weird mailscanner clamd error

[Naz Snidanko]

Glenn,

 

/tmp and incoming directories both have chmod 777. Also from my guess if
it had something to do with permissions it would generate this error for
all files, not just ZIP archives created by Winrar and Winzip programs.
I also completely removed apparmor (even though it originally had rw
permissions for clamd on incoming directory).

 

Is there a module within MailScanner that does .zip file extracting
before it goes for a clamd scan?

Any help is much appreciated.

Thank you,

Naz Snidanko

Desktop & Network Support

Harper Power Products Inc.

(p) 416 201- 7506

nsnidanko at harperpowerproducts.com
<mailto:nsnidanko at harperpowerproducts.com> 

------------------------------

 

Message: 4

Date: Tue, 4 Jan 2011 11:40:03 +0100

From: Glenn Steen <glenn.steen at gmail.com>

Subject: Re: weird mailscanner clamd error

To: MailScanner discussion <mailscanner at lists.mailscanner.info>

Message-ID:

      <AANLkTikQ0EraC0imktQRZ-L-q2sqwqOE+503D-uSTMug at mail.gmail.com>

Content-Type: text/plain; charset=windows-1252

 

On 3 January 2011 21:34, Naz Snidanko
<nsnidanko at harperpowerproducts.com> wrote:

> I have weird stuff happening. When we put any file into ZIP archive
created

> from Winzip or Winrar I get the following log in mail.log:

> 

> 

> 

> Jan  3 15:14:43 ares MailScanner[5103]: Virus and Content Scanning:
Starting

> 

> Jan  3 15:14:43 ares MailScanner[5103]: Clamd::ERROR:: Access denied.
ERROR

> :: ./66522203B7.AD6EB/zRicohdeviceUsersetup.doc

> 

> Jan  3 15:14:43 ares MailScanner[5103]: Virus Scanning: Clamd found 1

> infections

> 

> Jan  3 15:14:43 ares MailScanner[5103]: Virus Scanning: Found 1
viruses

> 

> Jan  3 15:14:43 ares MailScanner[5103]: Spam Checks: Starting

> 

> 

> 

> File delivered after passing mailscanner to final destination.

> 

> 

> 

> When I put the same file into ZIP archive using built-in Windows XP
engine

> it works flawlessly and no error log is generated. No error is
generated

> when same file is put within .rar archive either.

> 

> 

> 

> I've tried different files anything from jpeg to pdf and end up with
error

> described above.

> 

> 

> 

> Can someone point me in the right direct how to troubleshoot this
within

> mailscanner.

> 

> 

> 

> System:

> 

> 

> 

> Clamd 0.96.5

> 

> Ubuntu Server 10.04

> 

> MailScanner 4.82.3

> 

> Perl 5.10.1

> 

> 

Check that both postfix and clamav (or whatever the users/groups are

called) have relevant perms... Run As User/Group and 0660 perms in

MailScanner.conf, correct perms on your incoming directory (perhaps

/var/spool/MailScanner/incoming), Also check your clamd settings, of

course.

Perhaps the most crucial bit though... is to make sure that you have

sane permissions on /tmp, and that they can create files/directories

there as needed.

 

Cheers

-- 

-- Glenn

email: glenn < dot > steen < at > gmail < dot > com

work: glenn < dot > steen < at > ap1 < dot > se

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110104/5c592166/attachment.html