[cobalt-users] RAQ3 & Mailscanner OT Slightly

[chae <chae@xxxxxxxxxxxx>]

Hi Yah,

Just installed mailscanner ala uk2raq.com's instructions (thank you)

1st mistake I did (yes I admit to goofing up) I printed off the uk2raq 
instructions to read prior to doing the job.

The first line was:

rpm -Uvh 
http://www.sng.ecs.soton.ac.uk/mailscanner/files/mailscanner-3.20-5.i386.rpm

Then it had

chkconfig --add mailscanner

After I added the first line and hit return the installation shot off and 
started installing I didn't even get a chance to get to the 2nd line, my 
heart missed a few beats as I seen the screen scrolling past me with 
installing blah blah blah but my eyes quickly caught perl folders and I 
thought oh crap I've reinstalled a newer version of perl - choke fear of 
the GUI breaking etctera.

Anyway that went without a hitch and then followed the rest of the 
instructions, then went for the start up and away it went.

Now once the first set of hourly logs came through this showed up:-

Jul 7 15:15:28 ns sendmail[15488]: starting daemon (8.9.3): 
SMTP+queueing@01:00:00

I take it that this was when it started the install

Jul 7 15:24:36 ns kernel: Kernel logging (proc) stopped.
Jul 7 15:24:36 ns kernel: Kernel log daemon terminating.
Jul 7 15:24:38 ns exiting on signal 15
Jul 7 15:24:40 ns syslogd 1.3-3: restart (remote reception).
Jul 7 15:24:42 ns kernel: klogd 1.3-3, log source = /proc/kmsg started.
Jul 7 15:24:42 ns kernel: Inspecting /boot/System.map
Jul 7 15:24:43 ns kernel: Loaded 7617 symbols from /boot/System.map.
Jul 7 15:24:43 ns kernel: Symbols match kernel version 2.2.16.
Jul 7 15:24:43 ns kernel: Loaded 124 symbols from 2 modules.

I take it this was when I restarted syslog after modifying it

Now these are the worrying ones...

Jul 7 15:29:03 ns sendmail[16317]: starting daemon (8.9.3): SMTP
Jul 7 15:29:03 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:03 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:03 ns sendmail[16320]: starting daemon (8.9.3): queueing@00:15:00
Jul 7 15:29:06 ns mailscanner[16327]: MailScanner E-Mail Virus Scanner 
version 3.21 starting.
Jul 7 15:29:06 ns mailscanner[16327]: Configuring mailscanner for sendmail...
Jul 7 15:29:06 ns mailscanner[16327]: Using locktype = flock
Jul 7 15:29:08 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:08 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:13 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:13 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:18 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:18 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:23 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:23 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:28 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:28 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:33 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:33 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:38 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:38 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:43 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:43 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:48 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:48 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:53 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
cannot bind: Address already in use
Jul 7 15:29:53 ns sendmail[16317]: problem creating SMTP socket
Jul 7 15:29:53 ns sendmail[16317]: NOQUEUE: SYSERR(root): opendaemonsocket: 
server SMTP socket wedged: exiting

Anyone any idea if this is normal we don't have SMTP enabled for customers 
only POP3 and is this a problem?

Jul 7 15:54:30 ns sendmail[17981]: starting daemon (8.9.3): SMTP
Jul 7 15:54:30 ns sendmail[17984]: starting daemon (8.9.3): queueing@00:15:00

Why's the daemon starting again here?

I sent through a couple of test emails to see if mailscanner had stuck on 
it xsender header but no joy...ssh'd into the server and ran top and sure 
enough there it was mailscanner - mmmhhhh!!! then just when I thought it 
wasn't working and I'd have to try a reinstall the following email came 
through...

To: postmaster@xxxxxxxxxxx Subject: Warning: E-mail viruses detected
The following e-mail messages were found to have viruses in them:
Sender: <iak@xxxxxxxxxxxx>
Recipient: <sales@xxxxxxxxxxx>
Subject: Frameborder
MessageID: QAA19445
Report: /var/spool/MailScanner/incoming/QAA19445/.pif Infection: W32/Klez.H@mm
Shortcuts to MS-Dos programs are very dangerous in email in .pif
--
MailScanner
Email Virus Scanner

Yahoo it did something now did it only detect or did it actually clean the 
Klez it's running with F-Prot ?

Regards

Chae