The softlimit error is a red herring...
F-Secure noted in their release-notes.txt for version 4.50 that 'The program output
has changed...', but didn't go into detail on HOW it changed.
In previous versions, the output looks like:
_______________________________________________________
F-Secure Anti-Virus for i386-linux Release 4.15 build 4370
Frisk Software International F-PROT engine version 3.11 build 802
sign.def version 2003-06-05
fssign2.def version 2003-06-05
fsmacro.def version 2003-06-05
eicar.txt infection: EICAR_Test_File
_______________________________________________________
In version 4.50, the output looks like:
_______________________________________________________
F-Secure Anti-Virus for Linux version 4.50 build 2111
Copyright (c) 1999-2003 F-Secure Corporation. All Rights Reserved.
eicar.txt: Infected: EICAR_Test_File [F-Prot]
eicar.txt: Infected: EICAR-Test-File [AVP]
_______________________________________________________
I had to manually modify qmail-scanner-queue.pl after installing F-Secure 4.50 because
it parses the 'infection:' line to determine if a virus has been found and takes the
appropriate action.
I changed the line in question FROM:
if ($DD =~ /infection:(.*)\n/) {
TO:
if ($DD =~ /Infected: (.*)\n/) {
After I did that, the code behaved correctly without that X-Qmail-Scanner-1.16:
corrupt or unknown Fsecure scanner error.
Whoever is designing the code for future releases of Qmail-Scanner should take this
into consideration if you are going to continue to claim compatability with F-Secure.
Sincerely,
Tim Miller
Systems Administrator, Computing Services
Trent University, Peterborough, Ontario, Canada
______________________________________________________
From: Dennis Duval <[EMAIL PROTECTED]>
Re: re: Problem with f-secure 4.50
2003-05-06 08:52
Greg Kelley wrote:
> Try compiling qmail-scanner with debug=yes and look in:
>
> /var/spool/qmailscan/qmail-queue.log
>
> for the f-secure output after you run the test.
>
05/05/2003 10:52:56:9336: --output of fsecure was:
F-Secure Anti-Virus for Linux version 4.50 build 2111
Copyright (c) 1999-2003 F-Secure Corporation. All Rights Reserved.
yoda10521499764269336/1052149976.9338-0.yoda - clean
yoda10521499764269336/sneaky.txt: Infected: EICAR-Test-File [AVP]
yoda10521499764269336/sneaky.txt: Infected: EICAR_Test_File [F-Prot]
2 files scanned
1 file infected
--
05/05/2003 10:52:56:9336: tempfail: X-Qmail-Scanner-1.16: corrupt or unknown
Fsecure scanner error or memory/resource/perms problem - exit status 3
> If you are running daemontools, you must set softlimit to
> 9000000 or it will croak.
My softlimit is set at 16000000
Dennis Duval
--
Tim Miller, Systems Administrator,
Computing and Telecommunications Services
Trent University, Peterborough ON
______________________________________________
-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
