My setup is Dual Xeon 3.0s and 4 GB RAM using zimbra NE 4.0.3 RHEL4.. Unfortunately the same thing as above happened to me
Twice! Once in 2 weeks..
Everything went back okay after server reboot and services restart.
---------- /var/log/zimbra.log
Code:
Nov 29 02:17:08 pluto postfix/qmgr[7831]: D89741F4419: removed
Nov 29 02:17:16 pluto clamd[7736]: Pid file removed.
Nov 29 02:17:16 pluto clamd[7736]: Exiting (clean)
Nov 29 02:17:16 pluto clamd[7736]: --- Stopped at Wed Nov 29 02:17:16 2006
Nov 29 02:18:03 pluto zmtomcatmgr[6128]: status requested
Nov 29 02:18:03 pluto zmtomcatmgr[6128]: status OK
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: antispam: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: antivirus: Stopped
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: logger: Stopped
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: mailbox: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: mta: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: snmp: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: spell: Running
Nov 29 02:18:41 pluto postfix/smtpd[5670]: connect from 71-217-68-211.tukw.qwest.net[71.217.68.211]
Nov 29 02:18:42 pluto postfix/smtpd[5670]: NOQUEUE: reject: RCPT from 71-217-68-211.tukw.qwest.net[71.217.68.211]: 550 <haslin
a@myserver.mydomain>: Recipient address rejected: myserver.mydomain; from=<cconclude@qwest.net> to=<haslina@myserver.mydomain> proto=SMTP helo=<71-
217-68-211.tukw.qwest.net>
Nov 29 02:18:42 pluto postfix/smtpd[5670]: lost connection after RCPT from 71-217-68-211.tukw.qwest.net[71.217.68.211]
Nov 29 02:18:42 pluto postfix/smtpd[5670]: disconnect from 71-217-68-211.tukw.qwest.net[71.217.68.211]
Nov 29 02:19:38 pluto postfix/smtpd[5670]: connect from 200164209142.user.veloxzone.com.br[200.164.209.142]
Nov 29 02:19:44 pluto postfix/smtpd[6540]: connect from unknown[202.184.112.28]
Nov 29 02:19:44 pluto postfix/smtpd[6540]: A3AF51F43CC: client=unknown[202.184.112.28]
Nov 29 02:19:44 pluto postfix/cleanup[6541]: A3AF51F43CC: message-id=<20061128181944.A3AF51F43CC@myserver.mydomain>
Nov 29 02:19:44 pluto postfix/qmgr[7831]: A3AF51F43CC: from=<bounce@promotions.bonuslink.com.my>, size=9381, nrcpt=1 (queue ac
tive)
Nov 29 02:19:44 pluto amavis[26582]: (26582-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T021027-26582: <bounce@pro
motions.bonuslink.com.my> -> <safuan@myserver.mydomain> SIZE=9381 Received: from myserver.mydomain ([127.0.0.1]) by localhost (pluto.c
nc.net.my [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <safuan@myserver.mydomain>; Wed, 29 Nov 2006 02:19:44 +0800 (MYT)
Nov 29 02:19:44 pluto postfix/smtpd[6540]: disconnect from unknown[202.184.112.28]
Nov 29 02:19:44 pluto amavis[26582]: (26582-02) Checking: fGOXm2Okd4lY [202.184.112.28] <bounce@promotions.bonuslink.com.my> -
> <safuan@myserver.mydomain>
Nov 29 02:19:44 pluto amavis[26582]: (26582-02) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused,
retrying (1)
Nov 29 02:19:45 pluto amavis[26582]: (26582-02) (!) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refu
sed, retrying (2)
Nov 29 02:19:47 pluto postfix/smtpd[5670]: 448251F4419: client=200164209142.user.veloxzone.com.br[200.164.209.142]
Nov 29 02:19:49 pluto postfix/cleanup[6541]: 448251F4419: message-id=<01c71319$6d2b1a80$6c822ecf@comnet>
Nov 29 02:19:49 pluto postfix/qmgr[7831]: 448251F4419: from=<comnet@jal1.telmex.net.mx>, size=1318, nrcpt=1 (queue active)
Nov 29 02:19:49 pluto amavis[28175]: (28175-04) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T002247-28175: <comnet@jal
1.telmex.net.mx> -> <jamaliah@myserver.mydomain> SIZE=1318 Received: from myserver.mydomain ([127.0.0.1]) by localhost (pluto.cnc.net.
my [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <jamaliah@myserver.mydomain>; Wed, 29 Nov 2006 02:19:49 +0800 (MYT)
Nov 29 02:19:49 pluto amavis[28175]: (28175-04) Checking: gLbA5f1TjBA6 [200.164.209.142] <comnet@jal1.telmex.net.mx> -> <jamal
iah@myserver.mydomain>
Nov 29 02:19:49 pluto amavis[28175]: (28175-04) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused,
retrying (1)
Nov 29 02:19:50 pluto amavis[28175]: (28175-04) (!) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refu
sed, retrying (2)
Nov 29 02:19:51 pluto postfix/smtpd[5670]: disconnect from 200164209142.user.veloxzone.com.br[200.164.209.142]
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:331
0 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 44) line 268.
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) WARN: all primary virus scanners failed, considering backups
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS
FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:331
0: Connection refused) at (eval 44) line 268.
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20061129T021027-2658
2
Nov 29 02:19:52 pluto postfix/smtp[6542]: A3AF51F43CC: to=<safuan@myserver.mydomain>, relay=127.0.0.1[127.0.0.1], delay=8, status=def
erred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=26582-02, virus_scan FAILED: virus_scan: ALL VIRUS SC
ANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.
0.1:3310: Connection refused) at (eval 44) line 268. (in reply to end of DATA command))
Nov 29 02:19:56 pluto amavis[28175]: (28175-04) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:331
0 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 44) line 268.
I wonder why clamd exiting by itself.. Have any pointers?