From jaearick at colby.edu Tue Apr 1 20:46:44 2008 From: jaearick at colby.edu (Jeff A. Earickson) Date: Tue, 1 Apr 2008 16:46:44 -0400 (EDT) Subject: breakage between 4.68.5 and 4.68.8 Message-ID: Julian, This is a mystery to me, worked in 68.5 and not in 68.8: There were no changes in CustomConfig.pm that I can find. Running in regular mode gives these complaints to syslog too. I have dropped back to 4.67.6 for the moment.. (203)> ./MailScanner --lint Trying to setlogsock(native) Read 817 hostnames from the phishing whitelist Read 5141 hostnames from the phishing blacklist Config: calling custom init function IPBlock IPBlock Currently not supported for your MTA at /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789 ****** WTF??? ****** Checking version numbers... Version number in MailScanner.conf (4.68.8) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temporary working directory is /tmp SpamAssassin temp dir = /tmp Using SpamAssassin results cache Connected to SpamAssassin cache database SpamAssassin reported no errors. INFO:: Meaningless output that goes nowhere, to keep SAVI happy SophosSAVI 4.26 (engine 2.70) recognizing 347310 viruses SophosSAVI using 421 IDE files Using locktype = posix MailScanner.conf says "Virus Scanners = clamd sophossavi" Found these virus scanners installed: clamd, sophossavi =========================================================================== Virus and Content Scanning: Starting ProcessClamAVModOutput Clamd ClamAVModule::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com ProcessClamAVModOutput Clamd ClamAVModule::INFECTED:: Eicar-Test-Signature FOUND :: ./1/ Virus Scanning: Clamd found 2 infections SophosSAVI::INFECTED:: EICAR-AV-Test:: ./1/eicar.com Virus Scanning: SophosSAVI found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses Filename Checks: (1 eicar.com) Other Checks: Found 1 problems =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Eicar-Test-Signature" SophosSAVI said "eicar.com was infected by EICAR-AV-Test" If any of your virus scanners (clamd,sophossavi) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Config: calling custom end function IPBlock Closing down IP blocking ----------------------------------- Jeff A. Earickson, Ph.D Senior UNIX Sysadmin Email Administrator Colby Sports Photographer Colby College, 4214 Mayflower Hill, Waterville ME, 04901-8842 207-859-4214 (fax 207-859-4186) Eastern Time Zone, USA ----------------------------------- From MailScanner at ecs.soton.ac.uk Tue Apr 1 21:11:15 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue, 01 Apr 2008 22:11:15 +0100 Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: References: Message-ID: <47F2A4F3.6010205@ecs.soton.ac.uk> Are you using IPBlock anywhere in your MailScanner.conf file? If so, the result is quite correct, it's only implemented for postfix and sendmail. If you're not, please do a "MailScanner --lintlite" and tell me everything it outputs (if anything). What MTA are you using? Jeff A. Earickson wrote: > Julian, > > This is a mystery to me, worked in 68.5 and not in 68.8: > There were no changes in CustomConfig.pm that I can find. > Running in regular mode gives these complaints to syslog > too. > I have dropped back to 4.67.6 for the moment.. > > (203)> ./MailScanner --lint > Trying to setlogsock(native) > Read 817 hostnames from the phishing whitelist > Read 5141 hostnames from the phishing blacklist > Config: calling custom init function IPBlock > IPBlock Currently not supported for your MTA at > /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789 > > ****** WTF??? ****** > > Checking version numbers... > Version number in MailScanner.conf (4.68.8) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is correct. > > Checking for SpamAssassin errors (if you use it)... > SpamAssassin temporary working directory is /tmp > SpamAssassin temp dir = /tmp > Using SpamAssassin results cache > Connected to SpamAssassin cache database > SpamAssassin reported no errors. > INFO:: Meaningless output that goes nowhere, to keep SAVI happy > SophosSAVI 4.26 (engine 2.70) recognizing 347310 viruses > SophosSAVI using 421 IDE files > Using locktype = posix > MailScanner.conf says "Virus Scanners = clamd sophossavi" > Found these virus scanners installed: clamd, sophossavi > =========================================================================== > > Virus and Content Scanning: Starting > ProcessClamAVModOutput Clamd > ClamAVModule::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com > ProcessClamAVModOutput Clamd > ClamAVModule::INFECTED:: Eicar-Test-Signature FOUND :: ./1/ > Virus Scanning: Clamd found 2 infections > SophosSAVI::INFECTED:: EICAR-AV-Test:: ./1/eicar.com > Virus Scanning: SophosSAVI found 2 infections > Infected message 1 came from 10.1.1.1 > Virus Scanning: Found 2 viruses > Filename Checks: (1 eicar.com) > Other Checks: Found 1 problems > =========================================================================== > > Virus Scanner test reports: > Clamd said "eicar.com was infected: Eicar-Test-Signature" > SophosSAVI said "eicar.com was infected by EICAR-AV-Test" > > If any of your virus scanners (clamd,sophossavi) > are not listed there, you should check that they are installed correctly > and that MailScanner is finding them correctly via its > virus.scanners.conf. > Config: calling custom end function IPBlock > Closing down IP blocking > > > > ----------------------------------- > Jeff A. Earickson, Ph.D > Senior UNIX Sysadmin > Email Administrator > Colby Sports Photographer > Colby College, > 4214 Mayflower Hill, > Waterville ME, 04901-8842 > 207-859-4214 (fax 207-859-4186) > Eastern Time Zone, USA > ----------------------------------- Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 