Hi Sean:
I did not remove it but I changed Yes to No for ClamAV in simscan and
did run qmailctl cdb. In doing the research it appears that the ClamAV
'qq soft reject' issue was only related to earlier versions of ClamAV
and I think only on CentOS 5. But I thought I'd try removing it anyway.
Jeff
On 4/28/2017 11:47 PM, Sean P. Murphy wrote:
Hi Jeff,
To answer your first question, the tcp.smtp file and related files now
reside in /etc/tcprules.d. As far as your second question goes, I
haven't used spamdyke so I can't speak to anything regarding that.
Perhaps Eric or someone with some more experience can help you there.
When you turned off ClamAV, did you also remove it from simscan and
run "qmailctl cdb" after doing so?
-Sean
On Apr 28, 2017, at 8:26 PM, Jeff Koch <[email protected]
<mailto:[email protected]>> wrote:
Hi - we're running a new qmailtoaster (installed in March 2017) on a
new CentOS 7 server. We're seeing a large number of soft rejects in
the /var/log/qmail/smtp log that look like this:
qmail-smtpd: qq soft reject (mail server temporarily rejected message
(#4.3.0)):
We tried turning off ClamAV to see if that helped but it didn't.
However, these rejects seem to be accompanied by the following
spamdyke errors in the /var/log/maillog:
Apr 28 09:52:29 server spamdyke[20476]: ERROR: unable to open file
for searching /home/vpopmail/etc/tcp.s
mtp: No such file or directory
Apr 28 09:52:29 server spamdyke[20476]: ERROR: unable to open file
for searching /home/vpopmail/etc/open-smtp: No such file or directory
Apr 28 09:52:32 server spamdyke[20476]: ERROR: unable to load or
decrypt SSL/TLS private key from file:
/home/vpopmail/spamdyke/server_domain_net.key : A protocol or library
failure occurred, error:0B080074:lib(11):func(128):reason(116)
Apr 28 09:52:32 server spamdyke[20476]: ERROR: incorrect SSL/TLS
private key password or SSL/TLS certificate/privatekey
mismatch/home/vpopmail/spamdyke/server_domain_net.key : A protocol or
library failure occurred, error:140A80B1:lib(20):func(168):reason(177)
Apr 28 09:52:32 server spamdyke[20476]: ERROR: unable to initialize
SSL/TLS library
Apr 28 09:52:32 server spamdyke[20476]: TLS_ENCRYPTED from: (unknown)
to: (unknown) origin_ip: 200.xx.xx.10 origin_rdns: ns.blah-blah.net
<http://ns.blah-blah.net> auth: (unknown) encryption: TLS_PASSTHROUGH
reason: (empty)
First Question - where did tcp.smtp go that used to reside in
/home/vpopmail/etc in the old toasters?
Second Question - /home/vpopmail/spamdyke/server_domain_net.key does
exist so what could be the reason why spamdyke is unable to decrypt
the private key?
Thanks for any insights you guys might have.
Jeff Koch
