MailScanner 4.84 - attempted to kill MailScanner

[Markus Nilsson]

----- Original Message -----
> From: michel at casa.co.cu
> To: mailscanner at lists.mailscanner.info
> Sent: torsdag, 1 dec 2011 4:43:43
> Subject: MailScanner 4.84 - attempted to kill MailScanner
> 
> Hello
> 
> I Work with CentOS 6 and I installed the latest version of
> MailScanner
> 4.84.3  with postfix as MTA and Clamav antivirus.
> 
> In the MailScanner logs attempts to process a number of messages in
> more than one occasion, and after trying repeatedly, quarantines and
> returns the following message:
> 
> MailScanner: Message attempted to kill MailScanner
> 
> maillog:
> 
> 
> Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Found 2
> messages waiting
> Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Scanning 1
> messages, 1990 bytes
> Nov 30 09:18:20 tornado MailScanner[29950]: Virus and Content
> Scanning: Starting
> Nov 30 09:18:25 tornado MailScanner[29950]: Virus Scanning completed
> at 409 bytes per second
> Nov 30 09:18:25 tornado MailScanner[29950]: Requeue: 0C7BA5005F.AB094
> to 93EC45005D
> Nov 30 09:18:25 tornado postfix/qmgr[1260]: 93EC45005D:
> from=<marujasantos at casa.co.cu>, size=1730, nrcpt=1 (queue active)
> Nov 30 09:18:25 tornado MailScanner[29950]: Uninfected: Delivered 1
> messages
> Nov 30 09:18:25 tornado MailScanner[29950]: Virus Processing
> completed
> at 190354 bytes per second
> Nov 30 09:18:25 tornado MailScanner[29950]: Deleted 1 messages from
> processing-database
> Nov 30 09:18:25 tornado MailScanner[29950]: Batch completed at 399
> bytes per second (1990 / 4)
> Nov 30 09:18:25 tornado MailScanner[29950]: Batch (1 message)
> processed in 4.98 seconds
> Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max
> connection rate 2/60s for (smtp:213.97.145.50) at Nov 30 09:08:44
> Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max
> connection count 2 for (smtp:66.231.83.31) at Nov 30 09:17:13
> Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max cache
> size 5 at Nov 30 09:08:42
> Nov 30 09:18:43 tornado MailScanner[29950]: Making attempt 6 at
> processing message 05A215004E.A0F82
> Nov 30 09:18:43 tornado MailScanner[29950]: New Batch: Scanning 1
> messages, 113309 bytes
> Nov 30 09:18:44 tornado MailScanner[30295]: MailScanner E-Mail Virus
> Scanner version 4.84.3 starting...
> Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration
> file
> /etc/MailScanner/MailScanner.conf
> Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration
> file
> /etc/MailScanner/conf.d/README
> Nov 30 09:18:44 tornado MailScanner[30295]: Connected to Processing
> Attempts Database
> Nov 30 09:18:44 tornado MailScanner[30295]: Found 1 messages in the
> Processing Attempts Database
> Nov 30 09:18:44 tornado MailScanner[30295]: Using locktype = flock
> Nov 30 09:18:44 tornado MailScanner[30295]: Warning: skipping message
> 05A215004E.A0F82 as it has been attempted too many times
> Nov 30 09:18:44 tornado MailScanner[30295]: Quarantined message
> 05A215004E.A0F82 as it caused MailScanner to crash several times
> Nov 30 09:18:44 tornado MailScanner[30295]: Saved entire message to
> /var/spool/MailScanner/quarantine/20111130/05A215004E.A0F82
> 
> 
> Quarantined messages, attachments bring on some occasions doc files
> 
> part of header message.
> 
> Content-Type: multipart/mixed;
>          boundary="----=_NextPart_000_0044_01CCAF32.1F8B9A10"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.2180
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> X-EsetScannerBuild: 9822
> 
> This is a multi-part message in MIME format.
> 
> ------=_NextPart_000_0044_01CCAF32.1F8B9A10
> Content-Type: multipart/alternative;
>          boundary="----=_NextPart_001_0045_01CCAF32.1F8E0B10"
> 
> 
> ------=_NextPart_001_0045_01CCAF32.1F8E0B10
> Content-Type: text/plain;
>          charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
> 
> Could you help me?
> 
> Thanks
> 
> Michel
> 


Does a debug-run give you any more details?

/Markus