BUG: ClamAV 0.104.0 does not work

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
ralfik
New user
New user
Posts: 3
Joined: 2007-12-16 02:41

BUG: ClamAV 0.104.0 does not work

Post by ralfik » 2021-09-19 12:46

After updating ClamAV to version 0.104.0, hMail stopped communicating with the antivirus program.

"ERROR" 9352 "2021-09-19 00: 09: 06.565" "Severity: 3 (Medium), Code: HM5406, Source: ClamAVVirusScanner :: Scan, Description: Protocol error. Unexpected response: UNKNOWN COMMAND

After returning to version 0.103.3, everything is OK. There is probably a change in the communication protocol in the new version of ClamAV (?)

User avatar
RvdH
Senior user
Senior user
Posts: 1676
Joined: 2008-06-27 14:42
Location: Netherlands

Re: BUG: ClamAV 0.104.0 does not work

Post by RvdH » 2021-09-19 13:19

ralfik wrote:
2021-09-19 12:46
There is probably a change in the communication protocol in the new version of ClamAV (?)
Geez, would you really think :?: :!:
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
jimimaseye
Moderator
Moderator
Posts: 9236
Joined: 2011-09-08 17:48

Re: BUG: ClamAV 0.104.0 does not work

Post by jimimaseye » 2021-09-19 13:23

RvdH wrote:
2021-09-19 13:19
ralfik wrote:
2021-09-19 12:46
There is probably a change in the communication protocol in the new version of ClamAV (?)
Geez, would you really think :?: :!:
No, I wouldnt. I seriously doubt it.
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

palinka
Senior user
Senior user
Posts: 2976
Joined: 2017-09-12 17:57

Re: BUG: ClamAV 0.104.0 does not work

Post by palinka » 2021-09-19 14:09

Looks like there were a lot of changes in 0.104. Not surprising there would be errors on the windows side. I looked quickly and saw several windows issues with paths on github and the mailing list.

I would give it some time before upgrading. Better yet, send clamav log entries to the mailing list or post an issue on github. If they don't know about an issue, they won't be able to fix it.

User avatar
RvdH
Senior user
Senior user
Posts: 1676
Joined: 2008-06-27 14:42
Location: Netherlands

Re: BUG: ClamAV 0.104.0 does not work

Post by RvdH » 2021-09-19 15:23

Looks like 0.104.0 doesn't need special builds to run as service on Windows

Code: Select all

clamd and freshclam are now available as Windows services. To install and run them, use the --install-service option and net start [name] command.

Special thanks to Gianluigi Tiesi for his original work on this feature.
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

ralfik
New user
New user
Posts: 3
Joined: 2007-12-16 02:41

Re: BUG: ClamAV 0.104.0 does not work

Post by ralfik » 2021-09-19 16:34

RvdH wrote:
2021-09-19 15:23
Looks like 0.104.0 doesn't need special builds to run as service on Windows

Code: Select all

clamd and freshclam are now available as Windows services. To install and run them, use the --install-service option and net start [name] command.

Special thanks to Gianluigi Tiesi for his original work on this feature.
I tried that as the first thing that came to my mind. Unfortunately, the result is the same.

User avatar
RvdH
Senior user
Senior user
Posts: 1676
Joined: 2008-06-27 14:42
Location: Netherlands

Re: BUG: ClamAV 0.104.0 does not work

Post by RvdH » 2021-09-19 16:43

CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1676
Joined: 2008-06-27 14:42
Location: Netherlands

Re: BUG: ClamAV 0.104.0 does not work

Post by RvdH » 2021-09-19 18:13

Changelog says northing about a breaking change in how clamd should work, except for maybe:
Added the %f format string option to the ClamD VirusEvent feature to insert the file path of the scan target when a virus-event occurs. This supplements the VirusEvent %v option which prints the signature (virus) name. The ClamD VirusEvent feature also provides two environment variables, $CLAM_VIRUSEVENT_FILENAME and $CLAM_VIRUSEVENT_VIRUSNAME for a similar effect.
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

mipanu
New user
New user
Posts: 1
Joined: 2021-10-13 15:17

Re: BUG: ClamAV 0.104.0 does not work

Post by mipanu » 2021-10-13 15:19

Any solution?

I also get the same "UNKNOWN COMMAND".

ClamAV 0.104.0

Thanks.

User avatar
RvdH
Senior user
Senior user
Posts: 1676
Joined: 2008-06-27 14:42
Location: Netherlands

Re: BUG: ClamAV 0.104.0 does not work

Post by RvdH » 2021-10-13 15:36

You should really ask ClamAV people, apparently they have changed something that breaks compatibility
https://github.com/Cisco-Talos/clamav
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

Post Reply