Hi to all. In centos8 i've installed postfix, dovecot and amavis-new with clamd. I sent to me a virus-test file from another account and amavis log 2 files !? my log of clamd/amavisd.conf Code: Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 5 Sun Jun 14 14:46:24 2020 -> Got new connection, FD 10 Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 6 Sun Jun 14 14:46:24 2020 -> fds_poll_recv: timeout after 30 seconds Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 10 Sun Jun 14 14:46:24 2020 -> got command CONTSCAN /var/spool/amavisd/tmp/amavis-20200614T131602-02444-u9JYBlVy/parts (75, 7), argument: /var/spool/amavisd/tmp/amavis-20200614T131602-02444-u9JYBlVy/parts Sun Jun 14 14:46:24 2020 -> mode -> MODE_WAITREPLY Sun Jun 14 14:46:24 2020 -> Breaking command loop, mode is no longer MODE_COMMAND Sun Jun 14 14:46:24 2020 -> Consumed entire command Sun Jun 14 14:46:24 2020 -> Number of file descriptors polled: 1 fds Sun Jun 14 14:46:24 2020 -> fds_poll_recv: timeout after 600 seconds Sun Jun 14 14:46:24 2020 -> THRMGR: queue (single) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> THRMGR: queue (bulk) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> /var/spool/amavisd/tmp/amavis-20200614T131602-02444-u9JYBlVy/parts/p003: Win.Test.EICAR_HDB-1 FOUND Sun Jun 14 14:46:24 2020 -> /var/spool/amavisd/tmp/amavis-20200614T131602-02444-u9JYBlVy/parts/p006: Win.Test.EICAR_HDB-1 FOUND Sun Jun 14 14:46:24 2020 -> Finished scanthread Sun Jun 14 14:46:24 2020 -> Scanthread: connection shut down (FD 10) Sun Jun 14 14:46:24 2020 -> THRMGR: queue (single) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> THRMGR: queue (bulk) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 5 Sun Jun 14 14:46:24 2020 -> Got new connection, FD 10 Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 6 Sun Jun 14 14:46:24 2020 -> fds_poll_recv: timeout after 30 seconds Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 10 Sun Jun 14 14:46:24 2020 -> got command CONTSCAN /var/spool/amavisd/tmp/amavis-20200614T131602-02443-0wu7ytKp/parts (75, 7), argument: /var/spool/amavisd/tmp/amavis-20200614T131602-02443-0wu7ytKp/parts Sun Jun 14 14:46:24 2020 -> mode -> MODE_WAITREPLY Sun Jun 14 14:46:24 2020 -> Breaking command loop, mode is no longer MODE_COMMAND Sun Jun 14 14:46:24 2020 -> Consumed entire command Sun Jun 14 14:46:24 2020 -> Number of file descriptors polled: 1 fds Sun Jun 14 14:46:24 2020 -> fds_poll_recv: timeout after 600 seconds Sun Jun 14 14:46:24 2020 -> THRMGR: queue (single) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> THRMGR: queue (bulk) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> Finished scanthread Sun Jun 14 14:46:24 2020 -> Scanthread: connection shut down (FD 10) Sun Jun 14 14:46:24 2020 -> THRMGR: queue (single) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> THRMGR: queue (bulk) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 5 Sun Jun 14 14:46:24 2020 -> Got new connection, FD 10 Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 6 Sun Jun 14 14:46:24 2020 -> fds_poll_recv: timeout after 30 seconds Sun Jun 14 14:46:24 2020 -> Received POLLIN|POLLHUP on fd 10 Sun Jun 14 14:46:24 2020 -> got command CONTSCAN /var/spool/amavisd/tmp/amavis-20200614T131602-02444-u9JYBlVy/parts (75, 7), argument: /var/spool/amavisd/tmp/amavis-20200614T131602-02444-u9JYBlVy/parts Sun Jun 14 14:46:24 2020 -> mode -> MODE_WAITREPLY Sun Jun 14 14:46:24 2020 -> Breaking command loop, mode is no longer MODE_COMMAND Sun Jun 14 14:46:24 2020 -> Consumed entire command Sun Jun 14 14:46:24 2020 -> Number of file descriptors polled: 1 fds Sun Jun 14 14:46:24 2020 -> fds_poll_recv: timeout after 600 seconds Sun Jun 14 14:46:24 2020 -> THRMGR: queue (single) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> THRMGR: queue (bulk) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> Finished scanthread Sun Jun 14 14:46:24 2020 -> Scanthread: connection shut down (FD 10) Sun Jun 14 14:46:24 2020 -> THRMGR: queue (single) crossed low threshold -> signaling Sun Jun 14 14:46:24 2020 -> THRMGR: queue (bulk) crossed low threshold -> signaling
Works as intended. Amavis cuts a mail in different parts and each part can be analyzed by one clamd process. Same here: https://www.server-world.info/en/note?os=Fedora_32&p=mail&f=7
