[Mimedefang] Problem is happening right now (was: My MD install went wacko)

[Justin Shore]

On 8 Jun 2003, Bill Randle wrote:

> On Sun, 2003-06-08 at 16:15, Justin Shore wrote:
> > Jun  8 17:20:03 bubba sm-mta[20150]: h58MII3E020150: 
> > milter_read(mimedefang): cmd read returned 0, expecting 5
> > Jun  8 17:20:03 bubba sm-mta[20150]: h58MII3E020150: Milter (mimedefang): 
> > to error state
> > Jun  8 17:20:03 bubba sm-mta[20150]: h58MII3E020150: Milter: data, 
> > reject=451 4.7.1 Please try again later
> > 
> > and started temp failing the message (which it did 5 more times).  This is 
> > weird.
> > 
> > I'm not literally restarting Sendmail and MIMEDefang from cron every 5 
> > minutes.  Any ideas?
> 
> Justin,
> 
> This sounds suspiciously like the problems I was having (see the thread
> "[Mimedefang] mimedefang lockup - help needed" and related followups
> [one of which was a reply from you :-)]. In my case the mimedefang
> processes were dieing for unknown reasons.
> 
> When the system is hosed and you do a "ps -Alw -y -H | grep mime", what
> does it look like (compared to when the system is normal)?
> 
> In my case, when it was wacko, the ps tree looked like this:
> (some columns deleted for brevity)
> 
> S     PID  PPID   RSS   WCHAN  TTY          TIME   CMD
> S   23796     1   288   do_sel ?        00:00:00   mimedefang-mult
> S   23797 23796 116888  pipe_w ?        00:03:04     mimedefang.pl
> S   23833 23796  14304  pipe_w ?        00:00:35     mimedefang.pl
> S   25103 23796  21944  pipe_w ?        00:00:05     mimedefang.pl
> S   25110 23796  21860  pipe_w ?        00:00:05     mimedefang.pl
> S   23821     1   696   rt_sig ?        00:00:00   mimedefang
> 
> Whereas during normal operation, it was more like this:

Ding ding ding.  We have a winner!

[root at bubba /usr/local/src/clamav/clamav-20030605]#> ps -Alw -y -H | grep 
mime
S   UID   PID  PPID RSS    SZ WCHAN  TTY  TIME CMD
S   202 18105     1 688   391 do_sel ?  00:00:05 mimedefang-mult
S   202 28204 18105 25352 8156 pipe_w ?  00:00:05   mimedefang.pl
S   202 32734 18105 15400 4357 pipe_w ?  00:00:00   mimedefang.pl
S   202 18124     1 812   1185 rt_sig ?  00:00:00 mimedefang

Ok... so what does this mean?  I'm sitting here looking at these errors 
again:

Jun 10 21:28:55 bubba sm-mta[7213]: NOQUEUE: connect from 
lists.sourceforge.net [66.35.250.206]
Jun 10 21:28:55 bubba sm-mta[7184]: h5B2RtMS007184: Milter (mimedefang): 
timeout before data read
Jun 10 21:28:55 bubba sm-mta[7184]: h5B2RtMS007184: Milter (mimedefang): 
to error state
Jun 10 21:28:55 bubba sm-mta[7184]: h5B2RtMS007184: Milter (mimedefang): 
init failed to open
Jun 10 21:28:55 bubba sm-mta[7184]: h5B2RtMS007184: Milter (mimedefang): 
to error state
Jun 10 21:28:55 bubba sm-mta[7184]: h5B2RtMS007184: Milter: initialization 
failed, temp failing commands
Jun 10 21:28:56 bubba sm-mta[7184]: h5B2RtMS007184: SMTP MAIL command 
(<root at oak.sktc.net> SIZE=6193) from oak.sktc.net [64.71.97.14] tempfailed 
(due to previous checks)

just like before.  This is the first time this happened since the 8th when 
you replied to my email.  I bounced thousands of pieces of spam through it 
yesterday too and it never hiccuped (even though the load reached the 
upper 40s at times :).  I would leave it like this for a day or so if it 
weren't for the fact that this very email must pass through this server.  
*sigh*  

For the record this is a RH 7.3 box running Sendmail 8.12.9, MD 
2.43-BETA5, SA 2.60 from CVS (recompiled nightly), w/ kernel 2.4.21-rc2.  
Let me know if there's anything ya'll want me to try.

Thanks
 Justin