-
Notifications
You must be signed in to change notification settings - Fork 5
Recently api usage is low but logs are complaining.. #7
Comments
I've recently changed the starting script. Before I started manually. Now I am starting with proper init.d script. And update-rc.d.
|
This script is not perfect, chown amavis:amavis /run/amavisvtd.sock does not work somehow I tried su, sudo, start-stop-daemon. This part is still "manual". |
The Virustotal API is not only limited by the total number of request per day, but also in a one minute-window:
Please make sure that the number of requests per minute is below that threshold. |
It could be.
What do you think about my starting script? Any trick to make amavisvt.sock
owned not by root but amavis?
cheers
Miki
2017-11-02 9:47 GMT+00:00 Johann Schmitz <notifications@github.com>:
… The Virustotal API is not only limited by the total number of request per
day, but also in a one minute-window:
is limited to at most 4 requests of any nature in any given 1 minute time
frame.
Please make sure that the number of requests per minute is below that
threshold.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#7 (comment)>, or mute
the thread
<https://github.com/notifications/unsubscribe-auth/AXYqztckgF7LLHpsGPL68s9TpY-yvbeyks5syY-2gaJpZM4QPYcd>
.
|
The socket is propably owned by |
I've tried that but then there is something wrong with the quotation marks,
because sudo will never take full command as input
'amavis $PY $AMP/amavisvtd.py --socket /run/amavisvtd.sock'
Nothing worked am I stupid :D ??
cheers
Miki
2017-11-02 10:52 GMT+00:00 Johann Schmitz <notifications@github.com>:
… The socket is propably owned by root because the script is started as root
.
Try something like sudo -u amavis $PY $AMP/amavisvtd.py --socket
/run/amavisvtd.sock (first make sure the socket doesn't already exists).
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#7 (comment)>, or mute
the thread
<https://github.com/notifications/unsubscribe-auth/AXYqzqBj_9ssKo7B_g-M_PXujmwVkCPxks5syZ7YgaJpZM4QPYcd>
.
|
Also sometimes I am sending one message with just plain body, no
attachments, but somehow amavisvt is sending few files for scan. I wonder
what are they?
cheers
Miki
2017-11-02 10:52 GMT+00:00 Johann Schmitz <notifications@github.com>:
… The socket is propably owned by root because the script is started as root
.
Try something like sudo -u amavis $PY $AMP/amavisvtd.py --socket
/run/amavisvtd.sock (first make sure the socket doesn't already exists).
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#7 (comment)>, or mute
the thread
<https://github.com/notifications/unsubscribe-auth/AXYqzqBj_9ssKo7B_g-M_PXujmwVkCPxks5syZ7YgaJpZM4QPYcd>
.
|
Try it without quotes as the init script is basically just a shell script. Also: which OS? Maybe it's safer to use the init systems daemon handler to launch it.
|
debian.
Yesterday I spent 2 hours on that with no success.
Even sleep and chown amavis:amavis amavisvt.sock is not working in auto
startup mode, it's working well when you start it from the finger.
2017-11-02 16:20 GMT+00:00 Johann Schmitz <notifications@github.com>:
… Try it without quotes as the init script is basically just a shell script.
Also: which OS? Maybe it's safer to use the init systems daemon handler to
launch it.
amavisvt works on mail parts. When you send a (HTML) mail, you typically
send two parts: a plain text part and an HTML part. Each image / attachment
adds another parts. amavisvt has a hardcoded list of mimetype which are
sent to VT; so even if the mail looks "text only" (except when it's
actually a plain text mail) multiple parts may be sent to Virustotal.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#7 (comment)>, or mute
the thread
<https://github.com/notifications/unsubscribe-auth/AXYqzuaNy2Hbknac7EDLmytehH0zuDnCks5syevngaJpZM4QPYcd>
.
|
Amavis by default is putting to quarantine many extensions (executables for
example), can we have more control what is sent to virustotal for scan so
we skip scanning for files that will be quarantined anyway?
cheers
Miki
2017-11-02 9:47 GMT+00:00 Johann Schmitz <notifications@github.com>:
… The Virustotal API is not only limited by the total number of request per
day, but also in a one minute-window:
is limited to at most 4 requests of any nature in any given 1 minute time
frame.
Please make sure that the number of requests per minute is below that
threshold.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#7 (comment)>, or mute
the thread
<https://github.com/notifications/unsubscribe-auth/AXYqztckgF7LLHpsGPL68s9TpY-yvbeyks5syY-2gaJpZM4QPYcd>
.
|
But if I login to virustotal, there is only 300 requests for today.
Traceback (most recent call last):
File "/usr/local/lib/python2.7/dist-packages/amavisvt-0.5.3-py2.7.egg/amavisvt/client.py", line 529, in check_vt
raise Exception("API-Limit exceeded!")
Exception: API-Limit exceeded!
2017-11-02 09:01:37,514 ERROR [Thread-105] Error asking virustotal about files
Traceback (most recent call last):
File "/usr/local/lib/python2.7/dist-packages/amavisvt-0.5.3-py2.7.egg/amavisvt/client.py", line 529, in check_vt
bash: 2017-11-02: command not found
raise Exception("API-Limit exceeded!")
Exception: API-Limit exceeded!
root@smtp:/var/log# Traceback (most recent call last):
bash: syntax error near unexpected token
most' root@smtp:/var/log# File "/usr/local/lib/python2.7/dist-packages/amavisvt-0.5.3-py2.7.egg/amavisvt/client.py", line 529, in check_vt bash: File: command not found root@smtp:/var/log# raise Exception("API-Limit exceeded!") bash: syntax error near unexpected token
('root@smtp:/var/log# Exception: API-Limit exceeded!
bash: Exception:: command not found
root@smtp:/var/log# 2017-11-02 09:01:37,514 ERROR [Thread-105] Error asking virustotal about files
bash: 2017-11-02: command not found
root@smtp:/var/log# Traceback (most recent call last):
bash: syntax error near unexpected token
most' root@smtp:/var/log# File "/usr/local/lib/python2.7/dist-packages/amavisvt-0.5.3-py2.7.egg/amavisvt/client.py", line 529, in check_vt bash: File: command not found root@smtp:/var/log# raise Exception("API-Limit exceeded!") bash: syntax error near unexpected token
('root@smtp:/var/log# Exception: API-Limit exceeded!
bash: Exception:: command not found
The text was updated successfully, but these errors were encountered: