MailScanner: Message attempted to kill MailScanner

Shawn Iverson iversons at rushville.k12.in.us
Mon Aug 6 11:03:56 UTC 2018 

Very first thing I would check is whether you have enough memory to carry
out virus scanning, and make sure that OOM is not occurring.



On Mon, Aug 6, 2018 at 6:56 AM, DobriL Dobrilov <dobril at stanga.net> wrote:

> Hello,
>
>
>
> Please help me to debug follow issue:
>
> All emails sent from my webmail to same domain cannot be processes by
> mailscanner.
>
>
>
> Aug  6 13:19:15 mail postfix/smtpd[31702]: connect from localhost[::1]
>
> Aug  6 13:19:15 mail postfix/smtpd[31702]: CE4AB62C48:
> client=localhost[::1], sasl_method=LOGIN, sasl_username=dobril at stanga.net
>
> Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: hold: header
> Received: from mail.stanga.net (localhost [IPv6:::1])??by mail.stanga.net
> (Postfix) with ESMTPA id CE4AB62C48??for <dob
>
> ril at stanga.net>; Mon,  6 Aug 2018 13:19:15 +0300 (EEST) from
> localhost[::1]; from=<dobril at stanga.net> to=<dobril at stanga.net>
> proto=ESMTP helo=<mail.stanga.net>
>
> Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: message-id=<
> 0a5acc9eeddaa3cd9256ba112f5270d5 at stanga.net>
>
> Aug  6 13:19:15 mail opendkim[3326]: CE4AB62C48: DKIM-Signature field
> added (s=mail, d=stanga.net)
>
> Aug  6 13:19:15 mail postfix/smtpd[31702]: disconnect from localhost[::1]
> ehlo=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=6
>
> Aug  6 13:19:18 mail MailScanner[31554]: New Batch: Scanning 1 messages,
> 3097 bytes
>
> Aug  6 13:19:18 mail MailScanner[31554]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:19:19 mail MailScanner[31554]: Virus and Content Scanning:
> Starting
>
> Aug  6 13:19:19 mail MailScanner[31554]: Virus Scanning completed at 24018
> bytes per second
>
> Aug  6 13:19:18 mail MailScanner[31554]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:23:37 mail MailScanner[32582]: Making attempt 2 at processing
> message CE4AB62C48.A8F32
>
> Aug  6 13:23:37 mail MailScanner[32582]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:26:15 mail MailScanner[2138]: Making attempt 3 at processing
> message CE4AB62C48.A8F32
>
> Aug  6 13:26:15 mail MailScanner[2138]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:30:55 mail MailScanner[1659]: Making attempt 4 at processing
> message CE4AB62C48.A8F32
>
> Aug  6 13:30:55 mail MailScanner[1659]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:35:44 mail MailScanner[1736]: Making attempt 5 at processing
> message CE4AB62C48.A8F32
>
> Aug  6 13:35:44 mail MailScanner[1736]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:39:03 mail MailScanner[2946]: Making attempt 6 at processing
> message CE4AB62C48.A8F32
>
> Aug  6 13:39:03 mail MailScanner[2946]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:39:05 mail MailScanner[2589]: Warning: skipping message
> CE4AB62C48.A8F32 as it has been attempted too many times
>
> Aug  6 13:39:05 mail MailScanner[2589]: Quarantined message
> CE4AB62C48.A8F32 as it caused MailScanner to crash several times
>
> Aug  6 13:39:05 mail MailScanner[2589]: Saved entire message to
> /var/spool/MailScanner/quarantine/20180806/CE4AB62C48.A8F32
>
> Aug  6 13:39:05 mail MailScanner[2589]: MailWatch: Logging message
> CE4AB62C48.A8F32 to SQL
>
>
>
>
>
> Then I started in  with debug option.
>
> Aug  6 13:19:15 mail postfix/smtpd[31702]: connect from localhost[::1]
>
> Aug  6 13:19:15 mail postfix/smtpd[31702]: CE4AB62C48:
> client=localhost[::1], sasl_method=LOGIN, sasl_username=dobril at stanga.net
>
> Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: hold: header
> Received: from mail.stanga.net (localhost [IPv6:::1])??by mail.stanga.net
> (Postfix) with ESMTPA id CE4AB62C48??for <dobril at stanga.net>; Mon,  6 Aug
> 2018 13:19:15 +0300 (EEST) from localhost[::1]; from=<dobril at stanga.net>
> to=<dobril at stanga.net> proto=ESMTP helo=<mail.stanga.net>
>
> Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: message-id=<
> 0a5acc9eeddaa3cd9256ba112f5270d5 at stanga.net>
>
> Aug  6 13:19:15 mail opendkim[3326]: CE4AB62C48: DKIM-Signature field
> added (s=mail, d=stanga.net)
>
> Aug  6 13:19:15 mail postfix/smtpd[31702]: disconnect from localhost[::1]
> ehlo=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=6
>
> Aug  6 13:19:18 mail MailScanner[31554]: New Batch: Found 4 messages
> waiting
>
> Aug  6 13:19:18 mail MailScanner[31554]: New Batch: Scanning 1 messages,
> 3097 bytes
>
> Aug  6 13:19:18 mail MailScanner[31554]: Saved archive copies of
> CE4AB62C48.A8F32
>
> Aug  6 13:19:18 mail MailScanner[31554]: Created attachment dirs for 1
> messages
>
> Aug  6 13:19:19 mail MailScanner[31554]: Completed checking by
> /usr/bin/file
>
> Aug  6 13:19:19 mail MailScanner[31554]: Virus and Content Scanning:
> Starting
>
> Aug  6 13:19:19 mail MailScanner[31554]: Commencing scanning with clamd...
>
> Aug  6 13:19:19 mail MailScanner[31726]: Debug Mode Is On
>
> Aug  6 13:19:19 mail MailScanner[31726]: Use Threads : YES
>
> Aug  6 13:19:19 mail MailScanner[31726]: Socket    :
> /var/run/clamav/clamd.sock
>
> Aug  6 13:19:19 mail MailScanner[31726]: IP        : Using Sockets
>
> Aug  6 13:19:19 mail MailScanner[31726]: Lock File : NOT USED
>
> Aug  6 13:19:19 mail MailScanner[31726]: Time Out  : 300
>
> Aug  6 13:19:19 mail MailScanner[31726]: Scan Dir  :
> /var/spool/MailScanner/incoming/31554
>
> Aug  6 13:19:19 mail MailScanner[31726]: Clamd : Sending PING
>
> Aug  6 13:19:19 mail MailScanner[31726]: Clamd : GOT 'PONG'
>
> Aug  6 13:19:19 mail MailScanner[31726]: ClamD is running
>
> Aug  6 13:19:19 mail MailScanner[31726]: SENT : MULTISCAN
> /var/spool/MailScanner/incoming/31554
>
> Aug  6 13:19:19 mail MailScanner[31554]: Completed AV scan with clamd
>
> Aug  6 13:19:19 mail MailScanner[31554]: Virus Scanning completed at 24018
> bytes per second
>
> Aug  6 13:19:19 mail root[31735]: MailScanner failed to start
>
> Aug  6 13:19:19 mail root[31736]: Found a possible dead PID. Stopping all
> MailScanner rogue processes ...
>
>
>
>
>
> How I can find out what cause this issue.
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>


-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180806/7d5399ae/attachment.html>

More information about the MailScanner mailing list