NethServer Version: NethServer release 7.7.1908 (final)
Module: Rspamd
Active mail users: 43
VPS:
Fabrikant QEMU
Model Standard PC (i440FX + PIIX, 1996)
Model processor 3 x Westmere E56xx/L56xx/X56xx (Nehalem-C)
RAM: 7168 MB
Hi,
This morning I notice that Rspamd marked every mail (started around 18:20 PM yesterday) as soft reject.
I had this one time before and saw in the log file a lot of “daemonize() failed: Cannot allocate memory” so I upgraded the RAM of my VPS (after I read different forum post about it on the internet).
Until now I didn’t had this issue again.
After a restart no more mails where marked as ‘soft reject’ and slowly the ‘soft reject’ marked mails where delivered in the users mailbox.
How can I fixed this issue and prevent that this would happen again?
Many thanks in advance.
See below the mail log file
Citaat
Mar 7 18:55:38 mail clamd[11482]: Log file size limited to 1048576 bytes. Mar 7 18:55:38 mail clamd[11482]: Reading databases from /var/lib/clamav Mar 7 18:55:38 mail clamd[11482]: Not loading PUA signatures. Mar 7 18:55:38 mail clamd[11482]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:55:41 mail rspamd[14799]: <665zzt>; lua; bayes_expiry.lua:437: finished expiry step 37: 991 items checked, 138 significant (0 made persistent), 1 insignificant (0 ttls set), 1 common (0 discriminated), 851 infrequent (0 ttls set), 3 mean, 7 std Mar 7 18:55:41 mail postfix/smtpd[11483]: connect from localhost[127.0.0.1] Mar 7 18:55:41 mail rspamd[14798]: ; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0 Mar 7 18:55:41 mail postfix/smtpd[11484]: connect from localhost[127.0.0.1] Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; proxy_accept_socket: accepted milter connection from /var/run/rspamd/worker-proxy port 0 Mar 7 18:55:41 mail postfix/smtpd[11484]: 702D34C1BAB: client=localhost[127.0.0.1] Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; milter; rspamd_milter_process_command: got connection from 127.0.0.1:36636 Mar 7 18:55:41 mail postfix/smtpd[11483]: 739184C2EEE: client=localhost[127.0.0.1] Mar 7 18:55:41 mail rspamd[14798]: ; milter; rspamd_milter_process_command: got connection from 127.0.0.1:36634 Mar 7 18:55:41 mail postfix/cleanup[11486]: 702D34C1BAB: message-id=20200307175541.702D34C1BAB@mail.DOMAIN.eu Mar 7 18:55:41 mail postfix/cleanup[11487]: 739184C2EEE: message-id=20200307175541.739184C2EEE@mail.DOMAIN.eu Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; rspamd_message_parse: loaded message; id: 20200307175541.702D34C1BAB@mail.DOMAIN.eu; queue-id: <702D34C1BAB>; size: 6034; checksum: Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; rspamd_mime_part_detect_language: detected part language: nl Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; rspamd_mime_part_detect_language: detected part language: nl Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; lua; greylist.lua:184: skip greylisting for local networks and/or authorized users Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; spf_symbol_callback: skip SPF checks for local networks and authorized users Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; dkim_symbol_callback: skip DKIM checks for local networks and authorized users Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; lua; dmarc.lua:572: skip DMARC checks for local networks and authorized users Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; lua; once_received.lua:98: Skipping once_received for authenticated user or local network Mar 7 18:55:41 mail rspamd[14798]: ; proxy; rspamd_message_parse: loaded message; id: 20200307175541.739184C2EEE@mail.DOMAIN.eu; queue-id: <739184C2EEE>; size: 6033; checksum: Mar 7 18:55:41 mail rspamd[14798]: ; proxy; rspamd_mime_part_detect_language: detected part language: nl Mar 7 18:55:41 mail rspamd[14798]: ; proxy; rspamd_mime_part_detect_language: detected part language: nl Mar 7 18:55:41 mail rspamd[14798]: ; lua; greylist.lua:184: skip greylisting for local networks and/or authorized users Mar 7 18:55:41 mail rspamd[14798]: ; proxy; spf_symbol_callback: skip SPF checks for local networks and authorized users Mar 7 18:55:41 mail rspamd[14798]: ; proxy; dkim_symbol_callback: skip DKIM checks for local networks and authorized users Mar 7 18:55:41 mail rspamd[14798]: ; lua; dmarc.lua:572: skip DMARC checks for local networks and authorized users Mar 7 18:55:41 mail rspamd[14798]: ; lua; once_received.lua:98: Skipping once_received for authenticated user or local network Mar 7 18:55:41 mail rspamd[14798]: <>; ; rspamd_inet_address_connect: connect unix:/var/run/clamd@rspamd/clamav failed: 2, ‘Bestand of map bestaat niet’ Mar 7 18:55:41 mail rspamd[14798]: ; proxy; lua_tcp_make_connection: cannot connect to /var/run/clamd@rspamd/clamav (/var/run/clamd@rspamd/clamav): Bestand of map bestaat niet Mar 7 18:55:41 mail rspamd[14798]: <>; ; rspamd_inet_address_connect: connect unix:/var/run/clamd@rspamd/clamav failed: 2, ‘Bestand of map bestaat niet’ Mar 7 18:55:41 mail rspamd[14798]: ; proxy; lua_tcp_make_connection: cannot connect to /var/run/clamd@rspamd/clamav (/var/run/clamd@rspamd/clamav): Bestand of map bestaat niet Mar 7 18:55:41 mail rspamd[14798]: <>; ; rspamd_inet_address_connect: connect unix:/var/run/clamd@rspamd/clamav failed: 2, ‘Bestand of map bestaat niet’ Mar 7 18:55:41 mail rspamd[14798]: ; proxy; lua_tcp_make_connection: cannot connect to /var/run/clamd@rspamd/clamav (/var/run/clamd@rspamd/clamav): Bestand of map bestaat niet Mar 7 18:55:41 mail rspamd[14798]: ; lua; clamav.lua:119: clamav: failed to scan, maximum retransmits exceed Mar 7 18:55:41 mail rspamd[14798]: ; lua; common.lua:107: clamav: result - FAILED with error: “failed to scan and retransmits exceed - score: 0” Mar 7 18:55:41 mail rspamd[14798]: ; proxy; rspamd_add_passthrough_result: 20200307175541.739184C2EEE@mail.DOMAIN.eu: set pre-result to ‘soft reject’ (no score): ‘Cannot validate the message now. Try again later’ from force_actions(1) Mar 7 18:55:41 mail rspamd[14798]: <>; ; rspamd_inet_address_connect: connect unix:/var/run/clamd@rspamd/clamav failed: 2, ‘Bestand of map bestaat niet’ Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; lua_tcp_make_connection: cannot connect to /var/run/clamd@rspamd/clamav (/var/run/clamd@rspamd/clamav): Bestand of map bestaat niet Mar 7 18:55:41 mail rspamd[14798]: <>; ; rspamd_inet_address_connect: connect unix:/var/run/clamd@rspamd/clamav failed: 2, ‘Bestand of map bestaat niet’ Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; lua_tcp_make_connection: cannot connect to /var/run/clamd@rspamd/clamav (/var/run/clamd@rspamd/clamav): Bestand of map bestaat niet Mar 7 18:55:41 mail rspamd[14798]: <>; ; rspamd_inet_address_connect: connect unix:/var/run/clamd@rspamd/clamav failed: 2, ‘Bestand of map bestaat niet’ Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; lua_tcp_make_connection: cannot connect to /var/run/clamd@rspamd/clamav (/var/run/clamd@rspamd/clamav): Bestand of map bestaat niet Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; lua; clamav.lua:119: clamav: failed to scan, maximum retransmits exceed Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; lua; common.lua:107: clamav: result - FAILED with error: “failed to scan and retransmits exceed - score: 0” Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; rspamd_add_passthrough_result: 20200307175541.702D34C1BAB@mail.DOMAIN.eu: set pre-result to ‘soft reject’ (no score): ‘Cannot validate the message now. Try again later’ from force_actions(1) Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; rspamd_task_write_log: id: 20200307175541.702D34C1BAB@mail.DOMAIN.eu, qid: <702D34C1BAB>, ip: 127.0.0.1, from: no-reply@DOMAIN.eu, (default: F (soft reject): [-0.10/12.90] [MIME_GOOD(-0.10){multipart/alternative;text/plain;},CLAM_VIRUS_FAIL(0.00){failed to scan and retransmits exceed;},FORCE_ACTION_CLAM_VIRUS_FAIL(0.00){soft reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GENERIC_REPUTATION(0.00){-0.48425642650355;},MIME_TRACE(0.00){0:+;1:+;2:~;},PRECEDENCE_BULK(0.00){},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},TO_DN_NONE(0.00){},TO_DOM_EQ_FROM_DOM(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 6034, time: 248.183ms, dns req: 7, digest: , rcpts: USER@DOMAIN.eu, mime_rcpts: USER@DOMAIN.eu, forced: soft reject “Cannot validate the message now. Try again later”; score=nan (set by force_actions) Mar 7 18:55:41 mail rspamd[14798]: <5a07b6>; proxy; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 3 regexps matched, 184 regexps total, 94 regexps cached, 0B scanned using pcre, 7.29KiB scanned total Mar 7 18:55:41 mail postfix/cleanup[11486]: 702D34C1BAB: milter-reject: END-OF-MESSAGE from localhost[127.0.0.1]: 4.7.1 Cannot validate the message now. Try again later; from=no-reply@DOMAIN.eu to=USER@DOMAIN.eu proto=ESMTP helo=<teamchat.DOMAIN.eu> Mar 7 18:55:41 mail postfix/smtpd[11484]: disconnect from localhost[127.0.0.1] Mar 7 18:55:41 mail rspamd[14798]: <305e15>; proxy; proxy_milter_finish_handler: finished milter connection Mar 7 18:55:41 mail rspamd[14798]: ; proxy; rspamd_task_write_log: id: 20200307175541.739184C2EEE@mail.DOMAIN.eu, qid: <739184C2EEE>, ip: 127.0.0.1, from: no-reply@DOMAIN.eu, (default: F (soft reject): [-0.10/12.90] [MIME_GOOD(-0.10){multipart/alternative;text/plain;},CLAM_VIRUS_FAIL(0.00){failed to scan and retransmits exceed;},FORCE_ACTION_CLAM_VIRUS_FAIL(0.00){soft reject;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},GENERIC_REPUTATION(0.00){-0.48425642650355;},MIME_TRACE(0.00){0:+;1:+;2:~;},PRECEDENCE_BULK(0.00){},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_ZERO(0.00){0;},TO_DN_NONE(0.00){},TO_DOM_EQ_FROM_DOM(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){}]), len: 6033, time: 270.992ms, dns req: 7, digest: , rcpts: USER@DOMAIN.eu, mime_rcpts: USER@DOMAIN.eu, forced: soft reject “Cannot validate the message now. Try again later”; score=nan (set by force_actions) Mar 7 18:55:41 mail rspamd[14798]: ; proxy; rspamd_protocol_http_reply: regexp statistics: 0 pcre regexps scanned, 3 regexps matched, 184 regexps total, 94 regexps cached, 0B scanned using pcre, 7.29KiB scanned total Mar 7 18:55:41 mail postfix/cleanup[11487]: 739184C2EEE: milter-reject: END-OF-MESSAGE from localhost[127.0.0.1]: 4.7.1 Cannot validate the message now. Try again later; from=no-reply@DOMAIN.eu to=USER@DOMAIN.eu proto=ESMTP helo=<teamchat.DOMAIN.eu> Mar 7 18:55:41 mail postfix/smtpd[11483]: disconnect from localhost[127.0.0.1] Mar 7 18:55:41 mail rspamd[14798]: <609487>; proxy; proxy_milter_finish_handler: finished milter connection Mar 7 18:55:50 mail clamd[11482]: Loaded 6928517 signatures. Mar 7 18:55:53 mail clamd[11482]: LOCAL: Unix socket file /var/run/clamd@rspamd/clamav Mar 7 18:55:53 mail clamd[11482]: LOCAL: Setting connection queue length to 200 Mar 7 18:55:53 mail clamd[11482]: daemonize() failed: Cannot allocate memory Mar 7 18:55:53 mail clamd[11482]: Socket file removed. Mar 7 18:55:55 mail clamd[11493]: Received 0 file descriptor(s) from systemd. Mar 7 18:55:55 mail clamd[11493]: clamd daemon 0.101.5 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Mar 7 18:55:55 mail clamd[11493]: Log file size limited to 1048576 bytes. Mar 7 18:55:55 mail clamd[11493]: Reading databases from /var/lib/clamav Mar 7 18:55:55 mail clamd[11493]: Not loading PUA signatures. Mar 7 18:55:55 mail clamd[11493]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:56:09 mail clamd[11493]: Loaded 6928517 signatures. Mar 7 18:56:14 mail clamd[11493]: LOCAL: Unix socket file /var/run/clamd@rspamd/clamav Mar 7 18:56:14 mail clamd[11493]: LOCAL: Setting connection queue length to 200 Mar 7 18:56:14 mail clamd[11493]: daemonize() failed: Cannot allocate memory Mar 7 18:56:14 mail clamd[11493]: Socket file removed. Mar 7 18:56:16 mail clamd[11514]: Received 0 file descriptor(s) from systemd. Mar 7 18:56:16 mail clamd[11514]: clamd daemon 0.101.5 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Mar 7 18:56:16 mail clamd[11514]: Log file size limited to 1048576 bytes. Mar 7 18:56:16 mail clamd[11514]: Reading databases from /var/lib/clamav Mar 7 18:56:16 mail clamd[11514]: Not loading PUA signatures. Mar 7 18:56:16 mail clamd[11514]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:56:27 mail clamd[11514]: Loaded 6928517 signatures. Mar 7 18:56:31 mail clamd[11514]: LOCAL: Unix socket file /var/run/clamd@rspamd/clamav Mar 7 18:56:31 mail clamd[11514]: LOCAL: Setting connection queue length to 200 Mar 7 18:56:31 mail clamd[11514]: daemonize() failed: Cannot allocate memory Mar 7 18:56:31 mail clamd[11514]: Socket file removed. Mar 7 18:56:32 mail clamd[11530]: Received 0 file descriptor(s) from systemd. Mar 7 18:56:32 mail clamd[11530]: clamd daemon 0.101.5 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Mar 7 18:56:32 mail clamd[11530]: Log file size limited to 1048576 bytes. Mar 7 18:56:32 mail clamd[11530]: Reading databases from /var/lib/clamav Mar 7 18:56:32 mail clamd[11530]: Not loading PUA signatures. Mar 7 18:56:32 mail clamd[11530]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:56:44 mail clamd[11530]: Loaded 6928517 signatures. Mar 7 18:56:45 mail rspamd[14799]: <665zzt>; lua; bayes_expiry.lua:437: finished expiry step 38: 989 items checked, 157 significant (0 made persistent), 3 insignificant (0 ttls set), 5 common (0 discriminated), 824 infrequent (29 ttls set), 3 mean, 8 std Mar 7 18:56:48 mail clamd[11530]: LOCAL: Unix socket file /var/run/clamd@rspamd/clamav Mar 7 18:56:48 mail clamd[11530]: LOCAL: Setting connection queue length to 200 Mar 7 18:56:48 mail clamd[11530]: daemonize() failed: Cannot allocate memory Mar 7 18:56:48 mail clamd[11530]: Socket file removed. Mar 7 18:56:50 mail clamd[11544]: Received 0 file descriptor(s) from systemd. Mar 7 18:56:50 mail clamd[11544]: clamd daemon 0.101.5 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Mar 7 18:56:50 mail clamd[11544]: Log file size limited to 1048576 bytes. Mar 7 18:56:50 mail clamd[11544]: Reading databases from /var/lib/clamav Mar 7 18:56:50 mail clamd[11544]: Not loading PUA signatures. Mar 7 18:56:50 mail clamd[11544]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:57:02 mail clamd[11544]: Loaded 6928517 signatures. Mar 7 18:57:06 mail clamd[11544]: LOCAL: Unix socket file /var/run/clamd@rspamd/clamav Mar 7 18:57:06 mail clamd[11544]: LOCAL: Setting connection queue length to 200 Mar 7 18:57:06 mail clamd[11544]: daemonize() failed: Cannot allocate memory Mar 7 18:57:06 mail clamd[11544]: Socket file removed. Mar 7 18:57:08 mail clamd[11570]: Received 0 file descriptor(s) from systemd. Mar 7 18:57:08 mail clamd[11570]: clamd daemon 0.101.5 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Mar 7 18:57:08 mail clamd[11570]: Log file size limited to 1048576 bytes. Mar 7 18:57:08 mail clamd[11570]: Reading databases from /var/lib/clamav Mar 7 18:57:08 mail clamd[11570]: Not loading PUA signatures. Mar 7 18:57:08 mail clamd[11570]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:57:20 mail clamd[11570]: Loaded 6928517 signatures. Mar 7 18:57:23 mail clamd[11570]: LOCAL: Unix socket file /var/run/clamd@rspamd/clamav Mar 7 18:57:23 mail clamd[11570]: LOCAL: Setting connection queue length to 200 Mar 7 18:57:23 mail clamd[11570]: daemonize() failed: Cannot allocate memory Mar 7 18:57:23 mail clamd[11570]: Socket file removed. Mar 7 18:57:25 mail clamd[11575]: Received 0 file descriptor(s) from systemd. Mar 7 18:57:25 mail clamd[11575]: clamd daemon 0.101.5 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Mar 7 18:57:25 mail clamd[11575]: Log file size limited to 1048576 bytes. Mar 7 18:57:25 mail clamd[11575]: Reading databases from /var/lib/clamav Mar 7 18:57:25 mail clamd[11575]: Not loading PUA signatures. Mar 7 18:57:25 mail clamd[11575]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:57:36 mail clamd[11575]: Loaded 6928517 signatures. Mar 7 18:57:39 mail clamd[11575]: LOCAL: Unix socket file /var/run/clamd@rspamd/clamav Mar 7 18:57:39 mail clamd[11575]: LOCAL: Setting connection queue length to 200 Mar 7 18:57:39 mail clamd[11575]: daemonize() failed: Cannot allocate memory Mar 7 18:57:39 mail clamd[11575]: Socket file removed. Mar 7 18:57:41 mail clamd[11595]: Received 0 file descriptor(s) from systemd. Mar 7 18:57:41 mail clamd[11595]: clamd daemon 0.101.5 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) Mar 7 18:57:41 mail clamd[11595]: Log file size limited to 1048576 bytes. Mar 7 18:57:41 mail clamd[11595]: Reading databases from /var/lib/clamav Mar 7 18:57:41 mail clamd[11595]: Not loading PUA signatures. Mar 7 18:57:41 mail clamd[11595]: Bytecode: Security mode set to “TrustSigned”. Mar 7 18:57:53 mail clamd[11595]: Loaded 6928517 signatures. Mar 7 18:57:56 mail postfix/anvil[11318]: statistics: max connection rate 1/60s for (submission:192.241.233.165) at Mar 7 18:53:14 Mar 7 18:57:56 mail postfix/anvil[11318]: statistics: max connection count 1 for (submission:192.241.233.165) at Mar 7 18:53:14 Mar 7 18:57:56 mail postfix/anvil[11318]: statistics: max cache size 1 at Mar 7 18:53:14 Mar 7 18:57:57