Hello,<div><br></div><div>I have come across a problem and from the research I have done this was a problem when ClamAV 0.96 first came out, but I have not seen any newly reported issues with it. I have reproduced this error in my lab 100% of the time. If anyone has some guidance, I would appreciate it.</div>
<div><br></div><div>I have two different systems I am testing: </div><div><br></div><div>- The first is running CentOS 5.8 64bit and it DOES NOT encounter this problem.</div><div>- The second is CentOS 6.3 64 bit and it DOES encounter this problem even after a clean re-install. </div>
<div><br></div><div><b>Build:</b></div><div>- MTA: Postfix mail_version = 2.6.6</div><div>- MailScanner: MailScanner-4.84.5-3</div><div>- ClamAV: clamav-0.97.6-1, clamav-db-0.97.6-1, clamav-devel-0.97.6-1, clamd-0.97.6-1 (from <a href="http://pkgs.repoforge.org/clamav/">http://pkgs.repoforge.org/clamav/</a>)</div>
<div><br></div><div><b>Tests Performed:</b></div><div>- Send a regular email. Both platforms are ok.</div><div>- Send an email with a .pdf file attachment. Both platforms process and send ok.</div><div>- Send an oversized email. (6mb) The CentOS 5.8 system has no problems. It quarantines the email and logs it correctly. The CentOS 6.3 system cannot process the email. (Will post --lint below.)</div>
<div><br></div><div><b>Notes: </b></div><div>- Both systems are running identical versions of ClamAV (the latest) from <a href="http://pkgs.repoforge.org/clamav/">http://pkgs.repoforge.org/clamav/</a></div><div>- Both are running the same versions of MailScanner</div>
<div>- Both are running the same version of Postfix</div><div>- Both are 64bit OS</div><div>- Permissions are correct (else the smaller email would not be processed)</div><div>- Once the CentOS 6.3 system gets this email, it is hung and will not process any further email until I clear it.</div>
<div>- If I delete the email from the postfix queue and delete /var/spool/MailScanner/incoming/*.db normal processing will resume.</div><div><br></div><div>Any help would be greatly appreciated. </div><div><br></div><div>
Thanks,</div><div><br></div><div>Jerry</div><div><br></div><div><br></div><div><div><b>MailScanner --lint</b></div><div><b><br></b></div><div>Trying to setlogsock(unix)</div><div><br></div><div>Reading configuration file /etc/MailScanner/MailScanner.conf</div>
<div>Reading configuration file /etc/MailScanner/conf.d/README</div><div>Reading configuration file /etc/MailScanner/conf.d/mailborder.conf</div><div>Read 869 hostnames from the phishing whitelist</div><div>Read 4846 hostnames from the phishing blacklists</div>
<div>Config: calling custom init function MailWatchLogging</div><div>Started SQL Logging</div><div><br></div><div>Checking version numbers...</div><div>Version number in MailScanner.conf (4.84.5) is correct.</div><div><br>
</div><div>ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf</div><div>ERROR: is not correct, it should match X-Mailborder-Mailborder-From</div><div><br></div><div>MailScanner setting GID to (89)</div>
<div>MailScanner setting UID to (89)</div><div><br></div><div>Checking for SpamAssassin errors (if you use it)...</div><div>Using SpamAssassin results cache</div><div>Connected to SpamAssassin cache database</div><div>config: failed to parse line, skipping, in "/etc/mail/spamassassin/<a href="http://mailscanner.cf">mailscanner.cf</a>": use_auto_whitelist 0</div>
<div>SpamAssassin reported an error.</div><div>Connected to Processing Attempts Database</div><div>Created Processing Attempts Database successfully</div><div>There is 1 message in the Processing Attempts Database</div><div>
Using locktype = posix</div><div>MailScanner.conf says "Virus Scanners = clamd"</div><div>Found these virus scanners installed: clamd</div><div>===========================================================================</div>
<div>Filename Checks: Windows/DOS Executable (1 <a href="http://eicar.com">eicar.com</a>)</div><div>Other Checks: Found 1 problems</div><div>Virus and Content Scanning: Starting</div><div>Clamd::ERROR:: UNKNOWN CLAMD RETURN ./1/lstat() failed: Permission denied. ERROR :: /var/spool/MailScanner/incoming/3820</div>
<div>Clamd::ERROR:: UNKNOWN CLAMD RETURN ./1.header/Access denied. ERROR :: /var/spool/MailScanner/incoming/3820</div><div>Virus Scanning: Clamd found 2 infections</div><div>Virus Scanning: Found 2 viruses</div><div>===========================================================================</div>
<div><br></div><div>If any of your virus scanners (clamd)</div><div>are not listed there, you should check that they are installed correctly</div><div>and that MailScanner is finding them correctly via its virus.scanners.conf.</div>
<div>cannot remove directory for /var/spool/MailScanner/incoming/3820: Permission denied at /usr/lib/MailScanner/MailScanner/WorkArea.pm line 205</div></div>