Commercial scanner mcafee timed out!

Jon Fraley jfraley at glenraven.com
Tue Nov 25 14:05:39 GMT 2003


I just installed MailScanner 4.24-5 and McAfee on redhat 9.0.  I added
these lines to the /usr/lib/MailScanner/mcafee-wrapper file:

        export LD_PRELOAD="/lib/libc.so.6"
        exec $(PackageDir)/$prog -d $dataDIR "$@"

I get this in my maillog for just a text message:

Nov 25 08:38:03 jfraleyx sendmail[22035]: alias database /etc/aliases
rebuilt by fralj
Nov 25 08:38:03 jfraleyx sendmail[22035]: /etc/aliases: 67 aliases,
longest 28 bytes, 722 bytes total
Nov 25 08:38:03 jfraleyx sendmail[22044]: starting daemon (8.12.8): SMTP
Nov 25 08:38:03 jfraleyx sm-msp-queue[22050]: starting daemon (8.12.8):
queueing at 00:15:00
Nov 25 08:38:03 jfraleyx sendmail[22058]: starting daemon (8.12.8):
queueing at 00:15:00
Nov 25 08:38:08 jfraleyx MailScanner[22097]: MailScanner E-Mail Virus
Scanner version 4.24-5 starting...
Nov 25 08:38:09 jfraleyx MailScanner[22097]: Using locktype = flock
Nov 25 08:38:18 jfraleyx MailScanner[22101]: MailScanner E-Mail Virus
Scanner version 4.24-5 starting...
Nov 25 08:38:19 jfraleyx MailScanner[22101]: Using locktype = flock
Nov 25 08:38:29 jfraleyx MailScanner[22102]: MailScanner E-Mail Virus
Scanner version 4.24-5 starting...
Nov 25 08:38:29 jfraleyx MailScanner[22102]: Using locktype = flock
Nov 25 08:38:38 jfraleyx MailScanner[22105]: MailScanner E-Mail Virus
Scanner version 4.24-5 starting...
Nov 25 08:38:39 jfraleyx MailScanner[22105]: Using locktype = flock
Nov 25 08:38:46 jfraleyx sendmail[22109]: hAPDcjj7022109:
from=<jfraley at glenraven.com>, size=377, class=0, nrcpts=1,
msgid=<1069767524.22223.46.camel at jfraleyx.glenraven.com>, proto=ESMTP,
daemon=MTA, relay=jfraleyx.glenraven.com [198.85.87.70]
Nov 25 08:38:46 jfraleyx sendmail[22109]: hAPDcjj7022109:
to=<jfraley at glenraven.com>, delay=00:00:01, mailer=relay, pri=30369,
stat=queued
Nov 25 08:38:48 jfraleyx MailScanner[22111]: MailScanner E-Mail Virus
Scanner version 4.24-5 starting...
Nov 25 08:38:49 jfraleyx MailScanner[22097]: New Batch: Scanning 1
messages, 877 bytes
Nov 25 08:38:49 jfraleyx MailScanner[22097]: Spam Checks: Starting
Nov 25 08:38:49 jfraleyx MailScanner[22111]: Using locktype = flock
Nov 25 08:38:49 jfraleyx MailScanner[22097]: Virus and Content Scanning:
Starting
Nov 25 08:43:54 jfraleyx MailScanner[22097]: Commercial scanner mcafee
timed out!
Nov 25 08:43:54 jfraleyx MailScanner[22097]: Virus Scanning: Denial Of
Service attack detected!

Does anyone have any ideas on what I should look for?

Thanks,

Jon Fraley



More information about the MailScanner mailing list