MailScanner 4.26-1/ SpamAssassin2.63
Julian Field
mailscanner at ecs.soton.ac.uk
Sat Mar 6 11:28:12 GMT 2004
MailScanner doesn't use spamd at all, it does it faster than that. However,
it looks like something in your mail setup is calling spamc. You need to
find and stop that first. Grep all your sendmail and procmail files for
"spamc" and stop it being called. Then kill off spamd and stop it from
being restarted when your system boots.
At 00:45 06/03/2004, you wrote:
>No Name wrote:
>
>>Hi everyone,
>> I have MailScanner 4.26-1 running on 4 mail servers. All servers
>> are Sun Workstations with 3 of them running Solaris 8 and the main
>> server running Solaris 9.
>>
>> I wanted to upgrade to MailScanner 4.28.5-2 that was released in
>> the last day but before doing that I decided to upgrade my Spamassassin.
>>
>> I was running SpamAssassin 2.61 on the Solaris 9 machine
>> with perl 5.6.1 and upgraded this morning to 2.63.
>> I downloaded the tar file and did the make and make install from
>> there
>>
>> Now...
>> 1) spamd is running (I don't know why) It never ran before
>> entries from the syslog say..
>>
>>Mar 5 08:00:52 leka spamd[29851]: server started on port 48373/tcp (running
>>version 2.63)
>>Mar 5 08:00:53 leka spamd[29851]: connection from localhost [127.0.0.1]
>>at port
>>62945
>>Mar 5 08:00:53 leka spamd[29862]: Still running as root: user not specified
>>with -u, not found, or set to root. Fall back to nobody.
>>Mar 5 08:00:53 leka spamd[29862]: processing message
>><78w08.t365th3y6x7h at yahoo.com> for root:60001.
>>Mar 5 08:00:53 leka spamd[29862]: identified spam (16.3/5.0) for
>>root:60001 in
>>0.3 seconds, 1617 bytes.
>>Mar 5 08:00:53 leka spamd[29851]: server killed by SIGTERM, shutting down
>>Mar 5 08:01:01 leka spamd[29866]: server started on port 48373/tcp (running
>>version 2.63)
>>Mar 5 08:01:02 leka spamd[29866]: connection from localhost [127.0.0.1]
>>at port
>>62949
>>Mar 5 08:01:02 leka spamd[29874]: Still running as root: user not specified
>>with -u, not found, or set to root. Fall back to nobody.
>>Mar 5 08:01:02 leka spamd[29874]: checking message <9PS291LhupY> for
>>root:60001.
>>Mar 5 08:01:02 leka spamd[29866]: server killed by SIGTERM, shutting down
>>Mar 5 08:01:02 leka spamd[29874]: identified spam (14.2/5.0) for
>>root:60001 in
>>0.2 seconds, 1544 bytes.
>>Mar 5 08:01:03 leka spamc[29878]: [ID 990649 mail.error] connect(AF_INET) to
>>spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refused
>>Mar 5 08:01:04 leka spamc[29878]: [ID 990649 mail.error] connect(AF_INET) to
>>spamd at 127.0.0.1 failed, retrying (#2 of 3): Connection refused
>>Mar 5 08:01:05 leka spamc[29878]: [ID 990649 mail.error] connect(AF_INET) to
>>spamd at 127.0.0.1 failed, retrying (#3 of 3): Connection refused
>>Mar 5 08:01:06 leka spamc[29878]: [ID 473657 mail.error] connection
>>attempt to
>>spamd aborted after 3 retries
>>Mar 5 08:01:13 leka spamd[29890]: server started on port 48373/tcp (running
>>version 2.63)
>>Mar 5 08:01:13 leka spamd[29890]: connection from localhost [127.0.0.1]
>>at port
>>62956
>>Mar 5 08:01:13 leka spamd[29900]: Still running as root: user not specified
>>with -u, not found, or set to root. Fall back to nobody.
>>...etc,etc,etc.
>>
>>
>> 2) I have no bayes databases that I can find anywhere
>> 3) I found in the install log that the rules were installed
>> in /usr/perl5/5.6.1/share/spamassassin
>> So I editted the MailScanner.conf file and changed the
>> location to that, stopped and restarted MailScanner and
>> now it doesn't look like spamd/spamc are running.
>>
>>Did I go wrong in the make of Spamassassin? Can I uninstall it?
>>I don't know how to uninstall a perl module.
>>Don't want to upgrade to the new MailScanner until I know this is
>>working. I haven't had any problems in the past.
>>
>>Aloha, Sharon
>>
>>*=============================================================*
>>| UH/SOEST-Research Computer Fac vox: (808) 956-2616 |
>>| 1680 East West Rd- POST820 email: stahl at soest.hawaii.edu |
>>| Honolulu, Hi 96822 fax: (808) 956-5154 |
>>*=============================================================*
>>
>>
>>
>>
>I recently upgraded from 2.6 to 2.63 and i noticed (after reading this)
>that spamd is running too - i had 2.6 running, downloaded the source for
>2.63 did perl Makefile/PL, make, make install - thats it. I have RH9
>[root at mail01 root]# perl -V
>Summary of my perl5 (revision 5.0 version 8 subversion 0)
>
>root 7456 0.0 0.0 23600 4 ? S Mar05 0:12
>/usr/bin/perl -T -w ../spamd/spamd -x -D -p 48373 -C log/test_rules_copy
>--siteconfigpath log/localrules.tmp -L -m1
>root 16404 0.0 0.1 1496 452 pts/0 S 11:47 0:00 grep -i spam
>
>Since i have had a battle keeping this machine scanning mail lately, i
>will wait to hear from more people before i make any changes - but
>should this process be running? Is there something i should disable?
>
>[root at mail01 root]# cat /var/log/maillog | grep -i spamd
>Mar 5 01:40:27 mail01 spamc[6955]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#1 of 3): Connection refused
>Mar 5 01:40:28 mail01 spamc[6955]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#2 of 3): Connection refused
>Mar 5 01:40:29 mail01 spamc[6955]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#3 of 3): Connection refused
>Mar 5 01:40:30 mail01 spamc[6955]: connection attempt to spamd aborted
>after 3 retries
>Mar 5 01:40:51 mail01 spamd[6990]: server started on port 48373/tcp
>(running version 2.63)
>Mar 5 01:40:53 mail01 spamd[6990]: connection from
>localhost.localdomain [127.0.0.1] at port 32797
>Mar 5 01:40:53 mail01 spamd[7168]: Still running as root: user not
>specified with -u, not found, or set to root. Fall back to nobody.
>Mar 5 01:40:54 mail01 spamd[7168]: processing message
><78w08.t365th3y6x7h at yahoo.com> for root:99.
>Mar 5 01:40:54 mail01 spamd[7168]: identified spam (16.3/5.0) for
>root:99 in 0.9 seconds, 1617 bytes.
>Mar 5 01:40:54 mail01 spamd[6990]: server killed by SIGTERM, shutting down
>Mar 5 01:41:09 mail01 spamd[7177]: server started on port 48373/tcp
>(running version 2.63)
>Mar 5 01:41:11 mail01 spamd[7177]: connection from
>localhost.localdomain [127.0.0.1] at port 32798
>Mar 5 01:41:11 mail01 spamd[7208]: Still running as root: user not
>specified with -u, not found, or set to root. Fall back to nobody.
>Mar 5 01:41:12 mail01 spamd[7208]: checking message <9PS291LhupY> for
>root:99.
>Mar 5 01:41:12 mail01 spamd[7208]: identified spam (14.2/5.0) for
>root:99 in 1.0 seconds, 1544 bytes.
>Mar 5 01:41:13 mail01 spamd[7177]: server killed by SIGTERM, shutting down
>Mar 5 01:41:14 mail01 spamc[7210]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#1 of 3): Connection refused
>Mar 5 01:41:15 mail01 spamc[7210]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#2 of 3): Connection refused
>Mar 5 01:41:16 mail01 spamc[7210]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#3 of 3): Connection refused
>Mar 5 01:41:17 mail01 spamc[7210]: connection attempt to spamd aborted
>after 3 retries
>Mar 5 01:41:32 mail01 spamd[7213]: server started on port 48373/tcp
>(running version 2.63)
>Mar 5 01:41:33 mail01 spamd[7213]: connection from
>localhost.localdomain [127.0.0.1] at port 32802
>Mar 5 01:41:34 mail01 spamd[7222]: Still running as root: user not
>specified with -u, not found, or set to root. Fall back to nobody.
>Mar 5 01:41:34 mail01 spamd[7222]: checking message <9PS291LhupY> for
>root:99.
>Mar 5 01:41:34 mail01 spamd[7222]: identified spam (14.2/5.0) for
>root:99 in 0.8 seconds, 1544 bytes.
>Mar 5 01:41:34 mail01 spamd[7213]: server killed by SIGTERM, shutting down
>Mar 5 01:41:35 mail01 spamc[7250]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#1 of 3): Connection refused
>Mar 5 01:41:36 mail01 spamc[7250]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#2 of 3): Connection refused
>Mar 5 01:41:37 mail01 spamc[7250]: connect(AF_INET) to spamd at
>127.0.0.1 failed, retrying (#3 of 3): Connection refused
>Mar 5 01:41:38 mail01 spamc[7250]: connection attempt to spamd aborted
>after 3 retries
>Mar 5 01:41:52 mail01 spamd[7272]: server started on port 48373/tcp
>(running version 2.63)
>Mar 5 01:41:54 mail01 spamd[7272]: connection from
>localhost.localdomain [127.0.0.1] at port 32806
>Mar 5 01:41:54 mail01 spamd[7349]: Still running as root: user not
>specified with -u, not found, or set to root. Fall back to nobody.
>Mar 5 01:41:55 mail01 spamd[7349]: processing message <9PS291LhupY> for
>root:99.
>Mar 5 01:41:55 mail01 spamd[7349]: identified spam (14.2/5.0) for
>root:99 in 0.9 seconds, 1544 bytes.
>Mar 5 01:41:55 mail01 spamd[7272]: server killed by SIGTERM, shutting down
>Mar 5 01:42:10 mail01 spamd[7361]: server started on port 48373/tcp
>(running version 2.63)
>Mar 5 01:42:13 mail01 spamd[7361]: connection from
>localhost.localdomain [127.0.0.1] at port 32807
>Mar 5 01:42:13 mail01 spamd[7401]: Using default config for testuser:
>log/virtualconfig/testuser/user_prefs
>Mar 5 01:42:13 mail01 spamd[7401]: Still running as root: user not
>specified with -u, not found, or set to root. Fall back to nobody.
>Mar 5 01:42:13 mail01 spamd[7401]: processing message
><78w08.t365th3y6x7h at yahoo.com> for testuser:99.
>Mar 5 01:42:14 mail01 spamd[7401]: identified spam (17.3/5.0) for
>testuser:99 in 1.3 seconds, 1588 bytes.
>Mar 5 01:42:14 mail01 spamd[7361]: server killed by SIGTERM, shutting down
>Mar 5 01:42:28 mail01 spamd[7413]: server started on port 48373/tcp
>(running version 2.63)
>Mar 5 01:42:32 mail01 spamd[7413]: server hit by SIGHUP, restarting
>Mar 5 01:42:45 mail01 spamd[7413]: server started on port 48373/tcp
>(running version 2.63)
>Mar 5 01:42:45 mail01 spamd[7413]: connection from
>localhost.localdomain [127.0.0.1] at port 32808
>Mar 5 01:42:45 mail01 spamd[7453]: Still running as root: user not
>specified with -u, not found, or set to root. Fall back to nobody.
>Mar 5 01:42:45 mail01 spamd[7453]: processing message
><GTUBE1.1010101 at example.com> for root:99.
>Mar 5 01:42:45 mail01 spamd[7453]: identified spam (1000.0/5.0) for
>root:99 in 0.6 seconds, 387 bytes.
>Mar 5 01:42:46 mail01 spamd[7413]: server killed by SIGTERM, shutting down
>Mar 5 01:43:00 mail01 spamd[7456]: server started on port 48373/tcp
>(running version 2.63)
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
More information about the MailScanner
mailing list