# ls -ld /var/log/dspam drwxrwx--- 2 dspam mail 23 Aug 7 15:28 /var/log/dspam
mine is drwxrwx--- 2 dspam mail 81 Feb 18 03:57 /var/log/dspam I don't know how to achieve what you ask, sorry # ls -la /var/log/dspam -rw-rw---- 1 vpopmail mail 10473967 Jun 8 08:04 sql.errors mine is total 10256 drwxrwx--- 2 dspam mail 81 Feb 18 03:57 . drwxr-xr-x. 16 root root 4096 Aug 7 17:53 .. -rw-r--r-- 1 dspam mail 0 Feb 18 03:57 sql.errors -rw-rw---- 1 vpopmail mail 10493507 Feb 18 01:53 sql.errors-20200218 -rw------- 1 dspam mail 0 Feb 18 03:57 sql.errors-20200218.gz do you want I remove all others files ? El vie., 7 ago. 2020 a las 18:47, Eric Broch (<ebr...@whitehorsetc.com>) escribió: > and change yours to look like mine > > # ls -ld /var/log/dspam > drwxrwx--- 2 dspam mail 23 Aug 7 15:28 /var/log/dspam > # ls -la /var/log/dspam > -rw-rw---- 1 vpopmail mail 10473967 Jun 8 08:04 sql.errors > > On 8/7/2020 3:44 PM, Eric Broch wrote: > > don't stop it. allow it to go until it starts. sometimes it takes quite a > while. > On 8/7/2020 3:39 PM, Diego Piñon Conde wrote: > > systemctl start clamd@scan > > freeze and do nothing > > # ls -ld /var/log/dspam > > *drwxrwx--- 2 dspam mail 81 Feb 18 03:57 /var/log/dspam* > > # ls -la /var/log/dspam > > > > > > > *total 10256 drwxrwx--- 2 dspam mail 81 Feb 18 03:57 . > drwxr-xr-x. 16 root root 4096 Aug 7 17:53 .. -rw-r--r-- 1 dspam > mail 0 Feb 18 03:57 sql.errors -rw-rw---- 1 vpopmail mail > 10493507 Feb 18 01:53 sql.errors-20200218 -rw------- 1 dspam mail > 0 Feb 18 03:57 sql.errors-20200218.gz* > > > > > > > El vie., 7 ago. 2020 a las 18:31, Eric Broch (<ebr...@whitehorsetc.com>) > escribió: > >> What's the output of the following commands? >> >> # ls -ld /var/log/dspam >> >> and >> >> # ls -la /var/log/dspam >> On 8/7/2020 2:46 PM, Diego Piñon Conde wrote: >> >> This is the only weird message i can repeated times see from now >> [00 ]Aug 7 17:40:54 pegasus dspam[19962]: Unable to open file for >> writing: /var/log/dspam/sql.errors: Permission denied >> [00]Aug 7 17:40:55 pegasus dspam[19962]: bailing on error -2 >> [00]Aug 7 17:40:55 pegasus dspam[19962]: received invalid result >> (!DSR_ISSPAM && !DSR_ISINNOCENT): -2 >> [00]Aug 7 17:40:55 pegasus dspam[19962]: process_message returned error >> -5. delivering. >> >> I 'm still looking >> >> El vie., 7 ago. 2020 a las 17:06, Philip Nix Guru (<phi...@ows.ch>) >> escribió: >> >>> Hello >>> >>> a bit hard to debug without checking system >>> >>> if you got multitail >>> >>> create a file with : >>> >>> multitail -Z red,black,inverse -T -S -x "%m %u@%h %f (%t) [%l]" \ >>> -m 0 -n 49 -cS qmail-send -l "qmlog -f send" \ >>> -m 0 -n 49 -cS qmail-smtp3 -em "policy_check" -em "CHKUSER" -em >>> "simscan" -em "spamdyke" -em "qmail-smtpd: " -l "qmlog -f smtp" \ >>> -m 0 -n 49 -cS qmtspamassassin -ev "prefork" -ev "(connection from >>> localhost)" -l "tail -f /var/log/maillog" \ >>> # -m 0 -n 49 -cS qmail-smtp -em "policy_check" -em "CHKUSER" -em >>> "simscan" -em "spamdyke" -em "qmail-smtpd: " -em "spf-reject" -l "qmlog -f >>> submission" \ >>> # -m 0 -n 49 -cS qmtspamassassin -ev "prefork" -ev "(connection from >>> localhost)" -l "tail -f /var/log/maillog" >>> >>> and just sh it, and check if you see anything weird/strange, delay ... >>> >>> in the mail transaction >>> >>> The amount of messages in the local queue is still descending but I >>> don't know why so slow! >>> >>> >>> >>> >>> El vie., 7 ago. 2020 a las 15:48, Philip Nix Guru (<phi...@ows.ch>) >>> escribió: >>> >>>> Hello >>>> >>>> But the mail does get delivered just with a very long delay ? >>>> >>>> and you disabled clamd but it still running ? >>>> >>>> >>>> Check a delivered mail, look at the headers, make sure clamd is really >>>> not running >>>> >>>> anything suspicous in /var/log/clamd/clamd.log ? >>>> >>>> >>>> qmHandle -s shows what ? >>>> >>>> >>>> On 8/7/20 8:34 PM, Diego Piñon Conde wrote: >>>> >>>> 2 hs has passed and the local queue has 3530 msg (it was 3700 at some >>>> point). Beside clamd that it is still running and time to time take 100% >>>> cpu usage (I don't understand why because qmailtoaster it's supoust that >>>> not use it anymore), cpu usage is normally below 20% and memory is the >>>> same. So why does it take so long to deliver local msg! >>>> >>>> I'm in UTC -3, so probably all of you are snoring. I will keep working >>>> til qmailtoaster works normally, I hope when you wake up you can give me a >>>> hand. >>>> >>>> I will really appreciate that. Thanks in advance! >>>> >>>> El vie., 7 ago. 2020 a las 12:29, Philip Nix Guru (<phi...@ows.ch>) >>>> escribió: >>>> >>>>> Hello >>>>> >>>>> what you could start by doing is disabling >>>>> >>>>> idle-timeout-secs=xx in /etc/spamdyke/spamdyke.conf >>>>> >>>>> just comment the line >>>>> >>>>> check in a few hours if your TIMEOUT drastically decreased >>>>> >>>>> then you can adapt the idle-timeout delay >>>>> >>>>> >>>>> If not then, we can check other things >>>>> >>>>> >>>>> Cheers >>>>> >>>>> >>>>> On 8/7/20 4:40 PM, Diego Piñon Conde wrote: >>>>> >>>>> Hi Philip >>>>> this is the tail of /var/log/maillog >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> *Aug 7 11:31:01 pegasus spamdyke[2968]: TIMEOUT from: >>>>> sciottilili...@gmail.com <sciottilili...@gmail.com> to: >>>>> filibe...@tarjetacliper.com <filibe...@tarjetacliper.com> origin_ip: >>>>> 209.85.215.175 origin_rdns: mail-pg1-f175.google.com >>>>> <http://mail-pg1-f175.google.com> auth: (unknown) encryption: TLS reason: >>>>> TIMEOUT Aug 7 11:31:03 pegasus spamdyke[2970]: TIMEOUT from: >>>>> nore...@messages.sonicwall.com <nore...@messages.sonicwall.com> to: >>>>> pi...@tarjetacliper.com <pi...@tarjetacliper.com> origin_ip: >>>>> 209.167.231.144 origin_rdns: mail01.messages.sonicwall.com >>>>> <http://mail01.messages.sonicwall.com> auth: (unknown) encryption: TLS >>>>> reason: TIMEOUT Aug 7 11:31:03 pegasus spamdyke[2969]: TIMEOUT from: >>>>> v-cjcdika_pmnlhikcme_gmicmlkp_gmicmlk...@bounce.info.bancopatagonia.com.ar >>>>> <v-cjcdika_pmnlhikcme_gmicmlkp_gmicmlk...@bounce.info.bancopatagonia.com.ar> >>>>> to: scio...@tarjetacliper.com <scio...@tarjetacliper.com> origin_ip: >>>>> 192.156.219.80 origin_rdns: mail7756.info.bancopatagonia.com.ar >>>>> <http://mail7756.info.bancopatagonia.com.ar> auth: (unknown) encryption: >>>>> TLS reason: TIMEOUT Aug 7 11:31:06 pegasus spamdyke[2974]: TIMEOUT from: >>>>> bounce-10710_html-121882056-2177875-6399888-...@bounce.mail.bbva.com.ar >>>>> <bounce-10710_html-121882056-2177875-6399888-...@bounce.mail.bbva.com.ar> >>>>> to: bondo...@tarjetacliper.com <bondo...