SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264
|Anonymous | Login||2019-11-17 15:04 UTC|
|Main | My View | View Issues | Change Log | Roadmap|
|View Issue Details|
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0000117||Endian Firewall||Other Services||public||2007-02-19 12:53||2007-12-31 19:15|
|Target Version||Fixed in Version||2.2-beta2|
|Summary||0000117: Memory leak|
|Description||Our EFW is eating memory, i think there is a memory leak somewhere.|
This only happens when smtp proxy is turned on (so i think its in antispam/virus)
Here is a screenshot of memory usage per week. (we did a reboot on friday so whe wouldnt have problems in the weekend)
List of services:
CRON server RUNNING
Content filter STOPPED
DHCP Server RUNNING
DNS proxy server RUNNING
E-Mail scanner (POP3) STOPPED
FTP virus scanner STOPPED
HTTP antivirus (havp) STOPPED
Intrusion Detection System (GREEN) STOPPED
Intrusion Detection System (RED main) RUNNING
Kernel logging server RUNNING
Logging server RUNNING
NTP Server RUNNING
Openvpn Server STOPPED
Pyzor Spamfilter STOPPED
Secure shell server RUNNING
Sip Proxy STOPPED
Spamfilter for POP3 (spamd) STOPPED
Spamfilter for SMTP (amavis) RUNNING
VPN (ipsec) STOPPED
Virus scanner RUNNING
Web proxy STOPPED
Web server RUNNING
We do not discard any mails. we all forward them with modified header en do not quaritine them.
|Tags||No tags attached.|
|Attached Files|| memory-week.PNG [^] (28,707 bytes) 2007-02-19 12:53
memory-week2.png [^] (31,462 bytes) 2007-02-23 15:08
efw-clamav-2.0.23-0.endian1.i386.rpm [^] (12,601 bytes) 2007-02-26 09:30
amavisd-new-2.4.5-1.rf.endian12.i386.rpm [^] (258,841 bytes) 2007-03-05 16:31
clamav-0.90.1-0.endian6.i386.rpm [^] (312,792 bytes) 2007-03-05 16:33
could you please send us the output of
of different days, in order to enable us to isolate the growing process?
edited on: 2007-02-19 13:31
im not a linux guru so i think you want this:
a week later still memory eating
and i attached a new screenshot
can you please provide us hardware specifications, first of all how much ram do you have?
this is strange since we do not have this problem on our installations. the only difference we have, is, that we do not activate snort
can you try to disable snort? maybe that's the evil here.
clamd is also growing much, we provide an update with the next release.
HP gl320 G5
Intel Xeon 2,13 dual core
1 gig RAM
This weekend i disabled the smtp virus scanner and i removed the spam/virus admin e-mail so it will not send any reports of the e-mails that where blocked.
Now it is not eating memory so its either in the virus scanner or the spam admin.
This week i will add my e-mail address again as spam admin and will look if that is the problem.
try to upgrade amavisd-new and clamav with the packages i provided here.
you can upgrade by downloading them to your firewall and install them with:
rpm -U --force package1.rpm package2.rpm ...
the clamav package will need you to install also clamav-db, however it was too big to upload here. it will install nevertheless (because of the --force). since that package contains only clamav signatures, which will be downloaded by freshclam, there is no issue to expect from this missing dependency.
pay attention to install efw-clamav, since it contains new configuration templates, which will be needed in order to have clamav working, since clamav slightly changed it's configuration syntax.
But installing of the clamav-0.90 doesn´t work!!
rpm -U --force clamav-0.90-0.endian6.i386.rpm
error: Failed dependencies:
clamav-db = 0.90-0.endian6 is needed by clamav-0.90-0.endian6.i386
Can you post the clamav-db??
edited on: 2007-03-01 10:31
The correct syntax to install clamav-0.90-0 is:
rpm -U --force --nodeps clamav-0.90-0.endian6.i386.rpm
So you can also download all files and then type in
rpm -U --force --nodeps *.rpm
it's --nodeps instead of --force
Can you give us a new clamav engine?
Latest ClamAV™ stable release is: 0.90.1
attached amavisd-new 2.4.5 and clamav 0.90.1
edited on: 2007-03-11 17:54
you need also the new havp packet and the perl-Mail-Clamav packet from http://www.stellarcore.net/downloads/efw2-updates/, [^] otherwise http proxy will not work anymore with antivirus enabled
enterprise version has already included the new clamav engine, we certainly include it also within next community release. as we have seen it makes trouble to release single packages, so it's maybe better if you wait until the next community release (until we can manage this better) or get in touch with our sales department in order to get an enterprise version.
|2007-02-19 12:53||btvrugt||New Issue|
|2007-02-19 12:53||btvrugt||File Added: memory-week.PNG|
|2007-02-19 13:24||peter-endian||Note Added: 0000185|
|2007-02-19 13:29||btvrugt||Note Added: 0000186|
|2007-02-19 13:31||btvrugt||Note Edited: 0000186|
|2007-02-23 15:08||btvrugt||File Added: memory-week2.png|
|2007-02-23 15:10||btvrugt||Note Added: 0000188|
|2007-02-23 17:01||peter-endian||Note Added: 0000189|
|2007-02-26 08:37||btvrugt||Note Added: 0000190|
|2007-02-26 09:27||peter-endian||File Added: amavisd-new-2.4.4-1.rf.endian12.i386.rpm|
|2007-02-26 09:28||peter-endian||File Added: clamav-0.90-0.endian6.i386.rpm|
|2007-02-26 09:30||peter-endian||File Added: efw-clamav-2.0.23-0.endian1.i386.rpm|
|2007-02-26 09:33||peter-endian||Note Added: 0000191|
|2007-02-28 09:48||peter-endian||Status||new => assigned|
|2007-02-28 09:48||peter-endian||Assigned To||=> peter-endian|
|2007-03-01 10:14||aender||Note Added: 0000201|
|2007-03-01 10:20||aender||Note Added: 0000202|
|2007-03-01 10:31||aender||Note Edited: 0000202|
|2007-03-01 11:03||peter-endian||Note Added: 0000203|
|2007-03-05 13:43||aender||Note Added: 0000207|
|2007-03-05 16:31||ra-endian||File Added: amavisd-new-2.4.5-1.rf.endian12.i386.rpm|
|2007-03-05 16:33||ra-endian||File Added: clamav-0.90.1-0.endian6.i386.rpm|
|2007-03-05 16:33||ra-endian||File Deleted: amavisd-new-2.4.4-1.rf.endian12.i386.rpm|
|2007-03-05 16:33||ra-endian||File Deleted: clamav-0.90-0.endian6.i386.rpm|
|2007-03-05 16:45||ra-endian||Note Added: 0000208|
|2007-03-11 17:48||peter-endian||Note Added: 0000221|
|2007-03-11 17:48||peter-endian||Relationship added||parent of 0000127|
|2007-03-11 17:54||peter-endian||Note Edited: 0000221|
|2007-10-27 21:57||peter-endian||Status||assigned => resolved|
|2007-10-27 21:57||peter-endian||Resolution||open => fixed|
|2007-12-31 19:15||raphael-endian||Fixed in Version||=> 2.2-beta2|
|2007-12-31 19:15||raphael-endian||Status||resolved => closed|
|Copyright © 2000 - 2012 MantisBT Group|