Mail Queue issues (no sending or receiving) - HELP!

coolemail · **Posted:** Mon May 17, 2010 10:36 am

I hope that someone can help on this. A recent yum upgrade caused some problems. Most were sorted, but Dr Web was not working. After a number of troubleshooting things, Parallels suggested that we delete and reinstall Dr Web - http://forum.parallels.com/showthread.php?t=98451 refers.

We deleted Dr Web but I was worried that the auto installer would reinstall the whole Plesk and that we would lose all config/clients/domains so we did not do part two of their last suggested thread.

Now we do not seem to be receiving or sending emails

maillog is full of things like:
/usr/local/psa/var/log/maillog:May 17 15:24:20 plesk2 qmail: 1274106260.652982 warning: trouble injecting bounce message, will try later

and an example of a failure:

Quote:

May 17 14:51:13 plesk2 qmail: 1274104273.026206 starting delivery 2603: msg 14814573 to remote mytest@hotmail.com
May 17 14:51:13 plesk2 qmail: 1274104273.026237 status: local 0/10 remote 1/20
May 17 14:51:13 plesk2 qmail-remote-handlers[8037]: Handlers Filter before-remote for qmail started ...
May 17 14:51:13 plesk2 qmail-remote-handlers[8037]: from=me@mydomain.com
May 17 14:51:13 plesk2 qmail-remote-handlers[8037]: to=mytest@hotmail.com
May 17 14:51:13 plesk2 qmail-remote-handlers[8037]: hook_dir = '/usr/local/psa/handlers/before-remote'
May 17 14:51:13 plesk2 qmail-remote-handlers[8037]: Unable to stat entry '/usr/local/psa/handlers/info/20-drweb-lNayym/executable' or it is not link: No such file or directory
May 17 14:51:13 plesk2 qmail-remote-handlers[8037]: call_handlers: stop call handlers from dir '/usr/local/psa/handlers/before-remote/sender/me@mydomain.com'
May 17 14:51:13 plesk2 qmail: 1274104273.027910 delivery 2603: failure: handlers_permanentfail/
May 17 14:51:13 plesk2 qmail: 1274104273.028030 status: local 0/10 remote 0/20

HELP!! I've rebooted the server but I think this must be as a result of what we did with deleting the Dr Web.

I've tried to post more on the Parallels forum above but everything has to be moderated and it has been stuck waiting for that since this morning. This forum seems to be so much more responsive - I hope that you can help

.

If it helps, # qmhandle.pl -l |less gives 80 messages with bounces

Quote:

Total messages: 86
Messages with local recipients: 1
Messages with remote recipients: 5
Messages with bounces: 80
Messages in preprocess: 0

Many thanks, as ever, to all in advance

faris · **Joined:** Thu Dec 09, 2004 11:19 am **Posts:** 1843

This is probably being caused by Plesk thinking Dr Web is installed, but it is not.

What about installing Dr Web from the RPM (there should be one in the atomic repo [careful with versions], and if not you may have a copy on your system somewhere from the initial install, or you can extract it from the big install bundle from Parallels) or using the Auto-updated within Plesk itself (which should have no tick for Dr Web) and ticking it?

I know what you mean about using the auto-installer! You never know what it might do.

BruceLee · **Posted:** Mon May 17, 2010 11:17 am

I'm not sure (i never used dr.web) but maybe some dr.web stuff left over in /etc/xinetd.d/smtp_psa?

coolemail · **Posted:** Mon May 17, 2010 11:28 am

I'm trying first to install it through the Plesk Control Panel - I hadn't thought of that, thank you faris.

That is not appearing to work:

Quote:

[root@plesk2 ~]# service drwebd status
Dr.Web daemon not started

Can you tell me how to get it from the atomic repo? I'm using Plesk 9.2.3 on CentOS 5:
[root@plesk2 ~]# uname -a
Linux plesk2.mydomain.co.uk 2.6.32.8-1.art.x86_64 #1 SMP Sat Feb 13 19:13:41 EST 2010 x86_64 x86_64 x86_64 GNU/Linux
[root@plesk2 ~]#

and in response to brucelee:

Code:

[root@plesk2 ~]# cat /etc/xinetd.d/smtp_psa
service smtp
{
        socket_type     = stream
        protocol        = tcp
        wait            = no
        disable         = no
        user            = root
        instances       = UNLIMITED
        env             = SMTPAUTH=1
        server          = /var/qmail/bin/tcp-env
        server_args     = -Rt0 /usr/sbin/rblsmtpd -r sbl-xbl.spamhaus.org -r bl.spamcop.net /var/qmail/bin/relaylock  /var/qmail/bin/qmail-smtpd /var/qmail/bin/smtp_auth /var/qmail/bin/true /var/qmail/bin/cmd5checkpw /var/qmail/bin/true
}
[root@plesk2 ~]# 

All help is most appreciated.

faris · **Joined:** Thu Dec 09, 2004 11:19 am **Posts:** 1843

unfortunately http://www.atomicorp.com/channels/plesk/ seems to be empty.

Don't forget to look in your /root/psa/ directory in case there's a copy of the rpm in there. it is usually /root/psa. might be something else/somewhere else.

I'm really sorry but I have a really bad headache and I'm going to have to shut down now. I know someone else out there will be able to help better than me anyway.

Faris.

coolemail · **Posted:** Mon May 17, 2010 12:26 pm

thanks faris,

I have

Code:

[root@plesk2 ~]# ls -l /root/psa/PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb
total 15416
-rw-r--r-- 1 root root     1254 May 17 16:15 drweb-base-5.0.1-0.i386.rpm
-rw-r--r-- 1 root root 12347925 May 17 16:15 drweb-bases-5.0.1-0.i386.rpm
-rw-r--r-- 1 root root  1711872 May 17 16:15 drweb-common-5.0.1-0plesk.i386.rpm
-rw-r--r-- 1 root root  1263771 May 17 16:15 drweb-daemon-5.0.1-0plesk.i386.rpm
-rw-r--r-- 1 root root   108382 May 17 16:15 drweb-updater-5.0.1-0plesk.i386.rpm
-rw-r--r-- 1 root root   307227 May 17 16:15 psa-drweb-configurator-9.2.3-cos5.build92091016.19.x86_64.rpm
[root@plesk2 ~]# 

so can someone tell me how I would re-install it from there? Do I simply run the various commands for those 5 files? But if I did that, would I just go back to where we were earlier? I guess that would be better than what we have right now as there are no emails being received or sent at present.

Or if I simply run /usr/local/psa/admin/sbin/autoinstaller can someone reassure me that I will have the option of installing only the Dr.Web and will not lose all configs/clients/domains (and all mail in the queue!).

THANK YOU to all, as ever, for helping us sort this.

BruceLee · **Posted:** Mon May 17, 2010 12:38 pm

due to response of the system like "dr.web dameon is not started" it seems that it's not fully uninstalled.
But thats just a guess.
Have you tried uninstalling with rpm like mentioned here?

http://forum.parallels.com/showthread.php?t=90097

coolemail · **Posted:** Mon May 17, 2010 1:15 pm

I agree that it looked like it was not fully uninstalled because when I ran the following, it showed only an upgrade available:

Quote:

[root@plesk2 ~]# /usr/local/psa/admin/sbin/autoinstaller --select-release-current --show-components
Downloading the file products.inf3: 100% done.
Downloading the file plesk.inf3: 10%..21%..31%..41%..52%..62%..71%..83%..95%..100% done.
Downloading the file ppsmbe.inf3: 27%..42%..58%..100% done.
Downloading the file sitebuilder.inf3: 22%..35%..48%..99%..100% done.
Downloading the file setemplates.inf3: 87%..100% done.
Checking for installed packages...
Downloading the file PSA_9.2.3/plesk-9.2.3-cos5-x86_64.inf3: 10%..20%..30%..43%..50%..61%..70%..80%..93%..100% done.
Downloading the file PSA_9.2.3/plesk-patches-9.2.3-cos5-x86_64.inf3: 100% done.
Detecting installed product components.
...
drweb [upgrade] - Dr. Web antivirus
[root@plesk2 ~]#

When I ran the update, it appeared to complete even though I was still unable to start it but at least the emails began flowing through again.

Then I uninstalled as you found and then ran the autoinstaller again which has failed:

Quote:

[root@plesk2 /]# rpm -qa | grep "drweb" | xargs rpm -e
Cleaning up init scripts...
Shutting down Dr. Web daemon...
warning: /etc/drweb/drweb32.ini saved as /etc/drweb/drweb32.ini.rpmsave
warning: /etc/drweb/users.conf saved as /etc/drweb/users.conf.rpmsave
Trying to Reconfigure watchdog... [root@plesk2 /]#
[root@plesk2 /]#

Quote:

[root@plesk2 ~]# /usr/local/psa/admin/sbin/autoinstaller --select-release-current --show-components
...
drweb [install] - Dr. Web antivirus
[root@plesk2 ~]#

but then the install failed:

Quote:

[root@plesk2 /]# /usr/local/psa/admin/sbin/autoinstaller --select-release-current --install-component drweb
Downloading the file products.inf3: 100% done.
Downloading the file plesk.inf3: 10%..20%..33%..41%..53%..65%..75%..84%..95%..100% done.
Downloading the file ppsmbe.inf3: 12%..27%..42%..73%..88%..100% done.
Downloading the file sitebuilder.inf3: 22%..35%..48%..87%..99%..100% done.
Downloading the file setemplates.inf3: 87%..100% done.
Checking for installed packages...
Downloading the file PSA_9.2.3/plesk-9.2.3-cos5-x86_64.inf3: 10%..20%..30%..40%..50%..62%..70%..80%..91%..100% done.
Downloading the file PSA_9.2.3/plesk-patches-9.2.3-cos5-x86_64.inf3: 100% done.
Detecting installed product components.
Retrieving information about the installed packages...
Downloading the file PSA_9.2.3/update-rpm-CentOS-5-x86_64/update-9.2.3-cos5-x86_64.hdr.gz: 10%..20%..30%..40%..50%..60%..70%..80%..90%..100% done.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/build-9.2.3-cos5-x86_64.hdr.gz: 10%..20%..30%..40%..50%..60%..70%..80%..90%..100% done.
Downloading the file PSA_9.2.3/thirdparty-rpm-CentOS-5-x86_64/thirdparty-9.2.3-cos5-x86_64.hdr.gz: 11%..22%..31%..52%..66%..78%..90%..100% done.
Determining the packages that need to be installed.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb/drweb-base-5.0.1-0.i386.rpm: skipped because of md5 checksum match.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb/drweb-bases-5.0.1-0.i386.rpm: skipped because of md5 checksum match.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb/drweb-common-5.0.1-0plesk.i386.rpm: skipped because of md5 checksum match.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb/drweb-daemon-5.0.1-0plesk.i386.rpm: skipped because of md5 checksum match.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb/drweb-updater-5.0.1-0plesk.i386.rpm: skipped because of md5 checksum match.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb/psa-drweb-configurator-9.2.3-cos5.build92091016.19.x86_64.rpm: skipped because of md5 checksum match.
Starting installation of packages
Installing the package drweb-base-5.0.1-0.i386
Installing the package drweb-common-5.0.1-0plesk.i386
Installing the package drweb-bases-5.0.1-0.i386
Installing the package drweb-daemon-5.0.1-0plesk.i386
Setting up init scripts...
Starting Dr. Web daemon...
/etc/init.d/drwebd: line 32: 13998 Killed $PROGRAM
/opt/drweb/drwebd: Unknown file type (passed)
error: %trigger(gradm-2.1.14-4.el5.art.x86_64) scriptlet failed, exit status 137
ERROR: An error occurred during installation of packages.
Attention! Your software might be inoperable.
Please, contact product technical support.
[root@plesk2 /]#

and now when I send emails, I get this again:

Quote:

May 17 18:09:20 plesk2 qmail: 1274116160.271698 delivery 439: failure: handlers_permanentfail/

HELP!

EDIT:
I rebooted the server with no success. I think the clue lies in the following, so can someone guide me on what change I now need to qmail's remote handling instructions as Dr.Web is now totally removed:

Quote:

May 17 18:22:26 plesk2 qmail-remote-handlers[5369]: hook_dir = '/usr/local/psa/handlers/before-remote'
May 17 18:22:26 plesk2 qmail-remote-handlers[5369]: Unable to stat entry '/usr/local/psa/handlers/info/20-drweb-t1hSBa/executable' or it is not link: No such file or directory
May 17 18:22:26 plesk2 qmail-remote-handlers[5369]: call_handlers: stop call handlers from dir '/usr/local/psa/handlers/before-remote/sender/me@mydomain.com'
May 17 18:22:26 plesk2 qmail: 1274116946.022284 delivery 4: failure: handlers_permanentfail/

EDIT 2 There is loads of drweb mention in the handlers:

Quote:

[root@plesk2 ~]# ls /usr/local/psa/handlers/info/
05-grey-SFxXqw 10-spam-fmBN8F 10-spam-oNLVML 10-spam-YGqIas 20-drweb-8APWv9 20-drweb-d3lRft 20-drweb-HNg9jS 20-drweb-m6Ekh3 20-drweb-R6to0b 20-drweb-VIEcq3
10-spam-02i77P 10-spam-FqwUER 10-spam-OsVDPb 10-spam-YhyWgx 20-drweb-8bi2dW 20-drweb-D5Bw2b 20-drweb-hnhKzU 20-drweb-m6l1WS 20-drweb-rBckVf 20-drweb-vLZkJM
10-spam-0ERo14 10-spam-FVCIYo 10-spam-OxAjI9 10-spam-yifC7b 20-drweb-8cB2GN 20-drweb-D7SmmH 20-drweb-HRN4Z0 20-drweb-M8ec4r 20-drweb-RBTnTj 20-drweb-Vn1G0X
10-spam-0UETL6 10-spam-g2uDHj 10-spam-p5NOaY 10-spam-ykoBcb 20-drweb-8EBBOn 20-drweb-DcIWAU 20-drweb-hSSL7K 20-drweb-m8jCAG 20-drweb-RBvakY 20-drweb-VSvqmN
10-spam-1dMDdj 10-spam-G5tkOm 10-spam-P7BhJq 10-spam-YNQfnj 20-drweb-8EqURt 20-drweb-DEdVd5 20-drweb-hu713a 20-drweb-mBCzBF 20-drweb-rc21cT 20-drweb-VW7Sfw
10-spam-1EubC7 10-spam-GfDVpX 10-spam-p8rLmf 10-spam-yNXHfG 20-drweb-8HCDMu 20-drweb-deX8KF 20-drweb-HULqWo 20-drweb-MC6LQr 20-drweb-rfIZBC 20-drweb-vY3GTT
10-spam-1PWURd 10-spam-ggwn66 10-spam-paXaOi 10-spam-yUB1ok 20-drweb-8hnp64 20-drweb-DgAtzN 20-drweb-HuMrJY 20-drweb-mcRxoa 20-drweb-rgrPNy 20-drweb-w5cKE9
10-spam-1v4q8Y 10-spam-GH53ng 10-spam-pbH1I3 10-spam-Z7eCxd 20-drweb-8kc681 20-drweb-DjOsDp 20-drweb-hXhOD1 20-drweb-Me4dFp 20-drweb-RJcrxU 20-drweb-w9e2nv
10-spam-1VmoKF 10-spam-ghlFxC 10-spam-PCwB8v 10-spam-ZAYTFO 20-drweb-8mRL8I 20-drweb-DmXT9j 20-drweb-hYntyy 20-drweb-MeIiup 20-drweb-RKTYDb 20-drweb-wA1wjx
10-spam-20bIfZ 10-spam-GIZLCb 10-spam-pH67uf 10-spam-zCCEvP 20-drweb-8RezZv 20-drweb-dn63Js 20-drweb-hz3isp 20-drweb-mFNZuX 20-drweb-Rmhxjc 20-drweb-Wa6VwE
10-spam-2BKlFc 10-spam-Gm0pRC 10-spam-poShfu 10-spam-zcLmzn 20-drweb-8vOOv0 20-drweb-DOXUXJ 20-drweb-I2OmOc 20-drweb-MgbhS2 20-drweb-RNIQ4T 20-drweb-WAzd66
10-spam-2K15hZ 10-spam-Goc1Sp 10-spam-pSE7Qn 10-spam-zDIutE 20-drweb-8wjztx 20-drweb-DpmKup 20-drweb-i2SYbK 20-drweb-mighuk 20-drweb-ROCWUE 20-drweb-WBLvSB
10-spam-2QgVRr 10-spam-gsoVv0 10-spam-PVanYn 10-spam-zHUGOX 20-drweb-8x3E6S 20-drweb-ds0BEL 20-drweb-iBDuzO 20-drweb-MPWk2d 20-drweb-rqVHoc 20-drweb-WdsFtr
10-spam-2xZmqK 10-spam-H1RJCc 10-spam-PYqBal 10-spam-ZOyXQy 20-drweb-8YWfSu 20-drweb-Dt0Yuv 20-drweb-ibkIsC 20-drweb-MQ8X9r 20-drweb-RTpwoM 20-drweb-wFtqIs
10-spam-3BG3vJ 10-spam-hjD6nq 10-spam-Q7kZIU 10-spam-ZpimNh 20-drweb-96gLYK 20-drweb-DTVtZD 20-drweb-iBYv0y 20-drweb-MsVtxI 20-drweb-RwE9Ie 20-drweb-wFzyKs
10-spam-3bTAa1 10-spam-HoCaRc 10-spam-qeL8OU 10-spam-zstCXW 20-drweb-9OFctm 20-drweb-DYpID6 20-drweb-IC8P9M 20-drweb-mWJMLi 20-drweb-rYGwvr 20-drweb-wGbtSr
10-spam-3jq3jr 10-spam-HTHNti 10-spam-QHZyM9 10-spam-zu3EUx 20-drweb-9sinyk 20-drweb-dYqKqH 20-drweb-IdxXYM 20-drweb-Mxd0rF 20-drweb-s2omWs 20-drweb-WgGFLh
10-spam-3tDh73 10-spam-HWyVGK 10-spam-qJ4Vc1 10-spam-zypm1n 20-drweb-A0IwoM 20-drweb-Dz3mz5 20-drweb-IhL4kD 20-drweb-mxmgih 20-drweb-s6LFMA 20-drweb-WhgV79
