[Rspamd-Users] Avast antivirus - IO timeout

[Gerald Galster]

> we trying Avast as antivirus for rspamd (now have 30-day trial license).
> 
> [...]
> 2024-03-12 10:46:36 #909(main) <7festm>; lua; lua_util.lua:1216: enable debug for Lua module avast (antivirus aliased)
> 2024-03-12 10:46:36 #909(main) <7festm>; lua; antivirus.lua:209: added antivirus engine avast -> AVAST_VIRUS
> 2024-03-12 10:48:33 #1188(normal) <d6edc7>; avast; avast.lua:168: established connection to 127.0.0.1:8080; retransmits=0
> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; lua; avast.lua:179: failed to request to avast (127.0.0.1:8080): IO timeout
> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; lua; avast.lua:148: AVAST_VIRUS [avast]: failed to scan, maximum retransmits exceed
> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; lua; common.lua:113: avast: result - FAILED with error: "failed to scan and retransmits exceed - score: 0"
> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; task; finalize_item: slow rule: AVAST_VIRUS(328): 4006.03 ms; enable slow timer delay
> 
> [...]
> Is any option to "enable slow timer delay" or increase retransmit?


Once I had to increase these values because clamav was too slow reloading its signature database.
Maybe this works with Avast as well.

/etc/rspamd/local.d/antivirus.conf:

clamav {
    ...
    timeout = 15.0;
    retransmits = 4;
}

Best regards,
Gerald