Just to add a little more weirdness as reported earlier by Awie (Problem using ClamAV 0.66). I have not continued the message thread as the root problem does not appear to the same.
When I run sophie (and ClamAV) as the user qscand, I receive the message as shown below. If I run Sophie as root, the processing completes as normal and the message is delivered. What appears to be happening is that the message is dropped into a directory under /var/spool/qmailscan/tmp/ which is chown-ed by root.qmail and chmod 700. Obviously, poor old qscand does not have access to this directory and the scan fails.
I am using Qmail Scanner 1.20ST with Sophie 3.03 (am not able to make 3.04RC whatever), ClamAV 0.66 and SpamAssassin 2.63. Both AVs are loaded but selected by re-compiling Qmail Scanner. Qmail Scanner tests and accepts the AVs when qmail-scanner-queue.pl is being created. I have tested Sophie using scan_file /var/run/sophie /root/CGPSophos-Linux-Intel.tar.gz as qscand. This file is around 3 MB in size and is scanned correctly is about 13 seconds. The file being scanned below is about 750 KB and is a PKZip file with about 30 MS Word docs in it. This scan also fails when presented with a PDF document. I have tested this with and without a softimit and currently have no size limit on attachments.
I have trawled through the Qmail Scanner and Sophie docs but have not been able to resolve this matter.
Many thanks in advance for your assistance.
Regards, Mark.
Taken from /var/spool/qmailscan/qmail-queue.log | tai64nlocal
Sun, 15 Feb 2004 18:36:05 +0000:18661: p_s: checking orig-mailman107687016554718661 against perlscanner database...
Sun, 15 Feb 2004 18:36:05 +0000:18661: p_s: file orig-mailman107687016554718661is lowercased to orig-mailman107687016554718661 and has extension
Sun, 15 Feb 2004 18:36:05 +0000:18661: p_s: compare orig-mailman107687016554718661 (size 528121,227971) against perlscanner database
Sun, 15 Feb 2004 18:36:05 +0000:18661: p_s: checking my documents.zip against perlscanner database...
Sun, 15 Feb 2004 18:36:05 +0000:18661: p_s: file my documents.zip is lowercasedto my documents.zip and has extension .zip
Sun, 15 Feb 2004 18:36:05 +0000:18661: p_s: compare my documents.zip (size ,) against perlscanner database
Sun, 15 Feb 2004 18:36:05 +0000:18661: p_s: finished scan of dir "/var/spool/qmailscan/tmp/mailman107687016554718661" in 0.182334 secs
Sun, 15 Feb 2004 18:36:05 +0000:18661: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/mailman107687016554718661"...
Sun, 15 Feb 2004 18:36:05 +0000:18661: scanloop: scanner=sophie_scanner,plain_text_msg=0
Sun, 15 Feb 2004 18:36:05 +0000:18661: sophie: starting scan of directory "/var/spool/qmailscan/tmp/mailman107687016554718661"...
15/02/2004 18:36:05:18661: error_condition: X-Qmail-Scanner-1.20st: corrupt or unknown Sophos scanner error or memory/resource/perms problem
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
