headers
alexus | 5 May 2010 22:32
Picon

simscan & clam won't work email + attachment

anytime simscan process email with attachment i get following error

 <at> 400000004be1d5481d067544 simscan: calling clamdscan
 <at> 400000004be1d5481d732964 simscan: cdb looking up version clamav
 <at> 400000004be1d5481d738ef4 simscan: fatal error executing clamdscan
 <at> 400000004be1d5481d770d7c simscan: exit error code: 71

yet if email doesn't have attachment it goes through no problem

--

-- 
http://alexus.org/

!DSPAM:4be1d5f132711685770547!
Permalink | Reply |
headers
Rick Macdougall | 5 May 2010 22:41

Re: simscan & clam won't work email + attachment

On 05/05/2010 4:32 PM, alexus wrote:
> anytime simscan process email with attachment i get following error
>
>  <at> 400000004be1d5481d067544 simscan: calling clamdscan
>  <at> 400000004be1d5481d732964 simscan: cdb looking up version clamav
>  <at> 400000004be1d5481d738ef4 simscan: fatal error executing clamdscan
>  <at> 400000004be1d5481d770d7c simscan: exit error code: 71
>
> yet if email doesn't have attachment it goes through no problem
>

Sounds like a permissions problem to me, or perhaps a space issue.

Check what user clamd is running as and check the owner of the 
/var/qmail/simscan directory.  Also check what user simscan was compiled 
with.

They should all be the same.

Regards,

Rick

!DSPAM:4be1d7e432715021356464!
Permalink | Reply |
headers
alexus | 5 May 2010 22:44
Picon

Re: simscan & clam won't work email + attachment

-bash-3.2# id clamav
uid=106(clamav) gid=106(clamav) groups=106(clamav),89(vchkpw),74(simscan)
-bash-3.2# ls -ld /var/ /var/qmail/ /var/qmail/simscan/
drwxr-xr-x  24 root     wheel   512 Mar 25 00:37 /var/
drwxr-xr-x  17 root     qmail   512 Dec  3 12:28 /var/qmail/
drwxr-x---   2 simscan  vchkpw  512 May  5 16:42 /var/qmail/simscan/
-bash-3.2# cd simscan-1.4.0/
-bash-3.2# grep './configure' ./config.log
  $ ./configure --enable-per-domain --enable-attach
--enable-spam-passthru --enable-spam --enable-spamc-args=-U
/tmp/spamd.sock --enable-received --enable-regex=y
--enable-quarantinedir CPPFLAGS=-I/usr/local/include/
LDFLAGS=-L/usr/local/lib
-bash-3.2#

On Wed, May 5, 2010 at 4:41 PM, Rick Macdougall <rickm@...> wrote:
> On 05/05/2010 4:32 PM, alexus wrote:
>>
>> anytime simscan process email with attachment i get following error
>>
>>  <at> 400000004be1d5481d067544 simscan: calling clamdscan
>>  <at> 400000004be1d5481d732964 simscan: cdb looking up version clamav
>>  <at> 400000004be1d5481d738ef4 simscan: fatal error executing clamdscan
>>  <at> 400000004be1d5481d770d7c simscan: exit error code: 71
>>
>> yet if email doesn't have attachment it goes through no problem
>>
>
> Sounds like a permissions problem to me, or perhaps a space issue.
>
(Continue reading)

Permalink | Reply |
headers
alexus | 5 May 2010 22:45
Picon

Re: simscan & clam won't work email + attachment

i think if it would be permissions or disk space usage issue, it
wouldn't let emails without attachment through as well

