upgraded mailscanner, no more quarantine

[Blaze King]

Ok I feel stupid.

MailScanner's quarantine was working just fine... I thought it wasn't
because nothing new was in quarantine since the upgrade.  Well when just
I sent myself an unacceptable file (.bat), it was blocked and
quarantined.

I was testing the MailScanner with the "eicar" test virus, which it
picked up and sent a notice to the postmaster e-mail account.  While
watching the maillog, no quarantine was ever attempted, so there was no
error.

Maybe the better question would be how do I modify what is quarantined
and what isn't?  I'll be looking through MailScanner's config again...

Thanks!

Blaze King
Senior Network Administrator
Lake County Office of Education
(707) 262-4147
-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
Martin.Hepworth
Sent: Friday, March 23, 2007 2:26 AM
To: MailScanner discussion
Subject: RE: upgraded mailscanner, no more quarantine


Blaze

Where's the old stuff then???? Odd

Make sure /var/spool/MailScanner/quarantine isn't a sym link to
somewhere else.

make sure the user you're running as (eg postfix or mailnull) can write
to that dir. Also make I'd say the perms should be 640 at minimum,
otherwise the apache group won't be able to read the files/dirs!

You can run in debug mode and see what happens...

su - <mailscanner user> -c "<path-to>/MailScanner -debug"

and see if it's comlaining about anything on the quarantine..

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Blaze King
> Sent: 22 March 2007 19:08
> To: mailscanner at lists.mailscanner.info
> Subject: upgraded mailscanner, no more quarantine
>
> Hey I'm a long time mailscanner user, but this is my first post to the
> list.  I recently upgraded to 4.58.9-1 on my rhel3 server.  Since
then,
> nothing ends up in quarantine.  Here's what I know...
>
>
>
> (/etc/MailScanner/MailScanner.conf)
>
> Quarantine Dir = /var/spool/MailScanner/quarantine
>
> Quarantine User = root
>
> Quarantine Group = apache  (I'm using mailwatch)
>
> Quarantine Permissions = 0600
>
> Quarantine Infections = yes
>
> Quarantine Whole Message = yes
>
> Quarantine Whole Messages As Queue Files = no
>
>
>
> [root at mail MailScanner]# ll /var/spool/MailScanner/quarantine
>
> total 0
>
>
>
> Any suggestions?  Thanks!
>
>
>
> Blaze King
>
> Senior Network Administrator
>
> Lake County Office of Education
>
> (707) 262-4147
>
>





**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.

Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.

Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 

Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!