Hi all,
I have an Exim server and two clamd servers.
In my exim.conf file I have this:
av_scanner = clamd:127.0.0.1 3310 : 185.11.139.226 3310
When I send or receive an email during clamd update, then I find this
entry in /var/log/exim4/paniclog:
malware acl condition: clamd: unable to read from socket (Connection
timed out)
and in /var/log/exim4/mainlog
I can see, that the incoming message was
"temporarily rejected after DATA"
When I stop one of the clamd services, then I get this entry:
malware acl condition: clamd: failed to connect to 127.0.0.1: couldn't
connect to any host: Connection refused
Exim then uses the other clamd service from the remote server and the
message gets delivered.
I think, that the message during the update should also be scanned at
the other server after Exim receives the timeout. But Exim does not try
the other server!
I think my question is similar as in this post, but still different:
https://lists.exim.org/lurker/message/20150708.083446.7f5a153d.en.html
Thank you!
Leon
