Clamd is down mails, can not stop them..

[ozgurerdogan]

Even clamd and freshclam is running, directadmin still sends Clamd is down mail. I even tried disabling it service.status file but it still send these mails. I tried reinstalling it but did not help.


Clamd on lnx12.domain.com is down!

[root@lnx12 ~]# service clamd status
Redirecting to /bin/systemctl status clamd.service
● clamd.service - Generic clamav scanner daemon
Loaded: loaded (/etc/systemd/system/clamd.service; enabled; vendor preset: di sabled)
Active: active (running) since Thu 2016-12-29 21:45:32 +03; 2min 39s ago
Process: 28160 ExecStartPre=/usr/bin/chown -R clamav:clamav /var/run/clamd (co de=exited, status=0/SUCCESS)
Process: 28158 ExecStartPre=/usr/bin/mkdir -p /var/run/clamd (code=exited, sta tus=0/SUCCESS)
Main PID: 28163 (clamd)
CGroup: /system.slice/clamd.service
└─28163 /usr/local/sbin/clamd --foreground=yes

Dec 29 21:45:44 lnx12.domain.com clamd[28163]: Portable Executable...
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: ELF support enabled.
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: Mail files support ...
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: OLE2 support enabled.
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: PDF support enabled.
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: SWF support enabled.
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: HTML support enabled.
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: XMLDOCS support ena...
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: HWP3 support enabled.
Dec 29 21:45:44 lnx12.domain.com clamd[28163]: Self checking every...
Hint: Some lines were ellipsized, use -l to show in full.





[root@lnx12 ~]# service freshclam status
Redirecting to /bin/systemctl status freshclam.service
● freshclam.service - ClamAV updater daemon
Loaded: loaded (/etc/systemd/system/freshclam.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2016-12-29 21:26:43 +03; 21min ago
Process: 27719 ExecStart=/usr/local/bin/freshclam -d (code=exited, status=0/SUCCESS)
Process: 27716 ExecStartPre=/bin/chown -R clamav:clamav /var/run/clamd (code=exited, status=0/SUCCESS)
Process: 27714 ExecStartPre=/bin/mkdir -p /var/run/clamd (code=exited, status=0/SUCCESS)
Main PID: 27722 (freshclam)
CGroup: /system.slice/freshclam.service
└─27722 /usr/local/bin/freshclam -d

Dec 29 21:26:43 lnx12.domain.com systemd[1]: Starting ClamAV updater daemon...
Dec 29 21:26:43 lnx12.domain.com freshclam[27722]: freshclam daemon 0.99.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Dec 29 21:26:43 lnx12.domain.com freshclam[27722]: ClamAV update process started at Thu Dec 29 21:26:43 2016
Dec 29 21:26:43 lnx12.domain.com systemd[1]: Started ClamAV updater daemon.
Dec 29 21:26:43 lnx12.domain.com freshclam[27722]: main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: amishhammer)
Dec 29 21:26:43 lnx12.domain.com freshclam[27722]: daily.cvd is up to date (version: 22799, sigs: 1202270, f-level: 63, builder: neo)
Dec 29 21:26:43 lnx12.domain.com freshclam[27722]: bytecode.cvd is up to date (version: 285, sigs: 57, f-level: 63, builder: bbaker)
Dec 29 21:26:43 lnx12.domain.com freshclam[27722]: --------------------------------------

 

[zEitEr]

Hello,

What is OS in your Directadmin license? Did you build Clamav with custombuild?

 

[ozgurerdogan]

It is centos 7 and I always use custombuild.

 

[zEitEr]

Just a guess

killall -9 directadmin
killall -9 [COLOR=#333333]clamd
service directadmin start

give Directadmin a minute or so to start clamd. Then start it manually if Directadmin failed.

And see whether or not solves the issues.[/COLOR]

 

[ozgurerdogan]

Even I confirm its servis is running and also set in services.status file to not monitor it is service:

Clam=OFF
Clamd=OFF
clam=OFF
clamd=OFF
clamav=OFF
Clamav=OFF

It is still sending me those mail. I will have to create mail filter to stop them. Do you have something to suggest to check?

 

[zEitEr]

It should be clamd=ON|OFF

Open a ticket with directadmin support. I have no idea on what might be wrong on your side.

You might want:

1. remove all clamav lines from services.status
2. ./build set_service clamd OFF

 

[ozgurerdogan]

Thanks Alex you are great like always.