Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Spamassassin & AntivirusModule.cpp: plugin has failed (Plugin is not responding.)
  •  
puretech

Messages: 118
Karma: 5
Send a private message to this user
After migrating from Linux to Windows 2008R2 (Successfully using kmrecover tool), I have noticed I sometimes get antivirus failure messages in the log. Emails starts to queue up until it does come up, or if I stop and start sophos.

Any ideas? I was thinking to repair sophos ( http://kb.kerio.com/product/kerio-connect/antivirus/how-to-r epair-or-reset-anti-virus-in-kerio-connect-1285.html) update: didnt help
But if you guys know anything, it would be great help!

From Error log:
[22/Feb/2013 04:19:24] AntivirusModule.cpp: Antivirus plugin Sophos cannot be initialized: Unable to initialize plugin, error: TimeOut for response has expired
[22/Feb/2013 04:19:24] AntivirusModule.cpp: Restarting of Sophos plugin has failed, next try is planned after 300 seconds.
[22/Feb/2013 04:19:24] mail_avir.cpp: Antivirus check of mail from <20130222041353389052dae06a4048883509dc5bdb1027-C3UX8QQL3YRGLJ@bounces.amazon.com> to <orders2<_at_>*****.com> failed: Plugin is not responding.
[22/Feb/2013 04:19:30] mail_avir.cpp: Antivirus check of mail from <20130222041353389052dae06a4048883509dc5bdb1027-C3UX8QQL3YRGLJ@bounces.amazon.com> to <orders2<_at_>*****.com> failed: Plugin is not responding.
[22/Feb/2013 04:20:12] Last message repeated 3 times
[22/Feb/2013 06:03:36] AntivirusModule.cpp: Antivirus Server error(0): Antivirus update has failed: 200:Temporary error, please try again later
[22/Feb/2013 06:03:36] AntivirusModule.cpp: Antivirus update failed: Antivirus update has failed: 200:Temporary error, please try again later
[22/Feb/2013 06:28:56] SpamClient.cpp: Unable to initialize plugin, error: TimeOut for response has expired
[22/Feb/2013 06:28:56] SpamClient.cpp: Server: Spamassassin plugin cannot be initialized.
[22/Feb/2013 06:28:56] SpamClient.cpp: Server: Spamassassin plugin failed to start, next try is planned after 120 seconds.
[22/Feb/2013 06:28:56] SpamClient.cpp: SpamAssassin cannot learn D:\MailServer\store/tmp/SPAM_d7f67b11877eba1335d6209b10f86882.eml as spam/ham.
[22/Feb/2013 07:03:38] AntivirusModule.cpp: Antivirus Server error(0): Antivirus update has failed: 200:Temporary error, please try again later
[22/Feb/2013 07:03:38] AntivirusModule.cpp: Antivirus update failed: Antivirus update has failed: 200:Temporary error, please try again later
[22/Feb/2013 07:18:38] AntivirusModule.cpp: Antivirus plugin Sophos cannot be initialized: Unable to initialize plugin, error: TimeOut for response has expired
[22/Feb/2013 07:18:38] AntivirusModule.cpp: Restarting of Sophos plugin has failed, next try is planned after 300 seconds.

