**uncheck** everytime

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
semster
Posts: 11
Joined: Thu Mar 19, 2020 10:17 am

**uncheck** everytime

Postby semster » Tue Mar 24, 2020 2:52 pm

I have a zimbra server with clamAV and spamassassins.
every time i get **unchecked**, it says on the internet that i have to update ClamAV. that doesn't help because every time after an update **unchecked** is gone for a week and then it comes back. also ClamAV just stops, and then i have to turn it on manually.
so do you know a solution to this problem?
I'd be really grateful if we could get a solution working.


User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2129
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition
Contact:

Re: **uncheck** everytime

Postby L. Mark Stone » Wed Mar 25, 2020 1:39 pm

semster wrote:I have a zimbra server with clamAV and spamassassins.
every time i get **unchecked**, it says on the internet that i have to update ClamAV. that doesn't help because every time after an update **unchecked** is gone for a week and then it comes back. also ClamAV just stops, and then i have to turn it on manually.
so do you know a solution to this problem?
I'd be really grateful if we could get a solution working.


Welcome to the forums!

We need to know your Zimbra version to help. Please run "zmcontrol -v" and post the results. We also recommend posting that output in your profile, to save you from having to post it every time. :-)

All the best,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
semster
Posts: 11
Joined: Thu Mar 19, 2020 10:17 am

Re: **uncheck** everytime

Postby semster » Thu Mar 26, 2020 9:47 am

I use Zimbra 8.8.15_GA_3895 (build 20200102004124)

and "zmcontrol -v" was not a command
phoenix
Ambassador
Ambassador
Posts: 26514
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: **uncheck** everytime

Postby phoenix » Thu Mar 26, 2020 12:03 pm

semster wrote:I use Zimbra 8.8.15_GA_3895 (build 20200102004124)

and "zmcontrol -v" was not a command
It is when you run it as the Zimbra user as mentioned all over the forums and in the product documentation & wiki. ;)

Code: Select all

su - zimbra
zmcontrol -v
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
semster
Posts: 11
Joined: Thu Mar 19, 2020 10:17 am

Re: **uncheck** everytime

Postby semster » Thu Mar 26, 2020 1:01 pm

Release 8.8.15_GA_3869.RHEL7_64_20190917004220 RHEL7_64 FOSS edition, Patch 8.8.15_P6.
semster
Posts: 11
Joined: Thu Mar 19, 2020 10:17 am

Re: **uncheck** everytime

Postby semster » Mon Mar 30, 2020 10:24 am

I use this Release 8.8.15_GA_3869.RHEL7_64_20190917004220 RHEL7_64 FOSS edition, Patch 8.8.15_P6.

phoenix wrote:
semster wrote:I use Zimbra 8.8.15_GA_3895 (build 20200102004124)

and "zmcontrol -v" was not a command
It is when you run it as the Zimbra user as mentioned all over the forums and in the product documentation & wiki. ;)

Code: Select all

su - zimbra
zmcontrol -v
User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2129
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition
Contact:

Re: **uncheck** everytime

Postby L. Mark Stone » Mon Mar 30, 2020 10:47 am

Please post the log file snippet from where ClamAV is shutting down. Take a look at /var/log/zimbra.log and the files in /opt/zimbra/log.

Consider that the unchecked warning is often generated by Amavis, so please look at that log too.

Please also consider updating to the latest patch level, currently 8 at this writing.

Once we have relevant log file snippets we can help.

All the best,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
semster
Posts: 11
Joined: Thu Mar 19, 2020 10:17 am

Re: **uncheck** everytime

Postby semster » Wed Apr 01, 2020 8:07 am

oke, here is zimbra log file

https://send.firefox.com/download/e3fa03331476bbe2/#wKr7elUog-P_bTLFS8lR9A

with updating won't solve the problem, because everytime i've updated it comes back.
User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2129
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition
Contact:

Re: **uncheck** everytime

Postby L. Mark Stone » Wed Apr 01, 2020 6:29 pm

Sorry, I won't download a file from an unknown source. Please as I asked, post the relevant log file snippets from where Amavis is shutting down.

