rspamd die after ispconfig update

Discussion in 'ISPConfig 3 Priority Support' started by elmacus, Sep 11, 2019 at 11:05 AM.

Tags:
  1. elmacus

    elmacus Member HowtoForge Supporter

    ls -la /var/log/rspamd/
    totalt 108
    drwxr-x--- 2 _rspamd _rspamd 4096 sep 11 09:12 .
    drwxr-xr-x 17 root root 12288 sep 11 09:26 ..
    -rw-r--r-- 1 _rspamd _rspamd 90700 sep 11 09:18 rspamd.log
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The log permissions are fine. change the config file permission to this:

    [email protected]:/home/administrator# ls -la /etc/rspamd/local.d/worker-controller.inc
    -rw-r--r-- 1 root root 243 Sep 10 18:03 /etc/rspamd/local.d/worker-controller.inc

    and check your umask as it might be wrong.
     
  3. elmacus

    elmacus Member HowtoForge Supporter

    rspamadm configtest
    CPU doesn't have SSSE3 instructions set required for hyperscan, disable it
    cannot parse ip:
    symbol 'RAMBLER_EMAILBL' has its score defined but there is no corresponding rule registered
    symbol 'R_DUMMY' has its score defined but there is no corresponding rule registered
    symbol 'RAMBLER_URIBL' has its score defined but there is no corresponding rule registered
    syntax OK
     
  4. elmacus

    elmacus Member HowtoForge Supporter

    ls -la /etc/rspamd/local.d/
    totalt 80
    drwxr-xr-x 3 root root 4096 sep 11 10:10 .
    drwxr-xr-x 6 root root 4096 sep 11 09:12 ..
    -rw-r--r-- 1 root root 1411 sep 11 09:17 antivirus.conf
    -rw-r--r-- 1 root root 262 sep 11 09:17 antivirus_group.conf
    -rw-r--r-- 1 root root 64 sep 11 09:17 classifier-bayes.conf
    -rw-r--r-- 1 root root 581 sep 11 09:17 dkim_domains.map
    -rw-r--r-- 1 root root 221 sep 11 09:17 dkim_selectors.map
    -rw-r--r-- 1 root root 129 sep 11 09:17 dkim_signing.conf
    -rw-r--r-- 1 root root 27 sep 11 09:17 greylist.conf
    -rw-r--r-- 1 root root 205 sep 11 09:17 groups.conf
    -rw-r--r-- 1 root root 56 sep 11 09:13 history_redis.conf
    -rw-r--r-- 1 root root 116 sep 11 09:17 milter_headers.conf
    -rw-r--r-- 1 root root 210 sep 11 09:17 mx_check.conf
    -rw-r--r-- 1 root root 608 sep 11 09:17 neural.conf
    -rw-r--r-- 1 root root 452 sep 11 09:17 neural_group.conf
    -rw-r--r-- 1 root root 78 sep 11 09:17 options.inc
    -rw-r--r-- 1 root root 22 sep 11 09:17 redis.conf
    drwxr-xr-x 2 root root 4096 sep 11 10:25 users
    -rw-r--r-- 1 root root 847 sep 11 09:17 users.conf
    -rw------- 1 root root 178 sep 11 09:17 worker-controller.inc
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, then try to start rspamd again and when you have set an IP in /etc/rspamd/local.d/worker-controller.inc, then check that its correct.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Change permissions as described in #22
     
  7. elmacus

    elmacus Member HowtoForge Supporter

    I did according to guide, what do you mean with "unmask" ?
     
  8. elmacus

    elmacus Member HowtoForge Supporter

    Success:
    2019-09-11 11:49:45 #27986(controller) <c9hxbz>; monitored; rspamd_monitored_dns_cb: DNS reply returned 'network error' for zen.spamhaus.org while 'no records with this name' was expected when querying for '1.0.0.127.zen.spamhaus.org'(likely DNS spoofing or BL internal issues)
    ^C

    The ispconfig update messed with read access here:
    -rw------- 1 root root 178 sep 11 09:17 worker-controller.inc
    Should be:
    -rw-r--r-- 1 root root 178 sep 11 09:17 worker-controller.inc
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    That's not related to the guide or to installing rspamd, its about your base server config. Umask is the default chmod that gets set when a file is created and the default umask on Debian is 0022 but you seem to have manually changed the umask on some of your servers so that new files get now -rw------- instead of -rw-r--r--
     
  10. elmacus

    elmacus Member HowtoForge Supporter

    So for others that find this, do this:
    chmod 644 /etc/rspamd/local.d/worker-controller.inc
     
  11. elmacus

    elmacus Member HowtoForge Supporter

    I did not change this manually, this is servers that was installed some debian ago according to the howtoforge.
    Probably some other upgrade or software must have changed this then.
    # umask
    0022
    Other server that worked :
    # umask
    0022
     
  12. till

    till Super Moderator Staff Member ISPConfig Developer

    Please have a look at the php.ini file of the cli php, maybe the different umask is defined there.
     
  13. elmacus

    elmacus Member HowtoForge Supporter

    Cant find anything umask by searching in /etc/php/7.0/cgi/php.ini
    Nor in cli
     
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, then I have no Idea at the moment where the different umask ist set on your slave servers.
     
  15. elmacus

    elmacus Member HowtoForge Supporter

    Ok, i will do rest of servers and report if i find anything useful.
    The options.inc does set 127.0.0.1 as nameserver ?
    That is not correct in an multiserver setup ?
    Should be my internal DNS-server for public lockups ?
    Edit: or i maybe install a caching DNS locally anyway, like unbound or other.
     
    Last edited: Sep 11, 2019 at 12:33 PM
  16. till

    till Super Moderator Staff Member ISPConfig Developer

    elmacus and ahrasis like this.
  17. till

    till Super Moderator Staff Member ISPConfig Developer

    Better install unbound as local DNS resolver if your server has no BIND installed.
     
  18. elmacus

    elmacus Member HowtoForge Supporter

    On another Debian 10, ispconfig did not find rspamd when reconfiguring services.
    It was already updated to 3.1.15 when i started.
    What to look for here ?

    Reconfigure Services? (yes,no,selected) [yes]:

    Configuring Postfix
    Configuring Dovecot
    Configuring Spamassassin
    Configuring Amavisd
    Configuring Getmail
    Configuring Pureftpd
    Configuring Apache
    Configuring vlogger
    Configuring Apps vhost
    Configuring Jailkit
    Configuring Ubuntu Firewall
    Configuring Database
    Updating ISPConfig
     
  19. elmacus

    elmacus Member HowtoForge Supporter

    sorry but i made a misstake, the file ISPConfig-3-stable.tar.gz was downloaded before, so installed an old version, sigh.
    Cant talk in phone and work at the same time ;-)
     

Share This Page