Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Daley on January 16, 2003, 05:00:08 PM

Title: SME 5.5 amavis scanner + clam
Post by: Daley on January 16, 2003, 05:00:08 PM

Hi all,

Can someone advise the log? umm.. it looks like the scanner is fail to open up and scan the attachment...

Regards,
Daley

Jan 12 12:30:40 sme amavis[21758]: Starting AMaViS 0.1.4.1
Jan 12 12:30:41 sme amavis[21758]: Unpacking message in /tmp/amavis-unpack-3e20ef71-54fe
Jan 12 12:30:41 sme amavis[21758]: AMAVIS: Determined 00000000 to be type message/rfc822
Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined 00000004 to be type application/msword
Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack 00000004
Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined 00000005 to be type application/pdf
Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack 00000005
Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined 00000001 to be type text/plain
Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined 00000002 to be type application/msword
Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack 00000002
Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined 00000003 to be type application/msword
Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack 00000003
Jan 12 12:30:42 sme amavis[21758]: AMAVIS::MTA::Qmail: Accepting message
Jan 12 12:30:42 sme amavis[21758]: AMAVIS::MTA::Qmail: /var/qmail/bin/qmail-queue exited: 0
Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Cleaning up.
Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Done.

Title: Re: SME 5.5 amavis scanner + clam
Post by: Damien Curtain on January 17, 2003, 02:17:09 AM

Daley wrote:
>
> Hi all,
>
> Can someone advise the log? umm.. it looks like the scanner
> is fail to open up and scan the attachment...
>
> Regards,
> Daley
>
> Jan 12 12:30:40 sme amavis[21758]: Starting AMaViS 0.1.4.1
> Jan 12 12:30:41 sme amavis[21758]: Unpacking message in
> /tmp/amavis-unpack-3e20ef71-54fe

So here its unpacked the original email, and below are the parts

> Jan 12 12:30:41 sme amavis[21758]: AMAVIS: Determined
> 00000000 to be type message/rfc822
> Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined
> 00000004 to be type application/msword
> Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack
> 00000004

You can't unpack an ms word document.

> Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined
> 00000005 to be type application/pdf
> Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack
> 00000005

You can't unpack a pdf.

> Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined
> 00000001 to be type text/plain
> Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined
> 00000002 to be type application/msword
> Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack
> 00000002

See above.

> Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Determined
> 00000003 to be type application/msword
> Jan 12 12:30:42 sme amavis[21758]: Not attempting to unpack
> 00000003

See above.

> Jan 12 12:30:42 sme amavis[21758]: AMAVIS::MTA::Qmail:
> Accepting message
> Jan 12 12:30:42 sme amavis[21758]: AMAVIS::MTA::Qmail:
> /var/qmail/bin/qmail-queue exited: 0
> Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Cleaning up.
> Jan 12 12:30:42 sme amavis[21758]: AMAVIS: Done.

If one of the attachments were an archive that could be unpacked then it would unpack and recursively scan/unpack until the limit is reached or it runs out of parts.

You would be better suited to using the service link virus scanning solution IMO.
--
 Damien