MailScanner halts, dies, stops randomly about once a month

Mon Mar 6 18:22:50 GMT 2006

Hi,

I've been fighting this problem for months now on multiple installations
where MailScanner stops even running the latest version 4.5-15 and SA
3.1. I'm using Fedora Core 1 with sendmail 8.13, ClamAV and F-Prot,
512MB memory to 1GB memory, happens more on busy servers with a load of
2.50 or higher.  I restart MailScanner and everything starts working
again.

One installation was down for 16 hours then the automatic MailScanner
restart got everything going again. Most lockups are down until I
manually restart MailScanner. I thought the default MailScanner restart
was every four hours and not sure why that does not always get
everything going again.

When the problem occurs a "telnet to localhost port 25" on the server
results in "connection refused"

Any advice will be greatly appreciated.

The following is a maillog file with connection refused at the bottom of
the file and valid message processed just before the problem occurred:

Mar  4 02:12:50 spamgate MailScanner[6207]: Message k247CkSA014987 from
66.129.64.140 (norberto at bresnan.net) to bbsjax.com is spam, Spam

Assassin (score=68.8, required 8, autolearn=spam, BAYES_99 3.50,
DATE_IN_FUTURE_12_24 3.03, DCC_CHECK 2.17, DIGEST_MULTIPLE 0.10, RAZOR2

_CF_RANGE_51_100 0.06, RAZOR2_CHECK 1.51, RCVD_IN_CHINA 8.00,
RCVD_IN_SBL 0.11, SARE_RECV_IP_061172 1.67, SARE_SPEC_LEO_PHARM 1.67,
URIB

L_AB_SURBL 8.00, URIBL_BLACK 6.00, URIBL_JP_SURBL 8.00, URIBL_OB_SURBL
8.00, URIBL_SBL 1.00, URIBL_SPAMCOP_SURBL 8.00, URIBL_WS_SURBL 8.

00) 

Mar  4 02:12:52 spamgate MailScanner[6207]: Spam Checks: Found 1 spam
messages 

Mar  4 02:12:52 spamgate MailScanner[6207]: Spam Actions: message
k247CkSA014987 actions are store 

Mar  4 02:12:52 spamgate MailScanner[6207]: Virus and Content Scanning:
Starting 

Mar  4 02:13:22 spamgate sendmail[15021]: k247DLYO015021:
from=<chloe at bbsjax.com>, size=489, class=0, nrcpts=1,
msgid=<200603040820.k248

K0JU026126 at localhost.localdomain>, proto=SMTP, daemon=MTA,
relay=nsc69.38.18-110.newsouth.net [69.38.18.110]

Mar  4 02:13:22 spamgate sendmail[15021]: k247DLYO015021:
to=<chloe at bbsjax.com>, delay=00:00:00, mailer=esmtp, pri=30489,
stat=queued

Mar  4 02:13:22 spamgate sendmail[15022]: k247DMbc015022:
from=<chloe at bbsjax.com>, size=940, class=0, nrcpts=1,
msgid=<200603040910.k249

A0x07541 at vfcprimary.mem.sysco.com>, proto=SMTP, daemon=MTA,
relay=smtpout.sysco.com [129.41.168.196]

Mar  4 02:13:22 spamgate sendmail[15022]: k247DMbc015022:
to=<chloe at bbsjax.com>, delay=00:00:00, mailer=esmtp, pri=30940,
stat=queued

Mar  4 02:13:22 spamgate MailScanner[6207]: New Batch: Scanning 2
messages, 2455 bytes 

Mar  4 02:13:22 spamgate MailScanner[6207]: Spam Checks: Starting 

Mar  4 02:13:28 spamgate MailScanner[6207]: Virus and Content Scanning:
Starting 

Mar  4 02:13:30 spamgate MailScanner[6207]: Uninfected: Delivered 2
messages 

Mar  4 02:13:30 spamgate sendmail[15051]: k247DLYO015021:
to=<chloe at bbsjax.com>, delay=00:00:08, xdelay=00:00:00, mailer=esmtp,
pri=1204

89, relay=[192.168.1.17] [192.168.1.17], dsn=2.0.0, stat=Sent (
<200603040820.k248K0JU026126 at localhost.localdomain> Queued mail for deli

very)

Mar  4 02:13:30 spamgate sendmail[15051]: k247DMbc015022:
to=<chloe at bbsjax.com>, delay=00:00:08, xdelay=00:00:00, mailer=esmtp,
pri=1209

40, relay=[192.168.1.17] [192.168.1.17], dsn=2.0.0, stat=Sent (
<200603040910.k249A0x07541 at vfcprimary.mem.sysco.com> Queued mail for del

ivery)

Mar  4 02:15:01 spamgate MailScanner[6673]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6673]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6673]: Disconnected from the
database 

Mar  4 02:15:01 spamgate MailScanner[6207]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6207]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6207]: Disconnected from the
database 

Mar  4 02:15:01 spamgate MailScanner[6425]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6425]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6425]: Disconnected from the
database 

Mar  4 02:15:01 spamgate MailScanner[6186]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6186]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6186]: Disconnected from the
database 

Mar  4 02:15:01 spamgate MailScanner[6601]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6601]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6601]: Disconnected from the
database 

Mar  4 02:16:20 spamgate sendmail[15192]: alias database /etc/aliases
rebuilt by root

Mar  4 02:16:20 spamgate sendmail[15192]: /etc/aliases: 63 aliases,
longest 10 bytes, 625 bytes total

Mar  4 02:16:20 spamgate sm-msp-queue[15202]: starting daemon (8.13.1):
queueing at 00:15:00

Mar  4 02:16:20 spamgate sendmail[15207]: starting daemon (8.13.1):
queueing at 00:15:00

Mar  4 02:16:26 spamgate MailScanner[15228]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:26 spamgate MailScanner[15228]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:16:28 spamgate MailScanner[15228]: Initialising database
connection 

Mar  4 02:16:28 spamgate MailScanner[15228]: Finished initialising
database connection 

Mar  4 02:16:36 spamgate MailScanner[15228]: Using locktype = posix 

Mar  4 02:16:36 spamgate MailScanner[15228]: Creating hardcoded
struct_flock subroutine for linux (Linux-type) 

Mar  4 02:16:37 spamgate MailScanner[15241]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:37 spamgate MailScanner[15241]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:16:38 spamgate MailScanner[15241]: Initialising database
connection 

Mar  4 02:16:39 spamgate MailScanner[15241]: Finished initialising
database connection 

Mar  4 02:16:46 spamgate MailScanner[15241]: Using locktype = posix 

Mar  4 02:16:46 spamgate MailScanner[15241]: Creating hardcoded
struct_flock subroutine for linux (Linux-type) 

Mar  4 02:16:48 spamgate MailScanner[15250]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:48 spamgate MailScanner[15250]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:16:49 spamgate MailScanner[15250]: Initialising database
connection 

Mar  4 02:16:50 spamgate MailScanner[15250]: Finished initialising
database connection 

Mar  4 02:16:57 spamgate MailScanner[15250]: Using locktype = posix 

Mar  4 02:16:57 spamgate MailScanner[15250]: Creating hardcoded
struct_flock subroutine for linux (Linux-type) 

Mar  4 02:16:59 spamgate MailScanner[15259]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:59 spamgate MailScanner[15259]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:17:00 spamgate MailScanner[15259]: Initialising database
connection 

Mar  4 02:17:01 spamgate MailScanner[15259]: Finished initialising
database connection 

Mar  4 02:17:08 spamgate MailScanner[15259]: Using locktype = posix 

Mar  4 02:17:08 spamgate MailScanner[15259]: Creating hardcoded
struct_flock subroutine for linux (Linux-type) 

Mar  4 02:17:10 spamgate MailScanner[15266]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:17:10 spamgate MailScanner[15266]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:17:11 spamgate MailScanner[15266]: Initialising database
connection 

Mar  4 02:17:12 spamgate MailScanner[15266]: Finished initialising
database connection 

