Read the changelog! (was Re: [Mimedefang] Multiplexor seems to be failign)
Trevor Morrison
trevor at hailix.com
Sun Aug 3 18:59:00 EDT 2003
Hi Alexander,
I think the uvscan is working correctly. When I feed it a directory
with the following command: uvscan --verbose [directory] it goes through
the files in the drectory and scans them. Now, when I feed it the file
with the ecar virus in it, it scans it, but say nothing!
The output of ldd /usr/local/bin/uvscan is:
[root at stud sysconfig]# ldd /usr/local/bin/uvscan
liblnxfv.so.4 => not found
libstdc++.so.2.8 => /usr/lib/libstdc++.so.2.8 (0x40027000)
libm.so.6 => /lib/libm.so.6 (0x40068000)
libc.so.6 => /lib/libc.so.6 (0x4008a000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
TIA
Trevor
Alexander Dalloz wrote:
>Hi Trevor!
>
>
>
>>Hi,
>>
>>The uvscan -version correctly reports the version and mimedefang.pl
>>-features also shows the virus scanner. I rechecked the
>>mimedefang-filter code and checked that the i18n reported en_US as
>>the local. Now, when I send a message with the ecar virus in it,
>>it reports this in the logs:
>>
>>
>
>Ok, locale is correct. But you did not answer whether McAfee is working
>properly when you give him a virus file like the eicar test virus.
>
>
>
>>Aug 3 06:14:51 stud mimedefang.pl[22657]: Problem running virus
>>scanner: code=127, category=swerr, action=tempfail
>>Aug 3 06:14:51 stud mimedefang.pl[22657]: filter: h73CEp73022700:
>>tempfail=1
>>Aug 3 06:14:51 stud mimedefang[22701]: h73CEp73022700: Tempfailing
>>because filter instructed us to
>>Aug 3 06:14:51 stud sendmail[22700]: h73CEp73022700: Milter: data,
>>reject=451 4.3.0 Problem running virus-scanner
>>Aug 3 06:14:51 stud sendmail[22700]: h73CEp73022700:
>>to=<trevor at hailix.com>, delay=00:00:00, pri=30461,
>>stat=Problem running virus-scanner
>>
>>
>
>Seems clear to me that McAfee/NAI is failing. "ldd /usr/local/bin/uvscan"
>reports all neccessary libraries?
>
>
>
>>Any help is appreciated.
>>
>>Trevor
>>
>>P.S. I have attached my mimedefang-filter if it helps.
>>
>>
>
>The mimedefang-filter code looks as default example.
>
>Alexander
>
>
>
>
More information about the MIMEDefang
mailing list