Mail stuck in /var/spool/postfix/hold

[Remco Barendse]

I checked the log all the way up, no error messages. Just warnings

root at gw2:~# cat /var/log/mail.log | grep -i 6EC7682C7E.A8770
Jun 15 13:57:18 gw2 MailScanner[2886]: Making attempt 2 at processing 
message 6EC7682C7E.A8770
Jun 15 14:00:22 gw2 MailScanner[3167]: Making attempt 3 at processing 
message 6EC7682C7E.A8770

MailScanner --lint says all is OK and messages sit in 
/var/spool/postfix/hold until they are quarantined

I did a complete re-install this morning of the server, started from fresh 
install of Ubuntu 20.04 and proceeded immediately to install MailScanner 
and ran ms-config, did not install any package.

Same result....  Getting a little desperate

root at gw2:~# MailScanner --lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Reading configuration file /etc/MailScanner/conf.d/postfix.conf
Read 1500 hostnames from the phishing whitelist
Read 5527 hostnames from the phishing blacklists

Checking version numbers...
Version number in MailScanner.conf (5.3.4) is correct.

Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to  (121)
MailScanner setting UID to  (118)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
config: registryboundaries: no tlds defined, need to run sa-update
SpamAssassin reported no errors.
Auto: Found virus scanners: clamd
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 14 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamd
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com
Virus Scanning: Clamd found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1"

If any of your virus scanners (clamd)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its 
virus.scanners.conf.






On Mon, 14 Jun 2021, Mark Sapiro wrote:

> On 6/14/21 4:41 AM, Remco Barendse wrote:
>>
>>  No errors, anywhere jusst this in the log :
>>  Jun 14 13:37:27 gw2 MailScanner[3282]: Making attempt 2 at processing
>>  message 26A2782CA5.A6FBE
>>
>>  Jun 14 13:11:43 gw2 MailScanner[3081]: Connected to Processing Attempts
>>  Database
>>  Jun 14 13:11:43 gw2 MailScanner[3081]: Found 6 messages in the Processing
>>  Attempts Database
>>  Jun 14 13:11:43 gw2 MailScanner[3081]: Using locktype = flock
>>  Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 at processing
>>  message D0D2882370.ACF37
>>  Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 at processing
>>  message 4C5938221D.A960D
>>  Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Found 6 messages waiting
>>  Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Scanning 2 messages,
>>  883327 bytes
>>  Jun 14 13:12:25 gw2 MailScanner[3006]: Warning: skipping message
>>  D0D2882370.ACF37 as it has been attempted too many times
>>  Jun 14 13:12:25 gw2 MailScanner[3006]: Quarantined message
>>  D0D2882370.ACF37 as it caused MailScanner to crash several times
>>  Jun 14 13:12:25 gw2 MailScanner[3006]: Saved entire message to
>>  /var/spool/MailScanner/quarantine/20210614/D0D2882370.ACF37
>>  Jun 14 13:12:25 gw2 MailScanner[3081]: Warning: skipping message
>>  4C5938221D.A960D as it has been attempted too many times
>>  Jun 14 13:12:25 gw2 MailScanner[3081]: Quarantined message
>>  4C5938221D.A960D as it caused MailScanner to crash several times
>>  Jun 14 13:12:25 gw2 MailScanner[3081]: Saved entire message to
>>  /var/spool/MailScanner/quarantine/20210614/4C5938221D.A960D
>>  Jun 14 13:12:25 gw2 MailScanner[3081]: New Batch: Found 6 messages waiting
>
>
> There should be errors logged from the earlier attempts to process the 
> messages, perhaps they are in an older, rotated log.
>
>
> -- 
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>