Its not ny day for mailscanner
Rob
rob at THEHOSTMASTERS.COM
Wed Nov 9 18:00:11 GMT 2005
[ The following text is in the "iso-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
I still am having problems and cannot figure out why....
Nov 9 12:20:45 stewy MailScanner[946]: New Batch: Scanning 1 messages, 8128
bytes
Nov 9 12:20:45 stewy MailScanner[946]: Spam Checks: Starting
Nov 9 12:20:49 stewy MailScanner[946]: Virus and Content Scanning: Starting
Nov 9 12:20:50 stewy MailScanner[946]: <A> tag found in message
50B34BEDB.A57E4 from terry at helliker.net
Nov 9 12:20:50 stewy MailScanner[946]: Requeue: 50B34BEDB.A57E4 to
AA2D0BF4C
Nov 9 12:20:50 stewy MailScanner[946]: Uninfected: Delivered 1 messages
Nov 9 12:21:42 stewy MailScanner[10390]: MailScanner E-Mail Virus Scanner
version 4.41.3 starting...
Nov 9 12:21:42 stewy MailScanner[10390]: Read 120 hostnames from the
phishing whitelist
Nov 9 12:21:43 stewy MailScanner[10390]: Enabling SpamAssassin
auto-whitelist functionality...
Nov 9 12:21:47 stewy MailScanner[10390]: Using locktype = flock
Died at he time above but still had MailScanner processes running...
I then restarted at the time below
Nov 9 12:54:30 stewy MailScanner[14310]: MailScanner E-Mail Virus Scanner
version 4.41.3 starting...
Nov 9 12:54:30 stewy MailScanner[14310]: Read 120 hostnames from the
phishing whitelist
Nov 9 12:54:31 stewy MailScanner[14310]: Enabling SpamAssassin
auto-whitelist functionality...
Nov 9 12:54:36 stewy MailScanner[14310]: Using locktype = flock
Nov 9 12:54:36 stewy MailScanner[14310]: New Batch: Found 63 messages
waiting
It very unreliable now, i have to restart every 15 mins to make sure mail
gets delivered....
Any suggestions on what to look for??
The debug did not seem to help much...
Rob Morin
Dido Internet Inc.
Montreal, Canada
514-990-4444
http://www.dido.ca
----- Original Message -----
From: "Rob" <rob at THEHOSTMASTERS.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, November 08, 2005 3:35 PM
Subject: Re: Its not ny day for mailscanner
> ok so after doing this it scanned one message and gave me what seemed to
> be a normal output.... but i can not site at the consol all day running it
> in debug mode and restarting each time??
>
> any other things i should look at....
> BTW when i say die, it looks like its dead, as i see mailscanner processes
> in a ps but in the log file i see no mailscanner stuff running... could
> it be because recently i added RBLs and razor?
>
> Thanks...
>
> Nov 8 15:27:29 stewy MailScanner[670]: MailScanner E-Mail Virus Scanner
> version 4.41.3 starting...
> Nov 8 15:27:29 stewy MailScanner[670]: Read 120 hostnames from the
> phishing whitelist
> Nov 8 15:27:29 stewy MailScanner[670]: Enabling SpamAssassin
> auto-whitelist functionality...
> Nov 8 15:27:33 stewy MailScanner[670]: lock.pl sees Config LockType =
> flock
> Nov 8 15:27:33 stewy MailScanner[670]: lock.pl sees have_module = 0
> Nov 8 15:27:33 stewy MailScanner[670]: Using locktype = flock
> Nov 8 15:27:33 stewy MailScanner[670]: New Batch: Scanning 2 messages,
> 22625 bytes
> Nov 8 15:27:33 stewy MailScanner[670]: Created attachment dirs for 2
> messages
> Nov 8 15:27:33 stewy MailScanner[670]: Spam Checks: Starting
> Nov 8 15:27:33 stewy MailScanner[670]: RBL Checks: returned 0
> Nov 8 15:27:35 stewy MailScanner[670]: SpamAssassin returned 0
> Nov 8 15:27:35 stewy MailScanner[670]: RBL checks: 51791BF61.03596 found
> in SBL+XBL
> Nov 8 15:27:35 stewy MailScanner[670]: RBL Checks: returned 256
> Nov 8 15:27:36 stewy MailScanner[670]: SpamAssassin returned 0
> Nov 8 15:27:36 stewy MailScanner[670]: Message 51791BF61.03596 from
> 81.190.142.152 (olivergoldmanaz at baixin-tech.com) to flextherm.com is spam,
> SBL+XBL, SpamAssassin (score=13.284, required 4, BAYES_99 3.50,
> DRUGS_ANXIETY 0.10, DRUGS_ANXIETY_EREC 0.04, DRUGS_ERECTILE 0.22,
> DRUGS_MANYKINDS 0.00, DRUGS_MUSCLE 0.00, DRUGS_PAIN 0.13, DRUGS_SLEEP
> 0.00, DRUGS_SLEEP_EREC 3.34, HELO_DYNAMIC_IPADDR 4.40,
> RAZOR2_CF_RANGE_51_100 0.06, RAZOR2_CHECK 1.51)
> Nov 8 15:27:36 stewy MailScanner[670]: Spam Checks: Found 1 spam messages
> Nov 8 15:27:36 stewy MailScanner[670]: Spam Actions: message
> 51791BF61.03596 actions are delete
> Nov 8 15:27:37 stewy MailScanner[670]: Virus and Content Scanning:
> Starting
> Nov 8 15:27:37 stewy MailScanner[670]: Commencing scanning by clamav...
> Nov 8 15:27:37 stewy MailScanner[670]: Completed scanning by clamav
> Nov 8 15:27:37 stewy MailScanner[670]: <A> tag found in message
> 59F3EBF62.8B4B8 from lapresseaffaires at courrier.cyberpresse.ca
> Nov 8 15:27:37 stewy MailScanner[670]: Requeue: 59F3EBF62.8B4B8 to
> A53A5BF4C
> Nov 8 15:27:37 stewy MailScanner[670]: About to deliver 1 messages
> Nov 8 15:27:37 stewy MailScanner[670]: Uninfected: Delivered 1 messages
> Nov 8 15:27:37 stewy postfix/qmgr[15211]: A53A5BF4C:
> from=<lapresseaffaires at courrier.cyberpresse.ca>, size=20795, nrcpt=1
> (queue active)
> Nov 8 15:27:37 stewy MailScanner[670]: MailScanner child dying of old age
>
>
> Rob Morin
> Dido Internet Inc.
> Montreal, Canada
> 514-990-4444
> http://www.dido.ca
>
> ----- Original Message -----
> From: "Stephen Swaney" <steve.swaney at FSL.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Monday, November 07, 2005 5:51 PM
> Subject: Re: Its not ny day for mailscanner
>
>
>>> -----Original Message-----
>>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>> Behalf Of Ugo Bellavance
>>> Sent: Monday, November 07, 2005 5:00 PM
>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>> Subject: Re: Its not ny day for mailscanner
>>>
>>> Stephen Swaney wrote:
>>> >> -----Original Message-----
>>> >> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>> >> Behalf Of Rob
>>> >> Sent: Monday, November 07, 2005 3:45 PM
>>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>>> >> Subject: Its not ny day for mailscanner
>>> >>
>>> >> First off thanks to all for helping me out in the last few days on
>>> >> this
>>> >> list i really appreciate it...
>>> >>
>>> >> No i have another strange problem...
>>> >>
>>> >> MS seems to silently die, and mail keeps coming in but not being
>>> >> delivered....
>>> >>
>>> >> Nothing in the logs other than the below...
>>> >>
>>> >> Nov 7 07:19:38 stewy MailScanner[22057]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 08:20:29 stewy MailScanner[32272]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 09:22:31 stewy MailScanner[12405]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 10:01:06 stewy MailScanner[22796]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 11:18:19 stewy MailScanner[8095]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 11:27:49 stewy MailScanner[10785]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 11:28:28 stewy MailScanner[10982]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 12:31:27 stewy MailScanner[28341]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 12:55:14 stewy MailScanner[2339]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 13:20:20 stewy MailScanner[9208]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 14:20:12 stewy MailScanner[23010]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 14:26:12 stewy MailScanner[24665]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 15:23:26 stewy MailScanner[6529]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 15:35:33 stewy MailScanner[8147]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >>
>>> >> When i run the /usr/sbin/check_mailscaner it says
>>> >>
>>> >> stewy:/var/log# /usr/sbin/check_mailscanner
>>> >> MailScanner running with pid 8146 8147
>>> >>
>>> >>
>>> >> But when i watch the logs via tail -f i do not see any Mailscanner
>>> >> activity until i restart by /etc/init.d/mailscanner restart
>>> >>
>>> >> I am using MS 4.41.3-2 with postfix on debian 3.1
>>> >>
>>> >> Any ideas?
>>> >>
>>> >> Rob...
