Koozali.org: home of the SME Server

phantom user qmail??

Patrick Hickey

phantom user qmail??
« on: January 05, 2004, 11:39:37 PM »
I am running a clean build of the unsupported 6.0 image with one install, the SpamAssassin install from swerts-knudsen.dk. There are four users on the system. NO OTHER modifications have been made to the server.

In my MAILLOG I am getting a recurring incidence of what "appears" to be a user named qmail, as lame as that sounds. I have traded email with jesper and he is stumped and suggested I post some of the MAILLOG here in the hope one your you really sharp Linux souls could help me diagnose the issue.

Everything appears to be working though the logfile reflects a problem. Your thoughts?  Thank you in advance.

example:
Jan  4 11:28:16 galadriel spamd[12467]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:28:16 galadriel spamd[12467]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:28:16 galadriel spamd[12467]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]

regards,

patrick

--- snip ---

Jan  4 11:20:37 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33773
> Jan  4 11:20:37 galadriel spamd[12446]: info: setuid to jeanne succeeded
> Jan  4 11:20:37 galadriel spamd[12446]: processing message
> for jeanne:5001.
> Jan  4 11:20:37 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33774
> Jan  4 11:20:37 galadriel spamd[12449]: info: setuid to devin succeeded
> Jan  4 11:20:37 galadriel spamd[12449]: processing message
> for devin:5002.
> Jan  4 11:20:37 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33775
> Jan  4 11:20:37 galadriel spamd[12450]: info: setuid to phickey succeeded
> Jan  4 11:20:37 galadriel spamd[12450]: processing message
> for phickey:5000.
> Jan  4 11:20:41 galadriel spamd[12446]: clean message (0.5/5.0) for
> jeanne:5001 in 4.1 seconds, 3769 bytes.
> Jan  4 11:20:41 galadriel spamd[12449]: clean message (0.5/5.0) for
> devin:5002 in 4.0 seconds, 3768 bytes.
> Jan  4 11:20:44 galadriel spamd[12450]: clean message (0.5/5.0) for
> phickey:5000 in 7.1 seconds, 3770 bytes.
> Jan  4 11:28:16 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33779
> Jan  4 11:28:16 galadriel spamd[12467]: info: setuid to qmaild succeeded
> Jan  4 11:28:16 galadriel spamd[12467]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:28:16 galadriel spamd[12467]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:28:16 galadriel spamd[12467]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:28:16 galadriel spamd[12467]: processing message
> for qmaild:401.
> Jan  4 11:28:22 galadriel spamd[12467]: identified spam (23.5/5.0) for
> qmaild:401 in 5.6 seconds, 4635 bytes.
> Jan  4 11:28:22 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33784
> Jan  4 11:28:22 galadriel spamd[12502]: info: setuid to jeanne succeeded
> Jan  4 11:28:22 galadriel spamd[12502]: processing message
> for jeanne:5001.
> Jan  4 11:28:22 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33785
> Jan  4 11:28:22 galadriel spamd[12503]: info: setuid to devin succeeded
> Jan  4 11:28:22 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33786
> Jan  4 11:28:22 galadriel spamd[12509]: info: setuid to phickey succeeded
> Jan  4 11:28:22 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33787
> Jan  4 11:28:22 galadriel spamd[12511]: info: setuid to phickey succeeded
> Jan  4 11:28:22 galadriel spamd[12503]: processing message
> for devin:5002.
> Jan  4 11:28:22 galadriel spamd[12509]: processing message
> for phickey:5000.
> Jan  4 11:28:22 galadriel spamd[12511]: processing message
> for phickey:5000.
> Jan  4 11:28:22 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33788
> Jan  4 11:28:22 galadriel spamd[12516]: info: setuid to phickey succeeded
> Jan  4 11:28:22 galadriel spamd[12516]: processing message
> for phickey:5000.
> Jan  4 11:28:26 galadriel spamd[12503]: identified spam (23.5/5.0) for
> devin:5002 in 3.6 seconds, 6752 bytes.
> Jan  4 11:28:26 galadriel spamd[12509]: identified spam (23.5/5.0) for
> phickey:5000 in 3.6 seconds, 6754 bytes.
> Jan  4 11:28:29 galadriel spamd[12511]: identified spam (23.5/5.0) for
> phickey:5000 in 7.2 seconds, 6754 bytes.
> Jan  4 11:28:29 galadriel spamd[12502]: identified spam (23.5/5.0) for
> jeanne:5001 in 7.4 seconds, 6753 bytes.
> Jan  4 11:28:30 galadriel spamd[12516]: identified spam (23.5/5.0) for
> phickey:5000 in 7.2 seconds, 6756 bytes.
> Jan  4 11:33:10 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33794
> Jan  4 11:33:10 galadriel spamd[12543]: info: setuid to qmaild succeeded
> Jan  4 11:33:10 galadriel spamd[12543]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:33:10 galadriel spamd[12543]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:33:10 galadriel spamd[12543]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:33:10 galadriel spamd[12543]: processing message
> <200401041914.LAA83980@25.bluerocketonline.com> for qmaild:401.
> Jan  4 11:33:18 galadriel spamd[12543]: clean message (3.3/5.0) for
> qmaild:401 in 7.7 seconds, 3721 bytes.
> Jan  4 11:33:18 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33799
> Jan  4 11:33:18 galadriel spamd[12555]: info: setuid to phickey succeeded
> Jan  4 11:33:18 galadriel spamd[12555]: processing message
> <200401041914.LAA83980@25.bluerocketonline.com> for phickey:5000.
> Jan  4 11:33:22 galadriel spamd[12555]: clean message (3.3/5.0) for
> phickey:5000 in 3.8 seconds, 4197 bytes.
> Jan  4 11:33:27 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33801
> Jan  4 11:33:27 galadriel spamd[12563]: info: setuid to qmaild succeeded
> Jan  4 11:33:27 galadriel spamd[12563]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:33:27 galadriel spamd[12563]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:33:27 galadriel spamd[12563]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:33:27 galadriel spamd[12563]: processing message
> <0on-o$-$4qh0$--7k3@5g4d.l3> for qmaild:401.
> Jan  4 11:33:30 galadriel spamd[12563]: identified spam (15.1/5.0) for
> qmaild:401 in 3.8 seconds, 2526 bytes.
> Jan  4 11:33:30 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33806
> Jan  4 11:33:30 galadriel spamd[12575]: info: setuid to jeanne succeeded
> Jan  4 11:33:30 galadriel spamd[12575]: processing message
> <0on-o$-$4qh0$--7k3@5g4d.l3> for jeanne:5001.
> Jan  4 11:33:33 galadriel spamd[12575]: identified spam (15.1/5.0) for
> jeanne:5001 in 2.1 seconds, 4486 bytes.
> Jan  4 11:34:49 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33808
> Jan  4 11:34:49 galadriel spamd[12583]: info: setuid to qmaild succeeded
> Jan  4 11:34:49 galadriel spamd[12583]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:34:49 galadriel spamd[12583]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:34:49 galadriel spamd[12583]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:34:49 galadriel spamd[12583]: processing message
> <200401041910.OAA55727@h0.tekmailer.com> for qmaild:401.
> Jan  4 11:34:53 galadriel spamd[12583]: clean message (3.0/5.0) for
> qmaild:401 in 4.3 seconds, 3195 bytes.
> Jan  4 11:34:53 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33813
> Jan  4 11:34:53 galadriel spamd[12595]: info: setuid to phickey succeeded
> Jan  4 11:34:53 galadriel spamd[12595]: processing message
> <200401041910.OAA55727@h0.tekmailer.com> for phickey:5000.
> Jan  4 11:34:54 galadriel spamd[12595]: clean message (3.0/5.0) for
> phickey:5000 in 0.8 seconds, 3702 bytes.
> Jan  4 11:35:14 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33815
> Jan  4 11:35:14 galadriel spamd[12603]: info: setuid to qmaild succeeded
> Jan  4 11:35:14 galadriel spamd[12603]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:35:14 galadriel spamd[12603]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:35:14 galadriel spamd[12603]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:35:14 galadriel spamd[12603]: processing message
> <200401041916.LAA28262@f.ss01.net> for qmaild:401.
> Jan  4 11:35:15 galadriel spamd[12603]: clean message (3.4/5.0) for
> qmaild:401 in 0.9 seconds, 1388 bytes.
> Jan  4 11:35:15 galadriel spamd[5358]: connection from localhost [127.0.0.1]
> at port 33820
> Jan  4 11:35:15 galadriel spamd[12615]: info: setuid to phickey succeeded
> Jan  4 11:35:15 galadriel spamd[12615]: processing message
> <200401041916.LAA28262@f.ss01.net> for phickey:5000.
> Jan  4 11:35:16 galadriel spamd[12615]: clean message (3.4/5.0) for
> phickey:5000 in 0.8 seconds, 1875 bytes.
> Jan  4 11:36:24 galadriel spamd[5358]: server killed by SIGTERM, shutting
> down
> Jan  4 11:36:28 galadriel spamd[12704]: server started on port 783/tcp
> (running version 2.61)
> Jan  4 11:37:36 galadriel spamd[12704]: connection from localhost [127.0.0.1]
> at port 33857
> Jan  4 11:37:36 galadriel spamd[12741]: info: setuid to qmaild succeeded
