Koozali.org: home of the SME Server

452 Message denied temporarily

Offline Mophilly

  • *
  • 384
  • +0/-0
    • Mophilly
452 Message denied temporarily
« on: March 03, 2017, 08:50:28 PM »
This server has been running well for years. All updates applied.

This morning the mail server began complaining when we attempt to send email. So far, the only indication I have is the log message "452 Message denied temporarily". I have read through some related posts here but I cannot find a reason for, or a resolution for, this sudden change in behavior.

No users can send mail and it appears incoming mail be blocked as well.

What should I be looking into?
- Mark

Offline devtay

  • *
  • 145
  • +0/-0
Re: 452 Message denied temporarily
« Reply #1 on: March 03, 2017, 08:57:15 PM »
Go to the email panel and turn off virus scanning for me. I'm having the same problem and I think clamav is causing the issue. I turned off scanning and can now email.
You can't stop what's coming. It ain't all waiting on you.

Offline devtay

  • *
  • 145
  • +0/-0
Re: 452 Message denied temporarily
« Reply #2 on: March 03, 2017, 09:02:08 PM »
Pertinent Data:

Everyone gets 452 Message denied temporarily across the organization.
Still processing emails through qpsmtpd and sqpsmtpd. Qmail is up and running.

Here's the failure lines from sqpsmtpd
2017-03-03 12:47:24.507110500 12086 virus::clamav plugin (data_post): Changing permissions on file to permit scanner access
2017-03-03 12:47:24.507137500 12086 virus::clamav plugin (data_post): clamscan results: ERROR: Could not lookup : Servname not supported for ai_socktype
2017-03-03 12:47:24.507138500 12086 virus::clamav plugin (data_post): ClamAV error: /usr/bin/clamdscan --stdout  --config-file=/etc/clamd.conf --no-summary /var/spool/qpsmtpd/1488566844:12086:0 2>&1: 2
2017-03-03 12:47:24.507139500

clamd/current
2017-03-03 12:03:53.589824500 Reading databases from /var/clamav
2017-03-03 12:04:19.662603500 LibClamAV Error: cli_pcre_compile: PCRE compilation failed at offset 52: unrecognized character after (?<
2017-03-03 12:04:19.662633500 LibClamAV Error: cli_pcre_build: failed to build pcre regex
2017-03-03 12:04:19.662634500 ERROR: Database initialization error: can't compile engine: Malformed database
2017-03-03 12:04:20.909517500 Terminating because of a fatal error.

I did the following to no avail.
#/usr/bin/refreshclam

As long as virus filtering is disabled in the email panel I can send and receive email. As soon as I turn it on no email.
You can't stop what's coming. It ain't all waiting on you.

Offline Mophilly

  • *
  • 384
  • +0/-0
    • Mophilly
Re: 452 Message denied temporarily
« Reply #3 on: March 03, 2017, 09:17:54 PM »
Disabling virus scanning did allow email sending and receiving to resume.

Top reports that clamd is still taking 99% of cpu. It was doing that before I disabled virus scanning.

I see the same error messages in the qstmpd log as you, devtay, posted.

This should be reported as a bug, I think, unless it is simply a failure of clam to update its database properly.
« Last Edit: March 03, 2017, 09:25:27 PM by Mophilly »
- Mark

Offline devtay

  • *
  • 145
  • +0/-0
Re: 452 Message denied temporarily
« Reply #4 on: March 03, 2017, 09:28:09 PM »
Same problem with clamav here. Did your issue start the same time as mine? I wonder if it was a bad update from clamav that killed things. I don't see any other way both of our systems could be seeing the same thing at the same time.

Here was the time stamp sorry: 2017-03-03 12:04:19
You can't stop what's coming. It ain't all waiting on you.

Offline devtay

  • *
  • 145
  • +0/-0
Re: 452 Message denied temporarily
« Reply #5 on: March 03, 2017, 09:42:46 PM »
https://bugs.contribs.org/show_bug.cgi?id=10132

Just in case I opened the above bug. I do think it's an update or something crazy like that. I'm not the expert on clamav, but /usr/bin/refreshclam deletes the databases and downloads them again.
You can't stop what's coming. It ain't all waiting on you.

