xyon wrote:
> netstat -l -n -p |grep 25
>
> ^ that should tell you what's listening on port 25.
>
> Normally clamav will return an 'access denied' error when it doesn't have
> access to the /var/spool/exim/scan directory, but you may want to check
> the permissions anyway. I have ClamAV running as the same user as exim so
> it can scan exim mails. Not sure if this is the most ideal method, though.
Can be confusing, to say the least. We run it as clamd, but in
the same group as Exim so the socket can be used by both.
Likewise SA.
Not sure if it matters if/as/when communicating by IP, as I've
never tried that.
Bill
>
> On Fri, April 14, 2006 08:51, W B Hacker wrote:
>
>>Alexandre Busquets wrote:
>>
>>
>>>I have installed exim 4.60 (Compiled myself).
>>>
>>>And in my logs i have two errors
>>>
>>>
>>>2006-04-14 14:39:54 1FUNac-0002Q0-8z malware acl condition: clamd:
>>>ClamAV returned /var/spool/exim/scan/1FUNac-0002Q0-8z: lstat() failed.
>>>ERROR
>>
>>Are you using IP or a unix socket to converse between Exim and
>>clamd?
>>
>>Check that both Exim and clamd configuration agree on which and
>>where, and that perms allow access/initiation to {whichever}.
>>
>>
>>
>>>2006-04-14 14:39:54 1FUNac-0002Q0-8z H=hma178.sdsd.net
>>>(www.dfdfdf.org) [217.76.134.168] Warning: ACL "warn" statement
>>>skipped: condition test deferred
>>>2
>>>
>>>
>>>socket bind() to port 25 for address (any IPv4) failed: Address
>>>already in use: waiting 30s before trying again (5 more tries)
>>>
>>>
>>>I can't reject virus emails
>>>
>>
>>You may have a bigger problem than just virus rejection.
>>
>>What other daemon(s) are trying to bind to port 25?
>>
>>Do you still have an older MTA (sendmail?) running?
>>
>>Or are you trying to start another instance of Exim on the same
>>IP number?
>>
>>ClamAV is not for running on port 25....
>>
>>HTH,
>>
>>Bill
>>
>>
>>
>>
>>--
>>## List details at http://www.exim.org/mailman/listinfo/exim-users
>>## Exim details at http://www.exim.org/
>>## Please use the Wiki with this list - http://www.exim.org/eximwiki/
>>
>
>
>
>
