Bug#426117: exim4: unable to connect /var/run/clamav/clamd.ctl, but /var/run/clamav/clamd.ctl exists

[Marc Haber]

On Sun, May 27, 2007 at 03:52:20PM +0200, Axel Ludszuweit wrote:
> Marc Haber wrote:
>  > On Sat, May 26, 2007 at 02:10:07PM +0200, Axel Ludszuweit wrote:
> 
>  > What happens when you connect to the daemon from a shell? Are the
>  > privileges on the directory OK?
> Please can you explain me, what do you mean with
> "connect to the daemon from a shell"

Connect "manually" to the clamav socket and talk directly to the
daemon. A helper program like socat should do the trick. If you cannot
do this due to lack of knowledge, the issue is hard to debug.

> But I think, that will be working, because mail sent and transmit
> after booting works too.
> The error message in /var/log/exim4/paniclog only appears after
> system start, when the first mails should be fetched by fetchmail.
> The appropriate messages in /var/log/exim4/mainlog are:
> 
> 2007-05-26 13:34:30 1HruXV-0001pP-QY malware acl condition: clamd: unable to connect to UNIX socket /var/run/clamav/clamd.ctl (No such file or directory)
> 2007-05-26 13:34:30 1HruXV-0001pP-QY H=localhost (graf-zahl.sesamstrasse.ludszuweit) [127.0.0.1] U=fetchmail 
> F=<bounce-768044_HTML-109685665-4533262-49688-0 at bounce.divx-newsletters.com> temporarily rejected after DATA
> 
> The rejected mails will be received at the next trial.
> And after this, it seems to be worked correct.

Could this be a laod problem? Too many messages dumped on clamav in
too short time?

Does the issue happen after the fifteenth message delivered by
fetchmail? Did you follow one of the bad HOWTOS out there which
instructed you to mess around with exim's load control features?


>  > drwxr-xr-x 13 root   root   4,0K 2002-07-23 12:35 /var//
> 
> axel at graf-zahl:~$ ls -l / | grep var
> drwxr-xr-x  16 root root   4096 2006-06-10 19:47 var
> 
>  > drwxr-xr-x 13 root   root   4,0K 2007-05-26 07:44 /var/run//
> 
> axel at graf-zahl:~$ ls -l /var | grep run
> drwxr-xr-x 23 root root  4096 2007-05-26 13:34 run
> 
>  > drwxr-xr-x  2 clamav clamav 4,0K 2007-05-02 12:44 /var/run/clamav//
> 
> axel at graf-zahl:~$ ls -l /var/run | grep clamav
> drwxr-xr-x 2 clamav      clamav      4096 2007-05-26 13:34 clamav
> 
>  > srwxrwxrwx  1 clamav clamav    0 2007-05-02 12:44 /var/run/clamav/clamd.ctl=
> 
> axel at graf-zahl:~$ ls -l /var/run/clamav/clamd.ctl
> srwxrwxrwx 1 clamav clamav 0 2007-05-26 13:34 /var/run/clamav/clamd.ctl

Looks good.

>  > Which packages got updated during that update?
> 
> I dont know it anymore.

check your system, aptitude and dpkg logs.

>  > Can you strace clamd and/or exim and see whether this gives any
>  > conclusive information?
> 
> Please can you give me instructions, how can I give you these information.
> Must I shutdown exim4, fetchmail, spam assassin and clamd services and restart
> these manually with strace command?

You can use strace -p to attach to an already running process.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190