10-spam-3TpLB8 10-spam-hy68G0 10-spam-QRNLGC 10-spf-NJsmMS 20-drweb-a7bjHy 20-drweb-dzqI56 20-drweb-Ihlpre 20-drweb-n6wP7S 20-drweb-s6Mmvp 20-drweb-wI2CLu
10-spam-41wFeX 10-spam-HzgTT5 10-spam-QrsvCJ 20-drweb-028mbj 20-drweb-a7RZUU 20-drweb-e2IJ6Y 20-drweb-iKihOQ 20-drweb-N6ykCs 20-drweb-S75VHS 20-drweb-wImEYm
10-spam-4AHwQW 10-spam-HzHgWS 10-spam-qycpxo 20-drweb-0cKjdI 20-drweb-A8cfb1 20-drweb-E3nDyr 20-drweb-Ior5gk 20-drweb-NaHjhq 20-drweb-s9S3bs 20-drweb-WLR2yU
10-spam-4THJEs 10-spam-Ib0LG9 10-spam-r2sjSr 20-drweb-0ErgMB 20-drweb-A9WEua 20-drweb-e3Uv4H 20-drweb-IPId6z 20-drweb-ngiQAZ 20-drweb-SbCNwj 20-drweb-WmexQ6
10-spam-5C5Oq2 10-spam-IdISVQ 10-spam-R2wb6C 20-drweb-0KFFy4 20-drweb-AAw10A 20-drweb-E6f7Mq 20-drweb-IplvZC 20-drweb-nHt6Wf 20-drweb-sgn8Xj 20-drweb-wPaUBU
10-spam-5gM8cq 10-spam-IgX6Fr 10-spam-RChxGW 20-drweb-0mFqX7 20-drweb-af5l1T 20-drweb-E9PtNv 20-drweb-itjRKS 20-drweb-niHFZO 20-drweb-sJ0i38 20-drweb-wT6Tpb
10-spam-5omvV5 10-spam-IIUpcH 10-spam-rF2d5o 20-drweb-0mvpnS 20-drweb-aFfmw9 20-drweb-E9TSsm 20-drweb-IU39qY 20-drweb-NoJ9e6 20-drweb-sNxses 20-drweb-wuUAqp
10-spam-6dNF6q 10-spam-IKlxTV 10-spam-rFUGnJ 20-drweb-0nWPZT 20-drweb-afXITR 20-drweb-EByDGj 20-drweb-IvSHSg 20-drweb-nr5Wrw 20-drweb-Sq09C4 20-drweb-wVCRQw
10-spam-6ep5t1 10-spam-ipa4U7 10-spam-Ri61Vk 20-drweb-0oAlpr 20-drweb-ai3Elt 20-drweb-edjrmZ 20-drweb-Iwpg6W 20-drweb-nSqPZ2 20-drweb-sr7Lbs 20-drweb-wW3QgF
10-spam-6KrXFS 10-spam-IRPaiU 10-spam-RiL5Te 20-drweb-0R4z3l 20-drweb-aIASgF 20-drweb-eDKU2J 20-drweb-J1G5fx 20-drweb-Nu2YkY 20-drweb-sSqfEr 20-drweb-WWvCyk
10-spam-6RU30s 10-spam-j3yxt5 10-spam-RkHAPO 20-drweb-0SBPXv 20-drweb-AIZ7Uu 20-drweb-eGAjau 20-drweb-j1VfeK 20-drweb-NVInGg 20-drweb-StvX83 20-drweb-wZNQZe
10-spam-6xQMTR 10-spam-jaWvaF 10-spam-rPv0AW 20-drweb-0tVhTq 20-drweb-AlU4ds 20-drweb-eHBTcN 20-drweb-J4nBkT 20-drweb-NwBKoc 20-drweb-SwWBDX 20-drweb-x9Pn2o
10-spam-6ZFKFA 10-spam-JCCpdr 10-spam-rqFxF8 20-drweb-12cJtV 20-drweb-asFz9J 20-drweb-eHOegr 20-drweb-j5sfsu 20-drweb-NxBBPo 20-drweb-t1hSBa 20-drweb-xaiknU
10-spam-6ZLbuZ 10-spam-jdWfVw 10-spam-rt5fAA 20-drweb-15CHSX 20-drweb-ATGZN9 20-drweb-eINKEY 20-drweb-j7qsba 20-drweb-nyoEWX 20-drweb-T1J9GO 20-drweb-xaiMfW
10-spam-7eKxWY 10-spam-JGsYVC 10-spam-s3BpXS 20-drweb-16yHzi 20-drweb-atssC1 20-drweb-ekcTjZ 20-drweb-J7yDge 20-drweb-nyr8ly 20-drweb-t56DsW 20-drweb-XDItOo
10-spam-7fPucZ 10-spam-jKQt8F 10-spam-S7ClRc 20-drweb-1aFhr4 20-drweb-atTv5t 20-drweb-eKHylj 20-drweb-ja3Fgb 20-drweb-NYt2bu 20-drweb-T6d1Uw 20-drweb-XF3Uta
10-spam-7PCd0h 10-spam-jLLDD0 10-spam-S9k65p 20-drweb-1Cuezf 20-drweb-aU8p8N 20-drweb-eLAp4j 20-drweb-JaBo5M 20-drweb-nZRQ9W 20-drweb-tCnHua 20-drweb-XfwNOD
10-spam-8C8wcS 10-spam-JQ8oNz 10-spam-SMdj3G 20-drweb-1ePbFk 20-drweb-awfIHo 20-drweb-em0SuV 20-drweb-JEWouQ 20-drweb-o0xMG3 20-drweb-Tep5xU 20-drweb-xipDcl
10-spam-8ghSp3 10-spam-JsVEAn 10-spam-SoHXlb 20-drweb-1iloeY 20-drweb-b6s0kv 20-drweb-Em8b2R 20-drweb-JgHeRh 20-drweb-o1kPDj 20-drweb-tF0nZw 20-drweb-Xl0Dyf
10-spam-8OE8e6 10-spam-jUgyWS 10-spam-SsYwdz 20-drweb-1Nje1V 20-drweb-b9K440 20-drweb-enWFJG 20-drweb-jIglat 20-drweb-O9OtDk 20-drweb-TfLq8L 20-drweb-XLjnDT
10-spam-8yfwfD 10-spam-jurG8S 10-spam-sueqE3 20-drweb-1xr8Oj 20-drweb-BAKvWD 20-drweb-EpZQFX 20-drweb-jKiFTX 20-drweb-O9yJZv 20-drweb-tGQF0h 20-drweb-xlKHRz
10-spam-9Ap5mE 10-spam-jveRi7 10-spam-t0W7LB 20-drweb-21DRkC 20-drweb-bbrbwJ 20-drweb-esR89Z 20-drweb-JLCfaH 20-drweb-OaJW4b 20-drweb-th0voP 20-drweb-xPedqG
10-spam-9dK306 10-spam-JvkB2j 10-spam-t1KoCH 20-drweb-2l1fiN 20-drweb-bc4K3f 20-drweb-etrKxV 20-drweb-JNubYb 20-drweb-obZ58I 20-drweb-Tj8VWu 20-drweb-XrTsAl
