More 4.50.15 woes on FreeBSD - Update

Mon Feb 20 09:52:58 GMT 2006

Mike

Jules is back from holidays/vacation/whateveryoucallit, so hopefully he'll
be able to help out with this.

I do have a small comment, that usually the 'run as user' and 'run as group'
need setting when using Exim as Exim usually runs as a non-root userid.

--
Martin Hepworth 
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of TCIS List Acct
> Sent: 15 February 2006 18:19
> To: MailScanner discussion
> Subject: Re: More 4.50.15 woes on FreeBSD - Update
> 
> 
> 
> Koopmann, Jan-Peter wrote:
> 
> > You have? Installed _everything_ with ports that is? All I can tell you
> > is that I had a very similar problem with 4.49 until I decided to
> > portupgrade all vital ports that my MailScanner port depends on, mainly
> > all p5- ports. And the problem vanished immediatly!
> >
> > So let me ask you again: Have you tried a clean install, made sure you
> > got rid of all manually installed perl modules etc. and setup everyting
> > with ports only?
> 
> JP,
> 
> I installed everything with ports this morning, including SpamAssassin:
> 
> Feb 15 07:55 p5-Archive-Zip-1.16
> Feb 15 07:55 p5-Compress-Zlib-1.41
> Feb 15 08:07 p5-Convert-BinHex-1.119
> Feb 15 08:07 p5-Convert-TNEF-0.17
> Feb 15 08:07 p5-DBD-SQLite-1.11_1
> Feb 15 08:07 p5-DBI-1.50
> Feb 15 07:54 p5-ExtUtils-MakeMaker-6.30_1
> Feb 15 07:55 p5-File-Temp-0.16_3
> Feb 15 07:54 p5-Getopt-Long-2.35
> Feb 15 08:13 p5-HTML-Parser-3.49_2
> Feb 15 08:08 p5-HTML-Tagset-3.10
> Feb 15 08:07 p5-IO-stringy-2.110
> Feb 15 08:07 p5-MIME-Base64-3.07
> Feb 15 08:07 p5-MIME-Tools-5.419,2
> Feb 15 08:13 p5-Mail-SpamAssassin-3.1.0_6
> Feb 15 08:07 p5-Mail-Tools-1.73
> Feb 15 08:09 p5-Net-CIDR-0.11
> Feb 15 08:13 p5-Net-DNS-0.55
> Feb 15 07:55 p5-PathTools-3.16
> Feb 15 07:55 p5-Scalar-List-Utils-1.18,1
> Feb 15 08:07 p5-Storable-2.15
> Feb 15 07:55 p5-Test-Harness-2.56
> Feb 15 07:55 p5-Test-Simple-0.62
> Feb 15 08:09 p5-Time-HiRes-1.87,1
> Feb 15 08:09 p5-TimeDate-1.16,1
> Feb 12 08:57 perl-5.8.7_2
> 
> It did run for a longer period of time before spiraling out of control,
> but the problem did re-occur.  It definitely happens soonest on the
> boxes that are more heavily loaded.
> 
> Here is my MailScanner.conf:
> 
> %org-name% = x
> %org-long-name% = x
> %web-site% = x
> %etc-dir% = /opt/MailScanner/etc
> %report-dir% = /opt/MailScanner/etc/reports/en
> %rules-dir% = /opt/MailScanner/etc/rules
> %mcp-dir% = /opt/MailScanner/etc/mcp
> Max Children = 5
> Run As User =
> Run As Group =
> Queue Scan Interval = 5
> Incoming Queue Dir = /var/spool/exim_incoming/input/*
> Outgoing Queue Dir = /var/spool/exim/input
> Incoming Work Dir = /var/spool/MailScanner/incoming
> Quarantine Dir = /var/spool/MailScanner/quarantine
> PID file = /opt/MailScanner/var/MailScanner.pid
> Restart Every = 14400
> MTA = exim
> Sendmail = /usr/local/sbin/exim -C /usr/local/etc/exim/configure_outgoing
> Sendmail2 = /usr/local/sbin/exim -C /usr/local/etc/exim/configure_outgoing
> Incoming Work User =
> Incoming Work Group =
> Incoming Work Permissions = 0600
> Quarantine User =
> Quarantine Group =
> Quarantine Permissions = 0600
> Max Unscanned Bytes Per Scan = 100000000
> Max Unsafe Bytes Per Scan = 50000000
> Max Unscanned Messages Per Scan = 30
> Max Unsafe Messages Per Scan = 30
> Max Normal Queue Size = 20
> Scan Messages = yes
> Reject Message = no
> Maximum Attachments Per Message = 200
> Expand TNEF = no
> Deliver Unparsable TNEF = no
> TNEF Expander = /opt/MailScanner/bin/tnef --maxsize=100000000
> TNEF Timeout = 120
> File Command =
> File Timeout = 0
> Unrar Command = /usr/bin/unrar
> Unrar Timeout = 0
> Find UU-Encoded Files = no
> Maximum Message Size = 0
> Maximum Attachment Size = -1
> Minimum Attachment Size = -1
> Maximum Archive Depth = 0
> Find Archives By Content = no
> Virus Scanning = yes
> Virus Scanners = mcafee f-prot
> Virus Scanner Timeout = 20
> Deliver Disinfected Files = no
> Silent Viruses = HTML-IFrame All-Viruses
> Still Deliver Silent Viruses = no
> Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar
> Block Encrypted Messages = no
> Block Unencrypted Messages = no
> Allow Password-Protected Archives = yes
> Allowed Sophos Error Messages =
> Sophos IDE Dir = /usr/local/Sophos/ide
> Sophos Lib Dir = /usr/local/Sophos/lib
> Monitors For Sophos Updates = /usr/local/Sophos/ide/*ides.zip
> Monitors for ClamAV Updates = /usr/local/share/clamav/*.cvd
> ClamAVmodule Maximum Recursion Level = 8
> ClamAVmodule Maximum Files = 1000
> ClamAVmodule Maximum Compression Ratio = 250
> Dangerous Content Scanning = yes
> Allow Partial Messages = no
> Allow External Message Bodies = no
> Find Phishing Fraud = no
> Also Find Numeric Phishing = no
> Highlight Phishing Fraud = yes
> Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
> Allow IFrame Tags = yes
> Allow Form Tags = yes
> Allow Script Tags = yes
> Allow WebBugs = disarm
> Allow Object Codebase Tags = disarm
> Convert Dangerous HTML To Text = no
> Convert HTML To Text = no
> Allow Filenames =
> Deny Filenames =
> Filename Rules =
> Allow Filetypes =
> Deny Filetypes =
> Filetype Rules =
> Quarantine Infections = no
> Quarantine Silent Viruses = no
> Quarantine Modified Body = no
> Quarantine Whole Message = no
> Quarantine Whole Messages As Queue Files = no
> Keep Spam And MCP Archive Clean = no
> Language Strings = %report-dir%/languages.conf
> Rejection Report = %report-dir%/rejection.report.txt
> Deleted Bad Content Message Report  =
> %report-dir%/deleted.content.message.txt
> Deleted Bad Filename Message Report =
> %report-dir%/deleted.filename.message.txt
> Deleted Virus Message Report        = %report-
> dir%/deleted.virus.message.txt
> Stored Bad Content Message Report  = %report-
