Mail stuck in /var/spool/postfix/hold

Wed Jun 16 07:48:02 UTC 2021

Thanks!  I added postfix to group clamav, I do not use exim nor www-data 
therefore I don't think that adding these to mtagroup will fix it.

Is there any way of forcing MailScanner to show which file it is failing 
permissions on?

I noticed that ms-config did install pyzor, doing
  MailScanner -debug --lint
reveals this :
internal error, python traceback seen in response: Traceback (most recent 
call last):\n  File "/bin/pyzor", line 408, in <module>\n    main()\n 
File "/bin/pyzor", line 131, in main\n    config, options, args = 
load_configuration()\n  File "/bin/pyzor", line 107, in 
load_configuration\n    os.mkdir(options.homedir)\nPermissionError: [Errno 
13] Permission denied: '/var/spool/postfix/.pyzor' at 
/usr/local/share/perl/5.30.0/Mail/SpamAssassin/Plugin/Pyzor.pm line 308.
SpamAssassin reported no errors.

There is no such directory /var/spool/postfix/.pyzor the installer didn't 
create it.  Surprisingly, when installing SpamAssassin from apt on my 
first attempt, it created a user spamd but ms-configure installed 
spamass from cpan and it seems no user spamd was created ?

mkdir /var/spool/postfix/.pyzor
chown postfix. /var/spool/postfix/.pyzor

silenced the error, i removed pyzor just in case though

razor was also installed by the MailScanner installer but no directory 
created, guess ms-configure should have created that ?

Thanks for help :)

On Wed, 16 Jun 2021, L.P.H. van Belle via MailScanner wrote:

> Hmm.. This is my MTA group on debian.
>
> mtagroup:x:1001:clamav,Debian-exim,postfix,mail,www-data
>
> And this one :  /var/run/clamav/clamd.ctl
> ( i dont have that one, all ip sockes here. )
> clamav:x:119:postfix
>
>> SpamAssassin User State Dir = /var/spool/MailScanner/spamassassin
> That folder does not show up in you directory listing.
> ( check here and hee.. Also not on my server )
>
> drwxrwx---  53 postfix mtagroup 4096 Jun 16 06:29 ramdisk_store
> Only change in this one for you is the owner.. (root)..
>
> I cant fully compair, i also have a lot in SQL.
>
> I hope it helps you. At least you know its a permission somewhere.
>
> Greetz,
>
> Louis
>
>> -----Oorspronkelijk bericht-----
>> Van: MailScanner
>> [mailto:mailscanner-bounces+belle=bazuin.nl at lists.mailscanner.
>> info] Namens Remco Barendse
>> Verzonden: woensdag 16 juni 2021 0:01
>> Aan: MailScanner Discussion
>> Onderwerp: Re: Mail stuck in /var/spool/postfix/hold
>>
>>
>>
>> On Tue, 15 Jun 2021, Mark Sapiro wrote:
>>
>>> On 6/15/21 11:06 AM, Remco Barendse wrote:
>>>>  Thanks!  I checked but didn't see any apparmor errors or
>> anything that
>>>>  relates to mail, only that MailScanner gets killed :
>>>>
>>>>  Jun 15 19:54:37 gw2 MailScanner: Process did not exit
>> cleanly, returned 13
>>>>  with signal 0
>>>
>>>
>>> This is the relevant message. This (status 13) is a
>> permissions error.
>>
>> OK :)  Getting somewhere
>>
>>
>>> What are the MailScanner settings for Run As User and Run As Group?
>>
>> My  /et/etc/MailScanner/conf.d/10_postfix.conf (MailScanner.conf is
>> untouched except for "%org-name% =" :
>>
>> Run As User = postfix
>> Run As Group = postfix
>> Incoming Queue Dir = /var/spool/postfix/hold
>> Outgoing Queue Dir = /var/spool/postfix/incoming
>> MTA = postfix
>> Clamd Socket = /var/run/clamav/clamd.ctl
>> SpamAssassin User State Dir = /var/spool/MailScanner/spamassassin
>> Block Encrypted Messages = yes
>> Convert Dangerous HTML To Text = yes
>> Convert HTML To Text = %rules-dir%/html2text.rules
>> Quarantine Whole Message = yes
>> Quarantine Whole Messages As Queue Files = yes
>> Always Include SpamAssassin Report = yes
>> Sign Clean Messages = no
>> #sign-incoming-messages.rules
>> Remove These Headers = Disposition-Notification-To:
>> Return-Receipt-To:
>> X-Confirm-Reading-To: Disposition-Notification-To:
>> Receipt-Requested-To:
>> Confirm-Reading-To: MDRcpt-To: MDSend-Notifications-To: Smtp-Rcpt-To:
>> Return-Receipt-To: Read-Receipt-To: X-Confirm-Reading-To:
>> X-Acknowledge-To: Delivery-Receipt-To: X-PMrqc: Errors-To:
>> X-IMAPBase:
>> X-IMAP X-UID: Status X-Status: X-UIDL: X-Keywords: X-Mozilla-Status:
>> X-Mozilla-Status2:
>> Notify Senders = no
>> Notify Senders Of Blocked Filenames Or Filetypes = no
>> Disarmed Modify Subject = no
>> Phishing Subject Text = {Phishing?}
>> #Archive Mail = /var/spool/MailScanner/archive/_DATE_
>> Archive Mail = %rules-dir%/archive.rules
>> Send Notices = no
>> Spam Checks = %rules-dir%/spam.check.rules
>> Spam List = BARRACUDA SORBS SPAMHAUS SPAMCOP
>> Spam Lists To Reach High Score = 1
>> Max Spam Check Size = 2048k
>> High SpamAssassin Score = 10
>> Spam Actions = striphtml deliver header "X-Spam-Status: Yes"
>> #High Scoring Spam Actions = striphtml deliver header
>> "X-Spam-Status: Yes"
>> High Scoring Spam Actions = store-spam
>> MCP Checks = yes
>> First Check = mcp
>> High Scoring MCP Actions = store
>> Is Definitely Not MCP = %rules-dir%/mcp.check.rules
>> Include Scores In MCP Report = yes
>> # End Of File
>>
>>
>>> What does groups xxx  where xxx is the Run As User show?
>>
>> root at gw2:/etc/MailScanner# groups postfix
>> postfix : postfix mtagroup
>>
>>
>>> what does ls -l /var/spool/MailScanner show?
>>
>> ls -l /var/spool/MailScanner
>> total 48
>> drwxr-xr-x. 872 mail    mtagroup 32768 Jun 13 06:12 archive
>> drwxrwx---   14 postfix mtagroup   320 Jun 15 20:42 incoming
>> drwxrwxr-x    2 postfix mtagroup  4096 Jun 15 11:35 milterin
>> drwxrwxr-x    2 postfix mtagroup  4096 Jun 15 11:35 milterout
>> drwxrwxr-x    3 postfix postfix   4096 Jun 15 20:04 quarantine
>> drwxrwx---    9 root    mtagroup  4096 Jun 15 19:52 ramdisk_store
>>
>>
>>>
>>>
>>> --
>>> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
>>> San Francisco Bay Area, California    better use your sense
>> - B. Dylan
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>>
>
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>