10-spam-9GTMT7 10-spam-K7XfTj 10-spam-t53laL 20-drweb-2NT01e 20-drweb-bCASPz 20-drweb-EuhJqW 20-drweb-jTxUcJ 20-drweb-ODhzl8 20-drweb-TJtwc8 20-drweb-xtbpeg
10-spam-ACuTbg 10-spam-Kanr5F 10-spam-t6f4h7 20-drweb-2RZOpL 20-drweb-BCH86a 20-drweb-EVYnsO 20-drweb-juPfh9 20-drweb-oDSxbd 20-drweb-Tkjos7 20-drweb-xvER8y
10-spam-Ahx9RB 10-spam-kiKQZH 10-spam-t6wLz8 20-drweb-2SWIND 20-drweb-bECAcr 20-drweb-eWAzAa 20-drweb-jvYQvk 20-drweb-OeADWe 20-drweb-TKjVeh 20-drweb-xvZt5c
10-spam-aIP6qh 10-spam-KvBPbO 10-spam-T8Pa6P 20-drweb-2XzkX5 20-drweb-bFfVpB 20-drweb-EWzWpH 20-drweb-jWRpkA 20-drweb-oFWHYV 20-drweb-TmVhbo 20-drweb-xypYjU
10-spam-Aj9fe2 10-spam-kZjgd6 10-spam-T9SKSU 20-drweb-3FIpgG 20-drweb-bJID4A 20-drweb-EXyhV5 20-drweb-kaBN0s 20-drweb-oH3Rwn 20-drweb-tnd3qc 20-drweb-xYtLZB
10-spam-AKRA5i 10-spam-l1qDA0 10-spam-tfpUgs 20-drweb-3jSpoR 20-drweb-bLFMH7 20-drweb-ezFt3Q 20-drweb-kaUSvV 20-drweb-oHVtEM 20-drweb-TNE9hs 20-drweb-xzb9Ni
10-spam-aOd6b8 10-spam-l7IIbJ 10-spam-THwdQ3 20-drweb-3kElK2 20-drweb-bmbkXa 20-drweb-f2fANS 20-drweb-kbAB1w 20-drweb-OIdfaZ 20-drweb-TprRpZ 20-drweb-Y1D35b
10-spam-aPBBY8 10-spam-lDqt2z 10-spam-tJKhg8 20-drweb-3kjoY7 20-drweb-bNf3GW 20-drweb-f2PogJ 20-drweb-kBn64f 20-drweb-oiE6wR 20-drweb-TPZxEd 20-drweb-Y5CKit
10-spam-AzAA6G 10-spam-LLZkHy 10-spam-Tp1Lky 20-drweb-3PZEgB 20-drweb-bNJN5Y 20-drweb-FBAAK6 20-drweb-KCtVHN 20-drweb-oQNQAe 20-drweb-tS0Qqk 20-drweb-y5peVI
10-spam-BbAofh 10-spam-lMPXgR 10-spam-TPFVwG 20-drweb-3S4BoM 20-drweb-BOR8WV 20-drweb-fd57e2 20-drweb-kcYnbW 20-drweb-OsOlzj 20-drweb-TSqCtF 20-drweb-Y68pvy
10-spam-bIjZAQ 10-spam-LWXTmR 10-spam-txf1N6 20-drweb-46IJzT 20-drweb-bRUbUM 20-drweb-FDfhTG 20-drweb-KDAdeo 20-drweb-otcgFX 20-drweb-Ttl1RI 20-drweb-YcF4sN
10-spam-bmZn7H 10-spam-lZpuKu 10-spam-TXRgFi 20-drweb-4bbRxz 20-drweb-BrXAi7 20-drweb-fLWRAX 20-drweb-KeINdH 20-drweb-oTwdq0 20-drweb-TvEuhV 20-drweb-yJHUlm
10-spam-BRkv6a 10-spam-MEZhFH 10-spam-ufY1X6 20-drweb-4dGCBu 20-drweb-Bshc2R 20-drweb-FMiX9r 20-drweb-kF3GWd 20-drweb-OZT94C 20-drweb-TwzAzx 20-drweb-ylYK8t
10-spam-bTb1OO 10-spam-MHL7rh 10-spam-uPjOaS 20-drweb-4KKA38 20-drweb-bw9ak7 20-drweb-FNWhpf 20-drweb-Kj5rEE 20-drweb-p2yqhD 20-drweb-tZEZam 20-drweb-yN4Euq
10-spam-C0Iyzr 10-spam-mjimRi 10-spam-UtwfSo 20-drweb-4KKhtB 20-drweb-bWEzFS 20-drweb-foF17w 20-drweb-klGcnP 20-drweb-P3GDTN 20-drweb-TzTWoY 20-drweb-yqqOJk
10-spam-c4cWTi 10-spam-mjySQA 10-spam-UtZrB3 20-drweb-4mdIgm 20-drweb-bXMRnZ 20-drweb-foNdVa 20-drweb-kM1yCF 20-drweb-p4elBa 20-drweb-U1ya8V 20-drweb-YvctDb
10-spam-c5vHfQ 10-spam-MOp00z 10-spam-uWA0cz 20-drweb-4PTytg 20-drweb-byaw5S 20-drweb-fQhuQh 20-drweb-KMnxqK 20-drweb-p6lAAB 20-drweb-u7vhSq 20-drweb-ywDpKr
10-spam-cBlt7N 10-spam-mop5hf 10-spam-Vcq30D 20-drweb-4XBkaU 20-drweb-bzl4qs 20-drweb-fUsFse 20-drweb-kQftf8 20-drweb-P9EdWF 20-drweb-U9aafT 20-drweb-yxllsJ
10-spam-cCgOfL 10-spam-mrsjCP 10-spam-vFKQJX 20-drweb-4XcpSp 20-drweb-C0zrRJ 20-drweb-fxvaEv 20-drweb-KquR69 20-drweb-PGIisq 20-drweb-uAtWgc 20-drweb-yXy6Iz
10-spam-CE9iRW 10-spam-mtPq6r 10-spam-vFOXAn 20-drweb-4xDaer 20-drweb-cAal14 20-drweb-fZiRTB 20-drweb-kua32K 20-drweb-pI5P18 20-drweb-uBa0Zv 20-drweb-yykBpQ
10-spam-CGIqeL 10-spam-MYwRma 10-spam-vihFin 20-drweb-4Z7rON 20-drweb-CBftol 20-drweb-G1S3z2 20-drweb-KuMdvF 20-drweb-PP4iTa 20-drweb-UfccTR 20-drweb-Yywv3m
10-spam-CXjneN 10-spam-myXmdy 10-spam-VjtRj4 20-drweb-4ZWDS4 20-drweb-CCaznn 20-drweb-g4AMVv 20-drweb-KWVjN0 20-drweb-PqGRAj 20-drweb-UfXuLr 20-drweb-Z2lEAk
10-spam-D0BM1r 10-spam-MZVRnJ 10-spam-Vk7kXe 20-drweb-53OsiI 20-drweb-CChezd 20-drweb-G6KSsb 20-drweb-l3DA4m 20-drweb-PVazIT 20-drweb-UHWsdF 20-drweb-z2oBG4
