Antivirus suddenly stop

[kowell]

here arethe log

Jun 13 10:33:44 linux amavis[30515]: Net::Server: 2006/06/13-10:33:43 Server closing!
Jun 13 10:33:49 linux clamd[30790]: Pid file removed.
Jun 13 10:33:49 linux clamd[30790]: Exiting (clean)
Jun 13 10:33:49 linux clamd[30790]: --- Stopped at Tue Jun 13 10:33:49 2006
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: antispam: Stopped
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: antivirus: Stopped
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: ldap: Running
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: logger: Running
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: mailbox: Running
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: mta: Running
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: snmp: Running
Jun 13 10:34:18 linux zimbramon[27437]: 27437:info: 2006-06-13 10:34:02, STATUS: subox.zapto.org: spell: Running
Jun 13 10:34:37 linux clamd[27655]: Daemon started.
Jun 13 10:34:37 linux clamd[27655]: clamd daemon 0.88 (OS: linux-gnu, ARCH: i386, CPU: i686)
Jun 13 10:34:37 linux clamd[27655]: Log file size limited to 20971520 bytes.
Jun 13 10:34:37 linux clamd[27655]: Reading databases from /opt/zimbra/clamav/db
Jun 13 10:34:42 linux postfix/postmap[27663]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:34:46 linux postfix/postsuper[27665]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:34:48 linux postfix/postalias[27668]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:34:49 linux postfix[27670]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:34:57 linux clamd[27655]: Protecting against 59663 viruses.
Jun 13 14:36:07 linux postfix/postqueue[27907]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: antispam: Stopped
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: antivirus: Stopped
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: ldap: Running
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: logger: Running
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: mailbox: Running
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: mta: Stopped
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: snmp: Running
Jun 13 10:36:08 linux zimbramon[27782]: 27782:info: 2006-06-13 10:36:01, STATUS: subox.zapto.org: spell: Running
Jun 13 10:36:17 linux amavis[28028]: starting. /opt/zimbra/amavisd/sbin/amavisd at subox.zapto.org amavisd-new-2.3.3 (20050822), Unicode aware, LANG=C
Jun 13 10:36:17 linux amavis[28028]: user=1001, EUID: 1001 (1001); group=, EGID: 1000 1000 51 5 (1000 1000 51 5)
Jun 13 10:36:17 linux amavis[28028]: Perl version 5.008007
Jun 13 10:36:19 linux amavis[28030]: Net::Server: Process Backgrounded
Jun 13 10:36:19 linux amavis[28030]: Net::Server: 2006/06/13-10:36:19 Amavis (type Net::Server::PreForkSimple) starting! pid(28030)
Jun 13 10:36:19 linux amavis[28030]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
Jun 13 10:36:19 linux amavis[28030]: Net::Server: Group Not Defined. Defaulting to EGID '1000 1000 51 5'
Jun 13 10:36:19 linux amavis[28030]: Net::Server: User Not Defined. Defaulting to EUID '1001'
Jun 13 10:36:19 linux amavis[28030]: Module Amavis::Conf 2.043
Jun 13 10:36:19 linux amavis[28030]: Module Archive::Tar 1.26
Jun 13 10:36:19 linux amavis[28030]: Module Archive::Zip 1.16
Jun 13 10:36:19 linux amavis[28030]: Module BerkeleyDB 0.27
Jun 13 10:36:19 linux amavis[28030]: Module Compress::Zlib 1.41
Jun 13 10:36:19 linux amavis[28030]: Module Convert::TNEF 0.17
Jun 13 10:36:19 linux amavis[28030]: Module Convert::UUlib 1.06
Jun 13 10:36:19 linux amavis[28030]: Module DBD::mysql 3.0002
Jun 13 10:36:19 linux amavis[28030]: Module DBI 1.50
Jun 13 10:36:19 linux amavis[28030]: Module DB_File 1.811
Jun 13 10:36:19 linux amavis[28030]: Module MIME::Entity 5.418
Jun 13 10:36:19 linux amavis[28030]: Module MIME::Parser 5.418
Jun 13 10:36:19 linux amavis[28030]: Module MIME::Tools 5.418
Jun 13 10:36:19 linux amavis[28030]: Module Mail::Header 1.67
Jun 13 10:36:19 linux amavis[28030]: Module Mail::Internet 1.67
