Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 1 subscriber
  • Views 4292 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

unexpected SMTPD restart

GL@MO
Hi Community,

I have a little problem with my ASG220 (newest UTM9 release, full guard).
From time to time I get Info-Mails that the smtp daemon has been restarted.

the following messages are logged in selfmonitoring log: 

2012:11:28-17:39:31 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 1 - 15

2012:11:28-17:39:51 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 2 - 15

2012:11:28-17:40:11 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 3 - 15

2012:11:28-17:40:31 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 4 - 15

2012:11:28-17:40:51 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 5 - 15

2012:11:28-17:41:11 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 6 - 15

2012:11:28-17:41:31 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 7 - 15

2012:11:28-17:41:51 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 8 - 15

2012:11:28-17:42:11 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 9 - 15

2012:11:28-17:42:31 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 10 - 15

2012:11:28-17:42:51 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 11 - 15

2012:11:28-17:43:11 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 12 - 15

2012:11:28-17:43:31 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 13 - 15

2012:11:28-17:43:51 AstaroName-0 selfmonng[3876]: I check Failed increment smtp_running counter 14 - 15

2012:11:28-17:44:11 AstaroName-0 selfmonng[3876]: W check Failed increment smtp_running counter 15 - 15

2012:11:28-17:44:12 AstaroName-0 selfmonng[3876]: Smtpd not running - restarted

2012:11:28-17:44:12 AstaroName-0 selfmonng[3876]: W NOTIFYEVENT Name=smtp_running Level=INFO Id=125 sent

2012:11:28-17:44:12 AstaroName-0 selfmonng[3876]: W triggerAction: 'cmd'

2012:11:28-17:44:13 AstaroName-0 selfmonng[3876]: W actionCmd(+):  '/var/mdw/scripts/smtp restart'

2012:11:28-17:44:19 AstaroName-0 selfmonng[3876]: W child returned status: exit='0' signal='0'


and in the smtp proxy log the following: 
2012:11:28-17:44:30 AstaroName-0 smtpd[19440]: SCANNER[19440]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="127.0.0.1" from="do-not-reply@fw-notify.net" to="admin@mydomain.de" subject="[AstaroName][INFO-125] Smtpd not running - restarted" queueid="1TdkkQ-00053Y-FP" size="212"


the Email protection is running in single profile mode.

Does somebody have an idea what I can do?


This thread was automatically locked due to age.
  • 0
    Congratulate yourself for having purchased a device that knows how to fix itself! [:D]

    Seriously, if you're not getting non-delivery complaints, this is normal behavior in complex systems.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    I disagree with balfson.  I would start a support ticket..that recurring is not normal behavior.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    well I get these errors since I updated to Sophos UTM 9.003016 and never before, it also happens from time to time when it wants to happen [8-)]

    ---

  • 0
    support ticket if you have support available..[:)]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    While it is good that the system "fixes" itself when the daemon fails ... I agree with William, it should not be doing that.  I've noted this new behavior since 9.004 has been installed on a couple of customer units, and I think even on 8.306 or 8.307 ... probably an issue with the patch they put into those updates to fix an exim vulnerability if I had to guess.

    I've only seen this happen a few times in the past week or so, at different customers, so I haven't bothered to start a support case on those events.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    It looks like it's probably a V9 issue.  I just searched for check Failed increment smtp_running in Selfmonitoring on two client ASGs running 8.306/7, and there were none in the last 30 days on one and one line in the other one when smtpd was restarted after the smtpd.rpm for 8.307 was installed on 11/19.

    I made the comment I did because I don't think there's a debug file that would help the devs find this - that they'll have to reproduce this on a test system where auto-restart is turned off.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    I do not have support, only 3rd party as Level1 but they never heard about such thing. I do not have any problems concerning Mail traffic too but this thing must not happen...

    Already wrote a mail to astaro directly but they directed me to my local astaro reseller......maybe it helps to write "this is a bug" instead of asking for help :-S

    ---

  • 0
    The organization that sold the 220 to you is required by Astaro/Sophos to enter a support request when you have a problem.  Like I said, I don't think it will help anyone, but maybe the developers don't yet know of this issue...

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    Is there already a solution for this problem? I've got the same with an utm 120 that I've updated from V8 to 9.005016.
Unfiltered HTML