• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Greylisting fails sometimes

F

Flachzange

Basic Pleskian
Hi together,

I enabled greylisting a couple of days ago on my 9.2.1 Plesk. It works very nice in 90% of the time, but sometime mails are not becoming greylisted. They do not appear in the database nor are the respective mailservers on the whitelist. So I had a look into my mail.info log and found the following:

Code: 
Jul  1 09:39:42 xx greylisting filter[1634]: Starting greylisting filter... 
Jul  1 09:39:42 xx before-queue[1628]: fork_execv_fd: The child process with pid 1634 killed by signal 6 
Jul  1 09:39:42 xx before-queue[1628]: call_handlers: Error during call '/opt/psa/handlers/info/05-grey-6It4LH/executable' handler
Jul  1 09:39:42 xx before-queue[1628]: LOG Internal error in handler '05-grey-6It4LH'. Skip handler.

This happens all times when an email was obviously not greylisted.

Does anybody has a hint on what to do. I found something in a related thread about the mchk utility.

Kind regards
Christoph
 
Last edited:
I just found this in the syslog. It seems to be a problem within the greylisting filter:

Jul 3 12:36:19 xx greylisting filter[19587]: Starting greylisting filter...
Jul 3 12:36:19 xx before-queue[19576]: handlers_stderr: executable: bw_lists.c:88: gl_mailname_status: Assertion `from != ((void *)0) && *from != '\0'' failed.
Jul 3 12:36:19 xx before-queue[19576]: fork_execv_fd: The child process with pid 19587 killed by signal 6
Jul 3 12:36:19 xx before-queue[19576]: call_handlers: Error during call '/opt/psa/handlers/info/05-grey-6It4LH/executable' handler


Any suggestions
 
Last edited:
Me too:


Jul 3 13:54:30 host greylisting filter[25829]: Starting greylisting filter...
Jul 3 13:54:30 host qmail-queue-handlers[25827]: from=
Jul 3 13:54:30 host qmail-queue-handlers[25827]: [email protected]
Jul 3 13:54:30 host qmail-queue-handlers[25827]: hook_dir = '/usr/local/psa/handlers/before-queue'
Jul 3 13:54:30 host qmail-queue-handlers[25827]: recipient[3] = '[email protected]'
Jul 3 13:54:30 host qmail-queue-handlers[25827]: handlers dir = '/usr/local/psa/handlers/before-queue/recipient/[email protected]'
Jul 3 13:54:30 host qmail-queue-handlers[25827]: call_handlers: call executable = '/usr/local/psa/handlers/info/20-drweb-JJ37UG/executable'
Jul 3 13:54:30 host qmail-queue-handlers[25827]: handlers_stderr: PASS
Jul 3 13:54:30 host qmail-queue-handlers[25827]: call_handlers: PASS during call '/usr/local/psa/handlers/info/20-drweb-JJ37UG/executable' handler
Jul 3 13:54:30 host qmail-queue-handlers[25827]: call_handlers: call executable = '/usr/local/psa/handlers/info/05-grey-sXgnQ9/executable'
Jul 3 13:54:30 host qmail-queue-handlers[25827]: handlers_stderr: executable: bw_lists.c:88: gl_mailname_status: Assertion `from != ((void *)0) && *from != '\0'' failed.
Jul 3 13:54:30 host qmail-queue-handlers[25827]: fork_execv_fd: The child process with pid 25829 killed by signal 6
Jul 3 13:54:30 host qmail-queue-handlers[25827]: call_handlers: Error during call '/usr/local/psa/handlers/info/05-grey-sXgnQ9/executable' handler
Jul 3 13:54:30 host qmail-queue-handlers[25827]: LOG Internal error in handler '05-grey-sXgnQ9'. Skip handler.
Jul 3 13:54:30 host qmail-queue-handlers[25827]: call_handlers: call executable = '/usr/local/psa/handlers/info/10-spf-hvYGMk/executable'
Jul 3 13:54:30 host qmail-queue-handlers[25827]: handlers_stderr: PASS
Jul 3 13:54:30 host qmail-queue-handlers[25827]: call_handlers: PASS during call '/usr/local/psa/handlers/info/10-spf-hvYGMk/executable' handler
Jul 3 13:54:30 host qmail-queue-handlers[25827]: starter: submitter[25831] exited normally



And... Why does it check the virus before the greylisting?

Regards.
 
at least I am not alone...I read your other thread....we both have empty blacklists, could this be the problem?

we use differnt mailers(qmail and postfix) and the other configurations seem also different.

infogalera said:
And... Why does it check the virus before the greylisting?
Click to expand...

thats definitely weird..

Edit: In my case the virus scanner handler (kaspersky) is called afterwards
 
Last edited:
My black list is not empty bu I have populated with top spammers list from senderbase:


Black domains patterns list:
*adsl-dynamic-pool-xxx.fpt.vn*
*adsl.tpnet.pl*
*business.telecomitalia.it*
*dyn.user.ono.com
*ppp*.revip2.asianet.co.th
*res.rr.com*
*retail.telecomitalia.it*
*static.user.ono.com
*ttnet.net.tr*
*virtua.com.br*

And it works.

But still other trust sender like "spooler.via_______.es" falls in the blacklist pattern. I had to manually add to my White domains patterns list.
 
Assertion `from != ((void *)0) && *from != '\0'' failed

I got a nice hint in a German forum about this. Doesn't this actually mean that an empty "from" field bypasses the greylisting component as the assertion fails?!?!?

Maybe some developers from Parallels could have a look at this and provide a patch for this issue (in case there is a problem).

Thank you
Christoph
 
I have discussed with developers regarding this problem. They have performed some tests some time ago and deeply investigated this problem. Binary patch has been created and tested. They have informed that patch in testing stage now and patch for different OSes will be published as KB article when testing and compiling will be finished. I have no any ETA, but I hope it will be soon.
 
Hi,
it seems I have a similar issue on my server and it seems to be related to the SKIP handler

Nov 3 06:58:57 smeagol before-queue[14716]: hook_dir = '/usr/local/psa/handlers/before-queue'
Nov 3 06:58:57 grugil before-queue[14716]: recipient[3] = '<[email protected]>'
Nov 3 06:58:57 grugil before-queue[14716]: handlers dir = '/usr/local/psa/handlers/before-queue/recipient/<[email protected]>'
Nov 3 06:58:57 grugil before-queue[14716]: found handlers entry = '/usr/local/psa/handlers/before-queue/global/05-grey-VwEO9x'
Nov 3 06:58:57 grugil before-queue[14716]: call_handlers: call executable = '/usr/local/psa/handlers/info/05-grey-VwEO9x/executable'
Nov 3 06:58:57 grugil greylisting filter[14727]: Starting greylisting filter...
Nov 3 06:58:57 grugil greylisting filter[14727]: Timeout finished
Nov 3 06:58:57 grugil before-queue[14716]: handlers_stderr: SKIP
Nov 3 06:58:57 grugil before-queue[14716]: fork_execv_fd: unrecognized status code '5'
Nov 3 06:58:57 grugil before-queue[14716]: call_handlers: Error during call '/usr/local/psa/handlers/info/05-grey-VwEO9x/executable' handler
Nov 3 06:58:57 grugil before-queue[14716]: LOG Internal error in handler '05-grey-VwEO9x'. Skip handler.
Click to expand...

any hint what to do?

Brujo
 
@Igorg

I followed your suggestion with the KB but unfortunately it seems not to fix this

Nov 5 06:44:31 smeagol before-queue[9194]: check handlers for addr: [email protected]
Nov 5 06:44:31 smeagol before-queue[9194]: Processing handlers...
Nov 5 06:44:31 smeagol before-queue[9194]: hook_dir = '/usr/local/psa/handlers/before-queue'
Nov 5 06:44:31 smeagol before-queue[9194]: recipient[3] = '<[email protected]>'
Nov 5 06:44:31 smeagol before-queue[9194]: handlers dir = '/usr/local/psa/handlers/before-queue/recipient/<[email protected]>'
Nov 5 06:44:31 smeagol before-queue[9194]: found handlers entry = '/usr/local/psa/handlers/before-queue/global/05-grey-VwEO9x'
Nov 5 06:44:31 smeagol before-queue[9194]: call_handlers: call executable = '/usr/local/psa/handlers/info/05-grey-VwEO9x/executable'
Nov 5 06:44:32 smeagol before-queue[9194]: handlers_stderr: SKIP
Nov 5 06:44:32 smeagol before-queue[9194]: fork_execv_fd: unrecognized status code '5'
Nov 5 06:44:32 smeagol before-queue[9194]: call_handlers: Error during call '/usr/local/psa/handlers/info/05-grey-VwEO9x/executable' handler
Nov 5 06:44:32 smeagol before-queue[9194]: LOG Internal error in handler '05-grey-VwEO9x'. Skip handler.
Click to expand...

