Dr. Web and file permission problem

[pstechnology]

Hi all

I am having trouble with Dr. Web on a 7.5.4 box. When the service is started, mails do not get delivered to users on this box and the sender gets an SMTP failure response with error 554.

I have checked Article 836 on SW Softs site and they suggest resetting the file permissions for the files:

/var/qmail/bin/qmail-queue
/var/qmail/bin/qmail-queue.drweb
/var/qmail/bin/qmail-queue.origin

The permissions were wrong and need to be set to -r-s--x--x

How do I get the 4th bit set to "S"? I have set the permissions to 4511, but instead I get -r-x--x--x and not as it should be.

Help please!

(this is posted in Plesk 8 forum too as I am desperate for a response)

Thank you

 

[pstechnology]

After careful looking at Logs, it appears that Dr Web thinks it's license has expired and as such is only prtecting 15 email accounts on the server.

In answer to my own question abot permissions, SW Soft proposed this to fix the permissions:
_____________________________________________________________________

To set up permission for files please use the command:

# cd /var/qmail/bin/
# chmod 4511 qmail-queue qmail-queue.drweb qmail-queue.origin

Pay atantion that files qmail-queue and qmail-queue.drweb must be similar and have the same size. If not then you need to copy qmail-queue.drweb to qmail-queue

# ls -la qmail-que*
-r-s--x--x 1 drweb qmail 152436 Ñåí 5 16:52 qmail-queue
-r-s--x--x 1 drweb qmail 152436 Ñåí 5 16:52 qmail-queue.drweb
-r-s--x--x 1 qmailq qmail 15784 Èþí 13 21:44 qmail-queue.origi

# cp qmail-queue.drweb qmail-queue

Restart qmail to apply changes
# /etc/init.d/qmail restart

__________________________________________________________________

I must point out that this did set the permissions correctly, but it has not solved the actual sympton of this problem, ie mails not being delivered. SW Soft are taking a look at the server, so I will post any findings here for other poor souls in the same position.

Thanks

 

[zevision]

Hey pstechnology,

I am having nearly the EXACT same problem with the exact same setup (plesk 7.5.4), and was wondering if you could tell me what SW-Soft did (or told you to do) to solve this issue?

(Essentially, I followed that exact same knowledge base article, #836, still to no avail. Qmail won't startup via virtuozzo, and i cannot telnet to localhost 25, so the outgoing port is not even open.)

Thanks in advance...

 

[zevision]

Thought I would provide an update here...

In talking for a second time with our tier-2 support at our data center, they informed me that this is actually a known bug with Plesk 7.5.4 - did SWSoft tell you that?

Apparently if you bounce/restart qmail from the Virtuozzo control panel a file is rewritten incorrectly (something about a "." when it should be a "-" or vice versa) thus blowing up your entire email service. How about that for testing?

I was advised that along with this and many other bugs, that upgrading to Plesk 8.1 was the best bet...just fyi.

 

[pstechnology]

Zevision

Sorry for my delay in responding. Here is the email SWsoft sent me afte they looked at the server to see what was causing the problem:

Sorry for delay. The issue with DrWEb was caused by the reason that app-key-handler.antivir-drweb-4 was lost and that is why DrWEb license could not be upgraded successfully.

_________________________________________________________________

In drweb license key file exp date was 02-25-2006
# less /opt/drweb/drweb32.key


I have downloaded app-key-handler.antivir-drweb-4 in to /usr/local/psa/bin/

# /usr/local/psa/bin/app-key-handler.antivir-drweb-4

Permission and ownership was changed to:
# chmod 755 /usr/local/psa/bin/app-key-handler.antivir-drweb-4
# chown psaadmsaadm /usr/local/psa/bin/app-key-handler.antivir-drweb-4


Qmail queue was not processed by DrwEb
# ls -la qmail-queue*
-r-s--x--x 1 qmailq qmail 14808 Oct 26 17:07 qmail-queue
-r-s--x--x 1 root qmail 161024 Nov 26 2005 qmail-queue.drweb
-r-s--x--x 1 root qmail 14808 Aug 24 2005 qmail-queue.origin

Allowed drweb to process mails in qmail queue
# chown drweb:qmail qmail-queue qmail-queue.drweb

Copied qmail-queue to qmail-queue.old just in case.
# cp qmail-queue qmail-queue.old

Replaced qmail-queue with qmail-queue.drweb and get mails to be processed by drweb first and then put in qmail queue:
# cp qmail-queue.drweb qmail-queue

Correct permission and ownership for qmail binary files are:
# ls -la qmail-queue*
# ls -la /var/qmail/bin/qmail-que*
-r-s--x--x 1 drweb qmail 161024 Oct 29 08:37 /var/qmail/bin/qmail-queue
-r-s--x--x 1 drweb qmail 161024 Nov 26 2005 /var/qmail/bin/qmail-queue.drweb
-r-s--x--x 1 qmailq qmail 14808 Aug 24 2005 /var/qmail/bin/qmail-queue.origin


To apply changes restarted qmail and drweb:
# /etc/init.d/drwebd stop
# /etc/init.d/drwebd start

[root@p15161774 bin]# /etc/init.d/qmail stop
[root@p15161774 bin]# /etc/init.d/qmail start


Ran mchk to rebuild qmail control files and mailboxes' structure
# /usr/local/psa/admin/sbin/mchk --with-spam --daemon-mode


Another issue occurred on the server: wrong ownership for qmail queue files:

# less /usr/local/psa/var/log/maillog
ct 29 04:15:58 p15161774 qmail: 1162095358.880070 starting delivery 4493: msg 29362294 to local [email protected]
Oct 29 04:15:58 p15161774 qmail: 1162095358.880177 status: local 1/10 remote 0/20
Oct 29 04:15:58 p15161774 qmail: 1162095358.880298 delivery 4493: deferral: Sorry,_message_has_wrong_owner._(#4.3.5)/
Oct 29 04:15:58 p15161774 qmail: 1162095358.880345 status: local 0/10 remote 0/20

Checked qmail queue files
mess/21:
total 44
drwxr-x--- 2 qmailq qmail 36 Oct 29 09:29 .
drwxr-x--- 25 qmailq qmail 4096 Mar 21 2006 ..
-rw-r--r-- 1 qmailq qmail 18222 Oct 23 00:48 29362281
-rw-r--r-- 1 root nofiles 16500 Oct 29 09:29 29394067

ownership was restored to correct one prior stopped qmail and xinetd :

# chown -R qmailq:qmail /var/qmail/queue/mess/*

Started qmail and xinetd back.

Now mails are delivered to recipients and protected by drweb. I had drweb 4.32 version but this version has not been supported thus drweb bases were not updated.

# rpm -qa | grep drweb
drweb-4.32.2-rh7_psa
drweb-qmail-4.32-rh9.build75050824.12

I have updated drweb package through Plesk CP -> Server -> Updater. Cuirrent drweb version is 4.33
# rpm -qa | grep drweb
drweb-base-4.33-rh5_psa

Now Drweb is running fine and all its bases are updated.

_____________________________________________________________________

I hope this helps anyone else!

 

[cdeezy]

Hey pstechnology...

Thanks for the reply (zevision here under diff. username). Very strange...sounds like we had the same symptoms, but different underlying issues.

Thanks though, hopefully all of this will benefit someone else