Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

This article treats the following qmail, qmail-scanner and calmav errors:
[b]mail qmail-scanner/clamav qmail-inject: fatal: qq temporary problem / clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2[/b]

[code]# ./test_installation.sh -doit
QMAILQUEUE was not set, defaulting to /var/qmail/bin/qmail-scanner-queue.pl for this test...

Sending standard test message - no viruses...
done!

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died[/code]

Trying to install qmail + qmail-scanner + qmail-analog on Freebsd, I had a lot of errors as below when I ran the perl test_installation.sh script:
[code]# ./test_installation.sh -doit
QMAILQUEUE was not set, defaulting to /var/qmail/bin/qmail-scanner-queue.pl for this test...

Sending standard test message - no viruses...
done!

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died
# tail -f /var/spool/qmailscan/qmail-queue.log
Fri, 05 Dec 2008 14:31:43 CET:42552: This is a PLAIN text message, skip virus scanners - but not SA
Fri, 05 Dec 2008 14:31:46 CET:42552: SA: finished scan in 2.701975 secs - hits=0.0/5.0
Fri, 05 Dec 2008 14:31:46 CET:42552: p_s: finished scan in 0.061701 secs
Fri, 05 Dec 2008 14:31:46 CET:42552: ini_sc: finished scan of "/var/spool/qmailscan/tmp/host.domain.ro122848390380142552"...
Fri, 05 Dec 2008 14:31:46 CET:42552: ------ Process 42552 finished. Total of 2.907712 secs
Fri, 05 Dec 2008 14:31:46 CET:44863: +++ starting debugging for process 44863 (ppid=44733) by uid=0
Fri, 05 Dec 2008 14:31:46 CET:44863: w_c: elapsed time from start 0.011859 secs
Fri, 05 Dec 2008 14:31:46 CET:44863: return-path='', recips='postmaster@domain.ro'
Fri, 05 Dec 2008 14:31:46 CET:44863: from='Qmail-Scanner Test ', subj='Qmail-Scanner viral test (2/4): checking perlscanner...', via local process 44863
Fri, 05 Dec 2008 14:31:46 CET:44863: error_condition: X-Antivirus-domain.RO-1.25-st-qms: clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2
Fri, 05 Dec 2008 14:31:46 CET:44863: ------ Process 44863 finished. Total of 0.098539 secs
Fri, 05 Dec 2008 14:32:38 CET:56295: +++ starting debugging for process 56295 (ppid=55842) by uid=0
Fri, 05 Dec 2008 14:32:38 CET:56295: w_c: elapsed time from start 0.007243 secs
Fri, 05 Dec 2008 14:32:38 CET:56295: return-path='', recips='postmaster@domain.ro'
Fri, 05 Dec 2008 14:32:38 CET:56295: from='Qmail-Scanner Test ', subj='Qmail-Scanner test (1/4): inoffensive mes sage', via local process 56295[/code]

Very important !!: If CLamAntivirus and Qmail-Scanner run as different users, there is a tmp where qmail-scanner puts the attachments, and Clamantivirus checks them. That directory is /var/spool/qmailscan/tmp/ (WHICH BY DEFAULT IS OWNED BY QMAIL-SCANNER USER AND 700 PERMISIONS, CLAMAV BEING UNABLE TO CHECK IT).

THE SOLUTION IS FOR clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 error!!
QMAIL-SCANNER PUTS THE ATTACHMENTS IN /var/spool/qmailscan/tmp and clamav need at least read permissions on this directory so it will be able to scan the attachments.