Ryan Byrne wrote:

Try modifying (increasing) the softlimit that the SMTP service is being
run with. Actually try to run the virus scanner from the command line,
as the user qmailscanner is run as (you said qscand), and the same
softlimit and see what results you get. You will either need to change
the permissions, or softlimit (try softlimit first, as that will be
easier, set it to some large value - 100MB and see if it is still a
problem).

Check the softlimits under Resource Issues - described in the FAQ.



Jason Haar wrote:


Check:

* memory - up your softlimits
* run fsecure as qscand: e.g. "setuidgid qscand fsecure....." - maybe
 you have a perms issue with the new install

Thanks guys! The winner was: Memory softlimits!!

(I had already spent _hours_ confirming permissions and forgot to mention that I had successfully run it as the qscand-user... sorry!)

Can you believe it? All I did was upgrade the virus scanner from version 4.50 to 4.52 and the difference was enough break QS. (Well, I did tweak the softlimits pretty tight when it was initially installed way back when.)

You know, this could explain why QS 1.16 worked perfectly EXCEPT when handling rar-files: F-secure would belch some nonsense and QS would then drop further processing. When using "fsav" with the "--archive" option, it might need a more memory to expand compressed files. (Tip: You can limit how deep F-secure goes into nested archives by mod'ing your fsav.conf. Default is set to 5.)

The reason why rar-files may have failed is because I let QS unpack archives. But "rar" isn't one of them. So, fsav tried to unpack and failed.

Hey, why isn't rar one of the types we can let QS expand by hand? There is a linux "unrar"...

And here's a suggestion, in the array "silent_viruses_array" y'all might want to add 'bagle','mydoom'; our two newest to plague M$ users. Damn was my phone ringing off the hook until I added these to the array!!

Cheers for the help!! My hiney is still intact! :-)

--
Roger WJ Alterskjær
Vitenskapsmuseet, NTNU
Trondheim, Norway



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to