• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Replace DrWeb with ClamAV

Because of the above implementation of clapf with MySQL 5.5 from atomic repo UPGRADE.

Today morning server running php websites went off All Websites were down,

PHP was updated to the version 5.4 after you executed the 'yum install mysql' command on the server.

yum have automatically installed the newer PHP version for dependencies because it was available in the atomic repository:

[root@ns1 ~]# grep php /var/log/yum.log
Jan 23 14:33:49 Updated: php-common-5.4.24-30.el6.art.x86_64
Jan 23 14:33:57 Updated: php-cli-5.4.24-30.el6.art.x86_64
Jan 23 14:34:00 Updated: php-pdo-5.4.24-30.el6.art.x86_64
Jan 23 14:34:05 Updated: php-gd-5.4.24-30.el6.art.x86_64
Jan 23 14:38:22 Updated: php-mysql-5.4.24-30.el6.art.x86_64
Jan 23 14:38:28 Updated: php-devel-5.4.24-30.el6.art.x86_64
Jan 23 14:38:30 Updated: php-5.4.24-30.el6.art.x86_64
Jan 23 14:38:35 Updated: php-mbstring-5.4.24-30.el6.art.x86_64
Jan 23 14:38:37 Updated: php-xml-5.4.24-30.el6.art.x86_64
Jan 23 14:38:38 Updated: php-imap-5.4.24-30.el6.art.x86_64
Jan 24 11:59:03 Installed: php-pecl-apc-3.1.15-0.6.svn329913.el6.art.x86_64
Jan 24 12:01:54 Erased: php-pecl-apc

[root@ns1 ~]# history|grep 2014-01-23|grep yum|grep '14:33'
703 [2014-01-23 14:33:08] yum install mysql

In order to resolve the issue I am going to downgrade PHP to original version.
 
Second Problem Started after clapf installation;

Domain Key Started getting failed, on Investigation by support team I got below reply;

Please find the same details mentioned by our previous engineer below,

+++
Jan 23 14:06:17 ns1 postfix-local[23944]: postfix-local: [email protected], [email protected], dirname=/var/qmail/mailnames
Jan 23 14:06:17 ns1 postfix-local[23944]: handlers_stderr: PASS
Jan 23 14:06:17 ns1 postfix-local[23944]: PASS during call 'dd52-domainkeys' handler
Jan 23 14:06:17 ns1 postfix/pipe[23689]: C5E803A400BE: to=<[email protected]>, relay=plesk_virtual, delay=0.13, delays=0.06/0/0/0.07, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
+++

Although the DomainKey works, domainkey validation failed because of one of signed headers ( MIME-Version, Content-Type, Content-Transfer-Encoding, Date, From, To, Subject, Message-ID, X-Sender, User-Agent) were modified somewhere in transit. DomainKeys act like a PGP by adding digital signature in order to ensure that protected content was not modified.
This domainkey validation is not related to Plesk panel and kindly check from your end.

Any Solution to FIX this issue?
 
Hi all,
atomicturtle thank you for your answer,
dont I have to remove drweb first?
or is this optional ? should I just install clam as you said and leave drweb be ?
 
Its optional, you don't have to remove it unless you want to (like if you dont have a license for it). qmail-scanner isnt compatible with drweb (I dont think... its been a while). But clapf for postfix is, it would use both clamav and drweb if they are installed on the system.
 
Back
Top