> > After using qmail-scanner with f-secure successfully for over a year we > have started getting error messages like this on the qmail-queue.log: > > 1107124881.26087-0.xxxxxxxxx.com: Suspected: Exploit.IFrame.FileDownload > [AVP] > DELETED0.TXT - clean > > Scan ended at Sun Jan 30 17:41:21 2005 > > 2 files scanned > 1 file suspected > -- > 30/01/2005 17:41:21:26085: error_condition: X-AVSpamfilter-1.20: corrupt > or > unknown Fsecu > re scanner error or memory/resource/perms problem - exit status 8 > > The error message only occurs when the file is suspect. Does anyone know > what this is from? Can it be cured by adding more memory to the server? > > >
I'd try to increase your softlimit first. Looks like that may be it.
-Jim
Hi Jim:
We just raised the softlimit from 30MB to 40MB but it doesn't seem to help. I can't imagine Qmailscanner requiring more than 40MB.
This error condition only seems to happen when there's a suspected file download exploit like:
1107174550.425-0.xxxxxxxxxxx.com: Suspected: Exploit.IFrame.FileDownload [AVP] DELETED0.TXT - clean
Other viruses like Netsky are handled properly.
FYI we recently upgraded Spamassassin from version 2.64 to 3.02. Spamassassin is invoked by maildrop - not qmailscanner - and has child processes limited to 5.
Best Regards,
Jeff Koch, Intersessions
------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