> Jan  4 11:37:36 galadriel spamd[12741]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:37:36 galadriel spamd[12741]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:37:36 galadriel spamd[12741]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:37:36 galadriel spamd[12741]: processing message
> <7b8601c3d383$280092cc$093dc385@dlc.fi> for qmaild:401.
> Jan  4 11:37:37 galadriel spamd[12741]: identified spam (26.0/5.0) for
> qmaild:401 in 1.2 seconds, 2561 bytes.
> Jan  4 11:37:37 galadriel spamd[12704]: connection from localhost [127.0.0.1]
> at port 33862
> Jan  4 11:37:37 galadriel spamd[12753]: info: setuid to devin succeeded
> Jan  4 11:37:37 galadriel spamd[12753]: processing message
> <7b8601c3d383$280092cc$093dc385@dlc.fi> for devin:5002.
> Jan  4 11:37:39 galadriel spamd[12753]: identified spam (26.0/5.0) for
> devin:5002 in 1.3 seconds, 4617 bytes.
> Jan  4 11:38:40 galadriel spamd[12704]: connection from localhost [127.0.0.1]
> at port 33870
> Jan  4 11:38:40 galadriel spamd[12777]: info: setuid to qmaild succeeded
> Jan  4 11:38:40 galadriel spamd[12777]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:38:40 galadriel spamd[12777]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:38:40 galadriel spamd[12777]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:38:40 galadriel spamd[12777]: processing message
> <12714963.1073245101905.JavaMail.javamailuser@localhost> for qmaild:401.
> Jan  4 11:38:42 galadriel spamd[12777]: identified spam (18.0/5.0) for
> qmaild:401 in 2.5 seconds, 2345 bytes.
> Jan  4 11:38:42 galadriel spamd[12704]: connection from localhost [127.0.0.1]
> at port 33875
> Jan  4 11:38:42 galadriel spamd[12789]: info: setuid to phickey succeeded
> Jan  4 11:38:42 galadriel spamd[12789]: processing message
> <12714963.1073245101905.JavaMail.javamailuser@localhost> for phickey:5000.
> Jan  4 11:38:43 galadriel spamd[12789]: identified spam (18.0/5.0) for
> phickey:5000 in 0.8 seconds, 4040 bytes.
> Jan  4 11:38:52 galadriel spamd[12704]: server killed by SIGTERM, shutting
> down
> Jan  4 11:38:55 galadriel spamd[12858]: server started on port 783/tcp
> (running version 2.61)
> Jan  4 11:42:13 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33880
> Jan  4 11:42:13 galadriel spamd[12868]: info: setuid to qmaild succeeded
> Jan  4 11:42:13 galadriel spamd[12868]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:42:13 galadriel spamd[12868]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:42:13 galadriel spamd[12868]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:42:13 galadriel spamd[12868]: processing message
> <8bff01c3d2fe$7bcd61d8$00056dd9@mst.dk> for qmaild:401.
> Jan  4 11:42:15 galadriel spamd[12868]: identified spam (17.1/5.0) for
> qmaild:401 in 2.2 seconds, 2163 bytes.
> Jan  4 11:42:15 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33885
> Jan  4 11:42:15 galadriel spamd[12880]: info: setuid to jeanne succeeded
> Jan  4 11:42:15 galadriel spamd[12880]: processing message
> <8bff01c3d2fe$7bcd61d8$00056dd9@mst.dk> for jeanne:5001.
> Jan  4 11:42:16 galadriel spamd[12880]: identified spam (17.1/5.0) for
> jeanne:5001 in 0.8 seconds, 3880 bytes.
> Jan  4 11:49:14 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33887
> Jan  4 11:49:14 galadriel spamd[12889]: info: setuid to qmaild succeeded
> Jan  4 11:49:14 galadriel spamd[12889]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:49:14 galadriel spamd[12889]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 11:49:14 galadriel spamd[12889]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 11:49:14 galadriel spamd[12889]: processing message
> <1073245668.3ff86de4b5160@www.swerts-knudsen.dk> for qmaild:401.
> Jan  4 11:49:16 galadriel spamd[12889]: clean message (0.0/5.0) for
> qmaild:401 in 2.7 seconds, 2090 bytes.
> Jan  4 11:49:16 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33892
> Jan  4 11:49:16 galadriel spamd[12901]: info: setuid to phickey succeeded
> Jan  4 11:49:16 galadriel spamd[12901]: processing message
> <1073245668.3ff86de4b5160@www.swerts-knudsen.dk> for phickey:5000.
> Jan  4 11:49:19 galadriel spamd[12901]: clean message (0.0/5.0) for
> phickey:5000 in 2.6 seconds, 2469 bytes.
> Jan  4 12:09:32 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33894
> Jan  4 12:09:32 galadriel spamd[12913]: info: setuid to qmaild succeeded
