Help! - MailScanner ceased working

Martin Hepworth martinh at SOLID-STATE-LOGIC.COM
Fri Nov 26 16:06:01 GMT 2004 

matthew

stop the mailscanner service

edit the MailScanner.conf file and turn on both lots of debug options

run checkmailscanner as the user defined in the MailScanner.conf and
drop the results back here..


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Matthew Bowman wrote:
> Hello
>
> MailScanner is running with pid 842 is the only output I get. Both are run
> by the same user.
>
> /var/log/maillog
>
> Nov 26 10:08:09 smithers MailScanner[1503]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:08:19 smithers MailScanner[1518]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:08:29 smithers MailScanner[1519]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:08:39 smithers MailScanner[1520]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:08:49 smithers MailScanner[1521]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:08:59 smithers MailScanner[1524]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:09:09 smithers MailScanner[1526]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:09:19 smithers MailScanner[1527]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:09:29 smithers MailScanner[1528]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
> Nov 26 10:09:39 smithers MailScanner[1530]: MailScanner E-Mail Virus
> Scanner version 4.35.11 starting...
>
> ps
>
> root       842  0.0  1.2 13908 12524 ?       S    09:32   0:00
> /usr/bin/perl -I/usr/lib/MailScanner /usr/sbin/MailScanner /etc/MailS
> root       843  0.0  0.0     0    0 ?        Z    09:32   0:01
> [MailScanner <defunct>]
> root      1039  0.0  0.0     0    0 ?        Z    09:32   0:01
> [MailScanner <defunct>]
> root      1040  0.0  0.0     0    0 ?        Z    09:32   0:01
> [MailScanner <defunct>]
> root      1041  0.0  0.0     0    0 ?        Z    09:32   0:01
> [MailScanner <defunct>]
> root      1042  0.0  0.0     0    0 ?        Z    09:33   0:01
> [MailScanner <defunct>]
> root      1043  0.0  0.0     0    0 ?        Z    09:33   0:01
> [MailScanner <defunct>]
> root      1044  0.0  0.0     0    0 ?        Z    09:33   0:01
> [MailScanner <defunct>]
> root      1045  0.0  0.0     0    0 ?        Z    09:33   0:01
> [MailScanner <defunct>]
> root      1046  0.0  0.0     0    0 ?        Z    09:33   0:01
> [MailScanner <defunct>]
> root      1539 34.2  0.0     0    0 ?        Z    10:10   0:01
> [MailScanner <defunct>]
>
> Thanks for your help
>
> Matthew K Bowman
> Systems Administrator
> UDCom
> Tel: 419-524-4330
> Fax: 419-524-8757
> Web: http://www.udcom.com
> Email: mbowman at udcom.com
> Support: techsupport at udcom.com
> Sales: sales at udcom.com
>
>
>
>
> Martin Hepworth <martinh at SOLID-STATE-LOGIC.COM>
> Sent by: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> 11/26/2004 09:58 AM
> Please respond to MailScanner mailing list
>
>         To:     MAILSCANNER at JISCMAIL.AC.UK
>         cc:
>         Subject:        Re: Help! - MailScanner ceased working
>
>
> Matthew
>
> if results are fine from running in debug mode then it should have
> delivered that batch of emails.....
>
> Can you drop the output of the checkmailscanner to the list?
>
> also are you running checkmailscanner as the same user MailScanner
> normally runs as?
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Matthew Bowman wrote:
>
>>Hello,
>>
>>One of our 3 mailscanner servers has stopped processing e-mail.  There
>
> are
>
>>no errors in /var/log/maillog or messages that indicate and sort of
>>problem.  Email arrives and gets put into mqueue.in and just stays
>
> there.
>
>>Nothing has changed in MailScanner.conf or sendmail.cf.  I'm at a loss
>
> as
>
>>to how this has happened all of a sudden.  I run mailscanner and
>>spamassassin in debug mode and the results where fine.  What else should
>
> I
>
>>be looking at?
>>
>>All 3 mailscanner servers run MS 4.35-11, SA 3.0.0 and Redhat 7.3
>>
>>Please help!
>>
>>Thanks
>>
>>Matthew
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list