Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 06-11-2007, 09:10 AM
Senior Member
 
Posts: 68
Exclamation Antivirus is blocking emails in deffered queue

Hi ,

I'm having zimbra open source version installed on a open Suse 10.2 . Everything went well from about a month , and then suddenly , (after a virus database update i guess) emails were not sent anymore . What is even worse is that the server was and still is in production. I manage to discover that the antivirus was the one who was causing my emails for being sent ...i will paste below part of the content of /var/log/messages from when all the problems begun..
now the users are getting their mails but the antivirus protection is off..i try to turn it on and i had the same problem..
Reply With Quote
  #2 (permalink)  
Old 06-11-2007, 09:12 AM
Senior Member
 
Posts: 68
Default

here are the logs and you can see the first of the many errors i get at the bottom of it (bold text).

Code:
Jun  7 14:10:49 server03 amavis[23655]: starting.  /opt/zimbra/amavisd/sbin/amavisd at server03.computervoice.com amavisd-new-2.4.3 (20060930), Unicode aware, LANG=C
Jun  7 14:10:49 server03 amavis[23655]: user=1001, EUID: 1001 (1001);  group=, EGID: 1000 1000 51 5 (1000 1000 51 5); log_level=1
Jun  7 14:10:49 server03 amavis[23655]: Perl version               5.008008
Jun  7 14:10:50 server03 clamd[23678]: Protecting against 93358 viruses.
Jun  7 14:10:50 server03 clamd[23738]: Bound to port 3310
Jun  7 14:10:50 server03 clamd[23738]: Setting connection queue length to 15
Jun  7 14:10:50 server03 clamd[23738]: Archive: Archived file size limit set to 104857600 bytes.
Jun  7 14:10:50 server03 clamd[23738]: Archive: Recursion level limit set to 8.
Jun  7 14:10:50 server03 clamd[23738]: Archive: Files limit set to 1000.
Jun  7 14:10:50 server03 clamd[23738]: Archive: Compression ratio limit set to 250.
Jun  7 14:10:50 server03 clamd[23738]: Archive support enabled.
Jun  7 14:10:50 server03 clamd[23738]: Archive: RAR support disabled.
Jun  7 14:10:50 server03 clamd[23738]: Portable Executable support enabled.
Jun  7 14:10:50 server03 clamd[23738]: Mail files support enabled.
Jun  7 14:10:50 server03 clamd[23738]: Mail: Recursion level limit set to 64.
Jun  7 14:10:50 server03 clamd[23738]: OLE2 support enabled.
Jun  7 14:10:50 server03 clamd[23738]: HTML support enabled.
Jun  7 14:10:50 server03 clamd[23738]: Self checking every 1800 seconds.
Jun  7 14:10:50 server03 saslauthd: auth_zimbra_init: zimbra_cert_check is off!
Jun  7 14:10:51 server03 saslauthd[23779]: detach_tty      : master pid is: 23779
Jun  7 14:10:51 server03 saslauthd[23779]: ipc_init        : listening on socket: /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/state/mux
Jun  7 14:10:51 server03 amavis[23655]: SpamControl: init_pre_chroot done
Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Process Backgrounded
Jun  7 14:10:51 server03 amavis[23785]: Net::Server: 2007/06/07-14:10:51 Amavis (type Net::Server::PreForkSimple) starting! pid(23785)
Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Binding to UNIX socket file /opt/zimbra/amavisd/amavisd.sock using SOCK_STREAM
Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Group Not Defined.  Defaulting to EGID '1000 1000 51 5'
Jun  7 14:10:51 server03 amavis[23785]: Net::Server: User Not Defined.  Defaulting to EUID '1001'
Jun  7 14:10:51 server03 amavis[23785]: Module Amavis::Conf        2.072
Jun  7 14:10:51 server03 amavis[23785]: Module Archive::Tar        1.30
Jun  7 14:10:51 server03 amavis[23785]: Module Archive::Zip        1.18
Jun  7 14:10:51 server03 amavis[23785]: Module BerkeleyDB          0.31
Jun  7 14:10:51 server03 amavis[23785]: Module Compress::Zlib      1.42
Jun  7 14:10:51 server03 amavis[23785]: Module Convert::TNEF       0.17
Jun  7 14:10:51 server03 amavis[23785]: Module Convert::UUlib      1.08
Jun  7 14:10:51 server03 amavis[23785]: Module DBD::mysql          4.001
Jun  7 14:10:51 server03 amavis[23785]: Module DBI                 1.53
Jun  7 14:10:51 server03 amavis[23785]: Module DB_File             1.815
Jun  7 14:10:51 server03 amavis[23785]: Module Digest::MD5         2.36
Jun  7 14:10:51 server03 amavis[23785]: Module MIME::Entity        5.420
Jun  7 14:10:51 server03 amavis[23785]: Module MIME::Parser        5.420
Jun  7 14:10:51 server03 amavis[23785]: Module MIME::Tools         5.420
Jun  7 14:10:51 server03 amavis[23785]: Module Mail::Header        1.74
Jun  7 14:10:51 server03 amavis[23785]: Module Mail::Internet      1.74
Jun  7 14:10:51 server03 amavis[23785]: Module Mail::SPF::Query    1.999001
Jun  7 14:10:51 server03 amavis[23785]: Module Mail::SpamAssassin  3.001007
Jun  7 14:10:51 server03 amavis[23785]: Module Net::Cmd            2.27
Jun  7 14:10:51 server03 amavis[23785]: Module Net::DNS            0.59
Jun  7 14:10:51 server03 amavis[23785]: Module Net::LDAP           0.33
Jun  7 14:10:51 server03 amavis[23785]: Module Net::SMTP           2.30
Jun  7 14:10:51 server03 amavis[23785]: Module Net::Server         0.95
Jun  7 14:10:51 server03 amavis[23785]: Module Time::HiRes         1.9704
Jun  7 14:10:51 server03 amavis[23785]: Module Unix::Syslog        0.99
Jun  7 14:10:51 server03 amavis[23785]: Amavis::DB code      loaded
Jun  7 14:10:51 server03 amavis[23785]: Amavis::Cache code   loaded
Jun  7 14:10:51 server03 amavis[23785]: SQL base code        NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: SQL::Log code        NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: SQL::Quarantine      NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: Lookup::SQL code     NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: Lookup::LDAP code    loaded
Jun  7 14:10:51 server03 amavis[23785]: AM.PDP-in proto code loaded
Jun  7 14:10:51 server03 amavis[23785]: SMTP-in proto code   loaded
Jun  7 14:10:51 server03 amavis[23785]: Courier proto code   NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: SMTP-out proto code  loaded
Jun  7 14:10:51 server03 amavis[23785]: Pipe-out proto code  NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: BSMTP-out proto code NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: Local-out proto code loaded
Jun  7 14:10:51 server03 amavis[23785]: OS_Fingerprint code  NOT loaded
Jun  7 14:10:51 server03 amavis[23785]: ANTI-VIRUS code      loaded
Jun  7 14:10:51 server03 amavis[23785]: ANTI-SPAM code       loaded
Jun  7 14:10:51 server03 amavis[23785]: ANTI-SPAM-SA code    loaded
Jun  7 14:10:51 server03 amavis[23785]: Unpackers code       loaded
Jun  7 14:10:51 server03 amavis[23785]: Found $file            at /usr/bin/file
Jun  7 14:10:51 server03 amavis[23785]: No $dspam,             not using it
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .mail
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .asc 
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .uue 
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .hqx 
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .ync 
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .F    tried: unfreeze, freeze -d, melt, fcat
Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .Z    at /usr/bin/gzip -d
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .gz  
Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .bz2  at /usr/bin/bzip2 -d
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .lzo  tried: lzop -d
Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .rpm  at /usr/bin/rpm2cpio
Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .cpio at /usr/bin/pax
Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .tar  at /usr/bin/pax
Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .deb  at /usr/bin/ar
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .zip 
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .rar  tried: rar, unrar
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .arj  tried: arj, unarj
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .arc  tried: nomarch, arc
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .zoo  tried: zoo
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .lha  tried: lha
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .cab  tried: cabextract
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .tnef tried: tnef
Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .tnef
Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .exe  tried: rar, unrar; lha; arj, unarj
Jun  7 14:10:51 server03 amavis[23785]: Using internal av scanner code for (primary) ClamAV-clamd
Jun  7 14:10:51 server03 amavis[23785]: Creating db in /opt/zimbra/amavisd/db/; BerkeleyDB 0.31, libdb 4.2
Jun  7 14:10:52 server03 amavis[23785]: SpamControl: initializing Mail::SpamAssassin
Jun  7 14:10:53 server03 amavis[23785]: SpamControl: init_pre_fork done
Jun  7 14:11:00 server03 sudo:   zimbra : TTY=pts/0 ; PWD=/opt/zimbra/postfix-2.2.9/conf ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf mynetworks
Jun  7 14:11:08 server03 amavis[23792]: (23792-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070607T141108-23792: <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com> SIZE=61776 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <sbenz@computervoice.com>; Thu,  7 Jun 2007 14:11:08 -0500 (CDT)
Jun  7 14:11:08 server03 amavis[23792]: (23792-01) Checking: V-znA6dlcYFO [204.99.118.101] <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>
Jun  7 14:11:12 server03 amavis[23792]: (23792-01) (!)FWD via SMTP: <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 3121., MTA([127.0.0.1]:10025), id=23792-01
Jun  7 14:11:12 server03 amavis[23792]: (23792-01) Blocked TEMPFAIL, [204.99.118.101] [204.99.118.101] <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>, Message-ID: <CEA6F18023033344A48F7328AA59912301051A41@ILNBMLP23.caremarkrx.net>, mail_id: V-znA6dlcYFO, Hits: -4.356, 4137 ms
Jun  7 14:11:22 server03 amavis[23792]: (23792-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070607T141108-23792: <wiecmlrxvffs.vinpjgwbh@hyphenatedownturn.com> -> <manta@computervoice.com> SIZE=2361 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <manta@computervoice.com>; Thu,  7 Jun 2007 14:11:22 -0500 (CDT)
and from that moment this error blocked my emails in the deffered queue (i had like 1000 mails) until i stopped the antivirus service .
could i get some help on this one ? i would really like to have the antivirus protection again .

Last edited by sergiumartin; 06-11-2007 at 09:15 AM..
Reply With Quote
  #3 (permalink)  
Old 06-13-2007, 04:39 AM
Senior Member
 
Posts: 68
Question

is there a chance to get some help on this one ? i would really appreciate it..thanks
Reply With Quote
  #4 (permalink)  
Old 06-13-2007, 05:12 AM
Zimbra Consultant & Moderator
 
Posts: 19,640
Default

According to the log snippet you posted it can't connect to port 10025:

Code:
Jun  7 14:11:12 server03 amavis[23792]: (23792-01) (!)FWD via SMTP: <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 3121., MTA([127.0.0.1]:10025), id=23792-01
Jun  7 14:11:12 server03 amavis[23792]: (23792-01) Blocked TEMPFAIL, [204.99.118.101] [204.99.118.101] <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>
When you're on the Zimbra server can you telnet to that port at localhost? Any other errors in the log?
__________________
Regards


Bill
Reply With Quote
  #5 (permalink)  
Old 06-13-2007, 06:47 AM
Senior Member
 
Posts: 68
Default

phoenix . 10x for the reply .
i can connect on localhost on port 10025 ..
right now i started the antivirus service again..so i can show you better the messages i get in the log and also i made a screenshot for you

Last edited by sergiumartin; 06-13-2007 at 09:29 AM..
Reply With Quote
  #6 (permalink)  
Old 06-13-2007, 06:56 AM
Senior Member
 
Posts: 68
Default

here is the zimbra.log content since i started the antivirus service again ..
you can see at the begin that clamd didn't really start..so i used zmclamdctl start and then all services looked ok , but i still got the previous errors and messages still get stuck in deffered queue ..

Code:
Jun 13 07:31:37 server03 amavis[22072]: starting.  /opt/zimbra/amavisd/sbin/amavisd at server03.computervoice.com amavisd-new-2.4.3 (20060930), Unicode aware, LANG=en_US.UTF-8
Jun 13 07:31:37 server03 amavis[22072]: user=1001, EUID: 1001 (1001);  group=, EGID: 1000 1000 51 5 (1000 1000 51 5); log_level=1
Jun 13 07:31:37 server03 amavis[22072]: Perl version               5.008008
Jun 13 07:31:38 server03 amavis[22072]: SpamControl: init_pre_chroot done
Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Process Backgrounded
Jun 13 07:31:38 server03 amavis[22073]: Net::Server: 2007/06/13-07:31:38 Amavis (type Net::Server::PreForkSimple) starting! pid(22073)
Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Binding to UNIX socket file /opt/zimbra/amavisd/amavisd.sock using SOCK_STREAM
Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Group Not Defined.  Defaulting to EGID '1000 1000 51 5'
Jun 13 07:31:38 server03 amavis[22073]: Net::Server: User Not Defined.  Defaulting to EUID '1001'
Jun 13 07:31:38 server03 amavis[22073]: Module Amavis::Conf        2.072
Jun 13 07:31:38 server03 amavis[22073]: Module Archive::Tar        1.30
Jun 13 07:31:38 server03 amavis[22073]: Module Archive::Zip        1.18
Jun 13 07:31:38 server03 amavis[22073]: Module BerkeleyDB          0.31
Jun 13 07:31:38 server03 amavis[22073]: Module Compress::Zlib      1.42
Jun 13 07:31:38 server03 amavis[22073]: Module Convert::TNEF       0.17
Jun 13 07:31:38 server03 amavis[22073]: Module Convert::UUlib      1.08
Jun 13 07:31:38 server03 amavis[22073]: Module DBD::mysql          4.001
Jun 13 07:31:38 server03 amavis[22073]: Module DBI                 1.53
Jun 13 07:31:38 server03 amavis[22073]: Module DB_File             1.815
Jun 13 07:31:38 server03 amavis[22073]: Module Digest::MD5         2.36
Jun 13 07:31:38 server03 amavis[22073]: Module MIME::Entity        5.420
Jun 13 07:31:38 server03 amavis[22073]: Module MIME::Parser        5.420
Jun 13 07:31:38 server03 amavis[22073]: Module MIME::Tools         5.420
Jun 13 07:31:38 server03 amavis[22073]: Module Mail::Header        1.74
Jun 13 07:31:38 server03 amavis[22073]: Module Mail::Internet      1.74
Jun 13 07:31:38 server03 amavis[22073]: Module Mail::SPF::Query    1.999001
Jun 13 07:31:38 server03 amavis[22073]: Module Mail::SpamAssassin  3.001007
Jun 13 07:31:38 server03 amavis[22073]: Module Net::Cmd            2.27
Jun 13 07:31:38 server03 amavis[22073]: Module Net::DNS            0.59
Jun 13 07:31:38 server03 amavis[22073]: Module Net::LDAP           0.33
Jun 13 07:31:38 server03 amavis[22073]: Module Net::SMTP           2.30
Jun 13 07:31:38 server03 amavis[22073]: Module Net::Server         0.95
Jun 13 07:31:38 server03 amavis[22073]: Module Time::HiRes         1.9704
Jun 13 07:31:38 server03 amavis[22073]: Module Unix::Syslog        0.99
Jun 13 07:31:38 server03 amavis[22073]: Amavis::DB code      loaded
Jun 13 07:31:38 server03 amavis[22073]: Amavis::Cache code   loaded
Jun 13 07:31:38 server03 amavis[22073]: SQL base code        NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: SQL::Log code        NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: SQL::Quarantine      NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: Lookup::SQL code     NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: Lookup::LDAP code    loaded
Jun 13 07:31:38 server03 amavis[22073]: AM.PDP-in proto code loaded
Jun 13 07:31:38 server03 amavis[22073]: SMTP-in proto code   loaded
Jun 13 07:31:38 server03 amavis[22073]: Courier proto code   NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: SMTP-out proto code  loaded
Jun 13 07:31:38 server03 amavis[22073]: Pipe-out proto code  NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: BSMTP-out proto code NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: Local-out proto code loaded
Jun 13 07:31:38 server03 amavis[22073]: OS_Fingerprint code  NOT loaded
Jun 13 07:31:38 server03 amavis[22073]: ANTI-VIRUS code      loaded
Jun 13 07:31:38 server03 amavis[22073]: ANTI-SPAM code       loaded
Jun 13 07:31:38 server03 amavis[22073]: ANTI-SPAM-SA code    loaded
Jun 13 07:31:38 server03 amavis[22073]: Unpackers code       loaded
Jun 13 07:31:38 server03 clamd[22086]: Daemon started.
Jun 13 07:31:38 server03 clamd[22086]: clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i686)
Jun 13 07:31:38 server03 clamd[22086]: Log file size limited to 20971520 bytes.
Jun 13 07:31:38 server03 clamd[22086]: Reading databases from /opt/zimbra/clamav/db
Jun 13 07:31:38 server03 amavis[22073]: Found $file            at /usr/bin/file
Jun 13 07:31:38 server03 amavis[22073]: No $dspam,             not using it
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .mail
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .asc 
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .uue 
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .hqx 
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .ync 
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .F    tried: unfreeze, freeze -d, melt, fcat
Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .Z    at /usr/bin/gzip -d
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .gz  
Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .bz2  at /usr/bin/bzip2 -d
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .lzo  tried: lzop -d
Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .rpm  at /usr/bin/rpm2cpio
Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .cpio at /usr/bin/pax
Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .tar  at /usr/bin/pax
Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .deb  at /usr/bin/ar
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .zip 
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .rar  tried: rar, unrar
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .arj  tried: arj, unarj
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .arc  tried: nomarch, arc
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .zoo  tried: zoo
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .lha  tried: lha
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .cab  tried: cabextract
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .tnef tried: tnef
Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .tnef
Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .exe  tried: rar, unrar; lha; arj, unarj
Jun 13 07:31:38 server03 amavis[22073]: Using internal av scanner code for (primary) ClamAV-clamd
Jun 13 07:31:38 server03 amavis[22073]: Creating db in /opt/zimbra/amavisd/db/; BerkeleyDB 0.31, libdb 4.2
Jun 13 07:31:39 server03 amavis[22073]: SpamControl: initializing Mail::SpamAssassin
Jun 13 07:31:40 server03 amavis[22073]: SpamControl: init_pre_fork done
Jun 13 07:31:40 server03 sudo:   zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postalias /etc/aliases
Jun 13 07:31:41 server03 sudo:   zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postfix reload norewrite
Jun 13 07:31:41 server03 clamd[22086]: Protecting against 93408 viruses.
Jun 13 07:31:41 server03 postfix/postfix-script: refreshing the Postfix mail system
Jun 13 07:31:41 server03 postfix/master[2484]: reload configuration /opt/zimbra/postfix-2.2.9/conf
Jun 13 07:31:41 server03 postfix/anvil[24956]: statistics: max connection rate 1/60s for (smtp:64.132.92.129) at Jun 13 07:28:07
