Hallo,
so habe jetzt mal getestet, leider selbes Ergebniss.
Habe zuerst den qmailscanner neu kompiliert. Die neuste stable ist 1.20.
Beim kompilieren will er einen Benutzer unter dem er läuft, habe ihm qmailq zugewiesen. Ist das richtig ?
Immernoch Exitcode 16 bei Kaspersky...
Habe dann aus allen Supervisescripten das softlimit rausgenommen, kein Erfolg.
Habe das ganze /var/spool/qmailscann verzeichniss, samt unterverzeichniss an qmailq:qmail abgegeben...
auch nix gebracht ...
In der qmail-queue.log Datei steht:
Code: Select all
Fri, 16 Jan 2004 10:47:05 +0100:21090: +++ starting debugging for process 21090 by uid=1012 at Fri, 16 Jan 2004 10:47:05 +0100
Fri, 16 Jan 2004 10:47:05 +0100:21090: setting UID to EUID so subprocesses can access files generated by this script
Fri, 16 Jan 2004 10:47:05 +0100:21090: program name is qmail-scanner-queue.pl, version 1.20
Fri, 16 Jan 2004 10:47:05 +0100:21090: incoming SMTP connection from via SMTP from 80.133.109.XXX
Fri, 16 Jan 2004 10:47:05 +0100:21090: w_c: mkdir /var/spool/qmailscan/tmp/host107424642546121090
Fri, 16 Jan 2004 10:47:05 +0100:21090: w_c: start dumping incoming msg into /var/spool/qmailscan/working/tmp/host107424642546121090 [1074246425.21265]
Fri, 16 Jan 2004 10:47:05 +0100:21090: w_c: primary Content-Type of multipart/alternative found
Fri, 16 Jan 2004 10:47:05 +0100:21090: w_c: found a top-level boundary definition of ----=_NextPart_000_0037_01C3DC19.D065C710
Fri, 16 Jan 2004 10:47:05 +0100:21090: w_c: attachment 1: Content-Type of text/plain found
Fri, 16 Jan 2004 10:47:05 +0100:21090: w_c: attachment 2: Content-Type of text/html found
Fri, 16 Jan 2004 10:47:05 +0100:21090: w_c: rename new msg from /var/spool/qmailscan/working/tmp/host107424642546121090 to /var/spool/qmailscan/working/new/host107424642546121090 [1074246425.42639]
Fri, 16 Jan 2004 10:47:05 +0100:21090: d_m: starting /usr/bin/reformime -x/var/spool/qmailscan/tmp/host107424642546121090/ </var/spool/qmailscan/working/new/host107424642546121090 [1074246425.42654]
Fri, 16 Jan 2004 10:47:05 +0100:21090: d_m: finished /usr/bin/reformime -x/var/spool/qmailscan/tmp/host107424642546121090/ [1074246425.43094]
Fri, 16 Jan 2004 10:47:05 +0100:21090: d_m: Checking all attachments to see if they're MS-TNEF
Fri, 16 Jan 2004 10:47:05 +0100:21090: d_m: is /var/spool/qmailscan/tmp/host107424642546121090/1074246425.21092-0.host is a TNEF file?: 256 [1074246425.43226]
Fri, 16 Jan 2004 10:47:05 +0100:21090: d_m: is /var/spool/qmailscan/tmp/host107424642546121090/1074246425.21092-1.host is a TNEF file?: 256 [1074246425.43329]
Fri, 16 Jan 2004 10:47:05 +0100:21090: d_m: unpacking message took 0.006867 seconds
Fri, 16 Jan 2004 10:47:05 +0100:21090: unsetting QMAILQUEUE env var
Fri, 16 Jan 2004 10:47:05 +0100:21090: g_e_h: return-path is "root@host.domain.TLD", recips is "postmaster@host.domain.TLD"
Fri, 16 Jan 2004 10:47:05 +0100:21090: from=<root@host.domain.TLD>,subj=postmaster@host.domain.TLD, x-qmail-scanner-message-id=<005001c3dc15$e3631010$0800a8c0@CS008> via SMTP from 80.133.109.126
Fri, 16 Jan 2004 10:47:05 +0100:21090: ini_sc: start scanning
Fri, 16 Jan 2004 10:47:05 +0100:21090: ini_sc: recursively scan the directory /var/spool/qmailscan/tmp/host107424642546121090/
Fri, 16 Jan 2004 10:47:05 +0100:21090: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/host107424642546121090"...
Fri, 16 Jan 2004 10:47:05 +0100:21090: scanloop: scanner=avp_scanner,plain_text_msg=0
Fri, 16 Jan 2004 10:47:05 +0100:21090: kasp: starting scan of directory "/var/spool/qmailscan/tmp/host107424642546121090"...
Fri, 16 Jan 2004 10:47:05 +0100:21090: run Fri, 16 Jan 2004 10:47:05 +0100:21090: --output of avp was:
+-------------------------------------------------------+
| Kaspersky Anti-Virus for Linux |
| Copyright(C) Kaspersky Lab. 1998-2002 |
| Version 4.0.3.0 |
| |
+-------------------------------------------------------+
Registration info:
Key name Ser. number Price pos. Exp. date Trial
000159A7.key 015c-000434-00054123 Kaspersky Anti-Vi... Expired Yes
Evaluation copy
Antiviral databases have been loaded. Known records: 80586.
Current object: /var/spool/qmailscan/tmp/host107424642546121090
You will not be able to read the information about /dev/hda5 device.
/var/spool/qmailscan/tmp/host107424642546121090/1074246425.21092-0.host ok.
/var/spool/qmailscan/tmp/host107424642546121090/1074246425.21092-1.host ok.
Scan process completed.
Sector Objects : 0 Known viruses : 0 /usr/bin/kavscanner -Y -P -B -MP -MD -* -O /var/spool/qmailscan/tmp/host107424642546121090 2>&1
Files : 2 Virus bodies : 0
Folders : 1 Disinfected : 0
Archives : 0 Deleted : 0
Packed : 0 Warnings : 0
Suspicious : 0
Speed (Kb/sec) : 3 Corrupted : 0
Scan time : 00:00:01 I/O Errors : 0
--
16/01/2004 10:47:05:21090: error_condition: X-Qmail-Scanner-1.20: corrupt or unknown Kaspersky scanner error or memory/resource/perms problems - exit status 16
die Lizenz für Kaspersky ist abgelaufen, läuft aber noch im vollen umfang. solange wie das System nicht läuft, möchte ich die nicht erneuern. eventuell dann einen anderen Virenscanner zulegen...
Wenn ich den Befehl: /usr/bin/kavscanner -Y -P -B -MP -MD -* -O /var/spool/qmailscan/tmp/.... von hand mache geht es ohne Probleme...
Was mich wundert ist: You will not be able to read the information about /dev/hda5 device.
Jemand Ahnung was ich noch machen könnte?
Gruss Mario
tempfail: X-Qmail-Scanner-1.14: corrupt or unknown H+BEDV scanner/resource problems - exit status 1