Getting Clamd error in /var/log/maillog (Clamd::ERROR:: UNKNOWN
CLAMD RETURN ./razor-agent.log/Access denied)
Landon Stewart
lstewart at superb.net
Wed Nov 4 21:02:49 GMT 2009
I'm repeatedly getting an error from clamd in /var/log/maillog but I cannot
figure out what is causing it. We have two mailscanner machines, only one
of them is getting the error. What directory/file permissions should I
check? Is that the cause?
*The errors are:*
Nov 4 15:49:50 mail-out2 MailScanner[19819]: Clamd::ERROR:: UNKNOWN CLAMD
RETURN ./razor-agent.log/Access denied. ERROR ::
/var/spool/MailScanner/incoming/19819
Nov 4 15:51:11 mail-out2 MailScanner[18089]: Clamd::ERROR:: UNKNOWN CLAMD
RETURN ./razor-agent.log/Access denied. ERROR ::
/var/spool/MailScanner/incoming/18089
Nov 4 15:53:44 mail-out2 MailScanner[19819]: Clamd::ERROR:: UNKNOWN CLAMD
RETURN ./razor-agent.log/Access denied. ERROR ::
/var/spool/MailScanner/incoming/19819
Nov 4 15:55:43 mail-out2 MailScanner[19819]: Clamd::ERROR:: UNKNOWN CLAMD
RETURN ./razor-agent.log/Access denied. ERROR ::
/var/spool/MailScanner/incoming/19819
There's lots of other lines and mail appears to be handled normally but I'm
afraid the anti-virus is not working properly.
*The directory and contents of the razor-agent.log file look like this:*
[root at mail-out2 ~]# ls -la /var/spool/MailScanner/incoming/19819
total 16
drwxr-x--- 2 postfix clamav 4096 Nov 4 15:55 .
drwxr-xr-x 9 postfix clamav 4096 Nov 4 15:59 ..
-rw------- 1 postfix postfix 2507 Nov 4 15:55 razor-agent.log
[root at mail-out2 ~]# cat
/var/spool/MailScanner/incoming/19819/razor-agent.log
Nov 04 14:28:09.567341 check[20526]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:32:51.197651 check[21072]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:41:14.958356 check[21741]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:41:26.494634 check[21745]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:44:08.053185 check[21815]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:44:13.677588 check[21820]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:49:19.335533 check[22023]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:49:24.725745 check[22024]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:49:30.167252 check[22037]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:49:36.138546 check[22048]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:49:41.226018 check[22049]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 14:59:16.999392 check[22929]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:01:16.895978 check[23533]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:03:22.486145 check[23871]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:05:03.986974 check[23935]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:06:03.465041 check[23992]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:19:45.436067 check[24960]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:24:20.911340 check[25606]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:31:02.463732 check[26346]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:42:08.837213 check[27283]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:49:50.879510 check[27532]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:53:44.375244 check[28146]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
Nov 04 15:55:43.938283 check[28212]: [ 2] [bootup] Logging initiated
LogDebugLevel=3 to file:razor-agent.log
*Here's more info about MailScanner:*
[root at mail-out2 ~]# MailScanner -v
Running on
Linux mail-out2.superb.net 2.6.18-128.el5 #1 SMP Wed Jan 21 10:41:14 EST
2009 x86_64 x86_64 x86_64 GNU/Linux
This is CentOS release 5.3 (Final)
This is Perl version 5.008008 (5.8.8)
This is MailScanner version 4.78.17
Module versions are:
1.00 AnyDBM_File
1.16 Archive::Zip
0.23 bignum
1.04 Carp
2.021 Compress::Zlib
1.119 Convert::BinHex
0.17 Convert::TNEF
2.121_08 Data::Dumper
2.27 Date::Parse
1.00 DirHandle
1.05 Fcntl
2.74 File::Basename
2.09 File::Copy
2.01 FileHandle
1.08 File::Path
0.20 File::Temp
0.90 Filesys::Df
3.60 HTML::Entities
3.62 HTML::Parser
3.57 HTML::TokeParser
1.23 IO
1.14 IO::File
1.13 IO::Pipe
2.04 Mail::Header
1.89 Math::BigInt
0.22 Math::BigRat
3.07 MIME::Base64
5.427 MIME::Decoder
5.427 MIME::Decoder::UU
5.427 MIME::Head
5.427 MIME::Parser
3.07 MIME::QuotedPrint
5.427 MIME::Tools
0.13 Net::CIDR
1.25 Net::IP
0.16 OLE::Storage_Lite
1.04 Pod::Escapes
3.05 Pod::Simple
1.09 POSIX
1.19 Scalar::Util
1.78 Socket
2.16 Storable
1.4 Sys::Hostname::Long
0.27 Sys::Syslog
1.26 Test::Pod
0.86 Test::Simple
1.9707 Time::HiRes
1.02 Time::localtime
Optional module versions are:
1.40 Archive::Tar
0.23 bignum
missing Business::ISBN
missing Business::ISBN::Data
missing Data::Dump
1.814 DB_File
1.25 DBD::SQLite
1.609 DBI
1.14 Digest
1.01 Digest::HMAC
2.36 Digest::MD5
2.12 Digest::SHA1
missing Encode::Detect
missing Error
missing ExtUtils::CBuilder
missing ExtUtils::ParseXS
2.38 Getopt::Long
missing Inline
missing IO::String
1.10 IO::Zlib
missing IP::Country
missing Mail::ClamAV
3.002005 Mail::SpamAssassin
missing Mail::SPF
missing Mail::SPF::Query
missing Module::Build
missing Net::CIDR::Lite
0.65 Net::DNS
missing Net::DNS::Resolver::Programmable
missing Net::LDAP
missing NetAddr::IP
missing Parse::RecDescent
missing SAVI
2.64 Test::Harness
missing Test::Manifest
1.95 Text::Balanced
1.35 URI
missing version
missing YAML
--
Landon Stewart <LStewart at SUPERB.NET>
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more "Ahead of the Rest": http://www.superbhosting.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20091104/a60dabbd/attachment.html
More information about the MailScanner
mailing list