Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 1759 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SLES not emailing

steve8ball

Running Sophos 9.3.1 on my sles11sp2 (64bit) boxes.  All are up to date, fully patched, etc.  Recently had one box decide it wasn't going to email after downloading updates any more.  All the other servers still email when they update, this one just decided to stop.

I've tried removing & re-installing Sophos to no avail.  I did have to reboot this server for a different update over the weekend, and that did not help either.

Any suggestions, ideas, etc as to what could be causing this issue?

Thanks,

Steve

:43471


This thread was automatically locked due to age.
  • 0

    There should be an smtp log in /opt/sophos-av/log/ 

    (Assuming SAV 9)

    That should tell you what it's trying and maybe have the clues for resolving the issue.

    But normal problems:

    a) Email server not configured; localhost isn't accepting or forwarding email

    b) Email server configured - but configured host isn't accepting or forwarding email

    :43547
  • 0

    Thanks for the suggestion.

    So, I look in /opt/sophos-av/log on the problem server, and there is only one SMTP log.  It's from a couple days ago, with this info in it:

    08:51:51 (17151): Emailing root@localhost via localhost:25

    08:51:52 (17151): Success

    Looking at another server shows trying to email the correct address via our smtp gateway.  According to the Sophos Console (and the web gui on this server), this thing has the correct settings for email, but obviously it does not.

    So, where would a person find any config files where this info can be corrected?  I haven't had much luck finding them yet.

    Steve

    :43561
  • 0

    So the email was sent to localhost, which accepted it, but then didn't forward it. So SAV forgot about the email.

    You can check the email server with:

    # /opt/sophos-av/bin/savconfig query EmailServer

    However it is possible the policy got applied after the email got sent?

    :43563
  • 0

    When I run savconfig query EmailServer, I get the correct response for my smtp gateway.

    Not sure if it's related, but postfix was not configured with the correct relayhost entry on this box.

    Steve

    :43565
  • 0

    Not having relaying will have prevented the older email from being forwarded - although it may waiting in postfix.

    Future emails should be sent directly to your email server.

    Probably easiest to detect eicar to trigger an email.

    :43567
  • 0

    Well whatever is going on has now affected all of my SLES boxes, as none of them are emailing after updates.  This started yesterday afternoon.

    :43593
  • 0

    You are seeing SUG86298 - Disable 'successful update' alerts for managed SAV installation by default

    SUG86298 was included in 9.3.0 last month, but last month's release got held up, so you only saw it in 9.3.1, released this month.

    So emails for successful updates have been turned off.

    :43595
  • 0

    Oh, ok.  Good to know, thanks for the update.

    :43599