ClamAV Error

[Sebastian Wiesinger]

* Spicer, Kevin <Kevin.Spicer at BMRB.CO.UK> [2003-11-03 16:02]:
> Sebastian Wiesinger wrote:
> > Hi!
> >
> > I got the following error:
> >
> > MailScanner[4411]: ProcessClamAVOutput: unrecognised line
> > "/var/spool/MailScanner/incoming/4411/./hA38NAbE013167/photos.zip:
> > File size limit exceeded.". Please contact the authors!
> >
> This has just been mentioned on the Clam list too.  My guess is that the file contains a big all-zeros file which is causing some limit in clam to be exceeded.

Hmm strange.. but I checked my log again and against my prior
statement, it seems that MailScanner does clean the message:

Nov  3 09:23:29 mailproxy MailScanner[4411]: Spam Checks: Found 1 spam messages
Nov  3 09:23:29 mailproxy MailScanner[4411]: Spam Actions: message hA38NAbE013167 actions are deliver
Nov  3 09:23:29 mailproxy MailScanner[4411]: Virus and Content Scanning: Starting
Nov  3 09:23:30 mailproxy MailScanner[4411]: /var/spool/MailScanner/incoming/4411/./hA38NAbE013167/photos.zip: File size limit exceeded.
Nov  3 09:23:30 mailproxy MailScanner[4411]: ProcessClamAVOutput: unrecognised line "/var/spool/MailScanner/incoming/4411/./hA38NAbE013167/photos.zip: File size limit exceeded.". Please contact the authors!
Nov  3 09:23:30 mailproxy MailScanner[4411]: ERROR: Can't run unzip
Nov  3 09:23:30 mailproxy MailScanner[4411]: ERROR: Can't execute some unpacker. Check paths and permissions on the temporary directory.
Nov  3 09:23:30 mailproxy MailScanner[4411]: (raw) /var/spool/MailScanner/incoming/4411/./hA38NAbE013167/photos.zip: Worm.Mimail.C FOUND
Nov  3 09:23:30 mailproxy MailScanner[4411]: Virus Scanning: ClamAV found 1 infections
Nov  3 09:23:30 mailproxy MailScanner[4411]: Infected message (raw)  came from
Nov  3 09:23:30 mailproxy MailScanner[4411]: Virus Scanning: Found 1 viruses
Nov  3 09:23:30 mailproxy MailScanner[4411]: Uninfected: Delivered 1 messages

--
InterNetX GmbH
Sebastian Wiesinger
System Administration
Maximilianstrasse 6
D-93047 Regensburg

Tel. +49 941 59559-0
Fax  +49 941 59559-245

eMail: sebastian.wiesinger at internetx.de
GPG-Key: 0x97F5A1D8 (0x8431335F97F5A1D8)