Report: MailScanner: Message attempted to kill MailScanner

[macross]

Hi there.

After my install for the spamspanke for ubuntu-jeos-10.10-maverick-meerkat guide. I receive many of these emails and some users mails appear to be wrongly blocked.

Report: MailScanner: Message attempted to kill MailScanner

I googled and found some mention of winmail.dat i tried changing a few things but the message persists and users emails are being blocked.

Anyone have this issue?

Thanks!

[Rocky]

What's in your mail.log?

[macross]

Dec 20 10:11:01 belatrix MailScanner[18378]: Making attempt 6 at processing message D15FF440361.A2C11
Dec 20 10:11:01 belatrix MailScanner[18378]: New Batch: Scanning 1 messages, 586001 bytes
Dec 20 10:11:01 belatrix MailScanner[18453]: MailScanner E-Mail Virus Scanner version 4.81.4 starting...
Dec 20 10:11:02 belatrix MailScanner[18453]: Reading configuration file /opt/MailScanner/etc/MailScanner.conf
Dec 20 10:11:02 belatrix MailScanner[18453]: Reading configuration file /opt/MailScanner/etc/conf.d/README
Dec 20 10:11:02 belatrix MailScanner[18453]: Read 867 hostnames from the phishing whitelist
Dec 20 10:11:02 belatrix MailScanner[18453]: Read 4445 hostnames from the phishing blacklists
Dec 20 10:11:02 belatrix MailScanner[18453]: Config: calling custom init function BaruwaLowScore
Dec 20 10:11:02 belatrix MailScanner[18453]: Config: calling custom init function BaruwaBlacklist
Dec 20 10:11:02 belatrix MailScanner[18453]: Starting Baruwa blacklists
Dec 20 10:11:02 belatrix MailScanner[18453]: Read 0 blacklist items
Dec 20 10:11:02 belatrix MailScanner[18453]: Ip blocks blacklisted:
Dec 20 10:11:02 belatrix MailScanner[18453]: Config: calling custom init function BaruwaSQL
Dec 20 10:11:02 belatrix MailScanner[18453]: Starting Baruwa SQL logger
Dec 20 10:11:02 belatrix MailScanner[18453]: Config: calling custom init function BaruwaHighScore
Dec 20 10:11:02 belatrix MailScanner[18453]: Baruwa - Populating high spam score settings
Dec 20 10:11:02 belatrix MailScanner[18453]: Read 4 high spam score settings
Dec 20 10:11:02 belatrix MailScanner[18453]: Config: calling custom init function BaruwaWhitelist
Dec 20 10:11:02 belatrix MailScanner[18453]: Starting Baruwa whitelists
Dec 20 10:11:02 belatrix MailScanner[18453]: Read 5 whitelist items
Dec 20 10:11:02 belatrix MailScanner[18453]: Ip blocks whitelisted:
Dec 20 10:11:02 belatrix MailScanner[18453]: Using SpamAssassin results cache
Dec 20 10:11:02 belatrix MailScanner[18453]: Connected to SpamAssassin cache database
Dec 20 10:11:02 belatrix MailScanner[18453]: Enabling SpamAssassin auto-whitelist functionality...
Dec 20 10:11:04 belatrix MailScanner[17264]: Quarantined message D15FF440361.A2C11 as it caused MailScanner to crash several times
Dec 20 10:11:04 belatrix MailScanner[17264]: Saved entire message to /var/spool/MailScanner/quarantine/20101220/D15FF440361.A2C11
Dec 20 10:11:05 belatrix MailScanner[17264]: New Batch: Scanning 1 messages, 586001 bytes
Dec 20 10:11:05 belatrix MailScanner[17264]: Sender Warnings: Delivered 1 warnings to virus senders
Dec 20 10:11:05 belatrix postfix/pickup[18244]: 9D8FB440360: uid=103 from=<>
Dec 20 10:11:05 belatrix postfix/cleanup[18486]: 9D8FB440360: message-id=<20101220151105.9D8FB440360@belatrix.mycompany. on.ca>
Dec 20 10:11:05 belatrix postfix/qmgr[28224]: 9D8FB440360: from=<>, size=1215, nrcpt=1 (queue active)
Dec 20 10:11:05 belatrix postfix/pickup[18244]: AC3F1440361: uid=103 from=<postmaster>
Dec 20 10:11:05 belatrix postfix/cleanup[18486]: AC3F1440361: message-id=<20101220151105.AC3F1440361@belatrix.mycompany. on.ca>
Dec 20 10:11:05 belatrix MailScanner[17264]: Notices: Warned about 1 messages
Dec 20 10:11:05 belatrix MailScanner[17264]: Deleted 1 messages from processing-database
Dec 20 10:11:05 belatrix MailScanner[17264]: Logging message D15FF440361.A2C11 to Baruwa SQL
Dec 20 10:11:05 belatrix MailScanner[17674]: D15FF440361.A2C11: Logged to Baruwa SQL


This matches the mail.

Subject: re: ORION Proposal
MessageID: D15FF440361.A2C11
Quarantine: /var/spool/MailScanner/quarantine/20101220/D15FF440361.A2C11
Report: MailScanner: Message attempted to kill MailScanner

[Rocky]

What do you have in your clamav.log?

Do the mails have any documents attached?

Also, check to see if the hard drive is full.

[macross]

Actually my clamav log is empty.

[macross]

hmm which clam should be installed. I may have an extra version installed. I would like to clean this up and ensure clam os correctly linked. Perhaps I should redo that section.

root@belatrix:~# dpkg --get-selections | grep -i clam
clamav install
clamav-base install
clamav-daemon install
clamav-freshclam install
libclamav6 install