Odd messages appearing in my /var/log/message
Jason Williams
jwilliams at COURTESYMORTGAGE.COM
Fri May 20 21:01:46 IST 2005
[ The following text is in the "ISO-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Was just working on that Here is what I found:
/var/log/messags:
May 20 12:57:32 mail jwilliams: Process did not exit cleanly, returned
255 with signal 0
/var/log/maillog (took exact time copies)
May 20 12:57:29 mail MailScanner[79862]: New Batch: Scanning 1 messages,
3732 bytes
May 20 12:57:29 mail MailScanner[79862]: Spam Checks: Starting
May 20 12:57:31 mail MailScanner[79862]: Virus and Content Scanning:
Starting
May 20 12:57:32 mail MailScanner[79862]: Uninfected: Delivered 1 messages
May 20 12:57:32 mail MailScanner[79876]: MailScanner E-Mail Virus
Scanner version 4.41.3 starting...
May 20 12:57:32 mail MailScanner[79876]: Read 108 hostnames from the
phishing whitelist
May 20 12:57:32 mail MailScanner[79876]: Config: calling custom init
function MailWatchLogging
May 20 12:57:33 mail sm-mta-in[79877]: j4KJvWfI079877:
from=<security-basics-return-34009-jwilliams=courtesymortgage.com at securityfocus.com>,
size=2013, class=-60, nrcpts=1,
msgid=<20050520054840.38424.qmail at web51609.mail.yahoo.com>, proto=ESMTP,
daemon=MTA, relay=outgoing.securityfocus.com [205.206.231.27]
Is it a MS process restarting, but the previous MS process wasn't
stopped properly?
I'll keep digging.
Jason
Drew Marshall wrote:
Have you looked at /var/log/maillog? Is there anything there to give you
a clue at around the same time? What was your MTA/ MailScanner doing at
those times?
Drew
> Jason Williams wrote:
>
>> Running FreeBSD 4.9
>> Sendmail 8.12.11
>> Just upgraded to MS 4.41.3 (latest stable release in FreeBSD ports tree)
>>
>> This server has been running great for a year. However, i just recently
>> upgraded to MS 4.40.1 then MS 4.41.3. After upgrading, I have seen the
>> following messages appear in /var/log/messages:
>>
>> May 20 12:00:23 mail jwilliams: Process did not exit cleanly, returned 9
>> with signal 0
>> May 20 12:01:24 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:01:58 mail last message repeated 2 times
>> May 20 12:04:10 mail last message repeated 4 times
>> May 20 12:13:45 mail last message repeated 10 times
>> May 20 12:14:59 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:16:29 mail jwilliams: Process did not exit cleanly, returned 9
>> with signal 0
>> May 20 12:16:55 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:18:40 mail jwilliams: Process did not exit cleanly, returned
>> 255 with signal 0
>> May 20 12:20:39 mail last message repeated 2 times
>>
>>
>> At this point, im trying to narrow down what it is.
>> The first thing I did was stop mailscanner, and tail the message log,
>> trying to see if it would happen. I shutdown mailscanner for 10 minutes.
>> During that time, there were zero entries in my message logs. (I will
>> duplicate this test later this evening when traffic is lighter).
>
>
>
>
>
>
>
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list