10-spam-d780FE 10-spam-n3AIDO 10-spam-VKAOIa 20-drweb-55OVuM 20-drweb-ccZCYg 20-drweb-gA92Nz 20-drweb-LDTz7k 20-drweb-pvOZ4g 20-drweb-uHXcMh 20-drweb-Z7Se2x
10-spam-DaYaOn 10-spam-N3xYRV 10-spam-vkn2Qt 20-drweb-5BDLmh 20-drweb-cdiV71 20-drweb-GAU4zs 20-drweb-lEvuCH 20-drweb-py6rha 20-drweb-UiFmgd 20-drweb-z7XBcc
10-spam-DDbcJZ 10-spam-N9lxnN 10-spam-VLxfvP 20-drweb-5bS0rd 20-drweb-CEIWMT 20-drweb-genV5X 20-drweb-LEz5kX 20-drweb-pyeAEz 20-drweb-UInMZA 20-drweb-ZC221b
10-spam-DdinWx 10-spam-ndA6eQ 10-spam-Vw5h5l 20-drweb-5mM0pR 20-drweb-CES15R 20-drweb-ggwzEE 20-drweb-lgO4cJ 20-drweb-q1rEqL 20-drweb-Ukaj2R 20-drweb-zgaW7V
10-spam-dDx4gJ 10-spam-NE17WG 10-spam-VYttCj 20-drweb-5NJ56S 20-drweb-CF852N 20-drweb-GgxMoN 20-drweb-LhkJ1y 20-drweb-Q29v0v 20-drweb-unFWA3 20-drweb-ZgWSqu
10-spam-DEdZN4 10-spam-NFMK86 10-spam-wf63PW 20-drweb-5nWnvZ 20-drweb-cguqzd 20-drweb-ghHLzK 20-drweb-LIvTUc 20-drweb-q3PvpO 20-drweb-UNZjRw 20-drweb-ZI9gGj
10-spam-deVS74 10-spam-NFRwyy 10-spam-wGlrTY 20-drweb-5P9qaq 20-drweb-cIUn5y 20-drweb-GJyG67 20-drweb-Lju45c 20-drweb-Q3Zw19 20-drweb-Upr4To 20-drweb-zifd2r
10-spam-DGnYO5 10-spam-nh6SBq 10-spam-wLWFbf 20-drweb-5pg9eQ 20-drweb-CiWbXq 20-drweb-GlU161 20-drweb-lmzIPB 20-drweb-qdD7fl 20-drweb-uPu9BS 20-drweb-zInVOo
10-spam-dGw7UQ 10-spam-NhW7YJ 10-spam-wwSype 20-drweb-5SZBu1 20-drweb-cj1Ru3 20-drweb-GlW6qF 20-drweb-LolkEm 20-drweb-qdDmFm 20-drweb-UQsKnQ 20-drweb-ZjqKBI
10-spam-dHlE2D 10-spam-NM8tM9 10-spam-XAerYs 20-drweb-5TGHi8 20-drweb-CJUb4g 20-drweb-Gso8sl 20-drweb-lp6Izq 20-drweb-qdGyzH 20-drweb-USO1BZ 20-drweb-ZKrrec
10-spam-Di26w8 10-spam-nmdU8A 10-spam-xajaJL 20-drweb-5TrSsA 20-drweb-CmrASk 20-drweb-GvAVwr 20-drweb-lpwnye 20-drweb-QhXpzF 20-drweb-ut9OtG 20-drweb-ZMOPsu
10-spam-dKkILP 10-spam-NPMfdH 10-spam-xcr75Q 20-drweb-5vK4oY 20-drweb-CQkArG 20-drweb-GVFYo5 20-drweb-LQbD7I 20-drweb-Qmv5Za 20-drweb-UtiMS0 20-drweb-ZN5KPV
10-spam-DrW9oF 10-spam-nppCuA 10-spam-xEKLYd 20-drweb-6bHNGb 20-drweb-cr8aLf 20-drweb-gZWfx4 20-drweb-lrk0c4 20-drweb-QMvaPf 20-drweb-uV4W52 20-drweb-ZVs3St
10-spam-Ds5fk6 10-spam-Nqkimx 10-spam-xER9xV 20-drweb-6BkAeF 20-drweb-cRyXQv 20-drweb-h00rML 20-drweb-LS1S3U 20-drweb-qNXR51 20-drweb-uxf3nM 20-drweb-ZyxFjw
10-spam-ECqdZB 10-spam-nYAjk1 10-spam-XGRdOW 20-drweb-6IxTN7 20-drweb-CUA4tE 20-drweb-H3GJ3g 20-drweb-LSdXG1 20-drweb-qTOdYc 20-drweb-UxzjkA 90-autoresponder-0DzPg6
10-spam-EdVLZq 10-spam-NYPXt2 10-spam-xHavgJ 20-drweb-6oOH6Q 20-drweb-CV2m2Q 20-drweb-h8EAom 20-drweb-Ltmkpz 20-drweb-qvWuZN 20-drweb-UZvO6J 90-autoresponder-8RAHzr
10-spam-elvvuM 10-spam-NzGRRO 10-spam-XhXaAI 20-drweb-78xseT 20-drweb-cVFBxy 20-drweb-HBE1Fy 20-drweb-LvsLcb 20-drweb-QwfD23 20-drweb-V7gz4j 90-autoresponder-kAmBES
10-spam-eutidx 10-spam-O02uQI 10-spam-xiLkLS 20-drweb-79WIXP 20-drweb-cWMr52 20-drweb-hcohqF 20-drweb-lWiOfL 20-drweb-qWM8wo 20-drweb-v7yChL 90-autoresponder-MM7s5E
10-spam-EUUzQF 10-spam-O0k1q2 10-spam-xJ9ZxT 20-drweb-7MvijP 20-drweb-CwPL05 20-drweb-hDE4Qv 20-drweb-lz7BhS 20-drweb-QwWyMz 20-drweb-Vd1RzK 90-autoresponder-QahNI0
10-spam-Eyo4Y9 10-spam-O9oQmH 10-spam-xkOlN9 20-drweb-7PM6Ab 20-drweb-Cwy5NF 20-drweb-hJfilM 20-drweb-m2p4zh 20-drweb-qy72Qv 20-drweb-vd6Ivm 90-autoresponder-QyBH7d
10-spam-F77RvD 10-spam-ogR7qq 10-spam-XKtmlg 20-drweb-7PNejx 20-drweb-Cz6rdf 20-drweb-Hjmn6N 20-drweb-M3IVFJ 20-drweb-r13Zje 20-drweb-VDCgO8
10-spam-FJ9R44 10-spam-oKTo6i 10-spam-xmGR2P 20-drweb-7qvukx 20-drweb-cz9TpI 20-drweb-Hjr5dX 20-drweb-M4Txu6 20-drweb-r3EIik 20-drweb-VEocgz
10-spam-fJfyVv 10-spam-OM0ylp 10-spam-XMlgfq 20-drweb-88ZzO4 20-drweb-D17aRE 20-drweb-hmyMhl 20-drweb-M4Wn6e 20-drweb-r5qE8t 20-drweb-VhTXay
[root@plesk2 ~]#

and looking in one of the individual sender files, I see a drweb mention:

Quote:

[root@plesk2 ~]# ls /usr/local/psa/handlers/before-remote/sender/me@mydomain.com
20-drweb-t1hSBa
[root@plesk2 ~]#

How can I get rid of all this Dr.Web stuff? It is really frustrating!

coolemail · **Posted:** Tue May 18, 2010 1:47 am

Please Help friends. I have logged a support ticket with Plesk to look at it as well and hopefully fix it, but would be grateful for any further advice as we have no incoming or outgoing mail.

I found http://kb.parallels.com/6410 and so did:

[root@plesk2 ~]# /usr/local/psa/admin/sbin/mailmng --stop-service
[root@plesk2 ~]# /usr/local/psa/admin/sbin/mchk --with-spam
==> Checking for: mail_spam_restore... ok
==> Checking for: mailsrv_conf_init... ok
==> Checking for: mail_mailbox_restore... ok
==> Checking for: mailsrv_entities_dump... ok
==> Checking for: mail_admin_aliases... ok
==> Checking for: mail_auth_dump... ok
==> Checking for: mailman_lists_dump... ok
==> Checking for: mail_responder_restore... ok
==> Checking for: mail_drweb_restore... not exsists
==> Checking for: mail_kav_restore... not exsists
==> Checking for: mail_spf_restore... ok
==> Checking for: mail_dk_restore... ok
==> Checking for: mail_grey_restore... ok
[root@plesk2 ~]# /usr/local/psa/admin/sbin/mailmng --start-service

but mail is still not working, and in the Plesk CP, Apache is also now not working and will not restart saying:
Error: Unable to make action: Unable to
manage service by websrvmng: websrvmng: Service /etc/init.d/httpd failed
to restart ('--start', 'web')

coolemail · **Posted:** Tue May 18, 2010 8:39 am

Plesk are escalating this to a higher level. Currently drweb has been removed (but obviously not fully) but emails are not going. Do any of you have a view on the following:

Some emails are going:

Quote:

May 18 12:07:53 plesk2 qmail: 1274180873.709947 new msg 14814490
May 18 12:07:53 plesk2 qmail: 1274180873.709983 info msg 14814490: bytes 5645 from <external@gmail.com> qp 6153 uid 2020
May 18 12:07:53 plesk2 qmail: 1274180873.713291 starting delivery 37: msg 14814490 to local 52-emailaddress@hosteddomain.com
May 18 12:07:53 plesk2 qmail: 1274180873.713319 status: local 1/10 remote 0/20
May 18 12:07:53 plesk2 qmail-local-handlers[6155]: Handlers Filter before-local for qmail started ...
May 18 12:07:53 plesk2 qmail-local-handlers[6155]: from=external@gmail.com
May 18 12:07:53 plesk2 qmail-local-handlers[6155]: to=emailaddress@highchemafrica.com
May 18 12:07:53 plesk2 qmail-local-handlers[6155]: mailbox: /var/qmail/mailnames/hosteddomain.com/emailaddress
May 18 12:07:53 plesk2 qmail-local-handlers[6155]: hook_dir = '/usr/local/psa/handlers/before-local'
May 18 12:07:53 plesk2 qmail-local-handlers[6155]: recipient[3] = 'emailaddress@hosteddomain.com'
May 18 12:07:53 plesk2 qmail-local-handlers[6155]: handlers dir = '/usr/local/psa/handlers/before-local/recipient/emailaddress@hosteddomain.com'
May 18 12:07:53 plesk2 qmail: 1274180873.788547 delivery 37: success: did_0+0+2/
May 18 12:07:53 plesk2 qmail: 1274180873.788670 status: local 0/10 remote 0/20
May 18 12:07:53 plesk2 qmail: 1274180873.788697 end msg 14814490

and /usr/local/psa/handlers/before-local/recipient/ does not have emailaddress@hosteddomain.com in there.

But most are not and I think it because of the massive number of drweb files in the various sub-folders of /usr/local/psa/handlers

Just a thought, but might it work if we did:

Code:

rpm -qa | grep "drweb" | xargs rpm -e
/usr/local/psa/admin/sbin/autoinstaller --select-release-current --show-components
/usr/local/psa/admin/sbin/autoinstaller --select-release-current --install-component drweb

to delete and re-install drweb. Then rebuild the mail handlers totally using the instructions from http://kb.parallels.com/6410 as follows:

Quote:

Additional information
Parallels Plesk Panel 9.x provides ability to configure and put custom mail handlers: PPP 9.2 for Linux/Unix:: Modules API Reference
These handlers do not correspond to records in Plesk database, so mchk does not reconfigure mail handlers automatically.

