[Avcheck] Fwd: Re: AV Server

[Len Conrad]

This problem is beginning to look like it only occurs when the "SMTPD -o 
content filter" is activated.

Could the software really be the cause.  No amount of hardware testing 
shows any memory or disk problems (brand new Dell server).

Len

------------------------------


> > In order to pin this on kasp or avcheck rather than the , you're going to
> > have be really rigourous in doing the A vs B testing.
> >
> > I would start with using the master.cf.save file rather than the master.cf
> > file with the av settings.  then just hit the server really hard with the
> > merak test, and/or the postfix smtp-source program.  the destination
> > mailbox can be on imail where it just dumps all msgs to that box to nul
>
>Ok, here are the results of testing...
>
>Mass sending of email (~500 emails)
>     without content filter ===> no errors
>     with content filter     ====> no errors
>
>Sending of an email with the EICAR-Test-File ( 1 email)
>     without content filter ===> no errors
>     with content fillter ===> error
>                                          ^^^^^
>
>What is the "virus detection engine" doing different when a virus
>is discovered that is causing the following error message on the
>console and the message logfile?
>
>/kernel: dscheck(#da/2): b_bcount 37 is not on a sector boundary (ssize 512)