I found the maillog non updateing issue in the syslog.conf file

Matt Doherty Matthew_doherty at DATAWATCH.COM
Wed Jun 19 23:06:59 IST 2002

In the :
/etc/syslog.conf file

I think the rpm might have modified it .. must have because i didnt..
My previouse non working line was :

# Log all the mail messages in one place.
mail.debug*;mailscanner.*                    /var/log/maillog

               ---====   I split them and changed it to:  ====---

# Log all the mail messages in one place.
mail.*                                                /var/log/maillog

# Log all the mailscanned messages to.
mailscanner.*                                    /var/log/mailscanner

now when i do a
tail -f /var/log/maillog
its working now :)

  -----Original Message-----
  From: Julian Field [mailto:jkf at ECS.SOTON.AC.UK]
  Sent: Wednesday, June 19, 2002 3:19 PM
  Subject: Re: Strange Message

  At 17:56 19/06/2002, you wrote:
  >RH 7.2
  >Sendmail 8.11.6
  >latest RPM fresh install of mailscanner and all perl updates
  >When I do a chkconfig --list | grep sendmail
  >It shows 0 - 5 runlevels as off

  Correct. You don't want sendmail to be run from the sendmail
  /etc/rc.d/init.d/sendmail script, which is what
  chkconfig --list | grep sendmail
  will show you.

  >ps -A | more shows sendmail and mailscanner running

  Good. There should be 2 sendmail processes running, one with something
  "-q15m" on its command-line, and another accepting connections on port 25.
  And 1 MailScanner process running.

  >maillog is not being written to and there is no sign of a .maillog.swp

  There shouldn't be a .maillog.swp file as you don't really want to edit
  your logs with vi, which is what that usually implies.

  As your maillog isn't being written to by MailScanner, check that there is
  a line in your /etc/syslog.conf file that says
  mail.debug /var/log/maillog
  If there isn't one, then add it and then run the command
  /etc/rc.d/init.d/syslog restart
  If you still can't get anything from MailScanner into your maillog, then
  you will need to edit /etc/rc.d/init.d/syslog a little bit. There is a
  that sets the value of "SYSLOGD_OPTIONS", and this should say
  (the new bit is the "-r"). If you make that change, you will need to
  /etc/rc.d/init.d/syslog restart
  again so that it makes use of the change.

  >chkconfig mailscanner on (or off) shows nothing.. I just get the command

  It doesn't print anything, but it has the effect of telling Linux whether
  to start MailScanner (or not) the next time the computer boots Linux. If
  you have done this a few times, then you need to ensure it is set to start
  on boot. So do
  chkconfig mailscanner on
  and then do
  chkconfig --list | grep mail
  and you should see that sendmail is switched off at all run levels, and
  mailscanner is switched on at levels 3,4,5. The startup script
  corresponding to this is /etc/rc.d/init.d/mailscanner, which actually not
  only starts MailScanner, but also starts the 2 sendmail processes it
  This is why sendmail is apparently off and mailscanner is on.

  >doing tests im lucky to say mail is being sent.. but have no idea if
  >mailscanner is scanning due to the fact that the maillog is not being
  >written to .. strange?
  >my mail log is is in its default location too... /var/log/maillog so I am
  >I am sorry if this seems to be a newbie question, cuz I am :)
  >should I execute these commands in this order?
  >chkconfig --add mailscanner
  > >/etc/rc.d/init.d/sendmail stop
  > >chkconfig sendmail off
  > >chkconfig --level 2345 sendmail off
  > >rm -f /etc/rc.d/rc2.d/S30sendmail

  You can do that if your like, it won't do any harm. But if you do a
  chkconfig --list | grep mail
  first you will probably find you don't need to do them as sendmail will be
  off and mailscanner will be on.

  > I have not done this yet..
  >I guess you could tell im abit scared to do this during a busy time at
  >company, but need to get mailscanner working properly at this very
  >moment.. ahhh!

  A good way to test MailScanner is to send some mail through it containing
  the "eicar" test virus. This is a totally harmless file which you can
  download from www.eicar.org but which will be detected as a virus by all
  the virus scanners. Remember, if sending it from the same machine as the
  one running MailScanner, that you need to send the mail in via the SMTP
  port (25) and you don't just call sendmail directly. So probably best for
  your testing to send the mail from another PC so you can be sure it is
  talking to the MailScanner server by SMTP.

  Hopefully that's enough to get you going. And I hope a few people find
  info useful in future via the mailing list archives...

  >-----Original Message-----
  >From: Julian Field [mailto:jkf at ECS.SOTON.AC.UK]
  >Sent: Tuesday, June 18, 2002 11:18 PM
  >Subject: Re: Strange Message
  >At 22:56 18/06/2002, you wrote:
  > >-----Original Message-----
  > >From: Matthew_doherty at DATAWATCH.COM
  > >
  > > > Does this mean we have to remove sendmail from RedHats boot up
  > services ?
  > >
  > >Yep, like I said 2 responses ago :-)
  > >on RH, use chkconfig
  > >
  > > > Or does the rpm automatically do that during the install?
  > >
  > >nope, it doesn't.
  >Oh, yes it does. (Cue Punch & Judy jokes... oh, no it doesn't... oh, yes
  >does... :-)
  > From the "%post" script in the RPM spec From the "%post" script in the
  > RPM spec <a href=":
  > >chkconfig --add mailscanner
  > >/etc/rc.d/init.d/sendmail stop
  > >chkconfig sendmail off
  > >chkconfig --level 2345 sendmail off
  > >rm -f /etc/rc.d/rc2.d/S30sendmail
  >Julian Field Teaching Systems Manager
  >jkf at ecs.soton.ac.uk Dept. of Electronics & Computer Science
  >Tel. 023 8059 2817 University of Southampton
  >Southampton SO17 1BJ

  Julian Field Teaching Systems Manager
  jkf at ecs.soton.ac.uk Dept. of Electronics & Computer Science
  Tel. 023 8059 2817 University of Southampton
  Southampton SO17 1BJ

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20020619/07145e32/attachment.html

More information about the MailScanner mailing list