> Jan  4 12:09:32 galadriel spamd[12913]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:09:32 galadriel spamd[12913]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 12:09:32 galadriel spamd[12913]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:09:32 galadriel spamd[12913]: processing message
> for qmaild:401.
> Jan  4 12:09:37 galadriel spamd[12913]: clean message (3.0/5.0) for
> qmaild:401 in 4.4 seconds, 1027 bytes.
> Jan  4 12:09:37 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33899
> Jan  4 12:09:37 galadriel spamd[12925]: info: setuid to phickey succeeded
> Jan  4 12:09:37 galadriel spamd[12925]: processing message
> for phickey:5000.
> Jan  4 12:09:38 galadriel spamd[12925]: clean message (3.0/5.0) for
> phickey:5000 in 0.8 seconds, 1485 bytes.
> Jan  4 12:13:17 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33901
> Jan  4 12:13:17 galadriel spamd[12935]: info: setuid to qmaild succeeded
> Jan  4 12:13:17 galadriel spamd[12935]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:13:17 galadriel spamd[12935]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 12:13:17 galadriel spamd[12935]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:13:17 galadriel spamd[12935]: processing message
> <3FF8733E.5040803@idyll.com> for qmaild:401.
> Jan  4 12:13:21 galadriel spamd[12935]: clean message (0.5/5.0) for
> qmaild:401 in 4.0 seconds, 4108 bytes.
> Jan  4 12:36:37 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33908
> Jan  4 12:36:37 galadriel spamd[12958]: info: setuid to qmaild succeeded
> Jan  4 12:36:37 galadriel spamd[12958]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:36:37 galadriel spamd[12958]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 12:36:37 galadriel spamd[12958]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:36:37 galadriel spamd[12958]: processing message (unknown) for
> qmaild:401.
> Jan  4 12:36:40 galadriel spamd[12958]: identified spam (12.4/5.0) for
> qmaild:401 in 2.5 seconds, 992 bytes.
> Jan  4 12:36:40 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33913
> Jan  4 12:36:40 galadriel spamd[12970]: info: setuid to phickey succeeded
> Jan  4 12:36:40 galadriel spamd[12970]: processing message (unknown) for
> phickey:5000.
> Jan  4 12:36:41 galadriel spamd[12970]: identified spam (12.0/5.0) for
> phickey:5000 in 0.9 seconds, 2114 bytes.
> Jan  4 12:40:17 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33915
> Jan  4 12:40:17 galadriel spamd[12978]: info: setuid to qmaild succeeded
> Jan  4 12:40:17 galadriel spamd[12978]: Creating default_prefs
> [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:40:17 galadriel spamd[12978]: Cannot write to
> /var/qmail/.spamassassin/user_prefs: No such file or directory
> Jan  4 12:40:17 galadriel spamd[12978]: Couldn't create readable
> default_prefs for [/var/qmail/.spamassassin/user_prefs]
> Jan  4 12:40:17 galadriel spamd[12978]: processing message
> <1073248733.3ff879ddc62fc@www.swerts-knudsen.dk> for qmaild:401.
> Jan  4 12:40:20 galadriel spamd[12978]: clean message (0.0/5.0) for
> qmaild:401 in 2.9 seconds, 3039 bytes.
> Jan  4 12:40:20 galadriel spamd[12858]: connection from localhost [127.0.0.1]
> at port 33920
> Jan  4 12:40:20 galadriel spamd[12990]: info: setuid to phickey succeeded
> Jan  4 12:40:20 galadriel spamd[12990]: processing message
> <1073248733.3ff879ddc62fc@www.swerts-knudsen.dk> for phickey:5000.
> Jan  4 12:40:23 galadriel spamd[12990]: clean message (0.0/5.0) for
> phickey:5000 in 2.9 seconds, 3418 bytes.

[%sig%]

Charlie Brady

qmaild (was Re: phantom user qmail??)
« Reply #1 on: January 07, 2004, 04:43:59 AM »
> In my MAILLOG I am getting a recurring incidence of what "appears" to be > a user named qmail, as lame as that sounds.

No, the user is qmaild.

Since your question relates to a contrib, perhaps you should ask the contrib author.

Charlie

Patrick Hickey

Re: qmaild (was Re: phantom user qmail??)
« Reply #2 on: January 07, 2004, 03:22:39 PM »
I did initially request assistance of the author...the contrib being at

http://sme.swerts-knudsen.dk/howtos/howto_16.htm

and the author being Jesper Knudsen.

From my original post -

"I have traded email with jesper and he is stumped and suggested I post some of the MAILLOG here in the hope one you really sharp Linux souls could help me diagnose the issue."

So judging by your response and the lack of other responses I am SOL.

Oh well...

regards,

patrick