sophossavi-Postfix on Redhat 9

[Julian Field]

At 15:06 18/05/2003, you wrote:
>Hi everyone,
>
>I have been searching the archives for an issue between Postfix, MS, and
>Sophossavi and I found a post (at the end of this message) but no solution.
>This issue is *only* occurring on a Redhat 9.
>
>If Virus Scanners = sophos (or command in my case), the delivery occurs.
>If Virus Scanners = sophossavi , the delivery halts ( or deferred).
>
>This is a *snip* from the maillog when sophossavi is used:
>
>May 18 09:22:37 its postfix/nqmgr[21523]: 96AE2164180:
>from=<godfather968 at hotmail.com>, size=1020, nrcpt=1 (queue active)
>May 18 09:22:37 its postfix/nqmgr[21523]: 96AE2164180: to=<marco at its.muw.edu>,
>relay=none, delay=0, status=deferred (deferred transport)
>May 18 09:22:38 its postfix/smtpd[21603]: disconnect from bay8-
>f31.bay8.hotmail.com[64.4.27.31]

That is before MailScanner has picked up the message. So it cannot be
scanner-specific. At this point MailScanner might not even be running. The
"status=deferred" is perfectly normal, it signifies that the incoming
Postfix has put the message in the deferred queue, which is where
MailScanner collects it from.


>This is a *snip* after changing Virus Scanners = command and restarting MS:
>
>May 18 08:25:32 its MailScanner[3412]: MailScanner E-Mail Virus Scanner
>version
>4.20-3 starting...
>May 18 08:25:35 its MailScanner[3412]: Using locktype = flock
>May 18 08:25:35 its MailScanner[3412]: New Batch: Scanning 5 messages, 7096
>bytes
>May 18 08:25:35 its MailScanner[3412]: Spam Checks: Starting
>May 18 08:25:38 its MailScanner[3412]: Virus and Content Scanning: Starting
>May 18 08:25:40 its MailScanner[3412]: Content Checks: Need to convert HTML to
>plain text in 5 messages
>May 18 08:25:40 its MailScanner[3412]: Uninfected: Delivered 5 messages
>May 18 09:25:40 its postfix/nqmgr[3408]: 1D5622780F7:
>from=<godfather968 at hotmail.com>, size=1308, nrcpt=1 (queue active)
>May 18 09:25:40 its postfix/nqmgr[3408]: 135D2278129: from=<marco at muw.edu>,
>size=1740, nrcpt=1 (queue active)
>May 18 09:25:40 its postfix/nqmgr[3408]: 5C84927812B:
>from=<godfather968 at hotmail.com>, size=1326, nrcpt=1 (queue active)
>May 18 09:25:40 its postfix/nqmgr[3408]: D9B0127812A:
>from=<godfather968 at hotmail.com>, size=1126, nrcpt=1 (queue active)
>May 18 09:25:40 its postfix/nqmgr[3408]: 4FDAD27812C:
>from=<godfather968 at hotmail.com>, size=1112, nrcpt=1 (queue active)
>May 18 08:25:41 its postfix/local[3468]: 135D2278129: to=<marco at its.muw.edu>,
>relay=local, delay=961, status=sent ("|/usr/bin/procmail")
>May 18 08:25:41 its postfix/local[3467]: 1D5622780F7: to=<marco at its.muw.edu>,
>relay=local, delay=404, status=sent ("|/usr/bin/procmail")
>May 18 08:25:41 its postfix/local[3468]: D9B0127812A: to=<marco at its.muw.edu>,
>relay=local, delay=184, status=sent ("|/usr/bin/procmail")
>May 18 08:25:41 its postfix/local[3471]: 5C84927812B: to=<marco at its.muw.edu>,
>relay=local, delay=174, status=sent ("|/usr/bin/procmail")
>May 18 08:25:41 its postfix/local[3467]: 4FDAD27812C: to=<marco at its.muw.edu>,
>relay=local, delay=809, status=sent ("|/usr/bin/procmail")

And that is all from MailScanner and the outgoing Postfix, there is no sign
there of how the incoming Postfix got the message or placed it in the
deferred queue.

I don't see any sign of a bug given these reports.


>I am working with a test machine, so nothing urgent. I just wanted to bring it
>up to Julian's attention.
>
>Thank you
>Marco
>
>
>Quoting Stephen Swaney <Steve at swaney.com>:
>
> > I've just installed MailScanner 4.2-3 configured for postfix on Redhat 9
> > with SpamAssassin 2.53. All works perfectly! when using:
> >
> >         Virus Scanners = sophos
> >
> > But when I switch to:
> >
> >         Virus Scanner= sophossavi
> >
> >
> > Mail is accepted but deferred. MailScanner doesn't pick up the message.
> >
> > Switching back to
> >
> >         Virus Scanners = sophos
> >
> > and restarting MailScanner causes MailScanner to find and deliver the
> > stalled message.
>
>
>_________________________________________________________________
>This mail is sent through MUW Webmail: http://www.MUW.Edu/webmail
>For the latest MUW Events, visit  http://www.MUW.Edu/calendar

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support