Mail Fail to deliver after ClamAV definition Update today

Randal, Phil prandal at
Mon Nov 15 14:22:33 GMT 2010

There was an update to main.cvd version 53 in the weekend, so main.cvd should have become main.cld.

What is the full "Monitors For ClamAV Updates" line in your MailScanner.conf?

Have you checked the contents of /var/clamav (or wherever your clamav databases are)?


Phil Randal | Infrastructure Engineer
NHS Herefordshire & Herefordshire Council  | Deputy Chief Executive's Office | I.C.T. Services Division
Thorn Office Centre, Rotherwas, Hereford, HR2 6JT
Tel: 01432 260160

From: mailscanner-bounces at [mailto:mailscanner-bounces at] On Behalf Of Terence Chan
Sent: 15 November 2010 13:23
To: mailscanner at
Subject: Re: Mail Fail to deliver after ClamAV definition Update today

Hi I just confirmed that the error message

"Monitors For ClamAV Updates" patterns exist!

shows up way before the MailScanner is giving us problem. so this is not related to the problem I am facing today.

Please help me to troubleshoot this issue. I am sure this happens after clamav freshclam and restart the MailScanner.

Thanks a lot.

On Mon, Nov 15, 2010 at 8:02 PM, Terence Chan < at< at>> wrote:
Hi After an update of the definition on ClamAV 2AM GMT, all email on my mail server failed to deliver.

An error message shows up like this.

Nov 15 01:20:06 mail01a MailScanner[14801]: None of the files matched by the "Monitors For ClamAV Updates" patterns exist!

When I restart MailScanner - the MailScanner process die repeatedly. (See the defunct MailScanner)

30589 ?        Ss     0:00 MailScanner: starting child
30594 ?        S      0:00 MailWatch SQL
30610 pts/1    S+     0:00 grep MailScanner
30623 ?        Z      0:04 [MailScanner] <defunct>
30629 ?        Z      0:04 [MailScanner] <defunct>
30642 ?        Z      0:04 [MailScanner] <defunct>
30656 ?        R      0:04 MailScanner: starting child
30670 ?        S      0:00 MailScanner: starting child

I have to disable virus scanning before I can restart MaiLScanner and email starts to deliver again.

I am running ClamAV 0.96 and using the clamavmodule to activate the ClamAV. This setup has been running for over a year and not giving us any problem.

Please advise how we can check what goes wrong.


Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council.
You should be aware that Herefordshire Council monitors its email service.
This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.
-------------- next part --------------
An HTML attachment was scrubbed...

More information about the MailScanner mailing list