Commercial scanner clamav timed out!

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The current version of the clamscan binary (as used by the "clamav"
scanner setting) takes a very long time to load the virus signatures.
Either
a) Increase the timeout (not good)
b) Install the 0.91rc2 version of ClamAV as this loads and starts much
faster
c) Use the "clamavmodule" scanner setting together with the ClamAV+SA
package available from www.mailscanner.info
d) Use the "clamd" scanner setting together with the clamd RPM available
from dag.wieers.com. This is probably the best answer.

Go for (d) first.

Wilson Kwok wrote:
> Hello,
> Environment: postfix-2.2.10-1.1.el4 + MailScanner-perl-MIME-Base64-3.05-5
> + clamav-0.90.3-1.el4.rf + spamassassin-3.2.1-1.el4.rf
> MailScanner always sent logs, can anyone help me ?
> Log here:
> Jul 6 11:36:39 mailgateway MailScanner[20662]: Commercial scanner
> clamav timed out!
> Jul 6 11:36:39 mailgateway MailScanner[20662]: clamav: Failed to
> complete, timed out
> Jul 6 11:36:39 mailgateway MailScanner[20662]: Virus Scanning: Denial
> Of Service attack detected!
> Jul 6 11:37:30 mailgateway MailScanner[20659]: Commercial scanner
> clamav timed out!
> Jul 6 11:37:30 mailgateway MailScanner[20659]: clamav: Failed to
> complete, timed out
> Jul 6 11:37:30 mailgateway MailScanner[20659]: Virus Scanning: Denial
> Of Service attack detected!
> Jul 6 11:38:34 mailgateway MailScanner[20121]: Commercial scanner
> clamav timed out!
> Jul 6 11:38:34 mailgateway MailScanner[20121]: clamav: Failed to
> complete, timed out
> Jul 6 11:38:34 mailgateway MailScanner[20121]: Virus Scanning: Denial
> Of Service attack is in message 80B8741821F.81DD6
> Jul 6 11:38:34 mailgateway MailScanner[20121]: Infected message
> 80B8741821F.81DD6 came from 200.86.17.36
> Jul 6 11:39:44 mailgateway MailScanner[20428]: Commercial scanner
> clamav timed out!
> Jul 6 11:39:44 mailgateway MailScanner[20428]: clamav: Failed to
> complete, timed out
>
> ------------------------------------------------------------------------
> Yahoo!Mail =AC=B0=A7A=A8C=A4@=AD=D3=B9q=B6l=AE=BD=A5X=A4@=C2I=A4=DF=B7N=
=A1A=BA=C9=C4m=B7R=A4=DF *=A5=DF=A7Y=B6}=A9l=B7R=A4=DF=A6=E6=B0=CA*=20

Jules

- --=20
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Comment: (pgp-secured)
Charset: Big5

wj8DBQFGjkMeEfZZRxQVtlQRAtkZAJwIJBRTTIwnUdm50QbTmUuSLZYbDgCg2ZCM
r8wijAqQKh5Ju2VcowsLD7o=3D
=3DA6/H
-----END PGP SIGNATURE-----

--=20
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk