Re: Simscan and Clam 0.95.3

I just upgraded too but I am using the chkuser and did not have any problems
installing. I do not recall to have patch simscan though :)


On 1/27/10 11:35 , "DAve" <[email protected]> wrote:

> Good afternoon all,
> 
> I was just getting going upgrading our Clamav install and beginning to
> use clamav on our outbound mail as well as SA.
> 
> I patched netqmail to use the reject-message.patch, no issues there.
> 
> I then patched simscan 1.40 using JS patch,
> simscan-1.4.0-combined.2.patch and then tested in the simscan source
> directory before installing.
> 
> (All one line at the prompt)
> QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2
> NOP0FCHECK=1 /var/qmail/bin/qmail-inject < mail-1.txt
> 
> But it doesn't seem to work, clamdscan still crashes with error 71. Here
> is the debug output.
> 
> [root@smtp1:/usr/local/src/simscan-1.4.0]#
> QMAILQUEUE=/usr/local/src/simscan-1.4.0/simscan SIMSCAN_DEBUG=2
> NOP0FCHECK=1 /var/qmail/bin/qmail-inject < mail-1.txt
> simscan: cdb looking up
> simscan: cdb for  found clam=no,spam=yes,attach=.exe:.scr:.com:.pif:.bat
> simscan: pelookup clam = no
> simscan: pelookup spam = yes
> simscan: pelookup attach = .exe:.scr:.com:.pif:.bat
> simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat
> simscan: .exe is attachment number 0
> simscan: .scr is attachment number 1
> simscan: .com is attachment number 2
> simscan: .pif is attachment number 3
> simscan: .bat is attachment number 4
> simscan: starting: work dir: /var/qmail/simscan/1264616927.742599.63398
> simscan: pelookup: called with [email protected]
> simscan: pelookup: domain is smtp1.tls.net
> simscan: cdb looking up smtp1.tls.net
> simscan: pelookup: local part is sysadmin
> simscan: cdb looking up [email protected]
> simscan: pelookup: called with [email protected]
> simscan: pelookup: domain is pixelhammer.com
> simscan: cdb looking up pixelhammer.com
> simscan: pelookup: local part is dave.list
> simscan: cdb looking up [email protected]
> simscan: cdb for [email protected] found
> clam=yes,spam=yes,attach=.exe:.scr:.com:.pif:.bat
> simscan: pelookup clam = yes
> simscan: pelookup spam = yes
> simscan: pelookup attach = .exe:.scr:.com:.pif:.bat
> simscan: attachment flag attach = .exe:.scr:.com:.pif:.bat
> simscan: .exe is attachment number 0
> simscan: .scr is attachment number 1
> simscan: .com is attachment number 2
> simscan: .pif is attachment number 3
> simscan: .bat is attachment number 4
> simscan: cdb looking up version attach
> simscan: calling clamdscan
> simscan: cdb looking up version clamav
> simscan: fatal error executing clamdscan
> simscan: exit error code: 71
> qmail-inject: fatal: mail server temporarily rejected message (#4.3.0)
> [root@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan .
> /usr/local/src/simscan-1.4.0/.: OK
> 
> ----------- SCAN SUMMARY -----------
> Infected files: 0
> Time: 0.264 sec (0 m 0 s)
> [root@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan -V
> ClamAV 0.95.3/10326/Fri Jan 22 13:18:42 2010
> 
> I have not seen anything new on this issue, am I in need of a clue bat?
> Compiling Clam and simscan showed no errors.
> 
> Thanks,
> 
> DAve


!DSPAM:4b60894132711447313053!