Page 1 of 2 12 LastLast
Results 1 to 10 of 16

Thread: Antivirus is blocking emails in deffered queue

  1. #1
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Exclamation Antivirus is blocking emails in deffered queue

    Hi ,

    I'm having zimbra open source version installed on a open Suse 10.2 . Everything went well from about a month , and then suddenly , (after a virus database update i guess) emails were not sent anymore . What is even worse is that the server was and still is in production. I manage to discover that the antivirus was the one who was causing my emails for being sent ...i will paste below part of the content of /var/log/messages from when all the problems begun..
    now the users are getting their mails but the antivirus protection is off..i try to turn it on and i had the same problem..

  2. #2
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Default

    here are the logs and you can see the first of the many errors i get at the bottom of it (bold text).

    Code:
    Jun  7 14:10:49 server03 amavis[23655]: starting.  /opt/zimbra/amavisd/sbin/amavisd at server03.computervoice.com amavisd-new-2.4.3 (20060930), Unicode aware, LANG=C
    Jun  7 14:10:49 server03 amavis[23655]: user=1001, EUID: 1001 (1001);  group=, EGID: 1000 1000 51 5 (1000 1000 51 5); log_level=1
    Jun  7 14:10:49 server03 amavis[23655]: Perl version               5.008008
    Jun  7 14:10:50 server03 clamd[23678]: Protecting against 93358 viruses.
    Jun  7 14:10:50 server03 clamd[23738]: Bound to port 3310
    Jun  7 14:10:50 server03 clamd[23738]: Setting connection queue length to 15
    Jun  7 14:10:50 server03 clamd[23738]: Archive: Archived file size limit set to 104857600 bytes.
    Jun  7 14:10:50 server03 clamd[23738]: Archive: Recursion level limit set to 8.
    Jun  7 14:10:50 server03 clamd[23738]: Archive: Files limit set to 1000.
    Jun  7 14:10:50 server03 clamd[23738]: Archive: Compression ratio limit set to 250.
    Jun  7 14:10:50 server03 clamd[23738]: Archive support enabled.
    Jun  7 14:10:50 server03 clamd[23738]: Archive: RAR support disabled.
    Jun  7 14:10:50 server03 clamd[23738]: Portable Executable support enabled.
    Jun  7 14:10:50 server03 clamd[23738]: Mail files support enabled.
    Jun  7 14:10:50 server03 clamd[23738]: Mail: Recursion level limit set to 64.
    Jun  7 14:10:50 server03 clamd[23738]: OLE2 support enabled.
    Jun  7 14:10:50 server03 clamd[23738]: HTML support enabled.
    Jun  7 14:10:50 server03 clamd[23738]: Self checking every 1800 seconds.
    Jun  7 14:10:50 server03 saslauthd: auth_zimbra_init: zimbra_cert_check is off!
    Jun  7 14:10:51 server03 saslauthd[23779]: detach_tty      : master pid is: 23779
    Jun  7 14:10:51 server03 saslauthd[23779]: ipc_init        : listening on socket: /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/state/mux
    Jun  7 14:10:51 server03 amavis[23655]: SpamControl: init_pre_chroot done
    Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Process Backgrounded
    Jun  7 14:10:51 server03 amavis[23785]: Net::Server: 2007/06/07-14:10:51 Amavis (type Net::Server::PreForkSimple) starting! pid(23785)
    Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Binding to UNIX socket file /opt/zimbra/amavisd/amavisd.sock using SOCK_STREAM
    Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
    Jun  7 14:10:51 server03 amavis[23785]: Net::Server: Group Not Defined.  Defaulting to EGID '1000 1000 51 5'
    Jun  7 14:10:51 server03 amavis[23785]: Net::Server: User Not Defined.  Defaulting to EUID '1001'
    Jun  7 14:10:51 server03 amavis[23785]: Module Amavis::Conf        2.072
    Jun  7 14:10:51 server03 amavis[23785]: Module Archive::Tar        1.30
    Jun  7 14:10:51 server03 amavis[23785]: Module Archive::Zip        1.18
    Jun  7 14:10:51 server03 amavis[23785]: Module BerkeleyDB          0.31
    Jun  7 14:10:51 server03 amavis[23785]: Module Compress::Zlib      1.42
    Jun  7 14:10:51 server03 amavis[23785]: Module Convert::TNEF       0.17
    Jun  7 14:10:51 server03 amavis[23785]: Module Convert::UUlib      1.08
    Jun  7 14:10:51 server03 amavis[23785]: Module DBD::mysql          4.001
    Jun  7 14:10:51 server03 amavis[23785]: Module DBI                 1.53
    Jun  7 14:10:51 server03 amavis[23785]: Module DB_File             1.815
    Jun  7 14:10:51 server03 amavis[23785]: Module Digest::MD5         2.36
    Jun  7 14:10:51 server03 amavis[23785]: Module MIME::Entity        5.420
    Jun  7 14:10:51 server03 amavis[23785]: Module MIME::Parser        5.420
    Jun  7 14:10:51 server03 amavis[23785]: Module MIME::Tools         5.420
    Jun  7 14:10:51 server03 amavis[23785]: Module Mail::Header        1.74
    Jun  7 14:10:51 server03 amavis[23785]: Module Mail::Internet      1.74
    Jun  7 14:10:51 server03 amavis[23785]: Module Mail::SPF::Query    1.999001
    Jun  7 14:10:51 server03 amavis[23785]: Module Mail::SpamAssassin  3.001007
    Jun  7 14:10:51 server03 amavis[23785]: Module Net::Cmd            2.27
    Jun  7 14:10:51 server03 amavis[23785]: Module Net::DNS            0.59
    Jun  7 14:10:51 server03 amavis[23785]: Module Net::LDAP           0.33
    Jun  7 14:10:51 server03 amavis[23785]: Module Net::SMTP           2.30
    Jun  7 14:10:51 server03 amavis[23785]: Module Net::Server         0.95
    Jun  7 14:10:51 server03 amavis[23785]: Module Time::HiRes         1.9704
    Jun  7 14:10:51 server03 amavis[23785]: Module Unix::Syslog        0.99
    Jun  7 14:10:51 server03 amavis[23785]: Amavis::DB code      loaded
    Jun  7 14:10:51 server03 amavis[23785]: Amavis::Cache code   loaded
    Jun  7 14:10:51 server03 amavis[23785]: SQL base code        NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: SQL::Log code        NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: SQL::Quarantine      NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: Lookup::SQL code     NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: Lookup::LDAP code    loaded
    Jun  7 14:10:51 server03 amavis[23785]: AM.PDP-in proto code loaded
    Jun  7 14:10:51 server03 amavis[23785]: SMTP-in proto code   loaded
    Jun  7 14:10:51 server03 amavis[23785]: Courier proto code   NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: SMTP-out proto code  loaded
    Jun  7 14:10:51 server03 amavis[23785]: Pipe-out proto code  NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: BSMTP-out proto code NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: Local-out proto code loaded
    Jun  7 14:10:51 server03 amavis[23785]: OS_Fingerprint code  NOT loaded
    Jun  7 14:10:51 server03 amavis[23785]: ANTI-VIRUS code      loaded
    Jun  7 14:10:51 server03 amavis[23785]: ANTI-SPAM code       loaded
    Jun  7 14:10:51 server03 amavis[23785]: ANTI-SPAM-SA code    loaded
    Jun  7 14:10:51 server03 amavis[23785]: Unpackers code       loaded
    Jun  7 14:10:51 server03 amavis[23785]: Found $file            at /usr/bin/file
    Jun  7 14:10:51 server03 amavis[23785]: No $dspam,             not using it
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .mail
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .asc 
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .uue 
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .hqx 
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .ync 
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .F    tried: unfreeze, freeze -d, melt, fcat
    Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .Z    at /usr/bin/gzip -d
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .gz  
    Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .bz2  at /usr/bin/bzip2 -d
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .lzo  tried: lzop -d
    Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .rpm  at /usr/bin/rpm2cpio
    Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .cpio at /usr/bin/pax
    Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .tar  at /usr/bin/pax
    Jun  7 14:10:51 server03 amavis[23785]: Found decoder for    .deb  at /usr/bin/ar
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .zip 
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .rar  tried: rar, unrar
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .arj  tried: arj, unarj
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .arc  tried: nomarch, arc
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .zoo  tried: zoo
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .lha  tried: lha
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .cab  tried: cabextract
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .tnef tried: tnef
    Jun  7 14:10:51 server03 amavis[23785]: Internal decoder for .tnef
    Jun  7 14:10:51 server03 amavis[23785]: No decoder for       .exe  tried: rar, unrar; lha; arj, unarj
    Jun  7 14:10:51 server03 amavis[23785]: Using internal av scanner code for (primary) ClamAV-clamd
    Jun  7 14:10:51 server03 amavis[23785]: Creating db in /opt/zimbra/amavisd/db/; BerkeleyDB 0.31, libdb 4.2
    Jun  7 14:10:52 server03 amavis[23785]: SpamControl: initializing Mail::SpamAssassin
    Jun  7 14:10:53 server03 amavis[23785]: SpamControl: init_pre_fork done
    Jun  7 14:11:00 server03 sudo:   zimbra : TTY=pts/0 ; PWD=/opt/zimbra/postfix-2.2.9/conf ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf mynetworks
    Jun  7 14:11:08 server03 amavis[23792]: (23792-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070607T141108-23792: <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com> SIZE=61776 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <sbenz@computervoice.com>; Thu,  7 Jun 2007 14:11:08 -0500 (CDT)
    Jun  7 14:11:08 server03 amavis[23792]: (23792-01) Checking: V-znA6dlcYFO [204.99.118.101] <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>
    Jun  7 14:11:12 server03 amavis[23792]: (23792-01) (!)FWD via SMTP: <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 3121., MTA([127.0.0.1]:10025), id=23792-01
    Jun  7 14:11:12 server03 amavis[23792]: (23792-01) Blocked TEMPFAIL, [204.99.118.101] [204.99.118.101] <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>, Message-ID: <CEA6F18023033344A48F7328AA59912301051A41@ILNBMLP23.caremarkrx.net>, mail_id: V-znA6dlcYFO, Hits: -4.356, 4137 ms
    Jun  7 14:11:22 server03 amavis[23792]: (23792-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070607T141108-23792: <wiecmlrxvffs.vinpjgwbh@hyphenatedownturn.com> -> <manta@computervoice.com> SIZE=2361 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <manta@computervoice.com>; Thu,  7 Jun 2007 14:11:22 -0500 (CDT)
    and from that moment this error blocked my emails in the deffered queue (i had like 1000 mails) until i stopped the antivirus service .
    could i get some help on this one ? i would really like to have the antivirus protection again .
    Last edited by sergiumartin; 06-11-2007 at 08:15 AM.

  3. #3
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Question

    is there a chance to get some help on this one ? i would really appreciate it..thanks

  4. #4
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    According to the log snippet you posted it can't connect to port 10025:

    Code:
    Jun  7 14:11:12 server03 amavis[23792]: (23792-01) (!)FWD via SMTP: <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 3121., MTA([127.0.0.1]:10025), id=23792-01
    Jun  7 14:11:12 server03 amavis[23792]: (23792-01) Blocked TEMPFAIL, [204.99.118.101] [204.99.118.101] <Roger.Laskowski@caremark.com> -> <sbenz@computervoice.com>
    When you're on the Zimbra server can you telnet to that port at localhost? Any other errors in the log?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Default

    phoenix . 10x for the reply .
    i can connect on localhost on port 10025 ..
    right now i started the antivirus service again..so i can show you better the messages i get in the log and also i made a screenshot for you
    Last edited by sergiumartin; 06-13-2007 at 08:29 AM.

  6. #6
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Default

    here is the zimbra.log content since i started the antivirus service again ..
    you can see at the begin that clamd didn't really start..so i used zmclamdctl start and then all services looked ok , but i still got the previous errors and messages still get stuck in deffered queue ..

    Code:
    Jun 13 07:31:37 server03 amavis[22072]: starting.  /opt/zimbra/amavisd/sbin/amavisd at server03.computervoice.com amavisd-new-2.4.3 (20060930), Unicode aware, LANG=en_US.UTF-8
    Jun 13 07:31:37 server03 amavis[22072]: user=1001, EUID: 1001 (1001);  group=, EGID: 1000 1000 51 5 (1000 1000 51 5); log_level=1
    Jun 13 07:31:37 server03 amavis[22072]: Perl version               5.008008
    Jun 13 07:31:38 server03 amavis[22072]: SpamControl: init_pre_chroot done
    Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Process Backgrounded
    Jun 13 07:31:38 server03 amavis[22073]: Net::Server: 2007/06/13-07:31:38 Amavis (type Net::Server::PreForkSimple) starting! pid(22073)
    Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Binding to UNIX socket file /opt/zimbra/amavisd/amavisd.sock using SOCK_STREAM
    Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
    Jun 13 07:31:38 server03 amavis[22073]: Net::Server: Group Not Defined.  Defaulting to EGID '1000 1000 51 5'
    Jun 13 07:31:38 server03 amavis[22073]: Net::Server: User Not Defined.  Defaulting to EUID '1001'
    Jun 13 07:31:38 server03 amavis[22073]: Module Amavis::Conf        2.072
    Jun 13 07:31:38 server03 amavis[22073]: Module Archive::Tar        1.30
    Jun 13 07:31:38 server03 amavis[22073]: Module Archive::Zip        1.18
    Jun 13 07:31:38 server03 amavis[22073]: Module BerkeleyDB          0.31
    Jun 13 07:31:38 server03 amavis[22073]: Module Compress::Zlib      1.42
    Jun 13 07:31:38 server03 amavis[22073]: Module Convert::TNEF       0.17
    Jun 13 07:31:38 server03 amavis[22073]: Module Convert::UUlib      1.08
    Jun 13 07:31:38 server03 amavis[22073]: Module DBD::mysql          4.001
    Jun 13 07:31:38 server03 amavis[22073]: Module DBI                 1.53
    Jun 13 07:31:38 server03 amavis[22073]: Module DB_File             1.815
    Jun 13 07:31:38 server03 amavis[22073]: Module Digest::MD5         2.36
    Jun 13 07:31:38 server03 amavis[22073]: Module MIME::Entity        5.420
    Jun 13 07:31:38 server03 amavis[22073]: Module MIME::Parser        5.420
    Jun 13 07:31:38 server03 amavis[22073]: Module MIME::Tools         5.420
    Jun 13 07:31:38 server03 amavis[22073]: Module Mail::Header        1.74
    Jun 13 07:31:38 server03 amavis[22073]: Module Mail::Internet      1.74
    Jun 13 07:31:38 server03 amavis[22073]: Module Mail::SPF::Query    1.999001
    Jun 13 07:31:38 server03 amavis[22073]: Module Mail::SpamAssassin  3.001007
    Jun 13 07:31:38 server03 amavis[22073]: Module Net::Cmd            2.27
    Jun 13 07:31:38 server03 amavis[22073]: Module Net::DNS            0.59
    Jun 13 07:31:38 server03 amavis[22073]: Module Net::LDAP           0.33
    Jun 13 07:31:38 server03 amavis[22073]: Module Net::SMTP           2.30
    Jun 13 07:31:38 server03 amavis[22073]: Module Net::Server         0.95
    Jun 13 07:31:38 server03 amavis[22073]: Module Time::HiRes         1.9704
    Jun 13 07:31:38 server03 amavis[22073]: Module Unix::Syslog        0.99
    Jun 13 07:31:38 server03 amavis[22073]: Amavis::DB code      loaded
    Jun 13 07:31:38 server03 amavis[22073]: Amavis::Cache code   loaded
    Jun 13 07:31:38 server03 amavis[22073]: SQL base code        NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: SQL::Log code        NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: SQL::Quarantine      NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: Lookup::SQL code     NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: Lookup::LDAP code    loaded
    Jun 13 07:31:38 server03 amavis[22073]: AM.PDP-in proto code loaded
    Jun 13 07:31:38 server03 amavis[22073]: SMTP-in proto code   loaded
    Jun 13 07:31:38 server03 amavis[22073]: Courier proto code   NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: SMTP-out proto code  loaded
    Jun 13 07:31:38 server03 amavis[22073]: Pipe-out proto code  NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: BSMTP-out proto code NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: Local-out proto code loaded
    Jun 13 07:31:38 server03 amavis[22073]: OS_Fingerprint code  NOT loaded
    Jun 13 07:31:38 server03 amavis[22073]: ANTI-VIRUS code      loaded
    Jun 13 07:31:38 server03 amavis[22073]: ANTI-SPAM code       loaded
    Jun 13 07:31:38 server03 amavis[22073]: ANTI-SPAM-SA code    loaded
    Jun 13 07:31:38 server03 amavis[22073]: Unpackers code       loaded
    Jun 13 07:31:38 server03 clamd[22086]: Daemon started.
    Jun 13 07:31:38 server03 clamd[22086]: clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i686)
    Jun 13 07:31:38 server03 clamd[22086]: Log file size limited to 20971520 bytes.
    Jun 13 07:31:38 server03 clamd[22086]: Reading databases from /opt/zimbra/clamav/db
    Jun 13 07:31:38 server03 amavis[22073]: Found $file            at /usr/bin/file
    Jun 13 07:31:38 server03 amavis[22073]: No $dspam,             not using it
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .mail
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .asc 
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .uue 
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .hqx 
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .ync 
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .F    tried: unfreeze, freeze -d, melt, fcat
    Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .Z    at /usr/bin/gzip -d
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .gz  
    Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .bz2  at /usr/bin/bzip2 -d
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .lzo  tried: lzop -d
    Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .rpm  at /usr/bin/rpm2cpio
    Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .cpio at /usr/bin/pax
    Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .tar  at /usr/bin/pax
    Jun 13 07:31:38 server03 amavis[22073]: Found decoder for    .deb  at /usr/bin/ar
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .zip 
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .rar  tried: rar, unrar
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .arj  tried: arj, unarj
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .arc  tried: nomarch, arc
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .zoo  tried: zoo
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .lha  tried: lha
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .cab  tried: cabextract
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .tnef tried: tnef
    Jun 13 07:31:38 server03 amavis[22073]: Internal decoder for .tnef
    Jun 13 07:31:38 server03 amavis[22073]: No decoder for       .exe  tried: rar, unrar; lha; arj, unarj
    Jun 13 07:31:38 server03 amavis[22073]: Using internal av scanner code for (primary) ClamAV-clamd
    Jun 13 07:31:38 server03 amavis[22073]: Creating db in /opt/zimbra/amavisd/db/; BerkeleyDB 0.31, libdb 4.2
    Jun 13 07:31:39 server03 amavis[22073]: SpamControl: initializing Mail::SpamAssassin
    Jun 13 07:31:40 server03 amavis[22073]: SpamControl: init_pre_fork done
    Jun 13 07:31:40 server03 sudo:   zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postalias /etc/aliases
    Jun 13 07:31:41 server03 sudo:   zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postfix reload norewrite
    Jun 13 07:31:41 server03 clamd[22086]: Protecting against 93408 viruses.
    Jun 13 07:31:41 server03 postfix/postfix-script: refreshing the Postfix mail system
    Jun 13 07:31:41 server03 postfix/master[2484]: reload configuration /opt/zimbra/postfix-2.2.9/conf
    Jun 13 07:31:41 server03 postfix/anvil[24956]: statistics: max connection rate 1/60s for (smtp:64.132.92.129) at Jun 13 07:28:07
    Jun 13 07:31:41 server03 postfix/anvil[24956]: statistics: max connection count 1 for (smtp:64.132.92.129) at Jun 13 07:28:07
    Jun 13 07:31:41 server03 postfix/anvil[24956]: statistics: max cache size 2 at 
    Jun 13 07:32:32 server03 postfix/smtpd[22267]: connect from eh1.eyezonhealth.com[65.111.174.144]
    Jun 13 07:32:32 server03 postfix/smtpd[22267]: 4AB831128F8E: client=eh1.eyezonhealth.com[65.111.174.144]
    Jun 13 07:32:32 server03 postfix/cleanup[22272]: 4AB831128F8E: message-id=<20070613123232.4AB831128F8E@server03.computervoice.com>
    Jun 13 07:32:32 server03 postfix/qmgr[22120]: 4AB831128F8E: from=<LindoraLeanForLife@eyezonhealth.com>, size=3178, nrcpt=1 (queue active)
    Jun 13 07:32:32 server03 postfix/smtpd[22267]: disconnect from eh1.eyezonhealth.com[65.111.174.144]
    Jun 13 07:32:32 server03 amavis[22102]: (22102-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073232-22102: <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com> SIZE=3178 BODY=8BITMIME Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <manta@computervoice.com>; Wed, 13 Jun 2007 07:32:32 -0500 (CDT)
    Jun 13 07:32:32 server03 amavis[22102]: (22102-01) Checking: 8XKVE9tOSEWj [65.111.174.144] <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>
    Jun 13 07:32:32 server03 amavis[22102]: (22102-01) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
    Jun 13 07:32:33 server03 amavis[22102]: (22102-01) (!)ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
    Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!!)ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
    Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!!)WARN: all primary virus scanners failed, considering backups
    Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
    Jun 13 07:32:39 server03 amavis[22102]: (22102-01) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20070613T073232-22102
    Jun 13 07:32:39 server03 postfix/smtp[22273]: 4AB831128F8E: to=<manta@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=7, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=22102-01, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269. (in reply to end of DATA command))
    Jun 13 07:32:53 server03 postfix/smtpd[22267]: warning: 65.208.234.44: hostname cwpexch01.manchg01.manfinancial.net verification failed: Name or service not known
    Jun 13 07:32:53 server03 postfix/smtpd[22267]: connect from unknown[65.208.234.44]
    Jun 13 07:32:53 server03 postfix/smtpd[22267]: EDE951128FA8: client=unknown[65.208.234.44]
    Jun 13 07:32:54 server03 postfix/cleanup[22272]: EDE951128FA8: message-id=<8BE33F976BBED34385CB2224773E25EE04400129@CWPEXCV01.manchg01.manfinancial.net>
    Jun 13 07:32:54 server03 postfix/qmgr[22120]: EDE951128FA8: from=<CWhite@manfinancial.com>, size=21907, nrcpt=1 (queue active)
    Jun 13 07:32:54 server03 amavis[22102]: (22102-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073254-22102: <CWhite@manfinancial.com> -> <dolarov@computervoice.com> SIZE=21907 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <dolarov@computervoice.com>; Wed, 13 Jun 2007 07:32:54 -0500 (CDT)
    Jun 13 07:32:54 server03 postfix/smtpd[22267]: disconnect from unknown[65.208.234.44]
    Jun 13 07:32:54 server03 amavis[22102]: (22102-02) Checking: VMGv7qYCk2zN [65.208.234.44] <CWhite@manfinancial.com> -> <dolarov@computervoice.com>
    Jun 13 07:32:54 server03 amavis[22102]: (22102-02) ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
    Jun 13 07:32:55 server03 amavis[22102]: (22102-02) (!)ClamAV-clamd: Can't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (2)
    Jun 13 07:32:57 server03 sshd[22335]: reverse mapping checking getaddrinfo for 82-77-35-21.arad.rdsnet.ro [82.77.35.21] failed - POSSIBLE BREAK-IN ATTEMPT!
    Jun 13 07:33:00 server03 sshd[22335]: Accepted keyboard-interactive/pam for smartin from 82.77.35.21 port 1673 ssh2
    Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!!)ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
    Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!!)WARN: all primary virus scanners failed, considering backups
    Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269.
    Jun 13 07:33:01 server03 amavis[22102]: (22102-02) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20070613T073254-22102
    Jun 13 07:33:01 server03 postfix/smtp[22273]: EDE951128FA8: to=<dolarov@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=8, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=22102-02, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 59) line 269. (in reply to end of DATA command))
    Jun 13 07:33:04 server03 su: (to root) smartin on /dev/pts/3
    Jun 13 07:33:06 server03 su: (to zimbra) smartin on /dev/pts/3
    Jun 13 07:33:11 server03 sudo:   zimbra : TTY=pts/3 ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmtomcatmgr status
    Jun 13 07:33:11 server03 zmtomcatmgr[22464]: status requested
    Jun 13 07:33:11 server03 zmtomcatmgr[22464]: status OK
    Jun 13 07:33:25 server03 clamd[22603]: Daemon started.
    Jun 13 07:33:25 server03 clamd[22603]: clamd daemon 0.88.7 (OS: linux-gnu, ARCH: i386, CPU: i686)
    Jun 13 07:33:25 server03 clamd[22603]: Log file size limited to 20971520 bytes.
    Jun 13 07:33:25 server03 clamd[22603]: Reading databases from /opt/zimbra/clamav/db
    Jun 13 07:33:27 server03 clamd[22603]: Protecting against 93425 viruses.
    Jun 13 07:33:27 server03 clamd[22606]: Bound to port 3310
    Jun 13 07:33:27 server03 clamd[22606]: Setting connection queue length to 15
    Jun 13 07:33:27 server03 clamd[22606]: Archive: Archived file size limit set to 104857600 bytes.
    Jun 13 07:33:27 server03 clamd[22606]: Archive: Recursion level limit set to 8.
    Jun 13 07:33:27 server03 clamd[22606]: Archive: Files limit set to 1000.
    Jun 13 07:33:27 server03 clamd[22606]: Archive: Compression ratio limit set to 250.
    Jun 13 07:33:27 server03 clamd[22606]: Archive support enabled.
    Jun 13 07:33:27 server03 clamd[22606]: Archive: RAR support disabled.
    Jun 13 07:33:27 server03 clamd[22606]: Portable Executable support enabled.
    Jun 13 07:33:27 server03 clamd[22606]: Mail files support enabled.
    Jun 13 07:33:27 server03 clamd[22606]: Mail: Recursion level limit set to 64.
    Jun 13 07:33:27 server03 clamd[22606]: OLE2 support enabled.
    Jun 13 07:33:27 server03 clamd[22606]: HTML support enabled.
    Jun 13 07:33:27 server03 clamd[22606]: Self checking every 1800 seconds.
    Jun 13 07:33:31 server03 sudo:   zimbra : TTY=pts/3 ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmtomcatmgr status
    Jun 13 07:33:31 server03 zmtomcatmgr[22703]: status requested
    Jun 13 07:33:31 server03 zmtomcatmgr[22703]: status OK
    Jun 13 07:33:41 server03 sshd[22739]: Accepted publickey for zimbra from 192.168.29.8 port 45313 ssh2
    Jun 13 07:33:41 server03 sshd[22743]: Accepted publickey for zimbra from 192.168.29.8 port 45314 ssh2
    Jun 13 07:33:41 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat
    Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat deferred
    Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
    Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
    Jun 13 07:33:42 server03 sshd[22746]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
    Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
    Jun 13 07:33:42 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
    Jun 13 07:33:42 server03 sshd[22773]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
    Jun 13 07:33:48 server03 sshd[22874]: Accepted publickey for zimbra from 192.168.29.8 port 45316 ssh2
    Jun 13 07:33:49 server03 postfix/postsuper[22925]: 4AB831128F8E: requeued
    Jun 13 07:33:49 server03 postfix/postsuper[22925]: EDE951128FA8: requeued
    Jun 13 07:33:49 server03 postfix/postsuper[22925]: Requeued: 2 messages
    Jun 13 07:33:49 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix/sbin/postsuper -r - deferred
    Jun 13 07:33:49 server03 sshd[22877]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
    (first part of log..)

  7. #7
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Default

    here is the second part of it..

    Code:
    Jun 13 07:34:41 server03 postfix/pickup[22118]: 3A1A81128FBE: uid=51 from=<CWhite@manfinancial.com> orig_id=EDE951128FA8
    Jun 13 07:34:41 server03 postfix/cleanup[23100]: 3A1A81128FBE: message-id=<8BE33F976BBED34385CB2224773E25EE04400129@CWPEXCV01.manchg01.manfinancial.net>
    Jun 13 07:34:41 server03 postfix/qmgr[22120]: 3A1A81128FBE: from=<CWhite@manfinancial.com>, size=22031, nrcpt=1 (queue active)
    Jun 13 07:34:41 server03 postfix/pickup[22118]: 4AC141128FA8: uid=51 from=<LindoraLeanForLife@eyezonhealth.com> orig_id=4AB831128F8E
    Jun 13 07:34:41 server03 postfix/cleanup[23100]: 4AC141128FA8: message-id=<20070613123232.4AB831128F8E@server03.computervoice.com>
    Jun 13 07:34:41 server03 amavis[22102]: (22102-03) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073441-22102: <CWhite@manfinancial.com> -> <dolarov@computervoice.com> SIZE=22031 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <dolarov@computervoice.com>; Wed, 13 Jun 2007 07:34:41 -0500 (CDT)
    Jun 13 07:34:41 server03 amavis[22102]: (22102-03) Checking: 2Nl1EhUbZOkx [65.208.234.44] <CWhite@manfinancial.com> -> <dolarov@computervoice.com>
    Jun 13 07:34:41 server03 postfix/qmgr[22120]: 4AC141128FA8: from=<LindoraLeanForLife@eyezonhealth.com>, size=3302, nrcpt=1 (queue active)
    Jun 13 07:34:41 server03 amavis[22110]: (22110-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073441-22110: <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com> SIZE=3302 BODY=8BITMIME Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <manta@computervoice.com>; Wed, 13 Jun 2007 07:34:41 -0500 (CDT)
    Jun 13 07:34:41 server03 amavis[22110]: (22110-01) Checking: 9iRQVpqfNcZG [65.111.174.144] <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>
    Jun 13 07:34:44 server03 postfix/smtpd[23109]: fatal: unexpected command-line argument: 192.168.28.0/24
    Jun 13 07:34:45 server03 amavis[22110]: (22110-01) (!)FWD via SMTP: <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 142., MTA([127.0.0.1]:10025), id=22110-01
    Jun 13 07:34:45 server03 amavis[22110]: (22110-01) Blocked SPAMMY, [65.111.174.144] [65.111.174.144] <LindoraLeanForLife@eyezonhealth.com> -> <manta@computervoice.com>, Message-ID: <20070613123232.4AB831128F8E@server03.computervoice.com>, mail_id: 9iRQVpqfNcZG, Hits: 6.827, 4302 ms
    Jun 13 07:34:45 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23109 exit status 1
    Jun 13 07:34:45 server03 postfix/master[2484]: warning: /opt/zimbra/postfix-2.2.9/libexec/smtpd: bad command startup -- throttling
    Jun 13 07:34:45 server03 postfix/smtp[23102]: 4AC141128FA8: to=<manta@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=56, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 142., MTA([127.0.0.1]:10025), id=22110-01 (in reply to end of DATA command))
    Jun 13 07:35:08 server03 postfix/smtpd[23169]: warning: 82.77.35.21: hostname 82-77-35-21.arad.rdsnet.ro verification failed: Name or service not known
    Jun 13 07:35:08 server03 postfix/smtpd[23169]: connect from unknown[82.77.35.21]
    Jun 13 07:35:08 server03 postfix/smtpd[23169]: E9BF41128FCA: client=unknown[82.77.35.21]
    Jun 13 07:35:09 server03 postfix/cleanup[23100]: E9BF41128FCA: message-id=<13124449.61181734670498.JavaMail.root@suse>
    Jun 13 07:35:09 server03 postfix/qmgr[22120]: E9BF41128FCA: from=<smartin@computervoice.ro>, size=1365, nrcpt=1 (queue active)
    Jun 13 07:35:09 server03 postfix/smtpd[23169]: disconnect from unknown[82.77.35.21]
    Jun 13 07:35:09 server03 amavis[22110]: (22110-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073441-22110: <smartin@computervoice.ro> -> <smartin@computervoice.com> SIZE=1365 BODY=8BITMIME Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <smartin@computervoice.com>; Wed, 13 Jun 2007 07:35:09 -0500 (CDT)
    Jun 13 07:35:09 server03 amavis[22110]: (22110-02) Checking: LzB3XBly312m [82.77.35.21] <smartin@computervoice.ro> -> <smartin@computervoice.com>
    Jun 13 07:35:16 server03 sshd[23173]: Accepted publickey for zimbra from 192.168.29.8 port 50324 ssh2
    Jun 13 07:35:16 server03 sshd[23172]: Accepted publickey for zimbra from 192.168.29.8 port 50323 ssh2
    Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat
    Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat deferred
    Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
    Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
    Jun 13 07:35:17 server03 sshd[23178]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
    Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
    Jun 13 07:35:17 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
    Jun 13 07:35:17 server03 sshd[23188]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
    Jun 13 07:35:23 server03 sshd[23290]: Accepted publickey for zimbra from 192.168.29.8 port 50325 ssh2
    Jun 13 07:35:23 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmqstat active
    Jun 13 07:35:24 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h queue_directory
    Jun 13 07:35:24 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/postfix-2.2.9/sbin/postconf -h hash_queue_depth
    Jun 13 07:35:24 server03 sshd[23293]: Received disconnect from 192.168.29.8: 11: Closed due to user request.
    Jun 13 07:35:40 server03 postfix/smtpd[23169]: connect from quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:35:40 server03 postfix/smtpd[23169]: 82B031128FCB: client=quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:35:40 server03 postfix/cleanup[23100]: 82B031128FCB: message-id=<20070613123540.5DBB3C04B@nq2.computervoice.com>
    Jun 13 07:35:40 server03 postfix/qmgr[22120]: 82B031128FCB: from=<ccomlosan@computervoice.ro>, size=2526, nrcpt=2 (queue active)
    Jun 13 07:35:40 server03 postfix/smtpd[23169]: disconnect from quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:35:40 server03 amavis[22107]: (22107-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073540-22107: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com> SIZE=2526 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Wed, 13 Jun 2007 07:35:40 -0500 (CDT)
    Jun 13 07:35:40 server03 amavis[22107]: (22107-01) Checking: jY2pwY5nmH2I [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>
    Jun 13 07:35:44 server03 postfix/smtpd[23169]: connect from macys-6.macys.p0.com[206.165.246.6]
    Jun 13 07:35:44 server03 postfix/smtpd[23169]: C3BE41128FCC: client=macys-6.macys.p0.com[206.165.246.6]
    Jun 13 07:35:44 server03 postfix/cleanup[23100]: C3BE41128FCC: message-id=<macys_com.6qn8-shyt.c5zl@e.macys.com>
    Jun 13 07:35:45 server03 postfix/qmgr[22120]: C3BE41128FCC: from=<support@e.macys.com>, size=9321, nrcpt=1 (queue active)
    Jun 13 07:35:45 server03 postfix/smtpd[23169]: disconnect from macys-6.macys.p0.com[206.165.246.6]
    Jun 13 07:35:45 server03 postfix/smtpd[23358]: fatal: unexpected command-line argument: 192.168.28.0/24
    Jun 13 07:35:45 server03 amavis[22106]: (22106-01) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073545-22106: <support@e.macys.com> -> <lsturm@computervoice.com> SIZE=9321 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <lsturm@computervoice.com>; Wed, 13 Jun 2007 07:35:45 -0500 (CDT)
    Jun 13 07:35:45 server03 amavis[22106]: (22106-01) Checking: JfjVeIGRhP9t [206.165.246.6] <support@e.macys.com> -> <lsturm@computervoice.com>
    Jun 13 07:35:45 server03 postfix/smtpd[23359]: fatal: unexpected command-line argument: 192.168.28.0/24
    Jun 13 07:35:45 server03 postfix/smtpd[23360]: fatal: unexpected command-line argument: 192.168.28.0/24
    Jun 13 07:35:46 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23358 exit status 1
    Jun 13 07:35:46 server03 postfix/master[2484]: warning: /opt/zimbra/postfix-2.2.9/libexec/smtpd: bad command startup -- throttling
    Jun 13 07:35:46 server03 amavis[22102]: (22102-03) (!)FWD via SMTP: <CWhite@manfinancial.com> -> <dolarov@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN21> line 1321., MTA([127.0.0.1]:10025), id=22102-03
    Jun 13 07:35:46 server03 amavis[22102]: (22102-03) Blocked TEMPFAIL, [65.208.234.44] [65.208.234.44] <CWhite@manfinancial.com> -> <dolarov@computervoice.com>, Message-ID: <8BE33F976BBED34385CB2224773E25EE04400129@CWPEXCV01.manchg01.manfinancial.net>, mail_id: 2Nl1EhUbZOkx, Hits: -4.278, 64754 ms
    Jun 13 07:35:46 server03 amavis[22110]: (22110-02) (!)FWD via SMTP: <smartin@computervoice.ro> -> <smartin@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 228., MTA([127.0.0.1]:10025), id=22110-02
    Jun 13 07:35:46 server03 amavis[22107]: (22107-01) (!)FWD via SMTP: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 261., MTA([127.0.0.1]:10025), id=22107-01
    Jun 13 07:35:46 server03 amavis[22110]: (22110-02) Blocked TEMPFAIL, [82.77.35.21] [82.77.35.21] <smartin@computervoice.ro> -> <smartin@computervoice.com>, Message-ID: <13124449.61181734670498.JavaMail.root@suse>, mail_id: LzB3XBly312m, Hits: -3.61, 36903 ms
    Jun 13 07:35:46 server03 amavis[22107]: (22107-01) Blocked TEMPFAIL, [66.227.82.26] [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, Message-ID: <20070613123540.5DBB3C04B@nq2.computervoice.com>, mail_id: jY2pwY5nmH2I, Hits: -3.392, 5453 ms
    Jun 13 07:35:46 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23359 exit status 1
    Jun 13 07:35:46 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23360 exit status 1
    Jun 13 07:35:46 server03 postfix/smtp[23101]: 3A1A81128FBE: to=<dolarov@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=117, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN21> line 1321., MTA([127.0.0.1]:10025), id=22102-03 (in reply to end of DATA command))
    Jun 13 07:35:46 server03 postfix/smtp[23102]: E9BF41128FCA: to=<smartin@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=38, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 228., MTA([127.0.0.1]:10025), id=22110-02 (in reply to end of DATA command))
    Jun 13 07:35:46 server03 postfix/smtp[23352]: 82B031128FCB: to=<dolarov@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=6, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 261., MTA([127.0.0.1]:10025), id=22107-01 (in reply to end of DATA command))
    Jun 13 07:35:46 server03 postfix/smtp[23352]: 82B031128FCB: to=<jzhong@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=6, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 261., MTA([127.0.0.1]:10025), id=22107-01 (in reply to end of DATA command))
    Jun 13 07:36:05 server03 zmtomcatmgr[23517]: status requested
