[exim] av_scanner fsecure and hanging scans

Top Pagina
Delete this message
Reply to this message
Auteur: Michael Fischer v. Mollard
Datum:  
Aan: exim-users
Onderwerp: [exim] av_scanner fsecure and hanging scans
Hello,

I'm running into some problems with the av_scanner fsecure. In most
cases it simply works as expected. In rare cases exim stucks while
reading the fsavd socket. As there is AFAIK no way to set a timeout to
content scanning, the corresponding exim process will stay runing until
it is killed.

Further investigation reveals that fsavd sends "PING\n" messages every
few seconds in an endless loop, which don't end the loop in
http://git.exim.org/exim.git/blob/HEAD:/src/src/malware.c#l763 . So exim
will read again and again the ping.

The f-secure support so far merely states „PING messages are a valid
type of reply“. So my questions are:

- Has anyone else experienced this problem and knows a way to mitigate
it using a proper config file for F-Secure (I'm using F-Secure Linux
Security 10.10).

- Is there a generic way to limit the running time of a
malware/spamassassin scan?

Regards
     Michael