From MailScanner at ecs.soton.ac.uk Thu Nov 1 09:29:10 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 1 09:29:29 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released Message-ID: <47299C66.8010901@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Morning all! I have just released the latest stable version of MailScanner, version 4.65. The main new feature this month is support for F-Secure 5.5, and improvements to the upgrade process. Download it as usual from www.mailscanner.info. The full Change Log is quite short this month: * New Features and Improvements * 1 Added support for F-Secure version 5.5. In virus.scanners.conf, set the path to "/opt/f-secure/fssp". 2 Added log output when bad watermark causes raise in spam score. 2 RedHat RPM-based install.sh no longer forces installation of anything on RedHat 5, CentOS 5 or hopefully some clones thereof. No change on Fedora. 2 Improvement to upgrade_MailScanner_conf and upgrade_languages_conf so that if either is run when there is no .rpmnew file (and hence you don't need to run it) then no harm will be done, the .conf will be copied to the .new file. 3 Improved install.sh support for Mandriva which has /usr/src/rpm not .../RPM. 3 Changed syslog output of virus infections so scanner names are all 1 word. * Fixes * 2 Fixed bug with "notify" action in "SpamAssassin Rule Actions" setting. 2 Fixed RBL check return address for anti-spam.org.cn's weird blacklist. 2 Fixed "MailScanner --value=..." (for testing rulesets), when MTA is not sendmail. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKZxmEfZZRxQVtlQRAqC5AKCfvxDau9KimabJZZaJpYAPrjPovQCff5xD mt+ma6cA/U8doK0ICKw2iRE= =wGc/ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From atobisch at trustinternational.com Thu Nov 1 09:55:08 2007 From: atobisch at trustinternational.com (Alexander Tobisch) Date: Thu Nov 1 09:56:07 2007 Subject: automated response Message-ID: <10711011055.AA39970@trustinternational.com> Thank you for your eMail. I am currently out of the office with no access to my eMails. Your mail will be forwarded to Michael G?rlich (mgoerlich@trustinternational.com). Best regards, Alexander Tobisch System Administrator TRUST International by Travelport TRUST International Hotel Reservation Services GmbH Lyoner Strasse 40, 60528 Frankfurt, Germany Telephone: +49 (069) 664 089 1757 Fax: +49 (069) 665 664 089 1760 e: atobisch@trustinternational.com www.trustinternational.com & www.travelport.com Sitz/Place of business: Frankfurt am Main, Germany Registerinformationen/Registry information: AG Frankfurt am Main HRB 30120 Gesch?ftsf?hrer/Managing Directors: Bryan Conway, Richard Wiegmann, Marius Nasta Please see our disclaimer via link http://www.trustinternational.com/home/disclaimer.html From shuttlebox at gmail.com Thu Nov 1 15:36:01 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Thu Nov 1 15:36:03 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <47299C66.8010901@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> Message-ID: <625385e30711010836l2ac22f7dqc2aec1d47710c470@mail.gmail.com> On 11/1/07, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Morning all! > > I have just released the latest stable version of MailScanner, version > 4.65. I have submitted a Solaris package to Blastwave but until it spreads to the mirrors you can get it from: http://www.blastwave.org/testing/mailscanner-4.65.3.1-SunOS5.8-all-CSW.pkg.gz If you're doing a new install you should probably wait so pkg-get can handle all the dependencies. -- /peter From gdoris at rogers.com Thu Nov 1 18:41:30 2007 From: gdoris at rogers.com (Gerry Doris) Date: Thu Nov 1 18:42:22 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <47299C66.8010901@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> Message-ID: <472A1DDA.2050709@rogers.com> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Morning all! > > I have just released the latest stable version of MailScanner, version > 4.65. > The main new feature this month is support for F-Secure 5.5, and > improvements to the upgrade process. > > Download it as usual from www.mailscanner.info. > Version 4.65 isn't shown on the website under stable versions. From MailScanner at ecs.soton.ac.uk Thu Nov 1 18:55:06 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 1 18:55:23 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A1DDA.2050709@rogers.com> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> Message-ID: <472A210A.3040307@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yes it is. Where do you think it isn't? It's certainly on index.html and downloads.html. Gerry Doris wrote: > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> Morning all! >> >> I have just released the latest stable version of MailScanner, >> version 4.65. The main new feature this month is support for >> F-Secure 5.5, and improvements to the upgrade process. >> >> Download it as usual from www.mailscanner.info. >> > Version 4.65 isn't shown on the website under stable versions. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKiEKEfZZRxQVtlQRAoeOAJ9ZyarlDR7PUQvyWoTim5n+woKEyACfecIy SXdXO9YiDV/eUgsdZykuqyw= =QMf9 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From gdoris at rogers.com Thu Nov 1 19:09:47 2007 From: gdoris at rogers.com (Gerry Doris) Date: Thu Nov 1 19:11:20 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A210A.3040307@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> Message-ID: <472A247B.3020807@rogers.com> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Yes it is. Where do you think it isn't? It's certainly on index.html > and downloads.html. > > Hmmm, it just refreshed the page and it appeared. I had just gone to the page a few minutes ago and it wasn't there. In any case, I've downloaded it and am installing it now. Thanks! From daneil.goodman at gmail.com Thu Nov 1 20:48:28 2007 From: daneil.goodman at gmail.com (Daneil Goodman) Date: Thu Nov 1 20:48:31 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A247B.3020807@rogers.com> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> Message-ID: <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> I can install this version on redhat, but I can not install it on Fedora 6. It says ---- You must have the following RPM packages installed before you try and do anything else: binutils glibc-devel gcc make You are missing at least 1 of these. Please install them all ---- But I have installed all of them. glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 That is weird! Can you please tell me which package I really missed? Thanks, Goodman On 11/1/07, Gerry Doris wrote: > > Julian Field wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Yes it is. Where do you think it isn't? It's certainly on index.html > > and downloads.html. > > > > > Hmmm, it just refreshed the page and it appeared. I had just gone to > the page a few minutes ago and it wasn't there. In any case, I've > downloaded it and am installing it now. Thanks! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071101/2517b01f/attachment.html From MailScanner at ecs.soton.ac.uk Thu Nov 1 21:04:46 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 1 21:05:01 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> Message-ID: <472A3F6E.1010705@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It does this command: rpm -q binutils glibc-devel gcc make and if that command fails then it complains. I haven't altered this code in years. Do this rpm -q binutils glibc-devel gcc make echo $? and tell me what it prints. Daneil Goodman wrote: > I can install this version on redhat, but I can not install it on > Fedora 6. It says > > ---- You must have the following RPM packages installed before you > try and do anything else: binutils glibc-devel gcc make You are > missing at least 1 of these. Please install them all ---- > > But I have installed all of them. > > glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 > glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 > gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 > automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 > imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 > binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > > That is weird! Can you please tell me which package I really > missed? > > Thanks, > > Goodman > > > On 11/1/07, *Gerry Doris* > wrote: > > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> Yes it is. Where do you think it isn't? It's certainly on > index.html >> and downloads.html. >> >> > Hmmm, it just refreshed the page and it appeared. I had just gone > to the page a few minutes ago and it wasn't there. In any case, > I've downloaded it and am installing it now. Thanks! -- > MailScanner mailing list mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKj9uEfZZRxQVtlQRAkiXAJ4iMChLCWVQL/EYCkTAIfxjSPK2ZwCfaV9K NNzBFot1GgrZFh5N4xWrMqU= =y88h -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From Denis.Beauchemin at USherbrooke.ca Thu Nov 1 21:18:43 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Thu Nov 1 21:19:11 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: Message-ID: <472A42B3.7050706@USherbrooke.ca> Scott Silva a ?crit : > I'm getting a lot of collect: premature EOM: unexpected close > errors from certain servers, and a google gives me much conflicting info. > > Running CentOS 4 and current stable MailScanner. > > I have tried decreasing the MTU on the external interface, and only > succeeded in stopping all traffic. Tried disabling window scaling, and > that also had no effect. Could the default be to set no-fragment on > packets from CentOS 4? > Scott, I modified these TCP settings in RHEL5 to correct this situation: (from /etc/rc.local): /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" For some unknown reason it wouldn't work in /etc/sysctl.conf... Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From ssilva at sgvwater.com Thu Nov 1 22:50:12 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 1 22:50:26 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <472A42B3.7050706@USherbrooke.ca> References: <472A42B3.7050706@USherbrooke.ca> Message-ID: on 11/1/2007 2:18 PM Denis Beauchemin spake the following: > Scott Silva a ?crit : >> I'm getting a lot of collect: premature EOM: unexpected close >> errors from certain servers, and a google gives me much conflicting info. >> >> Running CentOS 4 and current stable MailScanner. >> >> I have tried decreasing the MTU on the external interface, and only >> succeeded in stopping all traffic. Tried disabling window scaling, and >> that also had no effect. Could the default be to set no-fragment on >> packets from CentOS 4? >> > Scott, > > I modified these TCP settings in RHEL5 to correct this situation: > (from /etc/rc.local): > /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" > /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" > > For some unknown reason it wouldn't work in /etc/sysctl.conf... > > Denis > Did you put it in /etc/sysctl.conf without the quotes? It seems to hold with a sysctl -p. At least it doesn't barf. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From xianwu.xu at gmail.com Fri Nov 2 13:23:12 2007 From: xianwu.xu at gmail.com (Xianwu Xu) Date: Fri Nov 2 13:23:16 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A3F6E.1010705@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> Message-ID: Here is output of rpm -q binutils glibc-devel gcc make --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 gcc-4.1.2-12 make-3.81-6.fc7 echo $? 0 --------------- Thanks, Goodman On Nov 1, 2007 4:04 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > It does this command: > > rpm -q binutils glibc-devel gcc make > > and if that command fails then it complains. > > I haven't altered this code in years. > > Do this > rpm -q binutils glibc-devel gcc make > echo $? > and tell me what it prints. > > Daneil Goodman wrote: > > I can install this version on redhat, but I can not install it on > > Fedora 6. It says > > > > ---- You must have the following RPM packages installed before you > > try and do anything else: binutils glibc-devel gcc make You are > > missing at least 1 of these. Please install them all ---- > > > > But I have installed all of them. > > > > glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 > > glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 > > gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 > > automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 > > imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 > > binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > > > > That is weird! Can you please tell me which package I really > > missed? > > > > Thanks, > > > > Goodman > > > > > > On 11/1/07, *Gerry Doris* > > wrote: > > > > Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >> > >> Yes it is. Where do you think it isn't? It's certainly on > > index.html > >> and downloads.html. > >> > >> > > Hmmm, it just refreshed the page and it appeared. I had just gone > > to the page a few minutes ago and it wasn't there. In any case, > > I've downloaded it and am installing it now. Thanks! -- > > MailScanner mailing list mailscanner@lists.mailscanner.info > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFHKj9uEfZZRxQVtlQRAkiXAJ4iMChLCWVQL/EYCkTAIfxjSPK2ZwCfaV9K > NNzBFot1GgrZFh5N4xWrMqU= > =y88h > -----END PGP SIGNATURE----- > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > For all your IT requirements visit www.transtec.co.uk > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071102/0d1ae08c/attachment.html From MailScanner at ecs.soton.ac.uk Fri Nov 2 14:30:12 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri Nov 2 14:30:28 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> Message-ID: <472B3474.9050409@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Has anyone else installed this successfully on Fedora Core 6? For now, all I can suggest you do is remove the "exit 1" around line 291 of install.sh. Xianwu Xu wrote: > Here is output of rpm -q binutils glibc-devel gcc make > --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 > gcc-4.1.2-12 make-3.81-6.fc7 > > echo $? 0 --------------- > > Thanks, > > Goodman > > On Nov 1, 2007 4:04 PM, Julian Field > wrote: > > It does this command: > > rpm -q binutils glibc-devel gcc make > > and if that command fails then it complains. > > I haven't altered this code in years. > > Do this rpm -q binutils glibc-devel gcc make echo $? and tell me > what it prints. > > Daneil Goodman wrote: >> I can install this version on redhat, but I can not install it on >> Fedora 6. It says > >> ---- You must have the following RPM packages installed before >> you try and do anything else: binutils glibc-devel gcc make You >> are missing at least 1 of these. Please install them all ---- > >> But I have installed all of them. > >> glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 >> glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 >> gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 >> automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 >> imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 >> binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > >> That is weird! Can you please tell me which package I really >> missed? > >> Thanks, > >> Goodman > > >> On 11/1/07, *Gerry Doris* >> >> wrote: > >> Julian Field wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >>> >>> Yes it is. Where do you think it isn't? It's certainly on >> index.html >>> and downloads.html. >>> >>> >> Hmmm, it just refreshed the page and it appeared. I had just > gone >> to the page a few minutes ago and it wasn't there. In any case, >> I've downloaded it and am installing it now. Thanks! -- >> MailScanner mailing list mailscanner@lists.mailscanner.info > >> > >> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >> Before posting, read http://wiki.mailscanner.info/posting > >> Support MailScanner development - buy the book off the website! > > > > Jules > - -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk - -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKzR0EfZZRxQVtlQRAqNhAJ0babkc8qlMIvRPKxNXeq08GM0kzgCgso+e IZQnhVPA5xN9XWJPueVVHcU= =zI4t -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From ka at pacific.net Fri Nov 2 15:40:31 2007 From: ka at pacific.net (Ken A) Date: Fri Nov 2 15:40:36 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472B3474.9050409@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> <472B3474.9050409@ecs.soton.ac.uk> Message-ID: <472B44EF.8020500@pacific.net> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Has anyone else installed this successfully on Fedora Core 6? > For now, all I can suggest you do is remove the "exit 1" around line > 291 of install.sh. > Installed fine here on FC6. I also noticed that there are references below to make-3.81-6.fc7, which would not be present in an FC6 install, so something else might be going on here? Ken > Xianwu Xu wrote: >> Here is output of rpm -q binutils glibc-devel gcc make >> --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 >> gcc-4.1.2-12 make-3.81-6.fc7 >> >> echo $? 0 --------------- >> >> Thanks, >> >> Goodman >> >> On Nov 1, 2007 4:04 PM, Julian Field > > wrote: >> >> It does this command: >> >> rpm -q binutils glibc-devel gcc make >> >> and if that command fails then it complains. >> >> I haven't altered this code in years. >> >> Do this rpm -q binutils glibc-devel gcc make echo $? and tell me >> what it prints. >> >> Daneil Goodman wrote: >>> I can install this version on redhat, but I can not install it on >>> Fedora 6. It says >>> ---- You must have the following RPM packages installed before >>> you try and do anything else: binutils glibc-devel gcc make You >>> are missing at least 1 of these. Please install them all ---- >>> But I have installed all of them. >>> glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 >>> glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 >>> gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 >>> automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 >>> imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 >>> binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 >>> That is weird! Can you please tell me which package I really >>> missed? >>> Thanks, >>> Goodman >> >>> On 11/1/07, *Gerry Doris* > >>> >> wrote: >>> Julian Field wrote: >>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >>>> >>>> Yes it is. Where do you think it isn't? It's certainly on >>> index.html >>>> and downloads.html. >>>> >>>> >>> Hmmm, it just refreshed the page and it appeared. I had just >> gone >>> to the page a few minutes ago and it wasn't there. In any case, >>> I've downloaded it and am installing it now. Thanks! -- >>> MailScanner mailing list mailscanner@lists.mailscanner.info >> >>> > > >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> Before posting, read http://wiki.mailscanner.info/posting >>> Support MailScanner development - buy the book off the website! >> >> >> Jules >> > > - -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > For all your IT requirements visit www.transtec.co.uk > > > - -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > Jules > > - -- > Julian Field MBCS CITP > jkf@ecs.soton.ac.uk > Teaching Systems Manager > Electronics & Computer Science > University of Southampton > SO17 1BJ, UK > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > Need help customising MailScanner? > Contact me! > Need help fixing or optimising your systems? > Contact me! > Need help getting you started solving new requirements from your boss? > Contact me! > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFHKzR0EfZZRxQVtlQRAqNhAJ0babkc8qlMIvRPKxNXeq08GM0kzgCgso+e > IZQnhVPA5xN9XWJPueVVHcU= > =zI4t > -----END PGP SIGNATURE----- > > -- Ken Anderson Pacific.Net From gdoris at rogers.com Fri Nov 2 17:22:29 2007 From: gdoris at rogers.com (Gerry Doris) Date: Fri Nov 2 17:23:28 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472B3474.9050409@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> <472B3474.9050409@ecs.soton.ac.uk> Message-ID: <472B5CD5.8060901@rogers.com> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Has anyone else installed this successfully on Fedora Core 6? > For now, all I can suggest you do is remove the "exit 1" around line > 291 of install.sh. > > I installed the latest version without problems on a Fedora 6 box yesterday. It's working fine. I even upgraded to version 6 of F-Prot and it worked fine. From xianwu.xu at gmail.com Fri Nov 2 18:23:49 2007 From: xianwu.xu at gmail.com (Xianwu Xu) Date: Fri Nov 2 18:24:01 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472B44EF.8020500@pacific.net> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> <472B3474.9050409@ecs.soton.ac.uk> <472B44EF.8020500@pacific.net> Message-ID: Sorry, my box is Fedora Core 7. On Nov 2, 2007 10:40 AM, Ken A wrote: > Julian Field wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Has anyone else installed this successfully on Fedora Core 6? > > For now, all I can suggest you do is remove the "exit 1" around line > > 291 of install.sh. > > > > Installed fine here on FC6. > > I also noticed that there are references below to make-3.81-6.fc7, which > would not be present in an FC6 install, so something else might be going > on here? > > Ken > > > > Xianwu Xu wrote: > >> Here is output of rpm -q binutils glibc-devel gcc make > >> --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 > >> gcc-4.1.2-12 make-3.81-6.fc7 > >> > >> echo $? 0 --------------- > >> > >> Thanks, > >> > >> Goodman > >> > >> On Nov 1, 2007 4:04 PM, Julian Field < MailScanner@ecs.soton.ac.uk > >> > wrote: > >> > >> It does this command: > >> > >> rpm -q binutils glibc-devel gcc make > >> > >> and if that command fails then it complains. > >> > >> I haven't altered this code in years. > >> > >> Do this rpm -q binutils glibc-devel gcc make echo $? and tell me > >> what it prints. > >> > >> Daneil Goodman wrote: > >>> I can install this version on redhat, but I can not install it on > >>> Fedora 6. It says > >>> ---- You must have the following RPM packages installed before > >>> you try and do anything else: binutils glibc-devel gcc make You > >>> are missing at least 1 of these. Please install them all ---- > >>> But I have installed all of them. > >>> glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 > >>> glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 > >>> gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 > >>> automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 > >>> imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 > >>> binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > >>> That is weird! Can you please tell me which package I really > >>> missed? > >>> Thanks, > >>> Goodman > >> > >>> On 11/1/07, *Gerry Doris* >> > >>> >> wrote: > >>> Julian Field wrote: > >>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >>>> > >>>> Yes it is. Where do you think it isn't? It's certainly on > >>> index.html > >>>> and downloads.html. > >>>> > >>>> > >>> Hmmm, it just refreshed the page and it appeared. I had just > >> gone > >>> to the page a few minutes ago and it wasn't there. In any case, > >>> I've downloaded it and am installing it now. Thanks! -- > >>> MailScanner mailing list mailscanner@lists.mailscanner.info > >> > >>> >> > > >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >>> Before posting, read http://wiki.mailscanner.info/posting > >>> Support MailScanner development - buy the book off the website! > >> > >> > >> Jules > >> > > > > - -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > For all your IT requirements visit www.transtec.co.uk > > > > > > - -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > Jules > > > > - -- > > Julian Field MBCS CITP > > jkf@ecs.soton.ac.uk > > Teaching Systems Manager > > Electronics & Computer Science > > University of Southampton > > SO17 1BJ, UK > > > > Jules > > > > - -- > > Julian Field MEng CITP > > www.MailScanner.info > > Buy the MailScanner book at www.MailScanner.info/store > > > > Need help customising MailScanner? > > Contact me! > > Need help fixing or optimising your systems? > > Contact me! > > Need help getting you started solving new requirements from your boss? > > Contact me! > > > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.4.7 (Darwin) > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > > > iD8DBQFHKzR0EfZZRxQVtlQRAqNhAJ0babkc8qlMIvRPKxNXeq08GM0kzgCgso+e > > IZQnhVPA5xN9XWJPueVVHcU= > > =zI4t > > -----END PGP SIGNATURE----- > > > > > > > -- > Ken Anderson > Pacific.Net > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071102/89466274/attachment.html From Denis.Beauchemin at USherbrooke.ca Fri Nov 2 18:52:57 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 2 18:53:42 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: <472A42B3.7050706@USherbrooke.ca> Message-ID: <472B7209.9030503@USherbrooke.ca> Scott Silva a ?crit : > on 11/1/2007 2:18 PM Denis Beauchemin spake the following: >> Scott Silva a ?crit : >>> I'm getting a lot of collect: premature EOM: unexpected close >>> errors from certain servers, and a google gives me much conflicting >>> info. >>> >>> Running CentOS 4 and current stable MailScanner. >>> >>> I have tried decreasing the MTU on the external interface, and only >>> succeeded in stopping all traffic. Tried disabling window scaling, >>> and that also had no effect. Could the default be to set no-fragment >>> on packets from CentOS 4? >>> >> Scott, >> >> I modified these TCP settings in RHEL5 to correct this situation: >> (from /etc/rc.local): >> /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" >> /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" >> >> For some unknown reason it wouldn't work in /etc/sysctl.conf... >> >> Denis >> > Did you put it in /etc/sysctl.conf without the quotes? > It seems to hold with a sysctl -p. At least it doesn't barf. > This is what I put in /etc/sysctl.conf : # Fix for tcp window scaling issue related to broken Internet routers net.ipv4.tcp_wmem="4096 16384 131072" net.ipv4.tcp_rmem="4096 87380 174760" So no, I didn't remove the quotes... does it matter? Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From steve.freegard at fsl.com Fri Nov 2 19:03:19 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 2 19:02:07 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <472B7209.9030503@USherbrooke.ca> References: <472A42B3.7050706@USherbrooke.ca> <472B7209.9030503@USherbrooke.ca> Message-ID: <472B7477.6070503@fsl.com> Denis Beauchemin wrote: >>> Scott, >>> >>> I modified these TCP settings in RHEL5 to correct this situation: >>> (from /etc/rc.local): >>> /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" >>> /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" >>> >>> For some unknown reason it wouldn't work in /etc/sysctl.conf... >>> >>> Denis >>> >> Did you put it in /etc/sysctl.conf without the quotes? >> It seems to hold with a sysctl -p. At least it doesn't barf. >> > This is what I put in /etc/sysctl.conf : > # Fix for tcp window scaling issue related to broken Internet routers > net.ipv4.tcp_wmem="4096 16384 131072" > net.ipv4.tcp_rmem="4096 87380 174760" > > So no, I didn't remove the quotes... does it matter? I don't put quotes around these entries when I make them - not sure if it makes a difference. Here is what we use for BarricadeMX systems which should work fine elsewhere as long as you have 1Gb RAM or more: # TCP Tuning # http://www-didc.lbl.gov/TCP-tuning/linux.html # Added by smf@fsl.com 2007-07-17 # --------------------------------------------- # increase TCP max buffer size net.core.rmem_max = 16777216 net.core.wmem_max = 16777216 # increase Linux autotuning TCP buffer limits # min, default, and max number of bytes to use net.ipv4.tcp_rmem = 4096 87380 16777216 net.ipv4.tcp_wmem = 4096 65536 16777216 # don't cache ssthresh from previous connection net.ipv4.tcp_no_metrics_save = 1 # increase SYN backlog from the 1024 default net.ipv4.tcp_max_syn_backlog = 8192 Kind regards, Steve. From Denis.Beauchemin at USherbrooke.ca Fri Nov 2 20:27:48 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 2 20:28:23 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <472B7477.6070503@fsl.com> References: <472A42B3.7050706@USherbrooke.ca> <472B7209.9030503@USherbrooke.ca> <472B7477.6070503@fsl.com> Message-ID: <472B8844.10500@USherbrooke.ca> Steve Freegard a ?crit : > Denis Beauchemin wrote: >>>> Scott, >>>> >>>> I modified these TCP settings in RHEL5 to correct this situation: >>>> (from /etc/rc.local): >>>> /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" >>>> /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" >>>> >>>> For some unknown reason it wouldn't work in /etc/sysctl.conf... >>>> >>>> Denis >>>> >>> Did you put it in /etc/sysctl.conf without the quotes? >>> It seems to hold with a sysctl -p. At least it doesn't barf. >>> >> This is what I put in /etc/sysctl.conf : >> # Fix for tcp window scaling issue related to broken Internet routers >> net.ipv4.tcp_wmem="4096 16384 131072" >> net.ipv4.tcp_rmem="4096 87380 174760" >> >> So no, I didn't remove the quotes... does it matter? > > I don't put quotes around these entries when I make them - not sure if > it makes a difference. > Thanks Steve, I tried it without the quotes and it worked! So no quotes in /etc/sysctl.conf!!! Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From micoots at yahoo.com Fri Nov 2 23:33:42 2007 From: micoots at yahoo.com (Michael Mansour) Date: Fri Nov 2 23:33:46 2007 Subject: X-Spam-Status header enhancements Message-ID: <845773.44896.qm@web33310.mail.mud.yahoo.com> Hi, I've recently started to use the option: FromOrTo: default deliver store-spam header "X-Spam-Status: Yes" in my spam.actions.rules file, but most recently noticed messages with headers of the form: X-Spam-Score: 3.0 (+++) X-Spam-Report: 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.7 INVALID_MSGID Message-Id is not valid, according to RFC 2822 X-Spam-Flag: YES (tagged as spam, score 3.0) sent by some mail systems. Can MailScanner extend on the "X-Spam-Status: Yes" facility looking like the X-Spam-Flag above (sent by whatever scanning system they have)? What do others think? Michael. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071103/832065cf/attachment.html From shuttlebox at gmail.com Fri Nov 2 23:49:12 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 2 23:49:15 2007 Subject: X-Spam-Status header enhancements In-Reply-To: <845773.44896.qm@web33310.mail.mud.yahoo.com> References: <845773.44896.qm@web33310.mail.mud.yahoo.com> Message-ID: <625385e30711021649p64cb355cs12897c4cf2676d3@mail.gmail.com> On 11/3/07, Michael Mansour wrote: > Hi, > > I've recently started to use the option: > > FromOrTo: default deliver store-spam header > "X-Spam-Status: Yes" > > in my spam.actions.rules file, but most recently noticed messages with > headers of the form: > > X-Spam-Score: 3.0 (+++) > X-Spam-Report: 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in > bl.spamcop.net > [Blocked - see > ] > 1.7 INVALID_MSGID Message-Id is not valid, according to RFC 2822 > X-Spam-Flag: YES (tagged as spam, score 3.0) > > sent by some mail systems. > > Can MailScanner extend on the "X-Spam-Status: Yes" facility looking like the > X-Spam-Flag above (sent by whatever scanning system they have)? > > What do others think? For filtering it adds nothing and for the few who looks at the headers it doesn't matter what header the info is in. If you log spam you have a header which contains all that and the rule hits as well. -- /peter From micoots at yahoo.com Sat Nov 3 21:01:30 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sat Nov 3 21:01:33 2007 Subject: Increase score for an RBL hit In-Reply-To: <605764.10957.qm@web33305.mail.mud.yahoo.com> Message-ID: <265934.64793.qm@web33309.mail.mud.yahoo.com> Hi, Does anyone have an answer for my query below? Thanks. Michael. Michael Mansour wrote: Hi, Raymond Dijkxhoorn wrote: Hi! > I just started using the APEWS RBL and got some hits on it for IP > ranges from some well known Australian ISP's (which some of my friends > and family use). You are seriously -using- APEWS? Eeks. I would stronly advise not to even consider using that list. > Is there a way I can configure that a hit in an RBL increases the SA > score instead of blocking the email entirely? Just add it in SA , if you wanna use it. Forgive me for asking a possibly very simple question, but how do I add an RBL to SA? I've previously gone through: http://wiki.apache.org/spamassassin/DnsBlocklists and the Mail::SpamAssassin::Conf documentation and it isn't really covered well (or covered so it's simple to understand). I've gone through the: /usr/share/spamassassin/20_dnsbl_tests.cf file and also my local.cf. I'm thinking if I defined in my local.cf the following (for arguments sake I'll stick with APEWS): header RCVD_IN_APEWSL2 eval:check_rbl('apewsl2', 'l2.apews.org.') describe RCVD_IN_APEWSL2 APEWSL2 some description tflags RCVD_IN_APEWSL2 net score RCVD_IN_APEWSL2 2.0 ?? Thanks again. Michael. Bye, Raymond. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Sick of deleting your inbox? Yahoo!7 Mail has free unlimited storage. Get it now. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071104/7e125bbe/attachment.html From MailScanner at ecs.soton.ac.uk Sun Nov 4 19:37:23 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun Nov 4 19:37:36 2007 Subject: Missing anything? and dag.wieers.com Message-ID: <472E1F73.1070800@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Have I missed anything important on the list recently? My day job has been rather busy, and I have had to take some time out due to shingles (which fortunately is receding now), so I have missed some of the conversations. Is there anything important in the way of bug reports or feature requests that I have missed? Has anything happened about getting MailScanner onto dag.wieers.com? Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHLh9zEfZZRxQVtlQRAtESAJ9CaSL+8RhBKZk9YxsUv1zf+yK/NACg5L8b xXw9IKaKkSPRBNEkRv10N1E= =8eFU -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From arw at swaab.com.au Sun Nov 4 22:04:17 2007 From: arw at swaab.com.au (Andrew Weeks) Date: Sun Nov 4 22:03:54 2007 Subject: Storing attachments for longer Message-ID: Hi Apologies if this has been asked before, but I haven't been able to find an answer online. We block various attachment types by default, after a couple of weeks the message is still available through mailwatch but it seems the attachment is deleted. Occasionally someone still requests that an old attachment be unblocked and I"m wondering what's involved in keeping the attachments longer (eg 60 days). Many thanks Andrew Weeks IT Manager SWAAB Attorneys Level 1, 20 Hunter Street SYDNEY NSW 2000 GPO Box 35 SYDNEY NSW 2001 | DX 522 SYDNEY T +61 2 9233 5544 | F +61 2 9233 5400 | D +61 2 9777 8345 E arw@swaab.com.au | www.swaab.com.au Winner BRW-St George Best Australian Law Firm 2007+; Runner Up Australian Law Firm of the Year 2006**; Winner Australian Law Firm of the Year 2004*; Finalist Mazda ALB Australasian Law Awards 2007 +Revenue less than 20m *Firms with less than 25 lawyers **Firms with less than 50 lawyers -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071105/d74f0efd/attachment.html From raymond at prolocation.net Sun Nov 4 22:07:32 2007 From: raymond at prolocation.net (Raymond Dijkxhoorn) Date: Sun Nov 4 22:07:29 2007 Subject: Storing attachments for longer In-Reply-To: References: Message-ID: Hi! > We block various attachment types by default, after a couple of weeks > the message is still available through mailwatch but it seems the > attachment is deleted. Occasionally someone still requests that an old > attachment be unblocked and I"m wondering what's involved in keeping the > attachments longer (eg 60 days). Check: cron.daily: clean.quarantine $disabled = 0; $quarantine_dir = '/var/spool/MailScanner/quarantine'; $days_to_keep = 90; Bye, Raymond. From itlist at gmail.com Mon Nov 5 06:14:20 2007 From: itlist at gmail.com (Cheng Bruce) Date: Mon Nov 5 06:14:23 2007 Subject: How to archive multiple mail address to one account Message-ID: Hi, Apologies if this has been asked before, I have tried to search via google, but can't find the right way. I use Centos 5.0 to be my OS and Mailscanner 4.61.7-2, Mailwatch 1.04 I would like to know how to archive some email address into another email address and archive all email address but exclude some specified email address such like Boss's email address. For example: in my ruleset : /etc/MailScanner/MailScanner.conf ... Archive Mail = %rules-dir%/archive.rules /etc/MailScanner/rules/archive.rules FromOrTo: /[\@\.]my\.com$/ yes forward sent@my.com When I create another rules in archive.rules, for ex: FromOrTo: a@1.my.com yes forward backup1@my.com FromOrTo: b@1.my.com yes forward backup1@my.com FromOrTo: c@1.my.com yes forward backup1@my.com FromOrTo: d@1.my.com yes forward backup1@my.com and reload MailScanner I found my server will be very busy and the usage of the SWAP partition will be raised to 100% and server stop response and crash. Therefore I remove them. I have never met this situation before( I used MailScanner 4.54 last year without any problem). Now, I will update into the latest version and try it again. And I tried to use like as following FromOrTo: a@1.my.com b@1.my.com c@1.my.com d@1.my.com yes forward backup1@my.com It will let "b, c, d and backup1" receive the "a" and so on. But I would like to know if there is any way can make the rule more flexible and easy to maintain. for ex: Set the group alias EX: sales = a@1.my.com b@1.my.com c@1.my.com FromOrTo: sales yes forward backup1@my.com I also would like to know how to archive all messages (fromorto) and exclude some special email address . Please advise me and thank you in advance. Best Regards, Bruce From Q.G.Campbell at newcastle.ac.uk Mon Nov 5 12:33:15 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Mon Nov 5 12:43:00 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Scott Silva >Sent: 29 October 2007 17:55 >To: mailscanner@lists.mailscanner.info >Subject: Sendmail and Unexpected EOM > >I'm getting a lot of collect: premature EOM: unexpected close >errors from certain servers, and a google gives me much conflicting >info. > >Running CentOS 4 and current stable MailScanner. > > I have tried decreasing the MTU on the external interface, and only >succeeded in stopping all traffic. Tried disabling window scaling, and >that also had no effect. Could the default be to set no-fragment on packets >from CentOS 4? >[snip] Scott What evidence do you have that it is your end rather than the sending site, or somewhere in between, that is at fault? Although a 'traceroute' does not always work (because ICMP is disabled at gateways) it may indicate some large delay on the route between the sender and you. I also see the 'premature EOM' messages here and have assumed them to be a problem for the sender, not us. Where they occur after we have returned 'REJECT' status for all recipients after a DNSBL lookup, I assume that because the sender is a spammer they do not bother to close down the SMTP connection with a RESET or QUIT and simply move on to start a new SMTP connection with another target. Quentin From simon at saq.co.uk Mon Nov 5 15:03:08 2007 From: simon at saq.co.uk (Simon Jones) Date: Mon Nov 5 15:14:24 2007 Subject: smtp vrfy Message-ID: Hi, I'm trying to get my mailscanner box to check with the destination server that the recipient address is valid using smtp vrfy. I have implemented this in main.cf and it works great BUT it works for ALL addresses on the destination server, i.e. I get 550 5.1.1 : Recipient address rejected: undeliverable addres s: host xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx] said: 501 unacceptable mail address (in rep ly to MAIL FROM command) when telnetting to the box on 25, however if I telnet to the destination server and do the same I get: vrfy valid@domain.co.uk 250 ok its for vrfy rubbish@domain.co.uk 550 unknown user If the destination server is working correctly how comes the mailscanner box is telling me it's an invalid user? I suspect the mailscanner box is checking locally? In which case it will only allow to @domain.co.uk rather than user@domain.co.uk, but I'm not sure yet :) Thanks in advance Simon From ka at pacific.net Mon Nov 5 15:46:20 2007 From: ka at pacific.net (Ken A) Date: Mon Nov 5 15:46:25 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> Message-ID: <472F3ACC.2020908@pacific.net> Quentin Campbell wrote: >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of Scott Silva >> Sent: 29 October 2007 17:55 >> To: mailscanner@lists.mailscanner.info >> Subject: Sendmail and Unexpected EOM >> >> I'm getting a lot of collect: premature EOM: unexpected close >> errors from certain servers, and a google gives me much conflicting >> info. >> >> Running CentOS 4 and current stable MailScanner. >> >> I have tried decreasing the MTU on the external interface, and only >> succeeded in stopping all traffic. Tried disabling window scaling, and >> that also had no effect. Could the default be to set no-fragment on > packets >>from CentOS 4? >> [snip] > > Scott > > What evidence do you have that it is your end rather than the sending > site, or somewhere in between, that is at fault? > > Although a 'traceroute' does not always work (because ICMP is disabled > at gateways) it may indicate some large delay on the route between the > sender and you. > > I also see the 'premature EOM' messages here and have assumed them to be > a problem for the sender, not us. > > Where they occur after we have returned 'REJECT' status for all > recipients after a DNSBL lookup, I assume that because the sender is a > spammer they do not bother to close down the SMTP connection with a > RESET or QUIT and simply move on to start a new SMTP connection with > another target. > > Quentin Recently, I saw this happening to mail from one of our hosting webservers. The only indication in the mail log on the mailscanner box was the 'EOM' message, and the only indication in the maillog on the hosting server was deferred, stat='broken pipe' and some nasty TLS errors. I discovered when running 'sendmail -v -q' on the hosting box that the email was being blocked by milter-link, which does rhsdnsbl lookups on links in the email, but nameservers were timing out trying to lookup hostnames in form submissions containing hundreds of spam urls, many of which were lame delegations, or broken in other ways. I'd post some, but they wouldn't get very far. :-) It can be hard to track these down! Ken -- Ken Anderson Pacific.Net From ssilva at sgvwater.com Mon Nov 5 15:52:30 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 5 15:52:40 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> Message-ID: on 11/5/2007 4:33 AM Quentin Campbell spake the following: >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of Scott Silva >> Sent: 29 October 2007 17:55 >> To: mailscanner@lists.mailscanner.info >> Subject: Sendmail and Unexpected EOM >> >> I'm getting a lot of collect: premature EOM: unexpected close >> errors from certain servers, and a google gives me much conflicting >> info. >> >> Running CentOS 4 and current stable MailScanner. >> >> I have tried decreasing the MTU on the external interface, and only >> succeeded in stopping all traffic. Tried disabling window scaling, and >> that also had no effect. Could the default be to set no-fragment on > packets >>from CentOS 4? >> [snip] > > Scott > > What evidence do you have that it is your end rather than the sending > site, or somewhere in between, that is at fault? > > Although a 'traceroute' does not always work (because ICMP is disabled > at gateways) it may indicate some large delay on the route between the > sender and you. > > I also see the 'premature EOM' messages here and have assumed them to be > a problem for the sender, not us. > > Where they occur after we have returned 'REJECT' status for all > recipients after a DNSBL lookup, I assume that because the sender is a > spammer they do not bother to close down the SMTP connection with a > RESET or QUIT and simply move on to start a new SMTP connection with > another target. > > Quentin I know that it isn't my end causing the problem, but the changes to linux and the receive window in the tcp stack has added to the errors. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From steve.freegard at fsl.com Mon Nov 5 16:31:48 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Mon Nov 5 16:30:22 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> Message-ID: <472F4574.5040204@fsl.com> Scott Silva wrote: >> Although a 'traceroute' does not always work (because ICMP is disabled >> at gateways) it may indicate some large delay on the route between the >> sender and you. > I know that it isn't my end causing the problem, but the changes to > linux and the receive window in the tcp stack has added to the errors. I've seen numerous 'broken pipe', 'unexpected EOF' and numerous timeout errors in the past caused by sites that implement over zealous ICMP filtering which causes connectivity issues due to packet fragmentation. See http://www.znep.com/~marcs/mtu/ for further info. Cheers, Steve. From rpoe at plattesheriff.org Mon Nov 5 17:29:10 2007 From: rpoe at plattesheriff.org (Rob Poe) Date: Mon Nov 5 17:29:41 2007 Subject: Need help -- script (someone had this!) In-Reply-To: <1964AAFBC212F742958F9275BF63DBB05B4328@winchester.andrewscompanies.com> References: <4721325E020000A200007393@platteco-2.plattesheriff.org> <1964AAFBC212F742958F9275BF63DBB05B4328@winchester.andrewscompanies.com> Message-ID: <472EFE81.65ED.00A2.0@plattesheriff.org> Yes >>> "Steven Andrews" 10/26/2007 6:41 AM >>> Are you talking about one that builds a box from base OS to working ms/mailwatch? -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Rob Poe Sent: Friday, October 26, 2007 1:19 AM To: mailscanner@lists.mailscanner.info Subject: Need help -- script (someone had this!) Someone had made an install script for Linux that installed a lot of things automagically on a linux box .. i must have misplaced this .. and I'd like to find it again.. thanks! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From glenn.steen at gmail.com Mon Nov 5 19:25:47 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 5 19:25:56 2007 Subject: smtp vrfy In-Reply-To: References: Message-ID: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> On 05/11/2007, Simon Jones wrote: > Hi, I'm trying to get my mailscanner box to check with the destination > server that the recipient address is valid using smtp vrfy. > > I have implemented this in main.cf and it works great BUT it works for > ALL addresses on the destination server, i.e. I get > > 550 5.1.1 : Recipient address rejected: > undeliverable addres > s: host xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx] said: 501 unacceptable mail > address (in rep > ly to MAIL FROM command) > > when telnetting to the box on 25, however if I telnet to the destination > server and do the same I get: > > vrfy valid@domain.co.uk > 250 ok its for > vrfy rubbish@domain.co.uk > 550 unknown user > > If the destination server is working correctly how comes the mailscanner > box is telling me it's an invalid user? > > I suspect the mailscanner box is checking locally? In which case it will > only allow to @domain.co.uk rather than user@domain.co.uk, but I'm not > sure yet :) Hi Simon What you want to do is either to follow the instructions for (recipient) verification as specified here: http://www.postfix.org/ADDRESS_VERIFICATION_README.html ... or use relay_recipient_maps as described in the MailScanner wiki. > Thanks in advance You're wellcome;-) > Simon Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From jbuda at noticiasargentinas.com Mon Nov 5 19:36:36 2007 From: jbuda at noticiasargentinas.com (Jose Julian Buda) Date: Mon Nov 5 19:36:20 2007 Subject: Input/Output Error Message-ID: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> I have a debian etch server just installed : I have postfix+mailscanner+clamav When i send an email just to test from console i saw on log file : Nov 5 13:34:22 proxmails MailScanner[27664]: New Batch: Scanning 1 messages, 669 bytes Nov 5 13:34:33 proxmails MailScanner[27664]: SpamAssassin cache hit for message C151116A9.059B3 Nov 5 13:34:33 proxmails MailScanner[27664]: Virus and Content Scanning: Starting Nov 5 13:34:33 proxmails MailScanner[27664]: ERROR: Input/Output error Nov 5 13:34:33 proxmails MailScanner[27664]: Requeue: C151116A9.059B3 to E12A316DA Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: from=, size=477, nrcpt=1 (queue active) Nov 5 13:34:33 proxmails MailScanner[27664]: Uninfected: Delivered 1 messages Nov 5 13:34:33 proxmails postfix/local[27685]: E12A316DA: to=, orig_to=, relay=local, delay=40, delays=40/0/0/0.04, dsn=2.0.0, status=sent (delivered to maildir) Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: removed What is the "Input/Output error" ? The mail have the eicar test file atached with uuencode , the file was not catch and the mail pass trought the server , and mark the mail as "cleaned". Thank you in advance Julian -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071105/4070d95f/attachment.html From sailer at bnl.gov Mon Nov 5 19:49:40 2007 From: sailer at bnl.gov (Tim Sailer) Date: Mon Nov 5 19:50:00 2007 Subject: Input/Output Error In-Reply-To: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> Message-ID: <20071105194940.GD1142@bnl.gov> On Mon, Nov 05, 2007 at 04:36:36PM -0300, Jose Julian Buda wrote: > What is the "Input/Output error" ? > The mail have the eicar test file atached with uuencode , the file was not catch and the mail pass trought the server , and mark the mail > as "cleaned". That's usually when something can't be read or written, usually due to either no disk space, or a failing disk drive. Tim -- Tim Sailer DoE Intelligence and Counterintelligence - Cyber Division Northeast Regional Counterintelligence Office Brookhaven National Laboratory (631) 344-3001 From jbuda at noticiasargentinas.com Mon Nov 5 20:02:23 2007 From: jbuda at noticiasargentinas.com (Jose Julian Buda) Date: Mon Nov 5 20:02:21 2007 Subject: Input/Output Error References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> <20071105194940.GD1142@bnl.gov> Message-ID: <030301c81fe6$c806ff20$6000a8c0@tecnianueva> But how is that posible? ,it is a new server with software raid 1 can it be a configuration issue? ----- Original Message ----- From: "Tim Sailer" To: "MailScanner discussion" Sent: Monday, November 05, 2007 4:49 PM Subject: Re: Input/Output Error > On Mon, Nov 05, 2007 at 04:36:36PM -0300, Jose Julian Buda wrote: >> What is the "Input/Output error" ? >> The mail have the eicar test file atached with uuencode , the file was >> not catch and the mail pass trought the server , and mark the mail >> as "cleaned". > > That's usually when something can't be read or written, usually due to > either > no disk space, or a failing disk drive. > > Tim > > -- > Tim Sailer > DoE Intelligence and Counterintelligence - Cyber Division > Northeast Regional Counterintelligence Office > Brookhaven National Laboratory (631) 344-3001 > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From glenn.steen at gmail.com Mon Nov 5 21:05:52 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 5 21:05:57 2007 Subject: Input/Output Error In-Reply-To: <030301c81fe6$c806ff20$6000a8c0@tecnianueva> References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> <20071105194940.GD1142@bnl.gov> <030301c81fe6$c806ff20$6000a8c0@tecnianueva> Message-ID: <223f97700711051305t536c4ffw9d9c6e246ca2ad95@mail.gmail.com> On 05/11/2007, Jose Julian Buda wrote: > But how is that posible? ,it is a new server with software raid 1 > > can it be a configuration issue? > As always with postfix, check, recheck, then check again ... that you have set all permissions on all files _and directories_ as well as ownership/group correctly... Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From paul at blacknight.ie Mon Nov 5 22:37:23 2007 From: paul at blacknight.ie (Paul Kelly :: Blacknight) Date: Mon Nov 5 22:36:59 2007 Subject: Input/Output Error In-Reply-To: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> Message-ID: <472F9B23.4050009@blacknight.ie> Jose Julian Buda wrote: > I have a debian etch server just installed : > > I have postfix+mailscanner+clamav > > When i send an email just to test from console i saw on log file : > > > Nov 5 13:34:22 proxmails MailScanner[27664]: New Batch: Scanning 1 > messages, 669 bytes > Nov 5 13:34:33 proxmails MailScanner[27664]: SpamAssassin cache hit for > message C151116A9.059B3 > Nov 5 13:34:33 proxmails MailScanner[27664]: Virus and Content > Scanning: Starting > Nov 5 13:34:33 proxmails MailScanner[27664]: ERROR: Input/Output error > Nov 5 13:34:33 proxmails MailScanner[27664]: Requeue: C151116A9.059B3 > to E12A316DA > Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: > from=>, size=477, nrcpt=1 > (queue active) > Nov 5 13:34:33 proxmails MailScanner[27664]: Uninfected: Delivered 1 > messages > Nov 5 13:34:33 proxmails postfix/local[27685]: E12A316DA: > to=>, > orig_to=, relay=local, delay=40, delays=40/0/0/0.04, > dsn=2.0.0, status=sent (delivered to maildir) > Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: removed > > > > What is the "Input/Output error" ? > The mail have the eicar test file atached with uuencode , the file was > not catch and the mail pass trought the server , and mark the mail > as "cleaned". Check the output of "dmesg" for scsi sense errors or anything that looks like a failing disk. An unreasonably high percentage of drives die shortly after you start to utilise them. If it's a hitachi 80GB deathstar then you can probably say for certain it's gone. Raid 1 in software raid can sometimes cause this issue, check to see that you can write to all partitions using "touch /usr" etc A reboot would probably fix it temporarily. Paul > > > Thank you in advance > Julian > > > -- Paul Kelly Technical Director Blacknight Internet Solutions ltd Hosting, Colocation, Dedicated servers IP Transit Services Lo-call: 1850 927 280 DDI: 059 9183091 e-mail: paul@blacknight.ie web: http://www.blacknight.ie From pete at petecrocker.com Tue Nov 6 01:56:22 2007 From: pete at petecrocker.com (Peter Crocker) Date: Tue Nov 6 01:56:35 2007 Subject: rpmbuild not in some fedora 7 installs, install.sh fails Message-ID: <840666E0-4AEB-4298-93A5-4B06CF6C3CB5@petecrocker.com> Ok, this one took me quite a few hours to work out. I tried running ./ install.sh of an RPM install package of MailScanner, and couldn't figure out why it was failing. Output of the install.sh script is below. I kept getting "--rebuild: unknown option" errors every time the install script would try to rebuild the perl modules. I went down at least 10 different ratholes for hours before I finally figured it out. My minimal install of fedora has a /usr/bin/rpm, but not a /usr/bin/ rpmbuild. And it turns out the "rebuild" portions that used to be in the /usr/bin/rpm binary have been moved out, but I guess there's still a few hooks for old-school compatibility. The first few lines of the ./install.sh script checks this: echo if [ -x /bin/rpmbuild ]; then RPMBUILD=/bin/rpmbuild elif [ -x /usr/bin/rpmbuild ]; then RPMBUILD=/usr/bin/rpmbuild elif [ -x /bin/rpm ]; then RPMBUILD=/bin/rpm elif [ -x /usr/bin/rpm ]; then RPMBUILD=/usr/bin/rpm But that's not sufficient on my FC7 release. I don't know when this broke, but the proper check should be to make sure that either /usr/ bin/rpmbuild is in place, or that a call to /usr/bin/rpm --rebuild succeeds (which I'm guessing passes the call over to rpmbuild). To get rpmbuild on my system, I had to install some fedora extras: $ sudo yum install fedora-rpmdevtools Being new to MailScanner, what's the best way to open a bug for this? I'm crap at rpm, so I don't think I could suggest the appropriate solution for... I found this page (dated 2002!) from someone at redhat who's involved with the rpm package that explains the history of the code change: http://www.rpm.org/hintskinks/rpmbuild/ cheers, -pete -------------------------------------------------------------------------------- Output of install.sh *without* /usr/bin/rpmbuild present: -------------------------------------------------------------------------------- Good. You have the patch command. Good, you have /usr/src/redhat in place. You are running release 5 of RedHat, or a clone. So I will not force the installation of any Perl modules. But you are running Fedora, so I am going to force the installation of the Perl modules that normally require it. Good, unpackaged files will not break the build process. Good, far-too-clever Perl requirements will be ignored. Good, you appear to only have 1 copy of Perl installed. I think you are running on RedHat Linux, Mandriva Linux or SuSE Linux. Good, you appear to have the basic development tools installed. This script will pause for a few seconds after each major step, so do not worry if it appears to stop for a while. If you want it to stop so you can scroll back through the output then press Ctrl-S to stop the output and Ctrl-Q to start it again. If this fails due to dependency checks, and you wish to ignore these problems, you can run ./install.sh nodeps Setting Perl5 search path I think your system will build architecture-dependent modules for i386 Rebuilding all the Perl RPMs for your version of Perl Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. Attempting to build and install perl-Net-CIDR-0.11-1 --rebuild: unknown option Missing file /usr/src/redhat/RPMS/noarch/perl-Net- CIDR-0.11-1.noarch.rpm. Maybe it did not build correctly? Attempting to build and install perl-IO-stringy-2.108-1 --rebuild: unknown option Missing file /usr/src/redhat/RPMS/noarch/perl-IO- stringy-2.108-1.noarch.rpm. Maybe it did not build correctly? Attempting to build and install perl-MIME-Base64-3.07-1 --rebuild: unknown option -------------------------------------------------------------------------------- Output of install.sh with /usr/bin/rpmbuild in place: -------------------------------------------------------------------------------- Good. You have the patch command. Good, you have /usr/src/redhat in place. You are running release 5 of RedHat, or a clone. So I will not force the installation of any Perl modules. But you are running Fedora, so I am going to force the installation of the Perl modules that normally require it. Good, unpackaged files will not break the build process. Good, far-too-clever Perl requirements will be ignored. Good, you appear to only have 1 copy of Perl installed. I think you are running on RedHat Linux, Mandriva Linux or SuSE Linux. Good, you appear to have the basic development tools installed. This script will pause for a few seconds after each major step, so do not worry if it appears to stop for a while. If you want it to stop so you can scroll back through the output then press Ctrl-S to stop the output and Ctrl-Q to start it again. If this fails due to dependency checks, and you wish to ignore these problems, you can run ./install.sh nodeps Setting Perl5 search path I think your system will build architecture-dependent modules for i386 Rebuilding all the Perl RPMs for your version of Perl Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. Attempting to build and install perl-Net-CIDR-0.11-1 Installing perl-Net-CIDR-0.11-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.88252 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf Net-CIDR-0.11 + /bin/gzip -dc /usr/src/redhat/SOURCES/Net-CIDR-0.11.tar.gz + tar -xf - + STATUS=0 From lists at sequestered.net Tue Nov 6 03:39:44 2007 From: lists at sequestered.net (Jay Chandler) Date: Tue Nov 6 03:40:04 2007 Subject: smtp vrfy In-Reply-To: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> Message-ID: <472FE200.10605@sequestered.net> Glenn Steen wrote: > What you want to do is either to follow the instructions for > (recipient) verification as specified here: > http://www.postfix.org/ADDRESS_VERIFICATION_README.html > ... or use relay_recipient_maps as described in the MailScanner wiki. > >> Thanks in advance > You're wellcome;-) > >> Simon > > Cheers *breaks out the clue stick* Callouts are considered abusive by many servers-- you probably want to be VERY VERY CAREFUL about doing this... Personally I don't run it at all, but my spam setup is such that I don't need to... -- Jay Chandler / KB1JWQ Living Legend / Systems Exorcist Today's Excuse: High nuclear activity in your area From hvdkooij at vanderkooij.org Tue Nov 6 06:43:58 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Tue Nov 6 06:44:34 2007 Subject: rpmbuild not in some fedora 7 installs, install.sh fails In-Reply-To: <840666E0-4AEB-4298-93A5-4B06CF6C3CB5@petecrocker.com> References: <840666E0-4AEB-4298-93A5-4B06CF6C3CB5@petecrocker.com> Message-ID: <47300D2E.8050309@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Peter Crocker wrote: > Ok, this one took me quite a few hours to work out. I tried running > ./install.sh of an RPM install package of MailScanner, and couldn't > figure out why it was failing. Output of the install.sh script is below. > I kept getting "--rebuild: unknown option" errors every time the install > script would try to rebuild the perl modules. I went down at least 10 > different ratholes for hours before I finally figured it out. > > My minimal install of fedora has a /usr/bin/rpm, but not a > /usr/bin/rpmbuild. And it turns out the "rebuild" portions that used to > be in the /usr/bin/rpm binary have been moved out, but I guess there's > still a few hooks for old-school compatibility. rpmbuild is part of the normal packages and it is the administrators job to install such requirements. Even on Fedora 8 it is rather simple: $ rpm -qf `which rpmbuild` rpm-build-4.4.2.2-3.fc8 I regard the task of setting up a rpm build environment a task a sysadmin should be abe to do before (s)he even embarks on a trip like MailScanner. Having said that I can not recall a distribution that is still maintained that will not use rpmbuild but use rpm --build instead. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMA0oBvzDRVjxmYERAvfoAKC5VQGAJvhW0m6uZyDXGUqjRZ5tyQCfbYBR vvvLMkMBss+J3B59Cafk+EM= =U4SN -----END PGP SIGNATURE----- From jan-peter at koopmann.eu Tue Nov 6 08:00:25 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Tue Nov 6 07:59:08 2007 Subject: smtp vrfy In-Reply-To: <472FE200.10605@sequestered.net> References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> Message-ID: > *breaks out the clue stick* > > Callouts are considered abusive by many servers-- you probably want to > be VERY > VERY CAREFUL about doing this... Personally I don't run it at all, but > my spam > setup is such that I don't need to... Are they talking about sender address verification? The way I read it he is trying to do the opposite and ask his inbound receiving mailer which would be a wise thing to do and has nothing to do with callouts. Might be wrong though... :-) From simon at saq.co.uk Tue Nov 6 09:22:38 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 09:33:56 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > Sent: 06 November 2007 08:00 > To: MailScanner discussion > Subject: RE: smtp vrfy > > > *breaks out the clue stick* > > > > Callouts are considered abusive by many servers-- you probably want > to > > be VERY > > VERY CAREFUL about doing this... Personally I don't run it at all, > but > > my spam > > setup is such that I don't need to... > > Are they talking about sender address verification? The way I read it > he > is trying to do the opposite and ask his inbound receiving mailer which > would be a wise thing to do and has nothing to do with callouts. Might > be wrong though... :-) > -- Hi, that's exactly what I'm trying to do - I run a server with a generic public domain with lots of users on it - the domain has been around for 12 years so attracts mucho canned meat of the spam variety. All I want mailscanner to do is say to the destination server "hey there, do you have this address?" before actually sending the message, which would take some pressure off the spooler on the destination server. I think it IS working but the gateway is starting the smtp vrfy transaction with rather than - here's the error off the destination machine: "unacceptable mail address in MAIL FROM:" I'm running a seperate machine with postfix only and this does use a postmaster@domain.com address for outside smtp transactions, but I can't find the config to specify what address the postmaster should use - only that it is an alias of root in /etc/postfix/aliases Thanks again chaps, the answer is probably blatantly simple but I'm not seeing it :( From goetz.reinicke at filmakademie.de Tue Nov 6 09:38:54 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Tue Nov 6 09:39:20 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 Message-ID: <4730362E.4040606@filmakademie.de> Hi, I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from Red Hat, but there are a lot of conflicts with file from package installed by Mailscanner. e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. So what may I do? Force the update of the Red Hat perl.rpm? Any suggestions?? Thanks for hints and tips and for Mailscanner anyway! G?tz Reinicke -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From MailScanner at ecs.soton.ac.uk Tue Nov 6 09:45:14 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 6 09:45:29 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <4730362E.4040606@filmakademie.de> References: <4730362E.4040606@filmakademie.de> Message-ID: <473037AA.9010208@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 G?tz Reinicke wrote: > Hi, > > I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 > mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from > Red Hat, but there are a lot of conflicts with file from package > installed by Mailscanner. > > e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > > So what may I do? Force the update of the Red Hat perl.rpm? I would force the update of the RedHat perl rpm then re-install MailScanner so it gets its teeth into your new setup. > > Any suggestions?? > > Thanks for hints and tips and for Mailscanner anyway! > > > G?tz Reinicke Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMDeqEfZZRxQVtlQRAthVAKD5adUAjb4yIaLb9BpVdWKdFYcCTwCeP43E ErSnydC9CrY8iBWhydmQaq4= =y//O -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From glenn.steen at gmail.com Tue Nov 6 09:56:45 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 09:56:58 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> Message-ID: <223f97700711060156k477f053h9a5351d968164444@mail.gmail.com> On 06/11/2007, Koopmann, Jan-Peter wrote: > > *breaks out the clue stick* > > > > Callouts are considered abusive by many servers-- you probably want to > > be VERY > > VERY CAREFUL about doing this... Personally I don't run it at all, > but > > my spam > > setup is such that I don't need to... > > Are they talking about sender address verification? The way I read it he > is trying to do the opposite and ask his inbound receiving mailer which > would be a wise thing to do and has nothing to do with callouts. Might > be wrong though... :-) No, you are quite right J-P.... So I'll just duck that clue stick:-):-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From Q.G.Campbell at newcastle.ac.uk Tue Nov 6 09:55:00 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Tue Nov 6 09:57:03 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net> Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C1C3BB8@largo.campus.ncl.ac.uk> >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Simon Jones >Sent: 06 November 2007 09:23 >To: MailScanner discussion >Subject: RE: smtp vrfy > [snip] >Hi, that's exactly what I'm trying to do - I run a server with a generic >public domain with lots of users on it - the domain has been around for >12 years so attracts mucho canned meat of the spam variety. All I want >mailscanner to do is say to the destination server "hey there, do you >have this address?" before actually sending the message, which would >take some pressure off the spooler on the destination server. >[snip] Although this is of no use to Simon, it is an opportunity to remind sites using Sendmail as their MTA that they can run 'milter-ahead' (from Snertsoft) to get this functionality. Quentin From glenn.steen at gmail.com Tue Nov 6 10:01:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 10:01:37 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> Message-ID: <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> On 06/11/2007, Simon Jones wrote: > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > Sent: 06 November 2007 08:00 > > To: MailScanner discussion > > Subject: RE: smtp vrfy > > > > > *breaks out the clue stick* > > > > > > Callouts are considered abusive by many servers-- you probably want > > to > > > be VERY > > > VERY CAREFUL about doing this... Personally I don't run it at all, > > but > > > my spam > > > setup is such that I don't need to... > > > > Are they talking about sender address verification? The way I read it > > he > > is trying to do the opposite and ask his inbound receiving mailer > which > > would be a wise thing to do and has nothing to do with callouts. Might > > be wrong though... :-) > > -- > > Hi, that's exactly what I'm trying to do - I run a server with a generic > public domain with lots of users on it - the domain has been around for > 12 years so attracts mucho canned meat of the spam variety. All I want > mailscanner to do is say to the destination server "hey there, do you > have this address?" before actually sending the message, which would > take some pressure off the spooler on the destination server. > > I think it IS working but the gateway is starting the smtp vrfy > transaction with rather than - > here's the error off the destination machine: "unacceptable mail address > in MAIL FROM:" > > I'm running a seperate machine with postfix only and this does use a > postmaster@domain.com address for outside smtp transactions, but I can't > find the config to specify what address the postmaster should use - only > that it is an alias of root in /etc/postfix/aliases > > Thanks again chaps, the answer is probably blatantly simple but I'm not > seeing it :( How about address_verify_sender = postmaster in main.cf ... or rather address_verify_sender = postmaster@yourdomain.com ...? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From eclipsem at optusnet.com.au Tue Nov 6 11:45:47 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Tue Nov 6 11:45:58 2007 Subject: smtp vrfy Message-ID: <200711061145.lA6BjlYA009933@mail09.syd.optusnet.com.au> On Tue, 6 Nov 2007, Quentin Campbell wrote: > Although this is of no use to Simon, it is an opportunity to remind > sites using Sendmail as their MTA that they can run 'milter-ahead' (from > Snertsoft) to get this functionality. Or, rather than PAY for snertsoft's milter-ahead, he could use the "free" smf-sav milter or MIMEDefang to do the same thing. Ed. From martinh at solidstatelogic.com Tue Nov 6 11:54:04 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Tue Nov 6 11:54:07 2007 Subject: smtp vrfy In-Reply-To: <200711061145.lA6BjlYA009933@mail09.syd.optusnet.com.au> References: <200711061145.lA6BjlYA009933@mail09.syd.optusnet.com.au> Message-ID: On Tue, 06 Nov 2007 22:45:47 +1100 eclipsem@optusnet.com.au wrote: > > On Tue, 6 Nov 2007, Quentin Campbell wrote: >> Although this is of no use to Simon, it is an >>opportunity to remind >> sites using Sendmail as their MTA that they can run >>'milter-ahead' (from >> Snertsoft) to get this functionality. > > Or, rather than PAY for snertsoft's milter-ahead, he >could use the "free" smf-sav milter or MIMEDefang to do >the same thing. > > > Ed. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read >http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the >website! Or the free http://smfs.sourceforge.net/smf-sav.html which can do the same thing.. -- martin ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From simon at saq.co.uk Tue Nov 6 11:50:49 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 12:02:06 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 06 November 2007 10:02 > To: MailScanner discussion > Subject: Re: smtp vrfy > > On 06/11/2007, Simon Jones wrote: > > > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner- > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > > Sent: 06 November 2007 08:00 > > > To: MailScanner discussion > > > Subject: RE: smtp vrfy > > > > > > > *breaks out the clue stick* > > > > > > > > Callouts are considered abusive by many servers-- you probably > want > > > to > > > > be VERY > > > > VERY CAREFUL about doing this... Personally I don't run it at > all, > > > but > > > > my spam > > > > setup is such that I don't need to... > > > > > > Are they talking about sender address verification? The way I read > it > > > he > > > is trying to do the opposite and ask his inbound receiving mailer > > which > > > would be a wise thing to do and has nothing to do with callouts. > Might > > > be wrong though... :-) > > > -- > > > > Hi, that's exactly what I'm trying to do - I run a server with a > generic > > public domain with lots of users on it - the domain has been around > for > > 12 years so attracts mucho canned meat of the spam variety. All I > want > > mailscanner to do is say to the destination server "hey there, do you > > have this address?" before actually sending the message, which would > > take some pressure off the spooler on the destination server. > > > > I think it IS working but the gateway is starting the smtp vrfy > > transaction with rather than - > > here's the error off the destination machine: "unacceptable mail > address > > in MAIL FROM:" > > > > I'm running a seperate machine with postfix only and this does use a > > postmaster@domain.com address for outside smtp transactions, but I > can't > > find the config to specify what address the postmaster should use - > only > > that it is an alias of root in /etc/postfix/aliases > > > > Thanks again chaps, the answer is probably blatantly simple but I'm > not > > seeing it :( > How about > address_verify_sender = postmaster > in main.cf ... or rather > address_verify_sender = postmaster@yourdomain.com > ...? > Cheers > -- > -- Glenn Cheers Glen, That sorted the address issue - still doesn't work though hehe, bounces everything - valid or not but if I do a vrfy user@domain.com on the destination server it validates or rejects as one would expect. Now checking my config to make sure nothing fishy is going on here... Simon From glenn.steen at gmail.com Tue Nov 6 12:22:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 12:33:29 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: <223f97700711060422g58a08bd1r26f0e37d5cb76099@mail.gmail.com> On 06/11/2007, Simon Jones wrote: > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > Sent: 06 November 2007 10:02 > > To: MailScanner discussion > > Subject: Re: smtp vrfy > > > > On 06/11/2007, Simon Jones wrote: > > > > > > > > > > -----Original Message----- > > > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner- > > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > > > Sent: 06 November 2007 08:00 > > > > To: MailScanner discussion > > > > Subject: RE: smtp vrfy > > > > > > > > > *breaks out the clue stick* > > > > > > > > > > Callouts are considered abusive by many servers-- you probably > > want > > > > to > > > > > be VERY > > > > > VERY CAREFUL about doing this... Personally I don't run it at > > all, > > > > but > > > > > my spam > > > > > setup is such that I don't need to... > > > > > > > > Are they talking about sender address verification? The way I read > > it > > > > he > > > > is trying to do the opposite and ask his inbound receiving mailer > > > which > > > > would be a wise thing to do and has nothing to do with callouts. > > Might > > > > be wrong though... :-) > > > > -- > > > > > > Hi, that's exactly what I'm trying to do - I run a server with a > > generic > > > public domain with lots of users on it - the domain has been around > > for > > > 12 years so attracts mucho canned meat of the spam variety. All I > > want > > > mailscanner to do is say to the destination server "hey there, do > you > > > have this address?" before actually sending the message, which would > > > take some pressure off the spooler on the destination server. > > > > > > I think it IS working but the gateway is starting the smtp vrfy > > > transaction with rather than - > > > here's the error off the destination machine: "unacceptable mail > > address > > > in MAIL FROM:" > > > > > > I'm running a seperate machine with postfix only and this does use a > > > postmaster@domain.com address for outside smtp transactions, but I > > can't > > > find the config to specify what address the postmaster should use - > > only > > > that it is an alias of root in /etc/postfix/aliases > > > > > > Thanks again chaps, the answer is probably blatantly simple but I'm > > not > > > seeing it :( > > How about > > address_verify_sender = postmaster > > in main.cf ... or rather > > address_verify_sender = postmaster@yourdomain.com > > ...? > > Cheers > > -- > > -- Glenn > > Cheers Glen, > > That sorted the address issue - still doesn't work though hehe, bounces > everything - valid or not but if I do a vrfy user@domain.com on the > destination server it validates or rejects as one would expect. Now > checking my config to make sure nothing fishy is going on here... > > Simon Does it work on the "target" if you telnet from the "source" (gateway/MS-box) and do it by hand? If so, then definitely something wrong with the rest of the setup on the GW:-). Wietses doc is pretty lucid, so do try and follow that;-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From simon at saq.co.uk Tue Nov 6 12:57:48 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 13:11:44 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: > > On 06/11/2007, Simon Jones wrote: > > > > > > > > > > -----Original Message----- > > > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner- > > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > > > Sent: 06 November 2007 08:00 > > > > To: MailScanner discussion > > > > Subject: RE: smtp vrfy > > > > > > > > > *breaks out the clue stick* > > > > > > > > > > Callouts are considered abusive by many servers-- you probably > > want > > > > to > > > > > be VERY > > > > > VERY CAREFUL about doing this... Personally I don't run it at > > all, > > > > but > > > > > my spam > > > > > setup is such that I don't need to... > > > > > > > > Are they talking about sender address verification? The way I > read > > it > > > > he > > > > is trying to do the opposite and ask his inbound receiving mailer > > > which > > > > would be a wise thing to do and has nothing to do with callouts. > > Might > > > > be wrong though... :-) > > > > -- > > > > > > Hi, that's exactly what I'm trying to do - I run a server with a > > generic > > > public domain with lots of users on it - the domain has been around > > for > > > 12 years so attracts mucho canned meat of the spam variety. All I > > want > > > mailscanner to do is say to the destination server "hey there, do > you > > > have this address?" before actually sending the message, which > would > > > take some pressure off the spooler on the destination server. > > > > > > I think it IS working but the gateway is starting the smtp vrfy > > > transaction with rather than - > > > here's the error off the destination machine: "unacceptable mail > > address > > > in MAIL FROM:" > > > > > > I'm running a seperate machine with postfix only and this does use > a > > > postmaster@domain.com address for outside smtp transactions, but I > > can't > > > find the config to specify what address the postmaster should use - > > only > > > that it is an alias of root in /etc/postfix/aliases > > > > > > Thanks again chaps, the answer is probably blatantly simple but I'm > > not > > > seeing it :( > > How about > > address_verify_sender = postmaster > > in main.cf ... or rather > > address_verify_sender = postmaster@yourdomain.com > > ...? > > Cheers > > -- > > -- Glenn There's nothing else I need in main.cf is there? I can't figure why it's not calling back to the destination server and getting the correct result, it still bounces everything as invalid rather than just the bad stuff. smtpd_recipient_restrictions = reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unverified_recipient, reject_unauth_pipelining, permit_mynetworks, reject_unauth_destination, reject_maps_rbl, permit address_verify_sender = postmaster@domain.com unverified_recipient_reject_code = 550 address_verify_map = btree:/etc/postfix/verify From simon at saq.co.uk Tue Nov 6 13:41:48 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 13:53:05 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> <223f97700711060422g58a08bd1r26f0e37d5cb76099@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 06 November 2007 12:23 > To: MailScanner discussion > Subject: Re: smtp vrfy > > On 06/11/2007, Simon Jones wrote: > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner- > > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > > Sent: 06 November 2007 10:02 > > > To: MailScanner discussion > > > Subject: Re: smtp vrfy > > > > > > On 06/11/2007, Simon Jones wrote: > > > > > > > > > > > > > -----Original Message----- > > > > > From: mailscanner-bounces@lists.mailscanner.info > > > [mailto:mailscanner- > > > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan- > Peter > > > > > Sent: 06 November 2007 08:00 > > > > > To: MailScanner discussion > > > > > Subject: RE: smtp vrfy > > > > > > > > > > > *breaks out the clue stick* > > > > > > > > > > > > Callouts are considered abusive by many servers-- you > probably > > > want > > > > > to > > > > > > be VERY > > > > > > VERY CAREFUL about doing this... Personally I don't run it > at > > > all, > > > > > but > > > > > > my spam > > > > > > setup is such that I don't need to... > > > > > > > > > > Are they talking about sender address verification? The way I > read > > > it > > > > > he > > > > > is trying to do the opposite and ask his inbound receiving > mailer > > > > which > > > > > would be a wise thing to do and has nothing to do with > callouts. > > > Might > > > > > be wrong though... :-) > > > > > -- > > > > > > > > Hi, that's exactly what I'm trying to do - I run a server with a > > > generic > > > > public domain with lots of users on it - the domain has been > around > > > for > > > > 12 years so attracts mucho canned meat of the spam variety. All > I > > > want > > > > mailscanner to do is say to the destination server "hey there, do > > you > > > > have this address?" before actually sending the message, which > would > > > > take some pressure off the spooler on the destination server. > > > > > > > > I think it IS working but the gateway is starting the smtp vrfy > > > > transaction with rather than > - > > > > here's the error off the destination machine: "unacceptable mail > > > address > > > > in MAIL FROM:" > > > > > > > > I'm running a seperate machine with postfix only and this does > use a > > > > postmaster@domain.com address for outside smtp transactions, but > I > > > can't > > > > find the config to specify what address the postmaster should use > - > > > only > > > > that it is an alias of root in /etc/postfix/aliases > > > > > > > > Thanks again chaps, the answer is probably blatantly simple but > I'm > > > not > > > > seeing it :( > > > How about > > > address_verify_sender = postmaster > > > in main.cf ... or rather > > > address_verify_sender = postmaster@yourdomain.com > > > ...? > > > Cheers > > > -- > > > -- Glenn > > > > Cheers Glen, > > > > That sorted the address issue - still doesn't work though hehe, > bounces > > everything - valid or not but if I do a vrfy user@domain.com on the > > destination server it validates or rejects as one would expect. Now > > checking my config to make sure nothing fishy is going on here... > > > > Simon > Does it work on the "target" if you telnet from the "source" > (gateway/MS-box) and do it by hand? If so, then definitely something > wrong with the rest of the setup on the GW:-). > Wietses doc is pretty lucid, so do try and follow that;-). > > Cheers > -- > -- Glenn Yup, works fine if I telnet off the gateway to the target host - I'll check the doc and see what I can turf up. From glenn.steen at gmail.com Tue Nov 6 13:57:03 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 13:57:07 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: <223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> On 06/11/2007, Simon Jones wrote: (snip) > > There's nothing else I need in main.cf is there? I can't figure why > it's not calling back to the destination server and getting the correct > result, it still bounces everything as invalid rather than just the bad > stuff. > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > reject_unknown_sender_domain, reject_unknown_recipient_domain, > reject_unverified_recipient, reject_unauth_pipelining, > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, permit You have things ordered slightly different than in the example, but that should be OK in this case, I think... The important thing is to reject unknown domains prior to unverified recipients... Postfix does know the "destinations" it handles mail for, right? > address_verify_sender = postmaster@domain.com Should be OK. > unverified_recipient_reject_code = 550 While testing, if this is a "live" system... it might be wise to do a 450 instead of a 550;-). > address_verify_map = btree:/etc/postfix/verify You might want to skip this initially, so comment that out and do a "postfix reload"... Seem if it starts cooking... Worst case, if you have ... interresting transports, you might need apply the last parts of the instructions... Hopefully, you don't. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From goetz.reinicke at filmakademie.de Tue Nov 6 14:00:25 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Tue Nov 6 14:01:09 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <473037AA.9010208@ecs.soton.ac.uk> References: <4730362E.4040606@filmakademie.de> <473037AA.9010208@ecs.soton.ac.uk> Message-ID: <47307379.60504@filmakademie.de> Julian Field schrieb: > > > G?tz Reinicke wrote: >> Hi, > >> I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 >> mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from >> Red Hat, but there are a lot of conflicts with file from package >> installed by Mailscanner. > >> e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > >> So what may I do? Force the update of the Red Hat perl.rpm? > I would force the update of the RedHat perl rpm then re-install > MailScanner so it gets its teeth into your new setup. Works. /G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From prandal at herefordshire.gov.uk Tue Nov 6 14:16:03 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue Nov 6 14:16:10 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <47307379.60504@filmakademie.de> References: <4730362E.4040606@filmakademie.de><473037AA.9010208@ecs.soton.ac.uk> <47307379.60504@filmakademie.de> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0934@HC-MBX02.herefordshire.gov.uk> Did you need to reinstall MailScanner or was the force install of perl sufficient? Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of G?tz Reinicke > Sent: 06 November 2007 14:00 > To: MailScanner discussion > Subject: Re: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 > > Julian Field schrieb: > > > > > > G?tz Reinicke wrote: > >> Hi, > > > >> I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 > >> mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from > >> Red Hat, but there are a lot of conflicts with file from package > >> installed by Mailscanner. > > > >> e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > > > > >> So what may I do? Force the update of the Red Hat perl.rpm? > > I would force the update of the RedHat perl rpm then re-install > > MailScanner so it gets its teeth into your new setup. > > Works. > > /G?tz > -- > G?tz Reinicke > IT Koordinator > > Tel. +49 7141 969 420 > Fax +49 7141 969 55 420 > E-Mail goetz.reinicke@filmakademie.de > > Filmakademie Baden-W?rttemberg GmbH > Mathildenstr. 20 > 71638 Ludwigsburg > www.filmakademie.de > > Eintragung Amtsgericht Stuttgart HRB 205016 > Vorsitzender des Aufsichtsrats: > Dr. Christoph Palmer, MdL, Minister a.D. > > Gesch?ftsf?hrer: > Prof. Thomas Schadt > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From simon at saq.co.uk Tue Nov 6 14:06:26 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 14:17:44 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> <223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 06 November 2007 13:57 > To: MailScanner discussion > Subject: Re: smtp vrfy > > On 06/11/2007, Simon Jones wrote: > (snip) > > > > There's nothing else I need in main.cf is there? I can't figure why > > it's not calling back to the destination server and getting the > correct > > result, it still bounces everything as invalid rather than just the > bad > > stuff. > > > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > > reject_unknown_sender_domain, reject_unknown_recipient_domain, > > reject_unverified_recipient, reject_unauth_pipelining, > > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, permit > You have things ordered slightly different than in the example, but > that should be OK in this case, I think... The important thing is to > reject unknown domains prior to unverified recipients... Postfix does > know the "destinations" it handles mail for, right? > > > address_verify_sender = postmaster@domain.com > Should be OK. > > > unverified_recipient_reject_code = 550 > While testing, if this is a "live" system... it might be wise to do a > 450 instead of a 550;-). > > > address_verify_map = btree:/etc/postfix/verify > You might want to skip this initially, so comment that out and do a > "postfix reload"... Seem if it starts cooking... > > Worst case, if you have ... interresting transports, you might need > apply the last parts of the instructions... Hopefully, you don't. > > Cheers > -- > -- Glenn Aahaaa! You sir are a genius ;) that's got it working correctly now. So presumably the darn thing had made a database locally before the postmaster problem was fixed and was checking that and coming up with the wrong results. So if I remove the db out of /etc/postfix it should recreate a correct one... although assumptions being the mother of all f... ups aside we'll give it a go. From simon at saq.co.uk Tue Nov 6 14:13:02 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 14:24:19 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com><223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Simon Jones > Sent: 06 November 2007 14:06 > To: MailScanner discussion > Subject: RE: smtp vrfy > > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > Sent: 06 November 2007 13:57 > > To: MailScanner discussion > > Subject: Re: smtp vrfy > > > > On 06/11/2007, Simon Jones wrote: > > (snip) > > > > > > There's nothing else I need in main.cf is there? I can't figure > why > > > it's not calling back to the destination server and getting the > > correct > > > result, it still bounces everything as invalid rather than just the > > bad > > > stuff. > > > > > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > > > reject_unknown_sender_domain, reject_unknown_recipient_domain, > > > reject_unverified_recipient, reject_unauth_pipelining, > > > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, > permit > > You have things ordered slightly different than in the example, but > > that should be OK in this case, I think... The important thing is to > > reject unknown domains prior to unverified recipients... Postfix does > > know the "destinations" it handles mail for, right? > > > > > address_verify_sender = postmaster@domain.com > > Should be OK. > > > > > unverified_recipient_reject_code = 550 > > While testing, if this is a "live" system... it might be wise to do a > > 450 instead of a 550;-). > > > > > address_verify_map = btree:/etc/postfix/verify > > You might want to skip this initially, so comment that out and do a > > "postfix reload"... Seem if it starts cooking... > > > > Worst case, if you have ... interresting transports, you might need > > apply the last parts of the instructions... Hopefully, you don't. > > > > Cheers > > -- > > -- Glenn > > Aahaaa! You sir are a genius ;) that's got it working correctly now. > So > presumably the darn thing had made a database locally before the > postmaster problem was fixed and was checking that and coming up with > the wrong results. So if I remove the db out of /etc/postfix it should > recreate a correct one... although assumptions being the mother of all > f... ups aside we'll give it a go. > -- Working :) mv /etc/postfix/verify.db /etc/postfix/verify.db.bak Uncomment the line and reload pfx, all tickety-boo in the land of smtp vrfy - thanks again to all. From glenn.steen at gmail.com Tue Nov 6 14:34:02 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 14:34:05 2007 Subject: smtp vrfy In-Reply-To: References: <472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> <223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> Message-ID: <223f97700711060634q5ed8b035o749edd344b9a751e@mail.gmail.com> On 06/11/2007, Simon Jones wrote: > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Simon Jones > > Sent: 06 November 2007 14:06 > > To: MailScanner discussion > > Subject: RE: smtp vrfy > > > > > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner- > > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > > Sent: 06 November 2007 13:57 > > > To: MailScanner discussion > > > Subject: Re: smtp vrfy > > > > > > On 06/11/2007, Simon Jones wrote: > > > (snip) > > > > > > > > There's nothing else I need in main.cf is there? I can't figure > > why > > > > it's not calling back to the destination server and getting the > > > correct > > > > result, it still bounces everything as invalid rather than just > the > > > bad > > > > stuff. > > > > > > > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > > > > reject_unknown_sender_domain, reject_unknown_recipient_domain, > > > > reject_unverified_recipient, reject_unauth_pipelining, > > > > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, > > permit > > > You have things ordered slightly different than in the example, but > > > that should be OK in this case, I think... The important thing is to > > > reject unknown domains prior to unverified recipients... Postfix > does > > > know the "destinations" it handles mail for, right? > > > > > > > address_verify_sender = postmaster@domain.com > > > Should be OK. > > > > > > > unverified_recipient_reject_code = 550 > > > While testing, if this is a "live" system... it might be wise to do > a > > > 450 instead of a 550;-). > > > > > > > address_verify_map = btree:/etc/postfix/verify > > > You might want to skip this initially, so comment that out and do a > > > "postfix reload"... Seem if it starts cooking... > > > > > > Worst case, if you have ... interresting transports, you might need > > > apply the last parts of the instructions... Hopefully, you don't. > > > > > > Cheers > > > -- > > > -- Glenn > > > > Aahaaa! You sir are a genius ;) that's got it working correctly now. > > So > > presumably the darn thing had made a database locally before the > > postmaster problem was fixed and was checking that and coming up with > > the wrong results. So if I remove the db out of /etc/postfix it should > > recreate a correct one... although assumptions being the mother of all > > f... ups aside we'll give it a go. > > -- > Working :) mv /etc/postfix/verify.db /etc/postfix/verify.db.bak > > Uncomment the line and reload pfx, all tickety-boo in the land of smtp > vrfy - thanks again to all. We aim to please;-). Now, just make a note of keeping an eye on the filesystem where it resides (so that it doesn't bomb again), as well as the logs...;-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From goetz.reinicke at filmakademie.de Tue Nov 6 15:30:20 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-1?Q?G=F6tz_Reinicke?=) Date: Tue Nov 6 15:55:17 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0934@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473037AA.9010208@ecs.soton.ac.uk> <47307379.60504@filmakademie.de> <7EF0EE5CB3B263488C8C18823239BEBA01FD0934@HC-MBX02.herefordshire.gov.uk> Message-ID: <4730888C.208@filmakademie.de> Hi, I had to install the new version of mailscanner anyway, so I don't know what my production server would have done without reinstalling MailScanner. Regards, G?tz Randal, Phil schrieb: > Did you need to reinstall MailScanner or was the force install of perl sufficient? > > Cheers, > > Phil -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From arturs at netvision.net.il Tue Nov 6 19:29:39 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Tue Nov 6 19:31:11 2007 Subject: Your recommendation please: big volume mail solution Message-ID: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Hi, A client asked me to build for him a mail solution, capable of sending up to 1 milllion emails a day, while each email doesn't exceed 50KB in size. How do I calculate: 1) how many servers 2) how do I calculate the above 3) is there any max emails a day from IP/domain, which triggers black and blocklists 4) what is your recommended software solution On this stage, most distribution would be in single country. Thanks in advance Arthur From ssilva at sgvwater.com Tue Nov 6 19:46:50 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 6 19:47:09 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: on 11/6/2007 11:29 AM Arthur Sherman spake the following: > Hi, > > A client asked me to build for him a mail solution, capable of sending up to > 1 milllion emails a day, while each email doesn't exceed 50KB in size. > > How do I calculate: > 1) how many servers > 2) how do I calculate the above > 3) is there any max emails a day from IP/domain, which triggers black and > blocklists > 4) what is your recommended software solution > > On this stage, most distribution would be in single country. > > Thanks in advance > > Arthur > > Sounds suspiciously like a spammer! Give us his domain so we can blacklist him before he starts ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From Kevin_Miller at ci.juneau.ak.us Tue Nov 6 19:53:31 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Tue Nov 6 19:52:50 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: Scott Silva wrote: > on 11/6/2007 11:29 AM Arthur Sherman spake the following: >> Hi, >> >> A client asked me to build for him a mail solution, capable of >> sending up to 1 milllion emails a day, while each email doesn't >> exceed 50KB in size. >> >> How do I calculate: >> 1) how many servers >> 2) how do I calculate the above >> 3) is there any max emails a day from IP/domain, which triggers >> black and blocklists 4) what is your recommended software solution >> >> On this stage, most distribution would be in single country. >> >> Thanks in advance >> >> Arthur >> >> > Sounds suspiciously like a spammer! > Give us his domain so we can blacklist him before he starts ;-P Just what I was thinking - maybe he should just buy a botnet. ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From arturs at netvision.net.il Tue Nov 6 20:59:27 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Tue Nov 6 21:00:57 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <00e401c820b7$eb5c0700$6402a8c0@dell> > >> A client asked me to build for him a mail solution, capable of > >> sending up to 1 milllion emails a day, while each email doesn't > >> exceed 50KB in size. > >> > >> How do I calculate: > >> 1) how many servers > >> 2) how do I calculate the above > >> 3) is there any max emails a day from IP/domain, which > triggers black > >> and blocklists 4) what is your recommended software solution > >> > >> On this stage, most distribution would be in single country. > >> > >> Thanks in advance > >> > >> Arthur > >> > >> > > Sounds suspiciously like a spammer! > > Give us his domain so we can blacklist him before he starts ;-P > > Just what I was thinking - maybe he should just buy a botnet. > > ...Kevin Well, it could be, frankly. As a matter of fact, it has a working unsubscribe option within a mail, if this counts... Here it does. Maybe, better I build him a mailing system which is less spam aggressive, if I can call it so, instead of botnet and such dirty stuff. :) Thanks anyway. If someone is so kind to help me with this, please feel free to contact me directly From whatisee1 at yahoo.com Tue Nov 6 21:30:04 2007 From: whatisee1 at yahoo.com (W S) Date: Tue Nov 6 21:30:07 2007 Subject: MailScanner + Postfix => very slow... Message-ID: <293749.32785.qm@web57611.mail.re1.yahoo.com> Hi, I?m running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red Hat ES 4. The system is processing over 200,000 emails per day, BUT most of emails (about 95%) are junk / spam and if queue gets over 10,000 it?s freezes all delivery process. Are there any parameters that I can tweak to speed-up the delivery process? Thanks, --WS __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071106/40a0bbda/attachment.html From mailscanner at slackadelic.com Tue Nov 6 21:35:05 2007 From: mailscanner at slackadelic.com (Matt Hayes) Date: Tue Nov 6 21:35:16 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <293749.32785.qm@web57611.mail.re1.yahoo.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> Message-ID: <4730DE09.4010609@slackadelic.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 W S wrote: > Hi, > I?m running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red > Hat ES 4. > The system is processing over 200,000 emails per day, BUT most of emails > (about 95%) are junk / spam and if queue gets over 10,000 it?s freezes > all delivery process. > Are there any parameters that I can tweak to speed-up the delivery process? > > Thanks, > --WS Wow, you might want to look at upgrading your postfix installation.. and there is also a newer release of MailScanner out that may benefit you. As far as tweaks, not sure.. are you doing greylisting.. do you do any RBL checks at the MTA level? These are things that could possibly drop the amount of email your server has to munge through. - -Matt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMN4Junv8h7s/76wRAh20AJ0eS94Wac10B5i90rlsunHagc9ZWACePue+ 68PoLo0VbBUrPnq9fnc4dmk= =lOzp -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Tue Nov 6 21:41:06 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 6 21:41:19 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <4730DE09.4010609@slackadelic.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> <4730DE09.4010609@slackadelic.com> Message-ID: <4730DF72.1030208@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matt Hayes wrote: > W S wrote: >> Hi, Im running MailScanner (vers. 4.63.8) with Postfix (vers. >> 2.2) on Red Hat ES 4. The system is processing over 200,000 >> emails per day, BUT most of > emails >> (about 95%) are junk / spam and if queue gets over 10,000 its >> freezes all delivery process. Are there any parameters that I can >> tweak to speed-up the delivery > process? > >> Thanks, --WS > > > Wow, you might want to look at upgrading your postfix > installation.. and there is also a newer release of MailScanner out > that may benefit you. > > As far as tweaks, not sure.. are you doing greylisting.. do you do > any RBL checks at the MTA level? These are things that could > possibly drop the amount of email your server has to munge through. > > > -Matt Also, take a look at BarricadeMX as it may solve all your problems. Free trials are available from www.fsl.com. Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMN9yEfZZRxQVtlQRAuvHAJ9Dh7CD3ZLv6+sJuV2FKjr1j0ClkACgwfxL 3JVGh/tXCvKq9NxXlOugReg= =qXjc -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Tue Nov 6 22:07:20 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 6 22:05:27 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <4730DF72.1030208@ecs.soton.ac.uk> Message-ID: <7128612.6941194386840015.JavaMail.root@office.splatnix.net> Nice plug Jules ;) but a better licensing model may be good :D What RBLs are you running ? Please specify any additional plugins ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Julian Field" To: "MailScanner discussion" Sent: Tuesday, November 6, 2007 9:41:06 PM (GMT) Europe/London Subject: Re: MailScanner + Postfix => very slow... -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matt Hayes wrote: > W S wrote: >> Hi, Im running MailScanner (vers. 4.63.8) with Postfix (vers. >> 2.2) on Red Hat ES 4. The system is processing over 200,000 >> emails per day, BUT most of > emails >> (about 95%) are junk / spam and if queue gets over 10,000 its >> freezes all delivery process. Are there any parameters that I can >> tweak to speed-up the delivery > process? > >> Thanks, --WS > > > Wow, you might want to look at upgrading your postfix > installation.. and there is also a newer release of MailScanner out > that may benefit you. > > As far as tweaks, not sure.. are you doing greylisting.. do you do > any RBL checks at the MTA level? These are things that could > possibly drop the amount of email your server has to munge through. > > > -Matt Also, take a look at BarricadeMX as it may solve all your problems. Free trials are available from www.fsl.com. Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMN9yEfZZRxQVtlQRAuvHAJ9Dh7CD3ZLv6+sJuV2FKjr1j0ClkACgwfxL 3JVGh/tXCvKq9NxXlOugReg= =qXjc -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Tue Nov 6 22:19:31 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 6 22:21:45 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <7128612.6941194386840015.JavaMail.root@office.splatnix.net> References: <4730DF72.1030208@ecs.soton.ac.uk> <7128612.6941194386840015.JavaMail.root@office.splatnix.net> Message-ID: on 11/6/2007 2:07 PM UxBoD spake the following: > Nice plug Jules ;) but a better licensing model may be good :D > > What RBLs are you running ? Please specify any additional plugins ? > > Regards, Its licensed under the "I need to eat, too!" license ;-D -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From arturs at netvision.net.il Tue Nov 6 23:42:17 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Tue Nov 6 23:43:47 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <011301c820ce$aa65cfd0$6402a8c0@dell> I posted this question in several lists and, amazingly, I got badly flamed. :) Many demanded the IP or domain to block, even threatened me to block my own mail servers, which never sent a spam. Not all though, actually some of gurus were quite understanding... Let me clear some points here: The services my company provides are legit spam-proof etc hosting services. The client turned to us for because of quality he believes we have in building mailers, i.e. technical expertise netto. Legally, he has the right to do such mailing in Israel. His mailing will be in Israel only, and has working Unsubscribe option - we are scrupulous about this part. His DB was legally bought from legit provider, not us also. I checked the DB is legit here. His servers will be neither in our data center, nor in our IP range, as he builds his own data center, which will host his servers. Discussing this in open forum was made in effort to openly discuss the business need, and find a solution to make him as least spammer as possible, while still allowing him the functonality he seeks. Don't you deny the business need for big email volumes? He will become a legit "marketing"-mailing service provider in Israel. We better start thinking in this direction also, the sooner the better - the market demands... Thank you Arthur From rwahyudi at gmail.com Wed Nov 7 00:05:06 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Wed Nov 7 00:03:14 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue Message-ID: <47310132.3030901@gmail.com> Hi All, We have bunch of postfix server to filter spam for incoming mail. These servers sits in front of actual mail server. For some reason mail delivery is slow because email is sitting in incoming queue for too long. Most of these files have 0700 permission. I have read http://www.postfix.org/QSHAPE_README.html#incoming_queue . In the document it stated that : "The main factors slowing down the queue manager are disk I/O and lookup queries to the trivial-rewrite service. " In my case, I think the disk and lookup queries are fast enough. Lookup queries is done locally from hash file. I also don't think there is no correlation between disk IO utilization and the number of email in incoming queue. postfix spool directory mounted on reiserfs partition with notail and noatime. I asked postfix mailing list because I thought this is something to do with postfix. But their replay was short and sweet : 'Nuff said, you are using Mailscanner. Stop using Mailscanner and the problem will go away. Mailscanner has a long history of causing various similar issues, it is not supported here. Can anyone give me suggestion on how to speed this up ? Anyone experiencing same issue with mailscanner ? Disk IO Graph : IO Graph http://img91.imageshack.us/my.php?image=vscan4diskiozy4.png Postfix Graph : Postfix Graph http://img230.imageshack.us/my.php?image=vscan4queueux2.png Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/348cebbe/attachment.html From ssilva at sgvwater.com Wed Nov 7 00:21:23 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 00:21:35 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <011301c820ce$aa65cfd0$6402a8c0@dell> References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: on 11/6/2007 3:42 PM Arthur Sherman spake the following: > I posted this question in several lists and, amazingly, I got badly flamed. > :) > Many demanded the IP or domain to block, even threatened me to block my own > mail servers, which never sent a spam. > Not all though, actually some of gurus were quite understanding... > > Let me clear some points here: > > The services my company provides are legit spam-proof etc hosting services. > The client turned to us for because of quality he believes we have in > building mailers, i.e. technical expertise netto. > Legally, he has the right to do such mailing in Israel. > His mailing will be in Israel only, and has working Unsubscribe option - we > are scrupulous about this part. > His DB was legally bought from legit provider, not us also. I checked the DB > is legit here. > His servers will be neither in our data center, nor in our IP range, as he > builds his own data center, which will host his servers. > > Discussing this in open forum was made in effort to openly discuss the > business need, and find a solution to make him as least spammer as possible, > while still allowing him the functonality he seeks. > Don't you deny the business need for big email volumes? > He will become a legit "marketing"-mailing service provider in Israel. > We better start thinking in this direction also, the sooner the better - the > market demands... > > Thank you > Arthur > > I'm sorry, but even though I believe in Opt-in mailing, I do not believe in Opt-out mailings, no matter how "legitimate" someone thinks it might be. Opt-in means I asked you to send me something. Opt-out means you sent something I did not ask for, and even if you have a working unsubscribe, I still didn't ask for it. If I moved into your house without your permission, but offered to leave if you asked me to, would you be alright with it? If it is from a purchased list, it will be an unsolicited message. 1 million a day will be bulk e-mail. So unsolicited + bulk e-mail = UCE = spam ! You can't argue with the math. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 00:43:12 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 00:43:26 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: on 11/6/2007 4:21 PM Scott Silva spake the following: > on 11/6/2007 3:42 PM Arthur Sherman spake the following: >> I posted this question in several lists and, amazingly, I got badly >> flamed. >> :) >> Many demanded the IP or domain to block, even threatened me to block >> my own >> mail servers, which never sent a spam. >> Not all though, actually some of gurus were quite understanding... >> >> Let me clear some points here: >> >> The services my company provides are legit spam-proof etc hosting >> services. >> The client turned to us for because of quality he believes we have in >> building mailers, i.e. technical expertise netto. >> Legally, he has the right to do such mailing in Israel. >> His mailing will be in Israel only, and has working Unsubscribe option >> - we >> are scrupulous about this part. >> His DB was legally bought from legit provider, not us also. I checked >> the DB >> is legit here. >> His servers will be neither in our data center, nor in our IP range, >> as he >> builds his own data center, which will host his servers. >> >> Discussing this in open forum was made in effort to openly discuss the >> business need, and find a solution to make him as least spammer as >> possible, >> while still allowing him the functonality he seeks. >> Don't you deny the business need for big email volumes? >> He will become a legit "marketing"-mailing service provider in Israel. >> We better start thinking in this direction also, the sooner the better >> - the >> market demands... >> >> Thank you >> Arthur >> >> > I'm sorry, but even though I believe in Opt-in mailing, I do not believe > in Opt-out mailings, no matter how "legitimate" someone thinks it might be. > Opt-in means I asked you to send me something. Opt-out means you sent > something I did not ask for, and even if you have a working unsubscribe, > I still didn't ask for it. If I moved into your house without your > permission, but offered to leave if you asked me to, would you be > alright with it? > > If it is from a purchased list, it will be an unsolicited message. > 1 million a day will be bulk e-mail. > So unsolicited + bulk e-mail = UCE = spam ! > > You can't argue with the math. > > s/UCE/UBE -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From steve.swaney at fsl.com Wed Nov 7 00:55:43 2007 From: steve.swaney at fsl.com (Steve Swaney) Date: Wed Nov 7 00:56:09 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <011301c820ce$aa65cfd0$6402a8c0@dell> References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: <47310D0F.4010709@fsl.com> I happen to agree with you and we do provide services to legit mailers - once we make sure they are legit :) Steve Arthur Sherman wrote: > I posted this question in several lists and, amazingly, I got badly flamed. > :) > Many demanded the IP or domain to block, even threatened me to block my own > mail servers, which never sent a spam. > Not all though, actually some of gurus were quite understanding... > > Let me clear some points here: > > The services my company provides are legit spam-proof etc hosting services. > The client turned to us for because of quality he believes we have in > building mailers, i.e. technical expertise netto. > Legally, he has the right to do such mailing in Israel. > His mailing will be in Israel only, and has working Unsubscribe option - we > are scrupulous about this part. > His DB was legally bought from legit provider, not us also. I checked the DB > is legit here. > His servers will be neither in our data center, nor in our IP range, as he > builds his own data center, which will host his servers. > > Discussing this in open forum was made in effort to openly discuss the > business need, and find a solution to make him as least spammer as possible, > while still allowing him the functonality he seeks. > Don't you deny the business need for big email volumes? > He will become a legit "marketing"-mailing service provider in Israel. > We better start thinking in this direction also, the sooner the better - the > market demands... > > Thank you > Arthur > > > From lists at sequestered.net Wed Nov 7 01:00:02 2007 From: lists at sequestered.net (Jay Chandler) Date: Wed Nov 7 01:00:38 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47310132.3030901@gmail.com> References: <47310132.3030901@gmail.com> Message-ID: <47310E12.1010501@sequestered.net> R Wahyudi wrote: > > But their replay was short and sweet : > > 'Nuff said, you are using Mailscanner. Stop using Mailscanner and the > problem will go away. Mailscanner has a long history of causing various > similar issues, it is not supported here. > Ah, the sweet smell of misleading bullshit. I've been running Postfix with MailScanner for two years, both here and as a University mail handler for half a million messages a day. No worries. Latest versions of both are ALWAYS a good plan, but past that I've never seen an instance of corruption or delay based on this model. -- Jay Chandler / KB1JWQ Living Legend / Systems Exorcist Today's Excuse: divide-by-zero error From arturs at netvision.net.il Wed Nov 7 01:07:04 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Wed Nov 7 01:08:34 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <012d01c820da$8277ae60$6402a8c0@dell> > I'm sorry, but even though I believe in Opt-in mailing, I do > not believe in Opt-out mailings, no matter how "legitimate" > someone thinks it might be. > Opt-in means I asked you to send me something. Opt-out means > you sent something I did not ask for, and even if you have a > working unsubscribe, I still didn't ask for it. If I moved > into your house without your permission, but offered to leave > if you asked me to, would you be alright with it? > > If it is from a purchased list, it will be an unsolicited message. > 1 million a day will be bulk e-mail. > So unsolicited + bulk e-mail = UCE = spam ! > > You can't argue with the math. Sounds confident, no words. Thanks Arthur From hvdkooij at vanderkooij.org Wed Nov 7 01:19:57 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 01:20:24 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <4730362E.4040606@filmakademie.de> References: <4730362E.4040606@filmakademie.de> Message-ID: <473112BD.50100@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 G?tz Reinicke wrote: > Hi, > > I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 mailserver > with the latest perl (perl-5.8.8-10.el5_0.2) rpm from Red Hat, but there > are a lot of conflicts with file from package installed by Mailscanner. > > e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > So what may I do? Force the update of the Red Hat perl.rpm? > > Any suggestions?? > > Thanks for hints and tips and for Mailscanner anyway! My approach was to pick the mailscanner rpm out of the total installer. Then see what it started to nag about when I try to install it manually and install all the additional packages from rpmforge. In effect it means one has to skip the use of the install script on Centos 5 and do a few things by hand. But it prevented me from getting any conflicts like you show now. I find the use of the --force option not a good way. Granted it is not as bad as `make love --force` but still .... Hmm. after this double shift I will go to bed now and see if I can make the few changes to the mailscanner spc file so it works with rpmforge later this week. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMRK7BvzDRVjxmYERAt72AJ44Tn79a9p0J7TQlERKdJrQmkBjGgCeMdww NrrYvKJM614znhnPnaQZYL8= =jTf2 -----END PGP SIGNATURE----- From rwahyudi at gmail.com Wed Nov 7 02:25:19 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Wed Nov 7 02:23:30 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47310E12.1010501@sequestered.net> References: <47310132.3030901@gmail.com> <47310E12.1010501@sequestered.net> Message-ID: <4731220F.6080705@gmail.com> Thanks for your reply Jay, On average, how much email sitting on your postfix incoming queue ? I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. I dont see any changes between these version of postfix / mailscanner when it comes to processing incoming queue, and I dont see any reason for current mailscanner/postfix will fix this. Anyway .. I will upgrade postfix + Mailscanner to latest version, and I will post an update. Regards, Rianto Wahyudi Jay Chandler wrote: > R Wahyudi wrote: > > >> >> But their replay was short and sweet : >> >> 'Nuff said, you are using Mailscanner. Stop using Mailscanner and >> the >> problem will go away. Mailscanner has a long history of causing >> various >> similar issues, it is not supported here. >> > > > Ah, the sweet smell of misleading bullshit. > > I've been running Postfix with MailScanner for two years, both here > and as a University mail handler for half a million messages a day. > > No worries. > > Latest versions of both are ALWAYS a good plan, but past that I've > never seen an instance of corruption or delay based on this model. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/aa059ac4/attachment.html From whatisee1 at yahoo.com Wed Nov 7 04:13:03 2007 From: whatisee1 at yahoo.com (W S) Date: Wed Nov 7 04:13:05 2007 Subject: How-to verify valid internal email addresses --- up front Message-ID: <13601.11482.qm@web57605.mail.re1.yahoo.com> Folks, I have this Hub, up in front, which process all incoming emails (running Postfix and MailScanner). This Hub is bluntly accepting ALL emails from outside and runs every single email thru MailScanner (ClamAV, Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal email server. Now, is there any way to build some sort of MAP or database file (btree, hash ) from valid internal email addresses and set it on the Hub in order to reduce the queue? Regards, --W.S. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071106/8074161b/attachment.html From mailscanner at mckerrs.net Wed Nov 7 05:04:13 2007 From: mailscanner at mckerrs.net (Mailscanner Admin) Date: Wed Nov 7 05:03:47 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <23965602.121194411853236.JavaMail.root@zimbra.mckerrs.net> What is the other internal email server ? I run zimbra as my 'internal' email server and I configured postfix to use ldap and perform lookups directly to zimbra's directory. Works very well for me, but I'm only receiving around 500 emails per day. I have seen scripts to collect AD accounts from exchange and create a map file. Cheers. ----- Original Message ----- From: "W S" To: mailscanner@lists.mailscanner.info, whatisee1@yahoo.com Sent: Wednesday, November 7, 2007 2:13:03 PM (GMT+1000) Australia/Brisbane Subject: How-to verify valid internal email addresses --- up front Folks, I have this Hub, up in front, which process all incoming emails (running Postfix and MailScanner). This Hub is bluntly accepting ALL emails from outside and runs every single email thru MailScanner (ClamAV, Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal email server. Now, is there any way to build some sort of MAP or database file (btree, hash ) from valid internal email addresses and set it on the Hub in order to reduce the queue? Regards, --W.S. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/e317cfa4/attachment.html From ram at netcore.co.in Wed Nov 7 06:39:48 2007 From: ram at netcore.co.in (ram) Date: Wed Nov 7 06:39:53 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: <1194417588.15925.12.camel@localhost.localdomain> On Tue, 2007-11-06 at 21:29 +0200, Arthur Sherman wrote: > Hi, > > A client asked me to build for him a mail solution, capable of sending up to > 1 milllion emails a day, while each email doesn't exceed 50KB in size. > > How do I calculate: > 1) how many servers > 2) how do I calculate the above > 3) is there any max emails a day from IP/domain, which triggers black and > blocklists > 4) what is your recommended software solution > > On this stage, most distribution would be in single country. > > Thanks in advance > > Arthur > > This is more of a MTA question. Dont really need MailScanner. Using a postfix MTA my outgoing server (singe Xeon , 3.5GB RAM ) is able to send 200k mails a day without much issues. This is not a dedicated machine too , it has other roles too Thanks Ram From prandal at herefordshire.gov.uk Wed Nov 7 07:14:06 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 7 07:14:20 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <293749.32785.qm@web57611.mail.re1.yahoo.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD09E7@HC-MBX02.herefordshire.gov.uk> Which version of SpamAssassin? Do you run sa-update regularly? Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of W S Sent: 06 November 2007 21:30 To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com Subject: MailScanner + Postfix => very slow... Hi, I'm running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red Hat ES 4. The system is processing over 200,000 emails per day, BUT most of emails (about 95%) are junk / spam and if queue gets over 10,000 it's freezes all delivery process. Are there any parameters that I can tweak to speed-up the delivery process? Thanks, --WS __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/0c721df9/attachment.html From hvdkooij at vanderkooij.org Wed Nov 7 08:52:16 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 08:52:41 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4731220F.6080705@gmail.com> References: <47310132.3030901@gmail.com> <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> Message-ID: <47317CC0.5070806@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 R Wahyudi wrote: > Thanks for your reply Jay, > > On average, how much email sitting on your postfix incoming queue ? > I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. > > I dont see any changes between these version of postfix / mailscanner > when it comes to processing incoming queue, > and I dont see any reason for current mailscanner/postfix will fix this. > > Anyway .. I will upgrade postfix + Mailscanner to latest version, and I > will post an update. Also add relevant details. Like how you do the handover from postfix to mailscanner exactly. What does it show in the logs? if you can put a serious section of log somewhere then it might show what actually goes on. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMXy/BvzDRVjxmYERAu+XAJ9GpVdengy3kbpCy8NG0YSISg/88QCgr6bK BiSyjrPJg9ys69Sf11bVG7A= =yKYX -----END PGP SIGNATURE----- From J.Ede at birchenallhowden.co.uk Wed Nov 7 09:13:40 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 09:15:04 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> References: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA22@server02.bhl.local> You might want to look at http://www.postfix.org/ADDRESS_VERIFICATION_README.html I use the reject_unverified_recipient and its made a huge difference. Jason From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of W S [whatisee1@yahoo.com] Sent: 07 November 2007 04:13 To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com Subject: How-to verify valid internal email addresses --- up front Folks, I have this Hub, up in front, which process all incoming emails (running Postfix and MailScanner). This Hub is bluntly accepting ALL emails from outside and runs every single email thru MailScanner (ClamAV, Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal email server. Now, is there any way to build some sort of MAP or database file (btree, hash?) from valid internal email addresses and set it on the Hub in order to reduce the queue? Regards, --W.S. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/c0784938/attachment.html From J.Ede at birchenallhowden.co.uk Wed Nov 7 09:15:07 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 09:17:37 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <293749.32785.qm@web57611.mail.re1.yahoo.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA24@server02.bhl.local> Apart from upgrading the versions... Do you reject any mails at smtp level by using blacklists such as spamhaus, spamcop etc? or have you looked at using greylisting and/or reject_unverified_recipient in order to reduce the amount of actual processing of emails? There's no point accepting and scanning an email if its not a valid address that can be delivered. Jason ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of W S [whatisee1@yahoo.com] Sent: 06 November 2007 21:30 To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com Subject: MailScanner + Postfix => very slow... Hi, I?m running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red Hat ES 4. The system is processing over 200,000 emails per day, BUT most of emails (about 95%) are junk / spam and if queue gets over 10,000 it?s freezes all delivery process. Are there any parameters that I can tweak to speed-up the delivery process? Thanks, --WS __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/5f27a3c3/attachment.html From glenn.steen at gmail.com Wed Nov 7 10:15:28 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 10:15:32 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4731220F.6080705@gmail.com> References: <47310132.3030901@gmail.com> <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> Message-ID: <223f97700711070215pa749b94u58eda776ef2989bf@mail.gmail.com> On 07/11/2007, R Wahyudi wrote: > > Thanks for your reply Jay, > > On average, how much email sitting on your postfix incoming queue ? > I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. > > I dont see any changes between these version of postfix / mailscanner when > it comes to processing incoming queue, > and I dont see any reason for current mailscanner/postfix will fix this. > > Anyway .. I will upgrade postfix + Mailscanner to latest version, and I > will post an update. > Well, since these are GW systems... It might not be them slowing things down. It just might be "on the receiving end". As is, we know way to little about your topology/infrastructure/software/versions to be able to tell anything for sure. Is it the same for all gateways, or is it just the one? What does the logs (mail as well as system) say? What performance tweaking have you done so far? Since this is all _after_ MailScanner is done, it is a bit OT, but ... post up some info and some logs and we'll see what we can do:-). BTW, do you use any milters? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Wed Nov 7 10:28:57 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 10:29:00 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> References: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <223f97700711070228n3813ddf0k58dab082c76e0b92@mail.gmail.com> On 07/11/2007, W S wrote: > Folks, > I have this Hub, up in front, which process all incoming emails (running > Postfix and MailScanner). This Hub is bluntly accepting ALL emails from > outside and runs every single email thru MailScanner (ClamAV, Spamassassin, > RBL, DNSBL etc) and relaying all JUNK to another internal email server. > Now, is there any way to build some sort of MAP or database file (btree, > hash?) from valid internal email addresses and set it on the Hub in order to > reduce the queue? > Regards, > --W.S. > Apart from the excellent advice you already got, there is a bit on this in the wiki/MAQ: http://wiki.mailscanner.info/doku.php?id=maq:index#using_with_exchange_domino_etc http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:reject_non_existent_users#rejecting_unknown_non-local_users (watch out for linewrapping... two separate links above;-). These methods are mostly for situations where you cannot get the destination MTA to reliably reject invalid/unknown users, or where you don't want to put the pressure of recipient address verification (as described in the link Jay gave you) on the downstream server. Inventing your own method via ldapsearch or whatever is usually trivial... All the map need be is a list of valid email addresses and a "1" or "OK" or similar (the "key" doesn't really matter, just need be there:-) ... something like: user1@example.net 1 user2@example.net 1 ... userN@example.net 1 ... hash that, use it in the relevant recipient_maps setting ... and you are good to go;-) ... The links above might be a bit more verbose:-D Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Wed Nov 7 10:34:28 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 10:34:31 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <223f97700711070228n3813ddf0k58dab082c76e0b92@mail.gmail.com> References: <13601.11482.qm@web57605.mail.re1.yahoo.com> <223f97700711070228n3813ddf0k58dab082c76e0b92@mail.gmail.com> Message-ID: <223f97700711070234w3a2cb1d4ya4b1d7a1d09f26fe@mail.gmail.com> On 07/11/2007, Glenn Steen wrote: (snip) > described in the link Jay gave you) on the downstream server. s/Jay/Jason/ ... Sorry...:) Just so you know... a requirement for using Postfix is that on e continually replies to ones own emails...:-):-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From Andreas.Doerfler at kempten.de Wed Nov 7 10:53:11 2007 From: Andreas.Doerfler at kempten.de (=?iso-8859-1?Q?D=F6rfler_Andreas?=) Date: Wed Nov 7 10:54:01 2007 Subject: whitelisted spam In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA24@server02.bhl.local> Message-ID: hey there, since a few weeks i?m running into a strange problem. a specific kind of (high sa score) spammail is very often marked as whitelisted, but none of the recipients is on the whitelist. is there any way to see what whitelist entry ms is using to mark it that way ? greetings andy From gerard at seibercom.net Wed Nov 7 11:15:41 2007 From: gerard at seibercom.net (Gerard Seibert) Date: Wed Nov 7 11:15:02 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4731220F.6080705@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> Message-ID: <20071107061527.DB22.GERARD@seibercom.net> On Tuesday November 06, 2007 at 09:25:19 (PM) R Wahyudi wrote: > On average, how much email sitting on your postfix incoming queue ? > I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. > > I dont see any changes between these version of postfix / mailscanner > when it comes to processing incoming queue, > and I dont see any reason for current mailscanner/postfix will fix this. > > Anyway .. I will upgrade postfix + Mailscanner to latest version, and I > will post an update. It would really help if you could post the configuration files. On the postfix side, doing a: 'postconf -n' will produce the needed output. Post that here with all the relevant mailscanner settings. As always, using the latest versions of both programs is highly recommended. There have been some changes in Postfix from ver. 2.3.x to 2.4.x and it would behoove you to study up on them. Don't go the ver. 2.5.x route as it is still a beta. Also, please post your logs. They are invaluable in these situations. -- Gerard From arturs at netvision.net.il Wed Nov 7 11:37:42 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Wed Nov 7 11:39:13 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <1194417588.15925.12.camel@localhost.localdomain> Message-ID: <01b901c82132$9c0ba770$6402a8c0@dell> thanks > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of ram > Sent: Wednesday, November 07, 2007 8:40 AM > To: MailScanner discussion > Subject: Re: Your recommendation please: big volume mail solution > > On Tue, 2007-11-06 at 21:29 +0200, Arthur Sherman wrote: > > Hi, > > > > A client asked me to build for him a mail solution, capable > of sending > > up to > > 1 milllion emails a day, while each email doesn't exceed > 50KB in size. > > > > How do I calculate: > > 1) how many servers > > 2) how do I calculate the above > > 3) is there any max emails a day from IP/domain, which > triggers black > > and blocklists > > 4) what is your recommended software solution > > > > On this stage, most distribution would be in single country. > > > > Thanks in advance > > > > Arthur > > > > > This is more of a MTA question. Dont really need MailScanner. > > Using a postfix MTA my outgoing server (singe Xeon , 3.5GB > RAM ) is able to send 200k mails a day without much issues. > > This is not a dedicated machine too , it has other roles too > > Thanks > Ram > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From goetz.reinicke at filmakademie.de Wed Nov 7 12:43:44 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Wed Nov 7 12:46:41 2007 Subject: mailsubject modified, but no information in the header Message-ID: <4731B300.2030302@filmakademie.de> Hi, I got a mail whose subject line was modified to be a spam. But in the mail header I have no information, why this message was marked as spam. I do remember that I can set an option to add this information to the header ... Forthormore, some users have also there own spamassassin settings (e.g. the global spamscore to drop spam is 8, but some users want tohave it set to 5 or less ...) The mail I mentioned was marked by this settings as no spam .... Any hints to help me solving this kind of problem? Which settings or may I check? Thanks and best regards! G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From glenn.steen at gmail.com Wed Nov 7 12:55:07 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 12:55:10 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <4731B300.2030302@filmakademie.de> References: <4731B300.2030302@filmakademie.de> Message-ID: <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> On 07/11/2007, G?tz Reinicke wrote: > Hi, > > I got a mail whose subject line was modified to be a spam. > > But in the mail header I have no information, why this message was > marked as spam. > > I do remember that I can set an option to add this information to the > header ... > > Forthormore, some users have also there own spamassassin settings (e.g. > the global spamscore to drop spam is 8, but some users want tohave it > set to 5 or less ...) > > The mail I mentioned was marked by this settings as no spam .... > > Any hints to help me solving this kind of problem? Which settings or may > I check? > > Thanks and best regards! > > G?tz Hello G?tz, A few examples say a lot more than a lot of words.... Chould you show us the relevant headers (Subject: and the MailScanner ones)? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From ram at netcore.co.in Wed Nov 7 11:02:09 2007 From: ram at netcore.co.in (ram) Date: Wed Nov 7 13:00:46 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47310132.3030901@gmail.com> References: <47310132.3030901@gmail.com> Message-ID: <1194433329.3372.14.camel@localhost.localdomain> On Wed, 2007-11-07 at 11:05 +1100, R Wahyudi wrote: > Hi All, > > We have bunch of postfix server to filter spam for incoming mail. > These servers sits in front of actual mail server. > > For some reason mail delivery is slow because email is sitting in > incoming queue > for too long. Most of these files have 0700 permission. > > I have read http://www.postfix.org/QSHAPE_README.html#incoming_queue. > In the document it stated that : > > "The main factors slowing down the queue manager are disk I/O and > lookup queries to the trivial-rewrite service. " > > In my case, I think the disk and lookup queries are fast enough. > Lookup queries is done locally from > hash file. I also don't think there is no correlation between disk IO > utilization and the number of email in incoming queue. > postfix spool directory mounted on reiserfs partition with notail and > noatime. Please give more details How many mails do you receive per hour , what checks do you at MTA etc. How many mails really go into hold queue per hour What is the delay in mails you are seeing Thanks Ram From goetz.reinicke at filmakademie.de Wed Nov 7 13:08:37 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-1?Q?G=F6tz_Reinicke?=) Date: Wed Nov 7 13:12:30 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> References: <4731B300.2030302@filmakademie.de> <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> Message-ID: <4731B8D5.2050504@filmakademie.de> Glenn Steen schrieb: > On 07/11/2007, G?tz Reinicke wrote: >> Hi, >> >> I got a mail whose subject line was modified to be a spam. >> >> But in the mail header I have no information, why this message was >> marked as spam. >> >> I do remember that I can set an option to add this information to the >> header ... >> >> Forthormore, some users have also there own spamassassin settings (e.g. >> the global spamscore to drop spam is 8, but some users want tohave it >> set to 5 or less ...) >> >> The mail I mentioned was marked by this settings as no spam .... >> >> Any hints to help me solving this kind of problem? Which settings or may >> I check? >> >> Thanks and best regards! >> >> G?tz > Hello G?tz, > > A few examples say a lot more than a lot of words.... Chould you show > us the relevant headers (Subject: and the MailScanner ones)? Hi, thanks for trieing to help. The Subject looks after the mailscannerscanning like this (including the ""): {Spam?} "Status-M?glichkeiten-Zukunft von Picasso" The header looks like this: Return-Path: Received: from NB10356 (c-134-96-139.s.dial.de.ignite.net [62.134.96.139]) (authenticated bits=0) by mail.filmakademie.de (8.13.8/8.13.8) with ESMTP id lA78kE0C021105 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO); Wed, 7 Nov 2007 09:46:18 +0100 From: "Uwe Kurz" To: "Goetz Reinicke" , "Oliver Ruof" , "Benjamin Schreiber" , "Reiner Pfeiffer" Subject: {Spam?} =?iso-8859-1?Q?_=22Status-M=F6glichkeiten-Zukunft_von_Picasso=22?= Date: Wed, 7 Nov 2007 09:46:13 +0100 Message-ID: <000001c8211a$aa6f3420$8b60863e@NB10356> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C82123.0C339C20" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 X-Filmakademie-MailScanner-Information: Please contact the ISP for more information X-Filmakademie-MailScanner: Found to be clean X-Filmakademie-MailScanner-From: uwe.kurz@filmakademie.de -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From glenn.steen at gmail.com Wed Nov 7 13:35:34 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 13:35:37 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <4731B8D5.2050504@filmakademie.de> References: <4731B300.2030302@filmakademie.de> <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> <4731B8D5.2050504@filmakademie.de> Message-ID: <223f97700711070535m3c2799a9v8af5c2ecb2f6e037@mail.gmail.com> On 07/11/2007, G?tz Reinicke wrote: > Glenn Steen schrieb: > > On 07/11/2007, G?tz Reinicke wrote: > >> Hi, > >> > >> I got a mail whose subject line was modified to be a spam. > >> > >> But in the mail header I have no information, why this message was > >> marked as spam. > >> > >> I do remember that I can set an option to add this information to the > >> header ... > >> > >> Forthormore, some users have also there own spamassassin settings (e.g. > >> the global spamscore to drop spam is 8, but some users want tohave it > >> set to 5 or less ...) > >> > >> The mail I mentioned was marked by this settings as no spam .... > >> > >> Any hints to help me solving this kind of problem? Which settings or may > >> I check? > >> > >> Thanks and best regards! > >> > >> G?tz > > Hello G?tz, > > > > A few examples say a lot more than a lot of words.... Chould you show > > us the relevant headers (Subject: and the MailScanner ones)? > > Hi, > > thanks for trieing to help. > > The Subject looks after the mailscannerscanning like this (including the > ""): > > {Spam?} "Status-M?glichkeiten-Zukunft von Picasso" > > The header looks like this: > > > Return-Path: > Received: from NB10356 (c-134-96-139.s.dial.de.ignite.net [62.134.96.139]) > (authenticated bits=0) > by mail.filmakademie.de (8.13.8/8.13.8) with ESMTP id lA78kE0C021105 > (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO); > Wed, 7 Nov 2007 09:46:18 +0100 > From: "Uwe Kurz" > To: "Goetz Reinicke" , > "Oliver Ruof" , > "Benjamin Schreiber" , > "Reiner Pfeiffer" > Subject: {Spam?} > =?iso-8859-1?Q?_=22Status-M=F6glichkeiten-Zukunft_von_Picasso=22?= > Date: Wed, 7 Nov 2007 09:46:13 +0100 > Message-ID: <000001c8211a$aa6f3420$8b60863e@NB10356> > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----=_NextPart_000_0001_01C82123.0C339C20" > X-Priority: 3 (Normal) > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook, Build 10.0.2627 > Importance: Normal > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > X-Filmakademie-MailScanner-Information: Please contact the ISP for more > information > X-Filmakademie-MailScanner: Found to be clean > X-Filmakademie-MailScanner-From: uwe.kurz@filmakademie.de > And what log entries do you have for that message? Do you have http://www.mailscanner.info/MailScanner.conf.index.html#Always%20Include%20SpamAssassin%20Report set to "yes"? What BLs do you have defined in MailScanner? If you have ANY AT ALL, a hit on these will render the message to be marked as spam, regardless of what SpamAssassin thinks about it. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From lhaig at haigmail.com Wed Nov 7 14:41:30 2007 From: lhaig at haigmail.com (Lance Haig) Date: Wed Nov 7 14:41:36 2007 Subject: Mailscanner, webhosting, and e-mail on an ubuntu server. Message-ID: <4731CE9A.4070103@haigmail.com> Does anyone do that here currently? I want to set-up a server for family and people and I would like to have an all in one box to do it on. I found this http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu but that just covers the MailScanner bit. I would appreciate any information. Ta Lance From lhaig at haigmail.com Wed Nov 7 14:49:55 2007 From: lhaig at haigmail.com (Lance Haig) Date: Wed Nov 7 14:49:58 2007 Subject: Bongo Project Message-ID: <4731D093.9010905@haigmail.com> Hi Julian, I am part of the team working on the Bongo Project Mail system http://www.bongo-project.org I suggested to the developers that we try to create an agent in our system that integrates MailScanner into our SMTP agent. The guy who wrote the SMTP agent seemed keen to do this and I was wondering if you had any documentation for developers that I could pass on? I know that MS uses a queue based system and said so to the guy. We currently have a antispam agent that uses spamassasin as the engine so I don't think it would be very difficult to change that to accommodate MS. Any guidance that you have for me to pass on to the developers would be great. Regards Lance From MailScanner at ecs.soton.ac.uk Wed Nov 7 15:05:04 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 7 15:05:16 2007 Subject: Bongo Project In-Reply-To: <4731D093.9010905@haigmail.com> References: <4731D093.9010905@haigmail.com> Message-ID: <4731D420.5050506@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 So you're basically wanting another MTA supported? This is quite a bit of work. If it uses one file per message, base it on the Sendmail.pm and SMDiskStore.pm. If it uses two files per message, base it on the Postfix or Exim support equivalents. I didn't write the Exim support, but I did write the Postfix support based on the Exim support, so you can do the same. The ZMailer support was written by someone else too, based on my Sendmail support. So other people have been down this road, you basically just need to implement the same API. Hope that helps get you started, Jules. Lance Haig wrote: > Hi Julian, > > I am part of the team working on the Bongo Project Mail system > http://www.bongo-project.org > > I suggested to the developers that we try to create an agent in our > system that integrates MailScanner into our SMTP agent. The guy > who wrote the SMTP agent seemed keen to do this and I was wondering > if you had any documentation for developers that I could pass on? > > I know that MS uses a queue based system and said so to the guy. > > We currently have a antispam agent that uses spamassasin as the > engine so I don't think it would be very difficult to change that > to accommodate MS. > > Any guidance that you have for me to pass on to the developers > would be great. > > Regards > > Lance > > > > > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMdQgEfZZRxQVtlQRAkORAKCCSHvMWDCO//4/M+34tx5Vxd5RyACeP5q9 O5HDHjf5xy5P05RpzQEkKLM= =qfwv -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From goetz.reinicke at filmakademie.de Wed Nov 7 14:59:44 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Wed Nov 7 15:09:49 2007 Subject: very old messages in /var/spool/mqueue.in Message-ID: <4731D2E0.8010604@filmakademie.de> Hi, MailScanner tells me, that it has still a lot (for our system) of messages waiting: New Batch: Found 2811 messages waiting in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot from 2006. A lot of messages ar rubbish or spam. Waht to do with the messages or how to monitor which are still goom ham mails? As usual, thanks for any hints! Regards G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From sailer at bnl.gov Wed Nov 7 15:17:39 2007 From: sailer at bnl.gov (Tim Sailer) Date: Wed Nov 7 15:17:50 2007 Subject: Mailscanner, webhosting, and e-mail on an ubuntu server. In-Reply-To: <4731CE9A.4070103@haigmail.com> References: <4731CE9A.4070103@haigmail.com> Message-ID: <20071107151738.GA6705@bnl.gov> On Wed, Nov 07, 2007 at 02:41:30PM +0000, Lance Haig wrote: > Does anyone do that here currently? > > I want to set-up a server for family and people and I would like to have > an all in one box to do it on. > > I found this > http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu > > but that just covers the MailScanner bit. > > I would appreciate any information. I do this. Contact me offlist, tps {at} mail{.}buoy{.}com Tim From roland at inbox4u.de Wed Nov 7 15:14:48 2007 From: roland at inbox4u.de (Ehle, Roland) Date: Wed Nov 7 15:19:25 2007 Subject: AW: mailsubject modified, but no information in the header In-Reply-To: <4731B8D5.2050504@filmakademie.de> References: <4731B300.2030302@filmakademie.de> <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com>, <4731B8D5.2050504@filmakademie.de> Message-ID: <4D1CD0994309F84BA83DF998BF0075AF2BC3E8BB3A@ts-dc2.TS-Webarts.local> Hi G?tz, it seems to me, as if you have RBL checks enabled in MailScanner.conf. The host, from which you received the mail is listed in Spamhaus. Regards, Roland ________________________________________ Von: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] im Auftrag von G?tz Reinicke [goetz.reinicke@filmakademie.de] Gesendet: Mittwoch, 7. November 2007 14:08 An: MailScanner discussion Betreff: Re: mailsubject modified, but no information in the header Glenn Steen schrieb: > On 07/11/2007, G?tz Reinicke wrote: >> Hi, >> >> I got a mail whose subject line was modified to be a spam. >> >> But in the mail header I have no information, why this message was >> marked as spam. >> >> I do remember that I can set an option to add this information to the >> header ... >> >> Forthormore, some users have also there own spamassassin settings (e.g. >> the global spamscore to drop spam is 8, but some users want tohave it >> set to 5 or less ...) >> >> The mail I mentioned was marked by this settings as no spam .... >> >> Any hints to help me solving this kind of problem? Which settings or may >> I check? >> >> Thanks and best regards! >> >> G?tz > Hello G?tz, > > A few examples say a lot more than a lot of words.... Chould you show > us the relevant headers (Subject: and the MailScanner ones)? Hi, thanks for trieing to help. The Subject looks after the mailscannerscanning like this (including the ""): {Spam?} "Status-M?glichkeiten-Zukunft von Picasso" The header looks like this: Return-Path: Received: from NB10356 (c-134-96-139.s.dial.de.ignite.net [62.134.96.139]) (authenticated bits=0) by mail.filmakademie.de (8.13.8/8.13.8) with ESMTP id lA78kE0C021105 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO); Wed, 7 Nov 2007 09:46:18 +0100 From: "Uwe Kurz" To: "Goetz Reinicke" , "Oliver Ruof" , "Benjamin Schreiber" , "Reiner Pfeiffer" Subject: {Spam?} =?iso-8859-1?Q?_=22Status-M=F6glichkeiten-Zukunft_von_Picasso=22?= Date: Wed, 7 Nov 2007 09:46:13 +0100 Message-ID: <000001c8211a$aa6f3420$8b60863e@NB10356> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C82123.0C339C20" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 X-Filmakademie-MailScanner-Information: Please contact the ISP for more information X-Filmakademie-MailScanner: Found to be clean X-Filmakademie-MailScanner-From: uwe.kurz@filmakademie.de -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ---------------------------------------------------------- Diese Nachricht wurde von mailMind(R) auf Viren und andere gefaehrliche Inhalte untersucht und ist sauber. --- mailMind(R) - we have your Mailsecurity in mind! http://www.mailmind.de --- From glenn.steen at gmail.com Wed Nov 7 15:15:18 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 15:21:46 2007 Subject: Bongo Project In-Reply-To: <4731D420.5050506@ecs.soton.ac.uk> References: <4731D093.9010905@haigmail.com> <4731D420.5050506@ecs.soton.ac.uk> Message-ID: <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> On 07/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > So you're basically wanting another MTA supported? > This is quite a bit of work. > If it uses one file per message, base it on the Sendmail.pm and > SMDiskStore.pm. > If it uses two files per message, base it on the Postfix or Exim > support equivalents. > Um.... Shouldn't that be the other way around? Whatwith Sendmail using a qf/df pair, while exim and PF use a single file....? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From sailer at bnl.gov Wed Nov 7 15:39:22 2007 From: sailer at bnl.gov (Tim Sailer) Date: Wed Nov 7 15:39:32 2007 Subject: Bongo Project In-Reply-To: <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> References: <4731D093.9010905@haigmail.com> <4731D420.5050506@ecs.soton.ac.uk> <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> Message-ID: <20071107153922.GA8002@bnl.gov> On Wed, Nov 07, 2007 at 04:15:18PM +0100, Glenn Steen wrote: > On 07/11/2007, Julian Field wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > So you're basically wanting another MTA supported? > > This is quite a bit of work. > > If it uses one file per message, base it on the Sendmail.pm and > > SMDiskStore.pm. > > If it uses two files per message, base it on the Postfix or Exim > > support equivalents. > > > Um.... Shouldn't that be the other way around? Whatwith Sendmail using > a qf/df pair, while exim and PF use a single file....? Exim uses pairs of files: 1IpPtc-0007MB-Tk-D 1IpPtc-0007MB-Tk-H 1IpX9y-000067-QB-D 1IpX9y-000067-QB-H Tim From glenn.steen at gmail.com Wed Nov 7 15:49:02 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 15:49:05 2007 Subject: Bongo Project In-Reply-To: <20071107153922.GA8002@bnl.gov> References: <4731D093.9010905@haigmail.com> <4731D420.5050506@ecs.soton.ac.uk> <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> <20071107153922.GA8002@bnl.gov> Message-ID: <223f97700711070749j6c5615f3jd6fda61f49fe2db6@mail.gmail.com> On 07/11/2007, Tim Sailer wrote: > On Wed, Nov 07, 2007 at 04:15:18PM +0100, Glenn Steen wrote: > > On 07/11/2007, Julian Field wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA1 > > > > > > So you're basically wanting another MTA supported? > > > This is quite a bit of work. > > > If it uses one file per message, base it on the Sendmail.pm and > > > SMDiskStore.pm. > > > If it uses two files per message, base it on the Postfix or Exim > > > support equivalents. > > > > > Um.... Shouldn't that be the other way around? Whatwith Sendmail using > > a qf/df pair, while exim and PF use a single file....? > > Exim uses pairs of files: > > 1IpPtc-0007MB-Tk-D 1IpPtc-0007MB-Tk-H > 1IpX9y-000067-QB-D 1IpX9y-000067-QB-H > > Tim Just shows how much I know about exim:-):-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Wed Nov 7 16:25:45 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 7 16:26:00 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4731D2E0.8010604@filmakademie.de> References: <4731D2E0.8010604@filmakademie.de> Message-ID: <4731E709.60501@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just delete them. If they are left behind, it's usually due to not having the other half of the qf/df file pair. G?tz Reinicke wrote: > Hi, > > MailScanner tells me, that it has still a lot (for our system) of > messages waiting: > > New Batch: Found 2811 messages waiting > > in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot > from 2006. A lot of messages ar rubbish or spam. > > Waht to do with the messages or how to monitor which are still goom > ham mails? > > As usual, thanks for any hints! > > Regards > > G?tz Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMecJEfZZRxQVtlQRArRwAKDK3O70CAnmtgCXG/bTgZDhU3ieNQCdF+Ib 5VMa+IRdO/iBettZTSfuvHU= =ZBk3 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From ssilva at sgvwater.com Wed Nov 7 17:04:24 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:04:49 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <473112BD.50100@vanderkooij.org> References: <4730362E.4040606@filmakademie.de> <473112BD.50100@vanderkooij.org> Message-ID: on 11/6/2007 5:19 PM Hugo van der Kooij spake the following: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > G?tz Reinicke wrote: >> Hi, >> >> I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 mailserver >> with the latest perl (perl-5.8.8-10.el5_0.2) rpm from Red Hat, but there >> are a lot of conflicts with file from package installed by Mailscanner. >> >> e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. >> >> So what may I do? Force the update of the Red Hat perl.rpm? >> >> Any suggestions?? >> >> Thanks for hints and tips and for Mailscanner anyway! > > My approach was to pick the mailscanner rpm out of the total installer. > Then see what it started to nag about when I try to install it manually > and install all the additional packages from rpmforge. > > In effect it means one has to skip the use of the install script on > Centos 5 and do a few things by hand. But it prevented me from getting > any conflicts like you show now. > > I find the use of the --force option not a good way. Granted it is not > as bad as `make love --force` but still .... > > Hmm. after this double shift I will go to bed now and see if I can make > the few changes to the mailscanner spc file so it works with rpmforge > later this week. > > Hugo. Or make a dummy mailscanner-foo rpm that pulls all the requires and mailscanner also -- that is if it ever makes it into rpmforge. That way Julian doesn't have to re-write his install script if the new spec makes it bork. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 17:17:15 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:17:33 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <47310D0F.4010709@fsl.com> References: <011301c820ce$aa65cfd0$6402a8c0@dell> <47310D0F.4010709@fsl.com> Message-ID: on 11/6/2007 4:55 PM Steve Swaney spake the following: > I happen to agree with you and we do provide services to legit mailers - > once we make sure they are legit :) > > Steve Being on the receiving end, I believe the only legit mailers are opt-in lists. And my blacklist is growing full with opt-out mailers. ;-) ....... Trips and falls from soapbox.... -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 17:28:34 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:29:24 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: on 11/6/2007 11:29 AM Arthur Sherman spake the following: > Hi, > > A client asked me to build for him a mail solution, capable of sending up to > 1 milllion emails a day, while each email doesn't exceed 50KB in size. > > How do I calculate: > 1) how many servers > 2) how do I calculate the above > 3) is there any max emails a day from IP/domain, which triggers black and > blocklists > 4) what is your recommended software solution > > On this stage, most distribution would be in single country. > > Thanks in advance > > Arthur > > From the MAQ; ***************** Volume: 1,750,000 messages/day (in the lab) Average Load: Average of 12 Hardware: Dual Xeon 3.2Ghz, 2 GB RAM, 4x 18 GB RAID-1 (using an HP DL380 G3) Software: Tao Linux 1.0, Postfix 2.0.18, SpamAssassin 3.02, Razor, DCC RBLs: XBL + SBL in MailScanner Virus Scanners: ClamAV, Sophos, BitDefender Notes: This performance was achieved in the lab, using random message sizes between 1 and 100 Kb. Please see the List archives for 'System capacity'. ***************** Volume : 770,000 messages per day Hardware: Dual Opteron, 4Gb RAM, SCSI disk Software: RedHat Enterprise Linux 4 Configuration: MailScanner 4.50 default setup with clamavmodule virus scanner, SpamAssassin, Razor, DCC, Sendmail ****************** Since you believe this isn't a spammer, you don't need any of the process hogs like antivirus or spamassassin, or even need mailscanner because the sender already knows what his content is ;-) and should be able to achieve the goal with one of these. With quad core Xeons very common right now, it should be fairly easy if it has a big enough pipe to the internet, and you tune things like timeouts and retries to run later or not at all. Being an opt-out list, you could probably just dump the retries, and just shotgun the messages out to where they fall. I see just another direct marketer trying to compete for MY bandwidth. Someday, people will be smart enough to not buy things marketed this way ... never mind, won't happen. Look at the people that still fall for 419 scams. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ka at pacific.net Wed Nov 7 17:36:16 2007 From: ka at pacific.net (Ken A) Date: Wed Nov 7 17:36:16 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: References: <011301c820ce$aa65cfd0$6402a8c0@dell> <47310D0F.4010709@fsl.com> Message-ID: <4731F790.3030008@pacific.net> Scott Silva wrote: > on 11/6/2007 4:55 PM Steve Swaney spake the following: >> I happen to agree with you and we do provide services to legit mailers >> - once we make sure they are legit :) >> >> Steve > > Being on the receiving end, I believe the only legit mailers are opt-in > lists. > And my blacklist is growing full with opt-out mailers. ;-) > > > > ....... Trips and falls from soapbox.... > I agree completely, but he did say it was legal in Israel to use opt-out mail lists, didn't he, or did I hear that wrong? I suppose the whole country has opted in if that's true. :-( Ken -- Ken Anderson Pacific.Net From ssilva at sgvwater.com Wed Nov 7 17:42:20 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:42:37 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4731D2E0.8010604@filmakademie.de> References: <4731D2E0.8010604@filmakademie.de> Message-ID: on 11/7/2007 6:59 AM G?tz Reinicke spake the following: > Hi, > > MailScanner tells me, that it has still a lot (for our system) of > messages waiting: > > New Batch: Found 2811 messages waiting > > in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot from > 2006. A lot of messages ar rubbish or spam. > > Waht to do with the messages or how to monitor which are still goom ham > mails? > > As usual, thanks for any hints! > > Regards > > G?tz If they are that late, they are of no value. Either delete or move them. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 18:21:39 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 18:22:16 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <4731F790.3030008@pacific.net> References: <011301c820ce$aa65cfd0$6402a8c0@dell> <47310D0F.4010709@fsl.com> <4731F790.3030008@pacific.net> Message-ID: on 11/7/2007 9:36 AM Ken A spake the following: > Scott Silva wrote: >> on 11/6/2007 4:55 PM Steve Swaney spake the following: >>> I happen to agree with you and we do provide services to legit >>> mailers - once we make sure they are legit :) >>> >>> Steve >> >> Being on the receiving end, I believe the only legit mailers are >> opt-in lists. >> And my blacklist is growing full with opt-out mailers. ;-) >> >> >> >> ....... Trips and falls from soapbox.... >> > > I agree completely, but he did say it was legal in Israel to use opt-out > mail lists, didn't he, or did I hear that wrong? I suppose the whole > country has opted in if that's true. :-( > > Ken > It is "legal" in the US also, but that doesn't make it right. It is also legal for me to block it any way I see fit. Freedom of speech doesn't negate my freedom of not having to deal with begging to be removed from something I didn't want in the first place. Just because some marketer is too cheap or too illegitimate to direct mail his crap, or buy 30 seconds on the local television channel. Why not have a web site where you could enter your e-mail address and click the box that states; "Please pass my address on to everybody with a computer and an internet connection so they can send me all their junk. I love getting three thousand e-mails telling me how small my manhood is or how some sweet lawyer in Nigeria wants to give me millions if I will just share a small part of it with him." That would be enough to qualify as opt-in. There is no such site because only a small percentage of the population would do it. And those people are obviously in need of a good mental health provider. As a matter of fact, I would probably subscribe an address on that site...straight to my spamtrap! Talk about one-stop shopping! -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From J.Ede at birchenallhowden.co.uk Wed Nov 7 18:29:09 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 18:29:38 2007 Subject: unparseable winmail.dat's Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> We're getting a large number of winmail.dats coming through MailScanner that are now unparseable with tnef (not perl version) and we had been ditching unparseable files... It looks like we'll have to deliver unparseable tnef files for now, but is there any plans to deal with the cursed outlook winmail.dats in a more friendly way? Jason -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/2f4a0358/attachment.html From Kevin_Miller at ci.juneau.ak.us Wed Nov 7 18:36:38 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Wed Nov 7 18:36:00 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <011301c820ce$aa65cfd0$6402a8c0@dell> References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: Arthur Sherman wrote: > I posted this question in several lists and, amazingly, I got badly > flamed. :) Gosh, who would have imagined? > Many demanded the IP or domain to block, even threatened me to block > my own mail servers, which never sent a spam. > Not all though, actually some of gurus were quite understanding... > > Let me clear some points here: > > The services my company provides are legit spam-proof etc hosting > services. The client turned to us for because of quality he believes > we have in building mailers, i.e. technical expertise netto. > Legally, he has the right to do such mailing in Israel. Well, just because it's legal doesn't mean it's right, or should be done. There's lots of legal things that quite unethical. > His mailing will be in Israel only, and has working Unsubscribe > option - we are scrupulous about this part. Israel only? So it won't affect me. But wait, I have friends in Israel. Can you remove anybody named Ori or Ya'acov for me? Unsubscribe is good. But not getting subscribed in the first place is better. My wife made the mistake of opting in to some list that offered discounts on household products. The next day she had about 100 more spams in her inbox than previously. Took me hours to go through and unsubscribe her. Most messages had dual unsubscriptions - one for that particular product from the company selling it, and one from the "opt-in" list so I had to read each carefully to make sure I was actually opt-ing out of everything. > His DB was legally bought from legit provider, not us also. I checked > the DB is legit here. But does everybody in the DB actually *want* to be there? May be "legit" but that doesn't mean the folks in it understood what they were signing up for. Assuming they actually signed up and didn't just click OK on a web page for something else and didn't notice the little semi-hidden checkbox. > His servers will be neither in our data center, nor in our IP range, > as he builds his own data center, which will host his servers. Doesn't matter where it comes from or is hosted - spam is spam. > Discussing this in open forum was made in effort to openly discuss the > business need, and find a solution to make him as least spammer as > possible, while still allowing him the functonality he seeks. If you're not hosting him, and he's not in your IP range and has his own data center, then beyond building him a fast email server I don't see how you can limit what he does with his business to minimize the spamminess of his emails. What's there to discuss? > Don't you deny the business need for big email volumes? I don't care about business needs. That's their problem. Some companies have legitimate needs for big email volumes. Yahoo for instance. They probably send out multi-millions of messages a day with their yahoo groups. Or any of a number of companies that generate their own mailing lists based on inquiries from their own web site and such. If they get a million requests for information a day then they have a legitimate, legal and ethical reason for having a mail system that can reply. On the other hand, I have a business need to keep the junk out of our email system. My users have enough to do w/o having to wade through come-ons from who knows where. > He will become a legit "marketing"-mailing service provider in Israel. Bummer. > We better start thinking in this direction also, the sooner the > better - the market demands... Um, why? We're all here to fight spam. Not facilitate it. Just because big business wants something doesn't mean that people have to blindly go along with it. Last I looked, I'm the market. I'm the one doing the buying. And I'm not demanding any such thing. Matter of fact, I'm demanding that the marketeers back off. Not that they'll listen to me. They never do. But that's why we have MailScanner. (Thanks Julian!) My humble opinion is to politely tell him thanks, but no thanks. You may lose his business, but you'll sleep better at night. > Thank you Any time... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From satya at fsl.com Wed Nov 7 18:57:02 2007 From: satya at fsl.com (SatyaDev Sharma (FSL)) Date: Wed Nov 7 18:57:08 2007 Subject: FOSS - Bangalore - INDIA Message-ID: <8d5fd62c0711071057y4232bc75sb4268c2c82f1f992@mail.gmail.com> Hello Team, Any one from MailScanner list is attending FOSS (Free and Open-Source Software ) event at Bangalore India ( http://foss.in/ ) ? -- SatyaDev Sharma. Fort System Ltd. Bangalore - INDIA -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071108/b535e565/attachment.html From derek at csolve.net Wed Nov 7 19:07:16 2007 From: derek at csolve.net (Derek Buttineau) Date: Wed Nov 7 19:07:18 2007 Subject: unparseable winmail.dat's In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> Message-ID: <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net> What version of MailScanner do you have installed? There was a permission problem with the External TNEF code that would result in the unparseable error in some previous versions, however Julian has since fixed that. On 2007-Nov-07, at 1:29 PM, Jason Ede wrote: > We're getting a large number of winmail.dats coming through > MailScanner that are now unparseable with tnef (not perl version) > and we had been ditching unparseable files... It looks like we'll > have to deliver unparseable tnef files for now, but is there any > plans to deal with the cursed outlook winmail.dats in a more > friendly way? -- Regards, Derek Buttineau Internet Systems Developer Compu-SOLVE Internet Services Compu-SOLVE Technologies, Inc Phone: 705-725-1212 x255 E-Mail: derek@csolve.net From MailScanner at ecs.soton.ac.uk Wed Nov 7 19:08:17 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 7 19:08:35 2007 Subject: unparseable winmail.dat's In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> Message-ID: <47320D21.1060603@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How about you use the internal perl version instead, as it can usually parse rather more? MailScanner, when it can parse them, will replace them with the real attachments. Not sure there is anything "more friendly" I can do than that. Ideas? Jason Ede wrote: > P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } We're getting a large > number of winmail.dats coming through MailScanner that are now > unparseable with tnef (not perl version) and we had been ditching > unparseable files... It looks like we'll have to deliver > unparseable tnef files for now, but is there any plans to deal with > the cursed outlook winmail.dats in a more friendly way? > > > > Jason > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMg0hEfZZRxQVtlQRArcsAKDJox8e4HKAqYNZyfHbX5Gn1OlEWwCgnGc0 bpeA/6KJdVz5eVJhU+xkT0A= =k+dC -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From hvdkooij at vanderkooij.org Wed Nov 7 19:11:14 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 19:11:34 2007 Subject: whitelisted spam In-Reply-To: References: Message-ID: <47320DD2.8040802@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 D?rfler Andreas wrote: > hey there, > > since a few weeks i?m running into a strange problem. > a specific kind of (high sa score) spammail is very often marked as > whitelisted, but none of the recipients is on the whitelist. > > is there any way to see what whitelist entry ms is using to > mark it that way ? Check your config. But most of all do not hijack an existing thread. If you start a new subject use a new message. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMg3RBvzDRVjxmYERAp9VAJ9WaMbNZUDS/yZbJ6f4VAiAUTssWACguWcE Jo0z7EdUZkDLuI8pqqMTsZc= =iiRp -----END PGP SIGNATURE----- From hvdkooij at vanderkooij.org Wed Nov 7 19:16:14 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 19:16:33 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <4731B300.2030302@filmakademie.de> References: <4731B300.2030302@filmakademie.de> Message-ID: <47320EFE.8040804@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 G?tz Reinicke wrote: > Hi, > > I got a mail whose subject line was modified to be a spam. > > But in the mail header I have no information, why this message was > marked as spam. And what did you log for this message? The log files are usually the best place to start investigating. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMg78BvzDRVjxmYERAsuCAKCQDHc4LEmU9pZLAEf44aUhYS1d4wCdGGC0 /RM12o+K5AZVySabCF/D/A8= =7unA -----END PGP SIGNATURE----- From J.Ede at birchenallhowden.co.uk Wed Nov 7 19:16:30 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 19:18:17 2007 Subject: unparseable winmail.dat's In-Reply-To: <47320D21.1060603@ecs.soton.ac.uk> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local>, <47320D21.1060603@ecs.soton.ac.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2E@server02.bhl.local> I'll try internal parsing.... Cheers. From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field [MailScanner@ecs.soton.ac.uk] Sent: 07 November 2007 19:08 To: MailScanner discussion Subject: Re: unparseable winmail.dat's -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How about you use the internal perl version instead, as it can usually parse rather more? MailScanner, when it can parse them, will replace them with the real attachments. Not sure there is anything "more friendly" I can do than that. Ideas? Jason Ede wrote: > P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } We're getting a large > number of winmail.dats coming through MailScanner that are now > unparseable with tnef (not perl version) and we had been ditching > unparseable files... It looks like we'll have to deliver > unparseable tnef files for now, but is there any plans to deal with > the cursed outlook winmail.dats in a more friendly way? > > > > Jason > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMg0hEfZZRxQVtlQRArcsAKDJox8e4HKAqYNZyfHbX5Gn1OlEWwCgnGc0 bpeA/6KJdVz5eVJhU+xkT0A= =k+dC -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From derek at csolve.net Wed Nov 7 19:18:51 2007 From: derek at csolve.net (Derek Buttineau) Date: Wed Nov 7 19:18:54 2007 Subject: unparseable winmail.dat's In-Reply-To: <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net> Message-ID: <2841A74C-EAC7-4A8B-94C5-A2DEAEF13889@csolve.net> Just checked my notes, I believe the problem with the external TNEF expander began in version 4.62.9-3 and was resolved in version 4.64.3-2. Permissions wouldn't allow files to be unpacked into the newly created directory. On 2007-Nov-07, at 2:07 PM, Derek Buttineau wrote: > What version of MailScanner do you have installed? There was a > permission problem with the External TNEF code that would result in > the unparseable error in some previous versions, however Julian has > since fixed that. -- Regards, Derek Buttineau Internet Systems Developer Compu-SOLVE Internet Services Compu-SOLVE Technologies, Inc Phone: 705-725-1212 x255 E-Mail: derek@csolve.net From martinh at solidstatelogic.com Wed Nov 7 19:24:37 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 7 19:24:50 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <6c7e71ff1d02744aac49dbf105968dd1@solidstatelogic.com> Hi See this from the wiki.. "http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:reject_non_existent_users" -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of W S > Sent: 07 November 2007 04:13 > To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com > Subject: How-to verify valid internal email addresses --- up front > > Folks, > I have this Hub, up in front, which process all incoming emails (running > Postfix and MailScanner). This Hub is bluntly accepting ALL emails from > outside and runs every single email thru MailScanner (ClamAV, > Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal > email server. > Now, is there any way to build some sort of MAP or database file (btree, > hash...) from valid internal email addresses and set it on the Hub in order > to reduce the queue? > Regards, > --W.S. > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From J.Ede at birchenallhowden.co.uk Wed Nov 7 20:06:26 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 20:08:12 2007 Subject: unparseable winmail.dat's In-Reply-To: <2841A74C-EAC7-4A8B-94C5-A2DEAEF13889@csolve.net> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net>, <2841A74C-EAC7-4A8B-94C5-A2DEAEF13889@csolve.net> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2F@server02.bhl.local> Ah... I'm running 4.63.8 I'll ugrade and then try the external tnef expander again then... Cheers. Jason From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Derek Buttineau [derek@csolve.net] Sent: 07 November 2007 19:18 To: MailScanner discussion Subject: Re: unparseable winmail.dat's Just checked my notes, I believe the problem with the external TNEF expander began in version 4.62.9-3 and was resolved in version 4.64.3-2. Permissions wouldn't allow files to be unpacked into the newly created directory. On 2007-Nov-07, at 2:07 PM, Derek Buttineau wrote: > What version of MailScanner do you have installed? There was a > permission problem with the External TNEF code that would result in > the unparseable error in some previous versions, however Julian has > since fixed that. -- Regards, Derek Buttineau Internet Systems Developer Compu-SOLVE Internet Services Compu-SOLVE Technologies, Inc Phone: 705-725-1212 x255 E-Mail: derek@csolve.net -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From arturs at netvision.net.il Thu Nov 8 03:03:15 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Thu Nov 8 03:04:47 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <02a701c821b3$e7d88b10$6402a8c0@dell> > > A client asked me to build for him a mail solution, capable > of sending > > up to > > 1 milllion emails a day, while each email doesn't exceed > 50KB in size. > > > > How do I calculate: > > 1) how many servers > > 2) how do I calculate the above > > 3) is there any max emails a day from IP/domain, which > triggers black > > and blocklists > > 4) what is your recommended software solution > > > > On this stage, most distribution would be in single country. > > > > Thanks in advance > > > > Arthur > > > > > From the MAQ; > > ***************** > Volume: 1,750,000 messages/day (in the lab) > > Average Load: Average of 12 > > Hardware: Dual Xeon 3.2Ghz, 2 GB RAM, 4x 18 GB RAID-1 (using > an HP DL380 G3) > > Software: Tao Linux 1.0, Postfix 2.0.18, SpamAssassin 3.02, Razor, DCC > > RBLs: XBL + SBL in MailScanner > > Virus Scanners: ClamAV, Sophos, BitDefender > > Notes: This performance was achieved in the lab, using random > message sizes between 1 and 100 Kb. Please see the List > archives for 'System capacity'. > > ***************** > Volume : 770,000 messages per day > > Hardware: Dual Opteron, 4Gb RAM, SCSI disk > > Software: RedHat Enterprise Linux 4 > > Configuration: MailScanner 4.50 default setup with > clamavmodule virus scanner, SpamAssassin, Razor, DCC, Sendmail > > ****************** > > Since you believe this isn't a spammer, you don't need any of > the process hogs like antivirus or spamassassin, or even need > mailscanner because the sender already knows what his content > is ;-) and should be able to achieve the goal with one of > these. With quad core Xeons very common right now, it should > be fairly easy if it has a big enough pipe to the internet, > and you tune things like timeouts and retries to run later or > not at all. > Being an opt-out list, you could probably just dump the > retries, and just shotgun the messages out to where they fall. > > I see just another direct marketer trying to compete for MY bandwidth. > Someday, people will be smart enough to not buy things > marketed this way ... > never mind, won't happen. Look at the people that still fall > for 419 scams. Thank you, Scott, nice writeup! Even if it is a spam, it is also a good mental exercise, as someone told me in private. Arthur From hvdkooij at vanderkooij.org Thu Nov 8 06:56:36 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 8 06:57:17 2007 Subject: Feature request: spam / bayesian score in subject Message-ID: <4732B324.9090203@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I just thought of something that might be a nice feature. The ability to put the spam score in the subject line as well as the Bayesian score. Currently we have these options: Spam Modify Subject = start #H#Spam Subject Text = {Spam?} Spam Subject Text = [SPAM] High Scoring Spam Modify Subject = start #H#High Scoring Spam Subject Text = {Spam?} High Scoring Spam Subject Text = [SPAM] I would like to do something like: Spam Subject Text = [SPAM $BAYES/$SCORE] Add it would result in something like: Subject: [SPAM 99/3.50] AW: Co-operation Which would allow me, or other users, to know immediatly I do not have to feed this one to my bayesian filter because it has hit the maximum score. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMrMiBvzDRVjxmYERAnutAJ9vV7Z5M0pY2zEEV1izH1A0bwMHEgCgjw+4 uL669gx9ZdfB5orhUc2tyF8= =yyh/ -----END PGP SIGNATURE----- From goetz.reinicke at filmakademie.de Thu Nov 8 07:36:49 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Thu Nov 8 07:37:23 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4731E709.60501@ecs.soton.ac.uk> References: <4731D2E0.8010604@filmakademie.de> <4731E709.60501@ecs.soton.ac.uk> Message-ID: <4732BC91.4050105@filmakademie.de> Hi, what is qf/df :-? and is ther a way to do this kind of cleaning automatically? Thanks and best regards G?tz Julian Field schrieb: > Just delete them. If they are left behind, it's usually due to not > having the other half of the qf/df file pair. > > G?tz Reinicke wrote: >> Hi, > >> MailScanner tells me, that it has still a lot (for our system) of >> messages waiting: > >> New Batch: Found 2811 messages waiting > >> in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot >> from 2006. A lot of messages ar rubbish or spam. > >> Waht to do with the messages or how to monitor which are still goom >> ham mails? > >> As usual, thanks for any hints! > >> Regards > >> G?tz > > Jules > -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From john at tradoc.fr Thu Nov 8 09:41:13 2007 From: john at tradoc.fr (John Wilcock) Date: Thu Nov 8 09:41:21 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732B324.9090203@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> Message-ID: <4732D9B9.10506@tradoc.fr> > I would like to do something like: > Spam Subject Text = [SPAM $BAYES/$SCORE] > > Add it would result in something like: > > Subject: [SPAM 99/3.50] AW: Co-operation > > Which would allow me, or other users, to know immediatly I do not have > to feed this one to my bayesian filter because it has hit the maximum score. You can already put the SpamAssassin score in the subject, using the _SCORE_ placeholder: Spam Subject Text = {Spam?} {Score=_SCORE_} AFAIK you can't add just the bayes score. In any case, learning BAYES_99 messages won't do any harm and can but reinforce the "spamminess" of the tokens concerned. John. -- -- Over 3000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From MailScanner at ecs.soton.ac.uk Thu Nov 8 12:03:29 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 8 12:03:41 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732D9B9.10506@tradoc.fr> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> Message-ID: <4732FB11.1030705@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John Wilcock wrote: >> I would like to do something like: Spam Subject Text = [SPAM >> $BAYES/$SCORE] >> >> Add it would result in something like: >> >> Subject: [SPAM 99/3.50] AW: Co-operation >> >> Which would allow me, or other users, to know immediatly I do not >> have to feed this one to my bayesian filter because it has hit >> the maximum score. > > You can already put the SpamAssassin score in the subject, using > the _SCORE_ placeholder: > > Spam Subject Text = {Spam?} {Score=_SCORE_} > > AFAIK you can't add just the bayes score. In any case, learning > BAYES_99 messages won't do any harm and can but reinforce the > "spamminess" of the tokens concerned. Please RTM first :-) I quote from the MailScanner.conf documentation for the "Spam Subject Text" setting: # This is the text to add to the start of the subject if the # "Spam Modify Subject" option is set. # The exact string "_SCORE_" will be replaced by the numeric # SpamAssassin score. # The exact string "_STARS_" will be replaced by a row of stars # whose length is the SpamAssassin score. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMvsREfZZRxQVtlQRAsMsAJsFvxnlDG9HiD9JuKU6vMMKs3kbqwCgoMNI i8Lr90RMCPCNcHhxh0QT6Qs= =ZSRD -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From Andreas.Doerfler at kempten.de Thu Nov 8 12:26:32 2007 From: Andreas.Doerfler at kempten.de (=?iso-8859-1?Q?D=F6rfler_Andreas?=) Date: Thu Nov 8 12:27:30 2007 Subject: AW: whitelisted spam In-Reply-To: <47320DD2.8040802@vanderkooij.org> Message-ID: > Hugo van der Kooij wrote: > Check your config. But most of all do not hijack an existing > thread. If > you start a new subject use a new message. that why i asked, i havent found something useable in the config. but i got a usefull answer from another user, thanks to him > If you start a new subject use a new message. k, next time i go back in archive for years to check if someone haven?t used that subject bevor to prevent trolling answers like yours rock on From list-mailscanner at linguaphone.com Thu Nov 8 12:48:38 2007 From: list-mailscanner at linguaphone.com (Gareth) Date: Thu Nov 8 12:48:54 2007 Subject: AW: whitelisted spam In-Reply-To: References: Message-ID: <1194526118.5432.23.camel@gblades-suse.linguaphone-intranet.co.uk> On Thu, 2007-11-08 at 12:26, D?rfler Andreas wrote: > > If you start a new subject use a new message. > > k, next time i go back in archive for years to check if someone > haven?t used that subject bevor to prevent trolling answers like yours I think what he meant was that if you hit reply then your mail client includes a reference to the original message in the headers even if you change the subject line. A lot of people view the list in threaded form in their mail software so if you reply and change the subject it still appears under the old thread. This means there is less chance if your mail being read as some people have already chosen not to participate in that original thread and marked it to be ignored. From lhaig at haigmail.com Thu Nov 8 14:09:46 2007 From: lhaig at haigmail.com (Lance Haig) Date: Thu Nov 8 14:09:59 2007 Subject: OT:::Mail System load testing program. Message-ID: <473318AA.4030104@haigmail.com> Hi, Anyone know of a good mail server load /stress testing system that can test pop imap smtp? Regards Lance From m.anderlini at database.it Thu Nov 8 14:21:10 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Thu Nov 8 14:21:23 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: References: <4730362E.4040606@filmakademie.de> <473112BD.50100@vanderkooij.org> Message-ID: <00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum update My system it's a x86_64 using CentOS release 4.5 (Final) Mailscanner version is mailscanner-4.58.9-1 Unforntunaly I get this error msg: ============ file /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from install of perl-5.8.5-36.el4_5.2 conflicts with file from package perl-Sys-Syslog-0.18-1 file /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Syslog/Syslog.so from install of perl-5.8.5-36.el4_5.2 conflicts with file from package perl-Sys-Syslog-0.18-1 ============ Could someone help me ? Please try to use an easy english because it's not my mother language. I would like to avoid to re-install mailscanner because this server is mission critical for us. Thanks very much and sorry for my worst english. Bye Dr. Marcello Anderlini m.anderlini@database.it --------------------------------------------- Database Informatica S.r.l. Microsoft Certified Partner Tel. +39059775070 Fax. +39059779545 http://www.database.it --------------------------------------------- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 -- Messaggio verificato dal servizio antivirus di Database Informatica From mkettler at evi-inc.com Thu Nov 8 15:17:16 2007 From: mkettler at evi-inc.com (Matt Kettler) Date: Thu Nov 8 15:17:42 2007 Subject: AW: whitelisted spam In-Reply-To: References: Message-ID: <4733287C.5050509@evi-inc.com> D?rfler Andreas wrote: >> Hugo van der Kooij wrote: >> Check your config. But most of all do not hijack an existing >> thread. If >> you start a new subject use a new message. > > that why i asked, i havent found something useable in the config. > but i got a usefull answer from another user, thanks to him Fair enough, is your problem solved? > > >> If you start a new subject use a new message. > > k, next time i go back in archive for years to check if someone > haven?t used that subject bevor to prevent trolling answers like yours This doesn't have to do with having unique subject lines. It has to do with using "reply" instead of creating a new message. If you reply to a message , even if you change the subject line, it is still a reply to that message. Many intelligent mail readers, and the list archives, will represent it as such. This is because your mail client actually adds a In-Reply-To header indicating what message you replied to. So, your message appears to me, and anyone else using a threaded mail reader, as being a part of the "MailScanner + Postfix => very slow" thread. Which clearly it isn't. This is what Hugo is trying to point out. It also appears that way in the list archives, look for yourself: http://lists.mailscanner.info/pipermail/mailscanner/2007-November/thread.html Because it's nested under an unrelated threads, it might get overlooked by folks who can help you, but aren't interested in postfix. So, really, Hugo's advice is actually trying to help you format your posts so they get seen by the right folks. It is not a troll. From mkettler at evi-inc.com Thu Nov 8 15:23:11 2007 From: mkettler at evi-inc.com (Matt Kettler) Date: Thu Nov 8 15:23:35 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732B324.9090203@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> Message-ID: <473329DF.6000504@evi-inc.com> Hugo van der Kooij wrote: > > Which would allow me, or other users, to know immediatly I do not have > to feed this one to my bayesian filter because it has hit the maximum score. You really should not try to avoid feeding messages to bayes for that reason. Even if a message hits as high as possible on the bayes system, there can still be useful tokens in it that are worth training. This is because bayes learns about words, not messages, and spam emails tend to slowly mutate over time. A message might hit really high on bayes because it has several key words that resemble last week's spam, but it can still contain several new words that will help it catch next week's spam. If you try to avoid training those messages, you're going to wind up having to "catch up" later on after you start missing spam. Don't let your bayes get behind the curve. Train your spam as spam, and don't try to avoid training some messages vs others. The only time it might be worthwhile to avoid training is if the autolearner already kicked in and learned it correctly. Re-training won't hurt, but it also won't do anything so it's somewhat pointless. From prandal at herefordshire.gov.uk Thu Nov 8 15:41:52 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Thu Nov 8 15:42:01 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org> <00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> If yum has already downloaded the package, the procedure would be something like: service MailScanner stop rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm --force then reinstall MailScanner and start it. If it isn't in your yum cache, wget it from a CentOS mirror and force install it. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 14:21 > To: 'MailScanner discussion' > Subject: Errore when I try update perl on centos 4.5 > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version > via yum update > My system it's a x86_64 using CentOS release 4.5 (Final) > Mailscanner version is mailscanner-4.58.9-1 > > Unforntunaly I get this error msg: > ============ > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > og/Syslog.so > from install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > ============ > > Could someone help me ? Please try to use an easy english > because it's not > my mother language. > > I would like to avoid to re-install mailscanner because this server is > mission critical for us. > > Thanks very much and sorry for my worst english. > > > Bye > > Dr. Marcello Anderlini > m.anderlini@database.it > --------------------------------------------- > Database Informatica S.r.l. > Microsoft Certified Partner > Tel. +39059775070 > Fax. +39059779545 > http://www.database.it > --------------------------------------------- > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From m.anderlini at database.it Thu Nov 8 15:48:24 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Thu Nov 8 15:48:34 2007 Subject: R: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> Message-ID: <00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> Thanks for you answer but I can reinstall the new version of mailscanner or I can reinstall the one that I'm using now ? Thanks ? -----Messaggio originale----- Da: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di Randal, Phil Inviato: gioved? 8 novembre 2007 16.42 A: MailScanner discussion Oggetto: RE: Errore when I try update perl on centos 4.5 If yum has already downloaded the package, the procedure would be something like: service MailScanner stop rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm --force then reinstall MailScanner and start it. If it isn't in your yum cache, wget it from a CentOS mirror and force install it. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > Marcello Anderlini > Sent: 08 November 2007 14:21 > To: 'MailScanner discussion' > Subject: Errore when I try update perl on centos 4.5 > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum > update My system it's a x86_64 using CentOS release 4.5 (Final) > Mailscanner version is mailscanner-4.58.9-1 > > Unforntunaly I get this error msg: > ============ > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > og/Syslog.so > from install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > ============ > > Could someone help me ? Please try to use an easy english because it's > not my mother language. > > I would like to avoid to re-install mailscanner because this server is > mission critical for us. > > Thanks very much and sorry for my worst english. > > > Bye > > Dr. Marcello Anderlini > m.anderlini@database.it > --------------------------------------------- > Database Informatica S.r.l. > Microsoft Certified Partner > Tel. +39059775070 > Fax. +39059779545 > http://www.database.it > --------------------------------------------- > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Messaggio verificato dal servizio antivirus di Database Informatica No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 -- Messaggio verificato dal servizio antivirus di Database Informatica From prandal at herefordshire.gov.uk Thu Nov 8 15:59:05 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Thu Nov 8 15:59:12 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> <00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> That would be your choice. I'd reinstall the version you're running now, check that it all works, and then consider upgrading MailScanner. One change at a time :-) Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 15:48 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Thanks for you answer but I can reinstall the new version of > mailscanner or > I can reinstall the one that I'm using now ? > > Thanks ? > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto > di Randal, > Phil > Inviato: gioved? 8 novembre 2007 16.42 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > If yum has already downloaded the package, the procedure > would be something > like: > > service MailScanner stop > rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > --force > > then reinstall MailScanner and start it. > > If it isn't in your yum cache, wget it from a CentOS mirror and force > install it. > > Cheers, > > Phil > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 14:21 > > To: 'MailScanner discussion' > > Subject: Errore when I try update perl on centos 4.5 > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > Mailscanner version is mailscanner-4.58.9-1 > > > > Unforntunaly I get this error msg: > > ============ > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > perl-Sys-Syslog-0.18-1 > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > og/Syslog.so > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > from package > > perl-Sys-Syslog-0.18-1 > > ============ > > > > Could someone help me ? Please try to use an easy english > because it's > > not my mother language. > > > > I would like to avoid to re-install mailscanner because > this server is > > mission critical for us. > > > > Thanks very much and sorry for my worst english. > > > > > > Bye > > > > Dr. Marcello Anderlini > > m.anderlini@database.it > > --------------------------------------------- > > Database Informatica S.r.l. > > Microsoft Certified Partner > > Tel. +39059775070 > > Fax. +39059779545 > > http://www.database.it > > --------------------------------------------- > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From m.anderlini at database.it Thu Nov 8 16:08:06 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Thu Nov 8 16:08:20 2007 Subject: R: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> <7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> Message-ID: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Good suggestion :-) I'll try tomorrow evening, tell me good luck :-) Thanks. -----Messaggio originale----- Da: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di Randal, Phil Inviato: gioved? 8 novembre 2007 16.59 A: MailScanner discussion Oggetto: RE: Errore when I try update perl on centos 4.5 That would be your choice. I'd reinstall the version you're running now, check that it all works, and then consider upgrading MailScanner. One change at a time :-) Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > Marcello Anderlini > Sent: 08 November 2007 15:48 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Thanks for you answer but I can reinstall the new version of > mailscanner or I can reinstall the one that I'm using now ? > > Thanks ? > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > Randal, Phil > Inviato: gioved? 8 novembre 2007 16.42 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > If yum has already downloaded the package, the procedure would be > something > like: > > service MailScanner stop > rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > --force > > then reinstall MailScanner and start it. > > If it isn't in your yum cache, wget it from a CentOS mirror and force > install it. > > Cheers, > > Phil > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 14:21 > > To: 'MailScanner discussion' > > Subject: Errore when I try update perl on centos 4.5 > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > Mailscanner version is mailscanner-4.58.9-1 > > > > Unforntunaly I get this error msg: > > ============ > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > perl-Sys-Syslog-0.18-1 > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > og/Syslog.so > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > from package > > perl-Sys-Syslog-0.18-1 > > ============ > > > > Could someone help me ? Please try to use an easy english > because it's > > not my mother language. > > > > I would like to avoid to re-install mailscanner because > this server is > > mission critical for us. > > > > Thanks very much and sorry for my worst english. > > > > > > Bye > > > > Dr. Marcello Anderlini > > m.anderlini@database.it > > --------------------------------------------- > > Database Informatica S.r.l. > > Microsoft Certified Partner > > Tel. +39059775070 > > Fax. +39059779545 > > http://www.database.it > > --------------------------------------------- > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Messaggio verificato dal servizio antivirus di Database Informatica No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 -- Messaggio verificato dal servizio antivirus di Database Informatica From brose at med.wayne.edu Thu Nov 8 16:32:27 2007 From: brose at med.wayne.edu (Rose, Bobby) Date: Thu Nov 8 16:32:37 2007 Subject: Mailscanner filename check In-Reply-To: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Message-ID: <8F2A53954C22554EB75D9643FCCE0C6B05A5F4AF@MED-CORE03-MS1.med.wayne.edu> I've been using MailScanner for years and I seen this issue a couple times before but just assumed it was a user mistake. I've seen sender.filename.report sends back a message with the wrong $filename string. What is sends back is a random string of characters. The message says One or more of the attachments (VAmRh3qo9P) are on the list of unacceptable attachments for this site and will not have been delivered. Consider renaming the files to avoid this constraint. The virus detector said this about the message: Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) But in the maillogs, it has the real filename Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam checks (2826228 > 200000 bytes) Nov 8 10:10:23 eeyore MailScanner[25630]: Expanding TNEF archive at /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 added TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip Education.lg.10.31.20071.ppt Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 has had TNEF winmail.dat removed Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: Found possible filename hiding (lA8F96O2031926 RHO Flip Education.lg.10.31.20071.ppt.doc) Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message lA8F96O2031926 to SQL Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to MailWatch SQL I'm not sure of the conditions that lead to this because it doesn't always happen and if I test myself, the sender.filename.report message is correct. Anyone else seen this before? -=B From hvdkooij at vanderkooij.org Thu Nov 8 17:51:09 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 8 17:51:51 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732FB11.1030705@ecs.soton.ac.uk> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> <4732FB11.1030705@ecs.soton.ac.uk> Message-ID: <47334C8D.80403@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian Field wrote: > John Wilcock wrote: >>> I would like to do something like: Spam Subject Text = [SPAM >>> $BAYES/$SCORE] >>> >>> Add it would result in something like: >>> >>> Subject: [SPAM 99/3.50] AW: Co-operation >>> >>> Which would allow me, or other users, to know immediatly I do not >>> have to feed this one to my bayesian filter because it has hit >>> the maximum score. >> You can already put the SpamAssassin score in the subject, using >> the _SCORE_ placeholder: > >> Spam Subject Text = {Spam?} {Score=_SCORE_} > >> AFAIK you can't add just the bayes score. In any case, learning >> BAYES_99 messages won't do any harm and can but reinforce the >> "spamminess" of the tokens concerned. > Please RTM first :-) > I quote from the MailScanner.conf documentation for the "Spam Subject > Text" setting: I found them in the new config file (.rpmnew). But because the script threaten that I loose my remarks in the config and I want to know which settings are deviating from the defaults I update the config by hand. I mark the original lines with #H# so I can find exactly which settings are not default and how I did change them over time. So perhaps I need to ask for a completely different feature. The ability to keep comments in the config file by a upgrade so I do not have to do this by hand. For example if any line staring with #H# (Hugo) or perhaps #J# (Jules) or #M# (MailScanner) is just preceding a config line it should be kept. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHM0yLBvzDRVjxmYERAjuxAKCYphfud3/SjtWk8YMWlRDJWOp5gQCgmtGZ K6xeVn6R9Ll2SZ1jNLJfgw8= =qBzC -----END PGP SIGNATURE----- From glenn.steen at gmail.com Thu Nov 8 19:26:04 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 8 19:26:09 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <47334C8D.80403@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> <4732FB11.1030705@ecs.soton.ac.uk> <47334C8D.80403@vanderkooij.org> Message-ID: <223f97700711081126m263637c6if48da4ee52f9fb69@mail.gmail.com> On 08/11/2007, Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Julian Field wrote: > > John Wilcock wrote: > >>> I would like to do something like: Spam Subject Text = [SPAM > >>> $BAYES/$SCORE] > >>> > >>> Add it would result in something like: > >>> > >>> Subject: [SPAM 99/3.50] AW: Co-operation > >>> > >>> Which would allow me, or other users, to know immediatly I do not > >>> have to feed this one to my bayesian filter because it has hit > >>> the maximum score. > >> You can already put the SpamAssassin score in the subject, using > >> the _SCORE_ placeholder: > > > >> Spam Subject Text = {Spam?} {Score=_SCORE_} > > > >> AFAIK you can't add just the bayes score. In any case, learning > >> BAYES_99 messages won't do any harm and can but reinforce the > >> "spamminess" of the tokens concerned. > > Please RTM first :-) > > I quote from the MailScanner.conf documentation for the "Spam Subject > > Text" setting: > > I found them in the new config file (.rpmnew). But because the script > threaten that I loose my remarks in the config and I want to know which > settings are deviating from the defaults I update the config by hand. I > mark the original lines with #H# so I can find exactly which settings > are not default and how I did change them over time. > > So perhaps I need to ask for a completely different feature. The ability > to keep comments in the config file by a upgrade so I do not have to do > this by hand. > > For example if any line staring with #H# (Hugo) or perhaps #J# (Jules) > or #M# (MailScanner) is just preceding a config line it should be kept. > > Hugo. > Not perhaps helpful, but ... You do know about the "MailScanner --changed" option? Yeah, I know... One wants to tell oneself _why_ as well as that one has changed it:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Thu Nov 8 20:29:03 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 8 20:29:16 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <47334C8D.80403@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> <4732FB11.1030705@ecs.soton.ac.uk> <47334C8D.80403@vanderkooij.org> Message-ID: <4733718F.60408@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > Julian Field wrote: >> John Wilcock wrote: >>>> I would like to do something like: Spam Subject Text = [SPAM >>>> $BAYES/$SCORE] >>>> >>>> Add it would result in something like: >>>> >>>> Subject: [SPAM 99/3.50] AW: Co-operation >>>> >>>> Which would allow me, or other users, to know immediatly I do >>>> not have to feed this one to my bayesian filter because it >>>> has hit the maximum score. >>> You can already put the SpamAssassin score in the subject, >>> using the _SCORE_ placeholder: Spam Subject Text = {Spam?} >>> {Score=_SCORE_} AFAIK you can't add just the bayes score. In >>> any case, learning BAYES_99 messages won't do any harm and can >>> but reinforce the "spamminess" of the tokens concerned. >> Please RTM first :-) I quote from the MailScanner.conf >> documentation for the "Spam Subject Text" setting: > > I found them in the new config file (.rpmnew). But because the > script threaten that I loose my remarks in the config and I want to > know which settings are deviating from the defaults I update the > config by hand. I think someone else has already pointed out "MailScanner --changed" (or "-c"). > I mark the original lines with #H# so I can find exactly which > settings are not default and how I did change them over time. The upgrade_MailScanner_conf (and hence upgrade_languages_conf as well as they are the same file) has a switch "--keep-comments". As you know :-) This is there because if I add functionality or more options in a MailScanner.conf setting, I improve the documentation above the comment to describe the new values available in that setting. So if you "upgrade_MailScanner_conf --keep-comments ...." then you don't get my new documentation. So by default it is switched off, as not many people add comments to long config files anyway, apart from to say what they have changed from the default value; you can find that out anyway with "MailScanner - -c" as described above. BTW "many people" is based on a straw poll of the people in my office at the time (i.e. 1). So I may be wrong :-) Comments attached to a conf setting are the comment lines appearing immediately above it. But it does quiet effectively keep down the number of emails I get asking about things that have been added to the documentation in MailScanner.conf, which therefore saves me a lot of work quoting .conf file chunks back at them to answer their questions. That's why I did it the way I have. If you disagree, I would be quite interested to hear other suggestions. > > So perhaps I need to ask for a completely different feature. The > ability to keep comments in the config file by a upgrade so I do > not have to do this by hand. > > For example if any line staring with #H# (Hugo) or perhaps #J# > (Jules) or #M# (MailScanner) is just preceding a config line it > should be kept. So you want to *just* keep comments that start with (or perhaps contain) a given string. I would still have to stay with my rule that the comments attached to a setting appear immediately above it. Is that what you want to be able to do? If so, let me think about it, it must be possible, and when I get it right it is probably about 5 lines of code. Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHM3GPEfZZRxQVtlQRAlvaAJwPW0DqYcla+oRFWUkZsiEiB0QHcQCg2WTM clLOc+CRKdocucqyGTJjh0w= =0c6a -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From ssilva at sgvwater.com Thu Nov 8 20:32:59 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 8 20:33:25 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4732BC91.4050105@filmakademie.de> References: <4731D2E0.8010604@filmakademie.de> <4731E709.60501@ecs.soton.ac.uk> <4732BC91.4050105@filmakademie.de> Message-ID: on 11/7/2007 11:36 PM G?tz Reinicke spake the following: > Hi, > > what is qf/df :-? and is ther a way to do this kind of cleaning > automatically? > > Thanks and best regards > > G?tz find /path/to/files* -mtime +5 -exec rm {} \; set /path/to/files* to the queue path and the 5 is the default amount of time that sendmail retries sending messages before giving up. Adjust that amount to what your system does. To be safe you could set it to +7. When the above is working properly, you can add it to a daily cron job. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From MailScanner at ecs.soton.ac.uk Thu Nov 8 21:45:34 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 8 21:45:49 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: References: <4731D2E0.8010604@filmakademie.de> <4731E709.60501@ecs.soton.ac.uk> <4732BC91.4050105@filmakademie.de> Message-ID: <4733837E.5070409@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Silva wrote: > on 11/7/2007 11:36 PM G?tz Reinicke spake the following: >> Hi, >> >> what is qf/df :-? and is ther a way to do this kind of cleaning >> automatically? >> >> Thanks and best regards >> >> G?tz > find /path/to/files* -mtime +5 -exec rm {} \; > > set /path/to/files* to the queue path and the 5 is the default > amount of time that sendmail retries sending messages before giving > up. Adjust that amount to what your system does. To be safe you > could set it to +7. > > When the above is working properly, you can add it to a daily cron > job. > There is an "official" answer from some very elderly sendmail documentation. It runs like this: - ------ CUT ------ cd $QUEUE # remove zero length qf files for qffile in qf* do if [ -r $qffile ]; then if [ ! -s $qffile ]; then rm -f $qffile fi fi done # rename tf files to be qf if the qf does not exist for tffile in tf* do qffile=`echo $tffile | sed 's/t/q/'` # JKF 15/7/98 Put $qffile in quotes in case tffile = 'tf*' if [ -r $tffile -a ! -f "$qffile" ]; then mv $tffile $qffile else if [ -f $tffile ]; then rm -f $tffile fi fi done # remove df files with no corresponding qf files for dffile in df* do qffile=`echo $dffile | sed 's/d/q/'` if [ -r $dffile -a ! -f $qffile ]; then mv $dffile `echo $dffile | sed 's/d/D/'` fi done # announce files that have been saved during disaster recovery for xffile in [A-Z]f* do if [ -f $xffile ]; then echo " \c" fi done - ------ CUT ------ That's how I do it on my Sun boxes. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHM4N+EfZZRxQVtlQRAk2TAJ9PiMOy0/hTSPN+h7aqRR+16m959QCg7Ipk GLfGMzlYNPrJmb+8VUuTs/0= =9Dy5 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From rwahyudi at gmail.com Thu Nov 8 22:56:18 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Thu Nov 8 22:54:27 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4732AE6C.4030809@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> <20071107061527.DB22.GERARD@seibercom.net> <4732AE6C.4030809@gmail.com> Message-ID: <47339412.2070000@gmail.com> Thanks for the reply guys .. I have scheduled postfix / mailscanner update for today .. Should be able to get the graph by tomorrow. If it was the receiving ends, the queue will build up in the active / deferred queue and not in the incoming queue. We have a couple of server on the receiving end running qmail and has no filter whatsoever. They are load balanced using alteon and mailbox storage is mounted from HP storagework 8100 SAN via 2 Gb Fiber. The receiving end capable of accepting a total of ~10,000 mails per minute. ( thats the highest i've seen) . --- More details on the Antispam servers --- We have 8 Antispam server, and for each server we receive around 400 email per minutes and rejecting 300 at SMTP level. RRD Graph : SMTP connect vs Reject : http://img139.imageshack.us/img139/5412/vscan4smtpwu4.png Rejected message at SMTP level : http://img150.imageshack.us/img150/309/vscan4blockedru9.png Accepted Message : http://img145.imageshack.us/img145/7687/vscan4acceptedji0.png Postfix Queue Level : http://img134.imageshack.us/img134/5902/vscan4queuepb1.png 2 filter on header check on postfix : /^content-(type|disposition):.*name*=.*\.(pif|scr|vbs|com|cmd)"?[[:space:]]*(;|$)/ REJECT We cannot accept file with .$2 attachments /^Received:/ HOLD Queue Manger process ID is stable and has been the same for longer than 24 hours. -- Nov 5 12:21:58 vscan4 postfix/qmgr[13055]: 7A3D760869A: removed -- Nov 6 10:37:03 vscan4 postfix/qmgr[13055]: A750B608734: removed ======== postconf -n =========== alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases anvil_rate_time_unit = 15m bounce_size_limit = 1024 command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 1 disable_vrfy_command = no header_checks = regexp:/etc/postfix/maps /header_checks html_directory = /usr/share/doc/postfix- 2.3.2-documentation/html in_flow_delay = 0 inet_interfaces = all local_recipient_maps = local_transport = error:local mail delivery is disabled mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 41457280 mydestination = mydomain = myhostname = vscan4 mynetworks = xxxxxxxxxxxxxxxxxx myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.3.2-documentation/readme receive_override_options = no_address_mappings relay_domains = mysql:/etc/postfix/relay_domains.cf relay_recipient_maps = proxy:mysql:/etc/postfix/recipients- verification.cf sample_directory = /usr/share/doc/postfix- 2.2.10/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_banner = $myhostname [vscan v0.1] smtpd_client_connection_count_limit = 1 smtpd_client_connection_rate_limit = 15 smtpd_client_event_limit_exceptions = someip smtpd_client_recipient_rate _limit = 50 smtpd_error_sleep_time = 12 smtpd_hard_error_limit = 6 smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname, reject_non_fqdn_hostname, smtpd_recipient_limit = 50 smtpd_recipient_overshoot_limit = 1 smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_pipelining, reject_unauth_destination, reject_multi_recipient_bounce, reject_unlisted_recipient, check_client_access cidr:/etc/postfix/maps/exceptions_clients, reject_rbl_client hotkey.rbl, reject_rbl_client zen.spamhaus.org, check_policy_service inet: 127.0.0.1:10031 smtpd_sender_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/maps/sender _blacklist, check_sender_access hash:/etc/postfix/maps/from_blacklist, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_soft_error_limit = 1 smtpd_timeout = 20s soft_bounce = no transport_maps = hash:/etc/postfix/maps/transport unknown_local_recipient_reject _code = 550 QSHAPE : incoming : T 5 10 20 40 80 160 320 640 1280 1280+ TOTAL 150 150 0 0 0 0 0 0 0 0 0 Active : T 5 10 20 40 80 160 320 640 1280 1280+ TOTAL 0 0 0 EXAMPLE LOG FILE : Nov 8 09:36:59 vscan4 postfix/smtpd[24127]: C953660802E: client=mail.creativefactory.com.au[203.89.197.34] Nov 8 09:37:00 vscan4 postfix/cleanup[25817]: C953660802E: hold: header Received: from mail.creativefactory.com.au (mail.creativefactory.com.au [203.89.197.34])??by vscan4.hotkey.net.au (Postfix) with ESMTP id C953660802E??for ; Thu, 8 Nov 2007 0 from mail.creativefactory.com.au[203.89.197.34]; from= to= proto=ESMTP helo= Nov 8 09:37:00 vscan4 postfix/cleanup[25817]: C953660802E: message-id=<13290289.1194474906537.JavaMail.SYSTEM@dnc01> Nov 8 09:37:03 vscan4 MailScanner[14160]: Message C953660802E.EFA0E from 203.89.197.34 (news@discountnewcars.com.au) to xxxxx.com is too big for spamchecks (118081 > 80000 bytes) Nov 8 09:37:07 vscan4 MailScanner[14160]: Requeue: C953660802E.EFA0E to 4141C608637 Nov 8 09:37:07 vscan4 MailScanner[14160]: Logging message C953660802E.EFA0E to SQL Nov 8 09:37:07 vscan4 MailScanner[14438]: C953660802E.EFA0E: Logged to MailWatch SQL [root@vscan4 src]# grep 4141C608637 /var/log/maillog Nov 8 09:37:07 vscan4 MailScanner[14160]: Requeue: C953660802E.EFA0E to 4141C608637 Nov 8 09:44:58 vscan4 postfix/qmgr[13055]: 4141C608637: from=, size=117724, nrcpt=1 (queue active) Nov 8 09:44:58 vscan4 postfix/smtp[29892]: 4141C608637: to=, relay=mailroute.xxxxx.net.au[xxx.xx.7.8]:25, delay=479, delays=298/0.01/0.01/0.11, dsn=2.0.0, status=sent (250 ok 1194475318 qp 7468) Nov 8 09:51:58 vscan4 postfix/qmgr[13055]: 4141C608637: removed As you can see .. there are long delay after mailscanner requeue the mail. This is just one example and i've seen queue sitting longer that 10 mins .. Lets see if postfix+mailscanner update fix this issue. Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071109/b89df9ef/attachment.html From rwahyudi at gmail.com Fri Nov 9 06:35:53 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Fri Nov 9 06:34:03 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47339412.2070000@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> <20071107061527.DB22.GERARD@seibercom.net> <4732AE6C.4030809@gmail.com> <47339412.2070000@gmail.com> Message-ID: <4733FFC9.9080403@gmail.com> Upgrading postfix & mailscanner does not fix my issue. I've spent hours trying to find the cause of this delay issue and I found that qmgr in /etc/postfix/master.cf is set to wakeup every 300 second !! I've set my qmgr to wakeup every 2 second, and it fix the problem. Maybe this is temporary fix, and not the correct way of fixing this issue, but it works, and so far, I am very happy with the result. The average message in incoming and active queue has now come down to 0 !! Do you guys experience similar issue ? Does mailscanner designed to wait for qmgr to wake up ? On average, how much delay do you guys get ? Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071109/69065bd3/attachment-0001.html From glenn.steen at gmail.com Fri Nov 9 08:58:46 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 9 08:58:49 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4733FFC9.9080403@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> <20071107061527.DB22.GERARD@seibercom.net> <4732AE6C.4030809@gmail.com> <47339412.2070000@gmail.com> <4733FFC9.9080403@gmail.com> Message-ID: <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> On 09/11/2007, R Wahyudi wrote: > > Upgrading postfix & mailscanner does not fix my issue. > > I've spent hours trying to find the cause of this delay issue and I found > that > qmgr in /etc/postfix/master.cf is set to wakeup every 300 second !! > > I've set my qmgr to wakeup every 2 second, and it fix the problem. > Maybe this is temporary fix, and not the correct way of fixing this issue, > but it works, > and so far, I am very happy with the result. > > The average message in incoming and active queue has now come down to 0 !! > > Do you guys experience similar issue ? > Does mailscanner designed to wait for qmgr to wake up ? > On average, how much delay do you guys get ? > > > Regards, > Rianto Wahyudi > Ah. Great that you found it (all MTA, and OT, but still.... One could well think the ones over at the PF list would've been able to see this:-):-)... Anyway... I do think that evere other second is a bit often, you could try every 10 or 15 seconds or similar... Would mean approximately 25 deliveries in every chunk. But if the system doesn't suffer too much from the queue scans... well, every other second it is:-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From prandal at herefordshire.gov.uk Fri Nov 9 09:42:36 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Fri Nov 9 09:42:44 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0E33@HC-MBX02.herefordshire.gov.uk> After the forced install of perl, you'll need to "yum update" to get the updated pcre as well. On CentOS 5, force installing the updated perl, yum update, then service MailScanner restart was all that was needed here. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 16:08 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Good suggestion :-) I'll try tomorrow evening, tell me good luck :-) > > Thanks. > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto > di Randal, > Phil > Inviato: gioved? 8 novembre 2007 16.59 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > That would be your choice. > > I'd reinstall the version you're running now, check that it > all works, and > then consider upgrading MailScanner. > > One change at a time :-) > > Cheers, > > Phil > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 15:48 > > To: 'MailScanner discussion' > > Subject: R: Errore when I try update perl on centos 4.5 > > > > Thanks for you answer but I can reinstall the new version of > > mailscanner or I can reinstall the one that I'm using now ? > > > > Thanks ? > > > > -----Messaggio originale----- > > Da: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > > Randal, Phil > > Inviato: gioved? 8 novembre 2007 16.42 > > A: MailScanner discussion > > Oggetto: RE: Errore when I try update perl on centos 4.5 > > > > If yum has already downloaded the package, the procedure would be > > something > > like: > > > > service MailScanner stop > > rpm -Uvh > /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > > --force > > > > then reinstall MailScanner and start it. > > > > If it isn't in your yum cache, wget it from a CentOS mirror > and force > > install it. > > > > Cheers, > > > > Phil > > -- > > Phil Randal > > Network Engineer > > Herefordshire Council > > Hereford, UK > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > > Marcello Anderlini > > > Sent: 08 November 2007 14:21 > > > To: 'MailScanner discussion' > > > Subject: Errore when I try update perl on centos 4.5 > > > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 > version via yum > > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > > Mailscanner version is mailscanner-4.58.9-1 > > > > > > Unforntunaly I get this error msg: > > > ============ > > > file > > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > > perl-Sys-Syslog-0.18-1 > > > file > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > > og/Syslog.so > > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > > from package > > > perl-Sys-Syslog-0.18-1 > > > ============ > > > > > > Could someone help me ? Please try to use an easy english > > because it's > > > not my mother language. > > > > > > I would like to avoid to re-install mailscanner because > > this server is > > > mission critical for us. > > > > > > Thanks very much and sorry for my worst english. > > > > > > > > > Bye > > > > > > Dr. Marcello Anderlini > > > m.anderlini@database.it > > > --------------------------------------------- > > > Database Informatica S.r.l. > > > Microsoft Certified Partner > > > Tel. +39059775070 > > > Fax. +39059779545 > > > http://www.database.it > > > --------------------------------------------- > > > > > > > > > No virus found in this outgoing message. > > > Checked by AVG Free Edition. > > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > > Date: 07/11/2007 > > > 22.52 > > > > > > > > > > > > -- > > > Messaggio verificato dal servizio antivirus di Database > Informatica > > > > > > -- > > > MailScanner mailing list > > > mailscanner@lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > > > Support MailScanner development - buy the book off the website! > > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > No virus found in this incoming message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From m.anderlini at database.it Fri Nov 9 10:48:47 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Fri Nov 9 10:49:05 2007 Subject: R: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0E33@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk><00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> <7EF0EE5CB3B263488C8C18823239BEBA01FD0E33@HC-MBX02.herefordshire.gov.uk> Message-ID: <004601c822be$1b5e3ab0$2301a8c0@dbdomain.database.it> Thanks again, I'll try and let you know. bye -----Messaggio originale----- Da: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di Randal, Phil Inviato: venerd? 9 novembre 2007 10.43 A: MailScanner discussion Oggetto: RE: Errore when I try update perl on centos 4.5 After the forced install of perl, you'll need to "yum update" to get the updated pcre as well. On CentOS 5, force installing the updated perl, yum update, then service MailScanner restart was all that was needed here. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > Marcello Anderlini > Sent: 08 November 2007 16:08 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Good suggestion :-) I'll try tomorrow evening, tell me good luck :-) > > Thanks. > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > Randal, Phil > Inviato: gioved? 8 novembre 2007 16.59 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > That would be your choice. > > I'd reinstall the version you're running now, check that it all works, > and then consider upgrading MailScanner. > > One change at a time :-) > > Cheers, > > Phil > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 15:48 > > To: 'MailScanner discussion' > > Subject: R: Errore when I try update perl on centos 4.5 > > > > Thanks for you answer but I can reinstall the new version of > > mailscanner or I can reinstall the one that I'm using now ? > > > > Thanks ? > > > > -----Messaggio originale----- > > Da: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > > Randal, Phil > > Inviato: gioved? 8 novembre 2007 16.42 > > A: MailScanner discussion > > Oggetto: RE: Errore when I try update perl on centos 4.5 > > > > If yum has already downloaded the package, the procedure would be > > something > > like: > > > > service MailScanner stop > > rpm -Uvh > /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > > --force > > > > then reinstall MailScanner and start it. > > > > If it isn't in your yum cache, wget it from a CentOS mirror > and force > > install it. > > > > Cheers, > > > > Phil > > -- > > Phil Randal > > Network Engineer > > Herefordshire Council > > Hereford, UK > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > > Marcello Anderlini > > > Sent: 08 November 2007 14:21 > > > To: 'MailScanner discussion' > > > Subject: Errore when I try update perl on centos 4.5 > > > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 > version via yum > > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > > Mailscanner version is mailscanner-4.58.9-1 > > > > > > Unforntunaly I get this error msg: > > > ============ > > > file > > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > > perl-Sys-Syslog-0.18-1 > > > file > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > > og/Syslog.so > > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > > from package > > > perl-Sys-Syslog-0.18-1 > > > ============ > > > > > > Could someone help me ? Please try to use an easy english > > because it's > > > not my mother language. > > > > > > I would like to avoid to re-install mailscanner because > > this server is > > > mission critical for us. > > > > > > Thanks very much and sorry for my worst english. > > > > > > > > > Bye > > > > > > Dr. Marcello Anderlini > > > m.anderlini@database.it > > > --------------------------------------------- > > > Database Informatica S.r.l. > > > Microsoft Certified Partner > > > Tel. +39059775070 > > > Fax. +39059779545 > > > http://www.database.it > > > --------------------------------------------- > > > > > > > > > No virus found in this outgoing message. > > > Checked by AVG Free Edition. > > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > > Date: 07/11/2007 > > > 22.52 > > > > > > > > > > > > -- > > > Messaggio verificato dal servizio antivirus di Database > Informatica > > > > > > -- > > > MailScanner mailing list > > > mailscanner@lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > > > Support MailScanner development - buy the book off the website! > > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > No virus found in this incoming message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Messaggio verificato dal servizio antivirus di Database Informatica No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.26/1119 - Release Date: 08/11/2007 17.55 No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.26/1119 - Release Date: 08/11/2007 17.55 -- Messaggio verificato dal servizio antivirus di Database Informatica From JVolckaert at bellmi.org Fri Nov 9 17:56:43 2007 From: JVolckaert at bellmi.org (Jeff A. Volckaert) Date: Fri Nov 9 18:08:57 2007 Subject: Help understanding reports In-Reply-To: <200711021200.lA2C0Erw019339@safir.blacknight.ie> Message-ID: <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> Hello Everybody, I just started running mailscanner-mrtg and have two questions on the reports that I'm seeing. My setup is the current version of Mailscanner running on Redhat and scanning with Sophos. I currently don't run Spamassassin. This then passes mail to our Exchange server which runs Microsoft's content filter. We have SBC DSL for our Internet connection. My first question is about Mail Relayed. We are seeing about 8000 messages a day in and 7000 messages out. Where is the other 1000 going? Without Spamassassin I'm currently blocking about 40 messages with Mailscanner. I know 90%+ is spam, but why isn't it relayed to Exchange? My second question is about viruses blocked. In the last day I have blocked only one virus and that was because it was an encrypted spreadsheet. Where are all the other viruses? We used to get a ton. Is SBC filtering them for us? Thanks, Jeff From dgottsc at emory.edu Fri Nov 9 18:16:24 2007 From: dgottsc at emory.edu (Gottschalk, David) Date: Fri Nov 9 18:16:33 2007 Subject: Help understanding reports In-Reply-To: <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> References: <200711021200.lA2C0Erw019339@safir.blacknight.ie> <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> Message-ID: <8D2EFA3D9FD29C45BCEC3B532F0E230842255B096C@RDPEXCH2.Eu.Emory.Edu> Jeff, My experience with mailscanner-mrtg was it was highly inaccurate, until I modified the script a bit. The numbers seemed all over the place. I messed with it a bit, and was finally able to get some realistic looking numbers out of it. The software is pretty old as far as I can recall. Hope that helps. David Gottschalk UTS Infrastructure Technology Services -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeff A. Volckaert Sent: Friday, November 09, 2007 12:57 PM To: mailscanner@lists.mailscanner.info Subject: Help understanding reports Hello Everybody, I just started running mailscanner-mrtg and have two questions on the reports that I'm seeing. My setup is the current version of Mailscanner running on Redhat and scanning with Sophos. I currently don't run Spamassassin. This then passes mail to our Exchange server which runs Microsoft's content filter. We have SBC DSL for our Internet connection. My first question is about Mail Relayed. We are seeing about 8000 messages a day in and 7000 messages out. Where is the other 1000 going? Without Spamassassin I'm currently blocking about 40 messages with Mailscanner. I know 90%+ is spam, but why isn't it relayed to Exchange? My second question is about viruses blocked. In the last day I have blocked only one virus and that was because it was an encrypted spreadsheet. Where are all the other viruses? We used to get a ton. Is SBC filtering them for us? Thanks, Jeff -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From list-mailscanner at linguaphone.com Fri Nov 9 19:22:08 2007 From: list-mailscanner at linguaphone.com (Gareth) Date: Fri Nov 9 19:22:16 2007 Subject: Help understanding reports In-Reply-To: <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> Message-ID: I havent seen a real virus for about a week on my setup. I am running clamav and bitdefender and all the viruses listed in my logwatch report are the sanesecurity spam signatures for clamav. > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info]On Behalf Of Jeff A. > Volckaert > Sent: 09 November 2007 17:57 > To: mailscanner@lists.mailscanner.info > Subject: Help understanding reports > > > Hello Everybody, > > I just started running mailscanner-mrtg and have two questions on the > reports that I'm seeing. My setup is the current version of Mailscanner > running on Redhat and scanning with Sophos. I currently don't run > Spamassassin. This then passes mail to our Exchange server which runs > Microsoft's content filter. We have SBC DSL for our Internet > connection. > > My first question is about Mail Relayed. We are seeing about 8000 > messages a day in and 7000 messages out. Where is the other 1000 going? > Without Spamassassin I'm currently blocking about 40 messages with > Mailscanner. I know 90%+ is spam, but why isn't it relayed to Exchange? > > My second question is about viruses blocked. In the last day I have > blocked only one virus and that was because it was an encrypted > spreadsheet. Where are all the other viruses? We used to get a ton. > Is SBC filtering them for us? > > Thanks, > Jeff > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > From gerard at seibercom.net Fri Nov 9 21:31:00 2007 From: gerard at seibercom.net (Gerard Seibert) Date: Fri Nov 9 21:30:15 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> Message-ID: <20071109162310.90D1.GERARD@seibercom.net> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: [ ... ] > Ah. Great that you found it (all MTA, and OT, but still.... One could > well think the ones over at the PF list would've been able to see > this:-):-)... Anyway... I do think that evere other second is a bit > often, you could try every 10 or 15 seconds or similar... Would mean > approximately 25 deliveries in every chunk. But if the system doesn't > suffer too much from the queue scans... well, every other second it > is:-). OK, I don't want to start a war here; however, I saw "R Wahyudi " original post on the Postfix forum. I did not see a copy of his 'postconf -n' output. Without that information it would have been virtually impossible for anyone to have accurately diagnosed his problem. IMHO, he would be well served to post that information, as well as detailed information regarding his network on the Postfix forum so that his problem could be properly analysed. Altering the default settings as much as he apparently has done does not seem correct. -- Gerard No matter how rich you become, how famous or powerful, when you die the size of your funeral will still pretty much depend on the weather. Michael Pritchard From hvdkooij at vanderkooij.org Fri Nov 9 21:50:49 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Fri Nov 9 21:51:18 2007 Subject: Help understanding reports In-Reply-To: References: Message-ID: <4734D639.1010300@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gareth wrote: > I havent seen a real virus for about a week on my setup. I am running clamav > and bitdefender and all the viruses listed in my logwatch report are the > sanesecurity spam signatures for clamav. I get about 2 to 4 instances of that ancient Mydoom.M (or by whatever name it goes with your scanner ;-) a week. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD4DBQFHNNY3BvzDRVjxmYERAs1TAJjb1EBDPHe8P+i0UElg9mXUCIgUAJ9nuB8z 0mwuEBd3sHeb02IUHfHxXA== =4gLw -----END PGP SIGNATURE----- From rwahyudi at gmail.com Fri Nov 9 22:50:30 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Fri Nov 9 22:50:34 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <20071109162310.90D1.GERARD@seibercom.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> Message-ID: <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> I did .. http://archives.neohapsis.com/archives/postfix/2007-11/0364.html Anyway .. I am still curious to know if this is the default MailScanner - postfix behavior ie : you have to wait for qmgr to respawn to be able to deliver message from incoming queue ?? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071110/c953c26a/attachment.html From drew.marshall at technologytiger.net Fri Nov 9 23:55:29 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Fri Nov 9 23:55:45 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> Message-ID: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > I did .. http://archives.neohapsis.com/archives/postfix/ > 2007-11/0364.html > > Anyway .. I am still curious to know if this is the default > MailScanner - postfix behavior ie : you have to wait for > qmgr to respawn to be able to deliver message from incoming queue ?? Evening all, been far too long since I have posted (Been stupidly busy :-( ) I would suggest you want to check your Delivery method option at the bottom MailScanner.conf and make sure it is batch and not queue. Setting it to queue would invoke this behaviour. Changing the queue runner settings should not be required. The queue running is called by Postfix when each process finishes to advise the next to run. The 300 second delay is merely to catch anything that 'got left behind'. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071109/e34c6326/attachment.html From MailScanner at ecs.soton.ac.uk Sat Nov 10 00:50:24 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 00:50:38 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> Message-ID: <47350050.3040107@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Drew Marshall wrote: > On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >> I did .. >> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >> >> Anyway .. I am still curious to know if this is the default >> MailScanner - postfix behavior ie : you have to wait for >> qmgr to respawn to be able to deliver message from incoming queue ?? > > Evening all, been far too long since I have posted (Been stupidly busy > :-( ) Glad to see you back! > > I would suggest you want to check your Delivery method option at the > bottom MailScanner.conf and make sure it is batch and not queue. > Setting it to queue would invoke this behaviour. Changing the queue > runner settings should not be required. The queue running is called by > Postfix when each process finishes to advise the next to run. The 300 > second delay is merely to catch anything that 'got left behind'. Good catch, I had completely forgotten that might be what's happening. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNQBSEfZZRxQVtlQRAl71AKCgkUd1cimwQGieRwWBeLlBdxH9CACgkBup QCqGhUZUB0OHf3GV7w7rVsk= =oQF/ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From drew.marshall at technologytiger.net Sat Nov 10 02:14:53 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 10 02:15:08 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47350050.3040107@ecs.soton.ac.uk> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> Message-ID: On 10 Nov 2007, at 00:50, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Drew Marshall wrote: >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >> >>> I did .. >>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >>> >>> Anyway .. I am still curious to know if this is the default >>> MailScanner - postfix behavior ie : you have to wait for >>> qmgr to respawn to be able to deliver message from incoming queue ?? >> >> Evening all, been far too long since I have posted (Been stupidly >> busy >> :-( ) > Glad to see you back! Nice to be back! Mind you I have some reading to do (I didn't really go, just no time to post and only just enough time to read some threads). Hope you are feeling better, Shingles is no fun :-( Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From micoots at yahoo.com Sat Nov 10 05:02:05 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sat Nov 10 05:02:17 2007 Subject: $hostname not translated in reports Message-ID: <35153.69256.qm@web33312.mail.mud.yahoo.com> Hi, When email reports get emailed to addresses (the "Hostname" variable in MailScanner.conf), I notice that the $hostname is never translated to the actual hostname of the machine that has the quarantined file. I just see: () How can I trouble-shoot this so that I can fix it? ie. where do I need to look to define the $hostname for the reports per MailScanner server I run? Thanks. Michael. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071110/3d10e9d0/attachment.html From glenn.steen at gmail.com Sat Nov 10 10:45:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:45:37 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <20071109162310.90D1.GERARD@seibercom.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> Message-ID: <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> On 09/11/2007, Gerard Seibert wrote: > On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > > [ ... ] > > > Ah. Great that you found it (all MTA, and OT, but still.... One could > > well think the ones over at the PF list would've been able to see > > this:-):-)... Anyway... I do think that evere other second is a bit > > often, you could try every 10 or 15 seconds or similar... Would mean > > approximately 25 deliveries in every chunk. But if the system doesn't > > suffer too much from the queue scans... well, every other second it > > is:-). > > OK, I don't want to start a war here; however, I saw "R Wahyudi > " original post on the Postfix forum. I did not see a > copy of his 'postconf -n' output. Without that information it would have been > virtually impossible for anyone to have accurately diagnosed his problem. As you know Gerard, I'm not the contentious type;-). No wars in sight... You are quite right, Rianto could have been as detailed as he (or is that a female name?) eventually was here, but that is not my point... All I say is that they could have asked for relevant information (not just the "use of MailScanner disqualifies you from ever getting our help" line). As you did here. I don't think there is any argument here, is there? > IMHO, he would be well served to post that information, as well as detailed > information regarding his network on the Postfix forum so that his problem > could be properly analysed. Altering the default settings as much as he > apparently has done does not seem correct. > Yes,I think it a bit ... extreme... too. But with the figures of incoming mail s/he cites, if the qmgr really only wakeup every five minutes... that *will* land him/her with a seemingly slow delivery, there is no argumenting with that. On the other hand, I'm sure one could try affect the operation of the qmgr other ways that might get the same effect, or even some MailScanner setting. I'm very busy/tired ATM, so haven't spent even close to enough time looking at this problem ... Perhaps shouldn't be posting on the list at all... Sigh - Where did things like "free time" and "relaxation" go?:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 10:47:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:47:28 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> Message-ID: <223f97700711100247s13f94b06p40707dae4c792971@mail.gmail.com> On 09/11/2007, R Wahyudi wrote: > I did .. > http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > > Anyway .. I am still curious to know if this is the default MailScanner - > postfix behavior ie : you have to wait for > qmgr to respawn to be able to deliver message from incoming queue ?? > No, it should get kicked for each batch. ... assuming batch mode... Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 10:48:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:48:29 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> Message-ID: <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> On 10/11/2007, Drew Marshall wrote: > > > On 9 Nov 2007, at 22:50, R Wahyudi wrote: > I did .. > http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > > Anyway .. I am still curious to know if this is the default MailScanner - > postfix behavior ie : you have to wait for > qmgr to respawn to be able to deliver message from incoming queue ?? > Evening all, been far too long since I have posted (Been stupidly busy :-( ) > > I would suggest you want to check your Delivery method option at the bottom > MailScanner.conf and make sure it is batch and not queue. Setting it to > queue would invoke this behaviour. Changing the queue runner settings should > not be required. The queue running is called by Postfix when each process > finishes to advise the next to run. The 300 second delay is merely to catch > anything that 'got left behind'. > > Drew The word of reason returnes! Glad to see you Drew! Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 10:50:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:50:36 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> Message-ID: <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> On 10/11/2007, Drew Marshall wrote: > On 10 Nov 2007, at 00:50, Julian Field wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > > > > > Drew Marshall wrote: > >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >> > >>> I did .. > >>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > >>> > >>> Anyway .. I am still curious to know if this is the default > >>> MailScanner - postfix behavior ie : you have to wait for > >>> qmgr to respawn to be able to deliver message from incoming queue ?? > >> > >> Evening all, been far too long since I have posted (Been stupidly > >> busy > >> :-( ) > > Glad to see you back! > > Nice to be back! Mind you I have some reading to do (I didn't really > go, just no time to post and only just enough time to read some > threads). Hope you are feeling better, Shingles is no fun :-( > > Drew Uh, enlighten a poo Swede, would you... What are "shingles"? Thought that'd be a 1930's hair style:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Sat Nov 10 12:48:13 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 12:48:30 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> Message-ID: <4735A88D.4060105@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Glenn Steen wrote: > On 10/11/2007, Drew Marshall wrote: > >> On 10 Nov 2007, at 00:50, Julian Field wrote: >> >> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> >>> >>> Drew Marshall wrote: >>> >>>> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >>>> >>>> >>>>> I did .. >>>>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >>>>> >>>>> Anyway .. I am still curious to know if this is the default >>>>> MailScanner - postfix behavior ie : you have to wait for >>>>> qmgr to respawn to be able to deliver message from incoming queue ?? >>>>> >>>> Evening all, been far too long since I have posted (Been stupidly >>>> busy >>>> :-( ) >>>> >>> Glad to see you back! >>> >> Nice to be back! Mind you I have some reading to do (I didn't really >> go, just no time to post and only just enough time to read some >> threads). Hope you are feeling better, Shingles is no fun :-( >> >> Drew >> > Uh, enlighten a poo Swede, would you... What are "shingles"? Thought > that'd be a 1930's hair style:-) > It's the same virus pretty much as causes chickenpox in children. It travels along your nerves. Most people carry it, it just lies dormant. Occasionally it flares up, and causes spots on the skin along the rough path of the nerve it has flared up in. It also causes a nerve pain (rather like RSI pain) due to inflammation of the nerves (I think). Wikipedia has an article all about it http://en.wikipedia.org/wiki/Herpes_zoster Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNaiOEfZZRxQVtlQRAogeAKDqUZIg0Cj3g57K8FotPfLtFagpIgCeJk6B EUgSI+WD7ZBl9NxH+BNMTuI= =bmmh -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Sat Nov 10 13:07:29 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 13:07:42 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4735A88D.4060105@ecs.soton.ac.uk> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> <4735A88D.4060105@ecs.soton.ac.uk> Message-ID: <223f97700711100507p6d32147fhd0cc45e0b7f9e21c@mail.gmail.com> On 10/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Glenn Steen wrote: > > On 10/11/2007, Drew Marshall wrote: > > > >> On 10 Nov 2007, at 00:50, Julian Field wrote: > >> > >> > >>> -----BEGIN PGP SIGNED MESSAGE----- > >>> Hash: SHA1 > >>> > >>> > >>> > >>> Drew Marshall wrote: > >>> > >>>> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >>>> > >>>> > >>>>> I did .. > >>>>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > >>>>> > >>>>> Anyway .. I am still curious to know if this is the default > >>>>> MailScanner - postfix behavior ie : you have to wait for > >>>>> qmgr to respawn to be able to deliver message from incoming queue ?? > >>>>> > >>>> Evening all, been far too long since I have posted (Been stupidly > >>>> busy > >>>> :-( ) > >>>> > >>> Glad to see you back! > >>> > >> Nice to be back! Mind you I have some reading to do (I didn't really > >> go, just no time to post and only just enough time to read some > >> threads). Hope you are feeling better, Shingles is no fun :-( > >> > >> Drew > >> > > Uh, enlighten a poo Swede, would you... What are "shingles"? Thought > > that'd be a 1930's hair style:-) > > > It's the same virus pretty much as causes chickenpox in children. It > travels along your nerves. Most people carry it, it just lies dormant. > Occasionally it flares up, and causes spots on the skin along the rough > path of the nerve it has flared up in. It also causes a nerve pain > (rather like RSI pain) due to inflammation of the nerves (I think). > > Wikipedia has an article all about it > http://en.wikipedia.org/wiki/Herpes_zoster > > Jules > Ah, that kind of Herpes... Nasty. Not much to do other than to wait it out:/... Hope it wasn't too bad. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From brose at med.wayne.edu Sat Nov 10 14:37:13 2007 From: brose at med.wayne.edu (Rose, Bobby) Date: Sat Nov 10 14:37:32 2007 Subject: Mailscanner filename check and report In-Reply-To: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Message-ID: <8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> I've been using MailScanner for years and I seen this issue a couple times before but just assumed it was a user mistake. I've seen sender.filename.report sends back a message with the wrong $filename string. What is sends back is a random string of characters. The message says One or more of the attachments (VAmRh3qo9P) are on the list of unacceptable attachments for this site and will not have been delivered. Consider renaming the files to avoid this constraint. The virus detector said this about the message: Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) But in the maillogs, it has the real filename Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam checks (2826228 > 200000 bytes) Nov 8 10:10:23 eeyore MailScanner[25630]: Expanding TNEF archive at /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 added TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip Education.lg.10.31.20071.ppt Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 has had TNEF winmail.dat removed Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: Found possible filename hiding (lA8F96O2031926 RHO Flip Education.lg.10.31.20071.ppt.doc) Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message lA8F96O2031926 to SQL Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to MailWatch SQL I'm not sure of the conditions that lead to this because it doesn't always happen and if I test myself, the sender.filename.report message is correct. Anyone else seen this before? -=B From gerard at seibercom.net Sat Nov 10 14:42:35 2007 From: gerard at seibercom.net (Gerard Seibert) Date: Sat Nov 10 14:41:45 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> References: <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> Message-ID: <20071110093358.6F33.GERARD@seibercom.net> On Saturday November 10, 2007 at 05:45:33 (AM) Glenn Steen wrote: > On 09/11/2007, Gerard Seibert wrote: > > On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > > > > [ ... ] > > > > > Ah. Great that you found it (all MTA, and OT, but still.... One could > > > well think the ones over at the PF list would've been able to see > > > this:-):-)... Anyway... I do think that evere other second is a bit > > > often, you could try every 10 or 15 seconds or similar... Would mean > > > approximately 25 deliveries in every chunk. But if the system doesn't > > > suffer too much from the queue scans... well, every other second it > > > is:-). > > > > OK, I don't want to start a war here; however, I saw "R Wahyudi > > " original post on the Postfix forum. I did not see a > > copy of his 'postconf -n' output. Without that information it would have been > > virtually impossible for anyone to have accurately diagnosed his problem. > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > You are quite right, Rianto could have been as detailed as he (or is > that a female name?) eventually was here, but that is not my point... > All I say is that they could have asked for relevant information (not > just the "use of MailScanner disqualifies you from ever getting our > help" line). > As you did here. > I don't think there is any argument here, is there? None at all. However, users of the Postfix forum know that in order to receive suitable assistance they are required to post the output of 'postconf -n' as well as their system configuration and any unaltered log files that relate to their problem. Failure to do that just wastes everyone's time. By the way, there is some excelent information regarding gmgr located at: http://www.postfix.org/qmgr.8.html In any case, Victor might just have been having a bad day. It happens to all of us at one time or another. > > IMHO, he would be well served to post that information, as well as detailed > > information regarding his network on the Postfix forum so that his problem > > could be properly analysed. Altering the default settings as much as he > > apparently has done does not seem correct. > > > Yes,I think it a bit ... extreme... too. But with the figures of > incoming mail s/he cites, if the qmgr really only wakeup every five > minutes... that *will* land him/her with a seemingly slow delivery, > there is no argumenting with that. On the other hand, I'm sure one > could try affect the operation of the qmgr other ways that might get > the same effect, or even some MailScanner setting. > I'm very busy/tired ATM, so haven't spent even close to enough time > looking at this problem ... Perhaps shouldn't be posting on the list > at all... Sigh - Where did things like "free time" and "relaxation" > go?:-) > > Cheers -- Gerard From glenn.steen at gmail.com Sat Nov 10 15:59:29 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 15:59:35 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <20071110093358.6F33.GERARD@seibercom.net> References: <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> <20071110093358.6F33.GERARD@seibercom.net> Message-ID: <223f97700711100759m5556d7c2o10172bd9179b3486@mail.gmail.com> On 10/11/2007, Gerard Seibert wrote: > On Saturday November 10, 2007 at 05:45:33 (AM) Glenn Steen wrote: > > > On 09/11/2007, Gerard Seibert wrote: > > > On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > > > > > > [ ... ] > > > > > > > Ah. Great that you found it (all MTA, and OT, but still.... One could > > > > well think the ones over at the PF list would've been able to see > > > > this:-):-)... Anyway... I do think that evere other second is a bit > > > > often, you could try every 10 or 15 seconds or similar... Would mean > > > > approximately 25 deliveries in every chunk. But if the system doesn't > > > > suffer too much from the queue scans... well, every other second it > > > > is:-). > > > > > > OK, I don't want to start a war here; however, I saw "R Wahyudi > > > " original post on the Postfix forum. I did not see a > > > copy of his 'postconf -n' output. Without that information it would have been > > > virtually impossible for anyone to have accurately diagnosed his problem. > > > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > > You are quite right, Rianto could have been as detailed as he (or is > > that a female name?) eventually was here, but that is not my point... > > All I say is that they could have asked for relevant information (not > > just the "use of MailScanner disqualifies you from ever getting our > > help" line). > > As you did here. > > I don't think there is any argument here, is there? > > None at all. However, users of the Postfix forum know that in order to receive > suitable assistance they are required to post the output of 'postconf -n' as > well as their system configuration and any unaltered log files that relate to > their problem. Failure to do that just wastes everyone's time. Quite true, and in that they're not any different than this list... Well, they're a bit more adamant, that is true:-):-) > By the way, there is some excelent information regarding gmgr located at: > > http://www.postfix.org/qmgr.8.html Yep. Nothing beats RTM:-). Well, maybe RTM&Understanding it too:-) > In any case, Victor might just have been having a bad day. It happens to all > of us at one time or another. If Victor is responsible (as I suspect) for the MSCI lists setup/management ... then he has had more than one bad day:-):-D. Hackish and not sensitive to "user unknown" rejections ... Sigh. Then again, the hack seems to be effective in other ways, so it's not all bad:) > > > IMHO, he would be well served to post that information, as well as detailed > > > information regarding his network on the Postfix forum so that his problem > > > could be properly analysed. Altering the default settings as much as he > > > apparently has done does not seem correct. > > > > > Yes,I think it a bit ... extreme... too. But with the figures of > > incoming mail s/he cites, if the qmgr really only wakeup every five > > minutes... that *will* land him/her with a seemingly slow delivery, > > there is no argumenting with that. On the other hand, I'm sure one > > could try affect the operation of the qmgr other ways that might get > > the same effect, or even some MailScanner setting. > > I'm very busy/tired ATM, so haven't spent even close to enough time > > looking at this problem ... Perhaps shouldn't be posting on the list > > at all... Sigh - Where did things like "free time" and "relaxation" > > go?:-) > > > > Cheers > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Sat Nov 10 16:16:57 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 16:17:12 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100507p6d32147fhd0cc45e0b7f9e21c@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> <4735A88D.4060105@ecs.soton.ac.uk> <223f97700711100507p6d32147fhd0cc45e0b7f9e21c@mail.gmail.com> Message-ID: <4735D979.7010008@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Glenn Steen wrote: > On 10/11/2007, Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> >> >> Glenn Steen wrote: >> >>> On 10/11/2007, Drew Marshall wrote: >>> >>> >>>> On 10 Nov 2007, at 00:50, Julian Field wrote: >>>> >>>> >>>> >>>>> -----BEGIN PGP SIGNED MESSAGE----- >>>>> Hash: SHA1 >>>>> >>>>> >>>>> >>>>> Drew Marshall wrote: >>>>> >>>>> >>>>>> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >>>>>> >>>>>> >>>>>> >>>>>>> I did .. >>>>>>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >>>>>>> >>>>>>> Anyway .. I am still curious to know if this is the default >>>>>>> MailScanner - postfix behavior ie : you have to wait for >>>>>>> qmgr to respawn to be able to deliver message from incoming queue ?? >>>>>>> >>>>>>> >>>>>> Evening all, been far too long since I have posted (Been stupidly >>>>>> busy >>>>>> :-( ) >>>>>> >>>>>> >>>>> Glad to see you back! >>>>> >>>>> >>>> Nice to be back! Mind you I have some reading to do (I didn't really >>>> go, just no time to post and only just enough time to read some >>>> threads). Hope you are feeling better, Shingles is no fun :-( >>>> >>>> Drew >>>> >>>> >>> Uh, enlighten a poo Swede, would you... What are "shingles"? Thought >>> that'd be a 1930's hair style:-) >>> >>> >> It's the same virus pretty much as causes chickenpox in children. It >> travels along your nerves. Most people carry it, it just lies dormant. >> Occasionally it flares up, and causes spots on the skin along the rough >> path of the nerve it has flared up in. It also causes a nerve pain >> (rather like RSI pain) due to inflammation of the nerves (I think). >> >> Wikipedia has an article all about it >> http://en.wikipedia.org/wiki/Herpes_zoster >> >> Jules >> >> > Ah, that kind of Herpes... Nasty. > Not much to do other than to wait it out:/... Hope it wasn't too bad. > It's just the RSI-like ache that is left behind now, everything else has completely healed. It's going to take a few weeks to get of this ache, which isn't painful just damn uncomfortable. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNdl7EfZZRxQVtlQRAkCaAJwMD2/9XZ7un3jFPtSwdYMjqzZHrACfX7zv zkM8onZyfy7QzLR9Y+tQ5IM= =cUD+ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Sat Nov 10 16:18:16 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 16:18:41 2007 Subject: Mailscanner filename check and report In-Reply-To: <8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> <8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> Message-ID: <4735D9C8.2010301@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I would be very interested if someone can give me a reproducible example of when it goes wrong. Before I get that, there's unfortunately very little I can do about this problem, sorry. Rose, Bobby wrote: > > I've been using MailScanner for years and I seen this issue a couple > times before but just assumed it was a user mistake. I've seen > sender.filename.report sends back a message with the wrong $filename > string. What is sends back is a random string of characters. > > The message says > > One or more of the attachments (VAmRh3qo9P) are on the list of > unacceptable attachments for this site and will not have been delivered. > > Consider renaming the files to avoid this constraint. > > The virus detector said this about the message: > Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) > > But in the maillogs, it has the real filename > > Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from > 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam > checks (2826228 > 200000 bytes) > Nov 8 10:10:23 eeyore MailScanner[25630]: Expanding TNEF archive at > /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat > Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 added > TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip > Education.lg.10.31.20071.ppt > Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 has > had TNEF winmail.dat removed > Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: Found > possible filename hiding (lA8F96O2031926 RHO Flip > Education.lg.10.31.20071.ppt.doc) > Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message > lA8F96O2031926 to SQL > Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to > MailWatch SQL > > I'm not sure of the conditions that lead to this because it doesn't > always happen and if I test myself, the sender.filename.report message > is correct. Anyone else seen this before? > > -=B > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNdnJEfZZRxQVtlQRAld6AJ42jnVnrHomdy3pX7a6SqFtNMwL1QCggaTy x3V3Bb6MSavDu4LCKFc4fCw= =Bt9c -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From brose at med.wayne.edu Sat Nov 10 18:36:32 2007 From: brose at med.wayne.edu (Rose, Bobby) Date: Sat Nov 10 18:36:42 2007 Subject: Mailscanner filename check and report In-Reply-To: <4735D9C8.2010301@ecs.soton.ac.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it><8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> <4735D9C8.2010301@ecs.soton.ac.uk> Message-ID: <8F2A53954C22554EB75D9643FCCE0C6B05A5F864@MED-CORE03-MS1.med.wayne.edu> I've been trying to reproduce but haven't, but the issue could probably be explained if we knew were MailScanner's report mech is getting that random string name. I had another yesterday. Report: Attempt to hide real filename extension (zTEEXqUDfZ) but logs have Nov 9 11:06:32 eeyore MailScanner[6019]: Expanding TNEF archive at /var/spool/MailScanner/incoming/6019/lA9G6Nc2009380/winmail.dat Nov 9 11:06:32 eeyore MailScanner[6019]: Message lA9G6Nc2009380 added TNEF contents Dr_Vay_shopcart.aspx.htm Nov 9 11:06:32 eeyore MailScanner[6019]: Message lA9G6Nc2009380 has had TNEF winmail.dat removed Nov 9 11:06:34 eeyore MailScanner[6019]: Filename Checks: Found possible filename hiding (lA9G6Nc2009380 Dr_Vay_shopcart.aspx.htm) Is that random string something generated from the tnef extraction? -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field Sent: Saturday, November 10, 2007 11:18 AM To: MailScanner discussion Subject: Re: Mailscanner filename check and report -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I would be very interested if someone can give me a reproducible example of when it goes wrong. Before I get that, there's unfortunately very little I can do about this problem, sorry. Rose, Bobby wrote: > > I've been using MailScanner for years and I seen this issue a couple > times before but just assumed it was a user mistake. I've seen > sender.filename.report sends back a message with the wrong $filename > string. What is sends back is a random string of characters. > > The message says > > One or more of the attachments (VAmRh3qo9P) are on the list of > unacceptable attachments for this site and will not have been delivered. > > Consider renaming the files to avoid this constraint. > > The virus detector said this about the message: > Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) > > But in the maillogs, it has the real filename > > Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from > 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam > checks (2826228 > 200000 bytes) Nov 8 10:10:23 eeyore > MailScanner[25630]: Expanding TNEF archive at > /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat > Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 > added TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip > Education.lg.10.31.20071.ppt Nov 8 10:10:24 eeyore > MailScanner[25630]: Message lA8F96O2031926 has had TNEF winmail.dat > removed Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: > Found possible filename hiding (lA8F96O2031926 RHO Flip > Education.lg.10.31.20071.ppt.doc) > Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message > lA8F96O2031926 to SQL > Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to > MailWatch SQL > > I'm not sure of the conditions that lead to this because it doesn't > always happen and if I test myself, the sender.filename.report message > is correct. Anyone else seen this before? > > -=B > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNdnJEfZZRxQVtlQRAld6AJ42jnVnrHomdy3pX7a6SqFtNMwL1QCggaTy x3V3Bb6MSavDu4LCKFc4fCw= =Bt9c -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From drew.marshall at technologytiger.net Sat Nov 10 19:01:36 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 10 19:01:48 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> Message-ID: <1B533F32-0C5B-4FC9-900B-D641B622EB46@technologytiger.net> On 10 Nov 2007, at 10:48, Glenn Steen wrote: > On 10/11/2007, Drew Marshall > wrote: >> >> >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >> I did .. >> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >> >> Anyway .. I am still curious to know if this is the default >> MailScanner - >> postfix behavior ie : you have to wait for >> qmgr to respawn to be able to deliver message from incoming queue ?? >> Evening all, been far too long since I have posted (Been stupidly >> busy :-( ) >> >> I would suggest you want to check your Delivery method option at >> the bottom >> MailScanner.conf and make sure it is batch and not queue. Setting >> it to >> queue would invoke this behaviour. Changing the queue runner >> settings should >> not be required. The queue running is called by Postfix when each >> process >> finishes to advise the next to run. The 300 second delay is merely >> to catch >> anything that 'got left behind'. >> >> Drew > The word of reason returnes! > Glad to see you Drew! Thanks Glenn. Hope you are keeping well? Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From ssilva at sgvwater.com Sat Nov 10 21:27:28 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Sat Nov 10 21:28:04 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> Message-ID: on 11/10/2007 2:45 AM Glenn Steen spake the following: > On 09/11/2007, Gerard Seibert wrote: >> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: >> >> [ ... ] >> >>> Ah. Great that you found it (all MTA, and OT, but still.... One could >>> well think the ones over at the PF list would've been able to see >>> this:-):-)... Anyway... I do think that evere other second is a bit >>> often, you could try every 10 or 15 seconds or similar... Would mean >>> approximately 25 deliveries in every chunk. But if the system doesn't >>> suffer too much from the queue scans... well, every other second it >>> is:-). >> OK, I don't want to start a war here; however, I saw "R Wahyudi >> " original post on the Postfix forum. I did not see a >> copy of his 'postconf -n' output. Without that information it would have been >> virtually impossible for anyone to have accurately diagnosed his problem. > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > You are quite right, Rianto could have been as detailed as he (or is > that a female name?) eventually was here, but that is not my point... > All I say is that they could have asked for relevant information (not > just the "use of MailScanner disqualifies you from ever getting our > help" line). > As you did here. > I don't think there is any argument here, is there? > >> IMHO, he would be well served to post that information, as well as detailed >> information regarding his network on the Postfix forum so that his problem >> could be properly analysed. Altering the default settings as much as he >> apparently has done does not seem correct. >> > Yes,I think it a bit ... extreme... too. But with the figures of > incoming mail s/he cites, if the qmgr really only wakeup every five > minutes... that *will* land him/her with a seemingly slow delivery, > there is no argumenting with that. On the other hand, I'm sure one > could try affect the operation of the qmgr other ways that might get > the same effect, or even some MailScanner setting. > I'm very busy/tired ATM, so haven't spent even close to enough time > looking at this problem ... Perhaps shouldn't be posting on the list > at all... Sigh - Where did things like "free time" and "relaxation" > go?:-) > > Cheers My free time seems to be from when my head hits the pillow to when the alarm clock or phone rings! ;-P Lately, I have been in the emergency room almost every night with my spouse and her condition that the doctors call "Irritable bowel syndrome" or translated to layman's terms "Yes she is vomiting and yes she has pain, but we just can't figure out what is causing it" Trying to function at work on one or two hours of sleep is starting to get to me, but I have missed so much work in the last 5 years that I am afraid to take too much time off. I feel for all of you with cronic conditions, and just remember that as long as you are on the green side of the grass, things aren't as bad as they could be. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From glenn.steen at gmail.com Sat Nov 10 21:41:27 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 21:41:29 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <1B533F32-0C5B-4FC9-900B-D641B622EB46@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> <1B533F32-0C5B-4FC9-900B-D641B622EB46@technologytiger.net> Message-ID: <223f97700711101341k455c1e3by499c6884c224c56f@mail.gmail.com> On 10/11/2007, Drew Marshall wrote: > On 10 Nov 2007, at 10:48, Glenn Steen wrote: > > > On 10/11/2007, Drew Marshall > > wrote: > >> > >> > >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >> I did .. > >> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > >> > >> Anyway .. I am still curious to know if this is the default > >> MailScanner - > >> postfix behavior ie : you have to wait for > >> qmgr to respawn to be able to deliver message from incoming queue ?? > >> Evening all, been far too long since I have posted (Been stupidly > >> busy :-( ) > >> > >> I would suggest you want to check your Delivery method option at > >> the bottom > >> MailScanner.conf and make sure it is batch and not queue. Setting > >> it to > >> queue would invoke this behaviour. Changing the queue runner > >> settings should > >> not be required. The queue running is called by Postfix when each > >> process > >> finishes to advise the next to run. The 300 second delay is merely > >> to catch > >> anything that 'got left behind'. > >> > >> Drew > > The word of reason returnes! > > Glad to see you Drew! > > Thanks Glenn. Hope you are keeping well? > > Drew > Well enough, I guess.... I'll look nice in the coffin, eventually:-):-) The work is pretty gruesome though... Just keeps piling up... Ah well, that's what being alive is about I guess, keeping busy:). Am on some new meds now, which actually seem to work (azatioprin/Imurel... Immunosuppressant that keeps the bone marrow fromproducing too much white bloodcells... seems to have "cured" me:-), so that is looking really good. What's been keeping you busy then? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 22:00:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 22:00:39 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> Message-ID: <223f97700711101400s1c93cff2r5859d5ff94e1ed44@mail.gmail.com> On 10/11/2007, Scott Silva wrote: > on 11/10/2007 2:45 AM Glenn Steen spake the following: > > On 09/11/2007, Gerard Seibert wrote: > >> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > >> > >> [ ... ] > >> > >>> Ah. Great that you found it (all MTA, and OT, but still.... One could > >>> well think the ones over at the PF list would've been able to see > >>> this:-):-)... Anyway... I do think that evere other second is a bit > >>> often, you could try every 10 or 15 seconds or similar... Would mean > >>> approximately 25 deliveries in every chunk. But if the system doesn't > >>> suffer too much from the queue scans... well, every other second it > >>> is:-). > >> OK, I don't want to start a war here; however, I saw "R Wahyudi > >> " original post on the Postfix forum. I did not see a > >> copy of his 'postconf -n' output. Without that information it would have been > >> virtually impossible for anyone to have accurately diagnosed his problem. > > > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > > You are quite right, Rianto could have been as detailed as he (or is > > that a female name?) eventually was here, but that is not my point... > > All I say is that they could have asked for relevant information (not > > just the "use of MailScanner disqualifies you from ever getting our > > help" line). > > As you did here. > > I don't think there is any argument here, is there? > > > >> IMHO, he would be well served to post that information, as well as detailed > >> information regarding his network on the Postfix forum so that his problem > >> could be properly analysed. Altering the default settings as much as he > >> apparently has done does not seem correct. > >> > > Yes,I think it a bit ... extreme... too. But with the figures of > > incoming mail s/he cites, if the qmgr really only wakeup every five > > minutes... that *will* land him/her with a seemingly slow delivery, > > there is no argumenting with that. On the other hand, I'm sure one > > could try affect the operation of the qmgr other ways that might get > > the same effect, or even some MailScanner setting. > > I'm very busy/tired ATM, so haven't spent even close to enough time > > looking at this problem ... Perhaps shouldn't be posting on the list > > at all... Sigh - Where did things like "free time" and "relaxation" > > go?:-) > > > > Cheers > My free time seems to be from when my head hits the pillow to when the alarm > clock or phone rings! ;-P :-) > Lately, I have been in the emergency room almost every night with my spouse > and her condition that the doctors call "Irritable bowel syndrome" or > translated to layman's terms "Yes she is vomiting and yes she has pain, but we > just can't figure out what is causing it" I got that diagnose too, initially.... If it isn't UC (which is pretty obvious, whatwith all the blood) IBS is the next thing they try out as an explanation... They've done the lovely endoscopic things ... ? From "both ends"...? Since IBS is an "exclusion diagnose", I suppose they have... Nowadays, a good gastroenterologist will see if it's Crohns ... and the pathology will confirm it... But there are many strange things that look like IBS (even epelepsy... Strange as it sounds). A dear friend of mine has IBS (and her husband has UC....). What they seem to find most irritating is that the doctors just shrug it of, since they really have no clue what to do. Doesn't mean she's in any less pain, or that the condition isn't grave.... Just not immediately life-threatening. Oh well, you already know this, I imagine. I feel for you both. > Trying to function at work on one or two hours of sleep is starting to get to > me, but I have missed so much work in the last 5 years that I am afraid to > take too much time off. Well, if I were you.... I'd talk to the PHB about what he can do to make it possible for you to function as "caretaker" while still pulling your load at work. If it means more work from home, gadgets, phones, portables whatever.... Get him to see the business "profit" of having you available... when you really aren't;-) But you're a smart guy, you already did that...;) If all else fails, a power-nap (on the WC, if it is otherwise frowned upon:) can save any day:-):-) > I feel for all of you with cronic conditions, and just remember that as long > as you are on the green side of the grass, things aren't as bad as they could be. > Yeah, being alive sure beats being fertilizer:-). And as I said in the other mail, in answer to Drew, my new meds have put a new face on things... Hardly any pain at all, normal excrements... Life is definitely looking up. From where I stand ATM, at least:-). Hang in there budy, I know you're a virtual pillar of support, and comfort, for her! Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From hvdkooij at vanderkooij.org Sat Nov 10 23:16:42 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sat Nov 10 23:17:14 2007 Subject: Experimental repository for RHEL 5 / Centos 5 Message-ID: <47363BDA.5050202@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have created an experimental setup with wrapper that should allow one to install MailScanner through yum for RHEL 5 or Centos 5 if one has allready added the rpmforge repository. I put up the details on http://yum.vanderkooij.org/ I will try to install some other virtual machines and test other distributions if I can find the time. It is rather simple and I think it will be possible to keep it that way. So I hope when the test show good results Jules will be able to maintain a repository himself with minimal effort. If anyone is willing to give it a spin. Please do so, so we can work out anything I might have overlooked. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHNjvYBvzDRVjxmYERAu0nAKCvYv+o+RMsVZSc81skrelob+7jLwCdGOo0 pS1h8N1CkUcm+AhXAG59p5g= =9iB3 -----END PGP SIGNATURE----- From micoots at yahoo.com Sat Nov 10 23:36:58 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sat Nov 10 23:37:01 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> Message-ID: <689764.85251.qm@web33314.mail.mud.yahoo.com> Hi, "Randal, Phil" wrote: If yum has already downloaded the package, the procedure would be something like: service MailScanner stop rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm --force then reinstall MailScanner and start it. I've got this same problem myself running SL4.5 64bit (and will fix it on the next MailScanner update from Jules), but I'd personally remove the RPM's first that it clashes with, upgrade the perl RPM, then re-install MailScanner. The thing which I found odd though is that the RPM's that the perl RPM's clash with are the ones that were built by the MailScanner install.sh scipt. It was always my understanding that when MailScanner finds the perl module installed, it wouldn't try and force the build of the MailScanner src rpm? Michael. If it isn't in your yum cache, wget it from a CentOS mirror and force install it. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 14:21 > To: 'MailScanner discussion' > Subject: Errore when I try update perl on centos 4.5 > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version > via yum update > My system it's a x86_64 using CentOS release 4.5 (Final) > Mailscanner version is mailscanner-4.58.9-1 > > Unforntunaly I get this error msg: > ============ > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > og/Syslog.so > from install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > ============ > > Could someone help me ? Please try to use an easy english > because it's not > my mother language. > > I would like to avoid to re-install mailscanner because this server is > mission critical for us. > > Thanks very much and sorry for my worst english. > > > Bye > > Dr. Marcello Anderlini > m.anderlini@database.it > --------------------------------------------- > Database Informatica S.r.l. > Microsoft Certified Partner > Tel. +39059775070 > Fax. +39059779545 > http://www.database.it > --------------------------------------------- > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071111/bef23d8c/attachment.html From hvdkooij at vanderkooij.org Sun Nov 11 00:10:04 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 11 00:10:31 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <689764.85251.qm@web33314.mail.mud.yahoo.com> References: <689764.85251.qm@web33314.mail.mud.yahoo.com> Message-ID: <4736485C.9070301@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Michael Mansour wrote: > The thing which I found odd though is that the RPM's that the perl RPM's > clash with are the ones that were built by the MailScanner install.sh scipt. > > It was always my understanding that when MailScanner finds the perl > module installed, it wouldn't try and force the build of the MailScanner > src rpm? The use of --force pretty much means it will ignore a nuber of things. So it will override another package. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHNkhaBvzDRVjxmYERAtSVAJ97c04MRmSRn2RjmXlyAXn7H429+gCfbCYc DVbyJ13Bg3tj2pXYNjkRsQs= =J8cT -----END PGP SIGNATURE----- From micoots at yahoo.com Sun Nov 11 00:41:43 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sun Nov 11 00:41:46 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <4736485C.9070301@vanderkooij.org> Message-ID: <143477.1684.qm@web33313.mail.mud.yahoo.com> Hi Hugo, Hugo van der Kooij wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Michael Mansour wrote: > The thing which I found odd though is that the RPM's that the perl RPM's > clash with are the ones that were built by the MailScanner install.sh scipt. > > It was always my understanding that when MailScanner finds the perl > module installed, it wouldn't try and force the build of the MailScanner > src rpm? The use of --force pretty much means it will ignore a nuber of things. So it will override another package. Yes I realise that, but in the early days when I'd go through (in detail) the output logs of the install.sh, I remember seeing many packages not installed (forced or otherwise) because MailScanner determined the perl modules were already installed. Albiet the last time I went through that output with a fine tooth comb was about two years ago, the MailScanner install script should realise when a perl module exists, it doesn't need to compile a new one. It makes sense if all this was properly in a repo using rpmforge to avoid these types of duplicate pm's (I will try the RHEL5 repo on an SL5 VM in about a fortnight from now - but all my MailScanner servers are SL4.5). BTW, I checked on the Dag site here: http://dag.wieers.com/rpm/packages/mailscanner/_buildlogs/ and it seems Dag has been trying to get mailscanner supported for a while, even though I haven't heard anything from him in the rpmforge suggest or users lists. Regards, Michael. Hugo. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071111/be3bd044/attachment.html From Jamesp at MusicReports.com Sun Nov 11 16:36:15 2007 From: Jamesp at MusicReports.com (James D. Parra) Date: Sun Nov 11 16:36:24 2007 Subject: mailscanner rpm can't uninstall Message-ID: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> Hello, I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was installed from the tarball install.sh script in /usr/src/packages/BUILD/MailScanner-4.65.3-1. mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e mailscanner-4.65.3-1.noarch.rpm error: package mailscanner-4.65.3-1.noarch.rpm is not installed mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -Uvh mailscanner-4.65.3-1.noarch.rpm Preparing... ########################################### [100%] package mailscanner-4.65.3-1 is already installed This is a new server with a fresh install of Suse 10.2 and I want to recheck a few details in the install output. Perhaps there an uninstall command for MailScanner? Many thanks in advance. James From richard.siddall at elirion.net Sun Nov 11 16:49:40 2007 From: richard.siddall at elirion.net (Richard Siddall) Date: Sun Nov 11 16:51:01 2007 Subject: mailscanner rpm can't uninstall In-Reply-To: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> References: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> Message-ID: <473732A4.1010706@elirion.net> James D. Parra wrote: > Hello, > > I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however > "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was > installed from the tarball install.sh script in > /usr/src/packages/BUILD/MailScanner-4.65.3-1. > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e > mailscanner-4.65.3-1.noarch.rpm > error: package mailscanner-4.65.3-1.noarch.rpm is not installed > Try rpm -e mailscanner Regards, Richard Siddall From hvdkooij at vanderkooij.org Sun Nov 11 16:57:36 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 11 16:58:00 2007 Subject: mailscanner rpm can't uninstall In-Reply-To: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> References: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> Message-ID: <47373480.2050502@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 James D. Parra wrote: > Hello, > > I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however > "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was > installed from the tarball install.sh script in > /usr/src/packages/BUILD/MailScanner-4.65.3-1. > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e > mailscanner-4.65.3-1.noarch.rpm > error: package mailscanner-4.65.3-1.noarch.rpm is not installed > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -Uvh > mailscanner-4.65.3-1.noarch.rpm > Preparing... ########################################### > [100%] > package mailscanner-4.65.3-1 is already installed > > > This is a new server with a fresh install of Suse 10.2 and I want to recheck > a few details in the install output. Perhaps there an uninstall command for > MailScanner? You did allready use it. The obvious questions now are: - What is the utput of `rpm -qa|grep -i mail` - If MS is not listed is there still a residue present? (It should not but we are well beyond the point where we take things for granted.) Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHNzR8BvzDRVjxmYERAu5yAKCmmABEBiV8lr/2BgnaWDzimhPjXwCguJsP 9x2FtfqX2yj/03SIKnEkLDY= =LKzm -----END PGP SIGNATURE----- From Jamesp at MusicReports.com Sun Nov 11 17:09:13 2007 From: Jamesp at MusicReports.com (James D. Parra) Date: Sun Nov 11 17:09:24 2007 Subject: mailscanner rpm can't uninstall {solved} Message-ID: <531F1E080638384C9623B00D71AA546D0502072F@exchange.musicreports.com> > I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however > "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was > installed from the tarball install.sh script in > /usr/src/packages/BUILD/MailScanner-4.65.3-1. > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e > mailscanner-4.65.3-1.noarch.rpm > error: package mailscanner-4.65.3-1.noarch.rpm is not installed > Try rpm -e mailscanner ~~~ Thanks Richard, that worked. ~James From MailScanner at ecs.soton.ac.uk Sun Nov 11 21:31:28 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun Nov 11 21:31:46 2007 Subject: OT: Best virtual machine server? Message-ID: <473774B0.5090700@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been badly bitten by VMWare, so that's out. No discussion there. It can't even keep its clock running to time :-( I've used Parallels quite a bit, but not suited to a server environment, it's a workstation tool. I've used Microsoft Virtual Server quite a bit, well suited to servers, dead easy to manage, I already have a VM in MVS that I will need to move to the new physical system. We get it free (as in beer). Big restriction: only supports 32-bit guests, no 64-bit guests at all :-( Xen? Never used it, have been reading the RedHat docs on it, looks like it needs a lot of text editing, but there also appears to be "virt-manager" that does a lot of the hard work for you. I want a system that is easy to get up and running, and easy to do everything with the host and the guests without physical access to the host hardware, once the host is setup. One question: what is the difference between domain0 and the host physical system? Any others I should be seriously considering? Basically what I'm doing is this: I am often asked to run a service for someone in a research project that doesn't have (yet) the hardware they need, and want to borrow a server for a month or two. So I'm spending some of my toy budget on a cheap 1U Dell server to do this in an organised way. So I'm looking for your thoughts and advice, as I know some of you use virtualisation in quite a big way. How can I move a Microsoft Virtual Server guest machine to the new server setup? And the same from a VMWare guest? I've two I have got to move, and don't want to have to totally reinstall from scratch if I can avoid it. Thanks folks! Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL JaC9cANGLGL/e4wSZvi2yHk= =Xy9q -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Sun Nov 11 21:40:06 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Sun Nov 11 21:41:21 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711101400s1c93cff2r5859d5ff94e1ed44@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> <223f97700711101400s1c93cff2r5859d5ff94e1ed44@mail.gmail.com> Message-ID: on 11/10/2007 2:00 PM Glenn Steen spake the following: > On 10/11/2007, Scott Silva wrote: >> on 11/10/2007 2:45 AM Glenn Steen spake the following: >>> On 09/11/2007, Gerard Seibert wrote: >>>> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: >>>> >>>> [ ... ] >>>> >>>>> Ah. Great that you found it (all MTA, and OT, but still.... One could >>>>> well think the ones over at the PF list would've been able to see >>>>> this:-):-)... Anyway... I do think that evere other second is a bit >>>>> often, you could try every 10 or 15 seconds or similar... Would mean >>>>> approximately 25 deliveries in every chunk. But if the system doesn't >>>>> suffer too much from the queue scans... well, every other second it >>>>> is:-). >>>> OK, I don't want to start a war here; however, I saw "R Wahyudi >>>> " original post on the Postfix forum. I did not see a >>>> copy of his 'postconf -n' output. Without that information it would have been >>>> virtually impossible for anyone to have accurately diagnosed his problem. >>> As you know Gerard, I'm not the contentious type;-). No wars in sight... >>> You are quite right, Rianto could have been as detailed as he (or is >>> that a female name?) eventually was here, but that is not my point... >>> All I say is that they could have asked for relevant information (not >>> just the "use of MailScanner disqualifies you from ever getting our >>> help" line). >>> As you did here. >>> I don't think there is any argument here, is there? >>> >>>> IMHO, he would be well served to post that information, as well as detailed >>>> information regarding his network on the Postfix forum so that his problem >>>> could be properly analysed. Altering the default settings as much as he >>>> apparently has done does not seem correct. >>>> >>> Yes,I think it a bit ... extreme... too. But with the figures of >>> incoming mail s/he cites, if the qmgr really only wakeup every five >>> minutes... that *will* land him/her with a seemingly slow delivery, >>> there is no argumenting with that. On the other hand, I'm sure one >>> could try affect the operation of the qmgr other ways that might get >>> the same effect, or even some MailScanner setting. >>> I'm very busy/tired ATM, so haven't spent even close to enough time >>> looking at this problem ... Perhaps shouldn't be posting on the list >>> at all... Sigh - Where did things like "free time" and "relaxation" >>> go?:-) >>> >>> Cheers >> My free time seems to be from when my head hits the pillow to when the alarm >> clock or phone rings! ;-P > :-) > >> Lately, I have been in the emergency room almost every night with my spouse >> and her condition that the doctors call "Irritable bowel syndrome" or >> translated to layman's terms "Yes she is vomiting and yes she has pain, but we >> just can't figure out what is causing it" > I got that diagnose too, initially.... If it isn't UC (which is pretty > obvious, whatwith all the blood) IBS is the next thing they try out as > an explanation... They've done the lovely endoscopic things ... ? From > "both ends"...? Since IBS is an "exclusion diagnose", I suppose they > have... > Nowadays, a good gastroenterologist will see if it's Crohns ... and > the pathology will confirm it... But there are many strange things > that look like IBS (even epelepsy... Strange as it sounds). > A dear friend of mine has IBS (and her husband has UC....). What they > seem to find most irritating is that the doctors just shrug it of, > since they really have no clue what to do. Doesn't mean she's in any > less pain, or that the condition isn't grave.... Just not immediately > life-threatening. Oh well, you already know this, I imagine. > I feel for you both. > >> Trying to function at work on one or two hours of sleep is starting to get to >> me, but I have missed so much work in the last 5 years that I am afraid to >> take too much time off. > Well, if I were you.... I'd talk to the PHB about what he can do to > make it possible for you to function as "caretaker" while still > pulling your load at work. If it means more work from home, gadgets, > phones, portables whatever.... Get him to see the business "profit" of > having you available... when you really aren't;-) > But you're a smart guy, you already did that...;) > If all else fails, a power-nap (on the WC, if it is otherwise frowned > upon:) can save any day:-):-) > >> I feel for all of you with cronic conditions, and just remember that as long >> as you are on the green side of the grass, things aren't as bad as they could be. >> > Yeah, being alive sure beats being fertilizer:-). And as I said in the > other mail, in answer to Drew, my new meds have put a new face on > things... Hardly any pain at all, normal excrements... Life is > definitely looking up. From where I stand ATM, at least:-). > > Hang in there budy, I know you're a virtual pillar of support, and > comfort, for her! > > Cheers They started her on clonazepan, a relative of vallium, and it seems to be helping. She always was one to stress over everything. Lucily I react to stress differently...I get very sleepy.. I have even fallen asleep during domestic arguments. But that can start its own fires. ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Sun Nov 11 21:42:16 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Sun Nov 11 21:45:11 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47363BDA.5050202@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> Message-ID: on 11/10/2007 3:16 PM Hugo van der Kooij spake the following: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > I have created an experimental setup with wrapper that should allow one > to install MailScanner through yum for RHEL 5 or Centos 5 if one has > allready added the rpmforge repository. > > I put up the details on http://yum.vanderkooij.org/ > > I will try to install some other virtual machines and test other > distributions if I can find the time. > > It is rather simple and I think it will be possible to keep it that way. > So I hope when the test show good results Jules will be able to maintain > a repository himself with minimal effort. > > If anyone is willing to give it a spin. Please do so, so we can work out > anything I might have overlooked. > > Hugo. I have a couple of new servers that will just be coming out of stress testing. I will do a wipe and install on one and give it a try this week. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From bahadir.kiziltan at gmail.com Sun Nov 11 21:55:23 2007 From: bahadir.kiziltan at gmail.com (Bahadir Kiziltan) Date: Sun Nov 11 21:55:24 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: On Nov 11, 2007 11:31 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to servers, > dead easy to manage, I already have a VM in MVS that I will need to move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > move, and don't want to have to totally reinstall from scratch if I can > avoid it. > > Thanks folks! > > Jules > Hi, Transition can be done by using the convertor freely available from; http://vmtoolkit.com/files/default.aspx MS Virtual Server does not support Linux distrubitons apart from RHEL and SuSE, officially. But you can manage to install and run **others** with little more effort. MS provides a package called VMAdditions that contains daemons. One is addressed to time sync issues and it synchronises the time of the guest machine with the host machine's. I managed to work Centos5 and Slackware 10.2 on MS virtual server. CentOS have to be installed in text mode. Bahadir. > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL > JaC9cANGLGL/e4wSZvi2yHk= > =Xy9q > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From shuttlebox at gmail.com Sun Nov 11 22:12:10 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Sun Nov 11 22:12:13 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <625385e30711111412l2af15788tb9feb4ec43f8f70c@mail.gmail.com> On Nov 11, 2007 10:31 PM, Julian Field wrote: > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. If Solaris is OK to run those services on then Zones are very easy to use. Solaris 10 runs well on x86 too nowadays. -- /peter From ms-list at alexb.ch Sun Nov 11 22:19:35 2007 From: ms-list at alexb.ch (Alex Broens) Date: Sun Nov 11 22:19:41 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <47377FF7.5080803@alexb.ch> On 11/11/2007 10:31 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to servers, > dead easy to manage, I already have a VM in MVS that I will need to move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > move, and don't want to have to totally reinstall from scratch if I can > avoid it. Virtuozzo or its GPL version: OpenVZ do the job for me.. Alex From hvdkooij at vanderkooij.org Sun Nov 11 23:02:51 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 11 23:03:18 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <47378A1B.9030605@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian Field wrote: > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( This may depend on the exact config. I use it rather extensively because I have VmWare servers at home and at the hosting center that run on Linux and with my employer where they run on windows. (On account of one or two OS xenofobics the majority is punished in using their least favorite OS.) And I have no issues with the clock. I tend to throw virtual machines around a lot so VmWare is the easiest way to do this for me. > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? If you need performance then Xen wins hands down. Never done the setup myself (yet). But I have some customers who found it the best bang for the buck and they all tried the various solutions. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHN4oZBvzDRVjxmYERAr3YAKCPNrtrkzpW12J2XAkCQWB/YrJ4ywCgjw2R DZQ5yQ7D8TUQv/4V+a2OtdE= =+MW+ -----END PGP SIGNATURE----- From micoots at yahoo.com Sun Nov 11 23:15:18 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sun Nov 11 23:15:21 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value Message-ID: <138491.46399.qm@web33307.mail.mud.yahoo.com> Hi, I get the error in the subject everytime MailScanner restarts. What do I need to look at to fix this? Thanks. Michael. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/e9e485a6/attachment.html From ian-list at securitypimp.com Mon Nov 12 00:08:22 2007 From: ian-list at securitypimp.com (Ian Lists) Date: Mon Nov 12 00:08:29 2007 Subject: OT: Best virtual machine server? In-Reply-To: <12455761.51194824891788.JavaMail.root@postal.insourcedsecurity.com> Message-ID: <20340225.71194826102822.JavaMail.root@postal.insourcedsecurity.com> I've used Vmware and Xen both at work and personally. Performance is much better in Xen if you can take advantage of para virtulaized guests. If you will be running systems that require full virtulization such as Windows, Xen requires your hardware must have virtualization enabled chips (Intel VT, AMD Pacifica). I've played around a little bit with full virt guests on my laptop, but not on any of my servers since they don't support it. At work I have migrated all Red Hat servers off of VMware and to Xen guests. Not only does it save in licensing costs, but performance is much better, and I can keep my builds nice and small since I don't have any of the dependences for VMWare tools. A nice management gui is lacking from Xen, but virt-manager is getting a lot better. I don't currently run it since I don't like all the gnome dependences on a server and in RHEL, remote management is still in clear text. Fedora 8 shipped a new virt-manager that does support SSH, but I haven't played with it yet. There is also another web based mgt. app that Red Hat is working on called Virt-Factory (http://virt-factory.et.redhat.com/) that looks promising. As for moving your other virtual machines to Xen there is tool being developed by Richard Jones at Red Hat called virt-p2v (http://et.redhat.com/~rjones/virt-p2v/)that works for converting physical machines to virtual machines. I would think it would work to for at least vmware if you booted the guest image to the the p2v ISO instead of the real guest but I have no clue about MS Virtual Server. Regards, Ian ----- "Julian Field" wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. > It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server > environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to > servers, > dead easy to manage, I already have a VM in MVS that I will need to > move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > > needs a lot of text editing, but there also appears to be > "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > > to get up and running, and easy to do everything with the host and the > > guests without physical access to the host hardware, once the host is > setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service > for > someone in a research project that doesn't have (yet) the hardware > they > need, and want to borrow a server for a month or two. So I'm spending > > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > > move, and don't want to have to totally reinstall from scratch if I > can > avoid it. > > Thanks folks! > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration > help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL > JaC9cANGLGL/e4wSZvi2yHk= > =Xy9q > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From rwahyudi at gmail.com Mon Nov 12 00:16:02 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Mon Nov 12 00:14:16 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <47379B42.6080302@gmail.com> Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? > domain0 = host physical system. We use Xen for all virtualized environment to consolidate old hardware .. so not in a big way .. I find it quite easy to manage, especially if you run same OS on the host and guest. Once guest host is setup, user on the guest machine can do whatever they like in the guest host without affecting domain0. Xen support full virtualization but you need to have CPU that support it ( Intell VT-x / Vanderpool or AMD-V) If you want easy to use GUI, try http://www.enomalism.com. I never use it but their doco stated that they have interface to transform VMWare image to xen image. Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/3e608f74/attachment.html From rwahyudi at gmail.com Mon Nov 12 00:37:06 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Mon Nov 12 00:35:18 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> Message-ID: <4737A032.8090606@gmail.com> > Evening all, been far too long since I have posted (Been stupidly busy > :-( ) > > I would suggest you want to check your Delivery method option at the > bottom MailScanner.conf and make sure it is batch and not queue. > Setting it to queue would invoke this behaviour. Changing the queue > runner settings should not be required. The queue running is called by > Postfix when each process finishes to advise the next to run. The 300 > second delay is merely to catch anything that 'got left behind'. > > Drew > Hi Drew, Bingo !! Changing the Delivery Method from queue to Batch solve the problem !! I remember reading the FAQ and it advice me to use "Delivery Method = queue" for High Volume Mail server. Good thing is .. Someone already went down this path and update the FAQ: http://www.mailscanner.info/faq.shtml#11 Thank you for all your help !! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/000fb9bf/attachment.html From jeremypennington at yahoo.com Mon Nov 12 02:09:32 2007 From: jeremypennington at yahoo.com (Mr jeremy pennington) Date: Mon Nov 12 02:09:35 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Message-ID: <820235.33971.qm@web50107.mail.re2.yahoo.com> I upgraded to MailScanner 4.65.3-1 last night and since then MailScanner has not logged any messages to syslog. MailWatch shows messages are being processed as normal and I have verified they are. So I tried copying log.pm from the prior version installed (which was 4.54.6) to the new version and restarting MailScanner. This time the standard start up messages were recorded to syslog, but no messages were logged about mail being processed, in fact this disabled mail from being processed (it just stayed in the queue). So I reverted back and everything seems to be working again, except no logs from MailScanner are appearing in syslog. Any thoughts? Thanks for your help! Jeremy __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com From markgetz at shentel.net Mon Nov 12 02:14:34 2007 From: markgetz at shentel.net (Mark Getz) Date: Mon Nov 12 02:20:06 2007 Subject: SpamAssassin Rule Actions Message-ID: I'm probably missing something simple but I can't seem to figure it out. Version Info: MailScanner version 4.65.3 Spamassassin version 3.2.3 ----------------------------- High Scoring Spam Actions = forward spam@localhost header "X-Spam-Status: Yes" delete SpamAssassin Rule Actions = SpamScore>25=>delete The High Scoring Spam Actions work fine. Spam >= than my Highspam score are forwarded to the spam mailbox and not delivered to the addressee. It doesn't appear that the SpamAssassin Rule Action is firing because mail with a SpamScore > 25 are still delivered to the Spam mailbox. TIA Mark From roland at inbox4u.de Mon Nov 12 02:31:44 2007 From: roland at inbox4u.de (Ehle, Roland) Date: Mon Nov 12 02:34:24 2007 Subject: AW: SpamAssassin Rule Actions In-Reply-To: References: Message-ID: <4D1CD0994309F84BA83DF998BF0075AF2BC3E9900A@ts-dc2.TS-Webarts.local> Hi Mark, yes you are missing something, you probably did not read the instructions for SpamAssassin Rule Actions :-) # Preceding the action name with "not-" as in "not-deliver" or "not-forward # user@domain.com" will cause the action to be removed from the list of # actions that would normally be taken on this message. So your rule should be: SpamAssassin Rule Actions = SpamScore>25=>not-forward spam@localhost There is no need to put "delete" in here, because this action is already set in High Scoring Spam Actions. Regards, Roland -----Urspr?ngliche Nachricht----- Von: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Im Auftrag von Mark Getz Gesendet: Montag, 12. November 2007 03:15 An: mailscanner@lists.mailscanner.info Betreff: SpamAssassin Rule Actions I'm probably missing something simple but I can't seem to figure it out. Version Info: MailScanner version 4.65.3 Spamassassin version 3.2.3 ----------------------------- High Scoring Spam Actions = forward spam@localhost header "X-Spam-Status: Yes" delete SpamAssassin Rule Actions = SpamScore>25=>delete The High Scoring Spam Actions work fine. Spam >= than my Highspam score are forwarded to the spam mailbox and not delivered to the addressee. It doesn't appear that the SpamAssassin Rule Action is firing because mail with a SpamScore > 25 are still delivered to the Spam mailbox. TIA Mark -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From david at gnsa.us Mon Nov 12 03:46:07 2007 From: david at gnsa.us (David Nalley) Date: Mon Nov 12 03:46:16 2007 Subject: OT: Best virtual machine server? In-Reply-To: <47379B42.6080302@gmail.com> References: <473774B0.5090700@ecs.soton.ac.uk> <47379B42.6080302@gmail.com> Message-ID: <4737CC7F.3020002@gnsa.us> R Wahyudi wrote: > Xen? >> Never used it, have been reading the RedHat docs on it, looks like it >> needs a lot of text editing, but there also appears to be "virt-manager" >> that does a lot of the hard work for you. I want a system that is easy >> to get up and running, and easy to do everything with the host and the >> guests without physical access to the host hardware, once the host is setup. >> One question: what is the difference between domain0 and the host >> physical system? >> > domain0 = host physical system. > We use Xen for all virtualized environment to consolidate old > hardware .. so not in a big way .. > I find it quite easy to manage, especially if you run same OS on the > host and guest. > Once guest host is setup, user on the guest machine can do whatever > they like in the guest host without affecting domain0. > Xen support full virtualization but you need to have CPU that support > it ( Intell VT-x / Vanderpool or AMD-V) > > If you want easy to use GUI, try http://www.enomalism.com. > I never use it but their doco stated that they have interface to > transform VMWare image to xen image. > > Regards, > Rianto Wahyudi > > Enomalism isn't too bad, but based on talking to the company who developed it, it's about to be much better (they were suggesting, around end of November or December time frame) removing a lot of the unnecessary framework the package had. Currently, I think enomalism only supports a specific version of Xen. From john at langherd.com Mon Nov 12 05:53:05 2007 From: john at langherd.com (John P. Lang) Date: Mon Nov 12 05:53:09 2007 Subject: OT: Best virtual machine server? In-Reply-To: <20340225.71194826102822.JavaMail.root@postal.insourcedsecurity.com> References: <12455761.51194824891788.JavaMail.root@postal.insourcedsecurity.com> <20340225.71194826102822.JavaMail.root@postal.insourcedsecurity.com> Message-ID: <001801c824f0$4bf75330$e3e5f990$@com> I may be just a little bit biased... I've been running Linux (just about any flavor) on MS Virtual Server with no problems at all. The virtual machine additions for Linux really help with performance (SCSI) and the time sync is quite nice. All of my Mail Scanner installations for customers run on virtual machines running on VS. I've also had the opportunity to play with the new Windows hypervisor, which totally rocks. Check out the Windows Server 2008 preview builds. 64bit VM's that run at full speed.... Just my 2c John -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Ian Lists Sent: Sunday, November 11, 2007 4:08 PM To: MailScanner discussion Cc: MailScanner discussion Subject: Re: OT: Best virtual machine server? I've used Vmware and Xen both at work and personally. Performance is much better in Xen if you can take advantage of para virtulaized guests. If you will be running systems that require full virtulization such as Windows, Xen requires your hardware must have virtualization enabled chips (Intel VT, AMD Pacifica). I've played around a little bit with full virt guests on my laptop, but not on any of my servers since they don't support it. At work I have migrated all Red Hat servers off of VMware and to Xen guests. Not only does it save in licensing costs, but performance is much better, and I can keep my builds nice and small since I don't have any of the dependences for VMWare tools. A nice management gui is lacking from Xen, but virt-manager is getting a lot better. I don't currently run it since I don't like all the gnome dependences on a server and in RHEL, remote management is still in clear text. Fedora 8 shipped a new virt-manager that does support SSH, but I haven't played with it yet. There is also another web based mgt. app that Red Hat is working on called Virt-Factory (http://virt-factory.et.redhat.com/) that looks promising. As for moving your other virtual machines to Xen there is tool being developed by Richard Jones at Red Hat called virt-p2v (http://et.redhat.com/~rjones/virt-p2v/)that works for converting physical machines to virtual machines. I would think it would work to for at least vmware if you booted the guest image to the the p2v ISO instead of the real guest but I have no clue about MS Virtual Server. Regards, Ian ----- "Julian Field" wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. > It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server > environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to > servers, > dead easy to manage, I already have a VM in MVS that I will need to > move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > > needs a lot of text editing, but there also appears to be > "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > > to get up and running, and easy to do everything with the host and the > > guests without physical access to the host hardware, once the host is > setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service > for > someone in a research project that doesn't have (yet) the hardware > they > need, and want to borrow a server for a month or two. So I'm spending > > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > > move, and don't want to have to totally reinstall from scratch if I > can > avoid it. > > Thanks folks! > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration > help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL > JaC9cANGLGL/e4wSZvi2yHk= > =Xy9q > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hvdkooij at vanderkooij.org Mon Nov 12 06:46:01 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 12 06:46:22 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47363BDA.5050202@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> Message-ID: <4737F6A9.1070000@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > Hi, > > I have created an experimental setup with wrapper that should allow one > to install MailScanner through yum for RHEL 5 or Centos 5 if one has > allready added the rpmforge repository. > > I put up the details on http://yum.vanderkooij.org/ It also works for RHEL 4 / Centos 4. I suspected it would but I needed to verify this before I did put it on record. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHN/anBvzDRVjxmYERAoGeAJ40mvkJD+NsZGCiPRs243oJ+mQWhwCfTfkN bnpPHb3Pc2rOlgozJI/5ElY= =PBkG -----END PGP SIGNATURE----- From rwahyudi at gmail.com Mon Nov 12 06:55:36 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Mon Nov 12 06:53:49 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <4737F6A9.1070000@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> <4737F6A9.1070000@vanderkooij.org> Message-ID: <4737F8E8.5040806@gmail.com> I will give it a try on freshly installed Centos. Can you tell me package it install ?? Regards, Rianto Wahyudi Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hugo van der Kooij wrote: > >> Hi, >> >> I have created an experimental setup with wrapper that should allow one >> to install MailScanner through yum for RHEL 5 or Centos 5 if one has >> allready added the rpmforge repository. >> >> I put up the details on http://yum.vanderkooij.org/ >> > > It also works for RHEL 4 / Centos 4. I suspected it would but I needed > to verify this before I did put it on record. > > Hugo. > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHN/anBvzDRVjxmYERAoGeAJ40mvkJD+NsZGCiPRs243oJ+mQWhwCfTfkN > bnpPHb3Pc2rOlgozJI/5ElY= > =PBkG > -----END PGP SIGNATURE----- > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/e127819a/attachment.html From hvdkooij at vanderkooij.org Mon Nov 12 07:11:20 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 12 07:11:48 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <4737F8E8.5040806@gmail.com> References: <47363BDA.5050202@vanderkooij.org> <4737F6A9.1070000@vanderkooij.org> <4737F8E8.5040806@gmail.com> Message-ID: <4737FC98.5000106@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 R Wahyudi wrote: > I will give it a try on freshly installed Centos. > Can you tell me package it install ?? What part of the instructions on the webpage are unclear to you? I was under the impression I covered it all but I might have missed something which I took for granted. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHN/yWBvzDRVjxmYERAnVVAJ4qCXFwONu6FMx5R23PPfrgKIM3ZACffkBf URuozCzp+KN71Cozt0v4je4= =hpIm -----END PGP SIGNATURE----- From shuttlebox at gmail.com Mon Nov 12 08:18:17 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Mon Nov 12 08:18:19 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <820235.33971.qm@web50107.mail.re2.yahoo.com> References: <820235.33971.qm@web50107.mail.re2.yahoo.com> Message-ID: <625385e30711120018l65ecffeenc7e057d11c4984e8@mail.gmail.com> On Nov 12, 2007 3:09 AM, Mr jeremy pennington wrote: > I upgraded to MailScanner 4.65.3-1 last night and since then MailScanner has not logged any messages to syslog. MailWatch shows messages are being processed as normal and I have verified they are. So I tried copying log.pm from the prior version installed (which was 4.54.6) to the new version and restarting MailScanner. This time the standard start up messages were recorded to syslog, but no messages were logged about mail being processed, in fact this disabled mail from being processed (it just stayed in the queue). So I reverted back and everything seems to be working again, except no logs from MailScanner are appearing in syslog. Any thoughts? Look in Log.pm for "setlogsock" and compare the differences between the working version and the new. My guess is that the socket type has changed. You will also find the same settings in the autoupdate scripts for the virus scanners. Also make sure that the syslog daemon listens to remote connections. # netstat -a | grep syslog *.syslog Idle As a Solaris user you might find it handy to check out the Blastwave collection of software, I package MailScanner and it automagically solves all dependencies for you. Clam, SpamAssassin and so on is also available. http://www.blastwave.org/ -- /peter From J.Ede at birchenallhowden.co.uk Mon Nov 12 08:38:57 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Mon Nov 12 08:41:31 2007 Subject: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA34@server02.bhl.local> From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field [MailScanner@ecs.soton.ac.uk] Sent: 11 November 2007 21:31 To: MailScanner discussion Subject: OT: Best virtual machine server? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been badly bitten by VMWare, so that's out. No discussion there. It can't even keep its clock running to time :-( I've always had that problem with MS virtuals (losing minutes each day and drift too high for ntp to function). So far my VMware one has managed to keep good time. I also have ntpd running on all the virtuals anyway. Its fine as long as its not trying to fight with a time source on the host. From glenn.steen at gmail.com Mon Nov 12 09:59:49 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 12 09:59:53 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <138491.46399.qm@web33307.mail.mud.yahoo.com> References: <138491.46399.qm@web33307.mail.mud.yahoo.com> Message-ID: <223f97700711120159w66cba712m90bfdad4f806ac22@mail.gmail.com> On 12/11/2007, Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > Look at http://www.mailscanner.info/MailScanner.conf.index.html#First%20Check ... Then check your setting for First Check in MailScanner.conf ... and do a "MailScanner --lint"/"MailScanner --changed", of course. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Mon Nov 12 10:06:38 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 12 10:06:51 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <138491.46399.qm@web33307.mail.mud.yahoo.com> References: <138491.46399.qm@web33307.mail.mud.yahoo.com> Message-ID: <473825AE.2080200@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You have put a ruleset in your MailScanner.conf somewhere you are only allowed to put a simple value. Check everywhere you have put a ruleset. You haven't tried to put a ruleset within a ruleset have you? You can't do that. Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 every > week. Download your gamecard now at Yahoo!7 TV > . Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOCWuEfZZRxQVtlQRAqTHAJ9dMR099VlNsQkpKbaqoWU1ilqrMwCeKYOy Z8fc92mRJjIfWPBmrkQmWmk= =LiY7 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From drew.marshall at technologytiger.net Mon Nov 12 10:15:45 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 12 10:16:12 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4737A032.8090606@gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <4737A032.8090606@gmail.com> Message-ID: <11329.B1VcRQRQCQY=.1194862545.squirrel@www.technologytiger.net> On Mon, November 12, 2007 00:37, R Wahyudi wrote: > >> Evening all, been far too long since I have posted (Been stupidly busy >> :-( ) >> >> I would suggest you want to check your Delivery method option at the >> bottom MailScanner.conf and make sure it is batch and not queue. >> Setting it to queue would invoke this behaviour. Changing the queue >> runner settings should not be required. The queue running is called by >> Postfix when each process finishes to advise the next to run. The 300 >> second delay is merely to catch anything that 'got left behind'. >> >> Drew >> > > Hi Drew, > > Bingo !! > > Changing the Delivery Method from queue to Batch solve the problem !! Excellent! > > I remember reading the FAQ and it advice me to use "Delivery Method = > queue" for High Volume Mail server. > Good thing is .. Someone already went down this path and update the > FAQ: http://www.mailscanner.info/faq.shtml#11 > > Thank you for all your help !! > A pleasure! I am not quite sure of the history behind the two delivery methods. It's been there for so long but I would say (almost?) no one uses queue because of the issues you have experienced. Postfix is very capable of handling high queue?volumes and slow next hops natively so there is little point in making the queue runner do the pick up post MailScanner in a Postfix environment. Perhaps Jules can shed more light on the history of this option? Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From prandal at herefordshire.gov.uk Mon Nov 12 10:20:26 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Mon Nov 12 10:20:37 2007 Subject: $hostname not translated in reports In-Reply-To: <35153.69256.qm@web33312.mail.mud.yahoo.com> References: <35153.69256.qm@web33312.mail.mud.yahoo.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA0217FB23@HC-MBX02.herefordshire.gov.uk> We have the same problem here, latest MailScanner, CentOS 5.0 x64. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: 10 November 2007 05:02 To: mailscanner@lists.mailscanner.info Subject: $hostname not translated in reports Hi, When email reports get emailed to addresses (the "Hostname" variable in MailScanner.conf), I notice that the $hostname is never translated to the actual hostname of the machine that has the quarantined file. I just see: () How can I trouble-shoot this so that I can fix it? ie. where do I need to look to define the $hostname for the reports per MailScanner server I run? Thanks. Michael. ________________________________ National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV . -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/ba6478eb/attachment.html From MailScanner at ecs.soton.ac.uk Mon Nov 12 11:48:20 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 12 11:48:34 2007 Subject: $hostname not translated in reports In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA0217FB23@HC-MBX02.herefordshire.gov.uk> References: <35153.69256.qm@web33312.mail.mud.yahoo.com> <7EF0EE5CB3B263488C8C18823239BEBA0217FB23@HC-MBX02.herefordshire.gov.uk> Message-ID: <47383D84.3080200@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You should be able to use $hostname or $linkhostname Do neither of them work? Randal, Phil wrote: > We have the same problem here, latest MailScanner, CentOS 5.0 x64. > > Cheers, > > Phil > > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > > ------------------------------------------------------------------------ > *From:* mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] *On Behalf Of > *Michael Mansour > *Sent:* 10 November 2007 05:02 > *To:* mailscanner@lists.mailscanner.info > *Subject:* $hostname not translated in reports > > Hi, > > When email reports get emailed to addresses (the "Hostname" > variable in MailScanner.conf), I notice that the $hostname is > never translated to the actual hostname of the machine that has > the quarantined file. > > I just see: > > () > > How can I trouble-shoot this so that I can fix it? ie. where do I > need to look to define the $hostname for the reports per > MailScanner server I run? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 > every week. Download your gamecard now at Yahoo!7 TV > . > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOD2FEfZZRxQVtlQRAiwFAJ4tacFF9BDi83ZVCZEEITNpXDhxHQCgxtIF 3AEFWQmFsvARWsTOT6Fcyag= =mQlK -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hambleto at gmail.com Mon Nov 12 16:32:58 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 16:33:02 2007 Subject: Mailscanner not working after update on Fedora 8 Message-ID: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> I had a functional box running fedora 7 and the latest version of Mailscanner. I updated the box to fedora 8, however mailscanner would no longer run. I redownloaded the installer to be on the safe side. When I get run the installed I get the following errors: Bad exit status from /var/tmp/rpm-tmp.***XXX When I go into the /var/tmp folder the following files are there: perl-Compress-Zlib-1.41-1-root perl-TimeDate-root rpm-tmp.49723 perl-IO-stringy-root perl-Time-HiRes-1.9707-1-root rpm-tmp.54293 perl-MailTools-1.71-1-root rpm-tmp.14136 rpm-tmp.62223 perl-MIME-Base64-root rpm-tmp.23843 rpm-tmp.97352 perl-MIME-tools-root rpm-tmp.37563 rpm-tmp.98354 perl-Test-Harness-2.64-1-root rpm-tmp.45811 rpm-tmp.99634 perl-Test-Simple-0.70-1-root rpm-tmp.47790 When I try and start Mailscanner I get the following error: Can't locate Compress/Zlib.pm in @INC (@INC contains: /usr/lib/MailScanner /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.8/i386-linux-thread-multi /usr/lib/perl5/5.8.8 . /usr/lib/MailScanner) at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. I am hoping I am missing something simple here. Please suggest. Thank you, Ben -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/6e2a6ec2/attachment.html From richard.siddall at elirion.net Mon Nov 12 16:55:27 2007 From: richard.siddall at elirion.net (Richard Siddall) Date: Mon Nov 12 16:57:00 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> Message-ID: <4738857F.2070604@elirion.net> Ben Hambleton wrote: > I had a functional box running fedora 7 and the latest version of > Mailscanner. I updated the box to fedora 8, however mailscanner would no > longer run. I redownloaded the installer to be on the safe side. When I get > run the installed I get the following errors: > Bad exit status from /var/tmp/rpm-tmp.***XXX > Sounds like the install script failed trying to build an RPM of one of the Perl modules, possibly Compress::Zlib. You might be able to get it working by doing yum install perl-Compress-Zlib and then starting MailScanner again. It would help a lot if you posted the build output just before the failure. Then we might be able to tell you why it was failing and how to get around the failure. Regards, Richard Siddall From hambleto at gmail.com Mon Nov 12 17:01:38 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 17:02:18 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4738857F.2070604@elirion.net> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> Message-ID: <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> I did the yum install perl-Compress-Zlib as you suggested. Now when I start Mail scanner I get the following error: MailScanner: is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. As far as the build data. I get that error for each of the modules listed in the /var/tmp folder. On Nov 12, 2007 11:55 AM, Richard Siddall wrote: > Ben Hambleton wrote: > > I had a functional box running fedora 7 and the latest version of > > Mailscanner. I updated the box to fedora 8, however mailscanner would no > > longer run. I redownloaded the installer to be on the safe side. When I > get > > run the installed I get the following errors: > > Bad exit status from /var/tmp/rpm-tmp.***XXX > > > > Sounds like the install script failed trying to build an RPM of one of > the Perl modules, possibly Compress::Zlib. You might be able to get it > working by doing > > yum install perl-Compress-Zlib > > and then starting MailScanner again. > > It would help a lot if you posted the build output just before the > failure. Then we might be able to tell you why it was failing and how > to get around the failure. > > Regards, > > Richard Siddall > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/d4e44dbc/attachment.html From richard.siddall at elirion.net Mon Nov 12 17:17:31 2007 From: richard.siddall at elirion.net (Richard Siddall) Date: Mon Nov 12 17:19:29 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> Message-ID: <47388AAB.6050604@elirion.net> Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall From hambleto at gmail.com Mon Nov 12 17:46:28 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 17:46:32 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <47388AAB.6050604@elirion.net> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> <47388AAB.6050604@elirion.net> Message-ID: <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress-Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall wrote: > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the modules > listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/76c837c8/attachment.html From damon at txmail.marinocrane.com Mon Nov 12 17:55:49 2007 From: damon at txmail.marinocrane.com (Damon Lambooy) Date: Mon Nov 12 17:56:04 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> <47388AAB.6050604@elirion.net> <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> Message-ID: <473893A5.4060902@txmail.marinocrane.com> Ben Hambleton wrote: > Thank you again. Below is what I am getting for each of them. If you > want I could post the entire build log: > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm > line 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at > /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. > BEGIN failed--compilation aborted at > /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > t/utf8hash............ok > > t/weak................Weak references are not implemented in the > version of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% > okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 > extracting debug info from > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < > richard.siddall@elirion.net > wrote: > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the > modules listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/c48bc886/attachment.html From markgetz at shentel.net Mon Nov 12 17:57:10 2007 From: markgetz at shentel.net (Mark Getz) Date: Mon Nov 12 18:04:35 2007 Subject: AW: SpamAssassin Rule Actions References: <4D1CD0994309F84BA83DF998BF0075AF2BC3E9900A@ts-dc2.TS-Webarts.local> Message-ID: > > Hi Mark, > > yes you are missing something, you probably did not read the instructions for SpamAssassin Rule Actions > > # Preceding the action name with "not-" as in "not-deliver" or "not-forward > # user domain.com" will cause the action to be removed from the list of > # actions that would normally be taken on this message. > > So your rule should be: > SpamAssassin Rule Actions = SpamScore>25=>not-forward spam localhost > > There is no need to put "delete" in here, because this action is already set in High Scoring Spam Actions. > > Regards, > Roland > > Roland: Thanks for your reply, I change my SpamAssassin Rule Action as suggested, now it delivers the message to the spam user twice.:(:( Mark From J.Ede at birchenallhowden.co.uk Mon Nov 12 18:16:55 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Mon Nov 12 18:19:18 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net>, <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3A@server02.bhl.local> The perl Scalar-Util module in Fedora install is broken. You need to download the latest version from the website... I get the error occasionally after perl updates itself. wget http://search.cpan.org/CPAN/authors/id/G/GB/GBARR/Scalar-List-Utils-1.19.tar.gz tar xzvf Scalar-List-Utils-1.19.tar.gz cd Scalar-List-Utils-1.19 perl Makefile.PL make test make install Jason ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Ben Hambleton [hambleto@gmail.com] Sent: 12 November 2007 17:01 To: MailScanner discussion Subject: Re: Mailscanner not working after update on Fedora 8 I did the yum install perl-Compress-Zlib as you suggested. Now when I start Mail scanner I get the following error: MailScanner: is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. As far as the build data. I get that error for each of the modules listed in the /var/tmp folder. On Nov 12, 2007 11:55 AM, Richard Siddall > wrote: Ben Hambleton wrote: > I had a functional box running fedora 7 and the latest version of > Mailscanner. I updated the box to fedora 8, however mailscanner would no > longer run. I redownloaded the installer to be on the safe side. When I get > run the installed I get the following errors: > Bad exit status from /var/tmp/rpm-tmp.***XXX > Sounds like the install script failed trying to build an RPM of one of the Perl modules, possibly Compress::Zlib. You might be able to get it working by doing yum install perl-Compress-Zlib and then starting MailScanner again. It would help a lot if you posted the build output just before the failure. Then we might be able to tell you why it was failing and how to get around the failure. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/4892d44f/attachment.html From hambleto at gmail.com Mon Nov 12 18:26:38 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 18:26:42 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <473893A5.4060902@txmail.marinocrane.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> <47388AAB.6050604@elirion.net> <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> <473893A5.4060902@txmail.marinocrane.com> Message-ID: <4dcde730711121026q5dfcd106oac869c8526ceae53@mail.gmail.com> Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy wrote: > > > Ben Hambleton wrote: > > Thank you again. Below is what I am getting for each of them. If you want > I could post the entire build log: > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- > Zlib-1.41 > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > t/utf8hash............ok > > t/weak................Weak references are not implemented in the version > of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net> > wrote: > > > Ben Hambleton wrote: > > > > > > As far as the build data. I get that error for each of the modules > > listed in > > > the /var/tmp folder. > > > > > > > OK. It sounds like the build script can't build any of the RPMs. > > > > It would help if you'd post the actual error, and a bit of the build > > output just before the error. > > > > Regards, > > > > Richard Siddall > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > > What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/0ca7ee79/attachment-0001.html From uxbod at splatnix.net Mon Nov 12 18:36:17 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 12 18:29:26 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121026q5dfcd106oac869c8526ceae53@mail.gmail.com> Message-ID: <23777869.11011194892577635.JavaMail.root@office.splatnix.net> stop MS and invoke it with --debug to see what it is doing Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" To: "MailScanner discussion" Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > wrote: Ben Hambleton wrote: Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > wrote: Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hambleto at gmail.com Mon Nov 12 18:40:07 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 18:40:11 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <23777869.11011194892577635.JavaMail.root@office.splatnix.net> References: <4dcde730711121026q5dfcd106oac869c8526ceae53@mail.gmail.com> <23777869.11011194892577635.JavaMail.root@office.splatnix.net> Message-ID: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> How would I do that? I normaly just start it using the /etc/init.d/Mailscanner I noticed in the /var/log/maillog I get thefollowing over and over again: Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 bytes, 787 bytes total Nov 12 13:36:30 sendmail[2707]: starting daemon (8.14.1): SMTP Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00 :15:00 Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner version 4.65.3 starting... Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing whitelist Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing blacklist Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache database Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist functionality... It looks like the server keeps starting up over and over. On Nov 12, 2007 1:36 PM, UxBoD wrote: > stop MS and invoke it with --debug to see what it is doing > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Ben Hambleton" > To: "MailScanner discussion" > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > Thank you again! > > I tried what you suggested (and did a yum install of the the files listed > in the /var/tmp). I started mailscanner and it started right up. However, I > am not seeing any mail going through the server. When I do a ps -A I see > alot of: MailScanner . With my luck, I just broke more things... > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > > wrote: > > > > > > Ben Hambleton wrote: > > > > > > Thank you again. Below is what I am getting for each of them. If you want > I could post the entire build log: > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > t/utf8hash............ok > t/weak................Weak references are not implemented in the version > of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > > wrote: > > > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the modules > listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/a7853414/attachment.html From uxbod at splatnix.net Mon Nov 12 18:52:27 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 12 18:45:37 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> Message-ID: <3527559.11041194893547968.JavaMail.root@office.splatnix.net> /etc/init.d/MailScanner stop MailScanner --debug may need the path but not sure on Fedora, sorry. Are there any error messages in /var/log/maillog ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" To: "MailScanner discussion" Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 How would I do that? I normaly just start it using the /etc/init.d/Mailscanner I noticed in the /var/log/maillog I get thefollowing over and over again: Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 bytes, 787 bytes total Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner version 4.65.3 starting... Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing whitelist Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing blacklist Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache database Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist functionality... It looks like the server keeps starting up over and over. On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: stop MS and invoke it with --debug to see what it is doing Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" < hambleto@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > wrote: Ben Hambleton wrote: Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > wrote: Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hambleto at gmail.com Mon Nov 12 18:58:54 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 18:58:58 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <3527559.11041194893547968.JavaMail.root@office.splatnix.net> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> Message-ID: <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> I found the debug command in the Mailscanner.conf file enabled that and started. I did not recieve any errors. I took a look and it seemed that i did not have any spamassin installed. I installed that (not enabled, just installed) started mailscanner again. Still no inbound mail it seems.. On Nov 12, 2007 1:52 PM, UxBoD wrote: > /etc/init.d/MailScanner stop > MailScanner --debug > > may need the path but not sure on Fedora, sorry. Are there any error > messages in /var/log/maillog ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Ben Hambleton" > To: "MailScanner discussion" > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > How would I do that? I normaly just start it using the > /etc/init.d/Mailscanner > > > I noticed in the /var/log/maillog I get thefollowing over and over again: > > > > Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by > Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 > bytes, 787 bytes total > Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP > Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00 > :15:00 > Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00 > :15:00 > Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner > version 4.65.3 starting... > Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing > whitelist > Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing > blacklist > Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working > directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp > Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache > Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache > database > Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist > functionality... > > > It looks like the server keeps starting up over and over. > > > On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: > > > stop MS and invoke it with --debug to see what it is doing > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > ----- Original Message ----- > From: "Ben Hambleton" < hambleto@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > > Thank you again! > > I tried what you suggested (and did a yum install of the the files listed > in the /var/tmp). I started mailscanner and it started right up. However, I > am not seeing any mail going through the server. When I do a ps -A I see > alot of: MailScanner . With my luck, I just broke more things... > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > > wrote: > > > > > > Ben Hambleton wrote: > > > > > > Thank you again. Below is what I am getting for each of them. If you want > I could post the entire build log: > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.21292 (%install) > > > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.96343 (%build) > > > > t/utf8hash............ok > t/weak................Weak references are not implemented in the version > of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- HiRes-1.9707 > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.42245 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > > wrote: > > > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the modules > listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > > > > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/e07e4bba/attachment.html From hambleto at gmail.com Mon Nov 12 19:48:08 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 19:48:13 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> Message-ID: <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> Mail is coming and going finaly. Thank you all so much for your help with this. May I bother you with one more issue? When I look into the maillog file I keep seeing this before each message that is delivered: Virus and Content Scanning: Starting Nov 12 14:46:12 MailScanner[6535]: ERROR: Not supported data format Any idea what this means? Is the virus scanner I am using, clamav, not working? Thank you again, Ben On Nov 12, 2007 1:58 PM, Ben Hambleton wrote: > I found the debug command in the Mailscanner.conf file enabled that and > started. I did not recieve any errors. I took a look and it seemed that i > did not have any spamassin installed. I installed that (not enabled, just > installed) started mailscanner again. Still no inbound mail it seems.. > > > On Nov 12, 2007 1:52 PM, UxBoD wrote: > > > /etc/init.d/MailScanner stop > > MailScanner --debug > > > > may need the path but not sure on Fedora, sorry. Are there any error > > messages in /var/log/maillog ? > > > > Regards, > > > > --[ UxBoD ]-- > > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > > ----- Original Message ----- > > From: "Ben Hambleton" < hambleto@gmail.com> > > To: "MailScanner discussion" > > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London > > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > How would I do that? I normaly just start it using the > > /etc/init.d/Mailscanner > > > > > > I noticed in the /var/log/maillog I get thefollowing over and over > > again: > > > > > > > > Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by > > Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 > > bytes, 787 bytes total > > Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP > > Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): > > queueing@00:15:00 > > Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00:15:00 > > Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner > > version 4.65.3 starting... > > Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing > > whitelist > > Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing > > blacklist > > Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working > > directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp > > Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache > > Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache > > database > > Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist > > functionality... > > > > > > It looks like the server keeps starting up over and over. > > > > > > On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > > > stop MS and invoke it with --debug to see what it is doing > > > > Regards, > > > > --[ UxBoD ]-- > > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > > > > ----- Original Message ----- > > From: "Ben Hambleton" < hambleto@gmail.com > > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > > > > > > > > > Thank you again! > > > > I tried what you suggested (and did a yum install of the the files > > listed in the /var/tmp). I started mailscanner and it started right up. > > However, I am not seeing any mail going through the server. When I do a ps > > -A I see alot of: MailScanner . With my luck, I just broke more > > things... > > > > > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > > > wrote: > > > > > > > > > > > > Ben Hambleton wrote: > > > > > > > > > > > > Thank you again. Below is what I am getting for each of them. If you > > want I could post the entire build log: > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > > extracting debug info from > > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > > 47 blocks > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl- MailTools-1.71-1-root > > /usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > > > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- > > Zlib-1.41 > > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > > > > 987 blocks > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8> > > > > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm- tmp.21292 (%install) > > > > > > > > Test returned status 9 (wstat 2304, 0x900) > > t/testUpdate........Use of uninitialized value in concatenation (.) or > > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > > 30. > > is only avaliable with the XS version at > > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > > BEGIN failed--compilation aborted at > > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > > Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm > > line 24. > > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > > Compilation failed in require at t/testUpdate.t line 11. > > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > > t/testUpdate........dubious > > Test returned status 9 (wstat 2304, 0x900) > > Failed Test Stat Wstat Total Fail Failed List of Failed > > > > ------------------------------------------------------------------------------- > > t/00.load.t 2 512 2 2 100.00% 1-2 > > t/test.t 9 2304 ?? ?? % ?? > > t/testMemberRead.t 9 2304 ?? ?? % ?? > > t/testTree.t 9 2304 ?? ?? % ?? > > t/testUpdate.t 9 2304 ?? ?? % ?? > > t/testex.t 9 2304 ?? ?? % ?? > > 1 test skipped. > > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > > make: *** [test_dynamic] Error 9 > > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm- tmp.96343 (%build) > > > > > > > > t/utf8hash............ok > > t/weak................Weak references are not implemented in the version > > of perl at t/weak.t line 28 > > BEGIN failed--compilation aborted at t/weak.t line 33. > > t/weak................dubious > > Test returned status 255 (wstat 65280, 0xff00) > > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > > > > t/weak.t 255 65280 ?? ?? % ?? > > 1 test skipped. > > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > > make: *** [test_dynamic] Error 255 > > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- > > HiRes-1.9707 > > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > 180 blocks > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm- tmp.42245 (%install) > > > > > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net> wrote: > > > > > > > > Ben Hambleton wrote: > > > > > > As far as the build data. I get that error for each of the modules > > listed in > > > the /var/tmp folder. > > > > > > > OK. It sounds like the build script can't build any of the RPMs. > > > > It would help if you'd post the actual error, and a bit of the build > > output just before the error. > > > > > > > > Regards, > > > > Richard Siddall > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > -- > > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > > http://www.hambleton.net What I did was reinstall using CPAN > > > > perl -MCPAN -e shell > > > > force install Scalar::Util > > > > then restart MailScanner > > > > All fixed. > > > > Damon > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > > > -- > > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > > http://www.hambleton.net > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner , and is > > believed to be clean. > > -- > > > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > > > -- > > > > > > > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > -- > > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > > http://www.hambleton.net > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner , and is > > believed to be clean. > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/02435fe5/attachment-0001.html From uxbod at splatnix.net Mon Nov 12 20:02:59 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 12 19:56:04 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> Message-ID: <16865280.11101194897779132.JavaMail.root@office.splatnix.net> hmmm, that seems like MS does not understand the data stream from SendMail. Never seen that as on Postfix, sorry. Googled ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" To: "MailScanner discussion" Sent: Monday, November 12, 2007 7:48:08 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Mail is coming and going finaly. Thank you all so much for your help with this. May I bother you with one more issue? When I look into the maillog file I keep seeing this before each message that is delivered: Virus and Content Scanning: Starting Nov 12 14:46:12 MailScanner[6535]: ERROR: Not supported data format Any idea what this means? Is the virus scanner I am using, clamav, not working? Thank you again, Ben On Nov 12, 2007 1:58 PM, Ben Hambleton < hambleto@gmail.com > wrote: I found the debug command in the Mailscanner.conf file enabled that and started. I did not recieve any errors. I took a look and it seemed that i did not have any spamassin installed. I installed that (not enabled, just installed) started mailscanner again. Still no inbound mail it seems.. On Nov 12, 2007 1:52 PM, UxBoD < uxbod@splatnix.net > wrote: /etc/init.d/MailScanner stop MailScanner --debug may need the path but not sure on Fedora, sorry. Are there any error messages in /var/log/maillog ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" < hambleto@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 How would I do that? I normaly just start it using the /etc/init.d/Mailscanner I noticed in the /var/log/maillog I get thefollowing over and over again: Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 bytes, 787 bytes total Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00 :15:00 Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner version 4.65.3 starting... Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing whitelist Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing blacklist Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache database Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist functionality... It looks like the server keeps starting up over and over. On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: stop MS and invoke it with --debug to see what it is doing Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" < hambleto@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > wrote: Ben Hambleton wrote: Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > wrote: Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Mon Nov 12 20:02:47 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 12 20:03:33 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> Message-ID: <4738B167.3070206@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Run a MailScanner --lint and check that the virus-scan output from that all looks okay. Post the output and we'll check it for you. Ben Hambleton wrote: > Mail is coming and going finaly. Thank you all so much for your help > with this. > > May I bother you with one more issue? When I look into the maillog > file I keep seeing this before each message that is delivered: > > Virus and Content Scanning: Starting > Nov 12 14:46:12 MailScanner[6535]: ERROR: Not supported data format > > Any idea what this means? Is the virus scanner I am using, clamav, not > working? > Thank you again, > Ben > > On Nov 12, 2007 1:58 PM, Ben Hambleton < hambleto@gmail.com > > wrote: > > I found the debug command in the Mailscanner.conf file enabled > that and started. I did not recieve any errors. I took a look and > it seemed that i did not have any spamassin installed. I installed > that (not enabled, just installed) started mailscanner again. > Still no inbound mail it seems.. > > > > On Nov 12, 2007 1:52 PM, UxBoD > wrote: > > /etc/init.d/MailScanner stop > MailScanner --debug > > may need the path but not sure on Fedora, sorry. Are there > any error messages in /var/log/maillog ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg > --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net > Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > ----- Original Message ----- > From: "Ben Hambleton" < hambleto@gmail.com > > > To: "MailScanner discussion" > > > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > How would I do that? I normaly just start it using the > /etc/init.d/Mailscanner > > > I noticed in the /var/log/maillog I get thefollowing over and > over again: > > > > Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases > rebuilt by > Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, > longest 10 bytes, 787 bytes total > Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP > Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): > queueing@00:15:00 > Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): > queueing@00 :15:00 > Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus > Scanner version 4.65.3 starting... > Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the > phishing whitelist > Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from > the phishing blacklist > Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary > working directory is > /var/spool/MailScanner/incoming/SpamAssassin-Temp > Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results > cache > Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin > cache database > Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin > auto-whitelist functionality... > > > It looks like the server keeps starting up over and over. > > > On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > > wrote: > > > stop MS and invoke it with --debug to see what it is doing > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg > --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net > Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > > ----- Original Message ----- > From: "Ben Hambleton" < hambleto@gmail.com > > > To: "MailScanner discussion" < > mailscanner@lists.mailscanner.info > > > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > > Thank you again! > > I tried what you suggested (and did a yum install of the the > files listed in the /var/tmp). I started mailscanner and it > started right up. However, I am not seeing any mail going > through the server. When I do a ps -A I see alot of: > MailScanner . With my luck, I just broke more things... > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < > damon@txmail.marinocrane.com > > wrote: > > > > > > Ben Hambleton wrote: > > > > > > Thank you again. Below is what I am getting for each of them. > If you want I could post the entire build log: > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' > = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- > MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.21292 (%install) > > > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in > concatenation (.) or string at > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm > line 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at > /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > BEGIN failed--compilation aborted at > /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, > 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.96343 (%build) > > > > t/utf8hash............ok > t/weak................Weak references are not implemented in > the version of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, > 100.00% okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = > X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- > HiRes-1.9707 > extracting debug info from > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.42245 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < > richard.siddall@elirion.net > > wrote: > > > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the > modules listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the > build > output just before the error. > > > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > > > > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > http://www.hambleton.net > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHOLFpEfZZRxQVtlQRArNtAKD4zD8yaK2o8WuohsO1RBYDJW8D7QCdFPKn 8AzzbgV1pn03kwotWxdRias= =4+i7 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hvdkooij at vanderkooij.org Mon Nov 12 20:16:39 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 12 20:17:01 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> Message-ID: <4738B4A7.5090601@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ben Hambleton wrote: > I found the debug command in the Mailscanner.conf file enabled that and > started. I did not recieve any errors. I took a look and it seemed that > i did not have any spamassin installed. I installed that (not enabled, > just installed) started mailscanner again. Still no inbound mail it seems.. I can not escape a certain dejavu feeling. I recall Jules having to fix a similar issue where an upgrade had shot a working system to pieces and in the end it seemed to be just an incorrect sendmail config file. So far I have a load of questions. - Is you MTA running? - Which one? - Did MailScanner in fact start it? - Where do your messages end up? - Are they accepted by your system? - what steps can you trace in your logs? And considere that if you have a config backup of the system it might be faster to rebuild one then to struggle like this. Strip down the system to run just the MTA without MailScanner and see it that works if you have not yet got it working. When your MTA is fine then add the next stage back in. Take it steps by step and make notes. I will repeat what I said in that previous thread. Using Fedora on a server is a bad choice. Unfortunatly you are one who again proves my point in this. If you know exactly what you are doing Fedora may work for you but I find time and again people use Fedora when they want a stable system to run for years and get bitten one way or the other. Hugo. PS: Can we try to cut down on the excess lines in the message please? - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOLSiBvzDRVjxmYERAnUaAKCsBWn9svt/WCZErn1k5RrAFqS4eACfWxw3 gbMcT4y8lQGRYAvJc9ZZ+bM= =gpEq -----END PGP SIGNATURE----- From hambleto at gmail.com Mon Nov 12 20:32:19 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 20:32:23 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4738B4A7.5090601@vanderkooij.org> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> <4738B4A7.5090601@vanderkooij.org> Message-ID: <4dcde730711121232m3937a95aldae4ae2324148591@mail.gmail.com> Thank you all again. I figured it out. I never bothered to reconfigure the virus scaner. A couple of kicks in the butt and all seems to be running again. Once again, thank you everyone for all of your help and support. Take care, Ben On Nov 12, 2007 3:16 PM, Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Ben Hambleton wrote: > > I found the debug command in the Mailscanner.conf file enabled that and > > started. I did not recieve any errors. I took a look and it seemed that > > i did not have any spamassin installed. I installed that (not enabled, > > just installed) started mailscanner again. Still no inbound mail it > seems.. > > I can not escape a certain dejavu feeling. I recall Jules having to fix > a similar issue where an upgrade had shot a working system to pieces and > in the end it seemed to be just an incorrect sendmail config file. > > So far I have a load of questions. > - Is you MTA running? > - Which one? > - Did MailScanner in fact start it? > - Where do your messages end up? > - Are they accepted by your system? > - what steps can you trace in your logs? > > And considere that if you have a config backup of the system it might be > faster to rebuild one then to struggle like this. > > Strip down the system to run just the MTA without MailScanner and see it > that works if you have not yet got it working. When your MTA is fine > then add the next stage back in. Take it steps by step and make notes. > > I will repeat what I said in that previous thread. Using Fedora on a > server is a bad choice. Unfortunatly you are one who again proves my > point in this. If you know exactly what you are doing Fedora may work > for you but I find time and again people use Fedora when they want a > stable system to run for years and get bitten one way or the other. > > Hugo. > > PS: Can we try to cut down on the excess lines in the message please? > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHOLSiBvzDRVjxmYERAnUaAKCsBWn9svt/WCZErn1k5RrAFqS4eACfWxw3 > gbMcT4y8lQGRYAvJc9ZZ+bM= > =gpEq > -----END PGP SIGNATURE----- > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/6b903741/attachment.html From micoots at yahoo.com Mon Nov 12 21:57:51 2007 From: micoots at yahoo.com (Michael Mansour) Date: Mon Nov 12 21:57:54 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <223f97700711120159w66cba712m90bfdad4f806ac22@mail.gmail.com> Message-ID: <412712.83691.qm@web33310.mail.mud.yahoo.com> Hi Glenn, Glenn Steen wrote: On 12/11/2007, Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > Look at http://www.mailscanner.info/MailScanner.conf.index.html#First%20Check ... Then check your setting for First Check in MailScanner.conf ... and do a "MailScanner --lint"/"MailScanner --changed", of course. Arrgh, I skimmed over the word "cannot" in the ruleset explanation. I've run MailScanner with the ruleset definition for "First Check" for a while now (and have run the --lint many times too) I don't remember the --lint ever picking up this problem? Thanks. Michael. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/65ef9b16/attachment.html From micoots at yahoo.com Mon Nov 12 22:01:42 2007 From: micoots at yahoo.com (Michael Mansour) Date: Mon Nov 12 22:01:45 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <473825AE.2080200@ecs.soton.ac.uk> Message-ID: <190880.51485.qm@web33302.mail.mud.yahoo.com> Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You have put a ruleset in your MailScanner.conf somewhere you are only allowed to put a simple value. Check everywhere you have put a ruleset. You haven't tried to put a ruleset within a ruleset have you? You can't do that. Thanks for your reply, with the help of Glenn I checked the "First Check" option and did have a ruleset there. I just fixed it. It's odd though I don't remember seeing any problems with linting because of that. Should MailScanner --lint have picked this config problem up? Michael. Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 every > week. Download your gamecard now at Yahoo!7 TV > . Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOCWuEfZZRxQVtlQRAqTHAJ9dMR099VlNsQkpKbaqoWU1ilqrMwCeKYOy Z8fc92mRJjIfWPBmrkQmWmk= =LiY7 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/46740d28/attachment.html From micoots at yahoo.com Mon Nov 12 22:09:00 2007 From: micoots at yahoo.com (Michael Mansour) Date: Mon Nov 12 22:09:03 2007 Subject: $hostname not translated in reports In-Reply-To: <47383D84.3080200@ecs.soton.ac.uk> Message-ID: <399581.9252.qm@web33305.mail.mud.yahoo.com> Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You should be able to use $hostname or $linkhostname Do neither of them work? I have just changed all references of $hostname to $linkhostname in the reports and will test this shortly. I also use the latest MailScanner and SL4.5 (RHEL4U5), have been using MailScanner for years while this $hostname has never worked. This hasn't ever bothered me until I started customising reports for different people. I'll let you know how it goes. Thanks. Michael. Randal, Phil wrote: > We have the same problem here, latest MailScanner, CentOS 5.0 x64. > > Cheers, > > Phil > > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > > ------------------------------------------------------------------------ > *From:* mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] *On Behalf Of > *Michael Mansour > *Sent:* 10 November 2007 05:02 > *To:* mailscanner@lists.mailscanner.info > *Subject:* $hostname not translated in reports > > Hi, > > When email reports get emailed to addresses (the "Hostname" > variable in MailScanner.conf), I notice that the $hostname is > never translated to the actual hostname of the machine that has > the quarantined file. > > I just see: > > () > > How can I trouble-shoot this so that I can fix it? ie. where do I > need to look to define the $hostname for the reports per > MailScanner server I run? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 > every week. Download your gamecard now at Yahoo!7 TV > . > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOD2FEfZZRxQVtlQRAiwFAJ4tacFF9BDi83ZVCZEEITNpXDhxHQCgxtIF 3AEFWQmFsvARWsTOT6Fcyag= =mQlK -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/31bd4661/attachment.html From jan-peter at koopmann.eu Mon Nov 12 23:36:48 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Mon Nov 12 23:35:31 2007 Subject: OT: Best virtual machine server? References: <473774B0.5090700@ecs.soton.ac.uk> <47378A1B.9030605@vanderkooij.org> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> > If you need performance then Xen wins hands down. Never done the setup > myself (yet). But I have some customers who found it the best bang for > the buck and they all tried the various solutions. I could not agree more. We just migrated our entire server farm to Virtual Iron (http://www.virtualiron.com). Take a look at it. Their management solution simply rocks. Their XEN performance is outstanding. If you are ok with just one server and local discs, their single server edition will do and this one happens to be free. Give it a shot. You do need Intel or AMD VT hardware though! Regards, JP From jeremypennington at yahoo.com Tue Nov 13 02:15:00 2007 From: jeremypennington at yahoo.com (Mr jeremy pennington) Date: Tue Nov 13 02:15:03 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Message-ID: <707521.14340.qm@web50108.mail.re2.yahoo.com> ----- Original Message ---- From: shuttlebox To: MailScanner discussion Sent: Monday, November 12, 2007 2:18:17 AM Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 On Nov 12, 2007 3:09 AM, Mr jeremy pennington wrote: > I upgraded to MailScanner 4.65.3-1 last night and since then MailScanner has not logged any messages to syslog. MailWatch shows messages are being processed as normal and I have verified they are. So I tried copying log.pm from the prior version installed (which was 4.54.6) to the new version and restarting MailScanner. This time the standard start up messages were recorded to syslog, but no messages were logged about mail being processed, in fact this disabled mail from being processed (it just stayed in the queue). So I reverted back and everything seems to be working again, except no logs from MailScanner are appearing in syslog. Any thoughts? Look in Log.pm for "setlogsock" and compare the differences between the working version and the new. My guess is that the socket type has changed. You will also find the same settings in the autoupdate scripts for the virus scanners. Also make sure that the syslog daemon listens to remote connections. # netstat -a | grep syslog *.syslog Idle As a Solaris user you might find it handy to check out the Blastwave collection of software, I package MailScanner and it automagically solves all dependencies for you. Clam, SpamAssassin and so on is also available. http://www.blastwave.org/ -- /peter -- Thanks Peter! Running netstat gives me the following: # netstat -a | grep syslog mail.32791 mail.syslog Connected mail.43133 mail.syslog Connected localhost.60230 localhost.syslog Connected localhost.60231 localhost.syslog Connected localhost.60258 localhost.syslog Connected localhost.60260 localhost.syslog Connected Comparing the the two Log.pm, there is some differences for "setlogsock". I tried several different changes, but was not able to get anything to work. Any other thoughts? Thanks for the info on blastware, I'll take a look at it. Jeremy ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs From r.berber at computer.org Tue Nov 13 05:14:49 2007 From: r.berber at computer.org (=?ISO-8859-1?Q?Ren=E9_Berber?=) Date: Tue Nov 13 05:15:11 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <707521.14340.qm@web50108.mail.re2.yahoo.com> References: <707521.14340.qm@web50108.mail.re2.yahoo.com> Message-ID: Mr jeremy pennington wrote: > Comparing the the two Log.pm, there is some differences for > "setlogsock". I tried several different changes, but was not able to > get anything to work. Any other thoughts? That's exactly what you have to modify, Log.pm: Line 71: Sys::Syslog::setlogsock('native'); If it doesn't work, you may have to update perl's Sys::Syslog (an old version didn't work at all on Solaris). -- Ren? Berber From ram at netcore.co.in Tue Nov 13 07:14:01 2007 From: ram at netcore.co.in (ram) Date: Tue Nov 13 07:14:19 2007 Subject: Strip attachments and send the mail Message-ID: <1194938041.17009.42.camel@localhost.localdomain> I use postfix + MailScanner , For some users I want to strip specific attachments and send the mail body with a line that attachments are stripped Is this possible Thanks Ram From glenn.steen at gmail.com Tue Nov 13 08:06:59 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 13 08:07:07 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <190880.51485.qm@web33302.mail.mud.yahoo.com> References: <473825AE.2080200@ecs.soton.ac.uk> <190880.51485.qm@web33302.mail.mud.yahoo.com> Message-ID: <223f97700711130006if1e5810xbb9a3120264e7d94@mail.gmail.com> On 12/11/2007, Michael Mansour wrote: > Hi Julian, > > Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > You have put a ruleset in your MailScanner.conf somewhere you are only > allowed to put a simple value. Check everywhere you have put a ruleset. > You haven't tried to put a ruleset within a ruleset have you? You can't > do that. > Thanks for your reply, with the help of Glenn I checked the "First Check" > option and did have a ruleset there. I just fixed it. > > It's odd though I don't remember seeing any problems with linting because of > that. Should MailScanner --lint have picked this config problem up? > It might not, but.... Since "linting" is all about syntax checking (IMO), I think it should. How about it Jules? Does it, should it, will it?:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From gborders at balanceconsult.com Tue Nov 13 14:15:03 2007 From: gborders at balanceconsult.com (Greg Borders) Date: Tue Nov 13 14:18:27 2007 Subject: Mailscanner filename check and report In-Reply-To: <8F2A53954C22554EB75D9643FCCE0C6B05A5F864@MED-CORE03-MS1.med.wayne.edu> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it><8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> <4735D9C8.2010301@ecs.soton.ac.uk> <8F2A53954C22554EB75D9643FCCE0C6B05A5F864@MED-CORE03-MS1.med.wayne.edu> Message-ID: <4739B167.8040401@balanceconsult.com> > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian > Field > Sent: Saturday, November 10, 2007 11:18 AM > To: MailScanner discussion > Subject: Re: Mailscanner filename check and report > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I would be very interested if someone can give me a reproducible example > of when it goes wrong. Before I get that, there's unfortunately very > little I can do about this problem, sorry. > > Rose, Bobby wrote: > >> >> I've been using MailScanner for years and I seen this issue a couple >> times before but just assumed it was a user mistake. I've seen >> sender.filename.report sends back a message with the wrong $filename >> string. What is sends back is a random string of characters. >> >> The message says >> >> One or more of the attachments (VAmRh3qo9P) are on the list of >> unacceptable attachments for this site and will not have been >> > delivered. > >> Consider renaming the files to avoid this constraint. >> >> The virus detector said this about the message: >> Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) >> >> But in the maillogs, it has the real filename >> >> I'm not sure of the conditions that lead to this because it doesn't >> always happen and if I test myself, the sender.filename.report message >> > > >> is correct. Anyone else seen this before? >> >> -=B >> >> >> > > Jules > > - -- > Julian Field MEng CITP contents RHO Flip Education.lg.10.31.20071.ppt.doc Dr_Vay_shopcart.aspx.htm It might have something to do with the fact that the file names have multiple "." periods within the filename. MailScanner's test might think that they are trying to hide a file behind a second extension. Especially bad for those with Windows with the view known extensions off. An old virus trick was to call a file somthing like " mycutethingclickme.doc.exe" And the poor user would only see the "mycutethingclickme.doc". I think Jule's test might be warning of that. Check and see if all the files that are getting held back are multi-dotted. The two you reported certianly are. Greg. Borders Sysadmin "at large" -- This email message and any document accompanying it may contain information intended only for the person(s) named. Any use, distribution, copying or disclosure by another person is strictly prohibited. NOTICE TO PERSONS SUBJECT TO UNITED STATES TAXATION: DISCLOSURE UNDER TREASURY CIRCULAR 230: Any tax advice included in this written or electronic communication was not intended or written to be used, and it cannot be used by the taxpayer, for the purpose of avoiding any penalties that may be imposed on the taxpayer by any governmental taxing authority or agency. This written or electronic communication does not represent legal advice. Persons in need of a legal opinion should seek competent counsel. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/682f0fa3/attachment.html From mailscanner at yeticomputers.com Tue Nov 13 17:27:10 2007 From: mailscanner at yeticomputers.com (Rick Chadderdon) Date: Tue Nov 13 17:27:40 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <4739DE6E.1090009@yeticomputers.com> Since I haven't seen it mentioned yet, I'll throw in a vote for VirtualBox (http://www.virtualbox.org/). I use VMWare Server on several machines, but gave this thing a try on my Ubuntu Gutsy workstation 'cause VMWare was broken on Gutsy and I didn't feel like fiddling with all of the patches I'd found to fix the problem. Plus, it gave me an opportunity to play with something different. I always like that. :) Installation was easy, and migrating a Windows XP and an Arch Linux virtual machine worked well. Virtualbox read the vmdks without a need for conversion, although I did convert them later to get full functionality (I love snapshots). The Windows XP guest did need a repair install in order to detect the new virtual hardware, but it ran great after than. Arch just worked. Networking can be a bit tricky if you need more than NAT, but it only took about an hour to get it working, including getting shorewall working with a bridged interface, so I'm sure it's nothing you can't handle. :) Rick Julian Field wrote: > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to servers, > dead easy to manage, I already have a VM in MVS that I will need to move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is > setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > move, and don't want to have to totally reinstall from scratch if I can > avoid it. > > Thanks folks! > > Jules > From dudi at kolcore.com Tue Nov 13 18:40:53 2007 From: dudi at kolcore.com (Dudi Goldenberg) Date: Tue Nov 13 18:39:10 2007 Subject: Bypassing authenticated users Message-ID: <858B5F3269A8F147AD4A615A91327FEA1228A3@prince.kolcore.local> Hello list, I'm running MS v4.62.9 on a BlueQuartz server (that's Centos 4.5 final, modified for BQ). Is there a way to have MS bypass outgoing mail SPAM checks for authenticated users? This should cover SASL, TLS, POP before SMTP etc. Regards, Dudi Goldenberg CTO Kolcore Ltd. No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.30/1127 - Release Date: 11/12/2007 21:19 From MailScanner at ecs.soton.ac.uk Tue Nov 13 19:27:05 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 13 19:27:19 2007 Subject: OT: Best virtual machine server? In-Reply-To: <5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> References: <473774B0.5090700@ecs.soton.ac.uk> <47378A1B.9030605@vanderkooij.org> <5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> Message-ID: <4739FA89.5070905@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How do I backup a virtualiron system? I want to just do a dump to a USB hard disk; it's not perfect but better than nothing and this is just for my own use, it's not a full production-grade system. Koopmann, Jan-Peter wrote: >> If you need performance then Xen wins hands down. Never done the setup >> myself (yet). But I have some customers who found it the best bang for >> the buck and they all tried the various solutions. >> > > I could not agree more. We just migrated our entire server farm to > Virtual Iron (http://www.virtualiron.com). Take a look at it. Their > management solution simply rocks. Their XEN performance is outstanding. > If you are ok with just one server and local discs, their single server > edition will do and this one happens to be free. Give it a shot. You do > need Intel or AMD VT hardware though! > > Regards, > JP > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHOfqLEfZZRxQVtlQRAo6uAJ9F7FdInEo98ufC4tuMtkm3DhIFuQCgzYvF jAITNsKDk0QOS/M1WsTh5+4= =tO+H -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jan-peter at koopmann.eu Tue Nov 13 19:49:23 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Tue Nov 13 19:48:03 2007 Subject: OT: Best virtual machine server? References: <473774B0.5090700@ecs.soton.ac.uk> <47378A1B.9030605@vanderkooij.org><5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> <4739FA89.5070905@ecs.soton.ac.uk> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD1610E0B1@DE-SEXB01RZ.intern.seceidos.de> > How do I backup a virtualiron system? I want to just do a dump to a USB > hard disk; it's not perfect but better than nothing and this is just > for > my own use, it's not a full production-grade system. If you use their logical or virtual disks you can export the disks to .vhd files on an external USB drive if you want. This won't work with FC/iSCSI disks but if I understand you correctly, this is not the case here anyways... From ssilva at sgvwater.com Tue Nov 13 21:02:51 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 13 21:03:13 2007 Subject: Bypassing authenticated users In-Reply-To: <858B5F3269A8F147AD4A615A91327FEA1228A3@prince.kolcore.local> References: <858B5F3269A8F147AD4A615A91327FEA1228A3@prince.kolcore.local> Message-ID: on 11/13/2007 10:40 AM Dudi Goldenberg spake the following: > Hello list, > > I'm running MS v4.62.9 on a BlueQuartz server (that's Centos 4.5 final, modified for BQ). > > Is there a way to have MS bypass outgoing mail SPAM checks for authenticated users? > > This should cover SASL, TLS, POP before SMTP etc. > > Regards, > > Dudi Goldenberg > CTO > Kolcore Ltd. > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.30/1127 - Release Date: 11/12/2007 21:19 > > You set the auth'd users to use a different port like 587 (submission port) and have another queue runner on that port. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ugob at lubik.ca Tue Nov 13 21:05:11 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Tue Nov 13 21:05:38 2007 Subject: OT: Best virtual machine server? In-Reply-To: <47377FF7.5080803@alexb.ch> References: <473774B0.5090700@ecs.soton.ac.uk> <47377FF7.5080803@alexb.ch> Message-ID: Alex Broens wrote: > On 11/11/2007 10:31 PM, Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I've been badly bitten by VMWare, so that's out. No discussion there. >> It can't even keep its clock running to time :-( >> >> I've used Parallels quite a bit, but not suited to a server >> environment, it's a workstation tool. >> >> I've used Microsoft Virtual Server quite a bit, well suited to >> servers, dead easy to manage, I already have a VM in MVS that I will >> need to move to the new physical system. We get it free (as in beer). >> Big restriction: only supports 32-bit guests, no 64-bit guests at all :-( >> >> Xen? >> Never used it, have been reading the RedHat docs on it, looks like it >> needs a lot of text editing, but there also appears to be >> "virt-manager" that does a lot of the hard work for you. I want a >> system that is easy to get up and running, and easy to do everything >> with the host and the guests without physical access to the host >> hardware, once the host is setup. >> One question: what is the difference between domain0 and the host >> physical system? >> >> Any others I should be seriously considering? >> >> Basically what I'm doing is this: I am often asked to run a service >> for someone in a research project that doesn't have (yet) the hardware >> they need, and want to borrow a server for a month or two. So I'm >> spending some of my toy budget on a cheap 1U Dell server to do this in >> an organised way. >> >> So I'm looking for your thoughts and advice, as I know some of you use >> virtualisation in quite a big way. > > Virtuozzo or its GPL version: OpenVZ do the job for me.. Same for me, but they don't allow to run all OS. However, performance-wise, it rocks! Ugo From dudi at kolcore.com Tue Nov 13 21:34:05 2007 From: dudi at kolcore.com (Dudi Goldenberg) Date: Tue Nov 13 21:32:25 2007 Subject: Bypassing authenticated users Message-ID: <858B5F3269A8F147AD4A615A91327FEA1228A5@prince.kolcore.local> >You set the auth'd users to use a different port like 587 (submission port) >and have another queue runner on that port. Good idea, off to work. Regards, Dudi No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.30/1127 - Release Date: 11/12/2007 21:19 From hvdkooij at vanderkooij.org Tue Nov 13 21:46:25 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Tue Nov 13 21:46:43 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47363BDA.5050202@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> Message-ID: <473A1B31.1030506@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > If anyone is willing to give it a spin. Please do so, so we can work out > anything I might have overlooked. Would everyone that will test it be kind enough to send a small progres report to me? Wether it is a "Done that and there is a large crater where my computer used to be." or "Done that and I went to the pub after 5 minutes to celebrate." or anything in between. Obviously I prefer the "went to the pub" sort of messages but the other ones may be usefull to improve upon the concept. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOhswBvzDRVjxmYERAr1iAKC2j7gJ7lJm/jd6RgHViEU+kDYvGQCgtWvi HOwFAoUgOKfzNMnwL7SRZTc= =ASVL -----END PGP SIGNATURE----- From eclipsem at optusnet.com.au Wed Nov 14 00:14:52 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 00:14:59 2007 Subject: scanning rules Message-ID: <200711140014.lAE0EqDH010690@mail09.syd.optusnet.com.au> Hello, I would like to have something clarified about scan rules. # If this is set to yes, then email messages passing through MailScanner # will be processed and checked, and all the other options in this file # will be used to control what checks are made on the message. # If this is set to no, then email messages will NOT be processed or # checked *at all*, and so any viruses or other problems will be ignored Scan Messages = /opt/MailScanner/etc/rules/scan.rules This file contains - From: 127.0.0.1 no From: 10.0.1.6 no FromOrTo: default yes These are the IP's of the local server, now I have a script that generates emails upon email to sales department, to other sales reps, it is a new generated message, not forwarded as it contains some SQL content. The thing is MailScanner still wants to scan the message when its submitted. I also have these IP's in - Information Header = /opt/MailScanner/etc/rules/header.rules (in case we take them out of all scanning rules at later date) Could this settings be countermanding the "no scan" rules? Also we strip out some Exchange headers in MailScanner using "Remove These Headers" this works very well, except we turned off Spam Checks, for a bit trying to debug the above problem , and we noticed that MailScanner stopped removing that header but yes all the other scan rules were still active? TIA Edward From glenn.steen at gmail.com Wed Nov 14 08:24:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 14 08:24:38 2007 Subject: scanning rules In-Reply-To: <200711140014.lAE0EqDH010690@mail09.syd.optusnet.com.au> References: <200711140014.lAE0EqDH010690@mail09.syd.optusnet.com.au> Message-ID: <223f97700711140024y44533480hb41e90e2269ee04f@mail.gmail.com> On 14/11/2007, eclipsem@optusnet.com.au wrote: > > Hello, > > I would like to have something clarified about scan rules. > > # If this is set to yes, then email messages passing through MailScanner > # will be processed and checked, and all the other options in this file > # will be used to control what checks are made on the message. > # If this is set to no, then email messages will NOT be processed or > # checked *at all*, and so any viruses or other problems will be ignored > Scan Messages = /opt/MailScanner/etc/rules/scan.rules > > This file contains - > > From: 127.0.0.1 no > From: 10.0.1.6 no > FromOrTo: default yes > > These are the IP's of the local server, now I have a script that generates emails upon email to sales department, to other sales reps, it is a new generated message, not forwarded as it contains some SQL content. The thing is MailScanner still wants to scan the message when its submitted. > > I also have these IP's in - > Information Header = /opt/MailScanner/etc/rules/header.rules (in case we take them out of all scanning rules at later date) > > Could this settings be countermanding the "no scan" rules? > > Also we strip out some Exchange headers in MailScanner using "Remove These Headers" this works very well, except we turned off Spam Checks, for a bit trying to debug the above problem , and we noticed > that MailScanner stopped removing that header but yes all the other scan rules were still active? > > TIA > Edward It should function exactly as it says "on the tin".... Could we see some example log entries (all relevant entries, from connect to the MTA, through MS and on to final delivery), and perhaps an example message (with headers) as well? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From rob at kettle.org.uk Wed Nov 14 14:31:34 2007 From: rob at kettle.org.uk (Rob Kettle) Date: Wed Nov 14 14:31:43 2007 Subject: Mailscanner MCP Problem In-Reply-To: <46A60373.3020309@ecs.soton.ac.uk> References: <46A60120.9000901@kettle.org.uk> <46A60373.3020309@ecs.soton.ac.uk> Message-ID: <473B06C6.7020105@kettle.org.uk> Hi, apologies if this should have been directed elsewhere... I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail and clamd). All is OK when the incominmg message is not matched by MCP rules. If the message is MCP matched and the rule is 'deliver' (without quotes) then the message seems to disappears into a back hole. This seems irrespective of whether it matches any spam or virus rules in subsequent checks (MCP is first check). If I have a mailscanner (Mail archiving and monitoring) rule setup for a user that says to deliver locally (the default) and forward to an external address the deliver disappears into a black hole but the forward to external address part works. any help or pointers would be appreciated. Regards Rob Kettle -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Wed Nov 14 14:46:24 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 14 14:38:07 2007 Subject: Mailscanner MCP Problem In-Reply-To: <473B06C6.7020105@kettle.org.uk> Message-ID: <9417424.13181195051584591.JavaMail.root@office.splatnix.net> Rob, what appears in the maillog file ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Rob Kettle" To: mailscanner@lists.mailscanner.info Sent: Wednesday, November 14, 2007 2:31:34 PM (GMT) Europe/London Subject: Mailscanner MCP Problem Hi, apologies if this should have been directed elsewhere... I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail and clamd). All is OK when the incominmg message is not matched by MCP rules. If the message is MCP matched and the rule is 'deliver' (without quotes) then the message seems to disappears into a back hole. This seems irrespective of whether it matches any spam or virus rules in subsequent checks (MCP is first check). If I have a mailscanner (Mail archiving and monitoring) rule setup for a user that says to deliver locally (the default) and forward to an external address the deliver disappears into a black hole but the forward to external address part works. any help or pointers would be appreciated. Regards Rob Kettle -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From rob at kettle.org.uk Wed Nov 14 15:05:35 2007 From: rob at kettle.org.uk (Rob Kettle) Date: Wed Nov 14 15:05:47 2007 Subject: Mailscanner MCP Problem In-Reply-To: <9417424.13181195051584591.JavaMail.root@office.splatnix.net> References: <9417424.13181195051584591.JavaMail.root@office.splatnix.net> Message-ID: <473B0EBF.5030009@kettle.org.uk> UxBoD wrote: > Rob, > > what appears in the maillog file ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Rob Kettle" > To: mailscanner@lists.mailscanner.info > Sent: Wednesday, November 14, 2007 2:31:34 PM (GMT) Europe/London > Subject: Mailscanner MCP Problem > > Hi, > > apologies if this should have been directed elsewhere... > > I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail > and clamd). > > All is OK when the incominmg message is not matched by MCP rules. > > If the message is MCP matched and the rule is 'deliver' (without quotes) > then the message seems to disappears into a back hole. This seems > irrespective of whether it matches any spam or virus rules in subsequent > checks (MCP is first check). If I have a mailscanner (Mail archiving and > monitoring) rule setup for a user that says to deliver locally (the > default) and forward to an external address the deliver disappears into > a black hole but the forward to external address part works. > > any help or pointers would be appreciated. > > Regards > Rob Kettle > > > Hi, here's an extract: Nov 14 14:51:30 uranus MailScanner[15629]: New Batch: Scanning 1 messages, 1994 bytes Nov 14 14:51:30 uranus MailScanner[15629]: MCP Checks: Starting Nov 14 14:51:30 uranus MailScanner[15629]: Message lAEEpSJC015673 from xxx.xxx.xxx.xxx (xxx@xxx.com) to xxx.xxx.xxx is MCP, MCP-Checker (score=5, required 2, RULE3 5.00) Nov 14 14:51:30 uranus MailScanner[15629]: MCP Checks: Found 1 MCP messages Nov 14 14:51:30 uranus MailScanner[15629]: MCP Actions: message lAEEpSJC015673 actions are store Nov 14 14:51:30 uranus MailScanner[15629]: MCP Checks completed at 13421 bytes per second Nov 14 14:51:30 uranus MailScanner[15629]: Spam Checks: Starting Nov 14 14:51:35 uranus MailScanner[15629]: Message lAEEpSJC015673 from xxx.xxx.xxx.xxx (xxx@xxx.com) to xxx.xxx.xxx is not spam, SpamAssassin (score=0.119, required 4, autolearn=not spam, AWL 0.12) Nov 14 14:51:35 uranus MailScanner[15629]: Spam Checks completed at 411 bytes per second Nov 14 14:51:35 uranus MailScanner[15629]: Virus and Content Scanning: Starting Nov 14 14:51:35 uranus clamd[2635]: /var/spool/MailScanner/incoming/15629/lAEEpSJC015673.header: OK Nov 14 14:51:35 uranus MailScanner[15629]: Virus Scanning completed at 29086 bytes per second Nov 14 14:51:35 uranus MailScanner[15629]: Batch completed at 392 bytes per second (1994 / 5) Nov 14 14:51:35 uranus MailScanner[15629]: Batch (1 message) processed in 5.07 seconds thanks Rob -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From arto.saraniva at artio.net Wed Nov 14 16:12:31 2007 From: arto.saraniva at artio.net (Arto) Date: Wed Nov 14 16:16:04 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( I am not sure if this has been yet mentioned, but: clock=pit -arto From edward.prendergast at netring.co.uk Wed Nov 14 16:16:16 2007 From: edward.prendergast at netring.co.uk (Edward Prendergast) Date: Wed Nov 14 16:16:19 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day Message-ID: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Hi, We are reaching capacity with our current hardware setup. Our current machine is a Dual Xeon 2.40GHz + 2g RAM workhorse which runs all services required for web hosting (MySQL, Apache, Exim + Courier + MailScanner + MailWatch + SpamAssassin + ClamAV, named) but are looking to separate this out as the machine can no longer handle the load inflicted by all these services. By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject at MTA based on greet-pause and invalid recipients. We have tried to reduce the amount of users with catch-alls to the absolute minimum. We went on a Mail optimisation overhaul a few months ago during which time MailScanner's working area was switched to tempfs and we started using compiled rules. We archive mails for 7 days and keep 20 days worth of mail. The only bottleneck on our current setup appears to be CPU - vmstat looks like this: procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 2 3 311500 801316 37144 97396 1 0 3 1 0 0 15 5 70 10 With bayes on, the load average hikes up to around 10, 11 or higher depending on time of day. Without bayes the load usually sits around 5/6. At present the hardware budget is fairly constricted so I'm looking to find out what minimum level of hardware would be required to run: MailScanner MTA in gateway mode (forwarding scanned mail to existing server) MailWatch (MySQL DB stored elsewhere) SpamAssasin, compiled rules, bayes Any advice from the vast pool of MailScanner experience would be greatly appreciated. Regards, Edward ************ The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, any action taken or omitted to be taken in reliance on it, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this E-mail message is strictly prohibited and may be unlawful. If you have received this E-mail message in error, please notify us immediately. Please also destroy and delete the message from your computer. ************ From prandal at herefordshire.gov.uk Wed Nov 14 16:40:43 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 14 16:40:53 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA02180005@HC-MBX02.herefordshire.gov.uk> I'm not sure what the minimum is, but our main mx box is a quad core Dell 2950, 4GB RAM, running MailScanner / SA 3.2.3, MailWatch, ClamAV, McAfee uvscan, FuzzyOCR, milter-greylist. Yesterday it handled 165,000 emails, of which 91% were rejected at the MTA level. Load average tends to be around 1.2, peaking at 2.5. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Edward Prendergast > Sent: 14 November 2007 16:16 > To: mailscanner@lists.mailscanner.info > Subject: Minimum hardware capacity for 35k e-mail scans/day > > Hi, > > We are reaching capacity with our current hardware setup. Our current > machine is a Dual Xeon 2.40GHz + 2g RAM workhorse which runs > all services > required for web hosting (MySQL, Apache, Exim + Courier + > MailScanner + > MailWatch + SpamAssassin + ClamAV, named) but are looking to > separate this > out as the machine can no longer handle the load inflicted by > all these > services. > > By 5pm we've usually scanned 35,000 mails, 10% of that > legitimate. We reject > at MTA based on greet-pause and invalid recipients. We have > tried to reduce > the amount of users with catch-alls to the absolute minimum. > We went on a > Mail optimisation overhaul a few months ago during which time > MailScanner's > working area was switched to tempfs and we started using > compiled rules. > > We archive mails for 7 days and keep 20 days worth of mail. > > The only bottleneck on our current setup appears to be CPU - > vmstat looks > like this: > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in > cs us sy id > wa > 2 3 311500 801316 37144 97396 1 0 3 1 0 > 0 15 5 70 > 10 > > With bayes on, the load average hikes up to around 10, 11 or higher > depending on time of day. Without bayes the load usually sits > around 5/6. > > At present the hardware budget is fairly constricted so I'm > looking to find > out what minimum level of hardware would be required to run: > > MailScanner > MTA in gateway mode (forwarding scanned mail to existing server) > MailWatch (MySQL DB stored elsewhere) > SpamAssasin, compiled rules, bayes > > Any advice from the vast pool of MailScanner experience would > be greatly > appreciated. > > Regards, > Edward > > > ************ > The information in this email is confidential and may be > legally privileged. > It is intended solely for the addressee. Access to this email > by anyone else > is unauthorised. If you are not the intended recipient, any > action taken or > omitted to be taken in reliance on it, any form of reproduction, > dissemination, copying, disclosure, modification, distribution and/or > publication of this E-mail message is strictly prohibited and may be > unlawful. If you have received this E-mail message in error, > please notify > us immediately. Please also destroy and delete the message from your > computer. > ************ > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From J.Ede at birchenallhowden.co.uk Wed Nov 14 16:44:51 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 14 16:47:03 2007 Subject: OT: Best virtual machine server? In-Reply-To: References: <473774B0.5090700@ecs.soton.ac.uk>, Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3E@server02.bhl.local> From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Arto [arto.saraniva@artio.net] Sent: 14 November 2007 16:12 To: mailscanner@lists.mailscanner.info Subject: Re: OT: Best virtual machine server? Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( I am not sure if this has been yet mentioned, but: clock=pit -arto That was the work around I used on MS Virtual server to keep time relatively in sync.. Jason From hvdkooij at vanderkooij.org Wed Nov 14 18:21:39 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 14 18:22:00 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473B3CB3.7070709@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Edward Prendergast wrote: > The only bottleneck on our current setup appears to be CPU - vmstat looks > like this: > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 2 3 311500 801316 37144 97396 1 0 3 1 0 0 15 5 70 > 10 That CPU is 70% idle. Hardly a bottleneck. But the first line with vmstat is bogus. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOzywBvzDRVjxmYERAiwdAKCokSbTsN27MheNGm0sYB+9qyOqEwCgl+y+ hheDUOP1POBHZEeQ5KbLKhk= =sQTt -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Wed Nov 14 18:35:59 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 14 18:36:16 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473B400F.3000107@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Are you actually seeing mail queues getting big, particularly in exim.in/input? Just having a high load-average figure is not a good sign that the machine is struggling, you need to look to see if it is keeping up with the incoming mail. What size do the batches get to be? Best thing to look for is tail -f /var/log/maillog | grep 'New Batch' and see how many it is scanning at a time. If this is setting less than about 4 or 5, and not walking up to 30 in a batch, then that really is getting overloaded. Ignore the "messages waiting" figure, that includes messages that are in the process of being received from remote SMTP servers belonging to other people. Quad-core Xeon boxes with 8Gb RAM are pretty cheap these days. I just bought one with mirrored 500GB SATA disks and a hardware RAID controller, along with a quad-core CPU and Gb RAM for under 1500 quid (i.e. about US $2500 or less) from Dell. Let us know how big your batches get. Jules. Edward Prendergast wrote: > Hi, > > We are reaching capacity with our current hardware setup. Our current > machine is a Dual Xeon 2.40GHz + 2g RAM workhorse which runs all services > required for web hosting (MySQL, Apache, Exim + Courier + MailScanner + > MailWatch + SpamAssassin + ClamAV, named) but are looking to separate this > out as the machine can no longer handle the load inflicted by all these > services. > > By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject > at MTA based on greet-pause and invalid recipients. We have tried to reduce > the amount of users with catch-alls to the absolute minimum. We went on a > Mail optimisation overhaul a few months ago during which time MailScanner's > working area was switched to tempfs and we started using compiled rules. > > We archive mails for 7 days and keep 20 days worth of mail. > > The only bottleneck on our current setup appears to be CPU - vmstat looks > like this: > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 2 3 311500 801316 37144 97396 1 0 3 1 0 0 15 5 70 > 10 > > With bayes on, the load average hikes up to around 10, 11 or higher > depending on time of day. Without bayes the load usually sits around 5/6. > > At present the hardware budget is fairly constricted so I'm looking to find > out what minimum level of hardware would be required to run: > > MailScanner > MTA in gateway mode (forwarding scanned mail to existing server) > MailWatch (MySQL DB stored elsewhere) > SpamAssasin, compiled rules, bayes > > Any advice from the vast pool of MailScanner experience would be greatly > appreciated. > > Regards, > Edward > > > ************ > The information in this email is confidential and may be legally privileged. > It is intended solely for the addressee. Access to this email by anyone else > is unauthorised. If you are not the intended recipient, any action taken or > omitted to be taken in reliance on it, any form of reproduction, > dissemination, copying, disclosure, modification, distribution and/or > publication of this E-mail message is strictly prohibited and may be > unlawful. If you have received this E-mail message in error, please notify > us immediately. Please also destroy and delete the message from your > computer. > ************ > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHO0AREfZZRxQVtlQRAuFHAJ9jstNeTu3A8mQH1AGsTvHLobjgLACg794e 85oLnKgg0KmeQLIzjVCK6Yg= =fG2Z -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Nov 14 18:46:45 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 14 18:47:04 2007 Subject: OT: Best virtual machine server? In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3E@server02.bhl.local> References: <473774B0.5090700@ecs.soton.ac.uk>, <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3E@server02.bhl.local> Message-ID: <473B4295.4010701@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, I have now pretty much decided that hopefully RC1 of Windows Server 2008 will be out by the time I need the server (first half of December) and I'll run that. This should go pretty fast, and is easy to manage. I have used Virtual Server 2005 quite a bit, and am pretty pleased with it. It also doesn't cost me anything financially, which is quite important as I'm buying this out of my own money. The hypervisor in Win2008 appears to be quite a bit better than that in Virtual Server 2005. And it should be pretty secure too, which will help as this box will go in our main DMZ. Win2008 doesn't even come with a GUI by default if you go for a "core only" installation. But positive comments are still much appreciated. Flamewars can go and set fire to themselves :-) Jules. P.S. The hardware is ?1450 worth of quad-core 5xxx series Xeon CPU, 8Gb RAM, 2 500Gb SATA disks mirrored with a hardware RAID controller. So that should run Win2008 just fine. I'll sling a 1Tbyte USB disk on it to do occasional backups. It's not intended as a production service, just a service to be able to provide quick response to people who ask me if they can borrow a server for a few months. So it will run several low-load services for people, some Windows, some Linux. Not being able to run Solaris will be a bit of a pain, but I have other spare servers that could do this at a push. P.P.S. I haven't done a Win2008 install yet, so any and all tips are very welcome. Particularly from any Microsoft employees lurking on this list (who may want to contact me off-list). Jason Ede wrote: > From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Arto [arto.saraniva@artio.net] > Sent: 14 November 2007 16:12 > To: mailscanner@lists.mailscanner.info > Subject: Re: OT: Best virtual machine server? > > Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I've been badly bitten by VMWare, so that's out. No discussion there. It >> can't even keep its clock running to time :-( >> > > I am not sure if this has been yet mentioned, but: > clock=pit > > -arto > > That was the work around I used on MS Virtual server to keep time relatively in sync.. > > Jason > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHO0KaEfZZRxQVtlQRApXBAKCgy7htDxwvv+ZFja0FKGG76tsNLQCfVq6e f+RVm/QIyrHRkRUd5rNZfVw= =/uhp -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From eclipsem at optusnet.com.au Wed Nov 14 21:49:25 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 21:49:31 2007 Subject: scanning rules Message-ID: <200711142149.lAELnPdJ001654@mail03.syd.optusnet.com.au> > Glenn Steen wrote: > > On 14/11/2007, eclipsem@optusnet.com.au > wrote: > > > > Hello, > > > > I would like to have something clarified about scan rules. > > > > # If this is set to yes, then email messages passing through > MailScanner > > # will be processed and checked, and all the other options in this > file > > # will be used to control what checks are made on the message. > > # If this is set to no, then email messages will NOT be processed or > > # checked *at all*, and so any viruses or other problems will be > ignored > > Scan Messages = /opt/MailScanner/etc/rules/scan.rules > > > > This file contains - > > > > From: 127.0.0.1 no > > From: 10.0.1.6 no > > FromOrTo: default yes > > > > These are the IP's of the local server, now I have a script that > generates emails upon email to sales department, to other sales reps, it > is a new generated message, not forwarded as it contains some SQL > content. The thing is MailScanner still wants to scan the message when > its submitted. > > > > I also have these IP's in - > > Information Header = /opt/MailScanner/etc/rules/header.rules (in > case we take them out of all scanning rules at later date) > > > > Could this settings be countermanding the "no scan" rules? > > > > Also we strip out some Exchange headers in MailScanner using "Remove > These Headers" this works very well, except we turned off Spam Checks, > for a bit trying to debug the above problem , and we noticed > > that MailScanner stopped removing that header but yes all the other > scan rules were still active? > > > > TIA > > Edward > > It should function exactly as it says "on the tin".... Could we see > some example log entries (all relevant entries, from connect to the > MTA, through MS and on to final delivery), and perhaps an example > message (with headers) as well? > They all say the IP 10.0.1.6, which it is told by the rules above to ignore, mailscanner adds the headers to the message including spamassassins so I know it is ignoring the "do not scan" rules and scanning them. From eclipsem at optusnet.com.au Wed Nov 14 22:51:38 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 22:51:43 2007 Subject: scanning rules Message-ID: <200711142251.lAEMpcQk006168@mail05.syd.optusnet.com.au> Glenn Steen wrote: > > It should function exactly as it says "on the tin".... Could we see > some example log entries (all relevant entries, from connect to the > MTA, through MS and on to final delivery), and perhaps an example > message (with headers) as well? > The server was isolated then all mailer daemons restarted so the only msg was my test one, and it clearly shows its spam tests and virus tests, however the unscanned message log entry also has me fuzzled, does mailscanner just log everything if if its set to bypass as well? This makes debugging a PITA, I hope we don't have to move back to MIMEDefang The log appears out of order this is most likely due to the "dont immediately write to log" syslog setting Thanks Edward Nov 15 08:19:31 exorcist sendmail[31712]: lAEMJVNt031712: from=, size=448, class=0, nrcpts=1, msgid=<4.64.0711150817210.22424@blacksabeth>, proto=ESMTP, daemon=MTA, relay=[10.0.1.19] [10.0.1.19] Nov 15 08:19:32 exorcist MailScanner[31693]: New Batch: Scanning 1 messages, 909 bytes Nov 15 08:19:33 exorcist MailScanner[31693]: Spam Checks: Starting Nov 15 08:19:33 exorcist MailScanner[31693]: Unscanned: Delivered 1 messages Nov 15 08:19:33 exorcist MailScanner[31693]: Virus and Content Scanning: Starting Nov 15 08:19:33 exorcist sendmail[31721]: lAEMJXqj031721: from=, size=868, class=0, nrcpts=1, msgid=, proto=ESMTP, daemon=MTA, relay= [10.0.1.6] [10.0.1.6] Nov 15 08:19:33 exorcist sendmail[31718]: lAEMJVNt031712: to="|/opt/house", ctladdr= (8/0), delay=00:00:02, xdelay=00:00:00, mailer=prog, pri=120448, dsn=2.0.0, stat=Sent Nov 15 08:19:34 exorcist MailScanner[31693]: New Batch: Scanning 1 messages, 1337 bytes Nov 15 08:19:34 exorcist MailScanner[31693]: Spam Checks: Starting Nov 15 08:19:34 exorcist sendmail[31732]: lAEMJXqj031721: to=X@optusnet.com.au, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120868, relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMJYbf022431 Message accepted for delivery) Nov 15 08:19:34 exorcist MailScanner[31693]: Unscanned: Delivered 1 messages Nov 15 08:19:35 exorcist MailScanner[31693]: Virus and Content Scanning: Starting And a message from me to me not going via that script, does not have headers added but does have all the log entries as well. Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: from=, size=443, class=0, nrcpts=1, msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, relay=[10.0.1.19] [10.0.1.19] Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 messages, 892 bytes Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: to=X@optusnet.com.au, ctladdr= (1009/100), delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 Message accepted for delivery) Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 messages Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content Scanning: Starting From hvdkooij at vanderkooij.org Wed Nov 14 23:03:33 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 14 23:03:54 2007 Subject: scanning rules In-Reply-To: <200711142251.lAEMpcQk006168@mail05.syd.optusnet.com.au> References: <200711142251.lAEMpcQk006168@mail05.syd.optusnet.com.au> Message-ID: <473B7EC5.5080505@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: from=, size=443, class=0, nrcpts=1, msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, relay=[10.0.1.19] [10.0.1.19] > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 messages, 892 bytes > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: to=X@optusnet.com.au, ctladdr= (1009/100), delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 Message accepted for delivery) > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 messages > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content Scanning: Starting It explicitly tells you it did NOT scan. (See the Unscanned: line) Mind you that by design MailScanner is the glue that holds two sendmail instances together. Wether it just forwards the message unscanned or tries every trick in the book depends on your config. But it will clearly log the message. Unless every message passes MailScanner there is no way that MailScanner can decide wether or not to scan it or use AV scanner X or Y. Now what is the problem? Does it not work as advertised? From the looks of it is seems everything is working as you wanted it. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHO37DBvzDRVjxmYERAg9XAKCyKJfSEBusV9YG3FCAlXojOLH0OQCffIHH nQvOuG/S4cu+NW8de5J4xL4= =FpRS -----END PGP SIGNATURE----- From eclipsem at optusnet.com.au Wed Nov 14 23:12:39 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 23:12:44 2007 Subject: scanning rules Message-ID: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> > Hugo van der Kooij wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > eclipsem@optusnet.com.au wrote: > > > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > from=, size=443, class=0, nrcpts=1, > msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, > relay=[10.0.1.19] [10.0.1.19] > > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > messages, 892 bytes > > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > to=X@optusnet.com.au, ctladdr= (1009/100), > delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > Message accepted for delivery) > > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > messages > > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > Scanning: Starting > > It explicitly tells you it did NOT scan. (See the Unscanned: line) > Then what is the point of all the starting spam checks and starting virus scanning log entries, thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists Are you the programmer of mailscanner? if not how about you leave this for him or her to answer I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 From hvdkooij at vanderkooij.org Thu Nov 15 06:34:10 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 15 06:34:35 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <473BE862.6060806@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > > > >> Hugo van der Kooij wrote: >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> eclipsem@optusnet.com.au wrote: >> >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: >> from=, size=443, class=0, nrcpts=1, >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, >> relay=[10.0.1.19] [10.0.1.19] >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 >> messages, 892 bytes >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: >> to=X@optusnet.com.au, ctladdr= (1009/100), >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 >> Message accepted for delivery) >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 >> messages >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content >> Scanning: Starting >> >> It explicitly tells you it did NOT scan. (See the Unscanned: line) >> > > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > > I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 I suggest you pay Jules for commercial support if it is that important to you. If you do not value peer advise then why bother with a mailinglist to begin with? Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST yUQ/eO5lMV9DCPlo08jZZmM= =d8bN -----END PGP SIGNATURE----- From viralert at fadalto.com Thu Nov 15 08:55:36 2007 From: viralert at fadalto.com (Phil) Date: Thu Nov 15 08:55:49 2007 Subject: Mailscanner MCP Problem In-Reply-To: <473B06C6.7020105@kettle.org.uk> References: <46A60120.9000901@kettle.org.uk> <46A60373.3020309@ecs.soton.ac.uk> <473B06C6.7020105@kettle.org.uk> Message-ID: <20071115085536.M25048@fadalto.com> Hi, I had the same problem. my conf file was : MCP Checks = yes First Check = mcp changing it into: MCP Checks = yes First Check = spam I solved the problem, thanks to the guy here on the mailinglist :) Phil ---------- Original Message ----------- From: Rob Kettle To: mailscanner@lists.mailscanner.info Sent: Wed, 14 Nov 2007 14:31:34 +0000 Subject: Mailscanner MCP Problem > Hi, > > apologies if this should have been directed elsewhere... > > I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail > and clamd). > > All is OK when the incominmg message is not matched by MCP rules. > > If the message is MCP matched and the rule is 'deliver' (without quotes) > then the message seems to disappears into a back hole. This seems > irrespective of whether it matches any spam or virus rules in subsequent > checks (MCP is first check). If I have a mailscanner (Mail archiving and > monitoring) rule setup for a user that says to deliver locally (the > default) and forward to an external address the deliver disappears into > a black hole but the forward to external address part works. > > any help or pointers would be appreciated. > > Regards > Rob Kettle > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ------- End of Original Message ------- From rob at kettle.org.uk Thu Nov 15 09:03:44 2007 From: rob at kettle.org.uk (Rob Kettle) Date: Thu Nov 15 09:03:50 2007 Subject: Mailscanner MCP Problem In-Reply-To: <20071115085536.M25048@fadalto.com> References: <46A60120.9000901@kettle.org.uk> <46A60373.3020309@ecs.soton.ac.uk> <473B06C6.7020105@kettle.org.uk> <20071115085536.M25048@fadalto.com> Message-ID: <473C0B70.8020504@kettle.org.uk> Hi, I got to that by trial and error last night, coicidentally just as Julian replied to me with the same answer. thanks again. Rob Phil wrote: > Hi, > > I had the same problem. > > my conf file was : > > MCP Checks = yes > First Check = mcp > > changing it into: > > MCP Checks = yes > First Check = spam > > I solved the problem, thanks to the guy here on the mailinglist :) > > Phil > > > ---------- Original Message ----------- > From: Rob Kettle > To: mailscanner@lists.mailscanner.info > Sent: Wed, 14 Nov 2007 14:31:34 +0000 > Subject: Mailscanner MCP Problem > > >> Hi, >> >> apologies if this should have been directed elsewhere... >> >> I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail >> and clamd). >> >> All is OK when the incominmg message is not matched by MCP rules. >> >> If the message is MCP matched and the rule is 'deliver' (without quotes) >> then the message seems to disappears into a back hole. This seems >> irrespective of whether it matches any spam or virus rules in subsequent >> checks (MCP is first check). If I have a mailscanner (Mail archiving and >> monitoring) rule setup for a user that says to deliver locally (the >> default) and forward to an external address the deliver disappears into >> a black hole but the forward to external address part works. >> >> any help or pointers would be appreciated. >> >> Regards >> Rob Kettle >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> > ------- End of Original Message ------- > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Thu Nov 15 09:55:53 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 09:56:10 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <473C17A9.6050600@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > Excuse me, but we have rules on manners around here. This guy is trying very hard to help you out, and he is very experienced with MailScanner. If you don't want his help, then what are you doing here? This list is for everyone to help out each other. If you want to only talk to me, then that's just fine. I charge ?200 per hour for commercial tech support. I do accept cheques ("checks" in the USA), or you can pay me via credit card into my Paypal account. If you don't want help from those here who are willing to help you out as best as they can, for free, then I suggest you don't ask here. Best regards, Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHPBeqEfZZRxQVtlQRApY+AJ99MHC/M4TnJPLNrrC/LZTMaGH8PgCfT8NK 4w1gl3IcsIk91+P+qp5PSnA= =sxRl -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From P.G.M.Peters at utwente.nl Thu Nov 15 10:45:52 2007 From: P.G.M.Peters at utwente.nl (Peter Peters) Date: Thu Nov 15 10:46:01 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473C2360.9000001@utwente.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Edward Prendergast wrote on 14-11-2007 17:16: > By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject > at MTA based on greet-pause and invalid recipients. We have tried to reduce > the amount of users with catch-alls to the absolute minimum. We went on a > Mail optimisation overhaul a few months ago during which time MailScanner's > working area was switched to tempfs and we started using compiled rules. We are getting over 300.000 messages (single from's) a day. And we block another 360.000 at the MTA level (60.000 without reverse DNS, 100.000 blocked consumernetwork, 30.000 non-excisting domains and the rest non-excisting users). Only about 2000 messages are deleted by MailScanner. The rest is delivered to the users. We don't use tmpfs. Our system is an HP dual core Intel(R) Xeon(TM) CPU 3.00GHz with 4GB of memory runnig Sendmail, MailScanner, Spamassassin with bayes, F-prot and ClamAV. Before we started blocking on reverse DNS our incoming queue grew from noon until midnight and it disappeared in 6 hours. With reverse DNS blocking we don't see any raise in the incoming queue anymore. The load was usually between 10 and 15. But is now between 4 and 10. - -- Peter Peters, Teamleider Unix/Linux-Beheer ICT-Servicecentrum Universiteit Twente, Postbus 217, 7500 AE Enschede Telefoon 053 489 2301, Fax 053 489 2383, P.G.M.Peters@utwente.nl, http://www.utwente.nl/icts -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHPCNfelLo80lrIdIRAmMLAJsEhWzBxUTWGSk47BIo/jCJNQsmsgCeKyHS xkqLIvt11d1hoob3ScP7q5w= =FGlo -----END PGP SIGNATURE----- From gmatt at nerc.ac.uk Thu Nov 15 10:52:56 2007 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Thu Nov 15 10:55:40 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473C2508.6020901@nerc.ac.uk> Edward Prendergast wrote: > Any advice from the vast pool of MailScanner experience would be greatly > appreciated. - reject more at the MTA - consider a block list - double the memory to 4GB - it will get used and its much faster than disk. - run a caching name service daemon - high load may be due to iowait. Also, consider reducing the number of DNS lookups performed by SA. - check to see if you are running pyzor and try removing it - more long DNS queries to drive up the load. - remove IMAP services - this can really kill a busy server, separate out your mail filtering from your mail delivery Your dual Xeons should be able to handle that level of mail. That said, I have a client that runs a busy IMAP server alongside MS on a much more powerful box and I had to impose limits on the imap connections as certain clients were killing the performance when churning through large mailboxes. Are you queues actually building up or are you just concerned with the load average? GREG -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From eclipsem at optusnet.com.au Thu Nov 15 11:38:35 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Thu Nov 15 11:38:41 2007 Subject: scanning rules Message-ID: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. I also note you NIETHER you or your rude and arrogant hugo long term user commented on the real issue ans to mailscanner not whitelisting when told to given other rules read in at load time. Don't worry though, all your users can be led into a false sense of belief when they try debug your software, which wont be our problem as our MTA is now using MIMEDefang, working as it is documented. I hope this makes it to Google fast so people researching mailscanner can see what they can expect from you julian. and yes dont worry after I hit send here the next message is to mailman to remove myself > Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > Excuse me, but we have rules on manners around here. This guy is trying very hard to help you out, and he is very experienced with MailScanner. If you don't want his help, then what are you doing here? This list is for everyone to help out each other. If you want to only talk to me, then that's just fine. I charge £200 per hour for commercial tech support. I do accept cheques ("checks" in the USA), or you can pay me via credit card into my Paypal account. If you don't want help from those here who are willing to help you out as best as they can, for free, then I suggest you don't ask here. Best regards, Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHPBeqEfZZRxQVtlQRApY+AJ99MHC/M4TnJPLNrrC/LZTMaGH8PgCfT8NK 4w1gl3IcsIk91+P+qp5PSnA= =sxRl -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From eclipsem at optusnet.com.au Thu Nov 15 11:40:20 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Thu Nov 15 11:40:26 2007 Subject: scanning rules Message-ID: <200711151140.lAFBeK1S017931@mail08.syd.optusnet.com.au> > Hugo van der Kooij wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > eclipsem@optusnet.com.au wrote: > > > > > > > >> Hugo van der Kooij wrote: > >> > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> eclipsem@optusnet.com.au wrote: > >> > >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > >> from=, size=443, class=0, nrcpts=1, > >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, > daemon=MTA, > >> relay=[10.0.1.19] [10.0.1.19] > >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > >> messages, 892 bytes > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > >> to=X@optusnet.com.au, ctladdr= (1009/100), > >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > >> Message accepted for delivery) > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > >> messages > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > >> Scanning: Starting > >> > >> It explicitly tells you it did NOT scan. (See the Unscanned: line) > >> > > > > Then what is the point of all the starting spam checks and starting > virus scanning log entries, > > thats fine here on local messages, but does not answer the main issue > we have on our script generated messages where it does in fact add the > headers to the email and clearly ignores the whitelists > > > > Are you the programmer of mailscanner? if not how about you leave this > for him or her to answer > > > > I have until COB today, or I have been told to reinstall MIMEDefang > before I go home, guess it's time to start installing it now so I can > enact it at 430 > > I suggest you pay Jules for commercial support if it is that important > to you. ROFLMFAO, pay the author to fix his code? sounds like you work at microsoft. > > If you do not value peer advise then why bother with a mailinglist to > begin with? > because this is the only way to log a bug report that gets a repsonse > Hugo. > > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST > yUQ/eO5lMV9DCPlo08jZZmM= > =d8bN > -----END PGP SIGNATURE----- > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From uxbod at splatnix.net Thu Nov 15 11:53:59 2007 From: uxbod at splatnix.net (UxBoD) Date: Thu Nov 15 11:44:53 2007 Subject: scanning rules In-Reply-To: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> Message-ID: <5245480.14031195127638999.JavaMail.root@office.splatnix.net> Bye bye - Surely will not be missed ! Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: eclipsem@optusnet.com.au To: "MailScanner discussion" Sent: Thursday, November 15, 2007 11:38:35 AM (GMT) Europe/London Subject: Re: Re: scanning rules So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. I also note you NIETHER you or your rude and arrogant hugo long term user commented on the real issue ans to mailscanner not whitelisting when told to given other rules read in at load time. Don't worry though, all your users can be led into a false sense of belief when they try debug your software, which wont be our problem as our MTA is now using MIMEDefang, working as it is documented. I hope this makes it to Google fast so people researching mailscanner can see what they can expect from you julian. and yes dont worry after I hit send here the next message is to mailman to remove myself > Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > Excuse me, but we have rules on manners around here. This guy is trying very hard to help you out, and he is very experienced with MailScanner. If you don't want his help, then what are you doing here? This list is for everyone to help out each other. If you want to only talk to me, then that's just fine. I charge ??200 per hour for commercial tech support. I do accept cheques ("checks" in the USA), or you can pay me via credit card into my Paypal account. If you don't want help from those here who are willing to help you out as best as they can, for free, then I suggest you don't ask here. Best regards, Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHPBeqEfZZRxQVtlQRApY+AJ99MHC/M4TnJPLNrrC/LZTMaGH8PgCfT8NK 4w1gl3IcsIk91+P+qp5PSnA= =sxRl -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Thu Nov 15 11:58:00 2007 From: uxbod at splatnix.net (UxBoD) Date: Thu Nov 15 11:48:53 2007 Subject: scanning rules In-Reply-To: <200711151140.lAFBeK1S017931@mail08.syd.optusnet.com.au> Message-ID: <18533971.14061195127880245.JavaMail.root@office.splatnix.net> thought you were going ? you must be enjoying the list :) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: eclipsem@optusnet.com.au To: "MailScanner discussion" Sent: Thursday, November 15, 2007 11:40:20 AM (GMT) Europe/London Subject: Re: Re: scanning rules > Hugo van der Kooij wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > eclipsem@optusnet.com.au wrote: > > > > > > > >> Hugo van der Kooij wrote: > >> > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> eclipsem@optusnet.com.au wrote: > >> > >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > >> from=, size=443, class=0, nrcpts=1, > >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, > daemon=MTA, > >> relay=[10.0.1.19] [10.0.1.19] > >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > >> messages, 892 bytes > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > >> to=X@optusnet.com.au, ctladdr= (1009/100), > >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > >> Message accepted for delivery) > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > >> messages > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > >> Scanning: Starting > >> > >> It explicitly tells you it did NOT scan. (See the Unscanned: line) > >> > > > > Then what is the point of all the starting spam checks and starting > virus scanning log entries, > > thats fine here on local messages, but does not answer the main issue > we have on our script generated messages where it does in fact add the > headers to the email and clearly ignores the whitelists > > > > Are you the programmer of mailscanner? if not how about you leave this > for him or her to answer > > > > I have until COB today, or I have been told to reinstall MIMEDefang > before I go home, guess it's time to start installing it now so I can > enact it at 430 > > I suggest you pay Jules for commercial support if it is that important > to you. ROFLMFAO, pay the author to fix his code? sounds like you work at microsoft. > > If you do not value peer advise then why bother with a mailinglist to > begin with? > because this is the only way to log a bug report that gets a repsonse > Hugo. > > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST > yUQ/eO5lMV9DCPlo08jZZmM= > =d8bN > -----END PGP SIGNATURE----- > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From martinh at solidstatelogic.com Thu Nov 15 12:18:54 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 15 12:19:03 2007 Subject: scanning rules In-Reply-To: <200711151140.lAFBeK1S017931@mail08.syd.optusnet.com.au> Message-ID: <3de14af50907ae4d9d618651ea03357f@solidstatelogic.com> Take it easy, we all got day jobs including Julian! Personally I've always found support here very friendly and informatative. This is prob the main reason I chose mailscanner over 3 years ago as replacement for the commercial pile of rubbish with PAID support that was terrible. Sure I get things wrong myself and get corrected but it's still in a friendly manner. Sometimes there's bug in the s/w and we work "together" to get a solution. Sometimes there's a config/knowledge issue and again WORKING TOGETHER we get a solution. Anyway back to the issue in hand.... For your problem it depends where abouts you are 'whitelisting' as to what point it get to before it sees the 'whitelist'. If you want the big 'on/off' setting it's "scan messages" in MailScanner.conf. There's also settings about whether or not run the spam checks, whether spamassassin whitelists and a whole range of other places you can whitelist depending on what then actual requirement is. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of eclipsem@optusnet.com.au > Sent: 15 November 2007 11:40 > To: MailScanner discussion > Subject: Re: Re: scanning rules > > > > > > > Hugo van der Kooij wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > eclipsem@optusnet.com.au wrote: > > > > > > > > > > > >> Hugo van der Kooij wrote: > > >> > > >> -----BEGIN PGP SIGNED MESSAGE----- > > >> Hash: SHA1 > > >> > > >> eclipsem@optusnet.com.au wrote: > > >> > > >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > > >> from=, size=443, class=0, nrcpts=1, > > >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, > > daemon=MTA, > > >> relay=[10.0.1.19] [10.0.1.19] > > >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > > >> messages, 892 bytes > > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > > >> to=X@optusnet.com.au, ctladdr= (1009/100), > > >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > > >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > > >> Message accepted for delivery) > > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > > >> messages > > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > > >> Scanning: Starting > > >> > > >> It explicitly tells you it did NOT scan. (See the Unscanned: line) > > >> > > > > > > Then what is the point of all the starting spam checks and starting > > virus scanning log entries, > > > thats fine here on local messages, but does not answer the main issue > > we have on our script generated messages where it does in fact add the > > headers to the email and clearly ignores the whitelists > > > > > > Are you the programmer of mailscanner? if not how about you leave this > > for him or her to answer > > > > > > I have until COB today, or I have been told to reinstall MIMEDefang > > before I go home, guess it's time to start installing it now so I can > > enact it at 430 > > > > I suggest you pay Jules for commercial support if it is that important > > to you. > > ROFLMFAO, pay the author to fix his code? sounds like you work at > microsoft. > > > > > If you do not value peer advise then why bother with a mailinglist to > > begin with? > > > > because this is the only way to log a bug report that gets a repsonse > > > > Hugo. > > > > > > - -- > > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > > > A: Yes. > > >Q: Are you sure? > > >>A: Because it reverses the logical flow of conversation. > > >>>Q: Why is top posting frowned upon? > > > > Bored? Click on http://spamornot.org/ and rate those images. > > > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.4.7 (GNU/Linux) > > > > iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST > > yUQ/eO5lMV9DCPlo08jZZmM= > > =d8bN > > -----END PGP SIGNATURE----- > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From glenn.steen at gmail.com Thu Nov 15 12:29:41 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 15 12:29:43 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <223f97700711150429l19c9d908wc831ea1a36129838@mail.gmail.com> On 15/11/2007, eclipsem@optusnet.com.au wrote: > > > > > > Hugo van der Kooij wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > eclipsem@optusnet.com.au wrote: > > > > > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > > from=, size=443, class=0, nrcpts=1, > > msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, > > relay=[10.0.1.19] [10.0.1.19] > > > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > > messages, 892 bytes > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > > to=X@optusnet.com.au, ctladdr= (1009/100), > > delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > > relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > > Message accepted for delivery) > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > > messages > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > > Scanning: Starting > > > > It explicitly tells you it did NOT scan. (See the Unscanned: line) > > > > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > > I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 > Working under pressure isn't always the best way to resolve problems:-). As to the original problem... Did you by any chance edit the rule file(s) under Windoze? Have you run a "MailScanner --lint"? What you've quoted here looks OK, but... If your rules aren't working there are more debug optiions, to verify exactly what MailScanner will do... Try a "MailScanner --help" and you'll see;-). Hmmm, perhaps I should look at the rest of this thread... Oh my $DEITY ! How a simple debug excercise turns vicious! Argh. Well, I hope you'll find MIMEDefang as powerful and useful as MailScanner... last I looked it wasn't, but then ... that was a while back. If you had asked nicely, I know for a fact that Jules would've helped you out (along with a few others here... Hugo among them;-), perhaps even if you had asked off-list. That Jules makes very little money on MS is no secret. That he will do consulting (that is: listen to your problem, log into your server and solve said problem) at a reasonable fare (which it actually is) ... is no secret either. He's both fast and good. Ah well. Be well, all! Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From davi at jvsinfo.com.br Thu Nov 15 15:05:05 2007 From: davi at jvsinfo.com.br (Davi Baldin) Date: Thu Nov 15 13:55:09 2007 Subject: =?iso-8859-1?q?ATEN=C7=C3O_-_Davi_estar=E1_ausente?= Message-ID: I will be out of the office starting 15/11/2007 and will not return until 16/11/2007. Estarei ausente at? dia 01/09/2007. Assuntos de suporte, favor encaminhar para suporte@jvsinfo.com.br, grato. From edward.prendergast at netring.co.uk Thu Nov 15 14:34:47 2007 From: edward.prendergast at netring.co.uk (Edward Prendergast) Date: Thu Nov 15 14:37:03 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C2508.6020901@nerc.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> Message-ID: <015701c82794$b19d7ab0$14d87010$@prendergast@netring.co.uk> > Any advice from the vast pool of MailScanner experience would be greatly > appreciated. >> Are you queues actually building up or are you just concerned with the >> load average? In reply to Greg and Julian: The queue seems to go up with the load. By the time the load is around 10 the queue starts to climb without any sign of going down. It usually reaches the 300 mark within half an hour to an hour, but has gone up as far as 3,000. When I turn bayes off the load goes down and mail queues start becoming manageable again. Our users largely use POP3, with a few using IMAP through squirrelmail. Their mailboxes usually tend to contain around 300 messages. Here's how vmstat looks now with bayes enabled: # vmstat 10 5 procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 10 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 39 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 40 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 46 It looks to me like there might be some thrashing going on. At this level, the queue looks like this: Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages waiting Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, 38032 bytes ************ The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, any action taken or omitted to be taken in reliance on it, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this E-mail message is strictly prohibited and may be unlawful. If you have received this E-mail message in error, please notify us immediately. Please also destroy and delete the message from your computer. ************ From Richard.Frovarp at sendit.nodak.edu Thu Nov 15 15:05:31 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Thu Nov 15 15:05:36 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <015701c82794$b19d7ab0$14d87010$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <015701c82794$b19d7ab0$14d87010$@prendergast@netring.co.uk> Message-ID: <473C603B.8020803@sendit.nodak.edu> Edward Prendergast wrote: >> Any advice from the vast pool of MailScanner experience would be greatly >> appreciated. >> > > >>> Are you queues actually building up or are you just concerned with the >>> load average? >>> > > In reply to Greg and Julian: > > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. > > Our users largely use POP3, with a few using IMAP through squirrelmail. > Their mailboxes usually tend to contain around 300 messages. > > Here's how vmstat looks now with bayes enabled: > # vmstat 10 5 > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 > 10 > 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 > 39 > 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 > 40 > 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 > 46 > > It looks to me like there might be some thrashing going on. > > At this level, the queue looks like this: > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages > waiting > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, > 38032 bytes > To answer your question, and modern machine with 1 GB of RAM will work for you just fine. I've got a dual 2.0 Xeon with 1 GB of RAM handling that mail load without blinking. It makes sense to split your services out to more boxes rather than having all of them run on one machine. If you haven't already, check out imapproxy for use with squirrelmail. That will help reduce load due to that. From dnsadmin at 1bigthink.com Thu Nov 15 16:48:03 2007 From: dnsadmin at 1bigthink.com (dnsadmin 1bigthink.com) Date: Thu Nov 15 16:48:15 2007 Subject: scanning rules In-Reply-To: <223f97700711150429l19c9d908wc831ea1a36129838@mail.gmail.co m> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> <223f97700711150429l19c9d908wc831ea1a36129838@mail.gmail.com> Message-ID: <200711151648.lAFGmGEP015251@mxt.1bigthink.com> At 07:29 AM 11/15/2007, you wrote: >On 15/11/2007, eclipsem@optusnet.com.au wrote: > > > > > > > > > > > Hugo van der Kooij wrote: > > > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA1 > > > > > > eclipsem@optusnet.com.au wrote: > > > > > > > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > > > from=, size=443, class=0, nrcpts=1, > > > msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, > > > relay=[10.0.1.19] [10.0.1.19] > > > > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > > > messages, 892 bytes > > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > > > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > > > to=X@optusnet.com.au, ctladdr= (1009/100), > > > delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > > > relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > > > Message accepted for delivery) > > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > > > messages > > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > > > Scanning: Starting > > > > > > It explicitly tells you it did NOT scan. (See the Unscanned: line) > > > > > > > Then what is the point of all the starting spam checks and > starting virus scanning log entries, > > thats fine here on local messages, but does not answer the main > issue we have on our script generated messages where it does in > fact add the headers to the email and clearly ignores the whitelists > > > > Are you the programmer of mailscanner? if not how about you leave > this for him or her to answer > > > > I have until COB today, or I have been told to reinstall > MIMEDefang before I go home, guess it's time to start installing it > now so I can enact it at 430 > > >Working under pressure isn't always the best way to resolve problems:-). > >As to the original problem... Did you by any chance edit the rule >file(s) under Windoze? Have you run a "MailScanner --lint"? What >you've quoted here looks OK, but... If your rules aren't working there >are more debug optiions, to verify exactly what MailScanner will do... >Try a "MailScanner --help" and you'll see;-). > >Hmmm, perhaps I should look at the rest of this thread... Oh my $DEITY >! How a simple debug excercise turns vicious! Argh. >Well, I hope you'll find MIMEDefang as powerful and useful as >MailScanner... last I looked it wasn't, but then ... that was a while >back. >If you had asked nicely, I know for a fact that Jules would've helped >you out (along with a few others here... Hugo among them;-), perhaps >even if you had asked off-list. >That Jules makes very little money on MS is no secret. That he will do >consulting (that is: listen to your problem, log into your server and >solve said problem) at a reasonable fare (which it actually is) ... is >no secret either. He's both fast and good. >Ah well. Be well, all! > >Cheers >-- >-- Glenn Wow! That Julian is patient with all of us and this software distribution is a tribute! That all of you are well behaved (for the most part) and patient with one another is another tribute. Think I'll stay and continue lurking.. Cheers all, (Another) Glenn From richard.thomas at psysolutions.com Thu Nov 15 17:00:01 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Thu Nov 15 17:00:05 2007 Subject: Exim timeouts - MailScanner related? Message-ID: <473C7B11.3020400@psysolutions.com> Our setup is that we have a mail server which is scanning emails using exim4/mailscanner/spamassassin which then forwards to another server which is just running just exim4. Most of the time, everything is running well but occasionally, I am seeing SMTP data timeouts in the logs of the receiving server. The issue seems to be that when the scanning server sends to the target server, it is not correctly putting the period on a line by itself. For example, here is the tail end of a file in the exim4 out queue: /td> (No CRLF at the end). Here is the hexdump of a packet capture on the target server: 0033220 t d > < / t d > < / t r > < / t 0033240 a b l e > < / c e n t e r > < / 0033260 b o d y > < / h t m l > . \r \n 0033277 To be honest, at this stage, I'm suspecting exim since it seems to me that it should be able to reasonably handle this situation. But then again, I'm not intimately familiar with the exim queue file format and it could be that it expects it to be properly formatted and MailScanner apparently *has* touched this file so I guess it's possible that it has somehow stripped a required CRLF. I'm at the early stages of troubleshooting at the moment so if anyone has any insight on this, I'd be very grateful to here. I'll just note that this email was apparently received by the scanning server with no issues. Rich From jerry.owens at fmr.com Thu Nov 15 17:11:30 2007 From: jerry.owens at fmr.com (Owens, Jerry) Date: Thu Nov 15 17:11:36 2007 Subject: New installation configuration question. Message-ID: <641E82DC34CF514F82C95407D253E37A01176DE4@MSGMROCLS2WIN.DMN1.FMR.COM> I have just built an Ubuntu server to process my personal mail. I installed it using a guide at: http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using postfix and courrier to process mail. I installed and configured these and verified that I could send myself a test message. I then installed MailScanner using apt-get which installed version 4.46.2-3. I configured mailscanner to work with postfix from the using postfix page in the mailscanner documentation. All my mail is coming into /var/spool/postfix/hold and sitting. It is not getting delivered to me. Would this likely be a configuration issue with mailscanner or postfix? Here are the canges I made. How to Set Up Postfix for MailScanner Use 1. Install Postfix version 2 and get it all working. 2. Stop Postfix using a command postfix stop 3. Make sure you have the chroot jail set up in /var/spool/postfix. You should be able to see "etc", "usr" and "lib" directories inside /var/spool/postfix). If you haven't got the chroot jail setup already, then look in the "examples" directory of the Postfix documentation and you will find a script in there to set up it up for your operating system. If you can't find that, then see the "Problems or Errors" section further down this page. 4. At this point, things change from the setup for other MTAs as we can make it run with just one copy of Postfix, and let Postfix do the "split MTA" setup for us. 5. In the Postfix configuration file /etc/postfix/main.cf add this line: header_checks = regexp:/etc/postfix/header_checks 6. In the file /etc/postfix/header_checks add this line: /^Received:/ HOLD The effect of this is to tell Postfix to move all messages to the HOLD queue. How to Set up MailScanner for Use with Postfix In your MailScanner.conf file (probably in /etc/MailScanner or /opt/MailScanner/etc), there are 5 settings you need to change. They are all really near the top of the file. The settings are Run As User = postfix Run As Group = postfix Incoming Queue Dir = /var/spool/postfix/hold Outgoing Queue Dir = /var/spool/postfix/incoming MTA = postfix You will need to ensure that the user "postfix" can write to /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: chown postfix.postfix /var/spool/MailScanner/incoming chown postfix.postfix /var/spool/MailScanner/quarantine If you upgrade your copy of MailScanner, unfortunately these directories will be changed back to being owned by root, so you will have to do those 2 commands again. Starting It All Running If on a system installed using the RedHat RPM distribution, just use the init.d script to do it all for you: /etc/rc.d/init.d/MailScanner start (or on RedHat systems just service MailScanner start) If not using the RedHat RPM distribution, then 1. Start Postfix postfix start 2. Start MailScanner check_MailScanner Thanks, Jerry From Kevin_Miller at ci.juneau.ak.us Thu Nov 15 17:22:48 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Thu Nov 15 17:22:20 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: eclipsem@optusnet.com.au wrote: > > Then what is the point of all the starting spam checks and starting > virus scanning log entries, > thats fine here on local messages, but does not answer the main issue > we have on our script generated messages where it does in fact add > the headers to the email and clearly ignores the whitelists You're probably long gone now, but I'll throw in my $.02 anyway. If I'm on the right track, it may be instructive for others. If I'm not, maybe someone will correct me and that will be instructive for me and others. Everyone wins. Well, except you, since you're long gone. ;-) I suspect that the log entries are due to the flow of MailScanner. It processes things in batches. It may be a batch of one if there's only one message in /var/spool/mqueue.in, or many more. It doesn't know whether a message is whitelisted or not until it examines it but since it may be opening a batch of messages at once, it creates the log entry; the entry refers to the batch process, not the individual message I suspect. Only when it has looked at that particular message does it know that it's whitelisted. That happens after the previous entry has already been written syslog. Now, mind you, I'm not the author of the code. Matter of fact, I've never even looked at the code beyond the conf file. Homey don't do perl. Wish I did, but I'm old and cranky and would rather be out in my shop woodworking in my spare time at home and don't have time at work to learn it. Nevertheless, with my simple understanding of the process flow in MS I think the above could likely be the culprit. Could be way off base too. All I can say for sure is my advice is worth at least what you paid for it. HTH... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From martinh at solidstatelogic.com Thu Nov 15 17:36:59 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 15 17:37:04 2007 Subject: New installation configuration question. In-Reply-To: <641E82DC34CF514F82C95407D253E37A01176DE4@MSGMROCLS2WIN.DMN1.FMR.COM> Message-ID: Jerry Anything in /var/log/maillog? Also try "MailScanner --debug" and see if you get any clues. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Owens, Jerry > Sent: 15 November 2007 17:12 > To: mailscanner@lists.mailscanner.info > Subject: New installation configuration question. > > I have just built an Ubuntu server to process my personal mail. I > installed it using a guide at: > http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using > postfix and courrier to process mail. I installed and configured these and > verified that I could send myself a test message. I then installed > MailScanner using apt-get which installed version 4.46.2-3. I configured > mailscanner to work with postfix from the using postfix page in the > mailscanner documentation. All my mail is coming into > /var/spool/postfix/hold and sitting. It is not getting delivered to me. > Would this likely be a configuration issue with mailscanner or postfix? > Here are the canges I made. > > > How to Set Up Postfix for MailScanner Use > > > 1. Install Postfix version 2 and get it all working. > 2. Stop Postfix using a command > postfix stop > 3. Make sure you have the chroot jail set up in /var/spool/postfix. You > should be able to see "etc", "usr" and "lib" directories inside > /var/spool/postfix). If you haven't got the chroot jail setup already, > then look in the "examples" directory of the Postfix documentation and you > will find a script in there to set up it up for your operating system. If > you can't find that, then see the "Problems or Errors" section further > down this page. > 4. At this point, things change from the setup for other MTAs as we can > make it run with just one copy of Postfix, and let Postfix do the "split > MTA" setup for us. > 5. In the Postfix configuration file /etc/postfix/main.cf add this > line: > header_checks = regexp:/etc/postfix/header_checks > 6. In the file /etc/postfix/header_checks add this line: > /^Received:/ HOLD > The effect of this is to tell Postfix to move all messages to the > HOLD queue. > > > How to Set up MailScanner for Use with Postfix > > > In your MailScanner.conf file (probably in /etc/MailScanner or > /opt/MailScanner/etc), there are 5 settings you need to change. They are > all really near the top of the file. The settings are > > Run As User = postfix > Run As Group = postfix > Incoming Queue Dir = /var/spool/postfix/hold > Outgoing Queue Dir = /var/spool/postfix/incoming > MTA = postfix > > > You will need to ensure that the user "postfix" can write to > /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: > > chown postfix.postfix /var/spool/MailScanner/incoming > chown postfix.postfix /var/spool/MailScanner/quarantine > > If you upgrade your copy of MailScanner, unfortunately these directories > will be changed back to being owned by root, so you will have to do those > 2 commands again. > > > Starting It All Running > > If on a system installed using the RedHat RPM distribution, just use the > init.d script to do it all for you: > /etc/rc.d/init.d/MailScanner start > (or on RedHat systems just service MailScanner start) If not using the > RedHat RPM distribution, then > > 1. Start Postfix > postfix start > 2. Start MailScanner > check_MailScanner > > > Thanks, > > Jerry ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From steve.freegard at fsl.com Thu Nov 15 17:50:13 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Thu Nov 15 17:50:06 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1185.73140721328$1195137688@news.gmane.org> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> Message-ID: <473C86D5.2010100@fsl.com> Hi Edward, Edward Prendergast wrote: > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. Ok - sounds like Bayes is a factor that is causing the slowness. Do you have Bayes in MySQL or DB_File? If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in spam.assassin.prefs.conf as from experience it will reduce the lock contention and speed-up batch processing considerably. Kind regards, Steve. -- Steve Freegard Fort Systems Ltd. From MailScanner at ecs.soton.ac.uk Thu Nov 15 18:13:04 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 18:13:51 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C86D5.2010100@fsl.com> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> Message-ID: <473C8C30.3080709@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Can someone add that to the Wiki please? This is worth knowing! Steve Freegard wrote: > Hi Edward, > > Edward Prendergast wrote: >> The queue seems to go up with the load. By the time the load is >> around 10 >> the queue starts to climb without any sign of going down. It usually >> reaches >> the 300 mark within half an hour to an hour, but has gone up as far as >> 3,000. When I turn bayes off the load goes down and mail queues start >> becoming manageable again. > > Ok - sounds like Bayes is a factor that is causing the slowness. Do > you have Bayes in MySQL or DB_File? > > If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in > spam.assassin.prefs.conf as from experience it will reduce the lock > contention and speed-up batch processing considerably. > > Kind regards, > Steve. > > -- > Steve Freegard > Fort Systems Ltd. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHPIxBEfZZRxQVtlQRArAoAKCWHH4jrtKoI0PCXXtdoyn6RnrqIQCdEx+z adTMf9eGt6Tw3GCD1WCW4BE= =QzLJ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Thu Nov 15 18:45:51 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 15 18:45:55 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4075316646211036157@unknownmsgid> References: <473C2508.6020901@nerc.ac.uk> <4075316646211036157@unknownmsgid> Message-ID: <223f97700711151045l7895a4bbj45bc94c2cb95dbe8@mail.gmail.com> On 15/11/2007, Edward Prendergast wrote: > > Any advice from the vast pool of MailScanner experience would be greatly > > appreciated. > > >> Are you queues actually building up or are you just concerned with the > >> load average? > > In reply to Greg and Julian: > > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. > > Our users largely use POP3, with a few using IMAP through squirrelmail. > Their mailboxes usually tend to contain around 300 messages. > > Here's how vmstat looks now with bayes enabled: > # vmstat 10 5 > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 > 10 > 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 > 39 > 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 > 40 > 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 > 46 About the only really useful vmstat info is that you have a small swap activity. si and so should be 0. So the timetested advice "Add more RAM" holds true for you. One can guess that a fair amount of I/O is going on, just plain waiting... Hence the idle values... Investigating that might be useful. Guess 1) would be bayes (which might be related to locking or disk IO speed), guess 2) would be network (most likely DNS (caching only DNS?) or a dead RBL or somesuch). Oh, I see Steve message. Good thing to try. And add some more RAM... Or split of some of the workload to another box;-). > It looks to me like there might be some thrashing going on. Thrashing is usually an audible phenomenon... Have you been listening to your HDDs lately?:-). Some swap activity, yes, but thrashing... Well, perhaps:). > At this level, the queue looks like this: > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages > waiting > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, > 38032 bytes Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From uxbod at splatnix.net Thu Nov 15 19:49:20 2007 From: uxbod at splatnix.net (UxBoD) Date: Thu Nov 15 19:40:00 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711151045l7895a4bbj45bc94c2cb95dbe8@mail.gmail.com> Message-ID: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> also what type of filesystem is the Bayes on, if it is in a file, is journaling switched on etc etc ... to be honest since switching it into MySQL I have been very pleased with the performance. but as everybody says, split out your application types and up the RAM. RAM is so cheap these days. I advised the company I am contracted at to go for 8GB RAM. Its a dual AMD Opteron aswell so I can throw anything at it. Most messages are pinged at MTA level (love Postfix) and LDAP lookups to LotusNotes. We process about 150k msgs/pd on both MTAs and we have a load average of 1.2 :) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Glenn Steen" To: "MailScanner discussion" Sent: Thursday, November 15, 2007 6:45:51 PM (GMT) Europe/London Subject: Re: Minimum hardware capacity for 35k e-mail scans/day On 15/11/2007, Edward Prendergast wrote: > > Any advice from the vast pool of MailScanner experience would be greatly > > appreciated. > > >> Are you queues actually building up or are you just concerned with the > >> load average? > > In reply to Greg and Julian: > > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. > > Our users largely use POP3, with a few using IMAP through squirrelmail. > Their mailboxes usually tend to contain around 300 messages. > > Here's how vmstat looks now with bayes enabled: > # vmstat 10 5 > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 > 10 > 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 > 39 > 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 > 40 > 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 > 46 About the only really useful vmstat info is that you have a small swap activity. si and so should be 0. So the timetested advice "Add more RAM" holds true for you. One can guess that a fair amount of I/O is going on, just plain waiting... Hence the idle values... Investigating that might be useful. Guess 1) would be bayes (which might be related to locking or disk IO speed), guess 2) would be network (most likely DNS (caching only DNS?) or a dead RBL or somesuch). Oh, I see Steve message. Good thing to try. And add some more RAM... Or split of some of the workload to another box;-). > It looks to me like there might be some thrashing going on. Thrashing is usually an audible phenomenon... Have you been listening to your HDDs lately?:-). Some swap activity, yes, but thrashing... Well, perhaps:). > At this level, the queue looks like this: > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages > waiting > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, > 38032 bytes Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Thu Nov 15 19:57:52 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 19:58:14 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C8C30.3080709@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> Message-ID: <473CA4C0.9070908@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Also, is it worth me changing the default spam.assassin.prefs.conf file to set this on all new installations? Or should I specifically *not* change to this setting for some good reason? Thanks for your opinions, Jules. Julian Field wrote: > * PGP Signed: 11/15/07 at 18:13:21 > > Can someone add that to the Wiki please? > This is worth knowing! > > Steve Freegard wrote: >> Hi Edward, >> >> Edward Prendergast wrote: >>> The queue seems to go up with the load. By the time the load is >>> around 10 >>> the queue starts to climb without any sign of going down. It usually >>> reaches >>> the 300 mark within half an hour to an hour, but has gone up as far as >>> 3,000. When I turn bayes off the load goes down and mail queues start >>> becoming manageable again. >> >> Ok - sounds like Bayes is a factor that is causing the slowness. Do >> you have Bayes in MySQL or DB_File? >> >> If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in >> spam.assassin.prefs.conf as from experience it will reduce the lock >> contention and speed-up batch processing considerably. >> >> Kind regards, >> Steve. >> >> -- >> Steve Freegard >> Fort Systems Ltd. > > Jules > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHPKTCEfZZRxQVtlQRAjs7AKCW9IKy/nt+pWlJv/VqfY/kaA3W0gCgpYz6 mWLoILZs78CE6SJswSS4SSA= =ANY1 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From steve.freegard at fsl.com Thu Nov 15 20:17:06 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Thu Nov 15 20:17:00 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CA4C0.9070908@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> Message-ID: <473CA942.9000805@fsl.com> Hi Jules, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Also, is it worth me changing the default spam.assassin.prefs.conf file > to set this on all new installations? I'm neutral for a change to spam.assassin.prefs.conf - it does more good than harm IMO and is something I frequently change when tuning systems, but it might be best left as a tuning option for the admin to decide. > Or should I specifically *not* change to this setting for some good reason? From the docs: If this option is set, whenever SpamAssassin does Bayes learning, it will put the information into the journal instead of directly into the database. This lowers contention for locking the database to execute an update, but will also cause more access to the journal and cause a delay before the updates are actually com- mitted to the Bayes database. Cheers, Steve. From Denis.Beauchemin at USherbrooke.ca Thu Nov 15 20:16:55 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Thu Nov 15 20:18:34 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CA4C0.9070908@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> Message-ID: <473CA937.2040305@USherbrooke.ca> Julian Field a ?crit : > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Also, is it worth me changing the default spam.assassin.prefs.conf file > to set this on all new installations? > > Or should I specifically *not* change to this setting for some good reason? > > Thanks for your opinions, > Jules. > > Julian Field wrote: > >> * PGP Signed: 11/15/07 at 18:13:21 >> >> Can someone add that to the Wiki please? >> This is worth knowing! >> >> Steve Freegard wrote: >> >>> Hi Edward, >>> >>> Edward Prendergast wrote: >>> >>>> The queue seems to go up with the load. By the time the load is >>>> around 10 >>>> the queue starts to climb without any sign of going down. It usually >>>> reaches >>>> the 300 mark within half an hour to an hour, but has gone up as far as >>>> 3,000. When I turn bayes off the load goes down and mail queues start >>>> becoming manageable again. >>>> >>> Ok - sounds like Bayes is a factor that is causing the slowness. Do >>> you have Bayes in MySQL or DB_File? >>> >>> If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in >>> spam.assassin.prefs.conf as from experience it will reduce the lock >>> contention and speed-up batch processing considerably. >>> >>> Kind regards, >>> Steve. >>> >>> -- >>> Steve Freegard >>> Fort Systems Ltd. >>> >> Jules >> >> > > > Julian, According to the man page: bayes_learn_to_journal (default: 0) If this option is set, whenever SpamAssassin does Bayes learning, it will put the information into the journal instead of directly into the database. This lowers contention for locking the database to execute an update, but will also cause more access to the journal and cause a delay before the updates are actually committed to the Bayes database. After reading this, I was not under the impression I should turn it on on my servers... Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From jerry.owens at FMR.COM Thu Nov 15 20:30:34 2007 From: jerry.owens at FMR.COM (Owens, Jerry) Date: Thu Nov 15 20:31:45 2007 Subject: New installation configuration question. References: Message-ID: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> Thanks for the reply. Here is what I had in /var/log/mail.log. It was complaining about a couple of directories not existing. I created those and restarted everything. I then sent a test message to myself to see if it would get through. I see gmail connecting and delivering the message, but it is still in the hold directory. I tried running MailScanner --debug, but the only option it will take is -v for version listing. Is there an easier way to set this up? All I really need is to be able to filter the mail on my server for spam. I am have one machine to use for the mail server and spam filter. Thanks, Jerry Nov 15 11:27:16 gandalf MailScanner[4622]: MailScanner E-Mail Virus Scanner version 4.46.2 starting... Nov 15 11:27:16 gandalf MailScanner[4622]: Could not read file /var/run/MailScanner/MailScanner.pid Nov 15 11:27:16 gandalf MailScanner[4622]: Error in line 160, file "/var/run/MailScanner/MailScanner.pid" for pidfile does not exist (or can not be read) Nov 15 11:27:16 gandalf MailScanner[4622]: Read 676 hostnames from the phishing whitelist Nov 15 11:27:16 gandalf MailScanner[4622]: Using locktype = flock Nov 15 11:27:43 gandalf postfix/master[4172]: terminating on signal 15 Nov 15 11:27:51 gandalf postfix/master[4732]: daemon started -- version 2.4.5, configuration /etc/postfix Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 root@gandalf:/var/log# tail -f mail.log Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 Nov 15 14:52:24 gandalf postfix/smtpd[4875]: connect from rn-out-0910.google.com[64.233.170.191] Nov 15 14:52:24 gandalf postfix/smtpd[4875]: 8484BD9C07A: client=rn-out-0910.google.com[64.233.170.191] Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: hold: header Received: from rn-out-0102.google.com (rn-out-0910.google.com [64.233.170.191])??by server1.example.com (Postfix) with ESMTP id 8484BD9C07A??for ; Thu, 15 Nov 2007 14:52:2 from rn-out-0910.google.com[64.233.170.191]; from= to= proto=ESMTP helo= Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: message-id=<630adb030711151152n6d69c531w150b546242cc5be4@mail.gmail.com> Nov 15 14:52:54 gandalf postfix/smtpd[4875]: disconnect from rn-out-0910.google.com[64.233.170.191] Nov 15 14:53:43 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] Nov 15 14:53:46 gandalf imaplogin: chdir Maildir: No such file or directory Nov 15 14:53:55 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] Nov 15 14:53:57 gandalf imaplogin: chdir Maildir: No such file or directory Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection rate 1/60s for (smtp:64.233.170.191) at Nov 15 14:52:24 Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection count 1 for (smtp:64.233.170.191) at Nov 15 14:52:24 Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max cache size 1 at Nov 15 14:52:24 -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info on behalf of Martin.Hepworth Sent: Thu 11/15/2007 12:36 PM To: MailScanner discussion Cc: Subject: RE: New installation configuration question. Jerry Anything in /var/log/maillog? Also try "MailScanner --debug" and see if you get any clues. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Owens, Jerry > Sent: 15 November 2007 17:12 > To: mailscanner@lists.mailscanner.info > Subject: New installation configuration question. > > I have just built an Ubuntu server to process my personal mail. I > installed it using a guide at: > http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using > postfix and courrier to process mail. I installed and configured these and > verified that I could send myself a test message. I then installed > MailScanner using apt-get which installed version 4.46.2-3. I configured > mailscanner to work with postfix from the using postfix page in the > mailscanner documentation. All my mail is coming into > /var/spool/postfix/hold and sitting. It is not getting delivered to me. > Would this likely be a configuration issue with mailscanner or postfix? > Here are the canges I made. > > > How to Set Up Postfix for MailScanner Use > > > 1. Install Postfix version 2 and get it all working. > 2. Stop Postfix using a command > postfix stop > 3. Make sure you have the chroot jail set up in /var/spool/postfix. You > should be able to see "etc", "usr" and "lib" directories inside > /var/spool/postfix). If you haven't got the chroot jail setup already, > then look in the "examples" directory of the Postfix documentation and you > will find a script in there to set up it up for your operating system. If > you can't find that, then see the "Problems or Errors" section further > down this page. > 4. At this point, things change from the setup for other MTAs as we can > make it run with just one copy of Postfix, and let Postfix do the "split > MTA" setup for us. > 5. In the Postfix configuration file /etc/postfix/main.cf add this > line: > header_checks = regexp:/etc/postfix/header_checks > 6. In the file /etc/postfix/header_checks add this line: > /^Received:/ HOLD > The effect of this is to tell Postfix to move all messages to the > HOLD queue. > > > How to Set up MailScanner for Use with Postfix > > > In your MailScanner.conf file (probably in /etc/MailScanner or > /opt/MailScanner/etc), there are 5 settings you need to change. They are > all really near the top of the file. The settings are > > Run As User = postfix > Run As Group = postfix > Incoming Queue Dir = /var/spool/postfix/hold > Outgoing Queue Dir = /var/spool/postfix/incoming > MTA = postfix > > > You will need to ensure that the user "postfix" can write to > /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: > > chown postfix.postfix /var/spool/MailScanner/incoming > chown postfix.postfix /var/spool/MailScanner/quarantine > > If you upgrade your copy of MailScanner, unfortunately these directories > will be changed back to being owned by root, so you will have to do those > 2 commands again. > > > Starting It All Running > > If on a system installed using the RedHat RPM distribution, just use the > init.d script to do it all for you: > /etc/rc.d/init.d/MailScanner start > (or on RedHat systems just service MailScanner start) If not using the > RedHat RPM distribution, then > > 1. Start Postfix > postfix start > 2. Start MailScanner > check_MailScanner > > > Thanks, > > Jerry ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/ms-tnef Size: 13298 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071115/a02cd9e3/attachment-0001.bin From MailScanner at ecs.soton.ac.uk Thu Nov 15 21:26:07 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 21:26:23 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CA942.9000805@fsl.com> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> Message-ID: <473CB96F.6080305@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Steve Freegard wrote: > Hi Jules, > > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Also, is it worth me changing the default spam.assassin.prefs.conf >> file to set this on all new installations? > > I'm neutral for a change to spam.assassin.prefs.conf - it does more > good than harm IMO and is something I frequently change when tuning > systems, but it might be best left as a tuning option for the admin to > decide. > >> Or should I specifically *not* change to this setting for some good >> reason? > > From the docs: > > If this option is set, whenever SpamAssassin does Bayes learning, > it will put the information into the journal instead of directly > into the database. This lowers contention for locking the > database to execute an update, but will also cause more access to > the journal and cause a delay before the updates are actually com- > mitted to the Bayes database. But when *does* the journal get committed to the Bayes database itself? Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHPLlwEfZZRxQVtlQRAq5jAKDicNdwm4nQRp9xBGUKT17OK11dfgCg6ii1 /UIpxeBKdxCkdbWB5iHwMHQ= =zKcq -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Thu Nov 15 21:30:26 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 21:30:39 2007 Subject: New installation configuration question. In-Reply-To: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> References: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> Message-ID: <473CBA72.9000505@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This looks to me to be a Postfix configuration problem, and not a MailScanner one. It is failing to recognise the address jowens@computeryardsale.net which it thinks should be local. Without the line in header_checks that sends mail to MailScanner, does the symptom change at all? What happens when you tell it to send a message to jowens@computeryardsale.net then? Jules. Owens, Jerry wrote: > Thanks for the reply. > > Here is what I had in /var/log/mail.log. It was complaining about a couple of directories not existing. I created those and restarted everything. I then sent a test message to myself to see if it would get through. I see gmail connecting and delivering the message, but it is still in the hold directory. I tried running MailScanner --debug, but the only option it will take is -v for version listing. Is there an easier way to set this up? All I really need is to be able to filter the mail on my server for spam. I am have one machine to use for the mail server and spam filter. > > Thanks, > > Jerry > > > Nov 15 11:27:16 gandalf MailScanner[4622]: MailScanner E-Mail Virus Scanner version 4.46.2 starting... > Nov 15 11:27:16 gandalf MailScanner[4622]: Could not read file /var/run/MailScanner/MailScanner.pid > Nov 15 11:27:16 gandalf MailScanner[4622]: Error in line 160, file "/var/run/MailScanner/MailScanner.pid" for pidfile does not exist (or can not be read) > Nov 15 11:27:16 gandalf MailScanner[4622]: Read 676 hostnames from the phishing whitelist > Nov 15 11:27:16 gandalf MailScanner[4622]: Using locktype = flock > Nov 15 11:27:43 gandalf postfix/master[4172]: terminating on signal 15 > Nov 15 11:27:51 gandalf postfix/master[4732]: daemon started -- version 2.4.5, configuration /etc/postfix > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= > Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 > root@gandalf:/var/log# tail -f mail.log > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= > Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 > Nov 15 14:52:24 gandalf postfix/smtpd[4875]: connect from rn-out-0910.google.com[64.233.170.191] > Nov 15 14:52:24 gandalf postfix/smtpd[4875]: 8484BD9C07A: client=rn-out-0910.google.com[64.233.170.191] > Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: hold: header Received: from rn-out-0102.google.com (rn-out-0910.google.com [64.233.170.191])??by server1.example.com (Postfix) with ESMTP id 8484BD9C07A??for ; Thu, 15 Nov 2007 14:52:2 from rn-out-0910.google.com[64.233.170.191]; from= to= proto=ESMTP helo= > Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: message-id=<630adb030711151152n6d69c531w150b546242cc5be4@mail.gmail.com> > Nov 15 14:52:54 gandalf postfix/smtpd[4875]: disconnect from rn-out-0910.google.com[64.233.170.191] > Nov 15 14:53:43 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] > Nov 15 14:53:46 gandalf imaplogin: chdir Maildir: No such file or directory > Nov 15 14:53:55 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] > Nov 15 14:53:57 gandalf imaplogin: chdir Maildir: No such file or directory > Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection rate 1/60s for (smtp:64.233.170.191) at Nov 15 14:52:24 > Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection count 1 for (smtp:64.233.170.191) at Nov 15 14:52:24 > Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max cache size 1 at Nov 15 14:52:24 > > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info on behalf of Martin.Hepworth > Sent: Thu 11/15/2007 12:36 PM > To: MailScanner discussion > Cc: > Subject: RE: New installation configuration question. > > > > Jerry > > Anything in /var/log/maillog? > > Also try "MailScanner --debug" and see if you get any clues. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Owens, Jerry > > Sent: 15 November 2007 17:12 > > To: mailscanner@lists.mailscanner.info > > Subject: New installation configuration question. > > > > I have just built an Ubuntu server to process my personal mail. I > > installed it using a guide at: > > http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using > > postfix and courrier to process mail. I installed and configured these and > > verified that I could send myself a test message. I then installed > > MailScanner using apt-get which installed version 4.46.2-3. I configured > > mailscanner to work with postfix from the using postfix page in the > > mailscanner documentation. All my mail is coming into > > /var/spool/postfix/hold and sitting. It is not getting delivered to me. > > Would this likely be a configuration issue with mailscanner or postfix? > > Here are the canges I made. > > > > > > How to Set Up Postfix for MailScanner Use > > > > > > 1. Install Postfix version 2 and get it all working. > > 2. Stop Postfix using a command > > postfix stop > > 3. Make sure you have the chroot jail set up in /var/spool/postfix. You > > should be able to see "etc", "usr" and "lib" directories inside > > /var/spool/postfix). If you haven't got the chroot jail setup already, > > then look in the "examples" directory of the Postfix documentation and you > > will find a script in there to set up it up for your operating system. If > > you can't find that, then see the "Problems or Errors" section further > > down this page. > > 4. At this point, things change from the setup for other MTAs as we can > > make it run with just one copy of Postfix, and let Postfix do the "split > > MTA" setup for us. > > 5. In the Postfix configuration file /etc/postfix/main.cf add this > > line: > > header_checks = regexp:/etc/postfix/header_checks > > 6. In the file /etc/postfix/header_checks add this line: > > /^Received:/ HOLD > > The effect of this is to tell Postfix to move all messages to the > > HOLD queue. > > > > > > How to Set up MailScanner for Use with Postfix > > > > > > In your MailScanner.conf file (probably in /etc/MailScanner or > > /opt/MailScanner/etc), there are 5 settings you need to change. They are > > all really near the top of the file. The settings are > > > > Run As User = postfix > > Run As Group = postfix > > Incoming Queue Dir = /var/spool/postfix/hold > > Outgoing Queue Dir = /var/spool/postfix/incoming > > MTA = postfix > > > > > > You will need to ensure that the user "postfix" can write to > > /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: > > > > chown postfix.postfix /var/spool/MailScanner/incoming > > chown postfix.postfix /var/spool/MailScanner/quarantine > > > > If you upgrade your copy of MailScanner, unfortunately these directories > > will be changed back to being owned by root, so you will have to do those > > 2 commands again. > > > > > > Starting It All Running > > > > If on a system installed using the RedHat RPM distribution, just use the > > init.d script to do it all for you: > > /etc/rc.d/init.d/MailScanner start > > (or on RedHat systems just service MailScanner start) If not using the > > RedHat RPM distribution, then > > > > 1. Start Postfix > > postfix start > > 2. Start MailScanner > > check_MailScanner > > > > > > Thanks, > > > > Jerry > > > > > ********************************************************************** > Confidentiality : This e-mail and any attachments are intended for the > addressee only and may be confidential. If they come to you in error > you must take no action based on them, nor must you copy or show them > to anyone. Please advise the sender by replying to this e-mail > immediately and then delete the original from your computer. > Opinion : Any opinions expressed in this e-mail are entirely those of > the author and unless specifically stated to the contrary, are not > necessarily those of the author's employer. > Security Warning : Internet e-mail is not necessarily a secure > communications medium and can be subject to data corruption. We advise > that you consider this fact when e-mailing us. > Viruses : We have taken steps to ensure that this e-mail and any > attachments are free from known viruses but in keeping with good > computing practice, you should ensure that they are virus free. > > Red Lion 49 Ltd T/A Solid State Logic > Registered as a limited company in England and Wales > (Company No:5362730) > Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, > United Kingdom > ********************************************************************** > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: UTF-8 wj8DBQFHPLp0EfZZRxQVtlQRAqo6AJ4ipc8AYM4mf+3+96Qbxjxt3GCTCQCeI9oh Pi0vbo54sruJaSvO7yAJ88s= =IPen -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Thu Nov 15 21:43:50 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 15 21:45:33 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: on 11/14/2007 3:12 PM eclipsem@optusnet.com.au spake the following: > > > >> Hugo van der Kooij wrote: >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> eclipsem@optusnet.com.au wrote: >> >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: >> from=, size=443, class=0, nrcpts=1, >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, >> relay=[10.0.1.19] [10.0.1.19] >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 >> messages, 892 bytes >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: >> to=X@optusnet.com.au, ctladdr= (1009/100), >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 >> Message accepted for delivery) >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 >> messages >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content >> Scanning: Starting >> >> It explicitly tells you it did NOT scan. (See the Unscanned: line) >> > > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > > I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 > We'll miss you if you have to go! BTW, this is the free support. Julian is not always available to answer every question as he also has a day job with bosses asking him for things. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Thu Nov 15 21:50:18 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 15 21:51:25 2007 Subject: scanning rules In-Reply-To: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> References: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> Message-ID: on 11/15/2007 3:38 AM eclipsem@optusnet.com.au spake the following: > So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. > > I also note you NIETHER you or your rude and arrogant hugo long term user commented on the real issue ans to mailscanner not whitelisting when told to given other rules read in at load time. > > Don't worry though, all your users can be led into a false sense of belief when they try debug your software, which wont be our problem as our MTA is now using MIMEDefang, working as it is documented. > > I hope this makes it to Google fast so people researching mailscanner can see what they can expect from you julian. > > and yes dont worry after I hit send here the next message is to mailman to remove myself > Yes mimedefang will work, but it won't process near the same amount of messages in a day. I'll have to see how long he is on the mimedefang list, and see how long it takes him to jump to amavisd when he hits his next roadblock. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From campbell at cnpapers.com Thu Nov 15 21:52:34 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Nov 15 21:52:39 2007 Subject: scanning rules In-Reply-To: References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <473CBFA2.6010907@cnpapers.com> I'm not sure, but I believe his leaving has fixed the swapping on my server that I thought was a result of MS. Steve Scott Silva wrote: > on 11/14/2007 3:12 PM eclipsem@optusnet.com.au spake the following: >> >> >> >>> Hugo van der Kooij wrote: >>> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> eclipsem@optusnet.com.au wrote: >>> >>>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: >>> from=, size=443, class=0, nrcpts=1, >>> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, >>> daemon=MTA, relay=[10.0.1.19] [10.0.1.19] >>>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 >>> messages, 892 bytes >>>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting >>>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: >>> to=X@optusnet.com.au, ctladdr= (1009/100), >>> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, >>> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 >>> Message accepted for delivery) >>>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 >>> messages >>>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content >>> Scanning: Starting >>> >>> It explicitly tells you it did NOT scan. (See the Unscanned: line) >>> >> >> Then what is the point of all the starting spam checks and starting >> virus scanning log entries, >> thats fine here on local messages, but does not answer the main issue >> we have on our script generated messages where it does in fact add >> the headers to the email and clearly ignores the whitelists >> >> Are you the programmer of mailscanner? if not how about you leave >> this for him or her to answer >> >> I have until COB today, or I have been told to reinstall MIMEDefang >> before I go home, guess it's time to start installing it now so I can >> enact it at 430 >> > We'll miss you if you have to go! > BTW, this is the free support. Julian is not always available to > answer every question as he also has a day job with bosses asking him > for things. > From hvdkooij at vanderkooij.org Thu Nov 15 22:13:59 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 15 22:14:38 2007 Subject: scanning rules In-Reply-To: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> References: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> Message-ID: <473CC4A7.7010804@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. And they call the Dutch or Scottish tough people when it comes to spending. But even free software and free support seems to be too high a price for some. That is rather unfortunatly. Let's get on. He choose to move away and let us leave it at that. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHPMSlBvzDRVjxmYERAtH8AKCuqGvRR9cseARrB0jWHrPfcHeUQQCgro4z VEOm1FoKW6rRG2ooFXTXhds= =sisn -----END PGP SIGNATURE----- From richard.thomas at psysolutions.com Thu Nov 15 22:48:55 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Thu Nov 15 22:49:00 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <473C7B11.3020400@psysolutions.com> References: <473C7B11.3020400@psysolutions.com> Message-ID: <473CCCD7.4050705@psysolutions.com> Here's some more info on this: The message is definitely being received by Exim fine. Here is the output of a packet capture on the incoming SMTP connection:



. QUIT Note the two blank lines between the end of the text and the period. MailsScanner is picking this up, doing its magic and deposting it in the outqueue with a final line that does not end with a CRLF. Exim expects this CRLF to be present as it simply adds the period to the end (This makes sense if the queue usually works by storing anything up to the final period though some sanity checking would be a good thing). The message affected has been "Disarmed" and web bugs replaced with MailScanner warnings if that makes any difference. I would imagine this is likely to be a simple fix. Rich Richard Thomas wrote: > Our setup is that we have a mail server which is scanning emails using > exim4/mailscanner/spamassassin which then forwards to another server > which is just running just exim4. Most of the time, everything is > running well but occasionally, I am seeing SMTP data timeouts in the > logs of the receiving server. The issue seems to be that when the > scanning server sends to the target server, it is not correctly > putting the period on a line by itself. > > For example, here is the tail end of a file in the exim4 out queue: > > /td> > > (No CRLF at the end). > > Here is the hexdump of a packet capture on the target server: > > 0033220 t d > < / t d > < / t r > < / t > 0033240 a b l e > < / c e n t e r > < / > 0033260 b o d y > < / h t m l > . \r \n > 0033277 > > > To be honest, at this stage, I'm suspecting exim since it seems to me > that it should be able to reasonably handle this situation. But then > again, I'm not intimately familiar with the exim queue file format and > it could be that it expects it to be properly formatted and > MailScanner apparently *has* touched this file so I guess it's > possible that it has somehow stripped a required CRLF. I'm at the > early stages of troubleshooting at the moment so if anyone has any > insight on this, I'd be very grateful to here. > > I'll just note that this email was apparently received by the scanning > server with no issues. > > Rich From steve.freegard at fsl.com Thu Nov 15 23:08:28 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Thu Nov 15 23:08:21 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CB96F.6080305@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> <473CB96F.6080305@ecs.soton.ac.uk> Message-ID: <473CD16C.4030600@fsl.com> Hi Jules, Julian Field wrote: > But when *does* the journal get committed to the Bayes database itself? Once per day or when the bayes_journal_max_size is exceeded (default is 100Kb) whichever is sooner, or manually via 'sa-learn --sync'. In reality I've never had issues with using this. Bayes is useful when it works, but if you have locking issues and your per-message scan times are >30 secs because of bayes updates, this makes a massive difference. Cheers, Steve. From mkellermann at net-com.de Fri Nov 16 07:13:23 2007 From: mkellermann at net-com.de (Matthias Kellermann) Date: Fri Nov 16 07:11:06 2007 Subject: per-user Spam settings with MySQL? Message-ID: <473D4313.3010801@net-com.de> Hi list, does anyone use MailScanner for per-user Spam scanning, where the user can define his own black- and whitelists? Is there a possibility to use MailScanner with MySQL? How do you solve individual per-user Spam settings with MailScanner? Matthias From J.Ede at birchenallhowden.co.uk Fri Nov 16 08:11:13 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Fri Nov 16 08:13:25 2007 Subject: per-user Spam settings with MySQL? In-Reply-To: <473D4313.3010801@net-com.de> References: <473D4313.3010801@net-com.de> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28676@server02.bhl.local> If you want white and blacklists with a MySQL based system with a nice web interface then try mailwatch http://mailwatch.sourceforge.net Jason -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Matthias Kellermann Sent: 16 November 2007 07:13 To: MailScanner discussion Subject: per-user Spam settings with MySQL? Hi list, does anyone use MailScanner for per-user Spam scanning, where the user can define his own black- and whitelists? Is there a possibility to use MailScanner with MySQL? How do you solve individual per-user Spam settings with MailScanner? Matthias -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From J.Ede at birchenallhowden.co.uk Fri Nov 16 08:15:46 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Fri Nov 16 08:16:06 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CD16C.4030600@fsl.com> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> <473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28677@server02.bhl.local> Steve, Have you any performance comparison between that and using mysql to hold the bayes? I moved from normal bayes db to mysql as it seemed much faster and I couldn't find a way to really speed up the bayes checks. So far it does seem much faster than it was (once I'd configured mysql a bit better than the default) Jason -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Freegard Sent: 15 November 2007 23:08 To: MailScanner discussion Subject: Re: Minimum hardware capacity for 35k e-mail scans/day Hi Jules, Julian Field wrote: > But when *does* the journal get committed to the Bayes database itself? Once per day or when the bayes_journal_max_size is exceeded (default is 100Kb) whichever is sooner, or manually via 'sa-learn --sync'. In reality I've never had issues with using this. Bayes is useful when it works, but if you have locking issues and your per-message scan times are >30 secs because of bayes updates, this makes a massive difference. Cheers, Steve. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Andreas.Kasenides at cs.ucy.ac.cy Fri Nov 16 08:39:34 2007 From: Andreas.Kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Fri Nov 16 08:39:36 2007 Subject: Where to file the "file" bug Message-ID: <473D5746.9000207@cs.ucy.ac.cy> Is there a place where I can report a bug? I have the same problem, reported ages ago, with the "file" command where MailScanner believes that a message is an MS-DOG executable (.exe, .com) while it is apparently only a .txt attachment or a forward which is sent as "inline" text. Apparently this happens very often with MS-Outlook mailers and with messages that contain characters other than the standard West European sets. Yes I have read a lot about this on this list. The problem has been placed on the shoulders of the "file" command erroneously reporting an executable file when it is not. Apparently this is not always true. In my case I have several messages which the file command reports as "RFC 822 mail text" yet MailScanner will not pass through. I am using CentOS 5 and MailScanner 4.63.8. Any help? since the only other alternative(??) is to completely disable the FileType detection? Thanks Andreas From glenn.steen at gmail.com Fri Nov 16 09:00:45 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 09:00:49 2007 Subject: New installation configuration question. In-Reply-To: <473CBA72.9000505@ecs.soton.ac.uk> References: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> <473CBA72.9000505@ecs.soton.ac.uk> Message-ID: <223f97700711160100q770b9abfw39b96f27abeb89f0@mail.gmail.com> On 15/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > This looks to me to be a Postfix configuration problem, and not a > MailScanner one. > It is failing to recognise the address > jowens@computeryardsale.net > which it thinks should be local. > > Without the line in header_checks that sends mail to MailScanner, does > the symptom change at all? What happens when you tell it to send a > message to jowens@computeryardsale.net then? > > Jules. With that log, I don't see any real need to do that:-). It'll fail miserably then too... A "postconf -n" would be good here, as well as a word or two on how you _think_ you've set it... Is jowens a real user or a virtual one? Local or relay? Or did you already tell, and I'm just a sloppy reader?:-) Another thing: You are running a rather new Postfix version (2.4.5) and a rather old MailScanner (4.46.2)... There has been a bit of work done on the PF support for newer versions in MS, so you might want to *not* use that old debian package... Either use the tarball, or look for a newer .deb (I'm not quite sure which version is the latest debian... 4.55.10 seems a bit mouldy as well...). If you use the tarball, Jules provides the needed init script on the download page at http://www.mailscanner.info ... > Owens, Jerry wrote: (snip) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From martinh at solidstatelogic.com Fri Nov 16 09:07:50 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Fri Nov 16 09:07:54 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C8C30.3080709@ecs.soton.ac.uk> Message-ID: <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Jules Added a bit near the optimisation section.. "http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin" Which covers this and various other stuff I usually do too. Also added in a link to this from the SA recommendations page. Feel free to tidy up my English ;-) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Julian Field > Sent: 15 November 2007 18:13 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Can someone add that to the Wiki please? > This is worth knowing! > > Steve Freegard wrote: > > Hi Edward, > > > > Edward Prendergast wrote: > >> The queue seems to go up with the load. By the time the load is > >> around 10 > >> the queue starts to climb without any sign of going down. It usually > >> reaches > >> the 300 mark within half an hour to an hour, but has gone up as far as > >> 3,000. When I turn bayes off the load goes down and mail queues start > >> becoming manageable again. > > > > Ok - sounds like Bayes is a factor that is causing the slowness. Do > > you have Bayes in MySQL or DB_File? > > > > If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in > > spam.assassin.prefs.conf as from experience it will reduce the lock > > contention and speed-up batch processing considerably. > > > > Kind regards, > > Steve. > > > > -- > > Steve Freegard > > Fort Systems Ltd. > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHPIxBEfZZRxQVtlQRArAoAKCWHH4jrtKoI0PCXXtdoyn6RnrqIQCdEx+z > adTMf9eGt6Tw3GCD1WCW4BE= > =QzLJ > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From glenn.steen at gmail.com Fri Nov 16 09:10:22 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 09:10:25 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <473CCCD7.4050705@psysolutions.com> References: <473C7B11.3020400@psysolutions.com> <473CCCD7.4050705@psysolutions.com> Message-ID: <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> On 15/11/2007, Richard Thomas wrote: > Here's some more info on this: > > The message is definitely being received by Exim fine. Here is the > output of a packet capture on the incoming SMTP connection: > > WIDTH="1" HEIGHT > ="24" BORDER="0"> > > > >



> > > > . > QUIT > > Note the two blank lines between the end of the text and the period. > MailsScanner is picking this up, doing its magic and deposting it in the > outqueue with a final line that does not end with a CRLF. Exim expects > this CRLF to be present as it simply adds the period to the end (This > makes sense if the queue usually works by storing anything up to the > final period though some sanity checking would be a good thing). > > The message affected has been "Disarmed" and web bugs replaced with > MailScanner warnings if that makes any difference. I would imagine this > is likely to be a simple fix. > > Rich > Did you mention which version of MS you use? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From shuttlebox at gmail.com Fri Nov 16 09:14:17 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 16 09:14:18 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CD16C.4030600@fsl.com> References: <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> <473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> Message-ID: <625385e30711160114i4ccac627he5b977d0ab17bc88@mail.gmail.com> On Nov 16, 2007 12:08 AM, Steve Freegard wrote: > Hi Jules, > > Julian Field wrote: > > But when *does* the journal get committed to the Bayes database itself? > > Once per day or when the bayes_journal_max_size is exceeded (default is > 100Kb) whichever is sooner, or manually via 'sa-learn --sync'. > > In reality I've never had issues with using this. Bayes is useful when > it works, but if you have locking issues and your per-message scan times > are >30 secs because of bayes updates, this makes a massive difference. If one worries about committing new tokens only once a day one could just add an hourly cron job with "sa-learn --sync". It typically takes less than a second to run. Note that "sa-learn --force-expire" which includes a sync takes a lot longer to run. -- /peter From glenn.steen at gmail.com Fri Nov 16 09:19:38 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 09:19:41 2007 Subject: Where to file the "file" bug In-Reply-To: <473D5746.9000207@cs.ucy.ac.cy> References: <473D5746.9000207@cs.ucy.ac.cy> Message-ID: <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> On 16/11/2007, Andreas Kasenides wrote: > Is there a place where I can report a bug? > I have the same problem, reported ages ago, with the "file" command > where MailScanner > believes that a message is an MS-DOG executable (.exe, .com) while it is > apparently only > a .txt attachment or a forward which is sent as "inline" text. > Apparently this happens very often > with MS-Outlook mailers and with messages that contain characters other > than the standard > West European sets. Yes I have read a lot about this on this list. > The problem has been placed on the shoulders of the "file" command > erroneously reporting an > executable file when it is not. > Apparently this is not always true. In my case I have several messages > which the file command > reports as "RFC 822 mail text" yet MailScanner will not pass through. > I am using CentOS 5 and MailScanner 4.63.8. > Any help? since the only other alternative(??) is to completely disable > the FileType detection? If you save only the body part and do a file on that (I imagine you might have a few in your quarantine, if you have things set up to quarantine infections), file WILL tell you another story. That it say the above on the "message" file is quite correct, but it wasn't that that it logged/reacted on;-). As to the proper place to report bugs in the file command, chack your package management system.... One can usually find relevant information there. But remember that if your distro/OS isn't extremely new, with very aggressive package selections, the file command you use is not the latest from the developer... So then the proper place to file a bug might be with the creator of said distro/OS. Since that route might lead to nothing in the short term, most people affected by this either "update" file to a newer version (perhaps even from source), or just edit/compile the magic file(s). > Thanks > Andreas Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From jan-peter at koopmann.eu Fri Nov 16 10:57:24 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Fri Nov 16 10:55:58 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk><473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org><473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk><473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com><473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28677@server02.bhl.local> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD161002D35E@DE-SEXB01RZ.intern.seceidos.de> > Have you any performance comparison between that and using mysql to > hold the bayes? I moved from normal bayes db to mysql as it seemed much > faster and I couldn't find a way to really speed up the bayes checks. > So far it does seem much faster than it was (once I'd configured mysql > a bit better than the default) What settings do you use/change for mysql then? From J.Ede at birchenallhowden.co.uk Fri Nov 16 11:07:53 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Fri Nov 16 11:08:15 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <5F9EB2B0731E5B4D88FC20780DFD161002D35E@DE-SEXB01RZ.intern.seceidos.de> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk><473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org><473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk><473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com><473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28677@server02.bhl.local> <5F9EB2B0731E5B4D88FC20780DFD161002D35E@DE-SEXB01RZ.intern.seceidos.de> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28686@server02.bhl.local> I'd dropped one of the other configs my-large.cnf from /usr/share/mysql in as /etc/my.cnf. Used that as have other databases (mailwatch) running on this server. Jason -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter Sent: 16 November 2007 10:57 To: MailScanner discussion Subject: RE: Minimum hardware capacity for 35k e-mail scans/day > Have you any performance comparison between that and using mysql to > hold the bayes? I moved from normal bayes db to mysql as it seemed much > faster and I couldn't find a way to really speed up the bayes checks. > So far it does seem much faster than it was (once I'd configured mysql > a bit better than the default) What settings do you use/change for mysql then? -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From dave.list at pixelhammer.com Fri Nov 16 13:51:04 2007 From: dave.list at pixelhammer.com (DAve) Date: Fri Nov 16 13:51:38 2007 Subject: per-user Spam settings with MySQL? In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28676@server02.bhl.local> References: <473D4313.3010801@net-com.de> <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28676@server02.bhl.local> Message-ID: <473DA048.8080200@pixelhammer.com> Jason Ede wrote: > If you want white and blacklists with a MySQL based system with a > nice web interface then try mailwatch http://mailwatch.sourceforge.net > > Jason If you want "per user" spam setting you also need to go read this section on the Wiki about splitting multiple recipient emails. It has been working for us just fine. http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:sendmail:how_to:split_mails_per_recipient There is also an entry for PostFix users. DAve > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Matthias Kellermann > Sent: 16 November 2007 07:13 > To: MailScanner discussion > Subject: per-user Spam settings with MySQL? > > Hi list, > > does anyone use MailScanner for per-user Spam scanning, where the user > can define his own black- and whitelists? Is there a possibility to use > MailScanner with MySQL? How do you solve individual per-user Spam > settings with MailScanner? > > Matthias > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- I've been asking Google for a Veteran's Day logo since 2000, maybe 1999. I was told they finally did a Veteran's Day logo, but none of the links I was given return anything but a normal Google logo. Sad, very sad. Maybe the Chinese Government didn't like it? From jerry.owens at fmr.com Fri Nov 16 14:57:25 2007 From: jerry.owens at fmr.com (Owens, Jerry) Date: Fri Nov 16 14:57:45 2007 Subject: New installation configuration question. References: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM><473CBA72.9000505@ecs.soton.ac.uk> <223f97700711160100q770b9abfw39b96f27abeb89f0@mail.gmail.com> Message-ID: <641E82DC34CF514F82C95407D253E37AD07D51@MSGMROCLS2WIN.DMN1.FMR.COM> Thanks for the information. I will try installing the new version of MailScanner this weekend. Jerry -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Glenn Steen Sent: Friday, November 16, 2007 4:01 AM To: MailScanner discussion Subject: Re: New installation configuration question. On 15/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > This looks to me to be a Postfix configuration problem, and not a > MailScanner one. > It is failing to recognise the address > jowens@computeryardsale.net > which it thinks should be local. > > Without the line in header_checks that sends mail to MailScanner, does > the symptom change at all? What happens when you tell it to send a > message to jowens@computeryardsale.net then? > > Jules. With that log, I don't see any real need to do that:-). It'll fail miserably then too... A "postconf -n" would be good here, as well as a word or two on how you _think_ you've set it... Is jowens a real user or a virtual one? Local or relay? Or did you already tell, and I'm just a sloppy reader?:-) Another thing: You are running a rather new Postfix version (2.4.5) and a rather old MailScanner (4.46.2)... There has been a bit of work done on the PF support for newer versions in MS, so you might want to *not* use that old debian package... Either use the tarball, or look for a newer .deb (I'm not quite sure which version is the latest debian... 4.55.10 seems a bit mouldy as well...). If you use the tarball, Jules provides the needed init script on the download page at http://www.mailscanner.info ... > Owens, Jerry wrote: (snip) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From gmatt at nerc.ac.uk Fri Nov 16 16:26:38 2007 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Fri Nov 16 16:29:39 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> Message-ID: <473DC4BE.6020208@nerc.ac.uk> UxBoD wrote: > also what type of filesystem is the Bayes on, if it is in a file, is > journaling switched on etc etc ... to be honest since switching it > into MySQL I have been very pleased with the performance. I find it amazing that mysql is faster than BerkeleyDB can anyone explain this? BerkeleyDB should knock the spots of a full featured RDBMS shouldnt it? GREG > Regards, > > --[ UxBoD ]-- -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From MailScanner at ecs.soton.ac.uk Fri Nov 16 17:02:42 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri Nov 16 17:03:02 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DC4BE.6020208@nerc.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> Message-ID: <473DCD32.2000400@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greg Matthews wrote: > UxBoD wrote: >> also what type of filesystem is the Bayes on, if it is in a file, is >> journaling switched on etc etc ... to be honest since switching it >> into MySQL I have been very pleased with the performance. > > I find it amazing that mysql is faster than BerkeleyDB can anyone > explain this? BerkeleyDB should knock the spots of a full featured > RDBMS shouldnt it? Only 1 process at a time can hold the BerkeleyDB open and write to it. Lots of processes can hold the RDBMS open at once. It's all down to file locking. > > GREG > >> Regards, >> >> --[ UxBoD ]-- > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: UTF-8 wj8DBQFHPc0yEfZZRxQVtlQRAldMAJ4qXhNd+hGhh5NoixEbFj1dI8bl9ACfZDj9 /8YLzMDBWIi/X48XdNaNIQw= =7p8a -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From steve.freegard at fsl.com Fri Nov 16 17:19:40 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 16 17:19:31 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DCD32.2000400@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> Message-ID: <473DD12C.9060402@fsl.com> Julian Field wrote: > Greg Matthews wrote: >> UxBoD wrote: >>> also what type of filesystem is the Bayes on, if it is in a file, is >>> journaling switched on etc etc ... to be honest since switching it >>> into MySQL I have been very pleased with the performance. >> I find it amazing that mysql is faster than BerkeleyDB can anyone >> explain this? BerkeleyDB should knock the spots of a full featured >> RDBMS shouldnt it? > Only 1 process at a time can hold the BerkeleyDB open and write to it. > Lots of processes can hold the RDBMS open at once. It's all down to file > locking. See http://wiki.apache.org/spamassassin/BayesBenchmarkResults Cheers, Steve. From gsummey at maf.org Fri Nov 16 18:36:29 2007 From: gsummey at maf.org (Garth Summey) Date: Fri Nov 16 18:36:34 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C2360.9000001@utwente.nl> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> Message-ID: <1195238189.17634.1.camel@IT-D0722.us.maf.org> Hey Peter, What is this "consumernetwork" miracle spam blocker that you speak of? Google has never heard of it. G On Thu, 2007-11-15 at 11:45 +0100, Peter Peters wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Edward Prendergast wrote on 14-11-2007 17:16: > > > By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject > > at MTA based on greet-pause and invalid recipients. We have tried to reduce > > the amount of users with catch-alls to the absolute minimum. We went on a > > Mail optimisation overhaul a few months ago during which time MailScanner's > > working area was switched to tempfs and we started using compiled rules. > > We are getting over 300.000 messages (single from's) a day. And we block > another 360.000 at the MTA level (60.000 without reverse DNS, 100.000 > blocked consumernetwork, 30.000 non-excisting domains and the rest > non-excisting users). Only about 2000 messages are deleted by > MailScanner. The rest is delivered to the users. > > We don't use tmpfs. > Our system is an HP dual core Intel(R) Xeon(TM) CPU 3.00GHz with 4GB of > memory runnig Sendmail, MailScanner, Spamassassin with bayes, F-prot and > ClamAV. > > Before we started blocking on reverse DNS our incoming queue grew from > noon until midnight and it disappeared in 6 hours. With reverse DNS > blocking we don't see any raise in the incoming queue anymore. > > The load was usually between 10 and 15. But is now between 4 and 10. > > - -- > Peter Peters, Teamleider Unix/Linux-Beheer > ICT-Servicecentrum > Universiteit Twente, Postbus 217, 7500 AE Enschede > Telefoon 053 489 2301, Fax 053 489 2383, > P.G.M.Peters@utwente.nl, http://www.utwente.nl/icts > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2.2 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFHPCNfelLo80lrIdIRAmMLAJsEhWzBxUTWGSk47BIo/jCJNQsmsgCeKyHS > xkqLIvt11d1hoob3ScP7q5w= > =FGlo > -----END PGP SIGNATURE----- > From Kevin_Miller at ci.juneau.ak.us Fri Nov 16 18:48:16 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Fri Nov 16 18:47:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1195238189.17634.1.camel@IT-D0722.us.maf.org> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk><473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> Message-ID: Garth Summey wrote: > Hey Peter, > > What is this "consumernetwork" miracle spam blocker that you speak of? > > Google has never heard of it. I think he's referring to rejecting connections from cable and dsl users... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From ssilva at sgvwater.com Fri Nov 16 19:53:38 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 20:00:18 2007 Subject: scanning rules In-Reply-To: <473CBFA2.6010907@cnpapers.com> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> <473CBFA2.6010907@cnpapers.com> Message-ID: on 11/15/2007 1:52 PM Steve Campbell spake the following: > I'm not sure, but I believe his leaving has fixed the swapping on my > server that I thought was a result of MS. > > Steve See! Another satisfied customer! ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From glenn.steen at gmail.com Fri Nov 16 20:34:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 20:34:28 2007 Subject: scanning rules In-Reply-To: References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> <473CBFA2.6010907@cnpapers.com> Message-ID: <223f97700711161234q12aaf237v16de91e6fbc7d0c5@mail.gmail.com> On 16/11/2007, Scott Silva wrote: > on 11/15/2007 1:52 PM Steve Campbell spake the following: > > I'm not sure, but I believe his leaving has fixed the swapping on my > > server that I thought was a result of MS. > > > > Steve > See! Another satisfied customer! ;-P Yeah.... Too bad that Edward didn'thave the "luxury" of a few moments of calm troubleshooting (as if it ever is:-)... And now has joined the "not-so-satisfied"... I love MailScanner so much... I wan't everyone else to love it too:-):-) A few more ml of $BEVERAGE and I'll start making (bad, since I'm not native to English) poetry about it....:-D Mailbox overflows, MailScanner to the rescue! Badware is no more!> -- (Oooooh, worst Haiku _ever_. Sorry!:-) > -- > MailScanner is like deodorant... > You hope everybody uses it, and > you notice quickly if they don't!!!! > Amen! Cheers (sorry Hugo!) -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From ssilva at sgvwater.com Fri Nov 16 20:25:32 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 20:36:57 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1433a2a05982b8498def799291d5835e@solidstatelogic.com> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > Jules > > Added a bit near the optimisation section.. > > "http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin" > > Which covers this and various other stuff I usually do too. > > Also added in a link to this from the SA recommendations page. > > Feel free to tidy up my English ;-) > Your English was fine, in fact much better than some people I work with that have English as their 'first' language. I saw just a couple typos, key bounces, etc... -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From drew.marshall at technologytiger.net Fri Nov 16 21:25:29 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Fri Nov 16 21:25:44 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: On 16 Nov 2007, at 20:25, Scott Silva wrote: > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: >> Jules >> Added a bit near the optimisation section.. >> "http://wiki.mailscanner.info/doku.php? >> id=maq:index#getting_the_best_out_of_spamassassin" >> Which covers this and various other stuff I usually do too. >> Also added in a link to this from the SA recommendations page. >> Feel free to tidy up my English ;-) > Your English was fine, in fact much better than some people I work > with that have English as their 'first' language. I saw just a > couple typos, key bounces, etc... Hate to tell you Scott but Martin is about as English as they come (I believe) as he really is from England! :-) I ought to add, not that this should guarantee that his English is better than anyone else's but I am prepared to bet that both my and Martin's Swedish combined is about a million miles worse than Glenn's English (When you compare second language skills)! Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From ssilva at sgvwater.com Fri Nov 16 22:16:40 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 22:20:31 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: on 11/16/2007 1:25 PM Drew Marshall spake the following: > On 16 Nov 2007, at 20:25, Scott Silva wrote: > >> on 11/16/2007 1:07 AM Martin.Hepworth spake the following: >>> Jules >>> Added a bit near the optimisation section.. >>> "http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin" >>> >>> Which covers this and various other stuff I usually do too. >>> Also added in a link to this from the SA recommendations page. >>> Feel free to tidy up my English ;-) >> Your English was fine, in fact much better than some people I work >> with that have English as their 'first' language. I saw just a couple >> typos, key bounces, etc... > > Hate to tell you Scott but Martin is about as English as they come (I > believe) as he really is from England! :-) > > I ought to add, not that this should guarantee that his English is > better than anyone else's but I am prepared to bet that both my and > Martin's Swedish combined is about a million miles worse than Glenn's > English (When you compare second language skills)! > I wasn't thinking, just reacting to a "plea to correct my english". One of our data-entry operators is out with a broken ankle, so the rest of the department is pulling the load. With a department of seven, that can add up to quite a bit of extra load. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From drew.marshall at technologytiger.net Fri Nov 16 23:10:40 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Fri Nov 16 23:10:51 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: <28042.UVdcFwBXDAQ=.1195254640.squirrel@www.technologytiger.net> On Fri, November 16, 2007 22:16, Scott Silva wrote: > I wasn't thinking, just reacting to a "plea to correct my english". > One of our data-entry operators is out with a broken ankle, so the rest of the > department is pulling the load. With a department of seven, that can add up to > quite a bit of extra load. I can quite understand, it just appealed to my rather sad sense of humour. I hope the work load drops off soon. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From gsummey at maf.org Fri Nov 16 23:14:12 2007 From: gsummey at maf.org (Garth Summey) Date: Fri Nov 16 23:14:16 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> Message-ID: <1195254852.17634.5.camel@IT-D0722.us.maf.org> > Garth Summey wrote: > > Hey Peter, > > > > What is this "consumernetwork" miracle spam blocker that you speak of? > > > > Google has never heard of it. > > I think he's referring to rejecting connections from cable and dsl > users... > > > ...Kevin > -- > Kevin Miller Registered Linux User No: 307357 > CBJ MIS Dept. Network Systems Admin., Mail Admin. > 155 South Seward Street ph: (907) 586-0242 > Juneau, Alaska 99801 fax: (907 586-4500 Thanks for that... sounds like a tough policy to maintain. G From ssilva at sgvwater.com Fri Nov 16 23:48:36 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 23:48:54 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <28042.UVdcFwBXDAQ=.1195254640.squirrel@www.technologytiger.net> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <28042.UVdcFwBXDAQ=.1195254640.squirrel@www.technologytiger.net> Message-ID: on 11/16/2007 3:10 PM Drew Marshall spake the following: > On Fri, November 16, 2007 22:16, Scott Silva wrote: >> I wasn't thinking, just reacting to a "plea to correct my english". >> One of our data-entry operators is out with a broken ankle, so the rest of the >> department is pulling the load. With a department of seven, that can add up to >> quite a bit of extra load. > > I can quite understand, it just appealed to my rather sad sense of humour. I > hope the work load drops off soon. > > Drew It looks to be increasing. The injured worker will be off at least the rest of the year, and next week we will be short 2 more people for vacations. I feel the flu coming on! ;-D -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Fri Nov 16 23:51:16 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 23:55:10 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1195254852.17634.5.camel@IT-D0722.us.maf.org> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> <1195254852.17634.5.camel@IT-D0722.us.maf.org> Message-ID: on 11/16/2007 3:14 PM Garth Summey spake the following: >> Garth Summey wrote: >>> Hey Peter, >>> >>> What is this "consumernetwork" miracle spam blocker that you speak of? >>> >>> Google has never heard of it. >> I think he's referring to rejecting connections from cable and dsl >> users... >> >> >> ...Kevin >> -- >> Kevin Miller Registered Linux User No: 307357 >> CBJ MIS Dept. Network Systems Admin., Mail Admin. >> 155 South Seward Street ph: (907) 586-0242 >> Juneau, Alaska 99801 fax: (907 586-4500 > > Thanks for that... sounds like a tough policy to maintain. > > G It shouldn't be that bad, if done right, as most consumer dsl and cable connection shouldn't be directly sending mail anyway. They "should" be using the providers smarthosts. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From drew.marshall at technologytiger.net Sat Nov 17 00:18:19 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 17 00:18:29 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> <1195254852.17634.5.camel@IT-D0722.us.maf.org> Message-ID: <27233.UVdcFwBXDAQ=.1195258699.squirrel@www.technologytiger.net> On Fri, November 16, 2007 23:51, Scott Silva wrote: >> Thanks for that... sounds like a tough policy to maintain. >> >> G > It shouldn't be that bad, if done right, as most consumer dsl and cable > connection shouldn't be directly sending mail anyway. They "should" be using > the providers smarthosts. Quite. While I don't block these directly, I am much more aggressive with checking the sender's details etc. It is also worth noting that the zen.spamhaus list (From the PBL list) also contains IP ranges of ISP customer's IP addresses that shouldn't be sending mail directly (As submitted by the ISP's) see here http://www.spamhaus.org/pbl/index.lasso This makes it rather easier to be more strict with the client connections. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From glenn.steen at gmail.com Sat Nov 17 14:20:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 17 14:20:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> On 16/11/2007, Drew Marshall wrote: > On 16 Nov 2007, at 20:25, Scott Silva wrote: > > > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > >> Jules > >> Added a bit near the optimisation section.. > >> "http://wiki.mailscanner.info/doku.php? > >> id=maq:index#getting_the_best_out_of_spamassassin" > >> Which covers this and various other stuff I usually do too. > >> Also added in a link to this from the SA recommendations page. > >> Feel free to tidy up my English ;-) > > Your English was fine, in fact much better than some people I work > > with that have English as their 'first' language. I saw just a > > couple typos, key bounces, etc... > > Hate to tell you Scott but Martin is about as English as they come (I > believe) as he really is from England! :-) > > I ought to add, not that this should guarantee that his English is > better than anyone else's but I am prepared to bet that both my and > Martin's Swedish combined is about a million miles worse than Glenn's > English (When you compare second language skills)! :-) You make me blush...:-). Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no less....;-)... As far as I can discern, his skills aren't that bad either:-D Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you need know;-) > Drew > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 17 14:21:15 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 17 14:21:19 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> Message-ID: <223f97700711170621g61ed4d97mbf2e62af0132566d@mail.gmail.com> On 17/11/2007, Glenn Steen wrote: > On 16/11/2007, Drew Marshall wrote: > > On 16 Nov 2007, at 20:25, Scott Silva wrote: > > > > > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > > >> Jules > > >> Added a bit near the optimisation section.. > > >> "http://wiki.mailscanner.info/doku.php? > > >> id=maq:index#getting_the_best_out_of_spamassassin" > > >> Which covers this and various other stuff I usually do too. > > >> Also added in a link to this from the SA recommendations page. > > >> Feel free to tidy up my English ;-) > > > Your English was fine, in fact much better than some people I work > > > with that have English as their 'first' language. I saw just a > > > couple typos, key bounces, etc... > > > > Hate to tell you Scott but Martin is about as English as they come (I > > believe) as he really is from England! :-) > > > > I ought to add, not that this should guarantee that his English is > > better than anyone else's but I am prepared to bet that both my and > > Martin's Swedish combined is about a million miles worse than Glenn's > > English (When you compare second language skills)! > :-) > You make me blush...:-). > Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no > less....;-)... As far as I can discern, his skills aren't that bad > either:-D foret == forget.... > Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you > need know;-) > > > Drew > > > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From drew.marshall at technologytiger.net Sat Nov 17 18:32:21 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 17 18:32:33 2007 Subject: OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> Message-ID: <27C8F28A-256D-4048-90A6-4BC34C9549AE@technologytiger.net> On 17 Nov 2007, at 14:20, Glenn Steen wrote: > On 16/11/2007, Drew Marshall > wrote: >> On 16 Nov 2007, at 20:25, Scott Silva wrote: >> >>> on 11/16/2007 1:07 AM Martin.Hepworth spake the following: >>>> Jules >>>> Added a bit near the optimisation section.. >>>> "http://wiki.mailscanner.info/doku.php? >>>> id=maq:index#getting_the_best_out_of_spamassassin" >>>> Which covers this and various other stuff I usually do too. >>>> Also added in a link to this from the SA recommendations page. >>>> Feel free to tidy up my English ;-) >>> Your English was fine, in fact much better than some people I work >>> with that have English as their 'first' language. I saw just a >>> couple typos, key bounces, etc... >> >> Hate to tell you Scott but Martin is about as English as they come (I >> believe) as he really is from England! :-) >> >> I ought to add, not that this should guarantee that his English is >> better than anyone else's but I am prepared to bet that both my and >> Martin's Swedish combined is about a million miles worse than Glenn's >> English (When you compare second language skills)! > :-) > You make me blush...:-). > Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no > less....;-)... As far as I can discern, his skills aren't that bad > either:-D You are quite right and I have no doubt many, many others from various other countries (Kai & J-P from Germany, Hugo who I guess is Dutch and a whole host of others, who I apologise to for not personally having complimented their English but I am so far OT already :-) ) > > Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you > need know;-) And what would I get when using these (I just like to know if I am going to get a slap from a pretty girl by saying either of these to her!) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From jeremypennington at yahoo.com Sat Nov 17 21:04:53 2007 From: jeremypennington at yahoo.com (Mr jeremy pennington) Date: Sat Nov 17 21:04:55 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Message-ID: <254145.78172.qm@web50111.mail.re2.yahoo.com> ----- Original Message ---- From: Ren? Berber To: mailscanner@lists.mailscanner.info Sent: Monday, November 12, 2007 11:14:49 PM Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Mr jeremy pennington wrote: > Comparing the the two Log.pm, there is some differences for > "setlogsock". I tried several different changes, but was not able to > get anything to work. Any other thoughts? That's exactly what you have to modify, Log.pm: Line 71: Sys::Syslog::setlogsock('native'); If it doesn't work, you may have to update perl's Sys::Syslog (an old version didn't work at all on Solaris). -- Ren? Berber Thanks Rene! Changing line 71 to native worked. Jeremy ____________________________________________________________________________________ Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mail.yahoo.com/ From MailScanner at ecs.soton.ac.uk Sat Nov 17 21:24:12 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 17 21:24:27 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <254145.78172.qm@web50111.mail.re2.yahoo.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> Message-ID: <473F5BFC.7060902@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mr jeremy pennington wrote: > ----- Original Message ---- > From: Ren? Berber > To: mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 11:14:49 PM > Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 > > Mr jeremy pennington wrote: > > >> Comparing the the two Log.pm, there is some differences for >> "setlogsock". I tried several different changes, but was not able to >> get anything to work. Any other thoughts? >> > > That's exactly what you have to modify, Log.pm: > > Line 71: Sys::Syslog::setlogsock('native'); > > If it doesn't work, you may have to update perl's Sys::Syslog (an old > version didn't work at all on Solaris). > Is it true that on all Solaris systems this needs to be "native"? If so, I'll make the code do that by default on all Solaris systems. If it's not true, I'll make it an optional configuration option. Your thoughts gentlefolk please? Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj4DBQFHP1v+EfZZRxQVtlQRAvHhAJdLpAoJdcNkmfpb/+O0amVo+N6qAJ9h0aXv 0JJInMs7QWwdcAsRf+7k/A== =gQdT -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From shuttlebox at gmail.com Sat Nov 17 21:35:09 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Sat Nov 17 21:35:10 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F5BFC.7060902@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> Message-ID: <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> On Nov 17, 2007 10:24 PM, Julian Field wrote: > Is it true that on all Solaris systems this needs to be "native"? > If so, I'll make the code do that by default on all Solaris systems. > If it's not true, I'll make it an optional configuration option. I think a config option probably would be best since the socket type also affects how the log line is formatted so native might not be what everyone wants either. -- /peter From r.berber at computer.org Sat Nov 17 21:37:44 2007 From: r.berber at computer.org (=?ISO-8859-1?Q?Ren=E9_Berber?=) Date: Sat Nov 17 21:38:06 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F5BFC.7060902@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> Message-ID: Julian Field wrote: [snip] > Is it true that on all Solaris systems this needs to be "native"? > If so, I'll make the code do that by default on all Solaris systems. > If it's not true, I'll make it an optional configuration option. It works (tested) on Solaris 8, 9, and 10. The only thing that changes for me (between using the current MS default and this) is the format of the log entries; with "native" the log messages are in the same format as used by everything else (sendmail, imapd, etc.) -- that's the reason I always change Log.pm and clamav-autoupdate. -- Ren? Berber From iarteaga at cwpanama.net Sat Nov 17 22:26:23 2007 From: iarteaga at cwpanama.net (Ivan Arteaga) Date: Sat Nov 17 22:26:26 2007 Subject: Question about blacklists Message-ID: <473F6A8F.6090800@cwpanama.net> Hello List, I have defined some blacklists in my sendmail.mc, I would like to know if its possible to redirect all the mails blocked by these lists to an secific inbox instead of rejecting them? If so, I will appreciate any tip to do it. Regards, --Ivan. From MailScanner at ecs.soton.ac.uk Sat Nov 17 22:39:33 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 17 22:39:49 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> Message-ID: <473F6DA5.30209@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 17, 2007 10:24 PM, Julian Field wrote: > >> Is it true that on all Solaris systems this needs to be "native"? >> If so, I'll make the code do that by default on all Solaris systems. >> If it's not true, I'll make it an optional configuration option. >> > > I think a config option probably would be best since the socket type > also affects how the log line is formatted so native might not be what > everyone wants either. > Okay, I have added a new optional configuration setting "Syslog Socket Type" which 99.9% of users should leave blank, and MailScanner will work it out for itself. However, you may want to set it to "native" on some Solaris systems. Does this solve the problem? P.S. Spotted the change in my signature? :-) Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHP22nEfZZRxQVtlQRAsaSAJ9+RVnDuYfT2hWN2nta9hDlhFggcQCeLi2i YfUq8AXcnmhitIMHiIdBRt0= =ku6z -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From r.berber at computer.org Sun Nov 18 01:01:05 2007 From: r.berber at computer.org (=?ISO-8859-1?Q?Ren=E9_Berber?=) Date: Sun Nov 18 01:01:28 2007 Subject: Question about blacklists In-Reply-To: <473F6A8F.6090800@cwpanama.net> References: <473F6A8F.6090800@cwpanama.net> Message-ID: Ivan Arteaga wrote: > I have defined some blacklists in my sendmail.mc, I would like to know > if its possible to redirect all the mails blocked by these lists to an > secific inbox instead of rejecting them? If so, I will appreciate any > tip to do it. Yes, you can quarantine the messages (not a mailbox but a directory). It's described in sendmail's cf/README: "dnsbl Turns on rejection, discarding, or quarantining of hosts found in a DNS based list. The first argument is used as the domain in which blocked hosts are listed. A second argument can be used to change the default error message, or select one of the operations `discard' and `quarantine'." ... " See also enhdnsbl for an enhanced version." ... You could look at the quarantined messages using tools like Webmin. All messages are in separate files, they are not in mailbox format, but you could then send them somewhere (not sure if Webmin supports something different than sending them to the original recipient; from a terminal is easy using the file as an attachment) or delete. -- Ren? Berber From jaearick at colby.edu Sun Nov 18 02:23:11 2007 From: jaearick at colby.edu (Jeff A. Earickson) Date: Sun Nov 18 02:23:21 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F5BFC.7060902@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> Message-ID: On Sat, 17 Nov 2007, Julian Field wrote: > Mr jeremy pennington wrote: >> ----- Original Message ---- >> From: Ren? Berber >> To: mailscanner@lists.mailscanner.info >> Sent: Monday, November 12, 2007 11:14:49 PM >> Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 >> >> Mr jeremy pennington wrote: >> >> >>> Comparing the the two Log.pm, there is some differences for >>> "setlogsock". I tried several different changes, but was not able to >>> get anything to work. Any other thoughts? >>> >> >> That's exactly what you have to modify, Log.pm: >> >> Line 71: Sys::Syslog::setlogsock('native'); >> >> If it doesn't work, you may have to update perl's Sys::Syslog (an old >> version didn't work at all on Solaris). >> > Is it true that on all Solaris systems this needs to be "native"? > If so, I'll make the code do that by default on all Solaris systems. > If it's not true, I'll make it an optional configuration option. > > Your thoughts gentlefolk please? Julian, I am running your stock-issue Log.pm (latest version of MS) on a Solaris 10 Sparc, and it works just fine. I have perl 5.8.8 (public domain, I built it) and Sys::Syslog (0.18) installed. Jeff Earickson Colby College From glenn.steen at gmail.com Sun Nov 18 14:07:54 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 14:07:59 2007 Subject: OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <27C8F28A-256D-4048-90A6-4BC34C9549AE@technologytiger.net> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> <27C8F28A-256D-4048-90A6-4BC34C9549AE@technologytiger.net> Message-ID: <223f97700711180607u36531e0drfec5424eb9b226a9@mail.gmail.com> On 17/11/2007, Drew Marshall wrote: > On 17 Nov 2007, at 14:20, Glenn Steen wrote: > > > On 16/11/2007, Drew Marshall > > wrote: > >> On 16 Nov 2007, at 20:25, Scott Silva wrote: > >> > >>> on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > >>>> Jules > >>>> Added a bit near the optimisation section.. > >>>> "http://wiki.mailscanner.info/doku.php? > >>>> id=maq:index#getting_the_best_out_of_spamassassin" > >>>> Which covers this and various other stuff I usually do too. > >>>> Also added in a link to this from the SA recommendations page. > >>>> Feel free to tidy up my English ;-) > >>> Your English was fine, in fact much better than some people I work > >>> with that have English as their 'first' language. I saw just a > >>> couple typos, key bounces, etc... > >> > >> Hate to tell you Scott but Martin is about as English as they come (I > >> believe) as he really is from England! :-) > >> > >> I ought to add, not that this should guarantee that his English is > >> better than anyone else's but I am prepared to bet that both my and > >> Martin's Swedish combined is about a million miles worse than Glenn's > >> English (When you compare second language skills)! > > :-) > > You make me blush...:-). > > Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no > > less....;-)... As far as I can discern, his skills aren't that bad > > either:-D > > You are quite right and I have no doubt many, many others from > various other countries (Kai & J-P from Germany, Hugo who I guess is > Dutch and a whole host of others, who I apologise to for not > personally having complimented their English but I am so far OT > already :-) ) True:-) > > > > Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you > > need know;-) > > And what would I get when using these (I just like to know if I am > going to get a slap from a pretty girl by saying either of these to > her!) "Yes please, I'd like a refill" and "Cheers".... You'd have to be pretty inventive to get a slap for any of those:-D > Drew Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sun Nov 18 14:17:45 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 14:17:50 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F6DA5.30209@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> Message-ID: <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> On 17/11/2007, Julian Field wrote: (snip) > P.S. Spotted the change in my signature? :-) > > Jules > > - -- > Julian Field MEng CITP CEng Yes, more letters at the end of that line....:-):-) Do we have to genuflect even deeper now? :-D Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sun Nov 18 18:10:09 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 18:10:12 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> Message-ID: <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> On 18/11/2007, Glenn Steen wrote: > On 17/11/2007, Julian Field wrote: > (snip) > > P.S. Spotted the change in my signature? :-) > > > > Jules > > > > - -- > > Julian Field MEng CITP CEng > Yes, more letters at the end of that line....:-):-) > Do we have to genuflect even deeper now? :-D I of course meant to say "Congratulations on your achievement", of course. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From hvdkooij at vanderkooij.org Sun Nov 18 19:08:03 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 18 19:08:24 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> Message-ID: <47408D93.2010406@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Glenn Steen wrote: > On 18/11/2007, Glenn Steen wrote: >> On 17/11/2007, Julian Field wrote: >> (snip) >>> P.S. Spotted the change in my signature? :-) >>> >>> Jules >>> >>> - -- >>> Julian Field MEng CITP CEng >> Yes, more letters at the end of that line....:-):-) >> Do we have to genuflect even deeper now? :-D > I of course meant to say "Congratulations on your achievement", of course. Is there a translation for those not following the British educational system Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQI2PBvzDRVjxmYERArT+AKCI7cbDW4SDZrYzvZGTlN3UcXFkDwCgpWHb 2FJ4effusMKYfFHKP51vVaQ= =Ru5c -----END PGP SIGNATURE----- From glenn.steen at gmail.com Sun Nov 18 21:52:08 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 21:52:11 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <47408D93.2010406@vanderkooij.org> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> <47408D93.2010406@vanderkooij.org> Message-ID: <223f97700711181352tdbce6f5v902b8a724c0b7ead@mail.gmail.com> On 18/11/2007, Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Glenn Steen wrote: > > On 18/11/2007, Glenn Steen wrote: > >> On 17/11/2007, Julian Field wrote: > >> (snip) > >>> P.S. Spotted the change in my signature? :-) > >>> > >>> Jules > >>> > >>> - -- > >>> Julian Field MEng CITP CEng > >> Yes, more letters at the end of that line....:-):-) > >> Do we have to genuflect even deeper now? :-D > > I of course meant to say "Congratulations on your achievement", of course. > > Is there a translation for those not following the British educational > system > > Hugo. > Google is your friend.... First hit .... http://www.cphc.ac.uk/docs/presentations/roland_ibbett.pdf ... Gives a clue or two:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Sun Nov 18 22:10:41 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun Nov 18 22:10:56 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <47408D93.2010406@vanderkooij.org> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> <47408D93.2010406@vanderkooij.org> Message-ID: <4740B861.3040009@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > * PGP Signed by an unknown key > > Glenn Steen wrote: > >> On 18/11/2007, Glenn Steen wrote: >> >>> On 17/11/2007, Julian Field wrote: >>> (snip) >>> >>>> P.S. Spotted the change in my signature? :-) >>>> >>>> Jules >>>> >>>> - -- >>>> Julian Field MEng CITP CEng >>>> >>> Yes, more letters at the end of that line....:-):-) >>> Do we have to genuflect even deeper now? :-D >>> >> I of course meant to say "Congratulations on your achievement", of course. >> > > Is there a translation for those not following the British educational > system > It's the Chartered Engineer status. You can't even apply for it unless you do the right accredited degree course, followed by a minimum of 10 years practical experience in the field. And when you do apply, it's a pig of an application form showing you how learned and developed your engineering skills in every job you ever did that was IT-related. And then you get a 1 hour grilling in a formal interview with 3 interviewers from the Engineering Council who ask you to demonstrate how you have applied all your engineering skills in a wide range of projects you have undertaken over the years. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQLhjEfZZRxQVtlQRAhZnAJ9J9C3a/hxyElT4WXI2T6axDv2HxQCeMDVF 9y+5dayX3PrjW3Ocr/EzA7E= =Xdxi -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hvdkooij at vanderkooij.org Sun Nov 18 22:59:50 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 18 23:00:21 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <4740B861.3040009@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> <47408D93.2010406@vanderkooij.org> <4740B861.3040009@ecs.soton.ac.uk> Message-ID: <4740C3E6.7090507@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian Field wrote: > > > Hugo van der Kooij wrote: >> * PGP Signed by an unknown key > >> Glenn Steen wrote: > >>> On 18/11/2007, Glenn Steen wrote: >>> >>>> On 17/11/2007, Julian Field wrote: >>>> (snip) >>>> >>>>> P.S. Spotted the change in my signature? :-) >>>>> >>>>> Jules >>>>> >>>>> - -- >>>>> Julian Field MEng CITP CEng >>>>> >>>> Yes, more letters at the end of that line....:-):-) >>>> Do we have to genuflect even deeper now? :-D >>>> >>> I of course meant to say "Congratulations on your achievement", of course. >>> >> Is there a translation for those not following the British educational >> system > > It's the Chartered Engineer status. You can't even apply for it unless > you do the right accredited degree course, followed by a minimum of 10 > years practical experience in the field. > > And when you do apply, it's a pig of an application form showing you how > learned and developed your engineering skills in every job you ever did > that was IT-related. And then you get a 1 hour grilling in a formal > interview with 3 interviewers from the Engineering Council who ask you > to demonstrate how you have applied all your engineering skills in a > wide range of projects you have undertaken over the years. Right. I never mastered the skill of learning to get a piece of paper. I simply can't be bothered to just for someone elses kicks. I learn because I want to know and if there happens to be an exam then the exam just sort of happens but I never learn just to pass that exam. As such the TLA/FLA thing in signatures also happen to escape my attention most of the times. In Jules case MailScanner is more of a credit holder to me. But that's just me. I just happen to work (or did work) for employers who think such papers in itself do not tell that much. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQMPlBvzDRVjxmYERAsajAJ4pafF10/mo8VhC9LP3gf+HB6dIFACffF16 7gueTtTn2+QQD5E2fulrx6o= =rljG -----END PGP SIGNATURE----- From iarteaga at cwpanama.net Mon Nov 19 01:02:35 2007 From: iarteaga at cwpanama.net (Ivan Arteaga) Date: Mon Nov 19 01:02:37 2007 Subject: Question about blacklists In-Reply-To: References: <473F6A8F.6090800@cwpanama.net> Message-ID: <4740E0AB.4020904@cwpanama.net> Ren? Berber wrote: > Ivan Arteaga wrote: > > >> I have defined some blacklists in my sendmail.mc, I would like to know >> if its possible to redirect all the mails blocked by these lists to an >> secific inbox instead of rejecting them? If so, I will appreciate any >> tip to do it. >> > > Yes, you can quarantine the messages (not a mailbox but a directory). > > It's described in sendmail's cf/README: > > "dnsbl Turns on rejection, discarding, or quarantining of hosts > found in a DNS based list. The first argument is used as > the domain in which blocked hosts are listed. A second > argument can be used to change the default error message, > or select one of the operations `discard' and `quarantine'." ... > " See also enhdnsbl for an enhanced version." ... > > You could look at the quarantined messages using tools like Webmin. All > messages are in separate files, they are not in mailbox format, but you > could then send them somewhere (not sure if Webmin supports something > different than sending them to the original recipient; from a terminal > is easy using the file as an attachment) or delete. > Thanks Rene for the info, I will try it and post back any comment. Regards, --Ivan. From gmatt at nerc.ac.uk Mon Nov 19 09:07:56 2007 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Mon Nov 19 09:11:37 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DD12C.9060402@fsl.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> Message-ID: <4741526C.7040902@nerc.ac.uk> Steve Freegard wrote: > Julian Field wrote: >> Only 1 process at a time can hold the BerkeleyDB open and write to it. >> Lots of processes can hold the RDBMS open at once. It's all down to >> file locking. > > See http://wiki.apache.org/spamassassin/BayesBenchmarkResults wow. Interesting stuff. So why does SA not use sdbm by default? > > Cheers, > Steve. -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From J.Ede at birchenallhowden.co.uk Mon Nov 19 09:26:10 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Mon Nov 19 09:28:43 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DD12C.9060402@fsl.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk>,<473DD12C.9060402@fsl.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3F@server02.bhl.local> I'm guessing those benchmark tests are for 1 process trying to get the lock... Also if its file locking thats the issue then if you've 1 or 2 MailScanner children then won't the berkeleyDB be faster and the advantages of SQL bayes will increase as the number of children increase (and sql means other machines can also access DB) Jason From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Freegard [steve.freegard@fsl.com] Sent: 16 November 2007 17:19 To: MailScanner discussion Subject: Re: Minimum hardware capacity for 35k e-mail scans/day Julian Field wrote: > Greg Matthews wrote: >> UxBoD wrote: >>> also what type of filesystem is the Bayes on, if it is in a file, is >>> journaling switched on etc etc ... to be honest since switching it >>> into MySQL I have been very pleased with the performance. >> I find it amazing that mysql is faster than BerkeleyDB can anyone >> explain this? BerkeleyDB should knock the spots of a full featured >> RDBMS shouldnt it? > Only 1 process at a time can hold the BerkeleyDB open and write to it. > Lots of processes can hold the RDBMS open at once. It's all down to file > locking. See http://wiki.apache.org/spamassassin/BayesBenchmarkResults Cheers, Steve. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Andreas.Kasenides at cs.ucy.ac.cy Mon Nov 19 09:30:13 2007 From: Andreas.Kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Mon Nov 19 09:30:14 2007 Subject: Where to file the "file" bug In-Reply-To: <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> References: <473D5746.9000207@cs.ucy.ac.cy> <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> Message-ID: <474157A5.3060408@cs.ucy.ac.cy> Thanks Glenn for your reply. Can you please elaborate on how I can save only the body part of a messafe so I can experiment with different "file" versions and configurations? I have many "messages" that cause this issue but could not get "file" to spit what I want. Or maybe explain how MailScanner does this internally, so I can duplicate its functionality. Now I am determined to follow through with this and provide at least a guide on which "file" versions or configs cause MailScanner to misbehave? Thanks Andreas Glenn Steen wrote: > On 16/11/2007, Andreas Kasenides wrote: > >> Is there a place where I can report a bug? >> I have the same problem, reported ages ago, with the "file" command >> where MailScanner >> believes that a message is an MS-DOG executable (.exe, .com) while it is >> apparently only >> a .txt attachment or a forward which is sent as "inline" text. >> Apparently this happens very often >> with MS-Outlook mailers and with messages that contain characters other >> than the standard >> West European sets. Yes I have read a lot about this on this list. >> The problem has been placed on the shoulders of the "file" command >> erroneously reporting an >> executable file when it is not. >> Apparently this is not always true. In my case I have several messages >> which the file command >> reports as "RFC 822 mail text" yet MailScanner will not pass through. >> I am using CentOS 5 and MailScanner 4.63.8. >> Any help? since the only other alternative(??) is to completely disable >> the FileType detection? >> > > If you save only the body part and do a file on that (I imagine you > might have a few in your quarantine, if you have things set up to > quarantine infections), file WILL tell you another story. > That it say the above on the "message" file is quite correct, but it > wasn't that that it logged/reacted on;-). > > As to the proper place to report bugs in the file command, chack your > package management system.... One can usually find relevant > information there. > But remember that if your distro/OS isn't extremely new, with very > aggressive package selections, the file command you use is not the > latest from the developer... So then the proper place to file a bug > might be with the creator of said distro/OS. > Since that route might lead to nothing in the short term, most people > affected by this either "update" file to a newer version (perhaps even > from source), or just edit/compile the magic file(s). > > >> Thanks >> Andreas >> > > Cheers > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071119/431129f6/attachment.html From martinh at solidstatelogic.com Mon Nov 19 09:43:17 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 09:43:14 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: Message-ID: Drew Well yes I'm from the UK, but my English grammer is terrible - results of a dodgy 1970's edukashun ;-) But as for my Swedish - well I won't starve (used to work for Swedish co. about 10 years ago), but it's no-where approaching the fluency Glenn has for English. But then anyone under 50 in Sweden/Holland seems to have a better command of the Ebglish language than I do.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Drew Marshall > Sent: 16 November 2007 21:25 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > On 16 Nov 2007, at 20:25, Scott Silva wrote: > > > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > >> Jules > >> Added a bit near the optimisation section.. > >> "http://wiki.mailscanner.info/doku.php? > >> id=maq:index#getting_the_best_out_of_spamassassin" > >> Which covers this and various other stuff I usually do too. > >> Also added in a link to this from the SA recommendations page. > >> Feel free to tidy up my English ;-) > > Your English was fine, in fact much better than some people I work > > with that have English as their 'first' language. I saw just a > > couple typos, key bounces, etc... > > Hate to tell you Scott but Martin is about as English as they come (I > believe) as he really is from England! :-) > > I ought to add, not that this should guarantee that his English is > better than anyone else's but I am prepared to bet that both my and > Martin's Swedish combined is about a million miles worse than Glenn's > English (When you compare second language skills)! > > Drew > > -- > In line with our policy, this message has been scanned > for viruses and dangerous content by Technology Tiger in association with > Mail Launder. > Further information can be found at www.technologytiger.net/policy > > Technology Tiger Limited is registered in Scotland with registration > number: 310997 > Registered Office 55-57 West High Street Inverurie AB51 3QQ > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From R.Sterenborg at netsourcing.nl Mon Nov 19 11:20:32 2007 From: R.Sterenborg at netsourcing.nl (Rob Sterenborg) Date: Mon Nov 19 11:21:46 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: Message-ID: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> mailscanner-bounces@lists.mailscanner.info wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible > - results of a dodgy 1970's edukashun ;-) > > But as for my Swedish - well I won't starve (used to work for > Swedish co. about 10 years ago), but it's no-where > approaching the fluency Glenn has for English. But then > anyone under 50 in Sweden/Holland seems to have a better > command of the Ebglish language than I do.. Hopefully not. ;-) You have to know that.. - We get educated in English for at least 4 years (in the 70's-80's, may be more now). - A lot of/Most usefull information of any kind is available in English. - Almost every movie we see is English spoken and subtitled in [Dutch/your language here]. So, we read and hear a lot of English although our pronunciation may be horrible. However, there are a lot of words less commonly used that a lot of people have never heard of and would never use so I think, as a native English speaker, you'd spot the difference. If that's specific to the Dutch and Swedish I don't know. I do know that e.g. in Germany virtually every English(foreign)-spoken movie is translated into German (with horrible German voices not even close to the original voices), which IMHO is a reason for picking up the language less easily. Other countries may very well do the same thing. And yes, the magical age seems to be around 50. When my parents grew up, German was the predominant second language and they still prefer to watch German broadcastings over English (without subtitling). Grts, Rob From glenn.steen at gmail.com Mon Nov 19 11:24:51 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 11:24:54 2007 Subject: Where to file the "file" bug In-Reply-To: <474157A5.3060408@cs.ucy.ac.cy> References: <473D5746.9000207@cs.ucy.ac.cy> <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> <474157A5.3060408@cs.ucy.ac.cy> Message-ID: <223f97700711190324tfb60636i3a2bc6874f8296f2@mail.gmail.com> On 19/11/2007, Andreas Kasenides wrote: > > Thanks Glenn for your reply. > Can you please elaborate on how I can save only the body part of a messafe > so I can experiment with > different "file" versions and configurations? I have many "messages" that > cause this issue but could not > get "file" to spit what I want. Or maybe explain how MailScanner does this > internally, so I can > duplicate its functionality. > Now I am determined to follow through with this and provide at least a > guide > on which "file" versions or configs cause MailScanner to misbehave? > Thanks > Andreas The simplest thing is to use an editor (vi, emacs, whatever turns you on:-) and remove all the headers and the separating blank line, from one of the "multitude" of RFC822-formatted "message" files you have. As you know, the headers are the lines at the start of the file looking like:
:
For example Subject: This is a subject .... What differentiates the body from the headers is simply a blank line. What MS does (among other things:-) is to "decode" the message into its constituent parts (attachments etc)... If the message is a MIME-encoded message, further "decoding" might be needed, to actually get at the file tested by the "file" command in MS. Hope that makes things clearer for you. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Mon Nov 19 11:28:19 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 11:28:24 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: Message-ID: <223f97700711190328q698737d9m29179795ac7b31a0@mail.gmail.com> On 19/11/2007, Martin.Hepworth wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible - results of a dodgy 1970's edukashun ;-) > > But as for my Swedish - well I won't starve (used to work for Swedish co. about 10 years ago), but it's no-where approaching the fluency Glenn has for English. But then anyone under 50 in Sweden/Holland seems to have a better command of the Ebglish language than I do.. > :-). What Co.? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Mon Nov 19 11:51:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 11:51:36 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> Message-ID: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> On 19/11/2007, Rob Sterenborg wrote: > mailscanner-bounces@lists.mailscanner.info wrote: > > Drew > > > > Well yes I'm from the UK, but my English grammer is terrible > > - results of a dodgy 1970's edukashun ;-) > > > > But as for my Swedish - well I won't starve (used to work for > > Swedish co. about 10 years ago), but it's no-where > > approaching the fluency Glenn has for English. But then > > anyone under 50 in Sweden/Holland seems to have a better > > command of the Ebglish language than I do.. > > Hopefully not. ;-) > > You have to know that.. > - We get educated in English for at least 4 years (in the 70's-80's, may > be more now). > - A lot of/Most usefull information of any kind is available in English. > - Almost every movie we see is English spoken and subtitled in > [Dutch/your language here]. Quite true. We have at least 7-9 years English education in Sweden (most have more)... > So, we read and hear a lot of English although our pronunciation may be > horrible. However, there are a lot of words less commonly used that a > lot of people have never heard of and would never use so I think, as a > native English speaker, you'd spot the difference. If we ever meet in person... Your view of my command of the language will degrade pretty fast:-):-). One might know a word intimately, but have never ever heard it pronounced... Makes for some quite hilarious misconceptions/misunderstandings....:-) > If that's specific to the Dutch and Swedish I don't know. I do know that The other nordic countries *should* have pretty much the same "setup". Results vary wildly though:-). > e.g. in Germany virtually every English(foreign)-spoken movie is > translated into German (with horrible German voices not even close to > the original voices), which IMHO is a reason for picking up the language > less easily. Other countries may very well do the same thing. > > And yes, the magical age seems to be around 50. When my parents grew up, > German was the predominant second language and they still prefer to > watch German broadcastings over English (without subtitling). I'd put the age (in Sweden, of course:) slightly higher ... most persons in their 55-60's are ... less fluent, and above 60 it's not uncommon to have no English at all. > > Grts, > Rob Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From martinh at solidstatelogic.com Mon Nov 19 12:03:01 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 12:03:09 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190328q698737d9m29179795ac7b31a0@mail.gmail.com> Message-ID: <9e768ce6036e6d46820ce30d2edd2891@solidstatelogic.com> Glenn Hej ;-) Was DynaSoft from Stockholm. Was bought by what's now RSA about 9 years ago. Now moved back to Upsalla as of TenFour systems products when RSA got bored with the core product! -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 19 November 2007 11:28 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > On 19/11/2007, Martin.Hepworth wrote: > > Drew > > > > Well yes I'm from the UK, but my English grammer is terrible - results > of a dodgy 1970's edukashun ;-) > > > > But as for my Swedish - well I won't starve (used to work for Swedish > co. about 10 years ago), but it's no-where approaching the fluency Glenn > has for English. But then anyone under 50 in Sweden/Holland seems to have > a better command of the Ebglish language than I do.. > > > :-). > > What Co.? > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From R.Sterenborg at netsourcing.nl Mon Nov 19 13:31:35 2007 From: R.Sterenborg at netsourcing.nl (Rob Sterenborg) Date: Mon Nov 19 13:32:05 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> Message-ID: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> >> You have to know that.. >> - We get educated in English for at least 4 years (in the 70's-80's, >> may be more now). >> > Quite true. We have at least 7-9 years English education in Sweden > (most have more)... Here most have more too. But if you really didn't want to you could get away with 3 years. >> So, we read and hear a lot of English although our pronunciation may >> be horrible. However, there are a lot of words less commonly used >> that a lot of people have never heard of and would never use so I >> think, as a native English speaker, you'd spot the difference. > If we ever meet in person... Your view of my command of the language > will degrade pretty fast:-):-). One might know a word intimately, but > have never ever heard it pronounced... Makes for some quite hilarious > misconceptions/misunderstandings....:-) Heheh, you mean something like this? Try it; I think I get most right.. ;-) http://baetzler.de/humor/english_pronounciation.html Actually, I think you'd be able to understand me perfectly well, but hearing all kinds of accents ("real" English, southern American-English, [add your flavour here]) and not speaking the language natively or often with others will most probably make ones pronunciation, well, funny, I think. :-) Oh well, so be it. ;^P Grts, Rob From martinh at solidstatelogic.com Mon Nov 19 13:59:41 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 14:00:16 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> Message-ID: <1cda2646a4bac3418ee4fee6d05e988c@solidstatelogic.com> Rob Hehe - then of course there's lots and lots of regional accents in the UK....one old chap I knew when growing up could, for lots of towns and cities esp in Yorkshire, get the street where you brought in depending on your accent! -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Rob Sterenborg > Sent: 19 November 2007 13:32 > To: MailScanner discussion > Subject: RE: Way OT: Minimum hardware capacity for 35k e-mail scans/day > > >> You have to know that.. > >> - We get educated in English for at least 4 years (in the 70's-80's, > >> may be more now). > >> > > Quite true. We have at least 7-9 years English education in Sweden > > (most have more)... > > Here most have more too. But if you really didn't want to you could get > away with 3 years. > > >> So, we read and hear a lot of English although our pronunciation may > >> be horrible. However, there are a lot of words less commonly used > >> that a lot of people have never heard of and would never use so I > >> think, as a native English speaker, you'd spot the difference. > > > If we ever meet in person... Your view of my command of the language > > will degrade pretty fast:-):-). One might know a word intimately, but > > have never ever heard it pronounced... Makes for some quite hilarious > > misconceptions/misunderstandings....:-) > > Heheh, you mean something like this? Try it; I think I get most right.. > ;-) > http://baetzler.de/humor/english_pronounciation.html > > Actually, I think you'd be able to understand me perfectly well, but > hearing all kinds of accents ("real" English, southern American-English, > [add your flavour here]) and not speaking the language natively or often > with others will most probably make ones pronunciation, well, funny, I > think. :-) Oh well, so be it. ;^P > > > Grts, > Rob > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From shuttlebox at gmail.com Mon Nov 19 14:00:43 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Mon Nov 19 14:00:45 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> Message-ID: <625385e30711190600w735545bfpffce0037121819c1@mail.gmail.com> On Nov 19, 2007 12:51 PM, Glenn Steen wrote: > If we ever meet in person... Your view of my command of the language > will degrade pretty fast:-):-). One might know a word intimately, but > have never ever heard it pronounced... Makes for some quite hilarious > misconceptions/misunderstandings....:-) I remember a few years back when I visited some relatives in Colorado. I wanted to update them on current events in Sweden related to U.S.A. and said that the Swedish Crown Princess went to Yale. My pronunciation of Yale sounded (and still does!) exactly like jail so they looked at each other and quickly changed the subject. :-) -- /peter From glenn.steen at gmail.com Mon Nov 19 14:43:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 14:43:37 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <9e768ce6036e6d46820ce30d2edd2891@solidstatelogic.com> References: <223f97700711190328q698737d9m29179795ac7b31a0@mail.gmail.com> <9e768ce6036e6d46820ce30d2edd2891@solidstatelogic.com> Message-ID: <223f97700711190643l2ba22c67y3d0fc122647ddb71@mail.gmail.com> On 19/11/2007, Martin.Hepworth wrote: > Glenn > > Hej ;-) > > Was DynaSoft from Stockholm. > > Was bought by what's now RSA about 9 years ago. Ah. > Now moved back to Upsalla as of TenFour systems products when RSA got bored with the core product! Erhm. Upsalla.... I take that to be "Upsala"... As bad speling in Swedish:-):-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Mon Nov 19 16:17:18 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 16:17:21 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <625385e30711190600w735545bfpffce0037121819c1@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> <625385e30711190600w735545bfpffce0037121819c1@mail.gmail.com> Message-ID: <223f97700711190817i52c6dc30ncb44636bd2b64d55@mail.gmail.com> On 19/11/2007, shuttlebox wrote: > On Nov 19, 2007 12:51 PM, Glenn Steen wrote: > > If we ever meet in person... Your view of my command of the language > > will degrade pretty fast:-):-). One might know a word intimately, but > > have never ever heard it pronounced... Makes for some quite hilarious > > misconceptions/misunderstandings....:-) > > I remember a few years back when I visited some relatives in Colorado. > I wanted to update them on current events in Sweden related to U.S.A. > and said that the Swedish Crown Princess went to Yale. My > pronunciation of Yale sounded (and still does!) exactly like jail so > they looked at each other and quickly changed the subject. :-) > :-) Been there, done that too... Well, more or less...:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From jcasale at ActiveNetwerx.com Mon Nov 19 16:28:14 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Mon Nov 19 16:28:53 2007 Subject: Beginner Question Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Hi, I was looking for a complete tutorial to setup a mail filter for our existing server and came upon the following article (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the comments below it, it stated the implementation of Mailscanner with postfix in this manner was unsupported? Can you guys confirm or deny this, and if so possibly recommend a similar tutorial? Thanks for any input! jlc -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071119/4b90daf3/attachment.html From martinh at solidstatelogic.com Mon Nov 19 16:33:20 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 16:33:28 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <67d309699140bf4db51a0fc5575e0bd0@solidstatelogic.com> Joseph See the wiki for 'how-to' install with postfix.. http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:installation -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Joseph L. Casale > Sent: 19 November 2007 16:28 > To: mailscanner@lists.mailscanner.info > Subject: Beginner Question > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the > comments below it, it stated the implementation of Mailscanner with > postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a similar > tutorial? > > > > Thanks for any input! > jlc ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From mailscanner at yeticomputers.com Mon Nov 19 17:07:42 2007 From: mailscanner at yeticomputers.com (Rick Chadderdon) Date: Mon Nov 19 17:08:23 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1cda2646a4bac3418ee4fee6d05e988c@solidstatelogic.com> References: <1cda2646a4bac3418ee4fee6d05e988c@solidstatelogic.com> Message-ID: <4741C2DE.3050308@yeticomputers.com> You knew Henry Higgins? :) Martin.Hepworth wrote: > Rob > > Hehe - then of course there's lots and lots of regional accents in the UK....one old chap I knew when growing up could, for lots of towns and cities esp in Yorkshire, get the street where you brought in depending on your accent! > From support-lists at petdoctors.co.uk Mon Nov 19 17:07:51 2007 From: support-lists at petdoctors.co.uk (Nigel Kendrick) Date: Mon Nov 19 17:11:03 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <001001c82ace$b78b2c00$3c65a8c0@support01> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Joseph L. Casale Sent: Monday, November 19, 2007 4:28 PM To: 'mailscanner@lists.mailscanner.info' Subject: Beginner Question Hi, I was looking for a complete tutorial to setup a mail filter for our existing server and came upon the following article (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the comments below it, it stated the implementation of Mailscanner with postfix in this manner was unsupported? Can you guys confirm or deny this, and if so possibly recommend a similar tutorial? Thanks for any input! jlc Johnny Hughes has also written a comprehensive guide for installing Postfix with MailScanner and Squirrelmail: http://www.hughesjr.com/content/view/14/29/ -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071119/bc9c5506/attachment.html From Kevin_Miller at ci.juneau.ak.us Mon Nov 19 17:12:57 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Mon Nov 19 17:12:25 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> Message-ID: Glenn Steen wrote: > If we ever meet in person... Your view of my command of the language > will degrade pretty fast:-):-). One might know a word intimately, but > have never ever heard it pronounced... Makes for some quite hilarious > misconceptions/misunderstandings....:-) Language can be a great source of humor. I spent a year in Israel in the early eighties and one of the other volunteers at the kibbutz was a very nice young lady from Sweden. I would rib her a bit about her accent, so she took pains to speak as correctly as she could. One day while eating she gets up and said "I'm going to get more yelly for my jogurt." I cracked up. Somehow she didn't quite see the same humor in it... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From drew.marshall at technologytiger.net Mon Nov 19 17:16:42 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 19 17:16:57 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <21523.B1VcRQRQCQY=.1195492602.squirrel@www.technologytiger.net> On Mon, November 19, 2007 16:28, Joseph L. Casale wrote: > Hi, > I was looking for a complete tutorial to setup a mail filter for our existing > server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the > comments below it, it stated the implementation of Mailscanner with postfix in > this manner was unsupported? > > Can you guys confirm or deny this, and if so possibly recommend a similar > tutorial? I think that tutorial looks ok. The only 'unsupported method' was a very old two Postfix instances method, which is not recomended. I suspect the posted of the not supported comment was talking about the love/hate relationship the two pieces of software have for each other. You will find more details of the POstfix/ MailScanner politics in the wiki http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:politics Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From drew.marshall at technologytiger.net Mon Nov 19 17:27:22 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 19 17:27:34 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> Message-ID: <21951.B1VcRQRQCQY=.1195493242.squirrel@www.technologytiger.net> On Mon, November 19, 2007 13:31, Rob Sterenborg wrote: >>> So, we read and hear a lot of English although our pronunciation may >>> be horrible. However, there are a lot of words less commonly used >>> that a lot of people have never heard of and would never use so I >>> think, as a native English speaker, you'd spot the difference. > >> If we ever meet in person... Your view of my command of the language >> will degrade pretty fast:-):-). One might know a word intimately, but >> have never ever heard it pronounced... Makes for some quite hilarious >> misconceptions/misunderstandings....:-) > > Heheh, you mean something like this? Try it; I think I get most right.. > ;-) > http://baetzler.de/humor/english_pronounciation.html > > Actually, I think you'd be able to understand me perfectly well, but > hearing all kinds of accents ("real" English, southern American-English, > [add your flavour here]) and not speaking the language natively or often > with others will most probably make ones pronunciation, well, funny, I > think. :-) Oh well, so be it. ;^P Thing is you guys would know where to begin and taking Peter's point that Yale might sound like jail but I wouldn't even know where to begin with most languages. I can manage a bit of broken Spanish in a Fawlty Towers sort of way. My grasp of Nordic languages fails just after 'Volvo' and 'Saab'! Mind you I can understand the drive to learn English. Most dubbed films are just not there at all. It's quite distressing when you hear Angelina Jolie sounding like she ought to have chest hair! Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From drew.marshall at technologytiger.net Mon Nov 19 17:31:29 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 19 17:31:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: Message-ID: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> On Mon, November 19, 2007 09:43, Martin.Hepworth wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible - results of a > dodgy 1970's edukashun ;-) :-) > > But as for my Swedish - well I won't starve (used to work for Swedish co. about > 10 years ago), but it's no-where approaching the fluency Glenn has for English. > But then anyone under 50 in Sweden/Holland seems to have a better command of the > Ebglish language than I do.. Yeah, ain't that always the way. I can understand, most European countries teach proper English. We just use it. Still, if in doubt just shout louder :-) (That is a joke I hasten to add, in case some one takes offence to my 'classic Englishman abroad' style!) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From uxbod at splatnix.net Mon Nov 19 18:12:58 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 19 18:00:46 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> Message-ID: <2441343.17071195495978706.JavaMail.root@office.splatnix.net> Every country I visit whether on holiday or for work, I do try and learn a few phrases. Even though pronunciation is very bad locals do appreciate you making the effort. At least it gives them something smile and laugh about. Its sad more English people do not make the effort, for whatever reason, as the way you are treated does change. IMHO its only polite aswell. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Drew Marshall" To: "MailScanner discussion" Sent: Monday, November 19, 2007 5:31:29 PM (GMT) Europe/London Subject: RE: Minimum hardware capacity for 35k e-mail scans/day On Mon, November 19, 2007 09:43, Martin.Hepworth wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible - results of a > dodgy 1970's edukashun ;-) :-) > > But as for my Swedish - well I won't starve (used to work for Swedish co. about > 10 years ago), but it's no-where approaching the fluency Glenn has for English. > But then anyone under 50 in Sweden/Holland seems to have a better command of the > Ebglish language than I do.. Yeah, ain't that always the way. I can understand, most European countries teach proper English. We just use it. Still, if in doubt just shout louder :-) (That is a joke I hasten to add, in case some one takes offence to my 'classic Englishman abroad' style!) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Mon Nov 19 18:48:44 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 19 18:49:01 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <21951.B1VcRQRQCQY=.1195493242.squirrel@www.technologytiger.net> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> <21951.B1VcRQRQCQY=.1195493242.squirrel@www.technologytiger.net> Message-ID: on 11/19/2007 9:27 AM Drew Marshall spake the following: > On Mon, November 19, 2007 13:31, Rob Sterenborg wrote: >>>> So, we read and hear a lot of English although our pronunciation may >>>> be horrible. However, there are a lot of words less commonly used >>>> that a lot of people have never heard of and would never use so I >>>> think, as a native English speaker, you'd spot the difference. >>> If we ever meet in person... Your view of my command of the language >>> will degrade pretty fast:-):-). One might know a word intimately, but >>> have never ever heard it pronounced... Makes for some quite hilarious >>> misconceptions/misunderstandings....:-) >> Heheh, you mean something like this? Try it; I think I get most right.. >> ;-) >> http://baetzler.de/humor/english_pronounciation.html >> >> Actually, I think you'd be able to understand me perfectly well, but >> hearing all kinds of accents ("real" English, southern American-English, >> [add your flavour here]) and not speaking the language natively or often >> with others will most probably make ones pronunciation, well, funny, I >> think. :-) Oh well, so be it. ;^P > > Thing is you guys would know where to begin and taking Peter's point that Yale > might sound like jail but I wouldn't even know where to begin with most > languages. I can manage a bit of broken Spanish in a Fawlty Towers sort of way. > My grasp of Nordic languages fails just after 'Volvo' and 'Saab'! > > Mind you I can understand the drive to learn English. Most dubbed films are just > not there at all. It's quite distressing when you hear Angelina Jolie sounding > like she ought to have chest hair! > Doesn't she? In her "Tombraider" flicks, she seems capable of routing any male, although most might not put up too much of a fight! ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Mon Nov 19 18:52:32 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 19 18:55:07 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> References: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> Message-ID: on 11/19/2007 9:31 AM Drew Marshall spake the following: > On Mon, November 19, 2007 09:43, Martin.Hepworth wrote: >> Drew >> >> Well yes I'm from the UK, but my English grammer is terrible - results of a >> dodgy 1970's edukashun ;-) > > :-) > >> But as for my Swedish - well I won't starve (used to work for Swedish co. about >> 10 years ago), but it's no-where approaching the fluency Glenn has for English. >> But then anyone under 50 in Sweden/Holland seems to have a better command of the >> Ebglish language than I do.. > > Yeah, ain't that always the way. I can understand, most European countries teach > proper English. We just use it. Still, if in doubt just shout louder :-) > > (That is a joke I hasten to add, in case some one takes offence to my 'classic > Englishman abroad' style!) > > Drew That is also the American abroad joke. It implies that anyone can understand English if you speak It LOUD and ssllooww enough. I speak every language but Greek... but it is all Greek to me! (more poor humor) -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From uxbod at splatnix.net Mon Nov 19 19:08:03 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 19 18:55:48 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: Message-ID: <5278847.17161195499283655.JavaMail.root@office.splatnix.net> Perhaps we ought to get back on topic, or Jules set up another list ;) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From andy at tireswing.net Tue Nov 20 05:02:25 2007 From: andy at tireswing.net (Andy Norris) Date: Tue Nov 20 05:02:40 2007 Subject: slightly OT: 550 5.1.1 / att.net Message-ID: <20071120050213.715D0448009@tireswing3.arsalon.net> Hi Gang, I Googled and searched the archives, but didn't find anything that really helped the situation. I have two addresses in the past couple days that have given me fits. Both are att.net (and one belongs to the mother-in-law -- so it has to be fixed for peace to reign). Both result in immediate "550 5.1.1 - User unknown in virtual mailbox table". Is this something I can fix, or do I have to butt heads with someone at att.net support? We're running sendmail on redhat, btw. Thanks very much for any help, Andy Norris From andy at tireswing.net Tue Nov 20 05:43:28 2007 From: andy at tireswing.net (Andy Norris) Date: Tue Nov 20 05:43:49 2007 Subject: slightly OT: 550 5.1.1 / att.net In-Reply-To: <20071120050213.715D0448009@tireswing3.arsalon.net> References: <20071120050213.715D0448009@tireswing3.arsalon.net> Message-ID: <20071120054316.2707E448026@tireswing3.arsalon.net> At 23:02 2007-11-19, Andy Norris wrote: >Hi Gang, > >I Googled and searched the archives, but didn't find anything that >really helped the situation. >I have two addresses in the past couple days that have given me >fits. Both are att.net (and one belongs to the mother-in-law -- so >it has to be fixed for peace to reign). >Both result in immediate "550 5.1.1 - User unknown in virtual mailbox table". >Is this something I can fix, or do I have to butt heads with someone >at att.net support? >We're running sendmail on redhat, btw. > >Thanks very much for any help, > >Andy Norris ----------------------------------------------------------------------------------- Ok, I think this is a postfix issue. A setting somewhere in /etc/postfix/main.cf? I'm paranoid of breaking something that already is working. Odd that it's seemingly only to att.net addresses... no problems -- that I know of to any other domains...? Thanks, Andy From hvdkooij at vanderkooij.org Tue Nov 20 06:24:34 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Tue Nov 20 06:24:55 2007 Subject: slightly OT: 550 5.1.1 / att.net In-Reply-To: <20071120054316.2707E448026@tireswing3.arsalon.net> References: <20071120050213.715D0448009@tireswing3.arsalon.net> <20071120054316.2707E448026@tireswing3.arsalon.net> Message-ID: <47427DA2.7060904@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Andy Norris wrote: > > At 23:02 2007-11-19, Andy Norris wrote: > >> I Googled and searched the archives, but didn't find anything that >> really helped the situation. >> I have two addresses in the past couple days that have given me fits. >> Both are att.net (and one belongs to the mother-in-law -- so it has to >> be fixed for peace to reign). >> Both result in immediate "550 5.1.1 - User unknown in virtual mailbox >> table". >> Is this something I can fix, or do I have to butt heads with someone >> at att.net support? >> We're running sendmail on redhat, btw. > Ok, I think this is a postfix issue. A setting somewhere in > /etc/postfix/main.cf? I'm paranoid of breaking something that already is > working. > > Odd that it's seemingly only to att.net addresses... no problems -- that > I know of to any other domains...? Well. A bit more detail would not hurt. At this moment it is even unclear which MTA you are using. You started with sendmail but did throw in postfix as well to obscure about the only thing that might have been clear. I think it would help if you show relevant log lines, config sections, .... Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQn2gBvzDRVjxmYERArr4AKCdrkQsMRg5WHxtoB9WrS/E2Jrr3gCeKuGB oQkcyzmsCiFw2I9S6Po5iO8= =EPX5 -----END PGP SIGNATURE----- From glenn.steen at gmail.com Tue Nov 20 09:34:34 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 20 09:34:42 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <5278847.17161195499283655.JavaMail.root@office.splatnix.net> References: <5278847.17161195499283655.JavaMail.root@office.splatnix.net> Message-ID: <223f97700711200134l3feaeb8flb4435c69fae79e64@mail.gmail.com> On 19/11/2007, UxBoD wrote: > Perhaps we ought to get back on topic, or Jules set up another list ;) > > Regards, Ehm, perhaps that's why there's a Facebook MailScanner thing...:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From uxbod at splatnix.net Tue Nov 20 09:58:04 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 09:45:19 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711200134l3feaeb8flb4435c69fae79e64@mail.gmail.com> Message-ID: <25636089.17701195552684316.JavaMail.root@office.splatnix.net> indeed. last post by myself on Oct 17th. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Glenn Steen" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 9:34:34 AM (GMT) Europe/London Subject: Re: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day On 19/11/2007, UxBoD wrote: > Perhaps we ought to get back on topic, or Jules set up another list ;) > > Regards, Ehm, perhaps that's why there's a Facebook MailScanner thing...:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From shuttlebox at gmail.com Tue Nov 20 12:43:37 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Tue Nov 20 12:43:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4741526C.7040902@nerc.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> Message-ID: <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> On Nov 19, 2007 10:07 AM, Greg Matthews wrote: > Steve Freegard wrote: > > Julian Field wrote: > >> Only 1 process at a time can hold the BerkeleyDB open and write to it. > >> Lots of processes can hold the RDBMS open at once. It's all down to > >> file locking. > > > > See http://wiki.apache.org/spamassassin/BayesBenchmarkResults > > wow. Interesting stuff. So why does SA not use sdbm by default? I tested SDBM and it works just fine. My daily expire job went from over a minute to little over 10 seconds. Syncs are still completed so fast (0-1s) that I don't notice the difference. I wrote a wiki page on how to use SDBM based on Scott Silva's SQL guide. http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sdbm -- /peter From richard.thomas at psysolutions.com Tue Nov 20 14:45:22 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Tue Nov 20 14:45:25 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> References: <473C7B11.3020400@psysolutions.com> <473CCCD7.4050705@psysolutions.com> <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> Message-ID: <4742F302.9020606@psysolutions.com> Glenn Steen wrote: >> > Did you mention which version of MS you use? > > Cheers > 4.55.10. The version available for update is 4.58.9. We're not scheduled for an update but if this has been fixed (I couldn't find confirmation that it had), I would bring it forward. Rich -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071120/2690a0b5/attachment.html From martinh at solidstatelogic.com Tue Nov 20 14:51:57 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Tue Nov 20 14:51:56 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <4742F302.9020606@psysolutions.com> Message-ID: Richard 4.58 is quite old February 2007. latest code is 4.65.2. You using a O/S packaged version or something? Also which version of Exim? And what O/S and version? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Richard Thomas > Sent: 20 November 2007 14:45 > To: MailScanner discussion > Subject: Re: Exim timeouts - MailScanner related > > Glenn Steen wrote: > > > > > Did you mention which version of MS you use? > > Cheers > > > > > 4.55.10. The version available for update is 4.58.9. We're not scheduled > for an update but if this has been fixed (I couldn't find confirmation > that it had), I would bring it forward. > > Rich ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From glenn.steen at gmail.com Tue Nov 20 14:54:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 20 14:54:35 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <4742F302.9020606@psysolutions.com> References: <473C7B11.3020400@psysolutions.com> <473CCCD7.4050705@psysolutions.com> <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> <4742F302.9020606@psysolutions.com> Message-ID: <223f97700711200654q39d02c52l705d6a7380d988dc@mail.gmail.com> On 20/11/2007, Richard Thomas wrote: > > Glenn Steen wrote: > > > Did you mention which version of MS you use? > > Cheers > > > > 4.55.10. The version available for update is 4.58.9. We're not scheduled > for an update but if this has been fixed (I couldn't find confirmation that > it had), I would bring it forward. > > Rich > I'm not sure it has, either... But it is always a good thing to mention such things, in case someone else has stumbled on the same block:-). Both those versions are a bit old, so I gather this is some kind of packaging system putting this limit on your upgrade versions? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From hansklose at gmx.de Tue Nov 20 15:31:39 2007 From: hansklose at gmx.de (Hans Klose) Date: Tue Nov 20 15:31:41 2007 Subject: CustomFunktions and ContentType Field Message-ID: <20071120153139.128460@gmx.net> Hi can i read the contenttype field from a mailheader in a customfunktion. I already do this: >>my ($message) = @_; >>my $from = $message->{from}; and can use the "From" header field. How can i access the contentype? Specialy i need the charset of the mail. I tried: >>my $ContentType = $message->head->mime_attr('content-type'); but that does not work. Tanks Hans -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail From uxbod at splatnix.net Tue Nov 20 15:52:55 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 15:40:01 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <20071120153139.128460@gmx.net> Message-ID: <29363218.18361195573975297.JavaMail.root@office.splatnix.net> Hmmm, my $type = $entity->head->mime_attr('content-type'); is used within a lot of the modules, so I am surprised that this does not work for you. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Hans Klose" To: mailscanner@lists.mailscanner.info Sent: Tuesday, November 20, 2007 3:31:39 PM (GMT) Europe/London Subject: CustomFunktions and ContentType Field Hi can i read the contenttype field from a mailheader in a customfunktion. I already do this: >>my ($message) = @_; >>my $from = $message->{from}; and can use the "From" header field. How can i access the contentype? Specialy i need the charset of the mail. I tried: >>my $ContentType = $message->head->mime_attr('content-type'); but that does not work. Tanks Hans -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hansklose at gmx.de Tue Nov 20 15:48:16 2007 From: hansklose at gmx.de (Hans Klose) Date: Tue Nov 20 15:48:18 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <29363218.18361195573975297.JavaMail.root@office.splatnix.net> References: <29363218.18361195573975297.JavaMail.root@office.splatnix.net> Message-ID: <20071120154816.66340@gmx.net> I have that code from the modules ;-) and hoped it would work. But it does not. Thanks Hans Klose -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser From uxbod at splatnix.net Tue Nov 20 16:09:39 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 15:56:44 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <20071120154816.66340@gmx.net> Message-ID: <5671360.18421195574979137.JavaMail.root@office.splatnix.net> is the object being populated okay ? are you able to get any other attributes ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Hans Klose" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 3:48:16 PM (GMT) Europe/London Subject: Re: CustomFunktions and ContentType Field I have that code from the modules ;-) and hoped it would work. But it does not. Thanks Hans Klose -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hansklose at gmx.de Tue Nov 20 16:11:15 2007 From: hansklose at gmx.de (Hans Klose) Date: Tue Nov 20 16:11:18 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <5671360.18421195574979137.JavaMail.root@office.splatnix.net> References: <5671360.18421195574979137.JavaMail.root@office.splatnix.net> Message-ID: <20071120161115.187120@gmx.net> I already use this my $from = $message->{from}; and it works perfect! As far as i know i can use the variables at the top of the Message.pm So i think i must use the @header and search the field myself :-( Thanks Hans Klose -------- Original-Nachricht -------- > Datum: Tue, 20 Nov 2007 16:09:39 +0000 (GMT) > Von: UxBoD > An: MailScanner discussion > Betreff: Re: CustomFunktions and ContentType Field > is the object being populated okay ? are you able to get any other > attributes ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Hans Klose" > To: "MailScanner discussion" > Sent: Tuesday, November 20, 2007 3:48:16 PM (GMT) Europe/London > Subject: Re: CustomFunktions and ContentType Field > > I have that code from the modules ;-) and hoped it would work. > But it does not. > > Thanks > Hans Klose > > -- > Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten > Browser-Versionen downloaden: http://www.gmx.net/de/go/browser > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail From uxbod at splatnix.net Tue Nov 20 16:35:58 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 16:23:02 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <20071120161115.187120@gmx.net> Message-ID: <1883612.18511195576558592.JavaMail.root@office.splatnix.net> Have you included the necessary modules in your .pm ? ie. use MIME::Parser; Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Hans Klose" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 4:11:15 PM (GMT) Europe/London Subject: Re: CustomFunktions and ContentType Field I already use this my $from = $message->{from}; and it works perfect! As far as i know i can use the variables at the top of the Message.pm So i think i must use the @header and search the field myself :-( Thanks Hans Klose -------- Original-Nachricht -------- > Datum: Tue, 20 Nov 2007 16:09:39 +0000 (GMT) > Von: UxBoD > An: MailScanner discussion > Betreff: Re: CustomFunktions and ContentType Field > is the object being populated okay ? are you able to get any other > attributes ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Hans Klose" > To: "MailScanner discussion" > Sent: Tuesday, November 20, 2007 3:48:16 PM (GMT) Europe/London > Subject: Re: CustomFunktions and ContentType Field > > I have that code from the modules ;-) and hoped it would work. > But it does not. > > Thanks > Hans Klose > > -- > Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten > Browser-Versionen downloaden: http://www.gmx.net/de/go/browser > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From joey.da3rd at gmail.com Tue Nov 20 16:30:31 2007 From: joey.da3rd at gmail.com (Joey Marino) Date: Tue Nov 20 16:30:38 2007 Subject: Bayes not learning? exchange environment Message-ID: I recently installed a mailscanner filter in front of my exchange server. It was working fine for a few weeks then slowly let more and more spam through. Today it's letting alot of spam through. I am trying to verify that Bayes is learning, how would I do that? Also how do I verify that the spam rules are being updated? I also tried to place spam in a public folder on my exchange server and update bayes with these emails using this method provided by the wiki http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange It just stops executing at this line in the python script: log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % (SALEARN, PREFS, TMPFILE))) any ideas? I'm trying to determine what this line is accomplishing. Joey Marino From ssilva at sgvwater.com Tue Nov 20 17:09:06 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 17:09:32 2007 Subject: Bayes not learning? exchange environment In-Reply-To: References: Message-ID: on 11/20/2007 8:30 AM Joey Marino spake the following: > I recently installed a mailscanner filter in front of my exchange > server. It was working fine for a few weeks then slowly let more and > more spam through. Today it's letting alot of spam through. I am > trying to verify that Bayes is learning, how would I do that? Also how > do I verify that the spam rules are being updated? > > I also tried to place spam in a public folder on my exchange server > and update bayes with these emails using this method provided by the > wiki > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange > It just stops executing at this line in the python script: > log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % > (SALEARN, PREFS, TMPFILE))) > any ideas? I'm trying to determine what this line is accomplishing. > > Joey Marino Is there any bayes scores in the headers of the messages? Are you running any extra rules from rulesemporium.com? Are you properly set up to not accept mail to non-existent addresses? Does your exchange server have a non-public address that can only be reached by the mailscanner box? Otherwise the spammers will find it. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From MailScanner at ecs.soton.ac.uk Tue Nov 20 17:11:27 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 20 17:11:47 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> Message-ID: <4743153F.1010507@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 19, 2007 10:07 AM, Greg Matthews wrote: > >> Steve Freegard wrote: >> >>> Julian Field wrote: >>> >>>> Only 1 process at a time can hold the BerkeleyDB open and write to it. >>>> Lots of processes can hold the RDBMS open at once. It's all down to >>>> file locking. >>>> >>> See http://wiki.apache.org/spamassassin/BayesBenchmarkResults >>> >> wow. Interesting stuff. So why does SA not use sdbm by default? >> > > I tested SDBM and it works just fine. My daily expire job went from > over a minute to little over 10 seconds. Syncs are still completed so > fast (0-1s) that I don't notice the difference. I wrote a wiki page on > how to use SDBM based on Scott Silva's SQL guide. > > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sdbm > > I'm testing it out now. If it's as good as it is reckoned to be, how about I make it the default in new installations? (i.e. change mailscanner.cf to use it) Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQxVFEfZZRxQVtlQRAoofAKC2MPPG3XTWM4Zbh+Zq1ocoavjLbQCgqTnB FReKzGQR7TJkm3br/GQOch4= =9jtF -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Tue Nov 20 17:15:42 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 17:16:12 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> Message-ID: on 11/20/2007 4:43 AM shuttlebox spake the following: > On Nov 19, 2007 10:07 AM, Greg Matthews wrote: >> Steve Freegard wrote: >>> Julian Field wrote: >>>> Only 1 process at a time can hold the BerkeleyDB open and write to it. >>>> Lots of processes can hold the RDBMS open at once. It's all down to >>>> file locking. >>> See http://wiki.apache.org/spamassassin/BayesBenchmarkResults >> wow. Interesting stuff. So why does SA not use sdbm by default? > > I tested SDBM and it works just fine. My daily expire job went from > over a minute to little over 10 seconds. Syncs are still completed so > fast (0-1s) that I don't notice the difference. I wrote a wiki page on > how to use SDBM based on Scott Silva's SQL guide. > > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sdbm > I can't take credit for that guide. I only was in there fixing up some old broken links. It was originally done by Dhawal Doshy, and nudged and poked by a few of us. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Tue Nov 20 17:21:21 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 17:21:36 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: References: <4742F302.9020606@psysolutions.com> Message-ID: on 11/20/2007 6:51 AM Martin.Hepworth spake the following: > Richard > > 4.58 is quite old February 2007. latest code is 4.65.2. You using a O/S packaged version or something? > > Also which version of Exim? > > And what O/S and version? > With Exim and old versions of MailScanner it probably is a Debian or Ubuntu install. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From Kevin_Miller at ci.juneau.ak.us Tue Nov 20 17:22:24 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Tue Nov 20 17:21:42 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4743153F.1010507@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk><473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com><4741526C.7040902@nerc.ac.uk><625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> Message-ID: Julian Field wrote: > I'm testing it out now. If it's as good as it is reckoned to be, how > about I make it the default in new installations? (i.e. change > mailscanner.cf to use it) That would be just fine by me. Thanks Jules... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From mailscanner at yeticomputers.com Tue Nov 20 17:31:02 2007 From: mailscanner at yeticomputers.com (Rick Chadderdon) Date: Tue Nov 20 17:31:25 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4743153F.1010507@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> Message-ID: <474319D6.3080403@yeticomputers.com> Julian Field wrote: > I'm testing it out now. If it's as good as it is reckoned to be, how > about I make it the default in new installations? (i.e. change > mailscanner.cf to use it) SDBM has been criticized (and rejected for several projects) for having a small (1Kbyte or 2Kbytes, depending on where I look) maximum record size. I do not know enough about the SA database to say whether this will be a potential factor in using SDBM with SpamAssassin, but perhaps someone with more knowledge can use this information. If we can count on SA always keeping the records smaller than SDBM's max, this sounds like a good way to increase performance. On the other hand, it's the kind of thing that SA could cause to break with a relatively simple change in what they store in the DB Rick From prandal at herefordshire.gov.uk Tue Nov 20 17:52:07 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue Nov 20 17:52:15 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474319D6.3080403@yeticomputers.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com><4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA0218074A@HC-MBX02.herefordshire.gov.uk> See http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4530 "Make SDBM default bayes store" Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Rick Chadderdon > Sent: 20 November 2007 17:31 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > Julian Field wrote: > > I'm testing it out now. If it's as good as it is reckoned to be, how > > about I make it the default in new installations? (i.e. change > > mailscanner.cf to use it) > SDBM has been criticized (and rejected for several projects) > for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, > but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > > Rick > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From MailScanner at ecs.soton.ac.uk Tue Nov 20 18:08:03 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 20 18:08:24 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474319D6.3080403@yeticomputers.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> Message-ID: <47432283.4000100@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rick Chadderdon wrote: > Julian Field wrote: > >> I'm testing it out now. If it's as good as it is reckoned to be, how >> about I make it the default in new installations? (i.e. change >> mailscanner.cf to use it) >> > SDBM has been criticized (and rejected for several projects) for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > Another criticism of SDBM: I just tried converting my Bayes db files (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQyKJEfZZRxQVtlQRAns0AKDgxUeJUN2J4Xk4Ri4Cu3zNKKOzUQCgx1uW 61w3u9rtWj2lxl1OOu0VEyY= =rCQa -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Tue Nov 20 18:26:21 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 18:13:26 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432283.4000100@ecs.soton.ac.uk> Message-ID: <5153665.18811195583181876.JavaMail.root@office.splatnix.net> Ouch! But does the performance benefit still hold true even at that size ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Julian Field" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 6:08:03 PM (GMT) Europe/London Subject: Re: Minimum hardware capacity for 35k e-mail scans/day -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rick Chadderdon wrote: > Julian Field wrote: > >> I'm testing it out now. If it's as good as it is reckoned to be, how >> about I make it the default in new installations? (i.e. change >> mailscanner.cf to use it) >> > SDBM has been criticized (and rejected for several projects) for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > Another criticism of SDBM: I just tried converting my Bayes db files (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQyKJEfZZRxQVtlQRAns0AKDgxUeJUN2J4Xk4Ri4Cu3zNKKOzUQCgx1uW 61w3u9rtWj2lxl1OOu0VEyY= =rCQa -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ms-list at alexb.ch Tue Nov 20 18:53:12 2007 From: ms-list at alexb.ch (Alex Broens) Date: Tue Nov 20 18:53:30 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432283.4000100@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> Message-ID: <47432D18.8040005@alexb.ch> On 11/20/2007 7:08 PM, Julian Field wrote: > Another criticism of SDBM: I just tried converting my Bayes db files > (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) imho, a 670MB Bayes DB is a massive perfomance hog. Using autolearn and expiring every night, I doubt you'd really need more than the default settings. You'd probably be surprised how fast SA will process your mail with a less than 50 MB token file. If you are counting the Bayes_seen file, this irrelevant and can be deleted unless you need sa-learn to "forget" msgs. Alex From shuttlebox at gmail.com Tue Nov 20 19:17:50 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Tue Nov 20 19:17:52 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432283.4000100@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> Message-ID: <625385e30711201117p23576707yf4697d238798b544@mail.gmail.com> On Nov 20, 2007 7:08 PM, Julian Field wrote: > Another criticism of SDBM: I just tried converting my Bayes db files > (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) 670 MB? I had problems with earlier versions of SA that the tokens file and seen file never stopped growing, I could expire the tokens file but nothing helped with the seen file. I assumed that a huge db must be detrimental to performance so once in a while I removed the files and let it start over, I find that the hit ratio is not much affected of this. In later versions I've never had any problems with this, both the tokens and seen files reach a maximum size and stay there. The db is way less than 670 MB, more like 67 MB, so I'm wondering if you've had your db since a few versions back of SA? I will check tomorrow for any difference in db size after my switch to SDBM. Our resident SA guru, Matt Kettler, is a user of SDBM according to a post from the SA list a year ago. Maybe he will comment on it here too. -- /peter From MailScanner at ecs.soton.ac.uk Tue Nov 20 19:22:36 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 20 19:22:55 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432D18.8040005@alexb.ch> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> <47432D18.8040005@alexb.ch> Message-ID: <474333FC.9070800@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Broens wrote: > On 11/20/2007 7:08 PM, Julian Field wrote: >> Another criticism of SDBM: I just tried converting my Bayes db files >> (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) > > imho, a 670MB Bayes DB is a massive perfomance hog. > Using autolearn and expiring every night, I doubt you'd really need > more than the default settings. You'd probably be surprised how fast > SA will process your mail with a less than 50 MB token file. > > If you are counting the Bayes_seen file, this irrelevant and can be > deleted unless you need sa-learn to "forget" msgs. Yes, I was. Good to know I can just delete this. Can you just confirm that deleting the bayes_seen* files is safe, before I do it? Thanks. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQzQCEfZZRxQVtlQRAuq8AJ915wFS9sknFsD/Xs+vFOVD1ybb7QCeI6zX ZcKbTfprOiNNpUYtyyrCBHA= =5kR4 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From shuttlebox at gmail.com Tue Nov 20 19:33:19 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Tue Nov 20 19:33:21 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474333FC.9070800@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> <47432D18.8040005@alexb.ch> <474333FC.9070800@ecs.soton.ac.uk> Message-ID: <625385e30711201133y5ffc47b9qaa315569f761ebab@mail.gmail.com> On Nov 20, 2007 8:22 PM, Julian Field wrote: > Yes, I was. Good to know I can just delete this. Can you just confirm > that deleting the bayes_seen* files is safe, before I do it? I would shut down MS and copy the files first so you can get back because I tried deleting bayes_seen before when it just grew and grew and the db got corrupt from it, had to start over. -- /peter From ms-list at alexb.ch Tue Nov 20 20:08:57 2007 From: ms-list at alexb.ch (Alex Broens) Date: Tue Nov 20 20:09:08 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474333FC.9070800@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> <47432D18.8040005@alexb.ch> <474333FC.9070800@ecs.soton.ac.uk> Message-ID: <47433ED9.6050107@alexb.ch> On 11/20/2007 8:22 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Alex Broens wrote: >> On 11/20/2007 7:08 PM, Julian Field wrote: >>> Another criticism of SDBM: I just tried converting my Bayes db files >>> (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) >> imho, a 670MB Bayes DB is a massive perfomance hog. >> Using autolearn and expiring every night, I doubt you'd really need >> more than the default settings. You'd probably be surprised how fast >> SA will process your mail with a less than 50 MB token file. >> >> If you are counting the Bayes_seen file, this irrelevant and can be >> deleted unless you need sa-learn to "forget" msgs. > Yes, I was. Good to know I can just delete this. Can you just confirm > that deleting the bayes_seen* files is safe, before I do it? > yep its safe... 100% *unless" you want to run sa-learn --forget, for example via Mailwatcatch - even then, you'd hardly need more than 1 month worth's of data best it to cron a rm -f to avoid surprises. I've come across 50 GB seen files automagically pruning the bayes_seen file is a RFE on SA Bugzilla Alex From rwahyudi at gmail.com Tue Nov 20 22:59:22 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Tue Nov 20 22:57:43 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <474366CA.2060901@gmail.com> I have been running MailScanner + Postfix for 1 and a half years. I did more than 5 update to postfix & mailscanner and I did not encounter any single issue or data loss. I think what the commentator meant by "unsupported" is that if you post question on postfix forum and you mentioned that you use mailscanner they will ask you not to use mailscanner before they can help you. This happen to me before, but then I post my question on mailscanner and I get immediate help :) Regards, Rianto Wahyudi Joseph L. Casale wrote: > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading > the comments below it, it stated the implementation of Mailscanner > with postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a > similar tutorial? > > > > Thanks for any input! > jlc > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/ee5175ce/attachment-0001.html From joey.da3rd at gmail.com Tue Nov 20 23:51:21 2007 From: joey.da3rd at gmail.com (Joey Marino) Date: Tue Nov 20 23:51:28 2007 Subject: Bayes not learning? exchange environment Message-ID: >> I recently installed a mailscanner filter in front of my exchange >> server. It was working fine for a few weeks then slowly let more and >> more spam through. Today it's letting alot of spam through. I am >> trying to verify that Bayes is learning, how would I do that? Also how >> do I verify that the spam rules are being updated? >> >> I also tried to place spam in a public folder on my exchange server >> and update bayes with these emails using this method provided by the >> wiki >> http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange >> It just stops executing at this line in the python script: >> log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % .> (SALEARN, PREFS, TMPFILE))) >> any ideas? I'm trying to determine what this line is accomplishing. >> >> Joey Marino >Is there any bayes scores in the headers of the messages? >Are you running any extra rules from rulesemporium.com? >Are you properly set up to not accept mail to non-existent addresses? >Does your exchange server have a non-public address that can only be reached >by the mailscanner box? Otherwise the spammers will find it. 1. I am new to this, so please excuse any dumbness I may portray I am not sure how to read the headers other than the reports from MailWatch Here is an example header: Return-Path: Received: from pyszczek (bhc145.neoplus.adsl.tpnet.pl [83.28.92.145]) by localhost.localdomain (8.13.1/8.13.1) with ESMTP id lAKNStWv009338 for ; Tue, 20 Nov 2007 18:28:57 -0500 Received: from [83.28.92.145] by mx1.biz.mail.yahoo.com; Wed, 21 Nov 2007 00:28:56 +0100 Message-ID: <01c82bd5$80c67fa0$915c1c53@lbarlow> From: "Marty Kimball" To: Subject: MoneybackPolicyInternationalPharShipping Date: Wed, 21 Nov 2007 00:28:56 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C82BD5.80C67FA0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2905 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905 Now the information in the rows following "SpamAssassin" in this particular report show all [N]'s In the messages that were recognized as spam, The "SpamAssassin Autolearn:" row show's [Y] I hope that answers the first question 2. I ran rules_du_jour (which is also in my cron tab) and the report shows that I did update rules from SARE. This message was in my summary report: No index found for ruleset named ANTIDRUG. Check that this ruleset is still valid. 3. I don't think I am set up to not accept mail to non-existent addresses, I didn't create a list of existing email addresses or link it to my exchange server active directory. How would I do this and how would this help? 4. I believe the exchange server does have a private address. All incoming SMTP requests are staticly routed to the mailscanner box. I ran a DNS lookup for the hostname of the box and nothing was found. How else would I verify this to be correct? -- Joey Marino -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071120/e4dacd5a/attachment.html From ssilva at sgvwater.com Tue Nov 20 23:51:18 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 23:51:34 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: References: <47363BDA.5050202@vanderkooij.org> Message-ID: on 11/11/2007 1:42 PM Scott Silva spake the following: > on 11/10/2007 3:16 PM Hugo van der Kooij spake the following: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hi, >> >> I have created an experimental setup with wrapper that should allow one >> to install MailScanner through yum for RHEL 5 or Centos 5 if one has >> already added the rpmforge repository. >> >> I put up the details on http://yum.vanderkooij.org/ >> >> I will try to install some other virtual machines and test other >> distributions if I can find the time. >> >> It is rather simple and I think it will be possible to keep it that way. >> So I hope when the test show good results Jules will be able to maintain >> a repository himself with minimal effort. >> >> If anyone is willing to give it a spin. Please do so, so we can work out >> anything I might have overlooked. >> >> Hugo. > I have a couple of new servers that will just be coming out of stress > testing. > I will do a wipe and install on one and give it a try this week. > Ran this repo today and it gets all requires very well. Installed on X86-64 with no issues. Are there any optional modules that anyone thinks are helpful? I would vote for perl-Mail-ClamAV, perl-Convert-TNEF, and maybe the SPF modules for spamassassin. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From pete at enitech.com.au Wed Nov 21 01:29:36 2007 From: pete at enitech.com.au (Peter Russell) Date: Wed Nov 21 01:29:47 2007 Subject: Super Slow Queue Processing Message-ID: <47438A00.2040409@enitech.com.au> Hi there, we have a MailScanner system that has had a lot (any) attention for 6 months or so and all of a sudden it is unable to process the messages in the queue faster than they are building up. Doing an sa -D -t < on any of the high scoring spam messages i have is very quick (less than 5sec). there was some error about hash from sa-learn --force-expire, a google revealed naught so i disabled bayes for now. but it maks no difference. But changing Use Spamassassin to no means the queue is processed lightening quick. which seems weird because SA appears to run quite quick. The messages do eventually seem to get processed but it takes quite a while (upto 30min) and the queue seems to be growing muh quicker than processing. MS debug takes AGES. I cant seem to find anything useful or interesting in the logs, i have attached the output of the MS debug (yes i need to update clamav). Appreciate ANY tips on how to diagnose (or hopefully fix) this. :) Many thanks Pete MailScanner version 4.55.9 SpamAssassin version 3.1.8 running on Perl version 5.8.5 Linux Centos 2.6.9-11.ELsmp Postfix 2.3 (HOLD method) tarting MailScanner daemons: incoming postfix : [ OK ] outgoing postfix : [ OK ] MailScanner: In Debugging mode, not forking... LibClamAV Warning: ******************************************************** LibClamAV Warning: *** This version of the ClamAV engine is outdated. *** LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html *** LibClamAV Warning: ******************************************************** LibClamAV Warning: ******************************************************** LibClamAV Warning: *** This version of the ClamAV engine is outdated. *** LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html *** LibClamAV Warning: ******************************************************** Ignore errors about failing to find EOCD signature format error: can't find EOCD signature at /usr/sbin/MailScanner line 820 format error: can't find EOCD signature at /usr/sbin/MailScanner line 820 Stopping now as you are debugging me. commit ineffective with AutoCommit enabled at /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, line 1422. Commmit ineffective while AutoCommit is on at /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, line 1422. [ OK ] From rwahyudi at gmail.com Wed Nov 21 01:39:55 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Wed Nov 21 01:38:04 2007 Subject: Super Slow Queue Processing In-Reply-To: <47438A00.2040409@enitech.com.au> References: <47438A00.2040409@enitech.com.au> Message-ID: <47438C6B.9040707@gmail.com> Make sure : Delivery Method = batch Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/174ce88f/attachment.html From pete at enitech.com.au Wed Nov 21 02:07:58 2007 From: pete at enitech.com.au (Peter Russell) Date: Wed Nov 21 02:08:08 2007 Subject: Super Slow Queue Processing In-Reply-To: <47438C6B.9040707@gmail.com> References: <47438A00.2040409@enitech.com.au> <47438C6B.9040707@gmail.com> Message-ID: <474392FE.9080009@enitech.com.au> Yep it is, as default - almost everything is default i dont mess around with timing or processing options. thanks Pete R Wahyudi wrote: > > Make sure : > Delivery Method = batch > > Regards, > Rianto Wahyudi > > > From Richard.Frovarp at sendit.nodak.edu Wed Nov 21 04:23:46 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Wed Nov 21 04:23:56 2007 Subject: Super Slow Queue Processing In-Reply-To: <47438A00.2040409@enitech.com.au> References: <47438A00.2040409@enitech.com.au> Message-ID: <4743B2D2.9020901@sendit.nodak.edu> Peter Russell wrote: > Hi there, we have a MailScanner system that has had a lot (any) > attention for 6 months or so and all of a sudden it is unable to > process the messages in the queue faster than they are building up. > > Doing an sa -D -t < on any of the high scoring spam messages i have is > very quick (less than 5sec). there was some error about hash from > sa-learn --force-expire, a google revealed naught so i disabled bayes > for now. but it maks no difference. > > But changing Use Spamassassin to no means the queue is processed > lightening quick. which seems weird because SA appears to run quite > quick. > > The messages do eventually seem to get processed but it takes quite a > while (upto 30min) and the queue seems to be growing muh quicker than > processing. > > MS debug takes AGES. > > I cant seem to find anything useful or interesting in the logs, i have > attached the output of the MS debug (yes i need to update clamav). > > Appreciate ANY tips on how to diagnose (or hopefully fix) this. :) > > Many thanks > Pete Do your lints work? Have you ran sa-update? Are you swapping? My two guesses would be thrashing or a slow DNS lookup or timeout. If you are doing your testing on a machine that processed the message or has access to the same DNS, the result would be cached. You can run MailScanner --debug --debug-sa to see the SA debug output on a batch. You might be able to get a feel for where SA is hanging in the process on incoming messages and it might give you an idea. It's possible you have been blocked from SpamHaus or are using a service that has been shut down (hence the sa-update question). From edward at tdcs.com.au Wed Nov 21 06:15:33 2007 From: edward at tdcs.com.au (Edward Dekkers) Date: Wed Nov 21 06:16:15 2007 Subject: Whitelist not working? Message-ID: I'm trying to send an archive RAR file to a friend. It is a 25Mb RAR file with nested folders. The first dramas I had was getting Postfix to accept the damn thing. (now resolved) The drama is now that MailScanner blocks it ("MailScanner: Message contained archive nested too deeply") I've added the domain where it's going to the whitelist (/opt/MailSCanner/etc/rules/spam.whitelist.rules) But it still seems to be blocking. Is there any way I can get MailScanner to just ignore checking mails to this domain and just send the bloody mail through? Regards, Ed. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From neilw at dcdata.co.za Wed Nov 21 06:33:17 2007 From: neilw at dcdata.co.za (Neil Wilson) Date: Wed Nov 21 06:35:33 2007 Subject: Kernel crash, MailScanner mentioned Message-ID: <4743D12D.5020706@dcdata.co.za> Hi guys, I realise this might not be caused by MailScanner, but I've got a server running SLES 10 SP1 i586 that's crashing nearly every night. In the logs I see it does mentioned something about MS, but not sure if this means that it's actually MS causing the problem. The kernel it's using is "Linux mail 2.6.16.46-0.12-smp #1 SMP Thu May 17 14:00:09 UTC 2007 i686 i686 i386 GNU/Linux" If anyone could point me in the right direction I'll be more than grateful. I can't run an update on the SLES as it's not registered yet, as the client only wants to register in the new year, but needed the server straight away. Nov 20 19:51:39 mail kernel: ------------[ cut here ]------------ Nov 20 19:51:39 mail kernel: kernel BUG at mm/page_alloc.c:295! Nov 20 19:51:39 mail kernel: invalid opcode: 0000 [#1] Nov 20 19:51:39 mail kernel: SMP Nov 20 19:51:39 mail kernel: last sysfs file: /firmware/edd/int13_dev80/extensions Nov 20 19:51:39 mail kernel: Modules linked in: xt_limit xt_state xt_MARK ipt_MASQUERADE xt_tcpudp ipt_REJECT ipt_LOG iptable_mangle iptable_nat iptable_filt er ip_tables x_tables ip_nat_ftp ip_nat ip_conntrack_ftp ip_conntrack nfnetlink af_packet cpufreq_ondemand cpufreq_userspace cpufreq_powersave speedstep_cent rino freq_table button battery ac loop dm_mod hw_random i915 drm e1000 intel_agp shpchp pci_hotplug uhci_hcd ehci_hcd ahci agpgart ohci1394 i2c_i801 i2c_core pata_jmicron usbcore ieee1394 sundance mii parport_pc lp parport ext3 jbd edd fan thermal processor pata_marvell sg ata_piix libata generic sd_mod scsi_mod ide_disk ide_core Nov 20 19:51:39 mail kernel: CPU: 1 Nov 20 19:51:39 mail kernel: EIP: 0060:[] Not tainted VLI Nov 20 19:51:39 mail kernel: EFLAGS: 00210002 (2.6.16.46-0.12-smp #1) Nov 20 19:51:39 mail kernel: EIP is at free_pages_bulk+0x12c/0x1e4 Nov 20 19:51:39 mail kernel: eax: 00000001 ebx: c13cdb00 ecx: c13cdb00 edx: 00000001 Nov 20 19:51:39 mail kernel: esi: 000006d9 edi: c13cdb20 ebp: 00000000 esp: e84fdd80 Nov 20 19:51:39 mail kernel: ds: 007b es: 007b ss: 0068 Nov 20 19:51:39 mail kernel: Process MailScanner (pid: 24234, threadinfo=e84fc000 task=dfe9eb70) Nov 20 19:51:39 mail kernel: Stack: <0>c030188c 0000001c c0301780 00000000 00000001 00000001 c14d4aa0 c0301880 Nov 20 19:51:39 mail kernel: 00200202 c0301780 c0149cba 00000000 00000003 e84fdde8 e84fddd8 0000000d Nov 20 19:51:39 mail kernel: c0149ce1 c14db140 c0301780 c17de14c c014c1d9 0000000e 0000000e 00000000 Nov 20 19:51:39 mail kernel: Call Trace: Nov 20 19:51:39 mail kernel: [] free_hot_cold_page+0xdf/0xee Nov 20 19:51:39 mail kernel: [] __pagevec_free+0x18/0x22 Nov 20 19:51:39 mail kernel: [] release_pages+0xff/0x13f Nov 20 19:51:39 mail kernel: [] free_pages_and_swap_cache+0x6b/0x7f Nov 20 19:51:39 mail kernel: [] exit_mmap+0xb0/0xda Nov 20 19:51:39 mail kernel: [] mmput+0x20/0x76 Nov 20 19:51:39 mail kernel: [] flush_old_exec+0x6dd/0x90d Nov 20 19:51:39 mail kernel: [] vfs_read+0x110/0x150 Nov 20 19:51:39 mail kernel: [] kernel_read+0x32/0x3c Nov 20 19:51:39 mail kernel: [] load_elf_binary+0x438/0x12f7 Nov 20 19:51:39 mail kernel: [] __alloc_pages+0x57/0x2a5 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] search_binary_handler+0xa2/0x1fe Nov 20 19:51:39 mail kernel: [] do_execve+0x16c/0x215 Nov 20 19:51:39 mail kernel: [] sys_execve+0x2b/0x68 Nov 20 19:51:39 mail kernel: [] sysenter_past_esp+0x54/0x79 Nov 20 19:51:39 mail kernel: Code: c1 e0 05 8d 1c 07 8b 03 a9 00 00 08 00 74 7c 8b 43 0c 39 e8 89 44 24 0c 75 71 8b 03 89 d9 f6 c4 40 74 02 89 e9 8b 41 04 40 74 08 <0f> 0b 27 01 eb 7f 2c c0 8d 4b 18 8b 53 18 8b 41 04 89 42 04 89 Thanks Neil PS: Accidentally subscribed to announce instead of the mailscanner list, and when canceling after my subscription I hit a mailman bug. "Bug in Mailman version 2.1.5 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly inhibited, but the webmaster can find this information in the Mailman error logs" -- This email and all contents are subject to the following disclaimer: http://www.dcdata.co.za/emaildisclaimer.html From hvdkooij at vanderkooij.org Wed Nov 21 07:54:42 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 21 07:55:08 2007 Subject: Whitelist not working? In-Reply-To: References: Message-ID: <4743E442.9060504@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Edward Dekkers wrote: > I'm trying to send an archive RAR file to a friend. It is a 25Mb RAR file > with nested folders. > > The first dramas I had was getting Postfix to accept the damn thing. (now > resolved) > > The drama is now that MailScanner blocks it ("MailScanner: Message contained > archive nested too deeply") > > I've added the domain where it's going to the whitelist > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) That is a rather unusual spot. What version of MailScanner are you running? How did you install it? What does the file actual look like? And what does the config section look like in which you actually call upon this rules file? And finally did you restart MS after you did make the changes? Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQ+RABvzDRVjxmYERAl++AJ9QEBRsB3J92vS+HGRmBBWkrN5StwCfZmVK qJIbPOkT1yQl4RcYDkYrQRs= =2A+k -----END PGP SIGNATURE----- From hvdkooij at vanderkooij.org Wed Nov 21 08:15:10 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 21 08:15:37 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: References: <47363BDA.5050202@vanderkooij.org> Message-ID: <4743E90E.4000208@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Silva wrote: > Ran this repo today and it gets all requires very well. Installed on > X86-64 with no issues. Are there any optional modules that anyone thinks > are helpful? > I would vote for perl-Mail-ClamAV, perl-Convert-TNEF, and maybe the SPF > modules for spamassassin. There is not really an optional thing in rpm terms. So if the requirement is defined one is stuck with the modules wether one uses them or not. I am not sure what would be wise here. Perhaps two wrappers instead of one. So the current one defines the absolute minimum and a mailscanner-wrapper-complete version that will pull in lots of other usefull modules as well as the basic wrapper but some of these extra modules may never be used depending on the configuration. In such case I would also like to describe them briefly. So one can discard the outer wrapper and then remove the unneeded modules with a small guidance. I am thinking along the lines of a text file with entries like: Requires: Nothing fancy (TM). Feel free to think out loud on the matter. I didn't hesitate either ;-) Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQ+kMBvzDRVjxmYERApV2AJkBdWLk4VwuNbr6F8wZht5+xQ55cACfSlWE KocQHt5bf0MNQ8BaET1k9cA= =ymJB -----END PGP SIGNATURE----- From shuttlebox at gmail.com Wed Nov 21 08:22:21 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 21 08:22:23 2007 Subject: Whitelist not working? In-Reply-To: References: Message-ID: <625385e30711210022r420ed087k5a8542955a8dc89e@mail.gmail.com> On Nov 21, 2007 7:15 AM, Edward Dekkers wrote: > I'm trying to send an archive RAR file to a friend. It is a 25Mb RAR file > with nested folders. > > The first dramas I had was getting Postfix to accept the damn thing. (now > resolved) > > The drama is now that MailScanner blocks it ("MailScanner: Message contained > archive nested too deeply") > > I've added the domain where it's going to the whitelist > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) > > But it still seems to be blocking. > > Is there any way I can get MailScanner to just ignore checking mails to this > domain and just send the bloody mail through? The spam whitelist only whitelists spam, nothing else. Try setting "Maximum Archive Depth" to 0 and see if that helps. If so, you can leave it at that or create a ruleset to have different values for different senders. -- /peter From uxbod at splatnix.net Wed Nov 21 08:54:10 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 21 08:40:41 2007 Subject: Super Slow Queue Processing In-Reply-To: <4743B2D2.9020901@sendit.nodak.edu> Message-ID: <25006419.19141195635250930.JavaMail.root@office.splatnix.net> Check what RBLs you are using. A few are no longer active which produces the symptom of slow batch processing. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Richard Frovarp" To: "MailScanner discussion" Sent: Wednesday, November 21, 2007 4:23:46 AM (GMT) Europe/London Subject: Re: Super Slow Queue Processing Peter Russell wrote: > Hi there, we have a MailScanner system that has had a lot (any) > attention for 6 months or so and all of a sudden it is unable to > process the messages in the queue faster than they are building up. > > Doing an sa -D -t < on any of the high scoring spam messages i have is > very quick (less than 5sec). there was some error about hash from > sa-learn --force-expire, a google revealed naught so i disabled bayes > for now. but it maks no difference. > > But changing Use Spamassassin to no means the queue is processed > lightening quick. which seems weird because SA appears to run quite > quick. > > The messages do eventually seem to get processed but it takes quite a > while (upto 30min) and the queue seems to be growing muh quicker than > processing. > > MS debug takes AGES. > > I cant seem to find anything useful or interesting in the logs, i have > attached the output of the MS debug (yes i need to update clamav). > > Appreciate ANY tips on how to diagnose (or hopefully fix) this. :) > > Many thanks > Pete Do your lints work? Have you ran sa-update? Are you swapping? My two guesses would be thrashing or a slow DNS lookup or timeout. If you are doing your testing on a machine that processed the message or has access to the same DNS, the result would be cached. You can run MailScanner --debug --debug-sa to see the SA debug output on a batch. You might be able to get a feel for where SA is hanging in the process on incoming messages and it might give you an idea. It's possible you have been blocked from SpamHaus or are using a service that has been shut down (hence the sa-update question). -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From martinh at solidstatelogic.com Wed Nov 21 08:46:20 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 21 08:46:52 2007 Subject: SDBM (was: Minimum hardware capacity for 35k e-mail scans/day) In-Reply-To: <474319D6.3080403@yeticomputers.com> Message-ID: Tried it and my box ground to a halt after 30 mins of trying to do the sa-learn --restore. Must be semaphores or something....couldn't even login a the console. Luckily a CTRL-C on the sa-learn brought everthing back. My bayes seems to be 330MB so that's kinda large, and the SDBM was growing slowly and had got to 260MB when it all ground to a halt....maybe my 2.8Piv and 1.5GB ram ain't enough ;-) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Rick Chadderdon > Sent: 20 November 2007 17:31 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > Julian Field wrote: > > I'm testing it out now. If it's as good as it is reckoned to be, how > > about I make it the default in new installations? (i.e. change > > mailscanner.cf to use it) > SDBM has been criticized (and rejected for several projects) for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > > Rick > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From shuttlebox at gmail.com Wed Nov 21 09:11:56 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 21 09:12:00 2007 Subject: SDBM (was: Minimum hardware capacity for 35k e-mail scans/day) In-Reply-To: References: <474319D6.3080403@yeticomputers.com> Message-ID: <625385e30711210111i7c40f48anbccbe91687bc48aa@mail.gmail.com> On Nov 21, 2007 9:46 AM, Martin.Hepworth wrote: > > Tried it and my box ground to a halt after 30 mins of trying to do the sa-learn --restore. > > Must be semaphores or something....couldn't even login a the console. Luckily a CTRL-C on the sa-learn brought everthing back. > > My bayes seems to be 330MB so that's kinda large, and the SDBM was growing slowly and had got to 260MB when it all ground to a halt....maybe my 2.8Piv and 1.5GB ram ain't enough ;-) I have never understood why so many put so much effort into Bayes. It's just one test out of many. If I'm not interpreting the output from the expire option incorrectly around 50-75% of the tokens get deleted when I do my daily expire from cron. If the database refreshes at that rate, what's the point of trying to keep an old database at any cost? The content may not be very old anyway. I haven't seen any real difference in accuracy from a new db starting to score after learning 200 spam and ham each to a db that is over three months old. I have never bothered with learning either, I have just trusted the autolearning mechanism to do it for me. Maybe my Bayes gets fooled more often than a "properly" trained one but I doubt it's possible to avoid anyway due to how Bayes works so I just lowered the negative scoring of low probability Bayes hits. If you can't convert your old db, just rename the old files and start over with a new db. You can always go back. :-) -- /peter From Andreas.Kasenides at cs.ucy.ac.cy Wed Nov 21 09:16:04 2007 From: Andreas.Kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Wed Nov 21 09:16:07 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <4743F754.5080304@cs.ucy.ac.cy> I am a relatively newcomer to the MailScanner land but I have been running mail servers (sendmail for too many years to admit and postfix for the last 3 years) and I have come across this Postfix-with-MS incompatibility issue. Apparently the Postfix developers are seriously anti-MS because MS DOES not use their own way of message passing between the SMTP processes and the MS processes (apparently they recommend LMTP). I have read a lot of this on the Postfix lists and while there is a serious issue of how a message is moved from the SMTP service to the virus/spam-detecting service I have come to the conclusion that there are only a couple of issues that need to be clarified from the MS point of view (the rest seems politics to me which I cannot comment since I do not know the players involved): 1. How does MS make sure that when dealing with the incoming Postfix queue it does not ake a mess of it? In other words how does MS know that a message in the queue is free and ready to be processed and that Postfix is not working on it? 2. Apparently the Postfix guys believe that the queue file structure is there own internal "thing" which they do not or would not make public and if a new upgraded structure is created MS will fail miserably upon Postfix upgrade. Remember that MS depends on this structure to properly make changes in the files. I was very suddened by the discussion in the Postfix lists. In my view this sort of thing should happen in the commercial software world, not on open source projects. I would appreciate an answer (even if it is obvious) from somebody that knows enough of the internals of MS. thanks! Andreas Kasenides Joseph L. Casale wrote: > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading > the comments below it, it stated the implementation of Mailscanner > with postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a > similar tutorial? > > > > Thanks for any input! > jlc > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/d312f779/attachment.html From martinh at solidstatelogic.com Wed Nov 21 09:28:23 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 21 09:28:27 2007 Subject: Beginner Question In-Reply-To: <4743F754.5080304@cs.ucy.ac.cy> Message-ID: <7a024000cc6dda42830bd0aee4573d32@solidstatelogic.com> Andreas See "http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:politics" For a FACT based response to all this... -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Andreas Kasenides > Sent: 21 November 2007 09:16 > To: MailScanner discussion > Subject: Re: Beginner Question > > I am a relatively newcomer to the MailScanner land but I have been running > mail servers > (sendmail for too many years to admit and postfix for the last 3 years) > and I have come > across this Postfix-with-MS incompatibility issue. Apparently the Postfix > developers > are seriously anti-MS because MS DOES not use their own way of message > passing > between the SMTP processes and the MS processes (apparently they recommend > LMTP). > I have read a lot of this on the Postfix lists and while there is a > serious issue of how > a message is moved from the SMTP service to the virus/spam-detecting > service I have come to the > conclusion that there are only a couple of issues that need to be > clarified from the MS point of view > (the rest seems politics to me which I cannot comment since I do not know > the players involved): > > 1. How does MS make sure that when dealing with the incoming Postfix queue > it does not ake a mess > of it? In other words how does MS know that a message in the queue is free > and ready to be processed > and that Postfix is not working on it? > 2. Apparently the Postfix guys believe that the queue file structure is > there own internal "thing" > which they do not or would not make public and if a new upgraded structure > is created MS will fail miserably > upon Postfix upgrade. Remember that MS depends on this structure to > properly make changes in the > files. > > I was very suddened by the discussion in the Postfix lists. In my view > this sort of thing should > happen in the commercial software world, not on open source projects. > I would appreciate an answer (even if it is obvious) from somebody that > knows enough of the internals > of MS. > > thanks! > Andreas Kasenides > > Joseph L. Casale wrote: > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the > comments below it, it stated the implementation of Mailscanner with > postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a > similar tutorial? > > > > Thanks for any input! > jlc > ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From uxbod at splatnix.net Wed Nov 21 09:44:06 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 21 09:30:32 2007 Subject: Beginner Question In-Reply-To: <4743F754.5080304@cs.ucy.ac.cy> Message-ID: <11753835.19261195638246990.JavaMail.root@office.splatnix.net> Andreas, 1) As part of the installation for Postfix and MailScanner the main.cf file is changed so that a header check is performed on every email that is processed. As "Received" appears in all messages, RFC compliance, then the message is put into a hold queue. MailScanner monitors this directory and when it sees messages it will process them, and on successfully processing, will the deliver them into the outbound queue for Postfix to deliver. If MailScanner was to die half way through processing a message it would still be safe, as it does not remove the message from the hold queue until such time successful processing has taken place. 2) Yes the queue file structure is their "own internal thing", but we are talking about OSS here so anybody is free to view the code and make the necessary changes to MailScanner. Obviously when upgrading Postfix on a server you have to ensure that the revision being installed is compatible with MailScanner, so when they do/if change the structure wait until a suitable MailScanner revision has been released. This is purely my understanding, and I am sure somebody will correct my mistakes ;) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Andreas Kasenides" To: "MailScanner discussion" Sent: Wednesday, November 21, 2007 9:16:04 AM (GMT) Europe/London Subject: Re: Beginner Question I am a relatively newcomer to the MailScanner land but I have been running mail servers (sendmail for too many years to admit and postfix for the last 3 years) and I have come across this Postfix-with-MS incompatibility issue. Apparently the Postfix developers are seriously anti-MS because MS DOES not use their own way of message passing between the SMTP processes and the MS processes (apparently they recommend LMTP). I have read a lot of this on the Postfix lists and while there is a serious issue of how a message is moved from the SMTP service to the virus/spam-detecting service I have come to the conclusion that there are only a couple of issues that need to be clarified from the MS point of view (the rest seems politics to me which I cannot comment since I do not know the players involved): 1. How does MS make sure that when dealing with the incoming Postfix queue it does not ake a mess of it? In other words how does MS know that a message in the queue is free and ready to be processed and that Postfix is not working on it? 2. Apparently the Postfix guys believe that the queue file structure is there own internal "thing" which they do not or would not make public and if a new upgraded structure is created MS will fail miserably upon Postfix upgrade. Remember that MS depends on this structure to properly make changes in the files. I was very suddened by the discussion in the Postfix lists. In my view this sort of thing should happen in the commercial software world, not on open source projects. I would appreciate an answer (even if it is obvious) from somebody that knows enough of the internals of MS. thanks! Andreas Kasenides Joseph L. Casale wrote: Hi, I was looking for a complete tutorial to setup a mail filter for our existing server and came upon the following article ( http://www.howtoforge.com/linux_spam_filter_mail_gateway ) but reading the comments below it, it stated the implementation of Mailscanner with postfix in this manner was unsupported? Can you guys confirm or deny this, and if so possibly recommend a similar tutorial? Thanks for any input! jlc -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From cerit at teleord.co.uk Wed Nov 21 09:41:53 2007 From: cerit at teleord.co.uk (Ceri) Date: Wed Nov 21 09:43:32 2007 Subject: Notifications not being recieved Message-ID: <4743FD61.4040402@teleord.co.uk> Hi, I have recently built installed MailScanner, to compliment an existing sendmail setup. It all seems to be running fine, except that I do not seem to be getting any spam notifications, I still seem to be receiving the spam. I have setup notifications to only go to one email address as a test. MailScanner --lint does not show any errors, so I am not sure where to look next. I am running MailScanner 4.65.3 on Redhat 9. spam.actions.rules contains: # Rules for processing Spam # To: ceri.townsend@vnuinc.co.uk store notify FromOrTo: Default store deliver header "X-Spam-Status: Yes" Here is my Mailscanner.conf: %org-name% = nielsenbook %org-long-name% = Nielsen Book %web-site% = www.your-organisation.com %etc-dir% = /etc/MailScanner %report-dir% = /etc/MailScanner/reports/en %rules-dir% = /etc/MailScanner/rules %mcp-dir% = /etc/MailScanner/mcp Max Children = 5 Run As User = Run As Group = Queue Scan Interval = 6 Incoming Queue Dir = /var/spool/mqueue.in Outgoing Queue Dir = /var/spool/mqueue Incoming Work Dir = /var/spool/MailScanner/incoming Quarantine Dir = /var/spool/MailScanner/quarantine PID file = /var/run/MailScanner.pid Restart Every = 7200 MTA = sendmail Sendmail = /usr/sbin/sendmail Sendmail2 = /usr/sbin/sendmail Incoming Work Group = clamav Incoming Work Permissions = 0644 Quarantine User = root Quarantine Group = mailwatch Quarantine Permissions = 0660 Max Unscanned Bytes Per Scan = 100m Max Unsafe Bytes Per Scan = 50m Max Unscanned Messages Per Scan = 30 Max Unsafe Messages Per Scan = 30 Max Normal Queue Size = 800 Scan Messages = %rules-dir%/ignore.messages.rules Reject Message = no Maximum Attachments Per Message = 200 Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = /usr/bin/tnef --maxsize=100000000 TNEF Timeout = 120 File Command = /usr/bin/file File Timeout = 20 Gunzip Command = /bin/gunzip Gunzip Timeout = 50 Unrar Command = /usr/bin/unrar Unrar Timeout = 50 Find UU-Encoded Files = no Maximum Message Size = %rules-dir%/max.message.size.rules Maximum Attachment Size = -1 Minimum Attachment Size = -1 Maximum Archive Depth = 2 Find Archives By Content = yes Zip Attachments = no Attachments Zip Filename = MessageAttachments.zip Attachments Min Total Size To Zip = 100k Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml Virus Scanning = yes Virus Scanners = clamav Virus Scanner Timeout = 300 Deliver Disinfected Files = no Silent Viruses = HTML-IFrame All-Viruses Still Deliver Silent Viruses = no Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar Block Encrypted Messages = no Block Unencrypted Messages = no Allow Password-Protected Archives = yes Check Filenames In Password-Protected Archives = yes Allowed Sophos Error Messages = Sophos IDE Dir = /opt/sophos-av/lib/sav Sophos Lib Dir = /opt/sophos-av/lib Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide Monitors for ClamAV Updates = /usr/local/share/clamav/*.inc/* /usr/local/share/clamav/*.cvd ClamAVmodule Maximum Recursion Level = 8 ClamAVmodule Maximum Files = 1000 ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes) ClamAVmodule Maximum Compression Ratio = 250 Clamd Port = 3310 Clamd Socket = /tmp/clamd Clamd Lock File = # /var/lock/subsys/clamd Clamd Use Threads = no ClamAV Full Message Scan = yes Dangerous Content Scanning = yes Allow Partial Messages = no Allow External Message Bodies = no Find Phishing Fraud = yes Also Find Numeric Phishing = yes Use Stricter Phishing Net = yes Highlight Phishing Fraud = yes Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf Country Sub-Domains List = %etc-dir%/country.domains.conf Allow IFrame Tags = disarm Allow Form Tags = disarm Allow Script Tags = disarm Allow WebBugs = disarm Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap Known Web Bug Servers = msgtag.com Web Bug Replacement = http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif Allow Object Codebase Tags = disarm Convert Dangerous HTML To Text = no Convert HTML To Text = no Allow Filenames = Deny Filenames = Filename Rules = %etc-dir%/filename.rules.conf Allow Filetypes = Deny Filetypes = Filetype Rules = %etc-dir%/filetype.rules.conf Quarantine Infections = yes Quarantine Silent Viruses = no Quarantine Modified Body = no Quarantine Whole Message = yes Quarantine Whole Messages As Queue Files = no Keep Spam And MCP Archive Clean = no Language Strings = %report-dir%/languages.conf Rejection Report = %report-dir%/rejection.report.txt Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt Deleted Size Message Report = %report-dir%/deleted.size.message.txt Stored Bad Content Message Report = %report-dir%/stored.content.message.txt Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt Stored Virus Message Report = %report-dir%/stored.virus.message.txt Stored Size Message Report = %report-dir%/stored.size.message.txt Disinfected Report = %report-dir%/disinfected.report.txt Inline HTML Signature = %report-dir%/inline.sig.html Inline Text Signature = %report-dir%/inline.sig.txt Signature Image Filename = %report-dir%/sig.jpg Signature Image Filename = signature.jpg Inline HTML Warning = %report-dir%/inline.warning.html Inline Text Warning = %report-dir%/inline.warning.txt Sender Content Report = %report-dir%/sender.content.report.txt Sender Error Report = %report-dir%/sender.error.report.txt Sender Bad Filename Report = %report-dir%/sender.filename.report.txt Sender Virus Report = %report-dir%/sender.virus.report.txt Sender Size Report = %report-dir%/sender.size.report.txt Hide Incoming Work Dir = yes Include Scanner Name In Reports = yes Mail Header = X-%org-name%-MailScanner: Spam Header = X-%org-name%-MailScanner-SpamCheck: Spam Score Header = X-%org-name%-MailScanner-SpamScore: Information Header = X-%org-name%-MailScanner-Information: Add Envelope From Header = yes Add Envelope To Header = no Envelope From Header = X-%org-name%-MailScanner-From: Envelope To Header = X-%org-name%-MailScanner-To: Spam Score Character = s SpamScore Number Instead Of Stars = no Minimum Stars If On Spam List = 0 Clean Header Value = Found to be clean Infected Header Value = Found to be infected Disinfected Header Value = Disinfected Information Header Value = Please contact the ISP for more information Detailed Spam Report = yes Include Scores In SpamAssassin Report = yes Always Include SpamAssassin Report = no Multiple Headers = append Hostname = the %org-name% ($HOSTNAME) MailScanner Sign Messages Already Processed = no Sign Clean Messages = yes Attach Image To Signature = no Attach Image To HTML Message Only = yes Mark Infected Messages = yes Mark Unscanned Messages = yes Unscanned Header Value = Not scanned: please contact your Internet E-Mail Service Provider for details Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2: Deliver Cleaned Messages = yes Notify Senders = yes Notify Senders Of Viruses = no Notify Senders Of Blocked Filenames Or Filetypes = yes Notify Senders Of Blocked Size Attachments = yes Notify Senders Of Other Blocked Content = no Never Notify Senders Of Precedence = list bulk Scanned Modify Subject = no # end Scanned Subject Text = {Scanned} Virus Modify Subject = start Virus Subject Text = {Virus?} Filename Modify Subject = start Filename Subject Text = {Filename?} Content Modify Subject = start Content Subject Text = {Dangerous Content?} Size Modify Subject = start Size Subject Text = {Size} Disarmed Modify Subject = start Disarmed Subject Text = {Disarmed} Phishing Modify Subject = no Phishing Subject Text = {Fraud?} Spam Modify Subject = start Spam Subject Text = {Spam?} High Scoring Spam Modify Subject = start High Scoring Spam Subject Text = {Spam?} Warning Is Attachment = yes Attachment Warning Filename = %org-name%-Attachment-Warning.txt Attachment Encoding Charset = ISO-8859-1 Archive Mail = Send Notices = yes Notices Include Full Headers = yes Hide Incoming Work Dir in Notices = no Notice Signature = -- \nMailScanner\nEmail Virus Scanner\nwww.mailscanner.info Notices From = MailScanner Notices To = postmaster Local Postmaster = postmaster Spam List Definitions = %etc-dir%/spam.lists.conf Virus Scanner Definitions = %etc-dir%/virus.scanners.conf Spam Checks = yes Spam List = # spamhaus-ZEN # You can un-comment this to enable them Spam Domain List = Spam Lists To Be Spam = 1 Spam Lists To Reach High Score = 3 Spam List Timeout = 10 Max Spam List Timeouts = 7 Spam List Timeouts History = 10 Is Definitely Not Spam = &SQLWhitelist Is Definitely Spam = &SQLBlacklist Definite Spam Is High Scoring = no Ignore Spam Whitelist If Recipients Exceed = 20 Max Spam Check Size = 200k Use Watermarking = no Add Watermark = yes Check Watermarks With No Sender = yes Treat Invalid Watermarks With No Sender as Spam = nothing Check Watermarks To Skip Spam Checks = yes Watermark Secret = %org-name%-Secret Watermark Lifetime = 604800 Watermark Header = X-%org-name%-MailScanner-Watermark: Use SpamAssassin = yes Max SpamAssassin Size = 200k Required SpamAssassin Score = 3 High SpamAssassin Score = 10 SpamAssassin Auto Whitelist = yes SpamAssassin Timeout = 75 Max SpamAssassin Timeouts = 10 SpamAssassin Timeouts History = 30 Check SpamAssassin If On Spam List = yes Include Binary Attachments In SpamAssassin = no Spam Score = yes Cache SpamAssassin Results = yes SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db Rebuild Bayes Every = 0 Wait During Bayes Rebuild = no Use Custom Spam Scanner = no Max Custom Spam Scanner Size = 20k Custom Spam Scanner Timeout = 20 Max Custom Spam Scanner Timeouts = 10 Custom Spam Scanner Timeout History = 20 Spam Actions = spam.actions.rules High Scoring Spam Actions = store delete header "X-Spam-Status: Yes" Non Spam Actions = deliver header "X-Spam-Status: No" SpamAssassin Rule Actions = Sender Spam Report = %report-dir%/sender.spam.report.txt Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt Inline Spam Warning = %report-dir%/inline.spam.warning.txt Recipient Spam Report = %report-dir%/recipient.spam.report.txt Enable Spam Bounce = %rules-dir%/bounce.rules Bounce Spam As Attachment = no Syslog Facility = mail Log Speed = no Log Spam = no Log Non Spam = no Log Permitted Filenames = no Log Permitted Filetypes = no Log Silent Viruses = no Log Dangerous HTML Tags = no SpamAssassin Temporary Dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin User State Dir = SpamAssassin Install Prefix = SpamAssassin Site Rules Dir = /etc/mail/spamassassin SpamAssassin Local Rules Dir = SpamAssassin Local State Dir = # /var/lib/spamassassin SpamAssassin Default Rules Dir = MCP Checks = no First Check = spam MCP Required SpamAssassin Score = 1 MCP High SpamAssassin Score = 10 MCP Error Score = 1 MCP Header = X-%org-name%-MailScanner-MCPCheck: Non MCP Actions = deliver MCP Actions = deliver High Scoring MCP Actions = deliver Bounce MCP As Attachment = no MCP Modify Subject = start MCP Subject Text = {MCP?} High Scoring MCP Modify Subject = start High Scoring MCP Subject Text = {MCP?} Is Definitely MCP = no Is Definitely Not MCP = no Definite MCP Is High Scoring = no Always Include MCP Report = no Detailed MCP Report = yes Include Scores In MCP Report = no Log MCP = no MCP Max SpamAssassin Timeouts = 20 MCP Max SpamAssassin Size = 100k MCP SpamAssassin Timeout = 10 MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf MCP SpamAssassin User State Dir = MCP SpamAssassin Local Rules Dir = %mcp-dir% MCP SpamAssassin Default Rules Dir = %mcp-dir% MCP SpamAssassin Install Prefix = %mcp-dir% Recipient MCP Report = %report-dir%/recipient.mcp.report.txt Sender MCP Report = %report-dir%/sender.mcp.report.txt Use Default Rules With Multiple Recipients = no Spam Score Number Format = %d MailScanner Version Number = 4.65.3 SpamAssassin Cache Timings = 1800,300,10800,172800,600 Debug = no Debug SpamAssassin = no Run In Foreground = no Always Looked Up Last = &MailWatchLogging Always Looked Up Last After Batch = no Deliver In Background = yes Delivery Method = batch Split Exim Spool = no Lockfile Dir = /tmp Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions Lock Type = Minimum Code Status = supported Could anyone point me in the right direction? Cheers Ceri From uxbod at splatnix.net Wed Nov 21 10:00:28 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 21 09:46:58 2007 Subject: Notifications not being recieved In-Reply-To: <4743FD61.4040402@teleord.co.uk> Message-ID: <27494134.19411195639228584.JavaMail.root@office.splatnix.net> Have you run MS in debug mode ? If not stop all MS processes and then execute MailScanner --debug. Please post the output, and also check /var/log/messages for any errors. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ceri" To: mailscanner@lists.mailscanner.info Sent: Wednesday, November 21, 2007 9:41:53 AM (GMT) Europe/London Subject: Notifications not being recieved Hi, I have recently built installed MailScanner, to compliment an existing sendmail setup. It all seems to be running fine, except that I do not seem to be getting any spam notifications, I still seem to be receiving the spam. I have setup notifications to only go to one email address as a test. MailScanner --lint does not show any errors, so I am not sure where to look next. I am running MailScanner 4.65.3 on Redhat 9. spam.actions.rules contains: # Rules for processing Spam # To: ceri.townsend@vnuinc.co.uk store notify FromOrTo: Default store deliver header "X-Spam-Status: Yes" Here is my Mailscanner.conf: %org-name% = nielsenbook %org-long-name% = Nielsen Book %web-site% = www.your-organisation.com %etc-dir% = /etc/MailScanner %report-dir% = /etc/MailScanner/reports/en %rules-dir% = /etc/MailScanner/rules %mcp-dir% = /etc/MailScanner/mcp Max Children = 5 Run As User = Run As Group = Queue Scan Interval = 6 Incoming Queue Dir = /var/spool/mqueue.in Outgoing Queue Dir = /var/spool/mqueue Incoming Work Dir = /var/spool/MailScanner/incoming Quarantine Dir = /var/spool/MailScanner/quarantine PID file = /var/run/MailScanner.pid Restart Every = 7200 MTA = sendmail Sendmail = /usr/sbin/sendmail Sendmail2 = /usr/sbin/sendmail Incoming Work Group = clamav Incoming Work Permissions = 0644 Quarantine User = root Quarantine Group = mailwatch Quarantine Permissions = 0660 Max Unscanned Bytes Per Scan = 100m Max Unsafe Bytes Per Scan = 50m Max Unscanned Messages Per Scan = 30 Max Unsafe Messages Per Scan = 30 Max Normal Queue Size = 800 Scan Messages = %rules-dir%/ignore.messages.rules Reject Message = no Maximum Attachments Per Message = 200 Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = /usr/bin/tnef --maxsize=100000000 TNEF Timeout = 120 File Command = /usr/bin/file File Timeout = 20 Gunzip Command = /bin/gunzip Gunzip Timeout = 50 Unrar Command = /usr/bin/unrar Unrar Timeout = 50 Find UU-Encoded Files = no Maximum Message Size = %rules-dir%/max.message.size.rules Maximum Attachment Size = -1 Minimum Attachment Size = -1 Maximum Archive Depth = 2 Find Archives By Content = yes Zip Attachments = no Attachments Zip Filename = MessageAttachments.zip Attachments Min Total Size To Zip = 100k Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml Virus Scanning = yes Virus Scanners = clamav Virus Scanner Timeout = 300 Deliver Disinfected Files = no Silent Viruses = HTML-IFrame All-Viruses Still Deliver Silent Viruses = no Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar Block Encrypted Messages = no Block Unencrypted Messages = no Allow Password-Protected Archives = yes Check Filenames In Password-Protected Archives = yes Allowed Sophos Error Messages = Sophos IDE Dir = /opt/sophos-av/lib/sav Sophos Lib Dir = /opt/sophos-av/lib Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide Monitors for ClamAV Updates = /usr/local/share/clamav/*.inc/* /usr/local/share/clamav/*.cvd ClamAVmodule Maximum Recursion Level = 8 ClamAVmodule Maximum Files = 1000 ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes) ClamAVmodule Maximum Compression Ratio = 250 Clamd Port = 3310 Clamd Socket = /tmp/clamd Clamd Lock File = # /var/lock/subsys/clamd Clamd Use Threads = no ClamAV Full Message Scan = yes Dangerous Content Scanning = yes Allow Partial Messages = no Allow External Message Bodies = no Find Phishing Fraud = yes Also Find Numeric Phishing = yes Use Stricter Phishing Net = yes Highlight Phishing Fraud = yes Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf Country Sub-Domains List = %etc-dir%/country.domains.conf Allow IFrame Tags = disarm Allow Form Tags = disarm Allow Script Tags = disarm Allow WebBugs = disarm Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap Known Web Bug Servers = msgtag.com Web Bug Replacement = http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif Allow Object Codebase Tags = disarm Convert Dangerous HTML To Text = no Convert HTML To Text = no Allow Filenames = Deny Filenames = Filename Rules = %etc-dir%/filename.rules.conf Allow Filetypes = Deny Filetypes = Filetype Rules = %etc-dir%/filetype.rules.conf Quarantine Infections = yes Quarantine Silent Viruses = no Quarantine Modified Body = no Quarantine Whole Message = yes Quarantine Whole Messages As Queue Files = no Keep Spam And MCP Archive Clean = no Language Strings = %report-dir%/languages.conf Rejection Report = %report-dir%/rejection.report.txt Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt Deleted Size Message Report = %report-dir%/deleted.size.message.txt Stored Bad Content Message Report = %report-dir%/stored.content.message.txt Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt Stored Virus Message Report = %report-dir%/stored.virus.message.txt Stored Size Message Report = %report-dir%/stored.size.message.txt Disinfected Report = %report-dir%/disinfected.report.txt Inline HTML Signature = %report-dir%/inline.sig.html Inline Text Signature = %report-dir%/inline.sig.txt Signature Image Filename = %report-dir%/sig.jpg Signature Image Filename = signature.jpg Inline HTML Warning = %report-dir%/inline.warning.html Inline Text Warning = %report-dir%/inline.warning.txt Sender Content Report = %report-dir%/sender.content.report.txt Sender Error Report = %report-dir%/sender.error.report.txt Sender Bad Filename Report = %report-dir%/sender.filename.report.txt Sender Virus Report = %report-dir%/sender.virus.report.txt Sender Size Report = %report-dir%/sender.size.report.txt Hide Incoming Work Dir = yes Include Scanner Name In Reports = yes Mail Header = X-%org-name%-MailScanner: Spam Header = X-%org-name%-MailScanner-SpamCheck: Spam Score Header = X-%org-name%-MailScanner-SpamScore: Information Header = X-%org-name%-MailScanner-Information: Add Envelope From Header = yes Add Envelope To Header = no Envelope From Header = X-%org-name%-MailScanner-From: Envelope To Header = X-%org-name%-MailScanner-To: Spam Score Character = s SpamScore Number Instead Of Stars = no Minimum Stars If On Spam List = 0 Clean Header Value = Found to be clean Infected Header Value = Found to be infected Disinfected Header Value = Disinfected Information Header Value = Please contact the ISP for more information Detailed Spam Report = yes Include Scores In SpamAssassin Report = yes Always Include SpamAssassin Report = no Multiple Headers = append Hostname = the %org-name% ($HOSTNAME) MailScanner Sign Messages Already Processed = no Sign Clean Messages = yes Attach Image To Signature = no Attach Image To HTML Message Only = yes Mark Infected Messages = yes Mark Unscanned Messages = yes Unscanned Header Value = Not scanned: please contact your Internet E-Mail Service Provider for details Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2: Deliver Cleaned Messages = yes Notify Senders = yes Notify Senders Of Viruses = no Notify Senders Of Blocked Filenames Or Filetypes = yes Notify Senders Of Blocked Size Attachments = yes Notify Senders Of Other Blocked Content = no Never Notify Senders Of Precedence = list bulk Scanned Modify Subject = no # end Scanned Subject Text = {Scanned} Virus Modify Subject = start Virus Subject Text = {Virus?} Filename Modify Subject = start Filename Subject Text = {Filename?} Content Modify Subject = start Content Subject Text = {Dangerous Content?} Size Modify Subject = start Size Subject Text = {Size} Disarmed Modify Subject = start Disarmed Subject Text = {Disarmed} Phishing Modify Subject = no Phishing Subject Text = {Fraud?} Spam Modify Subject = start Spam Subject Text = {Spam?} High Scoring Spam Modify Subject = start High Scoring Spam Subject Text = {Spam?} Warning Is Attachment = yes Attachment Warning Filename = %org-name%-Attachment-Warning.txt Attachment Encoding Charset = ISO-8859-1 Archive Mail = Send Notices = yes Notices Include Full Headers = yes Hide Incoming Work Dir in Notices = no Notice Signature = -- \nMailScanner\nEmail Virus Scanner\nwww.mailscanner.info Notices From = MailScanner Notices To = postmaster Local Postmaster = postmaster Spam List Definitions = %etc-dir%/spam.lists.conf Virus Scanner Definitions = %etc-dir%/virus.scanners.conf Spam Checks = yes Spam List = # spamhaus-ZEN # You can un-comment this to enable them Spam Domain List = Spam Lists To Be Spam = 1 Spam Lists To Reach High Score = 3 Spam List Timeout = 10 Max Spam List Timeouts = 7 Spam List Timeouts History = 10 Is Definitely Not Spam = &SQLWhitelist Is Definitely Spam = &SQLBlacklist Definite Spam Is High Scoring = no Ignore Spam Whitelist If Recipients Exceed = 20 Max Spam Check Size = 200k Use Watermarking = no Add Watermark = yes Check Watermarks With No Sender = yes Treat Invalid Watermarks With No Sender as Spam = nothing Check Watermarks To Skip Spam Checks = yes Watermark Secret = %org-name%-Secret Watermark Lifetime = 604800 Watermark Header = X-%org-name%-MailScanner-Watermark: Use SpamAssassin = yes Max SpamAssassin Size = 200k Required SpamAssassin Score = 3 High SpamAssassin Score = 10 SpamAssassin Auto Whitelist = yes SpamAssassin Timeout = 75 Max SpamAssassin Timeouts = 10 SpamAssassin Timeouts History = 30 Check SpamAssassin If On Spam List = yes Include Binary Attachments In SpamAssassin = no Spam Score = yes Cache SpamAssassin Results = yes SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db Rebuild Bayes Every = 0 Wait During Bayes Rebuild = no Use Custom Spam Scanner = no Max Custom Spam Scanner Size = 20k Custom Spam Scanner Timeout = 20 Max Custom Spam Scanner Timeouts = 10 Custom Spam Scanner Timeout History = 20 Spam Actions = spam.actions.rules High Scoring Spam Actions = store delete header "X-Spam-Status: Yes" Non Spam Actions = deliver header "X-Spam-Status: No" SpamAssassin Rule Actions = Sender Spam Report = %report-dir%/sender.spam.report.txt Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt Inline Spam Warning = %report-dir%/inline.spam.warning.txt Recipient Spam Report = %report-dir%/recipient.spam.report.txt Enable Spam Bounce = %rules-dir%/bounce.rules Bounce Spam As Attachment = no Syslog Facility = mail Log Speed = no Log Spam = no Log Non Spam = no Log Permitted Filenames = no Log Permitted Filetypes = no Log Silent Viruses = no Log Dangerous HTML Tags = no SpamAssassin Temporary Dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin User State Dir = SpamAssassin Install Prefix = SpamAssassin Site Rules Dir = /etc/mail/spamassassin SpamAssassin Local Rules Dir = SpamAssassin Local State Dir = # /var/lib/spamassassin SpamAssassin Default Rules Dir = MCP Checks = no First Check = spam MCP Required SpamAssassin Score = 1 MCP High SpamAssassin Score = 10 MCP Error Score = 1 MCP Header = X-%org-name%-MailScanner-MCPCheck: Non MCP Actions = deliver MCP Actions = deliver High Scoring MCP Actions = deliver Bounce MCP As Attachment = no MCP Modify Subject = start MCP Subject Text = {MCP?} High Scoring MCP Modify Subject = start High Scoring MCP Subject Text = {MCP?} Is Definitely MCP = no Is Definitely Not MCP = no Definite MCP Is High Scoring = no Always Include MCP Report = no Detailed MCP Report = yes Include Scores In MCP Report = no Log MCP = no MCP Max SpamAssassin Timeouts = 20 MCP Max SpamAssassin Size = 100k MCP SpamAssassin Timeout = 10 MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf MCP SpamAssassin User State Dir = MCP SpamAssassin Local Rules Dir = %mcp-dir% MCP SpamAssassin Default Rules Dir = %mcp-dir% MCP SpamAssassin Install Prefix = %mcp-dir% Recipient MCP Report = %report-dir%/recipient.mcp.report.txt Sender MCP Report = %report-dir%/sender.mcp.report.txt Use Default Rules With Multiple Recipients = no Spam Score Number Format = %d MailScanner Version Number = 4.65.3 SpamAssassin Cache Timings = 1800,300,10800,172800,600 Debug = no Debug SpamAssassin = no Run In Foreground = no Always Looked Up Last = &MailWatchLogging Always Looked Up Last After Batch = no Deliver In Background = yes Delivery Method = batch Split Exim Spool = no Lockfile Dir = /tmp Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions Lock Type = Minimum Code Status = supported Could anyone point me in the right direction? Cheers Ceri -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From edward at tdcs.com.au Wed Nov 21 09:56:49 2007 From: edward at tdcs.com.au (Edward Dekkers) Date: Wed Nov 21 09:58:40 2007 Subject: Whitelist not working? In-Reply-To: <4743E442.9060504@vanderkooij.org> References: <4743E442.9060504@vanderkooij.org> Message-ID: <1195639009.16413.9.camel@ubuntu> > > I've added the domain where it's going to the whitelist > > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) > > That is a rather unusual spot. What version of MailScanner are you > running? How did you install it? Using instructions found here: http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu I'm not a hero with server configuration but this how-to has given me a good working well set up. > > What does the file actual look like? Thusly: ---snip--- # If you are basing a blacklist on this then you can refer to # a null (empty) sender address with "/^$/" as the address to match. # # This is where you can build a Spam WhiteList # Addresses matching in here, with the value # "yes" will never be marked as spam. #From: 152.78. yes #From: 130.246. yes FromOrTo: default no From: *@legendwebshop.com yes FromOrTo: *@corporait.com yes ---snip--- I'm trying to send the 25Mb attachment to corporait.com > And what does the config section > look like in which you actually call upon this rules file? ---snip--- # Spam Whitelist: # Make this point to a ruleset, and anything in that ruleset whose value # is "yes" will *never* be marked as spam. # The whitelist check is done before the blacklist check. If anyone whitelists # a message, then all recipients get the message. If no-one has whitelisted it, # then the blacklist is checked. # This setting over-rides the "Is Definitely Spam" setting. # This can also be the filename of a ruleset. #Is Definitely Not Spam = no Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules ---snip--- > > And finally did you restart MS after you did make the changes? Sorry - this shows my lack of understanding in the set up (and shows the problem of following a how-to). I thought Postfix somehow passed control to MailScanner. After thinking further and reading this post I'm thinking MailScanner runs constantly and just watches a queue for scanning (right?) I can re-start MailScanner using the webmin plugin I have, but what is the correct prompt way of re-starting MailScanner? MailScanner runs out of /opt/MailScanner/bin it appears. Regards, Ed. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From cerit at teleord.co.uk Wed Nov 21 10:04:50 2007 From: cerit at teleord.co.uk (Ceri) Date: Wed Nov 21 10:06:18 2007 Subject: Notifications not being recieved In-Reply-To: <27494134.19411195639228584.JavaMail.root@office.splatnix.net> References: <27494134.19411195639228584.JavaMail.root@office.splatnix.net> Message-ID: <474402C2.403@teleord.co.uk> UxBoD wrote: > Have you run MS in debug mode ? If not stop all MS processes and then execute > MailScanner --debug. Please post the output, and also check /var/log/messages > for any errors. > Hi Debug mode gives the following output: In Debugging mode, not forking... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp commit ineffective with AutoCommit enabled at /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, line 114. Stopping now as you are debugging me. I cannot see anything in the messages file. Cheers Ceri From glenn.steen at gmail.com Wed Nov 21 10:08:34 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 21 10:08:36 2007 Subject: Bayes not learning? exchange environment In-Reply-To: References: Message-ID: <223f97700711210208o797188c3vb164310f4ba290a9@mail.gmail.com> On 21/11/2007, Joey Marino wrote: > >> I recently installed a mailscanner filter in front of my exchange > >> server. It was working fine for a few weeks then slowly let more and > >> more spam through. Today it's letting alot of spam through. I am > >> trying to verify that Bayes is learning, how would I do that? Also how > >> do I verify that the spam rules are being updated? > >> > >> I also tried to place spam in a public folder on my exchange server > >> and update bayes with these emails using this method provided by the > >> wiki > >> > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange > >> It just stops executing at this line in the python script: > >> log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % > .> (SALEARN, PREFS, TMPFILE))) > >> any ideas? I'm trying to determine what this line is accomplishing. > >> > >> Joey Marino > > >Is there any bayes scores in the headers of the messages? > >Are you running any extra rules from rulesemporium.com? > >Are you properly set up to not accept mail to non-existent addresses? > >Does your exchange server have a non-public address that can only be > reached > >by the mailscanner box? Otherwise the spammers will find it. > > 1. I am new to this, so please excuse any dumbness I may portray > I am not sure how to read the headers other than the reports from MailWatch > Here is an example header: > Return-Path: > Received: from pyszczek (bhc145.neoplus.adsl.tpnet.pl [83.28.92.145]) > by localhost.localdomain (8.13.1/8.13.1) with ESMTP id lAKNStWv009338 > for ; Tue, 20 Nov 2007 18:28:57 -0500 > Received: from [83.28.92.145] by mx1.biz.mail.yahoo.com; Wed, 21 Nov 2007 > 00:28:56 +0100 > Message-ID: <01c82bd5$80c67fa0$915c1c53@lbarlow> > From: "Marty Kimball" > To: > Subject: MoneybackPolicyInternationalPharShipping > Date: Wed, 21 Nov 2007 00:28:56 +0100 > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----=_NextPart_000_0007_01C82BD5.80C67FA0" > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2900.2905 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905 > > Now the information in the rows following "SpamAssassin" in this particular > report show all [N]'s > In the messages that were recognized as spam, The "SpamAssassin > Autolearn:" row show's [Y] > I hope that answers the first question What Scott meant is the headers that MailScanner adds, specifically the rule hits... The headers in MailWatch are prior to them being added, but then.... MailWatch has all that info on the details page anyway:). In the Spam Report section, what rules are listed? Is there mention of Bayes? You could cut'n'paste that... We'll help you "read" it;-). > 2. I ran rules_du_jour (which is also in my cron tab) and the report shows > that I did update rules from SARE. This message was in my summary report: > No index found for ruleset named ANTIDRUG. Check that this ruleset is > still valid. If I'm not entirely wrong, the recommendation is to use sa-update for this ... since a little while back. Check the archives of this list, as well as the wiki, I think there is an article on how to do this. > 3. I don't think I am set up to not accept mail to non-existent addresses, > I didn't create a list of existing email addresses or link it to my exchange > server active directory. How would I do this and how would this help? http://wiki.mailscanner.info holds a lot of really good information. Do read through the MAQ at least, it contains directions on how to do this (depending on MTA etc). It will make a huge difference. > 4. I believe the exchange server does have a private address. All incoming > SMTP requests are staticly routed to the mailscanner box. I ran a DNS lookup > for the hostname of the box and nothing was found. How else would I verify > this to be correct? Since you cannot find the name, you could test with the actual address. If the M-Sexchange server has a private IP address, perhaps protected by a firewall, check that FW to see that there is no NAT leading directly to it. To give better help, please include as much information as you can... Version of OS, MTA, MailScanner, AV, etc etc. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Wed Nov 21 10:33:57 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 21 10:34:00 2007 Subject: Beginner Question In-Reply-To: <11753835.19261195638246990.JavaMail.root@office.splatnix.net> References: <4743F754.5080304@cs.ucy.ac.cy> <11753835.19261195638246990.JavaMail.root@office.splatnix.net> Message-ID: <223f97700711210233w30db5d8boa16fcc441a730492@mail.gmail.com> On 21/11/2007, UxBoD wrote: > Andreas, > > 1) As part of the installation for Postfix and MailScanner the main.cf file is changed so that a header check is performed on every email that is processed. As "Received" appears in all messages, RFC compliance, then the message is put into a hold queue. MailScanner monitors this directory and when it sees messages it will process them, and on successfully processing, will the deliver them into the outbound queue for Postfix to deliver. If MailScanner was to die half way through processing a message it would still be safe, as it does not remove the message from the hold queue until such time successful processing has taken place. > .... That is: A properly set up MailScanner will _never_ touch an active Postfix queue _other_ than the "incoming" queue, where it will place the scanned message after successful completion. The Postfix "incoming queue" is the MailScanner "outbound queue". The Postfix "hold queue" is the MailScanner "inbound queue"... And The only time Postfix touches the hold queue is if you (as an admin) use the postsuper command to "unhold" a message.... Don't do that and you'll be fine;-). > 2) Yes the queue file structure is their "own internal thing", but we are talking about OSS here so anybody is free to view the code and make the necessary changes to MailScanner. Obviously when upgrading Postfix on a server you have to ensure that the revision being installed is compatible with MailScanner, so when they do/if change the structure wait until a suitable MailScanner revision has been released. > > This is purely my understanding, and I am sure somebody will correct my mistakes ;) Quite OK summary IMO. The Since somewhere like version 4.62.x, MailScanner should have a more or less complete support for the current state of the (latest) queue file format... and any older versions as well. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From mailscanner