Topic: clamd.amavisd go crazy ?
==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.9 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: CentOS Linux release 7.6.1810 (Core)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hi,
this morning i found a problem over my mail server.
A friend of mine, who has a box on my server, informed me that he does not receive any email during the evening / afternoon and therefore very late.
I tried to send me a test email and I confirm that the email is received but then ends up waiting to be scanned by the antivirus and then thrown into my mailbox.
Checking the email queue results in more than 600 waiting emails.
I found the following errors:
From /var/log/maillog :
Aug 7 10:59:41 srv-main amavis[1681]: (01681-05) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 7 10:59:41 srv-main amavis[1682]: (01682-06) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 7 10:59:41 srv-main amavis[1682]: (01682-06) (!)clamav-socket: All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket, retrying (2)
Aug 7 10:59:42 srv-main amavis[1681]: (01681-05) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 7 10:59:42 srv-main amavis[1681]: (01681-05) (!)clamav-socket: All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket, retrying (2)
Aug 7 10:59:47 srv-main amavis[1682]: (01682-06) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 7 10:59:47 srv-main amavis[1682]: (01682-06) (!)clamav-socket av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamd.amavisd/clamd.socket (All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket) at (eval 110) line 659.\n
Aug 7 10:59:47 srv-main amavis[1682]: (01682-06) (!)WARN: all primary virus scanners failed, considering backups
Aug 7 10:59:48 srv-main amavis[1681]: (01681-05) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 7 10:59:48 srv-main amavis[1681]: (01681-05) (!)clamav-socket av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamd.amavisd/clamd.socket (All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket) at (eval 110) line 659.\n
Aug 7 10:59:48 srv-main amavis[1681]: (01681-05) (!)WARN: all primary virus scanners failed, considering backupsand that from systemctl status amavisd.service -l :
[root@srv-main ~]# systemctl status amavisd.service -l
● amavisd.service - Amavisd-new is an interface between MTA and content checkers.
Loaded: loaded (/usr/lib/systemd/system/amavisd.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2019-08-07 10:41:39 CEST; 16min ago
Docs: http://www.ijs.si/software/amavisd/#doc
Process: 932 ExecStart=/usr/sbin/amavisd -c /etc/amavisd/amavisd.conf (code=exited, status=0/SUCCESS)
Main PID: 1554 (/usr/sbin/amavi)
CGroup: /system.slice/amavisd.service
├─1554 /usr/sbin/amavisd (master
├─1681 /usr/sbin/amavisd (ch4-01681-04-3
├─1682 /usr/sbin/amavisd (ch5-01682-05-2
├─2930 /usr/bin/clamscan --stdout --disable-summary -r --tempdir=/var/spool/amavisd/tmp /var/spool/amavisd/tmp/amavis-20190807T104726-01681-U6lNhcrw/parts
└─2931 /usr/bin/clamscan --stdout --disable-summary -r --tempdir=/var/spool/amavisd/tmp /var/spool/amavisd/tmp/amavis-20190807T104532-01682-AHb5q3NO/parts
Aug 07 10:56:32 srv-main.magri.email amavis[1681]: (01681-04-3) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 07 10:56:32 srv-main.magri.email amavis[1681]: (01681-04-3) (!)clamav-socket: All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket, retrying (2)
Aug 07 10:56:33 srv-main.magri.email amavis[1682]: (01682-05-2) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 07 10:56:33 srv-main.magri.email amavis[1682]: (01682-05-2) (!)clamav-socket: All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket, retrying (2)
Aug 07 10:56:38 srv-main.magri.email amavis[1681]: (01681-04-3) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 07 10:56:38 srv-main.magri.email amavis[1681]: (01681-04-3) (!)clamav-socket av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamd.amavisd/clamd.socket (All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket) at (eval 110) line 659.\n
Aug 07 10:56:38 srv-main.magri.email amavis[1681]: (01681-04-3) (!)WARN: all primary virus scanners failed, considering backups
Aug 07 10:56:39 srv-main.magri.email amavis[1682]: (01682-05-2) (!)connect to /var/run/clamd.amavisd/clamd.socket failed, attempt #1: Can't connect to a UNIX socket /var/run/clamd.amavisd/clamd.socket: No such file or directory
Aug 07 10:56:39 srv-main.magri.email amavis[1682]: (01682-05-2) (!)clamav-socket av-scanner FAILED: run_av error: Too many retries to talk to /var/run/clamd.amavisd/clamd.socket (All attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.socket) at (eval 110) line 659.\n
Aug 07 10:56:39 srv-main.magri.email amavis[1682]: (01682-05-2) (!)WARN: all primary virus scanners failed, considering backupsOnly action from my side during last month is yum update over the server and few reboot.
How i can solve that issue ? The load avarage still abnormaly high :-(
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.