Thank you very much for getting back to me!

On Apr 17, 2006, at 19:35, Jason Haar wrote:


What does "ps auxww|grep qscan" show? Are there just
qmail-scanner-queue.pl processes lying around - or are there also calls
to SpamAssassin or AV too?

The former.  AV is clamav (87.1, I know I need to upgrade) but there
are no visible clamdscan processes, just a couple of sleeping clamd processes
hanging around.  Spamassassin is running as user spamd and shows
the usual spamd processes but there are no spamc's around.  It appears
they are never launched (see below).



I did run qmail-scanner-queue.pl -x to clear out the spool.

You mean "-z" don't you? There has never been a "-x" option :-)


Yup, -z.  =)

Many of the long-running idle processes have 0-length files in
/var/spool/qscand/working/tmp/ which are not deleted because they are
not yet 30 hours old.  I am finding that about 4/5 of the files
written to /var/spool/qscand/working/tmp are 0-length files -- which
could be a side effect of users' smtp-auth clients terminating
improperly or timing out, I guess. Should I just modify the script to
delete 0-length files older than an hour or something?

Nope - leave it be. You need to find out what's causing it first.

What could cause this?  Running with $DEBUG=1, I find no unusual
messages in qmail-queue.log -- entries for the various relevant
processes complete eventually in some cases or just stop arbitrarily
in the middle...

What does "in the middle" mean? Where are these things hanging?


They appear to hang after the attempt to dump the msg into the working Maildir.

From qmail-smtpd log:

2006-04-17 14:00:52.430491500 tcpserver: pid 9220 from 128.32.61.106
2006-04-17 14:00:52.447959500 tcpserver: ok 9220 mail.seedboxconnect.com:10.0.0.3:25 smtp-out1.berkeley.edu: 128.32.61.106::37978

From qmail-queue.log:

Mon, 17 Apr 2006 14:00:53 PDT:9221: +++ starting debugging for process 9221 by uid=89 Mon, 17 Apr 2006 14:00:53 PDT:9221: setting UID to EUID so subprocesses can access files generated b
y this script
Mon, 17 Apr 2006 14:00:53 PDT:9221: program name is qmail-scanner- queue.pl, version 2.00 Mon, 17 Apr 2006 14:00:53 PDT:9221: w_c: mkdir /var/spool/qscan//tmp/ seedboxconnect.com1145307653540
9221
Mon, 17 Apr 2006 14:00:53 PDT:9221: w_c: start dumping incoming msg into /var/spool/qscan//working/t
mp/seedboxconnect.com11453076535409221 [0.002144]


Dir /var/spool/qscan//tmp/seedboxconnect.com1145307653540 is empty as is the file in working/tmp:

-rw-rw---- 1 qscand qscand 0 Apr 17 14:00 seedboxconnect.com11453076535409221

Other info: softlimit is 40000000, which the FAQ suggests is higher than necessary. Not sure if that could have side effects here. Most of the zero-length entries in working/tmp trace back to a log pattern like the one above. There are also some 24+ hour-old non-zero files but they are far fewer in number. Originating smtp servers vary.

Thanks again for any suggestions. Maybe qmail-smtpd can be compiled with a debug mode to log its smtp conversations -- could let me track what is supposed to be transmitted. Looking into that next.



-- jesse



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to