On a freshly installed Fedora Core 4 box, with all patches applied, I
installed qmail and qmail scanner as I've done numerous times before.
This time however, qmail-scanner gives me odd results.

I've increased softlimits to 15M, 25M, 50M, 100Meg, so that's not the
problem.

clamd is running as root. I can clamdscan anything I want to on the box,
but when qmail-scanner uses it, I always get a failure.

Wed, 30 Nov 2005 16:43:18 CST:3476: run /usr/bin/clamdscan --no-summary
--config-file=/etc/clamd.d/clamd.conf  
/var/spool/qmailscan/tmp/test.private.ycc11333905984933476 2>&1
Wed, 30 Nov 2005 16:44:18 CST:3476: --output of clamdscan was:
connect(): Permission denied
ERROR: Can't connect to clamd.
--
Wed, 30 Nov 2005 16:44:18 CST:3476: error_condition:
X-Qmail-Scanner-1.25: clamdscan: corrupt or unknown clamd scanner error
or memory/resource/perms problem - exit status 512/2

To debug this, I added a line of code into the PERL script:
        sleep 60;
just before clamdscan is called, so that the directory and
files to be scanned are available to me for 60 seconds, so I can run a
manual clamdscan on that structure.

Here's that sequence:
[EMAIL PROTECTED] qmailscan# clamdscan
--config-file=/etc/clamd.d/clamd.conf 
/var/spool/qmailscan/tmp/test.private.ycc11333905984933476/
/var/spool/qmailscan/tmp/test.private.ycc11333905984933476/: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.053 sec (0 m 0 s)
[EMAIL PROTECTED] qmailscan# echo $?
0

Here's what's in the log for that particular email once the 60 seconds
elapsed:

[EMAIL PROTECTED] qmailscan# tail -n6 qmail-queue.log
Wed, 30 Nov 2005 16:43:18 CST:3476: run /usr/bin/clamdscan --no-summary
--config-file=/etc/clamd.d/clamd.conf  
/var/spool/qmailscan/tmp/test.private.ycc11333905984933476 2>&1
Wed, 30 Nov 2005 16:44:18 CST:3476: --output of clamdscan was:
connect(): Permission denied
ERROR: Can't connect to clamd.
--
Wed, 30 Nov 2005 16:44:18 CST:3476: error_condition:
X-Qmail-Scanner-1.25: clamdscan: corrupt or unknown clamd scanner error
or memory/resource/perms problem - exit status 512/2


I'm running what qmail-scanner is running, and mine works and the one
from inside qmail-scanner doesn't. I'm running as root of course, and
qmail-scanner isn't, but since clamd is running as root, and so is
clamdscan as per the config file, I fail to understand where the
difference is.

Any ideas? I've spent 2 days on this and can't figure it out.

Thanks
-- 
Bill Gradwohl




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to