Hi,
i'm writting due to i've problems with qmailscanner (2.08)....
I've installed qmail on Ubuntu 11.10 and my first problem was that i
don't have the suidperl support for that version, so i used a c-wrapper
that comes with qmailscanner.
Now i have problems with clamd...
Problems:
# /usr/src/qmailscanner/qmail-scanner-2.08/contrib/test_installation.sh
-doit
Sending standard test message - no viruses...
done!
Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died
# cat /var/log/mail.log
Mar 15 18:24:42 linux qmail-scanner-queue.pl: qmail-scanner[23680]:
Clear:RC:1(127.0.0.1): 0.008286 335 root@dominio
root@dominio Qmail-Scanner_test_(1/4):_inoffensive_message
<20120315212442.23679.qmail@linux.example.comecho>
1331846682.23682-0.linux:68 orig-linux133184668257023680:335
Mar 15 18:24:42 linux qmail-scanner-queue.pl:
X-Qmail-Scanner-2.08:[linux133184668257023689] clamdscan: corrupt or
unknown clamd scanner error or memory/resource/perms problem - exit
status 512/2
# cat /var/log/clamav/clamav.log
Thu Mar 15 18:17:44 2012 -> +++ Started at Thu Mar 15 18:17:44 2012
Thu Mar 15 18:17:44 2012 -> clamd daemon 0.97.3 (OS: linux-gnu, ARCH:
x86_64, CPU: x86_64)
Thu Mar 15 18:17:44 2012 -> Log file size limited to -1 bytes.
Thu Mar 15 18:17:44 2012 -> Reading databases from /var/lib/clamav
Thu Mar 15 18:17:44 2012 -> Not loading PUA signatures.
Thu Mar 15 18:17:44 2012 -> Bytecode: Security mode set to "TrustSigned".
Thu Mar 15 18:17:45 2012 -> Loaded 1165658 signatures.
Thu Mar 15 18:17:46 2012 -> LOCAL: Removing stale socket file
/var/run/clamav/clamd.ctl
Thu Mar 15 18:17:46 2012 -> LOCAL: Unix socket file
/var/run/clamav/clamd.ctl
Thu Mar 15 18:17:46 2012 -> LOCAL: Setting connection queue length to 15
Thu Mar 15 18:17:46 2012 -> Limits: Global size limit set to 104857600
bytes.
Thu Mar 15 18:17:46 2012 -> Limits: File size limit set to 26214400 bytes.
Thu Mar 15 18:17:46 2012 -> Limits: Recursion level limit set to 16.
Thu Mar 15 18:17:46 2012 -> Limits: Files limit set to 10000.
Thu Mar 15 18:17:46 2012 -> Archive support enabled.
Thu Mar 15 18:17:46 2012 -> Algorithmic detection enabled.
Thu Mar 15 18:17:46 2012 -> Portable Executable support enabled.
Thu Mar 15 18:17:46 2012 -> ELF support enabled.
Thu Mar 15 18:17:46 2012 -> Mail files support enabled.
Thu Mar 15 18:17:46 2012 -> OLE2 support enabled.
Thu Mar 15 18:17:46 2012 -> PDF support enabled.
Thu Mar 15 18:17:46 2012 -> HTML support enabled.
Thu Mar 15 18:17:46 2012 -> Self checking every 3600 seconds.
Thu Mar 15 18:18:29 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184630957023494
Thu Mar 15 18:24:42 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184668257023689
Thu Mar 15 18:39:28 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184756857023827
Thu Mar 15 18:43:51 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184783157023876
clamd.conf:
LocalSocketGroup qscand
User qscand
# ll /var/spool/qscan/
total 804K
drwxrwx--- 6 qscand qscand 4,0K 2012-03-08 11:56 .
drwxr-xr-x 7 root root 4,0K 2012-03-06 12:58 ..
drwxrwx--- 5 qscand qscand 4,0K 2012-03-06 12:58 archives
-rw-rw---- 1 qscand qscand 746K 2012-03-15 18:43 qmail-queue.log
-rw-rw---- 1 qscand qscand 46 2012-03-08 11:56
qmail-scanner-queue-version.txt
drwxrwx--- 5 qscand qscand 4,0K 2012-03-06 12:58 quarantine
-rw-r----- 1 qscand qscand 12K 2012-03-08 11:56 quarantine-events.db
-rw-rw---- 1 qscand qscand 9,4K 2012-03-06 13:11 quarantine-events.txt
-rw-rw---- 1 qscand qscand 0 2012-03-08 11:54 quarantine.log
drwxr-x--- 4 qscand qscand 4,0K 2012-03-15 18:43 tmp
drwxrwx--- 5 qscand qscand 4,0K 2012-03-06 12:58 working
# ll /var/spool/qscan/tmp/
total 16K
drwxr-x--- 4 qscand qscand 4,0K 2012-03-15 18:43 .
drwxrwx--- 6 qscand qscand 4,0K 2012-03-08 11:56 ..
drwxr-x--- 2 root root 4,0K 2012-03-15 18:43 bmail133184783157023867
drwxr-x--- 2 root root 4,0K 2012-03-15 18:43 bmail133184783157023876
Why this archives are chowned root:root ? I think that is may problem.
Thanks for your help,
Matias.
------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
