Mail stuck in /var/spool/postfix/hold

Tue Jun 15 13:47:04 UTC 2021

Remco, 

Take a look at the syslog (cat /var/log/syslog) AppArmour logs errors there and not in the maillog 

Met vriendelijke groet, Mit freundlichen Grüßen, Best regards, 

Thom van der Boon 
E-Mail: thom at vdb.nl 

Van: "Remco Barendse" <mailscanner at barendse.to> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Dinsdag 15 juni 2021 14:05:11 
Onderwerp: Re: Mail stuck in /var/spool/postfix/hold 

I checked the log all the way up, no error messages. Just warnings 

root at gw2:~# cat /var/log/mail.log | grep -i 6EC7682C7E.A8770 
Jun 15 13:57:18 gw2 MailScanner[2886]: Making attempt 2 at processing 
message 6EC7682C7E.A8770 
Jun 15 14:00:22 gw2 MailScanner[3167]: Making attempt 3 at processing 
message 6EC7682C7E.A8770 

MailScanner --lint says all is OK and messages sit in 
/var/spool/postfix/hold until they are quarantined 

I did a complete re-install this morning of the server, started from fresh 
install of Ubuntu 20.04 and proceeded immediately to install MailScanner 
and ran ms-config, did not install any package. 

Same result.... Getting a little desperate 

root at gw2:~# MailScanner --lint 
Trying to setlogsock(unix) 

Reading configuration file /etc/MailScanner/MailScanner.conf 
Reading configuration file /etc/MailScanner/conf.d/README 
Reading configuration file /etc/MailScanner/conf.d/postfix.conf 
Read 1500 hostnames from the phishing whitelist 
Read 5527 hostnames from the phishing blacklists 

Checking version numbers... 
Version number in MailScanner.conf (5.3.4) is correct. 

Your envelope_sender_header in spamassassin.conf is correct. 
MailScanner setting GID to (121) 
MailScanner setting UID to (118) 

Checking for SpamAssassin errors (if you use it)... 
Using SpamAssassin results cache 
Connected to SpamAssassin cache database 
config: registryboundaries: no tlds defined, need to run sa-update 
SpamAssassin reported no errors. 
Auto: Found virus scanners: clamd 
Connected to Processing Attempts Database 
Created Processing Attempts Database successfully 
There are 14 messages in the Processing Attempts Database 
Using locktype = posix 
MailScanner.conf says "Virus Scanners = auto" 
Found these virus scanners installed: clamd 
=========================================================================== 
Filename Checks: Windows/DOS Executable (1 eicar.com) 
Other Checks: Found 1 problems 
Virus and Content Scanning: Starting 
Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com 
Virus Scanning: Clamd found 2 infections 
Infected message 1 came from 10.1.1.1 
Virus Scanning: Found 2 viruses 
=========================================================================== 
Virus Scanner test reports: 
Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1" 

If any of your virus scanners (clamd) 
are not listed there, you should check that they are installed correctly 
and that MailScanner is finding them correctly via its 
virus.scanners.conf. 

On Mon, 14 Jun 2021, Mark Sapiro wrote: 

> On 6/14/21 4:41 AM, Remco Barendse wrote: 
>> 
>> No errors, anywhere jusst this in the log : 
>> Jun 14 13:37:27 gw2 MailScanner[3282]: Making attempt 2 at processing 
>> message 26A2782CA5.A6FBE 
>> 
>> Jun 14 13:11:43 gw2 MailScanner[3081]: Connected to Processing Attempts 
>> Database 
>> Jun 14 13:11:43 gw2 MailScanner[3081]: Found 6 messages in the Processing 
>> Attempts Database 
>> Jun 14 13:11:43 gw2 MailScanner[3081]: Using locktype = flock 
>> Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 at processing 
>> message D0D2882370.ACF37 
>> Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 at processing 
>> message 4C5938221D.A960D 
>> Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Found 6 messages waiting 
>> Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Scanning 2 messages, 
>> 883327 bytes 
>> Jun 14 13:12:25 gw2 MailScanner[3006]: Warning: skipping message 
>> D0D2882370.ACF37 as it has been attempted too many times 
>> Jun 14 13:12:25 gw2 MailScanner[3006]: Quarantined message 
>> D0D2882370.ACF37 as it caused MailScanner to crash several times 
>> Jun 14 13:12:25 gw2 MailScanner[3006]: Saved entire message to 
>> /var/spool/MailScanner/quarantine/20210614/D0D2882370.ACF37 
>> Jun 14 13:12:25 gw2 MailScanner[3081]: Warning: skipping message 
>> 4C5938221D.A960D as it has been attempted too many times 
>> Jun 14 13:12:25 gw2 MailScanner[3081]: Quarantined message 
>> 4C5938221D.A960D as it caused MailScanner to crash several times 
>> Jun 14 13:12:25 gw2 MailScanner[3081]: Saved entire message to 
>> /var/spool/MailScanner/quarantine/20210614/4C5938221D.A960D 
>> Jun 14 13:12:25 gw2 MailScanner[3081]: New Batch: Found 6 messages waiting 
> 
> 
> There should be errors logged from the earlier attempts to process the 
> messages, perhaps they are in an older, rotated log. 
> 
> 
> -- 
> Mark Sapiro <mark at msapiro.net> The highway is for gamblers, 
> San Francisco Bay Area, California better use your sense - B. Dylan 
> 
> 
> -- 
> MailScanner mailing list 
> mailscanner at lists.mailscanner.info 
> http://lists.mailscanner.info/mailman/listinfo/mailscanner 
> 
> 

-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210615/4d4258bc/attachment.html>