I MUST be missing something....
Chris Trudeau
chris at TRUDEAU.ORG
Thu Mar 31 19:53:01 IST 2005
[ The following text is in the "utf-8" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Yep...
[root at host bin]# ./clamscan /etc/hosts
/etc/hosts: OK
----------- SCAN SUMMARY -----------
Known viruses: 32281
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
I/O buffer size: 131072 bytes
Time: 0.329 sec (0 m 0 s)
I disabled Sophos in the itnerest of eliminating the problem. I also downgraded mailscanner thinking it might be an install issue...same thing running 4.39.5.
In thinking along these lines, I also disabled clamavmodule and all virus scanning altogether. Same response.
I am wondering if there is something goofy going on with my 64-bit OS...seems that it shouldn';t matter, but it seems to. Any help?
CT
-----Original Message-----
From: Vlad Mazek [mailto:vlad at MAZEK.COM]
Sent: Thu 3/31/2005 1:00 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Cc:
Subject: Re: I MUST be missing something....
Are you able to get clamav and sweep to scan the file outside of
MailScanner? Its very unusual to see MailScnner prune the second it
processes the message.
-Vlad
Chris Trudeau wrote:
>These are all rules files, checked to make sure they are in fact in place and syntactically correct. They are and the default in each is set to "store". ( I do this for learning later) (these rules files are actually copied from a production MailScanner running)
>
>Here is debug output from the message processing:
>
>Mar 31 11:23:12 mta04 sendmail[9289]: j2VGMneZ009289: from=chris.trudeau at gmail.com, size=9, class=0, nrcpts=1, msgid=<200503311623.j2VGMneZ009289 at host.domain.com>, proto=SMTP <mailto:200503311623.j2VGMneZ009289 at host.domain.com>, proto=SMTP> , daemon=MTA, relay=localhost.localdomain [127.0.0.1]
>Mar 31 11:23:12 mta04 sendmail[9289]: j2VGMneZ009289: to=chris.trudeau at domain.com, delay=00:00:06, mailer=smtp, pri=30009, stat=queued
>Mar 31 11:23:13 mta04 MailScanner[9287]: New Batch: Scanning 1 messages, 613 bytes
>Mar 31 11:23:13 mta04 MailScanner[9287]: Created attachment dirs for 1 messages
>Mar 31 11:23:13 mta04 MailScanner[9287]: Spam Checks: Starting
>Mar 31 11:23:13 mta04 MailScanner[9287]: Virus and Content Scanning: Starting
>Mar 31 11:23:13 mta04 MailScanner[9287]: Commencing scanning by clamavmodule...
>Mar 31 11:23:13 mta04 MailScanner[9287]: Completed scanning by clamavmodule
>Mar 31 11:23:13 mta04 MailScanner[9287]: Config: calling custom end function ByDomainSpamWhitelist
>Mar 31 11:23:13 mta04 MailScanner[9287]: Closing down by-domain spam whitelist
>Mar 31 11:23:13 mta04 MailScanner[9287]: MailScanner child dying of old age
>
>
>Might be important to note (not sure if it is) but the system is running CentOS 3.4 (64-bit) on Athlon 3300 (64-bit).
>
>CT
>
>
> -----Original Message-----
> From: Julian Field [mailto:MailScanner at ECS.SOTON.AC.UK]
> Sent: Thu 3/31/2005 8:46 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Cc:
> Subject: Re: I MUST be missing something....
>
>
>
> What are your
> Non-Spam Actions
> Spam Actions
> High Scoring Spam Actions
> set to?
>
> Chris Trudeau wrote:
>
> > Just installed 4.39.6. With Sophos/Clamav Have tried starting in
> > debug mode
> >
> > and everything seems fine....messages are received, and it appears
> > that MailScanner launches and starts to scan, but never finishes.
> >
> >
> >
> > No listing of the mqueue, mqueue.in or incoming directories show any
> > files at all, the message just seems to vanish.
> >
> >
> >
> > Below are log entries of what I am seeing, the sendmail MTS receives
> > the message and MailScanner picksup the queue, then nothing. No
> > delivery, no spam report nothing...and yep have logging for SPAM
> > report turned on.
> >
> > Any idea where to look?
> >
> >
> >
> > Mar 31 06:18:09 mta04 sendmail[7172]: j2VBHZ5k007172:
> >
> > from=chris.trudeau at gmail.com, size=15, class=0, nrcpts=1,
> > msgid=<200503311118.j2VBHZ5k007172 at host.domain.com>, proto=SMTP,
> > daemon=MTA, relay=client.domain.net [111.222.333.444]
> >
> > Mar 31 06:18:09 mta04 sendmail[7172]: j2VBHZ5k007172:
> >
> > to=chris.trudeau at domain.com, delay=00:00:09, mailer=smtp, pri=30015,
> > stat=queued
> >
> > Mar 31 06:18:10 mta04 MailScanner[7173]: New Batch: Scanning 1
> > Messages, 658 bytes
> >
> > Mar 31 06:18:10 mta04 MailScanner[7173]: Spam Checks: Starting
> >
> > Mar 31 06:18:10 mta04 MailScanner[7173]: Virus and Content
> >
> > Scanning: Starting
> >
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
> Buy the MailScanner book at www.MailScanner.info/store
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by DefendMail, and is
> believed to be clean.
>
>
>
>
>
>
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content by DefendMail, and is
believed to be clean.
--
This message has been scanned for viruses and
dangerous content by DefendMail, and is
believed to be clean.
More information about the MailScanner
mailing list