Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times

Mon Jan 30 14:53:55 GMT 2012

All,

I too have been plagued by MailScanner hanging in this fashion for a
while (on Redhat 6.2).  I implemented the perl -U thing and it didn't
really help.

I finally gave up and modified logcheck (the older version from
http://sourceforge.net/projects/logcheck/, not the version from
http://logcheck.org) to look for log symptoms that MailScanner is in
trouble and automatically restart it for me.  Then I have a crontab
line that runs every 5 minutes to check the syslogs:

2,7,12,17,22,27,32,37,42,47,52,57 * * * * /usr/local/adm/logcheck-MailScanner.sh

Attached is the logcheck-MailScanner.sh script and the
"mailscanner.problems" script that it uses to look for MailScanner
issues in syslog.  Your version of mailscanner.problems may vary for
your system.  To make it work, you will also need to download, compile
and install the logtail program from the sourceforge version of
logcheck.

While not solving the MailScanner hangup problem, at least this method
keeps things working for me.

-----------------------------------
Jeff A. Earickson, Ph.D
Senior Server System Administrator
Colby College,
4214 Mayflower Hill,
Waterville ME, 04901-8842
207-859-4214 (fax 207-859-4186)
Eastern Time Zone, USA
-----------------------------------

On Mon, Jan 30, 2012 at 7:49 AM,  <terry at graybell.net> wrote:
> Supan,
>
> Where exactly did you add that?  I am having the same issue and I cannot
> seem to find the issue.  I just restart MailScanner and it processes the
> messages but this requires me to do so every day.  I am getting an error
> message (below) in the logs and I cannot seem to find the issue. I am
> using:  Ubuntu 10.04.3 LTS, MailScanner 4.84.3, and Postfix 2.7.0.
>
> Warning: skipping message 4995D1A02A6.ABF56 as it has been attempted too
> many times
> Quarantined message 4995D1A02A6.ABF56 as it caused MailScanner to crash
> several times
>
> On Mon, 30 Jan 2012 10:51:12 +0100, Martijn <mailinglist at mindconnect.nl>
> wrote:
>> What is this recent Ubuntu 10.04 mailscanner update you speak of? I've
>> been unable to find it and the Ubuntu changelog doesn't seem to mention
> it.
>>
>> Seeing my unresolved problems with MailScanner on 10.04 half a year ago,
>
>> I'd be interested in trying this.
>>
>> --
>> Kind regards,
>> - Martijn
>>
>> On 2-1-2012 17:18, Supun Rathnayake wrote:
>>> This happened to me as well with the recent Ubuntu 10.04 mailscanner
>>> updates, but removing of the corrupt ( so called ) email did not solve
>>> the problem
>>> and finally adding -U flag to the main MailScanner file interpreter as
>>> follows did solve the problem.
>>>
>>> #!/usr/bin/perl -I/usr/share/MailScanner/ -U
>>>
>>> Thanks,
>>> Supun.
>>>
>>>
>>> On 01/02/2012 09:15 PM, Stephen Swaney wrote:
>>>> On Jan 2, 2012, at 10:11 AM, Bjørn T Johansen wrote:
>>>>
>>>>> Yes, I have done that, several times... But it just keeps coming
>>>>> back..... :-(
>>>>>
>>>>> BTJ
>>>> 1. Shut down MailScanner
>>>> 2. Remove the problem message from the incoming hold directory
>>>> 3. Remove the processing db
>>>> 4. Restart Mailscanner
>>>>
>>>> Steve
>>>> ---
>>>> Steve Swaney
>>>> steve at fsl.com
>>>>
>>>>> On Mon, 2 Jan 2012 14:56:15 +0000
>>>>> Martin Hepworth<maxsec at gmail.com> wrote:
>>>>>
>>>>>> There was something some thing similar on this lost a few days ago,
>>>>>> just
>>>>>> deleting the processing.db file sorted the issue
>>>>>>
>>>>>> Martin
>>>>>>
>>>>>> On Sunday, 1 January 2012, Bjørn T Johansen<btj at havleik.no> wrote:
>>>>>>> I am getting these in the log every day, at the moment:
>>>>>>>
>>>>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted
>>>>>>> too
>>>>>> many times
>>>>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to
>>>>>>> crash
>>>>>> several times
>>>>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting...
>>>>>>>
>>>>>>> And this is a big problem because my mailsrv then stops to deliver
>>>>>>> any
>>>>>> mail; the mail is just kept in the hold directory under postfix..
>>>>>>>
>>>>>>> What is causing this? And is there a way to ignore this error and
>>>>>>> still
>>>>>> deliver the rest of the mail?
>>>>>>>
>>>>>>> Regards,
>>>>>>>
>>>>>>> BTJ
>>>>>>>
>>>>>>> --
>>>>>>>
>>>>>>
> -----------------------------------------------------------------------------------------------
>>>>>>
>>>>>>> Bjørn T Johansen
>>>>>>>
>>>>>>> btj at havleik.no
>>>>>>>
>>>>>>
> -----------------------------------------------------------------------------------------------
>>>>>>
>>>>>>> Someone wrote:
>>>>>>> "I understand that if you play a Windows CD backwards you hear
>>>>>>> strange
>>>>>> Satanic messages"
>>>>>>> To which someone replied:
>>>>>>> "It's even worse than that; play it forwards and it installs
> Windows"
>>>>>>>
>>>>>>
> -----------------------------------------------------------------------------------------------
>>>>>>
>>>>>>> --
>>>>>>> MailScanner mailing list
>>>>>>> mailscanner at lists.mailscanner.info
>>>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>>>
>>>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>>>
>>>>>>> Support MailScanner development - buy the book off the website!
>>>>>>>
>>>>> --
>>>>> MailScanner mailing list
>>>>> mailscanner at lists.mailscanner.info
>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>
>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>
>>>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: logcheck-MailScanner.sh
Type: application/x-sh
Size: 3766 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120130/22d51d74/logcheck-MailScanner.sh
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mailscanner.problems
Type: application/octet-stream
Size: 88 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120130/22d51d74/mailscanner.obj