Hi,
You probably have exactly the same problem I try to fix since one month with QMail-Scanner and ClamAV.
I had the same symptoms (tests working fine but real mails passing true, except for internal Mail-Scanner Virii).
Go see the smtpd log (/var/log/qmail/smtpd/current): you probably will see "access denied" lines each time your AV scanner is called. In my situation it is:
Tue, 11 Nov 2003 23:35:30 +0000:19285: --output of clamscan was:
/var/spool/qmailscan/tmp/mydomain.be106859013046119285/1068590131.19287-0.mydomain.be: Access denied.
/var/spool/qmailscan/tmp/mydomain.be 106859013046119285/1068590131.19287-1.mydomain.be: Access denied.
/var/spool/qmailscan/tmp/mydomain.be 106859013046119285/orig-mydomain.be106859013046119285: Access denied.
I am sorry to say this, but I am not getting *any* error messages at all, even though my situation is very similar...
Here is a chunk of my smtpd log (/var/log/qmail/smtpd/current):
2003-11-13 20:04:02.658932500 tcpserver: end 19143 status 0
2003-11-13 20:04:02.658939500 tcpserver: status: 0/20
2003-11-13 20:56:42.414269500 tcpserver: status: 1/20
2003-11-13 20:56:42.414456500 tcpserver: pid 19145 from 129.33.162.8
2003-11-13 20:56:42.429620500 tcpserver: ok 19145 0:209.115.249.138:25 ebhs-129-
33-162-8.tor.usf.ibm.com:129.33.162.8::15233
2003-11-13 20:57:12.016798500 tcpserver: end 19145 status 0
2003-11-13 20:57:12.016805500 tcpserver: status: 0/20
2003-11-13 21:08:10.563420500 tcpserver: status: 1/20
2003-11-13 21:08:10.563606500 tcpserver: pid 19164 from 217.226.129.204
2003-11-13 21:08:10.934914500 tcpserver: ok 19164 0:209.115.249.138:25 pd9e281cc
.dip0.t-ipconnect.de:217.226.129.204::3940
2003-11-13 21:09:22.028783500 tcpserver: end 19164 status 0
2003-11-13 21:09:22.028791500 tcpserver: status: 0/20
2003-11-13 21:30:54.812816500 tcpserver: status: 1/20
2003-11-13 21:30:54.812998500 tcpserver: pid 19181 from 129.33.162.8
2003-11-13 21:30:54.827107500 tcpserver: ok 19181 0:209.115.249.138:25 ebhs-129-
33-162-8.tor.usf.ibm.com:129.33.162.8::26444
2003-11-13 21:31:10.435873500 tcpserver: end 19181 status 0
2003-11-13 21:31:10.435878500 tcpserver: status: 0/20
2003-11-13 21:38:25.265702500 tcpserver: status: 1/20
2003-11-13 21:38:25.265865500 tcpserver: pid 19198 from 218.15.87.155
Everything looks fine here.
I haven't got a clue what is happening. Nobody has seen this kind of behaviour before?
Cheers,
-Stephen-
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
