URGENT - Server Down

[graemef]

I have been getting error messages every couple of days and the Scalix server has been hanging, it appears to be linked to the ClamAV scanner Zip module failing. I need to do a complete server restart then stop/start clamav to get the server going again.
I am now in the situation where the "Remote client interface" thinks it is shutting down and wont allow me to shut it down or start it up. My whole office is now without email access. How can I tell the server to cancel the shutdown and start the service ???

[ScalixSupport]

Hi Graeme,

Try this:

omreset -o off rci
omon rci

However, the bigger problem is your ClamAV failing. There are several posts on the net regarding older versions of ClamAV and AES encrypted Zip files. I'm not sure what version of ClamAV you're running, but if it's not the latest, you may want to upgrade it and see if that resolves the problem.

Thanks,
Rachel

[graemef]

Many thanks for the support. I managed to get some tech support from your Australian distributors, very helpful people, who told me the same thing.
I am running the latest ClamAV 0.87.1 and latest zlib 1.2.2.
I have one of the zip file attachments that causes it to generate the error if there is an email address I can send it to.
The system only seems to crash after it is taken offline nightly for backups then bought back online. The first zip file it strikes stops Scalix from processing mail, or crashes ClamAV (I am not sure which). I think clamav probably crashes as scalix will keep collecting email in the Router and local queues. I then have to reboot the server (starting and stopping scalix and clamav does nothing) and do a service clamd restart. I then need to do an omresub -q ERROR as scalix has processed the messages and stuck them in the Corrupt queue when clamav was not running.

[ScalixSupport]

Hi Graeme,

I'm glad you're back up and running. Regarding ClamAV, have you tried saving the zip file onto your Scalix server and then typing:

clamdscan zipfile

Does that cause clamd to hang? If so, you should go to:

http://www.clamav.net/bugs.html#pagestart

and follow the instructions on submitting ClamAV bugs.

Thanks,
Rachel

[graemef]

I have tried that, it simply generates the same message. ClamAV does not hang though.

/root/bad_zip: Zip module failure ERROR

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.016 sec (0 m 0 s)

I have just noticed that the daily report from Scalix last night had
***************** WARNING ************************** /opt/scalix/bin/omshut : Some UAL Interface processes are still running after waiting for 300 seconds for their termination To wait for a longer period run 'omshut -t <timeout>'.

***************** WARNING ************************** Scalix 9.2.1.24

at the start of it. It did not look to shut down cleanly ??


Cheers
Graeme

[ScalixSupport]

Hi Graeme,

Assuming the zip file isn't corrupt, you should definitely submit that to the ClamAV folks as I'm sure they would want to know about it.

The Scalix warning you received could cause you a problem if you brought the server back up without waiting for those ual.remote processes to die or killing them manually. What could happen is those old ual.remote processes may put a lock on a user's mailbox and when Local Delivery attempts to deliver a message to that person, it will sit there waiting for the lock to be removed, which, in effect, stops local delivery of mail. The only way to clear that up is to kill those old ual.remote processes.

Thanks,
Rachel

[graemef]

Thanks for your help Rachel,
I will look into it further.
Cheers
Graeme