Knowledgebase

Portal Home > Knowledgebase > Articles Database > "exim dead but subsys locked"


"exim dead but subsys locked"




Posted by RavenStar, 02-12-2010, 03:32 AM
Hi fellow WHT'ers. Customer just reported their email wasn't being received, after a quick look it seems they're right and "service exim status" is returning "exim dead but subsys locked". My first course of action was to stop exim, and remove exim from /var/lock/subsys, except once exim is stopped, it no longer exists in /var/lock/subsys, which is normal, correct? I also noticed after stopping exim it's still running...? So I checked out /var/log/maillog while I restarted exim, the result is below All seems right to me, except for the 3rd line. I took a look at SPF.pm as mentioned in the returned error and line 391 is So could this prevent exim from coming up/running correctly? I've rebooted the system once so far, which seemed to correct the problem but it came back as soon as I restarted exim. I've tried everything I can think of, any ideas would be appreciated. Server is running cPanel on Centos 5 Thanks EDIT: I'm also seeing this in /var/log/exim_paniclog; Last edited by RavenStar; 02-12-2010 at 03:40 AM.

Posted by net, 02-12-2010, 03:52 AM
Moved > Hosting Security and Technology .

Posted by WebHostingNeeds, 02-12-2010, 09:01 AM
Try running

Posted by TheSimpleHost-Nathan, 02-12-2010, 09:14 AM
Have you tried http://www.webhostingtalk.com/showthread.php?t=388757

Posted by VIPoint, 02-12-2010, 09:29 AM
yes, check the permission of the log files. We faced similar issues some time back and it was due to wrong permission of the exim log files. Also check the size of the log files too.

Posted by RavenStar, 02-13-2010, 12:10 AM
I've tried eximup as well as what was suggested in that link. I also created a new exim_mainlog in-case it was oversize, though nothing has helped. In exim_mainlog, I'm still getting this; I don't understand what is using port 25, I stopped exim and checked with netstat; Now I have no idea what that IP(201.17.218.30), your thoughts? There is something running but I wasn't sure what, so I decided to telnet to port 25 when I stopped exim So I've concluded that exim is still running even when I've stopped it...somehow? Also, what is that ip address(201.17.218.30) found in the netstat results? Any other suggestions?

Posted by madaboutlinux, 02-13-2010, 07:46 AM
If you see port 25 is still responding even after you have stopped exim, check the PID that is binding port 25. Using the PID trace out which mail server is using the port and stop it first. You can then kill the PID and start the exim service. BTW, what is the size of /var partition?

Posted by RavenStar, 02-13-2010, 09:11 AM
I've tried "lsof -i :25" to track down what is using port 25 but it returns nothing, yet still when I telnet to the server on port 25 I'm greeted with exim as mentioned in my previous post. Just thought I'd post the file permissions of a few of the log files in /var/log aswell, incase I've missed something?

Posted by madaboutlinux, 02-13-2010, 09:13 AM
File permission looks correct. It is strange, that you haven't got a PID using lsof and still you see port 25 "Listening" using netstat. Have your hosting company to look into this issue...

Posted by RavenStar, 02-13-2010, 09:25 AM
Perhaps I'm using lsof incorrectly, as it also returns nothing when attempting "lsof -i :80", which should definitely return something...? I'm afraid the server is unmanaged, so support isn't going to be the greatest from the host.

Posted by madaboutlinux, 02-13-2010, 09:36 AM
lsof command looks correct. Try without a space "lsof -i:25", if it still does not return anything, something is wrong on your server.

Posted by RavenStar, 02-13-2010, 09:45 AM
Well seems like I finally got exim started, successfully gotten it to work a few times now; However madaboutlinux has raised a question in regards to lsof - why is it not returning anything with "lsof -i :80" (also tried it as lsof -i:80). Is the server screwy, the installation of lsof stuffed or an error on my usage of lsof? - Is something else somehow preventing lsof? However "lsof" by itself returns a giant list of everything and nothing, eg;



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
raid1 on openvz (Views: 559)
Datapusher/noc24 (Views: 574)
Please Help me .. (Views: 607)


Language:

Contact us