Re: [AMaViS-user] can't figure why local delivery is getting a spam score
That's what I'm talking about. Thanks alot. I'll try this on one MX and
see how things go for a week or two.
Cheers,
Gary V wrote:
Gordon wrote:
That makes sense. The primary MX gets much more traffic than then backup
MX, but I was hoping that Amavisd-new would not bother running spam
tests on something clearly generated by itself.
If you are running Postfix, you can bypass amavisd-new for mail that
is created by the machine itself, but this also means any locally
generated mail will bypass amavisd-new, so it may not be appropriate
in all cases. In master.cf, add '-o content_filter=' to the pickup
service:
pickupfifo n - - 60 1 pickup
-o content_filter=
Alternately, you can remove this from main.cf:
content_filter = smtp-amavis:[127.0.0.1]:10024
and only include it in master.cf for the desired services, for example:
smtp inet n - - - - smtpd
-o content_filter=smtp-amavis:[127.0.0.1]:10024
Or you could use a policy bank instead of bypassing amavisd-new
altogether if you like:
pickupfifo n - - 60 1 pickup
-o content_filter=smtp-amavis:[127.0.0.1]:10026
then in amavisd.conf, something like:
$inet_socket_port = [10024,10026]; # change this default
$interface_policy{'10026'} = 'BYPASSSPAM';
$policy_bank{'BYPASSSPAM'} = {
bypass_spam_checks_maps = [1],
final_spam_destiny = D_PASS,
};
Gary V
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] can't figure why local delivery is getting a spam score
Solaris 9 Postfix 2.2.10 Amavisd-New 2.4.0 Hi, I have configured two machines with amavisd-new. I built these machines at relatively the same time and I just copied the config from the good machine to the problem machine and changed the hostname section. When running the daily mail/spam reports, one machine doesn't tag the mail as spam: Received: from localhost (localhost [127.0.0.1])by osiris.eng.fsu.edu (Postfix) with ESMTP id 45BB81934E for [EMAIL PROTECTED]; Mon, 12 Jun 2006 23:58:42 -0400 (EDT) X-Virus-Scanned: by amavisd-new using ClamAV at eng.fsu.edu X-Spam-Score: - X-Spam-Status: No, score=x required=6 tests=[] While the other machine does: Received: from localhost (localhost [127.0.0.1])by isis.eng.fsu.edu (Postfix) with ESMTP id E1F5E1A56DD for [EMAIL PROTECTED]; Mon, 12 Jun 2006 23:58:25 -0400 (EDT) X-Virus-Scanned: by amavisd-new using ClamAV at eng.fsu.edu X-Spam-Level: * X-Spam-Status: No, score=5.436 required=6 tests=[BIZ_TLD=1.169, INFO_TLD=0.813, IP_LINK_PLUS=1.047, MAILTO_TO_SPAM_ADDR=0.276, NO_REAL_NAME=0.55, NO_RELAYS=-0.001, NUMERIC_HTTP_ADDR=0.585, URI_NOVOWEL=0.997] Now whats really odd to me is that on rare occasions, the problem machine will not tag my local mail as spam but overwhelmingly it does. I have looked at the levels of all perl modules and they are the same. As I stated earlier the amavisd.conf is identical, being copied from one machine to the other. Finally, the local.cf associated with spamassassin is identical on both machines. Can anyone offer any insight into this problem? Thanks to any and all who may be of assistance. Cheers, Gordon ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] can't figure why local delivery is getting a spam score
Oh, you're right. On the machine not showing a spam score, the log shows: Jun 12 23:58:42 osiris amavis[5815]: [ID 702911 mail.info] (05815-08) spam_scan: not wasting time on SA, message longer than 204800 bytes: 326+312287 That makes sense. The primary MX gets much more traffic than then backup MX, but I was hoping that Amavisd-new would not bother running spam tests on something clearly generated by itself. This got me looking in my /var/amavis/.spamassassin directory where I noticed that all these files hadn't been updating since I upgraded to BerkeleyDB4 from BerkeleyDB3, including auto-whitelist. I've deleted those files and restarted Amavisd-new. I need to watch this for sometime and see what is happening. Thanks for your insights. You've helped kickstart my brain (: Mark Martinec wrote: Gordon, ...one machine doesn't tag the mail as spam: X-Spam-Score: - X-Spam-Status: No, score=x required=6 tests=[] While the other machine does: X-Spam-Status: No, score=5.436 required=6 tests=... On the first machine SA was not called or timed out. The reason could be: mail size larger than $sa_mail_body_size_limit, sender white- or blacklisted, recipient in @bypass_spam_checks_maps, but probably most likely in your case: SA processing time exceeded $sa_timeout value, which for version older than 2.4.1 may be on the short side for a busy host (starting with 2.4.1 the $sa_timeout does not matter). Your logs could tell what happened. Mark ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] status=deferred
Hi, I don't know what has happened to my Solaris 9 (built-in) Perl 5.6.1 install but switching back to the older Digest::MD5 (2.33) and trying to get my old, formerly working Amavisd-new 2.33 (A coincidence, I assure you) setup running was a failure. I upgraded a bunch of Perl modules at the beginning of this exercise to just be at the latest level of everything before trying to get Amavisd-new 2.4.0 to work. I did eliminate BerkeleyDB as a suspect by turning off db in the amavisd.conf. I've since turned it back on. I'm at a loss for tracking this one down exactly but the problem has been traced to something in Digest::MD5 being broken or incompatible with Perl 5.6.1. That being the case, I went to SunFreeware.com and downloaded the latest Perl (5.8.7 as of 13 April 2006), put /usr/local/bin at the front of my $PATH, renamed /usr/bin/perl to /usr/bin/perl.sun, linked /usr/bin/perl to /usr/local/bin/perl and began the loong process of installing perl modules to get amavisd-new 2.4.0 in a working state. I am getting some errors/warnings with SpamAssassin which I need to track down but Amavisd-new 2.40 is now working. Maybe this is for the best, so I will stick with this SunFreeware Perl package for the time being. Marc, thanks for all you help through this process. Cheers, Mark Martinec wrote: Gordon, Hi, I re-installed Digest::MD5 from scratch - make, make test, make install Ok, thanks, that eliminates one of the likely possiblities. The other is: Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Creating db in /var/amavis/db/; BerkeleyDB 0.27, libdb 3.3 Most people are now running libdb 4.2 or later. It may even work with 3.3, but experience is scarce. Also, there might be a discrepancy between the library and include files of libdb, so that BerkeleyDB installation may have gotten it wrong. Apr 11 10:23:16 isis.eng.fsu.edu /usr/local/sbin/amavisd[15532]: (15532-01) ESMTP MAIL FROM:[EMAIL PROTECTED] SIZE=4323\r\n Apr 11 10:23:16 isis.eng.fsu.edu /usr/local/sbin/amavisd[15532]: (15532-01) prolong_timer SMTP MAIL received: timer set to = 300 s Apr 11 10:23:16 isis.eng.fsu.edu /usr/local/sbin/amavisd[15532]: (15532-01) check_mail_begin_task: task_count=1 Apr 11 10:23:16 isis.eng.fsu.edu /usr/local/sbin/amavisd[15532]: (15532-01) TempDir::prepare: creating directory /var/amavis/tmp/amavis-20060411T102316-15532 Hm, the next thing should have been: TempDir::prepare_file: creating file Apr 11 10:23:16 isis.eng.fsu.edu /usr/local/sbin/amavisd[15534]: Net::Server: 2006/04/11-10:23:16 CONNECT TCP Peer: 127.0.0.1:41876 Something fatal happened to process 15532, and a substitute process was created automatically after it vanished. Was your log collected from a (syslog)file or did you run 'amavisd debug'? The later may be able to utter some final message on stderr. Running with strace -f could show what were the last system calls before a process crash. Mark --- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnkkid=110944bid=241720dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] status=deferred
Hi, I re-installed Digest::MD5 from scratch - make, make test, make install - all went well but still the same problem: Apr 11 10:23:16 isis postfix/smtp[16296]: [ID 197553 mail.info] 5533D2E8BA: to=[EMAIL PROTECTED], orig_to=[EMAIL PROTECTED], relay=127.0.0.1[127.0.0.1], delay=-541, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending MAIL FROM) Apr 11 10:23:16 isis postfix/smtp[16297]: [ID 197553 mail.info] 6B2902E943: to=[EMAIL PROTECTED], relay=127.0.0.1[127.0.0.1], delay=-590, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending MAIL FROM) Apr 11 10:23:16 isis postfix/smtp[16296]: [ID 197553 mail.info] 5533D2E8BA: to=[EMAIL PROTECTED], orig_to=[EMAIL PROTECTED], relay=127.0.0.1[127.0.0.1], delay=-541, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending MAIL FROM) Apr 11 10:23:17 isis postfix/smtp[16297]: [ID 197553 mail.info] 812082EA32: to=[EMAIL PROTECTED], relay=127.0.0.1[127.0.0.1], delay=-833, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending end of data -- message may be sent more than once) Mark Martinec wrote: It looks like a process 24132 dies or a horrible sudden death just before mail checking starts. Could be a problem in crypto library. Try reinstalling module Digest::MD5 and make sure to run its self-diagnostics at installation time. Mark Here is the new output from amavisd debug: # amavisd -u amavis debug Apr 11 10:22:36 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: starting. /usr/local/sbin/amavisd at isis.eng.fsu.edu amavisd-new-2.4.0 (20060403) Apr 11 10:22:36 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: user=amavis, EUID: 11369 (11369); group=184, EGID: 184 184 (184 184); log_level=4 Apr 11 10:22:36 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Perl version 5.006001 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: INFO: no optional modules: DBD::mysql Sys::Hostname::Long Mail::SPF::Query Net::CIDR::Lite Mail::SpamAssassin::Plugin::DomainKeys Mail::DomainKeys::Header Mail::DomainKeys::Message Mail::DomainKeys::Policy Mail::DomainKeys::Signature Mail::DomainKeys::Key Mail::DomainKeys::Key::Public Crypt::OpenSSL::RSA auto::Crypt::OpenSSL::RSA::new_public_key auto::Crypt::OpenSSL::RSA::load_public_key auto::Crypt::OpenSSL::RSA::_new auto::Crypt::OpenSSL::RSA::DESTROY IP::Country::Fast Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: SpamControl: init_pre_chroot done Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Net::Server: 2006/04/11-10:22:37 Amavis (type Net::Server::PreForkSimple) starting! pid(15523) Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Net::Server: Binding to UNIX socket file /var/amavis/amavisd.sock using SOCK_STREAM Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Net::Server: Group Not Defined. Defaulting to EGID '184 184' Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Net::Server: User Not Defined. Defaulting to EUID '11369' Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Net::Server: Setting up serialization via flock Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Amavis::Conf2.062 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Archive::Tar1.29 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Archive::Zip1.16 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module BerkeleyDB 0.27 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Compress::Zlib 1.41 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Convert::TNEF 0.17 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Convert::UUlib 1.06 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module DBI 1.47 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module DB_File 1.811 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Digest::MD5 2.36 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module MIME::Entity5.420 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module MIME::Parser5.420 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module MIME::Tools 5.420 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Mail::Header1.74 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Mail::Internet 1.74 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Mail::SpamAssassin 3.001001 Apr 11 10:22:37 isis.eng.fsu.edu /usr/local/sbin/amavisd[15523]: Module Net::Cmd2.26 Apr 11
Re: [AMaViS-user] status=deferred
Interestingly, if I test things from a logon window I see the following: # postsuper -r ALL postsuper: Requeued: 6 messages Apr 11 14:25:54 isis genunix: NOTICE: core_log: amavisd[27426] setid process, core not dumped: /var/core/core.amavisd.27426.isis.11369.184.1144779954 Apr 11 14:25:54 isis genunix: NOTICE: core_log: amavisd[27427] setid process, core not dumped: /var/core/core.amavisd.27427.isis.11369.184.1144779954 Apr 11 14:25:54 isis genunix: NOTICE: core_log: amavisd[28213] setid process, core not dumped: /var/core/core.amavisd.28213.isis.11369.184.1144779954 Apr 11 14:25:55 isis genunix: NOTICE: core_log: amavisd[28212] setid process, core not dumped: /var/core/core.amavisd.28212.isis.11369.184.1144779955 Apr 11 14:25:55 isis genunix: NOTICE: core_log: amavisd[28215] setid process, core not dumped: /var/core/core.amavisd.28215.isis.11369.184.1144779955 --- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnkkid=110944bid=241720dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] status=deferred
# truss -f amavisd -u amavis debug ... blah blah blah ... startup stuff ... towards the end of initialization of amavisd Apr 11 14:39:01 isis.eng.fsu.edu /usr/local/sbin/amavisd[8243]: 8243: write(2, A p r 1 1 1 4 : 3 9.., 64) = 64 Net::Server: Starting 2 children8243: write(2, N e t : : S e r v e r :.., 34) = 34 8243: write(2, \n, 1) = 1 8243: sigaction(SIGCLD, 0xFFBFF7A0, 0xFFBFF820) = 0 8243: llseek(4, 0, SEEK_CUR) Err#29 ESPIPE 8243: llseek(7, 0, SEEK_CUR) Err#29 ESPIPE 8243: fork() = 8246 8246: fork() (returning as child ...)= 8243 8246: getpid()= 8246 [8243] 8243: llseek(4, 0, SEEK_CUR) Err#29 ESPIPE 8243: llseek(7, 0, SEEK_CUR) Err#29 ESPIPE 8246: sigaction(SIGQUIT, 0xFFBFF800, 0xFFBFF880) = 0 8246: sigaction(SIGTERM, 0xFFBFF800, 0xFFBFF880) = 0 8246: sigaction(SIGINT, 0xFFBFF800, 0xFFBFF880) = 0 8246: sigaction(SIGPIPE, 0xFFBFF800, 0xFFBFF880) = 0 8246: sigaction(SIGCLD, 0xFFBFF800, 0xFFBFF880) = 0 8246: sigaction(SIGHUP, 0xFFBFF800, 0xFFBFF880) = 0 8246: sigaction(SIGCLD, 0xFFBFF798, 0xFFBFF818) = 0 8246: sigaction(SIGCLD, 0xFFBFF800, 0xFFBFF880) = 0 8243: fork() = 8248 8246: time() = 1144780741 Apr 11 14:39:01 isis.eng.fsu.edu /usr/local/sbin/amavisd[8246]: 8246: write(2, A p r 1 1 1 4 : 3 9.., 64) = 64 Net::Server: Child Preforked (8246)8246:write(2, N e t : : S e r v e r :.., 35) = 35 8246: write(2, \n, 1) = 1 8246: sigaction(SIGCLD, 0xFFBFF7A0, 0xFFBFF820) = 0 8246: sigaction(SIGCLD, 0xFFBFF798, 0xFFBFF818) = 0 8246: sigaction(SIGCLD, 0xFFBFF800, 0xFFBFF880) = 0 8246: fstat(3, 0xFFBFF878)= 0 8246: close(3)= 0 8246: fstat(-1, 0xFFBFF870) Err#9 EBADF 8246: open(/dev/conslog, O_WRONLY) = 3 8246: fcntl(3, F_SETFD, 0x0001) = 0 8246: fstat(3, 0xFFBFF870)= 0 8248: fork() (returning as child ...)= 8243 8248: getpid()= 8248 [8243] 8246: sysconfig(_CONFIG_NPROC_ONLN) = 2 8246: stat64(/var/amavis/db/DB_CONFIG, 0xFFBFF5D8) Err#2 ENOENT 8246: open64(/var/amavis/db/DB_CONFIG, O_RDONLY)Err#2 ENOENT 8246: stat64(/var/tmp, 0xFFBFF5D8) = 0 8246: stat64(/var/amavis/db/__db.001, 0xFFBFF640) = 0 8246: open64(/var/amavis/db/__db.001, O_RDWR) = 8 8246: fcntl(8, F_SETFD, 0x0001) = 0 8246: ioctl(8, 0x2000664C, 0x0001)= 0 8246: fstat64(8, 0xFFBFF6B8) = 0 8246: close(8)= 0 8246: open64(/var/amavis/db/__db.001, O_RDWR) = 8 8246: fcntl(8, F_SETFD, 0x0001) = 0 8246: ioctl(8, 0x2000664C, 0x0001)= 0 8246: mmap64(0x, 8192, PROT_READ|PROT_WRITE, MAP_SHARED, 8, 0) = 0xFF33 8246: close(8)= 0 8246: stat64(/var/amavis/db/__db.002, 0xFFBFF620) = 0 8246: open64(/var/amavis/db/__db.002, O_RDWR) = 8 8246: fcntl(8, F_SETFD, 0x0001) = 0 8246: ioctl(8, 0x2000664C, 0x0001)= 0 8246: mmap64(0x, 270336, PROT_READ|PROT_WRITE, MAP_SHARED, 8, 0) = 0xFEA6 8246: close(8)= 0 8246: stat64(/var/amavis/db/__db.003, 0xFFBFF640) = 0 8246: open64(/var/amavis/db/__db.003, O_RDWR) = 8 8246: fcntl(8, F_SETFD, 0x0001) = 0 8246: ioctl(8, 0x2000664C, 0x0001)= 0 8246: mmap64(0x, 409600, PROT_READ|PROT_WRITE, MAP_SHARED, 8, 0) = 0xFE9F 8246: close(8)= 0 8248: sigaction(SIGQUIT, 0xFFBFF800, 0xFFBFF880) = 0 8248: sigaction(SIGTERM, 0xFFBFF800, 0xFFBFF880) = 0 8248: sigaction(SIGINT, 0xFFBFF800, 0xFFBFF880) = 0 8248: sigaction(SIGPIPE, 0xFFBFF800, 0xFFBFF880) = 0 8248: sigaction(SIGCLD, 0xFFBFF800, 0xFFBFF880) = 0 8248: sigaction(SIGHUP, 0xFFBFF800, 0xFFBFF880) = 0 8246: stat64(/var/amavis/db/snmp.db, 0xFFBFF348)= 0 8246: stat64(/var/amavis/db/snmp.db, 0xFFBFF3C0)= 0 8246: open64(/var/amavis/db/snmp.db, O_RDWR)= 8 8246: fcntl(8, F_SETFD, 0x0001) = 0 8246: read(8, \0\0\0\0\0\0\001\0\0\0\0.., 512) = 512 8246: close(8)= 0 8246: stat64(/var/amavis/db/snmp.db, 0xFFBFF480)= 0 8246:
Re: [AMaViS-user] status=deferred
Hi, Mark Martinec wrote: Apr 11 13:49:04 isis.eng.fsu.edu /usr/local/sbin/amavisd[8984]: Net::Server: Starting 1 children Most weird. Between creating file and returning a SMTP status there is hardly any significant processing going on. If policy bank MYNETS exists and @mynetworks_maps is defined there would be a call to lookup_ip_acl() with its own log entry, and after that a lookup on sender address against @debug_sender_maps. I don't define MYNETS or debug_sender_maps. I just took the amavisd.conf-sample and set hostname, domain, Postfix MTA, ClamAV, logging, policy for SPAM=PASS, and set banned to warn sender/receiver. That's about it. Everything else I left as-is. --- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnkkid=110944bid=241720dat=121642 ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] status=deferred
