Topic: Qmail&clamav Can not scan for virus

[Eugene]

I need extremal help .
The trouble comes.
E-mail isn't sending , our SME 9.2 server (with last upgrades)  responds "can't scan for virus" and blocks sending.
We have restarted SME server , a message have missed, e-mail was sending.
After 3 hours the situation have repeated.

I am looking for clamav's logs  and see the horrible picture
....
2018-01-26 14:58:48.905058500 LibClamAV Error: cli_gentempfd: Can't create temporary file /var/tmp/clamav-328b4f6866eecabe7f78a0cd797678c8.tmp: Too many open files
2018-01-26 14:58:51.092371500 LibClamAV Error: cli_gentempfd: Can't create temporary file /var/tmp/clamav-60d5be7652895b59b11ffaf9b2753852.tmp: Too many open files
2018-01-26 14:58:51.169432500 LibClamAV Error: cli_pdf: can't create temporary file /var/tmp/clamav-94f7c84623c8781cc05c587ae8ad4787.tmp/pdf00: Too many open files
....
and so on 30 strings.
It's looks as free space on HDD is out

I do

df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/main-root
                     1000G   28G  922G   3% /
tmpfs                 3.9G     0  3.9G   0% /dev/shm
/dev/md0              239M   74M  153M  33% /boot


Yeap.
We have endless space of free space.

Please help!

[Stefano]

are you using additional signatures?

[Jean-Philippe Pialasse]

Moved to sme 9.x forum

[ReetP]

See this post.

https://forums.contribs.org/index.php/topic,53488.0.html

Awaiting fixed files

[Eugene]

are you using additional signatures?

Yes, clamav's settings by default.

See this post.

https://forums.contribs.org/index.php/topic,53488.0.html

Awaiting fixed files

Thank's a lot!
Will be waiting

[lazydmin]

Hello.
The problem came back.
We had to update our server .
Updating was succesful, but after rebooting we lost our post server.
It simply sends message "Unable to scan for viruses".
There is no  sending of email,  neither receiving.
We restore our SME Server from backup , but upgrading is vital.
Is there some setting of clamav  we should to perform?

[Jean-Philippe Pialasse]

Hi,

Please post log.



Also...

Why reposting on a 2 years old post?
Why creating a new user account each time you post as you present as you were the same person ?

[ReetP]

Why reposting on a 2 years old post?
Why creating a new user account each time you post as you present as you were the same person ?

Probably forgot they had an account!

[lazydmin]

I offer my deepest apologies , Gentlemen.
Our sysadmin's have two accounts here.

All extra registrators are cruelly punished.

But our trouble remains.

It have took  a long time , but we updated our SME one time again for sake of receiving logs after update.

Here it is.

Clamscan.log
----------- SCAN SUMMARY -----------
Known viruses: 6732641
Engine version: 0.100.2
Scanned directories: 3428
Scanned files: 102601
Infected files: 0
Data scanned: 119145.03 MB
Data read: 53873.38 MB (ratio 2.21:1)
Time: 37611.189 sec (626 m 51 s)


smeserver-clamscan.log

LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_scanicon: found 4 invalid icon entries of 6 total
LibClamAV Warning: cli_scanicon: found 4 invalid icon entries of 6 total
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_scanicon: found 1 invalid icon entries of 2 total
LibClamAV Warning: cli_scanicon: found 4 invalid icon entries of 6 total
LibClamAV Warning: cli_scanicon: found 3 invalid icon entries of 5 total
LibClamAV Warning: Bytecode run timed out in interpreter after 25000 opcodes
LibClamAV Warning: Bytecode 62 failed to run: Time limit reached
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN
LibClamAV Warning: cli_tnef: file truncated, returning CLEAN

clamd.current
(we updated our SME at 2020-02-12 12:20)


