Hello,
I sent 3 MB size file named 'asdfg'. qmail-queue.log shows that message was delivered
2 times,
but recipient got only one. If qmail delivered only message of 2nd attempt, why
qmail-scanner
scanned message of 1st attempt (it probably timeouted and was not fully received from
remote
smtp server)?
/var/log/maillog:
Apr 19 13:33:35 fw smtpd: 1019216015.147190 tcpserver: status: 1/20
Apr 19 13:33:35 fw smtpd: 1019216015.147639 tcpserver: pid 2658 from 192.168.5.1Apr 19
13:33:37 fw smtpd: 1019216017.780933 tcpserver: ok 2658 fw.autoukis.lt:192.168.5.2:25
:192.168.5.1::1037
Apr 19 13:53:06 fw smtpd: 1019217186.043358 tcpserver: end 2658 status 256
Apr 19 13:53:06 fw smtpd: 1019217186.043471 tcpserver: status: 0/20
Apr 19 13:54:06 fw smtpd: 1019217246.564790 tcpserver: status: 1/20
Apr 19 13:54:06 fw smtpd: 1019217246.565174 tcpserver: pid 2702 from 192.168.5.1Apr 19
13:54:06 fw smtpd: 1019217246.566754 tcpserver: ok 2702 fw.autoukis.lt:192.168.5.2:25
:192.168.5.1::1038
Apr 19 14:20:42 fw qmail: 1019218842.414328 new msg 34158
Apr 19 14:20:42 fw qmail: 1019218842.414472 info msg 34158: bytes 3293385 from
<[EMAIL PROTECTED]> qp 2755 uid 19
Apr 19 14:20:42 fw qmail: 1019218842.420534 starting delivery 9: msg 34158 to local
[EMAIL PROTECTED]
Apr 19 14:20:42 fw qmail: 1019218842.420663 status: local 1/10 remote 0/20
Apr 19 14:20:42 fw qmail: 1019218842.420686 starting delivery 10: msg 34158 to local
[EMAIL PROTECTED]
Apr 19 14:20:42 fw qmail: 1019218842.420704 status: local 2/10 remote 0/20
Apr 19 14:20:42 fw qmail: 1019218842.429883 delivery 9: success: did_0+0+0/
Apr 19 14:20:42 fw qmail: 1019218842.430012 status: local 1/10 remote 0/20
Apr 19 14:20:43 fw qmail: 1019218843.262719 delivery 10: success: did_0+0+1/
Apr 19 14:20:43 fw qmail: 1019218843.266559 status: local 0/10 remote 0/20
Apr 19 14:20:43 fw qmail: 1019218843.266641 end msg 34158
Apr 19 14:20:43 fw smtpd: 1019218843.838768 tcpserver: end 2702 status 0
Apr 19 14:20:43 fw smtpd: 1019218843.838901 tcpserver: status: 0/20
qmail-queue.log:
19/04/2002 13:33:45:2660: +++ starting debugging for process 2660 by uid=16 at
19/04/2002 13:33:45
19/04/2002 13:33:45:2660: setting UID to EUID so subprocesses can access files
generated by this script
19/04/2002 13:33:45:2660: program name is qmail-scanner-queue.pl
19/04/2002 13:33:45:2660: incoming SMTP connection from via smtp from 192.168.5.1
19/04/2002 13:33:45:2660: w_c: mkdir
/var/spool/qmailscan/fw.autoukis.lt10192160254042660
19/04/2002 13:33:45:2660: w_c: start dumping incoming msg into
/var/spool/qmailscan/working/tmp/fw.autoukis.lt10192160254042660 [1019216025.0198]
19/04/2002 13:33:45:2660: w_c: rename new msg from
/var/spool/qmailscan/working/tmp/fw.autoukis.lt10192160254042660 to
/var/spool/qmailscan/working/new/fw.autoukis.lt10192160254042660 [1019217186.0438]
19/04/2002 13:33:45:2660: d_m: starting /usr/local/bin/reformime
-x/var/spool/qmailscan/fw.autoukis.lt10192160254042660/
</var/spool/qmailscan/working/new/fw.autoukis.lt10192160254042660 [1019217186.04423]
19/04/2002 13:33:45:2660: d_m: finished /usr/local/bin/reformime
-x/var/spool/qmailscan/fw.autoukis.lt10192160254042660/ [1019217186.44457]
19/04/2002 13:33:45:2660: d_m: Checking all attachments to see if they're MS-TNEF
19/04/2002 13:33:45:2660: d_m: is
/var/spool/qmailscan/fw.autoukis.lt10192160254042660/asdfg is a TNEF file?: 256
[1019217186.46147]
19/04/2002 13:33:45:2660: d_m: Manually unpack any zip files as some virus scanners
don't do zip under Unix!
19/04/2002 13:33:45:2660: p_s: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt10192160254042660"...
19/04/2002 13:33:45:2660: p_s: '.ade' = '0' = 'Access Project Extension'
19/04/2002 13:33:45:2660: p_s: type is a size!
...
19/04/2002 13:33:45:2660: p_s: checking asdfg against perlscanner database...
19/04/2002 13:33:45:2660: p_s: file asdfg is lowercased to asdfg and has extension
19/04/2002 13:33:45:2660: p_s: compare asdfg against perlscanner database
19/04/2002 13:33:45:2660: p_s: finished scan of dir
"/var/spool/qmailscan/fw.autoukis.lt10192160254042660" in 0.127279 secs
19/04/2002 13:33:45:2660: d_m: recursively scan the directory
/var/spool/qmailscan/fw.autoukis.lt10192160254042660/
19/04/2002 13:33:45:2660: scanloop: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt10192160254042660"...
19/04/2002 13:33:45:2660: kasp: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt10192160254042660"...
19/04/2002 13:33:45:2660: run /usr/bin/kavscanner -O
/var/spool/qmailscan/fw.autoukis.lt10192160254042660
/var/spool/qmailscan/working/new/fw.autoukis.lt10192160254042660 2>&1
19/04/2002 13:33:45:2660: --output of avp was:
...
Current object: /var/spool/qmailscan/fw.autoukis.lt10192160254042660
You will not be able to read the information about /dev/hda6 device.
/var/spool/qmailscan/fw.autoukis.lt10192160254042660/asdfg ok.
Current object: /var/spool/qmailscan/working/new/fw.autoukis.lt10192160254042660
You will not be able to read the information about /dev/hda6 device.
/var/spool/qmailscan/working/new/fw.autoukis.lt10192160254042660 archive: Mail
/var/spool/qmailscan/working/new/fw.autoukis.lt10192160254042660/[From Nerijus
Baliunas <[EMAIL PROTECTED]>][Date Fri, 19 Apr 2002 13:30:47 +0200 (EET)]/asdfg ok.
Scan
process completed.
Sector Objects : 0 Known viruses : 0
Files : 3 Virus bodies : 0
Folders : 1 Disinfected : 0
Archives : 1 Deleted : 0
Packed : 0 Warnings : 0
Suspicious : 0
Speed (Kb/sec) : 5315 Corrupted : 0
Scan time : 00:00:01 I/O Errors : 0
--
19/04/2002 13:33:45:2660: kasp: finished scan of dir
"/var/spool/qmailscan/fw.autoukis.lt10192160254042660" in 1.075156 secs
19/04/2002 13:33:45:2660: scanloop: finished scan of
"/var/spool/qmailscan/fw.autoukis.lt10192160254042660"...
19/04/2002 13:33:45:2660: d_m: unpacking and scanning message took 1.620754 seconds
19/04/2002 13:33:45:2660: unsetting QMAILQUEUE env var
19/04/2002 13:33:45:2660: g_e_h: no sender and no recips.
^^^^^^^^^^^^^^^^^^^^^^^
Why? because of incompletely received message?
19/04/2002 13:33:45:2660: cleanup: /bin/rm -rf
/var/spool/qmailscan/fw.autoukis.lt10192160254042660/
/var/spool/qmailscan/working/new/fw.autoukis.lt10192160254042660
19/04/2002 13:54:12:2704: +++ starting debugging for process 2704 by uid=16 at
19/04/2002 13:54:12
19/04/2002 13:54:12:2704: setting UID to EUID so subprocesses can access files
generated by this script
19/04/2002 13:54:12:2704: program name is qmail-scanner-queue.pl
19/04/2002 13:54:12:2704: incoming SMTP connection from via smtp from 192.168.5.1
19/04/2002 13:54:12:2704: w_c: mkdir
/var/spool/qmailscan/fw.autoukis.lt10192172524042704
19/04/2002 13:54:12:2704: w_c: start dumping incoming msg into
/var/spool/qmailscan/working/tmp/fw.autoukis.lt10192172524042704 [1019217252.39623]
19/04/2002 13:54:12:2704: w_c: rename new msg from
/var/spool/qmailscan/working/tmp/fw.autoukis.lt10192172524042704 to
/var/spool/qmailscan/working/new/fw.autoukis.lt10192172524042704 [1019218839.78415]
19/04/2002 13:54:12:2704: d_m: starting /usr/local/bin/reformime
-x/var/spool/qmailscan/fw.autoukis.lt10192172524042704/
</var/spool/qmailscan/working/new/fw.autoukis.lt10192172524042704 [1019218839.78467]
19/04/2002 13:54:12:2704: d_m: finished /usr/local/bin/reformime
-x/var/spool/qmailscan/fw.autoukis.lt10192172524042704/ [1019218840.12152]
19/04/2002 13:54:12:2704: d_m: Checking all attachments to see if they're MS-TNEF
19/04/2002 13:54:12:2704: d_m: is
/var/spool/qmailscan/fw.autoukis.lt10192172524042704/asdfg is a TNEF file?: 256
[1019218840.12473]
19/04/2002 13:54:12:2704: d_m: is
/var/spool/qmailscan/fw.autoukis.lt10192172524042704/1019218840.2750-0.fw.autoukis.lt
is a TNEF file?: 256 [1019218840.12763]
19/04/2002 13:54:12:2704: d_m: Manually unpack any zip files as some virus scanners
don't do zip under Unix!
19/04/2002 13:54:12:2704: p_s: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt10192172524042704"...
19/04/2002 13:54:12:2704: p_s: '.ade' = '0' = 'Access Project Extension'
19/04/2002 13:54:12:2704: p_s: type is a size!
...
19/04/2002 13:54:12:2704: p_s: checking asdfg against perlscanner database...
19/04/2002 13:54:12:2704: p_s: file asdfg is lowercased to asdfg and has extension
19/04/2002 13:54:12:2704: p_s: compare asdfg against perlscanner database
19/04/2002 13:54:12:2704: p_s: skipping auto-generated file
1019218840.2750-0.fw.autoukis.lt
19/04/2002 13:54:12:2704: p_s: finished scan of dir
"/var/spool/qmailscan/fw.autoukis.lt10192172524042704" in 0.005458 secs
19/04/2002 13:54:12:2704: d_m: recursively scan the directory
/var/spool/qmailscan/fw.autoukis.lt10192172524042704/
19/04/2002 13:54:12:2704: scanloop: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt10192172524042704"...
19/04/2002 13:54:12:2704: kasp: starting scan of directory
"/var/spool/qmailscan/fw.autoukis.lt10192172524042704"...
19/04/2002 13:54:12:2704: run /usr/bin/kavscanner -O
/var/spool/qmailscan/fw.autoukis.lt10192172524042704
/var/spool/qmailscan/working/new/fw.autoukis.lt10192172524042704 2>&1
19/04/2002 13:54:12:2704: --output of avp was:
...
Current object: /var/spool/qmailscan/fw.autoukis.lt10192172524042704
You will not be able to read the information about /dev/hda6 device.
/var/spool/qmailscan/fw.autoukis.lt10192172524042704/asdfg ok.
/var/spool/qmailscan/fw.autoukis.lt10192172524042704/1019218840.2750-0.fw.autoukis.lt
ok.
Current object: /var/spool/qmailscan/working/new/fw.autoukis.lt10192172524042704
You will not be able to read the information about /dev/hda6 device.
/var/spool/qmailscan/working/new/fw.autoukis.lt10192172524042704 archive: Mail
/var/spool/qmailscan/working/new/fw.autoukis.lt10192172524042704/[From Nerijus
Baliunas <[EMAIL PROTECTED]>][Date Fri, 19 Apr 2002 13:30:47 +0200 (EET)]/asdfg ok.
Scan
process completed.
Sector Objects : 0 Known viruses : 0
Files : 4 Virus bodies : 0
Folders : 1 Disinfected : 0
Archives : 1 Deleted : 0
Packed : 0 Warnings : 0
Suspicious : 0
Speed (Kb/sec) : 5589 Corrupted : 0
Scan time : 00:00:01 I/O Errors : 0
--
19/04/2002 13:54:12:2704: kasp: finished scan of dir
"/var/spool/qmailscan/fw.autoukis.lt10192172524042704" in 1.060639 secs
19/04/2002 13:54:12:2704: scanloop: finished scan of
"/var/spool/qmailscan/fw.autoukis.lt10192172524042704"...
19/04/2002 13:54:12:2704: d_m: unpacking and scanning message took 1.410163 seconds
19/04/2002 13:54:12:2704: unsetting QMAILQUEUE env var
19/04/2002 13:54:12:2704: g_e_h: return-path is "[EMAIL PROTECTED]", recips is
"[EMAIL PROTECTED]"
19/04/2002 13:54:12:2704: from=Nerijus Baliunas <[EMAIL PROTECTED]>,subj=wehweh,
message-id=<[EMAIL PROTECTED]> via smtp from 192.168.5.1
19/04/2002 13:54:12:2704: q_r: fork off child into /var/qmail/bin/qmail-queue...
19/04/2002 13:54:12:2704: cleanup: /bin/rm -rf
/var/spool/qmailscan/fw.autoukis.lt10192172524042704/
/var/spool/qmailscan/working/new/fw.autoukis.lt10192172524042704
19/04/2002 14:20:42:2704: all finished. Total of 1590.011512 secs
Why the last step took 26 minutes?
qmail-scanner version is 1.10 and configured with --redundant yes.
CPU is Celeron 1200.
# free
total used free shared buffers cached
Mem: 247080 194800 52280 0 70104 63860
-/+ buffers/cache: 60836 186244
Swap: 522072 0 522072
# uptime
6:18pm up 1 day, 16:52, 1 user, load average: 0.00, 0.00, 0.00
Regards,
Nerijus
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
