[Mimedefang] My MD install went wacko

Justin Shore listuser at numbnuts.net
Sun Jun 8 23:07:01 EDT 2003


On 8 Jun 2003, Bill Randle wrote:

> On Sun, 2003-06-08 at 16:15, Justin Shore wrote:
> > Jun  8 17:20:03 bubba sm-mta[20150]: h58MII3E020150: 
> > milter_read(mimedefang): cmd read returned 0, expecting 5
> > Jun  8 17:20:03 bubba sm-mta[20150]: h58MII3E020150: Milter (mimedefang): 
> > to error state
> > Jun  8 17:20:03 bubba sm-mta[20150]: h58MII3E020150: Milter: data, 
> > reject=451 4.7.1 Please try again later
> > 
> > and started temp failing the message (which it did 5 more times).  This is 
> > weird.
> > 
> > I'm not literally restarting Sendmail and MIMEDefang from cron every 5 
> > minutes.  Any ideas?
> 
> Justin,
> 
> This sounds suspiciously like the problems I was having (see the thread
> "[Mimedefang] mimedefang lockup - help needed" and related followups
> [one of which was a reply from you :-)]. In my case the mimedefang
> processes were dieing for unknown reasons.

I've probably slept since then.  I can barely remember this morning. :)

> When the system is hosed and you do a "ps -Alw -y -H | grep mime", what
> does it look like (compared to when the system is normal)?

I'll remove my restarting cronjob and wait for it to fail again.  I return 
with the results when it fails next.

> In my case, I never did figure out what the underlying cause was.
> After upgrading to MIMEDefang-2.34-BETA-5 (and previously to kernel
> 2.4.19) fixed it.
> 
> I know you said you're already using 2.34-BETA-5, but it would be
> interesting to know if your mimedefang processes are dieing off
> and not restarting like it was for me. It might help David or
> someone else track down the problem.

Interesting.  I can't for the life of me think of anything I did new 
before I left last Monday.  I'd had beta 4 installed since the 27th.  The 
only thing new I can recall doing near that time was setting up my ISPs 
systemwide procmailrc to forward a copy of >= 10 scoring spam to my 
machine.  That was the night before it went plum loco.  My upgrade to beta 
5 today didn't seem to help.  Weird.  That's just nuts.

I'll get back to you with the results.

By the way, did you get a really weird second message on your end?  I 
received a duplicate message (at least body) from you, or so it appeared.  
The difference was 4 or so extra mail hops in the dupe.  Here are the 
headers:

Return-Path: <tcratz at jcis.net>
Received: from jcis.net (root at newmail.jcis.net [207.105.189.36])
        by bubba.numbnuts.net (8.12.9/8.12.8) with ESMTP id h592Z5hL022440
        for <listuser at numbnuts.net>; Sun, 8 Jun 2003 21:35:06 -0500
Received: from newmail.jcis.net (localhost [127.0.0.1])
        by jcis.net (8.12.9/8.12.9) with ESMTP id h592g1P7010007
        for <listuser at numbnuts.net>; Sun, 8 Jun 2003 19:43:56 -0700 (PDT)
Received: (from defang at localhost)
        by newmail.jcis.net (8.12.9/8.12.8/Submit) id h592Mcdv021935
        for <listuser at numbnuts.net>; Sun, 8 Jun 2003 19:22:38 -0700 (PDT)
Received: from newmail.jcis.net (localhost [127.0.0.1])
        by localhost (8.12.9/8.12.9+MIMEDefang) with ESMTP id 
h592MaOZ012588;
        Sun, 08 Jun 2003 19:22:38 -0700
Received: (from tcratz at localhost)
        by newmail.jcis.net (8.12.9/8.12.8/Submit) id h592MaL8003459;
        Sun, 8 Jun 2003 19:22:36 -0700 (PDT)
Received: from www.roaringpenguin.com (roaringpenguin.com [216.191.236.23] 
(may be forged))
        by jcis.net (8.12.9/8.12.9) with ESMTP id h592MZOZ000374
        for <tcratz at jcis.net>; Sun, 8 Jun 2003 19:22:35 -0700 (PDT)
Received: from www.roaringpenguin.com (localhost.localdomain [127.0.0.1])
        by www.roaringpenguin.com (8.12.9/8.12.9) with ESMTP id 
h592J7kr028176;
        Sun, 8 Jun 2003 22:19:07 -0400
Received: from bendgate.neocat.org (bc12372.bendcable.com [66.220.123.72])
        by www.roaringpenguin.com (8.12.9/8.12.9) with ESMTP id 
h592ICkr028160
        for <mimedefang at lists.roaringpenguin.com>; Sun, 8 Jun 2003 
22:18:12 -0400
Received: from bendgate (bendgate [192.168.190.79])
        by bendgate.neocat.org (8.12.1/8.12.1) with ESMTP id 
h592I1Fm015410;
        Sun, 8 Jun 2003 19:18:02 -0700
Subject: Re: [Mimedefang] My MD install went wacko
From: Bill Randle <billr at neocat.org>
Old-To: mimedefang at lists.roaringpenguin.com
Cc: Justin Shore <listuser at numbnuts.net>
In-Reply-To: <Pine.LNX.4.44.0306081802430.25387-100000 at bubba.numbnuts.net>
References: <Pine.LNX.4.44.0306081802430.25387-100000 at bubba.numbnuts.net>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: Evolution/1.0.2-5mdk 
Message-Id: <1055125083.21699.77.camel at bendgate>
Mime-Version: 1.0
X-Spam-Score:  (0) 
X-Scanned-By: MIMEDefang 2.34
X-Scanned-By: MIMEDefang 2.33 (www . roaringpenguin . com / mimedefang)
X-Scanned-By: CanIt (www . canit . ca)
Sender: mimedefang-admin at lists.roaringpenguin.com
Errors-To: mimedefang-admin at lists.roaringpenguin.com
X-BeenThere: mimedefang at lists.roaringpenguin.com
X-Mailman-Version: 2.0.13
Precedence: bulk
Reply-To: mimedefang at lists.roaringpenguin.com
List-Help: 
<mailto:mimedefang-request at lists.roaringpenguin.com?subject=help>
List-Post: <mailto:mimedefang at lists.roaringpenguin.com>
List-Subscribe: 
<http://lists.roaringpenguin.com/mailman/listinfo/mimedefang>,
        
<mailto:mimedefang-request at lists.roaringpenguin.com?subject=subscribe>
List-Id: For users of the MIMEDefang mail scanner 
<mimedefang.lists.roaringpenguin.com>
List-Unsubscribe: 
<http://lists.roaringpenguin.com/mailman/listinfo/mimedefang>,
        
<mailto:mimedefang-request at lists.roaringpenguin.com?subject=unsubscribe>
List-Archive: <http://lists.roaringpenguin.com/pipermail/mimedefang/>
X-Original-Date: 08 Jun 2003 19:18:01 -0700
Date: 08 Jun 2003 19:18:01 -0700
To: tcratz at exchange.jcis.net
X-Spam-Report: 
        -------------------- Start SpamAssassin results 
----------------------
        This message header has had lines added to help you recognize, 
block,
        or filter similar unwanted mail in the future.
        See http://spamassassin.org/tag/ for more details.
        
        Content analysis details:   (0.0 points, 0.0 required)
        
        -------------------- End of SpamAssassin results 
---------------------


That's weird.  It would appear that tcratz at exchange.jcis.net thought I 
needed an extra copy of the message.  Since the message was resent with 
all the original list headers intact (namely Sender), my procmail sorting 
put in my mimedefang mbox.  I suppose it could be one screwed up vacation 
program.  Weird.  Is there a full moon tonight?

Justin





More information about the MIMEDefang mailing list