>>> >> http://www.stupidguytalk.org
>>> >
>>> > To make the error a little noisier, in MailScanner.conf please set:
>>> >
>>> > Debug = no
>>> > Debug SpamAssassin = no
>>> >
>>> > Then stop and then start MailScanner from the command line. Watch the
>>> screen
>>> > output. The reason for MailScanner dying should appear.
>>> >
>>> > Steve
>>> >
>>> > Stephen Swaney
>>> > Fort Systems Ltd.
>>> > stephen.swaney at fsl.com
>>> > www.fsl.com
>>> >
>>>
>>> I'd say yes, Steve, not no :)
>>>
>>> Debug = yes
>>> Debug SpamAssassin = yes
>>>
>>> --
>>> Ugo
>>
>> Of course, Silly me. Thanks Ugo!
>>
>> Steve
>>
>> Stephen Swaney
>> Fort Systems Ltd.
>> stephen.swaney at fsl.com
>> www.fsl.com
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
> Rob Morin
> Dido Internet Inc.
> Montreal, Canada
> 514-990-4444
> http://www.dido.ca
>
> ----- Original Message -----
> From: "Stephen Swaney" <steve.swaney at FSL.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Monday, November 07, 2005 5:51 PM
> Subject: Re: Its not ny day for mailscanner
>
>
>>> -----Original Message-----
>>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>> Behalf Of Ugo Bellavance
>>> Sent: Monday, November 07, 2005 5:00 PM
>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>> Subject: Re: Its not ny day for mailscanner
>>>
>>> Stephen Swaney wrote:
>>> >> -----Original Message-----
>>> >> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>> >> Behalf Of Rob
>>> >> Sent: Monday, November 07, 2005 3:45 PM
>>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>>> >> Subject: Its not ny day for mailscanner
>>> >>
>>> >> First off thanks to all for helping me out in the last few days on
>>> >> this
>>> >> list i really appreciate it...
>>> >>
>>> >> No i have another strange problem...
>>> >>
>>> >> MS seems to silently die, and mail keeps coming in but not being
>>> >> delivered....
>>> >>
>>> >> Nothing in the logs other than the below...
>>> >>
>>> >> Nov 7 07:19:38 stewy MailScanner[22057]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 08:20:29 stewy MailScanner[32272]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 09:22:31 stewy MailScanner[12405]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 10:01:06 stewy MailScanner[22796]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 11:18:19 stewy MailScanner[8095]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 11:27:49 stewy MailScanner[10785]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 11:28:28 stewy MailScanner[10982]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 12:31:27 stewy MailScanner[28341]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 12:55:14 stewy MailScanner[2339]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 13:20:20 stewy MailScanner[9208]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 14:20:12 stewy MailScanner[23010]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 14:26:12 stewy MailScanner[24665]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 15:23:26 stewy MailScanner[6529]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >> Nov 7 15:35:33 stewy MailScanner[8147]: MailScanner E-Mail Virus
>>> Scanner
>>> >> version 4.41.3 starting...
>>> >>
>>> >> When i run the /usr/sbin/check_mailscaner it says
>>> >>
>>> >> stewy:/var/log# /usr/sbin/check_mailscanner
>>> >> MailScanner running with pid 8146 8147
>>> >>
>>> >>
>>> >> But when i watch the logs via tail -f i do not see any Mailscanner
>>> >> activity until i restart by /etc/init.d/mailscanner restart
>>> >>
>>> >> I am using MS 4.41.3-2 with postfix on debian 3.1
>>> >>
>>> >> Any ideas?
>>> >>
>>> >> Rob...
>>> >> http://www.stupidguytalk.org
>>> >
>>> > To make the error a little noisier, in MailScanner.conf please set:
>>> >
>>> > Debug = no
>>> > Debug SpamAssassin = no
>>> >
>>> > Then stop and then start MailScanner from the command line. Watch the
>>> screen
>>> > output. The reason for MailScanner dying should appear.
>>> >
>>> > Steve
>>> >
>>> > Stephen Swaney
>>> > Fort Systems Ltd.
>>> > stephen.swaney at fsl.com
>>> > www.fsl.com
>>> >
>>>
>>> I'd say yes, Steve, not no :)
>>>
>>> Debug = yes
>>> Debug SpamAssassin = yes
>>>
>>> --
>>> Ugo
>>
>> Of course, Silly me. Thanks Ugo!
>>
>> Steve
>>
>> Stephen Swaney
>> Fort Systems Ltd.
>> stephen.swaney at fsl.com
>> www.fsl.com
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list