Mail stuck in /var/spool/postfix/hold

Tue Jun 15 13:26:24 UTC 2021

Any error when you run this? 

egrep -i "invalid|error|reject|deny" /var/log/mail.log

Review this again, you never know, maybe you did miss a small thing. 

https://www.mailscanner.info/postfix/ 

And did you make sure these linese are last in checks_header.pcre 
## We need to put incoming to the HOLD QUEUE for MailScanner
/^Received:/ HOLD

I havent had the time yet to start on the new mailscanner setup. 
I have a kopano install first to finish. :-( 

But tip. Any file you put in here.. /etc/MailScanner/conf.d/ 
Like : 
Reading configuration file /etc/MailScanner/conf.d/postfix.conf 

Number them. The loading order might conflict. 
/etc/MailScanner/conf.d/01-company-base.conf
/etc/MailScanner/conf.d/02-postfix.conf
/etc/MailScanner/conf.d/03-something-else.conf

All rights on folders are checked? 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: MailScanner 
> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.
> info] Namens Remco Barendse
> Verzonden: dinsdag 15 juni 2021 14:05
> Aan: MailScanner Discussion
> Onderwerp: Re: Mail stuck in /var/spool/postfix/hold
> 
> I checked the log all the way up, no error messages. Just warnings
> 
> root at gw2:~# cat /var/log/mail.log | grep -i 6EC7682C7E.A8770
> Jun 15 13:57:18 gw2 MailScanner[2886]: Making attempt 2 at processing 
> message 6EC7682C7E.A8770
> Jun 15 14:00:22 gw2 MailScanner[3167]: Making attempt 3 at processing 
> message 6EC7682C7E.A8770
> 
> MailScanner --lint says all is OK and messages sit in 
> /var/spool/postfix/hold until they are quarantined
> 
> I did a complete re-install this morning of the server, 
> started from fresh 
> install of Ubuntu 20.04 and proceeded immediately to install 
> MailScanner 
> and ran ms-config, did not install any package.
> 
> Same result....  Getting a little desperate
> 
> root at gw2:~# MailScanner --lint
> Trying to setlogsock(unix)
> 
> Reading configuration file /etc/MailScanner/MailScanner.conf
> Reading configuration file /etc/MailScanner/conf.d/README
> Reading configuration file /etc/MailScanner/conf.d/postfix.conf
> Read 1500 hostnames from the phishing whitelist
> Read 5527 hostnames from the phishing blacklists
> 
> Checking version numbers...
> Version number in MailScanner.conf (5.3.4) is correct.
> 
> Your envelope_sender_header in spamassassin.conf is correct.
> MailScanner setting GID to  (121)
> MailScanner setting UID to  (118)
> 
> Checking for SpamAssassin errors (if you use it)...
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> config: registryboundaries: no tlds defined, need to run sa-update
> SpamAssassin reported no errors.
> Auto: Found virus scanners: clamd
> Connected to Processing Attempts Database
> Created Processing Attempts Database successfully
> There are 14 messages in the Processing Attempts Database
> Using locktype = posix
> MailScanner.conf says "Virus Scanners = auto"
> Found these virus scanners installed: clamd
> ==============================================================
> =============
> Filename Checks: Windows/DOS Executable (1 eicar.com)
> Other Checks: Found 1 problems
> Virus and Content Scanning: Starting
> Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com
> Virus Scanning: Clamd found 2 infections
> Infected message 1 came from 10.1.1.1
> Virus Scanning: Found 2 viruses
> ==============================================================
> =============
> Virus Scanner test reports:
> Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1"
> 
> If any of your virus scanners (clamd)
> are not listed there, you should check that they are 
> installed correctly
> and that MailScanner is finding them correctly via its 
> virus.scanners.conf.
> 
> 
> 
> 
> 
> 
> On Mon, 14 Jun 2021, Mark Sapiro wrote:
> 
> > On 6/14/21 4:41 AM, Remco Barendse wrote:
> >>
> >>  No errors, anywhere jusst this in the log :
> >>  Jun 14 13:37:27 gw2 MailScanner[3282]: Making attempt 2 
> at processing
> >>  message 26A2782CA5.A6FBE
> >>
> >>  Jun 14 13:11:43 gw2 MailScanner[3081]: Connected to 
> Processing Attempts
> >>  Database
> >>  Jun 14 13:11:43 gw2 MailScanner[3081]: Found 6 messages 
> in the Processing
> >>  Attempts Database
> >>  Jun 14 13:11:43 gw2 MailScanner[3081]: Using locktype = flock
> >>  Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 
> at processing
> >>  message D0D2882370.ACF37
> >>  Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 
> at processing
> >>  message 4C5938221D.A960D
> >>  Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Found 6 
> messages waiting
> >>  Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: 
> Scanning 2 messages,
> >>  883327 bytes
> >>  Jun 14 13:12:25 gw2 MailScanner[3006]: Warning: skipping message
> >>  D0D2882370.ACF37 as it has been attempted too many times
> >>  Jun 14 13:12:25 gw2 MailScanner[3006]: Quarantined message
> >>  D0D2882370.ACF37 as it caused MailScanner to crash several times
> >>  Jun 14 13:12:25 gw2 MailScanner[3006]: Saved entire message to
> >>  /var/spool/MailScanner/quarantine/20210614/D0D2882370.ACF37
> >>  Jun 14 13:12:25 gw2 MailScanner[3081]: Warning: skipping message
> >>  4C5938221D.A960D as it has been attempted too many times
> >>  Jun 14 13:12:25 gw2 MailScanner[3081]: Quarantined message
> >>  4C5938221D.A960D as it caused MailScanner to crash several times
> >>  Jun 14 13:12:25 gw2 MailScanner[3081]: Saved entire message to
> >>  /var/spool/MailScanner/quarantine/20210614/4C5938221D.A960D
> >>  Jun 14 13:12:25 gw2 MailScanner[3081]: New Batch: Found 6 
> messages waiting
> >
> >
> > There should be errors logged from the earlier attempts to 
> process the 
> > messages, perhaps they are in an older, rotated log.
> >
> >
> > -- 
> > Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> > San Francisco Bay Area, California    better use your sense 
> - B. Dylan
> >
> >
> > -- 
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> >
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> 