CSF Warnings

[bigdigillc]

I tried it on both master and slave and got the same error I posted above. Is there something else I can try?

[MRatWork]

Your servers are missing '/var/log/maillog' file.

[bigdigillc]

Are you running rsyslog? My systems all seem to be using sysklogd. If I go through the we admin interface the mail logs are all blank, but I was able to find mailog under '/var/log/kloxo/maillog'.

[MRatWork]

Inform 'dir -l /var/log/mail*'.

[bigdigillc]

Code: [Select]

[root@BIGHOST ~]# dir -l /var/log/mail*
-rw------- 1 root root 0 Mar  3 04:02 /var/log/maillog
-rw------- 1 root root 0 Mar  2 08:04 /var/log/maillog.1


[MRatWork]

Try reinstall qmail with 'yum reinstall *-toaster" and then 'rm -f /var/log/mail*; sh /script/fixmail-all; sh /script/restart-mail; dir -l /var/log/mail*'

[bigdigillc]

Code: [Select]

rm: cannot remove `/var/log/mail': Is a directory
rm: cannot remove `/var/log/maildrop': Is a directory


[bigdigillc]

Also, I went ahead with the other steps, but ran 'yum install *-toaster' toaster on one server because it seemed to be missing most of the packages. not sure if that was a good idea. Afterwards I ran 'cleanup' and received this error over and over:

supervise: fatal: unable to start clamd/run: file does not exist
 

[MRatWork]

run 'echo "" > /var/qmail/supervise/clamd/down' and ''echo "" > /var/qmail/supervise/clamd/log/down' for 'supervise: fatal: unable to start clamd/run: file does not exist' issue.

[bigdigillc]

Thanks Mustafa. It appears I have everything cleaned up. I followed your advice and reinstalled qmail. I still get a lot of warnings (almost 1000) a day from CSF, but I'm pretty sure CSF needs to be configured to allow some of these services. I noticed that there was a CSF thread, but it is now locked. Is there a place where we can post the processes CSF is warning us about?

I mostly get these:

Code: [Select]

/usr/sbin/avahi-daemon
/usr/libexec/gdmgreeter
/opt/php52s/bin/php-cgi
/usr/libexec/hald-addon-acpi
/sbin/rpc.statd
/usr/sbin/hald
/usr/bin/xfs
/sbin/portmap

Also on my slave server I get 4 processes called "/usr/sbin/logrotate /etc/logrotate.conf" that each take up 900+ mb's that i have to manually kill.

[MRatWork]

Sadly, I don't think I need firewall (like iptables or CSF). So, I don't know about CSD reports.