I've had an interesting time fo far today since I realised that I had an
empty Inbox this morning.
This is Debian Lenny with Postfix/Amavis
Investigation revealed the following:
Jul 28 06:30:31 vs1 amavis[5509]: (05509-11) (!)ClamAV-clamd: Can't
connect to UNIX socket /var/run/clamav/clamd.ctl: 2, retrying (2)
Jul 28 06:30:31 vs1 amavis[5505]: (05505-11) (!)ClamAV-clamd: Can't
connect to UNIX socket /var/run/clamav/clamd.ctl: 2, retrying (2)
Jul 28 06:30:37 vs1 amavis[5509]: (05509-11) (!!)ClamAV-clamd av-scanner
FAILED: run_av error: Too many retries to talk to
/var/run/clamav/clamd.ctl (Can't con$
Jul 28 06:30:37 vs1 amavis[5509]: (05509-11) (!!)WARN: all primary virus
scanners failed, considering backups
Jul 28 06:30:37 vs1 amavis[5509]: (05509-11) (!!)ClamAV-clamscan
av-scanner FAILED: /usr/bin/clamscan DIED on signal 11 (000b) at (eval
88) line 527.
Jul 28 06:30:37 vs1 kernel: [24637.644098] clamscan[5963]: segfault at 1
ip b753ba17 sp bfff4018 error 4 in libc-2.7.so[b74c5000+158000]
Jul 28 06:30:37 vs1 amavis[5509]: (05509-11) (!!)TROUBLE in check_mail:
virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd
av-scanner FAILE$
Jul 28 06:30:37 vs1 amavis[5509]: (05509-11) (!)PRESERVING EVIDENCE in
/var/lib/amavis/tmp/amavis-20100728T063030-05509
The solution was to upgrade clamav-daemon which I did from the
lenny/volatile repositories.
All the held e-mails have now come rushing through.
I'm not sure what triggered this problem, because I've not been
tinkering with the server for a while now?
Regards, Martin