Goner-A problems - false alarm

[brandon pearson (BITS)]

Nick,
    As far as I can see all the mails were delivered from the outgoing
queue. The following extract is for one of the mails that got through with a
goner virus. Two entries in the incoming log then two entries in the
outgoing log.

/previous_logs_incoming/mainlog.06122001:2001-12-05 11:29:16
16BaEj-0003XY-04 <= ken.wright at bbsrc.ac.uk H=(exrout.cc.bbsrc.ac.uk)
[149.155.100.88] P=esmtp S=54034
id=41773CEF2B8FD411920200508BDCDC12FD0BBF at bits-exch1.bits.bbsrc.ac.uk T="Hi"
/previous_logs_incoming/mainlog.06122001:2001-12-05 11:33:09
16BaEj-0003XY-04 == corrina.hampton at hri.ac.uk T=remote_smtp defer (-1):
domain matches queue_smtp_domains, or -odqs set
/previous_logs_outgoing/mainlog.06122001:2001-12-05 11:45:04
16BaEj-0003XY-04 => corrina.hampton at hri.ac.uk R=hub_route T=remote_smtp
H=ntsw02.hriw.bbsrc.ac.uk [149.155.237.102] C="250 OK"
/previous_logs_outgoing/mainlog.06122001:2001-12-05 11:45:04
16BaEj-0003XY-04 Completed

The following mailscanner entries in syslog show the mail in the incoming
queue, then the error, then the last entry with the mail being copied to the
outgoing queue.

Dec  5 11:31:27 mhub2.bbsrc.ac.uk mailscanner[22339]: Using fcntl() to lock
/exim/exim_incoming/input/16BaEj-0003XY-04-H
Dec  5 11:31:27 mhub2.bbsrc.ac.uk mailscanner[22339]: Using fcntl() to lock
>/mailscanner/incoming/16BaEj-0003XY-04.header
Dec  5 11:31:58 mhub2.bbsrc.ac.uk mailscanner[22339]: Using fcntl() to lock
/exim/exim_incoming/input/16BaEj-0003XY-04-D
Dec  5 11:31:58 mhub2.bbsrc.ac.uk mailscanner[22339]: Failed to lock
/exim/exim_incoming/input/16BaEj-0003XY-04-D: Resource temporarily
unavailable
Dec  5 11:35:26 mhub2.bbsrc.ac.uk mailscanner[22339]: Using fcntl() to lock
/exim/exim_incoming/input/16BaEj-0003XY-04-D
Dec  5 11:35:26 mhub2.bbsrc.ac.uk mailscanner[22339]: Using fcntl() to lock
>/exim/exim_outgoing/input/16BaEj-0003XY-04-T

Thanks,

Brandon

-----Original Message-----
From: Nick Phillips [mailto:nwp at LEMON-COMPUTING.COM]
Sent: Monday, December 10, 2001 3:20 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Goner-A problems - false alarm


On Mon, Dec 10, 2001 at 03:02:28PM -0000, brandon pearson (BITS) wrote:

> I couldn't find any cronjobs running but we had our incoming queue set to
> queue_smtp_domains which we thought was pretty much the same as
queue_only.
> However setting this back to queue_only appears to have stopped all the
> errors so I guess they are not the same.

queue_smtp_domains, if I recall correctly, will only prevent an *immediate*
delivery attempt. Whilst queue_only will work so long as you don't
explicitly tell exim to do a queue run, I'd recommend going further than
that, as documented in the new improved exim+mailscanner installation
instructions.

> Is this a conflict between mailscanner and exim because exim is still
trying
> to do the routing on the mail while mailscanner is trying to scan it?

Not a conflict; they both co-operate quite happily (always assuming I
haven't written too many bugs into the locking ;), but if exim delivers
a message from the incoming queue, it obviously won't get virus-scanned.



Cheers,


Nick

--
Nick Phillips -- nwp at lemon-computing.com
Don't look back, the lemmings are gaining on you.