Jun 13 10:36:19 linux amavis[28030]: Module Mail::SpamAssassin 3.001000
Jun 13 10:36:19 linux amavis[28030]: Module Net::Cmd 2.26
Jun 13 10:36:19 linux amavis[28030]: Module Net:NS 0.55
Jun 13 10:36:19 linux amavis[28030]: Module Net::LDAP 0.33
Jun 13 10:36:19 linux amavis[28030]: Module Net::SMTP 2.29
Jun 13 10:36:19 linux amavis[28030]: Module Net::Server 0.90
Jun 13 10:36:19 linux amavis[28030]: Module Razor2::Client::Version 2.72
Jun 13 10:36:19 linux amavis[28030]: Module Time::HiRes 1.86
Jun 13 10:36:19 linux amavis[28030]: Module Unix::Syslog 0.99
Jun 13 10:36:19 linux amavis[28030]: Amavis:B code loaded
Jun 13 10:36:19 linux amavis[28030]: Amavis::Cache code loaded
Jun 13 10:36:19 linux amavis[28030]: SQL base code NOT loaded
Jun 13 10:36:19 linux amavis[28030]: SQL::Log code NOT loaded
Jun 13 10:36:19 linux amavis[28030]: SQL::Quarantine NOT loaded
Jun 13 10:36:19 linux amavis[28030]: Lookup::SQL code NOT loaded
Jun 13 10:36:19 linux amavis[28030]: Lookup::LDAP code loaded
Jun 13 10:36:19 linux amavis[28030]: AM.PDP prot code NOT loaded
Jun 13 10:36:19 linux amavis[28030]: SMTP-in prot code loaded
Jun 13 10:36:19 linux amavis[28030]: ANTI-VIRUS code loaded
Jun 13 10:36:19 linux amavis[28030]: ANTI-SPAM code loaded
Jun 13 10:36:19 linux amavis[28030]: Unpackers code loaded
Jun 13 10:36:19 linux amavis[28030]: Found $file at /usr/bin/file
Jun 13 10:36:19 linux amavis[28030]: Found $dspam at /opt/zimbra/dspam/bin/dspam
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .mail
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .asc
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .uue
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .hqx
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .ync
Jun 13 10:36:19 linux amavis[28030]: No decoder for .F tried: unfreeze, freeze -d, melt, fcat
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .Z at /usr/bin/gzip -d
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .gz
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .bz2 at /usr/bin/bzip2 -d
Jun 13 10:36:19 linux amavis[28030]: No decoder for .lzo tried: lzop -d
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .rpm at /usr/bin/rpm2cpio
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .cpio at /usr/bin/pax
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .tar at /usr/bin/pax
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .deb at /usr/bin/ar
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .zip
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .rar at /usr/bin/unrar
Jun 13 10:36:19 linux amavis[28030]: No decoder for .arj tried: arj, unarj
Jun 13 10:36:19 linux amavis[28030]: No decoder for .arc tried: nomarch, arc
Jun 13 10:36:19 linux amavis[28030]: No decoder for .zoo tried: zoo
Jun 13 10:36:19 linux amavis[28030]: No decoder for .lha tried: lha
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .cab at /usr/bin/cabextract
Jun 13 10:36:19 linux amavis[28030]: No decoder for .tnef tried: tnef
Jun 13 10:36:19 linux amavis[28030]: Internal decoder for .tnef
Jun 13 10:36:19 linux amavis[28030]: Found decoder for .exe at /usr/bin/unrar
Jun 13 10:36:19 linux amavis[28030]: Using internal av scanner code for (primary) ClamAV-clamd
Jun 13 10:36:19 linux amavis[28030]: Creating db in /opt/zimbra/amavisd/db/; BerkeleyDB 0.27, libdb 4.2
Jun 13 10:36:19 linux amavis[28030]: SpamControl: initializing Mail::SpamAssassin
Jun 13 10:36:24 linux amavis[28030]: SpamControl: done
Jun 13 10:36:29 linux clamd[28155]: Daemon started.
Jun 13 10:36:29 linux clamd[28155]: clamd daemon 0.88 (OS: linux-gnu, ARCH: i386, CPU: i686)
Jun 13 10:36:29 linux clamd[28155]: Log file size limited to 20971520 bytes.
Jun 13 10:36:29 linux clamd[28155]: Reading databases from /opt/zimbra/clamav/db
Jun 13 10:36:31 linux clamd[28155]: Protecting against 59663 viruses.
Jun 13 10:36:31 linux postfix/postfix-script: refreshing the Postfix mail system


I restart the antivurus with the zmantivirusctl comman and everything seems to be fine

[jholder]

So does this happen randomly? or just one time?

