Hello!
I probably found the reason, why my old amavis-ng (I wrote about it on
firday) doesn't work with new clamd 0.90. I took a sample file that comes
from amavis-ng. I found tha applying command RAWSCAN on this file, makes
clamd hanging. SCAN, MULTISCAN and CONTSCAN work fine. I checked this on two
machines. What might be the reason? I changed permissions to 777 on this
file, but with no success.
Please, help.
--
Pozdrawiam,
Dariusz Wojciechowski
Faba
tel. +48 23 6621718
fax +48 23 6621701
Received: from localhost by linux_sv.faba.pl
with SpamAssassin (2.64 2004-01-11);
Mon, 19 Feb 2007 05:54:42 +0100
From: Galkin <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *****SPAM***** fw[64]: Symantec Software
Date: Mon, 19 Feb 2007 07:49:05 +0300
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on linux_sv.faba.pl
X-Spam-DCC: : linux_sv.faba.pl 104; Body=1 Fuz1=many Fuz2=many
X-Spam-Status: Yes, hits=21.1 required=6.5 tests=BAYES_99,CLICK_BELOW,
DCC_CHECK,FORGED_OUTLOOK_TAGS,HTML_LINK_CLICK_HERE,HTML_MESSAGE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET
autolearn=spam version=2.64
X-Spam-Level: *********************
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_45D92D92.463885C4"
This is a multi-part message in MIME format.
------------=_45D92D92.463885C4
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "linux_sv.faba.pl", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
[EMAIL PROTECTED] for details.
Content preview: Get the great discounts on popular software today All
sofware is instantly available to download - No Need Wait! ALL
SOFTWARES ON DIFFERENT EUROPEAN LANGUAGES - English, France, Italy,
Spanish, German and more!!! [...]
Content analysis details: (21.1 points, 6.5 required)
pts rule name description
---- ---------------------- --------------------------------------------------
6.3 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
3.0 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51 and 100
[cf: 100]
0.1 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here"
3.0 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
4.0 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
3.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?64.131.146.48>]
1.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.1 CLICK_BELOW Asks you to click below
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_45D92D92.463885C4
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from mail1.zigzag.pl (217.11.136.110)
by 192.168.100.199 with SMTP; 19 Feb 2007 04:54:40 -0000
Received: (qmail 24746 invoked by uid 64020); 19 Feb 2007 05:54:40 +0100
X-Mail-Scanner: Scanned by qSheff 1.0-r3 (http://www.enderunix.org/qsheff/)
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on antyspam1.zigzag.pl
Received: from user-10874hg.cable.mindspring.com (HELO localhost.localdomain)
(64.131.146.48)
by mail1.zigzag.pl with SMTP; 19 Feb 2007 05:54:36 +0100
Message-ID: <[EMAIL PROTECTED]>
From: Galkin <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: fw[64]: Symantec Software
Date: Mon, 19 Feb 2007 07:49:05 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_222753C0.4537382D"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express V6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
This is a multi-part message in MIME format.
------=_NextPart_000_0000_222753C0.4537382D
Content-Type: text/plain;
charset="windows-1251"
Content-Transfer-Encoding: 8bit
------=_NextPart_000_0000_222753C0.4537382D
Content-Type: text/html;
charset="windows-1251"
Content-Transfer-Encoding: quoted-printable
Get the great discounts on popular software today<br>All sofware is =
instantly available to download - No Need Wait!<br>ALL SOFTWARES ON =
DIFFERENT EUROPEAN LANGUAGES - English, France, Italy, Spanish, German =
and more!!!<br><br>
<a href=3D"http://irbap.westokore.com/?028138";>click =
here!</a>
------=_NextPart_000_0000_222753C0.4537382D--
------------=_45D92D92.463885C4--
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
