it happend again and shame on me for not going through all the MailScanner.conf!<div><br></div><div>i had this configuration:</div><div><br></div><div>Quarantine User = root</div><div>Quarantine Group = apache </div><div><div>
Run As User = postfix</div><div>Run As Group = postfix</div></div><div><br></div><div>changed to:</div><div><br></div><div><div>Quarantine User = postfix</div><div>Quarantine Group = clam</div><div>Run As User = postfix</div>
<div>Run As Group = postfix</div><div><br></div><div>chown -R postfix.clam /var/spool/MailScanner/quarantine/</div><div><br></div><div>K.</div><br><div class="gmail_quote">On 31 October 2011 15:15, Rob Verduijn <span dir="ltr"><<a href="mailto:rob.verduijn@gmail.com">rob.verduijn@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">I already know that it was caused by changed access rights (for me it was root:www-data on quarantine)<br>Something changed it and I still haven't found what.<br>
<font color="#888888"><br>Rob</font><div><div></div><div class="h5"><br><br><div class="gmail_quote">2011/10/31 Kocisky <span dir="ltr"><<a href="mailto:kocisky@autistici.org" target="_blank">kocisky@autistici.org</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Rob,<div><br></div><div>i've fixed the permissions as in my previous email, afterwords i had some other issues. I still need to clear out everything. I'm also using the /etc/init.d/MailScanner from the original source instead of the Centos distribution version, the process was not stopping correctly and it seems a little bit different.</div>
<div><br></div><font color="#888888"><div>k.</div></font><div><div></div><div><div><br><br><div class="gmail_quote">On 31 October 2011 14:41, Rob Verduijn <span dir="ltr"><<a href="mailto:rob.verduijn@gmail.com" target="_blank">rob.verduijn@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Let me know if you find out,<br>I happened to stumble on exactly that problem as well. (on ubuntu lucid though)<br><br>Rob<br><br><div class="gmail_quote">2011/10/31 Kocisky <span dir="ltr"><<a href="mailto:kocisky@autistici.org" target="_blank">kocisky@autistici.org</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div></div><div>ok, which process changed the permissions to /var/spool/MailScanner/quarantine ? mailscanner? baruwa?<div>
<br></div><div>
<div><div>[root@mail init.d]# ls -la /var/spool/MailScanner/</div><div>total 32</div><div>drwxr-xr-x. 5 root root 4096 Oct 22 09:00 .</div>
<div>drwxr-xr-x. 14 root root 4096 Oct 28 11:27 ..</div></div><div>drwxr-xr-x. 12 postfix clam 4096 Oct 31 12:54 incoming</div><div>drwxr-xr-x. 24 root apache 4096 Oct 31 12:48 quarantine</div><div><div>
drwxr-x---. 2 postfix clam 4096 Oct 3 12:21 spamassassin</div>
</div><div>[root@mail init.d]# chown -R postfix.clam /var/spool/MailScanner/quarantine/</div><div><br></div><div>#@^%#$^%$@^*$#%^*5476q%E*!!!???!!!</div><div><div></div><div><br><div class="gmail_quote">On 31 October 2011 13:03, Kocisky <span dir="ltr"><<a href="mailto:kocisky@autistici.org" target="_blank">kocisky@autistici.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>from the strace (below below) it seems that the process cannot create the folder:</div><div><br></div><div><div>
[root@mail init.d]# ls -l /var/spool/MailScanner/quarantine/20111031</div><div>ls: cannot access /var/spool/MailScanner/quarantine/20111031: No such file or directory</div>
</div><div><br></div><div>it should be a simple permission issue because selinux doesnt give any audit.log and "setenforce 0" didn't change the situation.</div><div><br></div><div>permission of MailScanner.conf:</div>
<div><br></div><div><div>Run As User = postfix</div><div>Run As Group = postfix</div></div><div><br></div><div>i'm definitively missing something !!!</div><div><br></div><div>below some permissions where it seems to hang:</div>
<div><br></div><div>[root@mail init.d]# ls -la /var/spool/MailScanner/quarantine/</div><div>total 96</div><div>drwxr-xr-x. 24 root apache 4096 Oct 22 09:00 .</div><div>drwxr-xr-x. 5 root root 4096 Oct 22 09:00 ..</div>
<div>drwx------. 3 postfix apache 4096 Oct 3 13:06 20111003</div><div>drwxrwx---. 7 postfix apache 4096 Oct 4 13:51 20111004</div><div>drwxrwx---. 6 postfix apache 4096 Oct 5 13:19 20111005</div><div>drwxrwx---. 5 postfix apache 4096 Oct 6 20:51 20111006</div>
<div>drwxrwx---. 15 postfix apache 4096 Oct 7 07:56 20111007</div><div>drwxrwx---. 3 postfix apache 4096 Oct 8 00:19 20111008</div><div>drwxrwx---. 3 postfix apache 4096 Oct 9 00:05 20111009</div><div>drwxrwx---. 3 postfix apache 4096 Oct 10 00:16 20111010</div>
<div>drwxrwx---. 20 postfix apache 4096 Oct 12 22:32 20111012</div><div>drwxrwx---. 37 postfix postfix 4096 Oct 13 16:29 20111013</div><div>drwxrwx---. 15 postfix celeryd 4096 Oct 14 13:30 20111014</div><div>drwxrwx---. 6 postfix celeryd 4096 Oct 17 22:17 20111017</div>
<div>drwxrwx---. 20 postfix celeryd 4096 Oct 18 20:42 20111018</div><div>drwxrwx---. 3 postfix celeryd 4096 Oct 19 04:38 20111019</div><div>drwxrwx---. 54 postfix celeryd 4096 Oct 20 21:31 20111020</div><div>drwxrwx---. 11 postfix celeryd 4096 Oct 21 10:08 20111021</div>
<div>drwxrwx---. 5 postfix celeryd 4096 Oct 24 15:48 20111024</div><div>drwxrwx---. 142 postfix postfix 4096 Oct 25 23:32 20111025</div><div>drwxrwx---. 118 postfix postfix 4096 Oct 26 18:12 20111026</div><div>drwxrwx---. 15 postfix apache 4096 Oct 27 21:14 20111027</div>
<div>drwxrwx---. 5 postfix apache 4096 Oct 28 06:27 20111028</div><div>drwxr-x---. 3 postfix apache 4096 Oct 31 12:08 phishingupdate</div><div>[root@mail init.d]# ls -la /var/spool/MailScanner/quarantine/20111031</div>
<div>ls: cannot access /var/spool/MailScanner/quarantine/20111031: No such file or directory</div><div>[root@mail init.d]# ls -la /var/spool/MailScanner/</div><div>total 32</div><div>drwxr-xr-x. 5 root root 4096 Oct 22 09:00 .</div>
<div>drwxr-xr-x. 14 root root 4096 Oct 28 11:27 ..</div><div>drwxr-xr-x. 9 postfix clam 4096 Oct 31 12:41 incoming</div><div>drwxr-xr-x. 24 root apache 4096 Oct 22 09:00 quarantine</div><div>drwxr-x---. 2 postfix clam 4096 Oct 3 12:21 spamassassin</div>
</div><div><br></div><div><br></div>below the strace output:<div><br></div><div><br></div><div><div>unlink("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal") = 0</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div>
<div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1073741824, len=2}) = 0</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0</div><div>gettimeofday({1320079287, 180287}, NULL) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>gettimeofday({1320079287, 180496}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<22>Oct 31 12:41:27 MailScanner["..., 94) = 94</div>
<div>gettimeofday({1320079287, 181930}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>gettimeofday({1320079287, 182134}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<22>Oct 31 12:41:27 MailScanner["..., 432) = 432</div>
<div>gettimeofday({1320079287, 183021}, NULL) = 0</div><div>gettimeofday({1320079287, 183150}, NULL) = 0</div><div>lseek(26, 0, SEEK_SET) = 0</div><div>lseek(26, 0, SEEK_CUR) = 0</div><div>
read(26, "CO 7091 69"..., 4096) = 4096</div><div>lseek(26, 81, SEEK_SET) = 81</div><div>lseek(26, 0, SEEK_CUR) = 81</div><div>lseek(26, 691, SEEK_SET) = 691</div>
<div>lseek(26, 0, SEEK_CUR) = 691</div><div>read(26, "NJReceived: from mysubdomain.trac"..., 4096) = 4096</div><div>lseek(26, 2049, SEEK_SET) = 2049</div><div>lseek(26, 0, SEEK_CUR) = 2049</div>
<div>lseek(26, 2049, SEEK_SET) = 2049</div><div>lseek(26, 0, SEEK_CUR) = 2049</div><div>read(26, "N\0N,This is a multi-part message"..., 4096) = 4096</div><div>read(26, "realize friend letter be able.N "..., 4096) = 1641</div>
<div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div>
<div>access("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal", F_OK) = -1 ENOENT (No such file or directory)</div><div>fstat(6, {st_mode=S_IFREG|0750, st_size=4264960, ...}) = 0</div><div>lseek(6, 24, SEEK_SET) = 24</div>
<div>read(6, "\0\2F\230\0\0\0\0\0\0\16\310\0\0\17\356", 16) = 16</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div>
<div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div><div>access("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal", F_OK) = -1 ENOENT (No such file or directory)</div>
<div>fstat(6, {st_mode=S_IFREG|0750, st_size=4264960, ...}) = 0</div><div>lseek(6, 24, SEEK_SET) = 24</div><div>read(6, "\0\2F\230\0\0\0\0\0\0\16\310\0\0\17\356", 16) = 16</div><div>fcntl(6, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=1073741825, len=1}) = 0</div>
<div>open("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal", O_RDWR|O_CREAT, 0644) = 38</div><div>open("/var/spool/MailScanner/incoming", O_RDONLY) = 39</div><div>fcntl(39, F_GETFD) = 0</div>
<div>fcntl(39, F_SETFD, FD_CLOEXEC) = 0</div><div>fcntl(38, F_GETFD) = 0</div><div>fcntl(38, F_SETFD, FD_CLOEXEC) = 0</div><div>lseek(38, 0, SEEK_SET) = 0</div><div>
write(38, "\0\0\0\0\0\0\0\0\0\0\0\0\7\20\240\225\0\0\20E\0\0\2\0\0\0\4\0\0\0\0\0"..., 512) = 512</div><div>gettimeofday({1320079287, 191900}, NULL) = 0</div><div>lseek(38, 512, SEEK_SET) = 512</div>
<div>write(38, "\0\0\0\4", 4) = 4</div><div>lseek(38, 516, SEEK_SET) = 516</div><div>write(38, "\n\2\362\0A\0\302\0\0\302\0\314\0\326\0\340\0\352\0\364\0\376\1\10\1\22\1\34\1&\0010"..., 1024) = 1024</div>
<div>lseek(38, 1540, SEEK_SET) = 1540</div><div>write(38, "\7\20\240\261", 4) = 4</div><div>lseek(38, 1544, SEEK_SET) = 1544</div><div>write(38, "\0\0\v\33", 4) = 4</div>
<div>lseek(38, 1548, SEEK_SET) = 1548</div><div>write(38, "\r\0\0\0\2\0E\0\3\221\0E23.AFFF7\0 Wed Oct "..., 1024) = 1024</div><div>lseek(38, 2572, SEEK_SET) = 2572</div><div>write(38, "\7\20\242\352", 4) = 4</div>
