Re: [newbie] ATTN Franki: amavis + trophie question
Hi Franki, On Tue, Jul 22, 2003 at 04:54:52AM +0800, Frankie wrote: well I can't specify with any certaintly what your problem is.. but when i did it on mdk9.0, I have amavis-new, and trophie running as amavis.amavis It worked straight off the bat once I did that. Have you asked the trophie developer what the -4 error is?? Is it mentioned on his site? I still think its some sort of permissions thing. I did ask about the -4 error on the tropie/sophie/virge list, but I haven't received any response. Nor have I received any response on the avamis list. The -4 error is not mentioned anywhere save regarding an install on Red Hat. Something about the compiler and links unique to Red Hat. Here's another clue. After installing Trend, I was unable to connect to port 1812 as the manual instructs. I thought it was just a configuration gui, and since I think it's already configured OK I didn't think about it. I don't know if the port needs to be open to work with Trophie or not. I'm going to go back and try setting up amavis to run as amavis.amavis, change permissions on the folders as described in the amavis docs, and recompile trophie to run as amavis.amavis. Argh! Todd -- Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the government for a redress of grievances. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] ATTN Franki: amavis + trophie question
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Hi Franki, On Tue, Jul 22, 2003 at 04:54:52AM +0800, Frankie wrote: well I can't specify with any certaintly what your problem is.. but when i did it on mdk9.0, I have amavis-new, and trophie running as amavis.amavis It worked straight off the bat once I did that. Have you asked the trophie developer what the -4 error is?? Is it mentioned on his site? I still think its some sort of permissions thing. I did ask about the -4 error on the tropie/sophie/virge list, but I haven't received any response. Nor have I received any response on the avamis list. The -4 error is not mentioned anywhere save regarding an install on Red Hat. Something about the compiler and links unique to Red Hat. Here's another clue. After installing Trend, I was unable to connect to port 1812 as the manual instructs. I thought it was just a configuration gui, and since I think it's already configured OK I didn't think about it. I don't know if the port needs to be open to work with Trophie or not. I'm going to go back and try setting up amavis to run as amavis.amavis, change permissions on the folders as described in the amavis docs, and recompile trophie to run as amavis.amavis. Argh! Todd I think thats the best way to go.. Last resport would be to look though the src of trophie and see if you can work out from that what is causing the -4. As I understand it, trophie is sortof a daemon wrapper for the trend engine. I don't think the port 1812 is of any relevance. Do the recompile, like I said, once I did, it worked flawlessly. regards Franki Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] ATTN Franki: amavis + trophie question
well lets start at the beginning..
Does trend filescan work by itself? (meaning without
trophie).
In amavis.conf you can set the scanner used as primary and
again as secondary..
If you comment out all others accept Trend for primary.. if
you use
filescan as primary scanner, does it work as expected??
If memory serves.. this:
### http://www.trendmicro.com/
['Trend Micro FileScanner', ['/etc/iscan/vscan','vscan'],
'-a {}', [0], qr/Found virus/, qr/Found virus (.+)
in/ ],
Should be the only uncommented entry in @av_scanners
for this test.
Also turn up the log level in amavis.conf
$log_level = 5;
That will give you as much detail as possible..
regards
Franki
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Todd Slater
Sent: Monday, 21 July 2003 9:27 PM
To: Mandrake Newbie
Subject: [newbie] ATTN Franki: amavis + trophie question
Will post on the amavis list if my subscription request ever
gets
approved.
I get an unknown result when using trophie with amavisd-new:
Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]:
(03623-01) Using
Trophie: (built-in interface)
Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]:
(03623-01) Trophie:
Connecting to socket /var/run/trophie
Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]:
(03623-01) Trophie:
Sending /var/amavis/amavis-20030721T084656-03623/parts/\n to
UNIX socket
/var/run/trophie
Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]:
(03623-01) Trophie
result: -4
Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]:
(03623-01) Trophie
FAILED - unknown status: -4
Using:
Trophie 1.12
VSAPI version 6.510-1002
Pattern Version 589
Amavisd-new-20030616
Postfix 2.0.6 (mdk 9.1)
Amavisd running as user vscan group amavis, as is trophie.
I have clamav working ok with this.
I did hit the amavis archives and found reference to this
problem on a
red hat install.
Any ideas?
Todd
--
The right of the people to be secure in their persons,
houses, papers,
and effects, against unreasonable searches and seizures,
shall not be
violated, and no warrants shall issue, but upon probable
cause, supported
by oath or affirmation, and particularly describing the
place to be
searched, and the persons or things to be seized.
