keep getting freshclam down errors every xxx hours (dutch)

[ereemst]

On a lightweight Directadmin with CENTOS 7, CSF, CWAF and custombuild plugins i keep getting freshclam errors every 2-3 hours.
Reinstalled, used google and so on but i cant seem to resolve it.

I am a Noob+ on linux but i do know how Cfs etc. works, installed the server and da myself on a VPS.

I would like to find someone in the netherlands who can help me and maybe in the future with other problems.

B.R
Erik
www.erc-automatisering.nl

[Erulezz]

What errors are you getting?

[ereemst]

Subject: The service 'freshclam' on server svr02.xxx is currently down

[ereemst]

better:
An error has occurred

Details /usr/bin/systemctl start freshclam.service 2>&1

command: systemctl status freshclam.service

Starting ClamAV updater daemon...

systemd[1]: PID file /var/run/clamd/freshclam.pid not readable (yet?)...art.

systemd[1]: freshclam.service start operation timed out. Terminating.

Failed to start ClamAV updater daemon.

Unit freshclam.service entered failed state.
freshclam.service failed.

[Richard G]

I'm from the Netherlands, but I don't use cwaf, don't know if it has something to do with that.
However I'm quite amused about what you're company is offering when you're a noob on Linux. Only installing DA with CSF (and maybe cwaf) is not quite enough to secure and maintain servers.

1.) Did you try to start the freshclam service manually?

systemctl start clam-freshclam.service

2.) Check if the freshclam service is enabled by default after a reboot:

systemctl list-unit-files --type=service

I might be able to help you in NL in the future, depending on the kind of problems you want help with.

[Erulezz]

Also check the freshclam log for error messages.. The error message you described is just a general notification error. Depending on your settings in freshclam.conf it's in /var/log/messages or /var/log/freshclam.conf

[ereemst]

systemctl start clam-freshclam.service
Failed to start clam-freshclam.service: Unit not found.

systemctl list-unit-files --type=service

UNIT FILE STATE
arp-ethers.service disabled
auditd.service enabled
autovt@.service enabled
avahi-daemon.service enabled
blk-availability.service disabled
brandbot.service static
clamav-daemon.service disabled
clamav-freshclam.service disabled
clamd.service enabled
clamd@.service static
clamd@scan.service enabled
console-getty.service disabled
console-shell.service disabled
container-getty@.service static
cpupower.service disabled
crond.service enabled
csf.service enabled
da-popb4smtp.service enabled
dbus-org.freedesktop.Avahi.service enabled
dbus-org.freedesktop.hostname1.service static
dbus-org.freedesktop.import1.service static
dbus-org.freedesktop.locale1.service static
lines 1-23...skipping...
UNIT FILE STATE
arp-ethers.service disabled
auditd.service enabled
autovt@.service enabled
avahi-daemon.service enabled
blk-availability.service disabled
brandbot.service static
clamav-daemon.service disabled
clamav-freshclam.service disabled
clamd.service enabled
clamd@.service static
clamd@scan.service enabled
console-getty.service disabled
console-shell.service disabled
container-getty@.service static
cpupower.service disabled
crond.service enabled
csf.service enabled
da-popb4smtp.service enabled
dbus-org.freedesktop.Avahi.service enabled
dbus-org.freedesktop.hostname1.service static
dbus-org.freedesktop.import1.service static
dbus-org.freedesktop.locale1.service static
dbus-org.freedesktop.login1.service static
dbus-org.freedesktop.machine1.service static
dbus-org.freedesktop.NetworkManager.service enabled
dbus-org.freedesktop.nm-dispatcher.service enabled
dbus-org.freedesktop.timedate1.service static
dbus.service static
debug-shell.service disabled
directadmin.service enabled
dm-event.service disabled
dnsmasq.service disabled
dovecot.service enabled
dracut-cmdline.service static
dracut-initqueue.service static
dracut-mount.service static
dracut-pre-mount.service static
dracut-pre-pivot.service static
dracut-pre-trigger.service static
dracut-pre-udev.service static
dracut-shutdown.service static
ebtables.service disabled
emergency.service static

[zEitEr]

The simple solution might be:

mkdir /var/run/clamd/

you might need to chown it clamav user (or clamd) depending on how you installed it

But I'd suggest changing PID file to /var/run/freshclam.pid (in freshclam config) as the directory /var/run/clamd/ might remove on reboot.

[ereemst]

The simple solution might be:

mkdir /var/run/clamd/

you might need to chown it clamav user (or clamd) depending on how you installed it

But I'd suggest changing PID file to /var/run/freshclam.pid (in freshclam config) as the directory /var/run/clamd/ might remove on reboot.

mkdir: cannot create directory ‘/var/run/clamd/’: File exists

[Richard G]

The list shows "clamav-freshclam.service disabled" so it won't start after a reboot, should be changed after you get it to work.

Does the /usr/lib/systemd/system/clamav-freshclam.service exists there (or anywhere else)?

[ereemst]

But first it keeps stopping / Down..

on 13:02
14:06
15:06
16:10

[Imtek]

Hoi Erik, stuur mij even een PM/DM op dit forum. Kijk graag even met je mee.

[Richard G]

Might be also related to this:
http://forum.directadmin.com/showthr...527#post286527
maar weet ik niet zeker. Misschien ff herinstalleren en zien of er fouten komen tijdens compilatie.

[Awd]

Did you try to reinstall Clamav?

cd /usr/local/directadmin/custombuild
./build update
./build set clamav yes
./build clamav

then restart Exim # /etc/init.d/exim restart

check if Clamav is running: # netstat -tap | grep clamd
if not # service clamd start

p.s. This forum is meant for everyone, so let's keep the conversation in English.

[Richard G]

p.s. This forum is meant for everyone, so let's keep the conversation in English.

We do talk in English, but it's no harm to type a few personal words in the own language, i've also seen it in other languages done by others, as long as it's not too much.
In this case it's too little to complaint about.