[Rspamd-Users] Avast antivirus - IO timeout

[Tomasz Kaźmierczak]

Thank you Gerald,

i add this to avast config, and in log i see only this:

2024-03-14 14:44:27 #5792(normal) <346d30>; avast; avast.lua:168: 
established connection to 127.0.0.1:8080; retransmits=3

and thats all about avast :(

rspamd not waiting for response from Avast.

2024-03-14 14:44:27 #5792(normal) <346d30>; avast; avast.lua:168: 
established connection to 127.0.0.1:8080; retransmits=3
2024-03-14 14:44:35 #5792(normal) <346d30>; events; 
rspamd_session_cleanup: forced removed event on destroy: 
00007FDA087A76C0, subsystem: rspamd lua tcp, scheduled from: AVAST_VIRUS

i see in rspamd.log that some modules (Greylist, ISN, etc.) reports:

enable slow timer delay

But this is for another questions...

Regards,
kazix

W dniu 13.03.2024 o 23:32, Gerald Galster pisze:
>> we trying Avast as antivirus for rspamd (now have 30-day trial license).
>>
>> [...]
>> 2024-03-12 10:46:36 #909(main) <7festm>; lua; lua_util.lua:1216: enable debug for Lua module avast (antivirus aliased)
>> 2024-03-12 10:46:36 #909(main) <7festm>; lua; antivirus.lua:209: added antivirus engine avast -> AVAST_VIRUS
>> 2024-03-12 10:48:33 #1188(normal) <d6edc7>; avast; avast.lua:168: established connection to 127.0.0.1:8080; retransmits=0
>> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; lua; avast.lua:179: failed to request to avast (127.0.0.1:8080): IO timeout
>> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; lua; avast.lua:148: AVAST_VIRUS [avast]: failed to scan, maximum retransmits exceed
>> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; lua; common.lua:113: avast: result - FAILED with error: "failed to scan and retransmits exceed - score: 0"
>> 2024-03-12 10:48:37 #1188(normal) <d6edc7>; task; finalize_item: slow rule: AVAST_VIRUS(328): 4006.03 ms; enable slow timer delay
>>
>> [...]
>> Is any option to "enable slow timer delay" or increase retransmit?
>
> Once I had to increase these values because clamav was too slow reloading its signature database.
> Maybe this works with Avast as well.
>
> /etc/rspamd/local.d/antivirus.conf:
>
> clamav {
>      ...
>      timeout = 15.0;
>      retransmits = 4;
> }
>
> Best regards,
> Gerald
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5799 bytes
Desc: Kryptograficzna sygnatura S/MIME
URL: <https://lists.rspamd.com/pipermail/users/attachments/20240314/1c35a561/attachment.bin>