On our amavisd-new box:

Jul 30 16:36:42 mail kernel: [608438.105690] lha[700]: segfault at bfcf4d55 ip 
0804d62a sp bfceb04c error 4 in lha[8048000+d000]
Jul 30 16:41:11 mail kernel: [608707.038312] lha[1970]: segfault at bfd9ddf5 ip 
0804d62a sp bfd940ec error 4 in lha[8048000+d000]
Jul 30 21:29:54 mail kernel: [626030.125254] lha[16033]: segfault at bf8868e5 
ip 0804d62a sp bf87cbdc error 4 in lha[8048000+d000]
Jul 30 21:39:58 mail kernel: [626634.337639] lha[18297]: segfault at bffab805 
ip 0804d62a sp bffa1afc error 4 in lha[8048000+d000]

Should I worry?

Jul 30 16:36:42 mail amavis[30811]: (30811-12) Checking: qAamg9N5AiMI 
[62.221.20.32] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Jul 30 16:36:42 mail amavis[31602]: (31602-10) Checking: g03sRqcxS0r5 
[89.110.133.33] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Jul 30 16:36:42 mail amavis[602]: (00602-02) Checking: DdZ7WuA8TzIu 
[213.133.106.184] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
...
Jul 30 16:41:11 mail amavis[1397]: (01397-04) Checking: 955hU-fyS3z1 
[62.75.250.29] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Jul 30 16:41:11 mail amavis[1678]: (01678-02) Checking: 4zNHRjzCvwnU 
[63.117.136.147] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
...
Jul 30 21:29:54 mail amavis[15546]: (15546-04) Checking: ih9TV6qsHlVw 
[217.72.192.243] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Jul 30 21:29:54 mail amavis[15437]: (15437-04) Checking: GNX62ts9PJcs 
[213.133.106.184] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
...
Jul 30 21:39:58 mail amavis[14720]: (14720-19) Checking: PW3t3X-7Rxhi 
[62.75.250.29] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>

This very last log line is the only invocation of amavis for a long
time, so I'd guess that mail must have been the culprit.

Jul 30 21:39:59 mail amavis[14720]: (14720-19) Blocked INFECTED 
(Trojan.Zbot-1730), [62.75.250.29] [201.250.42.213]
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, quarantine: [EMAIL PROTECTED], 
Message-ID:
<[EMAIL PROTECTED]>, mail_id: PW3t3X-7Rxhi, Hits: -, size: 71106, 239 ms

Jul 30 21:29:54 mail amavis[15437]: (15437-04) Blocked INFECTED
(Trojan.Zbot-1730), [213.133.106.184] [209.150.208.23]
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, quarantine:
[EMAIL PROTECTED], Message-ID:
<[EMAIL PROTECTED]>, mail_id: GNX62ts9PJcs, Hits:
-, size: 71220, 239 ms

It seems that "Trojan.Zbot-1730" makes LHA crash?!
-- 
Ralf Hildebrandt (i.A. des IT-Zentrums)         [EMAIL PROTECTED]
Charite - Universitätsmedizin Berlin            Tel.  +49 (0)30-450 570-155
Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  +49 (0)30-450 570-962
IT-Zentrum Standort CBF                 send no mail to [EMAIL PROTECTED]

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to