I use the following setup: Mdk9.2, av 1.8, xmail 1.17, the server
handles approx 10000 messages a day since 2 weeks and it only happend
once 4 days ago to have the filter stuck at 99% CPU, since killing it
then, it never reapeared. Except for that single case everything worked
perfectly and the hit rate over the viruses is 100%.
I use antivir.de and ClamAV and I'll be also curious to see if that can
be debugged.
I suppose that may appear if the called external program dies suddenly (
segfault or something).
Regards,
Mircea
Kirk Friggstad wrote:
>Hi Phil:
>
>I've been getting similar error messages on our Linux XMail box with AV
>Filter - "Filter error (-5)". In our case, when the filter fails, it starts
>using CPU cycles at an incredible rate, like it's stuck in an infinite loop
>or something. When enough of these filters fail (in our case, a couple
>dozen), the server becomes extremely unresponsive, to the point where it
>takes nearly 20 minutes to me to SSH in, start top, and kill all the hung
>filter processes. (Yes, it would probably be easier to just hit the reset
>button, but this server is in a co-lo facility 100 km away, and I like
>uptime stats :-) )
>
>Our system:
> XMail 1.17 (built from source, stock)
> RedHat Linux 9.0 (upgraded from RHL 7.3, plus additional updates from RHN)
> F-Prot antivirus 4.3.1 for Linux (installed from RPM)
> AV Filter 1.8
>
>There doesn't seem to be any pattern to the failures on our system -
>sometimes the system will run fine for 24 hours or more without any hanging
>filters, and then suddenly 3 or 4 of them will hang within the span of 10
>seconds. We do not have any other filters running on XMail.
>
>I have no idea if the problem lies in XMail, in Peter's filter, or possibly
>even in F-Prot (gotta love debugging processes involving multiple programs
>and vendors). Anyone else out there having a similar problem? Phil, what
>anti-virus are you using with AV Filter?
>
>Thanks to all.
>
>Kirk.
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of Philipp Ringli
>Sent: Thursday, December 04, 2003 2:24 AM
>To: [EMAIL PROTECTED]
>Subject: [xmail] Anti Virus Filter - log entry question
>
>
>hi all,
>
>i seem to have some problems with the Anti Virus Filter 1.8
>(http://www.lindeman.org/filters.html).
>
>my MDK 9.2 box went black. i mean, i had to press the reset button.
>could this have caused it?
>
>maybe someone has a clue on these log entries? (/var/log/messages):
>
>Dec 2 19:55:26 ns1 XMail[2680]: Filter error (-5): Sender =
>"[EMAIL PROTECTED]" Recipient =
>"[EMAIL PROTECTED]" Filter =
>"/var/MailRoot/filters/checkvirus.pl"
>Dec 2 19:55:32 ns1 CROND[10009]: (root) CMD (
>/usr/share/sshd-monitor/sshd-restarter)
>Dec 2 19:59:04 ns1 XMail[2680]: Filter error (-5): Sender =
>"[EMAIL PROTECTED]" Recipient =
>"[EMAIL PROTECTED]" Filter = "/var/MailRoot/bin/sa_filter.pl"
>Dec 2 20:01:30 ns1 CROND[10025]: (root) CMD (nice -n 19 run-parts
>/etc/cron.hourly)
>
>cheers,
>phil
>----------------------------
>sichtwerk gmbh
>http://www.sichtwerk.com
>
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
