<html><body><div style="font-family: Helvetica; font-size: 12pt; color: #000000"><div>Remco,<br></div><div><br data-mce-bogus="1"></div><div>Take a look at the syslog (cat /var/log/syslog) AppArmour logs errors there and not in the maillog<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><br></div><div data-marker="__SIG_PRE__"><div>Met vriendelijke groet, Mit freundlichen Grüßen, Best regards,</div><div><br></div><div><br style="font-family:'helvetica'"><span style="font-family:'helvetica'">Thom van der Boon</span><br style="font-family:'helvetica'"><span style="font-family:'helvetica'">E-Mail: thom@vdb.nl</span></div></div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>Van: </b>"Remco Barendse" <mailscanner@barendse.to><br><b>Aan: </b>"MailScanner Discussion" <mailscanner@lists.mailscanner.info><br><b>Verzonden: </b>Dinsdag 15 juni 2021 14:05:11<br><b>Onderwerp: </b>Re: Mail stuck in /var/spool/postfix/hold<br></div><div><br></div><div data-marker="__QUOTED_TEXT__">I checked the log all the way up, no error messages. Just warnings<br><br>root@gw2:~# cat /var/log/mail.log | grep -i 6EC7682C7E.A8770<br>Jun 15 13:57:18 gw2 MailScanner[2886]: Making attempt 2 at processing <br>message 6EC7682C7E.A8770<br>Jun 15 14:00:22 gw2 MailScanner[3167]: Making attempt 3 at processing <br>message 6EC7682C7E.A8770<br><br>MailScanner --lint says all is OK and messages sit in <br>/var/spool/postfix/hold until they are quarantined<br><br>I did a complete re-install this morning of the server, started from fresh <br>install of Ubuntu 20.04 and proceeded immediately to install MailScanner <br>and ran ms-config, did not install any package.<br><br>Same result.... Getting a little desperate<br><br>root@gw2:~# MailScanner --lint<br>Trying to setlogsock(unix)<br><br>Reading configuration file /etc/MailScanner/MailScanner.conf<br>Reading configuration file /etc/MailScanner/conf.d/README<br>Reading configuration file /etc/MailScanner/conf.d/postfix.conf<br>Read 1500 hostnames from the phishing whitelist<br>Read 5527 hostnames from the phishing blacklists<br><br>Checking version numbers...<br>Version number in MailScanner.conf (5.3.4) is correct.<br><br>Your envelope_sender_header in spamassassin.conf is correct.<br>MailScanner setting GID to (121)<br>MailScanner setting UID to (118)<br><br>Checking for SpamAssassin errors (if you use it)...<br>Using SpamAssassin results cache<br>Connected to SpamAssassin cache database<br>config: registryboundaries: no tlds defined, need to run sa-update<br>SpamAssassin reported no errors.<br>Auto: Found virus scanners: clamd<br>Connected to Processing Attempts Database<br>Created Processing Attempts Database successfully<br>There are 14 messages in the Processing Attempts Database<br>Using locktype = posix<br>MailScanner.conf says "Virus Scanners = auto"<br>Found these virus scanners installed: clamd<br>===========================================================================<br>Filename Checks: Windows/DOS Executable (1 eicar.com)<br>Other Checks: Found 1 problems<br>Virus and Content Scanning: Starting<br>Clamd::INFECTED:: Win.Test.EICAR_HDB-1 :: ./1/eicar.com<br>Virus Scanning: Clamd found 2 infections<br>Infected message 1 came from 10.1.1.1<br>Virus Scanning: Found 2 viruses<br>===========================================================================<br>Virus Scanner test reports:<br>Clamd said "eicar.com was infected: Win.Test.EICAR_HDB-1"<br><br>If any of your virus scanners (clamd)<br>are not listed there, you should check that they are installed correctly<br>and that MailScanner is finding them correctly via its <br>virus.scanners.conf.<br><br><br><br><br><br><br>On Mon, 14 Jun 2021, Mark Sapiro wrote:<br><br>> On 6/14/21 4:41 AM, Remco Barendse wrote:<br>>><br>>> No errors, anywhere jusst this in the log :<br>>> Jun 14 13:37:27 gw2 MailScanner[3282]: Making attempt 2 at processing<br>>> message 26A2782CA5.A6FBE<br>>><br>>> Jun 14 13:11:43 gw2 MailScanner[3081]: Connected to Processing Attempts<br>>> Database<br>>> Jun 14 13:11:43 gw2 MailScanner[3081]: Found 6 messages in the Processing<br>>> Attempts Database<br>>> Jun 14 13:11:43 gw2 MailScanner[3081]: Using locktype = flock<br>>> Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 at processing<br>>> message D0D2882370.ACF37<br>>> Jun 14 13:12:25 gw2 MailScanner[2890]: Making attempt 6 at processing<br>>> message 4C5938221D.A960D<br>>> Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Found 6 messages waiting<br>>> Jun 14 13:12:25 gw2 MailScanner[2890]: New Batch: Scanning 2 messages,<br>>> 883327 bytes<br>>> Jun 14 13:12:25 gw2 MailScanner[3006]: Warning: skipping message<br>>> D0D2882370.ACF37 as it has been attempted too many times<br>>> Jun 14 13:12:25 gw2 MailScanner[3006]: Quarantined message<br>>> D0D2882370.ACF37 as it caused MailScanner to crash several times<br>>> Jun 14 13:12:25 gw2 MailScanner[3006]: Saved entire message to<br>>> /var/spool/MailScanner/quarantine/20210614/D0D2882370.ACF37<br>>> Jun 14 13:12:25 gw2 MailScanner[3081]: Warning: skipping message<br>>> 4C5938221D.A960D as it has been attempted too many times<br>>> Jun 14 13:12:25 gw2 MailScanner[3081]: Quarantined message<br>>> 4C5938221D.A960D as it caused MailScanner to crash several times<br>>> Jun 14 13:12:25 gw2 MailScanner[3081]: Saved entire message to<br>>> /var/spool/MailScanner/quarantine/20210614/4C5938221D.A960D<br>>> Jun 14 13:12:25 gw2 MailScanner[3081]: New Batch: Found 6 messages waiting<br>><br>><br>> There should be errors logged from the earlier attempts to process the <br>> messages, perhaps they are in an older, rotated log.<br>><br>><br>> -- <br>> Mark Sapiro <mark@msapiro.net> The highway is for gamblers,<br>> San Francisco Bay Area, California better use your sense - B. Dylan<br>><br>><br>> -- <br>> MailScanner mailing list<br>> mailscanner@lists.mailscanner.info<br>> http://lists.mailscanner.info/mailman/listinfo/mailscanner<br>><br>><br><br><br>-- <br>MailScanner mailing list<br>mailscanner@lists.mailscanner.info<br>http://lists.mailscanner.info/mailman/listinfo/mailscanner<br></div></div></body></html>