MailScanner: Message attempted to kill MailScanner

DobriL Dobrilov dobril at stanga.net
Mon Aug 6 11:55:36 UTC 2018


Some other ideas, because unfortunately this Live system and It’s very critical ? L

 

 



Dobril Dobrilov


IT Manager


 <mailto:dobril at stanga.net> dobril at stanga.net






43, Cherni Vrah Blvd. | 1407 Sofia - Bulgaria
Phone: +359 2 81 960 69 Fax: +359 2 81 960 70
Mobile: +359 878 749 387

 




We shape Digital  <http://www.stanga.net> www.stanga.net




We re-invent Video  <http://www.bsbvision.com> www.bsbvision.com




We build Apps  <http://www.shanga.co> www.shanga.co




We support Start-Ups  <http://www.mysbar.net> www.mysbar.net

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of DobriL Dobrilov
Sent: Monday, August 6, 2018 2:08 PM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: MailScanner: Message attempted to kill MailScanner

 

The same thing after I disable Virus scan , memory is enough. Something else cause the issue , and happen only with email send by webmail

 

 

From: MailScanner [mailto:mailscanner-bounces+dobril=stanga.net at lists.mailscanner.info] On Behalf Of Shawn Iverson
Sent: Monday, August 6, 2018 2:04 PM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> >
Subject: Re: MailScanner: Message attempted to kill MailScanner

 

Very first thing I would check is whether you have enough memory to carry out virus scanning, and make sure that OOM is not occurring.

 

 

 

On Mon, Aug 6, 2018 at 6:56 AM, DobriL Dobrilov <dobril at stanga.net <mailto:dobril at stanga.net> > wrote:

Hello,

 

Please help me to debug follow issue:

All emails sent from my webmail to same domain cannot be processes by mailscanner.

 

Aug  6 13:19:15 mail postfix/smtpd[31702]: connect from localhost[::1]

Aug  6 13:19:15 mail postfix/smtpd[31702]: CE4AB62C48: client=localhost[::1], sasl_method=LOGIN, sasl_username=dobril at stanga.net <mailto:dobril at stanga.net> 

Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: hold: header Received: from mail.stanga.net <http://mail.stanga.net>  (localhost [IPv6:::1])??by mail.stanga.net <http://mail.stanga.net>  (Postfix) with ESMTPA id CE4AB62C48??for <dob

ril at stanga.net <mailto:ril at stanga.net> >; Mon,  6 Aug 2018 13:19:15 +0300 (EEST) from localhost[::1]; from=<dobril at stanga.net <mailto:dobril at stanga.net> > to=<dobril at stanga.net <mailto:dobril at stanga.net> > proto=ESMTP helo=<mail.stanga.net <http://mail.stanga.net> >

Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: message-id=<0a5acc9eeddaa3cd9256ba112f5270d5 at stanga.net <mailto:0a5acc9eeddaa3cd9256ba112f5270d5 at stanga.net> >

Aug  6 13:19:15 mail opendkim[3326]: CE4AB62C48: DKIM-Signature field added (s=mail, d=stanga.net <http://stanga.net> )

Aug  6 13:19:15 mail postfix/smtpd[31702]: disconnect from localhost[::1] ehlo=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=6

Aug  6 13:19:18 mail MailScanner[31554]: New Batch: Scanning 1 messages, 3097 bytes

Aug  6 13:19:18 mail MailScanner[31554]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:19:19 mail MailScanner[31554]: Virus and Content Scanning: Starting

Aug  6 13:19:19 mail MailScanner[31554]: Virus Scanning completed at 24018 bytes per second

Aug  6 13:19:18 mail MailScanner[31554]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:23:37 mail MailScanner[32582]: Making attempt 2 at processing message CE4AB62C48.A8F32

Aug  6 13:23:37 mail MailScanner[32582]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:26:15 mail MailScanner[2138]: Making attempt 3 at processing message CE4AB62C48.A8F32

Aug  6 13:26:15 mail MailScanner[2138]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:30:55 mail MailScanner[1659]: Making attempt 4 at processing message CE4AB62C48.A8F32

Aug  6 13:30:55 mail MailScanner[1659]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:35:44 mail MailScanner[1736]: Making attempt 5 at processing message CE4AB62C48.A8F32

Aug  6 13:35:44 mail MailScanner[1736]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:39:03 mail MailScanner[2946]: Making attempt 6 at processing message CE4AB62C48.A8F32

Aug  6 13:39:03 mail MailScanner[2946]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:39:05 mail MailScanner[2589]: Warning: skipping message CE4AB62C48.A8F32 as it has been attempted too many times

Aug  6 13:39:05 mail MailScanner[2589]: Quarantined message CE4AB62C48.A8F32 as it caused MailScanner to crash several times

Aug  6 13:39:05 mail MailScanner[2589]: Saved entire message to /var/spool/MailScanner/quarantine/20180806/CE4AB62C48.A8F32

Aug  6 13:39:05 mail MailScanner[2589]: MailWatch: Logging message CE4AB62C48.A8F32 to SQL

 

 

Then I started in  with debug option.

Aug  6 13:19:15 mail postfix/smtpd[31702]: connect from localhost[::1]

Aug  6 13:19:15 mail postfix/smtpd[31702]: CE4AB62C48: client=localhost[::1], sasl_method=LOGIN, sasl_username=dobril at stanga.net <mailto:dobril at stanga.net> 

Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: hold: header Received: from mail.stanga.net <http://mail.stanga.net>  (localhost [IPv6:::1])??by mail.stanga.net <http://mail.stanga.net>  (Postfix) with ESMTPA id CE4AB62C48??for <dobril at stanga.net <mailto:dobril at stanga.net> >; Mon,  6 Aug 2018 13:19:15 +0300 (EEST) from localhost[::1]; from=<dobril at stanga.net <mailto:dobril at stanga.net> > to=<dobril at stanga.net <mailto:dobril at stanga.net> > proto=ESMTP helo=<mail.stanga.net <http://mail.stanga.net> >

Aug  6 13:19:15 mail postfix/cleanup[31703]: CE4AB62C48: message-id=<0a5acc9eeddaa3cd9256ba112f5270d5 at stanga.net <mailto:0a5acc9eeddaa3cd9256ba112f5270d5 at stanga.net> >

Aug  6 13:19:15 mail opendkim[3326]: CE4AB62C48: DKIM-Signature field added (s=mail, d=stanga.net <http://stanga.net> )

Aug  6 13:19:15 mail postfix/smtpd[31702]: disconnect from localhost[::1] ehlo=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=6

Aug  6 13:19:18 mail MailScanner[31554]: New Batch: Found 4 messages waiting

Aug  6 13:19:18 mail MailScanner[31554]: New Batch: Scanning 1 messages, 3097 bytes

Aug  6 13:19:18 mail MailScanner[31554]: Saved archive copies of CE4AB62C48.A8F32

Aug  6 13:19:18 mail MailScanner[31554]: Created attachment dirs for 1 messages

Aug  6 13:19:19 mail MailScanner[31554]: Completed checking by /usr/bin/file

Aug  6 13:19:19 mail MailScanner[31554]: Virus and Content Scanning: Starting

Aug  6 13:19:19 mail MailScanner[31554]: Commencing scanning with clamd...

Aug  6 13:19:19 mail MailScanner[31726]: Debug Mode Is On

Aug  6 13:19:19 mail MailScanner[31726]: Use Threads : YES

Aug  6 13:19:19 mail MailScanner[31726]: Socket    : /var/run/clamav/clamd.sock

Aug  6 13:19:19 mail MailScanner[31726]: IP        : Using Sockets

Aug  6 13:19:19 mail MailScanner[31726]: Lock File : NOT USED

Aug  6 13:19:19 mail MailScanner[31726]: Time Out  : 300

Aug  6 13:19:19 mail MailScanner[31726]: Scan Dir  : /var/spool/MailScanner/incoming/31554

Aug  6 13:19:19 mail MailScanner[31726]: Clamd : Sending PING

Aug  6 13:19:19 mail MailScanner[31726]: Clamd : GOT 'PONG'

Aug  6 13:19:19 mail MailScanner[31726]: ClamD is running

Aug  6 13:19:19 mail MailScanner[31726]: SENT : MULTISCAN /var/spool/MailScanner/incoming/31554

Aug  6 13:19:19 mail MailScanner[31554]: Completed AV scan with clamd

Aug  6 13:19:19 mail MailScanner[31554]: Virus Scanning completed at 24018 bytes per second

Aug  6 13:19:19 mail root[31735]: MailScanner failed to start

Aug  6 13:19:19 mail root[31736]: Found a possible dead PID. Stopping all MailScanner rogue processes ...

 

 

How I can find out what cause this issue.




-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/mailman/listinfo/mailscanner





 

-- 

Shawn Iverson, CETL

Director of Technology

Rush County Schools

765-932-3901 x1171

iversons at rushville.k12.in.us <mailto:iversons at rushville.k12.in.us> 

 

  <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_cy1OZFNIZ0drYVU&revid=0Bw5iD0ToYvs_UitIcHVIWkJVVTl2VGpxVUE0d0FQcHBIRXk4PQ>   <https://docs.google.com/uc?export=download&id=0Bw5iD0ToYvs_Zkh4eEs3R01yWXc&revid=0Bw5iD0ToYvs_QWpBK2Y2ajJtYjhOMDRFekZwK2xOamk5Q3Y0PQ> 

  <https://docs.google.com/uc?export=download&id=1aBrlQou4gjB04FY-twHN_0Dn3GHVNxqa&revid=0Bw5iD0ToYvs_RnQ0eDhHcm95WHBFdkNRbXhQRXpoYkR6SEEwPQ> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180806/11e3a09d/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3762 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180806/11e3a09d/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1151 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180806/11e3a09d/attachment-0004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 853 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180806/11e3a09d/attachment-0005.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 1286 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180806/11e3a09d/attachment-0006.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 930 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180806/11e3a09d/attachment-0007.jpg>


More information about the MailScanner mailing list