<div>lseek(38, 2576, SEEK_SET) = 2576</div><div>write(38, "\0\0\0\1", 4) = 4</div><div>lseek(38, 2580, SEEK_SET) = 2580</div><div>write(38, "SQLite format 3\0\4\0\1\1\0@ \0\2F\230\0\0\0\0"..., 1024) = 1024</div>
<div>lseek(38, 3604, SEEK_SET) = 3604</div><div>write(38, "\7\20\241\25", 4) = 4</div><div>lseek(38, 4096, SEEK_SET) = 4096</div><div>read(38, "", 8) = 0</div>
<div>fdatasync(38) = 0</div><div>close(39) = 0</div><div>lseek(38, 0, SEEK_SET) = 0</div><div>write(38, "\331\325\5\371 \241c\327\0\0\0\3", 12) = 12</div>
<div>fdatasync(38) = 0</div><div>fcntl(6, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div><div>fcntl(6, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div>
<div>lseek(6, 0, SEEK_SET) = 0</div><div>write(6, "SQLite format 3\0\4\0\1\1\0@ \0\2F\231\0\0\0\0"..., 1024) = 1024</div><div>lseek(6, 3072, SEEK_SET) = 3072</div><div>write(6, "\n\2\350\0A\0\302\0\0\302\0\314\0\326\0\340\0\352\0\364\0\376\1\10\1\22\1\34\1&\0010"..., 1024) = 1024</div>
<div>lseek(6, 2910208, SEEK_SET) = 2910208</div><div>write(6, "\r\0\0\0\2\0E\0\3\221\0E23.AFFF7\0 Wed Oct "..., 1024) = 1024</div><div>fdatasync(6) = 0</div><div>close(38) = 0</div>
<div>unlink("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal") = 0</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1073741824, len=2}) = 0</div>
<div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0</div><div>gettimeofday({1320079287, 246889}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>gettimeofday({1320079287, 247091}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<22>Oct 31 12:41:27 MailScanner["..., 94) = 94</div><div>gettimeofday({1320079287, 248624}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>gettimeofday({1320079287, 248827}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<22>Oct 31 12:41:27 MailScanner["..., 343) = 343</div><div>gettimeofday({1320079287, 249686}, NULL) = 0</div><div>gettimeofday({1320079287, 249820}, NULL) = 0</div>
<div>lseek(12, 0, SEEK_SET) = 0</div><div>lseek(12, 0, SEEK_CUR) = 0</div><div>read(12, "CO 42635 68"..., 4096) = 4096</div><div>lseek(12, 81, SEEK_SET) = 81</div>
<div>lseek(12, 0, SEEK_CUR) = 81</div><div>lseek(12, 689, SEEK_SET) = 689</div><div>lseek(12, 0, SEEK_CUR) = 689</div><div>read(12, "NJReceived: from mysubdomain.trac"..., 4096) = 4096</div>
<div>lseek(12, 3328, SEEK_SET) = 3328</div><div>lseek(12, 0, SEEK_CUR) = 3328</div><div>lseek(12, 3328, SEEK_SET) = 3328</div><div>lseek(12, 0, SEEK_CUR) = 3328</div>
<div>read(12, "N\6<html>N\6<head>N\24<title>Sears</"..., 4096) = 4096</div><div>read(12, "amai=2Enet/f/248/47562/14d/ig=2E"..., 4096) = 4096</div><div>read(12, "b9VSRRYSUWV1b9X8w9GVbwzfTRSSSRUR"..., 4096) = 4096</div>
<div>read(12, "NLYSUWzf1vSvWf2aRRVXLX=22 rilt=3"..., 4096) = 4096</div><div>read(12, "klhuLjXpKVSYSARUSRVhilXlPiLXJhKL"..., 4096) = 4096</div><div>read(12, "trong>Even more offers from Sear"..., 4096) = 4096</div>
<div>read(12, "2011_Oc=NLtober_Week4/20111030_S"..., 4096) = 4096</div><div>read(12, "e</a></td>NE <td width="..., 4096) = 4096</div><div>read(12, "sys4=2Enet/servlet/cc6?kLHjkQDRY"..., 4096) = 4096</div>
<div>read(12, " <td valign=3D=22"..., 4096) = 3136</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div>
<div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div><div>access("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal", F_OK) = -1 ENOENT (No such file or directory)</div>
<div>fstat(6, {st_mode=S_IFREG|0750, st_size=4264960, ...}) = 0</div><div>lseek(6, 24, SEEK_SET) = 24</div><div>read(6, "\0\2F\231\0\0\0\0\0\0\16\310\0\0\17\356", 16) = 16</div><div>lseek(6, 3857408, SEEK_SET) = 3857408</div>
<div>read(6, "\0\0\0\0.l\326\373_\266_\327G\311\7Pm+E\311\317\367\275\344\233\340\371\250\27\33i\v"..., 1024) = 1024</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div>
<div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div><div>access("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal", F_OK) = -1 ENOENT (No such file or directory)</div>
<div>fstat(6, {st_mode=S_IFREG|0750, st_size=4264960, ...}) = 0</div><div>lseek(6, 24, SEEK_SET) = 24</div><div>read(6, "\0\2F\231\0\0\0\0\0\0\16\310\0\0\17\356", 16) = 16</div><div>fcntl(6, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=1073741825, len=1}) = 0</div>
<div>open("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal", O_RDWR|O_CREAT, 0644) = 38</div><div>open("/var/spool/MailScanner/incoming", O_RDONLY) = 39</div><div>fcntl(39, F_GETFD) = 0</div>
<div>fcntl(39, F_SETFD, FD_CLOEXEC) = 0</div><div>fcntl(38, F_GETFD) = 0</div><div>fcntl(38, F_SETFD, FD_CLOEXEC) = 0</div><div>lseek(38, 0, SEEK_SET) = 0</div><div>
write(38, "\0\0\0\0\0\0\0\0\0\0\0\0\274\244\2267\0\0\20E\0\0\2\0\0\0\4\0\0\0\0\0"..., 512) = 512</div><div>gettimeofday({1320079287, 269307}, NULL) = 0</div><div>lseek(38, 512, SEEK_SET) = 512</div>
<div>write(38, "\0\0\0\4", 4) = 4</div><div>lseek(38, 516, SEEK_SET) = 516</div><div>write(38, "\n\2\350\0A\0\302\0\0\302\0\314\0\326\0\340\0\352\0\364\0\376\1\10\1\22\1\34\1&\0010"..., 1024) = 1024</div>
<div>lseek(38, 1540, SEEK_SET) = 1540</div><div>write(38, "\274\244\226S", 4) = 4</div><div>lseek(38, 1544, SEEK_SET) = 1544</div><div>write(38, "\0\0\0\1", 4) = 4</div>
<div>lseek(38, 1548, SEEK_SET) = 1548</div><div>write(38, "SQLite format 3\0\4\0\1\1\0@ \0\2F\231\0\0\0\0"..., 1024) = 1024</div><div>lseek(38, 2572, SEEK_SET) = 2572</div><div>write(38, "\274\244\226\267", 4) = 4</div>
<div>lseek(38, 2576, SEEK_SET) = 2576</div><div>write(38, "\0\0\16\310", 4) = 4</div><div>lseek(38, 2580, SEEK_SET) = 2580</div><div>write(38, "\0\0\16N\0\0\0]\0\0\16>\0\0\7\317\0\0\16a\0\0\6\366\0\0\6\335\0\0\16\262"..., 1024) = 1024</div>
<div>lseek(38, 3604, SEEK_SET) = 3604</div><div>write(38, "\274\244\226\244", 4) = 4</div><div>lseek(38, 3608, SEEK_SET) = 3608</div><div>write(38, "\0\0\16>", 4) = 4</div>
<div>lseek(38, 3612, SEEK_SET) = 3612</div><div>write(38, "\0\0\0\0\233\306\0\367\310\355z\367\344\332f\v;;\f\315\223\215\20\5\217\326\266\320\214c\263z"..., 1024) = 1024</div><div>lseek(38, 4636, SEEK_SET) = 4636</div>
<div>write(38, "\274\244\227F", 4) = 4</div><div>lseek(38, 4640, SEEK_SET) = 4640</div><div>write(38, "\0\0\t\334", 4) = 4</div><div>lseek(38, 4644, SEEK_SET) = 4644</div>
<div>write(38, "\r\0\0\0\2\0\210\0\3\221\0\210d\303\265\3322(yy=J\276C\313`\217W\33Ik\220"..., 1024) = 1024</div><div>lseek(38, 5668, SEEK_SET) = 5668</div><div>write(38, "\274\244\230\350", 4) = 4</div>
<div>lseek(38, 6144, SEEK_SET) = 6144</div><div>read(38, "", 8) = 0</div><div>fdatasync(38) = 0</div><div>close(39) = 0</div>
<div>lseek(38, 0, SEEK_SET) = 0</div><div>write(38, "\331\325\5\371 \241c\327\0\0\0\5", 12) = 12</div><div>fdatasync(38) = 0</div><div>fcntl(6, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=1073741824, len=1}) = 0</div>
<div>fcntl(6, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div><div>lseek(6, 0, SEEK_SET) = 0</div><div>write(6, "SQLite format 3\0\4\0\1\1\0@ \0\2F\232\0\0\0\0"..., 1024) = 1024</div>
<div>lseek(6, 3072, SEEK_SET) = 3072</div><div>write(6, "\n\2\336\0A\0\302\0\0\302\0\314\0\326\0\340\0\352\0\364\0\376\1\10\1\22\1\34\1&\0010"..., 1024) = 1024</div><div>lseek(6, 2583552, SEEK_SET) = 2583552</div>
<div>write(6, "\r\0\0\0\2\0\210\0\3\221\0\210d\303\265\3322(yy=J\276C\313`\217W\33Ik\220"..., 1024) = 1024</div><div>lseek(6, 3732480, SEEK_SET) = 3732480</div><div>write(6, "\0\0\0\0.l\326\373_\266_\327G\311\7Pm+E\311\317\367\275\344\233\340\371\250\27\33i\v"..., 1024) = 1024</div>
<div>lseek(6, 3873792, SEEK_SET) = 3873792</div><div>write(6, "\0\0\16N\0\0\0]\0\0\n\n\0\0\7\317\0\0\16a\0\0\6\366\0\0\6\335\0\0\16\262"..., 1024) = 1024</div><div>fdatasync(6) = 0</div>
<div>close(38) = 0</div><div>unlink("/var/spool/MailScanner/incoming/SpamAssassin.cache.db-journal") = 0</div><div>fcntl(6, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=1073741826, len=510}) = 0</div>
<div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1073741824, len=2}) = 0</div><div>fcntl(6, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0</div><div>gettimeofday({1320079287, 337396}, NULL) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>gettimeofday({1320079287, 337599}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<22>Oct 31 12:41:27 MailScanner["..., 94) = 94</div>
<div>gettimeofday({1320079287, 339319}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>gettimeofday({1320079287, 339522}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<21>Oct 31 12:41:27 MailScanner["..., 77) = 77</div>
<div>gettimeofday({1320079287, 340458}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>gettimeofday({1320079287, 340662}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<21>Oct 31 12:41:27 MailScanner["..., 99) = 99</div>
<div>umask(07) = 077</div><div>stat("/var/spool/MailScanner/quarantine", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0</div><div>stat("/var/spool/MailScanner/quarantine/20111031", 0x129c130) = -1 ENOENT (No such file or directory)</div>
<div>mkdir("/var/spool/MailScanner/quarantine/20111031", 0777) = -1 EACCES (Permission denied)</div><div>chown("/var/spool/MailScanner/quarantine/20111031", 89, 48) = -1 ENOENT (No such file or directory)</div>
<div>stat("/var/spool/MailScanner/quarantine/20111031/spam", 0x129c130) = -1 ENOENT (No such file or directory)</div><div>mkdir("/var/spool/MailScanner/quarantine/20111031/spam", 0777) = -1 ENOENT (No such file or directory)</div>
<div>chown("/var/spool/MailScanner/quarantine/20111031/spam", 89, 48) = -1 ENOENT (No such file or directory)</div><div>umask(0117) = 07</div><div>open("/var/spool/MailScanner/quarantine/20111031/spam/BBA2A2024A1.AB0F1", O_WRONLY|O_CREAT|O_TRUNC, 0666) = -1 ENOENT (No such file or directory)</div>
<div>gettimeofday({1320079287, 342597}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>gettimeofday({1320079287, 342797}, NULL) = 0</div><div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div>