------------------------------------------------
From Debug Log:
[22/Feb/2013 04:16:22][5592] {avir} Running antivirus check on mail from <20130222041353389052dae06a4048883509dc5bdb1027-C3UX8QQL3YRGLJ@bounces.amazon.com> to <framescs2<_at_>jaikudo.com> size 56031 B
[22/Feb/2013 04:16:22][5592] {avir} Client: requesting check for file D:\MailServer\store/tmp/5126f114-00000b30/avfile.tmp, mail from <20130222041353389052dae06a4048883509dc5bdb1027-C3UX8QQL3YRGLJ@bounces.amazon.com> to <orders2<_at_>*****.com>
[22/Feb/2013 04:16:22][5592] {avir} Checking file D:\MailServer\store/tmp/5126f114-00000b30/avfile.tmp for JPEG vulnerabilities
[22/Feb/2013 04:16:22][5592] {avir} Client: waiting for result...
[22/Feb/2013 04:16:22][5904] {avir} (PID: 3048) Sophos_plugin: Scanning file D:\MailServer\store/tmp/5126f114-00000b30/avfile.tmp...
[22/Feb/2013 04:18:23][5592] {avir} Sophos plug-in scanning of avfile.tmp failed: TimeOut for response has expired
[22/Feb/2013 04:18:23][5904] {avir} (PID: 3048) unable to recieve msg header, pipe closed
[22/Feb/2013 04:18:23][5904] {avir} (PID: 3048) recvThread() is stopped
[22/Feb/2013 04:18:23][4452] {avir} sendThread() is stopped
[22/Feb/2013 04:18:23][5592] {avir} killServer() server is killed
[22/Feb/2013 04:18:23][5592] {avir} ClientDispatcher::restart() server killed
[22/Feb/2013 04:18:23][5592] {avir} forkServer() going to create server process
[22/Feb/2013 04:18:23][5592] {avir} (PID: 4708) forkServer() server process created, waiting for connection with server
[22/Feb/2013 04:18:23][5592] {avir} (PID: 4708) forkServer() server is running, creating send and recv. thread
[22/Feb/2013 04:18:23][4844] {avir} (PID: 4708) sendThread() is started
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) recvThread() is started
[22/Feb/2013 04:18:23][4844] {avir} (PID: 4708) sendThread() is stopped
[22/Feb/2013 04:18:23][5592] {avir} Maximum of scanning threads is set to 8
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Initializing Sophos plugin...
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Maximum thousands loops around central pattern-matching loop: 500
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Maximum count of files in parent archive: 10000
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Maximum length of decompressed data from the current compressed stream: 256 MB
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Initializing internal Sophos engine...
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Initializing internal Sophos engine...
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Trying to initialize Sophos engine with database in c:\program files (x86)\kerio\mailserver\sophos\2013-02-22-01-03-28\
[22/Feb/2013 04:18:23][4260] {avir} (PID: 4708) Sophos_plugin: Sophos Plugin: Reloading thread has been started.
[22/Feb/2013 04:19:24][5592] {avir} Unable to initialize plugin, error: TimeOut for response has expired
[22/Feb/2013 04:19:24][4260] {avir} (PID: 4708) unable to recieve msg header, pipe closed
[22/Feb/2013 04:19:24][4260] {avir} (PID: 4708) recvThread() is stopped
[22/Feb/2013 04:19:24][5804] {avir} sendThread() is started
[22/Feb/2013 04:19:24][5804] {avir} sendThread() is stopped
[22/Feb/2013 04:19:24][5592] {avir} killServer() server is killed
[22/Feb/2013 04:19:24][5592] {avir} ClientDispatcher::stop() server killed
[22/Feb/2013 04:19:24][5592] {avir} ClientDispatcher::stop() all reqs are terminated
[22/Feb/2013 04:19:24][5592] {avir} ClientDispatcher::stop() all proxies are unregistered
[22/Feb/2013 04:19:24][5592] {avir} Request number 227 was not checked by quarantine.
[22/Feb/2013 04:19:24][5592] {avir} Next try for restarting is planned after 300 seconds.
[22/Feb/2013 04:19:24][5592] {avir} Request number 228 was not checked by quarantine.
[22/Feb/2013 04:19:24][5592] {avir} Client: check result: (0) Plugin is not responding.
[22/Feb/2013 04:19:24][5592] {avir} Client: requesting check for file D:\MailServer\store/tmp/5126f114-00000b30/avfile.tmp, mail from <20130222041353389052dae06a4048883509dc5bdb1027-C3UX8QQL3YRGLJ@bounces.amazon.com> to <orders2<_at_>******.com>
[22/Feb/2013 04:19:24][5592] {avir} Checking file D:\MailServer\store/tmp/5126f114-00000b30/avfile.tmp for JPEG vulnerabilities
[22/Feb/2013 04:19:24][5592] {avir} Client: waiting for result...
[22/Feb/2013 04:19:24][5592] {avir} Next try for restarting is planned after 300 seconds.
[22/Feb/2013 04:19:24][5592] {avir} Request number 229 was not checked by quarantine.
[22/Feb/2013 04:19:24][5592] {avir} Next try for restarting is planned after 300 seconds.
[22/Feb/2013 04:19:24][5592] {avir} Request number 230 was not checked by quarantine.
[22/Feb/2013 04:19:24][5592] {avir} Client: check result: (0) Plugin is not responding.


EDIT: I have tried repairing sophos according to the article. Lets see if it fixes it. But funny thing is, its intermittent. I have Sophos installed on windows as well but that has exclusion of all kerio folders and store/archive.

UPDATE: I am still having intermittent errors. It fixes itself but it delays messages for whwatever time it fails to initialise the plugin.

Any ideas?

UPDATE: I am also seeing (rarely, not as often as antivir) Spamassasin plugin failure:

25/Feb/2013 09:30:34] SpamClient.cpp: Unable to initialize plugin, error: TimeOut for response has expired
[25/Feb/2013 09:30:34] SpamClient.cpp: Server: Spamassassin plugin cannot be initialized.
[25/Feb/2013 09:30:34] SpamClient.cpp: Server: Spamassassin plugin failed to start, next try is planned after 120 seconds.
[25/Feb/2013 09:30:34] SpamClient.cpp: SpamAssassin cannot learn D:\MailServer\store/tmp/SPAM_3bb1ec0d8d0c004797d3dc046d2358e8.eml as spam/ham.

[Updated on: Mon, 25 February 2013 12:18]

  •  
puretech

Messages: 118
Karma: 5
Send a private message to this user
I tried repairing sophos ( according to KC article , but this didn't work. it is still the same
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
It appears the integrated Sophos cannot be started or it's initializations takes more than 60 seconds.
Check any conflicting software on the server and make sure the hardware specifications (including RAM) are sufficient.
  •  
puretech

Messages: 118
Karma: 5
Send a private message to this user
Thanks for the reply Pavel.

We do have Sophos Antivirus running on the server. Do you reckon that could be conflicting it? I have Kerio excluded from it though.

RAM is more than sufficient - 8GB, and the server is using less than a half of it.

Disks are hardware RAID 1+0 15k SAS and it is quad core.

Can I increase the timout on it?
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
puretech wrote on Fri, 22 February 2013 17:33

We do have Sophos Antivirus running on the server. Do you reckon that could be conflicting it? I have Kerio excluded from it though.


This is it. Sophos engine can't run with another Sophos product on the same server. We've seen this with Sophos Endpoint. Directory exclusion does not help.

[Updated on: Fri, 22 February 2013 17:41]

  •  
puretech

Messages: 118
Karma: 5
Send a private message to this user
Ok, I will remove it from the server. On a side note, do you reckon i should install some other antivirus on the server, or it's not needed?
  •  
puretech

Messages: 118
Karma: 5
Send a private message to this user
Hi Pavel,

I am also seeing (rarely, not as often as antivir) Spamassasin plugin failures:

25/Feb/2013 09:30:34] SpamClient.cpp: Unable to initialize plugin, error: TimeOut for response has expired
[25/Feb/2013 09:30:34] SpamClient.cpp: Server: Spamassassin plugin cannot be initialized.
[25/Feb/2013 09:30:34] SpamClient.cpp: Server: Spamassassin plugin failed to start, next try is planned after 120 seconds.
[25/Feb/2013 09:30:34] SpamClient.cpp: SpamAssassin cannot learn D:\MailServer\store/tmp/SPAM_3bb1ec0d8d0c004797d3dc046d2358e8.eml as spam/ham.


I am thinking the problem is something else and not the conflict of sophos (as mentioned above) or maybe they are two different but similar problems.
Previous Topic: 8.0.1 Update Message on Debian
Next Topic: Outlook 2010 KOFF Crashing
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Aug 22 09:04:04 CEST 2017

Total time taken to generate the page: 0.00476 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.