From MailScanner at ecs.soton.ac.uk Thu Nov 1 09:29:10 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 1 09:29:29 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released Message-ID: <47299C66.8010901@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Morning all! I have just released the latest stable version of MailScanner, version 4.65. The main new feature this month is support for F-Secure 5.5, and improvements to the upgrade process. Download it as usual from www.mailscanner.info. The full Change Log is quite short this month: * New Features and Improvements * 1 Added support for F-Secure version 5.5. In virus.scanners.conf, set the path to "/opt/f-secure/fssp". 2 Added log output when bad watermark causes raise in spam score. 2 RedHat RPM-based install.sh no longer forces installation of anything on RedHat 5, CentOS 5 or hopefully some clones thereof. No change on Fedora. 2 Improvement to upgrade_MailScanner_conf and upgrade_languages_conf so that if either is run when there is no .rpmnew file (and hence you don't need to run it) then no harm will be done, the .conf will be copied to the .new file. 3 Improved install.sh support for Mandriva which has /usr/src/rpm not .../RPM. 3 Changed syslog output of virus infections so scanner names are all 1 word. * Fixes * 2 Fixed bug with "notify" action in "SpamAssassin Rule Actions" setting. 2 Fixed RBL check return address for anti-spam.org.cn's weird blacklist. 2 Fixed "MailScanner --value=..." (for testing rulesets), when MTA is not sendmail. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKZxmEfZZRxQVtlQRAqC5AKCfvxDau9KimabJZZaJpYAPrjPovQCff5xD mt+ma6cA/U8doK0ICKw2iRE= =wGc/ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From atobisch at trustinternational.com Thu Nov 1 09:55:08 2007 From: atobisch at trustinternational.com (Alexander Tobisch) Date: Thu Nov 1 09:56:07 2007 Subject: automated response Message-ID: <10711011055.AA39970@trustinternational.com> Thank you for your eMail. I am currently out of the office with no access to my eMails. Your mail will be forwarded to Michael G?rlich (mgoerlich@trustinternational.com). Best regards, Alexander Tobisch System Administrator TRUST International by Travelport TRUST International Hotel Reservation Services GmbH Lyoner Strasse 40, 60528 Frankfurt, Germany Telephone: +49 (069) 664 089 1757 Fax: +49 (069) 665 664 089 1760 e: atobisch@trustinternational.com www.trustinternational.com & www.travelport.com Sitz/Place of business: Frankfurt am Main, Germany Registerinformationen/Registry information: AG Frankfurt am Main HRB 30120 Gesch?ftsf?hrer/Managing Directors: Bryan Conway, Richard Wiegmann, Marius Nasta Please see our disclaimer via link http://www.trustinternational.com/home/disclaimer.html From shuttlebox at gmail.com Thu Nov 1 15:36:01 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Thu Nov 1 15:36:03 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <47299C66.8010901@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> Message-ID: <625385e30711010836l2ac22f7dqc2aec1d47710c470@mail.gmail.com> On 11/1/07, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Morning all! > > I have just released the latest stable version of MailScanner, version > 4.65. I have submitted a Solaris package to Blastwave but until it spreads to the mirrors you can get it from: http://www.blastwave.org/testing/mailscanner-4.65.3.1-SunOS5.8-all-CSW.pkg.gz If you're doing a new install you should probably wait so pkg-get can handle all the dependencies. -- /peter From gdoris at rogers.com Thu Nov 1 18:41:30 2007 From: gdoris at rogers.com (Gerry Doris) Date: Thu Nov 1 18:42:22 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <47299C66.8010901@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> Message-ID: <472A1DDA.2050709@rogers.com> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Morning all! > > I have just released the latest stable version of MailScanner, version > 4.65. > The main new feature this month is support for F-Secure 5.5, and > improvements to the upgrade process. > > Download it as usual from www.mailscanner.info. > Version 4.65 isn't shown on the website under stable versions. From MailScanner at ecs.soton.ac.uk Thu Nov 1 18:55:06 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 1 18:55:23 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A1DDA.2050709@rogers.com> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> Message-ID: <472A210A.3040307@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yes it is. Where do you think it isn't? It's certainly on index.html and downloads.html. Gerry Doris wrote: > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> Morning all! >> >> I have just released the latest stable version of MailScanner, >> version 4.65. The main new feature this month is support for >> F-Secure 5.5, and improvements to the upgrade process. >> >> Download it as usual from www.mailscanner.info. >> > Version 4.65 isn't shown on the website under stable versions. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKiEKEfZZRxQVtlQRAoeOAJ9ZyarlDR7PUQvyWoTim5n+woKEyACfecIy SXdXO9YiDV/eUgsdZykuqyw= =QMf9 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From gdoris at rogers.com Thu Nov 1 19:09:47 2007 From: gdoris at rogers.com (Gerry Doris) Date: Thu Nov 1 19:11:20 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A210A.3040307@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> Message-ID: <472A247B.3020807@rogers.com> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Yes it is. Where do you think it isn't? It's certainly on index.html > and downloads.html. > > Hmmm, it just refreshed the page and it appeared. I had just gone to the page a few minutes ago and it wasn't there. In any case, I've downloaded it and am installing it now. Thanks! From daneil.goodman at gmail.com Thu Nov 1 20:48:28 2007 From: daneil.goodman at gmail.com (Daneil Goodman) Date: Thu Nov 1 20:48:31 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A247B.3020807@rogers.com> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> Message-ID: <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> I can install this version on redhat, but I can not install it on Fedora 6. It says ---- You must have the following RPM packages installed before you try and do anything else: binutils glibc-devel gcc make You are missing at least 1 of these. Please install them all ---- But I have installed all of them. glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 That is weird! Can you please tell me which package I really missed? Thanks, Goodman On 11/1/07, Gerry Doris wrote: > > Julian Field wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Yes it is. Where do you think it isn't? It's certainly on index.html > > and downloads.html. > > > > > Hmmm, it just refreshed the page and it appeared. I had just gone to > the page a few minutes ago and it wasn't there. In any case, I've > downloaded it and am installing it now. Thanks! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071101/2517b01f/attachment.html From MailScanner at ecs.soton.ac.uk Thu Nov 1 21:04:46 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 1 21:05:01 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> Message-ID: <472A3F6E.1010705@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It does this command: rpm -q binutils glibc-devel gcc make and if that command fails then it complains. I haven't altered this code in years. Do this rpm -q binutils glibc-devel gcc make echo $? and tell me what it prints. Daneil Goodman wrote: > I can install this version on redhat, but I can not install it on > Fedora 6. It says > > ---- You must have the following RPM packages installed before you > try and do anything else: binutils glibc-devel gcc make You are > missing at least 1 of these. Please install them all ---- > > But I have installed all of them. > > glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 > glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 > gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 > automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 > imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 > binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > > That is weird! Can you please tell me which package I really > missed? > > Thanks, > > Goodman > > > On 11/1/07, *Gerry Doris* > wrote: > > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> Yes it is. Where do you think it isn't? It's certainly on > index.html >> and downloads.html. >> >> > Hmmm, it just refreshed the page and it appeared. I had just gone > to the page a few minutes ago and it wasn't there. In any case, > I've downloaded it and am installing it now. Thanks! -- > MailScanner mailing list mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKj9uEfZZRxQVtlQRAkiXAJ4iMChLCWVQL/EYCkTAIfxjSPK2ZwCfaV9K NNzBFot1GgrZFh5N4xWrMqU= =y88h -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From Denis.Beauchemin at USherbrooke.ca Thu Nov 1 21:18:43 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Thu Nov 1 21:19:11 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: Message-ID: <472A42B3.7050706@USherbrooke.ca> Scott Silva a ?crit : > I'm getting a lot of collect: premature EOM: unexpected close > errors from certain servers, and a google gives me much conflicting info. > > Running CentOS 4 and current stable MailScanner. > > I have tried decreasing the MTU on the external interface, and only > succeeded in stopping all traffic. Tried disabling window scaling, and > that also had no effect. Could the default be to set no-fragment on > packets from CentOS 4? > Scott, I modified these TCP settings in RHEL5 to correct this situation: (from /etc/rc.local): /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" For some unknown reason it wouldn't work in /etc/sysctl.conf... Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From ssilva at sgvwater.com Thu Nov 1 22:50:12 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 1 22:50:26 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <472A42B3.7050706@USherbrooke.ca> References: <472A42B3.7050706@USherbrooke.ca> Message-ID: on 11/1/2007 2:18 PM Denis Beauchemin spake the following: > Scott Silva a ?crit : >> I'm getting a lot of collect: premature EOM: unexpected close >> errors from certain servers, and a google gives me much conflicting info. >> >> Running CentOS 4 and current stable MailScanner. >> >> I have tried decreasing the MTU on the external interface, and only >> succeeded in stopping all traffic. Tried disabling window scaling, and >> that also had no effect. Could the default be to set no-fragment on >> packets from CentOS 4? >> > Scott, > > I modified these TCP settings in RHEL5 to correct this situation: > (from /etc/rc.local): > /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" > /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" > > For some unknown reason it wouldn't work in /etc/sysctl.conf... > > Denis > Did you put it in /etc/sysctl.conf without the quotes? It seems to hold with a sysctl -p. At least it doesn't barf. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From xianwu.xu at gmail.com Fri Nov 2 13:23:12 2007 From: xianwu.xu at gmail.com (Xianwu Xu) Date: Fri Nov 2 13:23:16 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472A3F6E.1010705@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> Message-ID: Here is output of rpm -q binutils glibc-devel gcc make --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 gcc-4.1.2-12 make-3.81-6.fc7 echo $? 0 --------------- Thanks, Goodman On Nov 1, 2007 4:04 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > It does this command: > > rpm -q binutils glibc-devel gcc make > > and if that command fails then it complains. > > I haven't altered this code in years. > > Do this > rpm -q binutils glibc-devel gcc make > echo $? > and tell me what it prints. > > Daneil Goodman wrote: > > I can install this version on redhat, but I can not install it on > > Fedora 6. It says > > > > ---- You must have the following RPM packages installed before you > > try and do anything else: binutils glibc-devel gcc make You are > > missing at least 1 of these. Please install them all ---- > > > > But I have installed all of them. > > > > glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 > > glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 > > gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 > > automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 > > imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 > > binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > > > > That is weird! Can you please tell me which package I really > > missed? > > > > Thanks, > > > > Goodman > > > > > > On 11/1/07, *Gerry Doris* > > wrote: > > > > Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >> > >> Yes it is. Where do you think it isn't? It's certainly on > > index.html > >> and downloads.html. > >> > >> > > Hmmm, it just refreshed the page and it appeared. I had just gone > > to the page a few minutes ago and it wasn't there. In any case, > > I've downloaded it and am installing it now. Thanks! -- > > MailScanner mailing list mailscanner@lists.mailscanner.info > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFHKj9uEfZZRxQVtlQRAkiXAJ4iMChLCWVQL/EYCkTAIfxjSPK2ZwCfaV9K > NNzBFot1GgrZFh5N4xWrMqU= > =y88h > -----END PGP SIGNATURE----- > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > For all your IT requirements visit www.transtec.co.uk > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071102/0d1ae08c/attachment.html From MailScanner at ecs.soton.ac.uk Fri Nov 2 14:30:12 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri Nov 2 14:30:28 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> Message-ID: <472B3474.9050409@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Has anyone else installed this successfully on Fedora Core 6? For now, all I can suggest you do is remove the "exit 1" around line 291 of install.sh. Xianwu Xu wrote: > Here is output of rpm -q binutils glibc-devel gcc make > --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 > gcc-4.1.2-12 make-3.81-6.fc7 > > echo $? 0 --------------- > > Thanks, > > Goodman > > On Nov 1, 2007 4:04 PM, Julian Field > wrote: > > It does this command: > > rpm -q binutils glibc-devel gcc make > > and if that command fails then it complains. > > I haven't altered this code in years. > > Do this rpm -q binutils glibc-devel gcc make echo $? and tell me > what it prints. > > Daneil Goodman wrote: >> I can install this version on redhat, but I can not install it on >> Fedora 6. It says > >> ---- You must have the following RPM packages installed before >> you try and do anything else: binutils glibc-devel gcc make You >> are missing at least 1 of these. Please install them all ---- > >> But I have installed all of them. > >> glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 >> glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 >> gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 >> automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 >> imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 >> binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > >> That is weird! Can you please tell me which package I really >> missed? > >> Thanks, > >> Goodman > > >> On 11/1/07, *Gerry Doris* >> >> wrote: > >> Julian Field wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >>> >>> Yes it is. Where do you think it isn't? It's certainly on >> index.html >>> and downloads.html. >>> >>> >> Hmmm, it just refreshed the page and it appeared. I had just > gone >> to the page a few minutes ago and it wasn't there. In any case, >> I've downloaded it and am installing it now. Thanks! -- >> MailScanner mailing list mailscanner@lists.mailscanner.info > >> > >> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >> Before posting, read http://wiki.mailscanner.info/posting > >> Support MailScanner development - buy the book off the website! > > > > Jules > - -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk - -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHKzR0EfZZRxQVtlQRAqNhAJ0babkc8qlMIvRPKxNXeq08GM0kzgCgso+e IZQnhVPA5xN9XWJPueVVHcU= =zI4t -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From ka at pacific.net Fri Nov 2 15:40:31 2007 From: ka at pacific.net (Ken A) Date: Fri Nov 2 15:40:36 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472B3474.9050409@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> <472B3474.9050409@ecs.soton.ac.uk> Message-ID: <472B44EF.8020500@pacific.net> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Has anyone else installed this successfully on Fedora Core 6? > For now, all I can suggest you do is remove the "exit 1" around line > 291 of install.sh. > Installed fine here on FC6. I also noticed that there are references below to make-3.81-6.fc7, which would not be present in an FC6 install, so something else might be going on here? Ken > Xianwu Xu wrote: >> Here is output of rpm -q binutils glibc-devel gcc make >> --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 >> gcc-4.1.2-12 make-3.81-6.fc7 >> >> echo $? 0 --------------- >> >> Thanks, >> >> Goodman >> >> On Nov 1, 2007 4:04 PM, Julian Field > > wrote: >> >> It does this command: >> >> rpm -q binutils glibc-devel gcc make >> >> and if that command fails then it complains. >> >> I haven't altered this code in years. >> >> Do this rpm -q binutils glibc-devel gcc make echo $? and tell me >> what it prints. >> >> Daneil Goodman wrote: >>> I can install this version on redhat, but I can not install it on >>> Fedora 6. It says >>> ---- You must have the following RPM packages installed before >>> you try and do anything else: binutils glibc-devel gcc make You >>> are missing at least 1 of these. Please install them all ---- >>> But I have installed all of them. >>> glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 >>> glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 >>> gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 >>> automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 >>> imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 >>> binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 >>> That is weird! Can you please tell me which package I really >>> missed? >>> Thanks, >>> Goodman >> >>> On 11/1/07, *Gerry Doris* > >>> >> wrote: >>> Julian Field wrote: >>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >>>> >>>> Yes it is. Where do you think it isn't? It's certainly on >>> index.html >>>> and downloads.html. >>>> >>>> >>> Hmmm, it just refreshed the page and it appeared. I had just >> gone >>> to the page a few minutes ago and it wasn't there. In any case, >>> I've downloaded it and am installing it now. Thanks! -- >>> MailScanner mailing list mailscanner@lists.mailscanner.info >> >>> > > >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> Before posting, read http://wiki.mailscanner.info/posting >>> Support MailScanner development - buy the book off the website! >> >> >> Jules >> > > - -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > For all your IT requirements visit www.transtec.co.uk > > > - -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > Jules > > - -- > Julian Field MBCS CITP > jkf@ecs.soton.ac.uk > Teaching Systems Manager > Electronics & Computer Science > University of Southampton > SO17 1BJ, UK > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > Need help customising MailScanner? > Contact me! > Need help fixing or optimising your systems? > Contact me! > Need help getting you started solving new requirements from your boss? > Contact me! > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFHKzR0EfZZRxQVtlQRAqNhAJ0babkc8qlMIvRPKxNXeq08GM0kzgCgso+e > IZQnhVPA5xN9XWJPueVVHcU= > =zI4t > -----END PGP SIGNATURE----- > > -- Ken Anderson Pacific.Net From gdoris at rogers.com Fri Nov 2 17:22:29 2007 From: gdoris at rogers.com (Gerry Doris) Date: Fri Nov 2 17:23:28 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472B3474.9050409@ecs.soton.ac.uk> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> <472B3474.9050409@ecs.soton.ac.uk> Message-ID: <472B5CD5.8060901@rogers.com> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Has anyone else installed this successfully on Fedora Core 6? > For now, all I can suggest you do is remove the "exit 1" around line > 291 of install.sh. > > I installed the latest version without problems on a Fedora 6 box yesterday. It's working fine. I even upgraded to version 6 of F-Prot and it worked fine. From xianwu.xu at gmail.com Fri Nov 2 18:23:49 2007 From: xianwu.xu at gmail.com (Xianwu Xu) Date: Fri Nov 2 18:24:01 2007 Subject: MailScanner ANNOUNCE: Version 4.65 released In-Reply-To: <472B44EF.8020500@pacific.net> References: <47299C66.8010901@ecs.soton.ac.uk> <472A1DDA.2050709@rogers.com> <472A210A.3040307@ecs.soton.ac.uk> <472A247B.3020807@rogers.com> <9a0fe170711011348n6fcfa3eag98dba03bb4f6bb35@mail.gmail.com> <472A3F6E.1010705@ecs.soton.ac.uk> <472B3474.9050409@ecs.soton.ac.uk> <472B44EF.8020500@pacific.net> Message-ID: Sorry, my box is Fedora Core 7. On Nov 2, 2007 10:40 AM, Ken A wrote: > Julian Field wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Has anyone else installed this successfully on Fedora Core 6? > > For now, all I can suggest you do is remove the "exit 1" around line > > 291 of install.sh. > > > > Installed fine here on FC6. > > I also noticed that there are references below to make-3.81-6.fc7, which > would not be present in an FC6 install, so something else might be going > on here? > > Ken > > > > Xianwu Xu wrote: > >> Here is output of rpm -q binutils glibc-devel gcc make > >> --------------- binutils-2.17.50.0.12-4 glibc-devel-2.6-4 > >> gcc-4.1.2-12 make-3.81-6.fc7 > >> > >> echo $? 0 --------------- > >> > >> Thanks, > >> > >> Goodman > >> > >> On Nov 1, 2007 4:04 PM, Julian Field < MailScanner@ecs.soton.ac.uk > >> > wrote: > >> > >> It does this command: > >> > >> rpm -q binutils glibc-devel gcc make > >> > >> and if that command fails then it complains. > >> > >> I haven't altered this code in years. > >> > >> Do this rpm -q binutils glibc-devel gcc make echo $? and tell me > >> what it prints. > >> > >> Daneil Goodman wrote: > >>> I can install this version on redhat, but I can not install it on > >>> Fedora 6. It says > >>> ---- You must have the following RPM packages installed before > >>> you try and do anything else: binutils glibc-devel gcc make You > >>> are missing at least 1 of these. Please install them all ---- > >>> But I have installed all of them. > >>> glibc-2.6-4 glibc-common-2.6-4 glibc-headers-2.6-4 > >>> glibc-devel-2.6-4 gcc-c++-4.1.2-12 libgcc-4.1.2-12 gcc-4.1.2-12 > >>> gcc-gfortran-4.1.2-12 gcc-java-4.1.2-12 automake14-1.4p6-15.fc7 > >>> automake-1.10-5 automake17-1.7.9-8 make-3.81-6.fc7 > >>> imake-1.0.2-4.fc7 automake15-1.5-22 automake16-1.6.3-12 > >>> binutils-2.17.50.0.12-4 binutils-devel-2.17.50.0.12-4 > >>> That is weird! Can you please tell me which package I really > >>> missed? > >>> Thanks, > >>> Goodman > >> > >>> On 11/1/07, *Gerry Doris* >> > >>> >> wrote: > >>> Julian Field wrote: > >>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >>>> > >>>> Yes it is. Where do you think it isn't? It's certainly on > >>> index.html > >>>> and downloads.html. > >>>> > >>>> > >>> Hmmm, it just refreshed the page and it appeared. I had just > >> gone > >>> to the page a few minutes ago and it wasn't there. In any case, > >>> I've downloaded it and am installing it now. Thanks! -- > >>> MailScanner mailing list mailscanner@lists.mailscanner.info > >> > >>> >> > > >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >>> Before posting, read http://wiki.mailscanner.info/posting > >>> Support MailScanner development - buy the book off the website! > >> > >> > >> Jules > >> > > > > - -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > For all your IT requirements visit www.transtec.co.uk > > > > > > - -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > Jules > > > > - -- > > Julian Field MBCS CITP > > jkf@ecs.soton.ac.uk > > Teaching Systems Manager > > Electronics & Computer Science > > University of Southampton > > SO17 1BJ, UK > > > > Jules > > > > - -- > > Julian Field MEng CITP > > www.MailScanner.info > > Buy the MailScanner book at www.MailScanner.info/store > > > > Need help customising MailScanner? > > Contact me! > > Need help fixing or optimising your systems? > > Contact me! > > Need help getting you started solving new requirements from your boss? > > Contact me! > > > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > > > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.4.7 (Darwin) > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > > > iD8DBQFHKzR0EfZZRxQVtlQRAqNhAJ0babkc8qlMIvRPKxNXeq08GM0kzgCgso+e > > IZQnhVPA5xN9XWJPueVVHcU= > > =zI4t > > -----END PGP SIGNATURE----- > > > > > > > -- > Ken Anderson > Pacific.Net > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071102/89466274/attachment.html From Denis.Beauchemin at USherbrooke.ca Fri Nov 2 18:52:57 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 2 18:53:42 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: <472A42B3.7050706@USherbrooke.ca> Message-ID: <472B7209.9030503@USherbrooke.ca> Scott Silva a ?crit : > on 11/1/2007 2:18 PM Denis Beauchemin spake the following: >> Scott Silva a ?crit : >>> I'm getting a lot of collect: premature EOM: unexpected close >>> errors from certain servers, and a google gives me much conflicting >>> info. >>> >>> Running CentOS 4 and current stable MailScanner. >>> >>> I have tried decreasing the MTU on the external interface, and only >>> succeeded in stopping all traffic. Tried disabling window scaling, >>> and that also had no effect. Could the default be to set no-fragment >>> on packets from CentOS 4? >>> >> Scott, >> >> I modified these TCP settings in RHEL5 to correct this situation: >> (from /etc/rc.local): >> /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" >> /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" >> >> For some unknown reason it wouldn't work in /etc/sysctl.conf... >> >> Denis >> > Did you put it in /etc/sysctl.conf without the quotes? > It seems to hold with a sysctl -p. At least it doesn't barf. > This is what I put in /etc/sysctl.conf : # Fix for tcp window scaling issue related to broken Internet routers net.ipv4.tcp_wmem="4096 16384 131072" net.ipv4.tcp_rmem="4096 87380 174760" So no, I didn't remove the quotes... does it matter? Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From steve.freegard at fsl.com Fri Nov 2 19:03:19 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 2 19:02:07 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <472B7209.9030503@USherbrooke.ca> References: <472A42B3.7050706@USherbrooke.ca> <472B7209.9030503@USherbrooke.ca> Message-ID: <472B7477.6070503@fsl.com> Denis Beauchemin wrote: >>> Scott, >>> >>> I modified these TCP settings in RHEL5 to correct this situation: >>> (from /etc/rc.local): >>> /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" >>> /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" >>> >>> For some unknown reason it wouldn't work in /etc/sysctl.conf... >>> >>> Denis >>> >> Did you put it in /etc/sysctl.conf without the quotes? >> It seems to hold with a sysctl -p. At least it doesn't barf. >> > This is what I put in /etc/sysctl.conf : > # Fix for tcp window scaling issue related to broken Internet routers > net.ipv4.tcp_wmem="4096 16384 131072" > net.ipv4.tcp_rmem="4096 87380 174760" > > So no, I didn't remove the quotes... does it matter? I don't put quotes around these entries when I make them - not sure if it makes a difference. Here is what we use for BarricadeMX systems which should work fine elsewhere as long as you have 1Gb RAM or more: # TCP Tuning # http://www-didc.lbl.gov/TCP-tuning/linux.html # Added by smf@fsl.com 2007-07-17 # --------------------------------------------- # increase TCP max buffer size net.core.rmem_max = 16777216 net.core.wmem_max = 16777216 # increase Linux autotuning TCP buffer limits # min, default, and max number of bytes to use net.ipv4.tcp_rmem = 4096 87380 16777216 net.ipv4.tcp_wmem = 4096 65536 16777216 # don't cache ssthresh from previous connection net.ipv4.tcp_no_metrics_save = 1 # increase SYN backlog from the 1024 default net.ipv4.tcp_max_syn_backlog = 8192 Kind regards, Steve. From Denis.Beauchemin at USherbrooke.ca Fri Nov 2 20:27:48 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 2 20:28:23 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <472B7477.6070503@fsl.com> References: <472A42B3.7050706@USherbrooke.ca> <472B7209.9030503@USherbrooke.ca> <472B7477.6070503@fsl.com> Message-ID: <472B8844.10500@USherbrooke.ca> Steve Freegard a ?crit : > Denis Beauchemin wrote: >>>> Scott, >>>> >>>> I modified these TCP settings in RHEL5 to correct this situation: >>>> (from /etc/rc.local): >>>> /sbin/sysctl -w net.ipv4.tcp_wmem="4096 16384 131072" >>>> /sbin/sysctl -w net.ipv4.tcp_rmem="4096 87380 174760" >>>> >>>> For some unknown reason it wouldn't work in /etc/sysctl.conf... >>>> >>>> Denis >>>> >>> Did you put it in /etc/sysctl.conf without the quotes? >>> It seems to hold with a sysctl -p. At least it doesn't barf. >>> >> This is what I put in /etc/sysctl.conf : >> # Fix for tcp window scaling issue related to broken Internet routers >> net.ipv4.tcp_wmem="4096 16384 131072" >> net.ipv4.tcp_rmem="4096 87380 174760" >> >> So no, I didn't remove the quotes... does it matter? > > I don't put quotes around these entries when I make them - not sure if > it makes a difference. > Thanks Steve, I tried it without the quotes and it worked! So no quotes in /etc/sysctl.conf!!! Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From micoots at yahoo.com Fri Nov 2 23:33:42 2007 From: micoots at yahoo.com (Michael Mansour) Date: Fri Nov 2 23:33:46 2007 Subject: X-Spam-Status header enhancements Message-ID: <845773.44896.qm@web33310.mail.mud.yahoo.com> Hi, I've recently started to use the option: FromOrTo: default deliver store-spam header "X-Spam-Status: Yes" in my spam.actions.rules file, but most recently noticed messages with headers of the form: X-Spam-Score: 3.0 (+++) X-Spam-Report: 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.7 INVALID_MSGID Message-Id is not valid, according to RFC 2822 X-Spam-Flag: YES (tagged as spam, score 3.0) sent by some mail systems. Can MailScanner extend on the "X-Spam-Status: Yes" facility looking like the X-Spam-Flag above (sent by whatever scanning system they have)? What do others think? Michael. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071103/832065cf/attachment.html From shuttlebox at gmail.com Fri Nov 2 23:49:12 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 2 23:49:15 2007 Subject: X-Spam-Status header enhancements In-Reply-To: <845773.44896.qm@web33310.mail.mud.yahoo.com> References: <845773.44896.qm@web33310.mail.mud.yahoo.com> Message-ID: <625385e30711021649p64cb355cs12897c4cf2676d3@mail.gmail.com> On 11/3/07, Michael Mansour wrote: > Hi, > > I've recently started to use the option: > > FromOrTo: default deliver store-spam header > "X-Spam-Status: Yes" > > in my spam.actions.rules file, but most recently noticed messages with > headers of the form: > > X-Spam-Score: 3.0 (+++) > X-Spam-Report: 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in > bl.spamcop.net > [Blocked - see > ] > 1.7 INVALID_MSGID Message-Id is not valid, according to RFC 2822 > X-Spam-Flag: YES (tagged as spam, score 3.0) > > sent by some mail systems. > > Can MailScanner extend on the "X-Spam-Status: Yes" facility looking like the > X-Spam-Flag above (sent by whatever scanning system they have)? > > What do others think? For filtering it adds nothing and for the few who looks at the headers it doesn't matter what header the info is in. If you log spam you have a header which contains all that and the rule hits as well. -- /peter From micoots at yahoo.com Sat Nov 3 21:01:30 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sat Nov 3 21:01:33 2007 Subject: Increase score for an RBL hit In-Reply-To: <605764.10957.qm@web33305.mail.mud.yahoo.com> Message-ID: <265934.64793.qm@web33309.mail.mud.yahoo.com> Hi, Does anyone have an answer for my query below? Thanks. Michael. Michael Mansour wrote: Hi, Raymond Dijkxhoorn wrote: Hi! > I just started using the APEWS RBL and got some hits on it for IP > ranges from some well known Australian ISP's (which some of my friends > and family use). You are seriously -using- APEWS? Eeks. I would stronly advise not to even consider using that list. > Is there a way I can configure that a hit in an RBL increases the SA > score instead of blocking the email entirely? Just add it in SA , if you wanna use it. Forgive me for asking a possibly very simple question, but how do I add an RBL to SA? I've previously gone through: http://wiki.apache.org/spamassassin/DnsBlocklists and the Mail::SpamAssassin::Conf documentation and it isn't really covered well (or covered so it's simple to understand). I've gone through the: /usr/share/spamassassin/20_dnsbl_tests.cf file and also my local.cf. I'm thinking if I defined in my local.cf the following (for arguments sake I'll stick with APEWS): header RCVD_IN_APEWSL2 eval:check_rbl('apewsl2', 'l2.apews.org.') describe RCVD_IN_APEWSL2 APEWSL2 some description tflags RCVD_IN_APEWSL2 net score RCVD_IN_APEWSL2 2.0 ?? Thanks again. Michael. Bye, Raymond. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Sick of deleting your inbox? Yahoo!7 Mail has free unlimited storage. Get it now. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071104/7e125bbe/attachment.html From MailScanner at ecs.soton.ac.uk Sun Nov 4 19:37:23 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun Nov 4 19:37:36 2007 Subject: Missing anything? and dag.wieers.com Message-ID: <472E1F73.1070800@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Have I missed anything important on the list recently? My day job has been rather busy, and I have had to take some time out due to shingles (which fortunately is receding now), so I have missed some of the conversations. Is there anything important in the way of bug reports or feature requests that I have missed? Has anything happened about getting MailScanner onto dag.wieers.com? Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHLh9zEfZZRxQVtlQRAtESAJ9CaSL+8RhBKZk9YxsUv1zf+yK/NACg5L8b xXw9IKaKkSPRBNEkRv10N1E= =8eFU -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From arw at swaab.com.au Sun Nov 4 22:04:17 2007 From: arw at swaab.com.au (Andrew Weeks) Date: Sun Nov 4 22:03:54 2007 Subject: Storing attachments for longer Message-ID: Hi Apologies if this has been asked before, but I haven't been able to find an answer online. We block various attachment types by default, after a couple of weeks the message is still available through mailwatch but it seems the attachment is deleted. Occasionally someone still requests that an old attachment be unblocked and I"m wondering what's involved in keeping the attachments longer (eg 60 days). Many thanks Andrew Weeks IT Manager SWAAB Attorneys Level 1, 20 Hunter Street SYDNEY NSW 2000 GPO Box 35 SYDNEY NSW 2001 | DX 522 SYDNEY T +61 2 9233 5544 | F +61 2 9233 5400 | D +61 2 9777 8345 E arw@swaab.com.au | www.swaab.com.au Winner BRW-St George Best Australian Law Firm 2007+; Runner Up Australian Law Firm of the Year 2006**; Winner Australian Law Firm of the Year 2004*; Finalist Mazda ALB Australasian Law Awards 2007 +Revenue less than 20m *Firms with less than 25 lawyers **Firms with less than 50 lawyers -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071105/d74f0efd/attachment.html From raymond at prolocation.net Sun Nov 4 22:07:32 2007 From: raymond at prolocation.net (Raymond Dijkxhoorn) Date: Sun Nov 4 22:07:29 2007 Subject: Storing attachments for longer In-Reply-To: References: Message-ID: Hi! > We block various attachment types by default, after a couple of weeks > the message is still available through mailwatch but it seems the > attachment is deleted. Occasionally someone still requests that an old > attachment be unblocked and I"m wondering what's involved in keeping the > attachments longer (eg 60 days). Check: cron.daily: clean.quarantine $disabled = 0; $quarantine_dir = '/var/spool/MailScanner/quarantine'; $days_to_keep = 90; Bye, Raymond. From itlist at gmail.com Mon Nov 5 06:14:20 2007 From: itlist at gmail.com (Cheng Bruce) Date: Mon Nov 5 06:14:23 2007 Subject: How to archive multiple mail address to one account Message-ID: Hi, Apologies if this has been asked before, I have tried to search via google, but can't find the right way. I use Centos 5.0 to be my OS and Mailscanner 4.61.7-2, Mailwatch 1.04 I would like to know how to archive some email address into another email address and archive all email address but exclude some specified email address such like Boss's email address. For example: in my ruleset : /etc/MailScanner/MailScanner.conf ... Archive Mail = %rules-dir%/archive.rules /etc/MailScanner/rules/archive.rules FromOrTo: /[\@\.]my\.com$/ yes forward sent@my.com When I create another rules in archive.rules, for ex: FromOrTo: a@1.my.com yes forward backup1@my.com FromOrTo: b@1.my.com yes forward backup1@my.com FromOrTo: c@1.my.com yes forward backup1@my.com FromOrTo: d@1.my.com yes forward backup1@my.com and reload MailScanner I found my server will be very busy and the usage of the SWAP partition will be raised to 100% and server stop response and crash. Therefore I remove them. I have never met this situation before( I used MailScanner 4.54 last year without any problem). Now, I will update into the latest version and try it again. And I tried to use like as following FromOrTo: a@1.my.com b@1.my.com c@1.my.com d@1.my.com yes forward backup1@my.com It will let "b, c, d and backup1" receive the "a" and so on. But I would like to know if there is any way can make the rule more flexible and easy to maintain. for ex: Set the group alias EX: sales = a@1.my.com b@1.my.com c@1.my.com FromOrTo: sales yes forward backup1@my.com I also would like to know how to archive all messages (fromorto) and exclude some special email address . Please advise me and thank you in advance. Best Regards, Bruce From Q.G.Campbell at newcastle.ac.uk Mon Nov 5 12:33:15 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Mon Nov 5 12:43:00 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Scott Silva >Sent: 29 October 2007 17:55 >To: mailscanner@lists.mailscanner.info >Subject: Sendmail and Unexpected EOM > >I'm getting a lot of collect: premature EOM: unexpected close >errors from certain servers, and a google gives me much conflicting >info. > >Running CentOS 4 and current stable MailScanner. > > I have tried decreasing the MTU on the external interface, and only >succeeded in stopping all traffic. Tried disabling window scaling, and >that also had no effect. Could the default be to set no-fragment on packets >from CentOS 4? >[snip] Scott What evidence do you have that it is your end rather than the sending site, or somewhere in between, that is at fault? Although a 'traceroute' does not always work (because ICMP is disabled at gateways) it may indicate some large delay on the route between the sender and you. I also see the 'premature EOM' messages here and have assumed them to be a problem for the sender, not us. Where they occur after we have returned 'REJECT' status for all recipients after a DNSBL lookup, I assume that because the sender is a spammer they do not bother to close down the SMTP connection with a RESET or QUIT and simply move on to start a new SMTP connection with another target. Quentin From simon at saq.co.uk Mon Nov 5 15:03:08 2007 From: simon at saq.co.uk (Simon Jones) Date: Mon Nov 5 15:14:24 2007 Subject: smtp vrfy Message-ID: Hi, I'm trying to get my mailscanner box to check with the destination server that the recipient address is valid using smtp vrfy. I have implemented this in main.cf and it works great BUT it works for ALL addresses on the destination server, i.e. I get 550 5.1.1 : Recipient address rejected: undeliverable addres s: host xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx] said: 501 unacceptable mail address (in rep ly to MAIL FROM command) when telnetting to the box on 25, however if I telnet to the destination server and do the same I get: vrfy valid@domain.co.uk 250 ok its for vrfy rubbish@domain.co.uk 550 unknown user If the destination server is working correctly how comes the mailscanner box is telling me it's an invalid user? I suspect the mailscanner box is checking locally? In which case it will only allow to @domain.co.uk rather than user@domain.co.uk, but I'm not sure yet :) Thanks in advance Simon From ka at pacific.net Mon Nov 5 15:46:20 2007 From: ka at pacific.net (Ken A) Date: Mon Nov 5 15:46:25 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> Message-ID: <472F3ACC.2020908@pacific.net> Quentin Campbell wrote: >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of Scott Silva >> Sent: 29 October 2007 17:55 >> To: mailscanner@lists.mailscanner.info >> Subject: Sendmail and Unexpected EOM >> >> I'm getting a lot of collect: premature EOM: unexpected close >> errors from certain servers, and a google gives me much conflicting >> info. >> >> Running CentOS 4 and current stable MailScanner. >> >> I have tried decreasing the MTU on the external interface, and only >> succeeded in stopping all traffic. Tried disabling window scaling, and >> that also had no effect. Could the default be to set no-fragment on > packets >>from CentOS 4? >> [snip] > > Scott > > What evidence do you have that it is your end rather than the sending > site, or somewhere in between, that is at fault? > > Although a 'traceroute' does not always work (because ICMP is disabled > at gateways) it may indicate some large delay on the route between the > sender and you. > > I also see the 'premature EOM' messages here and have assumed them to be > a problem for the sender, not us. > > Where they occur after we have returned 'REJECT' status for all > recipients after a DNSBL lookup, I assume that because the sender is a > spammer they do not bother to close down the SMTP connection with a > RESET or QUIT and simply move on to start a new SMTP connection with > another target. > > Quentin Recently, I saw this happening to mail from one of our hosting webservers. The only indication in the mail log on the mailscanner box was the 'EOM' message, and the only indication in the maillog on the hosting server was deferred, stat='broken pipe' and some nasty TLS errors. I discovered when running 'sendmail -v -q' on the hosting box that the email was being blocked by milter-link, which does rhsdnsbl lookups on links in the email, but nameservers were timing out trying to lookup hostnames in form submissions containing hundreds of spam urls, many of which were lame delegations, or broken in other ways. I'd post some, but they wouldn't get very far. :-) It can be hard to track these down! Ken -- Ken Anderson Pacific.Net From ssilva at sgvwater.com Mon Nov 5 15:52:30 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 5 15:52:40 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> Message-ID: on 11/5/2007 4:33 AM Quentin Campbell spake the following: >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of Scott Silva >> Sent: 29 October 2007 17:55 >> To: mailscanner@lists.mailscanner.info >> Subject: Sendmail and Unexpected EOM >> >> I'm getting a lot of collect: premature EOM: unexpected close >> errors from certain servers, and a google gives me much conflicting >> info. >> >> Running CentOS 4 and current stable MailScanner. >> >> I have tried decreasing the MTU on the external interface, and only >> succeeded in stopping all traffic. Tried disabling window scaling, and >> that also had no effect. Could the default be to set no-fragment on > packets >>from CentOS 4? >> [snip] > > Scott > > What evidence do you have that it is your end rather than the sending > site, or somewhere in between, that is at fault? > > Although a 'traceroute' does not always work (because ICMP is disabled > at gateways) it may indicate some large delay on the route between the > sender and you. > > I also see the 'premature EOM' messages here and have assumed them to be > a problem for the sender, not us. > > Where they occur after we have returned 'REJECT' status for all > recipients after a DNSBL lookup, I assume that because the sender is a > spammer they do not bother to close down the SMTP connection with a > RESET or QUIT and simply move on to start a new SMTP connection with > another target. > > Quentin I know that it isn't my end causing the problem, but the changes to linux and the receive window in the tcp stack has added to the errors. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From steve.freegard at fsl.com Mon Nov 5 16:31:48 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Mon Nov 5 16:30:22 2007 Subject: Sendmail and Unexpected EOM In-Reply-To: References: <4165CF7A7F12DE4B96622CCBB90586470C1C3A55@largo.campus.ncl.ac.uk> Message-ID: <472F4574.5040204@fsl.com> Scott Silva wrote: >> Although a 'traceroute' does not always work (because ICMP is disabled >> at gateways) it may indicate some large delay on the route between the >> sender and you. > I know that it isn't my end causing the problem, but the changes to > linux and the receive window in the tcp stack has added to the errors. I've seen numerous 'broken pipe', 'unexpected EOF' and numerous timeout errors in the past caused by sites that implement over zealous ICMP filtering which causes connectivity issues due to packet fragmentation. See http://www.znep.com/~marcs/mtu/ for further info. Cheers, Steve. From rpoe at plattesheriff.org Mon Nov 5 17:29:10 2007 From: rpoe at plattesheriff.org (Rob Poe) Date: Mon Nov 5 17:29:41 2007 Subject: Need help -- script (someone had this!) In-Reply-To: <1964AAFBC212F742958F9275BF63DBB05B4328@winchester.andrewscompanies.com> References: <4721325E020000A200007393@platteco-2.plattesheriff.org> <1964AAFBC212F742958F9275BF63DBB05B4328@winchester.andrewscompanies.com> Message-ID: <472EFE81.65ED.00A2.0@plattesheriff.org> Yes >>> "Steven Andrews" 10/26/2007 6:41 AM >>> Are you talking about one that builds a box from base OS to working ms/mailwatch? -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Rob Poe Sent: Friday, October 26, 2007 1:19 AM To: mailscanner@lists.mailscanner.info Subject: Need help -- script (someone had this!) Someone had made an install script for Linux that installed a lot of things automagically on a linux box .. i must have misplaced this .. and I'd like to find it again.. thanks! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From glenn.steen at gmail.com Mon Nov 5 19:25:47 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 5 19:25:56 2007 Subject: smtp vrfy In-Reply-To: References: Message-ID: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> On 05/11/2007, Simon Jones wrote: > Hi, I'm trying to get my mailscanner box to check with the destination > server that the recipient address is valid using smtp vrfy. > > I have implemented this in main.cf and it works great BUT it works for > ALL addresses on the destination server, i.e. I get > > 550 5.1.1 : Recipient address rejected: > undeliverable addres > s: host xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx] said: 501 unacceptable mail > address (in rep > ly to MAIL FROM command) > > when telnetting to the box on 25, however if I telnet to the destination > server and do the same I get: > > vrfy valid@domain.co.uk > 250 ok its for > vrfy rubbish@domain.co.uk > 550 unknown user > > If the destination server is working correctly how comes the mailscanner > box is telling me it's an invalid user? > > I suspect the mailscanner box is checking locally? In which case it will > only allow to @domain.co.uk rather than user@domain.co.uk, but I'm not > sure yet :) Hi Simon What you want to do is either to follow the instructions for (recipient) verification as specified here: http://www.postfix.org/ADDRESS_VERIFICATION_README.html ... or use relay_recipient_maps as described in the MailScanner wiki. > Thanks in advance You're wellcome;-) > Simon Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From jbuda at noticiasargentinas.com Mon Nov 5 19:36:36 2007 From: jbuda at noticiasargentinas.com (Jose Julian Buda) Date: Mon Nov 5 19:36:20 2007 Subject: Input/Output Error Message-ID: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> I have a debian etch server just installed : I have postfix+mailscanner+clamav When i send an email just to test from console i saw on log file : Nov 5 13:34:22 proxmails MailScanner[27664]: New Batch: Scanning 1 messages, 669 bytes Nov 5 13:34:33 proxmails MailScanner[27664]: SpamAssassin cache hit for message C151116A9.059B3 Nov 5 13:34:33 proxmails MailScanner[27664]: Virus and Content Scanning: Starting Nov 5 13:34:33 proxmails MailScanner[27664]: ERROR: Input/Output error Nov 5 13:34:33 proxmails MailScanner[27664]: Requeue: C151116A9.059B3 to E12A316DA Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: from=, size=477, nrcpt=1 (queue active) Nov 5 13:34:33 proxmails MailScanner[27664]: Uninfected: Delivered 1 messages Nov 5 13:34:33 proxmails postfix/local[27685]: E12A316DA: to=, orig_to=, relay=local, delay=40, delays=40/0/0/0.04, dsn=2.0.0, status=sent (delivered to maildir) Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: removed What is the "Input/Output error" ? The mail have the eicar test file atached with uuencode , the file was not catch and the mail pass trought the server , and mark the mail as "cleaned". Thank you in advance Julian -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071105/4070d95f/attachment.html From sailer at bnl.gov Mon Nov 5 19:49:40 2007 From: sailer at bnl.gov (Tim Sailer) Date: Mon Nov 5 19:50:00 2007 Subject: Input/Output Error In-Reply-To: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> Message-ID: <20071105194940.GD1142@bnl.gov> On Mon, Nov 05, 2007 at 04:36:36PM -0300, Jose Julian Buda wrote: > What is the "Input/Output error" ? > The mail have the eicar test file atached with uuencode , the file was not catch and the mail pass trought the server , and mark the mail > as "cleaned". That's usually when something can't be read or written, usually due to either no disk space, or a failing disk drive. Tim -- Tim Sailer DoE Intelligence and Counterintelligence - Cyber Division Northeast Regional Counterintelligence Office Brookhaven National Laboratory (631) 344-3001 From jbuda at noticiasargentinas.com Mon Nov 5 20:02:23 2007 From: jbuda at noticiasargentinas.com (Jose Julian Buda) Date: Mon Nov 5 20:02:21 2007 Subject: Input/Output Error References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> <20071105194940.GD1142@bnl.gov> Message-ID: <030301c81fe6$c806ff20$6000a8c0@tecnianueva> But how is that posible? ,it is a new server with software raid 1 can it be a configuration issue? ----- Original Message ----- From: "Tim Sailer" To: "MailScanner discussion" Sent: Monday, November 05, 2007 4:49 PM Subject: Re: Input/Output Error > On Mon, Nov 05, 2007 at 04:36:36PM -0300, Jose Julian Buda wrote: >> What is the "Input/Output error" ? >> The mail have the eicar test file atached with uuencode , the file was >> not catch and the mail pass trought the server , and mark the mail >> as "cleaned". > > That's usually when something can't be read or written, usually due to > either > no disk space, or a failing disk drive. > > Tim > > -- > Tim Sailer > DoE Intelligence and Counterintelligence - Cyber Division > Northeast Regional Counterintelligence Office > Brookhaven National Laboratory (631) 344-3001 > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From glenn.steen at gmail.com Mon Nov 5 21:05:52 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 5 21:05:57 2007 Subject: Input/Output Error In-Reply-To: <030301c81fe6$c806ff20$6000a8c0@tecnianueva> References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> <20071105194940.GD1142@bnl.gov> <030301c81fe6$c806ff20$6000a8c0@tecnianueva> Message-ID: <223f97700711051305t536c4ffw9d9c6e246ca2ad95@mail.gmail.com> On 05/11/2007, Jose Julian Buda wrote: > But how is that posible? ,it is a new server with software raid 1 > > can it be a configuration issue? > As always with postfix, check, recheck, then check again ... that you have set all permissions on all files _and directories_ as well as ownership/group correctly... Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From paul at blacknight.ie Mon Nov 5 22:37:23 2007 From: paul at blacknight.ie (Paul Kelly :: Blacknight) Date: Mon Nov 5 22:36:59 2007 Subject: Input/Output Error In-Reply-To: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> References: <02bd01c81fe3$2da2f270$6000a8c0@tecnianueva> Message-ID: <472F9B23.4050009@blacknight.ie> Jose Julian Buda wrote: > I have a debian etch server just installed : > > I have postfix+mailscanner+clamav > > When i send an email just to test from console i saw on log file : > > > Nov 5 13:34:22 proxmails MailScanner[27664]: New Batch: Scanning 1 > messages, 669 bytes > Nov 5 13:34:33 proxmails MailScanner[27664]: SpamAssassin cache hit for > message C151116A9.059B3 > Nov 5 13:34:33 proxmails MailScanner[27664]: Virus and Content > Scanning: Starting > Nov 5 13:34:33 proxmails MailScanner[27664]: ERROR: Input/Output error > Nov 5 13:34:33 proxmails MailScanner[27664]: Requeue: C151116A9.059B3 > to E12A316DA > Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: > from=>, size=477, nrcpt=1 > (queue active) > Nov 5 13:34:33 proxmails MailScanner[27664]: Uninfected: Delivered 1 > messages > Nov 5 13:34:33 proxmails postfix/local[27685]: E12A316DA: > to=>, > orig_to=, relay=local, delay=40, delays=40/0/0/0.04, > dsn=2.0.0, status=sent (delivered to maildir) > Nov 5 13:34:33 proxmails postfix/qmgr[22015]: E12A316DA: removed > > > > What is the "Input/Output error" ? > The mail have the eicar test file atached with uuencode , the file was > not catch and the mail pass trought the server , and mark the mail > as "cleaned". Check the output of "dmesg" for scsi sense errors or anything that looks like a failing disk. An unreasonably high percentage of drives die shortly after you start to utilise them. If it's a hitachi 80GB deathstar then you can probably say for certain it's gone. Raid 1 in software raid can sometimes cause this issue, check to see that you can write to all partitions using "touch /usr" etc A reboot would probably fix it temporarily. Paul > > > Thank you in advance > Julian > > > -- Paul Kelly Technical Director Blacknight Internet Solutions ltd Hosting, Colocation, Dedicated servers IP Transit Services Lo-call: 1850 927 280 DDI: 059 9183091 e-mail: paul@blacknight.ie web: http://www.blacknight.ie From pete at petecrocker.com Tue Nov 6 01:56:22 2007 From: pete at petecrocker.com (Peter Crocker) Date: Tue Nov 6 01:56:35 2007 Subject: rpmbuild not in some fedora 7 installs, install.sh fails Message-ID: <840666E0-4AEB-4298-93A5-4B06CF6C3CB5@petecrocker.com> Ok, this one took me quite a few hours to work out. I tried running ./ install.sh of an RPM install package of MailScanner, and couldn't figure out why it was failing. Output of the install.sh script is below. I kept getting "--rebuild: unknown option" errors every time the install script would try to rebuild the perl modules. I went down at least 10 different ratholes for hours before I finally figured it out. My minimal install of fedora has a /usr/bin/rpm, but not a /usr/bin/ rpmbuild. And it turns out the "rebuild" portions that used to be in the /usr/bin/rpm binary have been moved out, but I guess there's still a few hooks for old-school compatibility. The first few lines of the ./install.sh script checks this: echo if [ -x /bin/rpmbuild ]; then RPMBUILD=/bin/rpmbuild elif [ -x /usr/bin/rpmbuild ]; then RPMBUILD=/usr/bin/rpmbuild elif [ -x /bin/rpm ]; then RPMBUILD=/bin/rpm elif [ -x /usr/bin/rpm ]; then RPMBUILD=/usr/bin/rpm But that's not sufficient on my FC7 release. I don't know when this broke, but the proper check should be to make sure that either /usr/ bin/rpmbuild is in place, or that a call to /usr/bin/rpm --rebuild succeeds (which I'm guessing passes the call over to rpmbuild). To get rpmbuild on my system, I had to install some fedora extras: $ sudo yum install fedora-rpmdevtools Being new to MailScanner, what's the best way to open a bug for this? I'm crap at rpm, so I don't think I could suggest the appropriate solution for... I found this page (dated 2002!) from someone at redhat who's involved with the rpm package that explains the history of the code change: http://www.rpm.org/hintskinks/rpmbuild/ cheers, -pete -------------------------------------------------------------------------------- Output of install.sh *without* /usr/bin/rpmbuild present: -------------------------------------------------------------------------------- Good. You have the patch command. Good, you have /usr/src/redhat in place. You are running release 5 of RedHat, or a clone. So I will not force the installation of any Perl modules. But you are running Fedora, so I am going to force the installation of the Perl modules that normally require it. Good, unpackaged files will not break the build process. Good, far-too-clever Perl requirements will be ignored. Good, you appear to only have 1 copy of Perl installed. I think you are running on RedHat Linux, Mandriva Linux or SuSE Linux. Good, you appear to have the basic development tools installed. This script will pause for a few seconds after each major step, so do not worry if it appears to stop for a while. If you want it to stop so you can scroll back through the output then press Ctrl-S to stop the output and Ctrl-Q to start it again. If this fails due to dependency checks, and you wish to ignore these problems, you can run ./install.sh nodeps Setting Perl5 search path I think your system will build architecture-dependent modules for i386 Rebuilding all the Perl RPMs for your version of Perl Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. Attempting to build and install perl-Net-CIDR-0.11-1 --rebuild: unknown option Missing file /usr/src/redhat/RPMS/noarch/perl-Net- CIDR-0.11-1.noarch.rpm. Maybe it did not build correctly? Attempting to build and install perl-IO-stringy-2.108-1 --rebuild: unknown option Missing file /usr/src/redhat/RPMS/noarch/perl-IO- stringy-2.108-1.noarch.rpm. Maybe it did not build correctly? Attempting to build and install perl-MIME-Base64-3.07-1 --rebuild: unknown option -------------------------------------------------------------------------------- Output of install.sh with /usr/bin/rpmbuild in place: -------------------------------------------------------------------------------- Good. You have the patch command. Good, you have /usr/src/redhat in place. You are running release 5 of RedHat, or a clone. So I will not force the installation of any Perl modules. But you are running Fedora, so I am going to force the installation of the Perl modules that normally require it. Good, unpackaged files will not break the build process. Good, far-too-clever Perl requirements will be ignored. Good, you appear to only have 1 copy of Perl installed. I think you are running on RedHat Linux, Mandriva Linux or SuSE Linux. Good, you appear to have the basic development tools installed. This script will pause for a few seconds after each major step, so do not worry if it appears to stop for a while. If you want it to stop so you can scroll back through the output then press Ctrl-S to stop the output and Ctrl-Q to start it again. If this fails due to dependency checks, and you wish to ignore these problems, you can run ./install.sh nodeps Setting Perl5 search path I think your system will build architecture-dependent modules for i386 Rebuilding all the Perl RPMs for your version of Perl Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. Attempting to build and install perl-Net-CIDR-0.11-1 Installing perl-Net-CIDR-0.11-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.88252 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf Net-CIDR-0.11 + /bin/gzip -dc /usr/src/redhat/SOURCES/Net-CIDR-0.11.tar.gz + tar -xf - + STATUS=0 From lists at sequestered.net Tue Nov 6 03:39:44 2007 From: lists at sequestered.net (Jay Chandler) Date: Tue Nov 6 03:40:04 2007 Subject: smtp vrfy In-Reply-To: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> Message-ID: <472FE200.10605@sequestered.net> Glenn Steen wrote: > What you want to do is either to follow the instructions for > (recipient) verification as specified here: > http://www.postfix.org/ADDRESS_VERIFICATION_README.html > ... or use relay_recipient_maps as described in the MailScanner wiki. > >> Thanks in advance > You're wellcome;-) > >> Simon > > Cheers *breaks out the clue stick* Callouts are considered abusive by many servers-- you probably want to be VERY VERY CAREFUL about doing this... Personally I don't run it at all, but my spam setup is such that I don't need to... -- Jay Chandler / KB1JWQ Living Legend / Systems Exorcist Today's Excuse: High nuclear activity in your area From hvdkooij at vanderkooij.org Tue Nov 6 06:43:58 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Tue Nov 6 06:44:34 2007 Subject: rpmbuild not in some fedora 7 installs, install.sh fails In-Reply-To: <840666E0-4AEB-4298-93A5-4B06CF6C3CB5@petecrocker.com> References: <840666E0-4AEB-4298-93A5-4B06CF6C3CB5@petecrocker.com> Message-ID: <47300D2E.8050309@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Peter Crocker wrote: > Ok, this one took me quite a few hours to work out. I tried running > ./install.sh of an RPM install package of MailScanner, and couldn't > figure out why it was failing. Output of the install.sh script is below. > I kept getting "--rebuild: unknown option" errors every time the install > script would try to rebuild the perl modules. I went down at least 10 > different ratholes for hours before I finally figured it out. > > My minimal install of fedora has a /usr/bin/rpm, but not a > /usr/bin/rpmbuild. And it turns out the "rebuild" portions that used to > be in the /usr/bin/rpm binary have been moved out, but I guess there's > still a few hooks for old-school compatibility. rpmbuild is part of the normal packages and it is the administrators job to install such requirements. Even on Fedora 8 it is rather simple: $ rpm -qf `which rpmbuild` rpm-build-4.4.2.2-3.fc8 I regard the task of setting up a rpm build environment a task a sysadmin should be abe to do before (s)he even embarks on a trip like MailScanner. Having said that I can not recall a distribution that is still maintained that will not use rpmbuild but use rpm --build instead. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMA0oBvzDRVjxmYERAvfoAKC5VQGAJvhW0m6uZyDXGUqjRZ5tyQCfbYBR vvvLMkMBss+J3B59Cafk+EM= =U4SN -----END PGP SIGNATURE----- From jan-peter at koopmann.eu Tue Nov 6 08:00:25 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Tue Nov 6 07:59:08 2007 Subject: smtp vrfy In-Reply-To: <472FE200.10605@sequestered.net> References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> Message-ID: > *breaks out the clue stick* > > Callouts are considered abusive by many servers-- you probably want to > be VERY > VERY CAREFUL about doing this... Personally I don't run it at all, but > my spam > setup is such that I don't need to... Are they talking about sender address verification? The way I read it he is trying to do the opposite and ask his inbound receiving mailer which would be a wise thing to do and has nothing to do with callouts. Might be wrong though... :-) From simon at saq.co.uk Tue Nov 6 09:22:38 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 09:33:56 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > Sent: 06 November 2007 08:00 > To: MailScanner discussion > Subject: RE: smtp vrfy > > > *breaks out the clue stick* > > > > Callouts are considered abusive by many servers-- you probably want > to > > be VERY > > VERY CAREFUL about doing this... Personally I don't run it at all, > but > > my spam > > setup is such that I don't need to... > > Are they talking about sender address verification? The way I read it > he > is trying to do the opposite and ask his inbound receiving mailer which > would be a wise thing to do and has nothing to do with callouts. Might > be wrong though... :-) > -- Hi, that's exactly what I'm trying to do - I run a server with a generic public domain with lots of users on it - the domain has been around for 12 years so attracts mucho canned meat of the spam variety. All I want mailscanner to do is say to the destination server "hey there, do you have this address?" before actually sending the message, which would take some pressure off the spooler on the destination server. I think it IS working but the gateway is starting the smtp vrfy transaction with rather than - here's the error off the destination machine: "unacceptable mail address in MAIL FROM:" I'm running a seperate machine with postfix only and this does use a postmaster@domain.com address for outside smtp transactions, but I can't find the config to specify what address the postmaster should use - only that it is an alias of root in /etc/postfix/aliases Thanks again chaps, the answer is probably blatantly simple but I'm not seeing it :( From goetz.reinicke at filmakademie.de Tue Nov 6 09:38:54 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Tue Nov 6 09:39:20 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 Message-ID: <4730362E.4040606@filmakademie.de> Hi, I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from Red Hat, but there are a lot of conflicts with file from package installed by Mailscanner. e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. So what may I do? Force the update of the Red Hat perl.rpm? Any suggestions?? Thanks for hints and tips and for Mailscanner anyway! G?tz Reinicke -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From MailScanner at ecs.soton.ac.uk Tue Nov 6 09:45:14 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 6 09:45:29 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <4730362E.4040606@filmakademie.de> References: <4730362E.4040606@filmakademie.de> Message-ID: <473037AA.9010208@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 G?tz Reinicke wrote: > Hi, > > I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 > mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from > Red Hat, but there are a lot of conflicts with file from package > installed by Mailscanner. > > e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > > So what may I do? Force the update of the Red Hat perl.rpm? I would force the update of the RedHat perl rpm then re-install MailScanner so it gets its teeth into your new setup. > > Any suggestions?? > > Thanks for hints and tips and for Mailscanner anyway! > > > G?tz Reinicke Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMDeqEfZZRxQVtlQRAthVAKD5adUAjb4yIaLb9BpVdWKdFYcCTwCeP43E ErSnydC9CrY8iBWhydmQaq4= =y//O -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From glenn.steen at gmail.com Tue Nov 6 09:56:45 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 09:56:58 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> Message-ID: <223f97700711060156k477f053h9a5351d968164444@mail.gmail.com> On 06/11/2007, Koopmann, Jan-Peter wrote: > > *breaks out the clue stick* > > > > Callouts are considered abusive by many servers-- you probably want to > > be VERY > > VERY CAREFUL about doing this... Personally I don't run it at all, > but > > my spam > > setup is such that I don't need to... > > Are they talking about sender address verification? The way I read it he > is trying to do the opposite and ask his inbound receiving mailer which > would be a wise thing to do and has nothing to do with callouts. Might > be wrong though... :-) No, you are quite right J-P.... So I'll just duck that clue stick:-):-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From Q.G.Campbell at newcastle.ac.uk Tue Nov 6 09:55:00 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Tue Nov 6 09:57:03 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net> Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C1C3BB8@largo.campus.ncl.ac.uk> >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Simon Jones >Sent: 06 November 2007 09:23 >To: MailScanner discussion >Subject: RE: smtp vrfy > [snip] >Hi, that's exactly what I'm trying to do - I run a server with a generic >public domain with lots of users on it - the domain has been around for >12 years so attracts mucho canned meat of the spam variety. All I want >mailscanner to do is say to the destination server "hey there, do you >have this address?" before actually sending the message, which would >take some pressure off the spooler on the destination server. >[snip] Although this is of no use to Simon, it is an opportunity to remind sites using Sendmail as their MTA that they can run 'milter-ahead' (from Snertsoft) to get this functionality. Quentin From glenn.steen at gmail.com Tue Nov 6 10:01:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 10:01:37 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> Message-ID: <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> On 06/11/2007, Simon Jones wrote: > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > Sent: 06 November 2007 08:00 > > To: MailScanner discussion > > Subject: RE: smtp vrfy > > > > > *breaks out the clue stick* > > > > > > Callouts are considered abusive by many servers-- you probably want > > to > > > be VERY > > > VERY CAREFUL about doing this... Personally I don't run it at all, > > but > > > my spam > > > setup is such that I don't need to... > > > > Are they talking about sender address verification? The way I read it > > he > > is trying to do the opposite and ask his inbound receiving mailer > which > > would be a wise thing to do and has nothing to do with callouts. Might > > be wrong though... :-) > > -- > > Hi, that's exactly what I'm trying to do - I run a server with a generic > public domain with lots of users on it - the domain has been around for > 12 years so attracts mucho canned meat of the spam variety. All I want > mailscanner to do is say to the destination server "hey there, do you > have this address?" before actually sending the message, which would > take some pressure off the spooler on the destination server. > > I think it IS working but the gateway is starting the smtp vrfy > transaction with rather than - > here's the error off the destination machine: "unacceptable mail address > in MAIL FROM:" > > I'm running a seperate machine with postfix only and this does use a > postmaster@domain.com address for outside smtp transactions, but I can't > find the config to specify what address the postmaster should use - only > that it is an alias of root in /etc/postfix/aliases > > Thanks again chaps, the answer is probably blatantly simple but I'm not > seeing it :( How about address_verify_sender = postmaster in main.cf ... or rather address_verify_sender = postmaster@yourdomain.com ...? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From eclipsem at optusnet.com.au Tue Nov 6 11:45:47 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Tue Nov 6 11:45:58 2007 Subject: smtp vrfy Message-ID: <200711061145.lA6BjlYA009933@mail09.syd.optusnet.com.au> On Tue, 6 Nov 2007, Quentin Campbell wrote: > Although this is of no use to Simon, it is an opportunity to remind > sites using Sendmail as their MTA that they can run 'milter-ahead' (from > Snertsoft) to get this functionality. Or, rather than PAY for snertsoft's milter-ahead, he could use the "free" smf-sav milter or MIMEDefang to do the same thing. Ed. From martinh at solidstatelogic.com Tue Nov 6 11:54:04 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Tue Nov 6 11:54:07 2007 Subject: smtp vrfy In-Reply-To: <200711061145.lA6BjlYA009933@mail09.syd.optusnet.com.au> References: <200711061145.lA6BjlYA009933@mail09.syd.optusnet.com.au> Message-ID: On Tue, 06 Nov 2007 22:45:47 +1100 eclipsem@optusnet.com.au wrote: > > On Tue, 6 Nov 2007, Quentin Campbell wrote: >> Although this is of no use to Simon, it is an >>opportunity to remind >> sites using Sendmail as their MTA that they can run >>'milter-ahead' (from >> Snertsoft) to get this functionality. > > Or, rather than PAY for snertsoft's milter-ahead, he >could use the "free" smf-sav milter or MIMEDefang to do >the same thing. > > > Ed. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read >http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the >website! Or the free http://smfs.sourceforge.net/smf-sav.html which can do the same thing.. -- martin ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From simon at saq.co.uk Tue Nov 6 11:50:49 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 12:02:06 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 06 November 2007 10:02 > To: MailScanner discussion > Subject: Re: smtp vrfy > > On 06/11/2007, Simon Jones wrote: > > > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner- > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > > Sent: 06 November 2007 08:00 > > > To: MailScanner discussion > > > Subject: RE: smtp vrfy > > > > > > > *breaks out the clue stick* > > > > > > > > Callouts are considered abusive by many servers-- you probably > want > > > to > > > > be VERY > > > > VERY CAREFUL about doing this... Personally I don't run it at > all, > > > but > > > > my spam > > > > setup is such that I don't need to... > > > > > > Are they talking about sender address verification? The way I read > it > > > he > > > is trying to do the opposite and ask his inbound receiving mailer > > which > > > would be a wise thing to do and has nothing to do with callouts. > Might > > > be wrong though... :-) > > > -- > > > > Hi, that's exactly what I'm trying to do - I run a server with a > generic > > public domain with lots of users on it - the domain has been around > for > > 12 years so attracts mucho canned meat of the spam variety. All I > want > > mailscanner to do is say to the destination server "hey there, do you > > have this address?" before actually sending the message, which would > > take some pressure off the spooler on the destination server. > > > > I think it IS working but the gateway is starting the smtp vrfy > > transaction with rather than - > > here's the error off the destination machine: "unacceptable mail > address > > in MAIL FROM:" > > > > I'm running a seperate machine with postfix only and this does use a > > postmaster@domain.com address for outside smtp transactions, but I > can't > > find the config to specify what address the postmaster should use - > only > > that it is an alias of root in /etc/postfix/aliases > > > > Thanks again chaps, the answer is probably blatantly simple but I'm > not > > seeing it :( > How about > address_verify_sender = postmaster > in main.cf ... or rather > address_verify_sender = postmaster@yourdomain.com > ...? > Cheers > -- > -- Glenn Cheers Glen, That sorted the address issue - still doesn't work though hehe, bounces everything - valid or not but if I do a vrfy user@domain.com on the destination server it validates or rejects as one would expect. Now checking my config to make sure nothing fishy is going on here... Simon From glenn.steen at gmail.com Tue Nov 6 12:22:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 12:33:29 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: <223f97700711060422g58a08bd1r26f0e37d5cb76099@mail.gmail.com> On 06/11/2007, Simon Jones wrote: > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > Sent: 06 November 2007 10:02 > > To: MailScanner discussion > > Subject: Re: smtp vrfy > > > > On 06/11/2007, Simon Jones wrote: > > > > > > > > > > -----Original Message----- > > > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner- > > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > > > Sent: 06 November 2007 08:00 > > > > To: MailScanner discussion > > > > Subject: RE: smtp vrfy > > > > > > > > > *breaks out the clue stick* > > > > > > > > > > Callouts are considered abusive by many servers-- you probably > > want > > > > to > > > > > be VERY > > > > > VERY CAREFUL about doing this... Personally I don't run it at > > all, > > > > but > > > > > my spam > > > > > setup is such that I don't need to... > > > > > > > > Are they talking about sender address verification? The way I read > > it > > > > he > > > > is trying to do the opposite and ask his inbound receiving mailer > > > which > > > > would be a wise thing to do and has nothing to do with callouts. > > Might > > > > be wrong though... :-) > > > > -- > > > > > > Hi, that's exactly what I'm trying to do - I run a server with a > > generic > > > public domain with lots of users on it - the domain has been around > > for > > > 12 years so attracts mucho canned meat of the spam variety. All I > > want > > > mailscanner to do is say to the destination server "hey there, do > you > > > have this address?" before actually sending the message, which would > > > take some pressure off the spooler on the destination server. > > > > > > I think it IS working but the gateway is starting the smtp vrfy > > > transaction with rather than - > > > here's the error off the destination machine: "unacceptable mail > > address > > > in MAIL FROM:" > > > > > > I'm running a seperate machine with postfix only and this does use a > > > postmaster@domain.com address for outside smtp transactions, but I > > can't > > > find the config to specify what address the postmaster should use - > > only > > > that it is an alias of root in /etc/postfix/aliases > > > > > > Thanks again chaps, the answer is probably blatantly simple but I'm > > not > > > seeing it :( > > How about > > address_verify_sender = postmaster > > in main.cf ... or rather > > address_verify_sender = postmaster@yourdomain.com > > ...? > > Cheers > > -- > > -- Glenn > > Cheers Glen, > > That sorted the address issue - still doesn't work though hehe, bounces > everything - valid or not but if I do a vrfy user@domain.com on the > destination server it validates or rejects as one would expect. Now > checking my config to make sure nothing fishy is going on here... > > Simon Does it work on the "target" if you telnet from the "source" (gateway/MS-box) and do it by hand? If so, then definitely something wrong with the rest of the setup on the GW:-). Wietses doc is pretty lucid, so do try and follow that;-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From simon at saq.co.uk Tue Nov 6 12:57:48 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 13:11:44 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: > > On 06/11/2007, Simon Jones wrote: > > > > > > > > > > -----Original Message----- > > > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner- > > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter > > > > Sent: 06 November 2007 08:00 > > > > To: MailScanner discussion > > > > Subject: RE: smtp vrfy > > > > > > > > > *breaks out the clue stick* > > > > > > > > > > Callouts are considered abusive by many servers-- you probably > > want > > > > to > > > > > be VERY > > > > > VERY CAREFUL about doing this... Personally I don't run it at > > all, > > > > but > > > > > my spam > > > > > setup is such that I don't need to... > > > > > > > > Are they talking about sender address verification? The way I > read > > it > > > > he > > > > is trying to do the opposite and ask his inbound receiving mailer > > > which > > > > would be a wise thing to do and has nothing to do with callouts. > > Might > > > > be wrong though... :-) > > > > -- > > > > > > Hi, that's exactly what I'm trying to do - I run a server with a > > generic > > > public domain with lots of users on it - the domain has been around > > for > > > 12 years so attracts mucho canned meat of the spam variety. All I > > want > > > mailscanner to do is say to the destination server "hey there, do > you > > > have this address?" before actually sending the message, which > would > > > take some pressure off the spooler on the destination server. > > > > > > I think it IS working but the gateway is starting the smtp vrfy > > > transaction with rather than - > > > here's the error off the destination machine: "unacceptable mail > > address > > > in MAIL FROM:" > > > > > > I'm running a seperate machine with postfix only and this does use > a > > > postmaster@domain.com address for outside smtp transactions, but I > > can't > > > find the config to specify what address the postmaster should use - > > only > > > that it is an alias of root in /etc/postfix/aliases > > > > > > Thanks again chaps, the answer is probably blatantly simple but I'm > > not > > > seeing it :( > > How about > > address_verify_sender = postmaster > > in main.cf ... or rather > > address_verify_sender = postmaster@yourdomain.com > > ...? > > Cheers > > -- > > -- Glenn There's nothing else I need in main.cf is there? I can't figure why it's not calling back to the destination server and getting the correct result, it still bounces everything as invalid rather than just the bad stuff. smtpd_recipient_restrictions = reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unverified_recipient, reject_unauth_pipelining, permit_mynetworks, reject_unauth_destination, reject_maps_rbl, permit address_verify_sender = postmaster@domain.com unverified_recipient_reject_code = 550 address_verify_map = btree:/etc/postfix/verify From simon at saq.co.uk Tue Nov 6 13:41:48 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 13:53:05 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> <223f97700711060422g58a08bd1r26f0e37d5cb76099@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 06 November 2007 12:23 > To: MailScanner discussion > Subject: Re: smtp vrfy > > On 06/11/2007, Simon Jones wrote: > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner- > > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > > Sent: 06 November 2007 10:02 > > > To: MailScanner discussion > > > Subject: Re: smtp vrfy > > > > > > On 06/11/2007, Simon Jones wrote: > > > > > > > > > > > > > -----Original Message----- > > > > > From: mailscanner-bounces@lists.mailscanner.info > > > [mailto:mailscanner- > > > > > bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan- > Peter > > > > > Sent: 06 November 2007 08:00 > > > > > To: MailScanner discussion > > > > > Subject: RE: smtp vrfy > > > > > > > > > > > *breaks out the clue stick* > > > > > > > > > > > > Callouts are considered abusive by many servers-- you > probably > > > want > > > > > to > > > > > > be VERY > > > > > > VERY CAREFUL about doing this... Personally I don't run it > at > > > all, > > > > > but > > > > > > my spam > > > > > > setup is such that I don't need to... > > > > > > > > > > Are they talking about sender address verification? The way I > read > > > it > > > > > he > > > > > is trying to do the opposite and ask his inbound receiving > mailer > > > > which > > > > > would be a wise thing to do and has nothing to do with > callouts. > > > Might > > > > > be wrong though... :-) > > > > > -- > > > > > > > > Hi, that's exactly what I'm trying to do - I run a server with a > > > generic > > > > public domain with lots of users on it - the domain has been > around > > > for > > > > 12 years so attracts mucho canned meat of the spam variety. All > I > > > want > > > > mailscanner to do is say to the destination server "hey there, do > > you > > > > have this address?" before actually sending the message, which > would > > > > take some pressure off the spooler on the destination server. > > > > > > > > I think it IS working but the gateway is starting the smtp vrfy > > > > transaction with rather than > - > > > > here's the error off the destination machine: "unacceptable mail > > > address > > > > in MAIL FROM:" > > > > > > > > I'm running a seperate machine with postfix only and this does > use a > > > > postmaster@domain.com address for outside smtp transactions, but > I > > > can't > > > > find the config to specify what address the postmaster should use > - > > > only > > > > that it is an alias of root in /etc/postfix/aliases > > > > > > > > Thanks again chaps, the answer is probably blatantly simple but > I'm > > > not > > > > seeing it :( > > > How about > > > address_verify_sender = postmaster > > > in main.cf ... or rather > > > address_verify_sender = postmaster@yourdomain.com > > > ...? > > > Cheers > > > -- > > > -- Glenn > > > > Cheers Glen, > > > > That sorted the address issue - still doesn't work though hehe, > bounces > > everything - valid or not but if I do a vrfy user@domain.com on the > > destination server it validates or rejects as one would expect. Now > > checking my config to make sure nothing fishy is going on here... > > > > Simon > Does it work on the "target" if you telnet from the "source" > (gateway/MS-box) and do it by hand? If so, then definitely something > wrong with the rest of the setup on the GW:-). > Wietses doc is pretty lucid, so do try and follow that;-). > > Cheers > -- > -- Glenn Yup, works fine if I telnet off the gateway to the target host - I'll check the doc and see what I can turf up. From glenn.steen at gmail.com Tue Nov 6 13:57:03 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 13:57:07 2007 Subject: smtp vrfy In-Reply-To: References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com> <472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> Message-ID: <223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> On 06/11/2007, Simon Jones wrote: (snip) > > There's nothing else I need in main.cf is there? I can't figure why > it's not calling back to the destination server and getting the correct > result, it still bounces everything as invalid rather than just the bad > stuff. > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > reject_unknown_sender_domain, reject_unknown_recipient_domain, > reject_unverified_recipient, reject_unauth_pipelining, > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, permit You have things ordered slightly different than in the example, but that should be OK in this case, I think... The important thing is to reject unknown domains prior to unverified recipients... Postfix does know the "destinations" it handles mail for, right? > address_verify_sender = postmaster@domain.com Should be OK. > unverified_recipient_reject_code = 550 While testing, if this is a "live" system... it might be wise to do a 450 instead of a 550;-). > address_verify_map = btree:/etc/postfix/verify You might want to skip this initially, so comment that out and do a "postfix reload"... Seem if it starts cooking... Worst case, if you have ... interresting transports, you might need apply the last parts of the instructions... Hopefully, you don't. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From goetz.reinicke at filmakademie.de Tue Nov 6 14:00:25 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Tue Nov 6 14:01:09 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <473037AA.9010208@ecs.soton.ac.uk> References: <4730362E.4040606@filmakademie.de> <473037AA.9010208@ecs.soton.ac.uk> Message-ID: <47307379.60504@filmakademie.de> Julian Field schrieb: > > > G?tz Reinicke wrote: >> Hi, > >> I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 >> mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from >> Red Hat, but there are a lot of conflicts with file from package >> installed by Mailscanner. > >> e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > >> So what may I do? Force the update of the Red Hat perl.rpm? > I would force the update of the RedHat perl rpm then re-install > MailScanner so it gets its teeth into your new setup. Works. /G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From prandal at herefordshire.gov.uk Tue Nov 6 14:16:03 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue Nov 6 14:16:10 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <47307379.60504@filmakademie.de> References: <4730362E.4040606@filmakademie.de><473037AA.9010208@ecs.soton.ac.uk> <47307379.60504@filmakademie.de> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0934@HC-MBX02.herefordshire.gov.uk> Did you need to reinstall MailScanner or was the force install of perl sufficient? Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of G?tz Reinicke > Sent: 06 November 2007 14:00 > To: MailScanner discussion > Subject: Re: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 > > Julian Field schrieb: > > > > > > G?tz Reinicke wrote: > >> Hi, > > > >> I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 > >> mailserver with the latest perl (perl-5.8.8-10.el5_0.2) rpm from > >> Red Hat, but there are a lot of conflicts with file from package > >> installed by Mailscanner. > > > >> e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > > > > >> So what may I do? Force the update of the Red Hat perl.rpm? > > I would force the update of the RedHat perl rpm then re-install > > MailScanner so it gets its teeth into your new setup. > > Works. > > /G?tz > -- > G?tz Reinicke > IT Koordinator > > Tel. +49 7141 969 420 > Fax +49 7141 969 55 420 > E-Mail goetz.reinicke@filmakademie.de > > Filmakademie Baden-W?rttemberg GmbH > Mathildenstr. 20 > 71638 Ludwigsburg > www.filmakademie.de > > Eintragung Amtsgericht Stuttgart HRB 205016 > Vorsitzender des Aufsichtsrats: > Dr. Christoph Palmer, MdL, Minister a.D. > > Gesch?ftsf?hrer: > Prof. Thomas Schadt > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From simon at saq.co.uk Tue Nov 6 14:06:26 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 14:17:44 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> <223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 06 November 2007 13:57 > To: MailScanner discussion > Subject: Re: smtp vrfy > > On 06/11/2007, Simon Jones wrote: > (snip) > > > > There's nothing else I need in main.cf is there? I can't figure why > > it's not calling back to the destination server and getting the > correct > > result, it still bounces everything as invalid rather than just the > bad > > stuff. > > > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > > reject_unknown_sender_domain, reject_unknown_recipient_domain, > > reject_unverified_recipient, reject_unauth_pipelining, > > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, permit > You have things ordered slightly different than in the example, but > that should be OK in this case, I think... The important thing is to > reject unknown domains prior to unverified recipients... Postfix does > know the "destinations" it handles mail for, right? > > > address_verify_sender = postmaster@domain.com > Should be OK. > > > unverified_recipient_reject_code = 550 > While testing, if this is a "live" system... it might be wise to do a > 450 instead of a 550;-). > > > address_verify_map = btree:/etc/postfix/verify > You might want to skip this initially, so comment that out and do a > "postfix reload"... Seem if it starts cooking... > > Worst case, if you have ... interresting transports, you might need > apply the last parts of the instructions... Hopefully, you don't. > > Cheers > -- > -- Glenn Aahaaa! You sir are a genius ;) that's got it working correctly now. So presumably the darn thing had made a database locally before the postmaster problem was fixed and was checking that and coming up with the wrong results. So if I remove the db out of /etc/postfix it should recreate a correct one... although assumptions being the mother of all f... ups aside we'll give it a go. From simon at saq.co.uk Tue Nov 6 14:13:02 2007 From: simon at saq.co.uk (Simon Jones) Date: Tue Nov 6 14:24:19 2007 Subject: smtp vrfy References: <223f97700711051125n21c3ccfl9f6f778c032b966@mail.gmail.com><472FE200.10605@sequestered.net><223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com><223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> Message-ID: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Simon Jones > Sent: 06 November 2007 14:06 > To: MailScanner discussion > Subject: RE: smtp vrfy > > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > Sent: 06 November 2007 13:57 > > To: MailScanner discussion > > Subject: Re: smtp vrfy > > > > On 06/11/2007, Simon Jones wrote: > > (snip) > > > > > > There's nothing else I need in main.cf is there? I can't figure > why > > > it's not calling back to the destination server and getting the > > correct > > > result, it still bounces everything as invalid rather than just the > > bad > > > stuff. > > > > > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > > > reject_unknown_sender_domain, reject_unknown_recipient_domain, > > > reject_unverified_recipient, reject_unauth_pipelining, > > > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, > permit > > You have things ordered slightly different than in the example, but > > that should be OK in this case, I think... The important thing is to > > reject unknown domains prior to unverified recipients... Postfix does > > know the "destinations" it handles mail for, right? > > > > > address_verify_sender = postmaster@domain.com > > Should be OK. > > > > > unverified_recipient_reject_code = 550 > > While testing, if this is a "live" system... it might be wise to do a > > 450 instead of a 550;-). > > > > > address_verify_map = btree:/etc/postfix/verify > > You might want to skip this initially, so comment that out and do a > > "postfix reload"... Seem if it starts cooking... > > > > Worst case, if you have ... interresting transports, you might need > > apply the last parts of the instructions... Hopefully, you don't. > > > > Cheers > > -- > > -- Glenn > > Aahaaa! You sir are a genius ;) that's got it working correctly now. > So > presumably the darn thing had made a database locally before the > postmaster problem was fixed and was checking that and coming up with > the wrong results. So if I remove the db out of /etc/postfix it should > recreate a correct one... although assumptions being the mother of all > f... ups aside we'll give it a go. > -- Working :) mv /etc/postfix/verify.db /etc/postfix/verify.db.bak Uncomment the line and reload pfx, all tickety-boo in the land of smtp vrfy - thanks again to all. From glenn.steen at gmail.com Tue Nov 6 14:34:02 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 6 14:34:05 2007 Subject: smtp vrfy In-Reply-To: References: <472FE200.10605@sequestered.net> <223f97700711060201o1b61bcfame9e6057f72b3b0d0@mail.gmail.com> <223f97700711060557r7c847b81p5aa5f5fd66db6673@mail.gmail.com> Message-ID: <223f97700711060634q5ed8b035o749edd344b9a751e@mail.gmail.com> On 06/11/2007, Simon Jones wrote: > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Simon Jones > > Sent: 06 November 2007 14:06 > > To: MailScanner discussion > > Subject: RE: smtp vrfy > > > > > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner- > > > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > > > Sent: 06 November 2007 13:57 > > > To: MailScanner discussion > > > Subject: Re: smtp vrfy > > > > > > On 06/11/2007, Simon Jones wrote: > > > (snip) > > > > > > > > There's nothing else I need in main.cf is there? I can't figure > > why > > > > it's not calling back to the destination server and getting the > > > correct > > > > result, it still bounces everything as invalid rather than just > the > > > bad > > > > stuff. > > > > > > > > smtpd_recipient_restrictions = reject_non_fqdn_recipient, > > > > reject_unknown_sender_domain, reject_unknown_recipient_domain, > > > > reject_unverified_recipient, reject_unauth_pipelining, > > > > permit_mynetworks, reject_unauth_destination, reject_maps_rbl, > > permit > > > You have things ordered slightly different than in the example, but > > > that should be OK in this case, I think... The important thing is to > > > reject unknown domains prior to unverified recipients... Postfix > does > > > know the "destinations" it handles mail for, right? > > > > > > > address_verify_sender = postmaster@domain.com > > > Should be OK. > > > > > > > unverified_recipient_reject_code = 550 > > > While testing, if this is a "live" system... it might be wise to do > a > > > 450 instead of a 550;-). > > > > > > > address_verify_map = btree:/etc/postfix/verify > > > You might want to skip this initially, so comment that out and do a > > > "postfix reload"... Seem if it starts cooking... > > > > > > Worst case, if you have ... interresting transports, you might need > > > apply the last parts of the instructions... Hopefully, you don't. > > > > > > Cheers > > > -- > > > -- Glenn > > > > Aahaaa! You sir are a genius ;) that's got it working correctly now. > > So > > presumably the darn thing had made a database locally before the > > postmaster problem was fixed and was checking that and coming up with > > the wrong results. So if I remove the db out of /etc/postfix it should > > recreate a correct one... although assumptions being the mother of all > > f... ups aside we'll give it a go. > > -- > Working :) mv /etc/postfix/verify.db /etc/postfix/verify.db.bak > > Uncomment the line and reload pfx, all tickety-boo in the land of smtp > vrfy - thanks again to all. We aim to please;-). Now, just make a note of keeping an eye on the filesystem where it resides (so that it doesn't bomb again), as well as the logs...;-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From goetz.reinicke at filmakademie.de Tue Nov 6 15:30:20 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-1?Q?G=F6tz_Reinicke?=) Date: Tue Nov 6 15:55:17 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0934@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473037AA.9010208@ecs.soton.ac.uk> <47307379.60504@filmakademie.de> <7EF0EE5CB3B263488C8C18823239BEBA01FD0934@HC-MBX02.herefordshire.gov.uk> Message-ID: <4730888C.208@filmakademie.de> Hi, I had to install the new version of mailscanner anyway, so I don't know what my production server would have done without reinstalling MailScanner. Regards, G?tz Randal, Phil schrieb: > Did you need to reinstall MailScanner or was the force install of perl sufficient? > > Cheers, > > Phil -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From arturs at netvision.net.il Tue Nov 6 19:29:39 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Tue Nov 6 19:31:11 2007 Subject: Your recommendation please: big volume mail solution Message-ID: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Hi, A client asked me to build for him a mail solution, capable of sending up to 1 milllion emails a day, while each email doesn't exceed 50KB in size. How do I calculate: 1) how many servers 2) how do I calculate the above 3) is there any max emails a day from IP/domain, which triggers black and blocklists 4) what is your recommended software solution On this stage, most distribution would be in single country. Thanks in advance Arthur From ssilva at sgvwater.com Tue Nov 6 19:46:50 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 6 19:47:09 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: on 11/6/2007 11:29 AM Arthur Sherman spake the following: > Hi, > > A client asked me to build for him a mail solution, capable of sending up to > 1 milllion emails a day, while each email doesn't exceed 50KB in size. > > How do I calculate: > 1) how many servers > 2) how do I calculate the above > 3) is there any max emails a day from IP/domain, which triggers black and > blocklists > 4) what is your recommended software solution > > On this stage, most distribution would be in single country. > > Thanks in advance > > Arthur > > Sounds suspiciously like a spammer! Give us his domain so we can blacklist him before he starts ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From Kevin_Miller at ci.juneau.ak.us Tue Nov 6 19:53:31 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Tue Nov 6 19:52:50 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: Scott Silva wrote: > on 11/6/2007 11:29 AM Arthur Sherman spake the following: >> Hi, >> >> A client asked me to build for him a mail solution, capable of >> sending up to 1 milllion emails a day, while each email doesn't >> exceed 50KB in size. >> >> How do I calculate: >> 1) how many servers >> 2) how do I calculate the above >> 3) is there any max emails a day from IP/domain, which triggers >> black and blocklists 4) what is your recommended software solution >> >> On this stage, most distribution would be in single country. >> >> Thanks in advance >> >> Arthur >> >> > Sounds suspiciously like a spammer! > Give us his domain so we can blacklist him before he starts ;-P Just what I was thinking - maybe he should just buy a botnet. ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From arturs at netvision.net.il Tue Nov 6 20:59:27 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Tue Nov 6 21:00:57 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <00e401c820b7$eb5c0700$6402a8c0@dell> > >> A client asked me to build for him a mail solution, capable of > >> sending up to 1 milllion emails a day, while each email doesn't > >> exceed 50KB in size. > >> > >> How do I calculate: > >> 1) how many servers > >> 2) how do I calculate the above > >> 3) is there any max emails a day from IP/domain, which > triggers black > >> and blocklists 4) what is your recommended software solution > >> > >> On this stage, most distribution would be in single country. > >> > >> Thanks in advance > >> > >> Arthur > >> > >> > > Sounds suspiciously like a spammer! > > Give us his domain so we can blacklist him before he starts ;-P > > Just what I was thinking - maybe he should just buy a botnet. > > ...Kevin Well, it could be, frankly. As a matter of fact, it has a working unsubscribe option within a mail, if this counts... Here it does. Maybe, better I build him a mailing system which is less spam aggressive, if I can call it so, instead of botnet and such dirty stuff. :) Thanks anyway. If someone is so kind to help me with this, please feel free to contact me directly From whatisee1 at yahoo.com Tue Nov 6 21:30:04 2007 From: whatisee1 at yahoo.com (W S) Date: Tue Nov 6 21:30:07 2007 Subject: MailScanner + Postfix => very slow... Message-ID: <293749.32785.qm@web57611.mail.re1.yahoo.com> Hi, I?m running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red Hat ES 4. The system is processing over 200,000 emails per day, BUT most of emails (about 95%) are junk / spam and if queue gets over 10,000 it?s freezes all delivery process. Are there any parameters that I can tweak to speed-up the delivery process? Thanks, --WS __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071106/40a0bbda/attachment.html From mailscanner at slackadelic.com Tue Nov 6 21:35:05 2007 From: mailscanner at slackadelic.com (Matt Hayes) Date: Tue Nov 6 21:35:16 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <293749.32785.qm@web57611.mail.re1.yahoo.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> Message-ID: <4730DE09.4010609@slackadelic.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 W S wrote: > Hi, > I?m running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red > Hat ES 4. > The system is processing over 200,000 emails per day, BUT most of emails > (about 95%) are junk / spam and if queue gets over 10,000 it?s freezes > all delivery process. > Are there any parameters that I can tweak to speed-up the delivery process? > > Thanks, > --WS Wow, you might want to look at upgrading your postfix installation.. and there is also a newer release of MailScanner out that may benefit you. As far as tweaks, not sure.. are you doing greylisting.. do you do any RBL checks at the MTA level? These are things that could possibly drop the amount of email your server has to munge through. - -Matt -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMN4Junv8h7s/76wRAh20AJ0eS94Wac10B5i90rlsunHagc9ZWACePue+ 68PoLo0VbBUrPnq9fnc4dmk= =lOzp -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Tue Nov 6 21:41:06 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 6 21:41:19 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <4730DE09.4010609@slackadelic.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> <4730DE09.4010609@slackadelic.com> Message-ID: <4730DF72.1030208@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matt Hayes wrote: > W S wrote: >> Hi, Im running MailScanner (vers. 4.63.8) with Postfix (vers. >> 2.2) on Red Hat ES 4. The system is processing over 200,000 >> emails per day, BUT most of > emails >> (about 95%) are junk / spam and if queue gets over 10,000 its >> freezes all delivery process. Are there any parameters that I can >> tweak to speed-up the delivery > process? > >> Thanks, --WS > > > Wow, you might want to look at upgrading your postfix > installation.. and there is also a newer release of MailScanner out > that may benefit you. > > As far as tweaks, not sure.. are you doing greylisting.. do you do > any RBL checks at the MTA level? These are things that could > possibly drop the amount of email your server has to munge through. > > > -Matt Also, take a look at BarricadeMX as it may solve all your problems. Free trials are available from www.fsl.com. Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMN9yEfZZRxQVtlQRAuvHAJ9Dh7CD3ZLv6+sJuV2FKjr1j0ClkACgwfxL 3JVGh/tXCvKq9NxXlOugReg= =qXjc -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From uxbod at splatnix.net Tue Nov 6 22:07:20 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 6 22:05:27 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <4730DF72.1030208@ecs.soton.ac.uk> Message-ID: <7128612.6941194386840015.JavaMail.root@office.splatnix.net> Nice plug Jules ;) but a better licensing model may be good :D What RBLs are you running ? Please specify any additional plugins ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Julian Field" To: "MailScanner discussion" Sent: Tuesday, November 6, 2007 9:41:06 PM (GMT) Europe/London Subject: Re: MailScanner + Postfix => very slow... -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Matt Hayes wrote: > W S wrote: >> Hi, Im running MailScanner (vers. 4.63.8) with Postfix (vers. >> 2.2) on Red Hat ES 4. The system is processing over 200,000 >> emails per day, BUT most of > emails >> (about 95%) are junk / spam and if queue gets over 10,000 its >> freezes all delivery process. Are there any parameters that I can >> tweak to speed-up the delivery > process? > >> Thanks, --WS > > > Wow, you might want to look at upgrading your postfix > installation.. and there is also a newer release of MailScanner out > that may benefit you. > > As far as tweaks, not sure.. are you doing greylisting.. do you do > any RBL checks at the MTA level? These are things that could > possibly drop the amount of email your server has to munge through. > > > -Matt Also, take a look at BarricadeMX as it may solve all your problems. Free trials are available from www.fsl.com. Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMN9yEfZZRxQVtlQRAuvHAJ9Dh7CD3ZLv6+sJuV2FKjr1j0ClkACgwfxL 3JVGh/tXCvKq9NxXlOugReg= =qXjc -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Tue Nov 6 22:19:31 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 6 22:21:45 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <7128612.6941194386840015.JavaMail.root@office.splatnix.net> References: <4730DF72.1030208@ecs.soton.ac.uk> <7128612.6941194386840015.JavaMail.root@office.splatnix.net> Message-ID: on 11/6/2007 2:07 PM UxBoD spake the following: > Nice plug Jules ;) but a better licensing model may be good :D > > What RBLs are you running ? Please specify any additional plugins ? > > Regards, Its licensed under the "I need to eat, too!" license ;-D -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From arturs at netvision.net.il Tue Nov 6 23:42:17 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Tue Nov 6 23:43:47 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <011301c820ce$aa65cfd0$6402a8c0@dell> I posted this question in several lists and, amazingly, I got badly flamed. :) Many demanded the IP or domain to block, even threatened me to block my own mail servers, which never sent a spam. Not all though, actually some of gurus were quite understanding... Let me clear some points here: The services my company provides are legit spam-proof etc hosting services. The client turned to us for because of quality he believes we have in building mailers, i.e. technical expertise netto. Legally, he has the right to do such mailing in Israel. His mailing will be in Israel only, and has working Unsubscribe option - we are scrupulous about this part. His DB was legally bought from legit provider, not us also. I checked the DB is legit here. His servers will be neither in our data center, nor in our IP range, as he builds his own data center, which will host his servers. Discussing this in open forum was made in effort to openly discuss the business need, and find a solution to make him as least spammer as possible, while still allowing him the functonality he seeks. Don't you deny the business need for big email volumes? He will become a legit "marketing"-mailing service provider in Israel. We better start thinking in this direction also, the sooner the better - the market demands... Thank you Arthur From rwahyudi at gmail.com Wed Nov 7 00:05:06 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Wed Nov 7 00:03:14 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue Message-ID: <47310132.3030901@gmail.com> Hi All, We have bunch of postfix server to filter spam for incoming mail. These servers sits in front of actual mail server. For some reason mail delivery is slow because email is sitting in incoming queue for too long. Most of these files have 0700 permission. I have read http://www.postfix.org/QSHAPE_README.html#incoming_queue . In the document it stated that : "The main factors slowing down the queue manager are disk I/O and lookup queries to the trivial-rewrite service. " In my case, I think the disk and lookup queries are fast enough. Lookup queries is done locally from hash file. I also don't think there is no correlation between disk IO utilization and the number of email in incoming queue. postfix spool directory mounted on reiserfs partition with notail and noatime. I asked postfix mailing list because I thought this is something to do with postfix. But their replay was short and sweet : 'Nuff said, you are using Mailscanner. Stop using Mailscanner and the problem will go away. Mailscanner has a long history of causing various similar issues, it is not supported here. Can anyone give me suggestion on how to speed this up ? Anyone experiencing same issue with mailscanner ? Disk IO Graph : IO Graph http://img91.imageshack.us/my.php?image=vscan4diskiozy4.png Postfix Graph : Postfix Graph http://img230.imageshack.us/my.php?image=vscan4queueux2.png Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/348cebbe/attachment.html From ssilva at sgvwater.com Wed Nov 7 00:21:23 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 00:21:35 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <011301c820ce$aa65cfd0$6402a8c0@dell> References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: on 11/6/2007 3:42 PM Arthur Sherman spake the following: > I posted this question in several lists and, amazingly, I got badly flamed. > :) > Many demanded the IP or domain to block, even threatened me to block my own > mail servers, which never sent a spam. > Not all though, actually some of gurus were quite understanding... > > Let me clear some points here: > > The services my company provides are legit spam-proof etc hosting services. > The client turned to us for because of quality he believes we have in > building mailers, i.e. technical expertise netto. > Legally, he has the right to do such mailing in Israel. > His mailing will be in Israel only, and has working Unsubscribe option - we > are scrupulous about this part. > His DB was legally bought from legit provider, not us also. I checked the DB > is legit here. > His servers will be neither in our data center, nor in our IP range, as he > builds his own data center, which will host his servers. > > Discussing this in open forum was made in effort to openly discuss the > business need, and find a solution to make him as least spammer as possible, > while still allowing him the functonality he seeks. > Don't you deny the business need for big email volumes? > He will become a legit "marketing"-mailing service provider in Israel. > We better start thinking in this direction also, the sooner the better - the > market demands... > > Thank you > Arthur > > I'm sorry, but even though I believe in Opt-in mailing, I do not believe in Opt-out mailings, no matter how "legitimate" someone thinks it might be. Opt-in means I asked you to send me something. Opt-out means you sent something I did not ask for, and even if you have a working unsubscribe, I still didn't ask for it. If I moved into your house without your permission, but offered to leave if you asked me to, would you be alright with it? If it is from a purchased list, it will be an unsolicited message. 1 million a day will be bulk e-mail. So unsolicited + bulk e-mail = UCE = spam ! You can't argue with the math. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 00:43:12 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 00:43:26 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: on 11/6/2007 4:21 PM Scott Silva spake the following: > on 11/6/2007 3:42 PM Arthur Sherman spake the following: >> I posted this question in several lists and, amazingly, I got badly >> flamed. >> :) >> Many demanded the IP or domain to block, even threatened me to block >> my own >> mail servers, which never sent a spam. >> Not all though, actually some of gurus were quite understanding... >> >> Let me clear some points here: >> >> The services my company provides are legit spam-proof etc hosting >> services. >> The client turned to us for because of quality he believes we have in >> building mailers, i.e. technical expertise netto. >> Legally, he has the right to do such mailing in Israel. >> His mailing will be in Israel only, and has working Unsubscribe option >> - we >> are scrupulous about this part. >> His DB was legally bought from legit provider, not us also. I checked >> the DB >> is legit here. >> His servers will be neither in our data center, nor in our IP range, >> as he >> builds his own data center, which will host his servers. >> >> Discussing this in open forum was made in effort to openly discuss the >> business need, and find a solution to make him as least spammer as >> possible, >> while still allowing him the functonality he seeks. >> Don't you deny the business need for big email volumes? >> He will become a legit "marketing"-mailing service provider in Israel. >> We better start thinking in this direction also, the sooner the better >> - the >> market demands... >> >> Thank you >> Arthur >> >> > I'm sorry, but even though I believe in Opt-in mailing, I do not believe > in Opt-out mailings, no matter how "legitimate" someone thinks it might be. > Opt-in means I asked you to send me something. Opt-out means you sent > something I did not ask for, and even if you have a working unsubscribe, > I still didn't ask for it. If I moved into your house without your > permission, but offered to leave if you asked me to, would you be > alright with it? > > If it is from a purchased list, it will be an unsolicited message. > 1 million a day will be bulk e-mail. > So unsolicited + bulk e-mail = UCE = spam ! > > You can't argue with the math. > > s/UCE/UBE -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From steve.swaney at fsl.com Wed Nov 7 00:55:43 2007 From: steve.swaney at fsl.com (Steve Swaney) Date: Wed Nov 7 00:56:09 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <011301c820ce$aa65cfd0$6402a8c0@dell> References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: <47310D0F.4010709@fsl.com> I happen to agree with you and we do provide services to legit mailers - once we make sure they are legit :) Steve Arthur Sherman wrote: > I posted this question in several lists and, amazingly, I got badly flamed. > :) > Many demanded the IP or domain to block, even threatened me to block my own > mail servers, which never sent a spam. > Not all though, actually some of gurus were quite understanding... > > Let me clear some points here: > > The services my company provides are legit spam-proof etc hosting services. > The client turned to us for because of quality he believes we have in > building mailers, i.e. technical expertise netto. > Legally, he has the right to do such mailing in Israel. > His mailing will be in Israel only, and has working Unsubscribe option - we > are scrupulous about this part. > His DB was legally bought from legit provider, not us also. I checked the DB > is legit here. > His servers will be neither in our data center, nor in our IP range, as he > builds his own data center, which will host his servers. > > Discussing this in open forum was made in effort to openly discuss the > business need, and find a solution to make him as least spammer as possible, > while still allowing him the functonality he seeks. > Don't you deny the business need for big email volumes? > He will become a legit "marketing"-mailing service provider in Israel. > We better start thinking in this direction also, the sooner the better - the > market demands... > > Thank you > Arthur > > > From lists at sequestered.net Wed Nov 7 01:00:02 2007 From: lists at sequestered.net (Jay Chandler) Date: Wed Nov 7 01:00:38 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47310132.3030901@gmail.com> References: <47310132.3030901@gmail.com> Message-ID: <47310E12.1010501@sequestered.net> R Wahyudi wrote: > > But their replay was short and sweet : > > 'Nuff said, you are using Mailscanner. Stop using Mailscanner and the > problem will go away. Mailscanner has a long history of causing various > similar issues, it is not supported here. > Ah, the sweet smell of misleading bullshit. I've been running Postfix with MailScanner for two years, both here and as a University mail handler for half a million messages a day. No worries. Latest versions of both are ALWAYS a good plan, but past that I've never seen an instance of corruption or delay based on this model. -- Jay Chandler / KB1JWQ Living Legend / Systems Exorcist Today's Excuse: divide-by-zero error From arturs at netvision.net.il Wed Nov 7 01:07:04 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Wed Nov 7 01:08:34 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <012d01c820da$8277ae60$6402a8c0@dell> > I'm sorry, but even though I believe in Opt-in mailing, I do > not believe in Opt-out mailings, no matter how "legitimate" > someone thinks it might be. > Opt-in means I asked you to send me something. Opt-out means > you sent something I did not ask for, and even if you have a > working unsubscribe, I still didn't ask for it. If I moved > into your house without your permission, but offered to leave > if you asked me to, would you be alright with it? > > If it is from a purchased list, it will be an unsolicited message. > 1 million a day will be bulk e-mail. > So unsolicited + bulk e-mail = UCE = spam ! > > You can't argue with the math. Sounds confident, no words. Thanks Arthur From hvdkooij at vanderkooij.org Wed Nov 7 01:19:57 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 01:20:24 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <4730362E.4040606@filmakademie.de> References: <4730362E.4040606@filmakademie.de> Message-ID: <473112BD.50100@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 G?tz Reinicke wrote: > Hi, > > I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 mailserver > with the latest perl (perl-5.8.8-10.el5_0.2) rpm from Red Hat, but there > are a lot of conflicts with file from package installed by Mailscanner. > > e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. > > So what may I do? Force the update of the Red Hat perl.rpm? > > Any suggestions?? > > Thanks for hints and tips and for Mailscanner anyway! My approach was to pick the mailscanner rpm out of the total installer. Then see what it started to nag about when I try to install it manually and install all the additional packages from rpmforge. In effect it means one has to skip the use of the install script on Centos 5 and do a few things by hand. But it prevented me from getting any conflicts like you show now. I find the use of the --force option not a good way. Granted it is not as bad as `make love --force` but still .... Hmm. after this double shift I will go to bed now and see if I can make the few changes to the mailscanner spc file so it works with rpmforge later this week. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMRK7BvzDRVjxmYERAt72AJ44Tn79a9p0J7TQlERKdJrQmkBjGgCeMdww NrrYvKJM614znhnPnaQZYL8= =jTf2 -----END PGP SIGNATURE----- From rwahyudi at gmail.com Wed Nov 7 02:25:19 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Wed Nov 7 02:23:30 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47310E12.1010501@sequestered.net> References: <47310132.3030901@gmail.com> <47310E12.1010501@sequestered.net> Message-ID: <4731220F.6080705@gmail.com> Thanks for your reply Jay, On average, how much email sitting on your postfix incoming queue ? I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. I dont see any changes between these version of postfix / mailscanner when it comes to processing incoming queue, and I dont see any reason for current mailscanner/postfix will fix this. Anyway .. I will upgrade postfix + Mailscanner to latest version, and I will post an update. Regards, Rianto Wahyudi Jay Chandler wrote: > R Wahyudi wrote: > > >> >> But their replay was short and sweet : >> >> 'Nuff said, you are using Mailscanner. Stop using Mailscanner and >> the >> problem will go away. Mailscanner has a long history of causing >> various >> similar issues, it is not supported here. >> > > > Ah, the sweet smell of misleading bullshit. > > I've been running Postfix with MailScanner for two years, both here > and as a University mail handler for half a million messages a day. > > No worries. > > Latest versions of both are ALWAYS a good plan, but past that I've > never seen an instance of corruption or delay based on this model. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/aa059ac4/attachment.html From whatisee1 at yahoo.com Wed Nov 7 04:13:03 2007 From: whatisee1 at yahoo.com (W S) Date: Wed Nov 7 04:13:05 2007 Subject: How-to verify valid internal email addresses --- up front Message-ID: <13601.11482.qm@web57605.mail.re1.yahoo.com> Folks, I have this Hub, up in front, which process all incoming emails (running Postfix and MailScanner). This Hub is bluntly accepting ALL emails from outside and runs every single email thru MailScanner (ClamAV, Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal email server. Now, is there any way to build some sort of MAP or database file (btree, hash ) from valid internal email addresses and set it on the Hub in order to reduce the queue? Regards, --W.S. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071106/8074161b/attachment.html From mailscanner at mckerrs.net Wed Nov 7 05:04:13 2007 From: mailscanner at mckerrs.net (Mailscanner Admin) Date: Wed Nov 7 05:03:47 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <23965602.121194411853236.JavaMail.root@zimbra.mckerrs.net> What is the other internal email server ? I run zimbra as my 'internal' email server and I configured postfix to use ldap and perform lookups directly to zimbra's directory. Works very well for me, but I'm only receiving around 500 emails per day. I have seen scripts to collect AD accounts from exchange and create a map file. Cheers. ----- Original Message ----- From: "W S" To: mailscanner@lists.mailscanner.info, whatisee1@yahoo.com Sent: Wednesday, November 7, 2007 2:13:03 PM (GMT+1000) Australia/Brisbane Subject: How-to verify valid internal email addresses --- up front Folks, I have this Hub, up in front, which process all incoming emails (running Postfix and MailScanner). This Hub is bluntly accepting ALL emails from outside and runs every single email thru MailScanner (ClamAV, Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal email server. Now, is there any way to build some sort of MAP or database file (btree, hash ) from valid internal email addresses and set it on the Hub in order to reduce the queue? Regards, --W.S. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/e317cfa4/attachment.html From ram at netcore.co.in Wed Nov 7 06:39:48 2007 From: ram at netcore.co.in (ram) Date: Wed Nov 7 06:39:53 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: <1194417588.15925.12.camel@localhost.localdomain> On Tue, 2007-11-06 at 21:29 +0200, Arthur Sherman wrote: > Hi, > > A client asked me to build for him a mail solution, capable of sending up to > 1 milllion emails a day, while each email doesn't exceed 50KB in size. > > How do I calculate: > 1) how many servers > 2) how do I calculate the above > 3) is there any max emails a day from IP/domain, which triggers black and > blocklists > 4) what is your recommended software solution > > On this stage, most distribution would be in single country. > > Thanks in advance > > Arthur > > This is more of a MTA question. Dont really need MailScanner. Using a postfix MTA my outgoing server (singe Xeon , 3.5GB RAM ) is able to send 200k mails a day without much issues. This is not a dedicated machine too , it has other roles too Thanks Ram From prandal at herefordshire.gov.uk Wed Nov 7 07:14:06 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 7 07:14:20 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <293749.32785.qm@web57611.mail.re1.yahoo.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD09E7@HC-MBX02.herefordshire.gov.uk> Which version of SpamAssassin? Do you run sa-update regularly? Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of W S Sent: 06 November 2007 21:30 To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com Subject: MailScanner + Postfix => very slow... Hi, I'm running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red Hat ES 4. The system is processing over 200,000 emails per day, BUT most of emails (about 95%) are junk / spam and if queue gets over 10,000 it's freezes all delivery process. Are there any parameters that I can tweak to speed-up the delivery process? Thanks, --WS __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/0c721df9/attachment.html From hvdkooij at vanderkooij.org Wed Nov 7 08:52:16 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 08:52:41 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4731220F.6080705@gmail.com> References: <47310132.3030901@gmail.com> <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> Message-ID: <47317CC0.5070806@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 R Wahyudi wrote: > Thanks for your reply Jay, > > On average, how much email sitting on your postfix incoming queue ? > I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. > > I dont see any changes between these version of postfix / mailscanner > when it comes to processing incoming queue, > and I dont see any reason for current mailscanner/postfix will fix this. > > Anyway .. I will upgrade postfix + Mailscanner to latest version, and I > will post an update. Also add relevant details. Like how you do the handover from postfix to mailscanner exactly. What does it show in the logs? if you can put a serious section of log somewhere then it might show what actually goes on. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMXy/BvzDRVjxmYERAu+XAJ9GpVdengy3kbpCy8NG0YSISg/88QCgr6bK BiSyjrPJg9ys69Sf11bVG7A= =yKYX -----END PGP SIGNATURE----- From J.Ede at birchenallhowden.co.uk Wed Nov 7 09:13:40 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 09:15:04 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> References: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA22@server02.bhl.local> You might want to look at http://www.postfix.org/ADDRESS_VERIFICATION_README.html I use the reject_unverified_recipient and its made a huge difference. Jason From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of W S [whatisee1@yahoo.com] Sent: 07 November 2007 04:13 To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com Subject: How-to verify valid internal email addresses --- up front Folks, I have this Hub, up in front, which process all incoming emails (running Postfix and MailScanner). This Hub is bluntly accepting ALL emails from outside and runs every single email thru MailScanner (ClamAV, Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal email server. Now, is there any way to build some sort of MAP or database file (btree, hash?) from valid internal email addresses and set it on the Hub in order to reduce the queue? Regards, --W.S. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/c0784938/attachment.html From J.Ede at birchenallhowden.co.uk Wed Nov 7 09:15:07 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 09:17:37 2007 Subject: MailScanner + Postfix => very slow... In-Reply-To: <293749.32785.qm@web57611.mail.re1.yahoo.com> References: <293749.32785.qm@web57611.mail.re1.yahoo.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA24@server02.bhl.local> Apart from upgrading the versions... Do you reject any mails at smtp level by using blacklists such as spamhaus, spamcop etc? or have you looked at using greylisting and/or reject_unverified_recipient in order to reduce the amount of actual processing of emails? There's no point accepting and scanning an email if its not a valid address that can be delivered. Jason ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of W S [whatisee1@yahoo.com] Sent: 06 November 2007 21:30 To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com Subject: MailScanner + Postfix => very slow... Hi, I?m running MailScanner (vers. 4.63.8) with Postfix (vers. 2.2) on Red Hat ES 4. The system is processing over 200,000 emails per day, BUT most of emails (about 95%) are junk / spam and if queue gets over 10,000 it?s freezes all delivery process. Are there any parameters that I can tweak to speed-up the delivery process? Thanks, --WS __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/5f27a3c3/attachment.html From glenn.steen at gmail.com Wed Nov 7 10:15:28 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 10:15:32 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4731220F.6080705@gmail.com> References: <47310132.3030901@gmail.com> <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> Message-ID: <223f97700711070215pa749b94u58eda776ef2989bf@mail.gmail.com> On 07/11/2007, R Wahyudi wrote: > > Thanks for your reply Jay, > > On average, how much email sitting on your postfix incoming queue ? > I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. > > I dont see any changes between these version of postfix / mailscanner when > it comes to processing incoming queue, > and I dont see any reason for current mailscanner/postfix will fix this. > > Anyway .. I will upgrade postfix + Mailscanner to latest version, and I > will post an update. > Well, since these are GW systems... It might not be them slowing things down. It just might be "on the receiving end". As is, we know way to little about your topology/infrastructure/software/versions to be able to tell anything for sure. Is it the same for all gateways, or is it just the one? What does the logs (mail as well as system) say? What performance tweaking have you done so far? Since this is all _after_ MailScanner is done, it is a bit OT, but ... post up some info and some logs and we'll see what we can do:-). BTW, do you use any milters? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Wed Nov 7 10:28:57 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 10:29:00 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> References: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <223f97700711070228n3813ddf0k58dab082c76e0b92@mail.gmail.com> On 07/11/2007, W S wrote: > Folks, > I have this Hub, up in front, which process all incoming emails (running > Postfix and MailScanner). This Hub is bluntly accepting ALL emails from > outside and runs every single email thru MailScanner (ClamAV, Spamassassin, > RBL, DNSBL etc) and relaying all JUNK to another internal email server. > Now, is there any way to build some sort of MAP or database file (btree, > hash?) from valid internal email addresses and set it on the Hub in order to > reduce the queue? > Regards, > --W.S. > Apart from the excellent advice you already got, there is a bit on this in the wiki/MAQ: http://wiki.mailscanner.info/doku.php?id=maq:index#using_with_exchange_domino_etc http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:reject_non_existent_users#rejecting_unknown_non-local_users (watch out for linewrapping... two separate links above;-). These methods are mostly for situations where you cannot get the destination MTA to reliably reject invalid/unknown users, or where you don't want to put the pressure of recipient address verification (as described in the link Jay gave you) on the downstream server. Inventing your own method via ldapsearch or whatever is usually trivial... All the map need be is a list of valid email addresses and a "1" or "OK" or similar (the "key" doesn't really matter, just need be there:-) ... something like: user1@example.net 1 user2@example.net 1 ... userN@example.net 1 ... hash that, use it in the relevant recipient_maps setting ... and you are good to go;-) ... The links above might be a bit more verbose:-D Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Wed Nov 7 10:34:28 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 10:34:31 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <223f97700711070228n3813ddf0k58dab082c76e0b92@mail.gmail.com> References: <13601.11482.qm@web57605.mail.re1.yahoo.com> <223f97700711070228n3813ddf0k58dab082c76e0b92@mail.gmail.com> Message-ID: <223f97700711070234w3a2cb1d4ya4b1d7a1d09f26fe@mail.gmail.com> On 07/11/2007, Glenn Steen wrote: (snip) > described in the link Jay gave you) on the downstream server. s/Jay/Jason/ ... Sorry...:) Just so you know... a requirement for using Postfix is that on e continually replies to ones own emails...:-):-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From Andreas.Doerfler at kempten.de Wed Nov 7 10:53:11 2007 From: Andreas.Doerfler at kempten.de (=?iso-8859-1?Q?D=F6rfler_Andreas?=) Date: Wed Nov 7 10:54:01 2007 Subject: whitelisted spam In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA24@server02.bhl.local> Message-ID: hey there, since a few weeks i?m running into a strange problem. a specific kind of (high sa score) spammail is very often marked as whitelisted, but none of the recipients is on the whitelist. is there any way to see what whitelist entry ms is using to mark it that way ? greetings andy From gerard at seibercom.net Wed Nov 7 11:15:41 2007 From: gerard at seibercom.net (Gerard Seibert) Date: Wed Nov 7 11:15:02 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4731220F.6080705@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> Message-ID: <20071107061527.DB22.GERARD@seibercom.net> On Tuesday November 06, 2007 at 09:25:19 (PM) R Wahyudi wrote: > On average, how much email sitting on your postfix incoming queue ? > I am currently using MailScanner-4.61.7-2 & postfix-2.3.2-2. > > I dont see any changes between these version of postfix / mailscanner > when it comes to processing incoming queue, > and I dont see any reason for current mailscanner/postfix will fix this. > > Anyway .. I will upgrade postfix + Mailscanner to latest version, and I > will post an update. It would really help if you could post the configuration files. On the postfix side, doing a: 'postconf -n' will produce the needed output. Post that here with all the relevant mailscanner settings. As always, using the latest versions of both programs is highly recommended. There have been some changes in Postfix from ver. 2.3.x to 2.4.x and it would behoove you to study up on them. Don't go the ver. 2.5.x route as it is still a beta. Also, please post your logs. They are invaluable in these situations. -- Gerard From arturs at netvision.net.il Wed Nov 7 11:37:42 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Wed Nov 7 11:39:13 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <1194417588.15925.12.camel@localhost.localdomain> Message-ID: <01b901c82132$9c0ba770$6402a8c0@dell> thanks > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of ram > Sent: Wednesday, November 07, 2007 8:40 AM > To: MailScanner discussion > Subject: Re: Your recommendation please: big volume mail solution > > On Tue, 2007-11-06 at 21:29 +0200, Arthur Sherman wrote: > > Hi, > > > > A client asked me to build for him a mail solution, capable > of sending > > up to > > 1 milllion emails a day, while each email doesn't exceed > 50KB in size. > > > > How do I calculate: > > 1) how many servers > > 2) how do I calculate the above > > 3) is there any max emails a day from IP/domain, which > triggers black > > and blocklists > > 4) what is your recommended software solution > > > > On this stage, most distribution would be in single country. > > > > Thanks in advance > > > > Arthur > > > > > This is more of a MTA question. Dont really need MailScanner. > > Using a postfix MTA my outgoing server (singe Xeon , 3.5GB > RAM ) is able to send 200k mails a day without much issues. > > This is not a dedicated machine too , it has other roles too > > Thanks > Ram > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From goetz.reinicke at filmakademie.de Wed Nov 7 12:43:44 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Wed Nov 7 12:46:41 2007 Subject: mailsubject modified, but no information in the header Message-ID: <4731B300.2030302@filmakademie.de> Hi, I got a mail whose subject line was modified to be a spam. But in the mail header I have no information, why this message was marked as spam. I do remember that I can set an option to add this information to the header ... Forthormore, some users have also there own spamassassin settings (e.g. the global spamscore to drop spam is 8, but some users want tohave it set to 5 or less ...) The mail I mentioned was marked by this settings as no spam .... Any hints to help me solving this kind of problem? Which settings or may I check? Thanks and best regards! G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From glenn.steen at gmail.com Wed Nov 7 12:55:07 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 12:55:10 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <4731B300.2030302@filmakademie.de> References: <4731B300.2030302@filmakademie.de> Message-ID: <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> On 07/11/2007, G?tz Reinicke wrote: > Hi, > > I got a mail whose subject line was modified to be a spam. > > But in the mail header I have no information, why this message was > marked as spam. > > I do remember that I can set an option to add this information to the > header ... > > Forthormore, some users have also there own spamassassin settings (e.g. > the global spamscore to drop spam is 8, but some users want tohave it > set to 5 or less ...) > > The mail I mentioned was marked by this settings as no spam .... > > Any hints to help me solving this kind of problem? Which settings or may > I check? > > Thanks and best regards! > > G?tz Hello G?tz, A few examples say a lot more than a lot of words.... Chould you show us the relevant headers (Subject: and the MailScanner ones)? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From ram at netcore.co.in Wed Nov 7 11:02:09 2007 From: ram at netcore.co.in (ram) Date: Wed Nov 7 13:00:46 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47310132.3030901@gmail.com> References: <47310132.3030901@gmail.com> Message-ID: <1194433329.3372.14.camel@localhost.localdomain> On Wed, 2007-11-07 at 11:05 +1100, R Wahyudi wrote: > Hi All, > > We have bunch of postfix server to filter spam for incoming mail. > These servers sits in front of actual mail server. > > For some reason mail delivery is slow because email is sitting in > incoming queue > for too long. Most of these files have 0700 permission. > > I have read http://www.postfix.org/QSHAPE_README.html#incoming_queue. > In the document it stated that : > > "The main factors slowing down the queue manager are disk I/O and > lookup queries to the trivial-rewrite service. " > > In my case, I think the disk and lookup queries are fast enough. > Lookup queries is done locally from > hash file. I also don't think there is no correlation between disk IO > utilization and the number of email in incoming queue. > postfix spool directory mounted on reiserfs partition with notail and > noatime. Please give more details How many mails do you receive per hour , what checks do you at MTA etc. How many mails really go into hold queue per hour What is the delay in mails you are seeing Thanks Ram From goetz.reinicke at filmakademie.de Wed Nov 7 13:08:37 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-1?Q?G=F6tz_Reinicke?=) Date: Wed Nov 7 13:12:30 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> References: <4731B300.2030302@filmakademie.de> <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> Message-ID: <4731B8D5.2050504@filmakademie.de> Glenn Steen schrieb: > On 07/11/2007, G?tz Reinicke wrote: >> Hi, >> >> I got a mail whose subject line was modified to be a spam. >> >> But in the mail header I have no information, why this message was >> marked as spam. >> >> I do remember that I can set an option to add this information to the >> header ... >> >> Forthormore, some users have also there own spamassassin settings (e.g. >> the global spamscore to drop spam is 8, but some users want tohave it >> set to 5 or less ...) >> >> The mail I mentioned was marked by this settings as no spam .... >> >> Any hints to help me solving this kind of problem? Which settings or may >> I check? >> >> Thanks and best regards! >> >> G?tz > Hello G?tz, > > A few examples say a lot more than a lot of words.... Chould you show > us the relevant headers (Subject: and the MailScanner ones)? Hi, thanks for trieing to help. The Subject looks after the mailscannerscanning like this (including the ""): {Spam?} "Status-M?glichkeiten-Zukunft von Picasso" The header looks like this: Return-Path: Received: from NB10356 (c-134-96-139.s.dial.de.ignite.net [62.134.96.139]) (authenticated bits=0) by mail.filmakademie.de (8.13.8/8.13.8) with ESMTP id lA78kE0C021105 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO); Wed, 7 Nov 2007 09:46:18 +0100 From: "Uwe Kurz" To: "Goetz Reinicke" , "Oliver Ruof" , "Benjamin Schreiber" , "Reiner Pfeiffer" Subject: {Spam?} =?iso-8859-1?Q?_=22Status-M=F6glichkeiten-Zukunft_von_Picasso=22?= Date: Wed, 7 Nov 2007 09:46:13 +0100 Message-ID: <000001c8211a$aa6f3420$8b60863e@NB10356> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C82123.0C339C20" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 X-Filmakademie-MailScanner-Information: Please contact the ISP for more information X-Filmakademie-MailScanner: Found to be clean X-Filmakademie-MailScanner-From: uwe.kurz@filmakademie.de -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From glenn.steen at gmail.com Wed Nov 7 13:35:34 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 13:35:37 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <4731B8D5.2050504@filmakademie.de> References: <4731B300.2030302@filmakademie.de> <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com> <4731B8D5.2050504@filmakademie.de> Message-ID: <223f97700711070535m3c2799a9v8af5c2ecb2f6e037@mail.gmail.com> On 07/11/2007, G?tz Reinicke wrote: > Glenn Steen schrieb: > > On 07/11/2007, G?tz Reinicke wrote: > >> Hi, > >> > >> I got a mail whose subject line was modified to be a spam. > >> > >> But in the mail header I have no information, why this message was > >> marked as spam. > >> > >> I do remember that I can set an option to add this information to the > >> header ... > >> > >> Forthormore, some users have also there own spamassassin settings (e.g. > >> the global spamscore to drop spam is 8, but some users want tohave it > >> set to 5 or less ...) > >> > >> The mail I mentioned was marked by this settings as no spam .... > >> > >> Any hints to help me solving this kind of problem? Which settings or may > >> I check? > >> > >> Thanks and best regards! > >> > >> G?tz > > Hello G?tz, > > > > A few examples say a lot more than a lot of words.... Chould you show > > us the relevant headers (Subject: and the MailScanner ones)? > > Hi, > > thanks for trieing to help. > > The Subject looks after the mailscannerscanning like this (including the > ""): > > {Spam?} "Status-M?glichkeiten-Zukunft von Picasso" > > The header looks like this: > > > Return-Path: > Received: from NB10356 (c-134-96-139.s.dial.de.ignite.net [62.134.96.139]) > (authenticated bits=0) > by mail.filmakademie.de (8.13.8/8.13.8) with ESMTP id lA78kE0C021105 > (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO); > Wed, 7 Nov 2007 09:46:18 +0100 > From: "Uwe Kurz" > To: "Goetz Reinicke" , > "Oliver Ruof" , > "Benjamin Schreiber" , > "Reiner Pfeiffer" > Subject: {Spam?} > =?iso-8859-1?Q?_=22Status-M=F6glichkeiten-Zukunft_von_Picasso=22?= > Date: Wed, 7 Nov 2007 09:46:13 +0100 > Message-ID: <000001c8211a$aa6f3420$8b60863e@NB10356> > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----=_NextPart_000_0001_01C82123.0C339C20" > X-Priority: 3 (Normal) > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook, Build 10.0.2627 > Importance: Normal > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > X-Filmakademie-MailScanner-Information: Please contact the ISP for more > information > X-Filmakademie-MailScanner: Found to be clean > X-Filmakademie-MailScanner-From: uwe.kurz@filmakademie.de > And what log entries do you have for that message? Do you have http://www.mailscanner.info/MailScanner.conf.index.html#Always%20Include%20SpamAssassin%20Report set to "yes"? What BLs do you have defined in MailScanner? If you have ANY AT ALL, a hit on these will render the message to be marked as spam, regardless of what SpamAssassin thinks about it. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From lhaig at haigmail.com Wed Nov 7 14:41:30 2007 From: lhaig at haigmail.com (Lance Haig) Date: Wed Nov 7 14:41:36 2007 Subject: Mailscanner, webhosting, and e-mail on an ubuntu server. Message-ID: <4731CE9A.4070103@haigmail.com> Does anyone do that here currently? I want to set-up a server for family and people and I would like to have an all in one box to do it on. I found this http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu but that just covers the MailScanner bit. I would appreciate any information. Ta Lance From lhaig at haigmail.com Wed Nov 7 14:49:55 2007 From: lhaig at haigmail.com (Lance Haig) Date: Wed Nov 7 14:49:58 2007 Subject: Bongo Project Message-ID: <4731D093.9010905@haigmail.com> Hi Julian, I am part of the team working on the Bongo Project Mail system http://www.bongo-project.org I suggested to the developers that we try to create an agent in our system that integrates MailScanner into our SMTP agent. The guy who wrote the SMTP agent seemed keen to do this and I was wondering if you had any documentation for developers that I could pass on? I know that MS uses a queue based system and said so to the guy. We currently have a antispam agent that uses spamassasin as the engine so I don't think it would be very difficult to change that to accommodate MS. Any guidance that you have for me to pass on to the developers would be great. Regards Lance From MailScanner at ecs.soton.ac.uk Wed Nov 7 15:05:04 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 7 15:05:16 2007 Subject: Bongo Project In-Reply-To: <4731D093.9010905@haigmail.com> References: <4731D093.9010905@haigmail.com> Message-ID: <4731D420.5050506@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 So you're basically wanting another MTA supported? This is quite a bit of work. If it uses one file per message, base it on the Sendmail.pm and SMDiskStore.pm. If it uses two files per message, base it on the Postfix or Exim support equivalents. I didn't write the Exim support, but I did write the Postfix support based on the Exim support, so you can do the same. The ZMailer support was written by someone else too, based on my Sendmail support. So other people have been down this road, you basically just need to implement the same API. Hope that helps get you started, Jules. Lance Haig wrote: > Hi Julian, > > I am part of the team working on the Bongo Project Mail system > http://www.bongo-project.org > > I suggested to the developers that we try to create an agent in our > system that integrates MailScanner into our SMTP agent. The guy > who wrote the SMTP agent seemed keen to do this and I was wondering > if you had any documentation for developers that I could pass on? > > I know that MS uses a queue based system and said so to the guy. > > We currently have a antispam agent that uses spamassasin as the > engine so I don't think it would be very difficult to change that > to accommodate MS. > > Any guidance that you have for me to pass on to the developers > would be great. > > Regards > > Lance > > > > > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMdQgEfZZRxQVtlQRAkORAKCCSHvMWDCO//4/M+34tx5Vxd5RyACeP5q9 O5HDHjf5xy5P05RpzQEkKLM= =qfwv -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From goetz.reinicke at filmakademie.de Wed Nov 7 14:59:44 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Wed Nov 7 15:09:49 2007 Subject: very old messages in /var/spool/mqueue.in Message-ID: <4731D2E0.8010604@filmakademie.de> Hi, MailScanner tells me, that it has still a lot (for our system) of messages waiting: New Batch: Found 2811 messages waiting in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot from 2006. A lot of messages ar rubbish or spam. Waht to do with the messages or how to monitor which are still goom ham mails? As usual, thanks for any hints! Regards G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From sailer at bnl.gov Wed Nov 7 15:17:39 2007 From: sailer at bnl.gov (Tim Sailer) Date: Wed Nov 7 15:17:50 2007 Subject: Mailscanner, webhosting, and e-mail on an ubuntu server. In-Reply-To: <4731CE9A.4070103@haigmail.com> References: <4731CE9A.4070103@haigmail.com> Message-ID: <20071107151738.GA6705@bnl.gov> On Wed, Nov 07, 2007 at 02:41:30PM +0000, Lance Haig wrote: > Does anyone do that here currently? > > I want to set-up a server for family and people and I would like to have > an all in one box to do it on. > > I found this > http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu > > but that just covers the MailScanner bit. > > I would appreciate any information. I do this. Contact me offlist, tps {at} mail{.}buoy{.}com Tim From roland at inbox4u.de Wed Nov 7 15:14:48 2007 From: roland at inbox4u.de (Ehle, Roland) Date: Wed Nov 7 15:19:25 2007 Subject: AW: mailsubject modified, but no information in the header In-Reply-To: <4731B8D5.2050504@filmakademie.de> References: <4731B300.2030302@filmakademie.de> <223f97700711070455h27219846q4267e1d32398a542@mail.gmail.com>, <4731B8D5.2050504@filmakademie.de> Message-ID: <4D1CD0994309F84BA83DF998BF0075AF2BC3E8BB3A@ts-dc2.TS-Webarts.local> Hi G?tz, it seems to me, as if you have RBL checks enabled in MailScanner.conf. The host, from which you received the mail is listed in Spamhaus. Regards, Roland ________________________________________ Von: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] im Auftrag von G?tz Reinicke [goetz.reinicke@filmakademie.de] Gesendet: Mittwoch, 7. November 2007 14:08 An: MailScanner discussion Betreff: Re: mailsubject modified, but no information in the header Glenn Steen schrieb: > On 07/11/2007, G?tz Reinicke wrote: >> Hi, >> >> I got a mail whose subject line was modified to be a spam. >> >> But in the mail header I have no information, why this message was >> marked as spam. >> >> I do remember that I can set an option to add this information to the >> header ... >> >> Forthormore, some users have also there own spamassassin settings (e.g. >> the global spamscore to drop spam is 8, but some users want tohave it >> set to 5 or less ...) >> >> The mail I mentioned was marked by this settings as no spam .... >> >> Any hints to help me solving this kind of problem? Which settings or may >> I check? >> >> Thanks and best regards! >> >> G?tz > Hello G?tz, > > A few examples say a lot more than a lot of words.... Chould you show > us the relevant headers (Subject: and the MailScanner ones)? Hi, thanks for trieing to help. The Subject looks after the mailscannerscanning like this (including the ""): {Spam?} "Status-M?glichkeiten-Zukunft von Picasso" The header looks like this: Return-Path: Received: from NB10356 (c-134-96-139.s.dial.de.ignite.net [62.134.96.139]) (authenticated bits=0) by mail.filmakademie.de (8.13.8/8.13.8) with ESMTP id lA78kE0C021105 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO); Wed, 7 Nov 2007 09:46:18 +0100 From: "Uwe Kurz" To: "Goetz Reinicke" , "Oliver Ruof" , "Benjamin Schreiber" , "Reiner Pfeiffer" Subject: {Spam?} =?iso-8859-1?Q?_=22Status-M=F6glichkeiten-Zukunft_von_Picasso=22?= Date: Wed, 7 Nov 2007 09:46:13 +0100 Message-ID: <000001c8211a$aa6f3420$8b60863e@NB10356> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C82123.0C339C20" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 X-Filmakademie-MailScanner-Information: Please contact the ISP for more information X-Filmakademie-MailScanner: Found to be clean X-Filmakademie-MailScanner-From: uwe.kurz@filmakademie.de -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ---------------------------------------------------------- Diese Nachricht wurde von mailMind(R) auf Viren und andere gefaehrliche Inhalte untersucht und ist sauber. --- mailMind(R) - we have your Mailsecurity in mind! http://www.mailmind.de --- From glenn.steen at gmail.com Wed Nov 7 15:15:18 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 15:21:46 2007 Subject: Bongo Project In-Reply-To: <4731D420.5050506@ecs.soton.ac.uk> References: <4731D093.9010905@haigmail.com> <4731D420.5050506@ecs.soton.ac.uk> Message-ID: <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> On 07/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > So you're basically wanting another MTA supported? > This is quite a bit of work. > If it uses one file per message, base it on the Sendmail.pm and > SMDiskStore.pm. > If it uses two files per message, base it on the Postfix or Exim > support equivalents. > Um.... Shouldn't that be the other way around? Whatwith Sendmail using a qf/df pair, while exim and PF use a single file....? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From sailer at bnl.gov Wed Nov 7 15:39:22 2007 From: sailer at bnl.gov (Tim Sailer) Date: Wed Nov 7 15:39:32 2007 Subject: Bongo Project In-Reply-To: <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> References: <4731D093.9010905@haigmail.com> <4731D420.5050506@ecs.soton.ac.uk> <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> Message-ID: <20071107153922.GA8002@bnl.gov> On Wed, Nov 07, 2007 at 04:15:18PM +0100, Glenn Steen wrote: > On 07/11/2007, Julian Field wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > So you're basically wanting another MTA supported? > > This is quite a bit of work. > > If it uses one file per message, base it on the Sendmail.pm and > > SMDiskStore.pm. > > If it uses two files per message, base it on the Postfix or Exim > > support equivalents. > > > Um.... Shouldn't that be the other way around? Whatwith Sendmail using > a qf/df pair, while exim and PF use a single file....? Exim uses pairs of files: 1IpPtc-0007MB-Tk-D 1IpPtc-0007MB-Tk-H 1IpX9y-000067-QB-D 1IpX9y-000067-QB-H Tim From glenn.steen at gmail.com Wed Nov 7 15:49:02 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 7 15:49:05 2007 Subject: Bongo Project In-Reply-To: <20071107153922.GA8002@bnl.gov> References: <4731D093.9010905@haigmail.com> <4731D420.5050506@ecs.soton.ac.uk> <223f97700711070715x6136604fj7eebd1df9da0686d@mail.gmail.com> <20071107153922.GA8002@bnl.gov> Message-ID: <223f97700711070749j6c5615f3jd6fda61f49fe2db6@mail.gmail.com> On 07/11/2007, Tim Sailer wrote: > On Wed, Nov 07, 2007 at 04:15:18PM +0100, Glenn Steen wrote: > > On 07/11/2007, Julian Field wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA1 > > > > > > So you're basically wanting another MTA supported? > > > This is quite a bit of work. > > > If it uses one file per message, base it on the Sendmail.pm and > > > SMDiskStore.pm. > > > If it uses two files per message, base it on the Postfix or Exim > > > support equivalents. > > > > > Um.... Shouldn't that be the other way around? Whatwith Sendmail using > > a qf/df pair, while exim and PF use a single file....? > > Exim uses pairs of files: > > 1IpPtc-0007MB-Tk-D 1IpPtc-0007MB-Tk-H > 1IpX9y-000067-QB-D 1IpX9y-000067-QB-H > > Tim Just shows how much I know about exim:-):-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Wed Nov 7 16:25:45 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 7 16:26:00 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4731D2E0.8010604@filmakademie.de> References: <4731D2E0.8010604@filmakademie.de> Message-ID: <4731E709.60501@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just delete them. If they are left behind, it's usually due to not having the other half of the qf/df file pair. G?tz Reinicke wrote: > Hi, > > MailScanner tells me, that it has still a lot (for our system) of > messages waiting: > > New Batch: Found 2811 messages waiting > > in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot > from 2006. A lot of messages ar rubbish or spam. > > Waht to do with the messages or how to monitor which are still goom > ham mails? > > As usual, thanks for any hints! > > Regards > > G?tz Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMecJEfZZRxQVtlQRArRwAKDK3O70CAnmtgCXG/bTgZDhU3ieNQCdF+Ib 5VMa+IRdO/iBettZTSfuvHU= =ZBk3 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From ssilva at sgvwater.com Wed Nov 7 17:04:24 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:04:49 2007 Subject: Red Hat EL 5 perl Update perl-5.8.8-10.el5_0.2 In-Reply-To: <473112BD.50100@vanderkooij.org> References: <4730362E.4040606@filmakademie.de> <473112BD.50100@vanderkooij.org> Message-ID: on 11/6/2007 5:19 PM Hugo van der Kooij spake the following: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > G?tz Reinicke wrote: >> Hi, >> >> I'd wanted to update my Mailscanner 4.63.8 secured Red Hat 5 mailserver >> with the latest perl (perl-5.8.8-10.el5_0.2) rpm from Red Hat, but there >> are a lot of conflicts with file from package installed by Mailscanner. >> >> e.g.: perl-Test-Simple-0.70-1, perl-Sys-Syslog-0.18-1, perl-bignum. >> >> So what may I do? Force the update of the Red Hat perl.rpm? >> >> Any suggestions?? >> >> Thanks for hints and tips and for Mailscanner anyway! > > My approach was to pick the mailscanner rpm out of the total installer. > Then see what it started to nag about when I try to install it manually > and install all the additional packages from rpmforge. > > In effect it means one has to skip the use of the install script on > Centos 5 and do a few things by hand. But it prevented me from getting > any conflicts like you show now. > > I find the use of the --force option not a good way. Granted it is not > as bad as `make love --force` but still .... > > Hmm. after this double shift I will go to bed now and see if I can make > the few changes to the mailscanner spc file so it works with rpmforge > later this week. > > Hugo. Or make a dummy mailscanner-foo rpm that pulls all the requires and mailscanner also -- that is if it ever makes it into rpmforge. That way Julian doesn't have to re-write his install script if the new spec makes it bork. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 17:17:15 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:17:33 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <47310D0F.4010709@fsl.com> References: <011301c820ce$aa65cfd0$6402a8c0@dell> <47310D0F.4010709@fsl.com> Message-ID: on 11/6/2007 4:55 PM Steve Swaney spake the following: > I happen to agree with you and we do provide services to legit mailers - > once we make sure they are legit :) > > Steve Being on the receiving end, I believe the only legit mailers are opt-in lists. And my blacklist is growing full with opt-out mailers. ;-) ....... Trips and falls from soapbox.... -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 17:28:34 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:29:24 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> References: <00cf01c820ab$5fe3a4f0$6402a8c0@dell> Message-ID: on 11/6/2007 11:29 AM Arthur Sherman spake the following: > Hi, > > A client asked me to build for him a mail solution, capable of sending up to > 1 milllion emails a day, while each email doesn't exceed 50KB in size. > > How do I calculate: > 1) how many servers > 2) how do I calculate the above > 3) is there any max emails a day from IP/domain, which triggers black and > blocklists > 4) what is your recommended software solution > > On this stage, most distribution would be in single country. > > Thanks in advance > > Arthur > > From the MAQ; ***************** Volume: 1,750,000 messages/day (in the lab) Average Load: Average of 12 Hardware: Dual Xeon 3.2Ghz, 2 GB RAM, 4x 18 GB RAID-1 (using an HP DL380 G3) Software: Tao Linux 1.0, Postfix 2.0.18, SpamAssassin 3.02, Razor, DCC RBLs: XBL + SBL in MailScanner Virus Scanners: ClamAV, Sophos, BitDefender Notes: This performance was achieved in the lab, using random message sizes between 1 and 100 Kb. Please see the List archives for 'System capacity'. ***************** Volume : 770,000 messages per day Hardware: Dual Opteron, 4Gb RAM, SCSI disk Software: RedHat Enterprise Linux 4 Configuration: MailScanner 4.50 default setup with clamavmodule virus scanner, SpamAssassin, Razor, DCC, Sendmail ****************** Since you believe this isn't a spammer, you don't need any of the process hogs like antivirus or spamassassin, or even need mailscanner because the sender already knows what his content is ;-) and should be able to achieve the goal with one of these. With quad core Xeons very common right now, it should be fairly easy if it has a big enough pipe to the internet, and you tune things like timeouts and retries to run later or not at all. Being an opt-out list, you could probably just dump the retries, and just shotgun the messages out to where they fall. I see just another direct marketer trying to compete for MY bandwidth. Someday, people will be smart enough to not buy things marketed this way ... never mind, won't happen. Look at the people that still fall for 419 scams. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ka at pacific.net Wed Nov 7 17:36:16 2007 From: ka at pacific.net (Ken A) Date: Wed Nov 7 17:36:16 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: References: <011301c820ce$aa65cfd0$6402a8c0@dell> <47310D0F.4010709@fsl.com> Message-ID: <4731F790.3030008@pacific.net> Scott Silva wrote: > on 11/6/2007 4:55 PM Steve Swaney spake the following: >> I happen to agree with you and we do provide services to legit mailers >> - once we make sure they are legit :) >> >> Steve > > Being on the receiving end, I believe the only legit mailers are opt-in > lists. > And my blacklist is growing full with opt-out mailers. ;-) > > > > ....... Trips and falls from soapbox.... > I agree completely, but he did say it was legal in Israel to use opt-out mail lists, didn't he, or did I hear that wrong? I suppose the whole country has opted in if that's true. :-( Ken -- Ken Anderson Pacific.Net From ssilva at sgvwater.com Wed Nov 7 17:42:20 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 17:42:37 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4731D2E0.8010604@filmakademie.de> References: <4731D2E0.8010604@filmakademie.de> Message-ID: on 11/7/2007 6:59 AM G?tz Reinicke spake the following: > Hi, > > MailScanner tells me, that it has still a lot (for our system) of > messages waiting: > > New Batch: Found 2811 messages waiting > > in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot from > 2006. A lot of messages ar rubbish or spam. > > Waht to do with the messages or how to monitor which are still goom ham > mails? > > As usual, thanks for any hints! > > Regards > > G?tz If they are that late, they are of no value. Either delete or move them. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Wed Nov 7 18:21:39 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 7 18:22:16 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <4731F790.3030008@pacific.net> References: <011301c820ce$aa65cfd0$6402a8c0@dell> <47310D0F.4010709@fsl.com> <4731F790.3030008@pacific.net> Message-ID: on 11/7/2007 9:36 AM Ken A spake the following: > Scott Silva wrote: >> on 11/6/2007 4:55 PM Steve Swaney spake the following: >>> I happen to agree with you and we do provide services to legit >>> mailers - once we make sure they are legit :) >>> >>> Steve >> >> Being on the receiving end, I believe the only legit mailers are >> opt-in lists. >> And my blacklist is growing full with opt-out mailers. ;-) >> >> >> >> ....... Trips and falls from soapbox.... >> > > I agree completely, but he did say it was legal in Israel to use opt-out > mail lists, didn't he, or did I hear that wrong? I suppose the whole > country has opted in if that's true. :-( > > Ken > It is "legal" in the US also, but that doesn't make it right. It is also legal for me to block it any way I see fit. Freedom of speech doesn't negate my freedom of not having to deal with begging to be removed from something I didn't want in the first place. Just because some marketer is too cheap or too illegitimate to direct mail his crap, or buy 30 seconds on the local television channel. Why not have a web site where you could enter your e-mail address and click the box that states; "Please pass my address on to everybody with a computer and an internet connection so they can send me all their junk. I love getting three thousand e-mails telling me how small my manhood is or how some sweet lawyer in Nigeria wants to give me millions if I will just share a small part of it with him." That would be enough to qualify as opt-in. There is no such site because only a small percentage of the population would do it. And those people are obviously in need of a good mental health provider. As a matter of fact, I would probably subscribe an address on that site...straight to my spamtrap! Talk about one-stop shopping! -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From J.Ede at birchenallhowden.co.uk Wed Nov 7 18:29:09 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 18:29:38 2007 Subject: unparseable winmail.dat's Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> We're getting a large number of winmail.dats coming through MailScanner that are now unparseable with tnef (not perl version) and we had been ditching unparseable files... It looks like we'll have to deliver unparseable tnef files for now, but is there any plans to deal with the cursed outlook winmail.dats in a more friendly way? Jason -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071107/2f4a0358/attachment.html From Kevin_Miller at ci.juneau.ak.us Wed Nov 7 18:36:38 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Wed Nov 7 18:36:00 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: <011301c820ce$aa65cfd0$6402a8c0@dell> References: <011301c820ce$aa65cfd0$6402a8c0@dell> Message-ID: Arthur Sherman wrote: > I posted this question in several lists and, amazingly, I got badly > flamed. :) Gosh, who would have imagined? > Many demanded the IP or domain to block, even threatened me to block > my own mail servers, which never sent a spam. > Not all though, actually some of gurus were quite understanding... > > Let me clear some points here: > > The services my company provides are legit spam-proof etc hosting > services. The client turned to us for because of quality he believes > we have in building mailers, i.e. technical expertise netto. > Legally, he has the right to do such mailing in Israel. Well, just because it's legal doesn't mean it's right, or should be done. There's lots of legal things that quite unethical. > His mailing will be in Israel only, and has working Unsubscribe > option - we are scrupulous about this part. Israel only? So it won't affect me. But wait, I have friends in Israel. Can you remove anybody named Ori or Ya'acov for me? Unsubscribe is good. But not getting subscribed in the first place is better. My wife made the mistake of opting in to some list that offered discounts on household products. The next day she had about 100 more spams in her inbox than previously. Took me hours to go through and unsubscribe her. Most messages had dual unsubscriptions - one for that particular product from the company selling it, and one from the "opt-in" list so I had to read each carefully to make sure I was actually opt-ing out of everything. > His DB was legally bought from legit provider, not us also. I checked > the DB is legit here. But does everybody in the DB actually *want* to be there? May be "legit" but that doesn't mean the folks in it understood what they were signing up for. Assuming they actually signed up and didn't just click OK on a web page for something else and didn't notice the little semi-hidden checkbox. > His servers will be neither in our data center, nor in our IP range, > as he builds his own data center, which will host his servers. Doesn't matter where it comes from or is hosted - spam is spam. > Discussing this in open forum was made in effort to openly discuss the > business need, and find a solution to make him as least spammer as > possible, while still allowing him the functonality he seeks. If you're not hosting him, and he's not in your IP range and has his own data center, then beyond building him a fast email server I don't see how you can limit what he does with his business to minimize the spamminess of his emails. What's there to discuss? > Don't you deny the business need for big email volumes? I don't care about business needs. That's their problem. Some companies have legitimate needs for big email volumes. Yahoo for instance. They probably send out multi-millions of messages a day with their yahoo groups. Or any of a number of companies that generate their own mailing lists based on inquiries from their own web site and such. If they get a million requests for information a day then they have a legitimate, legal and ethical reason for having a mail system that can reply. On the other hand, I have a business need to keep the junk out of our email system. My users have enough to do w/o having to wade through come-ons from who knows where. > He will become a legit "marketing"-mailing service provider in Israel. Bummer. > We better start thinking in this direction also, the sooner the > better - the market demands... Um, why? We're all here to fight spam. Not facilitate it. Just because big business wants something doesn't mean that people have to blindly go along with it. Last I looked, I'm the market. I'm the one doing the buying. And I'm not demanding any such thing. Matter of fact, I'm demanding that the marketeers back off. Not that they'll listen to me. They never do. But that's why we have MailScanner. (Thanks Julian!) My humble opinion is to politely tell him thanks, but no thanks. You may lose his business, but you'll sleep better at night. > Thank you Any time... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From satya at fsl.com Wed Nov 7 18:57:02 2007 From: satya at fsl.com (SatyaDev Sharma (FSL)) Date: Wed Nov 7 18:57:08 2007 Subject: FOSS - Bangalore - INDIA Message-ID: <8d5fd62c0711071057y4232bc75sb4268c2c82f1f992@mail.gmail.com> Hello Team, Any one from MailScanner list is attending FOSS (Free and Open-Source Software ) event at Bangalore India ( http://foss.in/ ) ? -- SatyaDev Sharma. Fort System Ltd. Bangalore - INDIA -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071108/b535e565/attachment.html From derek at csolve.net Wed Nov 7 19:07:16 2007 From: derek at csolve.net (Derek Buttineau) Date: Wed Nov 7 19:07:18 2007 Subject: unparseable winmail.dat's In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> Message-ID: <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net> What version of MailScanner do you have installed? There was a permission problem with the External TNEF code that would result in the unparseable error in some previous versions, however Julian has since fixed that. On 2007-Nov-07, at 1:29 PM, Jason Ede wrote: > We're getting a large number of winmail.dats coming through > MailScanner that are now unparseable with tnef (not perl version) > and we had been ditching unparseable files... It looks like we'll > have to deliver unparseable tnef files for now, but is there any > plans to deal with the cursed outlook winmail.dats in a more > friendly way? -- Regards, Derek Buttineau Internet Systems Developer Compu-SOLVE Internet Services Compu-SOLVE Technologies, Inc Phone: 705-725-1212 x255 E-Mail: derek@csolve.net From MailScanner at ecs.soton.ac.uk Wed Nov 7 19:08:17 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 7 19:08:35 2007 Subject: unparseable winmail.dat's In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> Message-ID: <47320D21.1060603@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How about you use the internal perl version instead, as it can usually parse rather more? MailScanner, when it can parse them, will replace them with the real attachments. Not sure there is anything "more friendly" I can do than that. Ideas? Jason Ede wrote: > P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } We're getting a large > number of winmail.dats coming through MailScanner that are now > unparseable with tnef (not perl version) and we had been ditching > unparseable files... It looks like we'll have to deliver > unparseable tnef files for now, but is there any plans to deal with > the cursed outlook winmail.dats in a more friendly way? > > > > Jason > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMg0hEfZZRxQVtlQRArcsAKDJox8e4HKAqYNZyfHbX5Gn1OlEWwCgnGc0 bpeA/6KJdVz5eVJhU+xkT0A= =k+dC -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From hvdkooij at vanderkooij.org Wed Nov 7 19:11:14 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 19:11:34 2007 Subject: whitelisted spam In-Reply-To: References: Message-ID: <47320DD2.8040802@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 D?rfler Andreas wrote: > hey there, > > since a few weeks i?m running into a strange problem. > a specific kind of (high sa score) spammail is very often marked as > whitelisted, but none of the recipients is on the whitelist. > > is there any way to see what whitelist entry ms is using to > mark it that way ? Check your config. But most of all do not hijack an existing thread. If you start a new subject use a new message. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMg3RBvzDRVjxmYERAp9VAJ9WaMbNZUDS/yZbJ6f4VAiAUTssWACguWcE Jo0z7EdUZkDLuI8pqqMTsZc= =iiRp -----END PGP SIGNATURE----- From hvdkooij at vanderkooij.org Wed Nov 7 19:16:14 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 7 19:16:33 2007 Subject: mailsubject modified, but no information in the header In-Reply-To: <4731B300.2030302@filmakademie.de> References: <4731B300.2030302@filmakademie.de> Message-ID: <47320EFE.8040804@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 G?tz Reinicke wrote: > Hi, > > I got a mail whose subject line was modified to be a spam. > > But in the mail header I have no information, why this message was > marked as spam. And what did you log for this message? The log files are usually the best place to start investigating. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMg78BvzDRVjxmYERAsuCAKCQDHc4LEmU9pZLAEf44aUhYS1d4wCdGGC0 /RM12o+K5AZVySabCF/D/A8= =7unA -----END PGP SIGNATURE----- From J.Ede at birchenallhowden.co.uk Wed Nov 7 19:16:30 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 19:18:17 2007 Subject: unparseable winmail.dat's In-Reply-To: <47320D21.1060603@ecs.soton.ac.uk> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local>, <47320D21.1060603@ecs.soton.ac.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2E@server02.bhl.local> I'll try internal parsing.... Cheers. From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field [MailScanner@ecs.soton.ac.uk] Sent: 07 November 2007 19:08 To: MailScanner discussion Subject: Re: unparseable winmail.dat's -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How about you use the internal perl version instead, as it can usually parse rather more? MailScanner, when it can parse them, will replace them with the real attachments. Not sure there is anything "more friendly" I can do than that. Ideas? Jason Ede wrote: > P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } We're getting a large > number of winmail.dats coming through MailScanner that are now > unparseable with tnef (not perl version) and we had been ditching > unparseable files... It looks like we'll have to deliver > unparseable tnef files for now, but is there any plans to deal with > the cursed outlook winmail.dats in a more friendly way? > > > > Jason > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMg0hEfZZRxQVtlQRArcsAKDJox8e4HKAqYNZyfHbX5Gn1OlEWwCgnGc0 bpeA/6KJdVz5eVJhU+xkT0A= =k+dC -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From derek at csolve.net Wed Nov 7 19:18:51 2007 From: derek at csolve.net (Derek Buttineau) Date: Wed Nov 7 19:18:54 2007 Subject: unparseable winmail.dat's In-Reply-To: <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net> Message-ID: <2841A74C-EAC7-4A8B-94C5-A2DEAEF13889@csolve.net> Just checked my notes, I believe the problem with the external TNEF expander began in version 4.62.9-3 and was resolved in version 4.64.3-2. Permissions wouldn't allow files to be unpacked into the newly created directory. On 2007-Nov-07, at 2:07 PM, Derek Buttineau wrote: > What version of MailScanner do you have installed? There was a > permission problem with the External TNEF code that would result in > the unparseable error in some previous versions, however Julian has > since fixed that. -- Regards, Derek Buttineau Internet Systems Developer Compu-SOLVE Internet Services Compu-SOLVE Technologies, Inc Phone: 705-725-1212 x255 E-Mail: derek@csolve.net From martinh at solidstatelogic.com Wed Nov 7 19:24:37 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 7 19:24:50 2007 Subject: How-to verify valid internal email addresses --- up front In-Reply-To: <13601.11482.qm@web57605.mail.re1.yahoo.com> Message-ID: <6c7e71ff1d02744aac49dbf105968dd1@solidstatelogic.com> Hi See this from the wiki.. "http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:reject_non_existent_users" -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of W S > Sent: 07 November 2007 04:13 > To: mailscanner@lists.mailscanner.info; whatisee1@yahoo.com > Subject: How-to verify valid internal email addresses --- up front > > Folks, > I have this Hub, up in front, which process all incoming emails (running > Postfix and MailScanner). This Hub is bluntly accepting ALL emails from > outside and runs every single email thru MailScanner (ClamAV, > Spamassassin, RBL, DNSBL etc) and relaying all JUNK to another internal > email server. > Now, is there any way to build some sort of MAP or database file (btree, > hash...) from valid internal email addresses and set it on the Hub in order > to reduce the queue? > Regards, > --W.S. > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From J.Ede at birchenallhowden.co.uk Wed Nov 7 20:06:26 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 7 20:08:12 2007 Subject: unparseable winmail.dat's In-Reply-To: <2841A74C-EAC7-4A8B-94C5-A2DEAEF13889@csolve.net> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2B@server02.bhl.local> <7C13F2B4-D89F-496B-AADD-93CBC918C9A0@csolve.net>, <2841A74C-EAC7-4A8B-94C5-A2DEAEF13889@csolve.net> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA2F@server02.bhl.local> Ah... I'm running 4.63.8 I'll ugrade and then try the external tnef expander again then... Cheers. Jason From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Derek Buttineau [derek@csolve.net] Sent: 07 November 2007 19:18 To: MailScanner discussion Subject: Re: unparseable winmail.dat's Just checked my notes, I believe the problem with the external TNEF expander began in version 4.62.9-3 and was resolved in version 4.64.3-2. Permissions wouldn't allow files to be unpacked into the newly created directory. On 2007-Nov-07, at 2:07 PM, Derek Buttineau wrote: > What version of MailScanner do you have installed? There was a > permission problem with the External TNEF code that would result in > the unparseable error in some previous versions, however Julian has > since fixed that. -- Regards, Derek Buttineau Internet Systems Developer Compu-SOLVE Internet Services Compu-SOLVE Technologies, Inc Phone: 705-725-1212 x255 E-Mail: derek@csolve.net -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From arturs at netvision.net.il Thu Nov 8 03:03:15 2007 From: arturs at netvision.net.il (Arthur Sherman) Date: Thu Nov 8 03:04:47 2007 Subject: Your recommendation please: big volume mail solution In-Reply-To: Message-ID: <02a701c821b3$e7d88b10$6402a8c0@dell> > > A client asked me to build for him a mail solution, capable > of sending > > up to > > 1 milllion emails a day, while each email doesn't exceed > 50KB in size. > > > > How do I calculate: > > 1) how many servers > > 2) how do I calculate the above > > 3) is there any max emails a day from IP/domain, which > triggers black > > and blocklists > > 4) what is your recommended software solution > > > > On this stage, most distribution would be in single country. > > > > Thanks in advance > > > > Arthur > > > > > From the MAQ; > > ***************** > Volume: 1,750,000 messages/day (in the lab) > > Average Load: Average of 12 > > Hardware: Dual Xeon 3.2Ghz, 2 GB RAM, 4x 18 GB RAID-1 (using > an HP DL380 G3) > > Software: Tao Linux 1.0, Postfix 2.0.18, SpamAssassin 3.02, Razor, DCC > > RBLs: XBL + SBL in MailScanner > > Virus Scanners: ClamAV, Sophos, BitDefender > > Notes: This performance was achieved in the lab, using random > message sizes between 1 and 100 Kb. Please see the List > archives for 'System capacity'. > > ***************** > Volume : 770,000 messages per day > > Hardware: Dual Opteron, 4Gb RAM, SCSI disk > > Software: RedHat Enterprise Linux 4 > > Configuration: MailScanner 4.50 default setup with > clamavmodule virus scanner, SpamAssassin, Razor, DCC, Sendmail > > ****************** > > Since you believe this isn't a spammer, you don't need any of > the process hogs like antivirus or spamassassin, or even need > mailscanner because the sender already knows what his content > is ;-) and should be able to achieve the goal with one of > these. With quad core Xeons very common right now, it should > be fairly easy if it has a big enough pipe to the internet, > and you tune things like timeouts and retries to run later or > not at all. > Being an opt-out list, you could probably just dump the > retries, and just shotgun the messages out to where they fall. > > I see just another direct marketer trying to compete for MY bandwidth. > Someday, people will be smart enough to not buy things > marketed this way ... > never mind, won't happen. Look at the people that still fall > for 419 scams. Thank you, Scott, nice writeup! Even if it is a spam, it is also a good mental exercise, as someone told me in private. Arthur From hvdkooij at vanderkooij.org Thu Nov 8 06:56:36 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 8 06:57:17 2007 Subject: Feature request: spam / bayesian score in subject Message-ID: <4732B324.9090203@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I just thought of something that might be a nice feature. The ability to put the spam score in the subject line as well as the Bayesian score. Currently we have these options: Spam Modify Subject = start #H#Spam Subject Text = {Spam?} Spam Subject Text = [SPAM] High Scoring Spam Modify Subject = start #H#High Scoring Spam Subject Text = {Spam?} High Scoring Spam Subject Text = [SPAM] I would like to do something like: Spam Subject Text = [SPAM $BAYES/$SCORE] Add it would result in something like: Subject: [SPAM 99/3.50] AW: Co-operation Which would allow me, or other users, to know immediatly I do not have to feed this one to my bayesian filter because it has hit the maximum score. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHMrMiBvzDRVjxmYERAnutAJ9vV7Z5M0pY2zEEV1izH1A0bwMHEgCgjw+4 uL669gx9ZdfB5orhUc2tyF8= =yyh/ -----END PGP SIGNATURE----- From goetz.reinicke at filmakademie.de Thu Nov 8 07:36:49 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Thu Nov 8 07:37:23 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4731E709.60501@ecs.soton.ac.uk> References: <4731D2E0.8010604@filmakademie.de> <4731E709.60501@ecs.soton.ac.uk> Message-ID: <4732BC91.4050105@filmakademie.de> Hi, what is qf/df :-? and is ther a way to do this kind of cleaning automatically? Thanks and best regards G?tz Julian Field schrieb: > Just delete them. If they are left behind, it's usually due to not > having the other half of the qf/df file pair. > > G?tz Reinicke wrote: >> Hi, > >> MailScanner tells me, that it has still a lot (for our system) of >> messages waiting: > >> New Batch: Found 2811 messages waiting > >> in /var/spool/mqueue.in, I found messages from Jun 2005 and a lot >> from 2006. A lot of messages ar rubbish or spam. > >> Waht to do with the messages or how to monitor which are still goom >> ham mails? > >> As usual, thanks for any hints! > >> Regards > >> G?tz > > Jules > -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From john at tradoc.fr Thu Nov 8 09:41:13 2007 From: john at tradoc.fr (John Wilcock) Date: Thu Nov 8 09:41:21 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732B324.9090203@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> Message-ID: <4732D9B9.10506@tradoc.fr> > I would like to do something like: > Spam Subject Text = [SPAM $BAYES/$SCORE] > > Add it would result in something like: > > Subject: [SPAM 99/3.50] AW: Co-operation > > Which would allow me, or other users, to know immediatly I do not have > to feed this one to my bayesian filter because it has hit the maximum score. You can already put the SpamAssassin score in the subject, using the _SCORE_ placeholder: Spam Subject Text = {Spam?} {Score=_SCORE_} AFAIK you can't add just the bayes score. In any case, learning BAYES_99 messages won't do any harm and can but reinforce the "spamminess" of the tokens concerned. John. -- -- Over 3000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From MailScanner at ecs.soton.ac.uk Thu Nov 8 12:03:29 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 8 12:03:41 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732D9B9.10506@tradoc.fr> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> Message-ID: <4732FB11.1030705@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John Wilcock wrote: >> I would like to do something like: Spam Subject Text = [SPAM >> $BAYES/$SCORE] >> >> Add it would result in something like: >> >> Subject: [SPAM 99/3.50] AW: Co-operation >> >> Which would allow me, or other users, to know immediatly I do not >> have to feed this one to my bayesian filter because it has hit >> the maximum score. > > You can already put the SpamAssassin score in the subject, using > the _SCORE_ placeholder: > > Spam Subject Text = {Spam?} {Score=_SCORE_} > > AFAIK you can't add just the bayes score. In any case, learning > BAYES_99 messages won't do any harm and can but reinforce the > "spamminess" of the tokens concerned. Please RTM first :-) I quote from the MailScanner.conf documentation for the "Spam Subject Text" setting: # This is the text to add to the start of the subject if the # "Spam Modify Subject" option is set. # The exact string "_SCORE_" will be replaced by the numeric # SpamAssassin score. # The exact string "_STARS_" will be replaced by a row of stars # whose length is the SpamAssassin score. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHMvsREfZZRxQVtlQRAsMsAJsFvxnlDG9HiD9JuKU6vMMKs3kbqwCgoMNI i8Lr90RMCPCNcHhxh0QT6Qs= =ZSRD -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From Andreas.Doerfler at kempten.de Thu Nov 8 12:26:32 2007 From: Andreas.Doerfler at kempten.de (=?iso-8859-1?Q?D=F6rfler_Andreas?=) Date: Thu Nov 8 12:27:30 2007 Subject: AW: whitelisted spam In-Reply-To: <47320DD2.8040802@vanderkooij.org> Message-ID: > Hugo van der Kooij wrote: > Check your config. But most of all do not hijack an existing > thread. If > you start a new subject use a new message. that why i asked, i havent found something useable in the config. but i got a usefull answer from another user, thanks to him > If you start a new subject use a new message. k, next time i go back in archive for years to check if someone haven?t used that subject bevor to prevent trolling answers like yours rock on From list-mailscanner at linguaphone.com Thu Nov 8 12:48:38 2007 From: list-mailscanner at linguaphone.com (Gareth) Date: Thu Nov 8 12:48:54 2007 Subject: AW: whitelisted spam In-Reply-To: References: Message-ID: <1194526118.5432.23.camel@gblades-suse.linguaphone-intranet.co.uk> On Thu, 2007-11-08 at 12:26, D?rfler Andreas wrote: > > If you start a new subject use a new message. > > k, next time i go back in archive for years to check if someone > haven?t used that subject bevor to prevent trolling answers like yours I think what he meant was that if you hit reply then your mail client includes a reference to the original message in the headers even if you change the subject line. A lot of people view the list in threaded form in their mail software so if you reply and change the subject it still appears under the old thread. This means there is less chance if your mail being read as some people have already chosen not to participate in that original thread and marked it to be ignored. From lhaig at haigmail.com Thu Nov 8 14:09:46 2007 From: lhaig at haigmail.com (Lance Haig) Date: Thu Nov 8 14:09:59 2007 Subject: OT:::Mail System load testing program. Message-ID: <473318AA.4030104@haigmail.com> Hi, Anyone know of a good mail server load /stress testing system that can test pop imap smtp? Regards Lance From m.anderlini at database.it Thu Nov 8 14:21:10 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Thu Nov 8 14:21:23 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: References: <4730362E.4040606@filmakademie.de> <473112BD.50100@vanderkooij.org> Message-ID: <00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum update My system it's a x86_64 using CentOS release 4.5 (Final) Mailscanner version is mailscanner-4.58.9-1 Unforntunaly I get this error msg: ============ file /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from install of perl-5.8.5-36.el4_5.2 conflicts with file from package perl-Sys-Syslog-0.18-1 file /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Syslog/Syslog.so from install of perl-5.8.5-36.el4_5.2 conflicts with file from package perl-Sys-Syslog-0.18-1 ============ Could someone help me ? Please try to use an easy english because it's not my mother language. I would like to avoid to re-install mailscanner because this server is mission critical for us. Thanks very much and sorry for my worst english. Bye Dr. Marcello Anderlini m.anderlini@database.it --------------------------------------------- Database Informatica S.r.l. Microsoft Certified Partner Tel. +39059775070 Fax. +39059779545 http://www.database.it --------------------------------------------- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 -- Messaggio verificato dal servizio antivirus di Database Informatica From mkettler at evi-inc.com Thu Nov 8 15:17:16 2007 From: mkettler at evi-inc.com (Matt Kettler) Date: Thu Nov 8 15:17:42 2007 Subject: AW: whitelisted spam In-Reply-To: References: Message-ID: <4733287C.5050509@evi-inc.com> D?rfler Andreas wrote: >> Hugo van der Kooij wrote: >> Check your config. But most of all do not hijack an existing >> thread. If >> you start a new subject use a new message. > > that why i asked, i havent found something useable in the config. > but i got a usefull answer from another user, thanks to him Fair enough, is your problem solved? > > >> If you start a new subject use a new message. > > k, next time i go back in archive for years to check if someone > haven?t used that subject bevor to prevent trolling answers like yours This doesn't have to do with having unique subject lines. It has to do with using "reply" instead of creating a new message. If you reply to a message , even if you change the subject line, it is still a reply to that message. Many intelligent mail readers, and the list archives, will represent it as such. This is because your mail client actually adds a In-Reply-To header indicating what message you replied to. So, your message appears to me, and anyone else using a threaded mail reader, as being a part of the "MailScanner + Postfix => very slow" thread. Which clearly it isn't. This is what Hugo is trying to point out. It also appears that way in the list archives, look for yourself: http://lists.mailscanner.info/pipermail/mailscanner/2007-November/thread.html Because it's nested under an unrelated threads, it might get overlooked by folks who can help you, but aren't interested in postfix. So, really, Hugo's advice is actually trying to help you format your posts so they get seen by the right folks. It is not a troll. From mkettler at evi-inc.com Thu Nov 8 15:23:11 2007 From: mkettler at evi-inc.com (Matt Kettler) Date: Thu Nov 8 15:23:35 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732B324.9090203@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> Message-ID: <473329DF.6000504@evi-inc.com> Hugo van der Kooij wrote: > > Which would allow me, or other users, to know immediatly I do not have > to feed this one to my bayesian filter because it has hit the maximum score. You really should not try to avoid feeding messages to bayes for that reason. Even if a message hits as high as possible on the bayes system, there can still be useful tokens in it that are worth training. This is because bayes learns about words, not messages, and spam emails tend to slowly mutate over time. A message might hit really high on bayes because it has several key words that resemble last week's spam, but it can still contain several new words that will help it catch next week's spam. If you try to avoid training those messages, you're going to wind up having to "catch up" later on after you start missing spam. Don't let your bayes get behind the curve. Train your spam as spam, and don't try to avoid training some messages vs others. The only time it might be worthwhile to avoid training is if the autolearner already kicked in and learned it correctly. Re-training won't hurt, but it also won't do anything so it's somewhat pointless. From prandal at herefordshire.gov.uk Thu Nov 8 15:41:52 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Thu Nov 8 15:42:01 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org> <00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> If yum has already downloaded the package, the procedure would be something like: service MailScanner stop rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm --force then reinstall MailScanner and start it. If it isn't in your yum cache, wget it from a CentOS mirror and force install it. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 14:21 > To: 'MailScanner discussion' > Subject: Errore when I try update perl on centos 4.5 > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version > via yum update > My system it's a x86_64 using CentOS release 4.5 (Final) > Mailscanner version is mailscanner-4.58.9-1 > > Unforntunaly I get this error msg: > ============ > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > og/Syslog.so > from install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > ============ > > Could someone help me ? Please try to use an easy english > because it's not > my mother language. > > I would like to avoid to re-install mailscanner because this server is > mission critical for us. > > Thanks very much and sorry for my worst english. > > > Bye > > Dr. Marcello Anderlini > m.anderlini@database.it > --------------------------------------------- > Database Informatica S.r.l. > Microsoft Certified Partner > Tel. +39059775070 > Fax. +39059779545 > http://www.database.it > --------------------------------------------- > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From m.anderlini at database.it Thu Nov 8 15:48:24 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Thu Nov 8 15:48:34 2007 Subject: R: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it> <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> Message-ID: <00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> Thanks for you answer but I can reinstall the new version of mailscanner or I can reinstall the one that I'm using now ? Thanks ? -----Messaggio originale----- Da: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di Randal, Phil Inviato: gioved? 8 novembre 2007 16.42 A: MailScanner discussion Oggetto: RE: Errore when I try update perl on centos 4.5 If yum has already downloaded the package, the procedure would be something like: service MailScanner stop rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm --force then reinstall MailScanner and start it. If it isn't in your yum cache, wget it from a CentOS mirror and force install it. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > Marcello Anderlini > Sent: 08 November 2007 14:21 > To: 'MailScanner discussion' > Subject: Errore when I try update perl on centos 4.5 > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum > update My system it's a x86_64 using CentOS release 4.5 (Final) > Mailscanner version is mailscanner-4.58.9-1 > > Unforntunaly I get this error msg: > ============ > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > og/Syslog.so > from install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > ============ > > Could someone help me ? Please try to use an easy english because it's > not my mother language. > > I would like to avoid to re-install mailscanner because this server is > mission critical for us. > > Thanks very much and sorry for my worst english. > > > Bye > > Dr. Marcello Anderlini > m.anderlini@database.it > --------------------------------------------- > Database Informatica S.r.l. > Microsoft Certified Partner > Tel. +39059775070 > Fax. +39059779545 > http://www.database.it > --------------------------------------------- > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Messaggio verificato dal servizio antivirus di Database Informatica No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 -- Messaggio verificato dal servizio antivirus di Database Informatica From prandal at herefordshire.gov.uk Thu Nov 8 15:59:05 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Thu Nov 8 15:59:12 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> <00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> That would be your choice. I'd reinstall the version you're running now, check that it all works, and then consider upgrading MailScanner. One change at a time :-) Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 15:48 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Thanks for you answer but I can reinstall the new version of > mailscanner or > I can reinstall the one that I'm using now ? > > Thanks ? > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto > di Randal, > Phil > Inviato: gioved? 8 novembre 2007 16.42 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > If yum has already downloaded the package, the procedure > would be something > like: > > service MailScanner stop > rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > --force > > then reinstall MailScanner and start it. > > If it isn't in your yum cache, wget it from a CentOS mirror and force > install it. > > Cheers, > > Phil > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 14:21 > > To: 'MailScanner discussion' > > Subject: Errore when I try update perl on centos 4.5 > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > Mailscanner version is mailscanner-4.58.9-1 > > > > Unforntunaly I get this error msg: > > ============ > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > perl-Sys-Syslog-0.18-1 > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > og/Syslog.so > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > from package > > perl-Sys-Syslog-0.18-1 > > ============ > > > > Could someone help me ? Please try to use an easy english > because it's > > not my mother language. > > > > I would like to avoid to re-install mailscanner because > this server is > > mission critical for us. > > > > Thanks very much and sorry for my worst english. > > > > > > Bye > > > > Dr. Marcello Anderlini > > m.anderlini@database.it > > --------------------------------------------- > > Database Informatica S.r.l. > > Microsoft Certified Partner > > Tel. +39059775070 > > Fax. +39059779545 > > http://www.database.it > > --------------------------------------------- > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From m.anderlini at database.it Thu Nov 8 16:08:06 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Thu Nov 8 16:08:20 2007 Subject: R: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it> <7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> Message-ID: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Good suggestion :-) I'll try tomorrow evening, tell me good luck :-) Thanks. -----Messaggio originale----- Da: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di Randal, Phil Inviato: gioved? 8 novembre 2007 16.59 A: MailScanner discussion Oggetto: RE: Errore when I try update perl on centos 4.5 That would be your choice. I'd reinstall the version you're running now, check that it all works, and then consider upgrading MailScanner. One change at a time :-) Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > Marcello Anderlini > Sent: 08 November 2007 15:48 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Thanks for you answer but I can reinstall the new version of > mailscanner or I can reinstall the one that I'm using now ? > > Thanks ? > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > Randal, Phil > Inviato: gioved? 8 novembre 2007 16.42 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > If yum has already downloaded the package, the procedure would be > something > like: > > service MailScanner stop > rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > --force > > then reinstall MailScanner and start it. > > If it isn't in your yum cache, wget it from a CentOS mirror and force > install it. > > Cheers, > > Phil > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 14:21 > > To: 'MailScanner discussion' > > Subject: Errore when I try update perl on centos 4.5 > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version via yum > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > Mailscanner version is mailscanner-4.58.9-1 > > > > Unforntunaly I get this error msg: > > ============ > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > perl-Sys-Syslog-0.18-1 > > file > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > og/Syslog.so > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > from package > > perl-Sys-Syslog-0.18-1 > > ============ > > > > Could someone help me ? Please try to use an easy english > because it's > > not my mother language. > > > > I would like to avoid to re-install mailscanner because > this server is > > mission critical for us. > > > > Thanks very much and sorry for my worst english. > > > > > > Bye > > > > Dr. Marcello Anderlini > > m.anderlini@database.it > > --------------------------------------------- > > Database Informatica S.r.l. > > Microsoft Certified Partner > > Tel. +39059775070 > > Fax. +39059779545 > > http://www.database.it > > --------------------------------------------- > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Messaggio verificato dal servizio antivirus di Database Informatica No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release Date: 07/11/2007 22.52 -- Messaggio verificato dal servizio antivirus di Database Informatica From brose at med.wayne.edu Thu Nov 8 16:32:27 2007 From: brose at med.wayne.edu (Rose, Bobby) Date: Thu Nov 8 16:32:37 2007 Subject: Mailscanner filename check In-Reply-To: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Message-ID: <8F2A53954C22554EB75D9643FCCE0C6B05A5F4AF@MED-CORE03-MS1.med.wayne.edu> I've been using MailScanner for years and I seen this issue a couple times before but just assumed it was a user mistake. I've seen sender.filename.report sends back a message with the wrong $filename string. What is sends back is a random string of characters. The message says One or more of the attachments (VAmRh3qo9P) are on the list of unacceptable attachments for this site and will not have been delivered. Consider renaming the files to avoid this constraint. The virus detector said this about the message: Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) But in the maillogs, it has the real filename Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam checks (2826228 > 200000 bytes) Nov 8 10:10:23 eeyore MailScanner[25630]: Expanding TNEF archive at /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 added TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip Education.lg.10.31.20071.ppt Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 has had TNEF winmail.dat removed Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: Found possible filename hiding (lA8F96O2031926 RHO Flip Education.lg.10.31.20071.ppt.doc) Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message lA8F96O2031926 to SQL Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to MailWatch SQL I'm not sure of the conditions that lead to this because it doesn't always happen and if I test myself, the sender.filename.report message is correct. Anyone else seen this before? -=B From hvdkooij at vanderkooij.org Thu Nov 8 17:51:09 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 8 17:51:51 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <4732FB11.1030705@ecs.soton.ac.uk> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> <4732FB11.1030705@ecs.soton.ac.uk> Message-ID: <47334C8D.80403@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian Field wrote: > John Wilcock wrote: >>> I would like to do something like: Spam Subject Text = [SPAM >>> $BAYES/$SCORE] >>> >>> Add it would result in something like: >>> >>> Subject: [SPAM 99/3.50] AW: Co-operation >>> >>> Which would allow me, or other users, to know immediatly I do not >>> have to feed this one to my bayesian filter because it has hit >>> the maximum score. >> You can already put the SpamAssassin score in the subject, using >> the _SCORE_ placeholder: > >> Spam Subject Text = {Spam?} {Score=_SCORE_} > >> AFAIK you can't add just the bayes score. In any case, learning >> BAYES_99 messages won't do any harm and can but reinforce the >> "spamminess" of the tokens concerned. > Please RTM first :-) > I quote from the MailScanner.conf documentation for the "Spam Subject > Text" setting: I found them in the new config file (.rpmnew). But because the script threaten that I loose my remarks in the config and I want to know which settings are deviating from the defaults I update the config by hand. I mark the original lines with #H# so I can find exactly which settings are not default and how I did change them over time. So perhaps I need to ask for a completely different feature. The ability to keep comments in the config file by a upgrade so I do not have to do this by hand. For example if any line staring with #H# (Hugo) or perhaps #J# (Jules) or #M# (MailScanner) is just preceding a config line it should be kept. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHM0yLBvzDRVjxmYERAjuxAKCYphfud3/SjtWk8YMWlRDJWOp5gQCgmtGZ K6xeVn6R9Ll2SZ1jNLJfgw8= =qBzC -----END PGP SIGNATURE----- From glenn.steen at gmail.com Thu Nov 8 19:26:04 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 8 19:26:09 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <47334C8D.80403@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> <4732FB11.1030705@ecs.soton.ac.uk> <47334C8D.80403@vanderkooij.org> Message-ID: <223f97700711081126m263637c6if48da4ee52f9fb69@mail.gmail.com> On 08/11/2007, Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Julian Field wrote: > > John Wilcock wrote: > >>> I would like to do something like: Spam Subject Text = [SPAM > >>> $BAYES/$SCORE] > >>> > >>> Add it would result in something like: > >>> > >>> Subject: [SPAM 99/3.50] AW: Co-operation > >>> > >>> Which would allow me, or other users, to know immediatly I do not > >>> have to feed this one to my bayesian filter because it has hit > >>> the maximum score. > >> You can already put the SpamAssassin score in the subject, using > >> the _SCORE_ placeholder: > > > >> Spam Subject Text = {Spam?} {Score=_SCORE_} > > > >> AFAIK you can't add just the bayes score. In any case, learning > >> BAYES_99 messages won't do any harm and can but reinforce the > >> "spamminess" of the tokens concerned. > > Please RTM first :-) > > I quote from the MailScanner.conf documentation for the "Spam Subject > > Text" setting: > > I found them in the new config file (.rpmnew). But because the script > threaten that I loose my remarks in the config and I want to know which > settings are deviating from the defaults I update the config by hand. I > mark the original lines with #H# so I can find exactly which settings > are not default and how I did change them over time. > > So perhaps I need to ask for a completely different feature. The ability > to keep comments in the config file by a upgrade so I do not have to do > this by hand. > > For example if any line staring with #H# (Hugo) or perhaps #J# (Jules) > or #M# (MailScanner) is just preceding a config line it should be kept. > > Hugo. > Not perhaps helpful, but ... You do know about the "MailScanner --changed" option? Yeah, I know... One wants to tell oneself _why_ as well as that one has changed it:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Thu Nov 8 20:29:03 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 8 20:29:16 2007 Subject: Feature request: spam / bayesian score in subject In-Reply-To: <47334C8D.80403@vanderkooij.org> References: <4732B324.9090203@vanderkooij.org> <4732D9B9.10506@tradoc.fr> <4732FB11.1030705@ecs.soton.ac.uk> <47334C8D.80403@vanderkooij.org> Message-ID: <4733718F.60408@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > Julian Field wrote: >> John Wilcock wrote: >>>> I would like to do something like: Spam Subject Text = [SPAM >>>> $BAYES/$SCORE] >>>> >>>> Add it would result in something like: >>>> >>>> Subject: [SPAM 99/3.50] AW: Co-operation >>>> >>>> Which would allow me, or other users, to know immediatly I do >>>> not have to feed this one to my bayesian filter because it >>>> has hit the maximum score. >>> You can already put the SpamAssassin score in the subject, >>> using the _SCORE_ placeholder: Spam Subject Text = {Spam?} >>> {Score=_SCORE_} AFAIK you can't add just the bayes score. In >>> any case, learning BAYES_99 messages won't do any harm and can >>> but reinforce the "spamminess" of the tokens concerned. >> Please RTM first :-) I quote from the MailScanner.conf >> documentation for the "Spam Subject Text" setting: > > I found them in the new config file (.rpmnew). But because the > script threaten that I loose my remarks in the config and I want to > know which settings are deviating from the defaults I update the > config by hand. I think someone else has already pointed out "MailScanner --changed" (or "-c"). > I mark the original lines with #H# so I can find exactly which > settings are not default and how I did change them over time. The upgrade_MailScanner_conf (and hence upgrade_languages_conf as well as they are the same file) has a switch "--keep-comments". As you know :-) This is there because if I add functionality or more options in a MailScanner.conf setting, I improve the documentation above the comment to describe the new values available in that setting. So if you "upgrade_MailScanner_conf --keep-comments ...." then you don't get my new documentation. So by default it is switched off, as not many people add comments to long config files anyway, apart from to say what they have changed from the default value; you can find that out anyway with "MailScanner - -c" as described above. BTW "many people" is based on a straw poll of the people in my office at the time (i.e. 1). So I may be wrong :-) Comments attached to a conf setting are the comment lines appearing immediately above it. But it does quiet effectively keep down the number of emails I get asking about things that have been added to the documentation in MailScanner.conf, which therefore saves me a lot of work quoting .conf file chunks back at them to answer their questions. That's why I did it the way I have. If you disagree, I would be quite interested to hear other suggestions. > > So perhaps I need to ask for a completely different feature. The > ability to keep comments in the config file by a upgrade so I do > not have to do this by hand. > > For example if any line staring with #H# (Hugo) or perhaps #J# > (Jules) or #M# (MailScanner) is just preceding a config line it > should be kept. So you want to *just* keep comments that start with (or perhaps contain) a given string. I would still have to stay with my rule that the comments attached to a setting appear immediately above it. Is that what you want to be able to do? If so, let me think about it, it must be possible, and when I get it right it is probably about 5 lines of code. Jules - -- Julian Field MBCS CITP jkf@ecs.soton.ac.uk Teaching Systems Manager Electronics & Computer Science University of Southampton SO17 1BJ, UK Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHM3GPEfZZRxQVtlQRAlvaAJwPW0DqYcla+oRFWUkZsiEiB0QHcQCg2WTM clLOc+CRKdocucqyGTJjh0w= =0c6a -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From ssilva at sgvwater.com Thu Nov 8 20:32:59 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 8 20:33:25 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: <4732BC91.4050105@filmakademie.de> References: <4731D2E0.8010604@filmakademie.de> <4731E709.60501@ecs.soton.ac.uk> <4732BC91.4050105@filmakademie.de> Message-ID: on 11/7/2007 11:36 PM G?tz Reinicke spake the following: > Hi, > > what is qf/df :-? and is ther a way to do this kind of cleaning > automatically? > > Thanks and best regards > > G?tz find /path/to/files* -mtime +5 -exec rm {} \; set /path/to/files* to the queue path and the 5 is the default amount of time that sendmail retries sending messages before giving up. Adjust that amount to what your system does. To be safe you could set it to +7. When the above is working properly, you can add it to a daily cron job. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From MailScanner at ecs.soton.ac.uk Thu Nov 8 21:45:34 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 8 21:45:49 2007 Subject: very old messages in /var/spool/mqueue.in In-Reply-To: References: <4731D2E0.8010604@filmakademie.de> <4731E709.60501@ecs.soton.ac.uk> <4732BC91.4050105@filmakademie.de> Message-ID: <4733837E.5070409@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Silva wrote: > on 11/7/2007 11:36 PM G?tz Reinicke spake the following: >> Hi, >> >> what is qf/df :-? and is ther a way to do this kind of cleaning >> automatically? >> >> Thanks and best regards >> >> G?tz > find /path/to/files* -mtime +5 -exec rm {} \; > > set /path/to/files* to the queue path and the 5 is the default > amount of time that sendmail retries sending messages before giving > up. Adjust that amount to what your system does. To be safe you > could set it to +7. > > When the above is working properly, you can add it to a daily cron > job. > There is an "official" answer from some very elderly sendmail documentation. It runs like this: - ------ CUT ------ cd $QUEUE # remove zero length qf files for qffile in qf* do if [ -r $qffile ]; then if [ ! -s $qffile ]; then rm -f $qffile fi fi done # rename tf files to be qf if the qf does not exist for tffile in tf* do qffile=`echo $tffile | sed 's/t/q/'` # JKF 15/7/98 Put $qffile in quotes in case tffile = 'tf*' if [ -r $tffile -a ! -f "$qffile" ]; then mv $tffile $qffile else if [ -f $tffile ]; then rm -f $tffile fi fi done # remove df files with no corresponding qf files for dffile in df* do qffile=`echo $dffile | sed 's/d/q/'` if [ -r $dffile -a ! -f $qffile ]; then mv $dffile `echo $dffile | sed 's/d/D/'` fi done # announce files that have been saved during disaster recovery for xffile in [A-Z]f* do if [ -f $xffile ]; then echo " \c" fi done - ------ CUT ------ That's how I do it on my Sun boxes. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHM4N+EfZZRxQVtlQRAk2TAJ9PiMOy0/hTSPN+h7aqRR+16m959QCg7Ipk GLfGMzlYNPrJmb+8VUuTs/0= =9Dy5 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From rwahyudi at gmail.com Thu Nov 8 22:56:18 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Thu Nov 8 22:54:27 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4732AE6C.4030809@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> <20071107061527.DB22.GERARD@seibercom.net> <4732AE6C.4030809@gmail.com> Message-ID: <47339412.2070000@gmail.com> Thanks for the reply guys .. I have scheduled postfix / mailscanner update for today .. Should be able to get the graph by tomorrow. If it was the receiving ends, the queue will build up in the active / deferred queue and not in the incoming queue. We have a couple of server on the receiving end running qmail and has no filter whatsoever. They are load balanced using alteon and mailbox storage is mounted from HP storagework 8100 SAN via 2 Gb Fiber. The receiving end capable of accepting a total of ~10,000 mails per minute. ( thats the highest i've seen) . --- More details on the Antispam servers --- We have 8 Antispam server, and for each server we receive around 400 email per minutes and rejecting 300 at SMTP level. RRD Graph : SMTP connect vs Reject : http://img139.imageshack.us/img139/5412/vscan4smtpwu4.png Rejected message at SMTP level : http://img150.imageshack.us/img150/309/vscan4blockedru9.png Accepted Message : http://img145.imageshack.us/img145/7687/vscan4acceptedji0.png Postfix Queue Level : http://img134.imageshack.us/img134/5902/vscan4queuepb1.png 2 filter on header check on postfix : /^content-(type|disposition):.*name*=.*\.(pif|scr|vbs|com|cmd)"?[[:space:]]*(;|$)/ REJECT We cannot accept file with .$2 attachments /^Received:/ HOLD Queue Manger process ID is stable and has been the same for longer than 24 hours. -- Nov 5 12:21:58 vscan4 postfix/qmgr[13055]: 7A3D760869A: removed -- Nov 6 10:37:03 vscan4 postfix/qmgr[13055]: A750B608734: removed ======== postconf -n =========== alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases anvil_rate_time_unit = 15m bounce_size_limit = 1024 command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 1 disable_vrfy_command = no header_checks = regexp:/etc/postfix/maps /header_checks html_directory = /usr/share/doc/postfix- 2.3.2-documentation/html in_flow_delay = 0 inet_interfaces = all local_recipient_maps = local_transport = error:local mail delivery is disabled mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 41457280 mydestination = mydomain = myhostname = vscan4 mynetworks = xxxxxxxxxxxxxxxxxx myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.3.2-documentation/readme receive_override_options = no_address_mappings relay_domains = mysql:/etc/postfix/relay_domains.cf relay_recipient_maps = proxy:mysql:/etc/postfix/recipients- verification.cf sample_directory = /usr/share/doc/postfix- 2.2.10/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_banner = $myhostname [vscan v0.1] smtpd_client_connection_count_limit = 1 smtpd_client_connection_rate_limit = 15 smtpd_client_event_limit_exceptions = someip smtpd_client_recipient_rate _limit = 50 smtpd_error_sleep_time = 12 smtpd_hard_error_limit = 6 smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname, reject_non_fqdn_hostname, smtpd_recipient_limit = 50 smtpd_recipient_overshoot_limit = 1 smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_pipelining, reject_unauth_destination, reject_multi_recipient_bounce, reject_unlisted_recipient, check_client_access cidr:/etc/postfix/maps/exceptions_clients, reject_rbl_client hotkey.rbl, reject_rbl_client zen.spamhaus.org, check_policy_service inet: 127.0.0.1:10031 smtpd_sender_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/maps/sender _blacklist, check_sender_access hash:/etc/postfix/maps/from_blacklist, reject_non_fqdn_sender, reject_unknown_sender_domain smtpd_soft_error_limit = 1 smtpd_timeout = 20s soft_bounce = no transport_maps = hash:/etc/postfix/maps/transport unknown_local_recipient_reject _code = 550 QSHAPE : incoming : T 5 10 20 40 80 160 320 640 1280 1280+ TOTAL 150 150 0 0 0 0 0 0 0 0 0 Active : T 5 10 20 40 80 160 320 640 1280 1280+ TOTAL 0 0 0 EXAMPLE LOG FILE : Nov 8 09:36:59 vscan4 postfix/smtpd[24127]: C953660802E: client=mail.creativefactory.com.au[203.89.197.34] Nov 8 09:37:00 vscan4 postfix/cleanup[25817]: C953660802E: hold: header Received: from mail.creativefactory.com.au (mail.creativefactory.com.au [203.89.197.34])??by vscan4.hotkey.net.au (Postfix) with ESMTP id C953660802E??for ; Thu, 8 Nov 2007 0 from mail.creativefactory.com.au[203.89.197.34]; from= to= proto=ESMTP helo= Nov 8 09:37:00 vscan4 postfix/cleanup[25817]: C953660802E: message-id=<13290289.1194474906537.JavaMail.SYSTEM@dnc01> Nov 8 09:37:03 vscan4 MailScanner[14160]: Message C953660802E.EFA0E from 203.89.197.34 (news@discountnewcars.com.au) to xxxxx.com is too big for spamchecks (118081 > 80000 bytes) Nov 8 09:37:07 vscan4 MailScanner[14160]: Requeue: C953660802E.EFA0E to 4141C608637 Nov 8 09:37:07 vscan4 MailScanner[14160]: Logging message C953660802E.EFA0E to SQL Nov 8 09:37:07 vscan4 MailScanner[14438]: C953660802E.EFA0E: Logged to MailWatch SQL [root@vscan4 src]# grep 4141C608637 /var/log/maillog Nov 8 09:37:07 vscan4 MailScanner[14160]: Requeue: C953660802E.EFA0E to 4141C608637 Nov 8 09:44:58 vscan4 postfix/qmgr[13055]: 4141C608637: from=, size=117724, nrcpt=1 (queue active) Nov 8 09:44:58 vscan4 postfix/smtp[29892]: 4141C608637: to=, relay=mailroute.xxxxx.net.au[xxx.xx.7.8]:25, delay=479, delays=298/0.01/0.01/0.11, dsn=2.0.0, status=sent (250 ok 1194475318 qp 7468) Nov 8 09:51:58 vscan4 postfix/qmgr[13055]: 4141C608637: removed As you can see .. there are long delay after mailscanner requeue the mail. This is just one example and i've seen queue sitting longer that 10 mins .. Lets see if postfix+mailscanner update fix this issue. Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071109/b89df9ef/attachment.html From rwahyudi at gmail.com Fri Nov 9 06:35:53 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Fri Nov 9 06:34:03 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47339412.2070000@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> <20071107061527.DB22.GERARD@seibercom.net> <4732AE6C.4030809@gmail.com> <47339412.2070000@gmail.com> Message-ID: <4733FFC9.9080403@gmail.com> Upgrading postfix & mailscanner does not fix my issue. I've spent hours trying to find the cause of this delay issue and I found that qmgr in /etc/postfix/master.cf is set to wakeup every 300 second !! I've set my qmgr to wakeup every 2 second, and it fix the problem. Maybe this is temporary fix, and not the correct way of fixing this issue, but it works, and so far, I am very happy with the result. The average message in incoming and active queue has now come down to 0 !! Do you guys experience similar issue ? Does mailscanner designed to wait for qmgr to wake up ? On average, how much delay do you guys get ? Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071109/69065bd3/attachment-0001.html From glenn.steen at gmail.com Fri Nov 9 08:58:46 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 9 08:58:49 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4733FFC9.9080403@gmail.com> References: <47310E12.1010501@sequestered.net> <4731220F.6080705@gmail.com> <20071107061527.DB22.GERARD@seibercom.net> <4732AE6C.4030809@gmail.com> <47339412.2070000@gmail.com> <4733FFC9.9080403@gmail.com> Message-ID: <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> On 09/11/2007, R Wahyudi wrote: > > Upgrading postfix & mailscanner does not fix my issue. > > I've spent hours trying to find the cause of this delay issue and I found > that > qmgr in /etc/postfix/master.cf is set to wakeup every 300 second !! > > I've set my qmgr to wakeup every 2 second, and it fix the problem. > Maybe this is temporary fix, and not the correct way of fixing this issue, > but it works, > and so far, I am very happy with the result. > > The average message in incoming and active queue has now come down to 0 !! > > Do you guys experience similar issue ? > Does mailscanner designed to wait for qmgr to wake up ? > On average, how much delay do you guys get ? > > > Regards, > Rianto Wahyudi > Ah. Great that you found it (all MTA, and OT, but still.... One could well think the ones over at the PF list would've been able to see this:-):-)... Anyway... I do think that evere other second is a bit often, you could try every 10 or 15 seconds or similar... Would mean approximately 25 deliveries in every chunk. But if the system doesn't suffer too much from the queue scans... well, every other second it is:-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From prandal at herefordshire.gov.uk Fri Nov 9 09:42:36 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Fri Nov 9 09:42:44 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA01FD0E33@HC-MBX02.herefordshire.gov.uk> After the forced install of perl, you'll need to "yum update" to get the updated pcre as well. On CentOS 5, force installing the updated perl, yum update, then service MailScanner restart was all that was needed here. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 16:08 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Good suggestion :-) I'll try tomorrow evening, tell me good luck :-) > > Thanks. > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto > di Randal, > Phil > Inviato: gioved? 8 novembre 2007 16.59 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > That would be your choice. > > I'd reinstall the version you're running now, check that it > all works, and > then consider upgrading MailScanner. > > One change at a time :-) > > Cheers, > > Phil > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 15:48 > > To: 'MailScanner discussion' > > Subject: R: Errore when I try update perl on centos 4.5 > > > > Thanks for you answer but I can reinstall the new version of > > mailscanner or I can reinstall the one that I'm using now ? > > > > Thanks ? > > > > -----Messaggio originale----- > > Da: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > > Randal, Phil > > Inviato: gioved? 8 novembre 2007 16.42 > > A: MailScanner discussion > > Oggetto: RE: Errore when I try update perl on centos 4.5 > > > > If yum has already downloaded the package, the procedure would be > > something > > like: > > > > service MailScanner stop > > rpm -Uvh > /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > > --force > > > > then reinstall MailScanner and start it. > > > > If it isn't in your yum cache, wget it from a CentOS mirror > and force > > install it. > > > > Cheers, > > > > Phil > > -- > > Phil Randal > > Network Engineer > > Herefordshire Council > > Hereford, UK > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > > Marcello Anderlini > > > Sent: 08 November 2007 14:21 > > > To: 'MailScanner discussion' > > > Subject: Errore when I try update perl on centos 4.5 > > > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 > version via yum > > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > > Mailscanner version is mailscanner-4.58.9-1 > > > > > > Unforntunaly I get this error msg: > > > ============ > > > file > > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > > perl-Sys-Syslog-0.18-1 > > > file > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > > og/Syslog.so > > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > > from package > > > perl-Sys-Syslog-0.18-1 > > > ============ > > > > > > Could someone help me ? Please try to use an easy english > > because it's > > > not my mother language. > > > > > > I would like to avoid to re-install mailscanner because > > this server is > > > mission critical for us. > > > > > > Thanks very much and sorry for my worst english. > > > > > > > > > Bye > > > > > > Dr. Marcello Anderlini > > > m.anderlini@database.it > > > --------------------------------------------- > > > Database Informatica S.r.l. > > > Microsoft Certified Partner > > > Tel. +39059775070 > > > Fax. +39059779545 > > > http://www.database.it > > > --------------------------------------------- > > > > > > > > > No virus found in this outgoing message. > > > Checked by AVG Free Edition. > > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > > Date: 07/11/2007 > > > 22.52 > > > > > > > > > > > > -- > > > Messaggio verificato dal servizio antivirus di Database > Informatica > > > > > > -- > > > MailScanner mailing list > > > mailscanner@lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > > > Support MailScanner development - buy the book off the website! > > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > No virus found in this incoming message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From m.anderlini at database.it Fri Nov 9 10:48:47 2007 From: m.anderlini at database.it (Marcello Anderlini) Date: Fri Nov 9 10:49:05 2007 Subject: R: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0E33@HC-MBX02.herefordshire.gov.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk><00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> <7EF0EE5CB3B263488C8C18823239BEBA01FD0E33@HC-MBX02.herefordshire.gov.uk> Message-ID: <004601c822be$1b5e3ab0$2301a8c0@dbdomain.database.it> Thanks again, I'll try and let you know. bye -----Messaggio originale----- Da: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di Randal, Phil Inviato: venerd? 9 novembre 2007 10.43 A: MailScanner discussion Oggetto: RE: Errore when I try update perl on centos 4.5 After the forced install of perl, you'll need to "yum update" to get the updated pcre as well. On CentOS 5, force installing the updated perl, yum update, then service MailScanner restart was all that was needed here. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > Marcello Anderlini > Sent: 08 November 2007 16:08 > To: 'MailScanner discussion' > Subject: R: Errore when I try update perl on centos 4.5 > > Good suggestion :-) I'll try tomorrow evening, tell me good luck :-) > > Thanks. > > -----Messaggio originale----- > Da: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > Randal, Phil > Inviato: gioved? 8 novembre 2007 16.59 > A: MailScanner discussion > Oggetto: RE: Errore when I try update perl on centos 4.5 > > That would be your choice. > > I'd reinstall the version you're running now, check that it all works, > and then consider upgrading MailScanner. > > One change at a time :-) > > Cheers, > > Phil > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > Marcello Anderlini > > Sent: 08 November 2007 15:48 > > To: 'MailScanner discussion' > > Subject: R: Errore when I try update perl on centos 4.5 > > > > Thanks for you answer but I can reinstall the new version of > > mailscanner or I can reinstall the one that I'm using now ? > > > > Thanks ? > > > > -----Messaggio originale----- > > Da: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] Per conto di > > Randal, Phil > > Inviato: gioved? 8 novembre 2007 16.42 > > A: MailScanner discussion > > Oggetto: RE: Errore when I try update perl on centos 4.5 > > > > If yum has already downloaded the package, the procedure would be > > something > > like: > > > > service MailScanner stop > > rpm -Uvh > /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm > > --force > > > > then reinstall MailScanner and start it. > > > > If it isn't in your yum cache, wget it from a CentOS mirror > and force > > install it. > > > > Cheers, > > > > Phil > > -- > > Phil Randal > > Network Engineer > > Herefordshire Council > > Hereford, UK > > > > > -----Original Message----- > > > From: mailscanner-bounces@lists.mailscanner.info > > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > > > Marcello Anderlini > > > Sent: 08 November 2007 14:21 > > > To: 'MailScanner discussion' > > > Subject: Errore when I try update perl on centos 4.5 > > > > > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 > version via yum > > > update My system it's a x86_64 using CentOS release 4.5 (Final) > > > Mailscanner version is mailscanner-4.58.9-1 > > > > > > Unforntunaly I get this error msg: > > > ============ > > > file > > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > > > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > > > perl-Sys-Syslog-0.18-1 > > > file > > > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > > > og/Syslog.so > > > from install of perl-5.8.5-36.el4_5.2 conflicts with file > > from package > > > perl-Sys-Syslog-0.18-1 > > > ============ > > > > > > Could someone help me ? Please try to use an easy english > > because it's > > > not my mother language. > > > > > > I would like to avoid to re-install mailscanner because > > this server is > > > mission critical for us. > > > > > > Thanks very much and sorry for my worst english. > > > > > > > > > Bye > > > > > > Dr. Marcello Anderlini > > > m.anderlini@database.it > > > --------------------------------------------- > > > Database Informatica S.r.l. > > > Microsoft Certified Partner > > > Tel. +39059775070 > > > Fax. +39059779545 > > > http://www.database.it > > > --------------------------------------------- > > > > > > > > > No virus found in this outgoing message. > > > Checked by AVG Free Edition. > > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > > Date: 07/11/2007 > > > 22.52 > > > > > > > > > > > > -- > > > Messaggio verificato dal servizio antivirus di Database > Informatica > > > > > > -- > > > MailScanner mailing list > > > mailscanner@lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > > > Support MailScanner development - buy the book off the website! > > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > No virus found in this incoming message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > > Date: 07/11/2007 > > 22.52 > > > > > > > > -- > > Messaggio verificato dal servizio antivirus di Database Informatica > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Messaggio verificato dal servizio antivirus di Database Informatica No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.26/1119 - Release Date: 08/11/2007 17.55 No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.26/1119 - Release Date: 08/11/2007 17.55 -- Messaggio verificato dal servizio antivirus di Database Informatica From JVolckaert at bellmi.org Fri Nov 9 17:56:43 2007 From: JVolckaert at bellmi.org (Jeff A. Volckaert) Date: Fri Nov 9 18:08:57 2007 Subject: Help understanding reports In-Reply-To: <200711021200.lA2C0Erw019339@safir.blacknight.ie> Message-ID: <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> Hello Everybody, I just started running mailscanner-mrtg and have two questions on the reports that I'm seeing. My setup is the current version of Mailscanner running on Redhat and scanning with Sophos. I currently don't run Spamassassin. This then passes mail to our Exchange server which runs Microsoft's content filter. We have SBC DSL for our Internet connection. My first question is about Mail Relayed. We are seeing about 8000 messages a day in and 7000 messages out. Where is the other 1000 going? Without Spamassassin I'm currently blocking about 40 messages with Mailscanner. I know 90%+ is spam, but why isn't it relayed to Exchange? My second question is about viruses blocked. In the last day I have blocked only one virus and that was because it was an encrypted spreadsheet. Where are all the other viruses? We used to get a ton. Is SBC filtering them for us? Thanks, Jeff From dgottsc at emory.edu Fri Nov 9 18:16:24 2007 From: dgottsc at emory.edu (Gottschalk, David) Date: Fri Nov 9 18:16:33 2007 Subject: Help understanding reports In-Reply-To: <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> References: <200711021200.lA2C0Erw019339@safir.blacknight.ie> <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> Message-ID: <8D2EFA3D9FD29C45BCEC3B532F0E230842255B096C@RDPEXCH2.Eu.Emory.Edu> Jeff, My experience with mailscanner-mrtg was it was highly inaccurate, until I modified the script a bit. The numbers seemed all over the place. I messed with it a bit, and was finally able to get some realistic looking numbers out of it. The software is pretty old as far as I can recall. Hope that helps. David Gottschalk UTS Infrastructure Technology Services -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeff A. Volckaert Sent: Friday, November 09, 2007 12:57 PM To: mailscanner@lists.mailscanner.info Subject: Help understanding reports Hello Everybody, I just started running mailscanner-mrtg and have two questions on the reports that I'm seeing. My setup is the current version of Mailscanner running on Redhat and scanning with Sophos. I currently don't run Spamassassin. This then passes mail to our Exchange server which runs Microsoft's content filter. We have SBC DSL for our Internet connection. My first question is about Mail Relayed. We are seeing about 8000 messages a day in and 7000 messages out. Where is the other 1000 going? Without Spamassassin I'm currently blocking about 40 messages with Mailscanner. I know 90%+ is spam, but why isn't it relayed to Exchange? My second question is about viruses blocked. In the last day I have blocked only one virus and that was because it was an encrypted spreadsheet. Where are all the other viruses? We used to get a ton. Is SBC filtering them for us? Thanks, Jeff -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From list-mailscanner at linguaphone.com Fri Nov 9 19:22:08 2007 From: list-mailscanner at linguaphone.com (Gareth) Date: Fri Nov 9 19:22:16 2007 Subject: Help understanding reports In-Reply-To: <50AB1578C809C34B9B72A778CADF6AFB01557CC6@exchange.bellmemorial.org> Message-ID: I havent seen a real virus for about a week on my setup. I am running clamav and bitdefender and all the viruses listed in my logwatch report are the sanesecurity spam signatures for clamav. > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info]On Behalf Of Jeff A. > Volckaert > Sent: 09 November 2007 17:57 > To: mailscanner@lists.mailscanner.info > Subject: Help understanding reports > > > Hello Everybody, > > I just started running mailscanner-mrtg and have two questions on the > reports that I'm seeing. My setup is the current version of Mailscanner > running on Redhat and scanning with Sophos. I currently don't run > Spamassassin. This then passes mail to our Exchange server which runs > Microsoft's content filter. We have SBC DSL for our Internet > connection. > > My first question is about Mail Relayed. We are seeing about 8000 > messages a day in and 7000 messages out. Where is the other 1000 going? > Without Spamassassin I'm currently blocking about 40 messages with > Mailscanner. I know 90%+ is spam, but why isn't it relayed to Exchange? > > My second question is about viruses blocked. In the last day I have > blocked only one virus and that was because it was an encrypted > spreadsheet. Where are all the other viruses? We used to get a ton. > Is SBC filtering them for us? > > Thanks, > Jeff > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > From gerard at seibercom.net Fri Nov 9 21:31:00 2007 From: gerard at seibercom.net (Gerard Seibert) Date: Fri Nov 9 21:30:15 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> Message-ID: <20071109162310.90D1.GERARD@seibercom.net> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: [ ... ] > Ah. Great that you found it (all MTA, and OT, but still.... One could > well think the ones over at the PF list would've been able to see > this:-):-)... Anyway... I do think that evere other second is a bit > often, you could try every 10 or 15 seconds or similar... Would mean > approximately 25 deliveries in every chunk. But if the system doesn't > suffer too much from the queue scans... well, every other second it > is:-). OK, I don't want to start a war here; however, I saw "R Wahyudi " original post on the Postfix forum. I did not see a copy of his 'postconf -n' output. Without that information it would have been virtually impossible for anyone to have accurately diagnosed his problem. IMHO, he would be well served to post that information, as well as detailed information regarding his network on the Postfix forum so that his problem could be properly analysed. Altering the default settings as much as he apparently has done does not seem correct. -- Gerard No matter how rich you become, how famous or powerful, when you die the size of your funeral will still pretty much depend on the weather. Michael Pritchard From hvdkooij at vanderkooij.org Fri Nov 9 21:50:49 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Fri Nov 9 21:51:18 2007 Subject: Help understanding reports In-Reply-To: References: Message-ID: <4734D639.1010300@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gareth wrote: > I havent seen a real virus for about a week on my setup. I am running clamav > and bitdefender and all the viruses listed in my logwatch report are the > sanesecurity spam signatures for clamav. I get about 2 to 4 instances of that ancient Mydoom.M (or by whatever name it goes with your scanner ;-) a week. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD4DBQFHNNY3BvzDRVjxmYERAs1TAJjb1EBDPHe8P+i0UElg9mXUCIgUAJ9nuB8z 0mwuEBd3sHeb02IUHfHxXA== =4gLw -----END PGP SIGNATURE----- From rwahyudi at gmail.com Fri Nov 9 22:50:30 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Fri Nov 9 22:50:34 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <20071109162310.90D1.GERARD@seibercom.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> Message-ID: <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> I did .. http://archives.neohapsis.com/archives/postfix/2007-11/0364.html Anyway .. I am still curious to know if this is the default MailScanner - postfix behavior ie : you have to wait for qmgr to respawn to be able to deliver message from incoming queue ?? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071110/c953c26a/attachment.html From drew.marshall at technologytiger.net Fri Nov 9 23:55:29 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Fri Nov 9 23:55:45 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> Message-ID: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > I did .. http://archives.neohapsis.com/archives/postfix/ > 2007-11/0364.html > > Anyway .. I am still curious to know if this is the default > MailScanner - postfix behavior ie : you have to wait for > qmgr to respawn to be able to deliver message from incoming queue ?? Evening all, been far too long since I have posted (Been stupidly busy :-( ) I would suggest you want to check your Delivery method option at the bottom MailScanner.conf and make sure it is batch and not queue. Setting it to queue would invoke this behaviour. Changing the queue runner settings should not be required. The queue running is called by Postfix when each process finishes to advise the next to run. The 300 second delay is merely to catch anything that 'got left behind'. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071109/e34c6326/attachment.html From MailScanner at ecs.soton.ac.uk Sat Nov 10 00:50:24 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 00:50:38 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> Message-ID: <47350050.3040107@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Drew Marshall wrote: > On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >> I did .. >> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >> >> Anyway .. I am still curious to know if this is the default >> MailScanner - postfix behavior ie : you have to wait for >> qmgr to respawn to be able to deliver message from incoming queue ?? > > Evening all, been far too long since I have posted (Been stupidly busy > :-( ) Glad to see you back! > > I would suggest you want to check your Delivery method option at the > bottom MailScanner.conf and make sure it is batch and not queue. > Setting it to queue would invoke this behaviour. Changing the queue > runner settings should not be required. The queue running is called by > Postfix when each process finishes to advise the next to run. The 300 > second delay is merely to catch anything that 'got left behind'. Good catch, I had completely forgotten that might be what's happening. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNQBSEfZZRxQVtlQRAl71AKCgkUd1cimwQGieRwWBeLlBdxH9CACgkBup QCqGhUZUB0OHf3GV7w7rVsk= =oQF/ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From drew.marshall at technologytiger.net Sat Nov 10 02:14:53 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 10 02:15:08 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <47350050.3040107@ecs.soton.ac.uk> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> Message-ID: On 10 Nov 2007, at 00:50, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Drew Marshall wrote: >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >> >>> I did .. >>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >>> >>> Anyway .. I am still curious to know if this is the default >>> MailScanner - postfix behavior ie : you have to wait for >>> qmgr to respawn to be able to deliver message from incoming queue ?? >> >> Evening all, been far too long since I have posted (Been stupidly >> busy >> :-( ) > Glad to see you back! Nice to be back! Mind you I have some reading to do (I didn't really go, just no time to post and only just enough time to read some threads). Hope you are feeling better, Shingles is no fun :-( Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From micoots at yahoo.com Sat Nov 10 05:02:05 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sat Nov 10 05:02:17 2007 Subject: $hostname not translated in reports Message-ID: <35153.69256.qm@web33312.mail.mud.yahoo.com> Hi, When email reports get emailed to addresses (the "Hostname" variable in MailScanner.conf), I notice that the $hostname is never translated to the actual hostname of the machine that has the quarantined file. I just see: () How can I trouble-shoot this so that I can fix it? ie. where do I need to look to define the $hostname for the reports per MailScanner server I run? Thanks. Michael. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071110/3d10e9d0/attachment.html From glenn.steen at gmail.com Sat Nov 10 10:45:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:45:37 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <20071109162310.90D1.GERARD@seibercom.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> Message-ID: <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> On 09/11/2007, Gerard Seibert wrote: > On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > > [ ... ] > > > Ah. Great that you found it (all MTA, and OT, but still.... One could > > well think the ones over at the PF list would've been able to see > > this:-):-)... Anyway... I do think that evere other second is a bit > > often, you could try every 10 or 15 seconds or similar... Would mean > > approximately 25 deliveries in every chunk. But if the system doesn't > > suffer too much from the queue scans... well, every other second it > > is:-). > > OK, I don't want to start a war here; however, I saw "R Wahyudi > " original post on the Postfix forum. I did not see a > copy of his 'postconf -n' output. Without that information it would have been > virtually impossible for anyone to have accurately diagnosed his problem. As you know Gerard, I'm not the contentious type;-). No wars in sight... You are quite right, Rianto could have been as detailed as he (or is that a female name?) eventually was here, but that is not my point... All I say is that they could have asked for relevant information (not just the "use of MailScanner disqualifies you from ever getting our help" line). As you did here. I don't think there is any argument here, is there? > IMHO, he would be well served to post that information, as well as detailed > information regarding his network on the Postfix forum so that his problem > could be properly analysed. Altering the default settings as much as he > apparently has done does not seem correct. > Yes,I think it a bit ... extreme... too. But with the figures of incoming mail s/he cites, if the qmgr really only wakeup every five minutes... that *will* land him/her with a seemingly slow delivery, there is no argumenting with that. On the other hand, I'm sure one could try affect the operation of the qmgr other ways that might get the same effect, or even some MailScanner setting. I'm very busy/tired ATM, so haven't spent even close to enough time looking at this problem ... Perhaps shouldn't be posting on the list at all... Sigh - Where did things like "free time" and "relaxation" go?:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 10:47:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:47:28 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> Message-ID: <223f97700711100247s13f94b06p40707dae4c792971@mail.gmail.com> On 09/11/2007, R Wahyudi wrote: > I did .. > http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > > Anyway .. I am still curious to know if this is the default MailScanner - > postfix behavior ie : you have to wait for > qmgr to respawn to be able to deliver message from incoming queue ?? > No, it should get kicked for each batch. ... assuming batch mode... Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 10:48:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:48:29 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> Message-ID: <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> On 10/11/2007, Drew Marshall wrote: > > > On 9 Nov 2007, at 22:50, R Wahyudi wrote: > I did .. > http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > > Anyway .. I am still curious to know if this is the default MailScanner - > postfix behavior ie : you have to wait for > qmgr to respawn to be able to deliver message from incoming queue ?? > Evening all, been far too long since I have posted (Been stupidly busy :-( ) > > I would suggest you want to check your Delivery method option at the bottom > MailScanner.conf and make sure it is batch and not queue. Setting it to > queue would invoke this behaviour. Changing the queue runner settings should > not be required. The queue running is called by Postfix when each process > finishes to advise the next to run. The 300 second delay is merely to catch > anything that 'got left behind'. > > Drew The word of reason returnes! Glad to see you Drew! Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 10:50:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 10:50:36 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> Message-ID: <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> On 10/11/2007, Drew Marshall wrote: > On 10 Nov 2007, at 00:50, Julian Field wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > > > > > Drew Marshall wrote: > >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >> > >>> I did .. > >>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > >>> > >>> Anyway .. I am still curious to know if this is the default > >>> MailScanner - postfix behavior ie : you have to wait for > >>> qmgr to respawn to be able to deliver message from incoming queue ?? > >> > >> Evening all, been far too long since I have posted (Been stupidly > >> busy > >> :-( ) > > Glad to see you back! > > Nice to be back! Mind you I have some reading to do (I didn't really > go, just no time to post and only just enough time to read some > threads). Hope you are feeling better, Shingles is no fun :-( > > Drew Uh, enlighten a poo Swede, would you... What are "shingles"? Thought that'd be a 1930's hair style:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Sat Nov 10 12:48:13 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 12:48:30 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> Message-ID: <4735A88D.4060105@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Glenn Steen wrote: > On 10/11/2007, Drew Marshall wrote: > >> On 10 Nov 2007, at 00:50, Julian Field wrote: >> >> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> >>> >>> Drew Marshall wrote: >>> >>>> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >>>> >>>> >>>>> I did .. >>>>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >>>>> >>>>> Anyway .. I am still curious to know if this is the default >>>>> MailScanner - postfix behavior ie : you have to wait for >>>>> qmgr to respawn to be able to deliver message from incoming queue ?? >>>>> >>>> Evening all, been far too long since I have posted (Been stupidly >>>> busy >>>> :-( ) >>>> >>> Glad to see you back! >>> >> Nice to be back! Mind you I have some reading to do (I didn't really >> go, just no time to post and only just enough time to read some >> threads). Hope you are feeling better, Shingles is no fun :-( >> >> Drew >> > Uh, enlighten a poo Swede, would you... What are "shingles"? Thought > that'd be a 1930's hair style:-) > It's the same virus pretty much as causes chickenpox in children. It travels along your nerves. Most people carry it, it just lies dormant. Occasionally it flares up, and causes spots on the skin along the rough path of the nerve it has flared up in. It also causes a nerve pain (rather like RSI pain) due to inflammation of the nerves (I think). Wikipedia has an article all about it http://en.wikipedia.org/wiki/Herpes_zoster Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNaiOEfZZRxQVtlQRAogeAKDqUZIg0Cj3g57K8FotPfLtFagpIgCeJk6B EUgSI+WD7ZBl9NxH+BNMTuI= =bmmh -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Sat Nov 10 13:07:29 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 13:07:42 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4735A88D.4060105@ecs.soton.ac.uk> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> <4735A88D.4060105@ecs.soton.ac.uk> Message-ID: <223f97700711100507p6d32147fhd0cc45e0b7f9e21c@mail.gmail.com> On 10/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Glenn Steen wrote: > > On 10/11/2007, Drew Marshall wrote: > > > >> On 10 Nov 2007, at 00:50, Julian Field wrote: > >> > >> > >>> -----BEGIN PGP SIGNED MESSAGE----- > >>> Hash: SHA1 > >>> > >>> > >>> > >>> Drew Marshall wrote: > >>> > >>>> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >>>> > >>>> > >>>>> I did .. > >>>>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > >>>>> > >>>>> Anyway .. I am still curious to know if this is the default > >>>>> MailScanner - postfix behavior ie : you have to wait for > >>>>> qmgr to respawn to be able to deliver message from incoming queue ?? > >>>>> > >>>> Evening all, been far too long since I have posted (Been stupidly > >>>> busy > >>>> :-( ) > >>>> > >>> Glad to see you back! > >>> > >> Nice to be back! Mind you I have some reading to do (I didn't really > >> go, just no time to post and only just enough time to read some > >> threads). Hope you are feeling better, Shingles is no fun :-( > >> > >> Drew > >> > > Uh, enlighten a poo Swede, would you... What are "shingles"? Thought > > that'd be a 1930's hair style:-) > > > It's the same virus pretty much as causes chickenpox in children. It > travels along your nerves. Most people carry it, it just lies dormant. > Occasionally it flares up, and causes spots on the skin along the rough > path of the nerve it has flared up in. It also causes a nerve pain > (rather like RSI pain) due to inflammation of the nerves (I think). > > Wikipedia has an article all about it > http://en.wikipedia.org/wiki/Herpes_zoster > > Jules > Ah, that kind of Herpes... Nasty. Not much to do other than to wait it out:/... Hope it wasn't too bad. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From brose at med.wayne.edu Sat Nov 10 14:37:13 2007 From: brose at med.wayne.edu (Rose, Bobby) Date: Sat Nov 10 14:37:32 2007 Subject: Mailscanner filename check and report In-Reply-To: <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> Message-ID: <8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> I've been using MailScanner for years and I seen this issue a couple times before but just assumed it was a user mistake. I've seen sender.filename.report sends back a message with the wrong $filename string. What is sends back is a random string of characters. The message says One or more of the attachments (VAmRh3qo9P) are on the list of unacceptable attachments for this site and will not have been delivered. Consider renaming the files to avoid this constraint. The virus detector said this about the message: Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) But in the maillogs, it has the real filename Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam checks (2826228 > 200000 bytes) Nov 8 10:10:23 eeyore MailScanner[25630]: Expanding TNEF archive at /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 added TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip Education.lg.10.31.20071.ppt Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 has had TNEF winmail.dat removed Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: Found possible filename hiding (lA8F96O2031926 RHO Flip Education.lg.10.31.20071.ppt.doc) Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message lA8F96O2031926 to SQL Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to MailWatch SQL I'm not sure of the conditions that lead to this because it doesn't always happen and if I test myself, the sender.filename.report message is correct. Anyone else seen this before? -=B From gerard at seibercom.net Sat Nov 10 14:42:35 2007 From: gerard at seibercom.net (Gerard Seibert) Date: Sat Nov 10 14:41:45 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> References: <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> Message-ID: <20071110093358.6F33.GERARD@seibercom.net> On Saturday November 10, 2007 at 05:45:33 (AM) Glenn Steen wrote: > On 09/11/2007, Gerard Seibert wrote: > > On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > > > > [ ... ] > > > > > Ah. Great that you found it (all MTA, and OT, but still.... One could > > > well think the ones over at the PF list would've been able to see > > > this:-):-)... Anyway... I do think that evere other second is a bit > > > often, you could try every 10 or 15 seconds or similar... Would mean > > > approximately 25 deliveries in every chunk. But if the system doesn't > > > suffer too much from the queue scans... well, every other second it > > > is:-). > > > > OK, I don't want to start a war here; however, I saw "R Wahyudi > > " original post on the Postfix forum. I did not see a > > copy of his 'postconf -n' output. Without that information it would have been > > virtually impossible for anyone to have accurately diagnosed his problem. > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > You are quite right, Rianto could have been as detailed as he (or is > that a female name?) eventually was here, but that is not my point... > All I say is that they could have asked for relevant information (not > just the "use of MailScanner disqualifies you from ever getting our > help" line). > As you did here. > I don't think there is any argument here, is there? None at all. However, users of the Postfix forum know that in order to receive suitable assistance they are required to post the output of 'postconf -n' as well as their system configuration and any unaltered log files that relate to their problem. Failure to do that just wastes everyone's time. By the way, there is some excelent information regarding gmgr located at: http://www.postfix.org/qmgr.8.html In any case, Victor might just have been having a bad day. It happens to all of us at one time or another. > > IMHO, he would be well served to post that information, as well as detailed > > information regarding his network on the Postfix forum so that his problem > > could be properly analysed. Altering the default settings as much as he > > apparently has done does not seem correct. > > > Yes,I think it a bit ... extreme... too. But with the figures of > incoming mail s/he cites, if the qmgr really only wakeup every five > minutes... that *will* land him/her with a seemingly slow delivery, > there is no argumenting with that. On the other hand, I'm sure one > could try affect the operation of the qmgr other ways that might get > the same effect, or even some MailScanner setting. > I'm very busy/tired ATM, so haven't spent even close to enough time > looking at this problem ... Perhaps shouldn't be posting on the list > at all... Sigh - Where did things like "free time" and "relaxation" > go?:-) > > Cheers -- Gerard From glenn.steen at gmail.com Sat Nov 10 15:59:29 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 15:59:35 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <20071110093358.6F33.GERARD@seibercom.net> References: <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> <20071110093358.6F33.GERARD@seibercom.net> Message-ID: <223f97700711100759m5556d7c2o10172bd9179b3486@mail.gmail.com> On 10/11/2007, Gerard Seibert wrote: > On Saturday November 10, 2007 at 05:45:33 (AM) Glenn Steen wrote: > > > On 09/11/2007, Gerard Seibert wrote: > > > On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > > > > > > [ ... ] > > > > > > > Ah. Great that you found it (all MTA, and OT, but still.... One could > > > > well think the ones over at the PF list would've been able to see > > > > this:-):-)... Anyway... I do think that evere other second is a bit > > > > often, you could try every 10 or 15 seconds or similar... Would mean > > > > approximately 25 deliveries in every chunk. But if the system doesn't > > > > suffer too much from the queue scans... well, every other second it > > > > is:-). > > > > > > OK, I don't want to start a war here; however, I saw "R Wahyudi > > > " original post on the Postfix forum. I did not see a > > > copy of his 'postconf -n' output. Without that information it would have been > > > virtually impossible for anyone to have accurately diagnosed his problem. > > > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > > You are quite right, Rianto could have been as detailed as he (or is > > that a female name?) eventually was here, but that is not my point... > > All I say is that they could have asked for relevant information (not > > just the "use of MailScanner disqualifies you from ever getting our > > help" line). > > As you did here. > > I don't think there is any argument here, is there? > > None at all. However, users of the Postfix forum know that in order to receive > suitable assistance they are required to post the output of 'postconf -n' as > well as their system configuration and any unaltered log files that relate to > their problem. Failure to do that just wastes everyone's time. Quite true, and in that they're not any different than this list... Well, they're a bit more adamant, that is true:-):-) > By the way, there is some excelent information regarding gmgr located at: > > http://www.postfix.org/qmgr.8.html Yep. Nothing beats RTM:-). Well, maybe RTM&Understanding it too:-) > In any case, Victor might just have been having a bad day. It happens to all > of us at one time or another. If Victor is responsible (as I suspect) for the MSCI lists setup/management ... then he has had more than one bad day:-):-D. Hackish and not sensitive to "user unknown" rejections ... Sigh. Then again, the hack seems to be effective in other ways, so it's not all bad:) > > > IMHO, he would be well served to post that information, as well as detailed > > > information regarding his network on the Postfix forum so that his problem > > > could be properly analysed. Altering the default settings as much as he > > > apparently has done does not seem correct. > > > > > Yes,I think it a bit ... extreme... too. But with the figures of > > incoming mail s/he cites, if the qmgr really only wakeup every five > > minutes... that *will* land him/her with a seemingly slow delivery, > > there is no argumenting with that. On the other hand, I'm sure one > > could try affect the operation of the qmgr other ways that might get > > the same effect, or even some MailScanner setting. > > I'm very busy/tired ATM, so haven't spent even close to enough time > > looking at this problem ... Perhaps shouldn't be posting on the list > > at all... Sigh - Where did things like "free time" and "relaxation" > > go?:-) > > > > Cheers > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Sat Nov 10 16:16:57 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 16:17:12 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100507p6d32147fhd0cc45e0b7f9e21c@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <47350050.3040107@ecs.soton.ac.uk> <223f97700711100250y283f5952ob34fab2909dfb74d@mail.gmail.com> <4735A88D.4060105@ecs.soton.ac.uk> <223f97700711100507p6d32147fhd0cc45e0b7f9e21c@mail.gmail.com> Message-ID: <4735D979.7010008@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Glenn Steen wrote: > On 10/11/2007, Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> >> >> Glenn Steen wrote: >> >>> On 10/11/2007, Drew Marshall wrote: >>> >>> >>>> On 10 Nov 2007, at 00:50, Julian Field wrote: >>>> >>>> >>>> >>>>> -----BEGIN PGP SIGNED MESSAGE----- >>>>> Hash: SHA1 >>>>> >>>>> >>>>> >>>>> Drew Marshall wrote: >>>>> >>>>> >>>>>> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >>>>>> >>>>>> >>>>>> >>>>>>> I did .. >>>>>>> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >>>>>>> >>>>>>> Anyway .. I am still curious to know if this is the default >>>>>>> MailScanner - postfix behavior ie : you have to wait for >>>>>>> qmgr to respawn to be able to deliver message from incoming queue ?? >>>>>>> >>>>>>> >>>>>> Evening all, been far too long since I have posted (Been stupidly >>>>>> busy >>>>>> :-( ) >>>>>> >>>>>> >>>>> Glad to see you back! >>>>> >>>>> >>>> Nice to be back! Mind you I have some reading to do (I didn't really >>>> go, just no time to post and only just enough time to read some >>>> threads). Hope you are feeling better, Shingles is no fun :-( >>>> >>>> Drew >>>> >>>> >>> Uh, enlighten a poo Swede, would you... What are "shingles"? Thought >>> that'd be a 1930's hair style:-) >>> >>> >> It's the same virus pretty much as causes chickenpox in children. It >> travels along your nerves. Most people carry it, it just lies dormant. >> Occasionally it flares up, and causes spots on the skin along the rough >> path of the nerve it has flared up in. It also causes a nerve pain >> (rather like RSI pain) due to inflammation of the nerves (I think). >> >> Wikipedia has an article all about it >> http://en.wikipedia.org/wiki/Herpes_zoster >> >> Jules >> >> > Ah, that kind of Herpes... Nasty. > Not much to do other than to wait it out:/... Hope it wasn't too bad. > It's just the RSI-like ache that is left behind now, everything else has completely healed. It's going to take a few weeks to get of this ache, which isn't painful just damn uncomfortable. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNdl7EfZZRxQVtlQRAkCaAJwMD2/9XZ7un3jFPtSwdYMjqzZHrACfX7zv zkM8onZyfy7QzLR9Y+tQ5IM= =cUD+ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Sat Nov 10 16:18:16 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 10 16:18:41 2007 Subject: Mailscanner filename check and report In-Reply-To: <8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it> <8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> Message-ID: <4735D9C8.2010301@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I would be very interested if someone can give me a reproducible example of when it goes wrong. Before I get that, there's unfortunately very little I can do about this problem, sorry. Rose, Bobby wrote: > > I've been using MailScanner for years and I seen this issue a couple > times before but just assumed it was a user mistake. I've seen > sender.filename.report sends back a message with the wrong $filename > string. What is sends back is a random string of characters. > > The message says > > One or more of the attachments (VAmRh3qo9P) are on the list of > unacceptable attachments for this site and will not have been delivered. > > Consider renaming the files to avoid this constraint. > > The virus detector said this about the message: > Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) > > But in the maillogs, it has the real filename > > Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from > 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam > checks (2826228 > 200000 bytes) > Nov 8 10:10:23 eeyore MailScanner[25630]: Expanding TNEF archive at > /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat > Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 added > TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip > Education.lg.10.31.20071.ppt > Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 has > had TNEF winmail.dat removed > Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: Found > possible filename hiding (lA8F96O2031926 RHO Flip > Education.lg.10.31.20071.ppt.doc) > Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message > lA8F96O2031926 to SQL > Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to > MailWatch SQL > > I'm not sure of the conditions that lead to this because it doesn't > always happen and if I test myself, the sender.filename.report message > is correct. Anyone else seen this before? > > -=B > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNdnJEfZZRxQVtlQRAld6AJ42jnVnrHomdy3pX7a6SqFtNMwL1QCggaTy x3V3Bb6MSavDu4LCKFc4fCw= =Bt9c -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From brose at med.wayne.edu Sat Nov 10 18:36:32 2007 From: brose at med.wayne.edu (Rose, Bobby) Date: Sat Nov 10 18:36:42 2007 Subject: Mailscanner filename check and report In-Reply-To: <4735D9C8.2010301@ecs.soton.ac.uk> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it><8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> <4735D9C8.2010301@ecs.soton.ac.uk> Message-ID: <8F2A53954C22554EB75D9643FCCE0C6B05A5F864@MED-CORE03-MS1.med.wayne.edu> I've been trying to reproduce but haven't, but the issue could probably be explained if we knew were MailScanner's report mech is getting that random string name. I had another yesterday. Report: Attempt to hide real filename extension (zTEEXqUDfZ) but logs have Nov 9 11:06:32 eeyore MailScanner[6019]: Expanding TNEF archive at /var/spool/MailScanner/incoming/6019/lA9G6Nc2009380/winmail.dat Nov 9 11:06:32 eeyore MailScanner[6019]: Message lA9G6Nc2009380 added TNEF contents Dr_Vay_shopcart.aspx.htm Nov 9 11:06:32 eeyore MailScanner[6019]: Message lA9G6Nc2009380 has had TNEF winmail.dat removed Nov 9 11:06:34 eeyore MailScanner[6019]: Filename Checks: Found possible filename hiding (lA9G6Nc2009380 Dr_Vay_shopcart.aspx.htm) Is that random string something generated from the tnef extraction? -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field Sent: Saturday, November 10, 2007 11:18 AM To: MailScanner discussion Subject: Re: Mailscanner filename check and report -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I would be very interested if someone can give me a reproducible example of when it goes wrong. Before I get that, there's unfortunately very little I can do about this problem, sorry. Rose, Bobby wrote: > > I've been using MailScanner for years and I seen this issue a couple > times before but just assumed it was a user mistake. I've seen > sender.filename.report sends back a message with the wrong $filename > string. What is sends back is a random string of characters. > > The message says > > One or more of the attachments (VAmRh3qo9P) are on the list of > unacceptable attachments for this site and will not have been delivered. > > Consider renaming the files to avoid this constraint. > > The virus detector said this about the message: > Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) > > But in the maillogs, it has the real filename > > Nov 8 10:09:33 eeyore MailScanner[25630]: Message lA8F96O2031926 from > 155.139.50.90 (cadams2@dmc.org) to med.wayne.edu is too big for spam > checks (2826228 > 200000 bytes) Nov 8 10:10:23 eeyore > MailScanner[25630]: Expanding TNEF archive at > /var/spool/MailScanner/incoming/25630/lA8F96O2031926/winmail.dat > Nov 8 10:10:24 eeyore MailScanner[25630]: Message lA8F96O2031926 > added TNEF contents RHO Flip Education.lg.10.31.20071.ppt.doc,RHO Flip > Education.lg.10.31.20071.ppt Nov 8 10:10:24 eeyore > MailScanner[25630]: Message lA8F96O2031926 has had TNEF winmail.dat > removed Nov 8 10:10:28 eeyore MailScanner[25630]: Filename Checks: > Found possible filename hiding (lA8F96O2031926 RHO Flip > Education.lg.10.31.20071.ppt.doc) > Nov 8 10:10:36 eeyore MailScanner[25630]: Logging message > lA8F96O2031926 to SQL > Nov 8 10:10:36 eeyore MailScanner[25756]: lA8F96O2031926: Logged to > MailWatch SQL > > I'm not sure of the conditions that lead to this because it doesn't > always happen and if I test myself, the sender.filename.report message > is correct. Anyone else seen this before? > > -=B > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHNdnJEfZZRxQVtlQRAld6AJ42jnVnrHomdy3pX7a6SqFtNMwL1QCggaTy x3V3Bb6MSavDu4LCKFc4fCw= =Bt9c -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From drew.marshall at technologytiger.net Sat Nov 10 19:01:36 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 10 19:01:48 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> Message-ID: <1B533F32-0C5B-4FC9-900B-D641B622EB46@technologytiger.net> On 10 Nov 2007, at 10:48, Glenn Steen wrote: > On 10/11/2007, Drew Marshall > wrote: >> >> >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: >> I did .. >> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html >> >> Anyway .. I am still curious to know if this is the default >> MailScanner - >> postfix behavior ie : you have to wait for >> qmgr to respawn to be able to deliver message from incoming queue ?? >> Evening all, been far too long since I have posted (Been stupidly >> busy :-( ) >> >> I would suggest you want to check your Delivery method option at >> the bottom >> MailScanner.conf and make sure it is batch and not queue. Setting >> it to >> queue would invoke this behaviour. Changing the queue runner >> settings should >> not be required. The queue running is called by Postfix when each >> process >> finishes to advise the next to run. The 300 second delay is merely >> to catch >> anything that 'got left behind'. >> >> Drew > The word of reason returnes! > Glad to see you Drew! Thanks Glenn. Hope you are keeping well? Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From ssilva at sgvwater.com Sat Nov 10 21:27:28 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Sat Nov 10 21:28:04 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> Message-ID: on 11/10/2007 2:45 AM Glenn Steen spake the following: > On 09/11/2007, Gerard Seibert wrote: >> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: >> >> [ ... ] >> >>> Ah. Great that you found it (all MTA, and OT, but still.... One could >>> well think the ones over at the PF list would've been able to see >>> this:-):-)... Anyway... I do think that evere other second is a bit >>> often, you could try every 10 or 15 seconds or similar... Would mean >>> approximately 25 deliveries in every chunk. But if the system doesn't >>> suffer too much from the queue scans... well, every other second it >>> is:-). >> OK, I don't want to start a war here; however, I saw "R Wahyudi >> " original post on the Postfix forum. I did not see a >> copy of his 'postconf -n' output. Without that information it would have been >> virtually impossible for anyone to have accurately diagnosed his problem. > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > You are quite right, Rianto could have been as detailed as he (or is > that a female name?) eventually was here, but that is not my point... > All I say is that they could have asked for relevant information (not > just the "use of MailScanner disqualifies you from ever getting our > help" line). > As you did here. > I don't think there is any argument here, is there? > >> IMHO, he would be well served to post that information, as well as detailed >> information regarding his network on the Postfix forum so that his problem >> could be properly analysed. Altering the default settings as much as he >> apparently has done does not seem correct. >> > Yes,I think it a bit ... extreme... too. But with the figures of > incoming mail s/he cites, if the qmgr really only wakeup every five > minutes... that *will* land him/her with a seemingly slow delivery, > there is no argumenting with that. On the other hand, I'm sure one > could try affect the operation of the qmgr other ways that might get > the same effect, or even some MailScanner setting. > I'm very busy/tired ATM, so haven't spent even close to enough time > looking at this problem ... Perhaps shouldn't be posting on the list > at all... Sigh - Where did things like "free time" and "relaxation" > go?:-) > > Cheers My free time seems to be from when my head hits the pillow to when the alarm clock or phone rings! ;-P Lately, I have been in the emergency room almost every night with my spouse and her condition that the doctors call "Irritable bowel syndrome" or translated to layman's terms "Yes she is vomiting and yes she has pain, but we just can't figure out what is causing it" Trying to function at work on one or two hours of sleep is starting to get to me, but I have missed so much work in the last 5 years that I am afraid to take too much time off. I feel for all of you with cronic conditions, and just remember that as long as you are on the green side of the grass, things aren't as bad as they could be. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From glenn.steen at gmail.com Sat Nov 10 21:41:27 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 21:41:29 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <1B533F32-0C5B-4FC9-900B-D641B622EB46@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <223f97700711100248v45536a90rbb030d4b1756dd3a@mail.gmail.com> <1B533F32-0C5B-4FC9-900B-D641B622EB46@technologytiger.net> Message-ID: <223f97700711101341k455c1e3by499c6884c224c56f@mail.gmail.com> On 10/11/2007, Drew Marshall wrote: > On 10 Nov 2007, at 10:48, Glenn Steen wrote: > > > On 10/11/2007, Drew Marshall > > wrote: > >> > >> > >> On 9 Nov 2007, at 22:50, R Wahyudi wrote: > >> I did .. > >> http://archives.neohapsis.com/archives/postfix/2007-11/0364.html > >> > >> Anyway .. I am still curious to know if this is the default > >> MailScanner - > >> postfix behavior ie : you have to wait for > >> qmgr to respawn to be able to deliver message from incoming queue ?? > >> Evening all, been far too long since I have posted (Been stupidly > >> busy :-( ) > >> > >> I would suggest you want to check your Delivery method option at > >> the bottom > >> MailScanner.conf and make sure it is batch and not queue. Setting > >> it to > >> queue would invoke this behaviour. Changing the queue runner > >> settings should > >> not be required. The queue running is called by Postfix when each > >> process > >> finishes to advise the next to run. The 300 second delay is merely > >> to catch > >> anything that 'got left behind'. > >> > >> Drew > > The word of reason returnes! > > Glad to see you Drew! > > Thanks Glenn. Hope you are keeping well? > > Drew > Well enough, I guess.... I'll look nice in the coffin, eventually:-):-) The work is pretty gruesome though... Just keeps piling up... Ah well, that's what being alive is about I guess, keeping busy:). Am on some new meds now, which actually seem to work (azatioprin/Imurel... Immunosuppressant that keeps the bone marrow fromproducing too much white bloodcells... seems to have "cured" me:-), so that is looking really good. What's been keeping you busy then? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 10 22:00:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 10 22:00:39 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> Message-ID: <223f97700711101400s1c93cff2r5859d5ff94e1ed44@mail.gmail.com> On 10/11/2007, Scott Silva wrote: > on 11/10/2007 2:45 AM Glenn Steen spake the following: > > On 09/11/2007, Gerard Seibert wrote: > >> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: > >> > >> [ ... ] > >> > >>> Ah. Great that you found it (all MTA, and OT, but still.... One could > >>> well think the ones over at the PF list would've been able to see > >>> this:-):-)... Anyway... I do think that evere other second is a bit > >>> often, you could try every 10 or 15 seconds or similar... Would mean > >>> approximately 25 deliveries in every chunk. But if the system doesn't > >>> suffer too much from the queue scans... well, every other second it > >>> is:-). > >> OK, I don't want to start a war here; however, I saw "R Wahyudi > >> " original post on the Postfix forum. I did not see a > >> copy of his 'postconf -n' output. Without that information it would have been > >> virtually impossible for anyone to have accurately diagnosed his problem. > > > > As you know Gerard, I'm not the contentious type;-). No wars in sight... > > You are quite right, Rianto could have been as detailed as he (or is > > that a female name?) eventually was here, but that is not my point... > > All I say is that they could have asked for relevant information (not > > just the "use of MailScanner disqualifies you from ever getting our > > help" line). > > As you did here. > > I don't think there is any argument here, is there? > > > >> IMHO, he would be well served to post that information, as well as detailed > >> information regarding his network on the Postfix forum so that his problem > >> could be properly analysed. Altering the default settings as much as he > >> apparently has done does not seem correct. > >> > > Yes,I think it a bit ... extreme... too. But with the figures of > > incoming mail s/he cites, if the qmgr really only wakeup every five > > minutes... that *will* land him/her with a seemingly slow delivery, > > there is no argumenting with that. On the other hand, I'm sure one > > could try affect the operation of the qmgr other ways that might get > > the same effect, or even some MailScanner setting. > > I'm very busy/tired ATM, so haven't spent even close to enough time > > looking at this problem ... Perhaps shouldn't be posting on the list > > at all... Sigh - Where did things like "free time" and "relaxation" > > go?:-) > > > > Cheers > My free time seems to be from when my head hits the pillow to when the alarm > clock or phone rings! ;-P :-) > Lately, I have been in the emergency room almost every night with my spouse > and her condition that the doctors call "Irritable bowel syndrome" or > translated to layman's terms "Yes she is vomiting and yes she has pain, but we > just can't figure out what is causing it" I got that diagnose too, initially.... If it isn't UC (which is pretty obvious, whatwith all the blood) IBS is the next thing they try out as an explanation... They've done the lovely endoscopic things ... ? From "both ends"...? Since IBS is an "exclusion diagnose", I suppose they have... Nowadays, a good gastroenterologist will see if it's Crohns ... and the pathology will confirm it... But there are many strange things that look like IBS (even epelepsy... Strange as it sounds). A dear friend of mine has IBS (and her husband has UC....). What they seem to find most irritating is that the doctors just shrug it of, since they really have no clue what to do. Doesn't mean she's in any less pain, or that the condition isn't grave.... Just not immediately life-threatening. Oh well, you already know this, I imagine. I feel for you both. > Trying to function at work on one or two hours of sleep is starting to get to > me, but I have missed so much work in the last 5 years that I am afraid to > take too much time off. Well, if I were you.... I'd talk to the PHB about what he can do to make it possible for you to function as "caretaker" while still pulling your load at work. If it means more work from home, gadgets, phones, portables whatever.... Get him to see the business "profit" of having you available... when you really aren't;-) But you're a smart guy, you already did that...;) If all else fails, a power-nap (on the WC, if it is otherwise frowned upon:) can save any day:-):-) > I feel for all of you with cronic conditions, and just remember that as long > as you are on the green side of the grass, things aren't as bad as they could be. > Yeah, being alive sure beats being fertilizer:-). And as I said in the other mail, in answer to Drew, my new meds have put a new face on things... Hardly any pain at all, normal excrements... Life is definitely looking up. From where I stand ATM, at least:-). Hang in there budy, I know you're a virtual pillar of support, and comfort, for her! Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From hvdkooij at vanderkooij.org Sat Nov 10 23:16:42 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sat Nov 10 23:17:14 2007 Subject: Experimental repository for RHEL 5 / Centos 5 Message-ID: <47363BDA.5050202@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have created an experimental setup with wrapper that should allow one to install MailScanner through yum for RHEL 5 or Centos 5 if one has allready added the rpmforge repository. I put up the details on http://yum.vanderkooij.org/ I will try to install some other virtual machines and test other distributions if I can find the time. It is rather simple and I think it will be possible to keep it that way. So I hope when the test show good results Jules will be able to maintain a repository himself with minimal effort. If anyone is willing to give it a spin. Please do so, so we can work out anything I might have overlooked. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHNjvYBvzDRVjxmYERAu0nAKCvYv+o+RMsVZSc81skrelob+7jLwCdGOo0 pS1h8N1CkUcm+AhXAG59p5g= =9iB3 -----END PGP SIGNATURE----- From micoots at yahoo.com Sat Nov 10 23:36:58 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sat Nov 10 23:37:01 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk> Message-ID: <689764.85251.qm@web33314.mail.mud.yahoo.com> Hi, "Randal, Phil" wrote: If yum has already downloaded the package, the procedure would be something like: service MailScanner stop rpm -Uvh /var/cache/yum/update/packages/perl-5.8.5-36.el4_5.2.i386.rpm --force then reinstall MailScanner and start it. I've got this same problem myself running SL4.5 64bit (and will fix it on the next MailScanner update from Jules), but I'd personally remove the RPM's first that it clashes with, upgrade the perl RPM, then re-install MailScanner. The thing which I found odd though is that the RPM's that the perl RPM's clash with are the ones that were built by the MailScanner install.sh scipt. It was always my understanding that when MailScanner finds the perl module installed, it wouldn't try and force the build of the MailScanner src rpm? Michael. If it isn't in your yum cache, wget it from a CentOS mirror and force install it. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Marcello Anderlini > Sent: 08 November 2007 14:21 > To: 'MailScanner discussion' > Subject: Errore when I try update perl on centos 4.5 > > Hello I'm trying to update perl to 5.8.5-36.el4_5.2 version > via yum update > My system it's a x86_64 using CentOS release 4.5 (Final) > Mailscanner version is mailscanner-4.58.9-1 > > Unforntunaly I get this error msg: > ============ > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/Sys/Syslog.pm from > install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > file > /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/auto/Sys/Sysl > og/Syslog.so > from install of perl-5.8.5-36.el4_5.2 conflicts with file from package > perl-Sys-Syslog-0.18-1 > ============ > > Could someone help me ? Please try to use an easy english > because it's not > my mother language. > > I would like to avoid to re-install mailscanner because this server is > mission critical for us. > > Thanks very much and sorry for my worst english. > > > Bye > > Dr. Marcello Anderlini > m.anderlini@database.it > --------------------------------------------- > Database Informatica S.r.l. > Microsoft Certified Partner > Tel. +39059775070 > Fax. +39059779545 > http://www.database.it > --------------------------------------------- > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.24/1117 - Release > Date: 07/11/2007 > 22.52 > > > > -- > Messaggio verificato dal servizio antivirus di Database Informatica > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071111/bef23d8c/attachment.html From hvdkooij at vanderkooij.org Sun Nov 11 00:10:04 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 11 00:10:31 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <689764.85251.qm@web33314.mail.mud.yahoo.com> References: <689764.85251.qm@web33314.mail.mud.yahoo.com> Message-ID: <4736485C.9070301@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Michael Mansour wrote: > The thing which I found odd though is that the RPM's that the perl RPM's > clash with are the ones that were built by the MailScanner install.sh scipt. > > It was always my understanding that when MailScanner finds the perl > module installed, it wouldn't try and force the build of the MailScanner > src rpm? The use of --force pretty much means it will ignore a nuber of things. So it will override another package. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHNkhaBvzDRVjxmYERAtSVAJ97c04MRmSRn2RjmXlyAXn7H429+gCfbCYc DVbyJ13Bg3tj2pXYNjkRsQs= =J8cT -----END PGP SIGNATURE----- From micoots at yahoo.com Sun Nov 11 00:41:43 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sun Nov 11 00:41:46 2007 Subject: Errore when I try update perl on centos 4.5 In-Reply-To: <4736485C.9070301@vanderkooij.org> Message-ID: <143477.1684.qm@web33313.mail.mud.yahoo.com> Hi Hugo, Hugo van der Kooij wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Michael Mansour wrote: > The thing which I found odd though is that the RPM's that the perl RPM's > clash with are the ones that were built by the MailScanner install.sh scipt. > > It was always my understanding that when MailScanner finds the perl > module installed, it wouldn't try and force the build of the MailScanner > src rpm? The use of --force pretty much means it will ignore a nuber of things. So it will override another package. Yes I realise that, but in the early days when I'd go through (in detail) the output logs of the install.sh, I remember seeing many packages not installed (forced or otherwise) because MailScanner determined the perl modules were already installed. Albiet the last time I went through that output with a fine tooth comb was about two years ago, the MailScanner install script should realise when a perl module exists, it doesn't need to compile a new one. It makes sense if all this was properly in a repo using rpmforge to avoid these types of duplicate pm's (I will try the RHEL5 repo on an SL5 VM in about a fortnight from now - but all my MailScanner servers are SL4.5). BTW, I checked on the Dag site here: http://dag.wieers.com/rpm/packages/mailscanner/_buildlogs/ and it seems Dag has been trying to get mailscanner supported for a while, even though I haven't heard anything from him in the rpmforge suggest or users lists. Regards, Michael. Hugo. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071111/be3bd044/attachment.html From Jamesp at MusicReports.com Sun Nov 11 16:36:15 2007 From: Jamesp at MusicReports.com (James D. Parra) Date: Sun Nov 11 16:36:24 2007 Subject: mailscanner rpm can't uninstall Message-ID: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> Hello, I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was installed from the tarball install.sh script in /usr/src/packages/BUILD/MailScanner-4.65.3-1. mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e mailscanner-4.65.3-1.noarch.rpm error: package mailscanner-4.65.3-1.noarch.rpm is not installed mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -Uvh mailscanner-4.65.3-1.noarch.rpm Preparing... ########################################### [100%] package mailscanner-4.65.3-1 is already installed This is a new server with a fresh install of Suse 10.2 and I want to recheck a few details in the install output. Perhaps there an uninstall command for MailScanner? Many thanks in advance. James From richard.siddall at elirion.net Sun Nov 11 16:49:40 2007 From: richard.siddall at elirion.net (Richard Siddall) Date: Sun Nov 11 16:51:01 2007 Subject: mailscanner rpm can't uninstall In-Reply-To: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> References: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> Message-ID: <473732A4.1010706@elirion.net> James D. Parra wrote: > Hello, > > I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however > "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was > installed from the tarball install.sh script in > /usr/src/packages/BUILD/MailScanner-4.65.3-1. > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e > mailscanner-4.65.3-1.noarch.rpm > error: package mailscanner-4.65.3-1.noarch.rpm is not installed > Try rpm -e mailscanner Regards, Richard Siddall From hvdkooij at vanderkooij.org Sun Nov 11 16:57:36 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 11 16:58:00 2007 Subject: mailscanner rpm can't uninstall In-Reply-To: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> References: <531F1E080638384C9623B00D71AA546D0502072E@exchange.musicreports.com> Message-ID: <47373480.2050502@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 James D. Parra wrote: > Hello, > > I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however > "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was > installed from the tarball install.sh script in > /usr/src/packages/BUILD/MailScanner-4.65.3-1. > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e > mailscanner-4.65.3-1.noarch.rpm > error: package mailscanner-4.65.3-1.noarch.rpm is not installed > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -Uvh > mailscanner-4.65.3-1.noarch.rpm > Preparing... ########################################### > [100%] > package mailscanner-4.65.3-1 is already installed > > > This is a new server with a fresh install of Suse 10.2 and I want to recheck > a few details in the install output. Perhaps there an uninstall command for > MailScanner? You did allready use it. The obvious questions now are: - What is the utput of `rpm -qa|grep -i mail` - If MS is not listed is there still a residue present? (It should not but we are well beyond the point where we take things for granted.) Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHNzR8BvzDRVjxmYERAu5yAKCmmABEBiV8lr/2BgnaWDzimhPjXwCguJsP 9x2FtfqX2yj/03SIKnEkLDY= =LKzm -----END PGP SIGNATURE----- From Jamesp at MusicReports.com Sun Nov 11 17:09:13 2007 From: Jamesp at MusicReports.com (James D. Parra) Date: Sun Nov 11 17:09:24 2007 Subject: mailscanner rpm can't uninstall {solved} Message-ID: <531F1E080638384C9623B00D71AA546D0502072F@exchange.musicreports.com> > I need to uninstall & reinstall mailscanner-4.65.3-1.noarch.rpm, however > "rpm -e" says the rpm is not installed, which is incorrect. MailScanner was > installed from the tarball install.sh script in > /usr/src/packages/BUILD/MailScanner-4.65.3-1. > > mailserver:/usr/src/packages/BUILD/MailScanner-4.65.3-1 # rpm -e > mailscanner-4.65.3-1.noarch.rpm > error: package mailscanner-4.65.3-1.noarch.rpm is not installed > Try rpm -e mailscanner ~~~ Thanks Richard, that worked. ~James From MailScanner at ecs.soton.ac.uk Sun Nov 11 21:31:28 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun Nov 11 21:31:46 2007 Subject: OT: Best virtual machine server? Message-ID: <473774B0.5090700@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been badly bitten by VMWare, so that's out. No discussion there. It can't even keep its clock running to time :-( I've used Parallels quite a bit, but not suited to a server environment, it's a workstation tool. I've used Microsoft Virtual Server quite a bit, well suited to servers, dead easy to manage, I already have a VM in MVS that I will need to move to the new physical system. We get it free (as in beer). Big restriction: only supports 32-bit guests, no 64-bit guests at all :-( Xen? Never used it, have been reading the RedHat docs on it, looks like it needs a lot of text editing, but there also appears to be "virt-manager" that does a lot of the hard work for you. I want a system that is easy to get up and running, and easy to do everything with the host and the guests without physical access to the host hardware, once the host is setup. One question: what is the difference between domain0 and the host physical system? Any others I should be seriously considering? Basically what I'm doing is this: I am often asked to run a service for someone in a research project that doesn't have (yet) the hardware they need, and want to borrow a server for a month or two. So I'm spending some of my toy budget on a cheap 1U Dell server to do this in an organised way. So I'm looking for your thoughts and advice, as I know some of you use virtualisation in quite a big way. How can I move a Microsoft Virtual Server guest machine to the new server setup? And the same from a VMWare guest? I've two I have got to move, and don't want to have to totally reinstall from scratch if I can avoid it. Thanks folks! Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL JaC9cANGLGL/e4wSZvi2yHk= =Xy9q -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Sun Nov 11 21:40:06 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Sun Nov 11 21:41:21 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <223f97700711101400s1c93cff2r5859d5ff94e1ed44@mail.gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <223f97700711100245r30446b1fif0251ad65468d0ae@mail.gmail.com> <223f97700711101400s1c93cff2r5859d5ff94e1ed44@mail.gmail.com> Message-ID: on 11/10/2007 2:00 PM Glenn Steen spake the following: > On 10/11/2007, Scott Silva wrote: >> on 11/10/2007 2:45 AM Glenn Steen spake the following: >>> On 09/11/2007, Gerard Seibert wrote: >>>> On Friday November 09, 2007 at 03:58:46 (AM) Glenn Steen wrote: >>>> >>>> [ ... ] >>>> >>>>> Ah. Great that you found it (all MTA, and OT, but still.... One could >>>>> well think the ones over at the PF list would've been able to see >>>>> this:-):-)... Anyway... I do think that evere other second is a bit >>>>> often, you could try every 10 or 15 seconds or similar... Would mean >>>>> approximately 25 deliveries in every chunk. But if the system doesn't >>>>> suffer too much from the queue scans... well, every other second it >>>>> is:-). >>>> OK, I don't want to start a war here; however, I saw "R Wahyudi >>>> " original post on the Postfix forum. I did not see a >>>> copy of his 'postconf -n' output. Without that information it would have been >>>> virtually impossible for anyone to have accurately diagnosed his problem. >>> As you know Gerard, I'm not the contentious type;-). No wars in sight... >>> You are quite right, Rianto could have been as detailed as he (or is >>> that a female name?) eventually was here, but that is not my point... >>> All I say is that they could have asked for relevant information (not >>> just the "use of MailScanner disqualifies you from ever getting our >>> help" line). >>> As you did here. >>> I don't think there is any argument here, is there? >>> >>>> IMHO, he would be well served to post that information, as well as detailed >>>> information regarding his network on the Postfix forum so that his problem >>>> could be properly analysed. Altering the default settings as much as he >>>> apparently has done does not seem correct. >>>> >>> Yes,I think it a bit ... extreme... too. But with the figures of >>> incoming mail s/he cites, if the qmgr really only wakeup every five >>> minutes... that *will* land him/her with a seemingly slow delivery, >>> there is no argumenting with that. On the other hand, I'm sure one >>> could try affect the operation of the qmgr other ways that might get >>> the same effect, or even some MailScanner setting. >>> I'm very busy/tired ATM, so haven't spent even close to enough time >>> looking at this problem ... Perhaps shouldn't be posting on the list >>> at all... Sigh - Where did things like "free time" and "relaxation" >>> go?:-) >>> >>> Cheers >> My free time seems to be from when my head hits the pillow to when the alarm >> clock or phone rings! ;-P > :-) > >> Lately, I have been in the emergency room almost every night with my spouse >> and her condition that the doctors call "Irritable bowel syndrome" or >> translated to layman's terms "Yes she is vomiting and yes she has pain, but we >> just can't figure out what is causing it" > I got that diagnose too, initially.... If it isn't UC (which is pretty > obvious, whatwith all the blood) IBS is the next thing they try out as > an explanation... They've done the lovely endoscopic things ... ? From > "both ends"...? Since IBS is an "exclusion diagnose", I suppose they > have... > Nowadays, a good gastroenterologist will see if it's Crohns ... and > the pathology will confirm it... But there are many strange things > that look like IBS (even epelepsy... Strange as it sounds). > A dear friend of mine has IBS (and her husband has UC....). What they > seem to find most irritating is that the doctors just shrug it of, > since they really have no clue what to do. Doesn't mean she's in any > less pain, or that the condition isn't grave.... Just not immediately > life-threatening. Oh well, you already know this, I imagine. > I feel for you both. > >> Trying to function at work on one or two hours of sleep is starting to get to >> me, but I have missed so much work in the last 5 years that I am afraid to >> take too much time off. > Well, if I were you.... I'd talk to the PHB about what he can do to > make it possible for you to function as "caretaker" while still > pulling your load at work. If it means more work from home, gadgets, > phones, portables whatever.... Get him to see the business "profit" of > having you available... when you really aren't;-) > But you're a smart guy, you already did that...;) > If all else fails, a power-nap (on the WC, if it is otherwise frowned > upon:) can save any day:-):-) > >> I feel for all of you with cronic conditions, and just remember that as long >> as you are on the green side of the grass, things aren't as bad as they could be. >> > Yeah, being alive sure beats being fertilizer:-). And as I said in the > other mail, in answer to Drew, my new meds have put a new face on > things... Hardly any pain at all, normal excrements... Life is > definitely looking up. From where I stand ATM, at least:-). > > Hang in there budy, I know you're a virtual pillar of support, and > comfort, for her! > > Cheers They started her on clonazepan, a relative of vallium, and it seems to be helping. She always was one to stress over everything. Lucily I react to stress differently...I get very sleepy.. I have even fallen asleep during domestic arguments. But that can start its own fires. ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Sun Nov 11 21:42:16 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Sun Nov 11 21:45:11 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47363BDA.5050202@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> Message-ID: on 11/10/2007 3:16 PM Hugo van der Kooij spake the following: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > I have created an experimental setup with wrapper that should allow one > to install MailScanner through yum for RHEL 5 or Centos 5 if one has > allready added the rpmforge repository. > > I put up the details on http://yum.vanderkooij.org/ > > I will try to install some other virtual machines and test other > distributions if I can find the time. > > It is rather simple and I think it will be possible to keep it that way. > So I hope when the test show good results Jules will be able to maintain > a repository himself with minimal effort. > > If anyone is willing to give it a spin. Please do so, so we can work out > anything I might have overlooked. > > Hugo. I have a couple of new servers that will just be coming out of stress testing. I will do a wipe and install on one and give it a try this week. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From bahadir.kiziltan at gmail.com Sun Nov 11 21:55:23 2007 From: bahadir.kiziltan at gmail.com (Bahadir Kiziltan) Date: Sun Nov 11 21:55:24 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: On Nov 11, 2007 11:31 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to servers, > dead easy to manage, I already have a VM in MVS that I will need to move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > move, and don't want to have to totally reinstall from scratch if I can > avoid it. > > Thanks folks! > > Jules > Hi, Transition can be done by using the convertor freely available from; http://vmtoolkit.com/files/default.aspx MS Virtual Server does not support Linux distrubitons apart from RHEL and SuSE, officially. But you can manage to install and run **others** with little more effort. MS provides a package called VMAdditions that contains daemons. One is addressed to time sync issues and it synchronises the time of the guest machine with the host machine's. I managed to work Centos5 and Slackware 10.2 on MS virtual server. CentOS have to be installed in text mode. Bahadir. > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL > JaC9cANGLGL/e4wSZvi2yHk= > =Xy9q > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From shuttlebox at gmail.com Sun Nov 11 22:12:10 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Sun Nov 11 22:12:13 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <625385e30711111412l2af15788tb9feb4ec43f8f70c@mail.gmail.com> On Nov 11, 2007 10:31 PM, Julian Field wrote: > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. If Solaris is OK to run those services on then Zones are very easy to use. Solaris 10 runs well on x86 too nowadays. -- /peter From ms-list at alexb.ch Sun Nov 11 22:19:35 2007 From: ms-list at alexb.ch (Alex Broens) Date: Sun Nov 11 22:19:41 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <47377FF7.5080803@alexb.ch> On 11/11/2007 10:31 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to servers, > dead easy to manage, I already have a VM in MVS that I will need to move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > move, and don't want to have to totally reinstall from scratch if I can > avoid it. Virtuozzo or its GPL version: OpenVZ do the job for me.. Alex From hvdkooij at vanderkooij.org Sun Nov 11 23:02:51 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 11 23:03:18 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <47378A1B.9030605@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian Field wrote: > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( This may depend on the exact config. I use it rather extensively because I have VmWare servers at home and at the hosting center that run on Linux and with my employer where they run on windows. (On account of one or two OS xenofobics the majority is punished in using their least favorite OS.) And I have no issues with the clock. I tend to throw virtual machines around a lot so VmWare is the easiest way to do this for me. > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? If you need performance then Xen wins hands down. Never done the setup myself (yet). But I have some customers who found it the best bang for the buck and they all tried the various solutions. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHN4oZBvzDRVjxmYERAr3YAKCPNrtrkzpW12J2XAkCQWB/YrJ4ywCgjw2R DZQ5yQ7D8TUQv/4V+a2OtdE= =+MW+ -----END PGP SIGNATURE----- From micoots at yahoo.com Sun Nov 11 23:15:18 2007 From: micoots at yahoo.com (Michael Mansour) Date: Sun Nov 11 23:15:21 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value Message-ID: <138491.46399.qm@web33307.mail.mud.yahoo.com> Hi, I get the error in the subject everytime MailScanner restarts. What do I need to look at to fix this? Thanks. Michael. --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/e9e485a6/attachment.html From ian-list at securitypimp.com Mon Nov 12 00:08:22 2007 From: ian-list at securitypimp.com (Ian Lists) Date: Mon Nov 12 00:08:29 2007 Subject: OT: Best virtual machine server? In-Reply-To: <12455761.51194824891788.JavaMail.root@postal.insourcedsecurity.com> Message-ID: <20340225.71194826102822.JavaMail.root@postal.insourcedsecurity.com> I've used Vmware and Xen both at work and personally. Performance is much better in Xen if you can take advantage of para virtulaized guests. If you will be running systems that require full virtulization such as Windows, Xen requires your hardware must have virtualization enabled chips (Intel VT, AMD Pacifica). I've played around a little bit with full virt guests on my laptop, but not on any of my servers since they don't support it. At work I have migrated all Red Hat servers off of VMware and to Xen guests. Not only does it save in licensing costs, but performance is much better, and I can keep my builds nice and small since I don't have any of the dependences for VMWare tools. A nice management gui is lacking from Xen, but virt-manager is getting a lot better. I don't currently run it since I don't like all the gnome dependences on a server and in RHEL, remote management is still in clear text. Fedora 8 shipped a new virt-manager that does support SSH, but I haven't played with it yet. There is also another web based mgt. app that Red Hat is working on called Virt-Factory (http://virt-factory.et.redhat.com/) that looks promising. As for moving your other virtual machines to Xen there is tool being developed by Richard Jones at Red Hat called virt-p2v (http://et.redhat.com/~rjones/virt-p2v/)that works for converting physical machines to virtual machines. I would think it would work to for at least vmware if you booted the guest image to the the p2v ISO instead of the real guest but I have no clue about MS Virtual Server. Regards, Ian ----- "Julian Field" wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. > It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server > environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to > servers, > dead easy to manage, I already have a VM in MVS that I will need to > move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > > needs a lot of text editing, but there also appears to be > "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > > to get up and running, and easy to do everything with the host and the > > guests without physical access to the host hardware, once the host is > setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service > for > someone in a research project that doesn't have (yet) the hardware > they > need, and want to borrow a server for a month or two. So I'm spending > > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > > move, and don't want to have to totally reinstall from scratch if I > can > avoid it. > > Thanks folks! > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration > help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL > JaC9cANGLGL/e4wSZvi2yHk= > =Xy9q > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From rwahyudi at gmail.com Mon Nov 12 00:16:02 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Mon Nov 12 00:14:16 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <47379B42.6080302@gmail.com> Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is setup. > One question: what is the difference between domain0 and the host > physical system? > domain0 = host physical system. We use Xen for all virtualized environment to consolidate old hardware .. so not in a big way .. I find it quite easy to manage, especially if you run same OS on the host and guest. Once guest host is setup, user on the guest machine can do whatever they like in the guest host without affecting domain0. Xen support full virtualization but you need to have CPU that support it ( Intell VT-x / Vanderpool or AMD-V) If you want easy to use GUI, try http://www.enomalism.com. I never use it but their doco stated that they have interface to transform VMWare image to xen image. Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/3e608f74/attachment.html From rwahyudi at gmail.com Mon Nov 12 00:37:06 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Mon Nov 12 00:35:18 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> Message-ID: <4737A032.8090606@gmail.com> > Evening all, been far too long since I have posted (Been stupidly busy > :-( ) > > I would suggest you want to check your Delivery method option at the > bottom MailScanner.conf and make sure it is batch and not queue. > Setting it to queue would invoke this behaviour. Changing the queue > runner settings should not be required. The queue running is called by > Postfix when each process finishes to advise the next to run. The 300 > second delay is merely to catch anything that 'got left behind'. > > Drew > Hi Drew, Bingo !! Changing the Delivery Method from queue to Batch solve the problem !! I remember reading the FAQ and it advice me to use "Delivery Method = queue" for High Volume Mail server. Good thing is .. Someone already went down this path and update the FAQ: http://www.mailscanner.info/faq.shtml#11 Thank you for all your help !! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/000fb9bf/attachment.html From jeremypennington at yahoo.com Mon Nov 12 02:09:32 2007 From: jeremypennington at yahoo.com (Mr jeremy pennington) Date: Mon Nov 12 02:09:35 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Message-ID: <820235.33971.qm@web50107.mail.re2.yahoo.com> I upgraded to MailScanner 4.65.3-1 last night and since then MailScanner has not logged any messages to syslog. MailWatch shows messages are being processed as normal and I have verified they are. So I tried copying log.pm from the prior version installed (which was 4.54.6) to the new version and restarting MailScanner. This time the standard start up messages were recorded to syslog, but no messages were logged about mail being processed, in fact this disabled mail from being processed (it just stayed in the queue). So I reverted back and everything seems to be working again, except no logs from MailScanner are appearing in syslog. Any thoughts? Thanks for your help! Jeremy __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com From markgetz at shentel.net Mon Nov 12 02:14:34 2007 From: markgetz at shentel.net (Mark Getz) Date: Mon Nov 12 02:20:06 2007 Subject: SpamAssassin Rule Actions Message-ID: I'm probably missing something simple but I can't seem to figure it out. Version Info: MailScanner version 4.65.3 Spamassassin version 3.2.3 ----------------------------- High Scoring Spam Actions = forward spam@localhost header "X-Spam-Status: Yes" delete SpamAssassin Rule Actions = SpamScore>25=>delete The High Scoring Spam Actions work fine. Spam >= than my Highspam score are forwarded to the spam mailbox and not delivered to the addressee. It doesn't appear that the SpamAssassin Rule Action is firing because mail with a SpamScore > 25 are still delivered to the Spam mailbox. TIA Mark From roland at inbox4u.de Mon Nov 12 02:31:44 2007 From: roland at inbox4u.de (Ehle, Roland) Date: Mon Nov 12 02:34:24 2007 Subject: AW: SpamAssassin Rule Actions In-Reply-To: References: Message-ID: <4D1CD0994309F84BA83DF998BF0075AF2BC3E9900A@ts-dc2.TS-Webarts.local> Hi Mark, yes you are missing something, you probably did not read the instructions for SpamAssassin Rule Actions :-) # Preceding the action name with "not-" as in "not-deliver" or "not-forward # user@domain.com" will cause the action to be removed from the list of # actions that would normally be taken on this message. So your rule should be: SpamAssassin Rule Actions = SpamScore>25=>not-forward spam@localhost There is no need to put "delete" in here, because this action is already set in High Scoring Spam Actions. Regards, Roland -----Urspr?ngliche Nachricht----- Von: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] Im Auftrag von Mark Getz Gesendet: Montag, 12. November 2007 03:15 An: mailscanner@lists.mailscanner.info Betreff: SpamAssassin Rule Actions I'm probably missing something simple but I can't seem to figure it out. Version Info: MailScanner version 4.65.3 Spamassassin version 3.2.3 ----------------------------- High Scoring Spam Actions = forward spam@localhost header "X-Spam-Status: Yes" delete SpamAssassin Rule Actions = SpamScore>25=>delete The High Scoring Spam Actions work fine. Spam >= than my Highspam score are forwarded to the spam mailbox and not delivered to the addressee. It doesn't appear that the SpamAssassin Rule Action is firing because mail with a SpamScore > 25 are still delivered to the Spam mailbox. TIA Mark -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From david at gnsa.us Mon Nov 12 03:46:07 2007 From: david at gnsa.us (David Nalley) Date: Mon Nov 12 03:46:16 2007 Subject: OT: Best virtual machine server? In-Reply-To: <47379B42.6080302@gmail.com> References: <473774B0.5090700@ecs.soton.ac.uk> <47379B42.6080302@gmail.com> Message-ID: <4737CC7F.3020002@gnsa.us> R Wahyudi wrote: > Xen? >> Never used it, have been reading the RedHat docs on it, looks like it >> needs a lot of text editing, but there also appears to be "virt-manager" >> that does a lot of the hard work for you. I want a system that is easy >> to get up and running, and easy to do everything with the host and the >> guests without physical access to the host hardware, once the host is setup. >> One question: what is the difference between domain0 and the host >> physical system? >> > domain0 = host physical system. > We use Xen for all virtualized environment to consolidate old > hardware .. so not in a big way .. > I find it quite easy to manage, especially if you run same OS on the > host and guest. > Once guest host is setup, user on the guest machine can do whatever > they like in the guest host without affecting domain0. > Xen support full virtualization but you need to have CPU that support > it ( Intell VT-x / Vanderpool or AMD-V) > > If you want easy to use GUI, try http://www.enomalism.com. > I never use it but their doco stated that they have interface to > transform VMWare image to xen image. > > Regards, > Rianto Wahyudi > > Enomalism isn't too bad, but based on talking to the company who developed it, it's about to be much better (they were suggesting, around end of November or December time frame) removing a lot of the unnecessary framework the package had. Currently, I think enomalism only supports a specific version of Xen. From john at langherd.com Mon Nov 12 05:53:05 2007 From: john at langherd.com (John P. Lang) Date: Mon Nov 12 05:53:09 2007 Subject: OT: Best virtual machine server? In-Reply-To: <20340225.71194826102822.JavaMail.root@postal.insourcedsecurity.com> References: <12455761.51194824891788.JavaMail.root@postal.insourcedsecurity.com> <20340225.71194826102822.JavaMail.root@postal.insourcedsecurity.com> Message-ID: <001801c824f0$4bf75330$e3e5f990$@com> I may be just a little bit biased... I've been running Linux (just about any flavor) on MS Virtual Server with no problems at all. The virtual machine additions for Linux really help with performance (SCSI) and the time sync is quite nice. All of my Mail Scanner installations for customers run on virtual machines running on VS. I've also had the opportunity to play with the new Windows hypervisor, which totally rocks. Check out the Windows Server 2008 preview builds. 64bit VM's that run at full speed.... Just my 2c John -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Ian Lists Sent: Sunday, November 11, 2007 4:08 PM To: MailScanner discussion Cc: MailScanner discussion Subject: Re: OT: Best virtual machine server? I've used Vmware and Xen both at work and personally. Performance is much better in Xen if you can take advantage of para virtulaized guests. If you will be running systems that require full virtulization such as Windows, Xen requires your hardware must have virtualization enabled chips (Intel VT, AMD Pacifica). I've played around a little bit with full virt guests on my laptop, but not on any of my servers since they don't support it. At work I have migrated all Red Hat servers off of VMware and to Xen guests. Not only does it save in licensing costs, but performance is much better, and I can keep my builds nice and small since I don't have any of the dependences for VMWare tools. A nice management gui is lacking from Xen, but virt-manager is getting a lot better. I don't currently run it since I don't like all the gnome dependences on a server and in RHEL, remote management is still in clear text. Fedora 8 shipped a new virt-manager that does support SSH, but I haven't played with it yet. There is also another web based mgt. app that Red Hat is working on called Virt-Factory (http://virt-factory.et.redhat.com/) that looks promising. As for moving your other virtual machines to Xen there is tool being developed by Richard Jones at Red Hat called virt-p2v (http://et.redhat.com/~rjones/virt-p2v/)that works for converting physical machines to virtual machines. I would think it would work to for at least vmware if you booted the guest image to the the p2v ISO instead of the real guest but I have no clue about MS Virtual Server. Regards, Ian ----- "Julian Field" wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. > It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server > environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to > servers, > dead easy to manage, I already have a VM in MVS that I will need to > move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > > needs a lot of text editing, but there also appears to be > "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > > to get up and running, and easy to do everything with the host and the > > guests without physical access to the host hardware, once the host is > setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service > for > someone in a research project that doesn't have (yet) the hardware > they > need, and want to borrow a server for a month or two. So I'm spending > > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > > move, and don't want to have to totally reinstall from scratch if I > can > avoid it. > > Thanks folks! > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration > help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHN3SxEfZZRxQVtlQRAvxEAKCmBhhhZSbJJpW5z/J5FBZRtEybaQCgqVcL > JaC9cANGLGL/e4wSZvi2yHk= > =Xy9q > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hvdkooij at vanderkooij.org Mon Nov 12 06:46:01 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 12 06:46:22 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47363BDA.5050202@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> Message-ID: <4737F6A9.1070000@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > Hi, > > I have created an experimental setup with wrapper that should allow one > to install MailScanner through yum for RHEL 5 or Centos 5 if one has > allready added the rpmforge repository. > > I put up the details on http://yum.vanderkooij.org/ It also works for RHEL 4 / Centos 4. I suspected it would but I needed to verify this before I did put it on record. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHN/anBvzDRVjxmYERAoGeAJ40mvkJD+NsZGCiPRs243oJ+mQWhwCfTfkN bnpPHb3Pc2rOlgozJI/5ElY= =PBkG -----END PGP SIGNATURE----- From rwahyudi at gmail.com Mon Nov 12 06:55:36 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Mon Nov 12 06:53:49 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <4737F6A9.1070000@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> <4737F6A9.1070000@vanderkooij.org> Message-ID: <4737F8E8.5040806@gmail.com> I will give it a try on freshly installed Centos. Can you tell me package it install ?? Regards, Rianto Wahyudi Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hugo van der Kooij wrote: > >> Hi, >> >> I have created an experimental setup with wrapper that should allow one >> to install MailScanner through yum for RHEL 5 or Centos 5 if one has >> allready added the rpmforge repository. >> >> I put up the details on http://yum.vanderkooij.org/ >> > > It also works for RHEL 4 / Centos 4. I suspected it would but I needed > to verify this before I did put it on record. > > Hugo. > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHN/anBvzDRVjxmYERAoGeAJ40mvkJD+NsZGCiPRs243oJ+mQWhwCfTfkN > bnpPHb3Pc2rOlgozJI/5ElY= > =PBkG > -----END PGP SIGNATURE----- > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/e127819a/attachment.html From hvdkooij at vanderkooij.org Mon Nov 12 07:11:20 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 12 07:11:48 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <4737F8E8.5040806@gmail.com> References: <47363BDA.5050202@vanderkooij.org> <4737F6A9.1070000@vanderkooij.org> <4737F8E8.5040806@gmail.com> Message-ID: <4737FC98.5000106@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 R Wahyudi wrote: > I will give it a try on freshly installed Centos. > Can you tell me package it install ?? What part of the instructions on the webpage are unclear to you? I was under the impression I covered it all but I might have missed something which I took for granted. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHN/yWBvzDRVjxmYERAnVVAJ4qCXFwONu6FMx5R23PPfrgKIM3ZACffkBf URuozCzp+KN71Cozt0v4je4= =hpIm -----END PGP SIGNATURE----- From shuttlebox at gmail.com Mon Nov 12 08:18:17 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Mon Nov 12 08:18:19 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <820235.33971.qm@web50107.mail.re2.yahoo.com> References: <820235.33971.qm@web50107.mail.re2.yahoo.com> Message-ID: <625385e30711120018l65ecffeenc7e057d11c4984e8@mail.gmail.com> On Nov 12, 2007 3:09 AM, Mr jeremy pennington wrote: > I upgraded to MailScanner 4.65.3-1 last night and since then MailScanner has not logged any messages to syslog. MailWatch shows messages are being processed as normal and I have verified they are. So I tried copying log.pm from the prior version installed (which was 4.54.6) to the new version and restarting MailScanner. This time the standard start up messages were recorded to syslog, but no messages were logged about mail being processed, in fact this disabled mail from being processed (it just stayed in the queue). So I reverted back and everything seems to be working again, except no logs from MailScanner are appearing in syslog. Any thoughts? Look in Log.pm for "setlogsock" and compare the differences between the working version and the new. My guess is that the socket type has changed. You will also find the same settings in the autoupdate scripts for the virus scanners. Also make sure that the syslog daemon listens to remote connections. # netstat -a | grep syslog *.syslog Idle As a Solaris user you might find it handy to check out the Blastwave collection of software, I package MailScanner and it automagically solves all dependencies for you. Clam, SpamAssassin and so on is also available. http://www.blastwave.org/ -- /peter From J.Ede at birchenallhowden.co.uk Mon Nov 12 08:38:57 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Mon Nov 12 08:41:31 2007 Subject: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA34@server02.bhl.local> From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field [MailScanner@ecs.soton.ac.uk] Sent: 11 November 2007 21:31 To: MailScanner discussion Subject: OT: Best virtual machine server? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've been badly bitten by VMWare, so that's out. No discussion there. It can't even keep its clock running to time :-( I've always had that problem with MS virtuals (losing minutes each day and drift too high for ntp to function). So far my VMware one has managed to keep good time. I also have ntpd running on all the virtuals anyway. Its fine as long as its not trying to fight with a time source on the host. From glenn.steen at gmail.com Mon Nov 12 09:59:49 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 12 09:59:53 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <138491.46399.qm@web33307.mail.mud.yahoo.com> References: <138491.46399.qm@web33307.mail.mud.yahoo.com> Message-ID: <223f97700711120159w66cba712m90bfdad4f806ac22@mail.gmail.com> On 12/11/2007, Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > Look at http://www.mailscanner.info/MailScanner.conf.index.html#First%20Check ... Then check your setting for First Check in MailScanner.conf ... and do a "MailScanner --lint"/"MailScanner --changed", of course. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Mon Nov 12 10:06:38 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 12 10:06:51 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <138491.46399.qm@web33307.mail.mud.yahoo.com> References: <138491.46399.qm@web33307.mail.mud.yahoo.com> Message-ID: <473825AE.2080200@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You have put a ruleset in your MailScanner.conf somewhere you are only allowed to put a simple value. Check everywhere you have put a ruleset. You haven't tried to put a ruleset within a ruleset have you? You can't do that. Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 every > week. Download your gamecard now at Yahoo!7 TV > . Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOCWuEfZZRxQVtlQRAqTHAJ9dMR099VlNsQkpKbaqoWU1ilqrMwCeKYOy Z8fc92mRJjIfWPBmrkQmWmk= =LiY7 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From drew.marshall at technologytiger.net Mon Nov 12 10:15:45 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 12 10:16:12 2007 Subject: Postfix vs MailScanner : Slow Incoming Queue In-Reply-To: <4737A032.8090606@gmail.com> References: <4733FFC9.9080403@gmail.com> <223f97700711090058l527f5ddyb9a9c0f2e87f306d@mail.gmail.com> <20071109162310.90D1.GERARD@seibercom.net> <9173fd7e0711091450n2dbb0db3u6348a046ddd74aa8@mail.gmail.com> <92A6C87E-284E-4491-BEB6-DB306FDE4139@technologytiger.net> <4737A032.8090606@gmail.com> Message-ID: <11329.B1VcRQRQCQY=.1194862545.squirrel@www.technologytiger.net> On Mon, November 12, 2007 00:37, R Wahyudi wrote: > >> Evening all, been far too long since I have posted (Been stupidly busy >> :-( ) >> >> I would suggest you want to check your Delivery method option at the >> bottom MailScanner.conf and make sure it is batch and not queue. >> Setting it to queue would invoke this behaviour. Changing the queue >> runner settings should not be required. The queue running is called by >> Postfix when each process finishes to advise the next to run. The 300 >> second delay is merely to catch anything that 'got left behind'. >> >> Drew >> > > Hi Drew, > > Bingo !! > > Changing the Delivery Method from queue to Batch solve the problem !! Excellent! > > I remember reading the FAQ and it advice me to use "Delivery Method = > queue" for High Volume Mail server. > Good thing is .. Someone already went down this path and update the > FAQ: http://www.mailscanner.info/faq.shtml#11 > > Thank you for all your help !! > A pleasure! I am not quite sure of the history behind the two delivery methods. It's been there for so long but I would say (almost?) no one uses queue because of the issues you have experienced. Postfix is very capable of handling high queue?volumes and slow next hops natively so there is little point in making the queue runner do the pick up post MailScanner in a Postfix environment. Perhaps Jules can shed more light on the history of this option? Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From prandal at herefordshire.gov.uk Mon Nov 12 10:20:26 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Mon Nov 12 10:20:37 2007 Subject: $hostname not translated in reports In-Reply-To: <35153.69256.qm@web33312.mail.mud.yahoo.com> References: <35153.69256.qm@web33312.mail.mud.yahoo.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA0217FB23@HC-MBX02.herefordshire.gov.uk> We have the same problem here, latest MailScanner, CentOS 5.0 x64. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: 10 November 2007 05:02 To: mailscanner@lists.mailscanner.info Subject: $hostname not translated in reports Hi, When email reports get emailed to addresses (the "Hostname" variable in MailScanner.conf), I notice that the $hostname is never translated to the actual hostname of the machine that has the quarantined file. I just see: () How can I trouble-shoot this so that I can fix it? ie. where do I need to look to define the $hostname for the reports per MailScanner server I run? Thanks. Michael. ________________________________ National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV . -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/ba6478eb/attachment.html From MailScanner at ecs.soton.ac.uk Mon Nov 12 11:48:20 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 12 11:48:34 2007 Subject: $hostname not translated in reports In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA0217FB23@HC-MBX02.herefordshire.gov.uk> References: <35153.69256.qm@web33312.mail.mud.yahoo.com> <7EF0EE5CB3B263488C8C18823239BEBA0217FB23@HC-MBX02.herefordshire.gov.uk> Message-ID: <47383D84.3080200@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You should be able to use $hostname or $linkhostname Do neither of them work? Randal, Phil wrote: > We have the same problem here, latest MailScanner, CentOS 5.0 x64. > > Cheers, > > Phil > > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > > ------------------------------------------------------------------------ > *From:* mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] *On Behalf Of > *Michael Mansour > *Sent:* 10 November 2007 05:02 > *To:* mailscanner@lists.mailscanner.info > *Subject:* $hostname not translated in reports > > Hi, > > When email reports get emailed to addresses (the "Hostname" > variable in MailScanner.conf), I notice that the $hostname is > never translated to the actual hostname of the machine that has > the quarantined file. > > I just see: > > () > > How can I trouble-shoot this so that I can fix it? ie. where do I > need to look to define the $hostname for the reports per > MailScanner server I run? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 > every week. Download your gamecard now at Yahoo!7 TV > . > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOD2FEfZZRxQVtlQRAiwFAJ4tacFF9BDi83ZVCZEEITNpXDhxHQCgxtIF 3AEFWQmFsvARWsTOT6Fcyag= =mQlK -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hambleto at gmail.com Mon Nov 12 16:32:58 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 16:33:02 2007 Subject: Mailscanner not working after update on Fedora 8 Message-ID: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> I had a functional box running fedora 7 and the latest version of Mailscanner. I updated the box to fedora 8, however mailscanner would no longer run. I redownloaded the installer to be on the safe side. When I get run the installed I get the following errors: Bad exit status from /var/tmp/rpm-tmp.***XXX When I go into the /var/tmp folder the following files are there: perl-Compress-Zlib-1.41-1-root perl-TimeDate-root rpm-tmp.49723 perl-IO-stringy-root perl-Time-HiRes-1.9707-1-root rpm-tmp.54293 perl-MailTools-1.71-1-root rpm-tmp.14136 rpm-tmp.62223 perl-MIME-Base64-root rpm-tmp.23843 rpm-tmp.97352 perl-MIME-tools-root rpm-tmp.37563 rpm-tmp.98354 perl-Test-Harness-2.64-1-root rpm-tmp.45811 rpm-tmp.99634 perl-Test-Simple-0.70-1-root rpm-tmp.47790 When I try and start Mailscanner I get the following error: Can't locate Compress/Zlib.pm in @INC (@INC contains: /usr/lib/MailScanner /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.8/i386-linux-thread-multi /usr/lib/perl5/5.8.8 . /usr/lib/MailScanner) at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. I am hoping I am missing something simple here. Please suggest. Thank you, Ben -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/6e2a6ec2/attachment.html From richard.siddall at elirion.net Mon Nov 12 16:55:27 2007 From: richard.siddall at elirion.net (Richard Siddall) Date: Mon Nov 12 16:57:00 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> Message-ID: <4738857F.2070604@elirion.net> Ben Hambleton wrote: > I had a functional box running fedora 7 and the latest version of > Mailscanner. I updated the box to fedora 8, however mailscanner would no > longer run. I redownloaded the installer to be on the safe side. When I get > run the installed I get the following errors: > Bad exit status from /var/tmp/rpm-tmp.***XXX > Sounds like the install script failed trying to build an RPM of one of the Perl modules, possibly Compress::Zlib. You might be able to get it working by doing yum install perl-Compress-Zlib and then starting MailScanner again. It would help a lot if you posted the build output just before the failure. Then we might be able to tell you why it was failing and how to get around the failure. Regards, Richard Siddall From hambleto at gmail.com Mon Nov 12 17:01:38 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 17:02:18 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4738857F.2070604@elirion.net> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> Message-ID: <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> I did the yum install perl-Compress-Zlib as you suggested. Now when I start Mail scanner I get the following error: MailScanner: is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. As far as the build data. I get that error for each of the modules listed in the /var/tmp folder. On Nov 12, 2007 11:55 AM, Richard Siddall wrote: > Ben Hambleton wrote: > > I had a functional box running fedora 7 and the latest version of > > Mailscanner. I updated the box to fedora 8, however mailscanner would no > > longer run. I redownloaded the installer to be on the safe side. When I > get > > run the installed I get the following errors: > > Bad exit status from /var/tmp/rpm-tmp.***XXX > > > > Sounds like the install script failed trying to build an RPM of one of > the Perl modules, possibly Compress::Zlib. You might be able to get it > working by doing > > yum install perl-Compress-Zlib > > and then starting MailScanner again. > > It would help a lot if you posted the build output just before the > failure. Then we might be able to tell you why it was failing and how > to get around the failure. > > Regards, > > Richard Siddall > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/d4e44dbc/attachment.html From richard.siddall at elirion.net Mon Nov 12 17:17:31 2007 From: richard.siddall at elirion.net (Richard Siddall) Date: Mon Nov 12 17:19:29 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> Message-ID: <47388AAB.6050604@elirion.net> Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall From hambleto at gmail.com Mon Nov 12 17:46:28 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 17:46:32 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <47388AAB.6050604@elirion.net> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> <47388AAB.6050604@elirion.net> Message-ID: <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress-Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall wrote: > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the modules > listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/76c837c8/attachment.html From damon at txmail.marinocrane.com Mon Nov 12 17:55:49 2007 From: damon at txmail.marinocrane.com (Damon Lambooy) Date: Mon Nov 12 17:56:04 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> <47388AAB.6050604@elirion.net> <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> Message-ID: <473893A5.4060902@txmail.marinocrane.com> Ben Hambleton wrote: > Thank you again. Below is what I am getting for each of them. If you > want I could post the entire build log: > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm > line 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at > /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. > BEGIN failed--compilation aborted at > /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > t/utf8hash............ok > > t/weak................Weak references are not implemented in the > version of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% > okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 > extracting debug info from > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < > richard.siddall@elirion.net > wrote: > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the > modules listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/c48bc886/attachment.html From markgetz at shentel.net Mon Nov 12 17:57:10 2007 From: markgetz at shentel.net (Mark Getz) Date: Mon Nov 12 18:04:35 2007 Subject: AW: SpamAssassin Rule Actions References: <4D1CD0994309F84BA83DF998BF0075AF2BC3E9900A@ts-dc2.TS-Webarts.local> Message-ID: > > Hi Mark, > > yes you are missing something, you probably did not read the instructions for SpamAssassin Rule Actions > > # Preceding the action name with "not-" as in "not-deliver" or "not-forward > # user domain.com" will cause the action to be removed from the list of > # actions that would normally be taken on this message. > > So your rule should be: > SpamAssassin Rule Actions = SpamScore>25=>not-forward spam localhost > > There is no need to put "delete" in here, because this action is already set in High Scoring Spam Actions. > > Regards, > Roland > > Roland: Thanks for your reply, I change my SpamAssassin Rule Action as suggested, now it delivers the message to the spam user twice.:(:( Mark From J.Ede at birchenallhowden.co.uk Mon Nov 12 18:16:55 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Mon Nov 12 18:19:18 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net>, <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3A@server02.bhl.local> The perl Scalar-Util module in Fedora install is broken. You need to download the latest version from the website... I get the error occasionally after perl updates itself. wget http://search.cpan.org/CPAN/authors/id/G/GB/GBARR/Scalar-List-Utils-1.19.tar.gz tar xzvf Scalar-List-Utils-1.19.tar.gz cd Scalar-List-Utils-1.19 perl Makefile.PL make test make install Jason ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Ben Hambleton [hambleto@gmail.com] Sent: 12 November 2007 17:01 To: MailScanner discussion Subject: Re: Mailscanner not working after update on Fedora 8 I did the yum install perl-Compress-Zlib as you suggested. Now when I start Mail scanner I get the following error: MailScanner: is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.8/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. As far as the build data. I get that error for each of the modules listed in the /var/tmp folder. On Nov 12, 2007 11:55 AM, Richard Siddall > wrote: Ben Hambleton wrote: > I had a functional box running fedora 7 and the latest version of > Mailscanner. I updated the box to fedora 8, however mailscanner would no > longer run. I redownloaded the installer to be on the safe side. When I get > run the installed I get the following errors: > Bad exit status from /var/tmp/rpm-tmp.***XXX > Sounds like the install script failed trying to build an RPM of one of the Perl modules, possibly Compress::Zlib. You might be able to get it working by doing yum install perl-Compress-Zlib and then starting MailScanner again. It would help a lot if you posted the build output just before the failure. Then we might be able to tell you why it was failing and how to get around the failure. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/4892d44f/attachment.html From hambleto at gmail.com Mon Nov 12 18:26:38 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 18:26:42 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <473893A5.4060902@txmail.marinocrane.com> References: <4dcde730711120832t765e901bsad23211480d3a65f@mail.gmail.com> <4738857F.2070604@elirion.net> <4dcde730711120901s4508a26agf6ef543921b3c226@mail.gmail.com> <47388AAB.6050604@elirion.net> <4dcde730711120946n111931f3ja42001d7a9b7f317@mail.gmail.com> <473893A5.4060902@txmail.marinocrane.com> Message-ID: <4dcde730711121026q5dfcd106oac869c8526ceae53@mail.gmail.com> Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy wrote: > > > Ben Hambleton wrote: > > Thank you again. Below is what I am getting for each of them. If you want > I could post the entire build log: > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- > Zlib-1.41 > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > t/utf8hash............ok > > t/weak................Weak references are not implemented in the version > of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net> > wrote: > > > Ben Hambleton wrote: > > > > > > As far as the build data. I get that error for each of the modules > > listed in > > > the /var/tmp folder. > > > > > > > OK. It sounds like the build script can't build any of the RPMs. > > > > It would help if you'd post the actual error, and a bit of the build > > output just before the error. > > > > Regards, > > > > Richard Siddall > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > > What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/0ca7ee79/attachment-0001.html From uxbod at splatnix.net Mon Nov 12 18:36:17 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 12 18:29:26 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121026q5dfcd106oac869c8526ceae53@mail.gmail.com> Message-ID: <23777869.11011194892577635.JavaMail.root@office.splatnix.net> stop MS and invoke it with --debug to see what it is doing Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" To: "MailScanner discussion" Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > wrote: Ben Hambleton wrote: Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > wrote: Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hambleto at gmail.com Mon Nov 12 18:40:07 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 18:40:11 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <23777869.11011194892577635.JavaMail.root@office.splatnix.net> References: <4dcde730711121026q5dfcd106oac869c8526ceae53@mail.gmail.com> <23777869.11011194892577635.JavaMail.root@office.splatnix.net> Message-ID: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> How would I do that? I normaly just start it using the /etc/init.d/Mailscanner I noticed in the /var/log/maillog I get thefollowing over and over again: Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 bytes, 787 bytes total Nov 12 13:36:30 sendmail[2707]: starting daemon (8.14.1): SMTP Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00 :15:00 Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner version 4.65.3 starting... Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing whitelist Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing blacklist Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache database Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist functionality... It looks like the server keeps starting up over and over. On Nov 12, 2007 1:36 PM, UxBoD wrote: > stop MS and invoke it with --debug to see what it is doing > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Ben Hambleton" > To: "MailScanner discussion" > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > Thank you again! > > I tried what you suggested (and did a yum install of the the files listed > in the /var/tmp). I started mailscanner and it started right up. However, I > am not seeing any mail going through the server. When I do a ps -A I see > alot of: MailScanner . With my luck, I just broke more things... > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > > wrote: > > > > > > Ben Hambleton wrote: > > > > > > Thank you again. Below is what I am getting for each of them. If you want > I could post the entire build log: > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > t/utf8hash............ok > t/weak................Weak references are not implemented in the version > of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time-HiRes-1.9707 > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Simple-0.70-1-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > > wrote: > > > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the modules > listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/a7853414/attachment.html From uxbod at splatnix.net Mon Nov 12 18:52:27 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 12 18:45:37 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> Message-ID: <3527559.11041194893547968.JavaMail.root@office.splatnix.net> /etc/init.d/MailScanner stop MailScanner --debug may need the path but not sure on Fedora, sorry. Are there any error messages in /var/log/maillog ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" To: "MailScanner discussion" Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 How would I do that? I normaly just start it using the /etc/init.d/Mailscanner I noticed in the /var/log/maillog I get thefollowing over and over again: Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 bytes, 787 bytes total Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner version 4.65.3 starting... Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing whitelist Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing blacklist Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache database Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist functionality... It looks like the server keeps starting up over and over. On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: stop MS and invoke it with --debug to see what it is doing Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" < hambleto@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > wrote: Ben Hambleton wrote: Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > wrote: Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hambleto at gmail.com Mon Nov 12 18:58:54 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 18:58:58 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <3527559.11041194893547968.JavaMail.root@office.splatnix.net> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> Message-ID: <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> I found the debug command in the Mailscanner.conf file enabled that and started. I did not recieve any errors. I took a look and it seemed that i did not have any spamassin installed. I installed that (not enabled, just installed) started mailscanner again. Still no inbound mail it seems.. On Nov 12, 2007 1:52 PM, UxBoD wrote: > /etc/init.d/MailScanner stop > MailScanner --debug > > may need the path but not sure on Fedora, sorry. Are there any error > messages in /var/log/maillog ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Ben Hambleton" > To: "MailScanner discussion" > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > How would I do that? I normaly just start it using the > /etc/init.d/Mailscanner > > > I noticed in the /var/log/maillog I get thefollowing over and over again: > > > > Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by > Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 > bytes, 787 bytes total > Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP > Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00 > :15:00 > Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00 > :15:00 > Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner > version 4.65.3 starting... > Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing > whitelist > Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing > blacklist > Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working > directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp > Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache > Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache > database > Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist > functionality... > > > It looks like the server keeps starting up over and over. > > > On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: > > > stop MS and invoke it with --debug to see what it is doing > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > ----- Original Message ----- > From: "Ben Hambleton" < hambleto@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > > Thank you again! > > I tried what you suggested (and did a yum install of the the files listed > in the /var/tmp). I started mailscanner and it started right up. However, I > am not seeing any mail going through the server. When I do a ps -A I see > alot of: MailScanner . With my luck, I just broke more things... > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > > wrote: > > > > > > Ben Hambleton wrote: > > > > > > Thank you again. Below is what I am getting for each of them. If you want > I could post the entire build log: > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Compress-Zlib-1.41-1-root > /usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.21292 (%install) > > > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in concatenation (.) or > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.96343 (%build) > > > > t/utf8hash............ok > t/weak................Weak references are not implemented in the version > of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- HiRes-1.9707 > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.42245 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > > wrote: > > > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the modules > listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the build > output just before the error. > > > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > > > > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/e07e4bba/attachment.html From hambleto at gmail.com Mon Nov 12 19:48:08 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 19:48:13 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> Message-ID: <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> Mail is coming and going finaly. Thank you all so much for your help with this. May I bother you with one more issue? When I look into the maillog file I keep seeing this before each message that is delivered: Virus and Content Scanning: Starting Nov 12 14:46:12 MailScanner[6535]: ERROR: Not supported data format Any idea what this means? Is the virus scanner I am using, clamav, not working? Thank you again, Ben On Nov 12, 2007 1:58 PM, Ben Hambleton wrote: > I found the debug command in the Mailscanner.conf file enabled that and > started. I did not recieve any errors. I took a look and it seemed that i > did not have any spamassin installed. I installed that (not enabled, just > installed) started mailscanner again. Still no inbound mail it seems.. > > > On Nov 12, 2007 1:52 PM, UxBoD wrote: > > > /etc/init.d/MailScanner stop > > MailScanner --debug > > > > may need the path but not sure on Fedora, sorry. Are there any error > > messages in /var/log/maillog ? > > > > Regards, > > > > --[ UxBoD ]-- > > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > > ----- Original Message ----- > > From: "Ben Hambleton" < hambleto@gmail.com> > > To: "MailScanner discussion" > > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London > > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > How would I do that? I normaly just start it using the > > /etc/init.d/Mailscanner > > > > > > I noticed in the /var/log/maillog I get thefollowing over and over > > again: > > > > > > > > Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by > > Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 > > bytes, 787 bytes total > > Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP > > Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): > > queueing@00:15:00 > > Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00:15:00 > > Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner > > version 4.65.3 starting... > > Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing > > whitelist > > Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing > > blacklist > > Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working > > directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp > > Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache > > Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache > > database > > Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist > > functionality... > > > > > > It looks like the server keeps starting up over and over. > > > > > > On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > > > stop MS and invoke it with --debug to see what it is doing > > > > Regards, > > > > --[ UxBoD ]-- > > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > > > > ----- Original Message ----- > > From: "Ben Hambleton" < hambleto@gmail.com > > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > > > > > > > > > Thank you again! > > > > I tried what you suggested (and did a yum install of the the files > > listed in the /var/tmp). I started mailscanner and it started right up. > > However, I am not seeing any mail going through the server. When I do a ps > > -A I see alot of: MailScanner . With my luck, I just broke more > > things... > > > > > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > > > wrote: > > > > > > > > > > > > Ben Hambleton wrote: > > > > > > > > > > > > Thank you again. Below is what I am getting for each of them. If you > > want I could post the entire build log: > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 > > extracting debug info from > > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > > 47 blocks > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl- MailTools-1.71-1-root > > /usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > > > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- > > Zlib-1.41 > > extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > > > > 987 blocks > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8> > > > > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm- tmp.21292 (%install) > > > > > > > > Test returned status 9 (wstat 2304, 0x900) > > t/testUpdate........Use of uninitialized value in concatenation (.) or > > string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line > > 30. > > is only avaliable with the XS version at > > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > > BEGIN failed--compilation aborted at > > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > > Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm > > line 24. > > BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive- > > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > > Compilation failed in require at t/testUpdate.t line 11. > > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > > t/testUpdate........dubious > > Test returned status 9 (wstat 2304, 0x900) > > Failed Test Stat Wstat Total Fail Failed List of Failed > > > > ------------------------------------------------------------------------------- > > t/00.load.t 2 512 2 2 100.00% 1-2 > > t/test.t 9 2304 ?? ?? % ?? > > t/testMemberRead.t 9 2304 ?? ?? % ?? > > t/testTree.t 9 2304 ?? ?? % ?? > > t/testUpdate.t 9 2304 ?? ?? % ?? > > t/testex.t 9 2304 ?? ?? % ?? > > 1 test skipped. > > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. > > make: *** [test_dynamic] Error 9 > > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm- tmp.96343 (%build) > > > > > > > > t/utf8hash............ok > > t/weak................Weak references are not implemented in the version > > of perl at t/weak.t line 28 > > BEGIN failed--compilation aborted at t/weak.t line 33. > > t/weak................dubious > > Test returned status 255 (wstat 65280, 0xff00) > > Failed Test Stat Wstat Total Fail Failed List of Failed > > ------------------------------------------------------------------------------- > > > > t/weak.t 255 65280 ?? ?? % ?? > > 1 test skipped. > > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00%okay. > > make: *** [test_dynamic] Error 255 > > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- > > HiRes-1.9707 > > extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > 180 blocks > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm- tmp.42245 (%install) > > > > > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 > > find: debug: No such file or directory > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C > into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > > Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; > > aborting > > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net> wrote: > > > > > > > > Ben Hambleton wrote: > > > > > > As far as the build data. I get that error for each of the modules > > listed in > > > the /var/tmp folder. > > > > > > > OK. It sounds like the build script can't build any of the RPMs. > > > > It would help if you'd post the actual error, and a bit of the build > > output just before the error. > > > > > > > > Regards, > > > > Richard Siddall > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > -- > > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > > http://www.hambleton.net What I did was reinstall using CPAN > > > > perl -MCPAN -e shell > > > > force install Scalar::Util > > > > then restart MailScanner > > > > All fixed. > > > > Damon > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > > > -- > > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > > http://www.hambleton.net > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner , and is > > believed to be clean. > > -- > > > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > > > -- > > > > > > > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > > > -- > > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > > http://www.hambleton.net > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner , and is > > believed to be clean. > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > > This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/02435fe5/attachment-0001.html From uxbod at splatnix.net Mon Nov 12 20:02:59 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 12 19:56:04 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> Message-ID: <16865280.11101194897779132.JavaMail.root@office.splatnix.net> hmmm, that seems like MS does not understand the data stream from SendMail. Never seen that as on Postfix, sorry. Googled ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" To: "MailScanner discussion" Sent: Monday, November 12, 2007 7:48:08 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Mail is coming and going finaly. Thank you all so much for your help with this. May I bother you with one more issue? When I look into the maillog file I keep seeing this before each message that is delivered: Virus and Content Scanning: Starting Nov 12 14:46:12 MailScanner[6535]: ERROR: Not supported data format Any idea what this means? Is the virus scanner I am using, clamav, not working? Thank you again, Ben On Nov 12, 2007 1:58 PM, Ben Hambleton < hambleto@gmail.com > wrote: I found the debug command in the Mailscanner.conf file enabled that and started. I did not recieve any errors. I took a look and it seemed that i did not have any spamassin installed. I installed that (not enabled, just installed) started mailscanner again. Still no inbound mail it seems.. On Nov 12, 2007 1:52 PM, UxBoD < uxbod@splatnix.net > wrote: /etc/init.d/MailScanner stop MailScanner --debug may need the path but not sure on Fedora, sorry. Are there any error messages in /var/log/maillog ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" < hambleto@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 How would I do that? I normaly just start it using the /etc/init.d/Mailscanner I noticed in the /var/log/maillog I get thefollowing over and over again: Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases rebuilt by Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, longest 10 bytes, 787 bytes total Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): queueing@00:15:00 Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): queueing@00 :15:00 Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus Scanner version 4.65.3 starting... Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the phishing whitelist Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from the phishing blacklist Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results cache Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin cache database Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin auto-whitelist functionality... It looks like the server keeps starting up over and over. On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > wrote: stop MS and invoke it with --debug to see what it is doing Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ben Hambleton" < hambleto@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London Subject: Re: Mailscanner not working after update on Fedora 8 Thank you again! I tried what you suggested (and did a yum install of the the files listed in the /var/tmp). I started mailscanner and it started right up. However, I am not seeing any mail going through the server. When I do a ps -A I see alot of: MailScanner . With my luck, I just broke more things... On Nov 12, 2007 12:55 PM, Damon Lambooy < damon@txmail.marinocrane.com > wrote: Ben Hambleton wrote: Thank you again. Below is what I am getting for each of them. If you want I could post the entire build log: /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-Base64-3.07 extracting debug info from /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 47 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-Base64-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/TimeDate-1.16 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-TimeDate-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MailTools-1.71 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/MIME-tools-5.420 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Compress- Zlib-1.41 extracting debug info from /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so 987 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.21292 (%install) Test returned status 9 (wstat 2304, 0x900) t/testUpdate........Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm line 30. is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. Compilation failed in require at /usr/src/redhat/BUILD/Archive- Zip-1.16/blib/lib/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm line 24. Compilation failed in require at t/testUpdate.t line 11. BEGIN failed--compilation aborted at t/testUpdate.t line 11. t/testUpdate........dubious Test returned status 9 (wstat 2304, 0x900) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/00.load.t 2 512 2 2 100.00% 1-2 t/test.t 9 2304 ?? ?? % ?? t/testMemberRead.t 9 2304 ?? ?? % ?? t/testTree.t 9 2304 ?? ?? % ?? t/testUpdate.t 9 2304 ?? ?? % ?? t/testex.t 9 2304 ?? ?? % ?? 1 test skipped. Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, 0.00% okay. make: *** [test_dynamic] Error 9 error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.96343 (%build) t/utf8hash............ok t/weak................Weak references are not implemented in the version of perl at t/weak.t line 28 BEGIN failed--compilation aborted at t/weak.t line 33. t/weak................dubious Test returned status 255 (wstat 65280, 0xff00) Failed Test Stat Wstat Total Fail Failed List of Failed ------------------------------------------------------------------------------- t/weak.t 255 65280 ?? ?? % ?? 1 test skipped. Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, 100.00% okay. make: *** [test_dynamic] Error 255 error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- HiRes-1.9707 extracting debug info from /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 180 blocks + /usr/lib/rpm/check-buildroot /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Harness-2.64 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) RPM build errors: Bad exit status from /var/tmp/rpm- tmp.42245 (%install) /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Test-Simple-0.70 find: debug: No such file or directory + /usr/lib/rpm/check-buildroot /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) On Nov 12, 2007 12:17 PM, Richard Siddall < richard.siddall@elirion.net > wrote: Ben Hambleton wrote: > > As far as the build data. I get that error for each of the modules listed in > the /var/tmp folder. > OK. It sounds like the build script can't build any of the RPMs. It would help if you'd post the actual error, and a bit of the build output just before the error. Regards, Richard Siddall -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net What I did was reinstall using CPAN perl -MCPAN -e shell force install Scalar::Util then restart MailScanner All fixed. Damon -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Mon Nov 12 20:02:47 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 12 20:03:33 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> <4dcde730711121148p4d47797ahdd41484637eeb7c7@mail.gmail.com> Message-ID: <4738B167.3070206@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Run a MailScanner --lint and check that the virus-scan output from that all looks okay. Post the output and we'll check it for you. Ben Hambleton wrote: > Mail is coming and going finaly. Thank you all so much for your help > with this. > > May I bother you with one more issue? When I look into the maillog > file I keep seeing this before each message that is delivered: > > Virus and Content Scanning: Starting > Nov 12 14:46:12 MailScanner[6535]: ERROR: Not supported data format > > Any idea what this means? Is the virus scanner I am using, clamav, not > working? > Thank you again, > Ben > > On Nov 12, 2007 1:58 PM, Ben Hambleton < hambleto@gmail.com > > wrote: > > I found the debug command in the Mailscanner.conf file enabled > that and started. I did not recieve any errors. I took a look and > it seemed that i did not have any spamassin installed. I installed > that (not enabled, just installed) started mailscanner again. > Still no inbound mail it seems.. > > > > On Nov 12, 2007 1:52 PM, UxBoD > wrote: > > /etc/init.d/MailScanner stop > MailScanner --debug > > may need the path but not sure on Fedora, sorry. Are there > any error messages in /var/log/maillog ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg > --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net > Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > ----- Original Message ----- > From: "Ben Hambleton" < hambleto@gmail.com > > > To: "MailScanner discussion" > > > Sent: Monday, November 12, 2007 6:40:07 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > How would I do that? I normaly just start it using the > /etc/init.d/Mailscanner > > > I noticed in the /var/log/maillog I get thefollowing over and > over again: > > > > Nov 12 13:36:30 sendmail[2699]: alias database /etc/aliases > rebuilt by > Nov 12 13:36:30 sendmail[2699]: /etc/aliases: 79 aliases, > longest 10 bytes, 787 bytes total > Nov 12 13:36:30 sendmail[2707]: starting daemon ( 8.14.1): SMTP > Nov 12 13:36:30 sm-msp-queue[2711]: starting daemon (8.14.1): > queueing@00:15:00 > Nov 12 13:36:30 sendmail[2715]: starting daemon (8.14.1): > queueing@00 :15:00 > Nov 12 13:36:32 MailScanner[2734]: MailScanner E-Mail Virus > Scanner version 4.65.3 starting... > Nov 12 13:36:32 MailScanner[2734]: Read 797 hostnames from the > phishing whitelist > Nov 12 13:36:32 MailScanner[2734]: Read 4516 hostnames from > the phishing blacklist > Nov 12 13:36:32 MailScanner[2734]: SpamAssassin temporary > working directory is > /var/spool/MailScanner/incoming/SpamAssassin-Temp > Nov 12 13:36:32 MailScanner[2734]: Using SpamAssassin results > cache > Nov 12 13:36:32 MailScanner[2734]: Connected to SpamAssassin > cache database > Nov 12 13:36:32 MailScanner[2734]: Enabling SpamAssassin > auto-whitelist functionality... > > > It looks like the server keeps starting up over and over. > > > On Nov 12, 2007 1:36 PM, UxBoD < uxbod@splatnix.net > > wrote: > > > stop MS and invoke it with --debug to see what it is doing > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg > --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net > Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > > ----- Original Message ----- > From: "Ben Hambleton" < hambleto@gmail.com > > > To: "MailScanner discussion" < > mailscanner@lists.mailscanner.info > > > Sent: Monday, November 12, 2007 6:26:38 PM (GMT) Europe/London > Subject: Re: Mailscanner not working after update on Fedora 8 > > > > > > > Thank you again! > > I tried what you suggested (and did a yum install of the the > files listed in the /var/tmp). I started mailscanner and it > started right up. However, I am not seeing any mail going > through the server. When I do a ps -A I see alot of: > MailScanner . With my luck, I just broke more things... > > > > On Nov 12, 2007 12:55 PM, Damon Lambooy < > damon@txmail.marinocrane.com > > wrote: > > > > > > Ben Hambleton wrote: > > > > > > Thank you again. Below is what I am getting for each of them. > If you want I could post the entire build log: > > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-IO-stringy-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.44610 (%install) > > > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/MIME/Base64.pmX' > = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/MIME-Base64-3.07 > extracting debug info from > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so > 47 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-MIME-Base64-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-MIME-Base64-root' in installed files; > aborting > error: Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.29594 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Date/Parse.pm > /usr/lib/perl5/site_perl/5.8.8/Time/Zone.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/TimeDate-1.16 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-TimeDate-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-TimeDate-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-TimeDate-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.69269 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/Mail/Mailer.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/MailTools-1.71 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MailTools-1.71-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- > MailTools-1.71-1-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MailTools-1.71-1-root ' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.67960 (%install) > > > > /usr/lib/perl5/site_perl/5.8.8/MIME/Body.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/MIME-tools-5.420 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: > /var/tmp/perl-MIME-tools-root/usr/lib/perl5/site_perl/5.8.8> > Found '/var/tmp/perl-MIME-tools-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.28048 (%install) > > > > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/Compress- Zlib-1.41 > extracting debug info from > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Compress/Zlib/Zlib.so > > 987 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: > /var/tmp/perl-Compress-Zlib-1.41-1-root/usr/lib/perl5/site_perl/5.8.8> > > Found '/var/tmp/perl- Compress-Zlib-1.41-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.21292 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.21292 (%install) > > > > Test returned status 9 (wstat 2304, 0x900) > t/testUpdate........Use of uninitialized value in > concatenation (.) or string at > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Scalar/Util.pm > line 30. > is only avaliable with the XS version at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9 > BEGIN failed--compilation aborted at > /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9. > Compilation failed in require at > /usr/src/redhat/BUILD/Archive- > Zip-1.16/blib/lib/Archive/Zip.pm line 24. > BEGIN failed--compilation aborted at > /usr/src/redhat/BUILD/Archive-Zip-1.16/blib/lib/Archive/Zip.pm > line 24. > Compilation failed in require at t/testUpdate.t line 11. > BEGIN failed--compilation aborted at t/testUpdate.t line 11. > t/testUpdate........dubious > Test returned status 9 (wstat 2304, 0x900) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > t/00.load.t 2 512 2 2 100.00% 1-2 > t/test.t 9 2304 ?? ?? % ?? > t/testMemberRead.t 9 2304 ?? ?? % ?? > t/testTree.t 9 2304 ?? ?? % ?? > t/testUpdate.t 9 2304 ?? ?? % ?? > t/testex.t 9 2304 ?? ?? % ?? > 1 test skipped. > Failed 6/7 test scripts, 14.29% okay. 2/2 subtests failed, > 0.00% okay. > make: *** [test_dynamic] Error 9 > error: Bad exit status from /var/tmp/rpm-tmp.96343 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.96343 (%build) > > > > t/utf8hash............ok > t/weak................Weak references are not implemented in > the version of perl at t/weak.t line 28 > BEGIN failed--compilation aborted at t/weak.t line 33. > t/weak................dubious > Test returned status 255 (wstat 65280, 0xff00) > Failed Test Stat Wstat Total Fail Failed List of Failed > ------------------------------------------------------------------------------- > > t/weak.t 255 65280 ?? ?? % ?? > 1 test skipped. > Failed 1/32 test scripts, 96.88% okay. 0/2190 subtests failed, > 100.00% okay. > make: *** [test_dynamic] Error 255 > error: Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.3943 (%build) > > > > + '[' '/usr/share/man/man3/Time::HiRes.3pm.gz > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.bs > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Time/HiRes.pmX' = > X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/Time- > HiRes-1.9707 > extracting debug info from > /var/tmp/perl-Time-HiRes-1.9707-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so > 180 blocks > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Time-HiRes-1.9707-1-root > /usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Time-HiRes-1.9707-1-root /usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Time-HiRes-1.9707-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.6740 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Harness/Assert.pm > /usr/lib/perl5/5.8.8/Test/Harness/TAP.pod > /usr/lib/perl5/5.8.8/Test/Harness/Point.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/Test-Harness-2.64 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl- Test-Harness-2.64-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl-Test-Harness-2.64-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.42245 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm- tmp.42245 (%install) > > > > /usr/lib/perl5/5.8.8/Test/Builder/Module.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh > /usr/src/redhat/BUILD/Test-Simple-0.70 > find: debug: No such file or directory > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8/i386-linux-thread-multi/perllocal.pod:C into: /var/tmp/perl-Test-Simple-0.70-1-root/usr/lib/perl5/5.8.8> > Found '/var/tmp/perl- Test-Simple-0.70-1-root' in installed > files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.86151 (%install) > > On Nov 12, 2007 12:17 PM, Richard Siddall < > richard.siddall@elirion.net > > wrote: > > > > Ben Hambleton wrote: > > > > As far as the build data. I get that error for each of the > modules listed in > > the /var/tmp folder. > > > > OK. It sounds like the build script can't build any of the RPMs. > > It would help if you'd post the actual error, and a bit of the > build > output just before the error. > > > > Regards, > > Richard Siddall > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net What I did was reinstall using CPAN > > perl -MCPAN -e shell > > force install Scalar::Util > > then restart MailScanner > > All fixed. > > Damon > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > > > > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > > Ben Hambleton > http://www.hambleton.net > > > > > -- > ++++++++++++++++++++++++++++++++++++++ > Ben Hambleton > http://www.hambleton.net Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHOLFpEfZZRxQVtlQRArNtAKD4zD8yaK2o8WuohsO1RBYDJW8D7QCdFPKn 8AzzbgV1pn03kwotWxdRias= =4+i7 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hvdkooij at vanderkooij.org Mon Nov 12 20:16:39 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 12 20:17:01 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> Message-ID: <4738B4A7.5090601@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ben Hambleton wrote: > I found the debug command in the Mailscanner.conf file enabled that and > started. I did not recieve any errors. I took a look and it seemed that > i did not have any spamassin installed. I installed that (not enabled, > just installed) started mailscanner again. Still no inbound mail it seems.. I can not escape a certain dejavu feeling. I recall Jules having to fix a similar issue where an upgrade had shot a working system to pieces and in the end it seemed to be just an incorrect sendmail config file. So far I have a load of questions. - Is you MTA running? - Which one? - Did MailScanner in fact start it? - Where do your messages end up? - Are they accepted by your system? - what steps can you trace in your logs? And considere that if you have a config backup of the system it might be faster to rebuild one then to struggle like this. Strip down the system to run just the MTA without MailScanner and see it that works if you have not yet got it working. When your MTA is fine then add the next stage back in. Take it steps by step and make notes. I will repeat what I said in that previous thread. Using Fedora on a server is a bad choice. Unfortunatly you are one who again proves my point in this. If you know exactly what you are doing Fedora may work for you but I find time and again people use Fedora when they want a stable system to run for years and get bitten one way or the other. Hugo. PS: Can we try to cut down on the excess lines in the message please? - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOLSiBvzDRVjxmYERAnUaAKCsBWn9svt/WCZErn1k5RrAFqS4eACfWxw3 gbMcT4y8lQGRYAvJc9ZZ+bM= =gpEq -----END PGP SIGNATURE----- From hambleto at gmail.com Mon Nov 12 20:32:19 2007 From: hambleto at gmail.com (Ben Hambleton) Date: Mon Nov 12 20:32:23 2007 Subject: Mailscanner not working after update on Fedora 8 In-Reply-To: <4738B4A7.5090601@vanderkooij.org> References: <4dcde730711121040r70717dc1l4040ece0d39a78c1@mail.gmail.com> <3527559.11041194893547968.JavaMail.root@office.splatnix.net> <4dcde730711121058o1669e21fk98cc1c825bc519e8@mail.gmail.com> <4738B4A7.5090601@vanderkooij.org> Message-ID: <4dcde730711121232m3937a95aldae4ae2324148591@mail.gmail.com> Thank you all again. I figured it out. I never bothered to reconfigure the virus scaner. A couple of kicks in the butt and all seems to be running again. Once again, thank you everyone for all of your help and support. Take care, Ben On Nov 12, 2007 3:16 PM, Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Ben Hambleton wrote: > > I found the debug command in the Mailscanner.conf file enabled that and > > started. I did not recieve any errors. I took a look and it seemed that > > i did not have any spamassin installed. I installed that (not enabled, > > just installed) started mailscanner again. Still no inbound mail it > seems.. > > I can not escape a certain dejavu feeling. I recall Jules having to fix > a similar issue where an upgrade had shot a working system to pieces and > in the end it seemed to be just an incorrect sendmail config file. > > So far I have a load of questions. > - Is you MTA running? > - Which one? > - Did MailScanner in fact start it? > - Where do your messages end up? > - Are they accepted by your system? > - what steps can you trace in your logs? > > And considere that if you have a config backup of the system it might be > faster to rebuild one then to struggle like this. > > Strip down the system to run just the MTA without MailScanner and see it > that works if you have not yet got it working. When your MTA is fine > then add the next stage back in. Take it steps by step and make notes. > > I will repeat what I said in that previous thread. Using Fedora on a > server is a bad choice. Unfortunatly you are one who again proves my > point in this. If you know exactly what you are doing Fedora may work > for you but I find time and again people use Fedora when they want a > stable system to run for years and get bitten one way or the other. > > Hugo. > > PS: Can we try to cut down on the excess lines in the message please? > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHOLSiBvzDRVjxmYERAnUaAKCsBWn9svt/WCZErn1k5RrAFqS4eACfWxw3 > gbMcT4y8lQGRYAvJc9ZZ+bM= > =gpEq > -----END PGP SIGNATURE----- > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- ++++++++++++++++++++++++++++++++++++++ Ben Hambleton http://www.hambleton.net -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071112/6b903741/attachment.html From micoots at yahoo.com Mon Nov 12 21:57:51 2007 From: micoots at yahoo.com (Michael Mansour) Date: Mon Nov 12 21:57:54 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <223f97700711120159w66cba712m90bfdad4f806ac22@mail.gmail.com> Message-ID: <412712.83691.qm@web33310.mail.mud.yahoo.com> Hi Glenn, Glenn Steen wrote: On 12/11/2007, Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > Look at http://www.mailscanner.info/MailScanner.conf.index.html#First%20Check ... Then check your setting for First Check in MailScanner.conf ... and do a "MailScanner --lint"/"MailScanner --changed", of course. Arrgh, I skimmed over the word "cannot" in the ruleset explanation. I've run MailScanner with the ruleset definition for "First Check" for a while now (and have run the --lint many times too) I don't remember the --lint ever picking up this problem? Thanks. Michael. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/65ef9b16/attachment.html From micoots at yahoo.com Mon Nov 12 22:01:42 2007 From: micoots at yahoo.com (Michael Mansour) Date: Mon Nov 12 22:01:45 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <473825AE.2080200@ecs.soton.ac.uk> Message-ID: <190880.51485.qm@web33302.mail.mud.yahoo.com> Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You have put a ruleset in your MailScanner.conf somewhere you are only allowed to put a simple value. Check everywhere you have put a ruleset. You haven't tried to put a ruleset within a ruleset have you? You can't do that. Thanks for your reply, with the help of Glenn I checked the "First Check" option and did have a ruleset there. I just fixed it. It's odd though I don't remember seeing any problems with linting because of that. Should MailScanner --lint have picked this config problem up? Michael. Michael Mansour wrote: > Hi, > > I get the error in the subject everytime MailScanner restarts. > > What do I need to look at to fix this? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 every > week. Download your gamecard now at Yahoo!7 TV > . Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOCWuEfZZRxQVtlQRAqTHAJ9dMR099VlNsQkpKbaqoWU1ilqrMwCeKYOy Z8fc92mRJjIfWPBmrkQmWmk= =LiY7 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/46740d28/attachment.html From micoots at yahoo.com Mon Nov 12 22:09:00 2007 From: micoots at yahoo.com (Michael Mansour) Date: Mon Nov 12 22:09:03 2007 Subject: $hostname not translated in reports In-Reply-To: <47383D84.3080200@ecs.soton.ac.uk> Message-ID: <399581.9252.qm@web33305.mail.mud.yahoo.com> Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You should be able to use $hostname or $linkhostname Do neither of them work? I have just changed all references of $hostname to $linkhostname in the reports and will test this shortly. I also use the latest MailScanner and SL4.5 (RHEL4U5), have been using MailScanner for years while this $hostname has never worked. This hasn't ever bothered me until I started customising reports for different people. I'll let you know how it goes. Thanks. Michael. Randal, Phil wrote: > We have the same problem here, latest MailScanner, CentOS 5.0 x64. > > Cheers, > > Phil > > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > > ------------------------------------------------------------------------ > *From:* mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] *On Behalf Of > *Michael Mansour > *Sent:* 10 November 2007 05:02 > *To:* mailscanner@lists.mailscanner.info > *Subject:* $hostname not translated in reports > > Hi, > > When email reports get emailed to addresses (the "Hostname" > variable in MailScanner.conf), I notice that the $hostname is > never translated to the actual hostname of the machine that has > the quarantined file. > > I just see: > > () > > How can I trouble-shoot this so that I can fix it? ie. where do I > need to look to define the $hostname for the reports per > MailScanner server I run? > > Thanks. > > Michael. > > ------------------------------------------------------------------------ > National Bingo Night. Play along for the chance to win $10,000 > every week. Download your gamecard now at Yahoo!7 TV > . > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHOD2FEfZZRxQVtlQRAiwFAJ4tacFF9BDi83ZVCZEEITNpXDhxHQCgxtIF 3AEFWQmFsvARWsTOT6Fcyag= =mQlK -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- National Bingo Night. Play along for the chance to win $10,000 every week. Download your gamecard now at Yahoo!7 TV. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/31bd4661/attachment.html From jan-peter at koopmann.eu Mon Nov 12 23:36:48 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Mon Nov 12 23:35:31 2007 Subject: OT: Best virtual machine server? References: <473774B0.5090700@ecs.soton.ac.uk> <47378A1B.9030605@vanderkooij.org> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> > If you need performance then Xen wins hands down. Never done the setup > myself (yet). But I have some customers who found it the best bang for > the buck and they all tried the various solutions. I could not agree more. We just migrated our entire server farm to Virtual Iron (http://www.virtualiron.com). Take a look at it. Their management solution simply rocks. Their XEN performance is outstanding. If you are ok with just one server and local discs, their single server edition will do and this one happens to be free. Give it a shot. You do need Intel or AMD VT hardware though! Regards, JP From jeremypennington at yahoo.com Tue Nov 13 02:15:00 2007 From: jeremypennington at yahoo.com (Mr jeremy pennington) Date: Tue Nov 13 02:15:03 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Message-ID: <707521.14340.qm@web50108.mail.re2.yahoo.com> ----- Original Message ---- From: shuttlebox To: MailScanner discussion Sent: Monday, November 12, 2007 2:18:17 AM Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 On Nov 12, 2007 3:09 AM, Mr jeremy pennington wrote: > I upgraded to MailScanner 4.65.3-1 last night and since then MailScanner has not logged any messages to syslog. MailWatch shows messages are being processed as normal and I have verified they are. So I tried copying log.pm from the prior version installed (which was 4.54.6) to the new version and restarting MailScanner. This time the standard start up messages were recorded to syslog, but no messages were logged about mail being processed, in fact this disabled mail from being processed (it just stayed in the queue). So I reverted back and everything seems to be working again, except no logs from MailScanner are appearing in syslog. Any thoughts? Look in Log.pm for "setlogsock" and compare the differences between the working version and the new. My guess is that the socket type has changed. You will also find the same settings in the autoupdate scripts for the virus scanners. Also make sure that the syslog daemon listens to remote connections. # netstat -a | grep syslog *.syslog Idle As a Solaris user you might find it handy to check out the Blastwave collection of software, I package MailScanner and it automagically solves all dependencies for you. Clam, SpamAssassin and so on is also available. http://www.blastwave.org/ -- /peter -- Thanks Peter! Running netstat gives me the following: # netstat -a | grep syslog mail.32791 mail.syslog Connected mail.43133 mail.syslog Connected localhost.60230 localhost.syslog Connected localhost.60231 localhost.syslog Connected localhost.60258 localhost.syslog Connected localhost.60260 localhost.syslog Connected Comparing the the two Log.pm, there is some differences for "setlogsock". I tried several different changes, but was not able to get anything to work. Any other thoughts? Thanks for the info on blastware, I'll take a look at it. Jeremy ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs From r.berber at computer.org Tue Nov 13 05:14:49 2007 From: r.berber at computer.org (=?ISO-8859-1?Q?Ren=E9_Berber?=) Date: Tue Nov 13 05:15:11 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <707521.14340.qm@web50108.mail.re2.yahoo.com> References: <707521.14340.qm@web50108.mail.re2.yahoo.com> Message-ID: Mr jeremy pennington wrote: > Comparing the the two Log.pm, there is some differences for > "setlogsock". I tried several different changes, but was not able to > get anything to work. Any other thoughts? That's exactly what you have to modify, Log.pm: Line 71: Sys::Syslog::setlogsock('native'); If it doesn't work, you may have to update perl's Sys::Syslog (an old version didn't work at all on Solaris). -- Ren? Berber From ram at netcore.co.in Tue Nov 13 07:14:01 2007 From: ram at netcore.co.in (ram) Date: Tue Nov 13 07:14:19 2007 Subject: Strip attachments and send the mail Message-ID: <1194938041.17009.42.camel@localhost.localdomain> I use postfix + MailScanner , For some users I want to strip specific attachments and send the mail body with a line that attachments are stripped Is this possible Thanks Ram From glenn.steen at gmail.com Tue Nov 13 08:06:59 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 13 08:07:07 2007 Subject: Value of firstcheck cannot be a ruleset, only a simple value In-Reply-To: <190880.51485.qm@web33302.mail.mud.yahoo.com> References: <473825AE.2080200@ecs.soton.ac.uk> <190880.51485.qm@web33302.mail.mud.yahoo.com> Message-ID: <223f97700711130006if1e5810xbb9a3120264e7d94@mail.gmail.com> On 12/11/2007, Michael Mansour wrote: > Hi Julian, > > Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > You have put a ruleset in your MailScanner.conf somewhere you are only > allowed to put a simple value. Check everywhere you have put a ruleset. > You haven't tried to put a ruleset within a ruleset have you? You can't > do that. > Thanks for your reply, with the help of Glenn I checked the "First Check" > option and did have a ruleset there. I just fixed it. > > It's odd though I don't remember seeing any problems with linting because of > that. Should MailScanner --lint have picked this config problem up? > It might not, but.... Since "linting" is all about syntax checking (IMO), I think it should. How about it Jules? Does it, should it, will it?:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From gborders at balanceconsult.com Tue Nov 13 14:15:03 2007 From: gborders at balanceconsult.com (Greg Borders) Date: Tue Nov 13 14:18:27 2007 Subject: Mailscanner filename check and report In-Reply-To: <8F2A53954C22554EB75D9643FCCE0C6B05A5F864@MED-CORE03-MS1.med.wayne.edu> References: <4730362E.4040606@filmakademie.de><473112BD.50100@vanderkooij.org><00bf01c82212$9c850c60$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0D9E@HC-MBX02.herefordshire.gov.uk><00cb01c8221e$cbfbf6f0$2301a8c0@dbdomain.database.it><7EF0EE5CB3B263488C8C18823239BEBA01FD0DAC@HC-MBX02.herefordshire.gov.uk> <00d101c82221$8cac0cd0$2301a8c0@dbdomain.database.it><8F2A53954C22554EB75D9643FCCE0C6B05A5F85D@MED-CORE03-MS1.med.wayne.edu> <4735D9C8.2010301@ecs.soton.ac.uk> <8F2A53954C22554EB75D9643FCCE0C6B05A5F864@MED-CORE03-MS1.med.wayne.edu> Message-ID: <4739B167.8040401@balanceconsult.com> > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian > Field > Sent: Saturday, November 10, 2007 11:18 AM > To: MailScanner discussion > Subject: Re: Mailscanner filename check and report > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I would be very interested if someone can give me a reproducible example > of when it goes wrong. Before I get that, there's unfortunately very > little I can do about this problem, sorry. > > Rose, Bobby wrote: > >> >> I've been using MailScanner for years and I seen this issue a couple >> times before but just assumed it was a user mistake. I've seen >> sender.filename.report sends back a message with the wrong $filename >> string. What is sends back is a random string of characters. >> >> The message says >> >> One or more of the attachments (VAmRh3qo9P) are on the list of >> unacceptable attachments for this site and will not have been >> > delivered. > >> Consider renaming the files to avoid this constraint. >> >> The virus detector said this about the message: >> Report: Report: Attempt to hide real filename extension (VAmRh3qo9P) >> >> But in the maillogs, it has the real filename >> >> I'm not sure of the conditions that lead to this because it doesn't >> always happen and if I test myself, the sender.filename.report message >> > > >> is correct. Anyone else seen this before? >> >> -=B >> >> >> > > Jules > > - -- > Julian Field MEng CITP contents RHO Flip Education.lg.10.31.20071.ppt.doc Dr_Vay_shopcart.aspx.htm It might have something to do with the fact that the file names have multiple "." periods within the filename. MailScanner's test might think that they are trying to hide a file behind a second extension. Especially bad for those with Windows with the view known extensions off. An old virus trick was to call a file somthing like " mycutethingclickme.doc.exe" And the poor user would only see the "mycutethingclickme.doc". I think Jule's test might be warning of that. Check and see if all the files that are getting held back are multi-dotted. The two you reported certianly are. Greg. Borders Sysadmin "at large" -- This email message and any document accompanying it may contain information intended only for the person(s) named. Any use, distribution, copying or disclosure by another person is strictly prohibited. NOTICE TO PERSONS SUBJECT TO UNITED STATES TAXATION: DISCLOSURE UNDER TREASURY CIRCULAR 230: Any tax advice included in this written or electronic communication was not intended or written to be used, and it cannot be used by the taxpayer, for the purpose of avoiding any penalties that may be imposed on the taxpayer by any governmental taxing authority or agency. This written or electronic communication does not represent legal advice. Persons in need of a legal opinion should seek competent counsel. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071113/682f0fa3/attachment.html From mailscanner at yeticomputers.com Tue Nov 13 17:27:10 2007 From: mailscanner at yeticomputers.com (Rick Chadderdon) Date: Tue Nov 13 17:27:40 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: <4739DE6E.1090009@yeticomputers.com> Since I haven't seen it mentioned yet, I'll throw in a vote for VirtualBox (http://www.virtualbox.org/). I use VMWare Server on several machines, but gave this thing a try on my Ubuntu Gutsy workstation 'cause VMWare was broken on Gutsy and I didn't feel like fiddling with all of the patches I'd found to fix the problem. Plus, it gave me an opportunity to play with something different. I always like that. :) Installation was easy, and migrating a Windows XP and an Arch Linux virtual machine worked well. Virtualbox read the vmdks without a need for conversion, although I did convert them later to get full functionality (I love snapshots). The Windows XP guest did need a repair install in order to detect the new virtual hardware, but it ran great after than. Arch just worked. Networking can be a bit tricky if you need more than NAT, but it only took about an hour to get it working, including getting shorewall working with a bridged interface, so I'm sure it's nothing you can't handle. :) Rick Julian Field wrote: > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( > > I've used Parallels quite a bit, but not suited to a server environment, > it's a workstation tool. > > I've used Microsoft Virtual Server quite a bit, well suited to servers, > dead easy to manage, I already have a VM in MVS that I will need to move > to the new physical system. We get it free (as in beer). Big > restriction: only supports 32-bit guests, no 64-bit guests at all :-( > > Xen? > Never used it, have been reading the RedHat docs on it, looks like it > needs a lot of text editing, but there also appears to be "virt-manager" > that does a lot of the hard work for you. I want a system that is easy > to get up and running, and easy to do everything with the host and the > guests without physical access to the host hardware, once the host is > setup. > One question: what is the difference between domain0 and the host > physical system? > > Any others I should be seriously considering? > > Basically what I'm doing is this: I am often asked to run a service for > someone in a research project that doesn't have (yet) the hardware they > need, and want to borrow a server for a month or two. So I'm spending > some of my toy budget on a cheap 1U Dell server to do this in an > organised way. > > So I'm looking for your thoughts and advice, as I know some of you use > virtualisation in quite a big way. > > How can I move a Microsoft Virtual Server guest machine to the new > server setup? And the same from a VMWare guest? I've two I have got to > move, and don't want to have to totally reinstall from scratch if I can > avoid it. > > Thanks folks! > > Jules > From dudi at kolcore.com Tue Nov 13 18:40:53 2007 From: dudi at kolcore.com (Dudi Goldenberg) Date: Tue Nov 13 18:39:10 2007 Subject: Bypassing authenticated users Message-ID: <858B5F3269A8F147AD4A615A91327FEA1228A3@prince.kolcore.local> Hello list, I'm running MS v4.62.9 on a BlueQuartz server (that's Centos 4.5 final, modified for BQ). Is there a way to have MS bypass outgoing mail SPAM checks for authenticated users? This should cover SASL, TLS, POP before SMTP etc. Regards, Dudi Goldenberg CTO Kolcore Ltd. No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.30/1127 - Release Date: 11/12/2007 21:19 From MailScanner at ecs.soton.ac.uk Tue Nov 13 19:27:05 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 13 19:27:19 2007 Subject: OT: Best virtual machine server? In-Reply-To: <5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> References: <473774B0.5090700@ecs.soton.ac.uk> <47378A1B.9030605@vanderkooij.org> <5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> Message-ID: <4739FA89.5070905@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How do I backup a virtualiron system? I want to just do a dump to a USB hard disk; it's not perfect but better than nothing and this is just for my own use, it's not a full production-grade system. Koopmann, Jan-Peter wrote: >> If you need performance then Xen wins hands down. Never done the setup >> myself (yet). But I have some customers who found it the best bang for >> the buck and they all tried the various solutions. >> > > I could not agree more. We just migrated our entire server farm to > Virtual Iron (http://www.virtualiron.com). Take a look at it. Their > management solution simply rocks. Their XEN performance is outstanding. > If you are ok with just one server and local discs, their single server > edition will do and this one happens to be free. Give it a shot. You do > need Intel or AMD VT hardware though! > > Regards, > JP > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHOfqLEfZZRxQVtlQRAo6uAJ9F7FdInEo98ufC4tuMtkm3DhIFuQCgzYvF jAITNsKDk0QOS/M1WsTh5+4= =tO+H -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jan-peter at koopmann.eu Tue Nov 13 19:49:23 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Tue Nov 13 19:48:03 2007 Subject: OT: Best virtual machine server? References: <473774B0.5090700@ecs.soton.ac.uk> <47378A1B.9030605@vanderkooij.org><5F9EB2B0731E5B4D88FC20780DFD1610E03F@DE-SEXB01RZ.intern.seceidos.de> <4739FA89.5070905@ecs.soton.ac.uk> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD1610E0B1@DE-SEXB01RZ.intern.seceidos.de> > How do I backup a virtualiron system? I want to just do a dump to a USB > hard disk; it's not perfect but better than nothing and this is just > for > my own use, it's not a full production-grade system. If you use their logical or virtual disks you can export the disks to .vhd files on an external USB drive if you want. This won't work with FC/iSCSI disks but if I understand you correctly, this is not the case here anyways... From ssilva at sgvwater.com Tue Nov 13 21:02:51 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 13 21:03:13 2007 Subject: Bypassing authenticated users In-Reply-To: <858B5F3269A8F147AD4A615A91327FEA1228A3@prince.kolcore.local> References: <858B5F3269A8F147AD4A615A91327FEA1228A3@prince.kolcore.local> Message-ID: on 11/13/2007 10:40 AM Dudi Goldenberg spake the following: > Hello list, > > I'm running MS v4.62.9 on a BlueQuartz server (that's Centos 4.5 final, modified for BQ). > > Is there a way to have MS bypass outgoing mail SPAM checks for authenticated users? > > This should cover SASL, TLS, POP before SMTP etc. > > Regards, > > Dudi Goldenberg > CTO > Kolcore Ltd. > > > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.5.503 / Virus Database: 269.15.30/1127 - Release Date: 11/12/2007 21:19 > > You set the auth'd users to use a different port like 587 (submission port) and have another queue runner on that port. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ugob at lubik.ca Tue Nov 13 21:05:11 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Tue Nov 13 21:05:38 2007 Subject: OT: Best virtual machine server? In-Reply-To: <47377FF7.5080803@alexb.ch> References: <473774B0.5090700@ecs.soton.ac.uk> <47377FF7.5080803@alexb.ch> Message-ID: Alex Broens wrote: > On 11/11/2007 10:31 PM, Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I've been badly bitten by VMWare, so that's out. No discussion there. >> It can't even keep its clock running to time :-( >> >> I've used Parallels quite a bit, but not suited to a server >> environment, it's a workstation tool. >> >> I've used Microsoft Virtual Server quite a bit, well suited to >> servers, dead easy to manage, I already have a VM in MVS that I will >> need to move to the new physical system. We get it free (as in beer). >> Big restriction: only supports 32-bit guests, no 64-bit guests at all :-( >> >> Xen? >> Never used it, have been reading the RedHat docs on it, looks like it >> needs a lot of text editing, but there also appears to be >> "virt-manager" that does a lot of the hard work for you. I want a >> system that is easy to get up and running, and easy to do everything >> with the host and the guests without physical access to the host >> hardware, once the host is setup. >> One question: what is the difference between domain0 and the host >> physical system? >> >> Any others I should be seriously considering? >> >> Basically what I'm doing is this: I am often asked to run a service >> for someone in a research project that doesn't have (yet) the hardware >> they need, and want to borrow a server for a month or two. So I'm >> spending some of my toy budget on a cheap 1U Dell server to do this in >> an organised way. >> >> So I'm looking for your thoughts and advice, as I know some of you use >> virtualisation in quite a big way. > > Virtuozzo or its GPL version: OpenVZ do the job for me.. Same for me, but they don't allow to run all OS. However, performance-wise, it rocks! Ugo From dudi at kolcore.com Tue Nov 13 21:34:05 2007 From: dudi at kolcore.com (Dudi Goldenberg) Date: Tue Nov 13 21:32:25 2007 Subject: Bypassing authenticated users Message-ID: <858B5F3269A8F147AD4A615A91327FEA1228A5@prince.kolcore.local> >You set the auth'd users to use a different port like 587 (submission port) >and have another queue runner on that port. Good idea, off to work. Regards, Dudi No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.503 / Virus Database: 269.15.30/1127 - Release Date: 11/12/2007 21:19 From hvdkooij at vanderkooij.org Tue Nov 13 21:46:25 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Tue Nov 13 21:46:43 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47363BDA.5050202@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> Message-ID: <473A1B31.1030506@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > If anyone is willing to give it a spin. Please do so, so we can work out > anything I might have overlooked. Would everyone that will test it be kind enough to send a small progres report to me? Wether it is a "Done that and there is a large crater where my computer used to be." or "Done that and I went to the pub after 5 minutes to celebrate." or anything in between. Obviously I prefer the "went to the pub" sort of messages but the other ones may be usefull to improve upon the concept. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOhswBvzDRVjxmYERAr1iAKC2j7gJ7lJm/jd6RgHViEU+kDYvGQCgtWvi HOwFAoUgOKfzNMnwL7SRZTc= =ASVL -----END PGP SIGNATURE----- From eclipsem at optusnet.com.au Wed Nov 14 00:14:52 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 00:14:59 2007 Subject: scanning rules Message-ID: <200711140014.lAE0EqDH010690@mail09.syd.optusnet.com.au> Hello, I would like to have something clarified about scan rules. # If this is set to yes, then email messages passing through MailScanner # will be processed and checked, and all the other options in this file # will be used to control what checks are made on the message. # If this is set to no, then email messages will NOT be processed or # checked *at all*, and so any viruses or other problems will be ignored Scan Messages = /opt/MailScanner/etc/rules/scan.rules This file contains - From: 127.0.0.1 no From: 10.0.1.6 no FromOrTo: default yes These are the IP's of the local server, now I have a script that generates emails upon email to sales department, to other sales reps, it is a new generated message, not forwarded as it contains some SQL content. The thing is MailScanner still wants to scan the message when its submitted. I also have these IP's in - Information Header = /opt/MailScanner/etc/rules/header.rules (in case we take them out of all scanning rules at later date) Could this settings be countermanding the "no scan" rules? Also we strip out some Exchange headers in MailScanner using "Remove These Headers" this works very well, except we turned off Spam Checks, for a bit trying to debug the above problem , and we noticed that MailScanner stopped removing that header but yes all the other scan rules were still active? TIA Edward From glenn.steen at gmail.com Wed Nov 14 08:24:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 14 08:24:38 2007 Subject: scanning rules In-Reply-To: <200711140014.lAE0EqDH010690@mail09.syd.optusnet.com.au> References: <200711140014.lAE0EqDH010690@mail09.syd.optusnet.com.au> Message-ID: <223f97700711140024y44533480hb41e90e2269ee04f@mail.gmail.com> On 14/11/2007, eclipsem@optusnet.com.au wrote: > > Hello, > > I would like to have something clarified about scan rules. > > # If this is set to yes, then email messages passing through MailScanner > # will be processed and checked, and all the other options in this file > # will be used to control what checks are made on the message. > # If this is set to no, then email messages will NOT be processed or > # checked *at all*, and so any viruses or other problems will be ignored > Scan Messages = /opt/MailScanner/etc/rules/scan.rules > > This file contains - > > From: 127.0.0.1 no > From: 10.0.1.6 no > FromOrTo: default yes > > These are the IP's of the local server, now I have a script that generates emails upon email to sales department, to other sales reps, it is a new generated message, not forwarded as it contains some SQL content. The thing is MailScanner still wants to scan the message when its submitted. > > I also have these IP's in - > Information Header = /opt/MailScanner/etc/rules/header.rules (in case we take them out of all scanning rules at later date) > > Could this settings be countermanding the "no scan" rules? > > Also we strip out some Exchange headers in MailScanner using "Remove These Headers" this works very well, except we turned off Spam Checks, for a bit trying to debug the above problem , and we noticed > that MailScanner stopped removing that header but yes all the other scan rules were still active? > > TIA > Edward It should function exactly as it says "on the tin".... Could we see some example log entries (all relevant entries, from connect to the MTA, through MS and on to final delivery), and perhaps an example message (with headers) as well? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From rob at kettle.org.uk Wed Nov 14 14:31:34 2007 From: rob at kettle.org.uk (Rob Kettle) Date: Wed Nov 14 14:31:43 2007 Subject: Mailscanner MCP Problem In-Reply-To: <46A60373.3020309@ecs.soton.ac.uk> References: <46A60120.9000901@kettle.org.uk> <46A60373.3020309@ecs.soton.ac.uk> Message-ID: <473B06C6.7020105@kettle.org.uk> Hi, apologies if this should have been directed elsewhere... I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail and clamd). All is OK when the incominmg message is not matched by MCP rules. If the message is MCP matched and the rule is 'deliver' (without quotes) then the message seems to disappears into a back hole. This seems irrespective of whether it matches any spam or virus rules in subsequent checks (MCP is first check). If I have a mailscanner (Mail archiving and monitoring) rule setup for a user that says to deliver locally (the default) and forward to an external address the deliver disappears into a black hole but the forward to external address part works. any help or pointers would be appreciated. Regards Rob Kettle -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Wed Nov 14 14:46:24 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 14 14:38:07 2007 Subject: Mailscanner MCP Problem In-Reply-To: <473B06C6.7020105@kettle.org.uk> Message-ID: <9417424.13181195051584591.JavaMail.root@office.splatnix.net> Rob, what appears in the maillog file ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Rob Kettle" To: mailscanner@lists.mailscanner.info Sent: Wednesday, November 14, 2007 2:31:34 PM (GMT) Europe/London Subject: Mailscanner MCP Problem Hi, apologies if this should have been directed elsewhere... I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail and clamd). All is OK when the incominmg message is not matched by MCP rules. If the message is MCP matched and the rule is 'deliver' (without quotes) then the message seems to disappears into a back hole. This seems irrespective of whether it matches any spam or virus rules in subsequent checks (MCP is first check). If I have a mailscanner (Mail archiving and monitoring) rule setup for a user that says to deliver locally (the default) and forward to an external address the deliver disappears into a black hole but the forward to external address part works. any help or pointers would be appreciated. Regards Rob Kettle -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From rob at kettle.org.uk Wed Nov 14 15:05:35 2007 From: rob at kettle.org.uk (Rob Kettle) Date: Wed Nov 14 15:05:47 2007 Subject: Mailscanner MCP Problem In-Reply-To: <9417424.13181195051584591.JavaMail.root@office.splatnix.net> References: <9417424.13181195051584591.JavaMail.root@office.splatnix.net> Message-ID: <473B0EBF.5030009@kettle.org.uk> UxBoD wrote: > Rob, > > what appears in the maillog file ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Rob Kettle" > To: mailscanner@lists.mailscanner.info > Sent: Wednesday, November 14, 2007 2:31:34 PM (GMT) Europe/London > Subject: Mailscanner MCP Problem > > Hi, > > apologies if this should have been directed elsewhere... > > I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail > and clamd). > > All is OK when the incominmg message is not matched by MCP rules. > > If the message is MCP matched and the rule is 'deliver' (without quotes) > then the message seems to disappears into a back hole. This seems > irrespective of whether it matches any spam or virus rules in subsequent > checks (MCP is first check). If I have a mailscanner (Mail archiving and > monitoring) rule setup for a user that says to deliver locally (the > default) and forward to an external address the deliver disappears into > a black hole but the forward to external address part works. > > any help or pointers would be appreciated. > > Regards > Rob Kettle > > > Hi, here's an extract: Nov 14 14:51:30 uranus MailScanner[15629]: New Batch: Scanning 1 messages, 1994 bytes Nov 14 14:51:30 uranus MailScanner[15629]: MCP Checks: Starting Nov 14 14:51:30 uranus MailScanner[15629]: Message lAEEpSJC015673 from xxx.xxx.xxx.xxx (xxx@xxx.com) to xxx.xxx.xxx is MCP, MCP-Checker (score=5, required 2, RULE3 5.00) Nov 14 14:51:30 uranus MailScanner[15629]: MCP Checks: Found 1 MCP messages Nov 14 14:51:30 uranus MailScanner[15629]: MCP Actions: message lAEEpSJC015673 actions are store Nov 14 14:51:30 uranus MailScanner[15629]: MCP Checks completed at 13421 bytes per second Nov 14 14:51:30 uranus MailScanner[15629]: Spam Checks: Starting Nov 14 14:51:35 uranus MailScanner[15629]: Message lAEEpSJC015673 from xxx.xxx.xxx.xxx (xxx@xxx.com) to xxx.xxx.xxx is not spam, SpamAssassin (score=0.119, required 4, autolearn=not spam, AWL 0.12) Nov 14 14:51:35 uranus MailScanner[15629]: Spam Checks completed at 411 bytes per second Nov 14 14:51:35 uranus MailScanner[15629]: Virus and Content Scanning: Starting Nov 14 14:51:35 uranus clamd[2635]: /var/spool/MailScanner/incoming/15629/lAEEpSJC015673.header: OK Nov 14 14:51:35 uranus MailScanner[15629]: Virus Scanning completed at 29086 bytes per second Nov 14 14:51:35 uranus MailScanner[15629]: Batch completed at 392 bytes per second (1994 / 5) Nov 14 14:51:35 uranus MailScanner[15629]: Batch (1 message) processed in 5.07 seconds thanks Rob -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From arto.saraniva at artio.net Wed Nov 14 16:12:31 2007 From: arto.saraniva at artio.net (Arto) Date: Wed Nov 14 16:16:04 2007 Subject: OT: Best virtual machine server? In-Reply-To: <473774B0.5090700@ecs.soton.ac.uk> References: <473774B0.5090700@ecs.soton.ac.uk> Message-ID: Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( I am not sure if this has been yet mentioned, but: clock=pit -arto From edward.prendergast at netring.co.uk Wed Nov 14 16:16:16 2007 From: edward.prendergast at netring.co.uk (Edward Prendergast) Date: Wed Nov 14 16:16:19 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day Message-ID: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Hi, We are reaching capacity with our current hardware setup. Our current machine is a Dual Xeon 2.40GHz + 2g RAM workhorse which runs all services required for web hosting (MySQL, Apache, Exim + Courier + MailScanner + MailWatch + SpamAssassin + ClamAV, named) but are looking to separate this out as the machine can no longer handle the load inflicted by all these services. By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject at MTA based on greet-pause and invalid recipients. We have tried to reduce the amount of users with catch-alls to the absolute minimum. We went on a Mail optimisation overhaul a few months ago during which time MailScanner's working area was switched to tempfs and we started using compiled rules. We archive mails for 7 days and keep 20 days worth of mail. The only bottleneck on our current setup appears to be CPU - vmstat looks like this: procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 2 3 311500 801316 37144 97396 1 0 3 1 0 0 15 5 70 10 With bayes on, the load average hikes up to around 10, 11 or higher depending on time of day. Without bayes the load usually sits around 5/6. At present the hardware budget is fairly constricted so I'm looking to find out what minimum level of hardware would be required to run: MailScanner MTA in gateway mode (forwarding scanned mail to existing server) MailWatch (MySQL DB stored elsewhere) SpamAssasin, compiled rules, bayes Any advice from the vast pool of MailScanner experience would be greatly appreciated. Regards, Edward ************ The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, any action taken or omitted to be taken in reliance on it, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this E-mail message is strictly prohibited and may be unlawful. If you have received this E-mail message in error, please notify us immediately. Please also destroy and delete the message from your computer. ************ From prandal at herefordshire.gov.uk Wed Nov 14 16:40:43 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 14 16:40:53 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA02180005@HC-MBX02.herefordshire.gov.uk> I'm not sure what the minimum is, but our main mx box is a quad core Dell 2950, 4GB RAM, running MailScanner / SA 3.2.3, MailWatch, ClamAV, McAfee uvscan, FuzzyOCR, milter-greylist. Yesterday it handled 165,000 emails, of which 91% were rejected at the MTA level. Load average tends to be around 1.2, peaking at 2.5. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Edward Prendergast > Sent: 14 November 2007 16:16 > To: mailscanner@lists.mailscanner.info > Subject: Minimum hardware capacity for 35k e-mail scans/day > > Hi, > > We are reaching capacity with our current hardware setup. Our current > machine is a Dual Xeon 2.40GHz + 2g RAM workhorse which runs > all services > required for web hosting (MySQL, Apache, Exim + Courier + > MailScanner + > MailWatch + SpamAssassin + ClamAV, named) but are looking to > separate this > out as the machine can no longer handle the load inflicted by > all these > services. > > By 5pm we've usually scanned 35,000 mails, 10% of that > legitimate. We reject > at MTA based on greet-pause and invalid recipients. We have > tried to reduce > the amount of users with catch-alls to the absolute minimum. > We went on a > Mail optimisation overhaul a few months ago during which time > MailScanner's > working area was switched to tempfs and we started using > compiled rules. > > We archive mails for 7 days and keep 20 days worth of mail. > > The only bottleneck on our current setup appears to be CPU - > vmstat looks > like this: > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in > cs us sy id > wa > 2 3 311500 801316 37144 97396 1 0 3 1 0 > 0 15 5 70 > 10 > > With bayes on, the load average hikes up to around 10, 11 or higher > depending on time of day. Without bayes the load usually sits > around 5/6. > > At present the hardware budget is fairly constricted so I'm > looking to find > out what minimum level of hardware would be required to run: > > MailScanner > MTA in gateway mode (forwarding scanned mail to existing server) > MailWatch (MySQL DB stored elsewhere) > SpamAssasin, compiled rules, bayes > > Any advice from the vast pool of MailScanner experience would > be greatly > appreciated. > > Regards, > Edward > > > ************ > The information in this email is confidential and may be > legally privileged. > It is intended solely for the addressee. Access to this email > by anyone else > is unauthorised. If you are not the intended recipient, any > action taken or > omitted to be taken in reliance on it, any form of reproduction, > dissemination, copying, disclosure, modification, distribution and/or > publication of this E-mail message is strictly prohibited and may be > unlawful. If you have received this E-mail message in error, > please notify > us immediately. Please also destroy and delete the message from your > computer. > ************ > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From J.Ede at birchenallhowden.co.uk Wed Nov 14 16:44:51 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 14 16:47:03 2007 Subject: OT: Best virtual machine server? In-Reply-To: References: <473774B0.5090700@ecs.soton.ac.uk>, Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3E@server02.bhl.local> From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Arto [arto.saraniva@artio.net] Sent: 14 November 2007 16:12 To: mailscanner@lists.mailscanner.info Subject: Re: OT: Best virtual machine server? Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I've been badly bitten by VMWare, so that's out. No discussion there. It > can't even keep its clock running to time :-( I am not sure if this has been yet mentioned, but: clock=pit -arto That was the work around I used on MS Virtual server to keep time relatively in sync.. Jason From hvdkooij at vanderkooij.org Wed Nov 14 18:21:39 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 14 18:22:00 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473B3CB3.7070709@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Edward Prendergast wrote: > The only bottleneck on our current setup appears to be CPU - vmstat looks > like this: > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 2 3 311500 801316 37144 97396 1 0 3 1 0 0 15 5 70 > 10 That CPU is 70% idle. Hardly a bottleneck. But the first line with vmstat is bogus. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOzywBvzDRVjxmYERAiwdAKCokSbTsN27MheNGm0sYB+9qyOqEwCgl+y+ hheDUOP1POBHZEeQ5KbLKhk= =sQTt -----END PGP SIGNATURE----- From MailScanner at ecs.soton.ac.uk Wed Nov 14 18:35:59 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 14 18:36:16 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473B400F.3000107@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Are you actually seeing mail queues getting big, particularly in exim.in/input? Just having a high load-average figure is not a good sign that the machine is struggling, you need to look to see if it is keeping up with the incoming mail. What size do the batches get to be? Best thing to look for is tail -f /var/log/maillog | grep 'New Batch' and see how many it is scanning at a time. If this is setting less than about 4 or 5, and not walking up to 30 in a batch, then that really is getting overloaded. Ignore the "messages waiting" figure, that includes messages that are in the process of being received from remote SMTP servers belonging to other people. Quad-core Xeon boxes with 8Gb RAM are pretty cheap these days. I just bought one with mirrored 500GB SATA disks and a hardware RAID controller, along with a quad-core CPU and Gb RAM for under 1500 quid (i.e. about US $2500 or less) from Dell. Let us know how big your batches get. Jules. Edward Prendergast wrote: > Hi, > > We are reaching capacity with our current hardware setup. Our current > machine is a Dual Xeon 2.40GHz + 2g RAM workhorse which runs all services > required for web hosting (MySQL, Apache, Exim + Courier + MailScanner + > MailWatch + SpamAssassin + ClamAV, named) but are looking to separate this > out as the machine can no longer handle the load inflicted by all these > services. > > By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject > at MTA based on greet-pause and invalid recipients. We have tried to reduce > the amount of users with catch-alls to the absolute minimum. We went on a > Mail optimisation overhaul a few months ago during which time MailScanner's > working area was switched to tempfs and we started using compiled rules. > > We archive mails for 7 days and keep 20 days worth of mail. > > The only bottleneck on our current setup appears to be CPU - vmstat looks > like this: > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 2 3 311500 801316 37144 97396 1 0 3 1 0 0 15 5 70 > 10 > > With bayes on, the load average hikes up to around 10, 11 or higher > depending on time of day. Without bayes the load usually sits around 5/6. > > At present the hardware budget is fairly constricted so I'm looking to find > out what minimum level of hardware would be required to run: > > MailScanner > MTA in gateway mode (forwarding scanned mail to existing server) > MailWatch (MySQL DB stored elsewhere) > SpamAssasin, compiled rules, bayes > > Any advice from the vast pool of MailScanner experience would be greatly > appreciated. > > Regards, > Edward > > > ************ > The information in this email is confidential and may be legally privileged. > It is intended solely for the addressee. Access to this email by anyone else > is unauthorised. If you are not the intended recipient, any action taken or > omitted to be taken in reliance on it, any form of reproduction, > dissemination, copying, disclosure, modification, distribution and/or > publication of this E-mail message is strictly prohibited and may be > unlawful. If you have received this E-mail message in error, please notify > us immediately. Please also destroy and delete the message from your > computer. > ************ > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHO0AREfZZRxQVtlQRAuFHAJ9jstNeTu3A8mQH1AGsTvHLobjgLACg794e 85oLnKgg0KmeQLIzjVCK6Yg= =fG2Z -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Nov 14 18:46:45 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 14 18:47:04 2007 Subject: OT: Best virtual machine server? In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3E@server02.bhl.local> References: <473774B0.5090700@ecs.soton.ac.uk>, <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3E@server02.bhl.local> Message-ID: <473B4295.4010701@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, I have now pretty much decided that hopefully RC1 of Windows Server 2008 will be out by the time I need the server (first half of December) and I'll run that. This should go pretty fast, and is easy to manage. I have used Virtual Server 2005 quite a bit, and am pretty pleased with it. It also doesn't cost me anything financially, which is quite important as I'm buying this out of my own money. The hypervisor in Win2008 appears to be quite a bit better than that in Virtual Server 2005. And it should be pretty secure too, which will help as this box will go in our main DMZ. Win2008 doesn't even come with a GUI by default if you go for a "core only" installation. But positive comments are still much appreciated. Flamewars can go and set fire to themselves :-) Jules. P.S. The hardware is ?1450 worth of quad-core 5xxx series Xeon CPU, 8Gb RAM, 2 500Gb SATA disks mirrored with a hardware RAID controller. So that should run Win2008 just fine. I'll sling a 1Tbyte USB disk on it to do occasional backups. It's not intended as a production service, just a service to be able to provide quick response to people who ask me if they can borrow a server for a few months. So it will run several low-load services for people, some Windows, some Linux. Not being able to run Solaris will be a bit of a pain, but I have other spare servers that could do this at a push. P.P.S. I haven't done a Win2008 install yet, so any and all tips are very welcome. Particularly from any Microsoft employees lurking on this list (who may want to contact me off-list). Jason Ede wrote: > From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Arto [arto.saraniva@artio.net] > Sent: 14 November 2007 16:12 > To: mailscanner@lists.mailscanner.info > Subject: Re: OT: Best virtual machine server? > > Julian Field wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I've been badly bitten by VMWare, so that's out. No discussion there. It >> can't even keep its clock running to time :-( >> > > I am not sure if this has been yet mentioned, but: > clock=pit > > -arto > > That was the work around I used on MS Virtual server to keep time relatively in sync.. > > Jason > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHO0KaEfZZRxQVtlQRApXBAKCgy7htDxwvv+ZFja0FKGG76tsNLQCfVq6e f+RVm/QIyrHRkRUd5rNZfVw= =/uhp -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From eclipsem at optusnet.com.au Wed Nov 14 21:49:25 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 21:49:31 2007 Subject: scanning rules Message-ID: <200711142149.lAELnPdJ001654@mail03.syd.optusnet.com.au> > Glenn Steen wrote: > > On 14/11/2007, eclipsem@optusnet.com.au > wrote: > > > > Hello, > > > > I would like to have something clarified about scan rules. > > > > # If this is set to yes, then email messages passing through > MailScanner > > # will be processed and checked, and all the other options in this > file > > # will be used to control what checks are made on the message. > > # If this is set to no, then email messages will NOT be processed or > > # checked *at all*, and so any viruses or other problems will be > ignored > > Scan Messages = /opt/MailScanner/etc/rules/scan.rules > > > > This file contains - > > > > From: 127.0.0.1 no > > From: 10.0.1.6 no > > FromOrTo: default yes > > > > These are the IP's of the local server, now I have a script that > generates emails upon email to sales department, to other sales reps, it > is a new generated message, not forwarded as it contains some SQL > content. The thing is MailScanner still wants to scan the message when > its submitted. > > > > I also have these IP's in - > > Information Header = /opt/MailScanner/etc/rules/header.rules (in > case we take them out of all scanning rules at later date) > > > > Could this settings be countermanding the "no scan" rules? > > > > Also we strip out some Exchange headers in MailScanner using "Remove > These Headers" this works very well, except we turned off Spam Checks, > for a bit trying to debug the above problem , and we noticed > > that MailScanner stopped removing that header but yes all the other > scan rules were still active? > > > > TIA > > Edward > > It should function exactly as it says "on the tin".... Could we see > some example log entries (all relevant entries, from connect to the > MTA, through MS and on to final delivery), and perhaps an example > message (with headers) as well? > They all say the IP 10.0.1.6, which it is told by the rules above to ignore, mailscanner adds the headers to the message including spamassassins so I know it is ignoring the "do not scan" rules and scanning them. From eclipsem at optusnet.com.au Wed Nov 14 22:51:38 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 22:51:43 2007 Subject: scanning rules Message-ID: <200711142251.lAEMpcQk006168@mail05.syd.optusnet.com.au> Glenn Steen wrote: > > It should function exactly as it says "on the tin".... Could we see > some example log entries (all relevant entries, from connect to the > MTA, through MS and on to final delivery), and perhaps an example > message (with headers) as well? > The server was isolated then all mailer daemons restarted so the only msg was my test one, and it clearly shows its spam tests and virus tests, however the unscanned message log entry also has me fuzzled, does mailscanner just log everything if if its set to bypass as well? This makes debugging a PITA, I hope we don't have to move back to MIMEDefang The log appears out of order this is most likely due to the "dont immediately write to log" syslog setting Thanks Edward Nov 15 08:19:31 exorcist sendmail[31712]: lAEMJVNt031712: from=, size=448, class=0, nrcpts=1, msgid=<4.64.0711150817210.22424@blacksabeth>, proto=ESMTP, daemon=MTA, relay=[10.0.1.19] [10.0.1.19] Nov 15 08:19:32 exorcist MailScanner[31693]: New Batch: Scanning 1 messages, 909 bytes Nov 15 08:19:33 exorcist MailScanner[31693]: Spam Checks: Starting Nov 15 08:19:33 exorcist MailScanner[31693]: Unscanned: Delivered 1 messages Nov 15 08:19:33 exorcist MailScanner[31693]: Virus and Content Scanning: Starting Nov 15 08:19:33 exorcist sendmail[31721]: lAEMJXqj031721: from=, size=868, class=0, nrcpts=1, msgid=, proto=ESMTP, daemon=MTA, relay= [10.0.1.6] [10.0.1.6] Nov 15 08:19:33 exorcist sendmail[31718]: lAEMJVNt031712: to="|/opt/house", ctladdr= (8/0), delay=00:00:02, xdelay=00:00:00, mailer=prog, pri=120448, dsn=2.0.0, stat=Sent Nov 15 08:19:34 exorcist MailScanner[31693]: New Batch: Scanning 1 messages, 1337 bytes Nov 15 08:19:34 exorcist MailScanner[31693]: Spam Checks: Starting Nov 15 08:19:34 exorcist sendmail[31732]: lAEMJXqj031721: to=X@optusnet.com.au, delay=00:00:01, xdelay=00:00:00, mailer=esmtp, pri=120868, relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMJYbf022431 Message accepted for delivery) Nov 15 08:19:34 exorcist MailScanner[31693]: Unscanned: Delivered 1 messages Nov 15 08:19:35 exorcist MailScanner[31693]: Virus and Content Scanning: Starting And a message from me to me not going via that script, does not have headers added but does have all the log entries as well. Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: from=, size=443, class=0, nrcpts=1, msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, relay=[10.0.1.19] [10.0.1.19] Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 messages, 892 bytes Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: to=X@optusnet.com.au, ctladdr= (1009/100), delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 Message accepted for delivery) Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 messages Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content Scanning: Starting From hvdkooij at vanderkooij.org Wed Nov 14 23:03:33 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 14 23:03:54 2007 Subject: scanning rules In-Reply-To: <200711142251.lAEMpcQk006168@mail05.syd.optusnet.com.au> References: <200711142251.lAEMpcQk006168@mail05.syd.optusnet.com.au> Message-ID: <473B7EC5.5080505@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: from=, size=443, class=0, nrcpts=1, msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, relay=[10.0.1.19] [10.0.1.19] > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 messages, 892 bytes > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: to=X@optusnet.com.au, ctladdr= (1009/100), delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 Message accepted for delivery) > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 messages > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content Scanning: Starting It explicitly tells you it did NOT scan. (See the Unscanned: line) Mind you that by design MailScanner is the glue that holds two sendmail instances together. Wether it just forwards the message unscanned or tries every trick in the book depends on your config. But it will clearly log the message. Unless every message passes MailScanner there is no way that MailScanner can decide wether or not to scan it or use AV scanner X or Y. Now what is the problem? Does it not work as advertised? From the looks of it is seems everything is working as you wanted it. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHO37DBvzDRVjxmYERAg9XAKCyKJfSEBusV9YG3FCAlXojOLH0OQCffIHH nQvOuG/S4cu+NW8de5J4xL4= =FpRS -----END PGP SIGNATURE----- From eclipsem at optusnet.com.au Wed Nov 14 23:12:39 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Wed Nov 14 23:12:44 2007 Subject: scanning rules Message-ID: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> > Hugo van der Kooij wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > eclipsem@optusnet.com.au wrote: > > > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > from=, size=443, class=0, nrcpts=1, > msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, > relay=[10.0.1.19] [10.0.1.19] > > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > messages, 892 bytes > > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > to=X@optusnet.com.au, ctladdr= (1009/100), > delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > Message accepted for delivery) > > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > messages > > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > Scanning: Starting > > It explicitly tells you it did NOT scan. (See the Unscanned: line) > Then what is the point of all the starting spam checks and starting virus scanning log entries, thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists Are you the programmer of mailscanner? if not how about you leave this for him or her to answer I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 From hvdkooij at vanderkooij.org Thu Nov 15 06:34:10 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 15 06:34:35 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <473BE862.6060806@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > > > >> Hugo van der Kooij wrote: >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> eclipsem@optusnet.com.au wrote: >> >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: >> from=, size=443, class=0, nrcpts=1, >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, >> relay=[10.0.1.19] [10.0.1.19] >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 >> messages, 892 bytes >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: >> to=X@optusnet.com.au, ctladdr= (1009/100), >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 >> Message accepted for delivery) >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 >> messages >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content >> Scanning: Starting >> >> It explicitly tells you it did NOT scan. (See the Unscanned: line) >> > > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > > I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 I suggest you pay Jules for commercial support if it is that important to you. If you do not value peer advise then why bother with a mailinglist to begin with? Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST yUQ/eO5lMV9DCPlo08jZZmM= =d8bN -----END PGP SIGNATURE----- From viralert at fadalto.com Thu Nov 15 08:55:36 2007 From: viralert at fadalto.com (Phil) Date: Thu Nov 15 08:55:49 2007 Subject: Mailscanner MCP Problem In-Reply-To: <473B06C6.7020105@kettle.org.uk> References: <46A60120.9000901@kettle.org.uk> <46A60373.3020309@ecs.soton.ac.uk> <473B06C6.7020105@kettle.org.uk> Message-ID: <20071115085536.M25048@fadalto.com> Hi, I had the same problem. my conf file was : MCP Checks = yes First Check = mcp changing it into: MCP Checks = yes First Check = spam I solved the problem, thanks to the guy here on the mailinglist :) Phil ---------- Original Message ----------- From: Rob Kettle To: mailscanner@lists.mailscanner.info Sent: Wed, 14 Nov 2007 14:31:34 +0000 Subject: Mailscanner MCP Problem > Hi, > > apologies if this should have been directed elsewhere... > > I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail > and clamd). > > All is OK when the incominmg message is not matched by MCP rules. > > If the message is MCP matched and the rule is 'deliver' (without quotes) > then the message seems to disappears into a back hole. This seems > irrespective of whether it matches any spam or virus rules in subsequent > checks (MCP is first check). If I have a mailscanner (Mail archiving and > monitoring) rule setup for a user that says to deliver locally (the > default) and forward to an external address the deliver disappears into > a black hole but the forward to external address part works. > > any help or pointers would be appreciated. > > Regards > Rob Kettle > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ------- End of Original Message ------- From rob at kettle.org.uk Thu Nov 15 09:03:44 2007 From: rob at kettle.org.uk (Rob Kettle) Date: Thu Nov 15 09:03:50 2007 Subject: Mailscanner MCP Problem In-Reply-To: <20071115085536.M25048@fadalto.com> References: <46A60120.9000901@kettle.org.uk> <46A60373.3020309@ecs.soton.ac.uk> <473B06C6.7020105@kettle.org.uk> <20071115085536.M25048@fadalto.com> Message-ID: <473C0B70.8020504@kettle.org.uk> Hi, I got to that by trial and error last night, coicidentally just as Julian replied to me with the same answer. thanks again. Rob Phil wrote: > Hi, > > I had the same problem. > > my conf file was : > > MCP Checks = yes > First Check = mcp > > changing it into: > > MCP Checks = yes > First Check = spam > > I solved the problem, thanks to the guy here on the mailinglist :) > > Phil > > > ---------- Original Message ----------- > From: Rob Kettle > To: mailscanner@lists.mailscanner.info > Sent: Wed, 14 Nov 2007 14:31:34 +0000 > Subject: Mailscanner MCP Problem > > >> Hi, >> >> apologies if this should have been directed elsewhere... >> >> I'm trying to implement MCP in Mailscanner 4.62.9 (also using Sendmail >> and clamd). >> >> All is OK when the incominmg message is not matched by MCP rules. >> >> If the message is MCP matched and the rule is 'deliver' (without quotes) >> then the message seems to disappears into a back hole. This seems >> irrespective of whether it matches any spam or virus rules in subsequent >> checks (MCP is first check). If I have a mailscanner (Mail archiving and >> monitoring) rule setup for a user that says to deliver locally (the >> default) and forward to an external address the deliver disappears into >> a black hole but the forward to external address part works. >> >> any help or pointers would be appreciated. >> >> Regards >> Rob Kettle >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> > ------- End of Original Message ------- > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Thu Nov 15 09:55:53 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 09:56:10 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <473C17A9.6050600@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > Excuse me, but we have rules on manners around here. This guy is trying very hard to help you out, and he is very experienced with MailScanner. If you don't want his help, then what are you doing here? This list is for everyone to help out each other. If you want to only talk to me, then that's just fine. I charge ?200 per hour for commercial tech support. I do accept cheques ("checks" in the USA), or you can pay me via credit card into my Paypal account. If you don't want help from those here who are willing to help you out as best as they can, for free, then I suggest you don't ask here. Best regards, Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHPBeqEfZZRxQVtlQRApY+AJ99MHC/M4TnJPLNrrC/LZTMaGH8PgCfT8NK 4w1gl3IcsIk91+P+qp5PSnA= =sxRl -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From P.G.M.Peters at utwente.nl Thu Nov 15 10:45:52 2007 From: P.G.M.Peters at utwente.nl (Peter Peters) Date: Thu Nov 15 10:46:01 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473C2360.9000001@utwente.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Edward Prendergast wrote on 14-11-2007 17:16: > By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject > at MTA based on greet-pause and invalid recipients. We have tried to reduce > the amount of users with catch-alls to the absolute minimum. We went on a > Mail optimisation overhaul a few months ago during which time MailScanner's > working area was switched to tempfs and we started using compiled rules. We are getting over 300.000 messages (single from's) a day. And we block another 360.000 at the MTA level (60.000 without reverse DNS, 100.000 blocked consumernetwork, 30.000 non-excisting domains and the rest non-excisting users). Only about 2000 messages are deleted by MailScanner. The rest is delivered to the users. We don't use tmpfs. Our system is an HP dual core Intel(R) Xeon(TM) CPU 3.00GHz with 4GB of memory runnig Sendmail, MailScanner, Spamassassin with bayes, F-prot and ClamAV. Before we started blocking on reverse DNS our incoming queue grew from noon until midnight and it disappeared in 6 hours. With reverse DNS blocking we don't see any raise in the incoming queue anymore. The load was usually between 10 and 15. But is now between 4 and 10. - -- Peter Peters, Teamleider Unix/Linux-Beheer ICT-Servicecentrum Universiteit Twente, Postbus 217, 7500 AE Enschede Telefoon 053 489 2301, Fax 053 489 2383, P.G.M.Peters@utwente.nl, http://www.utwente.nl/icts -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHPCNfelLo80lrIdIRAmMLAJsEhWzBxUTWGSk47BIo/jCJNQsmsgCeKyHS xkqLIvt11d1hoob3ScP7q5w= =FGlo -----END PGP SIGNATURE----- From gmatt at nerc.ac.uk Thu Nov 15 10:52:56 2007 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Thu Nov 15 10:55:40 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> Message-ID: <473C2508.6020901@nerc.ac.uk> Edward Prendergast wrote: > Any advice from the vast pool of MailScanner experience would be greatly > appreciated. - reject more at the MTA - consider a block list - double the memory to 4GB - it will get used and its much faster than disk. - run a caching name service daemon - high load may be due to iowait. Also, consider reducing the number of DNS lookups performed by SA. - check to see if you are running pyzor and try removing it - more long DNS queries to drive up the load. - remove IMAP services - this can really kill a busy server, separate out your mail filtering from your mail delivery Your dual Xeons should be able to handle that level of mail. That said, I have a client that runs a busy IMAP server alongside MS on a much more powerful box and I had to impose limits on the imap connections as certain clients were killing the performance when churning through large mailboxes. Are you queues actually building up or are you just concerned with the load average? GREG -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From eclipsem at optusnet.com.au Thu Nov 15 11:38:35 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Thu Nov 15 11:38:41 2007 Subject: scanning rules Message-ID: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. I also note you NIETHER you or your rude and arrogant hugo long term user commented on the real issue ans to mailscanner not whitelisting when told to given other rules read in at load time. Don't worry though, all your users can be led into a false sense of belief when they try debug your software, which wont be our problem as our MTA is now using MIMEDefang, working as it is documented. I hope this makes it to Google fast so people researching mailscanner can see what they can expect from you julian. and yes dont worry after I hit send here the next message is to mailman to remove myself > Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > Excuse me, but we have rules on manners around here. This guy is trying very hard to help you out, and he is very experienced with MailScanner. If you don't want his help, then what are you doing here? This list is for everyone to help out each other. If you want to only talk to me, then that's just fine. I charge £200 per hour for commercial tech support. I do accept cheques ("checks" in the USA), or you can pay me via credit card into my Paypal account. If you don't want help from those here who are willing to help you out as best as they can, for free, then I suggest you don't ask here. Best regards, Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHPBeqEfZZRxQVtlQRApY+AJ99MHC/M4TnJPLNrrC/LZTMaGH8PgCfT8NK 4w1gl3IcsIk91+P+qp5PSnA= =sxRl -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From eclipsem at optusnet.com.au Thu Nov 15 11:40:20 2007 From: eclipsem at optusnet.com.au (eclipsem@optusnet.com.au) Date: Thu Nov 15 11:40:26 2007 Subject: scanning rules Message-ID: <200711151140.lAFBeK1S017931@mail08.syd.optusnet.com.au> > Hugo van der Kooij wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > eclipsem@optusnet.com.au wrote: > > > > > > > >> Hugo van der Kooij wrote: > >> > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> eclipsem@optusnet.com.au wrote: > >> > >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > >> from=, size=443, class=0, nrcpts=1, > >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, > daemon=MTA, > >> relay=[10.0.1.19] [10.0.1.19] > >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > >> messages, 892 bytes > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > >> to=X@optusnet.com.au, ctladdr= (1009/100), > >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > >> Message accepted for delivery) > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > >> messages > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > >> Scanning: Starting > >> > >> It explicitly tells you it did NOT scan. (See the Unscanned: line) > >> > > > > Then what is the point of all the starting spam checks and starting > virus scanning log entries, > > thats fine here on local messages, but does not answer the main issue > we have on our script generated messages where it does in fact add the > headers to the email and clearly ignores the whitelists > > > > Are you the programmer of mailscanner? if not how about you leave this > for him or her to answer > > > > I have until COB today, or I have been told to reinstall MIMEDefang > before I go home, guess it's time to start installing it now so I can > enact it at 430 > > I suggest you pay Jules for commercial support if it is that important > to you. ROFLMFAO, pay the author to fix his code? sounds like you work at microsoft. > > If you do not value peer advise then why bother with a mailinglist to > begin with? > because this is the only way to log a bug report that gets a repsonse > Hugo. > > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST > yUQ/eO5lMV9DCPlo08jZZmM= > =d8bN > -----END PGP SIGNATURE----- > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From uxbod at splatnix.net Thu Nov 15 11:53:59 2007 From: uxbod at splatnix.net (UxBoD) Date: Thu Nov 15 11:44:53 2007 Subject: scanning rules In-Reply-To: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> Message-ID: <5245480.14031195127638999.JavaMail.root@office.splatnix.net> Bye bye - Surely will not be missed ! Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: eclipsem@optusnet.com.au To: "MailScanner discussion" Sent: Thursday, November 15, 2007 11:38:35 AM (GMT) Europe/London Subject: Re: Re: scanning rules So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. I also note you NIETHER you or your rude and arrogant hugo long term user commented on the real issue ans to mailscanner not whitelisting when told to given other rules read in at load time. Don't worry though, all your users can be led into a false sense of belief when they try debug your software, which wont be our problem as our MTA is now using MIMEDefang, working as it is documented. I hope this makes it to Google fast so people researching mailscanner can see what they can expect from you julian. and yes dont worry after I hit send here the next message is to mailman to remove myself > Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > Excuse me, but we have rules on manners around here. This guy is trying very hard to help you out, and he is very experienced with MailScanner. If you don't want his help, then what are you doing here? This list is for everyone to help out each other. If you want to only talk to me, then that's just fine. I charge ??200 per hour for commercial tech support. I do accept cheques ("checks" in the USA), or you can pay me via credit card into my Paypal account. If you don't want help from those here who are willing to help you out as best as they can, for free, then I suggest you don't ask here. Best regards, Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFHPBeqEfZZRxQVtlQRApY+AJ99MHC/M4TnJPLNrrC/LZTMaGH8PgCfT8NK 4w1gl3IcsIk91+P+qp5PSnA= =sxRl -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Thu Nov 15 11:58:00 2007 From: uxbod at splatnix.net (UxBoD) Date: Thu Nov 15 11:48:53 2007 Subject: scanning rules In-Reply-To: <200711151140.lAFBeK1S017931@mail08.syd.optusnet.com.au> Message-ID: <18533971.14061195127880245.JavaMail.root@office.splatnix.net> thought you were going ? you must be enjoying the list :) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: eclipsem@optusnet.com.au To: "MailScanner discussion" Sent: Thursday, November 15, 2007 11:40:20 AM (GMT) Europe/London Subject: Re: Re: scanning rules > Hugo van der Kooij wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > eclipsem@optusnet.com.au wrote: > > > > > > > >> Hugo van der Kooij wrote: > >> > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA1 > >> > >> eclipsem@optusnet.com.au wrote: > >> > >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > >> from=, size=443, class=0, nrcpts=1, > >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, > daemon=MTA, > >> relay=[10.0.1.19] [10.0.1.19] > >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > >> messages, 892 bytes > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > >> to=X@optusnet.com.au, ctladdr= (1009/100), > >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > >> Message accepted for delivery) > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > >> messages > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > >> Scanning: Starting > >> > >> It explicitly tells you it did NOT scan. (See the Unscanned: line) > >> > > > > Then what is the point of all the starting spam checks and starting > virus scanning log entries, > > thats fine here on local messages, but does not answer the main issue > we have on our script generated messages where it does in fact add the > headers to the email and clearly ignores the whitelists > > > > Are you the programmer of mailscanner? if not how about you leave this > for him or her to answer > > > > I have until COB today, or I have been told to reinstall MIMEDefang > before I go home, guess it's time to start installing it now so I can > enact it at 430 > > I suggest you pay Jules for commercial support if it is that important > to you. ROFLMFAO, pay the author to fix his code? sounds like you work at microsoft. > > If you do not value peer advise then why bother with a mailinglist to > begin with? > because this is the only way to log a bug report that gets a repsonse > Hugo. > > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST > yUQ/eO5lMV9DCPlo08jZZmM= > =d8bN > -----END PGP SIGNATURE----- > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From martinh at solidstatelogic.com Thu Nov 15 12:18:54 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 15 12:19:03 2007 Subject: scanning rules In-Reply-To: <200711151140.lAFBeK1S017931@mail08.syd.optusnet.com.au> Message-ID: <3de14af50907ae4d9d618651ea03357f@solidstatelogic.com> Take it easy, we all got day jobs including Julian! Personally I've always found support here very friendly and informatative. This is prob the main reason I chose mailscanner over 3 years ago as replacement for the commercial pile of rubbish with PAID support that was terrible. Sure I get things wrong myself and get corrected but it's still in a friendly manner. Sometimes there's bug in the s/w and we work "together" to get a solution. Sometimes there's a config/knowledge issue and again WORKING TOGETHER we get a solution. Anyway back to the issue in hand.... For your problem it depends where abouts you are 'whitelisting' as to what point it get to before it sees the 'whitelist'. If you want the big 'on/off' setting it's "scan messages" in MailScanner.conf. There's also settings about whether or not run the spam checks, whether spamassassin whitelists and a whole range of other places you can whitelist depending on what then actual requirement is. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of eclipsem@optusnet.com.au > Sent: 15 November 2007 11:40 > To: MailScanner discussion > Subject: Re: Re: scanning rules > > > > > > > Hugo van der Kooij wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > eclipsem@optusnet.com.au wrote: > > > > > > > > > > > >> Hugo van der Kooij wrote: > > >> > > >> -----BEGIN PGP SIGNED MESSAGE----- > > >> Hash: SHA1 > > >> > > >> eclipsem@optusnet.com.au wrote: > > >> > > >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > > >> from=, size=443, class=0, nrcpts=1, > > >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, > > daemon=MTA, > > >> relay=[10.0.1.19] [10.0.1.19] > > >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > > >> messages, 892 bytes > > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > > >> to=X@optusnet.com.au, ctladdr= (1009/100), > > >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > > >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > > >> Message accepted for delivery) > > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > > >> messages > > >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > > >> Scanning: Starting > > >> > > >> It explicitly tells you it did NOT scan. (See the Unscanned: line) > > >> > > > > > > Then what is the point of all the starting spam checks and starting > > virus scanning log entries, > > > thats fine here on local messages, but does not answer the main issue > > we have on our script generated messages where it does in fact add the > > headers to the email and clearly ignores the whitelists > > > > > > Are you the programmer of mailscanner? if not how about you leave this > > for him or her to answer > > > > > > I have until COB today, or I have been told to reinstall MIMEDefang > > before I go home, guess it's time to start installing it now so I can > > enact it at 430 > > > > I suggest you pay Jules for commercial support if it is that important > > to you. > > ROFLMFAO, pay the author to fix his code? sounds like you work at > microsoft. > > > > > If you do not value peer advise then why bother with a mailinglist to > > begin with? > > > > because this is the only way to log a bug report that gets a repsonse > > > > Hugo. > > > > > > - -- > > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > > > A: Yes. > > >Q: Are you sure? > > >>A: Because it reverses the logical flow of conversation. > > >>>Q: Why is top posting frowned upon? > > > > Bored? Click on http://spamornot.org/ and rate those images. > > > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.4.7 (GNU/Linux) > > > > iD8DBQFHO+hgBvzDRVjxmYERAonrAJ0WUVSW4aGS4fSNUIxvNPMtxHDXOgCfXVST > > yUQ/eO5lMV9DCPlo08jZZmM= > > =d8bN > > -----END PGP SIGNATURE----- > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From glenn.steen at gmail.com Thu Nov 15 12:29:41 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 15 12:29:43 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <223f97700711150429l19c9d908wc831ea1a36129838@mail.gmail.com> On 15/11/2007, eclipsem@optusnet.com.au wrote: > > > > > > Hugo van der Kooij wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > eclipsem@optusnet.com.au wrote: > > > > > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > > from=, size=443, class=0, nrcpts=1, > > msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, > > relay=[10.0.1.19] [10.0.1.19] > > > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > > messages, 892 bytes > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > > to=X@optusnet.com.au, ctladdr= (1009/100), > > delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > > relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > > Message accepted for delivery) > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > > messages > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > > Scanning: Starting > > > > It explicitly tells you it did NOT scan. (See the Unscanned: line) > > > > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > > I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 > Working under pressure isn't always the best way to resolve problems:-). As to the original problem... Did you by any chance edit the rule file(s) under Windoze? Have you run a "MailScanner --lint"? What you've quoted here looks OK, but... If your rules aren't working there are more debug optiions, to verify exactly what MailScanner will do... Try a "MailScanner --help" and you'll see;-). Hmmm, perhaps I should look at the rest of this thread... Oh my $DEITY ! How a simple debug excercise turns vicious! Argh. Well, I hope you'll find MIMEDefang as powerful and useful as MailScanner... last I looked it wasn't, but then ... that was a while back. If you had asked nicely, I know for a fact that Jules would've helped you out (along with a few others here... Hugo among them;-), perhaps even if you had asked off-list. That Jules makes very little money on MS is no secret. That he will do consulting (that is: listen to your problem, log into your server and solve said problem) at a reasonable fare (which it actually is) ... is no secret either. He's both fast and good. Ah well. Be well, all! Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From davi at jvsinfo.com.br Thu Nov 15 15:05:05 2007 From: davi at jvsinfo.com.br (Davi Baldin) Date: Thu Nov 15 13:55:09 2007 Subject: =?iso-8859-1?q?ATEN=C7=C3O_-_Davi_estar=E1_ausente?= Message-ID: I will be out of the office starting 15/11/2007 and will not return until 16/11/2007. Estarei ausente at? dia 01/09/2007. Assuntos de suporte, favor encaminhar para suporte@jvsinfo.com.br, grato. From edward.prendergast at netring.co.uk Thu Nov 15 14:34:47 2007 From: edward.prendergast at netring.co.uk (Edward Prendergast) Date: Thu Nov 15 14:37:03 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C2508.6020901@nerc.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> Message-ID: <015701c82794$b19d7ab0$14d87010$@prendergast@netring.co.uk> > Any advice from the vast pool of MailScanner experience would be greatly > appreciated. >> Are you queues actually building up or are you just concerned with the >> load average? In reply to Greg and Julian: The queue seems to go up with the load. By the time the load is around 10 the queue starts to climb without any sign of going down. It usually reaches the 300 mark within half an hour to an hour, but has gone up as far as 3,000. When I turn bayes off the load goes down and mail queues start becoming manageable again. Our users largely use POP3, with a few using IMAP through squirrelmail. Their mailboxes usually tend to contain around 300 messages. Here's how vmstat looks now with bayes enabled: # vmstat 10 5 procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 10 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 39 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 40 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 46 It looks to me like there might be some thrashing going on. At this level, the queue looks like this: Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages waiting Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, 38032 bytes ************ The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, any action taken or omitted to be taken in reliance on it, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this E-mail message is strictly prohibited and may be unlawful. If you have received this E-mail message in error, please notify us immediately. Please also destroy and delete the message from your computer. ************ From Richard.Frovarp at sendit.nodak.edu Thu Nov 15 15:05:31 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Thu Nov 15 15:05:36 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <015701c82794$b19d7ab0$14d87010$@prendergast@netring.co.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <015701c82794$b19d7ab0$14d87010$@prendergast@netring.co.uk> Message-ID: <473C603B.8020803@sendit.nodak.edu> Edward Prendergast wrote: >> Any advice from the vast pool of MailScanner experience would be greatly >> appreciated. >> > > >>> Are you queues actually building up or are you just concerned with the >>> load average? >>> > > In reply to Greg and Julian: > > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. > > Our users largely use POP3, with a few using IMAP through squirrelmail. > Their mailboxes usually tend to contain around 300 messages. > > Here's how vmstat looks now with bayes enabled: > # vmstat 10 5 > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 > 10 > 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 > 39 > 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 > 40 > 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 > 46 > > It looks to me like there might be some thrashing going on. > > At this level, the queue looks like this: > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages > waiting > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, > 38032 bytes > To answer your question, and modern machine with 1 GB of RAM will work for you just fine. I've got a dual 2.0 Xeon with 1 GB of RAM handling that mail load without blinking. It makes sense to split your services out to more boxes rather than having all of them run on one machine. If you haven't already, check out imapproxy for use with squirrelmail. That will help reduce load due to that. From dnsadmin at 1bigthink.com Thu Nov 15 16:48:03 2007 From: dnsadmin at 1bigthink.com (dnsadmin 1bigthink.com) Date: Thu Nov 15 16:48:15 2007 Subject: scanning rules In-Reply-To: <223f97700711150429l19c9d908wc831ea1a36129838@mail.gmail.co m> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> <223f97700711150429l19c9d908wc831ea1a36129838@mail.gmail.com> Message-ID: <200711151648.lAFGmGEP015251@mxt.1bigthink.com> At 07:29 AM 11/15/2007, you wrote: >On 15/11/2007, eclipsem@optusnet.com.au wrote: > > > > > > > > > > > Hugo van der Kooij wrote: > > > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > Hash: SHA1 > > > > > > eclipsem@optusnet.com.au wrote: > > > > > > > Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: > > > from=, size=443, class=0, nrcpts=1, > > > msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, > > > relay=[10.0.1.19] [10.0.1.19] > > > > Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 > > > messages, 892 bytes > > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting > > > > Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: > > > to=X@optusnet.com.au, ctladdr= (1009/100), > > > delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, > > > relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 > > > Message accepted for delivery) > > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 > > > messages > > > > Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content > > > Scanning: Starting > > > > > > It explicitly tells you it did NOT scan. (See the Unscanned: line) > > > > > > > Then what is the point of all the starting spam checks and > starting virus scanning log entries, > > thats fine here on local messages, but does not answer the main > issue we have on our script generated messages where it does in > fact add the headers to the email and clearly ignores the whitelists > > > > Are you the programmer of mailscanner? if not how about you leave > this for him or her to answer > > > > I have until COB today, or I have been told to reinstall > MIMEDefang before I go home, guess it's time to start installing it > now so I can enact it at 430 > > >Working under pressure isn't always the best way to resolve problems:-). > >As to the original problem... Did you by any chance edit the rule >file(s) under Windoze? Have you run a "MailScanner --lint"? What >you've quoted here looks OK, but... If your rules aren't working there >are more debug optiions, to verify exactly what MailScanner will do... >Try a "MailScanner --help" and you'll see;-). > >Hmmm, perhaps I should look at the rest of this thread... Oh my $DEITY >! How a simple debug excercise turns vicious! Argh. >Well, I hope you'll find MIMEDefang as powerful and useful as >MailScanner... last I looked it wasn't, but then ... that was a while >back. >If you had asked nicely, I know for a fact that Jules would've helped >you out (along with a few others here... Hugo among them;-), perhaps >even if you had asked off-list. >That Jules makes very little money on MS is no secret. That he will do >consulting (that is: listen to your problem, log into your server and >solve said problem) at a reasonable fare (which it actually is) ... is >no secret either. He's both fast and good. >Ah well. Be well, all! > >Cheers >-- >-- Glenn Wow! That Julian is patient with all of us and this software distribution is a tribute! That all of you are well behaved (for the most part) and patient with one another is another tribute. Think I'll stay and continue lurking.. Cheers all, (Another) Glenn From richard.thomas at psysolutions.com Thu Nov 15 17:00:01 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Thu Nov 15 17:00:05 2007 Subject: Exim timeouts - MailScanner related? Message-ID: <473C7B11.3020400@psysolutions.com> Our setup is that we have a mail server which is scanning emails using exim4/mailscanner/spamassassin which then forwards to another server which is just running just exim4. Most of the time, everything is running well but occasionally, I am seeing SMTP data timeouts in the logs of the receiving server. The issue seems to be that when the scanning server sends to the target server, it is not correctly putting the period on a line by itself. For example, here is the tail end of a file in the exim4 out queue: /td> (No CRLF at the end). Here is the hexdump of a packet capture on the target server: 0033220 t d > < / t d > < / t r > < / t 0033240 a b l e > < / c e n t e r > < / 0033260 b o d y > < / h t m l > . \r \n 0033277 To be honest, at this stage, I'm suspecting exim since it seems to me that it should be able to reasonably handle this situation. But then again, I'm not intimately familiar with the exim queue file format and it could be that it expects it to be properly formatted and MailScanner apparently *has* touched this file so I guess it's possible that it has somehow stripped a required CRLF. I'm at the early stages of troubleshooting at the moment so if anyone has any insight on this, I'd be very grateful to here. I'll just note that this email was apparently received by the scanning server with no issues. Rich From jerry.owens at fmr.com Thu Nov 15 17:11:30 2007 From: jerry.owens at fmr.com (Owens, Jerry) Date: Thu Nov 15 17:11:36 2007 Subject: New installation configuration question. Message-ID: <641E82DC34CF514F82C95407D253E37A01176DE4@MSGMROCLS2WIN.DMN1.FMR.COM> I have just built an Ubuntu server to process my personal mail. I installed it using a guide at: http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using postfix and courrier to process mail. I installed and configured these and verified that I could send myself a test message. I then installed MailScanner using apt-get which installed version 4.46.2-3. I configured mailscanner to work with postfix from the using postfix page in the mailscanner documentation. All my mail is coming into /var/spool/postfix/hold and sitting. It is not getting delivered to me. Would this likely be a configuration issue with mailscanner or postfix? Here are the canges I made. How to Set Up Postfix for MailScanner Use 1. Install Postfix version 2 and get it all working. 2. Stop Postfix using a command postfix stop 3. Make sure you have the chroot jail set up in /var/spool/postfix. You should be able to see "etc", "usr" and "lib" directories inside /var/spool/postfix). If you haven't got the chroot jail setup already, then look in the "examples" directory of the Postfix documentation and you will find a script in there to set up it up for your operating system. If you can't find that, then see the "Problems or Errors" section further down this page. 4. At this point, things change from the setup for other MTAs as we can make it run with just one copy of Postfix, and let Postfix do the "split MTA" setup for us. 5. In the Postfix configuration file /etc/postfix/main.cf add this line: header_checks = regexp:/etc/postfix/header_checks 6. In the file /etc/postfix/header_checks add this line: /^Received:/ HOLD The effect of this is to tell Postfix to move all messages to the HOLD queue. How to Set up MailScanner for Use with Postfix In your MailScanner.conf file (probably in /etc/MailScanner or /opt/MailScanner/etc), there are 5 settings you need to change. They are all really near the top of the file. The settings are Run As User = postfix Run As Group = postfix Incoming Queue Dir = /var/spool/postfix/hold Outgoing Queue Dir = /var/spool/postfix/incoming MTA = postfix You will need to ensure that the user "postfix" can write to /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: chown postfix.postfix /var/spool/MailScanner/incoming chown postfix.postfix /var/spool/MailScanner/quarantine If you upgrade your copy of MailScanner, unfortunately these directories will be changed back to being owned by root, so you will have to do those 2 commands again. Starting It All Running If on a system installed using the RedHat RPM distribution, just use the init.d script to do it all for you: /etc/rc.d/init.d/MailScanner start (or on RedHat systems just service MailScanner start) If not using the RedHat RPM distribution, then 1. Start Postfix postfix start 2. Start MailScanner check_MailScanner Thanks, Jerry From Kevin_Miller at ci.juneau.ak.us Thu Nov 15 17:22:48 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Thu Nov 15 17:22:20 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: eclipsem@optusnet.com.au wrote: > > Then what is the point of all the starting spam checks and starting > virus scanning log entries, > thats fine here on local messages, but does not answer the main issue > we have on our script generated messages where it does in fact add > the headers to the email and clearly ignores the whitelists You're probably long gone now, but I'll throw in my $.02 anyway. If I'm on the right track, it may be instructive for others. If I'm not, maybe someone will correct me and that will be instructive for me and others. Everyone wins. Well, except you, since you're long gone. ;-) I suspect that the log entries are due to the flow of MailScanner. It processes things in batches. It may be a batch of one if there's only one message in /var/spool/mqueue.in, or many more. It doesn't know whether a message is whitelisted or not until it examines it but since it may be opening a batch of messages at once, it creates the log entry; the entry refers to the batch process, not the individual message I suspect. Only when it has looked at that particular message does it know that it's whitelisted. That happens after the previous entry has already been written syslog. Now, mind you, I'm not the author of the code. Matter of fact, I've never even looked at the code beyond the conf file. Homey don't do perl. Wish I did, but I'm old and cranky and would rather be out in my shop woodworking in my spare time at home and don't have time at work to learn it. Nevertheless, with my simple understanding of the process flow in MS I think the above could likely be the culprit. Could be way off base too. All I can say for sure is my advice is worth at least what you paid for it. HTH... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From martinh at solidstatelogic.com Thu Nov 15 17:36:59 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 15 17:37:04 2007 Subject: New installation configuration question. In-Reply-To: <641E82DC34CF514F82C95407D253E37A01176DE4@MSGMROCLS2WIN.DMN1.FMR.COM> Message-ID: Jerry Anything in /var/log/maillog? Also try "MailScanner --debug" and see if you get any clues. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Owens, Jerry > Sent: 15 November 2007 17:12 > To: mailscanner@lists.mailscanner.info > Subject: New installation configuration question. > > I have just built an Ubuntu server to process my personal mail. I > installed it using a guide at: > http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using > postfix and courrier to process mail. I installed and configured these and > verified that I could send myself a test message. I then installed > MailScanner using apt-get which installed version 4.46.2-3. I configured > mailscanner to work with postfix from the using postfix page in the > mailscanner documentation. All my mail is coming into > /var/spool/postfix/hold and sitting. It is not getting delivered to me. > Would this likely be a configuration issue with mailscanner or postfix? > Here are the canges I made. > > > How to Set Up Postfix for MailScanner Use > > > 1. Install Postfix version 2 and get it all working. > 2. Stop Postfix using a command > postfix stop > 3. Make sure you have the chroot jail set up in /var/spool/postfix. You > should be able to see "etc", "usr" and "lib" directories inside > /var/spool/postfix). If you haven't got the chroot jail setup already, > then look in the "examples" directory of the Postfix documentation and you > will find a script in there to set up it up for your operating system. If > you can't find that, then see the "Problems or Errors" section further > down this page. > 4. At this point, things change from the setup for other MTAs as we can > make it run with just one copy of Postfix, and let Postfix do the "split > MTA" setup for us. > 5. In the Postfix configuration file /etc/postfix/main.cf add this > line: > header_checks = regexp:/etc/postfix/header_checks > 6. In the file /etc/postfix/header_checks add this line: > /^Received:/ HOLD > The effect of this is to tell Postfix to move all messages to the > HOLD queue. > > > How to Set up MailScanner for Use with Postfix > > > In your MailScanner.conf file (probably in /etc/MailScanner or > /opt/MailScanner/etc), there are 5 settings you need to change. They are > all really near the top of the file. The settings are > > Run As User = postfix > Run As Group = postfix > Incoming Queue Dir = /var/spool/postfix/hold > Outgoing Queue Dir = /var/spool/postfix/incoming > MTA = postfix > > > You will need to ensure that the user "postfix" can write to > /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: > > chown postfix.postfix /var/spool/MailScanner/incoming > chown postfix.postfix /var/spool/MailScanner/quarantine > > If you upgrade your copy of MailScanner, unfortunately these directories > will be changed back to being owned by root, so you will have to do those > 2 commands again. > > > Starting It All Running > > If on a system installed using the RedHat RPM distribution, just use the > init.d script to do it all for you: > /etc/rc.d/init.d/MailScanner start > (or on RedHat systems just service MailScanner start) If not using the > RedHat RPM distribution, then > > 1. Start Postfix > postfix start > 2. Start MailScanner > check_MailScanner > > > Thanks, > > Jerry ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From steve.freegard at fsl.com Thu Nov 15 17:50:13 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Thu Nov 15 17:50:06 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1185.73140721328$1195137688@news.gmane.org> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> Message-ID: <473C86D5.2010100@fsl.com> Hi Edward, Edward Prendergast wrote: > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. Ok - sounds like Bayes is a factor that is causing the slowness. Do you have Bayes in MySQL or DB_File? If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in spam.assassin.prefs.conf as from experience it will reduce the lock contention and speed-up batch processing considerably. Kind regards, Steve. -- Steve Freegard Fort Systems Ltd. From MailScanner at ecs.soton.ac.uk Thu Nov 15 18:13:04 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 18:13:51 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C86D5.2010100@fsl.com> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> Message-ID: <473C8C30.3080709@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Can someone add that to the Wiki please? This is worth knowing! Steve Freegard wrote: > Hi Edward, > > Edward Prendergast wrote: >> The queue seems to go up with the load. By the time the load is >> around 10 >> the queue starts to climb without any sign of going down. It usually >> reaches >> the 300 mark within half an hour to an hour, but has gone up as far as >> 3,000. When I turn bayes off the load goes down and mail queues start >> becoming manageable again. > > Ok - sounds like Bayes is a factor that is causing the slowness. Do > you have Bayes in MySQL or DB_File? > > If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in > spam.assassin.prefs.conf as from experience it will reduce the lock > contention and speed-up batch processing considerably. > > Kind regards, > Steve. > > -- > Steve Freegard > Fort Systems Ltd. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHPIxBEfZZRxQVtlQRArAoAKCWHH4jrtKoI0PCXXtdoyn6RnrqIQCdEx+z adTMf9eGt6Tw3GCD1WCW4BE= =QzLJ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Thu Nov 15 18:45:51 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 15 18:45:55 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4075316646211036157@unknownmsgid> References: <473C2508.6020901@nerc.ac.uk> <4075316646211036157@unknownmsgid> Message-ID: <223f97700711151045l7895a4bbj45bc94c2cb95dbe8@mail.gmail.com> On 15/11/2007, Edward Prendergast wrote: > > Any advice from the vast pool of MailScanner experience would be greatly > > appreciated. > > >> Are you queues actually building up or are you just concerned with the > >> load average? > > In reply to Greg and Julian: > > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. > > Our users largely use POP3, with a few using IMAP through squirrelmail. > Their mailboxes usually tend to contain around 300 messages. > > Here's how vmstat looks now with bayes enabled: > # vmstat 10 5 > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 > 10 > 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 > 39 > 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 > 40 > 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 > 46 About the only really useful vmstat info is that you have a small swap activity. si and so should be 0. So the timetested advice "Add more RAM" holds true for you. One can guess that a fair amount of I/O is going on, just plain waiting... Hence the idle values... Investigating that might be useful. Guess 1) would be bayes (which might be related to locking or disk IO speed), guess 2) would be network (most likely DNS (caching only DNS?) or a dead RBL or somesuch). Oh, I see Steve message. Good thing to try. And add some more RAM... Or split of some of the workload to another box;-). > It looks to me like there might be some thrashing going on. Thrashing is usually an audible phenomenon... Have you been listening to your HDDs lately?:-). Some swap activity, yes, but thrashing... Well, perhaps:). > At this level, the queue looks like this: > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages > waiting > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, > 38032 bytes Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From uxbod at splatnix.net Thu Nov 15 19:49:20 2007 From: uxbod at splatnix.net (UxBoD) Date: Thu Nov 15 19:40:00 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711151045l7895a4bbj45bc94c2cb95dbe8@mail.gmail.com> Message-ID: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> also what type of filesystem is the Bayes on, if it is in a file, is journaling switched on etc etc ... to be honest since switching it into MySQL I have been very pleased with the performance. but as everybody says, split out your application types and up the RAM. RAM is so cheap these days. I advised the company I am contracted at to go for 8GB RAM. Its a dual AMD Opteron aswell so I can throw anything at it. Most messages are pinged at MTA level (love Postfix) and LDAP lookups to LotusNotes. We process about 150k msgs/pd on both MTAs and we have a load average of 1.2 :) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Glenn Steen" To: "MailScanner discussion" Sent: Thursday, November 15, 2007 6:45:51 PM (GMT) Europe/London Subject: Re: Minimum hardware capacity for 35k e-mail scans/day On 15/11/2007, Edward Prendergast wrote: > > Any advice from the vast pool of MailScanner experience would be greatly > > appreciated. > > >> Are you queues actually building up or are you just concerned with the > >> load average? > > In reply to Greg and Julian: > > The queue seems to go up with the load. By the time the load is around 10 > the queue starts to climb without any sign of going down. It usually reaches > the 300 mark within half an hour to an hour, but has gone up as far as > 3,000. When I turn bayes off the load goes down and mail queues start > becoming manageable again. > > Our users largely use POP3, with a few using IMAP through squirrelmail. > Their mailboxes usually tend to contain around 300 messages. > > Here's how vmstat looks now with bayes enabled: > # vmstat 10 5 > procs -----------memory---------- ---swap-- -----io---- --system-- > ----cpu---- > r b swpd free buff cache si so bi bo in cs us sy id > wa > 0 5 377144 682732 11324 90488 1 0 4 1 0 0 15 5 70 > 10 > 1 12 377056 723572 12468 94280 47 2 2130 725 1475 795 12 4 45 > 39 > 1 4 376984 668068 15100 101712 53 15 2215 778 1486 759 7 3 50 > 40 > 1 5 377016 704180 13952 108476 56 4 2127 1596 1500 997 11 4 39 > 46 About the only really useful vmstat info is that you have a small swap activity. si and so should be 0. So the timetested advice "Add more RAM" holds true for you. One can guess that a fair amount of I/O is going on, just plain waiting... Hence the idle values... Investigating that might be useful. Guess 1) would be bayes (which might be related to locking or disk IO speed), guess 2) would be network (most likely DNS (caching only DNS?) or a dead RBL or somesuch). Oh, I see Steve message. Good thing to try. And add some more RAM... Or split of some of the workload to another box;-). > It looks to me like there might be some thrashing going on. Thrashing is usually an audible phenomenon... Have you been listening to your HDDs lately?:-). Some swap activity, yes, but thrashing... Well, perhaps:). > At this level, the queue looks like this: > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Found 2697 messages > waiting > Nov 15 14:32:36 server6 MailScanner[8106]: New Batch: Scanning 10 messages, > 38032 bytes Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Thu Nov 15 19:57:52 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 19:58:14 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C8C30.3080709@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> Message-ID: <473CA4C0.9070908@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Also, is it worth me changing the default spam.assassin.prefs.conf file to set this on all new installations? Or should I specifically *not* change to this setting for some good reason? Thanks for your opinions, Jules. Julian Field wrote: > * PGP Signed: 11/15/07 at 18:13:21 > > Can someone add that to the Wiki please? > This is worth knowing! > > Steve Freegard wrote: >> Hi Edward, >> >> Edward Prendergast wrote: >>> The queue seems to go up with the load. By the time the load is >>> around 10 >>> the queue starts to climb without any sign of going down. It usually >>> reaches >>> the 300 mark within half an hour to an hour, but has gone up as far as >>> 3,000. When I turn bayes off the load goes down and mail queues start >>> becoming manageable again. >> >> Ok - sounds like Bayes is a factor that is causing the slowness. Do >> you have Bayes in MySQL or DB_File? >> >> If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in >> spam.assassin.prefs.conf as from experience it will reduce the lock >> contention and speed-up batch processing considerably. >> >> Kind regards, >> Steve. >> >> -- >> Steve Freegard >> Fort Systems Ltd. > > Jules > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHPKTCEfZZRxQVtlQRAjs7AKCW9IKy/nt+pWlJv/VqfY/kaA3W0gCgpYz6 mWLoILZs78CE6SJswSS4SSA= =ANY1 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From steve.freegard at fsl.com Thu Nov 15 20:17:06 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Thu Nov 15 20:17:00 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CA4C0.9070908@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> Message-ID: <473CA942.9000805@fsl.com> Hi Jules, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Also, is it worth me changing the default spam.assassin.prefs.conf file > to set this on all new installations? I'm neutral for a change to spam.assassin.prefs.conf - it does more good than harm IMO and is something I frequently change when tuning systems, but it might be best left as a tuning option for the admin to decide. > Or should I specifically *not* change to this setting for some good reason? From the docs: If this option is set, whenever SpamAssassin does Bayes learning, it will put the information into the journal instead of directly into the database. This lowers contention for locking the database to execute an update, but will also cause more access to the journal and cause a delay before the updates are actually com- mitted to the Bayes database. Cheers, Steve. From Denis.Beauchemin at USherbrooke.ca Thu Nov 15 20:16:55 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Thu Nov 15 20:18:34 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CA4C0.9070908@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> Message-ID: <473CA937.2040305@USherbrooke.ca> Julian Field a ?crit : > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Also, is it worth me changing the default spam.assassin.prefs.conf file > to set this on all new installations? > > Or should I specifically *not* change to this setting for some good reason? > > Thanks for your opinions, > Jules. > > Julian Field wrote: > >> * PGP Signed: 11/15/07 at 18:13:21 >> >> Can someone add that to the Wiki please? >> This is worth knowing! >> >> Steve Freegard wrote: >> >>> Hi Edward, >>> >>> Edward Prendergast wrote: >>> >>>> The queue seems to go up with the load. By the time the load is >>>> around 10 >>>> the queue starts to climb without any sign of going down. It usually >>>> reaches >>>> the 300 mark within half an hour to an hour, but has gone up as far as >>>> 3,000. When I turn bayes off the load goes down and mail queues start >>>> becoming manageable again. >>>> >>> Ok - sounds like Bayes is a factor that is causing the slowness. Do >>> you have Bayes in MySQL or DB_File? >>> >>> If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in >>> spam.assassin.prefs.conf as from experience it will reduce the lock >>> contention and speed-up batch processing considerably. >>> >>> Kind regards, >>> Steve. >>> >>> -- >>> Steve Freegard >>> Fort Systems Ltd. >>> >> Jules >> >> > > > Julian, According to the man page: bayes_learn_to_journal (default: 0) If this option is set, whenever SpamAssassin does Bayes learning, it will put the information into the journal instead of directly into the database. This lowers contention for locking the database to execute an update, but will also cause more access to the journal and cause a delay before the updates are actually committed to the Bayes database. After reading this, I was not under the impression I should turn it on on my servers... Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From jerry.owens at FMR.COM Thu Nov 15 20:30:34 2007 From: jerry.owens at FMR.COM (Owens, Jerry) Date: Thu Nov 15 20:31:45 2007 Subject: New installation configuration question. References: Message-ID: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> Thanks for the reply. Here is what I had in /var/log/mail.log. It was complaining about a couple of directories not existing. I created those and restarted everything. I then sent a test message to myself to see if it would get through. I see gmail connecting and delivering the message, but it is still in the hold directory. I tried running MailScanner --debug, but the only option it will take is -v for version listing. Is there an easier way to set this up? All I really need is to be able to filter the mail on my server for spam. I am have one machine to use for the mail server and spam filter. Thanks, Jerry Nov 15 11:27:16 gandalf MailScanner[4622]: MailScanner E-Mail Virus Scanner version 4.46.2 starting... Nov 15 11:27:16 gandalf MailScanner[4622]: Could not read file /var/run/MailScanner/MailScanner.pid Nov 15 11:27:16 gandalf MailScanner[4622]: Error in line 160, file "/var/run/MailScanner/MailScanner.pid" for pidfile does not exist (or can not be read) Nov 15 11:27:16 gandalf MailScanner[4622]: Read 676 hostnames from the phishing whitelist Nov 15 11:27:16 gandalf MailScanner[4622]: Using locktype = flock Nov 15 11:27:43 gandalf postfix/master[4172]: terminating on signal 15 Nov 15 11:27:51 gandalf postfix/master[4732]: daemon started -- version 2.4.5, configuration /etc/postfix Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 root@gandalf:/var/log# tail -f mail.log Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 Nov 15 14:52:24 gandalf postfix/smtpd[4875]: connect from rn-out-0910.google.com[64.233.170.191] Nov 15 14:52:24 gandalf postfix/smtpd[4875]: 8484BD9C07A: client=rn-out-0910.google.com[64.233.170.191] Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: hold: header Received: from rn-out-0102.google.com (rn-out-0910.google.com [64.233.170.191])??by server1.example.com (Postfix) with ESMTP id 8484BD9C07A??for ; Thu, 15 Nov 2007 14:52:2 from rn-out-0910.google.com[64.233.170.191]; from= to= proto=ESMTP helo= Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: message-id=<630adb030711151152n6d69c531w150b546242cc5be4@mail.gmail.com> Nov 15 14:52:54 gandalf postfix/smtpd[4875]: disconnect from rn-out-0910.google.com[64.233.170.191] Nov 15 14:53:43 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] Nov 15 14:53:46 gandalf imaplogin: chdir Maildir: No such file or directory Nov 15 14:53:55 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] Nov 15 14:53:57 gandalf imaplogin: chdir Maildir: No such file or directory Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection rate 1/60s for (smtp:64.233.170.191) at Nov 15 14:52:24 Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection count 1 for (smtp:64.233.170.191) at Nov 15 14:52:24 Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max cache size 1 at Nov 15 14:52:24 -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info on behalf of Martin.Hepworth Sent: Thu 11/15/2007 12:36 PM To: MailScanner discussion Cc: Subject: RE: New installation configuration question. Jerry Anything in /var/log/maillog? Also try "MailScanner --debug" and see if you get any clues. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Owens, Jerry > Sent: 15 November 2007 17:12 > To: mailscanner@lists.mailscanner.info > Subject: New installation configuration question. > > I have just built an Ubuntu server to process my personal mail. I > installed it using a guide at: > http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using > postfix and courrier to process mail. I installed and configured these and > verified that I could send myself a test message. I then installed > MailScanner using apt-get which installed version 4.46.2-3. I configured > mailscanner to work with postfix from the using postfix page in the > mailscanner documentation. All my mail is coming into > /var/spool/postfix/hold and sitting. It is not getting delivered to me. > Would this likely be a configuration issue with mailscanner or postfix? > Here are the canges I made. > > > How to Set Up Postfix for MailScanner Use > > > 1. Install Postfix version 2 and get it all working. > 2. Stop Postfix using a command > postfix stop > 3. Make sure you have the chroot jail set up in /var/spool/postfix. You > should be able to see "etc", "usr" and "lib" directories inside > /var/spool/postfix). If you haven't got the chroot jail setup already, > then look in the "examples" directory of the Postfix documentation and you > will find a script in there to set up it up for your operating system. If > you can't find that, then see the "Problems or Errors" section further > down this page. > 4. At this point, things change from the setup for other MTAs as we can > make it run with just one copy of Postfix, and let Postfix do the "split > MTA" setup for us. > 5. In the Postfix configuration file /etc/postfix/main.cf add this > line: > header_checks = regexp:/etc/postfix/header_checks > 6. In the file /etc/postfix/header_checks add this line: > /^Received:/ HOLD > The effect of this is to tell Postfix to move all messages to the > HOLD queue. > > > How to Set up MailScanner for Use with Postfix > > > In your MailScanner.conf file (probably in /etc/MailScanner or > /opt/MailScanner/etc), there are 5 settings you need to change. They are > all really near the top of the file. The settings are > > Run As User = postfix > Run As Group = postfix > Incoming Queue Dir = /var/spool/postfix/hold > Outgoing Queue Dir = /var/spool/postfix/incoming > MTA = postfix > > > You will need to ensure that the user "postfix" can write to > /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: > > chown postfix.postfix /var/spool/MailScanner/incoming > chown postfix.postfix /var/spool/MailScanner/quarantine > > If you upgrade your copy of MailScanner, unfortunately these directories > will be changed back to being owned by root, so you will have to do those > 2 commands again. > > > Starting It All Running > > If on a system installed using the RedHat RPM distribution, just use the > init.d script to do it all for you: > /etc/rc.d/init.d/MailScanner start > (or on RedHat systems just service MailScanner start) If not using the > RedHat RPM distribution, then > > 1. Start Postfix > postfix start > 2. Start MailScanner > check_MailScanner > > > Thanks, > > Jerry ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/ms-tnef Size: 13298 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071115/a02cd9e3/attachment-0001.bin From MailScanner at ecs.soton.ac.uk Thu Nov 15 21:26:07 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 21:26:23 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CA942.9000805@fsl.com> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> Message-ID: <473CB96F.6080305@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Steve Freegard wrote: > Hi Jules, > > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Also, is it worth me changing the default spam.assassin.prefs.conf >> file to set this on all new installations? > > I'm neutral for a change to spam.assassin.prefs.conf - it does more > good than harm IMO and is something I frequently change when tuning > systems, but it might be best left as a tuning option for the admin to > decide. > >> Or should I specifically *not* change to this setting for some good >> reason? > > From the docs: > > If this option is set, whenever SpamAssassin does Bayes learning, > it will put the information into the journal instead of directly > into the database. This lowers contention for locking the > database to execute an update, but will also cause more access to > the journal and cause a delay before the updates are actually com- > mitted to the Bayes database. But when *does* the journal get committed to the Bayes database itself? Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHPLlwEfZZRxQVtlQRAq5jAKDicNdwm4nQRp9xBGUKT17OK11dfgCg6ii1 /UIpxeBKdxCkdbWB5iHwMHQ= =zKcq -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Thu Nov 15 21:30:26 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Thu Nov 15 21:30:39 2007 Subject: New installation configuration question. In-Reply-To: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> References: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> Message-ID: <473CBA72.9000505@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This looks to me to be a Postfix configuration problem, and not a MailScanner one. It is failing to recognise the address jowens@computeryardsale.net which it thinks should be local. Without the line in header_checks that sends mail to MailScanner, does the symptom change at all? What happens when you tell it to send a message to jowens@computeryardsale.net then? Jules. Owens, Jerry wrote: > Thanks for the reply. > > Here is what I had in /var/log/mail.log. It was complaining about a couple of directories not existing. I created those and restarted everything. I then sent a test message to myself to see if it would get through. I see gmail connecting and delivering the message, but it is still in the hold directory. I tried running MailScanner --debug, but the only option it will take is -v for version listing. Is there an easier way to set this up? All I really need is to be able to filter the mail on my server for spam. I am have one machine to use for the mail server and spam filter. > > Thanks, > > Jerry > > > Nov 15 11:27:16 gandalf MailScanner[4622]: MailScanner E-Mail Virus Scanner version 4.46.2 starting... > Nov 15 11:27:16 gandalf MailScanner[4622]: Could not read file /var/run/MailScanner/MailScanner.pid > Nov 15 11:27:16 gandalf MailScanner[4622]: Error in line 160, file "/var/run/MailScanner/MailScanner.pid" for pidfile does not exist (or can not be read) > Nov 15 11:27:16 gandalf MailScanner[4622]: Read 676 hostnames from the phishing whitelist > Nov 15 11:27:16 gandalf MailScanner[4622]: Using locktype = flock > Nov 15 11:27:43 gandalf postfix/master[4172]: terminating on signal 15 > Nov 15 11:27:51 gandalf postfix/master[4732]: daemon started -- version 2.4.5, configuration /etc/postfix > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= > Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 > root@gandalf:/var/log# tail -f mail.log > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: connect from badger02000.apple.com[17.254.6.112] > Nov 15 14:36:34 gandalf postfix/smtpd[4845]: NOQUEUE: reject: RCPT from badger02000.apple.com[17.254.6.112]: 550 5.1.1 : Recipient address rejected: User unknown in local recipient table; from= to= proto=ESMTP helo= > Nov 15 14:36:39 gandalf postfix/smtpd[4845]: disconnect from badger02000.apple.com[17.254.6.112] > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection rate 1/60s for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max connection count 1 for (smtp:17.254.6.112) at Nov 15 14:36:34 > Nov 15 14:39:59 gandalf postfix/anvil[4848]: statistics: max cache size 1 at Nov 15 14:36:34 > Nov 15 14:52:24 gandalf postfix/smtpd[4875]: connect from rn-out-0910.google.com[64.233.170.191] > Nov 15 14:52:24 gandalf postfix/smtpd[4875]: 8484BD9C07A: client=rn-out-0910.google.com[64.233.170.191] > Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: hold: header Received: from rn-out-0102.google.com (rn-out-0910.google.com [64.233.170.191])??by server1.example.com (Postfix) with ESMTP id 8484BD9C07A??for ; Thu, 15 Nov 2007 14:52:2 from rn-out-0910.google.com[64.233.170.191]; from= to= proto=ESMTP helo= > Nov 15 14:52:24 gandalf postfix/cleanup[4879]: 8484BD9C07A: message-id=<630adb030711151152n6d69c531w150b546242cc5be4@mail.gmail.com> > Nov 15 14:52:54 gandalf postfix/smtpd[4875]: disconnect from rn-out-0910.google.com[64.233.170.191] > Nov 15 14:53:43 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] > Nov 15 14:53:46 gandalf imaplogin: chdir Maildir: No such file or directory > Nov 15 14:53:55 gandalf imaplogin: Connection, ip=[::ffff:192.168.2.4] > Nov 15 14:53:57 gandalf imaplogin: chdir Maildir: No such file or directory > Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection rate 1/60s for (smtp:64.233.170.191) at Nov 15 14:52:24 > Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max connection count 1 for (smtp:64.233.170.191) at Nov 15 14:52:24 > Nov 15 14:56:14 gandalf postfix/anvil[4877]: statistics: max cache size 1 at Nov 15 14:52:24 > > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info on behalf of Martin.Hepworth > Sent: Thu 11/15/2007 12:36 PM > To: MailScanner discussion > Cc: > Subject: RE: New installation configuration question. > > > > Jerry > > Anything in /var/log/maillog? > > Also try "MailScanner --debug" and see if you get any clues. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Owens, Jerry > > Sent: 15 November 2007 17:12 > > To: mailscanner@lists.mailscanner.info > > Subject: New installation configuration question. > > > > I have just built an Ubuntu server to process my personal mail. I > > installed it using a guide at: > > http://www.howtoforge.com/perfect_setup_ubuntu_6.06. The setup is using > > postfix and courrier to process mail. I installed and configured these and > > verified that I could send myself a test message. I then installed > > MailScanner using apt-get which installed version 4.46.2-3. I configured > > mailscanner to work with postfix from the using postfix page in the > > mailscanner documentation. All my mail is coming into > > /var/spool/postfix/hold and sitting. It is not getting delivered to me. > > Would this likely be a configuration issue with mailscanner or postfix? > > Here are the canges I made. > > > > > > How to Set Up Postfix for MailScanner Use > > > > > > 1. Install Postfix version 2 and get it all working. > > 2. Stop Postfix using a command > > postfix stop > > 3. Make sure you have the chroot jail set up in /var/spool/postfix. You > > should be able to see "etc", "usr" and "lib" directories inside > > /var/spool/postfix). If you haven't got the chroot jail setup already, > > then look in the "examples" directory of the Postfix documentation and you > > will find a script in there to set up it up for your operating system. If > > you can't find that, then see the "Problems or Errors" section further > > down this page. > > 4. At this point, things change from the setup for other MTAs as we can > > make it run with just one copy of Postfix, and let Postfix do the "split > > MTA" setup for us. > > 5. In the Postfix configuration file /etc/postfix/main.cf add this > > line: > > header_checks = regexp:/etc/postfix/header_checks > > 6. In the file /etc/postfix/header_checks add this line: > > /^Received:/ HOLD > > The effect of this is to tell Postfix to move all messages to the > > HOLD queue. > > > > > > How to Set up MailScanner for Use with Postfix > > > > > > In your MailScanner.conf file (probably in /etc/MailScanner or > > /opt/MailScanner/etc), there are 5 settings you need to change. They are > > all really near the top of the file. The settings are > > > > Run As User = postfix > > Run As Group = postfix > > Incoming Queue Dir = /var/spool/postfix/hold > > Outgoing Queue Dir = /var/spool/postfix/incoming > > MTA = postfix > > > > > > You will need to ensure that the user "postfix" can write to > > /var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine: > > > > chown postfix.postfix /var/spool/MailScanner/incoming > > chown postfix.postfix /var/spool/MailScanner/quarantine > > > > If you upgrade your copy of MailScanner, unfortunately these directories > > will be changed back to being owned by root, so you will have to do those > > 2 commands again. > > > > > > Starting It All Running > > > > If on a system installed using the RedHat RPM distribution, just use the > > init.d script to do it all for you: > > /etc/rc.d/init.d/MailScanner start > > (or on RedHat systems just service MailScanner start) If not using the > > RedHat RPM distribution, then > > > > 1. Start Postfix > > postfix start > > 2. Start MailScanner > > check_MailScanner > > > > > > Thanks, > > > > Jerry > > > > > ********************************************************************** > Confidentiality : This e-mail and any attachments are intended for the > addressee only and may be confidential. If they come to you in error > you must take no action based on them, nor must you copy or show them > to anyone. Please advise the sender by replying to this e-mail > immediately and then delete the original from your computer. > Opinion : Any opinions expressed in this e-mail are entirely those of > the author and unless specifically stated to the contrary, are not > necessarily those of the author's employer. > Security Warning : Internet e-mail is not necessarily a secure > communications medium and can be subject to data corruption. We advise > that you consider this fact when e-mailing us. > Viruses : We have taken steps to ensure that this e-mail and any > attachments are free from known viruses but in keeping with good > computing practice, you should ensure that they are virus free. > > Red Lion 49 Ltd T/A Solid State Logic > Registered as a limited company in England and Wales > (Company No:5362730) > Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, > United Kingdom > ********************************************************************** > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: UTF-8 wj8DBQFHPLp0EfZZRxQVtlQRAqo6AJ4ipc8AYM4mf+3+96Qbxjxt3GCTCQCeI9oh Pi0vbo54sruJaSvO7yAJ88s= =IPen -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Thu Nov 15 21:43:50 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 15 21:45:33 2007 Subject: scanning rules In-Reply-To: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: on 11/14/2007 3:12 PM eclipsem@optusnet.com.au spake the following: > > > >> Hugo van der Kooij wrote: >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> eclipsem@optusnet.com.au wrote: >> >>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: >> from=, size=443, class=0, nrcpts=1, >> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, daemon=MTA, >> relay=[10.0.1.19] [10.0.1.19] >>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 >> messages, 892 bytes >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting >>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: >> to=X@optusnet.com.au, ctladdr= (1009/100), >> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, >> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 >> Message accepted for delivery) >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 >> messages >>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content >> Scanning: Starting >> >> It explicitly tells you it did NOT scan. (See the Unscanned: line) >> > > Then what is the point of all the starting spam checks and starting virus scanning log entries, > thats fine here on local messages, but does not answer the main issue we have on our script generated messages where it does in fact add the headers to the email and clearly ignores the whitelists > > Are you the programmer of mailscanner? if not how about you leave this for him or her to answer > > I have until COB today, or I have been told to reinstall MIMEDefang before I go home, guess it's time to start installing it now so I can enact it at 430 > We'll miss you if you have to go! BTW, this is the free support. Julian is not always available to answer every question as he also has a day job with bosses asking him for things. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Thu Nov 15 21:50:18 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 15 21:51:25 2007 Subject: scanning rules In-Reply-To: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> References: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> Message-ID: on 11/15/2007 3:38 AM eclipsem@optusnet.com.au spake the following: > So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. > > I also note you NIETHER you or your rude and arrogant hugo long term user commented on the real issue ans to mailscanner not whitelisting when told to given other rules read in at load time. > > Don't worry though, all your users can be led into a false sense of belief when they try debug your software, which wont be our problem as our MTA is now using MIMEDefang, working as it is documented. > > I hope this makes it to Google fast so people researching mailscanner can see what they can expect from you julian. > > and yes dont worry after I hit send here the next message is to mailman to remove myself > Yes mimedefang will work, but it won't process near the same amount of messages in a day. I'll have to see how long he is on the mimedefang list, and see how long it takes him to jump to amavisd when he hits his next roadblock. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From campbell at cnpapers.com Thu Nov 15 21:52:34 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Nov 15 21:52:39 2007 Subject: scanning rules In-Reply-To: References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> Message-ID: <473CBFA2.6010907@cnpapers.com> I'm not sure, but I believe his leaving has fixed the swapping on my server that I thought was a result of MS. Steve Scott Silva wrote: > on 11/14/2007 3:12 PM eclipsem@optusnet.com.au spake the following: >> >> >> >>> Hugo van der Kooij wrote: >>> >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> eclipsem@optusnet.com.au wrote: >>> >>>> Nov 15 08:44:37 exorcist sendmail[3538]: lAEMiaYp003538: >>> from=, size=443, class=0, nrcpts=1, >>> msgid=<4.64.0711150843470.22685@blacksabeth>, proto=ESMTP, >>> daemon=MTA, relay=[10.0.1.19] [10.0.1.19] >>>> Nov 15 08:44:38 exorcist MailScanner[3524]: New Batch: Scanning 1 >>> messages, 892 bytes >>>> Nov 15 08:44:39 exorcist MailScanner[3524]: Spam Checks: Starting >>>> Nov 15 08:44:39 exorcist sendmail[3544]: lAEMiaYp003538: >>> to=X@optusnet.com.au, ctladdr= (1009/100), >>> delay=00:00:02, xdelay=00:00:00, mailer=esmtp, pri=120443, >>> relay=[10.0.1.19] [10.0.1.19], dsn=2.0.0, stat=Sent (lAEMicrY022692 >>> Message accepted for delivery) >>>> Nov 15 08:44:39 exorcist MailScanner[3524]: Unscanned: Delivered 1 >>> messages >>>> Nov 15 08:44:39 exorcist MailScanner[3524]: Virus and Content >>> Scanning: Starting >>> >>> It explicitly tells you it did NOT scan. (See the Unscanned: line) >>> >> >> Then what is the point of all the starting spam checks and starting >> virus scanning log entries, >> thats fine here on local messages, but does not answer the main issue >> we have on our script generated messages where it does in fact add >> the headers to the email and clearly ignores the whitelists >> >> Are you the programmer of mailscanner? if not how about you leave >> this for him or her to answer >> >> I have until COB today, or I have been told to reinstall MIMEDefang >> before I go home, guess it's time to start installing it now so I can >> enact it at 430 >> > We'll miss you if you have to go! > BTW, this is the free support. Julian is not always available to > answer every question as he also has a day job with bosses asking him > for things. > From hvdkooij at vanderkooij.org Thu Nov 15 22:13:59 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 15 22:14:38 2007 Subject: scanning rules In-Reply-To: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> References: <200711151138.lAFBcZO7015486@mail14.syd.optusnet.com.au> Message-ID: <473CC4A7.7010804@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 eclipsem@optusnet.com.au wrote: > So, you want to charge to me 200 pounds for you to tell me why when things are bypassed it keeps logging that its doing these actions? I thought any programmer worth his grain of salt would not have things log when that section of code is not enabled, it is poor quality control and makes debugging hard. And they call the Dutch or Scottish tough people when it comes to spending. But even free software and free support seems to be too high a price for some. That is rather unfortunatly. Let's get on. He choose to move away and let us leave it at that. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHPMSlBvzDRVjxmYERAtH8AKCuqGvRR9cseARrB0jWHrPfcHeUQQCgro4z VEOm1FoKW6rRG2ooFXTXhds= =sisn -----END PGP SIGNATURE----- From richard.thomas at psysolutions.com Thu Nov 15 22:48:55 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Thu Nov 15 22:49:00 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <473C7B11.3020400@psysolutions.com> References: <473C7B11.3020400@psysolutions.com> Message-ID: <473CCCD7.4050705@psysolutions.com> Here's some more info on this: The message is definitely being received by Exim fine. Here is the output of a packet capture on the incoming SMTP connection:



. QUIT Note the two blank lines between the end of the text and the period. MailsScanner is picking this up, doing its magic and deposting it in the outqueue with a final line that does not end with a CRLF. Exim expects this CRLF to be present as it simply adds the period to the end (This makes sense if the queue usually works by storing anything up to the final period though some sanity checking would be a good thing). The message affected has been "Disarmed" and web bugs replaced with MailScanner warnings if that makes any difference. I would imagine this is likely to be a simple fix. Rich Richard Thomas wrote: > Our setup is that we have a mail server which is scanning emails using > exim4/mailscanner/spamassassin which then forwards to another server > which is just running just exim4. Most of the time, everything is > running well but occasionally, I am seeing SMTP data timeouts in the > logs of the receiving server. The issue seems to be that when the > scanning server sends to the target server, it is not correctly > putting the period on a line by itself. > > For example, here is the tail end of a file in the exim4 out queue: > > /td> > > (No CRLF at the end). > > Here is the hexdump of a packet capture on the target server: > > 0033220 t d > < / t d > < / t r > < / t > 0033240 a b l e > < / c e n t e r > < / > 0033260 b o d y > < / h t m l > . \r \n > 0033277 > > > To be honest, at this stage, I'm suspecting exim since it seems to me > that it should be able to reasonably handle this situation. But then > again, I'm not intimately familiar with the exim queue file format and > it could be that it expects it to be properly formatted and > MailScanner apparently *has* touched this file so I guess it's > possible that it has somehow stripped a required CRLF. I'm at the > early stages of troubleshooting at the moment so if anyone has any > insight on this, I'd be very grateful to here. > > I'll just note that this email was apparently received by the scanning > server with no issues. > > Rich From steve.freegard at fsl.com Thu Nov 15 23:08:28 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Thu Nov 15 23:08:21 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CB96F.6080305@ecs.soton.ac.uk> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> <473CB96F.6080305@ecs.soton.ac.uk> Message-ID: <473CD16C.4030600@fsl.com> Hi Jules, Julian Field wrote: > But when *does* the journal get committed to the Bayes database itself? Once per day or when the bayes_journal_max_size is exceeded (default is 100Kb) whichever is sooner, or manually via 'sa-learn --sync'. In reality I've never had issues with using this. Bayes is useful when it works, but if you have locking issues and your per-message scan times are >30 secs because of bayes updates, this makes a massive difference. Cheers, Steve. From mkellermann at net-com.de Fri Nov 16 07:13:23 2007 From: mkellermann at net-com.de (Matthias Kellermann) Date: Fri Nov 16 07:11:06 2007 Subject: per-user Spam settings with MySQL? Message-ID: <473D4313.3010801@net-com.de> Hi list, does anyone use MailScanner for per-user Spam scanning, where the user can define his own black- and whitelists? Is there a possibility to use MailScanner with MySQL? How do you solve individual per-user Spam settings with MailScanner? Matthias From J.Ede at birchenallhowden.co.uk Fri Nov 16 08:11:13 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Fri Nov 16 08:13:25 2007 Subject: per-user Spam settings with MySQL? In-Reply-To: <473D4313.3010801@net-com.de> References: <473D4313.3010801@net-com.de> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28676@server02.bhl.local> If you want white and blacklists with a MySQL based system with a nice web interface then try mailwatch http://mailwatch.sourceforge.net Jason -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Matthias Kellermann Sent: 16 November 2007 07:13 To: MailScanner discussion Subject: per-user Spam settings with MySQL? Hi list, does anyone use MailScanner for per-user Spam scanning, where the user can define his own black- and whitelists? Is there a possibility to use MailScanner with MySQL? How do you solve individual per-user Spam settings with MailScanner? Matthias -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From J.Ede at birchenallhowden.co.uk Fri Nov 16 08:15:46 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Fri Nov 16 08:16:06 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CD16C.4030600@fsl.com> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> <473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28677@server02.bhl.local> Steve, Have you any performance comparison between that and using mysql to hold the bayes? I moved from normal bayes db to mysql as it seemed much faster and I couldn't find a way to really speed up the bayes checks. So far it does seem much faster than it was (once I'd configured mysql a bit better than the default) Jason -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Freegard Sent: 15 November 2007 23:08 To: MailScanner discussion Subject: Re: Minimum hardware capacity for 35k e-mail scans/day Hi Jules, Julian Field wrote: > But when *does* the journal get committed to the Bayes database itself? Once per day or when the bayes_journal_max_size is exceeded (default is 100Kb) whichever is sooner, or manually via 'sa-learn --sync'. In reality I've never had issues with using this. Bayes is useful when it works, but if you have locking issues and your per-message scan times are >30 secs because of bayes updates, this makes a massive difference. Cheers, Steve. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Andreas.Kasenides at cs.ucy.ac.cy Fri Nov 16 08:39:34 2007 From: Andreas.Kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Fri Nov 16 08:39:36 2007 Subject: Where to file the "file" bug Message-ID: <473D5746.9000207@cs.ucy.ac.cy> Is there a place where I can report a bug? I have the same problem, reported ages ago, with the "file" command where MailScanner believes that a message is an MS-DOG executable (.exe, .com) while it is apparently only a .txt attachment or a forward which is sent as "inline" text. Apparently this happens very often with MS-Outlook mailers and with messages that contain characters other than the standard West European sets. Yes I have read a lot about this on this list. The problem has been placed on the shoulders of the "file" command erroneously reporting an executable file when it is not. Apparently this is not always true. In my case I have several messages which the file command reports as "RFC 822 mail text" yet MailScanner will not pass through. I am using CentOS 5 and MailScanner 4.63.8. Any help? since the only other alternative(??) is to completely disable the FileType detection? Thanks Andreas From glenn.steen at gmail.com Fri Nov 16 09:00:45 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 09:00:49 2007 Subject: New installation configuration question. In-Reply-To: <473CBA72.9000505@ecs.soton.ac.uk> References: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM> <473CBA72.9000505@ecs.soton.ac.uk> Message-ID: <223f97700711160100q770b9abfw39b96f27abeb89f0@mail.gmail.com> On 15/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > This looks to me to be a Postfix configuration problem, and not a > MailScanner one. > It is failing to recognise the address > jowens@computeryardsale.net > which it thinks should be local. > > Without the line in header_checks that sends mail to MailScanner, does > the symptom change at all? What happens when you tell it to send a > message to jowens@computeryardsale.net then? > > Jules. With that log, I don't see any real need to do that:-). It'll fail miserably then too... A "postconf -n" would be good here, as well as a word or two on how you _think_ you've set it... Is jowens a real user or a virtual one? Local or relay? Or did you already tell, and I'm just a sloppy reader?:-) Another thing: You are running a rather new Postfix version (2.4.5) and a rather old MailScanner (4.46.2)... There has been a bit of work done on the PF support for newer versions in MS, so you might want to *not* use that old debian package... Either use the tarball, or look for a newer .deb (I'm not quite sure which version is the latest debian... 4.55.10 seems a bit mouldy as well...). If you use the tarball, Jules provides the needed init script on the download page at http://www.mailscanner.info ... > Owens, Jerry wrote: (snip) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From martinh at solidstatelogic.com Fri Nov 16 09:07:50 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Fri Nov 16 09:07:54 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C8C30.3080709@ecs.soton.ac.uk> Message-ID: <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Jules Added a bit near the optimisation section.. "http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin" Which covers this and various other stuff I usually do too. Also added in a link to this from the SA recommendations page. Feel free to tidy up my English ;-) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Julian Field > Sent: 15 November 2007 18:13 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Can someone add that to the Wiki please? > This is worth knowing! > > Steve Freegard wrote: > > Hi Edward, > > > > Edward Prendergast wrote: > >> The queue seems to go up with the load. By the time the load is > >> around 10 > >> the queue starts to climb without any sign of going down. It usually > >> reaches > >> the 300 mark within half an hour to an hour, but has gone up as far as > >> 3,000. When I turn bayes off the load goes down and mail queues start > >> becoming manageable again. > > > > Ok - sounds like Bayes is a factor that is causing the slowness. Do > > you have Bayes in MySQL or DB_File? > > > > If DB_File then I would suggest setting 'bayes_learn_to_journal 1' in > > spam.assassin.prefs.conf as from experience it will reduce the lock > > contention and speed-up batch processing considerably. > > > > Kind regards, > > Steve. > > > > -- > > Steve Freegard > > Fort Systems Ltd. > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHPIxBEfZZRxQVtlQRArAoAKCWHH4jrtKoI0PCXXtdoyn6RnrqIQCdEx+z > adTMf9eGt6Tw3GCD1WCW4BE= > =QzLJ > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From glenn.steen at gmail.com Fri Nov 16 09:10:22 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 09:10:25 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <473CCCD7.4050705@psysolutions.com> References: <473C7B11.3020400@psysolutions.com> <473CCCD7.4050705@psysolutions.com> Message-ID: <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> On 15/11/2007, Richard Thomas wrote: > Here's some more info on this: > > The message is definitely being received by Exim fine. Here is the > output of a packet capture on the incoming SMTP connection: > > WIDTH="1" HEIGHT > ="24" BORDER="0"> > > > >



