Qmail Logging

[EgidijusS]

Hello,

I have problem with qmail log. After server reboot all mail activity information is logged to log:
---------------------------------------------------------------------------------------------------------------------------
Jan 26 21:23:36 server smtp_auth[7092]: SMTP connect from ext.domain.com [xxx.xxx.xxx.xxx]
Jan 26 21:23:36 server smtp_auth[7092]: SMTP user [email protected] : logged in from ext.domain.com [xxx.xxx.xxx.xxx]
Jan 26 21:23:36 server qmail-queue-handlers[7094]: Handlers Filter before-queue for qmail started ...
Jan 26 21:23:36 server qmail-queue-handlers[7094]: from=[email protected]
Jan 26 21:23:36 server qmail-queue-handlers[7094]: to=[email protected]
Jan 26 21:23:36 server qmail-queue-handlers[7094]: handlers_stderr: PASS
Jan 26 21:23:36 server qmail-queue-handlers[7094]: PASS during call 'limit-out' handler
Jan 26 21:23:36 server qmail-queue-handlers[7094]: handlers_stderr: SKIP
Jan 26 21:23:36 server qmail-queue-handlers[7094]: SKIP during call 'check-quota' handler
Jan 26 21:23:36 server spf filter[7097]: Starting spf filter...
Jan 26 21:23:36 server qmail-queue-handlers[7094]: handlers_stderr: SKIP
Jan 26 21:23:36 server qmail-queue-handlers[7094]: SKIP during call 'spf' handler
Jan 26 21:23:36 server qmail-queue-handlers[7094]: starter: submitter[7098] exited normally
Jan 26 21:23:36 server qmail: 1422300216.278639 new msg 34701395
Jan 26 21:23:36 server qmail: 1422300216.278683 info msg 34701395: bytes 8148 from <[email protected]> qp 7098 uid 2020
Jan 26 21:23:36 server spamdyke[7082]: ALLOWED from: [email protected] to: [email protected] origin_ip: xxx.xxx.xxx.xxx origin_rdns: ext.domain.com auth: [email protected] encryption: (none) reason: 250_ok_1422300216_qp_7094
Jan 26 21:23:36 server qmail: 1422300216.282731 starting delivery 23: msg 34701395 to local [email protected]
Jan 26 21:23:36 server qmail: 1422300216.282982 status: local 1/25 remote 0/20
Jan 26 21:23:36 server qmail-local-handlers[7099]: Handlers Filter before-local for qmail started ...
Jan 26 21:23:36 server qmail-local-handlers[7099]: from=[email protected]
Jan 26 21:23:36 server qmail-local-handlers[7099]: to=[email protected]
Jan 26 21:23:36 server qmail-local-handlers[7099]: mailbox: /var/qmail/mailnames/domain.com/user2
Jan 26 21:23:36 server spamd[4409]: spamd: connection from plesk.server.com [127.0.0.1] at port 55176
Jan 26 21:23:36 server spamd[4409]: spamd: using default config for [email protected]: /var/qmail/mailnames/domain.com/user2/.spamassassin/user_prefs
Jan 26 21:23:36 server spamd[4409]: spamd: processing message <[email protected]> for [email protected]:110
Jan 26 21:23:36 server spamd[4409]: spamd: clean message (-1.3/7.0) for [email protected]:110 in 0.4 seconds, 8148 bytes.
Jan 26 21:23:36 server spamd[4409]: spamd: result: . -1 - ALL_TRUSTED,AWL,HTML_MESSAGE scantime=0.4,size=8148,user=[email protected],uid=110,required_score=7.0,rhost=plesk.server.com,raddr=127.0.0.1,rport=55176,mid=<[email protected]>,autolearn=ham
Jan 26 21:23:36 server qmail-local-handlers[7099]: handlers_stderr: PASS
Jan 26 21:23:36 server qmail-local-handlers[7099]: PASS during call 'spam' handler
Jan 26 21:23:36 server dk_check[7102]: DK_STAT_NOSIG: No signature available in message
Jan 26 21:23:36 server qmail-local-handlers[7099]: handlers_stderr: PASS
Jan 26 21:23:36 server qmail-local-handlers[7099]: PASS during call 'dd52-domainkeys' handler
Jan 26 21:23:36 server qmail: 1422300216.731123 delivery 23: success: did_0+0+2/
Jan 26 21:23:36 server qmail: 1422300216.733783 status: local 0/25 remote 0/20
Jan 26 21:23:36 server qmail: 1422300216.733829 end msg 34701395
---------------------------------------------------------------------------------------------------------------------------

But after some time. Or actualy some service restart or other thing all that information is no more logged. And I can't to restore it. Only helps server reboot.

---------------------------------------------------------------------------------------------------------------------------
Jan 26 09:27:33 server spamd[834]: spamd: connection from server.domain.com [127.0.0.1] at port 49101
Jan 26 09:27:33 server spamd[834]: spamd: using default config for [email protected]: /var/qmail/mailnames/domain.com/stv2/.spamassassin/user_prefs
Jan 26 09:27:33 server spamd[834]: spamd: processing message (unknown) for stv2domain.com:110
Jan 26 09:27:34 server spamd[834]: spamd: clean message (-4.3/5.0) for [email protected]:110 in 0.5 seconds, 16774 bytes.
Jan 26 09:27:34 server spamd[834]: spamd: result: . -4 - ALL_TRUSTED,AWL,BAYES_00,HTML_MESSAGE,MISSING_MID,SPF_PASS scantime=0.5,size=16774,user=stv2domain.com,uid=110,required_score=5.0,rhost=server.domain.com,raddr=127.0.0.1,rport=49101,mid=(unknown),bayes=0.000000,autolearn=ham
---------------------------------------------------------------------------------------------------------------------------

There is only activity from spamd process. No info about qmail handlers and spamdyke.

Any ideas what happens?

Server Centos 5.6 Plesk 12.0.18 Update #28 Upgraded from Plesk 11

 

[IgorG]

But have you checked that qmail service is up and running?

 

[EgidijusS]

Yes. Of course running. This is production server. Mail is delivered without problems in all directions - local, in and out. Everything working fine except of qmail activity logging to maillog.

 

[IgorG]

Have you noticed that other logs are not filled too? Maybe problem in system log service?

 

[EgidijusS]

Other logs looks OK.

 

[IgorG]

Strange issue. What about switching to modern Postfix MTA?

 

[EgidijusS]

At the moment I'm comfort in using Qmail+Spamdyke+Spamdyke control panel. I like this solution and it is very effective on spam. With postfix I'm not experienced user. What about whitelist and blacklist from user side with postfix?

 

[IgorG]

What about whitelist and blacklist from user side with postfix?

Why not?