[Mimedefang] Re: Re: Re: Odd error messages filling up logfiles in new deployment (MD 2.49 or 2.51)
Albert Croft
acroft at cyber-wizard.com
Wed May 25 12:47:51 EDT 2005
mimedefang-request at lists.roaringpenguin.com wrote:
>Today's Topics:
>
> 7. Re: Re: Odd error messages filling up logfiles in new
> deployment (MD 2.49 or 2.51) (David F. Skoll)
>----------------------------------------------------------------------
>Message: 7
>Date: Tue, 24 May 2005 20:59:09 -0400
>From: "David F. Skoll" <dfs at roaringpenguin.com>
>Subject: Re: [Mimedefang] Re: Odd error messages filling up logfiles in new deployment (MD 2.49 or 2.51)
>
>
>What's the output of:
>
> mimedefang.pl -features
>
>on the machine in question?
>
>Seeing "-odd" -related messages means mimedefang.pl is having
>trouble re-mailing messages. Could you post some complete log
>excerpts _without_ obfuscating the e-mail addresses in question?
>
>Regards,
>
>David.
>
>
Here are the results of the command you asked for:
$ mimedefang.pl -features
MIMEDefang version 2.49
Archive::Zip : yes
File::Scan : yes
HTML::Parser : yes
HTML::TokeParser : yes
Net::DNS : yes
Path:CONFDIR : yes (/etc/mail)
Path:QUARANTINEDIR : yes (/var/spool/MD-Quarantine)
Path:SENDMAIL : yes (yes)
Path:SPOOLDIR : yes (/var/spool/MIMEDefang)
SpamAssassin : yes
Unix::Syslog : yes
Virus:CLAMAV : yes (/usr/bin/clamscan)
Virus:CLAMD : yes (/usr/sbin/clamd)
Virus:FileScan : yes
HTMLCleaner : no
Virus:AVP : no
Virus:AVP5 : no
Virus:BDC : no
Virus:CSAV : no
Virus:FPROT : no
Virus:FPROTD : no
Virus:FSAV : no
Virus:HBEDV : no
Virus:NAI : no
Virus:NVCC : no
Virus:OpenAV : no
Virus:SOPHIE : no
Virus:SOPHOS : no
Virus:SymantecCSS : no
Virus:TREND : no
Virus:TROPHIE : no
Virus:VEXIRA : no
Anomy::HTMLCleaner : missing
Archive::Zip : Version 1.14
Digest::SHA1 : Version 2.07
File::Scan : Version 1.43
HTML::Parser : Version 3.35
HTML::TokeParser : Version 2.28
IO::Socket : Version 1.28
IO::Stringy : Version 1.212
MIME::Base64 : Version 3.05
MIME::Tools : Version 5.417
MIME::Words : Version 5.417
Mail::Mailer : Version 1.21
Mail::SpamAssassin : Version 3.000001
Net::DNS : Version 0.48
Unix::Syslog : Version 0.100
I went back to 1.15 of Mail::Tools yesterday afternoon, but it has done
it with both that and the 1.67 versions.
Strangely, this morning it appears to have occurred once and corrected
itself (only dumping about 1.2GB of data into the logs). I am pasting
the beginning and ending (as best I can determine) of the event below.
5439 May 25 09:47:30 spam1b sendmail[12177]: j4PElA1d012177:
from=<Dwitt at mcwane.com>, size=297982, class=0, nrcpts=4,
msgid=<BA1D4F8C58A3B44CBADBF24F574645597EB25D at exchange.local.mcwanebham.com>,
proto=ESMTP, daemon=MTA, relay=nsc69.38.52-165.newsouth.net [69.38.52.165]
5440 May 25 09:47:30 spam1b mimedefang-multiplexor[7610]: stats
1117032450.941 StartFilter slave=3 nslaves=15 nbusy=3
5441 May 25 09:47:31 spam1b mimedefang-multiplexor[7610]: Slave 3
stderr: -f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at Tyle
5442 May 25 09:47:31 spam1b mimedefang-multiplexor[7610]: Slave 3
stderr: rPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi <J
... (repeated for all but 158 of the next 2,258,358 lines) ...
2263800 May 25 09:58:34 spam1b mimedefang-multiplexor[7610]: Slave 3
stderr: <Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerPipe.com>
-f<Dwitt at mcwane.com>
-odd -Ac -oi <JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi <JRerich at TylerP
2263801 May 25 09:58:34 spam1b mimedefang-multiplexor[7610]: Slave 3
stderr: ipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi <JRe
2263802 May 25 09:58:34 spam1b mimedefang-multiplexor[7610]: Slave 3
stderr: rich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd -Ac -oi
<JRerich at TylerPipe.com> -f<Dwitt at mcwane.com> -odd
2263803 May 25 09:58:34 spam1b mimedefang-multiplexor[7610]: Reap:
Killed slave 3 (pid 7643) exited due to SIGTERM/SIGKILL as expected.
2263804 May 25 09:58:34 spam1b mimedefang-multiplexor[7610]: Slave 3
resource usage: req=18, scans=18, user=5.171, sys=0.230, nswap=0,
majflt=3, minflt=11935, maxrss=0, bi=0, bo=0
I appreciate your time and consideration, and any assistance you can
provide.
Sincerely,
Albert C.
More information about the MIMEDefang
mailing list