    Jun 13 07:36:05 server03 zmtomcatmgr[23517]: status OK
    Jun 13 07:36:05 server03 sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmtomcatmgr status
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: antispam: Running 
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: antivirus: Running 
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: ldap: Running 
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: logger: Running 
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: mailbox: Running 
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: mta: Running 
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: snmp: Running 
    Jun 13 07:36:05 server03 zimbramon[23397]: 23397:info: 2007-06-13 07:36:02, STATUS: server03.computervoice.com: spell: Running 
    Jun 13 07:36:46 server03 postfix/smtpd[23568]: fatal: unexpected command-line argument: 192.168.28.0/24
    Jun 13 07:36:47 server03 postfix/master[2484]: warning: process /opt/zimbra/postfix-2.2.9/libexec/smtpd pid 23568 exit status 1
    Jun 13 07:36:47 server03 postfix/master[2484]: warning: /opt/zimbra/postfix-2.2.9/libexec/smtpd: bad command startup -- throttling
    Jun 13 07:36:47 server03 amavis[22106]: (22106-01) (!)FWD via SMTP: <support@e.macys.com> -> <lsturm@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 468., MTA([127.0.0.1]:10025), id=22106-01
    Jun 13 07:36:47 server03 amavis[22106]: (22106-01) Blocked TEMPFAIL, [206.165.246.6] [206.165.246.6] <support@e.macys.com> -> <lsturm@computervoice.com>, Message-ID: <macys_com.6qn8-shyt.c5zl@e.macys.com>, mail_id: JfjVeIGRhP9t, Hits: -3.036, 62543 ms
    Jun 13 07:36:47 server03 postfix/smtp[23357]: C3BE41128FCC: to=<lsturm@computervoice.com>, relay=127.0.0.1[127.0.0.1], delay=63, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 468., MTA([127.0.0.1]:10025), id=22106-01 (in reply to end of DATA command))
    Jun 13 07:36:52 server03 postfix/smtpd[23169]: connect from quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:36:52 server03 postfix/smtpd[23169]: 3A1021128FCD: client=quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:36:52 server03 postfix/cleanup[23100]: 3A1021128FCD: message-id=<20070613123652.0EEF6E965@quotes1.computervoice.com>
    Jun 13 07:36:52 server03 postfix/qmgr[22120]: 3A1021128FCD: from=<ccomlosan@computervoice.ro>, size=2526, nrcpt=2 (queue active)
    Jun 13 07:36:52 server03 postfix/smtpd[23169]: disconnect from quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:36:52 server03 amavis[22106]: (22106-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073545-22106: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com> SIZE=2526 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Wed, 13 Jun 2007 07:36:52 -0500 (CDT)
    Jun 13 07:36:52 server03 amavis[22106]: (22106-02) Checking: 8SW2SkxdjT9Q [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>
    Jun 13 07:36:58 server03 postfix/smtpd[23169]: connect from quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:36:58 server03 postfix/smtpd[23169]: 86D7D1128FCE: client=quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:36:58 server03 postfix/cleanup[23100]: 86D7D1128FCE: message-id=<20070613123658.61DFCE965@quotes1.computervoice.com>
    Jun 13 07:36:58 server03 postfix/qmgr[22120]: 86D7D1128FCE: from=<ccomlosan@computervoice.ro>, size=2538, nrcpt=2 (queue active)
    Jun 13 07:36:58 server03 postfix/smtpd[23169]: disconnect from quotes1.computervoice.com[66.227.82.26]
    Jun 13 07:36:58 server03 amavis[22107]: (22107-02) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070613T073540-22107: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com> SIZE=2538 Received: from server03.computervoice.com ([127.0.0.1]) by localhost (server03.computervoice.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Wed, 13 Jun 2007 07:36:58 -0500 (CDT)
    Jun 13 07:36:58 server03 amavis[22107]: (22107-02) Checking: EjmAa2Ox28NL [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>
    Jun 13 07:37:47 server03 postfix/smtpd[23633]: fatal: unexpected command-line argument: 192.168.28.0/24
    Jun 13 07:37:47 server03 postfix/smtpd[23634]: fatal: unexpected command-line argument: 192.168.28.0/24
    Jun 13 07:37:48 server03 amavis[22106]: (22106-02) (!)FWD via SMTP: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 729., MTA([127.0.0.1]:10025), id=22106-02
    Jun 13 07:37:48 server03 amavis[22106]: (22106-02) Blocked TEMPFAIL, [66.227.82.26] [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, Message-ID: <20070613123652.0EEF6E965@quotes1.computervoice.com>, mail_id: 8SW2SkxdjT9Q, Hits: -3.392, 56157 ms
    Jun 13 07:37:48 server03 amavis[22107]: (22107-02) (!)FWD via SMTP: <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, 450 4.4.1 Can't connect to 127.0.0.1 port 10025,  (Bad file descriptor) at (eval 56) line 145, <GEN5> line 522., MTA([127.0.0.1]:10025), id=22107-02
    Jun 13 07:37:48 server03 amavis[22107]: (22107-02) Blocked TEMPFAIL, [66.227.82.26] [66.227.82.26] <ccomlosan@computervoice.ro> -> <dolarov@computervoice.com>,<jzhong@computervoice.com>, Message-ID: <20070613123658.61DFCE965@quotes1.computervoice.com>, mail_id: EjmAa2Ox28NL, Hits: -3.392, 49948 ms
    i posted all this information hoping it will help .. please advise . thank you

