM.

  8. #8
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Default

    Oh yeah, I don't doubt it.

    It denfenetly looks like a config file error, and it won't be preserved, but will be replaced if you upgrade.

    Good luck, and let us know.
    Also, it might be a good idea to pvt Phoenix. He's a wealth of knowledge, and might know where that config file is.

    thanks,
    John

  9. #9
    Join Date
    May 2006
    Posts
    118
    Rep Power
    9

    Default

    today havent fail the antivirus i will wait a few more days

    the last time I upgrade due to errors i mess up everething and couldnt restore my backup (ver. 3.1.2)

  10. #10
    Join Date
    Jul 2006
    Location
    KL, Malaysia
    Posts
    123
    Rep Power
    9

    Default

    My setup is Dual Xeon 3.0s and 4 GB RAM using zimbra NE 4.0.3 RHEL4.. Unfortunately the same thing as above happened to me Twice! Once in 2 weeks..

    Everything went back okay after server reboot and services restart.

    ---------- /var/log/zimbra.log
    Code:
    Nov 29 02:17:08 pluto postfix/qmgr[7831]: D89741F4419: removed
    Nov 29 02:17:16 pluto clamd[7736]: Pid file removed.
    Nov 29 02:17:16 pluto clamd[7736]: Exiting (clean)
    Nov 29 02:17:16 pluto clamd[7736]: --- Stopped at Wed Nov 29 02:17:16 2006
    Nov 29 02:18:03 pluto zmtomcatmgr[6128]: status requested
    Nov 29 02:18:03 pluto zmtomcatmgr[6128]: status OK
    Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: antispam: Running
    Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: antivirus: Stopped
    Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: logger: Stopped
    Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: mailbox: Running
    Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: mta: Running
    Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: snmp: Running
    Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: spell: Running
    Nov 29 02:18:41 pluto postfix/smtpd[5670]: connect from 71-217-68-211.tukw.qwest.net[71.217.68.211]
    Nov 29 02:18:42 pluto postfix/smtpd[5670]: NOQUEUE: reject: RCPT from 71-217-68-211.tukw.qwest.net[71.217.68.211]: 550 <haslin
    a@myserver.mydomain>: Recipient address rejected: myserver.mydomain; from=<cconclude@qwest.net> to=<haslina@myserver.mydomain> proto=SMTP helo=<71-
    217-68-211.tukw.qwest.net>
    Nov 29 02:18:42 pluto postfix/smtpd[5670]: lost connection after RCPT from 71-217-68-211.tukw.qwest.net[71.217.68.211]
    Nov 29 02:18:42 pluto postfix/smtpd[5670]: disconnect from 71-217-68-211.tukw.qwest.net[71.217.68.211]
    Nov 29 02:19:38 pluto postfix/smtpd[5670]: connect from 200164209142.user.veloxzone.com.br[200.164.209.142]
    Nov 29 02:19:44 pluto postfix/smtpd[6540]: connect from unknown[202.184.112.28]
    Nov 29 02:19:44 pluto postfix/smtpd[6540]: A3AF51F43CC: client=unknown[202.184.112.28]
    Nov 29 02:19:44 pluto postfix/cleanup[6541]: A3AF51F43CC: message-id=<20061128181944.A3AF51F43CC@myserver.mydomain>
    Nov 29 02:19:44 pluto postfix/qmgr[7831]: A3AF51F43CC: from=<bounce@promotions.bonuslink.com.my>, size=9381, nrcpt=1 (queue ac
    tive)
    Nov 29 02:19:44 pluto amavis[26582]: (26582-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T021027-26582: <bounce@pro
    motions.bonuslink.com.my> -> <safuan@myserver.mydomain> SIZE=9381 Received: from myserver.mydomain ([127.0.0.1]) by localhost (pluto.c
    nc.net.my [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <safuan@myserver.mydomain>; Wed, 29 Nov 2006 02:19:44 +0800 (MYT)
    Nov 29 02:19:44 pluto postfix/smtpd[6540]: disconnect from unknown[202.184.112.28]
    Nov 29 02:19:44 pluto amavis[26582]: (26582-02) Checking: fGOXm2Okd4lY [202.184.112.28] <bounce@promotions.bonuslink.com.my> -
    > <safuan@myserver.mydomain>
    Nov 29 02:19:44 pluto amavis[26582]: (26582-02) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused,
     retrying (1)
    Nov 29 02:19:45 pluto amavis[26582]: (26582-02) (!) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refu
    sed, retrying (2)
    Nov 29 02:19:47 pluto postfix/smtpd[5670]: 448251F4419: client=200164209142.user.veloxzone.com.br[200.164.209.142]
    Nov 29 02:19:49 pluto postfix/cleanup[6541]: 448251F4419: message-id=<01c71319$6d2b1a80$6c822ecf@comnet>
    Nov 29 02:19:49 pluto postfix/qmgr[7831]: 448251F4419: from=<comnet@jal1.telmex.net.mx>, size=1318, nrcpt=1 (queue active)
    Nov 29 02:19:49 pluto amavis[28175]: (28175-04) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T002247-28175: <comnet@jal
    1.telmex.net.mx> -> <jamaliah@myserver.mydomain> SIZE=1318 Received: from myserver.mydomain ([127.0.0.1]) by localhost (pluto.cnc.net.
    my [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <jamaliah@myserver.mydomain>; Wed, 29 Nov 2006 02:19:49 +0800 (MYT)
    Nov 29 02:19:49 pluto amavis[28175]: (28175-04) Checking: gLbA5f1TjBA6 [200.164.209.142] <comnet@jal1.telmex.net.mx> -> <jamal
    iah@myserver.mydomain>
    Nov 29 02:19:49 pluto amavis[28175]: (28175-04) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused,
     retrying (1)
    Nov 29 02:19:50 pluto amavis[28175]: (28175-04) (!) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refu
    sed, retrying (2)
    Nov 29 02:19:51 pluto postfix/smtpd[5670]: disconnect from 200164209142.user.veloxzone.com.br[200.164.209.142]
    Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:331
    0 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 44) line 268.
    Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) WARN: all primary virus scanners failed, considering backups
    Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS
    FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:331
    0: Connection refused) at (eval 44) line 268.
    Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20061129T021027-2658
    2
    Nov 29 02:19:52 pluto postfix/smtp[6542]: A3AF51F43CC: to=<safuan@myserver.mydomain>, relay=127.0.0.1[127.0.0.1], delay=8, status=def
    erred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=26582-02, virus_scan FAILED: virus_scan: ALL VIRUS SC
    ANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.
    0.1:3310: Connection refused) at (eval 44) line 268. (in reply to end of DATA command))
    Nov 29 02:19:56 pluto amavis[28175]: (28175-04) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:331
    0 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 44) line 268.
    I wonder why clamd exiting by itself.. Have any pointers?

Similar Threads

  1. Stop Antivirus and antispam
    By alimovz in forum Administrators
    Replies: 5
    Last Post: 08-22-2011, 05:19 AM
  2. Zimbra .pids / service monitoring
    By bin2hex in forum Administrators
    Replies: 24
    Last Post: 04-03-2010, 10:12 PM
  3. AntiVirus unable to connect to localhost
    By net4home in forum Administrators
    Replies: 15
    Last Post: 07-25-2007, 06:55 PM
  4. The Archiving - Antivirus unwritten connection
    By peter@mxtoolbox.com in forum Administrators
    Replies: 1
    Last Post: 07-25-2007, 11:07 AM
  5. AntiVirus won't run - error accessing mail queues
    By mrambo3501 in forum Administrators
    Replies: 2
    Last Post: 07-25-2007, 09:45 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •