amavisd-new postfix issue

[Jorn Argelo]

dave wrote:

>Hi,
>    I've got a FreeBSD 5.2.1 box running postfix 2.1, spamassassin 2.63,
>amavisd-new-20030616.p9, dcc-dccd-1.2.48, and razor-agents-2.40 all
>installed via ports. I'm having issues with dcc-dccd and razor-agents not
>working, but i believe that's due to my firewall, anyone know what ports
>they use, and that's not the purpose of this. I've got amavisd-new as a
>postfix content filter. It sends messages through spamassassin and an
>antivirus program, spamassassin interfaces with razor and dcc, which until i
>get those ports i've disabled. My problem is with amavisd-new, when i have
>the content_filter line uncommented in main.cf smtpd throttles itself,
>comment out that line and it works fine. I have no idea what the issue is, i
>manually run amavisd and it does not report any syntax errors. The below is
>the strange error i'm getting. I don't get any startup errors from either
>amavisd-new or postfix, and this only occurs when the content_filter line is
>uncommented.
>  
>
Here, take a look at my log. Do note that I'm using Postfix 2.1 and 
ClamAV. I'm not really sure if spamassassin is doing his job right, but 
that's not really the point now.

Jun 29 16:50:44 www postfix/smtpd[83091]: connect from 
bay13-f103.bay13.hotmail.com[64.4.31.103]
Jun 29 16:50:45 www postfix/smtpd[83091]: 2F518809E: 
client=bay13-f103.bay13.hotmail.com[64.4.31.103]
Jun 29 16:50:45 www postfix/cleanup[83094]: 2F518809E: 
message-id=<BAY13-F103DjAB0vIrk000691ce at hotmail.com>
Jun 29 16:50:45 www postfix/qmgr[40431]: 2F518809E: 
from=<j_argelo at hotmail.com>, size=4706, nrcpt=1 (queue active)
Jun 29 16:50:45 www postfix/smtpd[83091]: disconnect from 
bay13-f103.bay13.hotmail.com[64.4.31.103]
Jun 29 16:50:46 www postfix/smtpd[83096]: connect from 
localhost.demon.nl[127.0.0.1]
Jun 29 16:50:46 www postfix/smtpd[83096]: 2C23D8325: 
client=localhost.demon.nl[127.0.0.1]
Jun 29 16:50:46 www postfix/cleanup[83094]: 2C23D8325: 
message-id=<BAY13-F103DjAB0vIrk000691ce at hotmail.com>
Jun 29 16:50:46 www postfix/qmgr[40431]: 2C23D8325: 
from=<j_argelo at hotmail.com>, size=5150, nrcpt=1 (queue active)
Jun 29 16:50:46 www postfix/smtpd[83096]: disconnect from 
localhost.demon.nl[127.0.0.1]
Jun 29 16:50:46 www postfix/smtp[83095]: 2F518809E: 
to=<jorn at wcborstel.nl>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent 
(250 2.6.0 Ok, id=82376-09, from MTA: 250 Ok: queued as 2C23D8325)
Jun 29 16:50:46 www postfix/qmgr[40431]: 2F518809E: removed
Jun 29 16:50:46 www postfix/local[83097]: 2C23D8325: 
to=<jorn at wcborstel.nl>, relay=local, delay=0, status=sent (delivered to 
mailbox)
Jun 29 16:50:46 www postfix/qmgr[40431]: 2C23D8325: removed

As you can see, the scanning done by ClamAV and Spamassassin (at least, 
I think that Spamassassin is working) is being done by the loopback 
interface. It doesn't require an outside connection again. I'm not 
really sure if your firewall is a troublesome factor or not. The only 
ports I have forwarded from my router are 21,22,25,80,110(so FTP, SSH, 
SMTP, HTTP and POP3, in case you didn't know ;)

Give us an output of /var/amavis/amavis.log, and perhaps you can find an 
error there. I think that amavis is the problematic factor in here.

Also, this is what I have in my main.cf concerning the content_filter 
you're talking about. Perhaps it is of use for you.

content_filter = smtp-amavis:[127.0.0.1]:10024

Cheers,

Jorn