[BlueOnyx:26004] Re: Active monitor warnings after AV-Spam update 5210R

[Michael Stauber]

Hi Janwillem,

updated yesterday 2 x 5210R with the latest AV-Spam but one of of the 
servers I get every x hours the mail from Active Monitor:
Active Monitor has detected recent changes in the state of your server 
appliance.
For more details, please see the Active Monitor section of the Server 
Desktop.


Summary of changes:

* The email system is operating normally.
- The SMTP server is operating normally.


There should also be an Active Monior entry for the AV-SPAM itself which 
lists any issues it may have.



I do see a lot of;

Feb 26 07:50:46 ds30 postfix/smtpd[145531]: warning: connect to Milter 
service unix:/run/spamass-milter/postfix/sock: No such file or directory



And checking /usr/sausalito/sbin/avspam_init.pl  
-status shows:

>

| Spamass-Milter | 1 |1 | 0|


The next time this happens, could you please check with this command and 
report what it shows:


systemctl status spamass-milter

I'm especially interested at the log entries at the bottom of that command.

Or you can also find them in /var/log/maillog. That would help with the 
debugging. Or you can send a "Support Request" via the GUI and tick the 
checkbox "Allow Access" and I'll take a look at it.


--
With best regards

Michael Stauber
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26003] Active monitor warnings after AV-Spam update 5210R

[JW Ronken]

Hi all
updated yesterday 2 x 5210R with the latest AV-Spam but one of of the
servers I get every x hours the mail from Active Monitor:
Active Monitor has detected recent changes in the state of your server
appliance.
For more details, please see the Active Monitor section of the Server
Desktop.

Summary of changes:

* The email system is operating normally.
- The SMTP server is operating normally.

I don't get the mail that there is an issue though.. (likely because the
mailserver is down but it's also not queued).

I do see a lot of;

Feb 26 07:50:46 ds30 postfix/smtpd[145531]: warning: connect to Milter
service unix:/run/spamass-milter/postfix/sock: No such file or directory

And checking /usr/sausalito/sbin/avspam_init.pl -status shows:

==

| Service:   | GUI:  | AutoStart: | Running: |

==

| Postfix|   1   |  1 | 1|

| Greylist   |   0   |  0 | 0|

| GeoIP  |   1   |  1 | 1|

| Spamassassin   |   1   |  1 | 1|

| Spamass-Milter |   1   |  1 | 0|

| ClamAV |   0   |  0 | 0|

| ClamAV-Milter  |   0   |  0 | 0|

==

AV-SPAM Email service are in failed state.


A /usr/sausalito/sbin/avspam_init.pl -restart brings them back (and I
suspect this is what Active Monitor does the whole time).


For now, I disabled the Spamass milter but that kind of defeats the purpose
;)


Anyone else seeing this?

thanks

Janwillem
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26002] Re: Nightly logrotate errors

[Richard Owen]

Hi Darren/Michael 

We also have exactly the same issue on our 5210  - I can confirm debug is off 
and no site over quota. 

Kind regards
Richard

Hi,

I've disabled debugging though I don't know why it would have been on.
None of the sites are over quota, but that vsite is one that was transferred 
over from a 5209r server using easy migrate.
Looking in the logs dir of that vsite, I see that many of the files are owned 
by root and not site47-logs.


> -Original Message-
> From: Blueonyx  On Behalf Of 
> Michael Stauber
> Sent: 24 February 2023 18:34
> To: blueonyx@mail.blueonyx.it
> Subject: [BlueOnyx:26000] Re: Nightly logrotate errors
> 
> Hi Darren,
> 
> > Every night, on a 5210r box, I get a cron email showing errors 
> > related to log rotation.
> >
> > This is todays:
> >
> > Thisdir: /home/.sites/site1
> >
> > Thisdir: /home/.sites/site1//var/logs
> >
> > Thisdir: /home/.sites/site1//var/logs/2023
> >
> > Thisdir: /home/.sites/site1//var/logs/2023/2
> >
> > Thisdir: /home/.sites/site1//var/logs/2023/2/23
> 
> > This repeats for every site on the server.
> 
> 
> In /usr/local/sbin/split_logs you apparently have debugging enabled.
> 
> Edit /usr/local/sbin/split_logs and find this line:
> 
> my $DEBUG = 1;
> 
> Change it to this and save the changes:
> 
> my $DEBUG = 0;
> 
> > At the end of that repeating section is:
> >
> > error: error setting owner of /home/.sites/site47/var/logs/web.log 
> > to uid 0 and gid 1009: Operation not permitted
> 
> Please check if that Vsite is over-quota. If it is, then that's the 
> reason why that chown doesn't work.
> 
> > DEBUG: Not running GoAccess because either
> /tmp/.logrotate_apache_access
> > or /home/.sites/server//logs/2023/2/23/ do not exist!
> That's fine, too. It just means that there wasn't a logfile for that 
> Vsite in question.
> 
>  > I am entirely unfamiliar with the log rotation process, can someone  
> > shed any light on what is going on?
> 
> Due to the involved statistics gathering for different services such 
> as GoAccess, Webalizer, AWStats and what not we do a lot of 
> post-processing for the logfile and /usr/local/sbin/split_logs lines 
> up the ducks for that. To facilitate debugging it spits out a lot of 
> info when debugging is enabled, such as in your case. Simply turn 
> debugging off and you'll be fine.
> 
> --
> With best regards
> 
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx