If I can help you in any way, just say it! Here is the output of "XXXXX:~# ls -lat /tmp/" drwxrwxrwt 14 root root 8192 Mar 14 08:15 . -rw------- 1 root root 0 Mar 14 04:00 sess_fdbd120d1a74e7fd82aac608be90c402 -rw------- 1 root root 0 Mar 14 03:15 sess_afe5ca359fcc86c99d575ea3e96c1245 -rw------- 1 root root 0 Mar 14 02:05 sess_741cbd7d172b5e23a0498f03cedb28a5 -rw------- 1 root root 0 Mar 14 00:40 sess_9cc44747f410241b466a5b65f31e780e -rw------- 1 root root 0 Mar 14 00:30 sess_f78f9154e72c5d63e9f7a391634d240a -rw------- 1 root root 0 Mar 13 23:59 sess_e1f97b801bad918edc4a5f4d6976901b -rw------- 1 root root 0 Mar 13 23:59 sess_8ec1b08000f1ada42d8e54a6366288ef -rw------- 1 root root 0 Mar 13 23:59 sess_c7c80fdddd7b8563b3c0ceada3bfbe61 -rw------- 1 admispconfig admispconfig 25 Mar 13 22:25 sess_fcc468c7afa6c37e5a06d49037a8953e -rw------- 1 admispconfig admispconfig 25 Mar 13 20:39 sess_4a54a7011ab52be859e9feda1ed44751 -rw------- 1 admispconfig admispconfig 25 Mar 13 17:29 sess_2635de21f1ddce60fb5a15e0e1d41015 -rw------- 1 root root 0 Mar 13 16:14 sess_f5bf54e572f34ab7cde295e6c6af995c -rw------- 1 root root 0 Mar 13 16:14 sess_48847ab104bf9f1dfa540dd268270697 -rw------- 1 root root 0 Mar 13 16:14 sess_3819e8a0704d069fbdf1900dfefe9079 -rw------- 1 root root 0 Mar 13 16:13 sess_05e58aa6fcac85f79935577f52023eba -rw------- 1 root root 0 Mar 13 16:12 sess_e901b0e0de49312e3590803247760cc9 -rw------- 1 root root 0 Mar 13 15:15 sess_869371e60f4d6d50ffcd8af31035bb9b drwx------ 2 web3_giessler web3 4096 Mar 13 10:48 clamav-e4210d821e89323ab70a332e9baa5a88 drwx------ 2 web3_skerutsch web3 4096 Mar 13 10:45 clamav-59e75e78b0c384e28fc4d93fa143cfe9 drwx------ 2 web4_nessa web4 4096 Mar 13 07:52 clamav-aaa71346eb7d9641564fa94b448e7f87 -rw------- 1 root root 0 Mar 13 04:00 sess_82f668696a4ad9a6afb84d58c9ee0934 drwx------ 2 web4_nessa web4 4096 Mar 13 03:43 clamav-e07cb840ad7f337cdf7d7747bb8d96e9 -rw------- 1 root root 0 Mar 13 03:15 sess_c237f6bab7c2274c9acdadd54dbf18cd -rw------- 1 root root 0 Mar 13 02:05 sess_ae0aea36f280bf0e6c53987757a31780 -rw------- 1 root root 0 Mar 13 00:40 sess_c8421c2b4d57c6448b4fa5a21ace7b66 -rw------- 1 root root 0 Mar 13 00:30 sess_18e2fba608e2008a98b73c9efd92aff2 -rw------- 1 root root 0 Mar 12 23:59 sess_88e667ab1f02f24f01df1941f9ff44be -rw------- 1 root root 0 Mar 12 23:59 sess_5f5fcd62875429a1aacbca7cd6b88dc4 -rw------- 1 root root 0 Mar 12 23:59 sess_6f0a0886cf8c59010d5f1e1f46552c54 drwx------ 2 web3_skerutsch web3 4096 Mar 12 15:21 clamav-ddb0e66675684c3f221ac26104a87c9c drwx------ 2 web3_giessler web3 4096 Mar 12 15:21 clamav-40e98d8d2c2ca5f6964860427b353d9e drwx------ 2 web3_nagel web3 4096 Mar 12 15:21 clamav-63b2c50ca77da297729cf57a5b689e21 drwx------ 2 web3_giessler web3 4096 Mar 12 15:18 clamav-e3b0f18a54fe54ebbac5544e9ccd2530 drwx------ 2 web3_skerutsch web3 4096 Mar 12 15:18 clamav-5c19db45588f0bbba3ee9bbba5a3c482 drwx------ 2 web3_nagel web3 4096 Mar 12 15:18 clamav-e8190bdc320ef86af736bdc4ca73ccdf -rw------- 1 root root 0 Mar 12 15:15 sess_df9ed5612775bc4994c93b5be8ede525 -rw------- 1 web3_giessler web3 0 Mar 12 12:53 mailchk.yBfqEx -rw------- 1 web3_kitakr web3 0 Mar 12 12:53 mailchk.QdQ9Lw -rw------- 1 web3_giessler web3 0 Mar 12 12:53 mailchk.CxrNAr -rw------- 1 web3_kitakr web3 0 Mar 12 12:53 mailchk.c4iCll -rw------- 1 root root 0 Mar 12 04:00 sess_45a4b5d3cc081469a3642ad5f7c36d64 -rw------- 1 root root 0 Mar 12 03:15 sess_2a5ca71bd84f8ed759bda34840367223 -rw------- 1 root root 0 Mar 12 02:05 sess_a0c95837dc91b089620988f100688933 -rw------- 1 root root 0 Mar 12 00:40 sess_c3b31e84b485184adfb6ff459703ba5e -rw------- 1 root root 0 Mar 12 00:30 sess_594664e2e0dc40686e6e9f52848a020e -rw------- 1 root root 0 Mar 11 23:59 sess_f94acae2aa87460a73cbcf09608a4afe -rw------- 1 root root 0 Mar 11 23:59 sess_37ff33853fc8fc43aafdd9aa8fa4b5a9 -rw------- 1 root root 0 Mar 11 23:59 sess_be4de50dfeebe350bce37090510cf8f5 -rw------- 1 root root 0 Mar 11 15:15 sess_1aba4ddc87f36a5042e7d5068a70beee -rw------- 1 root root 0 Mar 11 04:00 sess_7a9b7a3c9b1daecb4b87f9f26d47b146 -rw------- 1 root root 0 Mar 11 03:15 sess_eb915406742a1d9e11626da4b7425e91 -rw------- 1 root root 0 Mar 11 02:05 sess_e314a9b865e68f30ff1b397a6ef1aab1 -rw------- 1 root root 0 Mar 11 00:40 sess_96bae12b996cc3f51a4c50d7a0e4a93f -rw------- 1 root root 0 Mar 11 00:30 sess_79b4bbc8f391a8bf4fa3f5d69178326d -rw------- 1 root root 0 Mar 10 23:59 sess_d9c61e6d818b2975478c409f064135c7 -rw------- 1 root root 0 Mar 10 23:59 sess_3aa80eccbd70dc9fffedab737f5a8d9e -rw------- 1 root root 0 Mar 10 23:59 sess_f64ddd8362aa5cfa1c82431c1f323272 -rw------- 1 root root 0 Mar 10 15:15 sess_da724e83e4798355961f4a7257cfab4f -rw------- 1 root root 0 Mar 10 04:00 sess_8d4c588c0dde828130daea8c6ad71986 -rw------- 1 root root 0 Mar 10 03:15 sess_70c45afba239b725495252d349ffe3e5 -rw------- 1 root root 0 Mar 10 02:05 sess_82ccfe8b0a3a7c58c4f8cec4f635e9ad -rw------- 1 root root 0 Mar 10 00:40 sess_30bddedad32fa4c55a12041daa8b0e43 -rw------- 1 root root 0 Mar 10 00:30 sess_16371ceb95fb497b07f16f3361716e2f -rw------- 1 root root 0 Mar 9 23:59 sess_53f6a45358e41bd47eb20142f0f089c0 -rw------- 1 root root 0 Mar 9 23:59 sess_c60c6a6db7a595ff65005a80c2274193 -rw------- 1 root root 0 Mar 9 23:59 sess_d289e2b7a05e83a3b16ac267fd37c0b1 -rw------- 1 root root 0 Mar 9 15:15 sess_2de99f5fc4d44ed9480d5bf8fed63e38 -rw------- 1 root root 0 Mar 9 04:00 sess_2ed2a109da9a534e672a9b76ad52bcc3 -rw------- 1 root root 0 Mar 9 03:15 sess_dc64a7d7690face2fc8d014c9de94275 -rw------- 1 root root 0 Mar 9 02:05 sess_0f754ab26203b87427a1e37916a78917 -rw------- 1 root root 0 Mar 9 00:40 sess_a3bf0e4b30827684c5f788b7c74a3640 -rw------- 1 root root 0 Mar 9 00:30 sess_b9792cef9fed2bd392d219dc1d24e8b5 -rw------- 1 root root 0 Mar 8 23:59 sess_9aa89ab1aa8f28c7ce9b527bc64f1082 -rw------- 1 root root 0 Mar 8 23:59 sess_688d09fd2ae1380bee3c55dacae72050 -rw------- 1 root root 0 Mar 8 23:59 sess_ece1d52f34a8089cd15d13a70847356b -rw------- 1 root root 0 Mar 8 20:17 sess_1eb5eb5be54a71c051f793ef98c979f3 drwxrwxrwt 2 root root 4096 Mar 6 22:20 .ICE-unix drwxrwxrwt 2 root root 4096 Mar 6 22:20 .X11-unix drwxr-xr-x 22 root root 4096 Mar 6 21:47 .. and XXXXX:~# ls -lalt /tmp/clamav-aaa71346eb7d9641564fa94b448e7f87/ total 16996 drwxrwxrwt 14 root root 8192 Mar 14 08:15 .. -rw------- 1 web4_nessa web4 11972608 Mar 13 07:52 main.ndb drwx------ 2 web4_nessa web4 4096 Mar 13 07:52 . -rw------- 1 web4_nessa web4 625180 Mar 13 07:52 main.hdb -rw------- 1 web4_nessa web4 4737478 Mar 13 07:52 main.db -rw------- 1 web4_nessa web4 17992 Mar 13 07:52 COPYING Not all folders contain that much data. Some only contain the COPYING file. Does anybody see a reason why these folders belong to ISPConfig users? Do they all have a virus DB on their own? Alex
Hi Falko, It think so, too. But I did that the last time this problem occured and now there are some of them again. I had a look at my logfiles and realized that the folders I deleted had other ids following the "clamav-". This makes me think that simply deleting the folders is no solution for the actual problem. Did you find something about the folders? I had no luck so far. Greets, Alex
Just for your interest, the story continues! Since my lasst post the following files and directories have been created: Code: # ls -lalt /tmp/ -rw------- 1 root root 0 Mar 16 04:00 sess_8bc9652be93325ca9d0524ce326aaf8e -rw------- 1 root root 0 Mar 16 03:15 sess_7db54336299e84d9a05eae906f2df173 -rw------- 1 root root 0 Mar 16 02:05 sess_1357efd82da7adaa3da9d98acf3cd72d -rw------- 1 root root 0 Mar 16 00:40 sess_869ff63c086f1893a53111f80233c0fb -rw------- 1 root root 0 Mar 16 00:30 sess_29eaf1375b5d942651536c0cbdd0c463 -rw------- 1 root root 0 Mar 15 23:59 sess_1b630ee4be380eb357edb6915a0e1b57 -rw------- 1 root root 0 Mar 15 23:59 sess_341b6916629bc8725cd625171d390be0 -rw------- 1 root root 0 Mar 15 23:59 