Offline Mophilly

  • *
  • 384
  • +0/-0
    • Mophilly
Re: 452 Message denied temporarily
« Reply #6 on: March 03, 2017, 09:57:07 PM »
I became aware of the problem about 9:10 AM Pacific time today.
- Mark

Offline Stefano

  • *
  • 10,836
  • +2/-0
Re: 452 Message denied temporarily
« Reply #7 on: March 03, 2017, 10:38:27 PM »
Please, @all: start planning your upgrade to SME9, seriously

Offline devtay

  • *
  • 145
  • +0/-0
Re: 452 Message denied temporarily
« Reply #8 on: March 03, 2017, 10:41:04 PM »
Roger that. Coincidentally I'm in the process of configuring my server this week. I actually am working through the contribs I need right now. It will be next week before I'm done though.

I will admit, I totally spaced it until I saw the note on the forum about v8.2 going away as of the 30th. Totally my fault and in the process of rectifying it when this popped up. Sorry.
You can't stop what's coming. It ain't all waiting on you.

Offline globalsi

  • ****
  • 167
  • +0/-0
Re: 452 Message denied temporarily
« Reply #9 on: March 03, 2017, 10:47:29 PM »
Hi, same problem here today (sme 8.2)

in /var/log/clamd/current :
Quote
@4000000058b9e4f2238711e4 LibClamAV Error: cli_pcre_compile: PCRE compilation failed at offset 52: unrecognized character after (?<
@4000000058b9e4f2238719b4 LibClamAV Error: cli_pcre_build: failed to build pcre regex
@4000000058b9e4f2238719b4 ERROR: Database initialization error: Malformed database
@4000000058b9e4f223878afc Closing the main socket.

If i disable virus scanning, no problem.
« Last Edit: March 03, 2017, 10:52:10 PM by globalsi »

Offline Mophilly

  • *
  • 384
  • +0/-0
    • Mophilly
Re: 452 Message denied temporarily
« Reply #10 on: March 03, 2017, 11:24:33 PM »
Please, @all: start planning your upgrade to SME9, seriously

We are seriously planning the move. Our sense of urgency is appropriately high.

BTW, I can use some help planning/exectuing the move of users and groups only from the SME 8 server to a new SME 9 server. The old SME 8 server has so many hacks (yes, it is my fault) that moving only users, groups and email files seem the best way to clear away ancient cruft.
- Mark

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: 452 Message denied temporarily
« Reply #11 on: March 04, 2017, 12:18:56 AM »
Mophilly

Koozali sme server upgrade notes are here:
https://wiki.koozali.org/SME_Server:9.0

Also see the Backup server config Howto article for various tips on transferring limited data sets, here:
https://wiki.contribs.org/Backup_server_config

Users & groups are spread across various db config files so it is not easily possible to transfer ONLY users & groups, as lots of other db config settings you may not want will also be transferred.

My best suggestion to you is to make notes of important changes you have made to sme8. Remove those hacks & custom templates. Also consider to uninstall contribs. If you have useful contribs installed that have large data sets you want to retain, then leave those installed so the data is included in the backup.

Perform a supported full backup or alternative & use that to restore to your newly installed sme9 operating system.
Then reinstall required contribs & reconfigure custom templates to suit sme 9 requirements.
Also (if not done automatically) remove all sme8 non standard repositories & reconfigure them to suit sme9.
« Last Edit: March 04, 2017, 02:43:47 AM by janet »
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline LarsHaagh

  • 3
  • +0/-0
Re: 452 Message denied temporarily
« Reply #12 on: March 04, 2017, 12:55:02 PM »
Just to join the group...  I ran into this issue at ~5:30pm GMT last night.  Disabling virus scan has solved it temporarily.  Except from upgrading to SME9 can we expect a resolution to work for SME8 ?

Thanks for your support !

Lars

Offline Stefano

  • *
  • 10,836
  • +2/-0
Re: 452 Message denied temporarily
« Reply #13 on: March 04, 2017, 01:17:13 PM »
Just to join the group...  I ran into this issue at ~5:30pm GMT last night.  Disabling virus scan has solved it temporarily.  Except from upgrading to SME9 can we expect a resolution to work for SME8 ?

Thanks for your support !

Lars

Hi Lars, welcome here

I don't think so.. SME8 will be in EOL state in few weeks
anyway, try to do so:
Code: [Select]
service clamd stop
cd /var/clamav
rm *.c*d
freshclam
service clamd start

NOT TESTED

Offline devtay

  • *
  • 145
  • +0/-0
Re: 452 Message denied temporarily
« Reply #14 on: March 04, 2017, 03:14:23 PM »
The problem cleared up last night around 10 PM CST. I've re-enabled email scanning and things are working fine. The clamav errors in the logs have stopped. I'm guessing it was a problem with an update. I'm going to concentrate on getting my 9.2 server finished. Lesson learned.
You can't stop what's coming. It ain't all waiting on you.