View Single Post
  #11  
Old 21st May 2007, 22:32
ArnOS ArnOS is offline
Junior Member
 
Join Date: Nov 2006
Posts: 25
Thanks: 0
Thanked 1 Time in 1 Post
Default

Well.. It's obvious that debugging is not actually my core business but here's what I did so far:

- Created user test with quota of 5 MB (.
- Created e-mail account in Thunderbird.
- Sent an e-mail from test user to test user self.

Thunderbird tells me the message cannot be sent, syslog says:

May 21 20:26:04 h1266987 postfix/local[13475]: BD60E1FC0E70: to=<web7_test@server1.example.com>, orig_to=<test@domain.tld>, relay=local, delay=10, status=bounced (can't create user output file. Command output: /bin/cat: write error: Disk quota exceeded procmail: Program failure (1) of "/home/admispconfig/ispconfig/tools/clamav/bin/clamassassin" procmail: Rescue of unfiltered data succeeded postdrop: warning: uid=10015: Disk quota exceeded sendmail: fatal: web7_test(10015): Error writing message file [13501] warn: bayes: cannot open bayes databases /var/www/web7/user/web7_test/.spamassassin/bayes_* R/O: tie failed: [13501] warn: bayes: cannot open bayes databases /var/www/web7/user/web7_test/.spamassassin/bayes_* R/O: tie failed: [13501] warn: bayes: cannot open bayes databases /var/www/web7/user/web7_test/.spamassassin/bayes_* R/O: tie failed: procmail: Quota exceeded while writing "/var/www/web7/user/web7_test/Maildir/tmp/1179771964.13492_0.server1.example.com" )
May 21 20:26:04 h1266987 postfix/qmgr[11941]: BD60E1FC0E70: removed


This because of the clamav database files in /tmp (they are bigger than 5 MB), created immediately after I sent the message. Next I:

- Deleted the clamav files in /tmp.
- Sent another message form test user to himself.

This message arrives, but the headers show a clamscan error 50 :

X-Virus-Status: Failed
X-Virus-Report: /home/admispconfig/ispconfig/tools/clamav/bin/clamscan error 50
X-Virus-Checker-Version: clamassassin 1.2.3 with clamscan / ClamAV 0.90.2/3274/Mon May 21 17:19:42 2007


So if the (main) clamav database is corrupt, it must show in the headers of another sent message, by a user who has enough space. But it doesn't:

X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.3 with clamscan / ClamAV 0.90.2/3274/Mon May 21 17:19:42 2007


For all users with enough space clamscan is working fine. So it is probably the database in /tmp clamscan is complaining about (well, this makes sense: because of the 5MB quota there would never be enough space to build it correctly anyway).

What am I missing here?
Reply With Quote
Sponsored Links