[Avcheck] SuSE eMail Server 3.0

Morten Christensen mc-avcheck@mc.cx
Sun, 18 Aug 2002 23:49:36 +0200


Michael Tokarev wrote in mail, at 18-08-02 21:31:

>Morten Christensen wrote:
>  
>
>>Now I have tried to install avcheck 0.90 and kavdaemon 4.0.1
>>on a SuSE eMail server 3.0 in the same way.
>>
>  
>
>>I have used the manual test in readme.avp and
>>administrator received a virus-alert mail.
>>
>>But when I configure postfix with the lines in master.cf
>>and writes content_filter=avcheck to main.cf through
>>the email-server-web-interface, the mail-system stops
>>working.
>>
>>The message in /var/log/mail is
>>
>>Aug 17 13:19:24 email postfix/master[498]: warning: process
>>/usr/lib/postfix/pipe pid 1295 exit status 1
>>Aug 17 13:19:24 email postfix/master[498]: warning:
>>/usr/lib/postfix/pipe: bad command startup -- throttling
>>Aug 17 13:19:24 email postfix/qmgr[1290]: warning: end of input while
>>receiving string data from service private/avcheck
>>Aug 17 13:19:24 email postfix/qmgr[1290]: warning: private/avcheck:
>>malformed response
>>
>
>And this IS a problem, but it is logged few lines BEFORE the above
>error messages in your mail log file.  It seems your pipe mail
>delivery agent isn't configured properly.
>  
>
I hurry to give you a better mail-log:

Aug 17 13:18:52 email postfix/master[498]: reload configuration
Aug 17 13:19:23 email postfix/smtpd[1292]: connect from mch[10.10.35.11]
Aug 17 13:19:23 email postfix/smtpd[1292]: 84AA7275B2: 
client=mch[10.10.35.11]
Aug 17 13:19:23 email postfix/cleanup[1293]: 84AA7275B2: 
message-id=<014901c245e0$5dbdb5e0$0b230a0a@mch>
Aug 17 13:19:23 email postfix/qmgr[1290]: 84AA7275B2: from=<mch@mc.cx>, 
size=652, nrcpt=1 (queue active)
Aug 17 13:19:23 email postfix/smtpd[1292]: disconnect from mch[10.10.35.11]
Aug 17 13:19:23 email postfix/pipe[1295]: fatal: unknown flag: q (ignored)
Aug 17 13:19:24 email postfix/master[498]: warning: process 
/usr/lib/postfix/pipe pid 1295 exit status 1
Aug 17 13:19:24 email postfix/master[498]: warning: 
/usr/lib/postfix/pipe: bad command startup -- throttling
Aug 17 13:19:24 email postfix/qmgr[1290]: warning: end of input while 
receiving string data from service private/avcheck
Aug 17 13:19:24 email postfix/qmgr[1290]: warning: private/avcheck: 
malformed response

>>When content_filter=avcheck is commented out, mails start 
>>
>>to pass through the system again but of cource without the
>>needed antivirus-check.
>>
>>Has anybody tried avcheck with eMail Server3.
>>
>
>If this is postfix, the answer is - sure...
>

It is postfix, but the SuSE eMail server version might be
strange?

>>or can help with the log-messages?
>>    
>>
>
>
>What *postfix* version do you use?  
>

Good question. I have forgotten how to find the version-number:-(
and SuSE eMail server is quote closed.

>I have only one small guess:
>try looking up at your pipe(8) manpage and see if `q' flag is
>there.  And, first of all, at the real error message.
>  
>

man pipe has only
flags=BFR.>

I tried to change the flag from "q" to "R", and then the avcheck
started to work, but the danish caracters in the subject line
did not survive, so it cannot be used in production.


mvh...
Morten Christensen