Jun 13 07:31:41 server03 postfix/anvil[24956]: statistics: max connection count 1 for (smtp:64.132.92.129) at Jun 13 07:28:07
Jun 13 07:31:41 server03 postfix/anvil[24956]: statistics: max cache size 2 at 
Jun 13 07:32:32 server03 postfix/smtpd[22267]: connect from eh1.eyezonhealth.com[65.111.174.144]
Jun 13 07:32:32 server03 postfix/smtpd[22267]: 4AB831128F8E: client=eh1.eyezonhealth.com[65.111.174.144]
Jun 13 07:32:32 server03 postfix/cleanup[22272]: 4AB831128F8E: message-id=<20070613123232.4AB831128F8E@server03.computervoice.com>
Jun 13 07:32:32 server03 postfix/qmgr[22120]: 4AB831128F8E: from=<LindoraLeanForLife@eyezonhealth.com>, size=3178, nrcpt=1 (queue active)
Jun 13 07:32:32 server03 postfix/smtpd[22267]: disconnect from eh1.eyezonhealth.com[65.111.174.144]
Jun 13 07:32:32 server03 amavis[22102]: (22102-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073232-22102: <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com> SIZE=3178 BODY=8BITMIME Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <manta@computervoice.com>; Wed, 13 Jun 2007 07:32:32 -0500 (CDT)
Jun 13 07:32:32 server03 amavis[22102]: (22102-01) Checking: 8XKVE9tOSEWj [65.111.174.144] <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>
Jun 13 07:32:32 server03 amavis[22102]: (22102-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
Jun 13 07:32:33 server03 amavis[22102]: (22102-01) (!)ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!!)ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!!)WARN: all primary virus scanners failed, considering backups
Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20070613T073232-22102
Jun 13 07:32:39 server03 postfix/smtp[22273]: 4AB831128F8E: to=<manta@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=7, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=22102-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269. (in reply to end of DATA command))
Jun 13 07:32:53 server03 postfix/smtpd[22267]: warning: 65.208.234.44: hostname cwpexch01.manchg01.manfinancial.net verification failed: Name or service not known
Jun 13 07:32:53 server03 postfix/smtpd[22267]: connect from unknown[65.208.234.44]
Jun 13 07:32:53 server03 postfix/smtpd[22267]: EDE951128FA8: client=unknown[65.208.234.44]
Jun 13 07:32:54 server03 postfix/cleanup[22272]: EDE951128FA8: message-id=<8BE33F976BBED34385CB2224773E25EE04400129@CWPEXCV01.manchg01.manfinancial.net>
Jun 13 07:32:54 server03 postfix/qmgr[22120]: EDE951128FA8: from=<CWhite@manfinancial.com>, size=21907, nrcpt=1 (queue active)
Jun 13 07:32:54 server03 amavis[22102]: (22102-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073254-22102: <CWhite@manfinancial.com> -> <dolarov@computervoice.com> SIZE=21907 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <dolarov@computervoice.com>; Wed, 13 Jun 2007 07:32:54 -0500 (CDT)
Jun 13 07:32:54 server03 postfix/smtpd[22267]: disconnect from unknown[65.208.234.44]
Jun 13 07:32:54 server03 amavis[22102]: (22102-02) Checking: VMGv7qYCk2zN [65.208.234.44] <CWhite@manfinancial.com> -> <dolarov@computervoice.com>
Jun 13 07:32:54 server03 amavis[22102]: (22102-02) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
Jun 13 07:32:55 server03 amavis[22102]: (22102-02) (!)ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
Jun 13 07:32:57 server03 sshd[22335]: reverse mapping checking getaddrinfo for 82-77-35-21.arad.rdsnet.ro [82.77.35.21] failed - POSSIBLE BREAK-IN ATTEMPT!
Jun 13 07:33:00 server03 sshd[22335]: Accepted keyboard-interactive/pam for smartin from 82.77.35.21 port 1673 ssh2
Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!!)ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!!)WARN: all primary virus scanners failed, considering backups
Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20070613T073254-22102
Jun 13 07:33:01 server03 postfix/smtp[22273]: EDE951128FA8: to=<dolarov@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=8, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=22102-02, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269. (in reply to end of DATA command))
Jun 13 07:33:04 server03 su: (to root) smartin on /dev/pts/3
Jun 13 07:33:06 server03 su: (to zimbra) smartin on /dev/pts/3
Jun 13 07:33:11 server03 sudo:   zimbra : TTY=pts/3 ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmtomcatmgr status
Jun 13 07:33:11 server03 zmtomcatmgr[22464]: status requested
Jun 13 07:33:11 server03 zmtomcatmgr[22464]: status OK
Jun 13 07:33:25 server03 clamd[22603]: Daemon started.
Jun 13 07:33:25 server03 clamd[22603]: clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i686)
Jun 13 07:33:25 server03 clamd[22603]: Log file size limited to 20971520 bytes.
Jun 13 07:33:25 server03 clamd[22603]: Reading databases from /opt/zimbra/clamav/db
Jun 13 07:33:27 server03 clamd[22603]: Protecting against 93425 viruses.
Jun 13 07:33:27 server03 clamd[22606]: Bound to port 3310
Jun 13 07:33:27 server03 clamd[22606]: Setting connection queue length to 15
Jun 13 07:33:27 server03 clamd[22606]: Archive: Archived file size limit set to 104857600 bytes.
Jun 13 07:33:27 server03 clamd[22606]: Archive: Recursion level limit set to 8.
Jun 13 07:33:27 server03 clamd[22606]: Archive: Files limit set to 1000.
Jun 13 07:33:27 server03 clamd[22606]: Archive: Compression ratio limit set to 250.
Jun 13 07:33:27 server03 clamd[22606]: Archive support enabled.
Jun 13 07:33:27 server03 clamd[22606]: Archive: RAR support disabled.
Jun 13 07:33:27 server03 clamd[22606]: Portable Executable support enabled.
Jun 13 07:33:27 server03 clamd[22606]: Mail files support enabled.
Jun 13 07:33:27 server03 clamd[22606]: Mail: Recursion level limit set to 64.
Jun 13 07:33:27 server03 clamd[22606]: OLE2 support enabled.
Jun 13 07:33:27 server03 clamd[22606]: HTML support enabled.
Jun 13 07:33:27 server03 clamd[22606]: Self checking every 1800 seconds.
Jun 13 07:33:31 server03 sudo:   zimbra : TTY=pts/3 ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmtomcatmgr status
Jun 13 07:33:31 server03 zmtomcatmgr[22703]: status requested
Jun 13 07:33:31 server03 zmtomcatmgr[22703]: status OK
Jun 13 07:33:41 server03 sshd[22739]: Accepted publickey for zimbra from 192.168.29.8 port 45313 ssh2
Jun 13 07:33:41 server03 sshd[22743]: Accepted publickey for zimbra from 192.168.29.8 port 45314 ssh2
Jun 13 07:33:41 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat
Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat deferred
Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
Jun 13 07:33:42 server03 sshd[22746]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
Jun 13 07:33:42 server03 sshd[22773]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
Jun 13 07:33:48 server03 sshd[22874]: Accepted publickey for zimbra from 192.168.29.8 port 45316 ssh2
Jun 13 07:33:49 server03 postfix/postsuper[22925]: 4AB831128F8E: requeued
Jun 13 07:33:49 server03 postfix/postsuper[22925]: EDE951128FA8: requeued
Jun 13 07:33:49 server03 postfix/postsuper[22925]: Requeued: 2 messages
Jun 13 07:33:49 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix/sbin/postsuper -r - deferred
Jun 13 07:33:49 server03 sshd[22877]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
(first part of log..)
Reply With Quote
  #7 (permalink)  
Old 06-13-2007, 06:58 AM
Senior Member
 
