Re: Someone missed a virus..

> -----Original Message-----
> From: amavis-user-bounceslists.sourceforge.net 
> [mailto:amavis-user-bounceslists.sourceforge.net] On
Behalf Of MrC
> Sent: Saturday, June 16, 2007 12:18 AM
> To: amavis-userlists.sourceforge.net
> Subject: Re: [AMaViS-user] Someone missed a virus..
> 
> 
> I think this is a bug as well.

Yes, looks like its whatever version of file you are
running.

But, freebsd 'file' (/usr/bin/file) from distro was right,
the ports
file was wrong.
 /usr/bin/file *doc
this is a openvpn gui.doc: Microsoft Office Document

 file --version
file-4.10
magic file from /usr/share/misc/magic
which file
/usr/bin/file

Guess we have a path problem:

 ls -l /usr/local/bin/file
-r-xr-xr-x  1 root  wheel  11232 Jun  1 07:36
/usr/local/bin/file
fl# ls -l /usr/bin/file
-r-xr-xr-x  1 root  wheel  10300 Nov  8  2006 /usr/bin/file

But, amavisd-new will use /usr/local/bin/file first?
 tail -200 /var/log/maillog | grep file
Jun 16 07:34:44 fl amavis[15952]: Found $file            at
/usr/local/bin/file

 /usr/local/bin/file *doc
this is a openvpn gui.doc: Microsoft Installer

So, we patch amavisd or file?

____________________________________________________________
_____________
This email has been scanned and certified safe by
SpammerTrap(tm). 
For Information please see http://www.spammertrap.com

____________________________________________________________
_____________

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Michael,

> Guess we have a path problem:
> -r-xr-xr-x  1 root  wheel  11232 Jun  1 07:36
/usr/local/bin/file
> -r-xr-xr-x  1 root  wheel  10300 Nov  8  2006
/usr/bin/file
>
> But, amavisd-new will use /usr/local/bin/file first?
> Jun 16 07:34:44 fl amavis[15952]: Found $file at
/usr/local/bin/file

Yes, intentionally. Often the one installed by user is
fresher that
the one bundled with a system. But this is under user's
control,
the default $path variable in amavisd is empty, it is
always
explicitly assigned to in amavisd.conf, e.g.

  $path =
'/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bi
n';

> So, we patch amavisd or file?

If file(1) gives wrong result, it needs to be fixed or
replaced.
I doubt there is anything in amavisd in this regard.

  Mark

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/