Hi,

there seems to be a small but very bad bug in the f-prot scanning part of 
qmail-scanner.

The error codes of f-prot scanner are not evaluated correctly. Thus mail may be 
rejected/not delivered although scanning was quite ok.

The problem is, that there are error codes (>8) that are actually only 
warnings. IMHO these warnings should not result in rejecting the whole mail.

Example is an java .jar file. f-prot complains about that files and exits with 
error code 8.

In the current implementation of qmail-scanner this results in:
"corrupt or unknown F-Prot scanner error or memory/resource/perms problem"
which is not very useful.

I would recommend to throw a warning instead of exiting in that case.
I attach a patch for that.

For possible f-prot error codes see man page:
------><------
PROGRAM EXIT CODES
       0      Normal exit.  Nothing found, nothing done.

       1      Unrecoverable error (e.g., missing virus signature files).

       2      Selftest failed (program has been modified).

       3      At least one virus-infected object was found.

       4      Reserved, not currently in use.

       5      Abnormal termination (scanning did not finish).

       6      At least one virus was removed.

       7      Error, out of memory.

       8      At least one suspicious object was found.

       9      At  least  one  object  was  not scanned (encrypted file, unsup-
              ported/unknown compression method, unsupported/unknown file for-
              mat, corrupted or invalid file).

       10     At lest one archive object was not scanned (contains more then N
              levels of nested archives, as specified with -archive switch).
------><------

Regards,
dimaki

Attachment: qmail-scanner-queue.fprot.patch
Description: attachment

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to