Hi thanks a lot for the reply.

I thought it was somekind of zip bomb but I'm not sure how to determine that 
is the root cause of the problem and if so how to handle it.
I'm running clamav-65 it might be a bug in the clamav itself!.
I found these messages in my maillog

Dec 22 11:25:18 qmail-scanner X-Qmail-Scanner-1.20: 
[qmail-scanner7207011846138018] Requeuing: Maximum time exceeded. Something 
cannot handle this message. at /var/qmail/bin/qmail-scanner-queue.pl line 
376.

As said in qmail-scanner FAQ page this might be a bug in av-scanner that is 
being used !! But i'm not sure.

with regards,
Bikrant

On Sunday 21 December 2003 22:22, you wrote:
> Hello
>
> Sounds like a zip bomb or something try setting
>
> # Maximal depth the directories are scanned at.
> MaxDirectoryRecursion 5
>
> One thing I noticed when running qmail, was that it didn't work well
> with a system configured with softupdates. I've had GREAT success with
> FreeBSD+Amavisd-new+Spamassassin+Clamav.
>
> Sincerely
> Ken
>
> On Dec 21, 2003, at 2:52 AM, [EMAIL PROTECTED] wrote:
> > Hi,
> > I'm running qmail+qmail-scanner+clamscan on freebsd 4.9. The system is
> > P-IV
> > with 1 GB of RAM and 1 GB Swap.
> > My system crashed twice with the following message in my syslog.
> >
> > Dec 21 11:19:19 qmail-scanner /kernel: pid 57024 (clamscan), uid 1009,
> > was
> > killed: out of swap space
> > Dec 21 11:19:23 qmail-scanner last message repeated 6 times
> > Dec 21 11:20:14 qmail-scanner /kernel: swap_pager_getswapspace: failed
> > Dec 21 11:20:16 qmail-scanner last message repeated 516 times
> > Dec 21 11:20:16 qmail-scanner /kernel: pid 57204 (clamscan), uid 1009,
> > was
> > killed: out of swap space
> >
> > I know the system had worked under heavy loads but the last time it
> > crashed
> > during off hours (ie. smtp connection was quite low compared to peak
> > hours).
> > I guess the problem occured due to some malformed attachments but I'm
> > not
> > sure. Did anyone ran through this problem before?
> > Below I've included my qmail, sysctl and loader.conf settings.
> >
> > This is how is run qmil-smtpd /var/qmail/supervise/qmail-smtpd/run:
> > #!/bin/sh
> > QMAILDUID=`id -u qmaild`
> > NOFILESGID=`id -g qmaild`
> > MAXSMTPD=500
> > LOCAL=`head -1 /var/qmail/control/me`
> >
> > exec /usr/local/bin/softlimit -m 50000000 \
> >     /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c
> > "$MAXSMTPD" \
> >         -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp
> > /var/qmail/bin/qmail-smtpd
> > 2>&1
> >
> > qmail-scanner# cat /etc/tcp.smtp
> > 127.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-
> > queue.pl"
> > 202.79.32.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/qmail-
> > scanner-queue.pl"
> > 202.79.36.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/qmail-
> > scanner-queue.pl"
> >
> > sysctl settings
> > kern.maxfilesperproc=8192
> > kern.ipc.somaxconn=8192
> > kern.maxfiles=65536
> > kern.maxprocperuid=8192
> >
> > and boot/loader.conf
> > kern.ipc.nmbclusters="16384"
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: IBM Linux Tutorials.
> > Become an expert in LINUX or just sharpen your skills.  Sign up for
> > IBM's
> > Free Linux Tutorials.  Learn everything from the bash shell to sys
> > admin.
> > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> > _______________________________________________
> > Clamav-users mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/clamav-users



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to