Pyzor termination error signal 15 (000f)

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hi All,

I have Pyzor 1.0.0-5 running with spamassassin 3.4.0 and amavisd 2.10 on
Centos 7, but it keeps hanging and dropping messages into the maillog as
below:

[root@mail spamassassin]# tail -f /var/log/maillog | grep TERMINATED
Oct 13 11:42:19 mail amavis[15850]: (15850-19) SA info: pyzor: [18062]
error: TERMINATED, signal 15 (000f)
Oct 13 11:42:56 mail amavis[17804]: (17804-04) SA info: pyzor: [18348]
error: TERMINATED, signal 15 (000f)
Oct 13 11:42:59 mail amavis[18079]: (18079-01) SA info: pyzor: [18363]
error: TERMINATED, signal 15 (000f)
Oct 13 11:43:20 mail amavis[17804]: (17804-05) SA info: pyzor: [18471]
error: TERMINATED, signal 15 (000f)
Oct 13 11:43:32 mail amavis[18079]: (18079-02) SA info: pyzor: [18497]
error: TERMINATED, signal 15 (000f)
Oct 13 11:43:34 mail amavis[17804]: (17804-06) SA info: pyzor: [18560]
error: TERMINATED, signal 15 (000f)
Oct 13 11:43:46 mail amavis[18079]: (18079-03) SA info: pyzor: [18664]
error: TERMINATED, signal 15 (000f)
Oct 13 11:44:06 mail amavis[17804]: (17804-07) SA info: pyzor: [18731]
error: TERMINATED, signal 15 (000f)
Oct 13 11:44:20 mail amavis[18079]: (18079-04) SA info: pyzor: [18811]
error: TERMINATED, signal 15 (000f)
Oct 13 11:44:42 mail amavis[17804]: (17804-08) SA info: pyzor: [18854]
error: TERMINATED, signal 15 (000f)

This happens with every message that is scanned and as a result, I have
about 8000 messages from OSSEC sitting in my mailbox reporting:

OSSEC HIDS Notification.
2015 Oct 13 12:01:18

Received From: mail->/var/log/maillog
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Oct 13 12:01:16 mail amavis[20676]: (20676-16) SA info: pyzor: [24210]
error: TERMINATED, signal 15 (000f)

 --END OF NOTIFICATION

The odd this is that the log entry in the mail delivery includes a pyzor
score:

check_spf: 0.37 (0.0%), check_razor2: 687 (13.8%), check_pyzor: 4003
(80.6%), tests_pri_500: 4.1 (0.1%)

and running a check on pyzor looks successful:

[root@mail pyzor-0.7.0]# echo “test” | spamassassin -D pyzor 2>&1 | less

Oct 13 12:40:53.331 [4129] dbg: pyzor: network tests on, attempting Pyzor
Oct 13 12:40:54.762 [4129] dbg: pyzor: pyzor is available: /usr/bin/pyzor
Oct 13 12:40:54.763 [4129] dbg: pyzor: opening pipe: /usr/bin/pyzor
--homedir /etc/mail/spamassassin/.pyzor check <
/tmp/.spamassassin41294pGoxztmp
Oct 13 12:40:59.895 [4129] dbg: pyzor: [4137] finished: exit 1
Oct 13 12:40:59.895 [4129] dbg: pyzor: got response:
public.pyzor.org:24441 (200, 'OK') 416441 49282
Oct 13 12:40:59.896 [4129] dbg: pyzor: listed: COUNT=416441/5
WHITELIST=49282
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
        mail.bordengrammar.kent.sch.uk
X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.9 required=5.0
tests=EMPTY_MESSAGE,FSL_BULK_SIG,

MISSING_DATE,MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,
        NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS,PYZOR_CHECK autolearn=no
        autolearn_force=no version=3.4.0
X-Spam-Report:
        * -0.0 NO_RELAYS Informational: message was not relayed via SMTP
        *  1.0 MISSING_HEADERS Missing To: header
        *  2.5 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
        *  0.5 MISSING_MID Missing Message-Id: header
        *  1.8 MISSING_SUBJECT Missing Subject: header
        *  2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
        *      Subject: text
        *  1.0 MISSING_FROM Missing From: header
        *  1.4 FSL_BULK_SIG Bulk signature with no Unsubscribe
        * -0.0 NO_RECEIVED Informational: message has no Received headers
        *  1.4 MISSING_DATE Missing Date: header
        *  0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822
        *      headers
“test”
Subject: [SPAM]
X-Spam-Prev-Subject: (nonexistent)

So my question is, bar whitelisting the error from OSSec, has anyone got
any idea what could be causing it and how to fix?

Thanks,

Julian

-- 
Borden Grammar School,
Avenue of Remembrance,
Sittingbourne,
Kent,
ME10 4DB.

Tel: 01795 424192

****************************************************************************
This e-mail is from Borden Grammar School Trust.

This e-mail, together with any files transmitted with it, are
confidential, and are intended solely for the use of the individual or
entity to whom they are addressed. Any unauthorised dissemination or
copying of this e-mail or its attachments, and any use or disclosure of
any information contained in them, is strictly prohibited, and may also
be illegal. If you are not the intended recipient you must not use,
disclose,
distribute, copy, print or relay this e-mail.

Please note that any views expressed by an individual within this
e-mail, do not necessarily reflect the views of the Borden Grammar
School Trust. Borden Grammar School Trust has taken reasonable
precautions to ensure no
viruses are present in this e-mail, the Academy cannot accept
responsibility for any loss or damage arising from the use of this
e-mail and/or files attached.

Registered office: Borden Grammar School, Avenue of Remembrance,
Sittingbourne, Kent, ME10 4DB

Registered in England: 07827591

.