Re: [cobalt-users] MailScanner and SpamAssassin RAQ550

[Per Magne Knutsen <per.knutsen@xxxxxxxxxxxxxx>]

>I have MailScanner 4.13-3 and Spamassassin 2.50 installed on a Raq550.
>MailScanner childs frequently die causing MailScanner to no process mail (it
>queues up until I restart it)

Bill, did you manage to fix this problem? I am in a very similar situation after applying the sendmail patch from PKG-Master on one of my 
RaQ3's.

MailScanner only processes emails when restarted (but only a maximum of 100), then stops. All mail queues up until I restart MailScanner. It 
leaves the following lines in /var/log/maillog when running in verbose modus:

Mar 10 21:54:17 ns1 mailscanner[8626]: MailScanner E-Mail Virus Scanner version 3.22 starting.
Mar 10 21:54:17 ns1 mailscanner[8626]: Configuring mailscanner for sendmail...
Mar 10 21:54:17 ns1 mailscanner[8626]: lock.pl sees Config::LockType =
Mar 10 21:54:17 ns1 mailscanner[8626]: lock.pl sees MTA::LockType =  flock
Mar 10 21:54:17 ns1 mailscanner[8626]: lock.pl sees have_module =  0
Mar 10 21:54:17 ns1 mailscanner[8626]: Using locktype = flock
Mar 10 21:54:18 ns1 mailscanner[8626]: Startup: found 187 messages waiting
Mar 10 21:54:18 ns1 mailscanner[8626]: Scanning 100 messages, 2414909 bytes
Mar 10 21:54:19 ns1 mailscanner[8626]: RBL Checks returned 0
Mar 10 21:54:19 ns1 last message repeated 3 times
Mar 10 21:54:20 ns1 mailscanner[8626]: RBL Checks returned 0
Mar 10 21:54:32 ns1 last message repeated 96 times
Mar 10 21:54:32 ns1 mailscanner[8626]: Going to scan 100 messages
Mar 10 21:54:47 ns1 mailscanner[8626]: Commencing scanning by f-prot...
Mar 10 21:54:52 ns1 mailscanner[8626]: Completed scanning by f-prot
Mar 10 21:54:52 ns1 mailscanner[8626]: Possible malicious batch file script in etec.bat
Mar 10 21:54:52 ns1 mailscanner[8626]: Found 3 viruses in messages QAA20659,SAA29559
Mar 10 21:54:53 ns1 mailscanner[8626]: Scanned 100 messages, 2414909 bytes in 20 seconds

So it reports more or less that all is ok, except for the RBL check which I don't think is related. Any comments? The 100 messages it 
processes gets through and into the respective users' inboxes.

When I restart MailScanner it gives me an error during shutdown.

[root@ns1 mail]# Shutting down MailScanner daemons:
              MailScanner:       ERROR!
              incoming sendmail: sendmail ok
              outgoing sendmail: sendmail ok
Starting MailScanner daemons:
         incoming sendmail: ok
         outgoing sendmail: ok
         MailScanner:       In Debugging mode, not forking...

ps aux shows no mailscanner running neither before, during or after restart. I find that a bit odd... Does mailscanner perhaps run by some 
other name? Why cant I see it when its *obviously* running?

I also get the following error message in maillog occasionally:

Mar 10 21:56:22 ns1 sendmail[9103]: NOQUEUE: SYSERR(root): opendaemonsocket: cannot bind: Address already in use
Mar 10 21:56:22 ns1 sendmail[9103]: problem creating SMTP socket

Any idea what these are?

All help appreciated,
Per



>This was manually installed.  When it doesn't die it works quite well, but I
>am concerned it's fairly unstable.  The MailScanner page said to update to
>4.13-3 when using SA 2.50 so I have no idea what the problem is.  I am
>looking to see if anyone else is experiencing the same problem.
>
>MailScanner[7085]: MailScanner child caught a SIGHUP
>
>Then nothing is running and I have to restart it.  No apparent reason for it
>dieing, just all of a sudden I get several of those SIGHUP messages.  The
>only thing I can think of is it's a load problem...it was running fine when
>doing mail on one test domain but now that I moved several over it's having
>issues.