Wait a min. I was wrong about the qscand. But look at this.It's true!!!!
This is from your email:
Into log I retry this:
--output of clamscan was:
/var/spool/qmailscan/tmp/godzilla.mizasol108397543447930637/1083975436.30642
-0.godzilla.mizasol: Access denied.
ERROR: Can't open file /var/spool/qmailscan/tmp/godzilla.mizasol108397543447930637/mails.zip
/var/spool/qmailscan/tmp/godzilla.mizasol108397543447930637/mails.zip: Access denied to archive.
Now look at where q-s is sending clamdscan /var/spool/qmailscan/working/new/godzilla.mizasol108402647247 Is there something weird in your clamd.conf? Looks like clamdscan can't find the right directory
Clamscan tries to open email + attachment into a bad path ....
But isn't clamscan error.
If I watch qmail-scanner log ....
-------------------------
004 11:59:37 CEST:19544: +++ starting debugging for process 19544 by uid=83
Mon, 10 May 2004 11:59:37 CEST:19544: setting UID to EUID so subprocesses can access files generated by this script
Mon, 10 May 2004 11:59:37 CEST:19544: program name is qmail-scanner-queue.pl, version 1.22
Mon, 10 May 2004 11:59:37 CEST:19544: incoming SMTP connection from via SMTP from 151.8.39.2
Mon, 10 May 2004 11:59:37 CEST:19544: w_c: mkdir /var/spool/qmailscan/tmp/godzilla.mizasol108418317747919544
Mon, 10 May 2004 11:59:37 CEST:19544: w_c: start dumping incoming msg into /var/spool/qmailscan/working/tmp/godzilla.mizasol108418317747919544 [1084183177.11457]
Mon, 10 May 2
[.......................]
Mon, 10 May 2004 11:59:37 CEST:19543: w_c: rename new msg from /var/spool/qmailscan/working/tmp/godzilla.mizasol108418317747919543 to /var/spool/qmailscan/working/new/godzilla.mizasol108418317747919543 [1084183177.93278]
Mon, 10 May 2004 11:59:37 CEST:19543: d_m: starting /usr/bin/reformime -x/var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543/ </var/spool/qmailscan/working/new/godzilla.mizasol108418317747919543 [1084183177.9333]
Mon, 10 May 2004 11:59:37 CEST:19543: d_m: finished /usr/bin/reformime -x/var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543/ [1084183177.94617]
Mon, 10 May 2004 11:59:37 CEST:19543: d_m: Checking all attachments to see if they're MS-TNEF
Mon, 10 May 2004 11:59:37 CEST:19543: d_m: is /var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543/1084183177.19551-0.godzilla.mizasol is a TNEF file?: 256 [1084183177.94996]
Mon, 10 May 2004 11:59:37 CEST:19543: d_m: is /var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543/Details.zip is a TNEF file?: 256 [1084183177.95363]
Mon, 10 May 2004 11:59:37 CEST:19543: d_m: unpacking message took 0.020714 seconds
Mon, 10 May 2004 11:59:37 CEST:19543: unsetting QMAILQUEUE env var
[.......................]
Mon, 10 May 2004 11:59:37 CEST:19543: ini_sc: start scanning
Mon, 10 May 2004 11:59:37 CEST:19543: ini_sc: recursively scan the directory /var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543/
Mon, 10 May 2004 11:59:37 CEST:19543: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543"...
Mon, 10 May 2004 11:59:37 CEST:19543: scanloop: scanner=clamscan_scanner,plain_text_msg=0
Mon, 10 May 2004 11:59:37 CEST:19543: clamscan: starting scan of directory "/var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543"...
Mon, 10 May 2004 11:59:37 CEST:19543: run /usr/bin/clamscan -r -m --unzip --unrar --unzoo --lha --disable-summary --max-recursion=10 --max-space=100000 /var/spool/qmailscan/tmp/godzilla.mizasol108418317747919543 2>&1
Mon, 10 May 2004 11:59:38 CEST:19544: --output of clamscan was:
/var/spool/qmailscan/tmp/godzilla.mizasol108418317747919544/1084183177.19546-0.godzilla.mizasol: Access denied.
--
Mon, 10 May 2004 11:59:38 CEST:19544: clamscan: finished scan of dir "/var/spool/qmailscan/tmp/godzilla.mizasol108418317747919544" in 0.993834 secs
----------------------------------
O.K.,
is possible that qmail-scanner don't have, at start of process (id=83, into firt line is vpopmail user!),
a permission to create directory in /var/spool/qmailscan/tmp/ ?
Bye,
Enrico Valsecchi
-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
