Not Receiving Email Since Uninstalling ClamAV

[snowweb]

Hi, yesterday, due to other problems, I uninstalled ClamAV. I also removed manually, all related files and the antivirus entry in exim.conf.

Now, no domain can send or receive mail.

I have tried all the usual things like restarting my VPS container, Exim, DA, etc. I have also switched to the default exim.conf and exim.pl files. I have also tried disabling SpamAssassin but it made no difference.

I tried reinstalling ClamAV too, but even that didn't resolve it, so I stripped it out again.

Exim Mailog:

malware acl condition: unable to connect to sophie UNIX socket (/var/run/sophie). errno=2

It's like Exim is still trying to send the emails to ClamAV but I can't figure out how to stop it.

When trying send email using webmail (Squirrelmail), I get the following message,

Message not sent. Server replied:

Requested action aborted: error in processing
451 Temporary local problem - please try later

I'm using CentOS 5.0, on a VPS from serverpoint which is equipped with Parallels Power Panel - Virtuozzo Container manager. My hosting software is Direct Admin.

I have been requesting support on the DirectAdmin forums since yesterday morning, but nobody seems able to help me there. I hope you guys can

This is getting pretty urgent now, as no domain can send or receive email since yesterday lunchtime, so as you can imagine, I'm not the most popular guy in town now.

Please, please help if you can. My unix skills are relatively basic although I've been a network engineer for many years.

Thanks,

pete

PS. Sorry there is not as much info as I would like, because some of the logfiles I'm trying to post contain domain names which this forum is interpreting as "URLs to other sites" and is therefore giving me the following error every time I try to post, "You are only allowed to post URLs to other sites after you have made 15 posts or more." This happens whether I surround the entries in code or quote tags! What a pain!

[snowweb]

It was solved for me by John at DirectAdmin support, who logged in and fixed the problem for.

Thanks,

pete

[saivin]

Hi snowweb,
Good to know your problem is solved. But it would be nice to know what your friend did to solve the problem (hoping that you took note of what files he edited or commands he ran). It may help others who may get into same position.

[snowweb]

Hi, I was unable to see what John did, but this is what he posted regarding what he did on our server:

Hello,

Just a followup for a few of the issues relating to this thread (after logging in to check a few things)

1) The /etc/exim.conf wasn't patched for dovecot.
I used this guide to update the exim.conf and repatch it:
(URL removed because I'm not allowed to post URLs on here until I've made at least 15 posts!) DirectAdmin Knowledge Base[/url]

2) regarding the custombuild "default php" error, that was a bit strange, but simply deleting the options.conf and running "./build" forces it to generate a new one. The value appeared to be set correct in the options.conf, so I wasn't sure what the issue was there.. regardless, it's fixed. The working build script would have fixed step 1, but I did it manually anyway. I think the previous build script was a bit older (didn't check exactly).

3) since mail was being delivered to /var/spool/virtual, I ran:
./build todovecot

which reconverted everything over. I renamed /var/spool/virtual to virtual.moved, just so that if you run it again, you don't get duplciates, and so that the original emails isn't deleted. (delete that directory once you're satisfied everything is working ok)

That should do the trick, the clamav stuff, you can attempt again. If you need to undo and start back to the default exim.conf again, use the guide mentioned above id=51 and don't forget to repatch for dovecot

John