Re: quarantine directory not working dor vscan-sophos

Am Dienstag, 7. Dezember 2004 11:56 schrieb Rainer Link:
> If no config file is used, the defaults are "vir-" and "/tmp", but the
> log snippet shows "vxx-" and "/var/tmp", so vscan-sophos seems to read
> a config file. Do you have two entries of [vscan]?
no, definitely not:
thomas:~ # grep vscan /etc/samba/vscan-sophos.conf 
[samba-vscan]
; run-time configuration for vscan-samba using
; of period, samba-vscan use a last recently used file mechanism to avoid

> You might set the "debug level = 3" in smb.conf and then check the log
> file of smbd (e.g. /usr/local/samba/var/log.smbd. samba-vscan prints
> out all settings parsed from the configuration file then.
it shows:
[2004/12/07 12:01:28, 3] param/params.c:pm_process(566)
  params.c:pm_process() - Processing configuration file "/etc/samba/vscan-sophos.conf"
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(98)
  max file size is: 0
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(101)
  verbose file logging is: 0
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(104)
  scan on open: 1
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(107)
  scan on close is: 1
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(110)
  deny access on error is: 1
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(113)
  deny access on minor error is: 1
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(116)
  send warning message is: 0
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(128)
  infected file action is: 0
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(131)
  quarantine directory is: /virus/
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(134)
  quarantine prefix is: vxx-
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(137)
  max lru files entries is: 100
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(140)
  lru file entry lifetime is: 5
[2004/12/07 12:01:28, 3] sophos/vscan-sophos.c:do_parameter(143)
  sophie socket name is /var/run/sophie
...



Thomas



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/