<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Cambria, sans-serif; ">
<div>
<div>
<div>The pasted logs do not show it dying. Is the process stopped when you check?</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>
<div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">--<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">Jeremy McSpadden<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: black; font-family: Calibri, sans-serif; ">Flux Labs, Inc<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<span style="font-size: 10pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><a href="http://www.fluxlabs.net/" style="color: blue; text-decoration: underline; "><span style="color: rgb(31, 73, 125); ">http://www.fluxlabs.net</span></a><br>
Endless Solutions<o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; ">Office</span></b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "> : 850-588-4626</span><span style="font-size: 11pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "><o:p></o:p></span></div>
<div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; ">
<b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; ">Cell</span></b><span style="font-size: 10pt; color: rgb(125, 125, 125); font-family: Calibri, sans-serif; "> : 850-890-2543<br>
<b>Fax</b> : 850-254-2955</span></div>
</div>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Rabie Van der Merwe <<a href="mailto:rvdmerwe@mhg.co.za">rvdmerwe@mhg.co.za</a>><br>
<span style="font-weight:bold">Reply-To: </span>MailScanner discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
<span style="font-weight:bold">Date: </span>Tue, 10 Apr 2012 16:49:34 +0200<br>
<span style="font-weight:bold">To: </span>MailScanner discussion <<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>
<span style="font-weight:bold">Subject: </span>MailScanner failing on CentOS 6.<br>
</div>
<div><br>
</div>
<div>
<div>Hi,<br>
<br>
I am trying to diagnose why MailScanner is dying after upgrading from<br>
CentOS/RHEL5 to 6.<br>
I am using Postfix, ClamD and MailWatch, so far I seem to have it down<br>
to something to<br>
do with the file permissions and setting the working group to clamav, if<br>
I disable scanning<br>
ie, no AV or Spam checking it passes email.<br>
<br>
Even if I change the output in MailScanner.conf to debug I dont get<br>
much, any thoughts where to from here?<br>
<br>
Regards<br>
Rabie<br>
<br>
---snip---<br>
Apr 10 15:17:03 quazar MailScanner[7022]: MailScanner E-Mail Virus<br>
Scanner version 4.84.5 starting...<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Reading configuration file<br>
/etc/MailScanner/MailScanner.conf<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Reading configuration file<br>
/etc/MailScanner/conf.d/README<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Read 869 hostnames from the<br>
phishing whitelist<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Read 5470 hostnames from the<br>
phishing blacklists<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Config: calling custom init<br>
function MailWatchLogging<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Started SQL Logging child<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Using SpamAssassin results<br>
cache<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Connected to SpamAssassin<br>
cache database<br>
Apr 10 15:17:03 quazar MailScanner[7022]: Enabling SpamAssassin<br>
auto-whitelist functionality...<br>
Apr 10 15:17:05 quazar MailScanner[7022]: Connected to Processing<br>
Attempts Database<br>
Apr 10 15:17:05 quazar MailScanner[7022]: Found 1 messages in the<br>
Processing Attempts Database<br>
Apr 10 15:17:05 quazar MailScanner[7022]: lock.pl sees Config LockType<br>
= flock<br>
Apr 10 15:17:05 quazar MailScanner[7022]: lock.pl sees have_module = 0<br>
Apr 10 15:17:05 quazar MailScanner[7022]: Using locktype = flock<br>
Apr 10 15:17:35 quazar MailScanner[7022]: Making attempt 3 at processing<br>
message 2D55A28CE.AD4E6<br>
Apr 10 15:17:35 quazar MailScanner[7022]: New Batch: Scanning 1<br>
messages, 6458 bytes<br>
Apr 10 15:17:35 quazar MailScanner[7022]: Created attachment dirs for 1<br>
messages<br>
Apr 10 15:17:36 quazar MailScanner[7022]: Completed checking by<br>
/usr/bin/file<br>
Apr 10 15:17:36 quazar MailScanner[7022]: Virus and Content Scanning:<br>
Starting<br>
Apr 10 15:17:36 quazar MailScanner[7022]: Commencing scanning by<br>
clamd...<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Debug Mode Is On<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Use Threads : NO<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Socket :<br>
/var/run/clamav/clamd.socket<br>
Apr 10 15:17:36 quazar MailScanner[7041]: IP : Using Sockets<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Lock File : NOT USED<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Time Out : 300<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Scan Dir :<br>
/var/spool/MailScanner/incoming/7022<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Clamd : Sending PING<br>
Apr 10 15:17:36 quazar MailScanner[7041]: Clamd : GOT 'PONG'<br>
Apr 10 15:17:36 quazar MailScanner[7041]: ClamD is running<br>
Apr 10 15:17:36 quazar MailScanner[7041]: SENT : CONTSCAN<br>
/var/spool/MailScanner/incoming/7022 <br>
Apr 10 15:17:36 quazar MailScanner[7022]: Completed scanning by clamd<br>
Apr 10 15:17:36 quazar MailScanner[7022]: RBL Checks: returned 0<br>
Apr 10 15:17:36 quazar MailScanner[7022]: SpamAssassin cache hit for<br>
message 2D55A28CE.AD4E6<br>
Apr 10 15:19:55 quazar MailScanner[7194]: MailScanner E-Mail Virus<br>
Scanner version 4.84.5 starting...<br>
---snip---<br>
<br>
<br>
---snip---<br>
Apr 10 16:39:57 quazar MailScanner[9060]: MailScanner E-Mail Virus<br>
Scanner version 4.84.5 starting...<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Reading configuration file<br>
/etc/MailScanner/MailScanner.conf<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Reading configuration file<br>
/etc/MailScanner/conf.d/README<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Read 869 hostnames from the<br>
phishing whitelist<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Read 5470 hostnames from the<br>
phishing blacklists<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Config: calling custom init<br>
function MailWatchLogging<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Started SQL Logging child<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Using SpamAssassin results<br>
cache<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Connected to SpamAssassin<br>
cache database<br>
Apr 10 16:39:57 quazar MailScanner[9060]: Enabling SpamAssassin<br>
auto-whitelist functionality...<br>
Apr 10 16:40:04 quazar MailScanner[9060]: Connected to Processing<br>
Attempts Database<br>
Apr 10 16:40:04 quazar MailScanner[9060]: Found 1 messages in the<br>
Processing Attempts Database<br>
Apr 10 16:40:04 quazar MailScanner[9060]: lock.pl sees Config LockType<br>
= flock<br>
Apr 10 16:40:04 quazar MailScanner[9060]: lock.pl sees have_module = 0<br>
Apr 10 16:40:04 quazar MailScanner[9060]: Using locktype = flock<br>
Apr 10 16:40:04 quazar MailScanner[9060]: New Batch: Found 3 messages<br>
waiting<br>
Apr 10 16:40:04 quazar MailScanner[9060]: New Batch: Scanning 2<br>
messages, 202224 bytes<br>
Apr 10 16:40:04 quazar MailScanner[9060]: Created attachment dirs for 2<br>
messages<br>
---snip---<br>
<br>
<table width="0">
<tbody>
<tr>
<td width="0">
<p align="center"><font face="verdana,arial,helvetica,sans-serif" size="1">**********************************************************************
<br>
--------- <br>
NOTICE <br>
---------</font></p>
<p align="left"><font face="verdana,arial,helvetica,sans-serif" size="1">This message (including attachments) contains privileged and confidential information intended only for the person or entity to which it is addressed.
</font></p>
<p align="left"><font face="verdana,arial,helvetica,sans-serif" size="1">Any review, retransmission, dissemination, copy or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient, is
prohibited.</font></p>
<p align="left"><font face="verdana,arial,helvetica,sans-serif" size="1">If you received this message in error, please notify the sender immediately by e-mail, facsimile or telephone and thereafter delete the material from any computer.</font></p>
<p align="left"><font face="verdana,arial,helvetica,sans-serif" size="1">Metropolitan Health, its subsidiaries or associates, does not accept liability for any personal views expressed in this message.</font></p>
<p align="left"><font face="verdana,arial,helvetica,sans-serif" size="1"><strong>Metropolitan Health<br>
</strong>PO Box 4313 Cape Town 8000 Tel: 021 480 4511 Fax: 021 480 4535 <a href="http://www.mhg.co.za/">
www.mhg.co.za</a> </font></p>
<p align="center"><font face="verdana,arial,helvetica,sans-serif" size="1">**********************************************************************</font></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
-- MailScanner mailing list <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a> Before posting, read
<a href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</a> Support MailScanner development - buy the book off the website!
</span>
</body>
</html>