Re: Stopping Sophie doesn't work very well

"Emver Buenaventura" <[email protected]> Tue, 16 Mar 2004 19:44:53 +0800
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
----- Original Message -----
From: "Peter de Bruine" <[email protected]>
To: <[email protected]>
Sent: Wednesday, March 10, 2004 9:23 PM
Subject: [vtools] Stopping Sophie doesn't work very well


> 1 When i try to stop sophie using sophie -stop it won't stop sophie very
> well. Not all daemons are killed of. So i have to do a kill to the
remaining
> daemons. Is there any way around this?? Perhaps this is the problem, when
i
> stop sophie i see this in the output:

Perhaps the interface that calls your Sophie isn't finished yet using the
child process.
I'm using Amavisd-new and Sophie and when I want to kill it, I only kill the
main
daemon and restart it again.  All the child process will eventually die
after some idle
time.

>
> 2 I'm having a wierd problem. I have Postfix with amavisd-new SpamAssassin
> and Sophie and it detects virussus very wel but from time to time virusses
> get past the filter and i can't find any record about the entire mail in
the
> amavisd or postfix log. Does this have to do with Sophie??

It could be that the Sophie is scanning an unknown virus.  As far as I know,
the
MTA should queue all incoming mails and will not let any mail pass without
being scanned by the antivirus.

Good luck.