[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qmail-scanner-general
Subject:    Re: [Qmail-scanner-general]Please help
From:       Salvatore Toribio <toribio () pusc ! it>
Date:       2005-03-14 7:51:18
Message-ID: a06110401be5af1668cb2 () [193 ! 43 ! 129 ! 200]
[Download RAW message or body]

At 16:20 -0700 13-03-2005, Lance Stringham wrote:
>Jason Haar wrote:
>>Is there a problem you are trying to solve? That isn't an error - 
>>it's a debug command. Any time a SMTP session is "dropped" half-way 
>>through (say due to a network outage anywhere in the Internet 
>>between the client and server) this debug message will occur.
>>
>>Are you experiencing a problem that you think may be related to 
>>this debug line, or is it that you saw this line and then thought 
>>you had a problem?
>>
>>True errors are reported via syslog with the "X-Qmail-Scanner...." 
>>process name.
>>
>>PS: maybe that debug line needs a "this is not necessarily an 
>>error" added to the end of it to stop confusing people

>This is definitly an error, but I just discovered that it may not be 
>with qmail-scanner. After setting qmail-scanner to output debug 
>messages, but not before, this error started popping up in my 
>qmail-smtp log: "X-Antivirus-MYDOMAIN-1.25-st-qms: Process XXXXX 
>closed, parent process died". I assume this means that the root of 
>the problem lies in clamscan or how it is called. What doesn't make 
>sense to me is that it works fine for most messages but not for 
>others. I have searched the clamav site hi and low and cannot find 
>anything even remotly close to this. I double checked permissions 
>just to make sure, but I just don't get it, clamscan is working and 
>catching viruses, but for some reason it doesn't seem to be working 
>all the time. I have attached the output from my qmail-smtp log for 
>one of the failed sessions (piped through tai64nlocal). Any insight 
>into this problem would be greatly appreciated.

The error is in the remote server, it probabily sendes BLFs 
<http://cr.yp.to/docs/smtplf.html>

>2005-03-12 22:51:13.565295500 tcpserver: status: 1/30
>2005-03-12 22:51:13.565480500 tcpserver: pid 17593 from 69.89.74.25
>2005-03-12 22:51:13.599065500 tcpserver: ok 17593 
>klex.lssn.net:216.237.83.67:25 mx.myspace.com:69.89.74.25::5099
>2005-03-12 22:51:13.878510500 tcpserver: end 17593 status 256
>2005-03-12 22:51:13.878514500 tcpserver: status: 0/30
>2005-03-12 22:51:13.889364500 X-Antivirus-MYDOMAIN-1.25-st-qms: 
>Process 17594 closed, parent process died

Look at this log, qmail-smtp is closing the connection with an error

	tcpserver: end 17593 status 256

before qmail-scanner sends the error to multilog

	X-Antivirus-MYDOMAIN-1.25-st-qms: Process 17594 ...

So the remote server it is not working as it have to according to the rfc

Cheers

Salvatore


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
[prev in list] [next in list] [prev in thread] [next in thread]