Operating System - HP-UX
1824218 Members
4150 Online
109669 Solutions
New Discussion юеВ

ClamAV's clmilter and Sendmail

 
enrico.nic
Regular Advisor

ClamAV's clmilter and Sendmail

Hi

I have just installed the last Internet Express bundle, upgrading the antivirus package ClamAV from the 0.88.7 version to the 0.90 version: suddenly the included e-mail antivirus scanner clmilter stopped working.
What I see is that the daemon (clamav-milter -lo /var/run/clamav/clmilter.sock) starts correctly, but at the first call from sendmail the clmilter process is killed, with a cryptic:

Mar 12 10:28:37 myhost syslog: ClamAv: mi_stop=1

message in the syslog log file, even having enabled the LogSyslog option in the clamav.conf configuration file.
What is strange is that I haven't changed anything in sendmail.cf and in the clamav's configuration files.

Versions reported are:
Sendmail @(#)Sendmail version 8.13.3 - Revision 2.004 - 06/29/2006/8.13.3

ClamAV version 0.90, clamav-milter version devel-120207

Has anybody else seen this behaviour ?

Thank you

Enrico


4 REPLIES 4
Steven E. Protter
Exalted Contributor

Re: ClamAV's clmilter and Sendmail

Shalom,

Enrico, I would surmise that a sendmail configuration file was overwritten during the install. This commonly occurs when there is a customization that can't be converted at install time. Usually there is a backup of the effected configuration file, which should be looked at for diagnosis.

It may also be a bug.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
enrico.nic
Regular Advisor

Re: ClamAV's clmilter and Sendmail

Unfortunately the configuration file is correct, it hasn't been overwritten.
Even an "upgrade" of sendmail from the last depot file didn't work.
Now sendmail reports:
220 gissi.marionegri.it ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 2.005 - 12 January 2007/8.13.3; Tue, 17 Apr 2007 11:37:11 +0200 (METDST)

Thank you

Enrico
Steven E. Protter
Exalted Contributor

Re: ClamAV's clmilter and Sendmail

Shalom,

Then I'd look at the clamav configuration.

Something that was changed was overwritten by the clamav installation.

If this functionality is critical, you might wish to consider backing the release out and installint the previous version.

This appears to be bad software if you are certain the configuration was preserved.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
enrico.nic
Regular Advisor

Re: ClamAV's clmilter and Sendmail

Hi

Sorry I didn't specify that both files are correct, sendmail.cf and ClamAV's configuration files.

I have a small further explanation from clamav-milter, after activating the "debug" mode from the command line:

LibClamAV debug: Parsing mail file
LibClamAV debug: assume no encoding
LibClamAV debug: Not a mime encoded message
LibClamAV debug: Saving text part to scan
LibClamAV debug: messageAddArgument, arg='filename=textportion'
LibClamAV debug: messageToFileblob
LibClamAV debug: messageExport: numberOfEncTypes == 0
LibClamAV debug: messageExport: Entering fast copy mode
LibClamAV debug: blobSetFilename: textportion
LibClamAV debug: fileblobSetFilename: mkstemp(/var/run/clamav/clamav-74736f7278f
e00181d38d5b5b8684500/textportionXf727)
LibClamAV debug: Creating /var/run/clamav/clamav-74736f7278fe00181d38d5b5b868450
0/textportionX
ERROR: Segmentation fault :-( Bye..

Tha strange thing is that the file (textportionX) has been created in the directory.

Thank you again
Enrico