mail messages not getting to mail que

[noimad1]

I am having a problem with mail on one of our servers. Around 5pm tonight all mail stopped working. People are sending mail and it says it goes through but is not recieved by the other person.

Same goes for incomming e-mail to the server.

I changed my antivirus.exim file with incorrect syntax so that I should be able to see mail fill up in the que.

Nothing is ever getting to the mail que?

Any ideas? Tried restarting exim and such with no avail.

[nickn]

As with most problems, we need to see logs of errors..

What's /var/log/exim_mainlog say? what about rejectlog and paniclog?

[noimad1]

Originally posted by snickn
As with most problems, we need to see logs of errors..

What's /var/log/exim_mainlog say? what about rejectlog and paniclog?

Sorry, should have posted them:

all that's in my panic_log:
2004-03-14 10:50:01 1B2YoL-000856-4i Rewrite of nobody@h1.ourdomain.com yielded unqualified address "Info"
2004-03-14 22:44:18 1B2jxa-0004en-8c Rewrite of nobody@h1.ourdomain.com yielded unqualified address "Info"

Maillog:

2004-03-15 00:03:55 1B2lCd-0003pY-3T <= <> U=mailnull P=MailScanner S=1061
2004-03-15 00:04:26 1B2lD7-0003q9-AY <= elliehanski_3576814@check1check.com H=(c-24-20-221-171.client.comcast.net) [24.20.221.171] P=smtp S=3977 id=jj87mgt$6ja$26-0y1d972z1x@4mi.d4n3
2004-03-15 00:04:30 1B2lDC-0003qE-5R <= <> U=mailnull P=MailScanner S=1102
2004-03-15 00:04:54 1B2lDZ-0003qb-Va <= alsdkf@newsletter.freebiegazette.com H=(hap.freebiegazette.com) [216.64.221.7] P=smtp S=2466 id=1079331346.1075@green3
2004-03-15 00:04:55 1B2lDb-0003qj-Q9 <= <> U=mailnull P=MailScanner S=1090


And the reject log...this one has som strange errors:

2004-03-14 10:53:16 H=(pcp03847868pcs.westk01.tn.comcast.net) [68.34.216.250] F=<wxtlm@5r56t.com> temporarily rejected RCPT <$
2004-03-14 10:53:38 H=(me-wtrvll-cmts4e-230.agstme.adelphia.net) [68.171.194.230] sender verify defer for <wxtlm@5r56t.com>: $
2004-03-14 10:53:38 H=(me-wtrvll-cmts4e-230.agstme.adelphia.net) [68.171.194.230] F=<wxtlm@5r56t.com> temporarily rejected RC$
2004-03-14 10:53:50 H=(cdm-68-226-224-236.stvl.cox-internet.com) [68.226.224.236] sender verify defer for <wxtlm@5r56t.com>: $
2004-03-14 10:53:50 H=(cdm-68-226-224-236.stvl.cox-internet.com) [68.226.224.236] F=<wxtlm@5r56t.com> temporarily rejected RC$
2004-03-14 10:54:15 H=(207.44.172.103) [218.79.157.41] sender verify defer for <wxtlm@5r56t.com>: host lookup did not complete
2004-03-14 10:54:15 H=(207.44.172.103) [218.79.157.41] F=<wxtlm@5r56t.com> temporarily rejected RCPT <moderators@1200s.com>: $
2004-03-14 10:57:05 H=(host110-59.pool80116.interbusiness.it) [80.116.59.110] sender verify defer for <olavlvivfjfy@i-connect$
2004-03-14 10:57:05 H=(host110-59.pool80116.interbusiness.it) [80.116.59.110] F=<olavlvivfjfy@i-connect.ru> temporarily rejec$
2004-03-14 11:09:13 H=(61-224-178-181.hinet-ip.hinet.net) [61.224.178.181] sender verify defer for <TrentonO0@23w4d.com>: hos$
2004-03-14 11:09:13 H=(61-224-178-181.hinet-ip.hinet.net) [61.224.178.181] F=<TrentonO0@23w4d.com> temporarily rejected RCPT $
2004-03-14 11:09:35 H=(pd9544570.dip.t-dialin.net) [217.84.69.112] sender verify defer for <TrentonO0@23w4d.com>: host lookup$
2004-03-14 11:09:35 H=(pd9544570.dip.t-dialin.net) [217.84.69.112] F=<TrentonO0@23w4d.com> temporarily rejecte

and of course a bunch of the second message from where I edited the antivirus file.

[noimad1]

Also, here is our mail log. The strange thing is it looks like users are able to connect to the mail server and the mail server is accepting them...just never being sent out...the messages are just disappearing:

Mar 15 00:48:19 h1 cpanelpop[26747]: Connection from host=66.76.148.175 to ip=207.44.172.103
Mar 15 00:48:19 h1 cpanelpop[26747]: Login host=66.76.148.175 ip=66.76.148.175 user=andy@wiredranch.com realuser=andy@wiredranch.com
Mar 15 00:48:19 h1 cpanelpop[26747]: Session Closed host=66.76.148.175 ip=66.76.148.175 user=andy@wiredranch.com realuser=andy@wiredranch.com totalxfer=188
Mar 15 00:48:28 h1 cpanelpop[26752]: Connection from host=68.121.72.201 to ip=207.44.172.103
Mar 15 00:48:28 h1 cpanelpop[26752]: Login host=68.121.72.201 ip=68.121.72.201 user=admin@atelcommunications.com realuser=admin@atelcommunications.com
Mar 15 00:48:28 h1 cpanelpop[26752]: Session Closed host=68.121.72.201 ip=68.121.72.201 user=admin@atelcommunications.com realuser=admin@atelcommunications.com totalxfer=1954
Mar 15 00:48:28 h1 cpanelpop[26753]: Connection from host=68.121.72.201 to ip=207.44.172.103
Mar 15 00:48:28 h1 cpanelpop[26753]: Login host=68.121.72.201 ip=68.121.72.201 user=lharden@atelcommunications.com realuser=lharden@atelcommunications.com
Mar 15 00:48:29 h1 cpanelpop[26753]: Session Closed host=68.121.72.201 ip=68.121.72.201 user=lharden@atelcommunications.com realuser=lharden@atelcommunications.com totalxfer=1026
Mar 15 00:48:29 h1 cpanelpop[26754]: Connection from host=68.121.72.201 to ip=207.44.172.103
Mar 15 00:48:29 h1 cpanelpop[26754]: Login host=68.121.72.201 ip=68.121.72.201 user=sales@atelcommunications.com realuser=sales@atelcommunications.com
Mar 15 00:48:30 h1 cpanelpop[26754]: Session Closed host=68.121.72.201 ip=68.121.72.201 user=sales@atelcommunications.com realuser=sales@atelcommunications.com totalxfer=580
Mar 15 00:48:44 h1 MailScanner[4265]: New Batch: Scanning 1 messages, 35653 bytes
Mar 15 00:48:44 h1 MailScanner[4265]: Spam Checks: Found 1 spam messages
Mar 15 00:48:44 h1 MailScanner[4265]: Virus and Content Scanning: Starting
Mar 15 00:48:44 h1 MailScanner[4257]: New Batch: Scanning 1 messages, 1276 bytes
Mar 15 00:48:44 h1 MailScanner[4257]: Spam Checks: Found 1 spam messages
Mar 15 00:48:45 h1 MailScanner[4257]: Virus and Content Scanning: Starting

[noimad1]

Originally posted by Bailey
seen this on a few boxes, MailScanner is your culprit.

Bailey

Any ideas on how to fix?

[noimad1]

Originally posted by noimad1
Any ideas on how to fix?

Ok, I tried to re-install mailscanner and that didnt' do anything.

I killed all the mailscanner processes, then mail started to finally show up in our mail que!

I uninstalled mailscanner completely. I guess I'll try to mess around with installing it again tomorrow.

I really like mailscanner, do you/anyone have any ideas why it would crap out all of a sudden?