Missing email

[toddh]

A user contacted us about a missing email. The email was resent as an attachment and the user forwared us a copy for investigation.

We find the email in EFA web interrface but it does not show up in the logs on the mail server. It is like it got lost in translation between when EFA received it and it got to the mail server.

Looking at the EFA maillog I see this error repeatedly "MailScanner[xxxxxx]: database disk image is malformed", I see the error on both EFA v4 servers and also a legacy EFA v3.

Is this something I should concerned with.

Cron runs a shutdown of postfix and mailscanner every 30 minutes to postmap updates to the db. I wondering if the message somehow could have been lost during the shutdown/startup of mailscanner which ran during the processing of the email. I know this is not supposed to happen but I cannot find another possible cause for the missing email.

Could that be or should I be looking someplace else.

Thanks,

Todd

[toddh]

I did find the email in question in the Milter Outbound queue and I have created a separate thread for that.

I would like to know if I should still be concerned about the error message "database disk image is malformed"

Thanks,

Todd

[shawniverson]

I think "database disk image is malformed" may be the Processing.db or the SpamAssassin.cache.db, but not sure which.

Do you see that message when you do this?

Code: Select all

MailScanner --processing

[toddh]

Shawn,

No it does not appear to.

Looking thought the log I see this

Jan 23 05:59:35 efa4 MailScanner[11919]: Spam Checks: Starting
Jan 23 05:59:37 efa4 MailScanner[11919]: Unable to initialise database connection: Access denied for user 'efa'@'localhost' (using password: NO)
Jan 23 05:59:37 efa4 MailScanner[11919]: database disk image is malformeded

So it appears I have a permissions issue?

I checked and there is no user or group "efa"

Todd

[shawniverson]

Ok, that shouldn't be a big deal. That's for the eFa tokens db, means the password is not set for the database user.

To fix as root:

Code: Select all

mysql -e "ALTER USER 'efa'@'localhost' IDENTIFIED BY 'somepassword'; FLUSH PRIVILEGES;"
if [[ -z $(grep EFASQLPWD /etc/eFa/eFa-Config) ]]; then
  echo "EFASQLPWD:somepassword" >> /etc/eFa/eFa-Config
else
  sed -i "/EFASQLPWD/ c\EFASQLPWD:somepasssword" /etc/eFa/eFa-Config
fi