#contents
*Virus Scan on Mail Server 3 [#y931b73c]
**clamav を最新版に [#i93c6c16]
してからの様なきがするが、
 MAILER-DAEMON@k222.kuji-clinic.net (Mail Delivery System)
 
 <root@k222.kuji-clinic.net> (expanded from <root>): connect to
    127.0.0.1[127.0.0.1]:10024: Connection refused
というメールが来るようになった。:-)
  % netstat -an すると 有るべきはずの
 tcp4       0      0 127.0.0.1.10025        *.*                    LISTEN
 tcp4       0      0 127.0.0.1.10024        *.*                    LISTEN
二行目が無くなっていた。
 # cat /var/log/all.log すると、                     
 Aug 20 05:53:32 k222 amavis[996]: Using primary internal av scanner code for ClamAV-clamd
 Aug 20 05:53:32 k222 amavis[996]: Found secondary av scanner ClamAV-clamscan at /usr/local/bin/clamscan
 Aug 20 05:53:32 k222 amavis[996]: (!!)TROUBLE in pre_loop_hook: No TEMPBASE directory: /var/amavis/tmp at /usr/local/sbin/amavisd line 9063.
 Aug 20 05:53:32 k222 amavis[996]: (!)_DIE: Suicide () TROUBLE in pre_loop_hook: No TEMPBASE directory: /var/amavis/tmp at /usr/local/sbin/amavisd line 9063.
 Aug 20 05:53:34 k222 kernel: Starting clamav_freshclam.
と有ったので、/var/amavis/tmp を作ってchown clamav:clamav してreboot

portupgrade -a したあと、
 Aug 25 09:24:09 mail amavis[905]: Creating db in /var/amavis/db/; BerkeleyDB 0.39, libdb 4.1
 Aug 25 09:24:09 mail amavis[905]: (!!)TROUBLE in pre_loop_hook: QUARANTINEDIR directory /var/virusmails not writable at /usr/local/sbin/amavisd line 9311.
 Aug 25 09:24:09 mail amavis[905]: (!)_DIE: Suicide () TROUBLE in pre_loop_hook: QUARANTINEDIR directory /var/virusmails not writable at /usr/local/sbin/amavisd line 9311.
 Aug 25 09:24:12 mail kernel: Starting clamav_freshclam.
 Aug 25 09:24:12 mail kernel: Starting mrtg_daemon.
 Aug 25 09:24:13 mail kernel: Daemonizing MRTG ...
となって、10024が出来てないケースがありました。
 mail# chown -R clamav:clamav virusmails/



*Virus Scan on Mail Server 2 [#if98e004]
最近、起動時に、
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: ***********************************************************
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: ***  This version of the ClamAV engine is outdated.     ***
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: *** DON'T PANIC! Read  http://www.clamav.net/support/faq ***
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: ***********************************************************
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: ***********************************************************
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: ***  This version of the ClamAV engine is outdated.     ***
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq ***
 Sep  8 11:22:50 hotshot kernel: LibClamAV Warning: ***********************************************************
 Sep  8 11:22:53 hotshot kernel: Starting clamav_freshclam.
などと、仰るので、http://www.clamav.net/support/faq を見ますと、どうやら、サーバのclamav が腐っている風味・・・

と言うわけで、clamav を最新版にする。

 # portupgrade clamav
 [Updating the portsdb <format:bdb_btree> in /usr/ports ... - 19095 port
 entries found .........1000.........2000.........3000.........4000.........5000......
 ...6000.........7000.........8000.........9000.........10000.........11000..
 .......12000.........13000.........14000.........15000.........16000........
 .17000.........18000.........19000 ..... done]
 #
や、
 # cd /usr/ports/security/clamav
 # make deinstall
 # make reinstall
しても、NG。で、/var/log/clamav.freshclam.log みると、
 --------------------------------------
 freshclam daemon 0.93.3 (OS: freebsd6.3, ARCH: amd64, CPU: amd64)
 ClamAV update process started at Mon Sep  8 13:15:49 2008
 WARNING: Your ClamAV installation is OUTDATED!
 WARNING: Local version: 0.93.3 Recommended version: 0.94
 DON'T PANIC! Read http://www.clamav.net/support/faq
 main.cvd is up to date (version: 48, sigs: 399264, f-level: 35, builder: sven)
 daily.cld is up to date (version: 8184, sigs: 16875, f-level: 35, builder: 
 arnaud)
 --------------------------------------
とのこと。/usr/ports/security/clamavは、0.93.3 なので、一旦、放置(^^


トップ   新規 一覧 検索 最終更新   ヘルプ   最終更新のRSS