This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AVdaemon restarting

Ever since last night's AV update Mar 21, 2006, all our customers' email is being blocked or quarantined. Web surfing is also being blocked if AV is enabled.

Something broke the AV engine last night, and its not an isolated incident.

This thread was automatically locked due to age.

Parents

0 grimphyre over 20 years ago

Since last nite, our SMTP proxy denies all messages if virus protection is active. Log says something about error during malware scanning. Seems like something went wrong in virus database update and requires fast fixing.
Cancel
Vote Up 0 Vote Down

Cancel
0 hdh over 20 years ago in reply to grimphyre

Same here, got some warning-mail:

virus scanner aveserver daemon not running - restarted

My temp-solution: disable kaspersky and run only clam antivirus. Worked for me.
Cancel
Vote Up 0 Vote Down

Cancel
0 bxxp over 20 years ago in reply to hdh

Yes have the same problem since the last night 1:04 am.

I already deleted /var/chroot-kav/var/db/kav/5.0/kav4mailservers/bases/* and did a manually update with no success.

As workaround I disabled the virusscanner and the contentfilter.

Hope there will be a solution soon.

Bernhard
Cancel
Vote Up 0 Vote Down

Cancel
0 KSeemann over 20 years ago in reply to hdh

me to!

The error startet after the Pattern Up2Date at 0:56 (GMT+1)...

It startet with "malware acl condition: weed: scanning failed" errors in the SMTP Log and endet with "Connection from [xxx.xx.xx.xxx] refused: too many connections" for the SMTP Proxy...

So... finaly no SPAM...

Restarted the Astaro and after a few more "scanning failed" Messages i deactivated the Kaspersky AV... and it works so far...
Cancel
Vote Up 0 Vote Down

Cancel
0 tov over 20 years ago in reply to KSeemann

...same here:
virus scanner aveserver not running - restarted
aveserver not running - restarted

tov

ASL 6.105 and 5.210
Cancel
Vote Up 0 Vote Down

Cancel
0 AndreasR over 20 years ago in reply to KSeemann

Hi,

found out I have the same error here.
I disabled kapersky for smnp and pop3 traffic and get mails through again.
However, I hope ASTARO and KAPERSKY get this fixed.
I do not want to be with my AV down. Even with ClamAV still on.
Cancel
Vote Up 0 Vote Down

Cancel
0 toofreaky over 20 years ago in reply to AndreasR

same here (with ASL 5.210 & ASG 6.105) ..

I called Astaro and they said that there will be a fix this day ..
Hope this is done soon ..
Workaround is - as already noticed - to temp. disable Kaspersky.

regards,
Tom
Cancel
Vote Up 0 Vote Down

Cancel
0 astaro_usr over 20 years ago in reply to AndreasR

I opened a support case (same problem here) but no response so far (ok, it is only a few minutes open [;)])
Cancel
Vote Up 0 Vote Down

Cancel
0 ECKEROTH over 20 years ago in reply to astaro_usr

Same problem here.

Disabled Kaspersky AV on the SMTP proxy temporary to fix the problem [:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 Freakezoid over 20 years ago in reply to ECKEROTH

Attention there ist a new Up2Date to Version 5.211 wich fixes the Problem in Version 5.2.
Cancel
Vote Up 0 Vote Down

Cancel
0 KKnecht over 20 years ago in reply to Freakezoid

I was told that there will be an Up2Date 6.106 coming out within the next hours which will fix it for V6 also !!
Cancel
Vote Up 0 Vote Down

Cancel
0 KSeemann over 20 years ago in reply to Freakezoid

There is a 6.106 too...

just installed it... and it works...

BUT...

look at the Bugfixdescription!!!!!!!! It seems that the Kaspersky License has run out... [:$]

Very embarrassing for Astaro... and its Customers
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 KSeemann over 20 years ago in reply to Freakezoid

There is a 6.106 too...

just installed it... and it works...

BUT...

look at the Bugfixdescription!!!!!!!! It seems that the Kaspersky License has run out... [:$]

Very embarrassing for Astaro... and its Customers
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 astaro_usr over 20 years ago in reply to KSeemann

Here the update to 6.106 solved the problem, too [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 Markus Hennig over 20 years ago in reply to KSeemann

Hi all,

we apologize for the inconvenience and appreciate your patience while we fixed the issue!

It wasnt just a simple license expiration problem, because patterns are involved too...
We learned our lesson and will change the pattern and license update mechanism to prevent a second AV outage for sure.
Cancel
Vote Up 0 Vote Down

Cancel
0 ECKEROTH over 20 years ago in reply to Markus Hennig

Markus.

Thanks for your quick respond to solve this problem I can hereby confirm tha things are working againg in v.6.106
Cancel
Vote Up 0 Vote Down

Cancel
0 Freakezoid over 20 years ago in reply to astaro_usr

[ QUOTE ]
Here the update to 6.106 solved the problem, too [:)]

[/ QUOTE ]

Confirmed, also on my ASL
Cancel
Vote Up 0 Vote Down

Cancel
0 AMros over 20 years ago in reply to Markus Hennig

no prob, some things happens... [:)]
Q: will the prob be fixed by new patterns also?? - have some customers w/o maintenance license where is no "official" way for sys-up2dates...
rgds, andre
Cancel
Vote Up 0 Vote Down

Cancel
0 Snova over 20 years ago in reply to Markus Hennig

The annoying thing is, we kept all our customers and ourselves at 6.104 because watching the logs is broken since 6.105. Now we HAVE to install up2dates up to 6.106 and not be able to watch the logs anymore
Cancel
Vote Up 0 Vote Down

Cancel
0 Markus Hennig over 20 years ago in reply to AMros

Hi AMros,

this issue can be fixed with System Up2Date only.
Customers w/o maintenance license for System Up2Date should contact support, they have a workaround to renew the AV scanning license.
Cancel
Vote Up 0 Vote Down

Cancel
0 Paul_M over 20 years ago in reply to Snova

[ QUOTE ]
The annoying thing is, we kept all our customers and ourselves at 6.104 because watching the logs is broken since 6.105. Now we HAVE to install up2dates up to 6.106 and not be able to watch the logs anymore

[/ QUOTE ]

What is broke in 6.105? Live log watching? Is there a support ticket or bug track for this? If that is all then it is not a really big deal to me since I usually watch the logs by tailing them in ssh.
Cancel
Vote Up 0 Vote Down

Cancel
0 Snova over 20 years ago in reply to Paul_M

see this thread.

Downloading doesn't work for us either, the ZIP-Files are 0 byte in size.
Livelog is working, though.
Cancel
Vote Up 0 Vote Down

Cancel
0 karabela over 20 years ago in reply to Snova

restart and try again
Cancel
Vote Up 0 Vote Down

Cancel