On Wed, May 5, 2010 at 4:44 PM, alexus <alexus@...> wrote:
> -bash-3.2# id clamav
> uid=106(clamav) gid=106(clamav) groups=106(clamav),89(vchkpw),74(simscan)
> -bash-3.2# ls -ld /var/ /var/qmail/ /var/qmail/simscan/
> drwxr-xr-x  24 root     wheel   512 Mar 25 00:37 /var/
> drwxr-xr-x  17 root     qmail   512 Dec  3 12:28 /var/qmail/
> drwxr-x---   2 simscan  vchkpw  512 May  5 16:42 /var/qmail/simscan/
> -bash-3.2# cd simscan-1.4.0/
> -bash-3.2# grep './configure' ./config.log
>  $ ./configure --enable-per-domain --enable-attach
> --enable-spam-passthru --enable-spam --enable-spamc-args=-U
> /tmp/spamd.sock --enable-received --enable-regex=y
> --enable-quarantinedir CPPFLAGS=-I/usr/local/include/
> LDFLAGS=-L/usr/local/lib
> -bash-3.2#
>
>
> On Wed, May 5, 2010 at 4:41 PM, Rick Macdougall <rickm@...> wrote:
>> On 05/05/2010 4:32 PM, alexus wrote:
>>>
>>> anytime simscan process email with attachment i get following error
>>>
>>>  <at> 400000004be1d5481d067544 simscan: calling clamdscan
>>>  <at> 400000004be1d5481d732964 simscan: cdb looking up version clamav
>>>  <at> 400000004be1d5481d738ef4 simscan: fatal error executing clamdscan
>>>  <at> 400000004be1d5481d770d7c simscan: exit error code: 71
>>>
(Continue reading)

Permalink | Reply |
headers
Sean | 6 May 2010 04:17
Favicon

Re: simscan & clam won't work email + attachment


alexus said on 5/5/2010 1:44 PM:
> -bash-3.2# id clamav
> uid=106(clamav) gid=106(clamav) groups=106(clamav),89(vchkpw),74(simscan)
> -bash-3.2# ls -ld /var/ /var/qmail/ /var/qmail/simscan/
> drwxr-xr-x  24 root     wheel   512 Mar 25 00:37 /var/
> drwxr-xr-x  17 root     qmail   512 Dec  3 12:28 /var/qmail/
> drwxr-x---   2 simscan  vchkpw  512 May  5 16:42 /var/qmail/simscan/
> -bash-3.2# cd simscan-1.4.0/
> -bash-3.2# grep './configure' ./config.log
>    $ ./configure --enable-per-domain --enable-attach
> --enable-spam-passthru --enable-spam --enable-spamc-args=-U
> /tmp/spamd.sock --enable-received --enable-regex=y
> --enable-quarantinedir CPPFLAGS=-I/usr/local/include/
> LDFLAGS=-L/usr/local/lib
> -bash-3.2#
>
>    
Ah.  so it *is* a permissions problem, as Rick suggested.  Looks like 
the permissions on /var/qmail/simscan aren't correct:

on my server:
# ls -ld /var/qmail/simscan/
drwxr-s--- 7 simscan simscan 4096 May  5 19:09 /var/qmail/simscan/

Probably the best explanation of this issue is at:  
http://qmail.jms1.net/simscan/
search the page for "clamdscan"

A google search for
(Continue reading)

Permalink | Reply |
headers
alexus | 6 May 2010 18:33
Picon

Re: simscan & clam won't work email + attachment

On Wed, May 5, 2010 at 10:17 PM, Sean <scasey@...> wrote:
>
> alexus said on 5/5/2010 1:44 PM:
>>
>> -bash-3.2# id clamav
>> uid=106(clamav) gid=106(clamav) groups=106(clamav),89(vchkpw),74(simscan)
>> -bash-3.2# ls -ld /var/ /var/qmail/ /var/qmail/simscan/
>> drwxr-xr-x  24 root     wheel   512 Mar 25 00:37 /var/
>> drwxr-xr-x  17 root     qmail   512 Dec  3 12:28 /var/qmail/
>> drwxr-x---   2 simscan  vchkpw  512 May  5 16:42 /var/qmail/simscan/
>> -bash-3.2# cd simscan-1.4.0/
>> -bash-3.2# grep './configure' ./config.log
>>   $ ./configure --enable-per-domain --enable-attach
>> --enable-spam-passthru --enable-spam --enable-spamc-args=-U
>> /tmp/spamd.sock --enable-received --enable-regex=y
>> --enable-quarantinedir CPPFLAGS=-I/usr/local/include/
>> LDFLAGS=-L/usr/local/lib
>> -bash-3.2#
>>
>>
>
> Ah.  so it *is* a permissions problem, as Rick suggested.  Looks like the
> permissions on /var/qmail/simscan aren't correct:

i dont understand... how is it permissions issue if files without
attachments can go through fine

this is just another email going through that i caught...
so it creates/being able to copy and do whatever is it needs to do
(Continue reading)

Permalink | Reply |
headers
Tren Blackburn | 6 May 2010 18:34
Favicon

Re: simscan & clam won't work email + attachment

Have you enabled debugging in simscan so you can get a more specific error or at least see where it's failing?

t

----- Original Message -----
From: alexus <alexus@...>
To: simscan@... <simscan@...>
Sent: Thu May 06 09:33:23 2010
Subject: Re: [simscan] simscan & clam won't work email + attachment

On Wed, May 5, 2010 at 10:17 PM, Sean <scasey@...> wrote:
>
> alexus said on 5/5/2010 1:44 PM:
>>
>> -bash-3.2# id clamav
>> uid=106(clamav) gid=106(clamav) groups=106(clamav),89(vchkpw),74(simscan)
>> -bash-3.2# ls -ld /var/ /var/qmail/ /var/qmail/simscan/
>> drwxr-xr-x  24 root     wheel   512 Mar 25 00:37 /var/
>> drwxr-xr-x  17 root     qmail   512 Dec  3 12:28 /var/qmail/
>> drwxr-x---   2 simscan  vchkpw  512 May  5 16:42 /var/qmail/simscan/
>> -bash-3.2# cd simscan-1.4.0/
>> -bash-3.2# grep './configure' ./config.log
>>   $ ./configure --enable-per-domain --enable-attach
>> --enable-spam-passthru --enable-spam --enable-spamc-args=-U
>> /tmp/spamd.sock --enable-received --enable-regex=y
>> --enable-quarantinedir CPPFLAGS=-I/usr/local/include/
>> LDFLAGS=-L/usr/local/lib
>> -bash-3.2#
>>
>>
(Continue reading)

