--On Tuesday, November 05, 2002 5:01 PM +0000 Philip Hazel
<ph10@???> wrote:
>> messages are getting left in the /var/spool/exim/input and msglog
>> directory as well as the virus scanner directory /var/spool/exim/scan
>
> Is it the case that there are -H files without -D files, or vice versa?
Had another close look just now. There are lots of -D files without
corresponding -H files in the input directory.
The contents of the scanner temp directory match the -D files more or less
but not entirely.
Has anyone actually tested exiscan in a medium volume environment?!? All my
testing before putting it into production indicated all was well. Im
backing it out now until we get to the bottom of this!!!
This system processes about 20000 messages a day. I am seeing approx 10 or
so orphaned -D files each day, which is a very very small percentage of
total messages, but nevertheless something is most definately not right!
exiscan config below, just in case this is the problem, but of course, it
may well not be?
# EXISCAN globals
exiscan_condition = 1
exiscan_crypt_salt = xx
exiscan_unpack_mime = false
exiscan_timeout = 5m
# Anti virus scanning
exiscan_av_condition = 1
exiscan_av_action = reject
exiscan_av_scanner = cmdline
exiscan_av_scanner_path = /opt/uvscan/uvscan
exiscan_av_scanner_regexp_trigger = Found
exiscan_av_scanner_regexp_description = Found(.*)
# File extension scanning
exiscan_extension_condition = 1
exiscan_extension_action = reject
exiscan_extension_data = exe:com:vbs
# Spam scanning and scoring
exiscan_spamd_condition = 1
exiscan_spamd_address = 127.0.0.1 783
exiscan_spamd_action = reject
exiscan_spamd_header_style = flag
# exiscan_spamd_subject_tag = *SPAM*
exiscan_spamd_treshold = xxx (substituted number for privacy)
Andy
