breakage between 4.68.5 and 4.68.8

[Julian Field]

Are you using IPBlock anywhere in your MailScanner.conf file?
If so, the result is quite correct, it's only implemented for postfix 
and sendmail.
If you're not, please do a "MailScanner --lintlite" and tell me 
everything it outputs (if anything).
What MTA are you using?

Jeff A. Earickson wrote:
> Julian,
>
> This is a mystery to me, worked in 68.5 and not in 68.8:
> There were no changes in CustomConfig.pm that I can find.
> Running in regular mode gives these complaints to syslog
> too.
> I have dropped back to 4.67.6 for the moment..
>
> (203)> ./MailScanner --lint
> Trying to setlogsock(native)
> Read 817 hostnames from the phishing whitelist
> Read 5141 hostnames from the phishing blacklist
> Config: calling custom init function IPBlock
> IPBlock Currently not supported for your MTA  at 
> /opt/MailScanner/lib/MailScanner/CustomConfig.pm line 789
>
>    ****** WTF???  ******
>
> Checking version numbers...
> Version number in MailScanner.conf (4.68.8) is correct.
>
> Your envelope_sender_header in spam.assassin.prefs.conf is correct.
>
> Checking for SpamAssassin errors (if you use it)...
> SpamAssassin temporary working directory is /tmp
> SpamAssassin temp dir = /tmp
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> SpamAssassin reported no errors.
> INFO:: Meaningless output that goes nowhere, to keep SAVI happy
> SophosSAVI 4.26 (engine 2.70) recognizing 347310 viruses
> SophosSAVI using 421 IDE files
> Using locktype = posix
> MailScanner.conf says "Virus Scanners = clamd sophossavi"
> Found these virus scanners installed: clamd, sophossavi
> =========================================================================== 
>
> Virus and Content Scanning: Starting
> ProcessClamAVModOutput Clamd
> ClamAVModule::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
> ProcessClamAVModOutput Clamd
> ClamAVModule::INFECTED:: Eicar-Test-Signature FOUND :: ./1/
> Virus Scanning: Clamd found 2 infections
> SophosSAVI::INFECTED:: EICAR-AV-Test:: ./1/eicar.com
> Virus Scanning: SophosSAVI found 2 infections
> Infected message 1 came from 10.1.1.1
> Virus Scanning: Found 2 viruses
> Filename Checks:  (1 eicar.com)
> Other Checks: Found 1 problems
> =========================================================================== 
>
> Virus Scanner test reports:
> Clamd said "eicar.com was infected: Eicar-Test-Signature"
> SophosSAVI said "eicar.com was infected by EICAR-AV-Test"
>
> If any of your virus scanners (clamd,sophossavi)
> are not listed there, you should check that they are installed correctly
> and that MailScanner is finding them correctly via its 
> virus.scanners.conf.
> Config: calling custom end function IPBlock
> Closing down IP blocking
>
>
>
> -----------------------------------
> Jeff A. Earickson, Ph.D
> Senior UNIX Sysadmin
> Email Administrator
> Colby Sports Photographer
> Colby College,
> 4214 Mayflower Hill,
> Waterville ME, 04901-8842
> 207-859-4214 (fax 207-859-4186)
> Eastern Time Zone, USA
> -----------------------------------

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.