<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16700">
<STYLE>@font-face {
font-family: Georgia;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; }
P.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt
}
LI.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt
}
DIV.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
FONT-FAMILY: Arial; COLOR: windowtext
}
DIV.Section1 {
page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-US link=blue vLink=purple>
<DIV dir=ltr align=left><SPAN class=547494119-04012011><FONT color=#0000ff
size=2 face=Arial>Have you attempted to manually scan an example file with
clamscan or clamdscan? (preferably as the same user as would mailscanner).
Have you tried sending with MailScanner running in debug mode? The error you are
seeing is coming from clamd, </FONT></SPAN></DIV><BR>
<DIV dir=ltr lang=en-us class=OutlookMessageHeader align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>From:</B> mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Naz
Snidanko<BR><B>Sent:</B> Tuesday, January 04, 2011 10:07 AM<BR><B>To:</B>
mailscanner@lists.mailscanner.info<BR><B>Subject:</B> Re: weird mailscanner
clamd error<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=Section1>
<P class=MsoNormal><FONT size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">Glenn,</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt"></SPAN></FONT> </P>
<P class=MsoNormal><FONT size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">/tmp and incoming directories both
have chmod 777. Also from my guess if it had something to do with permissions it
would generate this error for all files, not just ZIP archives created by Winrar
and Winzip programs. I also completely removed apparmor (even though it
originally had rw permissions for clamd on incoming
directory).</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt"></SPAN></FONT> </P>
<P class=MsoNormal><FONT size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">Is there a module within MailScanner
that does .zip file extracting before it goes for a clamd
scan?</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">Any help is much
appreciated.</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">Thank you,</SPAN></FONT></P>
<P class=MsoNormal><B><FONT size=1 face=Georgia><SPAN
style="FONT-FAMILY: Georgia; FONT-SIZE: 8pt; FONT-WEIGHT: bold">Naz
Snidanko</SPAN></FONT></B></P>
<P class=MsoNormal><B><FONT size=1 face=Georgia><SPAN
style="FONT-FAMILY: Georgia; FONT-SIZE: 8pt; FONT-WEIGHT: bold">Desktop &
Network Support</SPAN></FONT></B></P>
<P class=MsoNormal><B><FONT size=1 face=Georgia><SPAN
style="FONT-FAMILY: Georgia; FONT-SIZE: 8pt; FONT-WEIGHT: bold">Harper Power
Products Inc.</SPAN></FONT></B></P>
<P class=MsoNormal><B><FONT size=1 face=Georgia><SPAN
style="FONT-FAMILY: Georgia; FONT-SIZE: 8pt; FONT-WEIGHT: bold">(p) 416 201-
7506</SPAN></FONT></B></P>
<P class=MsoNormal><FONT size=3 face="Times New Roman"><SPAN
style="FONT-SIZE: 12pt"><A href="mailto:nsnidanko@harperpowerproducts.com"><FONT
size=2 face=Arial><SPAN
style="FONT-FAMILY: Arial; FONT-SIZE: 10pt">nsnidanko@harperpowerproducts.com</SPAN></FONT></A></SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">------------------------------</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></FONT> </P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Message: 4</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Date: Tue, 4 Jan 2011
11:40:03 +0100</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">From: Glenn Steen
<glenn.steen@gmail.com></SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Subject: Re: weird
mailscanner clamd error</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">To: MailScanner discussion
<mailscanner@lists.mailscanner.info></SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Message-ID:</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">
<AANLkTikQ0EraC0imktQRZ-L-q2sqwqOE+503D-uSTMug@mail.gmail.com></SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Content-Type: text/plain;
charset=windows-1252</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></FONT> </P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">On 3 January 2011 21:34, Naz
Snidanko <nsnidanko@harperpowerproducts.com> wrote:</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> I have weird stuff
happening. When we put any file into ZIP archive created</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> from Winzip or Winrar I
get the following log in mail.log:</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Jan 3 15:14:43
ares MailScanner[5103]: Virus and Content Scanning: Starting</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Jan 3 15:14:43
ares MailScanner[5103]: Clamd::ERROR:: Access denied. ERROR</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> ::
./66522203B7.AD6EB/zRicohdeviceUsersetup.doc</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Jan 3 15:14:43
ares MailScanner[5103]: Virus Scanning: Clamd found 1</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">>
infections</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Jan 3 15:14:43
ares MailScanner[5103]: Virus Scanning: Found 1 viruses</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Jan 3 15:14:43
ares MailScanner[5103]: Spam Checks: Starting</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> File delivered after
passing mailscanner to final destination.</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> When I put the same
file into ZIP archive using built-in Windows XP engine</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> it works flawlessly and
no error log is generated. No error is generated</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> when same file is put
within .rar archive either.</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> I’ve tried different
files anything from jpeg to pdf and end up with error</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> described
above.</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Can someone point me in
the right direct how to troubleshoot this within</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">>
mailscanner.</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">>
System:</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Clamd
0.96.5</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Ubuntu Server
10.04</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> MailScanner
4.82.3</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> Perl
5.10.1</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">> </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Check that both postfix and
clamav (or whatever the users/groups are</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">called) have relevant
perms... Run As User/Group and 0660 perms in</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">MailScanner.conf, correct
perms on your incoming directory (perhaps</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">/var/spool/MailScanner/incoming),
Also check your clamd settings, of</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">course.</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Perhaps the most crucial bit
though... is to make sure that you have</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">sane permissions on /tmp,
and that they can create files/directories</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">there as
needed.</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt"></SPAN></FONT> </P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">Cheers</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">-- </SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">-- Glenn</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">email: glenn < dot >
steen < at > gmail < dot > com</SPAN></FONT></P>
<P class=MsoNormal><FONT size=2 face="Courier New"><SPAN
style="FONT-FAMILY: 'Courier New'; FONT-SIZE: 10pt">work: glenn < dot >
steen < at > ap1 < dot > se</SPAN></FONT></P>
<P class=MsoNormal><FONT size=3 face="Times New Roman"><SPAN
style="FONT-SIZE: 12pt"></SPAN></FONT> </P></DIV><BR>-- <BR>This message
has been scanned for viruses and <BR>dangerous content by <A
href="http://www.mailscanner.info/"><B>MailScanner</B></A>, and is <BR>believed
to be clean. </BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</HTML>