Odd messages appearing in my /var/log/message

Jason Williams jwilliams at COURTESYMORTGAGE.COM
Fri May 20 21:01:46 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Was just working on that Here is what I found:

/var/log/messags:
May 20 12:57:32 mail jwilliams: Process did not exit cleanly, returned
255 with signal 0

/var/log/maillog (took exact time copies)

May 20 12:57:29 mail MailScanner[79862]: New Batch: Scanning 1 messages,
3732 bytes
May 20 12:57:29 mail MailScanner[79862]: Spam Checks: Starting
May 20 12:57:31 mail MailScanner[79862]: Virus and Content Scanning:
Starting
May 20 12:57:32 mail MailScanner[79862]: Uninfected: Delivered 1 messages
May 20 12:57:32 mail MailScanner[79876]: MailScanner E-Mail Virus
Scanner version 4.41.3 starting...
May 20 12:57:32 mail MailScanner[79876]: Read 108 hostnames from the
phishing whitelist
May 20 12:57:32 mail MailScanner[79876]: Config: calling custom init
function MailWatchLogging
May 20 12:57:33 mail sm-mta-in[79877]: j4KJvWfI079877:
from=<security-basics-return-34009-jwilliams=courtesymortgage.com at securityfocus.com>,
size=2013, class=-60, nrcpts=1,
msgid=<20050520054840.38424.qmail at web51609.mail.yahoo.com>, proto=ESMTP,
daemon=MTA, relay=outgoing.securityfocus.com [205.206.231.27]

Is it a MS process restarting, but the previous MS process wasn't
stopped properly?

I'll keep digging.

Jason




Drew Marshall wrote:

Have you looked at /var/log/maillog? Is there anything there to give you
a clue at around the same time? What was your MTA/ MailScanner doing at
those times?

Drew

> Jason Williams wrote:
>
>> Running FreeBSD 4.9
>> Sendmail 8.12.11
>> Just upgraded to MS 4.41.3 (latest stable release in FreeBSD ports tree)
>>
>> This server has been running great for a year. However, i just recently
>> upgraded to MS 4.40.1 then MS 4.41.3. After upgrading, I have seen the
>> following messages appear in /var/log/messages:
>>
>> May 20 12:00:23 mail jwilliams: Process did not exit cleanly, returned 9
>> with signal 0
>> May 20 12:01:24 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:01:58 mail last message repeated 2 times
>> May 20 12:04:10 mail last message repeated 4 times
>> May 20 12:13:45 mail last message repeated 10 times
>> May 20 12:14:59 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:16:29 mail jwilliams: Process did not exit cleanly, returned 9
>> with signal 0
>> May 20 12:16:55 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:18:40 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:20:39 mail last message repeated 2 times
>>
>>
>> At this point, im trying to narrow down what it is.
>> The first thing I did was stop mailscanner, and tail the message log,
>> trying to see if it would happen. I shutdown mailscanner for 10 minutes.
>> During that time, there were zero entries in my message logs. (I will
>> duplicate this test later this evening when traffic is lighter).
>
>
>
>
>
>
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list