Amavisd-new Error Information
Jakob Curdes
jc at info-systems.de
Thu Sep 22 22:23:58 CEST 2011
Am 22.09.2011 19:57, schrieb Van Isle BC Web Solutions:
> Hi, I am new to the dedicated server field and have paid someone to
> install config server firewall and mailscanner. I assume that
> Amavisd-new came with it as I've never seen it before the install.
> When I view my log files that are cronned to me every day I sometimes
> see this:
>
I think your amavis installation (or, to be more precise, the
spamassassin process called by amavisd), tries to contact a server of
the DCC clearinghouse network (209.169.14.26 is one of the servers of
this network). This network collects and delivers checksums, i.e.
footprints of known spam messages, and compares the message under test
with these.
But in this case spamassassin cannot contact the DCC server, probably
due to a firewall issue on your server ("operation not permitted" is a
typical firewall blocking symptom).
So the remedy would be to open the firewall for the destination port
6277 UDP. Then the DCC component of spamassassin can contact the
checksum servers. If this is not feasible the DCC check should be
deactivated as it cannot deliver any information without contact to the
network.
Hope this helps,
Jakob Curdes
> --------------------- Amavisd-new Begin ------------------------
> **Unmatched Entries**
> 117 no DCC answer from 209.169.14.26,6277 after 0 ms
> 14 continue not asking DCC 51 seconds after failure
> 5 continue not asking DCC 59 seconds after failure
> 3 continue not asking DCC 58 seconds after failure
> 3 continue not asking DCC 52 seconds after failure
> 2 continue not asking DCC 55 seconds after failure
> 2 continue not asking DCC 35 seconds after failure
> 2 continue not asking DCC 121 seconds after failure
> 2 continue not asking DCC 60 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,60180: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,55950: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,47919: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,43367: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,55917: Operation not
> permitted
> 1 continue not asking DCC 19 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,42632: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,38400: Operation not
> permitted
> 1 continue not asking DCC 66 seconds after failure
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,55800: Operation
> not permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,49771: Operation not
> permitted
> 1 continue not asking DCC 9 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,34031: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,58984: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,34332: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,57551: Operation not
> permitted
> 1 continue not asking DCC 48 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,34303: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,60112: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,37749: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,35248: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,58819: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,34252: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,35550: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,55637: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,36807: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,48586: Operation
> not permitted
> 1 continue not asking DCC 359 seconds after failure
> 1 continue not asking DCC 56 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,55007: Operation not
> permitted
> 1 continue not asking DCC 91 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,42173: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,54793: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,45839: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,40135: Operation not
> permitted
> 1 continue not asking DCC 54 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,46720: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,47177: Operation not
> permitted
> 1 continue not asking DCC 45 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,36067: Operation not
> permitted
> 1 continue not asking DCC 96 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,49055: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,41689: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,56814: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,42955: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,55800: Operation not
> permitted
> 1 continue not asking DCC 7 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,43964: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,36389: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,53052: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,42555: Operation
> not permitted
> 1 continue not asking DCC 12 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,36536: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,51395: Operation not
> permitted
> 1 continue not asking DCC 99 seconds after failure
> 1 continue not asking DCC 184 seconds after failure
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,60180: Operation
> not permitted
> 1 continue not asking DCC 30 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,44054: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,57022: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,45874: Operation
> not permitted
> 1 continue not asking DCC 49 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,51205: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,34801: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,48507: Operation
> not permitted
> 1 continue not asking DCC 47 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,33585: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,40981: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,42401: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,36390: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,48507: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,58009: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,37620: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,52551: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,42815: Operation
> not permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,34685: Operation
> not permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,41440: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,51793: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,59121: Operation not
> permitted
> 1 continue not asking DCC 21 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,39096: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,59164: Operation not
> permitted
> 1 continue not asking DCC 124 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,37377: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,54337: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,59666: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,49452: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,49472: Operation not
> permitted
> 1 continue not asking DCC 169 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,35450: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,40579: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,35046: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,49577: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,34685: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,56981: Operation
> not permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,60293: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,47113: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,45145: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,41735: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,55699: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,34203: Operation
> not permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,48248: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,34416: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,40586: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,53332: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,36100: Operation not
> permitted
> 1 continue not asking DCC 61 seconds after failure
> 1 no DCC answer from 209.169.14.26,6277 after 6050 ms
> 1 send(209.169.14.26,6277) from 0.0.0.0,58334: Operation not
> permitted
> 1 continue not asking DCC 477 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,54614: Operation not
> permitted
> 1 continue not asking DCC 50 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,48586: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,40389: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,58196: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,50135: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,46425: Operation not
> permitted
> 1 continue not asking DCC 219 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,57951: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,45241: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,32802: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,56610: Operation not
> permitted
> 1 continue not asking DCC 346 seconds after failure
> 1 continue not asking DCC 33 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,35781: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,47628: Operation not
> permitted
> 1 continue not asking DCC 16 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,49065: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,35539: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,42447: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,38929: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,44156: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,47977: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,52199: Operation
> not permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,52111: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,45874: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,42692: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,60871: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,57007: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,34174: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,57717: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,56981: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,38951: Operation not
> permitted
> 1 sendto(209.169.14.27,6277) from 0.0.0.0,58819: Operation
> not permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,38802: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,50097: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,54544: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,39664: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,44873: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,54422: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,60720: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,37061: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,42555: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,42974: Operation not
> permitted
> 1 continue not asking DCC 39 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,52199: Operation not
> permitted
> 1 continue not asking DCC 92 seconds after failure
> 1 send(209.169.14.26,6277) from 0.0.0.0,42815: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,49225: Operation not
> permitted
> 1 send(209.169.14.26,6277) from 0.0.0.0,34203: Operation not
> permitted
>
>
> ---------------------- Amavisd-new End -------------------------
>
> Can someone shed some light as to what it means or point me in the
> right direction to where I can learn. I've googled amivsd-new and
> went to http://www.ijs.si/software/amavisd/ but didn't see anything
> that breaks down what I'm seeing. Sorry for my ignorance but I'm
> trying to learn.
More information about the amavis-users
mailing list