PGP public key: http://www.jules.fm/julesfm.asc -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jaearick at colby.edu Wed Apr 2 12:33:41 2008 From: jaearick at colby.edu (Jeff A. Earickson) Date: Wed, 2 Apr 2008 08:33:41 -0400 (EDT) Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: <47F2A4F3.6010205@ecs.soton.ac.uk> References: <47F2A4F3.6010205@ecs.soton.ac.uk> Message-ID: On Tue, 1 Apr 2008, Julian Field wrote: > > Are you using IPBlock anywhere in your MailScanner.conf file? Yes, relevent parts of MailScanner.conf: MTA = sendmail Sendmail = /usr/lib/sendmail Sendmail2 = /usr/lib/sendmail Always Looked Up Last = &IPBlock Obviously sendmail is there: (38)> ls -l /usr/lib/sendmail -r-xr-sr-x 1 root smmsp 1227724 Nov 19 07:23 /usr/lib/sendmail > If so, the result is quite correct, it's only implemented for postfix and > sendmail. > If you're not, please do a "MailScanner --lintlite" and tell me everything it > outputs (if anything). (2)> ./MailScanner --lintlite IPBlock Currently not supported for your MTA at /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789 > What MTA are you using? My setup: Solaris 10, sendmail, current SA release, etc. We had issues with IPBlock in the early beta releases of 4.68, got things fixed by 4.68.5, I didn't get a chance to test the last beta on 3/31, and here we are. "diff" says there are no diffs between the 4.68.5 and 4.68.8 versions of CustomConfig.pm, other than the RCS version number (3638 vs 3657). Jeff Earickson Colby College From MailScanner at ecs.soton.ac.uk Wed Apr 2 14:10:55 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 02 Apr 2008 15:10:55 +0100 Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: References: <47F2A4F3.6010205@ecs.soton.ac.uk> Message-ID: <47F393EF.8010905@ecs.soton.ac.uk> Put the location of the MailScanner.conf on the command-line and it should be happier. At that point it doesn't know where the conf file is. I'll try to sort this for the next release. Jeff A. Earickson wrote: > On Tue, 1 Apr 2008, Julian Field wrote: > >> >> Are you using IPBlock anywhere in your MailScanner.conf file? > > Yes, relevent parts of MailScanner.conf: > > MTA = sendmail > Sendmail = /usr/lib/sendmail > Sendmail2 = /usr/lib/sendmail > Always Looked Up Last = &IPBlock > > Obviously sendmail is there: > > (38)> ls -l /usr/lib/sendmail > -r-xr-sr-x 1 root smmsp 1227724 Nov 19 07:23 /usr/lib/sendmail > >> If so, the result is quite correct, it's only implemented for postfix >> and sendmail. >> If you're not, please do a "MailScanner --lintlite" and tell me >> everything it outputs (if anything). > > (2)> ./MailScanner --lintlite > IPBlock Currently not supported for your MTA at > /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789 > >> What MTA are you using? > > My setup: Solaris 10, sendmail, current SA release, etc. We had issues > with IPBlock in the early beta releases of 4.68, got things fixed by > 4.68.5, I didn't get a chance to test the last beta on 3/31, and here > we are. "diff" says there are no diffs between the 4.68.5 and 4.68.8 > versions of CustomConfig.pm, other than the RCS version number (3638 vs > 3657). > > Jeff Earickson > Colby College Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 PGP public key: http://www.jules.fm/julesfm.asc -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Apr 2 17:22:29 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 02 Apr 2008 18:22:29 +0100 Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: <47F393EF.8010905@ecs.soton.ac.uk> References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> Message-ID: <47F3C0D5.1060404@ecs.soton.ac.uk> This is fixed for the next release. A suitable patch for your CustomConfig.pm is this: ---- SNIP ---- --- CustomConfig.pm 2008-03-24 13:07:46.000000000 +0000 +++ /tmp/CustomConfig.pm 2008-04-02 19:24:49.000000000 +0100 @@ -765,6 +765,7 @@ my $ConfFile = $ARGV[0]; $ConfFile = $ARGV[1] if $ConfFile =~ /^-+/i; +$ConfFile = '/etc/MailScanner/MailScanner.conf' unless $ConfFile && -f $ConfFile; my ($AccessDB, $Refusal, $my_mta); # Generalized here for Multiple MTA support $my_mta = lc(MailScanner::Config::QuickPeek($ConfFile, 'mta')) if $ConfFile && ---- SNIP ---- (The location is customised for the tar release so it gets the correct path under /opt and doesn't use /etc) Best regards, Jules. Julian Field wrote: > Put the location of the MailScanner.conf on the command-line and it > should be happier. > At that point it doesn't know where the conf file is. > I'll try to sort this for the next release. > > > Jeff A. Earickson wrote: >> On Tue, 1 Apr 2008, Julian Field wrote: >> >>> >>> Are you using IPBlock anywhere in your MailScanner.conf file? >> >> Yes, relevent parts of MailScanner.conf: >> >> MTA = sendmail >> Sendmail = /usr/lib/sendmail >> Sendmail2 = /usr/lib/sendmail >> Always Looked Up Last = &IPBlock >> >> Obviously sendmail is there: >> >> (38)> ls -l /usr/lib/sendmail >> -r-xr-sr-x 1 root smmsp 1227724 Nov 19 07:23 /usr/lib/sendmail >> >>> If so, the result is quite correct, it's only implemented for >>> postfix and sendmail. >>> If you're not, please do a "MailScanner --lintlite" and tell me >>> everything it outputs (if anything). >> >> (2)> ./MailScanner --lintlite >> IPBlock Currently not supported for your MTA at >> /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789 >> >>> What MTA are you using? >> >> My setup: Solaris 10, sendmail, current SA release, etc. We had issues >> with IPBlock in the early beta releases of 4.68, got things fixed by >> 4.68.5, I didn't get a chance to test the last beta on 3/31, and here >> we are. "diff" says there are no diffs between the 4.68.5 and 4.68.8 >> versions of CustomConfig.pm, other than the RCS version number (3638 vs >> 3657). >> >> Jeff Earickson >> Colby College > > Jules > Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 PGP public key: http://www.jules.fm/julesfm.asc -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jaearick at colby.edu Thu Apr 3 17:21:04 2008 From: jaearick at colby.edu (Jeff A. Earickson) Date: Thu, 3 Apr 2008 13:21:04 -0400 (EDT) Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: <47F3C0D5.1060404@ecs.soton.ac.uk> References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> <47F3C0D5.1060404@ecs.soton.ac.uk> Message-ID: Julian, Put in your fix, still no go. It still whines like before: (56)> ./MailScanner --lintlite IPBlock Currently not supported for your MTA at /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 790 Is this an installation/path related issue? Each release of MailScanner is installed into /opt using your install.sh script, so installations look like: lrwxrwxrwx 1 root other 20 Apr 3 13:07 MailScanner -> MailScanner-4.67.6-1 drwxr-xr-x 7 root root 512 Mar 7 10:36 MailScanner-4.67.6-1 drwxr-xr-x 7 root root 512 Mar 18 08:26 MailScanner-4.68.5-1 drwxr-xr-x 7 root root 512 Apr 1 11:28 MailScanner-4.68.8-1 Yes, I do have an /etc/MailScanner directory: drwxr-xr-x 2 root other 512 Jul 24 2006 images -rw-r--r-- 1 root other 4879 Mar 17 09:21 IPBlock.conf -rw-r--r-- 1 root other 5943 Mar 12 10:00 IPBlock.conf.last drwxr-xr-x 2 root other 1024 Sep 10 2007 reports drwxr-xr-x 2 root other 512 Apr 1 09:32 rules drwxr-xr-x 2 root other 512 Sep 20 2007 rulesdujour But the MailScanner.conf file that I always use is: /opt/MailScanner/etc/MailScanner.conf (follows the symlink) Like I said, things worked with the 4.68.5 beta but broke with 4.68.8. I'm running 4.67.6 right now. BTW, when I was running 4.68.5 instead 4.67.6, my system load seemed to be a lot lower on the box. Did you make some magic general performance improvement? Jeff Earickson Colby College On Wed, 2 Apr 2008, Julian Field wrote: > Date: Wed, 02 Apr 2008 18:22:29 +0100 > From: Julian Field > Reply-To: MailScanner Beta-testers > To: MailScanner Beta-testers > Subject: Re: breakage between 4.68.5 and 4.68.8 > > This is fixed for the next release. > > A suitable patch for your CustomConfig.pm is this: > > ---- SNIP ---- > --- CustomConfig.pm 2008-03-24 13:07:46.000000000 +0000 > +++ /tmp/CustomConfig.pm 2008-04-02 19:24:49.000000000 +0100 > @@ -765,6 +765,7 @@ > > my $ConfFile = $ARGV[0]; > $ConfFile = $ARGV[1] if $ConfFile =~ /^-+/i; > +$ConfFile = '/etc/MailScanner/MailScanner.conf' unless $ConfFile && -f > $ConfFile; > > my ($AccessDB, $Refusal, $my_mta); # Generalized here for Multiple MTA > support > $my_mta = lc(MailScanner::Config::QuickPeek($ConfFile, 'mta')) if $ConfFile > && > ---- SNIP ---- > > (The location is customised for the tar release so it gets the correct path > under /opt and doesn't use /etc) > > Best regards, > Jules. > > > Julian Field wrote: >> Put the location of the MailScanner.conf on the command-line and it should >> be happier. >> At that point it doesn't know where the conf file is. >> I'll try to sort this for the next release. >> >> >> Jeff A. Earickson wrote: >>> On Tue, 1 Apr 2008, Julian Field wrote: >>> >>>> >>>> Are you using IPBlock anywhere in your MailScanner.conf file? >>> >>> Yes, relevent parts of MailScanner.conf: >>> >>> MTA = sendmail >>> Sendmail = /usr/lib/sendmail >>> Sendmail2 = /usr/lib/sendmail >>> Always Looked Up Last = &IPBlock >>> >>> Obviously sendmail is there: >>> >>> (38)> ls -l /usr/lib/sendmail >>> -r-xr-sr-x 1 root smmsp 1227724 Nov 19 07:23 /usr/lib/sendmail >>> >>>> If so, the result is quite correct, it's only implemented for postfix and >>>> sendmail. >>>> If you're not, please do a "MailScanner --lintlite" and tell me >>>> everything it outputs (if anything). >>> >>> (2)> ./MailScanner --lintlite >>> IPBlock Currently not supported for your MTA at >>> /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789 >>> >>>> What MTA are you using? >>> >>> My setup: Solaris 10, sendmail, current SA release, etc. We had issues >>> with IPBlock in the early beta releases of 4.68, got things fixed by >>> 4.68.5, I didn't get a chance to test the last beta on 3/31, and here >>> we are. "diff" says there are no diffs between the 4.68.5 and 4.68.8 >>> versions of CustomConfig.pm, other than the RCS version number (3638 vs >>> 3657). >>> >>> Jeff Earickson >>> Colby College >> >> Jules >> > > Jules > > -- > Julian Field MEng CITP CEng > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > PGP public key: http://www.jules.fm/julesfm.asc > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From jaearick at colby.edu Thu Apr 3 17:44:10 2008 From: jaearick at colby.edu (Jeff A. Earickson) Date: Thu, 3 Apr 2008 13:44:10 -0400 (EDT) Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: <47F393EF.8010905@ecs.soton.ac.uk> References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> Message-ID: On Wed, 2 Apr 2008, Julian Field wrote: > Date: Wed, 02 Apr 2008 15:10:55 +0100 > From: Julian Field > Reply-To: MailScanner Beta-testers > To: MailScanner Beta-testers > Subject: Re: breakage between 4.68.5 and 4.68.8 > > Put the location of the MailScanner.conf on the command-line and it should be > happier. > At that point it doesn't know where the conf file is. > I'll try to sort this for the next release. Still sifting thu email, found this... I start MailScanner via my /etc/init.d script, the start portion looks like so (Solaris 10 here): MSDIR=/opt/MailScanner case "$1" in start) su - root -c "$MSDIR/bin/check_mailscanner" status=$? ;; So I went and looked at check_mailscanner. It has: process=MailScanner msbindir=/opt/MailScanner/bin config=/opt/MailScanner/etc/MailScanner.conf so config matches where my MailScanner.conf file really lives, unless symlinks have suddenly quit working. And I don't think they have. Jeff Earickson Colby College From MailScanner at ecs.soton.ac.uk Thu Apr 3 18:46:21 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 03 Apr 2008 19:46:21 +0100 Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> <47F3C0D5.1060404@ecs.soton.ac.uk> Message-ID: <47F525FD.9030701@ecs.soton.ac.uk> What is the path to the MailScanner.conf file in the patch I gave you? Obviously it should point to the one you have. Jeff A. Earickson wrote: > Julian, > > Put in your fix, still no go. It still whines like before: > > (56)> ./MailScanner --lintlite > IPBlock Currently not supported for your MTA at > /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 790 > > Is this an installation/path related issue? Each release of > MailScanner is installed into /opt using your install.sh script, > so installations look like: > > lrwxrwxrwx 1 root other 20 Apr 3 13:07 MailScanner -> > MailScanner-4.67.6-1 > drwxr-xr-x 7 root root 512 Mar 7 10:36 > MailScanner-4.67.6-1 > drwxr-xr-x 7 root root 512 Mar 18 08:26 > MailScanner-4.68.5-1 > drwxr-xr-x 7 root root 512 Apr 1 11:28 > MailScanner-4.68.8-1 > > Yes, I do have an /etc/MailScanner directory: > > drwxr-xr-x 2 root other 512 Jul 24 2006 images > -rw-r--r-- 1 root other 4879 Mar 17 09:21 IPBlock.conf > -rw-r--r-- 1 root other 5943 Mar 12 10:00 IPBlock.conf.last > drwxr-xr-x 2 root other 1024 Sep 10 2007 reports > drwxr-xr-x 2 root other 512 Apr 1 09:32 rules > drwxr-xr-x 2 root other 512 Sep 20 2007 rulesdujour > > But the MailScanner.conf file that I always use is: > > /opt/MailScanner/etc/MailScanner.conf (follows the symlink) > > Like I said, things worked with the 4.68.5 beta but broke with > 4.68.8. I'm running 4.67.6 right now. > > BTW, when I was running 4.68.5 instead 4.67.6, my system load seemed > to be a lot lower on the box. Did you make some magic general > performance improvement? > > Jeff Earickson > Colby College > > On Wed, 2 Apr 2008, Julian Field wrote: > >> Date: Wed, 02 Apr 2008 18:22:29 +0100 >> From: Julian Field >> Reply-To: MailScanner Beta-testers >> >> To: MailScanner Beta-testers >> Subject: Re: breakage between 4.68.5 and 4.68.8 >> >> This is fixed for the next release. >> >> A suitable patch for your CustomConfig.pm is this: >> >> ---- SNIP ---- >> --- CustomConfig.pm 2008-03-24 13:07:46.000000000 +0000 >> +++ /tmp/CustomConfig.pm 2008-04-02 19:24:49.000000000 +0100 >> @@ -765,6 +765,7 @@ >> >> my $ConfFile = $ARGV[0]; >> $ConfFile = $ARGV[1] if $ConfFile =~ /^-+/i; >> +$ConfFile = '/etc/MailScanner/MailScanner.conf' unless $ConfFile && >> -f $ConfFile; >> >> my ($AccessDB, $Refusal, $my_mta); # Generalized here for Multiple >> MTA support >> $my_mta = lc(MailScanner::Config::QuickPeek($ConfFile, 'mta')) if >> $ConfFile && >> ---- SNIP ---- >> >> (The location is customised for the tar release so it gets the >> correct path under /opt and doesn't use /etc) >> >> Best regards, >> Jules. >> >> >> Julian Field wrote: >>> Put the location of the MailScanner.conf on the command-line and it >>> should be happier. >>> At that point it doesn't know where the conf file is. >>> I'll try to sort this for the next release. >>> >>> >>> Jeff A. Earickson wrote: >>>> On Tue, 1 Apr 2008, Julian Field wrote: >>>> >>>>> >>>>> Are you using IPBlock anywhere in your MailScanner.conf file? >>>> >>>> Yes, relevent parts of MailScanner.conf: >>>> >>>> MTA = sendmail >>>> Sendmail = /usr/lib/sendmail >>>> Sendmail2 = /usr/lib/sendmail >>>> Always Looked Up Last = &IPBlock >>>> >>>> Obviously sendmail is there: >>>> >>>> (38)> ls -l /usr/lib/sendmail >>>> -r-xr-sr-x 1 root smmsp 1227724 Nov 19 07:23 >>>> /usr/lib/sendmail >>>> >>>>> If so, the result is quite correct, it's only implemented for >>>>> postfix and sendmail. >>>>> If you're not, please do a "MailScanner --lintlite" and tell me >>>>> everything it outputs (if anything). >>>> >>>> (2)> ./MailScanner --lintlite >>>> IPBlock Currently not supported for your MTA at >>>> /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789 >>>> >>>>> What MTA are you using? >>>> >>>> My setup: Solaris 10, sendmail, current SA release, etc. We had >>>> issues >>>> with IPBlock in the early beta releases of 4.68, got things fixed by >>>> 4.68.5, I didn't get a chance to test the last beta on 3/31, and here >>>> we are. "diff" says there are no diffs between the 4.68.5 and 4.68.8 >>>> versions of CustomConfig.pm, other than the RCS version number >>>> (3638 vs >>>> 3657). >>>> >>>> Jeff Earickson >>>> Colby College >>> >>> Jules >>> >> >> Jules >> >> -- >> Julian Field MEng CITP CEng >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> >> MailScanner customisation, or any advanced system administration help? >> Contact me at Jules at Jules.FM >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> PGP public key: http://www.jules.fm/julesfm.asc >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> -- >> MailScanner-Beta mailing list >> mailscanner-beta at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Thu Apr 3 18:48:34 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 03 Apr 2008 19:48:34 +0100 Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> Message-ID: <47F52682.2010806@ecs.soton.ac.uk> Jeff A. Earickson wrote: > On Wed, 2 Apr 2008, Julian Field wrote: > >> Date: Wed, 02 Apr 2008 15:10:55 +0100 >> From: Julian Field >> Reply-To: MailScanner Beta-testers >> >> To: MailScanner Beta-testers >> Subject: Re: breakage between 4.68.5 and 4.68.8 >> >> Put the location of the MailScanner.conf on the command-line and it >> should be happier. >> At that point it doesn't know where the conf file is. >> I'll try to sort this for the next release. > > Still sifting thu email, found this... I start MailScanner via my > /etc/init.d script, the start portion looks like so (Solaris 10 here): I assume you have it properly setup as a service and start and stop it with svcadm enable site/mailscanner and svcadm disable site/mailscanner ? > > MSDIR=/opt/MailScanner > case "$1" in > start) > su - root -c "$MSDIR/bin/check_mailscanner" > status=$? > ;; > > So I went and looked at check_mailscanner. It has: > > process=MailScanner > msbindir=/opt/MailScanner/bin > config=/opt/MailScanner/etc/MailScanner.conf > > so config matches where my MailScanner.conf file really lives, unless > symlinks have suddenly quit working. And I don't think they have. > > Jeff Earickson > Colby College And what happens when you run MailScanner --lint with the location of the MailScanner.conf on the command-line, like this: /opt/MailScanner/bin/MailScanner --lint /opt/MailScanner/etc/MailScanner.conf ? Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jaearick at colby.edu Thu Apr 3 19:19:54 2008 From: jaearick at colby.edu (Jeff A. Earickson) Date: Thu, 3 Apr 2008 15:19:54 -0400 (EDT) Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: <47F525FD.9030701@ecs.soton.ac.uk> References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> <47F3C0D5.1060404@ecs.soton.ac.uk> <47F525FD.9030701@ecs.soton.ac.uk> Message-ID: On Thu, 3 Apr 2008, Julian Field wrote: > Date: Thu, 03 Apr 2008 19:46:21 +0100 > From: Julian Field > Reply-To: MailScanner Beta-testers > To: MailScanner Beta-testers > Subject: Re: breakage between 4.68.5 and 4.68.8 > > What is the path to the MailScanner.conf file in the patch I gave you? > Obviously it should point to the one you have. Doh! Fixed that, lintlite now works. Now to look at your second msg... From jaearick at colby.edu Thu Apr 3 19:32:36 2008 From: jaearick at colby.edu (Jeff A. Earickson) Date: Thu, 3 Apr 2008 15:32:36 -0400 (EDT) Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: <47F52682.2010806@ecs.soton.ac.uk> References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> <47F52682.2010806@ecs.soton.ac.uk> Message-ID: >>> Put the location of the MailScanner.conf on the command-line and it should >>> be happier. >>> At that point it doesn't know where the conf file is. >>> I'll try to sort this for the next release. >> >> Still sifting thu email, found this... I start MailScanner via my >> /etc/init.d script, the start portion looks like so (Solaris 10 here): > I assume you have it properly setup as a service and start and stop it with > svcadm enable site/mailscanner > and > svcadm disable site/mailscanner > ? I am using a legacy start/stop script in /etc/init.d, didn't see the need for the complexity of SMF. >> >> MSDIR=/opt/MailScanner >> case "$1" in >> start) >> su - root -c "$MSDIR/bin/check_mailscanner" >> status=$? >> ;; >> >> So I went and looked at check_mailscanner. It has: >> >> process=MailScanner >> msbindir=/opt/MailScanner/bin >> config=/opt/MailScanner/etc/MailScanner.conf >> >> so config matches where my MailScanner.conf file really lives, unless >> symlinks have suddenly quit working. And I don't think they have. >> >> Jeff Earickson >> Colby College > And what happens when you run MailScanner --lint with the location of the > MailScanner.conf on the command-line, like this: > /opt/MailScanner/bin/MailScanner --lint /opt/MailScanner/etc/MailScanner.conf > ? Getting the $ConfFile path specified correctly at line 768 of CustomConfig.pm certainly helps, and the lint test above works correctly even if the patch to CustomConfig.pm is pulled out. So, as long as MailScanner gets invoked with the correct path to MailScanner.conf spelled out, things work. But I invoke MailScanner via my boot script, which uses check_mailscanner and has "$process $config" in there to specify the conf file path, and then it doesn't work. check_mailscanner hasn't changed in ages. I am now running 4.68.8 with the patch and the correct conf path in CustomConfig.pm. But I don't really know what broke. Jeff Earickson Colby College From MailScanner at ecs.soton.ac.uk Thu Apr 3 19:58:25 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu, 03 Apr 2008 20:58:25 +0100 Subject: breakage between 4.68.5 and 4.68.8 In-Reply-To: References: <47F2A4F3.6010205@ecs.soton.ac.uk> <47F393EF.8010905@ecs.soton.ac.uk> <47F52682.2010806@ecs.soton.ac.uk> Message-ID: <47F536E1.8040901@ecs.soton.ac.uk> Jeff A. Earickson wrote: >>>> Put the location of the MailScanner.conf on the command-line and it >>>> should be happier. >>>> At that point it doesn't know where the conf file is. >>>> I'll try to sort this for the next release. >>> >>> Still sifting thu email, found this... I start MailScanner via my >>> /etc/init.d script, the start portion looks like so (Solaris 10 here): >> I assume you have it properly setup as a service and start and stop >> it with >> svcadm enable site/mailscanner >> and >> svcadm disable site/mailscanner >> ? > > I am using a legacy start/stop script in /etc/init.d, didn't see the > need for the complexity of SMF. > >>> >>> MSDIR=/opt/MailScanner >>> case "$1" in >>> start) >>> su - root -c "$MSDIR/bin/check_mailscanner" >>> status=$? >>> ;; >>> >>> So I went and looked at check_mailscanner. It has: >>> >>> process=MailScanner >>> msbindir=/opt/MailScanner/bin >>> config=/opt/MailScanner/etc/MailScanner.conf >>> >>> so config matches where my MailScanner.conf file really lives, unless >>> symlinks have suddenly quit working. And I don't think they have. >>> >>> Jeff Earickson >>> Colby College >> And what happens when you run MailScanner --lint with the location of >> the MailScanner.conf on the command-line, like this: >> /opt/MailScanner/bin/MailScanner --lint >> /opt/MailScanner/etc/MailScanner.conf >> ? > > Getting the $ConfFile path specified correctly at line 768 of > CustomConfig.pm > certainly helps, and the lint test above works correctly even if the > patch > to CustomConfig.pm is pulled out. So, as long as MailScanner gets > invoked > with the correct path to MailScanner.conf spelled out, things work. But > I invoke MailScanner via my boot script, which uses check_mailscanner and > has "$process $config" in there to specify the conf file path, and > then it > doesn't work. Doesn't work? It should do as it runs $process (MailScanner) with the correct $config which should point to /opt/MailScanner/etc/MailScanner.conf. > check_mailscanner hasn't changed in ages. > > I am now running 4.68.8 with the patch and the correct conf path in > CustomConfig.pm. But I don't really know what broke. There is a new setting that upgrade_MailScanner_conf would have shown you, called "Automatic Syntax Check" which is set to "yes" by default. This invokes a "MailScanner --lintlite" before it forks, so you get warning of duff config files with syntax errors in them before it actually starts up, rather like Apache does. Someone requested it. Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 PGP public key: http://www.jules.fm/julesfm.asc -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jaearick at colby.edu Fri Apr 4 19:01:48 2008 From: jaearick at colby.edu (Jeff A. Earickson) Date: Fri, 4 Apr 2008 15:01:48 -0400 (EDT) Subject: puzzling over check_mailscanner Message-ID: Julian, I was staring at the bin/check_mailscanner script, and I've got to ask, why are the variables at the top only used some of the time? You have: PATH=/usr/bin:/bin export PATH PERL=perl AWK=awk GREP=grep FGREP=fgrep EGREP=egrep PGREP=pgrep PS=ps UNAME='uname -a' Then later in the script you use awk, grep, etc in some places and $AWK, $GREP, etc elsewhere. Shouldn't this be consistent? Jeff Earickson Colby College From MailScanner at ecs.soton.ac.uk Fri Apr 4 20:53:16 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri, 04 Apr 2008 21:53:16 +0100 Subject: puzzling over check_mailscanner In-Reply-To: References: Message-ID: <47F6953C.6060407@ecs.soton.ac.uk> Yes, you're quite right, it should be consistent. I'll try to remember to fix it this weekend some time. Cheers, Jules. Jeff A. Earickson wrote: > Julian, > > I was staring at the bin/check_mailscanner script, and I've > got to ask, why are the variables at the top only used some > of the time? You have: > > PATH=/usr/bin:/bin > export PATH > PERL=perl > AWK=awk > GREP=grep > FGREP=fgrep > EGREP=egrep > PGREP=pgrep > PS=ps > UNAME='uname -a' > > Then later in the script you use awk, grep, etc in some places > and $AWK, $GREP, etc elsewhere. Shouldn't this be consistent? > > Jeff Earickson > Colby College Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 PGP public key: http://www.jules.fm/julesfm.asc -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Sun Apr 6 17:45:37 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun, 06 Apr 2008 18:45:37 +0100 Subject: Beta 4.69.1 -- can find files embedded in MS Office docs Message-ID: <47F90C41.9060401@ecs.soton.ac.uk> Folks, I have just released the first beta of version 4.69. It has a few new features, the most obviously important of which is its ability to extract files embedded within Microsoft Office documents, and subject them to the same filename and filetype tests that the contents of other archives have to pass. The other new useful things are a couple of new command-line options to help when debugging systems, notably the "--id" and "--inqueuedir" options to restrict what messages the MailScanner instance will process. For the embedded-in-Office-documents tests, I *strongly* recommend you change your "Maximum Archive Depth" setting to at least 3, or else a lot of your users will get really annoyed that their files are being rejected as being nested too deeply within an archive. The "upgrade_MailScanner_conf" script will warn you of this if it is set to 1 or 2. People who have set this to 0 will obviously be left in peace :-) Please can you give this release a good hammering, particularly in the area of the new Microsoft Office document handling. Download as usual from www.mailscanner.info. Best regards, Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 PGP public key: http://www.jules.fm/julesfm.asc -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Mon Apr 14 14:06:50 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 14 Apr 2008 15:06:50 +0100 Subject: New beta 4.69.3 released Message-ID: <480364FA.3020800@ecs.soton.ac.uk> I have released a new beta version of MailScanner, 4.69.3. The main new features in this beta are: - New keywords available in "Spam Actions" (and its relations) and "Archive Mail" in MailScanner.conf. These let you put _FROMUSER_, _FROMDOMAIN_, _TOUSER_, _TODOMAIN_ and _DATE_ in the "forward" email address in "Spam Actions" and in the archive location and forwarding addresses in "Archive Mail". This lets you build all sorts of fancy systems that use procmail to deliver messages directly into spam databases and mail archives that are sorted by recipient address, and clever things like that. - New MailScanner.conf setting "Missing Mail Archive Is =" which lets you specify whether a destination in "Archive Mail =" is an mbox-format file or a directory. This used not to be necessary as you could predict the name of the next mbox file as it could only contain fixed strings or the date, so you could create the mbox file in advance if you wanted to deliver to that format. However, now it can be based on the sender and/or recipients of the message, it cannot be predicted so has to be told which type to use if the archive location is not present. It will automatically create all necessary complete directories trees to be able to archive the mail in your requested location. Please let me know if this works for you okay, and also if there are any necessary facilities I have not provided for this to be most useful to you. The only one that immediately comes to mind is to be able to specify an arbitrary directory location in the "store" spam action. Do you need that ability to do that too? Cheers folks! Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Mon Apr 14 20:42:48 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon, 14 Apr 2008 21:42:48 +0100 Subject: New beta 4.69.3 released In-Reply-To: <480364FA.3020800@ecs.soton.ac.uk> References: <480364FA.3020800@ecs.soton.ac.uk> Message-ID: <4803C1C8.4050305@ecs.soton.ac.uk> I have now added arbitrary directory paths to the "store" Spam Action, so you can specify Spam Actions like store-/var/spool/MailScanner/quarantine/_TOUSER_._TODOMAIN_ and it will store the spam/high-scoring-spam/non-spam in an arbitrary directory you specify, which can include the keywords _DATE_, _FROMUSER_, _FROMDOMAIN_, _TOUSER_, _TODOMAIN_. Julian Field wrote: > I have released a new beta version of MailScanner, 4.69.3. > > The main new features in this beta are: > > - New keywords available in "Spam Actions" (and its relations) and > "Archive Mail" in MailScanner.conf. These let you put _FROMUSER_, > _FROMDOMAIN_, _TOUSER_, _TODOMAIN_ and _DATE_ in the "forward" email > address in "Spam Actions" and in the archive location and forwarding > addresses in "Archive Mail". This lets you build all sorts of fancy > systems that use procmail to deliver messages directly into spam > databases and mail archives that are sorted by recipient address, and > clever things like that. > - New MailScanner.conf setting "Missing Mail Archive Is =" which lets > you specify whether a destination in "Archive Mail =" is an > mbox-format file or a directory. This used not to be necessary as you > could predict the name of the next mbox file as it could only contain > fixed strings or the date, so you could create the mbox file in > advance if you wanted to deliver to that format. However, now it can > be based on the sender and/or recipients of the message, it cannot be > predicted so has to be told which type to use if the archive location > is not present. It will automatically create all necessary complete > directories trees to be able to archive the mail in your requested > location. > > Please let me know if this works for you okay, and also if there are > any necessary facilities I have not provided for this to be most > useful to you. The only one that immediately comes to mind is to be > able to specify an arbitrary directory location in the "store" spam > action. Do you need that ability to do that too? > > Cheers folks! > > Jules > Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 PGP public key: http://www.jules.fm/julesfm.asc -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Tue Apr 15 13:32:31 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue, 15 Apr 2008 14:32:31 +0100 Subject: 4.69.4-2 Message-ID: <4804AE6F.2070302@ecs.soton.ac.uk> Just to let you know I put out a new beta this morning. 2 changes of any consequence: 1) "Debug SpamAssassin" will be set to no unless "Debug = yes" has been set. This should stop the problems some people have been seeing where MailScanner claimed to be stuck extracting attachments. 2) The "forward" spam action is improved. As well as things like "store-nonspam" and "store-mcp", you can now also specify arbitrary directory paths, which looks like this: "store-/var/spool/MailScanner/dump" and it will create them as necessary. Not only that, but you can use the keywords _DATE_, _FROMUSER_, _FROMDOMAIN_, _TOUSER_ and _TODOMAIN_ in them, so can say High-Scoring Spam Actions = delete store-/var/email/_TODOMAIN_-_TOUSER_/_DATE_ and it will do what you expect. All directories trees should be automatically created as required. Note that (2) applies to all of the appropriate MailScanner.conf settings, ie "Spam Actions", "High-Scoring Spam Actions", "Non-Spam Actions" and "SpamAssassin Rule Actions". "Archive Mail" could already do this, as noted in the previous beta announcement. I would be grateful if you could download and test this for me. Thanks folks! Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Tue Apr 22 09:29:05 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue, 22 Apr 2008 10:29:05 +0100 Subject: 4.69.6 released -- Graphic Inline Signatures Message-ID: <480DAFE1.30806@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just released a new beta, 4.69.6. This contains: 6 Added new configuration setting "IP Protocol Version Header" which will tell you the IP version number used in the last hop to this server. It produces either "IPv4" or "IPv6" in the header. To stop the header appearing, just set it to be blank. Added at special request by my boss :-) 6 Added new configuration setting "Allow Multiple HTML Signatures". If the message has been signed with an HTML signature containing an tag, whose "alt" attribute contains "MailScanner" and "Signature" and "%org-name%", then it will not be signed again if this option is set to "no". Once a message (with an image in the signature) has been replied to a few times, it starts getting very large and ugly. This option keeps the message size down and makes it look better. This is set to "no" by default as messages look better this way. The Allow Multiple HTML Signatures was requested by Dave Jones, so that should make him happy. The other one just keeps my boss off my back :-) Please give it a try, and let me know if you run into any problems. Thanks folks! Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.8.2 (Build 3005) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFIDa/iEfZZRxQVtlQRAiIlAJwPpNNeQBausSfYSMQviFxpM3EjngCgxY5c LHpfHZ0VYFfPh2Vvk82n1+A= =awEY -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Apr 23 15:29:35 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 23 Apr 2008 16:29:35 +0100 Subject: 4.69.7 -- 100% CPU bug fixed Message-ID: <480F55DF.7020602@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have fixed the bug that exhibits as MailScanner freezing while occupying 100% CPU time around the time it is extracting attachments. This only occurs when "--debug-sa" is set or the "Debug SpamAssassin = yes" setting is made. Download as usual from www.mailscanner.info. Best regards, Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.8.2 (Build 3005) Comment: Use Enigmail to decrypt or check this message is legitimate Charset: ISO-8859-1 wj8DBQFID1XgEfZZRxQVtlQRAixWAJ4+pZDFNI33dImYOwB8IrKhVa4WbQCg5/WC E19Ky7lIocNZ9NOGpBKmpNA= =wS7n -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From gmatt at nerc.ac.uk Fri Apr 25 12:47:24 2008 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Fri, 25 Apr 2008 13:47:24 +0100 Subject: ClamAVModule logging (WAS Re: Beta 4.67.5) In-Reply-To: <47CBC7BE.2020909@nerc.ac.uk> References: <47CB0F76.6080706@ecs.soton.ac.uk> <47CBC7BE.2020909@nerc.ac.uk> Message-ID: <4811D2DC.2070206@nerc.ac.uk> Jules... just installed 4.68.8 on my production relays (problem only seen on production machines - not reproducible on test/dev) and can confirm that the logging issue reported earlier is gone. ClamAVModule now logs as expected without the kludge I posted before. many thanks, GREG Greg Matthews wrote: > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I have just released a new beta, version 4.67.5. >> This is hopefully the last beta before the next stable release in a >> couple of days. However, I can't release the stable release until >> enough people have tried the beta and said it's okay. >> >> So please help me by testing it out. > > does it address the clamavmodule logging problem? > >> >> If all goes well, I'll release the stable version on Tuesday or >> Wednesday. Sorry I missed the start of the month, but there were >> things going on, such as the Symantec Scan Engine support which >> desperately needed fixing. >> >> Cheers folks! >> >> Jules >> >> - -- Julian Field MEng CITP CEng >> www.MailScanner.info >> Buy the MailScanner book at www.MailScanner.info/store >> >> MailScanner customisation, or any advanced system administration help? >> Contact me at Jules at Jules.FM >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> PGP public key: http://www.jules.fm/julesfm.asc >> >> >> -----BEGIN PGP SIGNATURE----- >> Version: PGP Desktop 9.8.1 (Build 2523) >> Comment: Use Thunderbird Enigmail to verify this message >> Charset: ISO-8859-1 >> >> wj8DBQFHyw+OEfZZRxQVtlQRAhVwAJ0UIbDl5Tu7H0dhslCs+jvoOftFngCdELuh >> OMrtbXI7LOo+UT/zog7/Jc4= >> =1DtX >> -----END PGP SIGNATURE----- >> > > -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From MailScanner at ecs.soton.ac.uk Fri Apr 25 13:05:05 2008 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri, 25 Apr 2008 14:05:05 +0100 Subject: ClamAVModule logging (WAS Re: Beta 4.67.5) In-Reply-To: <4811D2DC.2070206@nerc.ac.uk> References: <47CB0F76.6080706@ecs.soton.ac.uk> <47CBC7BE.2020909@nerc.ac.uk> <4811D2DC.2070206@nerc.ac.uk> Message-ID: <4811D701.3040001@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Great news. Thanks for posting that. Greg Matthews wrote: > Jules... > > just installed 4.68.8 on my production relays (problem only seen on > production machines - not reproducible on test/dev) and can confirm > that the logging issue reported earlier is gone. ClamAVModule now logs > as expected without the kludge I posted before. > > many thanks, > > GREG > > Greg Matthews wrote: >> Julian Field wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> I have just released a new beta, version 4.67.5. >>> This is hopefully the last beta before the next stable release in a >>> couple of days. However, I can't release the stable release until >>> enough people have tried the beta and said it's okay. >>> >>> So please help me by testing it out. >> >> does it address the clamavmodule logging problem? >> >>> >>> If all goes well, I'll release the stable version on Tuesday or >>> Wednesday. Sorry I missed the start of the month, but there were >>> things going on, such as the Symantec Scan Engine support which >>> desperately needed fixing. >>> >>> Cheers folks! >>> >>> Jules >>> >>> - -- Julian Field MEng CITP CEng >>> www.MailScanner.info >>> Buy the MailScanner book at www.MailScanner.info/store >>> >>> MailScanner customisation, or any advanced system administration help? >>> Contact me at Jules at Jules.FM >>> >>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >>> PGP public key: http://www.jules.fm/julesfm.asc >>> >>> >>> -----BEGIN PGP SIGNATURE----- >>> Version: PGP Desktop 9.8.1 (Build 2523) >>> Comment: Use Thunderbird Enigmail to verify this message >>> Charset: ISO-8859-1 >>> >>> wj8DBQFHyw+OEfZZRxQVtlQRAhVwAJ0UIbDl5Tu7H0dhslCs+jvoOftFngCdELuh >>> OMrtbXI7LOo+UT/zog7/Jc4= >>> =1DtX >>> -----END PGP SIGNATURE----- >>> >> >> > > Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.8.2 (Build 3005) Comment: Use Enigmail to decrypt or check this message is legitimate Charset: ISO-8859-1 wj8DBQFIEdcCEfZZRxQVtlQRArN7AKCsAyTGIAP+H7comkG49lqTbwIE0gCeJETt IpDH3EQ5TfmUasrcIbRybAI= =PBZy -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.