email in exim incoming queue is not getting processed -- Please help

[Daniel Bird]

Hancock, Scott wrote:

>Here is some of my mail.log file.
>
>I did the restart at 8:23.  Looks like the queue went down yesterday at
>14:21
>
>Gaps below indicate places I snipped the log.
>
>
>Thanks
>
>Scott
>
>< snip>
>Mar 27 08:23:56 pebbles MailScanner[23069]: Using locktype = posix
>Mar 27 08:23:56 pebbles MailScanner[23069]: Creating hardcoded
>struct_flock subroutine for linux (Linux-type)
>Mar 27 08:23:56 pebbles MailScanner[23069]: New Batch: Found 2180
>messages waiting
>Mar 27 08:23:56 pebbles MailScanner[23069]: New Batch: Scanning 100
>messages, 4393367 bytes
>Mar 27 08:24:04 pebbles MailScanner[23097]: MailScanner E-Mail Virus
>Scanner version 4.13-3 starting...
>
>
some thing to check out?....

>Mar 27 08:24:04 pebbles MailScanner[23097]: User's home directory /root
>is not writable
>
Also, from you log it looks as though MS is seeing all your messges, as
the numbers are changing. What's the load like on your system?

I don't know if it's significant but there is a huge jump in the number
of messages MS is seeing...

>Mar 27 12:34:04 pebbles MailScanner[775]: New Batch: Found 707 messages
>waiting
>Mar 27 12:34:04 pebbles MailScanner[775]: New Batch: Scanning 1
>messages, 4155 bytes
>Mar 27 12:34:06 pebbles MailScanner[775]: Virus and Content Scanning:
>Starting
>Mar 27 12:34:06 pebbles MailScanner[775]: Uninfected: Delivered 1
>messages
>Mar 27 12:35:38 pebbles MailScanner[737]: New Batch: Found 19065
>messages waiting

Are any of the remaining messages in your queue marked as frozen or
locked in your exim log?

>
>
>>-----Original Message-----
>>From: Daniel Bird [mailto:dbird at SGHMS.AC.UK]
>>Sent: Thursday, March 27, 2003 1:03 PM
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Re: email in exim incoming queue is not getting processed --
>>Please help
>>
>>I didn't read the last bit of your mail properly! It sounds MS is
>>processing your mail.
>>
>>What does your maillog say?  Or your exim log?
>>
>>Hancock, Scott wrote:
>>
>>
>>
>>>Dan,
>>>
>>>Do you think this could still be the problem given I'm able to
>>>
>>>
>process
>
>
>>>new mail?
>>>
>>>This email passed through the same queue's to and from the list.
>>>
>>>To me you're suggestion infers the assumption it's not working at
>>>
>>>
>all.
>
>
>>>What do you think?
>>>
>>>
>>>
>>>
>>Sorry, I didn't read your mail properly! It sounds MS is processing
>>
>>
>your
>
>
>>mail OK if new mails are delivered.
>>
>>What does your maillog say?  MS should give an indication of how many
>>messages it sees in your input queue
>>
>>Or your exim log? Any unusual events there?
>>
>>Dan
>>
>>
>>
>>>Scott
>>>
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>From: Daniel Bird [mailto:dbird at SGHMS.AC.UK]
>>>>Sent: Thursday, March 27, 2003 12:17 PM
>>>>To: MAILSCANNER at JISCMAIL.AC.UK
>>>>Subject: Re: email in exim incoming queue is not getting processed
>>>>
>>>>
>--
>
>
>>>>Please help
>>>>
>>>>Scott,
>>>>I had a similar problem with exim and finding it's input and ouput
>>>>
>>>>
>>>>
>>>>
>>>queues.
>>>
>>>
>>>
>>>
>>>>For some reason my version (4.12, but also when I was using 3.x -
>>>>probably a configure option;-) decided if I told it to use
>>>>
>>>>/var/spool/exim/input
>>>>
>>>>it actually looked in /var/spool/exim/input/input
>>>>and likewise for /var/spool/exim/output
>>>>
>>>>
>>>>
>>>>
>>>(/var/spool/exim/output/input).
>>>
>>>
>>>
>>>
>>>>ie, always added 'input' to the dir structure
>>>>
>>>>To get 'round this I have :
>>>>
>>>>in exim.conf.out
>>>>spool_directory = /var/spool/exim/outgoing
>>>>
>>>>and in MailScanner.conf
>>>>Incoming Queue Dir = /var/spool/exim/input
>>>>Outgoing Queue Dir = /var/spool/exim/outgoing/input
>>>>
>>>>Works for me!
>>>>
>>>>Regards
>>>>Dan
>>>>
>>>>Hancock, Scott wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>Greetings all,
>>>>>
>>>>>This is a restate of a previous help request.
>>>>>
>>>>>Exim incoming has written a pile of messages to
>>>>>/var/spool/exim/incoming/input.
>>>>>
>>>>>For some reason mailscanner is not acting on these messages.
>>>>>
>>>>>Any guidance on how to troubleshoot or information on under what
>>>>>conditions mailscanner would not find or accept these files would
>>>>>
>>>>>
>be
>
>
>>>>>greatly appreciated.
>>>>>
>>>>>Debian sarge
>>>>>Exim 3.36
>>>>>MS 4.13
>>>>>Sa 2.44
>>>>>
>>>>>All new incoming mails are scanned and delivered.
>>>>>
>>>>>exim -bp  shows the mail in the incoming directory without any
>>>>>
>>>>>
>>>>>
>>>>>
>>>errors.
>>>
>>>
>>>
>>>
>>>>>The queue originally had 1500 unscanned emails a Mainscanner
>>>>>
>>>>>
>restart
>
>
>>>>>delivered half of these but I still have about 700 waiting for
>>>>>
>>>>>
>>>>>
>>>>>
>>>deliver.
>>>
>>>
>>>
>>>
>>>>>I'll gladly post any conf files.
>>>>>
>>>>>Please help.
>>>>>
>>>>>Scott Hancock
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>--
>>>>This message has been scanned for viruses and
>>>>dangerous content by MailScanner, and is
>>>>believed to be clean.
>>>>Mailscanner thanks transtec Computers for their support.
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>
>>--
>>This message has been scanned for viruses and
>>dangerous content by MailScanner, and is
>>believed to be clean.
>>Mailscanner thanks transtec Computers for their support.
>>
>>
>
>
>



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
Mailscanner thanks transtec Computers for their support.


This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses
***********************************************************************************