Hi guys...
I'm having the following problem when I try to send an
e-mail: it just show me the error "qq temporary
problem" and then when I take a look at the log, I see
unable to open pipe to /var/qmail/bin/qmail-queue and
unable to close pipe too.
The complete debug is below:
Wed, 17 Nov 2004 10:59:49 BRST:13553: +++ starting
debugging for process 13553 by uid=1010
Wed, 17 Nov 2004 10:59:49 BRST:13553: setting UID to
EUID so subprocesses can access files generated by
this script
Wed, 17 Nov 2004 10:59:49 BRST:13553: program name is
qmail-scanner-queue.pl, version 1.24st
Wed, 17 Nov 2004 10:59:49 BRST:13553: incoming pipe
connection from via local process 13553
Wed, 17 Nov 2004 10:59:49 BRST:13553: w_c: mkdir
/var/spool/qmailscan/tmp/newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: w_c: start
dumping incoming msg into
/var/spool/qmailscan/working/tmp/newmail110069638968013553
[0.000516]
Wed, 17 Nov 2004 10:59:49 BRST:13553: w_c: rename new
msg from
/var/spool/qmailscan/working/tmp/newmail110069638968013553
to
/var/spool/qmailscan/working/new/newmail110069638968013553
[0.000462]
Wed, 17 Nov 2004 10:59:49 BRST:13553: d_m: starting
/usr/local/bin/reformime
-x/var/spool/qmailscan/tmp/newmail110069638968013553/
</var/spool/qmailscan/working/new/newmail110069638968013553
[0.000176]
Wed, 17 Nov 2004 10:59:49 BRST:13553: d_m: finished
/usr/local/bin/reformime
-x/var/spool/qmailscan/tmp/newmail110069638968013553/
[0.002964]
Wed, 17 Nov 2004 10:59:49 BRST:13553: d_m: unpacking
message took 0.003096 seconds
Wed, 17 Nov 2004 10:59:49 BRST:13553: unsetting
QMAILQUEUE env var
Wed, 17 Nov 2004 10:59:49 BRST:13553: g_e_h:
return-path is "", recips is "[EMAIL PROTECTED]"
Wed, 17 Nov 2004 10:59:49 BRST:13553:
from=Qmail-Scanner Test
<[EMAIL PROTECTED]>,subj=Qmail-Scanner
test (1/4): inoffensive message,
x-qmailscanner-bwnet-message-id=<[EMAIL PROTECTED]>
via local process 13553
Wed, 17 Nov 2004 10:59:49 BRST:13553: This is a PLAIN
text message (because it's either not mime, or is
text/plain), skip virus scanners - but not SA
Wed, 17 Nov 2004 10:59:49 BRST:13553: ini_sc: start
scanning
Wed, 17 Nov 2004 10:59:49 BRST:13553: ini_sc:
recursively scan the directory
/var/spool/qmailscan/tmp/newmail110069638968013553/
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop:
starting scan of directory
"/var/spool/qmailscan/tmp/newmail110069638968013553"...
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop:
scanner=clamdscan_scanner,plain_text_msg=1
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop:
scanner=spamassassin,plain_text_msg=1
Wed, 17 Nov 2004 10:59:49 BRST:13553: SA: finished
scan of dir
"/var/spool/qmailscan/tmp/newmail110069638968013553"
in 0.054753 secs
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop:
scanner=perlscan_scanner,plain_text_msg=1
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: starting
scan of directory
"/var/spool/qmailscan/tmp/newmail110069638968013553"...
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.cpl' =
'0' = 'CPL files not allowed per Company security
policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.hta' =
'0' = 'HTA files not allowed per Company security
policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.pif' =
'0' = 'PIF files not allowed per Company security
policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.scr' =
'0' = 'SCR files not allowed per Company security
policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.vbs' =
'0' = 'VBS files not allowed per Company security
policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '124:.*That
movie' = 'Virus-subject' = 'Sobig.F'
{cut a little piece to the text be small }
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'88:.{100,}' = 'Virus-resent-date' = 'MIME Header
Buffer Overflow'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
header!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: checking
for objects containing resent-date: .{100,}
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'91:[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL
PROTECTED]|WPADJQ
\
[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL
PROTECTED]
\
net|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|
\
[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]'
= \
'Virus-to' = 'BadTrans Trojan exploit!' Wed, 17 Nov
2004 10:59:49 BRST:13553: p_s: \
type is a header!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: checking
for objects containing to:
[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL
PROTECTED]
\
ahoo.com|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL
PROTECTED]|
\
[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|OZUN
\
[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]
Wed, 17 Nov \
2004 10:59:49 BRST:13553: p_s: 'allfiles.cmd' = '0' =
'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'application.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'attach.zip' = '12420' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'attacheddocument.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'attachedfile.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'dateilist.pif' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'daten-text.pif' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'details.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'document.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'document_9446.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'document_all.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'eicar.com'
= '69' = 'EICAR Test Virus'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'happy99.exe' = '10000' = 'Happy99 Trojan'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'info.zip'
= '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'information.zip' = '12420' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'letter.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'message.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'moreinfo.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'movie0045.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'msg.zip' =
'0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'msginfo.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'myprofile.zip' = '0' = 'Virus Troj/Tofger-A'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'readme.zip' = '12422' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'server.com' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'text.zip'
= '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'textdocument.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'textfile.zip' = '12416' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'thank_you.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'wendy.zip'
= '0' = 'Virus Mimail'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'wicked_scr.scr' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'www.gwbush-new-wars.com' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'www.hcket-user-pcs.com' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'your_details.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'your_document.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'yourlist.pif' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s:
'zipped_files.exe' = '120495' =
'W32/ExploreZip.worm.pak virus'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a
size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: skipping
auto-generated file 1100696389.13555-0.newmail
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: skipping
auto-generated file orig-newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: finished
scan of dir
"/var/spool/qmailscan/tmp/newmail110069638968013553"
in 0.009644 secs
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop:
finished scan of
"/var/spool/qmailscan/tmp/newmail110069638968013553"...
Wed, 17 Nov 2004 10:59:49 BRST:13553: ini_sc: scanning
message took 0.064901 seconds
Wed, 17 Nov 2004 10:59:49 BRST:13553: q_r: fork off
child into /var/qmail/bin/qmail-queue...
Wed, 17 Nov 2004 10:59:49 BRST:13553: q_r: xstatus=0
Wed, 17 Nov 2004 10:59:49 BRST:13553: error_condition:
X-QMailScanner-BWNet-1.24st: Unable to open pipe to
/var/qmail/bin/qmail-queue [16777215] (#4.3.0) -
Broken pipe
Wed, 17 Nov 2004 10:59:49 BRST:13553: cleanup:
/usr/bin/rm -rf
/var/spool/qmailscan/tmp/newmail110069638968013553/
/var/spool/qmailscan/working/new/newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: --- all
finished. Total of 0.073974 secs
Wed, 17 Nov 2004 10:59:49 BRST:13553: error_condition:
X-QMailScanner-BWNet-1.24st: Unable to close pipe to
/var/qmail/bin/qmail-queue [255] (#4.3.0) - Illegal
seek
Wed, 17 Nov 2004 10:59:49 BRST:13553: cleanup:
/usr/bin/rm -rf
/var/spool/qmailscan/tmp/newmail110069638968013553/
/var/spool/qmailscan/working/new/newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: --- all
finished. Total of 0.079091 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: +++ starting
debugging for process 14718 by uid=1010
Wed, 17 Nov 2004 11:03:39 BRST:14718: w_c: elapsed
time from start 0.000962 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: return-path='',
recips='[EMAIL PROTECTED]'
Wed, 17 Nov 2004 11:03:39 BRST:14718:
from='Qmail-Scanner Test
<[EMAIL PROTECTED]>',
subj='Qmail-Scanner test (1/4): inoffensive message',
via local process 14718
Wed, 17 Nov 2004 11:03:39 BRST:14718: This is a PLAIN
text message, skip virus scanners - but not SA
Wed, 17 Nov 2004 11:03:39 BRST:14718: SA: finished
scan in 0.054384 secs - hits=-2.8
Wed, 17 Nov 2004 11:03:39 BRST:14718: p_s: finished
scan in 0.007424 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: ini_sc: finished
scan of
"/var/spool/qmailscan/tmp/newmail110069661968014718"...
Wed, 17 Nov 2004 11:03:39 BRST:14718: error_condition:
X-QMailScanner-BWNet-1.24st: Unable to open pipe to
/var/qmail/bin/qmail-queue [16777215] (#4.3.0) -
Broken pipe
Wed, 17 Nov 2004 11:03:39 BRST:14718: ------ Process
14718 finished. Total of 0.071022 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: error_condition:
X-QMailScanner-BWNet-1.24st: Unable to close pipe to
/var/qmail/bin/qmail-queue [255] (#4.3.0) - Illegal
seek
Wed, 17 Nov 2004 11:03:39 BRST:14718: ------ Process
14718 finished. Total of 0.076005 secs
I tried almost everything (like googling about and
upgrading) but I didn't get it to work! =\
Any help will be very, very, very appreciated!!!!
Thanks!
=====
Gilcio Grella :: Hackiller :: [EMAIL PROTECTED]
Rede IRCBrasil :: Server Admin :: irc.bwnet.com.br
ICQ :: 55766844 :: MSN Messenger :: [EMAIL PROTECTED]
_______________________________________________________
Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador agora!
http://br.acesso.yahoo.com/
-------------------------------------------------------
This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
