Mailscanner not scanning e-mails

Mon Dec 15 15:35:11 GMT 2003

At 15:32 15/12/2003, you wrote:
>(I'm not sure if this made it to the mailing list...so I'm sending again)
>
>Julian,
>
>OK, did exactly what you said by making the delivery method = queue

In your /etc/MailScanner/MailScanner.conf, set
Delivery Method = queue
instead of the normal
Delivery Method = batch

This just helps when peering at the outgoing queue as it doesn't tell
sendmail to immediately deliver messages that have been processed by
MailScanner.

>it seems
>that /var/spool/mqueue/q* files seem to have the Mailscanner header added to
>them.

Good, in which case MailScanner is processing all your mail fine.

>  But here is a new problem, the mail is not being delivered. It just
>sits in the mqueue directory. Can you help?

See explanation of "batch" versus "queue" above.

>Thanks,
>
>SW
>----- Original Message -----
>From: "Julian Field" <mailscanner at ecs.soton.ac.uk>
>To: "SW" <wppiphoto at wppi.com>
>Sent: Sunday, December 14, 2003 3:53 PM
>Subject: Re: Mailscanner not scanning e-mails
>
>
>Sounds like it is scanning them. Set the Delivery Method = queue and look
>in your /var/spool/mqueue/q* files for MailScanner headers (they are text
>files, you can just "cat" them). You should find any MailScanner headers
>towards the end of each of the q* files.
>
>At 20:09 14/12/2003, you wrote:
> >Julian,
> >
> >Any ideas how to do this? I'm not that verstial w/ sendmail and I don't
>want
> >to break something. :-)
> >
> >BTW, why does my log files show mailscanner scanning e-mails? Or did I read
> >them incorrectly:
> >
> >Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Found 6 messages waiting
> >Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Scanning 4 messages, 4618
> >bytes
> >
> >Thanks,
> >
> >SW
> >----- Original Message -----
> >From: "Julian Field" <mailscanner at ecs.soton.ac.uk>
> >To: "SW" <wppiphoto at wppi.com>
> >Cc: <mailscanner at jiscmail.ac.uk>
> >Sent: Sunday, December 14, 2003 2:49 PM
> >Subject: Re: Mailscanner not scanning e-mails
> >
> >
> >If you are running 8.9.3, then MailScanner won't scan mail created by
> >invoking the sendmail binary directly. You need to tell whatever you are
> >using to send mail via an SMTP server called localhost.
> >
> >At 19:08 14/12/2003, you wrote:
> > >Julian,
> > >
> > >Yeap, you were right. It seemed that in mailscanner.conf, virus scanners
>=
> > >I was missing the 's' at the end of scanners. I fixed that and now in my
> > >logs I see the following:
> > >
> > >Dec 14 13:45:22 ns1 MailScanner[697]: MailScanner E-Mail Virus Scanner
> > >version 4.25-14 starting...
> > >Dec 14 13:45:23 ns1 sendmail[730]: starting daemon (8.9.3):
> > >SMTP+queueing at 01:00:00
> > >Dec 14 13:45:32 ns1 MailScanner[810]: MailScanner E-Mail Virus Scanner
> > >version 4.25-14 starting...
> > >Dec 14 13:45:33 ns1 MailScanner[697]: Using locktype = flock
> > >Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Found 6 messages waiting
> > >Dec 14 13:45:33 ns1 MailScanner[697]: New Batch: Scanning 4 messages,
>4618
> > >bytes
> > >Dec 14 13:45:33 ns1 MailScanner[697]: Spam Checks: Starting
> > >Dec 14 13:45:38 ns1 MailScanner[810]: Using locktype = flock
> > >Dec 14 13:45:42 ns1 MailScanner[819]: MailScanner E-Mail Virus Scanner
> > >version 4.25-14 starting...
> > >Dec 14 13:45:43 ns1 MailScanner[697]: RBL Check ORDB-RBL timed out and
>was
> > >killed, consecutive failure 1 of 7
> > >Dec 14 13:45:49 ns1 MailScanner[819]: Using locktype = flock
> > >Dec 14 13:45:53 ns1 MailScanner[838]: MailScanner E-Mail Virus Scanner
> > >version 4.25-14 starting...
> > >Dec 14 13:45:53 ns1 MailScanner[697]: Virus and Content Scanning:
>Starting
> > >Dec 14 13:45:55 ns1 MailScanner[697]: Uninfected: Delivered 4 messages
> > >Dec 14 13:46:00 ns1 MailScanner[838]: Using locktype = flock
> > >Dec 14 13:46:02 ns1 MailScanner[870]: MailScanner E-Mail Virus Scanner
> > >version 4.25-14 starting...
> > >Dec 14 13:46:08 ns1 MailScanner[870]: Using locktype = flock
> > >
> > >But still no header info in the e-mails. I think Mailscanner is looking
> > >somewhere where there are 4 old messges which it scans but are not
> > >delivered. Does this make any sense?
> > >
> > >The RBL check failing is I think due to our firewall which blocks entire
>IP
> > >blocks. I need to check what IP it uses and port to allow traffic out/in
> > >thru our firewall.
> > >
> > >Thanks for all the help!
> > >
> > >SW
> > >----- Original Message -----
> > >From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
> > >To: <MAILSCANNER at JISCMAIL.AC.UK>
> > >Sent: Sunday, December 14, 2003 1:31 PM
> > >Subject: Re: Mailscanner not scanning e-mails
> > >
> > >
> > >At 18:03 14/12/2003, you wrote:
> > > >root       693  0.0  0.0     0    0 ?        Z    03:26   0:00
> >[MailScanner
> > > ><defunct>]
> > > >root       809  0.0  0.0     0    0 ?        Z    03:26   0:00
> >[MailScanner
> > > ><defunct>]
> > > >root       813  0.0  0.0     0    0 ?        Z    03:26   0:00
> >[MailScanner
> > > ><defunct>]
> > > >root       821  0.0  0.0     0    0 ?        Z    03:26   0:00
> >[MailScanner
> > > ><defunct>]
> > >
> > >Take a look at MailScanner entries in your maillog. Looks like a
> > >configuration error. Best idea is to start from a default setup with no
> > >local tweaks at all, then slowly introduce the extras.
> > >--
> > >Julian Field
> > >www.MailScanner.info
> > >Professional Support Services at www.MailScanner.biz
> > >MailScanner thanks transtec Computers for their support
> > >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> >--
> >Julian Field
> >www.MailScanner.info
> >Professional Support Services at www.MailScanner.biz
> >MailScanner thanks transtec Computers for their support
> >PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
>__________________________________
>Do you Yahoo!?
>Free Pop-Up Blocker - Get it now
>http://companion.yahoo.com/

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654