At 10:58 10-09-2003 -0500, Richard Geoffrion wrote:
Well this is bordering on a qmail setup issue and not a qmail-scanner issue.
But let me throw in my .02 cents

The reason i wrote this list is because it seems to be a qmail-scanner issue, as qmail-scanner doesnt have problems sending spam-mails to [EMAIL PROTECTED]




Cream[DONut] wrote:
> bare with me for a second.
>
> I have set up a vpopmail domain called quarantine,
> I have added quarantine to /etc/hosts for 127.0.0.1,

Well that doesn't work the way you might be intending.  qmail won't use the
hosts file to lookup a mail server address.  There is a file called
smtproutes that functions in the way you are trying to use hosts.

I am working quite alot with smtproutes, but didnt think of using it for local domains (doesnt seem to do the trick either)



> I have added quarantine to /var/qmail/control/rcpthosts and
> defaultdomain and virtualdomains,
> I have created 2 accounts in the domain, once called spam, and another
> called virus,
> I have set viruses to be sent to [EMAIL PROTECTED], and with the SA
> patch, i have set spam mails to be sent to [EMAIL PROTECTED]
>
> here is my configure line:
> ./configure --spooldir /var/spool/qmailscan --qmaildir /var/qmail
> --bindir /var/qmail/bin --qmail-queue-binary
> /var/qmail/bin/qmail-queue --admin virus --domain quarantine --notify
> admin --local-domains quarantine
> --silent-viruses auto --lang en_GB --debug 1 --unzip 1
> --add-dscr-hdrs 0
> --archive 0 --redundant yes --log-details --fix-mime 1 --scanners
> "clamscan,verbose_spamassassin" --spam-admin [EMAIL PROTECTED]
> --install 1
>
> the spam are sent to [EMAIL PROTECTED], and that works just fine
>
> But here is the problem:
> the viruses are quarantined, but the notification to the admin never
> arrives, and i cant find traces of it anywhere.
>
> if i change "--admin cream --domain donut.dk", then it sends the
> mails to my offsite address, and it works fine, but it wont deliver
> it to the local domain..

Does ANY mail to [EMAIL PROTECTED] arrive in the virus box?  What do the
qmail logs say[tm]? Are there any delivery errors in /var/log/qmail/current?
What about if you set the admin accout to be [EMAIL PROTECTED] ?

mails sent to [EMAIL PROTECTED] arrive just fine, its just the automatic qmail-scanner notifications that fails, and it doesnt change if i change the admin account to [EMAIL PROTECTED]


here comes the log for that 1 message it detects virus in, and tries to send notification about:

@400000003f6018162efbf634 new msg 4595379
@400000003f6018162efc01ec info msg 4595379: bytes 600 from <[EMAIL PROTECTED]> qp 15728 uid 0
@400000003f6018162f266964 starting delivery 6: msg 4595379 to remote [EMAIL PROTECTED]
@400000003f6018162f26751c status: local 0/10 remote 1/20
@400000003f601816341820d4 delivery 6: failure: Sorry,_I_couldn't_find_any_host_named_SiG.quarantine._(#5.1.2)/
@400000003f60181634183074 status: local 0/10 remote 0/20
@400000003f6018163452013c bounce msg 4595379 qp 15730
@400000003f60181634520cf4 end msg 4595379
@400000003f6018163454c82c new msg 4595380
@400000003f6018163454cffc info msg 4595380: bytes 1145 from <> qp 15730 uid 506
@400000003f6018163480a6a4 starting delivery 7: msg 4595380 to remote [EMAIL PROTECTED]
@400000003f6018163480b25c status: local 0/10 remote 1/20
@400000003f60181637f93b34 delivery 7: failure: Sorry,_I_couldn't_find_any_host_named_SiG.quarantine._(#5.1.2)/
@400000003f60181637fc060c status: local 0/10 remote 0/20
@400000003f601816383755a4 bounce msg 4595380 qp 15732
@400000003f60181638388654 end msg 4595380
@400000003f601816383aff24 new msg 4595386
@400000003f601816383bca44 info msg 4595386: bytes 1591 from <[EMAIL PROTECTED]> qp 15732 uid 506
@400000003f60181638687f94 starting delivery 8: msg 4595386 to local [EMAIL PROTECTED]
@400000003f601816386969f4 status: local 1/10 remote 0/20
@400000003f60181638a4927c delivery 8: success: did_0+0+1/
@400000003f60181638a65b84 status: local 0/10 remote 0/20
@400000003f60181638a7e60c end msg 4595386
@400000003f60182436df3fb4 new msg 4595379
@400000003f60182436df4b6c info msg 4595379: bytes 251 from <> qp 15743 uid 504
@400000003f60182437468534 end msg 4595379
@400000003f60182437672c94 new msg 4595380
@400000003f6018243767307c info msg 4595380: bytes 1918 from <> qp 15745 uid 504
@400000003f60182437f02ae4 starting delivery 9: msg 4595380 to remote [EMAIL PROTECTED]
@400000003f60182437f03a84 status: local 0/10 remote 1/20
@400000003f6018243b81aa5c delivery 9: failure: Sorry,_I_couldn't_find_any_host_named_quarantine.quarantine._(#5.1.2)/
@400000003f6018243b81b9fc status: local 0/10 remote 0/20
@400000003f601825001d2eb4 bounce msg 4595380 qp 15748
@400000003f601825001d3a6c end msg 4595380
@400000003f601825001ffd74 new msg 4595386
@400000003f60182500200544 info msg 4595386: bytes 2374 from <[EMAIL PROTECTED]> qp 15748 uid 506
@400000003f601825004d33ac starting delivery 10: msg 4595386 to local [EMAIL PROTECTED]
@400000003f601825004d3f64 status: local 1/10 remote 0/20
@400000003f60182500893adc delivery 10: success: did_0+0+1/
@400000003f601825008b07cc status: local 0/10 remote 0/20
@400000003f601825008ca9c4 end msg 4595386


here is a grep of my config files:
/var/qmail/control/concurrencyincoming:30
/var/qmail/control/defaultdelivery:./Maildir/
/var/qmail/control/defaultdomain:quarantine
/var/qmail/control/me:SiG
/var/qmail/control/plusdomain:SiG
/var/qmail/control/rcpthosts:SiG
/var/qmail/control/rcpthosts:quarantine
/var/qmail/control/rcpthosts:sig
/var/qmail/control/rcpthosts:SIG
/var/qmail/control/smtproutes:donut.dk:212.130.87.150
/var/qmail/control/virtualdomains:quarantine:quarantine
/var/qmail/control/virtualdomains:sig:sig
/etc/hosts:127.0.0.1 quarantine SIG sig localhost.localdomain localhost






> (ps. i never did get kaspersky to work with qmail-scanner on my
> redhat 9)

Well, for what it's worth...here is the debug code I added to MY
qmail-scanner-queue.pl script to show me what was going on with MY
"memory/resource/perms problems" error  *Notice the middle section*

thanks, i will give it a go




-----------------
  # Scan directory
  $path = "$scandir/$file_id\n";
  syswrite(\*ssock, $path, length($path));
  sysread(\*ssock, $response, 256);

  #the following two commands are to help with debuging.
  #  Check the qmailscan log and the test.log file
  &debug("after sysread: response is $response");
  system ( "ls -l $scandir >> /var/spool/qmailscan/test.log" );

  close (\*ssock)|| &error_condition("Couldn\'t close the \
    sophie socket /var/spool/qmailscan/sophie \($!\)\n");;
  ----------------

--
Richard

Cream[DONut] - www.donut.dk www.nethouse2000.dk - admin



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to