"error while creating mbox spool file"

domenetorget

Active Member
Sep 26, 2004
40
0
156
Hokksund, Norway
We have problems with exim and spamd: both fails constantly.
Exim_paniclog says:
2007-09-12 09:52:38 1IVN1Z-0000dm-E6 failed to open scan directory /var/spool/exim/scan/scan/1IVN1Z-0000dm-E6: Too many links
2007-09-12 09:52:38 1IVN1Z-0000dm-E6 malware acl condition: error while creating mbox spool file
I have tried these scripts:
/scripts/eximup --force
/scripts/perlinstaller --force Mail::SpamAssassin
/scripts/autorepair spamd_dbm_fix
/scripts/fixspamassassinfailedupdate

...still the same result.

Using WHM 11.2.0 cPanel 11.11.0-R16983, CentOS 4.5

Any suggestions?

Thanks in advance!
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,437
31
473
Go on, have a guess
Have you check the available disk space and available inodes on the partition holding /var?

df -h

df -hi
 
Last edited:

domenetorget

Active Member
Sep 26, 2004
40
0
156
Hokksund, Norway
Plenty space...

Filesystem Size Used Avail Use% Mounted on
/dev/sda2 454G 87G 345G 20% /
/dev/sda1 99M 17M 78M 18% /boot
none 2.0G 0 2.0G 0% /dev/shm
/dev/sda5 1012M 44M 917M 5% /tmp
/tmp 1012M 44M 917M 5% /var/tmp

Filesystem Inodes IUsed IFree IUse% Mounted on
/dev/sda2 58M 3.9M 54M 7% /
/dev/sda1 26K 48 26K 1% /boot
none 214K 1 214K 1% /dev/shm
/dev/sda5 129K 743 128K 1% /tmp
/tmp 129K 743 128K 1% /var/tmp
 

domenetorget

Active Member
Sep 26, 2004
40
0
156
Hokksund, Norway
I still get the same messages in exim_paniclog 4 times every second :)eek:) :
2007-09-12 12:50:00 1IVPnE-00085R-86 failed to open scan directory /var/spool/exim/scan/scan/1IVPnE-00085R-86: Too many links
2007-09-12 12:50:00 1IVPnE-00085R-86 spam acl condition: error while creating mbox spool file
2007-09-12 12:50:00 1IVPnE-00085R-86 failed to open scan directory /var/spool/exim/scan/scan/1IVPnE-00085R-86: Too many links
2007-09-12 12:50:00 1IVPnE-00085R-86 malware acl condition: error while creating mbox spool file
2007-09-12 12:50:00 1IVPnE-00085k-2W failed to open scan directory /var/spool/exim/scan/scan/1IVPnE-00085k-2W: Too many links
2007-09-12 12:50:00 1IVPnE-00085k-2W spam acl condition: error while creating mbox spool file
2007-09-12 12:50:00 1IVPnE-00085k-2W failed to open scan directory /var/spool/exim/scan/scan/1IVPnE-00085k-2W: Too many links
2007-09-12 12:50:00 1IVPnE-00085k-2W malware acl condition: error while creating mbox spool file
2007-09-12 12:50:00 1IVPnE-00085c-9K failed to open scan directory /var/spool/exim/scan/scan/1IVPnE-00085c-9K: Too many links
2007-09-12 12:50:00 1IVPnE-00085c-9K spam acl condition: error while creating mbox spool file
2007-09-12 12:50:00 1IVPnE-00085c-9K failed to open scan directory /var/spool/exim/scan/scan/1IVPnE-00085c-9K: Too many links
2007-09-12 12:50:00 1IVPnE-00085c-9K malware acl condition: error while creating mbox spool file
BUT:
Exim keeps on running a while when I disable spamasassin in "Tweak settings" i WHM - AND keep spamasassin in Service Manager.

The Service Status also say "failed" on Exim sometimes even when exim actually is running...
 

meweb

Well-Known Member
Feb 10, 2003
58
0
156
Hello,

Same problem here..

2007-10-06 17:01:41 1IeHiN-0005Nf-UI failed to open scan directory /var/spool/exim/scan/scan/1IeHiN-0005Nf-UI: Too many links
2007-10-06 17:01:41 1IeHiN-0005Nf-UI malware acl condition: error while creating mbox spool file
2007-10-06 17:01:41 1IeHiN-0005Nf-UI H=(<5) [] F=<> temporarily rejected after DATA
2007-10-06 17:01:41 1IeHiN-0005Ng-UO failed to open scan directory /var/spool/exim/scan/scan/1IeHiN-0005Ng-UO: Too many links
2007-10-06 17:01:41 1IeHiN-0005Ng-UO malware acl condition: error while creating mbox spool file
2007-10-06 17:01:41 1IeHiO-0005OA-VQ failed to open scan directory /var/spool/exim/scan/scan/1IeHiO-0005OA-VQ: Too many links
2007-10-06 17:01:41 1IeHiO-0005OA-VQ malware acl condition: error while creating mbox spool file
2007-10-06 17:01:41 1IeHiO-0005OA-VQ H=() [] F=<> temporarily rejected after DATA

Anyone can help with this as soon as possible please.... any help will be appreciated
 

mtindor

Well-Known Member
Sep 14, 2004
1,415
78
178
inside a catfish
cPanel Access Level
Root Administrator
I'm curious...

cd /var/spool/exim/scan
ls -alt|wc

Tell me what LS reveals? Sounds like there are possibly too many directories created. If you've got a real high number (like 32000) then that might be a problem - for a few reasons - (1) filesystem may only support x # of directories, (2) something else going wrong causing too many directories to remain there even after processing.

mike
 

meweb

Well-Known Member
Feb 10, 2003
58
0
156
Solution...

I got the solution...

Following error occurred due to scan directory crossed the size limit

2007-10-06 05:05:50 1Ie6Xe-00042f-9B failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xe-00042f-9B: Too many links
2007-10-06 05:05:50 1Ie6Xe-00042t-5y failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xe-00042t-5y: Too many links
2007-10-06 05:05:50 1Ie6Xe-00042t-5y failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xe-00042t-5y: Too many links
2007-10-06 05:05:51 1Ie6Xf-00043H-9Q failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xf-00043H-9Q: Too many links
2007-10-06 05:05:51 1Ie6Xf-00043H-9Q failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xf-00043H-9Q: Too many links

Solution:

Empty the folder /var/spool/exim/scan You can empty the large folder using following command.

ls -l | xargs rm -rf

Thanks,
Regards,
Meweb ;)
 
Last edited:

vandalonline

Registered
Oct 15, 2007
3
0
51
That was my problem and I had over 32000 directories, it appears the system is not deleting them after proccessing. Is there a way to solve that ?
 

D_Huzaifa

Registered
Feb 28, 2007
3
0
151
Hello,


I got the solution...

Following error occurred due to scan directory crossed the size limit

2007-10-06 05:05:50 1Ie6Xe-00042f-9B failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xe-00042f-9B: Too many links
2007-10-06 05:05:50 1Ie6Xe-00042t-5y failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xe-00042t-5y: Too many links
2007-10-06 05:05:50 1Ie6Xe-00042t-5y failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xe-00042t-5y: Too many links
2007-10-06 05:05:51 1Ie6Xf-00043H-9Q failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xf-00043H-9Q: Too many links
2007-10-06 05:05:51 1Ie6Xf-00043H-9Q failed to open scan directory /var/spool/exim/scan/scan/1Ie6Xf-00043H-9Q: Too many links

Solution:

Empty the folder /var/spool/exim/scan You can empty the large folder using following command.

ls -l | xargs rm -rf

Thanks,
Regards,
Meweb ;)

Hats Off to mtindor and meweb !! The solution worked and at last I'm out of the loop after 5 days of frustrating investigation.

Thanks,
With Salaams,
Huzaifa ;)
 

Skie

Active Member
Mar 27, 2003
39
0
156
Strange. I've had this problem happen to 2 different servers just days apart from each other. meweb's solution works great. Any ideas why this is happening?