From: <cer...@sp...> - 2006-03-22 07:15:53
|
Hello, I=B4m trying to run amavisd-new with postfix and nod32 (20030616p10-5) on= =20 debian sarge but with config file from previous installation (it was=20 amavis version from debian unstable). Problem is I=B4m getting following errors and emails are not delivered: Mar 21 14:44:56 gate amavis[9408]: (09408-03) TIMING [total 276 ms] -=20 SMTP EHLO: 2 (1%), SMTP pre-MAIL: 1 (0%), mkdir tempdir: 0 (0%), create=20 email.txt: 0 (0%), SMTP pre-DATA-flush: 4 (1%), SMTP DATA: 155 (56%),=20 body hash: 7 (2%), mkdir parts: 1 (0%), mime_decode: 88 (32%), rundown:=20 19 (7%) Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error in=20 processing, id=3D09408-03, decoding2-get-file-types FAILED: 'file' utilit= y=20 (/usr/bin/file) failed, status=3D1 (256 ) at /usr/sbin/amavisd-new line 3= 853. Mar 21 14:44:56 gate amavis[9408]: (09408-03) prolong_timer after=20 reading SMTP command: remaining time =3D 0 s Mar 21 14:44:56 gate=20 postfix/smtpd[9314]: disconnect from unknown[172.16.0.2] Where can be the problem? The amavis stops the emails even if they are=20 plain text. Manual running of /usr/bin/file on stored email.txt works fin= e. Thanks for any help. PS.: I=B4m using the latest version of /usr/bin/file from debian sarge |
From: Mark M. <Mar...@ij...> - 2006-03-27 18:39:55
|
Ji=F8=ED, > I=B4m trying to run amavisd-new with postfix and nod32 (20030616p10-5) on > debian sarge but with config file from previous installation (it was > amavis version from debian unstable). > > Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error in > processing, id=3D09408-03, decoding2-get-file-types FAILED: 'file' utility > (/usr/bin/file) failed, status=3D1 (256 ) at /usr/sbin/amavisd-new line 3= 853. > > Where can be the problem? The amavis stops the emails even if they are > plain text. Manual running of /usr/bin/file on stored email.txt works fin= e. Were you able to resolve the problem by now? > PS.: I=B4m using the latest version of /usr/bin/file from debian sarge Such test should be run as user vscan (or whatever amavisd runs under) to be able to spot file access/protection violations. If running chrooted, a test should be done chrooted as well. Btw, you must not have Net::Server newer than 0.90, which is the last version compatible with amavisd-new <=3D 2.3.3 =2E.. although I do not think this was your problem. Mark |
From: <cer...@sp...> - 2006-03-28 08:12:49
|
Mark Martinec napsal(a): > Ji=F8=ED, > > =20 >> I=B4m trying to run amavisd-new with postfix and nod32 (20030616p10-5)= on >> debian sarge but with config file from previous installation (it was >> amavis version from debian unstable). >> >> Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error i= n >> processing, id=3D09408-03, decoding2-get-file-types FAILED: 'file' uti= lity >> (/usr/bin/file) failed, status=3D1 (256 ) at /usr/sbin/amavisd-new lin= e 3853. >> >> Where can be the problem? The amavis stops the emails even if they are >> plain text. Manual running of /usr/bin/file on stored email.txt works = fine. >> =20 > > Were you able to resolve the problem by now? > > =20 >> PS.: I=B4m using the latest version of /usr/bin/file from debian sarge >> =20 > > Such test should be run as user vscan (or whatever amavisd runs under) > to be able to spot file access/protection violations. > If running chrooted, a test should be done chrooted as well. > > Btw, you must not have Net::Server newer than 0.90, which is > the last version compatible with amavisd-new <=3D 2.3.3 > ... although I do not think this was your problem. > > Mark > =20 Hello, no, I wasn=B4t able to solve it by now. My amavisd-new runs under user an= d=20 group amavis. I tried to run /usr/sbin/file as user amavis and I got=20 correct outcome. I don't run amavis in chroot. How could I learn my version of Net::Server and how to eventually=20 downgrade it? Thanks for reply. |
From: Gary V <li...@jo...> - 2006-03-28 21:47:15
|
Jiří wrote: > Mark Martinec napsal(a): >> Jiří, >> >> >>> I´m trying to run amavisd-new with postfix and nod32 (20030616p10-5) on >>> debian sarge but with config file from previous installation (it was >>> amavis version from debian unstable). Trying to use a newer version of a config file with an older version of amavisd-new in many cases will cause amavisd-new to fail to start. The fact that you are able to start up most likely means your particular settings are still compatible with the older version. >>> >>> Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error in >>> processing, id=09408-03, decoding2-get-file-types FAILED: 'file' utility >>> (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd-new line 3853. >>> >>> Where can be the problem? The amavis stops the emails even if they are >>> plain text. Manual running of /usr/bin/file on stored email.txt works fine. >>> >> Such test should be run as user vscan (or whatever amavisd runs under) >> to be able to spot file access/protection violations. >> If running chrooted, a test should be done chrooted as well. >> >> Btw, you must not have Net::Server newer than 0.90, which is >> the last version compatible with amavisd-new <= 2.3.3 >> ... although I do not think this was your problem. >> >> Mark >> > How could I learn my version of Net::Server and how to eventually > downgrade it? > Thanks for reply. If you are running Sarge you are probably using an older version. You can determine the version by starting amavisd-new in debug mode and noticing near the beginning of the debug output. Or try: perl -MNet::Server -e 'print "$Net::Server::VERSION\n";' The newest version at the moment from Debian is 0.90. If you installed from CPAN however you may have a newer version. If you did install from CPAN (or source) and you are using a newer version, you could simply install 0.90 over the top of the newer version. cd /usr/local/src wget http://search.cpan.org/CPAN/authors/id/R/RH/RHANDOM/Net-Server-0.90.tar.gz tar xzvf Net-Server-0.90.tar.gz cd Net-Server-0.90 perl Makefile.PL make && make test && make install On a Debian system (and probably others) if you install from CPAN (or source), that is the copy Perl will find first, so any libnet-server-perl package you install from Debian will from now on be ignored. This is just for future reference. Gary V |
From: Mark M. <Mar...@ij...> - 2006-03-29 12:30:15
|
Ji=F8=ED, > >>> Where can be the problem? The amavis stops the emails even if they are > >>> plain text. Manual running of /usr/bin/file on stored email.txt works > >>> fine. > >> > >> Such test should be run as user vscan (or whatever amavisd runs under) > >> to be able to spot file access/protection violations. > >> If running chrooted, a test should be done chrooted as well. I should have added that when manually testing a file utility, you also need to check its exit status, e.g.: file ...; echo $? Should be 0. Btw, which version of file is that? (file --version) Mark |
From: <cer...@sp...> - 2006-03-30 09:02:37
|
Mark Martinec napsal(a): > Ji=F8=ED, > > =20 >>>>> Where can be the problem? The amavis stops the emails even if they = are >>>>> plain text. Manual running of /usr/bin/file on stored email.txt wor= ks >>>>> fine. >>>>> =20 >>>> Such test should be run as user vscan (or whatever amavisd runs unde= r) >>>> to be able to spot file access/protection violations. >>>> If running chrooted, a test should be done chrooted as well. >>>> =20 > > I should have added that when manually testing a file utility, > you also need to check its exit status, e.g.: > > file ...; echo $? > > Should be 0. > > Btw, which version of file is that? (file --version) > > Mark > =20 gate:/etc/bind# file rndc.key; echo $? rndc.key: ASCII text 0 gate:/etc/bind# file --version file-4.12 magic data from /etc/magic:/usr/share/misc/file/magic gate:/etc/bind# Jiri |
From: <cer...@sp...> - 2006-03-30 09:13:07
|
Gary V napsal(a): > Ji=F8=ED wrote: > > =20 >> Mark Martinec napsal(a): >> =20 >>> Ji=F8=ED, >>> >>> =20 >>> =20 >>>> I=B4m trying to run amavisd-new with postfix and nod32 (20030616p10-= 5) on >>>> debian sarge but with config file from previous installation (it was >>>> amavis version from debian unstable). >>>> =20 > > Trying to use a newer version of a config file with an older version > of amavisd-new in many cases will cause amavisd-new to fail to start. > The fact that you are able to start up most likely means your > particular settings are still compatible with the older version. > > =20 >>>> Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error= in >>>> processing, id=3D09408-03, decoding2-get-file-types FAILED: 'file' u= tility >>>> (/usr/bin/file) failed, status=3D1 (256 ) at /usr/sbin/amavisd-new l= ine 3853. >>>> >>>> Where can be the problem? The amavis stops the emails even if they a= re >>>> plain text. Manual running of /usr/bin/file on stored email.txt work= s fine. >>>> =20 >>>> =20 > > =20 >>> Such test should be run as user vscan (or whatever amavisd runs under= ) >>> to be able to spot file access/protection violations. >>> If running chrooted, a test should be done chrooted as well. >>> >>> Btw, you must not have Net::Server newer than 0.90, which is >>> the last version compatible with amavisd-new <=3D 2.3.3 >>> ... although I do not think this was your problem. >>> >>> Mark >>> >>> =20 > =20 > =20 >> How could I learn my version of Net::Server and how to eventually >> downgrade it? >> Thanks for reply. >> =20 > > If you are running Sarge you are probably using an older version. > You can determine the version by starting amavisd-new in debug mode > and noticing near the beginning of the debug output. Or try: > > perl -MNet::Server -e 'print "$Net::Server::VERSION\n";' > > The newest version at the moment from Debian is 0.90. If you installed > from CPAN however you may have a newer version. If you did install > from CPAN (or source) and you are using a newer version, you could > simply install 0.90 over the top of the newer version. > > cd /usr/local/src > wget http://search.cpan.org/CPAN/authors/id/R/RH/RHANDOM/Net-Server-0.9= 0.tar.gz > tar xzvf Net-Server-0.90.tar.gz > cd Net-Server-0.90 > perl Makefile.PL > make && make test && make install > > On a Debian system (and probably others) if you install from CPAN (or > source), that is the copy Perl will find first, so any libnet-server-pe= rl > package you install from Debian will from now on be ignored. This is > just for future reference. > > Gary V > =20 Here are my debug details. I wasn=B4t able to find any major error there: gate:/var/log# amavisd-new debug Mar 30 11:08:58 gate amavisd-new[25282]: starting. amavisd-new at gate=20 amavisd-new-20030616-p10, Unicode aware, LANG=3Den_US Mar 30 11:08:58 gate amavisd-new[25282]: Perl version 5.008= 004 Mar 30 11:08:58 gate amavisd-new[25282]: Module Amavis::Conf 1.15 Mar 30 11:08:58 gate amavisd-new[25282]: Module Archive::Tar 1.29 Mar 30 11:08:58 gate amavisd-new[25282]: Module Archive::Zip 1.16 Mar 30 11:08:58 gate amavisd-new[25282]: Module Compress::Zlib 1.41 Mar 30 11:08:58 gate amavisd-new[25282]: Module Convert::TNEF 0.17 Mar 30 11:08:58 gate amavisd-new[25282]: Module Convert::UUlib 1.06 Mar 30 11:08:58 gate amavisd-new[25282]: Module DB_File 1.808 Mar 30 11:08:58 gate amavisd-new[25282]: Module MIME::Entity 5.420 Mar 30 11:08:58 gate amavisd-new[25282]: Module MIME::Parser 5.420 Mar 30 11:08:58 gate amavisd-new[25282]: Module MIME::Tools 5.420 Mar 30 11:08:58 gate amavisd-new[25282]: Module Mail::Header 1.74 Mar 30 11:08:58 gate amavisd-new[25282]: Module Mail::Internet 1.74 Mar 30 11:08:58 gate amavisd-new[25282]: Module Mail::SpamAssassin 3.000= 003 Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::Cmd 2.26 Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::DNS 0.57 Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::SMTP 2.29 Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::Server 0.91 Mar 30 11:08:58 gate amavisd-new[25282]: Module Time::HiRes 1.87 Mar 30 11:08:58 gate amavisd-new[25282]: Module Unix::Syslog 0.99 Mar 30 11:08:58 gate amavisd-new[25282]: Found myself:=20 /usr/sbin/amavisd-new -c /etc/amavis/amavisd.conf Mar 30 11:08:58 gate amavisd-new[25282]: Lookup::SQL code NOT loade= d Mar 30 11:08:58 gate amavisd-new[25282]: Lookup::LDAP code NOT loade= d Mar 30 11:08:58 gate amavisd-new[25282]: AMCL-in protocol code NOT loade= d Mar 30 11:08:58 gate amavisd-new[25282]: SMTP-in protocol code loaded Mar 30 11:08:58 gate amavisd-new[25282]: ANTI-VIRUS code loaded Mar 30 11:08:58 gate amavisd-new[25282]: ANTI-SPAM code loaded Mar 30 11:08:58 gate amavisd-new[25282]: Net::Server:=20 2006/03/30-11:08:58 Amavis (type Net::Server::PreForkSimple) starting!=20 pid(25282) Mar 30 11:08:58 gate amavisd-new[25282]: Net::Server: Binding to TCP=20 port 10024 on host 127.0.0.1 Mar 30 11:08:58 gate amavisd-new[25282]: Net::Server: Setting gid to=20 "109 109" Mar 30 11:08:58 gate amavisd-new[25282]: Net::Server: Setting uid to "107= " Mar 30 11:08:58 gate amavisd-new[25282]: Net::Server: Setting up=20 serialization via flock Mar 30 11:08:58 gate amavisd-new[25282]: Found $file at /usr/bin/fi= le Mar 30 11:08:58 gate amavisd-new[25282]: No $arc, not using it Mar 30 11:08:58 gate amavisd-new[25282]: Found $gzip at /bin/gzip Mar 30 11:08:58 gate amavisd-new[25282]: Found $bzip2 at /usr/bin/bz= ip2 Mar 30 11:08:58 gate amavisd-new[25282]: No $lzop, not using it Mar 30 11:08:58 gate amavisd-new[25282]: No $lha, not using it Mar 30 11:08:58 gate amavisd-new[25282]: No $unarj, not using it Mar 30 11:08:58 gate amavisd-new[25282]: Found $uncompress at=20 /bin/uncompress Mar 30 11:08:58 gate amavisd-new[25282]: No $unfreeze, not using it Mar 30 11:08:58 gate amavisd-new[25282]: No $unrar, not using it Mar 30 11:08:58 gate amavisd-new[25282]: No $zoo, not using it Mar 30 11:08:58 gate amavisd-new[25282]: Found $cpio at /bin/cpio Mar 30 11:08:58 gate amavisd-new[25282]: Found primary av scanner ESET=20 Software NOD32 Command Line Interface v 2.51 at /usr/sbin/nod32 Mar 30 11:08:58 gate amavisd-new[25282]: No secondary av scanner: Clam=20 Antivirus - clamscan Mar 30 11:08:58 gate amavisd-new[25282]: SpamControl: initializing=20 Mail::SpamAssassin debug: SpamAssassin version 3.0.3 debug: Score set 0 chosen. debug: running in taint mode? yes debug: Running in taint mode, removing unsafe env vars, and resetting PAT= H debug: PATH included '/usr/local/sbin', keeping. debug: PATH included '/usr/local/bin', keeping. debug: PATH included '/usr/sbin', keeping. debug: PATH included '/sbin', keeping. debug: PATH included '/usr/bin', keeping. debug: PATH included '/bin', keeping. debug: Final PATH set to:=20 /usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin debug: ignore: test message to precompile patterns and load modules debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre debug: config: read file /etc/mail/spamassassin/init.pre debug: using "/usr/share/spamassassin" for default rules dir debug: config: read file /usr/share/spamassassin/10_misc.cf debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf debug: config: read file /usr/share/spamassassin/20_body_tests.cf debug: config: read file /usr/share/spamassassin/20_compensate.cf debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf debug: config: read file /usr/share/spamassassin/20_drugs.cf debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf debug: config: read file /usr/share/spamassassin/20_head_tests.cf debug: config: read file /usr/share/spamassassin/20_html_tests.cf debug: config: read file /usr/share/spamassassin/20_meta_tests.cf debug: config: read file /usr/share/spamassassin/20_phrases.cf debug: config: read file /usr/share/spamassassin/20_porn.cf debug: config: read file /usr/share/spamassassin/20_ratware.cf debug: config: read file /usr/share/spamassassin/20_uri_tests.cf debug: config: read file /usr/share/spamassassin/23_bayes.cf debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf debug: config: read file /usr/share/spamassassin/25_hashcash.cf debug: config: read file /usr/share/spamassassin/25_spf.cf debug: config: read file /usr/share/spamassassin/25_uribl.cf debug: config: read file /usr/share/spamassassin/30_text_de.cf debug: config: read file /usr/share/spamassassin/30_text_fr.cf debug: config: read file /usr/share/spamassassin/30_text_nl.cf debug: config: read file /usr/share/spamassassin/30_text_pl.cf debug: config: read file /usr/share/spamassassin/50_scores.cf debug: config: read file /usr/share/spamassassin/60_whitelist.cf debug: config: read file /usr/share/spamassassin/65_debian.cf debug: using "/etc/mail/spamassassin" for site rules dir debug: config: read file /etc/mail/spamassassin/local.cf debug: using "/var/lib/amavis/.spamassassin/user_prefs" for user prefs fi= le debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC debug: plugin: registered=20 Mail::SpamAssassin::Plugin::URIDNSBL=3DHASH(0x96e5db8) debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC debug: plugin: registered=20 Mail::SpamAssassin::Plugin::Hashcash=3DHASH(0x96fa66c) debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=3DHASH(0x96d65c= c) debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=3DHASH(0x96e5db8)=20 implements 'parse_config' debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=3DHASH(0x96fa66c)=20 implements 'parse_config' debug: bayes: 25282 tie-ing to DB file R/O=20 /var/lib/amavis/.spamassassin/bayes_toks debug: bayes: 25282 tie-ing to DB file R/O=20 /var/lib/amavis/.spamassassin/bayes_seen debug: bayes: found bayes db version 3 debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 20= 0 debug: bayes: 25282 untie-ing debug: bayes: 25282 untie-ing db_toks debug: bayes: 25282 untie-ing db_seen debug: Score set 0 chosen. debug: ---- MIME PARSER START ---- debug: main message type: text/plain debug: parsing normal part debug: added part, type: text/plain debug: ---- MIME PARSER END ---- debug: bayes: 25282 tie-ing to DB file R/O=20 /var/lib/amavis/.spamassassin/bayes_toks debug: bayes: 25282 tie-ing to DB file R/O=20 /var/lib/amavis/.spamassassin/bayes_seen debug: bayes: found bayes db version 3 debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 20= 0 debug: bayes: 25282 untie-ing debug: bayes: 25282 untie-ing db_toks debug: bayes: 25282 untie-ing db_seen debug: metadata: X-Spam-Relays-Trusted: debug: metadata: X-Spam-Relays-Untrusted: debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=3DHASH(0x96e5db8)=20 implements 'parsed_metadata' debug: is DNS available? 0 debug: decoding: no encoding detected debug: Running tests for priority: 0 debug: running header regexp tests; score so far=3D0 debug: registering glue method for check_hashcash_double_spend=20 (Mail::SpamAssassin::Plugin::Hashcash=3DHASH(0x96fa66c)) debug: all '*From' addrs: ig...@co... debug: registering glue method for check_hashcash_value=20 (Mail::SpamAssassin::Plugin::Hashcash=3DHASH(0x96fa66c)) debug: all '*To' addrs: debug: running body-text per-line regexp tests; score so far=3D-2.276 debug: running uri tests; score so far=3D-2.276 debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=3DHASH(0x96e5db8)=20 implements 'check_tick' debug: running raw-body-text per-line regexp tests; score so far=3D-2.276 debug: running full-text regexp tests; score so far=3D-2.276 debug: Running tests for priority: 500 debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=3DHASH(0x96e5db8)=20 implements 'check_post_dnsbl' debug: running meta tests; score so far=3D-2.276 debug: running header regexp tests; score so far=3D-1.167 debug: running body-text per-line regexp tests; score so far=3D-1.167 debug: running uri tests; score so far=3D-1.167 debug: running raw-body-text per-line regexp tests; score so far=3D-1.167 debug: running full-text regexp tests; score so far=3D-1.167 debug: Running tests for priority: 1000 debug: running meta tests; score so far=3D-1.167 debug: running header regexp tests; score so far=3D-1.167 debug: lock: 25282 created=20 /var/lib/amavis/.spamassassin/auto-whitelist.lock.gate.sps-pi.cz.25282 debug: lock: 25282 trying to get lock on=20 /var/lib/amavis/.spamassassin/auto-whitelist with 0 retries debug: lock: 25282 link to=20 /var/lib/amavis/.spamassassin/auto-whitelist.lock: link ok debug: Tie-ing to DB file R/W in=20 /var/lib/amavis/.spamassassin/auto-whitelist debug: auto-whitelist (db-based):=20 ig...@co...|ip=3Dnone scores 0/0 debug: AWL active, pre-score: -1.167, autolearn score: -1.167, mean:=20 undef, IP: undef debug: DB addr list: untie-ing and unlocking. debug: DB addr list: file locked, breaking lock. debug: unlock: 25282 unlink=20 /var/lib/amavis/.spamassassin/auto-whitelist.lock debug: Post AWL score: -1.167 debug: running body-text per-line regexp tests; score so far=3D-1.167 debug: running uri tests; score so far=3D-1.167 debug: running raw-body-text per-line regexp tests; score so far=3D-1.167 debug: running full-text regexp tests; score so far=3D-1.167 debug: is spam? score=3D-1.167 required=3D5 debug: tests=3DALL_TRUSTED,MISSING_SUBJECT,NO_REAL_NAME debug:=20 subtests=3D__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__U= NUSABLE_MSGID Mar 30 11:08:59 gate amavisd-new[25282]: SpamControl: done Mar 30 11:08:59 gate amavisd-new[25282]: Net::Server: Beginning prefork=20 (2 processes) Mar 30 11:08:59 gate amavisd-new[25282]: Net::Server: Starting "2" childr= en Mar 30 11:08:59 gate amavisd-new[25283]: Net::Server: Child Preforked=20 (25283) Mar 30 11:08:59 gate amavisd-new[25284]: Net::Server: Child Preforked=20 (25284) Mar 30 11:08:59 gate amavisd-new[25282]: Net::Server: Parent ready for=20 children. Thanks for help Jiri |
From: Gary V <li...@jo...> - 2006-03-30 14:46:20
|
Jiří wrote: >>> How could I learn my version of Net::Server and how to eventually >>> downgrade it? >>> Thanks for reply. >>> > Here are my debug details. I wasn´t able to find any major error there: > Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::Server 0.91 You very much have an error. You cannot use 0.91. You need to downgrade to 0.90. I provided instructions in a previous post. Gary V |
From: Gary V <li...@jo...> - 2006-03-30 15:12:28
|
Gary wrote: > Jiří wrote: > Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error in > processing, id=09408-03, decoding2-get-file-types FAILED: 'file' utility > (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd-new line 3853. >>>> How could I learn my version of Net::Server and how to eventually >>>> downgrade it? >>>> Thanks for reply. >>>> >> Here are my debug details. I wasn´t able to find any major error there: >> Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::Server 0.91 > You very much have an error. You cannot use 0.91. You need to > downgrade to 0.90. I provided instructions in a previous post. I should mention that this may not necessarily solve the problem. It will be interesting if it does or does not so be sure to let us know. Gary V |
From: Gary V <li...@jo...> - 2006-03-30 15:48:24
|
Gary wrote: > Gary wrote: >> Jiří wrote: >> Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error in >> processing, id=09408-03, decoding2-get-file-types FAILED: 'file' utility >> (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd-new line 3853. >>>>> How could I learn my version of Net::Server and how to eventually >>>>> downgrade it? >>>>> Thanks for reply. >>>>> >>> Here are my debug details. I wasn´t able to find any major error there: >>> Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::Server 0.91 >> You very much have an error. You cannot use 0.91. You need to >> downgrade to 0.90. I provided instructions in a previous post. > I should mention that this may not necessarily solve the problem. > It will be interesting if it does or does not so be sure to let us know. I think you will find this is the problem. I installed 0.91 on a system using 20030616-p10 from Debian and got this: Mar 30 01:43:47 sfa amavis[3067]: (03061-01) run_command: child process [3067] failed to exec /usr/bin/file /var/lib/amavis/amavis-20060330T014346-03061/parts/part-00001: Can't close main::stdin: Bad file descriptor at /usr/sbin/amavisd-new line 1131, <GEN10> line 396. Mar 30 01:43:47 sfa amavis[3061]: (03061-01) TROUBLE in check_mail: decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd-new line 3853. Mar 30 01:43:47 sfa amavis[3061]: (03061-01) PRESERVING EVIDENCE in /var/lib/amavis/amavis-20060330T014346-03061 Mar 30 01:43:47 sfa postfix/smtp[3066]: B32B81778B: to=<ga...@ex...>, relay=127.0.0.1[127.0.0.1], delay=1, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=03061-01, decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd-new line 3853. (in reply to end of DATA command)) Gary V |
From: <cer...@sp...> - 2006-03-31 06:48:49
|
Gary V napsal(a): > Gary wrote: > > =20 >> Gary wrote: >> =20 > > =20 >>> Ji=F8=ED wrote: >>> =20 > > =20 >>> Mar 21 14:44:56 gate amavis[9408]: (09408-03) ESMTP> 451 4.5.0 Error = in >>> processing, id=3D09408-03, decoding2-get-file-types FAILED: 'file' ut= ility >>> (/usr/bin/file) failed, status=3D1 (256 ) at /usr/sbin/amavisd-new li= ne 3853. >>> =20 > > =20 >>>>>> How could I learn my version of Net::Server and how to eventually >>>>>> downgrade it? >>>>>> Thanks for reply. >>>>>> >>>>>> =20 > =20 > =20 >>>> Here are my debug details. I wasn=B4t able to find any major error t= here: >>>> =20 > > =20 >>>> Mar 30 11:08:58 gate amavisd-new[25282]: Module Net::Server = 0.91 >>>> =20 > > =20 >>> You very much have an error. You cannot use 0.91. You need to >>> downgrade to 0.90. I provided instructions in a previous post. >>> =20 > > =20 >> I should mention that this may not necessarily solve the problem. >> It will be interesting if it does or does not so be sure to let us kno= w. >> =20 > > I think you will find this is the problem. I installed 0.91 on a > system using 20030616-p10 from Debian and got this: > > Mar 30 01:43:47 sfa amavis[3067]: (03061-01) run_command: > child process [3067] failed to exec /usr/bin/file > /var/lib/amavis/amavis-20060330T014346-03061/parts/part-00001: > Can't close main::stdin: Bad file descriptor at /usr/sbin/amavisd-new > line 1131, <GEN10> line 396. > =20 > Mar 30 01:43:47 sfa amavis[3061]: (03061-01) TROUBLE in check_mail: > decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed= , > status=3D1 (256 ) at /usr/sbin/amavisd-new line 3853. > =20 > Mar 30 01:43:47 sfa amavis[3061]: (03061-01) PRESERVING EVIDENCE > in /var/lib/amavis/amavis-20060330T014346-03061 > > Mar 30 01:43:47 sfa postfix/smtp[3066]: B32B81778B: to=3D<garyv@example= .com>, > relay=3D127.0.0.1[127.0.0.1], delay=3D1, status=3Ddeferred (host 127.0= .0.1[127.0.0.1] > said: 451 4.5.0 Error in processing, id=3D03061-01, decoding2-get-fil= e-types > FAILED: 'file' utility (/usr/bin/file) failed, status=3D1 (256 ) > at /usr/sbin/amavisd-new line 3853. (in reply to end of DATA command= )) > > Gary V > =20 Hello, well, it helped. After downgrading to Net::Server 0.90 everything works=20 fine. Here is complete debug output of mail processing: Mar 31 08:28:21 gate postfix/smtpd[20707]: connect from=20 mx1.seznam.cz[212.80.76.45] Mar 31 08:28:21 gate amavis[17149]: (17149-03) lookup_ip_acl:=20 key=3D"127.0.0.1" matches "127.0.0.1", result=3D1 Mar 31 08:28:21 gate amavis[17149]: (17149-03) prolong_timer after new=20 request - timer reset: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-03) SMTP> 220 [127.0.0.1]=20 ESMTP amavisd-new service ready Mar 31 08:28:21 gate amavis[17149]: (17149-03) prolong_timer after=20 reading SMTP command: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-03) SMTP< EHLO gate.sps-pi.cz\= r\n Mar 31 08:28:21 gate amavis[17149]: (17149-03) ESMTP> 250-[127.0.0.1] Mar 31 08:28:21 gate amavis[17149]: (17149-03) ESMTP> 250-PIPELINING Mar 31 08:28:21 gate amavis[17149]: (17149-03) ESMTP> 250-SIZE Mar 31 08:28:21 gate amavis[17149]: (17149-03) ESMTP> 250-8BITMIME Mar 31 08:28:21 gate amavis[17149]: (17149-03) ESMTP> 250=20 ENHANCEDSTATUSCODES Mar 31 08:28:21 gate amavis[17149]: (17149-03) prolong_timer after=20 reading SMTP command: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-03) ESMTP< MAIL=20 FROM:<j.c...@em...>\r\n Mar 31 08:28:21 gate amavis[17149]: (17149-03) prolong_timer after MAIL=20 FROM received - timer reset: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"j.c...@em...", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) ESMTP> 250 2.1.0 Sender=20 j.c...@em... OK Mar 31 08:28:21 gate postfix/smtpd[20707]: NOQUEUE:=20 client=3Dmx1.seznam.cz[212.80.76.45] Mar 31 08:28:21 gate amavis[17149]: (17149-04) prolong_timer after=20 reading SMTP command: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-04) ESMTP< RCPT=20 TO:<cer...@sp...>\r\n Mar 31 08:28:21 gate amavis[17149]: (17149-04) ESMTP> 250 2.1.5=20 Recipient cer...@sp... OK Mar 31 08:28:21 gate amavis[17149]: (17149-04) prolong_timer after=20 reading SMTP command: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-04) ESMTP< DATA\r\n Mar 31 08:28:21 gate amavis[17149]: (17149-04) prolong_timer after DATA=20 received - timer reset: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-04) ESMTP::10024=20 /var/lib/amavis/amavis-20060331T082055-17149: <j.c...@em...> ->=20 <cer...@sp...> Received: from gate.sps-pi.cz ([127.0.0.1]) by=20 localhost (gate [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id=20 17149-04 for <cer...@sp...>; Fri, 31 Mar 2006 08:28:21 +0200 (CEST) Mar 31 08:28:21 gate amavis[17149]: (17149-04) ESMTP> 354 End data with=20 <CR><LF>.<CR><LF> Mar 31 08:28:21 gate amavis[17149]: (17149-04) ESMTP< .\r\n Mar 31 08:28:21 gate amavis[17149]: (17149-04) body hash:=20 1ebe9304624357436b65cc983270cbef Mar 31 08:28:21 gate amavis[17149]: (17149-04) Original mail size:=20 14861; quota set to: 7430500 bytes Mar 31 08:28:21 gate amavis[17149]: (17149-04) Checking:=20 <j.c...@em...> -> <cer...@sp...> Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"cer...@sp...", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"cer...