opensubscriber
   Find in this group all groups
 
Unknown more information…

q : qmail-scanner-general@lists.sourceforge.net 16 March 2012 • 5:50AM -0400

[Qmail-scanner-general] Problems with clamd
by Matias Lesniak

REPLY TO AUTHOR
 
REPLY TO GROUP




Hi,
        i'm writting due to i've problems with qmailscanner (2.08)....
I've installed qmail on Ubuntu 11.10 and my first problem was that i
don't have the suidperl support for that version, so i used a c-wrapper
that comes with qmailscanner.
Now i have problems with clamd...

Problems:

# /usr/src/qmailscanner/qmail-scanner-2.08/contrib/test_installation.sh
-doit

Sending standard test message - no viruses...
done!

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died

# cat /var/log/mail.log

Mar 15 18:24:42 linux qmail-scanner-queue.pl: qmail-scanner[23680]:
Clear:RC:1(127.0.0.1): 0.008286 335 root@dominio
root@dominio Qmail-Scanner_test_(1/4):_inoffensive_message
<20120315212442.23679.qmail@linux.example.comecho>
1331846682.23682-0.linux:68 orig-linux133184668257023680:335
Mar 15 18:24:42 linux qmail-scanner-queue.pl:
X-Qmail-Scanner-2.08:[linux133184668257023689] clamdscan: corrupt or
unknown clamd scanner error or memory/resource/perms problem - exit
status 512/2


# cat /var/log/clamav/clamav.log

Thu Mar 15 18:17:44 2012 -> +++ Started at Thu Mar 15 18:17:44 2012
Thu Mar 15 18:17:44 2012 -> clamd daemon 0.97.3 (OS: linux-gnu, ARCH:
x86_64, CPU: x86_64)
Thu Mar 15 18:17:44 2012 -> Log file size limited to -1 bytes.
Thu Mar 15 18:17:44 2012 -> Reading databases from /var/lib/clamav
Thu Mar 15 18:17:44 2012 -> Not loading PUA signatures.
Thu Mar 15 18:17:44 2012 -> Bytecode: Security mode set to "TrustSigned".
Thu Mar 15 18:17:45 2012 -> Loaded 1165658 signatures.
Thu Mar 15 18:17:46 2012 -> LOCAL: Removing stale socket file
/var/run/clamav/clamd.ctl
Thu Mar 15 18:17:46 2012 -> LOCAL: Unix socket file
/var/run/clamav/clamd.ctl
Thu Mar 15 18:17:46 2012 -> LOCAL: Setting connection queue length to 15
Thu Mar 15 18:17:46 2012 -> Limits: Global size limit set to 104857600
bytes.
Thu Mar 15 18:17:46 2012 -> Limits: File size limit set to 26214400 bytes.
Thu Mar 15 18:17:46 2012 -> Limits: Recursion level limit set to 16.
Thu Mar 15 18:17:46 2012 -> Limits: Files limit set to 10000.
Thu Mar 15 18:17:46 2012 -> Archive support enabled.
Thu Mar 15 18:17:46 2012 -> Algorithmic detection enabled.
Thu Mar 15 18:17:46 2012 -> Portable Executable support enabled.
Thu Mar 15 18:17:46 2012 -> ELF support enabled.
Thu Mar 15 18:17:46 2012 -> Mail files support enabled.
Thu Mar 15 18:17:46 2012 -> OLE2 support enabled.
Thu Mar 15 18:17:46 2012 -> PDF support enabled.
Thu Mar 15 18:17:46 2012 -> HTML support enabled.
Thu Mar 15 18:17:46 2012 -> Self checking every 3600 seconds.
Thu Mar 15 18:18:29 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184630957023494
Thu Mar 15 18:24:42 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184668257023689
Thu Mar 15 18:39:28 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184756857023827
Thu Mar 15 18:43:51 2012 -> WARNING: lstat() failed on:
/var/spool/qscan/tmp/bmail133184783157023876


clamd.conf:
                     LocalSocketGroup qscand
                     User qscand


# ll /var/spool/qscan/
total 804K
drwxrwx--- 6 qscand qscand 4,0K 2012-03-08 11:56 .
drwxr-xr-x 7 root   root   4,0K 2012-03-06 12:58 ..
drwxrwx--- 5 qscand qscand 4,0K 2012-03-06 12:58 archives
-rw-rw---- 1 qscand qscand 746K 2012-03-15 18:43 qmail-queue.log
-rw-rw---- 1 qscand qscand   46 2012-03-08 11:56
qmail-scanner-queue-version.txt
drwxrwx--- 5 qscand qscand 4,0K 2012-03-06 12:58 quarantine
-rw-r----- 1 qscand qscand  12K 2012-03-08 11:56 quarantine-events.db
-rw-rw---- 1 qscand qscand 9,4K 2012-03-06 13:11 quarantine-events.txt
-rw-rw---- 1 qscand qscand    0 2012-03-08 11:54 quarantine.log
drwxr-x--- 4 qscand qscand 4,0K 2012-03-15 18:43 tmp
drwxrwx--- 5 qscand qscand 4,0K 2012-03-06 12:58 working



# ll /var/spool/qscan/tmp/
total 16K
drwxr-x--- 4 qscand qscand 4,0K 2012-03-15 18:43 .
drwxrwx--- 6 qscand qscand 4,0K 2012-03-08 11:56 ..
drwxr-x--- 2 root   root   4,0K 2012-03-15 18:43 bmail133184783157023867
drwxr-x--- 2 root   root   4,0K 2012-03-15 18:43 bmail133184783157023876


Why this archives are chowned root:root ? I think that is may problem.

Thanks for your help,


Matias.




------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@list...
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Bookmark with:

Delicious   Digg   reddit   Facebook   StumbleUpon

opensubscriber is not affiliated with the authors of this message nor responsible for its content.