<div>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0</div><div>select(8, [7], NULL, [7], {0, 0}) = 0 (Timeout)</div><div>write(7, "<20>Oct 31 12:41:27 MailScanner["..., 145) = 145</div>
<div>lseek(32, 7335, SEEK_SET) = 7335</div><div>lseek(32, 0, SEEK_CUR) = 7335</div><div>lseek(32, 0, SEEK_SET) = 0</div><div>lseek(32, 0, SEEK_CUR) = 0</div>
<div>read(32, "CO 6642 69"..., 4096) = 4096</div><div>lseek(32, 81, SEEK_SET) = 81</div><div>lseek(32, 0, SEEK_CUR) = 81</div><div>lseek(32, 691, SEEK_SET) = 691</div>
<div>lseek(32, 0, SEEK_CUR) = 691</div><div>read(32, "NJReceived: from mysubdomain.trac"..., 4096) = 4096</div><div>write(2, "Can't call method \"print\" on an "..., 111Can't call method "print" on an undefined value at /usr/share/MailScanner/MailScanner/PFDiskStore.pm line 755.</div>
<div>) = 111</div><div>lseek(8, 3860, SEEK_SET) = 3860</div><div>lseek(8, 0, SEEK_CUR) = 3860</div><div>lseek(9, 8388, SEEK_SET) = 8388</div><div>lseek(9, 0, SEEK_CUR) = 8388</div>
<div>lseek(10, 21849, SEEK_SET) = 21849</div><div>lseek(10, 0, SEEK_CUR) = 21849</div><div>lseek(11, 5590, SEEK_SET) = 5590</div><div>lseek(11, 0, SEEK_CUR) = 5590</div>
<div>lseek(12, 43326, SEEK_SET) = 43326</div><div>lseek(12, 0, SEEK_CUR) = 43326</div><div>lseek(13, 10434, SEEK_SET) = 10434</div><div>lseek(13, 0, SEEK_CUR) = 10434</div>
<div>lseek(14, 10074, SEEK_SET) = 10074</div><div>lseek(14, 0, SEEK_CUR) = 10074</div><div>lseek(15, 21625, SEEK_SET) = 21625</div><div>lseek(15, 0, SEEK_CUR) = 21625</div>
<div>lseek(16, 9794, SEEK_SET) = 9794</div><div>lseek(16, 0, SEEK_CUR) = 9794</div><div>lseek(17, 13493, SEEK_SET) = 13493</div><div>lseek(17, 0, SEEK_CUR) = 13493</div>
<div>lseek(18, 905, SEEK_SET) = 905</div><div>lseek(18, 0, SEEK_CUR) = 905</div><div>lseek(19, 3604, SEEK_SET) = 3604</div><div>lseek(19, 0, SEEK_CUR) = 3604</div>
<div>lseek(20, 15318, SEEK_SET) = 15318</div><div>lseek(20, 0, SEEK_CUR) = 15318</div><div>lseek(21, 27935, SEEK_SET) = 27935</div><div>lseek(21, 0, SEEK_CUR) = 27935</div>
<div>lseek(22, 5884, SEEK_SET) = 5884</div><div>lseek(22, 0, SEEK_CUR) = 5884</div><div>lseek(23, 6165, SEEK_SET) = 6165</div><div>lseek(23, 0, SEEK_CUR) = 6165</div>
<div>lseek(24, 54958, SEEK_SET) = 54958</div><div>lseek(24, 0, SEEK_CUR) = 54958</div><div>lseek(25, 7347, SEEK_SET) = 7347</div><div>lseek(25, 0, SEEK_CUR) = 7347</div>
<div>lseek(26, 7784, SEEK_SET) = 7784</div><div>lseek(26, 0, SEEK_CUR) = 7784</div><div>lseek(27, 11887, SEEK_SET) = 11887</div><div>lseek(27, 0, SEEK_CUR) = 11887</div>
<div>lseek(28, 10515, SEEK_SET) = 10515</div><div>lseek(28, 0, SEEK_CUR) = 10515</div><div>lseek(29, 3475, SEEK_SET) = 3475</div><div>lseek(29, 0, SEEK_CUR) = 3475</div>
<div>lseek(31, 6376, SEEK_SET) = 6376</div><div>lseek(31, 0, SEEK_CUR) = 6376</div><div>lseek(32, 767, SEEK_SET) = 767</div><div>lseek(32, 0, SEEK_CUR) = 767</div>
<div>lseek(33, 18203, SEEK_SET) = 18203</div><div>lseek(33, 0, SEEK_CUR) = 18203</div><div>lseek(34, 12058, SEEK_SET) = 12058</div><div>lseek(34, 0, SEEK_CUR) = 12058</div>
<div>lseek(35, 3818, SEEK_SET) = 3818</div><div>lseek(35, 0, SEEK_CUR) = 3818</div><div>lseek(36, 6967, SEEK_SET) = 6967</div><div>lseek(36, 0, SEEK_CUR) = 6967</div>
<div>lseek(37, 8868, SEEK_SET) = 8868</div><div>lseek(37, 0, SEEK_CUR) = 8868</div><div>close(37) = 0</div><div>close(35) = 0</div>
<div>close(36) = 0</div><div>close(34) = 0</div><div>close(32) = 0</div><div>close(33) = 0</div><div>
close(31) = 0</div><div>close(29) = 0</div><div>close(30) = 0</div><div>close(28) = 0</div><div>close(27) = 0</div>
<div>close(25) = 0</div><div>close(26) = 0</div><div>close(24) = 0</div><div>close(22) = 0</div><div>
close(23) = 0</div><div>close(21) = 0</div><div>close(19) = 0</div><div>close(20) = 0</div><div>close(18) = 0</div>
<div>close(16) = 0</div><div>close(17) = 0</div><div>close(15) = 0</div><div>close(14) = 0</div><div>
close(13) = 0</div><div>close(12) = 0</div><div>close(10) = 0</div><div>close(11) = 0</div><div>close(9) = 0</div>
<div>close(8) = 0</div><div>stat("/usr/lib64/perl5/auto/DBI/DESTROY.al", 0x129c130) = -1 ENOENT (No such file or directory)</div><div>stat("/usr/sbin/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div>
<div>stat("/usr/sbin/MailScanner/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOTDIR (Not a directory)</div><div>stat("/usr/share/MailScanner/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div>
<div>stat("/usr/local/lib64/perl5/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div><div>stat("/usr/local/share/perl5/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div>
<div>stat("/usr/lib64/perl5/vendor_perl/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div><div>stat("/usr/share/perl5/vendor_perl/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div>
<div>stat("/usr/lib64/perl5/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div><div>stat("/usr/share/perl5/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div>
