I emerged pop3vscan, modified&restarted firewall, modified /etc/pop3vscan Reproducible: Always Steps to Reproduce: 1.emerge pop3vscan (=pop3vscan-0.4-r1) 2.add iptables redirection rule to firewall & restart it 3.modify /etc/vpop3scan.conf (see "Additional info") 4./etc/init.d/vpop3scan start 5.telnet 1.2.3.4 pop3 (commands "user u, pass p, retr 1, quit" passed, first mail displayed) 6.check log file Actual Results: Logfile contents this: May 8 11:52:02 [pop3vscan] POP3VScan Version 0.4 CVS: $Revision: 1.61-astaro $ $Date: 2003/06/17 10:30:00 $_ May 8 11:52:02 [pop3vscan] Selected scannertype: basic (Basic file invocation scanner)_ May 8 11:52:02 [pop3vscan] Listen now on 192.168.1.1:8110_ May 8 11:52:17 [pop3vscan] Connection from 192.168.1.10:32806_ May 8 11:52:17 [pop3vscan] Real-server adress is 1.2.3.4:110_ until now everything looks ok, but ... May 8 11:52:35 [pop3vscan] USER 'u'_ May 8 11:52:45 [pop3vscan] error opening file '/tmp/pop3vscan/children/7310//2005-05-08-11-05-45-7310-1', scanning temporarily disabled_ May 8 11:52:48 [pop3vscan] Session done (Clean Exit). Mails: 1 Bytes: 0_ Expected Results: temporary file should be created, scanning allowed and scanner started Content of /etc/vpop3scan.conf: # grep -v ^# /etc/pop3vscan.conf|uniq ip = 192.168.1.1 user = mail virusdir = /tmp/pop3vscan (I put it here for testing) scanner = /bin/true virusregexp = .* # grep mail /etc/passwd mail:x:8:12:mail:/var/spool/mail:/bin/false # ls -ld /tmp/pop3vscand rwx------ 2 mail root 4096 May 8 11:50 /tmp/pop3vscan
I recommend to mask/remove this package and replace it with p3scan (http://p3scan.sourceforge.net/). Reasons: 1. documentation of pop3vscan is incomplete ... it's a must to create minimum two additional subdirs /var/spool/pop3vscan/children /var/spool/pop3vscan/pop3vscannotify 2. functions return codes are inproperly/badly checked (if at all), and therefore e.g. if dir /var/spool/pop3vscan/pop3vscannotify doesn't exist, syslog contains really stupid/deceiving error: "Can't open mail notification template /etc/pop3vscan.mail_" 3. pop3vscan is dead/unmaintained, 4. p3scan is derived from pop3vscan and alive/maintained
p3scan has been in portage for quite a long time now, while pop3vscan has been hard-masked. Closing as WONTFIX.
