Re: [gentoo-server] amavisd-new disaster - gentoo-server

From:	Jonathan Nichols <jnichols@×××.net>
To:	gentoo-server@l.g.o
Subject:	Re: [gentoo-server] amavisd-new disaster
Date:	Fri, 03 Aug 2007 22:22:34
Message-Id:	`46B3A9C5.8040806@pbp.net`
In Reply to:	Re: [gentoo-server] amavisd-new disaster by Ben Munat

1

Ben Munat wrote:

2

> After my last hair-pulling experience with amavis, here's what I would

3

> do: amavisd usually logs to /var/amavis/amavis.log; check in there for

4

> error messages.

5

>

6

> If there's anything in there about permissions (or could not read file,

7

> or something like that), then you've probably been bitten by the

8

> amavis/clamd ownership issues like I was. If amavisd is is running as

9

> the amavis user, then there is clamd stuff needs to be writable by

10

> amavis... meaning either give it a common group or just chown it to amavis.

11

>

12

> Sorry I can't remember the specifics, but this should nudge you in the

13

> right direction...uh, unless it's not a permission thing at all of course.

14

>

15

> Hope this helps,

16

>

17

> Ben

18

>

19

20

Yeah, I have it logging to syslog. It's been doing a great job of that. 

21

Everything that I do see in the logfiles looks great. That's the thing.

22

23

right now this is killing me. 100% of the spam is flowing through, users 

24

are screaming at me, and I can't find a solution. :(

25

26

27

here's what I get out of the logs:

28

29

Aug  3 15:14:45 mailgate amavis[732]: starting.  /usr/sbin/amavisd at 

30

mailgate.pbp.net amavisd-new-2.4.1 (20060508), Unicode aware

31

Aug  3 15:14:45 mailgate amavis[732]: user=, EUID: 0 (0);  group=, EGID: 

32

0 27 26 20 11 10 6 4 3 2 1 0 (0 27 26 20 11 10 6 4 3 2 1 0); log_level=2

33

Aug  3 15:14:45 mailgate amavis[732]: Perl version               5.008008

34

Aug  3 15:14:46 mailgate amavis[732]: INFO: no optional modules: 

35

Sys::Hostname::Long Mail::SPF::Query Net::CIDR::Lite 

36

Mail::SpamAssassin::Plugin::DomainKeys Mail::DomainKeys::Header 

37

Mail::DomainKeys::Message Mail::DomainKeys::Policy 

38

Mail::DomainKeys::Signature Mail::DomainKeys::Key 

39

Mail::DomainKeys::Key::Public Crypt::OpenSSL::RSA 

40

auto::Crypt::OpenSSL::RSA::new_public_key 

41

auto::Crypt::OpenSSL::RSA::load_public_key 

42

auto::Crypt::OpenSSL::RSA::_new auto::Crypt::OpenSSL::RSA::DESTROY 

43

IP::Country::Fast

44

Aug  3 15:14:46 mailgate amavis[732]: SpamControl: init_pre_chroot done

45

Aug  3 15:14:46 mailgate amavis[732]: Net::Server: 2007/08/03-15:14:46 

46

Amavis (type Net::Server::PreForkSimple) starting! pid(732)

47

Aug  3 15:14:46 mailgate amavis[732]: Net::Server: Binding to UNIX 

48

socket file /var/run/amavis/amavisd.sock using SOCK_STREAM

49

Aug  3 15:14:47 mailgate amavis[732]: Net::Server: Binding to TCP port 

50

10024 on host 127.0.0.1

51

Aug  3 15:14:47 mailgate amavis[732]: Net::Server: Setting gid to "10025 

52

10025"

53

Aug  3 15:14:47 mailgate amavis[732]: Net::Server: Setting uid to "10025"

