Notification messages failing
Diane Rolland
drolland at kdinet.com
Tue Jan 11 21:59:03 GMT 2005
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Ken Goods
> Sent: Tuesday, January 11, 2005 3:14 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Notification messages failing
>
> Drew Marshall wrote:
> > Ken Goods wrote:
> >
> >> It may be helpful to include your specific configuration
> and maybe a
> >> snippet of your MailScanner.conf (System Settings) to get a more
> >> detailed response.
> >>
> >>
> > And indeed the part of the mail log that details the events
> around the
> > bounce.
> >
> > Drew
Thanks guys!
MTA is sendmail not postfix.
Below are my System settings and the portion of the maillog file
# System settings
# ---------------
#
# How many MailScanner processes do you want to run at a time?
# There is no point increasing this figure if your MailScanner server
# is happily keeping up with your mail traffic.
# If you are running on a server with more than 1 CPU, or you have a
# high mail load (and/or slow DNS lookups) then you should see better
# performance if you increase this figure.
# If you are running on a small system with limited RAM, you should
# note that each child takes just over 20MB.
#
# As a rough guide, try 5 children per CPU. But read the notes above.
Max Children = 5
# User to run as (not normally used for sendmail)
# If you want to change the ownership or permissions of the quarantine or
# temporary files created by MailScanner, please see the "Incoming Work"
# settings later in this file.
#Run As User = mail
#Run As User = postfix
Run As User =
# Group to run as (not normally used for sendmail)
#Run As Group = mail
#Run As Group = postfix
Run As Group =
# How often (in seconds) should each process check the incoming mail
# queue for new messages? If you have a quiet mail server, you might
# want to increase this value so it causes less load on your server, at
# the cost of slightly increasing the time taken for an average message
# to be processed.
Queue Scan Interval = 5
# Set location of incoming mail queue
#
# This can be any one of
# 1. A directory name
# Example: /var/spool/mqueue.in
# 2. A wildcard giving directory names
# Example: /var/spool/mqueue.in/*
# 3. The name of a file containing a list of directory names,
# which can in turn contain wildcards.
# Example: /etc/MailScanner/mqueue.in.list.conf
#
# If you are using sendmail and have your queues split into qf, df, xf
# directories, then just specify the main directory, do not give me the
# directory names of the qf,df,xf directories.
# Example: if you have /var/spool/mqueue.in/qf
# /var/spool/mqueue.in/df
# /var/spool/mqueue.in/xf
# then just tell me /var/spool/mqueue.in. I will find the subdirectories
# automatically.
#
Incoming Queue Dir = /var/spool/mqueue.in
# Set location of outgoing mail queue.
# This can also be the filename of a ruleset.
Outgoing Queue Dir = /var/spool/mqueue
# Set where to unpack incoming messages before scanning them
# This can completely safely use tmpfs or a ramdisk, which will
# give you a significant performance improvement.
# NOTE: The path given here must not include any links at all,
# NOTE: but must be the absolute path to the directory.
Incoming Work Dir = /var/spool/MailScanner/incoming
# Set where to store infected and message attachments (if they are kept)
# This can also be the filename of a ruleset.
Quarantine Dir = /var/spool/MailScanner/quarantine
# Set where to store the process id number so you can stop MailScanner
PID file = /var/run/MailScanner.pid
# To avoid resource leaks, re-start periodically
Restart Every = 14400
# Set whether to use postfix, sendmail, exim or zmailer.
# If you are using postfix, then see the "SpamAssassin User State Dir"
# setting near the end of this file
MTA = sendmail
# Set how to invoke MTA when sending messages MailScanner has created
# (e.g. to sender/recipient saying "found a virus in your message")
# This can also be the filename of a ruleset.
Sendmail = /usr/sbin/sendmail
# Sendmail2 is provided for Exim users.
# It is the command used to attempt delivery of outgoing cleaned/disinfected
# messages.
# This is not usually required for sendmail.
# This can also be the filename of a ruleset.
#For Exim users: Sendmail2 = /usr/sbin/exim -C /etc/exim/exim_send.conf
#For sendmail users: Sendmail2 = /usr/sbin/sendmail
#Sendmail2 = /usr/sbin/sendmail -C /etc/exim/exim_send.conf
Sendmail2 = /usr/sbin/sendmail
maillog
Jan 9 15:01:04 prsvr02 MailScanner[9035]: MailScanner E-Mail Virus Scanner
version 4.37.7 starting...
Jan 9 15:01:04 prsvr02 update.virus.scanners: Delaying cron job up to 600
seconds
Jan 9 15:01:04 prsvr02 MailScanner[9035]: Enabling SpamAssassin
auto-whitelist functionality...
Jan 9 15:01:04 prsvr02 MailScanner[9035]: Using locktype = flock
Jan 9 15:01:04 prsvr02 MailScanner[9035]: New Batch: Scanning 2 messages,
5972 bytes
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Virus and Content Scanning:
Starting
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Filename Checks: Windows/DOS
Executable (j09KPQHP008851 eicar.com)
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Filename Checks: Windows/DOS
Executable (j09KPhCe008852 eicar.com)
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Other Checks: Found 2 problems
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Content Checks: Detected and will
disarm HTML message in j09KPQHP008851
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Content Checks: Detected and will
disarm HTML message in j09KPhCe008852
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Saved entire message to
/var/spool/MailScanner/quarantine/20050109/j09KPQHP008851
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Saved infected "eicar.com" to
/var/spool/MailScanner/quarantine/20050109/j09KPQHP008851
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Saved infected "eicar_com.zip" to
/var/spool/MailScanner/quarantine/20050109/j09KPQHP008851
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Saved entire message to
/var/spool/MailScanner/quarantine/20050109/j09KPhCe008852
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Saved infected "eicar.com" to
/var/spool/MailScanner/quarantine/20050109/j09KPhCe008852
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Saved infected "eicar_com.zip" to
/var/spool/MailScanner/quarantine/20050109/j09KPhCe008852
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Cleaned: Delivered 2 cleaned
messages
Jan 9 15:01:05 prsvr02 sendmail[9057]: j09L1574009057: from=<>, size=856,
class=0, nrcpts=1, msgid=<200501092101.j09L1574009057 at prsvr02.km-law.local>,
relay=root at localhost
Jan 9 15:01:05 prsvr02 sendmail[9060]: j09KPQHP008851:
to=<diane at titleclaim.com>, delay=00:35:39, xdelay=00:00:00, mailer=local,
pri=122347, dsn=2.0.0, stat=Sent
Jan 9 15:01:05 prsvr02 sendmail[9060]: j09KPhCe008852:
to=<diane at titleclaim.com>, delay=00:35:22, xdelay=00:00:00, mailer=local,
pri=122513, dsn=2.0.0, stat=Sent
Jan 9 15:01:05 prsvr02 sendmail[9061]: j09L15fH009061: from=<>, size=1110,
class=0, nrcpts=1, msgid=<200501092101.j09L1574009057 at prsvr02.km-law.local>,
proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Jan 9 15:01:05 prsvr02 sendmail[9061]: j09L15fH009061:
to=<drolland at kdinet.com>, delay=00:00:00, mailer=esmtp, pri=31110,
stat=queued
Jan 9 15:01:05 prsvr02 sendmail[9057]: j09L1574009057:
to=drolland at kdinet.com, delay=00:00:00, xdelay=00:00:00, mailer=relay,
pri=30856, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent
(j09L15fH009061 Message accepted for delivery)
Jan 9 15:01:05 prsvr02 sendmail[9064]: j09L15pe009064: from=<>, size=856,
class=0, nrcpts=1, msgid=<200501092101.j09L15pe009064 at prsvr02.km-law.local>,
relay=root at localhost
Jan 9 15:01:05 prsvr02 sendmail[9066]: j09L15pB009066: from=<>, size=1110,
class=0, nrcpts=1, msgid=<200501092101.j09L15pe009064 at prsvr02.km-law.local>,
proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Jan 9 15:01:05 prsvr02 sendmail[9066]: j09L15pB009066:
to=<drolland at kdinet.com>, delay=00:00:00, mailer=esmtp, pri=31110,
stat=queued
Jan 9 15:01:05 prsvr02 sendmail[9064]: j09L15pe009064:
to=drolland at kdinet.com, delay=00:00:00, xdelay=00:00:00, mailer=relay,
pri=30856, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent
(j09L15pB009066 Message accepted for delivery)
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Sender Warnings: Delivered 2
warnings to virus senders
Jan 9 15:01:05 prsvr02 sendmail[9067]: j09L1511009067: from=postmaster,
size=3437, class=0, nrcpts=1,
msgid=<200501092101.j09L1511009067 at prsvr02.km-law.local>,
relay=root at localhost
Jan 9 15:01:05 prsvr02 sendmail[9069]: j09L15SK009069:
from=<postmaster at prsvr02.km-law.local>, size=3712, class=0, nrcpts=1,
msgid=<200501092101.j09L1511009067 at prsvr02.km-law.local>, proto=ESMTP,
daemon=MTA, relay=localhost [127.0.0.1]
Jan 9 15:01:05 prsvr02 sendmail[9067]: j09L1511009067: to=postmaster,
delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=33437, relay=[127.0.0.1]
[127.0.0.1], dsn=2.0.0, stat=Sent (j09L15SK009069 Message accepted for
delivery)
Jan 9 15:01:05 prsvr02 MailScanner[9035]: Notices: Warned about 2 messages
Jan 9 15:01:05 prsvr02 MailScanner[9035]: New Batch: Scanning 3 messages,
7267 bytes
Jan 9 15:01:08 prsvr02 MailScanner[9035]: Virus and Content Scanning:
Starting
Jan 9 15:01:08 prsvr02 MailScanner[9035]: Uninfected: Delivered 3 messages
Jan 9 15:01:09 prsvr02 sendmail[9085]: STARTTLS=client,
relay=kdinet.com.mail5.psmtp.com., version=TLSv1/SSLv3, verify=FAIL,
cipher=AES256-SHA, bits=256/256
Jan 9 15:01:10 prsvr02 sendmail[9085]: j09L15pB009066:
to=<drolland at kdinet.com>, delay=00:00:05, xdelay=00:00:02, mailer=esmtp,
pri=121110, relay=kdinet.com.mail5.psmtp.com. [64.18.5.10], dsn=5.0.0,
stat=Service unavailable
Jan 9 15:01:10 prsvr02 sendmail[9085]: j09L15pB009066: j09L18kD009085:
postmaster notify: Service unavailable
Jan 9 15:01:10 prsvr02 sendmail[9085]: j09L18kD009085: to=root,
delay=00:00:00, xdelay=00:00:00, mailer=local, pri=32434, dsn=2.0.0,
stat=Sent
Jan 9 15:01:11 prsvr02 sendmail[9085]: j09L15fH009061:
to=<drolland at kdinet.com>, delay=00:00:06, xdelay=00:00:01, mailer=esmtp,
pri=121110, relay=kdinet.com.mail5.psmtp.com. [64.18.5.10], dsn=5.0.0,
stat=Service unavailable
Jan 9 15:01:11 prsvr02 sendmail[9085]: j09L15fH009061: j09L18kE009085:
postmaster notify: Service unavailable
Jan 9 15:01:11 prsvr02 sendmail[9085]: j09L18kE009085: to=root,
delay=00:00:00, xdelay=00:00:00, mailer=local, pri=32434, dsn=2.0.0,
stat=Sent
Jan 9 15:01:11 prsvr02 sendmail[9085]: j09L15SK009069: to=root,
delay=00:00:06, xdelay=00:00:00, mailer=local, pri=123712, dsn=2.0.0,
stat=Sent
Jan 9 15:01:14 prsvr02 MailScanner[9089]: MailScanner E-Mail Virus Scanner
version 4.37.7 starting...
Jan 9 15:01:14 prsvr02 MailScanner[9089]: Enabling SpamAssassin
auto-whitelist functionality...
Jan 9 15:01:14 prsvr02 MailScanner[9089]: Using locktype = flock
Jan 9 15:01:24 prsvr02 MailScanner[9090]: MailScanner E-Mail Virus Scanner
version 4.37.7 starting...
Jan 9 15:01:24 prsvr02 MailScanner[9090]: Enabling SpamAssassin
auto-whitelist functionality...
Jan 9 15:01:24 prsvr02 MailScanner[9090]: Using locktype = flock
Jan 9 15:01:34 prsvr02 MailScanner[9091]: MailScanner E-Mail Virus Scanner
version 4.37.7 starting...
Jan 9 15:01:34 prsvr02 MailScanner[9091]: Enabling SpamAssassin
auto-whitelist functionality...
Jan 9 15:01:35 prsvr02 MailScanner[9091]: Using locktype = flock
Jan 9 15:01:44 prsvr02 MailScanner[9092]: MailScanner E-Mail Virus Scanner
version 4.37.7 starting...
Jan 9 15:01:44 prsvr02 MailScanner[9092]: Enabling SpamAssassin
auto-whitelist functionality...
Jan 9 15:01:44 prsvr02 MailScanner[9092]: Using locktype = flock
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list