Sophos - savid: Client terminated connection early

[Mark Martinec]

Miguel,

> I wondered if anyone has come across this:
> I'm trying to use the new Sophos-SSSP implementation using the savdid
> daemon:
> 
> my amavis.conf:
> ### http://www.sophos.com/
> ['Sophos-SSSP',
>    \&ask_daemon, ["{}", 'sssp:/var/run/savdi/sssp.sock'],
>    qr/^DONE OK\b/m, qr/^VIRUS\b/m, qr/^VIRUS\s*(\S*)/m ],
> 
> All looks good, until first connect:
> 
> savid:
> 120202:174217 [4F2AC9BD] 00038402 New session
> 120202:174227 [4F2AC9BD] C000460B Client terminated connection early
> 120202:174227 [4F2AC9BD] 00038403 Session ended
> 
> amavis:
> Feb  2 16:19:48 etmx-v3-pre amavis[14700]: (14700-01) (!)Sophos-SSSP
> av-scanner FAILED: run_av error: timed out\n
> 
> Tryed various alternatives, using Unix sockets, TCP and I always get the
> timeout message on the savid daemon...
> Looks like savid is waiting for amavis to send information and gives
> after some time... (did a strace on the savid daemon)
> 
> Is there something I'm forgetting?
> 
> For now I will be still using SOPHIE, that is working fine.

Try it manually first. The protocol is pretty straightforward,
best to test it over a TCP connection, e.g:

$ telnet 127.0.0.1 4010
OK SSSP/1.0
SSSP/1.0 SCANDIRR /tmp
ACC 4F2C037F/1
[...]
DONE FAIL 0210 Could not open item passed to SAVI for scanning

BYE
BYE
Connection closed by foreign host.

  Mark