> [EMAIL PROTECTED] wrote: >> clamuko: corrupt or unknown >> clamd scanner error or memory/resource/perms problem - exit status 2 > > You could run swatch (perl program that monitors log files) and tell it to > send you an email if it ever sees something like that in your log files > again. >
Planning on it - unfortunately, the errors tend to be a bit.. different, each time. I'll probably just have it email me the last 50 lines of the log files every hour. > >> What had happened is that the server's video card had gone out, thus >> taking the machine down. After replacing the server, and powering back >> up >> - I didn't get an error message from clamd - it turns out that the /tmp >> file wasn't removed by the script (which it is supposed to do), so clamd >> refused to start up. Okay - that's acceptable. >> >> However, what the mail server did is continue to receive messages, and >> instead of leaving the messages in the queue until the error went away - >> it would hit the "can't find clamd" and proceed to throw the message >> away. > > I think you don't understand where qmail-scanner fits in the > qmail-smtpd->qmail-queue > pipeline. > > Qmail-scanner is called BEFORE the message is queued. The only thing > qmail-scanner > can do is CAUSE qmail-smtpd to return a 451 (temporary error code) instead > of a > 5xx permanent error code. Unfortunately I haven't looked deeply enough at > qmail-scanner's error codes to comment on them. I run ClamAV under the > daemontools > package (supervise) which ensures that my clamd is running 24/7. However, > even > daemontools can't protect against an improper install. That's why I run a > testing > mail server and a production mail server. The testing server sees any > changes > before the production server so I can iron out any problems before they > hit the > production server. > I'd like to point out that this wasn't a testing server, it was a functional production server. The issues happened not because of an upgrade (which I monitor very closely) but because of a hardware failure. I still haven't figured out why the machine went bonkers because of a unused video card failing. Would it be possible for you to give me an explanation of how you're running clamav under supervise? I have most everything else running that way, and I'd much prefer to have clamav run that way as well - I just haven't had time to work through that one. > > >> It seems like it would be more reasonable for the scan process to go >> 'Process can't work!' and then either feed the mails through (maybe with >> a >> message to the admin that the program is buggering up), or store them in >> queue, again, with a message to the admin. > > I'd rather not send my users viruses, personally. I think it would be > sufficient > for qmail-scanner to cause qmail-smtpd to return a 451 code. This way the > remote > sending mail server would queue the message and try again later. > > My question would be: Does qmail-scanner cause qmail-smtpd to return a 451 > if it > detects problems with one of it's scanners? Does it email the admin in > this case? > Honestly - I'm not sure. I found that SOME of the emails DID get requeued, but certainly not all of them. (not judging by the size of my incoming mail logs.) And clamd blew up again last night with no notice - I'm going to upgrade ClamAV, and see if that fixes the problem. I've already upped the QMAILQUEUE softlimit - again. If it happens once more, I guess I'll replace the memory in the box - it's just strange that it is only ClamAV in conjunction with qmail-scanner (but ClamAV is outside the scope of this list) Thanks for the reply. Troy > -- > Jesse Guardiani, Systems Administrator > WingNET Internet Services, > P.O. Box 2605 // Cleveland, TN 37320-2605 > 423-559-LINK (v) 423-559-5145 (f) > http://www.wingnet.net > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: IBM Linux Tutorials > Free Linux tutorial presented by Daniel Robbins, President and CEO of > GenToo technologies. Learn everything from fundamentals to system > administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
