[BlueOnyx:26516] Re: No clamd server appears to be available

[Darren Wolfe]

Hi,

I believe I am having a problem caused by the change you've made here - the clamd process is constantly running at 100% cpu all the time. The maillog shows this repeated continuously:

Sep 25 02:32:48 intersys18 clamd[232355]: Received 0 file descriptor(s) from systemd.
Sep 25 02:32:48 intersys18 clamd[232355]: clamd daemon 1.2.0 (OS: Linux, ARCH: x86_64, CPU: x86_64)
Sep 25 02:32:48 intersys18 clamd[232355]: Log file size limited to 5242880 bytes.
Sep 25 02:32:48 intersys18 clamd[232355]: Reading databases from /var/lib/clamav
Sep 25 02:32:48 intersys18 clamd[232355]: Not loading PUA signatures.
Sep 25 02:32:48 intersys18 clamd[232355]: Bytecode: Security mode set to "TrustSigned".
Sep 25 02:33:02 intersys18 clamd[232355]: Loaded 8673311 signatures.
Sep 25 02:33:04 intersys18 clamd[232355]: TCP: Cannot bind to [127.0.0.1]:7358: Address already in use
Sep 25 02:33:04 intersys18 clamd[232355]: Not listening on any interfaces

Netstat shows this:
tcp6     436      0 :::7358                 :::*                    LISTEN      0          25723      1/system

even if I disable the clam av av-spam service, it continues.



> -----Original Message-----
> From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> On Behalf Of Michael
> Stauber via Blueonyx
> Sent: Wednesday, September 20, 2023 12:35 AM
> To: blueonyx at mail.blueonyx.it
> Subject: [BlueOnyx:26489] Re: No clamd server appears to be available
> 
> Hi David,
> 
> > Is there a fix for the No clamd server appears to be available?
> 
> Yes, AV-SPAM v7.2.7-1, which was released 60 minutes ago. I also
> installed it already on your two servers as per the open tickets.
> 
> The issue is/was that Clam AV daemon binds itself to localhost. That
> usually means 127.0.0.1, but also ::1 in case you have IPv6. However:
> Since version 1.0.0 the official Clam AV RPM ships without Milter binary
> and when you build it manually (like I do for the AV-SPAM) you end up
> with non-working IPv6 support for it for some strange reason.
> 
> If the server has IPv6, Clam AV Milter will prefer to use IPv6 to "talk"
> to the Clam AV Daemon. Who sadly can't or won't respond to IPv6. That
> then caused the "No clamd server appears to be available".
> 
> AV-SPAM v7.2.7-1 fixes this by hard-wiring the bindings of Clam AV to
> 127.0.0.1.
> 
> While that ought to work, I'm still running into an issue on your
> servers and am looking at that now.
> 
> --
> With best regards
> 
> Michael Stauber
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx