mqueue.in just gets bigger - no delivery?

Peter Peters P.G.M.Peters at utwente.nl
Wed Aug 30 15:22:25 IST 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Brett Charbeneau wrote on 30-8-2006 16:04:

>> First question:  when you start MailScanner, does it successfully
>> start and stay running?
> 
>     Yes. It forks off and chews up CPU time quite happily.

Do you see the forks?

>> Next question:  does it spawn children?  Look at the output of
>> "ps -ef | grep MailScanner" to see if it does.
> 
>     Yepper:
> 
> franklin:/var/backups# ps -ef | grep MailScanner
> root     29629     1  0 10:01 ?        00:00:00 MailScanner: starting
> children
> root     29630 29629 26 10:01 ?        00:00:08 MailScanner: starting
> children
> root     29656 29629 28 10:01 ?        00:00:06 MailScanner: starting
> children
> root     29681 29629 22 10:01 ?        00:00:02 MailScanner: starting
> children

I get:
mail      5533     1  0 Aug29 00:00:00 MailScanner: starting child
mail     17016  5533  0 16:00 00:00:07 MailScanner: waiting for messages
mail     17039  5533  0 16:01 00:00:05 MailScanner: waiting for messages
mail     17069  5533  0 16:01 00:00:07 MailScanner: waiting for messages
mail     17094  5533  0 16:01 00:00:05 MailScanner: waiting for messages
mail     17107  5533  0 16:01 00:00:06 MailScanner: waiting for messages
mail     17133  5533  0 16:01 00:00:06 MailScanner: waiting for messages
mail     17150  5533  0 16:01 00:00:06 MailScanner: waiting for messages
mail     17176  5533  0 16:02 00:00:05 MailScanner: waiting for messages
mail     17184  5533  0 16:02 00:00:06 MailScanner: waiting for messages
mail     17211  5533  0 16:02 00:00:06 MailScanner: waiting for messages

(Not such a busy server)

>> Next question:  does it appear to be processing messages?  What is
>> it logging to syslog?  (Do a "grep MailScanner /var/log/maillog" or
>> similar.)
> 
>     It seems to.
>     If I set "Scan Messages = no" in MailScanner.conf, mail flows
> without inspection just fine.
>     Here's some syslog with Scan Messages = yes
> 
> Aug 30 10:01:44 franklin MailScanner[29656]: MailScanner E-Mail Virus
> Scanner version 4.51.5 starting...
> Aug 30 10:01:45 franklin MailScanner[29656]: Read 710 hostnames from the
> phishing whitelist
> Aug 30 10:01:45 franklin MailScanner[29656]: Config: calling custom init
> function MailWatchLogging
> Aug 30 10:01:45 franklin MailScanner[29656]: Started SQL Logging child
> Aug 30 10:01:46 franklin MailScanner[29656]: Using SpamAssassin results
> cache
> Aug 30 10:01:46 franklin MailScanner[29656]: Connected to SpamAssassin
> cache database
> Aug 30 10:01:46 franklin MailScanner[29656]: Enabling SpamAssassin
> auto-whitelist functionality...

You should find lines like this too:
Aug 30 06:16:25 netlx094 MailScanner[3204]: New Batch: Found 21 messages
waiting
Aug 30 06:16:25 netlx094 MailScanner[3204]: New Batch: Scanning 1
messages, 21408 bytes

This proves MailScanner has found the correct queue (21 messages in some
state) and starts to process 1 message that is already completely
delivered and not being processed by any other MS process.

- --
Peter Peters, senior beheerder (Security)
Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE)
Universiteit Twente,  Postbus 217,  7500 AE  Enschede
telefoon: 053 - 489 2301, fax: 053 - 489 2383, http://www.utwente.nl/itbe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE9Z8helLo80lrIdIRAoyoAKCd0jcPHNfyjFjm6ElW7Wk1kPr+BACcDbTV
DpLT5fw5k0qbHspeMSdsijQ=
=OdpR
-----END PGP SIGNATURE-----



More information about the MailScanner mailing list