rkelly_2
12.05.05, 09:21
Hallo,
auf einer SuSe 9.1-Maschine soll ein Antispam-Virenfilter laufen.
Zum Einsatz kommt Suse 9.1, Postfix 2.1.1, amavis 2.04, clamav 0.83 und dspam 3.4.5
Alle Programme sind installiert (RPM´s bis auf dspam) und konfiguriert.
Die Config-Dateien von clamav und amvis sowie master.cf gibts auf Anfrage.
Hier die Ausgabe von postconf -n:
alias_maps = hash:/etc/aliases
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = vscan:
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = 127.0.0.1 ::1
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = $myhostname, localhost.$mydomain
myhostname = mx01.local
mynetworks = 192.168.111.0/24, 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relay_domains = $mydestination dom1.de dom2.de
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_banner = $myhostname ESMTP ex2005
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_rfc821_envelopes = no
transport_maps = regexp:etc/postfix/transport_regexp, hash:/etc/postfix/transport.domain
unknown_local_recipient_reject_code = 450
transport.domain
dom1.de smtp:192.168.111.6
dom2.com smtp:192.168.111.6
dom3.de smtp:192.168.111.6
transport_regexp
/^.*@spam.(.*)$/ dspam-add:${1}
/^.*@ham.(.*)$/ dspam-del:${1}
Letzteres bewirkt (Sollte bewirken), dass user Spam melden können (zurückschicken an Postfix(dspam) mit user@spam.dom1.de, bzw. ham (also, falls erkannten Spam) an user@hamn.dom1.de.
Wenn ich nun Postfix starte, läuft alles perfekt, bsi einige Sekunden nach dem Start folgende Meldung im log auftaucht:
May 11 14:24:57 mx01 postfix/postqueue[2782]: fatal: Cannot flush mail queue - mail system is down
Hier die mail.log:
May 11 16:23:55 mx01 postfix/postfix-script: starting the Postfix mail system
May 11 16:23:55 mx01 postfix/master[2092]: daemon started -- version 2.1.1
May 11 16:23:57 mx01 freshclam[2224]: Daemon started.
May 11 16:23:57 mx01 freshclam[2251]: freshclam daemon 0.83 (OS: linux-gnu, ARCH: i386, CPU: i686)
May 11 16:23:57 mx01 freshclam[2251]: ClamAV update process started at Wed May 11 16:23:57 2005
May 11 16:23:57 mx01 freshclam[2251]: WARNING: Your ClamAV installation is OUTDATED - please update immediately!
May 11 16:23:57 mx01 freshclam[2251]: WARNING: Local version: 0.83 Recommended version: 0.84
May 11 16:23:57 mx01 freshclam[2251]: main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder: tkojm)
May 11 16:23:57 mx01 clamd[2255]: Daemon started.
May 11 16:23:57 mx01 clamd[2255]: clamd daemon 0.83 (OS: linux-gnu, ARCH: i386, CPU: i686)
May 11 16:23:57 mx01 clamd[2255]: Log file size limited to 2097152 bytes.
May 11 16:23:57 mx01 clamd[2255]: Running as user vscan (UID 65, GID 101)
May 11 16:23:57 mx01 clamd[2255]: Reading databases from /var/lib/clamav
May 11 16:23:57 mx01 freshclam[2251]: daily.cvd is up to date (version: 875, sigs: 1218, f-level: 4, builder: diego)
May 11 16:23:57 mx01 freshclam[2251]: --------------------------------------
May 11 16:23:59 mx01 clamd[2255]: Protecting against 34344 viruses.
May 11 16:23:59 mx01 clamd[2255]: Unix socket file /var/lib/clamav/clamd-socket
May 11 16:23:59 mx01 clamd[2255]: Setting connection queue length to 15
May 11 16:23:59 mx01 clamd[2255]: Archive: Archived file size limit set to 10485760 bytes.
May 11 16:23:59 mx01 clamd[2255]: Archive: Recursion level limit set to 8.
