On Fri, Jun 19, 2015 at 10:58:40AM -0500, Greg wrote:
> And what user is exim running as?
>
> Also, whats the uid and gid of exim?
>
>
> Thank you,
> Greg Borbonus
> *Nix Server administrator
> 832-699-0461
> http://www.linkedin.com/in/gregborbonus/
>
> On 6/19/2015 9:58 AM, The Doctor wrote:
> >On Thu, Jun 18, 2015 at 10:31:41PM -0500, Greg wrote:
> >>Whats the permissions on /var/spool/exim/scan/scan/ and who is the
> >>owner and group?
> >>
> >>Also, what user is exim running under?
> >>
> >>Thank you,
> >>Greg Borbonus
> >>*Nix Server administrator
> >>832-699-0461
> >>http://www.linkedin.com/in/gregborbonus/
> >>
> >>On 6/18/2015 10:28 PM, The Doctor wrote:
> >>> From my logs
> >>>
> >>>/var/log/exim_mainlog:2015-06-18 20:36:04 1Z5m9z-0002Et-HZ failed to open scan directory /var/spool/exim/scan/scan/1Z5m9z-0002Et-HZ: Permission denied (euid=42 egid=42)
> >>>/var/log/exim_mainlog:2015-06-18 20:36:04 1Z5m9z-0002Et-HZ malware acl condition: error while creating mbox spool file
> >>>/var/log/exim_mainlog:2015-06-18 20:36:04 1Z5m9z-0002Et-HZ H=ts1p19.nl2k.ab.ca [208.118.93.82] F=<scifi@???> temporarily rejected after DATA
> >>>/var/log/exim_paniclog:2015-06-18 20:36:04 1Z5m9z-0002Et-HZ failed to open scan directory /var/spool/exim/scan/scan/1Z5m9z-0002Et-HZ: Permission denied (euid=42 egid=42)
> >>>/var/log/exim_paniclog:2015-06-18 20:36:04 1Z5m9z-0002Et-HZ malware acl condition: error while creating mbox spool file
> >>>/var/log/exim_rejectlog:2015-06-18 20:36:04 1Z5m9z-0002Et-HZ H=ts1p19.nl2k.ab.ca [208.118.93.82] F=<scifi@???> temporarily rejected after DATA
> >>>
> >>>All right, all i did was to update openssl recently.
> >>>
> >>>Anyone else seen this in exim 4.85 or exim 4.86 RC2 ?
> >>>
> >
> >ns2.nl2k.ab.ca/~$sudo ls -Fail /var/spool/exim
> >Password:
> >total 11800
> > 246017 drwxr-xr-x 8 exim exim 512 Dec 23 2011 ./
> > 265856 drwxr-xr-x 16 root wheel 512 Jun 4 16:05 ../
> >2011776 drwx------ 2 exim exim 512 Jun 4 15:45 .spamassassin/
> >1944320 drwxr-x--- 2 exim exim 512 Oct 31 2012 db/
> > 246018 -rw-r--r-- 1 exim exim 4 Jun 19 08:44 exim-daemon.pid
> > 246020 -rw-r----- 1 exim exim 124 Aug 7 2012 exim-process.info
> > 246035 -rw------- 1 exim exim 434176 May 25 2011 exim.core
> > 246019 -rw-r--r-- 1 exim exim 540236 Jun 4 16:04 gmon.out
> > 726147 drwxr-x--- 4 exim exim 512 May 7 2011 in/
> >1936384 drwxr-x--- 2 exim exim 359936 Jun 19 08:44 input/
> >1940352 drwxr-x--- 2 exim exim 177664 Jun 19 08:44 msglog/
> >1948288 drw-r----- 3 exim exim 1024 Jun 18 14:09 scan/
> > 246032 -rw-r--r-- 1 exim exim 10516480 Mar 28 2011 spoolexim.tar
> >ns2.nl2k.ab.ca/~$sudo ls -Fail /var/spool/exim/scan
> >total 547
> >1948288 drw-r----- 3 exim exim 1024 Jun 18 14:09 ./
> > 246017 drwxr-xr-x 8 exim exim 512 Dec 23 2011 ../
> >2245914 -rw-r--r-- 1 exim exim 541388 Jun 18 15:11 gmon.out
> >2277678 drwxrwxrwx 2 exim exim 512 Jun 18 14:09 scan/
defang:*:28:28::0:0:Defang:/var/spool/MIMEDefang:/sbin/nologin
milter:*:28:28::0:0:AMAVIS:/var/amavis:/sbin/nologin
filter:*:28:28::0:0:AMAVIS:/var/amavis:/sbin/nologin
clamav:*:28:28::0:0:AMAVIS:/var/amavis:/sbin/nologin
vscan:*:28:28::0:0:AMAVIS:/var/amavis:/sbin/nologin
amavis:*:28:28::0:0:AMAVIS:/var/amavis:/sbin/nologin
dspam:*:28:28::0:0:AMAVIS:/var/dspam:/sbin/nologin
spam:*:28:28::0:0:AMAVIS:/var/spam:/sbin/nologin
smmsp:*:29:29::0:0:SMMSP:/var/mail:/sbin/nologin
cyrus:*:30:14::0:0:Cyrus:/usr/cyrus/bin:/sbin/nologin
postfix:*:31:31::0:0:Cyrus:/var/spool/postfix:/sbin/nologin
dkfilter:*:33:33::0:0:DKFilter:/usr/contrib/bin/:/sbin/nologin
unbound:*:34:34::0:0:Unbound:/usr/:/sbin/nologin
exim:*:42:42::0:0:Cyrus:/var/spool/exim:/sbin/nologin
> >
> >>begin:vcard
> >>fn:Greg Borbonus
> >>n:Borbonus;Greg
> >>org:Able Admins;IT
> >>adr:;;3610 parkbank ct,;Houston;Tx;77068;US
> >>email;internet:gregborbonus@???
> >>title:Sr. System Administrator
> >>tel;work:(832) 699- 0461
> >>tel;cell:(832) 699- 0461
> >>x-mozilla-html:TRUE
> >>url:http://www.linkedin.com/in/gregborbonus/
> >>version:2.1
> >>end:vcard
> >>
> >>--
> >>## List details at https://lists.exim.org/mailman/listinfo/exim-users
> >>## Exim details at http://www.exim.org/
> >>## Please use the Wiki with this list - http://wiki.exim.org/
> >
>
> begin:vcard
> fn:Greg Borbonus
> n:Borbonus;Greg
> org:Able Admins;IT
> adr:;;3610 parkbank ct,;Houston;Tx;77068;US
> email;internet:gregborbonus@???
> title:Sr. System Administrator
> tel;work:(832) 699- 0461
> tel;cell:(832) 699- 0461
> x-mozilla-html:TRUE
> url:http://www.linkedin.com/in/gregborbonus/
> version:2.1
> end:vcard
>
--
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
God,Queen and country!Never Satan President Republic!Beware AntiChrist rising!
http://www.fullyfollow.me/rootnl2k Look at Psalms 14 and 53 on Atheism
Abuse a man unjustly, and you will make friends for him. -Edgar Watson Howe
