Exim: Failing every 2-4 hours. What's going on?

[kosmo]

Hi

Exim was usually failing once every 3 months, but since 20 hours I had it failing 6 times. It can't be restarted via WHM, and 3 out of six times it won't restart automatically. I had to telnet and start it via /etc/rc.d/init.d/exim

Anyone knows what's happening here? Service Status no more shows &exim&, ist shows &exim (exim-3.35-0_cpanel_antivirus)& and it is red although I restarted it via telnet and status reports
&exim (pid 29640 29630 27576) is running...&

Any help would be appreciated (as always )

kosmo

 

[feanor]

What is in /var/log/exim_mainlog when it dies.......................
And perhaps /var/log/messages ?

 

[kosmo]

/var/log/exim_mainlog first, /var/log/messages follows:

exim failed @ Mon Apr 8 01:17:51 2002. A restart was attempted automagicly.

Entries at about that time:
2002-04-08 01:17:51 16uULX-0008V9-00 &= [email protected] U=root P=local S=428
2002-04-08 01:17:51 16uULX-0008V9-00 =& rootinfo &rootin[email protected]& D=virtual_user T=virtual_userdelivery
2002-04-08 01:17:51 16uULX-0008V9-00 Completed
2002-04-08 01:17:52 exim 3.35 daemon started: pid=32744, -q1h, listening for SMTP on port 25
2002-04-08 01:17:52 Start queue run: pid=32747

/var/log/messages:
Apr 8 01:17:23 mois PAM_pwdb[31259]: (ftp) session closed for user sofokleo
Apr 8 01:17:48 mois named[14472]: denied update from [80.105.195.27].61386 for &ecothermspa.it&
Apr 8 01:17:52 mois exim: exim shutdown succeeded
Apr 8 01:17:48 mois named[14472]: denied update from [80.105.195.27].61386 for &ecothermspa.it&
Apr 8 01:17:52 mois exim: exim shutdown succeeded
Apr 8 01:17:52 mois exim: exim shutdown failed
Apr 8 01:17:52 mois exim: exim shutdown failed
Apr 8 01:17:52 mois exim: exim startup succeeded
Apr 8 01:17:53 mois proftpd[32753]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session opened.
Apr 8 01:17:53 mois proftpd[32753]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session closed.



exim failed @ Sun Apr 7 19:11:06 2002. A restart was attempted automagicly.
Entries at about that time:
2002-04-07 19:07:06 16uOYf-0003wI-00 &= [email protected] H=vega.shiny.it [194.20.232.7] P=esmtp S=2435 id=200204080206.g3826T831330@
vega.shiny.it
2002-04-07 19:07:06 16uOYf-0003wI-00 =& graphic &mfiamme[email protected]& D=localuser T=local_delivery
2002-04-07 19:07:06 16uOYf-0003wI-00 Completed
2002-04-07 19:11:06 16uOcc-0003wt-00 &= [email protected] U=root P=local S=428
2002-04-07 19:11:06 16uOcc-0003wt-00 =& rootinfo &rootin[email protected]& D=virtual_user T=virtual_userdelivery
2002-04-07 19:11:06 16uOcc-0003wt-00 Completed
2002-04-07 19:11:07 SMTP connection from gateway.webtechnologies.lu (erna.webtechnologies.lu) [80.92.67.10] closed after SIGTERM
2002-04-07 19:11:07 exim 3.35 daemon started: pid=15242, -q1h, listening for SMTP on port 25
2002-04-07 19:11:07 Start queue run: pid=15245

/var/log/messages:
Apr 7 19:07:44 mois named[14472]: denied update from [80.105.195.27].62139 for &ecothermspa.it&
Apr 7 19:07:53 mois named[14472]: denied update from [80.105.195.27].62145 for &ecothermspa.it&
Apr 7 19:11:07 mois exim: exim shutdown succeeded
Apr 7 19:11:07 mois exim: exim shutdown failed
Apr 7 19:11:07 mois exim: exim shutdown failed
Apr 7 19:11:07 mois exim: exim startup succeeded
Apr 7 19:11:08 mois proftpd[15248]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session opened.
Apr 7 19:11:08 mois proftpd[15248]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session closed.


exim failed @ Sun Apr 7 13:18:25 2002. A restart was attempted automagicly.
Entries at about that time:
2002-04-07 13:16:14 rejected MAIL FROM:&[email protected]& H=mail-7.tiscalinet.it (mail.tiscalinet.it) [195.130.225.153] tempora
rily unable to verify sender address (try again later)
2002-04-07 13:18:25 16uJ7J-0002CO-00 &= [email protected] U=root P=local S=428
2002-04-07 13:18:25 16uJ7J-0002CO-00 =& rootinfo &rootin[email protected]& D=virtual_user T=virtual_userdelivery
2002-04-07 13:18:25 16uJ7J-0002CO-00 Completed
2002-04-07 13:18:27 exim 3.35 daemon started: pid=8516, -q1h, listening for SMTP on port 25
2002-04-07 13:18:27 Start queue run: pid=8519

/var/log/messages:
Apr 7 13:18:07 mois named[14472]: USAGE 1018210687 1017955635 CPU=13.01u/9.32s CHILDCPU=0u/0s
Apr 7 13:18:07 mois named[14472]: NSTATS 1018210687 1017955635 0=7 A=16940 CNAME=118 SOA=1708 MX=12464 AAAA=509 SRV=105 38=336 AXFR=6
ANY=126
Apr 7 13:18:07 mois named[14472]: XSTATS 1018210687 1017955635 RR=64 RNXD=0 RFwdR=6 RDupR=0 RFail=0 RFErr=0 RErr=1 RAXFR=6 RLame=0 RO
pts=0 SSysQ=32 SAns=36817 SFwdQ=27 SDupQ=5 SErr=0 RQ=40102 RIQ=0 RFwdQ=27 RDupQ=0 RTCP=4887 SFwdR=6 SFail=27 SFErr=0 SNaAns=24566 SNXD
=1867 RUQ=0 RURQ=0 RUXFR=4 RUUpd=1629
Apr 7 13:18:26 mois exim: exim shutdown succeeded
Apr 7 13:18:27 mois exim: exim shutdown failed
Apr 7 13:18:27 mois exim: exim shutdown failed
Apr 7 13:18:27 mois exim: exim startup succeeded
Apr 7 13:18:27 mois proftpd[8523]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session opened.
Apr 7 13:18:27 mois proftpd[8523]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session closed.


I didn't get any smarter when looking at this.

kosmo

 

[kosmo]

Newest crash: exim failed @ Mon Apr 8 07:15:19 2002. A restart was attempted automagicly.

exim_mainlog:
2002-04-08 07:15:12 16uZv9-0003tQ-00 Completed
2002-04-08 07:15:19 16uZvT-0003vT-00 &= [email protected] U=root P=local S=428
2002-04-08 07:15:19 16uZvT-0003vT-00 =& rootinfo &rootin[email protected]& D=virtual_user T=virtual_userdelivery
2002-04-08 07:15:19 16uZvT-0003vT-00 Completed
2002-04-08 07:15:20 exim 3.35 daemon started: pid=15155, -q1h, listening for SMTP on port 25
2002-04-08 07:15:20 Start queue run: pid=15156

messages
Apr 8 07:14:39 mois named[3863]: denied update from [80.105.195.27].61592 for &ecothermspa.it&
Apr 8 07:15:20 mois exim: exim shutdown succeeded
Apr 8 07:15:20 mois exim: exim shutdown failed
Apr 8 07:15:20 mois exim: exim shutdown failed
Apr 8 07:15:20 mois exim: exim startup succeeded
Apr 8 07:15:21 mois proftpd[15161]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session opened.
Apr 8 07:15:21 mois proftpd[15161]: mois.vosn.net (localhost.localdomain[127.0.0.1]) - FTP session closed.

 

[kosmo]

exim failed @ Sun Apr 7 19:11:06 2002. A restart was attempted automagicly.
exim failed @ Mon Apr 8 01:17:51 2002. A restart was attempted automagicly.
exim failed @ Mon Apr 8 05:19:06 2002. A restart was attempted automagicly.
exim failed @ Mon Apr 8 07:24:06 2002. A restart was attempted automagicly.
exim failed @ Mon Apr 8 08:41:48 2002. A restart was attempted automagicly.

Shall I kill this box? x-----==u=|\

exim failed @ Mon Apr 8 08:59:13 2002. A restart was attempted automagicly. -xxx-----==u=|\

exim failed @ Mon Apr 8 09:33:52 2002. A restart was attempted automagicly. -xx---x--xxx----xxx-----==u=|\


SOMEONE HELP PLEASE!
Doesn't anybody else have this problem? Am I the only one in this galaxy?

 

[bdraco]

What is in /etc/hosts ?

 

[kosmo]

127.0.0.1 localhost.localdomain localhost
209.197.228.41 mois.vosn.net mois


Is this good? Because the other server that has no problems has this one:
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 plum.vosn.net plum localhost.localdomain localhost

 

[moronhead]

Have you tried /usr/sbin/exim -bd -q1h to start it?

Have you got any stale entries in /var/spool/exim/msglog or /var/spool/exim/input?

Have you tried another port for Exim through WHM?

 

[kosmo]

I have followed the advice of Ventures Online Tech Support:

run &killall chkservd&, run /etc/rc.d/init.d/exim stop, let it sit for a few minutes, then run /etc/rc.d/init.d/exim start.

It looks like CPanel thought Exim was dead (when it wasn't) and tried to killall exim and restart it again. But I don't know what the reason for the initial failing is.

It runs now for 1,75 hours without failing. Nice baby.

kosmo