Seems I've made a stupid mistake in build 19084 for the clamav unix socket.
The next version will fix the bug. Thomas Von: "James Brown" <jlbr...@bordo.com.au> An: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Datum: 27.03.2019 09:28 Betreff: Re: [Assp-test] fixes in assp 2.6.4 *SPAM-Evaporator* build 19084 AvClamdPort is: /tmp/clamd And clamd.log startup says: Tue Mar 12 16:57:01 2019 -> +++ Started at Tue Mar 12 16:57:01 2019 Tue Mar 12 16:57:01 2019 -> Received 0 file descriptor(s) from systemd. Tue Mar 12 16:57:01 2019 -> clamd daemon 0.101.1 (OS: darwin18.2.0, ARCH: x86_64, CPU: x86_64) Tue Mar 12 16:57:01 2019 -> Log file size limited to 2097152 bytes. Tue Mar 12 16:57:01 2019 -> Reading databases from /usr/local/clamav Tue Mar 12 16:57:01 2019 -> Not loading PUA signatures. Tue Mar 12 16:57:01 2019 -> Bytecode: Security mode set to "TrustSigned". Tue Mar 12 16:57:51 2019 -> Loaded 10207782 signatures. Tue Mar 12 16:57:52 2019 -> LOCAL: Unix socket file /tmp/clamd Tue Mar 12 16:57:52 2019 -> LOCAL: Setting connection queue length to 200 James. On 27 Mar 2019, at 7:17 pm, Thomas Eckardt <thomas.ecka...@thockar.com> wrote: How is your setting of 'AvClamdPort' ? Thomas Von: "James Brown via Assp-test" <assp-test@lists.sourceforge.net> An: "ASSP development mailing list" < assp-test@lists.sourceforge.net> Kopie: "James Brown" <jlbr...@bordo.com.au> Datum: 27.03.2019 01:23 Betreff: Re: [Assp-test] fixes in assp 2.6.4 *SPAM-Evaporator* build 19084 Thanks for fixing the block report right button. I’ve upgraded to AFC 5.04 and build 19084. Am now seeing this in the log: Mar-26-19 16:34:44 [Main_Thread] Warning: got unexpected signal ALRM in Main_Thread: package - IO::Poll, file - /usr/local/Cellar/perl/5.28.1/lib/perl5/5.28.1/darwin-thread-multi-2level/IO/Poll.pm, line - 87! And Clamd.log is showing: Tue Mar 26 16:31:06 2019 -> ERROR: ScanStream 1513: accept timeout. Tue Mar 26 16:31:21 2019 -> ERROR: ScanStream 2000: accept timeout. With ASSP showing: Mar-26-19 16:37:44 [Worker_1] Warning: ClamAV Temporary Off : And: Mar-26-19 16:39:04 id-78744-15314 [Worker_2] 192.168.1.2 [OIP: 34.209.37.225] < bounces.notification+50cfe82278e847cf40011...@spemail.trello.com> to: us...@bordo.com.au [Plugin] calling plugin ASSP_AFC Mar-26-19 16:39:12 id-78742-17493 [Worker_1] 192.168.1.2 [OIP: 52.32.110.55] < bounces.notification+592e36fb1d877df5e8c42...@spemail.trello.com> to: us...@bordo.com.au ClamAV: scanned 745 bytes in whitelisted message - Mar-26-19 16:39:12 [Worker_1] ClamAV Up Mar-26-19 16:39:42 [Worker_4] ClamAV Up Mar-26-19 16:39:48 id-78768-18674 [Worker_1] 192.168.1.2 [OIP: 35.160.49.11] < bounces.notification+55ee2f719a05579b99d44...@spemail.trello.com> to: us...@bordo.com.au ClamAV: scanned 26769 bytes in whitelisted message - Warning: ClamAV Temporary Off : (suppressed 9 concurrent equal 'Warning' loglines from all Workers in the last 125 seconds) Mar-26-19 16:39:48 [Worker_1] Warning: ClamAV Temporary Off : James. > On 26 Mar 2019, at 1:15 am, Thomas Eckardt <thomas.ecka...@thockar.com> wrote: > > Hi all, > > fixed in assp 2.6.4 *SPAM-Evaporator* build 19084: > > - the resend from block report using the right button failed, if the subject of the mail contained 'x' followed by two digits (eg: x30) > > - using the unix socket for the ClamAV communication failed on some systems > > - assp has thrown an error if the ClamAV, configuration was anyway invalid or not working, but UseAvClamd was disabled > > - the rebuildspamdb task crashed, if the HMMdb contained only one record > > - ASSP_AFC.pm version 5.04 is released > > ASSP_AFC.pm is now able to tell a local mail server or andvanced thread analyzer, if the attached files may need some further investigation or analysis > This is done by adding a special (hiddenly configurable) MIME header tag. > > # advanced thread analyzing or deep thread inspection for incoming mails > $ASSP_AFC::enableATA = 0; # 1- check ATA if an attachment failed, 2- check if any attachment is found, 3- check every mail > $ASSP_AFC::ATAHeaderTag = "X-ASSP-Require-ATA: YES; RESENDLINK;SHOWMAIL;SHOWLOG\r\n"; # the literal RESENDLINK will be replaced by a mailto resendlink, which may be shown by an ATA report mail > # SHOWMAIL offers the link to open the file in the assp file editor > # SHOWLOG offers the link to show the log for the mail in maillogtail (an optional trailing number defines the days in the past e.g. SHOWLOG2 for example - two days is default and used if no number is given) > # every link is preceeded by \r\n\t > > > > > Thomas > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no known virus in this email! > ******************************************************* > > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! *******************************************************
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
