p3scan hangs outlook
Brought to you by:
laitcg
Menu
▾
▴
#23 p3scan hangs outlook
p3scan hangs outlook client when scaning message by pop3 protocol
debug output is ok, but client don't close connection and message still is on remonte server
debug output:
14:33:39 p3scan[16468]: setting the virusdir to
/var/spool/p3scan/children/16468/
14:33:39 p3scan[16468]: Initialize Context
14:33:39 p3scan[16468]: starting proxy
14:33:39 p3scan[16468]: POP3 Connection from 10.43.1.12:2024
14:33:39 p3scan[16468]: Real-server address is 213.180.130.20:110
14:33:39 p3scan[16386]: Forked, pid=16468, numprocs=1
14:33:39 p3scan[16468]: starting mainloop
14:33:39 p3scan[16468]: <-- +OK POP3 [213.180.130.20] onet 1.20 server ready
14:33:39 p3scan[16468]: --> USER xxx
14:33:39 p3scan[16468]: USER 'xxx'
14:33:39 p3scan[16468]: <-- +OK User name accepted, password please
14:33:39 p3scan[16468]: --> PASS xxxx
14:33:43 p3scan[16468]: <-- +OK Mailbox open, 1 messages, new: 1, your
primary account: xxx@xxx, message quota: 0 kB
14:33:43 p3scan[16468]: --> STAT
14:33:43 p3scan[16468]: <-- +OK 1 3578
14:33:43 p3scan[16468]: --> LIST
14:33:43 p3scan[16468]: <-- +OK Mailbox scan listing follows
14:33:43 p3scan[16468]: <-- 1 3578
14:33:43 p3scan[16468]: <-- .
14:33:43 p3scan[16468]: --> RETR 1
14:33:43 p3scan[16468]: RETR 1 (1)
14:33:43 p3scan[16468]: <-- +OK 3578 octets
14:33:43 p3scan[16468]: Caught MIME/Subj line, closing header buffer.
14:33:43 p3scan[16468]: Informing email client to wait...
14:33:43 p3scan[16468]: notified=1
14:33:43 p3scan[16468]: got '.\r\n', mail is complete.
14:33:43 p3scan[16468]: Invoking scanner
14:33:43 p3scan[16468]: Clamd TCP scanner says hello
14:33:43 p3scan[16468]: Clamd TCP scanner says goodbye: 2
14:33:43 p3scan[16468]: Scanner returned 2
14:33:43 p3scan[16468]: POP3 from 10.43.1.12:2024 to 213.180.130.20:110 from
(null) to (null) user: xxx virus: HTML.Phishing.Bank-473 file:
/p3scan.nNBprb
14:33:43 p3scan[16468]: Forcing all files 0600 /bin/chmod 0600
/var/spool/p3scan/p3scan.*
14:33:43 p3scan[16468]: sending new mail
14:33:43 p3scan[16468]: Wrote new EOM.
14:33:43 p3scan[16468]: cat /var/spool/p3scan/notify/16468.mailout |
/bin/mail -s '[Virus] found in a mail to xxx' xxxx
14:33:43 p3scan[16468]: Sent copy of message to xxx
14:33:43 p3scan[16468]: Mail action complete
Logged In: NO
option broken is enabled !