May 11 16:23:59 mx01 clamd[2255]: Archive: Files limit set to 1500.
May 11 16:23:59 mx01 clamd[2255]: Archive: Compression ratio limit set to 250.
May 11 16:23:59 mx01 clamd[2255]: Archive support enabled.
May 11 16:23:59 mx01 clamd[2255]: Archive: RAR support disabled.
May 11 16:23:59 mx01 clamd[2255]: Archive: Blocking archives that exceed limits.
May 11 16:23:59 mx01 clamd[2255]: Portable Executable support enabled.
May 11 16:23:59 mx01 clamd[2255]: Detection of broken executables enabled.
May 11 16:23:59 mx01 clamd[2255]: Mail files support enabled.
May 11 16:23:59 mx01 clamd[2255]: OLE2 support enabled.
May 11 16:23:59 mx01 clamd[2255]: HTML support enabled.
May 11 16:23:59 mx01 clamd[2255]: Self checking every 600 seconds.
May 11 16:24:01 mx01 amavis[2256]: starting. /usr/sbin/amavisd at mx01 amavisd-new-20040701 (2.0), Unicode aware
May 11 16:24:01 mx01 amavis[2256]: user=, EUID: 0 (0); group=, EGID: 0 (0)
May 11 16:24:01 mx01 amavis[2256]: Perl version 5.008003
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Process Backgrounded
May 11 16:24:01 mx01 amavis[2428]: Net::Server: 2005/05/11-16:24:01 Amavis (type Net::Server::PreForkSimple) starting! pid(2428)
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Binding to UNIX socket file /var/spool/amavis/amavisd.sock using SOCK_STREAM
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Setting gid to "101 101"
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Setting uid to "65"
May 11 16:24:01 mx01 amavis[2428]: Module Amavis::Conf 2.02
May 11 16:24:01 mx01 amavis[2428]: Module Archive::Tar 1.08
May 11 16:24:01 mx01 amavis[2428]: Module Archive::Zip 1.09
May 11 16:24:01 mx01 amavis[2428]: Module BerkeleyDB 0.25
May 11 16:24:01 mx01 amavis[2428]: Module Compress::Zlib 1.33
May 11 16:24:01 mx01 amavis[2428]: Module Convert::TNEF 0.17
May 11 16:24:01 mx01 amavis[2428]: Module Convert::UUlib 1.0
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Entity 5.404
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Parser 5.406
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Tools 5.411
May 11 16:24:01 mx01 amavis[2428]: Module Mail::Header 1.60
May 11 16:24:01 mx01 amavis[2428]: Module Mail::Internet 1.60
May 11 16:24:01 mx01 amavis[2428]: Module Net::Cmd 2.24
May 11 16:24:01 mx01 amavis[2428]: Module Net::SMTP 2.26
May 11 16:24:01 mx01 amavis[2428]: Module Net::Server 0.87
May 11 16:24:01 mx01 amavis[2428]: Module Time::HiRes 1.52
May 11 16:24:01 mx01 amavis[2428]: Module Unix::Syslog 0.100
May 11 16:24:01 mx01 amavis[2428]: Lookup::SQL code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: Lookup::LDAP code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: AMCL-in protocol code loaded
May 11 16:24:01 mx01 amavis[2428]: SMTP-in protocol code loaded
May 11 16:24:01 mx01 amavis[2428]: ANTI-VIRUS code loaded
May 11 16:24:01 mx01 amavis[2428]: ANTI-SPAM code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: Unpackers code loaded
May 11 16:24:01 mx01 amavis[2428]: Found $file at /usr/bin/file
May 11 16:24:01 mx01 amavis[2428]: Found $arc at /usr/bin/arc
May 11 16:24:01 mx01 amavis[2428]: Found $gzip at /usr/bin/gzip
May 11 16:24:01 mx01 amavis[2428]: Found $bzip2 at /usr/bin/bzip2
May 11 16:24:01 mx01 amavis[2428]: No $lzop, not using it
May 11 16:24:01 mx01 amavis[2428]: Found $lha at /usr/bin/lha
