• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1117
  • Last Modified:

MailScanner check loop

Hello

I am having problems with MailScanner and ClamAV. When I send a message through that breaks the filename or filetype rules i get this continuos loop and i have to delete the email out of the queue. See below:

May 16 10:24:49 ASE05 MailScanner[27605]: New Batch: Scanning 1 messages, 18046 bytes
May 16 10:24:49 ASE05 MailScanner[27605]: Spam Checks: Starting
May 16 10:24:50 ASE05 MailScanner[27605]: Virus and Content Scanning: Starting
May 16 10:24:50 ASE05 postfix/smtpd[27645]: disconnect from unknown[10.0.1.21]
May 16 10:24:53 ASE05 MailScanner[27605]: Filename Checks:  (57FA86FC4B.351FB msg-27605-1.txt)
May 16 10:24:53 ASE05 MailScanner[27605]: Filename Checks: Blocked Filename Detected (57FA86FC4B.351FB test.ppt)
May 16 10:24:53 ASE05 MailScanner[27605]: Filename Checks:  (57FA86FC4B.351FB 0)
May 16 10:24:53 ASE05 MailScanner[27605]: Other Checks: Found 3 problems
May 16 10:24:53 ASE05 MailScanner[27605]: Saved entire message to /var/spool/MailScanner/quarantine/20060516/57FA86FC4B.351FB
May 16 10:24:53 ASE05 MailScanner[27605]: Saved infected "msg-27605-1.txt" to /var/spool/MailScanner/quarantine/20060516/57FA86FC4B.351FB
May 16 10:24:53 ASE05 MailScanner[27605]: Saved infected "test.ppt" to /var/spool/MailScanner/quarantine/20060516/57FA86FC4B.351FB
May 16 10:24:53 ASE05 MailScanner[27605]: Requeue: 57FA86FC4B.351FB to 474FB6FC4C
May 16 10:24:53 ASE05 MailScanner[27605]: Cleaned: Delivered 1 cleaned messages
May 16 10:24:53 ASE05 postfix/qmgr[27485]: 474FB6FC4C: from=<sldld@exemail.com.au>, size=2366, nrcpt=1 (queue active)
May 16 10:24:53 ASE05 postfix/pickup[27484]: C0C206FC4D: uid=105 from=<postmaster> orig_id=BF7A16FC4B
May 16 10:24:53 ASE05 postfix/cleanup[27647]: C0C206FC4D: hold: header Received: by mail.server.com (Postfix, from userid 105)??id C0C206FC4D; Tue, 16 May 2006 10:24:53 +1000 (EST) from local; from=<postmaster>
May 16 10:24:53 ASE05 postfix/cleanup[27647]: C0C206FC4D: message-id=<20060516002453.C0C206FC4D@mail.server.com>
May 16 10:24:53 ASE05 MailScanner[27605]: Notices: Warned about 1 messages
May 16 10:24:53 ASE05 MailScanner[27605]: Batch (1 messages) processed in 4.07 seconds
May 16 10:24:53 ASE05 MailScanner[27605]: New Batch: Scanning 1 messages, 1705 bytes
May 16 10:24:53 ASE05 MailScanner[27605]: Spam Checks: Starting
May 16 10:24:53 ASE05 postfix/smtp[27657]: 474FB6FC4C: to=<dcarrion@test.austse03.austskyreach.com.au>, relay=10.0.1.11[10.0.1.11], delay=5, status=sent (250 2.6.0  <20060516002448.57FA86FC4B@mail.server.com> Queued mail for delivery)
May 16 10:24:53 ASE05 postfix/qmgr[27485]: 474FB6FC4C: removed
May 16 10:24:54 ASE05 MailScanner[27605]: Virus and Content Scanning: Starting
May 16 10:24:57 ASE05 MailScanner[27605]: Filename Checks:  (C0C206FC4D.ED20B msg-27605-4.txt)
May 16 10:24:57 ASE05 MailScanner[27605]: Filename Checks:  (C0C206FC4D.ED20B 0)
May 16 10:24:57 ASE05 MailScanner[27605]: Other Checks: Found 2 problems
May 16 10:24:57 ASE05 MailScanner[27605]: Saved entire message to /var/spool/MailScanner/quarantine/20060516/C0C206FC4D.ED20B
May 16 10:24:57 ASE05 MailScanner[27605]: Saved infected "msg-27605-4.txt" to /var/spool/MailScanner/quarantine/20060516/C0C206FC4D.ED20B
May 16 10:24:57 ASE05 MailScanner[27605]: Requeue: C0C206FC4D.ED20B to C179D6FC4B
May 16 10:24:57 ASE05 MailScanner[27605]: Cleaned: Delivered 1 cleaned messages
May 16 10:24:57 ASE05 postfix/qmgr[27485]: C179D6FC4B: from=<postmaster>, size=1498, nrcpt=1 (queue active)
May 16 10:24:57 ASE05 postfix/local[27668]: C179D6FC4B: to=<root@mail.server.com>, orig_to=<postmaster>, relay=local, delay=4, status=sent (delivered to mailbox)
May 16 10:24:57 ASE05 postfix/qmgr[27485]: C179D6FC4B: removed
May 16 10:24:57 ASE05 postfix/pickup[27484]: 8F59A6FC4C: uid=105 from=<postmaster> orig_id=8EA526FC4B
May 16 10:24:57 ASE05 postfix/cleanup[27647]: 8F59A6FC4C: hold: header Received: by mail.server.com (Postfix, from userid 105)??id 8F59A6FC4C; Tue, 16 May 2006 10:24:57 +1000 (EST) from local; from=<postmaster>
May 16 10:24:57 ASE05 postfix/cleanup[27647]: 8F59A6FC4C: message-id=<20060516002457.8F59A6FC4C@mail.server.com>
May 16 10:24:57 ASE05 MailScanner[27605]: Notices: Warned about 1 messages
May 16 10:24:57 ASE05 MailScanner[27605]: Batch (1 messages) processed in 3.79 seconds
May 16 10:24:57 ASE05 MailScanner[27605]: New Batch: Scanning 1 messages, 1280 bytes
May 16 10:24:57 ASE05 MailScanner[27605]: Spam Checks: Starting
May 16 10:24:57 ASE05 MailScanner[27605]: Virus and Content Scanning: Starting
0
dcarrion
Asked:
dcarrion
  • 3
1 Solution
 
dcarrionAuthor Commented:
i think it might have something to do with this happening:

May 16 10:47:02 ASE05 postfix/local[29083]: 65DB06FC4B: to=<root@mail.server.com>, orig_to=<postmaster>, relay=local, delay=1, status=sent (delivered to mailbox)

?
0
 
dcarrionAuthor Commented:
Oh yes and it's happening for every email...even if there is no attachment.
0
 
arvindCommented:
0
 
dcarrionAuthor Commented:
I fixed it by settings rules for 127.0.0.1 to not quarantine again.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now