54

Aug  3 15:14:47 mailgate amavis[732]: Module Amavis::Conf        2.065

55

Aug  3 15:14:47 mailgate amavis[732]: Module Archive::Tar        1.32

56

Aug  3 15:14:47 mailgate amavis[732]: Module Archive::Zip        1.16

57

Aug  3 15:14:47 mailgate amavis[732]: Module BerkeleyDB          0.27

58

Aug  3 15:14:47 mailgate amavis[732]: Module Compress::Zlib      1.41

59

Aug  3 15:14:47 mailgate amavis[732]: Module Convert::TNEF       0.17

60

Aug  3 15:14:47 mailgate amavis[732]: Module Convert::UUlib      1.06

61

Aug  3 15:14:47 mailgate amavis[732]: Module DBD::mysql          2.9007

62

Aug  3 15:14:47 mailgate amavis[732]: Module DBI                 1.50

63

Aug  3 15:14:47 mailgate amavis[732]: Module DB_File             1.814

64

Aug  3 15:14:47 mailgate amavis[732]: Module Digest::MD5         2.33

65

Aug  3 15:14:47 mailgate amavis[732]: Module MIME::Entity        5.417

66

Aug  3 15:14:47 mailgate amavis[732]: Module MIME::Parser        5.417

67

Aug  3 15:14:47 mailgate amavis[732]: Module MIME::Tools         5.417

68

Aug  3 15:14:47 mailgate amavis[732]: Module Mail::Header        1.67

69

Aug  3 15:14:47 mailgate amavis[732]: Module Mail::Internet      1.67

70

Aug  3 15:14:47 mailgate amavis[732]: Module Mail::SpamAssassin  3.002001

71

Aug  3 15:14:47 mailgate amavis[732]: Module Net::Cmd            2.28

72

Aug  3 15:14:47 mailgate amavis[732]: Module Net::DNS            0.60

73

Aug  3 15:14:47 mailgate amavis[732]: Module Net::SMTP           2.31

74

Aug  3 15:14:47 mailgate amavis[732]: Module Net::Server         0.96

75

Aug  3 15:14:47 mailgate amavis[732]: Module Razor2::Client::Version 2.81

76

Aug  3 15:14:47 mailgate amavis[732]: Module Time::HiRes         1.9707

77

Aug  3 15:14:47 mailgate amavis[732]: Module Unix::Syslog        0.100

78

Aug  3 15:14:47 mailgate amavis[732]: Amavis::DB code      loaded

79

Aug  3 15:14:47 mailgate amavis[732]: Amavis::Cache code   loaded

80

Aug  3 15:14:47 mailgate amavis[732]: SQL base code        loaded

81

Aug  3 15:14:48 mailgate amavis[732]: SQL::Log code        NOT loaded

82

Aug  3 15:14:48 mailgate amavis[732]: SQL::Quarantine      NOT loaded

83

Aug  3 15:14:48 mailgate amavis[732]: Lookup::SQL code     loaded

84

Aug  3 15:14:48 mailgate amavis[732]: Lookup::LDAP code    NOT loaded

85

Aug  3 15:14:48 mailgate amavis[732]: AM.PDP-in proto code loaded

86

Aug  3 15:14:48 mailgate amavis[732]: SMTP-in proto code   loaded

87

Aug  3 15:14:48 mailgate amavis[732]: Courier proto code   NOT loaded

88

Aug  3 15:14:48 mailgate amavis[732]: SMTP-out proto code  loaded

89

Aug  3 15:14:48 mailgate amavis[732]: Pipe-out proto code  NOT loaded

90

Aug  3 15:14:48 mailgate amavis[732]: BSMTP-out proto code NOT loaded

91

Aug  3 15:14:48 mailgate amavis[732]: Local-out proto code loaded

92

Aug  3 15:14:48 mailgate amavis[732]: OS_Fingerprint code  NOT loaded

93

Aug  3 15:14:48 mailgate amavis[732]: ANTI-VIRUS code      loaded

94

Aug  3 15:14:48 mailgate amavis[732]: ANTI-SPAM code       loaded

95

Aug  3 15:14:48 mailgate amavis[732]: ANTI-SPAM-SA code    loaded

96

Aug  3 15:14:48 mailgate amavis[732]: Unpackers code       loaded

97

Aug  3 15:14:48 mailgate amavis[732]: Found $file            at 

98

/usr/bin/file

99

Aug  3 15:14:48 mailgate amavis[732]: No $dspam,             not using it

100

Aug  3 15:14:48 mailgate amavis[732]: Internal decoder for .mail

101

Aug  3 15:14:48 mailgate amavis[732]: Internal decoder for .asc

102

Aug  3 15:14:48 mailgate amavis[732]: Internal decoder for .uue

103

Aug  3 15:14:48 mailgate amavis[732]: Internal decoder for .hqx

104

Aug  3 15:14:48 mailgate amavis[732]: Internal decoder for .ync

105

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .F    at 

106

/usr/bin/unfreeze

107

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .Z    at 

108

/usr/bin/uncompress

109

Aug  3 15:14:49 mailgate amavis[732]: Internal decoder for .gz

110

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .gz   at 

111

/bin/gzip -d (backup, not used)

