ALT Linux Community general discussions
 help / color / mirror / Atom feed
From: "Sergey V. Golovin" <svgol@samkon.ru>
To: community@altlinux.ru
Subject: [Comm] Kaspersky AVP & Postfix
Date: Thu, 7 Aug 2003 12:13:50 +0500
Message-ID: <20030807071350.GO26563@ws019.hq.samkon.ru> (raw)

Здравствтуйте!

У меня не получается интегрировать Kaspersky с
postfix'ом. 
В master.cf прописал
## AVP                                             
localhost:10025     inet  n      n      n      -      10     spawn
    user=filter   argv=/opt/AVP/kavkeeper/kavkeeper  
localhost:10026     inet  n      -      n      -      10      smtpd                                    
    -o content_filter= -o myhostname=test.host.name

В main.cf
content_filter = lmtp:localhost:10025

На вкладке Keeper'а main 
Sender Mailer       - smtp:127.0.0.1:10026
Recipient Mailer    - smtp:127.0.0.1:10026
Admin Mailer        - smtp:127.0.0.1:10026
(пробовал и test.host.name)

Соответственно 
Recipient hosts     - test.host.name
Host name           - test.host.name

Все остальное по умолчанию
Письма без вирусов ходят и проверяются
08:46:06 07/08/2003 [32722] *** Session start.           
08:46:06 07/08/2003 [32722] h778k6M00032722 <-- from=<full-disclosure-admin@lists.netsys.com>
08:46:07 07/08/2003 [32722] h778k6M00032722 === from=<full-disclosure-admin@lists.netsys.com>, 
 to=<svgol@test.host.name>,group=<default>,check result=not infected                           
08:46:07 07/08/2003 [32722] h778k6M00032722 --> to=<svgol@test.host.name>
08:47:47 07/08/2003 [32722] *** Session end.

Но с вирусами происходит какая-то задержка
Aug  7 11:15:10 test postfix/pickup[5209]: D7DE373232: uid=500 from=<svgol>
Aug  7 11:15:10 test postfix/cleanup[5232]: D7DE373232: message-id=<20030807061510.GN26563@test.host.name>
Aug  7 11:15:10 test postfix/qmgr[5208]: D7DE373232: from=<svgol@samkon.ru>, size=101583, nrcpt=1 (queue active)
Aug  7 11:25:11 test postfix/lmtp[5234]: D7DE373232: to=<svgol@test.host.name>, relay=localhost[127.0.0.1], delay=601, status=deferred (conversation with localhost[127.0.0.1] timed out while sending end of data -- message may be sent more than once)

много-много раз

При этом начинают валиться сообщения kavkeeper'а

Вот отчет об этом письме kavdaemon

07.08.2003 11:15:11 /tmp/h77BFBG00705236        archive: Mail
07.08.2003 11:15:11 /tmp/h77BFBG00705236/[From "Sergey V. Golovin" <svgol@samkon.ru>][Date Wed, 6 Aug 2003 15:38:40 +0500]/UNNAMED      ok.
07.08.2003 11:15:11 /tmp/h77BFBG00705236/[From "Sergey V. Golovin" <svgol@samkon.ru>][Date Wed, 6 Aug 2003 15:38:40 +0500]/UNNAMED      archive: Mail
07.08.2003 11:15:11 /tmp/h77BFBG00705236/[From "Sergey V. Golovin" <svgol@samkon.ru>][Date Wed, 6 Aug 2003 15:38:40 +0500]/UNNAMED/[From "Sergey V. Golovin" <svgol@samkon.ru>][Date Wed, 6 Aug 2003 15:34:21 +0500]/UNNAMED    ok.
07.08.2003 11:15:11 /tmp/h77BFBG00705236/[From "Sergey V. Golovin" <svgol@samkon.ru>][Date Wed, 6 Aug 2003 15:38:40 +0500]/UNNAMED/[From "Sergey V. Golovin" <svgol@samkon.ru>][Date Wed, 6 Aug 2003 15:34:21 +0500]/virus      infected: I-Worm.Tanatos.b

Т.е. вирус определяется, почему дальше происходит задержка и какой-то сбой?
 
P.S. Справшиваю здесь, потому что поддержка может отвечать
месяцами по моему опыту.

-- 
Sergey V. Golovin


             reply	other threads:[~2003-08-07  7:13 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-08-07  7:13 Sergey V. Golovin [this message]
2003-08-07  7:15 ` Пирогов Алексей
2003-08-07 11:48   ` Re[2]: " "KoLyA" 
2003-08-07  7:38     ` Пирогов Алексей
2003-08-07 12:18     ` Re[2]: " Mike Lykov
2003-08-07 11:56   ` Oleg K. Artemjev
2003-08-07  8:20     ` Пирогов Алексей
2003-08-07 13:36       ` Dmitry Ivanov
2003-08-07  7:37 ` Maxim.Savrilov
2003-08-07 10:26   ` Sergey V. Golovin
2003-08-07 10:53     ` Maxim.Savrilov
2003-08-07 11:04       ` Sergey V. Golovin
2003-08-07  7:51 ` Dmitry Ivanov
2003-08-07  8:19   ` Sergey V. Golovin
2003-08-07  8:56     ` Dmitry Ivanov
2003-08-07 10:23       ` Sergey V. Golovin
2003-08-07 10:38         ` Maxim.Savrilov
2003-08-07  7:57 ` Mike Lykov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20030807071350.GO26563@ws019.hq.samkon.ru \
    --to=svgol@samkon.ru \
    --cc=community@altlinux.ru \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux Community general discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
		mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
	public-inbox-index community

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.community


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git