Hello list (I just joined),

I have a problem with my dual Sendmail installation. F-Secure Linux Security
fails on certain messages (this happens on 2-10 messages a week), and the
problem emails get deferred. And since the Sendmail daemon in question
delivers "queue-only", and thus the queue interval needs to be short
(currently 20s), the problem emails stay in the queue and get reprocessed
NNNN times before they are thrown out of the queue after 2 days.

I am in discussions with F-Secure about this, but I would want to ask you
Amavis people, if I could solve this (at least temporarily) by adjusting the
amavisd.conf. 

More info: 

1) fsav test run on command line on a problem email, first without opitons,
and then with the default options from amavisd.conf:

> [EMAIL PROTECTED] MIME_header_error_verified]# fsav email1
> F-Secure Security Platform version 2.01  build 7384
> Copyright (c) 1999-2008 F-Secure Corporation. All Rights Reserved.
> 
> Scan started at Fri Oct 31 12:16:17 2008
> Database version: 2008-10-31_03
> 
> 
> Scan ended at Fri Oct 31 12:16:17 2008
> 1 file scanned

> [EMAIL PROTECTED] MIME_header_error_verified]# fsav --virus-action1=report
> --archive=yes --auto=yes --dumb=yes --list=no --mime=yes email1
> F-Secure Security Platform version 2.01  build 7384
> Copyright (c) 1999-2008 F-Secure Corporation. All Rights Reserved.
> 
> Scan started at Fri Oct 31 12:16:25 2008
> Database version: 2008-10-31_03
> 
> email1: ERROR: Invalid MIME header found.
> email1: ERROR: MIME decompression error.
> 
> Scan ended at Fri Oct 31 12:16:26 2008
> 0 files scanned
> 1 file could not be scanned
> [

2) excerpt from my amavisd.conf (I have corrected the program path)

> ### http://www.f-secure.com/products/  version 7.01 - by jussi
> # tried option --nomimeerr  081030 - did not help
> # still we get "ERROR: Invalid MIME header found."
> ['F-Secure Linux Security',
> ['/opt/f-secure/fssp/bin/fsav', 'fsav'],
> '--virus-action1=report --archive=yes --auto=yes '.
> '--dumb=yes --list=no --mime=yes {}', [0], [3,4,6,8],
> qr/(?:infection|Infected|Suspected|Riskware): (.+)/ ],
> # NOTE: internal archive handling may be switched off by '--archive=no'
> #   to prevent fsav from exiting with status 9 on broken archives

3) version info 

CentOS 5.x
amavisd-new 2.5.4  
F-Secure Linux Security 7.02 (= current version)

Regards,
Jussi

--
Jussi Hirvi * Green Spot
Topeliuksenkatu 15 C * 00250 Helsinki * Finland
Tel. & fax +358 9 493 981 * Mobile +358 40 771 2098 (only sms)
[EMAIL PROTECTED] * http://www.greenspot.fi


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
AMaViS-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to