I think this is your problem:

  Jun 13 10:34:42 linux postfix/postmap[27663]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:34:46 linux postfix/postsuper[27665]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:34:48 linux postfix/postalias[27668]: fatal: bad numerical configuration: message_size_limit =
Jun 13 10:34:49 linux postfix[27670]: fatal: bad numerical configuration: message_size_limit =

[kowell]

It just happend 1 day ago and havent happend again

[jholder]

Well, if it happens again, let me know and we'll investigate.

john

[kowell]

today the error that stop my antivirus is other

here is the log


Jun 14 11:22:51 linux postfix/qmgr[756]: 4CB96564E1: from=<forums@zimbra.com>, size=1975, nrcpt=1 (queue active)
Jun 14 11:22:51 linux postfix/qmgr[756]: E8B5E543ED: from=<>, size=10960, nrcpt=1 (queue active)
Jun 14 11:22:51 linux amavis[645]: (00645-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645: <> -> <m_l758tn4_@linux.site> Received: SIZE=10960 from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00645-01 for <m_l758tn4_@linux.site>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
Jun 14 11:22:51 linux amavis[644]: (00644-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644: <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org> Received: SIZE=1975 BODY=8BITMIME from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00644-01 for <mathiaskowoll@subox.zapto.org>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
Jun 14 11:22:51 linux amavis[644]: (00644-01) Checking: 8TPygBaWPGvO [4.78.240.39] <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org>
Jun 14 11:22:51 linux amavis[645]: (00645-01) Checking: C6CKSuh94vL5 [201.215.213.14] <> -> <m_l758tn4_@linux.site>
Jun 14 11:22:51 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
Jun 14 11:22:51 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
Jun 14 11:22:52 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
Jun 14 11:22:52 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
Jun 14 11:22:58 linux amavis[644]: (00644-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[644]: (00644-01) WARN: all primary virus scanners failed, considering backups
Jun 14 11:22:58 linux amavis[644]: (00644-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[644]: (00644-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644
Jun 14 11:22:58 linux amavis[644]: (00644-01) extra modules loaded: Net/LDAP/Bind.pm
Jun 14 11:22:58 linux postfix/smtp[17545]: 4CB96564E1: to=<mathiaskowoll@subox.zapto.org>, relay=127.0.0.1[127.0.0.1], delay=1721, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00644-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command))
Jun 14 11:22:58 linux amavis[645]: (00645-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[645]: (00645-01) WARN: all primary virus scanners failed, considering backups
Jun 14 11:22:58 linux amavis[645]: (00645-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[645]: (00645-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645
Jun 14 11:22:58 linux amavis[645]: (00645-01) extra modules loaded: Net/LDAP/Bind.pm
Jun 14 11:22:58 linux postfix/smtp[17547]: E8B5E543ED: to=<m_l758tn4_@linux.site>, relay=127.0.0.1[127.0.0.1], delay=1822, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00645-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command)


P.S. Ypu can delete this thread http://www.zimbra.com/forums/showthread.php?t=3372
it has the same information (sorry ithink is better to treat all the anitvirus problems in one post an not all separatly )

[jholder]

Okay,
It looks like it the error I posted above. . .unfortunetly, I don't have the config file.

I would suggest a reinstall because I"m sure it doesn't save the config.

john

Originally Posted by kowell

today the error that stop my antivirus is other

here is the log


Jun 14 11:22:51 linux postfix/qmgr[756]: 4CB96564E1: from=<forums@zimbra.com>, size=1975, nrcpt=1 (queue active)
Jun 14 11:22:51 linux postfix/qmgr[756]: E8B5E543ED: from=<>, size=10960, nrcpt=1 (queue active)
Jun 14 11:22:51 linux amavis[645]: (00645-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645: <> -> <m_l758tn4_@linux.site> Received: SIZE=10960 from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00645-01 for <m_l758tn4_@linux.site>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
Jun 14 11:22:51 linux amavis[644]: (00644-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644: <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org> Received: SIZE=1975 BODY=8BITMIME from subox.zapto.org ([127.0.0.1]) by localhost (subox.zapto.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00644-01 for <mathiaskowoll@subox.zapto.org>; Wed, 14 Jun 2006 11:22:51 -0400 (CLT)
Jun 14 11:22:51 linux amavis[644]: (00644-01) Checking: 8TPygBaWPGvO [4.78.240.39] <forums@zimbra.com> -> <mathiaskowoll@subox.zapto.org>
Jun 14 11:22:51 linux amavis[645]: (00645-01) Checking: C6CKSuh94vL5 [201.215.213.14] <> -> <m_l758tn4_@linux.site>
Jun 14 11:22:51 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
Jun 14 11:22:51 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
Jun 14 11:22:52 linux amavis[644]: (00644-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
Jun 14 11:22:52 linux amavis[645]: (00645-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
Jun 14 11:22:58 linux amavis[644]: (00644-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[644]: (00644-01) WARN: all primary virus scanners failed, considering backups
Jun 14 11:22:58 linux amavis[644]: (00644-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[644]: (00644-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00644
Jun 14 11:22:58 linux amavis[644]: (00644-01) extra modules loaded: Net/LDAP/Bind.pm
Jun 14 11:22:58 linux postfix/smtp[17545]: 4CB96564E1: to=<mathiaskowoll@subox.zapto.org>, relay=127.0.0.1[127.0.0.1], delay=1721, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00644-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command))
Jun 14 11:22:58 linux amavis[645]: (00645-01) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[645]: (00645-01) WARN: all primary virus scanners failed, considering backups
Jun 14 11:22:58 linux amavis[645]: (00645-01) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266.
Jun 14 11:22:58 linux amavis[645]: (00645-01) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20060614T112251-00645
Jun 14 11:22:58 linux amavis[645]: (00645-01) extra modules loaded: Net/LDAP/Bind.pm
Jun 14 11:22:58 linux postfix/smtp[17547]: E8B5E543ED: to=<m_l758tn4_@linux.site>, relay=127.0.0.1[127.0.0.1], delay=1822, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=00645-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 56) line 266. (in reply to end of DATA command)


P.S. Ypu can delete this thread http://www.zimbra.com/forums/showthread.php?t=3372
it has the same information (sorry ithink is better to treat all the anitvirus problems in one post an not all separatly )

[kowell]

if I upgrade to the new version can the error to be fixed???

[jholder]

Oh yeah, I don't doubt it.

It denfenetly looks like a config file error, and it won't be preserved, but will be replaced if you upgrade.

Good luck, and let us know.
Also, it might be a good idea to pvt Phoenix. He's a wealth of knowledge, and might know where that config file is.

thanks,
John

[kowell]

today havent fail the antivirus i will wait a few more days

the last time I upgrade due to errors i mess up everething and couldnt restore my backup (ver. 3.1.2)

[scalper]

My setup is Dual Xeon 3.0s and 4 GB RAM using zimbra NE 4.0.3 RHEL4.. Unfortunately the same thing as above happened to me Twice! Once in 2 weeks..

Everything went back okay after server reboot and services restart.

---------- /var/log/zimbra.log

Nov 29 02:17:08 pluto postfix/qmgr[7831]: D89741F4419: removed
Nov 29 02:17:16 pluto clamd[7736]: Pid file removed.
Nov 29 02:17:16 pluto clamd[7736]: Exiting (clean)
Nov 29 02:17:16 pluto clamd[7736]: --- Stopped at Wed Nov 29 02:17:16 2006
Nov 29 02:18:03 pluto zmtomcatmgr[6128]: status requested
Nov 29 02:18:03 pluto zmtomcatmgr[6128]: status OK
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: antispam: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: antivirus: Stopped
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: logger: Stopped
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: mailbox: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: mta: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: snmp: Running
Nov 29 02:18:03 pluto zimbramon[5989]: 5989:info: 2006-11-29 02:18:01, STATUS: myserver.mydomain: spell: Running
Nov 29 02:18:41 pluto postfix/smtpd[5670]: connect from 71-217-68-211.tukw.qwest.net[71.217.68.211]
Nov 29 02:18:42 pluto postfix/smtpd[5670]: NOQUEUE: reject: RCPT from 71-217-68-211.tukw.qwest.net[71.217.68.211]: 550 <haslin
a@myserver.mydomain>: Recipient address rejected: myserver.mydomain; from=<cconclude@qwest.net> to=<haslina@myserver.mydomain> proto=SMTP helo=<71-
217-68-211.tukw.qwest.net>
Nov 29 02:18:42 pluto postfix/smtpd[5670]: lost connection after RCPT from 71-217-68-211.tukw.qwest.net[71.217.68.211]
Nov 29 02:18:42 pluto postfix/smtpd[5670]: disconnect from 71-217-68-211.tukw.qwest.net[71.217.68.211]
Nov 29 02:19:38 pluto postfix/smtpd[5670]: connect from 200164209142.user.veloxzone.com.br[200.164.209.142]
Nov 29 02:19:44 pluto postfix/smtpd[6540]: connect from unknown[202.184.112.28]
Nov 29 02:19:44 pluto postfix/smtpd[6540]: A3AF51F43CC: client=unknown[202.184.112.28]
Nov 29 02:19:44 pluto postfix/cleanup[6541]: A3AF51F43CC: message-id=<20061128181944.A3AF51F43CC@myserver.mydomain>
Nov 29 02:19:44 pluto postfix/qmgr[7831]: A3AF51F43CC: from=<bounce@promotions.bonuslink.com.my>, size=9381, nrcpt=1 (queue ac
tive)
Nov 29 02:19:44 pluto amavis[26582]: (26582-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T021027-26582: <bounce@pro
motions.bonuslink.com.my> -> <safuan@myserver.mydomain> SIZE=9381 Received: from myserver.mydomain ([127.0.0.1]) by localhost (pluto.c
nc.net.my [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <safuan@myserver.mydomain>; Wed, 29 Nov 2006 02:19:44 +0800 (MYT)
Nov 29 02:19:44 pluto postfix/smtpd[6540]: disconnect from unknown[202.184.112.28]
Nov 29 02:19:44 pluto amavis[26582]: (26582-02) Checking: fGOXm2Okd4lY [202.184.112.28] <bounce@promotions.bonuslink.com.my> -
> <safuan@myserver.mydomain>
Nov 29 02:19:44 pluto amavis[26582]: (26582-02) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused,
 retrying (1)
Nov 29 02:19:45 pluto amavis[26582]: (26582-02) (!) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refu
sed, retrying (2)
Nov 29 02:19:47 pluto postfix/smtpd[5670]: 448251F4419: client=200164209142.user.veloxzone.com.br[200.164.209.142]
Nov 29 02:19:49 pluto postfix/cleanup[6541]: 448251F4419: message-id=<01c71319$6d2b1a80$6c822ecf@comnet>
Nov 29 02:19:49 pluto postfix/qmgr[7831]: 448251F4419: from=<comnet@jal1.telmex.net.mx>, size=1318, nrcpt=1 (queue active)
Nov 29 02:19:49 pluto amavis[28175]: (28175-04) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T002247-28175: <comnet@jal
1.telmex.net.mx> -> <jamaliah@myserver.mydomain> SIZE=1318 Received: from myserver.mydomain ([127.0.0.1]) by localhost (pluto.cnc.net.
my [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <jamaliah@myserver.mydomain>; Wed, 29 Nov 2006 02:19:49 +0800 (MYT)
Nov 29 02:19:49 pluto amavis[28175]: (28175-04) Checking: gLbA5f1TjBA6 [200.164.209.142] <comnet@jal1.telmex.net.mx> -> <jamal
iah@myserver.mydomain>
Nov 29 02:19:49 pluto amavis[28175]: (28175-04) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused,
 retrying (1)
Nov 29 02:19:50 pluto amavis[28175]: (28175-04) (!) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refu
sed, retrying (2)
Nov 29 02:19:51 pluto postfix/smtpd[5670]: disconnect from 200164209142.user.veloxzone.com.br[200.164.209.142]
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:331
0 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 44) line 268.
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) WARN: all primary virus scanners failed, considering backups
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!!) TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS
FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:331
0: Connection refused) at (eval 44) line 268.
Nov 29 02:19:51 pluto amavis[26582]: (26582-02) (!) PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20061129T021027-2658
2
Nov 29 02:19:52 pluto postfix/smtp[6542]: A3AF51F43CC: to=<safuan@myserver.mydomain>, relay=127.0.0.1[127.0.0.1], delay=8, status=def
erred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=26582-02, virus_scan FAILED: virus_scan: ALL VIRUS SC
ANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.
0.1:3310: Connection refused) at (eval 44) line 268. (in reply to end of DATA command))
Nov 29 02:19:56 pluto amavis[28175]: (28175-04) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:331
0 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 44) line 268.

I wonder why clamd exiting by itself.. Have any pointers?