I'd look very carefully at the sendmail setup<br>(<a href="http://www.mailscanner.info/sendmail.html">http://www.mailscanner.info/sendmail.html</a>)<br><br>and make sure that mail doesnot flow with MS turned off.<br><br clear="all">
-- <br>Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote">On 21 December 2011 23:29, Tony Arcus <span dir="ltr"><<a href="mailto:tony@ai.net.nz">tony@ai.net.nz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth <<a href="mailto:maxsec@gmail.com" target="_blank">maxsec@gmail.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
FYI in centos 6 the default mta could be postfix if it's like red hat ! So<br>
you may need to disable postfix if u want to get this going..<br>
</blockquote>
<br>
Good point<br>
<br>
Tony - if you telnet to the server on port 25, do you get the sendmail<br>
or postfix banner?<br>
<br>
<br>
Chris<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<u></u>info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/<u></u>mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/<u></u>posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br>
--<br>
This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br>
<br>
</blockquote>
<br>
Thanks Martin and Chris for that tip, I had already discovered that and uninstalled postfix. No luck<br>
<br>
It got me thinking... what else could be delivering the mail from /var/spool/<a href="http://mqueue.in" target="_blank">mqueue.in</a>? Other than sendmail?<br>
<br>
</blockquote></div>
Thanks to a lot of people with suggestions.<br>
<br>
This is what I believe is happening.<br>
Being Centos 6<br>
<br>
Postfix was installed but not running.<br>
Postfix has been uninstalled and the server restarted<br>
Telnet in and you get:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Trying 202.xxx.xxx.124...<br>
Connected to <a href="http://mail.xxxxx.co.nz" target="_blank">mail.xxxxx.co.nz</a> (202.xxx.xxx.124).<br>
Escape character is '^]'.<br>
220 <a href="http://mail.xxxxxx.co.nz" target="_blank">mail.xxxxxx.co.nz</a> ESMTP Sendmail 8.14.4/8.14.4; Thu, 22 Dec 2011 > 11:20:06 +1300<br>
</blockquote>
<br>
looking at chkconfig, this appears clean and unless some one wants something specific from it I wont report my findings.<br>
<br>
SO<br>
<br>
It would appear that emails come in on the sendmail MTA<br>
They get put in the /var/spool/<a href="http://mqueue.in" target="_blank">mqueue.in</a> directory<br>
THEN sendmail straight away picks them back up and delivers them before. MailScanner can ever get a change to process them.<br>
<br>
My reason for thinking this:<br>
<br>
I sent a number of emails from a different server.<br>
Here is sendmail getting the email as we would expect, and as emails are also received on other sendmail/MailScanner servers that are operating correctly.<br>
<br>
root 16583 0.0 0.3 10848 3952 ? D 11:34 0:00 sendmail: pBLMYFqF016583 <a href="http://ip-202-174-161-37.wizbiz.net.nz" target="_blank">ip-202-174-161-37.wizbiz.net.<u></u>nz</a><br>
[202.174.161.37]: DATA<br>
<br>
<br>
INSTANTLY though I also see this<br>
root 16585 0.0 0.3 10668 3200 ? S 11:34 0:00 sendmail: ./pBLMYFqD016583 from queue<br>
<br>
sendmail picks the email back up and delivers it, MailScanner never get a change to poll the this message.<br>
<br>
How do I stop sendmail from doing this?<br>
<br>
PS<br>
When I look at ps aux|grep send on a server operating okay I get<br>
root 31837 0.0 0.0 67468 1520 ? Ss Dec20 0:00 sendmail: accepting connections $<br>
smmsp 31841 0.0 0.0 57724 904 ? Ss Dec20 0:00 sendmail: Queue runner@00:15:00 for<br>
/var/spool/clientmqueue<br>
root 31845 0.0 0.0 57852 896 ? Ss Dec20 0:00 sendmail: Queue runner@00:15:00 for /var/spool/mqueue<br>
<br>
And on the bad server I get the same thing:<br>
root 17410 0.0 0.1 10768 1824 ? Ss 11:48 0:00 sendmail: accepting connections $<br>
smmsp 17414 0.0 0.1 9784 1528 ? Ss 11:48 0:00 sendmail: Queue runner@00:15:00 for<br>
/var/spool/clientmqueue<br>
root 17418 0.0 0.1 9788 1616 ? Ss 11:48 0:00 sendmail: Queue runner@00:15:00 for /var/spool/mqueue<br>
<br>
<br>
thanks again<div class="HOEnZb"><div class="h5"><br>
<br>
<br>
<br>
------------------------------<u></u>------------------------------<u></u>----<br>
This message was sent using IMP, the Internet Messaging Program.<br>
<br>
<br>
-- <br>
This message has been scanned for viruses and<br>
dangerous content by MailScanner, and is<br>
believed to be clean.<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.<u></u>info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/<u></u>mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/<u></u>posting</a><br>
<br>
Support MailScanner development - buy the book off the website!</div></div></blockquote></div><br>