@tarjetacliper.com> origin_ip: >>>>> 13.111.6.12 origin_rdns: mta.mail.bbva.com.ar >>>>> <http://mta.mail.bbva.com.ar> >>>>> auth: (unknown) encryption: TLS reason: TIMEOUT Aug 7 11:31:24 pegasus >>>>> vpopmail[3225]: vchkpw-submission: (PLAIN) login success >>>>> rose...@tarjetacliper.com:10.10.10.8 >>>>> <rose...@tarjetacliper.com:10.10.10.8> >>>>> Aug 7 11:31:27 pegasus spamdyke[3004]: TIMEOUT from: >>>>> www...@xpressus.emsmtp.com <www...@xpressus.emsmtp.com> to: >>>>> crisgar...@tarjetacliper.com <crisgar...@tarjetacliper.com> origin_ip: >>>>> 91.211.241.9 origin_rdns: pmta41009.emsmtp.com >>>>> <http://pmta41009.emsmtp.com> auth: (unknown) encryption: TLS reason: >>>>> TIMEOUT Aug 7 11:31:32 pegasus spamdyke[3006]: TIMEOUT from: >>>>> sd...@meridionalseguros.com.ar <sd...@meridionalseguros.com.ar> to: >>>>> segu...@tarjetacliper.com <segu...@tarjetacliper.com> origin_ip: >>>>> 40.107.76.91 origin_rdns: >>>>> mail-eopbgr760091.outbound.protection.outlook.com >>>>> <http://mail-eopbgr760091.outbound.protection.outlook.com> auth: (unknown) >>>>> encryption: TLS reason: TIMEOUT Aug 7 11:31:34 pegasus spamdyke[3050]: >>>>> TIMEOUT from: antonel...@pseguros.com.ar <antonel...@pseguros.com.ar> to: >>>>> segu...@tarjetacliper.com <segu...@tarjetacliper.com> origin_ip: >>>>> 190.210.19.10 origin_rdns: webmail.provinciaseguros.com >>>>> <http://webmail.provinciaseguros.com> auth: (unknown) encryption: TLS >>>>> reason: TIMEOUT Aug 7 11:31:38 pegasus spamdyke[3074]: TIMEOUT from: >>>>> sebastian.sa...@osde.com.ar <sebastian.sa...@osde.com.ar> to: >>>>> rfernan...@tarjetacliper.com <rfernan...@tarjetacliper.com> origin_ip: >>>>> 209.85.210.45 origin_rdns: mail-ot1-f45.google.com >>>>> <http://mail-ot1-f45.google.com> auth: (unknown) encryption: TLS reason: >>>>> TIMEOUT Aug 7 11:31:42 pegasus spamdyke[3158]: TIMEOUT from: >>>>> dpinmue...@mardelplata.gob.ar <dpinmue...@mardelplata.gob.ar> to: >>>>> diu...@tarjetacliper.com <diu...@tarjetacliper.com> origin_ip: >>>>> 200.41.224.100 origin_rdns: mail.mardelplata.gov.ar >>>>> <http://mail.mardelplata.gov.ar> auth: (unknown) encryption: (none) >>>>> reason: >>>>> TIMEOUT* >>>>> >>>>> I've checked scan.conf and logverbose = yes >>>>> >>>>> >>>>> El vie., 7 ago. 2020 a las 11:27, Philip Nix Guru (<phi...@ows.ch>) >>>>> escribió: >>>>> >>>>>> Hello >>>>>> >>>>>> can you check if you got any >>>>>> >>>>>> TIMEOUT in /var/log/maillog log file >>>>>> >>>>>> since you did your update >>>>>> >>>>>> >>>>>> Check also your scan.conf file >>>>>> >>>>>> /etc/clamd.d/scan.conf >>>>>> >>>>>> Enable Log (verbose) , >>>>>> >>>>>> LogVerbose yes >>>>>> >>>>>> >>>>>> >>>>>> On 8/7/20 4:12 PM, Diego Piñon Conde wrote: >>>>>> >>>>>> Hi all >>>>>> >>>>>> I'm running qmail toaster on CentOS 7. >>>>>> >>>>>> Because I had problems with freshclam (terrible slow db update), >>>>>> yesterday I changed clamAV to Epel version. >>>>>> >>>>>> I don't know if it's relevant, but after that local delivery was too >>>>>> slow. >>>>>> >>>>>> Local queue was increasing in size and every email received by >>>>>> clients was received 5 or 6 times. >>>>>> >>>>>> I thinked maybe clamd it's the culprit, so I've changed clamd=no in >>>>>> simcontrol and did qmailctl cdb but nothing has changed. >>>>>> >>>>>> My knowledge is limited and I will appreciate any help >>>>>> >>>>>>