sess_586575cf91e0d8f3d4aa9bf8a711c34c -rw------- 1 web3_nagel web3 2258 Mar 15 21:07 .spamassassin26780Mm4bMQtmp -rw------- 1 root root 0 Mar 15 15:15 sess_6f6f86bcf3dc1dd6ac04a5ea48712d74 -rw------- 1 web4_nessa web4 0 Mar 15 10:28 mailchk.VJega0 -rw------- 1 web4_nessa web4 0 Mar 15 10:28 mailchk.bzhSo1 -rw------- 1 web3_giessler web3 0 Mar 15 10:11 mailchk.8nucCV drwx------ 2 web3_giessler web3 4096 Mar 15 10:11 clamav-81a02eb8396bd089ce6f27383cba7b34 -rw------- 1 web3_nagel web3 0 Mar 15 10:11 mailchk.SdX939 -rw------- 1 web3_skerutsch web3 0 Mar 15 10:11 mailchk.qxq9oY -rw------- 1 web3_nagel web3 0 Mar 15 10:02 mailchk.IjmMg5 -rw------- 1 web3_nagel web3 0 Mar 15 10:01 mailchk.lFvOu0 -rw------- 1 web3_nagel web3 0 Mar 15 09:54 mailchk.CVmNph -rw------- 1 web3_nagel web3 0 Mar 15 09:49 mailchk.n87vNc drwx------ 2 web3_skerutsch web3 4096 Mar 15 09:08 clamav-a001b2acd936295eb0d7d79f38f23198 drwx------ 2 web3_nagel web3 4096 Mar 15 09:08 clamav-7816fd934c1b65df3cf2e8d816dda095 -rw------- 1 root root 0 Mar 15 04:00 sess_4cbeb31ffe3335d2580cdafc87d73d4b -rw------- 1 root root 0 Mar 15 03:15 sess_e321051d37ffe4be983cb42a3064a626 -rw------- 1 root root 0 Mar 15 02:05 sess_a6d70188e7a9dbabd353af215d952eff -rw------- 1 root root 0 Mar 15 00:40 sess_48ec9176fbe708038bb76de2cde9c01e -rw------- 1 root root 0 Mar 15 00:30 sess_423e014f325a4f987a35ad78c838d118 -rw------- 1 root root 0 Mar 14 23:59 sess_f19cb1e57ebea82b0e8ccb88bf0f66af -rw------- 1 root root 0 Mar 14 23:59 sess_42ef003ac85ff1c5185f593b0e225b85 -rw------- 1 root root 0 Mar 14 23:59 sess_301427c0c84fd8154c880458b8da9069 drwx------ 2 web3_skerutsch web3 4096 Mar 14 21:41 clamav-e5867e9d71e400b68bdc174f5e20458a drwx------ 2 web3_nagel web3 4096 Mar 14 17:54 clamav-7a87fcfba959a5fa80fac47518d1aca1 drwx------ 2 web3_skerutsch web3 4096 Mar 14 17:54 clamav-f82479a035194b09915cc9298aae7265 drwx------ 2 web3_skerutsch web3 4096 Mar 14 16:01 clamav-06bc54e53e299a641f99e2c536ab22d2 drwx------ 2 web3_nagel web3 4096 Mar 14 16:01 clamav-1e33a99d87fae80d233cae2690d13a5e -rw------- 1 root root 0 Mar 14 15:15 sess_ff23cd8a0a74ce1120fdcf510bd5cd3a drwx------ 2 web3_nagel web3 4096 Mar 14 12:01 clamav-70149fde74be8e18d510100434f54586 drwx------ 2 web3_giessler web3 4096 Mar 14 12:01 clamav-b0ceda84051b007a58ce85b84cba9150 drwx------ 2 web3_skerutsch web3 4096 Mar 14 12:01 clamav-2dde978916f131d6486aa174446004fb (...) Of course I could add a cronjob running once a day, deleting all clamav-* folders in /tmp, but that's no solution for me? Greets, Alex
What's in /home/admispconfig/ispconfig/lib/config.inc.php (please don't post the MySQL password here!)?
