On Mon, Oct 13, 2003 at 11:12:42AM +1300, Jason Haar wrote:
> On Fri, Oct 10, 2003 at 12:01:34PM +0300, Pasi Kärkkäinen wrote:
> > There was some discussion on the list about the 1.20rc3 f-secure 4.5x returncode
> > handling.. because the returncodes have changed. was there any conclusion, does
> > the 1.20rc3 do the right thing or do we need to change the code more..
>
> As far as I'm aware, there are no issues with 1.20rc3 with the newer f-secure.
>
> Anyone who knows different, please fix and send us the patch...
>
>
I'm using qmail-scanner v1.20 with f-secure 4.52.
F-secure generates error code 8, when suspicious file is found.
Qmail-scanner stops the processing when it gets this error code. There is
an error logged in qmail-queue.log if the debug is on.
error_condition: X-Qmail-Scanner-1.20: corrupt or unknown Fsecure scanner error or
memory/resource/perms problem - exit status 8
What is the correct way to fix this?
All f-secure 4.52 error codes:
0 Normal exit; no viruses or suspicious files found.
1 Fatal error; unrecoverable error. (Usually a missing or corrupted file.)
3 A boot virus or file virus found.
6 At least one virus was removed and no infected files left.
7 Out of memory.
8 Suspicious files found; these are not necessarily infected by a virus.
9 Scan error, at least one file scan failed.
130 Program was terminated by pressing CTRL-C, or by a sigterm or suspend event.
fsav reports the exit codes in following priority order:
130, 7, 1, 3, 8, 6, 9, 0.
I changed this line (as a temporary fix) in sub-fsecure.pl:
if ($DD =~ /(infection|infected):(.*)$/im) {
to
if ($DD =~ /(infection|infected|suspected):(.*)$/im) {
And now the qmail-scanner catches suspicious files as viruses..
Is this the correct way?
Thanks!
-- Pasi Kärkkäinen
^
. .
Linux
/ - \
Choice.of.the
.Next.Generation.
-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
