This one time, at band camp, Miroslaw Kwasniak said:
> On Sat, May 14, 2005 at 06:37:31AM -0400, Stephen Gran wrote:
> >   * Sadly this will blow up upgrades of clamav-milter that _do_ use
> >     clamd for scanning - apt/dpkg sets them up in essentially random
> >     order, so it is equally likely that the milter will get set up
> >     first and bail since it can't connect to clamd.  Waiting for the
> >     bug reports, but I see no other way to do this properly.
> > 
> > Do you see a way to fix this?
> 
> I have one machine that uses remote clamd, second uses  two: local &
> remote and third with std configuration ;)
> 
> Only clean way that I see is to modify clamav-milter so it starts even
> if no clamd available.

It already does that, if you don't use --external.  The failure is by
design - do you really want the program to keep running, but be unable
to do anything?  That would falsely make sendmail think the milter was
usable, and mail transactions would take forever and eventually time out
after the milter failed, or pass viruses through unscanned.

The postinstall script completes, so it doesn't mess up an install.  The
problem is that there is no way to tell the package management system to
set up clamd first if there is no dependency.  I suppose I can put in
some really hackish thing in the init script that checks if external is
being used, and tries to connect clamd, sleeping in the background if it
fails.  That feels wrong, though, and is equally fragile, since it will
not be trivial to figure out what server people use - if it's not a
local one, the script could just fail later or sleep forever, depending
on implementation.

I think that until I can figure out a proper way to do this, I am going
to have to just leave this report open.
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        [EMAIL PROTECTED] |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------

Attachment: pgp6oqVUB6KGl.pgp
Description: PGP signature

Reply via email to