On Mon, 08 Dec 2003 12:27 , Jason Haar <[EMAIL PROTECTED]> sent:
>On Sat, 2003-12-06 at 07:13, McKeever Chris wrote:
>
>> Fri, 05 Dec 2003 05:25:51 -0600:4197: run /usr/local/bin/clamscan -r
>> --disable-summary --max-recursion=10 --max-
>> space=1000000 /var/spool/qmailscan/tmp/prupref-mailgate10706235514614197 2>&1
>> Fri, 05 Dec 2003 05:25:51 -0600:4197: --output of clamscan was:
>> --
>> Fri, 05 Dec 2003 05:25:51 -0600:4197: clamscan: finished scan of dir
>> "/var/spool/qmailscan/tmp/prupref-mailgate10706235514614197" in
>> 0.707525 secs
>
>I'll take a guess - softlimit.
>
>You have too low a limit set, and when clamscan exits, no output is
>produced. Can you check that please? Don't forget, you can always test
>if it's softlimit by running the command via it.e.g.
>
>softlimit -a xxxxx /usr/local/bin/clamscan -r --disable-summary
>--max-recursion=10 --max-space=1000000 dir/that/fails/under/Q-S
>
Jason, thanks fort he reply -
from the /var/qmail/supervise/qmail-smtpd/run:
exec /usr/local/bin/softlimit -m 10000000
can that be too small? I will boost it to 12000000 and see what happens
Also note that the two that were caught by the second box were at very off-peak hours:
37 Mail to [EMAIL PROTECTED] from "Net Delivery Service" ; Exploit.IFrame.Gen -
/mail-data/atmail-users/tmp/msg-9716-1.html:
Exploit.IFrame.Gen FOUND 05/12/03 05:33:32
36 Mail to [EMAIL PROTECTED] from "Internet Email Delivery Service" ;
Exploit.IFrame.Gen - /mail-data/atmail-users/tmp/msg-4478-1.html:
Exploit.IFrame.Gen FOUND 05/12/03 02:08:15
Any other ideas?
# free -m
total used free shared buffers cached
Mem: 248 164 84 0 71 43
-/+ buffers/cache: 48 199
Swap: 996 1 994
-------------------------------------------
Chris McKeever
If you want to reply directly to me, please use cgmckeever--at--prupref---dot---com
http://www.prupref.com
---- Prudential Preferred Properties www.prupref.com
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
