MailScanner halts, dies, stops randomly about once a month

Mon Mar 6 18:35:19 GMT 2006

What else is going on on that server when this happens? What is the load? 

What do you do to "fix" the error?

Do you know that the mailscanner restart script is NOT running? Have you
checked the cron log (/var/log/cron)?

-Grant

  _____  

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Damian
Mendoza
Sent: Monday, March 06, 2006 1:23 PM
To: mailscanner at lists.mailscanner.info
Subject: MailScanner halts, dies, stops randomly about once a month

Hi,

I've been fighting this problem for months now on multiple installations
where MailScanner stops even running the latest version 4.5-15 and SA 3.1.
I'm using Fedora Core 1 with sendmail 8.13, ClamAV and F-Prot, 512MB memory
to 1GB memory, happens more on busy servers with a load of 2.50 or higher.
I restart MailScanner and everything starts working again.

One installation was down for 16 hours then the automatic MailScanner
restart got everything going again. Most lockups are down until I manually
restart MailScanner. I thought the default MailScanner restart was every
four hours and not sure why that does not always get everything going again.

When the problem occurs a "telnet to localhost port 25" on the server
results in "connection refused"

Any advice will be greatly appreciated.

The following is a maillog file with connection refused at the bottom of the
file and valid message processed just before the problem occurred:

Mar  4 02:12:50 spamgate MailScanner[6207]: Message k247CkSA014987 from
66.129.64.140 (norberto at bresnan.net) to bbsjax.com is spam, Spam

Assassin (score=68.8, required 8, autolearn=spam, BAYES_99 3.50,
DATE_IN_FUTURE_12_24 3.03, DCC_CHECK 2.17, DIGEST_MULTIPLE 0.10, RAZOR2

_CF_RANGE_51_100 0.06, RAZOR2_CHECK 1.51, RCVD_IN_CHINA 8.00, RCVD_IN_SBL
0.11, SARE_RECV_IP_061172 1.67, SARE_SPEC_LEO_PHARM 1.67, URIB

L_AB_SURBL 8.00, URIBL_BLACK 6.00, URIBL_JP_SURBL 8.00, URIBL_OB_SURBL 8.00,
URIBL_SBL 1.00, URIBL_SPAMCOP_SURBL 8.00, URIBL_WS_SURBL 8.

00) 

Mar  4 02:12:52 spamgate MailScanner[6207]: Spam Checks: Found 1 spam
messages 

Mar  4 02:12:52 spamgate MailScanner[6207]: Spam Actions: message
k247CkSA014987 actions are store 

Mar  4 02:12:52 spamgate MailScanner[6207]: Virus and Content Scanning:
Starting 

Mar  4 02:13:22 spamgate sendmail[15021]: k247DLYO015021:
from=<chloe at bbsjax.com>, size=489, class=0, nrcpts=1,
msgid=<200603040820.k248

K0JU026126 at localhost.localdomain>, proto=SMTP, daemon=MTA,
relay=nsc69.38.18-110.newsouth.net [69.38.18.110]

Mar  4 02:13:22 spamgate sendmail[15021]: k247DLYO015021:
to=<chloe at bbsjax.com>, delay=00:00:00, mailer=esmtp, pri=30489, stat=queued

Mar  4 02:13:22 spamgate sendmail[15022]: k247DMbc015022:
from=<chloe at bbsjax.com>, size=940, class=0, nrcpts=1,
msgid=<200603040910.k249

A0x07541 at vfcprimary.mem.sysco.com>, proto=SMTP, daemon=MTA,
relay=smtpout.sysco.com [129.41.168.196]

Mar  4 02:13:22 spamgate sendmail[15022]: k247DMbc015022:
to=<chloe at bbsjax.com>, delay=00:00:00, mailer=esmtp, pri=30940, stat=queued

Mar  4 02:13:22 spamgate MailScanner[6207]: New Batch: Scanning 2 messages,
2455 bytes 

Mar  4 02:13:22 spamgate MailScanner[6207]: Spam Checks: Starting 

Mar  4 02:13:28 spamgate MailScanner[6207]: Virus and Content Scanning:
Starting 

Mar  4 02:13:30 spamgate MailScanner[6207]: Uninfected: Delivered 2 messages

Mar  4 02:13:30 spamgate sendmail[15051]: k247DLYO015021:
to=<chloe at bbsjax.com>, delay=00:00:08, xdelay=00:00:00, mailer=esmtp,
pri=1204

89, relay=[192.168.1.17] [192.168.1.17], dsn=2.0.0, stat=Sent (
<200603040820.k248K0JU026126 at localhost.localdomain> Queued mail for deli

very)

Mar  4 02:13:30 spamgate sendmail[15051]: k247DMbc015022:
to=<chloe at bbsjax.com>, delay=00:00:08, xdelay=00:00:00, mailer=esmtp,
pri=1209

40, relay=[192.168.1.17] [192.168.1.17], dsn=2.0.0, stat=Sent (
<200603040910.k249A0x07541 at vfcprimary.mem.sysco.com> Queued mail for del

ivery)

Mar  4 02:15:01 spamgate MailScanner[6673]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6673]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6673]: Disconnected from the database 

Mar  4 02:15:01 spamgate MailScanner[6207]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6207]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6207]: Disconnected from the database 

Mar  4 02:15:01 spamgate MailScanner[6425]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6425]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6425]: Disconnected from the database 

Mar  4 02:15:01 spamgate MailScanner[6186]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6186]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6186]: Disconnected from the database 

Mar  4 02:15:01 spamgate MailScanner[6601]: MailScanner child caught a
SIGHUP 

Mar  4 02:15:01 spamgate MailScanner[6601]: Config: calling custom end
function MailWatchLogging 

Mar  4 02:15:01 spamgate MailScanner[6601]: Disconnected from the database 

Mar  4 02:16:20 spamgate sendmail[15192]: alias database /etc/aliases
rebuilt by root

Mar  4 02:16:20 spamgate sendmail[15192]: /etc/aliases: 63 aliases, longest
10 bytes, 625 bytes total

Mar  4 02:16:20 spamgate sm-msp-queue[15202]: starting daemon (8.13.1):
queueing at 00:15:00

Mar  4 02:16:20 spamgate sendmail[15207]: starting daemon (8.13.1):
queueing at 00:15:00

Mar  4 02:16:26 spamgate MailScanner[15228]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:26 spamgate MailScanner[15228]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:16:28 spamgate MailScanner[15228]: Initialising database
connection 

Mar  4 02:16:28 spamgate MailScanner[15228]: Finished initialising database
connection 

Mar  4 02:16:36 spamgate MailScanner[15228]: Using locktype = posix 

Mar  4 02:16:36 spamgate MailScanner[15228]: Creating hardcoded struct_flock
subroutine for linux (Linux-type) 

Mar  4 02:16:37 spamgate MailScanner[15241]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:37 spamgate MailScanner[15241]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:16:38 spamgate MailScanner[15241]: Initialising database
connection 

Mar  4 02:16:39 spamgate MailScanner[15241]: Finished initialising database
connection 

Mar  4 02:16:46 spamgate MailScanner[15241]: Using locktype = posix 

Mar  4 02:16:46 spamgate MailScanner[15241]: Creating hardcoded struct_flock
subroutine for linux (Linux-type) 

Mar  4 02:16:48 spamgate MailScanner[15250]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:48 spamgate MailScanner[15250]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:16:49 spamgate MailScanner[15250]: Initialising database
connection 

Mar  4 02:16:50 spamgate MailScanner[15250]: Finished initialising database
connection 

Mar  4 02:16:57 spamgate MailScanner[15250]: Using locktype = posix 

Mar  4 02:16:57 spamgate MailScanner[15250]: Creating hardcoded struct_flock
subroutine for linux (Linux-type) 

Mar  4 02:16:59 spamgate MailScanner[15259]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:16:59 spamgate MailScanner[15259]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:17:00 spamgate MailScanner[15259]: Initialising database
connection 

Mar  4 02:17:01 spamgate MailScanner[15259]: Finished initialising database
connection 

Mar  4 02:17:08 spamgate MailScanner[15259]: Using locktype = posix 

Mar  4 02:17:08 spamgate MailScanner[15259]: Creating hardcoded struct_flock
subroutine for linux (Linux-type) 

Mar  4 02:17:10 spamgate MailScanner[15266]: MailScanner E-Mail Virus
Scanner version 4.45.4 starting... 

Mar  4 02:17:10 spamgate MailScanner[15266]: Config: calling custom init
function MailWatchLogging 

Mar  4 02:17:11 spamgate MailScanner[15266]: Initialising database
connection 

Mar  4 02:17:12 spamgate MailScanner[15266]: Finished initialising database
connection 

Mar  4 02:17:20 spamgate MailScanner[15266]: Using locktype = posix 

Mar  4 02:17:20 spamgate MailScanner[15266]: Creating hardcoded struct_flock
subroutine for linux (Linux-type) 

Mar  4 02:48:59 spamgate sendmail[13327]: k246mxvT013327: timeout waiting
for input from savingsfare.com during server cmd read

Mar  4 03:00:05 spamgate sendmail[14073]: k24704lw014073: timeout waiting
for input from c-68-50-207-165.hsd1.md.comcast.net during serv

er cmd read

Mar  4 03:00:05 spamgate sendmail[14073]: k24704lw014073:
c-68-50-207-165.hsd1.md.comcast.net [68.50.207.165] did not issue
MAIL/EXPN/VR

FY/ETRN during connection to MTA

Mar  4 03:01:00 spamgate update.virus.scanners: Delaying cron job up to 600
seconds

Mar  4 03:04:22 spamgate update.virus.scanners: Found clamav installed

Mar  4 03:04:22 spamgate update.virus.scanners: Running autoupdate for
clamav

Mar  4 03:04:23 spamgate freshclam[16700]: Daemon started. 

Mar  4 03:04:23 spamgate freshclam[16700]: ClamAV update process started at
Sat Mar  4 03:04:23 2006 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Your ClamAV installation
is OUTDATED! 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Local version: 0.87.1
Recommended version: 0.88 

Mar  4 03:04:23 spamgate freshclam[16700]: DON'T PANIC! Read
http://www.clamav.net/faq.html 

Mar  4 03:04:23 spamgate freshclam[16700]: main.cvd is up to date (version:
36, sigs: 44686, f-level: 7, builder: tkojm) 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Your ClamAV installation
is OUTDATED! 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Current functionality
level = 6, recommended = 7 

Mar  4 03:04:23 spamgate freshclam[16700]: DON'T PANIC! Read
http://www.clamav.net/faq.html 

Mar  4 03:04:23 spamgate freshclam[16700]: daily.cvd is up to date (version:
1313, sigs: 1082, f-level: 7, builder: diego) 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Your ClamAV installation
is OUTDATED! 

Mar  4 03:04:23 spamgate freshclam[16700]: WARNING: Current functionality
level = 6, recommended = 7 

Mar  4 03:04:23 spamgate freshclam[16700]: DON'T PANIC! Read
http://www.clamav.net/faq.html 

Mar  4 03:04:23 spamgate ClamAV-autoupdate[16699]: ClamAV did not need
updating 

Mar  4 03:04:23 spamgate update.virus.scanners: Found f-prot installed

Mar  4 03:04:23 spamgate update.virus.scanners: Running autoupdate for
f-prot

Mar  4 03:04:23 spamgate F-Prot autoupdate[16723]: F-Prot did not need
updating. 

Mar  4 03:04:23 spamgate update.virus.scanners: Found generic installed

Mar  4 03:04:23 spamgate update.virus.scanners: Running autoupdate for
generic

Mar  4 03:24:32 spamgate sendmail[12216]: k246OTIC012216: timeout waiting
for input from [61.50.157.158] during message collect

Mar  4 03:24:32 spamgate sendmail[12216]: k246OTIC012216:
from=<zgysdn at jps-group.com>, size=1330, class=0, nrcpts=1,
msgid=<001b01c63f54

$34187a79$e15a323d at klck>, proto=SMTP, daemon=MTA, relay=[61.50.157.158]

Mar  4 03:24:32 spamgate sendmail[12216]: k246OTIC012216:
to=<kschram at bbsjax.com>, delay=02:00:01, pri=31330, stat=timeout waiting for
i

nput during message collect

Mar  4 04:01:00 spamgate update.virus.scanners: Delaying cron job up to 600
seconds

Mar  4 04:02:05 spamgate sendmail[17089]: k24925kl017089: from=root,
size=6613, class=0, nrcpts=1, msgid=<200603040902.k24925kl017089 at sp

amgate.bbsjax.com>, relay=root at localhost

Mar  4 04:02:05 spamgate sendmail[17089]: k24925kl017089: to=root,
ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pr

i=36613, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection
refused by [127.0.0.1]

Regards,

Damian

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060306/9a396ad4/attachment-0001.html