Brujo
 
Brujo,

If I correctly understood you have 9.2.1 Plesk version?
If you have not latest Plesk version I strongly recommend update it.
 
Hi IgorG,

I just read the hotfix description, but it seems that it addresses an completely other problem. I am not an expert with the internals of plesk's greylisting, but the problem described in my first post seems not to have anything to do with memory allocation. But I will give it a try and report any results later.

Regards,
Christoph
 
Flachzange said:
Hi IgorG,

I just read the hotfix description, but it seems that it addresses an completely other problem. I am not an expert with the internals of plesk's greylisting, but the problem described in my first post seems not to have anything to do with memory allocation. But I will give it a try and report any results later.

Regards,
Christoph
Click to expand...

Christoth,

Right, initial problem is actual for 9.2.1 version. I have discussed with developers and they have suggested upgrade Plesk to 9.2.3 version for fixing this issue.
 
ok, thanks for the quick answer. I am currently using 9.2.2, which still has this problem, but I will try to upgrade to 9.2.3 soon and will report then.
 
Greylisting problem still in 9.3

I have this problem and I'm running Plesk 9.3.
I have no memory allocation errors in the log, so I don't think the hotfix fixes this case. Also, it's not clear if the hotfix can also be applied to Plesk 9.3.

Any solutions?
Linda
 
OK now

IgorG said:
Did you tried it? http://kb.odin.com/en/6875
Click to expand...

Dear IgorG,
Thanks for your quick reply.

I didn't try the HotFix because although we were getting errors like this:
LOG Internal error in handler '05-grey-VwEO9x'. Skip handler.

We were never getting memory allocation errors, so the HotFix didn't seem to apply to our case.

Also, we're running Plesk 9.3 and I was nervous about applying a patch for 9.2.x.

Our problems started with Plesk going down because we exceeded our disk quota. We were trying to prevent this from happening again by limiting emails, but emails became strangely broken. We updated hoping it would solve the problems, but things just got worse.

Anyway, emails are OK now after we reinstalled qmail and we don't have the greylisting errors now either.

Thanks for your help and the help of this forum. We fixed some of the qmail configuration problems we were having with the information here.

Linda
 
OK. It is time to dig out my old thread as the spammers are becomming annoying again.

In the meantime I have updated from Plesk 9.3 to Plesk 9.5 and the above mentioned problem came back again. I am not sure if the problem was gone before, but the spammers massively make use of this problem. I difference to my previous post, the qhandler doesn't report error. The greylisting handler simply skips this message. See the log for details:

Jun 24 13:58:00 servername /var/qmail/bin/relaylock[1337]: /var/qmail/bin/relaylock: mail from 59.20.208.128:50486 (not defined)
Jun 24 13:58:02 servername qmail-queue-handlers[1341]: Handlers Filter before-queue for qmail started ...
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: from=
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: [email protected]
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: hook_dir = '/opt/psa/handlers/before-queue'
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: call_handlers: call executable = '/opt/psa/handlers/info/05-grey-6It4LH/executable'
Jun 24 13:58:04 servername greylisting filter[1342]: Starting greylisting filter...
Jun 24 13:58:04 servername greylisting filter[1342]: Bounce message. SKIP
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: handlers_stderr: SKIP
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: call_handlers: SKIP during call '/opt/psa/handlers/info/05-grey-6It4LH/executable' handler
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: call_handlers: call executable = '/opt/psa/handlers/info/20-kav-muaWOA/executable'
Jun 24 13:58:04 servername kav-mail-handler[1343]: kav-mail-handler start
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: handlers_stderr: PASS
Jun 24 13:58:04 servername kav-mail-handler[1343]: scanner: kav4ms-qmail-queue[1344] exited normally
Jun 24 13:58:04 servername kav-mail-handler[1343]: kav-mail-handler end
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: call_handlers: PASS during call '/opt/psa/handlers/info/20-kav-muaWOA/executable' handler
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: recipient[3] = '[email protected]'
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: handlers dir = '/opt/psa/handlers/before-queue/recipient/[email protected]'
Jun 24 13:58:04 servername qmail: 1277380684.555685 new msg 57049479
Jun 24 13:58:04 servername qmail: 1277380684.555921 info msg 57049479: bytes 8235 from <> qp 1346 uid 2020
Jun 24 13:58:04 servername qmail-queue-handlers[1341]: starter: submitter[1346] exited normally
Jun 24 13:58:04 servername qmail-local-handlers[1347]: Handlers Filter before-local for qmail started ...
Jun 24 13:58:04 servername qmail-local-handlers[1347]: from=
Jun 24 13:58:04 servername qmail-local-handlers[1347]: [email protected]
Jun 24 13:58:04 servername qmail-local-handlers[1347]: mailbox: /var/qmail/mailnames/my-domain.com/mail
Jun 24 13:58:04 servername qmail-local-handlers[1347]: hook_dir = '/opt/psa/handlers/before-local'
Jun 24 13:58:04 servername qmail-local-handlers[1347]: recipient[3] = '[email protected]'
Jun 24 13:58:04 servername qmail-local-handlers[1347]: handlers dir = '/opt/psa/handlers/before-local/recipient/[email protected]'
Jun 24 13:58:04 servername qmail-local-handlers[1347]: call_handlers: call executable = '/opt/psa/handlers/info/10-spam-gghyAM/executable'
Jun 24 13:58:04 servername qmail: 1277380684.568734 starting delivery 3750: msg 57049479 to local [email protected]
Click to expand...
 
Hi everyone,

It appears the issue exists in the PP 11.5.30:

-------------------------------------------------------------------------------
Jun 13 16:07:58 smtp greylisting filter[61169]: Starting greylisting filter...
Jun 13 16:07:58 smtp greylisting filter[61169]: Bounce message. SKIP
Jun 13 16:07:58 smtp qmail-queue-handlers[61167]: handlers_stderr: SKIP
Jun 13 16:07:58 smtp qmail-queue-handlers[61167]: SKIP during call 'grey' handler
Jun 13 16:07:58 smtp qmail-queue-handlers[61167]: handlers_stderr: SKIP
Jun 13 16:07:58 smtp qmail-queue-handlers[61167]: SKIP during call 'check-quota' handler
Jun 13 16:07:58 smtp qmail-queue-handlers[61167]: starter: submitter[61172] exited normally
Jun 13 16:07:58 smtp qmail-queue-handlers[61174]: Handlers Filter before-queue for qmail started ...
Jun 13 16:07:58 smtp qmail-local-handlers[61175]: Handlers Filter before-local for qmail started ...
Jun 13 16:07:58 smtp qmail-local-handlers[61175]: from=
Jun 13 16:07:58 smtp qmail-queue-handlers[61174]: from=
Jun 13 16:07:58 smtp qmail-local-handlers[61175]: [email protected]
Jun 13 16:07:58 smtp qmail-queue-handlers[61174]: [email protected]
Jun 13 16:07:58 smtp qmail-local-handlers[61175]: mailbox: /var/qmail/mailnames/mydomain.com
Jun 13 16:07:58 smtp qmail-local-handlers[61175]: Unable to get sender domain by sender mailname
Jun 13 16:07:58 smtp qmail-queue-handlers[61174]: Unable to get sender domain by sender mailname
-------------------------------------------------------------------------------

Does anybody resolve the issue? Please let me know.

Thank you!
 
You must log in or register to reply here.

Similar threads

H
Issue Greylisting
Replies
0
Views
891
HaumantoI
H
F
Issue DMARC REJECT after forwarding
Replies
2
Views
1K
Flachzange
F
M
Question Spam from localhost
Replies
9
Views
4K
PleskyStuff
P
L
Resolved Mail-Handler - Called twice, why?
Replies
8
Views
3K
lippoliv
L
M
Question 550 verification failed (Unable to get sender domain by sender mailname)
Replies
11
Views
6K
Marco.Marco
M
Back
Top