<div>stat("/usr/share/MailScanner/auto/DBI/DESTROY.al", 0x7ffffabb86f0) = -1 ENOENT (No such file or directory)</div><div>close(4) = 0</div><div>close(5) = 0</div>
<div>close(7) = 0</div><div>exit_group(255) </div><div><div></div><div><br><div class="gmail_quote">On 31 October 2011 12:37, Kocisky <span dir="ltr"><<a href="mailto:kocisky@autistici.org" target="_blank">kocisky@autistici.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi all,<div><br></div><div>i've just installed Centos 6 and my system is up to date. I've tried to google a bit but didn't find any solutions:</div>
<div><br></div><div>LOGS:</div><div><br></div><div>################################################</div>
<div><br></div><div>mailq with more than 2000 emails and messages are not delivered;</div><div><br></div><div>################################################</div><div><br></div><div>[root@mail init.d]# ps aux | grep MailScanner</div>
<div><div>postfix 4074 0.0 2.2 302708 89248 ? S Oct28 0:05 MailScanner: compressing attachments</div><div>postfix 4081 0.0 2.2 302708 89148 ? S Oct28 0:05 MailScanner: compressing attachments</div>
<div>postfix 4086 0.0 2.2 302840 89284 ? S Oct28 0:04 MailScanner: compressing attachments</div><div>root 8844 0.0 0.0 103156 812 pts/2 S+ 11:31 0:00 grep MailScanner</div></div><div><br></div>
<div>################################################</div><div><br></div><div>/var/log/maillog :</div><div><br></div><div>Oct 31 11:50:27 mail MailScanner[9227]: writing to /var/spool/MailScanner/quarantine/20111031/spam/BBA2A2024A1.AB0F1: No such file or directory</div>
<div><br></div><div>################################################</div><div><br></div><div><div>[root@mail init.d]# MailScanner --debug</div><div><br></div><div>Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044</div>
<div><br></div><div>In Debugging mode, not forking...</div><div>Trying to setlogsock(unix)</div><div>Building a message batch to scan...</div><div>Have a batch of 30 messages.</div><div>Can't call method "print" on an undefined value at /usr/share/MailScanner/MailScanner/PFDiskStore.pm line 755.</div>
</div><div><br></div><div>################################################</div><div><br></div><div>VERSIONS:</div><div><br></div><div><div>MailScanner --lint</div><div>Trying to setlogsock(unix)</div><div><br></div><div>
Reading configuration file /etc/MailScanner/MailScanner.conf</div><div>Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044</div>
<div>Read 869 hostnames from the phishing whitelist</div><div>Read 4051 hostnames from the phishing blacklists</div><div>Config: calling custom init function SQLBlacklist</div><div>Starting up SQL Blacklist</div><div>Read 0 blacklist entries</div>
<div>Config: calling custom init function MailWatchLogging</div><div>Started SQL Logging child</div><div>Config: calling custom init function SQLWhitelist</div><div>Starting up SQL Whitelist</div><div>Read 0 whitelist entries</div>
<div><br></div><div>Checking version numbers...</div><div>Version number in MailScanner.conf (4.84.3) is correct.</div><div><br></div><div>Unrar is not installed, it should be in /usr/bin/unrar.</div><div>This is required for RAR archives to be read to check</div>
<div>filenames and filetypes. Virus scanning is not affected.</div><div><br></div><div><br></div><div>Your envelope_sender_header in spam.assassin.prefs.conf is correct.</div><div>MailScanner setting GID to (89)</div><div>
MailScanner setting UID to (89)</div><div><br></div><div>Checking for SpamAssassin errors (if you use it)...</div><div>Using SpamAssassin results cache</div><div>Connected to SpamAssassin cache database</div><div>SpamAssassin reported no errors.</div>
<div>Connected to Processing Attempts Database</div><div>Created Processing Attempts Database successfully</div><div>There are 248 messages in the Processing Attempts Database</div><div><a href="http://lock.pl" target="_blank">lock.pl</a> sees Config LockType = posix</div>
<div><a href="http://lock.pl" target="_blank">lock.pl</a> sees have_module = 0</div><div>Using locktype = posix</div><div>MailScanner.conf says "Virus Scanners = clamd"</div><div>Debug Mode Is On</div><div>Use Threads : NO</div>
<div>Socket : /var/run/clamav/clamd.sock</div><div>IP : Using Sockets</div><div>Lock File : NOT USED</div><div>Time Out : 300</div><div>Scan Dir : /var/spool/MailScanner/incoming/9341/ISITINSTALLED</div><div>
Clamd : Sending PING</div>
<div>Clamd : GOT 'PONG'</div><div>ClamD is running</div><div><br></div><div>Found these virus scanners installed: clamd</div><div>===========================================================================</div><div>
Created attachment dirs for 1 messages</div><div>Filename Checks: Windows/DOS Executable (1 <a href="http://eicar.com" target="_blank">eicar.com</a>)</div><div>Completed checking by /usr/bin/file</div><div>Other Checks: Found 1 problems</div>
