ClamAV Failing

[dorgan1983]

seems like every morning lately I am seeing this error in the log and then i have to restart zimbra to get everything back up and working again.

ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)

[phoenix]

Some idea of Zimbra version/release would help (update your forum profile with the output from 'zmcontrol -v') plus what errors do you see in the log files?

[dorgan1983]

Sorry about that. I am running version: zcs-5.0.10_GA_2638.UBUNTU6.20081003054415

Here is a larger section of /var/log/zimbra.log

Nov 14 10:15:50 twoguyshosting amavis[3205]: (03205-09) (!!)ClamAV-clamd av-scanner FAILED: CODE(0x8178a80) Too many retries to talk to 127.0.0.1:3310 (Can't
connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 74) line 310. at (eval 74) line 511.
Nov 14 10:15:50 twoguyshosting amavis[3205]: (03205-09) (!!)WARN: all primary virus scanners failed, considering backups
Nov 14 10:15:50 twoguyshosting amavis[3205]: (03205-09) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-s
canner FAILED: CODE(0x8178a80) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 74) line
310. at (eval 74) line 511.
Nov 14 10:15:50 twoguyshosting amavis[3205]: (03205-09) (!)PRESERVING EVIDENCE in /opt/zimbra/data/amavisd/tmp/amavis-20081114T101543-03205
Nov 14 10:15:50 twoguyshosting postfix/smtp[24767]: 59BAE790029: to=<dorgan@donaldorgan.com>, orig_to=<donald@donaldorgan.com>, relay=127.0.0.1[127.0.0.1]:100
24, delay=8932, delays=8916/8/0.09/7.2, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=03205-09, virus_scan FAI
LED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: CODE(0x8178a80) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET
socket 127.0.0.1:3310: Connection refused) at (eval 74) line 310. at (eval 74) line 511. (in reply to end of DATA command))
Nov 14 10:15:50 twoguyshosting amavis[30483]: (30483-14) (!)run_av (ClamAV-clamd, built-in i/f): Too many retries to talk to 127.0.0.1:3310 (Can't connect to
INET socket 127.0.0.1:3310: Connection refused) at (eval 74) line 310.
Nov 14 10:15:50 twoguyshosting amavis[30483]: (30483-14) (!!)ClamAV-clamd av-scanner FAILED: CODE(0x8178a80) Too many retries to talk to 127.0.0.1:3310 (Can't
connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 74) line 310. at (eval 74) line 511.
Nov 14 10:15:50 twoguyshosting amavis[30483]: (30483-14) (!!)WARN: all primary virus scanners failed, considering backups
Nov 14 10:15:50 twoguyshosting amavis[30483]: (30483-14) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-
scanner FAILED: CODE(0x8178a80) Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 74) line
310. at (eval 74) line 511.
Nov 14 10:15:50 twoguyshosting amavis[30483]: (30483-14) (!)PRESERVING EVIDENCE in /opt/zimbra/data/amavisd/tmp/amavis-20081114T101543-30483

[dorgan1983]

Anyone have any ideas??

[phoenix]

Originally Posted by dorgan1983

Anyone have any ideas??

Try being a bit more patient, you'll get an answer when people have the time. You coild also have searched the forums for the answer.

Try the following:

su - zimbra
mkdir /tmp/clamdb
mv /opt/zimbra/clamav/db/* /tmp/clamdb
/opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
zmamavisdctl stop
zmamavisdctl start

[dorgan1983]

Yes, sorry, you are correct. I have to be more patient.

I will try what you suggested and see what happens the next couple of days.