I use: 1) su - qmaild -c /usr/local/sbin/clamd to start clamd
2) /etc/spamassassin.conf ENABLED=1 OPTIONS="-L -x -u qmaild" to start spamassassin 3) chown -R qmaild:nofiles /var/spool/qmailscan chown qmaild:nofiles /var/qmail/bin/qmail-scanner-queue.pl files permissions Leandro. ----- Original Message ----- From: "Ryan Park" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, October 19, 2004 9:42 PM Subject: [Qmail-scanner-general]Qmail-scanner permission problem? > I've recently installed qmail-scanner 1.23 in an attempt to reduce my > spam intake. > I'm using Slack 9 (no suidperl), perl 5.8.0, spamassassin 3.0.0 w/Razor, > and clamAV 0.80 and everything *looks* alright as it runs from a > non-priviliged account. > > What I'm getting though, as I try to call qmail-scanner-queue from > qmail, is that I get "451 qq temporary problem (#4.3.0)" every time. > > Qmail-scanner-queue and clamAV uses qscand, Spamassassin is running as > spamd, and qmail is running happily in its own little world. > > I did the following: > "sudo -u qscand ./qmail-scanner-queue -z" #initialise with qscand > creating the files > "sudo -u qscand ./qmail-scanner-queue -g" #qscand creates the db > "sudo -u qscand ./qmail-scanner-queue -v" #Version/verify that > qmail-scanner-queue.pl works. > > I then tried test_installation.sh in the contrib dir, and it quarantined > 2 of the 4, spamassassin caught the spammy message. Looked great. > > I then changed tcp.smtp rules to use qmail-scanner-queue. > tcp.smtp rules are as follows: > > x.x.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-s > canner-queue" > 127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qm > ail-queue" > :allow,QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue" > > Double-checked permissions on all the files - > > /var/qmail/bin/qmail-scanner-queue* > -rwxr-xr-x 1 qscand qscand 11159 Oct 18 14:56 > qmail-scanner-queue* > -rwsr-xr-x 1 qscand qscand 95011 Oct 18 19:35 > qmail-scanner-queue.pl* > > /var/spool/qmailscan/* > drwxrwxrwx 5 qscand qscand 4096 Oct 18 15:18 archive/ > -rwxrwxrwx 1 qscand qscand 780396 Oct 19 19:21 qmail-queue.log* > -rw------- 1 qscand qscand 21 Oct 19 19:21 > qmail-scanner-queue-version.txt > drwxrwxrwx 5 qscand qscand 4096 Oct 17 17:22 quarantine/ > -rw-r----- 1 qscand qscand 12288 Oct 19 19:20 > quarantine-attachments.db > -rwxrwxrwx 1 qscand qscand 4329 Oct 17 17:05 > quarantine-attachments.txt* > -rwxrwxrwx 1 qscand qscand 4997 Oct 18 23:06 quarantine.log* > drwxrwxrwx 4 qscand qscand 4096 Oct 18 23:57 tmp/ > lrwxrwx--- 1 qscand qscand 31 Oct 18 18:28 viruses -> > quarantine/ > lrwxrwx--- 1 qscand qscand 35 Oct 18 18:28 viruses.log -> > quarantine.log > drwxrwxrwx 5 qscand qscand 4096 Oct 17 17:22 working/ > > /usr/local/etc/clamav.conf > > <snip> > # Run as selected user (clamd must be started by root). > # By default it doesn't drop privileges. > User qscand > <snip> > > My logs indicate that there's a permissions problem: > > /var/log/maillog > > Oct 19 19:19:54 torg X-Qmail-Scanner-1.23: [torg10982279944822337] > cannot open / > var/spool/qmailscan/qmail-scanner-queue-version.txt - did you initialise > the sys > tem by running "qmail-scanner-queue.pl -z"? - Permission denied > Oct 19 19:21:26 torg X-Qmail-Scanner-1.23: [] cannot open > /var/spool/qmailscan/q > mail-scanner-queue-version.txt - did you initialise the system by > running "qmail > -scanner-queue.pl -z"? - Permission denied > > > My list of questions are this: > - Can anyone explain where I'm going wrong, or what needs to be done to > get everything to work together? > > - Who's calling qmail-scanner-queue, and is it passing the wrong > permissions? > > - Is there a way to see how qmail-scanner parses the files as it's doing > so, and identify the choke points? > > > Thanks for any help > > Ryan > > > > ------------------------------------------------------- > This SF.net email is sponsored by: IT Product Guide on ITManagersJournal > Use IT products in your business? Tell us what you think of them. Give us > Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more > http://productguide.itmanagersjournal.com/guidepromo.tmpl > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general ------------------------------------------------------- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
