Submitted by KAtwitch on Tue, 04/07/2020 - 14:50
We’ve updated Virtualmin and individual packages quite a few times in recent months / years and somewhere along the way, we started seeing UNCHECKED added to the beginning of every subject line in the recipient’s email. This is happening for all domains on the Virtualmin server. It started a few months ago. I’ve searched and found some similar threads, but the solutions for those were either adding memory (our server is not showing a need for that and the dashboard is showing we regularly stay between 50-60% of real memory) or completely disabling virus filtering in the server features (I’ve done that). Can someone suggest how to further troubleshoot?
Status:
Active
Comments
Submitted by andreychek on Tue, 04/07/2020 - 19:42 Comment #1
Howdy -- thanks for contacting us!
Hmm, I don't think I've seen that particular issue with Virtualmin before, though I do see a variety of other people who've into that before.
Are you running a fairly standard Virtualmin system there?
Also, what is the output of these commands:
ps auxwfdmesg | tail -30
uptime
free -m
postconf -n
Submitted by KAtwitch on Tue, 04/07/2020 - 22:20 Comment #2
Thanks for your reply. Yes, I'm running a clean install of Virtualmin. I followed the install guide for Virtualmin on Centos 6 from here: https://www.virtualmin.com/documentation/installation
Below are the outputs requested:
[root@zoe ~]# ps auxwf USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 2 0.0 0.0 0 0 ? S Mar27 0:00 [kthreadd] root 3 0.0 0.0 0 0 ? S Mar27 0:00 _ [migration/ 0] root 4 0.0 0.0 0 0 ? S Mar27 0:04 _ [ksoftirqd/ 0] root 5 0.0 0.0 0 0 ? S Mar27 0:00 _ [stopper/0] root 6 0.0 0.0 0 0 ? S Mar27 0:01 _ [watchdog/0 ] root 7 0.0 0.0 0 0 ? S Mar27 0:38 _ [events/0] root 8 0.0 0.0 0 0 ? S Mar27 0:00 _ [events/0] root 9 0.0 0.0 0 0 ? S Mar27 0:00 _ [events_lon g/0] root 10 0.0 0.0 0 0 ? S Mar27 0:00 _ [events_pow er_ef] root 11 0.0 0.0 0 0 ? S Mar27 0:00 _ [cgroup] root 12 0.0 0.0 0 0 ? S Mar27 0:00 _ [khelper] root 13 0.0 0.0 0 0 ? S Mar27 0:00 _ [netns] root 14 0.0 0.0 0 0 ? S Mar27 0:00 _ [async/mgr] root 15 0.0 0.0 0 0 ? S Mar27 0:00 _ [pm] root 16 0.0 0.0 0 0 ? S Mar27 0:01 _ [sync_super s] root 17 0.0 0.0 0 0 ? S Mar27 0:00 _ [bdi-defaul t] root 18 0.0 0.0 0 0 ? S Mar27 0:00 _ [kintegrity d/0] root 19 0.0 0.0 0 0 ? S Mar27 0:48 _ [kblockd/0] root 20 0.0 0.0 0 0 ? S Mar27 0:00 _ [kacpid] root 21 0.0 0.0 0 0 ? S Mar27 0:00 _ [kacpi_noti fy] root 22 0.0 0.0 0 0 ? S Mar27 0:00 _ [kacpi_hotp lug] root 23 0.0 0.0 0 0 ? S Mar27 0:00 _ [ata_aux] root 24 0.0 0.0 0 0 ? S Mar27 9:42 _ [ata_sff/0] root 25 0.0 0.0 0 0 ? S Mar27 0:00 _ [ksuspend_u sbd] root 26 0.0 0.0 0 0 ? S Mar27 0:00 _ [khubd] root 27 0.0 0.0 0 0 ? S Mar27 0:00 _ [kseriod] root 28 0.0 0.0 0 0 ? S Mar27 0:00 _ [md/0] root 29 0.0 0.0 0 0 ? S Mar27 0:00 _ [md_misc/0] root 30 0.0 0.0 0 0 ? S Mar27 0:00 _ [linkwatch] root 33 0.0 0.0 0 0 ? S Mar27 0:00 _ [khungtaskd ] root 34 0.0 0.0 0 0 ? S Mar27 0:00 _ [lru-add-dr ain/0] root 35 0.0 0.0 0 0 ? S Mar27 0:30 _ [kswapd0] root 36 0.0 0.0 0 0 ? SN Mar27 0:00 _ [ksmd] root 37 0.0 0.0 0 0 ? SN Mar27 0:21 _ [khugepaged ] root 38 0.0 0.0 0 0 ? S Mar27 0:00 _ [aio/0] root 39 0.0 0.0 0 0 ? S Mar27 0:00 _ [crypto/0] root 46 0.0 0.0 0 0 ? S Mar27 0:00 _ [kthrotld/0 ] root 47 0.0 0.0 0 0 ? S Mar27 0:00 _ [pciehpd] root 49 0.0 0.0 0 0 ? S Mar27 0:00 _ [kpsmoused] root 50 0.0 0.0 0 0 ? S Mar27 0:00 _ [usbhid_res umer] root 51 0.0 0.0 0 0 ? S Mar27 0:00 _ [deferwq] root 84 0.0 0.0 0 0 ? S Mar27 0:00 _ [kdmremove] root 85 0.0 0.0 0 0 ? S Mar27 0:00 _ [kstriped] root 119 0.0 0.0 0 0 ? S Mar27 0:00 _ [ttm_swap] root 260 0.0 0.0 0 0 ? S Mar27 0:00 _ [scsi_eh_0] root 261 0.0 0.0 0 0 ? S Mar27 7:45 _ [scsi_eh_1] root 267 0.0 0.0 0 0 ? S Mar27 0:12 _ [mpt_poll_0 ] root 268 0.0 0.0 0 0 ? S Mar27 0:00 _ [mpt/0] root 269 0.0 0.0 0 0 ? S Mar27 0:00 _ [scsi_eh_2] root 407 0.0 0.0 0 0 ? S Mar27 0:00 _ [kdmflush] root 409 0.0 0.0 0 0 ? S Mar27 0:00 _ [kdmflush] root 480 0.0 0.0 0 0 ? S Mar27 0:47 _ [jbd2/dm-0- 8] root 481 0.0 0.0 0 0 ? S Mar27 0:00 _ [ext4-dio-u nwrit] root 780 0.0 0.0 0 0 ? S Mar27 0:08 _ [vmmemctl] root 1160 0.0 0.0 0 0 ? S Mar27 0:00 _ [jbd2/sda1- 8] root 1161 0.0 0.0 0 0 ? S Mar27 0:00 _ [ext4-dio-u nwrit] root 1164 0.0 0.0 0 0 ? S Mar27 0:35 _ [flush-253: 0] root 1234 0.0 0.0 0 0 ? S Mar27 0:02 _ [kauditd] root 1846 0.0 0.0 0 0 ? S Mar27 0:00 _ [scsi_tgtd/ 0] root 1847 0.0 0.0 0 0 ? S Mar27 0:00 _ [fc_exch_wo rkque] root 1848 0.0 0.0 0 0 ? S Mar27 0:00 _ [fc_rport_e q] root 1851 0.0 0.0 0 0 ? S Mar27 0:00 _ [fcoe_work/ 0] root 1852 0.0 0.0 0 0 ? S< Mar27 0:00 _ [fcoethread /0] root 1853 0.0 0.0 0 0 ? S Mar27 0:00 _ [cnic_wq] root 1854 0.0 0.0 0 0 ? S Mar27 0:00 _ [bnx2fc] root 1855 0.0 0.0 0 0 ? S< Mar27 0:00 _ [bnx2fc_l2_ threa] root 1856 0.0 0.0 0 0 ? S< Mar27 0:00 _ [bnx2fc_thr ead/0] root 3123 0.0 0.0 0 0 ? S Mar27 0:57 _ [flight-bio -8:0] root 3124 0.0 0.0 0 0 ? S Mar27 0:57 _ [cow-bio-8: 0] root 3125 0.0 0.0 0 0 ? S Mar27 0:00 _ [cl-8:1] root 3126 0.0 0.0 0 0 ? S Mar27 1:12 _ [flight-bio -253:] root 3127 0.0 0.0 0 0 ? S Mar27 1:16 _ [cow-bio-25 3:0] root 3128 0.0 0.0 0 0 ? S Mar27 0:03 _ [cl-253:0] root 22991 0.0 0.0 0 0 ? S 22:15 0:00 _ [flush-8:0] root 1 0.0 0.0 19356 1304 ? Ss Mar27 0:01 /sbin/init root 572 0.0 0.0 11028 592 ? S<s Mar27 0:01 /sbin/udevd -d root 16747 0.0 0.0 11032 656 ? S< Mar27 0:03 _ /sbin/udevd -d root 28084 0.0 0.0 11024 628 ? S< Apr03 0:00 _ /sbin/udevd -d root 1720 0.0 0.0 29764 680 ? S<sl Mar27 0:21 auditd root 1744 0.0 0.0 6160 480 ? Ss Mar27 0:00 /sbin/portreser ve root 1754 0.0 0.1 249552 4124 ? Sl Mar27 1:56 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5 rpc 1811 0.0 0.0 18980 552 ? Ss Mar27 0:01 rpcbind root 1833 0.0 0.0 13392 432 ? Ss Mar27 0:48 lldpad -d root 1860 0.0 0.0 8360 312 ? Ss Mar27 0:00 /usr/sbin/fcoem on --syslog dbus 1875 0.0 0.0 22424 1808 ? Ss Mar27 0:19 dbus-daemon --s ystem root 1888 0.0 0.0 85900 2724 ? Ss Mar27 0:02 NetworkManager --pid-file=/var/run/NetworkManager/NetworkManager.pi root 1893 0.0 0.0 58132 1360 ? S Mar27 0:00 /usr/sbin/modem -manager root 1914 0.0 0.0 45000 212 ? Ss Mar27 0:00 /usr/sbin/wpa_s upplicant -c /etc/wpa_supplicant/wpa_supplicant.conf rpcuser 1943 0.0 0.0 23352 676 ? Ss Mar27 0:00 rpc.statd root 1987 0.0 0.0 189180 992 ? Ss Mar27 0:00 cupsd -C /etc/c ups/cupsd.conf root 2041 0.0 0.0 4076 472 ? Ss Mar27 0:00 /usr/sbin/acpid 68 2069 0.0 0.0 39304 2036 ? Ssl Mar27 0:06 hald root 2071 0.0 0.0 20396 696 ? S Mar27 0:00 _ hald-runner root 2177 0.0 0.0 22516 624 ? S Mar27 0:00 _ hald-ad don-input: Listening on /dev/input/event2 /dev/input root 2181 0.0 0.0 22512 720 ? S Mar27 3:47 _ hald-ad don-storage: polling /dev/sr0 (every 2 sec) 68 2182 0.0 0.0 18004 644 ? S Mar27 0:00 _ hald-ad don-acpi: listening on acpid socket /var/run/acpid.s root 2209 0.0 0.0 91272 500 ? Ssl Mar27 0:00 pcscd root 2227 0.0 0.0 466824 968 ? Ssl Mar27 0:09 automount --pid -file /var/run/autofs.pid root 8022 0.0 0.0 66288 576 ? Ss Mar27 0:00 /usr/sbin/sshd root 23135 0.5 0.1 104748 4920 ? Ss 22:17 0:00 _ sshd: root@ pts/0 root 23225 0.0 0.0 108352 1828 pts/0 Ss 22:17 0:00 _ -bash root 23349 0.0 0.0 110508 1348 pts/0 R+ 22:17 0:00 _ ps auxwf ntp 8033 0.0 0.0 30740 1388 ? Ss Mar27 0:01 ntpd -u ntp:ntp -p /var/run/ntpd.pid -g root 8070 0.0 0.0 108216 1036 ? S Mar27 0:00 /bin/sh /usr/bi n/mysqld_safe --datadir=/var/lib/mysql --socket=/var mysql 8205 0.0 2.1 987156 64444 ? Sl Mar27 8:01 _ /usr/libexe c/mysqld --basedir=/usr --datadir=/var/lib/mysql --u root 8233 0.0 0.0 19264 492 ? Ss Mar27 0:00 /usr/sbin/dovec ot dovecot 8236 0.0 0.0 12984 760 ? S Mar27 0:00 _ dovecot/anv il root 8237 0.0 0.0 13108 836 ? S Mar27 0:00 _ dovecot/log root 18061 0.0 0.0 39628 1292 ? S 11:30 0:00 _ dovecot/ssl -params root 18989 0.0 0.3 22476 10176 ? S 14:19 0:00 _ dovecot/con fig dovecot 18990 0.0 0.0 78992 2952 ? S 14:19 0:00 _ dovecot/aut h root 18991 0.0 0.1 78992 3144 ? S 14:19 0:00 _ dovecot/aut h -w root 8249 0.0 0.0 71468 1632 ? Ss Mar27 1:18 /usr/sbin/sasla uthd -m /var/run/saslauthd -a pam -r root 8251 0.0 0.0 71468 1616 ? S Mar27 1:18 _ /usr/sbin/s aslauthd -m /var/run/saslauthd -a pam -r root 8252 0.0 0.0 71468 1616 ? S Mar27 1:18 _ /usr/sbin/s aslauthd -m /var/run/saslauthd -a pam -r root 8253 0.0 0.0 71468 1620 ? S Mar27 1:19 _ /usr/sbin/s aslauthd -m /var/run/saslauthd -a pam -r root 8254 0.0 0.0 71468 1616 ? S Mar27 1:18 _ /usr/sbin/s aslauthd -m /var/run/saslauthd -a pam -r postgrey 8275 0.0 0.1 157764 4452 ? Ss Mar27 0:00 /usr/sbin/postg rey -d --unix=/var/spool/postfix/postgrey/socket root 8354 0.0 0.0 81036 1372 ? Ss Mar27 0:26 /usr/libexec/po stfix/master postfix 8366 0.0 0.0 81292 1652 ? S Mar27 0:02 _ qmgr -l -t fifo -u postfix 8417 0.0 0.0 81508 1700 ? S Mar27 0:00 _ tlsmgr -l - t unix -u postfix 8418 0.0 0.0 81112 1416 ? S Mar27 0:27 _ anvil -l -t unix -u postfix 4858 0.0 0.1 81116 3384 ? S 20:45 0:00 _ pickup -l - t fifo -u postfix 15735 0.0 0.1 98688 5600 ? S 21:39 0:00 _ smtpd -n sm tp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_ena postfix 19475 0.0 0.1 98672 5604 ? S 21:59 0:00 _ smtpd -n sm tp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_ena postfix 20799 0.0 0.1 98688 5604 ? S 22:04 0:00 _ smtpd -n sm tp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_ena postfix 20803 0.0 0.1 98688 5604 ? S 22:04 0:00 _ smtpd -n sm tp -t inet -u -o stress= -s 2 -o smtpd_sasl_auth_ena nobody 8367 0.0 0.0 160816 584 ? Ss Mar27 0:15 proftpd: (accep ting connections) root 8379 0.0 0.0 183088 792 ? Ss Mar27 0:00 /usr/sbin/abrtd root 8404 0.0 0.0 180712 764 ? Ss Mar27 0:17 abrt-dump-oops -d /var/spool/abrt -rwx /var/log/messages root 8419 0.0 0.0 39664 592 ? S Mar27 0:00 /usr/libexec/ns s_pcache 98306 off /etc/httpd/alias root 8421 0.0 2.3 593560 68524 ? Ssl Mar27 0:36 /usr/sbin/httpd apache 5200 0.0 0.3 346172 9336 ? S 15:17 0:00 _ /usr/sbin/h ttpd mary 5259 0.7 1.2 325660 38440 ? S 15:17 2:58 | _ /usr/bi n/php-cgi 524 5444 7.1 1.5 333120 46104 ? S 15:19 29:42 | _ /usr/bi n/php-cgi 522 5779 0.1 1.4 319460 41708 ? S 15:21 0:38 | _ /usr/bi n/php-cgi 524 8135 5.8 1.6 337064 50120 ? S 15:32 23:29 | _ /usr/bi n/php-cgi mary 8482 0.0 1.1 309568 33464 ? S 15:35 0:07 | _ /usr/bi n/php-cgi 522 8611 0.1 1.4 319744 41924 ? S 15:35 0:38 | _ /usr/bi n/php-cgi 522 15559 0.0 1.2 325560 38284 ? S 16:09 0:01 | _ /usr/bi n/php-cgi sky 15841 0.0 0.5 388716 15452 ? S 16:11 0:01 | _ /usr/bi n/php-cgi sky 17310 0.0 0.5 388716 15036 ? S 16:17 0:00 | _ /usr/bi n/php-cgi mary 21397 0.2 1.2 313492 35620 ? S 16:40 0:44 | _ /usr/bi n/php-cgi 524 4303 10.6 1.6 336820 49848 ? R 20:42 10:05 | _ /usr/bi n/php-cgi 524 4304 9.3 1.5 333892 46820 ? S 20:42 8:51 | _ /usr/bi n/php-cgi 511 7467 0.0 0.4 291668 14244 ? S 20:58 0:00 | _ /usr/bi n/php-cgi 522 9228 0.0 0.9 304760 28344 ? S 21:06 0:00 | _ /usr/bi n/php-cgi apache 5202 0.0 0.4 580988 12948 ? S 15:17 0:00 _ /usr/sbin/h ttpd apache 5203 0.0 0.7 603368 21484 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 5204 0.0 0.7 603564 21660 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 5205 0.0 0.7 603552 21528 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 5206 0.0 0.7 603584 21564 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 5207 0.0 0.7 603436 21504 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 5208 0.0 0.7 603436 21504 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 5209 0.0 0.7 603416 21572 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 5210 0.0 0.7 603588 21588 ? S 15:17 0:08 _ /usr/sbin/h ttpd apache 8774 0.0 0.7 603676 21736 ? S 15:36 0:08 _ /usr/sbin/h ttpd apache 10232 0.0 0.7 603568 21564 ? S 15:43 0:08 _ /usr/sbin/h ttpd apache 10235 0.0 0.7 603720 21348 ? S 15:43 0:08 _ /usr/sbin/h ttpd apache 11678 0.0 0.7 603544 21216 ? S 15:51 0:08 _ /usr/sbin/h ttpd apache 30501 0.0 0.7 603256 21404 ? S 20:09 0:03 _ /usr/sbin/h ttpd apache 5927 0.0 0.7 603268 20988 ? S 20:51 0:02 _ /usr/sbin/h ttpd root 8434 0.0 0.0 116912 748 ? Ss Mar27 0:04 crond vnc 8489 0.0 1.1 177068 34332 ? S Mar27 1:19 /usr/bin/Xvnc : 2 -desktop zoe.thealangroup.net:2 (vnc) -auth /home/ vnc 8881 0.0 0.0 12668 464 ? S Mar27 0:00 /usr/bin/ck-xin it-session /usr/bin/ssh-agent /etc/X11/xinit/Xclient vnc 8888 0.0 0.0 50220 716 ? S Mar27 0:00 _ vncconfig - iconic vnc 9169 0.0 0.0 257980 2408 ? Sl Mar27 0:00 _ /usr/bin/gn ome-session vnc 9173 0.0 0.0 57336 136 ? Ss Mar27 0:02 _ /usr/bi n/ssh-agent /etc/X11/xinit/Xclients vnc 9303 0.5 0.2 291604 7956 ? S Mar27 88:20 _ metacit y vnc 9344 0.0 1.1 372264 33288 ? S Mar27 0:52 _ gnome-p anel vnc 9366 0.0 0.1 468064 5628 ? S Mar27 0:02 _ nautilu s vnc 9370 0.0 0.6 335236 18460 ? S Mar27 0:12 _ gpk-upd ate-icon vnc 9371 0.0 0.0 353036 2256 ? S Mar27 0:01 _ /usr/li bexec/evolution/2.32/evolution-alarm-notify vnc 9372 0.0 0.2 299980 8056 ? Sl Mar27 0:20 _ /usr/li bexec/polkit-gnome-authentication-agent-1 vnc 9376 0.0 0.0 276628 2088 ? S Mar27 0:00 _ bluetoo th-applet vnc 9387 0.0 0.0 384396 1564 ? S Mar27 0:00 _ gnome-v olume-control-applet vnc 9391 0.0 0.2 324472 8832 ? S Mar27 0:00 _ python /usr/share/system-config-printer/applet.py vnc 9422 0.0 0.0 257856 2312 ? S Mar27 0:05 _ gnome-p ower-manager vnc 9427 0.0 0.0 255616 2692 ? S Mar27 0:08 _ /usr/li bexec/gdu-notification-daemon vnc 8926 0.0 0.0 20064 324 ? S Mar27 0:00 dbus-launch --s h-syntax --exit-with-session root 8932 0.0 0.0 21104 308 ? Ss Mar27 0:00 /usr/sbin/atd vnc 8972 0.0 0.0 21968 1116 ? Ss Mar27 0:01 /bin/dbus-daemo n --fork --print-pid 5 --print-address 7 --session root 9086 0.0 0.0 577708 1656 ? Sl Mar27 0:01 /usr/sbin/conso le-kit-daemon --no-daemon root 9216 0.0 0.0 50004 1416 ? S Mar27 0:00 /usr/libexec/de vkit-power-daemon vnc 9220 0.0 0.0 133636 2332 ? S Mar27 0:06 /usr/libexec/gc onfd-2 vnc 9242 0.0 0.1 506280 3148 ? Ssl Mar27 0:46 /usr/libexec/gn ome-settings-daemon vnc 9243 0.0 0.0 330232 1724 ? Sl Mar27 0:00 gnome-keyring-d aemon --start vnc 9246 0.0 0.0 286584 1532 ? Ss Mar27 0:00 seahorse-daemon mailman 9249 0.0 0.0 214260 1992 ? Ss Mar27 0:00 /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s -q start mailman 9250 0.0 0.1 216252 4808 ? S Mar27 1:31 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=ArchRunne mailman 9251 0.0 0.2 216288 6680 ? S Mar27 1:30 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=BounceRun mailman 9252 0.0 0.1 216248 4800 ? S Mar27 1:24 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=CommandRu mailman 9253 0.0 0.1 216244 4840 ? S Mar27 1:26 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=IncomingR mailman 9254 0.0 0.1 216272 4836 ? S Mar27 1:33 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=NewsRunne mailman 9255 0.0 0.1 216252 4808 ? S Mar27 1:32 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=OutgoingR mailman 9256 0.0 0.1 216240 4844 ? S Mar27 1:28 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=VirginRun mailman 9257 0.0 0.2 216248 6632 ? S Mar27 0:00 _ /usr/bin/py thon /usr/lib/mailman/bin/qrunner --runner=RetryRunn vnc 9260 0.0 0.0 137396 1080 ? S Mar27 0:00 /usr/libexec/gv fsd root 9295 0.0 0.0 64500 860 ? Ss Mar27 0:00 /usr/sbin/certm onger -S -p /var/run/certmonger.pid vnc 9320 0.0 0.0 368644 840 ? Ssl Mar27 0:00 /usr/bin/pulsea udio --start --log-target=syslog vnc 9364 0.0 0.0 94868 1116 ? S Mar27 0:00 _ /usr/libexe c/pulse/gconf-helper rtkit 9324 0.0 0.0 168452 788 ? SNl Mar27 0:08 /usr/libexec/rt kit-daemon root 9334 0.0 0.1 181880 3528 ? S Mar27 0:04 /usr/libexec/po lkit-1/polkitd vnc 9368 0.0 0.0 696508 1140 ? Ssl Mar27 0:00 /usr/libexec/bo nobo-activation-server --ac-activate --ior-output-fd vnc 9401 0.0 0.0 146676 2576 ? S Mar27 0:15 /usr/libexec/gv fs-gdu-volume-monitor vnc 9404 0.0 0.4 314856 12472 ? S Mar27 14:33 /usr/libexec/wn ck-applet --oaf-activate-iid=OAFIID:GNOME_Wncklet_Fa vnc 9405 0.0 0.0 331324 1636 ? S Mar27 0:00 /usr/libexec/tr ashapplet --oaf-activate-iid=OAFIID:GNOME_Panel_Tras vnc 9415 0.0 0.0 115524 1228 ? S Mar27 0:00 /usr/libexec/im -settings-daemon root 9425 0.0 0.0 45484 2004 ? S Mar27 0:10 /usr/libexec/ud isks-daemon root 9438 0.0 0.0 45220 440 ? S Mar27 1:20 _ udisks-daem on: polling /dev/sr0 vnc 9464 0.0 0.0 144156 1700 ? S Mar27 0:00 /usr/libexec/gv fsd-trash --spawner :1.8 /org/gtk/gvfs/exec_spaw/0 vnc 9482 0.0 0.0 264908 1988 ? Ss Mar27 0:32 gnome-screensav er vnc 9498 0.0 0.0 232672 976 ? Sl Mar27 0:30 /usr/libexec/gv fs-afc-volume-monitor vnc 9507 0.0 0.0 151004 968 ? S Mar27 0:00 /usr/libexec/gv fs-gphoto2-volume-monitor vnc 9574 0.0 0.0 434060 1728 ? S Mar27 0:00 /usr/bin/gnote --panel-applet --oaf-activate-iid=OAFIID:GnoteApplet vnc 9575 0.0 0.0 408868 2652 ? S Mar27 0:00 /usr/libexec/gd m-user-switch-applet --oaf-activate-iid=OAFIID:GNOME vnc 9576 0.0 0.1 548728 5324 ? S Mar27 0:19 /usr/libexec/cl ock-applet --oaf-activate-iid=OAFIID:GNOME_ClockAppl vnc 9577 0.0 0.0 291060 1560 ? S Mar27 0:00 /usr/libexec/no tification-area-applet --oaf-activate-iid=OAFIID:GNO vnc 9721 0.0 0.0 41096 1108 ? S Mar27 0:00 /usr/libexec/gc onf-im-settings-daemon vnc 9787 0.0 0.0 137424 1116 ? S Mar27 0:00 /usr/libexec/gv fsd-burn --spawner :1.8 /org/gtk/gvfs/exec_spaw/1 root 9813 0.0 0.0 108216 1060 ? S Mar27 0:00 /bin/sh /opt/ap precovery/scripts/agent_wrapper watchdog root 9820 0.1 0.0 108604 1080 ? S Mar27 23:03 _ /bin/sh /op t/apprecovery/scripts/agent_wrapper watchdog root 9825 0.0 0.0 108216 1036 ? S Mar27 0:00 _ /bin/sh /usr/bin/agent /debug root 9829 0.9 2.5 927920 73988 ? Sl Mar27 155:58 | _ /op t/apprecovery/mono/bin/mono /opt/apprecovery/agent/A root 23346 0.0 0.0 100916 568 ? S 22:17 0:00 _ sleep 1 root 10682 0.0 0.1 87772 3080 ? Ss Mar27 0:11 /usr/bin/perl / usr/libexec/usermin/miniserv.pl /etc/usermin/miniser root 11010 0.0 0.0 4060 508 tty2 Ss+ Mar27 0:00 /sbin/mingetty /dev/tty2 root 11016 0.0 0.0 4060 504 tty3 Ss+ Mar27 0:00 /sbin/mingetty /dev/tty3 root 11021 0.0 0.0 4060 500 tty4 Ss+ Mar27 0:00 /sbin/mingetty /dev/tty4 root 11025 0.0 0.0 4060 508 tty5 Ss+ Mar27 0:00 /sbin/mingetty /dev/tty5 root 11030 0.0 0.0 4060 516 tty6 Ss+ Mar27 0:00 /sbin/mingetty /dev/tty6 vnc 11425 0.1 0.1 315788 4572 ? S Mar27 23:14 /usr/lib/vmware -tools/sbin64/vmtoolsd -n vmusr root 11511 0.0 0.0 134020 1516 ? Ssl Mar27 0:00 /usr/sbin/gdm-b inary -nodaemon root 11562 0.0 0.0 164692 1680 ? Sl Mar27 0:00 _ /usr/libexe c/gdm-simple-slave --display-id /org/gnome/DisplayMa root 11570 0.0 0.4 166236 13408 tty1 Ss+ Mar27 0:20 _ /usr/bi n/Xorg :0 -br -verbose -audit 4 -auth /var/run/gdm/a gdm 11659 0.0 0.0 273760 2884 ? Ssl Mar27 0:00 _ /usr/bi n/gnome-session --autostart=/usr/share/gdm/autostart gdm 11730 0.0 0.0 120748 2388 ? S Mar27 0:03 | _ /us r/libexec/at-spi-registryd gdm 11784 0.0 0.0 303376 2648 ? S Mar27 0:04 | _ met acity gdm 11814 0.0 0.0 273876 2120 ? S Mar27 0:10 | _ gno me-power-manager gdm 11816 0.0 0.2 399096 6624 ? S Mar27 0:20 | _ /us r/libexec/gdm-simple-greeter gdm 11818 0.0 0.0 248344 1652 ? S Mar27 0:00 | _ /us r/libexec/polkit-gnome-authentication-agent-1 root 11886 0.0 0.0 141788 1340 ? S Mar27 0:00 _ pam: gd m-password gdm 11657 0.0 0.0 20064 588 ? S Mar27 0:00 /usr/bin/dbus-l aunch --exit-with-session gdm 11658 0.0 0.0 21564 508 ? Ss Mar27 0:00 /bin/dbus-daemo n --fork --print-pid 5 --print-address 7 --session gdm 11665 0.0 0.1 133540 4468 ? S Mar27 0:03 /usr/libexec/gc onfd-2 gdm 11734 0.0 0.1 373996 3724 ? Ssl Mar27 0:20 /usr/libexec/gn ome-settings-daemon --gconf-prefix=/apps/gdm/simple- gdm 11745 0.0 0.0 303292 1748 ? Ssl Mar27 0:00 /usr/libexec/bo nobo-activation-server --ac-activate --ior-output-fd gdm 11777 0.0 0.0 135292 1108 ? S Mar27 0:00 /usr/libexec/gv fsd gdm 11830 0.0 0.0 345784 1112 ? S<sl Mar27 0:00 /usr/bin/pulsea udio --start --log-target=syslog named 21405 0.0 0.5 160348 16456 ? Ssl Mar31 0:02 /usr/sbin/named -u named root 29377 0.0 2.0 99260 60996 ? Ss 14:47 0:00 /usr/libexec/we bmin/virtual-server/lookup-domain-daemon.pl root 3099 0.0 2.4 145728 71204 ? Ss 15:07 0:01 /usr/bin/perl / usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv. root 23139 1.6 2.5 153016 76168 ? S 22:17 0:00 _ /usr/libexe c/webmin/webmincron/webmincron.pl root 23142 21.1 4.4 217924 132252 ? S 22:17 0:01 _ /usr/li bexec/webmin/virtual-server/collectinfo.pl root 23347 0.0 0.0 11336 1164 ? S 22:17 0:00 _ sh -c (/usr/sbin/postconf -c /etc/postfix -x -h mailbox root 23348 0.0 0.1 79080 3084 ? S 22:17 0:00 _ /usr/sbin/postconf -c /etc/postfix -x -h mailbox_co
[root@zoe ~]# dmesg | tail -30 rapidrecovery-vss: /dev/dm-0 [253:0]: snapshot available at sbd1 rapidrecovery-vss: /dev/dm-0 [253:0]: Reset metadata EXT4-fs (sbd0): mounted filesystem without journal. Opts: EXT4-fs (sbd1): write access unavailable, skipping orphan cleanup EXT4-fs (sbd1): mounted filesystem without journal. Opts: rapidrecovery-vss: /dev/sda1 [8:1]: data store utilization (memory: 6/2048, disk: 0/58483) rapidrecovery-vss: prune: removing 8 blocks (6 remaining, 0 errors) rapidrecovery-vss: /dev/sda1 [8:1]: Merged tree to the store. Added 1 blocks of 6 rapidrecovery-vss: /dev/sda1 [8:1]: snapshot ended (mode: stop) rapidrecovery-vss: /dev/dm-0 [253:0]: data store utilization (memory: 158/2048, disk: 0/2185114) rapidrecovery-vss: prune: removing 9267 blocks (158 remaining, 0 errors) rapidrecovery-vss: /dev/dm-0 [253:0]: Merged tree to the store. Added 87 blocks of 158 rapidrecovery-vss: /dev/dm-0 [253:0]: snapshot ended (mode: stop) rapidrecovery-vss: /dev/sda1 [8:1]: Update metadata rapidrecovery-vss: /dev/sda1 [8:1]: snapshot available at sbd0 rapidrecovery-vss: /dev/sda1 [8:1]: Reset metadata rapidrecovery-vss: /dev/dm-0 [253:0]: Update metadata rapidrecovery-vss: /dev/dm-0 [253:0]: snapshot available at sbd1 rapidrecovery-vss: /dev/dm-0 [253:0]: Reset metadata EXT4-fs (sbd0): mounted filesystem without journal. Opts: EXT4-fs (sbd1): write access unavailable, skipping orphan cleanup EXT4-fs (sbd1): mounted filesystem without journal. Opts: rapidrecovery-vss: /dev/sda1 [8:1]: data store utilization (memory: 7/2048, disk: 0/58483) rapidrecovery-vss: prune: removing 7 blocks (7 remaining, 0 errors) rapidrecovery-vss: /dev/sda1 [8:1]: Merged tree to the store. Added 1 blocks of 7 rapidrecovery-vss: /dev/sda1 [8:1]: snapshot ended (mode: stop) rapidrecovery-vss: /dev/dm-0 [253:0]: data store utilization (memory: 529/2048, disk: 0/2185114) rapidrecovery-vss: prune: removing 9116 blocks (529 remaining, 0 errors) rapidrecovery-vss: /dev/dm-0 [253:0]: Merged tree to the store. Added 100 blocks of 529 rapidrecovery-vss: /dev/dm-0 [253:0]: snapshot ended (mode: stop)
[root@zoe ~]# uptime 22:18:34 up 11 days, 4:12, 1 user, load average: 0.59, 0.65, 0.53
[root@zoe ~]# free -m total used free shared buffers cached Mem: 2887 2142 745 6 162 799 -/+ buffers/cache: 1180 1707 Swap: 4031 223 3808
[root@zoe ~]# postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases allow_percent_hack = no broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 home_mailbox = Maildir/ html_directory = no inet_interfaces = all inet_protocols = all mail_owner = postfix mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME mailbox_size_limit = 0 mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 10485760 mydestination = $myhostname, localhost.$mydomain, localhost, zoe.thealangroup.net newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sender_bcc_maps = hash:/etc/postfix/bcc sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = zoe.thealangroup.net smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination check_policy_service unix:/var/spool/postfix/postgrey/socket smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous smtpd_tls_cert_file = /etc/postfix/ssl/zoeSSLcert/27a9452c434f4d.crt smtpd_tls_key_file = /etc/postfix/zoe.thealangroup.net.key smtpd_tls_mandatory_ciphers = high smtpd_tls_security_level = may smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes transport_maps = hash:/etc/postfix/transport unknown_local_recipient_reject_code = 550 virtual_alias_maps = hash:/etc/postfix/virtual
Submitted by andreychek on Tue, 04/07/2020 - 23:25 Comment #3
First, I wanted to mention -- we definitely don't recommend CentOS 6... that's only going to be supported for a few more months, and then it'll be hitting it's end of life.
We'd highly recommend a more modern distribution, as CentOS 6 was released almost a decade ago, and only has very old software available to it.
If you were to use a newer distro, that problem may just go away.
That being said, it should work on CentOS 6.
I'm not seeing any signs of resource problems. However, it doesn't appear that ClamAV is running.
Just as a troubleshooting step, what you may want to try is to go into Edit Virtual Server -> Enabled Features, and there, uncheck the Virus Filtering feature, and hit "Save".
After then, send an email to that domain -- are you still seeing that message in the subject?