Mailscanner not scanning e-mails

[Julian Field]

If you are running 8.9.3, then MailScanner won't scan mail created by
invoking the sendmail binary directly. You need to tell whatever you are
using to send mail via an SMTP server called localhost.

At 19:08 14/12/2003, you wrote:
>Julian,
>
>Yeap, you were right. It seemed that in mailscanner.conf, virus scanners =
>I was missing the 's' at the end of scanners. I fixed that and now in my
>logs I see the following:
>
>Dec 14 13:45:22 ns1 MailScanner[697]: MailScanner E-Mail Virus Scanner
>version 4.25-14 starting...
>Dec 14 13:45:23 ns1 sendmail[730]: starting daemon (8.9.3):
>SMTP+queueing at 01:00:00
>Dec 14 13:45:32 ns1 MailScanner[810]: MailScanner E-Mail Virus Scanner
>version 4.25-14 starting...
>Dec 14 13:45:33 ns1 MailScanner[697]: Using locktype = flock
>Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Found 6 messages waiting
>Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Scanning 4 messages, 4618
>bytes
>Dec 14 13:45:33 ns1 MailScanner[697]: Spam Checks: Starting
>Dec 14 13:45:38 ns1 MailScanner[810]: Using locktype = flock
>Dec 14 13:45:42 ns1 MailScanner[819]: MailScanner E-Mail Virus Scanner
>version 4.25-14 starting...
>Dec 14 13:45:43 ns1 MailScanner[697]: RBL Check ORDB-RBL timed out and was
>killed, consecutive failure 1 of 7
>Dec 14 13:45:49 ns1 MailScanner[819]: Using locktype = flock
>Dec 14 13:45:53 ns1 MailScanner[838]: MailScanner E-Mail Virus Scanner
>version 4.25-14 starting...
>Dec 14 13:45:53 ns1 MailScanner[697]: Virus and Content Scanning: Starting
>Dec 14 13:45:55 ns1 MailScanner[697]: Uninfected: Delivered 4 messages
>Dec 14 13:46:00 ns1 MailScanner[838]: Using locktype = flock
>Dec 14 13:46:02 ns1 MailScanner[870]: MailScanner E-Mail Virus Scanner
>version 4.25-14 starting...
>Dec 14 13:46:08 ns1 MailScanner[870]: Using locktype = flock
>
>But still no header info in the e-mails. I think Mailscanner is looking
>somewhere where there are 4 old messges which it scans but are not
>delivered. Does this make any sense?
>
>The RBL check failing is I think due to our firewall which blocks entire IP
>blocks. I need to check what IP it uses and port to allow traffic out/in
>thru our firewall.
>
>Thanks for all the help!
>
>SW
>----- Original Message -----
>From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
>To: <MAILSCANNER at JISCMAIL.AC.UK>
>Sent: Sunday, December 14, 2003 1:31 PM
>Subject: Re: Mailscanner not scanning e-mails
>
>
>At 18:03 14/12/2003, you wrote:
> >root       693  0.0  0.0     0    0 ?        Z    03:26   0:00 [MailScanner
> ><defunct>]
> >root       809  0.0  0.0     0    0 ?        Z    03:26   0:00 [MailScanner
> ><defunct>]
> >root       813  0.0  0.0     0    0 ?        Z    03:26   0:00 [MailScanner
> ><defunct>]
> >root       821  0.0  0.0     0    0 ?        Z    03:26   0:00 [MailScanner
> ><defunct>]
>
>Take a look at MailScanner entries in your maillog. Looks like a
>configuration error. Best idea is to start from a default setup with no
>local tweaks at all, then slowly introduce the extras.
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654