Amavisd-new Error Information

Van Isle BC Web Solutions webmaster at vanislebc.com
Wed Sep 28 22:55:40 CEST 2011


Jakob Curdes wrote:
> Am 22.09.2011 19:57, schrieb Van Isle BC Web Solutions:
>> Hi, I am  new to the dedicated server field and have paid someone to 
>> install config server firewall and mailscanner.  I assume that  
>> Amavisd-new came with it as I've never seen it before the install.  
>> When I view my log files that are cronned to me every day I sometimes 
>> see this:
>>
> I think your amavis installation (or, to be more precise, the 
> spamassassin process called by amavisd), tries to contact a server of 
> the DCC clearinghouse network (209.169.14.26 is one of the servers of 
> this network). This network collects and delivers checksums, i.e. 
> footprints of known spam messages, and compares the message under test 
> with these.
> But in this case spamassassin cannot contact the DCC server, probably 
> due to a firewall issue on your server ("operation not permitted" is a 
> typical firewall blocking symptom).
>
> So the remedy would be to open the firewall for the destination port 
> 6277 UDP. Then the DCC component of spamassassin can contact the 
> checksum servers. If this is not feasible the DCC check should be 
> deactivated as it cannot deliver any information without contact to 
> the network.
>
> Hope this helps,
> Jakob Curdes
>
>
>> --------------------- Amavisd-new Begin ------------------------
>> **Unmatched Entries**
>>      117   no DCC answer from 209.169.14.26,6277 after 0 ms
>>       14   continue not asking DCC 51 seconds after failure
>>        5   continue not asking DCC 59 seconds after failure
>>        3   continue not asking DCC 58 seconds after failure
>>        3   continue not asking DCC 52 seconds after failure
>>        2   continue not asking DCC 55 seconds after failure
>>        2   continue not asking DCC 35 seconds after failure
>>        2   continue not asking DCC 121 seconds after failure
>>        2   continue not asking DCC 60 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,60180: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,55950: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,47919: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,43367: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,55917: Operation not 
>> permitted
>>        1   continue not asking DCC 19 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42632: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,38400: Operation not 
>> permitted
>>        1   continue not asking DCC 66 seconds after failure
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,55800: Operation 
>> not permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,49771: Operation not 
>> permitted
>>        1   continue not asking DCC 9 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34031: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,58984: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34332: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,57551: Operation not 
>> permitted
>>        1   continue not asking DCC 48 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34303: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,60112: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,37749: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,35248: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,58819: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34252: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,35550: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,55637: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,36807: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,48586: Operation 
>> not permitted
>>        1   continue not asking DCC 359 seconds after failure
>>        1   continue not asking DCC 56 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,55007: Operation not 
>> permitted
>>        1   continue not asking DCC 91 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42173: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,54793: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,45839: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,40135: Operation not 
>> permitted
>>        1   continue not asking DCC 54 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,46720: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,47177: Operation not 
>> permitted
>>        1   continue not asking DCC 45 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,36067: Operation not 
>> permitted
>>        1   continue not asking DCC 96 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,49055: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,41689: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,56814: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42955: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,55800: Operation not 
>> permitted
>>        1   continue not asking DCC 7 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,43964: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,36389: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,53052: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,42555: Operation 
>> not permitted
>>        1   continue not asking DCC 12 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,36536: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,51395: Operation not 
>> permitted
>>        1   continue not asking DCC 99 seconds after failure
>>        1   continue not asking DCC 184 seconds after failure
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,60180: Operation 
>> not permitted
>>        1   continue not asking DCC 30 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,44054: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,57022: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,45874: Operation 
>> not permitted
>>        1   continue not asking DCC 49 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,51205: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34801: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,48507: Operation 
>> not permitted
>>        1   continue not asking DCC 47 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,33585: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,40981: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42401: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,36390: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,48507: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,58009: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,37620: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,52551: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,42815: Operation 
>> not permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,34685: Operation 
>> not permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,41440: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,51793: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,59121: Operation not 
>> permitted
>>        1   continue not asking DCC 21 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,39096: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,59164: Operation not 
>> permitted
>>        1   continue not asking DCC 124 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,37377: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,54337: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,59666: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,49452: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,49472: Operation not 
>> permitted
>>        1   continue not asking DCC 169 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,35450: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,40579: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,35046: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,49577: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34685: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,56981: Operation 
>> not permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,60293: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,47113: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,45145: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,41735: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,55699: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,34203: Operation 
>> not permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,48248: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34416: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,40586: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,53332: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,36100: Operation not 
>> permitted
>>        1   continue not asking DCC 61 seconds after failure
>>        1   no DCC answer from 209.169.14.26,6277 after 6050 ms
>>        1   send(209.169.14.26,6277) from 0.0.0.0,58334: Operation not 
>> permitted
>>        1   continue not asking DCC 477 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,54614: Operation not 
>> permitted
>>        1   continue not asking DCC 50 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,48586: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,40389: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,58196: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,50135: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,46425: Operation not 
>> permitted
>>        1   continue not asking DCC 219 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,57951: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,45241: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,32802: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,56610: Operation not 
>> permitted
>>        1   continue not asking DCC 346 seconds after failure
>>        1   continue not asking DCC 33 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,35781: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,47628: Operation not 
>> permitted
>>        1   continue not asking DCC 16 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,49065: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,35539: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42447: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,38929: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,44156: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,47977: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,52199: Operation 
>> not permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,52111: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,45874: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42692: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,60871: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,57007: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34174: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,57717: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,56981: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,38951: Operation not 
>> permitted
>>        1   sendto(209.169.14.27,6277) from 0.0.0.0,58819: Operation 
>> not permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,38802: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,50097: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,54544: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,39664: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,44873: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,54422: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,60720: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,37061: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42555: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42974: Operation not 
>> permitted
>>        1   continue not asking DCC 39 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,52199: Operation not 
>> permitted
>>        1   continue not asking DCC 92 seconds after failure
>>        1   send(209.169.14.26,6277) from 0.0.0.0,42815: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,49225: Operation not 
>> permitted
>>        1   send(209.169.14.26,6277) from 0.0.0.0,34203: Operation not 
>> permitted
>>
>>
>> ---------------------- Amavisd-new End -------------------------
>>
>> Can someone shed some light as to what it means or point me in the 
>> right direction to where I can learn.  I've googled amivsd-new and 
>> went to http://www.ijs.si/software/amavisd/ but didn't see anything 
>> that breaks down what I'm seeing.  Sorry for my ignorance but I'm 
>> trying to learn. 
>
> Okay, I've put the port into both udp rules and still I'm getting the 
> log file messages above.  
# Allow incoming UDP ports
*UDP_IN *=

# Allow outgoing UDP ports
# To allow outgoing traceroute add 33434:33523 to this list
*UDP_OUT *=

> Anything else I can do? Am I doing it wrong?  I'm not sure where or 
> how to find my avisd-new config files using putty to deactivate it.  I 
> tried ls -a amisd-new but the file didn't come up.

>
> -----
> No virus found in this message.
> Checked by AVG - www.avg.com
> Version: 10.0.1410 / Virus Database: 1520/3912 - Release Date: 09/22/11
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20110928/70a8bbf1/attachment.html>


More information about the amavis-users mailing list