Replace DrWeb with ClamAV

[joinindia]

Because of the above implementation of clapf with MySQL 5.5 from atomic repo UPGRADE.

Today morning server running php websites went off All Websites were down,

PHP was updated to the version 5.4 after you executed the 'yum install mysql' command on the server.

yum have automatically installed the newer PHP version for dependencies because it was available in the atomic repository:

[root@ns1 ~]# grep php /var/log/yum.log
Jan 23 14:33:49 Updated: php-common-5.4.24-30.el6.art.x86_64
Jan 23 14:33:57 Updated: php-cli-5.4.24-30.el6.art.x86_64
Jan 23 14:34:00 Updated: php-pdo-5.4.24-30.el6.art.x86_64
Jan 23 14:34:05 Updated: php-gd-5.4.24-30.el6.art.x86_64
Jan 23 14:38:22 Updated: php-mysql-5.4.24-30.el6.art.x86_64
Jan 23 14:38:28 Updated: php-devel-5.4.24-30.el6.art.x86_64
Jan 23 14:38:30 Updated: php-5.4.24-30.el6.art.x86_64
Jan 23 14:38:35 Updated: php-mbstring-5.4.24-30.el6.art.x86_64
Jan 23 14:38:37 Updated: php-xml-5.4.24-30.el6.art.x86_64
Jan 23 14:38:38 Updated: php-imap-5.4.24-30.el6.art.x86_64
Jan 24 11:59:03 Installed: php-pecl-apc-3.1.15-0.6.svn329913.el6.art.x86_64
Jan 24 12:01:54 Erased: php-pecl-apc

[root@ns1 ~]# history|grep 2014-01-23|grep yum|grep '14:33'
703 [2014-01-23 14:33:08] yum install mysql

In order to resolve the issue I am going to downgrade PHP to original version.

 

[atomicturtle]

There is also a mysql 5.5 client only package:
yum install mysqlclient18

 

[joinindia]

Second Problem Started after clapf installation;

Domain Key Started getting failed, on Investigation by support team I got below reply;

Please find the same details mentioned by our previous engineer below,

+++
Jan 23 14:06:17 ns1 postfix-local[23944]: postfix-local: from=xxxxx@abcd.net, to=yyyy@xyz.net, dirname=/var/qmail/mailnames
Jan 23 14:06:17 ns1 postfix-local[23944]: handlers_stderr: PASS
Jan 23 14:06:17 ns1 postfix-local[23944]: PASS during call 'dd52-domainkeys' handler
Jan 23 14:06:17 ns1 postfix/pipe[23689]: C5E803A400BE: to=<yyyy@xyz.net>, relay=plesk_virtual, delay=0.13, delays=0.06/0/0/0.07, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
+++

Although the DomainKey works, domainkey validation failed because of one of signed headers ( MIME-Version, Content-Type, Content-Transfer-Encoding, Date, From, To, Subject, Message-ID, X-Sender, User-Agent) were modified somewhere in transit. DomainKeys act like a PGP by adding digital signature in order to ensure that protected content was not modified.
This domainkey validation is not related to Plesk panel and kindly check from your end.

Any Solution to FIX this issue?

 

[Quan231092]

Hi all,
atomicturtle thank you for your answer,
dont I have to remove drweb first?
or is this optional ? should I just install clam as you said and leave drweb be ?

 

[atomicturtle]

Its optional, you don't have to remove it unless you want to (like if you dont have a license for it). qmail-scanner isnt compatible with drweb (I dont think... its been a while). But clapf for postfix is, it would use both clamav and drweb if they are installed on the system.