I have a server set up mostly following the perfect setup for Debian 4. It's been working fine for about 2 months now. Today I suddenly got a heap of spam in my inbox. There were no more headers in the messages indicating that they had been scanned by my server. These headers used to be there but simply vanished. I can't find anything in any logfile that makes sense to me (mail.log, mail.err, mail.info, syslog, messages). It also appears as though freshclam stopped updating after yesterday.. for no apparent reason. I upgraded to the latest version of ispconfig just now, but that doesn't help. I only have a fuzzy understanding of how the whole process goes from mail arriving at my server to it being delivered to the mailboxes. Can anyone tell me where to look for clues?
Hi there, The output of df -h: Code: Filesystem Size Used Avail Use% Mounted on /dev/sda2 365G 14G 334G 4% / tmpfs 991M 0 991M 0% /lib/init/rw udev 10M 44K 10M 1% /dev tmpfs 991M 0 991M 0% /dev/shm /dev/sdb2 184G 6.2G 168G 4% /var/www and for repquota -avug Code: *** Report for user quotas on device /dev/sda2 Block grace time: 7days; Inode grace time: 7days Block limits File limits User used soft hard grace used soft hard grace ---------------------------------------------------------------------- root -- 5495924 0 0 36219 0 0 daemon -- 28 0 0 7 0 0 bin -- 4 0 0 1 0 0 man -- 464 0 0 16 0 0 news -- 4 0 0 1 0 0 www-data -- 1936568 0 0 29152 0 0 nobody -- 32 0 0 2 0 0 administrator -- 144536 0 0 8 0 0 fetchmail -- 4 0 0 1 0 0 bind -- 108 0 0 27 0 0 mysql -- 348548 0 0 1156 0 0 postfix -- 56 0 0 41 0 0 ftp -- 4 0 0 1 0 0 ntp -- 164 0 0 22 0 0 admispconfig -- 2650212 0 0 3265 0 0 web1_ -- 698792 0 0 5763 0 0 web2_aherrie -- 80 0 0 13 0 0 web3_tiny -- 36 0 0 9 0 0 web5_info -- 160 0 0 44 0 0 web5_antoinette -- 36 0 0 9 0 0 web5_alda -- 36 0 0 9 0 0 web4_fabian -- 1241740 0 0 26501 0 0 web1_bas -- 951116 0 0 8734 0 0 web1_jojanneke -- 235048 0 0 2363 0 0 web1_marja -- 36 0 0 9 0 0 web1_ad -- 36 0 0 9 0 0 #501 -- 6012 0 0 543 0 0 #2010 -- 12 0 0 3 0 0 *** Report for group quotas on device /dev/sda2 Block grace time: 7days; Inode grace time: 7days Block limits File limits Group used soft hard grace used soft hard grace ---------------------------------------------------------------------- root -- 5481716 0 0 36085 0 0 daemon -- 20 0 0 5 0 0 bin -- 4 0 0 1 0 0 adm -- 236784 0 0 141 0 0 tty -- 28 0 0 2 0 0 mail -- 144 0 0 9 0 0 news -- 16 0 0 4 0 0 www-data -- 91740 0 0 5230 0 0 src -- 4 0 0 1 0 0 shadow -- 84 0 0 6 0 0 utmp -- 188 0 0 6 0 0 sasl -- 12 0 0 1 0 0 staff -- 6068 0 0 558 0 0 users -- 100 0 0 3 0 0 nogroup -- 12 0 0 3 0 0 crontab -- 40 0 0 3 0 0 administrator -- 144536 0 0 8 0 0 bind -- 200 0 0 30 0 0 mysql -- 125680 0 0 1122 0 0 ssl-cert -- 8 0 0 2 0 0 postfix -- 0 0 0 22 0 0 postdrop -- 32 0 0 9 0 0 ntp -- 164 0 0 22 0 0 admispconfig -- 2650208 0 0 3263 0 0 web1 -- 1885032 8388608 8389632 16878 0 0 web2 -- 261612 8388608 8389632 11352 0 0 web3 -- 1532904 0 0 8427 0 0 web4 -- 1241744 33554432 33555456 26502 0 0 web5 -- 50624 8388608 8389632 4211 0 0 web6 -- 76 8388608 8389632 21 0 0 perl -- 16 16777216 16778240 1 0 0 By the way. I was mistaken. Freshclam is still updating. It's just that mail filtering seems to have stopped working.
Disk space or quota are not the problem. Can you run Code: /home/admispconfig/ispconfig/tools/spamassassin/usr/bin/spamassassin --lint ? What's the output?
Hello Falko, I tried to run the command you posted. The server is busy for about half a second and then returns the prompt to me. There is no output, and I haven't been able to find any errors in the mail logs for the past days (starting when filtering was still working). With kind regards, Bas
This means that the SpamAssassin configuration is correct. Not sure why SpamAssassin isn't working anymore. But you can do this to block spam at Postfix level: http://www.howtoforge.com/block_spam_at_mta_level_postfix
