DevHeads.net

Did I install too much for clamav?

I just checked the status of amavisd:

# systemctl -l status amavisd
● amavisd.service - Amavisd-new is an interface between MTA and content
checkers.
   Loaded: loaded (/usr/lib/systemd/system/amavisd.service; enabled;
vendor preset: disabled)
   Active: active (running) since Thu 2019-02-07 08:16:59 EST; 7h ago
     Docs: <a href="http://www.ijs.si/software/amavisd/#doc" title="http://www.ijs.si/software/amavisd/#doc">http://www.ijs.si/software/amavisd/#doc</a>
  Process: 5715 ExecStart=/usr/sbin/amavisd -c
/etc/amavisd/amavisd.conf (code=exited, status=0/SUCCESS)
 Main PID: 6327 (/usr/sbin/amavi)
   CGroup: /system.slice/amavisd.service
           ├─6327 /usr/sbin/amavisd (master)
           ├─6336 /usr/sbin/amavisd (virgin child)
           └─6337 /usr/sbin/amavisd (virgin child)

Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder
for    .lha  at /usr/bin/7z
Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder
for    .iso  at /usr/bin/7z
Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found decoder
for    .exe  at /usr/bin/unarj
Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Using primary
internal av scanner code for ClamAV-clamd
Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Found secondary av
scanner ClamAV-clamscan at /usr/bin/clamscan
Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Deleting db files
__db.002,snmp.db,nanny.db,__db.001,__db.003 in /var/spool/amavisd/db
Feb 07 08:16:59 klovia.htt-consult.com amavis[6327]: Creating db in
/var/spool/amavisd/db/; BerkeleyDB 0.51, libdb 5.3
Feb 07 08:17:00 klovia.htt-consult.com amavis[6327]: initializing
Mail::SpamAssassin (0)
Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: SpamControl:
init_pre_fork on SpamAssassin done
Feb 07 08:17:08 klovia.htt-consult.com amavis[6327]: extra modules
loaded after daemonizing/chrooting:
/usr/lib/perl5/vendor_perl/auto/Net/SSLeay/autosplit.ix,
/usr/lib/perl5/vendor_perl/auto/Net/SSLeay/randomize.al,
/usr/share/perl5/Net/libnet.cfg, IO/Socket/SSL.pm,
Mail/SpamAssassin/Plugin/FreeMail.pm,
Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm,
Net/SMTP.pm, Net/SSLeay.pm

Primary and secondary AV scanner?  Is this right?  I installed:

# grep clam /var/log/yum.log*
/var/log/yum.log:Feb 06 08:40:06 Installed:
clamav-filesystem-0.101.1-1.el7.noarch
/var/log/yum.log:Feb 06 08:40:29 Installed: clamav-lib-0.101.1-1.el7.armv7hl
/var/log/yum.log:Feb 06 08:40:30 Installed:
clamav-update-0.101.1-1.el7.armv7hl
/var/log/yum.log:Feb 06 08:40:59 Installed:
clamav-devel-0.101.1-1.el7.armv7hl
/var/log/yum.log:Feb 06 08:41:01 Installed: clamav-0.101.1-1.el7.armv7hl
/var/log/yum.log:Feb 06 08:46:16 Installed: clamd-0.101.1-1.el7.armv7hl
/var/log/yum.log:Feb 06 08:46:17 Installed:
clamav-server-systemd-0.101.1-1.el7.armv7hl

thanks

Comments

Re: Did I install too much for clamav?

By Gordon Messmer at 02/08/2019 - 14:20

On 2/7/19 1:18 PM, Robert Moskowitz wrote:

I don't use amavis, but it doesn't seem surprising that it would search
the system for supported components and find both clamd and clamscan. 
It looks like secondary scanners are only used if the primary scanners
fail, so this seems like it's working normally.

Re: Did I install too much for clamav?

By Robert Moskowitz at 02/08/2019 - 16:11

On 2/8/19 2:20 PM, Gordon Messmer wrote:
Since I posted this, help on the postfix list resolved the problem. This
was a red herring, as they say.

thanks