Clamav stopped working, to old database... freshclam missing ?

[Stephen Switzer]

I too am having this issue after updating last night. I'm tempted to 
backup my mail and rollback the VM.

After update, EVERY email is coming in with "***UNCHECKED***". I looked 
at the logs and found many entries like this:

Apr 20 11:31:16 kolab16 amavis[9442]: (09442-17) (!)ClamAV-clamd: All 
attempts (1) failed connecting to /var/run/clamd.amavisd/clamd.sock, 
retrying (2)
Apr 20 11:31:22 kolab16 amavis[9442]: (09442-17) ClamAV-clamd: 
Connecting to socket  /var/run/clamd.amavisd/clamd.sock, retry #2
Apr 20 11:31:22 kolab16 amavis[9442]: (09442-17) new socket by 
IO::Socket::UNIX to /var/run/clamd.amavisd/clamd.sock, timeout set to 10


Directory listing shows it doesn't exist:

[root at kolab16 etc]# ls -l /var/run/clamd.amavisd/clamd.sock
ls: cannot access /var/run/clamd.amavisd/clamd.sock: No such file or 
directory
[root at kolab16 etc]# ls -l /var/run/clamd.amavisd/
total 0
[root at kolab16 etc]#


These files seem to match:

[root at kolab16 etc]# grep -i clamd.sock /etc/amavisd/amavisd.conf
   \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamd.amavisd/clamd.sock"],
[root at kolab16 etc]# grep -i clamd.sock /etc/clamd.d/amavisd.conf
LocalSocket /var/run/clamd.amavisd/clamd.sock
[root at kolab16 etc]#


Nothing is running under clam:

[root at kolab16 etc]# ps -el | grep clam
[root at kolab16 etc]# ps -el | grep clam\|amavis
[root at kolab16 etc]#


clamav-update wasn't installed either. I tried to install it, and it was 
no help.

Any help would be appreciated. If I can't figure it out by tonight, I'll 
have to backup "/var/spool/imap/domain/" and rollback the VM and restore 
- that additional subject is annoying! LOL

Thank you!


---
Best regards,

STEPHEN H. SWITZER


On 2016-04-12 12:13 PM, Winfried Ritsch wrote:
> Hello,
> 
> On an Kolab 16 and Centos 7, Installation on 2016-4-09 I did a yum 
> update and
> afterwards all emails are reported as  "***UNCHECKED***" in subject.
> 
> It showed clamd at amavisd does not start and reports "database more than 
> 7 days
> old"
> 
> Looking at issues I found:  
> https://issues.kolab.org/show_bug.cgi?id=3996
>   "Running Kolab 16 and freshclam is still not provided"
> 
> I installed freshclam and it worked again but on install told me:
> 
>  [...]
>  ERROR: Corrupted database file /var/lib/clamav/main.cvd: Can't verify
> database integrity
>  Corrupted database file renamed to /var/lib/clamav/main.cvd.broken
>  [...]
> 
> So my question is, since it worked  for a month:
> 
> How has clam database been updated in Kolab 16 without freshclam before 
> ?
> 
> Did I something wrong installing freshclam by hand ?
> 
> I just wanted to get sure it works before I post here and found some on 
> german
> kolab list with same problem, but we didn't find any hints, anyway I am 
>  not a
> kolab specialist.
> 
> 
> mfg
>  winfried