On Fri, 8 Aug 2003 10:34:47 -0700
Scott Kveton <[EMAIL PROTECTED]> wrote:
> Aug 8 09:55:38 smtp1 amavis[28419]: (28419-10) ESMTP::10024
> /var/lib/amavis/amavis-20030808T094257-28419: <[EMAIL PROTECTED]> -> <[EMAIL
> PROTECTED]> Received: SIZE=1418815 from
> smtp1.oregonstate.edu ([127.0.0.1]) by
> localhost (smtp1 [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28419-10 for
> <[EMAIL PROTECTED]>; Fri, 8 Aug 2003 09:55:38 -0700 (PDT)
> Aug 8 09:55:38 smtp1 amavis[28419]: (28419-10) Checking: <[EMAIL PROTECTED]> ->
> <[EMAIL PROTECTED]>
> Aug 8 09:55:38 smtp1 amavis[28419]: (28419-10) Decoding of part-00002 (Zip archive
> data, at least v2.0 to extract) failed, leaving it unpacked: error: inflate error -3
>
> Followed shortly thereafter by:
>
> Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) Clam Antivirus-clamd FAILED -
> unknown status: Session(0): Time out ERROR\n
> Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) WARN: all primary virus scanners
> failed, trying backups
> Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) Virus scanner failure:
> /usr/bin/clamscan (exit status: 139)
> Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) TROUBLE in check_mail: virus_scan
> FAILED: ALL VIRUS SCANNERS FAILED:
> Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) PRESERVING EVIDENCE in
> /var/lib/amavis/amavis-20030808T094257-28419
> Aug 8 09:56:16 smtp1 amavis[28419]: (28419-10) TIMING [total 38761 ms] - SMTP EHLO:
> 2 (0%), SMTP pre-MAIL: 0 (0%), SMTP pre-DATA-flush: 2 (0%), SMTP DATA: 109 (0%),
> body hash: 11 (0%), mime_decode:
> 107 (0%), get-file-type: 9 (0%), get-f
> ile-type: 6 (0%), decompose_part: 1 (0%), decompose_part: 6 (0%), get-file-type: 6
> (0%), decompose_part: 1 (0%), parts: 0 (0%), AV-scan-1: 38348 (99%), AV-scan-2: 152
> (0%), rundown: 1 (0%)
> Aug 8 09:56:16 smtp1 postfix/smtp[28517]: 278B3128255: to=<[EMAIL PROTECTED]>,
> relay=127.0.0.1[127.0.0.1], delay=6234, status=deferred (host 127.0.0.1[127.0.0.1]
> said: 451 4.5.0 Error in
> processing, id=28419-10, virus_scan FA
> ILED: ALL VIRUS SCANNERS FAILED: )
>
> Immediately following this clamd would go belly up. Once I deleted that
> message from my queue, all was well.
This is a problem with the zziplib library, We've already received some zip samples
that cause a segfault and are working on it. I think, you can safely disable
ScanArchive
when using amavisd-new.
Best regards,
Tomasz Kojm
--
oo ..... [EMAIL PROTECTED]
(\/)\......... http://www.konarski.edu.pl/~zolw
\..........._ I nie zapomnij kliknac w brzuszek...
//\ /\\ <- C. Amboinensis www.pajacyk.pl
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
