Re: [Clamav-users] reject=451 4.7.1 Please try again later

[Joe Maimon]

Joe Maimon wrote:

I have been having the same as well.

I added some more verbosity into the syslog statement and got this logged

write failure to clamd, nbytes: -1, quarantine_dir: (null), error: Bad 
file descriptor

Any ideas?


OK I think I know what the problem is. Large attachments.
this got logged in my clamav syslog - I probaly turned on debugging or 
something

ScanStream: Size exceeded (stopped at 10453272, max: 10485760

I also grabbed one of the continually tempfailed emails. 11M attachment.

See this from clamd/scanner.c
Apparently the socket gets closed.
If this is right, shouldnt this be changed to just throw the bytes out 
instead of closing the socket?
Also the scantimeout needs to jive with the mail daemon timeouts.

I will see if I can work on some fix to test this.

(line 265)

while((retval = poll_fd(acceptd, CL_DEFAULT_SCANTIMEOUT)) == 1) {
           bread = read(acceptd, buff, sizeof(buff));
           if (bread <= 0) {
               break;
           }
           size += bread;
           if(maxsize && (size + sizeof(buff)) > maxsize) {
               shutdown(sockfd, 2);
               close(sockfd);
               close(acceptd);
               mdprintf(odesc, "Size exceeded ERROR\n");
               logg("^ScanStream: Size exceeded (stopped at %d, max: 
%d)\n", size, maxsize);
               if(tmp)
                   fclose(tmp);
               return -1;
           }

           if(write(tmpd, buff, bread) < 0) {
               shutdown(sockfd, 2);
               close(sockfd);
               close(acceptd);
               mdprintf(odesc, "Temporary file -> write ERROR\n");
               logg("!ScanStream: Can't write to temporary file.\n");
               if(tmp)
                   fclose(tmp);
               return -1;
           }


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users