mimedefang errors (was Re: [Mimedefang] spamassassin error messages)

[Lisa Casey]

Hi,

I hope modifying the subject slightly in this thread is OK on this list, but 
this new subject line is more  descriptive of the problems I'm curtrently 
experiencing.

>> I added define(`confINPUT_MAIL_FILTERS', `mimedefang')dnl to sendmail.mc,
>> regenerated  and installed the cf, then restarted  sendmail and 
>> mimedefang.
>> Now mimedefang  is trying to scan messages (which it wasn't before) but 
>> is
>> going into an error state:
>>
>> May 12 12:57:12 radius sm-mta[68449]: j4CGvC6p068449: Milter 
>> (mimedefang):
>> to error state
>> May 12 12:57:12 radius sm-mta[68450]: j4CGvCAo068450: Milter 
>> (mimedefang):
>> to er ror state
>>
> Yes, but what's causing the error state?  Grep for the queue IDs to see 
> the rest of the log lines associated with those emails.  E.g., using an ID 
> above:
>
> grep j4CGvC6p068449 /var/log/maillog

I checked on this just now. When I first start mimedefang (and I do start it 
before I start Sendmail) I get errors like these in maillog:


# grep j4DE0G9C062329 maillog | more
May 13 10:00:16 radius sm-mta[62329]: j4DE0G9C062329: Milter (mimedefang): 
local
 socket name /var/spool/MIMEDefang/mimedefang.sock unsafe
May 13 10:00:16 radius sm-mta[62329]: j4DE0G9C062329: Milter (mimedefang): 
to er
ror state
May 13 10:00:16 radius sm-mta[62329]: j4DE0G9C062329: Milter (mimedefang): 
local
 socket name /var/spool/MIMEDefang/mimedefang.sock unsafe
May 13 10:00:16 radius sm-mta[62329]: j4DE0G9C062329: Milter (mimedefang): 
to er
ror state
May 13 10:00:16 radius sm-mta[62329]: j4DE0G9C062329: ruleset=check_rcpt, 
arg1=<
jrwilder at jellico.com>, relay=m17.basimx.com [66.59.93.17], reject=553 5.3.0 
<jrw
ilder at jellico.com>... Spam blocked see: 
http://spamcop.net/bl.shtml?66.59.93.17
May 13 10:00:16 radius sm-mta[62329]: j4DE0G9C062329: 
from=<cjfig.bggiadjd at bounc
e.ms2.basimx.com>, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, 
relay=m17
.basimx.com [66.59.93.17]


Note the line about the unsafe socket. But after just a few minutes the 
unsafe socket error stops and then I just get this

radius# grep j4DEQw8r064572 maillog | more
May 13 10:26:58 radius sm-mta[64572]: j4DEQw8r064572: Milter (mimedefang): 
to er
ror state
May 13 10:27:02 radius sm-mta[64572]: j4DEQw8r064572: 
<shah at campbellcounty.com>.
.. User unknown
May 13 10:27:05 radius sm-mta[64572]: j4DEQw8r064572: lost input channel 
from [6
1.49.126.238] to MTA after rcpt
May 13 10:27:05 radius sm-mta[64572]: j4DEQw8r064572: 
from=<torybarber94 at dakoadb
.no>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, 
relay=[61.49.126.238]

As far as the unsafe socket goes, here is my permissions on the path to the 
socket (/var/spool/MIMEDefang/)

drwxr-xr-x  18 root  wheel      512 Apr 27 14:49 var
drwxr-xr-x  13 root    wheel    512 May  3 17:56 spool
drwx------  2 defang  defang    512 May 13 10:12 MIMEDefang
# cd MIMEDefang
# ls -l
total 4
-rw-r-----  1 defang  defang  6 May 13 10:12 mimedefang-multiplexor.pid
srw-------  1 defang  defang  0 May 13 10:12 mimedefang-multiplexor.sock
-rw-r-----  1 defang  defang  6 May 13 10:12 mimedefang.pid
srwxr-x---  1 defang  defang  0 May 13 10:12 mimedefang.sock

What else can I look at (or show to the list)? I did find something 
yesterday that started a debug log of some sort in /var/log, the file is 
called mdefang-event-debug.log. Nothing in that log seems to jump out at me 
as being descriptive of a problem, but if it might be helpful I could post 
it. As an attachment? Are attachments allowed on this list?

Thanks, I really need  to solve this. Mimedefang was a simple install on my 
old Redhat box but it's giving me a heck of a time on this FreeBSD box.

Lisa




-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.11.9 - Release Date: 5/12/2005