Hi,
I'm trying to set up qmailscan with the newest version of ClamAV (ver
.80) and for some reason, the scan keeps failing whenever it's invoked
by qmailscan.

Here's a sample log:
Sat, 01 Jan 2005 02:24:15 EST:12167: incoming SMTP connection from via
SMTP from 24.189.240.142
Sat, 01 Jan 2005 02:24:15 EST:12167: w_c: mkdir
/var/spool/qmailscan/tmp/db1.domain.com110456425548712167
Sat, 01 Jan 2005 02:24:15 EST:12167: w_c: start dumping incoming msg
into /var/spool/qmailscan/working/tmp/db1.domain.com110456425548712167
[0.000849]
Sat, 01 Jan 2005 02:24:15 EST:12167: c_a_g: found MIME attachment
Sat, 01 Jan 2005 02:24:15 EST:12167: w_c: primary Content-Type of
multipart/alternative found
Sat, 01 Jan 2005 02:24:15 EST:12167: w_c: found a top-level boundary
definition of \-\-\-\-\=_NextPart_000_0FDE_01C4EFA8\.FD703530
Sat, 01 Jan 2005 02:24:15 EST:12167: w_c: attachment  1: Content-Type
of text/plain found
Sat, 01 Jan 2005 02:24:15 EST:12167: w_c: attachment  2: Content-Type
of text/html found
Sat, 01 Jan 2005 02:24:15 EST:12167: w_c: rename new msg from
/var/spool/qmailscan/working/tmp/db1.domain.com110456425548712167 to
/var/spool/qmailscan/working/new/db1.domain.com110456425548712167
[0.007968]
Sat, 01 Jan 2005 02:24:15 EST:12167: d_m: starting
/usr/local/bin/reformime 
-x/var/spool/qmailscan/tmp/db1.domain.com110456425548712167/
</var/spool/qmailscan/working/new/db1.domain.com110456425548712167
[0.000209]
Sat, 01 Jan 2005 02:24:15 EST:12167: d_m: finished
/usr/local/bin/reformime 
-x/var/spool/qmailscan/tmp/db1.domain.com110456425548712167/ [0.00731]
Sat, 01 Jan 2005 02:24:15 EST:12167: d_m: Checking all attachments to
see if they're MS-TNEF
Sat, 01 Jan 2005 02:24:15 EST:12167: d_m: is
/var/spool/qmailscan/tmp/db1.domain.com110456425548712167/1104564255.12169-0.db1.domain.com
is a TNEF file?: 256 [0.002135]
Sat, 01 Jan 2005 02:24:15 EST:12167: d_m: is
/var/spool/qmailscan/tmp/db1.domain.com110456425548712167/1104564255.12169-1.db1.domain.com
is a TNEF file?: 256 [0.001753]
Sat, 01 Jan 2005 02:24:15 EST:12167: d_m: unpacking message took
0.011382 seconds
Sat, 01 Jan 2005 02:24:15 EST:12167: unsetting QMAILQUEUE env var
Sat, 01 Jan 2005 02:24:15 EST:12167: g_e_h: return-path is
"[EMAIL PROTECTED]", recips is "[EMAIL PROTECTED]"
Sat, 01 Jan 2005 02:24:15 EST:12167: from="Mike / Staff"
<[EMAIL PROTECTED]>,subj=RE: can't send through server,
x-qmail-scanner-message-id=<[EMAIL PROTECTED]> via
SMTP from 123.456.789.123
Sat, 01 Jan 2005 02:24:15 EST:12167: ini_sc: start scanning
Sat, 01 Jan 2005 02:24:15 EST:12167: ini_sc: recursively scan the
directory /var/spool/qmailscan/tmp/db1.domain.com110456425548712167/
Sat, 01 Jan 2005 02:24:15 EST:12167: scanloop: starting scan of
directory "/var/spool/qmailscan/tmp/db1.domain.com110456425548712167"...
Sat, 01 Jan 2005 02:24:15 EST:12167: scanloop:
scanner=clamdscan_scanner,plain_text_msg=0
Sat, 01 Jan 2005 02:24:15 EST:12167: clamdscan: starting scan of
directory "/var/spool/qmailscan/tmp/db1.domain.com110456425548712167"...
Sat, 01 Jan 2005 02:24:15 EST:12167: run /usr/local/bin/clamdscan
--no-summary  /var/spool/qmailscan/tmp/db1.domain.com110456425548712167
2>&1
Sat, 01 Jan 2005 02:24:15 EST:12167: --output of clamdscan was:
/var/spool/qmailscan/tmp/db1.domain.com110456425548712167: Access denied. ERROR
/var/spool/qmailscan/tmp/db1.domain.com110456425548712167: OK
--
Sat, 01 Jan 2005 02:24:15 EST:12167: error_condition:
X-Qmail-Scanner-1.24: clamdscan: corrupt or unknown clamd scanner
error
 or memory/resource/perms problem - exit status 512/2


I tried chmoding the tmp folder to 777 with a sticky bit set so all
created files would be 777. Same error happened though, so I don't
know how it could be a permissions problem.  Is there any way it could
be a file locking problem?  This doesn't make too much sense either -
I'm really out of ideas.  I also have no idea why clamdscan would
output a check of the same file twice (it always says OK at the second
try).  clamdscan works just fine on any files I try to scan as user
qscand.

Thanks for your help,
Mike


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to