Le ven 30/04/2004 � 00:38, Jason Haar a �crit :
> On Thu, Apr 29, 2004 at 06:40:12PM +0200, Sylvain BOILY wrote:
> > Hi,
> > 
> > There is a bug with disallowed protected zip. With hotmail or
> > squirrelmail or Outlook, function don't work because you catch  .zip$.
> > When the file is rename with squirrelmail the filename is ".zip__". I
> > modified and it work now.
> 
> Well that's a bit hacky all right :-)
> 
> Can you send me a sample of email that demonstrates the problem instead?
> 
> Please put it into a zip file so that it isn't corrupted in any way
> 
> Thanks


Yes, this is the debug from a mail who i've send from
squirrelmail.(outlook or hotmail ... is the same)

DEBUG S: containt the name of the file just before the if.


-------------------------------------------------------

Thu, 29 Apr 2004 18:19:25 CEST:13055: all finished. Total of 1.72732
secs
Thu, 29 Apr 2004 18:19:27 CEST:13107: +++ starting debugging for process
13107 by uid=1004
Thu, 29 Apr 2004 18:19:27 CEST:13107: setting UID to EUID so
subprocesses can access files generated by this script
Thu, 29 Apr 2004 18:19:27 CEST:13107: program name is
qmail-scanner-queue.pl, version 1.22
Thu, 29 Apr 2004 18:19:27 CEST:13107: incoming SMTP connection from via
SMTP from 217.19.50.69
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: mkdir
/var/spool/qmailscan/tmp/wario-mail3108325556748213107
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: start dumping incoming msg
into /var/spool/qmailscan/working/tmp/wario-mail3108325556748213107
[1083255567.11518]
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: primary Content-Type of
multipart/mixed found
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: found a top-level boundary
definition of \-\-\-\-\=_20040429172735_72624
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: attachment  1: Content-Type
of text/plain found
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: attachment  2: Content-Type
of application/octet-stream found
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: base64 looks like a zip file,
filename=,type=application/octet-stream
Thu, 29 Apr 2004 18:19:27 CEST:13107: w_c: rename new msg from
/var/spool/qmailscan/working/tmp/wario-mail3108325556748213107 to
/var/spool/qmailscan/working/new/wario-mail3108325556748213107
[1083255567.12132]
Thu, 29 Apr 2004 18:19:27 CEST:13107: d_m: starting
/usr/local/bin/reformime 
-x/var/spool/qmailscan/tmp/wario-mail3108325556748213107/
</var/spool/qmailscan/working/new/wario-mail3108325556748213107
[1083255567.1216]
Thu, 29 Apr 2004 18:19:27 CEST:13107: d_m: finished
/usr/local/bin/reformime 
-x/var/spool/qmailscan/tmp/wario-mail3108325556748213107/
[1083255567.1278]
Thu, 29 Apr 2004 18:19:27 CEST:13107: d_m: Checking all attachments to
see if they're MS-TNEF
Thu, 29 Apr 2004 18:19:27 CEST:13107: d_m: is
/var/spool/qmailscan/tmp/wario-mail3108325556748213107/1083255567.13109-0.wario-mail3 
is a TNEF file?: 256 [1083255567.12935]
Thu, 29 Apr 2004 18:19:27 CEST:13107: d_m: is
/var/spool/qmailscan/tmp/wario-mail3108325556748213107/dg_E9taire_5FD_E9di_E9e-v1.zip__
 is a TNEF file?: 256 [1083255567.13101]
Thu, 29 Apr 2004 18:19:27 CEST:13107: d_m: Check for zip files...
Thu, 29 Apr 2004 18:19:27 CEST:13107: DEBUG S:
1083255567.13109-0.wario-mail3
Thu, 29 Apr 2004 18:19:27 CEST:13107: DEBUG S:
dg_E9taire_5FD_E9di_E9e-v1.zip__
Thu, 29 Apr 2004 18:19:27 CEST:13107: d_m: unpacking message took
0.009775 seconds
Thu, 29 Apr 2004 18:19:27 CEST:13107: unsetting QMAILQUEUE env var
Thu, 29 Apr 2004 18:19:27 CEST:13107: g_e_h: return-path is
"[EMAIL PROTECTED]", recips is "[EMAIL PROTECTED]"
Thu, 29 Apr 2004 18:19:27 CEST:13107: from="Quintana"
<[EMAIL PROTECTED]>,subj=test,
x-qmail-scanner-message-id=<[EMAIL PROTECTED]> via SMTP from 217.19.50.69
Thu, 29 Apr 2004 18:19:27 CEST:13107: ini_sc: start scanning
Thu, 29 Apr 2004 18:19:27 CEST:13107: ini_sc: recursively scan the
directory /var/spool/qmailscan/tmp/wario-mail3108325556748213107/
Thu, 29 Apr 2004 18:19:27 CEST:13107: scanloop: starting scan of
directory "/var/spool/qmailscan/tmp/wario-mail3108325556748213107"...
Thu, 29 Apr 2004 18:19:27 CEST:13107: scanloop:
scanner=clamdscan_scanner,plain_text_msg=0
Thu, 29 Apr 2004 18:19:27 CEST:13107: clamdscan: starting scan of
directory "/var/spool/qmailscan/tmp/wario-mail3108325556748213107"...
Thu, 29 Apr 2004 18:19:27 CEST:13107: run /usr/local/bin/clamdscan -r
--disable-summary --max-recursion=10 --max-space=100000 
/var/spool/qmailscan/tmp/wario-mail3108325556748213107 2>&1
Thu, 29 Apr 2004 18:19:27 CEST:13107: --output of clamdscan was:
/var/spool/qmailscan/tmp/wario-mail3108325556748213107: OK
--
Thu, 29 Apr 2004 18:19:27 CEST:13107: clamdscan: finished scan of dir
"/var/spool/qmailscan/tmp/wario-mail3108325556748213107" in 0.009759
secs
Thu, 29 Apr 2004 18:19:27 CEST:13107: scanloop:
scanner=fprot_scanner,plain_text_msg=0
Thu, 29 Apr 2004 18:19:27 CEST:13107: fprot: starting scan of directory
"/var/spool/qmailscan/tmp/wario-mail3108325556748213107"...
Thu, 29 Apr 2004 18:19:27 CEST:13107: run /usr/local/bin/f-prot  -list
-archive -dumb  /var/spool/qmailscan/tmp/wario-mail3108325556748213107 
2>&1
Thu, 29 Apr 2004 18:19:27 CEST:13107: --output of fprot was:
Virus scanning report  -  29. April 2004   18:19

F-PROT 3.12d
SIGN.DEF created 29. April 2004
SIGN2.DEF created 29. April 2004
MACRO.DEF created 21. April 2004

Search: /var/spool/qmailscan/tmp/wario-mail3108325556748213107
Action: Report only
Files: "Dumb" scan of all files
Switches: /ARCHIVE /AI

/var/spool/qmailscan/tmp/wario-mail3108325556748213107/orig-wario-mail3108325556748213107->->Synthse
 Budgtaire Ddie-v1.xls  Not scanned (encrypted)
/var/spool/qmailscan/tmp/wario-mail3108325556748213107/dg_E9taire_5FD_E9di_E9e-v1.zip__->Synthse
 Budgtaire Ddie-v1.xls  Not scanned (encrypted)

Results of virus scanning:

Files: 3
MBRs: 0
Boot sectors: 0
Objects scanned: 2

Time: 0:00

--------------------------------------

Regards,
Sylvain


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id�66&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to