112

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .bz2  at 

113

/bin/bzip2 -d

114

Aug  3 15:14:49 mailgate amavis[732]: No decoder for       .lzo  tried: 

115

lzop -d

116

Aug  3 15:14:49 mailgate amavis[732]: No decoder for       .rpm  tried: 

117

rpm2cpio.pl, rpm2cpio

118

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .cpio at 

119

/bin/cpio

120

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .tar  at 

121

/bin/cpio

122

Aug  3 15:14:49 mailgate amavis[732]: Internal decoder for .tar 

123

(backup, not used)

124

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .deb  at 

125

/usr/bin/ar

126

Aug  3 15:14:49 mailgate amavis[732]: Internal decoder for .zip

127

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .rar  at 

128

/usr/bin/unrar

129

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .arj  at 

130

/usr/bin/unarj

131

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .arc  at 

132

/usr/bin/arc

133

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .zoo  at 

134

/usr/bin/zoo

135

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .lha  at 

136

/usr/bin/lha

137

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .cab  at 

138

/usr/bin/cabextract

139

Aug  3 15:14:49 mailgate amavis[732]: No decoder for       .tnef tried: tnef

140

Aug  3 15:14:49 mailgate amavis[732]: Internal decoder for .tnef

141

Aug  3 15:14:49 mailgate amavis[732]: Found decoder for    .exe  at 

142

/usr/bin/unrar; /usr/bin/lha; /usr/bin/unarj

143

Aug  3 15:14:49 mailgate amavis[732]: Found secondary av scanner 

144

ClamAV-clamscan at /usr/bin/clamscan

145

Aug  3 15:14:49 mailgate amavis[732]: Found secondary av scanner FRISK 

146

F-Prot Antivirus at /usr/bin/f-prot

147

Aug  3 15:14:49 mailgate amavis[732]: (!!) TROUBLE in pre_loop_hook: No 

148

TEMPBASE directory: /var/run/amavis/tmp at /usr/sbin/amavisd line 6812.

149

150

151

--

152

gentoo-server@g.o mailing list

Gentoo Archives: gentoo-server

Replies

1	Ben Munat wrote:
2	> After my last hair-pulling experience with amavis, here's what I would
3	> do: amavisd usually logs to /var/amavis/amavis.log; check in there for
4	> error messages.
5	>
6	> If there's anything in there about permissions (or could not read file,
7	> or something like that), then you've probably been bitten by the
8	> amavis/clamd ownership issues like I was. If amavisd is is running as
9	> the amavis user, then there is clamd stuff needs to be writable by
10	> amavis... meaning either give it a common group or just chown it to amavis.
11	>
12	> Sorry I can't remember the specifics, but this should nudge you in the
13	> right direction...uh, unless it's not a permission thing at all of course.
14	>
15	> Hope this helps,
16	>
17	> Ben
18	>
19
20	Yeah, I have it logging to syslog. It's been doing a great job of that.
21	Everything that I do see in the logfiles looks great. That's the thing.
22
23	right now this is killing me. 100% of the spam is flowing through, users
24	are screaming at me, and I can't find a solution. :(
25
26
27	here's what I get out of the logs:
28
29	Aug 3 15:14:45 mailgate amavis[732]: starting. /usr/sbin/amavisd at
30	mailgate.pbp.net amavisd-new-2.4.1 (20060508), Unicode aware
31	Aug 3 15:14:45 mailgate amavis[732]: user=, EUID: 0 (0); group=, EGID:
32	0 27 26 20 11 10 6 4 3 2 1 0 (0 27 26 20 11 10 6 4 3 2 1 0); log_level=2
33	Aug 3 15:14:45 mailgate amavis[732]: Perl version 5.008008
34	Aug 3 15:14:46 mailgate amavis[732]: INFO: no optional modules:
35	Sys::Hostname::Long Mail::SPF::Query Net::CIDR::Lite
36	Mail::SpamAssassin::Plugin::DomainKeys Mail::DomainKeys::Header
37	Mail::DomainKeys::Message Mail::DomainKeys::Policy
38	Mail::DomainKeys::Signature Mail::DomainKeys::Key
39	Mail::DomainKeys::Key::Public Crypt::OpenSSL::RSA
40	auto::Crypt::OpenSSL::RSA::new_public_key
41	auto::Crypt::OpenSSL::RSA::load_public_key
42	auto::Crypt::OpenSSL::RSA::_new auto::Crypt::OpenSSL::RSA::DESTROY
43	IP::Country::Fast
44	Aug 3 15:14:46 mailgate amavis[732]: SpamControl: init_pre_chroot done
45	Aug 3 15:14:46 mailgate amavis[732]: Net::Server: 2007/08/03-15:14:46
46	Amavis (type Net::Server::PreForkSimple) starting! pid(732)
47	Aug 3 15:14:46 mailgate amavis[732]: Net::Server: Binding to UNIX
48	socket file /var/run/amavis/amavisd.sock using SOCK_STREAM
49	Aug 3 15:14:47 mailgate amavis[732]: Net::Server: Binding to TCP port
50	10024 on host 127.0.0.1
51	Aug 3 15:14:47 mailgate amavis[732]: Net::Server: Setting gid to "10025
52	10025"
53	Aug 3 15:14:47 mailgate amavis[732]: Net::Server: Setting uid to "10025"
54	Aug 3 15:14:47 mailgate amavis[732]: Module Amavis::Conf 2.065
55	Aug 3 15:14:47 mailgate amavis[732]: Module Archive::Tar 1.32
56	Aug 3 15:14:47 mailgate amavis[732]: Module Archive::Zip 1.16
57	Aug 3 15:14:47 mailgate amavis[732]: Module BerkeleyDB 0.27
58	Aug 3 15:14:47 mailgate amavis[732]: Module Compress::Zlib 1.41
59	Aug 3 15:14:47 mailgate amavis[732]: Module Convert::TNEF 0.17
60	Aug 3 15:14:47 mailgate amavis[732]: Module Convert::UUlib 1.06
61	Aug 3 15:14:47 mailgate amavis[732]: Module DBD::mysql 2.9007
62	Aug 3 15:14:47 mailgate amavis[732]: Module DBI 1.50
63	Aug 3 15:14:47 mailgate amavis[732]: Module DB_File 1.814
64	Aug 3 15:14:47 mailgate amavis[732]: Module Digest::MD5 2.33
65	Aug 3 15:14:47 mailgate amavis[732]: Module MIME::Entity 5.417
66	Aug 3 15:14:47 mailgate amavis[732]: Module MIME::Parser 5.417
67	Aug 3 15:14:47 mailgate amavis[732]: Module MIME::Tools 5.417
68	Aug 3 15:14:47 mailgate amavis[732]: Module Mail::Header 1.67
69	Aug 3 15:14:47 mailgate amavis[732]: Module Mail::Internet 1.67
70	Aug 3 15:14:47 mailgate amavis[732]: Module Mail::SpamAssassin 3.002001
71	Aug 3 15:14:47 mailgate amavis[732]: Module Net::Cmd 2.28
72	Aug 3 15:14:47 mailgate amavis[732]: Module Net::DNS 0.60
73	Aug 3 15:14:47 mailgate amavis[732]: Module Net::SMTP 2.31
74	Aug 3 15:14:47 mailgate amavis[732]: Module Net::Server 0.96
75	Aug 3 15:14:47 mailgate amavis[732]: Module Razor2::Client::Version 2.81
76	Aug 3 15:14:47 mailgate amavis[732]: Module Time::HiRes 1.9707
77	Aug 3 15:14:47 mailgate amavis[732]: Module Unix::Syslog 0.100
78	Aug 3 15:14:47 mailgate amavis[732]: Amavis::DB code loaded
79	Aug 3 15:14:47 mailgate amavis[732]: Amavis::Cache code loaded
80	Aug 3 15:14:47 mailgate amavis[732]: SQL base code loaded
81	Aug 3 15:14:48 mailgate amavis[732]: SQL::Log code NOT loaded
82	Aug 3 15:14:48 mailgate amavis[732]: SQL::Quarantine NOT loaded
83	Aug 3 15:14:48 mailgate amavis[732]: Lookup::SQL code loaded
84	Aug 3 15:14:48 mailgate amavis[732]: Lookup::LDAP code NOT loaded
85	Aug 3 15:14:48 mailgate amavis[732]: AM.PDP-in proto code loaded
86	Aug 3 15:14:48 mailgate amavis[732]: SMTP-in proto code loaded
87	Aug 3 15:14:48 mailgate amavis[732]: Courier proto code NOT loaded
88	Aug 3 15:14:48 mailgate amavis[732]: SMTP-out proto code loaded
89	Aug 3 15:14:48 mailgate amavis[732]: Pipe-out proto code NOT loaded
90	Aug 3 15:14:48 mailgate amavis[732]: BSMTP-out proto code NOT loaded
91	Aug 3 15:14:48 mailgate amavis[732]: Local-out proto code loaded
92	Aug 3 15:14:48 mailgate amavis[732]: OS_Fingerprint code NOT loaded
93	Aug 3 15:14:48 mailgate amavis[732]: ANTI-VIRUS code loaded
94	Aug 3 15:14:48 mailgate amavis[732]: ANTI-SPAM code loaded
95	Aug 3 15:14:48 mailgate amavis[732]: ANTI-SPAM-SA code loaded
96	Aug 3 15:14:48 mailgate amavis[732]: Unpackers code loaded
97	Aug 3 15:14:48 mailgate amavis[732]: Found $file at
98	/usr/bin/file
99	Aug 3 15:14:48 mailgate amavis[732]: No $dspam, not using it
100	Aug 3 15:14:48 mailgate amavis[732]: Internal decoder for .mail
101	Aug 3 15:14:48 mailgate amavis[732]: Internal decoder for .asc
102	Aug 3 15:14:48 mailgate amavis[732]: Internal decoder for .uue
103	Aug 3 15:14:48 mailgate amavis[732]: Internal decoder for .hqx
104	Aug 3 15:14:48 mailgate amavis[732]: Internal decoder for .ync
105	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .F at
106	/usr/bin/unfreeze
107	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .Z at
108	/usr/bin/uncompress
109	Aug 3 15:14:49 mailgate amavis[732]: Internal decoder for .gz
110	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .gz at
111	/bin/gzip -d (backup, not used)
112	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .bz2 at
113	/bin/bzip2 -d
114	Aug 3 15:14:49 mailgate amavis[732]: No decoder for .lzo tried:
115	lzop -d
116	Aug 3 15:14:49 mailgate amavis[732]: No decoder for .rpm tried:
117	rpm2cpio.pl, rpm2cpio
118	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .cpio at
119	/bin/cpio
120	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .tar at
121	/bin/cpio
122	Aug 3 15:14:49 mailgate amavis[732]: Internal decoder for .tar
123	(backup, not used)
124	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .deb at
125	/usr/bin/ar
126	Aug 3 15:14:49 mailgate amavis[732]: Internal decoder for .zip
127	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .rar at
128	/usr/bin/unrar
129	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .arj at
130	/usr/bin/unarj
131	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .arc at
132	/usr/bin/arc
133	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .zoo at
134	/usr/bin/zoo
135	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .lha at
136	/usr/bin/lha
137	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .cab at
138	/usr/bin/cabextract
139	Aug 3 15:14:49 mailgate amavis[732]: No decoder for .tnef tried: tnef
140	Aug 3 15:14:49 mailgate amavis[732]: Internal decoder for .tnef
141	Aug 3 15:14:49 mailgate amavis[732]: Found decoder for .exe at
142	/usr/bin/unrar; /usr/bin/lha; /usr/bin/unarj
143	Aug 3 15:14:49 mailgate amavis[732]: Found secondary av scanner
144	ClamAV-clamscan at /usr/bin/clamscan
145	Aug 3 15:14:49 mailgate amavis[732]: Found secondary av scanner FRISK
146	F-Prot Antivirus at /usr/bin/f-prot
147	Aug 3 15:14:49 mailgate amavis[732]: (!!) TROUBLE in pre_loop_hook: No
148	TEMPBASE directory: /var/run/amavis/tmp at /usr/sbin/amavisd line 6812.
149
150
151	--
152	gentoo-server@g.o mailing list