Topic: Unable to send data

[572452]

Bonjour, depuis le 23 courant le serveur de messagerie hébergé sur ma SME 7.4 ne fonctionne plus. Chaque  envoi de message se termine par un message d’erreur « Unable to send Data » la réception de message est également impossible. J’ai modifié les paramètres de messagerie puis reconfiguré  mais  sans succès. Cela ne semble pas être Un problème de DNS ( IP fixe et abonnement DynDNS) car le serveur Web, alias compris est toujours accessible de l’extérieur. Le webmail est également ok, sauf pour l’envoi et la réception de message. Les journaux Qmail  ne montrent rien. J’ai trouvé sur le forum en allemand un problème identique solutionné  en rechargeant les droits de clamav sur /var. quelqu’un a-t-il déjà rencontré ce problème ?     

[mmccarn]

Regardez dan les journaux qpsmtpd et clamd.

[572452]

Ce matin le serveur de messagerie fonctionne à nouveau mais je ne m’explique pas pourquoi Voici un extrait du Journal qpsmtpd/current. Je trouve ces lignes d’erreur jusqu’au 26 courant 03H58, après plus d’erreur 

2009-06-26 03:58:33.210269500 1265 Plugin spamassassin, hook data_post returned DECLINED,
2009-06-26 03:58:33.210274500 1265 running plugin (data_post): virus::clamav
2009-06-26 03:58:33.219544500 1265 virus::clamav plugin: Changing permissions on file to permit scanner access
2009-06-26 03:58:33.219553500 1265 virus::clamav plugin: Running: /usr/bin/clamdscan --stdout  --config-file=/etc/clamd.conf --no-summary /var/spool/qpsmtpd/1245981508:1265:0 2>&1
2009-06-26 03:58:33.235239500 1265 virus::clamav plugin: clamscan results: ERROR: Can't connect to clamd: No such file or directory
2009-06-26 03:58:33.235249500 1265 virus::clamav plugin: ClamAV error: /usr/bin/clamdscan --stdout  --config-file=/etc/clamd.conf --no-summary /var/spool/qpsmtpd/1245981508:1265:0 2>&1: 2
2009-06-26 03:58:33.235255500
2009-06-26 03:58:33.246591500 1265 Plugin virus::clamav, hook data_post returned DENYSOFT,
2009-06-26 03:58:33.247972500 1265 running plugin (deny): logging::logterse
2009-06-26 03:58:33.249900500 1265 logging::logterse plugin: ` 190.67.184.156   Unknown   desktop   <BrockallocateBradshaw@worldtravelguide.net>   <defense@montagne-labathie.dnsalias.net>   virus::clamav   902      msg denied before queued
2009-06-26 03:58:33.251284500 1265 Plugin logging::logterse, hook deny returned DECLINED,
2009-06-26 03:58:33.252746500 1265 452 Message denied temporarily



Voici le Journal  clamd/curent également des messages d’erreur Jusqu’à 04H00

2009-06-26 04:00:16.345099500 Closing the main socket.
2009-06-26 04:00:17.391523500 LibClamAV Error: cli_loadmd5: Malformed MD5 string at line 5668
2009-06-26 04:00:17.391658500 LibClamAV Error: cli_loadmd5: Problem parsing database at line 5668
2009-06-26 04:00:17.391713500 LibClamAV Error: Can't load daily.mdb: Malformed database
2009-06-26 04:00:17.391756500 LibClamAV Error: cli_tgzload: Can't load daily.mdb
2009-06-26 04:00:17.391905500 LibClamAV Error: Can't load /var/clamav/daily.cld: Malformed database
2009-06-26 04:00:17.392125500 ERROR: Malformed database
2009-06-26 04:00:17.392244500 Closing the main socket.
2009-06-26 04:00:18.438606500 LibClamAV Error: cli_loadmd5: Malformed MD5 string at line 5668
2009-06-26 04:00:18.438752500 LibClamAV Error: cli_loadmd5: Problem parsing database at line 5668
2009-06-26 04:00:18.438821500 LibClamAV Error: Can't load daily.mdb: Malformed database
2009-06-26 04:00:18.438882500 LibClamAV Error: cli_tgzload: Can't load daily.mdb
2009-06-26 04:00:18.439023500 LibClamAV Error: Can't load /var/clamav/daily.cld: Malformed database
2009-06-26 04:00:18.439140500 ERROR: Malformed database


puis, semble t’il une vérification automatique depuis plus d’erreur.


2009-06-26 04:00:37.237621500 Limits: Global size limit set to 104857600 bytes.
2009-06-26 04:00:37.246099500 Limits: File size limit set to 15728640 bytes.
2009-06-26 04:00:37.246105500 Limits: Recursion level limit set to 8.
2009-06-26 04:00:37.246110500 Limits: Files limit set to 1500.
2009-06-26 04:00:37.246115500 Limits: Core-dump limit is 0.
2009-06-26 04:00:37.246120500 Archive support enabled.
2009-06-26 04:00:37.246124500 Algorithmic detection enabled.
2009-06-26 04:00:37.246129500 Portable Executable support enabled.
2009-06-26 04:00:37.246134500 ELF support enabled.
2009-06-26 04:00:37.246139500 Mail files support enabled.
2009-06-26 04:00:37.246157500 OLE2 support enabled.
2009-06-26 04:00:37.246162500 PDF support enabled.
2009-06-26 04:00:37.246167500 HTML support enabled.
2009-06-26 04:00:37.246171500 Self checking every 1800 seconds.
2009-06-26 04:00:37.246176500 Listening daemon: PID: 1564
2009-06-26 04:00:37.246181500 MaxQueue set to: 100
2009-06-26 04:33:41.193484500 No stats for Database check - forcing reload
2009-06-26 04:33:42.184981500 Reading databases from /var/clamav
2009-06-26 04:33:56.513041500 Database correctly reloaded (1125525 signatures)
2009-06-26 05:07:56.100504500 SelfCheck: Database status OK.
2009-06-26 05:39:40.386943500 SelfCheck: Database status OK.
2009-06-26 06:14:01.996782500 SelfCheck: Database status OK.
2009-06-26 06:57:27.807728500 SelfCheck: Database status OK.
2009-06-26 07:37:54.077250500 SelfCheck: Database status OK.
2009-06-26 08:00:22.558115500 Reading databases from /var/clamav
2009-06-26 08:00:35.887648500 Database correctly reloaded (1125532 signatures)
2009-06-26 08:10:41.296544500 SelfCheck: Database status OK.
2009-06-26 08:41:29.802109500 SelfCheck: Database status OK.
2009-06-26 09:14:14.261559500 SelfCheck: Database status OK.
2009-06-26 09:50:45.558124500 SelfCheck: Database status OK.
2009-06-26 10:34:29.593532500 SelfCheck: Database status OK.
2009-06-26 11:04:29.313621500 SelfCheck: Database status OK.
2009-06-26 11:38:47.014664500 SelfCheck: Database status OK.
2009-06-26 12:29:23.551223500 SelfCheck: Database status OK.
2009-06-26 13:03:40.028485500 SelfCheck: Database status OK.
2009-06-26 13:47:41.093971500 SelfCheck: Database status OK.
2009-06-26 14:18:44.627571500 SelfCheck: Database status OK.
2009-06-26 14:48:44.338773500 SelfCheck: Database status OK.
2009-06-26 14:50:12.678513500 /var/spool/qpsmtpd/1246020606:21978:0: Email.Trojan-38 FOUND
2009-06-26 14:53:28.684436500 /var/spool/qpsmtpd/1246020803:22073:0: Email.Trojan-38 FOUND
2009-06-26 14:54:10.979878500 /var/spool/qpsmtpd/1246020845:22081:0: Email.Trojan-38 FOUND
2009-06-26 14:54:35.561476500 /var/spool/qpsmtpd/1246020870:22107:0: Email.Trojan-38 FOUND
2009-06-26 14:54:59.921898500 /var/spool/qpsmtpd/1246020892:22113:0: Email.Trojan-38 FOUND
2009-06-26 14:55:38.448150500 /var/spool/qpsmtpd/1246020933:22140:0: Email.Trojan-38 FOUND
2009-06-26 14:56:01.944977500 /var/spool/qpsmtpd/1246020956:22147:0: Email.Trojan-38 FOUND
2009-06-26 15:18:53.215392500 SelfCheck: Database status OK.
2009-06-26 16:02:35.532550500 SelfCheck: Database status OK.
2009-06-26 16:46:33.954962500 SelfCheck: Database status OK.
2009-06-26 17:00:33.209958500 Reading databases from /var/clamav
2009-06-26 17:00:47.334175500 Database correctly reloaded (1126445 signatures)
2009-06-26 17:30:47.050631500 SelfCheck: Database status OK.
2009-06-26 18:00:34.740144500 Reading databases from /var/clamav
2009-06-26 18:00:52.708475500 Database correctly reloaded (1126449 signatures)
2009-06-26 18:06:07.851007500 SelfCheck: Database status OK.


Voila je suis preneur de toutes explications en tous cas merci pour la piste

[mmccarn]

* /etc/crontab: /etc/cron.daily se passe chaque matin a 4:00h
* /etc/cron.daily/freshclam renouvele /var/clamav/daily.inc/daily.db

Pour quelque raison, votre /var/clamav/daily.inc/daily.db est devenu problematique... a la prochain update, il s'est guerit.

(Notez bien que c'est une theorie seulement; pardonnez svp mes fautes de francais)

[chris burnat]

Pouvez vous regarder si vous avez recu des emails dans l'account "admin" de la part de:
 Cron <le_nom-de-votre-server> run-parts /etc/cron.daily 
Recherchez depuis la date ou votre serveur a perdu les functions de messagerie et laissez nous savoir svpl .
Merci.

