- æ¥æï¼ 2008/10/02 06:12
- ååï¼ 新米
- ken@CentOSさん、 すみません助かります。
返事遅くなってしまい申し訳ありませんでした。
amavisd-newを再起動後、再度「eicarのテストウイルス」をメールアドレス宛に送った後のmaillogです。
あと、今朝のLogwatchの内容です。
長々とすみませんがよろしくお願いします。
Oct 2 04:56:28 abcd amavis[8126]: Internal decoder for .zip
Oct 2 04:56:28 abcd amavis[8126]: No decoder for .7z tried: 7zr, 7za, 7z
Oct 2 04:56:28 abcd amavis[8126]: Found decoder for .rar at /usr/bin/unrar
Oct 2 04:56:28 abcd amavis[8126]: Found decoder for .arj at /usr/bin/arj
Oct 2 04:56:28 abcd amavis[8126]: Found decoder for .arc at /usr/bin/nomarch
Oct 2 04:56:28 abcd amavis[8126]: Found decoder for .zoo at /usr/bin/zoo
Oct 2 04:56:28 abcd amavis[8126]: Found decoder for .lha at /usr/bin/lha
Oct 2 04:56:28 abcd amavis[8126]: Found decoder for .cab at /usr/bin/cabextract
Oct 2 04:56:28 abcd amavis[8126]: No decoder for .tnef tried: tnef
Oct 2 04:56:28 abcd amavis[8126]: Internal decoder for .tnef
Oct 2 04:56:28 abcd amavis[8126]: Found decoder for .exe at /usr/bin/unrar; /usr/bin/lha; /usr/bin/arj
Oct 2 04:56:28 abcd amavis[8126]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
Oct 2 04:56:28 abcd amavis[8126]: Creating db in /var/amavis/db/; BerkeleyDB 0.34, libdb 4.3
Oct 2 05:03:43 abcd postfix/smtpd[8148]: connect from mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:43 abcd postfix/smtpd[8148]: lost connection after CONNECT from mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:43 abcd postfix/smtpd[8148]: disconnect from mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:43 abcd postfix/smtpd[8150]: connect from mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:43 abcd postfix/smtpd[8150]: DC8738BDF56: client=mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:43 abcd postfix/smtpd[8150]: disconnect from mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:44 abcd postfix/smtpd[8148]: connect from mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:44 abcd postfix/smtpd[8148]: 600058BDF56: client=mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:44 abcd postfix/cleanup[8153]: 600058BDF56: message-id=<20081001200005.45226D8527@eicar.securesystems.co.jp>
Oct 2 05:03:44 abcd postfix/smtpd[8148]: disconnect from mx.securesystems.co.jp[***.***.***.***]
Oct 2 05:03:44 abcd postfix/qmgr[3278]: 600058BDF56: from=<eicar@securesystems.co.jp>, size=1912, nrcpt=1 (queue active)
Oct 2 05:03:44 abcd amavis[8133]: (08133-01) (!!)WARN: all primary virus scanners failed, considering backups
Oct 2 05:04:01 abcd postfix/smtpd[8157]: connect from abcd.fam.cx[127.0.0.1]
Oct 2 05:04:01 abcd postfix/smtpd[8157]: 1395A8BDF59: client=abcd.fam.cx[127.0.0.1]
Oct 2 05:04:01 abcd postfix/cleanup[8153]: 1395A8BDF59: message-id=<20081001200005.45226D8527@eicar.securesystems.co.jp>
Oct 2 05:04:01 abcd postfix/qmgr[3278]: 1395A8BDF59: from=<eicar@securesystems.co.jp>, size=2491, nrcpt=1 (queue active)
