Results 1 to 3 of 3

Thread: Antispam is running but is not filtering messages

  1. #1
    rcanto is offline Intermediate Member
    Join Date
    Jul 2012
    Posts
    20
    Rep Power
    3

    Default Antispam is running but is not filtering messages

    Hi people.

    After that I reinstalled Zimbra on my server using upgrade mode (the same zimbra version 7.2.0), the antispam service stopped to filter messages. The antispam service started, but messages aren't being moved to spam box and aren't being scored like spam in theirs headers. I cound't find any error messages related in the /var/log/zimbra.log. See below the results of theses comands:

    Code:
    [zimbra@server ~]$ zmcontrol -v                
    Release 7.2.0_GA_2669.RHEL6_64_20120410002025 CentOS6_64 FOSS edition.
    Code:
    [zimbra@server ~]$ zmprov gs `zmhostname` | grep zimbraServiceEnabled
    zimbraServiceEnabled: antivirus
    zimbraServiceEnabled: antispam
    zimbraServiceEnabled: logger
    zimbraServiceEnabled: mailbox
    zimbraServiceEnabled: mta
    zimbraServiceEnabled: stats
    zimbraServiceEnabled: snmp
    zimbraServiceEnabled: ldap
    zimbraServiceEnabled: spell
    Code:
    [zimbra@server ~]$ zmcontrol status
    Host server.domain.com
            antispam                	Running
            antivirus               	Running
            ldap                    	Running
            logger                  	Running
            mailbox                 	Running
            mta                     	Running
            snmp                         Running
            spell                   	Running
            stats                   	Running
            zmconfigd               	Running
    Code:
    [zimbra@server ~]$ zmantispamctl stop
    Stopping amavisd... done.
    [zimbra@server ~]$ zmantispamctl status
    zmamavisdctl is not running
    [zimbra@server ~]$ zmantispamctl start 
    Starting amavisd...done.
    [zimbra@server ~]$ zmantispamctl status
    [zimbra@server ~]$
    Code:
    [zimbra@server ~]$  zmantivirusctl status
    [zimbra@server ~]$  zmantivirusctl stop  
    Stopping freshclam...done.
    Stopping clamd...done.
    [zimbra@server ~]$  zmantivirusctl start
    Starting amavisd...amavisd is already running.
    Starting freshclam...done.
    Starting clamd...done.
    [zimbra@server ~]$  zmantivirusctl status
    [zimbra@server ~]$
    Somebody knows what is going on?

    Thanks for your help.

    Rodrigo

  2. #2
    rcanto is offline Intermediate Member
    Join Date
    Jul 2012
    Posts
    20
    Rep Power
    3

    Default

    I found just now some errors in logs files:

    [root@server log]# cat /var/log/zimbra.log |grep -i failed
    Oct 1 14:07:32 zimbra amavis[13898]: (13898-02) (!!)WARN: all primary virus scanners failed, considering backups
    Oct 1 14:07:32 zimbra amavis[13898]: (13898-02) (!!)TROUBLE in check_mail: virus_scan FAILED: AV: ALL VIRUS SCANNERS FAILED
    Oct 1 14:07:32 zimbra postfix/smtp[6285]: 4DC1341B8042: to=<fulano@domain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=7.1, delays=0.05/0/0/7.1, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=13898-02, virus_scan FAILED: AV: ALL VIRUS SCANNERS FAILED (in reply to end of DATA command))
    Oct 1 14:08:07 zimbra amavis[13898]: (13898-03) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET4 socket 127.0.0.1:3310: Connection refused) at (eval 99) line 375.\n

    [root@server log]# cat /var/log/zimbra.log |grep -i "clamav"
    Oct 1 14:06:22 zimbra amavis[13847]: Using primary internal av scanner code for ClamAV-clamd
    Oct 1 14:07:25 zimbra amavis[13898]: (13898-02) ClamAV-clamd: Can't connect to INET4 socket 127.0.0.1:3310: Connection refused, retrying (1)
    Oct 1 14:07:26 zimbra amavis[13898]: (13898-02) (!)ClamAV-clamd: Can't connect to INET4 socket 127.0.0.1:3310: Connection refused, retrying (2)
    Oct 1 14:07:32 zimbra amavis[13898]: (13898-02) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET4 socket 127.0.0.1:3310: Connection refused) at (eval 99) line 375.\n

  3. #3
    rcanto is offline Intermediate Member
    Join Date
    Jul 2012
    Posts
    20
    Rep Power
    3

    Default

    SOLVED

    I tried this procedure discribed in another thread:

    Code:
    su - zimbra
    mkdir /tmp/clamdb
    mv /opt/zimbra/clamav/db/* /tmp/clamdb
    /opt/zimbra/clamav/bin/freshclam --config-file=/opt/zimbra/conf/freshclam.conf
    zmamavisdctl stop
    zmamavisdctl start
    and now the spamfilter is working fine. I think that clamav definitions database was corrupted...

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Antispam is not running and Antivirus is not running
    By voxuantupc in forum Administrators
    Replies: 0
    Last Post: 06-18-2012, 06:04 PM
  2. Filtering addresses on outgoing messages
    By erme2 in forum Zimlets
    Replies: 1
    Last Post: 06-30-2011, 09:44 AM
  3. antispam & antivirus not running... error perl
    By rollan in forum Administrators
    Replies: 5
    Last Post: 10-08-2010, 11:23 PM
  4. Antispam Service is running,but still getting spam mails
    By breejesh in forum Administrators
    Replies: 2
    Last Post: 04-06-2010, 12:47 AM
  5. Poor antispam filtering
    By shankwc in forum Administrators
    Replies: 6
    Last Post: 08-20-2007, 08:56 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •