Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Wed May 24, 2017 1:12 pm


MTA, MUA, Qmail, Exchange, Exim, Postfix, Sendmail, Courier, Mirapoint, Vpopmail, pop3, smtp, imap

Author Message
mandrei99
Post  Post subject: qmail + qmail-scanner - qmail-inject: fatal: qq temporary problem / clamdscan: corrupt or unknown  |  Posted: Tue Jan 20, 2015 5:18 pm

Joined: Tue Aug 04, 2009 9:16 am
Posts: 245

Offline
 

qmail + qmail-scanner - qmail-inject: fatal: qq temporary problem / clamdscan: corrupt or unknown

This article treats the following qmail, qmail-scanner and calmav errors:
mail qmail-scanner/clamav qmail-inject: fatal: qq temporary problem / clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2

Code:
# ./test_installation.sh -doit
QMAILQUEUE was not set, defaulting to /var/qmail/bin/qmail-scanner-queue.pl for this test...

Sending standard test message - no viruses...
done!

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died


Trying to install qmail + qmail-scanner + qmail-analog on Freebsd, I had a lot of errors as below when I ran the perl test_installation.sh script:
Code:
# ./test_installation.sh -doit
QMAILQUEUE was not set, defaulting to /var/qmail/bin/qmail-scanner-queue.pl for this test...

Sending standard test message - no viruses...
done!

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died
# tail -f /var/spool/qmailscan/qmail-queue.log
Fri, 05 Dec 2008 14:31:43 CET:42552: This is a PLAIN text message, skip virus scanners - but not SA
Fri, 05 Dec 2008 14:31:46 CET:42552: SA: finished scan in 2.701975 secs - hits=0.0/5.0
Fri, 05 Dec 2008 14:31:46 CET:42552: p_s: finished scan in 0.061701 secs
Fri, 05 Dec 2008 14:31:46 CET:42552: ini_sc: finished scan of "/var/spool/qmailscan/tmp/host.domain.ro122848390380142552"...
Fri, 05 Dec 2008 14:31:46 CET:42552: ------ Process 42552 finished. Total of 2.907712 secs
Fri, 05 Dec 2008 14:31:46 CET:44863: +++ starting debugging for process 44863 (ppid=44733) by uid=0
Fri, 05 Dec 2008 14:31:46 CET:44863: w_c: elapsed time from start 0.011859 secs
Fri, 05 Dec 2008 14:31:46 CET:44863: return-path='', recips='postmaster@domain.ro'
Fri, 05 Dec 2008 14:31:46 CET:44863: from='Qmail-Scanner Test ', subj='Qmail-Scanner viral test (2/4): checking     perlscanner...', via local process 44863
Fri, 05 Dec 2008 14:31:46 CET:44863: error_condition: X-Antivirus-domain.RO-1.25-st-qms: clamdscan: corrupt or unknown clamd scanner error or     memory/resource/perms problem - exit status 512/2
Fri, 05 Dec 2008 14:31:46 CET:44863: ------ Process 44863 finished. Total of 0.098539 secs
Fri, 05 Dec 2008 14:32:38 CET:56295: +++ starting debugging for process 56295 (ppid=55842) by uid=0
Fri, 05 Dec 2008 14:32:38 CET:56295: w_c: elapsed time from start 0.007243 secs
Fri, 05 Dec 2008 14:32:38 CET:56295: return-path='', recips='postmaster@domain.ro'
Fri, 05 Dec 2008 14:32:38 CET:56295: from='Qmail-Scanner Test ', subj='Qmail-Scanner test (1/4): inoffensive mes    sage', via local process 56295


Very important !!: If CLamAntivirus and Qmail-Scanner run as different users, there is a tmp where qmail-scanner puts the attachments, and Clamantivirus checks them. That directory is /var/spool/qmailscan/tmp/ (WHICH BY DEFAULT IS OWNED BY QMAIL-SCANNER USER AND 700 PERMISIONS, CLAMAV BEING UNABLE TO CHECK IT).

THE SOLUTION IS FOR clamdscan: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 512/2 error!!
QMAIL-SCANNER PUTS THE ATTACHMENTS IN /var/spool/qmailscan/tmp and clamav need at least read permissions on this directory so it will be able to scan the attachments.





Top
Display posts from previous:  Sort by  
E-mail friendPrint view
Who is online
Users browsing this forum: No registered users and 1 guest
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO