[SOLVED] Can't enable anti-virus

[simonb]

I upgraded Zimbra from 5.x to 6.0.7_GA_2473.RHEL5_64_20100616215237 CentOS5_64 FOSS edition. Anti-virus was disabled at the time of the upgrade. All went OK except there the SSL cert wasn't copied over. Once this was resolved Zimbra works OK.

The problem is that I can't now re-enable AV. If I try using the Admin GUI I tick the box, when I go back to the services dialogue the box is still unchecked, although "zimbraServiceEnabled: Antivirus" now shows up in zmprov gs `zmhostname`.

zmcontrol status shows Antivirus stopped, even after I apparently have started it. zmclamdctl and zmamavisdctl show they are running. I can quite happily send and receive the eircom virus so I guess that means antivirus really isn't working.

I would like to try re-runing the install script with AV enabled but unfortunately stopping Zimbra for that long isn't an option now.

I have attached the clamd.log file.

zmantivirusctl start
Starting zmmtaconfig...zmmtaconfig is already running.
Starting amavisd...amavisd is already running.
Starting freshclam...done.
Starting clamd...done.

zmcontrol status
        Antivirus               Stopped
        antispam                Running
        ldap                    Running
        logger                  Running
        mailbox                 Running
        mta                     Running
        snmp                    Running
        spell                   Running
        stats                   Running

zmclamdctl status
clamd is running.

zmamavisdctl status
amavisd is running.

zimbra.log after antivirus start...

Jul 14 09:07:35 fyodor clamd[31038]: clamd daemon 0.96-broken-compiler (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Jul 14 09:07:35 fyodor clamd[31038]: Log file size limited to 20971520 bytes.
Jul 14 09:07:35 fyodor clamd[31038]: Reading databases from /opt/zimbra/data/clamav/db
Jul 14 09:07:35 fyodor clamd[31038]: Not loading PUA signatures.
Jul 14 09:07:42 fyodor clamd[31038]: Loaded 806718 signatures.
Jul 14 09:07:42 fyodor clamd[31038]: TCP: Bound to port 3310
Jul 14 09:07:42 fyodor clamd[31038]: TCP: Setting connection queue length to 15
Jul 14 09:07:42 fyodor clamd[31045]: Limits: Global size limit set to 104857600 bytes.
Jul 14 09:07:42 fyodor clamd[31045]: Limits: File size limit set to 104857600 bytes.
Jul 14 09:07:42 fyodor clamd[31045]: Limits: Recursion level limit set to 16.
Jul 14 09:07:42 fyodor clamd[31045]: Limits: Files limit set to 10000.
Jul 14 09:07:42 fyodor clamd[31045]: Archive support enabled.
Jul 14 09:07:42 fyodor clamd[31045]: Archive: Blocking encrypted archives.
Jul 14 09:07:42 fyodor clamd[31045]: Algorithmic detection enabled.
Jul 14 09:07:42 fyodor clamd[31045]: Portable Executable support enabled.
Jul 14 09:07:42 fyodor clamd[31045]: ELF support enabled.
Jul 14 09:07:42 fyodor clamd[31045]: Mail files support enabled.
Jul 14 09:07:42 fyodor clamd[31045]: OLE2 support enabled.
Jul 14 09:07:42 fyodor clamd[31045]: PDF support enabled.
Jul 14 09:07:42 fyodor clamd[31045]: HTML support enabled.
Jul 14 09:07:42 fyodor clamd[31045]: Self checking every 600 seconds.

[Dirk]

I think it's linked to the AV not being enabled at install time, so its not been upgraded. If I'm right, you'll need to bring the server offline, then enable AV via a zmprov command, then run the install again which will correctly sort out the AV files.

[simonb]

Thanks. I had a hunch it was something to do with the upgrade. I have a time slot this evening to try it out. Will let you know how I get on.

[simonb]

Re-running the install script did indeed solve the problem.

Anti-virus didn't fully start by starting Zimbra with zmcontrol start but issuing a "zmantivirusctl start" started it and it restarted with Zimbra after that.