Clamd::ERROR:: after TNEF expansion.

[SOLTECSIS] Carles Xavier Munyoz Baldó carles at unlimitedmail.org
Wed Oct 19 10:47:10 UTC 2016


Hello,
I have seen in my server logs that sometimes appear "Access denied"
errors from Clamd. These errors allways appears after a TNEF archive
expansion and these errors are always interpreted by MailScanner as if
the escaned files were infected.

Here you may see the logs of an example:
[...]
MailScanner[10778]: Expanding TNEF archive at
/var/spool/MailScanner/incoming/10778/u9J9iHsT003610/winmail.dat

MailScanner[10778]: Clamd::ERROR:: SKMBT_C224e16101910041.pdf/Access
denied. ERROR :: ./u9J9iHsT003610/tnefxxJw9_

MailScanner[10778]: Clamd::ERROR:: image001.png/Access denied. ERROR ::
./u9J9iHsT003610/tnefxxJw9_

MailScanner[10778]: Clamd::ERROR:: image002.png/Access denied. ERROR ::
./u9J9iHsT003610/tnefxxJw9_

MailScanner[10778]: Clamd::ERROR:: image004.png/Access denied. ERROR ::
./u9J9iHsT003610/tnefxxJw9_

MailScanner[10778]: Clamd::ERROR:: image003.png/Access denied. ERROR ::
./u9J9iHsT003610/tnefxxJw9_

MailScanner[10778]: Virus Scanning: Clamd found 4 infections
[...]

Why is happening this?
It doesn't happens with any other e-mail with attachments that are not
TNEF expandable.

It semas a permissions problem.
How can I solve it?

Greetings.
========================================
SOLTECSIS SOLUCIONES TECNOLOGICAS, S.L.
Carles Xavier Munyoz Baldó
Departamento de I+D+I
Tel./Fax: 966 446 046
cmunyoz at soltecsis.com
www.soltecsis.com
========================================

---
La información contenida en este e-mail es confidencial,
siendo para uso exclusivo del destinatario arriba mencionado.
Le informamos que está totalmente prohibida cualquier
utilización, divulgación, distribución y/o reproducción de
esta comunicación sin autorización expresa en virtud de la
legislación vigente. Si ha recibido este mensaje por error,
le rogamos nos lo notifique inmediatamente por la misma vía
y proceda a su eliminación.
---


More information about the MailScanner mailing list