Doh! Sorry, try this. Tue, 16 Mar 2004 08:03:31 -0600:5226: +++ starting debugging for process 5226 by uid=502 at Tue, 16 Mar 2004 08:03:31 -0600 Tue, 16 Mar 2004 08:03:31 -0600:5226: setting UID to EUID so subprocesses can ac cess files generated by this script Tue, 16 Mar 2004 08:03:31 -0600:5226: program name is qmail-scanner-queue.pl, ve rsion 1.21 Tue, 16 Mar 2004 08:03:31 -0600:5226: incoming SMTP connection from via SMTP fro m 209.184.62.12 Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: mkdir /var/spool/qmailscan/tmp/mail.a ceks.com10794458114705226 Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: start dumping incoming msg into /var/ spool/qmailscan/working/tmp/mail.aceks.com10794458114705226 [1079445811.57151] Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: primary Content-Type of multipart/mix ed found Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: found a top-level boundary definition of =\-ztkhyiiTe2DIUB\+NUqun Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: attachment 1: Content-Type of text/p lain found Tue, 16 Mar 2004 08:03:31 -0600:5226: found C-T attachment filename name.scr.zip Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: attachment 2: Content-Type of applic ation/zip found Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: base64 looks like a zip file, filenam e=name.scr.zip,type=application/zip Tue, 16 Mar 2004 08:03:31 -0600:5226: w_c: rename new msg from /var/spool/qmails can/working/tmp/mail.aceks.com10794458114705226 to /var/spool/qmailscan/working/ new/mail.aceks.com10794458114705226 [1079445811.57422] Tue, 16 Mar 2004 08:03:31 -0600:5226: d_m: starting /usr/local/bin/reformime -x /var/spool/qmailscan/tmp/mail.aceks.com10794458114705226/ </var/spool/qmailscan/ working/new/mail.aceks.com10794458114705226 [1079445811.57449] Tue, 16 Mar 2004 08:03:31 -0600:5226: d_m: finished /usr/local/bin/reformime -x /var/spool/qmailscan/tmp/mail.aceks.com10794458114705226/ [1079445811.62655] Tue, 16 Mar 2004 08:03:31 -0600:5226: d_m: Checking all attachments to see if th ey're MS-TNEF Tue, 16 Mar 2004 08:03:31 -0600:5226: d_m: is /var/spool/qmailscan/tmp/mail.acek s.com10794458114705226/1079445811.5230-0.mail.aceks.com is a TNEF file?: 256 [10 79445811.65126] Tue, 16 Mar 2004 08:03:31 -0600:5226: d_m: is /var/spool/qmailscan/tmp/mail.acek s.com10794458114705226/name.scr.zip is a TNEF file?: 256 [1079445811.66426] Tue, 16 Mar 2004 08:03:31 -0600:5226: d_m: Check for zip files... Tue, 16 Mar 2004 08:03:31 -0600:5226: u_f: potential zip archive file found (nam e.scr.zip). Tue, 16 Mar 2004 08:03:31 -0600:5226: u_f: it is possibly a zip file, run unzip -t /var/spool/qmailscan/tmp/mail.aceks.com10794458114705226/name.scr.zip Tue, 16 Mar 2004 08:03:31 -0600:5227: +++ starting debugging for process 5227 by uid=502 at Tue, 16 Mar 2004 08:03:31 -0600 Tue, 16 Mar 2004 08:03:31 -0600:5227: setting UID to EUID so subprocesses can ac cess files generated by this script Tue, 16 Mar 2004 08:03:31 -0600:5227: program name is qmail-scanner-queue.pl, ve rsion 1.21 Tue, 16 Mar 2004 08:03:31 -0600:5227: incoming SMTP connection from via SMTP fro m 204.60.203.77 Tue, 16 Mar 2004 08:03:31 -0600:5227: w_c: mkdir /var/spool/qmailscan/tmp/mail.a ceks.com10794458114705227 Tue, 16 Mar 2004 08:03:31 -0600:5227: w_c: start dumping incoming msg into /var/ spool/qmailscan/working/tmp/mail.aceks.com10794458114705227 [1079445811.67313] Tue, 16 Mar 2004 08:03:31 -0600:5227: w_c: primary Content-Type of multipart/mix ed found Tue, 16 Mar 2004 08:03:31 -0600:5227: w_c: found a top-level boundary definition of \-\-5749223878032625 Tue, 16 Mar 2004 08:03:31 -0600:5227: w_c: attachment 1: Content-Type of text/h tml found Tue, 16 Mar 2004 08:03:31 -0600:5227: w_c: rename new msg from /var/spool/qmails can/working/tmp/mail.aceks.com10794458114705227 to /var/spool/qmailscan/working/ new/mail.aceks.com10794458114705227 [1079445811.68423] Tue, 16 Mar 2004 08:03:31 -0600:5227: d_m: starting /usr/local/bin/reformime -x /var/spool/qmailscan/tmp/mail.aceks.com10794458114705227/ </var/spool/qmailscan/ working/new/mail.aceks.com10794458114705227 [1079445811.6846] Tue, 16 Mar 2004 08:03:31 -0600:5226: u_f: it is a zip file - unpack it! Tue, 16 Mar 2004 08:03:31 -0600:5226: d_m: unpacking message took 0.11654 second s Tue, 16 Mar 2004 08:03:31 -0600:5226: unsetting QMAILQUEUE env var Tue, 16 Mar 2004 08:03:31 -0600:5226: g_e_h: return-path is "[EMAIL PROTECTED]", r ecips is "[EMAIL PROTECTED]" Tue, 16 Mar 2004 08:03:31 -0600:5226: from=Eric Weide <[EMAIL PROTECTED]>,subj=tes t virus file zipped, x-qmail-scanner-message-id=<[EMAIL PROTECTED] eks.local> via SMTP from 209.184.62.12 Tue, 16 Mar 2004 08:03:31 -0600:5226: ini_sc: start scanning Tue, 16 Mar 2004 08:03:31 -0600:5226: ini_sc: recursively scan the directory /va r/spool/qmailscan/tmp/mail.aceks.com10794458114705226/ Tue, 16 Mar 2004 08:03:31 -0600:5226: scanloop: starting scan of directory "/var /spool/qmailscan/tmp/mail.aceks.com10794458114705226"... Tue, 16 Mar 2004 08:03:31 -0600:5226: scanloop: scanner=uvscan_scanner,plain_tex t_msg=0 Tue, 16 Mar 2004 08:03:31 -0600:5226: uvscan: starting scan of directory "/var/s pool/qmailscan/tmp/mail.aceks.com10794458114705226"... Tue, 16 Mar 2004 08:03:31 -0600:5226: run /usr/local/bin/uvscan -v -r --secure --fam --unzip --macro-heuristics /var/spool/qmailscan/tmp/mail.aceks.com1079445 8114705226 2>&1 Tue, 16 Mar 2004 08:03:31 -0600:5227: d_m: finished /usr/local/bin/reformime -x /var/spool/qmailscan/tmp/mail.aceks.com10794458114705227/ [1079445811.6992] Tue, 16 Mar 2004 08:03:31 -0600:5227: d_m: Checking all attachments to see if th ey're MS-TNEF Tue, 16 Mar 2004 08:03:31 -0600:5227: d_m: is /var/spool/qmailscan/tmp/mail.acek s.com10794458114705227/1079445811.5238-0.mail.aceks.com is a TNEF file?: 256 [10 79445811.70579]
On Tue, 2004-03-16 at 03:27, Jason Haar wrote: > On Mon, Mar 15, 2004 at 08:22:57AM -0600, Eric Weide wrote: > > Here is the relevant portion of the log file. > > No it isn't. You missed the top of the debugging for that particular message > :-) -- ************************************** ******** Eric Weide - A+,MCP ********* * Advantage Computer Enterprises Inc.* ******* http://www.aceks.com ******** *** Registered Linux User #110542 *** ************************************** ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
