[Rspamd-Users] Rspamd Antivirus / F-Prot invalid request string

Rob Gunther redrob at gmail.com
Mon Oct 7 03:58:14 UTC 2019

I set up a server running Rspamd 1.9.4, using the anti-virus module to
interface with F-PROT Antivirus for Linux v6.2.39.

It works, mostly.

I don't know how often (a few %) but some requests from Rspamd to F-PROT
end up going badly.

I don't see any error being generated on Rspamd side but f-prot will
generate hundreds of line entries like this:

Invalid request string '٭��7�kK��*#0053�#023�\)葛7!LkF��#035�(���~���'
Invalid request string '8?�1�[g�#014[#003�#022�'

I would assume F-PROT is still waiting for a command but Rspamd thinks it
is ready to send the attachment.  When Rspamd starts sending the file for
scanning it results in all the errors on f-prot side.

I have setup Rspamd to only send mime parts.

    scan_mime_parts = true;
    scan_text_mine = false;
    scan_image_mime = false;

Obviously I need to capture a sample message that is causing this, but it
is on a live server with a lot of mail so knowing which message is causing
it is a bit difficult.

Anyone got a debugging suggestion?

More information about the Users mailing list