[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SOLVED] Re: Problems with Exim av_scanner using a separate ClamAV server



In <[🔎] 200905282135.16143.bss@iguanasuicide.net>, Boyd Stephen Smith Jr. wrote:
>In <[🔎] 200905281654.47500.bss@iguanasuicide.net>, Boyd Stephen Smith Jr. 
wrote:
>>I'm getting errors in my /var/log/exim4/paniclog:
>>2009-05-28 20:15:17 1M9m0T-00059K-21 malware acl condition: clamd:
>>connection to 172.20.2.91, port 1189 failed (Connection refused)
>>2009-05-28 20:18:42 1M9m3l-0005GE-PF malware acl condition: clamd:
>>connection to 172.20.2.91, port 1114 failed (Connection refused)
>>2009-05-28 20:19:25 1M9m4T-0005GL-94 malware acl condition: clamd:
>>connection to 172.20.2.91, port 1520 failed (Connection refused)
>>
>>Notice that the port varies, for some reason.

This is part of the clamd protocol.  Exim is using the "STREAM" command, 
which has the data to be scanned sent on a dynamic port chosen by the 
server.

You can adjust the range of ports chosen in your clamd.conf.

It is possible for the client to use an INSTREAM command, but there doesn't 
appear to be a way to configure exim for this right now.  (Or, at least, it 
is not mentioned in the documention.)

>Not finding a solution after much googling and not hearing anymore from
> the list, I went ahead and filed a bug: 530963.  Feel free to add any
> helpful information there.

This bug should be closed soon.  I included the information about my fix 
there to anyone that might run into this in the future.

>I also attempted contact with the exim-users list.

My thanks to Graeme Fowler from that list, who got me pointed in the right 
direction.
-- 
Boyd Stephen Smith Jr.           	 ,= ,-_-. =.
bss@iguanasuicide.net            	((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy 	 `-'(. .)`-'
http://iguanasuicide.net/        	     \_/

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: