On Sat, 2003-12-06 at 07:13, McKeever Chris wrote:

> Fri, 05 Dec 2003 05:25:51 -0600:4197: run /usr/local/bin/clamscan -r 
> --disable-summary --max-recursion=10 --max-
> space=1000000  /var/spool/qmailscan/tmp/prupref-mailgate10706235514614197 2>&1
> Fri, 05 Dec 2003 05:25:51 -0600:4197: --output of clamscan was:
> --
> Fri, 05 Dec 2003 05:25:51 -0600:4197: clamscan: finished scan of dir 
> "/var/spool/qmailscan/tmp/prupref-mailgate10706235514614197" in 
> 0.707525 secs

I'll take a guess - softlimit.

You have too low a limit set, and when clamscan exits, no output is
produced. Can you check that please? Don't forget, you can always test
if it's softlimit by running the command via it.e.g.

softlimit -a xxxxx /usr/local/bin/clamscan -r --disable-summary
--max-recursion=10 --max-space=1000000  dir/that/fails/under/Q-S

Note to everyone: as every OS have different memory allocation models, I
cannot supply figures in Q-S telling you how big to set softlimit. You
have to figure out what works for you. Note that most AV systems use
more and more memory as the size of the message/file they are scanning
gets bigger - up to a certain size anyway. As such, you really have to
shove some nice big hand-made zip files through them to see how much
memory that AV swallows, then run the command under softlimit with
different memory sizes until it *stops* crashing. Then add 3-4M on top
of that for luck and use that value.


Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1




-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to