> > > > . > QUIT > > Note the two blank lines between the end of the text and the period. > MailsScanner is picking this up, doing its magic and deposting it in the > outqueue with a final line that does not end with a CRLF. Exim expects > this CRLF to be present as it simply adds the period to the end (This > makes sense if the queue usually works by storing anything up to the > final period though some sanity checking would be a good thing). > > The message affected has been "Disarmed" and web bugs replaced with > MailScanner warnings if that makes any difference. I would imagine this > is likely to be a simple fix. > > Rich > Did you mention which version of MS you use? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From shuttlebox at gmail.com Fri Nov 16 09:14:17 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 16 09:14:18 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473CD16C.4030600@fsl.com> References: <473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org> <473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk> <473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com> <473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> Message-ID: <625385e30711160114i4ccac627he5b977d0ab17bc88@mail.gmail.com> On Nov 16, 2007 12:08 AM, Steve Freegard wrote: > Hi Jules, > > Julian Field wrote: > > But when *does* the journal get committed to the Bayes database itself? > > Once per day or when the bayes_journal_max_size is exceeded (default is > 100Kb) whichever is sooner, or manually via 'sa-learn --sync'. > > In reality I've never had issues with using this. Bayes is useful when > it works, but if you have locking issues and your per-message scan times > are >30 secs because of bayes updates, this makes a massive difference. If one worries about committing new tokens only once a day one could just add an hourly cron job with "sa-learn --sync". It typically takes less than a second to run. Note that "sa-learn --force-expire" which includes a sync takes a lot longer to run. -- /peter From glenn.steen at gmail.com Fri Nov 16 09:19:38 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 09:19:41 2007 Subject: Where to file the "file" bug In-Reply-To: <473D5746.9000207@cs.ucy.ac.cy> References: <473D5746.9000207@cs.ucy.ac.cy> Message-ID: <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> On 16/11/2007, Andreas Kasenides wrote: > Is there a place where I can report a bug? > I have the same problem, reported ages ago, with the "file" command > where MailScanner > believes that a message is an MS-DOG executable (.exe, .com) while it is > apparently only > a .txt attachment or a forward which is sent as "inline" text. > Apparently this happens very often > with MS-Outlook mailers and with messages that contain characters other > than the standard > West European sets. Yes I have read a lot about this on this list. > The problem has been placed on the shoulders of the "file" command > erroneously reporting an > executable file when it is not. > Apparently this is not always true. In my case I have several messages > which the file command > reports as "RFC 822 mail text" yet MailScanner will not pass through. > I am using CentOS 5 and MailScanner 4.63.8. > Any help? since the only other alternative(??) is to completely disable > the FileType detection? If you save only the body part and do a file on that (I imagine you might have a few in your quarantine, if you have things set up to quarantine infections), file WILL tell you another story. That it say the above on the "message" file is quite correct, but it wasn't that that it logged/reacted on;-). As to the proper place to report bugs in the file command, chack your package management system.... One can usually find relevant information there. But remember that if your distro/OS isn't extremely new, with very aggressive package selections, the file command you use is not the latest from the developer... So then the proper place to file a bug might be with the creator of said distro/OS. Since that route might lead to nothing in the short term, most people affected by this either "update" file to a newer version (perhaps even from source), or just edit/compile the magic file(s). > Thanks > Andreas Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From jan-peter at koopmann.eu Fri Nov 16 10:57:24 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Fri Nov 16 10:55:58 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk><473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org><473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk><473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com><473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28677@server02.bhl.local> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD161002D35E@DE-SEXB01RZ.intern.seceidos.de> > Have you any performance comparison between that and using mysql to > hold the bayes? I moved from normal bayes db to mysql as it seemed much > faster and I couldn't find a way to really speed up the bayes checks. > So far it does seem much faster than it was (once I'd configured mysql > a bit better than the default) What settings do you use/change for mysql then? From J.Ede at birchenallhowden.co.uk Fri Nov 16 11:07:53 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Fri Nov 16 11:08:15 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <5F9EB2B0731E5B4D88FC20780DFD161002D35E@DE-SEXB01RZ.intern.seceidos.de> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk><473C2508.6020901@nerc.ac.uk> <1185.73140721328$1195137688@news.gmane.org><473C86D5.2010100@fsl.com> <473C8C30.3080709@ecs.soton.ac.uk><473CA4C0.9070908@ecs.soton.ac.uk> <473CA942.9000805@fsl.com><473CB96F.6080305@ecs.soton.ac.uk> <473CD16C.4030600@fsl.com> <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28677@server02.bhl.local> <5F9EB2B0731E5B4D88FC20780DFD161002D35E@DE-SEXB01RZ.intern.seceidos.de> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28686@server02.bhl.local> I'd dropped one of the other configs my-large.cnf from /usr/share/mysql in as /etc/my.cnf. Used that as have other databases (mailwatch) running on this server. Jason -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter Sent: 16 November 2007 10:57 To: MailScanner discussion Subject: RE: Minimum hardware capacity for 35k e-mail scans/day > Have you any performance comparison between that and using mysql to > hold the bayes? I moved from normal bayes db to mysql as it seemed much > faster and I couldn't find a way to really speed up the bayes checks. > So far it does seem much faster than it was (once I'd configured mysql > a bit better than the default) What settings do you use/change for mysql then? -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From dave.list at pixelhammer.com Fri Nov 16 13:51:04 2007 From: dave.list at pixelhammer.com (DAve) Date: Fri Nov 16 13:51:38 2007 Subject: per-user Spam settings with MySQL? In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28676@server02.bhl.local> References: <473D4313.3010801@net-com.de> <4CAB0118AEC63A4FAAE77E6BCBDF760C16B28676@server02.bhl.local> Message-ID: <473DA048.8080200@pixelhammer.com> Jason Ede wrote: > If you want white and blacklists with a MySQL based system with a > nice web interface then try mailwatch http://mailwatch.sourceforge.net > > Jason If you want "per user" spam setting you also need to go read this section on the Wiki about splitting multiple recipient emails. It has been working for us just fine. http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:sendmail:how_to:split_mails_per_recipient There is also an entry for PostFix users. DAve > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Matthias Kellermann > Sent: 16 November 2007 07:13 > To: MailScanner discussion > Subject: per-user Spam settings with MySQL? > > Hi list, > > does anyone use MailScanner for per-user Spam scanning, where the user > can define his own black- and whitelists? Is there a possibility to use > MailScanner with MySQL? How do you solve individual per-user Spam > settings with MailScanner? > > Matthias > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- I've been asking Google for a Veteran's Day logo since 2000, maybe 1999. I was told they finally did a Veteran's Day logo, but none of the links I was given return anything but a normal Google logo. Sad, very sad. Maybe the Chinese Government didn't like it? From jerry.owens at fmr.com Fri Nov 16 14:57:25 2007 From: jerry.owens at fmr.com (Owens, Jerry) Date: Fri Nov 16 14:57:45 2007 Subject: New installation configuration question. References: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM><473CBA72.9000505@ecs.soton.ac.uk> <223f97700711160100q770b9abfw39b96f27abeb89f0@mail.gmail.com> Message-ID: <641E82DC34CF514F82C95407D253E37AD07D51@MSGMROCLS2WIN.DMN1.FMR.COM> Thanks for the information. I will try installing the new version of MailScanner this weekend. Jerry -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Glenn Steen Sent: Friday, November 16, 2007 4:01 AM To: MailScanner discussion Subject: Re: New installation configuration question. On 15/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > This looks to me to be a Postfix configuration problem, and not a > MailScanner one. > It is failing to recognise the address > jowens@computeryardsale.net > which it thinks should be local. > > Without the line in header_checks that sends mail to MailScanner, does > the symptom change at all? What happens when you tell it to send a > message to jowens@computeryardsale.net then? > > Jules. With that log, I don't see any real need to do that:-). It'll fail miserably then too... A "postconf -n" would be good here, as well as a word or two on how you _think_ you've set it... Is jowens a real user or a virtual one? Local or relay? Or did you already tell, and I'm just a sloppy reader?:-) Another thing: You are running a rather new Postfix version (2.4.5) and a rather old MailScanner (4.46.2)... There has been a bit of work done on the PF support for newer versions in MS, so you might want to *not* use that old debian package... Either use the tarball, or look for a newer .deb (I'm not quite sure which version is the latest debian... 4.55.10 seems a bit mouldy as well...). If you use the tarball, Jules provides the needed init script on the download page at http://www.mailscanner.info ... > Owens, Jerry wrote: (snip) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From gmatt at nerc.ac.uk Fri Nov 16 16:26:38 2007 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Fri Nov 16 16:29:39 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> Message-ID: <473DC4BE.6020208@nerc.ac.uk> UxBoD wrote: > also what type of filesystem is the Bayes on, if it is in a file, is > journaling switched on etc etc ... to be honest since switching it > into MySQL I have been very pleased with the performance. I find it amazing that mysql is faster than BerkeleyDB can anyone explain this? BerkeleyDB should knock the spots of a full featured RDBMS shouldnt it? GREG > Regards, > > --[ UxBoD ]-- -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From MailScanner at ecs.soton.ac.uk Fri Nov 16 17:02:42 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri Nov 16 17:03:02 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DC4BE.6020208@nerc.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> Message-ID: <473DCD32.2000400@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greg Matthews wrote: > UxBoD wrote: >> also what type of filesystem is the Bayes on, if it is in a file, is >> journaling switched on etc etc ... to be honest since switching it >> into MySQL I have been very pleased with the performance. > > I find it amazing that mysql is faster than BerkeleyDB can anyone > explain this? BerkeleyDB should knock the spots of a full featured > RDBMS shouldnt it? Only 1 process at a time can hold the BerkeleyDB open and write to it. Lots of processes can hold the RDBMS open at once. It's all down to file locking. > > GREG > >> Regards, >> >> --[ UxBoD ]-- > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: (pgp-secured) Charset: UTF-8 wj8DBQFHPc0yEfZZRxQVtlQRAldMAJ4qXhNd+hGhh5NoixEbFj1dI8bl9ACfZDj9 /8YLzMDBWIi/X48XdNaNIQw= =7p8a -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From steve.freegard at fsl.com Fri Nov 16 17:19:40 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 16 17:19:31 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DCD32.2000400@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> Message-ID: <473DD12C.9060402@fsl.com> Julian Field wrote: > Greg Matthews wrote: >> UxBoD wrote: >>> also what type of filesystem is the Bayes on, if it is in a file, is >>> journaling switched on etc etc ... to be honest since switching it >>> into MySQL I have been very pleased with the performance. >> I find it amazing that mysql is faster than BerkeleyDB can anyone >> explain this? BerkeleyDB should knock the spots of a full featured >> RDBMS shouldnt it? > Only 1 process at a time can hold the BerkeleyDB open and write to it. > Lots of processes can hold the RDBMS open at once. It's all down to file > locking. See http://wiki.apache.org/spamassassin/BayesBenchmarkResults Cheers, Steve. From gsummey at maf.org Fri Nov 16 18:36:29 2007 From: gsummey at maf.org (Garth Summey) Date: Fri Nov 16 18:36:34 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473C2360.9000001@utwente.nl> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> Message-ID: <1195238189.17634.1.camel@IT-D0722.us.maf.org> Hey Peter, What is this "consumernetwork" miracle spam blocker that you speak of? Google has never heard of it. G On Thu, 2007-11-15 at 11:45 +0100, Peter Peters wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Edward Prendergast wrote on 14-11-2007 17:16: > > > By 5pm we've usually scanned 35,000 mails, 10% of that legitimate. We reject > > at MTA based on greet-pause and invalid recipients. We have tried to reduce > > the amount of users with catch-alls to the absolute minimum. We went on a > > Mail optimisation overhaul a few months ago during which time MailScanner's > > working area was switched to tempfs and we started using compiled rules. > > We are getting over 300.000 messages (single from's) a day. And we block > another 360.000 at the MTA level (60.000 without reverse DNS, 100.000 > blocked consumernetwork, 30.000 non-excisting domains and the rest > non-excisting users). Only about 2000 messages are deleted by > MailScanner. The rest is delivered to the users. > > We don't use tmpfs. > Our system is an HP dual core Intel(R) Xeon(TM) CPU 3.00GHz with 4GB of > memory runnig Sendmail, MailScanner, Spamassassin with bayes, F-prot and > ClamAV. > > Before we started blocking on reverse DNS our incoming queue grew from > noon until midnight and it disappeared in 6 hours. With reverse DNS > blocking we don't see any raise in the incoming queue anymore. > > The load was usually between 10 and 15. But is now between 4 and 10. > > - -- > Peter Peters, Teamleider Unix/Linux-Beheer > ICT-Servicecentrum > Universiteit Twente, Postbus 217, 7500 AE Enschede > Telefoon 053 489 2301, Fax 053 489 2383, > P.G.M.Peters@utwente.nl, http://www.utwente.nl/icts > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2.2 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFHPCNfelLo80lrIdIRAmMLAJsEhWzBxUTWGSk47BIo/jCJNQsmsgCeKyHS > xkqLIvt11d1hoob3ScP7q5w= > =FGlo > -----END PGP SIGNATURE----- > From Kevin_Miller at ci.juneau.ak.us Fri Nov 16 18:48:16 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Fri Nov 16 18:47:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1195238189.17634.1.camel@IT-D0722.us.maf.org> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk><473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> Message-ID: Garth Summey wrote: > Hey Peter, > > What is this "consumernetwork" miracle spam blocker that you speak of? > > Google has never heard of it. I think he's referring to rejecting connections from cable and dsl users... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From ssilva at sgvwater.com Fri Nov 16 19:53:38 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 20:00:18 2007 Subject: scanning rules In-Reply-To: <473CBFA2.6010907@cnpapers.com> References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> <473CBFA2.6010907@cnpapers.com> Message-ID: on 11/15/2007 1:52 PM Steve Campbell spake the following: > I'm not sure, but I believe his leaving has fixed the swapping on my > server that I thought was a result of MS. > > Steve See! Another satisfied customer! ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From glenn.steen at gmail.com Fri Nov 16 20:34:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 16 20:34:28 2007 Subject: scanning rules In-Reply-To: References: <200711142312.lAENCd6j026408@mail16.syd.optusnet.com.au> <473CBFA2.6010907@cnpapers.com> Message-ID: <223f97700711161234q12aaf237v16de91e6fbc7d0c5@mail.gmail.com> On 16/11/2007, Scott Silva wrote: > on 11/15/2007 1:52 PM Steve Campbell spake the following: > > I'm not sure, but I believe his leaving has fixed the swapping on my > > server that I thought was a result of MS. > > > > Steve > See! Another satisfied customer! ;-P Yeah.... Too bad that Edward didn'thave the "luxury" of a few moments of calm troubleshooting (as if it ever is:-)... And now has joined the "not-so-satisfied"... I love MailScanner so much... I wan't everyone else to love it too:-):-) A few more ml of $BEVERAGE and I'll start making (bad, since I'm not native to English) poetry about it....:-D Mailbox overflows, MailScanner to the rescue! Badware is no more!> -- (Oooooh, worst Haiku _ever_. Sorry!:-) > -- > MailScanner is like deodorant... > You hope everybody uses it, and > you notice quickly if they don't!!!! > Amen! Cheers (sorry Hugo!) -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From ssilva at sgvwater.com Fri Nov 16 20:25:32 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 20:36:57 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1433a2a05982b8498def799291d5835e@solidstatelogic.com> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > Jules > > Added a bit near the optimisation section.. > > "http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin" > > Which covers this and various other stuff I usually do too. > > Also added in a link to this from the SA recommendations page. > > Feel free to tidy up my English ;-) > Your English was fine, in fact much better than some people I work with that have English as their 'first' language. I saw just a couple typos, key bounces, etc... -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From drew.marshall at technologytiger.net Fri Nov 16 21:25:29 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Fri Nov 16 21:25:44 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: On 16 Nov 2007, at 20:25, Scott Silva wrote: > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: >> Jules >> Added a bit near the optimisation section.. >> "http://wiki.mailscanner.info/doku.php? >> id=maq:index#getting_the_best_out_of_spamassassin" >> Which covers this and various other stuff I usually do too. >> Also added in a link to this from the SA recommendations page. >> Feel free to tidy up my English ;-) > Your English was fine, in fact much better than some people I work > with that have English as their 'first' language. I saw just a > couple typos, key bounces, etc... Hate to tell you Scott but Martin is about as English as they come (I believe) as he really is from England! :-) I ought to add, not that this should guarantee that his English is better than anyone else's but I am prepared to bet that both my and Martin's Swedish combined is about a million miles worse than Glenn's English (When you compare second language skills)! Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From ssilva at sgvwater.com Fri Nov 16 22:16:40 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 22:20:31 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: on 11/16/2007 1:25 PM Drew Marshall spake the following: > On 16 Nov 2007, at 20:25, Scott Silva wrote: > >> on 11/16/2007 1:07 AM Martin.Hepworth spake the following: >>> Jules >>> Added a bit near the optimisation section.. >>> "http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin" >>> >>> Which covers this and various other stuff I usually do too. >>> Also added in a link to this from the SA recommendations page. >>> Feel free to tidy up my English ;-) >> Your English was fine, in fact much better than some people I work >> with that have English as their 'first' language. I saw just a couple >> typos, key bounces, etc... > > Hate to tell you Scott but Martin is about as English as they come (I > believe) as he really is from England! :-) > > I ought to add, not that this should guarantee that his English is > better than anyone else's but I am prepared to bet that both my and > Martin's Swedish combined is about a million miles worse than Glenn's > English (When you compare second language skills)! > I wasn't thinking, just reacting to a "plea to correct my english". One of our data-entry operators is out with a broken ankle, so the rest of the department is pulling the load. With a department of seven, that can add up to quite a bit of extra load. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From drew.marshall at technologytiger.net Fri Nov 16 23:10:40 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Fri Nov 16 23:10:51 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: <28042.UVdcFwBXDAQ=.1195254640.squirrel@www.technologytiger.net> On Fri, November 16, 2007 22:16, Scott Silva wrote: > I wasn't thinking, just reacting to a "plea to correct my english". > One of our data-entry operators is out with a broken ankle, so the rest of the > department is pulling the load. With a department of seven, that can add up to > quite a bit of extra load. I can quite understand, it just appealed to my rather sad sense of humour. I hope the work load drops off soon. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From gsummey at maf.org Fri Nov 16 23:14:12 2007 From: gsummey at maf.org (Garth Summey) Date: Fri Nov 16 23:14:16 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> Message-ID: <1195254852.17634.5.camel@IT-D0722.us.maf.org> > Garth Summey wrote: > > Hey Peter, > > > > What is this "consumernetwork" miracle spam blocker that you speak of? > > > > Google has never heard of it. > > I think he's referring to rejecting connections from cable and dsl > users... > > > ...Kevin > -- > Kevin Miller Registered Linux User No: 307357 > CBJ MIS Dept. Network Systems Admin., Mail Admin. > 155 South Seward Street ph: (907) 586-0242 > Juneau, Alaska 99801 fax: (907 586-4500 Thanks for that... sounds like a tough policy to maintain. G From ssilva at sgvwater.com Fri Nov 16 23:48:36 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 23:48:54 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <28042.UVdcFwBXDAQ=.1195254640.squirrel@www.technologytiger.net> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <28042.UVdcFwBXDAQ=.1195254640.squirrel@www.technologytiger.net> Message-ID: on 11/16/2007 3:10 PM Drew Marshall spake the following: > On Fri, November 16, 2007 22:16, Scott Silva wrote: >> I wasn't thinking, just reacting to a "plea to correct my english". >> One of our data-entry operators is out with a broken ankle, so the rest of the >> department is pulling the load. With a department of seven, that can add up to >> quite a bit of extra load. > > I can quite understand, it just appealed to my rather sad sense of humour. I > hope the work load drops off soon. > > Drew It looks to be increasing. The injured worker will be off at least the rest of the year, and next week we will be short 2 more people for vacations. I feel the flu coming on! ;-D -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Fri Nov 16 23:51:16 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 16 23:55:10 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1195254852.17634.5.camel@IT-D0722.us.maf.org> References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> <1195254852.17634.5.camel@IT-D0722.us.maf.org> Message-ID: on 11/16/2007 3:14 PM Garth Summey spake the following: >> Garth Summey wrote: >>> Hey Peter, >>> >>> What is this "consumernetwork" miracle spam blocker that you speak of? >>> >>> Google has never heard of it. >> I think he's referring to rejecting connections from cable and dsl >> users... >> >> >> ...Kevin >> -- >> Kevin Miller Registered Linux User No: 307357 >> CBJ MIS Dept. Network Systems Admin., Mail Admin. >> 155 South Seward Street ph: (907) 586-0242 >> Juneau, Alaska 99801 fax: (907 586-4500 > > Thanks for that... sounds like a tough policy to maintain. > > G It shouldn't be that bad, if done right, as most consumer dsl and cable connection shouldn't be directly sending mail anyway. They "should" be using the providers smarthosts. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From drew.marshall at technologytiger.net Sat Nov 17 00:18:19 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 17 00:18:29 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <00b401c826d9$b18a03b0$149e0b10$@prendergast@netring.co.uk> <473C2360.9000001@utwente.nl> <1195238189.17634.1.camel@IT-D0722.us.maf.org> <1195254852.17634.5.camel@IT-D0722.us.maf.org> Message-ID: <27233.UVdcFwBXDAQ=.1195258699.squirrel@www.technologytiger.net> On Fri, November 16, 2007 23:51, Scott Silva wrote: >> Thanks for that... sounds like a tough policy to maintain. >> >> G > It shouldn't be that bad, if done right, as most consumer dsl and cable > connection shouldn't be directly sending mail anyway. They "should" be using > the providers smarthosts. Quite. While I don't block these directly, I am much more aggressive with checking the sender's details etc. It is also worth noting that the zen.spamhaus list (From the PBL list) also contains IP ranges of ISP customer's IP addresses that shouldn't be sending mail directly (As submitted by the ISP's) see here http://www.spamhaus.org/pbl/index.lasso This makes it rather easier to be more strict with the client connections. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From glenn.steen at gmail.com Sat Nov 17 14:20:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 17 14:20:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> Message-ID: <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> On 16/11/2007, Drew Marshall wrote: > On 16 Nov 2007, at 20:25, Scott Silva wrote: > > > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > >> Jules > >> Added a bit near the optimisation section.. > >> "http://wiki.mailscanner.info/doku.php? > >> id=maq:index#getting_the_best_out_of_spamassassin" > >> Which covers this and various other stuff I usually do too. > >> Also added in a link to this from the SA recommendations page. > >> Feel free to tidy up my English ;-) > > Your English was fine, in fact much better than some people I work > > with that have English as their 'first' language. I saw just a > > couple typos, key bounces, etc... > > Hate to tell you Scott but Martin is about as English as they come (I > believe) as he really is from England! :-) > > I ought to add, not that this should guarantee that his English is > better than anyone else's but I am prepared to bet that both my and > Martin's Swedish combined is about a million miles worse than Glenn's > English (When you compare second language skills)! :-) You make me blush...:-). Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no less....;-)... As far as I can discern, his skills aren't that bad either:-D Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you need know;-) > Drew > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 17 14:21:15 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 17 14:21:19 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> Message-ID: <223f97700711170621g61ed4d97mbf2e62af0132566d@mail.gmail.com> On 17/11/2007, Glenn Steen wrote: > On 16/11/2007, Drew Marshall wrote: > > On 16 Nov 2007, at 20:25, Scott Silva wrote: > > > > > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > > >> Jules > > >> Added a bit near the optimisation section.. > > >> "http://wiki.mailscanner.info/doku.php? > > >> id=maq:index#getting_the_best_out_of_spamassassin" > > >> Which covers this and various other stuff I usually do too. > > >> Also added in a link to this from the SA recommendations page. > > >> Feel free to tidy up my English ;-) > > > Your English was fine, in fact much better than some people I work > > > with that have English as their 'first' language. I saw just a > > > couple typos, key bounces, etc... > > > > Hate to tell you Scott but Martin is about as English as they come (I > > believe) as he really is from England! :-) > > > > I ought to add, not that this should guarantee that his English is > > better than anyone else's but I am prepared to bet that both my and > > Martin's Swedish combined is about a million miles worse than Glenn's > > English (When you compare second language skills)! > :-) > You make me blush...:-). > Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no > less....;-)... As far as I can discern, his skills aren't that bad > either:-D foret == forget.... > Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you > need know;-) > > > Drew > > > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From drew.marshall at technologytiger.net Sat Nov 17 18:32:21 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 17 18:32:33 2007 Subject: OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> Message-ID: <27C8F28A-256D-4048-90A6-4BC34C9549AE@technologytiger.net> On 17 Nov 2007, at 14:20, Glenn Steen wrote: > On 16/11/2007, Drew Marshall > wrote: >> On 16 Nov 2007, at 20:25, Scott Silva wrote: >> >>> on 11/16/2007 1:07 AM Martin.Hepworth spake the following: >>>> Jules >>>> Added a bit near the optimisation section.. >>>> "http://wiki.mailscanner.info/doku.php? >>>> id=maq:index#getting_the_best_out_of_spamassassin" >>>> Which covers this and various other stuff I usually do too. >>>> Also added in a link to this from the SA recommendations page. >>>> Feel free to tidy up my English ;-) >>> Your English was fine, in fact much better than some people I work >>> with that have English as their 'first' language. I saw just a >>> couple typos, key bounces, etc... >> >> Hate to tell you Scott but Martin is about as English as they come (I >> believe) as he really is from England! :-) >> >> I ought to add, not that this should guarantee that his English is >> better than anyone else's but I am prepared to bet that both my and >> Martin's Swedish combined is about a million miles worse than Glenn's >> English (When you compare second language skills)! > :-) > You make me blush...:-). > Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no > less....;-)... As far as I can discern, his skills aren't that bad > either:-D You are quite right and I have no doubt many, many others from various other countries (Kai & J-P from Germany, Hugo who I guess is Dutch and a whole host of others, who I apologise to for not personally having complimented their English but I am so far OT already :-) ) > > Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you > need know;-) And what would I get when using these (I just like to know if I am going to get a slap from a pretty girl by saying either of these to her!) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From jeremypennington at yahoo.com Sat Nov 17 21:04:53 2007 From: jeremypennington at yahoo.com (Mr jeremy pennington) Date: Sat Nov 17 21:04:55 2007 Subject: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Message-ID: <254145.78172.qm@web50111.mail.re2.yahoo.com> ----- Original Message ---- From: Ren? Berber To: mailscanner@lists.mailscanner.info Sent: Monday, November 12, 2007 11:14:49 PM Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 Mr jeremy pennington wrote: > Comparing the the two Log.pm, there is some differences for > "setlogsock". I tried several different changes, but was not able to > get anything to work. Any other thoughts? That's exactly what you have to modify, Log.pm: Line 71: Sys::Syslog::setlogsock('native'); If it doesn't work, you may have to update perl's Sys::Syslog (an old version didn't work at all on Solaris). -- Ren? Berber Thanks Rene! Changing line 71 to native worked. Jeremy ____________________________________________________________________________________ Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mail.yahoo.com/ From MailScanner at ecs.soton.ac.uk Sat Nov 17 21:24:12 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 17 21:24:27 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <254145.78172.qm@web50111.mail.re2.yahoo.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> Message-ID: <473F5BFC.7060902@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mr jeremy pennington wrote: > ----- Original Message ---- > From: Ren? Berber > To: mailscanner@lists.mailscanner.info > Sent: Monday, November 12, 2007 11:14:49 PM > Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 > > Mr jeremy pennington wrote: > > >> Comparing the the two Log.pm, there is some differences for >> "setlogsock". I tried several different changes, but was not able to >> get anything to work. Any other thoughts? >> > > That's exactly what you have to modify, Log.pm: > > Line 71: Sys::Syslog::setlogsock('native'); > > If it doesn't work, you may have to update perl's Sys::Syslog (an old > version didn't work at all on Solaris). > Is it true that on all Solaris systems this needs to be "native"? If so, I'll make the code do that by default on all Solaris systems. If it's not true, I'll make it an optional configuration option. Your thoughts gentlefolk please? Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj4DBQFHP1v+EfZZRxQVtlQRAvHhAJdLpAoJdcNkmfpb/+O0amVo+N6qAJ9h0aXv 0JJInMs7QWwdcAsRf+7k/A== =gQdT -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From shuttlebox at gmail.com Sat Nov 17 21:35:09 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Sat Nov 17 21:35:10 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F5BFC.7060902@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> Message-ID: <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> On Nov 17, 2007 10:24 PM, Julian Field wrote: > Is it true that on all Solaris systems this needs to be "native"? > If so, I'll make the code do that by default on all Solaris systems. > If it's not true, I'll make it an optional configuration option. I think a config option probably would be best since the socket type also affects how the log line is formatted so native might not be what everyone wants either. -- /peter From r.berber at computer.org Sat Nov 17 21:37:44 2007 From: r.berber at computer.org (=?ISO-8859-1?Q?Ren=E9_Berber?=) Date: Sat Nov 17 21:38:06 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F5BFC.7060902@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> Message-ID: Julian Field wrote: [snip] > Is it true that on all Solaris systems this needs to be "native"? > If so, I'll make the code do that by default on all Solaris systems. > If it's not true, I'll make it an optional configuration option. It works (tested) on Solaris 8, 9, and 10. The only thing that changes for me (between using the current MS default and this) is the format of the log entries; with "native" the log messages are in the same format as used by everything else (sendmail, imapd, etc.) -- that's the reason I always change Log.pm and clamav-autoupdate. -- Ren? Berber From iarteaga at cwpanama.net Sat Nov 17 22:26:23 2007 From: iarteaga at cwpanama.net (Ivan Arteaga) Date: Sat Nov 17 22:26:26 2007 Subject: Question about blacklists Message-ID: <473F6A8F.6090800@cwpanama.net> Hello List, I have defined some blacklists in my sendmail.mc, I would like to know if its possible to redirect all the mails blocked by these lists to an secific inbox instead of rejecting them? If so, I will appreciate any tip to do it. Regards, --Ivan. From MailScanner at ecs.soton.ac.uk Sat Nov 17 22:39:33 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sat Nov 17 22:39:49 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> Message-ID: <473F6DA5.30209@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 17, 2007 10:24 PM, Julian Field wrote: > >> Is it true that on all Solaris systems this needs to be "native"? >> If so, I'll make the code do that by default on all Solaris systems. >> If it's not true, I'll make it an optional configuration option. >> > > I think a config option probably would be best since the socket type > also affects how the log line is formatted so native might not be what > everyone wants either. > Okay, I have added a new optional configuration setting "Syslog Socket Type" which 99.9% of users should leave blank, and MailScanner will work it out for itself. However, you may want to set it to "native" on some Solaris systems. Does this solve the problem? P.S. Spotted the change in my signature? :-) Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHP22nEfZZRxQVtlQRAsaSAJ9+RVnDuYfT2hWN2nta9hDlhFggcQCeLi2i YfUq8AXcnmhitIMHiIdBRt0= =ku6z -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From r.berber at computer.org Sun Nov 18 01:01:05 2007 From: r.berber at computer.org (=?ISO-8859-1?Q?Ren=E9_Berber?=) Date: Sun Nov 18 01:01:28 2007 Subject: Question about blacklists In-Reply-To: <473F6A8F.6090800@cwpanama.net> References: <473F6A8F.6090800@cwpanama.net> Message-ID: Ivan Arteaga wrote: > I have defined some blacklists in my sendmail.mc, I would like to know > if its possible to redirect all the mails blocked by these lists to an > secific inbox instead of rejecting them? If so, I will appreciate any > tip to do it. Yes, you can quarantine the messages (not a mailbox but a directory). It's described in sendmail's cf/README: "dnsbl Turns on rejection, discarding, or quarantining of hosts found in a DNS based list. The first argument is used as the domain in which blocked hosts are listed. A second argument can be used to change the default error message, or select one of the operations `discard' and `quarantine'." ... " See also enhdnsbl for an enhanced version." ... You could look at the quarantined messages using tools like Webmin. All messages are in separate files, they are not in mailbox format, but you could then send them somewhere (not sure if Webmin supports something different than sending them to the original recipient; from a terminal is easy using the file as an attachment) or delete. -- Ren? Berber From jaearick at colby.edu Sun Nov 18 02:23:11 2007 From: jaearick at colby.edu (Jeff A. Earickson) Date: Sun Nov 18 02:23:21 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F5BFC.7060902@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> Message-ID: On Sat, 17 Nov 2007, Julian Field wrote: > Mr jeremy pennington wrote: >> ----- Original Message ---- >> From: Ren? Berber >> To: mailscanner@lists.mailscanner.info >> Sent: Monday, November 12, 2007 11:14:49 PM >> Subject: Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 >> >> Mr jeremy pennington wrote: >> >> >>> Comparing the the two Log.pm, there is some differences for >>> "setlogsock". I tried several different changes, but was not able to >>> get anything to work. Any other thoughts? >>> >> >> That's exactly what you have to modify, Log.pm: >> >> Line 71: Sys::Syslog::setlogsock('native'); >> >> If it doesn't work, you may have to update perl's Sys::Syslog (an old >> version didn't work at all on Solaris). >> > Is it true that on all Solaris systems this needs to be "native"? > If so, I'll make the code do that by default on all Solaris systems. > If it's not true, I'll make it an optional configuration option. > > Your thoughts gentlefolk please? Julian, I am running your stock-issue Log.pm (latest version of MS) on a Solaris 10 Sparc, and it works just fine. I have perl 5.8.8 (public domain, I built it) and Sys::Syslog (0.18) installed. Jeff Earickson Colby College From glenn.steen at gmail.com Sun Nov 18 14:07:54 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 14:07:59 2007 Subject: OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <27C8F28A-256D-4048-90A6-4BC34C9549AE@technologytiger.net> References: <473C8C30.3080709@ecs.soton.ac.uk> <1433a2a05982b8498def799291d5835e@solidstatelogic.com> <223f97700711170620y387990e7u62e0c2aa1d473376@mail.gmail.com> <27C8F28A-256D-4048-90A6-4BC34C9549AE@technologytiger.net> Message-ID: <223f97700711180607u36531e0drfec5424eb9b226a9@mail.gmail.com> On 17/11/2007, Drew Marshall wrote: > On 17 Nov 2007, at 14:20, Glenn Steen wrote: > > > On 16/11/2007, Drew Marshall > > wrote: > >> On 16 Nov 2007, at 20:25, Scott Silva wrote: > >> > >>> on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > >>>> Jules > >>>> Added a bit near the optimisation section.. > >>>> "http://wiki.mailscanner.info/doku.php? > >>>> id=maq:index#getting_the_best_out_of_spamassassin" > >>>> Which covers this and various other stuff I usually do too. > >>>> Also added in a link to this from the SA recommendations page. > >>>> Feel free to tidy up my English ;-) > >>> Your English was fine, in fact much better than some people I work > >>> with that have English as their 'first' language. I saw just a > >>> couple typos, key bounces, etc... > >> > >> Hate to tell you Scott but Martin is about as English as they come (I > >> believe) as he really is from England! :-) > >> > >> I ought to add, not that this should guarantee that his English is > >> better than anyone else's but I am prepared to bet that both my and > >> Martin's Swedish combined is about a million miles worse than Glenn's > >> English (When you compare second language skills)! > > :-) > > You make me blush...:-). > > Don't foret Shuttlebox a.k.a. Peter Bonivart (from Link?ping, no > > less....;-)... As far as I can discern, his skills aren't that bad > > either:-D > > You are quite right and I have no doubt many, many others from > various other countries (Kai & J-P from Germany, Hugo who I guess is > Dutch and a whole host of others, who I apologise to for not > personally having complimented their English but I am so far OT > already :-) ) True:-) > > > > Oh and remember: "Ja tack, en p?t?r", and "Sk?l" is basically all you > > need know;-) > > And what would I get when using these (I just like to know if I am > going to get a slap from a pretty girl by saying either of these to > her!) "Yes please, I'd like a refill" and "Cheers".... You'd have to be pretty inventive to get a slap for any of those:-D > Drew Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sun Nov 18 14:17:45 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 14:17:50 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <473F6DA5.30209@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> Message-ID: <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> On 17/11/2007, Julian Field wrote: (snip) > P.S. Spotted the change in my signature? :-) > > Jules > > - -- > Julian Field MEng CITP CEng Yes, more letters at the end of that line....:-):-) Do we have to genuflect even deeper now? :-D Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sun Nov 18 18:10:09 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 18:10:12 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> Message-ID: <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> On 18/11/2007, Glenn Steen wrote: > On 17/11/2007, Julian Field wrote: > (snip) > > P.S. Spotted the change in my signature? :-) > > > > Jules > > > > - -- > > Julian Field MEng CITP CEng > Yes, more letters at the end of that line....:-):-) > Do we have to genuflect even deeper now? :-D I of course meant to say "Congratulations on your achievement", of course. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From hvdkooij at vanderkooij.org Sun Nov 18 19:08:03 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 18 19:08:24 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> Message-ID: <47408D93.2010406@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Glenn Steen wrote: > On 18/11/2007, Glenn Steen wrote: >> On 17/11/2007, Julian Field wrote: >> (snip) >>> P.S. Spotted the change in my signature? :-) >>> >>> Jules >>> >>> - -- >>> Julian Field MEng CITP CEng >> Yes, more letters at the end of that line....:-):-) >> Do we have to genuflect even deeper now? :-D > I of course meant to say "Congratulations on your achievement", of course. Is there a translation for those not following the British educational system Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQI2PBvzDRVjxmYERArT+AKCI7cbDW4SDZrYzvZGTlN3UcXFkDwCgpWHb 2FJ4effusMKYfFHKP51vVaQ= =Ru5c -----END PGP SIGNATURE----- From glenn.steen at gmail.com Sun Nov 18 21:52:08 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 18 21:52:11 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <47408D93.2010406@vanderkooij.org> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> <47408D93.2010406@vanderkooij.org> Message-ID: <223f97700711181352tdbce6f5v902b8a724c0b7ead@mail.gmail.com> On 18/11/2007, Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Glenn Steen wrote: > > On 18/11/2007, Glenn Steen wrote: > >> On 17/11/2007, Julian Field wrote: > >> (snip) > >>> P.S. Spotted the change in my signature? :-) > >>> > >>> Jules > >>> > >>> - -- > >>> Julian Field MEng CITP CEng > >> Yes, more letters at the end of that line....:-):-) > >> Do we have to genuflect even deeper now? :-D > > I of course meant to say "Congratulations on your achievement", of course. > > Is there a translation for those not following the British educational > system > > Hugo. > Google is your friend.... First hit .... http://www.cphc.ac.uk/docs/presentations/roland_ibbett.pdf ... Gives a clue or two:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From MailScanner at ecs.soton.ac.uk Sun Nov 18 22:10:41 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Sun Nov 18 22:10:56 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <47408D93.2010406@vanderkooij.org> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> <47408D93.2010406@vanderkooij.org> Message-ID: <4740B861.3040009@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > * PGP Signed by an unknown key > > Glenn Steen wrote: > >> On 18/11/2007, Glenn Steen wrote: >> >>> On 17/11/2007, Julian Field wrote: >>> (snip) >>> >>>> P.S. Spotted the change in my signature? :-) >>>> >>>> Jules >>>> >>>> - -- >>>> Julian Field MEng CITP CEng >>>> >>> Yes, more letters at the end of that line....:-):-) >>> Do we have to genuflect even deeper now? :-D >>> >> I of course meant to say "Congratulations on your achievement", of course. >> > > Is there a translation for those not following the British educational > system > It's the Chartered Engineer status. You can't even apply for it unless you do the right accredited degree course, followed by a minimum of 10 years practical experience in the field. And when you do apply, it's a pig of an application form showing you how learned and developed your engineering skills in every job you ever did that was IT-related. And then you get a 1 hour grilling in a formal interview with 3 interviewers from the Engineering Council who ask you to demonstrate how you have applied all your engineering skills in a wide range of projects you have undertaken over the years. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQLhjEfZZRxQVtlQRAhZnAJ9J9C3a/hxyElT4WXI2T6axDv2HxQCeMDVF 9y+5dayX3PrjW3Ocr/EzA7E= =Xdxi -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hvdkooij at vanderkooij.org Sun Nov 18 22:59:50 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sun Nov 18 23:00:21 2007 Subject: Solaris syslog -- was Re: No Logging to Syslog: MailScanner 4.65.3-1 on Solaris 9 In-Reply-To: <4740B861.3040009@ecs.soton.ac.uk> References: <254145.78172.qm@web50111.mail.re2.yahoo.com> <473F5BFC.7060902@ecs.soton.ac.uk> <625385e30711171335q40b4b0b3v715a19597ca86a12@mail.gmail.com> <473F6DA5.30209@ecs.soton.ac.uk> <223f97700711180617x3a66c488l6c3a8d43e9e483af@mail.gmail.com> <223f97700711181010i2768bf64o60f7dce9441f3deb@mail.gmail.com> <47408D93.2010406@vanderkooij.org> <4740B861.3040009@ecs.soton.ac.uk> Message-ID: <4740C3E6.7090507@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Julian Field wrote: > > > Hugo van der Kooij wrote: >> * PGP Signed by an unknown key > >> Glenn Steen wrote: > >>> On 18/11/2007, Glenn Steen wrote: >>> >>>> On 17/11/2007, Julian Field wrote: >>>> (snip) >>>> >>>>> P.S. Spotted the change in my signature? :-) >>>>> >>>>> Jules >>>>> >>>>> - -- >>>>> Julian Field MEng CITP CEng >>>>> >>>> Yes, more letters at the end of that line....:-):-) >>>> Do we have to genuflect even deeper now? :-D >>>> >>> I of course meant to say "Congratulations on your achievement", of course. >>> >> Is there a translation for those not following the British educational >> system > > It's the Chartered Engineer status. You can't even apply for it unless > you do the right accredited degree course, followed by a minimum of 10 > years practical experience in the field. > > And when you do apply, it's a pig of an application form showing you how > learned and developed your engineering skills in every job you ever did > that was IT-related. And then you get a 1 hour grilling in a formal > interview with 3 interviewers from the Engineering Council who ask you > to demonstrate how you have applied all your engineering skills in a > wide range of projects you have undertaken over the years. Right. I never mastered the skill of learning to get a piece of paper. I simply can't be bothered to just for someone elses kicks. I learn because I want to know and if there happens to be an exam then the exam just sort of happens but I never learn just to pass that exam. As such the TLA/FLA thing in signatures also happen to escape my attention most of the times. In Jules case MailScanner is more of a credit holder to me. But that's just me. I just happen to work (or did work) for employers who think such papers in itself do not tell that much. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQMPlBvzDRVjxmYERAsajAJ4pafF10/mo8VhC9LP3gf+HB6dIFACffF16 7gueTtTn2+QQD5E2fulrx6o= =rljG -----END PGP SIGNATURE----- From iarteaga at cwpanama.net Mon Nov 19 01:02:35 2007 From: iarteaga at cwpanama.net (Ivan Arteaga) Date: Mon Nov 19 01:02:37 2007 Subject: Question about blacklists In-Reply-To: References: <473F6A8F.6090800@cwpanama.net> Message-ID: <4740E0AB.4020904@cwpanama.net> Ren? Berber wrote: > Ivan Arteaga wrote: > > >> I have defined some blacklists in my sendmail.mc, I would like to know >> if its possible to redirect all the mails blocked by these lists to an >> secific inbox instead of rejecting them? If so, I will appreciate any >> tip to do it. >> > > Yes, you can quarantine the messages (not a mailbox but a directory). > > It's described in sendmail's cf/README: > > "dnsbl Turns on rejection, discarding, or quarantining of hosts > found in a DNS based list. The first argument is used as > the domain in which blocked hosts are listed. A second > argument can be used to change the default error message, > or select one of the operations `discard' and `quarantine'." ... > " See also enhdnsbl for an enhanced version." ... > > You could look at the quarantined messages using tools like Webmin. All > messages are in separate files, they are not in mailbox format, but you > could then send them somewhere (not sure if Webmin supports something > different than sending them to the original recipient; from a terminal > is easy using the file as an attachment) or delete. > Thanks Rene for the info, I will try it and post back any comment. Regards, --Ivan. From gmatt at nerc.ac.uk Mon Nov 19 09:07:56 2007 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Mon Nov 19 09:11:37 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DD12C.9060402@fsl.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> Message-ID: <4741526C.7040902@nerc.ac.uk> Steve Freegard wrote: > Julian Field wrote: >> Only 1 process at a time can hold the BerkeleyDB open and write to it. >> Lots of processes can hold the RDBMS open at once. It's all down to >> file locking. > > See http://wiki.apache.org/spamassassin/BayesBenchmarkResults wow. Interesting stuff. So why does SA not use sdbm by default? > > Cheers, > Steve. -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From J.Ede at birchenallhowden.co.uk Mon Nov 19 09:26:10 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Mon Nov 19 09:28:43 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <473DD12C.9060402@fsl.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk>,<473DD12C.9060402@fsl.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C16B3BA3F@server02.bhl.local> I'm guessing those benchmark tests are for 1 process trying to get the lock... Also if its file locking thats the issue then if you've 1 or 2 MailScanner children then won't the berkeleyDB be faster and the advantages of SQL bayes will increase as the number of children increase (and sql means other machines can also access DB) Jason From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Freegard [steve.freegard@fsl.com] Sent: 16 November 2007 17:19 To: MailScanner discussion Subject: Re: Minimum hardware capacity for 35k e-mail scans/day Julian Field wrote: > Greg Matthews wrote: >> UxBoD wrote: >>> also what type of filesystem is the Bayes on, if it is in a file, is >>> journaling switched on etc etc ... to be honest since switching it >>> into MySQL I have been very pleased with the performance. >> I find it amazing that mysql is faster than BerkeleyDB can anyone >> explain this? BerkeleyDB should knock the spots of a full featured >> RDBMS shouldnt it? > Only 1 process at a time can hold the BerkeleyDB open and write to it. > Lots of processes can hold the RDBMS open at once. It's all down to file > locking. See http://wiki.apache.org/spamassassin/BayesBenchmarkResults Cheers, Steve. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Andreas.Kasenides at cs.ucy.ac.cy Mon Nov 19 09:30:13 2007 From: Andreas.Kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Mon Nov 19 09:30:14 2007 Subject: Where to file the "file" bug In-Reply-To: <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> References: <473D5746.9000207@cs.ucy.ac.cy> <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> Message-ID: <474157A5.3060408@cs.ucy.ac.cy> Thanks Glenn for your reply. Can you please elaborate on how I can save only the body part of a messafe so I can experiment with different "file" versions and configurations? I have many "messages" that cause this issue but could not get "file" to spit what I want. Or maybe explain how MailScanner does this internally, so I can duplicate its functionality. Now I am determined to follow through with this and provide at least a guide on which "file" versions or configs cause MailScanner to misbehave? Thanks Andreas Glenn Steen wrote: > On 16/11/2007, Andreas Kasenides wrote: > >> Is there a place where I can report a bug? >> I have the same problem, reported ages ago, with the "file" command >> where MailScanner >> believes that a message is an MS-DOG executable (.exe, .com) while it is >> apparently only >> a .txt attachment or a forward which is sent as "inline" text. >> Apparently this happens very often >> with MS-Outlook mailers and with messages that contain characters other >> than the standard >> West European sets. Yes I have read a lot about this on this list. >> The problem has been placed on the shoulders of the "file" command >> erroneously reporting an >> executable file when it is not. >> Apparently this is not always true. In my case I have several messages >> which the file command >> reports as "RFC 822 mail text" yet MailScanner will not pass through. >> I am using CentOS 5 and MailScanner 4.63.8. >> Any help? since the only other alternative(??) is to completely disable >> the FileType detection? >> > > If you save only the body part and do a file on that (I imagine you > might have a few in your quarantine, if you have things set up to > quarantine infections), file WILL tell you another story. > That it say the above on the "message" file is quite correct, but it > wasn't that that it logged/reacted on;-). > > As to the proper place to report bugs in the file command, chack your > package management system.... One can usually find relevant > information there. > But remember that if your distro/OS isn't extremely new, with very > aggressive package selections, the file command you use is not the > latest from the developer... So then the proper place to file a bug > might be with the creator of said distro/OS. > Since that route might lead to nothing in the short term, most people > affected by this either "update" file to a newer version (perhaps even > from source), or just edit/compile the magic file(s). > > >> Thanks >> Andreas >> > > Cheers > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071119/431129f6/attachment.html From martinh at solidstatelogic.com Mon Nov 19 09:43:17 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 09:43:14 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: Message-ID: Drew Well yes I'm from the UK, but my English grammer is terrible - results of a dodgy 1970's edukashun ;-) But as for my Swedish - well I won't starve (used to work for Swedish co. about 10 years ago), but it's no-where approaching the fluency Glenn has for English. But then anyone under 50 in Sweden/Holland seems to have a better command of the Ebglish language than I do.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Drew Marshall > Sent: 16 November 2007 21:25 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > On 16 Nov 2007, at 20:25, Scott Silva wrote: > > > on 11/16/2007 1:07 AM Martin.Hepworth spake the following: > >> Jules > >> Added a bit near the optimisation section.. > >> "http://wiki.mailscanner.info/doku.php? > >> id=maq:index#getting_the_best_out_of_spamassassin" > >> Which covers this and various other stuff I usually do too. > >> Also added in a link to this from the SA recommendations page. > >> Feel free to tidy up my English ;-) > > Your English was fine, in fact much better than some people I work > > with that have English as their 'first' language. I saw just a > > couple typos, key bounces, etc... > > Hate to tell you Scott but Martin is about as English as they come (I > believe) as he really is from England! :-) > > I ought to add, not that this should guarantee that his English is > better than anyone else's but I am prepared to bet that both my and > Martin's Swedish combined is about a million miles worse than Glenn's > English (When you compare second language skills)! > > Drew > > -- > In line with our policy, this message has been scanned > for viruses and dangerous content by Technology Tiger in association with > Mail Launder. > Further information can be found at www.technologytiger.net/policy > > Technology Tiger Limited is registered in Scotland with registration > number: 310997 > Registered Office 55-57 West High Street Inverurie AB51 3QQ > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From R.Sterenborg at netsourcing.nl Mon Nov 19 11:20:32 2007 From: R.Sterenborg at netsourcing.nl (Rob Sterenborg) Date: Mon Nov 19 11:21:46 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: Message-ID: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> mailscanner-bounces@lists.mailscanner.info wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible > - results of a dodgy 1970's edukashun ;-) > > But as for my Swedish - well I won't starve (used to work for > Swedish co. about 10 years ago), but it's no-where > approaching the fluency Glenn has for English. But then > anyone under 50 in Sweden/Holland seems to have a better > command of the Ebglish language than I do.. Hopefully not. ;-) You have to know that.. - We get educated in English for at least 4 years (in the 70's-80's, may be more now). - A lot of/Most usefull information of any kind is available in English. - Almost every movie we see is English spoken and subtitled in [Dutch/your language here]. So, we read and hear a lot of English although our pronunciation may be horrible. However, there are a lot of words less commonly used that a lot of people have never heard of and would never use so I think, as a native English speaker, you'd spot the difference. If that's specific to the Dutch and Swedish I don't know. I do know that e.g. in Germany virtually every English(foreign)-spoken movie is translated into German (with horrible German voices not even close to the original voices), which IMHO is a reason for picking up the language less easily. Other countries may very well do the same thing. And yes, the magical age seems to be around 50. When my parents grew up, German was the predominant second language and they still prefer to watch German broadcastings over English (without subtitling). Grts, Rob From glenn.steen at gmail.com Mon Nov 19 11:24:51 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 11:24:54 2007 Subject: Where to file the "file" bug In-Reply-To: <474157A5.3060408@cs.ucy.ac.cy> References: <473D5746.9000207@cs.ucy.ac.cy> <223f97700711160119w344fdc84mf0a09c50a32e283c@mail.gmail.com> <474157A5.3060408@cs.ucy.ac.cy> Message-ID: <223f97700711190324tfb60636i3a2bc6874f8296f2@mail.gmail.com> On 19/11/2007, Andreas Kasenides wrote: > > Thanks Glenn for your reply. > Can you please elaborate on how I can save only the body part of a messafe > so I can experiment with > different "file" versions and configurations? I have many "messages" that > cause this issue but could not > get "file" to spit what I want. Or maybe explain how MailScanner does this > internally, so I can > duplicate its functionality. > Now I am determined to follow through with this and provide at least a > guide > on which "file" versions or configs cause MailScanner to misbehave? > Thanks > Andreas The simplest thing is to use an editor (vi, emacs, whatever turns you on:-) and remove all the headers and the separating blank line, from one of the "multitude" of RFC822-formatted "message" files you have. As you know, the headers are the lines at the start of the file looking like:
:
For example Subject: This is a subject .... What differentiates the body from the headers is simply a blank line. What MS does (among other things:-) is to "decode" the message into its constituent parts (attachments etc)... If the message is a MIME-encoded message, further "decoding" might be needed, to actually get at the file tested by the "file" command in MS. Hope that makes things clearer for you. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Mon Nov 19 11:28:19 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 11:28:24 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: Message-ID: <223f97700711190328q698737d9m29179795ac7b31a0@mail.gmail.com> On 19/11/2007, Martin.Hepworth wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible - results of a dodgy 1970's edukashun ;-) > > But as for my Swedish - well I won't starve (used to work for Swedish co. about 10 years ago), but it's no-where approaching the fluency Glenn has for English. But then anyone under 50 in Sweden/Holland seems to have a better command of the Ebglish language than I do.. > :-). What Co.? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Mon Nov 19 11:51:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 11:51:36 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> Message-ID: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> On 19/11/2007, Rob Sterenborg wrote: > mailscanner-bounces@lists.mailscanner.info wrote: > > Drew > > > > Well yes I'm from the UK, but my English grammer is terrible > > - results of a dodgy 1970's edukashun ;-) > > > > But as for my Swedish - well I won't starve (used to work for > > Swedish co. about 10 years ago), but it's no-where > > approaching the fluency Glenn has for English. But then > > anyone under 50 in Sweden/Holland seems to have a better > > command of the Ebglish language than I do.. > > Hopefully not. ;-) > > You have to know that.. > - We get educated in English for at least 4 years (in the 70's-80's, may > be more now). > - A lot of/Most usefull information of any kind is available in English. > - Almost every movie we see is English spoken and subtitled in > [Dutch/your language here]. Quite true. We have at least 7-9 years English education in Sweden (most have more)... > So, we read and hear a lot of English although our pronunciation may be > horrible. However, there are a lot of words less commonly used that a > lot of people have never heard of and would never use so I think, as a > native English speaker, you'd spot the difference. If we ever meet in person... Your view of my command of the language will degrade pretty fast:-):-). One might know a word intimately, but have never ever heard it pronounced... Makes for some quite hilarious misconceptions/misunderstandings....:-) > If that's specific to the Dutch and Swedish I don't know. I do know that The other nordic countries *should* have pretty much the same "setup". Results vary wildly though:-). > e.g. in Germany virtually every English(foreign)-spoken movie is > translated into German (with horrible German voices not even close to > the original voices), which IMHO is a reason for picking up the language > less easily. Other countries may very well do the same thing. > > And yes, the magical age seems to be around 50. When my parents grew up, > German was the predominant second language and they still prefer to > watch German broadcastings over English (without subtitling). I'd put the age (in Sweden, of course:) slightly higher ... most persons in their 55-60's are ... less fluent, and above 60 it's not uncommon to have no English at all. > > Grts, > Rob Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From martinh at solidstatelogic.com Mon Nov 19 12:03:01 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 12:03:09 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190328q698737d9m29179795ac7b31a0@mail.gmail.com> Message-ID: <9e768ce6036e6d46820ce30d2edd2891@solidstatelogic.com> Glenn Hej ;-) Was DynaSoft from Stockholm. Was bought by what's now RSA about 9 years ago. Now moved back to Upsalla as of TenFour systems products when RSA got bored with the core product! -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 19 November 2007 11:28 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > On 19/11/2007, Martin.Hepworth wrote: > > Drew > > > > Well yes I'm from the UK, but my English grammer is terrible - results > of a dodgy 1970's edukashun ;-) > > > > But as for my Swedish - well I won't starve (used to work for Swedish > co. about 10 years ago), but it's no-where approaching the fluency Glenn > has for English. But then anyone under 50 in Sweden/Holland seems to have > a better command of the Ebglish language than I do.. > > > :-). > > What Co.? > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From R.Sterenborg at netsourcing.nl Mon Nov 19 13:31:35 2007 From: R.Sterenborg at netsourcing.nl (Rob Sterenborg) Date: Mon Nov 19 13:32:05 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> Message-ID: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> >> You have to know that.. >> - We get educated in English for at least 4 years (in the 70's-80's, >> may be more now). >> > Quite true. We have at least 7-9 years English education in Sweden > (most have more)... Here most have more too. But if you really didn't want to you could get away with 3 years. >> So, we read and hear a lot of English although our pronunciation may >> be horrible. However, there are a lot of words less commonly used >> that a lot of people have never heard of and would never use so I >> think, as a native English speaker, you'd spot the difference. > If we ever meet in person... Your view of my command of the language > will degrade pretty fast:-):-). One might know a word intimately, but > have never ever heard it pronounced... Makes for some quite hilarious > misconceptions/misunderstandings....:-) Heheh, you mean something like this? Try it; I think I get most right.. ;-) http://baetzler.de/humor/english_pronounciation.html Actually, I think you'd be able to understand me perfectly well, but hearing all kinds of accents ("real" English, southern American-English, [add your flavour here]) and not speaking the language natively or often with others will most probably make ones pronunciation, well, funny, I think. :-) Oh well, so be it. ;^P Grts, Rob From martinh at solidstatelogic.com Mon Nov 19 13:59:41 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 14:00:16 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> Message-ID: <1cda2646a4bac3418ee4fee6d05e988c@solidstatelogic.com> Rob Hehe - then of course there's lots and lots of regional accents in the UK....one old chap I knew when growing up could, for lots of towns and cities esp in Yorkshire, get the street where you brought in depending on your accent! -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Rob Sterenborg > Sent: 19 November 2007 13:32 > To: MailScanner discussion > Subject: RE: Way OT: Minimum hardware capacity for 35k e-mail scans/day > > >> You have to know that.. > >> - We get educated in English for at least 4 years (in the 70's-80's, > >> may be more now). > >> > > Quite true. We have at least 7-9 years English education in Sweden > > (most have more)... > > Here most have more too. But if you really didn't want to you could get > away with 3 years. > > >> So, we read and hear a lot of English although our pronunciation may > >> be horrible. However, there are a lot of words less commonly used > >> that a lot of people have never heard of and would never use so I > >> think, as a native English speaker, you'd spot the difference. > > > If we ever meet in person... Your view of my command of the language > > will degrade pretty fast:-):-). One might know a word intimately, but > > have never ever heard it pronounced... Makes for some quite hilarious > > misconceptions/misunderstandings....:-) > > Heheh, you mean something like this? Try it; I think I get most right.. > ;-) > http://baetzler.de/humor/english_pronounciation.html > > Actually, I think you'd be able to understand me perfectly well, but > hearing all kinds of accents ("real" English, southern American-English, > [add your flavour here]) and not speaking the language natively or often > with others will most probably make ones pronunciation, well, funny, I > think. :-) Oh well, so be it. ;^P > > > Grts, > Rob > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From shuttlebox at gmail.com Mon Nov 19 14:00:43 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Mon Nov 19 14:00:45 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> Message-ID: <625385e30711190600w735545bfpffce0037121819c1@mail.gmail.com> On Nov 19, 2007 12:51 PM, Glenn Steen wrote: > If we ever meet in person... Your view of my command of the language > will degrade pretty fast:-):-). One might know a word intimately, but > have never ever heard it pronounced... Makes for some quite hilarious > misconceptions/misunderstandings....:-) I remember a few years back when I visited some relatives in Colorado. I wanted to update them on current events in Sweden related to U.S.A. and said that the Swedish Crown Princess went to Yale. My pronunciation of Yale sounded (and still does!) exactly like jail so they looked at each other and quickly changed the subject. :-) -- /peter From glenn.steen at gmail.com Mon Nov 19 14:43:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 14:43:37 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <9e768ce6036e6d46820ce30d2edd2891@solidstatelogic.com> References: <223f97700711190328q698737d9m29179795ac7b31a0@mail.gmail.com> <9e768ce6036e6d46820ce30d2edd2891@solidstatelogic.com> Message-ID: <223f97700711190643l2ba22c67y3d0fc122647ddb71@mail.gmail.com> On 19/11/2007, Martin.Hepworth wrote: > Glenn > > Hej ;-) > > Was DynaSoft from Stockholm. > > Was bought by what's now RSA about 9 years ago. Ah. > Now moved back to Upsalla as of TenFour systems products when RSA got bored with the core product! Erhm. Upsalla.... I take that to be "Upsala"... As bad speling in Swedish:-):-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Mon Nov 19 16:17:18 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 19 16:17:21 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <625385e30711190600w735545bfpffce0037121819c1@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> <625385e30711190600w735545bfpffce0037121819c1@mail.gmail.com> Message-ID: <223f97700711190817i52c6dc30ncb44636bd2b64d55@mail.gmail.com> On 19/11/2007, shuttlebox wrote: > On Nov 19, 2007 12:51 PM, Glenn Steen wrote: > > If we ever meet in person... Your view of my command of the language > > will degrade pretty fast:-):-). One might know a word intimately, but > > have never ever heard it pronounced... Makes for some quite hilarious > > misconceptions/misunderstandings....:-) > > I remember a few years back when I visited some relatives in Colorado. > I wanted to update them on current events in Sweden related to U.S.A. > and said that the Swedish Crown Princess went to Yale. My > pronunciation of Yale sounded (and still does!) exactly like jail so > they looked at each other and quickly changed the subject. :-) > :-) Been there, done that too... Well, more or less...:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From jcasale at ActiveNetwerx.com Mon Nov 19 16:28:14 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Mon Nov 19 16:28:53 2007 Subject: Beginner Question Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Hi, I was looking for a complete tutorial to setup a mail filter for our existing server and came upon the following article (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the comments below it, it stated the implementation of Mailscanner with postfix in this manner was unsupported? Can you guys confirm or deny this, and if so possibly recommend a similar tutorial? Thanks for any input! jlc -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071119/4b90daf3/attachment.html From martinh at solidstatelogic.com Mon Nov 19 16:33:20 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 19 16:33:28 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <67d309699140bf4db51a0fc5575e0bd0@solidstatelogic.com> Joseph See the wiki for 'how-to' install with postfix.. http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:installation -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Joseph L. Casale > Sent: 19 November 2007 16:28 > To: mailscanner@lists.mailscanner.info > Subject: Beginner Question > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the > comments below it, it stated the implementation of Mailscanner with > postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a similar > tutorial? > > > > Thanks for any input! > jlc ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From mailscanner at yeticomputers.com Mon Nov 19 17:07:42 2007 From: mailscanner at yeticomputers.com (Rick Chadderdon) Date: Mon Nov 19 17:08:23 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <1cda2646a4bac3418ee4fee6d05e988c@solidstatelogic.com> References: <1cda2646a4bac3418ee4fee6d05e988c@solidstatelogic.com> Message-ID: <4741C2DE.3050308@yeticomputers.com> You knew Henry Higgins? :) Martin.Hepworth wrote: > Rob > > Hehe - then of course there's lots and lots of regional accents in the UK....one old chap I knew when growing up could, for lots of towns and cities esp in Yorkshire, get the street where you brought in depending on your accent! > From support-lists at petdoctors.co.uk Mon Nov 19 17:07:51 2007 From: support-lists at petdoctors.co.uk (Nigel Kendrick) Date: Mon Nov 19 17:11:03 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <001001c82ace$b78b2c00$3c65a8c0@support01> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Joseph L. Casale Sent: Monday, November 19, 2007 4:28 PM To: 'mailscanner@lists.mailscanner.info' Subject: Beginner Question Hi, I was looking for a complete tutorial to setup a mail filter for our existing server and came upon the following article (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the comments below it, it stated the implementation of Mailscanner with postfix in this manner was unsupported? Can you guys confirm or deny this, and if so possibly recommend a similar tutorial? Thanks for any input! jlc Johnny Hughes has also written a comprehensive guide for installing Postfix with MailScanner and Squirrelmail: http://www.hughesjr.com/content/view/14/29/ -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071119/bc9c5506/attachment.html From Kevin_Miller at ci.juneau.ak.us Mon Nov 19 17:12:57 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Mon Nov 19 17:12:25 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> Message-ID: Glenn Steen wrote: > If we ever meet in person... Your view of my command of the language > will degrade pretty fast:-):-). One might know a word intimately, but > have never ever heard it pronounced... Makes for some quite hilarious > misconceptions/misunderstandings....:-) Language can be a great source of humor. I spent a year in Israel in the early eighties and one of the other volunteers at the kibbutz was a very nice young lady from Sweden. I would rib her a bit about her accent, so she took pains to speak as correctly as she could. One day while eating she gets up and said "I'm going to get more yelly for my jogurt." I cracked up. Somehow she didn't quite see the same humor in it... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From drew.marshall at technologytiger.net Mon Nov 19 17:16:42 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 19 17:16:57 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <21523.B1VcRQRQCQY=.1195492602.squirrel@www.technologytiger.net> On Mon, November 19, 2007 16:28, Joseph L. Casale wrote: > Hi, > I was looking for a complete tutorial to setup a mail filter for our existing > server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the > comments below it, it stated the implementation of Mailscanner with postfix in > this manner was unsupported? > > Can you guys confirm or deny this, and if so possibly recommend a similar > tutorial? I think that tutorial looks ok. The only 'unsupported method' was a very old two Postfix instances method, which is not recomended. I suspect the posted of the not supported comment was talking about the love/hate relationship the two pieces of software have for each other. You will find more details of the POstfix/ MailScanner politics in the wiki http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:politics Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From drew.marshall at technologytiger.net Mon Nov 19 17:27:22 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 19 17:27:34 2007 Subject: Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> Message-ID: <21951.B1VcRQRQCQY=.1195493242.squirrel@www.technologytiger.net> On Mon, November 19, 2007 13:31, Rob Sterenborg wrote: >>> So, we read and hear a lot of English although our pronunciation may >>> be horrible. However, there are a lot of words less commonly used >>> that a lot of people have never heard of and would never use so I >>> think, as a native English speaker, you'd spot the difference. > >> If we ever meet in person... Your view of my command of the language >> will degrade pretty fast:-):-). One might know a word intimately, but >> have never ever heard it pronounced... Makes for some quite hilarious >> misconceptions/misunderstandings....:-) > > Heheh, you mean something like this? Try it; I think I get most right.. > ;-) > http://baetzler.de/humor/english_pronounciation.html > > Actually, I think you'd be able to understand me perfectly well, but > hearing all kinds of accents ("real" English, southern American-English, > [add your flavour here]) and not speaking the language natively or often > with others will most probably make ones pronunciation, well, funny, I > think. :-) Oh well, so be it. ;^P Thing is you guys would know where to begin and taking Peter's point that Yale might sound like jail but I wouldn't even know where to begin with most languages. I can manage a bit of broken Spanish in a Fawlty Towers sort of way. My grasp of Nordic languages fails just after 'Volvo' and 'Saab'! Mind you I can understand the drive to learn English. Most dubbed films are just not there at all. It's quite distressing when you hear Angelina Jolie sounding like she ought to have chest hair! Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From drew.marshall at technologytiger.net Mon Nov 19 17:31:29 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Mon Nov 19 17:31:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: References: Message-ID: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> On Mon, November 19, 2007 09:43, Martin.Hepworth wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible - results of a > dodgy 1970's edukashun ;-) :-) > > But as for my Swedish - well I won't starve (used to work for Swedish co. about > 10 years ago), but it's no-where approaching the fluency Glenn has for English. > But then anyone under 50 in Sweden/Holland seems to have a better command of the > Ebglish language than I do.. Yeah, ain't that always the way. I can understand, most European countries teach proper English. We just use it. Still, if in doubt just shout louder :-) (That is a joke I hasten to add, in case some one takes offence to my 'classic Englishman abroad' style!) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From uxbod at splatnix.net Mon Nov 19 18:12:58 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 19 18:00:46 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> Message-ID: <2441343.17071195495978706.JavaMail.root@office.splatnix.net> Every country I visit whether on holiday or for work, I do try and learn a few phrases. Even though pronunciation is very bad locals do appreciate you making the effort. At least it gives them something smile and laugh about. Its sad more English people do not make the effort, for whatever reason, as the way you are treated does change. IMHO its only polite aswell. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Drew Marshall" To: "MailScanner discussion" Sent: Monday, November 19, 2007 5:31:29 PM (GMT) Europe/London Subject: RE: Minimum hardware capacity for 35k e-mail scans/day On Mon, November 19, 2007 09:43, Martin.Hepworth wrote: > Drew > > Well yes I'm from the UK, but my English grammer is terrible - results of a > dodgy 1970's edukashun ;-) :-) > > But as for my Swedish - well I won't starve (used to work for Swedish co. about > 10 years ago), but it's no-where approaching the fluency Glenn has for English. > But then anyone under 50 in Sweden/Holland seems to have a better command of the > Ebglish language than I do.. Yeah, ain't that always the way. I can understand, most European countries teach proper English. We just use it. Still, if in doubt just shout louder :-) (That is a joke I hasten to add, in case some one takes offence to my 'classic Englishman abroad' style!) Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Mon Nov 19 18:48:44 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 19 18:49:01 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <21951.B1VcRQRQCQY=.1195493242.squirrel@www.technologytiger.net> References: <74ACEB3E6A055643A89B8CEC74C7BF2488E1F4@WISENT.dcyb.net> <223f97700711190351l290638ffreb902dfc42836ba5@mail.gmail.com> <74ACEB3E6A055643A89B8CEC74C7BF2488E1F6@WISENT.dcyb.net> <21951.B1VcRQRQCQY=.1195493242.squirrel@www.technologytiger.net> Message-ID: on 11/19/2007 9:27 AM Drew Marshall spake the following: > On Mon, November 19, 2007 13:31, Rob Sterenborg wrote: >>>> So, we read and hear a lot of English although our pronunciation may >>>> be horrible. However, there are a lot of words less commonly used >>>> that a lot of people have never heard of and would never use so I >>>> think, as a native English speaker, you'd spot the difference. >>> If we ever meet in person... Your view of my command of the language >>> will degrade pretty fast:-):-). One might know a word intimately, but >>> have never ever heard it pronounced... Makes for some quite hilarious >>> misconceptions/misunderstandings....:-) >> Heheh, you mean something like this? Try it; I think I get most right.. >> ;-) >> http://baetzler.de/humor/english_pronounciation.html >> >> Actually, I think you'd be able to understand me perfectly well, but >> hearing all kinds of accents ("real" English, southern American-English, >> [add your flavour here]) and not speaking the language natively or often >> with others will most probably make ones pronunciation, well, funny, I >> think. :-) Oh well, so be it. ;^P > > Thing is you guys would know where to begin and taking Peter's point that Yale > might sound like jail but I wouldn't even know where to begin with most > languages. I can manage a bit of broken Spanish in a Fawlty Towers sort of way. > My grasp of Nordic languages fails just after 'Volvo' and 'Saab'! > > Mind you I can understand the drive to learn English. Most dubbed films are just > not there at all. It's quite distressing when you hear Angelina Jolie sounding > like she ought to have chest hair! > Doesn't she? In her "Tombraider" flicks, she seems capable of routing any male, although most might not put up too much of a fight! ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Mon Nov 19 18:52:32 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 19 18:55:07 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> References: <22155.B1VcRQRQCQY=.1195493489.squirrel@www.technologytiger.net> Message-ID: on 11/19/2007 9:31 AM Drew Marshall spake the following: > On Mon, November 19, 2007 09:43, Martin.Hepworth wrote: >> Drew >> >> Well yes I'm from the UK, but my English grammer is terrible - results of a >> dodgy 1970's edukashun ;-) > > :-) > >> But as for my Swedish - well I won't starve (used to work for Swedish co. about >> 10 years ago), but it's no-where approaching the fluency Glenn has for English. >> But then anyone under 50 in Sweden/Holland seems to have a better command of the >> Ebglish language than I do.. > > Yeah, ain't that always the way. I can understand, most European countries teach > proper English. We just use it. Still, if in doubt just shout louder :-) > > (That is a joke I hasten to add, in case some one takes offence to my 'classic > Englishman abroad' style!) > > Drew That is also the American abroad joke. It implies that anyone can understand English if you speak It LOUD and ssllooww enough. I speak every language but Greek... but it is all Greek to me! (more poor humor) -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From uxbod at splatnix.net Mon Nov 19 19:08:03 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 19 18:55:48 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: Message-ID: <5278847.17161195499283655.JavaMail.root@office.splatnix.net> Perhaps we ought to get back on topic, or Jules set up another list ;) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From andy at tireswing.net Tue Nov 20 05:02:25 2007 From: andy at tireswing.net (Andy Norris) Date: Tue Nov 20 05:02:40 2007 Subject: slightly OT: 550 5.1.1 / att.net Message-ID: <20071120050213.715D0448009@tireswing3.arsalon.net> Hi Gang, I Googled and searched the archives, but didn't find anything that really helped the situation. I have two addresses in the past couple days that have given me fits. Both are att.net (and one belongs to the mother-in-law -- so it has to be fixed for peace to reign). Both result in immediate "550 5.1.1 - User unknown in virtual mailbox table". Is this something I can fix, or do I have to butt heads with someone at att.net support? We're running sendmail on redhat, btw. Thanks very much for any help, Andy Norris From andy at tireswing.net Tue Nov 20 05:43:28 2007 From: andy at tireswing.net (Andy Norris) Date: Tue Nov 20 05:43:49 2007 Subject: slightly OT: 550 5.1.1 / att.net In-Reply-To: <20071120050213.715D0448009@tireswing3.arsalon.net> References: <20071120050213.715D0448009@tireswing3.arsalon.net> Message-ID: <20071120054316.2707E448026@tireswing3.arsalon.net> At 23:02 2007-11-19, Andy Norris wrote: >Hi Gang, > >I Googled and searched the archives, but didn't find anything that >really helped the situation. >I have two addresses in the past couple days that have given me >fits. Both are att.net (and one belongs to the mother-in-law -- so >it has to be fixed for peace to reign). >Both result in immediate "550 5.1.1 - User unknown in virtual mailbox table". >Is this something I can fix, or do I have to butt heads with someone >at att.net support? >We're running sendmail on redhat, btw. > >Thanks very much for any help, > >Andy Norris ----------------------------------------------------------------------------------- Ok, I think this is a postfix issue. A setting somewhere in /etc/postfix/main.cf? I'm paranoid of breaking something that already is working. Odd that it's seemingly only to att.net addresses... no problems -- that I know of to any other domains...? Thanks, Andy From hvdkooij at vanderkooij.org Tue Nov 20 06:24:34 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Tue Nov 20 06:24:55 2007 Subject: slightly OT: 550 5.1.1 / att.net In-Reply-To: <20071120054316.2707E448026@tireswing3.arsalon.net> References: <20071120050213.715D0448009@tireswing3.arsalon.net> <20071120054316.2707E448026@tireswing3.arsalon.net> Message-ID: <47427DA2.7060904@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Andy Norris wrote: > > At 23:02 2007-11-19, Andy Norris wrote: > >> I Googled and searched the archives, but didn't find anything that >> really helped the situation. >> I have two addresses in the past couple days that have given me fits. >> Both are att.net (and one belongs to the mother-in-law -- so it has to >> be fixed for peace to reign). >> Both result in immediate "550 5.1.1 - User unknown in virtual mailbox >> table". >> Is this something I can fix, or do I have to butt heads with someone >> at att.net support? >> We're running sendmail on redhat, btw. > Ok, I think this is a postfix issue. A setting somewhere in > /etc/postfix/main.cf? I'm paranoid of breaking something that already is > working. > > Odd that it's seemingly only to att.net addresses... no problems -- that > I know of to any other domains...? Well. A bit more detail would not hurt. At this moment it is even unclear which MTA you are using. You started with sendmail but did throw in postfix as well to obscure about the only thing that might have been clear. I think it would help if you show relevant log lines, config sections, .... Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQn2gBvzDRVjxmYERArr4AKCdrkQsMRg5WHxtoB9WrS/E2Jrr3gCeKuGB oQkcyzmsCiFw2I9S6Po5iO8= =EPX5 -----END PGP SIGNATURE----- From glenn.steen at gmail.com Tue Nov 20 09:34:34 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 20 09:34:42 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <5278847.17161195499283655.JavaMail.root@office.splatnix.net> References: <5278847.17161195499283655.JavaMail.root@office.splatnix.net> Message-ID: <223f97700711200134l3feaeb8flb4435c69fae79e64@mail.gmail.com> On 19/11/2007, UxBoD wrote: > Perhaps we ought to get back on topic, or Jules set up another list ;) > > Regards, Ehm, perhaps that's why there's a Facebook MailScanner thing...:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From uxbod at splatnix.net Tue Nov 20 09:58:04 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 09:45:19 2007 Subject: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <223f97700711200134l3feaeb8flb4435c69fae79e64@mail.gmail.com> Message-ID: <25636089.17701195552684316.JavaMail.root@office.splatnix.net> indeed. last post by myself on Oct 17th. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Glenn Steen" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 9:34:34 AM (GMT) Europe/London Subject: Re: Way Way Way Way OT: Minimum hardware capacity for 35k e-mail scans/day On 19/11/2007, UxBoD wrote: > Perhaps we ought to get back on topic, or Jules set up another list ;) > > Regards, Ehm, perhaps that's why there's a Facebook MailScanner thing...:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From shuttlebox at gmail.com Tue Nov 20 12:43:37 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Tue Nov 20 12:43:38 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4741526C.7040902@nerc.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> Message-ID: <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> On Nov 19, 2007 10:07 AM, Greg Matthews wrote: > Steve Freegard wrote: > > Julian Field wrote: > >> Only 1 process at a time can hold the BerkeleyDB open and write to it. > >> Lots of processes can hold the RDBMS open at once. It's all down to > >> file locking. > > > > See http://wiki.apache.org/spamassassin/BayesBenchmarkResults > > wow. Interesting stuff. So why does SA not use sdbm by default? I tested SDBM and it works just fine. My daily expire job went from over a minute to little over 10 seconds. Syncs are still completed so fast (0-1s) that I don't notice the difference. I wrote a wiki page on how to use SDBM based on Scott Silva's SQL guide. http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sdbm -- /peter From richard.thomas at psysolutions.com Tue Nov 20 14:45:22 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Tue Nov 20 14:45:25 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> References: <473C7B11.3020400@psysolutions.com> <473CCCD7.4050705@psysolutions.com> <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> Message-ID: <4742F302.9020606@psysolutions.com> Glenn Steen wrote: >> > Did you mention which version of MS you use? > > Cheers > 4.55.10. The version available for update is 4.58.9. We're not scheduled for an update but if this has been fixed (I couldn't find confirmation that it had), I would bring it forward. Rich -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071120/2690a0b5/attachment.html From martinh at solidstatelogic.com Tue Nov 20 14:51:57 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Tue Nov 20 14:51:56 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <4742F302.9020606@psysolutions.com> Message-ID: Richard 4.58 is quite old February 2007. latest code is 4.65.2. You using a O/S packaged version or something? Also which version of Exim? And what O/S and version? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Richard Thomas > Sent: 20 November 2007 14:45 > To: MailScanner discussion > Subject: Re: Exim timeouts - MailScanner related > > Glenn Steen wrote: > > > > > Did you mention which version of MS you use? > > Cheers > > > > > 4.55.10. The version available for update is 4.58.9. We're not scheduled > for an update but if this has been fixed (I couldn't find confirmation > that it had), I would bring it forward. > > Rich ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From glenn.steen at gmail.com Tue Nov 20 14:54:33 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 20 14:54:35 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: <4742F302.9020606@psysolutions.com> References: <473C7B11.3020400@psysolutions.com> <473CCCD7.4050705@psysolutions.com> <223f97700711160110i1a75d1f0s45a10f3cfe5bd647@mail.gmail.com> <4742F302.9020606@psysolutions.com> Message-ID: <223f97700711200654q39d02c52l705d6a7380d988dc@mail.gmail.com> On 20/11/2007, Richard Thomas wrote: > > Glenn Steen wrote: > > > Did you mention which version of MS you use? > > Cheers > > > > 4.55.10. The version available for update is 4.58.9. We're not scheduled > for an update but if this has been fixed (I couldn't find confirmation that > it had), I would bring it forward. > > Rich > I'm not sure it has, either... But it is always a good thing to mention such things, in case someone else has stumbled on the same block:-). Both those versions are a bit old, so I gather this is some kind of packaging system putting this limit on your upgrade versions? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From hansklose at gmx.de Tue Nov 20 15:31:39 2007 From: hansklose at gmx.de (Hans Klose) Date: Tue Nov 20 15:31:41 2007 Subject: CustomFunktions and ContentType Field Message-ID: <20071120153139.128460@gmx.net> Hi can i read the contenttype field from a mailheader in a customfunktion. I already do this: >>my ($message) = @_; >>my $from = $message->{from}; and can use the "From" header field. How can i access the contentype? Specialy i need the charset of the mail. I tried: >>my $ContentType = $message->head->mime_attr('content-type'); but that does not work. Tanks Hans -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail From uxbod at splatnix.net Tue Nov 20 15:52:55 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 15:40:01 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <20071120153139.128460@gmx.net> Message-ID: <29363218.18361195573975297.JavaMail.root@office.splatnix.net> Hmmm, my $type = $entity->head->mime_attr('content-type'); is used within a lot of the modules, so I am surprised that this does not work for you. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Hans Klose" To: mailscanner@lists.mailscanner.info Sent: Tuesday, November 20, 2007 3:31:39 PM (GMT) Europe/London Subject: CustomFunktions and ContentType Field Hi can i read the contenttype field from a mailheader in a customfunktion. I already do this: >>my ($message) = @_; >>my $from = $message->{from}; and can use the "From" header field. How can i access the contentype? Specialy i need the charset of the mail. I tried: >>my $ContentType = $message->head->mime_attr('content-type'); but that does not work. Tanks Hans -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hansklose at gmx.de Tue Nov 20 15:48:16 2007 From: hansklose at gmx.de (Hans Klose) Date: Tue Nov 20 15:48:18 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <29363218.18361195573975297.JavaMail.root@office.splatnix.net> References: <29363218.18361195573975297.JavaMail.root@office.splatnix.net> Message-ID: <20071120154816.66340@gmx.net> I have that code from the modules ;-) and hoped it would work. But it does not. Thanks Hans Klose -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser From uxbod at splatnix.net Tue Nov 20 16:09:39 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 15:56:44 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <20071120154816.66340@gmx.net> Message-ID: <5671360.18421195574979137.JavaMail.root@office.splatnix.net> is the object being populated okay ? are you able to get any other attributes ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Hans Klose" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 3:48:16 PM (GMT) Europe/London Subject: Re: CustomFunktions and ContentType Field I have that code from the modules ;-) and hoped it would work. But it does not. Thanks Hans Klose -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hansklose at gmx.de Tue Nov 20 16:11:15 2007 From: hansklose at gmx.de (Hans Klose) Date: Tue Nov 20 16:11:18 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <5671360.18421195574979137.JavaMail.root@office.splatnix.net> References: <5671360.18421195574979137.JavaMail.root@office.splatnix.net> Message-ID: <20071120161115.187120@gmx.net> I already use this my $from = $message->{from}; and it works perfect! As far as i know i can use the variables at the top of the Message.pm So i think i must use the @header and search the field myself :-( Thanks Hans Klose -------- Original-Nachricht -------- > Datum: Tue, 20 Nov 2007 16:09:39 +0000 (GMT) > Von: UxBoD > An: MailScanner discussion > Betreff: Re: CustomFunktions and ContentType Field > is the object being populated okay ? are you able to get any other > attributes ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Hans Klose" > To: "MailScanner discussion" > Sent: Tuesday, November 20, 2007 3:48:16 PM (GMT) Europe/London > Subject: Re: CustomFunktions and ContentType Field > > I have that code from the modules ;-) and hoped it would work. > But it does not. > > Thanks > Hans Klose > > -- > Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten > Browser-Versionen downloaden: http://www.gmx.net/de/go/browser > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail From uxbod at splatnix.net Tue Nov 20 16:35:58 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 16:23:02 2007 Subject: CustomFunktions and ContentType Field In-Reply-To: <20071120161115.187120@gmx.net> Message-ID: <1883612.18511195576558592.JavaMail.root@office.splatnix.net> Have you included the necessary modules in your .pm ? ie. use MIME::Parser; Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Hans Klose" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 4:11:15 PM (GMT) Europe/London Subject: Re: CustomFunktions and ContentType Field I already use this my $from = $message->{from}; and it works perfect! As far as i know i can use the variables at the top of the Message.pm So i think i must use the @header and search the field myself :-( Thanks Hans Klose -------- Original-Nachricht -------- > Datum: Tue, 20 Nov 2007 16:09:39 +0000 (GMT) > Von: UxBoD > An: MailScanner discussion > Betreff: Re: CustomFunktions and ContentType Field > is the object being populated okay ? are you able to get any other > attributes ? > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Hans Klose" > To: "MailScanner discussion" > Sent: Tuesday, November 20, 2007 3:48:16 PM (GMT) Europe/London > Subject: Re: CustomFunktions and ContentType Field > > I have that code from the modules ;-) and hoped it would work. > But it does not. > > Thanks > Hans Klose > > -- > Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten > Browser-Versionen downloaden: http://www.gmx.net/de/go/browser > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From joey.da3rd at gmail.com Tue Nov 20 16:30:31 2007 From: joey.da3rd at gmail.com (Joey Marino) Date: Tue Nov 20 16:30:38 2007 Subject: Bayes not learning? exchange environment Message-ID: I recently installed a mailscanner filter in front of my exchange server. It was working fine for a few weeks then slowly let more and more spam through. Today it's letting alot of spam through. I am trying to verify that Bayes is learning, how would I do that? Also how do I verify that the spam rules are being updated? I also tried to place spam in a public folder on my exchange server and update bayes with these emails using this method provided by the wiki http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange It just stops executing at this line in the python script: log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % (SALEARN, PREFS, TMPFILE))) any ideas? I'm trying to determine what this line is accomplishing. Joey Marino From ssilva at sgvwater.com Tue Nov 20 17:09:06 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 17:09:32 2007 Subject: Bayes not learning? exchange environment In-Reply-To: References: Message-ID: on 11/20/2007 8:30 AM Joey Marino spake the following: > I recently installed a mailscanner filter in front of my exchange > server. It was working fine for a few weeks then slowly let more and > more spam through. Today it's letting alot of spam through. I am > trying to verify that Bayes is learning, how would I do that? Also how > do I verify that the spam rules are being updated? > > I also tried to place spam in a public folder on my exchange server > and update bayes with these emails using this method provided by the > wiki > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange > It just stops executing at this line in the python script: > log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % > (SALEARN, PREFS, TMPFILE))) > any ideas? I'm trying to determine what this line is accomplishing. > > Joey Marino Is there any bayes scores in the headers of the messages? Are you running any extra rules from rulesemporium.com? Are you properly set up to not accept mail to non-existent addresses? Does your exchange server have a non-public address that can only be reached by the mailscanner box? Otherwise the spammers will find it. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From MailScanner at ecs.soton.ac.uk Tue Nov 20 17:11:27 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 20 17:11:47 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> Message-ID: <4743153F.1010507@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 19, 2007 10:07 AM, Greg Matthews wrote: > >> Steve Freegard wrote: >> >>> Julian Field wrote: >>> >>>> Only 1 process at a time can hold the BerkeleyDB open and write to it. >>>> Lots of processes can hold the RDBMS open at once. It's all down to >>>> file locking. >>>> >>> See http://wiki.apache.org/spamassassin/BayesBenchmarkResults >>> >> wow. Interesting stuff. So why does SA not use sdbm by default? >> > > I tested SDBM and it works just fine. My daily expire job went from > over a minute to little over 10 seconds. Syncs are still completed so > fast (0-1s) that I don't notice the difference. I wrote a wiki page on > how to use SDBM based on Scott Silva's SQL guide. > > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sdbm > > I'm testing it out now. If it's as good as it is reckoned to be, how about I make it the default in new installations? (i.e. change mailscanner.cf to use it) Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQxVFEfZZRxQVtlQRAoofAKC2MPPG3XTWM4Zbh+Zq1ocoavjLbQCgqTnB FReKzGQR7TJkm3br/GQOch4= =9jtF -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Tue Nov 20 17:15:42 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 17:16:12 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> Message-ID: on 11/20/2007 4:43 AM shuttlebox spake the following: > On Nov 19, 2007 10:07 AM, Greg Matthews wrote: >> Steve Freegard wrote: >>> Julian Field wrote: >>>> Only 1 process at a time can hold the BerkeleyDB open and write to it. >>>> Lots of processes can hold the RDBMS open at once. It's all down to >>>> file locking. >>> See http://wiki.apache.org/spamassassin/BayesBenchmarkResults >> wow. Interesting stuff. So why does SA not use sdbm by default? > > I tested SDBM and it works just fine. My daily expire job went from > over a minute to little over 10 seconds. Syncs are still completed so > fast (0-1s) that I don't notice the difference. I wrote a wiki page on > how to use SDBM based on Scott Silva's SQL guide. > > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sdbm > I can't take credit for that guide. I only was in there fixing up some old broken links. It was originally done by Dhawal Doshy, and nudged and poked by a few of us. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Tue Nov 20 17:21:21 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 17:21:36 2007 Subject: Exim timeouts - MailScanner related In-Reply-To: References: <4742F302.9020606@psysolutions.com> Message-ID: on 11/20/2007 6:51 AM Martin.Hepworth spake the following: > Richard > > 4.58 is quite old February 2007. latest code is 4.65.2. You using a O/S packaged version or something? > > Also which version of Exim? > > And what O/S and version? > With Exim and old versions of MailScanner it probably is a Debian or Ubuntu install. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From Kevin_Miller at ci.juneau.ak.us Tue Nov 20 17:22:24 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Tue Nov 20 17:21:42 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4743153F.1010507@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk><473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com><4741526C.7040902@nerc.ac.uk><625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> Message-ID: Julian Field wrote: > I'm testing it out now. If it's as good as it is reckoned to be, how > about I make it the default in new installations? (i.e. change > mailscanner.cf to use it) That would be just fine by me. Thanks Jules... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From mailscanner at yeticomputers.com Tue Nov 20 17:31:02 2007 From: mailscanner at yeticomputers.com (Rick Chadderdon) Date: Tue Nov 20 17:31:25 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <4743153F.1010507@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> Message-ID: <474319D6.3080403@yeticomputers.com> Julian Field wrote: > I'm testing it out now. If it's as good as it is reckoned to be, how > about I make it the default in new installations? (i.e. change > mailscanner.cf to use it) SDBM has been criticized (and rejected for several projects) for having a small (1Kbyte or 2Kbytes, depending on where I look) maximum record size. I do not know enough about the SA database to say whether this will be a potential factor in using SDBM with SpamAssassin, but perhaps someone with more knowledge can use this information. If we can count on SA always keeping the records smaller than SDBM's max, this sounds like a good way to increase performance. On the other hand, it's the kind of thing that SA could cause to break with a relatively simple change in what they store in the DB Rick From prandal at herefordshire.gov.uk Tue Nov 20 17:52:07 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue Nov 20 17:52:15 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474319D6.3080403@yeticomputers.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com><4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA0218074A@HC-MBX02.herefordshire.gov.uk> See http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4530 "Make SDBM default bayes store" Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Rick Chadderdon > Sent: 20 November 2007 17:31 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > Julian Field wrote: > > I'm testing it out now. If it's as good as it is reckoned to be, how > > about I make it the default in new installations? (i.e. change > > mailscanner.cf to use it) > SDBM has been criticized (and rejected for several projects) > for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, > but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > > Rick > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From MailScanner at ecs.soton.ac.uk Tue Nov 20 18:08:03 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 20 18:08:24 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474319D6.3080403@yeticomputers.com> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> Message-ID: <47432283.4000100@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rick Chadderdon wrote: > Julian Field wrote: > >> I'm testing it out now. If it's as good as it is reckoned to be, how >> about I make it the default in new installations? (i.e. change >> mailscanner.cf to use it) >> > SDBM has been criticized (and rejected for several projects) for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > Another criticism of SDBM: I just tried converting my Bayes db files (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQyKJEfZZRxQVtlQRAns0AKDgxUeJUN2J4Xk4Ri4Cu3zNKKOzUQCgx1uW 61w3u9rtWj2lxl1OOu0VEyY= =rCQa -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Tue Nov 20 18:26:21 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 20 18:13:26 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432283.4000100@ecs.soton.ac.uk> Message-ID: <5153665.18811195583181876.JavaMail.root@office.splatnix.net> Ouch! But does the performance benefit still hold true even at that size ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Julian Field" To: "MailScanner discussion" Sent: Tuesday, November 20, 2007 6:08:03 PM (GMT) Europe/London Subject: Re: Minimum hardware capacity for 35k e-mail scans/day -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rick Chadderdon wrote: > Julian Field wrote: > >> I'm testing it out now. If it's as good as it is reckoned to be, how >> about I make it the default in new installations? (i.e. change >> mailscanner.cf to use it) >> > SDBM has been criticized (and rejected for several projects) for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > Another criticism of SDBM: I just tried converting my Bayes db files (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQyKJEfZZRxQVtlQRAns0AKDgxUeJUN2J4Xk4Ri4Cu3zNKKOzUQCgx1uW 61w3u9rtWj2lxl1OOu0VEyY= =rCQa -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ms-list at alexb.ch Tue Nov 20 18:53:12 2007 From: ms-list at alexb.ch (Alex Broens) Date: Tue Nov 20 18:53:30 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432283.4000100@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> Message-ID: <47432D18.8040005@alexb.ch> On 11/20/2007 7:08 PM, Julian Field wrote: > Another criticism of SDBM: I just tried converting my Bayes db files > (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) imho, a 670MB Bayes DB is a massive perfomance hog. Using autolearn and expiring every night, I doubt you'd really need more than the default settings. You'd probably be surprised how fast SA will process your mail with a less than 50 MB token file. If you are counting the Bayes_seen file, this irrelevant and can be deleted unless you need sa-learn to "forget" msgs. Alex From shuttlebox at gmail.com Tue Nov 20 19:17:50 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Tue Nov 20 19:17:52 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432283.4000100@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> Message-ID: <625385e30711201117p23576707yf4697d238798b544@mail.gmail.com> On Nov 20, 2007 7:08 PM, Julian Field wrote: > Another criticism of SDBM: I just tried converting my Bayes db files > (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) 670 MB? I had problems with earlier versions of SA that the tokens file and seen file never stopped growing, I could expire the tokens file but nothing helped with the seen file. I assumed that a huge db must be detrimental to performance so once in a while I removed the files and let it start over, I find that the hit ratio is not much affected of this. In later versions I've never had any problems with this, both the tokens and seen files reach a maximum size and stay there. The db is way less than 670 MB, more like 67 MB, so I'm wondering if you've had your db since a few versions back of SA? I will check tomorrow for any difference in db size after my switch to SDBM. Our resident SA guru, Matt Kettler, is a user of SDBM according to a post from the SA list a year ago. Maybe he will comment on it here too. -- /peter From MailScanner at ecs.soton.ac.uk Tue Nov 20 19:22:36 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 20 19:22:55 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <47432D18.8040005@alexb.ch> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> <47432D18.8040005@alexb.ch> Message-ID: <474333FC.9070800@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Broens wrote: > On 11/20/2007 7:08 PM, Julian Field wrote: >> Another criticism of SDBM: I just tried converting my Bayes db files >> (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) > > imho, a 670MB Bayes DB is a massive perfomance hog. > Using autolearn and expiring every night, I doubt you'd really need > more than the default settings. You'd probably be surprised how fast > SA will process your mail with a less than 50 MB token file. > > If you are counting the Bayes_seen file, this irrelevant and can be > deleted unless you need sa-learn to "forget" msgs. Yes, I was. Good to know I can just delete this. Can you just confirm that deleting the bayes_seen* files is safe, before I do it? Thanks. Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHQzQCEfZZRxQVtlQRAuq8AJ915wFS9sknFsD/Xs+vFOVD1ybb7QCeI6zX ZcKbTfprOiNNpUYtyyrCBHA= =5kR4 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From shuttlebox at gmail.com Tue Nov 20 19:33:19 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Tue Nov 20 19:33:21 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474333FC.9070800@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> <47432D18.8040005@alexb.ch> <474333FC.9070800@ecs.soton.ac.uk> Message-ID: <625385e30711201133y5ffc47b9qaa315569f761ebab@mail.gmail.com> On Nov 20, 2007 8:22 PM, Julian Field wrote: > Yes, I was. Good to know I can just delete this. Can you just confirm > that deleting the bayes_seen* files is safe, before I do it? I would shut down MS and copy the files first so you can get back because I tried deleting bayes_seen before when it just grew and grew and the db got corrupt from it, had to start over. -- /peter From ms-list at alexb.ch Tue Nov 20 20:08:57 2007 From: ms-list at alexb.ch (Alex Broens) Date: Tue Nov 20 20:09:08 2007 Subject: Minimum hardware capacity for 35k e-mail scans/day In-Reply-To: <474333FC.9070800@ecs.soton.ac.uk> References: <24517451.15081195156160321.JavaMail.root@office.splatnix.net> <473DC4BE.6020208@nerc.ac.uk> <473DCD32.2000400@ecs.soton.ac.uk> <473DD12C.9060402@fsl.com> <4741526C.7040902@nerc.ac.uk> <625385e30711200443v6677caa4y1f28658490493790@mail.gmail.com> <4743153F.1010507@ecs.soton.ac.uk> <474319D6.3080403@yeticomputers.com> <47432283.4000100@ecs.soton.ac.uk> <47432D18.8040005@alexb.ch> <474333FC.9070800@ecs.soton.ac.uk> Message-ID: <47433ED9.6050107@alexb.ch> On 11/20/2007 8:22 PM, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Alex Broens wrote: >> On 11/20/2007 7:08 PM, Julian Field wrote: >>> Another criticism of SDBM: I just tried converting my Bayes db files >>> (670Mb) to SDBM and they grew by more than a factor of 3 ! (2048Mb) >> imho, a 670MB Bayes DB is a massive perfomance hog. >> Using autolearn and expiring every night, I doubt you'd really need >> more than the default settings. You'd probably be surprised how fast >> SA will process your mail with a less than 50 MB token file. >> >> If you are counting the Bayes_seen file, this irrelevant and can be >> deleted unless you need sa-learn to "forget" msgs. > Yes, I was. Good to know I can just delete this. Can you just confirm > that deleting the bayes_seen* files is safe, before I do it? > yep its safe... 100% *unless" you want to run sa-learn --forget, for example via Mailwatcatch - even then, you'd hardly need more than 1 month worth's of data best it to cron a rm -f to avoid surprises. I've come across 50 GB seen files automagically pruning the bayes_seen file is a RFE on SA Bugzilla Alex From rwahyudi at gmail.com Tue Nov 20 22:59:22 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Tue Nov 20 22:57:43 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <474366CA.2060901@gmail.com> I have been running MailScanner + Postfix for 1 and a half years. I did more than 5 update to postfix & mailscanner and I did not encounter any single issue or data loss. I think what the commentator meant by "unsupported" is that if you post question on postfix forum and you mentioned that you use mailscanner they will ask you not to use mailscanner before they can help you. This happen to me before, but then I post my question on mailscanner and I get immediate help :) Regards, Rianto Wahyudi Joseph L. Casale wrote: > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading > the comments below it, it stated the implementation of Mailscanner > with postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a > similar tutorial? > > > > Thanks for any input! > jlc > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/ee5175ce/attachment-0001.html From joey.da3rd at gmail.com Tue Nov 20 23:51:21 2007 From: joey.da3rd at gmail.com (Joey Marino) Date: Tue Nov 20 23:51:28 2007 Subject: Bayes not learning? exchange environment Message-ID: >> I recently installed a mailscanner filter in front of my exchange >> server. It was working fine for a few weeks then slowly let more and >> more spam through. Today it's letting alot of spam through. I am >> trying to verify that Bayes is learning, how would I do that? Also how >> do I verify that the spam rules are being updated? >> >> I also tried to place spam in a public folder on my exchange server >> and update bayes with these emails using this method provided by the >> wiki >> http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange >> It just stops executing at this line in the python script: >> log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % .> (SALEARN, PREFS, TMPFILE))) >> any ideas? I'm trying to determine what this line is accomplishing. >> >> Joey Marino >Is there any bayes scores in the headers of the messages? >Are you running any extra rules from rulesemporium.com? >Are you properly set up to not accept mail to non-existent addresses? >Does your exchange server have a non-public address that can only be reached >by the mailscanner box? Otherwise the spammers will find it. 1. I am new to this, so please excuse any dumbness I may portray I am not sure how to read the headers other than the reports from MailWatch Here is an example header: Return-Path: Received: from pyszczek (bhc145.neoplus.adsl.tpnet.pl [83.28.92.145]) by localhost.localdomain (8.13.1/8.13.1) with ESMTP id lAKNStWv009338 for ; Tue, 20 Nov 2007 18:28:57 -0500 Received: from [83.28.92.145] by mx1.biz.mail.yahoo.com; Wed, 21 Nov 2007 00:28:56 +0100 Message-ID: <01c82bd5$80c67fa0$915c1c53@lbarlow> From: "Marty Kimball" To: Subject: MoneybackPolicyInternationalPharShipping Date: Wed, 21 Nov 2007 00:28:56 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C82BD5.80C67FA0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2905 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905 Now the information in the rows following "SpamAssassin" in this particular report show all [N]'s In the messages that were recognized as spam, The "SpamAssassin Autolearn:" row show's [Y] I hope that answers the first question 2. I ran rules_du_jour (which is also in my cron tab) and the report shows that I did update rules from SARE. This message was in my summary report: No index found for ruleset named ANTIDRUG. Check that this ruleset is still valid. 3. I don't think I am set up to not accept mail to non-existent addresses, I didn't create a list of existing email addresses or link it to my exchange server active directory. How would I do this and how would this help? 4. I believe the exchange server does have a private address. All incoming SMTP requests are staticly routed to the mailscanner box. I ran a DNS lookup for the hostname of the box and nothing was found. How else would I verify this to be correct? -- Joey Marino -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071120/e4dacd5a/attachment.html From ssilva at sgvwater.com Tue Nov 20 23:51:18 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 20 23:51:34 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: References: <47363BDA.5050202@vanderkooij.org> Message-ID: on 11/11/2007 1:42 PM Scott Silva spake the following: > on 11/10/2007 3:16 PM Hugo van der Kooij spake the following: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hi, >> >> I have created an experimental setup with wrapper that should allow one >> to install MailScanner through yum for RHEL 5 or Centos 5 if one has >> already added the rpmforge repository. >> >> I put up the details on http://yum.vanderkooij.org/ >> >> I will try to install some other virtual machines and test other >> distributions if I can find the time. >> >> It is rather simple and I think it will be possible to keep it that way. >> So I hope when the test show good results Jules will be able to maintain >> a repository himself with minimal effort. >> >> If anyone is willing to give it a spin. Please do so, so we can work out >> anything I might have overlooked. >> >> Hugo. > I have a couple of new servers that will just be coming out of stress > testing. > I will do a wipe and install on one and give it a try this week. > Ran this repo today and it gets all requires very well. Installed on X86-64 with no issues. Are there any optional modules that anyone thinks are helpful? I would vote for perl-Mail-ClamAV, perl-Convert-TNEF, and maybe the SPF modules for spamassassin. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From pete at enitech.com.au Wed Nov 21 01:29:36 2007 From: pete at enitech.com.au (Peter Russell) Date: Wed Nov 21 01:29:47 2007 Subject: Super Slow Queue Processing Message-ID: <47438A00.2040409@enitech.com.au> Hi there, we have a MailScanner system that has had a lot (any) attention for 6 months or so and all of a sudden it is unable to process the messages in the queue faster than they are building up. Doing an sa -D -t < on any of the high scoring spam messages i have is very quick (less than 5sec). there was some error about hash from sa-learn --force-expire, a google revealed naught so i disabled bayes for now. but it maks no difference. But changing Use Spamassassin to no means the queue is processed lightening quick. which seems weird because SA appears to run quite quick. The messages do eventually seem to get processed but it takes quite a while (upto 30min) and the queue seems to be growing muh quicker than processing. MS debug takes AGES. I cant seem to find anything useful or interesting in the logs, i have attached the output of the MS debug (yes i need to update clamav). Appreciate ANY tips on how to diagnose (or hopefully fix) this. :) Many thanks Pete MailScanner version 4.55.9 SpamAssassin version 3.1.8 running on Perl version 5.8.5 Linux Centos 2.6.9-11.ELsmp Postfix 2.3 (HOLD method) tarting MailScanner daemons: incoming postfix : [ OK ] outgoing postfix : [ OK ] MailScanner: In Debugging mode, not forking... LibClamAV Warning: ******************************************************** LibClamAV Warning: *** This version of the ClamAV engine is outdated. *** LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html *** LibClamAV Warning: ******************************************************** LibClamAV Warning: ******************************************************** LibClamAV Warning: *** This version of the ClamAV engine is outdated. *** LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/faq.html *** LibClamAV Warning: ******************************************************** Ignore errors about failing to find EOCD signature format error: can't find EOCD signature at /usr/sbin/MailScanner line 820 format error: can't find EOCD signature at /usr/sbin/MailScanner line 820 Stopping now as you are debugging me. commit ineffective with AutoCommit enabled at /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, line 1422. Commmit ineffective while AutoCommit is on at /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, line 1422. [ OK ] From rwahyudi at gmail.com Wed Nov 21 01:39:55 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Wed Nov 21 01:38:04 2007 Subject: Super Slow Queue Processing In-Reply-To: <47438A00.2040409@enitech.com.au> References: <47438A00.2040409@enitech.com.au> Message-ID: <47438C6B.9040707@gmail.com> Make sure : Delivery Method = batch Regards, Rianto Wahyudi -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/174ce88f/attachment.html From pete at enitech.com.au Wed Nov 21 02:07:58 2007 From: pete at enitech.com.au (Peter Russell) Date: Wed Nov 21 02:08:08 2007 Subject: Super Slow Queue Processing In-Reply-To: <47438C6B.9040707@gmail.com> References: <47438A00.2040409@enitech.com.au> <47438C6B.9040707@gmail.com> Message-ID: <474392FE.9080009@enitech.com.au> Yep it is, as default - almost everything is default i dont mess around with timing or processing options. thanks Pete R Wahyudi wrote: > > Make sure : > Delivery Method = batch > > Regards, > Rianto Wahyudi > > > From Richard.Frovarp at sendit.nodak.edu Wed Nov 21 04:23:46 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Wed Nov 21 04:23:56 2007 Subject: Super Slow Queue Processing In-Reply-To: <47438A00.2040409@enitech.com.au> References: <47438A00.2040409@enitech.com.au> Message-ID: <4743B2D2.9020901@sendit.nodak.edu> Peter Russell wrote: > Hi there, we have a MailScanner system that has had a lot (any) > attention for 6 months or so and all of a sudden it is unable to > process the messages in the queue faster than they are building up. > > Doing an sa -D -t < on any of the high scoring spam messages i have is > very quick (less than 5sec). there was some error about hash from > sa-learn --force-expire, a google revealed naught so i disabled bayes > for now. but it maks no difference. > > But changing Use Spamassassin to no means the queue is processed > lightening quick. which seems weird because SA appears to run quite > quick. > > The messages do eventually seem to get processed but it takes quite a > while (upto 30min) and the queue seems to be growing muh quicker than > processing. > > MS debug takes AGES. > > I cant seem to find anything useful or interesting in the logs, i have > attached the output of the MS debug (yes i need to update clamav). > > Appreciate ANY tips on how to diagnose (or hopefully fix) this. :) > > Many thanks > Pete Do your lints work? Have you ran sa-update? Are you swapping? My two guesses would be thrashing or a slow DNS lookup or timeout. If you are doing your testing on a machine that processed the message or has access to the same DNS, the result would be cached. You can run MailScanner --debug --debug-sa to see the SA debug output on a batch. You might be able to get a feel for where SA is hanging in the process on incoming messages and it might give you an idea. It's possible you have been blocked from SpamHaus or are using a service that has been shut down (hence the sa-update question). From edward at tdcs.com.au Wed Nov 21 06:15:33 2007 From: edward at tdcs.com.au (Edward Dekkers) Date: Wed Nov 21 06:16:15 2007 Subject: Whitelist not working? Message-ID: I'm trying to send an archive RAR file to a friend. It is a 25Mb RAR file with nested folders. The first dramas I had was getting Postfix to accept the damn thing. (now resolved) The drama is now that MailScanner blocks it ("MailScanner: Message contained archive nested too deeply") I've added the domain where it's going to the whitelist (/opt/MailSCanner/etc/rules/spam.whitelist.rules) But it still seems to be blocking. Is there any way I can get MailScanner to just ignore checking mails to this domain and just send the bloody mail through? Regards, Ed. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From neilw at dcdata.co.za Wed Nov 21 06:33:17 2007 From: neilw at dcdata.co.za (Neil Wilson) Date: Wed Nov 21 06:35:33 2007 Subject: Kernel crash, MailScanner mentioned Message-ID: <4743D12D.5020706@dcdata.co.za> Hi guys, I realise this might not be caused by MailScanner, but I've got a server running SLES 10 SP1 i586 that's crashing nearly every night. In the logs I see it does mentioned something about MS, but not sure if this means that it's actually MS causing the problem. The kernel it's using is "Linux mail 2.6.16.46-0.12-smp #1 SMP Thu May 17 14:00:09 UTC 2007 i686 i686 i386 GNU/Linux" If anyone could point me in the right direction I'll be more than grateful. I can't run an update on the SLES as it's not registered yet, as the client only wants to register in the new year, but needed the server straight away. Nov 20 19:51:39 mail kernel: ------------[ cut here ]------------ Nov 20 19:51:39 mail kernel: kernel BUG at mm/page_alloc.c:295! Nov 20 19:51:39 mail kernel: invalid opcode: 0000 [#1] Nov 20 19:51:39 mail kernel: SMP Nov 20 19:51:39 mail kernel: last sysfs file: /firmware/edd/int13_dev80/extensions Nov 20 19:51:39 mail kernel: Modules linked in: xt_limit xt_state xt_MARK ipt_MASQUERADE xt_tcpudp ipt_REJECT ipt_LOG iptable_mangle iptable_nat iptable_filt er ip_tables x_tables ip_nat_ftp ip_nat ip_conntrack_ftp ip_conntrack nfnetlink af_packet cpufreq_ondemand cpufreq_userspace cpufreq_powersave speedstep_cent rino freq_table button battery ac loop dm_mod hw_random i915 drm e1000 intel_agp shpchp pci_hotplug uhci_hcd ehci_hcd ahci agpgart ohci1394 i2c_i801 i2c_core pata_jmicron usbcore ieee1394 sundance mii parport_pc lp parport ext3 jbd edd fan thermal processor pata_marvell sg ata_piix libata generic sd_mod scsi_mod ide_disk ide_core Nov 20 19:51:39 mail kernel: CPU: 1 Nov 20 19:51:39 mail kernel: EIP: 0060:[] Not tainted VLI Nov 20 19:51:39 mail kernel: EFLAGS: 00210002 (2.6.16.46-0.12-smp #1) Nov 20 19:51:39 mail kernel: EIP is at free_pages_bulk+0x12c/0x1e4 Nov 20 19:51:39 mail kernel: eax: 00000001 ebx: c13cdb00 ecx: c13cdb00 edx: 00000001 Nov 20 19:51:39 mail kernel: esi: 000006d9 edi: c13cdb20 ebp: 00000000 esp: e84fdd80 Nov 20 19:51:39 mail kernel: ds: 007b es: 007b ss: 0068 Nov 20 19:51:39 mail kernel: Process MailScanner (pid: 24234, threadinfo=e84fc000 task=dfe9eb70) Nov 20 19:51:39 mail kernel: Stack: <0>c030188c 0000001c c0301780 00000000 00000001 00000001 c14d4aa0 c0301880 Nov 20 19:51:39 mail kernel: 00200202 c0301780 c0149cba 00000000 00000003 e84fdde8 e84fddd8 0000000d Nov 20 19:51:39 mail kernel: c0149ce1 c14db140 c0301780 c17de14c c014c1d9 0000000e 0000000e 00000000 Nov 20 19:51:39 mail kernel: Call Trace: Nov 20 19:51:39 mail kernel: [] free_hot_cold_page+0xdf/0xee Nov 20 19:51:39 mail kernel: [] __pagevec_free+0x18/0x22 Nov 20 19:51:39 mail kernel: [] release_pages+0xff/0x13f Nov 20 19:51:39 mail kernel: [] free_pages_and_swap_cache+0x6b/0x7f Nov 20 19:51:39 mail kernel: [] exit_mmap+0xb0/0xda Nov 20 19:51:39 mail kernel: [] mmput+0x20/0x76 Nov 20 19:51:39 mail kernel: [] flush_old_exec+0x6dd/0x90d Nov 20 19:51:39 mail kernel: [] vfs_read+0x110/0x150 Nov 20 19:51:39 mail kernel: [] kernel_read+0x32/0x3c Nov 20 19:51:39 mail kernel: [] load_elf_binary+0x438/0x12f7 Nov 20 19:51:39 mail kernel: [] __alloc_pages+0x57/0x2a5 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] search_binary_handler+0xa2/0x1fe Nov 20 19:51:39 mail kernel: [] do_execve+0x16c/0x215 Nov 20 19:51:39 mail kernel: [] sys_execve+0x2b/0x68 Nov 20 19:51:39 mail kernel: [] sysenter_past_esp+0x54/0x79 Nov 20 19:51:39 mail kernel: Code: c1 e0 05 8d 1c 07 8b 03 a9 00 00 08 00 74 7c 8b 43 0c 39 e8 89 44 24 0c 75 71 8b 03 89 d9 f6 c4 40 74 02 89 e9 8b 41 04 40 74 08 <0f> 0b 27 01 eb 7f 2c c0 8d 4b 18 8b 53 18 8b 41 04 89 42 04 89 Thanks Neil PS: Accidentally subscribed to announce instead of the mailscanner list, and when canceling after my subscription I hit a mailman bug. "Bug in Mailman version 2.1.5 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly inhibited, but the webmaster can find this information in the Mailman error logs" -- This email and all contents are subject to the following disclaimer: http://www.dcdata.co.za/emaildisclaimer.html From hvdkooij at vanderkooij.org Wed Nov 21 07:54:42 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 21 07:55:08 2007 Subject: Whitelist not working? In-Reply-To: References: Message-ID: <4743E442.9060504@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Edward Dekkers wrote: > I'm trying to send an archive RAR file to a friend. It is a 25Mb RAR file > with nested folders. > > The first dramas I had was getting Postfix to accept the damn thing. (now > resolved) > > The drama is now that MailScanner blocks it ("MailScanner: Message contained > archive nested too deeply") > > I've added the domain where it's going to the whitelist > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) That is a rather unusual spot. What version of MailScanner are you running? How did you install it? What does the file actual look like? And what does the config section look like in which you actually call upon this rules file? And finally did you restart MS after you did make the changes? Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQ+RABvzDRVjxmYERAl++AJ9QEBRsB3J92vS+HGRmBBWkrN5StwCfZmVK qJIbPOkT1yQl4RcYDkYrQRs= =2A+k -----END PGP SIGNATURE----- From hvdkooij at vanderkooij.org Wed Nov 21 08:15:10 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 21 08:15:37 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: References: <47363BDA.5050202@vanderkooij.org> Message-ID: <4743E90E.4000208@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Silva wrote: > Ran this repo today and it gets all requires very well. Installed on > X86-64 with no issues. Are there any optional modules that anyone thinks > are helpful? > I would vote for perl-Mail-ClamAV, perl-Convert-TNEF, and maybe the SPF > modules for spamassassin. There is not really an optional thing in rpm terms. So if the requirement is defined one is stuck with the modules wether one uses them or not. I am not sure what would be wise here. Perhaps two wrappers instead of one. So the current one defines the absolute minimum and a mailscanner-wrapper-complete version that will pull in lots of other usefull modules as well as the basic wrapper but some of these extra modules may never be used depending on the configuration. In such case I would also like to describe them briefly. So one can discard the outer wrapper and then remove the unneeded modules with a small guidance. I am thinking along the lines of a text file with entries like: Requires: Nothing fancy (TM). Feel free to think out loud on the matter. I didn't hesitate either ;-) Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHQ+kMBvzDRVjxmYERApV2AJkBdWLk4VwuNbr6F8wZht5+xQ55cACfSlWE KocQHt5bf0MNQ8BaET1k9cA= =ymJB -----END PGP SIGNATURE----- From shuttlebox at gmail.com Wed Nov 21 08:22:21 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 21 08:22:23 2007 Subject: Whitelist not working? In-Reply-To: References: Message-ID: <625385e30711210022r420ed087k5a8542955a8dc89e@mail.gmail.com> On Nov 21, 2007 7:15 AM, Edward Dekkers wrote: > I'm trying to send an archive RAR file to a friend. It is a 25Mb RAR file > with nested folders. > > The first dramas I had was getting Postfix to accept the damn thing. (now > resolved) > > The drama is now that MailScanner blocks it ("MailScanner: Message contained > archive nested too deeply") > > I've added the domain where it's going to the whitelist > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) > > But it still seems to be blocking. > > Is there any way I can get MailScanner to just ignore checking mails to this > domain and just send the bloody mail through? The spam whitelist only whitelists spam, nothing else. Try setting "Maximum Archive Depth" to 0 and see if that helps. If so, you can leave it at that or create a ruleset to have different values for different senders. -- /peter From uxbod at splatnix.net Wed Nov 21 08:54:10 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 21 08:40:41 2007 Subject: Super Slow Queue Processing In-Reply-To: <4743B2D2.9020901@sendit.nodak.edu> Message-ID: <25006419.19141195635250930.JavaMail.root@office.splatnix.net> Check what RBLs you are using. A few are no longer active which produces the symptom of slow batch processing. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Richard Frovarp" To: "MailScanner discussion" Sent: Wednesday, November 21, 2007 4:23:46 AM (GMT) Europe/London Subject: Re: Super Slow Queue Processing Peter Russell wrote: > Hi there, we have a MailScanner system that has had a lot (any) > attention for 6 months or so and all of a sudden it is unable to > process the messages in the queue faster than they are building up. > > Doing an sa -D -t < on any of the high scoring spam messages i have is > very quick (less than 5sec). there was some error about hash from > sa-learn --force-expire, a google revealed naught so i disabled bayes > for now. but it maks no difference. > > But changing Use Spamassassin to no means the queue is processed > lightening quick. which seems weird because SA appears to run quite > quick. > > The messages do eventually seem to get processed but it takes quite a > while (upto 30min) and the queue seems to be growing muh quicker than > processing. > > MS debug takes AGES. > > I cant seem to find anything useful or interesting in the logs, i have > attached the output of the MS debug (yes i need to update clamav). > > Appreciate ANY tips on how to diagnose (or hopefully fix) this. :) > > Many thanks > Pete Do your lints work? Have you ran sa-update? Are you swapping? My two guesses would be thrashing or a slow DNS lookup or timeout. If you are doing your testing on a machine that processed the message or has access to the same DNS, the result would be cached. You can run MailScanner --debug --debug-sa to see the SA debug output on a batch. You might be able to get a feel for where SA is hanging in the process on incoming messages and it might give you an idea. It's possible you have been blocked from SpamHaus or are using a service that has been shut down (hence the sa-update question). -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From martinh at solidstatelogic.com Wed Nov 21 08:46:20 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 21 08:46:52 2007 Subject: SDBM (was: Minimum hardware capacity for 35k e-mail scans/day) In-Reply-To: <474319D6.3080403@yeticomputers.com> Message-ID: Tried it and my box ground to a halt after 30 mins of trying to do the sa-learn --restore. Must be semaphores or something....couldn't even login a the console. Luckily a CTRL-C on the sa-learn brought everthing back. My bayes seems to be 330MB so that's kinda large, and the SDBM was growing slowly and had got to 260MB when it all ground to a halt....maybe my 2.8Piv and 1.5GB ram ain't enough ;-) -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Rick Chadderdon > Sent: 20 November 2007 17:31 > To: MailScanner discussion > Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > > Julian Field wrote: > > I'm testing it out now. If it's as good as it is reckoned to be, how > > about I make it the default in new installations? (i.e. change > > mailscanner.cf to use it) > SDBM has been criticized (and rejected for several projects) for having > a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > size. I do not know enough about the SA database to say whether this > will be a potential factor in using SDBM with SpamAssassin, but perhaps > someone with more knowledge can use this information. If we can count > on SA always keeping the records smaller than SDBM's max, this sounds > like a good way to increase performance. On the other hand, it's the > kind of thing that SA could cause to break with a relatively simple > change in what they store in the DB > > Rick > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From shuttlebox at gmail.com Wed Nov 21 09:11:56 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 21 09:12:00 2007 Subject: SDBM (was: Minimum hardware capacity for 35k e-mail scans/day) In-Reply-To: References: <474319D6.3080403@yeticomputers.com> Message-ID: <625385e30711210111i7c40f48anbccbe91687bc48aa@mail.gmail.com> On Nov 21, 2007 9:46 AM, Martin.Hepworth wrote: > > Tried it and my box ground to a halt after 30 mins of trying to do the sa-learn --restore. > > Must be semaphores or something....couldn't even login a the console. Luckily a CTRL-C on the sa-learn brought everthing back. > > My bayes seems to be 330MB so that's kinda large, and the SDBM was growing slowly and had got to 260MB when it all ground to a halt....maybe my 2.8Piv and 1.5GB ram ain't enough ;-) I have never understood why so many put so much effort into Bayes. It's just one test out of many. If I'm not interpreting the output from the expire option incorrectly around 50-75% of the tokens get deleted when I do my daily expire from cron. If the database refreshes at that rate, what's the point of trying to keep an old database at any cost? The content may not be very old anyway. I haven't seen any real difference in accuracy from a new db starting to score after learning 200 spam and ham each to a db that is over three months old. I have never bothered with learning either, I have just trusted the autolearning mechanism to do it for me. Maybe my Bayes gets fooled more often than a "properly" trained one but I doubt it's possible to avoid anyway due to how Bayes works so I just lowered the negative scoring of low probability Bayes hits. If you can't convert your old db, just rename the old files and start over with a new db. You can always go back. :-) -- /peter From Andreas.Kasenides at cs.ucy.ac.cy Wed Nov 21 09:16:04 2007 From: Andreas.Kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Wed Nov 21 09:16:07 2007 Subject: Beginner Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> Message-ID: <4743F754.5080304@cs.ucy.ac.cy> I am a relatively newcomer to the MailScanner land but I have been running mail servers (sendmail for too many years to admit and postfix for the last 3 years) and I have come across this Postfix-with-MS incompatibility issue. Apparently the Postfix developers are seriously anti-MS because MS DOES not use their own way of message passing between the SMTP processes and the MS processes (apparently they recommend LMTP). I have read a lot of this on the Postfix lists and while there is a serious issue of how a message is moved from the SMTP service to the virus/spam-detecting service I have come to the conclusion that there are only a couple of issues that need to be clarified from the MS point of view (the rest seems politics to me which I cannot comment since I do not know the players involved): 1. How does MS make sure that when dealing with the incoming Postfix queue it does not ake a mess of it? In other words how does MS know that a message in the queue is free and ready to be processed and that Postfix is not working on it? 2. Apparently the Postfix guys believe that the queue file structure is there own internal "thing" which they do not or would not make public and if a new upgraded structure is created MS will fail miserably upon Postfix upgrade. Remember that MS depends on this structure to properly make changes in the files. I was very suddened by the discussion in the Postfix lists. In my view this sort of thing should happen in the commercial software world, not on open source projects. I would appreciate an answer (even if it is obvious) from somebody that knows enough of the internals of MS. thanks! Andreas Kasenides Joseph L. Casale wrote: > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading > the comments below it, it stated the implementation of Mailscanner > with postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a > similar tutorial? > > > > Thanks for any input! > jlc > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/d312f779/attachment.html From martinh at solidstatelogic.com Wed Nov 21 09:28:23 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 21 09:28:27 2007 Subject: Beginner Question In-Reply-To: <4743F754.5080304@cs.ucy.ac.cy> Message-ID: <7a024000cc6dda42830bd0aee4573d32@solidstatelogic.com> Andreas See "http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:politics" For a FACT based response to all this... -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Andreas Kasenides > Sent: 21 November 2007 09:16 > To: MailScanner discussion > Subject: Re: Beginner Question > > I am a relatively newcomer to the MailScanner land but I have been running > mail servers > (sendmail for too many years to admit and postfix for the last 3 years) > and I have come > across this Postfix-with-MS incompatibility issue. Apparently the Postfix > developers > are seriously anti-MS because MS DOES not use their own way of message > passing > between the SMTP processes and the MS processes (apparently they recommend > LMTP). > I have read a lot of this on the Postfix lists and while there is a > serious issue of how > a message is moved from the SMTP service to the virus/spam-detecting > service I have come to the > conclusion that there are only a couple of issues that need to be > clarified from the MS point of view > (the rest seems politics to me which I cannot comment since I do not know > the players involved): > > 1. How does MS make sure that when dealing with the incoming Postfix queue > it does not ake a mess > of it? In other words how does MS know that a message in the queue is free > and ready to be processed > and that Postfix is not working on it? > 2. Apparently the Postfix guys believe that the queue file structure is > there own internal "thing" > which they do not or would not make public and if a new upgraded structure > is created MS will fail miserably > upon Postfix upgrade. Remember that MS depends on this structure to > properly make changes in the > files. > > I was very suddened by the discussion in the Postfix lists. In my view > this sort of thing should > happen in the commercial software world, not on open source projects. > I would appreciate an answer (even if it is obvious) from somebody that > knows enough of the internals > of MS. > > thanks! > Andreas Kasenides > > Joseph L. Casale wrote: > > Hi, > I was looking for a complete tutorial to setup a mail filter for our > existing server and came upon the following article > (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but reading the > comments below it, it stated the implementation of Mailscanner with > postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a > similar tutorial? > > > > Thanks for any input! > jlc > ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From uxbod at splatnix.net Wed Nov 21 09:44:06 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 21 09:30:32 2007 Subject: Beginner Question In-Reply-To: <4743F754.5080304@cs.ucy.ac.cy> Message-ID: <11753835.19261195638246990.JavaMail.root@office.splatnix.net> Andreas, 1) As part of the installation for Postfix and MailScanner the main.cf file is changed so that a header check is performed on every email that is processed. As "Received" appears in all messages, RFC compliance, then the message is put into a hold queue. MailScanner monitors this directory and when it sees messages it will process them, and on successfully processing, will the deliver them into the outbound queue for Postfix to deliver. If MailScanner was to die half way through processing a message it would still be safe, as it does not remove the message from the hold queue until such time successful processing has taken place. 2) Yes the queue file structure is their "own internal thing", but we are talking about OSS here so anybody is free to view the code and make the necessary changes to MailScanner. Obviously when upgrading Postfix on a server you have to ensure that the revision being installed is compatible with MailScanner, so when they do/if change the structure wait until a suitable MailScanner revision has been released. This is purely my understanding, and I am sure somebody will correct my mistakes ;) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Andreas Kasenides" To: "MailScanner discussion" Sent: Wednesday, November 21, 2007 9:16:04 AM (GMT) Europe/London Subject: Re: Beginner Question I am a relatively newcomer to the MailScanner land but I have been running mail servers (sendmail for too many years to admit and postfix for the last 3 years) and I have come across this Postfix-with-MS incompatibility issue. Apparently the Postfix developers are seriously anti-MS because MS DOES not use their own way of message passing between the SMTP processes and the MS processes (apparently they recommend LMTP). I have read a lot of this on the Postfix lists and while there is a serious issue of how a message is moved from the SMTP service to the virus/spam-detecting service I have come to the conclusion that there are only a couple of issues that need to be clarified from the MS point of view (the rest seems politics to me which I cannot comment since I do not know the players involved): 1. How does MS make sure that when dealing with the incoming Postfix queue it does not ake a mess of it? In other words how does MS know that a message in the queue is free and ready to be processed and that Postfix is not working on it? 2. Apparently the Postfix guys believe that the queue file structure is there own internal "thing" which they do not or would not make public and if a new upgraded structure is created MS will fail miserably upon Postfix upgrade. Remember that MS depends on this structure to properly make changes in the files. I was very suddened by the discussion in the Postfix lists. In my view this sort of thing should happen in the commercial software world, not on open source projects. I would appreciate an answer (even if it is obvious) from somebody that knows enough of the internals of MS. thanks! Andreas Kasenides Joseph L. Casale wrote: Hi, I was looking for a complete tutorial to setup a mail filter for our existing server and came upon the following article ( http://www.howtoforge.com/linux_spam_filter_mail_gateway ) but reading the comments below it, it stated the implementation of Mailscanner with postfix in this manner was unsupported? Can you guys confirm or deny this, and if so possibly recommend a similar tutorial? Thanks for any input! jlc -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From cerit at teleord.co.uk Wed Nov 21 09:41:53 2007 From: cerit at teleord.co.uk (Ceri) Date: Wed Nov 21 09:43:32 2007 Subject: Notifications not being recieved Message-ID: <4743FD61.4040402@teleord.co.uk> Hi, I have recently built installed MailScanner, to compliment an existing sendmail setup. It all seems to be running fine, except that I do not seem to be getting any spam notifications, I still seem to be receiving the spam. I have setup notifications to only go to one email address as a test. MailScanner --lint does not show any errors, so I am not sure where to look next. I am running MailScanner 4.65.3 on Redhat 9. spam.actions.rules contains: # Rules for processing Spam # To: ceri.townsend@vnuinc.co.uk store notify FromOrTo: Default store deliver header "X-Spam-Status: Yes" Here is my Mailscanner.conf: %org-name% = nielsenbook %org-long-name% = Nielsen Book %web-site% = www.your-organisation.com %etc-dir% = /etc/MailScanner %report-dir% = /etc/MailScanner/reports/en %rules-dir% = /etc/MailScanner/rules %mcp-dir% = /etc/MailScanner/mcp Max Children = 5 Run As User = Run As Group = Queue Scan Interval = 6 Incoming Queue Dir = /var/spool/mqueue.in Outgoing Queue Dir = /var/spool/mqueue Incoming Work Dir = /var/spool/MailScanner/incoming Quarantine Dir = /var/spool/MailScanner/quarantine PID file = /var/run/MailScanner.pid Restart Every = 7200 MTA = sendmail Sendmail = /usr/sbin/sendmail Sendmail2 = /usr/sbin/sendmail Incoming Work Group = clamav Incoming Work Permissions = 0644 Quarantine User = root Quarantine Group = mailwatch Quarantine Permissions = 0660 Max Unscanned Bytes Per Scan = 100m Max Unsafe Bytes Per Scan = 50m Max Unscanned Messages Per Scan = 30 Max Unsafe Messages Per Scan = 30 Max Normal Queue Size = 800 Scan Messages = %rules-dir%/ignore.messages.rules Reject Message = no Maximum Attachments Per Message = 200 Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = /usr/bin/tnef --maxsize=100000000 TNEF Timeout = 120 File Command = /usr/bin/file File Timeout = 20 Gunzip Command = /bin/gunzip Gunzip Timeout = 50 Unrar Command = /usr/bin/unrar Unrar Timeout = 50 Find UU-Encoded Files = no Maximum Message Size = %rules-dir%/max.message.size.rules Maximum Attachment Size = -1 Minimum Attachment Size = -1 Maximum Archive Depth = 2 Find Archives By Content = yes Zip Attachments = no Attachments Zip Filename = MessageAttachments.zip Attachments Min Total Size To Zip = 100k Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml Virus Scanning = yes Virus Scanners = clamav Virus Scanner Timeout = 300 Deliver Disinfected Files = no Silent Viruses = HTML-IFrame All-Viruses Still Deliver Silent Viruses = no Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar Block Encrypted Messages = no Block Unencrypted Messages = no Allow Password-Protected Archives = yes Check Filenames In Password-Protected Archives = yes Allowed Sophos Error Messages = Sophos IDE Dir = /opt/sophos-av/lib/sav Sophos Lib Dir = /opt/sophos-av/lib Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide Monitors for ClamAV Updates = /usr/local/share/clamav/*.inc/* /usr/local/share/clamav/*.cvd ClamAVmodule Maximum Recursion Level = 8 ClamAVmodule Maximum Files = 1000 ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes) ClamAVmodule Maximum Compression Ratio = 250 Clamd Port = 3310 Clamd Socket = /tmp/clamd Clamd Lock File = # /var/lock/subsys/clamd Clamd Use Threads = no ClamAV Full Message Scan = yes Dangerous Content Scanning = yes Allow Partial Messages = no Allow External Message Bodies = no Find Phishing Fraud = yes Also Find Numeric Phishing = yes Use Stricter Phishing Net = yes Highlight Phishing Fraud = yes Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf Country Sub-Domains List = %etc-dir%/country.domains.conf Allow IFrame Tags = disarm Allow Form Tags = disarm Allow Script Tags = disarm Allow WebBugs = disarm Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap Known Web Bug Servers = msgtag.com Web Bug Replacement = http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif Allow Object Codebase Tags = disarm Convert Dangerous HTML To Text = no Convert HTML To Text = no Allow Filenames = Deny Filenames = Filename Rules = %etc-dir%/filename.rules.conf Allow Filetypes = Deny Filetypes = Filetype Rules = %etc-dir%/filetype.rules.conf Quarantine Infections = yes Quarantine Silent Viruses = no Quarantine Modified Body = no Quarantine Whole Message = yes Quarantine Whole Messages As Queue Files = no Keep Spam And MCP Archive Clean = no Language Strings = %report-dir%/languages.conf Rejection Report = %report-dir%/rejection.report.txt Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt Deleted Size Message Report = %report-dir%/deleted.size.message.txt Stored Bad Content Message Report = %report-dir%/stored.content.message.txt Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt Stored Virus Message Report = %report-dir%/stored.virus.message.txt Stored Size Message Report = %report-dir%/stored.size.message.txt Disinfected Report = %report-dir%/disinfected.report.txt Inline HTML Signature = %report-dir%/inline.sig.html Inline Text Signature = %report-dir%/inline.sig.txt Signature Image Filename = %report-dir%/sig.jpg Signature Image Filename = signature.jpg Inline HTML Warning = %report-dir%/inline.warning.html Inline Text Warning = %report-dir%/inline.warning.txt Sender Content Report = %report-dir%/sender.content.report.txt Sender Error Report = %report-dir%/sender.error.report.txt Sender Bad Filename Report = %report-dir%/sender.filename.report.txt Sender Virus Report = %report-dir%/sender.virus.report.txt Sender Size Report = %report-dir%/sender.size.report.txt Hide Incoming Work Dir = yes Include Scanner Name In Reports = yes Mail Header = X-%org-name%-MailScanner: Spam Header = X-%org-name%-MailScanner-SpamCheck: Spam Score Header = X-%org-name%-MailScanner-SpamScore: Information Header = X-%org-name%-MailScanner-Information: Add Envelope From Header = yes Add Envelope To Header = no Envelope From Header = X-%org-name%-MailScanner-From: Envelope To Header = X-%org-name%-MailScanner-To: Spam Score Character = s SpamScore Number Instead Of Stars = no Minimum Stars If On Spam List = 0 Clean Header Value = Found to be clean Infected Header Value = Found to be infected Disinfected Header Value = Disinfected Information Header Value = Please contact the ISP for more information Detailed Spam Report = yes Include Scores In SpamAssassin Report = yes Always Include SpamAssassin Report = no Multiple Headers = append Hostname = the %org-name% ($HOSTNAME) MailScanner Sign Messages Already Processed = no Sign Clean Messages = yes Attach Image To Signature = no Attach Image To HTML Message Only = yes Mark Infected Messages = yes Mark Unscanned Messages = yes Unscanned Header Value = Not scanned: please contact your Internet E-Mail Service Provider for details Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2: Deliver Cleaned Messages = yes Notify Senders = yes Notify Senders Of Viruses = no Notify Senders Of Blocked Filenames Or Filetypes = yes Notify Senders Of Blocked Size Attachments = yes Notify Senders Of Other Blocked Content = no Never Notify Senders Of Precedence = list bulk Scanned Modify Subject = no # end Scanned Subject Text = {Scanned} Virus Modify Subject = start Virus Subject Text = {Virus?} Filename Modify Subject = start Filename Subject Text = {Filename?} Content Modify Subject = start Content Subject Text = {Dangerous Content?} Size Modify Subject = start Size Subject Text = {Size} Disarmed Modify Subject = start Disarmed Subject Text = {Disarmed} Phishing Modify Subject = no Phishing Subject Text = {Fraud?} Spam Modify Subject = start Spam Subject Text = {Spam?} High Scoring Spam Modify Subject = start High Scoring Spam Subject Text = {Spam?} Warning Is Attachment = yes Attachment Warning Filename = %org-name%-Attachment-Warning.txt Attachment Encoding Charset = ISO-8859-1 Archive Mail = Send Notices = yes Notices Include Full Headers = yes Hide Incoming Work Dir in Notices = no Notice Signature = -- \nMailScanner\nEmail Virus Scanner\nwww.mailscanner.info Notices From = MailScanner Notices To = postmaster Local Postmaster = postmaster Spam List Definitions = %etc-dir%/spam.lists.conf Virus Scanner Definitions = %etc-dir%/virus.scanners.conf Spam Checks = yes Spam List = # spamhaus-ZEN # You can un-comment this to enable them Spam Domain List = Spam Lists To Be Spam = 1 Spam Lists To Reach High Score = 3 Spam List Timeout = 10 Max Spam List Timeouts = 7 Spam List Timeouts History = 10 Is Definitely Not Spam = &SQLWhitelist Is Definitely Spam = &SQLBlacklist Definite Spam Is High Scoring = no Ignore Spam Whitelist If Recipients Exceed = 20 Max Spam Check Size = 200k Use Watermarking = no Add Watermark = yes Check Watermarks With No Sender = yes Treat Invalid Watermarks With No Sender as Spam = nothing Check Watermarks To Skip Spam Checks = yes Watermark Secret = %org-name%-Secret Watermark Lifetime = 604800 Watermark Header = X-%org-name%-MailScanner-Watermark: Use SpamAssassin = yes Max SpamAssassin Size = 200k Required SpamAssassin Score = 3 High SpamAssassin Score = 10 SpamAssassin Auto Whitelist = yes SpamAssassin Timeout = 75 Max SpamAssassin Timeouts = 10 SpamAssassin Timeouts History = 30 Check SpamAssassin If On Spam List = yes Include Binary Attachments In SpamAssassin = no Spam Score = yes Cache SpamAssassin Results = yes SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db Rebuild Bayes Every = 0 Wait During Bayes Rebuild = no Use Custom Spam Scanner = no Max Custom Spam Scanner Size = 20k Custom Spam Scanner Timeout = 20 Max Custom Spam Scanner Timeouts = 10 Custom Spam Scanner Timeout History = 20 Spam Actions = spam.actions.rules High Scoring Spam Actions = store delete header "X-Spam-Status: Yes" Non Spam Actions = deliver header "X-Spam-Status: No" SpamAssassin Rule Actions = Sender Spam Report = %report-dir%/sender.spam.report.txt Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt Inline Spam Warning = %report-dir%/inline.spam.warning.txt Recipient Spam Report = %report-dir%/recipient.spam.report.txt Enable Spam Bounce = %rules-dir%/bounce.rules Bounce Spam As Attachment = no Syslog Facility = mail Log Speed = no Log Spam = no Log Non Spam = no Log Permitted Filenames = no Log Permitted Filetypes = no Log Silent Viruses = no Log Dangerous HTML Tags = no SpamAssassin Temporary Dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin User State Dir = SpamAssassin Install Prefix = SpamAssassin Site Rules Dir = /etc/mail/spamassassin SpamAssassin Local Rules Dir = SpamAssassin Local State Dir = # /var/lib/spamassassin SpamAssassin Default Rules Dir = MCP Checks = no First Check = spam MCP Required SpamAssassin Score = 1 MCP High SpamAssassin Score = 10 MCP Error Score = 1 MCP Header = X-%org-name%-MailScanner-MCPCheck: Non MCP Actions = deliver MCP Actions = deliver High Scoring MCP Actions = deliver Bounce MCP As Attachment = no MCP Modify Subject = start MCP Subject Text = {MCP?} High Scoring MCP Modify Subject = start High Scoring MCP Subject Text = {MCP?} Is Definitely MCP = no Is Definitely Not MCP = no Definite MCP Is High Scoring = no Always Include MCP Report = no Detailed MCP Report = yes Include Scores In MCP Report = no Log MCP = no MCP Max SpamAssassin Timeouts = 20 MCP Max SpamAssassin Size = 100k MCP SpamAssassin Timeout = 10 MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf MCP SpamAssassin User State Dir = MCP SpamAssassin Local Rules Dir = %mcp-dir% MCP SpamAssassin Default Rules Dir = %mcp-dir% MCP SpamAssassin Install Prefix = %mcp-dir% Recipient MCP Report = %report-dir%/recipient.mcp.report.txt Sender MCP Report = %report-dir%/sender.mcp.report.txt Use Default Rules With Multiple Recipients = no Spam Score Number Format = %d MailScanner Version Number = 4.65.3 SpamAssassin Cache Timings = 1800,300,10800,172800,600 Debug = no Debug SpamAssassin = no Run In Foreground = no Always Looked Up Last = &MailWatchLogging Always Looked Up Last After Batch = no Deliver In Background = yes Delivery Method = batch Split Exim Spool = no Lockfile Dir = /tmp Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions Lock Type = Minimum Code Status = supported Could anyone point me in the right direction? Cheers Ceri From uxbod at splatnix.net Wed Nov 21 10:00:28 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 21 09:46:58 2007 Subject: Notifications not being recieved In-Reply-To: <4743FD61.4040402@teleord.co.uk> Message-ID: <27494134.19411195639228584.JavaMail.root@office.splatnix.net> Have you run MS in debug mode ? If not stop all MS processes and then execute MailScanner --debug. Please post the output, and also check /var/log/messages for any errors. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Ceri" To: mailscanner@lists.mailscanner.info Sent: Wednesday, November 21, 2007 9:41:53 AM (GMT) Europe/London Subject: Notifications not being recieved Hi, I have recently built installed MailScanner, to compliment an existing sendmail setup. It all seems to be running fine, except that I do not seem to be getting any spam notifications, I still seem to be receiving the spam. I have setup notifications to only go to one email address as a test. MailScanner --lint does not show any errors, so I am not sure where to look next. I am running MailScanner 4.65.3 on Redhat 9. spam.actions.rules contains: # Rules for processing Spam # To: ceri.townsend@vnuinc.co.uk store notify FromOrTo: Default store deliver header "X-Spam-Status: Yes" Here is my Mailscanner.conf: %org-name% = nielsenbook %org-long-name% = Nielsen Book %web-site% = www.your-organisation.com %etc-dir% = /etc/MailScanner %report-dir% = /etc/MailScanner/reports/en %rules-dir% = /etc/MailScanner/rules %mcp-dir% = /etc/MailScanner/mcp Max Children = 5 Run As User = Run As Group = Queue Scan Interval = 6 Incoming Queue Dir = /var/spool/mqueue.in Outgoing Queue Dir = /var/spool/mqueue Incoming Work Dir = /var/spool/MailScanner/incoming Quarantine Dir = /var/spool/MailScanner/quarantine PID file = /var/run/MailScanner.pid Restart Every = 7200 MTA = sendmail Sendmail = /usr/sbin/sendmail Sendmail2 = /usr/sbin/sendmail Incoming Work Group = clamav Incoming Work Permissions = 0644 Quarantine User = root Quarantine Group = mailwatch Quarantine Permissions = 0660 Max Unscanned Bytes Per Scan = 100m Max Unsafe Bytes Per Scan = 50m Max Unscanned Messages Per Scan = 30 Max Unsafe Messages Per Scan = 30 Max Normal Queue Size = 800 Scan Messages = %rules-dir%/ignore.messages.rules Reject Message = no Maximum Attachments Per Message = 200 Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = /usr/bin/tnef --maxsize=100000000 TNEF Timeout = 120 File Command = /usr/bin/file File Timeout = 20 Gunzip Command = /bin/gunzip Gunzip Timeout = 50 Unrar Command = /usr/bin/unrar Unrar Timeout = 50 Find UU-Encoded Files = no Maximum Message Size = %rules-dir%/max.message.size.rules Maximum Attachment Size = -1 Minimum Attachment Size = -1 Maximum Archive Depth = 2 Find Archives By Content = yes Zip Attachments = no Attachments Zip Filename = MessageAttachments.zip Attachments Min Total Size To Zip = 100k Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml Virus Scanning = yes Virus Scanners = clamav Virus Scanner Timeout = 300 Deliver Disinfected Files = no Silent Viruses = HTML-IFrame All-Viruses Still Deliver Silent Viruses = no Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar Block Encrypted Messages = no Block Unencrypted Messages = no Allow Password-Protected Archives = yes Check Filenames In Password-Protected Archives = yes Allowed Sophos Error Messages = Sophos IDE Dir = /opt/sophos-av/lib/sav Sophos Lib Dir = /opt/sophos-av/lib Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide Monitors for ClamAV Updates = /usr/local/share/clamav/*.inc/* /usr/local/share/clamav/*.cvd ClamAVmodule Maximum Recursion Level = 8 ClamAVmodule Maximum Files = 1000 ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes) ClamAVmodule Maximum Compression Ratio = 250 Clamd Port = 3310 Clamd Socket = /tmp/clamd Clamd Lock File = # /var/lock/subsys/clamd Clamd Use Threads = no ClamAV Full Message Scan = yes Dangerous Content Scanning = yes Allow Partial Messages = no Allow External Message Bodies = no Find Phishing Fraud = yes Also Find Numeric Phishing = yes Use Stricter Phishing Net = yes Highlight Phishing Fraud = yes Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf Country Sub-Domains List = %etc-dir%/country.domains.conf Allow IFrame Tags = disarm Allow Form Tags = disarm Allow Script Tags = disarm Allow WebBugs = disarm Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap Known Web Bug Servers = msgtag.com Web Bug Replacement = http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif Allow Object Codebase Tags = disarm Convert Dangerous HTML To Text = no Convert HTML To Text = no Allow Filenames = Deny Filenames = Filename Rules = %etc-dir%/filename.rules.conf Allow Filetypes = Deny Filetypes = Filetype Rules = %etc-dir%/filetype.rules.conf Quarantine Infections = yes Quarantine Silent Viruses = no Quarantine Modified Body = no Quarantine Whole Message = yes Quarantine Whole Messages As Queue Files = no Keep Spam And MCP Archive Clean = no Language Strings = %report-dir%/languages.conf Rejection Report = %report-dir%/rejection.report.txt Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt Deleted Size Message Report = %report-dir%/deleted.size.message.txt Stored Bad Content Message Report = %report-dir%/stored.content.message.txt Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt Stored Virus Message Report = %report-dir%/stored.virus.message.txt Stored Size Message Report = %report-dir%/stored.size.message.txt Disinfected Report = %report-dir%/disinfected.report.txt Inline HTML Signature = %report-dir%/inline.sig.html Inline Text Signature = %report-dir%/inline.sig.txt Signature Image Filename = %report-dir%/sig.jpg Signature Image Filename = signature.jpg Inline HTML Warning = %report-dir%/inline.warning.html Inline Text Warning = %report-dir%/inline.warning.txt Sender Content Report = %report-dir%/sender.content.report.txt Sender Error Report = %report-dir%/sender.error.report.txt Sender Bad Filename Report = %report-dir%/sender.filename.report.txt Sender Virus Report = %report-dir%/sender.virus.report.txt Sender Size Report = %report-dir%/sender.size.report.txt Hide Incoming Work Dir = yes Include Scanner Name In Reports = yes Mail Header = X-%org-name%-MailScanner: Spam Header = X-%org-name%-MailScanner-SpamCheck: Spam Score Header = X-%org-name%-MailScanner-SpamScore: Information Header = X-%org-name%-MailScanner-Information: Add Envelope From Header = yes Add Envelope To Header = no Envelope From Header = X-%org-name%-MailScanner-From: Envelope To Header = X-%org-name%-MailScanner-To: Spam Score Character = s SpamScore Number Instead Of Stars = no Minimum Stars If On Spam List = 0 Clean Header Value = Found to be clean Infected Header Value = Found to be infected Disinfected Header Value = Disinfected Information Header Value = Please contact the ISP for more information Detailed Spam Report = yes Include Scores In SpamAssassin Report = yes Always Include SpamAssassin Report = no Multiple Headers = append Hostname = the %org-name% ($HOSTNAME) MailScanner Sign Messages Already Processed = no Sign Clean Messages = yes Attach Image To Signature = no Attach Image To HTML Message Only = yes Mark Infected Messages = yes Mark Unscanned Messages = yes Unscanned Header Value = Not scanned: please contact your Internet E-Mail Service Provider for details Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2: Deliver Cleaned Messages = yes Notify Senders = yes Notify Senders Of Viruses = no Notify Senders Of Blocked Filenames Or Filetypes = yes Notify Senders Of Blocked Size Attachments = yes Notify Senders Of Other Blocked Content = no Never Notify Senders Of Precedence = list bulk Scanned Modify Subject = no # end Scanned Subject Text = {Scanned} Virus Modify Subject = start Virus Subject Text = {Virus?} Filename Modify Subject = start Filename Subject Text = {Filename?} Content Modify Subject = start Content Subject Text = {Dangerous Content?} Size Modify Subject = start Size Subject Text = {Size} Disarmed Modify Subject = start Disarmed Subject Text = {Disarmed} Phishing Modify Subject = no Phishing Subject Text = {Fraud?} Spam Modify Subject = start Spam Subject Text = {Spam?} High Scoring Spam Modify Subject = start High Scoring Spam Subject Text = {Spam?} Warning Is Attachment = yes Attachment Warning Filename = %org-name%-Attachment-Warning.txt Attachment Encoding Charset = ISO-8859-1 Archive Mail = Send Notices = yes Notices Include Full Headers = yes Hide Incoming Work Dir in Notices = no Notice Signature = -- \nMailScanner\nEmail Virus Scanner\nwww.mailscanner.info Notices From = MailScanner Notices To = postmaster Local Postmaster = postmaster Spam List Definitions = %etc-dir%/spam.lists.conf Virus Scanner Definitions = %etc-dir%/virus.scanners.conf Spam Checks = yes Spam List = # spamhaus-ZEN # You can un-comment this to enable them Spam Domain List = Spam Lists To Be Spam = 1 Spam Lists To Reach High Score = 3 Spam List Timeout = 10 Max Spam List Timeouts = 7 Spam List Timeouts History = 10 Is Definitely Not Spam = &SQLWhitelist Is Definitely Spam = &SQLBlacklist Definite Spam Is High Scoring = no Ignore Spam Whitelist If Recipients Exceed = 20 Max Spam Check Size = 200k Use Watermarking = no Add Watermark = yes Check Watermarks With No Sender = yes Treat Invalid Watermarks With No Sender as Spam = nothing Check Watermarks To Skip Spam Checks = yes Watermark Secret = %org-name%-Secret Watermark Lifetime = 604800 Watermark Header = X-%org-name%-MailScanner-Watermark: Use SpamAssassin = yes Max SpamAssassin Size = 200k Required SpamAssassin Score = 3 High SpamAssassin Score = 10 SpamAssassin Auto Whitelist = yes SpamAssassin Timeout = 75 Max SpamAssassin Timeouts = 10 SpamAssassin Timeouts History = 30 Check SpamAssassin If On Spam List = yes Include Binary Attachments In SpamAssassin = no Spam Score = yes Cache SpamAssassin Results = yes SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db Rebuild Bayes Every = 0 Wait During Bayes Rebuild = no Use Custom Spam Scanner = no Max Custom Spam Scanner Size = 20k Custom Spam Scanner Timeout = 20 Max Custom Spam Scanner Timeouts = 10 Custom Spam Scanner Timeout History = 20 Spam Actions = spam.actions.rules High Scoring Spam Actions = store delete header "X-Spam-Status: Yes" Non Spam Actions = deliver header "X-Spam-Status: No" SpamAssassin Rule Actions = Sender Spam Report = %report-dir%/sender.spam.report.txt Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt Inline Spam Warning = %report-dir%/inline.spam.warning.txt Recipient Spam Report = %report-dir%/recipient.spam.report.txt Enable Spam Bounce = %rules-dir%/bounce.rules Bounce Spam As Attachment = no Syslog Facility = mail Log Speed = no Log Spam = no Log Non Spam = no Log Permitted Filenames = no Log Permitted Filetypes = no Log Silent Viruses = no Log Dangerous HTML Tags = no SpamAssassin Temporary Dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin User State Dir = SpamAssassin Install Prefix = SpamAssassin Site Rules Dir = /etc/mail/spamassassin SpamAssassin Local Rules Dir = SpamAssassin Local State Dir = # /var/lib/spamassassin SpamAssassin Default Rules Dir = MCP Checks = no First Check = spam MCP Required SpamAssassin Score = 1 MCP High SpamAssassin Score = 10 MCP Error Score = 1 MCP Header = X-%org-name%-MailScanner-MCPCheck: Non MCP Actions = deliver MCP Actions = deliver High Scoring MCP Actions = deliver Bounce MCP As Attachment = no MCP Modify Subject = start MCP Subject Text = {MCP?} High Scoring MCP Modify Subject = start High Scoring MCP Subject Text = {MCP?} Is Definitely MCP = no Is Definitely Not MCP = no Definite MCP Is High Scoring = no Always Include MCP Report = no Detailed MCP Report = yes Include Scores In MCP Report = no Log MCP = no MCP Max SpamAssassin Timeouts = 20 MCP Max SpamAssassin Size = 100k MCP SpamAssassin Timeout = 10 MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf MCP SpamAssassin User State Dir = MCP SpamAssassin Local Rules Dir = %mcp-dir% MCP SpamAssassin Default Rules Dir = %mcp-dir% MCP SpamAssassin Install Prefix = %mcp-dir% Recipient MCP Report = %report-dir%/recipient.mcp.report.txt Sender MCP Report = %report-dir%/sender.mcp.report.txt Use Default Rules With Multiple Recipients = no Spam Score Number Format = %d MailScanner Version Number = 4.65.3 SpamAssassin Cache Timings = 1800,300,10800,172800,600 Debug = no Debug SpamAssassin = no Run In Foreground = no Always Looked Up Last = &MailWatchLogging Always Looked Up Last After Batch = no Deliver In Background = yes Delivery Method = batch Split Exim Spool = no Lockfile Dir = /tmp Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions Lock Type = Minimum Code Status = supported Could anyone point me in the right direction? Cheers Ceri -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From edward at tdcs.com.au Wed Nov 21 09:56:49 2007 From: edward at tdcs.com.au (Edward Dekkers) Date: Wed Nov 21 09:58:40 2007 Subject: Whitelist not working? In-Reply-To: <4743E442.9060504@vanderkooij.org> References: <4743E442.9060504@vanderkooij.org> Message-ID: <1195639009.16413.9.camel@ubuntu> > > I've added the domain where it's going to the whitelist > > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) > > That is a rather unusual spot. What version of MailScanner are you > running? How did you install it? Using instructions found here: http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu I'm not a hero with server configuration but this how-to has given me a good working well set up. > > What does the file actual look like? Thusly: ---snip--- # If you are basing a blacklist on this then you can refer to # a null (empty) sender address with "/^$/" as the address to match. # # This is where you can build a Spam WhiteList # Addresses matching in here, with the value # "yes" will never be marked as spam. #From: 152.78. yes #From: 130.246. yes FromOrTo: default no From: *@legendwebshop.com yes FromOrTo: *@corporait.com yes ---snip--- I'm trying to send the 25Mb attachment to corporait.com > And what does the config section > look like in which you actually call upon this rules file? ---snip--- # Spam Whitelist: # Make this point to a ruleset, and anything in that ruleset whose value # is "yes" will *never* be marked as spam. # The whitelist check is done before the blacklist check. If anyone whitelists # a message, then all recipients get the message. If no-one has whitelisted it, # then the blacklist is checked. # This setting over-rides the "Is Definitely Spam" setting. # This can also be the filename of a ruleset. #Is Definitely Not Spam = no Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules ---snip--- > > And finally did you restart MS after you did make the changes? Sorry - this shows my lack of understanding in the set up (and shows the problem of following a how-to). I thought Postfix somehow passed control to MailScanner. After thinking further and reading this post I'm thinking MailScanner runs constantly and just watches a queue for scanning (right?) I can re-start MailScanner using the webmin plugin I have, but what is the correct prompt way of re-starting MailScanner? MailScanner runs out of /opt/MailScanner/bin it appears. Regards, Ed. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From cerit at teleord.co.uk Wed Nov 21 10:04:50 2007 From: cerit at teleord.co.uk (Ceri) Date: Wed Nov 21 10:06:18 2007 Subject: Notifications not being recieved In-Reply-To: <27494134.19411195639228584.JavaMail.root@office.splatnix.net> References: <27494134.19411195639228584.JavaMail.root@office.splatnix.net> Message-ID: <474402C2.403@teleord.co.uk> UxBoD wrote: > Have you run MS in debug mode ? If not stop all MS processes and then execute > MailScanner --debug. Please post the output, and also check /var/log/messages > for any errors. > Hi Debug mode gives the following output: In Debugging mode, not forking... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp commit ineffective with AutoCommit enabled at /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, line 114. Stopping now as you are debugging me. I cannot see anything in the messages file. Cheers Ceri From glenn.steen at gmail.com Wed Nov 21 10:08:34 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 21 10:08:36 2007 Subject: Bayes not learning? exchange environment In-Reply-To: References: Message-ID: <223f97700711210208o797188c3vb164310f4ba290a9@mail.gmail.com> On 21/11/2007, Joey Marino wrote: > >> I recently installed a mailscanner filter in front of my exchange > >> server. It was working fine for a few weeks then slowly let more and > >> more spam through. Today it's letting alot of spam through. I am > >> trying to verify that Bayes is learning, how would I do that? Also how > >> do I verify that the spam rules are being updated? > >> > >> I also tried to place spam in a public folder on my exchange server > >> and update bayes with these emails using this method provided by the > >> wiki > >> > http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:sa-learn:msexchange > >> It just stops executing at this line in the python script: > >> log.write(commands.getoutput("%s --prefs-file=%s --spam %s" % > .> (SALEARN, PREFS, TMPFILE))) > >> any ideas? I'm trying to determine what this line is accomplishing. > >> > >> Joey Marino > > >Is there any bayes scores in the headers of the messages? > >Are you running any extra rules from rulesemporium.com? > >Are you properly set up to not accept mail to non-existent addresses? > >Does your exchange server have a non-public address that can only be > reached > >by the mailscanner box? Otherwise the spammers will find it. > > 1. I am new to this, so please excuse any dumbness I may portray > I am not sure how to read the headers other than the reports from MailWatch > Here is an example header: > Return-Path: > Received: from pyszczek (bhc145.neoplus.adsl.tpnet.pl [83.28.92.145]) > by localhost.localdomain (8.13.1/8.13.1) with ESMTP id lAKNStWv009338 > for ; Tue, 20 Nov 2007 18:28:57 -0500 > Received: from [83.28.92.145] by mx1.biz.mail.yahoo.com; Wed, 21 Nov 2007 > 00:28:56 +0100 > Message-ID: <01c82bd5$80c67fa0$915c1c53@lbarlow> > From: "Marty Kimball" > To: > Subject: MoneybackPolicyInternationalPharShipping > Date: Wed, 21 Nov 2007 00:28:56 +0100 > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----=_NextPart_000_0007_01C82BD5.80C67FA0" > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2900.2905 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905 > > Now the information in the rows following "SpamAssassin" in this particular > report show all [N]'s > In the messages that were recognized as spam, The "SpamAssassin > Autolearn:" row show's [Y] > I hope that answers the first question What Scott meant is the headers that MailScanner adds, specifically the rule hits... The headers in MailWatch are prior to them being added, but then.... MailWatch has all that info on the details page anyway:). In the Spam Report section, what rules are listed? Is there mention of Bayes? You could cut'n'paste that... We'll help you "read" it;-). > 2. I ran rules_du_jour (which is also in my cron tab) and the report shows > that I did update rules from SARE. This message was in my summary report: > No index found for ruleset named ANTIDRUG. Check that this ruleset is > still valid. If I'm not entirely wrong, the recommendation is to use sa-update for this ... since a little while back. Check the archives of this list, as well as the wiki, I think there is an article on how to do this. > 3. I don't think I am set up to not accept mail to non-existent addresses, > I didn't create a list of existing email addresses or link it to my exchange > server active directory. How would I do this and how would this help? http://wiki.mailscanner.info holds a lot of really good information. Do read through the MAQ at least, it contains directions on how to do this (depending on MTA etc). It will make a huge difference. > 4. I believe the exchange server does have a private address. All incoming > SMTP requests are staticly routed to the mailscanner box. I ran a DNS lookup > for the hostname of the box and nothing was found. How else would I verify > this to be correct? Since you cannot find the name, you could test with the actual address. If the M-Sexchange server has a private IP address, perhaps protected by a firewall, check that FW to see that there is no NAT leading directly to it. To give better help, please include as much information as you can... Version of OS, MTA, MailScanner, AV, etc etc. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Wed Nov 21 10:33:57 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 21 10:34:00 2007 Subject: Beginner Question In-Reply-To: <11753835.19261195638246990.JavaMail.root@office.splatnix.net> References: <4743F754.5080304@cs.ucy.ac.cy> <11753835.19261195638246990.JavaMail.root@office.splatnix.net> Message-ID: <223f97700711210233w30db5d8boa16fcc441a730492@mail.gmail.com> On 21/11/2007, UxBoD wrote: > Andreas, > > 1) As part of the installation for Postfix and MailScanner the main.cf file is changed so that a header check is performed on every email that is processed. As "Received" appears in all messages, RFC compliance, then the message is put into a hold queue. MailScanner monitors this directory and when it sees messages it will process them, and on successfully processing, will the deliver them into the outbound queue for Postfix to deliver. If MailScanner was to die half way through processing a message it would still be safe, as it does not remove the message from the hold queue until such time successful processing has taken place. > .... That is: A properly set up MailScanner will _never_ touch an active Postfix queue _other_ than the "incoming" queue, where it will place the scanned message after successful completion. The Postfix "incoming queue" is the MailScanner "outbound queue". The Postfix "hold queue" is the MailScanner "inbound queue"... And The only time Postfix touches the hold queue is if you (as an admin) use the postsuper command to "unhold" a message.... Don't do that and you'll be fine;-). > 2) Yes the queue file structure is their "own internal thing", but we are talking about OSS here so anybody is free to view the code and make the necessary changes to MailScanner. Obviously when upgrading Postfix on a server you have to ensure that the revision being installed is compatible with MailScanner, so when they do/if change the structure wait until a suitable MailScanner revision has been released. > > This is purely my understanding, and I am sure somebody will correct my mistakes ;) Quite OK summary IMO. The Since somewhere like version 4.62.x, MailScanner should have a more or less complete support for the current state of the (latest) queue file format... and any older versions as well. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From mailscanner at mckerrs.net Wed Nov 21 11:26:34 2007 From: mailscanner at mckerrs.net (Mailscanner Admin) Date: Wed Nov 21 11:23:29 2007 Subject: Kernel crash, MailScanner mentioned In-Reply-To: <4743D12D.5020706@dcdata.co.za> Message-ID: <26994106.1141195644394720.JavaMail.root@zimbra.mckerrs.net> ----- Original Message ----- From: "Neil Wilson" To: "MailScanner discussion" Sent: Wednesday, November 21, 2007 4:33:17 PM (GMT+1000) Australia/Brisbane Subject: Kernel crash, MailScanner mentioned Hi guys, I realise this might not be caused by MailScanner, but I've got a server running SLES 10 SP1 i586 that's crashing nearly every night. In the logs I see it does mentioned something about MS, but not sure if this means that it's actually MS causing the problem. The kernel it's using is "Linux mail 2.6.16.46-0.12-smp #1 SMP Thu May 17 14:00:09 UTC 2007 i686 i686 i386 GNU/Linux" If anyone could point me in the right direction I'll be more than grateful. I can't run an update on the SLES as it's not registered yet, as the client only wants to register in the new year, but needed the server straight away. Nov 20 19:51:39 mail kernel: ------------[ cut here ]------------ Nov 20 19:51:39 mail kernel: kernel BUG at mm/page_alloc.c:295! Nov 20 19:51:39 mail kernel: invalid opcode: 0000 [#1] Nov 20 19:51:39 mail kernel: SMP Nov 20 19:51:39 mail kernel: last sysfs file: /firmware/edd/int13_dev80/extensions Nov 20 19:51:39 mail kernel: Modules linked in: xt_limit xt_state xt_MARK ipt_MASQUERADE xt_tcpudp ipt_REJECT ipt_LOG iptable_mangle iptable_nat iptable_filt er ip_tables x_tables ip_nat_ftp ip_nat ip_conntrack_ftp ip_conntrack nfnetlink af_packet cpufreq_ondemand cpufreq_userspace cpufreq_powersave speedstep_cent rino freq_table button battery ac loop dm_mod hw_random i915 drm e1000 intel_agp shpchp pci_hotplug uhci_hcd ehci_hcd ahci agpgart ohci1394 i2c_i801 i2c_core pata_jmicron usbcore ieee1394 sundance mii parport_pc lp parport ext3 jbd edd fan thermal processor pata_marvell sg ata_piix libata generic sd_mod scsi_mod ide_disk ide_core Nov 20 19:51:39 mail kernel: CPU: 1 Nov 20 19:51:39 mail kernel: EIP: 0060:[] Not tainted VLI Nov 20 19:51:39 mail kernel: EFLAGS: 00210002 (2.6.16.46-0.12-smp #1) Nov 20 19:51:39 mail kernel: EIP is at free_pages_bulk+0x12c/0x1e4 Nov 20 19:51:39 mail kernel: eax: 00000001 ebx: c13cdb00 ecx: c13cdb00 edx: 00000001 Nov 20 19:51:39 mail kernel: esi: 000006d9 edi: c13cdb20 ebp: 00000000 esp: e84fdd80 Nov 20 19:51:39 mail kernel: ds: 007b es: 007b ss: 0068 Nov 20 19:51:39 mail kernel: Process MailScanner (pid: 24234, threadinfo=e84fc000 task=dfe9eb70) Nov 20 19:51:39 mail kernel: Stack: <0>c030188c 0000001c c0301780 00000000 00000001 00000001 c14d4aa0 c0301880 Nov 20 19:51:39 mail kernel: 00200202 c0301780 c0149cba 00000000 00000003 e84fdde8 e84fddd8 0000000d Nov 20 19:51:39 mail kernel: c0149ce1 c14db140 c0301780 c17de14c c014c1d9 0000000e 0000000e 00000000 Nov 20 19:51:39 mail kernel: Call Trace: Nov 20 19:51:39 mail kernel: [] free_hot_cold_page+0xdf/0xee Nov 20 19:51:39 mail kernel: [] __pagevec_free+0x18/0x22 Nov 20 19:51:39 mail kernel: [] release_pages+0xff/0x13f Nov 20 19:51:39 mail kernel: [] free_pages_and_swap_cache+0x6b/0x7f Nov 20 19:51:39 mail kernel: [] exit_mmap+0xb0/0xda Nov 20 19:51:39 mail kernel: [] mmput+0x20/0x76 Nov 20 19:51:39 mail kernel: [] flush_old_exec+0x6dd/0x90d Nov 20 19:51:39 mail kernel: [] vfs_read+0x110/0x150 Nov 20 19:51:39 mail kernel: [] kernel_read+0x32/0x3c Nov 20 19:51:39 mail kernel: [] load_elf_binary+0x438/0x12f7 Nov 20 19:51:39 mail kernel: [] __alloc_pages+0x57/0x2a5 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] search_binary_handler+0xa2/0x1fe Nov 20 19:51:39 mail kernel: [] do_execve+0x16c/0x215 Nov 20 19:51:39 mail kernel: [] sys_execve+0x2b/0x68 Nov 20 19:51:39 mail kernel: [] sysenter_past_esp+0x54/0x79 Nov 20 19:51:39 mail kernel: Code: c1 e0 05 8d 1c 07 8b 03 a9 00 00 08 00 74 7c 8b 43 0c 39 e8 89 44 24 0c 75 71 8b 03 89 d9 f6 c4 40 74 02 89 e9 8b 41 04 40 74 08 <0f> 0b 27 01 eb 7f 2c c0 8d 4b 18 8b 53 18 8b 41 04 89 42 04 89 Thanks Neil PS: Accidentally subscribed to announce instead of the mailscanner list, and when canceling after my subscription I hit a mailman bug. "Bug in Mailman version 2.1.5 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly inhibited, but the webmaster can find this information in the Mailman error logs" -- This email and all contents are subject to the following disclaimer: http://www.dcdata.co.za/emaildisclaimer.html -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. I'd run memtest on the server for as long as you can, e.g. 12 hours. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/11bf0c1c/attachment.html From uxbod at splatnix.net Wed Nov 21 11:42:25 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 21 11:28:50 2007 Subject: Kernel crash, MailScanner mentioned In-Reply-To: <26994106.1141195644394720.JavaMail.root@zimbra.mckerrs.net> Message-ID: <27812436.19531195645345745.JavaMail.root@office.splatnix.net> Is this happening the same time, nearly, every night ? If so what cronjobs are running at that time ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Mailscanner Admin" To: "MailScanner discussion" Sent: Wednesday, November 21, 2007 11:26:34 AM (GMT) Europe/London Subject: Re: Kernel crash, MailScanner mentioned ----- Original Message ----- From: "Neil Wilson" To: "MailScanner discussion" Sent: Wednesday, November 21, 2007 4:33:17 PM (GMT+1000) Australia/Brisbane Subject: Kernel crash, MailScanner mentioned Hi guys, I realise this might not be caused by MailScanner, but I've got a server running SLES 10 SP1 i586 that's crashing nearly every night. In the logs I see it does mentioned something about MS, but not sure if this means that it's actually MS causing the problem. The kernel it's using is "Linux mail 2.6.16.46-0.12-smp #1 SMP Thu May 17 14:00:09 UTC 2007 i686 i686 i386 GNU/Linux" If anyone could point me in the right direction I'll be more than grateful. I can't run an update on the SLES as it's not registered yet, as the client only wants to register in the new year, but needed the server straight away. Nov 20 19:51:39 mail kernel: ------------[ cut here ]------------ Nov 20 19:51:39 mail kernel: kernel BUG at mm/page_alloc.c:295! Nov 20 19:51:39 mail kernel: invalid opcode: 0000 [#1] Nov 20 19:51:39 mail kernel: SMP Nov 20 19:51:39 mail kernel: last sysfs file: /firmware/edd/int13_dev80/extensions Nov 20 19:51:39 mail kernel: Modules linked in: xt_limit xt_state xt_MARK ipt_MASQUERADE xt_tcpudp ipt_REJECT ipt_LOG iptable_mangle iptable_nat iptable_filt er ip_tables x_tables ip_nat_ftp ip_nat ip_conntrack_ftp ip_conntrack nfnetlink af_packet cpufreq_ondemand cpufreq_userspace cpufreq_powersave speedstep_cent rino freq_table button battery ac loop dm_mod hw_random i915 drm e1000 intel_agp shpchp pci_hotplug uhci_hcd ehci_hcd ahci agpgart ohci1394 i2c_i801 i2c_core pata_jmicron usbcore ieee1394 sundance mii parport_pc lp parport ext3 jbd edd fan thermal processor pata_marvell sg ata_piix libata generic sd_mod scsi_mod ide_disk ide_core Nov 20 19:51:39 mail kernel: CPU: 1 Nov 20 19:51:39 mail kernel: EIP: 0060:[] Not tainted VLI Nov 20 19:51:39 mail kernel: EFLAGS: 00210002 (2.6.16.46-0.12-smp #1) Nov 20 19:51:39 mail kernel: EIP is at free_pages_bulk+0x12c/0x1e4 Nov 20 19:51:39 mail kernel: eax: 00000001 ebx: c13cdb00 ecx: c13cdb00 edx: 00000001 Nov 20 19:51:39 mail kernel: esi: 000006d9 edi: c13cdb20 ebp: 00000000 esp: e84fdd80 Nov 20 19:51:39 mail kernel: ds: 007b es: 007b ss: 0068 Nov 20 19:51:39 mail kernel: Process MailScanner (pid: 24234, threadinfo=e84fc000 task=dfe9eb70) Nov 20 19:51:39 mail kernel: Stack: <0>c030188c 0000001c c0301780 00000000 00000001 00000001 c14d4aa0 c0301880 Nov 20 19:51:39 mail kernel: 00200202 c0301780 c0149cba 00000000 00000003 e84fdde8 e84fddd8 0000000d Nov 20 19:51:39 mail kernel: c0149ce1 c14db140 c0301780 c17de14c c014c1d9 0000000e 0000000e 00000000 Nov 20 19:51:39 mail kernel: Call Trace: Nov 20 19:51:39 mail kernel: [] free_hot_cold_page+0xdf/0xee Nov 20 19:51:39 mail kernel: [] __pagevec_free+0x18/0x22 Nov 20 19:51:39 mail kernel: [] release_pages+0xff/0x13f Nov 20 19:51:39 mail kernel: [] free_pages_and_swap_cache+0x6b/0x7f Nov 20 19:51:39 mail kernel: [] exit_mmap+0xb0/0xda Nov 20 19:51:39 mail kernel: [] mmput+0x20/0x76 Nov 20 19:51:39 mail kernel: [] flush_old_exec+0x6dd/0x90d Nov 20 19:51:39 mail kernel: [] vfs_read+0x110/0x150 Nov 20 19:51:39 mail kernel: [] kernel_read+0x32/0x3c Nov 20 19:51:39 mail kernel: [] load_elf_binary+0x438/0x12f7 Nov 20 19:51:39 mail kernel: [] __alloc_pages+0x57/0x2a5 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 Nov 20 19:51:39 mail kernel: [] search_binary_handler+0xa2/0x1fe Nov 20 19:51:39 mail kernel: [] do_execve+0x16c/0x215 Nov 20 19:51:39 mail kernel: [] sys_execve+0x2b/0x68 Nov 20 19:51:39 mail kernel: [] sysenter_past_esp+0x54/0x79 Nov 20 19:51:39 mail kernel: Code: c1 e0 05 8d 1c 07 8b 03 a9 00 00 08 00 74 7c 8b 43 0c 39 e8 89 44 24 0c 75 71 8b 03 89 d9 f6 c4 40 74 02 89 e9 8b 41 04 40 74 08 <0f> 0b 27 01 eb 7f 2c c0 8d 4b 18 8b 53 18 8b 41 04 89 42 04 89 Thanks Neil PS: Accidentally subscribed to announce instead of the mailscanner list, and when canceling after my subscription I hit a mailman bug. "Bug in Mailman version 2.1.5 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly inhibited, but the webmaster can find this information in the Mailman error logs" -- This email and all contents are subject to the following disclaimer: http://www.dcdata.co.za/emaildisclaimer.html -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. I'd run memtest on the server for as long as you can, e.g. 12 hours. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From neilw at dcdata.co.za Wed Nov 21 11:35:40 2007 From: neilw at dcdata.co.za (Neil Wilson) Date: Wed Nov 21 11:37:33 2007 Subject: Kernel crash, MailScanner mentioned In-Reply-To: <27812436.19531195645345745.JavaMail.root@office.splatnix.net> References: <27812436.19531195645345745.JavaMail.root@office.splatnix.net> Message-ID: <4744180C.9030004@dcdata.co.za> UxBoD wrote: > Is this happening the same time, nearly, every night ? If so what cronjobs are running at that time ? > > Regards, > > --[ UxBoD ]-- Thanks for the reply. I ran a mem test on the server this morning and it picked up a faulty memory module, hopefully tonight it won't lock up. This system has had 3 mainboards and 4 different memory modules in the last 3 days for different reasons. Fun and games! Thanks. Regards. Neil -- This email and all contents are subject to the following disclaimer: http://www.dcdata.co.za/emaildisclaimer.html From Andreas.Kasenides at cs.ucy.ac.cy Wed Nov 21 12:32:40 2007 From: Andreas.Kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Wed Nov 21 12:32:43 2007 Subject: Beginner Question In-Reply-To: <11753835.19261195638246990.JavaMail.root@office.splatnix.net> References: <11753835.19261195638246990.JavaMail.root@office.splatnix.net> Message-ID: <47442568.3080206@cs.ucy.ac.cy> UxBoD wrote: > Andreas, > > 1) As part of the installation for Postfix and MailScanner the main.cf file is changed so that a header check is performed on every email that is processed. As "Received" appears in all messages, RFC compliance, then the message is put into a hold queue. MailScanner monitors this directory and when it sees messages it will process them, and on successfully processing, will the deliver them into the outbound queue for Postfix to deliver. If MailScanner was to die half way through processing a message it would still be safe, as it does not remove the message from the hold queue until such time successful processing has taken place. > Let me elaborate a little further on this issue: Excuse me if I insist on this and correct me if necessary. The HOLD queue is NOT an inactive queue as Glenn suggests but rather a different kind of queue (from the incoming queue for example) in that messages are put there by Postfix and forgotten rather than being continuesly monitored. The issue though is how does MS make sure that during its routine scanning of the HOLD queue it does not pick up one of the messages that are just being written (and not finished yet) by Postfix. In other words is it your understanding that Postfix properly "locks" the files and that MS properly detects the locks to avoid any mishaps. I expect that the above is standard these days and therefore the only issue that remains is for MS to properly understand the Postfix queue file format. Correct? thanks a zillion for all clarifications Andreas > 2) Yes the queue file structure is their "own internal thing", but we are talking about OSS here so anybody is free to view the code and make the necessary changes to MailScanner. Obviously when upgrading Postfix on a server you have to ensure that the revision being installed is compatible with MailScanner, so when they do/if change the structure wait until a suitable MailScanner revision has been released. > > This is purely my understanding, and I am sure somebody will correct my mistakes ;) > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Andreas Kasenides" > To: "MailScanner discussion" > Sent: Wednesday, November 21, 2007 9:16:04 AM (GMT) Europe/London > Subject: Re: Beginner Question > > > I am a relatively newcomer to the MailScanner land but I have been running mail servers > (sendmail for too many years to admit and postfix for the last 3 years) and I have come > across this Postfix-with-MS incompatibility issue. Apparently the Postfix developers > are seriously anti-MS because MS DOES not use their own way of message passing > between the SMTP processes and the MS processes (apparently they recommend LMTP). > I have read a lot of this on the Postfix lists and while there is a serious issue of how > a message is moved from the SMTP service to the virus/spam-detecting service I have come to the > conclusion that there are only a couple of issues that need to be clarified from the MS point of view > (the rest seems politics to me which I cannot comment since I do not know the players involved): > > 1. How does MS make sure that when dealing with the incoming Postfix queue it does not ake a mess > of it? In other words how does MS know that a message in the queue is free and ready to be processed > and that Postfix is not working on it? > 2. Apparently the Postfix guys believe that the queue file structure is there own internal "thing" > which they do not or would not make public and if a new upgraded structure is created MS will fail miserably > upon Postfix upgrade. Remember that MS depends on this structure to properly make changes in the > files. > > I was very suddened by the discussion in the Postfix lists. In my view this sort of thing should > happen in the commercial software world, not on open source projects. > I would appreciate an answer (even if it is obvious) from somebody that knows enough of the internals > of MS. > > thanks! > Andreas Kasenides > > Joseph L. Casale wrote: > > > > > Hi, > I was looking for a complete tutorial to setup a mail filter for our existing server and came upon the following article ( http://www.howtoforge.com/linux_spam_filter_mail_gateway ) but reading the comments below it, it stated the implementation of Mailscanner with postfix in this manner was unsupported? > > > > Can you guys confirm or deny this, and if so possibly recommend a similar tutorial? > > > > Thanks for any input! > jlc > > From gerard at seibercom.net Wed Nov 21 12:33:29 2007 From: gerard at seibercom.net (Gerard) Date: Wed Nov 21 12:33:33 2007 Subject: Beginner Question In-Reply-To: <4743F754.5080304@cs.ucy.ac.cy> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> <4743F754.5080304@cs.ucy.ac.cy> Message-ID: <20071121073249.957C.GERARD@seibercom.net> > On Wednesday November 21, 2007 at 04:16:04 (AM) Andreas Kasenides wrote: [snip] > I was very suddened by the discussion in the Postfix lists. In my view this > sort of thing should happen in the commercial software world, not on open > source projects. I would appreciate an answer (even if it is obvious) from > somebody that nows enough of the internals of MS. I honestly do not agree with that assessment. If these were commercial products with millions of dollars, or whatever currency you are dealing with involved, I can guarantee that Wietse and Julian would have worked out there differences long ago. Microsoft could easily write code that would prevent any but its own applications from working correctly; however, that would be suicide. Symantec could develop its AV program to crash any MUA it did not approve of. That would cost it money, something commercial enterprises are not to keen to do. Yes, incompatibilities do arise from time to time; however, they are usually attended to quickly. The old adage, "Money Talks" is relevant here. With no monetary gain involved, or board of directors to contend with, the motivation to remedy a situation declines proportionately. Who is to blame for this diabolical situation is debatable. Postfix is the program that Mailscanner is accessing, so therefore there could be made a case that Postfix is the one to make the rules. Wietse has not made any overt changes to his product that would prevent Mailscanner from working with it; however, there is nothing that would prevent him from doing so. It would seem, at least from my view point, that an acceptable API should be developed, similar to what Dovecot and Postfix achieved, to alleviate this problem. Unfortunately, that would require a dialog between the parties involved. From what I have deduced, that does not presently exist. Just my unsolicited 2?. -- Gerard From bpirie at rma.edu Wed Nov 21 13:09:07 2007 From: bpirie at rma.edu (Brendan Pirie) Date: Wed Nov 21 13:06:42 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <4743E90E.4000208@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> <4743E90E.4000208@vanderkooij.org> Message-ID: <47442DF3.8070708@rma.edu> Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Scott Silva wrote: > >> Ran this repo today and it gets all requires very well. Installed on >> X86-64 with no issues. Are there any optional modules that anyone thinks >> are helpful? >> I would vote for perl-Mail-ClamAV, perl-Convert-TNEF, and maybe the SPF >> modules for spamassassin. > > There is not really an optional thing in rpm terms. So if the > requirement is defined one is stuck with the modules wether one uses > them or not. > > I am not sure what would be wise here. Perhaps two wrappers instead of > one. So the current one defines the absolute minimum and a > mailscanner-wrapper-complete version that will pull in lots of other > usefull modules as well as the basic wrapper but some of these extra > modules may never be used depending on the configuration. > > In such case I would also like to describe them briefly. So one can > discard the outer wrapper and then remove the unneeded modules with a > small guidance. > > I am thinking along the lines of a text file with entries like: > > > Requires: > > Nothing fancy (TM). > > Feel free to think out loud on the matter. I didn't hesitate either ;-) > > Hugo. > Another possibility would be something like MailScanner.rpm for the "most common" install options, and MailScanner-extras.rpm for features not everyone needs as an additional rpm, instead of packaging MailScanner twice. This would also reduce space on the server and bandwidth usage. Depending on needs/wants/opinions the "extras" could be further broken down, such as MailScanner-spf.rpm, etc.. and people could install only those extra features/packages they want. Just thinking out loud (pre-coffee) ;) Brendan P.S. As a CentOS user myself, I naturally think a MailScanner addition to rpmforge is a great idea! :) (It also gives me another argument for MailScanner when discussing MailScanner vs. Amavis with fellow CentOS users) From shuttlebox at gmail.com Wed Nov 21 13:18:13 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 21 13:18:18 2007 Subject: Beginner Question In-Reply-To: <20071121073249.957C.GERARD@seibercom.net> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> <4743F754.5080304@cs.ucy.ac.cy> <20071121073249.957C.GERARD@seibercom.net> Message-ID: <625385e30711210518j4152aa7k8180466db33c20e3@mail.gmail.com> On Nov 21, 2007 1:33 PM, Gerard wrote: > Microsoft could easily write code that would prevent any but its own > applications from working correctly; however, that would be suicide. Isn't that exactly what they are doing and even been convicted for on several accounts? However, I think it's called murder when it's the other guy that dies. :-) -- /peter From glenn.steen at gmail.com Wed Nov 21 13:40:57 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 21 13:47:36 2007 Subject: Beginner Question In-Reply-To: <47442568.3080206@cs.ucy.ac.cy> References: <11753835.19261195638246990.JavaMail.root@office.splatnix.net> <47442568.3080206@cs.ucy.ac.cy> Message-ID: <223f97700711210540g42b7af01v55cf6838b3a09b29@mail.gmail.com> On 21/11/2007, Andreas Kasenides wrote: > UxBoD wrote: > > Andreas, > > > > 1) As part of the installation for Postfix and MailScanner the main.cf file is changed so that a header check is performed on every email that is processed. As "Received" appears in all messages, RFC compliance, then the message is put into a hold queue. MailScanner monitors this directory and when it sees messages it will process them, and on successfully processing, will the deliver them into the outbound queue for Postfix to deliver. If MailScanner was to die half way through processing a message it would still be safe, as it does not remove the message from the hold queue until such time successful processing has taken place. > > > Let me elaborate a little further on this issue: > Excuse me if I insist on this and correct me if necessary. The HOLD > queue is NOT an inactive queue > as Glenn suggests but rather a different kind of queue (from the > incoming queue for example) > in that messages are put there by Postfix and forgotten rather than > being continuesly monitored. What on earth are you on about?! This is exactly it: The queue manager of Postfix _will never touch the hold queue_. Calling it a queue is a misnomer, at best. It is a "black bag of parked messages". The ONLY way to get them out of there (that Postfix support) is via the postsuper command. The massages put in the HOLD "queue" never ever go to the incoming queue. > The issue though is how does MS make sure that during its routine scanning > of the HOLD queue it does not pick up one of the messages that are just > being written > (and not finished yet) by Postfix. Read the code! It is actually not that hard to follow:-):-). For "pre milter support" various test will be done, ending with trying to find the "end record" (type E). For "milter support" (versions 2.3/2.4 with a milter defined) pretty much the same things will be tested, but where MS used to skip past the body, we now have to spin through/verify the "record structure". All this is needed since.... > In other words is it your understanding that Postfix properly "locks" > the files and that MS properly > detects the locks to avoid any mishaps. .... Wietse doesn't do locking. There are no file locks on the queue files. So the only way to know is to peek through the file. If it isn't complete, it is ignored (by MailScanner). As said, read the code... If you don't believe me;-). I've been through this code pretty extensively, since I'm the one to blame for the milter-support change;). > I expect that the above is standard these days and therefore the only > issue that remains is for MS > to properly understand the Postfix queue file format. Correct? Well, we have to do our very best with that, yes. Since there is no file locking, and since we want to get at information hidden in the diverse records (like envelope sender/recipient(s) etc). > thanks a zillion for all clarifications > Andreas Hope that clarifies it some:-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From gerard at seibercom.net Wed Nov 21 14:14:44 2007 From: gerard at seibercom.net (Gerard Seibert) Date: Wed Nov 21 14:14:48 2007 Subject: {OT}Beginner Question In-Reply-To: <625385e30711210518j4152aa7k8180466db33c20e3@mail.gmail.com> References: <20071121073249.957C.GERARD@seibercom.net> <625385e30711210518j4152aa7k8180466db33c20e3@mail.gmail.com> Message-ID: <20071121084747.0D10.GERARD@seibercom.net> On Wednesday November 21, 2007 at 08:18:13 (AM) shuttlebox wrote: > Isn't that exactly what they are doing and even been convicted for on > several accounts? However, I think it's called murder when it's the > other guy that dies. Actually, no they have not. They have been accused, and in some cases convicted of using their market share to unduly influence the use of its products over a competitors. Whether that could be construed as "good business" or "ethically challenged" is open for debate. The US filed suit under the Sherman Anti Trust Act, which is really funny since that statue was designed to control the railroad and oil barons of that era. The European nations, using a typical socialist scenario, want to level the playing field, so they have enjoined into this legal attach on a legal corporation. No one puts a gun to your head and forces you to by a Microsoft product. It is not like gasoline, where the options are not as varied. A small group of individuals can control the price of petroleum. Conversely, software can be written with virtually no overhead involved, and distributed at zero or low cost. No one forces you to use any particular OS or software product. Well, maybe your employer does; however, that is a totally different situation. The goal of any business person is to produce a product, distribute it successfully, and make a decent return on their investment. In our society today, it is easier to bring legal action against a successful corporation than it is to create a better product. At one time there was axiom that stated in part that if you make a better mouse trap, someone will make a better mouse. In today's business climate, if you make a better mouse trap, the mice will sue. Just look at Google. When they stated, they were all the rage. Everyone, well almost everyone, loved them. Now they are constantly being attacked. I read where Sun Microsystems was contemplating legal action against them. There are already several lawsuits that claim Google is unduly discriminating against certain web sites for a varied list of reasons. It just never ends. People want the courts to do what they are unable to accomplish through hard work. As to your comment regarding murder; just because the other individual dies does not constitute a criminal act. Remember the short lived battle between VHS and BetaMAX. Or how about GAF v. Kodak? The natural selection of the fittest is just the way it is. -- Gerard From MailScanner at ecs.soton.ac.uk Wed Nov 21 14:51:53 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 14:52:14 2007 Subject: Super Slow Queue Processing In-Reply-To: <47438A00.2040409@enitech.com.au> References: <47438A00.2040409@enitech.com.au> Message-ID: <47444609.4060701@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Run a "MailScanner --debug". If you get any weird errors about a problem in some line in a C file, then your SpamAssassin cache is screwed. Deleting it does no harm, it very quickly rebuilds itself. I've seen this suddenly cause exactly the problem you are seeing. Jules. Peter Russell wrote: > Hi there, we have a MailScanner system that has had a lot (any) > attention for 6 months or so and all of a sudden it is unable to > process the messages in the queue faster than they are building up. > > Doing an sa -D -t < on any of the high scoring spam messages i have is > very quick (less than 5sec). there was some error about hash from > sa-learn --force-expire, a google revealed naught so i disabled bayes > for now. but it maks no difference. > > But changing Use Spamassassin to no means the queue is processed > lightening quick. which seems weird because SA appears to run quite > quick. > > The messages do eventually seem to get processed but it takes quite a > while (upto 30min) and the queue seems to be growing muh quicker than > processing. > > MS debug takes AGES. > > I cant seem to find anything useful or interesting in the logs, i have > attached the output of the MS debug (yes i need to update clamav). > > Appreciate ANY tips on how to diagnose (or hopefully fix) this. :) > > Many thanks > Pete > > > MailScanner version 4.55.9 > SpamAssassin version 3.1.8 > running on Perl version 5.8.5 > Linux Centos 2.6.9-11.ELsmp > Postfix 2.3 (HOLD method) > > tarting MailScanner daemons: > incoming postfix : [ OK ] > outgoing postfix : [ OK ] > MailScanner: In Debugging mode, not forking... > LibClamAV Warning: > ******************************************************** > LibClamAV Warning: *** This version of the ClamAV engine is > outdated. *** > LibClamAV Warning: *** DON'T PANIC! Read > http://www.clamav.net/faq.html *** > LibClamAV Warning: > ******************************************************** > LibClamAV Warning: > ******************************************************** > LibClamAV Warning: *** This version of the ClamAV engine is > outdated. *** > LibClamAV Warning: *** DON'T PANIC! Read > http://www.clamav.net/faq.html *** > LibClamAV Warning: > ******************************************************** > Ignore errors about failing to find EOCD signature > format error: can't find EOCD signature > at /usr/sbin/MailScanner line 820 > > > > format error: can't find EOCD signature > at /usr/sbin/MailScanner line 820 > Stopping now as you are debugging me. > commit ineffective with AutoCommit enabled at > /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, > line 1422. > Commmit ineffective while AutoCommit is on at > /usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93, > line 1422. > [ OK ] Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHREYQEfZZRxQVtlQRAkF0AJ9E1ArhEte7pBGYAeC/f5J8wVeRygCfW4v+ bBymPIZgR0x/NM2bcxM4thc= =5wKe -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Nov 21 14:53:58 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 14:54:19 2007 Subject: Whitelist not working? In-Reply-To: References: Message-ID: <47444686.8020400@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Edward Dekkers wrote: > I'm trying to send an archive RAR file to a friend. It is a 25Mb RAR file > with nested folders. > > The first dramas I had was getting Postfix to accept the damn thing. (now > resolved) > > The drama is now that MailScanner blocks it ("MailScanner: Message contained > archive nested too deeply") > > I've added the domain where it's going to the whitelist > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) > > But it still seems to be blocking. > There can be many many "whitelists". The one I provide for whitelisting for spam checks (works on the "Is Definitely Not Spam" conf setting) is just a useful example. You can copy the technique to any of the other conf settings that say they can take rulesets, which are virtually all of them. You want to create a ruleset for "Max Archive Depth", setting it to 0 for the sender or domain you are getting this from or to, and leave the default setting at something sensible. > Is there any way I can get MailScanner to just ignore checking mails to this > domain and just send the bloody mail through? > > Regards, > Ed. > > > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHREaMEfZZRxQVtlQRAk32AKDLiqujynK7o3rdteIFr6JQQwoI5QCdHAHG EJNuVN4jp1vqFtuDK38QmPI= =aCY9 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Nov 21 14:55:17 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 14:55:43 2007 Subject: Kernel crash, MailScanner mentioned In-Reply-To: <4743D12D.5020706@dcdata.co.za> References: <4743D12D.5020706@dcdata.co.za> Message-ID: <474446D5.1020606@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MailScanner is written in a high level language, and is incapable of directly causing a kernel crash itself. There is no way in Perl (that I am aware of) of doing things like directly accessing particular memory locations or anything like that which could cause trouble of this sort. Jules. Neil Wilson wrote: > Hi guys, > > I realise this might not be caused by MailScanner, but I've got a > server running SLES 10 SP1 i586 that's crashing nearly every night. > > In the logs I see it does mentioned something about MS, but not sure > if this means that it's actually MS causing the problem. > > The kernel it's using is "Linux mail 2.6.16.46-0.12-smp #1 SMP Thu May > 17 14:00:09 UTC 2007 i686 i686 i386 GNU/Linux" > > If anyone could point me in the right direction I'll be more than > grateful. > > I can't run an update on the SLES as it's not registered yet, as the > client only wants to register in the new year, but needed the server > straight away. > > Nov 20 19:51:39 mail kernel: ------------[ cut here ]------------ > Nov 20 19:51:39 mail kernel: kernel BUG at mm/page_alloc.c:295! > Nov 20 19:51:39 mail kernel: invalid opcode: 0000 [#1] > Nov 20 19:51:39 mail kernel: SMP > Nov 20 19:51:39 mail kernel: last sysfs file: > /firmware/edd/int13_dev80/extensions > Nov 20 19:51:39 mail kernel: Modules linked in: xt_limit xt_state > xt_MARK ipt_MASQUERADE xt_tcpudp ipt_REJECT ipt_LOG iptable_mangle > iptable_nat iptable_filt > er ip_tables x_tables ip_nat_ftp ip_nat ip_conntrack_ftp ip_conntrack > nfnetlink af_packet cpufreq_ondemand cpufreq_userspace > cpufreq_powersave speedstep_cent > rino freq_table button battery ac loop dm_mod hw_random i915 drm e1000 > intel_agp shpchp pci_hotplug uhci_hcd ehci_hcd ahci agpgart ohci1394 > i2c_i801 i2c_core > pata_jmicron usbcore ieee1394 sundance mii parport_pc lp parport ext3 > jbd edd fan thermal processor pata_marvell sg ata_piix libata generic > sd_mod scsi_mod > ide_disk ide_core > Nov 20 19:51:39 mail kernel: CPU: 1 > Nov 20 19:51:39 mail kernel: EIP: 0060:[] Not tainted VLI > Nov 20 19:51:39 mail kernel: EFLAGS: 00210002 (2.6.16.46-0.12-smp #1) > Nov 20 19:51:39 mail kernel: EIP is at free_pages_bulk+0x12c/0x1e4 > Nov 20 19:51:39 mail kernel: eax: 00000001 ebx: c13cdb00 ecx: > c13cdb00 edx: 00000001 > Nov 20 19:51:39 mail kernel: esi: 000006d9 edi: c13cdb20 ebp: > 00000000 esp: e84fdd80 > Nov 20 19:51:39 mail kernel: ds: 007b es: 007b ss: 0068 > Nov 20 19:51:39 mail kernel: Process MailScanner (pid: 24234, > threadinfo=e84fc000 task=dfe9eb70) > Nov 20 19:51:39 mail kernel: Stack: <0>c030188c 0000001c c0301780 > 00000000 00000001 00000001 c14d4aa0 c0301880 > Nov 20 19:51:39 mail kernel: 00200202 c0301780 c0149cba > 00000000 00000003 e84fdde8 e84fddd8 0000000d > Nov 20 19:51:39 mail kernel: c0149ce1 c14db140 c0301780 > c17de14c c014c1d9 0000000e 0000000e 00000000 > Nov 20 19:51:39 mail kernel: Call Trace: > Nov 20 19:51:39 mail kernel: [] free_hot_cold_page+0xdf/0xee > Nov 20 19:51:39 mail kernel: [] __pagevec_free+0x18/0x22 > Nov 20 19:51:39 mail kernel: [] release_pages+0xff/0x13f > Nov 20 19:51:39 mail kernel: [] > free_pages_and_swap_cache+0x6b/0x7f > Nov 20 19:51:39 mail kernel: [] exit_mmap+0xb0/0xda > Nov 20 19:51:39 mail kernel: [] mmput+0x20/0x76 > Nov 20 19:51:39 mail kernel: [] flush_old_exec+0x6dd/0x90d > Nov 20 19:51:39 mail kernel: [] vfs_read+0x110/0x150 > Nov 20 19:51:39 mail kernel: [] kernel_read+0x32/0x3c > Nov 20 19:51:39 mail kernel: [] load_elf_binary+0x438/0x12f7 > Nov 20 19:51:39 mail kernel: [] __alloc_pages+0x57/0x2a5 > Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 > Nov 20 19:51:39 mail kernel: [] copy_from_user+0x36/0x62 > Nov 20 19:51:39 mail kernel: [] > search_binary_handler+0xa2/0x1fe > Nov 20 19:51:39 mail kernel: [] do_execve+0x16c/0x215 > Nov 20 19:51:39 mail kernel: [] sys_execve+0x2b/0x68 > Nov 20 19:51:39 mail kernel: [] sysenter_past_esp+0x54/0x79 > Nov 20 19:51:39 mail kernel: Code: c1 e0 05 8d 1c 07 8b 03 a9 00 00 08 > 00 74 7c 8b 43 0c 39 e8 89 44 24 0c 75 71 8b 03 89 d9 f6 c4 40 74 02 > 89 e9 8b 41 04 40 > 74 08 <0f> 0b 27 01 eb 7f 2c c0 8d 4b 18 8b 53 18 8b 41 04 89 42 04 89 > > Thanks > > Neil > > PS: Accidentally subscribed to announce instead of the mailscanner > list, and when canceling after my subscription I hit a mailman bug. > > "Bug in Mailman version 2.1.5 > We're sorry, we hit a bug! > Please inform the webmaster for this site of this problem. Printing of > traceback and other system information has been explicitly inhibited, > but the webmaster can find this information in the Mailman error logs" > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHREbbEfZZRxQVtlQRAlp3AJ0dRoCy8yhuPRez3YixSrdpvAQsPQCfZ3h3 yrRPbMuEG9ZPt4GQnmrxOyc= =/IPI -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Nov 21 14:56:56 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 14:57:14 2007 Subject: SDBM In-Reply-To: References: Message-ID: <47444738.4070607@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 You probably have a huge bayes_seen like I did. You can safely delete this file. It's the bayes_toks that's the important one. You only need the bayes_seen data if you ever "unlearn" a message by calling sa-learn directly from the command line. I hit this exact same problem yesterday, see earlier comments in this thread. Jules. Martin.Hepworth wrote: > Tried it and my box ground to a halt after 30 mins of trying to do the sa-learn --restore. > > Must be semaphores or something....couldn't even login a the console. Luckily a CTRL-C on the sa-learn brought everthing back. > > My bayes seems to be 330MB so that's kinda large, and the SDBM was growing slowly and had got to 260MB when it all ground to a halt....maybe my 2.8Piv and 1.5GB ram ain't enough ;-) > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of Rick Chadderdon >> Sent: 20 November 2007 17:31 >> To: MailScanner discussion >> Subject: Re: Minimum hardware capacity for 35k e-mail scans/day >> >> Julian Field wrote: >> >>> I'm testing it out now. If it's as good as it is reckoned to be, how >>> about I make it the default in new installations? (i.e. change >>> mailscanner.cf to use it) >>> >> SDBM has been criticized (and rejected for several projects) for having >> a small (1Kbyte or 2Kbytes, depending on where I look) maximum record >> size. I do not know enough about the SA database to say whether this >> will be a potential factor in using SDBM with SpamAssassin, but perhaps >> someone with more knowledge can use this information. If we can count >> on SA always keeping the records smaller than SDBM's max, this sounds >> like a good way to increase performance. On the other hand, it's the >> kind of thing that SA could cause to break with a relatively simple >> change in what they store in the DB >> >> Rick >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> > > > > > ********************************************************************** > Confidentiality : This e-mail and any attachments are intended for the > addressee only and may be confidential. If they come to you in error > you must take no action based on them, nor must you copy or show them > to anyone. Please advise the sender by replying to this e-mail > immediately and then delete the original from your computer. > Opinion : Any opinions expressed in this e-mail are entirely those of > the author and unless specifically stated to the contrary, are not > necessarily those of the author's employer. > Security Warning : Internet e-mail is not necessarily a secure > communications medium and can be subject to data corruption. We advise > that you consider this fact when e-mailing us. > Viruses : We have taken steps to ensure that this e-mail and any > attachments are free from known viruses but in keeping with good > computing practice, you should ensure that they are virus free. > > Red Lion 49 Ltd T/A Solid State Logic > Registered as a limited company in England and Wales > (Company No:5362730) > Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, > United Kingdom > ********************************************************************** > > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHREc+EfZZRxQVtlQRAthWAJ9JWL+gc3G29YxjxFU12Aw0IyJqtQCgg8vZ Az+8eJWf0VIMdt+UiR7bDRg= =rgv0 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From Denis.Beauchemin at USherbrooke.ca Wed Nov 21 14:56:25 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Wed Nov 21 15:00:26 2007 Subject: Notifications not being recieved In-Reply-To: <4743FD61.4040402@teleord.co.uk> References: <4743FD61.4040402@teleord.co.uk> Message-ID: <47444719.5060201@USherbrooke.ca> Ceri a ?crit : > Hi, > > I have recently built installed MailScanner, to compliment an existing > sendmail setup. It all seems to be running fine, except that I do not > seem to be getting any spam notifications, I still seem to be > receiving the spam. I have setup notifications to only go to one email > address as a test. MailScanner --lint does not show any errors, so I > am not sure where to look next. > > I am running MailScanner 4.65.3 on Redhat 9. Ceri, Are you sure you stopped sendmail (service sendmail stop; chkconfig sendmail off) and started it through MS' startup script? If mail is still flowing through the default sendmail config it won't be scanned by MS. Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From martinh at solidstatelogic.com Wed Nov 21 15:06:59 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 21 15:07:03 2007 Subject: SDBM In-Reply-To: <47444738.4070607@ecs.soton.ac.uk> Message-ID: <2609173255b50d4aa7ae7576a71109a8@solidstatelogic.com> Jules Yeah I saw the messages about that - did it, does seem to be working quicker even for my small system (6-7k messages processed a day on a 2.8Ghz P Iv/1.5GB ram, so plenty of horsepower spare!). -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Julian Field > Sent: 21 November 2007 14:57 > To: MailScanner discussion > Subject: Re: SDBM > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > You probably have a huge bayes_seen like I did. You can safely delete > this file. It's the bayes_toks that's the important one. You only need > the bayes_seen data if you ever "unlearn" a message by calling sa-learn > directly from the command line. > > I hit this exact same problem yesterday, see earlier comments in this > thread. > > Jules. > > Martin.Hepworth wrote: > > Tried it and my box ground to a halt after 30 mins of trying to do the > sa-learn --restore. > > > > Must be semaphores or something....couldn't even login a the console. > Luckily a CTRL-C on the sa-learn brought everthing back. > > > > My bayes seems to be 330MB so that's kinda large, and the SDBM was > growing slowly and had got to 260MB when it all ground to a halt....maybe > my 2.8Piv and 1.5GB ram ain't enough ;-) > > > > -- > > Martin Hepworth > > Snr Systems Administrator > > Solid State Logic > > Tel: +44 (0)1865 842300 > > > > > >> -----Original Message----- > >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > >> bounces@lists.mailscanner.info] On Behalf Of Rick Chadderdon > >> Sent: 20 November 2007 17:31 > >> To: MailScanner discussion > >> Subject: Re: Minimum hardware capacity for 35k e-mail scans/day > >> > >> Julian Field wrote: > >> > >>> I'm testing it out now. If it's as good as it is reckoned to be, how > >>> about I make it the default in new installations? (i.e. change > >>> mailscanner.cf to use it) > >>> > >> SDBM has been criticized (and rejected for several projects) for having > >> a small (1Kbyte or 2Kbytes, depending on where I look) maximum record > >> size. I do not know enough about the SA database to say whether this > >> will be a potential factor in using SDBM with SpamAssassin, but perhaps > >> someone with more knowledge can use this information. If we can count > >> on SA always keeping the records smaller than SDBM's max, this sounds > >> like a good way to increase performance. On the other hand, it's the > >> kind of thing that SA could cause to break with a relatively simple > >> change in what they store in the DB > >> > >> Rick > >> -- > >> MailScanner mailing list > >> mailscanner@lists.mailscanner.info > >> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >> > >> Before posting, read http://wiki.mailscanner.info/posting > >> > >> Support MailScanner development - buy the book off the website! > >> > > > > > > > > > > ********************************************************************** > > Confidentiality : This e-mail and any attachments are intended for the > > addressee only and may be confidential. If they come to you in error > > you must take no action based on them, nor must you copy or show them > > to anyone. Please advise the sender by replying to this e-mail > > immediately and then delete the original from your computer. > > Opinion : Any opinions expressed in this e-mail are entirely those of > > the author and unless specifically stated to the contrary, are not > > necessarily those of the author's employer. > > Security Warning : Internet e-mail is not necessarily a secure > > communications medium and can be subject to data corruption. We advise > > that you consider this fact when e-mailing us. > > Viruses : We have taken steps to ensure that this e-mail and any > > attachments are free from known viruses but in keeping with good > > computing practice, you should ensure that they are virus free. > > > > Red Lion 49 Ltd T/A Solid State Logic > > Registered as a limited company in England and Wales > > (Company No:5362730) > > Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, > > United Kingdom > > ********************************************************************** > > > > > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail Add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHREc+EfZZRxQVtlQRAthWAJ9JWL+gc3G29YxjxFU12Aw0IyJqtQCgg8vZ > Az+8eJWf0VIMdt+UiR7bDRg= > =rgv0 > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From MailScanner at ecs.soton.ac.uk Wed Nov 21 15:07:30 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 15:08:06 2007 Subject: Beginner Question In-Reply-To: <4743F754.5080304@cs.ucy.ac.cy> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> <4743F754.5080304@cs.ucy.ac.cy> Message-ID: <474449B2.1010901@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Andreas Kasenides wrote: > I am a relatively newcomer to the MailScanner land but I have been > running mail servers > (sendmail for too many years to admit and postfix for the last 3 > years) and I have come > across this Postfix-with-MS incompatibility issue. Apparently the > Postfix developers > are seriously anti-MS because MS DOES not use their own way of message > passing > between the SMTP processes and the MS processes (apparently they > recommend LMTP). > I have read a lot of this on the Postfix lists and while there is a > serious issue of how > a message is moved from the SMTP service to the virus/spam-detecting > service I have come to the > conclusion that there are only a couple of issues that need to be > clarified from the MS point of view > (the rest seems politics to me which I cannot comment since I do not > know the players involved): > > 1. How does MS make sure that when dealing with the incoming Postfix > queue it does not ake a mess > of it? In other words how does MS know that a message in the queue is > free and ready to be processed > and that Postfix is not working on it? Very good question. Postfix does indeed put message directly into that queue before the whole message has been received, it moves them into there as soon as it can (in MailScanner's case as soon as it has enough information to fire the "header_checks" rules). MailScanner goes to considerable lengths to ensure that Postfix has written the entire file before it starts processing it. This was indeed an occasional problem on heavily loaded systems a *several years ago*, and could in rare circumstances cause MailScanner to produce an extra spurious message with an incomplete body, as well as the correct complete message. It didn't cause it to lose a message. However, all those problems are a long way behind us, my checks on the message file work just fine now and have done for several years. Don't worry, this is *very* thoroughly taken care of. > 2. Apparently the Postfix guys believe that the queue file structure > is there own internal "thing" > which they do not or would not make public and if a new upgraded > structure is created MS will fail miserably > upon Postfix upgrade. Remember that MS depends on this structure to > properly make changes in the > files. Yes, they treat the queue file structure as "private". Slightly strange concept in open source, where surely nothing is private? Sendmail documents its internal queue structure very well, and they are quite happy for you to use it. Exim doesn't document it but support MailScanner perfectly happily (the authors of Exim run MailScanner themselves on all their mail). Only the Postfix guys have an issue with me doing this. It's entirely political, I dared to think of a method of handling messages that was faster than their way, and so was "thinking outside the box", which appeared to upset them. Maybe because they didn't think of it? :-) The only thing I have ever asked of the Postfix guys is that they bother to document their internal file structure so I don't have to read their code to work it out. As it's open-source, there is no "reverse engineering" or "hacking" involved, as I can logically extract the format from their source code, which is what I did. It would just have been nice to have been able to do it rather more easily from a written spec. But they have never agreed to do that. As far as I'm concerned, that is their problem, not mine. :-) > > I was very suddened by the discussion in the Postfix lists. In my view > this sort of thing should > happen in the commercial software world, not on open source projects. I whole-heartedly agree! > I would appreciate an answer (even if it is obvious) from somebody > that knows enough of the internals > of MS. Would "the author" do you well enough? :-) > > thanks! My pleasure. Best regards, Jules. > Andreas Kasenides > > Joseph L. Casale wrote: >> >> Hi, >> I was looking for a complete tutorial to setup a mail filter for our >> existing server and came upon the following article >> (http://www.howtoforge.com/linux_spam_filter_mail_gateway) but >> reading the comments below it, it stated the implementation of >> Mailscanner with postfix in this manner was unsupported? >> >> >> >> Can you guys confirm or deny this, and if so possibly recommend a >> similar tutorial? >> >> >> >> Thanks for any input! >> jlc >> > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHREnAEfZZRxQVtlQRAlwfAKDrqZjLR+5Abjh6IMW6vnLSbdwJQgCgwDsC ehjiTGILPCK2S+4uZGrlXEY= =uTox -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ugob at lubik.ca Wed Nov 21 15:03:35 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Wed Nov 21 15:08:30 2007 Subject: Notifications not being recieved In-Reply-To: <4743FD61.4040402@teleord.co.uk> References: <4743FD61.4040402@teleord.co.uk> Message-ID: Ceri wrote: > Hi, > > I have recently built installed MailScanner, to compliment an existing > sendmail setup. It all seems to be running fine, except that I do not > seem to be getting any spam notifications, I still seem to be receiving > the spam. I have setup notifications to only go to one email address as > a test. MailScanner --lint does not show any errors, so I am not sure > where to look next. > > I am running MailScanner 4.65.3 on Redhat 9. > > spam.actions.rules contains: > > # Rules for processing Spam > # > To: ceri.townsend@vnuinc.co.uk store notify > FromOrTo: Default store deliver header "X-Spam-Status: Yes" Heve you tried "notify store"? From MailScanner at ecs.soton.ac.uk Wed Nov 21 15:09:04 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 15:09:32 2007 Subject: Notifications not being recieved In-Reply-To: <4743FD61.4040402@teleord.co.uk> References: <4743FD61.4040402@teleord.co.uk> Message-ID: <47444A10.5010702@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Do your incoming messages have the MailScanner headers in them? If not, then you still have your old sendmail setup running as well as MailScanner, and so all the mail will bypass MailScanner completely. So that is check number 1. Does this mean that Nielse Book wholesalers are using MailScanner now? If so, can I add you to my list of users web page please? Thanks! Ceri wrote: > Hi, > > I have recently built installed MailScanner, to compliment an existing > sendmail setup. It all seems to be running fine, except that I do not > seem to be getting any spam notifications, I still seem to be > receiving the spam. I have setup notifications to only go to one email > address as a test. MailScanner --lint does not show any errors, so I > am not sure where to look next. > > I am running MailScanner 4.65.3 on Redhat 9. > > spam.actions.rules contains: > > # Rules for processing Spam > # > To: ceri.townsend@vnuinc.co.uk store notify > FromOrTo: Default store deliver header "X-Spam-Status: Yes" > > Here is my Mailscanner.conf: > > %org-name% = nielsenbook > %org-long-name% = Nielsen Book > %web-site% = www.your-organisation.com > %etc-dir% = /etc/MailScanner > %report-dir% = /etc/MailScanner/reports/en > %rules-dir% = /etc/MailScanner/rules > %mcp-dir% = /etc/MailScanner/mcp > Max Children = 5 > Run As User = > Run As Group = > Queue Scan Interval = 6 > Incoming Queue Dir = /var/spool/mqueue.in > Outgoing Queue Dir = /var/spool/mqueue > Incoming Work Dir = /var/spool/MailScanner/incoming > Quarantine Dir = /var/spool/MailScanner/quarantine > PID file = /var/run/MailScanner.pid > Restart Every = 7200 > MTA = sendmail > Sendmail = /usr/sbin/sendmail > Sendmail2 = /usr/sbin/sendmail > Incoming Work Group = clamav > Incoming Work Permissions = 0644 > Quarantine User = root > Quarantine Group = mailwatch > Quarantine Permissions = 0660 > Max Unscanned Bytes Per Scan = 100m > Max Unsafe Bytes Per Scan = 50m > Max Unscanned Messages Per Scan = 30 > Max Unsafe Messages Per Scan = 30 > Max Normal Queue Size = 800 > Scan Messages = %rules-dir%/ignore.messages.rules > Reject Message = no > Maximum Attachments Per Message = 200 > Expand TNEF = yes > Use TNEF Contents = replace > Deliver Unparsable TNEF = no > TNEF Expander = /usr/bin/tnef --maxsize=100000000 > TNEF Timeout = 120 > File Command = /usr/bin/file > File Timeout = 20 > Gunzip Command = /bin/gunzip > Gunzip Timeout = 50 > Unrar Command = /usr/bin/unrar > Unrar Timeout = 50 > Find UU-Encoded Files = no > Maximum Message Size = %rules-dir%/max.message.size.rules > Maximum Attachment Size = -1 > Minimum Attachment Size = -1 > Maximum Archive Depth = 2 > Find Archives By Content = yes > Zip Attachments = no > Attachments Zip Filename = MessageAttachments.zip > Attachments Min Total Size To Zip = 100k > Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg > .mpe .mpeg .mp3 .rpm .htm .html .eml > Virus Scanning = yes > Virus Scanners = clamav > Virus Scanner Timeout = 300 > Deliver Disinfected Files = no > Silent Viruses = HTML-IFrame All-Viruses > Still Deliver Silent Viruses = no > Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar > Block Encrypted Messages = no > Block Unencrypted Messages = no > Allow Password-Protected Archives = yes > Check Filenames In Password-Protected Archives = yes > Allowed Sophos Error Messages = > Sophos IDE Dir = /opt/sophos-av/lib/sav > Sophos Lib Dir = /opt/sophos-av/lib > Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide > Monitors for ClamAV Updates = /usr/local/share/clamav/*.inc/* > /usr/local/share/clamav/*.cvd > ClamAVmodule Maximum Recursion Level = 8 > ClamAVmodule Maximum Files = 1000 > ClamAVmodule Maximum File Size = 10000000 # (10 Mbytes) > ClamAVmodule Maximum Compression Ratio = 250 > Clamd Port = 3310 > Clamd Socket = /tmp/clamd > Clamd Lock File = # /var/lock/subsys/clamd > Clamd Use Threads = no > ClamAV Full Message Scan = yes > Dangerous Content Scanning = yes > Allow Partial Messages = no > Allow External Message Bodies = no > Find Phishing Fraud = yes > Also Find Numeric Phishing = yes > Use Stricter Phishing Net = yes > Highlight Phishing Fraud = yes > Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf > Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf > Country Sub-Domains List = %etc-dir%/country.domains.conf > Allow IFrame Tags = disarm > Allow Form Tags = disarm > Allow Script Tags = disarm > Allow WebBugs = disarm > Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap > Known Web Bug Servers = msgtag.com > Web Bug Replacement = > http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif > Allow Object Codebase Tags = disarm > Convert Dangerous HTML To Text = no > Convert HTML To Text = no > Allow Filenames = > Deny Filenames = > Filename Rules = %etc-dir%/filename.rules.conf > Allow Filetypes = > Deny Filetypes = > Filetype Rules = %etc-dir%/filetype.rules.conf > Quarantine Infections = yes > Quarantine Silent Viruses = no > Quarantine Modified Body = no > Quarantine Whole Message = yes > Quarantine Whole Messages As Queue Files = no > Keep Spam And MCP Archive Clean = no > Language Strings = %report-dir%/languages.conf > Rejection Report = %report-dir%/rejection.report.txt > Deleted Bad Content Message Report = > %report-dir%/deleted.content.message.txt > Deleted Bad Filename Message Report = > %report-dir%/deleted.filename.message.txt > Deleted Virus Message Report = > %report-dir%/deleted.virus.message.txt > Deleted Size Message Report = > %report-dir%/deleted.size.message.txt > Stored Bad Content Message Report = > %report-dir%/stored.content.message.txt > Stored Bad Filename Message Report = > %report-dir%/stored.filename.message.txt > Stored Virus Message Report = > %report-dir%/stored.virus.message.txt > Stored Size Message Report = %report-dir%/stored.size.message.txt > Disinfected Report = %report-dir%/disinfected.report.txt > Inline HTML Signature = %report-dir%/inline.sig.html > Inline Text Signature = %report-dir%/inline.sig.txt > Signature Image Filename = %report-dir%/sig.jpg > Signature Image Filename = signature.jpg > Inline HTML Warning = %report-dir%/inline.warning.html > Inline Text Warning = %report-dir%/inline.warning.txt > Sender Content Report = %report-dir%/sender.content.report.txt > Sender Error Report = %report-dir%/sender.error.report.txt > Sender Bad Filename Report = %report-dir%/sender.filename.report.txt > Sender Virus Report = %report-dir%/sender.virus.report.txt > Sender Size Report = %report-dir%/sender.size.report.txt > Hide Incoming Work Dir = yes > Include Scanner Name In Reports = yes > Mail Header = X-%org-name%-MailScanner: > Spam Header = X-%org-name%-MailScanner-SpamCheck: > Spam Score Header = X-%org-name%-MailScanner-SpamScore: > Information Header = X-%org-name%-MailScanner-Information: > Add Envelope From Header = yes > Add Envelope To Header = no > Envelope From Header = X-%org-name%-MailScanner-From: > Envelope To Header = X-%org-name%-MailScanner-To: > Spam Score Character = s > SpamScore Number Instead Of Stars = no > Minimum Stars If On Spam List = 0 > Clean Header Value = Found to be clean > Infected Header Value = Found to be infected > Disinfected Header Value = Disinfected > Information Header Value = Please contact the ISP for more information > Detailed Spam Report = yes > Include Scores In SpamAssassin Report = yes > Always Include SpamAssassin Report = no > Multiple Headers = append > Hostname = the %org-name% ($HOSTNAME) MailScanner > Sign Messages Already Processed = no > Sign Clean Messages = yes > Attach Image To Signature = no > Attach Image To HTML Message Only = yes > Mark Infected Messages = yes > Mark Unscanned Messages = yes > Unscanned Header Value = Not scanned: please contact your Internet > E-Mail Service Provider for details > Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2: > Deliver Cleaned Messages = yes > Notify Senders = yes > Notify Senders Of Viruses = no > Notify Senders Of Blocked Filenames Or Filetypes = yes > Notify Senders Of Blocked Size Attachments = yes > Notify Senders Of Other Blocked Content = no > Never Notify Senders Of Precedence = list bulk > Scanned Modify Subject = no # end > Scanned Subject Text = {Scanned} > Virus Modify Subject = start > Virus Subject Text = {Virus?} > Filename Modify Subject = start > Filename Subject Text = {Filename?} > Content Modify Subject = start > Content Subject Text = {Dangerous Content?} > Size Modify Subject = start > Size Subject Text = {Size} > Disarmed Modify Subject = start > Disarmed Subject Text = {Disarmed} > Phishing Modify Subject = no > Phishing Subject Text = {Fraud?} > Spam Modify Subject = start > Spam Subject Text = {Spam?} > High Scoring Spam Modify Subject = start > High Scoring Spam Subject Text = {Spam?} > Warning Is Attachment = yes > Attachment Warning Filename = %org-name%-Attachment-Warning.txt > Attachment Encoding Charset = ISO-8859-1 > Archive Mail = > Send Notices = yes > Notices Include Full Headers = yes > Hide Incoming Work Dir in Notices = no > Notice Signature = -- \nMailScanner\nEmail Virus > Scanner\nwww.mailscanner.info > Notices From = MailScanner > Notices To = postmaster > Local Postmaster = postmaster > Spam List Definitions = %etc-dir%/spam.lists.conf > Virus Scanner Definitions = %etc-dir%/virus.scanners.conf > Spam Checks = yes > Spam List = # spamhaus-ZEN # You can un-comment this to enable them > Spam Domain List = > Spam Lists To Be Spam = 1 > Spam Lists To Reach High Score = 3 > Spam List Timeout = 10 > Max Spam List Timeouts = 7 > Spam List Timeouts History = 10 > Is Definitely Not Spam = &SQLWhitelist > Is Definitely Spam = &SQLBlacklist > Definite Spam Is High Scoring = no > Ignore Spam Whitelist If Recipients Exceed = 20 > Max Spam Check Size = 200k > Use Watermarking = no > Add Watermark = yes > Check Watermarks With No Sender = yes > Treat Invalid Watermarks With No Sender as Spam = nothing > Check Watermarks To Skip Spam Checks = yes > Watermark Secret = %org-name%-Secret > Watermark Lifetime = 604800 > Watermark Header = X-%org-name%-MailScanner-Watermark: > Use SpamAssassin = yes > Max SpamAssassin Size = 200k > Required SpamAssassin Score = 3 > High SpamAssassin Score = 10 > SpamAssassin Auto Whitelist = yes > SpamAssassin Timeout = 75 > Max SpamAssassin Timeouts = 10 > SpamAssassin Timeouts History = 30 > Check SpamAssassin If On Spam List = yes > Include Binary Attachments In SpamAssassin = no > Spam Score = yes > Cache SpamAssassin Results = yes > SpamAssassin Cache Database File = > /var/spool/MailScanner/incoming/SpamAssassin.cache.db > Rebuild Bayes Every = 0 > Wait During Bayes Rebuild = no > Use Custom Spam Scanner = no > Max Custom Spam Scanner Size = 20k > Custom Spam Scanner Timeout = 20 > Max Custom Spam Scanner Timeouts = 10 > Custom Spam Scanner Timeout History = 20 > Spam Actions = spam.actions.rules > High Scoring Spam Actions = store delete header "X-Spam-Status: Yes" > Non Spam Actions = deliver header "X-Spam-Status: No" > SpamAssassin Rule Actions = > Sender Spam Report = %report-dir%/sender.spam.report.txt > Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt > Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt > Inline Spam Warning = %report-dir%/inline.spam.warning.txt > Recipient Spam Report = %report-dir%/recipient.spam.report.txt > Enable Spam Bounce = %rules-dir%/bounce.rules > Bounce Spam As Attachment = no > Syslog Facility = mail > Log Speed = no > Log Spam = no > Log Non Spam = no > Log Permitted Filenames = no > Log Permitted Filetypes = no > Log Silent Viruses = no > Log Dangerous HTML Tags = no > SpamAssassin Temporary Dir = > /var/spool/MailScanner/incoming/SpamAssassin-Temp > SpamAssassin User State Dir = > SpamAssassin Install Prefix = > SpamAssassin Site Rules Dir = /etc/mail/spamassassin > SpamAssassin Local Rules Dir = > SpamAssassin Local State Dir = # /var/lib/spamassassin > SpamAssassin Default Rules Dir = > MCP Checks = no > First Check = spam > MCP Required SpamAssassin Score = 1 > MCP High SpamAssassin Score = 10 > MCP Error Score = 1 > MCP Header = X-%org-name%-MailScanner-MCPCheck: > Non MCP Actions = deliver > MCP Actions = deliver > High Scoring MCP Actions = deliver > Bounce MCP As Attachment = no > MCP Modify Subject = start > MCP Subject Text = {MCP?} > High Scoring MCP Modify Subject = start > High Scoring MCP Subject Text = {MCP?} > Is Definitely MCP = no > Is Definitely Not MCP = no > Definite MCP Is High Scoring = no > Always Include MCP Report = no > Detailed MCP Report = yes > Include Scores In MCP Report = no > Log MCP = no > MCP Max SpamAssassin Timeouts = 20 > MCP Max SpamAssassin Size = 100k > MCP SpamAssassin Timeout = 10 > MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf > MCP SpamAssassin User State Dir = > MCP SpamAssassin Local Rules Dir = %mcp-dir% > MCP SpamAssassin Default Rules Dir = %mcp-dir% > MCP SpamAssassin Install Prefix = %mcp-dir% > Recipient MCP Report = %report-dir%/recipient.mcp.report.txt > Sender MCP Report = %report-dir%/sender.mcp.report.txt > Use Default Rules With Multiple Recipients = no > Spam Score Number Format = %d > MailScanner Version Number = 4.65.3 > SpamAssassin Cache Timings = 1800,300,10800,172800,600 > Debug = no > Debug SpamAssassin = no > Run In Foreground = no > Always Looked Up Last = &MailWatchLogging > Always Looked Up Last After Batch = no > Deliver In Background = yes > Delivery Method = batch > Split Exim Spool = no > Lockfile Dir = /tmp > Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions > Lock Type = > Minimum Code Status = supported > > Could anyone point me in the right direction? > > Cheers > > Ceri Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHREoeEfZZRxQVtlQRAoOhAKDvqognIx1UHlBSP2CScl7nazgEogCg3zMe yKOpcgp4phxMEQfdReYhTzM= =F2U+ -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Nov 21 15:15:13 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 15:16:58 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47442DF3.8070708@rma.edu> References: <47363BDA.5050202@vanderkooij.org> <4743E90E.4000208@vanderkooij.org> <47442DF3.8070708@rma.edu> Message-ID: <47444B81.7070608@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Brendan Pirie wrote: > Hugo van der Kooij wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Scott Silva wrote: >> >>> Ran this repo today and it gets all requires very well. Installed on >>> X86-64 with no issues. Are there any optional modules that anyone >>> thinks >>> are helpful? >>> I would vote for perl-Mail-ClamAV, perl-Convert-TNEF, and maybe the SPF >>> modules for spamassassin. >> >> There is not really an optional thing in rpm terms. So if the >> requirement is defined one is stuck with the modules wether one uses >> them or not. >> >> I am not sure what would be wise here. Perhaps two wrappers instead of >> one. So the current one defines the absolute minimum and a >> mailscanner-wrapper-complete version that will pull in lots of other >> usefull modules as well as the basic wrapper but some of these extra >> modules may never be used depending on the configuration. >> >> In such case I would also like to describe them briefly. So one can >> discard the outer wrapper and then remove the unneeded modules with a >> small guidance. >> >> I am thinking along the lines of a text file with entries like: >> >> >> Requires: >> >> Nothing fancy (TM). >> >> Feel free to think out loud on the matter. I didn't hesitate either ;-) >> >> Hugo. >> > Another possibility would be something like MailScanner.rpm for the > "most common" install options, and MailScanner-extras.rpm for features > not everyone needs as an additional rpm, instead of packaging > MailScanner twice. This would also reduce space on the server and > bandwidth usage. > > Depending on needs/wants/opinions the "extras" could be further broken > down, such as MailScanner-spf.rpm, etc.. and people could install only > those extra features/packages they want. That is making it very complicated for new users to be able to use. They won't know what features/packages they want. It has to be *very* simple for new users to get a sane default setup that includes all the protection they are likely to need. > > Just thinking out loud (pre-coffee) ;) > > Brendan > > P.S. As a CentOS user myself, I naturally think a MailScanner > addition to rpmforge is a great idea! :) (It also gives me another > argument for MailScanner when discussing MailScanner vs. Amavis with > fellow CentOS users) > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHREuHEfZZRxQVtlQRAt4nAKDC3sLr/9CjbQovuAPWtusaBH3lawCgu3sm 0/FFPSuOGjy4HszmXdaMnAk= =8rQd -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From cerit at teleord.co.uk Wed Nov 21 15:48:07 2007 From: cerit at teleord.co.uk (Ceri) Date: Wed Nov 21 15:50:05 2007 Subject: Notifications not being recieved In-Reply-To: <47444A10.5010702@ecs.soton.ac.uk> References: <4743FD61.4040402@teleord.co.uk> <47444A10.5010702@ecs.soton.ac.uk> Message-ID: <47445337.1040405@teleord.co.uk> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Do your incoming messages have the MailScanner headers in them? If not, > then you still have your old sendmail setup running as well as > MailScanner, and so all the mail will bypass MailScanner completely. So > that is check number 1. > > Does this mean that Nielse Book wholesalers are using MailScanner now? > If so, can I add you to my list of users web page please? > > Thanks! > Hi, I have checked that the email headers are in the spam I have received so it does appear to be going through MailScanner. You can add Nielsen Book Services to your list of users if you wish. Cheers Ceri From cerit at teleord.co.uk Wed Nov 21 15:49:59 2007 From: cerit at teleord.co.uk (Ceri) Date: Wed Nov 21 15:51:23 2007 Subject: Notifications not being recieved In-Reply-To: References: <4743FD61.4040402@teleord.co.uk> Message-ID: <474453A7.8020101@teleord.co.uk> Ugo Bellavance wrote: > > Heve you tried "notify store"? > I haven't tried "notify store" I will change that now and let you know if it works. Cheers Ceri From goetz.reinicke at filmakademie.de Wed Nov 21 16:02:28 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Wed Nov 21 16:02:34 2007 Subject: False Subject change - ham mail marked as spam Message-ID: <47445694.7000007@filmakademie.de> Hi, today some mails to our mailinglist-system from allowed students are changed to spam in the subject. The header of the mail shows that this messages shouldn't be spam; e.g.: X-Filmakademie-MailScanner: Found to be clean, Found to be clean X-Filmakademie-MailScanner-SpamCheck: spam, spamhaus-ZEN, SpamAssassin (nicht zwischen gespeichert, Wertung=-16.8, benoetigt 3.6, autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -15.00), not spam, SpamAssassin (zwischen gespeichert, Wertung=-16.8, benoetigt 3.6, autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -15.00) Subject: [Studenten-list] =?iso-8859-1?q?=7BSpam=3F=7D_Nachtr=E4ge=3A?= Any ideas what goes wrong? Where to start debugging? Thanks for any hints and tips! Regards G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From shuttlebox at gmail.com Wed Nov 21 16:13:23 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 21 16:13:25 2007 Subject: False Subject change - ham mail marked as spam In-Reply-To: <47445694.7000007@filmakademie.de> References: <47445694.7000007@filmakademie.de> Message-ID: <625385e30711210813m715b4247v2829d1a931bb9f01@mail.gmail.com> On Nov 21, 2007 5:02 PM, G?tz Reinicke wrote: > The header of the mail shows that this messages shouldn't be spam; e.g.: > > X-Filmakademie-MailScanner: Found to be clean, Found to be clean > X-Filmakademie-MailScanner-SpamCheck: spam, spamhaus-ZEN, > SpamAssassin (nicht zwischen gespeichert, Wertung=-16.8, > benoetigt 3.6, autolearn=not spam, ALL_TRUSTED -1.80, > BAYES_00 -15.00), not spam, > SpamAssassin (zwischen gespeichert, Wertung=-16.8, benoetigt 3.6, > autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -15.00) It got a hit in Spamhaus Zen and that overrides the SpamAssassin score. Either stop using RBL:s in MailScanner or raise the number before triggered (Spam Lists To Be Spam). -- /peter From martinh at solidstatelogic.com Wed Nov 21 16:15:25 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 21 16:15:30 2007 Subject: False Subject change - ham mail marked as spam In-Reply-To: <47445694.7000007@filmakademie.de> Message-ID: <039a3ca30158764ab2a8462f2abdc6c4@solidstatelogic.com> Hi Yes you are using the RBL spamhaus-zen at the mailscanner level ("Spam List =" in Mailscanner.conf). This is identifying the email as spam and thus mailscanner is saying its spam. Personnally I use the RBL's within spamassassin so it adds to the score.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of G?tz Reinicke > Sent: 21 November 2007 16:02 > To: MailScanner discussion > Subject: False Subject change - ham mail marked as spam > > Hi, > > today some mails to our mailinglist-system from allowed students are > changed to spam in the subject. > > The header of the mail shows that this messages shouldn't be spam; e.g.: > > X-Filmakademie-MailScanner: Found to be clean, Found to be clean > X-Filmakademie-MailScanner-SpamCheck: spam, spamhaus-ZEN, > SpamAssassin (nicht zwischen gespeichert, Wertung=-16.8, > benoetigt 3.6, autolearn=not spam, ALL_TRUSTED -1.80, > BAYES_00 -15.00), not spam, > SpamAssassin (zwischen gespeichert, Wertung=-16.8, benoetigt 3.6, > autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -15.00) > Subject: [Studenten-list] =?iso-8859-1?q?=7BSpam=3F=7D_Nachtr=E4ge=3A?= > > Any ideas what goes wrong? > > Where to start debugging? > > Thanks for any hints and tips! > > > Regards > G?tz > -- > G?tz Reinicke > IT Koordinator > > Tel. +49 7141 969 420 > Fax +49 7141 969 55 420 > E-Mail goetz.reinicke@filmakademie.de > > Filmakademie Baden-W?rttemberg GmbH > Mathildenstr. 20 > 71638 Ludwigsburg > www.filmakademie.de > > Eintragung Amtsgericht Stuttgart HRB 205016 > Vorsitzender des Aufsichtsrats: > Dr. Christoph Palmer, MdL, Minister a.D. > > Gesch?ftsf?hrer: > Prof. Thomas Schadt > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From vincent at zijnemail.nl Wed Nov 21 16:23:27 2007 From: vincent at zijnemail.nl (Vincent Verhagen) Date: Wed Nov 21 16:23:31 2007 Subject: Add ID to email headers? Message-ID: <47445B7F.3080309@zijnemail.nl> Hi all, My setup: Postfix 2.4.3, MailScanner 4.61.7, MailWatch 1.0.3 Would any of you know if it is possible (if need be with a small patch) to add the ID field that mailwatch uses to a header in the outgoing emails? I'd like to add something like X-orgname-MailScanner-ID so I can easily trace back messages I get questions about. Regards, Vincent P.S. Lulu just shipped the book :) -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/8bf247ba/attachment.html From ssilva at sgvwater.com Wed Nov 21 16:35:06 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 21 16:40:18 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47444B81.7070608@ecs.soton.ac.uk> References: <47363BDA.5050202@vanderkooij.org> <4743E90E.4000208@vanderkooij.org> <47442DF3.8070708@rma.edu> <47444B81.7070608@ecs.soton.ac.uk> Message-ID: on 11/21/2007 7:15 AM Julian Field spake the following: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Brendan Pirie wrote: >> Hugo van der Kooij wrote: >>> -----BEGIN PGP SIGNED MESSAGE----- >>> Hash: SHA1 >>> >>> Scott Silva wrote: >>> >>>> Ran this repo today and it gets all requires very well. Installed on >>>> X86-64 with no issues. Are there any optional modules that anyone >>>> thinks >>>> are helpful? >>>> I would vote for perl-Mail-ClamAV, perl-Convert-TNEF, and maybe the SPF >>>> modules for spamassassin. >>> There is not really an optional thing in rpm terms. So if the >>> requirement is defined one is stuck with the modules wether one uses >>> them or not. >>> >>> I am not sure what would be wise here. Perhaps two wrappers instead of >>> one. So the current one defines the absolute minimum and a >>> mailscanner-wrapper-complete version that will pull in lots of other >>> usefull modules as well as the basic wrapper but some of these extra >>> modules may never be used depending on the configuration. >>> >>> In such case I would also like to describe them briefly. So one can >>> discard the outer wrapper and then remove the unneeded modules with a >>> small guidance. >>> >>> I am thinking along the lines of a text file with entries like: >>> >>> >>> Requires: >>> >>> Nothing fancy (TM). >>> >>> Feel free to think out loud on the matter. I didn't hesitate either ;-) >>> >>> Hugo. >>> >> Another possibility would be something like MailScanner.rpm for the >> "most common" install options, and MailScanner-extras.rpm for features >> not everyone needs as an additional rpm, instead of packaging >> MailScanner twice. This would also reduce space on the server and >> bandwidth usage. >> >> Depending on needs/wants/opinions the "extras" could be further broken >> down, such as MailScanner-spf.rpm, etc.. and people could install only >> those extra features/packages they want. > That is making it very complicated for new users to be able to use. They > won't know what features/packages they want. It has to be *very* simple > for new users to get a sane default setup that includes all the > protection they are likely to need. > >> Just thinking out loud (pre-coffee) ;) >> >> Brendan >> >> P.S. As a CentOS user myself, I naturally think a MailScanner >> addition to rpmforge is a great idea! :) (It also gives me another >> argument for MailScanner when discussing MailScanner vs. Amavis with >> fellow CentOS users) >> > > Jules Julian, You would be the best one to say which modules, although they are listed in MailScanner -V output as optional, would be a good choice to add to a system. Or maybe some optional packages like a clamav-wrapper that pulls in no0t only clamav, but clamd and perl-mail-clamav. That way the user has what he needs if he wants to run clam by commandline, by perl module or by clamd. All these options are already installed with Julian's script anyway, so I don't think it is too much. Otherwise I was just wanting some opinions so I could compile a list for myself to stick in my docs. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From MailScanner at ecs.soton.ac.uk Wed Nov 21 16:40:41 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed Nov 21 16:41:23 2007 Subject: Add ID to email headers? In-Reply-To: <47445B7F.3080309@zijnemail.nl> References: <47445B7F.3080309@zijnemail.nl> Message-ID: <47445F89.6000208@ecs.soton.ac.uk> Skipped content of type multipart/mixed-------------- next part -------------- A non-text attachment was scrubbed... Name: PGP.sig Type: application/pgp-signature Size: 260 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071121/63f12e6b/PGP.bin From goetz.reinicke at filmakademie.de Wed Nov 21 16:53:21 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-1?Q?G=F6tz_Reinicke?=) Date: Wed Nov 21 16:53:34 2007 Subject: {Spam?} Re: False Subject change - ham mail marked as spam In-Reply-To: <039a3ca30158764ab2a8462f2abdc6c4@solidstatelogic.com> References: <039a3ca30158764ab2a8462f2abdc6c4@solidstatelogic.com> Message-ID: <47446281.8050402@filmakademie.de> Hi, thanks; I'll check this! BTW: What is the best way to disable RBLs in Mailscanner.conf? Leave the option "Spam List =" empty or will I have to disable something else too? Thanks for the fast help!! /G?tz Martin.Hepworth schrieb: > Hi > > Yes you are using the RBL spamhaus-zen at the mailscanner level ("Spam List =" in Mailscanner.conf). This is identifying the email as spam and thus mailscanner is saying its spam. > > Personnally I use the RBL's within spamassassin so it adds to the score.. > > > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of G?tz Reinicke >> Sent: 21 November 2007 16:02 >> To: MailScanner discussion >> Subject: False Subject change - ham mail marked as spam >> >> Hi, >> >> today some mails to our mailinglist-system from allowed students are >> changed to spam in the subject. >> >> The header of the mail shows that this messages shouldn't be spam; e.g.: >> >> X-Filmakademie-MailScanner: Found to be clean, Found to be clean >> X-Filmakademie-MailScanner-SpamCheck: spam, spamhaus-ZEN, >> SpamAssassin (nicht zwischen gespeichert, Wertung=-16.8, >> benoetigt 3.6, autolearn=not spam, ALL_TRUSTED -1.80, >> BAYES_00 -15.00), not spam, >> SpamAssassin (zwischen gespeichert, Wertung=-16.8, benoetigt 3.6, >> autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -15.00) >> Subject: [Studenten-list] =?iso-8859-1?q?=7BSpam=3F=7D_Nachtr=E4ge=3A?= >> >> Any ideas what goes wrong? >> >> Where to start debugging? >> >> Thanks for any hints and tips! >> >> >> Regards >> G?tz >> -- >> G?tz Reinicke >> IT Koordinator >> >> Tel. +49 7141 969 420 >> Fax +49 7141 969 55 420 >> E-Mail goetz.reinicke@filmakademie.de >> >> Filmakademie Baden-W?rttemberg GmbH >> Mathildenstr. 20 >> 71638 Ludwigsburg >> www.filmakademie.de >> >> Eintragung Amtsgericht Stuttgart HRB 205016 >> Vorsitzender des Aufsichtsrats: >> Dr. Christoph Palmer, MdL, Minister a.D. >> >> Gesch?ftsf?hrer: >> Prof. Thomas Schadt >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > From J.Ede at birchenallhowden.co.uk Wed Nov 21 16:54:24 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 21 16:57:03 2007 Subject: Add ID to email headers? In-Reply-To: <47445F89.6000208@ecs.soton.ac.uk> References: <47445B7F.3080309@zijnemail.nl>, <47445F89.6000208@ecs.soton.ac.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE058@server02.bhl.local> I guess a modified version of this could be added in to the Mailwatch mailwatch.pm called from Always looked up last? Be nice and neat then. Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field [MailScanner@ecs.soton.ac.uk] Sent: 21 November 2007 16:40 To: MailScanner discussion Subject: Re: Add ID to email headers? Yes, it's quite simple. I'm not going to put it in the code unless quite a few people want it, but as you said a patch was okay, try the attached patch to Message.pm (/usr/lib/MailScanner/MailScanner/Message.pm). It's pretty obvious how it works :-) Vincent Verhagen wrote: > Hi all, > > My setup: Postfix 2.4.3, MailScanner 4.61.7, MailWatch 1.0.3 > Would any of you know if it is possible (if need be with a small > patch) to add the ID field that mailwatch uses to a header in the > outgoing emails? > I'd like to add something like X-orgname-MailScanner-ID so I can > easily trace back messages I get questions about. > > Regards, > Vincent > > P.S. Lulu just shipped the book :) > Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk From martinh at solidstatelogic.com Wed Nov 21 17:07:25 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 21 17:07:32 2007 Subject: False Subject change - ham mail marked as spam In-Reply-To: <47446281.8050402@filmakademie.de> Message-ID: <97e42a8d4caddc47b4493f90197072bc@solidstatelogic.com> Yes that'll work... -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of G?tz Reinicke > Sent: 21 November 2007 16:53 > To: MailScanner discussion > Subject: {Spam?} Re: False Subject change - ham mail marked as spam > > Hi, > > thanks; I'll check this! > > > BTW: What is the best way to disable RBLs in Mailscanner.conf? Leave the > option "Spam List =" empty or will I have to disable something else too? > > Thanks for the fast help!! > > /G?tz > > > Martin.Hepworth schrieb: > > Hi > > > > Yes you are using the RBL spamhaus-zen at the mailscanner level ("Spam > List =" in Mailscanner.conf). This is identifying the email as spam and > thus mailscanner is saying its spam. > > > > Personnally I use the RBL's within spamassassin so it adds to the > score.. > > > > > > > > -- > > Martin Hepworth > > Snr Systems Administrator > > Solid State Logic > > Tel: +44 (0)1865 842300 > > > >> -----Original Message----- > >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > >> bounces@lists.mailscanner.info] On Behalf Of G?tz Reinicke > >> Sent: 21 November 2007 16:02 > >> To: MailScanner discussion > >> Subject: False Subject change - ham mail marked as spam > >> > >> Hi, > >> > >> today some mails to our mailinglist-system from allowed students are > >> changed to spam in the subject. > >> > >> The header of the mail shows that this messages shouldn't be spam; > e.g.: > >> > >> X-Filmakademie-MailScanner: Found to be clean, Found to be clean > >> X-Filmakademie-MailScanner-SpamCheck: spam, spamhaus-ZEN, > >> SpamAssassin (nicht zwischen gespeichert, Wertung=-16.8, > >> benoetigt 3.6, autolearn=not spam, ALL_TRUSTED -1.80, > >> BAYES_00 -15.00), not spam, > >> SpamAssassin (zwischen gespeichert, Wertung=-16.8, benoetigt 3.6, > >> autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -15.00) > >> Subject: [Studenten-list] =?iso-8859-1?q?=7BSpam=3F=7D_Nachtr=E4ge=3A?= > >> > >> Any ideas what goes wrong? > >> > >> Where to start debugging? > >> > >> Thanks for any hints and tips! > >> > >> > >> Regards > >> G?tz > >> -- > >> G?tz Reinicke > >> IT Koordinator > >> > >> Tel. +49 7141 969 420 > >> Fax +49 7141 969 55 420 > >> E-Mail goetz.reinicke@filmakademie.de > >> > >> Filmakademie Baden-W?rttemberg GmbH > >> Mathildenstr. 20 > >> 71638 Ludwigsburg > >> www.filmakademie.de > >> > >> Eintragung Amtsgericht Stuttgart HRB 205016 > >> Vorsitzender des Aufsichtsrats: > >> Dr. Christoph Palmer, MdL, Minister a.D. > >> > >> Gesch?ftsf?hrer: > >> Prof. Thomas Schadt > >> > >> -- > >> MailScanner mailing list > >> mailscanner@lists.mailscanner.info > >> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >> > >> Before posting, read http://wiki.mailscanner.info/posting > >> > >> Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From ssilva at sgvwater.com Wed Nov 21 16:52:58 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 21 17:08:49 2007 Subject: Beginner Question In-Reply-To: <20071121073249.957C.GERARD@seibercom.net> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C618@an-ex.ActiveNetwerx.int> <4743F754.5080304@cs.ucy.ac.cy> <20071121073249.957C.GERARD@seibercom.net> Message-ID: on 11/21/2007 4:33 AM Gerard spake the following: >> On Wednesday November 21, 2007 at 04:16:04 (AM) Andreas Kasenides wrote: > > [snip] > >> I was very suddened by the discussion in the Postfix lists. In my view this >> sort of thing should happen in the commercial software world, not on open >> source projects. I would appreciate an answer (even if it is obvious) from >> somebody that nows enough of the internals of MS. > > I honestly do not agree with that assessment. If these were commercial products > with millions of dollars, or whatever currency you are dealing with involved, > I can guarantee that Wietse and Julian would have worked out there differences > long ago. Microsoft could easily write code that would prevent any but its own > applications from working correctly; however, that would be suicide. Microsoft has done this in the past. They made windows 3.1 crash on DRDOS is the first one I remember. They caused problems in a few versions of Wordperfect in the Windows95 days, although Wordperfect might have shot themselves in the foot on those. Symantec > could develop its AV program to crash any MUA it did not approve of. Have you tried a recent version of Symantec 360? That > would cost it money, something commercial enterprises are not to keen to do. > > Yes, incompatibilities do arise from time to time; however, they are usually > attended to quickly. The old adage, "Money Talks" is relevant here. With no > monetary gain involved, or board of directors to contend with, the motivation > to remedy a situation declines proportionately. > > Who is to blame for this diabolical situation is debatable. Postfix is the > program that Mailscanner is accessing, so therefore there could be made a case > that Postfix is the one to make the rules. Wietse has not made any overt > changes to his product that would prevent Mailscanner from working with it; He does change it regularly, although it is his right to do so, and it breaks MailScanner often. > however, there is nothing that would prevent him from doing so. It would seem, > at least from my view point, that an acceptable API should be developed, > similar to what Dovecot and Postfix achieved, to alleviate this problem. > Unfortunately, that would require a dialog between the parties involved. From > what I have deduced, that does not presently exist. If you look at some of the old dialogs, there was only one approved way to do things, and that was Wietse's way. That is more of a diatribe than a dialog. > > Just my unsolicited 2?. I see your 2? and raise a nickel. > > -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From shuttlebox at gmail.com Wed Nov 21 17:10:58 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 21 17:11:05 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: References: <47363BDA.5050202@vanderkooij.org> <4743E90E.4000208@vanderkooij.org> <47442DF3.8070708@rma.edu> <47444B81.7070608@ecs.soton.ac.uk> Message-ID: <625385e30711210910w4b23f452oe37efaa34535449@mail.gmail.com> On Nov 21, 2007 5:35 PM, Scott Silva wrote: > Julian, > You would be the best one to say which modules, although they are listed in > MailScanner -V output as optional, would be a good choice to add to a system. > Or maybe some optional packages like a clamav-wrapper that pulls in no0t only > clamav, but clamd and perl-mail-clamav. That way the user has what he needs if > he wants to run clam by commandline, by perl module or by clamd. All these > options are already installed with Julian's script anyway, so I don't think it > is too much. > Otherwise I was just wanting some opinions so I could compile a list for > myself to stick in my docs. I package MailScanner for Solaris and the only thing on the optional list I include is DBD::SQLite since you can't use the SA cache feature otherwise. Our packages for Clam and SA pulls in some of the other optional modules so to get a working setup you just need to install MS, Clam and SA. That can't be too hard, can it? I would recommend creating an empty wrapper package that pulls in what you want for a turnkey solution if that's what you want but be careful with adding optional things to each package. You may find that everyone has an opinion about what optional modules are a must. :-) -- /peter From ssilva at sgvwater.com Wed Nov 21 17:03:49 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 21 17:13:25 2007 Subject: Kernel crash, MailScanner mentioned In-Reply-To: <4744180C.9030004@dcdata.co.za> References: <27812436.19531195645345745.JavaMail.root@office.splatnix.net> <4744180C.9030004@dcdata.co.za> Message-ID: on 11/21/2007 3:35 AM Neil Wilson spake the following: > UxBoD wrote: >> Is this happening the same time, nearly, every night ? If so what >> cronjobs are running at that time ? >> >> Regards, >> >> --[ UxBoD ]-- > > Thanks for the reply. > > I ran a mem test on the server this morning and it picked up a faulty > memory module, hopefully tonight it won't lock up. > > This system has had 3 mainboards and 4 different memory modules in the > last 3 days for different reasons. > > Fun and games! > > Thanks. > > Regards. > > Neil > You might want to check the power supply if it is hosing motherboards. And also look for shorts in the case to motherboard cabling such as LED's and USB outputs,etc... -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From hvdkooij at vanderkooij.org Wed Nov 21 17:47:07 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Wed Nov 21 17:47:35 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <625385e30711210910w4b23f452oe37efaa34535449@mail.gmail.com> References: <47363BDA.5050202@vanderkooij.org> <4743E90E.4000208@vanderkooij.org> <47442DF3.8070708@rma.edu> <47444B81.7070608@ecs.soton.ac.uk> <625385e30711210910w4b23f452oe37efaa34535449@mail.gmail.com> Message-ID: <47446F1B.5000005@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > I package MailScanner for Solaris and the only thing on the optional > list I include is DBD::SQLite since you can't use the SA cache feature > otherwise. Our packages for Clam and SA pulls in some of the other > optional modules so to get a working setup you just need to install > MS, Clam and SA. That can't be too hard, can it? I would recommend > creating an empty wrapper package that pulls in what you want for a > turnkey solution if that's what you want but be careful with adding > optional things to each package. You may find that everyone has an > opinion about what optional modules are a must. :-) Well. This is rather exactly what the current wrapper does. Only require what one must have to get started. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHRG8ZBvzDRVjxmYERAmX9AJ4/ZHAYH4VJuYQr6xbbuS7C/22/jwCeNnzZ +8DJt4vYwVRjhaWnmLLnDA8= =mqFC -----END PGP SIGNATURE----- From gerard at seibercom.net Wed Nov 21 17:53:34 2007 From: gerard at seibercom.net (Gerard) Date: Wed Nov 21 17:53:44 2007 Subject: Beginner Question In-Reply-To: References: <20071121073249.957C.GERARD@seibercom.net> Message-ID: <20071121124341.1182.GERARD@seibercom.net> > On Wednesday November 21, 2007 at 11:52:58 (AM) Scott Silva wrote: > on 11/21/2007 4:33 AM Gerard spake the following: > >> On Wednesday November 21, 2007 at 04:16:04 (AM) Andreas Kasenides wrote: > > > > [snip] > > > >> I was very suddened by the discussion in the Postfix lists. In my view this > >> sort of thing should happen in the commercial software world, not on open > >> source projects. I would appreciate an answer (even if it is obvious) from > >> somebody that nows enough of the internals of MS. > > > > I honestly do not agree with that assessment. If these were commercial products > > with millions of dollars, or whatever currency you are dealing with involved, > > I can guarantee that Wietse and Julian would have worked out there differences > > long ago. Microsoft could easily write code that would prevent any but its own > > applications from working correctly; however, that would be suicide. > > Microsoft has done this in the past. They made windows 3.1 crash on DRDOS is > the first one I remember. They caused problems in a few versions of > Wordperfect in the Windows95 days, although Wordperfect might have shot > themselves in the foot on those. 1) Win31 did not crash with DRDOS; it issued a warning message that an action could not be completed in certain circumstances. The error message was a false flag since the operation was completed. I agree that Microsoft probably did plant this in their source code; however, they were far from the only software distributor pulling stunts like this in the early days of home PC use. In any case, this is nearly a 20 year old event. 2) Word Perfect was sold to Novel who had no idea how to market the product. While they floundered, Microsoft spend an estimated $10 million dollars to study Word Perfect and improve on it. In the end, they produced the finest word processor on the market. Word Perfect simply died, not because of any overt act by Microsoft, but rather through neglect by its owners. Even though Word Perfect has since changed owners again, it has never regained its dominance in the market place. Word Perfect v. MS Office is a perfect example of how the market place, and not some scummy government bureaucrat, should drive software development. Unfortunately, it is all too often the other way around. > Symantec > > could develop its AV program to crash any MUA it did not approve of. > Have you tried a recent version of Symantec 360? 1) Not personally. I use "ZoneAlarm Suite" on my Windows machines. I just did a quick Googling for "Symantec+360" but did not find anything relevant. > That > > would cost it money, something commercial enterprises are not to keen to do. > > > > Yes, incompatibilities do arise from time to time; however, they are usually > > attended to quickly. The old adage, "Money Talks" is relevant here. With no > > monetary gain involved, or board of directors to contend with, the motivation > > to remedy a situation declines proportionately. > > > > Who is to blame for this diabolical situation is debatable. Postfix is the > > program that Mailscanner is accessing, so therefore there could be made a case > > that Postfix is the one to make the rules. Wietse has not made any overt > > changes to his product that would prevent Mailscanner from working with it; > He does change it regularly, although it is his right to do so, and it breaks > MailScanner often. 1) It is called 'updating' or 'product maintenance', if you prefer. There is a world of difference between updating/maintaining a program and placing a bomb in one. It is very magnanimous of you to give him your approval to code his program as he see fit. You assertion that he is breaking Mailscanner is absurd. If there was an API in place, then I would agree with you (perhaps); however, sans such a path, Mailscanner is simply using a back door method to access the output of Postfix. Wietse has stated that he wants Mailscanner to access Postfix using SMTP as is commonly done by other applications that work with Postfix. Julian has chosen not to go that route. If the two of them cannot come to a mutually agreeable solution, then Wietse is free to do as he wants without regards for Julian and Mailscanner. > > however, there is nothing that would prevent him from doing so. It would seem, > > at least from my view point, that an acceptable API should be developed, > > similar to what Dovecot and Postfix achieved, to alleviate this problem. > > Unfortunately, that would require a dialog between the parties involved. From > > what I have deduced, that does not presently exist. > If you look at some of the old dialogs, there was only one approved way to do > things, and that was Wietse's way. That is more of a diatribe than a dialog. 1) Again, it is his program. Has has the right to make decisions on how it should interact or be accessed by other application. You either play by his rules, or attempt to circumvent them. It must be remembered, that if you devise you own unapproved methods then you are accepting full responsibility for any and all actions that evolve. I am not saying that anything disastrous will ensue; however, if it does, you have no recourse and no one to blame but yourself. > > > > Just my unsolicited 2?. > I see your 2? and raise a nickel. Wow, a whole 7?. -- Gerard From ssilva at sgvwater.com Wed Nov 21 18:12:10 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 21 18:14:39 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <625385e30711210910w4b23f452oe37efaa34535449@mail.gmail.com> References: <47363BDA.5050202@vanderkooij.org> <4743E90E.4000208@vanderkooij.org> <47442DF3.8070708@rma.edu> <47444B81.7070608@ecs.soton.ac.uk> <625385e30711210910w4b23f452oe37efaa34535449@mail.gmail.com> Message-ID: on 11/21/2007 9:10 AM shuttlebox spake the following: > On Nov 21, 2007 5:35 PM, Scott Silva wrote: >> Julian, >> You would be the best one to say which modules, although they are listed in >> MailScanner -V output as optional, would be a good choice to add to a system. >> Or maybe some optional packages like a clamav-wrapper that pulls in no0t only >> clamav, but clamd and perl-mail-clamav. That way the user has what he needs if >> he wants to run clam by commandline, by perl module or by clamd. All these >> options are already installed with Julian's script anyway, so I don't think it >> is too much. >> Otherwise I was just wanting some opinions so I could compile a list for >> myself to stick in my docs. > > I package MailScanner for Solaris and the only thing on the optional > list I include is DBD::SQLite since you can't use the SA cache feature > otherwise. Our packages for Clam and SA pulls in some of the other > optional modules so to get a working setup you just need to install > MS, Clam and SA. That can't be too hard, can it? I would recommend > creating an empty wrapper package that pulls in what you want for a > turnkey solution if that's what you want but be careful with adding > optional things to each package. You may find that everyone has an > opinion about what optional modules are a must. :-) > I suppose that if Julian thought them necessary, they wouldn't be in the optional section. ;-D -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From Kevin_Miller at ci.juneau.ak.us Wed Nov 21 19:12:43 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Wed Nov 21 19:11:59 2007 Subject: Notifications not being recieved In-Reply-To: <47444A10.5010702@ecs.soton.ac.uk> References: <4743FD61.4040402@teleord.co.uk> <47444A10.5010702@ecs.soton.ac.uk> Message-ID: Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Do your incoming messages have the MailScanner headers in them? If > not, then you still have your old sendmail setup running as well as > MailScanner, and so all the mail will bypass MailScanner completely. > So that is check number 1. > > Does this mean that Nielse Book wholesalers are using MailScanner now? > If so, can I add you to my list of users web page please? Don't know about Nielse Books, but you're welcome to add the "City & Borough of Juneau" under the govt. section if you're so inclined... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From octaviomaiden at yahoo.com Thu Nov 22 00:58:22 2007 From: octaviomaiden at yahoo.com (Octavio) Date: Thu Nov 22 00:58:25 2007 Subject: another antivirus In-Reply-To: Message-ID: <962886.96819.qm@web38907.mail.mud.yahoo.com> Hi I want to test another antivirus that works with MS beside clamav because seems it takes too much to scan each email I have install it ESET Mail Security (Debian) from here http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3714&Itemid=9 but seems is not working with mailscanner I want to be sure about what products will work great with MS before buy it Octavio Comparte video en la ventana de tus mensajes (y tambi?n tus fotos de Flickr). Usa el nuevo Yahoo! Messenger versi?n Beta. http://e1.beta.messenger.yahoo.com/ From vincent at zijnemail.nl Thu Nov 22 05:03:48 2007 From: vincent at zijnemail.nl (Vincent Verhagen) Date: Thu Nov 22 05:03:52 2007 Subject: Add ID to email headers? In-Reply-To: <47445F89.6000208@ecs.soton.ac.uk> References: <47445B7F.3080309@zijnemail.nl> <47445F89.6000208@ecs.soton.ac.uk> Message-ID: <47450DB4.9080000@zijnemail.nl> Thanks for the (very) swift response! Vincent. Julian Field wrote: > Yes, it's quite simple. I'm not going to put it in the code unless > quite a few people want it, but as you said a patch was okay, try the > attached patch to Message.pm > (/usr/lib/MailScanner/MailScanner/Message.pm). > > It's pretty obvious how it works :-) > > > Vincent Verhagen wrote: >> Hi all, >> >> My setup: Postfix 2.4.3, MailScanner 4.61.7, MailWatch 1.0.3 >> Would any of you know if it is possible (if need be with a small >> patch) to add the ID field that mailwatch uses to a header in the >> outgoing emails? >> I'd like to add something like X-orgname-MailScanner-ID so I can >> easily trace back messages I get questions about. >> >> Regards, >> Vincent >> >> P.S. Lulu just shipped the book :) >> > > Jules > From neilw at dcdata.co.za Thu Nov 22 06:19:27 2007 From: neilw at dcdata.co.za (Neil Wilson) Date: Thu Nov 22 06:21:24 2007 Subject: Kernel crash, MailScanner mentioned In-Reply-To: References: <27812436.19531195645345745.JavaMail.root@office.splatnix.net> <4744180C.9030004@dcdata.co.za> Message-ID: <47451F6F.4040209@dcdata.co.za> Scott Silva wrote: > You might want to check the power supply if it is hosing motherboards. > And also look for shorts in the case to motherboard cabling such as > LED's and USB outputs,etc... > The first one we changed because the South Bridge temp was running at 86 degrees, the 2nd one was changed because it was hanging on post randomly, and also wasn't working with the 4 port NIC card, and finally the 3rd one worked like a charm. 2xIntel and the last was an Asus. The machine made it through last night without a hitch, so finally I've now seen the last of this. Thanks for all the replies everyone. Regards. Neil. -- This email and all contents are subject to the following disclaimer: http://www.dcdata.co.za/emaildisclaimer.html From edward at tdcs.com.au Thu Nov 22 06:38:36 2007 From: edward at tdcs.com.au (Edward Dekkers) Date: Thu Nov 22 06:39:13 2007 Subject: Whitelist not working? In-Reply-To: <47444686.8020400@ecs.soton.ac.uk> References: <47444686.8020400@ecs.soton.ac.uk> Message-ID: > > I've added the domain where it's going to the whitelist > > (/opt/MailSCanner/etc/rules/spam.whitelist.rules) > > > > But it still seems to be blocking. > > > There can be many many "whitelists". The one I provide for whitelisting > for spam checks (works on the "Is Definitely Not Spam" conf setting) is > just a useful example. You can copy the technique to any of the other > conf settings that say they can take rulesets, which are virtually all > of them. You want to create a ruleset for "Max Archive Depth", setting > it to 0 for the sender or domain you are getting this from or to, and > leave the default setting at something sensible. > That is SO cool. I did not realise this when I started looking for a way to clean up mail on this server. It all stemmed from one of the bosses getting too much spam. MailScanner has already fixed that up, and I'm learning more and more about the potential of it. This is a serious piece of software and your help (and Hugo's) is invaluable. Thanks guys. I will play around with this stuff some more. Regards, Ed. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From martinh at solidstatelogic.com Thu Nov 22 08:21:57 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 22 08:22:05 2007 Subject: another antivirus In-Reply-To: <962886.96819.qm@web38907.mail.mud.yahoo.com> Message-ID: <274748c63b50774c8c1e0c91f0e11f93@solidstatelogic.com> Octavio http://wiki.mailscanner.info/doku.php?id=&idx=documentation:anti_virus there's a generic scanner you can use to call a.n.other commercial scanner.. Also I'd check the clamav settings - latest versions of MS can use clamd which is a lot faster than clamscan or clamdscan. Also make sure you're using an upto date clamav, they had a few performance issues early on in in the 0.90 releases, esp with clamscan. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Octavio > Sent: 22 November 2007 00:58 > To: MailScanner discussion > Subject: another antivirus > > Hi I want to test another antivirus that works with MS > beside clamav because seems it takes too much to scan > each email > I have install it > ESET Mail Security (Debian) from here > http://www.eset.com/joomla/index.php?option=com_content&task=view&id=3714& > Itemid=9 > > but seems is not working with mailscanner > I want to be sure about what products will work great > with MS before buy it > > Octavio > > > Comparte video en la ventana de tus mensajes (y tambi?n tus fotos de > Flickr). Usa el nuevo Yahoo! Messenger versi?n Beta. > http://e1.beta.messenger.yahoo.com/ > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From glenn.steen at gmail.com Thu Nov 22 09:44:55 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 22 09:45:01 2007 Subject: Beginner Question In-Reply-To: <20071121124341.1182.GERARD@seibercom.net> References: <20071121073249.957C.GERARD@seibercom.net> <20071121124341.1182.GERARD@seibercom.net> Message-ID: <223f97700711220144s7f6d3a97k8897471911cf8a41@mail.gmail.com> On 21/11/2007, Gerard wrote: > > On Wednesday November 21, 2007 at 11:52:58 (AM) Scott Silva wrote: > > > on 11/21/2007 4:33 AM Gerard spake the following: > > >> On Wednesday November 21, 2007 at 04:16:04 (AM) Andreas Kasenides wrote: > > > > > > [snip] > > > > > >> I was very suddened by the discussion in the Postfix lists. In my view this > > >> sort of thing should happen in the commercial software world, not on open > > >> source projects. I would appreciate an answer (even if it is obvious) from > > >> somebody that nows enough of the internals of MS. > > > > > > I honestly do not agree with that assessment. If these were commercial products > > > with millions of dollars, or whatever currency you are dealing with involved, > > > I can guarantee that Wietse and Julian would have worked out there differences > > > long ago. Microsoft could easily write code that would prevent any but its own > > > applications from working correctly; however, that would be suicide. > > > > Microsoft has done this in the past. They made windows 3.1 crash on DRDOS is > > the first one I remember. They caused problems in a few versions of > > Wordperfect in the Windows95 days, although Wordperfect might have shot > > themselves in the foot on those. > > 1) Win31 did not crash with DRDOS; it issued a warning message that an action > could not be completed in certain circumstances. The error message was a false > flag since the operation was completed. I agree that Microsoft probably did > plant this in their source code; however, they were far from the only software > distributor pulling stunts like this in the early days of home PC use. In any > case, this is nearly a 20 year old event. Does any of this matter? Hardly. What rankled me a bit in your first post, Gerard, was the assertion (rather uninformed, IMO) that Europe (which you seem to equate to the European Union) is some form of socialist state... (Please update your political understanding a bit!:-), and that the EU was acting outside some type of legal bounds. This is just plain not true. The action taken against MicroSoft is well founded, and has nothing to do with 20-year-old "sins". I wont go into this further, it is severely OT enough, as is:-). What you do is celebrate the market economy as a political standpoint..... something that has historically been show to be false, time and time again. Corporations will not take the responsibility they should. That is plainly not in the market model. Unless, of course, the "market" (a.k.a. we consumers) "demand" ethics and morals... Failing that, legislation is needed. Even today. We can carp and rant about it, it will not change a thing. Note that if anything, my personal political views are rather anti-socialist ... That doesn't per definition make me a facist or commercialist/mercantilist ...;-) The fun thing is that OSS as such is a celebration of one of the founding principles of socialism: That we as a collective/community can do more than any one person/corporation. So the picture isn't all black, or white for that matter.... It's mostly a study in gray:-):-) > 2) Word Perfect was sold to Novel who had no idea how to market the product. > While they floundered, Microsoft spend an estimated $10 million dollars to > study Word Perfect and improve on it. In the end, they produced the finest > word processor on the market. Word Perfect simply died, not because of any > overt act by Microsoft, but rather through neglect by its owners. Even though > Word Perfect has since changed owners again, it has never regained its > dominance in the market place. Word Perfect v. MS Office is a perfect example > of how the market place, and not some scummy government bureaucrat, should > drive software development. Unfortunately, it is all too often the other way > around. A public servant shouldn't be "scummy", so if yours are... Elect better ones;-). About the very tired ol' "my wordprocessor is better than yours"... Yes, Novell fumbled the ball, no doubt. At that time they pretty much fumbled all balls:-). And WP wasn't all that good, in all honesty. Personally I use OoO wherever I can, and propagate the use of Linux (or other "*nix products"). Not only because I detest the MicroSoft alternatives (which I for the most part happen to do), but also because that for a majority of laymen users... It is functionally enough in terms of usability, cost and ... well ... function:-). But since I (effectively) can't buy a computer without a pre-installed OS, and that OS is one of the M$ turds... this is seldom applied to new hardware. Oh well. > > > Symantec > > > could develop its AV program to crash any MUA it did not approve of. > > Have you tried a recent version of Symantec 360? > > 1) Not personally. I use "ZoneAlarm Suite" on my Windows machines. I just did > a quick Googling for "Symantec+360" but did not find anything relevant. > > > That > > > would cost it money, something commercial enterprises are not to keen to do. > > > > > > Yes, incompatibilities do arise from time to time; however, they are usually > > > attended to quickly. The old adage, "Money Talks" is relevant here. With no > > > monetary gain involved, or board of directors to contend with, the motivation > > > to remedy a situation declines proportionately. > > > > > > Who is to blame for this diabolical situation is debatable. Postfix is the > > > program that Mailscanner is accessing, so therefore there could be made a case > > > that Postfix is the one to make the rules. Wietse has not made any overt > > > changes to his product that would prevent Mailscanner from working with it; > > He does change it regularly, although it is his right to do so, and it breaks > > MailScanner often. > > 1) It is called 'updating' or 'product maintenance', if you prefer. There is a > world of difference between updating/maintaining a program and placing a bomb > in one. It is very magnanimous of you to give him your approval to code his > program as he see fit. You assertion that he is breaking Mailscanner is absurd. > If there was an API in place, then I would agree with you (perhaps); however, > sans such a path, Mailscanner is simply using a back door method to access the > output of Postfix. Wietse has stated that he wants Mailscanner to access > Postfix using SMTP as is commonly done by other applications that work with > Postfix. Julian has chosen not to go that route. If the two of them cannot > come to a mutually agreeable solution, then Wietse is free to do as he wants > without regards for Julian and Mailscanner. Wietse is very well in his rights to do whatever he please with Postfix. Julian has the exact same right WRT MailScanner. There has never been any doubt about that. The SMTP route isn't directly usable for batch processing, so isn't really an option for MailScanner. This alone is justification enough to do things as they're done in MS. An alternative would be to let Postfix (through one of the "known" interfaces ...) "talk" to a piece of software that writes all the necessary tidbits into a "black bag" where MailScanner can later extract it... This route has actually been explored in the past, but never caught on. Mostly because the need for such an "extra" layer wasn't great enough. If you like, we as consumers (a.k.a. the market;-) decided that the way things are is fine enough. > > > however, there is nothing that would prevent him from doing so. It would seem, > > > at least from my view point, that an acceptable API should be developed, > > > similar to what Dovecot and Postfix achieved, to alleviate this problem. > > > Unfortunately, that would require a dialog between the parties involved. From > > > what I have deduced, that does not presently exist. > > If you look at some of the old dialogs, there was only one approved way to do > > things, and that was Wietse's way. That is more of a diatribe than a dialog. > > 1) Again, it is his program. Has has the right to make decisions on how it > should interact or be accessed by other application. You either play by his > rules, or attempt to circumvent them. It must be remembered, that if you > devise you own unapproved methods then you are accepting full responsibility > for any and all actions that evolve. I am not saying that anything disastrous > will ensue; however, if it does, you have no recourse and no one to blame but > yourself. It *IS* his program, but it is also open source. By maing it thus... he has left the door open to do exactly what we do. And we *DO* take full responsibility for this. There has never been any doubt about that. One would wish that instead of the "That is unsupported, remove it" line, the PF devs would change to "That is unsupported by us, go ask at the MailScanner list". Pretty much like we do for things like OpenProtect etc. Just plain acting maturely and in a civilized way:-). > > > > > > Just my unsolicited 2?. > > I see your 2? and raise a nickel. > > Wow, a whole 7?. You'll get 0.50 SEK (50 ?re...) from me;-) > -- > Gerard > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Thu Nov 22 09:52:51 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 22 09:52:56 2007 Subject: Notifications not being recieved In-Reply-To: References: <4743FD61.4040402@teleord.co.uk> <47444A10.5010702@ecs.soton.ac.uk> Message-ID: <223f97700711220152u1a6eda51nc4ce8d039a372120@mail.gmail.com> On 21/11/2007, Kevin Miller wrote: > Julian Field wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Do your incoming messages have the MailScanner headers in them? If > > not, then you still have your old sendmail setup running as well as > > MailScanner, and so all the mail will bypass MailScanner completely. > > So that is check number 1. > > > > Does this mean that Nielse Book wholesalers are using MailScanner now? > > If so, can I add you to my list of users web page please? > > Don't know about Nielse Books, but you're welcome to add the "City & > Borough of Juneau" under the govt. section if you're so inclined... > > ...Kevin If you haven't already, add "The First General Pension Fund of Sweden" as well... A mouthful, but it's the official translation of "F?rsta AP-Fonden":-). Or better yet, use the "F?rsta AP-Fonden" line, since it's kind of a logo type of thing. Official web-page is www.ap1.se ... Not that I know why you'd want to link to that, or even if you'd like to:-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From donald.dawson at bakerbotts.com Thu Nov 22 14:47:41 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Thu Nov 22 14:47:48 2007 Subject: URIBL_SBL timeouts running MS in debug mode. Message-ID: I'm running MS version 4.62.9 and SA version 3.002002 on a server with 2 GB memory and 2 dual-core processors. We are experiencing some long delays in processing email (received to delivered: delay times - xdelay is ok). We process over 500k emails a day from this MX server and 3 others - similar to more horsepower. Max children is set to 10 and 30 messages per batch. The time it takes to process a message is not bad (7.48), but the problem is the waiting messages. My Subject line refers to URIBL_SBL timeouts from the MailScanner debug run below (go to the bottom of this email to see the timeouts). Any ideas as to how to speed up the processing? We have a large 'Is Definitely Not Spam' list: Is Definitely Not Spam = &SpamWhiteList('/etc/MailScanner/rules/bb_ms_custom.whitelist') bb_ms_custom.whitelist has 244907 entries Spamassassin rule info: /var/cfengine/master/MailScanner/etc/mail/spamassassin -- 1519552 bytes -- 39 files -- 13285 rows /usr/share/spamassassin -- 497447 bytes -- 47 files -- 5775 rows Here is a report by hour showing number of messages with average delay and xdelay. The average delay should be lower Hour: 00 Server: houmx04-inside Sent cnt: 171 avg delay(m): 6.3 avg xdelay(s): 0.3 Hour: 01 Server: houmx04-inside Sent cnt: 195 avg delay(m): 8.2 avg xdelay(s): 0.2 Hour: 02 Server: houmx04-inside Sent cnt: 282 avg delay(m): 7.1 avg xdelay(s): 0.1 Hour: 03 Server: houmx04-inside Sent cnt: 224 avg delay(m): 5.6 avg xdelay(s): 0.1 Hour: 04 Server: houmx04-inside Sent cnt: 120 avg delay(m): 7.0 avg xdelay(s): 0.6 Hour: 05 Server: houmx04-inside Sent cnt: 183 avg delay(m): 8.1 avg xdelay(s): 0.2 Hour: 06 Server: houmx04-inside Sent cnt: 263 avg delay(m): 8.2 avg xdelay(s): 0.2 Hour: 07 Server: houmx04-inside Sent cnt: 320 avg delay(m): 8.8 avg xdelay(s): 0.2 Hour: 08 Server: houmx04-inside Sent cnt: 484 avg delay(m): 9.2 avg xdelay(s): 0.2 Hour: 09 Server: houmx04-inside Sent cnt: 690 avg delay(m): 10.2 avg xdelay(s): 0.2 Hour: 10 Server: houmx04-inside Sent cnt: 726 avg delay(m): 9.2 avg xdelay(s): 0.3 Hour: 11 Server: houmx04-inside Sent cnt: 477 avg delay(m): 12.9 avg xdelay(s): 0.2 Hour: 12 Server: houmx04-inside Sent cnt: 659 avg delay(m): 14.5 avg xdelay(s): 0.2 This shows average time to process each message (7.48 seconds) which is okay: total count for server houmx04-inside 51445 total time 384813 avg 7.48 MailScanner -v: Linux houmx04.bakerbotts.com 2.6.9-1.667smp #1 SMP Tue Nov 2 14:59:52 EST 2004 i686 i686 i386 GNU/Linux This is Fedora Core release 3 (Heidelberg) This is Perl version 5.008005 (5.8.5) This is MailScanner version 4.62.9 Module versions are: 1.00 AnyDBM_File 1.18 Archive::Zip 1.03 Carp 1.119 Convert::BinHex 1.00 DirHandle 1.05 Fcntl 2.73 File::Basename 2.08 File::Copy 2.01 FileHandle 1.06 File::Path 0.18 File::Temp 0.90 Filesys::Df 1.35 HTML::Entities 3.56 HTML::Parser 2.37 HTML::TokeParser 1.23 IO 1.14 IO::File 1.13 IO::Pipe 1.71 Mail::Header 1.86 Math::BigInt 3.05 MIME::Base64 5.420 MIME::Decoder 5.420 MIME::Decoder::UU 5.420 MIME::Head 5.420 MIME::Parser 3.03 MIME::QuotedPrint 5.420 MIME::Tools 0.11 Net::CIDR 1.08 POSIX 1.19 Scalar::Util 1.77 Socket 1.4 Sys::Hostname::Long 0.18 Sys::Syslog 1.9707 Time::HiRes 1.02 Time::localtime ------------------------------------------------------------------------ -------------------------------------------------- MailScanner -debug -debug-sa: [14997] dbg: dns: name server: 127.0.0.1, LocalAddr: 0.0.0.0 [14997] dbg: message: main message type: multipart/alternative [14997] dbg: message: ---- MIME PARSER START ---- [14997] dbg: message: parsing multipart, got boundary: __________MIMEboundary__________ [14997] dbg: message: found part of type text/plain, boundary: __________MIMEboundary__________ [14997] dbg: message: added part, type: text/plain [14997] dbg: message: found part of type text/html, boundary: __________MIMEboundary__________ [14997] dbg: message: added part, type: text/html [14997] dbg: message: parsing normal part [14997] dbg: message: parsing normal part [14997] dbg: message: ---- MIME PARSER END ---- [14997] dbg: conf: trusted_networks are not configured; it is recommended that you configure trusted_networks manually [14997] dbg: received-header: parsed as [ ip=209.66.113.62 rdns=mkt7.verticalresponse.com helo=mkt7.verticalresponse.com by=houmx04.bakerbotts.com ident= envfrom= intl=0 id=lALG5l4b011236 auth= msa=0 ] [14997] dbg: received-header: do not trust any hosts from here on [14997] dbg: received-header: relay 209.66.113.62 trusted? no internal? no msa? no [14997] dbg: received-header: parsed as [ ip=192.168.0.120 rdns=b.cts.vresp.com helo=b.cts.vresp.com by=mkt7.verticalresponse.com ident= envfrom= intl=0 id= auth= msa=0 ] [14997] dbg: received-header: relay 192.168.0.120 trusted? no internal? no msa? no [14997] dbg: metadata: X-Spam-Relays-Trusted: [14997] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=209.66.113.62 rdns=mkt7.verticalresponse.com helo=mkt7.verticalresponse.com by=houmx04.bakerbotts.com ident= envfrom= intl=0 id=lALG5l4b011236 auth= msa=0 ] [ ip=192.168.0.120 rdns=b.cts.vresp.com helo=b.cts.vresp.com by=mkt7.verticalresponse.com ident= envfrom= intl=0 id= auth= msa=0 ] [14997] dbg: metadata: X-Spam-Relays-Internal: [14997] dbg: metadata: X-Spam-Relays-External: [ ip=209.66.113.62 rdns=mkt7.verticalresponse.com helo=mkt7.verticalresponse.com by=houmx04.bakerbotts.com ident= envfrom= intl=0 id=lALG5l4b011236 auth= msa=0 ] [ ip=192.168.0.120 rdns=b.cts.vresp.com helo=b.cts.vresp.com by=mkt7.verticalresponse.com ident= envfrom= intl=0 id= auth= msa=0 ] [14997] dbg: message: decoding quoted-printable [14997] dbg: message: decoding quoted-printable [14997] dbg: textcat: classifying, skipping: yi sco lv is bs sl la ga sa eu et rm cy fy eo lt gd [14997] dbg: textcat: language possibly: en [14997] dbg: textcat: X-Languages: "en", X-Languages-Length: 8299 [14997] dbg: uridnsbl: domains to query: sanmigueljazz.com mexvox.net verticalresponse.com todalaprensa.com.mx vresp.com [14997] dbg: dns: URIBL_GREY lookup start [14997] dbg: dns: WHOIS_SECUREWHOIS lookup start [14997] dbg: dns: WHOIS_MYPRIVREG lookup start [14997] dbg: dns: WHOIS_NETSOLPR lookup start [14997] dbg: dns: WHOIS_AITPRIV lookup start [14997] dbg: dns: WHOIS_FINEXE lookup start [14997] dbg: dns: WHOIS_CONTACTPRIV lookup start [14997] dbg: dns: URIBL_BLACK lookup start [14997] dbg: dns: WHOIS_REGISTER4LESS lookup start [14997] dbg: dns: WHOIS_NETID lookup start [14997] dbg: dns: WHOIS_DYNADOT lookup start [14997] dbg: dns: URIBL_OB_SURBL lookup start [14997] dbg: dns: WHOIS_DMNBYPROXY lookup start [14997] dbg: dns: WHOIS_MONIKER_PRIV lookup start [14997] dbg: dns: WHOIS_PRIVDOMAIN lookup start [14997] dbg: dns: WHOIS_DREAMPRIV lookup start [14997] dbg: dns: URIBL_RED lookup start [14997] dbg: dns: URIBL_SC_SURBL lookup start [14997] dbg: dns: URIBL_AB_SURBL lookup start [14997] dbg: dns: WHOIS_WHOISGUARD lookup start [14997] dbg: dns: WHOIS_PRIVPROT lookup start [14997] dbg: dns: WHOIS_NAMEKING lookup start [14997] dbg: dns: URIBL_PH_SURBL lookup start [14997] dbg: dns: WHOIS_DOMPRIVCORP lookup start [14997] dbg: dns: WHOIS_PRIVACYPOST lookup start [14997] dbg: dns: URIBL_RHS_DOB lookup start [14997] dbg: dns: WHOIS_DOMESCROW lookup start [14997] dbg: dns: WHOIS_WHOISPROT lookup start [14997] dbg: dns: URIBL_JP_SURBL lookup start [14997] dbg: dns: WHOIS_REGTEK lookup start [14997] dbg: dns: WHOIS_SAFENAMES lookup start [14997] dbg: dns: URIBL_WS_SURBL lookup start [14997] dbg: dns: WHOIS_NOMINET lookup start [14997] dbg: dns: WHOIS_REGISTERFLY lookup start [14997] dbg: dns: WHOIS_UNLISTED lookup start [14997] dbg: dns: URIBL_SBL lookup start [14997] dbg: dns: URIBL_GREY lookup start [14997] dbg: dns: WHOIS_SECUREWHOIS lookup start [14997] dbg: dns: WHOIS_MYPRIVREG lookup start [14997] dbg: dns: WHOIS_NETSOLPR lookup start [14997] dbg: dns: WHOIS_AITPRIV lookup start [14997] dbg: dns: WHOIS_FINEXE lookup start [14997] dbg: dns: WHOIS_CONTACTPRIV lookup start [14997] dbg: dns: URIBL_BLACK lookup start [14997] dbg: dns: WHOIS_REGISTER4LESS lookup start [14997] dbg: dns: WHOIS_NETID lookup start [14997] dbg: dns: WHOIS_DYNADOT lookup start [14997] dbg: dns: URIBL_OB_SURBL lookup start [14997] dbg: dns: WHOIS_DMNBYPROXY lookup start [14997] dbg: dns: WHOIS_MONIKER_PRIV lookup start [14997] dbg: dns: WHOIS_PRIVDOMAIN lookup start [14997] dbg: dns: WHOIS_DREAMPRIV lookup start [14997] dbg: dns: URIBL_RED lookup start [14997] dbg: dns: URIBL_SC_SURBL lookup start [14997] dbg: dns: URIBL_AB_SURBL lookup start [14997] dbg: dns: WHOIS_WHOISGUARD lookup start [14997] dbg: dns: WHOIS_PRIVPROT lookup start [14997] dbg: dns: WHOIS_NAMEKING lookup start [14997] dbg: dns: URIBL_PH_SURBL lookup start [14997] dbg: dns: WHOIS_DOMPRIVCORP lookup start [14997] dbg: dns: WHOIS_PRIVACYPOST lookup start [14997] dbg: dns: URIBL_RHS_DOB lookup start [14997] dbg: dns: WHOIS_DOMESCROW lookup start [14997] dbg: dns: WHOIS_WHOISPROT lookup start [14997] dbg: dns: URIBL_JP_SURBL lookup start [14997] dbg: dns: WHOIS_REGTEK lookup start [14997] dbg: dns: WHOIS_SAFENAMES lookup start [14997] dbg: dns: URIBL_WS_SURBL lookup start [14997] dbg: dns: WHOIS_NOMINET lookup start [14997] dbg: dns: WHOIS_REGISTERFLY lookup start [14997] dbg: dns: WHOIS_UNLISTED lookup start [14997] dbg: dns: URIBL_SBL lookup start [14997] dbg: dns: URIBL_GREY lookup start [14997] dbg: dns: WHOIS_SECUREWHOIS lookup start [14997] dbg: dns: WHOIS_MYPRIVREG lookup start [14997] dbg: dns: WHOIS_NETSOLPR lookup start [14997] dbg: dns: WHOIS_AITPRIV lookup start [14997] dbg: dns: WHOIS_FINEXE lookup start [14997] dbg: dns: WHOIS_CONTACTPRIV lookup start [14997] dbg: dns: URIBL_BLACK lookup start [14997] dbg: dns: WHOIS_REGISTER4LESS lookup start [14997] dbg: dns: WHOIS_NETID lookup start [14997] dbg: dns: WHOIS_DYNADOT lookup start [14997] dbg: dns: URIBL_OB_SURBL lookup start [14997] dbg: dns: WHOIS_DMNBYPROXY lookup start [14997] dbg: dns: WHOIS_MONIKER_PRIV lookup start [14997] dbg: dns: WHOIS_PRIVDOMAIN lookup start [14997] dbg: dns: WHOIS_DREAMPRIV lookup start [14997] dbg: dns: URIBL_RED lookup start [14997] dbg: dns: URIBL_SC_SURBL lookup start [14997] dbg: dns: URIBL_AB_SURBL lookup start [14997] dbg: dns: WHOIS_WHOISGUARD lookup start [14997] dbg: dns: WHOIS_PRIVPROT lookup start [14997] dbg: dns: WHOIS_NAMEKING lookup start [14997] dbg: dns: URIBL_PH_SURBL lookup start [14997] dbg: dns: WHOIS_DOMPRIVCORP lookup start [14997] dbg: dns: WHOIS_PRIVACYPOST lookup start [14997] dbg: dns: URIBL_RHS_DOB lookup start [14997] dbg: dns: WHOIS_DOMESCROW lookup start [14997] dbg: dns: WHOIS_WHOISPROT lookup start [14997] dbg: dns: URIBL_JP_SURBL lookup start [14997] dbg: dns: WHOIS_REGTEK lookup start [14997] dbg: dns: WHOIS_SAFENAMES lookup start [14997] dbg: dns: URIBL_WS_SURBL lookup start [14997] dbg: dns: WHOIS_NOMINET lookup start [14997] dbg: dns: WHOIS_REGISTERFLY lookup start [14997] dbg: dns: WHOIS_UNLISTED lookup start [14997] dbg: dns: URIBL_SBL lookup start [14997] dbg: dns: URIBL_GREY lookup start [14997] dbg: dns: WHOIS_SECUREWHOIS lookup start [14997] dbg: dns: WHOIS_MYPRIVREG lookup start [14997] dbg: dns: WHOIS_NETSOLPR lookup start [14997] dbg: dns: WHOIS_AITPRIV lookup start [14997] dbg: dns: WHOIS_FINEXE lookup start [14997] dbg: dns: WHOIS_CONTACTPRIV lookup start [14997] dbg: dns: URIBL_BLACK lookup start [14997] dbg: dns: WHOIS_REGISTER4LESS lookup start [14997] dbg: dns: WHOIS_NETID lookup start [14997] dbg: dns: WHOIS_DYNADOT lookup start [14997] dbg: dns: URIBL_OB_SURBL lookup start [14997] dbg: dns: WHOIS_DMNBYPROXY lookup start [14997] dbg: dns: WHOIS_MONIKER_PRIV lookup start [14997] dbg: dns: WHOIS_PRIVDOMAIN lookup start [14997] dbg: dns: WHOIS_DREAMPRIV lookup start [14997] dbg: dns: URIBL_RED lookup start [14997] dbg: dns: URIBL_SC_SURBL lookup start [14997] dbg: dns: URIBL_AB_SURBL lookup start [14997] dbg: dns: WHOIS_WHOISGUARD lookup start [14997] dbg: dns: WHOIS_PRIVPROT lookup start [14997] dbg: dns: WHOIS_NAMEKING lookup start [14997] dbg: dns: URIBL_PH_SURBL lookup start [14997] dbg: dns: WHOIS_DOMPRIVCORP lookup start [14997] dbg: dns: WHOIS_PRIVACYPOST lookup start [14997] dbg: dns: URIBL_RHS_DOB lookup start [14997] dbg: dns: WHOIS_DOMESCROW lookup start [14997] dbg: dns: WHOIS_WHOISPROT lookup start [14997] dbg: dns: URIBL_JP_SURBL lookup start [14997] dbg: dns: WHOIS_REGTEK lookup start [14997] dbg: dns: WHOIS_SAFENAMES lookup start [14997] dbg: dns: URIBL_WS_SURBL lookup start [14997] dbg: dns: WHOIS_NOMINET lookup start [14997] dbg: dns: WHOIS_REGISTERFLY lookup start [14997] dbg: dns: WHOIS_UNLISTED lookup start [14997] dbg: dns: URIBL_SBL lookup start [14997] dbg: dns: URIBL_GREY lookup start [14997] dbg: dns: WHOIS_SECUREWHOIS lookup start [14997] dbg: dns: WHOIS_MYPRIVREG lookup start [14997] dbg: dns: WHOIS_NETSOLPR lookup start [14997] dbg: dns: WHOIS_AITPRIV lookup start [14997] dbg: dns: WHOIS_FINEXE lookup start [14997] dbg: dns: WHOIS_CONTACTPRIV lookup start [14997] dbg: dns: URIBL_BLACK lookup start [14997] dbg: dns: WHOIS_REGISTER4LESS lookup start [14997] dbg: dns: WHOIS_NETID lookup start [14997] dbg: dns: WHOIS_DYNADOT lookup start [14997] dbg: dns: URIBL_OB_SURBL lookup start [14997] dbg: dns: WHOIS_DMNBYPROXY lookup start [14997] dbg: dns: WHOIS_MONIKER_PRIV lookup start [14997] dbg: dns: WHOIS_PRIVDOMAIN lookup start [14997] dbg: dns: WHOIS_DREAMPRIV lookup start [14997] dbg: dns: URIBL_RED lookup start [14997] dbg: dns: URIBL_SC_SURBL lookup start [14997] dbg: dns: URIBL_AB_SURBL lookup start [14997] dbg: dns: WHOIS_WHOISGUARD lookup start [14997] dbg: dns: WHOIS_PRIVPROT lookup start [14997] dbg: dns: WHOIS_NAMEKING lookup start [14997] dbg: dns: URIBL_PH_SURBL lookup start [14997] dbg: dns: WHOIS_DOMPRIVCORP lookup start [14997] dbg: dns: WHOIS_PRIVACYPOST lookup start [14997] dbg: dns: URIBL_RHS_DOB lookup start [14997] dbg: dns: WHOIS_DOMESCROW lookup start [14997] dbg: dns: WHOIS_WHOISPROT lookup start [14997] dbg: dns: URIBL_JP_SURBL lookup start [14997] dbg: dns: WHOIS_REGTEK lookup start [14997] dbg: dns: WHOIS_SAFENAMES lookup start [14997] dbg: dns: URIBL_WS_SURBL lookup start [14997] dbg: dns: WHOIS_NOMINET lookup start [14997] dbg: dns: WHOIS_REGISTERFLY lookup start [14997] dbg: dns: WHOIS_UNLISTED lookup start [14997] dbg: dns: URIBL_SBL lookup start [14997] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: [14997] dbg: dns: checking RBL plus.bondedsender.org., set ssc-firsttrusted [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.plus.bondedsender.org. in background [14997] dbg: dns: checking RBL combined.njabl.org., set njabl [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.combined.njabl.org. in background [14997] dbg: dns: checking RBL bl.spamcop.net., set spamcop [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS TXT query for 62.113.66.209.bl.spamcop.net. in background [14997] dbg: dns: _check_rbl_addresses RBL rhsbl.ahbl.org., set ahbl [14997] dbg: dns: launching DNS A query for b.cts.vresp.com.rhsbl.ahbl.org. in background [14997] dbg: dns: checking RBL dob.sibl.support-intelligence.net., set dob [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.dob.sibl.support-intelligence.net. in background [14997] dbg: dns: checking A and MX for host b.cts.vresp.com [14997] dbg: dns: launching DNS A query for b.cts.vresp.com in background [14997] dbg: dns: launching DNS MX query for b.cts.vresp.com in background [14997] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.zen.spamhaus.org. in background [14997] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.dnsbl.sorbs.net. in background [14997] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: _check_rbl_addresses RBL dob.sibl.support-intelligence.net., set dob [14997] dbg: dns: launching DNS A query for b.cts.vresp.com.dob.sibl.support-intelligence.net. in background [14997] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: checking RBL list.dnswl.org., set dnswl-firsttrusted [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.list.dnswl.org. in background [14997] dbg: dns: checking RBL sa-accredit.habeas.com., set habeas-firsttrusted [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.sa-accredit.habeas.com. in background [14997] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS TXT query for 62.113.66.209.list.dsbl.org. in background [14997] dbg: dns: checking RBL sa-trusted.bondedsender.org., set bsp-firsttrusted [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS TXT query for 62.113.66.209.sa-trusted.bondedsender.org. in background [14997] dbg: dns: checking RBL zen.spamhaus.org., set zen [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: _check_rbl_addresses RBL bl.open-whois.org., set openwhois [14997] dbg: dns: launching DNS A query for b.cts.vresp.com.bl.open-whois.org. in background [14997] dbg: dns: _check_rbl_addresses RBL fulldom.rfc-ignorant.org., set rfci_envfrom [14997] dbg: dns: launching DNS A query for b.cts.vresp.com.fulldom.rfc-ignorant.org. in background [14997] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted [14997] dbg: dns: IPs found: full-external: 209.66.113.62, 192.168.0.120 untrusted: 209.66.113.62 originating: [14997] dbg: dns: only inspecting the following IPs: 209.66.113.62 [14997] dbg: dns: launching DNS A query for 62.113.66.209.iadb.isipp.com. in background [14997] dbg: check: running tests for priority: -1000 [14997] dbg: rules: running one_line_body tests; score so far=0 [14997] dbg: rules: running head tests; score so far=0 [14997] dbg: eval: all '*From' addrs: Inside_Mexico@mail.vresp.com bounces-92126cddc2-6c63666344@b.cts.vresp.com [14997] dbg: eval: all '*To' addrs: robert.howell@bakerbotts.com [14997] dbg: rules: running head tests; score so far=0 snip [14997] dbg: rules: " [14997] dbg: spf: checking to see if the message has a Received-SPF header that we can use [14997] dbg: spf: checking HELO (helo=mkt7.verticalresponse.com, ip=209.66.113.62) [14997] dbg: dns: hit 209.66.113.42 [14997] dbg: dns: hit 0 a.mx.b.cts.vresp.com. [14997] dbg: dns: hit 127.0.3.0 [14997] dbg: spf: query for /209.66.113.62/mkt7.verticalresponse.com: result: none, comment: , text: No applicable sender policy available [14997] dbg: dkim: performing public key lookup and signature verification [14997] dbg: dkim: originator address: Inside_Mexico@mail.vresp.com [14997] dbg: dkim: signature verification result: none [14997] dbg: dkim: whitelist_from_dkim: could not find identity [14997] dbg: spf: already checked for Received-SPF headers, proceeding with DNS based checks [14997] dbg: spf: checking EnvelopeFrom (helo=mkt7.verticalresponse.com, ip=209.66.113.62, envfrom=bounces-92126cddc2-6c63666344@b.cts.vresp.com) [14997] dbg: spf: query for bounces-92126cddc2-6c63666344@b.cts.vresp.com/209.66.113.62/mkt7.vertica lresponse.com: result: pass, comment: , text: Mechanism 'ip4:209.66.113.0/24' matched [14997] dbg: rules: ran eval rule SPF_PASS ======> got hit (1) [14997] dbg: dkim: def_whitelist_from_dkim: could not find identity [14997] dbg: dkim: policy: performing lookup [14997] dbg: dkim: policy result neutral: o=~ [14997] dbg: rules: ran eval rule DKIM_POLICY_SIGNSOME ======> got hit (1) [14997] dbg: spf: def_whitelist_from_spf: bounces-92126cddc2-6c63666344@b.cts.vresp.com is not in DEF_WHITELIST_FROM_SPF [14997] dbg: spf: whitelist_from_spf: bounces-92126cddc2-6c63666344@b.cts.vresp.com is not in user's WHITELIST_FROM_SPF [14997] dbg: rules: running body tests; score so far=-0.001 [14997] dbg: rules: ran body rule __SARE_PHONE_NUM ======> got hit: "777 315 2272" [14997] dbg: rules: ran body rule __KAM_NUMBER2 ======> got hit: "21" [14997] dbg: rules: ran body rule __HAS_ANY_EMAIL ======> got hit: "s@insidemex.c" [14997] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "D" [14997] dbg: rules: ran body rule __FRAUD_DBI ======> got hit: "USD" [14997] dbg: rules: running uri tests; score so far=-0.001 [14997] dbg: rules: ran uri rule __DOS_HAS_ANY_URI ======> got hit: "h" [14997] dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ======> got hit: "http://cts.vresp.com" [14997] dbg: pdfinfo: Identified 0 possible mime parts that need checked for PDF content [14997] dbg: pdfinfo: set_tag called for PDFCOUNT 0 [14997] dbg: pdfinfo: set_tag called for PDFIMGCOUNT 0 [14997] dbg: https_http_mismatch: anchors 13 [14997] dbg: eval: stock info total: 0 [14997] dbg: rules: ran eval rule __SARE_BODY_BLANKS_5_100 ======> got hit (1) [14997] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit (1) [14997] dbg: eval: text words: 419, html words: 413 [14997] dbg: eval: madiff: left: 21, orig: 413, max-difference: 5.08% [14997] dbg: rules: ran eval rule HTML_COMMENT_SAVED_URL ======> got hit (1) [14997] dbg: rules: ran eval rule __COMMENT_EXISTS ======> got hit (1) [14997] dbg: rules: ran eval rule BAYES_00 ======> got hit (1) [14997] dbg: rules: ran eval rule __MIME_HTML ======> got hit (1) [14997] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit (1) [14997] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit (1) [14997] dbg: rules: relay mkt7.verticalresponse.com doesn't match any whitelist [14997] dbg: rules: relay b.cts.vresp.com doesn't match any whitelist [14997] dbg: rules: ran eval rule __TVD_MIME_ATT_TP ======> got hit (1) [14997] dbg: rules: ran eval rule __HTML_LINK_IMAGE ======> got hit (1) [14997] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit (1) [14997] dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit (1) [14997] dbg: rules: running rawbody tests; score so far=-0.286 [14997] dbg: rules: ran rawbody rule __SARE_LIGHT_BG_COLOR ======> got hit: "bgcolor="#EEECEA" [14997] dbg: rules: ran rawbody rule __SARE_HAS_BG_COLOR ======> got hit: "bgcolor=" [14997] dbg: rules: ran rawbody rule __SARE_LIGHT_FG_COLOR ======> got hit: " color="#e0e0e0" [14997] dbg: rules: ran rawbody rule __SARE_WHITE_BG_COLOR ======> got hit: "bgcolor="#ffffff" [14997] dbg: rules: ran rawbody rule __TVD_BODY ======> got hit: "Insi" [14997] dbg: rules: ran rawbody rule __SARE_HAS_FG_COLOR ======> got hit: " color:" [14997] dbg: rules: ran rawbody rule __SARE_BLACK_BG_COLOR ======> got hit: "bgcolor="#000000" [14997] dbg: rules: ran rawbody rule __SARE_HTML_ENT_ACUTE ======> got hit: "á" [14997] dbg: rules: ran eval rule __SARE_HTML_HAS_P ======> got hit (1) [14997] dbg: rules: ran eval rule __SARE_HTML_HAS_BR ======> got hit (1) [14997] dbg: rules: ran eval rule __SARE_HTML_HAS_IMG ======> got hit (1) [14997] dbg: rules: ran eval rule __SARE_HTML_HAS_A ======> got hit (1) [14997] dbg: rules: ran eval rule __SARE_HTML_HAS_FONT ======> got hit (1) [14997] dbg: rules: ran eval rule __SARE_HTML_HAS_TITLE ======> got hit (1) [14997] dbg: rules: ran eval rule __SARE_HTML_HAS_DIV ======> got hit (1) [14997] dbg: rules: ran eval rule __MIME_QP ======> got hit (2) [14997] dbg: rules: running full tests; score so far=-0.286 [14997] dbg: info: entering helper-app run mode [14997] dbg: info: leaving helper-app run mode [14997] dbg: razor2: part=0 engine=4 contested=0 confidence=0 [14997] dbg: razor2: part=0 engine=8 contested=0 confidence=0 [14997] dbg: razor2: part=0 engine=8 contested=0 confidence=0 [14997] dbg: razor2: part=0 engine=8 contested=0 confidence=0 [14997] dbg: razor2: part=0 engine=8 contested=0 confidence=0 [14997] dbg: razor2: part=1 engine=4 contested=0 confidence=0 [14997] dbg: razor2: part=1 engine=8 contested=0 confidence=0 [14997] dbg: razor2: part=1 engine=8 contested=0 confidence=0 [14997] dbg: razor2: results: spam? 0 [14997] dbg: razor2: results: engine 8, highest cf score: 0 [14997] dbg: razor2: results: engine 4, highest cf score: 0 [14997] dbg: pyzor: use_pyzor option not enabled, disabling Pyzor [14997] dbg: dcc: dccifd is not available: no r/w dccifd socket found [14997] dbg: dcc: dccproc is available: /usr/local/bin/dccproc [14997] dbg: info: entering helper-app run mode [14997] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -x 0 -a 209.66.113.62 < /var/spool/MailScanner/incoming/SpamAssassin-Temp/.spamassassin14997PnoA hptmp [15001] dbg: util: setuid: ruid=0 euid=0 [14997] dbg: dcc: got response: X-DCC-CTc-dcc1-Metrics: houmx04.bakerbotts.com 1030; Body=1 Fuz1=188 Fuz2=186 [14997] dbg: info: leaving helper-app run mode [14997] dbg: rules: running meta tests; score so far=-0.286 [14997] dbg: check: running tests for priority: 500 [14997] dbg: async: select found no socks ready [14997] dbg: uridnsbl: query for vresp.com took 5 seconds to look up (multi.surbl.org.:vresp.com) [14997] dbg: uridnsbl: query for mexvox.net took 5 seconds to look up (bl.open-whois.org.:mexvox.net) [14997] dbg: uridnsbl: query for mexvox.net took 5 seconds to look up (multi.surbl.org.:mexvox.net) [14997] dbg: uridnsbl: query for mexvox.net took 5 seconds to look up (multi.uribl.com.:mexvox.net) [14997] dbg: uridnsbl: query for sanmigueljazz.com took 5 seconds to look up (multi.surbl.org.:sanmigueljazz.com) [14997] dbg: uridnsbl: query for verticalresponse.com took 5 seconds to look up (bl.open-whois.org.:verticalresponse.com) [14997] dbg: uridnsbl: query for vresp.com took 5 seconds to look up (bl.open-whois.org.:vresp.com) [14997] dbg: uridnsbl: query for todalaprensa.com.mx took 5 seconds to look up (multi.uribl.com.:todalaprensa.com.mx) [14997] dbg: uridnsbl: query for todalaprensa.com.mx took 5 seconds to look up (dob.sibl.support-intelligence.net:todalaprensa.com.mx) [14997] dbg: uridnsbl: query for sanmigueljazz.com took 5 seconds to look up (multi.uribl.com.:sanmigueljazz.com) [14997] dbg: uridnsbl: query for todalaprensa.com.mx took 5 seconds to look up (multi.surbl.org.:todalaprensa.com.mx) [14997] dbg: uridnsbl: query for todalaprensa.com.mx took 5 seconds to look up (bl.open-whois.org.:todalaprensa.com.mx) [14997] dbg: uridnsbl: query for sanmigueljazz.com took 5 seconds to look up (dob.sibl.support-intelligence.net:sanmigueljazz.com) [14997] dbg: uridnsbl: query for verticalresponse.com took 5 seconds to look up (multi.uribl.com.:verticalresponse.com) [14997] dbg: uridnsbl: query for verticalresponse.com took 5 seconds to look up (multi.surbl.org.:verticalresponse.com) [14997] dbg: uridnsbl: query for mexvox.net took 5 seconds to look up (dob.sibl.support-intelligence.net:mexvox.net) [14997] dbg: uridnsbl: query for vresp.com took 5 seconds to look up (multi.uribl.com.:vresp.com) [14997] dbg: uridnsbl: query for sanmigueljazz.com took 5 seconds to look up (bl.open-whois.org.:sanmigueljazz.com) [14997] dbg: uridnsbl: query for vresp.com took 5 seconds to look up (dob.sibl.support-intelligence.net:vresp.com) [14997] dbg: uridnsbl: query for verticalresponse.com took 5 seconds to look up (dob.sibl.support-intelligence.net:verticalresponse.com) [14997] dbg: async: queries completed: 41 started: 9 [14997] dbg: async: queries active: DNSBL-A=1 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 1 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=8 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 1 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=7 URI-DNSBL=1 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 1 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=6 URI-DNSBL=2 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 1 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=5 URI-DNSBL=3 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 1 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=4 URI-DNSBL=4 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 1 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=3 URI-DNSBL=5 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 1 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=2 URI-DNSBL=6 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found 1 socks ready [14997] dbg: async: queries completed: 1 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:25 2007 [14997] dbg: async: select found no socks ready [14997] dbg: async: queries completed: 0 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:26 2007 [14997] dbg: async: select found no socks ready [14997] dbg: async: queries completed: 0 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:27 2007 [14997] dbg: async: select found no socks ready [14997] dbg: async: queries completed: 0 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:28 2007 [14997] dbg: async: select found no socks ready [14997] dbg: async: queries completed: 0 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:29 2007 [14997] dbg: async: select found no socks ready [14997] dbg: async: queries completed: 0 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:30 2007 [14997] dbg: async: select found no socks ready [14997] dbg: async: queries completed: 0 started: 0 [14997] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=7 at Wed Nov 21 10:19:31 2007 [14997] dbg: dns: success for 34 of 42 queries [14997] dbg: dns: timeout for URIBL_SBL, URI-DNSBL, DNSBL:sbl.spamhaus.org.:82.0.116.201 after 6 seconds [14997] dbg: dns: timeout for URIBL_SBL, URI-DNSBL, DNSBL:sbl.spamhaus.org.:1.101.74.204 after 6 seconds [14997] dbg: dns: timeout for zen-lastexternal, zen-lastexternal, zen, __RCVD_IN_ZEN, DNSBL-A, dns:A:62.113.66.209.zen.spamhaus.org. after 6 seconds [14997] dbg: dns: timeout for URIBL_SBL, URI-DNSBL, DNSBL:sbl.spamhaus.org.:97.105.76.200 after 6 seconds [14997] dbg: dns: timeout for URIBL_SBL, URI-DNSBL, DNSBL:sbl.spamhaus.org.:9.194.168.207 after 6 seconds [14997] dbg: dns: timeout for URIBL_SBL, URI-DNSBL, DNSBL:sbl.spamhaus.org.:83.0.116.201 after 6 seconds [14997] dbg: dns: timeout for URIBL_SBL, URI-DNSBL, DNSBL:sbl.spamhaus.org.:8.194.168.207 after 6 seconds [14997] dbg: dns: timeout for URIBL_SBL, URI-DNSBL, DNSBL:sbl.spamhaus.org.:1.234.69.204 after 6 seconds [14997] dbg: async: aborting remaining lookups [14997] dbg: rules: running one_line_body tests; score so far=-0.286 [14997] dbg: rules: running head tests; score so far=-0.286 [14997] dbg: rules: running body tests; score so far=-0.286 [14997] dbg: rules: running uri tests; score so far=-0.286 [14997] dbg: rules: running rawbody tests; score so far=-0.286 [14997] dbg: rules: running full tests; score so far=-0.286 [14997] dbg: rules: running meta tests; score so far=-0.286 [14997] dbg: check: running tests for priority: 1000 [14997] dbg: rules: running one_line_body tests; score so far=-0.286 [14997] dbg: rules: running head tests; score so far=-0.286 [14997] dbg: rules: running body tests; score so far=-0.286 [14997] dbg: rules: running uri tests; score so far=-0.286 [14997] dbg: rules: running rawbody tests; score so far=-0.286 [14997] dbg: rules: running full tests; score so far=-0.286 [14997] dbg: rules: running meta tests; score so far=-0.286 [14997] dbg: plugin: Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xf6a68bec) implements 'autolearn_discriminator', priority 0 [14997] dbg: learn: auto-learn: currently using scoreset 3, recomputing score based on scoreset 1 [14997] dbg: learn: auto-learn: message score: -0.286, computed score for autolearn: 1.821 [14997] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=1.821, head-points=1.821, learned-points=-0.4 [14997] dbg: learn: auto-learn? no: inside auto-learn thresholds, not considered ham or spam [14997] dbg: check: is spam? score=-0.286 required=5 snip [14997] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=1.821, head-points=1.821, learned-points=-0.4 [14997] dbg: learn: auto-learn? no: inside auto-learn thresholds, not considered ham or spam Thanks, Donald Donald Dawson Security Administrator Baker Botts L.L.P. 713-229-2183 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071122/17c3bf78/attachment.html From ms-list at alexb.ch Thu Nov 22 15:04:20 2007 From: ms-list at alexb.ch (Alex Broens) Date: Thu Nov 22 15:04:27 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: Message-ID: <47459A74.1050200@alexb.ch> What happens if you do: host -tA 2.0.0.127.zen.spamhaus.org Reply should be From steve.freegard at fsl.com Thu Nov 22 15:17:24 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Thu Nov 22 15:16:44 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <47459A74.1050200@alexb.ch> References: <47459A74.1050200@alexb.ch> Message-ID: <47459D84.2070204@fsl.com> Alex Broens wrote: > What happens if you do: > > host -tA 2.0.0.127.zen.spamhaus.org > > > Reply should be > > hehehe - that gave me a good laugh ;-) I think Alex meant - reply should be something like: [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 If you get a timeout instead, then you've been firewalled by Spamhaus (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll need to purchase a datafeed from them or stop querying the lists. I believe the SpamAssassin folks are going to be disabling the Spamhaus tests by default in the next major release due to this policy (see http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). Kind regards, Steve. From donald.dawson at bakerbotts.com Thu Nov 22 15:47:57 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Thu Nov 22 15:48:03 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <47459A74.1050200@alexb.ch> Message-ID: $ host -tA 2.0.0.127.zen.spamhaus.org ;; connection timed out; no servers could be reached -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Alex Broens Sent: Thursday, November 22, 2007 9:04 AM To: MailScanner discussion Subject: Re: URIBL_SBL timeouts running MS in debug mode. What happens if you do: host -tA 2.0.0.127.zen.spamhaus.org Reply should be -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From ms-list at alexb.ch Thu Nov 22 15:53:41 2007 From: ms-list at alexb.ch (Alex Broens) Date: Thu Nov 22 15:53:58 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <47459D84.2070204@fsl.com> References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> Message-ID: <4745A605.2090500@alexb.ch> On 11/22/2007 4:17 PM, Steve Freegard wrote: > Alex Broens wrote: >> What happens if you do: >> >> host -tA 2.0.0.127.zen.spamhaus.org >> >> >> Reply should be >> >> > > hehehe - that gave me a good laugh ;-) > > I think Alex meant - reply should be something like: > > [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > > If you get a timeout instead, then you've been firewalled by Spamhaus > (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll > need to purchase a datafeed from them or stop querying the lists. > > I believe the SpamAssassin folks are going to be disabling the Spamhaus > tests by default in the next major release due to this policy (see > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). > grmbl..... as usual Alex pressed the wrong button ..Part II Reply should be 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 :-) Alex From ms-list at alexb.ch Thu Nov 22 15:56:26 2007 From: ms-list at alexb.ch (Alex Broens) Date: Thu Nov 22 15:56:42 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: Message-ID: <4745A6AA.4090802@alexb.ch> On 11/22/2007 4:47 PM, donald.dawson@bakerbotts.com wrote: > $ host -tA 2.0.0.127.zen.spamhaus.org > ;; connection timed out; no servers could be reached > You are very blocked... welcome to the data feed club: http://www.spamhaus.org/faq/answers.lasso?section=Data%20Feed h2h Alex From donald.dawson at bakerbotts.com Thu Nov 22 17:14:44 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Thu Nov 22 17:14:50 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <47459D84.2070204@fsl.com> Message-ID: Thank you for the answer - I thought I had turned off spamhaus checking - where is that option configured? -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Freegard Sent: Thursday, November 22, 2007 9:17 AM To: MailScanner discussion Subject: Re: URIBL_SBL timeouts running MS in debug mode. Alex Broens wrote: > What happens if you do: > > host -tA 2.0.0.127.zen.spamhaus.org > > > Reply should be > > hehehe - that gave me a good laugh ;-) I think Alex meant - reply should be something like: [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 If you get a timeout instead, then you've been firewalled by Spamhaus (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll need to purchase a datafeed from them or stop querying the lists. I believe the SpamAssassin folks are going to be disabling the Spamhaus tests by default in the next major release due to this policy (see http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). Kind regards, Steve. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From prandal at herefordshire.gov.uk Thu Nov 22 17:25:14 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Thu Nov 22 17:25:20 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: <47459D84.2070204@fsl.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA02180A75@HC-MBX02.herefordshire.gov.uk> In /etc/MailScanner/spam.assassin.prefs.conf add score __RCVD_IN_ZEN 0.0 score RCVD_IN_SBL 0.0 score RCVD_IN_XBL 0.0 score RCVD_IN_PBL 0.0 score URIBL_SBL 0.0 Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of donald.dawson@bakerbotts.com > Sent: 22 November 2007 17:15 > To: mailscanner@lists.mailscanner.info > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > Thank you for the answer - I thought I had turned off > spamhaus checking > - where is that option configured? > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve > Freegard > Sent: Thursday, November 22, 2007 9:17 AM > To: MailScanner discussion > Subject: Re: URIBL_SBL timeouts running MS in debug mode. > > > Alex Broens wrote: > > What happens if you do: > > > > host -tA 2.0.0.127.zen.spamhaus.org > > > > > > Reply should be > > > > > > hehehe - that gave me a good laugh ;-) > > I think Alex meant - reply should be something like: > > [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > > If you get a timeout instead, then you've been firewalled by Spamhaus > (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll > need to purchase a datafeed from them or stop querying the lists. > > I believe the SpamAssassin folks are going to be disabling > the Spamhaus > tests by default in the next major release due to this policy (see > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). > > Kind regards, > Steve. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From donald.dawson at bakerbotts.com Thu Nov 22 17:29:20 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Thu Nov 22 17:29:26 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA02180A75@HC-MBX02.herefordshire.gov.uk> Message-ID: Phil, Thank you for the tip - I'll implement this now. Should I comment out or leave uncommented the following line in spam.assassin.prefs.conf? skip_rbl_checks 1 The notes imply that SA checking RBLs may be redundant to MS's RBL checks. Thanks, Donald -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Randal, Phil Sent: Thursday, November 22, 2007 11:25 AM To: MailScanner discussion Subject: RE: URIBL_SBL timeouts running MS in debug mode. In /etc/MailScanner/spam.assassin.prefs.conf add score __RCVD_IN_ZEN 0.0 score RCVD_IN_SBL 0.0 score RCVD_IN_XBL 0.0 score RCVD_IN_PBL 0.0 score URIBL_SBL 0.0 Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of donald.dawson@bakerbotts.com > Sent: 22 November 2007 17:15 > To: mailscanner@lists.mailscanner.info > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > Thank you for the answer - I thought I had turned off > spamhaus checking > - where is that option configured? > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve > Freegard > Sent: Thursday, November 22, 2007 9:17 AM > To: MailScanner discussion > Subject: Re: URIBL_SBL timeouts running MS in debug mode. > > > Alex Broens wrote: > > What happens if you do: > > > > host -tA 2.0.0.127.zen.spamhaus.org > > > > > > Reply should be > > > > > > hehehe - that gave me a good laugh ;-) > > I think Alex meant - reply should be something like: > > [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > > If you get a timeout instead, then you've been firewalled by Spamhaus > (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll > need to purchase a datafeed from them or stop querying the lists. > > I believe the SpamAssassin folks are going to be disabling > the Spamhaus > tests by default in the next major release due to this policy (see > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). > > Kind regards, > Steve. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From prandal at herefordshire.gov.uk Thu Nov 22 17:36:08 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Thu Nov 22 17:36:15 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: <7EF0EE5CB3B263488C8C18823239BEBA02180A75@HC-MBX02.herefordshire.gov.uk> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA02180A82@HC-MBX02.herefordshire.gov.uk> Oh, sorry for any confusion. I was of course referring to SA RBL checks. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of donald.dawson@bakerbotts.com > Sent: 22 November 2007 17:29 > To: mailscanner@lists.mailscanner.info > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > Phil, > > Thank you for the tip - I'll implement this now. > > Should I comment out or leave uncommented the following line in > spam.assassin.prefs.conf? > > skip_rbl_checks 1 > > The notes imply that SA checking RBLs may be redundant to MS's RBL > checks. > > Thanks, > Donald > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Randal, > Phil > Sent: Thursday, November 22, 2007 11:25 AM > To: MailScanner discussion > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > > In /etc/MailScanner/spam.assassin.prefs.conf add > > score __RCVD_IN_ZEN 0.0 > score RCVD_IN_SBL 0.0 > score RCVD_IN_XBL 0.0 > score RCVD_IN_PBL 0.0 > score URIBL_SBL 0.0 > > Cheers, > > Phil > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > > Of donald.dawson@bakerbotts.com > > Sent: 22 November 2007 17:15 > > To: mailscanner@lists.mailscanner.info > > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > > > Thank you for the answer - I thought I had turned off > > spamhaus checking > > - where is that option configured? > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On > Behalf Of Steve > > Freegard > > Sent: Thursday, November 22, 2007 9:17 AM > > To: MailScanner discussion > > Subject: Re: URIBL_SBL timeouts running MS in debug mode. > > > > > > Alex Broens wrote: > > > What happens if you do: > > > > > > host -tA 2.0.0.127.zen.spamhaus.org > > > > > > > > > Reply should be > > > > > > > > > > hehehe - that gave me a good laugh ;-) > > > > I think Alex meant - reply should be something like: > > > > [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > > > > If you get a timeout instead, then you've been firewalled > by Spamhaus > > (see http://www.spamhaus.org/organization/dnsblusage.html) > and you'll > > need to purchase a datafeed from them or stop querying the lists. > > > > I believe the SpamAssassin folks are going to be disabling > > the Spamhaus > > tests by default in the next major release due to this policy (see > > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). > > > > Kind regards, > > Steve. > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From martinh at solidstatelogic.com Thu Nov 22 17:39:35 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 22 17:39:35 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: Message-ID: Donald I prefer to run my checks in SA as they merely add to the score.... HOWEVER.... If you leave SA to do it, SA will check ALL RBLS it know about, it's up to you add add a zero score the ones you do NOT want to run. I just run a couple of trusted ones myself for speeds sake. You can find what the names are buy looking at the 20_dnsbl_tests.cf file in /var/lib/spamassassin//updates_spamassassin_org. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of donald.dawson@bakerbotts.com > Sent: 22 November 2007 17:29 > To: mailscanner@lists.mailscanner.info > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > Phil, > > Thank you for the tip - I'll implement this now. > > Should I comment out or leave uncommented the following line in > spam.assassin.prefs.conf? > > skip_rbl_checks 1 > > The notes imply that SA checking RBLs may be redundant to MS's RBL > checks. > > Thanks, > Donald > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Randal, > Phil > Sent: Thursday, November 22, 2007 11:25 AM > To: MailScanner discussion > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > > In /etc/MailScanner/spam.assassin.prefs.conf add > > score __RCVD_IN_ZEN 0.0 > score RCVD_IN_SBL 0.0 > score RCVD_IN_XBL 0.0 > score RCVD_IN_PBL 0.0 > score URIBL_SBL 0.0 > > Cheers, > > Phil > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > > Of donald.dawson@bakerbotts.com > > Sent: 22 November 2007 17:15 > > To: mailscanner@lists.mailscanner.info > > Subject: RE: URIBL_SBL timeouts running MS in debug mode. > > > > Thank you for the answer - I thought I had turned off > > spamhaus checking > > - where is that option configured? > > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve > > Freegard > > Sent: Thursday, November 22, 2007 9:17 AM > > To: MailScanner discussion > > Subject: Re: URIBL_SBL timeouts running MS in debug mode. > > > > > > Alex Broens wrote: > > > What happens if you do: > > > > > > host -tA 2.0.0.127.zen.spamhaus.org > > > > > > > > > Reply should be > > > > > > > > > > hehehe - that gave me a good laugh ;-) > > > > I think Alex meant - reply should be something like: > > > > [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > > > > If you get a timeout instead, then you've been firewalled by Spamhaus > > (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll > > need to purchase a datafeed from them or stop querying the lists. > > > > I believe the SpamAssassin folks are going to be disabling > > the Spamhaus > > tests by default in the next major release due to this policy (see > > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). > > > > Kind regards, > > Steve. > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From uxbod at splatnix.net Thu Nov 22 18:54:46 2007 From: uxbod at splatnix.net (UxBoD) Date: Thu Nov 22 19:22:44 2007 Subject: [OT] MS Get Together 2008 Message-ID: <8601168.21791195757686603.JavaMail.root@office.splatnix.net> Hey Jules, Have you ever held a MS get together @ Southampton ? A chance to meet and greet and exchange tips and tricks ? Perhaps this could be something for next year ? Just an idea. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ugob at lubik.ca Thu Nov 22 20:10:40 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Thu Nov 22 20:11:04 2007 Subject: RHEL3 perl update conflicts with current packages Message-ID: Hi, A little weird. 2 similar servers, one has the problem, the other doesn't. The problem: when running yum update (centos3), I get conflict errors like these: file /usr/share/man/man3/Getopt::Long.3pm.gz from install of perl-5.8.0-97.EL3 conflicts with file from package perl-Getopt-Long-2.36-1 file /usr/share/man/man3/Math::BigRat.3pm.gz from install of perl-5.8.0-97.EL3 conflicts with file from package perl-Math-BigRat-0.19-1 Only those 2 modules are shown in errors: perl-Math-BigRat-0.19-1 and perl-Getopt-Long-2.36-1. And while I was writing this message, I tried updating with up2date and it worked! I'll let the message reach the list anyway... Regards, Ugo From hvdkooij at vanderkooij.org Fri Nov 23 01:12:26 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Fri Nov 23 01:12:52 2007 Subject: [OT] MS Get Together 2008 In-Reply-To: <8601168.21791195757686603.JavaMail.root@office.splatnix.net> References: <8601168.21791195757686603.JavaMail.root@office.splatnix.net> Message-ID: <474628FA.9080803@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UxBoD wrote: > Hey Jules, > > Have you ever held a MS get together @ Southampton ? A chance to meet and greet and exchange tips and tricks ? > > Perhaps this could be something for next year ? It is rather hard to organize a full meeting. A lot of other projects meet one another on FOSDEM and other such events. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHRij4BvzDRVjxmYERAhYFAJ9KFb0chAXu6Sl2rBMIpuzRpwVy+ACglQMu HMQtZxFEgn/9Iqd3grN0CNk= =C159 -----END PGP SIGNATURE----- From ssilva at sgvwater.com Fri Nov 23 04:03:16 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 23 04:03:33 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <47459D84.2070204@fsl.com> References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> Message-ID: on 11/22/2007 7:17 AM Steve Freegard spake the following: > Alex Broens wrote: >> What happens if you do: >> >> host -tA 2.0.0.127.zen.spamhaus.org >> >> >> Reply should be >> >> > > hehehe - that gave me a good laugh ;-) > > I think Alex meant - reply should be something like: > > [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > > If you get a timeout instead, then you've been firewalled by Spamhaus > (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll > need to purchase a datafeed from them or stop querying the lists. > > I believe the SpamAssassin folks are going to be disabling the Spamhaus > tests by default in the next major release due to this policy (see > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). > > Kind regards, > Steve. I just found my servers are both firewalled, although we have less than a tenth of the traffic that they say is allowed. I guess that they found that money is more important than the good fight! I guess I'm back to the njabl and the dsbl. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From steve.freegard at fsl.com Fri Nov 23 08:38:59 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 23 08:38:15 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> Message-ID: <474691A3.2040607@fsl.com> Hi Scott, Scott Silva wrote: > I just found my servers are both firewalled, although we have less than > a tenth of the traffic that they say is allowed. I guess that they found > that money is more important than the good fight! I guess I'm back to > the njabl and the dsbl. Add Spamcop to that list (bl.spamcop.net) - it's much more reliable than it used to be, so it can be safely used at the MTA level now. It is almost as effective as the SBL+XBL portions of Spamhaus from my own testing. Remember you can still query the CBL (cbl.abuseat.org) which forms the largest and most frequently changed part of the Zen dataset providing you fall under their usage terms as well. Cheers, Steve. From martinh at solidstatelogic.com Fri Nov 23 08:40:30 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Fri Nov 23 08:40:42 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: Message-ID: I find them both over FP happy. Here's what I use... SORBS SPAMCOP Seems to work well with no FP's to note. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Scott Silva > Sent: 23 November 2007 04:03 > To: mailscanner@lists.mailscanner.info > Subject: Re: URIBL_SBL timeouts running MS in debug mode. > > on 11/22/2007 7:17 AM Steve Freegard spake the following: > > Alex Broens wrote: > >> What happens if you do: > >> > >> host -tA 2.0.0.127.zen.spamhaus.org > >> > >> > >> Reply should be > >> > >> > > > > hehehe - that gave me a good laugh ;-) > > > > I think Alex meant - reply should be something like: > > > > [root@speedy ~]# host 2.0.0.127.zen.spamhaus.org > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > > > > If you get a timeout instead, then you've been firewalled by Spamhaus > > (see http://www.spamhaus.org/organization/dnsblusage.html) and you'll > > need to purchase a datafeed from them or stop querying the lists. > > > > I believe the SpamAssassin folks are going to be disabling the Spamhaus > > tests by default in the next major release due to this policy (see > > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5641). > > > > Kind regards, > > Steve. > I just found my servers are both firewalled, although we have less than a > tenth of the traffic that they say is allowed. I guess that they found > that > money is more important than the good fight! I guess I'm back to the njabl > and > the dsbl. > > -- > MailScanner is like deodorant... > You hope everybody uses it, and > you notice quickly if they don't!!!! > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From steve.freegard at fsl.com Fri Nov 23 09:18:51 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 23 09:18:13 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: Message-ID: <47469AFB.6000202@fsl.com> Martin.Hepworth wrote: > SORBS > > Seems to work well with no FP's to note. > Yikes! - not a fan of SORBS here, I recently watched in horror at some of the antics that went on between one of the main SORBS admins and another anti-spammer (see http://www.dnsbl.com/2007/07/sorbs-on-accuracy-rates-and-false.html) and (IMO) the SORBS admin showed some extremely poor judgment in some of his actions during this spat (I believe you can find most of this detail on NANAE) which for me, called into question the trust in the maintainers that I need to have when using a blacklisting service. Cheers, Steve. From ram at netcore.co.in Fri Nov 23 10:19:39 2007 From: ram at netcore.co.in (ram) Date: Fri Nov 23 10:19:49 2007 Subject: OT: Load Balancing & redundancy using Multiple A records Message-ID: <1195813179.21654.33.camel@localhost.localdomain> We use multiple MX records for our MailServers for all our clients. We have already added one data center and had to inform all customers to add more MX records Can I avoid changing of MX records by adding the new ips as multiple A records and using DNS round robin What are the problems associated with this kind of setup Thanks Ram From telehouse at googlemail.com Fri Nov 23 10:29:28 2007 From: telehouse at googlemail.com (Colocation Colocation) Date: Fri Nov 23 10:29:33 2007 Subject: Slightly OT: Exim time-outs Message-ID: <146f41cd0711230229q5cf6bba8rcdc11ad2dc574986@mail.gmail.com> I am getting a huge number of EXIM time outs on outbound mail : Now normally I would blame someone else but this time it looks to be my mail server. For one persistent offender I telnet'ed into their SMTP server and sent the mail manually and that went through fine but somehow EXIM is getting hung up when trying to send itself. Any ideas? 2007-11-23 07:01:24 1IuQiH-00056g-HD SMTP timeout while connected to mail-in.freeserve.com [193.252.22.141] after initial connection: Connection timed out 2007-11-23 07:06:29 1IvSXY-0007zs-7v SMTP timeout while connected to ALT1.ASPMX.L.GOOGLE.COM [209.85.199.114] after initial connection: Connection timed out 2007-11-23 07:09:01 1IvGaV-000499-TH SMTP timeout while connected to mail-in.freeserve.com [193.252.22.143] after initial connection: Connection timed out 2007-11-23 08:28:46 1Iusia-0001X9-Lh SMTP timeout while connected to f.mx.mail.yahoo.com [68.142.202.247] after initial connection: Connection timed out 2007-11-23 08:29:33 1IvGar-00048z-NK SMTP timeout while connected to xmxatip.excite.com [207.159.120.164] after initial connection: Connection timed out 2007-11-23 08:29:33 1IvGar-00048z-NK == irablakey@excite.com R=dnslookup T=remote_smtp defer (110): Connection timed out: SMTP timeout while connected to xmxatip.excite.com [207.159.120.164] after initial connection 2007-11-23 08:34:42 1IvGkC-000496-HJ SMTP timeout while connected to mail-in.freeserve.com [193.252.22.141] after initial connection: Connection timed out 2007-11-23 08:39:42 1IvGkC-000496-HJ SMTP timeout while connected to mail-in.freeserve.com [193.252.22.153] after initial connection: Connection timed out 2007-11-23 08:44:42 1IvGkC-000496-HJ SMTP timeout while connected to mail-in.freeserve.com [193.252.22.185] after initial connection: Connection timed out 2007-11-23 08:49:43 1IvGkC-000496-HJ SMTP timeout while connected to mail-in.freeserve.com [193.252.22.184] after initial connection: Connection timed out 2007-11-23 08:51:19 1IvGYl-00049B-3Y SMTP timeout while connected to mail-in.freeserve.com [193.252.22.184] after initial connection: Connection timed out 2007-11-23 08:55:31 1IvGYl-000490-4f SMTP timeout while connected to smtp.fsmail.net [193.252.22.143] after initial connection: Connection timed out 2007-11-23 08:56:48 1IuQkU-00056Y-AX SMTP timeout while connected to mail-in.freeserve.com [193.252.22.143] after initial connection: Connection timed out 2007-11-23 08:57:34 1IvGh1-00049H-BP SMTP timeout while connected to smtp.fsmail.net [193.252.22.143] after initial connection: Connection timed out 2007-11-23 09:02:34 1IvGh1-00049H-BP SMTP timeout while connected to smtp.fsmail.net [193.252.22.185] after initial connection: Connection timed out 2007-11-23 09:07:35 1IvGh1-00049H-BP SMTP timeout while connected to smtp.fsmail.net [193.252.22.186] after initial connection: Connection timed out 2007-11-23 09:09:05 1IuQkV-00056O-Bd SMTP timeout while connected to mail-in.freeserve.com [193.252.22.142] after initial connection: Connection timed out 2007-11-23 10:14:02 1IvGh1-00049H-BP SMTP timeout while connected to smtp.fsmail.net [193.252.22.142] after initial connection: Connection timed out -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071123/ea726856/attachment.html From uxbod at splatnix.net Fri Nov 23 10:04:34 2007 From: uxbod at splatnix.net (UxBoD) Date: Fri Nov 23 10:32:00 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <1195813179.21654.33.camel@localhost.localdomain> Message-ID: <31136998.22361195812274900.JavaMail.root@office.splatnix.net> Why do your customers need to add additional MX records ? Surely they will be using your outbound SMTP servers. If this is what you mean, then the downsite of round robin DNS is that the actual servers are not tested that port 25 is active. For this you would require a more technical solution. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "ram" To: "MailScanner discussion" Sent: Friday, November 23, 2007 10:19:39 AM (GMT) Europe/London Subject: OT: Load Balancing & redundancy using Multiple A records We use multiple MX records for our MailServers for all our clients. We have already added one data center and had to inform all customers to add more MX records Can I avoid changing of MX records by adding the new ips as multiple A records and using DNS round robin What are the problems associated with this kind of setup Thanks Ram -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From steve.freegard at fsl.com Fri Nov 23 11:13:11 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 23 11:12:27 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <1195813179.21654.33.camel@localhost.localdomain> References: <1195813179.21654.33.camel@localhost.localdomain> Message-ID: <4746B5C7.8000207@fsl.com> ram wrote: > We use multiple MX records for our MailServers for all our clients. > We have already added one data center and had to inform all customers to > add more MX records > > Can I avoid changing of MX records by adding the new ips as multiple A > records and using DNS round robin First of all - read this: http://homepages.tesco.net/~J.deBoynePollard/FGA/dns-round-robin-is-useless.html However, I personally still believe this to be a worthwhile approach and tend to recommend this to service providers. IMO it is best to add the records like so: mx1.domain.com. 60 IN A 1.2.3.4 60 IN A 2.3.4.5 60 IN A 3.4.5.6 60 IN A 4.5.6.7 The '60' is the TTL value, as the above article states, this is probably the minimum value you will get away with anyway and it will increase the load on your DNS servers. As you should always have at least 2 MX records and the fact that some DNS resolvers and implementation are very broken, I specify the same list again in reverse order, just to be on the safe side. mx2.domain.com. 60 IN A 4.5.6.7 60 IN A 3.4.5.6 60 IN A 2.3.4.5 60 IN A 1.2.3.4 Then specify the actual MX records domain.com. IN MX 10 mx1.domain.com. IN MX 10 mx2.domain.com. > What are the problems associated with this kind of setup It works, but don't expect it to load balance well. For that you really do need a proper load-balancer that can examine metrics of each of the back-end systems and direct connections to them accordingly. Kind regards, Steve. -- Steve Freegard Fort Systems Ltd. Tel: +1 202 595 7760 x801 From steve.freegard at fsl.com Fri Nov 23 11:19:55 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 23 11:19:11 2007 Subject: Slightly OT: Exim time-outs In-Reply-To: <146f41cd0711230229q5cf6bba8rcdc11ad2dc574986@mail.gmail.com> References: <146f41cd0711230229q5cf6bba8rcdc11ad2dc574986@mail.gmail.com> Message-ID: <4746B75B.1020209@fsl.com> Colocation Colocation wrote: > I am getting a huge number of EXIM time outs on outbound mail : > > Now normally I would blame someone else but this time it looks to be my > mail server. For one persistent offender I telnet'ed into their SMTP > server and sent the mail manually and that went through fine but somehow > EXIM is getting hung up when trying to send itself. Any ideas? > > 2007-11-23 07:01:24 1IuQiH-00056g-HD SMTP timeout while connected to > mail-in.freeserve.com [193.252.22.141 > ] after initial connection: Connection timed out > 2007-11-23 07:06:29 1IvSXY-0007zs-7v SMTP timeout while connected to > ALT1.ASPMX.L.GOOGLE.COM [209.85.199.114 > ] after initial connection: Connection timed out Check that you aren't affected by this: http://www.znep.com/~marcs/mtu/ the symptoms of this will only be evident when a packet > PMTU is sent, so your manual testing via telnet may not have sent enough data for this to become apparent. If that doesn't help, check your Exim timeouts and make sure they are RFC compliant. Kind regards, Steve. -- Steve Freegard Fort Systems Ltd. Tel: +1 202 595 7760 x860 From shuttlebox at gmail.com Fri Nov 23 12:38:37 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 23 12:38:39 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <4746B5C7.8000207@fsl.com> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> Message-ID: <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> On Nov 23, 2007 12:13 PM, Steve Freegard wrote: > It works, but don't expect it to load balance well. For that you really > do need a proper load-balancer that can examine metrics of each of the > back-end systems and direct connections to them accordingly. I use this method both on the public (many-to-few) and the private side (few-to-few) of the network and it works real well. Over a months worth of traffic I see a difference of only 1-2%. -- /peter From richard.thomas at psysolutions.com Fri Nov 23 15:35:19 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Fri Nov 23 15:35:27 2007 Subject: Slightly OT: Exim time-outs In-Reply-To: <146f41cd0711230229q5cf6bba8rcdc11ad2dc574986@mail.gmail.com> References: <146f41cd0711230229q5cf6bba8rcdc11ad2dc574986@mail.gmail.com> Message-ID: <4746F337.1070502@psysolutions.com> Are you scanning outbound email? If so, you may be being hit by the problem I described earlier where mailscanner leaves disarmed messages without a trailing CRLF. With Exim, this makes it fail to put the period on a line by itself when sending the message. Rich Colocation Colocation wrote: > I am getting a huge number of EXIM time outs on outbound mail : > > Now normally I would blame someone else but this time it looks to be > my mail server. For one persistent offender I telnet'ed into their > SMTP server and sent the mail manually and that went through fine but > somehow EXIM is getting hung up when trying to send itself. Any ideas? From MailScanner at ecs.soton.ac.uk Fri Nov 23 15:59:07 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri Nov 23 15:59:28 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> Message-ID: <4746F8CB.4040905@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 23, 2007 12:13 PM, Steve Freegard wrote: > >> It works, but don't expect it to load balance well. For that you really >> do need a proper load-balancer that can examine metrics of each of the >> back-end systems and direct connections to them accordingly. >> > > I use this method both on the public (many-to-few) and the private > side (few-to-few) of the network and it works real well. Over a months > worth of traffic I see a difference of only 1-2%. > Join the club. I use round-robin DNS between a bunch of A records in my single MX record, and it load balances it long-term rather nicely. The web page you referred to talks all about the rules and regs but doesn't really take account of what is actually implemented. Yes, the rules say that DNS imposes no order in the results of a lookup. But in practice the implementers tend to just read in an array and use it in order. So it does help in my experience, whatever the rulebook says. Just my 2p worth. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHRvjSEfZZRxQVtlQRAjT7AJ432f1CicO4Y6ADb5qxL9fxpiUe4gCePdNI N/y1uRgSC9MSyERG+j30uj0= =cGTe -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Fri Nov 23 16:04:43 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Fri Nov 23 16:05:03 2007 Subject: Slightly OT: Exim time-outs In-Reply-To: <4746F337.1070502@psysolutions.com> References: <146f41cd0711230229q5cf6bba8rcdc11ad2dc574986@mail.gmail.com> <4746F337.1070502@psysolutions.com> Message-ID: <4746FA1B.8090604@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Richard Thomas wrote: > Are you scanning outbound email? If so, you may be being hit by the > problem I described earlier where mailscanner leaves disarmed messages > without a trailing CRLF. Can you forward details of this problem to me off-list please? Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHRvohEfZZRxQVtlQRAsU3AJ4wsLAxbFhArDiyPsbsYtEDSrRDTQCfeSLz t1FZSzGSjZHKTdr95CAwr2A= =l77E -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From joost at waversveld.nl Fri Nov 23 16:08:52 2007 From: joost at waversveld.nl (Joost Waversveld) Date: Fri Nov 23 16:09:02 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <4746F8CB.4040905@ecs.soton.ac.uk> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <4746F8CB.4040905@ecs.soton.ac.uk> Message-ID: <4746FB14.3030204@waversveld.nl> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > shuttlebox wrote: > >> On Nov 23, 2007 12:13 PM, Steve Freegard wrote: >> >> >>> It works, but don't expect it to load balance well. For that you really >>> do need a proper load-balancer that can examine metrics of each of the >>> back-end systems and direct connections to them accordingly. >>> >>> >> I use this method both on the public (many-to-few) and the private >> side (few-to-few) of the network and it works real well. Over a months >> worth of traffic I see a difference of only 1-2%. >> >> > Join the club. I use round-robin DNS between a bunch of A records in my > single MX record, and it load balances it long-term rather nicely. The > web page you referred to talks all about the rules and regs but doesn't > really take account of what is actually implemented. Yes, the rules say > that DNS imposes no order in the results of a lookup. But in practice > the implementers tend to just read in an array and use it in order. So > it does help in my experience, whatever the rulebook says. > > Just my 2p worth. > > Jules > > - -- > Julian Field MEng CITP CEng > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail Add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHRvjSEfZZRxQVtlQRAjT7AJ432f1CicO4Y6ADb5qxL9fxpiUe4gCePdNI > N/y1uRgSC9MSyERG+j30uj0= > =cGTe > -----END PGP SIGNATURE----- > > Ya, maybe, but the DNS does not look at the load of the machines. If you're mailservers are all exactly the same with hardware, etc. then it will be a good solution. Otherwise you will get problems. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071123/a893ccb0/attachment.html From shuttlebox at gmail.com Fri Nov 23 16:23:20 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 23 16:23:22 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <4746FB14.3030204@waversveld.nl> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <4746F8CB.4040905@ecs.soton.ac.uk> <4746FB14.3030204@waversveld.nl> Message-ID: <625385e30711230823x7a6e8973s9c7559d7e7852005@mail.gmail.com> On Nov 23, 2007 5:08 PM, Joost Waversveld wrote: > Ya, maybe, but the DNS does not look at the load of the machines. > If you're mailservers are all exactly the same with hardware, etc. then it > will be a good solution. Otherwise you will get problems. Not really, if one implements throttling in the MTA a denied connection means the next MX will be tried so if one server gets exhausted quickly the more powerful one will get more traffic by using the fault tolerance part of the protocol. Pretty cool to get both load balancing and fault tolerance without either effort or cost. -- /peter From Richard.Frovarp at sendit.nodak.edu Fri Nov 23 16:25:12 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Fri Nov 23 16:25:18 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <1195813179.21654.33.camel@localhost.localdomain> References: <1195813179.21654.33.camel@localhost.localdomain> Message-ID: <4746FEE8.6040109@sendit.nodak.edu> ram wrote: > We use multiple MX records for our MailServers for all our clients. > We have already added one data center and had to inform all customers to > add more MX records > > > Can I avoid changing of MX records by adding the new ips as multiple A > records and using DNS round robin > What are the problems associated with this kind of setup > > > Thanks > Ram > > > > SMTP is designed to handle failure across multiple MX records. If your round robin returns a box that isn't available (due to load or maintenance) or if the box is no longer in your round robin, but hasn't expired out of the remote DNS you'll have issues. The outgoing SMTP will try to connect to a MX that isn't available and will have no option for fail over. You would probably want to still have multiple MX records for this reason. If no MXs are available at delivery time it might result in a permanent failure, depending on the sending SMTP. You could have multiple A's for each MX so that you would still have failure. Richard From Richard.Frovarp at sendit.nodak.edu Fri Nov 23 16:27:16 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Fri Nov 23 16:27:22 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <625385e30711230823x7a6e8973s9c7559d7e7852005@mail.gmail.com> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <4746F8CB.4040905@ecs.soton.ac.uk> <4746FB14.3030204@waversveld.nl> <625385e30711230823x7a6e8973s9c7559d7e7852005@mail.gmail.com> Message-ID: <4746FF64.6080606@sendit.nodak.edu> shuttlebox wrote: > On Nov 23, 2007 5:08 PM, Joost Waversveld wrote: > >> Ya, maybe, but the DNS does not look at the load of the machines. >> If you're mailservers are all exactly the same with hardware, etc. then it >> will be a good solution. Otherwise you will get problems. >> > > Not really, if one implements throttling in the MTA a denied > connection means the next MX will be tried so if one server gets > exhausted quickly the more powerful one will get more traffic by using > the fault tolerance part of the protocol. Pretty cool to get both load > balancing and fault tolerance without either effort or cost. > > Yeah, but will the sending SMTPs fail through the multiple A records for a single MX? From steve.freegard at fsl.com Fri Nov 23 16:38:46 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Fri Nov 23 16:37:59 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <4746FF64.6080606@sendit.nodak.edu> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <4746F8CB.4040905@ecs.soton.ac.uk> <4746FB14.3030204@waversveld.nl> <625385e30711230823x7a6e8973s9c7559d7e7852005@mail.gmail.com> <4746FF64.6080606@sendit.nodak.edu> Message-ID: <47470216.5000506@fsl.com> Richard Frovarp wrote: > shuttlebox wrote: >> On Nov 23, 2007 5:08 PM, Joost Waversveld wrote: >> >>> Ya, maybe, but the DNS does not look at the load of the machines. >>> If you're mailservers are all exactly the same with hardware, etc. >>> then it >>> will be a good solution. Otherwise you will get problems. >>> >> >> Not really, if one implements throttling in the MTA a denied >> connection means the next MX will be tried so if one server gets >> exhausted quickly the more powerful one will get more traffic by using >> the fault tolerance part of the protocol. Pretty cool to get both load >> balancing and fault tolerance without either effort or cost. >> >> > Yeah, but will the sending SMTPs fail through the multiple A records for > a single MX? Varies greatly by MTA - some will and some won't. Best to have at least two MX records as I originally specified for this reason. From shuttlebox at gmail.com Fri Nov 23 16:47:11 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 23 16:47:13 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <4746FF64.6080606@sendit.nodak.edu> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <4746F8CB.4040905@ecs.soton.ac.uk> <4746FB14.3030204@waversveld.nl> <625385e30711230823x7a6e8973s9c7559d7e7852005@mail.gmail.com> <4746FF64.6080606@sendit.nodak.edu> Message-ID: <625385e30711230847i4f372dabp5176b0174d8ffa5f@mail.gmail.com> On Nov 23, 2007 5:27 PM, Richard Frovarp wrote: > Yeah, but will the sending SMTPs fail through the multiple A records for > a single MX? That sounds uncertain at best. :-) I use one MX for each server and that always works. -- /peter From ssilva at sgvwater.com Fri Nov 23 18:06:40 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 23 18:07:06 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <474691A3.2040607@fsl.com> References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> <474691A3.2040607@fsl.com> Message-ID: on 11/23/2007 12:38 AM Steve Freegard spake the following: > Hi Scott, > > Scott Silva wrote: >> I just found my servers are both firewalled, although we have less >> than a tenth of the traffic that they say is allowed. I guess that >> they found that money is more important than the good fight! I guess >> I'm back to the njabl and the dsbl. > > Add Spamcop to that list (bl.spamcop.net) - it's much more reliable than > it used to be, so it can be safely used at the MTA level now. It is > almost as effective as the SBL+XBL portions of Spamhaus from my own > testing. > > Remember you can still query the CBL (cbl.abuseat.org) which forms the > largest and most frequently changed part of the Zen dataset providing > you fall under their usage terms as well. > > Cheers, > Steve. I think my system was querying twice since I blocked at MTA and spamassassin was also looking up. I assumed that the caching nameserver would absorb these double queries, but maybe I assumed wrong. I did add spamcop last night after some log queries looking at spamassassin hits. First day running looks like its already catching more than zen did, but who knows how long it hadn't been working. Spam levels to the users hadn't increased, but the server load had. I should have figured that spamassassin was picking up the load. It has been so busy I had been neglecting my babies! I am the only tech support for our entire company on PC related issues. My boss handles mostly the midrange I-Series issues. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From P.G.M.Peters at utwente.nl Fri Nov 23 18:25:08 2007 From: P.G.M.Peters at utwente.nl (Peter Peters) Date: Fri Nov 23 18:25:21 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> Message-ID: <47471B04.2090105@utwente.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote on 23-11-2007 13:38: > On Nov 23, 2007 12:13 PM, Steve Freegard wrote: >> It works, but don't expect it to load balance well. For that you really >> do need a proper load-balancer that can examine metrics of each of the >> back-end systems and direct connections to them accordingly. > > I use this method both on the public (many-to-few) and the private > side (few-to-few) of the network and it works real well. Over a months > worth of traffic I see a difference of only 1-2%. The only differences I see are Exchange (and other windows mailservers). They tend to do one lookup and keep that info until the application on the Windows server is restarted. - -- Peter Peters, Teamleider Unix/Linux-Beheer ICT-Servicecentrum Universiteit Twente, Postbus 217, 7500 AE Enschede Telefoon 053 489 2301, Fax 053 489 2383, P.G.M.Peters@utwente.nl, http://www.utwente.nl/icts -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHRxsEelLo80lrIdIRAohMAJ9nncr410+pm817xkoqFdn/noAtuwCfad12 +FGs12/8hXY3yfBvU1NCrps= =G0ST -----END PGP SIGNATURE----- From shuttlebox at gmail.com Fri Nov 23 19:07:56 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 23 19:07:57 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <47471B04.2090105@utwente.nl> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <47471B04.2090105@utwente.nl> Message-ID: <625385e30711231107s3c076cb6u15d14f12197a9e0f@mail.gmail.com> On Nov 23, 2007 7:25 PM, Peter Peters wrote: > The only differences I see are Exchange (and other windows mailservers). > They tend to do one lookup and keep that info until the application on > the Windows server is restarted. I know Windows used to disregard the TTL but is that still true? At one site I have Exchange servers (2003?) on the inside mailing to two MX records and it's very even between them. I use 10m as TTL for the MX records. -- /peter From list-mailscanner at linguaphone.com Fri Nov 23 19:42:51 2007 From: list-mailscanner at linguaphone.com (Gareth) Date: Fri Nov 23 19:42:56 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <474691A3.2040607@fsl.com> Message-ID: >From logwatch for yesterday:- Messages rejected using Anti-Spam site 3799 Time(s) zen.spamhaus.org identified 3749 spam messages. bl.spamcop.net identified 48 spam messages. autoblock.dnsbl identified 2 spam messages. Messages are rejected in the order shown above so the 48 spamcop blocked is what spamhaus missed. -------------------------------------------------------- >From August when we started testing :- Messages rejected using Anti-Spam site 7187 Time(s) zen.dnsbl identified 6781 spam messages. bl.spamcop.net identified 392 spam messages. combined.njabl.org identified 14 spam messages. We then switched spamcop so that it was first to see how well it did and how many zen caught that it missed :- Messages rejected using Anti-Spam site 7043 Time(s) bl.spamcop.net identified 2654 spam messages. zen.dnsbl identified 4385 spam messages. combined.njabl.org identified 2 spam messages. Therefore from our testing we found that of all the rbl detected spam, spamcop detected 38% while spamhaus detected 95%. Factoring in the typical 500 spam mesages that get past RBLs these percentages of detected spam fall to 31% for spamcop and 88% for spamhaus. Thats the justification we used for then subscribing to the datafeed services (tests were performed using a trial account). > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info]On Behalf Of Steve > Freegard > Sent: 23 November 2007 08:39 > > Add Spamcop to that list (bl.spamcop.net) - it's much more reliable than > it used to be, so it can be safely used at the MTA level now. It is > almost as effective as the SBL+XBL portions of Spamhaus from my > own testing. > > Remember you can still query the CBL (cbl.abuseat.org) which forms the > largest and most frequently changed part of the Zen dataset providing > you fall under their usage terms as well. From Denis.Beauchemin at USherbrooke.ca Fri Nov 23 20:04:07 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 23 20:07:12 2007 Subject: OT: MS Exchange backups Message-ID: <47473237.1090308@USherbrooke.ca> Hello all, I know this is not related to MS, but you guys know so much about everything that I risk the question: what backup solution works with MS Exchange? The admins responsible for our Exchange server tried Tivoli Storage Manager (TSM) and Backup Exec but couldn't backup our 250GB data within reasonable time: it takes about 48 hours to achieve one full backup! And this got worse when we added McAfee's GroupShield to the mix... I think they use Backup Exec's "brick-level backup" to backup to a local disk and then use this copy when they need to restore emails. They first tried TSM but had to resort to restoring the full email DB whenever they needed to restore one email... How could we do backups within a reasonable time? The hw is pretty decent... Thanks again for sharing your vast experience with others... Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From smlists at shaw.ca Fri Nov 23 20:33:48 2007 From: smlists at shaw.ca (Steve Mason) Date: Fri Nov 23 20:34:27 2007 Subject: MS Exchange backups In-Reply-To: <47473237.1090308@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> Message-ID: <000701c82e10$270f2ec0$1424010a@mcscore> -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Denis Beauchemin Sent: November 23, 2007 1:04 PM To: MailScanner Subject: OT: MS Exchange backups Hello all, I know this is not related to MS, but you guys know so much about everything that I risk the question: what backup solution works with MS Exchange? The admins responsible for our Exchange server tried Tivoli Storage Manager (TSM) and Backup Exec but couldn't backup our 250GB data within reasonable time: it takes about 48 hours to achieve one full backup! And this got worse when we added McAfee's GroupShield to the mix... I think they use Backup Exec's "brick-level backup" to backup to a local disk and then use this copy when they need to restore emails. They first tried TSM but had to resort to restoring the full email DB whenever they needed to restore one email... Brick level backups are generally said to be bad by most Exchange experts (google "Ed Crowley" and "Brick level") Many 3rd party backup programs support agents to do Exchange backups, but many find it best to do a standard ntbackup to a .bkf file, then have whatever backup software the rest of the enterprise uses, pick that file up. The down side, is for a restore, you need to restore the .bkf, then restore Exchanger from that file. On a big Exchnage box, that can add a fair amount of time. From btj at havleik.no Fri Nov 23 20:43:29 2007 From: btj at havleik.no (=?UTF-8?Q?Bj=C3=B8rn?= T Johansen) Date: Fri Nov 23 20:43:53 2007 Subject: Trouble running system update on RHEL after installing Mailscanner? Message-ID: <20071123214329.36e13da1@pennywise> We are having trouble running system update (yum update) on our RHEL 5 server after we installed Mailscanner... It tells us that there is conflict with many of the perl packages and it just stops... Is there a way to fix this? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bj?rn T Johansen btj@havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" ----------------------------------------------------------------------------------------------- From ugob at lubik.ca Fri Nov 23 20:51:01 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Fri Nov 23 20:51:35 2007 Subject: OT: MS Exchange backups In-Reply-To: <47473237.1090308@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> Message-ID: Denis Beauchemin wrote: > Hello all, > > I know this is not related to MS, but you guys know so much about > everything that I risk the question: what backup solution works with MS > Exchange? > > The admins responsible for our Exchange server tried Tivoli Storage > Manager (TSM) and Backup Exec but couldn't backup our 250GB data within > reasonable time: it takes about 48 hours to achieve one full backup! > And this got worse when we added McAfee's GroupShield to the mix... > > I think they use Backup Exec's "brick-level backup" to backup to a local > disk and then use this copy when they need to restore emails. They > first tried TSM but had to resort to restoring the full email DB > whenever they needed to restore one email... > > How could we do backups within a reasonable time? The hw is pretty > decent... > > Thanks again for sharing your vast experience with others... > > Denis > What is the media used? From Denis.Beauchemin at USherbrooke.ca Fri Nov 23 21:04:13 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 23 21:05:32 2007 Subject: OT: MS Exchange backups In-Reply-To: References: <47473237.1090308@USherbrooke.ca> Message-ID: <4747404D.5080201@USherbrooke.ca> Ugo Bellavance a ?crit : > Denis Beauchemin wrote: >> Hello all, >> >> I know this is not related to MS, but you guys know so much about >> everything that I risk the question: what backup solution works with >> MS Exchange? >> >> The admins responsible for our Exchange server tried Tivoli Storage >> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >> within reasonable time: it takes about 48 hours to achieve one full >> backup! And this got worse when we added McAfee's GroupShield to the >> mix... >> >> I think they use Backup Exec's "brick-level backup" to backup to a >> local disk and then use this copy when they need to restore emails. >> They first tried TSM but had to resort to restoring the full email DB >> whenever they needed to restore one email... >> >> How could we do backups within a reasonable time? The hw is pretty >> decent... >> >> Thanks again for sharing your vast experience with others... >> >> Denis >> > > What is the media used? > Ugo, I'm not sure I understand your question... it takes 48 hours to backup to disk! Of course, we can't afford to stop Exchange to either backup or restore data. Everything has to be done online... Thanks! Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From Denis.Beauchemin at USherbrooke.ca Fri Nov 23 21:07:58 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 23 21:08:14 2007 Subject: Trouble running system update on RHEL after installing Mailscanner? In-Reply-To: <20071123214329.36e13da1@pennywise> References: <20071123214329.36e13da1@pennywise> Message-ID: <4747412E.1030301@USherbrooke.ca> Bj?rn T Johansen a ?crit : > We are having trouble running system update (yum update) on our RHEL 5 server after we installed Mailscanner... > It tells us that there is conflict with many of the perl packages and it just stops... > > Is there a way to fix this? > > > Regards, > > BTJ > > Do "find /var/cache/yum -name '*rpm' -ls" to locate the rpms that were downloaded but not installed and then force the update with "rpm -Uvh --force ...". That should do it. Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From shuttlebox at gmail.com Fri Nov 23 21:24:24 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Fri Nov 23 21:24:27 2007 Subject: OT: MS Exchange backups In-Reply-To: <4747404D.5080201@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> Message-ID: <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> On Nov 23, 2007 10:04 PM, Denis Beauchemin wrote: > >> Manager (TSM) and Backup Exec but couldn't backup our 250GB data > > I'm not sure I understand your question... it takes 48 hours to backup > to disk! > > Of course, we can't afford to stop Exchange to either backup or restore > data. Everything has to be done online... Something is very wrong. We use Legato Networker on Solaris and it backs up many TB during the night including at least six Exchange servers each with larger databases than yours. Of course we spread the full backups so most servers only gets a diff or inc backup but still the full backups never takes more than a few hours. -- /peter From ugob at lubik.ca Fri Nov 23 21:50:54 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Fri Nov 23 21:51:13 2007 Subject: OT: MS Exchange backups In-Reply-To: <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> Message-ID: shuttlebox wrote: > On Nov 23, 2007 10:04 PM, Denis Beauchemin > wrote: >>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >> I'm not sure I understand your question... it takes 48 hours to backup >> to disk! >> >> Of course, we can't afford to stop Exchange to either backup or restore >> data. Everything has to be done online... > > Something is very wrong. We use Legato Networker on Solaris and it > backs up many TB during the night including at least six Exchange > servers each with larger databases than yours. Of course we spread the > full backups so most servers only gets a diff or inc backup but still > the full backups never takes more than a few hours. > I kind of agree, I backup a windows 2000 server with 60 GB of data in about an hour. Are the disks local? Network? NAS? USB/firewire? From gdoris at rogers.com Fri Nov 23 22:11:07 2007 From: gdoris at rogers.com (Gerry Doris) Date: Fri Nov 23 22:12:24 2007 Subject: OT: MS Exchange backups In-Reply-To: <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> Message-ID: <47474FFB.8090509@rogers.com> shuttlebox wrote: > On Nov 23, 2007 10:04 PM, Denis Beauchemin > wrote: > >>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>> >> I'm not sure I understand your question... it takes 48 hours to backup >> to disk! >> >> Of course, we can't afford to stop Exchange to either backup or restore >> data. Everything has to be done online... >> > > Something is very wrong. We use Legato Networker on Solaris and it > backs up many TB during the night including at least six Exchange > servers each with larger databases than yours. Of course we spread the > full backups so most servers only gets a diff or inc backup but still > the full backups never takes more than a few hours. > > We generally install either Legato or Veritas and backup many Exchange servers/TBs overnight. Check to make sure that the servers are being kicked off at different times...don't try and start everyone at midnight! 250GB is nothing. From Denis.Beauchemin at USherbrooke.ca Sat Nov 24 03:17:37 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Sat Nov 24 03:17:40 2007 Subject: OT: MS Exchange backups In-Reply-To: <47474FFB.8090509@rogers.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> Message-ID: <474797D1.40204@USherbrooke.ca> Gerry Doris a ?crit : > shuttlebox wrote: >> On Nov 23, 2007 10:04 PM, Denis Beauchemin >> wrote: >> >>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>>> >>> I'm not sure I understand your question... it takes 48 hours to backup >>> to disk! >>> >>> Of course, we can't afford to stop Exchange to either backup or restore >>> data. Everything has to be done online... >>> >> >> Something is very wrong. We use Legato Networker on Solaris and it >> backs up many TB during the night including at least six Exchange >> servers each with larger databases than yours. Of course we spread the >> full backups so most servers only gets a diff or inc backup but still >> the full backups never takes more than a few hours. >> >> > We generally install either Legato or Veritas and backup many Exchange > servers/TBs overnight. Check to make sure that the servers are being > kicked off at different times...don't try and start everyone at > midnight! 250GB is nothing. I agree with all of you. It should not take so much time... disks are on a local raid5 box. I think the time is spent extracting people's mailboxes from the db and copying them to disk... but still, it takes way too long... How do you restore a single mailbox or some emails? Do you have to restore the hole db and then extract the relevant emails? If so, it is a waste of time and resources... unless there isn't any other way... I think this is what they are trying to avoid but obviously it is not working very well... Thanks! Denis -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3595 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071123/45298567/smime.bin From ugob at lubik.ca Sat Nov 24 04:25:11 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Sat Nov 24 04:25:23 2007 Subject: OT: MS Exchange backups In-Reply-To: <474797D1.40204@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> Message-ID: Denis Beauchemin wrote: > Gerry Doris a ?crit : >> shuttlebox wrote: >>> On Nov 23, 2007 10:04 PM, Denis Beauchemin >>> wrote: >>> >>>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>>>> >>>> I'm not sure I understand your question... it takes 48 hours to backup >>>> to disk! >>>> >>>> Of course, we can't afford to stop Exchange to either backup or restore >>>> data. Everything has to be done online... >>>> >>> >>> Something is very wrong. We use Legato Networker on Solaris and it >>> backs up many TB during the night including at least six Exchange >>> servers each with larger databases than yours. Of course we spread the >>> full backups so most servers only gets a diff or inc backup but still >>> the full backups never takes more than a few hours. >>> >>> >> We generally install either Legato or Veritas and backup many Exchange >> servers/TBs overnight. Check to make sure that the servers are being >> kicked off at different times...don't try and start everyone at >> midnight! 250GB is nothing. > I agree with all of you. It should not take so much time... disks are > on a local raid5 box. I think the time is spent extracting people's > mailboxes from the db and copying them to disk... but still, it takes > way too long... You should check the queue length on all your disks when you start the backup. How is this RAID5 array connected to the exchange server? On the same controller as the rest of the disks? Are they on the same disk? If you have a dual NIC on this server, you can have a separate box connected with a crossovercable, running 2X 500 GB (or more) HDD in a RAID 1 config. You'll have better write speed this way, or with a RAID10. What I mean is that your bottleneck is maybe the reads on the live filesystem, maybe the write on the backup media. > > How do you restore a single mailbox or some emails? Using Backup Exec, with brick-level backups. > Do you have to > restore the hole db and then extract the relevant emails? If so, it is > a waste of time and resources... unless there isn't any other way... I > think this is what they are trying to avoid but obviously it is not > working very well... From raylund.lai at kankanwoo.com Sat Nov 24 06:06:34 2007 From: raylund.lai at kankanwoo.com (Raylund Lai) Date: Sat Nov 24 06:08:21 2007 Subject: OT: MS Exchange backups In-Reply-To: <474797D1.40204@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> Message-ID: <4747BF6A.8090100@kankanwoo.com> Denis Beauchemin wrote: > Gerry Doris a ?crit : >> shuttlebox wrote: >>> On Nov 23, 2007 10:04 PM, Denis Beauchemin >>> wrote: >>> >>>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>>>> >>>> I'm not sure I understand your question... it takes 48 hours to >>>> backup >>>> to disk! >>>> >>>> Of course, we can't afford to stop Exchange to either backup or >>>> restore >>>> data. Everything has to be done online... >>>> >>> >>> Something is very wrong. We use Legato Networker on Solaris and it >>> backs up many TB during the night including at least six Exchange >>> servers each with larger databases than yours. Of course we spread the >>> full backups so most servers only gets a diff or inc backup but still >>> the full backups never takes more than a few hours. >>> >>> >> We generally install either Legato or Veritas and backup many >> Exchange servers/TBs overnight. Check to make sure that the servers >> are being kicked off at different times...don't try and start >> everyone at midnight! 250GB is nothing. > I agree with all of you. It should not take so much time... disks are > on a local raid5 box. I think the time is spent extracting people's > mailboxes from the db and copying them to disk... but still, it takes > way too long... > You should check your backup logs. Are there any signs of "timeout"? May be the credential don't have privilege to open mailbox? > How do you restore a single mailbox or some emails? Do you have to > restore the hole db and then extract the relevant emails? If so, it > is a waste of time and resources... unless there isn't any other > way... I think this is what they are trying to avoid but obviously it > is not working very well... > > Thanks! > > Denis > From rupen.momaya at gmail.com Sat Nov 24 06:53:23 2007 From: rupen.momaya at gmail.com (Rupen Momaya) Date: Sat Nov 24 06:53:26 2007 Subject: Problem with mailscanner Message-ID: <6cd923a70711232253sd254c88gb56e8eb67daa7956@mail.gmail.com> Hi, I am running mailscanner + postfix with below versions on CentOS 4.5 box. Suddenly we started getting below error messages and mails were queing up. I re-isntalled Mail::ClamAV module, upgraded Clam version to 0.91.2, disabled clam from Mailscanner but nogo...When i disable Mailscanner completely & run only postfix it works fine & mails start gettign delivered.... I have googled but didnt find this error anywhere..Can someone help here? ---------------------------------- Nov 23 02:04:04 netbox MailScanner[4594]: Virus and Content Scanning: Starting Nov 23 02:04:05 netbox MailScanner[4595]: New Batch: Scanning 1 messages, 722 bytes Nov 23 02:04:05 netbox MailScanner[4595]: Failed to create message structures for 80FBF424001.9CE89, dropping it from the bat ch Nov 23 02:04:05 netbox MailScanner[4595]: Virus and Content Scanning: Starting Nov 23 02:04:06 netbox MailScanner[4597]: New Batch: Scanning 1 messages, 722 bytes Nov 23 02:04:06 netbox MailScanner[4597]: Failed to create message structures for 80FBF424001.6697B, dropping it from the bat ch Nov 23 02:04:06 netbox MailScanner[4597]: Virus and Content Scanning: Starting Nov 23 02:04:07 netbox MailScanner[4598]: New Batch: Scanning 1 messages, 722 bytes Nov 23 02:04:07 netbox MailScanner[4598]: Failed to create message structures for 80FBF424001.5B9BC, dropping it from the bat ch Nov 23 02:04:07 netbox MailScanner[4598]: Virus and Content Scanning: Starting Nov 23 02:04:11 netbox MailScanner[4578]: New Batch: Scanning 1 messages, 722 bytes Nov 23 02:04:11 netbox MailScanner[4578]: Failed to create message structures for 80FBF424001.7EAC6, dropping it from the bat ch Nov 23 02:04:11 netbox MailScanner[4578]: Virus and Content Scanning: Starting Nov 23 02:04:14 netbox MailScanner[4594]: New Batch: Scanning 1 messages, 722 bytes Nov 23 02:04:14 netbox MailScanner[4594]: Failed to create message structures for 80FBF424001.DD424, dropping it from the bat ch ---------------------------------------------------------------- Versions : MailScanner-perl-MIME-Base64-3.05-5 mailscanner-4.45.4-1 postfix-2.2.10-1.1.el4 [root@linbox postfix]# ls -al /var/spool/MailScanner/ total 28 drwxr-xr-x 4 root root 4096 Nov 28 2005 . drwxr-xr-x 18 root root 4096 Nov 23 20:40 .. drwx------ 2 postfix postfix 4096 Nov 24 11:40 incoming drwx------ 162 postfix nobody 12288 Nov 23 12:29 quarantine Regards, Rupen From drew.marshall at technologytiger.net Sat Nov 24 08:55:52 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Sat Nov 24 08:56:06 2007 Subject: Problem with mailscanner In-Reply-To: <6cd923a70711232253sd254c88gb56e8eb67daa7956@mail.gmail.com> References: <6cd923a70711232253sd254c88gb56e8eb67daa7956@mail.gmail.com> Message-ID: <20F3C09C-53BB-4063-9283-C45574415D00@technologytiger.net> On 24 Nov 2007, at 06:53, Rupen Momaya wrote: > Hi, > I am running mailscanner + postfix with below versions on CentOS 4.5 > box. Suddenly we started getting below error messages and mails were > queing up. I re-isntalled Mail::ClamAV module, upgraded Clam version > to 0.91.2, disabled clam from Mailscanner but nogo...When i disable > Mailscanner completely & run only postfix it works fine & mails start > gettign delivered.... > I have googled but didnt find this error anywhere..Can someone help > here? > > ---------------------------------- > Nov 23 02:04:04 netbox MailScanner[4594]: Virus and Content > Scanning: Starting > Nov 23 02:04:05 netbox MailScanner[4595]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:05 netbox MailScanner[4595]: Failed to create message > structures for 80FBF424001.9CE89, dropping it from the bat > ch > Nov 23 02:04:05 netbox MailScanner[4595]: Virus and Content > Scanning: Starting > Nov 23 02:04:06 netbox MailScanner[4597]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:06 netbox MailScanner[4597]: Failed to create message > structures for 80FBF424001.6697B, dropping it from the bat > ch > Nov 23 02:04:06 netbox MailScanner[4597]: Virus and Content > Scanning: Starting > Nov 23 02:04:07 netbox MailScanner[4598]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:07 netbox MailScanner[4598]: Failed to create message > structures for 80FBF424001.5B9BC, dropping it from the bat > ch > Nov 23 02:04:07 netbox MailScanner[4598]: Virus and Content > Scanning: Starting > Nov 23 02:04:11 netbox MailScanner[4578]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:11 netbox MailScanner[4578]: Failed to create message > structures for 80FBF424001.7EAC6, dropping it from the bat > ch > Nov 23 02:04:11 netbox MailScanner[4578]: Virus and Content > Scanning: Starting > Nov 23 02:04:14 netbox MailScanner[4594]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:14 netbox MailScanner[4594]: Failed to create message > structures for 80FBF424001.DD424, dropping it from the bat > ch > ---------------------------------------------------------------- > > Versions : > MailScanner-perl-MIME-Base64-3.05-5 > mailscanner-4.45.4-1 > postfix-2.2.10-1.1.el4 Your MailScanner version is pretty old. There was a great deal of work done on Postfix message structures between your version and the latest (4.65.3). I would suggest you upgrade (It's normally really quick and easy) to pick up the latest code. Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Technology Tiger in association with Mail Launder. Further information can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From hvdkooij at vanderkooij.org Sat Nov 24 09:27:10 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sat Nov 24 09:27:47 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <625385e30711230847i4f372dabp5176b0174d8ffa5f@mail.gmail.com> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <4746F8CB.4040905@ecs.soton.ac.uk> <4746FB14.3030204@waversveld.nl> <625385e30711230823x7a6e8973s9c7559d7e7852005@mail.gmail.com> <4746FF64.6080606@sendit.nodak.edu> <625385e30711230847i4f372dabp5176b0174d8ffa5f@mail.gmail.com> Message-ID: <4747EE6E.4010305@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 23, 2007 5:27 PM, Richard Frovarp > wrote: >> Yeah, but will the sending SMTPs fail through the multiple A records for >> a single MX? > > That sounds uncertain at best. :-) I use one MX for each server and > that always works. In my experience that is the most shock proof solution. But keep in mind that whenever you make something foolproof the will be a new model of fool(1) on the market soon. Thanks to windows we now also have loads of fool(8) processes. ;-) Hugo - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHR+5lBvzDRVjxmYERAjSXAJ4p0rWJe9QwyhVUtbDIcdTutZ644gCeLTFt pG4xewsy5MEiZOvGD+a5H1c= =Fxdv -----END PGP SIGNATURE----- From hvdkooij at vanderkooij.org Sat Nov 24 09:30:58 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sat Nov 24 09:31:17 2007 Subject: Problem with mailscanner In-Reply-To: <20F3C09C-53BB-4063-9283-C45574415D00@technologytiger.net> References: <6cd923a70711232253sd254c88gb56e8eb67daa7956@mail.gmail.com> <20F3C09C-53BB-4063-9283-C45574415D00@technologytiger.net> Message-ID: <4747EF52.7050106@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Drew Marshall wrote: > On 24 Nov 2007, at 06:53, Rupen Momaya wrote: > ....... >> Versions : >> MailScanner-perl-MIME-Base64-3.05-5 >> mailscanner-4.45.4-1 >> postfix-2.2.10-1.1.el4 > > Your MailScanner version is pretty old. There was a great deal of work > done on Postfix message structures between your version and the latest > (4.65.3). I would suggest you upgrade (It's normally really quick and > easy) to pick up the latest code. As you are running Centos you might even considere to test the yum upgrade methode. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHR+9PBvzDRVjxmYERAn8HAJ0e0Ub2ZLXjmA6O0bytXbdZs9tr3wCgiT0P 9Yq/r1U80FQK7d9Vu69/cZc= =g78p -----END PGP SIGNATURE----- From hvdkooij at vanderkooij.org Sat Nov 24 09:38:29 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Sat Nov 24 09:38:47 2007 Subject: Experimental repository for RHEL 5 / Centos 5 In-Reply-To: <47446F1B.5000005@vanderkooij.org> References: <47363BDA.5050202@vanderkooij.org> <4743E90E.4000208@vanderkooij.org> <47442DF3.8070708@rma.edu> <47444B81.7070608@ecs.soton.ac.uk> <625385e30711210910w4b23f452oe37efaa34535449@mail.gmail.com> <47446F1B.5000005@vanderkooij.org> Message-ID: <4747F115.1030707@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hugo van der Kooij wrote: > shuttlebox wrote: > >> I package MailScanner for Solaris and the only thing on the optional >> list I include is DBD::SQLite since you can't use the SA cache feature >> otherwise. Our packages for Clam and SA pulls in some of the other >> optional modules so to get a working setup you just need to install >> MS, Clam and SA. That can't be too hard, can it? I would recommend >> creating an empty wrapper package that pulls in what you want for a >> turnkey solution if that's what you want but be careful with adding >> optional things to each package. You may find that everyone has an >> opinion about what optional modules are a must. :-) > > Well. This is rather exactly what the current wrapper does. Only require > what one must have to get started. Jules, I just thought of the upgrade process. It might be a good idea to let the package send a message to the postmaster of the machine instructing him/her of the steps to take on the config upgrade. RPM packages are required not to be interactive during installation. Or at least that is what I recall as the LSB requirement. But using /usr/lib/sendmail (required by the LSB) to send a message would still fall withing the LSB limits and the message could instruct the admin of pending tasks, things to read, .... Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHR/ETBvzDRVjxmYERAiotAKCwiHOybQg+eYNwtTEq/Z5bvRzKlwCfTsL5 aF0wnR5mR+NfO2PGluE66iE= =CoD6 -----END PGP SIGNATURE----- From glenn.steen at gmail.com Sat Nov 24 10:05:46 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 24 10:05:48 2007 Subject: OT: MS Exchange backups In-Reply-To: <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> Message-ID: <223f97700711240205k324c0cb0h9ebbb8e70a020777@mail.gmail.com> On 23/11/2007, shuttlebox wrote: > On Nov 23, 2007 10:04 PM, Denis Beauchemin > wrote: > > >> Manager (TSM) and Backup Exec but couldn't backup our 250GB data > > > > I'm not sure I understand your question... it takes 48 hours to backup > > to disk! > > > > Of course, we can't afford to stop Exchange to either backup or restore > > data. Everything has to be done online... > > Something is very wrong. We use Legato Networker on Solaris and it > backs up many TB during the night including at least six Exchange > servers each with larger databases than yours. Of course we spread the > full backups so most servers only gets a diff or inc backup but still > the full backups never takes more than a few hours. > I have to agree with Peter.... We do our backups (and have done for quite some time) with EMC (used to be Legato;-) Networker... A full backup is rather large, so we do them on Sundays... We do use an Exchange module, we do use GigE, we backup to a DataDomain 430 (Excellent compression... Although we never get the x19 they boast, more like x8). Including cloning to LTO3 tape (a small exchanger) it all happens in well less than 24 hours. The actual backup is usually less than 8 hours, and this is file servers, exhcange, DCs, my Linux boxes (just a few small ones:-) and a few more "function-servers"... like SMS (sigh). All well over 1 TiB ("and then there was compression":-). I'd start by looking at what the backup clients have to contend with. That the backup software doesn't "bounce" off of the NIC (and that the NIC in question isn't less than GigE full duplex). That you don't have multiplexing problems (too many clients contending for the backup medium) etc etc... Even though Networker looks like crap, and is semi-flakey.... once you get the hang of it, it is a really good piece of SW. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Sat Nov 24 10:16:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 24 10:16:28 2007 Subject: OT: MS Exchange backups In-Reply-To: <474797D1.40204@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> Message-ID: <223f97700711240216u79ccb5d1ufe0bf7356bcb7a47@mail.gmail.com> On 24/11/2007, Denis Beauchemin wrote: > Gerry Doris a ?crit : > > shuttlebox wrote: > >> On Nov 23, 2007 10:04 PM, Denis Beauchemin > >> wrote: > >> > >>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data > >>>>> > >>> I'm not sure I understand your question... it takes 48 hours to backup > >>> to disk! > >>> > >>> Of course, we can't afford to stop Exchange to either backup or restore > >>> data. Everything has to be done online... > >>> > >> > >> Something is very wrong. We use Legato Networker on Solaris and it > >> backs up many TB during the night including at least six Exchange > >> servers each with larger databases than yours. Of course we spread the > >> full backups so most servers only gets a diff or inc backup but still > >> the full backups never takes more than a few hours. > >> > >> > > We generally install either Legato or Veritas and backup many Exchange > > servers/TBs overnight. Check to make sure that the servers are being > > kicked off at different times...don't try and start everyone at > > midnight! 250GB is nothing. > I agree with all of you. It should not take so much time... disks are > on a local raid5 box. I think the time is spent extracting people's > mailboxes from the db and copying them to disk... but still, it takes > way too long... > > How do you restore a single mailbox or some emails? Do you have to > restore the hole db and then extract the relevant emails? If so, it is > a waste of time and resources... unless there isn't any other way... I > think this is what they are trying to avoid but obviously it is not > working very well... > > Thanks! > > Denis > I'm not the Echange admin (thank god!), but IIRC what he does is that he effectively "doubles" the size of the backup by exporting all the mailboxes first.... And the echange module is supposed to facilitate this too, but ... this was easier:-):-). Our Exchange database seem to be the same saze (or slightly larger) as yours... Shouldn't be taing 48 hours:-). If you like, I can have a chat with him come monday, to get the gory details. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From btj at havleik.no Sat Nov 24 10:22:27 2007 From: btj at havleik.no (=?UTF-8?Q?Bj=C3=B8rn?= T Johansen) Date: Sat Nov 24 10:22:50 2007 Subject: Trouble running system update on RHEL after installing Mailscanner? In-Reply-To: <4747412E.1030301@USherbrooke.ca> References: <20071123214329.36e13da1@pennywise> <4747412E.1030301@USherbrooke.ca> Message-ID: <20071124112227.33cac709@pennywise> On Fri, 23 Nov 2007 16:07:58 -0500 Denis Beauchemin wrote: > Bj?rn T Johansen a ?crit : > > We are having trouble running system update (yum update) on our RHEL 5 server after we installed Mailscanner... > > It tells us that there is conflict with many of the perl packages and it just stops... > > > > Is there a way to fix this? > > > > > > Regards, > > > > BTJ > > > > > Do "find /var/cache/yum -name '*rpm' -ls" to locate the rpms that were > downloaded but not installed and then force the update with "rpm -Uvh > --force ...". > > That should do it. > > Denis > That worked, thx... :) BTJ From glenn.steen at gmail.com Sat Nov 24 10:57:57 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sat Nov 24 10:58:02 2007 Subject: Problem with mailscanner In-Reply-To: <6cd923a70711232253sd254c88gb56e8eb67daa7956@mail.gmail.com> References: <6cd923a70711232253sd254c88gb56e8eb67daa7956@mail.gmail.com> Message-ID: <223f97700711240257n6b942529u8349e41e3a74e096@mail.gmail.com> On 24/11/2007, Rupen Momaya wrote: > Hi, > I am running mailscanner + postfix with below versions on CentOS 4.5 > box. Suddenly we started getting below error messages and mails were > queing up. I re-isntalled Mail::ClamAV module, upgraded Clam version > to 0.91.2, disabled clam from Mailscanner but nogo...When i disable > Mailscanner completely & run only postfix it works fine & mails start > gettign delivered.... > I have googled but didnt find this error anywhere..Can someone help here? > > ---------------------------------- > Nov 23 02:04:04 netbox MailScanner[4594]: Virus and Content Scanning: Starting > Nov 23 02:04:05 netbox MailScanner[4595]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:05 netbox MailScanner[4595]: Failed to create message > structures for 80FBF424001.9CE89, dropping it from the bat > ch > Nov 23 02:04:05 netbox MailScanner[4595]: Virus and Content Scanning: Starting > Nov 23 02:04:06 netbox MailScanner[4597]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:06 netbox MailScanner[4597]: Failed to create message > structures for 80FBF424001.6697B, dropping it from the bat > ch > Nov 23 02:04:06 netbox MailScanner[4597]: Virus and Content Scanning: Starting > Nov 23 02:04:07 netbox MailScanner[4598]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:07 netbox MailScanner[4598]: Failed to create message > structures for 80FBF424001.5B9BC, dropping it from the bat > ch > Nov 23 02:04:07 netbox MailScanner[4598]: Virus and Content Scanning: Starting > Nov 23 02:04:11 netbox MailScanner[4578]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:11 netbox MailScanner[4578]: Failed to create message > structures for 80FBF424001.7EAC6, dropping it from the bat > ch > Nov 23 02:04:11 netbox MailScanner[4578]: Virus and Content Scanning: Starting > Nov 23 02:04:14 netbox MailScanner[4594]: New Batch: Scanning 1 > messages, 722 bytes > Nov 23 02:04:14 netbox MailScanner[4594]: Failed to create message > structures for 80FBF424001.DD424, dropping it from the bat > ch > ---------------------------------------------------------------- > > Versions : > MailScanner-perl-MIME-Base64-3.05-5 > mailscanner-4.45.4-1 > postfix-2.2.10-1.1.el4 > > [root@linbox postfix]# ls -al /var/spool/MailScanner/ > total 28 > drwxr-xr-x 4 root root 4096 Nov 28 2005 . > drwxr-xr-x 18 root root 4096 Nov 23 20:40 .. > drwx------ 2 postfix postfix 4096 Nov 24 11:40 incoming > drwx------ 162 postfix nobody 12288 Nov 23 12:29 quarantine > > > Regards, > Rupen Is 80FBF424001 really a complete queue file? Can postcat understand it? With the rather old versions you have ... things _should_ be OK, but .... I assume you are using the olny really supported method, the HOLD method, and not the old *deprecated* dual Postfix/defer method... The supported one has the header_check putting everything in the hold "queue"... If so, check that there are no strange files in the hold queue directory ... f there are, move or remove it/them. Then do as Drew/Hugo says... go do some updating;-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From uxbod at splatnix.net Sat Nov 24 11:14:13 2007 From: uxbod at splatnix.net (UxBoD) Date: Sat Nov 24 11:14:24 2007 Subject: OT: MS Exchange backups In-Reply-To: <223f97700711240216u79ccb5d1ufe0bf7356bcb7a47@mail.gmail.com> Message-ID: <17089934.31195902853677.JavaMail.root@office.splatnix.net> HP DataProtector (used to be OmniBack) and Exchange plugin. You cannot go wrong. Excellent backup software and have been using for 10 years. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From donald.dawson at bakerbotts.com Sat Nov 24 15:06:07 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Sat Nov 24 15:06:12 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: Message-ID: Excellent information! -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Gareth Sent: Friday, November 23, 2007 1:43 PM To: MailScanner discussion Subject: RE: URIBL_SBL timeouts running MS in debug mode. >From logwatch for yesterday:- Messages rejected using Anti-Spam site 3799 Time(s) zen.spamhaus.org identified 3749 spam messages. bl.spamcop.net identified 48 spam messages. autoblock.dnsbl identified 2 spam messages. Messages are rejected in the order shown above so the 48 spamcop blocked is what spamhaus missed. -------------------------------------------------------- >From August when we started testing :- Messages rejected using Anti-Spam site 7187 Time(s) zen.dnsbl identified 6781 spam messages. bl.spamcop.net identified 392 spam messages. combined.njabl.org identified 14 spam messages. We then switched spamcop so that it was first to see how well it did and how many zen caught that it missed :- Messages rejected using Anti-Spam site 7043 Time(s) bl.spamcop.net identified 2654 spam messages. zen.dnsbl identified 4385 spam messages. combined.njabl.org identified 2 spam messages. Therefore from our testing we found that of all the rbl detected spam, spamcop detected 38% while spamhaus detected 95%. Factoring in the typical 500 spam mesages that get past RBLs these percentages of detected spam fall to 31% for spamcop and 88% for spamhaus. Thats the justification we used for then subscribing to the datafeed services (tests were performed using a trial account). > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info]On Behalf Of Steve > Freegard > Sent: 23 November 2007 08:39 > > Add Spamcop to that list (bl.spamcop.net) - it's much more reliable than > it used to be, so it can be safely used at the MTA level now. It is > almost as effective as the SBL+XBL portions of Spamhaus from my > own testing. > > Remember you can still query the CBL (cbl.abuseat.org) which forms the > largest and most frequently changed part of the Zen dataset providing > you fall under their usage terms as well. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Denis.Beauchemin at USherbrooke.ca Sat Nov 24 17:49:43 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Sat Nov 24 17:49:47 2007 Subject: OT: MS Exchange backups In-Reply-To: References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> Message-ID: <47486437.30200@USherbrooke.ca> Ugo Bellavance a ?crit : > Denis Beauchemin wrote: >> Gerry Doris a ?crit : >>> shuttlebox wrote: >>>> On Nov 23, 2007 10:04 PM, Denis Beauchemin >>>> wrote: >>>> >>>>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>>>>> >>>>> I'm not sure I understand your question... it takes 48 hours to >>>>> backup >>>>> to disk! >>>>> >>>>> Of course, we can't afford to stop Exchange to either backup or >>>>> restore >>>>> data. Everything has to be done online... >>>>> >>>> >>>> Something is very wrong. We use Legato Networker on Solaris and it >>>> backs up many TB during the night including at least six Exchange >>>> servers each with larger databases than yours. Of course we spread the >>>> full backups so most servers only gets a diff or inc backup but still >>>> the full backups never takes more than a few hours. >>>> >>>> >>> We generally install either Legato or Veritas and backup many >>> Exchange servers/TBs overnight. Check to make sure that the servers >>> are being kicked off at different times...don't try and start >>> everyone at midnight! 250GB is nothing. >> I agree with all of you. It should not take so much time... disks >> are on a local raid5 box. I think the time is spent extracting >> people's mailboxes from the db and copying them to disk... but >> still, it takes way too long... > > You should check the queue length on all your disks when you start the > backup. How is this RAID5 array connected to the exchange server? On > the same controller as the rest of the disks? Are they on the same > disk? If you have a dual NIC on this server, you can have a separate > box connected with a crossovercable, running 2X 500 GB (or more) HDD > in a RAID 1 config. You'll have better write speed this way, or with > a RAID10. What I mean is that your bottleneck is maybe the reads on > the live filesystem, maybe the write on the backup media. > >> >> How do you restore a single mailbox or some emails? > > Using Backup Exec, with brick-level backups. > >> Do you have to restore the hole db and then extract the relevant >> emails? If so, it is a waste of time and resources... unless there >> isn't any other way... I think this is what they are trying to avoid >> but obviously it is not working very well... > Thanks Ugo, I will check with the admin on Monday. The backup is probably done on the same array as the db is on, which is not good... I don't know much about Exchange but there are serious talks about switching its support to my team... which makes me uncomfortable... we are managing the Cyrus users but they want to deploy Exchange for staff members... So with brick-level backups how do you restore a single mailbox? Thanks! Denis -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3595 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071124/0c69de7f/smime.bin From Denis.Beauchemin at USherbrooke.ca Sat Nov 24 17:50:44 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Sat Nov 24 17:50:47 2007 Subject: OT: MS Exchange backups In-Reply-To: <4747BF6A.8090100@kankanwoo.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> <4747BF6A.8090100@kankanwoo.com> Message-ID: <47486474.50906@USherbrooke.ca> Raylund Lai a ?crit : > > > Denis Beauchemin wrote: >> Gerry Doris a ?crit : >>> shuttlebox wrote: >>>> On Nov 23, 2007 10:04 PM, Denis Beauchemin >>>> wrote: >>>> >>>>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>>>>> >>>>> I'm not sure I understand your question... it takes 48 hours to >>>>> backup >>>>> to disk! >>>>> >>>>> Of course, we can't afford to stop Exchange to either backup or >>>>> restore >>>>> data. Everything has to be done online... >>>>> >>>> >>>> Something is very wrong. We use Legato Networker on Solaris and it >>>> backs up many TB during the night including at least six Exchange >>>> servers each with larger databases than yours. Of course we spread the >>>> full backups so most servers only gets a diff or inc backup but still >>>> the full backups never takes more than a few hours. >>>> >>>> >>> We generally install either Legato or Veritas and backup many >>> Exchange servers/TBs overnight. Check to make sure that the servers >>> are being kicked off at different times...don't try and start >>> everyone at midnight! 250GB is nothing. >> I agree with all of you. It should not take so much time... disks >> are on a local raid5 box. I think the time is spent extracting >> people's mailboxes from the db and copying them to disk... but >> still, it takes way too long... >> > You should check your backup logs. Are there any signs of "timeout"? > May be the credential don't have privilege to open mailbox? > >> How do you restore a single mailbox or some emails? Do you have to >> restore the hole db and then extract the relevant emails? If so, it >> is a waste of time and resources... unless there isn't any other >> way... I think this is what they are trying to avoid but obviously >> it is not working very well... >> >> Thanks! >> >> Denis >> > Thanks for the tip, Raylund, I will try to have a look at them on Monday. Denis -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3595 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071124/7228df95/smime.bin From Denis.Beauchemin at USherbrooke.ca Sat Nov 24 17:51:59 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Sat Nov 24 17:52:02 2007 Subject: OT: MS Exchange backups In-Reply-To: <223f97700711240216u79ccb5d1ufe0bf7356bcb7a47@mail.gmail.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> <223f97700711240216u79ccb5d1ufe0bf7356bcb7a47@mail.gmail.com> Message-ID: <474864BF.8060206@USherbrooke.ca> Glenn Steen a ?crit : > On 24/11/2007, Denis Beauchemin wrote: > >> Gerry Doris a ?crit : >> >>> shuttlebox wrote: >>> >>>> On Nov 23, 2007 10:04 PM, Denis Beauchemin >>>> wrote: >>>> >>>> >>>>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>>>>> >>>>>>> >>>>> I'm not sure I understand your question... it takes 48 hours to backup >>>>> to disk! >>>>> >>>>> Of course, we can't afford to stop Exchange to either backup or restore >>>>> data. Everything has to be done online... >>>>> >>>>> >>>> Something is very wrong. We use Legato Networker on Solaris and it >>>> backs up many TB during the night including at least six Exchange >>>> servers each with larger databases than yours. Of course we spread the >>>> full backups so most servers only gets a diff or inc backup but still >>>> the full backups never takes more than a few hours. >>>> >>>> >>>> >>> We generally install either Legato or Veritas and backup many Exchange >>> servers/TBs overnight. Check to make sure that the servers are being >>> kicked off at different times...don't try and start everyone at >>> midnight! 250GB is nothing. >>> >> I agree with all of you. It should not take so much time... disks are >> on a local raid5 box. I think the time is spent extracting people's >> mailboxes from the db and copying them to disk... but still, it takes >> way too long... >> >> How do you restore a single mailbox or some emails? Do you have to >> restore the hole db and then extract the relevant emails? If so, it is >> a waste of time and resources... unless there isn't any other way... I >> think this is what they are trying to avoid but obviously it is not >> working very well... >> >> Thanks! >> >> Denis >> >> > I'm not the Echange admin (thank god!), but IIRC what he does is that > he effectively "doubles" the size of the backup by exporting all the > mailboxes first.... And the echange module is supposed to facilitate > this too, but ... this was easier:-):-). > Our Exchange database seem to be the same saze (or slightly larger) as > yours... Shouldn't be taing 48 hours:-). > > If you like, I can have a chat with him come monday, to get the gory details. > > Cheers > Hi Glenn, Yes, please tell me more about your setup. Thanks! Denis -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3595 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071124/774c3ddb/smime.bin From Denis.Beauchemin at USherbrooke.ca Sat Nov 24 17:52:46 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Sat Nov 24 17:52:50 2007 Subject: OT: MS Exchange backups In-Reply-To: <17089934.31195902853677.JavaMail.root@office.splatnix.net> References: <17089934.31195902853677.JavaMail.root@office.splatnix.net> Message-ID: <474864EE.90107@USherbrooke.ca> UxBoD a ?crit : > HP DataProtector (used to be OmniBack) and Exchange plugin. You cannot go wrong. Excellent backup software and have been using for 10 years. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > Thanks, I will look into this... Denis -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3595 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071124/d2aee30f/smime.bin From ugob at lubik.ca Sun Nov 25 05:53:02 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Sun Nov 25 05:53:15 2007 Subject: OT: MS Exchange backups In-Reply-To: <47486437.30200@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> <47486437.30200@USherbrooke.ca> Message-ID: Denis Beauchemin wrote: > Thanks Ugo, > > I will check with the admin on Monday. The backup is probably done on > the same array as the db is on, which is not good... Yeah, you must find the bottleneck... > I don't know much about Exchange but there are serious talks about > switching its support to my team... which makes me uncomfortable... we > are managing the Cyrus users but they want to deploy Exchange for staff > members... > > So with brick-level backups how do you restore a single mailbox? Well, you just go in the Backup Exec GUI and you select the date of the backup you want to restore, and in the tree you will have files, but also mailboxes... You can also just recover one part of the mailbox (calendar, for example). From prandal at herefordshire.gov.uk Sun Nov 25 09:48:48 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Sun Nov 25 09:48:56 2007 Subject: MS Exchange backups In-Reply-To: <47473237.1090308@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA03CF37@HC-MBX02.herefordshire.gov.uk> A few comments. Which version of Exchange are we talking about here? If it is Exchange 2003 you can have multiple storage groups with multiple databases. This makes a mailbox recovery so much easier as you don't have to restore the whole exchange organisation to get a mailbox back. Brick-level backups are BAD! Don't use them: http://mail.tekscan.com/nomailboxes.htm The way to get around them is to use the Ed Crowley "Never Restore" method: http://www.swinc.com/resources/exchange/faq_db.asp?status=questions&faqID=1000&faqname=Exchange%205.5§ionID=1009§ionName=The%20Ed%20Crowley%20Never%20Restore%20Method You might also need to manage your databases a bit better, by, for example, using Mailbox Manager to delete old stuff out of users' "Deleted Items": http://support.microsoft.com/kb/319188 and with pretty pictures from the MS Exchange Team's blog: http://msexchangeteam.com/archive/2005/03/21/399807.aspx http://msexchangeteam.com/archive/2005/04/11/403574.aspx http://msexchangeteam.com/archive/2005/04/18/403819.aspx Cheers, Phil -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Denis Beauchemin Sent: 23 November 2007 20:04 To: MailScanner Subject: OT: MS Exchange backups Hello all, I know this is not related to MS, but you guys know so much about everything that I risk the question: what backup solution works with MS Exchange? The admins responsible for our Exchange server tried Tivoli Storage Manager (TSM) and Backup Exec but couldn't backup our 250GB data within reasonable time: it takes about 48 hours to achieve one full backup! And this got worse when we added McAfee's GroupShield to the mix... I think they use Backup Exec's "brick-level backup" to backup to a local disk and then use this copy when they need to restore emails. They first tried TSM but had to resort to restoring the full email DB whenever they needed to restore one email... How could we do backups within a reasonable time? The hw is pretty decent... Thanks again for sharing your vast experience with others... Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From igalvarez at gmail.com Sun Nov 25 19:03:08 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Sun Nov 25 19:03:10 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner Message-ID: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a CentOS4.5 Linux server. I installed too the package install-Clam-0.91.2-SA-3.2.3.tar.gz in order to activate spamassassin with mailscanner. I ran spamassassin -D --lint and there's no problem in my configuration files. I also see in maillog file the spamassassin doing its work with spam: Nov 25 04:54:51 hostname MailScanner[20611]: Message B25732B1DB.A9A63 from 75.93.188.141 (jerrimy@donin.com) to mydomain.com is spam, SBL+XBL, spamcop.net, SpamAssassin (not cached, score=30.984, required 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL 2.90, RDNS_DYNAMIC 0.10, SARE_SPEC_REPLICA_OBFU 1.81, SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, URIBL_SC_SURBL 2.52) Everything is fine BUT, when I run "qshape hold" I see the HOLD folder is FULL of messages waiting to be processed, I mean thousands of mails waiting and there is a long delay in delivering. My link to internet is not full, I mean I see the normal traffic. So, when I turn off spamassassin in MailScanner.conf there's almost no messages in HOLD foder. My questions are: 1. How can I speed the spamassassin process in my server? 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and others that comes activated by default when I install spamassassin package)? 3. Maybe offtopic, sorry.. but does anybody knows any rules on the MTA (postfix) in order to stop spam before it gets to mailscanner/spamassassin? 4. Does anybody knows some perfect setup (best perfomance) to install mailscanner with spamssassin? some link? some tutorial? I have used mailscanner for several years I really love it. Any ideas will be accepted. thanks in advance! -- Regards; Israel Garcia From glenn.steen at gmail.com Sun Nov 25 19:46:44 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 25 19:46:48 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> References: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> Message-ID: <223f97700711251146r4d83bf5eie2dce249e754bac9@mail.gmail.com> On 25/11/2007, Israel Garcia wrote: > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a > CentOS4.5 Linux server. I installed too the package > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to activate spamassassin > with mailscanner. I ran spamassassin -D --lint and there's no problem > in my configuration files. I also see in maillog file the spamassassin > doing its work with spam: > > Nov 25 04:54:51 hostname MailScanner[20611]: Message B25732B1DB.A9A63 > from 75.93.188.141 (jerrimy@donin.com) to mydomain.com is spam, > SBL+XBL, spamcop.net, SpamAssassin (not cached, score=30.984, required > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL > 2.90, RDNS_DYNAMIC 0.10, SARE_SPEC_REPLICA_OBFU 1.81, > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, > URIBL_SC_SURBL 2.52) > > Everything is fine BUT, when I run "qshape hold" I see the HOLD folder > is FULL of messages waiting to be processed, I mean thousands of mails > waiting and there is a long delay in delivering. > My link to internet is not full, I mean I see the normal traffic. > > So, when I turn off spamassassin in MailScanner.conf there's almost no > messages in HOLD foder. > > My questions are: > > 1. How can I speed the spamassassin process in my server? Use a caching only DNS, limit what you check (RBLs etc).... There are some things to do:-) > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and > others that comes activated by default when I install spamassassin > package)? No. But they all contribute something:-). WRT Pyzor, make sure you use the "alternative" server, the official one will likely just time out. What modules do you load? > 3. Maybe offtopic, sorry.. but does anybody knows any rules on the MTA > (postfix) in order to stop spam before it gets to > mailscanner/spamassassin? You can implement all the usual stuff (look at the UCE advice at www.postfix.org->Documentation... The cheat sheet is pretty good advice. This page:http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:setup_smtp_filtering has some interrest too:-), and of course... Don't accept mail for unknown users. You can either use the *_recipient_maps settings (with "static" maps) as described in the mailscanner Wiki (http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:reject_non_existent_users), or use address verification (also mentioned in the wiki, and has it's own page in the postfix docs...;-). > 4. Does anybody knows some perfect setup (best perfomance) to install > mailscanner with spamssassin? some link? some tutorial? Perfect is too much to aim for;-). I usually try for functional:-):-) > > I have used mailscanner for several years I really love it. Any ideas > will be accepted. > > thanks in advance! > -- > Regards; > Israel Garcia > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From igalvarez at gmail.com Sun Nov 25 20:22:09 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Sun Nov 25 20:22:11 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711251146r4d83bf5eie2dce249e754bac9@mail.gmail.com> References: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> <223f97700711251146r4d83bf5eie2dce249e754bac9@mail.gmail.com> Message-ID: <194a2c240711251222w51219bd5jf22e665608a30ca2@mail.gmail.com> On Nov 25, 2007 2:46 PM, Glenn Steen wrote: > On 25/11/2007, Israel Garcia wrote: > > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a > > CentOS4.5 Linux server. I installed too the package > > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to activate spamassassin > > with mailscanner. I ran spamassassin -D --lint and there's no problem > > in my configuration files. I also see in maillog file the spamassassin > > doing its work with spam: > > > > Nov 25 04:54:51 hostname MailScanner[20611]: Message B25732B1DB.A9A63 > > from 75.93.188.141 (jerrimy@donin.com) to mydomain.com is spam, > > SBL+XBL, spamcop.net, SpamAssassin (not cached, score=30.984, required > > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, > > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, > > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL > > 2.90, RDNS_DYNAMIC 0.10, SARE_SPEC_REPLICA_OBFU 1.81, > > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, > > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, > > URIBL_SC_SURBL 2.52) > > > > Everything is fine BUT, when I run "qshape hold" I see the HOLD folder > > is FULL of messages waiting to be processed, I mean thousands of mails > > waiting and there is a long delay in delivering. > > My link to internet is not full, I mean I see the normal traffic. > > > > So, when I turn off spamassassin in MailScanner.conf there's almost no > > messages in HOLD foder. > > > > My questions are: > > > > 1. How can I speed the spamassassin process in my server? > Use a caching only DNS, limit what you check (RBLs etc).... There are > some things to do:-) > I have in this server a caching only DNS... > > > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and > > others that comes activated by default when I install spamassassin > > package)? > No. But they all contribute something:-). WRT Pyzor, make sure you use > the "alternative" server, the official one will likely just time out. > What modules do you load? I use DCC, razor2, pyzor and all the stuff from /etc/mail/spamassassin config files: -rw-r--r-- 1 root root 1089 Jun 2 13:40 init.pre lrwxrwxrwx 1 root root 41 Jun 2 21:43 local.cf -> /etc/MailScanner/spam.assassin.prefs.conf lrwxrwxrwx 1 root root 41 Nov 24 11:00 mailscanner.cf -> /etc/MailScanner/spam.assassin.prefs.conf drwxr-xr-x 3 root root 4096 Nov 24 15:43 old drwxr-xr-x 2 root root 4096 Nov 25 05:05 RulesDuJour drwx------ 2 root root 4096 Nov 25 05:08 sa-update-keys -rw-r--r-- 1 root root 2439 Jun 2 14:03 v310.pre -rw-r--r-- 1 root root 922 Jun 2 13:39 v312.pre -rw-r--r-- 1 root root 2299 Jun 2 13:40 v320.pre > > > 3. Maybe offtopic, sorry.. but does anybody knows any rules on the MTA > > (postfix) in order to stop spam before it gets to > > mailscanner/spamassassin? > You can implement all the usual stuff (look at the UCE advice at > www.postfix.org->Documentation... The cheat sheet is pretty good > advice. This page: > http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:setup_smtp_filtering > has some interrest too:-), and of course... Don't accept mail for > unknown users. You can either use the *_recipient_maps settings (with > "static" maps) as described in the mailscanner Wiki > ( > http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:reject_non_existent_users > ), > or use address verification (also mentioned in the wiki, and has it's > own page in the postfix docs...;-). I'm running to read them NOW! :-) > > > > 4. Does anybody knows some perfect setup (best perfomance) to install > > mailscanner with spamssassin? some link? some tutorial? > Perfect is too much to aim for;-). I usually try for functional:-):-) :-) :-) .. thanks a lot Glenn regards, Israel > > > > > > I have used mailscanner for several years I really love it. Any ideas > > will be accepted. > > > > thanks in advance! > > -- > > Regards; > > Israel Garcia > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071125/c57f63e0/attachment.html From glenn.steen at gmail.com Sun Nov 25 20:56:13 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Sun Nov 25 20:56:16 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711251222w51219bd5jf22e665608a30ca2@mail.gmail.com> References: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> <223f97700711251146r4d83bf5eie2dce249e754bac9@mail.gmail.com> <194a2c240711251222w51219bd5jf22e665608a30ca2@mail.gmail.com> Message-ID: <223f97700711251256wf38ad23xca6c6ff50cabbeee@mail.gmail.com> On 25/11/2007, Israel Garcia wrote: > On Nov 25, 2007 2:46 PM, Glenn Steen wrote: > > > > > > > > > On 25/11/2007, Israel Garcia wrote: > > > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a > > > CentOS4.5 Linux server. I installed too the package > > > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to > activate spamassassin > > > with mailscanner. I ran spamassassin -D --lint and there's no problem > > > in my configuration files. I also see in maillog file the spamassassin > > > doing its work with spam: > > > > > > Nov 25 04:54:51 hostname MailScanner[20611]: Message B25732B1DB.A9A63 > > > from 75.93.188.141 (jerrimy@donin.com) to mydomain.com is spam, > > > SBL+XBL, spamcop.net , SpamAssassin (not cached, score=30.984, required > > > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, > > > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, > > > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL > > > 2.90, RDNS_DYNAMIC 0.10, SARE_SPEC_REPLICA_OBFU 1.81, > > > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, > > > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, > > > URIBL_SC_SURBL 2.52) > > > > > > Everything is fine BUT, when I run "qshape hold" I see the HOLD folder > > > is FULL of messages waiting to be processed, I mean thousands of mails > > > waiting and there is a long delay in delivering. > > > My link to internet is not full, I mean I see the normal traffic. > > > > > > So, when I turn off spamassassin in MailScanner.conf there's almost no > > > messages in HOLD foder. > > > > > > My questions are: > > > > > > 1. How can I speed the spamassassin process in my server? > > Use a caching only DNS, limit what you check (RBLs etc).... There are > > some things to do:-) > > > > > > I have in this server a caching only DNS... > > > > > > > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and > > > others that comes activated by default when I install spamassassin > > > package)? > > No. But they all contribute something:-). WRT Pyzor, make sure you use > > the "alternative" server, the official one will likely just time out. > > What modules do you load? > > I use DCC, razor2, pyzor and all the stuff from /etc/mail/spamassassin > config files: > > -rw-r--r-- 1 root root 1089 Jun 2 13:40 init.pre > lrwxrwxrwx 1 root root 41 Jun 2 21:43 local.cf -> > /etc/MailScanner/spam.assassin.prefs.conf You shouldn't have local.cf as a link to spam.assassin.prefs.conf.... That was more a thing some did before the advent of the mailscanner.cf link. local.cf is a perfect place to have local rescoring etc ... Like setting dead RBLs to score 0 (thus preventing a timeout problem), or RBLs that might be ... problematic (like if you get firewalled by spamhaus... Check recent threads on the list for a simple test to see if you've been FW'd by them). > lrwxrwxrwx 1 root root 41 Nov 24 11:00 mailscanner.cf -> > /etc/MailScanner/spam.assassin.prefs.conf > drwxr-xr-x 3 root root 4096 Nov 24 15:43 old > drwxr-xr-x 2 root root 4096 Nov 25 05:05 RulesDuJour > drwx------ 2 root root 4096 Nov 25 05:08 sa-update-keys > -rw-r--r-- 1 root root 2439 Jun 2 14:03 v310.pre > -rw-r--r-- 1 root root 922 Jun 2 13:39 v312.pre > -rw-r--r-- 1 root root 2299 Jun 2 13:40 v320.pre I was more thinking along the lines of what loadmodule statements that you have active:-). Check that ASN isn't loaded... for example:-). If you like, paste result of # grep -i loadplug /etc/mail/spamassassin/*.pre ... (snip) > I'm running to read them NOW! :-) Good. The message never received is the least loading...:-). > > > > > > > > > > 4. Does anybody knows some perfect setup (best perfomance) to install > > > mailscanner with spamssassin? some link? some tutorial? > > Perfect is too much to aim for;-). I usually try for functional:-):-) > > :-) :-) .. thanks a lot Glenn :-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From prandal at herefordshire.gov.uk Sun Nov 25 21:31:51 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Sun Nov 25 21:31:58 2007 Subject: Too messages in Hold folder when spamassassin is activated inMailScanner In-Reply-To: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> References: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA03CF38@HC-MBX02.herefordshire.gov.uk> Make sure you've done an sa-update successfully. Phil -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Israel Garcia Sent: 25 November 2007 19:03 To: MailScanner discussion Subject: Too messages in Hold folder when spamassassin is activated inMailScanner Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a CentOS4.5 Linux server. I installed too the package install-Clam-0.91.2-SA-3.2.3.tar.gz in order to activate spamassassin with mailscanner. I ran spamassassin -D --lint and there's no problem in my configuration files. I also see in maillog file the spamassassin doing its work with spam: Nov 25 04:54:51 hostname MailScanner[20611]: Message B25732B1DB.A9A63 from 75.93.188.141 (jerrimy@donin.com) to mydomain.com is spam, SBL+XBL, spamcop.net, SpamAssassin (not cached, score=30.984, required 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL 2.90, RDNS_DYNAMIC 0.10, SARE_SPEC_REPLICA_OBFU 1.81, SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, URIBL_SC_SURBL 2.52) Everything is fine BUT, when I run "qshape hold" I see the HOLD folder is FULL of messages waiting to be processed, I mean thousands of mails waiting and there is a long delay in delivering. My link to internet is not full, I mean I see the normal traffic. So, when I turn off spamassassin in MailScanner.conf there's almost no messages in HOLD foder. My questions are: 1. How can I speed the spamassassin process in my server? 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and others that comes activated by default when I install spamassassin package)? 3. Maybe offtopic, sorry.. but does anybody knows any rules on the MTA (postfix) in order to stop spam before it gets to mailscanner/spamassassin? 4. Does anybody knows some perfect setup (best perfomance) to install mailscanner with spamssassin? some link? some tutorial? I have used mailscanner for several years I really love it. Any ideas will be accepted. thanks in advance! -- Regards; Israel Garcia -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From jan-peter at koopmann.eu Mon Nov 26 09:34:15 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Mon Nov 26 09:32:54 2007 Subject: OT: MS Exchange backups In-Reply-To: References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com><474797D1.40204@USherbrooke.ca> <47486437.30200@USherbrooke.ca> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD161002D66C@DE-SEXB01RZ.intern.seceidos.de> > > So with brick-level backups how do you restore a single mailbox? > > Well, you just go in the Backup Exec GUI and you select the date of the > backup you want to restore, and in the tree you will have files, but > also mailboxes... You can also just recover one part of the mailbox > (calendar, for example). If the backup target is a tape though it first needs to restore the corresponding database to a temporary disk and then from there get the items selected. Depending on the setup this means in his setup Backup Exec might need to restore 250GB in order to get a few KB worth of mails. Therefore several storage groups and mailbox stores are a good idea. Or use Backup Exec with Backup-To-Disc-To-Tape. :-) From glenn.steen at gmail.com Mon Nov 26 10:14:13 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon Nov 26 10:14:17 2007 Subject: OT: MS Exchange backups In-Reply-To: <474864BF.8060206@USherbrooke.ca> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> <223f97700711240216u79ccb5d1ufe0bf7356bcb7a47@mail.gmail.com> <474864BF.8060206@USherbrooke.ca> Message-ID: <223f97700711260214o4b3bfbeep949f173a078e4fad@mail.gmail.com> On 24/11/2007, Denis Beauchemin wrote: > Glenn Steen a ?crit : > > On 24/11/2007, Denis Beauchemin wrote: > > > >> Gerry Doris a ?crit : > >> > >>> shuttlebox wrote: > >>> > >>>> On Nov 23, 2007 10:04 PM, Denis Beauchemin > >>>> wrote: > >>>> > >>>> > >>>>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data > >>>>>>> > >>>>>>> > >>>>> I'm not sure I understand your question... it takes 48 hours to backup > >>>>> to disk! > >>>>> > >>>>> Of course, we can't afford to stop Exchange to either backup or restore > >>>>> data. Everything has to be done online... > >>>>> > >>>>> > >>>> Something is very wrong. We use Legato Networker on Solaris and it > >>>> backs up many TB during the night including at least six Exchange > >>>> servers each with larger databases than yours. Of course we spread the > >>>> full backups so most servers only gets a diff or inc backup but still > >>>> the full backups never takes more than a few hours. > >>>> > >>>> > >>>> > >>> We generally install either Legato or Veritas and backup many Exchange > >>> servers/TBs overnight. Check to make sure that the servers are being > >>> kicked off at different times...don't try and start everyone at > >>> midnight! 250GB is nothing. > >>> > >> I agree with all of you. It should not take so much time... disks are > >> on a local raid5 box. I think the time is spent extracting people's > >> mailboxes from the db and copying them to disk... but still, it takes > >> way too long... > >> > >> How do you restore a single mailbox or some emails? Do you have to > >> restore the hole db and then extract the relevant emails? If so, it is > >> a waste of time and resources... unless there isn't any other way... I > >> think this is what they are trying to avoid but obviously it is not > >> working very well... > >> > >> Thanks! > >> > >> Denis > >> > >> > > I'm not the Echange admin (thank god!), but IIRC what he does is that > > he effectively "doubles" the size of the backup by exporting all the > > mailboxes first.... And the echange module is supposed to facilitate > > this too, but ... this was easier:-):-). > > Our Exchange database seem to be the same saze (or slightly larger) as > > yours... Shouldn't be taing 48 hours:-). > > > > If you like, I can have a chat with him come monday, to get the gory details. > > > > Cheers > > > Hi Glenn, > > Yes, please tell me more about your setup. > Ahm, as I said.... I'm not the "exchange guy":-). Just had a chat with him... Seems we only did the stupid export thing for a very short while before transitioning to Exchange 2k3. His emphatic advice is to only do an Information Store backup, and use a method (described "in some docs by M$", his words, not mine:-) where you work with a secondary (offline) database to do individual mailbox restore. Since we work with disk backup, this is lightning-fast. The secondary DB isn't large, and you purportedly don't restore the entire thing... And he further asserts that this didn't work with exchange prior to 2k3. And that's the sum of that:-). I imagine this is pretty much what everyone else have been telling you;-) (Sometimes that guy can be ... less than communicative:-/. Sorry for the poor detail.) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From raylund.lai at kankanwoo.com Mon Nov 26 11:17:50 2007 From: raylund.lai at kankanwoo.com (Raylund Lai) Date: Mon Nov 26 11:20:22 2007 Subject: OT: MS Exchange backups In-Reply-To: <223f97700711260214o4b3bfbeep949f173a078e4fad@mail.gmail.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> <223f97700711240216u79ccb5d1ufe0bf7356bcb7a47@mail.gmail.com> <474864BF.8060206@USherbrooke.ca> <223f97700711260214o4b3bfbeep949f173a078e4fad@mail.gmail.com> Message-ID: <474AAB5E.2020202@kankanwoo.com> Glenn Steen wrote: > On 24/11/2007, Denis Beauchemin wrote: > >> Glenn Steen a ?crit : >> >>> On 24/11/2007, Denis Beauchemin wrote: >>> >>> >>>> Gerry Doris a ?crit : >>>> >>>> >>>>> shuttlebox wrote: >>>>> >>>>> >>>>>> On Nov 23, 2007 10:04 PM, Denis Beauchemin >>>>>> wrote: >>>>>> >>>>>> >>>>>> >>>>>>>>> Manager (TSM) and Backup Exec but couldn't backup our 250GB data >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>> I'm not sure I understand your question... it takes 48 hours to backup >>>>>>> to disk! >>>>>>> >>>>>>> Of course, we can't afford to stop Exchange to either backup or restore >>>>>>> data. Everything has to be done online... >>>>>>> >>>>>>> >>>>>>> >>>>>> Something is very wrong. We use Legato Networker on Solaris and it >>>>>> backs up many TB during the night including at least six Exchange >>>>>> servers each with larger databases than yours. Of course we spread the >>>>>> full backups so most servers only gets a diff or inc backup but still >>>>>> the full backups never takes more than a few hours. >>>>>> >>>>>> >>>>>> >>>>>> >>>>> We generally install either Legato or Veritas and backup many Exchange >>>>> servers/TBs overnight. Check to make sure that the servers are being >>>>> kicked off at different times...don't try and start everyone at >>>>> midnight! 250GB is nothing. >>>>> >>>>> >>>> I agree with all of you. It should not take so much time... disks are >>>> on a local raid5 box. I think the time is spent extracting people's >>>> mailboxes from the db and copying them to disk... but still, it takes >>>> way too long... >>>> >>>> How do you restore a single mailbox or some emails? Do you have to >>>> restore the hole db and then extract the relevant emails? If so, it is >>>> a waste of time and resources... unless there isn't any other way... I >>>> think this is what they are trying to avoid but obviously it is not >>>> working very well... >>>> >>>> Thanks! >>>> >>>> Denis >>>> >>>> >>>> >>> I'm not the Echange admin (thank god!), but IIRC what he does is that >>> he effectively "doubles" the size of the backup by exporting all the >>> mailboxes first.... And the echange module is supposed to facilitate >>> this too, but ... this was easier:-):-). >>> Our Exchange database seem to be the same saze (or slightly larger) as >>> yours... Shouldn't be taing 48 hours:-). >>> >>> If you like, I can have a chat with him come monday, to get the gory details. >>> >>> Cheers >>> >>> >> Hi Glenn, >> >> Yes, please tell me more about your setup. >> >> > Ahm, as I said.... I'm not the "exchange guy":-). Just had a chat with > him... Seems we only did the stupid export thing for a very short > while before transitioning to Exchange 2k3. > His emphatic advice is to only do an Information Store backup, and use > a method (described "in some docs by M$", his words, not mine:-) where > you work with a secondary (offline) database to do individual mailbox > restore. Since we work with disk backup, this is lightning-fast. The > secondary DB isn't large, and you purportedly don't restore the entire > thing... And he further asserts that this didn't work with exchange > prior to 2k3. And that's the sum of that:-). I imagine this is pretty > much what everyone else have been telling you;-) > (Sometimes that guy can be ... less than communicative:-/. Sorry for > the poor detail.) > > Cheers > Yes, he's right. Especially when using ntbackup as it doesn't provide individual mailbox backup. With Exchange agent that backup software provided, individual mailbox could be backup. This is normally the setup of them. To backup individual mailbox, care should be taken on the mailboxes. I faced on some mailboxes that have corrupted emails inside. These generated a lot of errors or warnings and timeout (BackupExec) . So the backup logs should be read to see what is happening. Cheers Raylund -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071126/ccfcba97/attachment.html From martinh at solidstatelogic.com Mon Nov 26 11:32:16 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Mon Nov 26 11:32:11 2007 Subject: SDB bayes files Message-ID: <5093096a9804da48a31c2a7ad811eca2@solidstatelogic.com> Jules Not sure if this 'just me' or something else, but moving to SDB based bayes means the MailScanner bayes-rebuild doesn't seem to be happening.. Running a "sa-learn --force-expire" manually does indeed work. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From cleveland at winnefox.org Mon Nov 26 14:10:34 2007 From: cleveland at winnefox.org (Jody Cleveland) Date: Mon Nov 26 14:10:38 2007 Subject: MailScanner --debug error Message-ID: Hello, After many complaints of mail processing being slow, I decided to run MailScanner --debug to try and see if there were any errors. The first one to come up was this: Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1087. Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1089. That area of the SpamAssassin.pm says this: if (!open(IN,"<$filename")) { dbg("config: read_scoreonly_config: cannot open \"$filename\": $!"); return; } I've never modified that file, so it should have all the default information in there. Any ideas what may be wrong? - jody From mwilson at cobasys.com Mon Nov 26 14:07:45 2007 From: mwilson at cobasys.com (Mike Wilson) Date: Mon Nov 26 14:11:47 2007 Subject: Support for 'Trend Micro Email Reputation Services' In-Reply-To: <5093096a9804da48a31c2a7ad811eca2@solidstatelogic.com> Message-ID: <2C7100720056A2408E0DC6795A5CDF0A04452629@COBS-EXCH-01.texaco.ovonic> Is there, or will there be support for 'Trend Micro Email Reputation Services' (formerly Mail-Abuse.org) within MailScanner? Or can I just add the Sendmail configuration info into sendmail & have Mailscanner use it through that channel? Mike Wilson Excerpt from 'spam.lists.conf' # MAPS now charge for their services, so you'll have to buy a contract before # attempting to use the next 3 lines. MAPS-RBL blackholes.mail-abuse.org. MAPS-DUL dialups.mail-abuse.org. MAPS-RSS relays.mail-abuse.org. -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. From jerry.owens at fmr.com Mon Nov 26 15:03:53 2007 From: jerry.owens at fmr.com (Owens, Jerry) Date: Mon Nov 26 15:03:58 2007 Subject: New installation configuration question. References: <641E82DC34CF514F82C95407D253E37A01176DE6@MSGMROCLS2WIN.DMN1.FMR.COM><473CBA72.9000505@ecs.soton.ac.uk> <223f97700711160100q770b9abfw39b96f27abeb89f0@mail.gmail.com> Message-ID: <641E82DC34CF514F82C95407D253E37AD07D61@MSGMROCLS2WIN.DMN1.FMR.COM> I finally got around to installing the newest version of MailScanner and it is processing mail now. Thanks for all of the advice. Jerry -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Glenn Steen Sent: Friday, November 16, 2007 4:01 AM To: MailScanner discussion Subject: Re: New installation configuration question. On 15/11/2007, Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > This looks to me to be a Postfix configuration problem, and not a > MailScanner one. > It is failing to recognise the address > jowens@computeryardsale.net > which it thinks should be local. > > Without the line in header_checks that sends mail to MailScanner, does > the symptom change at all? What happens when you tell it to send a > message to jowens@computeryardsale.net then? > > Jules. With that log, I don't see any real need to do that:-). It'll fail miserably then too... A "postconf -n" would be good here, as well as a word or two on how you _think_ you've set it... Is jowens a real user or a virtual one? Local or relay? Or did you already tell, and I'm just a sloppy reader?:-) Another thing: You are running a rather new Postfix version (2.4.5) and a rather old MailScanner (4.46.2)... There has been a bit of work done on the PF support for newer versions in MS, so you might want to *not* use that old debian package... Either use the tarball, or look for a newer .deb (I'm not quite sure which version is the latest debian... 4.55.10 seems a bit mouldy as well...). If you use the tarball, Jules provides the needed init script on the download page at http://www.mailscanner.info ... > Owens, Jerry wrote: (snip) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Mon Nov 26 15:22:24 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 26 15:23:07 2007 Subject: Support for 'Trend Micro Email Reputation Services' Message-ID: <474AE4B0.8000703@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 What support do you want? - ------- Is there, or will there be support for 'Trend Micro Email Reputation Services' (formerly Mail-Abuse.org) within MailScanner? Or can I just add the Sendmail configuration info into sendmail & have Mailscanner use it through that channel? Mike Wilson Excerpt from 'spam.lists.conf' # MAPS now charge for their services, so you'll have to buy a contract before # attempting to use the next 3 lines. MAPS-RBL blackholes.mail-abuse.org. MAPS-DUL dialups.mail-abuse.org. MAPS-RSS relays.mail-abuse.org. - -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHSuTKEfZZRxQVtlQRAlb6AKDVF2UTlOWr24daTog7CX24ks7h8wCeNU6Y J/l26ZQmBqhvFYjxT2B8HeI= =Z7X6 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From campbell at cnpapers.com Mon Nov 26 15:50:44 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Mon Nov 26 15:50:59 2007 Subject: Set it and forget it? Message-ID: <474AEB54.3040209@cnpapers.com> I'm curious as to how much time is spent by most of the email admins here using MS. I realize that some of my efforts could be streamlined by upgrading to the latest release, but the people here seem to think that this is a "set it and forget it" type of operation. There is a real problem here in that people want all the mail they are supposed to get, and 100% trashing of the email they shouldn't get. I find that I spend a little time daily managing this stuff, but my system isn't like anyone else's who's system isn't like the next guy's ..... A specific question I have, though, would be: I think I was following a thread a while back about an RBL that has some specifics for blocking those "Address may be forged" emails (Zen or something like that). Can anyone elaborate on that for me and let me know how to set it up on my 4.52.2 version until I get it upgraded. I do all of my RBL checks in SA. Thanks for any sympathy anyone may have. steve From ugob at lubik.ca Mon Nov 26 16:17:52 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Mon Nov 26 16:28:26 2007 Subject: Set it and forget it? In-Reply-To: <474AEB54.3040209@cnpapers.com> References: <474AEB54.3040209@cnpapers.com> Message-ID: Steve Campbell wrote: > I'm curious as to how much time is spent by most of the email admins > here using MS. I realize that some of my efforts could be streamlined by > upgrading to the latest release, but the people here seem to think that > this is a "set it and forget it" type of operation. I don't believe that. > > There is a real problem here in that people want all the mail they are > supposed to get, and 100% trashing of the email they shouldn't get. I > find that I spend a little time daily managing this stuff, but my system > isn't like anyone else's who's system isn't like the next guy's ..... Well, the more time you spend on your system, the better it will run, but don't worry, we do have some issues with our users as well! > A specific question I have, though, would be: > > I think I was following a thread a while back about an RBL that has some > specifics for blocking those "Address may be forged" emails (Zen or > something like that). Can anyone elaborate on that for me and let me > know how to set it up on my 4.52.2 version until I get it upgraded. I do > all of my RBL checks in SA. Well, using zen.spamhaus.org at the MTA level could help you a lot. I've never seen a false positive from that list ever. Regarding your question, "Address may be forged"... What address do you mean, in your sendmail logs or e-mail address (spf, domain keys, senderID, etc)? Regards, Ugo From goetz.reinicke at filmakademie.de Mon Nov 26 15:55:53 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Mon Nov 26 16:46:10 2007 Subject: How to test virusscanners - which one is the fastets :-)? Message-ID: <474AEC89.4080209@filmakademie.de> Hi, currently we use f-secures commandline-scanner, but have to bye new licences soon. As we don't have to stay with f-secure; hom may I test the performance of other scanners; e.g. from mcaffee or f-prod ... antivir etc? Any ideas? Or dose someone has done a test? Thanks for hints and best regards G?tz Reinicke -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From mwilson at cobasys.com Mon Nov 26 16:55:42 2007 From: mwilson at cobasys.com (Mike Wilson) Date: Mon Nov 26 17:04:18 2007 Subject: Support for 'Trend Micro Email Reputation Services' In-Reply-To: <474AE4B0.8000703@ecs.soton.ac.uk> Message-ID: <2C7100720056A2408E0DC6795A5CDF0A04452828@COBS-EXCH-01.texaco.ovonic> My bad... To more define The MAPS spam list started charginging for their services, then Trend Micro bought them out and now has named the RBLs to the 'Trend Micro Email Reputation Services (edition_name)' We are thinking of using hteir RBL as it it a minimal coist to us with the additional services we alread use of theirs. Our question should have been, has anyone else used 'Trend Micro Email Reputation Services' and how is the easiest wayu to get the Trend Micro RBLs working with MailScanner Mike -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field Sent: Monday, November 26, 2007 10:22 To: MailScanner discussion Subject: Support for 'Trend Micro Email Reputation Services' -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 What support do you want? - ------- Is there, or will there be support for 'Trend Micro Email Reputation Services' (formerly Mail-Abuse.org) within MailScanner? Or can I just add the Sendmail configuration info into sendmail & have Mailscanner use it through that channel? Mike Wilson Excerpt from 'spam.lists.conf' # MAPS now charge for their services, so you'll have to buy a contract before # attempting to use the next 3 lines. MAPS-RBL blackholes.mail-abuse.org. MAPS-DUL dialups.mail-abuse.org. MAPS-RSS relays.mail-abuse.org. - -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHSuTKEfZZRxQVtlQRAlb6AKDVF2UTlOWr24daTog7CX24ks7h8wCeNU6Y J/l26ZQmBqhvFYjxT2B8HeI= =Z7X6 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. From campbell at cnpapers.com Mon Nov 26 17:37:42 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Mon Nov 26 17:37:57 2007 Subject: Set it and forget it? In-Reply-To: References: <474AEB54.3040209@cnpapers.com> Message-ID: <474B0466.6080804@cnpapers.com> Ugo Bellavance wrote: > Steve Campbell wrote: >> I'm curious as to how much time is spent by most of the email admins >> here using MS. I realize that some of my efforts could be streamlined >> by upgrading to the latest release, but the people here seem to think >> that this is a "set it and forget it" type of operation. > > I don't believe that. Gosh, maybe it _is_ me then. > >> >> There is a real problem here in that people want all the mail they >> are supposed to get, and 100% trashing of the email they shouldn't >> get. I find that I spend a little time daily managing this stuff, but >> my system isn't like anyone else's who's system isn't like the next >> guy's ..... > > Well, the more time you spend on your system, the better it will run, > but don't worry, we do have some issues with our users as well! > >> A specific question I have, though, would be: >> >> I think I was following a thread a while back about an RBL that has >> some specifics for blocking those "Address may be forged" emails (Zen >> or something like that). Can anyone elaborate on that for me and let >> me know how to set it up on my 4.52.2 version until I get it >> upgraded. I do all of my RBL checks in SA. > > Well, using zen.spamhaus.org at the MTA level could help you a lot. > I've never seen a false positive from that list ever. > I think I'd still prefer to do the check in SA as long as resources remain sufficient. Any other reason to put it at the MTA level? > Regarding your question, "Address may be forged"... What address do > you mean, in your sendmail logs or e-mail address (spf, domain keys, > senderID, etc)? > That's supposed to have been "(may be forged)" from the sendmail logs. > Regards, > > Ugo > Thanks for the info, though, Ugo. steve From richard.thomas at psysolutions.com Mon Nov 26 17:46:40 2007 From: richard.thomas at psysolutions.com (Richard Thomas) Date: Mon Nov 26 17:46:42 2007 Subject: BBB trojan In-Reply-To: <03ed01c7eb10$be41dce0$3ac596a0$@swaney@fsl.com> References: <03ed01c7eb10$be41dce0$3ac596a0$@swaney@fsl.com> Message-ID: <474B0680.5080309@psysolutions.com> Stephen Swaney wrote: > Heads up. We just started seeing these and they look nasty. > > Subject: BBB Complaint for Elizabeth MeHaffey [Case id: > #48556fc5ba482c6f07ada256696597e1] > > they purport to be a Better Business Bureau compliant against the company > and the recipient of the fraud. > > Going to a link in the document downloads an executable that is probably not > going to be good for your computer. > Saw one today with the following subject: "Complaint case 044180428. In attention to XXXXX XXXXX" Where XXXXX XXXXX is the name of one of our senior execs. Attached was a .DOC file with what is supposed to look like a PDF inside. Got past Trend mail scanning service and MailScanner but fortunately, not the cynical exec. Anyone got a good block recipe for these? Can't really post the whole email as it has information (Company name [OK, not hard to work out]) and the exec's name too. Thanks Rich From uxbod at splatnix.net Mon Nov 26 17:59:16 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 26 17:59:27 2007 Subject: Support for 'Trend Micro Email Reputation Services' In-Reply-To: <2C7100720056A2408E0DC6795A5CDF0A04452828@COBS-EXCH-01.texaco.ovonic> Message-ID: <22535101.2131196099956232.JavaMail.root@office.splatnix.net> If they follow the normal convention for RBLs then in /etc is a file, sorry not at machine, which contains a list of RBLs with a short name and associated dns name. Add a new one to this, and then in your MailScanner.conf just add the short name to your RBL list. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Mike Wilson" To: "MailScanner discussion" Sent: Monday, November 26, 2007 4:55:42 PM (GMT) Europe/London Subject: RE: Support for 'Trend Micro Email Reputation Services' My bad... To more define The MAPS spam list started charginging for their services, then Trend Micro bought them out and now has named the RBLs to the 'Trend Micro Email Reputation Services (edition_name)' We are thinking of using hteir RBL as it it a minimal coist to us with the additional services we alread use of theirs. Our question should have been, has anyone else used 'Trend Micro Email Reputation Services' and how is the easiest wayu to get the Trend Micro RBLs working with MailScanner Mike -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field Sent: Monday, November 26, 2007 10:22 To: MailScanner discussion Subject: Support for 'Trend Micro Email Reputation Services' -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 What support do you want? - ------- Is there, or will there be support for 'Trend Micro Email Reputation Services' (formerly Mail-Abuse.org) within MailScanner? Or can I just add the Sendmail configuration info into sendmail & have Mailscanner use it through that channel? Mike Wilson Excerpt from 'spam.lists.conf' # MAPS now charge for their services, so you'll have to buy a contract before # attempting to use the next 3 lines. MAPS-RBL blackholes.mail-abuse.org. MAPS-DUL dialups.mail-abuse.org. MAPS-RSS relays.mail-abuse.org. - -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHSuTKEfZZRxQVtlQRAlb6AKDVF2UTlOWr24daTog7CX24ks7h8wCeNU6Y J/l26ZQmBqhvFYjxT2B8HeI= =Z7X6 -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner Relay-B, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Mon Nov 26 18:00:38 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 26 18:00:50 2007 Subject: How to test virusscanners - which one is the fastets :-)? In-Reply-To: <474AEC89.4080209@filmakademie.de> Message-ID: <24264921.2161196100038489.JavaMail.root@office.splatnix.net> well according to the VB100 tests NOD32 (http://www.nod32.com) is one of the fastest around. Check out their site as they do have a comparison page. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "G?tz Reinicke" To: "MailScanner discussion " Sent: Monday, November 26, 2007 3:55:53 PM (GMT) Europe/London Subject: How to test virusscanners - which one is the fastets :-)? Hi, currently we use f-secures commandline-scanner, but have to bye new licences soon. As we don't have to stay with f-secure; hom may I test the performance of other scanners; e.g. from mcaffee or f-prod ... antivir etc? Any ideas? Or dose someone has done a test? Thanks for hints and best regards G?tz Reinicke -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From hvdkooij at vanderkooij.org Mon Nov 26 18:12:10 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 26 18:12:31 2007 Subject: Support for 'Trend Micro Email Reputation Services' In-Reply-To: <2C7100720056A2408E0DC6795A5CDF0A04452828@COBS-EXCH-01.texaco.ovonic> References: <2C7100720056A2408E0DC6795A5CDF0A04452828@COBS-EXCH-01.texaco.ovonic> Message-ID: <474B0C7A.2090000@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mike Wilson wrote: > My bad... To more define > The MAPS spam list started charginging for their services, then Trend > Micro bought them out and now has named the RBLs to the 'Trend Micro > Email Reputation Services (edition_name)' > > We are thinking of using hteir RBL as it it a minimal coist to us with > the additional services we alread use of theirs. > Our question should have been, has anyone else used 'Trend Micro Email > Reputation Services' and how is the easiest wayu to get the Trend Micro > RBLs working with MailScanner Piece of cake. In spam.lists.conf: MAPS-RBL blackholes.mail-abuse.org. MAPS-DUL dialups.mail-abuse.org. MAPS-RSS relays.mail-abuse.org. ERS SBENF4XS7Z4RP4EUTQ4V8A3KF4Z5P2F.r.mail-abuse.com Then use ERS in your config as just another RBL. Actualy. If your organisation is running Trend Micro you can use that activation code if you have ERS support in the product. I know it works because I have tested it for a month. But I moved the ERS filter to postfix because I had not a single false positive in a month for the whole family. (5 bro, 5 sis-in-law, loads of kids between them ;-) I have been testing both variants but I found no reason to choose the expensive one. It did work identical to the normal one for me. The smallest bundle is 25 users which just covers the family. Hugo. PS: The code listed is an expired demo key. So no point in trying to use it ;) PS/2: The hint to use another product for the ERS function came from a Trend Micro sales engineer. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHSwx4BvzDRVjxmYERAl/aAKCcmY3lmSjafdlh5ddOQLCIyrP5dgCgtbGg JXWerlR3uSY78xLeunC7uxg= =xSJL -----END PGP SIGNATURE----- From hvdkooij at vanderkooij.org Mon Nov 26 18:21:59 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 26 18:22:36 2007 Subject: Set it and forget it? In-Reply-To: <474AEB54.3040209@cnpapers.com> References: <474AEB54.3040209@cnpapers.com> Message-ID: <474B0EC7.7020303@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Steve Campbell wrote: > I'm curious as to how much time is spent by most of the email admins > here using MS. I realize that some of my efforts could be streamlined by > upgrading to the latest release, but the people here seem to think that > this is a "set it and forget it" type of operation. I think you refer to something else but the mailinglist in your "the people here"? I think that MailScanner requires comparatively little maintenance in regard to the effect it has on holding off the flood. But ANY solution will require some administrative attention. Anyone telling you differently is error where the thruth is concerned. (I am just a bit cautious in case there happens to be a Minbari in the house.) > There is a real problem here in that people want all the mail they are > supposed to get, and 100% trashing of the email they shouldn't get. I > find that I spend a little time daily managing this stuff, but my system > isn't like anyone else's who's system isn't like the next guy's ..... Anyone who expects a spam fighting solution to score 0% false positives and 0% false negatives should be educated by removing all filters for a single day and let them wade through the extra shitload of email. That will learn them to appriciate the current effort put in the matter for relative little gratitude. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHSw7EBvzDRVjxmYERApnFAJwPx+gutH06DtTqOuA4e1plcbV+GQCgsKlR G8FbfEekDAu4Z1/Qqvft0MY= =uGQt -----END PGP SIGNATURE----- From Denis.Beauchemin at USherbrooke.ca Mon Nov 26 18:28:08 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Mon Nov 26 18:29:11 2007 Subject: OT: MS Exchange backups In-Reply-To: <474AAB5E.2020202@kankanwoo.com> References: <47473237.1090308@USherbrooke.ca> <4747404D.5080201@USherbrooke.ca> <625385e30711231324j3f9552ffuc1cccab8fb6132fa@mail.gmail.com> <47474FFB.8090509@rogers.com> <474797D1.40204@USherbrooke.ca> <223f97700711240216u79ccb5d1ufe0bf7356bcb7a47@mail.gmail.com> <474864BF.8060206@USherbrooke.ca> <223f97700711260214o4b3bfbeep949f173a078e4fad@mail.gmail.com> <474AAB5E.2020202@kankanwoo.com> Message-ID: <474B1038.5060106@USherbrooke.ca> Raylund Lai a ?crit : > > Yes, he's right. Especially when using ntbackup as it doesn't provide > individual mailbox backup. > > With Exchange agent that backup software provided, individual mailbox > could be backup. This is normally the setup of them. > > To backup individual mailbox, care should be taken on the mailboxes. > I faced on some mailboxes that have corrupted emails inside. These > generated a lot of errors or warnings and timeout (BackupExec) . So > the backup logs should be read to see what is happening. > > Cheers > Raylund Thank you all for your feedback. I now have some reading to do and some questions to ask the Exchange admin. Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universit? de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 From hvdkooij at vanderkooij.org Mon Nov 26 18:32:46 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Mon Nov 26 18:33:10 2007 Subject: How to test virusscanners - which one is the fastets :-)? In-Reply-To: <474AEC89.4080209@filmakademie.de> References: <474AEC89.4080209@filmakademie.de> Message-ID: <474B114E.1010504@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 G?tz Reinicke wrote: > Hi, > > currently we use f-secures commandline-scanner, but have to bye new > licences soon. > > As we don't have to stay with f-secure; hom may I test the performance > of other scanners; e.g. from mcaffee or f-prod ... antivir etc? > > Any ideas? Or dose someone has done a test? I have done some tests for completely different purposes. Like wanting to know how each scanners calls each and every sample in the 100k+ collection. I can tell you about the time the same batch took for a number of scanners. But it will not be real accurate for your purpose. If scanning takes little time but starting the scanner takes some serious time then that scanner will drag down the throughput of your MailScanner box in a very serious manner. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHSxFMBvzDRVjxmYERAv1GAKCQZMOjj3AUDO/z7wdd6KaefFtB4gCdEwNS pitu7baK4Jws6sz08PSmi6E= =GsSv -----END PGP SIGNATURE----- From campbell at cnpapers.com Mon Nov 26 19:09:20 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Mon Nov 26 19:10:17 2007 Subject: Set it and forget it? In-Reply-To: <474B0EC7.7020303@vanderkooij.org> References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> Message-ID: <474B19E0.9070707@cnpapers.com> Hugo van der Kooij wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Steve Campbell wrote: > >> I'm curious as to how much time is spent by most of the email admins >> here using MS. I realize that some of my efforts could be streamlined by >> upgrading to the latest release, but the people here seem to think that >> this is a "set it and forget it" type of operation. >> > > I think you refer to something else but the mailinglist in your "the > people here"? > Correct, that's meant to be the people here (in this building), not the people here (in this mailing list). I guess some of it could be both if others "here" belonged to the list "there". > I think that MailScanner requires comparatively little maintenance in > regard to the effect it has on holding off the flood. But ANY solution > will require some administrative attention. > > Anyone telling you differently is error where the thruth is concerned. > (I am just a bit cautious in case there happens to be a Minbari in the > house.) > It's just frustrating to put that concentrated effort, no matter how little or large amount of time it may be, to keep getting the "what's wrong with our mail system" attitude. This is a daily newspaper, and people expect immediate resolution for any mail problem. Funny, how it's so different, when I ask a reporter why a story I just heard about on the radio isn't in the current newspaper edition. Yeah, frustrating. that's the word I'd use. > >> There is a real problem here in that people want all the mail they are >> supposed to get, and 100% trashing of the email they shouldn't get. I >> find that I spend a little time daily managing this stuff, but my system >> isn't like anyone else's who's system isn't like the next guy's ..... >> > > Anyone who expects a spam fighting solution to score 0% false positives > and 0% false negatives should be educated by removing all filters for a > single day and let them wade through the extra shitload of email. That > will learn them to appriciate the current effort put in the matter for > relative little gratitude. > And they forget we have corrections and pickups for every edition here. Not a false positive, but just inaccuracy and mistakes and misspellings. OK, I'll let it die now - thanks steve > Hugo. > > - -- > hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ > PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc > > A: Yes. > >Q: Are you sure? > >>A: Because it reverses the logical flow of conversation. > >>>Q: Why is top posting frowned upon? > > Bored? Click on http://spamornot.org/ and rate those images. > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > > iD8DBQFHSw7EBvzDRVjxmYERApnFAJwPx+gutH06DtTqOuA4e1plcbV+GQCgsKlR > G8FbfEekDAu4Z1/Qqvft0MY= > =uGQt > -----END PGP SIGNATURE----- > From Kevin_Miller at ci.juneau.ak.us Mon Nov 26 19:31:23 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Mon Nov 26 19:30:43 2007 Subject: Set it and forget it? In-Reply-To: <474B19E0.9070707@cnpapers.com> References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> <474B19E0.9070707@cnpapers.com> Message-ID: Steve Campbell wrote: > It's just frustrating to put that concentrated effort, no matter how > little or large amount of time it may be, to keep getting the "what's > wrong with our mail system" attitude. This is a daily newspaper, and > people expect immediate resolution for any mail problem. Funny, how > it's so different, when I ask a reporter why a story I just heard > about on the radio isn't in the current newspaper edition. What I usually do when I encounter a user like that is send them a screen shot from MailWatch showing the stats on mail received and mail filtered. Then I explain to them that I additionally reject substantially more than that at the MTA level which never makes it into the MailWatch stats. When they see that we filtered out thousands of spams a day they usually quit whining about the one or two they may have gotten. I'd love to turn the filters off for just one day. Just one. Just to let the users know what we actually do for them. I'd like to win the lottery too. Not holding my breath on either... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From mkercher at nfsmith.com Mon Nov 26 19:36:21 2007 From: mkercher at nfsmith.com (Mike Kercher) Date: Mon Nov 26 19:36:27 2007 Subject: Set it and forget it? In-Reply-To: References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org><474B19E0.9070707@cnpapers.com> Message-ID: <224FA7E11EA39E45843E11CEBBD3A36F531EB8@HOUPEX01.nfsmith.info> -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Kevin Miller Sent: Monday, November 26, 2007 1:31 PM To: MailScanner discussion Subject: RE: Set it and forget it? I'd love to turn the filters off for just one day. Just one. Just to let the users know what we actually do for them. I'd like to win the lottery too. Not holding my breath on either... ...Kevin --------------------------- You mean you didn't get your Winning Lottery Notification last week?! -Mike From ugob at lubik.ca Mon Nov 26 19:36:48 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Mon Nov 26 19:37:04 2007 Subject: Set it and forget it? In-Reply-To: <474B0466.6080804@cnpapers.com> References: <474AEB54.3040209@cnpapers.com> <474B0466.6080804@cnpapers.com> Message-ID: Steve Campbell wrote: > > > Ugo Bellavance wrote: >> Steve Campbell wrote: >>> I'm curious as to how much time is spent by most of the email admins >>> here using MS. I realize that some of my efforts could be streamlined >>> by upgrading to the latest release, but the people here seem to think >>> that this is a "set it and forget it" type of operation. >> >> I don't believe that. > Gosh, maybe it _is_ me then. Not sure. What I meant is similar to what Hugo said. It does need maintenance, as spam is evolving. We see a new version of SA almost every 3 months, MS about the same, then razor, DCC, system updates. More components you have, more effective it is, but more maintenance it requires. What I meant is that it is not a system that you can install and let hum for a few months w/o touching it. >>> There is a real problem here in that people want all the mail they >>> are supposed to get, and 100% trashing of the email they shouldn't >>> get. I find that I spend a little time daily managing this stuff, but >>> my system isn't like anyone else's who's system isn't like the next >>> guy's ..... >> >> Well, the more time you spend on your system, the better it will run, >> but don't worry, we do have some issues with our users as well! >> >>> A specific question I have, though, would be: >>> >>> I think I was following a thread a while back about an RBL that has >>> some specifics for blocking those "Address may be forged" emails (Zen >>> or something like that). Can anyone elaborate on that for me and let >>> me know how to set it up on my 4.52.2 version until I get it >>> upgraded. I do all of my RBL checks in SA. >> >> Well, using zen.spamhaus.org at the MTA level could help you a lot. >> I've never seen a false positive from that list ever. >> > I think I'd still prefer to do the check in SA as long as resources > remain sufficient. Any other reason to put it at the MTA level? Yes, accuracy. If a message is on zen.spamhaus.org it gets a score added. So there is still some chances that your user sees it in its mailbox. From my experience, if a message is blocked at the MTA, it is spam or a user that is not using it's ISP's mail server as he/she should. >> Regarding your question, "Address may be forged"... What address do >> you mean, in your sendmail logs or e-mail address (spf, domain keys, >> senderID, etc)? >> > > That's supposed to have been "(may be forged)" from the sendmail logs. This relates to full-circle DNS. http://www.sendmail.org/faq/section3.html#3.38 I consider it as too strict to reject at the MTA level based on this. Ugo From Kevin_Miller at ci.juneau.ak.us Mon Nov 26 19:42:07 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Mon Nov 26 19:41:23 2007 Subject: Set it and forget it? In-Reply-To: <224FA7E11EA39E45843E11CEBBD3A36F531EB8@HOUPEX01.nfsmith.info> References: <474AEB54.3040209@cnpapers.com><474B0EC7.7020303@vanderkooij.org><474B19E0.9070707@cnpapers.com> <224FA7E11EA39E45843E11CEBBD3A36F531EB8@HOUPEX01.nfsmith.info> Message-ID: Mike Kercher wrote: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Kevin > Miller > Sent: Monday, November 26, 2007 1:31 PM > To: MailScanner discussion > Subject: RE: Set it and forget it? > > > I'd love to turn the filters off for just one day. Just one. Just to > let the users know what we actually do for them. I'd like to win the > lottery too. Not holding my breath on either... > > ...Kevin > > --------------------------- > > You mean you didn't get your Winning Lottery Notification last week?! Doh!! See, yet another reason to turn those dang filters off! ;-) ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From J.Ede at birchenallhowden.co.uk Mon Nov 26 19:52:54 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Mon Nov 26 19:54:01 2007 Subject: Set it and forget it? In-Reply-To: References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> <474B19E0.9070707@cnpapers.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEA5DEA@server02.bhl.local> > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Kevin Miller > Sent: 26 November 2007 19:31 > To: MailScanner discussion > Subject: RE: Set it and forget it? > > Steve Campbell wrote: > > It's just frustrating to put that concentrated effort, no matter how > > little or large amount of time it may be, to keep getting the "what's > > wrong with our mail system" attitude. This is a daily newspaper, and > > people expect immediate resolution for any mail problem. Funny, how > > it's so different, when I ask a reporter why a story I just heard > > about on the radio isn't in the current newspaper edition. > > What I usually do when I encounter a user like that is send them a > screen shot from MailWatch showing the stats on mail received and mail > filtered. Then I explain to them that I additionally reject > substantially more than that at the MTA level which never makes it into > the MailWatch stats. When they see that we filtered out thousands of > spams a day they usually quit whining about the one or two they may > have > gotten. > > I'd love to turn the filters off for just one day. Just one. Just to > let the users know what we actually do for them. I'd like to win the > lottery too. Not holding my breath on either... We had a client who wanted their filtering turned off as they didn't think they needed it... 3 days later they wanted it back on again! I'd love to be able to turn it off for some users just briefly to show them the amount of garbage that is really coming in, but the bulk of the spam is blocked at MTA level which I'm not really prepared to just turn off.... Jason From campbell at cnpapers.com Mon Nov 26 20:08:28 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Mon Nov 26 20:08:33 2007 Subject: Set it and forget it? In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEA5DEA@server02.bhl.local> References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> <474B19E0.9070707@cnpapers.com> <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEA5DEA@server02.bhl.local> Message-ID: <474B27BC.9090603@cnpapers.com> To all suggesting I turn filtering off for one user: They'd just think the mail system really stunk, and not realize that I had stopped helping them. I'm finding most of the users who are complaining are only getting five or six bad emails per day or two. steve Jason Ede wrote: >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of Kevin Miller >> Sent: 26 November 2007 19:31 >> To: MailScanner discussion >> Subject: RE: Set it and forget it? >> >> Steve Campbell wrote: >> >>> It's just frustrating to put that concentrated effort, no matter how >>> little or large amount of time it may be, to keep getting the "what's >>> wrong with our mail system" attitude. This is a daily newspaper, and >>> people expect immediate resolution for any mail problem. Funny, how >>> it's so different, when I ask a reporter why a story I just heard >>> about on the radio isn't in the current newspaper edition. >>> >> What I usually do when I encounter a user like that is send them a >> screen shot from MailWatch showing the stats on mail received and mail >> filtered. Then I explain to them that I additionally reject >> substantially more than that at the MTA level which never makes it into >> the MailWatch stats. When they see that we filtered out thousands of >> spams a day they usually quit whining about the one or two they may >> have >> gotten. >> >> I'd love to turn the filters off for just one day. Just one. Just to >> let the users know what we actually do for them. I'd like to win the >> lottery too. Not holding my breath on either... >> > > We had a client who wanted their filtering turned off as they didn't think they needed it... 3 days later they wanted it back on again! > > I'd love to be able to turn it off for some users just briefly to show them the amount of garbage that is really coming in, but the bulk of the spam is blocked at MTA level which I'm not really prepared to just turn off.... > > Jason > From ajcartmell at fonant.com Mon Nov 26 20:21:32 2007 From: ajcartmell at fonant.com (Anthony Cartmell) Date: Mon Nov 26 20:21:37 2007 Subject: Set it and forget it? In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEA5DEA@server02.bhl.local> References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> <474B19E0.9070707@cnpapers.com> <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEA5DEA@server02.bhl.local> Message-ID: >> I'd love to turn the filters off for just one day. Just one. Just to >> let the users know what we actually do for them. and > I'd love to be able to turn it off for some users just briefly to show > them the amount of garbage that is really coming in I've been sending out a daily quarantine report using MailWatch to some users. Seems to be appreciated as they can see that there are no false positives, and also how much junk is being filtered out for them. Of course they don't see the stuff blocked at MTA level, but there's enough spam still to impress them! Looking forward to MailWatch 2, hoping for even more stuff that users can see :) Anthony. -- www.fonant.com - Quality web sites From campbell at cnpapers.com Mon Nov 26 20:28:44 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Mon Nov 26 20:28:49 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <4746B5C7.8000207@fsl.com> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> Message-ID: <474B2C7C.4090200@cnpapers.com> Steve Freegard wrote: > > It works, but don't expect it to load balance well. For that you > really do need a proper load-balancer that can examine metrics of each > of the back-end systems and direct connections to them accordingly. And could you please expand on what might be a good load-balancer? There's a lot of ideas about what is a good solution for load-balancing, failover, and all the other mechanisms needed. (This is OT, isn't it?). I have used UltraMonkey quite a while back, before it was really ARP-repaired. I am now thinking of returning to it, but it's difficult to find other solutions. Any pointers here would really help, Steve Steve > > Kind regards, > Steve. > > -- > Steve Freegard > Fort Systems Ltd. > Tel: +1 202 595 7760 x801 From uxbod at splatnix.net Mon Nov 26 20:34:35 2007 From: uxbod at splatnix.net (UxBoD) Date: Mon Nov 26 20:34:53 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <474B2C7C.4090200@cnpapers.com> Message-ID: <3520082.2251196109275567.JavaMail.root@office.splatnix.net> Steve, This is a good start http://www.google.co.uk/search?hl=en&q=linux+smtp+load+balancer+application+intelligent&btnG=Search&meta= but what it comes down to is do you require load balancing or resilience ? sorry but I deleted my old emails so how many servers are we talking about and how many diverse locations ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Steve Campbell" To: "MailScanner discussion" Sent: Monday, November 26, 2007 8:28:44 PM (GMT) Europe/London Subject: Re: OT: Load Balancing & redundancy using Multiple A records Steve Freegard wrote: > > It works, but don't expect it to load balance well. For that you > really do need a proper load-balancer that can examine metrics of each > of the back-end systems and direct connections to them accordingly. And could you please expand on what might be a good load-balancer? There's a lot of ideas about what is a good solution for load-balancing, failover, and all the other mechanisms needed. (This is OT, isn't it?). I have used UltraMonkey quite a while back, before it was really ARP-repaired. I am now thinking of returning to it, but it's difficult to find other solutions. Any pointers here would really help, Steve Steve > > Kind regards, > Steve. > > -- > Steve Freegard > Fort Systems Ltd. > Tel: +1 202 595 7760 x801 -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ms-list at alexb.ch Mon Nov 26 21:51:29 2007 From: ms-list at alexb.ch (Alex Broens) Date: Mon Nov 26 21:51:40 2007 Subject: How to test virusscanners - which one is the fastets :-)? In-Reply-To: <474AEC89.4080209@filmakademie.de> References: <474AEC89.4080209@filmakademie.de> Message-ID: <474B3FE1.3040201@alexb.ch> On 11/26/2007 4:55 PM, G?tz Reinicke wrote: > Hi, > > currently we use f-secures commandline-scanner, but have to bye new > licences soon. > > As we don't have to stay with f-secure; hom may I test the performance > of other scanners; e.g. from mcaffee or f-prod ... antivir etc? > > Any ideas? Or dose someone has done a test? > > Thanks for hints and best regards > > G?tz Reinicke very happy NOD32 user - on a bunch of boxes. Alex From ssilva at sgvwater.com Mon Nov 26 22:18:03 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 26 22:18:35 2007 Subject: Set it and forget it? In-Reply-To: References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> <474B19E0.9070707@cnpapers.com> Message-ID: on 11/26/2007 11:31 AM Kevin Miller spake the following: > Steve Campbell wrote: >> It's just frustrating to put that concentrated effort, no matter how >> little or large amount of time it may be, to keep getting the "what's >> wrong with our mail system" attitude. This is a daily newspaper, and >> people expect immediate resolution for any mail problem. Funny, how >> it's so different, when I ask a reporter why a story I just heard >> about on the radio isn't in the current newspaper edition. > > What I usually do when I encounter a user like that is send them a > screen shot from MailWatch showing the stats on mail received and mail > filtered. Then I explain to them that I additionally reject > substantially more than that at the MTA level which never makes it into > the MailWatch stats. When they see that we filtered out thousands of > spams a day they usually quit whining about the one or two they may have > gotten. > > I'd love to turn the filters off for just one day. Just one. Just to > let the users know what we actually do for them. I'd like to win the > lottery too. Not holding my breath on either... > > ...Kevin Or set high spam to forward to said (l)user, virus scanned of course. You don't want to make more work for yourself. ;-P I guess my BOFH is showing. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From MailScanner at ecs.soton.ac.uk Mon Nov 26 22:51:19 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 26 22:52:41 2007 Subject: Set it and forget it? In-Reply-To: References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> <474B19E0.9070707@cnpapers.com> Message-ID: <474B4DE7.20709@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Silva wrote: > I guess my BOFH is showing. And you wouldn't want to show your BOFH in public, now would you? Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHS04rEfZZRxQVtlQRAp4WAKCUpWeO2hI7FZt0AV2isJxLqdUXXACgxkDi oPaacfHXABZRhUXA1kkfk7k= =bl2Y -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From steve.swaney at fsl.com Mon Nov 26 22:35:17 2007 From: steve.swaney at fsl.com (Stephen Swaney) Date: Mon Nov 26 22:56:04 2007 Subject: Set it and forget it? Message-ID: <474B4A25.9000402@fsl.com> Ugo Bellavance wrote: > Steve Campbell wrote: >> >> >> Ugo Bellavance wrote: >>> Steve Campbell wrote: >>>> I'm curious as to how much time is spent by most of the email >>>> admins here using MS. I realize that some of my efforts could be >>>> streamlined by upgrading to the latest release, but the people here >>>> seem to think that this is a "set it and forget it" type of operation. >>> >>> I don't believe that. >> Gosh, maybe it _is_ me then. > > Not sure. What I meant is similar to what Hugo said. It does need > maintenance, as spam is evolving. We see a new version of SA almost > every 3 months, MS about the same, then razor, DCC, system updates. > > More components you have, more effective it is, but more maintenance > it requires. > > What I meant is that it is not a system that you can install and let > hum for a few months w/o touching it. > We do make such a system. It's not as flexible as MailScanner and it's not open source but it does run for a long time with very minimal maintenance and very little cost. It's our BarricadeMX product with SpamAssassin (using spamd) and ClamAV (using clamd) along with Razor, SARE rules and DCC. All of the software, The operating system, CentOS 5, and all applications are updated using rpms. Many of which we maintain in our own yum repositories. Since BarricadeMX typically correctly identifies over 90% of the incoming mail as spam and rejects it with an NDR, there aren't a lot of messages to push through SpamAssassin or ClamAV. And since there are few options: * You can reject at the MTA level with NDR if spam score is greater than x.xx * You can tag and deliver if spam score is less than x.xx but greater than y.yy * You can deliver untouched if spam score is less than y.yy and Message passes ClamAV * You can reject with NDR is message is rejected by ClamAV. * You can white / black list with a web interface And you cannot: * Block on filename or file type * Disarm dangerous HTML * Quarantine anything (not necessary because messages are rejected with an NDR or accepted) Most of the cool things MailScanner can do to protect your email systems are not available. This is a basic but simple system. You do get a very low maintenance, high capacity gateway that does a very good job at detecting spam with little white / black listing required and a very low false positive ratio. A single core, single CPU system with 2 GB of memory can actually handle over 1,000,000 delivery attempts a day so you can push a LOT of mail through relatively inexpensive systems. We have very inexperienced Systems Administrators using these systems because it really is as simple to maintain as running `yum -y update`. And if you want the best of both worlds and don't mind a bit more work, you can run BarricadeMX on most MailScanner systems. This gives you very high capacity gateways that really block almost every bit of the junk that's out there Best regards, Steve Steve Swaney www.fsl.com -------------- next part -------------- A non-text attachment was scrubbed... Name: steve.swaney.vcf Type: text/x-vcard Size: 305 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071126/7da712a0/steve.swaney.vcf From donald.dawson at bakerbotts.com Mon Nov 26 23:19:00 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Mon Nov 26 23:19:07 2007 Subject: Set it and forget it? In-Reply-To: <474B4A25.9000402@fsl.com> Message-ID: I can't go along with 1 CPU system handling 1,000,000 message attempts, unless you are actually talking about very few being processed by MS/SA. We have 4 dual-core server-grade systems running MS and SA (no virus checking) and we can barely handle spam checking 500,000 emails. Total emails and attempts are close to 1,000,000 but that is spread over 4 servers. Log starts: Nov 24 00:07:08 Log ends: Nov 26 00:00:17 **************************************************************** 519,762 received messages totaling 2651 Mbytes (Avg Size: 5.22 Kbytes) 441,860 suspected spam 15,101 delivered spam -428,114 deleted spam -51,079 pending processing ----------------- 40,569 delivered messages 519,762 messages received 102,908 messages rejected 70,703 messages Aborted/Incomplete ----------------- 693,373 total message attempts **************************************************************** 102,908 messages were rejected: 9,017 (550) - Relaying denied 6,507 (451) - Sender domain did not resolve 14,534 (553) - Domain of sender address does not exist 57 (450) - Relaying temporarily denied. Cannot resolve PTR record 99 (Admin) - Administratively rejected 47,840 Reject due to pre-greeting traffic 24,854 Unknown reasons 183,590 deferred delivery attempts: 37,274 Connection refused 6,610 Connection reset 3 Connection limit reached 102,112 Connection timed out 11,932 Deferred localy 25,659 Unknown reasons 296 (DSN) Delivery Service Notifications: 22 Return receipt 36 User unknown 231 Service unavailable 1 Host unknown 5 Local configuration error 1 Data format error **************************************************************** 10,050 messages FROM bakerbotts.com 25,317 messages TO bakerbotts.com 3,911 inbound connections encrypted with TLS 9,464 outbound connections encrypted with TLS **************************************************************** Messages received by server: Server Count -------------- ------- ausgate 12 baker8 3 bbmx01 129,075 bbmx03 4,679 bbmx06 173,909 confgate 3 daldmz01 2 dalgate 294 hkgate 6 hougate2 243 houmx02 9,240 houmx04 83,601 houmx05 118,672 longate 5 nygate 7 tempfw2 4 wasgate 7 ======= 519,762 -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Stephen Swaney Sent: Monday, November 26, 2007 4:35 PM To: mailscanner@lists.mailscanner.info Subject: Re: Set it and forget it? Ugo Bellavance wrote: > Steve Campbell wrote: >> >> >> Ugo Bellavance wrote: >>> Steve Campbell wrote: >>>> I'm curious as to how much time is spent by most of the email >>>> admins here using MS. I realize that some of my efforts could be >>>> streamlined by upgrading to the latest release, but the people here >>>> seem to think that this is a "set it and forget it" type of operation. >>> >>> I don't believe that. >> Gosh, maybe it _is_ me then. > > Not sure. What I meant is similar to what Hugo said. It does need > maintenance, as spam is evolving. We see a new version of SA almost > every 3 months, MS about the same, then razor, DCC, system updates. > > More components you have, more effective it is, but more maintenance > it requires. > > What I meant is that it is not a system that you can install and let > hum for a few months w/o touching it. > We do make such a system. It's not as flexible as MailScanner and it's not open source but it does run for a long time with very minimal maintenance and very little cost. It's our BarricadeMX product with SpamAssassin (using spamd) and ClamAV (using clamd) along with Razor, SARE rules and DCC. All of the software, The operating system, CentOS 5, and all applications are updated using rpms. Many of which we maintain in our own yum repositories. Since BarricadeMX typically correctly identifies over 90% of the incoming mail as spam and rejects it with an NDR, there aren't a lot of messages to push through SpamAssassin or ClamAV. And since there are few options: * You can reject at the MTA level with NDR if spam score is greater than x.xx * You can tag and deliver if spam score is less than x.xx but greater than y.yy * You can deliver untouched if spam score is less than y.yy and Message passes ClamAV * You can reject with NDR is message is rejected by ClamAV. * You can white / black list with a web interface And you cannot: * Block on filename or file type * Disarm dangerous HTML * Quarantine anything (not necessary because messages are rejected with an NDR or accepted) Most of the cool things MailScanner can do to protect your email systems are not available. This is a basic but simple system. You do get a very low maintenance, high capacity gateway that does a very good job at detecting spam with little white / black listing required and a very low false positive ratio. A single core, single CPU system with 2 GB of memory can actually handle over 1,000,000 delivery attempts a day so you can push a LOT of mail through relatively inexpensive systems. We have very inexperienced Systems Administrators using these systems because it really is as simple to maintain as running `yum -y update`. And if you want the best of both worlds and don't mind a bit more work, you can run BarricadeMX on most MailScanner systems. This gives you very high capacity gateways that really block almost every bit of the junk that's out there Best regards, Steve Steve Swaney www.fsl.com From MailScanner at ecs.soton.ac.uk Mon Nov 26 23:44:46 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Mon Nov 26 23:45:20 2007 Subject: Set it and forget it? In-Reply-To: References: Message-ID: <474B5A6E.1030608@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 donald.dawson@bakerbotts.com wrote: > I can't go along with 1 CPU system handling 1,000,000 message attempts, > unless you are actually talking about very few being processed by MS/SA. > That's precisely it. Most of the 1m message attempts are aborted very early in their SMTP conversation, using dozens of different tricks to identify that it's not a real properly-written standards-compliant MTA, but a very quick and dirty spam-spitting engine. Most of the message delivery attempts are abandoned before even the message body has been received. You can tell an awful lot about a sender just by the way he talks to you. If you don't believe it, try it free for the 30-day evaluation period (fully functional). It's dead easy to rip out again if you decide not to keep it. Jules. P.S. The post by Steve was not intended as an advert, but as a genuine suggestion of a very good solution to the original poster's problem. > We have 4 dual-core server-grade systems running MS and SA (no virus > checking) and we can barely handle spam checking 500,000 emails. Total > emails and attempts are close to 1,000,000 but that is spread over 4 > servers. > > Log starts: Nov 24 00:07:08 > Log ends: Nov 26 00:00:17 > **************************************************************** > 519,762 received messages totaling 2651 Mbytes (Avg Size: 5.22 Kbytes) > 441,860 suspected spam > 15,101 delivered spam > -428,114 deleted spam > -51,079 pending processing > ----------------- > 40,569 delivered messages > > 519,762 messages received > 102,908 messages rejected > 70,703 messages Aborted/Incomplete > ----------------- > 693,373 total message attempts > > **************************************************************** > 102,908 messages were rejected: > 9,017 (550) - Relaying denied > 6,507 (451) - Sender domain did not resolve > 14,534 (553) - Domain of sender address does not exist > 57 (450) - Relaying temporarily denied. Cannot resolve PTR > record > 99 (Admin) - Administratively rejected > 47,840 Reject due to pre-greeting traffic > 24,854 Unknown reasons > 183,590 deferred delivery attempts: > 37,274 Connection refused > 6,610 Connection reset > 3 Connection limit reached > 102,112 Connection timed out > 11,932 Deferred localy > 25,659 Unknown reasons > 296 (DSN) Delivery Service Notifications: > 22 Return receipt > 36 User unknown > 231 Service unavailable > 1 Host unknown > 5 Local configuration error > 1 Data format error > **************************************************************** > 10,050 messages FROM bakerbotts.com > 25,317 messages TO bakerbotts.com > 3,911 inbound connections encrypted with TLS > 9,464 outbound connections encrypted with TLS > **************************************************************** > > Messages received by server: > Server Count > -------------- ------- > ausgate 12 > baker8 3 > bbmx01 129,075 > bbmx03 4,679 > bbmx06 173,909 > confgate 3 > daldmz01 2 > dalgate 294 > hkgate 6 > hougate2 243 > houmx02 9,240 > houmx04 83,601 > houmx05 118,672 > longate 5 > nygate 7 > tempfw2 4 > wasgate 7 > ======= > 519,762 > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Stephen > Swaney > Sent: Monday, November 26, 2007 4:35 PM > To: mailscanner@lists.mailscanner.info > Subject: Re: Set it and forget it? > > > Ugo Bellavance wrote: > >> Steve Campbell wrote: >> >>> Ugo Bellavance wrote: >>> >>>> Steve Campbell wrote: >>>> >>>>> I'm curious as to how much time is spent by most of the email >>>>> admins here using MS. I realize that some of my efforts could be >>>>> streamlined by upgrading to the latest release, but the people here >>>>> > > >>>>> seem to think that this is a "set it and forget it" type of >>>>> > operation. > >>>> I don't believe that. >>>> >>> Gosh, maybe it _is_ me then. >>> >> Not sure. What I meant is similar to what Hugo said. It does need >> maintenance, as spam is evolving. We see a new version of SA almost >> every 3 months, MS about the same, then razor, DCC, system updates. >> >> More components you have, more effective it is, but more maintenance >> it requires. >> >> What I meant is that it is not a system that you can install and let >> hum for a few months w/o touching it. >> >> > We do make such a system. It's not as flexible as MailScanner and it's > not open source but it does run for a long time with very minimal > maintenance and very little cost. > > It's our BarricadeMX product with SpamAssassin (using spamd) and ClamAV > (using clamd) along with Razor, SARE rules and DCC. All of the software, > > The operating system, CentOS 5, and all applications are updated using > rpms. Many of which we maintain in our own yum repositories. > > Since BarricadeMX typically correctly identifies over 90% of the > incoming mail as spam and rejects it with an NDR, there aren't a lot of > messages to push through SpamAssassin or ClamAV. > > And since there are few options: > > * You can reject at the MTA level with NDR if spam score is greater > than x.xx > * You can tag and deliver if spam score is less than x.xx but > greater than y.yy > * You can deliver untouched if spam score is less than y.yy and > Message passes ClamAV > * You can reject with NDR is message is rejected by ClamAV. > * You can white / black list with a web interface > > And you cannot: > > * Block on filename or file type > * Disarm dangerous HTML > * Quarantine anything (not necessary because messages are rejected > with an NDR or accepted) > > Most of the cool things MailScanner can do to protect your email systems > > are not available. This is a basic but simple system. > > You do get a very low maintenance, high capacity gateway that does a > very good job at detecting spam with little white / black listing > required and a very low false positive ratio. > > A single core, single CPU system with 2 GB of memory can actually handle > > over 1,000,000 delivery attempts a day so you can push a LOT of mail > through relatively inexpensive systems. > > We have very inexperienced Systems Administrators using these systems > because it really is as simple to maintain as running `yum -y update`. > > And if you want the best of both worlds and don't mind a bit more work, > you can run BarricadeMX on most MailScanner systems. This gives you very > > high capacity gateways that really block almost every bit of the junk > that's out there > > Best regards, > > Steve > > Steve Swaney > www.fsl.com > Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHS1p3EfZZRxQVtlQRApMWAJ9y6/e/raCxbTG9CSZATShZyawuPwCg05l9 OWDddYRUsb6TkM0dSDPwJ/U= =z5pq -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From ssilva at sgvwater.com Mon Nov 26 23:45:18 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 26 23:45:43 2007 Subject: Set it and forget it? In-Reply-To: <474B4DE7.20709@ecs.soton.ac.uk> References: <474AEB54.3040209@cnpapers.com> <474B0EC7.7020303@vanderkooij.org> <474B19E0.9070707@cnpapers.com> <474B4DE7.20709@ecs.soton.ac.uk> Message-ID: If you got it !!!!! Etc... > > > Scott Silva wrote: >> I guess my BOFH is showing. > And you wouldn't want to show your BOFH in public, now would you? > > Jules > > - -- > Julian Field MEng CITP CEng > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules@Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.7.0 (Build 867) > Comment: Use Thunderbird's Enigmail Add-on to verify this message > Charset: ISO-8859-1 > > wj8DBQFHS04rEfZZRxQVtlQRAp4WAKCUpWeO2hI7FZt0AV2isJxLqdUXXACgxkDi > oPaacfHXABZRhUXA1kkfk7k= > =bl2Y > -----END PGP SIGNATURE----- > -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From Kevin_Miller at ci.juneau.ak.us Mon Nov 26 23:57:21 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Mon Nov 26 23:56:54 2007 Subject: Set it and forget it? In-Reply-To: <474B5A6E.1030608@ecs.soton.ac.uk> References: <474B5A6E.1030608@ecs.soton.ac.uk> Message-ID: Julian Field wrote: > P.S. The post by Steve was not intended as an advert, but as a genuine > suggestion of a very good solution to the original poster's problem. Uh, lets see. You and Steve offer free of charge, open to all comers probably the most robust spam whollopping package around, including support and frequent upgrades and you're worried that someone might misconstrue your post as an advert? Um, I'd say that we, the userbase, have precious little to complain about in that arena even if you posted a blantent advert daily... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From ssilva at sgvwater.com Mon Nov 26 23:56:48 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Mon Nov 26 23:57:21 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <474691A3.2040607@fsl.com> References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> <474691A3.2040607@fsl.com> Message-ID: on 11/23/2007 12:38 AM Steve Freegard spake the following: > Hi Scott, > > Scott Silva wrote: >> I just found my servers are both firewalled, although we have less >> than a tenth of the traffic that they say is allowed. I guess that >> they found that money is more important than the good fight! I guess >> I'm back to the njabl and the dsbl. > > Add Spamcop to that list (bl.spamcop.net) - it's much more reliable than > it used to be, so it can be safely used at the MTA level now. It is > almost as effective as the SBL+XBL portions of Spamhaus from my own > testing. > > Remember you can still query the CBL (cbl.abuseat.org) which forms the > largest and most frequently changed part of the Zen dataset providing > you fall under their usage terms as well. > > Cheers, > Steve. Does anybody have an idea on how long the block lasts? Or is it permanent? I have an e-mail in to spamhaus asking for info on why I was blocked. But I'm not holding my breath! -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From rich at mail.wvnet.edu Tue Nov 27 00:53:10 2007 From: rich at mail.wvnet.edu (Richard Lynch) Date: Tue Nov 27 00:52:41 2007 Subject: Set it and forget it? In-Reply-To: References: <474B5A6E.1030608@ecs.soton.ac.uk> Message-ID: <474B6A76.8010904@mail.wvnet.edu> Kevin Miller wrote: > Julian Field wrote: > > >> P.S. The post by Steve was not intended as an advert, but as a genuine >> suggestion of a very good solution to the original poster's problem. >> > > Uh, lets see. You and Steve offer free of charge, open to all comers > probably the most robust spam whollopping package around, including > support and frequent upgrades and you're worried that someone might > misconstrue your post as an advert? Um, I'd say that we, the userbase, > have precious little to complain about in that arena even if you posted > a blantent advert daily... > > > ...Kevin > I agree completely. I don't think it's somehow "evil" to discuss commercial products on this list. That would be foolish when the product is within the scope of what MS does. And in particular when it's a companion product for MS. I run BarricadeMX on 5 MS boxes which handle 2+ million messages per day. It's reasonably priced and works great. It's been practically hassle free from the moment I put it in place. I used to spend an enormous amount of time trying to keep our MS boxes running properly and keeping up with the influx of spam. I no longer have to do that. Richard Lynch WVNET -- From ssilva at sgvwater.com Tue Nov 27 00:56:16 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 27 00:56:33 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> <474691A3.2040607@fsl.com> Message-ID: on 11/26/2007 3:56 PM Scott Silva spake the following: > on 11/23/2007 12:38 AM Steve Freegard spake the following: >> Hi Scott, >> >> Scott Silva wrote: >>> I just found my servers are both firewalled, although we have less >>> than a tenth of the traffic that they say is allowed. I guess that >>> they found that money is more important than the good fight! I guess >>> I'm back to the njabl and the dsbl. >> >> Add Spamcop to that list (bl.spamcop.net) - it's much more reliable >> than it used to be, so it can be safely used at the MTA level now. It >> is almost as effective as the SBL+XBL portions of Spamhaus from my own >> testing. >> >> Remember you can still query the CBL (cbl.abuseat.org) which forms the >> largest and most frequently changed part of the Zen dataset providing >> you fall under their usage terms as well. >> >> Cheers, >> Steve. > Does anybody have an idea on how long the block lasts? Or is it permanent? > I have an e-mail in to spamhaus asking for info on why I was blocked. > But I'm not holding my breath! > Finally had time to research this and it looks like I got firewalled around 1 October. I guess spamassassin caught the load as there wasn't a significant increase of end user spam. I just used up some more of the systems horsepower. It is nice that the system had enough headroom to keep up. Still a lot less than the 100K per day or 320K connections per day that you are allowed. I see an average of less than 6K per day on the crapification scale. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From MailScanner at ecs.soton.ac.uk Tue Nov 27 02:29:36 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 27 02:30:03 2007 Subject: Set it and forget it? In-Reply-To: <474B6A76.8010904@mail.wvnet.edu> References: <474B5A6E.1030608@ecs.soton.ac.uk> <474B6A76.8010904@mail.wvnet.edu> Message-ID: <474B8110.5090606@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Richard Lynch wrote: > Kevin Miller wrote: >> Julian Field wrote: >> >> >>> P.S. The post by Steve was not intended as an advert, but as a genuine >>> suggestion of a very good solution to the original poster's problem. >>> >> >> Uh, lets see. You and Steve offer free of charge, open to all comers >> probably the most robust spam whollopping package around, including >> support and frequent upgrades and you're worried that someone might >> misconstrue your post as an advert? Um, I'd say that we, the userbase, >> have precious little to complain about in that arena even if you posted >> a blantent advert daily... Don't worry, we have no intention to advertise products anything like as frequently as that! >> > I agree completely. I don't think it's somehow "evil" to discuss > commercial products on this list. That would be foolish when the > product is within the scope of what MS does. And in particular when > it's a companion product for MS. I run BarricadeMX on 5 MS boxes > which handle 2+ million messages per day. It's reasonably priced and > works great. It's been practically hassle free from the moment I put > it in place. I used to spend an enormous amount of time trying to > keep our MS boxes running properly and keeping up with the influx of > spam. I no longer have to do that. I'm glad to hear that it is saving you time, and hence money! That's our aim. No-one will buy a product that doesn't pay for itself in a few months. BarricadeMX achieves that time and again. We have a stat that over 95% of people who tried the beta bought the product. If that's not a recommendation, I don't know what is :-) We're doing one interesting installation at the moment for a company in a country where bandwidth in or out of the country is extremely expensive. So we have one MX outside the country running BarricadeMX (and MailScanner, I believe) and limiting its connections to sites outside the country, using IP address location software. And another MX inside the country limiting its connections to sites inside the country. So the only data crossing the border is clean email. We're saving them so much bandwidth that the whole setup is paying for itself *very* quickly indeed. Joe-job attacks no longer cost them anything. Very interesting setup. It's easy to install, and even easier to uninstall. So if you decide it isn't for you, then taking it out again is pretty trivial. So why not give it a go? Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHS4EeEfZZRxQVtlQRAlT8AKDOwZheySjyDoHVeORQ9n1DzIER2wCg+1kD XsmcVKVzMeoXMhaGwZ/yJVY= =bd6H -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Tue Nov 27 08:04:29 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 27 08:04:33 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> <474691A3.2040607@fsl.com> Message-ID: <223f97700711270004s4dd35b50jd8de4d39fe09529f@mail.gmail.com> On 27/11/2007, Scott Silva wrote: > on 11/26/2007 3:56 PM Scott Silva spake the following: > > on 11/23/2007 12:38 AM Steve Freegard spake the following: > >> Hi Scott, > >> > >> Scott Silva wrote: > >>> I just found my servers are both firewalled, although we have less > >>> than a tenth of the traffic that they say is allowed. I guess that > >>> they found that money is more important than the good fight! I guess > >>> I'm back to the njabl and the dsbl. > >> > >> Add Spamcop to that list (bl.spamcop.net) - it's much more reliable > >> than it used to be, so it can be safely used at the MTA level now. It > >> is almost as effective as the SBL+XBL portions of Spamhaus from my own > >> testing. > >> > >> Remember you can still query the CBL (cbl.abuseat.org) which forms the > >> largest and most frequently changed part of the Zen dataset providing > >> you fall under their usage terms as well. > >> > >> Cheers, > >> Steve. > > Does anybody have an idea on how long the block lasts? Or is it permanent? > > I have an e-mail in to spamhaus asking for info on why I was blocked. > > But I'm not holding my breath! > > > Finally had time to research this and it looks like I got firewalled around 1 > October. I guess spamassassin caught the load as there wasn't a significant > increase of end user spam. I just used up some more of the systems horsepower. > It is nice that the system had enough headroom to keep up. Still a lot less > than the 100K per day or 320K connections per day that you are allowed. > I see an average of less than 6K per day on the crapification scale. > I think someone (was it UxBoD=Phil?) that mentioned this before... If you do your DNS "shoppng" through forwarders to your SPs DNS, it might be them getting FW'd, not you as such. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From bfebrian.mailscanner at indomino.net Tue Nov 27 09:30:15 2007 From: bfebrian.mailscanner at indomino.net (Budi Febrianto) Date: Tue Nov 27 09:30:56 2007 Subject: OOT: Spamhaus professional service Message-ID: <474BE3A7.7020102@indomino.net> Hi, I just move out to another company, that the size is bigger than the last one. I want to use spamhaus in mta level, but know I worried about the size. based on http://www.spamhaus.org/organization/dnsblusage.html I wonder, can I still use the free service, or I had to use the professional service? Number of user aprox 500 users, and it may double next year. I still don't kwnw how many emails we are receives everyday because rigth now we are using mdaemon as mail server. I plan to move it to mailscanner with zen.spamhaus.org Anybody still using spamhaus with the same user or maybe even larger users? Any problem? Thanks From J.Ede at birchenallhowden.co.uk Tue Nov 27 09:54:33 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Tue Nov 27 09:56:04 2007 Subject: Spamhaus professional service In-Reply-To: <474BE3A7.7020102@indomino.net> References: <474BE3A7.7020102@indomino.net> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE066@server02.bhl.local> We use the rsync feed, and it does give much faster lookups than just querying spamhaus direct. Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Budi Febrianto [bfebrian.mailscanner@indomino.net] Sent: 27 November 2007 09:30 To: MailScanner discussion Subject: OOT: Spamhaus professional service Hi, I just move out to another company, that the size is bigger than the last one. I want to use spamhaus in mta level, but know I worried about the size. based on http://www.spamhaus.org/organization/dnsblusage.html I wonder, can I still use the free service, or I had to use the professional service? Number of user aprox 500 users, and it may double next year. I still don't kwnw how many emails we are receives everyday because rigth now we are using mdaemon as mail server. I plan to move it to mailscanner with zen.spamhaus.org Anybody still using spamhaus with the same user or maybe even larger users? Any problem? Thanks From uxbod at splatnix.net Tue Nov 27 11:33:27 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 11:33:37 2007 Subject: Virus Scanning Misreporting ? Message-ID: <19578303.2851196163207212.JavaMail.root@office.splatnix.net> Hi, We run clamav for our virus scanning but have been testing nod32 aswell. Just noticed in our logfiles this :- Nov 27 06:03:51 bianchi MailScanner[23803]: Virus and Content Scanning: Starting Nov 27 06:03:51 bianchi clamd[31077]: /var/spool/MailScanner/incoming/23803/10B1D7CF74A.AAFF8.message: Email.Phishing.RB-2033 FOUND Nov 27 06:03:51 bianchi clamd[31077]: /var/spool/MailScanner/incoming/23803/10B1D7CF74A.AAFF8/msg-23803-3.html: Email.Phishing.RB-2033 FOUND Nov 27 06:03:51 bianchi MailScanner[23803]: Clamd::INFECTED:: Email.Phishing.RB-2033 FOUND :: ./10B1D7CF74A.AAFF8/ Nov 27 06:03:51 bianchi MailScanner[23803]: Clamd::INFECTED:: Email.Phishing.RB-2033 FOUND :: ./10B1D7CF74A.AAFF8/msg-23803-3.html Nov 27 06:03:51 bianchi MailScanner[23803]: Virus Scanning: Clamd found 2 infections Nov 27 06:03:53 bianchi MailScanner[23803]: Virus Scanning: Nod32 found 2 infections Nov 27 06:03:53 bianchi MailScanner[23803]: Infected message 10B1D7CF74A.AAFF8 came from 79.176.158.147 Nov 27 06:03:53 bianchi MailScanner[23803]: Virus Scanning: Found 2 viruses Nov 27 06:03:53 bianchi MailScanner[23803]: Logging message 10B1D7CF74A.AAFF8 to SQL Yet nod32 has not actually detected anything, because the detection is from the SaneSecurity database. Is this the expected behaviour ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From konve at logout.cz Tue Nov 27 12:38:13 2007 From: konve at logout.cz (Dalimil Gala) Date: Tue Nov 27 12:38:34 2007 Subject: Virus Scanning Misreporting ? In-Reply-To: <19578303.2851196163207212.JavaMail.root@office.splatnix.net> References: <19578303.2851196163207212.JavaMail.root@office.splatnix.net> Message-ID: <474C0FB5.4020503@logout.cz> UxBoD wrote: > Hi, > > We run clamav for our virus scanning but have been testing nod32 aswell. Just noticed in our logfiles this :- > > Nov 27 06:03:51 bianchi MailScanner[23803]: Virus and Content Scanning: Starting > Nov 27 06:03:51 bianchi clamd[31077]: /var/spool/MailScanner/incoming/23803/10B1D7CF74A.AAFF8.message: Email.Phishing.RB-2033 FOUND > Nov 27 06:03:51 bianchi clamd[31077]: /var/spool/MailScanner/incoming/23803/10B1D7CF74A.AAFF8/msg-23803-3.html: Email.Phishing.RB-2033 FOUND > Nov 27 06:03:51 bianchi MailScanner[23803]: Clamd::INFECTED:: Email.Phishing.RB-2033 FOUND :: ./10B1D7CF74A.AAFF8/ > Nov 27 06:03:51 bianchi MailScanner[23803]: Clamd::INFECTED:: Email.Phishing.RB-2033 FOUND :: ./10B1D7CF74A.AAFF8/msg-23803-3.html > Nov 27 06:03:51 bianchi MailScanner[23803]: Virus Scanning: Clamd found 2 infections > Nov 27 06:03:53 bianchi MailScanner[23803]: Virus Scanning: Nod32 found 2 infections > Nov 27 06:03:53 bianchi MailScanner[23803]: Infected message 10B1D7CF74A.AAFF8 came from 79.176.158.147 > Nov 27 06:03:53 bianchi MailScanner[23803]: Virus Scanning: Found 2 viruses > Nov 27 06:03:53 bianchi MailScanner[23803]: Logging message 10B1D7CF74A.AAFF8 to SQL > > Yet nod32 has not actually detected anything, because the detection is from the SaneSecurity database. Is this the expected behaviour ? > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > Hi, I think there is a line missing in /opt/MailScanner/lib/MailScanner/SweepViruses.pm, see at the bottom. (Anyway it was correct in MailWatch, I could see reports from both Nod32 and Clamd in MailWatch web interface: Report: Nod32: Found virus Eicar test file in msg-22437-11.txt Clamd: msg-22437-11.txt was infected: Eicar-Test-Signature FOUND) /var/log/mail.log before changes applied: Nov 27 13:10:34 mail5 MailScanner[22437]: Virus and Content Scanning: Starting Nov 27 13:10:36 mail5 MailScanner[22437]: Virus Scanning: Nod32 found 1 infections Nov 27 13:10:36 mail5 MailScanner[22437]: INFECTED:: Eicar-Test-Signature FOUND :: ./lARCAWK0022737/msg-22437-11.txt Nov 27 13:10:36 mail5 MailScanner[22437]: Virus Scanning: Clamd found 1 infections Nov 27 13:10:36 mail5 MailScanner[22437]: Infected message lARCAWK0022737 came from 127.0.0.1 Nov 27 13:10:36 mail5 MailScanner[22437]: Virus Scanning: Found 1 viruses after: Nov 27 13:34:45 mail5 MailScanner[24588]: Virus and Content Scanning: Starting Nov 27 13:34:46 mail5 MailScanner[24588]: Nod32: Found virus Eicar test file in msg-24588-1.txt Nov 27 13:34:46 mail5 MailScanner[24588]: Virus Scanning: Nod32 found 1 infections Nov 27 13:34:47 mail5 MailScanner[24588]: INFECTED:: Eicar-Test-Signature FOUND :: ./lARCYebM024610/msg-24588-1.txt Nov 27 13:34:47 mail5 MailScanner[24588]: Virus Scanning: Clamd found 1 infections Nov 27 13:34:47 mail5 MailScanner[24588]: Infected message lARCYebM024610 came from 127.0.0.1 Nov 27 13:34:47 mail5 MailScanner[24588]: Virus Scanning: Found 1 viruses diff for /MailScanner-4.62.3 --- SweepViruses.pm.orig 2007-07-06 15:35:43.000000000 +0200 +++ SweepViruses.pm.071127 2007-11-27 13:27:29.000000000 +0100 @@ -2110,6 +2110,7 @@ $report = "Found virus $virusname in $part"; $report = $Name . ': '. $report if $Name; $infections->{"$id"}{"$part"} .= $report . "\n"; + MailScanner::Log::InfoLog("%s", $report); $types->{"$id"}{"$part"} .= "v"; # it's a real virus return 1; } Dalimil Gala From fons.vanderbeek at 84-it.com Tue Nov 27 13:04:05 2007 From: fons.vanderbeek at 84-it.com (Fons van der Beek) Date: Tue Nov 27 13:04:43 2007 Subject: problem upgrading MailScanner / PostFix Dbmail Message-ID: <474C15C5.6010505@84-it.com> I've upgraded Postfix / Mailscanner interfacing to dbmail. The mail gets scanned OK, but after the scanning proces the mail isn't picked up correctly and stayes deferred. When I restart Mailscanner /etc/init.d/MailScanner stop and start The mail is nicely processed and is deliverd, running postfix -c /etc/postfix.in check or postfix -c /etc/postfix check Doesnt produce any errors... Can anybody give me a clue what i did wrong????????????? My /etc/postfix.in/master.cf contains: ----------------------------------------------------- command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix $myhostname = mail.X2.nl relay_domains = $mydestination X2.com X1.nl local_recipient_maps =hash:/etc/local_recipients alias_maps = hash:/etc/postfix/aliases debug_peer_level = 2 debugger_command = PATH=/usr/bin:/usr/X11R6/bin xxgdb $daemon_directory/$process_name $process_id & sleep 5 sendmail_path = /usr/sbin/sendmail.postfix newaliases_path = /usr/bin/newaliases.postfix mailq_path = /usr/bin/mailq.postfix setgid_group = postdrop manpage_directory = /usr/share/man myhostname = mail.X2.nl mydomain = X2.nl delay_warning_time = 2 myorigin = X2.nl virtual_maps = hash:/etc/postfix.in/virtual mydestination = X2.nl local_transport = $mydestination best_mx_transport = local queue_directory = /var/spool/postfix.in defer_transports = smtp local virtual relay mail_name = PostFix append_dot_mydomain = no message_size_limit = 20240000 My etc/postfix/master.cf contains -------------------------------------------------- command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix $myhostname = mail.X2.nl local_recipient_maps = hash:/etc/local_recipients alias_maps = hash:/etc/postfix/aliases debug_peer_level = 2 debugger_command = PATH=/usr/bin:/usr/X11R6/bin xxgdb $daemon_directory/$process_name $process_id & sleep 5 sendmail_path = /usr/sbin/sendmail.postfix newaliases_path = /usr/bin/newaliases.postfix mailq_path = /usr/bin/mailq.postfix setgid_group = postdrop myhostname = mail.X2.nl mydomain = X2.nl myorigin = X2.nl virtual_maps = hash:/etc/postfix/virtual mydestination = X2.nl transport_maps = hash:/etc/postfix/transport local_transport = $mydestination best_mx_transport = local mail_name = Postfix. message_size_limit = 20240000 html_directory = no queue_directory = /var/spool/postfix mail_owner = postfix My /etc/MailScanner.conf contains: -------------------------------------------------- %org-name% = yoursite %org-long-name% = Your Organisation Name Here %web-site% = www.your-organisation.com %etc-dir% = /etc/MailScanner %report-dir% = /etc/MailScanner/reports/en %rules-dir% = /etc/MailScanner/rules %mcp-dir% = /etc/MailScanner/mcp Max Children = 5 Run As User = postfix Run As Group = postfix Queue Scan Interval = 6 Incoming Queue Dir = /var/spool/postfix.in/deferred Outgoing Queue Dir = /var/spool/postfix/incoming Incoming Work Dir = /var/spool/MailScanner/incoming Quarantine Dir = /var/spool/MailScanner/quarantine PID file = /var/run/MailScanner.pid Restart Every = 7200 MTA = postfix Sendmail = /usr/sbin/sendmail Sendmail2 = /usr/sbin/sendmail Incoming Work User = Incoming Work Group = Incoming Work Permissions = 0600 Quarantine User = Quarantine Group = Quarantine Permissions = 0600 Max Unscanned Bytes Per Scan = 100m Max Unsafe Bytes Per Scan = 50m Max Unscanned Messages Per Scan = 30 Max Unsafe Messages Per Scan = 30 Max Normal Queue Size = 800 Scan Messages = yes Reject Message = no Maximum Attachments Per Message = 200 Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = /usr/bin/tnef --maxsize=100000000 TNEF Timeout = 120 File Command = /usr/bin/file File Timeout = 20 Gunzip Command = /bin/gunzip Gunzip Timeout = 50 Unrar Command = /usr/bin/unrar Unrar Timeout = 50 Find UU-Encoded Files = no Maximum Message Size = %rules-dir%/max.message.size.rules Maximum Attachment Size = -1 Minimum Attachment Size = -1 Maximum Archive Depth = 2 Find Archives By Content = yes Zip Attachments = no Attachments Zip Filename = MessageAttachments.zip Attachments Min Total Size To Zip = 100k Attachment Extensions Not To Zip = .zip .rar .gz .tgz .jpg .jpeg .mpg .mpe .mpeg .mp3 .rpm .htm .html .eml Virus Scanning = yes Virus Scanners = auto Virus Scanner Timeout = 300 Deliver Disinfected Files = no Silent Viruses = HTML-IFrame All-Viruses Still Deliver Silent Viruses = no Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar Block Encrypted Messages = no Block Unencrypted Messages = no Allow Password-Protected Archives = no Check Filenames In Password-Protected Archives = yes Allowed Sophos Error Messages = Sophos IDE Dir = /opt/sophos-av/lib/sav Sophos Lib Dir = /opt/sophos-av/lib Monitors For Sophos Updates = /opt/sophos-av/lib/sav/*.ide Monitors for ClamAV Updates = /usr/local/share/clamav/*.inc/* /usr/local/share/clamav/*.cvd ClamAVmodule Maximum Recursion Level = 8 ClamAVmodule Maximum Files = 1000 ClamAVmodule Maximum Compression Ratio = 250 Clamd Port = 3310 Clamd Socket = /tmp/clamd Clamd Use Threads = no ClamAV Full Message Scan = yes Dangerous Content Scanning = yes Allow Partial Messages = no Allow External Message Bodies = no Find Phishing Fraud = yes Also Find Numeric Phishing = yes Use Stricter Phishing Net = yes Highlight Phishing Fraud = yes Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf Phishing Bad Sites File = %etc-dir%/phishing.bad.sites.conf Country Sub-Domains List = %etc-dir%/country.domains.conf Allow IFrame Tags = disarm Allow Form Tags = disarm Allow Script Tags = disarm Allow WebBugs = disarm Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap Known Web Bug Servers = msgtag.com Web Bug Replacement = http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif Allow Object Codebase Tags = disarm Convert Dangerous HTML To Text = no Convert HTML To Text = no Allow Filenames = Deny Filenames = Filename Rules = %etc-dir%/filename.rules.conf Allow Filetypes = Deny Filetypes = Filetype Rules = %etc-dir%/filetype.rules.conf Quarantine Infections = yes Quarantine Silent Viruses = no Quarantine Modified Body = no Quarantine Whole Message = no Quarantine Whole Messages As Queue Files = no Keep Spam And MCP Archive Clean = no Language Strings = %report-dir%/languages.conf Rejection Report = %report-dir%/rejection.report.txt Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt Deleted Size Message Report = %report-dir%/deleted.size.message.txt Stored Bad Content Message Report = %report-dir%/stored.content.message.txt Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt Stored Virus Message Report = %report-dir%/stored.virus.message.txt Stored Size Message Report = %report-dir%/stored.size.message.txt Disinfected Report = %report-dir%/disinfected.report.txt Inline HTML Signature = %report-dir%/inline.sig.html Inline Text Signature = %report-dir%/inline.sig.txt Signature Image Filename = %report-dir%/sig.jpg Signature Image Filename = signature.jpg Inline HTML Warning = %report-dir%/inline.warning.html Inline Text Warning = %report-dir%/inline.warning.txt Sender Content Report = %report-dir%/sender.content.report.txt Sender Error Report = %report-dir%/sender.error.report.txt Sender Bad Filename Report = %report-dir%/sender.filename.report.txt Sender Virus Report = %report-dir%/sender.virus.report.txt Sender Size Report = %report-dir%/sender.size.report.txt Hide Incoming Work Dir = yes Include Scanner Name In Reports = yes Mail Header = X-%org-name%-MailScanner: Spam Header = X-%org-name%-MailScanner-SpamCheck: Spam Score Header = X-%org-name%-MailScanner-SpamScore: Information Header = X-%org-name%-MailScanner-Information: Add Envelope From Header = yes Add Envelope To Header = no Envelope From Header = X-%org-name%-MailScanner-From: Envelope To Header = X-%org-name%-MailScanner-To: Spam Score Character = s SpamScore Number Instead Of Stars = no Minimum Stars If On Spam List = 0 Clean Header Value = Found to be clean Infected Header Value = Found to be infected Disinfected Header Value = Disinfected Information Header Value = Please contact the ISP for more information Detailed Spam Report = yes Include Scores In SpamAssassin Report = yes Always Include SpamAssassin Report = no Multiple Headers = append Hostname = the %org-name% ($HOSTNAME) MailScanner Sign Messages Already Processed = no Sign Clean Messages = yes Attach Image To Signature = no Attach Image To HTML Message Only = yes Mark Infected Messages = yes Mark Unscanned Messages = yes Unscanned Header Value = Not scanned: please contact your Internet E-Mail Service Provider for details Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2: Deliver Cleaned Messages = yes Notify Senders = yes Notify Senders Of Viruses = no Notify Senders Of Blocked Filenames Or Filetypes = yes Notify Senders Of Blocked Size Attachments = no Notify Senders Of Other Blocked Content = yes Never Notify Senders Of Precedence = list bulk Scanned Subject Text = {Scanned} Virus Modify Subject = start Virus Subject Text = {Virus?} Filename Modify Subject = start Filename Subject Text = {Filename?} Content Modify Subject = start Content Subject Text = {Dangerous Content?} Size Modify Subject = start Size Subject Text = {Size} Disarmed Modify Subject = start Disarmed Subject Text = {Disarmed} Phishing Modify Subject = no Phishing Subject Text = {Fraud?} Spam Modify Subject = start Spam Subject Text = {Spam?} High Scoring Spam Modify Subject = start High Scoring Spam Subject Text = {Spam?} Warning Is Attachment = yes Attachment Warning Filename = %org-name%-Attachment-Warning.txt Attachment Encoding Charset = ISO-8859-1 Archive Mail = Send Notices = yes Notices Include Full Headers = yes Hide Incoming Work Dir in Notices = no Notice Signature = -- \nMailScanner\nEmail Virus Scanner\nwww.mailscanner.info Notices From = MailScanner Notices To = postmaster Local Postmaster = postmaster Spam List Definitions = %etc-dir%/spam.lists.conf Virus Scanner Definitions = %etc-dir%/virus.scanners.conf Spam Checks = yes Spam Domain List = Spam Lists To Be Spam = 1 Spam Lists To Reach High Score = 3 Spam List Timeout = 10 Max Spam List Timeouts = 7 Spam List Timeouts History = 10 Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules Is Definitely Spam = no Definite Spam Is High Scoring = no Ignore Spam Whitelist If Recipients Exceed = 20 Max Spam Check Size = 200k Use Watermarking = no Add Watermark = yes Check Watermarks With No Sender = yes Treat Invalid Watermarks With No Sender as Spam = nothing Check Watermarks To Skip Spam Checks = yes Watermark Secret = %org-name%-Secret Watermark Lifetime = 604800 Watermark Header = X-%org-name%-MailScanner-Watermark: Use SpamAssassin = yes Max SpamAssassin Size = 200k Required SpamAssassin Score = 6 High SpamAssassin Score = 10 SpamAssassin Auto Whitelist = yes SpamAssassin Timeout = 75 Max SpamAssassin Timeouts = 10 SpamAssassin Timeouts History = 30 Check SpamAssassin If On Spam List = yes Include Binary Attachments In SpamAssassin = no Spam Score = yes Cache SpamAssassin Results = yes SpamAssassin Cache Database File = /var/spool/MailScanner/incoming/SpamAssassin.cache.db Rebuild Bayes Every = 0 Wait During Bayes Rebuild = no Use Custom Spam Scanner = no Max Custom Spam Scanner Size = 20k Custom Spam Scanner Timeout = 20 Max Custom Spam Scanner Timeouts = 10 Custom Spam Scanner Timeout History = 20 Spam Actions = deliver header "X-Spam-Status: Yes" High Scoring Spam Actions = deliver header "X-Spam-Status: Yes" Non Spam Actions = deliver header "X-Spam-Status: No" SpamAssassin Rule Actions = Sender Spam Report = %report-dir%/sender.spam.report.txt Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt Inline Spam Warning = %report-dir%/inline.spam.warning.txt Recipient Spam Report = %report-dir%/recipient.spam.report.txt Enable Spam Bounce = %rules-dir%/bounce.rules Bounce Spam As Attachment = no Syslog Facility = mail Log Speed = no Log Spam = no Log Non Spam = no Log Permitted Filenames = no Log Permitted Filetypes = no Log Silent Viruses = no Log Dangerous HTML Tags = no SpamAssassin Temporary Dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin User State Dir = SpamAssassin Install Prefix = SpamAssassin Site Rules Dir = /etc/mail/spamassassin SpamAssassin Local Rules Dir = SpamAssassin Default Rules Dir = MCP Checks = no First Check = spam MCP Required SpamAssassin Score = 1 MCP High SpamAssassin Score = 10 MCP Error Score = 1 MCP Header = X-%org-name%-MailScanner-MCPCheck: Non MCP Actions = deliver MCP Actions = deliver High Scoring MCP Actions = deliver Bounce MCP As Attachment = no MCP Modify Subject = start MCP Subject Text = {MCP?} High Scoring MCP Modify Subject = start High Scoring MCP Subject Text = {MCP?} Is Definitely MCP = no Is Definitely Not MCP = no Definite MCP Is High Scoring = no Always Include MCP Report = no Detailed MCP Report = yes Include Scores In MCP Report = no Log MCP = no MCP Max SpamAssassin Timeouts = 20 MCP Max SpamAssassin Size = 100k MCP SpamAssassin Timeout = 10 MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf MCP SpamAssassin User State Dir = MCP SpamAssassin Local Rules Dir = %mcp-dir% MCP SpamAssassin Default Rules Dir = %mcp-dir% MCP SpamAssassin Install Prefix = %mcp-dir% Recipient MCP Report = %report-dir%/recipient.mcp.report.txt Sender MCP Report = %report-dir%/sender.mcp.report.txt Use Default Rules With Multiple Recipients = no Spam Score Number Format = %d MailScanner Version Number = 4.65.3 SpamAssassin Cache Timings = 1800,300,10800,172800,600 Debug = no Debug SpamAssassin = no Run In Foreground = no Always Looked Up Last = no Always Looked Up Last After Batch = no Deliver In Background = yes Delivery Method = batch Split Exim Spool = no Lockfile Dir = /tmp Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions Lock Type = Minimum Code Status = supported From glenn.steen at gmail.com Tue Nov 27 13:18:39 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 27 13:18:42 2007 Subject: problem upgrading MailScanner / PostFix Dbmail In-Reply-To: <474C15C5.6010505@84-it.com> References: <474C15C5.6010505@84-it.com> Message-ID: <223f97700711270518v510e21a8te01ed2d17f9a2214@mail.gmail.com> On 27/11/2007, Fons van der Beek wrote: > I've upgraded Postfix / Mailscanner interfacing to dbmail. > > The mail gets scanned OK, but after the scanning proces the mail isn't > picked up correctly and stayes deferred. > When I restart Mailscanner /etc/init.d/MailScanner stop and start > > The mail is nicely processed and is deliverd, running postfix -c > /etc/postfix.in check or postfix -c /etc/postfix check > Doesnt produce any errors... > > Can anybody give me a clue what i did wrong????????????? (snip) > defer_transports = smtp local virtual relay (snip) Oh. My. God. Stop using this old, unsupported, deprecated, unsafe method. Immediately. The only really safe method of interfacing postfix and MailScanner is described on the official website (http://www.mailscanner.info/postfix.html) and also in the Wiki (http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:installation). These methods entail using one instance of Postfix and a header_check to place incoming messages in the HOLD "queue"... Until you switch to this method of doing things, there is nothing we can do to help you. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From Q.G.Campbell at newcastle.ac.uk Tue Nov 27 14:03:15 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Tue Nov 27 14:04:00 2007 Subject: MailScanner fails after 'up2date -u' done Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C3AA383@largo.campus.ncl.ac.uk> After doing an 'up2date -u' on a RH AS4 system MailScanner failed to start. Running in debug mode I get: Starting MailScanner daemons: incoming sendmail: [ OK ] outgoing sendmail: [ OK ] MailScanner: is only avaliable with the XS version at /usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9. Compilation failed in require at /usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. [ OK ] I am investigating but any pointers as to the likely cause would be welcome. Am running MailScanner-4.65.3-1. Quentin --- PHONE: +44 191 222 8209??? Information Systems and Services (ISS), ?????????????????????????? Newcastle University, ?????????????????????????? Newcastle upon Tyne, FAX:?? +44 191 222 8765??? United Kingdom, NE1 7RU. ------------------------------------------------------------------------ From steve.swaney at fsl.com Tue Nov 27 14:06:33 2007 From: steve.swaney at fsl.com (Stephen Swaney) Date: Tue Nov 27 14:07:57 2007 Subject: Set it and forget it? In-Reply-To: References: Message-ID: <474C2469.9080104@fsl.com> donald.dawson@bakerbotts.com wrote: > I can't go along with 1 CPU system handling 1,000,000 message attempts, > unless you are actually talking about very few being processed by MS/SA. > We have 4 dual-core server-grade systems running MS and SA (no virus > checking) and we can barely handle spam checking 500,000 emails. Total > emails and attempts are close to 1,000,000 but that is spread over 4 > servers. > > Please Believe. We intentionally understated the number messages than the system is actually processing because we did not think anyone would believe the actual stats; 2,715,696 MTA connections per day. We are cheating a bit because this system has been under a continual "Joe Job" DOS attack for a while now. About 1.5 M of the messages each day are blow back from the DOS attack and pretty easy to dispose of. Still that leaves about +1.2 M real messages / spam to sort through. Here are the very current stats from the system: Statistic Data ------------------------------------------------- Delivery Attempts: 40,172,344 Accepted messages: 190,542 % Accepted messages: 0.47% Messages rejected by BarricadeMX: 39,981,802 % Messages rejected by BarricadeMX: 99.53% Avg. Connections per second: 31.43 Avg. Connections per hour: 113,154 Avg Connections per day: 2,715,696 Current Active MTA Connections: 580 Max Simultaneous MTA Connections: 1,971 Load Average: 1.0 to 1.5 Daily Bandwidth savings (KB): 43,245,045 Process Age (seconds): 1,278,085 Process Age (days): 14.79 -------------------------------------------------- And we have very very few complaints of false positives. The processor is: cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 15 model : 4 model name : Intel(R) Xeon(TM) CPU 3.20GHz stepping : 10 cpu MHz : 3201.336 cache size : 2048 KB And the memory is: total used free shared buffers cached Mem: 2074952 1315632 759320 0 15312 39680 -/+ buffers/cache: 1260640 814312 Swap: 2031608 503808 1527800 The system is also running DefenderMX, our packaged version of MailScanner, SpamAssassin et al. All messages that get through BarricadeMX are scanned by DefenderMX. And we are offering BarricadeMX software and support free for 60 days to any site that is suffering a DOS attack. Best regards, Steve www.fsl.com -------------- next part -------------- A non-text attachment was scrubbed... Name: steve.swaney.vcf Type: text/x-vcard Size: 305 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/e1b43f03/steve.swaney.vcf From micoots at yahoo.com Tue Nov 27 14:08:24 2007 From: micoots at yahoo.com (Michael Mansour) Date: Tue Nov 27 14:08:27 2007 Subject: Can't block wmv files Message-ID: <392617.38195.qm@web33306.mail.mud.yahoo.com> Hi, I'm using: mailscanner-4.65.3-1.noarch and trying to block various movie files for a domain. I have done this sort of setup numerous times for other domains and it all works fine, but for this one particular domain I cannot get it to work. wmv's, avi's, mpg's, etc all pass through. My inbound MX servers (which run MailScanner) have both configured: %etc-dir%/example.com.filename.rules: deny \.avi$ AVI files not allowed AVI file not allowed deny \.mov$ MOV files not allowed MOV files not allowed deny \.mp3$ MP3 files not allowed MP3 files not allowed deny \.mpg$ MPG files not allowed MPG files not allowed deny \.mpeg$ MPEG files not allowed MPEG files not allowed deny \.swf$ SWF files not allowed SWF files not allowed deny \.wav$ WAV files not allowed WAV files not allowed deny \.wmv$ WMV files not allowed WMV files not allowed and %etc-dir%/example.com.filetype.rules: # NOTE: Fields are separated by TAB characters --- Important! # # Syntax is allow/deny/deny+delete, then regular expression, then log text, # then user report text. # # If none of the rules match, then the filetype is allowed. allow text - - allow \bscript - - allow archive - - allow postscript - - deny self-extract No self-extracting archives No self-extracting archives allowed deny executable No executables No programs allowed deny ELF No executables No programs allowed deny Registry No Windows Registry entries No Windows Registry files allowed deny MPEG No MPEG movies No MPEG movies allowed deny AVI No AVI movies No AVI movies allowed deny MNG No MNG/PNG movies No MNG movies allowed deny QuickTime No QuickTime movies No QuickTime movies allowed deny ASF No Windows media No Windows media files allowed # deny WMV No Windows media No Windows media files allowed #deny metafont No Windows Metafont drawings No WMF drawings allowed and both of these files are referenced from: %rules-dir%/filename.rules which contains: FromOrTo: *@example.com /etc/MailScanner/example.com.filename.rules.conf FromOrTo: default /etc/MailScanner/filename.rules.conf and: %rules-dir%/filetype.rules which contains: FromOrTo: *@example.com /etc/MailScanner/example.com.filetype.rules.conf FromOrTo: default /etc/MailScanner/filetype.rules.conf This setup should work, yet it doesn't. I send through WMV files and they just pass through. After processing, those inbound MX servers deliver the emails to the remote destination Exchange server. I have also tried the new options for "Deny Filenames =" and "Deny Filetypes =" presented with the newer MailScanner, by doing (in MailScanner.conf): Deny Filenames = %rules-dir%/deny.filenames.rules Deny Filetypes = %rules-dir%/deny.filetypes.rules which contain: # cat deny.filenames.rules FromOrTo: *@example.com \.wmv$ FromOrTo: default # cat deny.filetypes.rules FromOrTo: *@example.com \.wmv$ FromOrTo: default (I think that's the right format for those two files?) and that also still allows through the wmv attachments. Is there anything else I am missing here? if not, any ideas why this doesn't work or how I can get it to work? Thanks. Michael. --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/286ae20d/attachment.html From J.Ede at birchenallhowden.co.uk Tue Nov 27 14:14:16 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Tue Nov 27 14:16:06 2007 Subject: MailScanner fails after 'up2date -u' done In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C3AA383@largo.campus.ncl.ac.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C3AA383@largo.campus.ncl.ac.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE06D@server02.bhl.local> perl -MCPAN -e shell force install Scalar::Util ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Quentin Campbell [Q.G.Campbell@newcastle.ac.uk] Sent: 27 November 2007 14:03 To: MailScanner discussion Subject: MailScanner fails after 'up2date -u' done After doing an 'up2date -u' on a RH AS4 system MailScanner failed to start. Running in debug mode I get: Starting MailScanner daemons: incoming sendmail: [ OK ] outgoing sendmail: [ OK ] MailScanner: is only avaliable with the XS version at /usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9 BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9. Compilation failed in require at /usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. BEGIN failed--compilation aborted at /usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48. BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48. Compilation failed in require at /usr/sbin/MailScanner line 79. BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. [ OK ] I am investigating but any pointers as to the likely cause would be welcome. Am running MailScanner-4.65.3-1. Quentin --- PHONE: +44 191 222 8209 Information Systems and Services (ISS), Newcastle University, Newcastle upon Tyne, FAX: +44 191 222 8765 United Kingdom, NE1 7RU. ------------------------------------------------------------------------ -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From shuttlebox at gmail.com Tue Nov 27 14:20:54 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Tue Nov 27 14:20:56 2007 Subject: Can't block wmv files In-Reply-To: <392617.38195.qm@web33306.mail.mud.yahoo.com> References: <392617.38195.qm@web33306.mail.mud.yahoo.com> Message-ID: <625385e30711270620y9d4352dg3575133f45c2d384@mail.gmail.com> On Nov 27, 2007 3:08 PM, Michael Mansour wrote: > %etc-dir%/example.com.filename.rules: > > and %etc-dir%/example.com.filetype.rules: Those filenames don't match what you have in your rulesets, note the missing .conf at the end: > FromOrTo: *@example.com > /etc/MailScanner/example.com.filename.rules.conf > FromOrTo: default /etc/MailScanner/filename.rules.conf > > FromOrTo: *@example.com > /etc/MailScanner/example.com.filetype.rules.conf > FromOrTo: default /etc/MailScanner/filetype.rules.conf Also, you do have tabs as whitespace in both files and no strange end-of-lines, common if you edit the files in Windows? -- /peter From Q.G.Campbell at newcastle.ac.uk Tue Nov 27 14:30:01 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Tue Nov 27 14:34:53 2007 Subject: MailScanner fails after 'up2date -u' done In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE06D@server02.bhl.local> References: <4165CF7A7F12DE4B96622CCBB90586470C3AA383@largo.campus.ncl.ac.uk> <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE06D@server02.bhl.local> Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C3AA394@largo.campus.ncl.ac.uk> Jason It fixed it. Thanks. Line 9 pointed at Scalar::Util. :-( This was the only one of 11 MailScanner hosts, supposedly identical, updated today that hit this problem. The 'up2date' config should be the same on all of them. I now need to find out why this machine was different. Quentin >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Jason Ede >Sent: 27 November 2007 14:14 >To: MailScanner discussion >Subject: RE: MailScanner fails after 'up2date -u' done > >perl -MCPAN -e shell >force install Scalar::Util > >________________________________________ >From: mailscanner-bounces@lists.mailscanner.info [mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Quentin Campbell >[Q.G.Campbell@newcastle.ac.uk] >Sent: 27 November 2007 14:03 >To: MailScanner discussion >Subject: MailScanner fails after 'up2date -u' done > >After doing an 'up2date -u' on a RH AS4 system MailScanner failed to >start. > >Running in debug mode I get: > >Starting MailScanner daemons: > incoming sendmail: [ OK ] > outgoing sendmail: [ OK ] > MailScanner: is only avaliable with the XS version at >/usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9 >BEGIN failed--compilation aborted at >/usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9. >Compilation failed in require at >/usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. >BEGIN failed--compilation aborted at >/usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. >Compilation failed in require at >/usr/lib/MailScanner/MailScanner/Message.pm line 48. >BEGIN failed--compilation aborted at >/usr/lib/MailScanner/MailScanner/Message.pm line 48. >Compilation failed in require at /usr/sbin/MailScanner line 79. >BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. > [ OK ] > >I am investigating but any pointers as to the likely cause would be >welcome. Am running MailScanner-4.65.3-1. > >Quentin >--- >PHONE: +44 191 222 8209 Information Systems and Services (ISS), > Newcastle University, > Newcastle upon Tyne, >FAX: +44 191 222 8765 United Kingdom, NE1 7RU. >----------------------------------------------------------------------- - > > > >-- >MailScanner mailing list >mailscanner@lists.mailscanner.info >http://lists.mailscanner.info/mailman/listinfo/mailscanner > >Before posting, read http://wiki.mailscanner.info/posting > >Support MailScanner development - buy the book off the website! >-- >MailScanner mailing list >mailscanner@lists.mailscanner.info >http://lists.mailscanner.info/mailman/listinfo/mailscanner > >Before posting, read http://wiki.mailscanner.info/posting > >Support MailScanner development - buy the book off the website! From ram at netcore.co.in Tue Nov 27 15:37:12 2007 From: ram at netcore.co.in (Ramprasad) Date: Tue Nov 27 15:40:21 2007 Subject: Disabling auto sa-update in MailScanner Message-ID: <474C39A8.8010804@netcore.co.in> How can I disable sa-update in mailscanner Some rules added due to sa-update ( especially the completewhois lookups ) create problems for my server. I cannot disable the rules by scoring them 0 , because the actual rules are sometime removed by sa-update and a score of 0 in local.cf gives lint errors I simply want to run sa-update manually and I dont want Mailscanner running it automatically for me How do I do this ? Thanks Ram ===================== netCORE Solutions Disclaimer ===================== This e-mail contains confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error), please notify the sender immediately and delete this e-mail. Any unauthorized copying, disclosure, use or distribution of the material in this e-mail is strictly forbidden. ======================================================================== From prandal at herefordshire.gov.uk Tue Nov 27 15:54:06 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue Nov 27 15:54:20 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <474C39A8.8010804@netcore.co.in> References: <474C39A8.8010804@netcore.co.in> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA667@HC-MBX02.herefordshire.gov.uk> eh what? [root@mx0 root]# cd /var/lib/spamassassin/3.002003/updates_spamassassin_org [root@mx0 updates_spamassassin_org]# ls 10_default_prefs.cf 20_vbounce.cf 30_text_it.cf 20_advance_fee.cf 23_bayes.cf 30_text_nl.cf 20_body_tests.cf 25_accessdb.cf 30_text_pl.cf 20_compensate.cf 25_antivirus.cf 30_text_pt_br.cf 20_dnsbl_tests.cf 25_asn.cf 50_scores.cf 20_drugs.cf 25_dcc.cf 60_awl.cf 20_dynrdns.cf 25_dkim.cf 60_shortcircuit.cf 20_fake_helo_tests.cf 25_domainkeys.cf 60_whitelist.cf 20_head_tests.cf 25_hashcash.cf 60_whitelist_dk.cf 20_html_tests.cf 25_pyzor.cf 60_whitelist_dkim.cf 20_imageinfo.cf 25_razor2.cf 60_whitelist_spf.cf 20_meta_tests.cf 25_replace.cf 60_whitelist_subject.cf 20_net_tests.cf 25_spf.cf 72_active.cf 20_phrases.cf 25_textcat.cf 72_scores.cf 20_porn.cf 25_uribl.cf 80_additional.cf 20_ratware.cf 30_text_de.cf MIRRORED.BY 20_uri_tests.cf 30_text_fr.cf [root@mx0 updates_spamassassin_org]# grep -i completewho [root@mx0 updates_spamassassin_org]# grep -i completewho *.cf [root@mx0 updates_spamassassin_org]# I see no COMPLETEWHOIS rules because sa-update took them away. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Ramprasad > Sent: 27 November 2007 15:37 > To: MailScanner discussion; ram > Subject: Disabling auto sa-update in MailScanner > > How can I disable sa-update in mailscanner > > Some rules added due to sa-update ( especially the > completewhois lookups > ) create problems for my server. I cannot disable the rules > by scoring > them 0 , because the actual rules are sometime removed by > sa-update and > a score of 0 in local.cf gives lint errors > > I simply want to run sa-update manually and I dont want Mailscanner > running it automatically for me > > How do I do this ? > > Thanks > Ram > > > ===================== netCORE Solutions Disclaimer > ===================== > > This e-mail contains confidential and/or privileged > information. If you > are not the intended recipient (or have received this e-mail > in error), > please notify the sender immediately and delete this > e-mail. Any > unauthorized copying, disclosure, use or distribution of the > material in > this e-mail is strictly forbidden. > > ============================================================== > ========== > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From martinh at solidstatelogic.com Tue Nov 27 15:56:41 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Tue Nov 27 15:56:45 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <474C39A8.8010804@netcore.co.in> Message-ID: <90c02b06782fc7439a8293030f09399a@solidstatelogic.com> Ram Sa-update is a manual thing, infact it will 'fix' the completewhois crud in 3.2.3 by turning it off. It's up to you to say when to run sa-update/rdj etc etc via cron or whatever, MS doesn't get involved. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Ramprasad > Sent: 27 November 2007 15:37 > To: MailScanner discussion; ram > Subject: Disabling auto sa-update in MailScanner > > How can I disable sa-update in mailscanner > > Some rules added due to sa-update ( especially the completewhois lookups > ) create problems for my server. I cannot disable the rules by scoring > them 0 , because the actual rules are sometime removed by sa-update and > a score of 0 in local.cf gives lint errors > > I simply want to run sa-update manually and I dont want Mailscanner > running it automatically for me > > How do I do this ? > > Thanks > Ram > > > ===================== netCORE Solutions Disclaimer ===================== > > This e-mail contains confidential and/or privileged information. If you > are not the intended recipient (or have received this e-mail in error), > please notify the sender immediately and delete this e-mail. Any > unauthorized copying, disclosure, use or distribution of the material in > this e-mail is strictly forbidden. > > ======================================================================== > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From ssilva at sgvwater.com Tue Nov 27 15:59:55 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 27 16:00:21 2007 Subject: URIBL_SBL timeouts running MS in debug mode. In-Reply-To: <223f97700711270004s4dd35b50jd8de4d39fe09529f@mail.gmail.com> References: <47459A74.1050200@alexb.ch> <47459D84.2070204@fsl.com> <474691A3.2040607@fsl.com> <223f97700711270004s4dd35b50jd8de4d39fe09529f@mail.gmail.com> Message-ID: on 11/27/2007 12:04 AM Glenn Steen spake the following: > On 27/11/2007, Scott Silva wrote: >> on 11/26/2007 3:56 PM Scott Silva spake the following: >>> on 11/23/2007 12:38 AM Steve Freegard spake the following: >>>> Hi Scott, >>>> >>>> Scott Silva wrote: >>>>> I just found my servers are both firewalled, although we have less >>>>> than a tenth of the traffic that they say is allowed. I guess that >>>>> they found that money is more important than the good fight! I guess >>>>> I'm back to the njabl and the dsbl. >>>> Add Spamcop to that list (bl.spamcop.net) - it's much more reliable >>>> than it used to be, so it can be safely used at the MTA level now. It >>>> is almost as effective as the SBL+XBL portions of Spamhaus from my own >>>> testing. >>>> >>>> Remember you can still query the CBL (cbl.abuseat.org) which forms the >>>> largest and most frequently changed part of the Zen dataset providing >>>> you fall under their usage terms as well. >>>> >>>> Cheers, >>>> Steve. >>> Does anybody have an idea on how long the block lasts? Or is it permanent? >>> I have an e-mail in to spamhaus asking for info on why I was blocked. >>> But I'm not holding my breath! >>> >> Finally had time to research this and it looks like I got firewalled around 1 >> October. I guess spamassassin caught the load as there wasn't a significant >> increase of end user spam. I just used up some more of the systems horsepower. >> It is nice that the system had enough headroom to keep up. Still a lot less >> than the 100K per day or 320K connections per day that you are allowed. >> I see an average of less than 6K per day on the crapification scale. >> > I think someone (was it UxBoD=Phil?) that mentioned this before... If > you do your DNS "shoppng" through forwarders to your SPs DNS, it might > be them getting FW'd, not you as such. > > Cheers My caching dns goes straight to the root servers. I guess I could set one on another address, since I have a dozen or so unused, but I seem to be doing ok with the changes I made. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From J.Ede at birchenallhowden.co.uk Tue Nov 27 15:59:48 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Tue Nov 27 16:04:24 2007 Subject: MailScanner fails after 'up2date -u' done In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C3AA394@largo.campus.ncl.ac.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C3AA383@largo.campus.ncl.ac.uk> <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE06D@server02.bhl.local>, <4165CF7A7F12DE4B96622CCBB90586470C3AA394@largo.campus.ncl.ac.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE06E@server02.bhl.local> I have this problem on all 3 of my FC7 machines when I run yum update... I've actually downloaded the Scalar::Util code and its ready compiled so just need to do make install on it each time after yum updates perl. I also need to remove a lot of the perl rpm's before running yum update (mainly perl-Math-BigInt perl-Math-BigRat perl-bignum perl-Sys-Syslog and perl-MIME-Base64 and I think perl-GetOpt-Long) not sure if I've case correct on all of those... I'm waiting for day that FC7 exists as a yum repository. Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Quentin Campbell [Q.G.Campbell@newcastle.ac.uk] Sent: 27 November 2007 14:30 To: MailScanner discussion Subject: RE: MailScanner fails after 'up2date -u' done Jason It fixed it. Thanks. Line 9 pointed at Scalar::Util. :-( This was the only one of 11 MailScanner hosts, supposedly identical, updated today that hit this problem. The 'up2date' config should be the same on all of them. I now need to find out why this machine was different. Quentin >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Jason Ede >Sent: 27 November 2007 14:14 >To: MailScanner discussion >Subject: RE: MailScanner fails after 'up2date -u' done > >perl -MCPAN -e shell >force install Scalar::Util > >________________________________________ >From: mailscanner-bounces@lists.mailscanner.info [mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Quentin Campbell >[Q.G.Campbell@newcastle.ac.uk] >Sent: 27 November 2007 14:03 >To: MailScanner discussion >Subject: MailScanner fails after 'up2date -u' done > >After doing an 'up2date -u' on a RH AS4 system MailScanner failed to >start. > >Running in debug mode I get: > >Starting MailScanner daemons: > incoming sendmail: [ OK ] > outgoing sendmail: [ OK ] > MailScanner: is only avaliable with the XS version at >/usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9 >BEGIN failed--compilation aborted at >/usr/lib/perl5/site_perl/5.8.5/Compress/Zlib.pm line 9. >Compilation failed in require at >/usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. >BEGIN failed--compilation aborted at >/usr/lib/perl5/site_perl/5.8.5/Archive/Zip.pm line 24. >Compilation failed in require at >/usr/lib/MailScanner/MailScanner/Message.pm line 48. >BEGIN failed--compilation aborted at >/usr/lib/MailScanner/MailScanner/Message.pm line 48. >Compilation failed in require at /usr/sbin/MailScanner line 79. >BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79. > [ OK ] > >I am investigating but any pointers as to the likely cause would be >welcome. Am running MailScanner-4.65.3-1. > >Quentin >--- >PHONE: +44 191 222 8209 Information Systems and Services (ISS), > Newcastle University, > Newcastle upon Tyne, >FAX: +44 191 222 8765 United Kingdom, NE1 7RU. >----------------------------------------------------------------------- - > > > >-- >MailScanner mailing list >mailscanner@lists.mailscanner.info >http://lists.mailscanner.info/mailman/listinfo/mailscanner > >Before posting, read http://wiki.mailscanner.info/posting > >Support MailScanner development - buy the book off the website! >-- >MailScanner mailing list >mailscanner@lists.mailscanner.info >http://lists.mailscanner.info/mailman/listinfo/mailscanner > >Before posting, read http://wiki.mailscanner.info/posting > >Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From ssilva at sgvwater.com Tue Nov 27 16:03:21 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 27 16:05:14 2007 Subject: OOT: Spamhaus professional service In-Reply-To: <474BE3A7.7020102@indomino.net> References: <474BE3A7.7020102@indomino.net> Message-ID: on 11/27/2007 1:30 AM Budi Febrianto spake the following: > Hi, > I just move out to another company, that the size is bigger than the > last one. > I want to use spamhaus in mta level, but know I worried about the size. > > based on > http://www.spamhaus.org/organization/dnsblusage.html > > I wonder, can I still use the free service, or I had to use the > professional service? > Number of user aprox 500 users, and it may double next year. > I still don't kwnw how many emails we are receives everyday because > rigth now we are using mdaemon as mail server. I plan to move it to > mailscanner with zen.spamhaus.org > Anybody still using spamhaus with the same user or maybe even larger > users? Any problem? > > Thanks > > > > I was using it with 2 servers, about 100 total users and I got firewalled. You will probably need to buy a feed. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From prandal at herefordshire.gov.uk Tue Nov 27 16:17:29 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue Nov 27 16:17:38 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <90c02b06782fc7439a8293030f09399a@solidstatelogic.com> References: <474C39A8.8010804@netcore.co.in> <90c02b06782fc7439a8293030f09399a@solidstatelogic.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA68C@HC-MBX02.herefordshire.gov.uk> On reflection, the best way to do with this sort of thing (if you don't trust the SA developers) is to (a) edit the appropriate xx_scores.cf file in /var/lib/spamassassin/3.002003/updates_spamassassin_org (b) after automatically or manually running sa-update, reapply whatever tweaks you had before, spamassassin --lint, and fix. The advantage to doing this way is that after an sa-update you won't get a lint fail (though other things may cause you grief). Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Martin.Hepworth > Sent: 27 November 2007 15:57 > To: MailScanner discussion > Subject: RE: Disabling auto sa-update in MailScanner > > Ram > > Sa-update is a manual thing, infact it will 'fix' the > completewhois crud in 3.2.3 by turning it off. > > It's up to you to say when to run sa-update/rdj etc etc via > cron or whatever, MS doesn't get involved. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner- > > bounces@lists.mailscanner.info] On Behalf Of Ramprasad > > Sent: 27 November 2007 15:37 > > To: MailScanner discussion; ram > > Subject: Disabling auto sa-update in MailScanner > > > > How can I disable sa-update in mailscanner > > > > Some rules added due to sa-update ( especially the > completewhois lookups > > ) create problems for my server. I cannot disable the > rules by scoring > > them 0 , because the actual rules are sometime removed by > sa-update and > > a score of 0 in local.cf gives lint errors > > > > I simply want to run sa-update manually and I dont want Mailscanner > > running it automatically for me > > > > How do I do this ? > > > > Thanks > > Ram > > > > > > ===================== netCORE Solutions Disclaimer > ===================== > > > > This e-mail contains confidential and/or privileged > information. If you > > are not the intended recipient (or have received this > e-mail in error), > > please notify the sender immediately and delete this > e-mail. Any > > unauthorized copying, disclosure, use or distribution of > the material in > > this e-mail is strictly forbidden. > > > > > ============================================================== > ========== > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > ********************************************************************** > Confidentiality : This e-mail and any attachments are > intended for the > addressee only and may be confidential. If they come to you in error > you must take no action based on them, nor must you copy or show them > to anyone. Please advise the sender by replying to this e-mail > immediately and then delete the original from your computer. > Opinion : Any opinions expressed in this e-mail are entirely those of > the author and unless specifically stated to the contrary, are not > necessarily those of the author's employer. > Security Warning : Internet e-mail is not necessarily a secure > communications medium and can be subject to data corruption. > We advise > that you consider this fact when e-mailing us. > Viruses : We have taken steps to ensure that this e-mail and any > attachments are free from known viruses but in keeping with good > computing practice, you should ensure that they are virus free. > > Red Lion 49 Ltd T/A Solid State Logic > Registered as a limited company in England and Wales > (Company No:5362730) > Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, > United Kingdom > ********************************************************************** > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From vincent at zijnemail.nl Tue Nov 27 16:21:40 2007 From: vincent at zijnemail.nl (Vincent Verhagen) Date: Tue Nov 27 16:21:55 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <90c02b06782fc7439a8293030f09399a@solidstatelogic.com> References: <90c02b06782fc7439a8293030f09399a@solidstatelogic.com> Message-ID: <474C4414.5020006@zijnemail.nl> Martin, Sa-update does get executed automatically when you've installed the RedHat RPM version of MS. /etc/cron.daily/update_spamassassin executes /usr/sbin/update_spamassassin Ram, You can disable this by editing /usr/sbin/update_spamassassin and changing the "Disabled=no" line to "Disabled=yes" or something like "chmod a-x /etc/cron.daily/update_spamassassin" Grtz, Vincent. Martin.Hepworth wrote: > Ram > > Sa-update is a manual thing, infact it will 'fix' the completewhois crud in 3.2.3 by turning it off. > > It's up to you to say when to run sa-update/rdj etc etc via cron or whatever, MS doesn't get involved. > > > >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >> bounces@lists.mailscanner.info] On Behalf Of Ramprasad >> Sent: 27 November 2007 15:37 >> To: MailScanner discussion; ram >> Subject: Disabling auto sa-update in MailScanner >> >> How can I disable sa-update in mailscanner >> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/519bae18/attachment-0001.html From Richard.Frovarp at sendit.nodak.edu Tue Nov 27 16:26:16 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Tue Nov 27 16:26:21 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA68C@HC-MBX02.herefordshire.gov.uk> References: <474C39A8.8010804@netcore.co.in> <90c02b06782fc7439a8293030f09399a@solidstatelogic.com> <7EF0EE5CB3B263488C8C18823239BEBA023EA68C@HC-MBX02.herefordshire.gov.uk> Message-ID: <474C4528.2090601@sendit.nodak.edu> Randal, Phil wrote: > On reflection, the best way to do with this sort of thing (if you don't > trust the SA developers) is to > > (a) edit the appropriate xx_scores.cf file in > /var/lib/spamassassin/3.002003/updates_spamassassin_org > > Don't muck with standard rules files. Any time sa-update was called or a new version of SA installed you'd lose your changes. Edit /etc/mail/spamassassin/local.cf to override scores. From MailScanner at ecs.soton.ac.uk Tue Nov 27 16:26:13 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 27 16:26:35 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <474C39A8.8010804@netcore.co.in> References: <474C39A8.8010804@netcore.co.in> Message-ID: <474C4525.1020805@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ramprasad wrote: > How can I disable sa-update in mailscanner Remove the execute bits from /etc/cron.daily/update_spamassassin. > > Some rules added due to sa-update ( especially the completewhois > lookups ) create problems for my server. I cannot disable the rules > by scoring them 0 , because the actual rules are sometime removed by > sa-update and a score of 0 in local.cf gives lint errors > > I simply want to run sa-update manually and I dont want Mailscanner > running it automatically for me > > How do I do this ? > > Thanks > Ram > > > ===================== netCORE Solutions Disclaimer ===================== > > This e-mail contains confidential and/or privileged information. If you > are not the intended recipient (or have received this e-mail in error), > please notify the sender immediately and delete this e-mail. Any > unauthorized copying, disclosure, use or distribution of the material in > this e-mail is strictly forbidden. > > ======================================================================== > Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHTEUtEfZZRxQVtlQRAmpLAKCYUm89MBBAz+d0KhO+nACktgCdEgCfUEOm OPp6usOx+9wZEIF+FBnz+Co= =9SmE -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Tue Nov 27 16:26:26 2007 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Tue Nov 27 16:26:46 2007 Subject: Can't block wmv files In-Reply-To: <625385e30711270620y9d4352dg3575133f45c2d384@mail.gmail.com> References: <392617.38195.qm@web33306.mail.mud.yahoo.com> <625385e30711270620y9d4352dg3575133f45c2d384@mail.gmail.com> Message-ID: <474C4532.5040600@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 27, 2007 3:08 PM, Michael Mansour wrote: > >> %etc-dir%/example.com.filename.rules: >> >> and %etc-dir%/example.com.filetype.rules: >> > > Those filenames don't match what you have in your rulesets, note the > missing .conf at the end: > > >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filename.rules.conf >> FromOrTo: default /etc/MailScanner/filename.rules.conf >> >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filetype.rules.conf >> FromOrTo: default /etc/MailScanner/filetype.rules.conf >> > > Also, you do have tabs as whitespace in both files and no strange > end-of-lines, common if you edit the files in Windows? > The only places you need tabs instead of spaces are in the example.com.filetype/name.rules.conf and filetype/name.rules.conf files. You can use any whitespace in *.rules files. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHTEU5EfZZRxQVtlQRAka5AKCXpWU5qvFt0evj2jlp7L+1NTPIzACePTZZ AF+Qk3cx2+fZQL4hbFaJRvc= =jhzR -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From prandal at herefordshire.gov.uk Tue Nov 27 16:40:41 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Tue Nov 27 16:40:52 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <474C4528.2090601@sendit.nodak.edu> References: <474C39A8.8010804@netcore.co.in> <90c02b06782fc7439a8293030f09399a@solidstatelogic.com><7EF0EE5CB3B263488C8C18823239BEBA023EA68C@HC-MBX02.herefordshire.gov.uk> <474C4528.2090601@sendit.nodak.edu> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA69A@HC-MBX02.herefordshire.gov.uk> But then you have thge problem the originator of this thread was complaining about... Hence my suggestion for his case. Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Richard Frovarp > Sent: 27 November 2007 16:26 > To: MailScanner discussion > Subject: Re: Disabling auto sa-update in MailScanner > > Randal, Phil wrote: > > On reflection, the best way to do with this sort of thing > (if you don't > > trust the SA developers) is to > > > > (a) edit the appropriate xx_scores.cf file in > > /var/lib/spamassassin/3.002003/updates_spamassassin_org > > > > > Don't muck with standard rules files. Any time sa-update was > called or a > new version of SA installed you'd lose your changes. Edit > /etc/mail/spamassassin/local.cf to override scores. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From igalvarez at gmail.com Tue Nov 27 16:50:20 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Tue Nov 27 16:50:23 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711251256wf38ad23xca6c6ff50cabbeee@mail.gmail.com> References: <194a2c240711251103h13d77e8bnb3de151a82ab3c39@mail.gmail.com> <223f97700711251146r4d83bf5eie2dce249e754bac9@mail.gmail.com> <194a2c240711251222w51219bd5jf22e665608a30ca2@mail.gmail.com> <223f97700711251256wf38ad23xca6c6ff50cabbeee@mail.gmail.com> Message-ID: <194a2c240711270850w83aa0c2l184e423725d006d@mail.gmail.com> On Nov 25, 2007 3:56 PM, Glenn Steen wrote: > On 25/11/2007, Israel Garcia wrote: > > On Nov 25, 2007 2:46 PM, Glenn Steen wrote: > > > > > > > > > > > > > > On 25/11/2007, Israel Garcia wrote: > > > > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on > a > > > > CentOS4.5 Linux server. I installed too the package > > > > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to > > activate spamassassin > > > > with mailscanner. I ran spamassassin -D --lint and there's no > problem > > > > in my configuration files. I also see in maillog file the > spamassassin > > > > doing its work with spam: > > > > > > > > Nov 25 04:54:51 hostname MailScanner[20611]: Message > B25732B1DB.A9A63 > > > > from 75.93.188.141 (jerrimy@donin.com) to mydomain.com is spam, > > > > SBL+XBL, spamcop.net , SpamAssassin (not cached, score=30.984, > required > > > > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, > > > > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, > > > > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, > RCVD_IN_XBL > > > > 2.90, RDNS_DYNAMIC 0.10, SARE_SPEC_REPLICA_OBFU 1.81, > > > > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, > > > > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, > > > > URIBL_SC_SURBL 2.52) > > > > > > > > Everything is fine BUT, when I run "qshape hold" I see the HOLD > folder > > > > is FULL of messages waiting to be processed, I mean thousands of > mails > > > > waiting and there is a long delay in delivering. > > > > My link to internet is not full, I mean I see the normal traffic. > > > > > > > > So, when I turn off spamassassin in MailScanner.conf there's almost > no > > > > messages in HOLD foder. > > > > > > > > My questions are: > > > > > > > > 1. How can I speed the spamassassin process in my server? > > > Use a caching only DNS, limit what you check (RBLs etc).... There are > > > some things to do:-) > > > > > > > > > > I have in this server a caching only DNS... > > > > > > > > > > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, > and > > > > others that comes activated by default when I install spamassassin > > > > package)? > > > No. But they all contribute something:-). WRT Pyzor, make sure you use > > > the "alternative" server, the official one will likely just time out. > > > What modules do you load? > > > > I use DCC, razor2, pyzor and all the stuff from /etc/mail/spamassassin > > config files: > > > > -rw-r--r-- 1 root root 1089 Jun 2 13:40 init.pre > > lrwxrwxrwx 1 root root 41 Jun 2 21:43 local.cf -> > > /etc/MailScanner/spam.assassin.prefs.conf > You shouldn't have local.cf as a link to spam.assassin.prefs.conf.... > That was more a thing some did before the advent of the mailscanner.cf > link. > local.cf is a perfect place to have local rescoring etc ... Like > setting dead RBLs to score 0 (thus preventing a timeout problem), or > RBLs that might be ... problematic (like if you get firewalled by > spamhaus... Check recent threads on the list for a simple test to see > if you've been FW'd by them). > Glenn, sorry my delay in answers you but I was busy with this server... I dont really get what you mean by local.cf file.. should I delete the local.cf link? > > lrwxrwxrwx 1 root root 41 Nov 24 11:00 mailscanner.cf -> > > /etc/MailScanner/spam.assassin.prefs.conf > > drwxr-xr-x 3 root root 4096 Nov 24 15:43 old > > drwxr-xr-x 2 root root 4096 Nov 25 05:05 RulesDuJour > > drwx------ 2 root root 4096 Nov 25 05:08 sa-update-keys > > -rw-r--r-- 1 root root 2439 Jun 2 14:03 v310.pre > > -rw-r--r-- 1 root root 922 Jun 2 13:39 v312.pre > > -rw-r--r-- 1 root root 2299 Jun 2 13:40 v320.pre > > I was more thinking along the lines of what loadmodule statements that > you have active:-). Check that ASN isn't loaded... for example:-). > If you like, paste result of > # grep -i loadplug /etc/mail/spamassassin/*.pre Here you go: [root@domain.com:/etc/yum.repos.d]$ grep -i loadplug /etc/mail/spamassassin/*.pre /etc/mail/spamassassin/init.pre:# loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::Hashcash /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::DCC /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::Pyzor /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::SpamCop /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::AntiVirus /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::AWL /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::TextCat /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::AccessDB /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::DomainKeys /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::MIMEHeader /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::ReplaceTags /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v312.pre:#loadplugin Mail::SpamAssassin::Plugin::DKIM /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Check /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HTTPSMismatch /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIDetail /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::Shortcircuit /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Bayes /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::BodyEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::DNSEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HTMLEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HeaderEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::MIMEEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::RelayEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::WLBLEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::VBounce /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::Rule2XSBody /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::ImageInfo /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::ASN > > > (snip) > > I'm running to read them NOW! :-) > Good. The message never received is the least loading...:-). > So, I have to tell you I'm having the same problem with a lot of messages in HOLD folder when I check mails with spamassassin.. I also note this things: 1. My link to Internet is FULL and high % is SMTP. 2. I see a laod average high load average: 9.92, 8.29, 7.21 (I have a compaq proliant with two CPUs and 2GB RAM) 3. I am processing almost 40000 email daily.is it high for this server with 256Kbps Frame relay connection? thanks in advance regards Israel > > > > > > > > > > > > > > > > 4. Does anybody knows some perfect setup (best perfomance) to > install > > > > mailscanner with spamssassin? some link? some tutorial? > > > Perfect is too much to aim for;-). I usually try for functional:-):-) > > > > :-) :-) .. thanks a lot Glenn > :-) > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/31783fe3/attachment.html From Richard.Frovarp at sendit.nodak.edu Tue Nov 27 16:57:01 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Tue Nov 27 16:57:04 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA69A@HC-MBX02.herefordshire.gov.uk> References: <474C39A8.8010804@netcore.co.in> <90c02b06782fc7439a8293030f09399a@solidstatelogic.com><7EF0EE5CB3B263488C8C18823239BEBA023EA68C@HC-MBX02.herefordshire.gov.uk> <474C4528.2090601@sendit.nodak.edu> <7EF0EE5CB3B263488C8C18823239BEBA023EA69A@HC-MBX02.herefordshire.gov.uk> Message-ID: <474C4C5D.1060105@sendit.nodak.edu> Randal, Phil wrote: > But then you have thge problem the originator of this thread was > complaining about... > > Hence my suggestion for his case. > > Phil > I see. I just read the original post. They aren't lint errors, they're lint warnings. From Richard.Frovarp at sendit.nodak.edu Tue Nov 27 16:59:40 2007 From: Richard.Frovarp at sendit.nodak.edu (Richard Frovarp) Date: Tue Nov 27 16:59:42 2007 Subject: Disabling auto sa-update in MailScanner In-Reply-To: <474C39A8.8010804@netcore.co.in> References: <474C39A8.8010804@netcore.co.in> Message-ID: <474C4CFC.5080403@sendit.nodak.edu> Ramprasad wrote: > > Some rules added due to sa-update ( especially the completewhois > lookups ) create problems for my server. I cannot disable the rules > by scoring them 0 , because the actual rules are sometime removed by > sa-update and a score of 0 in local.cf gives lint errors Don't worry about it. They aren't lint errors, they are just lint warnings. At only warnings, SpamAssassin will run just fine and lint will return the proper success code. Lint errors indicate there is a problem with SA running, not warnings. Score them at 0 in local.cf. If you see the warning and are so inclined at a future date, remove the score. From fons.vanderbeek at 84-it.com Tue Nov 27 17:13:19 2007 From: fons.vanderbeek at 84-it.com (Fons van der Beek) Date: Tue Nov 27 17:13:59 2007 Subject: problem upgrading MailScanner / PostFix Dbmail In-Reply-To: <223f97700711270518v510e21a8te01ed2d17f9a2214@mail.gmail.com> References: <474C15C5.6010505@84-it.com> <223f97700711270518v510e21a8te01ed2d17f9a2214@mail.gmail.com> Message-ID: <474C502F.5000009@84-it.com> I know Glenn, it's very old, so you can see how long i was (and certainly will be) a happy MailScanner user. Tnx for pointing me in the right direction............... It's indeed time for a new fresh installation............... Cheers! Glenn Steen schreef: > On 27/11/2007, Fons van der Beek wrote: > >> I've upgraded Postfix / Mailscanner interfacing to dbmail. >> >> The mail gets scanned OK, but after the scanning proces the mail isn't >> picked up correctly and stayes deferred. >> When I restart Mailscanner /etc/init.d/MailScanner stop and start >> >> The mail is nicely processed and is deliverd, running postfix -c >> /etc/postfix.in check or postfix -c /etc/postfix check >> Doesnt produce any errors... >> >> Can anybody give me a clue what i did wrong????????????? >> > (snip) > >> defer_transports = smtp local virtual relay >> > (snip) > Oh. My. God. > Stop using this old, unsupported, deprecated, unsafe method. Immediately. > The only really safe method of interfacing postfix and MailScanner is > described on the official website > (http://www.mailscanner.info/postfix.html) and also in the Wiki > (http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:installation). > These methods entail using one instance of Postfix and a header_check > to place incoming messages in the HOLD "queue"... > > Until you switch to this method of doing things, there is nothing we > can do to help you. > > Cheers > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/7ffbf81e/attachment.html From cleveland at winnefox.org Tue Nov 27 18:11:08 2007 From: cleveland at winnefox.org (Jody Cleveland) Date: Tue Nov 27 18:11:15 2007 Subject: Mail queue is about an hour behind Message-ID: Hello, I've been noticing mail being slow, and looked into it more, and it seems to be about an hour delay. I watch my postfix queue, and it grows faster than MailScanner can keep up with. Following the advice of an earlier thread, I ran MailScanner --debug, and this is what I get: # MailScanner --debug In Debugging mode, not forking... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1087. Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1089. max message size is '100000' max message size is '100000' max message size is '100000' max message size is '100000' max message size is '100000' max message size is '30000' max message size is '30000' max message size is '30000' max message size is '30000' Stopping now as you are debugging me. Any ideas what the problem is? - jody From uxbod at splatnix.net Tue Nov 27 18:11:31 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 18:11:44 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711270850w83aa0c2l184e423725d006d@mail.gmail.com> Message-ID: <306766.4171196187091910.JavaMail.root@office.splatnix.net> Well ASN is hashed out in your v320 pre file but is still active in the v310 file. We process over 100k messages a day on a 256k line so no real worries there. You say a high percentage of your traffic is SMTP, how are you identifying that ? Are you performing any sort of packet shaping or QoS then ? It does sound to me like DNS timeouts when performing lookups, as others have also said. If you set the list of RBLs to check to blank in MailScanner.conf does the problem disappear ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: On 25/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > On Nov 25, 2007 2:46 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > > > > > > > > On 25/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > > > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a > > > CentOS4.5 Linux server. I installed too the package > > > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to > activate spamassassin > > > with mailscanner. I ran spamassassin -D --lint and there's no problem > > > in my configuration files. I also see in maillog file the spamassassin > > > doing its work with spam: > > > > > > Nov 25 04:54:51 hostname MailScanner[20611]: Message B25732B1DB.A9A63 > > > from MailScanner warning: numerical links are often malicious: 75.93.188.141 ( jerrimy@donin.com ) to mydomain.com is spam, > > > SBL+XBL, spamcop.net , SpamAssassin (not cached, score=30.984, required > > > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, > > > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, > > > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL > > > 2.90, RDNS_DYNAMIC 0.10 , SARE_SPEC_REPLICA_OBFU 1.81, > > > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, > > > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, > > > URIBL_SC_SURBL 2.52) > > > > > > Everything is fine BUT, when I run "qshape hold" I see the HOLD folder > > > is FULL of messages waiting to be processed, I mean thousands of mails > > > waiting and there is a long delay in delivering. > > > My link to internet is not full, I mean I see the normal traffic. > > > > > > So, when I turn off spamassassin in MailScanner.conf there's almost no > > > messages in HOLD foder. > > > > > > My questions are: > > > > > > 1. How can I speed the spamassassin process in my server? > > Use a caching only DNS, limit what you check (RBLs etc).... There are > > some things to do:-) > > > > > > I have in this server a caching only DNS... > > > > > > > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and > > > others that comes activated by default when I install spamassassin > > > package)? > > No. But they all contribute something:-). WRT Pyzor, make sure you use > > the "alternative" server, the official one will likely just time out. > > What modules do you load? > > I use DCC, razor2, pyzor and all the stuff from /etc/mail/spamassassin > config files: > > -rw-r--r-- 1 root root 1089 Jun 2 13:40 init.pre > lrwxrwxrwx 1 root root 41 Jun 2 21:43 local.cf -> > /etc/MailScanner/spam.assassin.prefs.conf You shouldn't have local.cf as a link to spam.assassin.prefs.conf.... That was more a thing some did before the advent of the mailscanner.cf link. local.cf is a perfect place to have local rescoring etc ... Like setting dead RBLs to score 0 (thus preventing a timeout problem), or RBLs that might be ... problematic (like if you get firewalled by spamhaus... Check recent threads on the list for a simple test to see if you've been FW'd by them). Glenn, sorry my delay in answers you but I was busy with this server... I dont really get what you mean by local.cf file.. should I delete the local.cf link? > lrwxrwxrwx 1 root root 41 Nov 24 11:00 mailscanner.cf -> > /etc/MailScanner/spam.assassin.prefs.conf > drwxr-xr-x 3 root root 4096 Nov 24 15:43 old > drwxr-xr-x 2 root root 4096 Nov 25 05:05 RulesDuJour > drwx------ 2 root root 4096 Nov 25 05:08 sa-update-keys > -rw-r--r-- 1 root root 2439 Jun 2 14:03 v310.pre > -rw-r--r-- 1 root root 922 Jun 2 13:39 v312.pre > -rw-r--r-- 1 root root 2299 Jun 2 13:40 v320.pre I was more thinking along the lines of what loadmodule statements that you have active:-). Check that ASN isn't loaded... for example:-). If you like, paste result of # grep -i loadplug /etc/mail/spamassassin/*.pre Here you go: [root@domain.com:/etc/yum.repos.d]$ grep -i loadplug /etc/mail/spamassassin/*.pre /etc/mail/spamassassin/init.pre:# loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::Hashcash /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::DCC /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::Pyzor /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::SpamCop /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::AntiVirus /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::AWL /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::TextCat /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::AccessDB /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::DomainKeys /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::MIMEHeader /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::ReplaceTags /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v312.pre:#loadplugin Mail::SpamAssassin::Plugin::DKIM /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Check /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HTTPSMismatch /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIDetail /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::Shortcircuit /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Bayes /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::BodyEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::DNSEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HTMLEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HeaderEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::MIMEEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::RelayEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::WLBLEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::VBounce /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::Rule2XSBody /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::ImageInfo /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::ASN (snip) > I'm running to read them NOW! :-) Good. The message never received is the least loading...:-). So, I have to tell you I'm having the same problem with a lot of messages in HOLD folder when I check mails with spamassassin.. I also note this things: 1. My link to Internet is FULL and high % is SMTP. 2. I see a laod average high load average: 9.92, 8.29, 7.21 (I have a compaq proliant with two CPUs and 2GB RAM) 3. I am processing almost 40000 email daily.is it high for this server with 256Kbps Frame relay connection? thanks in advance regards Israel > > > > > > > > > > 4. Does anybody knows some perfect setup (best perfomance) to install > > > mailscanner with spamssassin? some link? some tutorial? > > Perfect is too much to aim for;-). I usually try for functional:-):-) > > :-) :-) .. thanks a lot Glenn :-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Regards; Israel Garcia -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Tue Nov 27 18:14:26 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 18:14:37 2007 Subject: Mail queue is about an hour behind In-Reply-To: Message-ID: <32816947.4231196187266066.JavaMail.root@office.splatnix.net> What version of MS are you running ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Jody Cleveland" To: "MailScanner discussion " Sent: Tuesday, November 27, 2007 6:11:08 PM (GMT) Europe/London Subject: Mail queue is about an hour behind Hello, I've been noticing mail being slow, and looked into it more, and it seems to be about an hour delay. I watch my postfix queue, and it grows faster than MailScanner can keep up with. Following the advice of an earlier thread, I ran MailScanner --debug, and this is what I get: # MailScanner --debug In Debugging mode, not forking... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1087. Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1089. max message size is '100000' max message size is '100000' max message size is '100000' max message size is '100000' max message size is '100000' max message size is '30000' max message size is '30000' max message size is '30000' max message size is '30000' Stopping now as you are debugging me. Any ideas what the problem is? - jody -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From stork at openenterprise.ca Tue Nov 27 18:20:22 2007 From: stork at openenterprise.ca (Johnny Stork) Date: Tue Nov 27 18:20:29 2007 Subject: Redundant Mail System Suggestions Message-ID: <474C5FE6.4010909@openenterprise.ca> I am working with a client seeking redundant mail and dns services so have been trying to come up with some suggested architectures. client has dual internet connections. So my first thought was create two identical MS/MW (mailscanner/mailwatch) systems, and assign each a different MX record with one being higher priority than the other. The machine running MS/MW would also be a DNS server so what would be the best way to setup some redundancy for both DNS and incoming mail? Primary MX Record 111.111.111.111 (Internet connection 1) Secondary MX Record 222.222.222.222 (Internet connection 2) What are the benefits/differences between creating a single A record with the same hostname, but the two different IP's above, versus multiple MX records but all with the same/different priority? Or, just list the machines as seperate MX records with the same priority? The next step is how to I ensure that the MS/MW systems on both servers remain synchronized? I can easily point them to a common Mysql database which will be running internally and will be redundant by way of a RH HA Cluster, but what about the mail user accounts? The client will be running an internal groupware solution, possibly Scalix, so all mail coming in to the gateway MS/MW servers will simple get forwarded with a mailertable entry so is there any need to synchronise anything else between the two gateway MW/MS servers? If anyone has any other suggestions/ideas for setting up such an environment I would be greatful. -- *Johnny Stork* Business & Technology Consultant stork@openenterprise.ca From steve.freegard at fsl.com Tue Nov 27 18:35:16 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Tue Nov 27 18:34:15 2007 Subject: Mail queue is about an hour behind In-Reply-To: References: Message-ID: <474C6364.60107@fsl.com> Jody Cleveland wrote: > Hello, > > I've been noticing mail being slow, and looked into it more, and it seems to > be about an hour delay. I watch my postfix queue, and it grows faster than > MailScanner can keep up with. > > Following the advice of an earlier thread, I ran MailScanner --debug, and > this is what I get: > > # MailScanner --debug > In Debugging mode, not forking... > SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp > Use of uninitialized value in concatenation (.) or string at > /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1087. > Use of uninitialized value in concatenation (.) or string at > /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1089. > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '30000' > max message size is '30000' > max message size is '30000' > max message size is '30000' > Stopping now as you are debugging me. > > Any ideas what the problem is? > 1) run MailScanner *and* SpamAssassin in debug mode as it will give you more clues than just the above output (MailScanner --debug --debug-sa). Look for timeouts in Razor/Pyzor/DCC/RBL/URIBLs and Bayes. 2) I would guess from the above output that you are using MCP? - if so, consider moving all your MCP rules into the main SpamAssassin run instead as MCP really is a performance killer as MailScanner has to reload SpamAssassin for each message (slow...) 3) Check your primary nameserver listed in /etc/resolv.conf and make sure the 1st server in the list is responding quickly (and consider using a local caching nameserver if you aren't already). 4) Make sure that you haven't been blocked by Spamhaus - run: host 2.0.0.127.zen.spamhaus.org And make sure you don't get a timeout. That should get you started. Cheers, Steve. From uxbod at splatnix.net Tue Nov 27 18:35:26 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 18:35:39 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C5FE6.4010909@openenterprise.ca> Message-ID: <23391158.4261196188526067.JavaMail.root@office.splatnix.net> Hey Johnny, Personal I would go with the primary and secondary MX record solution. Multiple A records are find but IMHO are more used for load balancing than redundancy. I presume MySQL will be used for MailWatch and SpamAssassin and then replicated, but you could look at storing the MS configuration withing LDAP (never tried this myself). If you are looking for a groupware solution I personally would recommend Zimbra http://www.zimbra.com . They have both a OSS version (what I am using here) and a commercial version. Outlook plugins etc. As standard it uses a Ajax full featured web interface and is superb. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Johnny Stork" To: mailscanner@lists.mailscanner.info Sent: Tuesday, November 27, 2007 6:20:22 PM (GMT) Europe/London Subject: Redundant Mail System Suggestions I am working with a client seeking redundant mail and dns services so have been trying to come up with some suggested architectures. client has dual internet connections. So my first thought was create two identical MS/MW (mailscanner/mailwatch) systems, and assign each a different MX record with one being higher priority than the other. The machine running MS/MW would also be a DNS server so what would be the best way to setup some redundancy for both DNS and incoming mail? Primary MX Record 111.111.111.111 (Internet connection 1) Secondary MX Record 222.222.222.222 (Internet connection 2) What are the benefits/differences between creating a single A record with the same hostname, but the two different IP's above, versus multiple MX records but all with the same/different priority? Or, just list the machines as seperate MX records with the same priority? The next step is how to I ensure that the MS/MW systems on both servers remain synchronized? I can easily point them to a common Mysql database which will be running internally and will be redundant by way of a RH HA Cluster, but what about the mail user accounts? The client will be running an internal groupware solution, possibly Scalix, so all mail coming in to the gateway MS/MW servers will simple get forwarded with a mailertable entry so is there any need to synchronise anything else between the two gateway MW/MS servers? If anyone has any other suggestions/ideas for setting up such an environment I would be greatful. -- *Johnny Stork* Business & Technology Consultant stork@openenterprise.ca -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From richard.frovarp at sendit.nodak.edu Tue Nov 27 18:40:05 2007 From: richard.frovarp at sendit.nodak.edu (Richard Frovarp) Date: Tue Nov 27 18:40:09 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <23391158.4261196188526067.JavaMail.root@office.splatnix.net> References: <23391158.4261196188526067.JavaMail.root@office.splatnix.net> Message-ID: <474C6485.8040903@sendit.nodak.edu> UxBoD wrote: > Hey Johnny, > > Personal I would go with the primary and secondary MX record solution. Multiple A records are find but IMHO are more used for load balancing than redundancy. Or if the links and machines are equal, go with equal MX records. Some broken mailers won't fail down the MX chain. From uxbod at splatnix.net Tue Nov 27 18:45:04 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 18:45:20 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C6485.8040903@sendit.nodak.edu> Message-ID: <15573374.4331196189104965.JavaMail.root@office.splatnix.net> Good point Richard I had not considered that. Also are the servers going to be in disperate locations or in the same data centre on different power phases. When people say redundant solution they don't always consider what a power failure could do. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Richard Frovarp" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 6:40:05 PM (GMT) Europe/London Subject: Re: Redundant Mail System Suggestions UxBoD wrote: > Hey Johnny, > > Personal I would go with the primary and secondary MX record solution. Multiple A records are find but IMHO are more used for load balancing than redundancy. Or if the links and machines are equal, go with equal MX records. Some broken mailers won't fail down the MX chain. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From stork at openenterprise.ca Tue Nov 27 18:50:33 2007 From: stork at openenterprise.ca (Johnny Stork) Date: Tue Nov 27 18:50:38 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <23391158.4261196188526067.JavaMail.root@office.splatnix.net> References: <23391158.4261196188526067.JavaMail.root@office.splatnix.net> Message-ID: <474C66F9.6010900@openenterprise.ca> Thanks kindly, and yes Zimbra was going to be one of the 3-4 systems I will setup for them to demo. Its been a year or more since I looked at Zimbra and so am lookign forward to seeing the changes. I didnt realize the SA uses the database anywhere? But maybe I missed this in the setup. I have been running MS/MW for a few years now and have been very happy. UxBoD wrote: > Hey Johnny, > > Personal I would go with the primary and secondary MX record solution. Multiple A records are find but IMHO are more used for load balancing than redundancy. > > I presume MySQL will be used for MailWatch and SpamAssassin and then replicated, but you could look at storing the MS configuration withing LDAP (never tried this myself). > > If you are looking for a groupware solution I personally would recommend Zimbra http://www.zimbra.com . They have both a OSS version (what I am using here) and a commercial version. Outlook plugins etc. As standard it uses a Ajax full featured web interface and is superb. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Johnny Stork" > To: mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 6:20:22 PM (GMT) Europe/London > Subject: Redundant Mail System Suggestions > > I am working with a client seeking redundant mail and dns services so > have been trying to come up with some suggested architectures. > > client has dual internet connections. So my first thought was create two > identical MS/MW (mailscanner/mailwatch) systems, and assign each a > different MX record with one being higher priority than the other. The > machine running MS/MW would also be a DNS server so what would be the > best way to setup some redundancy for both DNS and incoming mail? > > Primary MX Record 111.111.111.111 (Internet connection 1) > Secondary MX Record 222.222.222.222 (Internet connection 2) > > > What are the benefits/differences between creating a single A record > with the same hostname, but the two different IP's above, versus > multiple MX records but all with the same/different priority? Or, just > list the machines as seperate MX records with the same priority? > > > The next step is how to I ensure that the MS/MW systems on both servers > remain synchronized? I can easily point them to a common Mysql database > which will be running internally and will be redundant by way of a RH HA > Cluster, but what about the mail user accounts? The client will be > running an internal groupware solution, possibly Scalix, so all mail > coming in to the gateway MS/MW servers will simple get forwarded with a > mailertable entry so is there any need to synchronise anything else > between the two gateway MW/MS servers? > > If anyone has any other suggestions/ideas for setting up such an > environment I would be greatful. > > > > > -- *Johnny Stork* Business & Technology Consultant stork@openenterprise.ca From stork at openenterprise.ca Tue Nov 27 18:51:59 2007 From: stork at openenterprise.ca (Johnny Stork) Date: Tue Nov 27 18:52:02 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <15573374.4331196189104965.JavaMail.root@office.splatnix.net> References: <15573374.4331196189104965.JavaMail.root@office.splatnix.net> Message-ID: <474C674F.2020004@openenterprise.ca> They will be in the same location, and connected to seperate UPS's but same office power connections to the wall UxBoD wrote: > Good point Richard I had not considered that. Also are the servers going to be in disperate locations or in the same data centre on different power phases. When people say redundant solution they don't always consider what a power failure could do. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Richard Frovarp" > To: "MailScanner discussion" > Sent: Tuesday, November 27, 2007 6:40:05 PM (GMT) Europe/London > Subject: Re: Redundant Mail System Suggestions > > UxBoD wrote: > >> Hey Johnny, >> >> Personal I would go with the primary and secondary MX record solution. Multiple A records are find but IMHO are more used for load balancing than redundancy. >> > > Or if the links and machines are equal, go with equal MX records. Some > broken mailers won't fail down the MX chain. > -- *Johnny Stork* Business & Technology Consultant stork@openenterprise.ca From uxbod at splatnix.net Tue Nov 27 18:55:12 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 18:55:23 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C66F9.6010900@openenterprise.ca> Message-ID: <31098681.4361196189712112.JavaMail.root@office.splatnix.net> You can use SA with MySQL to hold the Bayes. Some people are pro and some are anti. I run the frontend MTAs for the company I am contracted to and use MySQL/Bayes on a central server with no probs. V5 of Zimbra (even though at RC2 at the moment) rocks! Try the hosted demo. Well worth it. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Johnny Stork" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 6:50:33 PM (GMT) Europe/London Subject: Re: Redundant Mail System Suggestions Thanks kindly, and yes Zimbra was going to be one of the 3-4 systems I will setup for them to demo. Its been a year or more since I looked at Zimbra and so am lookign forward to seeing the changes. I didnt realize the SA uses the database anywhere? But maybe I missed this in the setup. I have been running MS/MW for a few years now and have been very happy. UxBoD wrote: > Hey Johnny, > > Personal I would go with the primary and secondary MX record solution. Multiple A records are find but IMHO are more used for load balancing than redundancy. > > I presume MySQL will be used for MailWatch and SpamAssassin and then replicated, but you could look at storing the MS configuration withing LDAP (never tried this myself). > > If you are looking for a groupware solution I personally would recommend Zimbra http://www.zimbra.com . They have both a OSS version (what I am using here) and a commercial version. Outlook plugins etc. As standard it uses a Ajax full featured web interface and is superb. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Johnny Stork" > To: mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 6:20:22 PM (GMT) Europe/London > Subject: Redundant Mail System Suggestions > > I am working with a client seeking redundant mail and dns services so > have been trying to come up with some suggested architectures. > > client has dual internet connections. So my first thought was create two > identical MS/MW (mailscanner/mailwatch) systems, and assign each a > different MX record with one being higher priority than the other. The > machine running MS/MW would also be a DNS server so what would be the > best way to setup some redundancy for both DNS and incoming mail? > > Primary MX Record 111.111.111.111 (Internet connection 1) > Secondary MX Record 222.222.222.222 (Internet connection 2) > > > What are the benefits/differences between creating a single A record > with the same hostname, but the two different IP's above, versus > multiple MX records but all with the same/different priority? Or, just > list the machines as seperate MX records with the same priority? > > > The next step is how to I ensure that the MS/MW systems on both servers > remain synchronized? I can easily point them to a common Mysql database > which will be running internally and will be redundant by way of a RH HA > Cluster, but what about the mail user accounts? The client will be > running an internal groupware solution, possibly Scalix, so all mail > coming in to the gateway MS/MW servers will simple get forwarded with a > mailertable entry so is there any need to synchronise anything else > between the two gateway MW/MS servers? > > If anyone has any other suggestions/ideas for setting up such an > environment I would be greatful. > > > > > -- *Johnny Stork* Business & Technology Consultant stork@openenterprise.ca -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From richard.frovarp at sendit.nodak.edu Tue Nov 27 19:18:10 2007 From: richard.frovarp at sendit.nodak.edu (Richard Frovarp) Date: Tue Nov 27 19:18:14 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C674F.2020004@openenterprise.ca> References: <15573374.4331196189104965.JavaMail.root@office.splatnix.net> <474C674F.2020004@openenterprise.ca> Message-ID: <474C6D72.6090202@sendit.nodak.edu> Johnny Stork wrote: > They will be in the same location, and connected to seperate UPS's but > same office power connections to the wall The other advantage of dual MX records is you can pull one down at any point. I just make sure I stopin, then flush the queue out. I can then do whatever maintenance I need to do to the box during normal hours as my other MXs can take over the load. With multiple A records, you can't do that. From uxbod at splatnix.net Tue Nov 27 19:21:48 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 19:21:58 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C6D72.6090202@sendit.nodak.edu> Message-ID: <16233020.4451196191308181.JavaMail.root@office.splatnix.net> Well you could if you were using intelligent load balancers for traffic redirection (expensive). Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Richard Frovarp" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 7:18:10 PM (GMT) Europe/London Subject: Re: Redundant Mail System Suggestions Johnny Stork wrote: > They will be in the same location, and connected to seperate UPS's but > same office power connections to the wall The other advantage of dual MX records is you can pull one down at any point. I just make sure I stopin, then flush the queue out. I can then do whatever maintenance I need to do to the box during normal hours as my other MXs can take over the load. With multiple A records, you can't do that. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From mike at tc3net.com Tue Nov 27 19:39:15 2007 From: mike at tc3net.com (Michael Baird) Date: Tue Nov 27 19:36:19 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <31098681.4361196189712112.JavaMail.root@office.splatnix.net> References: <31098681.4361196189712112.JavaMail.root@office.splatnix.net> Message-ID: <474C7263.9000505@tc3net.com> UxBoD wrote: > You can use SA with MySQL to hold the Bayes. Some people are pro and some are anti. I run the frontend MTAs for the company I am contracted to and use MySQL/Bayes on a central server with no probs. > > V5 of Zimbra (even though at RC2 at the moment) rocks! Try the hosted demo. Well worth it. > > > Was Looking at Zimbra too, very nice, but pricey, and just purchased by yahoo, so it's probably not going anywhere in the future (see past yahoo aquisitions). Regards Michael Baird From uxbod at splatnix.net Tue Nov 27 19:40:14 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 19:40:31 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C7263.9000505@tc3net.com> Message-ID: <19730234.4701196192414657.JavaMail.root@office.splatnix.net> well I would read some of the postings first before making judgement, especially the Microsoft partner stuff! Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Michael Baird" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 7:39:15 PM (GMT) Europe/London Subject: Re: Redundant Mail System Suggestions UxBoD wrote: > You can use SA with MySQL to hold the Bayes. Some people are pro and some are anti. I run the frontend MTAs for the company I am contracted to and use MySQL/Bayes on a central server with no probs. > > V5 of Zimbra (even though at RC2 at the moment) rocks! Try the hosted demo. Well worth it. > > > Was Looking at Zimbra too, very nice, but pricey, and just purchased by yahoo, so it's probably not going anywhere in the future (see past yahoo aquisitions). Regards Michael Baird -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From uxbod at splatnix.net Tue Nov 27 19:41:56 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 19:42:07 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C7263.9000505@tc3net.com> Message-ID: <1681025.4731196192516269.JavaMail.root@office.splatnix.net> Also, if no requirement for Outlook connector then use the OSS version. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Michael Baird" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 7:39:15 PM (GMT) Europe/London Subject: Re: Redundant Mail System Suggestions UxBoD wrote: > You can use SA with MySQL to hold the Bayes. Some people are pro and some are anti. I run the frontend MTAs for the company I am contracted to and use MySQL/Bayes on a central server with no probs. > > V5 of Zimbra (even though at RC2 at the moment) rocks! Try the hosted demo. Well worth it. > > > Was Looking at Zimbra too, very nice, but pricey, and just purchased by yahoo, so it's probably not going anywhere in the future (see past yahoo aquisitions). Regards Michael Baird -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From stork at openenterprise.ca Tue Nov 27 20:10:10 2007 From: stork at openenterprise.ca (Johnny Stork) Date: Tue Nov 27 20:10:16 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <1681025.4731196192516269.JavaMail.root@office.splatnix.net> References: <1681025.4731196192516269.JavaMail.root@office.splatnix.net> Message-ID: <474C79A2.1010105@openenterprise.ca> Unfortunately there is a need for the Outlook connection. I have been using/deploying Scalix solutions for a few years and although I am pleased with the product, it lacks in extended groupware functionality so thats why I am starting to look at alternatives UxBoD wrote: > Also, if no requirement for Outlook connector then use the OSS version. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Michael Baird" > To: "MailScanner discussion" > Sent: Tuesday, November 27, 2007 7:39:15 PM (GMT) Europe/London > Subject: Re: Redundant Mail System Suggestions > > UxBoD wrote: > >> You can use SA with MySQL to hold the Bayes. Some people are pro and some are anti. I run the frontend MTAs for the company I am contracted to and use MySQL/Bayes on a central server with no probs. >> >> V5 of Zimbra (even though at RC2 at the moment) rocks! Try the hosted demo. Well worth it. >> >> >> Was Looking at Zimbra too, very nice, but pricey, and just purchased by yahoo, so it's probably not going anywhere in the future (see past yahoo aquisitions). >> > Regards > Michael Baird > > -- *Johnny Stork* Business & Technology Consultant stork@openenterprise.ca From uxbod at splatnix.net Tue Nov 27 20:17:27 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 20:17:39 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C79A2.1010105@openenterprise.ca> Message-ID: <15922956.4761196194647659.JavaMail.root@office.splatnix.net> so look at the NE of Zimbra. worth a try as I do like the OSS version and is progressing at a rapid pace. But as somebody said earlier they have been purchased by Yahoo! but the staff have signed up for another five years, so cannot be all bad IMHO. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Johnny Stork" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 8:10:10 PM (GMT) Europe/London Subject: Re: Redundant Mail System Suggestions Unfortunately there is a need for the Outlook connection. I have been using/deploying Scalix solutions for a few years and although I am pleased with the product, it lacks in extended groupware functionality so thats why I am starting to look at alternatives UxBoD wrote: > Also, if no requirement for Outlook connector then use the OSS version. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Michael Baird" > To: "MailScanner discussion" > Sent: Tuesday, November 27, 2007 7:39:15 PM (GMT) Europe/London > Subject: Re: Redundant Mail System Suggestions > > UxBoD wrote: > >> You can use SA with MySQL to hold the Bayes. Some people are pro and some are anti. I run the frontend MTAs for the company I am contracted to and use MySQL/Bayes on a central server with no probs. >> >> V5 of Zimbra (even though at RC2 at the moment) rocks! Try the hosted demo. Well worth it. >> >> >> Was Looking at Zimbra too, very nice, but pricey, and just purchased by yahoo, so it's probably not going anywhere in the future (see past yahoo aquisitions). >> > Regards > Michael Baird > > -- *Johnny Stork* Business & Technology Consultant stork@openenterprise.ca -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From igalvarez at gmail.com Tue Nov 27 20:37:53 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Tue Nov 27 20:37:56 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <306766.4171196187091910.JavaMail.root@office.splatnix.net> References: <194a2c240711270850w83aa0c2l184e423725d006d@mail.gmail.com> <306766.4171196187091910.JavaMail.root@office.splatnix.net> Message-ID: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> On Nov 27, 2007 1:11 PM, UxBoD wrote: > Well ASN is hashed out in your v320 pre file but is still active in the > v310 file. What does it means? > We process over 100k messages a day on a 256k line so no real worries > there. You say a high percentage of your traffic is SMTP, how are you > identifying that ? I can see the traffic in my WAN network using a cisco router/netflow collector. > Are you performing any sort of packet shaping or QoS then ? No > It does sound to me like DNS timeouts when performing lookups, as others > have also said. Well, I use a only caching dns (caching-nameserver-7.3-3) > If you set the list of RBLs to check to blank in MailScanner.conf does > the problem disappear ? Do you mean thie line: Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # When the problem disappear is when I set: Use Spamassassin = no and restart mailscanner... thanks in advance Israel > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" > To: "MailScanner discussion" > Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > > > > > > On 25/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > > On Nov 25, 2007 2:46 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > > > > > > > > > > > > > On 25/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > > > > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on > a > > > > CentOS4.5 Linux server. I installed too the package > > > > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to > > activate spamassassin > > > > with mailscanner. I ran spamassassin -D --lint and there's no > problem > > > > in my configuration files. I also see in maillog file the > spamassassin > > > > doing its work with spam: > > > > > > > > Nov 25 04:54:51 hostname MailScanner[20611]: Message > B25732B1DB.A9A63 > > > > from MailScanner warning: numerical links are often malicious: > 75.93.188.141 ( jerrimy@donin.com ) to mydomain.com is spam, > > > > SBL+XBL, spamcop.net , SpamAssassin (not cached, score=30.984, > required > > > > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, > > > > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, > > > > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, > RCVD_IN_XBL > > > > 2.90, RDNS_DYNAMIC 0.10 , SARE_SPEC_REPLICA_OBFU 1.81, > > > > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, > > > > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, > > > > URIBL_SC_SURBL 2.52) > > > > > > > > Everything is fine BUT, when I run "qshape hold" I see the HOLD > folder > > > > is FULL of messages waiting to be processed, I mean thousands of > mails > > > > waiting and there is a long delay in delivering. > > > > My link to internet is not full, I mean I see the normal traffic. > > > > > > > > So, when I turn off spamassassin in MailScanner.conf there's almost > no > > > > messages in HOLD foder. > > > > > > > > My questions are: > > > > > > > > 1. How can I speed the spamassassin process in my server? > > > Use a caching only DNS, limit what you check (RBLs etc).... There are > > > some things to do:-) > > > > > > > > > > I have in this server a caching only DNS... > > > > > > > > > > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, > and > > > > others that comes activated by default when I install spamassassin > > > > package)? > > > No. But they all contribute something:-). WRT Pyzor, make sure you use > > > the "alternative" server, the official one will likely just time out. > > > What modules do you load? > > > > I use DCC, razor2, pyzor and all the stuff from /etc/mail/spamassassin > > config files: > > > > -rw-r--r-- 1 root root 1089 Jun 2 13:40 init.pre > > lrwxrwxrwx 1 root root 41 Jun 2 21:43 local.cf -> > > /etc/MailScanner/spam.assassin.prefs.conf > You shouldn't have local.cf as a link to spam.assassin.prefs.conf.... > That was more a thing some did before the advent of the mailscanner.cf > link. > local.cf is a perfect place to have local rescoring etc ... Like > setting dead RBLs to score 0 (thus preventing a timeout problem), or > RBLs that might be ... problematic (like if you get firewalled by > spamhaus... Check recent threads on the list for a simple test to see > if you've been FW'd by them). > > > Glenn, sorry my delay in answers you but I was busy with this server... I > dont really get what you mean by local.cf file.. should I delete the > local.cf link? > > > > > > lrwxrwxrwx 1 root root 41 Nov 24 11:00 mailscanner.cf -> > > /etc/MailScanner/spam.assassin.prefs.conf > > drwxr-xr-x 3 root root 4096 Nov 24 15:43 old > > drwxr-xr-x 2 root root 4096 Nov 25 05:05 RulesDuJour > > drwx------ 2 root root 4096 Nov 25 05:08 sa-update-keys > > -rw-r--r-- 1 root root 2439 Jun 2 14:03 v310.pre > > -rw-r--r-- 1 root root 922 Jun 2 13:39 v312.pre > > -rw-r--r-- 1 root root 2299 Jun 2 13:40 v320.pre > > I was more thinking along the lines of what loadmodule statements that > you have active:-). Check that ASN isn't loaded... for example:-). > If you like, paste result of > # grep -i loadplug /etc/mail/spamassassin/*.pre > Here you go: > > [root@domain.com:/etc/yum.repos.d]$ grep -i loadplug > /etc/mail/spamassassin/*.pre > /etc/mail/spamassassin/init.pre:# loadplugin > Mail::SpamAssassin::Plugin::RelayCountry > /etc/mail/spamassassin/init.pre:loadplugin > Mail::SpamAssassin::Plugin::URIDNSBL > /etc/mail/spamassassin/init.pre:loadplugin > Mail::SpamAssassin::Plugin::Hashcash > /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::SPF > /etc/mail/spamassassin/init.pre:loadplugin > Mail::SpamAssassin::Plugin::RelayCountry > /etc/mail/spamassassin/init.pre:loadplugin > Mail::SpamAssassin::Plugin::Razor2 > /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::ASN > /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::DCC > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::Pyzor > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::Razor2 > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::SpamCop > /etc/mail/spamassassin/v310.pre:#loadplugin > Mail::SpamAssassin::Plugin::AntiVirus > /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::AWL > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::AutoLearnThreshold > /etc/mail/spamassassin/v310.pre:#loadplugin > Mail::SpamAssassin::Plugin::TextCat > /etc/mail/spamassassin/v310.pre:#loadplugin > Mail::SpamAssassin::Plugin::AccessDB > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::WhiteListSubject > /etc/mail/spamassassin/v310.pre:#loadplugin > Mail::SpamAssassin::Plugin::DomainKeys > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::MIMEHeader > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::ReplaceTags > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::RelayCountry > /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::SPF > /etc/mail/spamassassin/v310.pre:loadplugin > Mail::SpamAssassin::Plugin::URIDNSBL > /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::ASN > /etc/mail/spamassassin/v312.pre:#loadplugin > Mail::SpamAssassin::Plugin::DKIM > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::Check > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::HTTPSMismatch > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::URIDetail > /etc/mail/spamassassin/v320.pre:# loadplugin > Mail::SpamAssassin::Plugin::Shortcircuit > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::Bayes > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::BodyEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::DNSEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::HTMLEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::HeaderEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::MIMEEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::RelayEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::URIEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::WLBLEval > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::VBounce > /etc/mail/spamassassin/v320.pre:# loadplugin > Mail::SpamAssassin::Plugin::Rule2XSBody > /etc/mail/spamassassin/v320.pre:# loadplugin > Mail::SpamAssassin::Plugin::ASN > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::ImageInfo > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::RelayCountry > /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::SPF > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::URIDNSBL > /etc/mail/spamassassin/v320.pre:loadplugin > Mail::SpamAssassin::Plugin::Razor2 > /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::ASN > > > > > > (snip) > > > I'm running to read them NOW! :-) > Good. The message never received is the least loading...:-). > > > > So, I have to tell you I'm having the same problem with a lot of messages > in HOLD folder when I check mails with spamassassin.. I also note this > things: > > 1. My link to Internet is FULL and high % is SMTP. > 2. I see a laod average high load average: 9.92, 8.29, 7.21 (I have a > compaq proliant with two CPUs and 2GB RAM) > 3. I am processing almost 40000 email daily.is it high for this server > with 256Kbps Frame relay connection? > > thanks in advance > regards > Israel > > > > > > > > > > > > > > > > > > > 4. Does anybody knows some perfect setup (best perfomance) to > install > > > > mailscanner with spamssassin? some link? some tutorial? > > > Perfect is too much to aim for;-). I usually try for functional:-):-) > > > > :-) :-) .. thanks a lot Glenn > :-) > > Cheers > -- > > > > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > Regards; > Israel Garcia > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/dbcabcf1/attachment.html From glenn.steen at gmail.com Tue Nov 27 20:52:09 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 27 20:52:17 2007 Subject: problem upgrading MailScanner / PostFix Dbmail In-Reply-To: <474C502F.5000009@84-it.com> References: <474C15C5.6010505@84-it.com> <223f97700711270518v510e21a8te01ed2d17f9a2214@mail.gmail.com> <474C502F.5000009@84-it.com> Message-ID: <223f97700711271252g63c41b63qf5a943b16cf59732@mail.gmail.com> On 27/11/2007, Fons van der Beek wrote: > > I know Glenn, it's very old, so you can see how long i was (and certainly > will be) a happy MailScanner user. > > Tnx for pointing me in the right direction............... > It's indeed time for a new fresh installation............... > > Cheers! > Ah, good! When you do, do look around in the wiki, there are some more or less interresting PF ideas there:-). Cheers & Good luck! -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From uxbod at splatnix.net Tue Nov 27 21:01:26 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 21:01:39 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> Message-ID: <1278702.4791196197286157.JavaMail.root@office.splatnix.net> So when disabling RBLs the problem disappears. Thats a start! If your bandwidth is saturated then lookups are taking a long time. Is your Internet connection being over utilised ? Sorry not at machine to check the RBLs you are using. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 8:37:53 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 27, 2007 1:11 PM, UxBoD < uxbod@splatnix.net > wrote: Well ASN is hashed out in your v320 pre file but is still active in the v310 file. What does it means? We process over 100k messages a day on a 256k line so no real worries there. You say a high percentage of your traffic is SMTPr ba, how are you identifying that ? I can see the traffic in my WAN network using a cisco router/netflow collector. Are you performing any sort of packet shaping or QoS then ? No It does sound to me like DNS timeouts when performing lookups, as others have also said. Well, I use a only caching dns (caching-nameserver-7.3-3) If you set the list of RBLs to check to blank in MailScanner.conf does the problem disappear ? Do you mean thie line: Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # When the problem disappear is when I set: Use Spamassassin = no and restart mailscanner... thanks in advance Israel Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" < igalvarez@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: On 25/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > On Nov 25, 2007 2:46 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > > > > > > > > On 25/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > > > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a > > > CentOS4.5 Linux server. I installed too the package > > > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to > activate spamassassin > > > with mailscanner. I ran spamassassin -D --lint and there's no problem > > > in my configuration files. I also see in maillog file the spamassassin > > > doing its work with spam: > > > > > > Nov 25 04:54:51 hostname MailScanner[20611]: Message B25732B1DB.A9A63 > > > from MailScanner warning: numerical links are often malicious: MailScanner warning: numerical links are often malicious: 75.93.188.141 ( jerrimy@donin.com ) to mydomain.com is spam, > > > SBL+XBL, spamcop.net , SpamAssassin (not cached, score=30.984, required > > > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18, > > > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78, > > > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL > > > 2.90, RDNS_DYNAMIC 0.10 , SARE_SPEC_REPLICA_OBFU 1.81, > > > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61, > > > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13, > > > URIBL_SC_SURBL 2.52) > > > > > > Everything is fine BUT, when I run "qshape hold" I see the HOLD folder > > > is FULL of messages waiting to be processed, I mean thousands of mails > > > waiting and there is a long delay in delivering. > > > My link to internet is not full, I mean I see the normal traffic. > > > > > > So, when I turn off spamassassin in MailScanner.conf there's almost no > > > messages in HOLD foder. > > > > > > My questions are: > > > > > > 1. How can I speed the spamassassin process in my server? > > Use a caching only DNS, limit what you check (RBLs etc).... There are > > some things to do:-) > > > > > > I have in this server a caching only DNS... > > > > > > > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and > > > others that comes activated by default when I install spamassassin > > > package)? > > No. But they all contribute something:-). WRT Pyzor, make sure you use > > the "alternative" server, the official one will likely just time out. > > What modules do you load? > > I use DCC, razor2, pyzor and all the stuff from /etc/mail/spamassassin > config files: > > -rw-r--r-- 1 root root 1089 Jun 2 13:40 init.pre > lrwxrwxrwx 1 root root 41 Jun 2 21:43 local.cf -> > /etc/MailScanner/spam.assassin.prefs.conf You shouldn't have local.cf as a link to spam.assassin.prefs.conf... . That was more a thing some did before the advent of the mailscanner.cf link. local.cf is a perfect place to have local rescoring etc ... Like setting dead RBLs to score 0 (thus preventing a timeout problem), or RBLs that might be ... problematic (like if you get firewalled by spamhaus... Check recent threads on the list for a simple test to see if you've been FW'd by them). Glenn, sorry my delay in answers you but I was busy with this server... I dont really get what you mean by local.cf file.. should I delete the local.cf link? > lrwxrwxrwx 1 root root 41 Nov 24 11:00 mailscanner.cf -> > /etc/MailScanner/spam.assassin.prefs.conf > drwxr-xr-x 3 root root 4096 Nov 24 15:43 old > drwxr-xr-x 2 root root 4096 Nov 25 05:05 RulesDuJour > drwx------ 2 root root 4096 Nov 25 05:08 sa-update-keys > -rw-r--r-- 1 root root 2439 Jun 2 14:03 v310.pre > -rw-r--r-- 1 root root 922 Jun 2 13:39 v312.pre > -rw-r--r-- 1 root root 2299 Jun 2 13:40 v320.pre I was more thinking along the lines of what loadmodule statements that you have active:-). Check that ASN isn't loaded... for example:-). If you like, paste result of # grep -i loadplug /etc/mail/spamassassin/*.pre Here you go: [root@domain.com:/etc/yum.repos.d]$ grep -i loadplug /etc/mail/spamassassin/*.pre /etc/mail/spamassassin/init.pre:# loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::Hashcash /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/init.pre:loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::DCC /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::Pyzor /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::SpamCop /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::AntiVirus /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::AWL /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::TextCat /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::AccessDB /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject /etc/mail/spamassassin/v310.pre:#loadplugin Mail::SpamAssassin::Plugin::DomainKeys /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::MIMEHeader /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::ReplaceTags /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/v310.pre:loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v312.pre:#loadplugin Mail::SpamAssassin::Plugin::DKIM /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Check /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HTTPSMismatch /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIDetail /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::Shortcircuit /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Bayes /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::BodyEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::DNSEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HTMLEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::HeaderEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::MIMEEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::RelayEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::WLBLEval /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::VBounce /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::Rule2XSBody /etc/mail/spamassassin/v320.pre:# loadplugin Mail::SpamAssassin::Plugin::ASN /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::ImageInfo /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::RelayCountry /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::SPF /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::Razor2 /etc/mail/spamassassin/v320.pre:loadplugin Mail::SpamAssassin::Plugin::ASN (snip) > I'm running to read them NOW! :-) Good. The message never received is the least loading...:-). So, I have to tell you I'm having the same problem with a lot of messages in HOLD folder when I check mails with spamassassin.. I also note this things: 1. My link to Internet is FULL and high % is SMTP. 2. I see a laod average high load average: 9.92, 8.29, 7.21 (I have a compaq proliant with two CPUs and 2GB RAM) 3. I am processing almost 40000 email daily.is it high for this server with 256Kbps Frame relay connection? thanks in advance regards Israel > > > > > > > > > > 4. Does anybody knows some perfect setup (best perfomance) to install > > > mailscanner with spamssassin? some link? some tutorial? > > Perfect is too much to aim for;-). I usually try for functional:-):-) > > :-) :-) .. thanks a lot Glenn :-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Regards; Israel Garcia -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Regards; Israel Garcia -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Tue Nov 27 21:13:48 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 27 21:13:51 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> References: <194a2c240711270850w83aa0c2l184e423725d006d@mail.gmail.com> <306766.4171196187091910.JavaMail.root@office.splatnix.net> <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> Message-ID: <223f97700711271313o5d4521caib6cbb946ac1bd18a@mail.gmail.com> On 27/11/2007, Israel Garcia wrote: > On Nov 27, 2007 1:11 PM, UxBoD wrote: > > > Well ASN is hashed out in your v320 pre file but is still active in the > v310 file. > What does it means? That you should comment it out in the v310.pre file too;-) Then restart MS (with SA) and see if that cures it. > > We process over 100k messages a day on a 256k line so no real worries > there. You say a high percentage of your traffic is SMTP, how are you > identifying that ? > > I can see the traffic in my WAN network using a cisco router/netflow > collector. > > > Are you performing any sort of packet shaping or QoS then ? > No > > It does sound to me like DNS timeouts when performing lookups, as others > have also said. > Well, I use a only caching dns (caching-nameserver-7.3-3) > > If you set the list of RBLs to check to blank in MailScanner.conf does > the problem disappear ? > Do you mean thie line: > Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # Ok, that's empty then. > When the problem disappear is when I set: > Use Spamassassin = no > and restart mailscanner... If you run "MailScanner --debug --debug-sa", or just a normal "spamassassin -D -t thanks in advance > Israel > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From igalvarez at gmail.com Tue Nov 27 21:22:03 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Tue Nov 27 21:22:09 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <1278702.4791196197286157.JavaMail.root@office.splatnix.net> References: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> <1278702.4791196197286157.JavaMail.root@office.splatnix.net> Message-ID: <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> On Nov 27, 2007 4:01 PM, UxBoD wrote: > So when disabling RBLs the problem disappears. No, the problem disapear when I turn off spamassassin completily in mailscanner config file. Sometimes I enable Spamassassin check but disable razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. BUT, if I fully enalbe spamassassin with DCC, razor2 and pyzor the load average begins to increase and thousands of mails begins comes to HOLD folder .. Do you think it's time to split the load in two servers? I mean something like this: Router NAT rules to SMTP farm serves. I I ______________________________ I I Server2 SMTP Server1 SMTP Mailscanner/sa Mailscanner/sa I think I have two problems, to much spam (80% of total emails --> from vispan) and my the line 256k/frame relay is FULL. Any other ideas? Israel Thats a start! If your bandwidth is saturated then lookups are taking a long > time. Is your Internet connection being over utilised ? Sorry not at > machine to check the RBLs you are using. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" > To: "MailScanner discussion" > Sent: Tuesday, November 27, 2007 8:37:53 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 27, 2007 1:11 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > Well ASN is hashed out in your v320 pre file but is still active in the > v310 file. > What does it means? > > > > We process over 100k messages a day on a 256k line so no real worries > there. You say a high percentage of your traffic is SMTPr ba, how are you > identifying that ? > > I can see the traffic in my WAN network using a cisco router/netflow > collector. > > > Are you performing any sort of packet shaping or QoS then ? > No > > > It does sound to me like DNS timeouts when performing lookups, as others > have also said. > Well, I use a only caching dns (caching-nameserver-7.3-3) > > > If you set the list of RBLs to check to blank in MailScanner.conf does the > problem disappear ? > Do you mean thie line: > Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # > > When the problem disappear is when I set: > Use Spamassassin = no > and restart mailscanner... > > thanks in advance > Israel > > > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > ----- Original Message ----- > From: "Israel Garcia" < igalvarez@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/0b82bb6c/attachment-0001.html From uxbod at splatnix.net Tue Nov 27 21:31:57 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 21:32:08 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> Message-ID: <2909126.4821196199117135.JavaMail.root@office.splatnix.net> i would ask why your line is full ? are your users using it for HTTP ??? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 9:22:03 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 27, 2007 4:01 PM, UxBoD < uxbod@splatnix.net > wrote: So when disabling RBLs the problem disappears. No, the problem disapear when I turn off spamassassin completily in mailscanner config file. Sometimes I enable Spamassassin check but disable razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. BUT, if I fully enalbe spamassassin with DCC, razor2 and pyzor the load average begins to increase and thousands of mails begins comes to HOLD folder .. Do you think it's time to split the load in two servers? I mean something like this: Router NAT rules to SMTP farm serves. I I ______________________________ I I Server2 SMTP Server1 SMTP Mailscanner/sa Mailscanner/sa I think I have two problems, to much spam (80% of total emails --> from vispan) and my the line 256k/frame relay is FULL. Any other ideas? Israel Thats a start! If your bandwidth is saturated then lookups are taking a long time. Is your Internet connection being over utilised ? Sorry not at machine to check the RBLs you are using. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" < igalvarez@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 8:37:53 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 27, 2007 1:11 PM, UxBoD < uxbod@splatnix.net > wrote: Well ASN is hashed out in your v320 pre file but is still active in the v310 file. What does it means? We process over 100k messages a day on a 256k line so no real worries there. You say a high percentage of your traffic is SMTPr ba, how are you identifying that ? I can see the traffic in my WAN network using a cisco router/netflow collector. Are you performing any sort of packet shaping or QoS then ? No It does sound to me like DNS timeouts when performing lookups, as others have also said. Well, I use a only caching dns (caching-nameserver-7.3-3) If you set the list of RBLs to check to blank in MailScanner.conf does the problem disappear ? Do you mean thie line: Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # When the problem disappear is when I set: Use Spamassassin = no and restart mailscanner... thanks in advance Israel Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" < igalvarez@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Tue Nov 27 21:36:07 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Nov 27 21:36:10 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> References: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> <1278702.4791196197286157.JavaMail.root@office.splatnix.net> <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> Message-ID: <223f97700711271336p21f5c069lcfea1127130a825e@mail.gmail.com> On 27/11/2007, Israel Garcia wrote: > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > So when disabling RBLs the problem disappears. > > No, the problem disapear when I turn off spamassassin completily in > mailscanner config file. Sometimes I enable Spamassassin check but disable > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. BUT, > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load average > begins to increase and thousands of mails begins comes to HOLD folder .. Do > you think it's time to split the load in two servers? I mean something like > this: > Router > NAT rules to SMTP farm serves. > I > I > ______________________________ > I I > Server2 SMTP Server1 SMTP > Mailscanner/sa Mailscanner/sa If the bottleneck is network-related/lookups.... this will buy you nothing, unfortunately. > I think I have two problems, to much spam (80% of total emails --> from > vispan) and my the line 256k/frame relay is FULL. > > Any other ideas? > Israel > Since the load climbs, you likely have a lot of processes in state D (count them with a ps.... might give a clue:-)... Which might indicate slow lookup responses, sure. You do reject mail for unknown recipients, right? If not, start doing that... It will ease things;). You might also consider using a few RBLs at the MTA level, so that you reject messages that hit them. If you go for that, choose wisely...:-). And look over what ... "RFC strictness" you can enable... and use to reject junk. The message you never handle, nor even receive, is the best performance improvement you can do. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From igalvarez at gmail.com Tue Nov 27 21:39:21 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Tue Nov 27 21:39:26 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <2909126.4821196199117135.JavaMail.root@office.splatnix.net> References: <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> <2909126.4821196199117135.JavaMail.root@office.splatnix.net> Message-ID: <194a2c240711271339x4c94eba9wdb0060c626d2d2c9@mail.gmail.com> On Nov 27, 2007 4:31 PM, UxBoD wrote: > i would ask why your line is full ? are your users using it for HTTP ??? yes, I have anothers services like ftp, http.. even there are some users who have emule too... regards Israel > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" > To: "MailScanner discussion" > Sent: Tuesday, November 27, 2007 9:22:03 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 27, 2007 4:01 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > So when disabling RBLs the problem disappears. > > No, the problem disapear when I turn off spamassassin completily in > mailscanner config file. Sometimes I enable Spamassassin check but disable > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. > BUT, if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > average begins to increase and thousands of mails begins comes to HOLD > folder .. Do you think it's time to split the load in two servers? I mean > something like this: > Router > NAT rules to SMTP farm serves. > I > I > ______________________________ > I I > Server2 SMTP Server1 SMTP > Mailscanner/sa Mailscanner/sa > > I think I have two problems, to much spam (80% of total emails --> from > vispan) and my the line 256k/frame relay is FULL. > > Any other ideas? > Israel > > > > Thats a start! If your bandwidth is saturated then lookups are taking a > long time. Is your Internet connection being over utilised ? Sorry not at > machine to check the RBLs you are using. > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" < igalvarez@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > > Sent: Tuesday, November 27, 2007 8:37:53 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > > On Nov 27, 2007 1:11 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > Well ASN is hashed out in your v320 pre file but is still active in the > v310 file. > What does it means? > > > > We process over 100k messages a day on a 256k line so no real worries > there. You say a high percentage of your traffic is SMTPr ba, how are you > identifying that ? > > > > > I can see the traffic in my WAN network using a cisco router/netflow > collector. > > > Are you performing any sort of packet shaping or QoS then ? > No > > > It does sound to me like DNS timeouts when performing lookups, as others > have also said. > Well, I use a only caching dns (caching-nameserver-7.3-3) > > > If you set the list of RBLs to check to blank in MailScanner.conf does the > problem disappear ? > Do you mean thie line: > Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # > > When the problem disappear is when I set: > Use Spamassassin = no > and restart mailscanner... > > thanks in advance > Israel > > > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > ----- Original Message ----- > From: "Israel Garcia" < igalvarez@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/88c7d04d/attachment.html From uxbod at splatnix.net Tue Nov 27 21:42:39 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 21:42:50 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711271339x4c94eba9wdb0060c626d2d2c9@mail.gmail.com> Message-ID: <26335366.4911196199759781.JavaMail.root@office.splatnix.net> emule ? why! so is that bandwidth throttled to allow you mail services ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 9:39:21 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 27, 2007 4:31 PM, UxBoD < uxbod@splatnix.net > wrote: i would ask why your line is full ? are your users using it for HTTP ??? yes, I have anothers services like ftp, http.. even there are some users who have emule too... regards Israel Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" < igalvarez@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 9:22:03 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 27, 2007 4:01 PM, UxBoD < uxbod@splatnix.net > wrote: So when disabling RBLs the problem disappears. No, the problem disapear when I turn off spamassassin completily in mailscanner config file. Sometimes I enable Spamassassin check but disable razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. BUT, if I fully enalbe spamassassin with DCC, razor2 and pyzor the load average begins to increase and thousands of mails begins comes to HOLD folder .. Do you think it's time to split the load in two servers? I mean something like this: Router NAT rules to SMTP farm serves. I I ______________________________ I I Server2 SMTP Server1 SMTP Mailscanner/sa Mailscanner/sa I think I have two problems, to much spam (80% of total emails --> from vispan) and my the line 256k/frame relay is FULL. Any other ideas? Israel Thats a start! If your bandwidth is saturated then lookups are taking a long time. Is your Internet connection being over utilised ? Sorry not at machine to check the RBLs you are using. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" < igalvarez@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 8:37:53 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 27, 2007 1:11 PM, UxBoD < uxbod@splatnix.net > wrote: Well ASN is hashed out in your v320 pre file but is still active in the v310 file. What does it means? We process over 100k messages a day on a 256k line so no real worries there. You say a high percentage of your traffic is SMTPr ba, how are you identifying that ? I can see the traffic in my WAN network using a cisco router/netflow collector. Are you performing any sort of packet shaping or QoS then ? No It does sound to me like DNS timeouts when performing lookups, as others have also said. Well, I use a only caching dns (caching-nameserver-7.3-3) If you set the list of RBLs to check to blank in MailScanner.conf does the problem disappear ? Do you mean thie line: Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # When the problem disappear is when I set: Use Spamassassin = no and restart mailscanner... thanks in advance Israel Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" < igalvarez@gmail.com > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Regards; Israel Garcia -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From igalvarez at gmail.com Tue Nov 27 21:51:15 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Tue Nov 27 21:51:20 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711271336p21f5c069lcfea1127130a825e@mail.gmail.com> References: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> <1278702.4791196197286157.JavaMail.root@office.splatnix.net> <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> <223f97700711271336p21f5c069lcfea1127130a825e@mail.gmail.com> Message-ID: <194a2c240711271351mf10fd74q2049f0751a5253ef@mail.gmail.com> On Nov 27, 2007 4:36 PM, Glenn Steen wrote: > On 27/11/2007, Israel Garcia wrote: > > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > > > So when disabling RBLs the problem disappears. > > > > No, the problem disapear when I turn off spamassassin completily in > > mailscanner config file. Sometimes I enable Spamassassin check but > disable > > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. > BUT, > > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > average > > begins to increase and thousands of mails begins comes to HOLD folder .. > Do > > you think it's time to split the load in two servers? I mean something > like > > this: > > Router > > NAT rules to SMTP farm serves. > > I > > I > > ______________________________ > > I I > > Server2 SMTP Server1 SMTP > > Mailscanner/sa Mailscanner/sa > > If the bottleneck is network-related/lookups.... this will buy you > nothing, unfortunately. I know, but how am I sure this is the cause of my problem? > > > > I think I have two problems, to much spam (80% of total emails --> from > > vispan) and my the line 256k/frame relay is FULL. > > > > Any other ideas? > > Israel > > > > Since the load climbs, you likely have a lot of processes in state D > (count them with a ps.... might give a clue:-)... Which might indicate > slow lookup responses, sure. > The loads climbs when comes a lot of mail to hold folder > > You do reject mail for unknown recipients, right? If not, start doing > that... It will ease things;). yes, I do.. from main.cf: local_recipient_maps = unix:passwd.byname $alias_maps smtpd_helo_required = yes disable_vrfy_command = yes strict_rfc821_envelopes = yes invalid_hostname_reject_code = 554 multi_recipient_bounce_reject_code = 554 non_fqdn_reject_code = 554 relay_domains_reject_code = 554 unknown_address_reject_code = 554 unknown_client_reject_code = 554 unknown_hostname_reject_code = 554 unknown_local_recipient_reject_code = 554 unknown_relay_recipient_reject_code = 554 unknown_sender_reject_code = 554 unknown_virtual_alias_reject_code = 554 unknown_virtual_mailbox_reject_code = 554 unverified_recipient_reject_code = 554 unverified_sender_reject_code = 554 # smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/listanegra reject_non_fqdn_sender reject_unknown_sender_domain permit smtpd_recipient_restrictions = permit_auth_destination permit_mynetworks reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_destination reject_invalid_hostname, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_sasl_authenticated, reject_unauth_destination, > You might also consider using a few RBLs at the MTA level, so that you > reject messages that hit them. If you go for that, choose > wisely...:-). > And look over what ... "RFC strictness" you can enable... and use to > reject junk. What is RFC stricness? thanks in advance Israel > > The message you never handle, nor even receive, is the best > performance improvement you can do. > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/8275214c/attachment.html From igalvarez at gmail.com Tue Nov 27 21:57:25 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Tue Nov 27 21:57:29 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <26335366.4911196199759781.JavaMail.root@office.splatnix.net> References: <194a2c240711271339x4c94eba9wdb0060c626d2d2c9@mail.gmail.com> <26335366.4911196199759781.JavaMail.root@office.splatnix.net> Message-ID: <194a2c240711271357w76efafb6xe981281baf417480@mail.gmail.com> On Nov 27, 2007 4:42 PM, UxBoD wrote: > emule ? why! so is that bandwidth throttled to allow you mail services ? That's right my friend.. BUT they are not connected all the time.. the principal traffic is SMTP/HTTP?FTP..... > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" > To: "MailScanner discussion" > Sent: Tuesday, November 27, 2007 9:39:21 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 27, 2007 4:31 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > i would ask why your line is full ? are your users using it for HTTP ??? > yes, I have anothers services like ftp, http.. even there are some users > who have emule too... > > regards > Israel > > > > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" < igalvarez@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > > > > Sent: Tuesday, November 27, 2007 9:22:03 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 27, 2007 4:01 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > So when disabling RBLs the problem disappears. > > No, the problem disapear when I turn off spamassassin completily in > mailscanner config file. Sometimes I enable Spamassassin check but disable > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. > BUT, if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > average begins to increase and thousands of mails begins comes to HOLD > folder .. Do you think it's time to split the load in two servers? I mean > something like this: > Router > NAT rules to SMTP farm serves. > I > I > ______________________________ > I I > Server2 SMTP Server1 SMTP > Mailscanner/sa Mailscanner/sa > > I think I have two problems, to much spam (80% of total emails --> from > vispan) and my the line 256k/frame relay is FULL. > > Any other ideas? > Israel > > > > Thats a start! If your bandwidth is saturated then lookups are taking a > long time. Is your Internet connection being over utilised ? Sorry not at > machine to check the RBLs you are using. > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" < igalvarez@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > > Sent: Tuesday, November 27, 2007 8:37:53 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > > On Nov 27, 2007 1:11 PM, UxBoD < uxbod@splatnix.net > wrote: > > > > Well ASN is hashed out in your v320 pre file but is still active in the > v310 file. > What does it means? > > > > We process over 100k messages a day on a 256k line so no real worries > there. You say a high percentage of your traffic is SMTPr ba, how are you > identifying that ? > > > > > I can see the traffic in my WAN network using a cisco router/netflow > collector. > > > Are you performing any sort of packet shaping or QoS then ? > No > > > It does sound to me like DNS timeouts when performing lookups, as others > have also said. > Well, I use a only caching dns (caching-nameserver-7.3-3) > > > If you set the list of RBLs to check to blank in MailScanner.conf does the > problem disappear ? > Do you mean thie line: > Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # > > When the problem disappear is when I set: > Use Spamassassin = no > and restart mailscanner... > > thanks in advance > Israel > > > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > > ----- Original Message ----- > From: "Israel Garcia" < igalvarez@gmail.com > > To: "MailScanner discussion" < mailscanner@lists.mailscanner.info > > Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > > > > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > Regards; > Israel Garcia > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/2965c100/attachment.html From igalvarez at gmail.com Tue Nov 27 21:37:08 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Tue Nov 27 22:01:13 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711271313o5d4521caib6cbb946ac1bd18a@mail.gmail.com> References: <194a2c240711270850w83aa0c2l184e423725d006d@mail.gmail.com> <306766.4171196187091910.JavaMail.root@office.splatnix.net> <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> <223f97700711271313o5d4521caib6cbb946ac1bd18a@mail.gmail.com> Message-ID: <194a2c240711271337rce45fdfra469540be134e38e@mail.gmail.com> On Nov 27, 2007 4:13 PM, Glenn Steen wrote: > On 27/11/2007, Israel Garcia wrote: > > On Nov 27, 2007 1:11 PM, UxBoD wrote: > > > > > Well ASN is hashed out in your v320 pre file but is still active in > the > > v310 file. > > What does it means? > That you should comment it out in the v310.pre file too;-) > Then restart MS (with SA) and see if that cures it. > DONE!!.. I restarted now.. let see now :-) .. two questions, which is the difference in init.pre, v310.pre, v310.pre and v320.pre files? What is ASN? thanks a lot glenn..:-) > > > We process over 100k messages a day on a 256k line so no real worries > > there. You say a high percentage of your traffic is SMTP, how are you > > identifying that ? > > > > I can see the traffic in my WAN network using a cisco router/netflow > > collector. > > > > > Are you performing any sort of packet shaping or QoS then ? > > No > > > It does sound to me like DNS timeouts when performing lookups, as > others > > have also said. > > Well, I use a only caching dns (caching-nameserver-7.3-3) > > > If you set the list of RBLs to check to blank in MailScanner.confdoes > > the problem disappear ? > > Do you mean thie line: > > Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # > Ok, that's empty then. > > > When the problem disappear is when I set: > > Use Spamassassin = no > > and restart mailscanner... > > If you run "MailScanner --debug --debug-sa", or just a normal > "spamassassin -D -t very noticeable ... "pauses"? And if so, where? > Well, I ran MailScanner --debug --debug-sa and I see no errors.. BUT it takes so long.. I mean several minutes (20 or 30 minutes) :-( regards israel > > > thanks in advance > > Israel > > > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/bfddf35f/attachment.html From campbell at cnpapers.com Tue Nov 27 22:11:08 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Tue Nov 27 22:11:16 2007 Subject: Text shows something different than what is there. Message-ID: <474C95FC.50704@cnpapers.com> Sorry if this has been discussed before. I may have not realized what was being discussed until I saw it in front of me. We are getting tons of email with different sexual content. When viewing the source of the email through Thunderbird, a few of the lines show up like the following: IF YOU WANT TO F wol UC sty K SOMEBODY, F oy U zb CK YOURSELF & SAVE YOUR MONEY! The email when viewed normally through Thunderbird (and probably most other clients) is different. If you remove all of the lower case letters and the spaces around them, you'll see what the viewed text is displaying. Can anyone explain what is going on there and a pretty good way to block this. The F-word is pretty blatant in these. Thanks, Steve Campbell From uxbod at splatnix.net Tue Nov 27 22:11:33 2007 From: uxbod at splatnix.net (UxBoD) Date: Tue Nov 27 22:11:45 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <32421500.4941196201432254.JavaMail.root@office.splatnix.net> Message-ID: <26556036.4961196201493777.JavaMail.root@office.splatnix.net> if both debugs take so long please post your outout. if your users are strangling your bandwidth through HTTP then that needs to be looked at aswell through policy. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" To: "MailScanner discussion" Sent: Tuesday, November 27, 2007 9:37:08 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 27, 2007 4:13 PM, Glenn Steen < glenn.steen@gmail.com > wrote: On 27/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > On Nov 27, 2007 1:11 PM, UxBoD < uxbod@splatnix.net > wrote: > > > Well ASN is hashed out in your v320 pre file but is still active in the > v310 file. > What does it means? That you should comment it out in the v310.pre file too;-) Then restart MS (with SA) and see if that cures it. DONE!!.. I restarted now.. let see now :-) .. two questions, which is the difference in init.pre, v310.pre, v310.pre and v320.pre files? What is ASN? thanks a lot glenn..:-) > > We process over 100k messages a day on a 256k line so no real worries > there. You say a high percentage of your traffic is SMTP, how are you > identifying that ? > > I can see the traffic in my WAN network using a cisco router/netflow > collector. > > > Are you performing any sort of packet shaping or QoS then ? > No > > It does sound to me like DNS timeouts when performing lookups, as others > have also said. > Well, I use a only caching dns ( caching-nameserver-7.3-3) > > If you set the list of RBLs to check to blank in MailScanner.conf does > the problem disappear ? > Do you mean thie line: > Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # Ok, that's empty then. > When the problem disappear is when I set: > Use Spamassassin = no > and restart mailscanner... If you run "MailScanner --debug --debug-sa", or just a normal "spamassassin -D -t thanks in advance > Israel > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Regards; Israel Garcia -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From donald.dawson at bakerbotts.com Tue Nov 27 22:12:33 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Tue Nov 27 22:12:43 2007 Subject: Recipient verification to Exchange milter Message-ID: Please let me know you experience with an Exchange email recipient verification tool (e.g. milter to sendmail). Below are some versions I know of. Any success, problems or input regarding this list, or others you might know of? We are running four inbound MX servers with sendmail version 8.14.1, MS version 4.62.9 and SA version 3.002002. Pay Version: http://spamfree.ru/spamfree/ - $299 enterprise Free versions: http://www.five-ten-sg.com/dnsbl/rn01re01.html http://spamlinks.net/filter-server-addon.htm#sendmail http://smfs.sourceforge.net/smf-sav.html - free version of spamfree.ru/spamfree http://www.milter.info/sendmail/milter-ahead/ - previous experience with milter-null was frustrating since it took so long to update LibSnert. Thanks, Donald Donald Dawson Security Administrator Baker Botts L.L.P. 713-229-2183 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/60d3f434/attachment.html From ssilva at sgvwater.com Tue Nov 27 22:25:19 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 27 22:26:17 2007 Subject: Text shows something different than what is there. In-Reply-To: <474C95FC.50704@cnpapers.com> References: <474C95FC.50704@cnpapers.com> Message-ID: on 11/27/2007 2:11 PM Steve Campbell spake the following: > Sorry if this has been discussed before. I may have not realized what > was being discussed until I saw it in front of me. > > We are getting tons of email with different sexual content. When viewing > the source of the email through Thunderbird, a few of the lines show up > like the following: > > IF YOU WANT TO F wol UC sty K SOMEBODY, > F oy U zb CK YOURSELF & SAVE YOUR MONEY! > > The email when viewed normally through Thunderbird (and probably most > other clients) is different. If you remove all of the lower case letters > and the spaces around them, you'll see what the viewed text is displaying. > > Can anyone explain what is going on there and a pretty good way to block > this. The F-word is pretty blatant in these. > > Thanks, > > Steve Campbell > > If you can post a raw sample somewhere, we could try it and see what existing stuff might hit it. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From Kevin_Miller at ci.juneau.ak.us Tue Nov 27 22:27:52 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Tue Nov 27 22:27:17 2007 Subject: Recipient verification to Exchange milter In-Reply-To: References: Message-ID: I'm using smf-sav here along with smf-spf. Works a treat. ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of donald.dawson@bakerbotts.com Sent: Tuesday, November 27, 2007 1:13 PM To: mailscanner@lists.mailscanner.info Subject: Recipient verification to Exchange milter Please let me know you experience with an Exchange email recipient verification tool (e.g. milter to sendmail). Below are some versions I know of. Any success, problems or input regarding this list, or others you might know of? We are running four inbound MX servers with sendmail version 8.14.1, MS version 4.62.9 and SA version 3.002002. Pay Version: http://spamfree.ru/spamfree/ - $299 enterprise Free versions: http://www.five-ten-sg.com/dnsbl/rn01re01.html http://spamlinks.net/filter-server-addon.htm#sendmail http://smfs.sourceforge.net/smf-sav.html - free version of spamfree.ru/spamfree http://www.milter.info/sendmail/milter-ahead/ - previous experience with milter-null was frustrating since it took so long to update LibSnert. Thanks, Donald Donald Dawson Security Administrator Baker Botts L.L.P. 713-229-2183 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/68bd1852/attachment-0001.html From mkettler at evi-inc.com Tue Nov 27 22:28:53 2007 From: mkettler at evi-inc.com (Matt Kettler) Date: Tue Nov 27 22:29:11 2007 Subject: Recipient verification to Exchange milter In-Reply-To: References: Message-ID: <474C9A25.7020405@evi-inc.com> donald.dawson@bakerbotts.com wrote: > Please let me know you experience with an Exchange email recipient > verification tool (e.g. milter to sendmail). > > Below are some versions I know of. Any success, problems or input > regarding this list, or others you might know of? > > We are running four inbound MX servers with sendmail version 8.14.1, MS > version 4.62.9 and SA version 3.002002. > > Pay Version: > > _http://spamfree.ru/spamfree/_ - $299 enterprise > > Free versions: > > _http://www.five-ten-sg.com/dnsbl/rn01re01.html_ > > _http://spamlinks.net/filter-server-addon.htm#sendmail_ > > _http://smfs.sourceforge.net/smf-sav.html_ - free version of > spamfree.ru/spamfree > > _http://www.milter.info/sendmail/milter-ahead/_ - previous experience > with milter-null was frustrating since it took so long to update LibSnert. Note: milter-ahead isn't free, it's one of 4 of the snertsoft milters that costs money. a site license is 90 euros: http://www.snertsoft.com/download.php You might also wish to read this thread about sms-sav vs milter-ahead: http://search.gmane.org/?query=OT%3A+performance+smf-sav+vs+milter-ahead&group=gmane.mail.virus.mailscanner From ssilva at sgvwater.com Tue Nov 27 22:31:06 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Tue Nov 27 22:32:01 2007 Subject: Recipient verification to Exchange milter In-Reply-To: References: Message-ID: on 11/27/2007 2:12 PM donald.dawson@bakerbotts.com spake the following: > Please let me know you experience with an Exchange email recipient > verification tool (e.g. milter to sendmail). > > Below are some versions I know of. Any success, problems or input > regarding this list, or others you might know of? > > We are running four inbound MX servers with sendmail version 8.14.1, MS > version 4.62.9 and SA version 3.002002. If you are not using exchange 2003 or greater, none of these will work. You will have to use one of the scripts that pull from AD and create a valid_users map. > > Pay Version: > > _http://spamfree.ru/spamfree/_ - $299 enterprise > > Free versions: > > _http://www.five-ten-sg.com/dnsbl/rn01re01.html_ This looks like a blacklist milter > > _http://spamlinks.net/filter-server-addon.htm#sendmail_ > > _http://smfs.sourceforge.net/smf-sav.html_ - free version of > spamfree.ru/spamfree SMF-SAV is what I see recommended if you don't want to pay for milter-ahead. > > _http://www.milter.info/sendmail/milter-ahead/_ - previous experience > with milter-null was frustrating since it took so long to update LibSnert. > You can also do this with mimedefang, although it is like hanging pictures with a sledgehammer. Way more tool than is needed. I am going to migrate away from mimedefang and on to smf-sav. > Thanks, > Donald > > Donald Dawson > Security Administrator > Baker Botts L.L.P. > 713-229-2183 > -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From micoots at yahoo.com Wed Nov 28 03:52:24 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 03:52:28 2007 Subject: Can't block wmv files In-Reply-To: <625385e30711270620y9d4352dg3575133f45c2d384@mail.gmail.com> Message-ID: <954630.25319.qm@web33314.mail.mud.yahoo.com> Hi Peter, shuttlebox wrote: On Nov 27, 2007 3:08 PM, Michael Mansour wrote: > %etc-dir%/example.com.filename.rules: > > and %etc-dir%/example.com.filetype.rules: Those filenames don't match what you have in your rulesets, note the missing .conf at the end: My apologies, I actually meant to say there: %etc-dir%/example.com.filename.rules.conf %etc-dir%/example.com.filetype.rules.conf as that is what I have in reality, I manually typo'ed it in the original email above. > FromOrTo: *@example.com > /etc/MailScanner/example.com.filename.rules.conf > FromOrTo: default /etc/MailScanner/filename.rules.conf > > FromOrTo: *@example.com > /etc/MailScanner/example.com.filetype.rules.conf > FromOrTo: default /etc/MailScanner/filetype.rules.conf Also, you do have tabs as whitespace in both files and no strange end-of-lines, common if you edit the files in Windows? I use Linux vi so no end of character issues. I also have TABs between all the entries in both files also (I think that only matters with the .conf anyway, spaces are fine with the .rules files). This is what has baffled me, as I've done everything correct as I can see it but the movie files get through. Michael. -- /peter -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/d5fbb37b/attachment.html From micoots at yahoo.com Wed Nov 28 03:56:27 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 03:56:30 2007 Subject: Can't block wmv files In-Reply-To: <474C4532.5040600@ecs.soton.ac.uk> Message-ID: <612855.55241.qm@web33315.mail.mud.yahoo.com> Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 27, 2007 3:08 PM, Michael Mansour wrote: > >> %etc-dir%/example.com.filename.rules: >> >> and %etc-dir%/example.com.filetype.rules: >> > > Those filenames don't match what you have in your rulesets, note the > missing .conf at the end: > >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filename.rules.conf >> FromOrTo: default /etc/MailScanner/filename.rules.conf >> >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filetype.rules.conf >> FromOrTo: default /etc/MailScanner/filetype.rules.conf >> > > Also, you do have tabs as whitespace in both files and no strange > end-of-lines, common if you edit the files in Windows? > The only places you need tabs instead of spaces are in the example.com.filetype/name.rules.conf and filetype/name.rules.conf files. You can use any whitespace in *.rules files. Any ideas why the movie files still get through? Is there some sort of MailScanner command I could use in debug mode or similar which I can input an email or attachment and see why MailScanner let the message or file through? This setup works for so many other domains I host for, just not this particular one? Michael. Jules - -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.7.0 (Build 867) Comment: Use Thunderbird's Enigmail Add-on to verify this message Charset: ISO-8859-1 wj8DBQFHTEU5EfZZRxQVtlQRAka5AKCXpWU5qvFt0evj2jlp7L+1NTPIzACePTZZ AF+Qk3cx2+fZQL4hbFaJRvc= =jhzR -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/f7d4c71d/attachment.html From jcasale at ActiveNetwerx.com Wed Nov 28 04:01:10 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Wed Nov 28 04:01:14 2007 Subject: Greylisting Addon Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21826F@an-ex.ActiveNetwerx.int> I finally got Mailscanner working on a gateway. I want to add greylisting and was interested in knowing what the opinion here was on what is the best implementation to use? Any thoughts appreciated, jlc From mailscanner at mckerrs.net Wed Nov 28 04:15:58 2007 From: mailscanner at mckerrs.net (Mailscanner Admin) Date: Wed Nov 28 04:11:36 2007 Subject: Greylisting Addon In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21826F@an-ex.ActiveNetwerx.int> Message-ID: <21864475.2061196223358451.JavaMail.root@zimbra.mckerrs.net> Which MTA are you using ? ----- Original Message ----- From: "Joseph L. Casale" To: "mailscanner@lists.mailscanner.info" Sent: Wednesday, November 28, 2007 2:01:10 PM (GMT+1000) Australia/Brisbane Subject: Greylisting Addon I finally got Mailscanner working on a gateway. I want to add greylisting and was interested in knowing what the opinion here was on what is the best implementation to use? Any thoughts appreciated, jlc -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/6f6997d0/attachment.html From jcasale at ActiveNetwerx.com Wed Nov 28 04:21:13 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Wed Nov 28 04:21:17 2007 Subject: Greylisting Addon In-Reply-To: <21864475.2061196223358451.JavaMail.root@zimbra.mckerrs.net> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21826F@an-ex.ActiveNetwerx.int> <21864475.2061196223358451.JavaMail.root@zimbra.mckerrs.net> Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218270@an-ex.ActiveNetwerx.int> Sorry ? My Linux noobness showing again? Postfix is what I am using. I found a few how-to?s for spam gateways and it wasn?t until one specific one (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu ) that went smooth which sort of defined what I was going to use. Thanks! jlc From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Mailscanner Admin Sent: Tuesday, November 27, 2007 9:16 PM To: MailScanner discussion Subject: Re: Greylisting Addon Which MTA are you using ? ----- Original Message ----- From: "Joseph L. Casale" To: "mailscanner@lists.mailscanner.info" Sent: Wednesday, November 28, 2007 2:01:10 PM (GMT+1000) Australia/Brisbane Subject: Greylisting Addon I finally got Mailscanner working on a gateway. I want to add greylisting and was interested in knowing what the opinion here was on what is the best implementation to use? Any thoughts appreciated, jlc -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From mailscanner at mckerrs.net Wed Nov 28 04:50:18 2007 From: mailscanner at mckerrs.net (Mailscanner Admin) Date: Wed Nov 28 04:45:56 2007 Subject: Greylisting Addon In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218270@an-ex.ActiveNetwerx.int> Message-ID: <7484954.2091196225418734.JavaMail.root@zimbra.mckerrs.net> ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) Australia/Brisbane Subject: RE: Greylisting Addon Sorry ? My Linux noobness showing again? Postfix is what I am using. I found a few how-to?s for spam gateways and it wasn?t until one specific one (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu ) that went smooth which sort of defined what I was going to use. So do you have it all working now ? For the record, I use postgrey with postfix (obviously) http://postgrey.schweikert.ch/ Works very well. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/bf2ad146/attachment.html From melecom at adam.com.au Wed Nov 28 05:58:11 2007 From: melecom at adam.com.au (melecom@adam.com.au) Date: Wed Nov 28 05:28:13 2007 Subject: Postfix + MS not seeing hash_queue_names Message-ID: <3084.1196227691@adam.com.au> An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/77d0b1e6/attachment.html From micoots at yahoo.com Wed Nov 28 05:51:04 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 05:51:07 2007 Subject: Recipient verification to Exchange milter In-Reply-To: <474C9A25.7020405@evi-inc.com> Message-ID: <695135.33595.qm@web33311.mail.mud.yahoo.com> Hi, Matt Kettler wrote: donald.dawson@bakerbotts.com wrote: > Please let me know you experience with an Exchange email recipient > verification tool (e.g. milter to sendmail). > > Below are some versions I know of. Any success, problems or input > regarding this list, or others you might know of? > > We are running four inbound MX servers with sendmail version 8.14.1, MS > version 4.62.9 and SA version 3.002002. > > Pay Version: > > _http://spamfree.ru/spamfree/_ - $299 enterprise > > Free versions: > > _http://www.five-ten-sg.com/dnsbl/rn01re01.html_ > > _http://spamlinks.net/filter-server-addon.htm#sendmail_ > > _http://smfs.sourceforge.net/smf-sav.html_ - free version of > spamfree.ru/spamfree > > _http://www.milter.info/sendmail/milter-ahead/_ - previous experience > with milter-null was frustrating since it took so long to update LibSnert. Note: milter-ahead isn't free, it's one of 4 of the snertsoft milters that costs money. a site license is 90 euros: http://www.snertsoft.com/download.php You might also wish to read this thread about sms-sav vs milter-ahead: http://search.gmane.org/?query=OT%3A+performance+smf-sav+vs+milter-ahead&group=gmane.mail.virus.mailscanner I flicked both of these options and went for scam-back, which has the added features of doing the recipient checks against _any_ remote smtp server (admin definable). scam-back is also open source and c-coded, so is fast. It works with sendmail as a milter. Regards, Michael. MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/63270dac/attachment.html From jcasale at ActiveNetwerx.com Wed Nov 28 06:08:49 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Wed Nov 28 06:09:00 2007 Subject: Greylisting Addon In-Reply-To: <7484954.2091196225418734.JavaMail.root@zimbra.mckerrs.net> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218270@an-ex.ActiveNetwerx.int> <7484954.2091196225418734.JavaMail.root@zimbra.mckerrs.net> Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218271@an-ex.ActiveNetwerx.int> Well, everything in that article is working, but I do want to add greylisting. I will try your suggestion first. The mail gateway is on an esx server, so it?s easy to roll back screw-up?s ? jlc From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Mailscanner Admin Sent: Tuesday, November 27, 2007 9:50 PM To: MailScanner discussion Subject: Re: Greylisting Addon ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) Australia/Brisbane Subject: RE: Greylisting Addon Sorry ? My Linux noobness showing again? Postfix is what I am using. I found a few how-to?s for spam gateways and it wasn?t until one specific one (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu ) that went smooth which sort of defined what I was going to use. So do you have it all working now ? For the record, I use postgrey with postfix (obviously) http://postgrey.schweikert.ch/ Works very well. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071127/074dfb0c/attachment.html From rupen.momaya at gmail.com Wed Nov 28 06:16:55 2007 From: rupen.momaya at gmail.com (Rupen Momaya) Date: Wed Nov 28 06:17:00 2007 Subject: Problem with mailscanner In-Reply-To: <223f97700711240257n6b942529u8349e41e3a74e096@mail.gmail.com> References: <6cd923a70711232253sd254c88gb56e8eb67daa7956@mail.gmail.com> <223f97700711240257n6b942529u8349e41e3a74e096@mail.gmail.com> Message-ID: <6cd923a70711272216i3099ae8u6843305d5d50a800@mail.gmail.com> On Nov 24, 2007 4:27 PM, Glenn Steen wrote: > On 24/11/2007, Rupen Momaya wrote: > > Hi, > > I am running mailscanner + postfix with below versions on CentOS 4.5 > > box. Suddenly we started getting below error messages and mails were > > queing up. I re-isntalled Mail::ClamAV module, upgraded Clam version > > to 0.91.2, disabled clam from Mailscanner but nogo...When i disable > > Mailscanner completely & run only postfix it works fine & mails start > > gettign delivered.... > > I have googled but didnt find this error anywhere..Can someone help > here? > > > > ---------------------------------- > > Nov 23 02:04:04 netbox MailScanner[4594]: Virus and Content Scanning: > Starting > > Nov 23 02:04:05 netbox MailScanner[4595]: New Batch: Scanning 1 > > messages, 722 bytes > > Nov 23 02:04:05 netbox MailScanner[4595]: Failed to create message > > structures for 80FBF424001.9CE89, dropping it from the bat > > ch > > Nov 23 02:04:05 netbox MailScanner[4595]: Virus and Content Scanning: > Starting > > Nov 23 02:04:06 netbox MailScanner[4597]: New Batch: Scanning 1 > > messages, 722 bytes > > Nov 23 02:04:06 netbox MailScanner[4597]: Failed to create message > > structures for 80FBF424001.6697B, dropping it from the bat > > ch > > Nov 23 02:04:06 netbox MailScanner[4597]: Virus and Content Scanning: > Starting > > Nov 23 02:04:07 netbox MailScanner[4598]: New Batch: Scanning 1 > > messages, 722 bytes > > Nov 23 02:04:07 netbox MailScanner[4598]: Failed to create message > > structures for 80FBF424001.5B9BC, dropping it from the bat > > ch > > Nov 23 02:04:07 netbox MailScanner[4598]: Virus and Content Scanning: > Starting > > Nov 23 02:04:11 netbox MailScanner[4578]: New Batch: Scanning 1 > > messages, 722 bytes > > Nov 23 02:04:11 netbox MailScanner[4578]: Failed to create message > > structures for 80FBF424001.7EAC6, dropping it from the bat > > ch > > Nov 23 02:04:11 netbox MailScanner[4578]: Virus and Content Scanning: > Starting > > Nov 23 02:04:14 netbox MailScanner[4594]: New Batch: Scanning 1 > > messages, 722 bytes > > Nov 23 02:04:14 netbox MailScanner[4594]: Failed to create message > > structures for 80FBF424001.DD424, dropping it from the bat > > ch > > ---------------------------------------------------------------- > > > > Versions : > > MailScanner-perl-MIME-Base64-3.05-5 > > mailscanner-4.45.4-1 > > postfix-2.2.10-1.1.el4 > > > > [root@linbox postfix]# ls -al /var/spool/MailScanner/ > > total 28 > > drwxr-xr-x 4 root root 4096 Nov 28 2005 . > > drwxr-xr-x 18 root root 4096 Nov 23 20:40 .. > > drwx------ 2 postfix postfix 4096 Nov 24 11:40 incoming > > drwx------ 162 postfix nobody 12288 Nov 23 12:29 quarantine > > > > > > Regards, > > Rupen > Is 80FBF424001 really a complete queue file? Can postcat understand > it? With the rather old versions you have ... things _should_ be OK, > but .... I assume you are using the olny really supported method, the > HOLD method, and not the old *deprecated* dual Postfix/defer method... > The supported one has the header_check putting everything in the hold > "queue"... If so, check that there are no strange files in the hold > queue directory ... f there are, move or remove it/them. > > Then do as Drew/Hugo says... go do some updating;-). > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > Hi all, Thanks for the replies. I have upgrade both mailscanner & postfix and alls working fine now.. ~ rupen -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/70156e30/attachment.html From J.Ede at birchenallhowden.co.uk Wed Nov 28 08:24:54 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 28 08:27:40 2007 Subject: Greylisting Addon In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21826F@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21826F@an-ex.ActiveNetwerx.int> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE06F@server02.bhl.local> I used to use postgrey and then I've moved to sqlgrey which branched off from the postgrey tree when they decided they wanted to store the info in a sql database. Personally I like the sqlgrey as I found it more easily scalable to multiple mail servers... If you're on 1 server though then postgrey should be fine. I don't think either one is currently being actively maintained though. Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Joseph L. Casale [jcasale@ActiveNetwerx.com] Sent: 28 November 2007 04:01 To: 'mailscanner@lists.mailscanner.info' Subject: Greylisting Addon I finally got Mailscanner working on a gateway. I want to add greylisting and was interested in knowing what the opinion here was on what is the best implementation to use? Any thoughts appreciated, jlc -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From uxbod at splatnix.net Wed Nov 28 08:30:27 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 28 08:30:44 2007 Subject: Greylisting Addon In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218271@an-ex.ActiveNetwerx.int> Message-ID: <16278398.5051196238627376.JavaMail.root@office.splatnix.net> Personally I have found PolicyD (http://www.policyd.org/) to have better performance and reliability than SQLgrey. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 6:08:49 AM (GMT) Europe/London Subject: RE: Greylisting Addon Well, everything in that article is working, but I do want to add greylisting. I will try your suggestion first. The mail gateway is on an esx server, so it?s easy to roll back screw-up?s J jlc From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Mailscanner Admin Sent: Tuesday, November 27, 2007 9:50 PM To: MailScanner discussion Subject: Re: Greylisting Addon ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) Australia/Brisbane Subject: RE: Greylisting Addon Sorry ? My Linux noobness showing again? Postfix is what I am using. I found a few how-to?s for spam gateways and it wasn?t until one specific one (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu ) that went smooth which sort of defined what I was going to use. So do you have it all working now ? For the record, I use postgrey with postfix (obviously) http://postgrey.schweikert.ch/ Works very well. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From J.Ede at birchenallhowden.co.uk Wed Nov 28 08:43:35 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 28 08:45:04 2007 Subject: Greylisting Addon In-Reply-To: <16278398.5051196238627376.JavaMail.root@office.splatnix.net> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218271@an-ex.ActiveNetwerx.int>, <16278398.5051196238627376.JavaMail.root@office.splatnix.net> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE071@server02.bhl.local> I'd not heard of policyd before. You say the reliability is better, in what way? Is is more tolerant of interruptions to the mysql database? Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of UxBoD [uxbod@splatnix.net] Sent: 28 November 2007 08:30 To: MailScanner discussion Subject: Re: Greylisting Addon Personally I have found PolicyD (http://www.policyd.org/) to have better performance and reliability than SQLgrey. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 6:08:49 AM (GMT) Europe/London Subject: RE: Greylisting Addon Well, everything in that article is working, but I do want to add greylisting. I will try your suggestion first. The mail gateway is on an esx server, so it?s easy to roll back screw-up?s J jlc From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Mailscanner Admin Sent: Tuesday, November 27, 2007 9:50 PM To: MailScanner discussion Subject: Re: Greylisting Addon ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) Australia/Brisbane Subject: RE: Greylisting Addon Sorry ? My Linux noobness showing again? Postfix is what I am using. I found a few how-to?s for spam gateways and it wasn?t until one specific one (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu ) that went smooth which sort of defined what I was going to use. So do you have it all working now ? For the record, I use postgrey with postfix (obviously) http://postgrey.schweikert.ch/ Works very well. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From martinh at solidstatelogic.com Wed Nov 28 08:54:43 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Wed Nov 28 08:54:48 2007 Subject: Mail queue is about an hour behind In-Reply-To: Message-ID: <5b1c06d7a4c8fa40a6c8d9d4955d0ec8@solidstatelogic.com> Jody What does "MailScanner -v" show? Also what versions of Mailscanner, the MTA and SA? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Jody Cleveland > Sent: 27 November 2007 18:11 > To: MailScanner discussion > Subject: Mail queue is about an hour behind > > Hello, > > I've been noticing mail being slow, and looked into it more, and it seems > to > be about an hour delay. I watch my postfix queue, and it grows faster than > MailScanner can keep up with. > > Following the advice of an earlier thread, I ran MailScanner --debug, and > this is what I get: > > # MailScanner --debug > In Debugging mode, not forking... > SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp > Use of uninitialized value in concatenation (.) or string at > /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1087. > Use of uninitialized value in concatenation (.) or string at > /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1089. > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '30000' > max message size is '30000' > max message size is '30000' > max message size is '30000' > Stopping now as you are debugging me. > > Any ideas what the problem is? > > - jody > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From uxbod at splatnix.net Wed Nov 28 09:01:36 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 28 09:01:51 2007 Subject: Greylisting Addon In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE071@server02.bhl.local> Message-ID: <23126313.5101196240496885.JavaMail.root@office.splatnix.net> Yes, because it will re-attempt connection if lost, and if still not available will still allow email to be processed. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Jason Ede" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 8:43:35 AM (GMT) Europe/London Subject: RE: Greylisting Addon I'd not heard of policyd before. You say the reliability is better, in what way? Is is more tolerant of interruptions to the mysql database? Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of UxBoD [uxbod@splatnix.net] Sent: 28 November 2007 08:30 To: MailScanner discussion Subject: Re: Greylisting Addon Personally I have found PolicyD (http://www.policyd.org/) to have better performance and reliability than SQLgrey. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 6:08:49 AM (GMT) Europe/London Subject: RE: Greylisting Addon Well, everything in that article is working, but I do want to add greylisting. I will try your suggestion first. The mail gateway is on an esx server, so it?s easy to roll back screw-up?s J jlc From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Mailscanner Admin Sent: Tuesday, November 27, 2007 9:50 PM To: MailScanner discussion Subject: Re: Greylisting Addon ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) Australia/Brisbane Subject: RE: Greylisting Addon Sorry ? My Linux noobness showing again? Postfix is what I am using. I found a few how-to?s for spam gateways and it wasn?t until one specific one (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu ) that went smooth which sort of defined what I was going to use. So do you have it all working now ? For the record, I use postgrey with postfix (obviously) http://postgrey.schweikert.ch/ Works very well. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From list-mailscanner at linguaphone.com Wed Nov 28 09:58:25 2007 From: list-mailscanner at linguaphone.com (Gareth) Date: Wed Nov 28 09:58:32 2007 Subject: OOT: Spamhaus professional service In-Reply-To: <474BE3A7.7020102@indomino.net> References: <474BE3A7.7020102@indomino.net> Message-ID: <1196243905.20006.2.camel@gblades-suse.linguaphone-intranet.co.uk> 30 users here and we got blocked. I think you will certenly need a subscription. On Tue, 2007-11-27 at 09:30, Budi Febrianto wrote: > Hi, > I just move out to another company, that the size is bigger than the > last one. > I want to use spamhaus in mta level, but know I worried about the size. > > based on > http://www.spamhaus.org/organization/dnsblusage.html > > I wonder, can I still use the free service, or I had to use the > professional service? > Number of user aprox 500 users, and it may double next year. > I still don't kwnw how many emails we are receives everyday because > rigth now we are using mdaemon as mail server. I plan to move it to > mailscanner with zen.spamhaus.org > Anybody still using spamhaus with the same user or maybe even larger > users? Any problem? > > Thanks > > > > From prandal at herefordshire.gov.uk Wed Nov 28 10:04:55 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 28 10:05:02 2007 Subject: Mail queue is about an hour behind In-Reply-To: References: Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA712@HC-MBX02.herefordshire.gov.uk> Have you done an sa-update? And checked via spamassassin --lint that SA is using the updated rules? Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Jody Cleveland > Sent: 27 November 2007 18:11 > To: MailScanner discussion > Subject: Mail queue is about an hour behind > > Hello, > > I've been noticing mail being slow, and looked into it more, > and it seems to > be about an hour delay. I watch my postfix queue, and it > grows faster than > MailScanner can keep up with. > > Following the advice of an earlier thread, I ran MailScanner > --debug, and > this is what I get: > > # MailScanner --debug > In Debugging mode, not forking... > SpamAssassin temp dir = > /var/spool/MailScanner/incoming/SpamAssassin-Temp > Use of uninitialized value in concatenation (.) or string at > /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1087. > Use of uninitialized value in concatenation (.) or string at > /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1089. > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '100000' > max message size is '30000' > max message size is '30000' > max message size is '30000' > max message size is '30000' > Stopping now as you are debugging me. > > Any ideas what the problem is? > > - jody > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From prandal at herefordshire.gov.uk Wed Nov 28 10:06:37 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 28 10:07:06 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474C5FE6.4010909@openenterprise.ca> References: <474C5FE6.4010909@openenterprise.ca> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA716@HC-MBX02.herefordshire.gov.uk> Use two mx servers at the same priority. Otherwise you'll get most of your ham going to the first box, and most of the spam to the second. In that case, Bayes will be terrible on the second box because it will be starved of ham. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Johnny Stork > Sent: 27 November 2007 18:20 > To: mailscanner@lists.mailscanner.info > Subject: Redundant Mail System Suggestions > > I am working with a client seeking redundant mail and dns services so > have been trying to come up with some suggested architectures. > > client has dual internet connections. So my first thought was > create two > identical MS/MW (mailscanner/mailwatch) systems, and assign each a > different MX record with one being higher priority than the > other. The > machine running MS/MW would also be a DNS server so what would be the > best way to setup some redundancy for both DNS and incoming mail? > > Primary MX Record 111.111.111.111 (Internet connection 1) > Secondary MX Record 222.222.222.222 (Internet connection 2) > > > What are the benefits/differences between creating a single A record > with the same hostname, but the two different IP's above, versus > multiple MX records but all with the same/different priority? > Or, just > list the machines as seperate MX records with the same priority? > > > The next step is how to I ensure that the MS/MW systems on > both servers > remain synchronized? I can easily point them to a common > Mysql database > which will be running internally and will be redundant by way > of a RH HA > Cluster, but what about the mail user accounts? The client will be > running an internal groupware solution, possibly Scalix, so all mail > coming in to the gateway MS/MW servers will simple get > forwarded with a > mailertable entry so is there any need to synchronise anything else > between the two gateway MW/MS servers? > > If anyone has any other suggestions/ideas for setting up such an > environment I would be greatful. > > > > > -- > *Johnny Stork* > Business & Technology Consultant > stork@openenterprise.ca > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From glenn.steen at gmail.com Wed Nov 28 10:12:02 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 28 10:12:05 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711271351mf10fd74q2049f0751a5253ef@mail.gmail.com> References: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> <1278702.4791196197286157.JavaMail.root@office.splatnix.net> <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> <223f97700711271336p21f5c069lcfea1127130a825e@mail.gmail.com> <194a2c240711271351mf10fd74q2049f0751a5253ef@mail.gmail.com> Message-ID: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> On 27/11/2007, Israel Garcia wrote: > On Nov 27, 2007 4:36 PM, Glenn Steen wrote: > > > > > On 27/11/2007, Israel Garcia wrote: > > > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > > > > > So when disabling RBLs the problem disappears. > > > > > > No, the problem disapear when I turn off spamassassin completily in > > > mailscanner config file. Sometimes I enable Spamassassin check but > disable > > > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. > BUT, > > > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > average > > > begins to increase and thousands of mails begins comes to HOLD folder .. > Do > > > you think it's time to split the load in two servers? I mean something > like > > > this: > > > Router > > > NAT rules to SMTP farm serves. > > > I > > > I > > > ______________________________ > > > I I > > > Server2 SMTP Server1 SMTP > > > Mailscanner/sa Mailscanner/sa > > > > If the bottleneck is network-related/lookups.... this will buy you > > nothing, unfortunately. > I know, but how am I sure this is the cause of my problem? > :-) .... when you remove some load and the problem goes away:-):-). > > > > > > > > > I think I have two problems, to much spam (80% of total emails --> from > > > vispan) and my the line 256k/frame relay is FULL. > > > > > > Any other ideas? > > > Israel > > > > > > > Since the load climbs, you likely have a lot of processes in state D > > (count them with a ps.... might give a clue:-)... Which might indicate > > slow lookup responses, sure. > > > The loads climbs when comes a lot of mail to hold folder Yes, exactly. > > > > You do reject mail for unknown recipients, right? If not, start doing > > that... It will ease things;). > yes, I do.. > from main.cf: > local_recipient_maps = unix:passwd.byname $alias_maps > smtpd_helo_required = yes > disable_vrfy_command = yes > strict_rfc821_envelopes = yes > invalid_hostname_reject_code = 554 > multi_recipient_bounce_reject_code = 554 > non_fqdn_reject_code = 554 > relay_domains_reject_code = 554 > unknown_address_reject_code = 554 > unknown_client_reject_code = 554 > unknown_hostname_reject_code = 554 > unknown_local_recipient_reject_code = 554 > unknown_relay_recipient_reject_code = 554 > unknown_sender_reject_code = 554 > unknown_virtual_alias_reject_code = 554 > unknown_virtual_mailbox_reject_code = 554 > unverified_recipient_reject_code = 554 > unverified_sender_reject_code = 554 > # > smtpd_sender_restrictions = > check_sender_access hash:/etc/postfix/listanegra > reject_non_fqdn_sender > reject_unknown_sender_domain permit > > smtpd_recipient_restrictions = > permit_auth_destination > permit_mynetworks > reject_non_fqdn_recipient > reject_unknown_recipient_domain > reject_unauth_destination > reject_invalid_hostname, > reject_unknown_recipient_domain, > reject_unauth_pipelining, > permit_sasl_authenticated, > reject_unauth_destination, > > Good. > > > > You might also consider using a few RBLs at the MTA level, so that you > > reject messages that hit them. If you go for that, choose > > wisely...:-). > > And look over what ... "RFC strictness" you can enable... and use to > > reject junk. > What is RFC stricness? Pretty much what you do. Instead of blithely accepting malformed SMTP conversations, just reject them (being ... strict... about it:-). I don't see what helo_rextrictions you have... You might want to do something there too... Like smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, check_helo_access hash:/etc/postfix/deny_domain_spoof ... where the hash to deny domain spoofing contains your domains details: example.net REJECT 123.456.789.123 REJECT ... Some will argue that this violates the RFCs, but it really doesn't... AFAICS:-). Doing this on HELO/EHLO will help a bit more. > thanks in advance > Israel > Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From micoots at yahoo.com Wed Nov 28 10:32:02 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 10:32:06 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> Message-ID: <156656.18130.qm@web33301.mail.mud.yahoo.com> Hi, Glenn Steen wrote: On 27/11/2007, Israel Garcia wrote: > On Nov 27, 2007 4:36 PM, Glenn Steen wrote: > > > > > On 27/11/2007, Israel Garcia wrote: > > > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > > > > > So when disabling RBLs the problem disappears. > > > > > > No, the problem disapear when I turn off spamassassin completily in > > > mailscanner config file. Sometimes I enable Spamassassin check but > disable > > > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. > BUT, > > > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > average > > > begins to increase and thousands of mails begins comes to HOLD folder .. > Do > > > you think it's time to split the load in two servers? I mean something > like > > > this: > > > Router > > > NAT rules to SMTP farm serves. > > > I > > > I > > > ______________________________ > > > I I > > > Server2 SMTP Server1 SMTP > > > Mailscanner/sa Mailscanner/sa > > > > If the bottleneck is network-related/lookups.... this will buy you > > nothing, unfortunately. > I know, but how am I sure this is the cause of my problem? > :-) .... when you remove some load and the problem goes away:-):-). How much memory/swap is used when these messages get queued and not processed? I'm currently trouble-shooting a problem which does the same thing and have tracked it down to the memory running out ie. mostly swap being used while CPU's aren't (load average goes to 12 and 13 because of the heavy swap usage). I'm organising more memory for the server at the moment, which should resolve the issue. Regards, Michael. --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/83084989/attachment.html From micoots at yahoo.com Wed Nov 28 10:34:24 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 10:34:26 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA716@HC-MBX02.herefordshire.gov.uk> Message-ID: <265639.87651.qm@web33313.mail.mud.yahoo.com> Hi, "Randal, Phil" wrote: Use two mx servers at the same priority. Otherwise you'll get most of your ham going to the first box, and most of the spam to the second. In that case, Bayes will be terrible on the second box because it will be starved of ham. To avoid this you have two options: 1. put the bayes database on a central NFS server and export the directories to both MX servers 2. store the bayes database in MySQL and configure both MX server to query that MySQL database. Regards, Michael. --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/25f9cc86/attachment.html From J.Ede at birchenallhowden.co.uk Wed Nov 28 10:51:39 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 28 10:52:22 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA716@HC-MBX02.herefordshire.gov.uk> References: <474C5FE6.4010909@openenterprise.ca>, <7EF0EE5CB3B263488C8C18823239BEBA023EA716@HC-MBX02.herefordshire.gov.uk> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE075@server02.bhl.local> Why not store bayes in a SQL database... That way both mailservers will have same bayes info ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Randal, Phil [prandal@herefordshire.gov.uk] Sent: 28 November 2007 10:06 To: MailScanner discussion Subject: RE: Redundant Mail System Suggestions Use two mx servers at the same priority. Otherwise you'll get most of your ham going to the first box, and most of the spam to the second. In that case, Bayes will be terrible on the second box because it will be starved of ham. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Johnny Stork > Sent: 27 November 2007 18:20 > To: mailscanner@lists.mailscanner.info > Subject: Redundant Mail System Suggestions > > I am working with a client seeking redundant mail and dns services so > have been trying to come up with some suggested architectures. > > client has dual internet connections. So my first thought was > create two > identical MS/MW (mailscanner/mailwatch) systems, and assign each a > different MX record with one being higher priority than the > other. The > machine running MS/MW would also be a DNS server so what would be the > best way to setup some redundancy for both DNS and incoming mail? > > Primary MX Record 111.111.111.111 (Internet connection 1) > Secondary MX Record 222.222.222.222 (Internet connection 2) > > > What are the benefits/differences between creating a single A record > with the same hostname, but the two different IP's above, versus > multiple MX records but all with the same/different priority? > Or, just > list the machines as seperate MX records with the same priority? > > > The next step is how to I ensure that the MS/MW systems on > both servers > remain synchronized? I can easily point them to a common > Mysql database > which will be running internally and will be redundant by way > of a RH HA > Cluster, but what about the mail user accounts? The client will be > running an internal groupware solution, possibly Scalix, so all mail > coming in to the gateway MS/MW servers will simple get > forwarded with a > mailertable entry so is there any need to synchronise anything else > between the two gateway MW/MS servers? > > If anyone has any other suggestions/ideas for setting up such an > environment I would be greatful. > > > > > -- > *Johnny Stork* > Business & Technology Consultant > stork@openenterprise.ca > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Kit at simplysites.co.uk Wed Nov 28 11:26:59 2007 From: Kit at simplysites.co.uk (Kit Wong) Date: Wed Nov 28 11:27:15 2007 Subject: Greylisting Addon In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE071@server02.bhl.local> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218271@an-ex.ActiveNetwerx.int>, <16278398.5051196238627376.JavaMail.root@office.splatnix.net> <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE071@server02.bhl.local> Message-ID: Any suggestions for sendmail? I too am interested in installing one. Thanks -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jason Ede Sent: 28 November 2007 08:44 To: MailScanner discussion Subject: RE: Greylisting Addon I'd not heard of policyd before. You say the reliability is better, in what way? Is is more tolerant of interruptions to the mysql database? Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of UxBoD [uxbod@splatnix.net] Sent: 28 November 2007 08:30 To: MailScanner discussion Subject: Re: Greylisting Addon Personally I have found PolicyD (http://www.policyd.org/) to have better performance and reliability than SQLgrey. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 6:08:49 AM (GMT) Europe/London Subject: RE: Greylisting Addon Well, everything in that article is working, but I do want to add greylisting. I will try your suggestion first. The mail gateway is on an esx server, so it?s easy to roll back screw-up?s J jlc From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Mailscanner Admin Sent: Tuesday, November 27, 2007 9:50 PM To: MailScanner discussion Subject: Re: Greylisting Addon ----- Original Message ----- From: "Joseph L. Casale" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) Australia/Brisbane Subject: RE: Greylisting Addon Sorry ? My Linux noobness showing again? Postfix is what I am using. I found a few how-to?s for spam gateways and it wasn?t until one specific one (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav_ubuntu ) that went smooth which sort of defined what I was going to use. So do you have it all working now ? For the record, I use postgrey with postfix (obviously) http://postgrey.schweikert.ch/ Works very well. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From glenn.steen at gmail.com Wed Nov 28 11:34:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 28 11:34:36 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711271337rce45fdfra469540be134e38e@mail.gmail.com> References: <194a2c240711270850w83aa0c2l184e423725d006d@mail.gmail.com> <306766.4171196187091910.JavaMail.root@office.splatnix.net> <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> <223f97700711271313o5d4521caib6cbb946ac1bd18a@mail.gmail.com> <194a2c240711271337rce45fdfra469540be134e38e@mail.gmail.com> Message-ID: <223f97700711280334xf9a6dcel28897ec5eda922d6@mail.gmail.com> On 27/11/2007, Israel Garcia wrote: > On Nov 27, 2007 4:13 PM, Glenn Steen wrote: > > > > > On 27/11/2007, Israel Garcia wrote: > > > On Nov 27, 2007 1:11 PM, UxBoD wrote: > > > > > > > Well ASN is hashed out in your v320 pre file but is still active in > the > > > v310 file. > > > What does it means? > > That you should comment it out in the v310.pre file too;-) > > Then restart MS (with SA) and see if that cures it. > > > > > DONE!!.. I restarted now.. let see now :-) .. two questions, which is the > difference in init.pre, v310.pre, v310.pre and v320.pre files? What is ASN? > thanks a lot glenn..:-) SpamAssassin will read&use all the files in there named .pre, IIRC in lexical order, so setting one thing in any of them will mean it is used. The idea with the construct is that you should be able to move up/down versions easily, without the need to copy over/manage settings "unrelated" to the new version. There has been a (few IIRC) discussion(s) on ASN in the list. IIRC, to use it one need do more than load it, so that in itself is reason enough to disable. Read more about it at http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Plugin_ASN.html (and elsewhere on their site). > > > > > > We process over 100k messages a day on a 256k line so no real worries > > > there. You say a high percentage of your traffic is SMTP, how are you > > > identifying that ? > > > > > > I can see the traffic in my WAN network using a cisco router/netflow > > > collector. > > > > > > > Are you performing any sort of packet shaping or QoS then ? > > > No > > > > It does sound to me like DNS timeouts when performing lookups, as > others > > > have also said. > > > Well, I use a only caching dns ( caching-nameserver-7.3-3) > > > > If you set the list of RBLs to check to blank in MailScanner.conf > does > > > the problem disappear ? > > > Do you mean thie line: > > > Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # > > Ok, that's empty then. > > > > > > > When the problem disappear is when I set: > > > Use Spamassassin = no > > > and restart mailscanner... > > > > If you run "MailScanner --debug --debug-sa", or just a normal > > "spamassassin -D -t > very noticeable ... "pauses"? And if so, where? > > > Well, I ran MailScanner --debug --debug-sa and I see no errors.. BUT it > takes so long.. I mean several minutes (20 or 30 minutes) :-( Hm, that seems a bit extreme. Are you by any chance running a slightly old ClamAV (and perhaps using either clamscan or clamavmodule)? There was a problem with signature loading a while back. top should be able to tell you about that. Could we see an example of the output, where you point out the most flagrant "pauses"? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From prandal at herefordshire.gov.uk Wed Nov 28 11:36:00 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 28 11:36:06 2007 Subject: Greylisting Addon In-Reply-To: References: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218271@an-ex.ActiveNetwerx.int>, <16278398.5051196238627376.JavaMail.root@office.splatnix.net><4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE071@server02.bhl.local> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA758@HC-MBX02.herefordshire.gov.uk> milter-greylist 4.0 http://hcpnet.free.fr/milter-greylist/ This seems to be a bit of a memory hog (with possible memory leaks), though, so keep your eye on it. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Kit Wong > Sent: 28 November 2007 11:27 > To: MailScanner discussion > Subject: RE: Greylisting Addon > > Any suggestions for sendmail? I too am interested in installing one. > > Thanks > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Jason Ede > Sent: 28 November 2007 08:44 > To: MailScanner discussion > Subject: RE: Greylisting Addon > > I'd not heard of policyd before. You say the reliability is > better, in what way? Is is more tolerant of interruptions to > the mysql database? > > Jason > ________________________________________ > From: mailscanner-bounces@lists.mailscanner.info > [mailscanner-bounces@lists.mailscanner.info] On Behalf Of > UxBoD [uxbod@splatnix.net] > Sent: 28 November 2007 08:30 > To: MailScanner discussion > Subject: Re: Greylisting Addon > > Personally I have found PolicyD (http://www.policyd.org/) to > have better performance and reliability than SQLgrey. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg > --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 > 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // > Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Joseph L. Casale" > To: "MailScanner discussion" > Sent: Wednesday, November 28, 2007 6:08:49 AM (GMT) Europe/London > Subject: RE: Greylisting Addon > > > > > > Well, everything in that article is working, but I do want to > add greylisting. > I will try your suggestion first. The mail gateway is on an > esx server, so it?s easy to roll back screw-up?s J > > > > jlc > > > > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Mailscanner Admin > Sent: Tuesday, November 27, 2007 9:50 PM > To: MailScanner discussion > Subject: Re: Greylisting Addon > > > > > ----- Original Message ----- > From: "Joseph L. Casale" > To: "MailScanner discussion" > Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) > Australia/Brisbane > Subject: RE: Greylisting Addon > > Sorry ? My Linux noobness showing again? Postfix is what I am > using. I found a few how-to?s for spam gateways and it wasn?t > until one specific one > (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav > _ubuntu ) that went smooth which sort of defined what I was > going to use. > > > > So do you have it all working now ? > > For the record, I use postgrey with postfix (obviously) > http://postgrey.schweikert.ch/ > > Works very well. > > > > > > -- > This message has been scanned for viruses and dangerous > content by MailScanner , and is believed to be clean. > -- > This message has been scanned for viruses and dangerous > content by MailScanner , and is believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and dangerous > content by MailScanner, and is believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > From glenn.steen at gmail.com Wed Nov 28 11:42:19 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 28 11:42:22 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <156656.18130.qm@web33301.mail.mud.yahoo.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> Message-ID: <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> On 28/11/2007, Michael Mansour wrote: > Hi, > > Glenn Steen wrote: > On 27/11/2007, Israel Garcia wrote: > > On Nov 27, 2007 4:36 PM, Glenn Steen wrote: > > > > > > > > On 27/11/2007, Israel Garcia wrote: > > > > > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > > > > > > > So when disabling RBLs the problem disappears. > > > > > > > > No, the problem disapear when I turn off spamassassin completily in > > > > mailscanner config file. Sometimes I enable Spamassassin check but > > disable > > > > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. > > BUT, > > > > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > > average > > > > begins to increase and thousands of mails begins comes to HOLD folder > .. > > Do > > > > you think it's time to split the load in two servers? I mean something > > like > > > > this: > > > > Router > > > > NAT rules to SMTP farm serves. > > > > I > > > > I > > > > ______________________________ > > > > I I > > > > Server2 SMTP Server1 SMTP > > > > Mailscanner/sa Mailscanner/sa > > > > > > If the bottleneck is network-related/lookups.... this will buy you > > > nothing, unfortunately. > > I know, but how am I sure this is the cause of my problem? > > > :-) .... when you remove some load and the problem goes away:-):-). > How much memory/swap is used when these messages get queued and not > processed? > > I'm currently trouble-shooting a problem which does the same thing and have > tracked it down to the memory running out ie. mostly swap being used while > CPU's aren't (load average goes to 12 and 13 because of the heavy swap > usage). > > I'm organising more memory for the server at the moment, which should > resolve the issue. > > Regards, > > Michael. Good point. On the other hand, you could also look at a) Why does the memory run out, and b) what can you do about it. If your MailScanner children eat up too much, one thing could be to lower the amount of children. If the childrens workers hang around waiting for slow responses, you might need look more closely on why that is... and correct that (in this case more RAM could be a very good aid, but still a band.aid where an amputation would be better;-):-). Anyway, I'm sure you know where to look, what to do:). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From micoots at yahoo.com Wed Nov 28 12:13:12 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 12:13:16 2007 Subject: Greylisting Addon In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA758@HC-MBX02.herefordshire.gov.uk> Message-ID: <660518.44288.qm@web33315.mail.mud.yahoo.com> Hi guys, "Randal, Phil" wrote: milter-greylist 4.0 http://hcpnet.free.fr/milter-greylist/ This seems to be a bit of a memory hog (with possible memory leaks), though, so keep your eye on it. IMHO milter-greylist is the best greylist milter for sendmail. Why is it the best? because it does what it's supposed to do (and in a varied setup like I have, multiple inbound and outbound MX servers, central mail servers, etc) it just works. Yes it is a memory hog, but 400Mb of virtual memory isn't that much considering I have over 72,000 auto-managed records per server. I have tried others and found they may work well for one server, but not in a distributed environment which requires sync between MX servers. Regards, Michael. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Kit Wong > Sent: 28 November 2007 11:27 > To: MailScanner discussion > Subject: RE: Greylisting Addon > > Any suggestions for sendmail? I too am interested in installing one. > > Thanks > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Jason Ede > Sent: 28 November 2007 08:44 > To: MailScanner discussion > Subject: RE: Greylisting Addon > > I'd not heard of policyd before. You say the reliability is > better, in what way? Is is more tolerant of interruptions to > the mysql database? > > Jason > ________________________________________ > From: mailscanner-bounces@lists.mailscanner.info > [mailscanner-bounces@lists.mailscanner.info] On Behalf Of > UxBoD [uxbod@splatnix.net] > Sent: 28 November 2007 08:30 > To: MailScanner discussion > Subject: Re: Greylisting Addon > > Personally I have found PolicyD (http://www.policyd.org/) to > have better performance and reliability than SQLgrey. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg > --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 > 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // > Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Joseph L. Casale" > To: "MailScanner discussion" > Sent: Wednesday, November 28, 2007 6:08:49 AM (GMT) Europe/London > Subject: RE: Greylisting Addon > > > > > > Well, everything in that article is working, but I do want to > add greylisting. > I will try your suggestion first. The mail gateway is on an > esx server, so it???s easy to roll back screw-up???s J > > > > jlc > > > > > > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Mailscanner Admin > Sent: Tuesday, November 27, 2007 9:50 PM > To: MailScanner discussion > Subject: Re: Greylisting Addon > > > > > ----- Original Message ----- > From: "Joseph L. Casale" > To: "MailScanner discussion" > Sent: Wednesday, November 28, 2007 2:21:13 PM (GMT+1000) > Australia/Brisbane > Subject: RE: Greylisting Addon > > Sorry ??? My Linux noobness showing again??? Postfix is what I am > using. I found a few how-to???s for spam gateways and it wasn???t > until one specific one > (http://www.howtoforge.com/postfix_antispam_mailscanner_clamav > _ubuntu ) that went smooth which sort of defined what I was > going to use. > > > > So do you have it all working now ? > > For the record, I use postgrey with postfix (obviously) > http://postgrey.schweikert.ch/ > > Works very well. > > > > > > -- > This message has been scanned for viruses and dangerous > content by MailScanner , and is believed to be clean. > -- > This message has been scanned for viruses and dangerous > content by MailScanner , and is believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and dangerous > content by MailScanner, and is believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/e28dd951/attachment.html From shuttlebox at gmail.com Wed Nov 28 13:11:13 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 28 13:11:15 2007 Subject: Greylisting Addon In-Reply-To: <660518.44288.qm@web33315.mail.mud.yahoo.com> References: <7EF0EE5CB3B263488C8C18823239BEBA023EA758@HC-MBX02.herefordshire.gov.uk> <660518.44288.qm@web33315.mail.mud.yahoo.com> Message-ID: <625385e30711280511w7a55d35n1bd16f73fb630055@mail.gmail.com> On Nov 28, 2007 1:13 PM, Michael Mansour wrote: > Yes it is a memory hog, but 400Mb of virtual memory isn't that much > considering I have over 72,000 auto-managed records per server. It's also easy to tune the memory consumption by adjusting how long it will keep grey/whitelisted entries in the database. > I have tried others and found they may work well for one server, but not in > a distributed environment which requires sync between MX servers. The sync is very important and I haven't found an alternative that is capable of that. -- /peter From uxbod at splatnix.net Wed Nov 28 13:20:58 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 28 13:21:14 2007 Subject: Greylisting Addon In-Reply-To: <625385e30711280511w7a55d35n1bd16f73fb630055@mail.gmail.com> Message-ID: <31312594.5881196256058597.JavaMail.root@office.splatnix.net> policyd and MySQL replication works okay :) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "shuttlebox" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 1:11:13 PM (GMT) Europe/London Subject: Re: Greylisting Addon On Nov 28, 2007 1:13 PM, Michael Mansour wrote: > Yes it is a memory hog, but 400Mb of virtual memory isn't that much > considering I have over 72,000 auto-managed records per server. It's also easy to tune the memory consumption by adjusting how long it will keep grey/whitelisted entries in the database. > I have tried others and found they may work well for one server, but not in > a distributed environment which requires sync between MX servers. The sync is very important and I haven't found an alternative that is capable of that. -- /peter -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From cleveland at winnefox.org Wed Nov 28 13:30:16 2007 From: cleveland at winnefox.org (Jody Cleveland) Date: Wed Nov 28 13:30:21 2007 Subject: Mail queue is about an hour behind In-Reply-To: <474C6364.60107@fsl.com> Message-ID: Hello, Thank you so much for your help! On 11/27/07 12:35 PM, "Steve Freegard" wrote: > 1) run MailScanner *and* SpamAssassin in debug mode as it will give you > more clues than just the above output (MailScanner --debug --debug-sa). > > Look for timeouts in Razor/Pyzor/DCC/RBL/URIBLs and Bayes. I didn't see any timeouts for those, but I did get several errors, including these: [7149] dbg: bayes: no dbs present, cannot tie DB R/O: /var/spool/postfix/.spamassassin/bayes_toks [7201] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC [7201] dbg: razor2: razor2 is not available > 2) I would guess from the above output that you are using MCP? - if so, > consider moving all your MCP rules into the main SpamAssassin run > instead as MCP really is a performance killer as MailScanner has to > reload SpamAssassin for each message (slow...) Yes, I am. Where is the main SpamAssassin run/what directory do I move them to? > 3) Check your primary nameserver listed in /etc/resolv.conf and make > sure the 1st server in the list is responding quickly (and consider > using a local caching nameserver if you aren't already). Ah, I just spoke with the network admin, and he changed the ip address. I just changed it to what he had, so hopefully that will make a difference. > 4) Make sure that you haven't been blocked by Spamhaus - run: > > host 2.0.0.127.zen.spamhaus.org > > And make sure you don't get a timeout. Nope. No timeout. Thanks again to everyone helping me with this problem! - jody From micoots at yahoo.com Wed Nov 28 13:32:18 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 13:32:21 2007 Subject: Greylisting Addon In-Reply-To: <625385e30711280511w7a55d35n1bd16f73fb630055@mail.gmail.com> Message-ID: <577358.9553.qm@web33311.mail.mud.yahoo.com> Hi Peter, shuttlebox wrote: On Nov 28, 2007 1:13 PM, Michael Mansour wrote: > Yes it is a memory hog, but 400Mb of virtual memory isn't that much > considering I have over 72,000 auto-managed records per server. It's also easy to tune the memory consumption by adjusting how long it will keep grey/whitelisted entries in the database. > I have tried others and found they may work well for one server, but not in > a distributed environment which requires sync between MX servers. The sync is very important and I haven't found an alternative that is capable of that. Yes, sync is critical. I have also used and tested the greylist server that comes with DCC by Vernon. I use DCC anyway so though I might as well turn on the greylist feature and not have to worry about yet another third party app. DCC's greylist also has a "peer" feature which does what milter-greylist's sync does (not exactly the same way or as instantaneous as milter-greylist, but still works), so provides the necessary sync between MX peers. DCC's greylist work fine for *non-MX* servers, however for inbound MX servers which don't have local recipients (but pass the message onto an internal mail server after releasing the message from the embargo), DCC greylist tries to authenticate the recipients with the MX server itself, which of course fails with a "user unknown" and bounces the message to the sender. DCC greylist doesn't bother reading sendmail's mailertable to determine where the destination recipient is or to even consider that it's just an inbound MX server and should just greylist (embargo in DCC terminology) the email and then send it on to the real mail server with the inboxes. I explained and reported this problem to Vernon but he didn't accept it as a problem, instead tried to convince me that I didn't need MX servers and I should just run a beefy mail server. A few emails bounced between us before I gave up trying to explain to him why his greylist implementation doesn't work for inbound MX servers. He's a cluely guy and knows his stuff, but I just couldn't get through to him, he simply didn't accept the setup I had as a valid setup. Go figure. Michael. -- /peter -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/c3b06a79/attachment.html From drew.marshall at technologytiger.net Wed Nov 28 13:40:10 2007 From: drew.marshall at technologytiger.net (Drew Marshall) Date: Wed Nov 28 13:41:47 2007 Subject: Postfix + MS not seeing hash_queue_names In-Reply-To: <3084.1196227691@adam.com.au> References: <3084.1196227691@adam.com.au> Message-ID: <62689.B1VcRQRQCQY=.1196257210.squirrel@www.technologytiger.net> On Wed, November 28, 2007 05:58, melecom@adam.com.au wrote: > > >>From the postconf -n output:
> >
> >
> > hash_queue_depth = 1
> > hash_queue_names = incoming,defer
> >
> >
> > The directories exist, I've tried adding "active,maildrop," etc but > whenever MailScanner is restarted the same error appears in the maillog: > > > Nov 28 15:46:21 melecom MailScanner[7688]: Messages found but no hashed > queue directories. Please enable hashed queues for incoming and > deferred with a depth of 1 or 2. See the Postfix documentation for > hash_queue_names and hash_queue_depth
You need to ensure that as a?minimum, the hold and incoming queues are the same depth. > The Postfix documentation is sparse!
