[exim] av_scanner fsecure and hanging scans

Top Page
Delete this message
Reply to this message
Author: Michael Fischer v. Mollard
Date:  
To: exim-users
Subject: [exim] av_scanner fsecure and hanging scans
Hello,

I'm running into some problems with the av_scanner fsecure. In most
cases it simply works as expected. In rare cases exim stucks while
reading the fsavd socket. As there is AFAIK no way to set a timeout to
content scanning, the corresponding exim process will stay runing until
it is killed.

Further investigation reveals that fsavd sends "PING\n" messages every
few seconds in an endless loop, which don't end the loop in
http://git.exim.org/exim.git/blob/HEAD:/src/src/malware.c#l763 . So exim
will read again and again the ping.

The f-secure support so far merely states „PING messages are a valid
type of reply“. So my questions are:

- Has anyone else experienced this problem and knows a way to mitigate
it using a proper config file for F-Secure (I'm using F-Secure Linux
Security 10.10).

- Is there a generic way to limit the running time of a
malware/spamassassin scan?

Regards
     Michael