Results 1 to 7 of 7

Thread: [SOLVED] spamassassin problem? spam no longer filtered?

  1. #1
    Join Date
    Aug 2007
    Posts
    19
    Rep Power
    8

    Default [SOLVED] spamassassin problem? spam no longer filtered?

    So, some of our employees moved one of our zimbra boxes from one location to other in the same building. And I think they powered off the server without shutting it down properly...

    Everything seems to be allright, except spam is no longer filtering.



    However-

    in the admin GUI it shows antispam with a nice blue checkbox as it is running

    Also-

    PHP Code:
    [zimbra@mail ~]$  zmantispamctl status
    [zimbra@mail ~]$  zmantispamctl stop
    [zimbra@mail ~]$  zmantispamctl start
    [zimbra@mail ~]$  zmantispamctl status
    [zimbra@mail ~]$ 
    There is no reply when I do these commands.. I am simply returned to the prompt.

    Doesn't look good... I'm unsure how to proceed from here. Suggestions?

    Oh and here's the version and platform.. I realize I'm a bit behind on the updates.

    PHP Code:
    Name        zimbra-core                  Relocations: (not relocatable)
    Version     4.5.6_GA_1044.RHEL4               VendorZimbraInc.
    Release     20070706161941 

  2. #2
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Welcome to the forums,
    4.5.6 had a build of clamav that tends to do the exact opposite of your situation (actually blocks email from being sent). We can check some other places to see what's enabled where, but you'll be better off upgrading to 4.5.11 (or making the jump to 5.0.2) anyways.
    http://www.zimbra.com/forums/announc...-released.html
    Don't forget a backup: Open Source Edition Backup Procedure - Zimbra :: Wiki

  3. #3
    Join Date
    Aug 2007
    Posts
    19
    Rep Power
    8

    Default

    You jinxed me! LOL As soon as I tried a reboot.. all email is being deferred, and zmclamdctl is not running, and therefore,

    PHP Code:
    Feb 19 16:51:01 mail amavis[11559]: (11559-08-7ClamAV-clamdCan't connect to INET socket 127.0.0.1:3310: Connection refused, retrying (1)
    Feb 19 16:51:01 mail amavis[15282]: (15282-04-7) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20080219T165051-15282
    Feb 19 16:51:01 mail amavis[16541]: (16541-01-6) (!!)WARN: all primary virus scanners failed, considering backups
    Feb 19 16:51:01 mail amavis[16541]: (16541-01-6) (!!)TROUBLE in check_mail: virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: ClamAV-clamd av-scanner FAILED: Too many retries to talk to 127.0.0.1:3310 (Can'
    t connect to INET socket 127.0.0.1:3310Connection refusedat (eval 54line 269.
    Feb 19 16
    :51:01 mail amavis[16541]: (16541-01-6) (!)PRESERVING EVIDENCE in /opt/zimbra/amavisd/tmp/amavis-20080219T165049-16541
    Feb 19 16
    :51:02 mail amavis[11557]: (11557-07-6) (!!)ClamAV-clamd av-scanner FAILEDToo many retries to talk to 127.0.0.1:3310 (Can't connect to INET socket 127.0.0.1:3310: Connection refused) at (eval 54) line 269. 
    I tried going to the GUI and turn off AS/AV and restart services... I'm trying to buy some time TEMPORARILY... How do I turn off the mail proxy and disable AS/AV so their email is not being deferred any longer until I am able to go onsite tomorrow morning? I plan to do the upgrade then, but am hoping I can bandaid it somehow (I have another emergency going on.. the fun never stops... hahahaha)

    I don't understand how amavis is set up... Not in text files apparently.. I can't simply go into amavisd.conf for example and # out the lines to disable the proxy... Hmm Should be a way tho..
    Last edited by jallen; 02-19-2008 at 02:55 PM. Reason: afterthought

  4. #4
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    You said it yourself. Go into the gui and disable AS/AV services. You may (I don't remember here) have to stop & restart zimbra services after this to get it to "take" but I don't think so.

    Be aware with that version that when you change a setting on AS/AV you may lose any RBLs that you have configured using zmprov.

  5. #5
    Join Date
    Aug 2007
    Posts
    19
    Rep Power
    8

    Default

    I tried that.. I get an error saying "Both services must be enabled or installed to be able to disable it"... And obviously I'm having trouble with the services...

    I'll try one more time...

    *edit*
    Obviously I greatly paraphrased: Note: Settings only apply to servers that have the appropriate service(s) installed and enabled. Server settings override global settings.

    I think that might be reason why it is not "taking" is because the clamav service is failing to start and I get the INET socket 127.0.0.0.1:3310 error as a result.
    Last edited by jallen; 02-19-2008 at 03:41 PM. Reason: afterthought

  6. #6
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

  7. #7
    Join Date
    Aug 2007
    Posts
    19
    Rep Power
    8

    Talking

    Quote Originally Posted by mmorse View Post
    Sir,

    YOU'RE DA MAN!

    I only had to follow the increasing the watchdog timeout & touch clamd.pid suggestion..

    I'm back in business! Spam filtering is working just fine. Just not virus.. That's something I'll deal with in the next couple days. Yeah, I'll do a version upgrade

    Thanks so much for the bandaid!

Similar Threads

  1. Trying to understand Zimbra's anti-spam system
    By TaskMaster in forum Users
    Replies: 11
    Last Post: 01-25-2008, 08:59 AM
  2. [SOLVED] Upgraded to 5.0 OSS - Sendmail Problem
    By Chewie71 in forum Installation
    Replies: 11
    Last Post: 12-28-2007, 06:07 PM
  3. Spam Problem...
    By mvalenzuela.cl in forum Administrators
    Replies: 3
    Last Post: 09-14-2007, 11:41 AM
  4. LDAP & spam classification problem?
    By phoenix in forum Users
    Replies: 3
    Last Post: 09-29-2005, 11:37 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •