Atomicorp

Hello

we have the following problem:
Configuration: Fresh install Centos 5.3 with Plesk 9.2.2,4Psa Clean Server, 4PSA Integrator, APF Firewall, Atomic Secure Linux.
We have installed qmail as MTA. When qmail is configured and the smtp_psa is enabled in the Path /etc/xinetd.d then the xinetd Deamon hangs every 3 minutes - psmon restart it:
Command executed: /sbin/service xinetd restart
Exit value: 0
Signal number: 0
Dumped core?: 0

Stopping xinetd: [FAILED]
Starting xinetd: [ OK ]

When i disable the smtp_psa (disable yes)- xinetd works fine inclusive smtps_psa)
When we switch to postfix it's the same. Xinetd works (without email) but postfix is dead every 3 minutes. It's a Problem with Port 25. Anything kill the MTA (postfix and qmail the same)! We have check the /etc/services -it's ok- This Problems are occurred since ASL is installed. Have anyone a idea?

We have a Inode validation failed Message (email)

Inode audit of /usr/sbin/sendmail.sendmail failed during routine checksum. The inode mismatch was as follows:
- expected results:
socket port : 25
binary path : /usr/sbin/sendmail.sendmail
binary inode: 2982080

- returned results:
binary path :
binary inode: 2982270

The invalid inode in question (2982270) can be located using the command:
find / -inum 2982270

Inspection of resturned information should be made to ensure server integrity, such inode mismatches should not occure under normal operations unless software has been updated or replaced.

Thank You;
root

We have check the whole filesystem with e2fsck -p but no error appeared.
It is a fresh system without any other software.


Kind regards

Blackstorm

Hello blackstorm,

did you try upgrade your plesk to 9.2.3?

Regards,

made_of_storm wrote:Hello blackstorm,

did you try upgrade your plesk to 9.2.3?

Regards,

Hello,

yes now we have upgrade our box to 9.2.3. This was a heavy problem. We use all tools from R-fx Networks.
The Tool Nsiv http://www.rfxn.com/projects/network-so ... alidation/ checks which program should have opened ports in the system and kills "improper" ones
In its opinion, `xinetd` cannot have the port 25 opened, it should be opened by `sendmail.sendmail`
We have disabled the rule sendmail in this utillity.


[root@server4 ~]# /usr/local/sbin/nsiv -so
NSIV version 0.3 <nsiv@r-fx.org>
Copyright (C) 2004, R-fx Networks <proj@r-fx.org> Copyright (C) 2004, Ryan MacDonald <ryan@r-fx.org> This program may be freely redistributed under the terms of the GNU GPL

Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ {chk.httpd} pid value is null, skipping.

Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ {chk.httpd_ssl} pid value is null, skipping.

Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ {chk.named} /usr/sbin/named inode verified on port 53

error encountered in rule /usr/local/nsiv/rules/ocwhttpd {chk.proftpd} flagged for skip or module does not apply to system, skipping.
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ

Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ {chk.sendmail} /usr/sbin/sendmail.sendmail inode differs from that of PID 23768 bound to port 25 {chk.sendmail} incident analysis:
{chk.sendmail} - expected results:
{chk.sendmail} socket port : 25
{chk.sendmail} binary path : /usr/sbin/sendmail.sendmail {chk.sendmail} binary inode: 2982080 {chk.sendmail} - returned results:
{chk.sendmail} socket port : 25
{chk.sendmail} binary path :
{chk.sendmail} binary inode: 2982270
{chk.sendmail} 'find / -inum 2982270' for more information.


Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.7/FAQ {chk.sshd} pid value is null, skipping.

Best regards

Blackstorm