GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 10:53am
1
NethServer Version: 7.8.2003 (final)
Module: ClamScan 1.0.0
cc: @stephdl
Found Quarantine on old webinterface under configuration / antivirus scanner. Restoring everything from quarantine brought back cockpit functionality. I will investigate further but for now I have disabled quarantine, put unofficial signatures back to low, and will observe the next fullscan before activating quarantine again, problem solved.
Fortunately the old server manager is still there. I hope it will not be removed, as it is aparently rock-solid and helped me more than once
Hi everyone!
Unfortunately, for me is true only “Found Quarantine on old web interface under configuration / antivirus scanner.”, because I cannot restore the emails from Quarantine.
Related to this issue, I received two emails (please see the attached files), both at the same hour, after the scheduled scan was finished.
One is from ClamScan which inform me about the results of the scheduled scan.
The other email is from Cron, regarding an issue (or not) with nethserver-clamscan configuration.
How can I restore those emails (all contains an .xlsx price-list from one supplier)?
TIA,
Gabriel
stephdl
(Stéphane de Labrusse)
August 3, 2020, 2:12pm
2
hum first I would like to debug
do you have a quarantine db in /var/lib/nethserver/db
the email are in /var/spool/clamav/quarantine, so you can move them back manually
stephdl
(Stéphane de Labrusse)
August 3, 2020, 2:15pm
3
I do not understand, the quarantine db is created at https://github.com/stephdl/nethserver-clamscan/blob/ns7/root/sbin/e-smith/nethserver-clamscan#L27
and you used root to run sbin/e-smith/nethserver-clamscan
hum :-?
I bet the qurantine db does not exist but why… does it is a brand new server ?
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 2:18pm
4
Hi @stephdl ,
Thank you for your answer.
Yes, it is.
No, but I have installed ClamScan 3 days ago.
stephdl
(Stéphane de Labrusse)
August 3, 2020, 2:20pm
5
what is the content of the db quarantine…empty or something interesting inside ?
stephdl
(Stéphane de Labrusse)
August 3, 2020, 2:25pm
7
Need to check…not much time right now…
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 2:29pm
8
In Cockpit Quarantine is nothing, only in old GUI but I cannot restore anything.
OK!
Take your time!
Kind regards,
Gabriel
stephdl
(Stéphane de Labrusse)
August 3, 2020, 2:35pm
9
could you send me the quarantine db by email stephdl at de-labrusse dot fr
thank in advance
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 2:36pm
10
Of course!
Give me 5 minutes, please!
stephdl
(Stéphane de Labrusse)
August 3, 2020, 5:18pm
11
You found funny bug, it seems that the email address broke my code, with a file path it works OTB
Valid, the =
of the email path is not accepted … I feel alone tonight
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 5:28pm
12
stephdl:
I feel alone tonight
NO! You’ll never walk alone !
We are with you!
1 Like
stephdl
(Stéphane de Labrusse)
August 3, 2020, 5:30pm
13
let me think on the fix…did you succeed to move the email back to the /var/lib/nethserver/vmail folder ?
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 5:32pm
14
I didn’t do anything till now.
Do you want to move them “by hand”, as you told me earlier?
stephdl
(Stéphane de Labrusse)
August 3, 2020, 5:39pm
15
I think yes, all in var/spool/clamav/quarantine must be moved to /var/lib/nethserver/vmail/gabriel.xx@xxx/Maildir/cur/
mv /var/spool/clamav/quarantine/* /var/lib/nethserver/vmail/gabriel.xx@xxx/Maildir/cur/
normally permission are kept
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 5:45pm
16
mv: target ‘/…/’ is not a directory (of course, the right path)
Sorry! My fault! I forgot to write .ro at the email address!
The emails were moved.
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 5:56pm
17
Sorry for that!
Sincerely, I wanted to test the ClamScan and the Quarantine function (find “bad” files, quarantine, release from quarantine).
I knew that those files contain macros and I set ClamScan to scan by VBA macros to see if it works.
Partialy, works …
1 Like
stephdl
(Stéphane de Labrusse)
August 3, 2020, 7:31pm
18
the quarantine works…the release is broken
1 Like
GG_jr
(Gabriel GHEORGHIU)
August 3, 2020, 7:43pm
19
I’m not worried about that. I know you will fix it.
You already found the clue: “=”.
1 Like
stephdl
(Stéphane de Labrusse)
August 7, 2020, 3:47pm
20
I have almost fixed the issue, coming soon
1 Like