AvastRelay Problem - Am I doing something wrong?

Avast Business Avast Business for Linux
1

I’ve got a problem with making avast relay work :confused:
I realy do not know what I am doing wrong.
After adding content filter to postfix master.cf I’m trying to send an e-mail to myself and it is not reaching it’s destination. It is like sending it itno a vaccum :wink: but seriously it is missing somewhere.
Any ideas what could be wrong?

==========================================================================

service type private unpriv chroot wakeup maxproc command + args

(yes) (yes) (yes) (never) (50)

==========================================================================

#smtp inet n - y - - smtpd
smtp inet n - n - - smtpd -o content_filter=smtp:[127.0.0.1]:10025
10026 inet n - - - - smtpd -o myhostname=localhost
#smtps inet n - n - - smtpd

-o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes

#submission inet n - n - - smtpd

-o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes

#628 inet n - n - - qmqpd
pickup fifo n - y 60 1 pickup
cleanup unix n - y - 0 cleanup
#qmgr fifo n - n 300 1 qmgr
qmgr fifo n - y 300 1 nqmgr
#tlsmgr fifo - - n 300 1 tlsmgr
rewrite unix - - y - - trivial-rewrite
bounce unix - - y - 0 bounce
defer unix - - y - 0 bounce
flush unix n - y 1000? 0 flush
smtp unix - - y - - smtp
showq unix n - y - - showq
error unix - - y - - error
local unix - n n - - local
virtual unix - n y - - virtual
lmtp unix - - y - - lmtp

in log file for avast relay i’ve got only

Aug 09 13:31:11 avastrelay[5610]: info: Starting avast! relay
Aug 09 13:31:11 avastrelay[5610]: info: listening on ‘127.0.0.1:10025’
Aug 09 13:32:02 avastrelay[5612]: info: smtp connection with ‘127.0.0.1:10025’
Aug 09 13:32:07 avastrelay[5612]: info: closing smtp connection ‘127.0.0.1:10025’
Aug 09 13:33:40 avastrelay[5612]: info: smtp connection with ‘127.0.0.1:10025’
Aug 09 13:33:45 avastrelay[5612]: info: closing smtp connection ‘127.0.0.1:10025’

and for deamon

Aug 09 13:30:44 avastd[5571]: info: Starting avast! daemon
Aug 09 13:30:44 avastd[5571]: info: listenning on socket ‘/var/run/avast4mailscanner.sock’
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5572)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5573)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5574)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5576)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5577)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5578)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5579)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5580)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5581)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4mail’, pid=5582)
Aug 09 13:30:44 avastd[5571]: info: listenning on socket ‘/var/run/avast4filescanner.sock’
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4file’, pid=5583)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4file’, pid=5584)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4file’, pid=5585)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4file’, pid=5586)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4file’, pid=5587)
Aug 09 13:30:44 avastd[5571]: info: start new process (‘avast4file’, pid=5588)

I’m running RedHat 9
postfix-1.1.12-1
avast4linux-1.0.6-i386

2

pls, try to connect directly to the avastrelay from terminal using telnet (telnet 127.0.0.1 10025) and then try to send e-mail from the terminal. If you’ll see ‘scanned message has been relayed’ string in the avastrelay log file, the message has been processed and the avastrelay is ok.

3

hmmm… That’s strange:

Aug 09 17:03:15 avastrelay[7330]: info: message accepted for relaying
Aug 09 17:03:15 avastrelay[7330]: info: smtp client connection to ‘127.0.0.1:10026’
Aug 09 17:03:15 avastrelay[7330]: info: scanned message has been relayed
Aug 09 17:03:15 avastrelay[7330]: info: closing smtp connection ‘127.0.0.1:10025’
Aug 09 17:03:15 avastrelay[7330]: info: closing smtp client ‘127.0.0.1:10026’
Aug 09 17:03:15 avastrelay[7330]: info: closing avast! client ‘/var/run/avast4mailscanner.sock’

but where is my message?

{few minutes later}

Now i know where the problem is:

Everything is ok with a small messages. But when i attached tgz2 file (size 4mb, after extraction 47mb and over 2.000 files) the message is gone for good…
btw. max message size in my postfix is set to 50mb so this is not a problem.

9mb (compressed) 15mb(extracted) 15(no of files in archive)
this on also went through without any problems.

any sugestion regarding the one whitch is missing?

4

can you send me that tgz2 file at mensik@asw.cz, pls ?

5

What you could also try is disable decompression of TGZ archives on the mail scanning daemon. See /etc/avastd.conf for more…

Just for the sake of knowing whether the problem is related to the decompression of the (big) archive…

Thanks
Vlk

6

I’m sorry Dublin, but I can.t because this archive is a backup of server configuration including passwd and so on…

7

strange thing happened because I have recived this big archiwe few hours later, along with all small e-mail sent leter… that’s realy strange. I will try to monitor the relay and let You now when I figer out what’s wrong.

Very big THANKS for Your help.

now I’m going to buy a comertial licence :slight_smile:

8
now I'm going to buy a comertial licence :-)

Take your time to do the proper evaluation… No rush. :slight_smile:

Cheers,
Vlk

9

I’ve got another problem and I don;t realy know what to do now… It seems that something is wrong with relaying…
The only thing I have in my avastrelay log are:

Aug 13 14:58:02 avastrelay[11003]: info: smtp connection with ‘127.0.0.1:10025’
Aug 13 14:58:02 avastrelay[11003]: info: closing smtp connection ‘127.0.0.1:10025’

but not even one e-mail is omming out or in. The avastrelay seems to be workin’ but why is is not scaning or forwarding any e-mails?
---------few minutes later-----------
ok, i think I have found the problem:

C575B5AC034 2944 Tue Aug 10 12:11:53 Natasha@prob-helper.biz
(host 127.0.0.1[127.0.0.1] said: 451 Message processing failed: Permission denied)
prepress@dmsystem.com.pl

any idea why I’ve got permision denied while connecting to relay?
--------few minutes later--------------
eureka!!!
I finally managed to fing where was an error…
Permissions for folder /var/spool/avastrelay were wrong
after changing it everythin is all right

10

FINAL UPDATE: :-[ :-[ :-[, possibly three smileys are not enough to express how much embarrassed (and idiot) I am felling. I didn’t finish to read the last Marquiz post. I think that after a complete day reading HOWTO’s, I was a little tired for read a bit more :).

I hope my eval of Avast4Linux take me to the same of Avast4Windows. I am using Home edition in my Home computer and evaluating to buy Pro and suggest to my boss to buy it for Windows workstations and maybe Avast4Linux for mail scanning.

Regards,

Valdo

I have installed Postfix 2.1.5 on Redhat 9.0 and avast for Linux 1.0.8 with demo license and I followed the HOWTO-Postfix doc. when I send an email using postfix this message appear in maillog

Mar 2 14:55:53 fw postfix/qmgr[8412]: 05D268E8B6: from=, size=388, nrcpt=1 (queue active) Mar 2 14:55:53 fw postfix/smtp[8517]: 05D268E8B6: to=, relay=127.0.0.1[127.0.0.1], delay=2163, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 Message processing failed: Permission denied (in reply to DATA command))

As you suggested, I have tried to connect directly to avastrelay using telnet and this is the log of session:

[root@fw root]# telnet 127.0.0.1 10025 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. 220 smtp.mydomain.com SMTP avastrelay v1.0.8 - Service ready mail from: 250 Ok rcpt to: 250 Ok data 451 Message processing failed: Permission denied Connection closed by foreign host.

This is the master.cf lines modified after read the HOWTO:

#====================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) #====================================================== #smtp inet n - n - - smtpd smtp inet n - n - - smtpd -o content_filter=smtp:[127.0.0.1]:10025 10026 inet n - - - - smtpd -o myhostname=localhost
[b]UPDATED:[/b] I have tried telnet 127.0.0.1 10026 and it works fine. so the problem is in avastrelay, a missing or wrong parameter? I don't know.

and this is the avastrelay start command line as shown in the HOWTO doc.

avastrelay -i localhost:10025 -I localhost:10026 -a /var/run/avast4mailscanner.sock -l /var/log/avast4/avastrelay -u avrelay
[b]UPDATED:[/b] due to "permission denied" message, I have added the -r parameter to avastrelay, but it doesn't work.

I’ve lookep up in avastd log and avastrelay log and there is no error message, only normal startup messages.

What can be wrong?

TIA

Valdo

11

check permissions of avastrelay process and temporary directory of the process (/var/spool/avastrelay by default)