Asterisk module and its ghosts

Hi Forum,

Some month ago I installed the nethserver-asterisk module. I tried to remove from web frontend, but this was rather difficult. The nethserver module was removed while individual asterisk modules remained on my system. The solution provided by @mrmarkuz

helped, but there is still one ghost left. Something derived from asterisk sends more than 600 email per day… How do I get rid of those nasty shadows?

grafik

TIA
Thorsten
NethServer Version: 7.9
Module: Asterisk

I suspect the “ghost” is a cron job.
You may check root mails or /var/log/maillog to get more information and also check /etc/cron* for left asterisk cronjobs.

In which file do I need to look exactly?

TIA
Thorsten

I don’t know exactly but I assume in one of the cron dirs there’s a file named asterisk. The cron mails are usually sent to root so just check the root mailbox with Roundcube (set domain to local and login as root) to get more information.

Completely overcrowd with from=asterisk@ … to asterisk@, however it is something extremely regular supporting your cron-proposal. It runs 00, 15, 27, 30, 31, 45 of each hour.

Here is one hour excerpt from /var/lib/maillog, just lines containing asterisk (using grep)

Dec 17 00:00:01 myserver postfix/pickup[28901]: 75F051088371: uid=974 from=
Dec 17 00:00:01 myserver opendkim[15211]: 75F051088371: no signing table match for ‘asterisk@myserver.mydomain.tld’
Dec 17 00:00:01 myserver postfix/qmgr[27021]: 75F051088371: from=asterisk@myserver.mydomain.tld, size=2511, nrcpt=1 (queue active)
Dec 17 00:00:01 myserver postfix/lmtp[7200]: 75F051088371: to=asterisk@myserver.mydomain.tld, orig_to=, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.17, delays=0.12/0.01/0.01/0.03, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:00:01 myserver postfix/lmtp[7200]: 8EBCD1086966: to=asterisk@myserver.mydomain.tld, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.02, delays=0.01/0/0/0, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:15:01 myserver postfix/pickup[8829]: 6E8551088371: uid=974 from=
Dec 17 00:15:01 myserver opendkim[15211]: 6E8551088371: no signing table match for ‘asterisk@myserver.mydomain.tld’
Dec 17 00:15:01 myserver postfix/qmgr[27021]: 6E8551088371: from=asterisk@myserver.mydomain.tld, size=2511, nrcpt=1 (queue active)
Dec 17 00:15:01 myserver postfix/lmtp[9287]: 6E8551088371: to=asterisk@myserver.mydomain.tld, orig_to=, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.11, delays=0.06/0.01/0.02/0.02, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:15:01 myserver postfix/lmtp[9287]: 859DA1086966: to=asterisk@myserver.mydomain.tld, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.02, delays=0.01/0/0/0, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:27:02 myserver postfix/pickup[8829]: 1BDC21088371: uid=974 from=
Dec 17 00:27:02 myserver opendkim[15211]: 1BDC21088371: no signing table match for ‘asterisk@myserver.mydomain.tld’
Dec 17 00:27:02 myserver postfix/qmgr[27021]: 1BDC21088371: from=asterisk@myserver.mydomain.tld, size=2517, nrcpt=1 (queue active)
Dec 17 00:27:02 myserver postfix/lmtp[10795]: 1BDC21088371: to=asterisk@myserver.mydomain.tld, orig_to=, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.1, delays=0.05/0.01/0.02/0.02, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:27:02 myserver postfix/lmtp[10795]: 321ED1086966: to=asterisk@myserver.mydomain.tld, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.02, delays=0.01/0/0/0, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:30:01 myserver postfix/pickup[8829]: C19B21088371: uid=974 from=
Dec 17 00:30:01 myserver opendkim[15211]: C19B21088371: no signing table match for ‘asterisk@myserver.mydomain.tld’
Dec 17 00:30:01 myserver postfix/qmgr[27021]: C19B21088371: from=asterisk@myserver.mydomain.tld, size=2511, nrcpt=1 (queue active)
Dec 17 00:30:01 myserver postfix/lmtp[11223]: C19B21088371: to=asterisk@myserver.mydomain.tld, orig_to=, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.14, delays=0.07/0.02/0.01/0.03, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:30:01 myserver postfix/lmtp[11223]: DA1C31086966: to=asterisk@myserver.mydomain.tld, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.02, delays=0.01/0/0/0.01, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:31:01 myserver postfix/pickup[8829]: C40961088371: uid=974 from=
Dec 17 00:31:01 myserver opendkim[15211]: C40961088371: no signing table match for ‘asterisk@myserver.mydomain.tld’
Dec 17 00:31:01 myserver postfix/qmgr[27021]: C40961088371: from=asterisk@myserver.mydomain.tld, size=1437, nrcpt=1 (queue active)
Dec 17 00:31:01 myserver postfix/lmtp[11223]: C40961088371: to=asterisk@myserver.mydomain.tld, orig_to=, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.04, delays=0.03/0/0/0.01, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:31:01 myserver postfix/lmtp[11223]: CAFBE1086966: to=asterisk@myserver.mydomain.tld, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.02, delays=0.01/0/0/0, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:45:01 myserver postfix/pickup[8829]: B87341088371: uid=974 from=
Dec 17 00:45:01 myserver opendkim[15211]: B87341088371: no signing table match for ‘asterisk@myserver.mydomain.tld’
Dec 17 00:45:01 myserver postfix/qmgr[27021]: B87341088371: from=asterisk@myserver.mydomain.tld, size=2511, nrcpt=1 (queue active)
Dec 17 00:45:01 myserver postfix/lmtp[13264]: B87341088371: to=asterisk@myserver.mydomain.tld, orig_to=, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.11, delays=0.06/0.01/0.02/0.02, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))
Dec 17 00:45:01 myserver postfix/lmtp[13264]: CE8D71086966: to=asterisk@myserver.mydomain.tld, relay=myserver.mydomain.tld[/var/run/dovecot/lmtp], delay=0.02, delays=0.01/0/0/0, dsn=5.1.1, status=bounced (host myserver.mydomain.tld[/var/run/dovecot/lmtp] said: 550 5.1.1 asterisk@myserver.mydomain.tld User doesn’t exist: asterisk@myserver.mydomain.tld (in reply to RCPT TO command))

No result for

grep -i -r "asterisk" /etc/cron*

(Contercheck: grip -i -r “anacron” /etc/cron.* gives corresponding results…)

Also tried “pbx”, “freepbx” and “free” as the search text -> no result for “pbx” and “freebpx”, whil “free” gives some lines contianing “…Free Software foundation …” in different files

-> No Idea which might be the relevant job

You check if the string asterisk is in the files content but it doesn’t show, if the file is named asterisk. You may use find instead of grep.

Cron job locations to check:

I allready checked the (not too long file list) and I checked the content of hourly files, of course :slight_smile:

find -iname "asterisk"

gives

./etc/selinux/targeted/active/modules/100/asterisk
./etc/e-smith/events/nethserver-freepbx-update/templates2expand/etc/asterisk
./etc/e-smith/templates/etc/asterisk
./etc/asterisk
./var/lib/systemd/linger/asterisk
./var/lib/asterisk
./var/log/asterisk
./var/spool/cron/asterisk
./var/spool/asterisk
./usr/lib64/asterisk
./home/asterisk

What about this one?

did not check -simply deleted it … (sorry, should have done that), see here

However

grep -i -r “spool” /etc/cron*

does not give any result leading to /var/spool/cron/asterisk …

In spool are the users (like asterisk) crontabs.
In /etc/cron are the system cron jobs.

17:07

grep -i -r "asterisk" /var/log/maillog > /var/lib/nethserver/ibay/backup/ecodms/asterisk.txt

NO RESULT 4 ASTERISK AT 16:45 and 17:00 - RADIO SILENCE
I KILLED THAT CAT …!!!

1 Like