33 ответов в этой теме

[George Kobiashvili]

hello I got drweb antivirus+antispam on fedora 5, sendmail-8.13.7-2, with license for 901 users, it worked well until last week, in maillog shows that drweb-milter times out when trieng to connect to drwebd. here is outmut from maillog:

Sep 16 08:49:30 mail drweb-milter: [2706246560] milter.ipc ERROR is timed out (timeout= 59 s 59871 ms)!
Sep 16 08:49:31 mail drweb-milter: [2706246560] milter.ipc ERROR Session::Execute - error for address(es) [local:/var/drweb/ipc/.db]: a waiting of Socket::IsReady(0x1) for connection (fd->23, local->local:, server->local:/var/drweb/ipc/.db): timed out (timeout= 59 s 59871 ms)
Sep 16 08:49:32 mail drweb-milter: [2706246560] milter ERROR error in send request to drweb-maild: a waiting of Socket::IsReady(0x1) for connection (fd->23, local->local:, server->local:/var/drweb/ipc/.db): timed out (timeout= 59 s 59871 ms)
Sep 16 08:49:33 mail drweb-milter: [2706246560] milter ERROR error in msg end callback: error in drweb-maild process


and almost all mail traffic stalls. what should I change, too make drweb work?

[Anton Ivanov]

please, check, that drweb-maild process working. Show last logs of drweb-maild (desirably with debug levele).

[George Kobiashvili]

drweb-maild process runs, output of ps aux | grep drewb
drweb 25636 0.3 0.8 1187524 17112 ? Sl 13:37 0:00 /opt/drweb/drweb-maild local:/var/drweb/ipc/.agent


then I set loglevel to debug in maild_sendmail.conf:
Level = Debug

and restarted drweb-monitor: service drweb-monitor restart, everything started and after start was finished every thread was shut down here is the log in attachen file debug

and when I set
Level = Info and IpcLevel = Debug happens the same see: debug_ipc

[George Kobiashvili]

when I have values Level = Info and IpcLevel = Alert, everythind starts and drweb-maild starts. in maillog writes:

Sep 16 13:57:18 mail drweb-monitor: [3086706384] INFO Dr.Web ® Components Monitor starting
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO configuration success loaded from agent interface local:/var/drweb/ipc/.agent
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO Load lng file /etc/drweb/maild/lng/russia.lng; LANG = ru
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO Load lng file /etc/drweb/maild/lng/english.lng; LANG = en
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/admin_malware.msg
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/sender_cured.msg
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/rcpts_malware.msg
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/admin_virus.msg
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/admin_archive.msg
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/sender_error.msg
Sep 16 13:57:18 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/report.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/admin_rule.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/admin_license.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/rcpts_virus.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/admin_cured.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/sender_archive.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/sender_skip.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/sender_virus.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/admin_error.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier INFO success load template file /etc/drweb/maild/templates/sender_malware.msg
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier.parser INFO parse template admin_archive
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier.parser INFO parse template admin_cured
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier.parser INFO parse template admin_error
Sep 16 13:57:19 mail drweb-notifier: [3086108368] notifier.parser INFO parse template admin_license
Sep 16 13:57:20 mail drweb-notifier: [3086108368] notifier.parser INFO parse template admin_malware
Sep 16 13:57:20 mail drweb-notifier: [3086108368] notifier.parser INFO parse template admin_rule
Sep 16 13:57:20 mail drweb-notifier: [3086108368] notifier.parser INFO parse template admin_virus
Sep 16 13:57:20 mail drweb-notifier: [3086108368] notifier.parser INFO parse template rcpts_malware
Sep 16 13:57:20 mail drweb-notifier: [3086108368] notifier.parser INFO parse template rcpts_virus
Sep 16 13:57:20 mail drweb-notifier: [3086108368] notifier.parser INFO parse template sender_archive
Sep 16 13:57:20 mail drweb-notifier: [3086108368] notifier.parser INFO parse template sender_cured
Sep 16 13:57:21 mail drweb-notifier: [3086108368] notifier.parser INFO parse template sender_error
Sep 16 13:57:21 mail drweb-notifier: [3086108368] notifier.parser INFO parse template sender_malware
Sep 16 13:57:21 mail drweb-notifier: [3086108368] notifier.parser INFO parse template sender_skip
Sep 16 13:57:22 mail drweb-notifier: [3086108368] notifier.parser INFO parse template sender_virus
Sep 16 13:57:22 mail drweb-notifier: [3086108368] notifier.parser INFO parse template report
Sep 16 13:57:22 mail drweb-notifier: [3086108368] notifier INFO valid template names (total=8): archive cured error license malware rule virus skip
Sep 16 13:57:22 mail drweb-notifier: [3086108368] notifier INFO Dr.Web ® mail notifier v4.44.1.0802210 started...
Sep 16 13:57:22 mail drweb-notifier: [3075615648] notifier.ipc WARN CreateDonorPool:attempt to create connection to local:/var/drweb/ipc/.deliver failed because Socket::Connect: [111] Connection refused
Sep 16 13:57:23 mail drweb-sender: [3086644944] sender INFO configuration success loaded from agent interface local:/var/drweb/ipc/.agent
Sep 16 13:57:23 mail drweb-sender: [3086644944] sender.ipc WARN UnixSocket::Create a listening connection (fd->25, local->local:/var/drweb/ipc/.deliver, client->*) stalled socket has been removed and binded
Sep 16 13:57:23 mail drweb-sender: [3086644944] sender INFO Dr.Web ® mail sender v4.44.1.0802210 started (64/64 threads in pools)...
Sep 16 13:57:23 mail drweb-sender: [3086644944] sender.RequestQueue INFO Start check for not sended mails...
Sep 16 13:57:23 mail drweb-sender: [3086644944] sender INFO Try restore lost msg absjDD6cB
Sep 16 13:57:23 mail drweb-sender: [3086644944] sender.RequestQueue INFO put msg [from: ; to:, ; id: absjDD6cB] to queue for processing after 7200 sec
Sep 16 13:57:24 mail drweb-sender: [3086644944] sender.RequestQueue INFO add 1 number of mails for sending
Sep 16 13:57:24 mail drweb-maild: [3086296784] maild INFO configuration success loaded from agent interface local:/var/drweb/ipc/.agent
Sep 16 13:57:24 mail drweb-maild: [3086296784] maild INFO Key loaded; user number: 10362178 start: 2008-08-22 end: 2009-06-24
Sep 16 13:57:25 mail drweb-maild: [3086296784] maild INFO License for mail-servers: 901 e-mail addresses.
Sep 16 13:57:25 mail drweb-maild: [3086296784] maild INFO Run plugin 'drweb'...
Sep 16 13:57:25 mail drweb-maild: [3086296784] drweb INFO success connected to the Dr.Web daemon (version 4.44)
Sep 16 13:57:25 mail drweb-maild: [3086296784] maild INFO Plugin 'drweb' has been successfully launched
Sep 16 13:57:26 mail drweb-maild: [3086296784] maild INFO Run plugin 'vaderetro'...
Sep 16 13:57:26 mail drweb-maild: [3086296784] maild INFO Plugin 'vaderetro' has been successfully launched
Sep 16 13:57:26 mail drweb-maild: [3086296784] maild INFO Run plugin 'headersfilter'...
Sep 16 13:57:27 mail drweb-maild: [3086296784] maild INFO Plugin 'headersfilter' has been successfully launched
Sep 16 13:57:27 mail drweb-maild: [3086296784] maild INFO Plugins in BeforQueue = 3; plugins in AfterQueue=0
Sep 16 13:57:27 mail drweb-maild: [3086296784] maild INFO Dr.Web ® maild v4.44.1.0802210 started (64/64 threads in pools)...
Sep 16 13:57:28 mail drweb-milter: [3086661328] milter INFO set SIGHUP handler
Sep 16 13:57:28 mail drweb-milter: [3086661328] milter INFO set milter backlog = 64
Sep 16 13:57:29 mail drweb-milter: [3086661328] milter INFO set milter timeout = 7200
Sep 16 13:57:29 mail drweb-milter: [3086661328] milter INFO set milter loglevel = 14
Sep 16 13:57:30 mail drweb-milter: [3086661328] milter INFO set milter connection inet:3001@127.0.0.1
Sep 16 13:57:30 mail drweb-milter: [3086661328] milter INFO Dr.Web ® milter module ver.4.44.1.0802210 started ...

[Anton Ivanov]

ok, i see. can you, please, show drweb-maild logs befor Sep 16 08:49:30 time (for 0.5 hour, for example) and maild_sendmail.conf file too. Thank you.

[George Kobiashvili]

here is output of command grep drweb-maild /var/log/maillog from Sep 14 04:15:20 till now
and maild_sendmail.conf after problems began i experimented with tread values incremented them

[Anton Ivanov]

1. Please, upgrade to 4.44.2 version.
2. Set General/IpcTimeout to 2m or higher.
3. please, show plugin_*.conf configuration files.

[George Kobiashvili]

here is plugin_*
Set General/IpcTimeout to 5m

but it takes too long, mail client such outlook can't send mail

[George Kobiashvili]

upgraded drweb, installed this packages:

drweb-maild-base-4.44.2-1.i386.rpm
drweb-maild-plugin-vaderetro-4.44.2-1.i386.rpm
drweb-updater-4.44.1-1.i386.rpm
drweb-agentd-4.44.2-1.i386.rpm
drweb-maild-libs-4.44.2-1.i386.rpm
drweb-maild-sendmail-4.44.2-1.i386.rpm
drweb-base-4.44.1-1.i386.rpm
drweb-maild-plugin-drweb-4.44.2-1.i386.rpm
drweb-monitord-4.44.2-1.i386.rpm
drweb-daemon-4.44.1-1.i386.rpm
drweb-maild-plugin-headersfilter-4.44.2-1.i386.rpm
drweb-scanner-4.44.1-1.i386.rpm

hope it'll cure problem

P.S. problem with Debug level exists, when i give value Debug to Level or IpcLevel, all services turn of which are started by /etc/init.d/drweb-monitor :(

[George Kobiashvili]

upgrading did not solve problem.

if i set General/IpcTimeout to 2m or higher can't send any mail, it takes too long and at last mail client stops sending. Even from webmail that is installed on the same box as drweb and sendmail takes too long to send mail more then minute.

[Anton Ivanov]

Hmm, try to set PreFork to no or increase MaxChildren in drweb32.ini.

[George Kobiashvili]

now it's 11 am and is now much load, so everything works I should better wait for rush hour, and if problems begin I'll change this values (MaxChildren is set 256, i think it can't be an issue)

problems began :) 11:05 am i'll chage now values

set PreFork to no, did not solve the problem.

Any suggestions?

[George Kobiashvili]

i changed some configuration and don't get that errors any more but get this :

Sep 17 16:38:20 mail drweb-milter: [2824846240] milter INFO [m8HCatmc020515]: can not find action for msg after 40 sec; discard it (it may be send by drweb-sender process)
Sep 17 16:38:20 mail sendmail[20515]: m8HCatmc020515: Milter: data, discard


almost for every mail, what's going on?

[Anton Ivanov]

this is mean, that due to long processing (> 40 sec in your configuration file) msg will be sending after checking by drweb-sender process. This is ok in most cases. You may increase this timeout in Milter/ProcessingTimeout for process result direct by drweb-milter process (and block e-mails in smtp session).

[George Kobiashvili]

set Milter/ProcessingTimeout to 2m and no problems jet, but it takes to send mail from mail client to server more then minute, what can i adjust to make sending mail faster?

[George Kobiashvili]

periodicly get errors see in attachment output of tail -f /var/log/maillog | grep -i error

becouse of long delay sending mail from mail client, some mail clients fail to send mail

[George Kobiashvili]

set thread values to 512 now mail sends faster, but get error:

Sep 17 20:32:01 mail drweb-maild: [1934424992] maild ERROR LoadFileFromDisk: can not open file [/var/drweb/msgs/in/C/00457E6C/.msg] for reading:Too many open files
Sep 17 20:32:01 mail drweb-maild: [1934424992] maild ERROR enqueue thread error (message(id=00457E6C) enqueue failed - cannot read message /var/drweb/msgs/in/C/00457E6C/.msg)
Sep 17 20:32:01 mail drweb-maild: [1934424992] maild WARN processing msg on event: processing error for 457e6c, apply: [pass]


I think this is because of file descriptors, changed max opened files in fedora to 65536 but how can i changed this value for drweb? as ii tested mails don't get checked by drweb it does not make headers in mail

[Anton Ivanov]

try to set new descriptors maximum by
ulimit -n
call.

[George Kobiashvili]

I set ulimit -HSn 65536 also edited /usr/include/bits/typesizes.h but it did not change drweb problem

[Anton Ivanov]

Please, show number of opened descriptors by drweb-maild after start (for example, by command
ls -l /proc/maild-pid/fd/ | wc -l
where
maild-pid - pid of drweb-maild process.