Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Unable to receive emails and "Error: -71 'ZIP_RATIO_ERR'" appears on the log

    • Updated:
    • 22 Nov 2017
    • Product/Version:
    • InterScan Messaging Security Virtual Appliance 9.1
    • Platform:
    • CentOS 5.4 32-bit
Summary

There are instances when you cannot receive emails because they are quarantined. Emails are being quarantined due to "Unscanned" reason, which actually violates the Security Settings Violations.

Upon checking the log.imss.yyyymmdd.xxxx log, it shows the error similar to the following:

2017/09/01 18:32:22 GMT+08:00        [6189:4152134432] [NORMAL]An error occured while virus scan upon message 'A6B3B997-581E-4605-ACE8-C7969DA47BCE'. Error: -71 'ZIP_RATIO_ERR'.  2017/09/01 18:32:22 GMT+08:00        [6189:4152134432] filter VirusFilter isTriggered returned error [/home/autobuild/IMSVA-REL-TW_9.1/Application/src/daemon/src/TmIsScan.cpp:TmIsScan::_ruleIsTriggered:4220]  2017/09/01 18:32:22 GMT+08:00        [6189:4152134432] push ruleID.ruleVer=1.2 into executed rule list  2017/09/01 18:32:22 GMT+08:00        [6189:4152134432] Find scan exception: OTHER_SCAN_ERROR  2017/09/01 18:32:22 GMT+08:00        [6189:4152134432] Set scan exception token for notification: Detected: Complex scan error. Examples: file handling, retrieval, or permission issues during scan: , FileName=.
Details
Public

The log "Error: -71 'ZIP_RATIO_ERR'" shows that the issue may occur due to the value of "VSIExtractFileRatioLimit" in the database. This parameter indicates the ratio between the extracted file size and the original compressed file. For example, if you have a compressed file of 1M and the extracted files are more than 200M, then the ratio is 200.

It is recommended to set the value of "VSIExtractFileRatioLimit" to "0", which means no limit, in order to resolve the issue.

To modify the value:

  1. Log in to the InterScan Messaging Security Virtual Appliance with root account via SSH.
  2. Run the following command line:

    /opt/trend/imss/PostgreSQL/bin/psql imss sa -c "update tb_global_setting set value='0' where name='VSIExtractFileRatioLimit' and section='virus' and inifile='imss.ini'"

  3. Execute the command below to confirm the new value:

    /opt/trend/imss/PostgreSQL/bin/psql imss sa -c "select * from tb_global_setting where name='VSIExtractFileRatioLimit' and section='virus' and inifile='imss.ini'"

    The output should be similar to the following:

    section | name | value | inifile | notes  ---------------------------------------------------  virus | VSIExtractFileRatioLimit | 0 | imss.ini | (1 row)
  4. Restart the imssd service using the following command:

    /opt/trend/imss/script/S99IMSS restart

Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1118845
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.