Hi, what exact setting are you interested in? Code: /********************************************** * System Settings **********************************************/ $go_info["server"]["dir_trenner"] = "/"; $go_info["server"]["server_root"] = "/home/admispconfig/ispconfig"; define("DIR_TRENNER","/"); define("SERVER_ROOT","/home/admispconfig/ispconfig"); define("INCLUDE_ROOT",SERVER_ROOT.DIR_TRENNER."lib"); define("CLASSES_ROOT",INCLUDE_ROOT.DIR_TRENNER."classes"); define("DB_TYPE","mysql"); if(isset($_SERVER['HTTP_HOST'])){ $go_info["server"]["server_url"] = 'https://'.$_SERVER['HTTP_HOST']; } else { $go_info["server"]["server_url"] = "https://www.croak.de:81"; } $go_info["server"]["include_root"] = $go_info["server"]["server_root"] . $go_info["server"]["dir_trenner"] ."lib"; $go_info["server"]["classes_root"] = $go_info["server"]["include_root"] . $go_info["server"]["dir_trenner"] ."classes"; $go_info["server"]["temp_dir"] = $go_info["server"]["server_root"] . $go_info["server"]["dir_trenner"] ."temp"; $go_info["server"]["files_dir"] = $go_info["server"]["server_root"] . $go_info["server"]["dir_trenner"] ."files"; $go_info["server"]["backup_dir"] = $go_info["server"]["server_root"] . $go_info["server"]["dir_trenner"] ."backup"; $go_info["server"]["version"] = "2.2.11"; $go_info["server"]["os"] = "linux"; $go_info["server"]["ort"] = "local"; $go_info["server"]["banner"] = "0"; $go_info["server"]["db_host"] = "localhost"; $go_info["server"]["db_name"] = "db_ispconfig"; $go_info["server"]["db_user"] = "XXX"; $go_info["server"]["db_password"] = "XXX"; $go_info["server"]["db_type"] = "mysql"; $go_info["server"]["mail_server"] = ""; $go_info["server"]["mail_user"] = ""; $go_info["server"]["mail_password"] = ""; $go_info["server"]["smtp_server"] = "localhost"; $go_info["server"]["mode"] = ""; $go_info["server"]["lang"] = "de"; $go_info["server"]["postfix_config"] = 1; // 1 = SENDMAIL-STYLE, 2 = POSTFIX-STYLE $go_info["server"]["smtp_restart"] = 1; // 1 = stop/start, 2 = restart $go_info["server"]["network_config"] = 0; // 0 = none, 1 = automatic $go_info["server"]["sudo_du_enabled"] = 0; // enable sudo for gathering website file usage $go_info["server"]["apache2_php"] = 'both'; // 'filter' = set PHP filters, 'addtype' = Set PHP addtype or 'both' = Set Filter + Addtype, suphp = SuPHP wrapper enabled, 'addhandler' = Set PHP AddHandler (nescessary for SuSE 10.2) $go_info["server"]["password_hash"] = 'crypt'; // 'crypt' = crypt; 'md5' = crypt-md5 $go_info["server"]["do_automated_backups"] = 0; // 0 = no, 1 = yes; PLEASE NOTE: automated backups might fill up your HDD fast! $go_info["server"]["ssh_chroot"] = 0; $go_info["server"]["httpd_check"] = 1; $go_info["server"]["salutatory_email_charset"] = 'iso-8859-1'; // possible values are iso-8859-1, iso-8859-2, ..., us-ascii, koi8-r (Russian), ...; if no charset is specified, unknown-8bit is assumed. I thought about changing some of these but didn't know if it could do any harm to the system if I e.g. changed $go_info["server"]["apache2_php"] or $go_info["server"]["ssh_chroot"] Alex
Thank you very much for this new version (all the team). Today I installed the 2.2.11 and it works fine.
Same clamav problem Hi all and thaks for the great work of ISPConfig I upgraded my ISPConfig from 2.2.9 to 2.2.12 about a week ago on FC5 runing for more than a year, and I started to get a lot of users out of quota after investigating I found that there are file in the /tmp/clamav-xxxxxxx folder that are owned by some of those users and runing them out of quota, deleting the content of /tmp resolves the problem but I think that this is not the solution, as I don't know what make that happen, and if i cron delete those files can't that interfere with the mails being scanned at the moment on deleting Best regards team
Why did you post to the 2.2.11 thread as you run 2.2.12? I guess some users will get confused by this. Please make a new thread for your problem or post it to the 2.2.12 thread. Thanks, Till
In my previous post I said that it's Fedora Code 5, and sory for posting in the wrong thread but it's because of the same isue concerning clamav Regards
This was a problem in clamav 0.90.0 (ISPConfig 2.2.10), which was solved in Clamav 0.90.1 (ISPConfig 2.2.11). The ISPConfig 2.2.12 release comes with ClamAV 0.90.2, maybe this ClamAV release is buggy again
Please post the output of: ls -la /home/admispconfig/ispconfig/tools/clamav/share/clamav/ and ls -la /home/admispconfig/ispconfig/tools/clamav/share/
Well, here are the outputs Code: [~]# ls -la /home/admispconfig/ispconfig/tools/clamav/share/clamav/ total 9168 drwxr-xr-x 3 admispconfig admispconfig 4096 avr 25 14:09 . drwxr-xr-x 4 admispconfig admispconfig 4096 jui 18 2006 .. drwxr-xr-x 2 admispconfig admispconfig 4096 avr 25 06:57 daily.inc -rwxr-xr-x 1 admispconfig admispconfig 9351789 avr 17 13:10 main.cvd -rw------- 1 admispconfig admispconfig 104 avr 25 14:09 mirrors.dat [~]# ls -la /home/admispconfig/ispconfig/tools/clamav/share/ total 16 drwxr-xr-x 4 admispconfig admispconfig 4096 jui 18 2006 . drwxr-xr-x 9 admispconfig admispconfig 4096 avr 13 2006 .. drwxr-xr-x 3 admispconfig admispconfig 4096 avr 25 14:09 clamav drwxr-xr-x 5 admispconfig admispconfig 4096 jui 18 2006 man thanks for your quick reply
Please execute: chmod -R 755 /home/admispconfig/ispconfig/tools/clamav/share/clamav to change the permissions of the directory to be world readable. Does the file: /home/admispconfig/ispconfig/tools/clamav/etc/freshclam.conf contain the line: Code: OnUpdateExecute 'chmod -R 755 /home/admispconfig/ispconfig/tools/clamav/share/clamav'
Hi, I've chmoded the directory, only the file mirrors.dat was not 755 and yes the line in /home/admispconfig/ispconfig/tools/clamav/etc/freshclam.conf exists !! I'll empty my /tmp and check it from time to time Best regards team and keep going
Hi all, Same problem even after installing 2.2.13, the /tmp dir is still causing out of quota to my customers Any idea team ? I double checked every comment posted concerning this problem and every thing looks ok
I have changed from clamav to clamd and posted my little contribution on http://www.howtoforge.com/forums/showthread.php?t=12864&page=2 clam is working fine and scanning my mails I tested it with eicar everything seems to be ok thanks team will we have to make it manually on every update of ISPConfig ? or is the configuration of clam independant from the update ?