Mar  4 02:17:20 spamgate MailScanner[15266]: Using locktype = posix 

Mar  4 02:17:20 spamgate MailScanner[15266]: Creating hardcoded
struct_flock subroutine for linux (Linux-type) 

Mar  4 02:48:59 spamgate sendmail[13327]: k246mxvT013327: timeout
waiting for input from savingsfare.com during server cmd read

Mar  4 03:00:05 spamgate sendmail[14073]: k24704lw014073: timeout
waiting for input from c-68-50-207-165.hsd1.md.comcast.net during serv

er cmd read

Mar  4 03:00:05 spamgate sendmail[14073]: k24704lw014073:
c-68-50-207-165.hsd1.md.comcast.net [68.50.207.165] did not issue
MAIL/EXPN/VR

FY/ETRN during connection to MTA

Mar  4 03:01:00 spamgate update.virus.scanners: Delaying cron job up to
600 seconds

Mar  4 03:04:22 spamgate update.virus.scanners: Found clamav installed

Mar  4 03:04:22 spamgate update.virus.scanners: Running autoupdate for
clamav

Mar  4 03:04:23 spamgate freshclam[16700]: Daemon started. 

Mar  4 03:04:23 spamgate freshclam[16700]: ClamAV update process started
at Sat Mar  4 03:04:23 2006 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Your ClamAV
installation is OUTDATED! 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Local version:
0.87.1 Recommended version: 0.88 

Mar  4 03:04:23 spamgate freshclam[16700]: DON'T PANIC! Read
http://www.clamav.net/faq.html 

Mar  4 03:04:23 spamgate freshclam[16700]: main.cvd is up to date
(version: 36, sigs: 44686, f-level: 7, builder: tkojm) 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Your ClamAV
installation is OUTDATED! 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Current
functionality level = 6, recommended = 7 

Mar  4 03:04:23 spamgate freshclam[16700]: DON'T PANIC! Read
http://www.clamav.net/faq.html 

Mar  4 03:04:23 spamgate freshclam[16700]: daily.cvd is up to date
(version: 1313, sigs: 1082, f-level: 7, builder: diego) 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Your ClamAV
installation is OUTDATED! 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Current
functionality level = 6, recommended = 7 

Mar  4 03:04:23 spamgate freshclam[16700]: DON'T PANIC! Read
http://www.clamav.net/faq.html 

Mar  4 03:04:23 spamgate ClamAV-autoupdate[16699]: ClamAV did not need
updating 

Mar  4 03:04:23 spamgate update.virus.scanners: Found f-prot installed

Mar  4 03:04:23 spamgate update.virus.scanners: Running autoupdate for
f-prot

Mar  4 03:04:23 spamgate F-Prot autoupdate[16723]: F-Prot did not need
updating. 

Mar  4 03:04:23 spamgate update.virus.scanners: Found generic installed

Mar  4 03:04:23 spamgate update.virus.scanners: Running autoupdate for
generic

Mar  4 03:24:32 spamgate sendmail[12216]: k246OTIC012216: timeout
waiting for input from [61.50.157.158] during message collect

Mar  4 03:24:32 spamgate sendmail[12216]: k246OTIC012216:
from=<zgysdn at jps-group.com>, size=1330, class=0, nrcpts=1,
msgid=<001b01c63f54

$34187a79$e15a323d at klck>, proto=SMTP, daemon=MTA, relay=[61.50.157.158]

Mar  4 03:24:32 spamgate sendmail[12216]: k246OTIC012216:
to=<kschram at bbsjax.com>, delay=02:00:01, pri=31330, stat=timeout waiting
for i

nput during message collect

Mar  4 04:01:00 spamgate update.virus.scanners: Delaying cron job up to
600 seconds

Mar  4 04:02:05 spamgate sendmail[17089]: k24925kl017089: from=root,
size=6613, class=0, nrcpts=1, msgid=<200603040902.k24925kl017089 at sp

amgate.bbsjax.com>, relay=root at localhost

Mar  4 04:02:05 spamgate sendmail[17089]: k24925kl017089: to=root,
ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pr

i=36613, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred:
Connection refused by [127.0.0.1]

Regards,

Damian

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060306/a9c363a4/attachment.html