lkolchin wrote:

> Hi,

> I've run (find /var/spool/amavis -type d -name 'amavis-*' -prune -mmin +30 
> -exec rm -rf {} \;
> Restarted amavisd-new, clamAV and postfix, and it seems to work OK now,
> But I want to avoid this in the future and find the cause of that bug.

> These are the versions installed on my server:
> amavisd-new-20030616p9-3.6                    Tue Sep  6 16:46:59 2005
> spamassassin-2.64-3.2                         Tue Sep  6 16:46:51 2005
> perl-spamassassin-2.64-3.2                    Tue Sep  6 16:46:30 2005

> As far as I can see I've started to get "status=deferred" messages at Dec 22 
> 04:24:01 and this message repeated every 16 min.
> not only for [EMAIL PROTECTED] user but also for other users:
> -----------------------------------------------------------------

> Dec 22 04:24:01 mail postfix/pipe[24644]: 054301BB9B: to=<[EMAIL PROTECTED]>, 
> relay=cyrus, delay=231660, status=defer
> red (temporary failure)
> Dec 22 04:24:01 mail postfix/pipe[24641]: 49FB41F5F9: to=<[EMAIL PROTECTED]>, 
> relay=cyrus, delay=142821, status=defer
> red (temporary failure)
> Dec 22 04:24:01 mail postfix/pipe[24644]: 9D4321F5CA: to=<[EMAIL PROTECTED]>, 
> relay=cyrus, delay=230213, status=defer
> red (temporary failure)

The above appears to be a problem with cyrus (or the user's mailbox? Dunno).

> Dec 22 04:24:31 mail postfix/smtp[24635]: connect to 24.on.cc[66.246.195.41]: 
> Connection timed out (port 25)
> Dec 22 04:24:31 mail postfix/smtp[24635]: 2DD121F5CB: to=<[EMAIL PROTECTED]>, 
> relay=none, delay=202768, status=deferred (connect t
> o 24.on.cc[66.246.195.41]: Connection timed out)
> Dec 22 04:24:31 mail postfix/smtp[24637]: connect to 
> linux.uovs.ac.za[196.21.181.2]: Connection timed out (port 25)
> Dec 22 04:24:31 mail postfix/smtp[24639]: connect to 24.on.cc[66.246.195.41]: 
> Connection timed out (port 25)
> Dec 22 04:24:31 mail postfix/smtp[24640]: connect to 
> linux.uovs.ac.za[196.21.181.2]: Connection timed out (port 25)
> Dec 22 04:24:31 mail postfix/smtp[24637]: 801141F5E5: to=<[EMAIL PROTECTED]>, 
> relay=none, delay=202450, status=deferred (
> connect to linux.uovs.ac.za[196.21.181.2]: Connection timed out)
> Dec 22 04:24:31 mail postfix/smtp[24639]: 8F64F1C4EE: to=<[EMAIL PROTECTED]>, 
> relay=none, delay=202451, status=deferred (connect t
> o 24.on.cc[66.246.195.41]: Connection timed out)
> Dec 22 04:24:31 mail postfix/smtp[24640]: E771C1B44E: to=<[EMAIL PROTECTED]>, 
> relay=none, delay=202770, status=deferred (
> connect to linux.uovs.ac.za[196.21.181.2]: Connection timed out)
> -------------------------------------------------------------------

The above appear to be normal undeliverable DSNs, not a problem.

> It seems that some users got this message and some got their mail as they 
> should.

What message are you referring to?

> I see "TROUBLE" message on Dec 25 22:45:48 (See below):
> ----------------------------------------------------------------
> Dec 25 22:45:48 mail amavis[27727]: (27727-04) TROUBLE in check_mail: 
> decoding2-get-file-types FAILED: timed out
> Dec 25 22:45:48 mail amavis[27727]: (27727-04) PRESERVING EVIDENCE in 
> /var/spool/amavis/amavis-20051225T222829-27727
> Dec 25 22:45:48 mail amavis[27727]: (27727-04) TIMING [total 627447 ms] - 
> SMTP EHLO: 1 (0%), SMTP pre-MAIL: 0 (0%), SMTP pre-
> DATA-flush: 3 (0%), SMTP DATA: 46 (0%), body hash: 1 (0%), mime_decode: 31 
> (0%), rundown: 627363 (100%)

This is where the amavisd-new problem is. Don't know what the cause
is. What does 'postconf message_size_limit' say? Maybe you should show
the output of 'amavisd debug' so we can see what versions of external
programs you are using. Maybe it would be of some use to see the
entire set of amavisd log entries for this particular message.

grep '27727-04' /var/log/maillog (for example)

It may be of use to also look at the preserved evidence:
/var/spool/amavis/amavis-20051225T222829-27727/email.txt
to see if it tells any stories.

> Dec 25 22:45:49 mail postfix/smtpd[28010]: too many errors after RCPT from 
> bzq-224-205.red.bezeqint.net[212.179.224.205]
> Dec 25 22:45:49 mail postfix/smtpd[28010]: disconnect from 
> bzq-224-205.red.bezeqint.net[212.179.224.205]
> Dec 25 22:45:50 mail postfix/smtpd[28010]: connect from 
> mr1.haifa.ac.il[132.74.1.39]

The above log entries are unrelated to any of this, and are normal.

> Any thoughts/suggestions?

> Regards,
> Leon

Gary V



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to