My guess is the exit code for F-Secure is not being picked up properly.
Check sub-fsecure.pl and replace it with this code: (note the &debug and $DD
lines are wrapped)
sub fsecure_scanner {
#Fsecure scanner
&debug("fsecure: starting scan of directory \"$scandir/$file_id\"...");
my ($fsecure_verbose)="--list" if ($DEBUG);
my ($start_fsecure_time)=[gettimeofday];
my ($DD,$fsecure_status,$stop_fsecure_time,$fsecure_time);
&debug("run $fsecure_binary
$fsecure_verbose --archive --auto --dumb --mime $scandir/$file_id 2>&1");
$DD=`$fsecure_binary $fsecure_verbose --archive --auto --dumb --mime
$scandir/$file_id 2>&1`;
$fsecure_status=($? >> 8);
&debug("--output of fsecure was:\n$DD--");
if ( $fsecure_status > 0 ) {
if ($fsecure_status =~ /^(3|8)$/) {
#This covers the potential viruses
#$quarantine_description="Suspicious Files Found";
#if ($DD =~ /Infected:(.*)\n/) {
$quarantine_description=$1;
#}
&debug("There be a virus! ($quarantine_description)");
($quarantine_event=$quarantine_description)=~s/\s/_/g;
$quarantine_event="FSEC:".substr($quarantine_event,0,$QE_LEN);
$description .= "\n---fsecure results ---\n$DD";
} else {
#This implies a corrupt set of DAT files or resource problems...
&tempfail("corrupt or unknown Fsecure scanner error or
memory/resource/perms problem - exit status $fsecure_status");
}
}
$stop_fsecure_time=[gettimeofday];
$fsecure_time = tv_interval ($start_fsecure_time, $stop_fsecure_time);
&debug("fsecure: finished scan of dir \"$scandir/$file_id\" in
$fsecure_time secs");
}
Exit status could be 3 or 8 as of 4.51 so this looks for both instead of
just exit code 8 and the word 'Infected'. Good Luck.
Rgds,
Thanks a lot for your answer, I tried, but without any result.
I continue to have the error:
corrupt or unknown F-Prot scanner error or memory/resource/perms problem - exit status 16777215
I dont' understand. If I extract the fsecure_scanner subroutine, adjust
some variables and execute via console, works fine!!
Thanks again. Enrico
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general