check_mailscanner: FATAL ... with eicar-containing mail in/var/spool/mqueue.in

Sander Jonkers felker at GMX.NET
Wed Jan 23 20:16:16 GMT 2002


Hi,

Short story:
My mailscanner process crashes if it finds an eicar infected message in
mqueue.in.


Long story:

I'm trying to get mailscanner working with f-prot.

The result so far: non-infected mail is handled OK. However, eicar-infected
mail stays in the /var/spool/mqueue.in forever.

I then noticed that no mailscanner process was running anymore (ps -ef |
grep -i mailsca).

Restarting (with the eicar-infected message in in mqueue.in) mailscanner
gave this result:

[root at sanderold sander]#
[root at sanderold sander]#  /usr/local/MailScanner/bin/check_mailscanner
Starting virus scanner...
[root at sanderold sander]# FATAL: Read
http://www.sng.ecs.soton.ac.uk/mailscanner/install/codestatus.shtml at /usr/local/MailScanner/bin/logger.pl line 60.

[root at sanderold sander]#

In other words: mailscanner crashed immedeately with a FATAL.
After removing the eicar infected message from mqueue.in, running
mailscanner was possible again.

In other words (or: hypothesis): my mailscanner crashes if it finds an eicar
infected message in mqueue.in.

Alas, /usr/local/MailScanner/bin/logger.pl line 60 is only the 'die' itself,
and I don't know where the call comes from.

I'll dive deeper into this. If anybody has suggestions, please let me know.

Sander




--
Sent through GMX FreeMail - http://www.gmx.net



More information about the MailScanner mailing list