Robert wrote: > Running Amavisd-new 2.3.3 with Postfix 2.2.8 and looking for some help trying > to track down an > issue recently come across. Last week, and again this morning, the queue > started piling up and found that amavisd was refusing connections, > tried restarting and it kept complaining that the address was in use, > finally rebooted and all was well again.
> Now, trying to find what caused the problem is baffling me, seems to > have happened after 8:30am this morning, I have the last successfully > sent message to amavis on 127.0.0.1 at 08:38:42. After that, the next > message in the log, in the same second, is like this: > esmtp# grep E7D2F7E977 /var/log/maillog > Jan 31 08:38:42 esmtp postfix/smtpd[33875]: E7D2F7E977: > client=athedsl-11816.otenet.gr[87.202.46.132] > Jan 31 08:38:47 esmtp postfix/cleanup[34418]: E7D2F7E977: > message-id=<[EMAIL PROTECTED]> > Jan 31 08:38:50 esmtp postfix/qmgr[68872]: E7D2F7E977: > from=<[EMAIL PROTECTED]>, size=3772, nrcpt=1 (queue active) > Jan 31 08:57:43 esmtp postfix/qmgr[34694]: E7D2F7E977: skipped, still > being delivered > Jan 31 08:58:45 esmtp postfix/qmgr[34811]: E7D2F7E977: skipped, still > being delivered > Jan 31 08:58:50 esmtp postfix/smtp[33217]: E7D2F7E977: > to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1], delay=1208, > status=deferred (conversation with 127.0.0.1[127.0.0.1] timed out while > sending end of data -- message may be sent more than once) > Jan 31 08:59:44 esmtp postfix/qmgr[34811]: E7D2F7E977: > from=<[EMAIL PROTECTED]>, size=3772, nrcpt=1 (queue active) > Jan 31 09:03:50 esmtp postfix/qmgr[34811]: E7D2F7E977: > to=<[EMAIL PROTECTED]>, relay=none, delay=1508, status=deferred (delivery > temporarily suspended: connect to 127.0.0.1[127.0.0.1]: read timeout) > Jan 31 09:13:28 esmtp postfix/qmgr[898]: E7D2F7E977: > from=<[EMAIL PROTECTED]>, size=3772, nrcpt=1 (queue active) > Jan 31 09:20:50 esmtp postfix/smtp[1019]: E7D2F7E977: > to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1], delay=2528, > status=sent (250 2.5.0 Ok, id=01950-01-9, BOUNCE) > Jan 31 09:20:50 esmtp postfix/qmgr[898]: E7D2F7E977: removed > You can see I was rebooted around 09:10 and the message then went out. > There are no errors between the one at 08:38 and this message, you'll > see the first line below is the last successfully sent message to > localhost and the last line is the message above: > Jan 31 08:38:42 esmtp postfix/smtp[33212]: EAD457E92B: > to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1], delay=36, > status=sent (250 2.5.0 Ok, id=34300-04-3, BOUNCE) > Jan 31 08:38:42 esmtp postfix/qmgr[68872]: EAD457E92B: removed > Jan 31 08:38:42 esmtp amavis[34417]: (34417-02) Checking: vGq47aHz25aN > <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> > Jan 31 08:38:42 esmtp amavis[34417]: (34417-02) cached > 6a628cae5bdb48f23af9e4b6005f495e from <[EMAIL PROTECTED]> (1,1) > Jan 31 08:38:42 esmtp amavis[34417]: (34417-02) p001 1 Content-Type: > text/plain, size: 1800 B, name: > Jan 31 08:38:42 esmtp postfix/cleanup[34429]: 4FE6D7E976: > message-id=<[EMAIL PROTECTED]> > Jan 31 08:38:42 esmtp postfix/qmgr[68872]: 4FE6D7E976: from=<>, > size=2514, nrcpt=1 (queue active) > Jan 31 08:38:42 esmtp postfix/smtpd[33882]: disconnect from > localhost.webtent.net[127.0.0.1] > Jan 31 08:38:42 esmtp amavis[34290]: (34290-04-6) SEND via SMTP: <> -> > <[EMAIL PROTECTED]>, 250 2.6.0 Ok, id=34290-04-6, from > MTA([127.0.0.1]:10025): 250 Ok: queued as 4FE6D7E976 > Jan 31 08:38:42 esmtp amavis[34417]: (34417-02) local delivery: <> -> > <spam-quarantine>, mbx=/var/virusmails/spam-vGq47aHz25aN.gz > Jan 31 08:38:42 esmtp amavis[34417]: (34417-02) SPAM, > <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, Yes, score=22.241 > tag=-999 tag2=4.8 kill=4.8 tests=[BAYES_99=4.3, > DATE_IN_FUTURE_12_24=2.767, DIGEST_MULTIPLE=0.765, > MIME_BASE64_NO_NAME=0.224, MIME_BASE64_TEXT=1.885, PYZOR_CHECK=3.7, > RATWARE_NAME_ID=4.1, RAZOR2_CF_RANGE_51_100=0.5, > RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=2.5], quarantine > vGq47aHz25aN (spam-quarantine) > Jan 31 08:38:42 esmtp postfix/smtpd[34319]: NOQUEUE: reject: RCPT from > unknown[218.79.160.79]: 554 Service unavailable; Client host > [218.79.160.79] blocked using cbl.abuseat.org; Blocked - see > http://cbl.abuseat.org/lookup.cgi?ip=218.79.160.79; > from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]> proto=SMTP > helo=<ameritech.net> > Jan 31 08:38:42 esmtp amavis[34417]: (34417-02) NOTICE: Not sending DSN, > spam level exceeds DSN cutoff level for all recips, mail intentionally > dropped > Jan 31 08:38:42 esmtp amavis[34290]: (34290-04-6) Blocked SPAM, > [219.192.248.55] <[EMAIL PROTECTED]> -> > <[EMAIL PROTECTED]>, quarantine: spam-vYNuNR+BFNyQ.gz, > Message-ID: <[EMAIL PROTECTED]>, mail_id: > vYNuNR+BFNyQ, Hits: 8.61, 19791 ms > Jan 31 08:38:42 esmtp amavis[34417]: (34417-02) Blocked SPAM, > [61.138.119.114] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, > quarantine: spam-vGq47aHz25aN.gz, Message-ID: > <[EMAIL PROTECTED]>, mail_id: > vGq47aHz25aN, Hits: 22.241, 437 ms > Jan 31 08:38:42 esmtp amavis[34529]: TIMING [total 110 ms] - bdb-open: > 110 (100%)100, rundown: 0 (0%)100 > Jan 31 08:38:42 esmtp postfix/smtpd[33875]: E7D2F7E977: > client=athedsl-11816.otenet.gr[87.202.46.132] > I cannot find any errors in todays log other than DNS lookup and other > standard errors. How can I find what happened? I replied: http://marc.theaimsgroup.com/?l=postfix-users&m=113880722317710&w=2 http://article.gmane.org/gmane.mail.spam.spamassassin.general/76985 Gary V ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