2020-02-11 23:32:32.722272500 SelfCheck: Database status OK.
2020-02-12 00:23:13.351751500 SelfCheck: Database status OK.
2020-02-12 00:53:13.452667500 SelfCheck: Database status OK.
2020-02-12 01:23:13.552890500 SelfCheck: Database status OK.
2020-02-12 02:01:57.649284500 SelfCheck: Database status OK.
2020-02-12 02:31:57.750295500 SelfCheck: Database status OK.
2020-02-12 03:03:23.786069500 SelfCheck: Database status OK.
2020-02-12 03:33:23.886770500 SelfCheck: Database status OK.
2020-02-12 04:30:40.434577500 SelfCheck: Database status OK.
2020-02-12 05:00:40.534933500 SelfCheck: Database status OK.
2020-02-12 05:45:06.817231500 SelfCheck: Database status OK.
2020-02-12 06:18:37.747997500 SelfCheck: Database status OK.
2020-02-12 06:56:23.822998500 SelfCheck: Database status OK.
2020-02-12 07:26:52.012340500 SelfCheck: Database status OK.
2020-02-12 07:57:36.763283500 SelfCheck: Database status OK.
2020-02-12 08:28:01.904268500 SelfCheck: Database status OK.
2020-02-12 08:58:38.634396500 SelfCheck: Database status OK.
2020-02-12 09:15:23.097913500 Reading databases from /var/clamav
2020-02-12 09:16:46.840508500 Database correctly reloaded (6738109 signatures)
2020-02-12 09:47:35.234565500 SelfCheck: Database status OK.
2020-02-12 10:17:55.797742500 SelfCheck: Database status OK.
2020-02-12 10:48:37.615021500 SelfCheck: Database status OK.
2020-02-12 11:20:21.089711500 SelfCheck: Database status OK.
2020-02-12 11:51:05.567380500 SelfCheck: Database status OK.
2020-02-12 12:20:43.661009500 Waiting for all threads to finish
2020-02-12 12:20:45.035856500 Shutting down the main socket.
2020-02-12 12:20:45.035920500 --- Stopped at Wed Feb 12 12:20:45 2020
2020-02-12 12:20:45.042133500 Closing the main socket.
2020-02-12 12:20:45.042253500 Socket file removed.
2020-02-12 12:23:50.036971500 Limits: Global size limit set to 104857600 bytes.
2020-02-12 12:23:50.044926500 Limits: File size limit set to 31457280 bytes.
2020-02-12 12:23:50.044928500 Limits: Recursion level limit set to 8.
2020-02-12 12:23:50.044929500 Limits: Files limit set to 1500.
2020-02-12 12:23:50.044931500 Limits: Core-dump limit is 0.
2020-02-12 12:23:50.044932500 Limits: MaxEmbeddedPE limit set to 10485760 bytes.
2020-02-12 12:23:50.044933500 Limits: MaxHTMLNormalize limit set to 10485760 bytes.
2020-02-12 12:23:50.044934500 Limits: MaxHTMLNoTags limit set to 2097152 bytes.
2020-02-12 12:23:50.044936500 Limits: MaxScriptNormalize limit set to 5242880 bytes.
2020-02-12 12:23:50.044948500 Limits: MaxZipTypeRcg limit set to 1048576 bytes.
2020-02-12 12:23:50.044949500 Limits: MaxPartitions limit set to 50.
2020-02-12 12:23:50.044951500 Limits: MaxIconsPE limit set to 100.
2020-02-12 12:23:50.044952500 Limits: MaxRecHWP3 limit set to 16.
2020-02-12 12:23:50.044953500 Limits: PCREMatchLimit limit set to 100000.
2020-02-12 12:23:50.044954500 Limits: PCRERecMatchLimit limit set to 5000.
2020-02-12 12:23:50.044956500 Limits: PCREMaxFileSize limit set to 26214400.
2020-02-12 12:23:50.044960500 Archive support enabled.
2020-02-12 12:23:50.044961500 BlockMax heuristic detection disabled.
2020-02-12 12:23:50.044962500 Algorithmic detection enabled.
2020-02-12 12:23:50.044963500 Portable Executable support enabled.
2020-02-12 12:23:50.044965500 ELF support enabled.
2020-02-12 12:23:50.044966500 Mail files support enabled.
2020-02-12 12:23:50.044967500 OLE2 support enabled.
2020-02-12 12:23:50.044968500 PDF support enabled.
2020-02-12 12:23:50.044969500 SWF support enabled.
2020-02-12 12:23:50.044973500 HTML support enabled.
2020-02-12 12:23:50.044974500 XMLDOCS support enabled.
2020-02-12 12:23:50.044975500 HWP3 support enabled.
2020-02-12 12:23:50.044977500 Heuristic: precedence enabled
2020-02-12 12:23:50.044978500 Self checking every 1800 seconds.
2020-02-12 12:23:50.044988500 Listening daemon: PID: 2298
2020-02-12 12:23:50.044989500 MaxQueue set to: 100


qmail logs have not records of sending email - it rejects before.

Sorry for making trouble, but I have not  the clue - what should I do.
Is some file  exceeds  it's size?