Hello. I'm interested in a problem concerning using scanners (actualy ClamAV scanner) with QMail-Scanner. If I send a message localy (QMAILQUEUE set in the /etc/profile) or get a message via SMTP remotely, QMail-Scanner first places it into /var/spool/qmailscan/working/... directories and then uses reformime to produce a MIME report which it places in separate directory /var/spool/qmailscan/<localhost.domain.dom><someID>. After this, scanners are triggered over this last directory. Is this right? Namely, in directory /var/spool/qmailscan/<localhost.domain.dom><someID>, files holds just MIME description and not the whole messages. So if I send a simple mail with ClamAV test virus signature included in the body only and an optional subject, there is no MIME parts and corresponding file in directory /var/spool/qmailscan/<localhost.domain.dom><someID> is empty; clamscan reports a scanned file was empty and message is claimed clean. A reciever realy gets an infected message, which is not good. On the contrary, SpamAssassin scans directory /var/spool/qmailscan/working/new and successfully marks suspicious messages as spam.
I turned on DEBUG=100, viewed logs and directories and so on. If I run # test_installation.sh -doit the story is the same: there is Eicar.com file in /var/spool/qmailscan/<localhost.domain.dom><someID> and is empty, so no actions are performed. Also weird: root doesn' get any messages at all?! Does anybody have an advise what to alter or where I made a mistake to make Qmail-Scanner quarantine bad files? Thank you Zoran ____________________ http://www.email.si/ ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed of, try TotalView 6 free at www.etnus.com. _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
