1 (edited by kaipanoi 2014-12-24 22:03:08)

Topic: amavis crashing during update?

==== Required information ====
- iRedMail version: 0.8.7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MYSQL
- Linux/BSD distribution name and version: Centos 6.6 x86_64
====

looks like amavis dies when freshclam runs: happens every night

messages:
Dec 24 03:45:45 post puppet-agent[12273]: Finished catalog run in 9.68 seconds
Dec 24 03:50:05 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 03:50:46 post puppet-agent[13360]: Finished catalog run in 10.18 seconds
Dec 24 03:55:45 post puppet-agent[14444]: Finished catalog run in 9.19 seconds
Dec 24 04:00:48 post puppet-agent[15547]: Finished catalog run in 12.15 seconds
Dec 24 04:01:13 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 04:04:54 post freshclam[16745]: ClamAV update process started at Wed Dec 24 04:04:54 2014
Dec 24 04:04:54 post freshclam[16745]: main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
Dec 24 04:05:26 post freshclam[16745]: nonblock_recv: recv timing out (30 secs)
Dec 24 04:05:26 post freshclam[16745]: getfile: Error while reading database from db.us.clamav.net (IP: 104.131.196.175): Operation now in progress
Dec 24 04:05:26 post freshclam[16745]: getpatch: Can't download daily-19827.cdiff from db.us.clamav.net
Dec 24 04:05:45 post puppet-agent[16746]: Finished catalog run in 9.40 seconds
Dec 24 04:05:57 post freshclam[16745]: nonblock_connect: connect timing out (30 secs)
Dec 24 04:05:57 post freshclam[16745]: Can't connect to port 80 of host db.us.clamav.net (IP: 65.19.179.67)
Dec 24 04:05:57 post freshclam[16745]: Trying host db.us.clamav.net (64.6.100.177)...
Dec 24 04:05:57 post freshclam[16745]: Downloading daily-19827.cdiff [100%]
Dec 24 04:05:57 post freshclam[16745]: Downloading daily-19828.cdiff [100%]
Dec 24 04:05:58 post freshclam[16745]: Downloading daily-19829.cdiff [100%]
Dec 24 04:05:58 post freshclam[16745]: Downloading daily-19830.cdiff [100%]
Dec 24 04:05:58 post freshclam[16745]: Downloading daily-19831.cdiff [100%]
Dec 24 04:05:58 post freshclam[16745]: Downloading daily-19832.cdiff [100%]
Dec 24 04:06:06 post freshclam[16745]: daily.cld updated (version: 19832, sigs: 1296333, f-level: 63, builder: neo)
Dec 24 04:06:07 post freshclam[16745]: bytecode.cvd is up to date (version: 244, sigs: 44, f-level: 63, builder: dgoddard)
Dec 24 04:06:10 post freshclam[16745]: Database updated (3720602 signatures) from db.us.clamav.net (IP: 64.6.100.177)
Dec 24 04:10:49 post puppet-agent[18023]: Finished catalog run in 12.83 seconds
Dec 24 04:11:13 post clamd[1114]: SelfCheck: Database modification detected. Forcing reload.
Dec 24 04:11:30 post clamd[1114]: Reading databases from /var/lib/clamav
Dec 24 04:11:38 post clamd[1114]: Database correctly reloaded (3715045 signatures)
Dec 24 04:15:47 post puppet-agent[19114]: Finished catalog run in 9.90 seconds
Dec 24 04:20:46 post puppet-agent[20207]: Finished catalog run in 10.93 seconds
Dec 24 04:21:38 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 04:25:45 post puppet-agent[21319]: Finished catalog run in 9.75 seconds
Dec 24 04:30:45 post puppet-agent[22408]: Finished catalog run in 8.83 seconds
Dec 24 04:31:38 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 04:35:47 post puppet-agent[23493]: Finished catalog run in 11.66 seconds
Dec 24 04:40:47 post puppet-agent[24581]: Finished catalog run in 11.29 seconds
Dec 24 04:41:38 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 04:45:44 post puppet-agent[25665]: Finished catalog run in 8.63 seconds
Dec 24 04:50:45 post puppet-agent[26754]: Finished catalog run in 9.47 seconds
Dec 24 04:51:39 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 04:55:44 post puppet-agent[27838]: Finished catalog run in 8.30 seconds
Dec 24 05:00:44 post puppet-agent[28927]: Finished catalog run in 8.11 seconds
Dec 24 05:01:39 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 05:05:44 post puppet-agent[30029]: Finished catalog run in 8.08 seconds
Dec 24 05:10:44 post puppet-agent[31120]: Finished catalog run in 8.18 seconds
Dec 24 05:11:39 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 05:15:44 post puppet-agent[32204]: Finished catalog run in 8.08 seconds
Dec 24 05:20:44 post puppet-agent[836]: Finished catalog run in 7.94 seconds
Dec 24 05:21:39 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 05:25:44 post puppet-agent[1985]: Finished catalog run in 8.04 seconds
Dec 24 05:30:43 post puppet-agent[3073]: Finished catalog run in 7.42 seconds
Dec 24 05:31:39 post clamd[1114]: SelfCheck: Database status OK.
Dec 24 05:35:41 post puppet-agent[4220]: (/Stage[main]/Mta/Service[amavisd]/ensure) ensure changed 'stopped' to 'running'
Dec 24 05:35:45 post puppet-agent[4220]: Finished catalog run in 8.89 seconds
Dec 24 05:40:41 post puppet-agent[5324]: (/Stage[main]/Mta/Service[amavisd]/ensure) ensure changed 'stopped' to 'running'
Dec 24 05:40:45 post puppet-agent[5324]: Finished catalog run in 9.41 seconds
Dec 24 05:41:39 post clamd[1114]: SelfCheck: Database status OK.


maillog:
Dec 24 05:32:03 post postfix/smtpd[3823]: connect from unknown[10.0.0.9]
Dec 24 05:32:04 post postfix/smtpd[3823]: A7FF434190A: client=unknown[10.0.0.9]
Dec 24 05:32:04 post postfix/cleanup[3827]: A7FF434190A: message-id=<>
Dec 24 05:32:05 post postfix/smtpd[3823]: disconnect from unknown[10.0.0.9]
Dec 24 05:32:05 post postfix/qmgr[1428]: A7FF434190A: from=<checkmkomd@natetron.net>, size=5802, nrcpt=1 (queue active)
Dec 24 05:32:06 post postfix/smtp[3832]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Dec 24 05:32:07 post postfix/smtp[3832]: A7FF434190A: to=<DATAMASKEDt>, relay=none, delay=2.8, delays=1.5/1.3/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Dec 24 05:32:20 post amavis[3839]: starting. /usr/sbin/amavisd at post.natetron.net amavisd-new-2.9.1 (20140627), Unicode aware, LANG="en_US.UTF-8"
Dec 24 05:32:21 post amavis[3840]: (!)Net::Server: 2014/12/24-05:32:21 Can't connect to TCP port 10024 on ::1 [Cannot assign requested address]\n  at line 68 in file /usr/share/perl5/vendor_perl/Net/Server/Proto/TCP.pm


here's the state of things when I try to restart the services:

Shutting down amavisd: The amavisd daemon is apparently not running, no PID file /var/run/amavisd/amavisd.pid
                                                           [FAILED]

Starting amavisd:                                          [  OK  ]

Stopping Clam AntiVirus Daemon:                            [  OK  ]
Starting Clam AntiVirus Daemon:                            [  OK  ]
Stopping clamd.amavisd:                                    [FAILED]
Starting clamd.amavisd:                                    [  OK  ]
Stopping Dovecot Imap:                                     [  OK  ]
Starting Dovecot Imap:                                     [  OK  ]
Stopping mysqld:                                           [  OK  ]
Starting mysqld:                                           [  OK  ]
Shutting down cbpolicyd:                                   [  OK  ]
Starting cbpolicyd:                                        [  OK  ]
Stopping iredapd ...
Starting iredapd ...
Shutting down postfix:                                     [  OK  ]
Starting postfix:                                          [  OK  ]
Stopping saslauthd:                                        [FAILED]
Starting saslauthd:                                        [  OK  ]
Stopping spamd:                                            [FAILED]
Starting spamd:                                            [  OK  ]


I can get everything back up but amavisd:
# service amavisd status
amavisd dead but subsys locked


I think this is the real error:
maillog:Dec 24 06:20:40 post amavis[14514]: (!)Net::Server: 2014/12/24-06:20:40 Can't connect to TCP port 10024 on ::1 [Cannot assign requested address]\n  at line 68 in file /usr/share/perl5/vendor_perl/Net/Server/Proto/TCP.pm

# amavisd debug
Config file "/etc/amavisd.conf" does not exist, at /usr/sbin/amavisd line 2148.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: amavis crashing during update?

kaipanoi wrote:

# service amavisd status
amavisd dead but subsys locked

Remove its PID file (/var/run/amavisd/amavisd.pid), then try to restart it again.
If it's not /var/run/amavisd/amavisd.pid, please check /etc/amavisd/amavid.conf and find parameter '$pid_file' to see which PID file it uses.

3 (edited by kaipanoi 2014-12-26 20:12:29)

Re: amavis crashing during update?

The PID is where you suspected it would be. Removing it did not help and I could not get it to start. Whatever is causing this happens every morning at around 0430: http://imgur.com/a/f06sJ

Strangely, a reboot takes care of it.

4

Re: amavis crashing during update?

Do you have any cron job which will access Amavisd SQL database or restart Amavisd service? Anything related to Amavisd.

5 (edited by kaipanoi 2014-12-28 00:25:40)

Re: amavis crashing during update?

Not that I can think of. This all running on a VM provisioned specifically for this purpose. No other services are running outside of what the iRedmail installer configured or what ships by default with CentOS 6, with the exception of haveged, puppet, sysstat, and xinetd (for check_mk):

# chkconfig --list |grep :on
amavisd         0:off   1:off   2:off   3:on    4:on    5:on    6:off
blk-availability        0:off   1:on    2:on    3:on    4:on    5:on    6:off
cbpolicyd       0:off   1:off   2:off   3:on    4:on    5:on    6:off
clamd           0:off   1:off   2:off   3:on    4:on    5:on    6:off
crond           0:off   1:off   2:on    3:on    4:on    5:on    6:off
dovecot         0:off   1:off   2:off   3:on    4:on    5:on    6:off
haveged         0:off   1:off   2:on    3:on    4:on    5:on    6:off
httpd           0:off   1:off   2:off   3:on    4:on    5:on    6:off
iredapd         0:off   1:off   2:off   3:on    4:on    5:on    6:off
iscsi           0:off   1:off   2:off   3:on    4:on    5:on    6:off
iscsid          0:off   1:off   2:off   3:on    4:on    5:on    6:off
lvm2-monitor    0:off   1:on    2:on    3:on    4:on    5:on    6:off
mdmonitor       0:off   1:off   2:on    3:on    4:on    5:on    6:off
mysqld          0:off   1:off   2:off   3:on    4:on    5:on    6:off
netfs           0:off   1:off   2:off   3:on    4:on    5:on    6:off
network         0:off   1:off   2:on    3:on    4:on    5:on    6:off
nfslock         0:off   1:off   2:off   3:on    4:on    5:on    6:off
ntpd            0:off   1:off   2:on    3:on    4:on    5:on    6:off
portreserve     0:off   1:off   2:on    3:on    4:on    5:on    6:off
postfix         0:off   1:off   2:on    3:on    4:on    5:on    6:off
puppet          0:off   1:off   2:on    3:on    4:on    5:on    6:off
rpcbind         0:off   1:off   2:on    3:on    4:on    5:on    6:off
rpcgssd         0:off   1:off   2:off   3:on    4:on    5:on    6:off
rsyslog         0:off   1:off   2:on    3:on    4:on    5:on    6:off
sshd            0:off   1:off   2:on    3:on    4:on    5:on    6:off
sysstat         0:off   1:on    2:on    3:on    4:on    5:on    6:off
udev-post       0:off   1:on    2:on    3:on    4:on    5:on    6:off
xinetd          0:off   1:off   2:on    3:on    4:on    5:on    6:off
yum-cron        0:off   1:off   2:on    3:on    4:on    5:on    6:off

The crontabs are stock:

# head -n99 /var/spool/cron/*
==> /var/spool/cron/amavis <==
#
# File generated by iRedMail (2014.12.19.08.44.54):
#
# Version:  0.8.7
# Project:  http://www.iredmail.org/
#
# Community: http://www.iredmail.org/forum/
#

# Delete virus mails which created 15 days ago.
1   5   *   *   *   touch /var/spool/amavisd/quarantine; find /var/spool/amavisd/quarantine/ -mtime +15 | xargs rm -rf {}

==> /var/spool/cron/root <==
# iRedMail: Cleanup Cluebringer database
1   3   *   *   *   /usr/sbin/cbpadmin --config=/etc/policyd/cluebringer.conf --cleanup >/dev/null
# iRedMail: Cleanup Amavisd database
1  2   *   *   *   python /var/www/iredadmin/tools/cleanup_amavisd_db.py &>/dev/null
# iRedMail: Backup MySQL databases on 03:30 AM
30   3   *   *   *   /bin/bash /var/vmail/backup/backup_mysql.sh

Nothing up my sleeve here either:

09:04:17 [root@post.natetron.lan /etc]
# cat anacrontab 
# /etc/anacrontab: configuration file for anacron

# See anacron(8) and anacrontab(5) for details.

SHELL=/bin/sh
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
# the maximal random delay added to the base delay of the jobs
RANDOM_DELAY=45
# the jobs will be started during the following hours only
START_HOURS_RANGE=3-22

#period in days   delay in minutes   job-identifier   command
1       5       cron.daily              nice run-parts /etc/cron.daily
7       25      cron.weekly             nice run-parts /etc/cron.weekly
@monthly 45     cron.monthly            nice run-parts /etc/cron.monthly

09:04:55 [root@post.natetron.lan /etc]
# cat crontab 
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

# For details see man 4 crontabs

# Example of job definition:
# .---------------- minute (0 - 59)
# |  .------------- hour (0 - 23)
# |  |  .---------- day of month (1 - 31)
# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...
# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# |  |  |  |  |
# *  *  *  *  * user-name command to be executed

09:05:13 [root@post.natetron.lan /etc]
# ll cron*
-rw-------. 1 root root    0 Nov 23  2013 cron.deny
-rw-r--r--. 1 root root  457 Sep 26  2011 crontab

cron.d:
total 24
drwxr-xr-x.  2 root root 4096 Dec 19 08:52 ./
drwxr-xr-x. 79 root root 4096 Dec 26 05:30 ../
-rw-r--r--.  1 root root  113 Nov 23  2013 0hourly
-rw-------.  1 root root  108 Nov 12 09:58 raid-check
-rw-r--r--.  1 root root  459 Dec 19 08:52 sa-update
-rw-------.  1 root root  235 Oct 16 09:03 sysstat

cron.daily:
total 40
drwxr-xr-x.  2 root root 4096 Dec 20 20:07 ./
drwxr-xr-x. 79 root root 4096 Dec 26 05:30 ../
-rwxr-xr-x.  1 root root  265 Sep 10  2013 0logwatch*
-rwxr-xr-x.  1 root root 4983 Oct 16 11:15 0yum.cron*
-rwxr-xr-x.  1 root root  101 Aug  3 17:18 amavisd*
-rwxr-xr-x.  1 root root  396 Nov 19 07:25 freshclam*
-rwxr-xr-x.  1 root root  196 Jul 18  2013 logrotate*
-rwxr-xr-x   1 root root  905 Feb 21  2013 makewhatis.cron*
-rwxr-xr-x.  1 root root  365 Oct 16  2009 tmpwatch*

cron.hourly:
total 12
drwxr-xr-x.  2 root root 4096 Sep 26  2011 ./
drwxr-xr-x. 79 root root 4096 Dec 26 05:30 ../
-rwxr-xr-x.  1 root root  409 Nov 23  2013 0anacron*

cron.monthly:
total 8
drwxr-xr-x.  2 root root 4096 Sep 26  2011 ./
drwxr-xr-x. 79 root root 4096 Dec 26 05:30 ../

cron.weekly:
total 8
drwxr-xr-x.  2 root root 4096 Sep 26  2011 ./
drwxr-xr-x. 79 root root 4096 Dec 26 05:30 ../

Interestingly, the sa-update log is always empty:

09:06:09 [root@post.natetron.lan /etc]
# cat cron.d/sa-update ; wc -l /var/log/sa-update.log
# *** DO NOT MODIFY THIS FILE ***
### Spamassassin Rules Updates ###
#
# http://wiki.apache.org/spamassassin/RuleUpdates
# 
# sa-update automatically updates your rules once per day if a spam daemon like
# spamd or amavisd are running.  You can force sa-update to run in
# /etc/sysconfig/sa-update
#
# /var/log/sa-update.log contains a history log of sa-update runs

10 4 * * * root /usr/share/spamassassin/sa-update.cron 2>&1 | tee -a /var/log/sa-update.log
0 /var/log/sa-update.log

Also stock:

09:06:56 [root@post.natetron.lan /etc]
# cat cron.daily/amavisd 
/usr/sbin/tmpwatch 24 /var/spool/amavisd/tmp
/usr/sbin/tmpwatch -d 720 /var/spool/amavisd/quarantine

09:07:45 [root@post.natetron.lan /etc]
# cat cron.daily/freshclam 
#!/bin/sh

### A simple update script for the clamav virus database.
### This could as well be replaced by a SysV script.

### fix log file if needed
LOG_FILE="/var/log/clamav/freshclam.log"
if [ ! -f "$LOG_FILE" ]; then
    touch "$LOG_FILE"
    chmod 644 "$LOG_FILE"
    chown clam.clam "$LOG_FILE"
fi

/usr/bin/freshclam \
    --quiet \
    --datadir="/var/lib/clamav" \
    --log="$LOG_FILE"

I paid more attention this time to:

09:08:55 [root@post.natetron.lan /etc]
# amavisd
Config file "/etc/amavisd.conf" does not exist, at /usr/sbin/amavisd line 2148.

And so made a symlink:

09:08:58 [root@post.natetron.lan /etc]
# ln -s /etc/amavisd/amavisd.conf /etc/amavisd.conf

This time it started and but died after being unable to bind to the configured port:

09:09:08 [root@post.natetron.lan /etc]
# amavisd debug
Dec 27 09:09:11.858 post.natetron.net /usr/sbin/amavisd[16735]: logging initialized, log level 0, syslog: amavis.mail
Dec 27 09:09:11.858 post.natetron.net /usr/sbin/amavisd[16735]: starting. /usr/sbin/amavisd at post.natetron.net amavisd-new-2.9.1 (20140627), Unicode aware, LANG="en_US.utf8"
Dec 27 09:09:11.858 post.natetron.net /usr/sbin/amavisd[16735]: perl=5.010001, user=, EUID: 496 (496);  group=, EGID: 496 496 (496 496)
Dec 27 09:09:11.901 post.natetron.net /usr/sbin/amavisd[16735]: INFO: no optional modules: unicore::lib::Perl::Alnum.pl unicore::lib::Perl::SpacePer.pl unicore::lib::Perl::Word.pl unicore::lib::Alpha::Y.pl unicore::lib::Nt::De.pl Unix::Getrusage
Dec 27 09:09:11.901 post.natetron.net /usr/sbin/amavisd[16735]: SpamControl: attempting to load scanner SpamAssassin, module Amavis::SpamControl::SpamAssassin
Dec 27 09:09:11.901 post.natetron.net /usr/sbin/amavisd[16735]: SpamControl: scanner SpamAssassin, module Amavis::SpamControl::SpamAssassin
Dec 27 09:09:12.121 post.natetron.net /usr/sbin/amavisd[16735]: INFO: SA version: 3.3.1, 3.003001, no optional modules: Net::CIDR::Lite URI::_idna URI::_punycode Image::Info Image::Info::GIF Image::Info::JPEG Image::Info::PNG Image::Info::BMP Image::Info::TIFF auto::NetAddr::IP::InetBase::inet_any2n auto::NetAddr::IP::InetBase::inet_n2ad auto::NetAddr::IP::InetBase::inet_n2dx auto::NetAddr::IP::InetBase::inet_ntoa auto::NetAddr::IP::InetBase::ipv6_aton auto::NetAddr::IP::InetBase::ipv6_ntoa
Dec 27 09:09:12.121 post.natetron.net /usr/sbin/amavisd[16735]: SpamControl: init_pre_chroot on SpamAssassin done
Dec 27 09:09:12.121 post.natetron.net /usr/sbin/amavisd[16735]: socket module IO::Socket::INET6, protocol families available: INET, INET6
Dec 27 09:09:12.122 post.natetron.net /usr/sbin/amavisd[16735]: bind to /var/spool/amavisd/amavisd.sock|unix, 127.0.0.1:10024/tcp, [::1]:10024/tcp, 127.0.0.1:9998/tcp, [::1]:9998/tcp
Dec 27 09:09:12.123 post.natetron.net /usr/sbin/amavisd[16735]: Net::Server: 2014/12/27-09:09:12 Amavis (type Net::Server::PreForkSimple) starting! pid(16735)
Dec 27 09:09:12.127 post.natetron.net /usr/sbin/amavisd[16735]: Net::Server: Binding to UNIX socket file "/var/spool/amavisd/amavisd.sock"
Dec 27 09:09:12.127 post.natetron.net /usr/sbin/amavisd[16735]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1 with IPv4
Dec 27 09:09:12.127 post.natetron.net /usr/sbin/amavisd[16735]: Net::Server: Binding to TCP port 10024 on host ::1 with IPv6
Dec 27 09:09:12.128 post.natetron.net /usr/sbin/amavisd[16735]: (!)Net::Server: 2014/12/27-09:09:12 Can't connect to TCP port 10024 on ::1 [Cannot assign requested address]\n  at line 68 in file /usr/share/perl5/vendor_perl/Net/Server/Proto/TCP.pm
Dec 27 09:09:12.128 post.natetron.net /usr/sbin/amavisd[16735]: Net::Server: 2014/12/27-09:09:12 Server closing!

Nothing is currently listening on that port:

09:12:55 [root@post.natetron.lan /etc]
# netstat -an|grep 10024 -c
0

Here are all the ports that are listening when it's in this error condition:

tcp        0      0 0.0.0.0:35987               0.0.0.0:*                   LISTEN      1037/rpc.statd      
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      1018/sshd           
tcp        0      0 0.0.0.0:24                  0.0.0.0:*                   LISTEN      1293/dovecot        
tcp        0      0 0.0.0.0:25                  0.0.0.0:*                   LISTEN      903/smtpd           
tcp        0      0 0.0.0.0:4190                0.0.0.0:*                   LISTEN      1293/dovecot        
tcp        0      0 127.0.0.1:7777              0.0.0.0:*                   LISTEN      1633/python         
tcp        0      0 0.0.0.0:993                 0.0.0.0:*                   LISTEN      1293/dovecot        
tcp        0      0 0.0.0.0:995                 0.0.0.0:*                   LISTEN      1293/dovecot        
tcp        0      0 127.0.0.1:10025             0.0.0.0:*                   LISTEN      27720/master        
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN      1267/mysqld         
tcp        0      0 0.0.0.0:587                 0.0.0.0:*                   LISTEN      27720/master        
tcp        0      0 0.0.0.0:110                 0.0.0.0:*                   LISTEN      1293/dovecot        
tcp        0      0 127.0.0.1:10031             0.0.0.0:*                   LISTEN      1312/perl           
tcp        0      0 0.0.0.0:143                 0.0.0.0:*                   LISTEN      1293/dovecot        
tcp        0      0 0.0.0.0:111                 0.0.0.0:*                   LISTEN      1002/rpcbind        
tcp        0      0 :::22                       :::*                        LISTEN      1018/sshd           
tcp        0      0 :::443                      :::*                        LISTEN      1559/httpd          
tcp        0      0 :::6556                     :::*                        LISTEN      1095/xinetd         
tcp        0      0 :::42444                    :::*                        LISTEN      1037/rpc.statd      
tcp        0      0 :::111                      :::*                        LISTEN      1002/rpcbind        
tcp        0      0 :::80                       :::*                        LISTEN      1559/httpd  

SELinux is disabled, of course:

# sestatus 
SELinux status:                 disabled

I'm still at a loss...

6

Re: amavis crashing during update?

Not that I fully understand it, but I commented out the line starting with "inet_acl" (which was line 454 for me) in /etc/amavisd/amavisd.conf and things seem better now. I'll know in the morning when all the cron jobs run.