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
RE: [newbie] ATTN Franki: amavis + trophie question
Incidently, I am running mandrake 9.0 on my mail server and had no problem getting trophie to compile on it.. I have not updated my engine yet.. but I doubt that will make any diff.. maybe I will try it tomorrow and see if it works. [EMAIL PROTECTED] etc]# trophie -v Initializing: VSAPI version 6.150-1001 Initializing: Pattern version 589 (pattern number 48987) Socket path : /var/run/trophie Timeout : 300 seconds Running as user : amavis Socket group: amavis Max processes : 20 PID file: /var/run/trophie.pid Trophie version : 1.12 Cleanup : VSAPI cleaned up and terminated [EMAIL PROTECTED] etc]# regards Franki -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Todd Slater Sent: Monday, 21 July 2003 9:27 PM To: Mandrake Newbie Subject: [newbie] ATTN Franki: amavis + trophie question Will post on the amavis list if my subscription request ever gets approved. I get an unknown result when using trophie with amavisd-new: Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]: (03623-01) Using Trophie: (built-in interface) Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]: (03623-01) Trophie: Connecting to socket /var/run/trophie Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]: (03623-01) Trophie: Sending /var/amavis/amavis-20030721T084656-03623/parts/\n to UNIX socket /var/run/trophie Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]: (03623-01) Trophie result: -4 Jul 21 08:46:56 idea.matc.tec.oh.us amavisd[3623]: (03623-01) Trophie FAILED - unknown status: -4 Using: Trophie 1.12 VSAPI version 6.510-1002 Pattern Version 589 Amavisd-new-20030616 Postfix 2.0.6 (mdk 9.1) Amavisd running as user vscan group amavis, as is trophie. I have clamav working ok with this. I did hit the amavis archives and found reference to this problem on a red hat install. Any ideas? Todd -- The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] ATTN Franki: amavis + trophie question
Looks like we have about the same except for uid and gid. [EMAIL PROTECTED] tslater]# trophie -v Initializing: VSAPI version 6.510-1002 Initializing: Pattern version 589 (pattern number 54450) Socket path : /var/run/trophie Timeout : 300 seconds Running as user : vscan Socket group: amavis Max processes : 20 PID file: /var/run/trophie.pid Trophie version : 1.12 Cleanup : VSAPI cleaned up and terminated [EMAIL PROTECTED] iscan]# ./vscan -v Virus Scanner v3.1, VSAPI v6.510-1002 Trend Micro Inc. 1996,1997 Pattern version 589 Pattern number 54450 No scan target specified!! do nothing. Todd On Mon, Jul 21, 2003 at 10:49:36PM +0800, Frankie wrote: Incidently, I am running mandrake 9.0 on my mail server and had no problem getting trophie to compile on it.. I have not updated my engine yet.. but I doubt that will make any diff.. maybe I will try it tomorrow and see if it works. [EMAIL PROTECTED] etc]# trophie -v Initializing: VSAPI version 6.150-1001 Initializing: Pattern version 589 (pattern number 48987) Socket path : /var/run/trophie Timeout : 300 seconds Running as user : amavis Socket group: amavis Max processes : 20 PID file: /var/run/trophie.pid Trophie version : 1.12 Cleanup : VSAPI cleaned up and terminated [EMAIL PROTECTED] etc]# -- If we don't believe in freedom of expression for people we despise, we don't believe in it at all. -Noam Chomsky Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] ATTN Franki: amavis + trophie question
Hi Franki,
On Mon, Jul 21, 2003 at 10:45:02PM +0800, Frankie wrote:
well lets start at the beginning..
Does trend filescan work by itself? (meaning without
trophie).
Yes.
In amavis.conf you can set the scanner used as primary and
again as secondary..
If you comment out all others accept Trend for primary.. if
you use
filescan as primary scanner, does it work as expected??
Yes, Trend as the only primary works.
Using Trophie as the only primary with no backups returns the same error.
Using Trophie with trend as a backup catches the virus, but Trophie
still fails.
If memory serves.. this:
### http://www.trendmicro.com/
['Trend Micro FileScanner', ['/etc/iscan/vscan','vscan'],
'-a {}', [0], qr/Found virus/, qr/Found virus (.+)
in/ ],
Should be the only uncommented entry in @av_scanners
for this test.
Also turn up the log level in amavis.conf
$log_level = 5;
That will give you as much detail as possible..
After setting log_level to 5, I don't see anything new regarding
Trophie--it still says unknown code (-4).
--
Name that tune #11: What if the artists ran the TV, all the ads would be
for fine scotch whisky Glenfiddich, Glenlivet, the whole single malt
family.
