MailScanner fails to start - Possible Dead PID

Wed Sep 20 08:52:47 UTC 2017

Care to give us more info?

It might help others in the future.

Cheers,

Phil

From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of John Barro
Sent: 19 September 2017 17:45
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner fails to start - Possible Dead PID

Thanks for all the information! I finally fixed my problem. It was the custom functions for mailwatch that were the culprit and some permission errors with respect to postfix. Thanks again!

John

On Sun, Sep 17, 2017 at 7:57 AM Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>> wrote:
John,

Also, be sure to run a MailScanner --lint test as a root user on your installation to look for other possible issues.  You can also run this from MailWatch in the GUI under Tools and Links, if configured properly to do so.

On Sun, Sep 17, 2017 at 7:51 AM, Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>> wrote:
John,

Not being able to see anything in MailWatch is a strong indicator that your MailWatch custom functions are not working properly.  Your mail log in /var/log on your distribution is your friend for issues like this one and may provide some clues.  For further assistance, I would encourage you to reach out to MailWatch folks on their mailing list.

Based on your log, SA cannot create the .spamassassin directory in /var/spool/postfix.  Although SA/MailScanner don't need write access necessarily to the /var/spool/postfix directory level, you can go ahead and create /var/spool/postfix/.spamassassin directory and make the owner/group postfix (Run As User in MailScanner.conf)

Other permissions to check:

/var/spool/postfix/incoming and /var/spool/postfix/hold  (typically owned by postfix user and the web server group in a MailWatch instance)

/var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine are typically owned by postfix user (Run As User in MailScanner.conf) and the mtagroup group (Incoming Work Group defined in MailScanner.conf).

The mtagroup is new in MailScanner v5 to help facilitate access for other services such as virus scanners, and all of your virus scanner accounts should be added as members of this group.

Hope this helps.

On Sat, Sep 16, 2017 at 4:19 PM, John Barro <john.a.barro at gmail.com<mailto:john.a.barro at gmail.com>> wrote:
Thanks for the info Shawn. Net::DNS seems to be the latest version. These files aren't symlinked, they actually exist in both folders.

I am making some progress. I can send mail outbound, but cannot receive any incoming mail. And no inbound or outbound mail displays in my MailWatch page. Not really sure where to go from here. I' not sure what the permissions should be :(

Thank you,
John

On Sat, Sep 16, 2017 at 2:36 PM, Shawn Iverson <iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>> wrote:
John,

Several issues here...

Symlink the following into your /etc/MailScanner/mcp area:

ln -s /etc/mail/spamassassin/v310.pr<http://v310.pr>e /etc/MailScanner/mcp/v310.pre
ln -s /etc/mail/spamassassin/v312.pr<http://v312.pr>e /etc/MailScanner/mcp/v312.pre
ln -s /etc/mail/spamassassin/v320.pr<http://v320.pr>e /etc/MailScanner/mcp/v320.pre
ln -s /etc/mail/spamassassin/v330.pr<http://v330.pr>e /etc/MailScanner/mcp/v330.pre

Check your permissions on /var/spool/postfix and make sure MailScanner can access this area

Net::DNS probably needs updated

Make sure the custom functions for MailWatch are updated and present in /usr/share/MailScanner/perl/custom

On Sat, Sep 16, 2017 at 1:51 PM, John Barro <john.a.barro at gmail.com<mailto:john.a.barro at gmail.com>> wrote:
Hello folks,

I'm a bit new to this list, but I was running mailscanner 4.x and have upgraded to the latest release 5.0.6.

The error I am receiving is:

Sep 16 13:14:44 mailscanner root[26772]: MailScanner failed to start

Sep 16 13:14:44 mailscanner root[26773]: Found a possible dead PID. Stopping all MailScanner rogue processes ...

I am running Debian wheezy (version 7, 64-bit) with the following:

  *   MailWatch 1.26
  *   Postfix 2.96
  *   ClamAV 0.99.2
  *   SpamAssassin 3.3.2
  *   PHP 5.4.55-0+deb7u11
  *   MySQL 5.5.57-0+deb7u1
  *   BitDefender 7.141118
  *   ps -ef | grep Mail
In my MailWatch status page, I see the inbound mail queue with 34 entries and climbing. When I run tail -f /var/log/mail.log from the server, I can see messages coming in, virus and content scanning being done, completing the AV scan with clamav first, then bit defender second, starts the MCP check, then fails with the message above (MailScanner failed to start, possible dead PID, etc.)

When I run MailScanner with debugging enabled, I can see the following:

Sep 16 13:48:27.148 [30377] dbg: config: mkdir /var/spool/postfix/.spamassassin failed: mkdir /var/spool/postfix/.spamassassin: Permission denied at /usr/share/perl5/Mail/SpamAssassin.pm<http://ssin.pm> line 1858

Sep 16 13:48:27.149 [30377] info: config: failed to parse line, skipping, in "/etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf": use_dcc 0

Sep 16 13:48:27.149 [30377] info: config: failed to parse line, skipping, in "/etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf": use_pyzor 0

Sep 16 13:48:27.149 [30377] info: config: failed to parse line, skipping, in "/etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf": use_razor1 0

Sep 16 13:48:27.149 [30377] info: config: failed to parse line, skipping, in "/etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf": use_razor2 0

Sep 16 13:48:27.149 [30377] info: config: failed to parse line, skipping, in "/etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf": decode_attachments 1

Sep 16 13:48:27.149 [30377] dbg: config: finish parsing

and

Sep 16 13:48:27.160 [30377] dbg: dns: Net::DNS version: 0.66

Use of uninitialized value $filename in concatenation (.) or string at /usr/share/perl5/Mail/SpamAssassin.pm<http://ssin.pm> line 1208.

Use of uninitialized value $filename in concatenation (.) or string at /usr/share/perl5/Mail/SpamAssassin.pm<http://ssin.pm> line 1210.

Sep 16 13:48:27.160 [30377] dbg: config: read_scoreonly_config: cannot open "": No such file or directory

Building a message batch to scan...

Have a batch of 8 messages.

Undefined subroutine &MailScanner::CustomConfig::SQLWhitelist called at /usr/share/MailScanner/perl/MailScanner/Config.pm line 170.

I'm not sure where to look. Any guidance would be appreciated.

Thank you,
John

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]

--
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x271<tel:(765)%20932-3901>
iversons at rushville.k12.in.us<mailto:iversons at rushville.k12.in.us>

[https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ][https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ]

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170920/9a8489b0/attachment-0001.html>