> dir%/stored.content.message.txt
> Stored Bad Filename Message Report =
> %report-dir%/stored.filename.message.txt
> Stored Virus Message Report        = %report-dir%/stored.virus.message.txt
> Disinfected Report = %report-dir%/disinfected.report.txt
> Inline HTML Signature = %report-dir%/inline.sig.html
> Inline Text Signature = %report-dir%/inline.sig.txt
> Inline HTML Warning = %report-dir%/inline.warning.html
> Inline Text Warning = %report-dir%/inline.warning.txt
> Sender Content Report        = %report-dir%/sender.content.report.txt
> Sender Error Report        = %report-dir%/sender.error.report.txt
> Sender Bad Filename Report = %report-dir%/sender.filename.report.txt
> Sender Virus Report        = %report-dir%/sender.virus.report.txt
> Hide Incoming Work Dir = yes
> Include Scanner Name In Reports = no
> Mail Header = X-%org-name%-Virus-Scan:
> Spam Header = X-%org-name%-Spam-Report:
> Spam Score Header = X-Spam-Score:
> Add Envelope From Header = yes
> Add Envelope To Header = no
> Envelope From Header = X-%org-name%-Orig-From:
> Envelope To Header = X-%org-name%-Orig-To:
> Spam Score Character = +
> SpamScore Number Instead Of Stars = no
> Minimum Stars If On Spam List = 7
> Clean Header Value       = Found to be clean
> Infected Header Value    = Found to be infected
> Disinfected Header Value = Virus cleaned
> Information Header Value = Please contact the ISP for more information
> Detailed Spam Report = yes
> Include Scores In SpamAssassin Report = yes
> Always Include SpamAssassin Report = yes
> Multiple Headers = append
> Hostname = the %org-name% ($HOSTNAME) MailScanner
> Sign Messages Already Processed = no
> Sign Clean Messages = no
> Mark Infected Messages = yes
> Mark Unscanned Messages = yes
> Unscanned Header Value = Not scanned
> Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2:
> Deliver Cleaned Messages = yes
> Notify Senders = yes
> Notify Senders Of Viruses = no
> Notify Senders Of Blocked Filenames Or Filetypes = yes
> Notify Senders Of Other Blocked Content = yes
> Never Notify Senders Of Precedence = list bulk
> Scanned Subject Text = [scanned]
> Virus Modify Subject = no
> Virus Subject Text = [virus-found]
> Filename Modify Subject = yes
> Filename Subject Text = [bad-attachment]
> Content Modify Subject = yes
> Content Subject Text = [dangerous-content]
> Disarmed Modify Subject = no
> Disarmed Subject Text = [disarmed]
> Phishing Modify Subject = no
> Phishing Subject Text = [potential-fraud]
> Spam Modify Subject = yes
> Spam Subject Text = [may-be-spam]
> High Scoring Spam Modify Subject = yes
> High Scoring Spam Subject Text = [may-be-spam]
> Warning Is Attachment = yes
> Attachment Warning Filename = %org-name%-Attachment-Warning.txt
> Attachment Encoding Charset = ISO-8859-1
> Archive Mail =
> Send Notices = no
> Notices Include Full Headers = no
> Hide Incoming Work Dir in Notices = no
> Notice Signature = -- \nMailScanner\nEmail Virus
> Scanner\nwww.mailscanner.info
> Notices From = MailScanner
> Notices To = postmaster
> Local Postmaster = postmaster
> Spam List Definitions = %etc-dir%/spam.lists.conf
> Virus Scanner Definitions = %etc-dir%/virus.scanners.conf
> Spam Checks = yes
> Spam List = spamcop.net SBL+XBL SORBS-DNSBL
> Spam Domain List =
> Spam Lists To Be Spam = 1
> Spam Lists To Reach High Score = 3
> Spam List Timeout = 10
> Max Spam List Timeouts = 7
> Spam List Timeouts History = 10
> Is Definitely Not Spam = &ByDomainSpamWhitelist
> Is Definitely Spam = no
> Definite Spam Is High Scoring = no
> Ignore Spam Whitelist If Recipients Exceed = 20
> Use SpamAssassin = yes
> Max SpamAssassin Size = 30000
> Required SpamAssassin Score = 5
> High SpamAssassin Score = 15
> SpamAssassin Auto Whitelist = no
> SpamAssassin Timeout = 20
> Max SpamAssassin Timeouts = 20
> SpamAssassin Timeouts History = 30
> Check SpamAssassin If On Spam List = no
> Spam Score = yes
> Cache SpamAssassin Results = no
> SpamAssassin Cache Database File =
> /var/spool/MailScanner/incoming/SpamAssassin.cache.db
> Rebuild Bayes Every = 0
> Wait During Bayes Rebuild = no
> Use Custom Spam Scanner = no
> Max Custom Spam Scanner Size = 20000
> Custom Spam Scanner Timeout = 20
> Max Custom Spam Scanner Timeouts = 10
> Custom Spam Scanner Timeout History = 20
> Spam Actions = deliver
> High Scoring Spam Actions = deliver
> Non Spam Actions = deliver
> Sender Spam Report         = %report-dir%/sender.spam.report.txt
> Sender Spam List Report    = %report-dir%/sender.spam.rbl.report.txt
> Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt
> Inline Spam Warning = %report-dir%/inline.spam.warning.txt
> Recipient Spam Report = %report-dir%/recipient.spam.report.txt
> Enable Spam Bounce = %rules-dir%/bounce.rules
> Bounce Spam As Attachment = no
> Syslog Facility = mail
> Log Speed = no
> Log Spam = yes
> Log Non Spam = no
> Log Permitted Filenames = no
> Log Permitted Filetypes = no
> Log Silent Viruses = no
> Log Dangerous HTML Tags = no
> SpamAssassin User State Dir =
> SpamAssassin Install Prefix =
> SpamAssassin Site Rules Dir = /etc/mail/spamassassin
> SpamAssassin Local Rules Dir =
> SpamAssassin Default Rules Dir =
> MCP Checks = no
> First Check = mcp
> MCP Required SpamAssassin Score = 1
> MCP High SpamAssassin Score = 10
> MCP Error Score = 1
> MCP Header = X-%org-name%-MailScanner-MCPCheck:
> Non MCP Actions = deliver
> MCP Actions = deliver
> High Scoring MCP Actions = deliver
> Bounce MCP As Attachment = no
> MCP Modify Subject = yes
> MCP Subject Text = {MCP?}
> High Scoring MCP Modify Subject = yes
> High Scoring MCP Subject Text = {MCP?}
> Is Definitely MCP = no
> Is Definitely Not MCP = no
> Definite MCP Is High Scoring = no
> Always Include MCP Report = no
> Detailed MCP Report = yes
> Include Scores In MCP Report = no
> Log MCP = no
> MCP Max SpamAssassin Timeouts = 20
> MCP Max SpamAssassin Size = 100000
> MCP SpamAssassin Timeout = 10
> MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf
> MCP SpamAssassin User State Dir =
> MCP SpamAssassin Local Rules Dir = %mcp-dir%
> MCP SpamAssassin Default Rules Dir = %mcp-dir%
> MCP SpamAssassin Install Prefix = %mcp-dir%
> Recipient MCP Report = %report-dir%/recipient.mcp.report.txt
> Sender MCP Report = %report-dir%/sender.mcp.report.txt
> Use Default Rules With Multiple Recipients = no
> Spam Score Number Format = %d
> MailScanner Version Number = 4.50.15
> SpamAssassin Cache Timings = 1800,300,10800,172800,600
> Debug = no
> Debug SpamAssassin = no
> Run In Foreground = no
> Always Looked Up Last = no
> Always Looked Up Last After Batch = no
> Deliver In Background = yes
> Delivery Method = batch
> Split Exim Spool = yes
> Lockfile Dir = /tmp
> Custom Functions Dir = /opt/MailScanner/lib/MailScanner/CustomFunctions
> Lock Type =
> Minimum Code Status = supported
> 
> --
> 
> -----------------------------------------
> Mike Bacher / listacct at tulsaconnect.com
> TCIS - TulsaConnect Internet Services
> http://www.tulsaconnect.com
> -----------------------------------------
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************