Possible problem with the new panda wrapper

[Steen, Glenn]

Hi Rick & all,

I finally had a slow moment to look at your new wrapper script.
Lets start out positive: I really like what you've done there. Might
be because of the rich comments in a language I actually understand:-),
but more likely the nice "sidestep" of terminal issues. Probably
comes from you being a real programmer, where I'm just a know-nothing
programmer-turned-sysadmin (happened just after the dark ages too:-):).

Some "problems" though:
Am I correct in that this still will not honour the path given at the
end of options? So that saying "." or "./<message-id>" is virtually the
same? Seems to me that MS could do that in ScanBatch, if TryCommercial
times out (please correct me if I'm wrong!).

Am I correct that you call pavcl once/directory, not once/batch? Would
be nice if it was once/batch:).

Now for the real problem. When I simulate a batch of more than one
message, this detects the "clean second" as the "unclean first". Better
that I show what I mean:
---------------------------------
[root at mail bbb]# ls -lR
.:
totalt 8
drwxrwx---  2 postfix apache 4096 mar  9 18:51 B46B323DAF.66B25/
drwxr-xr-x  2 root    root   4096 mar 16 10:55 ZZZZZZZZ.ZZZZ/

./B46B323DAF.66B25:
totalt 8
-rw-rw----  1 postfix apache   69 mar  9 18:51 eicar.com
-rw-rw----  1 postfix apache 1223 mar  9 18:51 message

./ZZZZZZZZ.ZZZZ:
totalt 4
-rw-r--r--  1 root root 132 mar 16 10:55 message
[root at mail bbb]# pwd
/var/spool/MailScanner/quarantine/.test/bbb
[root at mail bbb]#
/root/MailScanner-install-4.42.9/perl-tar/MailScanner-4.42.9/lib/panda-w
rapper /usr -nsb -eng -aex -nso -aut -cmp .
 
FOUND:Eicar.Mod##::##message->eicar.com##::##B46B323DAF.66B25##::##/var/
spool/MailScanner/quarantine/.test/bbb
 
FOUND:Eicar.Mod##::##message->eicar.com##::##ZZZZZZZZ.ZZZZ##::##/var/spo
ol/MailScanner/quarantine/.test/bbb
[root at mail bbb]# cat ZZZZZZZZ.ZZZZ/message
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
Dummy file
[root at mail bbb]#
------------------------------------
As you can see (apart from me not having it actually installed:-),
the ZZZZZZZZ.ZZZZ/message file shouldn't be detected, but it is.
I've not looked too deeply into why this happens.. Will do so,
if this temporary slump in Real Work keeps up:-)... Or you could
beat me to it:-).

Tell me if you need more info.

Best Regards,
-- Glenn

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!