Mailscanner not scanning e-mails

Mon Dec 15 15:32:19 GMT 2003

(I'm not sure if this made it to the mailing list...so I'm sending again)

Julian,

OK, did exactly what you said by making the delivery method = queue it seems
that /var/spool/mqueue/q* files seem to have the Mailscanner header added to
them. But here is a new problem, the mail is not being delivered. It just
sits in the mqueue directory. Can you help?

Thanks,

SW
----- Original Message -----
From: "Julian Field" <mailscanner at ecs.soton.ac.uk>
To: "SW" <wppiphoto at wppi.com>
Sent: Sunday, December 14, 2003 3:53 PM
Subject: Re: Mailscanner not scanning e-mails

Sounds like it is scanning them. Set the Delivery Method = queue and look
in your /var/spool/mqueue/q* files for MailScanner headers (they are text
files, you can just "cat" them). You should find any MailScanner headers
towards the end of each of the q* files.

At 20:09 14/12/2003, you wrote:
>Julian,
>
>Any ideas how to do this? I'm not that verstial w/ sendmail and I don't
want
>to break something. :-)
>
>BTW, why does my log files show mailscanner scanning e-mails? Or did I read
>them incorrectly:
>
>Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Found 6 messages waiting
>Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Scanning 4 messages, 4618
>bytes
>
>Thanks,
>
>SW
>----- Original Message -----
>From: "Julian Field" <mailscanner at ecs.soton.ac.uk>
>To: "SW" <wppiphoto at wppi.com>
>Cc: <mailscanner at jiscmail.ac.uk>
>Sent: Sunday, December 14, 2003 2:49 PM
>Subject: Re: Mailscanner not scanning e-mails
>
>
>If you are running 8.9.3, then MailScanner won't scan mail created by
>invoking the sendmail binary directly. You need to tell whatever you are
>using to send mail via an SMTP server called localhost.
>
>At 19:08 14/12/2003, you wrote:
> >Julian,
> >
> >Yeap, you were right. It seemed that in mailscanner.conf, virus scanners
=
> >I was missing the 's' at the end of scanners. I fixed that and now in my
> >logs I see the following:
> >
> >Dec 14 13:45:22 ns1 MailScanner[697]: MailScanner E-Mail Virus Scanner
> >version 4.25-14 starting...
> >Dec 14 13:45:23 ns1 sendmail[730]: starting daemon (8.9.3):
> >SMTP+queueing at 01:00:00
> >Dec 14 13:45:32 ns1 MailScanner[810]: MailScanner E-Mail Virus Scanner
> >version 4.25-14 starting...
> >Dec 14 13:45:33 ns1 MailScanner[697]: Using locktype = flock
> >Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Found 6 messages waiting
> >Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Scanning 4 messages,
4618
> >bytes
> >Dec 14 13:45:33 ns1 MailScanner[697]: Spam Checks: Starting
> >Dec 14 13:45:38 ns1 MailScanner[810]: Using locktype = flock
> >Dec 14 13:45:42 ns1 MailScanner[819]: MailScanner E-Mail Virus Scanner
> >version 4.25-14 starting...
> >Dec 14 13:45:43 ns1 MailScanner[697]: RBL Check ORDB-RBL timed out and
was
> >killed, consecutive failure 1 of 7
> >Dec 14 13:45:49 ns1 MailScanner[819]: Using locktype = flock
> >Dec 14 13:45:53 ns1 MailScanner[838]: MailScanner E-Mail Virus Scanner
> >version 4.25-14 starting...
> >Dec 14 13:45:53 ns1 MailScanner[697]: Virus and Content Scanning:
Starting
> >Dec 14 13:45:55 ns1 MailScanner[697]: Uninfected: Delivered 4 messages
> >Dec 14 13:46:00 ns1 MailScanner[838]: Using locktype = flock
> >Dec 14 13:46:02 ns1 MailScanner[870]: MailScanner E-Mail Virus Scanner
> >version 4.25-14 starting...
> >Dec 14 13:46:08 ns1 MailScanner[870]: Using locktype = flock
> >
> >But still no header info in the e-mails. I think Mailscanner is looking
> >somewhere where there are 4 old messges which it scans but are not
> >delivered. Does this make any sense?
> >
> >The RBL check failing is I think due to our firewall which blocks entire
IP
> >blocks. I need to check what IP it uses and port to allow traffic out/in
> >thru our firewall.
> >
> >Thanks for all the help!
> >
> >SW
> >----- Original Message -----
> >From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
> >To: <MAILSCANNER at JISCMAIL.AC.UK>
> >Sent: Sunday, December 14, 2003 1:31 PM
> >Subject: Re: Mailscanner not scanning e-mails
> >
> >
> >At 18:03 14/12/2003, you wrote:
> > >root       693  0.0  0.0     0    0 ?        Z    03:26   0:00
>[MailScanner
> > ><defunct>]
> > >root       809  0.0  0.0     0    0 ?        Z    03:26   0:00
>[MailScanner
> > ><defunct>]
> > >root       813  0.0  0.0     0    0 ?        Z    03:26   0:00
>[MailScanner
> > ><defunct>]
> > >root       821  0.0  0.0     0    0 ?        Z    03:26   0:00
>[MailScanner
> > ><defunct>]
> >
> >Take a look at MailScanner entries in your maillog. Looks like a
> >configuration error. Best idea is to start from a default setup with no
> >local tweaks at all, then slowly introduce the extras.
> >--
> >Julian Field
> >www.MailScanner.info
> >Professional Support Services at www.MailScanner.biz
> >MailScanner thanks transtec Computers for their support
> >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/