On Fri, 08 Aug 2003 at 10:34:47 -0700, Scott Kveton wrote: > [...] > Aug 8 09:55:38 smtp1 amavis[28419]: (28419-10) Decoding of part-00002 (Zip archive > data, at least v2.0 to extract) failed, leaving it unpacked: error: inflate error -3 > > Followed shortly thereafter by: > > Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) Clam Antivirus-clamd FAILED - > unknown status: Session(0): Time out ERROR\n > Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) WARN: all primary virus scanners > failed, trying backups > Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) Virus scanner failure: > /usr/bin/clamscan (exit status: 139) > Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) TROUBLE in check_mail: virus_scan > FAILED: ALL VIRUS SCANNERS FAILED: > Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) PRESERVING EVIDENCE in > /var/lib/amavis/amavis-20030808T094257-28419 > Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) TIMING [total 38761 ms] - SMTP EHLO: > 2 (0%), SMTP pre-MAIL: 0 (0%), SMTP pre-DATA-flush: 2 (0%), SMTP DATA: 109 (0%), > body hash: 11 (0%), mime_decode: > 107 (0%), get-file-type: 9 (0%), get-f > ile-type: 6 (0%), decompose_part: 1 (0%), decompose_part: 6 (0%), get-file-type: 6 > (0%), decompose_part: 1 (0%), parts: 0 (0%), AV-scan-1: 38348 (99%), AV-scan-2: 152 > (0%), rundown: 1 (0%) > Aug 8 09:56:16 smtp1 postfix/smtp[28517]: 278B3128255: to=<[EMAIL PROTECTED]>, > relay=127.0.0.1[127.0.0.1], delay=6234, status=deferred (host 127.0.0.1[127.0.0.1] > said: 451 4.5.0 Error in > processing, id=28419-10, virus_scan FA > ILED: ALL VIRUS SCANNERS FAILED: ) > > Immediately following this clamd would go belly up. Once I deleted that > message from my queue, all was well. > > Anybody else see this problem? Its got to have something to do with the > the attachment in that file. Unfortunately I deleted it just to get mail > moving again. >
Fortunately I haven't bumped onto similar situation yet. Scott, are you using exactly 0.60 version? The last newest one in Debian was 0.60-4 which contained some bug fixes. The current newest is 0.60-5 (today released; not yet backported to Woody). Though I can't help you with the real reason of that problem, I'm definitely encouraging you to send such fatal email messages (if privacy permits) to developers of Clamav. If it happens again, please don't delete such message from the queue but just move it to secure location so that it can be examined later. And update the Clamav packages when there's a new version, as Clamav is being actively developed and corrected :-) . -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