May 11 16:24:01 mx01 amavis[2428]: Found $unarj at /usr/bin/unarj
May 11 16:24:01 mx01 amavis[2428]: Found $uncompress at /usr/bin/uncompress
May 11 16:24:01 mx01 amavis[2428]: No $unfreeze, not using it
May 11 16:24:01 mx01 amavis[2428]: Found $unrar at /usr/bin/unrar
May 11 16:24:01 mx01 amavis[2428]: Found $zoo at /usr/bin/zoo
May 11 16:24:01 mx01 amavis[2428]: Found $cpio at /usr/bin/cpio
May 11 16:24:01 mx01 amavis[2428]: Found $rpm2cpio at /usr/bin/rpm2cpio
May 11 16:24:01 mx01 amavis[2428]: Found $cabextract at /usr/bin/cabextract
May 11 16:24:01 mx01 amavis[2428]: No $dspam, not using it
May 11 16:24:02 mx01 amavis[2428]: Using internal av scanner code for (primary) ClamAV-clamd
May 11 16:24:02 mx01 amavis[2428]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
May 11 16:24:02 mx01 amavis[2428]: Creating cache and SNMP db in /var/spool/amavis/db/; BerkeleyDB 0.25, V4.2
May 11 14:24:57 mx01 postfix/postqueue[2782]: fatal: Cannot flush mail queue - mail system is down
May 11 16:27:30 mx01 postfix/smtpd[2816]: connect from localhost[127.0.0.1]
May 11 16:27:36 mx01 postfix/smtpd[2816]: disconnect from localhost[127.0.0.1]
Hier ganz unten habe ich mmich testweise per telnet auf localhost connected, der smtpd läuft.
Leider habe ich bei den Postfix-Optionen keine weitern zum Log-Mir-Mehr gefunden, um festzustellen, wieso das System wieder down ist.
Kann mir jemand einen Tip geben, wo ich ansetzen kann?
Ich danke Euch für Eure Hilfe.
rkelly_2
auf einer SuSe 9.1-Maschine soll ein Antispam-Virenfilter laufen.
Zum Einsatz kommt Suse 9.1, Postfix 2.1.1, amavis 2.04, clamav 0.83 und dspam 3.4.5
Alle Programme sind installiert (RPM´s bis auf dspam) und konfiguriert.
Die Config-Dateien von clamav und amvis sowie master.cf gibts auf Anfrage.
Hier die Ausgabe von postconf -n:
alias_maps = hash:/etc/aliases
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = vscan:
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = 127.0.0.1 ::1
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = $myhostname, localhost.$mydomain
myhostname = mx01.local
mynetworks = 192.168.111.0/24, 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relay_domains = $mydestination dom1.de dom2.de
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_banner = $myhostname ESMTP ex2005
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_rfc821_envelopes = no
transport_maps = regexp:etc/postfix/transport_regexp, hash:/etc/postfix/transport.domain
unknown_local_recipient_reject_code = 450
transport.domain
dom1.de smtp:192.168.111.6
dom2.com smtp:192.168.111.6
dom3.de smtp:192.168.111.6
transport_regexp
/^.*@spam.(.*)$/ dspam-add:${1}
/^.*@ham.(.*)$/ dspam-del:${1}
Letzteres bewirkt (Sollte bewirken), dass user Spam melden können (zurückschicken an Postfix(dspam) mit user@spam.dom1.de, bzw. ham (also, falls erkannten Spam) an user@hamn.dom1.de.
Wenn ich nun Postfix starte, läuft alles perfekt, bsi einige Sekunden nach dem Start folgende Meldung im log auftaucht:
May 11 14:24:57 mx01 postfix/postqueue[2782]: fatal: Cannot flush mail queue - mail system is down
Hier die mail.log:
May 11 16:23:55 mx01 postfix/postfix-script: starting the Postfix mail system
May 11 16:23:55 mx01 postfix/master[2092]: daemon started -- version 2.1.1
May 11 16:23:57 mx01 freshclam[2224]: Daemon started.
May 11 16:23:57 mx01 freshclam[2251]: freshclam daemon 0.83 (OS: linux-gnu, ARCH: i386, CPU: i686)
May 11 16:23:57 mx01 freshclam[2251]: ClamAV update process started at Wed May 11 16:23:57 2005
May 11 16:23:57 mx01 freshclam[2251]: WARNING: Your ClamAV installation is OUTDATED - please update immediately!
May 11 16:23:57 mx01 freshclam[2251]: WARNING: Local version: 0.83 Recommended version: 0.84
May 11 16:23:57 mx01 freshclam[2251]: main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder: tkojm)
May 11 16:23:57 mx01 clamd[2255]: Daemon started.
May 11 16:23:57 mx01 clamd[2255]: clamd daemon 0.83 (OS: linux-gnu, ARCH: i386, CPU: i686)
May 11 16:23:57 mx01 clamd[2255]: Log file size limited to 2097152 bytes.
May 11 16:23:57 mx01 clamd[2255]: Running as user vscan (UID 65, GID 101)
May 11 16:23:57 mx01 clamd[2255]: Reading databases from /var/lib/clamav
May 11 16:23:57 mx01 freshclam[2251]: daily.cvd is up to date (version: 875, sigs: 1218, f-level: 4, builder: diego)
May 11 16:23:57 mx01 freshclam[2251]: --------------------------------------
May 11 16:23:59 mx01 clamd[2255]: Protecting against 34344 viruses.
May 11 16:23:59 mx01 clamd[2255]: Unix socket file /var/lib/clamav/clamd-socket
May 11 16:23:59 mx01 clamd[2255]: Setting connection queue length to 15
May 11 16:23:59 mx01 clamd[2255]: Archive: Archived file size limit set to 10485760 bytes.
May 11 16:23:59 mx01 clamd[2255]: Archive: Recursion level limit set to 8.
May 11 16:23:59 mx01 clamd[2255]: Archive: Files limit set to 1500.
May 11 16:23:59 mx01 clamd[2255]: Archive: Compression ratio limit set to 250.
May 11 16:23:59 mx01 clamd[2255]: Archive support enabled.
May 11 16:23:59 mx01 clamd[2255]: Archive: RAR support disabled.
May 11 16:23:59 mx01 clamd[2255]: Archive: Blocking archives that exceed limits.
May 11 16:23:59 mx01 clamd[2255]: Portable Executable support enabled.
May 11 16:23:59 mx01 clamd[2255]: Detection of broken executables enabled.
May 11 16:23:59 mx01 clamd[2255]: Mail files support enabled.
May 11 16:23:59 mx01 clamd[2255]: OLE2 support enabled.
May 11 16:23:59 mx01 clamd[2255]: HTML support enabled.
May 11 16:23:59 mx01 clamd[2255]: Self checking every 600 seconds.