@sp...", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) Extracting mime components Mar 31 08:28:21 gate amavis[17149]: (17149-04) Issued a new file name:=20 part-00001 Mar 31 08:28:21 gate amavis[17149]: (17149-04) Issued a new file name:=20 part-00002 Mar 31 08:28:21 gate amavis[17149]: (17149-04) mime_decode_preamble: 1 li= nes Mar 31 08:28:21 gate amavis[17149]: (17149-04) mime_decode:=20 Content-type: multipart/mixed Mar 31 08:28:21 gate amavis[17149]: (17149-04) mime_decode:=20 Content-type: text/plain, name: Mar 31 08:28:21 gate amavis[17149]: (17149-04) Charging 13082 bytes to=20 remaining quota 7430500 (out of 7430500, (0%)) - by mime_decode Mar 31 08:28:21 gate amavis[17149]: (17149-04) mime_decode:=20 Content-type: application/octet-stream, name: eicar.com Mar 31 08:28:21 gate amavis[17149]: (17149-04) Charging 68 bytes to=20 remaining quota 7417418 (out of 7430500, (0%)) - by mime_decode Mar 31 08:28:21 gate amavis[17149]: (17149-04) prolong_timer after=20 mime_decode-1: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-04) Checking for banned MIME=20 types and names Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned -=20 mime-type: multipart/mixed Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE:=20 key=3D"multipart/mixed", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned -=20 mime-type: text/plain Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE:=20 key=3D"text/plain", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned -=20 mime-type: application/octet-stream Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned -=20 declared names: eicar.com Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE:=20 key=3D"application/octet-stream", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE:=20 key=3D"eicar.com", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"cer...@sp...", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) decode_parts: level=3D1,=20 #parts=3D2 : part-00001, part-00002 Mar 31 08:28:21 gate amavis[17149]: (17149-04) run_command: [20792]=20 /usr/bin/file=20 /var/lib/amavis/amavis-20060331T082055-17149/parts/part-00001 </dev/null Mar 31 08:28:21 gate amavis[17149]: (17149-04) File-type of part-00001:=20 ISO-8859 text; (.txt) Mar 31 08:28:21 gate amavis[17149]: (17149-04) run_command: [20793]=20 /usr/bin/file=20 /var/lib/amavis/amavis-20060331T082055-17149/parts/part-00002 </dev/null Mar 31 08:28:21 gate amavis[17149]: (17149-04) File-type of part-00002:=20 ASCII text, with no line terminators; (.asc) Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"cer...@sp...", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) Checking for banned=20 (contents-based) file types, 2 parts Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned=20 (part-00001) - file type: .txt Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE: key=3D".txt", n= o=20 match Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned=20 (part-00001) - file type: ISO-8859 text Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE: key=3D"ISO-8859= =20 text", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned=20 (part-00002) - file type: .asc Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE: key=3D".asc", n= o=20 match Mar 31 08:28:21 gate amavis[17149]: (17149-04) check_for_banned=20 (part-00002) - file type: ASCII text, with no line terminators Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE: key=3D"ASCII=20 text, with no line terminators", no match Mar 31 08:28:21 gate amavis[17149]: (17149-04) decompose_part:=20 part-00001 - atomic Mar 31 08:28:21 gate amavis[17149]: (17149-04) do_ascii: Decoding part=20 part-00002 (0 items) Mar 31 08:28:21 gate amavis[17149]: (17149-04) decompose_part:=20 part-00002 - atomic Mar 31 08:28:21 gate amavis[17149]: (17149-04) prolong_timer after=20 decoding: remaining time =3D 300 s Mar 31 08:28:21 gate amavis[17149]: (17149-04) lookup_RE: key=3D"MAIL", n= o=20 match Mar 31 08:28:21 gate amavis[17149]: (17149-04) Using ESET Software NOD32=20 Command Line Interface v 2.51: /usr/sbin/nod32 --subdir=20 /var/lib/amavis/amavis-20060331T082055-17149/parts Mar 31 08:28:21 gate amavis[17149]: (17149-04) run_command: [20794]=20 /usr/sbin/nod32 --subdir=20 /var/lib/amavis/amavis-20060331T082055-17149/parts </dev/null 2>&1 Mar 31 08:28:23 gate amavis[17149]: (17149-04) run_av: /usr/sbin/nod32=20 status=3D10 (2560 ),\nNOD32 on demand scanner module for Linux, version=20 2.51.1, (C) 2005 Eset, spol. s r.o.\n\nUsing LFS license:\n Stredni=20 Prumyslova skola a vyssi odborna skola Pisek=20 (/etc/nod32/license/nod32_pro_linux_file_server.lic)\n\nSignatures=20 database module, version 1.1358 (20060110).\nArchives support module,=20 version 1.040 (20051222).\nAdvanced heuristics module, version 1.024=20 (20060108).\n\nCommand line: --subdir=20 /var/lib/amavis/amavis-20060331T082055-17149/parts \n\nScanning started=20 on Fri 31 Mar 2006 08:28:23 AM CEST\nobject=3D"file",=20 name=3D"/var/lib/amavis/amavis-20060331T082055-17149/parts/part-00002",=20 virus=3D"Eicar test file", action=3D"", info=3D"", lines=3D0\n\nScanning=20 finished on Fri 31 Mar 2006 08:28:23 AM CEST\nTotal time: ...0 sec=20 (0:00:00)\nTotal files: ...2\nInfected files: 1\nCleaned files: =20 0\nErroneous files: 0\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) run_av: INFECTED: Eicar=20 test file Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 virus_scan: remaining time =3D 300 s Mar 31 08:28:23 gate amavis[17149]: (17149-04) white_black_list:=20 checking sender <j.c...@em...> Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"j.c...@em...", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_RE:=20 key=3D"j.c...@em...", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_hash:=20 key=3D"j.c...@em...", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_hash:=20 key=3D"j.cervenka@", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_hash:=20 key=3D"email.cz", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_hash:=20 key=3D".email.cz", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_hash: key=3D".cz",=20 no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_hash: key=3D".", no= =20 match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"j.c...@em...", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) infected or banned=20 contents, skipping spam_scan Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"cer...@sp...", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_RE: key=3D"Eicar=20 test file" matches "(?i-xsm:^(EICAR|Joke\\.|Junk\\.))", result=3D0 Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: X-Quarantine-id:=20 <virus-20060331-082823-17149-04>\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: X-Amavis-Alert:=20 INFECTED, message contains virus: Eicar test file\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup: (scalar) matches,=20 result=3D"virus-quarantine" Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: X-Envelope-From:=20 <j.c...@em...>\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: X-Envelope-To:=20 <cer...@sp...>\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) DO_QUARANTINE, sender: Mar 31 08:28:23 gate amavis[17149]: (17149-04) local delivery: <> ->=20 <virus-quarantine>,=20 mbx=3D/var/lib/amavis/virusmails/virus-20060331-082823-17149-04 Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: Delivered-To:=20 virus-quarantine\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: Return-Path: <>\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) one_response_for_all <>:=20 success, dsn_needed=3D0, '250 2.6.0 Ok, delivered to=20 /var/lib/amavis/virusmails/virus-20060331-082823-17149-04, id=3D17149-04' Mar 31 08:28:23 gate amavis[17149]: (17149-04) DO_QUARANTINE done Mar 31 08:28:23 gate amavis[17149]: (17149-04) DO_VIRUS - NOTIFICATIONS,=20 sender: j.c...@em... Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup: (scalar) matches,=20 result=3D"no...@sp..." Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_acl:=20 key=3D"j.c...@em...", no match Mar 31 08:28:23 gate amavis[17149]: (17149-04) first_received_from:=20 [195.113.101.210]\t Mar 31 08:28:23 gate amavis[17149]: (17149-04) first_received_from:=20 [195.113.101.210]\t Mar 31 08:28:23 gate amavis[17149]: (17149-04) string_to_mime_entity=20 Date: Fri, 31 Mar 2006 08:28:23 +0200 (CEST) Mar 31 08:28:23 gate amavis[17149]: (17149-04) string_to_mime_entity=20 From: amavisd-new <postmaster@gate> Mar 31 08:28:23 gate amavis[17149]: (17149-04) string_to_mime_entity=20 Subject: VIRUS (Eicar test file) FROM <j.c...@em...> Mar 31 08:28:23 gate amavis[17149]: (17149-04) string_to_mime_entity To:=20 <no...@sp...> Mar 31 08:28:23 gate amavis[17149]: (17149-04) string_to_mime_entity=20 Message-ID: <VA17149-04@gate> Mar 31 08:28:23 gate amavis[17149]: (17149-04) SEND via SMTP:=20 [127.0.0.1]:10025 <> -> <no...@sp...> Mar 31 08:28:23 gate postfix/smtpd[20714]: connect from=20 localhost.localdomain[127.0.0.1] Mar 31 08:28:23 gate amavis[17149]: (17149-04) Remote host introduces=20 itself as: gate.sps-pi.cz Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 fwd-connect: remaining time =3D 300 s Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 fwd-mail-from: remaining time =3D 300 s Mar 31 08:28:23 gate postfix/smtpd[20714]: 64C8F2081EA:=20 client=3Dlocalhost.localdomain[127.0.0.1] Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 fwd-rcpt-to: remaining time =3D 300 s Mar 31 08:28:23 gate amavis[17149]: (17149-04) response to DATA: "354=20 End data with <CR><LF>.<CR><LF>" Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 fwd-data: remaining time =3D 300 s Mar 31 08:28:23 gate postfix/cleanup[20715]: 64C8F2081EA:=20 message-id=3D<VA17149-04@gate> Mar 31 08:28:23 gate postfix/qmgr[18660]: 64C8F2081EA: from=3D<>,=20 size=3D2873, nrcpt=3D1 (queue active) Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 fwd-data-end: remaining time =3D 300 s Mar 31 08:28:23 gate amavis[17149]: (17149-04) response to data end:=20 "250 Ok: queued as 64C8F2081EA" Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 fwd-rundown-1: remaining time =3D 300 s Mar 31 08:28:23 gate postfix/smtpd[20714]: disconnect from=20 localhost.localdomain[127.0.0.1] Mar 31 08:28:23 gate amavis[17149]: (17149-04) mail_via_smtp: 250 2.6.0=20 Ok, id=3D17149-04, from MTA: 250 Ok: queued as 64C8F2081EA Mar 31 08:28:23 gate amavis[17149]: (17149-04) one_response_for_all <>:=20 success, dsn_needed=3D0, '250 2.6.0 Ok, id=3D17149-04, from MTA: 250 Ok:=20 queued as 64C8F2081EA' Mar 31 08:28:23 gate amavis[17149]: (17149-04) DO_VIRUS - DONE Mar 31 08:28:23 gate amavis[17149]: (17149-04) lookup_RE: key=3D"Eicar=20 test file" matches "(?i-xsm:^(EICAR|Joke\\.|Junk\\.))", result=3D0 Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: Received: from=20 gate.sps-pi.cz ([127.0.0.1])\n\tby localhost (gate [127.0.0.1])=20 (amavisd-new, port 10024) with ESMTP\n\tid 17149-04 for=20 <cer...@sp...>;\n\tFri, 31 Mar 2006 08:28:21 +0200 (CEST)\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: X-Virus-Scanned:=20 by amavisd-new-20030616-p10 (Debian) at sps-pi.cz\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) header: X-Amavis-Alert:=20 INFECTED, message contains virus: Eicar test file\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) headers CLUSTERING: done=20 all 0 recips in one go Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 forwarding: remaining time =3D 300 s Mar 31 08:28:23 gate amavis[17149]: (17149-04) one_response_for_all=20 <j.c...@em...>: all DISCARD, '250 2.7.1 Ok, discarded,=20 id=3D17149-04 - VIRUS: Eicar test file' Mar 31 08:28:23 gate amavis[17149]: (17149-04)=20 warnsender_with_pass=3D(,,,), dsn_needed=3D, exit=3D0, 250 2.7.1 Ok,=20 discarded, id=3D17149-04 - VIRUS: Eicar test file Mar 31 08:28:23 gate amavis[17149]: (17149-04) INFECTED (Eicar test=20 file), <j.c...@em...> -> <cer...@sp...>, quarantine=20 virus-20060331-082823-17149-04, Message-ID:=20 <584...@em...