[xmail] Xmail 2.0
Davide, when will we seen Xmail 2.0 (suppose with IMAP) for beta testing? -Sasa - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] av script not stopping
Hi Everyone, I am running Suse Linux with XMail ver 1.16 and using Peter Lindmans AV script. The problem I am having is that the script is not always dying so I end up with like 15 processes of it just hanging there in limbo??? I have two servers doing the exact same thing and it just slows them down big time. Any ideas? Ben - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
On Tuesday 09 December 2003 09:48, you wrote: > Hi Everyone, > I am running Suse Linux with XMail ver 1.16 and using Peter Lindmans AV > script. The problem I am having is that the script is not always dying so > I end up with like 15 processes of it just hanging there in limbo??? I > have two servers doing the exact same thing and it just slows them down big > time. > > Any ideas? > > Ben > - This is a known issue that surfaced in the last couple of weeks. So far nobody can identify the exact cause but Peter is working on a debug version of his script to try and identify the problem. Do you have any other details that might help? Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
All (esp Peter), I don't know if this is a known fact already, or not, but I didn't start having problems with the av script until I upgraded to the most recent version. The previous version worked flawlessly. This is on XMail 1.16. Overall I was VERY pleased with the performance of the script when I had it installed. Have a great day, Toby -- Toby Reiter mailto:[EMAIL PROTECTED] Breezing Internet Communications http://www.breezing.com 1106 West Main Stphone:434.295.2050 Charlottesville, VA 22903fax:603.843.6931 - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
The only other information that might help is that I am using ClamAV and ONLY clamav for my virus scanning. Plus, the only other filter I am using is the SpamAssassin filter. I have the SpamAssassin filter running first and then Peter's AV script. These filters are running for ONLY the filters.in.tab I am going to "turn off" the SpamAssassin filter by removing it from filters.in.tab. Then i will see if it happens or as often and post back here. ben - Original Message - From: "Jeffrey Laramie" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 9:07 AM Subject: [xmail] Re: av script not stopping > On Tuesday 09 December 2003 09:48, you wrote: > > Hi Everyone, > > I am running Suse Linux with XMail ver 1.16 and using Peter Lindmans AV > > script. The problem I am having is that the script is not always dying so > > I end up with like 15 processes of it just hanging there in limbo??? I > > have two servers doing the exact same thing and it just slows them down big > > time. > > > > Any ideas? > > > > Ben > > - > > This is a known issue that surfaced in the last couple of weeks. So far nobody > can identify the exact cause but Peter is working on a debug version of his > script to try and identify the problem. Do you have any other details that > might help? > > Jeff > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Hey Ben: I'm also one of the ones experiencing problems with Peter's AV script. From past discussion here, it doesn't seem to matter which virus scanner is used (F-Prot and ClamAV are the ones reported so far), what version of XMail (seen people reporting this problem with 1.15, 1.16, and 1.17), or what Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the only filter in use. If you'd like to review, the original thread regarding this problem is online in the XMail archive: http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html Hope this helps. Kirk. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Benny Sent: Tuesday, December 09, 2003 9:51 AM To: [EMAIL PROTECTED] Subject: [xmail] Re: av script not stopping The only other information that might help is that I am using ClamAV and ONLY clamav for my virus scanning. Plus, the only other filter I am using is the SpamAssassin filter. I have the SpamAssassin filter running first and then Peter's AV script. These filters are running for ONLY the filters.in.tab I am going to "turn off" the SpamAssassin filter by removing it from filters.in.tab. Then i will see if it happens or as often and post back here. ben - Original Message - From: "Jeffrey Laramie" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 9:07 AM Subject: [xmail] Re: av script not stopping > On Tuesday 09 December 2003 09:48, you wrote: > > Hi Everyone, > > I am running Suse Linux with XMail ver 1.16 and using Peter Lindmans AV > > script. The problem I am having is that the script is not always dying so > > I end up with like 15 processes of it just hanging there in limbo??? I > > have two servers doing the exact same thing and it just slows them down big > > time. > > > > Any ideas? > > > > Ben > > - > > This is a known issue that surfaced in the last couple of weeks. So far nobody > can identify the exact cause but Peter is working on a debug version of his > script to try and identify the problem. Do you have any other details that > might help? > > Jeff > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Thanks Kirk, I will anxiously await the debug version of the script and will be happy to test on my box. Ben - Original Message - From: "Kirk Friggstad" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 9:58 AM Subject: [xmail] Re: av script not stopping > Hey Ben: > > I'm also one of the ones experiencing problems with Peter's AV script. From > past discussion here, it doesn't seem to matter which virus scanner is used > (F-Prot and ClamAV are the ones reported so far), what version of XMail > (seen people reporting this problem with 1.15, 1.16, and 1.17), or what > Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the only > filter in use. > > If you'd like to review, the original thread regarding this problem is > online in the XMail archive: > http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html > > Hope this helps. > > Kirk. > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Benny > Sent: Tuesday, December 09, 2003 9:51 AM > To: [EMAIL PROTECTED] > Subject: [xmail] Re: av script not stopping > > > The only other information that might help is that I am using ClamAV and > ONLY clamav for my virus scanning. Plus, the only other filter I am using > is the SpamAssassin filter. I have the SpamAssassin filter running first > and then Peter's AV script. These filters are running for ONLY the > filters.in.tab > > I am going to "turn off" the SpamAssassin filter by removing it from > filters.in.tab. Then i will see if it happens or as often and post back > here. > > ben > > - Original Message - > From: "Jeffrey Laramie" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, December 09, 2003 9:07 AM > Subject: [xmail] Re: av script not stopping > > > > On Tuesday 09 December 2003 09:48, you wrote: > > > Hi Everyone, > > > I am running Suse Linux with XMail ver 1.16 and using Peter Lindmans > AV > > > script. The problem I am having is that the script is not always dying > so > > > I end up with like 15 processes of it just hanging there in limbo??? I > > > have two servers doing the exact same thing and it just slows them down > big > > > time. > > > > > > Any ideas? > > > > > > Ben > > > - > > > > This is a known issue that surfaced in the last couple of weeks. So far > nobody > > can identify the exact cause but Peter is working on a debug version of > his > > script to try and identify the problem. Do you have any other details that > > might help? > > > > Jeff > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] > > For general help: send the line "help" in the body of a message to > > [EMAIL PROTECTED] > > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
On Tuesday 09 December 2003 10:58, you wrote: > Hey Ben: > > I'm also one of the ones experiencing problems with Peter's AV script. From > past discussion here, it doesn't seem to matter which virus scanner is used > (F-Prot and ClamAV are the ones reported so far), what version of XMail > (seen people reporting this problem with 1.15, 1.16, and 1.17), or what > Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the > only filter in use. > > If you'd like to review, the original thread regarding this problem is > online in the XMail archive: > http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html > I don't think the script version is the issue either since I had processes hang recently with AV script 1.7 and I know others were using 1.8. The weird thing is that this just started happening to configurations that have worked fine in the past. Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
>On Tuesday 09 December 2003 10:58, you wrote: >> Hey Ben: >> >> I'm also one of the ones experiencing problems with Peter's AV script. From >> past discussion here, it doesn't seem to matter which virus scanner is used >> (F-Prot and ClamAV are the ones reported so far), what version of XMail >> (seen people reporting this problem with 1.15, 1.16, and 1.17), or what >> Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the >> only filter in use. >> >> If you'd like to review, the original thread regarding this problem is >> online in the XMail archive: >> http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html >> > >I don't think the script version is the issue either since I had processes >hang recently with AV script 1.7 and I know others were using 1.8. The weird >thing is that this just started happening to configurations that have worked >fine in the past. > >Jeff I thought the version I had that worked was the 1.0 version, but I guess that's probably wrong. Which was the first version to support clamAV? Toby -- Toby Reiter mailto:[EMAIL PROTECTED] Breezing Internet Communications http://www.breezing.com 1106 West Main Stphone:434.295.2050 Charlottesville, VA 22903fax:603.843.6931 - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Ok guys... let me know if any of you have seen this or tried this. I took the "process" that was running in limbo and ran it from command. All the sudden the below message kept on repeating. I had to press CTRL+C to stop it. Here is my command and the output: COMMAND --- /usr/bin/perl -w /var/MailRoot/filters/checkvirus.pl /var/MailRoot/spool/14/13/slog/1059064707303.376856.localhost [EMAIL PROTECTED] [EMAIL PROTECTED] 1059064707303.376856.localhost --- OUTPUT --- Use of uninitialized value in string ne at /var/MailRoot/filters/checkvirus.pl line 772, line 7. Use of uninitialized value in index at /var/MailRoot/filters/checkvirus.pl line 774, line 7. --- I have no clue, but if I had to press control + c to manually stop this than I can only assume that each of the processes are doing the same thing and so that is why it is so intense on the system. The thing I did change between the command listed in the process and the command you see above is that I had to pull a message from the slog directory instead of the "mess" directory, because there were no messages in the "mess" directory. ben - Original Message - From: "Jeffrey Laramie" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 10:09 AM Subject: [xmail] Re: av script not stopping > On Tuesday 09 December 2003 10:58, you wrote: > > Hey Ben: > > > > I'm also one of the ones experiencing problems with Peter's AV script. From > > past discussion here, it doesn't seem to matter which virus scanner is used > > (F-Prot and ClamAV are the ones reported so far), what version of XMail > > (seen people reporting this problem with 1.15, 1.16, and 1.17), or what > > Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the > > only filter in use. > > > > If you'd like to review, the original thread regarding this problem is > > online in the XMail archive: > > http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html > > > > I don't think the script version is the issue either since I had processes > hang recently with AV script 1.7 and I know others were using 1.8. The weird > thing is that this just started happening to configurations that have worked > fine in the past. > > Jeff > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
- Original Message - From: "Toby Reiter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 10:18 AM Subject: [xmail] Re: av script not stopping > >On Tuesday 09 December 2003 10:58, you wrote: > >> Hey Ben: > >> > >> I'm also one of the ones experiencing problems with Peter's AV script. From > >> past discussion here, it doesn't seem to matter which virus scanner is used > >> (F-Prot and ClamAV are the ones reported so far), what version of XMail > >> (seen people reporting this problem with 1.15, 1.16, and 1.17), or what > >> Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the > >> only filter in use. > >> > >> If you'd like to review, the original thread regarding this problem is > >> online in the XMail archive: > >> http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html > >> > > > >I don't think the script version is the issue either since I had processes > >hang recently with AV script 1.7 and I know others were using 1.8. The weird > >thing is that this just started happening to configurations that have worked > >fine in the past. > > > >Jeff > > I thought the version I had that worked was the 1.0 version, but I > guess that's probably wrong. Which was the first version to support > clamAV? > > Toby > -- > Toby Reiter mailto:[EMAIL PROTECTED] > Breezing Internet Communications http://www.breezing.com > 1106 West Main Stphone:434.295.2050 > Charlottesville, VA 22903fax:603.843.6931 > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > 1.8 was the first version to support clamav, I believe. Peter and I had a beta version that I tested with him before that. Both do the same thing, but they did not do it at first. At least, I did not notice it until about roughly 2-3weeks ago? ben - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Hi Benny: Funny - never thought to try that myself - I'll try playing around with that myself next time I see a hung process. However, the file in the "slog" directory is substantially different from the message in the "mess" directory - the file is a log of XMail's delivery attempts for the message (good for debugging frozen and/or bounced messages). If you're looking for an actual message file in the correct spool format, you'll probably want to log in the "froz" directory instead. Kirk -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Benny Sent: Tuesday, December 09, 2003 10:25 AM To: [EMAIL PROTECTED] Subject: [xmail] Re: av script not stopping Ok guys... let me know if any of you have seen this or tried this. I took the "process" that was running in limbo and ran it from command. All the sudden the below message kept on repeating. I had to press CTRL+C to stop it. Here is my command and the output: COMMAND --- /usr/bin/perl -w /var/MailRoot/filters/checkvirus.pl /var/MailRoot/spool/14/13/slog/1059064707303.376856.localhost [EMAIL PROTECTED] [EMAIL PROTECTED] 1059064707303.376856.localhost --- OUTPUT --- Use of uninitialized value in string ne at /var/MailRoot/filters/checkvirus.pl line 772, line 7. Use of uninitialized value in index at /var/MailRoot/filters/checkvirus.pl line 774, line 7. --- I have no clue, but if I had to press control + c to manually stop this than I can only assume that each of the processes are doing the same thing and so that is why it is so intense on the system. The thing I did change between the command listed in the process and the command you see above is that I had to pull a message from the slog directory instead of the "mess" directory, because there were no messages in the "mess" directory. ben - Original Message - From: "Jeffrey Laramie" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 10:09 AM Subject: [xmail] Re: av script not stopping > On Tuesday 09 December 2003 10:58, you wrote: > > Hey Ben: > > > > I'm also one of the ones experiencing problems with Peter's AV script. From > > past discussion here, it doesn't seem to matter which virus scanner is used > > (F-Prot and ClamAV are the ones reported so far), what version of XMail > > (seen people reporting this problem with 1.15, 1.16, and 1.17), or what > > Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the > > only filter in use. > > > > If you'd like to review, the original thread regarding this problem is > > online in the XMail archive: > > http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html > > > > I don't think the script version is the issue either since I had processes > hang recently with AV script 1.7 and I know others were using 1.8. The weird > thing is that this just started happening to configurations that have worked > fine in the past. > > Jeff > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
On Tuesday 09 December 2003 11:37, you wrote: > Hi Benny: > > Funny - never thought to try that myself - I'll try playing around with > that myself next time I see a hung process. > > However, the file in the "slog" directory is substantially different from > the message in the "mess" directory - the file is a log of XMail's delivery > attempts for the message (good for debugging frozen and/or bounced > messages). If you're looking for an actual message file in the correct > spool format, you'll probably want to log in the "froz" directory instead. > > Kirk > OK, here's a crazy thought. Benny hung the script by read an incorrectly formatted file. Could there be an exploit out there that screws with the mail headers and causes the same problem? Just throwing out ideas here. Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Ok, I did the "froz" directory and I get a message like this: - rm: cannot remove `/var/MailRoot/spool/6/13/froz/1070987076346.647594011.srcmailfax.report': No such file or directory - If you run the same command again it will say this, instead of the above: Mail was allready scanned. Ben - Original Message - From: "Kirk Friggstad" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 10:37 AM Subject: [xmail] Re: av script not stopping > Hi Benny: > > Funny - never thought to try that myself - I'll try playing around with that > myself next time I see a hung process. > > However, the file in the "slog" directory is substantially different from > the message in the "mess" directory - the file is a log of XMail's delivery > attempts for the message (good for debugging frozen and/or bounced > messages). If you're looking for an actual message file in the correct spool > format, you'll probably want to log in the "froz" directory instead. > > Kirk > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Benny > Sent: Tuesday, December 09, 2003 10:25 AM > To: [EMAIL PROTECTED] > Subject: [xmail] Re: av script not stopping > > > Ok guys... let me know if any of you have seen this or tried this. I took > the "process" that was running in limbo and ran it from command. All the > sudden the below message kept on repeating. I had to press CTRL+C to stop > it. > > Here is my command and the output: > > COMMAND > --- > /usr/bin/perl -w /var/MailRoot/filters/checkvirus.pl > /var/MailRoot/spool/14/13/slog/1059064707303.376856.localhost > [EMAIL PROTECTED] [EMAIL PROTECTED] 1059064707303.376856.localhost > --- > > OUTPUT > --- > Use of uninitialized value in string ne at > /var/MailRoot/filters/checkvirus.pl line 772, line 7. > Use of uninitialized value in index at /var/MailRoot/filters/checkvirus.pl > line 774, line 7. > --- > > I have no clue, but if I had to press control + c to manually stop this than > I can only assume that each of the processes are doing the same thing and so > that is why it is so intense on the system. > > The thing I did change between the command listed in the process and the > command you see above is that I had to pull a message from the slog > directory instead of the "mess" directory, because there were no messages in > the "mess" directory. > > ben > > - Original Message - > From: "Jeffrey Laramie" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, December 09, 2003 10:09 AM > Subject: [xmail] Re: av script not stopping > > > > On Tuesday 09 December 2003 10:58, you wrote: > > > Hey Ben: > > > > > > I'm also one of the ones experiencing problems with Peter's AV script. > From > > > past discussion here, it doesn't seem to matter which virus scanner is > used > > > (F-Prot and ClamAV are the ones reported so far), what version of XMail > > > (seen people reporting this problem with 1.15, 1.16, and 1.17), or what > > > Linux distro (RedHat, Mandrake, SuSE). In my case, the AV script is the > > > only filter in use. > > > > > > If you'd like to review, the original thread regarding this problem is > > > online in the XMail archive: > > > http://www.mail-archive.com/xmail%40xmailserver.org/msg07865.html > > > > > > > I don't think the script version is the issue either since I had processes > > hang recently with AV script 1.7 and I know others were using 1.8. The > weird > > thing is that this just started happening to configurations that have > worked > > fine in the past. > > > > Jeff > > > > > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] > > For general help: send the line "help" in the body of a message to > > [EMAIL PROTECTED] > > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
- Original Message - From: "Jeffrey Laramie" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 09, 2003 10:48 AM Subject: [xmail] Re: av script not stopping > On Tuesday 09 December 2003 11:37, you wrote: > > Hi Benny: > > > > Funny - never thought to try that myself - I'll try playing around with > > that myself next time I see a hung process. > > > > However, the file in the "slog" directory is substantially different from > > the message in the "mess" directory - the file is a log of XMail's delivery > > attempts for the message (good for debugging frozen and/or bounced > > messages). If you're looking for an actual message file in the correct > > spool format, you'll probably want to log in the "froz" directory instead. > > > > Kirk > > > > OK, here's a crazy thought. Benny hung the script by read an incorrectly > formatted file. Could there be an exploit out there that screws with the mail > headers and causes the same problem? Just throwing out ideas here. > > Jeff > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > Interesting, Jeff either way, if there is an exploit out there or not, shouldn't the script kill itself no matter what kind of file is passed to it? If these assumptions are correct, an exploit would make sense because we all started to see it as just happening with no configuration changes. But if there is anything I have learned with technology assumptions will kill ya. So, I will stop assuming now. :) ben - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Hi Jeff: That thought had occurred to me - but since (at least in my case) by the time I notice a hung filter, the file is no longer in the spool, I haven't had a chance to examine it. Looking through the filter errors in my /var/log/messages, the sender's addresses all look "spammy", so maybe there's a fubar spam mailer out there that has some screwed headers etc. in it? Again, without being able to recover the actual message spool file, there's no way to tell, and I'm just making (hopefully educated) guesses... Kirk. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeffrey Laramie Sent: Tuesday, December 09, 2003 10:48 AM To: [EMAIL PROTECTED] Subject: [xmail] Re: av script not stopping On Tuesday 09 December 2003 11:37, you wrote: > Hi Benny: > > Funny - never thought to try that myself - I'll try playing around with > that myself next time I see a hung process. > > However, the file in the "slog" directory is substantially different from > the message in the "mess" directory - the file is a log of XMail's delivery > attempts for the message (good for debugging frozen and/or bounced > messages). If you're looking for an actual message file in the correct > spool format, you'll probably want to log in the "froz" directory instead. > > Kirk > OK, here's a crazy thought. Benny hung the script by read an incorrectly formatted file. Could there be an exploit out there that screws with the mail headers and causes the same problem? Just throwing out ideas here. Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
On Tuesday 09 December 2003 12:05, you wrote: > Hi Jeff: > > That thought had occurred to me - but since (at least in my case) by the > time I notice a hung filter, the file is no longer in the spool, I haven't > had a chance to examine it. > > Looking through the filter errors in my /var/log/messages, the sender's > addresses all look "spammy", so maybe there's a fubar spam mailer out there > that has some screwed headers etc. in it? Again, without being able to > recover the actual message spool file, there's no way to tell, and I'm just > making (hopefully educated) guesses... > > Kirk. > If we're on the right track here, then having the script log the input data to a temp file before processing and deleting it when finished might be useful. When a process hangs the undeleted temp file would still be there for "forensic" examination, unless of course the argument itself causes the error. Either way we'd know more than we know now :-) We'll have to see what Peter thinks of our ramblings. Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Hey All, I just remembered that my SpamAssassin daemon, spamd, died the same night that I had checkvirus.pl hang. I didn't think much of it at the time but... neither program had any problems in 6+ weeks prior to that. Coincidence? Did anyone else have that happen? Jeff On Tuesday 09 December 2003 09:48, you wrote: > Hi Everyone, > I am running Suse Linux with XMail ver 1.16 and using Peter Lindmans AV > script. The problem I am having is that the script is not always dying so > I end up with like 15 processes of it just hanging there in limbo??? I > have two servers doing the exact same thing and it just slows them down big > time. > > Any ideas? > > Ben > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Toby Reiter wrote: > All (esp Peter), > I don't know if this is a known fact already, or not, but I didn't > start having problems with the av script until I upgraded to the most > recent version. The previous version worked flawlessly. This is on > XMail 1.16. > > Overall I was VERY pleased with the performance of the script when I > had it installed. With what version did you never saw this problem? -- Groeten, Peter -- insufficient sleep --- --- Heb je een Dreambox 7000S ? --- Kijk eens op http://www.dreamvcr.com --- Kijk ook op http://www.lindeman.org --- ICQ 22383596 --- Uptime lindeman.org - 6 days, 23 hours and 57 minutes, 1 user logged in. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Benny wrote: > The only other information that might help is that I am using ClamAV and > ONLY clamav for my virus scanning. Plus, the only other filter I am using > is the SpamAssassin filter. I have the SpamAssassin filter running first > and then Peter's AV script. These filters are running for ONLY the > filters.in.tab > > I am going to "turn off" the SpamAssassin filter by removing it from > filters.in.tab. Then i will see if it happens or as often and post back > here. Does it make a change when you first run the AV script and then Spamassasin? This is how it works here in filters.in.tab "*" "*" "0.0.0.0/0" "0.0.0.0/0" "av-filter.tab" "*" "*" "0.0.0.0/0" "0.0.0.0/0" "safilter.tab" Is it a possibility that the AV script is started but the message is allready dropped by the sa filter? -- Groeten, Peter -- File not found. Should I fake it? (Y/N) --- --- Heb je een Dreambox 7000S ? --- Kijk eens op http://www.dreamvcr.com --- Kijk ook op http://www.lindeman.org --- ICQ 22383596 --- Uptime lindeman.org - 6 days, 23 hours and 58 minutes, 1 user logged in. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Toby Reiter wrote: > I thought the version I had that worked was the 1.0 version, but I > guess that's probably wrong. Which was the first version to support > clamAV? In 1.7 I had added ClamAV support -- Groeten, Peter -- What the hell!? --- --- Heb je een Dreambox 7000S ? --- Kijk eens op http://www.dreamvcr.com --- Kijk ook op http://www.lindeman.org --- ICQ 22383596 --- Uptime lindeman.org - 7 days, 0 hours and 02 minutes, 1 user logged in. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
>Toby Reiter wrote: > >> All (esp Peter), >> I don't know if this is a known fact already, or not, but I didn't >> start having problems with the av script until I upgraded to the most >> recent version. The previous version worked flawlessly. This is on >> XMail 1.16. >> >> Overall I was VERY pleased with the performance of the script when I >> had it installed. > >With what version did you never saw this problem? > Peter, If I had to guess it would be 1.7. Did 1.7 support clamAv? Thanks, Toby -- Toby Reiter mailto:[EMAIL PROTECTED] Breezing Internet Communications http://www.breezing.com 1106 West Main Stphone:434.295.2050 Charlottesville, VA 22903fax:603.843.6931 - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Benny wrote: > Ok guys... let me know if any of you have seen this or tried this. I took > the "process" that was running in limbo and ran it from command. All the > sudden the below message kept on repeating. I had to press CTRL+C to stop > it. > > Here is my command and the output: > > COMMAND > --- > /usr/bin/perl -w /var/MailRoot/filters/checkvirus.pl > /var/MailRoot/spool/14/13/slog/1059064707303.376856.localhost > [EMAIL PROTECTED] [EMAIL PROTECTED] 1059064707303.376856.localhost > --- > > OUTPUT > --- > Use of uninitialized value in string ne at > /var/MailRoot/filters/checkvirus.pl line 772, line 7. > Use of uninitialized value in index at /var/MailRoot/filters/checkvirus.pl > line 774, line 7. > --- > > I have no clue, but if I had to press control + c to manually stop this than > I can only assume that each of the processes are doing the same thing and so > that is why it is so intense on the system. > > The thing I did change between the command listed in the process and the > command you see above is that I had to pull a message from the slog > directory instead of the "mess" directory, because there were no messages in > the "mess" directory. I have an idea, if I analyze this correctly the message cannot be read correctly and then the filter is in a loop. I will change this function so this cannot happen. I'll announce it here when it is ready! -- Groeten, Peter -- The route is not available. --- --- Heb je een Dreambox 7000S ? --- Kijk eens op http://www.dreamvcr.com --- Kijk ook op http://www.lindeman.org --- ICQ 22383596 --- Uptime lindeman.org - 7 days, 0 hours and 05 minutes, 1 user logged in. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
On Tuesday 09 December 2003 16:27, you wrote: > Benny wrote: > > The only other information that might help is that I am using ClamAV and > > ONLY clamav for my virus scanning. Plus, the only other filter I am > > using is the SpamAssassin filter. I have the SpamAssassin filter running > > first and then Peter's AV script. These filters are running for ONLY the > > filters.in.tab > > > > I am going to "turn off" the SpamAssassin filter by removing it from > > filters.in.tab. Then i will see if it happens or as often and post > > back here. > > Does it make a change when you first run the AV script and then > Spamassasin? > > This is how it works here in filters.in.tab > > "*" "*" "0.0.0.0/0" "0.0.0.0/0" "av-filter.tab" > "*" "*" "0.0.0.0/0" "0.0.0.0/0" "safilter.tab" > > Is it a possibility that the AV script is started but the message is > allready dropped by the sa filter? > Hi Peter I have 2 servers set up exactly this way with the AV fllter first, and I've had the problem in both of them now. Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: av script not stopping
Toby Reiter wrote: >>> Overall I was VERY pleased with the performance of the script when I >>> had it installed. >> >>With what version did you never saw this problem? >> > > Peter, > If I had to guess it would be 1.7. Did 1.7 support clamAv? Yep, that is the first version with ClamAV support. Another message here triggered something and I have found a potential lockup. I am now fixing it. Anybody willing to test please send me an email. -- Groeten, Peter -- Ik steun openbaar onderweis. --- --- Heb je een Dreambox 7000S ? --- Kijk eens op http://www.dreamvcr.com --- Kijk ook op http://www.lindeman.org --- ICQ 22383596 --- Uptime lindeman.org - 7 days, 0 hours and 15 minutes, 2 users logged in. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
