AntiSpam Service died-v19

Lloyd, can you please enable support access and provide an access ID?

My problem was fixed now from global escalation manager. There was an checksum error at antispam database?

By any chance nils50122 did they leave you with step/commands to fix the checksum error?

No sorry, they tell me no details how to fix them.

Lloyd Playfair If you can open a support access tunnel, our engineering team would like to look at your device to see how we can help. 

After identifying the root cause of this issue we're working on a fix for it.

Here are the steps to start the antispam service when there are "... database length < sizeof( ..." entries in the SASI log:

• stop the SASI sevice:

• delete the anti-spam DB files:

• start SASI from the CLI:

• wait until you see this in the console output:
  • "... Signatures don't exist, fetching new signatures.."
  • "... Lased started on port : 25315"
• stop the SASI process by pressing CTRL+C
• start the SASI service:

service antispam:start -ds nosync

• check the SASI log to see if SASI started, again look for this entry: "... Lased started on port : 25315":

tail /log/sasi.log

• you shouldn't see "... database length < sizeof( ..."log entries anymore.

Hi Janos, can you help me out on resolving?

All was fine until I upgraded from 19.0.0 GA-Build317 to 19.0.1 MR-1-Build365.

I am on proxmox 7.2-7 and tried to figure out whether it has to do with the upgrade, the configuration or the latest firmware.

1. created a new vm
2. installed 19.0.1 MR-1-Build365
3. used a new XG Home license
4. all is well with anti spam
5. restored latest backup from my other non-functioning install
6. anti spam does not start
7. Your commands to resolve result in same as for the upgraded system. Eg not able to fetch the signature.

So it looks like the backup is not upwards compatible with the latest firmware AND the configuration is not adapted to support the new firmware during upgrade.

Hope you can help me out.

Hi Paul,

apparently, SASI cannot reach sasi.sophosupd.com to check/fetch database updates.

Can that domain name be resolved from the command line of the SFOS system?

What do you get when running:

curl sasi.sophosupd.com/.../asdb.antispam

Hi Janos, thank you for this fast response. The result is:

The same I receive when opening it in a browser.

Paul, can you please send me a private message with the values of the ENABLE_PRECOMPILED_SIGS and HMAC_TOKEN options in the SASI config file (/cfs/sasi/sasidaemon.conf)?