Thanks,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
semster
Posts: 11
Joined: Thu Mar 19, 2020 10:17 am

Re: **uncheck** everytime

Postby semster » Fri Apr 10, 2020 1:01 pm

Apr 6 05:34:39 post postfix/qmgr[11565]: 78065280C47: removed
Apr 6 05:34:40 post amavis[10613]: (10613-02-6) (!)connect to /opt/zimbra/data/clamav/clamav.sock failed, attempt #1: Can't connect to a UNIX socket /opt/zimbra/data/clamav/clamav.sock: No such file or directory
Apr 6 05:34:40 post amavis[10613]: (10613-02-6) (!)ClamAV-clamd: All attempts (1) failed connecting to /opt/zimbra/data/clamav/clamav.sock, retrying (2)
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) (!)connect to /opt/zimbra/data/clamav/clamav.sock failed, attempt #1: Can't connect to a UNIX socket /opt/zimbra/data/clamav/clamav.sock: No such file or directory
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /opt/zimbra/data/clamav/clamav.sock (All attempts (1) failed connecting to /opt/zimbra/data/clamav/clamav.sock) at (eval 134) line 613.\n
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) (!)WARN: all primary virus scanners failed, considering backups
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) (!)run_av (ClamAV-clamscan) FAILED - unexpected exit 127, output="/usr/local/bin/clamscan: error while loading shared libraries: libclammspack.so.0: cannot open shared object file: No such file or directory"
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) (!)ClamAV-clamscan av-scanner FAILED: /usr/local/bin/clamscan unexpected exit 127, output="/usr/local/bin/clamscan: error while loading shared libraries: libclammspack.so.0: cannot open shared object file: No such file or directory" at (eval 134) line 905.
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) (!!)AV: ALL VIRUS SCANNERS FAILED
Apr 6 05:34:46 post postfix/amavisd/smtpd[12955]: 9A97C280801: client=localhost[127.0.0.1]
Apr 6 05:34:46 post postfix/cleanup[12383]: 9A97C280801: message-id=<VA4X34ijhNmk56@post.voipq.nl>
Apr 6 05:34:46 post postfix/qmgr[11565]: 9A97C280801: from=<admin@voipq.nl>, size=1890, nrcpt=1 (queue active)
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) oBUadPIb00Ra(4X34ijhNmk56) SEND from <admin@voipq.nl> -> <admin@voipq.nl>, ENVID=AM.oBUadPIb00Ra.20200406T033446Z@post.voipq.nl 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9A97C280801
Apr 6 05:34:46 post postfix/dkimmilter/smtpd[12958]: A58EC280C46: client=localhost[127.0.0.1]
Apr 6 05:34:46 post postfix/cleanup[12972]: A58EC280C46: message-id=<20200406033356.78F4D28081F@post.voipq.nl>
Apr 6 05:34:46 post postfix/error[12959]: 9A97C280801: to=<admin@voipq.nl>, relay=none, delay=0.07, delays=0.03/0.01/0/0.03, dsn=5.0.0, status=bounced (voipq.nl)
Apr 6 05:34:46 post postfix/cleanup[12383]: AB787280C47: message-id=<20200406033446.AB787280C47@post.voipq.nl>
Apr 6 05:34:46 post postfix/qmgr[11565]: AB787280C47: from=<>, size=3784, nrcpt=1 (queue active)
Apr 6 05:34:46 post postfix/bounce[12962]: 9A97C280801: sender non-delivery notification: AB787280C47
Apr 6 05:34:46 post postfix/qmgr[11565]: 9A97C280801: removed
Apr 6 05:34:46 post opendkim[11321]: A58EC280C46: no signing table match for 'admin@voipq.nl'
Apr 6 05:34:46 post postfix/error[12959]: AB787280C47: to=<admin@voipq.nl>, relay=none, delay=0.07, delays=0.04/0/0/0.03, dsn=5.0.0, status=bounced (voipq.nl)
Apr 6 05:34:46 post postfix/qmgr[11565]: AB787280C47: removed