amavisd-new 2.4.0 Hi, I'm trying to debug amavisd but am a bit confused. If I telnet to localhost 10024 or 10025 everything looks good. But the actually logs tell a different story and mail is just building in the queue. Below are the syslog output and debug output. Any help on this would be greatly appreciated. LOG MESSAGE: relay=none, delay=0, status=deferred (delivery temporarily suspended: lost connection with 127.0.0.1[127.0.0.1] while sending MAIL FROM) AMAVISD -U AMAVIS DEBUG OUTPUT: Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24134]: (24134-01) prolong_timer smtp response sent: timer set to = 120 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24134]: (24134-01) idle_proc, 6: was busy, 1.7 ms, total idle 0.002 s, busy 0.031 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24134]: (24134-01) idle_proc, 5: was idle, 0.3 ms, total idle 0.002 s, busy 0.031 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24134]: (24134-01) ESMTP MAIL FROM:[EMAIL PROTECTED] SIZE=8842\r\n (24132-01-2) Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24134]: (24134-01) prolong_timer SMTP MAIL received: timer set to = 300 s ESMTP RCPT TO:[EMAIL PROTECTED]\r\n Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24134]: (24134-01) check_mail_begin_task: task_count=1 Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) prolong_timer SMTP RCPT received: timer set to = 300 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24134]: (24134-01) TempDir::prepare: creating directory /var/amavis/tmp/amavis-20060410T150216-24134Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) ESMTP 250 2.1.5 Recipient [EMAIL PROTECTED] OK Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) prolong_timer smtp response sent: timer set to = 120 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) idle_proc, 6: was busy, 5.6 ms, total idle 0.032 s, busy 2.397 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) idle_proc, 5: was idle, 0.3 ms, total idle 0.032 s, busy 2.397 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) ESMTP DATA\r\n Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) prolong_timer SMTP DATA received: timer set to = 300 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) ESMTP::10024 /var/amavis/tmp/amavis-20060410T150214-24132: [EMAIL PROTECTED] - [EMAIL PROTECTED] SIZE=5824 Received: from mymachine.mydomain ([127.0.0.1]) by localhost (mymachine.mydomain [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for [EMAIL PROTECTED]; Mon, 10 Apr 2006 15:02:16 -0400 (EDT) Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) ESMTP 354 End data with CRLF.CRLF Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) prolong_timer smtp response sent: timer set to = 120 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) prolong_timer receiving data: timer set to = 120 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) prolong_timer data-end received: timer set to = 300 s Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) ESMTP .CRLF Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) Actual message size 5816 B, declared 5824 B Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) setting body type: 7BIT (h=0, b=0) Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) body hash: 428d1d892d001710d376248b4a449d6b Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24132]: (24132-01-2) Original mail size: 5816; quota set to: 2908000 bytes Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[22583]: Net::Server: Starting 1 children Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24141]: Net::Server: Child Preforked (24141) Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[24141]: TIMING [total 15 ms] - bdb-open: 15 (99%)99, rundown: 0 (1%)100 Apr 10 15:02:16 mymachine.mydomain /usr/local/sbin/amavisd[22583]: Net::Server: Starting 1 children Apr 10 15:02:17 mymachine.mydomain /usr/local/sbin/amavisd[24142]: Net::Server: Child Preforked (24142) Apr 10 15:02:17 mymachine.mydomain /usr/local/sbin/amavisd[24142]: TIMING [total 18 ms] - bdb-open: 18 (99%)99, rundown: 0 (1%)100 --- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory!