  8. #8
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    What operating system is this and which version/release of Zimbra?

    [EDIT]Sorry, I should have read the first post.

    Has this ever worked or has this problem just started? If it used to work, have you made any changes to Zimbra?

    BTW, it's no use posting a screen shot like the one above, it's unreadable.
    Last edited by phoenix; 06-13-2007 at 06:20 AM.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  9. #9
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Default

    thanks for the fast reply phoenix
    yes..as i mentioned in the first post..it worked perfect for about a month..the server is even on production now ..and then i got complains from users that they didn't receive their emails and when i search the issue i 've found this problem in the logs..i think it started after zimbra updated ( maybe on antivirus database update) .. you can see this details in my first 2 posts from this thread..
    sorry about the screen shot..i didn't know . maybe i can send you the screenshot on email if you thinks this would help. or any other extra info you would need...i just need help asap ..
    thanks

    p.s. i'm on zimbra 4.5.3_GA , open Suse 10_2
    Last edited by sergiumartin; 06-13-2007 at 04:29 PM.

  10. #10
    sergiumartin is offline Senior Member
    Join Date
    Jun 2007
    Posts
    68
    Rep Power
    7

    Question

    so..any ideas why this happen and how could i fix it ?
    also..i'm getting lots of complains from users that antispam is not working well anymore since i stopped the antivirus service...in the admin console and also when i check services status with zmcontrol status , the server is "telling" me that the antispam is running..

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 27
    Last Post: 05-15-2012, 01:30 AM
  2. Errors because of Deffered emails
    By mansuper in forum Administrators
    Replies: 0
    Last Post: 11-20-2006, 04:08 PM
  3. fatal: Queue report unavailable - mail system is down
    By zzzzsg in forum Administrators
    Replies: 16
    Last Post: 08-24-2006, 02:31 AM
  4. New installation shows queue full of emails
    By Verbunk in forum Installation
    Replies: 2
    Last Post: 03-12-2006, 10:44 AM
  5. receiveing mail
    By maybethistime in forum Administrators
    Replies: 15
    Last Post: 12-09-2005, 04:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •