On Wed, 2007-03-07 at 00:55 +0100, Tomasz Kojm wrote: > On Tue, 06 Mar 2007 16:10:41 -0600 > Daniel J McDonald <[EMAIL PROTECTED]> wrote: > > > Suggestions welcome. I will try to hunt done a failure that is nabbed > > by quarantine or by a user who would be amenable to sharing the file. > > Did you restart clamd after installing 0.90.1?
Yes, both freshclam and clamd. I did not restart amavisd-new, but I've been able to upgrade clamd independently of amavisd restarts in the past. There is a post-install script in several of the RPMs that restarts clamd - that fired twice, then I added the "ScanPDF yes" line and restarted it again. Log file cuts: Tue Mar 6 14:18:06 2007 -> --- Stopped at Tue Mar 6 14:18:06 2007 Tue Mar 6 14:18:06 2007 -> +++ Started at Tue Mar 6 14:18:06 2007 Tue Mar 6 14:18:06 2007 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i586) ... Tue Mar 6 14:18:12 2007 -> PDF support disabled. ... Tue Mar 6 14:18:37 2007 -> --- Stopped at Tue Mar 6 14:18:37 2007 Tue Mar 6 14:18:37 2007 -> +++ Started at Tue Mar 6 14:18:37 2007 Tue Mar 6 14:18:37 2007 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i586) ... Tue Mar 6 14:18:41 2007 -> PDF support disabled. ... Tue Mar 6 14:20:35 2007 -> --- Stopped at Tue Mar 6 14:20:35 2007 Tue Mar 6 14:20:35 2007 -> +++ Started at Tue Mar 6 14:20:35 2007 Tue Mar 6 14:20:35 2007 -> clamd daemon 0.90.1 (OS: linux-gnu, ARCH: i386, CPU: i586) ... Tue Mar 6 14:20:40 2007 -> PDF support enabled. ... Tue Mar 6 15:36:26 2007 -> /var/lib/amavis/tmp/amavis-20070306T152555-08520/parts/p006: Zip module failure ERROR Note that note every PDF fails. In the particular message that failed above there were six pdf documents and various other attachments, but only the one document triggered: Mar 6 15:36:26 sa amavis[8520]: (08520-08) p012 1 Content-Type: multipart/mixed Mar 6 15:36:26 sa amavis[8520]: (08520-08) p013 1/1 Content-Type: multipart/related Mar 6 15:36:26 sa amavis[8520]: (08520-08) p014 1/1/1 Content-Type: multipart/alternative Mar 6 15:36:26 sa amavis[8520]: (08520-08) p001 1/1/1/1 Content-Type: text/plain, size: 809 B, name: Mar 6 15:36:26 sa amavis[8520]: (08520-08) p002 1/1/1/2 Content-Type: text/html, size: 4426 B, name: Mar 6 15:36:26 sa amavis[8520]: (08520-08) p003 1/1/2 Content-Type: image/jpeg, size: 2689 B, name: image002.jpg Mar 6 15:36:26 sa amavis[8520]: (08520-08) p004 1/2 Content-Type: application/octet-stream, size: 13738 B, name: Plan Maintenance.pdf Mar 6 15:36:26 sa amavis[8520]: (08520-08) p005 1/3 Content-Type: application/octet-stream, size: 5411 B, name: Emergency Notification Report.pdf Mar 6 15:36:26 sa amavis[8520]: (08520-08) p006 1/4 Content-Type: application/octet-stream, size: 15770 B, name: Emergency Response Plan.pdf Mar 6 15:36:26 sa amavis[8520]: (08520-08) p007 1/5 Content-Type: application/octet-stream, size: 4328 B, name: Plan Exercise Form.pdf Mar 6 15:36:26 sa amavis[8520]: (08520-08) p008 1/6 Content-Type: application/octet-stream, size: 23481 B, name: Plan Exercise.pdf Mar 6 15:36:26 sa amavis[8520]: (08520-08) p009 1/7 Content-Type: application/octet-stream, size: 4969 B, name: Damage Assessment Report.pdf Mar 6 15:36:26 sa amavis[8520]: (08520-08) p010 1/8 Content-Type: application/msword, size: 46592 B, name: BC Summary Plan for Data Center Operations.doc Mar 6 15:36:26 sa amavis[8520]: (08520-08) p011 1/9 Content-Type: application/msword, size: 37888 B, name: Blank BCP Template 032805.doc -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