Permalink | Reply |
headers
alexus | 6 May 2010 18:37
Picon

Re: simscan & clam won't work email + attachment

i did enable debug, thats where i got error 71 from

 <at> 400000004be2ef92067a0afc simscan: cdb looking up
 <at> 400000004be2ef92067bc07c simscan: cdb for  found
clam=yes,spam=yes,spam_hits=5.0,regex=^Subject\072.*(7.|8.)\%:^Subject\072.*Pfizer.*:(?m)\n{20,21}
 <at> 400000004be2ef92067c454c simscan: pelookup clam = yes
 <at> 400000004be2ef92067c4d1c simscan: pelookup spam = yes
 <at> 400000004be2ef92067c5104 simscan: pelookup spam_hits = 5.0
 <at> 400000004be2ef92067c58d4 simscan: unimplemented flag spam_hits = 5.0
 <at> 400000004be2ef92067c60a4 simscan: pelookup regex =
^Subject\072.*(7.|8.)\%:^Subject\072.*Pfizer.*:(?m)\n{20
 <at> 400000004be2ef92067c648c simscan: regex flag regex =
^Subject\072.*(7.|8.)\%:^Subject\072.*Pfizer.*:(?m)\n{20
 <at> 400000004be2ef92067c6c5c simscan: regex 0 is ^Subject\072.*(7.|8.)\%
 <at> 400000004be2ef92067c8f84 simscan: regex 1 is ^Subject\072.*Pfizer.*
 <at> 400000004be2ef92067c9754 simscan: regex 2 is (?m)\n{20
 <at> 400000004be2ef92067c9b3c simscan: starting: work dir:
/var/qmail/simscan/1273163656.108811.36818
 <at> 400000004be2ef920686b914 simscan: pelookup: called with bounces@...
 <at> 400000004be2ef920686bcfc simscan: pelookup: domain is pksofttech.net
 <at> 400000004be2ef920686dc3c simscan: cdb looking up pksofttech.net
 <at> 400000004be2ef920687516c simscan: pelookup: local part is bounces
 <at> 400000004be2ef9206876cc4 simscan: cdb looking up bounces@...
 <at> 400000004be2ef920687d63c simscan: pelookup: called with boris@...
 <at> 400000004be2ef920687de0c simscan: pelookup: domain is gloconsulting.com
 <at> 400000004be2ef920687e5dc simscan: cdb looking up gloconsulting.com
 <at> 400000004be2ef920688051c simscan: pelookup: local part is boris
 <at> 400000004be2ef9206881c8c simscan: cdb looking up boris@...
 <at> 400000004be2ef9206887e34 simscan: compiling regex 0 (^Subject\072.*(7.|8.)\%)
 <at> 400000004be2ef920688ff1c simscan: compiling regex 1 (^Subject\072.*Pfizer.*)
(Continue reading)

Permalink | Reply |
headers
Tren Blackburn | 6 May 2010 18:39
Favicon

Re: simscan & clam won't work email + attachment

And it says the problem is clamdscan. This is probably why messages with attachments are failing. Have you
checked clamd?

t

----- Original Message -----
From: alexus <alexus@...>
To: simscan@... <simscan@...>
Sent: Thu May 06 09:37:14 2010
Subject: Re: [simscan] simscan & clam won't work email + attachment

i did enable debug, thats where i got error 71 from

 <at> 400000004be2ef92067a0afc simscan: cdb looking up
 <at> 400000004be2ef92067bc07c simscan: cdb for  found
clam=yes,spam=yes,spam_hits=5.0,regex=^Subject\072.*(7.|8.)\%:^Subject\072.*Pfizer.*:(?m)\n{20,21}
 <at> 400000004be2ef92067c454c simscan: pelookup clam = yes
 <at> 400000004be2ef92067c4d1c simscan: pelookup spam = yes
 <at> 400000004be2ef92067c5104 simscan: pelookup spam_hits = 5.0
 <at> 400000004be2ef92067c58d4 simscan: unimplemented flag spam_hits = 5.0
 <at> 400000004be2ef92067c60a4 simscan: pelookup regex =
^Subject\072.*(7.|8.)\%:^Subject\072.*Pfizer.*:(?m)\n{20
 <at> 400000004be2ef92067c648c simscan: regex flag regex =
^Subject\072.*(7.|8.)\%:^Subject\072.*Pfizer.*:(?m)\n{20
 <at> 400000004be2ef92067c6c5c simscan: regex 0 is ^Subject\072.*(7.|8.)\%
 <at> 400000004be2ef92067c8f84 simscan: regex 1 is ^Subject\072.*Pfizer.*
 <at> 400000004be2ef92067c9754 simscan: regex 2 is (?m)\n{20
 <at> 400000004be2ef92067c9b3c simscan: starting: work dir:
/var/qmail/simscan/1273163656.108811.36818
 <at> 400000004be2ef920686b914 simscan: pelookup: called with bounces@...
(Continue reading)

Permalink | Reply |
headers
alexus | 6 May 2010 18:42
Picon

Re: simscan & clam won't work email + attachment

yes, thats why i said in subject clamd and showed debug output in very
first email

clamd is running no problem

problem occurs only when email contains attachment, when there is no
attachment email + clam goes through no problem

