mailscanner/postfix issue (this is going to make me mad)
Marco Barbero
marco.barbero at gmail.com
Tue Mar 25 17:32:04 GMT 2008
2008/3/25, Martin.Hepworth <martinh at solidstatelogic.com>:
> Hi
>
> I'd start slow here..
>
> Get postfix running on it's own as a pure gateway. Once that works
>
> Install mailscanner into mix. Make sure you're installing using modern documentation and the 'hold' queue method. Don't install the avira stuff yet.
>
> When that's working install the avira stuff.
I have some news and probably a dead here.
To the point:
It seems NO ISSUE env is not calling antivir at all.
Tried now to send email containing eicar test virus and it was not blocked.
Tried then MailScanner --lint using 4.67 and after a while (I think
after virus scanning timeout) I'm getting:
MailScanner.conf says "Virus Scanners = antivir"
Found these virus scanners installed: antivir
===========================================================================
Ignore errors about failing to find EOCD signature
Undefined subroutine &MailScanner::Config::SetValue called at
./MailScanner line 498.
MailScanner --lint using 4.61 does not do eicar test.
Have to say that manually doing:
/opt/MailScanner/lib/antivir-wrapper /usr/lib/AntiVir /tmp/
works....
So this is going to explain a lot of things (delays on ISSUE dev are
due to timeout? still no output on logs). Actually it's working
because antivir scanning is skipping, despite I have set it correctly
on MailScanner.conf
The point is now on --lint output... Anyone can help on that.
Thanks in advance
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Marco Barbero
> > Sent: 25 March 2008 16:33
> > To: mailscanner at lists.mailscanner.info
> > Subject: mailscanner/postfix issue (this is going to make me mad)
> >
> > Hi all
> >
> > Scenario is the following:
> > Dual Xeon Quad Core 4GB Ram
> > Debian Etch, custom kernel 2.6.24.3
> >
> > A) At the first I use the following env:
> >
> > MTA: postfix
> > MailScanner 4.67.6
> > SpamAssassin 3.2.4
> > Razor , DCC
> > vispan (only for spam stats)
> > avira antivir
> >
> > I use drbd 8.2.5 for network mirroring (using heartbeat 1.2.5) of
> > postfix/mailscanner queues and for mailscanner quarantine and bayes.
> >
> > I use list.dsbl.org and dnsbl.njabl.org, plus I have spamhaus feed
> > using rbldnsd and rsync. All the dnsbl are set on postfix
> > configuration
> >
> > I use avira antivir like Virus Scanner.
> >
> > Had to say this is not my first experience with MailScanner. I'm using
> > it since 2004
> > with success using both sendmail and postfix like MTA.
> >
> > This time this scenario has a high traffic mail (about 3/4 millions
> > every month).
> > Ok after debugging both mailscanner and spamassassin I tried to put
> > the thing in production environment.
> >
> > After a while I noticed queues began to grow. I look at logs and seems
> > problem appears during requeing (so after mailscanner checks). In
> > short words: it works but it's slow and delays are noticeable.
> > vmstat and top doesn't show any important bottleneck. Postfix smtpd
> > processes grows fast and they reach max in a few time.
> > So I tried to block port 25 using a firewall and in 1 minute all
> > queues empties....
> >
> >
> > B) So I tried to do this (thinking about postfix developers not
> > loving Mailscanner)
> > MTA on port 25: Postfix
> > MTA on port 26: Sendmail/MailScanner
> >
> > So Postfix receives mail from Internet and then send them to Sendmail
> > on port 26 that call MailScanner.
> > Run the test and issue persists. And are always postfix queues to fill
> > up. Postfix people says that this happens because of postfix rate
> > limit, so I cannot blame Postfix for this. For postfix people problem
> > is still on MailScanner.
> >
> > C) So I tried this:
> > MTA on port 25: Sendmail
> > all other pieces of software like first env
> >
> > Things do not come better. Delays persist and sendmail suffer.
> > I tried two things:
> > 1) disable spam checks and issue persists
> > 2) disable mailscanner at all with no issue
> >
> >
> > D) So I tried to use Sendmail but downgrade MailScanner to 4.61.7 (a
> > release I'm sure it's working well since I have it in other recent
> > production environment).
> >
> > And... it works with no more issues. Delays now are few seconds
> > (againts 5-10-20 minutes)
> >
> > Ah..so problem is MailScanner 4.67!?!? All rights, let's put again
> > Postfix using MailScanner 4.61.
> > I do that and issue come back again......
> >
> > So let's sum up:
> >
> > Postfix 2.3.8 + MailScanner 4.67 = ISSUES
> > Postfix 2.3.8 + Sendmail 8.13 + MailScanner 4.67 = ISSUES
> > Sendmail 8.13 + MailScanner 4.67 = ISSUES
> > Sendmail 8.13 + MailScanner 4.61 = WORKS WITH NO ISSUES!!!!
> > Postfix 2.3.8 + MailScanner 4.61 = ISSUES
> >
> > This makes me mad. Why this happens?
> >
> > Like said before I have similar working installations (less traffic
> > and using clamav in place of antivir). What's happening this time?
> >
> > It seems postfix related (always) and mailscanner related (4.67)
> >
> > Maybe postfix related?
> > Maybe mailscanner related?
> > Maybe drbd related?
> >
> > Any helps or hints will be appreciated
> >
> > Adding: during postfix tests, I noticed in logs this:
> > MailScanner[10310]: Cannot lock /tmp/AntiVirBusy.lock, Permission denied
> >
> > /tmp/AntiVirBusy.lock is 600 Putting it 777 suppress log but does
> > not resolve performance issue.
> > This does not appear at all using sendmail
> >
> >
> > Thanks
>
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the
> addressee only and may be confidential. If they come to you in error
> you must take no action based on them, nor must you copy or show them
> to anyone. Please advise the sender by replying to this e-mail
> immediately and then delete the original from your computer.
> Opinion : Any opinions expressed in this e-mail are entirely those of
> the author and unless specifically stated to the contrary, are not
> necessarily those of the author's employer.
> Security Warning : Internet e-mail is not necessarily a secure
> communications medium and can be subject to data corruption. We advise
> that you consider this fact when e-mailing us.
> Viruses : We have taken steps to ensure that this e-mail and any
> attachments are free from known viruses but in keeping with good
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
> United Kingdom
> **********************************************************************
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
More information about the MailScanner
mailing list