Apr 6 05:34:46 post postfix/qmgr[11565]: A58EC280C46: from=<admin@voipq.nl>, size=952, nrcpt=1 (queue active)
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) 4X34ijhNmk56 FWD from <admin@voipq.nl> -> <admin@voipq.nl>, BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10030): 250 2.0.0 Ok: queued as A58EC280C46
Apr 6 05:34:46 post amavis[10613]: (10613-02-6) Passed UNCHECKED {RelayedTaggedInternal}, ORIGINATING/MYNETS LOCAL [149.210.249.87]:39140 [149.210.249.87] <admin@voipq.nl> -> <admin@voipq.nl>, Queue-ID: 78F4D28081F, Message-ID: <20200406033356.78F4D28081F@post.voipq.nl>, mail_id: 4X34ijhNmk56, Hits: -, size: 487, queued_as: A58EC280C46, 7282 ms
Apr 6 05:34:46 post postfix/smtp[12399]: 78F4D28081F: to=<admin@voipq.nl>, relay=127.0.0.1[127.0.0.1]:10026, conn_use=6, delay=50, delays=0.05/43/0/7.3, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10030): 250 2.0.0 Ok: queued as A58EC280C46)
Apr 6 05:34:46 post postfix/qmgr[11565]: 78F4D28081F: removed
Apr 6 05:34:46 post amavis[10613]: (10613-02-7) ESMTP [127.0.0.1]:10026 /opt/zimbra/data/amavisd/tmp/amavis-20200406T053355-10613-ShFBDhF9: <admin@voipq.nl> -> <admin@voipq.nl> Received: from post.voipq.nl ([127.0.0.1]) by localhost (post.voipq.nl [127.0.0.1]) (amavisd-new, port 10026) with ESMTP for <admin@voipq.nl>; Mon, 6 Apr 2020 05:34:46 +0200 (CEST)
Apr 6 05:34:46 post amavis[10613]: (10613-02-7) Checking: gEWexPMv5IR8 ORIGINATING/MYNETS [149.210.249.87] <admin@voipq.nl> -> <admin@voipq.nl>
Apr 6 05:34:46 post amavis[10613]: (10613-02-7) (!)connect to /opt/zimbra/data/clamav/clamav.sock failed, attempt #1: Can't connect to a UNIX socket /opt/zimbra/data/clamav/clamav.sock: No such file or directory
Apr 6 05:34:46 post amavis[10613]: (10613-02-7) ClamAV-clamd: All attempts (1) failed connecting to /opt/zimbra/data/clamav/clamav.sock, retrying (1)
Apr 6 05:34:47 post amavis[10613]: (10613-02-7) (!)connect to /opt/zimbra/data/clamav/clamav.sock failed, attempt #1: Can't connect to a UNIX socket /opt/zimbra/data/clamav/clamav.sock: No such file or directory
Apr 6 05:34:47 post amavis[10613]: (10613-02-7) (!)ClamAV-clamd: All attempts (1) failed connecting to /opt/zimbra/data/clamav/clamav.sock, retrying (2)
Apr 6 05:34:53 post amavis[10613]: (10613-02-7) (!)connect to /opt/zimbra/data/clamav/clamav.sock failed, attempt #1: Can't connect to a UNIX socket /opt/zimbra/data/clamav/clamav.sock: No such file or directory
Apr 6 05:34:53 post amavis[10613]: (10613-02-7) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /opt/zimbra/data/clamav/clamav.sock (All attempts (1) failed connecting to /opt/zimbra/data/clamav/clamav.sock) at (eval 134) line 613.\n
Apr 6 05:34:53 post amavis[10613]: (10613-02-7) (!)WARN: all primary virus scanners failed, considering backups
Apr 6 05:34:53 post amavis[10613]: (10613-02-7) (!)run_av (ClamAV-clamscan) FAILED - unexpected exit 127, output="/usr/local/bin/clamscan: error while loading shared libraries: libclammspack.so.0: cannot open shared object file: No such file or directory"
Apr 6 05:34:53 post amavis[10613]: (10613-02-7) (!)ClamAV-clamscan av-scanner FAILED: /usr/local/bin/clamscan unexpected exit 127, output="/usr/local/bin/clamscan: error while loading shared libraries: libclammspack.so.0: cannot open shared object file: No such file or directory" at (eval 134) line 905.
Apr 6 05:34:53 post amavis[10613]: (10613-02-7) (!!)AV: ALL VIRUS SCANNERS FAILED

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 14 guests