Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Tue Oct 22, 2019 10:33 am


Username:
Subject:
Message body:
Enter your message here, it may contain no more than 60000 characters. 

Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:
Font size:
 
Font colour
Options:
BBCode is ON
[img] is ON
[flash] is OFF
[url] is ON
Smilies are ON
Disable BBCode
Disable smilies
Do not automatically parse URLs
Confirmation code
Confirmation code:
In an effort to prevent automatic submissions, we require that you enter both of the words displayed into the text field underneath.
     

Topic review - qmail + qmail-scanner - qmail-inject: fatal: qq temporary problem / clamdscan: corrupt or unknown
Author Message
Post subject: qmail + qmail-scanner - qmail-inject: fatal: qq temporary problem / clamdscan: corrupt or unknown  |  Post Posted: Tue Jan 20, 2015 5:18 pm
This article treats the following qmail, qmail-scanner and calmav errors:
mail qmail-scanner/clamav qmail-inject: fatal: qq temporary problem / clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2

Code:
# ./test_installation.sh -doit
QMAILQUEUE was not set, defaulting to /var/qmail/bin/qmail-scanner-queue.pl for this test...

Sending standard test message - no viruses...
done!

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died


Trying to install qmail + qmail-scanner + qmail-analog on Freebsd, I had a lot of errors as below when I ran the perl test_installation.sh script:
Code:
# ./test_installation.sh -doit
QMAILQUEUE was not set, defaulting to /var/qmail/bin/qmail-scanner-queue.pl for this test...

Sending standard test message - no viruses...
done!

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died
# tail -f /var/spool/qmailscan/qmail-queue.log
Fri, 05 Dec 2008 14:31:43 CET:42552: This is a PLAIN text message, skip virus scanners - but not SA
Fri, 05 Dec 2008 14:31:46 CET:42552: SA: finished scan in 2.701975 secs - hits=0.0/5.0
Fri, 05 Dec 2008 14:31:46 CET:42552: p_s: finished scan in 0.061701 secs
Fri, 05 Dec 2008 14:31:46 CET:42552: ini_sc: finished scan of "/var/spool/qmailscan/tmp/host.domain.ro122848390380142552"...
Fri, 05 Dec 2008 14:31:46 CET:42552: ------ Process 42552 finished. Total of 2.907712 secs
Fri, 05 Dec 2008 14:31:46 CET:44863: +++ starting debugging for process 44863 (ppid=44733) by uid=0
Fri, 05 Dec 2008 14:31:46 CET:44863: w_c: elapsed time from start 0.011859 secs
Fri, 05 Dec 2008 14:31:46 CET:44863: return-path='', recips='postmaster@domain.ro'
Fri, 05 Dec 2008 14:31:46 CET:44863: from='Qmail-Scanner Test ', subj='Qmail-Scanner viral test (2/4): checking     perlscanner...', via local process 44863
Fri, 05 Dec 2008 14:31:46 CET:44863: error_condition: X-Antivirus-domain.RO-1.25-st-qms: clamdscan: corrupt or unknown clamd scanner error or     memory/resource/perms problem - exit status 512/2
Fri, 05 Dec 2008 14:31:46 CET:44863: ------ Process 44863 finished. Total of 0.098539 secs
Fri, 05 Dec 2008 14:32:38 CET:56295: +++ starting debugging for process 56295 (ppid=55842) by uid=0
Fri, 05 Dec 2008 14:32:38 CET:56295: w_c: elapsed time from start 0.007243 secs
Fri, 05 Dec 2008 14:32:38 CET:56295: return-path='', recips='postmaster@domain.ro'
Fri, 05 Dec 2008 14:32:38 CET:56295: from='Qmail-Scanner Test ', subj='Qmail-Scanner test (1/4): inoffensive mes    sage', via local process 56295


Very important !!: If CLamAntivirus and Qmail-Scanner run as different users, there is a tmp where qmail-scanner puts the attachments, and Clamantivirus checks them. That directory is /var/spool/qmailscan/tmp/ (WHICH BY DEFAULT IS OWNED BY QMAIL-SCANNER USER AND 700 PERMISIONS, CLAMAV BEING UNABLE TO CHECK IT).

THE SOLUTION IS FOR clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 error!!
QMAIL-SCANNER PUTS THE ATTACHMENTS IN /var/spool/qmailscan/tmp and clamav need at least read permissions on this directory so it will be able to scan the attachments.
Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO