Need help on crashing MS

John Bull jbull at esd113.org
Mon Sep 26 17:22:09 IST 2011


I was asked to try the same thing several weeks ago but was not informed of what it was accomplishing.  Possibly someone could let us all know....

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Vincent Verhagen
Sent: Monday, September 26, 2011 9:15 AM
To: MailScanner discussion
Subject: Re: Need help on crashing MS

That seems to fare better. I still get the errors (more of them) when debugging (see output below), but the results are as expected. Spam is stored correctly and no crash.
Could you tell me what I've just done by adding the -U switch?

----------------------
[root at mail conf.d]# MailScanner

In Debugging mode, not forking...
Trying to setlogsock(unix)
Building a message batch to scan...
Have a batch of 1 message.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
Stopping now as you are debugging me.


On 26-9-2011 17:48, John Bull wrote:
Vincent,

Try running MailScanner with the -U switch, as follows:
nano /usr/sbin/MailScanner
#!/usr/bin/perl -I/usr/lib/MailScanner -U



From: mailscanner-bounces at lists.mailscanner.info<mailto:mailscanner-bounces at lists.mailscanner.info> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Vincent Verhagen
Sent: Monday, September 26, 2011 8:43 AM
To: MailScanner discussion
Subject: Re: Need help on crashing MS

Distro is Scientific Linux 6.1 (another RHEL spinoff like CentOS)

On 26-9-2011 17:24, Jeremy McSpadden wrote:
What distro ?
I gave up on Ubuntu Natty. Switched to CENT6. I literally built 10 VMs and all had the same "16:48:22 Insecure dependency " that you are having, and caused the same thing. Yet no one else was able to duplicate my issue
--
Jeremy McSpadden
Flux Labs, Inc
http://www.fluxlabs.net<http://www.fluxlabs.net/>
Endless Solutions
Office : 850-588-4626
Cell : 850-890-2543
Fax : 850-254-2955

On Sep 26, 2011, at 10:13 AM, Vincent Verhagen wrote:



Hi all,

I think I'm running into a permissions problem, but aren't sure and am a bit stumped...

When SA finds that an email is spam and MS (4.84.3) is told to "store", MS crashes. ("deliver" goes fine)
When running in debug mode, I can see that SA, ClamAV, are doing fine and these are the last few lines:

-------------
16:48:22 Sep 26 16:48:22.048 [19001] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=0.2229, head-points=0.2229, learned-points=0
16:48:22 Sep 26 16:48:22.048 [19001] dbg: learn: auto-learn? no: inside auto-learn thresholds, not considered ham or spam
16:48:22 Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185.
-------------
Line 185 in File.pm is the "open" function.

System is SL 6.1 x86_64, perl is v5.10.1
I run MS as "postfix" and the perms for /var/spool/MailScanner/... are:

-----------
[root at mail rules]# ls -l /var/spool/MailScanner/
total 8
drwxr-xr-x. 5 postfix clamav 4096 Sep 26 16:48 incoming
drwxr-xr-x. 4 postfix apache 4096 Sep 26 14:13 quarantine
[root at mail rules]# ls -l /var/spool/MailScanner/quarantine/
total 8
drwxrwx---. 3 postfix apache 4096 Sep 26 14:13 20110926
drwxr-xr-x. 3 root    root   4096 Sep 26 16:03 phishingupdate
[root at mail rules]# ls -l /var/spool/MailScanner/quarantine/20110926/
total 4
drwxrwx---. 2 postfix apache 4096 Sep 26 14:13 spam
-----------

The perms on todays quarantine directory look ok?
Could this be a failing perl module?
Does anyone have any pointers for me where to look next?

Thanks!
Vincent

MailScanner --version output:
----------------
Running on
Linux mail.vive-id.local 2.6.32-131.12.1.el6.x86_64 #1 SMP Tue Aug 23 11:13:45 CDT 2011 x86_64 x86_64 x86_64 GNU/Linux
This is Scientific Linux release 6.1 (Carbon)
This is Perl version 5.010001 (5.10.1)

This is MailScanner version 4.84.3
Module versions are:
1.00    AnyDBM_File
1.30    Archive::Zip
0.23    bignum
1.11    Carp
2.02    Compress::Zlib
1.119   Convert::BinHex
0.17    Convert::TNEF
2.124   Data::Dumper
2.27    Date::Parse
1.03    DirHandle
1.06    Fcntl
2.77    File::Basename
2.14    File::Copy
2.02    FileHandle
2.08    File::Path
0.22    File::Temp
0.92    Filesys::Df
3.64    HTML::Entities
3.64    HTML::Parser
3.57    HTML::TokeParser
1.25    IO
1.14    IO::File
1.13    IO::Pipe
2.04    Mail::Header
1.89    Math::BigInt
0.22    Math::BigRat
3.08    MIME::Base64
5.427   MIME::Decoder
5.427   MIME::Decoder::UU
5.427   MIME::Head
5.427   MIME::Parser
3.08    MIME::QuotedPrint
5.427   MIME::Tools
0.14    Net::CIDR
1.25    Net::IP
0.19    OLE::Storage_Lite
1.04    Pod::Escapes
3.13    Pod::Simple
1.17    POSIX
1.21    Scalar::Util
1.82    Socket
2.20    Storable
1.4     Sys::Hostname::Long
0.27    Sys::Syslog
1.40    Test::Pod
0.92    Test::Simple
1.9721  Time::HiRes
1.02    Time::localtime

Optional module versions are:
1.29    Archive::Tar
0.23    bignum
1.82    Business::ISBN
1.10    Business::ISBN::Data
1.08    Data::Dump
1.82    DB_File
1.27    DBD::SQLite
1.609   DBI
1.16    Digest
1.01    Digest::HMAC
2.39    Digest::MD5
2.10    Digest::SHA1
1.01    Encode::Detect
0.17008 Error
0.18    ExtUtils::CBuilder
2.2203  ExtUtils::ParseXS
2.38    Getopt::Long
0.44    Inline
1.08    IO::String
1.04    IO::Zlib
2.21    IP::Country
0.29    Mail::ClamAV
3.003001        Mail::SpamAssassin
v2.007  Mail::SPF
missing Mail::SPF::Query
0.35    Module::Build
0.20    Net::CIDR::Lite
0.62    Net::DNS
0.002.2 Net::DNS::Resolver::Programmable
missing Net::LDAP
 4.004  NetAddr::IP
1.94    Parse::RecDescent
missing SAVI
3.17    Test::Harness
0.95    Test::Manifest
2.0.0   Text::Balanced
1.35    URI
0.77    version
0.62    YAML



<smime.p7s>--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!








-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110926/31a09d6e/attachment.html


More information about the MailScanner mailing list