Am 09.03.2021 13:44, schrieb Evgeniy Berdnikov via Exim-users:
Hi
> Line
> ${dlfunc{/opt/kaspersky/klms/lib64/libklms-exim.so}{scan}{${spool_directory}/input}}
> suggests that library entry point is called "scan".
>
>> Could you suggest me how to call it? And maybe (since it logs a huge
>> amount of lines...) what I should looking for?
>
> Really it's not a easy task, you have to read man ltrace and add some
> flags to ltrace such as -S to display syscalls...
>
> However, I can propose another way: put a delay in acl chain after
> reference to ${dlfunc{...}}, say,
>
> warn delay = 5m
>
> then your parent Exim process (exim -bh) should sleep for 5 minutes
> here.
> If /usr/sbin/sendmail was executed almost at the same time, it proves
> that
> nothing but library call can be the source of child process.
It does not seem to work...
No delay are done, and I can see the E-Mail was sent more or less (+/-
half a second) after I paste the data...
Other suggestions?
Thanks
Luca Bertoncello
(lucabert@???)