Posts: 68
Default

here is the second part of it..

Code:
Jun 13 07:34:41 server03 postfix/pickup[22118]: 3A1A81128FBE: uid=51 from=<CWhite@manfinancial.com> orig_id=EDE951128FA8
Jun 13 07:34:41 server03 postfix/cleanup[23100]: 3A1A81128FBE: message-id=<8BE33F976BBED34385CB2224773E25EE04400129@CWPEXCV01.manchg01.manfinancial.net>
Jun 13 07:34:41 server03 postfix/qmgr[22120]: 3A1A81128FBE: from=<CWhite@manfinancial.com>, size=22031, nrcpt=1 (queue active)
Jun 13 07:34:41 server03 postfix/pickup[22118]: 4AC141128FA8: uid=51 from=<LindoraLeanForLife@eyezonhealth.com> orig_id=4AB831128F8E
Jun 13 07:34:41 server03 postfix/cleanup[23100]: 4AC141128FA8: message-id=<20070613123232.4AB831128F8E@server03.computervoice.com>
Jun 13 07:34:41 server03 amavis[22102]: (22102-03) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073441-22102: <CWhite@manfinancial.com> -> <dolarov@computervoice.com> SIZE=22031 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <dolarov@computervoice.com>; Wed, 13 Jun 2007 07:34:41 -0500 (CDT)
Jun 13 07:34:41 server03 amavis[22102]: (22102-03) Checking: 2Nl1EhUbZOkx [65.208.234.44] <CWhite@manfinancial.com> -> <dolarov@computervoice.com>
Jun 13 07:34:41 server03 postfix/qmgr[22120]: 4AC141128FA8: from=<LindoraLeanForLife@eyezonhealth.com>, size=3302, nrcpt=1 (queue active)
Jun 13 07:34:41 server03 amavis[22110]: (22110-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073441-22110: <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com> SIZE=3302 BODY=8BITMIME Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <manta@computervoice.com>; Wed, 13 Jun 2007 07:34:41 -0500 (CDT)
Jun 13 07:34:41 server03 amavis[22110]: (22110-01) Checking: 9iRQVpqfNcZG [65.111.174.144] <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>
Jun 13 07:34:44 server03 postfix/smtpd[23109]: fatal: unexpected command-line argument: 192.168.28.0/24
Jun 13 07:34:45 server03 amavis[22110]: (22110-01) (!)FWD via SMTP: <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 142., MTA([127.0.0.1]:10025), id=22110-01
Jun 13 07:34:45 server03 amavis[22110]: (22110-01) Blocked SPAMMY, [65.111.174.144] [65.111.174.144] <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>, Message-ID: <20070613123232.4AB831128F8E@server03.computervoice.com>, mail_id: 9iRQVpqfNcZG, Hits: 6.827, 4302 ms
Jun 13 07:34:45 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23109 exit status 1
Jun 13 07:34:45 server03 postfix/master[2484]: warning: /opt/zimbra/postfix-2.2.9/libexec/smtpd: bad command startup -- throttling
Jun 13 07:34:45 server03 postfix/smtp[23102]: 4AC141128FA8: to=<manta@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=56, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 142., MTA([127.0.0.1]:10025), id=22110-01 (in reply to end of DATA command))
Jun 13 07:35:08 server03 postfix/smtpd[23169]: warning: 82.77.35.21: hostname 82-77-35-21.arad.rdsnet.ro verification failed: Name or service not known
Jun 13 07:35:08 server03 postfix/smtpd[23169]: connect from unknown[82.77.35.21]
Jun 13 07:35:08 server03 postfix/smtpd[23169]: E9BF41128FCA: client=unknown[82.77.35.21]
Jun 13 07:35:09 server03 postfix/cleanup[23100]: E9BF41128FCA: message-id=<13124449.61181734670498.JavaMail.root@suse>
Jun 13 07:35:09 server03 postfix/qmgr[22120]: E9BF41128FCA: from=<smartin@computervoice.ro>, size=1365, nrcpt=1 (queue active)
Jun 13 07:35:09 server03 postfix/smtpd[23169]: disconnect from unknown[82.77.35.21]
Jun 13 07:35:09 server03 amavis[22110]: (22110-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073441-22110: <smartin@computervoice.ro> -> <smartin@computervoice.com> SIZE=1365 BODY=8BITMIME Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <smartin@computervoice.com>; Wed, 13 Jun 2007 07:35:09 -0500 (CDT)
Jun 13 07:35:09 server03 amavis[22110]: (22110-02) Checking: LzB3XBly312m [82.77.35.21] <smartin@computervoice.ro> -> <smartin@computervoice.com>
Jun 13 07:35:16 server03 sshd[23173]: Accepted publickey for zimbra from 192.168.29.8 port 50324 ssh2
Jun 13 07:35:16 server03 sshd[23172]: Accepted publickey for zimbra from 192.168.29.8 port 50323 ssh2
Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat
Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat deferred
Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
Jun 13 07:35:17 server03 sshd[23178]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
Jun 13 07:35:17 server03 sshd[23188]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
Jun 13 07:35:23 server03 sshd[23290]: Accepted publickey for zimbra from 192.168.29.8 port 50325 ssh2
Jun 13 07:35:23 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat active
Jun 13 07:35:24 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
Jun 13 07:35:24 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
Jun 13 07:35:24 server03 sshd[23293]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
Jun 13 07:35:40 server03 postfix/smtpd[23169]: connect from quotes1.computervoice.com[66.227.82.26]
Jun 13 07:35:40 server03 postfix/smtpd[23169]: 82B031128FCB: client=quotes1.computervoice.com[66.227.82.26]
Jun 13 07:35:40 server03 postfix/cleanup[23100]: 82B031128FCB: message-id=<20070613123540.5DBB3C04B@nq2.computervoice.com>
Jun 13 07:35:40 server03 postfix/qmgr[22120]: 82B031128FCB: from=<ccomlosan@computervoice.ro>, size=2526, nrcpt=2 (queue active)
Jun 13 07:35:40 server03 postfix/smtpd[23169]: disconnect from quotes1.computervoice.com[66.227.82.26]
Jun 13 07:35:40 server03 amavis[22107]: (22107-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073540-22107: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com> SIZE=2526 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Wed, 13 Jun 2007 07:35:40 -0500 (CDT)
Jun 13 07:35:40 server03 amavis[22107]: (22107-01) Checking: jY2pwY5nmH2I [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>
Jun 13 07:35:44 server03 postfix/smtpd[23169]: connect from macys-6.macys.p0.com[206.165.246.6]
Jun 13 07:35:44 server03 postfix/smtpd[23169]: C3BE41128FCC: client=macys-6.macys.p0.com[206.165.246.6]
Jun 13 07:35:44 server03 postfix/cleanup[23100]: C3BE41128FCC: message-id=<macys_com.6qn8-shyt.c5zl@e.macys.com>
Jun 13 07:35:45 server03 postfix/qmgr[22120]: C3BE41128FCC: from=<support@e.macys.com>, size=9321, nrcpt=1 (queue active)
Jun 13 07:35:45 server03 postfix/smtpd[23169]: disconnect from macys-6.macys.p0.com[206.165.246.6]
Jun 13 07:35:45 server03 postfix/smtpd[23358]: fatal: unexpected command-line argument: 192.168.28.0/24
Jun 13 07:35:45 server03 amavis[22106]: (22106-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073545-22106: <support@e.macys.com> -> <lsturm@computervoice.com> SIZE=9321 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <lsturm@computervoice.com>; Wed, 13 Jun 2007 07:35:45 -0500 (CDT)
Jun 13 07:35:45 server03 amavis[22106]: (22106-01) Checking: JfjVeIGRhP9t [206.165.246.6] <support@e.macys.com> -> <lsturm@computervoice.com>
Jun 13 07:35:45 server03 postfix/smtpd[23359]: fatal: unexpected command-line argument: 192.168.28.0/24
Jun 13 07:35:45 server03 postfix/smtpd[23360]: fatal: unexpected command-line argument: 192.168.28.0/24
Jun 13 07:35:46 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23358 exit status 1
Jun 13 07:35:46 server03 postfix/master[2484]: warning: /opt/zimbra/postfix-2.2.9/libexec/smtpd: bad command startup -- throttling
Jun 13 07:35:46 server03 amavis[22102]: (22102-03) (!)FWD via SMTP: <CWhite@manfinancial.com> -> <dolarov@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN21> line 1321., MTA([127.0.0.1]:10025), id=22102-03
Jun 13 07:35:46 server03 amavis[22102]: (22102-03) Blocked TEMPFAIL, [65.208.234.44] [65.208.234.44] <CWhite@manfinancial.com> -> <dolarov@computervoice.com>, Message-ID: <8BE33F976BBED34385CB2224773E25EE04400129@CWPEXCV01.manchg01.manfinancial.net>, mail_id: 2Nl1EhUbZOkx, Hits: -4.278, 64754 ms
Jun 13 07:35:46 server03 amavis[22110]: (22110-02) (!)FWD via SMTP: <smartin@computervoice.ro> -> <smartin@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 228., MTA([127.0.0.1]:10025), id=22110-02
Jun 13 07:35:46 server03 amavis[22107]: (22107-01) (!)FWD via SMTP: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 261., MTA([127.0.0.1]:10025), id=22107-01
Jun 13 07:35:46 server03 amavis[22110]: (22110-02) Blocked TEMPFAIL, [82.77.35.21] [82.77.35.21] <smartin@computervoice.ro> -> <smartin@computervoice.com>, Message-ID: <13124449.61181734670498.JavaMail.root@suse>, mail_id: LzB3XBly312m, Hits: -3.61, 36903 ms
Jun 13 07:35:46 server03 amavis[22107]: (22107-01) Blocked TEMPFAIL, [66.227.82.26] [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, Message-ID: <20070613123540.5DBB3C04B@nq2.computervoice.com>, mail_id: jY2pwY5nmH2I, Hits: -3.392, 5453 ms
Jun 13 07:35:46 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23359 exit status 1
Jun 13 07:35:46 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23360 exit status 1
Jun 13 07:35:46 server03 postfix/smtp[23101]: 3A1A81128FBE: to=<dolarov@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=117, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN21> line 1321., MTA([127.0.0.1]:10025), id=22102-03 (in reply to end of DATA command))
Jun 13 07:35:46 server03 postfix/smtp[23102]: E9BF41128FCA: to=<smartin@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=38, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 228., MTA([127.0.0.1]:10025), id=22110-02 (in reply to end of DATA command))
Jun 13 07:35:46 server03 postfix/smtp[23352]: 82B031128FCB: to=<dolarov@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=6, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 261., MTA([127.0.0.1]:10025), id=22107-01 (in reply to end of DATA command))
Jun 13 07:35:46 server03 postfix/smtp[23352]: 82B031128FCB: to=<jzhong@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=6, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 261., MTA([127.0.0.1]:10025), id=22107-01 (in reply to end of DATA command))
Jun 13 07:36:05 server03 zmtomcatmgr[23517]: status requested
Jun 13 07:36:05 server03 zmtomcatmgr[23517]: status OK
Jun 13 07:36:05 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmtomcatmgr status
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: antispam: Running 
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: antivirus: Running 
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: ldap: Running 
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: logger: Running 
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: mailbox: Running 
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: mta: Running 
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: snmp: Running 
Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: spell: Running 
Jun 13 07:36:46 server03 postfix/smtpd[23568]: fatal: unexpected command-line argument: 192.168.28.0/24
Jun 13 07:36:47 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23568 exit status 1
Jun 13 07:36:47 server03 postfix/master[2484]: warning: /opt/zimbra/postfix-2.2.9/libexec/smtpd: bad command startup -- throttling
Jun 13 07:36:47 server03 amavis[22106]: (22106-01) (!)FWD via SMTP: <support@e.macys.com> -> <lsturm@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 468., MTA([127.0.0.1]:10025), id=22106-01
Jun 13 07:36:47 server03 amavis[22106]: (22106-01) Blocked TEMPFAIL, [206.165.246.6] [206.165.246.6] <support@e.macys.com> -> <lsturm@computervoice.com>, Message-ID: <macys_com.6qn8-shyt.c5zl@e.macys.com>, mail_id: JfjVeIGRhP9t, Hits: -3.036, 62543 ms
Jun 13 07:36:47 server03 postfix/smtp[23357]: C3BE41128FCC: to=<lsturm@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=63, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 468., MTA([127.0.0.1]:10025), id=22106-01 (in reply to end of DATA command))
Jun 13 07:36:52 server03 postfix/smtpd[23169]: connect from quotes1.computervoice.com[66.227.82.26]
Jun 13 07:36:52 server03 postfix/smtpd[23169]: 3A1021128FCD: client=quotes1.computervoice.com[66.227.82.26]
Jun 13 07:36:52 server03 postfix/cleanup[23100]: 3A1021128FCD: message-id=<20070613123652.0EEF6E965@quotes1.computervoice.com>
Jun 13 07:36:52 server03 postfix/qmgr[22120]: 3A1021128FCD: from=<ccomlosan@computervoice.ro>, size=2526, nrcpt=2 (queue active)
Jun 13 07:36:52 server03 postfix/smtpd[23169]: disconnect from quotes1.computervoice.com[66.227.82.26]
Jun 13 07:36:52 server03 amavis[22106]: (22106-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073545-22106: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com> SIZE=2526 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Wed, 13 Jun 2007 07:36:52 -0500 (CDT)
Jun 13 07:36:52 server03 amavis[22106]: (22106-02) Checking: 8SW2SkxdjT9Q [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>
Jun 13 07:36:58 server03 postfix/smtpd[23169]: connect from quotes1.computervoice.com[66.227.82.26]
Jun 13 07:36:58 server03 postfix/smtpd[23169]: 86D7D1128FCE: client=quotes1.computervoice.com[66.227.82.26]
Jun 13 07:36:58 server03 postfix/cleanup[23100]: 86D7D1128FCE: message-id=<20070613123658.61DFCE965@quotes1.computervoice.com>
Jun 13 07:36:58 server03 postfix/qmgr[22120]: 86D7D1128FCE: from=<ccomlosan@computervoice.ro>, size=2538, nrcpt=2 (queue active)
Jun 13 07:36:58 server03 postfix/smtpd[23169]: disconnect from quotes1.computervoice.com[66.227.82.26]
Jun 13 07:36:58 server03 amavis[22107]: (22107-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073540-22107: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com> SIZE=2538 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Wed, 13 Jun 2007 07:36:58 -0500 (CDT)
Jun 13 07:36:58 server03 amavis[22107]: (22107-02) Checking: EjmAa2Ox28NL [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>
Jun 13 07:37:47 server03 postfix/smtpd[23633]: fatal: unexpected command-line argument: 192.168.28.0/24
Jun 13 07:37:47 server03 postfix/smtpd[23634]: fatal: unexpected command-line argument: 192.168.28.0/24
Jun 13 07:37:48 server03 amavis[22106]: (22106-02) (!)FWD via SMTP: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 729., MTA([127.0.0.1]:10025), id=22106-02
Jun 13 07:37:48 server03 amavis[22106]: (22106-02) Blocked TEMPFAIL, [66.227.82.26] [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, Message-ID: <20070613123652.0EEF6E965@quotes1.computervoice.com>, mail_id: 8SW2SkxdjT9Q, Hits: -3.392, 56157 ms
Jun 13 07:37:48 server03 amavis[22107]: (22107-02) (!)FWD via SMTP: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 522., MTA([127.0.0.1]:10025), id=22107-02
Jun 13 07:37:48 server03 amavis[22107]: (22107-02) Blocked TEMPFAIL, [66.227.82.26] [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, Message-ID: <20070613123658.61DFCE965@quotes1.computervoice.com>, mail_id: EjmAa2Ox28NL, Hits: -3.392, 49948 ms
i posted all this information hoping it will help .. please advise . thank you
Reply With Quote
  #8 (permalink)  
Old 06-13-2007, 07:17 AM
Zimbra Consultant & Moderator
 
Posts: 19,640
Default

What operating system is this and which version/release of Zimbra?

[EDIT]Sorry, I should have read the first post.

Has this ever worked or has this problem just started? If it used to work, have you made any changes to Zimbra?

BTW, it's no use posting a screen shot like the one above, it's unreadable.
__________________
Regards


Bill

Last edited by phoenix; 06-13-2007 at 07:20 AM..
Reply With Quote
  #9 (permalink)  
Old 06-13-2007, 07:50 AM
Senior Member
 
Posts: 68
Default

thanks for the fast reply phoenix
yes..as i mentioned in the first post..it worked perfect for about a month..the server is even on production now ..and then i got complains from users that they didn't receive their emails and when i search the issue i 've found this problem in the logs..i think it started after zimbra updated ( maybe on antivirus database update) .. you can see this details in my first 2 posts from this thread..
sorry about the screen shot..i didn't know . maybe i can send you the screenshot on email if you thinks this would help. or any other extra info you would need...i just need help asap ..
thanks

p.s. i'm on zimbra 4.5.3_GA , open Suse 10_2

Last edited by sergiumartin; 06-13-2007 at 05:29 PM..
Reply With Quote
  #10 (permalink)  
Old 06-14-2007, 06:41 AM
Senior Member
 
Posts: 68
Question

so..any ideas why this happen and how could i fix it ?
also..i'm getting lots of complains from users that antispam is not working well anymore since i stopped the antivirus service...in the admin console and also when i check services status with zmcontrol status , the server is "telling" me that the antispam is running..
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.