Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: exim: users

Spool file is locked (another process is handling this message)

 

 

exim users RSS feed   Index | Next | Previous | View Threaded


oliver.koetter at gmx

Sep 29, 2005, 3:30 AM

Post #1 of 27 (5020 views)
Permalink
Spool file is locked (another process is handling this message)

Hi,

I am relatively new to exim and have a big problem.
I am using Exim 4.50 on Debian Sarge on my personal mail server which is a virtual server. It is
the exim4-daemon-heavy package.

Everything works fine for some months now, but since last week I am unable to send mails to one
specific guy. When I type "mailq" I see these mails which do not get send. I am able to send mail
to any other address I have tested.

The mainlog says:
2005-09-29 02:09:29 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)

which is of course repeated every 30 seconds.

Does anybody have any idea what this may be? I cannot think which other process this could be. I
use clamav and spamassassin which are scanning incoming messages but these are outgoing messages
and any other receipient works.

Thanks for any help,

Oliver


oliver at koetter

Sep 29, 2005, 3:35 AM

Post #2 of 27 (5051 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Oliver Kötter wrote:
> The mainlog says:
> 2005-09-29 02:09:29 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this
> message)
>
> which is of course repeated every 30 seconds.

Sorry, of course it is repeated every 30 _minutes_

Oliver


oliver.koetter at gmx

Sep 29, 2005, 3:37 AM

Post #3 of 27 (4963 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Oliver Kötter wrote:
> The mainlog says:
> 2005-09-29 02:09:29 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this
message)
>
> which is of course repeated every 30 seconds.

Sorry, of course it is repeated every 30 _minutes_

Oliver



--
Oliver Kötter
oliver [at] koetter


msherman at projectile

Sep 29, 2005, 5:51 AM

Post #4 of 27 (4957 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Oliver Kötter wrote:
>
> Everything works fine for some months now, but since last week I am
> unable to send mails to one specific guy. When I type "mailq" I see
> these mails which do not get send. I am able to send mail to any
> other address I have tested.
>
> The mainlog says: 2005-09-29 02:09:29 1EKeSt-0001ZE-Sw Spool file is
> locked (another process is handling this message)

That's not all the mainlog says. Use exigrep to find all the mainlog
messages so we can see how the message got into this state in the first
place:

exigrep 1EKeSt-0001ZE-Sw /var/log/exim4/mainlog*

> Does anybody have any idea what this may be? I cannot think which
> other process this could be. I use clamav and spamassassin which are
> scanning incoming messages but these are outgoing messages and any
> other receipient works.

If it's an exim queue runner process holding the lock, exiwhat will show
it. In that case, killing the process should release it, I think.

- Marc


oliver.koetter at gmx

Sep 29, 2005, 9:11 AM

Post #5 of 27 (4967 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Marc Sherman schrieb:
>> The mainlog says: 2005-09-29 02:09:29 1EKeSt-0001ZE-Sw Spool file is
>> locked (another process is handling this message)
>
> That's not all the mainlog says. Use exigrep to find all the mainlog
> messages so we can see how the message got into this state in the first
> place:
>
> exigrep 1EKeSt-0001ZE-Sw /var/log/exim4/mainlog*

Here's the output:
+++ 1EKeSt-0001ZE-Sw not completed +++
2005-09-29 02:09:29 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 02:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 03:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 03:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 04:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 04:39:31 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 05:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 05:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 06:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 06:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 07:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 07:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 08:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 08:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 09:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 09:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 10:09:36 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 10:39:36 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 11:09:36 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 11:39:37 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 12:09:36 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 12:39:36 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 15:25:51 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 15:55:51 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 16:25:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 16:55:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 17:25:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 17:55:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 18:07:28 1EKeSt-0001ZE-Sw <= oliver [at] mydomain H=dsl-084-060-040-005.arcor-ip.net
([192.168.1.75]) [84.60.40.5] P=esmtpa A=cram_md5_server:oliver S=609
id=433ABFB8.5020503 [at] mydomain
2005-09-28 18:34:57 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 19:04:57 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 19:34:57 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 19:55:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 20:00:12 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 20:26:00 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 20:55:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 21:25:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 21:55:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 22:25:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 23:09:29 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 23:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 00:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 00:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 01:09:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-29 01:39:28 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)

> If it's an exim queue runner process holding the lock, exiwhat will show
> it. In that case, killing the process should release it, I think.

exiwhat | grep 1EKeSt-0001ZE-Sw showed this:

16805 running queue: waiting for 1EKeSt-0001ZE-Sw (16965)
16965 delivering 1EKeSt-0001ZE-Sw: waiting for a remote delivery subprocess to finish
17379 delivering 1EKeSt-0001ZE-Sw to domain.de [IP.Address.Anonymized.:-)] (user [at] domain)

Killing does not help because the next time I send a mail to that receipient it starts again.
I can send mail however to all other mail adresses but this one. It's my brother's and he says
that he sah no problem getting emails from others.

Thanks for your help.

--
Oliver Kötter


oliver.koetter at gmx

Sep 29, 2005, 9:16 AM

Post #6 of 27 (4971 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

> exigrep 1EKeSt-0001ZE-Sw /var/log/exim4/mainlog*

ups, logs were mixed up in my previous mail, mainlog.1 was after mainlog, so please watch the time...

--
Oliver Kötter


msherman at projectile

Sep 29, 2005, 10:21 AM

Post #7 of 27 (4962 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Oliver Kötter wrote:
> 2005-09-28 18:07:28 1EKeSt-0001ZE-Sw <= oliver [at] mydomain H=dsl-084-060-040-005.arcor-ip.net
> ([192.168.1.75]) [84.60.40.5] P=esmtpa A=cram_md5_server:oliver S=609
> id=433ABFB8.5020503 [at] mydomain

msherman [at] pylori:~$ host mydomain.cc
;; Warning: ID mismatch: expected ID 35399, got 44095
;; Warning: ID mismatch: expected ID 35399, got 65267
;; connection timed out; no servers could be reached

There seems to be something wierd going on with your DNS, which could be
the source of this problem. Either that or you're obfuscating, in which
case you should read:
http://www.exim.org/eximwiki/MailingListEtiquette#head-a6f7fb5ce8816568569a321f783315207ec38063

> exiwhat | grep 1EKeSt-0001ZE-Sw showed this:
>
> 16805 running queue: waiting for 1EKeSt-0001ZE-Sw (16965)
> 16965 delivering 1EKeSt-0001ZE-Sw: waiting for a remote delivery subprocess to finish
> 17379 delivering 1EKeSt-0001ZE-Sw to domain.de [IP.Address.Anonymized.:-)] (user [at] domain)

Here you're definitely obfuscating.

- Marc


oliver.koetter at gmx

Sep 30, 2005, 12:53 AM

Post #8 of 27 (4972 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Marc Sherman wrote:
> Here you're definitely obfuscating.

OK, sorry, I really should have read your netiquette... so here is is once again, I obfuscated the
LHS of the mail addresses (xxx), I guess that's ok because I and my brother do not want to get
spammed ;-) (it's my brothers mail address I cannot send mails to)

www:~# exiwhat | grep 1EKeSt-0001ZE-Sw
16805 running queue: waiting for 1EKeSt-0001ZE-Sw (16965)
16965 delivering 1EKeSt-0001ZE-Sw: waiting for a remote delivery subprocess to finish
17379 delivering 1EKeSt-0001ZE-Sw to wilsky.de [82.96.75.212] (xxx [at] wilsky)

www:~# exigrep 1EKeSt-0001ZE-Sw /var/log/exim4/mainlog*

2005-09-28 18:07:28 1EKeSt-0001ZE-Sw <= xxx [at] koetter H=dsl-084-060-040-005.arcor-ip.net
([192.168.1.75]) [84.60.40.5] P=esmtpa A=cram_md5_server:xxx S=609 id=433ABFB8.5020503 [at] koetter
2005-09-28 18:34:57 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 18:34:57 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 19:04:57 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 19:34:57 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 19:55:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 20:00:12 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 20:26:00 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 20:55:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 21:25:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 21:55:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 22:25:59 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-28 23:09:29 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
... continues this way...
when the log wraps from mainlog.1 to mainlog there is this line:
+++ 1EKeSt-0001ZE-Sw not completed +++
the it continues:
2005-09-30 02:25:51 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-30 02:55:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-30 03:25:51 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-30 03:55:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-30 04:25:51 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-30 04:55:51 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-30 05:25:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
2005-09-30 05:55:50 1EKeSt-0001ZE-Sw Spool file is locked (another process is handling this message)
and so on...

www:~# mailq
40h 609 1EKeSt-0001ZE-Sw <xxx [at] koetter>
xxx [at] wilsky

www:~# hostname
www.koetter.cc

www:~# exim4 -bt -d xxx [at] wilsky
Exim version 4.50 uid=0 gid=0 pid=24161 D=fbb95cfd
Berkeley DB: Sleepycat Software: Berkeley DB 4.2.52: (December 3, 2003)
Support for: iconv() IPv6 PAM Perl GnuTLS Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm
mysql nis nis0 passwd pgsql
Authenticators: cram_md5 cyrus_sasl plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
changed uid/gid: forcing real = effective
uid=0 gid=0 pid=24161
auxiliary group list: <none>
configuration file is /var/lib/exim4/config.autogenerated
log selectors = 00000ffc 00020800
trusted user
admin user
user name "root" extracted from gecos field "root"
originator: uid=0 gid=0 login=root name=root
sender address = root [at] koetter
Address testing: uid=0 gid=102 euid=0 egid=102
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Testing xxx [at] wilsky
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Considering xxx [at] wilsky
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
routing xxx [at] wilsky
--------> hubbed_hosts router <--------
local_part=xxx domain=wilsky.de
checking domains
expansion of "${if exists{/etc/exim4/hubbed_hosts}{partial-lsearch;/etc/exim4/hubbed_hosts}fail}"
forced failure: assume not in this list
hubbed_hosts router skipped: domains mismatch
--------> dnslookup_relay_to_domains router <--------
local_part=xxx domain=wilsky.de
checking domains
wilsky.de in "@:localhost:koetter.cc"? no (end of list)
wilsky.de in ""? no (end of list)
wilsky.de in "! +local_domains : +relay_to_domains"? no (end of list)
dnslookup_relay_to_domains router skipped: domains mismatch
--------> dnslookup router <--------
local_part=xxx domain=wilsky.de
checking domains
cached no match for +local_domains
cached lookup data = NULL
wilsky.de in "! +local_domains"? yes (end of list)
R: dnslookup for xxx [at] wilsky
calling dnslookup router
dnslookup router called for xxx [at] wilsky
domain = wilsky.de
DNS lookup of wilsky.de (MX) succeeded
82.96.75.212 in "0.0.0.0 : 127.0.0.0/8 : 192.168.0.0/16 :172.16.0.0/12 : 10.0.0.0/8 :
169.254.0.0/16"? no (end of list)
fully qualified name = wilsky.de
host_find_bydns yield = HOST_FOUND (2); returned hosts:
wilsky.de 82.96.75.212 MX=10
set transport remote_smtp
queued for remote_smtp transport: local_part = xxx
domain = wilsky.de
errors_to=NULL
domain_data=NULL localpart_data=NULL
routed by dnslookup router
envelope to: xxx [at] wilsky
transport: remote_smtp
host wilsky.de [82.96.75.212] MX=10
xxx [at] wilsky
router = dnslookup, transport = remote_smtp
host wilsky.de [82.96.75.212] MX=10
search_tidyup called
>>>>>>>>>>>>>>>> Exim pid=24161 terminating with rc=0 >>>>>>>>>>>>>>>>
www:~#


Any other info that could be of any use?

Sorry again for my fault.

Oliver

--
Oliver Kötter
oliver [at] koetter


mh+exim-users at zugschlus

Sep 30, 2005, 1:23 AM

Post #9 of 27 (4958 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On Fri, 30 Sep 2005 09:53:04 +0200 (CEST), Oliver Kötter
<oliver.koetter [at] gmx> wrote:
>Any other info that could be of any use?

What does cat /proc/sys/kernel/random/entropy_avail say?

Greetings
Marc

--
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber | " Questions are the | Mailadresse im Header
Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834


oliver.koetter at gmx

Sep 30, 2005, 1:53 AM

Post #10 of 27 (4956 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Marc Haber schrieb:
> On Fri, 30 Sep 2005 09:53:04 +0200 (CEST), Oliver Kötter
> <oliver.koetter [at] gmx> wrote:
>>Any other info that could be of any use?
>
> What does cat /proc/sys/kernel/random/entropy_avail say?

OK, now my linux knowledge ends ;-) what does that mean?

www:~# cat /proc/sys/kernel/random/entropy_avail
0
www:~#

It says 0 :-( I guess that is not good?

Remember: it is a virtual server, driven by virtuozzo
(see http://www.sw-soft.com/en/products/virtuozzo/), so some hardware info may not be correct
(like my networking interfaces:

www:~# ifconfig
lo Protokoll:Lokale Schleife
inet Adresse:127.0.0.1 Maske:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:19941 errors:0 dropped:0 overruns:0 frame:0
TX packets:19941 errors:0 dropped:0 overruns:0 carrier:0 Kollisionen:0
Sendewarteschlangenlänge:0
RX bytes:5755350 (5.4 MiB) TX bytes:5755350 (5.4 MiB)

venet0 Protokoll:UNSPEC Hardware Adresse 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet Adresse:127.0.0.1 P-z-P:127.0.0.1 Bcast:0.0.0.0 Maske:255.255.255.255 UP
BROADCAST PUNKTZUPUNKT RUNNING NOARP MTU:1500 Metric:1 RX packets:35040 errors:0
dropped:0 overruns:0 frame:0
TX packets:34757 errors:0 dropped:0 overruns:0 carrier:0 Kollisionen:0
Sendewarteschlangenlänge:0
RX bytes:6915124 (6.5 MiB) TX bytes:10455597 (9.9 MiB)

venet0:0 Protokoll:UNSPEC Hardware Adresse 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet Adresse:83.246.73.175 P-z-P:83.246.73.175 Bcast:0.0.0.0 Maske:255.255.255.255 UP
BROADCAST PUNKTZUPUNKT RUNNING NOARP MTU:1500 Metric:1

www:~# uname -a
Linux www.koetter.cc 2.4.20-021stab022.11.777-enterprise #1 SMP Fri Jan 14 11:07:01 MSK 2005 i686
GNU/Linux

Oliver

--
Oliver Kötter


mh+exim-users at zugschlus

Sep 30, 2005, 4:10 AM

Post #11 of 27 (4952 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On Fri, 30 Sep 2005 10:53:31 +0200 (CEST), Oliver Kötter
<oliver.koetter [at] gmx> wrote:
>Marc Haber schrieb:
>> On Fri, 30 Sep 2005 09:53:04 +0200 (CEST), Oliver Kötter
>> <oliver.koetter [at] gmx> wrote:
>>>Any other info that could be of any use?
>>
>> What does cat /proc/sys/kernel/random/entropy_avail say?
>
>OK, now my linux knowledge ends ;-) what does that mean?
>
>www:~# cat /proc/sys/kernel/random/entropy_avail
>0
>www:~#
>
>It says 0 :-( I guess that is not good?

It's good in a way that we now know what is going on on your system,
but bad in a way that there is no easy way to fix it.

To establish a cryptographically protected connection, exim (or GnuTLS
in the case of Debian's exim packges) need a certain quantity of
random numbers which it tries to pull from Linux' entropy pool. On
your system, that entropy pool is empty, so exim waits until enough
random has been found.

You need to investigate which sources of random numbers are available
on your system. If you're lucky, your machine has a hardware random
number generator, so all you need to do is install the rng-tools.

Greetings
Marc

--
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber | " Questions are the | Mailadresse im Header
Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834


oliver.koetter at gmx

Sep 30, 2005, 5:09 AM

Post #12 of 27 (4961 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Marc Haber schrieb:
>>It says 0 :-( I guess that is not good?
>
> It's good in a way that we now know what is going on on your system,
> but bad in a way that there is no easy way to fix it.
>
> To establish a cryptographically protected connection, exim (or GnuTLS
> in the case of Debian's exim packges) need a certain quantity of
> random numbers which it tries to pull from Linux' entropy pool. On
> your system, that entropy pool is empty, so exim waits until enough
> random has been found.
>
> You need to investigate which sources of random numbers are available
> on your system. If you're lucky, your machine has a hardware random
> number generator, so all you need to do is install the rng-tools.

OK, from what I understand exim trys to encrypt that message or something from that communication
to the destination server? But why do all other outgoing mail addresses work? Is there a way to
tell exim not to encrypt anything?

Oliver

--
Oliver Kötter


dot at dotat

Sep 30, 2005, 5:37 AM

Post #13 of 27 (4965 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On Fri, 30 Sep 2005, Oliver Kötter wrote:
>
> Is there a way to tell exim not to encrypt anything?

hosts_avoid_tls = *


Tony.
--
<fanf [at] exim> <dot [at] dotat> http://dotat.at/ ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}


msherman at projectile

Sep 30, 2005, 6:45 AM

Post #14 of 27 (4960 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Oliver Kötter wrote:
>
> OK, from what I understand exim trys to encrypt that message or
> something from that communication to the destination server? But why
> do all other outgoing mail addresses work? Is there a way to tell
> exim not to encrypt anything?

Tony already gave you the answer for how to avoid outgoing TLS, but
that's a bandaid -- you should probably fix your entropy problem, or
you'll have trouble with anything else you use TLS for on this computer,
including encryption for incomming authenticated SMTP (for which
disabling TLS would be a big mistake).

- Marc


mh+exim-users at zugschlus

Sep 30, 2005, 6:46 AM

Post #15 of 27 (4960 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On Fri, 30 Sep 2005 14:09:27 +0200 (CEST), Oliver Kötter
<oliver.koetter [at] gmx> wrote:
>OK, from what I understand exim trys to encrypt that message or something from that communication
>to the destination server?

Yes. Exim uses TLS automatically if the remote host advertises
STARTTLS.

>But why do all other outgoing mail addresses work?

Because their target servers do not advertise STARTTLS

>Is there a way to
>tell exim not to encrypt anything?

hosts_avoid_tls = * in the remote_smtp_smarthost and/or remote_smtp
transport(s), according to your configuration. Read
/usr/share/doc/exim4-base/README.Debian.gz to find out which file to
change.

Greetings
Marc

--
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber | " Questions are the | Mailadresse im Header
Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834


oliver.koetter at gmx

Sep 30, 2005, 8:46 AM

Post #16 of 27 (4950 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Marc Sherman wrote am 30.09.2005 15:45, Uhr:

> Oliver Kötter wrote:
>
>>
>> OK, from what I understand exim trys to encrypt that message or
>> something from that communication to the destination server? But why
>> do all other outgoing mail addresses work? Is there a way to tell
>> exim not to encrypt anything?
>
>
> Tony already gave you the answer for how to avoid outgoing TLS, but
> that's a bandaid -- you should probably fix your entropy problem, or
> you'll have trouble with anything else you use TLS for on this
> computer, including encryption for incomming authenticated SMTP (for
> which disabling TLS would be a big mistake).

OK, wrote

remote_smtp:
debug_print = "T: remote_smtp for $local_part@$domain"
driver = smtp
hosts_avoid_tls = *

to my /etc/exim4/conf.d/transport//30_exim4-config_remote_smtp,
did an update-exim4.conf, then an /etc/init.d/exim4 reload and
whupps... mail is going out, thanks a lot.

I disabled plain SMTP auth, I use cram_md5, I guess that works OK, does it?
conf.d/main/30_exim4-config_examples:

cram_md5_server:
driver = cram_md5
public_name = CRAM-MD5
server_secret =
${extract{2}{:}{${lookup{$1}lsearch{CONFDIR/passwd}{$value}fail}}}
server_set_id = $1

cram_md5:
driver = cram_md5
public_name = CRAM-MD5
client_name =
${extract{1}{:}{${lookup{$host}lsearch*{CONFDIR/passwd.client}{$value}fail}}}
client_secret =
${extract{2}{:}{${lookup{$host}lsearch*{CONFDIR/passwd.client}{$value}fail}}}

Everything else is on comment.

Thanks again!

Oliver


exim-users at spodhuis

Apr 11, 2012, 10:39 PM

Post #17 of 27 (4675 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On 2012-04-11 at 13:26 -0700, Yan Seiner wrote:
> 2012-04-11 13:22:16 1SI3wt-0006jb-DK Spool file is locked (another process
> is handling this message)

Run "exiwhat", it will tell you which Exim processes exist, what they're
currently doing, etc.

Usually this message just means that there's a slow remote host, an Exim
from another queue runner is already trying to deliver the mail, and so
this queue-runner is skipping that message and going onto the next one
in the queue. As such, it's harmless. As long as that is what's
happening.

A diagnostic log message like this just says "I'm not handling it
myself, because ...", not "there's a problem to be fixed". Now, if it
persists on the same message for a while, you might look into what's
happening with that particular message. Perhaps the recipient system
is doing something icky, such as passing your connections to a tarpit
system.

-Phil

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


yan at seiner

Apr 12, 2012, 7:52 AM

Post #18 of 27 (4668 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On Wed, April 11, 2012 10:39 pm, Phil Pennock wrote:
> On 2012-04-11 at 13:26 -0700, Yan Seiner wrote:
>> 2012-04-11 13:22:16 1SI3wt-0006jb-DK Spool file is locked (another
>> process
>> is handling this message)
>
> Run "exiwhat", it will tell you which Exim processes exist, what they're
> currently doing, etc.
>
> Usually this message just means that there's a slow remote host, an Exim
> from another queue runner is already trying to deliver the mail, and so
> this queue-runner is skipping that message and going onto the next one
> in the queue. As such, it's harmless. As long as that is what's
> happening.
>
> A diagnostic log message like this just says "I'm not handling it
> myself, because ...", not "there's a problem to be fixed". Now, if it
> persists on the same message for a while, you might look into what's
> happening with that particular message. Perhaps the recipient system
> is doing something icky, such as passing your connections to a tarpit
> system.

Seems to be a TLS entropy issue? (I'm guessing here but from reading what
I've been able to it looks similar.)

Yesterday the messages were persisting for hours, and there was upwards of
100 stalled at a time.

Not sure what I can do to help the entropy issue. It may just be that
I've had a huge rsync job running for days and if it's using the same pool
it could be draining all the entropy faster than the system can generate
it. I don't know enough about how entropy works to make more than guesses
from googling....


--
On two occasions I have been asked,—"Pray, Mr. Babbage, if you put into
the machine wrong figures, will the right answers come out?" ... I am not
able rightly to apprehend the kind of confusion of ideas that could
provoke such a question.
—Charles Babbage, Inventor of the computer, 1864


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


exim-users at spodhuis

Apr 12, 2012, 8:00 PM

Post #19 of 27 (4672 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On 2012-04-12 at 07:52 -0700, Yan Seiner wrote:
> Seems to be a TLS entropy issue? (I'm guessing here but from reading what
> I've been able to it looks similar.)
>
> Yesterday the messages were persisting for hours, and there was upwards of
> 100 stalled at a time.
>
> Not sure what I can do to help the entropy issue. It may just be that
> I've had a huge rsync job running for days and if it's using the same pool
> it could be draining all the entropy faster than the system can generate
> it. I don't know enough about how entropy works to make more than guesses
> from googling....

Options:

* don't use TLS for talking to so many hosts;
* send less email;
* use a different TLS provider; eg, see if building Exim against
OpenSSL fixes issues encountered by GnuTLS, or vice versa;
* generate more entropy on the system.

To generate more entropy on the system, and have it be real entropy, you
need to inject something used to feed the system entropy pool. Almost
anything you do here from outside will be unreliable.

Your best option for entropy increase (besides checking OS release notes
to see if an upgrade will help) is a hardware change. You can add an
entropy-generation source (PCI card, typically as part of an encryption
off-load system; Soekris have some decent affordable cards here) and
there are some more listed at:
http://en.wikipedia.org/wiki/Comparison_of_hardware_random_number_generators
Soekris:
http://soekris.com/products/vpn14x1.html
(although I'm not sure of the Linux support there).

Alternatively, some modern CPUs provide hardware entropy sources; for
Intel, that's still coming:
http://en.wikipedia.org/wiki/RdRand
while VIA x86 CPUs have had it for a long time:
http://www.via.com.tw/en/initiatives/padlock/hardware.jsp
and TPM chips also often have hardware entropy generators.

These might help:
https://lwn.net/Articles/283103/ "Appropriate sources of entropy"
http://en.wikipedia.org/wiki/Entropy_%28computing%29

-Phil

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Martin.Schuster1 at infineon

Apr 12, 2012, 11:35 PM

Post #20 of 27 (4671 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On 2012-04-12 16:52, Yan Seiner wrote:
> [...]
> Not sure what I can do to help the entropy issue. It may just be that
> I've had a huge rsync job running for days and if it's using the same pool
> it could be draining all the entropy faster than the system can generate
> it. I don't know enough about how entropy works to make more than guesses
> from googling....
>
Phil already made some good suggestions, some additional ideas:

If you don't care about the quality of the RNG, you could just inject
data from /dev/urandom into your entropy-pool:
rngd -r /dev/urandom

If you need a cheap, good solution:
http://robseward.com/misc/RNG2/

In case your server isn't locked away in a datacenter, you might also
want to try video/audio entropy sources,
http://www.vanheusden.com/ved/
http://www.vanheusden.com/aed/

hth, cheers,
--
Infineon Technologies IT-Services GmbH Martin.Schuster1 [at] infineon
Lakeside B05, 9020 Klagenfurt, Austria Martin Schuster
FB: LG Klagenfurt, FN 246787y +43 5 1777 3517
Attachments: smime.p7s (2.96 KB)


mje at posix

Apr 13, 2012, 12:11 AM

Post #21 of 27 (4672 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

One more - which appears to work for me in generating DNSSEC
signatures.... just fills up /dev/random (and I've no idea if this will
help?)

Install the 'haveged' package, www.irisa.fr/caps/projects/hipsor

Software that reads random stuff from your CPU. Not as good as real
Hardware Entropy devices but its free.

There is also a handful of USB 'stick/memory' looking devices that one
can purchase.

On Fri, 2012-04-13 at 08:35 +0200, Martin Schuster (IFKL IT OS DS CD)
wrote:
> On 2012-04-12 16:52, Yan Seiner wrote:
> > [...]
> > Not sure what I can do to help the entropy issue. It may just be that
> > I've had a huge rsync job running for days and if it's using the same pool
> > it could be draining all the entropy faster than the system can generate
> > it. I don't know enough about how entropy works to make more than guesses
> > from googling....
> >
> Phil already made some good suggestions, some additional ideas:
>
> If you don't care about the quality of the RNG, you could just inject
> data from /dev/urandom into your entropy-pool:
> rngd -r /dev/urandom
>
> If you need a cheap, good solution:
> http://robseward.com/misc/RNG2/
>
> In case your server isn't locked away in a datacenter, you might also
> want to try video/audio entropy sources,
> http://www.vanheusden.com/ved/
> http://www.vanheusden.com/aed/
>
> hth, cheers,
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/

--
. . ___. .__ Posix Systems - (South) Africa
/| /| / /__ mje [at] posix - Mark J Elkins, Cisco CCIE
/ |/ |ARK \_/ /__ LKINS Tel: +27 12 807 0590 Cell: +27 82 601 0496
Attachments: smime.p7s (3.91 KB)


sven at svenhartge

Apr 13, 2012, 1:09 AM

Post #22 of 27 (4665 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

"Martin Schuster (IFKL IT OS DS CD)" <Martin.Schuster1 [at] infineon> wrote:
> On 2012-04-12 16:52, Yan Seiner wrote:

> Phil already made some good suggestions, some additional ideas:

> If you don't care about the quality of the RNG, you could just inject
> data from /dev/urandom into your entropy-pool:
> rngd -r /dev/urandom

Hmm. I don't think this is very wise.

I recommend using haveged:
http://www.issihosts.com/haveged/

For virtual machines is most times the only way to add entropy.

Grüße,
Sven.

--
Sigmentation fault. Core dumped.


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


nigel at dotdot

Apr 13, 2012, 1:40 AM

Post #23 of 27 (4669 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

And another entropy source - not tried it myself, but heard good things
about it:-

http://www.entropykey.co.uk/

Nigel.


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


hs at schlittermann

Apr 13, 2012, 2:20 AM

Post #24 of 27 (4671 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

Yan Seiner <yan [at] seiner> (Do 12 Apr 2012 16:52:08 CEST):
>
> Seems to be a TLS entropy issue? (I'm guessing here but from reading what
> I've been able to it looks similar.)
>
> Yesterday the messages were persisting for hours, and there was upwards of
> 100 stalled at a time.
>
> Not sure what I can do to help the entropy issue. It may just be that
> I've had a huge rsync job running for days and if it's using the same pool
> it could be draining all the entropy faster than the system can generate
> it. I don't know enough about how entropy works to make more than guesses
> from googling....
>

If it is entropy related, you might see the processes hanging during
read from /dev/random (use strace -p to check this)

For short term checks you could link /dev/random to /dev/urandom (or use
mknod to create a /dev/random with the same major/minor as /dev/urandom).
But on Linux /dev/ is a RAM disk maintained by udev and partly filled
at system startup.

On Linux we solved the entropy issue using the rng-tools package and put
there "/dev/urandom" as source for additional entropy.


--
Heiko
Attachments: signature.asc (0.19 KB)


exim-users at spodhuis

Apr 13, 2012, 3:10 AM

Post #25 of 27 (4669 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On 2012-04-13 at 11:20 +0200, Heiko Schlittermann wrote:
> On Linux we solved the entropy issue using the rng-tools package and put
> there "/dev/urandom" as source for additional entropy.

That's not really solving the problem. That's fooling the system into
thinking there's more entropy than there really is, degrading the
quality and making your pseudo-random numbers more predictable. This
hurts the security of your TLS connections.

-Phil

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


yan at seiner

Apr 13, 2012, 7:28 AM

Post #26 of 27 (882 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

On Fri, April 13, 2012 1:09 am, Sven Hartge wrote:

>
> I recommend using haveged:
> http://www.issihosts.com/haveged/

I installed this and the problem has not reappeared. Hopefully that
should fix it.....

--
On two occasions I have been asked,—"Pray, Mr. Babbage, if you put into
the machine wrong figures, will the right answers come out?" ... I am not
able rightly to apprehend the kind of confusion of ideas that could
provoke such a question.
—Charles Babbage, Inventor of the computer, 1864


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


mike.tubby at thorcom

Apr 15, 2012, 5:33 AM

Post #27 of 27 (889 views)
Permalink
Re: Spool file is locked (another process is handling this message) [In reply to]

This one also produces /dev/random entropy from the sound card:

http://code.google.com/p/snd-egd/

Plug an old FM tuner, without aerial connected, to the sound card for a
useful source of noise ;-)

Mike


On 13/04/2012 08:11, Mark Elkins wrote:
> One more - which appears to work for me in generating DNSSEC
> signatures.... just fills up /dev/random (and I've no idea if this will
> help?)
>
> Install the 'haveged' package, www.irisa.fr/caps/projects/hipsor
>
> Software that reads random stuff from your CPU. Not as good as real
> Hardware Entropy devices but its free.
>
> There is also a handful of USB 'stick/memory' looking devices that one
> can purchase.
>
> On Fri, 2012-04-13 at 08:35 +0200, Martin Schuster (IFKL IT OS DS CD)
> wrote:
>> On 2012-04-12 16:52, Yan Seiner wrote:
>>> [...]
>>> Not sure what I can do to help the entropy issue. It may just be that
>>> I've had a huge rsync job running for days and if it's using the same pool
>>> it could be draining all the entropy faster than the system can generate
>>> it. I don't know enough about how entropy works to make more than guesses
>>> from googling....
>>>
>> Phil already made some good suggestions, some additional ideas:
>>
>> If you don't care about the quality of the RNG, you could just inject
>> data from /dev/urandom into your entropy-pool:
>> rngd -r /dev/urandom
>>
>> If you need a cheap, good solution:
>> http://robseward.com/misc/RNG2/
>>
>> In case your server isn't locked away in a datacenter, you might also
>> want to try video/audio entropy sources,
>> http://www.vanheusden.com/ved/
>> http://www.vanheusden.com/aed/
>>
>> hth, cheers,
>> --
>> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
>> ## Exim details at http://www.exim.org/
>> ## Please use the Wiki with this list - http://wiki.exim.org/
>
>

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

exim users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.