Having a strange problem with clamav ghost
Posted: Mon Jan 22, 2007 12:51 am
Hey all,
Let me start this by an explanation.
The server blew a hard drive and the provider said they would
install a new hard drive and mirror dive and reinstall from a fresh backup.
All is going well untill some strange stuff started happening.
The box is running FC-2 plesk 7.5.4
It started as a error message sent via email:
Error: Skipping oversized log record
/etc/cron.daily/freshclam:
ERROR: Clamd was NOT notified: Can't find or parse configuration file /etc/clamd.conf
Well this is news to me as I didnt install clamav. so...
I went to the log and found this:
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.87.1 Recommended version: 0.88.7
so I did a rpm search via grep clam and got this:
clamav-db-0.87.1-2.rhfc2.art
clamav-0.87.1-2.rhfc2.art
clamav-devel-0.87.1-2.rhfc2.art
I thought how nice, They installed clamv as well.
I told them that when they installed the backup that I had used arts
spamassassin and not plesks, They said good idea and went about their work....
I was informed that some of my mail users wern't receving mail
So I got to searching the web about using spamassassin and clamv
and found out about qmail-scanner I did a rpm serarch for that and came up empty.
In one of the posts about qmail-scanner
it said to look here:
/var/qmail/bin/qmail-queue* /var/qmail/bin/qmail-scanner*
this is what I get:
I dont have drweb installed.
the first two and the last files are in red in my shell that tells me
they are broken (orphaned)
I see I can run a rpm update for the clamav but untill I resolve these other problems I dont want to just yet.
rpm -qa | grep spam results in this:
spamassassin-3.1.0-4.rhfc2.art
psa-spamassassin-7.5.4-fc2.build75060617.18
Can anybody tell me what is wrong here and what my options for a fix are?
I am concerned about the /var/qmail/bin/qmail-queue file being borked
Thanks to any and all replies.
server info:
psa 7.5.4-fc2.build75050824.12
psa-qmail 1.03-fc2.build75060321.20
psa-qmail-rblsmtpd 0.70-fc2.build75050824.12
psa-spamassassin 7.5.4-fc2.build75060617.18
Let me start this by an explanation.
The server blew a hard drive and the provider said they would
install a new hard drive and mirror dive and reinstall from a fresh backup.
All is going well untill some strange stuff started happening.
The box is running FC-2 plesk 7.5.4
It started as a error message sent via email:
Error: Skipping oversized log record
/etc/cron.daily/freshclam:
ERROR: Clamd was NOT notified: Can't find or parse configuration file /etc/clamd.conf
Well this is news to me as I didnt install clamav. so...
I went to the log and found this:
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.87.1 Recommended version: 0.88.7
so I did a rpm search via grep clam and got this:
clamav-db-0.87.1-2.rhfc2.art
clamav-0.87.1-2.rhfc2.art
clamav-devel-0.87.1-2.rhfc2.art
I thought how nice, They installed clamv as well.
I told them that when they installed the backup that I had used arts
spamassassin and not plesks, They said good idea and went about their work....
I was informed that some of my mail users wern't receving mail
So I got to searching the web about using spamassassin and clamv
and found out about qmail-scanner I did a rpm serarch for that and came up empty.
In one of the posts about qmail-scanner
it said to look here:
/var/qmail/bin/qmail-queue* /var/qmail/bin/qmail-scanner*
this is what I get:
Code: Select all
-rwsr-xr-x 1 qmailq qmail 16012 Aug 24 2005 /var/qmail/bin/qmail-queue
-r-s--s--x 1 root root 16012 Jan 1 01:57 /var/qmail/bin/qmail-queue.backup
-r-xr-xr-x 1 root qmail 158652 May 24 2005 /var/qmail/bin/qmail-queue.drweb
-r-xr-xr-x 1 root root 16012 Jan 1 01:57 /var/qmail/bin/qmail-queue.orig.backup
-rwsr-xr-x 1 111 111 141855 Jan 1 01:57
/var/qmail/bin/qmail-scanner-queue.pl
the first two and the last files are in red in my shell that tells me
they are broken (orphaned)
I see I can run a rpm update for the clamav but untill I resolve these other problems I dont want to just yet.
rpm -qa | grep spam results in this:
spamassassin-3.1.0-4.rhfc2.art
psa-spamassassin-7.5.4-fc2.build75060617.18
Can anybody tell me what is wrong here and what my options for a fix are?
I am concerned about the /var/qmail/bin/qmail-queue file being borked
Thanks to any and all replies.
server info:
psa 7.5.4-fc2.build75050824.12
psa-qmail 1.03-fc2.build75060321.20
psa-qmail-rblsmtpd 0.70-fc2.build75050824.12
psa-spamassassin 7.5.4-fc2.build75060617.18