Panda not working

[Steen, Glenn]

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Paul Welsh
> Sent: den 3 mars 2005 22:39
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Panda not working
> 
> 
> Anyone managed to get panda working?
> 
> I'm running MailScanner 4.38.9 on RH9 with the pavcl program 
> file dated 1
> July 03.  I installed pavcl from rpm.
> 
> pavcl is in /usr/bin and I have the pav.sig signature file in
> /usr/lib/panda.  The .sig file is dated today, so the 
> autoupdate is working.
> 
> The /usr/lib/MailScanner/panda-wrapper file refers to 
> /bin/pavcl rather than
> /usr/bin/pavcl so I guess there's one potential problem.
> 
> The /etc/MailScanner/virus.scanners.conf file contains the line:
> 
> panda           /usr/lib/MailScanner/panda-wrapper      /usr
> 
> There's the following advice in virus.scanners.conf:
> 
> # You can test a -wrapper script with a command like this:
> #      /usr/lib/MailScanner/f-secure-wrapper /opt/f-secure/fsav /tmp
> # That command will attempt to scan /tmp using F-Secure. If 
> it works you
> # should see some sensible output. If it fails, you will 
> probably just see
> # an error message such as "Command not found" or similar.
> 
> I've tried the command:
> 
> /usr/lib/MailScanner/panda-wrapper /usr/bin/pavcl /tmp
Try
/usr/lib/MailScanner/panda-wrapper /usr /tmp
since the lines
$pavcl = shift;
$pavcl .=  '/bin/pavcl';
would first set $pavcl to /usr, then concatenate /bin/pavcl onto
that, making $pavcl (which is used further down) be /usr/bin/pavcl

If that doesn't work, try it while standing in the /tmp directory.
Looking at it, it seems like the wrapper ignores any path, but
will preserve scanner options.

-- Glenn
> 
> Along with a whole load of permutations.  I've tried changing 
> panda-wrapper
> and virus.scanners.conf but all to no avail. I just get 
> "Virus: 0" as the
> response, even though there's a valid eicar.com test file in 
> the directory
> that's being scanned and the equivalent f-prot command works 
> fine.  Running
> pavcl direct from the command line detects the eicar file.
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!