OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] Amavis / Sendmail Problem

From: Rainer Link (linkfoo.fh-furtwangen.de)
Date: Mon Jun 16 2003 - 13:52:22 CDT


Uwe Boigs wrote:

>>What's the output of "ps auxw | grep -i amavis"?
>>Does /var/run/amavis.sock exist?
>
>
> That gives me the following output:
> root 623 0.0 0.1 3424 484 ? S Jun13 0:00
> /usr/sbin/amavis-milter -p local:/var/run/amavis.sock failed

Hm, there should be two more amavis-milter processes (with the PID 621
and 622, see below). The "failed" is due of the /etc/init.d/amavis
buglet as mentioned before.

Could you try "pstree -p | grep amavis" please?

>
>>What's the
>>output of "fuser /var/run/amavis.sock" (do this as "root")
>
>
> /var/run/amavis.sock: 621 622 623

[..]

>>log at all, please show me the output of "grep amavis-milter
>>/etc/sendmail.cf"
>
>
> "grep amavis-milter /etc/sendmail.cf" returns nothing.
> I guess thats not the way it's supposed to be!? :-(

My fault, should be "grep milter-amavis /etc/sendmail.cf" or more simple
just "grep amavis /etc/sendmail.cf"

What's the output of "rpm -V amavis-sendmail"?

Could you try:
rcsendmail stop
rcamavis stop
rm -rf /var/run/amavis.sock
rcamavis start
rcsendmail start

and then send the eicar test file virus?

best regards,
Rainer Link

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here