Topic: qpsmtpd rejecting mail -- seems related to clamd

[shawnbishop]

Good Day

I am having a problem with a brand new install of SME Server 7.2 in that it is not delivering mail. My qpsmtpd and clamd versions are listed

clamd = clamd-0.91.2-1.el4.rf
qpsmtpd = qpsmtpd-0.40-1.6.el4.sme

@4000000047086a6d3380324c 27869 Accepted connection 1/40 from 192.168.1.201 / pc-00201.penguinsolutions.net
@4000000047086a6d3385b474 27869 Connection from pc-00201.penguinsolutions.net [192.168.1.201]
@4000000047086a6d3466e0fc 27869 220 server.penguinsolutions.net ESMTP
@4000000047086a6d3470185c 27869 dispatching EHLO penguin2
@4000000047086a6d349115ac 27869 250-penguinsolutions.net Hi pc-00201.penguinsolutions.net [192.168.1.201]
@4000000047086a6d3493e46c 27869 250-PIPELINING
@4000000047086a6d3496650c 27869 250-8BITMIME
@4000000047086a6d3498ed7c 27869 250 SIZE 15000000
@4000000047086a6d34a2153c 27869 dispatching MAIL FROM: <shawn@penguinsolutions.net>
@4000000047086a6d34a7a704 27869 full from_parameter: FROM: <shawn@penguinsolutions.net>
@4000000047086a6d34ad38cc 27869 from email address : [<shawn@penguinsolutions.net>]
@4000000047086a6d34c32de4 27869 getting mail from <shawn@penguinsolutions.net>
@4000000047086a6d34c63b24 27869 250 <shawn@penguinsolutions.net>, sender OK - how exciting to get mail from you!
@4000000047086a6d34ce2294 27869 dispatching RCPT TO: <shawn_r_bishop@yahoo.com>
@4000000047086a6d34d3f2dc 27869 to email address : [<shawn_r_bishop@yahoo.com>]
@4000000047086a6d350013bc 27869 250 <shawn_r_bishop@yahoo.com>, recipient ok
@4000000047086a6d35092bdc 27869 dispatching DATA
@4000000047086a6d350e254c 27869 354 go ahead
@4000000047086a6d35e518a4 27869 spooling message to disk
@4000000047086a6d39f6014c 27869 virus::clamav plugin: clamscan results: /var/spool/qpsmtpd/1191733859:27869:0: lstat() failed. ERROR
@4000000047086a6d39f93d6c 27869 virus::clamav plugin: ClamAV error: /usr/bin/clamdscan --stdout  --config-file=/etc/clamd.conf --disable-summary /var/spool/qpsmtpd/1191733859:27869:0 2>&1: 2
@4000000047086a6d39f94d0c
@4000000047086a6d3a0927a4 27869 logging::logterse plugin: ` 192.168.1.201       pc-00201.penguinsolutions.net   penguin2    <shawn@penguinsolutions.net>     <shawn_r_bishop@yahoo.com>      virus::clamav   902             msg denied before queued
@4000000047086a6d3a110f14 27869 452 Message denied temporarily
@4000000047086a701d3e1b5c 27869 dispatching QUIT
@4000000047086a701d3e2afc 27869 221 penguinsolutions.net closing connection. Have a wonderful day.
@4000000047086a701d3e36b4 27869 click, disconnecting
@4000000047086a703220ae04 3853 cleaning up after 27869


It shows my outgoing mail is denied before it gets sent, I have looked for a resolution at the "bugs" section but I cant find any update regardign the message.

I disable the clamd scanning and virus  and I get the following log entries in the qpsmtpd - current log

@4000000047086c3516b2c0bc 29350 dispatching DATA
@4000000047086c3516b6d79c 29350 354 go ahead
@4000000047086c3516e1c7cc 29350 spooling message to disk
@4000000047086c351acacd84 29350 virus::clamav plugin: clamscan results: /var/spool/qpsmtpd/1191734315:29350:9: lstat() failed. ERROR
@4000000047086c351ace09a4 29350 virus::clamav plugin: ClamAV error: /usr/bin/clamdscan --stdout  --config-file=/etc/clamd.conf --disable-summary /var/spool/qpsmtpd/1191734315:29350:9 2>&1: 2
@4000000047086c351ace155c
@4000000047086c351adc55cc 29350 logging::logterse plugin: ` 127.0.0.200 Unknown localhost       <bobbi@ohiohills.com>   <sbishoppenguin@penguinsolutions.net>        virus::clamav   902             msg denied before queued
@4000000047086c351ae3bc54 29350 452 Message denied temporarily
@4000000047086c351af29904 29350 dispatching RSET
@4000000047086c351af757dc 29350 250 OK
@4000000047086c3614836184 29350 dispatching MAIL FROM:<arcroofing@optusnet.com.au> BODY=7BIT SIZE=9105
@4000000047086c361483750c 29350 full from_parameter: FROM:<arcroofing@optusnet.com.au> BODY=7BIT SIZE=9105
@4000000047086c36148380c4 29350 from email address : [<arcroofing@optusnet.com.au>]
@4000000047086c36157fb72c 29350 getting mail from <arcroofing@optusnet.com.au>
@4000000047086c361582c46c 29350 250 <arcroofing@optusnet.com.au>, sender OK - how exciting to get mail from you!
@4000000047086c361588a83c 29350 dispatching RCPT TO:<sbishoppenguin@penguinsolutions.net>
@4000000047086c36158e1eac 29350 to email address : [<sbishoppenguin@penguinsolutions.net>]


My Mail Server is receiving mail, but I cant get it to send mail, Has any one seen this problem before. I know there is one entry for the bugzilla forum but there doesnt appear to be a resolution

Cheers

Shawn

[mmccarn]

According to The ClamAV Wiki this happens when clamav and the program that called it are running as different users.

You might check /var/log/clamd/current to see if it contains anything useful.

You could reset the permissions for  'smeserver-qpsmtpd' as described in http://bugs.contribs.org/show_bug.cgi?id=3020 (comment #12)  (You might also want to reset the permissions for 'smeserver-clamav' at the same time - but ask in the bug first)

You should definitely add yourself to that bug and pursue this issue there unless there is something particular to your SME server (specific contribs installed, for example) that make you suspect you should open a new bug.