On Thu, Nov 13, 2003 at 10:19:51PM +0100, Samuel Murez wrote: > Ken wrote: > >>>>> Nov 13 01:43:38 yoruban X-Qmail-Scanner-1.20: > >>>>> [yoruban.dyndns.org106868421846115750] clamuko: corrupt or > >>>>> unknown clamd > >>>>> scanner error or memory/resource/perms problem - exit status > >>>>> 16777215 > >>>>> > >>>>> I have just reinstalled clamav 0.65 on RedHat 9 following > >>>>> http://clamav.elektrapro.com/doc/clamd_supervised/clamd-daemon > >>>> > >>>> tools-guide.txt > >>>> > >>>> I would suggest checking the clamav mailing lists. You > >> will probably > >>>> find > >>>> more people there who understand these types of errors. It looks > >>>> like a > >>>> clamav problem to me. And since you said RH 9, another thought pops > >>>> into my head: library incompatibilities... > >>> > >>> or ....an increase of softlimit in the qmail supervise (run) script > >>> and/or the clamd supervise (run) script is a first guess that might > >>> help > >>> you. What are your softlimit value(s)? > >> > >> Thanks for answering. > >> qmail-smtpd/run softlimit 20 000 000 > >> clamd/log/run softlimit : that would be the sXXXXXXX value ? > >> 10 000 000 > >> > >> what should I check about library incompatibilites ? > >> > >> thanks, > >> > >> --sam > >> > >> > > > > hmmm, does clamav run directly? Can you scan with it on the > > commandline? If it doesn't work you need to read the clamav FAQ, > > and/or check with a clamav LIST/WEBSITE. > > > > If it DOES work on the commandline, well then I just don't know. So > > there. The library incompatibilities would probably have manifested > > themselves during the compilation of the clamav software, and the > > software would not execute. > > > > You said that text messages work but html messages do not? That's > > just SILLY talk. So a text message is scanned by clamav? But an html > > message produces the error? That's SILLY! What the hell are you doing > > over there Samuel? If that is truly the case, then you should > > probably look at the commandline used to perform the scan. See what > > parameters are used and try to perform the same action from the > > commandline yourself. That should not happen obviously, if the > > program was not INSANE. Perhaps you could take that same message and > > pipe it to clamav using those parameters and see what happens. I hope > > no pigs fly outta your arse when you do! > > > > Ken > > First of all, thanks for helping me with this ! I'm going crazy here and my > server is also berserk. Thanks also for the direct cc. > > # clamscan -r -l scan.txt /home/baronsam/qmailrocks/clamav-0.65 > worked fine, yielded a very nice summary, it found 4 infected files which I > believe are supposed to be there.
Does clamdscan work from the command line? qmail-scanner calls clamd/clamdscan clamuko. I thought you could turn on debugging to get a more helpful message in qmail-scanner. If you set in /var/qmail/bin/qmail-scanner.pl or wherever it's installed: #Name of file in $scandir where debugging output goes my $debuglog="qmail-queue.log"; #Want debugging? Enable this and read $scandir/qmail-queue.log my $DEBUG='1'; Then you can look in <qmail-scanner spool dir>/qmail-queue.log and you should have more info on whats going on, or at least can send to us the output of a failed run and someone might point you in the right direction. > <SILLY talk> when I send a message through, in text format, it goes through. > when I send a message through in HTML format, it doesn't, and I get the > error message in maillog. When I send a 36k text message it still goes > through, when I send a single line html format message it doesn't, and > maillog gets (at least) another line of (surprise) the same error message > </SILLY talk> > > "what the hell am I doing over here ? " well, bear in mind that I am in > France, and half-french myself, and that we DO eat frog legs in this > country...so above average amounts of weirdness are to be expected > > I don't know where Qmail-Scanner is running clamav from. It detected clamav > scanning on install, and supposedly configured itself to use it (as well as > spamassassin)...so I guess the next step is (once again) reinstalling > qmail-scanner... but any ideas or information about how all this fits > together would be very welcome ! supposedly I'm using qmail 1.03 with > qmailqueue patch, vpopmail, qmail-scanner 1.20, spamassassin 2.60, clamav > 0.65. this is terrible : with all this reinstalling going on all the time, > I'm starting to feel like I'm back on Windows... > > and... I don't want any pigs to fly out of my arse at any point. that would > probably be very painful. Although this is not a very likely event as it has > never occured up to this point. -- Damien ------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
