Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : No e-mail

[lexis2004]

running RHE with WHM 9.9.0 cPanel 9.9.0-C55
RedHat Enterprise 3 i686 - WHM X v3.1.0

cPanel Pro with clamavconnector. this is the logs.

2004-09-20 12:56:22 1C9SP6-0007OV-2I malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:56:22 1C9SP6-0007OV-2I H=(mail4.finchdam.com) [208.184.186.215] F=<gn.uucupfsklfnpxtvgtl@finchdam.com> tempora$
2004-09-20 12:56:48 1C9SPW-0007O6-8w malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:56:48 1C9SPW-0007O6-8w H=(ns1.911Interactive.com) [206.176.145.66] F=<ipn@ns1.911Interactive.com> temporarily $
2004-09-20 12:56:48 1C9SPW-0007O6-Bm malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:56:48 1C9SPW-0007O6-Bm H=(ns1.911Interactive.com) [206.176.145.66] F=<ipn@ns1.911Interactive.com> temporarily $
2004-09-20 12:56:48 1C9SPW-0007O6-Eu malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:56:48 1C9SPW-0007O6-Eu H=(ns1.911Interactive.com) [206.176.145.66] F=<ipn@ns1.911Interactive.com> temporarily $
2004-09-20 12:58:26 1C9SR5-0007P1-Vw malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:58:26 1C9SR5-0007P1-Vw H=(abooth.demon.co.uk) [211.49.3.72] F=<lhamilton_zq@admin.nls.uk> temporarily rejected$
2004-09-20 12:58:31 1C9SQu-0007Ow-H8 malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:58:31 1C9SQu-0007Ow-H8 H=(mx10.rmci.net) [205.162.184.35] F=<> temporarily rejected after DATA
2004-09-20 12:58:54 1C9SRY-0007P3-4L malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:58:54 1C9SRY-0007P3-4L H=(n28.grp.scd.yahoo.com) [66.218.66.84] F=<sentto-2150858-12761-1095645373-tulsametrom$
2004-09-20 12:59:02 1C9SRU-0007P2-UU malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:59:02 1C9SRU-0007P2-UU H=(admin.nls.uk) [211.236.195.140] F=<doug_cookero@cellularpia.co.kr> temporarily rejec$
2004-09-20 12:59:51 1C9SSP-0007P4-Fi malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:59:51 1C9SSP-0007P4-Fi H=(ccmm.qc.ca) [62.218.203.242] F=<emchase_xl@br-online.de> temporarily rejected after $
2004-09-20 13:01:48 SMTP command timeout on TLS connection from (ns1.911Interactive.com) [206.176.145.66]
2004-09-20 13:02:32 H=(puertoarica.cl) [61.102.101.162] F=<marissaberg_yy@rtl.de> rejected RCPT <mail@tulsametromedia.net>: $
2004-09-20 13:02:33 unexpected disconnection while reading SMTP command from (puertoarica.cl) [61.102.101.162]

the finished erros are :

2004-09-20 12:50:40 1C9SJa-0007DG-BV malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno$
2004-09-20 12:50:40 1C9SJa-0007DG-BV H=(sproxy.google.com) [64.233.170.130] F=<googlealerts-noreply@google.com> temporarily $

If you look in the logs before you disabled clamav it was giving unable to connect to UNIX socket /var/run/clamav/clamd (Namd (No such file or directory),
then it went to malware acl condition: clamd: unable to connect to UNIX socket /var/run/clamav/clamd (Permmission denied),
now it is malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno=2

Any idea's?

[sprintserve]

Check that /var/run/sophie exist and that your clamav have the rights to write to it. To know what user/group clamav uses, check /etc/clamav.conf. Default is clamav for both.