#author("2020-01-08T11:36:08+09:00","default:kuji","kuji")
#author("2020-01-10T09:23:45+09:00","default:kuji","kuji")
#contents

*TCP port 10024 on 127.0.0.1 [Address already in use] [#k702993f]

2020年正月休みにあれこれ ports を upgrade した、ら、amavisd-new が起動しなくなったった。

 (!)Net::Server: 2020/01/07-15:57:40 Can't connect to TCP port 10024 on 127.0.0.1 [Address already in use]\n  at line 64
 in file /usr/local/lib/perl5/site_perl/Net/Server/Proto/TCP.pm

1基のamavisd-newだけではなく、複数のサーバ機で発生したので、ちょっと焦る(^^ゞ


Clamav と併用して使用する場合、以前は amavisd-new のユーザ・グループを clamav:clamav にして、clamav との連携を図るコトになっていたのだが、どうやらそれが非推奨となった模様。

結果として amavisd-new のユーザ・グループは、ports のオリジナル設定の vscan:vscan として、clamav の側はroot:wheelとする事でこのエラーを回避出来ました。

/usr/ports/security/amavisd-new/Makefile

 AMAVISUSER?=	vscan
 AMAVISGROUP?=	vscan

# rm -r /var/amavis

# pkg delete amavisd-new-2.12.0,1


# portinstall security/amavisd-new


/usr/local/etc/amavisd.conf

 $daemon_user  = 'vscan';     # (no default;  customary: vscan or amavis), -u
 $daemon_group = 'vscan';     # (no default;  customary: vscan or amavis), -g


/usr/local/etc/clamd.conf の206行目をコメントアウト

 #User clamav

以上

 CLAMAVUSER?=   clamav
 CLAMAVGROUP?=  clamav
  
 CLAMAV_CLAMD_SOCKET?=   ${RUNDIR}/clamd.sock
 CLAMAV_CLAMD_PIDFILE?=  ${RUNDIR}/clamd.pid
 CLAMAV_MILTER_SOCKET?=  ${RUNDIR}/clmilter.sock
 
 .if ${CLAMAVUSER} == "clamav"
 USERS=  clamav
 .endif
 
 .if ${CLAMAVGROUP} == "clamav"
 #GROUPS= clamav mail 
 GROUPS= clamav mail vscan
 .endif



*(!)_DIE: Suicide in child_init_hook: [#p5fe332f]

 # portupgrade -fr --batch amavisd-new-2.11.1_1,1 && reboot

したところ、

 (!)_DIE: Suicide in child_init_hook: BDB can't connect db env. at /var/amavis/db: BDB0087 DB_RUNRECOVERY: 
 Fatal error, run database recovery, No such file or directory. at (eval 93) line 338.

というエラーログが延々でつづける・・・。

/usr/local/etc/amavisd.conf 338行めを

 #  ['doc',  \&do_ole,   'ripole'],

 /usr/local/etc/rc.d/amavisd restart

して、復活。   したかと思いきや・・・

 (!)_DIE: register_proc: BDB N db_cursor: BDB0060 PANIC: fatal region error detected; run recovery, . at (eval 93) line 220.
 (!!)TROUBLE in child_init_hook: BDB can't connect db env. at /var/amavis/db: BDB0087 DB_RUNRECOVERY:
 Fatal error, run database recovery, No such file or directory. at (eval 93) line 338.

となった。

どうやら、古い2015年製w /usr/local/etc/amavisd.conf の設定ファイルの不整合のようなので、amavisd.conf.sample を amavisd.conf へリネームして以下を変更。

 13c13
 < # @bypass_spam_checks_maps  = (1);  # controls running of anti-spam code
 ---
 > @bypass_spam_checks_maps  = (1);  # controls running of anti-spam code
 20c20
 < $mydomain = 'example.com';   # a convenient default for other settings
 ---
 > $mydomain = 'smb.net';   # a convenient default for other settings
 119c119
 < $virus_admin               = "virusalert\@$mydomain";  # notifications recip.
 ---
 > # $virus_admin               = "virusalert\@$mydomain";  # notifications recip.
 382,391c382,391
 < # ### http://www.clamav.net/
 < # ['ClamAV-clamd',
 < #   \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.sock"],
 < #   qr/\bOK$/m, qr/\bFOUND$/m,
 < #   qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],
 < # # NOTE: run clamd under the same user as amavisd - or run it under its own
 < # #   uid such as clamav, add user clamav to the amavis group, and then add
 < # #   AllowSupplementaryGroups to clamd.conf;
 < # # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
 < # #   this entry; when running chrooted one may prefer a socket under $MYHOME.
 ---
 >  ### http://www.clamav.net/
 >  ['ClamAV-clamd',
 >    \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.sock"],
 >    qr/\bOK$/m, qr/\bFOUND$/m,
 >    qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],
 > # NOTE: run clamd under the same user as amavisd - or run it under its own
 > #   uid such as clamav, add user clamav to the amavis group, and then add
 > #   AllowSupplementaryGroups to clamd.conf;
 > # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
 > #   this entry; when running chrooted one may prefer a socket under $MYHOME.




* (!!)TROUBLE in process_request: Can't create directory /var/amavis/tmp [#g298e22d]
 Sep  1 00:13:11 guard amavis[23846]: (23846-01) (!!)TROUBLE in process_request: Can't create directory /var/amavis/tmp/amavis-20100901T001311-23846: Too many links at /usr/local/sbin/amavisd line 5291, <GEN14> line 2.
 Sep  1 00:13:11 guard amavis[23846]: (23846-01) (!)Requesting process rundown after fatal error
 Sep  1 00:13:11 guard amavis[23847]: (23847-01) (!!)TROUBLE in process_request: Can't create directory /var/amavis/tmp/amavis-20100901T001311-23847: Too many links at /usr/local/sbin/amavisd line 5291, <GEN14> line 2.
 Sep  1 00:13:11 guard amavis[23847]: (23847-01) (!)Requesting process rundown after fatal error
 Sep  1 00:13:11 guard amavis[23849]: (23849-01) (!!)TROUBLE in process_request: Can't create directory /var/amavis/tmp/amavis-20100901T001311-23849: Too many links at /usr/local/sbin/amavisd line 5291, <GEN14> line 2.
 Sep  1 00:13:11 guard amavis[23849]: (23849-01) (!)Requesting process rundown after fatal error



   111  5:50    mv tmp tmp-toomany
   112  5:50    ll
   113  5:50    mv tmp tmp tmp-toomany
   114  5:51    mv -rp tmp tmp tmp-toomany
   115  5:51    mv tmp tmp tmp-toomany
   116  5:51    mv tmp tmp-toomany
   117  5:54    mv -f tmp tmp-toomany
   118  5:54    pwd
   119  5:56    ll
   120  5:56    cd tmp
   121  5:57    ll
   122  5:57    rm -r amavis-201004*
   123  5:58    rm -r amavis-201005*
   124  5:58    rm -r amavis-201006*
   125  5:59    rm -r amavis-201007*
   126  6:02    echo /var/virusmails/amavis-201007* | xargs rm
   127  6:02    pwd
   128  6:02    echo /usr/var/amavis/tmp/amavis-201007* | xargs rm
   129  6:03    echo /usr/var/amavis/tmp/amavis-201007* | xargs rm -r
   130  6:04    history

*amavis[59520]: (!!)TROUBLE in child_init_hook: BDB [#b1115f62]

http://city-rabbit.blogspot.com/2009/09/antivirus-scanner.html

2010年3月25日午前、メールサーバの挙動がおかしい。のに気づく。



 Mar 25 04:55:51 hotshot postfix/anvil[5763]: statistics: max connection rate 2/60s for (smtp:116.74.160.186) at Mar 25 04:54:43
 Mar 25 04:55:51 hotshot postfix/anvil[5763]: statistics: max connection count 2 for (smtp:173.49.95.140) at Mar 25 04:52:34
 Mar 25 04:55:51 hotshot postfix/anvil[5763]: statistics: max cache size 3 at   Mar 25 04:52:47
 Mar 25 04:55:54 hotshot postfix/smtpd[5761]: connect from unknown[70.99.243.17]
 Mar 25 04:56:24 hotshot postfix/smtpd[5761]: warning: 17.243.99.70.list.dsbl.org: RBL lookup error: Host or domain name not found. Name service error for name=17.243.99.70.list.dsbl.org type=A: Host not found, try again
 Mar 25 04:56:24 hotshot postfix/smtpd[5761]: 681B456441: client=unknown[70.99.243.17]
 Mar 25 04:56:28 hotshot postfix/cleanup[5817]: 681B456441: message-id=<20100324135552.dmcfphohtdbd@mx1.hotpinktrouttree.net>
 Mar 25 04:56:28 hotshot postfix/qmgr[1323]: 681B456441: from=<Ashtonaic@hotpinktrouttree.net>, size=10163, nrcpt=1 (queue active)
 Mar 25 04:56:31 hotshot postfix/smtpd[5761]: disconnect from unknown[70.99.243.17]
 Mar 25 04:56:46 hotshot amavis[5853]: (!!)TROUBLE in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.
 Mar 25 04:56:46 hotshot amavis[5853]: (!)_DIE: Suicide in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.
 Mar 25 04:56:46 hotshot postfix/smtp[5850]: 681B456441: to=<swalter@smb.net>, relay=127.0.0.1[127.0.0.1]:10024, delay=46, delays=29/0.01/0.01/17, dsn=4.4.2, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending end of data -- message may be sent more than once)
 Mar 25 04:56:46 hotshot amavis[5855]: (!!)TROUBLE in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.
の様な始まりで、延々

 Mar 25 11:18:01 hotshot amavis[46448]: (!!)TROUBLE in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.
 Mar 25 11:18:01 hotshot amavis[46448]: (!)_DIE: Suicide in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.
 Mar 25 11:18:01 hotshot amavis[46447]: (!!)TROUBLE in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.
 Mar 25 11:18:01 hotshot amavis[46447]: (!)_DIE: Suicide in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.

頻発する・・・・

 Mar 28 21:20:35 hotshot postfix/smtpd[34519]: 8D5995645C: client=bl16-146-28.dsl.telepac.pt[188.81.146.28]
 Mar 28 21:20:36 hotshot postfix/cleanup[34532]: 8D5995645C: message-id=<20100328122035.8D5995645C@hotshot.smb.net>
 Mar 28 21:20:36 hotshot postfix/qmgr[1325]: 8D5995645C: from=<iqiabyga8190@telepac.pt>, size=7454, nrcpt=1 (queue active)
 Mar 28 21:20:37 hotshot postfix/smtpd[34519]: disconnect from bl16-146-28.dsl.telepac.pt[188.81.146.28]
 Mar 28 21:20:50 hotshot amavis[34536]: (!!)TROUBLE in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.
 Mar 28 21:20:50 hotshot amavis[34536]: (!)_DIE: Suicide in child_init_hook: BDB no dbS: Lock table is out of available locker entries, . at (eval 97) line 27.

ので、取り敢えず、
 hotshot# portupgrade p5-BerkeleyDB-0.36
 --->  Upgrading 'p5-BerkeleyDB-0.36' to 'p5-BerkeleyDB-0.41' (databases/p5-BerkeleyDB)
 --->  Building '/usr/ports/databases/p5-BerkeleyDB'
 ===>  Cleaning for p5-BerkeleyDB-0.41
 => BerkeleyDB-0.41.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
 => Attempting to fetch from ftp://ftp.funet.fi/pub/languages/perl/CPAN/modules/by-module/BerkeleyDB/.
 BerkeleyDB-0.41.tar.gz                        100% of  180 kB   98 kBps
 ===>  Extracting for p5-BerkeleyDB-0.41
 
 hotshot# amavisd reload
 Daemon [1101] terminated by SIGTERM, waiting for dust to settle...
 becoming a new daemon...
 hotshot#
してみる。

それでも、トラブル。ので、
http://www.mail-archive.com/amavis-user@lists.sourceforge.net/msg14610.html

あたりをみて、db4 をインストールして、DB_CONFIG のサンプルを手に入れる。
   164  13:48   locate db4
   165  13:49   portinstall databases/db4
   166  13:52   rehash
 hotshot# portinstall databases/db48
/var/amavis/db/DB_CONFIG
 # $OpenLDAP: pkg/ldap/servers/slapd/DB_CONFIG,v 1.3.2.4 2007/12/18 11:53:27 ghenry Exp $
 # Example DB_CONFIG file for use with slapd(8) BDB/HDB databases.
 #
 # See the Oracle Berkeley DB documentation
 #   <http://www.oracle.com/technology/documentation/berkeley-db/db/ref/env/db_config.html>
 # for detail description of DB_CONFIG syntax and semantics.
 #
 # Hints can also be found in the OpenLDAP Software FAQ
 #	<http://www.openldap.org/faq/index.cgi?file=2>
 # in particular:
 #   <http://www.openldap.org/faq/index.cgi?file=1075>
 
 # Note: most DB_CONFIG settings will take effect only upon rebuilding
 # the DB environment.
 
 # one 0.25 GB cache
 set_cachesize 0 268435456 1
 
 # Data Directory
 #set_data_dir db
 
 #http://wiki.zimbra.com/index.php?title=OpenLDAP_Performance_Tuning_6.0#Berkeley_DB_DB_CONFIG_tuning
 set_lk_max_locks 3000
 set_lk_max_objects 1500
 set_lk_max_lockers 1500
 
 
 # Transaction Log settings
 set_lg_regionmax 262144
 set_lg_bsize 2097152
 #set_lg_dir logs
 
 # Note: special DB_CONFIG flags are no longer needed for "quick"
 # slapadd(8) or slapindex(8) access (see their -q option). 




 Apr  6 15:28:20 hotshot amavis[1114]: Module Razor2::Client::Version 2.84
 Apr  6 15:28:20 hotshot amavis[1114]: Module Socket6             0.23
 Apr  6 15:28:20 hotshot amavis[1114]: Module Time::HiRes         1.9719
 Apr  6 15:28:20 hotshot amavis[1114]: Module URI                 1.37
 Apr  6 15:28:20 hotshot amavis[1114]: Module Unix::Syslog        1.1
 Apr  6 15:28:20 hotshot amavis[1114]: Amavis::DB code      loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Amavis::Cache code   loaded
 Apr  6 15:28:20 hotshot amavis[1114]: SQL base code        NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: SQL::Log code        NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: SQL::Quarantine      NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Lookup::SQL code     NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Lookup::LDAP code    NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: AM.PDP-in proto code loaded
 Apr  6 15:28:20 hotshot amavis[1114]: SMTP-in proto code   loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Courier proto code   NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: SMTP-out proto code  loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Pipe-out proto code  NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: BSMTP-out proto code NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Local-out proto code loaded
 Apr  6 15:28:20 hotshot amavis[1114]: OS_Fingerprint code  NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: ANTI-VIRUS code      loaded
 Apr  6 15:28:20 hotshot amavis[1114]: ANTI-SPAM code       loaded
 Apr  6 15:28:20 hotshot amavis[1114]: ANTI-SPAM-EXT code   NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: ANTI-SPAM-C code     NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: ANTI-SPAM-SA code    loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Unpackers code       loaded
 Apr  6 15:28:20 hotshot amavis[1114]: DKIM code            loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Tools code           NOT loaded
 Apr  6 15:28:20 hotshot amavis[1114]: Found $file             at /usr/local/bin/file
 Apr  6 15:28:20 hotshot amavis[1114]: No $altermime,         not using it
 Apr  6 15:28:20 hotshot amavis[1114]: Internal decoder for .mail
 Apr  6 15:28:20 hotshot amavis[1114]: Internal decoder for .asc
 Apr  6 15:28:20 hotshot amavis[1114]: Internal decoder for .uue
 Apr  6 15:28:20 hotshot amavis[1114]: Internal decoder for .hqx
 Apr  6 15:28:20 hotshot amavis[1114]: Internal decoder for .ync
 Apr  6 15:28:20 hotshot amavis[1114]: Found decoder for    .F    at /usr/local/bin/unfreeze
 Apr  6 15:28:20 hotshot amavis[1114]: Found decoder for    .Z    at /usr/bin/uncompress
 Apr  6 15:28:20 hotshot amavis[1114]: Found decoder for    .gz   at /usr/bin/gzip -d

 Apr  6 17:00:44 hotshot amavis[1113]: Amavis::Cache code   loaded
 Apr  6 17:00:44 hotshot amavis[1113]: SQL base code        NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: SQL::Log code        NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: SQL::Quarantine      NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Lookup::SQL code     NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Lookup::LDAP code    NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: AM.PDP-in proto code loaded
 Apr  6 17:00:44 hotshot amavis[1113]: SMTP-in proto code   loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Courier proto code   NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: SMTP-out proto code  loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Pipe-out proto code  NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: BSMTP-out proto code NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Local-out proto code loaded
 Apr  6 17:00:44 hotshot amavis[1113]: OS_Fingerprint code  NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: ANTI-VIRUS code      loaded
 Apr  6 17:00:44 hotshot amavis[1113]: ANTI-SPAM code       loaded
 Apr  6 17:00:44 hotshot amavis[1113]: ANTI-SPAM-EXT code   NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: ANTI-SPAM-C code     NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: ANTI-SPAM-SA code    loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Unpackers code       loaded
 Apr  6 17:00:44 hotshot amavis[1113]: DKIM code            loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Tools code           NOT loaded
 Apr  6 17:00:44 hotshot amavis[1113]: Found $file            at /usr/local/bin/file
 Apr  6 17:00:44 hotshot amavis[1113]: No $altermime,         not using it
 Apr  6 17:00:44 hotshot amavis[1113]: Internal decoder for .mail

トップ   編集 差分 履歴 添付 複製 名前変更 リロード   新規 一覧 検索 最終更新   ヘルプ   最終更新のRSS