Hello folks

I'm struggling with a problem that I brought to the list a few days ago, and
got no response. I have reinstalled and the same problem has come up. Here's
the situation:
(This is rather detailed. My apologies up front...)

I'm running a Fedora Core 1 server. It comes with perl 5.8.1. I have qmail
installed and running, and clamav installed from rpm.  I put in
perl-suidperl (version 5.8.1) also from an rpm.
Next I put on the pre-requisites for qmail-scanner (maildrop+ and the perl
modules), and I ran the configure script for Q-S. All this went thru
smoothly:


----------clip-------------
[EMAIL PROTECTED] qmail-scanner-1.20]# ./configure --domain arava.co.il --scanners
clamscan --install
Building Qmail-Scanner 1.20...
...
 Testing suid nature of /usr/bin/suidperl...
Looks OK...
Hit RETURN to create initial directory structure under /var/spool/qmailscan,
and install qmail-scanner-queue.pl under /var/qmail/bin:
...
perlscanner: generate new DB file from
/var/spool/qmailscan/quarantine-attachments.txt
perlscanner: total of 16 entries.

Finished installation of initial directory structure for Qmail-Scanner
under /var/spool/qmailscan and qmail-scanner-queue.pl under /var/qmail/bin.

Finished. Please read README(.html) and then go over the script
(/var/qmail/bin/qmail-scanner-queue.pl) to check paths/etc.

"/var/qmail/bin/qmail-scanner-queue.pl -r" should return some well-known
virus
definitions to show that the internal perlscanner component is working.

That's it!
----------clip-------------

Now I ran the test_installation.sh script and received the four messages.
 
And Finally I did:
----------clip-------------
[EMAIL PROTECTED] qmail-scanner-1.20]# setuidgid qmaild
/var/qmail/bin/qmail-scanner-queue.pl -g
perlscanner: generate new DB file from
/var/spool/qmailscan/quarantine-attachments.txt
perlscanner: total of 16 entries.
[EMAIL PROTECTED] qmail-scanner-1.20]#
----------clip-------------

So far everything looks good.

However when I enable the QMAILQUEUE env variable like so:

----------clip-------------
[EMAIL PROTECTED] qmail-scanner-1.20]# grep QMAILQUEUE
/var/qmail/supervise/qmail-smtpd/run
export QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
----------clip-------------

...then mail stops going thru. What I get is "qq temporary error"
In the maillog file I see:

Dec 18 09:50:46 ns X-Qmail-Scanner-1.20: [ns.arava.co.il10717338464615483]
cannot open  /var/spool/qmailscan/quarantine-attachments - No such file or
directory

Here are the perms on quarantine-attachements.*:
----------clip-------------
[EMAIL PROTECTED] qmail-scanner-1.20]# ll
/var/spool/qmailscan/quarantine-attachments.*
-rw-r-----    1 qscand   nofiles     12288 Dec 18 10:33
/var/spool/qmailscan/quarantine-attachments.db
-rw-rw----    1 qscand   qscand       4361 Dec 17 14:28
/var/spool/qmailscan/quarantine-attachments.txt
[EMAIL PROTECTED] qmail-scanner-1.20]#
----------clip-------------

Note one additional point. When I telnet to port smtp and purposely enter
invalid header values, then qmail-scanner-queue.pl catches the mail, tags it
as Bad mime break, and correctly sends me (as admin) the "Problem found
in..." Message. Here's an example:

----------clip-------------
[EMAIL PROTECTED] qmail-scanner-1.20]# tail -3 /var/spool/qmailscan/mailstats.csv
Thu, 18 Dec 2003 10:05:28 +0200 Clear:RC:1(127.0.0.1):  0       1100
[EMAIL PROTECTED]       micha   problem found in sent message ""
[EMAIL PROTECTED]
quarantine-event.txt:1000
Thu, 18 Dec 2003 10:05:28 +0200 Clear:RC:1(127.0.0.1):  0       1100
[EMAIL PROTECTED]       [EMAIL PROTECTED]       problem found in sent
message ""        [EMAIL PROTECTED]
quarantine-event.txt:1000
Thu, 18 Dec 2003 10:05:28 +0200 Policy:Bad_MIME_Break:RC:1(127.0.0.1):
5.814694        98      micha   mike   <>       <>
ns.arava.co.il10717347284615556-unpacked:98
----------clip-------------

Then from the same telnet session I put in correct mime headers, and get "qq
temporary problem <#4.3.0>".

Can anyone help???

Again, Sorry for the long winded post.

--Micha







-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to