On Thu, May 6, 2010 at 12:39 PM, Tren Blackburn <tren@...> wrote:
> And it says the problem is clamdscan. This is probably why messages with attachments are failing. Have you
checked clamd?
>
> t
>
> ----- Original Message -----
> From: alexus <alexus@...>
> To: simscan@... <simscan@...>
> Sent: Thu May 06 09:37:14 2010
> Subject: Re: [simscan] simscan & clam won't work email + attachment
>
> i did enable debug, thats where i got error 71 from
>
>  <at> 400000004be2ef92067a0afc simscan: cdb looking up
>  <at> 400000004be2ef92067bc07c simscan: cdb for  found
> clam=yes,spam=yes,spam_hits=5.0,regex=^Subject\072.*(7.|8.)\%:^Subject\072.*Pfizer.*:(?m)\n{20,21}
>  <at> 400000004be2ef92067c454c simscan: pelookup clam = yes
>  <at> 400000004be2ef92067c4d1c simscan: pelookup spam = yes
>  <at> 400000004be2ef92067c5104 simscan: pelookup spam_hits = 5.0
>  <at> 400000004be2ef92067c58d4 simscan: unimplemented flag spam_hits = 5.0
>  <at> 400000004be2ef92067c60a4 simscan: pelookup regex =
(Continue reading)

Permalink | Reply |
headers
Tren Blackburn | 6 May 2010 18:44
Favicon

Re: simscan & clam won't work email + attachment

Have you tried running clamdscan as the user you're running simscan as? 

----- Original Message -----
From: alexus <alexus@...>
To: simscan@... <simscan@...>
Sent: Thu May 06 09:42:00 2010
Subject: Re: [simscan] simscan & clam won't work email + attachment

yes, thats why i said in subject clamd and showed debug output in very
first email

clamd is running no problem

problem occurs only when email contains attachment, when there is no
attachment email + clam goes through no problem

On Thu, May 6, 2010 at 12:39 PM, Tren Blackburn <tren@...> wrote:
> And it says the problem is clamdscan. This is probably why messages with attachments are failing. Have you
checked clamd?
>
> t
>
> ----- Original Message -----
> From: alexus <alexus@...>
> To: simscan@... <simscan@...>
> Sent: Thu May 06 09:37:14 2010
> Subject: Re: [simscan] simscan & clam won't work email + attachment
>
> i did enable debug, thats where i got error 71 from
>
(Continue reading)

Permalink | Reply |
headers
alexus | 6 May 2010 18:55
Picon

Re: simscan & clam won't work email + attachment

-bash-3.2# id simscan
uid=74(simscan) gid=74(simscan) groups=74(simscan),89(vchkpw),106(clamav)
-bash-3.2# ps auxwww | grep ^clamav
clamav   93999  0.0  0.1 23732  6928  ??  IsJ  Wed11AM   0:00.41
/usr/local/bin/freshclam --verbose --daemon
--pid=/usr/local/share/clamav/freshclam.pid
clamav   94018  0.0  2.1 186820 171708  ??  IsJ  Wed11AM   0:30.84
/usr/local/sbin/clamd
-bash-3.2# id
uid=0(root) gid=0(wheel) groups=0(wheel),5(operator)
-bash-3.2# su -m simscan
su: /root/.bashrc: Permission denied
su-3.2$ clamdscan
/root: lstat() failed: Permission denied. ERROR

----------- SCAN SUMMARY -----------
Infected files: 0
Total errors: 1
Time: 0.000 sec (0 m 0 s)
su-3.2$

On Thu, May 6, 2010 at 12:44 PM, Tren Blackburn <tren@...> wrote:
> Have you tried running clamdscan as the user you're running simscan as?
>
> ----- Original Message -----
> From: alexus <alexus@...>
> To: simscan@... <simscan@...>
> Sent: Thu May 06 09:42:00 2010
> Subject: Re: [simscan] simscan & clam won't work email + attachment
>
(Continue reading)

Permalink | Reply |

Gmane