Currently it is advised to recreate mail handlers according to the instructions above.
Additional information
Alternatively you may recreate all mail handlers.

Note that all custom handlers will be lost. They need to be recreated anew.

1. Stop mail service.

~# /usr/local/psa/admin/sbin/mailmng --stop-service

2. Backup old handlers

~# mkdir /root/temp
~# cp -a /usr/local/psa/handlers/before-* /root/temp/
~# cp -a /usr/local/psa/handlers/info /root/temp/

3. Delete all mail handlers:

~# rm -rf /usr/local/psa/handlers/before-*/*
~# rm -rf /usr/local/psa/handlers/info/*

4. Run utility mchk to recreate mail handlers:

~# /usr/local/psa/admin/sbin/mchk --with-spam

5. Start mail service:

~# /usr/local/psa/admin/sbin/mailmng --start-service

Any comments by anyone? I only suggest that because there are so many handlers for both incoming and outgoing mail and so I feel that a complete rebuild of the handlers may be necessary. Can someone tell me what the effect of that would be?

Many thanks, as ever, in advance.

faris · **Joined:** Thu Dec 09, 2004 11:19 am **Posts:** 1843

Remember that if you are using ASL, psmon / ossec will autostart stopped services, which can cause problems if you do something that expects a service to be stopped when you do it!

If Parallels are on the case it might be best to leave well alone. If you alter the config/try something else, the engineers involved may get confused.

I just wish they would get on with it and fix it for you. I feel your pain. Next time try 4PSA maybe? (unless you have a support agreement with Parallels). They tend to just get on with it and don't stop until it is fixed.

Faris.

coolemail · **Posted:** Tue May 18, 2010 1:18 pm

Thank you for telling me about 4PSA and I'll bear that in mind for future as I do not have a support agreement but just paid for a one-off incident on this one. In fairness to Parallels, they were keeping me updated. They had to escalate within the company three times. As I speak, emails are now coming back in and out but with Dr.Web turned off. They said:

Quote:

The problem is that Dr.Web daemon is killed upon start without even loading libraries:

[root@plesk2 drweb]# pwd
/opt/drweb
[root@plesk2 drweb]# strace -Ff -v -s128 ./drwebd.real
execve("./drwebd.real", ["./drwebd.real"], ["MANPATH=//man:", "HOSTNAME=plesk2.expat-email.co.uk", "TERM=screen", "SHELL=/bin/bash", "HISTSIZE=1000", "KDE_NO_IPV6=1", "SSH_CLIENT=64.131.90.27 35962 22", "QTDIR=/usr/lib64/qt-3.3", "QTINC=/usr/lib64/qt-3.3/include", "SSH_TTY=/dev/pts/1", "USER=root", "LS_COLORS=no=00:fi=00:di=01;34:ln=01;36:pi=40;33:so=01;35:bd=40;33;01:cd=40;33;01:or=01;05;37;41:mi=01;05;37;41:ex=01;32:*.cmd=0", "KDEDIR=/usr", "MAIL=/var/spool/mail/root", "PATH=/usr/lib64/qt-3.3/bin:/usr/kerberos/sbin:/usr/kerberos/bin://sbin://bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin", "INPUTRC=/etc/inputrc", "PWD=/opt/drweb", "LANG=en_US.UTF-8", "KDE_IS_PRELINKED=1", "SSH_ASKPASS=/usr/libexec/openssh/gnome-ssh-askpass", "SHLVL=1", "HOME=/root", "LOGNAME=root", "QTLIB=/usr/lib64/qt-3.3/lib", "CVS_RSH=ssh", "SSH_CONNECTION=64.131.90.27 35962 82.197.79.4 22", "LESSOPEN=|/usr/bin/lesspipe.sh %s", "G_BROKEN_FILENAMES=1", "_=/usr/bin/strace", "OLDPWD=/root/parallels/PSA_9.2.3/dist-rpm-CentOS-5-x86_64/opt/drweb"] <unfinished ...>
+++ killed by SIGKILL +++

Such problem may be caused by either GRSecurity (which appears to be compiled into the kernel, and though 'gradm' reports that it is disabled, messages are still reported from it).

I would suggest to reboot with kernel provided by CentOS instead of AtomicRocketTurtle and check whether the problem still persists. You may also try to boot with kernel that was installed on the sever previously.

For now, I have removed all drweb mail handlers to avoid loosing mail. They can be restored after Dr.Web is fully and properly installed with this command:

/usr/local/psa/admin/sbin/mchk --with-spam

Please reboot the server with older kernel and let us know when we can log in and continue investigation.

biggles · **Posted:** Wed May 19, 2010 1:50 am

My personal opinion is to skip DrWeb altogether. qmail-scanner with ClamAV does at least as good of a job, and is much easier to troubleshoot.

scott · **Posted:** Wed May 19, 2010 8:40 am

Id also add that we make a lot of clamav sigs based on web malware. So for web hosting environments, clamav is more relevant than other AV scanners.

coolemail · **Posted:** Wed May 19, 2010 9:16 am

Many thanks to you both.

As posted above, they want us to do a reboot with the CentOS kernel. If I go for the option above (and very happy to do that), the concern would be to ensure that everything regarding Dr.Web is removed, especially when

Code:

rpm -qa | grep "drweb" | xargs rpm -e

did not do it. I have asked Plesk on the support incident that i set up:

"I have had issues before with Dr.Web after an update to the Plesk (when we went to 9.2.3). If we were to scrap Dr.Web altogether and go for qmail-scanner and ClamAV instead (which would save us the annual Dr.Web licence as well), can you confirm that what you have done would not affect that? My only concern is that when we tried to delete Dr.Web altogether with
rpm -qa | grep "drweb" | xargs rpm -e
that then caused the problem because of the handlers that you have managed to isolate. If we decide to go that route, is there a way to ensure that EVERYTHING relating to Dr.Web has gone? I'm scared at the moment that if we were to another yum upgrade on the server, it might cause the same problem again!"

Do you have any views/advice on that. I just cannot go through the nightmare we had when the handlers were preventing emails being sent or received.

Is installation/config of qmail-scanner and ClamAV for emails easy? Can you tell me how?

Mail Queue issues (no sending or receiving) - HELP!

Who is online