</div><div><br></div><div>###################################</div><div><br></div><div>is the above "Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044" an issue? am i really missing something?</div>
<div><br></div><div>###################################</div><div><br></div><div><div>MailScanner -v</div><div>Running on</div><div>Linux <a href="http://mail.ny03.mydomain.org" target="_blank">mail.ny03.mydomain.org</a> 2.6.32-71.29.1.el6.centos.plus.x86_64 #1 SMP Sun Jun 26 16:27:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux</div>
<div>This is CentOS Linux release 6.0 (Final)</div><div>This is Perl version 5.010001 (5.10.1)</div><div><br></div><div>This is MailScanner version 4.84.3</div><div>Module versions are:</div><div>1.00<span style="white-space:pre-wrap"> </span>AnyDBM_File</div>
<div>1.30<span style="white-space:pre-wrap"> </span>Archive::Zip</div><div>0.23<span style="white-space:pre-wrap"> </span>bignum</div><div>1.11<span style="white-space:pre-wrap"> </span>Carp</div>
<div>2.02<span style="white-space:pre-wrap"> </span>Compress::Zlib</div><div>1.119 <span style="white-space:pre-wrap"> </span>Convert::BinHex</div><div>0.17<span style="white-space:pre-wrap"> </span>Convert::TNEF</div>
<div>2.124<span style="white-space:pre-wrap"> </span>Data::Dumper</div><div>2.27<span style="white-space:pre-wrap"> </span>Date::Parse</div><div>1.03<span style="white-space:pre-wrap"> </span>DirHandle</div>
<div>1.06<span style="white-space:pre-wrap"> </span>Fcntl</div><div>2.77<span style="white-space:pre-wrap"> </span>File::Basename</div><div>2.14<span style="white-space:pre-wrap"> </span>File::Copy</div>
<div>2.02<span style="white-space:pre-wrap"> </span>FileHandle</div><div>2.08<span style="white-space:pre-wrap"> </span>File::Path</div><div>0.22<span style="white-space:pre-wrap"> </span>File::Temp</div>
<div>0.92<span style="white-space:pre-wrap"> </span>Filesys::Df</div><div>3.64<span style="white-space:pre-wrap"> </span>HTML::Entities</div><div>3.64<span style="white-space:pre-wrap"> </span>HTML::Parser</div>
<div>3.57<span style="white-space:pre-wrap"> </span>HTML::TokeParser</div><div>1.25<span style="white-space:pre-wrap"> </span>IO</div><div>1.14<span style="white-space:pre-wrap"> </span>IO::File</div>
<div>1.13<span style="white-space:pre-wrap"> </span>IO::Pipe</div><div>2.04<span style="white-space:pre-wrap"> </span>Mail::Header</div><div>1.89<span style="white-space:pre-wrap"> </span>Math::BigInt</div>
<div>0.22<span style="white-space:pre-wrap"> </span>Math::BigRat</div><div>3.08<span style="white-space:pre-wrap"> </span>MIME::Base64</div><div>5.427<span style="white-space:pre-wrap"> </span>MIME::Decoder</div>
<div>5.427<span style="white-space:pre-wrap"> </span>MIME::Decoder::UU</div><div>5.427<span style="white-space:pre-wrap"> </span>MIME::Head</div><div>5.427<span style="white-space:pre-wrap"> </span>MIME::Parser</div>
<div>3.08<span style="white-space:pre-wrap"> </span>MIME::QuotedPrint</div><div>5.427<span style="white-space:pre-wrap"> </span>MIME::Tools</div><div>0.14<span style="white-space:pre-wrap"> </span>Net::CIDR</div>
<div>1.25<span style="white-space:pre-wrap"> </span>Net::IP</div><div>0.19<span style="white-space:pre-wrap"> </span>OLE::Storage_Lite</div><div>1.04<span style="white-space:pre-wrap"> </span>Pod::Escapes</div>
<div>3.13<span style="white-space:pre-wrap"> </span>Pod::Simple</div><div>1.17<span style="white-space:pre-wrap"> </span>POSIX</div><div>1.21<span style="white-space:pre-wrap"> </span>Scalar::Util</div>
<div>1.82<span style="white-space:pre-wrap"> </span>Socket</div><div>2.20<span style="white-space:pre-wrap"> </span>Storable</div><div>1.4<span style="white-space:pre-wrap"> </span>Sys::Hostname::Long</div>
<div>0.27<span style="white-space:pre-wrap"> </span>Sys::Syslog</div><div>1.40<span style="white-space:pre-wrap"> </span>Test::Pod</div><div>0.92<span style="white-space:pre-wrap"> </span>Test::Simple</div>
<div>1.9721<span style="white-space:pre-wrap"> </span>Time::HiRes</div><div>1.02<span style="white-space:pre-wrap"> </span>Time::localtime</div><div><br></div><div>Optional module versions are:</div>
<div>1.58<span style="white-space:pre-wrap"> </span>Archive::Tar</div><div>0.23<span style="white-space:pre-wrap"> </span>bignum</div><div>missing<span style="white-space:pre-wrap"> </span>Business::ISBN</div>
<div>missing<span style="white-space:pre-wrap"> </span>Business::ISBN::Data</div><div>missing<span style="white-space:pre-wrap"> </span>Data::Dump</div><div>1.82<span style="white-space:pre-wrap"> </span>DB_File</div>
<div>1.27<span style="white-space:pre-wrap"> </span>DBD::SQLite</div><div>1.609<span style="white-space:pre-wrap"> </span>DBI</div><div>1.16<span style="white-space:pre-wrap"> </span>Digest</div>
<div>1.01<span style="white-space:pre-wrap"> </span>Digest::HMAC</div><div>2.39<span style="white-space:pre-wrap"> </span>Digest::MD5</div><div>2.12<span style="white-space:pre-wrap"> </span>Digest::SHA1</div>
