MailScanner 4.77.1-2 Child silently dies

[Julian Field]

On 11/05/2009 20:59, Mark Sapiro wrote:
> Julian Field wrote:
>
>    
>> Please do a MailScanner --debug and tell me what it shows you.
>>
>>      
>
> [root at sbh16 ~]# MailScanner --debug
> In Debugging mode, not forking...
> Trying to setlogsock(unix)
> Building a message batch to scan...
> Have a batch of 1 message.
> max message size is '200k continue 200k'
> Undefined subroutine&MailScanner::Unzip::UnpackZipMembers called at
> /usr/lib/MailScanner/MailScanner/Message.pm line 2461.
> [root at sbh16 ~]# cd /etc/MailScanner/
> [root at sbh16 MailScanner]#
>
>
> Note that /usr/lib/MailScanner/MailScanner/Unzip.pm exists and does
> define sub UnpackZipMembers
>    
All fixed. Try MailScanner 4.77.3 which I am just uploading now.
Sorry about that.
This new feature is switched off by default now too.

>
>    
>> On 11/05/2009 19:20, Mark Sapiro wrote:
>>      
>>> I tried upgrading MailScanner 4.76.24-3 to 4.77.1-2. This resulted in
>>> the child process silently dying on every message, even simple
>>> text/plain messages.
>>>
>>> The child starts a batch
>>>
>>> May 11 09:35:22 sbh16 MailScanner[20257]: New Batch: Scanning 1
>>> messages, 2984 bytes
>>>
>>> and the next MailScanner log message is a new child starting
>>>
>>> May 11 09:35:24 sbh16 MailScanner[20303]: MailScanner E-Mail Virus
>>> Scanner version 4.77.1 starting...
>>>
>>> Eventually, on restart we see for example
>>>
>>> May 11 10:07:42 sbh16 MailScanner[21289]: Making attempt 6 at
>>> processing message 1FFC16900C6.A2B03
>>>
>>> and on the next restart
>>>
>>> May 11 10:07:49 sbh16 MailScanner[21318]: Warning: skipping message
>>> 1FFC16900C6.A2B03 as it has been attempted too many times
>>> May 11 10:07:49 sbh16 MailScanner[21318]: Quarantined message
>>> 1FFC16900C6.A2B03 as it caused MailScanner to crash several times
>>> May 11 10:07:49 sbh16 MailScanner[21318]: Saved entire message to
>>> /var/spool/MailScanner/quarantine/20090511/1FFC16900C6.A2B03
>>>
>>> MTA is Postfix.
>>>
>>>
>>>        
>> Jules
>>      
>    

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Follow me at twitter.com/JulesFM

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.