Hi guys...
I'm having the following problem:
When I try to send an e-mail, it just show the error "qq temporary problem" and then when I take a look at the log, I see unable to
open pipe to /var/qmail/bin/qmail-queue and unable to close pipe too.
The complete debug is below:
Wed, 17 Nov 2004 10:56:36 BRST:12584: +++ starting debugging for process 12584 by uid=1010
Wed, 17 Nov 2004 10:56:36 BRST:12584: w_c: elapsed time from start 0.000998 secs
Wed, 17 Nov 2004 10:56:36 BRST:12584: return-path='', recips='postmaster@bwnet.com.br'
Wed, 17 Nov 2004 10:56:36 BRST:12584: from='Qmail-Scanner Test <bwnet.com.br@newmail.bwnet.com.br>', subj='Qmail-Scanner test (1/4): inoffensive message', via local process 12584
Wed, 17 Nov 2004 10:56:36 BRST:12584: This is a PLAIN text message, skip virus scanners - but not SA
Wed, 17 Nov 2004 10:56:36 BRST:12584: SA: finished scan in 0.054813 secs - hits=-2.8
Wed, 17 Nov 2004 10:56:36 BRST:12584: p_s: finished scan in 0.008632 secs
Wed, 17 Nov 2004 10:56:36 BRST:12584: ini_sc: finished scan of "/var/spool/qmailscan/tmp/newmail110069619668012584"...
Wed, 17 Nov 2004 10:56:36 BRST:12584: error_condition: X-QMailScanner-BWNet-1.24st: Unable to open pipe to /var/qmail/bin/qmail-queue [16777215] (#4.3.0) - Broken pipe
Wed, 17 Nov 2004 10:56:36 BRST:12584: ------ Process 12584 finished. Total of 0.07288 secs
Wed, 17 Nov 2004 10:56:36 BRST:12584: error_condition: X-QMailScanner-BWNet-1.24st: Unable to close pipe to /var/qmail/bin/qmail-queue [255] (#4.3.0) - Illegal seek
Wed, 17 Nov 2004 10:56:36 BRST:12584: ------ Process 12584 finished. Total of 0.077973 secs
Wed, 17 Nov 2004 10:59:49 BRST:13553: +++ starting debugging for process 13553 by uid=1010
Wed, 17 Nov 2004 10:59:49 BRST:13553: setting UID to EUID so subprocesses can access files generated by this script
Wed, 17 Nov 2004 10:59:49 BRST:13553: program name is qmail-scanner-queue.pl, version 1.24st
Wed, 17 Nov 2004 10:59:49 BRST:13553: incoming pipe connection from via local process 13553
Wed, 17 Nov 2004 10:59:49 BRST:13553: w_c: mkdir /var/spool/qmailscan/tmp/newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: w_c: start dumping incoming msg into /var/spool/qmailscan/working/tmp/newmail110069638968013553 [0.000516]
Wed, 17 Nov 2004 10:59:49 BRST:13553: w_c: rename new msg from /var/spool/qmailscan/working/tmp/newmail110069638968013553 to /var/spool/qmailscan/working/new/newmail110069638968013553 [0.000462]
Wed, 17 Nov 2004 10:59:49 BRST:13553: d_m: starting /usr/local/bin/reformime -x/var/spool/qmailscan/tmp/newmail110069638968013553/ </var/spool/qmailscan/working/new/newmail110069638968013553 [0.000176]
Wed, 17 Nov 2004 10:59:49 BRST:13553: d_m: finished /usr/local/bin/reformime -x/var/spool/qmailscan/tmp/newmail110069638968013553/ [0.002964]
Wed, 17 Nov 2004 10:59:49 BRST:13553: d_m: unpacking message took 0.003096 seconds
Wed, 17 Nov 2004 10:59:49 BRST:13553: unsetting QMAILQUEUE env var
Wed, 17 Nov 2004 10:59:49 BRST:13553: g_e_h: return-path is "", recips is "postmaster@bwnet.com.br"
Wed, 17 Nov 2004 10:59:49 BRST:13553: from=Qmail-Scanner Test <bwnet.com.br@newmail.bwnet.com.br>,subj=Qmail-Scanner test (1/4): inoffensive message, x-qmailscanner-bwnet-message-id=<20041117125949.13552.qmail@newmail.bwnet.com.br> via local process 13553
Wed, 17 Nov 2004 10:59:49 BRST:13553: This is a PLAIN text message (because it's either not mime, or is text/plain), skip virus scanners - but not SA
Wed, 17 Nov 2004 10:59:49 BRST:13553: ini_sc: start scanning
Wed, 17 Nov 2004 10:59:49 BRST:13553: ini_sc: recursively scan the directory /var/spool/qmailscan/tmp/newmail110069638968013553/
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/newmail110069638968013553"...