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
RE: [newbie] ATTN Franki: amavis + trophie question
hmmm, you might want to try running amavis-new as root (as a test) and also in debug mode.. I think its just: amavis --debug Try that as root and see what happens. You'll see alot of stuff on STDOUT, including the initialisaton of trophie and any other related daemons, (like clamd or spamassassin). Its possible that you have a permission problem.. Are you running amavis as vscam:amavis??? Were any errors reported when you compiled trophie?? I remember explicitly defining user and group to amavis:amavis when I compiled trophie, and when I forgot to do that the first time I had problems. regards Franki -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Todd Slater Sent: Tuesday, 22 July 2003 12:34 AM To: [EMAIL PROTECTED] Subject: Re: [newbie] ATTN Franki: amavis + trophie question Looks like we have about the same except for uid and gid. [EMAIL PROTECTED] tslater]# trophie -v Initializing: VSAPI version 6.510-1002 Initializing: Pattern version 589 (pattern number 54450) Socket path : /var/run/trophie Timeout : 300 seconds Running as user : vscan Socket group: amavis Max processes : 20 PID file: /var/run/trophie.pid Trophie version : 1.12 Cleanup : VSAPI cleaned up and terminated [EMAIL PROTECTED] iscan]# ./vscan -v Virus Scanner v3.1, VSAPI v6.510-1002 Trend Micro Inc. 1996,1997 Pattern version 589 Pattern number 54450 No scan target specified!! do nothing. Todd On Mon, Jul 21, 2003 at 10:49:36PM +0800, Frankie wrote: Incidently, I am running mandrake 9.0 on my mail server and had no problem getting trophie to compile on it.. I have not updated my engine yet.. but I doubt that will make any diff.. maybe I will try it tomorrow and see if it works. [EMAIL PROTECTED] etc]# trophie -v Initializing: VSAPI version 6.150-1001 Initializing: Pattern version 589 (pattern number 48987) Socket path : /var/run/trophie Timeout : 300 seconds Running as user : amavis Socket group: amavis Max processes : 20 PID file: /var/run/trophie.pid Trophie version : 1.12 Cleanup : VSAPI cleaned up and terminated [EMAIL PROTECTED] etc]# -- If we don't believe in freedom of expression for people we despise, we don't believe in it at all. -Noam Chomsky Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] ATTN Franki: amavis + trophie question
Yeah, I thought it was possibly a permissions problem. I set up amavis to run as vscan.amavis, same with clamd, same with trophie, which is what I don't understand. Does vscan need to be vscan.amavis too? When I run amavisd debug it doesn't say anything other than that it found the internal scanner (trophie). No errors compiling trophie, I did the same thing the first time by not specifying the users and got a permission denied error, so I know *that* was a permissions problem. But, I did a make clean and verified that it runs as vscan.amavis. Todd On Tue, Jul 22, 2003 at 01:24:35AM +0800, Frankie wrote: hmmm, you might want to try running amavis-new as root (as a test) and also in debug mode.. I think its just: amavis --debug Try that as root and see what happens. You'll see alot of stuff on STDOUT, including the initialisaton of trophie and any other related daemons, (like clamd or spamassassin). Its possible that you have a permission problem.. Are you running amavis as vscam:amavis??? Were any errors reported when you compiled trophie?? I remember explicitly defining user and group to amavis:amavis when I compiled trophie, and when I forgot to do that the first time I had problems. regards Franki Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] ATTN Franki: amavis + trophie question
well I can't specify with any certaintly what your problem is.. but when i did it on mdk9.0, I have amavis-new, and trophie running as amavis.amavis It worked straight off the bat once I did that. Have you asked the trophie developer what the -4 error is?? Is it mentioned on his site? I still think its some sort of permissions thing. rgds Franki -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Todd Slater Sent: Tuesday, 22 July 2003 4:08 AM To: [EMAIL PROTECTED] Subject: Re: [newbie] ATTN Franki: amavis + trophie question Yeah, I thought it was possibly a permissions problem. I set up amavis to run as vscan.amavis, same with clamd, same with trophie, which is what I don't understand. Does vscan need to be vscan.amavis too? When I run amavisd debug it doesn't say anything other than that it found the internal scanner (trophie). No errors compiling trophie, I did the same thing the first time by not specifying the users and got a permission denied error, so I know *that* was a permissions problem. But, I did a make clean and verified that it runs as vscan.amavis. Todd On Tue, Jul 22, 2003 at 01:24:35AM +0800, Frankie wrote: hmmm, you might want to try running amavis-new as root (as a test) and also in debug mode.. I think its just: amavis --debug Try that as root and see what happens. You'll see alot of stuff on STDOUT, including the initialisaton of trophie and any other related daemons, (like clamd or spamassassin). Its possible that you have a permission problem.. Are you running amavis as vscam:amavis??? Were any errors reported when you compiled trophie?? I remember explicitly defining user and group to amavis:amavis when I compiled trophie, and when I forgot to do that the first time I had problems. regards Franki Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