>, Hits: - Mar 31 08:28:23 gate amavis[17149]: (17149-04) sending SMTP response:=20 "250 2.7.1 Ok, discarded, id=3D17149-04 - VIRUS: Eicar test file" Mar 31 08:28:23 gate amavis[17149]: (17149-04) timer stopped after DATA e= nd Mar 31 08:28:23 gate amavis[17149]: (17149-04) rmdir_recursively:=20 /var/lib/amavis/amavis-20060331T082055-17149/parts, excl=3D1 Mar 31 08:28:23 gate amavis[17149]: (17149-04) TIMING [total 1787 ms] -=20 SMTP EHLO: 2 (0%), SMTP pre-MAIL: 2 (0%), SMTP pre-DATA-flush: 17 (1%),=20 SMTP DATA: 91 (5%), body hash: 0 (0%), mime_decode: 19 (1%),=20 get-file-type: 18 (1%), get-file-type: 13 (1%), decompose_part: 4 (0%),=20 decompose_part: 1 (0%), parts: 0 (0%), AV-scan-1: 1479 (83%),=20 write-header: 55 (3%), save-to-local-mailbox: 0 (0%), fwd-connect: 22=20 (1%), fwd-mail-from: 1 (0%), fwd-rcpt-to: 2 (0%), write-header: 3 (0%),=20 fwd-data: 22 (1%), fwd-data-end: 27 (1%), fwd-rundown: 2 (0%),=20 unlink-2-files: 7 (0%), rundown: 0 (0%) Mar 31 08:28:23 gate amavis[17149]: (17149-04) ESMTP> 250 2.7.1 Ok,=20 discarded, id=3D17149-04 - VIRUS: Eicar test file Mar 31 08:28:23 gate amavis[17149]: (17149-04) prolong_timer after=20 reading SMTP command: remaining time =3D 0 s Mar 31 08:28:23 gate amavis[17149]: (17149-04) ESMTP< QUIT\r\n Mar 31 08:28:23 gate amavis[17149]: (17149-04) ESMTP> 221 2.0.0=20 [127.0.0.1] (amavisd) closing transmission channel Mar 31 08:28:23 gate postfix/smtpd[20707]: disconnect from=20 mx1.seznam.cz[212.80.76.45] Mar 31 08:28:23 gate postfix/smtp[20716]: 64C8F2081EA:=20 to=3D<no...@sp...>, relay=3D172.16.0.2[172.16.0.2], delay=3D0, status= =3Dsent=20 (250 Data received OK.) Mar 31 08:28:23 gate postfix/qmgr[18660]: 64C8F2081EA: removed Thank you very much for assistance. Jiri |
From: Ramdas P. <ram...@gm...> - 2006-04-17 08:44:44
|
T24gMy8yOS8wNiwgR2FyeSBWIDxsaXN0c0Bqb2hubWVjaGFtLmNvbT4gd3JvdGU6Cj4gSmn47SB3 cm90ZToKPgo+ID4gTWFyayBNYXJ0aW5lYyBuYXBzYWwoYSk6Cj4gPj4gSmn47SwKPiA+Pgo+ID4+ Cj4gPj4+IEm0bSB0cnlpbmcgdG8gcnVuIGFtYXZpc2QtbmV3IHdpdGggcG9zdGZpeCBhbmQgbm9k MzIgKDIwMDMwNjE2cDEwLTUpIG9uCj4gPj4+IGRlYmlhbiBzYXJnZSBidXQgd2l0aCBjb25maWcg ZmlsZSBmcm9tIHByZXZpb3VzIGluc3RhbGxhdGlvbiAoaXQgd2FzCj4gPj4+IGFtYXZpcyB2ZXJz aW9uIGZyb20gZGViaWFuIHVuc3RhYmxlKS4KPgo+IFRyeWluZyB0byB1c2UgYSBuZXdlciB2ZXJz aW9uIG9mIGEgY29uZmlnIGZpbGUgd2l0aCBhbiBvbGRlciB2ZXJzaW9uCj4gb2YgYW1hdmlzZC1u ZXcgaW4gbWFueSBjYXNlcyB3aWxsIGNhdXNlIGFtYXZpc2QtbmV3IHRvIGZhaWwgdG8gc3RhcnQu Cj4gVGhlIGZhY3QgdGhhdCB5b3UgYXJlIGFibGUgdG8gc3RhcnQgdXAgbW9zdCBsaWtlbHkgbWVh bnMgeW91cgo+IHBhcnRpY3VsYXIgc2V0dGluZ3MgYXJlIHN0aWxsIGNvbXBhdGlibGUgd2l0aCB0 aGUgb2xkZXIgdmVyc2lvbi4KPgo+ID4+Pgo+ID4+PiBNYXIgMjEgMTQ6NDQ6NTYgZ2F0ZSBhbWF2 aXNbOTQwOF06ICgwOTQwOC0wMykgRVNNVFA+IDQ1MSA0LjUuMCBFcnJvciBpbgo+ID4+PiBwcm9j ZXNzaW5nLCBpZD0wOTQwOC0wMywgZGVjb2RpbmcyLWdldC1maWxlLXR5cGVzIEZBSUxFRDogJ2Zp bGUnIHV0aWxpdHkKPiA+Pj4gKC91c3IvYmluL2ZpbGUpIGZhaWxlZCwgc3RhdHVzPTEgKDI1NiAp IGF0IC91c3Ivc2Jpbi9hbWF2aXNkLW5ldyBsaW5lIDM4NTMuCj4gPj4+Cj4gPj4+IFdoZXJlIGNh biBiZSB0aGUgcHJvYmxlbT8gVGhlIGFtYXZpcyBzdG9wcyB0aGUgZW1haWxzIGV2ZW4gaWYgdGhl eSBhcmUKPiA+Pj4gcGxhaW4gdGV4dC4gTWFudWFsIHJ1bm5pbmcgb2YgL3Vzci9iaW4vZmlsZSBv biBzdG9yZWQgZW1haWwudHh0IHdvcmtzIGZpbmUuCj4gPj4+Cj4KPiA+PiBTdWNoIHRlc3Qgc2hv dWxkIGJlIHJ1biBhcyB1c2VyIHZzY2FuIChvciB3aGF0ZXZlciBhbWF2aXNkIHJ1bnMgdW5kZXIp Cj4gPj4gdG8gYmUgYWJsZSB0byBzcG90IGZpbGUgYWNjZXNzL3Byb3RlY3Rpb24gdmlvbGF0aW9u cy4KPiA+PiBJZiBydW5uaW5nIGNocm9vdGVkLCBhIHRlc3Qgc2hvdWxkIGJlIGRvbmUgY2hyb290 ZWQgYXMgd2VsbC4KPiA+Pgo+ID4+IEJ0dywgeW91IG11c3Qgbm90IGhhdmUgTmV0OjpTZXJ2ZXIg bmV3ZXIgdGhhbiAwLjkwLCB3aGljaCBpcwo+ID4+IHRoZSBsYXN0IHZlcnNpb24gY29tcGF0aWJs ZSB3aXRoIGFtYXZpc2QtbmV3IDw9IDIuMy4zCj4gPj4gLi4uIGFsdGhvdWdoIEkgZG8gbm90IHRo aW5rIHRoaXMgd2FzIHlvdXIgcHJvYmxlbS4KPiA+Pgo+ID4+ICAgTWFyawo+ID4+Cj4KPiA+IEhv dyBjb3VsZCBJIGxlYXJuIG15IHZlcnNpb24gb2YgTmV0OjpTZXJ2ZXIgYW5kIGhvdyB0byBldmVu dHVhbGx5Cj4gPiBkb3duZ3JhZGUgaXQ/Cj4gPiBUaGFua3MgZm9yIHJlcGx5Lgo+Cj4gSWYgeW91 IGFyZSBydW5uaW5nIFNhcmdlIHlvdSBhcmUgcHJvYmFibHkgdXNpbmcgYW4gb2xkZXIgdmVyc2lv bi4KPiBZb3UgY2FuIGRldGVybWluZSB0aGUgdmVyc2lvbiBieSBzdGFydGluZyBhbWF2aXNkLW5l dyBpbiBkZWJ1ZyBtb2RlCj4gYW5kIG5vdGljaW5nIG5lYXIgdGhlIGJlZ2lubmluZyBvZiB0aGUg ZGVidWcgb3V0cHV0LiBPciB0cnk6Cj4KPiBwZXJsIC1NTmV0OjpTZXJ2ZXIgLWUgJ3ByaW50ICIk TmV0OjpTZXJ2ZXI6OlZFUlNJT05cbiI7Jwo+Cj4gVGhlIG5ld2VzdCB2ZXJzaW9uIGF0IHRoZSBt b21lbnQgZnJvbSBEZWJpYW4gaXMgMC45MC4gSWYgeW91IGluc3RhbGxlZAo+IGZyb20gQ1BBTiBo b3dldmVyIHlvdSBtYXkgaGF2ZSBhIG5ld2VyIHZlcnNpb24uIElmIHlvdSBkaWQgaW5zdGFsbAo+ IGZyb20gQ1BBTiAob3Igc291cmNlKSBhbmQgeW91IGFyZSB1c2luZyBhIG5ld2VyIHZlcnNpb24s IHlvdSBjb3VsZAo+IHNpbXBseSBpbnN0YWxsIDAuOTAgb3ZlciB0aGUgdG9wIG9mIHRoZSBuZXdl ciB2ZXJzaW9uLgo+Cj4gY2QgL3Vzci9sb2NhbC9zcmMKPiB3Z2V0IGh0dHA6Ly9zZWFyY2guY3Bh bi5vcmcvQ1BBTi9hdXRob3JzL2lkL1IvUkgvUkhBTkRPTS9OZXQtU2VydmVyLTAuOTAudGFyLmd6 Cj4gdGFyIHh6dmYgTmV0LVNlcnZlci0wLjkwLnRhci5nego+IGNkIE5ldC1TZXJ2ZXItMC45MAo+ IHBlcmwgTWFrZWZpbGUuUEwKPiBtYWtlICYmIG1ha2UgdGVzdCAmJiBtYWtlIGluc3RhbGwKPgo+ IE9uIGEgRGViaWFuIHN5c3RlbSAoYW5kIHByb2JhYmx5IG90aGVycykgaWYgeW91IGluc3RhbGwg ZnJvbSBDUEFOIChvcgo+IHNvdXJjZSksIHRoYXQgaXMgdGhlIGNvcHkgUGVybCB3aWxsIGZpbmQg Zmlyc3QsIHNvIGFueSBsaWJuZXQtc2VydmVyLXBlcmwKPiBwYWNrYWdlIHlvdSBpbnN0YWxsIGZy b20gRGViaWFuIHdpbGwgZnJvbSBub3cgb24gYmUgaWdub3JlZC4gVGhpcyBpcwo+IGp1c3QgZm9y IGZ1dHVyZSByZWZlcmVuY2UuCj4KPiBHYXJ5IFYKPgo+Cj4KPiAtLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCj4gVGhpcyBTRi5OZXQgZW1haWwg aXMgc3BvbnNvcmVkIGJ5IHhQTUwsIGEgZ3JvdW5kYnJlYWtpbmcgc2NyaXB0aW5nIGxhbmd1YWdl Cj4gdGhhdCBleHRlbmRzIGFwcGxpY2F0aW9ucyBpbnRvIHdlYiBhbmQgbW9iaWxlIG1lZGlhLiBB dHRlbmQgdGhlIGxpdmUgd2ViY2FzdAo+IGFuZCBqb2luIHRoZSBwcmltZSBkZXZlbG9wZXIgZ3Jv dXAgYnJlYWtpbmcgaW50byB0aGlzIG5ldyBjb2RpbmcgdGVycml0b3J5IQo+IGh0dHA6Ly9zZWwu YXMtdXMuZmFsa2FnLm5ldC9zZWw/Y21kPWxuayZraWQ9MTEwOTQ0JmJpZD0yNDE3MjAmZGF0PTEy MTY0Mgo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCj4g QU1hVmlTLXVzZXIgbWFpbGluZyBsaXN0Cj4gQU1hVmlTLXVzZXJAbGlzdHMuc291cmNlZm9yZ2Uu bmV0Cj4gaHR0cHM6Ly9saXN0cy5zb3VyY2Vmb3JnZS5uZXQvbGlzdHMvbGlzdGluZm8vYW1hdmlz LXVzZXIKPiBBTWFWaVMtRkFROmh0dHA6Ly93d3cuYW1hdmlzLm9yZy9hbWF2aXMtZmFxLnBocDMK PiBBTWFWaVMtSG93VG9zOmh0dHA6Ly93d3cuYW1hdmlzLm9yZy9ob3d0by8KPgpUaGFueCBHcmF5 LAoKVGhpcyBzb2x2ZWQgbXkgcHJvYmxlbS4KVGhhbnggYSBMb3QuCgpSZWdhcmRzClJhbQo= |