<div>1.01<span style="white-space:pre-wrap"> </span>Encode::Detect</div><div>missing<span style="white-space:pre-wrap"> </span>Error</div><div>0.27<span style="white-space:pre-wrap"> </span>ExtUtils::CBuilder</div>
<div>2.2203<span style="white-space:pre-wrap"> </span>ExtUtils::ParseXS</div><div>2.38<span style="white-space:pre-wrap"> </span>Getopt::Long</div><div>missing<span style="white-space:pre-wrap"> </span>Inline</div>
<div>missing<span style="white-space:pre-wrap"> </span>IO::String</div><div>1.09<span style="white-space:pre-wrap"> </span>IO::Zlib</div><div>missing<span style="white-space:pre-wrap"> </span>IP::Country</div>
<div>missing<span style="white-space:pre-wrap"> </span>Mail::ClamAV</div><div>3.003001<span style="white-space:pre-wrap"> </span>Mail::SpamAssassin</div><div>missing<span style="white-space:pre-wrap"> </span>Mail::SPF</div>
<div>missing<span style="white-space:pre-wrap"> </span>Mail::SPF::Query</div><div>0.35<span style="white-space:pre-wrap"> </span>Module::Build</div><div>missing<span style="white-space:pre-wrap"> </span>Net::CIDR::Lite</div>
<div>0.65<span style="white-space:pre-wrap"> </span>Net::DNS</div><div>missing<span style="white-space:pre-wrap"> </span>Net::DNS::Resolver::Programmable</div><div>missing<span style="white-space:pre-wrap"> </span>Net::LDAP</div>
<div> 4.027<span style="white-space:pre-wrap"> </span>NetAddr::IP</div><div>missing<span style="white-space:pre-wrap"> </span>Parse::RecDescent</div><div>missing<span style="white-space:pre-wrap"> </span>SAVI</div>
<div>3.17<span style="white-space:pre-wrap"> </span>Test::Harness</div><div>missing<span style="white-space:pre-wrap"> </span>Test::Manifest</div><div>2.0.0<span style="white-space:pre-wrap"> </span>Text::Balanced</div>
<div>1.40<span style="white-space:pre-wrap"> </span>URI</div><div>0.77<span style="white-space:pre-wrap"> </span>version</div><div>missing<span style="white-space:pre-wrap"> </span>YAML</div>
<div>Virus and Content Scanning: Starting</div><div>Commencing scanning by clamd...</div><div>Debug Mode Is On</div><div>Use Threads : NO</div><div>Socket : /var/run/clamav/clamd.sock</div><div>IP : Using Sockets</div>
<div>Lock File : NOT USED</div><div>Time Out : 300</div><div>Scan Dir : /var/spool/MailScanner/incoming/9341</div><div>Clamd : Sending PING</div><div>Clamd : GOT 'PONG'</div><div>ClamD is running</div><div><br>
</div>
<div>SENT : CONTSCAN /var/spool/MailScanner/incoming/9341 </div><div>Clamd::INFECTED::Eicar-Test-Signature :: ./1/</div><div>Clamd::INFECTED:: Eicar-Test-Signature :: ./1/<a href="http://eicar.com" target="_blank">eicar.com</a></div>
<div>
Completed scanning by clamd</div><div>Virus Scanning: Clamd found 2 infections</div><div>Infected message 1 came from 10.1.1.1</div><div>Virus Scanning: Found 2 viruses</div><div>===========================================================================</div>
<div>Virus Scanner test reports:</div><div>Clamd said "<a href="http://eicar.com" target="_blank">eicar.com</a> was infected: Eicar-Test-Signature"</div><div><br></div><div>If any of your virus scanners (clamd)</div>
<div>are not listed there, you should check that they are installed correctly</div>
<div>and that MailScanner is finding them correctly via its virus.scanners.conf.</div><div>Config: calling custom end function SQLBlacklist</div><div>Closing down by-domain spam blacklist</div><div>Config: calling custom end function MailWatchLogging</div>
<div>Config: calling custom end function SQLWhitelist</div><div>Closing down by-domain spam whitelist</div></div><div><br></div><div>########################################</div><div><br></div><div>I've tried also to disable selinux:</div>
<div><br></div><div><div>[root@mail init.d]# setenforce 0</div><div>[root@mail init.d]# </div><div>[root@mail init.d]# MailScanner -debug</div><div><br></div><div>Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044</div>
<div><br></div><div>In Debugging mode, not forking...</div><div>Trying to setlogsock(unix)</div><div>Building a message batch to scan...</div><div>Have a batch of 30 messages.</div><div>Can't call method "print" on an undefined value at /usr/share/MailScanner/MailScanner/PFDiskStore.pm line 755.</div>
<div>[root@mail init.d]# </div><div>[root@mail init.d]# </div><div>[root@mail init.d]# </div><div><br></div><div>[root@mail init.d]# postconf -d | grep mail_version</div><div>mail_version = 2.6.6</div><div><br></div><div>
any ideas ? thanks you !!</div><div><br></div><div><br></div><div>milter_macro_v = $mail_name $mail_version</div><div>[root@mail init.d]#</div></div>
</blockquote></div><br></div></div></div>
</blockquote></div><br></div></div></div>
<br></div></div>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br></div>
</div></div><br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>
</div></div><br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br></div>