pmg-smtp-filter time-outs using Avast 4.6.0

N

ndonkersloot

New Member
Proxmox Subscriber
Dec 12, 2024
3
1
3
We are running PMG for some time now with both ClamAV and Avast to scan incoming mail.
Since the update avast:amd64 (4.5.1-1~debian11, 4.6.0-1~debian11) we've noticed that our mailqueue is increasing fast.
After some time we've noticed multiple errors in our logs:

pmg-smtp-filter[77018]: 12312267A1DD0B6180A: Maximum time (300 sec) exceeded. virus analyze (avast) failed: ERROR at /usr/share/perl5/PMG/Utils.pm line 515.

The avast logs itself are clean.
By disabling avast using pmgsh set /config/admin --avast 0 everything is delivered like it should.

Are there known issues with Avast 4.6.0 in combination with PMG?
 
* hm - anything in the logs from avast itself?
* at least our test-installation does not show the issue - so it might not be a general problem
* how does your avast configuration look like? (I think it should be files in /etc/avast)
 
Stoiko Ivanov said:
* hm - anything in the logs from avast itself?
* at least our test-installation does not show the issue - so it might not be a general problem
* how does your avast configuration look like? (I think it should be files in /etc/avast)
Click to expand...
Hello Mr. Ivanov,

did you tried it with clean installation? Did you modify any parameters in the configs?
 
Stoiko Ivanov said:
no just the upgrade from the previous version

I think some minor adaptations to changes upstream: https://repo.avcdn.net/linux-av/doc/avast-techdoc.pdf

could you share the logs from avast or the systems in general?
could you share your avast config?
Click to expand...
Hello,

I've attached some screenshots. I've personally tested it with a new installation and a upgrade. The update process from 4.5.1 to 4.6.0 runs smooth. But immediately after the start of the avast.service(see picture installed_avast_service) the I/O delay increases up to 25 percent(see picture IO_delay_after_installation). Also I've attached a screenshot of the config(see picture Avast-Config) and Syslog.

Greetings,

Michael
 

Attachments

  • Installed_avast_service.png
    Installed_avast_service.png
    18.7 KB · Views: 13
  • syslog.png
    syslog.png
    171 KB · Views: 13
  • directory_after_installation.png
    directory_after_installation.png
    17.7 KB · Views: 11
  • IO_delay_after_installation.png
    IO_delay_after_installation.png
    54 KB · Views: 11
  • Avast-Config.png
    Avast-Config.png
    42.6 KB · Views: 13
Foxhole1Commander said:
I've attached some screenshots.
Click to expand...
please paste logs as text (in code-tags) - it's far easier to work with

Foxhole1Commander said:
the I/O delay increases up to 25 percent(
Click to expand...
this could be - and it could be a result of avast changing the way their program processes data - but as long as mail-processing does not run into timeouts I'd not worry too much
You should ask the avast support/community if they observed this as well (it's nothing we can help with)

one thing that did change according to their changelog:
https://repo.avcdn.net/linux-av/doc/avast-techdoc.pdf
is that scanning now runs multi-threaded - maybe you can set Threads to some higher number and see if things improve for you

I hope this helps!
 
Stoiko Ivanov said:
please paste logs as text (in code-tags) - it's far easier to work with
Click to expand...
Which log do you need?
Stoiko Ivanov said:
this could be - and it could be a result of avast changing the way their program processes data - but as long as mail-processing does not run into timeouts I'd not worry too much
You should ask the avast support/community if they observed this as well (it's nothing we can help with)
Click to expand...
That`s the point. It has influence on the functionality. Currenty we've to use the previous version.
 
Foxhole1Commander said:
Which log do you need?
Click to expand...
That was phrased a bit wrong - currently no need for a log - but a request for the next time !

Foxhole1Commander said:
That`s the point. It has influence on the functionality. Currenty we've to use the previous version.
Click to expand...
Yes - but it's nothing we can provide help with - as it's not our software.

I opened a thread in their community forum, as it seems to affect more users:

https://community.avast.com/t/versi...s-into-timeouts-and-increases-i-o-wait/881796
 
  • Like
Reactions: flames
  • Like
Reactions: Stoiko Ivanov
Foxhole1Commander said:
Hi,

we've the same problem!!! Also there is an increasing i/o delay!

We switched back to 4.5.1
Click to expand...
Hi,
same problem here. How did you manage to switch back to 4.5.1? My avast repository is only offering the 4.6.
Where can i find/get the previous version?
Greetings
Matthias
 
SPINNER IT said:
Where can i find/get the previous version?
Click to expand...
Code: 
apt install avast=4.5.1-1~debian12
should install version 4.5.1-1~debian12 (which was the previous version)
(you should consider also downgrading the other packages from that repository (e.g. avast-license))


SPINNER IT said:
My avast repository is only offering the 4.6.
Click to expand...
How is that configured?

Following https://repo.avcdn.net/linux-av/doc/avast-techdoc.pdf - the proper sources.list entry looks like:
Code: 
deb https://repo.avcdn.net/linux-av/deb debian-bookworm release

with that you should see all available versions in `apt show -a avast`

To mention it explicitly: I cannot say for sure how long the previous version is actually supported and gets virus-definition updates (a quick skim through the avast-techdoc.pdf did not show information on this) - You'd need to ask Avast for that infomation.
 
Hello Stoiko,
thx for your support.
Repository is well configured: deb https://repo.avcdn.net/linux-av/deb debian-bookworm release

Using the right command is the key ;)
apt show -a avast returns 4.6.0-1~debian12, 4.5.1-1~debian12, 4.5.0-1~debian12, 4.4.0-1~debian12

I think, these versions are still supportet with virus updates (at least the 4.5.1)
 
  • Like
Reactions: flames and hd--
You must log in or register to reply here.
Top Bottom