<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Jakob Curdes wrote:
<blockquote cite="mid:4E7B995E.2080205@info-systems.de" type="cite">Am
22.09.2011 19:57, schrieb Van Isle BC Web Solutions:
<br>
<blockquote type="cite">Hi, I am new to the dedicated server field
and have paid someone to install config server firewall and
mailscanner. I assume that Amavisd-new came with it as I've never
seen it before the install. When I view my log files that are cronned
to me every day I sometimes see this:
<br>
<br>
</blockquote>
I think your amavis installation (or, to be more precise, the
spamassassin process called by amavisd), tries to contact a server of
the DCC clearinghouse network (209.169.14.26 is one of the servers of
this network). This network collects and delivers checksums, i.e.
footprints of known spam messages, and compares the message under test
with these.
<br>
But in this case spamassassin cannot contact the DCC server, probably
due to a firewall issue on your server ("operation not permitted" is a
typical firewall blocking symptom).
<br>
<br>
So the remedy would be to open the firewall for the destination port
6277 UDP. Then the DCC component of spamassassin can contact the
checksum servers. If this is not feasible the DCC check should be
deactivated as it cannot deliver any information without contact to the
network.
<br>
<br>
Hope this helps,
<br>
Jakob Curdes
<br>
<br>
<br>
<blockquote type="cite">--------------------- Amavisd-new Begin
------------------------
<br>
**Unmatched Entries**
<br>
117 no DCC answer from 209.169.14.26,6277 after 0 ms
<br>
14 continue not asking DCC 51 seconds after failure
<br>
5 continue not asking DCC 59 seconds after failure
<br>
3 continue not asking DCC 58 seconds after failure
<br>
3 continue not asking DCC 52 seconds after failure
<br>
2 continue not asking DCC 55 seconds after failure
<br>
2 continue not asking DCC 35 seconds after failure
<br>
2 continue not asking DCC 121 seconds after failure
<br>
2 continue not asking DCC 60 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,60180: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,55950: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,47919: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,43367: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,55917: Operation not
permitted
<br>
1 continue not asking DCC 19 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42632: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,38400: Operation not
permitted
<br>
1 continue not asking DCC 66 seconds after failure
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,55800: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,49771: Operation not
permitted
<br>
1 continue not asking DCC 9 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34031: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,58984: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34332: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,57551: Operation not
permitted
<br>
1 continue not asking DCC 48 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34303: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,60112: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,37749: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,35248: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,58819: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34252: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,35550: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,55637: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,36807: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,48586: Operation not
permitted
<br>
1 continue not asking DCC 359 seconds after failure
<br>
1 continue not asking DCC 56 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,55007: Operation not
permitted
<br>
1 continue not asking DCC 91 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42173: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,54793: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,45839: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,40135: Operation not
permitted
<br>
1 continue not asking DCC 54 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,46720: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,47177: Operation not
permitted
<br>
1 continue not asking DCC 45 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,36067: Operation not
permitted
<br>
1 continue not asking DCC 96 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,49055: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,41689: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,56814: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42955: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,55800: Operation not
permitted
<br>
1 continue not asking DCC 7 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,43964: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,36389: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,53052: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,42555: Operation not
permitted
<br>
1 continue not asking DCC 12 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,36536: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,51395: Operation not
permitted
<br>
1 continue not asking DCC 99 seconds after failure
<br>
1 continue not asking DCC 184 seconds after failure
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,60180: Operation not
permitted
<br>
1 continue not asking DCC 30 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,44054: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,57022: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,45874: Operation not
permitted
<br>
1 continue not asking DCC 49 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,51205: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34801: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,48507: Operation not
permitted
<br>
1 continue not asking DCC 47 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,33585: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,40981: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42401: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,36390: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,48507: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,58009: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,37620: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,52551: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,42815: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,34685: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,41440: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,51793: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,59121: Operation not
permitted
<br>
1 continue not asking DCC 21 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,39096: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,59164: Operation not
permitted
<br>
1 continue not asking DCC 124 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,37377: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,54337: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,59666: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,49452: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,49472: Operation not
permitted
<br>
1 continue not asking DCC 169 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,35450: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,40579: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,35046: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,49577: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34685: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,56981: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,60293: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,47113: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,45145: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,41735: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,55699: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,34203: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,48248: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34416: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,40586: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,53332: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,36100: Operation not
permitted
<br>
1 continue not asking DCC 61 seconds after failure
<br>
1 no DCC answer from 209.169.14.26,6277 after 6050 ms
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,58334: Operation not
permitted
<br>
1 continue not asking DCC 477 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,54614: Operation not
permitted
<br>
1 continue not asking DCC 50 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,48586: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,40389: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,58196: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,50135: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,46425: Operation not
permitted
<br>
1 continue not asking DCC 219 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,57951: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,45241: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,32802: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,56610: Operation not
permitted
<br>
1 continue not asking DCC 346 seconds after failure
<br>
1 continue not asking DCC 33 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,35781: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,47628: Operation not
permitted
<br>
1 continue not asking DCC 16 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,49065: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,35539: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42447: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,38929: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,44156: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,47977: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,52199: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,52111: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,45874: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42692: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,60871: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,57007: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34174: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,57717: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,56981: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,38951: Operation not
permitted
<br>
1 sendto(209.169.14.27,6277) from 0.0.0.0,58819: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,38802: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,50097: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,54544: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,39664: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,44873: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,54422: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,60720: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,37061: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42555: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42974: Operation not
permitted
<br>
1 continue not asking DCC 39 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,52199: Operation not
permitted
<br>
1 continue not asking DCC 92 seconds after failure
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,42815: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,49225: Operation not
permitted
<br>
1 send(209.169.14.26,6277) from 0.0.0.0,34203: Operation not
permitted
<br>
<br>
<br>
---------------------- Amavisd-new End -------------------------
<br>
<br>
Can someone shed some light as to what it means or point me in the
right direction to where I can learn. I've googled amivsd-new and went
to <a class="moz-txt-link-freetext" href="http://www.ijs.si/software/amavisd/">http://www.ijs.si/software/amavisd/</a> but didn't see anything that
breaks down what I'm seeing. Sorry for my ignorance but I'm trying to
learn. </blockquote>
<br>
Okay, I've put the port into both udp rules and still I'm getting the
log file messages above. </blockquote>
# Allow incoming UDP ports<br>
<div
style="padding: 2px; background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><b>UDP_IN
</b>= <input value="20,21,6277" size="14" name="UDP_IN_" type="text"></div>
<br>
# Allow outgoing UDP ports<br>
# To allow outgoing traceroute add 33434:33523 to this list <br>
<div
style="padding: 2px; background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><b>UDP_OUT
</b>= <input value="20,21,113,123,873,6277" size="26" name="UDP_OUT_"
type="text"></div>
<br>
<blockquote cite="mid:4E7B995E.2080205@info-systems.de" type="cite">Anything
else I can do? Am I doing it wrong? I'm not sure where or how to find
my avisd-new config files using putty to deactivate it. I tried ls -a
amisd-new but the file didn't come up. <br>
</blockquote>
<br>
<blockquote cite="mid:4E7B995E.2080205@info-systems.de" type="cite"><br>
-----
<br>
No virus found in this message.
<br>
Checked by AVG - <a class="moz-txt-link-abbreviated" href="http://www.avg.com">www.avg.com</a>
<br>
Version: 10.0.1410 / Virus Database: 1520/3912 - Release Date: 09/22/11
<br>
<br>
<br>
</blockquote>
<br>
</body>
</html>