Menu

#238 Handling AVP exit code 3

closed-fixed
None
5
2003-02-25
2002-09-08
Anonymous
No

Hello Devel-Team,

I'm using AVP 4.0.2.2 (with the AvpDaemonClient in
Sample1 directory) and amavisd-snapshot-20020300.

Sometimes the AVP-Clients returns a exit code 3 and
amavis doesn't handle this quite correctly, I think. Here
is a snippet of my log-file:

-----------------------------------------------

Sep 3 10:22:13 mail amavisd[13306]: enter accept loop
Sep 3 10:22:13 mail amavisd[7827]: forked off -- child
running...
Sep 3 10:22:13 mail amavisd[7827]:
/var/amavis/amavis-XXQrtWbg: from=<<usera@XXX.TLD>>,
to=<userb@YYY.TLD>
Sep 3 10:22:13 mail amavisd[7827]: LDA is
"/usr/lib/sendmail", LDAARGS is "-oMr scanned-ok -i -f
<usera@XXX.TLD> userb@YYY.TLD"
Sep 3 10:22:13 mail amavisd[7827]: Extracting mime
components
Sep 3 10:22:14 mail amavisd[7827]: Level: 1, parts: 2
Sep 3 10:22:14 mail amavisd[7827]: Archive nesting
depth: 0
Sep 3 10:22:14 mail amavisd[7827]: File-type of
msg-7827-1.txt: ISO-8859 text
Sep 3 10:22:14 mail amavisd[7827]: msg-7827-1.txt is
atomic
Sep 3 10:22:14 mail amavisd[7827]: File-type of
msg-7827-2.doc: Microsoft Office document data
Sep 3 10:22:14 mail amavisd[7827]: msg-7827-2.doc is
atomic
Sep 3 10:22:14 mail amavisd[7827]: Using
/opt/AVP/AvpDaemonClient
Sep 3 10:22:14 mail amavisd[7827]: Test result: 3
Suspicious objects were found
Found viruses:
/var/amavis/amavis-XXQrtWbg/parts/msg-7827-1.txt ok.
/var/amavis/amavis-XXQrtWbg/parts/msg-7827-2.doc
suspicion: Type_RemoteTemplate

Return code: 3
Sep 3 10:22:14 mail amavisd[7827]: Virus scanner
failure: /opt/AVP/AvpDaemonClient (error code: 3)
Sep 3 10:22:14 mail amavisd[7827]: All virus scanners
failed!
Sep 3 10:22:14 mail amavisd[7827]: do_exit:426 -
ending execution with 75
Sep 3 10:22:14 mail amavisd[7827]: socket shut down

-----------------------------------------------

sorry...but I don't know what to do. Hope you can help me.

Discussion

  • Lars Hecking

    Lars Hecking - 2002-09-10
    • assigned_to: nobody --> reniar
     
  • Rainer Link

    Rainer Link - 2002-09-10

    Logged In: YES
    user_id=34819

    Return Code 3 for AVP (kavscanner) and the AVP Client means
    suspiciouse file found. Once again, the question is, if
    suspicious file(s) should be treated as a virus or not.

     
  • Lars Hecking

    Lars Hecking - 2003-02-17

    Logged In: YES
    user_id=28904

    Rainer, can this be closed?

    Your patches added handling of rc=3 to avpdc, but not avp.

     
  • Rainer Link

    Rainer Link - 2003-02-20

    Logged In: YES
    user_id=34819

    Probably the fix for avpdc applies to avp, too. But I don't
    own a current copy of AVP/KAV.

     
  • Lars Hecking

    Lars Hecking - 2003-02-25
    • status: open --> closed-fixed
     
  • Lars Hecking

    Lars Hecking - 2003-02-25

    Logged In: YES
    user_id=28904

    Ok, I have applied this fix to avp now.

     

Log in to post a comment.