i recently had a email account stop receiving mail although has no problem sending mail. when veiwing the mail.err and .warn log files i come accross this in both log files for the account. Code: Apr 1 23:52:13 mail procmail[13614]: Suspicious rcfile "/var/www/web2/.procmailrc" this file .procmailrc is no differant in web1,web2,web3,web4,ect.. except for user names and dir of course. here is what i have for the account in question Code: root@mail:/var/www/web2/user/web2_administrator# ls -la total 120 drwxr-xr-x 4 web2_administrator web2 4096 2007-03-26 23:55 . drwxr-xr-x 6 web2_administrator web2 4096 2007-03-20 18:59 .. -rw-r--r-- 1 root root 103 2007-03-26 23:55 .antivirus.rc -rw-r--r-- 1 root root 810 2007-03-26 23:55 .autoresponder.rc -rw-r--r-- 1 root root 67866 2007-03-26 23:55 .html-trap.rc -rw-r--r-- 1 root root 3889 2007-03-26 23:55 .local-rules.rc drwx------ 5 web2_administrator web2 4096 2007-03-24 19:43 Maildir -rw-r--r-- 1 root root 204 2007-03-26 23:55 .mailsize.rc -rw-r--r-- 1 root root 656 2007-03-26 23:55 .quota.rc -rw-r--r-- 1 root root 1154 2007-03-26 23:55 .spamassassin.rc -rw-r--r-- 1 root root 2039 2007-03-26 23:55 .user_prefs -rw-r--r-- 1 root root 32 2007-03-26 23:55 .vacation.msg drwxrwxr-x 2 web2_administrator web2 4096 2007-03-20 18:57 web looking for any help to solve this issue. thanks Ubuntu 6.10 and ISPconfig 2.2.11
Thanks for the time and effort falko. Code: root@mail:/# ls -la /var/www/web2/.procmailrc -rw-r--r-- 1 root root 487 2007-04-02 22:56 /var/www/web2/.procmailrc Code: root@mail:/# ls -la /var total 48 drwxr-xr-x 14 root root 4096 2007-03-20 12:38 . drwxr-xr-x 21 root root 4096 2007-03-21 02:05 .. drwxr-xr-x 2 root root 4096 2007-03-30 06:26 backups drwxr-xr-x 10 root root 4096 2007-03-29 11:45 cache drwxr-xr-x 29 root root 4096 2007-03-29 11:45 lib drwxrwsr-x 2 root staff 4096 2006-10-19 17:49 local drwxrwxrwt 4 root root 80 2007-04-01 14:06 lock drwxr-xr-x 9 root root 4096 2007-04-03 06:25 log drwxrwsr-x 2 root mail 4096 2007-04-02 23:08 mail drwxr-xr-x 2 root root 4096 2007-03-20 09:18 opt drwxr-xr-x 12 root root 440 2007-04-03 06:25 run drwxr-xr-x 4 root root 4096 2007-03-20 12:13 spool drwxrwxrwt 2 root root 4096 2007-03-30 10:17 tmp drwxr-xr-x 11 root root 4096 2007-03-27 02:01 www
Code: root@mail:/home/administrator# ls -la /var/www/web2 total 48 drwxrwxrwx 9 web2_webmaster web2 4096 2007-04-04 12:29 . drwxr-xr-x 11 root root 4096 2007-03-27 02:01 .. drwxr-xr-x 2 web2_webmaster web2 4096 2007-03-20 18:54 cgi-bin -rw------- 1 web2_webmaster web2 24 2007-04-04 12:29 .forward -rw-rw-r-- 1 root web2 115 2007-04-04 04:00 .htpasswd drwxr-xr-x 3 web2_webmaster web2 4096 2007-04-02 00:30 log lrwxrwxrwx 1 root root 41 2007-04-04 12:29 Maildir -> /var/www/web2/user/web2_webmaster/Maildir drwxrwxrwx 2 web2_webmaster web2 4096 2007-03-20 18:54 phptmp -rw-r--r-- 1 root root 473 2007-04-04 12:29 .procmailrc drwx------ 2 10004 web2 4096 2007-03-24 19:43 .spamassassin drwxr-xr-x 2 web2_webmaster web2 4096 2007-03-20 18:54 ssl drwxr-xr-x 6 web2_webmaster web2 4096 2007-04-04 12:24 user lrwxrwxrwx 1 root root 49 2007-04-04 12:29 .vacation.cache -> /var/www/web2/user/web2_webmaster/.vacation.cache drwxrwxr-x 16 web2_webmaster web2 4096 2007-03-31 18:33 web this morning i switched the admin account for this web to another account web2_webmaster instead of web2_administrator to see if anything changed and it did now the web2_administrator account receives email once again but the web2_webmaster account is now rejecting it in the same fashion. ahh i now see after posting. tell me if iam wrong as iam still very green with linux Code: drwx------ 2 10004 web2 4096 2007-03-24 19:43 .spamassassin should actualy be Code: drwx------ 2 web2_webmaster web2 4096 2007-03-24 19:43 .spamassassin the owner is wrong. so in order to fix this i would do this correct? Code: chown web2_webmaster:web2 /var/www/web2/.spamassassin
The permissions of /var/www/web2 are too loose. Please run Code: chmod 755 /var/www/web2 It should work then.
thanks falko, with your help i have got the account working once again. not sure how or why the permisions and user:group were changed. will have to keep a eye on that.
