Mail stuck in /var/spool/postfix/hold

Tue Jun 15 18:21:37 UTC 2021

On Tue, 15 Jun 2021, L.P.H. van Belle via MailScanner wrote:

> Any error when you run this?
>
> egrep -i "invalid|error|reject|deny" /var/log/mail.log

Nothing!

>
> Review this again, you never know, maybe you did miss a small thing.
>
> https://www.mailscanner.info/postfix/

Check!  All there

> And did you make sure these linese are last in checks_header.pcre
> ## We need to put incoming to the HOLD QUEUE for MailScanner
> /^Received:/ HOLD

Yes, that and the line in main.cf to activate it :
header_checks = regexp:/etc/postfix/header_checks

>
> I havent had the time yet to start on the new mailscanner setup.
> I have a kopano install first to finish. :-(
>
> But tip. Any file you put in here.. /etc/MailScanner/conf.d/
> Like :
> Reading configuration file /etc/MailScanner/conf.d/postfix.conf
>
> Number them. The loading order might conflict.
> /etc/MailScanner/conf.d/01-company-base.conf
> /etc/MailScanner/conf.d/02-postfix.conf
> /etc/MailScanner/conf.d/03-something-else.conf

Yes, i already did have!

> All rights on folders are checked?

I just let the MailScanner installer take care of it :
root at gw2:~# ls -lasp /var/spool/MailScanner
32 drwxr-xr-x. 872 mail    mtagroup 32768 Jun 13 06:12 archive/
  0 drwxrwx---   14 root    mtagroup   320 Jun 15 20:04 incoming/
  4 drwxrwxr-x    2 postfix mtagroup  4096 Jun 15 11:35 milterin/
  4 drwxrwxr-x    2 postfix mtagroup  4096 Jun 15 11:35 milterout/
  4 drwxrwxr-x    3 postfix postfix   4096 Jun 15 20:04 quarantine/

But everything inside incoming is :
  0 drwxrwx---  2 postfix mtagroup    60 Jun 15 19:54 2174/

I changed it into postfix.postfix as suggested here
https://www.mailscanner.info/postfix/
but....... no dice

Mail makes into the /var/spool/MailScanner/incoming/2236
but never leaves

Thanks!!

>
> Greetz,
>
> Louis
>
>> -----Oorspronkelijk bericht-----
>> Van: MailScanner
>> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.
>> info] Namens Remco Barendse
>> Verzonden: dinsdag 15 juni 2021 14:05
>> Aan: MailScanner Discussion
>> Onderwerp: Re: Mail stuck in /var/spool/postfix/hold
>>
>> I checked the log all the way up, no error messages. Just warnings
>>
>> root at gw2:~# cat /var/log/mail.log | grep -i 6EC7682C7E.A8770
>> Jun 15 13:57:18 gw2 MailScanner[2886]: Making attempt 2 at processing
>> message 6EC7682C7E.A8770
>> Jun 15 14:00:22 gw2 MailScanner[3167]: Making attempt 3 at processing
>> message 6EC7682C7E.A8770
>>
>> MailScanner --lint says all is OK and messages sit in
>> /var/spool/postfix/hold until they are quarantined
>>
>> I did a complete re-install this morning of the server,
>> started from fresh
>> install of Ubuntu 20.04 and proceeded immediately to install
>> MailScanner
>> and ran ms-config, did not install any package.
>>
>> Same result....  Getting a little desperate
>>
>> root at gw2:~# MailScanner --lint
>> Trying to setlogsock(unix)
>>
>> Reading configuration file /etc/MailScanner/MailScanner.conf
>> Reading configuration file /etc/MailScanner/conf.d/README
>> Reading configuration file /etc/MailScanner/conf.d/postfix.conf
>> Read 1500 hostnames from the phishing whitelist
>> Read 5527 hostnames from the phishing blacklists
>>
>> Checking version numbers...
>> Version number in MailScanner.conf (5.3.4) is correct.
>>
>> Your envelope_sender_header in spamassassin.conf is correct.
>> MailScanner setting GID to  (121)
>> MailScanner setting UID to  (118)
>>
>> Checking for SpamAssassin errors (if you use it)...
>> Using SpamAssassin results cache
>> Connected to SpamAssassin cache database
>> config: registryboundaries: no tlds defined, need to run sa-update
>> SpamAssassin reported no errors.
>> Auto: Found virus scanners: clamd
>> Connected to Processing Attempts Database
>> Created Processing Attempts Database successfully
>> There are 14 messages in the Processing Attempts Database
>> Using locktype = posix
>> MailScanner.conf says "Virus Scanners = auto"
>> Found these virus scanners installed: clamd
>> ==============================================================
>> =============
>> Filename Checks: Windows/DOS Executable (1 eicar.com)
>> Other Checks: Found 1 problems
>> Virus and Content Scanning: Starting
>> Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com
>> Virus Scanning: Clamd found 2 infections
>> Infected message 1 came from 10.1.1.1
>> Virus Scanning: Found 2 viruses
>> ==============================================================
>> =============
>> Virus Scanner test reports:
>> Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1"
>>
>> If any of your virus scanners (clamd)
>> are not listed there, you should check that they are
>> installed correctly
>> and that MailScanner is finding them correctly via its
>> virus.scanners.conf.
>>
>>
>>
>>
>>
>>
>> On Mon, 14 Jun 2021, Mark Sapiro wrote:
>>
>>> On 6/14/21 4:41 AM, Remco Barendse wrote:
>>>>
>>>>  No errors, anywhere jusst this in the log :
>>>>  Jun 14 13:37:27 gw2 MailScanner[3282]: Making attempt 2
>> at processing
>>>>  message 26A2782CA5.A6FBE
>>>>
>>>>  Jun 14 13:11:43 gw2 MailScanner[3081]: Connected to
>> Processing Attempts
>>>>  Database
>>>>  Jun 14 13:11:43 gw2 MailScanner[3081]: Found 6 messages
>> in the Processing
>>>>  Attempts Database
>>>>  Jun 14 13:11:43 gw2 MailScanner[3081]: Using locktype = flock
>>>>  Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6
>> at processing
>>>>  message D0D2882370.ACF37
>>>>  Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6
>> at processing
>>>>  message 4C5938221D.A960D
>>>>  Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Found 6
>> messages waiting
>>>>  Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch:
>> Scanning 2 messages,
>>>>  883327 bytes
>>>>  Jun 14 13:12:25 gw2 MailScanner[3006]: Warning: skipping message
>>>>  D0D2882370.ACF37 as it has been attempted too many times
>>>>  Jun 14 13:12:25 gw2 MailScanner[3006]: Quarantined message
>>>>  D0D2882370.ACF37 as it caused MailScanner to crash several times
>>>>  Jun 14 13:12:25 gw2 MailScanner[3006]: Saved entire message to
>>>>  /var/spool/MailScanner/quarantine/20210614/D0D2882370.ACF37
>>>>  Jun 14 13:12:25 gw2 MailScanner[3081]: Warning: skipping message
>>>>  4C5938221D.A960D as it has been attempted too many times
>>>>  Jun 14 13:12:25 gw2 MailScanner[3081]: Quarantined message
>>>>  4C5938221D.A960D as it caused MailScanner to crash several times
>>>>  Jun 14 13:12:25 gw2 MailScanner[3081]: Saved entire message to
>>>>  /var/spool/MailScanner/quarantine/20210614/4C5938221D.A960D
>>>>  Jun 14 13:12:25 gw2 MailScanner[3081]: New Batch: Found 6
>> messages waiting
>>>
>>>
>>> There should be errors logged from the earlier attempts to
>> process the
>>> messages, perhaps they are in an older, rotated log.
>>>
>>>
>>> --
>>> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
>>> San Francisco Bay Area, California    better use your sense
>> - B. Dylan
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>