ClamAV stops working

[Widmo]

I've similar situation twice,

clamd stop working.

Log:

Code: Select all

Wed Jul  9 12:15:37 2014 -> HTML support enabled.
Wed Jul  9 12:15:37 2014 -> Self checking every 600 seconds.
Wed Jul  9 12:15:49 2014 -> /var/spool/MailScanner/incoming/30518/D7AB1100746.A2898.message: Suspect.DoubleExtension-zippwd-15 FOUND
**Wed Jul  9 12:15:52 2014 -> WARNING: lstat() failed on: /var/spool/MailScanner/incoming/30518/4A1A9100745.AF0A5/tnef_wAFQ8
**Wed Jul  9 12:15:52 2014 -> WARNING: lstat() failed on: /var/spool/MailScanner/incoming/30531/70613100748.ACC9E/tnef71AGfX
Wed Jul  9 12:15:52 2014 -> /var/spool/MailScanner/incoming/30518/D7AB1100746.A2898/n09-07-2014.9804887301.pdf.zip: Suspect.DoubleExtension-zippwd-15 FOUND

So probably permissions:

Code: Select all

ls -la /var/spool/MailScanner/incoming/30518/4A1A9100745.AF0A5
total 132
drwxr-xr-x  3 postfix clamav     140 Jul  9 12:15 .
drwxr-xr-x 32 postfix clamav    1840 Jul  9 12:15 ..
-rw-r--r--  1 postfix clamav    8040 Jul  9 12:15 nmsg-30518-219.txt
-rw-r--r--  1 postfix clamav    7672 Jul  9 12:15 nmsg-30518-220.txt
-rw-r--r--  1 postfix clamav    6297 Jul  9 12:15 nmsg-30518-221.txt
-rw-r--r--  1 postfix clamav  107826 Jul  9 12:15 nwinmail.dat
drwx------  2 postfix **postfix**     60 Jul  9 12:15 tnef_wAFQ8

Any idea to resolve issue?

[Widmo]

Is it ok?

Code: Select all

usermod -a -G postfix clamav

[darky83]

Adding your clamav user to postfix won't work as the group doesn't have access.

Weird thing, this looks like an old bug in MailScanner I have seen before (https://github.com/MailScanner/v4/issues/8)
Nothing to do with clamav, Mailscanner is to blame here.

Maybe an restart of mailscanner works?

[Widmo]

MailScanner is working, restating doesn't fox problem,
but service start clamd is working perfect

[shawniverson]

Any issues since restarting clamd?

[Widmo]

no, it's ok right now.