Scalix Forums

Posted: **Fri Feb 02, 2007 10:26 am**

I have a message in an error queue which i'd like to figure out why instead of just discarding it.

i tried "omresub -q error" but it still ends up in the error queue.

I should point out that its a 14mb word attachment, only sent to internal users. Am i correct in thinking that by default there are no size limitations on mail?

If its a size thing, can you tell scalix or clamav not to scan messages bigger than a certain size?

I increased logging levels, below is the relevant contents of /var/opt/scalix/xx/s/logs/fatal

ERROR Service Router(Service Router) Sat Feb 3 01:16:18 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: SCAN:/var/opt/scalix/gy/s/data/00000ij/001h7ek
Reply received:
Pid of logging process: 17046

ERROR Service Router(Service Router) Sat Feb 3 01:16:20 2007
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: QUIT Please Close This Session
Reply received: 271 No viruses found
Pid of logging process: 17046

ERROR Service Router(Service Router) Sat Feb 3 01:16:20 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 17046
Current errno value: 4

ERROR Service Router(Service Router) Sat Feb 3 01:16:20 2007
[OM 5183] A Mapper error has been detected.
Pid of logging process: 17046

.....And heres the relevant output from omshowlog.....

WARNING Shared memory (Shared memory ) 02.03.07 01:15:32
[OM 24142] Conversion from SJIS to UCS2 not found.

WARNING Shared memory (Shared memory ) 02.03.07 01:15:33
[OM 24142] Conversion from ISO2022CN to UCS2 not found.

ERROR Service Router(Service Router) 02.03.07 01:16:18
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: SCAN:/var/opt/scalix/gy/s/data/00000ij/001h7ek
Reply received:

ERROR Service Router(Service Router) 02.03.07 01:16:20
[OM 5181] Reply timed out or invalid - Mapper protocol problem.
Command sent: QUIT Please Close This Session
Reply received: 271 No viruses found

ERROR Service Router(Service Router) 02.03.07 01:16:20
[OM 5183] A Mapper error has been detected.
Current errno value: 4
-> vs_omScanFile
-> vs_GenericScanFile
-> rsl_MapVScanScan
-> rsl_FormFullRulePath
<- rsl_FormFullRulePath
-> rsl_ReuseOrInvokeMapper
-> rsl_FormFullRulePath
<- rsl_FormFullRulePath
<- rsl_ReuseOrInvokeMapper
-> rsl_WriteMapperCommand
<- rsl_WriteMapperCommand
-> rsl_ReadMapperReply
-> rsl_GetMapperTimeOut
<- rsl_GetMapperTimeOut
<- /build/scalix-MAIN/src/lib/rsl/rsl_match.c:398[100,5183]
<- /build/scalix-MAIN/src/lib/rsl/rsl_match.c:244[100,5183]

ERROR Service Router(Service Router) 02.03.07 01:16:20
[OM 5183] A Mapper error has been detected.
-> vs_GenericScanFile
-> rsl_MapVScanScan
-> rsl_FormFullRulePath
<- rsl_FormFullRulePath
-> rsl_ReuseOrInvokeMapper
-> rsl_FormFullRulePath
<- rsl_FormFullRulePath
<- rsl_ReuseOrInvokeMapper
-> rsl_WriteMapperCommand
<- rsl_WriteMapperCommand
-> rsl_ReadMapperReply
-> rsl_GetMapperTimeOut
<- rsl_GetMapperTimeOut
<- /build/scalix-MAIN/src/lib/rsl/rsl_match.c:398[100,5183]
<- /build/scalix-MAIN/src/lib/rsl/rsl_match.c:1546[100,5183]
<- /build/scalix-MAIN/src/bin/sr/sr_main.c:3920[100,5183]

It looks like it could be a problem with clamav, i'm not sure. Clamav is working fine and if i try to do a clamdscan manually at the root console it works too.

Can someone help decipher what causing the error?

TIA

Posted: **Fri Feb 02, 2007 8:51 pm**

What is your setting for

ClamukoMaxFileSize

in /etc/clamd.conf?

Thanks,
Don

Posted: **Fri Feb 02, 2007 9:00 pm**

ScalixSupport wrote:What is your setting for

ClamukoMaxFileSize

in /etc/clamd.conf?

Thanks,
Don

I saw that, but i didn't think it was relevant because its an on-access scanner and its turned off anyway.....

My clamuko settings in clamd.conf are below....

##
## Clamuko settings
## WARNING: This is experimental software. It is very likely it will hang
## up your system!!!
##

# Enable Clamuko. Dazuko (/dev/dazuko) must be configured and running.
# Default: disabled
#ClamukoScanOnAccess

# Set access mask for Clamuko.
# Default: disabled
#ClamukoScanOnOpen
#ClamukoScanOnClose
#ClamukoScanOnExec

# Set the include paths (all files in them will be scanned). You can have
# multiple ClamukoIncludePath directives but each directory must be added
# in a seperate line.
# Default: disabled
#ClamukoIncludePath /home
#ClamukoIncludePath /students

# Set the exclude paths. All subdirectories are also excluded.
# Default: disabled
#ClamukoExcludePath /home/guru

# Don't scan files larger than ClamukoMaxFileSize
# Value of 0 disables the limit.
# Default: 5M
#ClamukoMaxFileSize 10M

Posted: **Sat Feb 03, 2007 4:46 am**

you might also need to set

RSL_MAPPER_READ_TIMEOUT=360

in general.cfg and restart the server.

this is the timeout (in seconds) that the router waits when sending a message to the virus scanner for it to be scanned. with large attachments (and no limit set on the clam side on the size), it can take longer than 120 seconds to virus scan a file.

cheers,
Florian.

Posted: **Sun Feb 04, 2007 7:51 pm**

florian wrote:you might also need to set

RSL_MAPPER_READ_TIMEOUT=360

in general.cfg and restart the server.

this is the timeout (in seconds) that the router waits when sending a message to the virus scanner for it to be scanned. with large attachments (and no limit set on the clam side on the size), it can take longer than 120 seconds to virus scan a file.

cheers,
Florian.

Thanks Florian.

You hit the nail on the head. Thats all i changed and the message got through fine.

Regards,

Les

Scalix Forums

corrupt message in error queue

corrupt message in error queue

corrupt message in error queue - SOLVED!!