qmail issues after installing qmail scanner

Unread post by **scott** » Mon Apr 02, 2007 9:17 am

oh gotcha, and you've got the base/updates channels right? This isnt a customized OS (VPS, etc)? It could be that you're getting a high volume of spam through the system right now. Either through an exploited web app, open relay, or you're just a target. You'd want to look at the queue to see whats going on.

breun · Unread post by **breun** » Mon Apr 02, 2007 10:18 am

I think he might want to use the new atomicorp channel, as 3es still has the old qmail-scanner package that doesn't have the new clamav fixes...

Unread post by **scott** » Mon Apr 02, 2007 11:21 am

That definitely rules out any issues in a newer package though. Those are the same qmail-scanner packages in use for a year or so. I suspect hes got a spammer.

JericonVLX · Unread post by **JericonVLX** » Mon Apr 02, 2007 1:07 pm

The server is a fresh provision and has not sent more than 10 or 15 emails per day. The issue is that after installing qmail-scanner I can't send or receive mail. Sending mail from the command line results in:

[root@ip-ipaddress ~]# date | mail bill@domain.com
[root@ip-ipaddress ~]# Can't do setuid (cannot exec sperl)
qmail-inject: fatal: qq temporary problem (#4.3.0)

I tried this on another server with the same system configuration. The server was freshly provisioned and had not been modified in any way.

/* SNIP */
[root@centosplesk ~]# yum --enable centosplus update
[root@centosplesk ~]# wget http://3es.atomicrocketturtle.com/installers/atomic.sh
[root@centosplesk ~]# ./atomic.sh
[root@centosplesk ~]# yum -y install qmail-scanner spamassassin
[root@centosplesk ~]# date | mail billg@domain.com
[root@centosplesk ~]# Can't do setuid (cannot exec sperl)
qmail-inject: fatal: qq temporary problem (#4.3.0)
/* SNIP */

This shows that the issue is not something that is simply with my server. Likewise, I had this working via the RPM on my server a little over a week ago but was required to re-provision the server to resolve some issues with psa not upgrading properly.

Unread post by **scott** » Mon Apr 02, 2007 8:26 pm

a ha, is selinux turned on? Side note, there are a bunch of threads mixed together here that are unrelated. Clamav people, GO TO ANOTHER THREAD PLEASE.

JericonVLX · Unread post by **JericonVLX** » Mon Apr 02, 2007 9:07 pm

No it is not.

[root@ip-address selinux]# sestatus
SELinux status: disabled

Unread post by **scott** » Tue Apr 03, 2007 7:54 am

So just to make sure we're on the same page, this is a standard, unmodified CentOS 4.4 box. SELinux is turned off, and all the standard channels are available, and you're using the older version of qmail-scanner from the 3es.atomicrocketturtle.com archive. What else is different about your system? Any CPAN modules, custom packages from other archives, src installs?

JericonVLX · Unread post by **JericonVLX** » Tue Apr 03, 2007 11:32 am

That all sounds correct. The server is running Plesk 8.1.1. No other system programs have been installed. I did install naim and ncftp from source, however that should have no affect on this.

I also have the rpmforge repo configured on my server, however that was not configured on the other server that I tested.

Botham · Unread post by **Botham** » Tue Apr 03, 2007 1:43 pm

I have a similar problem (perhaps the same but different..)

This is Plesk 7.5.4 Centos 3.8

We migrated to a fresh server with same OS as above.
Have tried re-installing clamav/spammassassin/qmail-scanner many times over to achieve a result however having fatal issues.

I'll skip to the chase. With clamd and spamd both up and running I then yum install qmail-scanner.

This process is working as per previous server - spam is marked SPAM and the headers in the email look correct and show the messages are being scanned.

However - if at any time later I run:
qmail-scanner-reconfigure

The command hangs and mail is undeliverable. (incoming and outgoing)

Example routine and tests I have run all week:
yum install qmail-scanner
[install: qmail-scanner 1:2.01-11.rhel3.art.noarch]
Success etc

date | mail me@wherever.com (works correctly)

Incoming spam is now tagged ****SPAM!!

qmail-scanner-reconfigure
Reconfiguring spamassassin settings: Done
Reconfiguring clamav settings: Done
Configuring qmail-scanner: .........................HANGS forever

Mail is no longer delivered or received.

date | mail me@wherever.com
//bin/rm: cannot remove `/var/spool/qscan/tmp/domain.net117561362177211983/': Permission denied
qmail-inject: fatal: qq temporary problem (#4.3.0)

This is cured if I uninstall qmail-scanner ....but then we have no spam filter...

We do have 2 perls installed however I have ensured that qmail-scanner-queue.pl points the default Plesk installed perl.

Wondering if our issue is related...

Unread post by **scott** » Tue Apr 03, 2007 5:43 pm

Yeah this isnt related to JericonVLXs problem, it can take a while to run the configuration steps in there. What its doing is sending test messages through the system. If you're using psa-spamassassin (if its even running!) it can cause it to not complete at all. Ive never dug to deep on why that happens. Regardless, its unrelated.

JericonVLX, I'd have to see your system first hand to see whats going on. Something strange is happening with it, and I suspect its environmental. Catch me on IM sometime (in the few minutes and seconds I have spare). Otherwise, we'll have to channel this through commercial support: sales@prometheus-group.com if you want a quick resolution.

Botham · Unread post by **Botham** » Tue Apr 03, 2007 6:59 pm

scott wrote:Yeah this isnt related to JericonVLXs problem, it can take a while to run the configuration steps in there. What its doing is sending test messages through the system. If you're using psa-spamassassin (if its even running!) it can cause it to not complete at all.

Not being facetious but how many hours should I wait!!!
Is there a debug mode or log for this process?

Note - psa-spamassassin not installed or running.

Unread post by **scott** » Tue Apr 03, 2007 9:32 pm

Definitely start a new thread about this. I'd like to focus this one on the originally reported problem.

Troy McClure · Unread post by **Troy McClure** » Thu Apr 19, 2007 4:10 pm

I am having this exact same issue on my test server. I am using the atomicorp channel and CentOS 4.4. This started when I upgraded to the latest clam. I have removed spamassassin, clam, and qmail-scanner and reinstalled them with the same results. When qmail-scanner is installing, I get this.

Code: Select all

Running Transaction
  Installing: qmail-scanner                ######################### [1/1]
Can't do setuid (cannot exec sperl)
Can't do setuid (cannot exec sperl)

I have tried old archive (3es)
spamassassin-3.1.7-1.rhel4.art
clamd-0.88.7-1.rhel4.art
qmail-scanner-2.01-12.rhel4.art

And new archive (atomicorp)
spamassassin-3.1.8-1.el4.art
clamd-0.90.2-1.el4.art
qmail-scanner-2.01-14.6.el4.art

Also when I try to send a test message I get the same error JericonVLX gets.

Code: Select all

[root@test ~]# date | mail test@test.com
[root@test ~]# Can't do setuid (cannot exec sperl)
qmail-inject: fatal: qq temporary problem (#4.3.0)

Was there a resolution to this?

Unread post by **scott** » Thu Apr 19, 2007 5:39 pm

Oh yeah, sorry it was SELinux. Set selinux=0 in grub.conf and bounce the box.

breun · Unread post by **breun** » Fri Apr 20, 2007 6:27 am

I'd run setenforce 0 and set SELINUX=disabled in /etc/sysconfig/selinux. No need to bounce the box.