[AMaViS-user] status=deferred (sorry, i forgot to include relevant info)
Sorry, here is the start of the amavisd debug output: Apr 10 15:51:40 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: starting. /usr/local/sbin/amavisd at isis.eng.fsu.edu amavisd-new-2.4.0 (20060403) Apr 10 15:51:40 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: user=amavis, EUID: 11369 (11369); group=184, EGID: 184 184 (184 184); log_level=2 Apr 10 15:51:40 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Perl version 5.006001 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: INFO: no optional modules: DBD::mysql Sys::Hostname::Long Mail::SPF::Query Net::CIDR::Lite Mail::SpamAssassin::Plugin::DomainKeys Mail::DomainKeys::Header Mail::DomainKeys::Message Mail::DomainKeys::Policy Mail::DomainKeys::Signature Mail::DomainKeys::Key Mail::DomainKeys::Key::Public Crypt::OpenSSL::RSA auto::Crypt::OpenSSL::RSA::new_public_key auto::Crypt::OpenSSL::RSA::load_public_key auto::Crypt::OpenSSL::RSA::_new auto::Crypt::OpenSSL::RSA::DESTROY IP::Country::Fast Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: SpamControl: init_pre_chroot done Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Net::Server: 2006/04/10-15:51:41 Amavis (type Net::Server::PreForkSimple) starting! pid(2669)Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Net::Server: Binding to UNIX socket file /var/amavis/amavisd.sock using SOCK_STREAM Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Net::Server: Group Not Defined. Defaulting to EGID '184 184' Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Net::Server: User Not Defined. Defaulting to EUID '11369' Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Net::Server: Setting up serialization via flock Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Amavis::Conf2.062 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Archive::Tar1.29 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Archive::Zip1.16 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module BerkeleyDB 0.27 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Compress::Zlib 1.41 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Convert::TNEF 0.17 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Convert::UUlib 1.06 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module DBI 1.47 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module DB_File 1.811 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Digest::MD5 2.36 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module MIME::Entity5.420 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module MIME::Parser5.420 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module MIME::Tools 5.420 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Mail::Header1.74 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Mail::Internet 1.74 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Mail::SpamAssassin 3.001001 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Net::Cmd2.26 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Net::DNS0.48 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Net::SMTP 2.29 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Net::Server 0.93 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Razor2::Client::Version 2.75 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Time::HiRes 1.66 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Module Unix::Syslog0.100 Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Amavis::DB code loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Amavis::Cache code loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: SQL base codeNOT loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: SQL::Log codeNOT loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: SQL::Quarantine NOT loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Lookup::SQL code NOT loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: Lookup::LDAP codeNOT loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: AM.PDP-in proto code loaded Apr 10 15:51:41 isis.eng.fsu.edu /usr/local/sbin/amavisd[2669]: SMTP-in proto code
Re: [AMaViS-user] Amavisd is Dead
Brilliant! I simply installed the latest Digest::MD5 perl module and now all is well. How is it that over time these perl modules are no longer able to do their job with Amavisd-New? This sort of thing happens to me every year, especially during/after major holidays when the spammers and virus-senders go mad sending bulk mails. Thanks again! Gordon Mark Martinec wrote: Gordon, Dec 1 12:42:44 horus.eng.fsu.edu /usr/local/sbin/amavisd[17929]: (17929-01) ESMTP .\r\n Dec 2 14:45:41 horus.eng.fsu.edu /usr/local/sbin/amavisd[28116]: (28116-01) prepare_tempdir: creating directory /var/amavis/tmp/amavis-20051202T144541-28116 Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28117]: (28117-01) prepare_tempdir: creating directory /var/amavis/tmp/amavis-20051202T144546-28117 In all three cases the next operation involves MD5 digest. I suspect there is something broken with your Digest::MD5. Try reinstalling it, and make sure its installation self-check does run and it is successful. Mark --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Amavisd is Dead
