<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I'm not sure what fixed it. I have the
/var/spool/MailScanner/incoming directory owned by clamav.clamav
with 755 as the mod.<br>
<br>
One thing I had to do was turn off TNEF completely. It didn't matter
which one I used, internal or external, there were just some of
those winmail.dat files that would blow off MailScanner. It's a
risk, I know, but that seemed to help a lot.<br>
<br>
I see a ton of files in
/var/spool/MailScanner/incoming/SpamAssassin-Temp hanging around
from older dates, but those don't seem to be hurting anything and
I'll just delete them soon. These are partially old tnef* files, but
some are named tmp.XXXXXXX. They are all owned by root.root, so
there's still a little going on. <br>
<br>
Sorry to be so flaky on the answer. Wish I could remember what
really fixed it. But I'd start with this and make sure your
clamd.conf and MailScanner.conf lines up with each other.<br>
<br>
I seem to recall that the MailWatch instructions for recommendations
on owner and group ownership and permissions really had me spinning
for a while. so you have to read those carefully if you use MW. It's
straight forward, I think, but I had a mess on my hands for a while
until I started reading slower. Us old guys can't seem to handle as
much as we used to do.<br>
<br>
If you need more, PM me or whatever and I'll go through all the
files.<br>
<br>
steve<br>
<br>
On 4/25/2012 11:42 AM, Richard Mealing wrote:
<blockquote
cite="mid:1251B5423222C446A299CABAA7B46FF409703298@fn-exchange.fastnet.local"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi
Steve,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Old
thread I know, but did you fix this in the end? I’m having
this exact problem now and am thinking of changing the
incoming folder to 0640 also.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Rich<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"
lang="EN-US">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"
lang="EN-US"> <a class="moz-txt-link-abbreviated" href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a>
[<a class="moz-txt-link-freetext" href="mailto:mailscanner-bounces@lists.mailscanner.info">mailto:mailscanner-bounces@lists.mailscanner.info</a>] <b>On
Behalf Of </b>Steve Campbell<br>
<b>Sent:</b> 18 November 2011 18:56<br>
<b>To:</b> MailScanner discussion<br>
<b>Subject:</b> Re: Clamd permission error<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Maybe I see the problem.<br>
<br>
Should the "incoming" folder itself be modded 640 instead of
600?<br>
<br>
I'll change it since it shouldn't matter. <br>
<br>
steve<br>
<br>
On 11/18/2011 1:43 PM, Steve Campbell wrote: <o:p></o:p></p>
<p class="MsoNormal">I don't think anything that matters isn't
640 mod and clamav.clamav owned. The individual files created
in the incoming directory are owned by clamav as well. An
example:<br>
<br>
incoming]# ls -al<br>
total 2912<br>
drwx------ 8 clamav clamav 4096 Nov 18 13:42 .<br>
drwxr-xr-x 4 root root 4096 May 18 2004 ..<br>
drwxr-x--- 2 clamav clamav 4096 Sep 9 07:02 26632<br>
drwxr-x--- 4 clamav clamav 4096 Nov 18 13:41 5625<br>
drwxr-x--- 4 clamav clamav 4096 Nov 18 13:41 5632<br>
drwxr-x--- 7 clamav clamav 4096 Nov 18 13:41 5654<br>
drwxr-x--- 2 root root 4096 Nov 18 11:14 Locks<br>
-rw------- 1 root root 17408 Nov 18 13:41
Processing.db<br>
-rw------- 1 root root 2722816 Nov 18 13:42
SpamAssassin.cache.db<br>
drwx------ 2 root root 200704 Nov 18 13:41
SpamAssassin-Temp<br>
<br>
Seems to me to be as it should be or those "Number" folders
couldn't be created.<br>
<br>
steve<br>
<br>
<br>
On 11/18/2011 1:15 PM, Martin Hepworth wrote: <o:p></o:p></p>
<p class="MsoNormal">Steve<br>
Double check nothing has altered any of the permissions
further up the tree and the clamd user can access the files<br>
<br>
Martin<br>
<br>
On Friday, 18 November 2011, Steve Campbell <<a
moz-do-not-send="true" href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</a>>
wrote:<br>
> I'm pretty certain I looked through there. The settings
are spread out all across the config file, so I might have
missed one (or four). I just don't understand why I'm seeing
this now (just one email) without having changed anything.<br>
><br>
> Thanks for all the help from everyone.<br>
><br>
> steve<br>
><br>
> On 11/18/2011 11:07 AM, Martin Hepworth wrote:<br>
><br>
> yes you need to look carefully at the mailscanner.conf
settings for permssions etc. Theres good documentation in the
file about running clamdd and the things you need to setup<br>
> --<br>
> Martin Hepworth<br>
> Oxford, UK<br>
><br>
><br>
> On 18 November 2011 14:53, Milenko Letic <<a
moz-do-not-send="true" href="mailto:mikoletic@gmail.com">mikoletic@gmail.com</a>>
wrote:<br>
>><br>
>> this is mod in my MailScanner.conf :<br>
>> Incoming Work Permissions = 0644<br>
>> maybe , maybe not help, but wish you luck <br>
>> On Fri, Nov 18, 2011 at 3:43 PM, Steve Campbell <<a
moz-do-not-send="true" href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</a>>
wrote:<br>
>>><br>
>>> I'm getting the following error in my logs:<br>
>>><br>
>>> Clamd::ERROR:: lstat() failed: Permission denied.
ERRORClamd::ERROR:: lstat() failed: Permission denied......<br>
>>><br>
>>> Looking back, I found a thread suggesting I
should switch to the internal tnef expander, which I am trying
now, and to ensure the "incoming" directory is accessible by
the clam user (clamav). I've followed the suggestions in the
MailScanner.conf file for the situation I am running under.
The temp folders under the incoming directory, along with the
incoming folder itself, where the winmail.dat is expanded IS
owned by clamav.<br>
>>><br>
>>> So I'm wondering if the 0640 mod on the folders
is the proper mod. Should there be any sticky bits or anything
set?<br>
>>><br>
>>> Just curious, since this seems to be the first
time I've run into this and I've been using MS for years.<br>
>>><br>
>>> steve campbell<br>
>>><br>
>>> --<br>
>>> MailScanner mailing list<br>
>>> <a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
>>> <a moz-do-not-send="true"
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
>>><br>
>>> Before posting, read <a moz-do-not-send="true"
href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br>
>>><br>
>>> Support MailScanner development - buy the book
off the website!<br>
>><br>
>> --<br>
>> MailScanner mailing list<br>
>> <a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
>> <a moz-do-not-send="true"
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
>><br>
>> Before posting, read <a moz-do-not-send="true"
href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a><br>
>><br>
>> Support MailScanner development - buy the book off
the website!<br>
>><br>
><br>
><br>
><br>
><br>
<br>
-- <br>
-- <br>
Martin Hepworth<br>
Oxford, UK<br>
<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
</body>
</html>