Strange error
"Chris Berry" <[email protected]> Fri, 29 Mar 2013 13:41:38 -0700
| Newsgroups | gmane.mail.qmail.scanner |
|---|---|
| Message-ID | <[email protected]> |
This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --===============9063646149817614159== Content-Type: multipart/alternative; boundary="=__Part02320B92.0__=" This is a MIME message. If you are reading this text, you may want to consider changing to a mail reader or gateway that understands how to properly handle MIME multipart messages. --=__Part02320B92.0__= Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable I'm having a problem where one of my users can't receive emails with = attachments from a single customer. When the message first comes in I get = the following in /var/log/qmail/smtpd/current:=20 2013-03-29 09:42:33.680656500.s:@400000005155c38507dbecbc tcpserver: pid = 21905 from 192.104.67.3=20 2013-03-29 09:42:33.680656500.s:@400000005155c38507df963c tcpserver: ok = 21905 relay.davistl.com:192.168.200.25:25 mail2.eaton.com:192.104.67.3::296= 29=20 2013-03-29 09:42:33.680656500.s:@400000005155c3862bf16d84 mailfront[21905]:= MAIL FROM:<[email protected]> SIZE=3D7823876=20 2013-03-29 09:42:33.680656500.s:@400000005155c3862bf17554 mailfront[21905]:= RCPT TO:<[email protected]>=20 2013-03-29 09:42:33.680656500.s:@400000005155c3a0379e1b14 mailfront[21905]:= 451 4.3.0 Temporary qmail-queue failure.=20 2013-03-29 09:42:33.680656500.s:@400000005155c3a0379e1efc mailfront[21905]:= bytes in: 7823992 bytes out: 285=20 2013-03-29 09:42:33.680656500.s:@400000005155c3a037a097cc tcpserver: end = 21905 status 0=20 Initially I thought softlimit might not be high enough, but increasing it = didn't help and emailing a file with an even larger attachment from one of = my accounts worked fine:=20 2013-03-29 09:52:39.069600500 tcpserver: pid 23160 from 205.188.105.147=20 2013-03-29 09:52:39.165676500 tcpserver: ok 23160 relay.davistl.com:192.168= .200.25:25 imr-da05.mx.aol.com:205.188.105.147::64354=20 2013-03-29 09:52:41.803962500 mailfront[23160]: MAIL FROM:<[email protected]= om> SIZE=3D11808740=20 2013-03-29 09:52:41.803964500 mailfront[23160]: RCPT TO:<[email protected]>= =20 2013-03-29 09:53:12.182697500 mailfront[23160]: 2.6.0 Accepted message qp = 23162 bytes 11657485=20 2013-03-29 09:53:12.182698500 mailfront[23160]: bytes in: 11808855 bytes = out: 295=20 2013-03-29 09:53:12.182819500 tcpserver: end 23160 status 0=20 After reading some of the mailfront code it didn't look like the problem = was there, so I looked at /var/spool/qscan/qmail-queue.log and found = messages like this:=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: +++ starting debugging for process = 24830 by uid=3D1003=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: setting UID to EUID so subprocesses = can access files generated by this script=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: program name is qmail-scanner-queue.pl= , version 2.10=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: mkdir /var/spool/qscan/tmp/relay1= 36457719958624830=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: start dumping incoming msg into = /var/spool/qscan/working/tmp/relay136457719958624830 [0.000262]=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: c_a_g: found MIME attachment=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: primary Content-Type of = multipart/mixed found=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: found a top-level boundary = definition of _004_5137F0726DAB194A9D1D9AC87004F6D309F90ASIMTCSMB06napaade_= =20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: attachment 1: Content-Type of = multipart/alternative found=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: attachment 2: Content-Type of = text/plain found=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: attachment 3: Content-Type of = text/html found=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: found C-T attachment filename = "1c17784.zip"=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: attachment 5: Content-Type of = application/x-zip-compressed found=20 Fri, 29 Mar 2013 10:13:19 PDT:24830: w_c: base64 looks like a zip file, = filename=3D1c17784.zip,type=3Dapplication/x-zip-compressed=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: w_c: rename new msg from /var/spool/qs= can/working/tmp/relay136457719958624830 to /var/spool/qscan/working/new/rel= ay136457719958624830=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: w_c: total time between DATA command = and "." was 18.987336 secs=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: w_c: (this is basically the time it = took the client to send the message over the network=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: w_c: resetting timer so as to measure = actual Qmail-Scanner processing