Its not ny day for mailscanner

Rob rob at THEHOSTMASTERS.COM
Fri Nov 11 14:24:20 GMT 2005 

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

FYI to everyone.... i think i found my problem... just incase this might 
help anyone else.... i noticed by fluke that my webserver was also hanging a 
few times a day... after further investigation, as i though it weird both MS 
& Apache were hanging several times a day... i check through my dmesg logs 
carefully only to find an entry like this a few times...

APIC error on CPU0: 02(02)

After googling it, i saw a few post about this happening and some apps 
hanging or crashing until "nopic" was added to the kernel boot, so i added 
the "nopic" option to my kernel at boot time in my /boot/grub/menu.lst, as i 
use Debian, rebooted and all has been fine since then... i will wait and see 
if anything happens over the next week, but both MS and Apache are doing 
fine...

:)

Rob Morin
Dido Internet Inc.
Montreal, Canada
514-990-4444
http://www.dido.ca

----- Original Message ----- 
From: "Rob" <rob at THEHOSTMASTERS.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, November 09, 2005 1:04 PM
Subject: Re: Its not ny day for mailscanner


> If it helps i also added an init.pre file from SA source as debian did not 
> have it in /etc/spamassassin the contents of the file are below....
>
> # RelayCountry - add metadata for Bayes learning, marking the countries
> # a message was relayed through
> #
> # loadplugin Mail::SpamAssassin::Plugin::RelayCountry
>
> # URIDNSBL - look up URLs found in the message against several DNS
> # blocklists.
> #
> loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
>
> # Hashcash - perform hashcash verification.
> #
> loadplugin Mail::SpamAssassin::Plugin::Hashcash
>
> # SPF - perform SPF verification.
> #
> loadplugin Mail::SpamAssassin::Plugin::SPF
>
> Could this be causing anything?
>
>
> Rob Morin
> Dido Internet Inc.
> Montreal, Canada
> 514-990-4444
> http://www.dido.ca
>
> ----- Original Message ----- 
> From: "Rob" <rob at THEHOSTMASTERS.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Wednesday, November 09, 2005 1:00 PM
> Subject: Re: Its not ny day for mailscanner
>
>
>>I still am having problems and cannot figure out why....
>>
>> Nov  9 12:20:45 stewy MailScanner[946]: New Batch: Scanning 1 messages, 
>> 8128 bytes
>> Nov  9 12:20:45 stewy MailScanner[946]: Spam Checks: Starting
>> Nov  9 12:20:49 stewy MailScanner[946]: Virus and Content Scanning: 
>> Starting
>> Nov  9 12:20:50 stewy MailScanner[946]: <A> tag found in message 
>> 50B34BEDB.A57E4 from terry at helliker.net
>> Nov  9 12:20:50 stewy MailScanner[946]: Requeue: 50B34BEDB.A57E4 to 
>> AA2D0BF4C
>> Nov  9 12:20:50 stewy MailScanner[946]: Uninfected: Delivered 1 messages
>> Nov  9 12:21:42 stewy MailScanner[10390]: MailScanner E-Mail Virus 
>> Scanner version 4.41.3 starting...
>> Nov  9 12:21:42 stewy MailScanner[10390]: Read 120 hostnames from the 
>> phishing whitelist
>> Nov  9 12:21:43 stewy MailScanner[10390]: Enabling SpamAssassin 
>> auto-whitelist functionality...
>> Nov  9 12:21:47 stewy MailScanner[10390]: Using locktype = flock
>>
>> Died at he time above but still had MailScanner processes running...
>> I then restarted at the time below
>>
>> Nov  9 12:54:30 stewy MailScanner[14310]: MailScanner E-Mail Virus 
>> Scanner version 4.41.3 starting...
>> Nov  9 12:54:30 stewy MailScanner[14310]: Read 120 hostnames from the 
>> phishing whitelist
>> Nov  9 12:54:31 stewy MailScanner[14310]: Enabling SpamAssassin 
>> auto-whitelist functionality...
>> Nov  9 12:54:36 stewy MailScanner[14310]: Using locktype = flock
>> Nov  9 12:54:36 stewy MailScanner[14310]: New Batch: Found 63 messages 
>> waiting
>>
>> It very unreliable now, i have to restart every 15 mins to make sure mail 
>> gets delivered....
>>
>> Any suggestions on what to look for??
>> The debug did not seem to help much...
>>
>>
>> Rob Morin
>> Dido Internet Inc.
>> Montreal, Canada
>> 514-990-4444
>> http://www.dido.ca
>>
>> ----- Original Message ----- 
>> From: "Rob" <rob at THEHOSTMASTERS.COM>
>> To: <MAILSCANNER at JISCMAIL.AC.UK>
>> Sent: Tuesday, November 08, 2005 3:35 PM
>> Subject: Re: Its not ny day for mailscanner
>>
>>
>>> ok so after doing this it scanned one message and gave me what seemed to 
>>> be a normal output.... but i can not site at the consol all day running 
>>> it in debug mode and restarting each time??
>>>
>>> any other things i should look at....
>>> BTW when i say die, it looks like its dead, as i see mailscanner 
>>> processes in a ps  but in the log file i see no mailscanner stuff 
>>> running... could it be because recently i added RBLs and razor?
>>>
>>> Thanks...
>>>
>>> Nov  8 15:27:29 stewy MailScanner[670]: MailScanner E-Mail Virus Scanner 
>>> version 4.41.3 starting...
>>> Nov  8 15:27:29 stewy MailScanner[670]: Read 120 hostnames from the 
>>> phishing whitelist
>>> Nov  8 15:27:29 stewy MailScanner[670]: Enabling SpamAssassin 
>>> auto-whitelist functionality...
>>> Nov  8 15:27:33 stewy MailScanner[670]: lock.pl sees Config  LockType = 
>>> flock
>>> Nov  8 15:27:33 stewy MailScanner[670]: lock.pl sees have_module =  0
>>> Nov  8 15:27:33 stewy MailScanner[670]: Using locktype = flock
>>> Nov  8 15:27:33 stewy MailScanner[670]: New Batch: Scanning 2 messages, 
>>> 22625 bytes
>>> Nov  8 15:27:33 stewy MailScanner[670]: Created attachment dirs for 2 
>>> messages
>>> Nov  8 15:27:33 stewy MailScanner[670]: Spam Checks: Starting
>>> Nov  8 15:27:33 stewy MailScanner[670]: RBL Checks: returned 0
>>> Nov  8 15:27:35 stewy MailScanner[670]: SpamAssassin returned 0
>>> Nov  8 15:27:35 stewy MailScanner[670]: RBL checks: 51791BF61.03596 
>>> found in SBL+XBL
>>> Nov  8 15:27:35 stewy MailScanner[670]: RBL Checks: returned 256
>>> Nov  8 15:27:36 stewy MailScanner[670]: SpamAssassin returned 0
>>> Nov  8 15:27:36 stewy MailScanner[670]: Message 51791BF61.03596 from 
>>> 81.190.142.152 (olivergoldmanaz at baixin-tech.com) to flextherm.com is 
>>> spam, SBL+XBL, SpamAssassin (score=13.284, required 4, BAYES_99 3.50, 
>>> DRUGS_ANXIETY 0.10, DRUGS_ANXIETY_EREC 0.04, DRUGS_ERECTILE 0.22, 
>>> DRUGS_MANYKINDS 0.00, DRUGS_MUSCLE 0.00, DRUGS_PAIN 0.13, DRUGS_SLEEP 
>>> 0.00, DRUGS_SLEEP_EREC 3.34, HELO_DYNAMIC_IPADDR 4.40, 
>>> RAZOR2_CF_RANGE_51_100 0.06, RAZOR2_CHECK 1.51)
>>> Nov  8 15:27:36 stewy MailScanner[670]: Spam Checks: Found 1 spam 
>>> messages
>>> Nov  8 15:27:36 stewy MailScanner[670]: Spam Actions: message 
>>> 51791BF61.03596 actions are delete
>>> Nov  8 15:27:37 stewy MailScanner[670]: Virus and Content Scanning: 
>>> Starting
>>> Nov  8 15:27:37 stewy MailScanner[670]: Commencing scanning by clamav...
>>> Nov  8 15:27:37 stewy MailScanner[670]: Completed scanning by clamav
>>> Nov  8 15:27:37 stewy MailScanner[670]: <A> tag found in message 
>>> 59F3EBF62.8B4B8 from lapresseaffaires at courrier.cyberpresse.ca
>>> Nov  8 15:27:37 stewy MailScanner[670]: Requeue: 59F3EBF62.8B4B8 to 
>>> A53A5BF4C
>>> Nov  8 15:27:37 stewy MailScanner[670]: About to deliver 1 messages
>>> Nov  8 15:27:37 stewy MailScanner[670]: Uninfected: Delivered 1 messages
>>> Nov  8 15:27:37 stewy postfix/qmgr[15211]: A53A5BF4C: 
>>> from=<lapresseaffaires at courrier.cyberpresse.ca>, size=20795, nrcpt=1 
>>> (queue active)
>>> Nov  8 15:27:37 stewy MailScanner[670]: MailScanner child dying of old 
>>> age
>>>
>>>
>>> Rob Morin
>>> Dido Internet Inc.
>>> Montreal, Canada
>>> 514-990-4444
>>> http://www.dido.ca
>>>
>>> ----- Original Message ----- 
>>> From: "Stephen Swaney" <steve.swaney at FSL.COM>
>>> To: <MAILSCANNER at JISCMAIL.AC.UK>
>>> Sent: Monday, November 07, 2005 5:51 PM
>>> Subject: Re: Its not ny day for mailscanner
>>>
>>>
>>>>> -----Original Message-----
>>>>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>>>> Behalf Of Ugo Bellavance
>>>>> Sent: Monday, November 07, 2005 5:00 PM
>>>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>>>> Subject: Re: Its not ny day for mailscanner
>>>>>
>>>>> Stephen Swaney wrote:
>>>>> >> -----Original Message-----
>>>>> >> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] 
>>>>> >> On
>>>>> >> Behalf Of Rob
>>>>> >> Sent: Monday, November 07, 2005 3:45 PM
>>>>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>>>>> >> Subject: Its not ny day for mailscanner
>>>>> >>
>>>>> >> First off thanks to all for helping me out in the last few days on 
>>>>> >> this
>>>>> >> list i really appreciate it...
>>>>> >>
>>>>> >> No i have another strange problem...
>>>>> >>
>>>>> >> MS seems to silently die, and mail keeps coming in but not being
>>>>> >> delivered....
>>>>> >>
>>>>> >> Nothing in the logs other than the below...
>>>>> >>
>>>>> >> Nov  7 07:19:38 stewy MailScanner[22057]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 08:20:29 stewy MailScanner[32272]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 09:22:31 stewy MailScanner[12405]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 10:01:06 stewy MailScanner[22796]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 11:18:19 stewy MailScanner[8095]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 11:27:49 stewy MailScanner[10785]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 11:28:28 stewy MailScanner[10982]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 12:31:27 stewy MailScanner[28341]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 12:55:14 stewy MailScanner[2339]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 13:20:20 stewy MailScanner[9208]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 14:20:12 stewy MailScanner[23010]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 14:26:12 stewy MailScanner[24665]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 15:23:26 stewy MailScanner[6529]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 15:35:33 stewy MailScanner[8147]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >>
>>>>> >> When i run the /usr/sbin/check_mailscaner it says
>>>>> >>
>>>>> >> stewy:/var/log# /usr/sbin/check_mailscanner
>>>>> >> MailScanner running with pid 8146 8147
>>>>> >>
>>>>> >>
>>>>> >> But when i watch the logs via tail -f i do not see any Mailscanner
>>>>> >> activity until i restart by /etc/init.d/mailscanner restart
>>>>> >>
>>>>> >> I am using MS 4.41.3-2 with postfix on debian 3.1
>>>>> >>
>>>>> >> Any ideas?
>>>>> >>
>>>>> >> Rob...
>>>>> >> http://www.stupidguytalk.org
>>>>> >
>>>>> > To make the error a little noisier, in MailScanner.conf please set:
>>>>> >
>>>>> > Debug = no
>>>>> > Debug SpamAssassin = no
>>>>> >
>>>>> > Then stop and then start MailScanner from the command line. Watch 
>>>>> > the
>>>>> screen
>>>>> > output. The reason for MailScanner dying should appear.
>>>>> >
>>>>> > Steve
>>>>> >
>>>>> > Stephen Swaney
>>>>> > Fort Systems Ltd.
>>>>> > stephen.swaney at fsl.com
>>>>> > www.fsl.com
>>>>> >
>>>>>
>>>>> I'd say yes, Steve, not no :)
>>>>>
>>>>>   Debug = yes
>>>>>   Debug SpamAssassin = yes
>>>>>
>>>>> --
>>>>> Ugo
>>>>
>>>> Of course, Silly me. Thanks Ugo!
>>>>
>>>> Steve
>>>>
>>>> Stephen Swaney
>>>> Fort Systems Ltd.
>>>> stephen.swaney at fsl.com
>>>> www.fsl.com
>>>>
>>>> ------------------------ MailScanner list ------------------------
>>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>> 'leave mailscanner' in the body of the email.
>>>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>
>>> Rob Morin
>>> Dido Internet Inc.
>>> Montreal, Canada
>>> 514-990-4444
>>> http://www.dido.ca
>>>
>>> ----- Original Message ----- 
>>> From: "Stephen Swaney" <steve.swaney at FSL.COM>
>>> To: <MAILSCANNER at JISCMAIL.AC.UK>
>>> Sent: Monday, November 07, 2005 5:51 PM
>>> Subject: Re: Its not ny day for mailscanner
>>>
>>>
>>>>> -----Original Message-----
>>>>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>>>>> Behalf Of Ugo Bellavance
>>>>> Sent: Monday, November 07, 2005 5:00 PM
>>>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>>>> Subject: Re: Its not ny day for mailscanner
>>>>>
>>>>> Stephen Swaney wrote:
>>>>> >> -----Original Message-----
>>>>> >> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] 
>>>>> >> On
>>>>> >> Behalf Of Rob
>>>>> >> Sent: Monday, November 07, 2005 3:45 PM
>>>>> >> To: MAILSCANNER at JISCMAIL.AC.UK
>>>>> >> Subject: Its not ny day for mailscanner
>>>>> >>
>>>>> >> First off thanks to all for helping me out in the last few days on 
>>>>> >> this
>>>>> >> list i really appreciate it...
>>>>> >>
>>>>> >> No i have another strange problem...
>>>>> >>
>>>>> >> MS seems to silently die, and mail keeps coming in but not being
>>>>> >> delivered....
>>>>> >>
>>>>> >> Nothing in the logs other than the below...
>>>>> >>
>>>>> >> Nov  7 07:19:38 stewy MailScanner[22057]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 08:20:29 stewy MailScanner[32272]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 09:22:31 stewy MailScanner[12405]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 10:01:06 stewy MailScanner[22796]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 11:18:19 stewy MailScanner[8095]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 11:27:49 stewy MailScanner[10785]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 11:28:28 stewy MailScanner[10982]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 12:31:27 stewy MailScanner[28341]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 12:55:14 stewy MailScanner[2339]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 13:20:20 stewy MailScanner[9208]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 14:20:12 stewy MailScanner[23010]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 14:26:12 stewy MailScanner[24665]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 15:23:26 stewy MailScanner[6529]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >> Nov  7 15:35:33 stewy MailScanner[8147]: MailScanner E-Mail Virus
>>>>> Scanner
>>>>> >> version 4.41.3 starting...
>>>>> >>
>>>>> >> When i run the /usr/sbin/check_mailscaner it says
>>>>> >>
>>>>> >> stewy:/var/log# /usr/sbin/check_mailscanner
>>>>> >> MailScanner running with pid 8146 8147
>>>>> >>
>>>>> >>
>>>>> >> But when i watch the logs via tail -f i do not see any Mailscanner
>>>>> >> activity until i restart by /etc/init.d/mailscanner restart
>>>>> >>
>>>>> >> I am using MS 4.41.3-2 with postfix on debian 3.1
>>>>> >>
>>>>> >> Any ideas?
>>>>> >>
>>>>> >> Rob...
>>>>> >> http://www.stupidguytalk.org
>>>>> >
>>>>> > To make the error a little noisier, in MailScanner.conf please set:
>>>>> >
>>>>> > Debug = no
>>>>> > Debug SpamAssassin = no
>>>>> >
>>>>> > Then stop and then start MailScanner from the command line. Watch 
>>>>> > the
>>>>> screen
>>>>> > output. The reason for MailScanner dying should appear.
>>>>> >
>>>>> > Steve
>>>>> >
>>>>> > Stephen Swaney
>>>>> > Fort Systems Ltd.
>>>>> > stephen.swaney at fsl.com
>>>>> > www.fsl.com
>>>>> >
>>>>>
>>>>> I'd say yes, Steve, not no :)
>>>>>
>>>>>   Debug = yes
>>>>>   Debug SpamAssassin = yes
>>>>>
>>>>> --
>>>>> Ugo
>>>>
>>>> Of course, Silly me. Thanks Ugo!
>>>>
>>>> Steve
>>>>
>>>> Stephen Swaney
>>>> Fort Systems Ltd.
>>>> stephen.swaney at fsl.com
>>>> www.fsl.com
>>>>
>>>> ------------------------ MailScanner list ------------------------
>>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>> 'leave mailscanner' in the body of the email.
>>>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>
>>> ------------------------ MailScanner list ------------------------
>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>> 'leave mailscanner' in the body of the email.
>>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>> Support MailScanner development - buy the book off the website!
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website! 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list