[SOLVED] spamassassin problem? spam no longer filtered?

[jallen]

So, some of our employees moved one of our zimbra boxes from one location to other in the same building. And I think they powered off the server without shutting it down properly...

Everything seems to be allright, except spam is no longer filtering.



However-

in the admin GUI it shows antispam with a nice blue checkbox as it is running

Also-

 [zimbra@mail ~]$  zmantispamctl status
[zimbra@mail ~]$  zmantispamctl stop
[zimbra@mail ~]$  zmantispamctl start
[zimbra@mail ~]$  zmantispamctl status
[zimbra@mail ~]$ 
  

There is no reply when I do these commands.. I am simply returned to the prompt.

Doesn't look good... I'm unsure how to proceed from here. Suggestions?

Oh and here's the version and platform.. I realize I'm a bit behind on the updates.

 Name        : zimbra-core                  Relocations: (not relocatable)
Version     : 4.5.6_GA_1044.RHEL4               Vendor: Zimbra, Inc.
Release     : 20070706161941 
  

[mmorse]

Welcome to the forums,
4.5.6 had a build of clamav that tends to do the exact opposite of your situation (actually blocks email from being sent). We can check some other places to see what's enabled where, but you'll be better off upgrading to 4.5.11 (or making the jump to 5.0.2) anyways.
4.5.11 & 5.0.2 Released!
Don't forget a backup: Open Source Edition Backup Procedure - Zimbra :: Wiki

[jallen]

You jinxed me! LOL As soon as I tried a reboot.. all email is being deferred, and zmclamdctl is not running, and therefore,

 Feb 19 16:51:01 mail amavis[11559]: (11559-08-7) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
Feb 19 16:51:01 mail amavis[15282]: (15282-04-7) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20080219T165051-15282
Feb 19 16:51:01 mail amavis[16541]: (16541-01-6) (!!)WARN: all primary virus scanners failed, considering backups
Feb 19 16:51:01 mail amavis[16541]: (16541-01-6) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 54) line 269.
Feb 19 16:51:01 mail amavis[16541]: (16541-01-6) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20080219T165049-16541
Feb 19 16:51:02 mail amavis[11557]: (11557-07-6) (!!)ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Cant connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 54) line 269. 
  

I tried going to the GUI and turn off AS/AV and restart services... I'm trying to buy some time TEMPORARILY... How do I turn off the mail proxy and disable AS/AV so their email is not being deferred any longer until I am able to go onsite tomorrow morning? I plan to do the upgrade then, but am hoping I can bandaid it somehow (I have another emergency going on.. the fun never stops... hahahaha)

I don't understand how amavis is set up... Not in text files apparently.. I can't simply go into amavisd.conf for example and # out the lines to disable the proxy... Hmm Should be a way tho..

[dwmtractor]

You said it yourself. Go into the gui and disable AS/AV services. You may (I don't remember here) have to stop & restart zimbra services after this to get it to "take" but I don't think so.

Be aware with that version that when you change a setting on AS/AV you may lose any RBLs that you have configured using zmprov.

[jallen]

I tried that.. I get an error saying "Both services must be enabled or installed to be able to disable it"... And obviously I'm having trouble with the services...

I'll try one more time...

*edit*
Obviously I greatly paraphrased: Note: Settings only apply to servers that have the appropriate service(s) installed and enabled. Server settings override global settings.

I think that might be reason why it is not "taking" is because the clamav service is failing to start and I get the INET socket 127.0.0.0.1:3310 error as a result.

[mmorse]

Read this: [SOLVED] Clamd.pid - no such file

[jallen]

Read this: [SOLVED] Clamd.pid - no such file

Sir,

YOU'RE DA MAN!

I only had to follow the increasing the watchdog timeout & touch clamd.pid suggestion..

I'm back in business! Spam filtering is working just fine. Just not virus.. That's something I'll deal with in the next couple days. Yeah, I'll do a version upgrade

Thanks so much for the bandaid!