Enabling McAfee Anti Virus Causes Service Router Problems

[paracons]

Hi,

I just installed and setup Scalix 10 on Fedora 4. Everything seems to be fine except can't get McAfee A/V to work. Have tried all kinds of tweaks on ~/rules/ALL-ROUTES.VIR and ~/sys/omvscan.cfg but keep getting the same error from omshowlog. I scanned the forum and found references to bad characters in the files and permissions problems, both of which I've checked out as best I can.

What am I doing wrong, coach ?

Thanks

Current Files...

Mcafee uvscan version 4.40.0

*** ALL-ROUTES.VIR ***

VIRUS-FOUND=0 ACTION=ALLOW
VIRUS-FOUND=1 ACTION=DISCARD

*** omvscan.cfg ***

# $RCSfile: omvscan.cfg,v $
#
# Configuration for Service Router Generic anti-virus scanning.
#
# Notes:
# Each line in each section should be a valid assignment
# to an environment variable in the bash shell.
# Do not re-use variable names in different sections.

[GENERAL]
ANTI_VIRUS_ENGINE="McAfee Virus Scan"
OMAV_LOGFILE="/var/opt/scalix/logs/omvscan.log"
# 0 is off, 1 is ERRORS, 2 is ERRORS & WARNINGS, 3 is same as 2 + DEBUG
OMAV_LOGLEVEL=2

[Trend Micro InterScan VirusWall]
TREND_ENGINE=/opt/trend/ISBASE/IScan.BASE/vscan
TREND_SCAN_OPTIONS='-p/etc/iscan -v0 -za'
TREND_CLEAN_OPTIONS='-p/etc/iscan -v0 -za -c'
TREND_LOGPFX="/var/opt/scalix/tmp/trendvs.log"
TREND_USE_LOCKING=no
TREND_LOCK_FILE=trendvs.lock

[McAfee Virus Scan]
MCAFEE_ENGINE=/usr/local/uvscan/uvscan
MCAFEE_SCAN_OPTIONS='--secure --noboot --mime'
MCAFEE_CLEAN_OPTIONS='--secure --noboot --mime --norename -c'
MCAFEE_LOGPFX="/var/opt/scalix/tmp/mcafee.log"
MCAFEE_USE_LOCKING=no
MCAFEE_LOCK_FILE=mcafee.lock

[ClamAV]
CLAMAV_ENGINE=/usr/bin/clamdscan
CLAMAV_SCAN_OPTIONS='--stdout'
CLAMAV_CLEAN_OPTIONS='--stdout'
CLAMAV_LOGPGX="/var/opt/scalix/tmp/clamav.log"
CLAMAV_USE_LOCKING=no
CLAMAV_LOCK_FILE=clamav.lock

*** Error from omshowlog ***

SERIOUS ERROR Service Router(Service Router) 05.31.06 12:11:13
[OM 5187] Child process (Mapper) failed.
Current errno value: 2
<- rsl_CheckRuleValue
-> rsl_CheckRuleValue
<- rsl_CheckRuleValue
-> rsl_CheckRuleValue
<- rsl_CheckRuleValue
<- rsl_GetRuleValue
<- rsl_GetRuleSet
<- sr_CheckForVirusRule
-> vs_ScanInit
-> vs_ScanActive
<- vs_ScanActive
-> vs_omScanInit
-> vs_GenericScanInit
<- /build/10.0.0.175/src/lib/rsl/rsl_match.c:488[100,5187]
<- /build/10.0.0.175/src/lib/rsl/rsl_match.c:755[100,5187]
<- /build/10.0.0.175/src/lib/rsl/rsl_match.c:1465[100,5187]

[ScalixSupport]

You enabled logging in omvscan.cfg but you didn't post /var/opt/scalix/logs/omvscan.log. I suspect that the permissions on uvscan are not sufficient to scan Scalix data. Please can you post the current permissions on the binary ?

Cheers

Dave

[paracons]

Hi, and thanks for the reply.

There isn't a /var/opt/scalix/logs/omvscan.log. I'm guessing it never got that far.
Nor is there a /vat/opt/scalix/tmp/mcafee.log.

Permissions on /usr/local/uvscan/uvscan:

-r-xr-xr-x 1 root root 128199 Oct 20 2004 /usr/local/uvscan/uvscan

One thing I checked is that it can be run by a non-root user. Runs fine.

Thanks...

[paracons]

Anybody have any ideas on this ?

Thanks

[akoei]

Hi, and thanks for the reply.

There isn't a /var/opt/scalix/logs/omvscan.log. I'm guessing it never got that far.
Nor is there a /vat/opt/scalix/tmp/mcafee.log.

Permissions on /usr/local/uvscan/uvscan:

-r-xr-xr-x 1 root root 128199 Oct 20 2004 /usr/local/uvscan/uvscan

One thing I checked is that it can be run by a non-root user. Runs fine.

Thanks...

I also got no any logs: omvscan.log, clamav.log, etc.
But my clamav works fine: can detect virus-test string or ClamAV test virus file, and return a NDN.
Want to know why no logs...

[joejoe]

Hi, and thanks for the reply.

There isn't a /var/opt/scalix/logs/omvscan.log. I'm guessing it never got that far.
Nor is there a /vat/opt/scalix/tmp/mcafee.log.

Permissions on /usr/local/uvscan/uvscan:

-r-xr-xr-x 1 root root 128199 Oct 20 2004 /usr/local/uvscan/uvscan

One thing I checked is that it can be run by a non-root user. Runs fine.

Thanks...

I also got no any logs: omvscan.log, clamav.log, etc.
But my clamav works fine: can detect virus-test string or ClamAV test virus file, and return a NDN.
Want to know why no logs...

Hi,

same her.
can anybody help please?
No logfiles to see...

Jochen