Qmail-scanner: Unable to change group ID / broken pipe

bluewrath · Unread post by **bluewrath** » Mon Dec 22, 2008 1:39 am

Hi,

I've been trying to make qmail-scanner work on my Centos 4.6 / Plesk 9 server. I've bumped into a few posts that might be related to my problem, but so far I haven't found any solution.

I installed qmail-scanner, spamassassin, pyzor, razor, dcc and clamd with yum using the atomic repository.

After everything is installed and initialized, when I send an email to my server this is what happens:

Code: Select all

Dec 22 04:54:27 [obscured] spamd[1911]: spamd: connection from [obscured].com [127.0.0.1] at port 50275
Dec 22 04:54:27 [obscured] spamd[1911]: spamd: setuid to qscand succeeded
Dec 22 04:54:27 [obscured] spamd[1911]: spamd: checking message <01c96412$e58a3a00$295a5951@egloov> for qscand:10021
Dec 22 04:54:29 [obscured] spamd[1911]: spamd: identified spam (23.6/5.0) for qscand:10021 in 1.1 seconds, 1234 bytes.
Dec 22 04:54:29 [obscured] spamd[1911]: spamd: result: Y 23 - DIET_1,PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,URIBL_RHS_DOB,URIBL_SBL,URIBL_SC_SURBL,U$
Dec 22 04:54:29 [obscured] spamd[20438]: prefork: child states: II
Dec 22 04:54:29 [obscured] qmail-queue-handlers[1484]: Unable to change group ID: Operation not permitted
Dec 22 04:54:29 [obscured] qmail-scanner-queue.pl: X-Qmail-Scanner-2.05st:[[obscured].com12299180667921453] Unable to open pipe to /var/qmail/bin/qmail-queue.orig [16777215] (#4.3.0) - Broken pipe
Dec 22 04:54:29 [obscured] qmail-scanner-queue.pl: X-Qmail-Scanner-2.05st:[[obscured].com12299180667921453] Unable to close pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) - Illegal seek

From what I've read in other posts my permissions are correct... I'm no expert though. One thing worth mentioning is that I have installed some filters (dkim, spf...) that can be activated through Plesk. I am suspecting that these filters and/or their permissions are interfering in some way, but then again, I'm no expert.

I would really appreciate some help here. Thanks in advance.

Paul.

Unread post by **scott** » Mon Dec 22, 2008 1:55 pm

selinux maybe, assuming you didnt do anything other than install the rpm.

bluewrath · Unread post by **bluewrath** » Mon Dec 22, 2008 3:00 pm

Hi Scott:

Thanks for your reply. Is there any solution or workaround for this? I'd be happy to provide you with more information you may need.

Paul.

Unread post by **scott** » Mon Dec 22, 2008 7:45 pm

You dont have a separate /var partition by any chance do you

bluewrath · Unread post by **bluewrath** » Tue Dec 23, 2008 10:23 pm

No, I don't.

CrK01 · Unread post by **CrK01** » Mon Dec 29, 2008 8:10 pm

Hello,

same problem here

Dec 30 01:06:14 nls X-Qmail-Scanner-2.02st: [nls.es123059557479111539] Unable to open pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) -
Dec 30 01:06:14 nls X-Qmail-Scanner-2.02st: [nls.es123059557479111539] Unable to close pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) - Illegal seek
Dec 30 01:06:59 nls relaylock: /var/qmail/bin/relaylock: Unable to query white list: not an error
Dec 30 01:06:59 nls relaylock: /var/qmail/bin/relaylock: mail from 213.149.249.8:57049 (not defined)
Dec 30 01:07:00 nls qmail-queue-handlers[12175]: Unable to change group ID: Operation not permitted
Dec 30 01:07:00 nls X-Qmail-Scanner-2.02st: [nls.es123059562079112163] Unable to open pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) -
Dec 30 01:07:00 nls X-Qmail-Scanner-2.02st: [nls.es123059562079112163] Unable to close pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) - Illegal seek
Dec 30 01:07:26 nls pop3d: Connection, ip=[88.17.67.39]
Dec 30 01:07:26 nls pop3d: IMAP connect from @ [88.17.67.39]INFO: LOGIN, user=mangu@nls.es, ip=[88.17.67.39]
Dec 30 01:07:32 nls pop3d: 1230595652.592099 LOGOUT, user=mangu@nls.es, ip=[88.17.67.39], top=0, retr=0, time=6, rcvd=24, sent=568146, maildir=/var/qmail/mailnames/nls.es/mangu/Maildir
Dec 30 01:08:26 nls pop3d: Connection, ip=[88.17.67.39]
Dec 30 01:08:27 nls pop3d: IMAP connect from @ [88.17.67.39]INFO: LOGIN, user=emergencias@nls.es, ip=[88.17.67.39]
Dec 30 01:08:27 nls pop3d: 1230595707.959849 LOGOUT, user=emergencias@nls.es, ip=[88.17.67.39], top=0, retr=0, time=0, rcvd=24, sent=11496, maildir=/var/qmail/mailnames/nls.es/emergencias/Maildir
Dec 30 01:08:37 nls qmail-queue-handlers[13579]: Unable to change group ID: Operation not permitted
Dec 30 01:08:37 nls X-Qmail-Scanner-2.02st: [nls.es123059571779113570] Unable to open pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) -
Dec 30 01:08:37 nls X-Qmail-Scanner-2.02st: [nls.es123059571779113570] Unable to close pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) - Illegal seek
Dec 30 01:08:37 nls qmail-queue-handlers[13590]: Unable to change group ID: Operation not permitted
Dec 30 01:08:37 nls X-Qmail-Scanner-2.02st: [nls.es123059571779113583] Unable to open pipe to /var/qmail/bin/qmail-queue.orig [72057594037927935] (#4.3.0) - Broken pipe
Dec 30 01:08:37 nls X-Qmail-Scanner-2.02st: [nls.es123059571779113583] Unable to close pipe to /var/qmail/bin/qmail-queue.orig [255] (#4.3.0) - Illegal seek

no problems since plesk 9.0 ( updated from plesk 8.6 )

ZopfWare · Unread post by **ZopfWare** » Tue Dec 30, 2008 3:24 pm

I did not have this particular problem with 9.0 until I put in their 9.0.0.2 patch.

It appears to me that they have changed to ownership and structure for mail handlers.

qmail-remote is now owned by mailhandlers-user:popuser

I'm not sure what is going on but sure would appreciate some answers or suggestions.

BTW - I did a force install of the psa-qmail-1.03-cos5.build90081117.17.x86 build and my qmail-scanner/clamav is working again... at least no more broken pipe and email can be sent again.

hestonk · Unread post by **hestonk** » Wed Jan 07, 2009 2:45 pm

I have the same problem as well,

After updating to 9.0.0.2, i've come across these errors.
I am currently running w/o qmail-scanner installed.

I have tried changing some permissions around with any avail.

Has anyone found a fix for this yet? Are there more people out there with the same problem?

Installing qmail-scanner then re-install psa-qmail-... doesn't do the trick for me.

CrK01 · Unread post by **CrK01** » Wed Jan 07, 2009 4:06 pm

no fix here

I had to change to postfix since this is updated

AntiochInteractive · Thu Jan 08, 2009 1:11 pm

I've had the same problem, however, unlike CrK01, postfix does not work for me. It simply refuses connections to mail when postfix is active.

I've also tried changing permissions back and forth and doing my best to troubleshoot to no avail.

It bothers me that while PLESK is equipped with SpamAssassin, I'm getting floods of spam and don't know why. I like qmail-scanner because it's the only way that I know to get spamassassin to write useful headers into e-mails, to monitor its tagging, and to integrate clamav.

I'm wondering what I can do during the lack of a compatible qmail-scanner release.

Unread post by **scott** » Fri Jan 09, 2009 10:27 am

You could route mail through a Project Gamera box

hestonk · Unread post by **hestonk** » Fri Jan 09, 2009 10:32 am

is there a way to run it concurrently with plesk on the same machine?
I just figured I'd ask before wasting time but i'll take a look into it later this weekend.

AntiochInteractive · Fri Jan 09, 2009 10:50 am

While Gamera is an excellent solution for anyone's spam problems, I think that Gamera is better when serving several machines, not just one. In addition, as far as cost goes, I'm voting no for Gamera for myself.

Now ... if you guys get some servers with Gamera installed via VPS ... and I can order a Gamera VPS ... I might consider that for both the service and supporting the value that ART.com provides.

Unread post by **scott** » Fri Jan 09, 2009 12:04 pm

Im veto'ing your vote.

AntiochInteractive · Fri Jan 09, 2009 12:38 pm

Well, provide a hosted gamera service

Atomicorp

Qmail-scanner: Unable to change group ID / broken pipe

Qmail-scanner: Unable to change group ID / broken pipe

Plesk 9.0 qmail and qmail-scanner

Same Deal.