Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1337
  • Last Modified:

MailScanner: waiting for children to die

Hi,

We are using MailScanner + sendmail to clean incoming emails, the system is working fine but lately I found many errors like this in the log:
MailScanner: waiting for children to die: Process did not exit cleanly, returned 2 with signal 0

I tried to google this but couldn't find any help and I hope to find some help here.

Thanks,
Amir

0
Amir Levy
Asked:
Amir Levy
  • 7
  • 5
1 Solution
 
Jan SpringerCommented:
Have you recently upgraded the base OS or MailScanner?  Do you use spamassassin with clam?

Have you tried:  http://wiki.mailscanner.info/doku.php?id=documentation:test_troubleshoot:mailscanner&s=debug

and

MailScanner --lint

And can you provide more detail from the logs?
0
 
Amir LevyAuthor Commented:
Hi,

We did  upgrade to version 4.58.9, clam 0.88 and SA 3.1.7 some time ago.

we do not use SA with mailscanner (only with procmail per user), mailscanner is only checking against rbl spam lists.

here is the log from the debug test:
--------------------------------------------
Starting MailScanner...In Debugging mode, not forking...
LibClamAV Warning: ********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.  ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html ***
LibClamAV Warning: ********************************************************
LibClamAV Warning: ********************************************************
LibClamAV Warning: ***  This version of the ClamAV engine is outdated.  ***
LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html ***
LibClamAV Warning: ********************************************************
Ignore errors about failing to find EOCD signature
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
format error: can't find EOCD signature
 at /usr/sbin/MailScanner line 832
DisarmPhishingFound = 1 on message l6R4ZbnD010540
DisarmPhishingFound = 0 on message l6R4UNJm010033
DisarmPhishingFound = 0 on message l6R49E95008008
read-open /var/spool/MailScanner/incoming/10672/l39InsxC019371/1: No such file or directory at /usr/lib/perl5/vendor_perl/5.8.5/MIME/Body.pm line 435.
 Failed.

this is the MailScanner --lint log::
-----------------------------------------
Read 797 hostnames from the phishing whitelist
Checking version numbers...
Version number in MailScanner.conf (4.58.9) is correct.

Checking for SpamAssassin errors (if you use it)...
Using locktype = posix
Creating hardcoded struct_flock subroutine for linux (Linux-type)
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamavmodule

Thanks,
Amir

0
 
Jan SpringerCommented:
Some things to consider:

1) check your RBLs to be certain that all are still active
2) upgrade clam and use clamav or clamd
3) fix this ->  No such file or directory at /usr/lib/perl5/vendor_perl/5.8.5/MIME/Body.pm
4) in MailScanner.conf ->  "Max Children = "  should be set to 5 per actual CPU
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
Amir LevyAuthor Commented:
I upgrade MailScanner + SA and tried to upgrade clamav but it didn't worked with FC3... i couldn't  compile it and i didn't found RPM with current version. here is the new log with --lint:

====================================================
Read 797 hostnames from the phishing whitelist
Checking version numbers...
Version number in MailScanner.conf (4.61.7) is correct.

Checking for SpamAssassin errors (if you use it)...
SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp
SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp
Using locktype = posix
Creating hardcoded struct_flock subroutine for linux (Linux-type)
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamavmodule
========================================================

Thanks,
Amir
0
 
Jan SpringerCommented:
Check your RBLs to be certain that all are still active
    -> if one is not responding that is going to slow mail processing down

Did you fix this?
    ->  No such file or directory at /usr/lib/perl5/vendor_perl/5.8.5/MIME/Body.pm

In MailScanner.conf is this properly set ->  "Max Children = "  should be set to 5 per actual CPU

Are you using bayesian filters and, if so, what is 'Rebuild Bayes Every' set to?

Does the high CPU coincide with a restart of MailScanner?
0
 
Amir LevyAuthor Commented:
Check your RBLs to be certain that all are still active
    -> if one is not responding that is going to slow mail processing down

Done - all RBL's are alive

Did you fix this?
    ->  No such file or directory at /usr/lib/perl5/vendor_perl/5.8.5/MIME/Body.pm

Yes - no more errors in Debug mode

In MailScanner.conf is this properly set ->  "Max Children = "  should be set to 5 per actual CPU

It's set to 5

Are you using bayesian filters and, if so, what is 'Rebuild Bayes Every' set to?

Yes, it's set to "0" (SA is running with procmail not mailscanner)


0
 
Jan SpringerCommented:
Does the high CPU coincide with a restart of MailScanner?
0
 
Amir LevyAuthor Commented:
I just restarted MailScanner and watch the load average - it's jumped to 2.5-3.0 for short time and got back to normal state (0.8-1.5)
0
 
Jan SpringerCommented:
And I strongly suspect that's because the anti-virus software had to load all of the signatures.

Don't stop/start or restart MailScanner during peak mail transfer times.
0
 
Amir LevyAuthor Commented:
Hi,

We still got the "waiting for children to die: Process did not exit cleanly, returned 2 with signal 0" error all the time even when  load is very low. I finally found clamav9.2 rpm's for FC3 but it didn't stopped the errors.

Any idea?

Thanks,
Amir
0
 
Jan SpringerCommented:
I cannot seem to find anyone (even on the mailscanner mailing list) that has posted that problem and received an answer as to what would cause it.

I would start with a fresh upgrade of Mailscanner and Clamav.
Make sure that your MTA is not started independently but by Mailscanner.
Verify that all RBLs (you should only be using one or two) do not introduce latency with receiving results.

And try the MailScanner mailing list.  The author is very active as are many other very knowledgeable individuals.

http://www.mailscanner.info/support.html#mailing
0
 
Jan SpringerCommented:
amirlevy,

A recent posting on the MailScanner list from the writer of MailScanner in response to the concern that a quick restart after just restarting MS (slightly different error message):

"This isn't caused by the init.d script, it appears that in some
situations it can take a long time for the MailScanner child process to
exit. Killing the rogue child causes the script to continue normally."

Have you stopped MailScanner, killed all instances of MS and then performed a 'start' to see if the errors in the logs went away?
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 7
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now