> At 07:53 PM 1/30/2005, you wrote: >> > >> > After using qmail-scanner with f-secure successfully for over a year >> we >> > have started getting error messages like this on the qmail-queue.log: >> > >> > 1107124881.26087-0.xxxxxxxxx.com: Suspected: >> Exploit.IFrame.FileDownload >> > [AVP] >> > DELETED0.TXT - clean >> > >> > Scan ended at Sun Jan 30 17:41:21 2005 >> > >> > 2 files scanned >> > 1 file suspected >> > -- >> > 30/01/2005 17:41:21:26085: error_condition: X-AVSpamfilter-1.20: >> corrupt >> > or >> > unknown Fsecu >> > re scanner error or memory/resource/perms problem - exit status 8 >> > >> > The error message only occurs when the file is suspect. Does anyone >> know >> > what this is from? Can it be cured by adding more memory to the >> server? >> > >> > >> > >> >>I'd try to increase your softlimit first. Looks like that may be it. >> >>-Jim > > > Hi Jim: > > We just raised the softlimit from 30MB to 40MB but it doesn't seem to > help. > I can't imagine Qmailscanner requiring more than 40MB. > > This error condition only seems to happen when there's a suspected file > download exploit like: > > 1107174550.425-0.xxxxxxxxxxx.com: Suspected: Exploit.IFrame.FileDownload > [AVP] > DELETED0.TXT - clean > > Other viruses like Netsky are handled properly. > > FYI we recently upgraded Spamassassin from version 2.64 to 3.02. > Spamassassin is invoked by maildrop - not qmailscanner - and has child > processes limited to 5. > >
Have you tried values greater than 40mb just to be sure? Your most likely right, but it cant hurt. Also, what version of qmail-scanner is it? -Jim ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