[572452]

Voici semble-t-il les messages d’erreur que j’ai pu repérer. En tous cas merci de vous intéresser à mes problèmes. Ce matin j'ai verifié le contenu des boites de messagerie un utilisateur avait 6700 messages dans son Junkmail. une Limite atteinte ?


 

Cron <root@sme-home-v7> run-parts /etc/cron.daily

/etc/cron.daily/01-rkhunter:

Default logfile will be used (/var/log/rkhunter.log).
The SCRIPTDIR configuration option has not been set by the installer
 


/etc/cron.daily/logrotate:

error: stat of /var/log/rkhunter/rkhunter.log failed: No such file or directory






rkhunter Daily Run on sme-home-v7

--------------------- Start Rootkit Hunter Update ---------------------
Default logfile will be used (/var/log/rkhunter.log).
Database directory does not exist: /var/rkhunter/db

---------------------- Start Rootkit Hunter Scan ----------------------
Default logfile will be used (/var/log/rkhunter.log).
Database directory does not exist: /var/rkhunter/db

----------------------- End Rootkit Hunter Scan -----------------------


Cron <root@sme-home-v7> /sbin/e-smith/check4updates -m

Error in sys.exitfunc:
Traceback (most recent call last):
  File "/usr/lib/python2.3/atexit.py", line 20, in _run_exitfuncs
    func(*targs, **kargs)
  File "plugins.py", line 159, in run
  File "/usr/lib/yum-plugins/smeserver.py", line 69, in close_hook
    os.unlink('/var/run/yum.status')
OSError: [Errno 2] No such file or directory: '/var/run/yum.status'



freshclam: Update failed

2009-06-27 16:11:58.890365500 ClamAV update process started at Sat Jun 27 16:11:58 2009
2009-06-27 16:11:58.891382500 main.cvd is up to date (version: 51, sigs: 545035, f-level: 42, builder: sven)
2009-06-27 16:12:05.406762500 WARNING: getfile: daily-9514.cdiff not found on remote server (IP: 91.193.56.105)
2009-06-27 16:12:05.407557500 WARNING: getpatch: Can't download daily-9514.cdiff from database.clamav.net
2009-06-27 16:12:07.426964500 WARNING: getfile: daily-9514.cdiff not found on remote server (IP: 91.193.56.105)
2009-06-27 16:12:07.426973500 WARNING: getpatch: Can't download daily-9514.cdiff from database.clamav.net
2009-06-27 16:12:09.682767500 WARNING: getfile: daily-9514.cdiff not found on remote server (IP: 91.193.56.105)
2009-06-27 16:12:09.682776500 WARNING: getpatch: Can't download daily-9514.cdiff from database.clamav.net
2009-06-27 16:12:13.252447500 WARNING: getfile: daily-9514.cdiff not found on remote server (IP: 91.193.56.105)
2009-06-27 16:12:13.252456500 WARNING: getpatch: Can't download daily-9514.cdiff from database.clamav.net
2009-06-27 16:12:15.705713500 WARNING: getfile: daily-9514.cdiff not found on remote server (IP: 91.193.56.105)
2009-06-27 16:12:15.705723500 WARNING: getpatch: Can't download daily-9514.cdiff from database.clamav.net
2009-06-27 16:12:17.203285500 WARNING: getfile: daily-9514.cdiff not found on remote server (IP: 91.193.56.105)
2009-06-27 16:12:17.203294500 ERROR: getpatch: Can't download daily-9514.cdiff from database.clamav.net
2009-06-27 16:12:17.203299500 WARNING: Incremental update failed, trying to download daily.cvd
2009-06-27 16:12:44.060703500 WARNING: Mirror 91.193.56.105 is not synchronized.
2009-06-27 16:12:44.062346500 Giving up on database.clamav.net...
2009-06-27 16:12:44.062419500 Update failed. Your network may be down or none of the mirrors listed in /etc/freshclam.conf is working. Check http://www.clamav.net/support/mirror-problem for possible reasons.

[chris burnat]

Merci de votre reponse.  Vous avez donc fait l'experience de trois problemes.  C'est un peu tard maintenant pour faire une investigation en detail puisque cela s'est resolu d'une facon ou d'une autre, apparament.

Et cependant, jetez un coup d'oeil sur le bug:

http://bugs.contribs.org/show_bug.cgi?id=5379

Comme vous le verrez, il aurait pu exister des similarites entre votre probleme et bug #5379. 

Si votre issue avec clamav se repete, pouvez vous faire un report a Bugzilla? 

A propos des erreures avec rkhunter, existent elle toujours?  Si oui, avez vous fait un upgrade recement, ce package devrait avoir disparu maintenant si votre system est a jour.  Si vous etes a jour et ce probleme continue, pouvez vous faire un rapport sur Bugzilla?

Finallement, recevez vous encore des  erreures recues au suject de check4updates?  Il y a un bug ouvert sur ce topic, regardez:   

http://bugs.contribs.org/show_bug.cgi?id=4169

Si ces erreures persistent, faite un rapport sur Bugzilla aussi.  De cette facon, le Devteam sera en mesure de considerer tout cela.
Merci.