MailScanner 4.77.1-2 Child silently dies
MailScanner at ecs.soton.ac.uk
Mon May 11 21:12:02 IST 2009
On 11/05/2009 20:59, Mark Sapiro wrote:
> Julian Field wrote:
>> Please do a MailScanner --debug and tell me what it shows you.
> [root at sbh16 ~]# MailScanner --debug
> In Debugging mode, not forking...
> Trying to setlogsock(unix)
> Building a message batch to scan...
> Have a batch of 1 message.
> max message size is '200k continue 200k'
> Undefined subroutine&MailScanner::Unzip::UnpackZipMembers called at
> /usr/lib/MailScanner/MailScanner/Message.pm line 2461.
> [root at sbh16 ~]# cd /etc/MailScanner/
> [root at sbh16 MailScanner]#
> Note that /usr/lib/MailScanner/MailScanner/Unzip.pm exists and does
> define sub UnpackZipMembers
All fixed. Try MailScanner 4.77.3 which I am just uploading now.
Sorry about that.
This new feature is switched off by default now too.
>> On 11/05/2009 19:20, Mark Sapiro wrote:
>>> I tried upgrading MailScanner 4.76.24-3 to 4.77.1-2. This resulted in
>>> the child process silently dying on every message, even simple
>>> text/plain messages.
>>> The child starts a batch
>>> May 11 09:35:22 sbh16 MailScanner: New Batch: Scanning 1
>>> messages, 2984 bytes
>>> and the next MailScanner log message is a new child starting
>>> May 11 09:35:24 sbh16 MailScanner: MailScanner E-Mail Virus
>>> Scanner version 4.77.1 starting...
>>> Eventually, on restart we see for example
>>> May 11 10:07:42 sbh16 MailScanner: Making attempt 6 at
>>> processing message 1FFC16900C6.A2B03
>>> and on the next restart
>>> May 11 10:07:49 sbh16 MailScanner: Warning: skipping message
>>> 1FFC16900C6.A2B03 as it has been attempted too many times
>>> May 11 10:07:49 sbh16 MailScanner: Quarantined message
>>> 1FFC16900C6.A2B03 as it caused MailScanner to crash several times
>>> May 11 10:07:49 sbh16 MailScanner: Saved entire message to
>>> MTA is Postfix.
Julian Field MEng CITP CEng
Buy the MailScanner book at www.MailScanner.info/store
Follow me at twitter.com/JulesFM
MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner