4.39.3-1 bug or is it me - but 4.38.9-1 OK!
Julian Field
MailScanner at ecs.soton.ac.uk
Fri Feb 25 15:13:04 GMT 2005
[ The following text is in the "ISO-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Ah! I hadn't seen that error in context before.
All the places it can have come from are in Message.pm.
Can you put a little bit of debugging (e.g. print STDERR "Got to point
1\n";) just before each occurrence of "Cannot open message" in the file.
Are you warning sender, bouncing spam or notifying spam?
Quentin Campbell wrote:
>Julian
>
>Tried your modified Message.pm file. It makes no difference I am afraid
>and I get the same error in Debug mode:
>
>[root at cheviot7 MailScanner]# check_mailscanner
>Starting MailScanner...
>In Debugging mode, not forking...
>SA bayes lock is /root/.spamassassin/bayes.lock
>Bayes lock is at /root/.spamassassin/bayes.lock
>Can't call method "print" on an undefined value at
>/usr/lib/perl5/site_perl/5.8.0/MIME/Entity.pm line 1803.
>[root at cheviot7 MailScanner]#
>
>By "warning files" I assume you mean those in ~reports/en. They are all
>present and correct. Checked again and again. They are from a working
>4.38.9-1 system.
>
>The startup logs for the session shown above using the new Message.pm
>are given below. The only logged error is the original one I reported of
>"Cannot open ...".
>
>...
>Feb 25 14:37:19 cheviot7 MailScanner[6138]: MailScanner E-Mail Virus
>Scanner version 4.39.3 starting...
>Feb 25 14:37:20 cheviot7 MailScanner[6138]: Read 47 hostnames from the
>phishing whitelist
>Feb 25 14:37:21 cheviot7 MailScanner[6138]: lock.pl sees Config
>LockType = flock
>Feb 25 14:37:21 cheviot7 MailScanner[6138]: lock.pl sees have_module =
>0
>Feb 25 14:37:21 cheviot7 MailScanner[6138]: Using locktype = flock
>Feb 25 14:37:21 cheviot7 MailScanner[6138]: New Batch: Scanning 1
>messages, 41643 bytes
>Feb 25 14:37:21 cheviot7 MailScanner[6138]: Created attachment dirs for
>1 messages
>Feb 25 14:37:21 cheviot7 MailScanner[6138]: MCP Checks completed at
>41643 bytes per second
>Feb 25 14:37:21 cheviot7 MailScanner[6138]: Spam Checks: Starting
>Feb 25 14:37:22 cheviot7 MailScanner[6138]: SpamAssassin returned 0
>Feb 25 14:37:22 cheviot7 MailScanner[6138]: Message j1NBBuHV009018 from
>62.38.158.5 (penthe2 at hotmail.com) to ncl.ac.uk is spam, SpamAssassin
>(score=8.549, required 6, autolearn=disabled, FORGED_HOTMAIL_RCVD2 1.08,
>FORGED_RCVD_HELO 0.05, MIME_BOUND_NEXTPART 0.11, MIME_MISSING_BOUNDARY
>0.25, MISSING_MIMEOLE 0.00, MSGID_FROM_MTA_ID 1.70, NO_REAL_NAME 0.18,
>PRIORITY_NO_NAME 1.19, SARE_BOUNDARY_NP2 4.00)
>Feb 25 14:37:22 cheviot7 MailScanner[6138]: Spam Checks: Found 1 spam
>messages
>Feb 25 14:37:22 cheviot7 MailScanner[6138]: Spam Actions: message
>j1NBBuHV009018 actions are attachment,deliver
>Feb 25 14:37:22 cheviot7 MailScanner[6138]: Spam Checks completed at
>41643 bytes per second
>Feb 25 14:37:22 cheviot7 MailScanner[6138]: Virus and Content Scanning:
>Starting
>Feb 25 14:37:22 cheviot7 MailScanner[6138]: Commencing scanning by
>sophos...
>Feb 25 14:37:23 cheviot7 MailScanner[6138]: >>> Virus 'W32/Netsky-P'
>found in file
>./j1NBBuHV009018/website_panayiotis.periorellis.zip/document.txt .exe
>Feb 25 14:37:23 cheviot7 MailScanner[6138]: >>> Virus 'W32/Netsky-P'
>found in file ./j1NBBuHV009018/website_panayiotis.periorellis.zip
>Feb 25 14:37:23 cheviot7 MailScanner[6138]: Completed scanning by sophos
>
>Feb 25 14:37:23 cheviot7 MailScanner[6138]: Virus Scanning: Sophos found
>2 infections
>Feb 25 14:37:23 cheviot7 MailScanner[6138]: Commencing scanning by
>mcafee...
>Feb 25 14:37:24 cheviot7 MailScanner[6138]:
>/j1NBBuHV009018/website_panayiotis.periorellis.zip Found the
>W32/Netsky.p at MM!zip virus !!!
>Feb 25 14:37:24 cheviot7 MailScanner[6138]: Completed scanning by mcafee
>
>Feb 25 14:37:24 cheviot7 MailScanner[6138]: Virus Scanning: McAfee found
>1 infections
>Feb 25 14:37:24 cheviot7 MailScanner[6138]: Infected message
>j1NBBuHV009018 came from 62.38.158.5
>Feb 25 14:37:24 cheviot7 MailScanner[6138]: Virus Scanning: Found 1
>viruses
>Feb 25 14:37:24 cheviot7 MailScanner[6138]: Virus Scanning completed at
>20821 bytes per second
>Feb 25 14:37:24 cheviot7 MailScanner[6138]: Cannot open message file ,
>No such file or directory
>...
>
>
>Quentin
>---
>PHONE: +44 191 222 8209 Information Systems and Services (ISS),
> University of Newcastle,
> Newcastle upon Tyne,
>FAX: +44 191 222 8765 United Kingdom, NE1 7RU.
>------------------------------------------------------------------------
>"Any opinion expressed above is mine. The University can get its own."
>
>
>
>>-----Original Message-----
>>From: MailScanner mailing list
>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Julian Field
>>Sent: 25 February 2005 13:54
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Re: 4.39.3-1 bug or is it me - but 4.38.9-1 OK!
>>
>>In Message.pm there is a subroutine called "PruneEntityTree".
>>
>>Try this:
>>1. Change the call to it to say
>>
>>PruneEntityTree($this->{entity},$this->{entity2file},$this->{fi
>>le2entity});
>>
>>and change the code for it:
>>
>># Prune all the undef branches out of an entity tree
>>sub PruneEntityTree {
>> my ($entity,$entity2file,$file2entity) = @_;
>>
>> #print STDERR "Pruning $entity\n";
>> return undef unless $entity;
>>
>> my(@newparts, $part, $newpart);
>>
>> # Do a pre-traversal depth-first search of the tree
>> foreach $part ($entity->parts) {
>> #print STDERR "Going down to $part\n";
>> $newpart =
>>$newpart?PruneEntityTree($part,$entity2file,$file2entity):$part;
>> if ($newpart) {
>> push @newparts, $newpart;
>> } else {
>> my $file = $entity2file->{$newpart} if $entity2file;
>> delete $entity2file->{$newpart} if $entity2file && $file;
>> delete $file2entity->{$file} if $file2entity && $file;
>> }
>> #print STDERR "Coming up, added $newpart\n";
>> }
>>
>> # Keep all the parts we found, prune as much as we can
>> if (@newparts) {
>> #print STDERR "Returning entity $entity\n";
>> $entity->parts(\@newparts);
>> return $entity;
>> } else {
>> #print STDERR "Returning undef\n";
>> return $entity;
>> }
>>}
>>
>>Please see if that helps at all.
>>
>>Are any of your warning files either empty or don't exist correctly?
>>Please check the startup logs for any warnings. If they are empty it
>>won't warn you but may cause a problem.
>>
>>Quentin Campbell wrote:
>>
>>
>>
>>>Julian
>>>
>>>Having re-installed 4.39.3-1 with the same debug result I have
>>>re-installed the previous MailScanner, 4.38.9-1.
>>>
>>>The problematic message is now processed without a problem.
>>>
>>>Quentin
>>>---
>>>PHONE: +44 191 222 8209 Information Systems and Services (ISS),
>>> University of Newcastle,
>>> Newcastle upon Tyne,
>>>FAX: +44 191 222 8765 United Kingdom, NE1 7RU.
>>>--------------------------------------------------------------
>>>
>>>
>>----------
>>
>>
>>>"Any opinion expressed above is mine. The University can get its own."
>>>
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>From: MailScanner mailing list
>>>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Quentin Campbell
>>>>Sent: 25 February 2005 12:25
>>>>To: MAILSCANNER at JISCMAIL.AC.UK
>>>>Subject: Re: 4.39.3-1 bug or is it me - what MailScanner
>>>>
>>>>
>>"debug" shows
>>
>>
>>>>[snip]
>>>>
>>>>
>>>>
>>>>
>>>>>Can you try one thing: wipe /usr/lib/MailScanner and reinstall a
>>>>>guaranteed fresh copy. Just in case you are accidentally running a
>>>>>mixture of versions.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>[snip]
>>>>
>>>>Julian
>>>>
>>>>Did that and carefully re-installed MS 4.39.3-1. Get same error:
>>>>
>>>>[root at cheviot7 mqueue.in]# check_mailscanner
>>>>Starting MailScanner...
>>>>In Debugging mode, not forking...
>>>>SA bayes lock is /root/.spamassassin/bayes.lock
>>>>Bayes lock is at /root/.spamassassin/bayes.lock
>>>>Can't call method "print" on an undefined value at
>>>>/usr/lib/perl5/site_perl/5.8.0/MIME/Entity.pm line 1803.
>>>>[root at cheviot7 mqueue.in]#
>>>>
>>>>
>>>>Quentin
>>>>
>>>>------------------------ MailScanner list ------------------------
>>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>'leave mailscanner' in the body of the email.
>>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>>Support MailScanner development - buy the book off the website!
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>------------------------ MailScanner list ------------------------
>>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>'leave mailscanner' in the body of the email.
>>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>>Support MailScanner development - buy the book off the website!
>>>
>>>
>>>
>>>
>>>
>>--
>>Julian Field
>>www.MailScanner.info
>>Buy the MailScanner book at www.MailScanner.info/store
>>
>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>>
>>
>>
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list