Clayton Keller wrote:
> Bill Landry wrote:
>> Hi List,
>>
>> I am running:
>>
>> amavisd -V
>> amavisd-new-2.6.2 (20081215)
>>
>> ClamD recently crashed and I found entries in the mailq like the
>> following:
>>
>> -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
>> 78F8763CE01    11253 Fri Feb 13 10:33:28  [email protected]
>> (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing,
>> id=29363-02, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED:
>> ClamAV-clamscan av-scanner FAILED: Not a CODE reference at (eval 87)
>> line 403, <GEN54> line 65.; ClamAV-clamscan av-scanner FAILED: Not a
>> CODE reference at (eval 87) line 403, <GEN54> line 65. (in reply to end
>> of DATA command))
>>                                          [email protected]
>>
>> When I reload amavisd, it reports in the maillog:
>>
>> Feb 13 10:36:38 mail amavis[29477]: Using primary internal av scanner
>> code for ClamAV-clamd
>> Feb 13 10:36:38 mail amavis[29477]: Found secondary av scanner
>> ClamAV-clamscan at /usr/local/bin/clamscan
>>
>> which is the correct path to clamscan, but amavisd fails when attempting
>> to scan a message with clamscan.  Here is my secondary scanner entry in
>> amavisd.conf:
>>
>> @av_scanners_backup = (
>>
>> ### http://www.clamav.net/   - backs up clamd or Mail::ClamAV
>> ['ClamAV-clamscan', 'clamscan',
>>   "--stdout --no-summary -r --tempdir=$TEMPBASE {}", [0], [1],
>>   qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],
>> );
>>
>> Any ideas on what I might have configured incorrectly?  Any feedback is
>> greatly appreciated!
>>
>> Regards,
>>
>> Bill
>>
> 
> What is your $TEMPBASE set to? Are permissions correct where you can
> clamscan in it as well? Or is this also part of your amavis tmp
> directory you were scanning ok from? I believe with the config you have
> above, clamscan will dump to that $TEMPBASE and recursively scan it. If
> it is not set to the same directory you are testing with, maybe that is
> the cause of the issue?

>From amavisd.conf:

$MYHOME        = '/var/amavis';
$TEMPBASE      = "$MYHOME/tmp";

ls -l /var/amavis/tmp/
drwxr-x--- 3 amavis amavis 4096 2009-01-27 21:47
amavis-20090127T214710-13386
drwxr-x--- 3 amavis amavis 4096 2009-01-27 22:31
amavis-20090127T223134-13163
drwxr-x--- 3 amavis amavis 4096 2009-01-27 22:31
amavis-20090127T223134-13386
drwxr-x--- 3 amavis amavis 4096 2009-01-30 15:57
amavis-20090130T155709-14910
drwxr-x--- 3 amavis amavis 4096 2009-02-03 05:30
amavis-20090203T053028-26240
drwxr-x--- 3 amavis amavis 4096 2009-02-07 03:27
amavis-20090207T032754-25648

Yes, I can scan there just fine:

su amavis

bash-3.2$ clamscan --stdout --no-summary -r /var/amavis/tmp/

/var/amavis/tmp/amavis-20090127T072652-05434/email.txt: OK
/var/amavis/tmp/amavis-20090127T072652-05434/parts/p001: OK
/var/amavis/tmp/amavis-20090127T214710-13386/email.txt:
Sanesecurity.Junk.6497.UNOFFICIAL FOUND
/var/amavis/tmp/amavis-20090127T214710-13386/parts/p001:
Sanesecurity.Junk.6497.UNOFFICIAL FOUND
/var/amavis/tmp/amavis-20090130T155709-14910/email.txt: OK
/var/amavis/tmp/amavis-20090130T155709-14910/parts/p001: OK
/var/amavis/tmp/amavis-20090127T223134-13163/email.txt: OK
/var/amavis/tmp/amavis-20090127T223134-13163/parts/p001: OK
/var/amavis/tmp/amavis-20090127T215729-13386/email.txt:
Sanesecurity.Junk.1350.UNOFFICIAL FOUND
/var/amavis/tmp/amavis-20090127T215729-13386/parts/p001:
Sanesecurity.Junk.1350.UNOFFICIAL FOUND
/var/amavis/tmp/amavis-20090207T032754-25648/email.txt: OK
/var/amavis/tmp/amavis-20090207T032754-25648/parts/p001: OK
/var/amavis/tmp/amavis-20090203T053028-26240/email.txt: OK
/var/amavis/tmp/amavis-20090203T053028-26240/parts/p001: OK

I don't think this is a permissions issue, but I'm willing to try
whatever might help resolve the issue.

Thanks!

Bill

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
AMaViS-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to