This morning I received the email “FAILED: exim on myserver.com” and another 5 minutes later “RECOVERED: exim on myserver.com”. The fail happened at 04:33 and the restart happened at 04:38 yet /var/log/mailog shows activity within this timeframe so I am not sure whether this is just a false positive.
Contents of /var/log/mailog at the time of the faiil:
The line spamd: server killed by SIGTERM, shutting down seems to suggest that SpamAssasin may have something to do with the issue so here is the output from spamd - V
Contents of Failure email:
Contents of restart email:
Can anyone offer any assistance?
Contents of /var/log/mailog at the time of the faiil:
Code:
Dec 21 04:33:24 myserver spamd[1245]: spamd: processing message <[email protected]> for cpanel:32001
Dec 21 04:33:25 myserver spamd[1245]: spamd: identified spam (1000.0/5.0) for cpanel:32001 in 1.1 seconds, 834 bytes.
Dec 21 04:33:25 myserver spamd[1245]: spamd: result: Y 999 - GTUBE,NO_RECEIVED,NO_RELAYS scantime=1.1,size=834,user=cpanel,uid=32001,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=43625,mid=<[email protected]>,autolearn=no autolearn_force=no,shortcircuit=no
Dec 21 04:33:25 myserver spamd[16859]: prefork: child states: I
Dec 21 04:33:26 myserver dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__3vxk0gombz4vm624fnoqtkaqbjx4thgfuixgv2mml_z05o...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=13554, secured, session=<+eJhcbIKwQB/AAAB>
Dec 21 04:33:26 myserver dovecot: imap(__cpanel__service__auth__imap__3vxk0gombz4vm624fnoqtkaqbjx4thgfuixgv2mml_z05o53tetgod3uzxj28zzz): Disconnected: Logged out in=11, out=417, bytes=11/417
Dec 21 04:33:29 myserver spamd[16859]: spamd: server killed by SIGTERM, shutting down
Dec 21 04:33:41 myserver spamd[13640]: logger: removing stderr method
Dec 21 04:33:43 myserver spamd[13645]: zoom: able to use 350/350 'body_0' compiled rules (100%)
Dec 21 04:33:44 myserver spamd[13645]: spamd: server started on IO::Socket::INET6 [127.0.0.1]:783 (running version 3.4.0)
Dec 21 04:33:44 myserver spamd[13645]: spamd: server pid: 13645
Dec 21 04:33:44 myserver spamd[13645]: spamd: server successfully spawned child process, pid 13653
Dec 21 04:33:44 myserver spamd[13645]: prefork: child states: I
Code:
SpamAssassin Server version 3.3.1
running on Perl 5.10.1
Dec 22 08:18:50.538 [15808] error: Socket version 1.95 required--this is only version 1.82 at /usr/local/share/perl5/IO/Socket/SSL.pm line 71.
Dec 22 08:18:50.543 [15808] error: Can't locate IO/Socket/IP.pm in @INC (@INC contains: /usr/local/share/perl5 /usr/local/lib64/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /usr/local/share/perl5/IO/Socket/SSL.pm line 85.
with SSL support (IO::Socket::SSL 1.79_01)
with zlib support (Compress::Zlib 2.021)
root@myserver [~]#
Code:
Notification Type: failed
Notification: exim failed @ Sun Dec 21 04:33:23 2014. A restart was attempted automagically.
Service Check Method: [check command]
Number of Restart Attempts: 1
Service Check Raw Output:
Exim is not running
Startup Log:
Starting clamd: [ OK ]
Starting exim: [ OK ]
0 processes (antirelayd) sent signal 9
/usr/local/cpanel/scripts/update_sa_rules: running in background
Log Messages:
2014-12-21 04:30:18 exim 4.84 daemon started: pid=16803, -q1h, listening for SMTP on port 25 (IPv6 and IPv4) port 26 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
Memory Information:
Used: 466MB
Available: 1533MB
Installed: 2000MB
Load Information: 0.06 0.14 0.10
Uptime: 159 days, 2 hours, 35 seconds
IOStat Information:
avg-cpu: %user %nice %system %iowait %steal %idle
2.78 0.34 0.56 1.18 0.02 95.12
Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn
xvdap1 16.14 625.54 211.36 8599217674 2905519320
ChkServd Version: 15.6
Code:
Service: exim
Notification Type: recovered
Notification: exim check was successful after restart.
Reason:
TCP Transaction Log:
<< 220-myserver.com ESMTP Exim 4.84 #2 Sun, 21 Dec 2014 04:38:30 +0000
<<
<<
>> EHLO localhost
<< 250-myserver.com Hello localhost [127.0.0.1]
<<
<<
<<
<<
<<
<<
>> AUTH PLAIN AF9fY3BhbmVsX19zZXJ2aWNlX19hdXRoX19leGltX19ZUjVza0Jic18xclNMNnd5RkI0VXlBYjJvWllINGZXeGJYUlNoTk1wUkxjS2hFbU1hVlRHb1pDeUpfS0JTTjZfAFJCdDluajRlOXFDbkl6U0hReE9OYUNkNFlSQXRMTUUyT3ZsdG8yeDFBUldPeTJqSVZ4Q3hfamlwVHd5MmRaZ1U=
<< 235 Authentication succeeded
>> QUIT
<< 221 myserver.com closing connection
Startup Log:
Starting clamd: [ OK ]
Starting exim: [ OK ]
0 processes (antirelayd) sent signal 9
/usr/local/cpanel/scripts/update_sa_rules: running in background
Log Messages:
2014-12-21 04:33:40 exim 4.84 daemon started: pid=13624, -q1h, listening for SMTP on port 25 (IPv6 and IPv4) port 26 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
2014-12-21 04:30:18 exim 4.84 daemon started: pid=16803, -q1h, listening for SMTP on port 25 (IPv6 and IPv4) port 26 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)
Memory Information:
Used: 813MB
Available: 1187MB
Installed: 2000MB
Load Information: 0.08 0.11 0.10
Uptime: 159 days, 2 hours, 40 seconds
IOStat Information:
avg-cpu: %user %nice %system %iowait %steal %idle
2.78 0.34 0.56 1.18 0.02 95.12
Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn
xvdap1 16.14 625.57 211.35 8599808282 2905532448
ChkServd Version: 15.6