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop: scanner=clamdscan_scanner,plain_text_msg=1
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop: scanner=spamassassin,plain_text_msg=1
Wed, 17 Nov 2004 10:59:49 BRST:13553: SA: finished scan of dir "/var/spool/qmailscan/tmp/newmail110069638968013553" in 0.054753 secs
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop: scanner=perlscan_scanner,plain_text_msg=1
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: starting scan of directory "/var/spool/qmailscan/tmp/newmail110069638968013553"...
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.cpl' = '0' = 'CPL files not allowed per Company security policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.hta' = '0' = 'HTA files not allowed per Company security policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.pif' = '0' = 'PIF files not allowed per Company security policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.scr' = '0' = 'SCR files not allowed per Company security policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '.vbs' = '0' = 'VBS files not allowed per Company security policy'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '124:.*That movie' = 'Virus-subject' = 'Sobig.F'
{cut a little piece to the text be small }
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '88:.{100,}' = 'Virus-resent-date' = 'MIME Header Buffer Overflow'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a header!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: checking for objects containing resent-date: .{100,}
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: '91:ZVDOHYIK@yahoo.com|udtzqccc@yahoo.com|DTCELACB@yahoo.com|I1MCH2TH@yahoo.com|WPADJQ12@yahoo.com|s mr@eurosport.com|bgnd2@canada.com|muwripa@fairesuivre.com|eccles@ballsy.net|S_Mentis@mail-x-change.com|YJPFJTGZ@excite.com|JGQZCD@excite.com|XHZJ3@excite.com|OZUNYLRL@excite.com|tsnlqd@excite. com|cxkawog@krovatka.net|ssdn@myrealbox.com' = 'Virus-to' = 'BadTrans Trojan exploit!'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a header!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: checking for objects containing to:
ZVDOHYIK@yahoo.com|udtzqccc@yahoo.com|DTCELACB@yahoo.com|I1MCH2TH@yahoo.com|WPADJQ12@yahoo.com|smr@eurosport.com|bgnd2 @canada.com|muwripa@fairesuivre.com|eccles@ballsy.net|S_Mentis@mail-x-change.com|YJPFJTGZ@excite.com|JGQZCD@excite.com|XHZJ3@excite.com|OZUNYLRL@excite.com|tsnlqd@excite. com|cxkawog@krovatka.net|ssdn@myrealbox.com
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'allfiles.cmd' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'application.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'attach.zip' = '12420' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'attacheddocument.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'attachedfile.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'dateilist.pif' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'daten-text.pif' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'details.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'document.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'document_9446.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'document_all.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'eicar.com' = '69' = 'EICAR Test Virus'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'happy99.exe' = '10000' = 'Happy99 Trojan'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'info.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'information.zip' = '12420' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'letter.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'message.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'moreinfo.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'movie0045.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'msg.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'msginfo.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'myprofile.zip' = '0' = 'Virus Troj/Tofger-A'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'readme.zip' = '12422' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'server.com' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'text.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'textdocument.zip' = '0' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'textfile.zip' = '12416' = 'Virus Bagle'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'thank_you.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'wendy.zip' = '0' = 'Virus Mimail'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'wicked_scr.scr' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'www.gwbush-new-wars.com' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'www.hcket-user-pcs.com' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'your_details.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'your_document.pif' = '0' = 'Sobig.F'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'yourlist.pif' = '0' = 'Virus W32/Sober-B'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: 'zipped_files.exe' = '120495' = 'W32/ExploreZip.worm.pak virus'
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: type is a size!
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: skipping auto-generated file 1100696389.13555-0.newmail
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: skipping auto-generated file orig-newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: p_s: finished scan of dir "/var/spool/qmailscan/tmp/newmail110069638968013553" in 0.009644 secs
Wed, 17 Nov 2004 10:59:49 BRST:13553: scanloop: finished scan of "/var/spool/qmailscan/tmp/newmail110069638968013553"...
Wed, 17 Nov 2004 10:59:49 BRST:13553: ini_sc: scanning message took 0.064901 seconds
Wed, 17 Nov 2004 10:59:49 BRST:13553: q_r: fork off child into /var/qmail/bin/qmail-queue...
Wed, 17 Nov 2004 10:59:49 BRST:13553: q_r: xstatus=0
Wed, 17 Nov 2004 10:59:49 BRST:13553: error_condition: X-QMailScanner-BWNet-1.24st: Unable to open pipe to /var/qmail/bin/qmail-queue [16777215] (#4.3.0) - Broken pipe
Wed, 17 Nov 2004 10:59:49 BRST:13553: cleanup: /usr/bin/rm -rf /var/spool/qmailscan/tmp/newmail110069638968013553/ /var/spool/qmailscan/working/new/newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: --- all finished. Total of 0.073974 secs
Wed, 17 Nov 2004 10:59:49 BRST:13553: error_condition: X-QMailScanner-BWNet-1.24st: Unable to close pipe to /var/qmail/bin/qmail-queue [255] (#4.3.0) - Illegal seek
Wed, 17 Nov 2004 10:59:49 BRST:13553: cleanup: /usr/bin/rm -rf /var/spool/qmailscan/tmp/newmail110069638968013553/ /var/spool/qmailscan/working/new/newmail110069638968013553
Wed, 17 Nov 2004 10:59:49 BRST:13553: --- all finished. Total of 0.079091 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: +++ starting debugging for process 14718 by uid=1010
Wed, 17 Nov 2004 11:03:39 BRST:14718: w_c: elapsed time from start 0.000962 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: return-path='', recips='postmaster@bwnet.com.br'
Wed, 17 Nov 2004 11:03:39 BRST:14718: from='Qmail-Scanner Test <bwnet.com.br@newmail.bwnet.com.br>', subj='Qmail-Scanner test (1/4): inoffensive message', via local process 14718
Wed, 17 Nov 2004 11:03:39 BRST:14718: This is a PLAIN text message, skip virus scanners - but not SA
Wed, 17 Nov 2004 11:03:39 BRST:14718: SA: finished scan in 0.054384 secs - hits=-2.8
Wed, 17 Nov 2004 11:03:39 BRST:14718: p_s: finished scan in 0.007424 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: ini_sc: finished scan of "/var/spool/qmailscan/tmp/newmail110069661968014718"...
Wed, 17 Nov 2004 11:03:39 BRST:14718: error_condition: X-QMailScanner-BWNet-1.24st: Unable to open pipe to /var/qmail/bin/qmail-queue [16777215] (#4.3.0) - Broken pipe
Wed, 17 Nov 2004 11:03:39 BRST:14718: ------ Process 14718 finished. Total of 0.071022 secs
Wed, 17 Nov 2004 11:03:39 BRST:14718: error_condition: X-QMailScanner-BWNet-1.24st: Unable to close pipe to /var/qmail/bin/qmail-queue [255] (#4.3.0) - Illegal seek
Wed, 17 Nov 2004 11:03:39 BRST:14718: ------ Process 14718 finished. Total of 0.076005 secs
I tried everything but I didn't get it to work! =\
Any help will be very, very, very appreciated!!!!
Thanks!
=====
Gilcio Grella :: Hackiller ::
gilciog@yahoo.com.br
Rede IRCBrasil :: Server Admin :: irc.bwnet.com.br
ICQ :: 55766844 :: MSN Messenger ::
gilciog@hotmail.com