From: Hakan POLATKAN (hakan@soulmaster.org)
Date: Thu 03 Mar 2005 - 12:48:01 EET
Merhaba,
> Buyuk olasilikla spamd, spamc veya qmail-scanner.pl dosyasinin izinlerinde
> problem var. spamd veya spamc dosyasinin izinlerinde problem olma ihtimali
> daha yuksek.
Izinlerde bir problem oldugu dogruydu, duzelttim. Fakat duzeltmeme ragmen ayni
hata iletilerini loglarin arasinda gordum. spamc'nin sahibini ve grubunu
spamd yaptim. Yine olmadi. Suid bit seklinde de denedim, yine olmadi. :) En
son asagidaki sekli aldi.
x:~# ls -l /usr/bin/spamc
-rwsr-sr-x 1 spamd spamd 21440 2005-01-02 09:04 /usr/bin/spamc
x:~# ls -al /usr/bin/spamc
-rwsr-sr-x 1 spamd spamd 21440 2005-01-02 09:04 /usr/bin/spamc
x:~# ls -al /var/qmail/bin/qmail-scanner-queue.pl
-rwsr-xr-x 1 qscand qscand 97751 2005-03-02
21:52 /var/qmail/bin/qmail-scanner-queue.pl
qmail-scanner posta iceriklerini kontrol ediyor. Bunu
yaptigini /var/spool/qmailscan/ dizini altindaki loglardan ve working, tmp
dizinlerinden gorebiliyorum.
qmail-scanner testi yaparken karantinaya alinan postalarin iceriklerinde bir
bozulma yok. qmail-scanner'in elinden kurtulmayi basaran zavalli
postaciklarin icerikleri bos gidiyor.
x:~# ls -al /var/spool/qmailscan/quarantine/new/
toplam 16
drwxrwx--- 2 qscand qscand 6 2005-03-02 22:00 .
drwxrwx--- 5 qscand qscand 36 2005-03-02 21:46 ..
-rw------- 1 qscand root 344 2005-03-02 21:57 mail11097934464931032
-rw------- 1 qscand root 1619 2005-03-02 21:57 mail11097934464931046
-rw------- 1 qscand root 344 2005-03-02 22:00 mail11097936004931144
-rw------- 1 qscand root 1571 2005-03-02 22:00 mail11097936014931156
Asagida goruldugu gibi karantinaya alinanlarin subject ve body kisimlarinda
problem yok.
x:~# head -n 20 /var/spool/qmailscan/quarantine/new/mail11097934464931046
Date: 2 Mar 2005 19:57:26 -0000
Message-ID: <20050302195726.1045.qmail@localhost>
From: Qmail-Scanner Test
<host-213-194-99-244-websahibi.com@localhost.host-213-194-99-244-websahibi.com>
To: Qmail-Scanner Test <admin@soulmaster.org>
Subject: Qmail-Scanner viral test (3/4): checking non-perlscanner AV...
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="gKMricLos+KVdGMg"
Content-Disposition: inline
--gKMricLos+KVdGMg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message 3/4
This is an example of an Email message containing a virus. It should
trigger the Qmail-Scanner system IF you have an anti virus scanner
installed. Note that this may fail on some AV packages if they decide
that the EICAR test virus must have a filename of "eicar.com". This
test virus will not be caught by perlscanner as it has the wrong
Iste, durum boyle...
Biraz daha dokuman karistirdim fakat bir cozum yolu bulamadim. Bu arada da
Debian hosuma gitmeye basladi. :)
> Saygilarimla,
> Serdar Aytekin
Serdar Bey, ilginiz icin tesekkur ederim.
Saygilarimla,
Hakan POLATKAN
_______________________________________________
Linux-sunucu mailing list
Linux-sunucu@liste.linux.org.tr
http://liste.linux.org.tr/mailman/listinfo/linux-sunucu