1 Topic by Noah

  • Noah
  • Member
  • Offline
  • Registered: 2013-03-26
  • Posts: 14

Topic: Disable or uninstall ClamAV

==== Required information ====
- iRedMail version: 0.8.3
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Ubuntu 12.04
- Related log if you're reporting an issue:
====

I'd like to disable and uninstall Clamav. Will uninstalling it prevent things from working or produce errors.

The wiki on this is out of date, as the config file it refers to is out of date and there are now about 6 config files.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,069

Re: Disable or uninstall ClamAV

Sorry, which wiki tutorial did you check?

3 Reply by Noah

  • Noah
  • Member
  • Offline
  • Registered: 2013-03-26
  • Posts: 14

Re: Disable or uninstall ClamAV

http://www.iredmail.org/wiki/index.php? … ble.ClamAV

Is the wiki article I read, and I read the same in many posts.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,069

Re: Disable or uninstall ClamAV

Hi Noah,

I updated the wiki tutorial, could you please try again?
http://www.iredmail.org/wiki/index.php? … ble.ClamAV

5 Reply by Noah

  • Noah
  • Member
  • Offline
  • Registered: 2013-03-26
  • Posts: 14

Re: Disable or uninstall ClamAV

Hi,

I put the code in the second line of 50-user and restarted amavisav. That did not start ClamAV, but I could not send or receive mail (except mail from the system to postmaster). I rebooted the machine and ClamAV was running. I killed it, and was able to send and receive email!

However, my I could hardly do anything on my system without getting Fatal Errors due to memory. So I unistalled clamav, rebooted, and clams was there again. Not sure how to get rid of it.

6 Reply by Noah (edited by Noah 2013-03-28 02:13:10)

  • Noah
  • Member
  • Offline
  • Registered: 2013-03-26
  • Posts: 14

Re: Disable or uninstall ClamAV

I used these commands

update-rc.d -f clamav-daemon remove
update-rc.d -f clamav-freshclam remove

And rebooted, and sure enough, no ClamAV and no RAM problems.

But I can't send or receive email.

EDIT: Scratch that, yes I can. I guess it had to warm up.

7 Reply by Noah (edited by Noah 2013-03-28 03:28:24)

  • Noah
  • Member
  • Offline
  • Registered: 2013-03-26
  • Posts: 14

Re: Disable or uninstall ClamAV

Crap, looks like I spoke too soon again. I can send mail to anyone on my server, no problem. But I can't seem to receive or send outside it.

EDIT: I was also able to send mail to an iCloud account, but it was not able to reply. (Delivery Notification: Delivery has failed)

Trying to send to Gmail gets an error and it won't leave the Outbox. I will update with logs in a minute.

8 Reply by Noah (edited by Noah 2013-03-28 03:39:17)

  • Noah
  • Member
  • Offline
  • Registered: 2013-03-26
  • Posts: 14

Re: Disable or uninstall ClamAV

Mar 27 23:23:45 server1 postfix/smtpd[1629]: warning: connect to 127.0.0.1:10031: Connection refused
Mar 27 23:23:45 server1 postfix/smtpd[1629]: warning: problem talking to server 127.0.0.1:10031: Connection refused
Mar 27 23:23:46 server1 postfix/smtpd[1629]: warning: connect to 127.0.0.1:10031: Connection refused
Mar 27 23:23:46 server1 postfix/smtpd[1629]: warning: problem talking to server 127.0.0.1:10031: Connection refused
Mar 27 23:23:46 server1 postfix/smtpd[1629]: NOQUEUE: reject: RCPT from S0106b88d1259b6c3.vc.MYISP.net[123.456.789]: 451 4.3.5 Server configuration problem; from=<noah@VIRTUALDOMAIN1.com> to=<SOMEONE@gmail.com> proto=ESMTP helo=<[10.0.1.12]>
Mar 27 23:23:46 server1 postfix/smtpd[1629]: disconnect from S0106b88d1259b6c3.vc.MYISP.net[123.456.789]
Mar 27 23:27:06 server1 postfix/anvil[1631]: statistics: max connection rate 2/60s for (smtp:123.456.789) at Mar 27 23:23:44
Mar 27 23:27:06 server1 postfix/anvil[1631]: statistics: max connection count 1 for (smtp:123.456.789) at Mar 27 23:23:35
Mar 27 23:27:06 server1 postfix/anvil[1631]: statistics: max cache size 1 at Mar 27 23:23:35
Mar 27 23:28:05 server1 postfix/smtpd[1642]: connect from S0106b88d1259b6c3.vc.MYISP.net[123.456.789]
Mar 27 23:28:05 server1 postfix/smtpd[1644]: connect from S0106b88d1259b6c3.vc.MYISP.net[123.456.789]
Mar 27 23:28:06 server1 postfix/smtpd[1644]: disconnect from S0106b88d1259b6c3.vc.MYISP.net[123.456.789]
Mar 27 23:28:06 server1 postfix/smtpd[1642]: disconnect from S0106b88d1259b6c3.vc.MYISP.net[123.456.789]
Mar 27 23:28:48 server1 postfix/qmgr[597]: 8A2C55420043: from=<>, size=2571, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 0ADD65420034: from=<>, size=2571, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 0BB835420047: from=<>, size=2571, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 2B96F54238CB: from=<>, size=2635, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 2C1F254238CE: from=<>, size=2635, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 9F98F54207B5: from=<>, size=2571, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 9CF6D54207B4: from=<>, size=2571, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: E95E954238C7: from=<>, size=2635, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 1D42354200C6: from=<>, size=2571, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/qmgr[597]: 1DF0C54207B3: from=<>, size=2571, nrcpt=1 (queue active)
Mar 27 23:28:48 server1 postfix/local[1653]: 8A2C55420043: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=21637, delays=21637/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1654]: 0ADD65420034: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=17437, delays=17437/0/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1653]: 2B96F54238CB: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=25837, delays=25837/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1654]: 0BB835420047: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=17437, delays=17437/0.01/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1654]: 9F98F54207B5: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=9037, delays=9037/0.02/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1653]: 2C1F254238CE: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=25837, delays=25837/0.02/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1653]: E95E954238C7: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=29929, delays=29929/0.03/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1654]: 9CF6D54207B4: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=9037, delays=9037/0.03/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1653]: 1D42354200C6: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=13237, delays=13237/0.03/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:28:48 server1 postfix/local[1654]: 1DF0C54207B3: to=<smmsp@server1.DOMAIN.net>, relay=local, delay=13237, delays=13237/0.03/0/0.01, dsn=4.3.0, status=deferred (temporary failure)
Mar 27 23:31:26 server1 postfix/anvil[1645]: statistics: max connection rate 2/60s for (submission:123.456.789) at Mar 27 23:28:05
Mar 27 23:31:26 server1 postfix/anvil[1645]: statistics: max connection count 2 for (submission:123.456.789) at Mar 27 23:28:05
Mar 27 23:31:26 server1 postfix/anvil[1645]: statistics: max cache size 1 at Mar 27 23:28:05

9 Reply by Noah (edited by Noah 2013-03-28 05:05:26)

  • Noah
  • Member
  • Offline
  • Registered: 2013-03-26
  • Posts: 14

Re: Disable or uninstall ClamAV

I think the solution is to comment-out 

@bypass_virus_checks_maps = (
   \%bypass_virus_checks,
   \@bypass_virus_checks_acl,
   $bypass_virus_checks_re,
   );

in 50-user. I wrote a complete guide HERE that you can link others to if you want.