Hello Devel-Team,
I'm using AVP 4.0.2.2 (with the AvpDaemonClient in
Sample1 directory) and amavisd-snapshot-20020300.
Sometimes the AVP-Clients returns a exit code 3 and
amavis doesn't handle this quite correctly, I think. Here
is a snippet of my log-file:
-----------------------------------------------
Sep 3 10:22:13 mail amavisd[13306]: enter accept loop
Sep 3 10:22:13 mail amavisd[7827]: forked off -- child
running...
Sep 3 10:22:13 mail amavisd[7827]:
/var/amavis/amavis-XXQrtWbg: from=<<usera@XXX.TLD>>,
to=<userb@YYY.TLD>
Sep 3 10:22:13 mail amavisd[7827]: LDA is
"/usr/lib/sendmail", LDAARGS is "-oMr scanned-ok -i -f
<usera@XXX.TLD> userb@YYY.TLD"
Sep 3 10:22:13 mail amavisd[7827]: Extracting mime
components
Sep 3 10:22:14 mail amavisd[7827]: Level: 1, parts: 2
Sep 3 10:22:14 mail amavisd[7827]: Archive nesting
depth: 0
Sep 3 10:22:14 mail amavisd[7827]: File-type of
msg-7827-1.txt: ISO-8859 text
Sep 3 10:22:14 mail amavisd[7827]: msg-7827-1.txt is
atomic
Sep 3 10:22:14 mail amavisd[7827]: File-type of
msg-7827-2.doc: Microsoft Office document data
Sep 3 10:22:14 mail amavisd[7827]: msg-7827-2.doc is
atomic
Sep 3 10:22:14 mail amavisd[7827]: Using
/opt/AVP/AvpDaemonClient
Sep 3 10:22:14 mail amavisd[7827]: Test result: 3
Suspicious objects were found
Found viruses:
/var/amavis/amavis-XXQrtWbg/parts/msg-7827-1.txt ok.
/var/amavis/amavis-XXQrtWbg/parts/msg-7827-2.doc
suspicion: Type_RemoteTemplate
Return code: 3
Sep 3 10:22:14 mail amavisd[7827]: Virus scanner
failure: /opt/AVP/AvpDaemonClient (error code: 3)
Sep 3 10:22:14 mail amavisd[7827]: All virus scanners
failed!
Sep 3 10:22:14 mail amavisd[7827]: do_exit:426 -
ending execution with 75
Sep 3 10:22:14 mail amavisd[7827]: socket shut down
-----------------------------------------------
sorry...but I don't know what to do. Hope you can help me.
Logged In: YES
user_id=34819
Return Code 3 for AVP (kavscanner) and the AVP Client means
suspiciouse file found. Once again, the question is, if
suspicious file(s) should be treated as a virus or not.
Logged In: YES
user_id=28904
Rainer, can this be closed?
Your patches added handling of rc=3 to avpdc, but not avp.
Logged In: YES
user_id=34819
Probably the fix for avpdc applies to avp, too. But I don't
own a current copy of AVP/KAV.
Logged In: YES
user_id=28904
Ok, I have applied this fix to avp now.