Solaris 9 Amavisd-New 2.3.3 Postfix 2.2.5 Can someone help me figure this out? I return from holiday on Monday and my Amavisd is dead. I've been trying to sort this out all week by downloading the latest Perl modules and upgrading to the latest Amavisd-New but its always the same. Below are the relevant sections from my Postfix and Amavisd-New logs. Thanks to any and all who may be of assistance. Cheers, Gordon Thagard -- cut here -- # tn localhost 10024 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 [127.0.0.1] ESMTP amavisd-new service ready quit 221 2.0.0 [127.0.0.1] amavisd-new closing transmission channel Connection to localhost closed by foreign host. # tn localhost 10025 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 horus.eng.fsu.edu ESMTP FAMU-FSU College of Engineering quit 221 Bye Connection to localhost closed by foreign host. POSTFIX LOGS Dec 1 12:42:44 horus postfix/smtp[19180]: [ID 197553 mail.info] 0320620C63: to=[EMAIL PROTECTED], relay=127.0.0.1[127.0.0.1], delay=1, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending end of data -- message may be sent more than once) Dec 1 12:42:44 horus postfix/smtp[19180]: [ID 197553 mail.info] 0320620C63: to=[EMAIL PROTECTED], relay=127.0.0.1[127.0.0.1], delay=1, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending end of data -- message may be sent more than once) AMAVISD LOGS Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17892]: starting. /usr/local/sbin/amavisd at horus.eng.fsu.edu amavisd-new-2.3.3 (20050822) Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17892]: user=amavis, EUID: 11369 (11369); group=amavis, EGID: 184 184 (184 184) Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17892]: Perl version 5.006001 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17892]: INFO: no optional modules: DBD::mysql Sys::Hostname::Long Mail::SPF::Query Net::CIDR::Lite Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Net::Server: Process Backgrounded Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Net::Server: 2005/12/01-12:38:00 Amavis (type Net::Server::PreForkSimple) starting! pid(17916) Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Net::Server: Binding to UNIX socket file /var/amavis/amavisd.sock using SOCK_STREAM Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Net::Server: Group Not Defined. Defaulting to EGID '184 184' Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Net::Server: User Not Defined. Defaulting to EUID '11369' Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Amavis::Conf2.043 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Archive::Tar1.26 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Archive::Zip1.16 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module BerkeleyDB 0.27 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Compress::Zlib 1.41 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Convert::TNEF 0.17 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Convert::UUlib 1.051 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module DBI 1.47 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module DB_File 1.811 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module MIME::Entity5.417 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module MIME::Parser5.417 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module MIME::Tools 5.417 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Mail::Header1.66 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Mail::Internet 1.66 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Mail::SpamAssassin 3.02 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Net::Cmd2.26 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Net::DNS0.48 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Net::SMTP 2.29 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Net::Server 0.89 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module Razor2::Client::Version 2.67 Dec 1 12:38:00 horus.eng.fsu.edu /usr/local/sbin/amavisd[17916]: Module
Re: [AMaViS-user] Amavisd is Dead
ms, total idle 0.002 s, busy 0.023 s Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28117]: (28117-01) idle_proc, 5: was idle, 0.2 ms, total idle 0.002 s, busy 0.023 s Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28117]: (28117-01) prolong_timer after reading SMTP command: remaining time = 300 s Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28117]: (28117-01) ESMTP MAIL FROM:[EMAIL PROTECTED] SIZE=2695\r\n Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28117]: (28117-01) prolong_timer after MAIL FROM received - timer reset: remaining time = 300 s Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28117]: (28117-01) check_mail_begin_task: task_count=1 Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28117]: (28117-01) prepare_tempdir: creating directory /var/amavis/tmp/amavis-20051202T144546-28117 Dec 2 14:45:46 horus.eng.fsu.edu /usr/local/sbin/amavisd[28637]: BerkeleyDB-based Amavis::Cache not available, using memory-based local cache [EMAIL PROTECTED] /]# Gary V wrote: Gordon wrote: Solaris 9 Amavisd-New 2.3.3 Postfix 2.2.5 Can someone help me figure this out? I return from holiday on Monday and my Amavisd is dead. I've been trying to sort this out all week by downloading the latest Perl modules and upgrading to the latest Amavisd-New but its always the same. Below are the relevant sections from my Postfix and Amavisd-New logs. Thanks to any and all who may be of assistance. Cheers, Gordon Thagard Dec 1 12:42:44 horus.eng.fsu.edu /usr/local/sbin/amavisd[17929]: (17929-01) ESMTP 354 End data with CRLF.CRLF Dec 1 12:42:44 horus.eng.fsu.edu /usr/local/sbin/amavisd[17929]: (17929-01) ESMTP .