Oct 2 05:04:01 abcd amavis[8133]: (08133-01) Passed CLEAN, [***.***.***.***] [***.***.***.***] <eicar@securesystems.co.jp> -> <shinmai@abcd.fam.cx>, Message-ID: <20081001200005.45226D8527@eicar.securesystems.co.jp>, mail_id: Ma64sHAZxoRY, Hits: 2.799, size: 1912, queued_as: 1395A8BDF59, 16655 ms
Oct 2 05:04:01 abcd postfix/smtp[8154]: 600058BDF56: to=<shinmai@abcd.fam.cx>, relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=0.08/0.01/0.01/17, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 1395A8BDF59)
Oct 2 05:04:01 abcd postfix/smtpd[8157]: disconnect from abcd.fam.cx[127.0.0.1]
Oct 2 05:04:01 abcd postfix/qmgr[3278]: 600058BDF56: removed
Oct 2 05:04:01 abcd postfix/local[8158]: 1395A8BDF59: to=<shinmai@abcd.fam.cx>, relay=local, delay=0.1, delays=0.04/0.06/0/0, dsn=2.0.0, status=sent (delivered to maildir)
Oct 2 05:04:01 abcd postfix/qmgr[3278]: 1395A8BDF59: removed
Oct 2 05:07:04 abcd postfix/anvil[8151]: statistics: max connection rate 3/60s for (smtp:***.***.***.***) at Oct 2 05:03:44
Oct 2 05:07:04 abcd postfix/anvil[8151]: statistics: max connection count 1 for (smtp:***.***.***.***) at Oct 2 05:03:43
Oct 2 05:07:04 abcd postfix/anvil[8151]: statistics: max cache size 1 at Oct 2 05:03:43
[root@abcd ~]#
今朝のLogwatchの内容です
--------------------- amavis Begin ------------------------
3 messages checked and passed.
**Unmatched Entries**
Found decoder for .tar at /usr/bin/pax: 3 Time(s)
Internal decoder for .zip : 3 Time(s)
starting. /usr/sbin/amavisd at abcd.fam.cx amavisd-new-2.5.4 (20080312), Unicode aware, LANG="ja_JP.eucJP": 3 Time(s)
Found decoder for .F at /usr/bin/unfreeze: 3 Time(s)
Creating db in /var/amavis/db/; BerkeleyDB 0.34, libdb 4.3: 3 Time(s)
Internal decoder for .tnef: 3 Time(s)
Found decoder for .deb at /usr/bin/ar: 3 Time(s)
Found decoder for .zoo at /usr/bin/zoo: 3 Time(s)
Found decoder for .arc at /usr/bin/nomarch: 3 Time(s)
AM.PDP-in proto code loaded: 3 Time(s)
Found decoder for .cpio at /usr/bin/pax: 3 Time(s)
Local-out proto code loaded: 3 Time(s)
Found decoder for .rpm at /usr/bin/rpm2cpio: 3 Time(s)
SQL::Quarantine NOT loaded: 3 Time(s)
Internal decoder for .uue : 3 Time(s)
(!!)WARN: all primary virus scanners failed, considering backups: 3 Time(s)
Found decoder for .cab at /usr/bin/cabextract: 3 Time(s)
No decoder for .7z tried: 7zr, 7za, 7z: 3 Time(s)
Found decoder for .lha at /usr/bin/lha: 3 Time(s)
Internal decoder for .ync : 3 Time(s)
Found decoder for .gz at /usr/bin/gzip -d: 3 Time(s)
Found decoder for .exe at /usr/bin/unrar; /usr/bin/lha; /usr/bin/arj: 3 Time(s)
Found decoder for .rar at /usr/bin/unrar: 3 Time(s)
Internal decoder for .hqx : 3 Time(s)
Found decoder for .arj at /usr/bin/arj: 3 Time(s)
Internal decoder for .mail: 3 Time(s)
Found decoder for .Z at /usr/bin/uncompress: 3 Time(s)
Found decoder for .lzo at /usr/bin/lzop -d: 3 Time(s)
Internal decoder for .asc : 3 Time(s)
No decoder for .tnef tried: tnef: 3 Time(s)
Found decoder for .bz2 at /usr/bin/bzip2 -d: 3 Time(s)
---------------------- amavis End -------------------------
 |
このスレッドはクローズされています。記事の閲覧のみとなります。
メールウイルス検出・駆除されない
Re: メールウイルス検出・駆除されない ( No.6 )