May 11 16:24:01 mx01 amavis[2256]: starting. /usr/sbin/amavisd at mx01 amavisd-new-20040701 (2.0), Unicode aware
May 11 16:24:01 mx01 amavis[2256]: user=, EUID: 0 (0); group=, EGID: 0 (0)
May 11 16:24:01 mx01 amavis[2256]: Perl version 5.008003
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Process Backgrounded
May 11 16:24:01 mx01 amavis[2428]: Net::Server: 2005/05/11-16:24:01 Amavis (type Net::Server::PreForkSimple) starting! pid(2428)
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Binding to UNIX socket file /var/spool/amavis/amavisd.sock using SOCK_STREAM
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Setting gid to "101 101"
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Setting uid to "65"
May 11 16:24:01 mx01 amavis[2428]: Module Amavis::Conf 2.02
May 11 16:24:01 mx01 amavis[2428]: Module Archive::Tar 1.08
May 11 16:24:01 mx01 amavis[2428]: Module Archive::Zip 1.09
May 11 16:24:01 mx01 amavis[2428]: Module BerkeleyDB 0.25
May 11 16:24:01 mx01 amavis[2428]: Module Compress::Zlib 1.33
May 11 16:24:01 mx01 amavis[2428]: Module Convert::TNEF 0.17
May 11 16:24:01 mx01 amavis[2428]: Module Convert::UUlib 1.0
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Entity 5.404
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Parser 5.406
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Tools 5.411
May 11 16:24:01 mx01 amavis[2428]: Module Mail::Header 1.60
May 11 16:24:01 mx01 amavis[2428]: Module Mail::Internet 1.60
May 11 16:24:01 mx01 amavis[2428]: Module Net::Cmd 2.24
May 11 16:24:01 mx01 amavis[2428]: Module Net::SMTP 2.26
May 11 16:24:01 mx01 amavis[2428]: Module Net::Server 0.87
May 11 16:24:01 mx01 amavis[2428]: Module Time::HiRes 1.52
May 11 16:24:01 mx01 amavis[2428]: Module Unix::Syslog 0.100
May 11 16:24:01 mx01 amavis[2428]: Lookup::SQL code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: Lookup::LDAP code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: AMCL-in protocol code loaded
May 11 16:24:01 mx01 amavis[2428]: SMTP-in protocol code loaded
May 11 16:24:01 mx01 amavis[2428]: ANTI-VIRUS code loaded
May 11 16:24:01 mx01 amavis[2428]: ANTI-SPAM code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: Unpackers code loaded
May 11 16:24:01 mx01 amavis[2428]: Found $file at /usr/bin/file
May 11 16:24:01 mx01 amavis[2428]: Found $arc at /usr/bin/arc
May 11 16:24:01 mx01 amavis[2428]: Found $gzip at /usr/bin/gzip
May 11 16:24:01 mx01 amavis[2428]: Found $bzip2 at /usr/bin/bzip2
May 11 16:24:01 mx01 amavis[2428]: No $lzop, not using it
May 11 16:24:01 mx01 amavis[2428]: Found $lha at /usr/bin/lha
May 11 16:24:01 mx01 amavis[2428]: Found $unarj at /usr/bin/unarj
May 11 16:24:01 mx01 amavis[2428]: Found $uncompress at /usr/bin/uncompress
May 11 16:24:01 mx01 amavis[2428]: No $unfreeze, not using it
May 11 16:24:01 mx01 amavis[2428]: Found $unrar at /usr/bin/unrar
May 11 16:24:01 mx01 amavis[2428]: Found $zoo at /usr/bin/zoo
May 11 16:24:01 mx01 amavis[2428]: Found $cpio at /usr/bin/cpio
May 11 16:24:01 mx01 amavis[2428]: Found $rpm2cpio at /usr/bin/rpm2cpio
May 11 16:24:01 mx01 amavis[2428]: Found $cabextract at /usr/bin/cabextract
May 11 16:24:01 mx01 amavis[2428]: No $dspam, not using it
May 11 16:24:02 mx01 amavis[2428]: Using internal av scanner code for (primary) ClamAV-clamd
May 11 16:24:02 mx01 amavis[2428]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
May 11 16:24:02 mx01 amavis[2428]: Creating cache and SNMP db in /var/spool/amavis/db/; BerkeleyDB 0.25, V4.2
May 11 14:24:57 mx01 postfix/postqueue[2782]: fatal: Cannot flush mail queue - mail system is down
May 11 16:27:30 mx01 postfix/smtpd[2816]: connect from localhost[127.0.0.1]
May 11 16:27:36 mx01 postfix/smtpd[2816]: disconnect from localhost[127.0.0.1]
Hier ganz unten habe ich mmich testweise per telnet auf localhost connected, der smtpd läuft.
Leider habe ich bei den Postfix-Optionen keine weitern zum Log-Mir-Mehr gefunden, um festzustellen, wieso das System wieder down ist.
Kann mir jemand einen Tip geben, wo ich ansetzen kann?
Ich danke Euch für Eure Hilfe.
rkelly_2