time=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: incoming SMTP connection from via = SMTP from mail2.eaton.com=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: starting /usr/bin/reformime = -x/var/spool/qscan/tmp/relay136457719958624830/ </var/spool/qscan/working/n= ew/relay136457719958624830 [0.000246]=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: finished /usr/bin/reformime = -x/var/spool/qscan/tmp/relay136457719958624830/ [0.06757]=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: Checking all attachments to see = if they're MS-TNEF=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: is /var/spool/qscan/tmp/relay1364= 57719958624830/1C17784.zip is a TNEF file?: 256 [0.001004]=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: is /var/spool/qscan/tmp/relay1364= 57719958624830/1364577218.24865-0.relay is a TNEF file?: 256 [0.000773]=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: is /var/spool/qscan/tmp/relay1364= 57719958624830/1364577218.24865-1.relay is a TNEF file?: 256 [0.000746]=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: Check for zip files...=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: potential zip archive file found = (1C17784.zip).=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: it is possibly a zip file, run = unzip -Pxx1518412100xx -t /var/spool/qscan/tmp/relay136457719958624830/1C17= 784.zip=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: it is a zip file=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: check size of contents before = unzipping to disk=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: this zip file unpacks to 4585272 = bytes of content=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: run /usr/bin/unzip -Pxx1518412100= xx /var/spool/qscan/tmp/relay136457719958624830/1C17784.zip 2>&1=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: 0, and successfully unzipped=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: using chmod to ensure files are = readable ()=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: unpacking message took 0.147106 = seconds=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: unsetting QMAILQUEUE env var=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: g_e_h: return-path is "GaryShojaie@Eat= on.com", recips is "[email protected],[email protected]"=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: from=3D<[email protected]>,subj=3D= RE: Davis Tool Contact Info., x-qmail-scanner-message-id=3D<5137F0726DAB194= [email protected]> via SMTP from = mail2.eaton.com=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: ini_sc: start scanning=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: ini_sc: recursively scan the = directory /var/spool/qscan/tmp/relay136457719958624830/=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: scanloop(virus): starting scan of = directory "/var/spool/qscan/tmp/relay136457719958624830"...=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: scanloop: scanner=3Dclamdscan_scanner,= plain_text_msg=3D0=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: clamdscan: starting scan of directory = "/var/spool/qscan/tmp/relay136457719958624830"...=20 Fri, 29 Mar 2013 10:13:38 PDT:24830: run /usr/bin/clamdscan --no-summary = /var/spool/qscan/tmp/relay136457719958624830 2>&1=20 Fri, 29 Mar 2013 10:13:39 PDT:24830: --output of clamdscan was:=20 /var/spool/qscan/tmp/relay136457719958624830: OK=20 --=20 Fri, 29 Mar 2013 10:13:39 PDT:24830: clamdscan: finished scan of dir = "/var/spool/qscan/tmp/relay136457719958624830" in 1.280143 secs=20 Fri, 29 Mar 2013 10:13:39 PDT:24830: scanloop: scanner=3Dmhr_scanner,plain_= text_msg=3D0=20 Fri, 29 Mar 2013 10:13:39 PDT:24830: mhr: starting scan of directory = "/var/spool/qscan/tmp/relay136457719958624830"...=20 Fri, 29 Mar 2013 10:13:39 PDT:24830: error_condition: X-Qmail-Scanner-2.10:= Requeuing: Read failed: Is a directory at /var/qmail/bin/qmail-scanner-que= ue.pl line 2761=20 The last line looks like a problem. I saw the note in the 2.11 release = (I'm on 2.10) about mhr so I double checked that Digest::SHA and Digest::SH= A1 were installed and working:=20 relay:/var/log/qmail/smtpd # perl -MDigest::SHA -el=20 relay:/var/log/qmail/smtpd # perl -MDigest::SHA1 -el=20 The permissions and ownership of the /var/spool/qscan/tmp folder look = ok:=20 relay:/var/spool/qscan # ls -alh | grep tmp=20 drwxr-x--- 2 qscand qscand 4.0K Mar 29 13:30 tmp=20 It appears that my config thinks it should be using MHR:=20 relay:/var/spool/qscan # cat /var/qmail/bin/qmail-scanner-queue.pl | grep = @scanner_array=3D=20 my @scanner_array=3D("clamdscan_scanner","mhr_scanner","spamassassin");=20 I don't remember turning that on, but I see from the 2.10 change log notes = that perhaps it's a new default? Since it's failing near there I'm = wondering if that might be the problem. Any thoughts?=20 Chris Berry Linux Systems Administrator Davis Tool x521 --=__Part02320B92.0__= Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Content-Description: HTML <html>=0A <head>=0A=0A </head>=0A <body style=3D"margin-left: 4px; = margin-top: 4px; margin-right: 4px; line-height: normal; font-variant: = normal; margin-bottom: 1px">=0A <p style=3D"margin-top: 0; margin-bottom= : 0">=0A <font face=3D"Times New Roman" size=3D"3">I'm having a = problem where one of my users can't receive emails with attachments = from a single customer. When the message first comes in I get the = following in /var/log/qmail/smtpd/current:</font> </p>=0A<br> =0A = <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times= New Roman" size=3D"3">2013-03-29 09:42:33.680656500.s:@400000005155c38507d= becbc tcpserver: pid 21905 from 192.104.67.3</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">2013-03-29 09:42:33.680656500.s:@400000005155c38507df963c= tcpserver: ok 21905 relay.davistl.com:192.168.200.25:25 mail2.eaton.com:19= 2.104.67.3::29629</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">2013-0= 3-29 09:42:33.680656500.s:@400000005155c3862bf16d84 mailfront[21905]= ;: MAIL FROM:<[email protected]> SIZE=7823876</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">2013-03-29 09:42:33.680656500.s:@400000= 005155c3862bf17554 mailfront[21905]: RCPT TO:<[email protected]&= gt;</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">2013-03-29 09:42:33.680656500= .s:@400000005155c3a0379e1b14 mailfront[21905]: 451 4.3.0 Temporary = qmail-queue failure.</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">2013-0= 3-29 09:42:33.680656500.s:@400000005155c3a0379e1efc mailfront[21905]= ;: bytes in: 7823992 bytes out: 285</font> </p>=0A <p style=3D"margin= -top: 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" = size=3D"3">2013-03-29 09:42:33.680656500.s:@400000005155c3a037a097cc = tcpserver: end 21905 status 0</font> </p>=0A<br> =0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Initially I thought softlimit might not be high = enough, but increasing it didn't help and emailing a file with an = even larger attachment from one of my accounts worked fine:</font> = </p>=0A<br> =0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">2013-03-29 09:52:39.069600500 = tcpserver: pid 23160 from 205.188.105.147</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">2013-03-29 09:52:39.165676500 tcpserver: ok 23160 = relay.davistl.com:192.168.200.25:25 imr-da05.mx.aol.com:205.188.105.147::64= 354</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">2013-03-29 09:52:41.803962500= mailfront[23160]: MAIL FROM:<[email protected]> SIZE=11= 808740</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">2013-03-29 09:52:41.8= 03964500 mailfront[23160]: RCPT TO:<[email protected]></font>= </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">2013-03-29 09:53:12.182697500 = mailfront[23160]: 2.6.0 Accepted message qp 23162 bytes 11657485</f= ont> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">2013-03-29 09:53:12.182698500 = mailfront[23160]: bytes in: 11808855 bytes out: 295</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">2013-03-29 09:53:12.182819500 = tcpserver: end 23160 status 0</font> </p>=0A<br> =0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">After reading some of the mailfront code it didn't = look like the problem was there, so I looked at /var/spool/qscan/qmail-= queue.log and found messages like this:</font> </p>=0A<br> =0A = <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times = New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 PDT:24830: ++&#= 43; starting debugging for process 24830 by uid=1003</font> </p>=0A = <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Time= s New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 PDT:24830: setting = UID to EUID so subprocesses can access files generated by this script</font= > </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 = PDT:24830: program name is qmail-scanner-queue.pl, version 2.10</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 = PDT:24830: w_c: mkdir /var/spool/qscan/tmp/relay136457719958624830</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 = PDT:24830: w_c: start dumping incoming msg into /var/spool/qscan/working/tm= p/relay136457719958624830 [0.000262]</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 PDT:24830: c_a_g: found = MIME attachment</font> </p>=0A <p style=3D"margin-top: 0; margin-bott= om: 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar = 2013 10:13:19 PDT:24830: w_c: primary Content-Type of multipart/mixed = found</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:19 PDT:24830: w_c: found a top-level boundary definition of = _004_5137F0726DAB194A9D1D9AC87004F6D309F90ASIMTCSMB06napaade_</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 = PDT:24830: w_c: attachment 1: Content-Type of multipart/alternative = found</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:19 PDT:24830: w_c: attachment 2: Content-Type of text/plain = found</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:19 PDT:24830: w_c: attachment 3: Content-Type of text/html = found</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:19 PDT:24830: found C-T attachment filename "1c17784.zip"</= font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:19 = PDT:24830: w_c: attachment 5: Content-Type of application/x-zip-compr= essed found</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:19 PDT:24830: w_c: base64 looks like a zip file, filename=1c1= 7784.zip,type=application/x-zip-compressed</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: w_c: rename new = msg from /var/spool/qscan/working/tmp/relay136457719958624830 to /var/spool= /qscan/working/new/relay136457719958624830</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: w_c: total time = between DATA command and "." was 18.987336 secs</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 = PDT:24830: w_c: (this is basically the time it took the client to send = the message over the network</font> </p>=0A <p style=3D"margin-top: = 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri= , 29 Mar 2013 10:13:38 PDT:24830: w_c: resetting timer so as to = measure actual Qmail-Scanner processing time</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: incoming SMTP = connection from via SMTP from mail2.eaton.com</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: starting = /usr/bin/reformime -x/var/spool/qscan/tmp/relay136457719958624830/ = </var/spool/qscan/working/new/relay136457719958624830 [0.000246]= </font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 = PDT:24830: d_m: finished /usr/bin/reformime -x/var/spool/qscan/tmp/re= lay136457719958624830/ [0.06757]</font> </p>=0A <p style=3D"m= argin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" = size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: Checking all = attachments to see if they're MS-TNEF</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: is = /var/spool/qscan/tmp/relay136457719958624830/1C17784.zip is a TNEF = file?: 256 [0.001004]</font> </p>=0A <p style=3D"margin-t= op: 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3"= >Fri, 29 Mar 2013 10:13:38 PDT:24830: d_m: is /var/spool/qscan/tmp/rela= y136457719958624830/1364577218.24865-0.relay is a TNEF file?: 256 = [0.000773]</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri= 4; 29 Mar 2013 10:13:38 PDT:24830: d_m: is /var/spool/qscan/tmp/relay136457= 719958624830/1364577218.24865-1.relay is a TNEF file?: 256 [0.00074= 6]</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:38 PDT:24830: d_m: Check for zip files...</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: potential = zip archive file found (1C17784.zip).</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: it is = possibly a zip file, run unzip -Pxx1518412100xx -t /var/spool/qscan/tmp= /relay136457719958624830/1C17784.zip</font> </p>=0A <p style=3D"margi= n-top: 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" = size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: it is a zip = file</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:38 PDT:24830: u_f: check size of contents before unzipping to = disk</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:38 PDT:24830: u_f: this zip file unpacks to 4585272 bytes of = content</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:38 PDT:24830: u_f: run /usr/bin/unzip -Pxx1518412100xx /var/spool/qsc= an/tmp/relay136457719958624830/1C17784.zip 2>&1</font> </p>=0A = <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times = New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: u_f: 0, = and successfully unzipped</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri= 4; 29 Mar 2013 10:13:38 PDT:24830: u_f: using chmod to ensure files are = readable ()</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri= 4; 29 Mar 2013 10:13:38 PDT:24830: d_m: unpacking message took 0.147106 = seconds</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: = 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 = 10:13:38 PDT:24830: unsetting QMAILQUEUE env var</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: g_e_h: = return-path is "[email protected]", recips is "MIKEW= @davistl.com,[email protected]"</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: from=<Gar= [email protected]>,subj=RE: Davis Tool Contact Info., = x-qmail-scanner-message-id=<5137F0726DAB194A9D1D9AC87004F6D309F90A@S= IMTCSMB06.napa.ad.etn.com> via SMTP from mail2.eaton.com</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 = PDT:24830: ini_sc: start scanning</font> </p>=0A <p style=3D"margin-t= op: 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3"= >Fri, 29 Mar 2013 10:13:38 PDT:24830: ini_sc: recursively scan the = directory /var/spool/qscan/tmp/relay136457719958624830/</font> </p>=0A = <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times= New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 PDT:24830: scanloop= 0;virus): starting scan of directory "/var/spool/qscan/tmp/relay13= 6457719958624830"...</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri= 4; 29 Mar 2013 10:13:38 PDT:24830: scanloop: scanner=clamdscan_scanner&= #44;plain_text_msg=0</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">Fri= 4; 29 Mar 2013 10:13:38 PDT:24830: clamdscan: starting scan of directory = "/var/spool/qscan/tmp/relay136457719958624830"...</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:38 = PDT:24830: run /usr/bin/clamdscan --no-summary /var/spool/qscan/tmp/r= elay136457719958624830 2>&1</font> </p>=0A <p style=3D"margin-= top: 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" = size=3D"3">Fri, 29 Mar 2013 10:13:39 PDT:24830: --output of clamdscan = was:</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">/var/spool/qscan/tmp/relay13= 6457719958624830: OK</font> </p>=0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">--</fo= nt> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:39 = PDT:24830: clamdscan: finished scan of dir "/var/spool/qscan/tmp/relay= 136457719958624830" in 1.280143 secs</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:39 PDT:24830: scanloop: = scanner=mhr_scanner,plain_text_msg=0</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">Fri, 29 Mar 2013 10:13:39 PDT:24830: mhr: starting = scan of directory "/var/spool/qscan/tmp/relay136457719958624830".= ..</font> </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">Fri, 29 Mar 2013 10:13:39 = PDT:24830: error_condition: X-Qmail-Scanner-2.10: Requeuing: Read failed: = Is a directory at /var/qmail/bin/qmail-scanner-queue.pl line 2761</font> = </p>=0A<br> =0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A = <font face=3D"Times New Roman" size=3D"3">The last line looks like a = problem. I saw the note in the 2.11 release (I'm on = 2.10) about mhr so I double checked that Digest::SHA and Digest::SHA1 = were installed and working:</font> </p>=0A<br> =0A <p style=3D"m= argin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" = size=3D"3">relay:/var/log/qmail/smtpd # perl -MDigest::SHA -el</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">relay:/var/log/qmail/smtpd # perl = -MDigest::SHA1 -el</font> </p>=0A<br> =0A <p style=3D"margin-top= : 0; margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">T= he permissions and ownership of the /var/spool/qscan/tmp folder look = ok:</font> </p>=0A<br> =0A <p style=3D"margin-top: 0; margin-bot= tom: 0">=0A <font face=3D"Times New Roman" size=3D"3">relay:/var/spool= /qscan # ls -alh | grep tmp</font> </p>=0A <p = style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times New = Roman" size=3D"3">drwxr-x--- 2 qscand qscand 4.0K Mar 29 13:30 = tmp</font> </p>=0A<br> =0A <p style=3D"margin-top: 0; margin-bot= tom: 0">=0A <font face=3D"Times New Roman" size=3D"3">It appears that = my config thinks it should be using MHR:</font> </p>=0A<br> =0A = <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font face=3D"Times = New Roman" size=3D"3">relay:/var/spool/qscan # cat /var/qmail/bin/qmail= -scanner-queue.pl | grep @scanner_array=</font> = </p>=0A <p style=3D"margin-top: 0; margin-bottom: 0">=0A <font = face=3D"Times New Roman" size=3D"3">my @scanner_array=("clamds= can_scanner","mhr_scanner","spamassassin"&= #41;;</font> </p>=0A<br> =0A <p style=3D"margin-top: 0; = margin-bottom: 0">=0A <font face=3D"Times New Roman" size=3D"3">I = don't remember turning that on, but I see from the 2.10 change log = notes that perhaps it's a new default? Since it's = failing near there I'm wondering if that might be the problem. = Any thoughts?</font>=0A </p>=0A <font face=3D"Times New = Roman" STYLE=3D"font-size: 12pt"><br>Chris Berry <BR>Linux Systems = Administrator <BR>Davis Tool <BR>x521<br><br></font></body>=0A</htm= l>=0A --=__Part02320B92.0__=-- --===============9063646149817614159== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ Own the Future-Intel(R) Level Up Game Demo Contest 2013 Rise to greatness in Intel's independent game demo contest. Compete for recognition, cash, and the chance to get your game on Steam. $5K grand prize plus 10 genre and skill prizes. Submit your demo by 6/6/13. http://altfarm.mediaplex.com/ad/ck/12124-176961-30367-2 --===============9063646149817614159== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Qmail-scanner-general mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general --===============9063646149817614159==--