\r\n Dec 1 12:42:44 horus.eng.fsu.edu /usr/local/sbin/amavisd[19301]: TIMING [total 18 ms] - bdb-open: 18 (100%)100, rundown: 0 (0%)100 ... I suspect a problem with bdb. To see if I am correct, set: $enable_db = 0; then reload amavisd and test with actual mail again. On my machine, after what you have here, I get something like: Dec 2 11:42:49 sfm amavis[15899]: (15899-01) ESMTP .\r\n Dec 2 11:42:49 sfm amavis[15899]: (15899-01) Actual message size 17321 B, declared 17323 B Dec 2 11:42:49 sfm amavis[15899]: (15899-01) setting body type: 7BIT (0,0) Dec 2 11:42:49 sfm amavis[15899]: (15899-01) body hash: 47b1f2e8c1d7db48a95772940e27767b Dec 2 11:42:49 sfm amavis[15899]: (15899-01) Original mail size: 17321; quota set to: 8660500 bytes ... Gary V --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ -- Gordon Thagard, UNIX Systems Administrator FAMU-FSU College of Engineering Communications Multimedia Services 2525 Pottsdammer Street, Suite A332-L Tallahassee, FL 32310-6046 V: (850) 410-6449 F: (850) 410-6484 M: (850) 443-4220 --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Stripping attachments
Thank you for taking the time to completely and thoroughly answer my questions. Cheers, Gordon Mark Martinec wrote: Gordon, Is it possible to strip an attachment in the case of $final_banned_destiny with other Amavisd-NEW options so that the attachment is saved to, say, /var/virusmails, and still the original email text is delivered to the user's mailbox with a notification that the executable attachment has been stripped and quarantined? No, this is currently not possible nor planned for immediate future. Oh, I think I see what you mean - by using the info included here? http://www.ijs.si/software/amavisd/README.customize.txt Which of these options do you think would give me what I'm looking for? The most you can get with using a built-in macro processor is to include the full mail header (macro %H), which is not exactly what you need. Mail body is not available through macros, one reason is that it is not stored in memory. One approach would be to modify sub defanged_mime_entity() to re-assemble a replacement MIME::Entity object out of original mail, based on some filtering rules. Some people have modified the source code to pass the email.txt to altermime and to forward to recipients its results. While tricks like that are certainly possible and not too difficult to implement, these are currently just more or less successful experiments. A quarantine management GUI may offer ability to let recipient look into his quarantined message, and only display plain text parts. may I suggest this functionality be included in future revs of the product? I know that other Anti-SPAM/VIRUS/BLOCKED utilities have this capability and it just seems like another nicety to add to an already very nice tool. You may suggest, but it is way down on a priority list. Adding such functionality is another can of worms / a project all in itself. Amavis* project(s) so far stayed on the position that a mail body should not be changed apart from some added/edited header fields (partly because we don't want to be culpable when something goes wrong). While I did give-in somewhat when I introduced a simple form of 'mail defanging' (wrapping a message/rfc822 MIME container around original mail in certain cases), I have no immediate plans to refine/extend such functionality. Stripping away MIME parts may have some niche use, but as a general approach I believe it is less useful than may appear at a first glance. Mark --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Stripping attachments
Are you an Amavisd-NEW developer? If so, may I suggest this functionality be included in future revs of the product? I know that other Anti-SPAM/VIRUS/BLOCKED utilities have this capability and it just seems like another nicety to add to an already very nice tool. Cheers, Michael Scheidell wrote: I don't think you can get the whole message but, but the default is to send the recipient a notification with subject line, sender and name of attachment. Other than that, it would take some custom programming to pass it through a mimestripper (which isn't above possibility, and might be done with the use of an email box for quarantine destination) -- Gordon Thagard, UNIX Systems Administrator FAMU-FSU College of Engineering Communications Multimedia Services 2525 Pottsdammer Street, Suite A332-L Tallahassee, FL 32310-6046 V: (850) 410-6449 F: (850) 410-6484 M: (850) 443-4220 --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_id=7477alloc_id=16492op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
