Odd messages appearing in my /var/log/message
Martin Hepworth
martinh at SOLID-STATE-LOGIC.COM
Mon May 23 08:55:29 IST 2005
Jason
I find that nowadays you have to put the MailWatch.pm in
CustomFunctions rather than the location in the MW install files, and do
not ammend the Custom.pm to insert the 'require' line.
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
Jason Williams wrote:
> Alright, think I figured this out, or at least have some directions on
> where to go. I was just about to debug before I sent my last email. Here
> is the output:
>
>
> Stopping MailScanner...
> Starting MailScanner...
> In Debugging mode, not forking...
> SA bayes lock is /root/.spamassassin/bayes.lock
> Bayes lock is at /root/.spamassassin/bayes.lock
> Undefined subroutine &MailScanner::CustomConfig::MailWatchLogging called
> at /usr/local/lib/MailScanner/MailScanner/Config.pm line 121.
>
> I saw the last line and though and the MailWatchLogging caught my eye. I
> guess i should have mentioned im running Mailwatch before.Oops. My mistake.
>
> looking at my mailscanner.conf file, this line...
>
> Always Looked Up Last = &MailWatchLogging
>
> When I change it from &MailWatchlogging to 'no', those messages in
> /var/log/messages go away.
>
> That seems to have fixed that part,but not I have to figure out what is
> going on with MailWatch. :)
>
> Thanks Drew. I appreciate it.
>
> Jason
>
> Drew Marshall wrote:
>
>> Jason Williams wrote:
>>
>>> Was just working on that Here is what I found:
>>>
>>> /var/log/messags:
>>> May 20 12:57:32 mail jwilliams: Process did not exit cleanly, returned
>>> 255 with signal 0
>>>
>>> /var/log/maillog (took exact time copies)
>>>
>>> May 20 12:57:29 mail MailScanner[79862]: New Batch: Scanning 1 messages,
>>> 3732 bytes
>>> May 20 12:57:29 mail MailScanner[79862]: Spam Checks: Starting
>>> May 20 12:57:31 mail MailScanner[79862]: Virus and Content Scanning:
>>> Starting
>>> May 20 12:57:32 mail MailScanner[79862]: Uninfected: Delivered 1
>>> messages
>>> May 20 12:57:32 mail MailScanner[79876]: MailScanner E-Mail Virus
>>> Scanner version 4.41.3 starting...
>>> May 20 12:57:32 mail MailScanner[79876]: Read 108 hostnames from the
>>> phishing whitelist
>>> May 20 12:57:32 mail MailScanner[79876]: Config: calling custom init
>>> function MailWatchLogging
>>> May 20 12:57:33 mail sm-mta-in[79877]: j4KJvWfI079877:
>>> from=<security-basics-return-34009-jwilliams=courtesymortgage.com at securityfocus.com>,
>>>
>>>
>>>
>>> size=2013, class=-60, nrcpts=1,
>>> msgid=<20050520054840.38424.qmail at web51609.mail.yahoo.com>, proto=ESMTP,
>>> daemon=MTA, relay=outgoing.securityfocus.com [205.206.231.27]
>>>
>>> Is it a MS process restarting, but the previous MS process wasn't
>>> stopped properly?
>>
>>
>>
>> Hmm, could be. Have you tried running MailScanner in debug mode and then
>> checking the logs?
>>
>> D
>>
>> --
>> In line with our policy, this message has
>> been scanned for viruses and dangerous
>> content by MailScanner, and is believed to be clean.
>> www.themarshalls.co.uk/policy
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list