amavisd fails to start using recommend 2 port configuration: $inet_socket_port = [10024,10026]; # listen on multiple TCP ports The failure occurs because the selinux-policy has labelled port 10026 as for use by spamd. [root]# semanage port -l | grep spamd spamd_port_t tcp 783, 10026, 10027 Another port could be used as a workaround but it would be helpful for the amavisd and selinux team to identify another recommended port for the 2nd instance which would be properly labeled in the selinux policy.
This is a bit more complex that I thought. In trying to move the receive/send functions from 10026/10027 to 10036/10037 I was still being blocked by policy until I added: semanage port -a -t amavisd_recv_port_t -p tcp 10036 semanage port -a -t amavisd_send_port_t -p tcp 10037
(In reply to dan from comment #0) > $inet_socket_port = [10024,10026]; # listen on multiple TCP ports This is commented out and is an example. The default port is 10024 which is allowed in the SELinux policy. It's expected that you have to tag any other port with the correct SELinux label.