I would personally disagree but I wonder if you are looking in the right place :-) Check out here http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:installation? (Watch for any wrapping) at the bottom of the page about hashed queues. Regards Drew -- In line with our policy, this message has been scanned for viruses and dangerous content by Tiger Mail ( www.technologytiger.net/tigermail ) from Technology Tiger. Our email policy can be found at www.technologytiger.net/policy Technology Tiger Limited is registered in Scotland with registration number: 310997 Registered Office 55-57 West High Street Inverurie AB51 3QQ From igalvarez at gmail.com Wed Nov 28 13:56:26 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Wed Nov 28 13:56:29 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> References: <194a2c240711271237s2cd07f22yb332dae4c347f25d@mail.gmail.com> <1278702.4791196197286157.JavaMail.root@office.splatnix.net> <194a2c240711271322t5a827a5bg4317a9ce046c7663@mail.gmail.com> <223f97700711271336p21f5c069lcfea1127130a825e@mail.gmail.com> <194a2c240711271351mf10fd74q2049f0751a5253ef@mail.gmail.com> <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> Message-ID: <194a2c240711280556t28c0c2e4l3f1dd6679ee0d048@mail.gmail.com> On Nov 28, 2007 5:12 AM, Glenn Steen wrote: > ds climbs when comes a lot of mail to hold folder > Yes, exactly. > > > > > > > You do reject mail for unknown recipients, right? If not, start doing > > > that... It will ease things;). > > yes, I do.. > > from main.cf: > > local_recipient_maps = unix:passwd.byname $alias_maps > > smtpd_helo_required = yes > > disable_vrfy_command = yes > > strict_rfc821_envelopes = yes > > invalid_hostname_reject_code = 554 > > multi_recipient_bounce_reject_code = 554 > > non_fqdn_reject_code = 554 > > relay_domains_reject_code = 554 > > unknown_address_reject_code = 554 > > unknown_client_reject_code = 554 > > unknown_hostname_reject_code = 554 > > unknown_local_recipient_reject_code = 554 > > unknown_relay_recipient_reject_code = 554 > > unknown_sender_reject_code = 554 > > unknown_virtual_alias_reject_code = 554 > > unknown_virtual_mailbox_reject_code = 554 > > unverified_recipient_reject_code = 554 > > unverified_sender_reject_code = 554 > > # > > smtpd_sender_restrictions = > > check_sender_access hash:/etc/postfix/listanegra > > reject_non_fqdn_sender > > reject_unknown_sender_domain permit > > > > smtpd_recipient_restrictions = > > permit_auth_destination > > permit_mynetworks > > reject_non_fqdn_recipient > > reject_unknown_recipient_domain > > reject_unauth_destination > > reject_invalid_hostname, > > reject_unknown_recipient_domain, > > reject_unauth_pipelining, > > permit_sasl_authenticated, > > reject_unauth_destination, > > > > > Good. > > > > > > > You might also consider using a few RBLs at the MTA level, so that you > > > reject messages that hit them. If you go for that, choose > > > wisely...:-). > > > And look over what ... "RFC strictness" you can enable... and use to > > > reject junk. > > What is RFC stricness? > Pretty much what you do. Instead of blithely accepting malformed SMTP > conversations, just reject them (being ... strict... about it:-). > I don't see what helo_rextrictions you have... You might want to do > something there too... Like > smtpd_helo_required = yes > smtpd_helo_restrictions = permit_mynetworks, check_helo_access > hash:/etc/postfix/deny_domain_spoof > ... where the hash to deny domain spoofing contains your domains details: > example.net REJECT > 123.456.789.123 REJECT > ... > Some will argue that this violates the RFCs, but it really doesn't... > AFAICS:-). > Doing this on HELO/EHLO will help a bit more. > Well, I did this changes in my main.cf: smtpd_helo_required = yes disable_vrfy_command = yes strict_rfc821_envelopes = yes invalid_hostname_reject_code = 554 multi_recipient_bounce_reject_code = 554 non_fqdn_reject_code = 554 relay_domains_reject_code = 554 unknown_address_reject_code = 554 unknown_client_reject_code = 554 unknown_hostname_reject_code = 554 unknown_local_recipient_reject_code = 554 unknown_relay_recipient_reject_code = 554 unknown_sender_reject_code = 554 unknown_virtual_alias_reject_code = 554 unknown_virtual_mailbox_reject_code = 554 unverified_recipient_reject_code = 554 unverified_sender_reject_code = 554 smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/listanegra reject_non_fqdn_sender reject_unknown_sender_domain permit smtpd_recipient_restrictions = permit_auth_destination permit_mynetworks reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_destination reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_invalid_hostname, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_sasl_authenticated, reject_unauth_destination, reject_rbl_client zen.spamhaus.org reject_rbl_client list.dsbl.org reject_rhsbl_sender dsn.rfc-ignorant.org permit smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce, permit smtpd_error_sleep_time = 60 smtpd_soft_error_limit = 60 smtpd_hard_error_limit = 10 And I see now postfix is rejecting a LOT of mail before it gets mailscanner.. the % of spam have decresed too...I have activated again all pluggins in MailScanner/Spamassassin and began to monitor if there are some missing emails... I'll let you know later about the results and posibly send the list all my config files to help other people with similar problems..:-) If you think I've missed something in main.cf to stop spam, please let me know! :-) thanks in advance Israel > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/41b5d48d/attachment.html From igalvarez at gmail.com Wed Nov 28 14:00:36 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Wed Nov 28 14:00:39 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <156656.18130.qm@web33301.mail.mud.yahoo.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> Message-ID: <194a2c240711280600u573d5d45q437097249612b1f7@mail.gmail.com> On Nov 28, 2007 5:32 AM, Michael Mansour wrote: > Hi, > > I'm currently trouble-shooting a problem which does the same thing and > have tracked it down to the memory running out ie. mostly swap being used > while CPU's aren't (load average goes to 12 and 13 because of the heavy swap > usage). > > I'm organising more memory for the server at the moment, which should > resolve the issue. > > Regards, > > Michael. > Michael, the server had high load average (11, 12 or even 13) only when processing a lot of mail from the HOLD folder.. once he processed all the mail from the HOLD folder its behavior was normal...I have a Compaq Proliant ML370, 2 GB RAM, 2 Xeon CPUs and a lot of HDDs processing almost 50000 daily.. regards Israel > > ------------------------------ > Make the switch to the world's best email. Get the new Yahoo!7 Mail now. > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/6ef78145/attachment.html From campbell at cnpapers.com Wed Nov 28 14:02:11 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Wed Nov 28 14:02:16 2007 Subject: Text shows something different than what is there. In-Reply-To: References: <474C95FC.50704@cnpapers.com> Message-ID: <474D74E3.6040808@cnpapers.com> Scott Silva wrote: > on 11/27/2007 2:11 PM Steve Campbell spake the following: >> Sorry if this has been discussed before. I may have not realized what >> was being discussed until I saw it in front of me. >> >> We are getting tons of email with different sexual content. When >> viewing the source of the email through Thunderbird, a few of the >> lines show up like the following: >> >> IF YOU WANT TO F wol UC sty K SOMEBODY, >> F oy U zb CK YOURSELF & SAVE YOUR MONEY! >> >> The email when viewed normally through Thunderbird (and probably most >> other clients) is different. If you remove all of the lower case >> letters and the spaces around them, you'll see what the viewed text >> is displaying. >> >> Can anyone explain what is going on there and a pretty good way to >> block this. The F-word is pretty blatant in these. >> >> Thanks, >> >> Steve Campbell >> >> > If you can post a raw sample somewhere, we could try it and see what > existing stuff might hit it. > Scott, Thanks for the reply. Upon further review of the messages on other machines using other browsers, I find some HTML or something using bracketed "span" tags in between the letters. I'm not sure the best way to stop it for now, but at least I have a clue as to what's going on. Steve From micoots at yahoo.com Wed Nov 28 14:02:41 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 14:02:44 2007 Subject: MailScanner --lint doesn't check Eicar virus Message-ID: <563140.97791.qm@web33301.mail.mud.yahoo.com> Hi, I used to be able to run: # MailScanner --lint Checking version numbers... Version number in MailScanner.conf (4.65.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temp dir = /tmp/SpamAssassin-Temp SpamAssassin reported no errors. MailScanner.conf says "Virus Scanners = clamavmodule" Found these virus scanners installed: clamavmodule =========================================================================== =========================================================================== If any of your virus scanners (clamavmodule) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. and see MailScanner test the Eicar virus between the "===" rows, but most recently I see this doesn't work anymore. Is there something I can check to see why? When I run the wrapper: /usr/lib/MailScanner/clamav-wrapper /usr /tmp it finds clamav and works scans /tmp fine. Thanks. Michael. --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/8b9f5bc7/attachment.html From prandal at herefordshire.gov.uk Wed Nov 28 14:09:36 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Wed Nov 28 14:09:42 2007 Subject: MailScanner --lint doesn't check Eicar virus In-Reply-To: <563140.97791.qm@web33301.mail.mud.yahoo.com> References: <563140.97791.qm@web33301.mail.mud.yahoo.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA7D8@HC-MBX02.herefordshire.gov.uk> Well spotted! Confirming that it is broken in 4.65.3 # MailScanner --lint Checking version numbers... Version number in MailScanner.conf (4.65.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin reported no errors. MailScanner.conf says "Virus Scanners = clamavmodule mcafee" Found these virus scanners installed: clamavmodule, mcafee ======================================================================== === ======================================================================== === If any of your virus scanners (clamavmodule,mcafee) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: 28 November 2007 14:03 To: MailScanner discussion Subject: MailScanner --lint doesn't check Eicar virus Hi, I used to be able to run: # MailScanner --lint Checking version numbers... Version number in MailScanner.conf (4.65.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temp dir = /tmp/SpamAssassin-Temp SpamAssassin reported no errors. MailScanner.conf says "Virus Scanners = clamavmodule" Found these virus scanners installed: clamavmodule ======================================================================== === ======================================================================== === If any of your virus scanners (clamavmodule) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. and see MailScanner test the Eicar virus between the "===" rows, but most recently I see this doesn't work anymore. Is there something I can check to see why? When I run the wrapper: /usr/lib/MailScanner/clamav-wrapper /usr /tmp it finds clamav and works scans /tmp fine. Thanks. Michael. ________________________________ Make the switch to the world's best email. Get the new Yahoo!7 Mail now . -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/158bb9c0/attachment.html From Q.G.Campbell at newcastle.ac.uk Wed Nov 28 14:52:51 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Wed Nov 28 14:54:34 2007 Subject: MailScanner --lint doesn't check Eicar virus - OK here! In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA7D8@HC-MBX02.herefordshire.gov.uk> References: <563140.97791.qm@web33301.mail.mud.yahoo.com> <7EF0EE5CB3B263488C8C18823239BEBA023EA7D8@HC-MBX02.herefordshire.gov.uk> Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C59A80A@largo.campus.ncl.ac.uk> Phil It appears to work here. I get a different result to you: [root@cheviot4 MailScanner]# MailScanner --lint Checking version numbers... Version number in MailScanner.conf (4.65.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin reported no errors. MailScanner.conf says "Virus Scanners = clamavmodule mcafee" Found these virus scanners installed: clamavmodule, mcafee =========================================================================== =========================================================================== Virus Scanner test reports: ClamAVModule said "eicar.com was infected: Eicar-Test-Signature" McAfee said "/1/eicar.com Found: EICAR test file NOT a virus." If any of your virus scanners (clamavmodule,mcafee) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. [root@cheviot4 MailScanner]# Quentin --- PHONE: +44 191 222 8209??? Information Systems and Services (ISS), ?????????????????????????? Newcastle University, ?????????????????????????? Newcastle upon Tyne, FAX:?? +44 191 222 8765??? United Kingdom, NE1 7RU. ------------------------------------------------------------------------ >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Randal, Phil >Sent: 28 November 2007 14:10 >To: MailScanner discussion >Subject: RE: MailScanner --lint doesn't check Eicar virus > >Well spotted! > >Confirming that it is broken in 4.65.3 > ># MailScanner --lint >Checking version numbers... >Version number in MailScanner.conf (4.65.3) is correct. > >Your envelope_sender_header in spam.assassin.prefs.conf is correct. > >Checking for SpamAssassin errors (if you use it)... >SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin- >Temp >SpamAssassin reported no errors. >MailScanner.conf says "Virus Scanners = clamavmodule mcafee" >Found these virus scanners installed: clamavmodule, mcafee >======================================================================== >=== >======================================================================== >=== > >If any of your virus scanners (clamavmodule,mcafee) >are not listed there, you should check that they are installed correctly >and that MailScanner is finding them correctly via its >virus.scanners.conf. > >Cheers, > >Phil > >-- >Phil Randal >Network Engineer >Herefordshire Council >Hereford, UK > > > > > >________________________________ > > From: mailscanner-bounces@lists.mailscanner.info >[mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael >Mansour > Sent: 28 November 2007 14:03 > To: MailScanner discussion > Subject: MailScanner --lint doesn't check Eicar virus > > > Hi, > > I used to be able to run: > > # MailScanner --lint > Checking version numbers... > Version number in MailScanner.conf (4.65.3) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is >correct. > > Checking for SpamAssassin errors (if you use it)... > SpamAssassin temp dir = /tmp/SpamAssassin-Temp > SpamAssassin reported no errors. > MailScanner.conf says "Virus Scanners = clamavmodule" > Found these virus scanners installed: clamavmodule > ================================================================== >========= > ================================================================== >========= > > If any of your virus scanners (clamavmodule) > are not listed there, you should check that they are installed >correctly > and that MailScanner is finding them correctly via its >virus.scanners.conf. > > and see MailScanner test the Eicar virus between the "===" rows, >but most recently I see this doesn't work anymore. > > Is there something I can check to see why? > > When I run the wrapper: > > /usr/lib/MailScanner/clamav-wrapper /usr /tmp > > it finds clamav and works scans /tmp fine. > > Thanks. > > Michael. > > > > >________________________________ > > Make the switch to the world's best email. Get the new Yahoo!7 >Mail now >u.yahoo.com/worldsbestmail/spankey/> . From micoots at yahoo.com Wed Nov 28 14:59:07 2007 From: micoots at yahoo.com (Michael Mansour) Date: Wed Nov 28 14:59:15 2007 Subject: Can't block wmv files In-Reply-To: <474C4532.5040600@ecs.soton.ac.uk> Message-ID: <212615.73407.qm@web33314.mail.mud.yahoo.com> Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 27, 2007 3:08 PM, Michael Mansour wrote: > >> %etc-dir%/example.com.filename.rules: >> >> and %etc-dir%/example.com.filetype.rules: >> > > Those filenames don't match what you have in your rulesets, note the > missing .conf at the end: > > >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filename.rules.conf >> FromOrTo: default /etc/MailScanner/filename.rules.conf >> >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filetype.rules.conf >> FromOrTo: default /etc/MailScanner/filetype.rules.conf >> > > Also, you do have tabs as whitespace in both files and no strange > end-of-lines, common if you edit the files in Windows? > The only places you need tabs instead of spaces are in the example.com.filetype/name.rules.conf and filetype/name.rules.conf files. You can use any whitespace in *.rules files. I'm using: mailscanner-4.65.3-1.noarch I've spent the last 5 hours trouble-shooting this problem (in addition to the 2 hours I spent last night) and I believe MS is broken with this filename/filetype blocking now. What I did was globally set the /etc/MailScanner/filename.rules.conf and /etc/MailScanner/filetype.conf to deny (I also did deny+delete) all movie files and tested for the swf extension too. Movie files were still let through even when this was a global setting. I then tried simply attaching something I knew 100% would fail, a web link (.lnk file), and it passed through fine. What sort of thing / setting in MS would allow this to happen? ie. allowing anything through? Thanks. Michael. --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/11367f31/attachment.html From J.Ede at birchenallhowden.co.uk Wed Nov 28 15:07:46 2007 From: J.Ede at birchenallhowden.co.uk (Jason Ede) Date: Wed Nov 28 15:10:06 2007 Subject: Can't block wmv files In-Reply-To: <212615.73407.qm@web33314.mail.mud.yahoo.com> References: <474C4532.5040600@ecs.soton.ac.uk>, <212615.73407.qm@web33314.mail.mud.yahoo.com> Message-ID: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE076@server02.bhl.local> Umm... Is the file being sent by Outlook/exchange? If so then it could be in a winmail.dat attachment rather than as a .wmv file. If so its probably worth using the tnef expander to expand it out although I'm not sure if thats done before or after the filetype checking... Jason ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour [micoots@yahoo.com] Sent: 28 November 2007 14:59 To: MailScanner discussion Subject: Re: Can't block wmv files Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 27, 2007 3:08 PM, Michael Mansour wrote: > >> %etc-dir%/example.com.filename.rules: >> >> and %etc-dir%/example.com.filetype.rules: >> > > Those filenames don't match what you have in your rulesets, note the > missing .conf at the end: > > >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filename.rules.conf >> FromOrTo: default /etc/MailScanner/filename.rules.conf >> >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filetype.rules.conf >> FromOrTo: default /etc/MailScanner/filetype.rules.conf >> > > Also, you do have tabs as whitespace in both files and no strange > end-of-lines, common if you edit the files in Windows? > The only places you need tabs instead of spaces are in the example.com.filetype/name.rules.conf and filetype/name.rules.conf files. You can use any whitespace in *.rules files. I'm using: mailscanner-4.65.3-1.noarch I've spent the last 5 hours trouble-shooting this problem (in addition to the 2 hours I spent last night) and I believe MS is broken with this filename/filetype blocking now. What I did was globally set the /etc/MailScanner/filename.rules.conf and /etc/MailScanner/filetype.conf to deny (I also did deny+delete) all movie files and tested for the swf extension too. Movie files were still let through even when this was a global setting. I then tried simply attaching something I knew 100% would fail, a web link (.lnk file), and it passed through fine. What sort of thing / setting in MS would allow this to happen? ie. allowing anything through? Thanks. Michael. ________________________________ Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/f9ed22f8/attachment-0001.html From steve.freegard at fsl.com Wed Nov 28 15:33:33 2007 From: steve.freegard at fsl.com (Steve Freegard) Date: Wed Nov 28 15:32:24 2007 Subject: Greylisting Addon In-Reply-To: <625385e30711280511w7a55d35n1bd16f73fb630055@mail.gmail.com> References: <7EF0EE5CB3B263488C8C18823239BEBA023EA758@HC-MBX02.herefordshire.gov.uk> <660518.44288.qm@web33315.mail.mud.yahoo.com> <625385e30711280511w7a55d35n1bd16f73fb630055@mail.gmail.com> Message-ID: <474D8A4D.9000404@fsl.com> shuttlebox wrote: > On Nov 28, 2007 1:13 PM, Michael Mansour wrote: >> Yes it is a memory hog, but 400Mb of virtual memory isn't that much >> considering I have over 72,000 auto-managed records per server. > > It's also easy to tune the memory consumption by adjusting how long it > will keep grey/whitelisted entries in the database. > >> I have tried others and found they may work well for one server, but not in >> a distributed environment which requires sync between MX servers. > > The sync is very important and I haven't found an alternative that is > capable of that. > BarricadeMX's greylisting mechanism has a far better system for cache synchronization between peers than milter-greylist, it uses multicast UDP for local peers and unicast UDP for remote peers and doesn't need any nasty MySQL replication etc. (it uses a local SQLite database). It also uses less memory as it doesn't hold all the records in memory... I am biased as I helped develop it, but the greylisting algorithm is also better than any of the other greylisting implementations as it requires far less whitelisting (only servers that *never* retry need to be bypassed - shared spools are not a problem) and it doesn't penalize different sender/recipient pairs if the server has already proven that it correctly implements a retry queue (which is the point of greylisting after all). The version that we are about to release also contains a secondary greylist algorithm which is 100% accurate against some of the more persistent botnet spam that creeps through traditional greylisting. Oh - and did I mention that it works with any MTA (as it's an SMTP proxy) and that MailScanner automatically detects that it is in use and modifies it's behavior to accommodate it? ;-) Cheers, Steve. -- Steve Freegard Development Director Fort Systems Ltd. From uxbod at splatnix.net Wed Nov 28 15:48:51 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 28 15:49:03 2007 Subject: Greylisting Addon In-Reply-To: <474D8A4D.9000404@fsl.com> Message-ID: <28191528.6221196264931754.JavaMail.root@office.splatnix.net> Come on Steve not another plug ;) Sounds good though :) Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Steve Freegard" To: "MailScanner discussion" Sent: Wednesday, November 28, 2007 3:33:33 PM (GMT) Europe/London Subject: Re: Greylisting Addon shuttlebox wrote: > On Nov 28, 2007 1:13 PM, Michael Mansour wrote: >> Yes it is a memory hog, but 400Mb of virtual memory isn't that much >> considering I have over 72,000 auto-managed records per server. > > It's also easy to tune the memory consumption by adjusting how long it > will keep grey/whitelisted entries in the database. > >> I have tried others and found they may work well for one server, but not in >> a distributed environment which requires sync between MX servers. > > The sync is very important and I haven't found an alternative that is > capable of that. > BarricadeMX's greylisting mechanism has a far better system for cache synchronization between peers than milter-greylist, it uses multicast UDP for local peers and unicast UDP for remote peers and doesn't need any nasty MySQL replication etc. (it uses a local SQLite database). It also uses less memory as it doesn't hold all the records in memory... I am biased as I helped develop it, but the greylisting algorithm is also better than any of the other greylisting implementations as it requires far less whitelisting (only servers that *never* retry need to be bypassed - shared spools are not a problem) and it doesn't penalize different sender/recipient pairs if the server has already proven that it correctly implements a retry queue (which is the point of greylisting after all). The version that we are about to release also contains a secondary greylist algorithm which is 100% accurate against some of the more persistent botnet spam that creeps through traditional greylisting. Oh - and did I mention that it works with any MTA (as it's an SMTP proxy) and that MailScanner automatically detects that it is in use and modifies it's behavior to accommodate it? ;-) Cheers, Steve. -- Steve Freegard Development Director Fort Systems Ltd. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From Kevin_Miller at ci.juneau.ak.us Wed Nov 28 16:11:07 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Wed Nov 28 16:10:23 2007 Subject: Can't block wmv files In-Reply-To: <954630.25319.qm@web33314.mail.mud.yahoo.com> References: <625385e30711270620y9d4352dg3575133f45c2d384@mail.gmail.com> <954630.25319.qm@web33314.mail.mud.yahoo.com> Message-ID: >%etc-dir%/example.com.filename.rules.conf >%etc-dir%/example.com.filetype.rules.conf Try %rules-dir% instead of %etc-dir%. (Also please turn off html formatting.) HTH... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From donald.dawson at bakerbotts.com Wed Nov 28 16:13:24 2007 From: donald.dawson at bakerbotts.com (donald.dawson@bakerbotts.com) Date: Wed Nov 28 16:13:34 2007 Subject: Recipient verification to Exchange milter In-Reply-To: <695135.33595.qm@web33311.mail.mud.yahoo.com> Message-ID: Are you referring to spam-backscatter @ http://www.elandsys.com/scam/scam-backscatter/ ? -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: Tuesday, November 27, 2007 11:51 PM To: MailScanner discussion Subject: Re: Recipient verification to Exchange milter Hi, Matt Kettler wrote: donald.dawson@bakerbotts.com wrote: > Please let me know you experience with an Exchange email recipient > verification tool (e.g. milter to sendmail). > > Below are some versions I know of. Any success, problems or input > regarding this list, or others you might know of? > > We are running four inbound MX servers with sendmail version 8.14.1, MS > version 4.62.9 and SA version 3.002002. > > Pay Version: > > _http://spamfree.ru/spamfree/_ - $299 enterprise > > Free versions: > > _http://www.five-ten-sg.com/dnsbl/rn01re01.html_ > > _http://spamlinks.net/filter-server-addon.htm#sendmail_ > > _http://smfs.sourceforge.net/smf-sav.html_ - free version of > spamfree.ru/spamfree > > _http://www.milter.info/sendmail/milter-ahead/_ - previous experience > with milter-null was frustrating since it took so long to update LibSnert. Note: milter-ahead isn't free, it's one of 4 of the snertsoft milters that costs money. a site license is 90 euros: http://www.snertsoft.com/download.php You might also wish to read this thread about sms-sav vs milter-ahead: http://search.gmane.org/?query=OT%3A+performance+smf-sav+vs+milter-ahead &group=gmane.mail.virus.mailscanner I flicked both of these options and went for scam-back, which has the added features of doing the recipient checks against _any_ remote smtp server (admin definable). scam-back is also open source and c-coded, so is fast. It works with sendmail as a milter. Regards, Michael. MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ________________________________ Make the switch to the world's best email. Get the new Yahoo!7 Mail now . -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/15eb08e5/attachment.html From jflowers at ezo.net Wed Nov 28 16:19:40 2007 From: jflowers at ezo.net (Jim Flowers) Date: Wed Nov 28 16:19:14 2007 Subject: Redundant Mail System Suggestions Message-ID: <20071128154156.M52819@ezo.net> To my way of thinking redundancy should involve as few choke points as possible, therefore, two different networks. That aside, on my MXGuardian systems I configure two (or more) completely separate (mail gateway) servers identically as mxgf1.domain.tld (IP:xxx.xxx.xxx.xxx) and mxgf2.domain.tld (IP:yyy.yyy.yyy.yyy). I use a service (tqdns.com) with ONE MX record for each domain that is to be spam/virus protected pointing to mxgf.spam.scanner.tld. mxgf.spam.scanner.tld is a monitored/failover A record pointing to IP:xxx.xxx.xxx.xxx. with a TTL of 300 seconds. If the port 25 probe fails twice, the current A record for mxgf.spam.scanner.tld is removed and a new A record pointing to IP:yyy.yyy.yyy.yyy replaces it. When the IP:xxx.xxx.xxx.xxx probe begins to succeed again, the process is reversed. The advantages of this setup are many and in 3 years handling millions of messages I don't think we have ever lost one due to unavailable servers. Just to mention one advantage: we use a MailWatch hack under Tools to start/stop the inbound mta (sendmail) on the lead server manually. When the queue.in gets loaded, as it sometimes does during heavy attacks, we stop the inbound mta to allow the queue to empty out while current messages are routed to the secondary server. A cron script also monitors queue size to do the same thing automatically so operation is pretty much maintenance free. Of course the main advantage is the reduction in spam due to not using multiple MX records. As the secondary server is only visible through the mxgf.spam.scanner.tld A record when it is actually being used the only spam it sees in backup mode is where the spammer uses memorized IP addresses. This runs less than 10% of what it was before using the failover scheme. Bayes performance is pretty much the same as for primary server. Altogether a lot to recommend it. > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Johnny Stork > Sent: 27 November 2007 18:20 > To: mailscanner@lists.mailscanner.info > Subject: Redundant Mail System Suggestions > > I am working with a client seeking redundant mail and dns services so > have been trying to come up with some suggested architectures. -- Jim Flowers -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From shuttlebox at gmail.com Wed Nov 28 16:35:57 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Wed Nov 28 16:36:09 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <20071128154156.M52819@ezo.net> References: <20071128154156.M52819@ezo.net> Message-ID: <625385e30711280835n76cc302cg4f30ab0a7d846579@mail.gmail.com> On Nov 28, 2007 5:19 PM, Jim Flowers wrote: > To my way of thinking redundancy should involve as few choke points as > possible, therefore, two different networks. That aside, on my MXGuardian > systems I configure two (or more) completely separate (mail gateway) servers > identically as mxgf1.domain.tld (IP:xxx.xxx.xxx.xxx) and mxgf2.domain.tld > (IP:yyy.yyy.yyy.yyy). > > I use a service (tqdns.com) with ONE MX record for each domain that is to be > spam/virus protected pointing to mxgf.spam.scanner.tld. mxgf.spam.scanner.tld > is a monitored/failover A record pointing to IP:xxx.xxx.xxx.xxx. with a TTL of > 300 seconds. If the port 25 probe fails twice, the current A record for > mxgf.spam.scanner.tld is removed and a new A record pointing to > IP:yyy.yyy.yyy.yyy replaces it. When the IP:xxx.xxx.xxx.xxx probe begins to > succeed again, the process is reversed. > > The advantages of this setup are many and in 3 years handling millions of > messages I don't think we have ever lost one due to unavailable servers. > > Just to mention one advantage: we use a MailWatch hack under Tools to > start/stop the inbound mta (sendmail) on the lead server manually. When the > queue.in gets loaded, as it sometimes does during heavy attacks, we stop the > inbound mta to allow the queue to empty out while current messages are routed > to the secondary server. A cron script also monitors queue size to do the > same thing automatically so operation is pretty much maintenance free. > > Of course the main advantage is the reduction in spam due to not using > multiple MX records. As the secondary server is only visible through the > mxgf.spam.scanner.tld A record when it is actually being used the only spam it > sees in backup mode is where the spammer uses memorized IP addresses. This > runs less than 10% of what it was before using the failover scheme. Bayes > performance is pretty much the same as for primary server. > > Altogether a lot to recommend it. I don't see anything in your setup that isn't available by two lines in DNS: domain.tld. 86400 IN MX 10 mxgf1.domain.tld. domain.tld. 86400 IN MX 10 mxgf2.domain.tld. I don't know what you mean by saying that you get less spam by having only one MX record. How would that make any difference? The only way I would complicate my setup is if I can add something worthwhile that I don't already have. I don't want extra servers or other HW, SQL databases and/or web servers if I can avoid it. -- /peter From ssilva at sgvwater.com Wed Nov 28 17:57:18 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 28 18:06:30 2007 Subject: Text shows something different than what is there. In-Reply-To: <474D74E3.6040808@cnpapers.com> References: <474C95FC.50704@cnpapers.com> <474D74E3.6040808@cnpapers.com> Message-ID: on 11/28/2007 6:02 AM Steve Campbell spake the following: > > > Scott Silva wrote: >> on 11/27/2007 2:11 PM Steve Campbell spake the following: >>> Sorry if this has been discussed before. I may have not realized what >>> was being discussed until I saw it in front of me. >>> >>> We are getting tons of email with different sexual content. When >>> viewing the source of the email through Thunderbird, a few of the >>> lines show up like the following: >>> >>> IF YOU WANT TO F wol UC sty K SOMEBODY, >>> F oy U zb CK YOURSELF & SAVE YOUR MONEY! >>> >>> The email when viewed normally through Thunderbird (and probably most >>> other clients) is different. If you remove all of the lower case >>> letters and the spaces around them, you'll see what the viewed text >>> is displaying. >>> >>> Can anyone explain what is going on there and a pretty good way to >>> block this. The F-word is pretty blatant in these. >>> >>> Thanks, >>> >>> Steve Campbell >>> >>> >> If you can post a raw sample somewhere, we could try it and see what >> existing stuff might hit it. >> > Scott, > > Thanks for the reply. > > Upon further review of the messages on other machines using other > browsers, I find some HTML or something using bracketed "span" tags in > between the letters. > > I'm not sure the best way to stop it for now, but at least I have a clue > as to what's going on. > > Steve > Are you running any of the sare rules? Especially the obfu and chickenpox ones? -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From uxbod at splatnix.net Wed Nov 28 18:13:36 2007 From: uxbod at splatnix.net (UxBoD) Date: Wed Nov 28 18:13:48 2007 Subject: OT: SA Score Message-ID: <160620.6511196273616576.JavaMail.root@office.splatnix.net> Just something of interest for myself but what are peoples spam and hispam scores set to ? The company I am at I have set it as 12 and we pretty much catch 98% of SPAM using multiple RBLs, SA rules and SA plugins. Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From campbell at cnpapers.com Wed Nov 28 18:23:18 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Wed Nov 28 18:23:36 2007 Subject: Text shows something different than what is there. In-Reply-To: References: <474C95FC.50704@cnpapers.com> <474D74E3.6040808@cnpapers.com> Message-ID: <474DB216.7000804@cnpapers.com> Scott Silva wrote: > on 11/28/2007 6:02 AM Steve Campbell spake the following: >> >> >> Scott Silva wrote: >>> on 11/27/2007 2:11 PM Steve Campbell spake the following: >>>> Sorry if this has been discussed before. I may have not realized >>>> what was being discussed until I saw it in front of me. >>>> >>>> We are getting tons of email with different sexual content. When >>>> viewing the source of the email through Thunderbird, a few of the >>>> lines show up like the following: >>>> >>>> IF YOU WANT TO F wol UC sty K SOMEBODY, >>>> F oy U zb CK YOURSELF & SAVE YOUR MONEY! >>>> >>>> The email when viewed normally through Thunderbird (and probably >>>> most other clients) is different. If you remove all of the lower >>>> case letters and the spaces around them, you'll see what the viewed >>>> text is displaying. >>>> >>>> Can anyone explain what is going on there and a pretty good way to >>>> block this. The F-word is pretty blatant in these. >>>> >>>> Thanks, >>>> >>>> Steve Campbell >>>> >>>> >>> If you can post a raw sample somewhere, we could try it and see what >>> existing stuff might hit it. >>> >> Scott, >> >> Thanks for the reply. >> >> Upon further review of the messages on other machines using other >> browsers, I find some HTML or something using bracketed "span" tags >> in between the letters. >> >> I'm not sure the best way to stop it for now, but at least I have a >> clue as to what's going on. >> >> Steve >> > Are you running any of the sare rules? Especially the obfu and > chickenpox ones? I run just a very few, but I will look into the ones you mentioned. Thanks, Scott Steve > > From xmasterx at gmail.com Wed Nov 28 18:27:14 2007 From: xmasterx at gmail.com (Pedro) Date: Wed Nov 28 18:27:29 2007 Subject: OT: SA Score In-Reply-To: <160620.6511196273616576.JavaMail.root@office.splatnix.net> References: <160620.6511196273616576.JavaMail.root@office.splatnix.net> Message-ID: In my I have spam set to 5 and highspam at 15. And about 95% of the spam is right away trigged in highspam and goes to quarantine. On Nov 28, 2007 6:13 PM, UxBoD wrote: > Just something of interest for myself but what are peoples spam and hispam > scores set to ? The company I am at I have set it as 12 and we pretty much > catch 98% of SPAM using multiple RBLs, SA rules and SA plugins. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Pedro [ xmasterx@gmail.com ] -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/b6d2ba2f/attachment.html From ssilva at sgvwater.com Wed Nov 28 18:43:07 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 28 18:45:06 2007 Subject: Text shows something different than what is there. In-Reply-To: <474DB216.7000804@cnpapers.com> References: <474C95FC.50704@cnpapers.com> <474D74E3.6040808@cnpapers.com> <474DB216.7000804@cnpapers.com> Message-ID: on 11/28/2007 10:23 AM Steve Campbell spake the following: > > > Scott Silva wrote: >> on 11/28/2007 6:02 AM Steve Campbell spake the following: >>> >>> >>> Scott Silva wrote: >>>> on 11/27/2007 2:11 PM Steve Campbell spake the following: >>>>> Sorry if this has been discussed before. I may have not realized >>>>> what was being discussed until I saw it in front of me. >>>>> >>>>> We are getting tons of email with different sexual content. When >>>>> viewing the source of the email through Thunderbird, a few of the >>>>> lines show up like the following: >>>>> >>>>> IF YOU WANT TO F wol UC sty K SOMEBODY, >>>>> F oy U zb CK YOURSELF & SAVE YOUR MONEY! >>>>> >>>>> The email when viewed normally through Thunderbird (and probably >>>>> most other clients) is different. If you remove all of the lower >>>>> case letters and the spaces around them, you'll see what the viewed >>>>> text is displaying. >>>>> >>>>> Can anyone explain what is going on there and a pretty good way to >>>>> block this. The F-word is pretty blatant in these. >>>>> >>>>> Thanks, >>>>> >>>>> Steve Campbell >>>>> >>>>> >>>> If you can post a raw sample somewhere, we could try it and see what >>>> existing stuff might hit it. >>>> >>> Scott, >>> >>> Thanks for the reply. >>> >>> Upon further review of the messages on other machines using other >>> browsers, I find some HTML or something using bracketed "span" tags >>> in between the letters. >>> >>> I'm not sure the best way to stop it for now, but at least I have a >>> clue as to what's going on. >>> >>> Steve >>> >> Are you running any of the sare rules? Especially the obfu and >> chickenpox ones? > > I run just a very few, but I will look into the ones you mentioned. > > Thanks, Scott > > Steve >> >> > That is why I suggested putting up a raw copy to test. You could get some ideas on what works. I actually get a lot of hits with sare_obfu and chickenpox. YMMV -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From campbell at cnpapers.com Wed Nov 28 19:05:13 2007 From: campbell at cnpapers.com (Steve Campbell) Date: Wed Nov 28 19:05:18 2007 Subject: Text shows something different than what is there. In-Reply-To: References: <474C95FC.50704@cnpapers.com> <474D74E3.6040808@cnpapers.com> <474DB216.7000804@cnpapers.com> Message-ID: <474DBBE9.7000309@cnpapers.com> Scott Silva wrote: > on 11/28/2007 10:23 AM Steve Campbell spake the following: >> >> >> Scott Silva wrote: >>> on 11/28/2007 6:02 AM Steve Campbell spake the following: >>>> >>>> >>>> Scott Silva wrote: >>>>> on 11/27/2007 2:11 PM Steve Campbell spake the following: >>>>>> Sorry if this has been discussed before. I may have not realized >>>>>> what was being discussed until I saw it in front of me. >>>>>> >>>>>> We are getting tons of email with different sexual content. When >>>>>> viewing the source of the email through Thunderbird, a few of the >>>>>> lines show up like the following: >>>>>> >>>>>> IF YOU WANT TO F wol UC sty K SOMEBODY, >>>>>> F oy U zb CK YOURSELF & SAVE YOUR MONEY! >>>>>> >>>>>> The email when viewed normally through Thunderbird (and probably >>>>>> most other clients) is different. If you remove all of the lower >>>>>> case letters and the spaces around them, you'll see what the >>>>>> viewed text is displaying. >>>>>> >>>>>> Can anyone explain what is going on there and a pretty good way >>>>>> to block this. The F-word is pretty blatant in these. >>>>>> >>>>>> Thanks, >>>>>> >>>>>> Steve Campbell >>>>>> >>>>>> >>>>> If you can post a raw sample somewhere, we could try it and see >>>>> what existing stuff might hit it. >>>>> >>>> Scott, >>>> >>>> Thanks for the reply. >>>> >>>> Upon further review of the messages on other machines using other >>>> browsers, I find some HTML or something using bracketed "span" tags >>>> in between the letters. >>>> >>>> I'm not sure the best way to stop it for now, but at least I have a >>>> clue as to what's going on. >>>> >>>> Steve >>>> >>> Are you running any of the sare rules? Especially the obfu and >>> chickenpox ones? >> >> I run just a very few, but I will look into the ones you mentioned. >> >> Thanks, Scott >> >> Steve >>> >>> >> > That is why I suggested putting up a raw copy to test. You could get > some ideas on what works. > I actually get a lot of hits with sare_obfu and chickenpox. YMMV > I put the obfu0 and chickenpox sets on and the scores shot through the roof. Looks like these will fit the bill for a while. Thanks for the pointers to these sets. I should probably browse the SARE sets once in a while, since the adult and stock sets I run do quite a good job. Steve From jcasale at ActiveNetwerx.com Wed Nov 28 17:53:39 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Wed Nov 28 19:17:24 2007 Subject: Greylisting Addon In-Reply-To: <577358.9553.qm@web33311.mail.mud.yahoo.com> References: <625385e30711280511w7a55d35n1bd16f73fb630055@mail.gmail.com> <577358.9553.qm@web33311.mail.mud.yahoo.com> Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218278@an-ex.ActiveNetwerx.int> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: Wednesday, November 28, 2007 6:32 AM To: MailScanner discussion Subject: Re: Greylisting Addon Hi Peter, shuttlebox wrote: On Nov 28, 2007 1:13 PM, Michael Mansour wrote: > Yes it is a memory hog, but 400Mb of virtual memory isn't that much > considering I have over 72,000 auto-managed records per server. It's also easy to tune the memory consumption by adjusting how long it will keep grey/whitelisted entries in the database. > I have tried others and found they may work well for one server, but not in > a distributed environment which requires sync between MX servers. The sync is very important and I haven't found an alternative that is capable of that. Yes, sync is critical. I have also used and tested the greylist server that comes with DCC by Vernon. I use DCC anyway so though I might as well turn on the greylist feature and not have to worry about yet another third party app. DCC's greylist also has a "peer" feature which does what milter-greylist's sync does (not exactly the same way or as instantaneous as milter-greylist, but still works), so provides the necessary sync between MX peers. DCC's greylist work fine for *non-MX* servers, however for inbound MX servers which don't have local recipients (but pass the message onto an internal mail server after releasing the message from the embargo), DCC greylist tries to authenticate the recipients with the MX server itself, which of course fails with a "user unknown" and bounces the message to the sender. DCC greylist doesn't bother reading sendmail's mailertable to determine where the destination recipient is or to even consider that it's just an inbound MX server and should just greylist (embargo in DCC terminology) the email and then send it on to the real mail server with the inboxes. I explained and reported this problem to Vernon but he didn't accept it as a problem, instead tried to convince me that I didn't need MX servers and I should just run a beefy mail server. A few emails bounced between us before I gave up trying to explain to him why his greylist implementation doesn't work for inbound MX servers. He's a cluely guy and knows his stuff, but I just couldn't get through to him, he simply didn't accept the setup I had as a valid setup. Go figure. Michael. -- /peter -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! Michael, I also have DCC installed but my system does not host mailboxes, it merely passes mail on to my exchange servers. Is there no safe configuration then with DCC alone so I don't have to install anything else? Thanks! jlc -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/221443c7/attachment.html From glenn.steen at gmail.com Wed Nov 28 19:28:54 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Wed Nov 28 19:28:57 2007 Subject: OT: SA Score In-Reply-To: References: <160620.6511196273616576.JavaMail.root@office.splatnix.net> Message-ID: <223f97700711281128s2d306b2am4fda5e452f0ff576@mail.gmail.com> On 28/11/2007, Pedro wrote: > In my I have spam set to 5 and highspam at 15. > > And about 95% of the spam is right away trigged in highspam and goes to > quarantine. > > > On Nov 28, 2007 6:13 PM, UxBoD < uxbod@splatnix.net> wrote: > > Just something of interest for myself but what are peoples spam and hispam > scores set to ? The company I am at I have set it as 12 and we pretty much > catch 98% of SPAM using multiple RBLs, SA rules and SA plugins. > > > > Regards, > > 6 and 10, catches slightly more than 99%, as far as I can read from the stats (more like 99.9, but that .... might change fast;-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From joost at waversveld.nl Wed Nov 28 19:43:53 2007 From: joost at waversveld.nl (Joost Waversveld) Date: Wed Nov 28 19:43:58 2007 Subject: OT: SA Score In-Reply-To: <223f97700711281128s2d306b2am4fda5e452f0ff576@mail.gmail.com> References: <160620.6511196273616576.JavaMail.root@office.splatnix.net> <223f97700711281128s2d306b2am4fda5e452f0ff576@mail.gmail.com> Message-ID: <474DC4F9.80807@waversveld.nl> Set the scores to 5 and 10. Most of all the email are high scoring SPAM, around the 93% of the total SPAM for today. This after using rbl at MTA. Glenn Steen wrote: > On 28/11/2007, Pedro wrote: > >> In my I have spam set to 5 and highspam at 15. >> >> And about 95% of the spam is right away trigged in highspam and goes to >> quarantine. >> >> >> On Nov 28, 2007 6:13 PM, UxBoD < uxbod@splatnix.net> wrote: >> >>> Just something of interest for myself but what are peoples spam and hispam >>> >> scores set to ? The company I am at I have set it as 12 and we pretty much >> catch 98% of SPAM using multiple RBLs, SA rules and SA plugins. >> >>> Regards, >>> >>> > 6 and 10, catches slightly more than 99%, as far as I can read from > the stats (more like 99.9, but that .... might change fast;-). > > Cheers > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/03c4a9ff/attachment.html From ssilva at sgvwater.com Wed Nov 28 20:00:16 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 28 20:01:36 2007 Subject: Server stats script Message-ID: Does anybody have a decent mail server stats script (sendmail) that shows a daily output of things like; rbl rejections by list greetpause and other sendmail related anti-spam data like connection throttling total connection attempts other useful data that I will think of as soon as I hit send ;-P -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From jcasale at ActiveNetwerx.com Wed Nov 28 20:42:22 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Wed Nov 28 20:42:44 2007 Subject: Install Question In-Reply-To: <20071128191755.GH3386@localhost.localdomain> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C656@an-ex.ActiveNetwerx.int> <20071128191755.GH3386@localhost.localdomain> Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218279@an-ex.ActiveNetwerx.int> -----Original Message----- From: Andrew Sackville-West [mailto:andrew@farwestbilliards.com] Sent: Wednesday, November 28, 2007 12:18 PM To: debian-user@lists.debian.org Subject: Re: Install Question On Tue, Nov 27, 2007 at 02:33:18PM -0700, Joseph L. Casale wrote: > If a controller manufacturer makes drivers for your OS, but the OS doesn't have them natively, how does one install Debian on to this controller as the boot device? to answer this very generic question... there are many ways but they all eventually devolve down to getting a ((kernel with the drivers compiled in *or* a kernel/initrd image with the appropriate modules) *and* a boot loader that can read the right disk). Invariably this will involve some bit of hackery either in the installer itself, or in installing to some other disk and then migrating over. hth in some way. A Andrew, That was what I was kind of after. So it's not straight forward then :) I assume a kernel w/ drivers compiled in is going to be faster than one without and having a module loaded? How does one choose a new kernel (say one I compiled in a vm on esx for the sake of ease with my new driver) during a fresh install? Thanks! jlc From ugob at lubik.ca Wed Nov 28 20:43:35 2007 From: ugob at lubik.ca (Ugo Bellavance) Date: Wed Nov 28 20:50:54 2007 Subject: Server stats script In-Reply-To: References: Message-ID: Scott Silva wrote: > Does anybody have a decent mail server stats script (sendmail) that > shows a daily output of things like; > rbl rejections by list > > greetpause and other sendmail related anti-spam data like connection > throttling > > total connection attempts > > other useful data that I will think of as soon as I hit send ;-P > > Have you tried the latest version of logwatch? Ugo From jcasale at ActiveNetwerx.com Wed Nov 28 21:00:55 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Wed Nov 28 21:01:04 2007 Subject: Install Question In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218279@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823D5A5C656@an-ex.ActiveNetwerx.int> <20071128191755.GH3386@localhost.localdomain> <1C8CF1EA1A5B5940B81B0710B2A4C93823DE218279@an-ex.ActiveNetwerx.int> Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21827A@an-ex.ActiveNetwerx.int> Sorry everyone :) Fat fingers. jlc -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Joseph L. Casale Sent: Wednesday, November 28, 2007 1:42 PM To: MailScanner discussion Subject: RE: Install Question -----Original Message----- From: Andrew Sackville-West [mailto:andrew@farwestbilliards.com] Sent: Wednesday, November 28, 2007 12:18 PM To: debian-user@lists.debian.org Subject: Re: Install Question On Tue, Nov 27, 2007 at 02:33:18PM -0700, Joseph L. Casale wrote: > If a controller manufacturer makes drivers for your OS, but the OS doesn't have them natively, how does one install Debian on to this controller as the boot device? to answer this very generic question... there are many ways but they all eventually devolve down to getting a ((kernel with the drivers compiled in *or* a kernel/initrd image with the appropriate modules) *and* a boot loader that can read the right disk). Invariably this will involve some bit of hackery either in the installer itself, or in installing to some other disk and then migrating over. hth in some way. A Andrew, That was what I was kind of after. So it's not straight forward then :) I assume a kernel w/ drivers compiled in is going to be faster than one without and having a module loaded? How does one choose a new kernel (say one I compiled in a vm on esx for the sake of ease with my new driver) during a fresh install? Thanks! jlc -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From jan-peter at koopmann.eu Wed Nov 28 21:07:12 2007 From: jan-peter at koopmann.eu (Koopmann, Jan-Peter) Date: Wed Nov 28 21:05:54 2007 Subject: Greylisting Addon In-Reply-To: <28191528.6221196264931754.JavaMail.root@office.splatnix.net> References: <474D8A4D.9000404@fsl.com> <28191528.6221196264931754.JavaMail.root@office.splatnix.net> Message-ID: <5F9EB2B0731E5B4D88FC20780DFD16100890C7@DE-SEXB01RZ.intern.seceidos.de> > Come on Steve not another plug ;) Sounds good though :) I did not help develop it (other than beta test and annoy Steve with occasional thoughts and very few bug reports) but have to second him: It does not only sound good, it works wonders. Give it a try in commercial installations. It is worth every buck. Especially the upcoming greylisting modifications are very interesting! Regards, JP From ssilva at sgvwater.com Wed Nov 28 22:05:19 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Wed Nov 28 22:07:16 2007 Subject: Server stats script In-Reply-To: References: Message-ID: on 11/28/2007 12:43 PM Ugo Bellavance spake the following: > Scott Silva wrote: >> Does anybody have a decent mail server stats script (sendmail) that >> shows a daily output of things like; >> rbl rejections by list >> >> greetpause and other sendmail related anti-spam data like connection >> throttling >> >> total connection attempts >> >> other useful data that I will think of as soon as I hit send ;-P >> >> > > Have you tried the latest version of logwatch? > > Ugo > The latest stable, yes, but maybe I need to turn up the reporting level. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From rwahyudi at gmail.com Wed Nov 28 23:12:26 2007 From: rwahyudi at gmail.com (R Wahyudi) Date: Wed Nov 28 23:14:15 2007 Subject: Server stats script In-Reply-To: References: Message-ID: <474DF5DA.4060400@gmail.com> Scott Silva wrote: > on 11/28/2007 12:43 PM Ugo Bellavance spake the following: >> Scott Silva wrote: >>> Does anybody have a decent mail server stats script (sendmail) that >>> shows a daily output of things like; >>> rbl rejections by list >>> >>> greetpause and other sendmail related anti-spam data like connection >>> throttling >>> >>> total connection attempts >>> >>> other useful data that I will think of as soon as I hit send ;-P >>> >>> >> >> Have you tried the latest version of logwatch? >> >> Ugo >> > The latest stable, yes, but maybe I need to turn up the reporting level. > Im not so good with numbers and graphs turn me on I also think graphing make it easier to visualize what actually happen with your email system instead of looking at bunch of text & numbers. I am using following combination of following software to create my graph : - nrpe - nagios - n2rrd - cacti - modified updatemailstats.pl ( available from http://taz.net.au/postfix/mrtg/) How I set it up : - Nagios does monitoring and at the same time it collect performance data. So basically it combine 2 jobs into one : monitoring & reporting. - n2rrd convert the performance data and convert it to rrd which can be used by cacti - cacti provide web interface for graph management which allows you to easily zoom in and out of the graph, go to specific dates etc ... Graph sample : SMTP connect vs Reject : http://img139.imageshack.us/img139/5412/vscan4smtpwu4.png Rejected message at SMTP level : http://img150.imageshack.us/img150/309/vscan4blockedru9.png Accepted Message : http://img145.imageshack.us/img145/7687/vscan4acceptedji0.png Postfix Queue Level : http://img134.imageshack.us/img134/5902/vscan4queuepb1.png I have more graph but currently too lazy to upload. You can modify updatemailstats.pl quite easily to suit sendmail. Another useful reporting tool that I use is splunk ( splunk.com ) & mailwatch for mailscanner ( http://mailwatch.sourceforge.net/doku.php ) . The latest version of splunk allow you to search logs easily and you can create graph with ease. Regards, Rianto Wahyudi -- adela tirta belek -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/d302f0d0/attachment-0001.html From jflowers at ezo.net Thu Nov 29 00:08:32 2007 From: jflowers at ezo.net (Jim Flowers) Date: Thu Nov 29 00:08:08 2007 Subject: Redundant Mail System Suggestions Message-ID: <20071128232826.M8456@ezo.net> That's because you're thinking like a decent legitimate Internet user. If I'm a spammer I don't bother with that. I query for the MX record for domain.tld and put both addresses into my handy dandy distributed spam sender (possibly converting them to IP addresses first so that I still have them if the A record disappears). I don't worry about 'no stinkin' MX records after that (takes too much time), just keep the spam pumping with my list of common or harvested usernames @domain.tld and send 'em to both addresses via my 30,000 zombie pcs. More than twice the chance of delivery as sometimes lower priority servers have less spam protection. That translates to more revenue for me. - and twice as much spam for you to handle. The longer a FQDN or IP address is exposed to the Internet through an MX record the higher the probability that it will become a target for multiple distributed spam bursts that it is very difficult to defend against. On the system I am currently working on, we had the servers set up for high/low priority service until two months ago. The spam for one domain dropped from 5000/day to less than 500/day for the low priority server. I agree with things not being more complicated than they need to be. OTOH, most of our systems run unattended so the simple solution also has to be well thought out and executed. There has to be a purpose behind every design decision. ---------------------------------------------------- shuttlebox wrote: >I don't see anything in your setup that isn't available by two lines in DNS: >domain.tld. 86400 IN MX 10 mxgf1.domain.tld. >domain.tld. 86400 IN MX 10 mxgf2.domain.tld. -- Jim Flowers -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From micoots at yahoo.com Thu Nov 29 00:31:12 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 00:31:16 2007 Subject: Can't block wmv files In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE076@server02.bhl.local> Message-ID: <768627.70737.qm@web33301.mail.mud.yahoo.com> Hi Jason, Jason Ede wrote: P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } Umm... Is the file being sent by Outlook/exchange? If so then it could be in a winmail.dat attachment rather than as a .wmv file. If so its probably worth using the tnef expander to expand it out although I'm not sure if thats done before or after the filetype checking... I have sent the file attachments from hotmail, yahoo, gmail, which don't do the winmail.dat encoding. I also have the tnef installed but because I have tried different extensions (wmv, lnk, swf) from different freemail providers, it wouldn't be because of tnef. This problem has stumped me but I do need it to work so am hoping someone on the list has an idea as to what I can try or what cases it wouldn't work under. Thanks. Michael. Jason --------------------------------- From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour [micoots@yahoo.com] Sent: 28 November 2007 14:59 To: MailScanner discussion Subject: Re: Can't block wmv files Hi Julian, Julian Field wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote: > On Nov 27, 2007 3:08 PM, Michael Mansour wrote: > >> %etc-dir%/example.com.filename.rules: >> >> and %etc-dir%/example.com.filetype.rules: >> > > Those filenames don't match what you have in your rulesets, note the > missing .conf at the end: > > >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filename.rules.conf >> FromOrTo: default /etc/MailScanner/filename.rules.conf >> >> FromOrTo: *@example.com >> /etc/MailScanner/example.com.filetype.rules.conf >> FromOrTo: default /etc/MailScanner/filetype.rules.conf >> > > Also, you do have tabs as whitespace in both files and no strange > end-of-lines, common if you edit the files in Windows? > The only places you need tabs instead of spaces are in the example.com.filetype/name.rules.conf and filetype/name.rules.conf files. You can use any whitespace in *.rules files. I'm using: mailscanner-4.65.3-1.noarch I've spent the last 5 hours trouble-shooting this problem (in addition to the 2 hours I spent last night) and I believe MS is broken with this filename/filetype blocking now. What I did was globally set the /etc/MailScanner/filename.rules.conf and /etc/MailScanner/filetype.conf to deny (I also did deny+delete) all movie files and tested for the swf extension too. Movie files were still let through even when this was a global setting. I then tried simply attaching something I knew 100% would fail, a web link (.lnk file), and it passed through fine. What sort of thing / setting in MS would allow this to happen? ie. allowing anything through? Thanks. Michael. --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/304a02ae/attachment.html From jcasale at ActiveNetwerx.com Thu Nov 29 00:31:08 2007 From: jcasale at ActiveNetwerx.com (Joseph L. Casale) Date: Thu Nov 29 00:35:58 2007 Subject: mailscanner-mrtg Message-ID: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21827F@an-ex.ActiveNetwerx.int> While reading on implementing this feature, I see a suggestion that follows: #MailScanner Work Directory = /var/spool/MailScanner/incoming #COMMENT THIS OUT UNLESS IT'S A MOUNTPOINT #Spool Directory = /var/spool #COMMENT THIS OUT UNLES IT'S A MOUNTPOINT Why is that suggestion made? Thanks! jlc -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071128/311442d9/attachment.html From ssilva at sgvwater.com Thu Nov 29 00:48:23 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 29 00:49:39 2007 Subject: mailscanner-mrtg In-Reply-To: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21827F@an-ex.ActiveNetwerx.int> References: <1C8CF1EA1A5B5940B81B0710B2A4C93823DE21827F@an-ex.ActiveNetwerx.int> Message-ID: on 11/28/2007 4:31 PM Joseph L. Casale spake the following: > While reading on implementing this feature, I see a suggestion that follows: > > > > #MailScanner Work Directory = /var/spool/MailScanner/incoming #COMMENT > THIS OUT UNLESS IT'S A MOUNTPOINT > > #Spool Directory = /var/spool #COMMENT THIS OUT UNLES IT'S A MOUNTPOINT > > > > Why is that suggestion made? > > > > Thanks! > jlc > > > It needs to have the root of the mountpoint to accurately show the space used in that mount. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ganci at nurdog.com Thu Nov 29 02:33:30 2007 From: ganci at nurdog.com (Paul R. Ganci) Date: Thu Nov 29 02:33:37 2007 Subject: Greylisting Addon In-Reply-To: <577358.9553.qm@web33311.mail.mud.yahoo.com> References: <577358.9553.qm@web33311.mail.mud.yahoo.com> Message-ID: <474E24FA.10804@nurdog.com> Michael Mansour wrote: > DCC's greylist work fine for *non-MX* servers, however for inbound MX > servers which don't have local recipients (but pass the message onto > an internal mail server after releasing the message from the embargo), > DCC greylist tries to authenticate the recipients with the MX server > itself, which of course fails with a "user unknown" and bounces the > message to the sender. > > DCC greylist doesn't bother reading sendmail's mailertable to > determine where the destination recipient is or to even consider that > it's just an inbound MX server and should just greylist (embargo in > DCC terminology) the email and then send it on to the real mail server > with the inboxes. > > I explained and reported this problem to Vernon but he didn't accept > it as a problem, instead tried to convince me that I didn't need MX > servers and I should just run a beefy mail server. > > A few emails bounced between us before I gave up trying to explain to > him why his greylist I run a small ISPs Email system where we have two inbound servers with MX records which just forward to the server with the inboxes. I use DCC on both servers with greylisting enabled. I do not have the problem you describe ... my inbound servers do not try to authenticate users. Are you sure that you don't just have some kind of configuration issue? I watch my logs regularly and have never ever seen DCC cause a "user unknown" error with a subsequent bounce to the sender. I have been running DCC with greylisting enabled for the last two years now. > He's a cluely guy and knows his stuff, but I just couldn't get through > to him, he simply didn't accept the setup I had as a valid setup. Go > figure. I have had several Email exchanges with him. I agree with your assessment but would add that he is just a stubborn guy who believes his way is the only way. While I like DCC a lot if you indicate to Vernon that you wish to use it in a different way than he envisioned you will only get grief. -- Paul (ganci@nurdog.com) From micoots at yahoo.com Thu Nov 29 04:32:37 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 04:32:43 2007 Subject: Greylisting Addon In-Reply-To: <474E24FA.10804@nurdog.com> Message-ID: <911461.66313.qm@web33301.mail.mud.yahoo.com> Hi Paul, "Paul R. Ganci" wrote: Michael Mansour wrote: > DCC's greylist work fine for *non-MX* servers, however for inbound MX > servers which don't have local recipients (but pass the message onto > an internal mail server after releasing the message from the embargo), > DCC greylist tries to authenticate the recipients with the MX server > itself, which of course fails with a "user unknown" and bounces the > message to the sender. > > DCC greylist doesn't bother reading sendmail's mailertable to > determine where the destination recipient is or to even consider that > it's just an inbound MX server and should just greylist (embargo in > DCC terminology) the email and then send it on to the real mail server > with the inboxes. > > I explained and reported this problem to Vernon but he didn't accept > it as a problem, instead tried to convince me that I didn't need MX > servers and I should just run a beefy mail server. > > A few emails bounced between us before I gave up trying to explain to > him why his greylist I run a small ISPs Email system where we have two inbound servers with MX records which just forward to the server with the inboxes. I use DCC on both servers with greylisting enabled. I do not have the problem you describe ... my inbound servers do not try to authenticate users. Are you sure that you don't just have some kind of configuration issue? Pretty sure yes. I've been using DCC for many years and know it pretty well, and sendmail like the back of my hand, I just couldn't get DCC with greylist working on my setup. Messages were bounced with "user unknown" which indicated local recipient checks on the MX servers. I watch my logs regularly and have never ever seen DCC cause a "user unknown" error with a subsequent bounce to the sender. I have been running DCC with greylisting enabled for the last two years now. Yes, I'm sure it works for people, all I'm saying is it didn't work for me. I spent two weeks trying to make a go of it before giving up with it. I went to milter-greylist and had something in production the second day. It was straight forward to setup (and so is DCC) but gave me no trouble, it just worked. > He's a cluely guy and knows his stuff, but I just couldn't get through > to him, he simply didn't accept the setup I had as a valid setup. Go > figure. I have had several Email exchanges with him. I agree with your assessment but would add that he is just a stubborn guy who believes his way is the only way. While I like DCC a lot if you indicate to Vernon that you wish to use it in a different way than he envisioned you will only get grief. :) I couldn't have put it better myself. Cheers. Michael. -- Paul (ganci@nurdog.com) -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/3a80672d/attachment.html From micoots at yahoo.com Thu Nov 29 06:05:08 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 06:05:13 2007 Subject: Recipient verification to Exchange milter In-Reply-To: Message-ID: <332387.26941.qm@web33311.mail.mud.yahoo.com> Hi Donald, donald.dawson@bakerbotts.com wrote:Message Are you referring to spam-backscatter @ http://www.elandsys.com/scam/scam-backscatter/ ? Yes, I've been using it for about a year now and it works perfectly. The new version which I'm hanging out for will have native support for mailertable. Where at the moment an admin has to define and manage a separate conf file per recipient checked domain (and a socket), the new version will just use sendmail's mailertable to query the remote smtp server (which should also work for multiple remote smtp queries for failover). Another benefit of that feature is that it can do it all against one sendmail socket, saving system resources like memory and cpu. IMHO, it's the most powerful recipient checker out there, I use it to check against internal users and remote SMTP servers (which are usually Exchange). Regards, Michael. -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: Tuesday, November 27, 2007 11:51 PM To: MailScanner discussion Subject: Re: Recipient verification to Exchange milter Hi, Matt Kettler wrote: donald.dawson@bakerbotts.com wrote: > Please let me know you experience with an Exchange email recipient > verification tool (e.g. milter to sendmail). > > Below are some versions I know of. Any success, problems or input > regarding this list, or others you might know of? > > We are running four inbound MX servers with sendmail version 8.14.1, MS > version 4.62.9 and SA version 3.002002. > > Pay Version: > > _http://spamfree.ru/spamfree/_ - $299 enterprise > > Free versions: > > _http://www.five-ten-sg.com/dnsbl/rn01re01.html_ > > _http://spamlinks.net/filter-server-addon.htm#sendmail_ > > _http://smfs.sourceforge.net/smf-sav.html_ - free version of > spamfree.ru/spamfree > > _http://www.milter.info/sendmail/milter-ahead/_ - previous experience > with milter-null was frustrating since it took so long to update LibSnert. Note: milter-ahead isn't free, it's one of 4 of the snertsoft milters that costs money. a site license is 90 euros: http://www.snertsoft.com/download.php You might also wish to read this thread about sms-sav vs milter-ahead: http://search.gmane.org/?query=OT%3A+performance+smf-sav+vs+milter-ahead&group=gmane.mail.virus.mailscanner I flicked both of these options and went for scam-back, which has the added features of doing the recipient checks against _any_ remote smtp server (admin definable). scam-back is also open source and c-coded, so is fast. It works with sendmail as a milter. Regards, Michael. MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/6f694942/attachment.html From micoots at yahoo.com Thu Nov 29 06:12:45 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 06:12:49 2007 Subject: MailScanner --lint doesn't check Eicar virus - OK here! In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C59A80A@largo.campus.ncl.ac.uk> Message-ID: <250402.67610.qm@web33303.mail.mud.yahoo.com> Hi Quentin, Quentin Campbell wrote: Phil It appears to work here. I get a different result to you: This is very strange then. This begs the question, in what cases does this --lint fail with the Eicar virus check? I'm pretty sure I saw the test pass with Eicar in there when I upgraded to MailScanner 4.65.3 (not certain but pretty sure), but only recently noticed that Eicar was no longer there. This may have happened after some perl errata upgrades on Linux recently released by Red Hat. I'm just interested to know now that if this is the case, then was would cause that symptom and is it causing other problems I can't see? Michael. [root@cheviot4 MailScanner]# MailScanner --lint Checking version numbers... Version number in MailScanner.conf (4.65.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin reported no errors. MailScanner.conf says "Virus Scanners = clamavmodule mcafee" Found these virus scanners installed: clamavmodule, mcafee =========================================================================== =========================================================================== Virus Scanner test reports: ClamAVModule said "eicar.com was infected: Eicar-Test-Signature" McAfee said "/1/eicar.com Found: EICAR test file NOT a virus." If any of your virus scanners (clamavmodule,mcafee) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. [root@cheviot4 MailScanner]# Quentin --- PHONE: +44 191 222 8209 Information Systems and Services (ISS), Newcastle University, Newcastle upon Tyne, FAX: +44 191 222 8765 United Kingdom, NE1 7RU. ------------------------------------------------------------------------ >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Randal, Phil >Sent: 28 November 2007 14:10 >To: MailScanner discussion >Subject: RE: MailScanner --lint doesn't check Eicar virus > >Well spotted! > >Confirming that it is broken in 4.65.3 > ># MailScanner --lint >Checking version numbers... >Version number in MailScanner.conf (4.65.3) is correct. > >Your envelope_sender_header in spam.assassin.prefs.conf is correct. > >Checking for SpamAssassin errors (if you use it)... >SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin- >Temp >SpamAssassin reported no errors. >MailScanner.conf says "Virus Scanners = clamavmodule mcafee" >Found these virus scanners installed: clamavmodule, mcafee >======================================================================== >=== >======================================================================== >=== > >If any of your virus scanners (clamavmodule,mcafee) >are not listed there, you should check that they are installed correctly >and that MailScanner is finding them correctly via its >virus.scanners.conf. > >Cheers, > >Phil > >-- >Phil Randal >Network Engineer >Herefordshire Council >Hereford, UK > > > > > >________________________________ > > From: mailscanner-bounces@lists.mailscanner.info >[mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael >Mansour > Sent: 28 November 2007 14:03 > To: MailScanner discussion > Subject: MailScanner --lint doesn't check Eicar virus > > > Hi, > > I used to be able to run: > > # MailScanner --lint > Checking version numbers... > Version number in MailScanner.conf (4.65.3) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is >correct. > > Checking for SpamAssassin errors (if you use it)... > SpamAssassin temp dir = /tmp/SpamAssassin-Temp > SpamAssassin reported no errors. > MailScanner.conf says "Virus Scanners = clamavmodule" > Found these virus scanners installed: clamavmodule > ================================================================== >========= > ================================================================== >========= > > If any of your virus scanners (clamavmodule) > are not listed there, you should check that they are installed >correctly > and that MailScanner is finding them correctly via its >virus.scanners.conf. > > and see MailScanner test the Eicar virus between the "===" rows, >but most recently I see this doesn't work anymore. > > Is there something I can check to see why? > > When I run the wrapper: > > /usr/lib/MailScanner/clamav-wrapper /usr /tmp > > it finds clamav and works scans /tmp fine. > > Thanks. > > Michael. > > > > >________________________________ > > Make the switch to the world's best email. Get the new Yahoo!7 >Mail now > >u.yahoo.com/worldsbestmail/spankey/> . -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/dbb14e6a/attachment.html From hvdkooij at vanderkooij.org Thu Nov 29 06:45:05 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Thu Nov 29 06:45:32 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <20071128232826.M8456@ezo.net> References: <20071128232826.M8456@ezo.net> Message-ID: <474E5FF1.3090507@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jim Flowers wrote: > That's because you're thinking like a decent legitimate Internet user. If I'm > a spammer I don't bother with that. I query for the MX record for domain.tld > and put both addresses into my handy dandy distributed spam sender (possibly > converting them to IP addresses first so that I still have them if the A > record disappears). I don't worry about 'no stinkin' MX records after that > (takes too much time), just keep the spam pumping with my list of common or > harvested usernames @domain.tld and send 'em to both addresses via my 30,000 > zombie pcs. More than twice the chance of delivery as sometimes lower > priority servers have less spam protection. That translates to more revenue > for me. - and twice as much spam for you to handle. The exact behaviour is changing over time. About a year ago I would get most spam delivered to the lowest priority MX server. Then it wen to the middle one and now it seems to be evenly distributed. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHTl/wBvzDRVjxmYERAuslAKCRi/PV2JhvE+a2i05a1OMpTiEUowCfZa3n /94PdJxNbi2M8B8W3T3rzi8= =2/MS -----END PGP SIGNATURE----- From goetz.reinicke at filmakademie.de Thu Nov 29 06:55:38 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Thu Nov 29 06:55:54 2007 Subject: Black lists and blocked good users - sendmail, SA and MailScanner Message-ID: <474E626A.7070206@filmakademie.de> Hi, I hope, somewone can point me into the right direction. Recently I added two blacklist-checks to our sendmail config: spamhaus zen and the list from the german computer magazin IX. The good news: Spam has been about 70%-80%, now it is about 20%-30%. The bad news: A lot of our users have problems sendig mails from there dial up DSL or mobile phone network connections. I'v looked up there IPs and all where on the Black lists or the PBL from spamhaus. So was my Arcor IP last night :-) The information from spamhaus is, to use SMTP Authentification (http://www.spamhaus.org/pbl/query/PBL042952). I thought, we do use TLS and smtp auth already, so I thought, users allowed to log in will be allowd to send. But I got the errormessage using Thunderbird 2, that our mailserver didn't support STARTTLS in combination with EHLO. Outlook-users do get the message, that our server didn't support SSL, the server error messagt is 250. I did some hours of googling and checked some sendmail docs, but can't find the error or missing config settinges. So where to start/how to debug this problem? What may I check? Thanks for any help and hint! Best regards G?tz Reinicke goetz.reinicke@filmakademie.de From Q.G.Campbell at newcastle.ac.uk Thu Nov 29 07:20:12 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Thu Nov 29 07:23:06 2007 Subject: MailScanner --lint doesn't check Eicar virus - OK here! In-Reply-To: <250402.67610.qm@web33303.mail.mud.yahoo.com> References: <4165CF7A7F12DE4B96622CCBB90586470C59A80A@largo.campus.ncl.ac.uk> <250402.67610.qm@web33303.mail.mud.yahoo.com> Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C59A87F@largo.campus.ncl.ac.uk> >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Michael Mansour >Sent: 29 November 2007 06:13 >To: MailScanner discussion >Subject: RE: MailScanner --lint doesn't check Eicar virus - OK here! > >Hi Quentin, > >Quentin Campbell wrote: > > Phil > > It appears to work here. I get a different result to you: > > >This is very strange then. > >This begs the question, in what cases does this --lint fail with the >Eicar virus check? > >I'm pretty sure I saw the test pass with Eicar in there when I upgraded >to MailScanner 4.65.3 (not certain but pretty sure), but only recently >noticed that Eicar was no longer there. This may have happened after >some perl errata upgrades on Linux recently released by Red Hat. [snip] Michael If have now run 'MailScanner --lint' on all 12 of our MX hosts. The Eicar virus is detected in all 12 cases. They are all MS 4.65.3-1. All these systems are RH AS4. They have had an 'up2date -u' applied in the last two days. On at least some it appears that perl might have been updated [*]. [*] The /var/log/up2date file is a bit opaque. I do not know how to tell with certainty whether a particular component of, say, perl 5.8.5 was updated. Quentin From shuttlebox at gmail.com Thu Nov 29 08:04:05 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Thu Nov 29 08:04:07 2007 Subject: Can't block wmv files In-Reply-To: <768627.70737.qm@web33301.mail.mud.yahoo.com> References: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE076@server02.bhl.local> <768627.70737.qm@web33301.mail.mud.yahoo.com> Message-ID: <625385e30711290004j2851b8b1h2aeb0f1297288b44@mail.gmail.com> On Nov 29, 2007 1:31 AM, Michael Mansour wrote: > I also have the tnef installed but because I have tried different extensions > (wmv, lnk, swf) from different freemail providers, it wouldn't be because of > tnef. Turn on archiving for your own address so you can study the messages as they enter MailScanner, you can unpack the attachments there and run the file command on them and see what it says. -- /peter From shuttlebox at gmail.com Thu Nov 29 08:12:40 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Thu Nov 29 08:12:42 2007 Subject: Redundant Mail System Suggestions In-Reply-To: <474E5FF1.3090507@vanderkooij.org> References: <20071128232826.M8456@ezo.net> <474E5FF1.3090507@vanderkooij.org> Message-ID: <625385e30711290012v58418ac1l24e9d496ba1db249@mail.gmail.com> On Nov 29, 2007 7:45 AM, Hugo van der Kooij wrote: > The exact behaviour is changing over time. About a year ago I would get > most spam delivered to the lowest priority MX server. > > Then it wen to the middle one and now it seems to be evenly distributed. That's my experience too, they sometimes go for the high priority as mail should and sometimes the low priority to take a chance on lesser protection. However, I have never seen the same spam go to all MX records. I use the same priority and have the same protection on all servers. -- /peter From martinh at solidstatelogic.com Thu Nov 29 08:30:35 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 29 08:30:44 2007 Subject: SA Score In-Reply-To: <160620.6511196273616576.JavaMail.root@office.splatnix.net> Message-ID: <58828e27e917d84987af2014988a3520@solidstatelogic.com> 5 and 10 for me...RBL's in SA, only great-pause on MTA (and recipient verification). Very little (<1%) spam hits the users without subject tags. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of UxBoD > Sent: 28 November 2007 18:14 > To: mailscanner@lists.mailscanner.info > Subject: OT: SA Score > > Just something of interest for myself but what are peoples spam and hispam > scores set to ? The company I am at I have set it as 12 and we pretty > much catch 98% of SPAM using multiple RBLs, SA rules and SA plugins. > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From shuttlebox at gmail.com Thu Nov 29 08:40:15 2007 From: shuttlebox at gmail.com (shuttlebox) Date: Thu Nov 29 08:40:18 2007 Subject: Recipient verification to Exchange milter In-Reply-To: <332387.26941.qm@web33311.mail.mud.yahoo.com> References: <332387.26941.qm@web33311.mail.mud.yahoo.com> Message-ID: <625385e30711290040x55a1094bu9f3b47a682e30033@mail.gmail.com> On Nov 29, 2007 7:05 AM, Michael Mansour wrote: > Where at the moment an admin has to define and manage a separate conf file > per recipient checked domain (and a socket), the new version will just use > sendmail's mailertable to query the remote smtp server (which should also > work for multiple remote smtp queries for failover). That's exactly what I don't want :-) , I hope they keep the current behavior as an option. I have a setup with external MTA:s using greylisting and so on forwarding to internal MTA:s running MailScanner and then on to Exchange. Therefor it doesn't work with mailertable since it would try my MailScanner servers instead of Exchange. I have long looked for an alternative where I could specify the mailbox server myself but every software available seemed to use mailertable. -- /peter From micoots at yahoo.com Thu Nov 29 08:47:17 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 08:47:20 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> Message-ID: <838809.82745.qm@web33305.mail.mud.yahoo.com> Hi Glenn, Glenn Steen wrote: On 28/11/2007, Michael Mansour wrote: > Hi, > > Glenn Steen wrote: > On 27/11/2007, Israel Garcia wrote: > > On Nov 27, 2007 4:36 PM, Glenn Steen wrote: > > > > > > > > On 27/11/2007, Israel Garcia wrote: > > > > > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > > > > > > > So when disabling RBLs the problem disappears. > > > > > > > > No, the problem disapear when I turn off spamassassin completily in > > > > mailscanner config file. Sometimes I enable Spamassassin check but > > disable > > > > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. > > BUT, > > > > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > > average > > > > begins to increase and thousands of mails begins comes to HOLD folder > .. > > Do > > > > you think it's time to split the load in two servers? I mean something > > like > > > > this: > > > > Router > > > > NAT rules to SMTP farm serves. > > > > I > > > > I > > > > ______________________________ > > > > I I > > > > Server2 SMTP Server1 SMTP > > > > Mailscanner/sa Mailscanner/sa > > > > > > If the bottleneck is network-related/lookups.... this will buy you > > > nothing, unfortunately. > > I know, but how am I sure this is the cause of my problem? > > > :-) .... when you remove some load and the problem goes away:-):-). > How much memory/swap is used when these messages get queued and not > processed? > > I'm currently trouble-shooting a problem which does the same thing and have > tracked it down to the memory running out ie. mostly swap being used while > CPU's aren't (load average goes to 12 and 13 because of the heavy swap > usage). > > I'm organising more memory for the server at the moment, which should > resolve the issue. > > Regards, > > Michael. Good point. On the other hand, you could also look at a) Why does the memory run out, and b) what can you do about it. I run a perl script each morning which goes through my previous days maillog and counts all bandwidth used per domain for the previous day, then generates graphs out of that data. This process isn't something I'd like to get rid of which is why I want it to run and if I need to add more memory to preserve it's process then I should. If your MailScanner children eat up too much, one thing could be to lower the amount of children. If the childrens workers hang around waiting for slow responses, you might need look more closely on why Since you sent that email, I lowed the children to two and watch the morning run, instead of receiving 300 queued messages I only got a maximum of 15, and not delayed by 2 hours for delivery but by only 15 minutes. This is a good "work around" for now and as other mail servers handle the inbound workload too it's a good solution until the box gets a little more ram into it, so thanks for that suggestion. that is... and correct that (in this case more RAM could be a very good aid, but still a band.aid where an amputation would be better;-):-). Anyway, I'm sure you know where to look, what to do:). Thanks for your suggestions Glenn, you're consistently a helpful individual :) .. I just wish now I could work out the movie file blocking issue (not blocking I mean) with the latest MailScanner. Michael. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/88d67acd/attachment-0001.html From micoots at yahoo.com Thu Nov 29 09:21:50 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 09:21:53 2007 Subject: Recipient verification to Exchange milter In-Reply-To: <625385e30711290040x55a1094bu9f3b47a682e30033@mail.gmail.com> Message-ID: <467846.26086.qm@web33304.mail.mud.yahoo.com> Hi Peter, shuttlebox wrote: On Nov 29, 2007 7:05 AM, Michael Mansour wrote: > Where at the moment an admin has to define and manage a separate conf file > per recipient checked domain (and a socket), the new version will just use > sendmail's mailertable to query the remote smtp server (which should also > work for multiple remote smtp queries for failover). That's exactly what I don't want :-) , I hope they keep the current behavior as an option. I have a setup with external MTA:s using greylisting and so on forwarding to internal MTA:s running MailScanner and then on to Exchange. Therefor it doesn't work with mailertable since it would try my MailScanner servers instead of Exchange. I have long looked for an alternative where I could specify the mailbox server myself but every software available seemed to use mailertable. Well you'll be happy to hear it is optional :) The feature is already available in 1.3.1 but can't query different remote hosts in that version, only one. In 1.3.1 it's also optional (I don't use that mailertable option in 1.3.1 but intend to use it in the next versions). Regards, Michael. -- /peter -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/cdebf092/attachment.html From micoots at yahoo.com Thu Nov 29 10:23:05 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 10:23:10 2007 Subject: Add ID to email headers? In-Reply-To: <4CAB0118AEC63A4FAAE77E6BCBDF760C9EEBE058@server02.bhl.local> Message-ID: <194085.2545.qm@web33308.mail.mud.yahoo.com> Hi, Jason Ede wrote: I guess a modified version of this could be added in to the Mailwatch mailwatch.pm called from Always looked up last? Be nice and neat then. Jason ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Julian Field [MailScanner@ecs.soton.ac.uk] Sent: 21 November 2007 16:40 To: MailScanner discussion Subject: Re: Add ID to email headers? Yes, it's quite simple. I'm not going to put it in the code unless quite a few people want it, but as you said a patch was okay, try the attached I personally think this would be a nice option to have without an ad-hoc patch. Maybe take a vote from the list? Michael. patch to Message.pm (/usr/lib/MailScanner/MailScanner/Message.pm). It's pretty obvious how it works :-) Vincent Verhagen wrote: > Hi all, > > My setup: Postfix 2.4.3, MailScanner 4.61.7, MailWatch 1.0.3 > Would any of you know if it is possible (if need be with a small > patch) to add the ID field that mailwatch uses to a header in the > outgoing emails? > I'd like to add something like X-orgname-MailScanner-ID so I can > easily trace back messages I get questions about. > > Regards, > Vincent > > P.S. Lulu just shipped the book :) > Jules -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules@Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/e8737f1e/attachment.html From glenn.steen at gmail.com Thu Nov 29 10:46:17 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 29 10:46:20 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <838809.82745.qm@web33305.mail.mud.yahoo.com> References: <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <838809.82745.qm@web33305.mail.mud.yahoo.com> Message-ID: <223f97700711290246rceae708u3f16b821ffc57947@mail.gmail.com> On 29/11/2007, Michael Mansour wrote: > Hi Glenn, > > Glenn Steen wrote: > On 28/11/2007, Michael Mansour wrote: > > Hi, > > > > > Glenn Steen wrote: > > On 27/11/2007, Israel Garcia wrote: > > > On Nov 27, 2007 4:36 PM, Glenn Steen wrote: > > > > > > > > > > > On 27/11/2007, Israel Garcia wrote: > > > > > > > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > > > > > > > > > So when disabling RBLs the problem disappears. > > > > > > > > > > No, the problem disapear when I turn off spamassassin completily in > > > > > mailscanner config file. Sometimes I enable Spamassassin check but > > > disable > > > > > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work > better.. > > > BUT, > > > > > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > > > average > > > > > begins to increase and thousands of mails begins comes to HOLD > folder > > .. > > > Do > > > > > you think it's time to split the load in two servers? I mean > something > > > like > > > > > this: > > > > > Router > > > > > NAT rules to SMTP farm serves. > > > > > I > > > > > I > > > > > ______________________________ > > > > > I I > > > > > Server2 SMTP Server1 SMTP > > > > > Mailscanner/sa Mailscanner/sa > > > > > > > > If the bottleneck is network-related/lookups.... this will buy you > > > > nothing, unfortunately. > > > I know, but how am I sure this is the cause of my problem? > > > > > :-) .... when you remove some load and the problem goes away:-):-). > > How much memory/swap is used when these messages get queued and not > > processed? > > > > I'm currently trouble-shooting a problem which does the same thing and > have > > tracked it down to the memory running out ie. mostly swap being used while > > CPU's aren't (load average goes to 12 and 13 because of the heavy swap > > usage). > > > > I'm organising more memory for the server at the moment, which should > > resolve the issue. > > > > Regards, > > > > Michael. > > Good point. On the other hand, you could also look at a) Why does the > memory run out, and b) what can you do about it. > I run a perl script each morning which goes through my previous days maillog > and counts all bandwidth used per domain for the previous day, then > generates graphs out of that data. > > This process isn't something I'd like to get rid of which is why I want it > to run and if I need to add more memory to preserve it's process then I > should. As said, I was pretty sure you knew where to look:-). And in that case, more RAM _is_ the long term solution. Of course. > If your MailScanner children eat up too much, one thing could be to > lower the amount of children. If the childrens workers hang around > waiting for slow responses, you might need look more closely on why > Since you sent that email, I lowed the children to two and watch the morning > run, instead of receiving 300 queued messages I only got a maximum of 15, > and not delayed by 2 hours for delivery but by only 15 minutes. > > This is a good "work around" for now and as other mail servers handle the > inbound workload too it's a good solution until the box gets a little more > ram into it, so thanks for that suggestion. You're wellcome. Sometimes when one stares at a resource problem, one might fail to realise that in the "acute" situation... "less is more":-):-). Did a similar logic-fault recently with a severely overloaded Oracle DB server... Offloading one instance (although relatively small, and not that "intense":) to another server so that the "unmovable" top consumer would have more RAM to work with (and thus do less physical reads) turned out to be a ... lifesaver (the users were starting to construct a gallows... figuratively speaking:-). But it took me quite a while to ... see ... this simple interim solution (am in the process of buying new DB iron...). > that is... and correct that (in this case more RAM could be a very > good aid, but still a band.aid where an amputation would be > better;-):-). > Anyway, I'm sure you know where to look, what to do:). > Thanks for your suggestions Glenn, you're consistently a helpful individual > :) .. I just wish now I could work out the movie file blocking issue (not > blocking I mean) with the latest MailScanner. Thanks, one aim to please:-). About the file blocking problem... I've not been following that thread (seemed like you had good attention from Mr Root:-).... You did do a lint, just to see that the syntax is OK? And perhaps a few synthetic tests? Have you looked at the raw messages, prior to MS? (You can capture them by Archive... And just quarantining everything for yourself should give you something too, although MS will have ... decoded that a bit first). > Michael. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From micoots at yahoo.com Thu Nov 29 11:36:26 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 11:36:29 2007 Subject: Can't block wmv files In-Reply-To: <625385e30711290004j2851b8b1h2aeb0f1297288b44@mail.gmail.com> Message-ID: <605084.78809.qm@web33313.mail.mud.yahoo.com> Hi Peter, shuttlebox wrote: On Nov 29, 2007 1:31 AM, Michael Mansour wrote: > I also have the tnef installed but because I have tried different extensions > (wmv, lnk, swf) from different freemail providers, it wouldn't be because of > tnef. Turn on archiving for your own address so you can study the messages as they enter MailScanner, you can unpack the attachments there and run the file command on them and see what it says. This was something I didn't think of trying, so I have taken your advice and ran an archive of mail. I emailed myself a wmv from my gmail account, and got this: dflATBKPHb018211 I then ran: # uudeview dflATBKPHb018211 Loaded from dflATBKPHb018211: '' (Don_tjudgetooquickly3.wmv): Don_tjudgetooquickly3.wmv part 1 Base64 Found 'Don_tjudgetooquickly3.wmv' State 16 Base64 Parts 1 OK -rw-r--r-- Don_tjudgetooquickly3.wmv is OK [d] (?=help) d File successfully written to /home/MailScanner/archive/20071129/Don_tjudgetooquickly3.wmv 1 file decoded from 1 input file, 0 failed which produced: # ll total 1534 -rw-rw---- 1 root root 889559 Nov 29 22:24 dflATBKPHb018211 -rw-r--r-- 1 root root 658299 Nov 29 22:31 Don_tjudgetooquickly3.wmv and we see this: # file Don_tjudgetooquickly3.wmv Don_tjudgetooquickly3.wmv: Microsoft ASF yet I have this denied here: deny ASF No Windows media No Windows media files allowed I'm really stumped why this is just let through. Michael. -- /peter -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/8aa39074/attachment.html From support-lists at petdoctors.co.uk Thu Nov 29 11:43:48 2007 From: support-lists at petdoctors.co.uk (Nigel Kendrick) Date: Thu Nov 29 11:44:29 2007 Subject: Whitelisting authenticated servers Message-ID: <026701c8327d$1ac3f5d0$3c65a8c0@support01> Hi, All our mobile phones have just been blocked from sending mail as a range of IP addresses belonging to UK Vodafone seems to have made it on to a number of RBLS. It there a simple way to whitelist authenticated users (MS, postfix, dovecot, SASL) rather than the dodgy stopgap of whitelisting our sending domain? Thanks Nigel Kendrick From martinh at solidstatelogic.com Thu Nov 29 12:03:47 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Thu Nov 29 12:04:02 2007 Subject: Whitelisting authenticated servers In-Reply-To: <026701c8327d$1ac3f5d0$3c65a8c0@support01> Message-ID: <9e51661171a25c4cb498b4224d57d20a@solidstatelogic.com> Nigel Whitelist your email server, even if it's 127.0.0.1...I don't spam check stuff FROM our mailserver based on ip-address.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Nigel Kendrick > Sent: 29 November 2007 11:44 > To: MailScanner discussion > Subject: Whitelisting authenticated servers > > Hi, > > All our mobile phones have just been blocked from sending mail as a range > of > IP addresses belonging to UK Vodafone seems to have made it on to a number > of RBLS. It there a simple way to whitelist authenticated users (MS, > postfix, dovecot, SASL) rather than the dodgy stopgap of whitelisting our > sending domain? > > Thanks > > Nigel Kendrick > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From support-lists at petdoctors.co.uk Thu Nov 29 12:27:59 2007 From: support-lists at petdoctors.co.uk (Nigel Kendrick) Date: Thu Nov 29 12:28:56 2007 Subject: Whitelisting authenticated servers In-Reply-To: <9e51661171a25c4cb498b4224d57d20a@solidstatelogic.com> Message-ID: <02a201c83283$474b7050$3c65a8c0@support01> -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Martin.Hepworth Sent: Thursday, November 29, 2007 12:04 PM To: MailScanner discussion Subject: RE: Whitelisting authenticated servers Nigel Whitelist your email server, even if it's 127.0.0.1...I don't spam check stuff FROM our mailserver based on ip-address.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Cheers Martin - it seems so obvious when you take a step or two back from the problem. Nigel From P.G.M.Peters at utwente.nl Thu Nov 29 13:35:53 2007 From: P.G.M.Peters at utwente.nl (Peter Peters) Date: Thu Nov 29 13:36:01 2007 Subject: OT: Load Balancing & redundancy using Multiple A records In-Reply-To: <625385e30711231107s3c076cb6u15d14f12197a9e0f@mail.gmail.com> References: <1195813179.21654.33.camel@localhost.localdomain> <4746B5C7.8000207@fsl.com> <625385e30711230438vf89057fh936dab8864d72bc1@mail.gmail.com> <47471B04.2090105@utwente.nl> <625385e30711231107s3c076cb6u15d14f12197a9e0f@mail.gmail.com> Message-ID: <474EC039.40405@utwente.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shuttlebox wrote on 23-11-2007 20:07: > On Nov 23, 2007 7:25 PM, Peter Peters wrote: >> The only differences I see are Exchange (and other windows mailservers). >> They tend to do one lookup and keep that info until the application on >> the Windows server is restarted. > > I know Windows used to disregard the TTL but is that still true? At > one site I have Exchange servers (2003?) on the inside mailing to two > MX records and it's very even between them. I use 10m as TTL for the > MX records. We have some strange Exchange configurations. Smart host is smtp.utwente.nl but Exchange still tries to send all e-mail out directly. Only when it can't find the host to deliver to it drops the mail on smtp.utwente.nl. Except OOO's. They go to mx.utwente.nl being the system the message that triggered the OOO came in through. - -- Peter Peters, Teamleider Unix/Linux-Beheer ICT-Servicecentrum Universiteit Twente, Postbus 217, 7500 AE Enschede Telefoon 053 489 2301, Fax 053 489 2383, P.G.M.Peters@utwente.nl, http://www.utwente.nl/icts -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHTsA4elLo80lrIdIRAvTKAJ9qkyg6DSbvRDVnF9acHYg9rWv0QwCfaC6q 8WfGEvdMIRQc5xt4/7yfxpo= =/j/P -----END PGP SIGNATURE----- From prandal at herefordshire.gov.uk Thu Nov 29 13:57:52 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Thu Nov 29 13:57:57 2007 Subject: MailScanner --lint doesn't check Eicar virus - OK here! In-Reply-To: <250402.67610.qm@web33303.mail.mud.yahoo.com> References: <4165CF7A7F12DE4B96622CCBB90586470C59A80A@largo.campus.ncl.ac.uk> <250402.67610.qm@web33303.mail.mud.yahoo.com> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> Michael, Which version of RedHat are you running? I see the problem on CentOS 5.0. It may a side effect of force-installing the perl update. It would be nice to know what's actually happening and what the fix is, though. I'm not a perl guru so it's beyond me. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK ________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: 29 November 2007 06:13 To: MailScanner discussion Subject: RE: MailScanner --lint doesn't check Eicar virus - OK here! Hi Quentin, Quentin Campbell wrote: Phil It appears to work here. I get a different result to you: This is very strange then. This begs the question, in what cases does this --lint fail with the Eicar virus check? I'm pretty sure I saw the test pass with Eicar in there when I upgraded to MailScanner 4.65.3 (not certain but pretty sure), but only recently noticed that Eicar was no longer there. This may have happened after some perl errata upgrades on Linux recently released by Red Hat. I'm just interested to know now that if this is the case, then was would cause that symptom and is it causing other problems I can't see? Michael. [root@cheviot4 MailScanner]# MailScanner --lint Checking version numbers... Version number in MailScanner.conf (4.65.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin reported no errors. MailScanner.conf says "Virus Scanners = clamavmodule mcafee" Found these virus scanners installed: clamavmodule, mcafee ======================================================================== === ======================================================================== === Virus Scanner test reports: ClamAVModule said "eicar.com was infected: Eicar-Test-Signature" McAfee said "/1/eicar.com Found: EICAR test file NOT a virus." If any of your virus scanners (clamavmodule,mcafee) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. [root@cheviot4 MailScanner]# Quentin --- PHONE: +44 191 222 8209 Information Systems and Services (ISS), Newcastle University, Newcastle upon Tyne, FAX: +44 191 222 8765 United Kingdom, NE1 7RU. ------------------------------------------------------------------------ >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Randal, Phil >Sent: 28 November 2007 14:10 >To: MailScanner discussion >Subject: RE: MailScanner --lint doesn't check Eicar virus > >Well spotted! > >Confirming that it is broken in 4.65.3 > ># MailScanner --lint >Checking version numbers... >Version number in MailScanner.conf (4.65.3) is correct. > >Your envelope_sender_header in spam.assassin.prefs.conf is correct. > >Checking for SpamAssassin errors (if you use it)... >SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin- >Temp >SpamAssassin reported no errors. >MailScanner.conf says "Virus Scanners = clamavmodule mcafee" >Found these virus scanners installed: clamavmodule, mcafee >======================================================================= = >=== >======================================================================= = >=== > >If any of your virus scanners (clamavmodule,mcafee) >are not listed there, you should check that they are installed correctly >and that MailScanner is finding them correctly via its >virus.scanners.conf. > >Cheers, > >Phil > >-- >Phil Randal >Network Engineer >Herefordshire Council >Hereford, UK > > > > > >________________________________ > > From: mailscanner-bounces@lists.mailscanner.info >[mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael >Mansour > Sent: 28 November 2007 14:03 > To: MailScanner discussion > Subject: MailScanner --lint doesn't check Eicar virus > > > Hi, > > I used to be able to run: > > # MailScanner --lint > Checking version numbers... > Version number in MailScanner.conf (4.65.3) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is >correct. > > Checking for SpamAssassin errors (if you use it)... > SpamAssassin temp dir = /tmp/SpamAssassin-Temp > SpamAssassin reported no errors. > MailScanner.conf says "Virus Scanners = clamavmodule" > Found these virus scanners installed: clamavmodule > ================================================================== >========= > ================================================================== >========= > > If any of your virus scanners (clamavmodule) > are not listed there, you should check that they are installed >correctly > and that MailScanner is finding them correctly via its >virus.scanners.conf. > > and see MailScanner test the Eicar virus between the "===" rows, >but most recently I see this doesn't work anymore. > > Is there something I can check to see why? > > When I run the wrapper: > > /usr/lib/MailScanner/clamav-wrapper /usr /tmp > > it finds clamav and works scans /tmp fine. > > Thanks. > > Michael. > > > > >________________________________ > > Make the switch to the world's best email. Get the new Yahoo!7 >Mail now > >u.yahoo.com/worldsbestmail/spankey/> . -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ________________________________ Make the switch to the world's best email. Get the new Yahoo!7 Mail now . -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/eb16aa49/attachment.html From Q.G.Campbell at newcastle.ac.uk Thu Nov 29 14:22:19 2007 From: Q.G.Campbell at newcastle.ac.uk (Quentin Campbell) Date: Thu Nov 29 14:23:32 2007 Subject: MailScanner --lint doesn't check Eicar virus - OK here! In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C59A80A@largo.campus.ncl.ac.uk><250402.67610.qm@web33303.mail.mud.yahoo.com> <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> Message-ID: <4165CF7A7F12DE4B96622CCBB90586470C59A987@largo.campus.ncl.ac.uk> Phil A 'cat /etc/redhat-release' gives "Red Hat Enterprise Linux AS release 4 (Nahant Update 6)". The command 'perl -v' gives: Summary of my perl5 (revision 5 version 8 subversion 5) configuration: Platform: osname=linux, osvers=2.6.9-22.18.bz155725.elsmp, archname=i386-linux-thread-multi uname='linux hs20-bc1-4.build.redhat.com 2.6.9-22.18.bz155725.elsmp #1 smp thu nov 17 15:34:08 est 2005 i686 i686 i386 gnulinux ' config_args='-des -Doptimize=-O2 -g -pipe -m32 -march=i386 -mtune=pentium4 -Dversion=5.8.5 -Dmyhostname=localhost -Dperladmin=root@localhost -Dcc=gcc -Dcf_by=Red Hat, Inc. -Dinstallprefix=/usr -Dprefix=/usr -Darchname=i386-linux -Dvendorprefix=/usr -Dsiteprefix=/usr -Duseshrplib -Dusethreads -Duseithreads -Duselargefiles -Dd_dosuid -Dd_semctl_semun -Di_db -Ui_ndbm -Di_gdbm -Di_shadow -Di_syslog -Dman3ext=3pm -Duseperlio -Dinstallusrbinperl -Ubincompat5005 -Uversiononly -Dpager=/usr/bin/less -isr -Dinc_version_list=5.8.4 5.8.3 5.8.2 5.8.1 5.8.0' hint=recommended, useposix=true, d_sigaction=define usethreads=define use5005threads=undef useithreads=define usemultiplicity=define useperlio=define d_sfio=undef uselargefiles=define usesocks=undef use64bitint=undef use64bitall=undef uselongdouble=undef usemymalloc=n, bincompat5005=undef Compiler: cc='gcc', ccflags ='-D_REENTRANT -D_GNU_SOURCE -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm', optimize='-O2 -g -pipe -m32 -march=i386 -mtune=pentium4', cppflags='-D_REENTRANT -D_GNU_SOURCE -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -I/usr/include/gdbm' ccversion='', gccversion='3.4.6 20060404 (Red Hat 3.4.6-2)', gccosandvers='' intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234 d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12 ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8 alignbytes=4, prototype=define Linker and Libraries: ld='gcc', ldflags =' -L/usr/local/lib' libpth=/usr/local/lib /lib /usr/lib libs=-lresolv -lnsl -lgdbm -ldb -ldl -lm -lcrypt -lutil -lpthread -lc perllibs=-lresolv -lnsl -ldl -lm -lcrypt -lutil -lpthread -lc libc=/lib/libc-2.3.4.so, so=so, useshrplib=true, libperl=libperl.so gnulibc_version='2.3.4' Dynamic Linking: dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-Wl,-E -Wl,-rpath,/usr/lib/perl5/5.8.5/i386-linux-thread-multi/CORE' cccdlflags='-fPIC', lddlflags='-shared -L/usr/local/lib' Characteristics of this binary (from libperl): Compile-time options: DEBUGGING MULTIPLICITY USE_ITHREADS USE_LARGE_FILES PERL_IMPLICIT_CONTEXT Built under linux Compiled at Jul 24 2006 18:28:10 @INC: /usr/lib/perl5/5.8.5/i386-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl . Hope that info is of help. Quentin >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Randal, Phil >Sent: 29 November 2007 13:58 >To: MailScanner discussion >Subject: RE: MailScanner --lint doesn't check Eicar virus - OK here! > >Michael, > >Which version of RedHat are you running? > >I see the problem on CentOS 5.0. > >It may a side effect of force-installing the perl update. > >It would be nice to know what's actually happening and what the fix is, >though. I'm not a perl guru so it's beyond me. > >Cheers, > >Phil >-- >Phil Randal >Network Engineer >Herefordshire Council >Hereford, UK > > > >________________________________ > > From: mailscanner-bounces@lists.mailscanner.info >[mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael >Mansour > Sent: 29 November 2007 06:13 > To: MailScanner discussion > Subject: RE: MailScanner --lint doesn't check Eicar virus - OK >here! > > > Hi Quentin, > > Quentin Campbell wrote: > > Phil > > It appears to work here. I get a different result to you: > > > This is very strange then. > > This begs the question, in what cases does this --lint fail with >the Eicar virus check? > > I'm pretty sure I saw the test pass with Eicar in there when I >upgraded to MailScanner 4.65.3 (not certain but pretty sure), but only >recently noticed that Eicar was no longer there. This may have happened >after some perl errata upgrades on Linux recently released by Red Hat. > > I'm just interested to know now that if this is the case, then was >would cause that symptom and is it causing other problems I can't see? > > Michael. > > > [root@cheviot4 MailScanner]# MailScanner --lint > Checking version numbers... > Version number in MailScanner.conf (4.65.3) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is >correct. > > Checking for SpamAssassin errors (if you use it)... > SpamAssassin temp dir = >/var/spool/MailScanner/incoming/SpamAssassin-Temp > SpamAssassin reported no errors. > MailScanner.conf says "Virus Scanners = clamavmodule mcafee" > Found these virus scanners installed: clamavmodule, mcafee > > ================================================================== >========= > > ================================================================== >========= > Virus Scanner test reports: > ClamAVModule said "eicar.com was infected: Eicar-Test- >Signature" > McAfee said "/1/eicar.com Found: EICAR test file NOT a >virus." > > If any of your virus scanners (clamavmodule,mcafee) > are not listed there, you should check that they are >installed correctly > and that MailScanner is finding them correctly via its >virus.scanners.conf. > [root@cheviot4 MailScanner]# > > Quentin > --- > PHONE: +44 191 222 8209 Information Systems and Services >(ISS), > Newcastle University, > Newcastle upon Tyne, > FAX: +44 191 222 8765 United Kingdom, NE1 7RU. > ------------------------------------------------------------ >------------ > > > > > > >-----Original Message----- > >From: mailscanner-bounces@lists.mailscanner.info >[mailto:mailscanner- > >bounces@lists.mailscanner.info] On Behalf Of Randal, Phil > >Sent: 28 November 2007 14:10 > >To: MailScanner discussion > >Subject: RE: MailScanner --lint doesn't check Eicar virus > > > >Well spotted! > > > >Confirming that it is broken in 4.65.3 > > > ># MailScanner --lint > >Checking version numbers... > >Version number in MailScanner.conf (4.65.3) is correct. > > > >Your envelope_sender_header in spam.assassin.prefs.conf is >correct. > > > >Checking for SpamAssassin errors (if you use it)... > >SpamAssassin temp dir = >/var/spool/MailScanner/incoming/SpamAssassin- > >Temp > >SpamAssassin reported no errors. > >MailScanner.conf says "Virus Scanners = clamavmodule >mcafee" > >Found these virus scanners installed: clamavmodule, mcafee > > >================================================================= >======= > >=== > > >================================================================= >======= > >=== > > > >If any of your virus scanners (clamavmodule,mcafee) > >are not listed there, you should check that they are >installed correctly > >and that MailScanner is finding them correctly via its > >virus.scanners.conf. > > > >Cheers, > > > >Phil > > > >-- > >Phil Randal > >Network Engineer > >Herefordshire Council > >Hereford, UK > > > > > > > > > > > >________________________________ > > > > From: mailscanner-bounces@lists.mailscanner.info > >[mailto:mailscanner-bounces@lists.mailscanner.info] On >Behalf Of Michael > >Mansour > > Sent: 28 November 2007 14:03 > > To: MailScanner discussion > > Subject: MailScanner --lint doesn't check Eicar virus > > > > > > Hi, > > > > I used to be able to run: > > > > # MailScanner --lint > > Checking version numbers... > > Version number in MailScanner.conf (4.65.3) is correct. > > > > Your envelope_sender_header in spam.assassin.prefs.conf is > >correct. > > > > Checking for SpamAssassin errors (if you use it)... > > SpamAssassin temp dir = /tmp/SpamAssassin-Temp > > SpamAssassin reported no errors. > > MailScanner.conf says "Virus Scanners = clamavmodule" > > Found these virus scanners installed: clamavmodule > > >================================================================== > >========= > > >================================================================== > >========= > > > > If any of your virus scanners (clamavmodule) > > are not listed there, you should check that they are >installed > >correctly > > and that MailScanner is finding them correctly via its > >virus.scanners.conf. > > > > and see MailScanner test the Eicar virus between the "===" >rows, > >but most recently I see this doesn't work anymore. > > > > Is there something I can check to see why? > > > > When I run the wrapper: > > > > /usr/lib/MailScanner/clamav-wrapper /usr /tmp > > > > it finds clamav and works scans /tmp fine. > > > > Thanks. > > > > Michael. > > > > > > > > > >________________________________ > > > > Make the switch to the world's best email. Get the new >Yahoo!7 > >Mail now > > > >u.yahoo.com/worldsbestmail/spankey/> . > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the >website! > > > > >________________________________ > > Make the switch to the world's best email. Get the new Yahoo!7 >Mail now >u.yahoo.com/worldsbestmail/spankey/> . From micoots at yahoo.com Thu Nov 29 14:59:59 2007 From: micoots at yahoo.com (Michael Mansour) Date: Thu Nov 29 15:00:03 2007 Subject: MailScanner --lint doesn't check Eicar virus - OK here! In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> Message-ID: <832107.56195.qm@web33313.mail.mud.yahoo.com> Hi Phil, "Randal, Phil" wrote: Michael, Which version of RedHat are you running? I'm running Scientific Linux 4.5 (RHEL4 U5), and I see the problem on 6 MailScanner servers, which I'm pretty sure happened after the perl update. I see the problem on CentOS 5.0. It may a side effect of force-installing the perl update. I didn't force install the update, I just removed two RPM's which were clashing with the pre-built MailScanner ones (because the perl errata already had those perl modules in it) and then did the "rpm -Uvh", it went through cleanly. It would be nice to know what's actually happening and what the fix is, though. I'm not a perl guru so it's beyond me. Yes, I may re-install MS 4.65.3 tomorrow on one of the MailScanner servers and see if it fixes that problem. Michael. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK --------------------------------- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael Mansour Sent: 29 November 2007 06:13 To: MailScanner discussion Subject: RE: MailScanner --lint doesn't check Eicar virus - OK here! Hi Quentin, Quentin Campbell wrote: Phil It appears to work here. I get a different result to you: This is very strange then. This begs the question, in what cases does this --lint fail with the Eicar virus check? I'm pretty sure I saw the test pass with Eicar in there when I upgraded to MailScanner 4.65.3 (not certain but pretty sure), but only recently noticed that Eicar was no longer there. This may have happened after some perl errata upgrades on Linux recently released by Red Hat. I'm just interested to know now that if this is the case, then was would cause that symptom and is it causing other problems I can't see? Michael. [root@cheviot4 MailScanner]# MailScanner --lint Checking version numbers... Version number in MailScanner.conf (4.65.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp SpamAssassin reported no errors. MailScanner.conf says "Virus Scanners = clamavmodule mcafee" Found these virus scanners installed: clamavmodule, mcafee =========================================================================== =========================================================================== Virus Scanner test reports: ClamAVModule said "eicar.com was infected: Eicar-Test-Signature" McAfee said "/1/eicar.com Found: EICAR test file NOT a virus." If any of your virus scanners (clamavmodule,mcafee) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. [root@cheviot4 MailScanner]# Quentin --- PHONE: +44 191 222 8209 Information Systems and Services (ISS), Newcastle University, Newcastle upon Tyne, FAX: +44 191 222 8765 United Kingdom, NE1 7RU. ------------------------------------------------------------------------ >-----Original Message----- >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- >bounces@lists.mailscanner.info] On Behalf Of Randal, Phil >Sent: 28 November 2007 14:10 >To: MailScanner discussion >Subject: RE: MailScanner --lint doesn't check Eicar virus > >Well spotted! > >Confirming that it is broken in 4.65.3 > ># MailScanner --lint >Checking version numbers... >Version number in MailScanner.conf (4.65.3) is correct. > >Your envelope_sender_header in spam.assassin.prefs.conf is correct. > >Checking for SpamAssassin errors (if you use it)... >SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin- >Temp >SpamAssassin reported no errors. >MailScanner.conf says "Virus Scanners = clamavmodule mcafee" >Found these virus scanners installed: clamavmodule, mcafee >======================================================================== >=== >======================================================================== >=== > >If any of your virus scanners (clamavmodule,mcafee) >are not listed there, you should check that they are installed correctly >and that MailScanner is finding them correctly via its >virus.scanners.conf. > >Cheers, > >Phil > >-- >Phil Randal >Network Engineer >Herefordshire Council >Hereford, UK > > > > > >________________________________ > > From: mailscanner-bounces@lists.mailscanner.info >[mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Michael >Mansour > Sent: 28 November 2007 14:03 > To: MailScanner discussion > Subject: MailScanner --lint doesn't check Eicar virus > > > Hi, > > I used to be able to run: > > # MailScanner --lint > Checking version numbers... > Version number in MailScanner.conf (4.65.3) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is >correct. > > Checking for SpamAssassin errors (if you use it)... > SpamAssassin temp dir = /tmp/SpamAssassin-Temp > SpamAssassin reported no errors. > MailScanner.conf says "Virus Scanners = clamavmodule" > Found these virus scanners installed: clamavmodule > ================================================================== >========= > ================================================================== >========= > > If any of your virus scanners (clamavmodule) > are not listed there, you should check that they are installed >correctly > and that MailScanner is finding them correctly via its >virus.scanners.conf. > > and see MailScanner test the Eicar virus between the "===" rows, >but most recently I see this doesn't work anymore. > > Is there something I can check to see why? > > When I run the wrapper: > > /usr/lib/MailScanner/clamav-wrapper /usr /tmp > > it finds clamav and works scans /tmp fine. > > Thanks. > > Michael. > > > > >________________________________ > > Make the switch to the world's best email. Get the new Yahoo!7 >Mail now > >u.yahoo.com/worldsbestmail/spankey/> . -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071130/680e5400/attachment.html From sbanderson at impromed.com Thu Nov 29 15:40:01 2007 From: sbanderson at impromed.com (Scott B. Anderson) Date: Thu Nov 29 15:40:46 2007 Subject: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 In-Reply-To: <832107.56195.qm@web33313.mail.mud.yahoo.com> References: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <832107.56195.qm@web33313.mail.mud.yahoo.com> Message-ID: I can't figure out where the install.sh script is breaking and CPAN itself is installed and updated to the current version. Note: I've installed a lot of the Perl modules/applications by hand using cpan and that seems to work fine. For reference, this is an 8 CPU server with 4 GB ram running FC8 with (as of yesterday) all updates installed. My first thought was that multithreaded compilation (make -j5) was causing the problem so I made it single threaded but the same error occurs. Here's the first couple pages of the output from install.sh: ---- Good. You have the patch command. Good, you have /usr/src/redhat in place. But you are running Fedora, so I am going to force the installation of the Perl modules that normally require it. Good, unpackaged files will not break the build process. Good, far-too-clever Perl requirements will be ignored. Good, you appear to only have 1 copy of Perl installed. I think you are running on RedHat Linux, Mandriva Linux or SuSE Linux. Good, you appear to have the basic development tools installed. This script will pause for a few seconds after each major step, so do not worry if it appears to stop for a while. If you want it to stop so you can scroll back through the output then press Ctrl-S to stop the output and Ctrl-Q to start it again. If this fails due to dependency checks, and you wish to ignore these problems, you can run ./install.sh nodeps Setting Perl5 search path I think your system will build architecture-dependent modules for x86_64 Rebuilding all the Perl RPMs for your version of Perl Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. Oh good, module Net::CIDR version 0.11 is already installed. Attempting to build and install perl-IO-stringy-2.108-1 Installing perl-IO-stringy-2.108-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.23822 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf IO-stringy-2.108 + /bin/gzip -dc /usr/src/redhat/SOURCES/IO-stringy-2.108.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd IO-stringy-2.108 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.23822 + umask 022 + cd /usr/src/redhat/BUILD + cd IO-stringy-2.108 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' + perl Makefile.PL PREFIX=/var/tmp/perl-IO-stringy-root/usr Checking if your kit is complete... Looks good Writing Makefile for IO-stringy + make cp lib/IO/Lines.pm blib/lib/IO/Lines.pm cp lib/IO/ScalarArray.pm blib/lib/IO/ScalarArray.pm cp lib/IO/Stringy.pm blib/lib/IO/Stringy.pm cp lib/IO/Wrap.pm blib/lib/IO/Wrap.pm cp lib/IO/Scalar.pm.html blib/lib/IO/Scalar.pm.html cp lib/IO/AtomicFile.pm blib/lib/IO/AtomicFile.pm cp lib/IO/InnerFile.pm blib/lib/IO/InnerFile.pm cp lib/IO/Scalar.pm blib/lib/IO/Scalar.pm cp lib/IO/WrapTie.pm blib/lib/IO/WrapTie.pm Manifying blib/man3/IO::Lines.3pm Manifying blib/man3/IO::Stringy.3pm Manifying blib/man3/IO::ScalarArray.3pm Manifying blib/man3/IO::Wrap.3pm Manifying blib/man3/IO::AtomicFile.3pm Manifying blib/man3/IO::InnerFile.3pm Manifying blib/man3/IO::Scalar.3pm Manifying blib/man3/IO::WrapTie.3pm + make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/IO_Lines............ok t/IO_Scalar...........ok t/IO_ScalarArray......ok t/IO_WrapTie..........ok t/simple..............ok t/two.................ok All tests successful. Files=6, Tests=116, 0 wallclock secs ( 0.03 usr 0.03 sys + 0.22 cusr 0.16 csys = 0.44 CPU) Result: PASS + exit 0 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.36679 + umask 022 + cd /usr/src/redhat/BUILD + cd IO-stringy-2.108 + LANG=C + export LANG + unset DISPLAY + rm -rf /var/tmp/perl-IO-stringy-root ++ perl -V:installarchlib + eval 'installarchlib='\''/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi'\'';' ++ installarchlib=/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi + mkdir -p /var/tmp/perl-IO-stringy-root//usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi + make install Manifying blib/man3/IO::Lines.3pm Manifying blib/man3/IO::Stringy.3pm Manifying blib/man3/IO::ScalarArray.3pm Manifying blib/man3/IO::Wrap.3pm Manifying blib/man3/IO::AtomicFile.3pm Manifying blib/man3/IO::InnerFile.3pm Manifying blib/man3/IO::Scalar.3pm Manifying blib/man3/IO::WrapTie.3pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::ScalarArray.3pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::InnerFile.3pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::WrapTie.3pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Scalar.3pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Lines.3pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::AtomicFile.3pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Wrap.3pm Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Stringy.3pm Writing /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi/auto/IO-stringy/.packlist Appending installation info to /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod + '[' -x /usr/lib/rpm/brp-compress ']' + /usr/lib/rpm/brp-compress + find /var/tmp/perl-IO-stringy-root/usr -type f -print + sed 's@^/var/tmp/perl-IO-stringy-root@@g' + grep -v perllocal.pod + grep -v '\.packlist' ++ cat IO-stringy-2.108-filelist + '[' '/usr/share/man/man3/IO::InnerFile.3pm.gz /usr/share/man/man3/IO::AtomicFile.3pm.gz /usr/share/man/man3/IO::Scalar.3pm.gz /usr/share/man/man3/IO::ScalarArray.3pm.gz /usr/share/man/man3/IO::Lines.3pm.gz /usr/share/man/man3/IO::Stringy.3pm.gz /usr/share/man/man3/IO::WrapTie.3pm.gz /usr/share/man/man3/IO::Wrap.3pm.gz /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm /usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm /usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm /usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html /usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm /usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 find: debug: No such file or directory // <-- Is this the issue ? + /usr/lib/rpm/check-buildroot /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod:C Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting error: Bad exit status from /var/tmp/rpm-tmp.36679 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.36679 (%install) Missing file /usr/src/redhat/RPMS/noarch/perl-IO-stringy-2.108-1.noarch.rpm. Maybe it did not build correctly? Attempting to build and install perl-MIME-Base64-3.07-1 Installing perl-MIME-Base64-3.07-1.src.rpm Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.74655 ... And so forth. I think the line: find: debug: No such file or directory is where it is blowing up, but I can't (my skills are limited) find the reference to 'debug' and I've installed 'debug' type perl modules but none of them seem to have what the script is looking for. Any help tracking this down would be greatly appreciated. FWIW I'm fairly sure I could install each and every CPAN module manually and install.sh would have little to do but simply install MailScanner. From oliver at linux-kernel.at Thu Nov 29 15:46:00 2007 From: oliver at linux-kernel.at (Oliver Falk) Date: Thu Nov 29 15:46:10 2007 Subject: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 In-Reply-To: References: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <832107.56195.qm@web33313.mail.mud.yahoo.com> Message-ID: <474EDEB8.30401@linux-kernel.at> On 11/29/2007 04:40 PM, Scott B. Anderson wrote: > I can't figure out where the install.sh script is breaking and CPAN itself is installed and updated to the current version. Note: I've installed a lot of the Perl modules/applications by hand using cpan and that seems to work fine. For reference, this is an 8 CPU server with 4 GB ram running FC8 with (as of yesterday) all updates installed. My first thought was that multithreaded compilation (make -j5) was causing the problem so I made it single threaded but the same error occurs. Here's the first couple pages of the output from install.sh: > > ---- > Good. You have the patch command. > > Good, you have /usr/src/redhat in place. > But you are running Fedora, so I am going to force the installation > of the Perl modules that normally require it. > > Good, unpackaged files will not break the build process. > Good, far-too-clever Perl requirements will be ignored. > > Good, you appear to only have 1 copy of Perl installed. > > I think you are running on RedHat Linux, Mandriva Linux or SuSE Linux. > Good, you appear to have the basic development tools installed. > > This script will pause for a few seconds after each major step, > so do not worry if it appears to stop for a while. > If you want it to stop so you can scroll back through the output > then press Ctrl-S to stop the output and Ctrl-Q to start it again. > > > If this fails due to dependency checks, and you wish to ignore > these problems, you can run > ./install.sh nodeps > > Setting Perl5 search path > > I think your system will build architecture-dependent modules for x86_64 > > Rebuilding all the Perl RPMs for your version of Perl > > Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. > > Oh good, module Net::CIDR version 0.11 is already installed. > > Attempting to build and install perl-IO-stringy-2.108-1 > Installing perl-IO-stringy-2.108-1.src.rpm > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.23822 > + umask 022 > + cd /usr/src/redhat/BUILD > + LANG=C > + export LANG > + unset DISPLAY > + cd /usr/src/redhat/BUILD > + rm -rf IO-stringy-2.108 > + /bin/gzip -dc /usr/src/redhat/SOURCES/IO-stringy-2.108.tar.gz > + tar -xf - > + STATUS=0 > + '[' 0 -ne 0 ']' > + cd IO-stringy-2.108 > ++ /usr/bin/id -u > + '[' 0 = 0 ']' > + /bin/chown -Rhf root . > ++ /usr/bin/id -u > + '[' 0 = 0 ']' > + /bin/chgrp -Rhf root . > + /bin/chmod -Rf a+rX,u+w,g-w,o-w . > + exit 0 > Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.23822 > + umask 022 > + cd /usr/src/redhat/BUILD > + cd IO-stringy-2.108 > + LANG=C > + export LANG > + unset DISPLAY > + CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' > + perl Makefile.PL PREFIX=/var/tmp/perl-IO-stringy-root/usr > Checking if your kit is complete... > Looks good > Writing Makefile for IO-stringy > + make > cp lib/IO/Lines.pm blib/lib/IO/Lines.pm > cp lib/IO/ScalarArray.pm blib/lib/IO/ScalarArray.pm > cp lib/IO/Stringy.pm blib/lib/IO/Stringy.pm > cp lib/IO/Wrap.pm blib/lib/IO/Wrap.pm > cp lib/IO/Scalar.pm.html blib/lib/IO/Scalar.pm.html > cp lib/IO/AtomicFile.pm blib/lib/IO/AtomicFile.pm > cp lib/IO/InnerFile.pm blib/lib/IO/InnerFile.pm > cp lib/IO/Scalar.pm blib/lib/IO/Scalar.pm > cp lib/IO/WrapTie.pm blib/lib/IO/WrapTie.pm > Manifying blib/man3/IO::Lines.3pm > Manifying blib/man3/IO::Stringy.3pm > Manifying blib/man3/IO::ScalarArray.3pm > Manifying blib/man3/IO::Wrap.3pm > Manifying blib/man3/IO::AtomicFile.3pm > Manifying blib/man3/IO::InnerFile.3pm > Manifying blib/man3/IO::Scalar.3pm > Manifying blib/man3/IO::WrapTie.3pm > + make test > PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t > t/IO_Lines............ok > t/IO_Scalar...........ok > t/IO_ScalarArray......ok > t/IO_WrapTie..........ok > t/simple..............ok > t/two.................ok > All tests successful. > Files=6, Tests=116, 0 wallclock secs ( 0.03 usr 0.03 sys + 0.22 cusr 0.16 csys = 0.44 CPU) > Result: PASS > + exit 0 > Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.36679 > + umask 022 > + cd /usr/src/redhat/BUILD > + cd IO-stringy-2.108 > + LANG=C > + export LANG > + unset DISPLAY > + rm -rf /var/tmp/perl-IO-stringy-root > ++ perl -V:installarchlib > + eval 'installarchlib='\''/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi'\'';' > ++ installarchlib=/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > + mkdir -p /var/tmp/perl-IO-stringy-root//usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > + make install > Manifying blib/man3/IO::Lines.3pm > Manifying blib/man3/IO::Stringy.3pm > Manifying blib/man3/IO::ScalarArray.3pm > Manifying blib/man3/IO::Wrap.3pm > Manifying blib/man3/IO::AtomicFile.3pm > Manifying blib/man3/IO::InnerFile.3pm > Manifying blib/man3/IO::Scalar.3pm > Manifying blib/man3/IO::WrapTie.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::ScalarArray.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::InnerFile.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::WrapTie.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Scalar.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Lines.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::AtomicFile.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Wrap.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Stringy.3pm > Writing /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi/auto/IO-stringy/.packlist > Appending installation info to /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod > + '[' -x /usr/lib/rpm/brp-compress ']' > + /usr/lib/rpm/brp-compress > + find /var/tmp/perl-IO-stringy-root/usr -type f -print > + sed 's@^/var/tmp/perl-IO-stringy-root@@g' > + grep -v perllocal.pod > + grep -v '\.packlist' > ++ cat IO-stringy-2.108-filelist > + '[' '/usr/share/man/man3/IO::InnerFile.3pm.gz > /usr/share/man/man3/IO::AtomicFile.3pm.gz > /usr/share/man/man3/IO::Scalar.3pm.gz > /usr/share/man/man3/IO::ScalarArray.3pm.gz > /usr/share/man/man3/IO::Lines.3pm.gz > /usr/share/man/man3/IO::Stringy.3pm.gz > /usr/share/man/man3/IO::WrapTie.3pm.gz > /usr/share/man/man3/IO::Wrap.3pm.gz > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > /usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > /usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory // <-- Is this the issue ? > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod:C > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > Missing file /usr/src/redhat/RPMS/noarch/perl-IO-stringy-2.108-1.noarch.rpm. > Maybe it did not build correctly? > > Attempting to build and install perl-MIME-Base64-3.07-1 > Installing perl-MIME-Base64-3.07-1.src.rpm > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.74655 > ... > > And so forth. I think the line: find: debug: No such file or directory is where it is blowing up, but I can't (my skills are limited) find the reference to 'debug' and I've installed 'debug' type perl modules but none of them seem to have what the script is looking for. Any help tracking this down would be greatly appreciated. FWIW I'm fairly sure I could install each and every CPAN module manually and install.sh would have little to do but simply install MailScanner. Try setting strict=false instead of strict=true in /usr/lib/rpm/find-debuginfo.sh. -of From davejones70 at gmail.com Thu Nov 29 19:51:07 2007 From: davejones70 at gmail.com (Dave Jones) Date: Thu Nov 29 19:51:14 2007 Subject: Need help with notifications not working Message-ID: <67a55ed50711291151s553f6c6ep8862cd15e3cd0f9e@mail.gmail.com> Anyone have any ideas why the only notifications are to the postmaster? No users are getting notifications for any of my domains I have listed in my rules file. How do I troubleshoot this on a busy server? MailScanner.conf ============== Notify Senders = yes Notify Senders Of Viruses = no Notify Senders Of Blocked Filenames Or Filetypes = %rules-dir%/notification.rules Notify Senders Of Blocked Size Attachments = %rules-dir%/notification.rules Notify Senders Of Other Blocked Content = %rules-dir%/notification.rules /etc/MailScanner/rules/notification.rules From: *@domain.com yes From: default no -- Dave Jones -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/93aac495/attachment.html From ssilva at sgvwater.com Thu Nov 29 20:48:12 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 29 20:48:41 2007 Subject: Black lists and blocked good users - sendmail, SA and MailScanner In-Reply-To: <474E626A.7070206@filmakademie.de> References: <474E626A.7070206@filmakademie.de> Message-ID: on 11/28/2007 10:55 PM G?tz Reinicke spake the following: > Hi, > > I hope, somewone can point me into the right direction. > > Recently I added two blacklist-checks to our sendmail config: spamhaus > zen and the list from the german computer magazin IX. > > The good news: Spam has been about 70%-80%, now it is about 20%-30%. The > bad news: A lot of our users have problems sendig mails from there dial > up DSL or mobile phone network connections. I'v looked up there IPs and > all where on the Black lists or the PBL from spamhaus. So was my Arcor > IP last night :-) > > The information from spamhaus is, to use SMTP Authentification > (http://www.spamhaus.org/pbl/query/PBL042952). > > I thought, we do use TLS and smtp auth already, so I thought, users > allowed to log in will be allowd to send. But I got the errormessage > using Thunderbird 2, that our mailserver didn't support STARTTLS in > combination with EHLO. > > Outlook-users do get the message, that our server didn't support SSL, > the server error messagt is 250. > > I did some hours of googling and checked some sendmail docs, but can't > find the error or missing config settinges. > > So where to start/how to debug this problem? What may I check? > > Thanks for any help and hint! > > Best regards > > G?tz Reinicke > goetz.reinicke@filmakademie.de > > > > Did you follow a howto for your OS? You need to carefully check your sendmail.mc for proper entries and paths to certs and rebuild sendmail.cf if you change anything. You should have the following, edited to fix your paths; define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl define(`confCACERT_PATH', `/etc/mail/certs')dnl define(`confCACERT', `/etc/mail/certs/cacert.pem')dnl define(`confSERVER_CERT', `/etc/mail/certs/sendmail.pem')dnl define(`confSERVER_KEY', `/etc/mail/certs/sendmail.pem')dnl define(`confCLIENT_CERT', `/etc/mail/certs/sendmail.pem')dnl define(`confCLIENT_KEY', `/etc/mail/certs/sendmail.pem')dnl define(`confAUTH_OPTIONS', `A p y')dnl You don't have to match these auth_mechanisms, but both lines need the same options. Do a sendmail -d0.1 -bv root and see if you have STARTTLS and SASLv2. If you need more help, post your OS info and we can find a more detailed howto. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From igalvarez at gmail.com Thu Nov 29 21:44:33 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Thu Nov 29 21:44:40 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> Message-ID: <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> Well, I have to tell you I'm continuing with the same problem with too many messages in HOLD folder and a terrible delay (sometimes 1 hour) and because the way my company works it's not allowed to keep messages for more than 10 min... I have to remember that when I disable spamassassin in mailscanner everything is fine... There's no dough the cause of my problem is the high traffic in my connection to Internet and SA and DNS timeouts. I was thinking in change SA for another anti-spam ..I read about Dspam ( www.nuclearelephant.com).. and I want to ask the list if Dspam can be integrated with mailscanner...Any ideas? thanks in advance regards Israel On Nov 28, 2007 6:42 AM, Glenn Steen wrote: > On 28/11/2007, Michael Mansour wrote: > > Hi, > > > > Glenn Steen wrote: > > On 27/11/2007, Israel Garcia wrote: > > > On Nov 27, 2007 4:36 PM, Glenn Steen wrote: > > > > > > > > > > > On 27/11/2007, Israel Garcia wrote: > > > > > > > On Nov 27, 2007 4:01 PM, UxBoD wrote: > > > > > > > > > > > So when disabling RBLs the problem disappears. > > > > > > > > > > No, the problem disapear when I turn off spamassassin completily > in > > > > > mailscanner config file. Sometimes I enable Spamassassin check but > > > disable > > > > > razor2, DCC and pyzor in spam.assassin.prefs.conf and it work > better.. > > > BUT, > > > > > if I fully enalbe spamassassin with DCC, razor2 and pyzor the load > > > average > > > > > begins to increase and thousands of mails begins comes to HOLD > folder > > .. > > > Do > > > > > you think it's time to split the load in two servers? I mean > something > > > like > > > > > this: > > > > > Router > > > > > NAT rules to SMTP farm serves. > > > > > I > > > > > I > > > > > ______________________________ > > > > > I I > > > > > Server2 SMTP Server1 SMTP > > > > > Mailscanner/sa Mailscanner/sa > > > > > > > > If the bottleneck is network-related/lookups.... this will buy you > > > > nothing, unfortunately. > > > I know, but how am I sure this is the cause of my problem? > > > > > :-) .... when you remove some load and the problem goes away:-):-). > > How much memory/swap is used when these messages get queued and not > > processed? > > > > I'm currently trouble-shooting a problem which does the same thing and > have > > tracked it down to the memory running out ie. mostly swap being used > while > > CPU's aren't (load average goes to 12 and 13 because of the heavy swap > > usage). > > > > I'm organising more memory for the server at the moment, which should > > resolve the issue. > > > > Regards, > > > > Michael. > > Good point. On the other hand, you could also look at a) Why does the > memory run out, and b) what can you do about it. > If your MailScanner children eat up too much, one thing could be to > lower the amount of children. If the childrens workers hang around > waiting for slow responses, you might need look more closely on why > that is... and correct that (in this case more RAM could be a very > good aid, but still a band.aid where an amputation would be > better;-):-). > > Anyway, I'm sure you know where to look, what to do:). > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071129/9281bcc8/attachment.html From ssilva at sgvwater.com Thu Nov 29 22:17:21 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 29 22:17:54 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> Message-ID: on 11/29/2007 1:44 PM Israel Garcia spake the following: > Well, I have to tell you I'm continuing with the same problem with too > many messages in HOLD folder and a terrible delay (sometimes 1 hour) and > because the way my company works it's not allowed to keep messages for > more than 10 min... I have to remember that when I disable spamassassin > in mailscanner everything is fine... There's no dough the cause of my > problem is the high traffic in my connection to Internet and SA and DNS > timeouts. I was thinking in change SA for another anti-spam ..I read > about Dspam ( www.nuclearelephant.com > ).. and I want to ask the list if Dspam > can be integrated with mailscanner...Any ideas? Have you tried all the ways of slowing your bandwidth use for mail? Limiting connections, blocking spamming IP's at the mta or firewall, blacklists at mta, etc? Dns shouldn't need all that much bandwidth, as you can run many lookups over a dialup connection. Maybe you need to slow some of the other bandwidth uses at your site. Maybe use QOS or other traffic shaping to leave more headroom for your critical apps. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From glenn.steen at gmail.com Thu Nov 29 22:21:18 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Nov 29 22:21:22 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> Message-ID: <223f97700711291421x6566b9a9wbb08422bf1182bd2@mail.gmail.com> On 29/11/2007, Israel Garcia wrote: > Well, I have to tell you I'm continuing with the same problem with too many > messages in HOLD folder and a terrible delay (sometimes 1 hour) and because > the way my company works it's not allowed to keep messages for more than 10 > min... I have to remember that when I disable spamassassin in mailscanner > everything is fine... There's no dough the cause of my problem is the high > traffic in my connection to Internet and SA and DNS timeouts. I was thinking > in change SA for another anti-spam ..I read about Dspam ( > www.nuclearelephant.com).. and I want to ask the list if Dspam can be > integrated with mailscanner...Any ideas? There's been talk about it, but IIRC there has never been a full ACK on it being done. There's no chance of upgrading your lines a tad? Or just plain killing off all .... non-essential.... communication (like emule:-)? Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From ssilva at sgvwater.com Thu Nov 29 22:27:12 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 29 22:27:58 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711291421x6566b9a9wbb08422bf1182bd2@mail.gmail.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> <223f97700711291421x6566b9a9wbb08422bf1182bd2@mail.gmail.com> Message-ID: on 11/29/2007 2:21 PM Glenn Steen spake the following: > On 29/11/2007, Israel Garcia wrote: >> Well, I have to tell you I'm continuing with the same problem with too many >> messages in HOLD folder and a terrible delay (sometimes 1 hour) and because >> the way my company works it's not allowed to keep messages for more than 10 >> min... I have to remember that when I disable spamassassin in mailscanner >> everything is fine... There's no dough the cause of my problem is the high >> traffic in my connection to Internet and SA and DNS timeouts. I was thinking >> in change SA for another anti-spam ..I read about Dspam ( >> www.nuclearelephant.com).. and I want to ask the list if Dspam can be >> integrated with mailscanner...Any ideas? > > There's been talk about it, but IIRC there has never been a full ACK > on it being done. > > There's no chance of upgrading your lines a tad? Or just plain killing > off all .... non-essential.... communication (like emule:-)? > > Cheers -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Thu Nov 29 22:43:24 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Thu Nov 29 22:45:11 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> <223f97700711291421x6566b9a9wbb08422bf1182bd2@mail.gmail.com> Message-ID: on 11/29/2007 2:27 PM Scott Silva spake the following: > on 11/29/2007 2:21 PM Glenn Steen spake the following: >> On 29/11/2007, Israel Garcia wrote: >>> Well, I have to tell you I'm continuing with the same problem with >>> too many >>> messages in HOLD folder and a terrible delay (sometimes 1 hour) and >>> because >>> the way my company works it's not allowed to keep messages for more >>> than 10 >>> min... I have to remember that when I disable spamassassin in >>> mailscanner >>> everything is fine... There's no dough the cause of my problem is the >>> high >>> traffic in my connection to Internet and SA and DNS timeouts. I was >>> thinking >>> in change SA for another anti-spam ..I read about Dspam ( >>> www.nuclearelephant.com).. and I want to ask the list if Dspam can be >>> integrated with mailscanner...Any ideas? >> >> There's been talk about it, but IIRC there has never been a full ACK >> on it being done. >> >> There's no chance of upgrading your lines a tad? Or just plain killing >> off all .... non-essential.... communication (like emule:-)? >> >> Cheers > > Sorry, misfire! -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From gmane at tippingmar.com Fri Nov 30 00:17:00 2007 From: gmane at tippingmar.com (Mark Nienberg) Date: Fri Nov 30 00:17:24 2007 Subject: install-Clam-SA and clamd Message-ID: A buddy of mine is doing a fresh install of MailScanner on a Centos 5 box and he reported to me that when he ran the install-Clam-SA script and it gave him the option to install Dag's rpms instead he did so. But then when he reran the install script and told it that clam was already installed, it tried to build Mail::ClamAV in addition to all the SA stuff. The build of Mail::ClamAV failed, I assume because he did not install Dag's clamav-devel rpm. The script only says to install clamav, clamav-db, and clamd from Dag. I think it would be best to skip the build of Mail::ClamAV if the user says that clamav is already installed. Or else tell the user to install the devel package too. Mark From ssilva at sgvwater.com Fri Nov 30 00:58:56 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 30 01:01:49 2007 Subject: install-Clam-SA and clamd In-Reply-To: References: Message-ID: on 11/29/2007 4:17 PM Mark Nienberg spake the following: > A buddy of mine is doing a fresh install of MailScanner on a Centos 5 > box and he reported to me that when he ran the install-Clam-SA script > and it gave him the option to install Dag's rpms instead he did so. But > then when he reran the install script and told it that clam was already > installed, it tried to build Mail::ClamAV in addition to all the SA stuff. > > The build of Mail::ClamAV failed, I assume because he did not install > Dag's clamav-devel rpm. The script only says to install clamav, > clamav-db, and clamd from Dag. > > I think it would be best to skip the build of Mail::ClamAV if the user > says that clamav is already installed. Or else tell the user to install > the devel package too. > > Mark > You should have him look at the message with subject; Experimental repository for RHEL 5 / Centos 5 http://thread.gmane.org/gmane.mail.virus.mailscanner/58545 -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From hvdkooij at vanderkooij.org Fri Nov 30 07:00:49 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Fri Nov 30 07:01:15 2007 Subject: install-Clam-SA and clamd In-Reply-To: References: Message-ID: <474FB521.6040704@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Silva wrote: > on 11/29/2007 4:17 PM Mark Nienberg spake the following: >> A buddy of mine is doing a fresh install of MailScanner on a Centos 5 >> box and he reported to me that when he ran the install-Clam-SA script >> and it gave him the option to install Dag's rpms instead he did so. >> But then when he reran the install script and told it that clam was >> already installed, it tried to build Mail::ClamAV in addition to all >> the SA stuff. >> >> The build of Mail::ClamAV failed, I assume because he did not install >> Dag's clamav-devel rpm. The script only says to install clamav, >> clamav-db, and clamd from Dag. >> >> I think it would be best to skip the build of Mail::ClamAV if the user >> says that clamav is already installed. Or else tell the user to >> install the devel package too. >> >> Mark >> > You should have him look at the message with subject; > Experimental repository for RHEL 5 / Centos 5 > http://thread.gmane.org/gmane.mail.virus.mailscanner/58545 I just wrote a manual page yesterday for Jules so can have a YUM repository up and running ready for the next release if he so desires. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHT7UeBvzDRVjxmYERAnajAKCQDpCGCEfUTk+ZEutv3JRO/mSQCwCgrC2a NfJGzMtgPuOtch+IFOJbMsQ= =15AI -----END PGP SIGNATURE----- From goetz.reinicke at filmakademie.de Fri Nov 30 07:02:44 2007 From: goetz.reinicke at filmakademie.de (=?ISO-8859-15?Q?G=F6tz_Reinicke?=) Date: Fri Nov 30 07:02:49 2007 Subject: Black lists and blocked good users - sendmail, SA and MailScanner - solved In-Reply-To: <474E626A.7070206@filmakademie.de> References: <474E626A.7070206@filmakademie.de> Message-ID: <474FB594.7070804@filmakademie.de> G?tz Reinicke schrieb: > Hi, > > I hope, somewone can point me into the right direction. > > Recently I added two blacklist-checks to our sendmail config: spamhaus > zen and the list from the german computer magazin IX. > > The good news: Spam has been about 70%-80%, now it is about 20%-30%. The > bad news: A lot of our users have problems sendig mails from there dial > up DSL or mobile phone network connections. I'v looked up there IPs and > all where on the Black lists or the PBL from spamhaus. So was my Arcor > IP last night :-) > > The information from spamhaus is, to use SMTP Authentification > (http://www.spamhaus.org/pbl/query/PBL042952). > > I thought, we do use TLS and smtp auth already, so I thought, users > allowed to log in will be allowd to send. But I got the errormessage > using Thunderbird 2, that our mailserver didn't support STARTTLS in > combination with EHLO. > > Outlook-users do get the message, that our server didn't support SSL, > the server error messagt is 250. One problem is that the mailclients report errormessages which don't point directly to the problem. The DNSBL-Check is done bevor the authentificationcheck. The solution is to add FEATURE(delay_checks) to the sendmail config. /G?tz -- G?tz Reinicke IT Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke@filmakademie.de Filmakademie Baden-W?rttemberg GmbH Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Dr. Christoph Palmer, MdL, Minister a.D. Gesch?ftsf?hrer: Prof. Thomas Schadt From martinh at solidstatelogic.com Fri Nov 30 08:48:11 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Fri Nov 30 08:48:25 2007 Subject: Need help with notifications not working In-Reply-To: <67a55ed50711291151s553f6c6ep8862cd15e3cd0f9e@mail.gmail.com> Message-ID: <4d1595caa43a574898bd4bfd53f0e7ce@solidstatelogic.com> Dave Last line should prob be.. FromOrTo: default no -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Dave Jones > Sent: 29 November 2007 19:51 > To: mailscanner > Subject: Need help with notifications not working > > Anyone have any ideas why the only notifications are to the postmaster? > No users are getting notifications for any of my domains I have listed in > my rules file. How do I troubleshoot this on a busy server? > > MailScanner.conf > ============== > Notify Senders = yes > Notify Senders Of Viruses = no > Notify Senders Of Blocked Filenames Or Filetypes = %rules- > dir%/notification.rules > Notify Senders Of Blocked Size Attachments = %rules- > dir%/notification.rules > Notify Senders Of Other Blocked Content = %rules-dir%/notification.rules > > /etc/MailScanner/rules/notification.rules > From: *@domain.com yes > From: default no > > > -- > Dave Jones ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From martinh at solidstatelogic.com Fri Nov 30 09:16:26 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Fri Nov 30 09:16:38 2007 Subject: OT: ISP for dsl in Paris Message-ID: <6ada500a35d0d74392a9263a0c741acc@solidstatelogic.com> All I know this is OT, but I'm looking for recommendations for a business level ISP for our Paris office. Current ISP (easynet) has been awful and is currently insisting on routing all Paris->UK office packets via Level 3 in San Jose! I've confirmed this is 'local' to Easynet and they don't seem to be to find the problem. Any recommendations for an ISP with a clue greatly appreciated. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From john at tradoc.fr Fri Nov 30 09:33:57 2007 From: john at tradoc.fr (John Wilcock) Date: Fri Nov 30 09:34:05 2007 Subject: OT: ISP for dsl in Paris In-Reply-To: <6ada500a35d0d74392a9263a0c741acc@solidstatelogic.com> References: <6ada500a35d0d74392a9263a0c741acc@solidstatelogic.com> Message-ID: <474FD905.7070709@tradoc.fr> Martin.Hepworth wrote: > All > > I know this is OT, but I'm looking for recommendations for a business > level ISP for our Paris office. > > Current ISP (easynet) has been awful and is currently insisting on > routing all Paris->UK office packets via Level 3 in San Jose! I've > confirmed this is 'local' to Easynet and they don't seem to be to > find the problem. > > Any recommendations for an ISP with a clue greatly appreciated. Without hesitation, Nerim. They're a small ISP, targeted at business customers needing ADSL or SDSL, and most importantly have serious technical clue. John. -- -- Over 3000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From prandal at herefordshire.gov.uk Fri Nov 30 10:06:41 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Fri Nov 30 10:06:54 2007 Subject: MailScanner --lint doesn't check Eicar virus - OK here! In-Reply-To: <4165CF7A7F12DE4B96622CCBB90586470C59A987@largo.campus.ncl.ac.uk> References: <4165CF7A7F12DE4B96622CCBB90586470C59A80A@largo.campus.ncl.ac.uk><250402.67610.qm@web33303.mail.mud.yahoo.com><7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <4165CF7A7F12DE4B96622CCBB90586470C59A987@largo.campus.ncl.ac.uk> Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EAA2E@HC-MBX02.herefordshire.gov.uk> Unfortunately for me, it's working fine on my Centos 5 x86 test box, but not on my CentOS 5 x64 production boxes. Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of Quentin Campbell > Sent: 29 November 2007 14:22 > To: MailScanner discussion > Subject: RE: MailScanner --lint doesn't check Eicar virus - OK here! > > Phil > > A 'cat /etc/redhat-release' gives "Red Hat Enterprise Linux > AS release 4 > (Nahant Update 6)". > > The command 'perl -v' gives: > > Summary of my perl5 (revision 5 version 8 subversion 5) configuration: > Platform: > osname=linux, osvers=2.6.9-22.18.bz155725.elsmp, > archname=i386-linux-thread-multi > uname='linux hs20-bc1-4.build.redhat.com > 2.6.9-22.18.bz155725.elsmp > #1 smp thu nov 17 15:34:08 est 2005 i686 i686 i386 gnulinux ' > config_args='-des -Doptimize=-O2 -g -pipe -m32 -march=i386 > -mtune=pentium4 -Dversion=5.8.5 -Dmyhostname=localhost > -Dperladmin=root@localhost -Dcc=gcc -Dcf_by=Red Hat, Inc. > -Dinstallprefix=/usr -Dprefix=/usr -Darchname=i386-linux > -Dvendorprefix=/usr -Dsiteprefix=/usr -Duseshrplib -Dusethreads > -Duseithreads -Duselargefiles -Dd_dosuid -Dd_semctl_semun -Di_db > -Ui_ndbm -Di_gdbm -Di_shadow -Di_syslog -Dman3ext=3pm -Duseperlio > -Dinstallusrbinperl -Ubincompat5005 -Uversiononly > -Dpager=/usr/bin/less > -isr -Dinc_version_list=5.8.4 5.8.3 5.8.2 5.8.1 5.8.0' > hint=recommended, useposix=true, d_sigaction=define > usethreads=define use5005threads=undef useithreads=define > usemultiplicity=define > useperlio=define d_sfio=undef uselargefiles=define usesocks=undef > use64bitint=undef use64bitall=undef uselongdouble=undef > usemymalloc=n, bincompat5005=undef > Compiler: > cc='gcc', ccflags ='-D_REENTRANT -D_GNU_SOURCE -DDEBUGGING > -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE > -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm', > optimize='-O2 -g -pipe -m32 -march=i386 -mtune=pentium4', > cppflags='-D_REENTRANT -D_GNU_SOURCE -DDEBUGGING > -fno-strict-aliasing -pipe -I/usr/local/include -I/usr/include/gdbm' > ccversion='', gccversion='3.4.6 20060404 (Red Hat 3.4.6-2)', > gccosandvers='' > intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234 > d_longlong=define, longlongsize=8, d_longdbl=define, > longdblsize=12 > ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', > lseeksize=8 > alignbytes=4, prototype=define > Linker and Libraries: > ld='gcc', ldflags =' -L/usr/local/lib' > libpth=/usr/local/lib /lib /usr/lib > libs=-lresolv -lnsl -lgdbm -ldb -ldl -lm -lcrypt -lutil -lpthread > -lc > perllibs=-lresolv -lnsl -ldl -lm -lcrypt -lutil -lpthread -lc > libc=/lib/libc-2.3.4.so, so=so, useshrplib=true, > libperl=libperl.so > gnulibc_version='2.3.4' > Dynamic Linking: > dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-Wl,-E > -Wl,-rpath,/usr/lib/perl5/5.8.5/i386-linux-thread-multi/CORE' > cccdlflags='-fPIC', lddlflags='-shared -L/usr/local/lib' > > > Characteristics of this binary (from libperl): > Compile-time options: DEBUGGING MULTIPLICITY USE_ITHREADS > USE_LARGE_FILES PERL_IMPLICIT_CONTEXT > Built under linux > Compiled at Jul 24 2006 18:28:10 > @INC: > /usr/lib/perl5/5.8.5/i386-linux-thread-multi > /usr/lib/perl5/5.8.5 > /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi > /usr/lib/perl5/site_perl/5.8.5 > /usr/lib/perl5/site_perl/5.8.4 > /usr/lib/perl5/site_perl/5.8.3 > /usr/lib/perl5/site_perl/5.8.2 > /usr/lib/perl5/site_perl/5.8.1 > /usr/lib/perl5/site_perl/5.8.0 > /usr/lib/perl5/site_perl > /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi > /usr/lib/perl5/vendor_perl/5.8.5 > /usr/lib/perl5/vendor_perl/5.8.4 > /usr/lib/perl5/vendor_perl/5.8.3 > /usr/lib/perl5/vendor_perl/5.8.2 > /usr/lib/perl5/vendor_perl/5.8.1 > /usr/lib/perl5/vendor_perl/5.8.0 > /usr/lib/perl5/vendor_perl > . > Hope that info is of help. > > Quentin > > >-----Original Message----- > >From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > >bounces@lists.mailscanner.info] On Behalf Of Randal, Phil > >Sent: 29 November 2007 13:58 > >To: MailScanner discussion > >Subject: RE: MailScanner --lint doesn't check Eicar virus - OK here! > > > >Michael, > > > >Which version of RedHat are you running? > > > >I see the problem on CentOS 5.0. > > > >It may a side effect of force-installing the perl update. > > > >It would be nice to know what's actually happening and what > the fix is, > >though. I'm not a perl guru so it's beyond me. > > > >Cheers, > > > >Phil > >-- > >Phil Randal > >Network Engineer > >Herefordshire Council > >Hereford, UK > > > > > > > >________________________________ > > > > From: mailscanner-bounces@lists.mailscanner.info > >[mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of > Michael > >Mansour > > Sent: 29 November 2007 06:13 > > To: MailScanner discussion > > Subject: RE: MailScanner --lint doesn't check Eicar virus - OK > >here! > > > > > > Hi Quentin, > > > > Quentin Campbell wrote: > > > > Phil > > > > It appears to work here. I get a different result to > you: > > > > > > This is very strange then. > > > > This begs the question, in what cases does this --lint fail with > >the Eicar virus check? > > > > I'm pretty sure I saw the test pass with Eicar in there when I > >upgraded to MailScanner 4.65.3 (not certain but pretty > sure), but only > >recently noticed that Eicar was no longer there. This may > have happened > >after some perl errata upgrades on Linux recently released > by Red Hat. > > > > I'm just interested to know now that if this is the case, then > was > >would cause that symptom and is it causing other problems I > can't see? > > > > Michael. > > > > > > [root@cheviot4 MailScanner]# MailScanner --lint > > Checking version numbers... > > Version number in MailScanner.conf (4.65.3) is correct. > > > > Your envelope_sender_header in spam.assassin.prefs.conf > is > >correct. > > > > Checking for SpamAssassin errors (if you use it)... > > SpamAssassin temp dir = > >/var/spool/MailScanner/incoming/SpamAssassin-Temp > > SpamAssassin reported no errors. > > MailScanner.conf says "Virus Scanners = clamavmodule > mcafee" > > Found these virus scanners installed: clamavmodule, > mcafee > > > > > ================================================================== > >========= > > > > > ================================================================== > >========= > > Virus Scanner test reports: > > ClamAVModule said "eicar.com was infected: Eicar-Test- > >Signature" > > McAfee said "/1/eicar.com Found: EICAR test file NOT a > >virus." > > > > If any of your virus scanners (clamavmodule,mcafee) > > are not listed there, you should check that they are > >installed correctly > > and that MailScanner is finding them correctly via its > >virus.scanners.conf. > > [root@cheviot4 MailScanner]# > > > > Quentin > > --- > > PHONE: +44 191 222 8209 Information Systems and > Services > >(ISS), > > Newcastle University, > > Newcastle upon Tyne, > > FAX: +44 191 222 8765 United Kingdom, NE1 7RU. > > > ------------------------------------------------------------ > >------------ > > > > > > > > > > > > >-----Original Message----- > > >From: mailscanner-bounces@lists.mailscanner.info > >[mailto:mailscanner- > > >bounces@lists.mailscanner.info] On Behalf Of Randal, > Phil > > >Sent: 28 November 2007 14:10 > > >To: MailScanner discussion > > >Subject: RE: MailScanner --lint doesn't check Eicar > virus > > > > > >Well spotted! > > > > > >Confirming that it is broken in 4.65.3 > > > > > ># MailScanner --lint > > >Checking version numbers... > > >Version number in MailScanner.conf (4.65.3) is correct. > > > > > >Your envelope_sender_header in spam.assassin.prefs.conf > is > >correct. > > > > > >Checking for SpamAssassin errors (if you use it)... > > >SpamAssassin temp dir = > >/var/spool/MailScanner/incoming/SpamAssassin- > > >Temp > > >SpamAssassin reported no errors. > > >MailScanner.conf says "Virus Scanners = clamavmodule > >mcafee" > > >Found these virus scanners installed: clamavmodule, > mcafee > > > > > >================================================================= > >======= > > >=== > > > > > >================================================================= > >======= > > >=== > > > > > >If any of your virus scanners (clamavmodule,mcafee) > > >are not listed there, you should check that they are > >installed correctly > > >and that MailScanner is finding them correctly via its > > >virus.scanners.conf. > > > > > >Cheers, > > > > > >Phil > > > > > >-- > > >Phil Randal > > >Network Engineer > > >Herefordshire Council > > >Hereford, UK > > > > > > > > > > > > > > > > > >________________________________ > > > > > > From: mailscanner-bounces@lists.mailscanner.info > > >[mailto:mailscanner-bounces@lists.mailscanner.info] On > >Behalf Of Michael > > >Mansour > > > Sent: 28 November 2007 14:03 > > > To: MailScanner discussion > > > Subject: MailScanner --lint doesn't check Eicar virus > > > > > > > > > Hi, > > > > > > I used to be able to run: > > > > > > # MailScanner --lint > > > Checking version numbers... > > > Version number in MailScanner.conf (4.65.3) is > correct. > > > > > > Your envelope_sender_header in > spam.assassin.prefs.conf is > > >correct. > > > > > > Checking for SpamAssassin errors (if you use it)... > > > SpamAssassin temp dir = /tmp/SpamAssassin-Temp > > > SpamAssassin reported no errors. > > > MailScanner.conf says "Virus Scanners = clamavmodule" > > > Found these virus scanners installed: clamavmodule > > > > >================================================================== > > >========= > > > > >================================================================== > > >========= > > > > > > If any of your virus scanners (clamavmodule) > > > are not listed there, you should check that they are > >installed > > >correctly > > > and that MailScanner is finding them correctly via its > > >virus.scanners.conf. > > > > > > and see MailScanner test the Eicar virus between the > "===" > >rows, > > >but most recently I see this doesn't work anymore. > > > > > > Is there something I can check to see why? > > > > > > When I run the wrapper: > > > > > > /usr/lib/MailScanner/clamav-wrapper /usr /tmp > > > > > > it finds clamav and works scans /tmp fine. > > > > > > Thanks. > > > > > > Michael. > > > > > > > > > > > > > > >________________________________ > > > > > > Make the switch to the world's best email. Get the new > >Yahoo!7 > > >Mail now > > > > > >u.yahoo.com/worldsbestmail/spankey/> . > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read > http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the > >website! > > > > > > > > > >________________________________ > > > > Make the switch to the world's best email. Get the new Yahoo!7 > >Mail now > > y/*http:// > a > >u.yahoo.com/worldsbestmail/spankey/> . > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From igalvarez at gmail.com Fri Nov 30 13:27:53 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Fri Nov 30 13:27:56 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> Message-ID: <194a2c240711300527j1fb86091x27ccef2d4b904fd7@mail.gmail.com> On Nov 29, 2007 5:17 PM, Scott Silva wrote: > on 11/29/2007 1:44 PM Israel Garcia spake the following: > > Well, I have to tell you I'm continuing with the same problem with too > > many messages in HOLD folder and a terrible delay (sometimes 1 hour) and > > because the way my company works it's not allowed to keep messages for > > more than 10 min... I have to remember that when I disable spamassassin > > in mailscanner everything is fine... There's no dough the cause of my > > problem is the high traffic in my connection to Internet and SA and DNS > > timeouts. I was thinking in change SA for another anti-spam ..I read > > about Dspam ( www.nuclearelephant.com > > ).. and I want to ask the list if Dspam > > can be integrated with mailscanner...Any ideas? > Have you tried all the ways of slowing your bandwidth use for mail? Hi Scott, I have a lot of services (HTTP/FTP) which uses the same link, I use a cisco 1721 router which is almost running out of memory and I dont really know if my IOS permit some kind of QoS... I've been searching on Internet but with no result about this issue... > > Limiting connections, blocking spamming IP's at the mta or firewall, > blacklists at mta, etc? I have this on my main.cf: smtpd_helo_required = yes disable_vrfy_command = yes strict_rfc821_envelopes = yes invalid_hostname_reject_code = 554 multi_recipient_bounce_reject_code = 554 non_fqdn_reject_code = 554 relay_domains_reject_code = 554 unknown_address_reject_code = 554 unknown_client_reject_code = 554 unknown_hostname_reject_code = 554 unknown_local_recipient_reject_code = 554 unknown_relay_recipient_reject_code = 554 unknown_sender_reject_code = 554 unknown_virtual_alias_reject_code = 554 unknown_virtual_mailbox_reject_code = 554 unverified_recipient_reject_code = 554 unverified_sender_reject_code = 554 smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/listanegra reject_non_fqdn_sender reject_unknown_sender_domain permit smtpd_recipient_restrictions = permit_auth_destination permit_mynetworks reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_destination reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_invalid_hostname, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_sasl_authenticated, reject_unauth_destination, reject_rbl_client zen.spamhaus.org reject_rbl_client list.dsbl.org reject_rhsbl_sender dsn.rfc-ignorant.org permit smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce, permit smtpd_error_sleep_time = 60 smtpd_soft_error_limit = 60 smtpd_hard_error_limit = 10 I want you to know one of my main services is mail, so I have to be careful with this RBLs rules on MTA because I remember I put some rules (reject_rbl_client ) on smtpd_client_restrictions and it drop me a lot of valid mail... > > > Dns shouldn't need all that much bandwidth, as you can run many lookups > over a > dialup connection. Maybe you need to slow some of the other bandwidth uses > at > your site. Maybe use QOS or other traffic shaping to leave more headroom > for > your critical apps. Scott, I know I have to solve my problem somehow, but a lot of things don't depend on me..I'd like to search all the ways to stop spam and keep my mail safe.. thanks for your answer.. regards Israel > > -- > MailScanner is like deodorant... > You hope everybody uses it, and > you notice quickly if they don't!!!! > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071130/64044191/attachment.html From igalvarez at gmail.com Fri Nov 30 13:34:41 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Fri Nov 30 13:34:43 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <223f97700711291421x6566b9a9wbb08422bf1182bd2@mail.gmail.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> <223f97700711291421x6566b9a9wbb08422bf1182bd2@mail.gmail.com> Message-ID: <194a2c240711300534h461aae0ew6094751ee4bba4f7@mail.gmail.com> On Nov 29, 2007 5:21 PM, Glenn Steen wrote: > On 29/11/2007, Israel Garcia wrote: > > Well, I have to tell you I'm continuing with the same problem with too > many > > messages in HOLD folder and a terrible delay (sometimes 1 hour) and > because > > the way my company works it's not allowed to keep messages for more than > 10 > > min... I have to remember that when I disable spamassassin in > mailscanner > > everything is fine... There's no dough the cause of my problem is the > high > > traffic in my connection to Internet and SA and DNS timeouts. I was > thinking > > in change SA for another anti-spam ..I read about Dspam ( > > www.nuclearelephant.com).. and I want to ask the list if Dspam can be > > integrated with mailscanner...Any ideas? > > There's been talk about it, but IIRC there has never been a full ACK > on it being done. > > There's no chance of upgrading your lines a tad? What lines? I dont know what to add to postfix/mailscanner or spamassassin config files to see if I cant solve my problem... > Or just plain killing > off all .... non-essential.... communication (like emule:-)? emule have been killed yerterday.. but I have another (NORMAL) high traffic that use my bandwidth and sometimes is gets 100% of it...and here is where my problem begins with delay on delivering mails... Thanks for your answrer..Glenn regards; Israel > > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071130/e0e6c7f2/attachment.html From uxbod at splatnix.net Fri Nov 30 13:44:52 2007 From: uxbod at splatnix.net (UxBoD) Date: Fri Nov 30 13:45:08 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711300534h461aae0ew6094751ee4bba4f7@mail.gmail.com> Message-ID: <22472203.9561196430292895.JavaMail.root@office.splatnix.net> Why not install Squid for HTTP proxy and limit the available bandwidth to your users ? Regards, --[ UxBoD ]-- // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net ----- Original Message ----- From: "Israel Garcia" To: "MailScanner discussion" Sent: Friday, November 30, 2007 1:34:41 PM (GMT) Europe/London Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner On Nov 29, 2007 5:21 PM, Glenn Steen < glenn.steen@gmail.com > wrote: On 29/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > Well, I have to tell you I'm continuing with the same problem with too many > messages in HOLD folder and a terrible delay (sometimes 1 hour) and because > the way my company works it's not allowed to keep messages for more than 10 > min... I have to remember that when I disable spamassassin in mailscanner > everything is fine... There's no dough the cause of my problem is the high > traffic in my connection to Internet and SA and DNS timeouts. I was thinking > in change SA for another anti-spam ..I read about Dspam ( > www.nuclearelephant.com ).. and I want to ask the list if Dspam can be > integrated with mailscanner...Any ideas? There's been talk about it, but IIRC there has never been a full ACK on it being done. There's no chance of upgrading your lines a tad? What lines? I dont know what to add to postfix/mailscanner or spamassassin config files to see if I cant solve my problem... Or just plain killing off all .... non-essential.... communication (like emule:-)? emule have been killed yerterday.. but I have another (NORMAL) high traffic that use my bandwidth and sometimes is gets 100% of it...and here is where my problem begins with delay on delivering mails... Thanks for your answrer..Glenn regards; Israel Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Regards; Israel Garcia -- This message has been scanned for viruses and dangerous content by MailScanner , and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From martinh at solidstatelogic.com Fri Nov 30 13:47:51 2007 From: martinh at solidstatelogic.com (Martin.Hepworth) Date: Fri Nov 30 13:47:56 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711300534h461aae0ew6094751ee4bba4f7@mail.gmail.com> Message-ID: <8ab2256647f1884b9294deb5792f8fc8@solidstatelogic.com> There's several things you can do see what's loading spamassassin, BUT is you're running 3.2.3 make sure you've run sa-update in order to update the core rules NOT to do completewhois lookups which are broken in the base 3.2.3 Other things to check are that you're not running ALL RBL's but just a select few, have a local caching nameserver on the mailscanner machine.... http://wiki.mailscanner.info/doku.php?id=maq:index#optimization_tips and "http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin" -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] On Behalf Of Israel Garcia > Sent: 30 November 2007 13:35 > To: MailScanner discussion > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > On Nov 29, 2007 5:21 PM, Glenn Steen wrote: > > > On 29/11/2007, Israel Garcia wrote: > > Well, I have to tell you I'm continuing with the same problem with > too many > > messages in HOLD folder and a terrible delay (sometimes 1 hour) > and because > > the way my company works it's not allowed to keep messages for > more than 10 > > min... I have to remember that when I disable spamassassin in > mailscanner > > everything is fine... There's no dough the cause of my problem is > the high > > traffic in my connection to Internet and SA and DNS timeouts. I > was thinking > > in change SA for another anti-spam ..I read about Dspam ( > > www.nuclearelephant.com ).. and I want to ask the list if Dspam > can be > > integrated with mailscanner...Any ideas? > > > There's been talk about it, but IIRC there has never been a full ACK > on it being done. > > There's no chance of upgrading your lines a tad? > > What lines? I dont know what to add to postfix/mailscanner or spamassassin > config files to see if I cant solve my problem... > > > Or just plain killing > off all .... non-essential.... communication (like emule:-)? > > emule have been killed yerterday.. but I have another (NORMAL) high > traffic that use my bandwidth and sometimes is gets 100% of it...and here > is where my problem begins with delay on delivering mails... > Thanks for your answrer..Glenn > > regards; > Israel > > > > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > > Support MailScanner development - buy the book off the website! > > > > > > -- > Regards; > Israel Garcia ********************************************************************** Confidentiality : This e-mail and any attachments are intended for the addressee only and may be confidential. If they come to you in error you must take no action based on them, nor must you copy or show them to anyone. Please advise the sender by replying to this e-mail immediately and then delete the original from your computer. Opinion : Any opinions expressed in this e-mail are entirely those of the author and unless specifically stated to the contrary, are not necessarily those of the author's employer. Security Warning : Internet e-mail is not necessarily a secure communications medium and can be subject to data corruption. We advise that you consider this fact when e-mailing us. Viruses : We have taken steps to ensure that this e-mail and any attachments are free from known viruses but in keeping with good computing practice, you should ensure that they are virus free. Red Lion 49 Ltd T/A Solid State Logic Registered as a limited company in England and Wales (Company No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, United Kingdom ********************************************************************** From prandal at herefordshire.gov.uk Fri Nov 30 14:05:40 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Fri Nov 30 14:05:46 2007 Subject: Error in 4.66.1 beta Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EAAFD@HC-MBX02.herefordshire.gov.uk> I've install the beta 4.66.1 on my test box, updated the conf files, and restarted. And get this logged: Nov 30 14:02:53 mx2 MailScanner[21514]: Syntax error(s) in configuration file: Nov 30 14:02:53 mx2 MailScanner[21514]: Unrecognised keyword "syslogsockettype" at line 2545 Nov 30 14:02:53 mx2 MailScanner[21514]: Warning: syntax errors in /etc/MailScanner/MailScanner.conf. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK From igalvarez at gmail.com Fri Nov 30 14:12:29 2007 From: igalvarez at gmail.com (Israel Garcia) Date: Fri Nov 30 14:12:31 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <22472203.9561196430292895.JavaMail.root@office.splatnix.net> References: <194a2c240711300534h461aae0ew6094751ee4bba4f7@mail.gmail.com> <22472203.9561196430292895.JavaMail.root@office.splatnix.net> Message-ID: <194a2c240711300612p3a783c58w87779273f6d96675@mail.gmail.com> On Nov 30, 2007 8:44 AM, UxBoD wrote: > Why not install Squid for HTTP proxy and limit the available bandwidth to > your users ? We have squid BUT not with delay pools activated.. because the main traffic is TO our servers (IN Traffic), because we have an Intranet web service which there where people are connected all the time.. We use squid on the other side, I mean for people who use Internet OUTGOING traffic.. One question.. is there a way to limit in mailscanner or postfix the amount of mail to processed in HOLD FOLDER? I've been monitoring the HOLD folder all these days and the most of the time is with few messages with no delay in delivering, but sometimes hundreds and hundreds of mail comes at the same time and the problem begins, 'cause the connection if FULL and SA takes some times to check all mail.. but if I limit the amount's of mail in HOLD Folder maybe things get better....:-) thenks UxBoD > > > Regards, > > --[ UxBoD ]-- > // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" > // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B > // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B > // Phone: +44 845 869 2749 SIP Phone: uxbod@sip.splatnix.net > > ----- Original Message ----- > From: "Israel Garcia" > To: "MailScanner discussion" > Sent: Friday, November 30, 2007 1:34:41 PM (GMT) Europe/London > Subject: Re: Too messages in Hold folder when spamassassin is activated in > MailScanner > > > On Nov 29, 2007 5:21 PM, Glenn Steen < glenn.steen@gmail.com > wrote: > > > > > On 29/11/2007, Israel Garcia < igalvarez@gmail.com > wrote: > > Well, I have to tell you I'm continuing with the same problem with too > many > > messages in HOLD folder and a terrible delay (sometimes 1 hour) and > because > > the way my company works it's not allowed to keep messages for more than > 10 > > min... I have to remember that when I disable spamassassin in > mailscanner > > everything is fine... There's no dough the cause of my problem is the > high > > traffic in my connection to Internet and SA and DNS timeouts. I was > thinking > > in change SA for another anti-spam ..I read about Dspam ( > > www.nuclearelephant.com ).. and I want to ask the list if Dspam can be > > integrated with mailscanner...Any ideas? > > There's been talk about it, but IIRC there has never been a full ACK > on it being done. > > There's no chance of upgrading your lines a tad? > What lines? I dont know what to add to postfix/mailscanner or spamassassin > config files to see if I cant solve my problem... > > > Or just plain killing > off all .... non-essential.... communication (like emule:-)? > emule have been killed yerterday.. but I have another (NORMAL) high > traffic that use my bandwidth and sometimes is gets 100% of it...and here is > where my problem begins with delay on delivering mails... > Thanks for your answrer..Glenn > > regards; > Israel > > > > > > > > Cheers > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > Regards; > Israel Garcia > -- > This message has been scanned for viruses and > dangerous content by MailScanner , and is > believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Regards; Israel Garcia -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071130/459abff0/attachment.html From mailscanner at slackadelic.com Fri Nov 30 14:12:42 2007 From: mailscanner at slackadelic.com (Matt Hayes) Date: Fri Nov 30 14:12:49 2007 Subject: Error in 4.66.1 beta In-Reply-To: <7EF0EE5CB3B263488C8C18823239BEBA023EAAFD@HC-MBX02.herefordshire.gov.uk> References: <7EF0EE5CB3B263488C8C18823239BEBA023EAAFD@HC-MBX02.herefordshire.gov.uk> Message-ID: <47501A5A.8090302@slackadelic.com> Randal, Phil wrote: > I've install the beta 4.66.1 on my test box, updated the conf files, and > restarted. > > And get this logged: > > Nov 30 14:02:53 mx2 MailScanner[21514]: Syntax error(s) in configuration > file: > Nov 30 14:02:53 mx2 MailScanner[21514]: Unrecognised keyword > "syslogsockettype" at line 2545 > Nov 30 14:02:53 mx2 MailScanner[21514]: Warning: syntax errors in > /etc/MailScanner/MailScanner.conf. > > Cheers, > > Phil > > -- > Phil Randal > Network Engineer > Herefordshire Council > Hereford, UK I have the same error message, however, it doesn't seem to affect the way MailScanner operates so I just tended to ignore it :) -Matt From gmatt at nerc.ac.uk Fri Nov 30 14:14:56 2007 From: gmatt at nerc.ac.uk (Greg Matthews) Date: Fri Nov 30 14:15:11 2007 Subject: slightly OT: (WAS: Re: MailScanner --lint doesn't check Eicar virus - OK here!) In-Reply-To: <832107.56195.qm@web33313.mail.mud.yahoo.com> References: <832107.56195.qm@web33313.mail.mud.yahoo.com> Message-ID: <47501AE0.1040502@nerc.ac.uk> Michael, I dont mean to be rude but could you please sort out quoting on your mail client. It makes reading threads much harder when your contribution is indistinguishable from other peoples. GREG Michael Mansour wrote: > Hi Phil, > > "Randal, Phil" wrote: Michael, > > Which version of RedHat are you running? > I'm running Scientific Linux 4.5 (RHEL4 U5), and I see the problem on 6 MailScanner servers, which I'm pretty sure happened after the perl update. > > I see the problem on CentOS 5.0. > > It may a side effect of force-installing the perl update. > I didn't force install the update, I just removed two RPM's which were clashing with the pre-built MailScanner ones (because the perl errata already had those perl modules in it) and then did the "rpm -Uvh", it went through cleanly. > > It would be nice to know what's actually happening and what the fix is, though. I'm not a perl guru so it's beyond me. > Yes, I may re-install MS 4.65.3 tomorrow on one of the MailScanner servers and see if it fixes that problem. > > Michael. > Cheers, > > Phil -- Greg Matthews 01491 692445 Head of UNIX/Linux, iTSS Wallingford -- This message (and any attachments) is for the recipient only. NERC is subject to the Freedom of Information Act 2000 and the contents of this email and any reply you make may be disclosed by NERC unless it is exempt from release under the Act. Any material supplied to NERC may be stored in an electronic records management system. From glenn.steen at gmail.com Fri Nov 30 14:52:27 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 30 14:52:31 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711300534h461aae0ew6094751ee4bba4f7@mail.gmail.com> References: <223f97700711280212q42c620d6w5284e08c6127553e@mail.gmail.com> <156656.18130.qm@web33301.mail.mud.yahoo.com> <223f97700711280342q7e3bc6cfo39a40557f83c2371@mail.gmail.com> <194a2c240711291344n9beb9e8gf68b91e5cc0de681@mail.gmail.com> <223f97700711291421x6566b9a9wbb08422bf1182bd2@mail.gmail.com> <194a2c240711300534h461aae0ew6094751ee4bba4f7@mail.gmail.com> Message-ID: <223f97700711300652j38d106f3ida40938fe62e6cdc@mail.gmail.com> On 30/11/2007, Israel Garcia wrote: > On Nov 29, 2007 5:21 PM, Glenn Steen wrote: > > > > > On 29/11/2007, Israel Garcia wrote: > > > Well, I have to tell you I'm continuing with the same problem with too > many > > > messages in HOLD folder and a terrible delay (sometimes 1 hour) and > because > > > the way my company works it's not allowed to keep messages for more than > 10 > > > min... I have to remember that when I disable spamassassin in > mailscanner > > > everything is fine... There's no dough the cause of my problem is the > high > > > traffic in my connection to Internet and SA and DNS timeouts. I was > thinking > > > in change SA for another anti-spam ..I read about Dspam ( > > > www.nuclearelephant.com ).. and I want to ask the list if Dspam can be > > > integrated with mailscanner...Any ideas? > > > > There's been talk about it, but IIRC there has never been a full ACK > > on it being done. > > > > There's no chance of upgrading your lines a tad? > What lines? I dont know what to add to postfix/mailscanner or spamassassin > config files to see if I cant solve my problem... Complementing or replacing your WAN link with something more capable. Slight translation foobar, sorry:-). > > Or just plain killing > > off all .... non-essential.... communication (like emule:-)? > emule have been killed yerterday.. but I have another (NORMAL) high traffic > that use my bandwidth and sometimes is gets 100% of it...and here is where > my problem begins with delay on delivering mails... > Thanks for your answrer..Glenn As you say, these things (deciding what should be considered "essential"...:-) is seldom up to us tech types. But the person(s) doing the decisions should be made fully aware of the very real performance bottleneck you have, and that the only long term solution likely is a more or less costly WAN ink upgrade... And that in the mean time they need decide whether they want - mail - mail with a lot of spam/viruses - ftp - http - whatever to have priority. Once they've become aware of the severity of your problem (that it isn't really a problem only related to mail and anti-spam/virus), the decision to make the WAN link upgrade might be more... alluring:-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From sbanderson at impromed.com Fri Nov 30 15:01:09 2007 From: sbanderson at impromed.com (Scott B. Anderson) Date: Fri Nov 30 15:01:27 2007 Subject: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 In-Reply-To: <474EDEB8.30401@linux-kernel.at> References: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <832107.56195.qm@web33313.mail.mud.yahoo.com> <474EDEB8.30401@linux-kernel.at> Message-ID: -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Oliver Falk Sent: Thursday, November 29, 2007 9:46 AM To: MailScanner discussion Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 On 11/29/2007 04:40 PM, Scott B. Anderson wrote: I can't figure out where the install.sh script is breaking and CPAN itself is installed and updated to the current > version. Note: I've installed a lot of the Perl modules/applications by hand using cpan and that seems to work fine. For reference, this is an 8 CPU server with 4 GB ram running FC8 with (as of yesterday) all updates installed. My first thought was that multithreaded compilation (make -j5) was causing the problem so I made it single threaded but the same error occurs. Here's the first couple pages of the output from install.sh: > > Good. You have the patch command. ... > Setting Perl5 search path > > I think your system will build architecture-dependent modules for x86_64 > > Rebuilding all the Perl RPMs for your version of Perl > > Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. > > Oh good, module Net::CIDR version 0.11 is already installed. > > Attempting to build and install perl-IO-stringy-2.108-1 > Installing perl-IO-stringy-2.108-1.src.rpm > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.23822 > + umask 022 > + cd /usr/src/redhat/BUILD > + LANG=C > + export LANG > + unset DISPLAY > + cd /usr/src/redhat/BUILD > + rm -rf IO-stringy-2.108 > + /bin/gzip -dc /usr/src/redhat/SOURCES/IO-stringy-2.108.tar.gz > + tar -xf - > + STATUS=0 > + '[' 0 -ne 0 ']' > + cd IO-stringy-2.108 > ++ /usr/bin/id -u > + '[' 0 = 0 ']' > + /bin/chown -Rhf root . > ++ /usr/bin/id -u > + '[' 0 = 0 ']' > + /bin/chgrp -Rhf root . > + /bin/chmod -Rf a+rX,u+w,g-w,o-w . > + exit 0 > Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.23822 > + umask 022 > + cd /usr/src/redhat/BUILD > + cd IO-stringy-2.108 > + LANG=C > + export LANG > + unset DISPLAY > + CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' > + perl Makefile.PL PREFIX=/var/tmp/perl-IO-stringy-root/usr > Checking if your kit is complete... > Looks good > Writing Makefile for IO-stringy > + make > cp lib/IO/Lines.pm blib/lib/IO/Lines.pm > cp lib/IO/ScalarArray.pm blib/lib/IO/ScalarArray.pm > cp lib/IO/Stringy.pm blib/lib/IO/Stringy.pm > cp lib/IO/Wrap.pm blib/lib/IO/Wrap.pm > cp lib/IO/Scalar.pm.html blib/lib/IO/Scalar.pm.html > cp lib/IO/AtomicFile.pm blib/lib/IO/AtomicFile.pm > cp lib/IO/InnerFile.pm blib/lib/IO/InnerFile.pm > cp lib/IO/Scalar.pm blib/lib/IO/Scalar.pm > cp lib/IO/WrapTie.pm blib/lib/IO/WrapTie.pm > Manifying blib/man3/IO::Lines.3pm > Manifying blib/man3/IO::Stringy.3pm > Manifying blib/man3/IO::ScalarArray.3pm > Manifying blib/man3/IO::Wrap.3pm > Manifying blib/man3/IO::AtomicFile.3pm > Manifying blib/man3/IO::InnerFile.3pm > Manifying blib/man3/IO::Scalar.3pm > Manifying blib/man3/IO::WrapTie.3pm > + make test > PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t > t/IO_Lines............ok > t/IO_Scalar...........ok > t/IO_ScalarArray......ok > t/IO_WrapTie..........ok > t/simple..............ok > t/two.................ok > All tests successful. > Files=6, Tests=116, 0 wallclock secs ( 0.03 usr 0.03 sys + 0.22 cusr 0.16 csys = 0.44 CPU) > Result: PASS > + exit 0 > Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.36679 > + umask 022 > + cd /usr/src/redhat/BUILD > + cd IO-stringy-2.108 > + LANG=C > + export LANG > + unset DISPLAY > + rm -rf /var/tmp/perl-IO-stringy-root > ++ perl -V:installarchlib > + eval 'installarchlib='\''/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi'\'';' > ++ installarchlib=/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > + mkdir -p /var/tmp/perl-IO-stringy-root//usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > + make install > Manifying blib/man3/IO::Lines.3pm > Manifying blib/man3/IO::Stringy.3pm > Manifying blib/man3/IO::ScalarArray.3pm > Manifying blib/man3/IO::Wrap.3pm > Manifying blib/man3/IO::AtomicFile.3pm > Manifying blib/man3/IO::InnerFile.3pm > Manifying blib/man3/IO::Scalar.3pm > Manifying blib/man3/IO::WrapTie.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::ScalarArray.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::InnerFile.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::WrapTie.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Scalar.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Lines.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::AtomicFile.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Wrap.3pm > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Stringy.3pm > Writing /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi/auto/IO-stringy/.packlist > Appending installation info to /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod > + '[' -x /usr/lib/rpm/brp-compress ']' > + /usr/lib/rpm/brp-compress > + find /var/tmp/perl-IO-stringy-root/usr -type f -print > + sed 's@^/var/tmp/perl-IO-stringy-root@@g' > + grep -v perllocal.pod > + grep -v '\.packlist' > ++ cat IO-stringy-2.108-filelist > + '[' '/usr/share/man/man3/IO::InnerFile.3pm.gz > /usr/share/man/man3/IO::AtomicFile.3pm.gz > /usr/share/man/man3/IO::Scalar.3pm.gz > /usr/share/man/man3/IO::ScalarArray.3pm.gz > /usr/share/man/man3/IO::Lines.3pm.gz > /usr/share/man/man3/IO::Stringy.3pm.gz > /usr/share/man/man3/IO::WrapTie.3pm.gz > /usr/share/man/man3/IO::Wrap.3pm.gz > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > /usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > /usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > /usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > find: debug: No such file or directory // <-- Is this the issue ? > + /usr/lib/rpm/check-buildroot > /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod:C > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > error: Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > RPM build errors: > Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > Missing file /usr/src/redhat/RPMS/noarch/perl-IO-stringy-2.108-1.noarch.rpm. > Maybe it did not build correctly? > > Attempting to build and install perl-MIME-Base64-3.07-1 > Installing perl-MIME-Base64-3.07-1.src.rpm > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.74655 > ... > > And so forth. I think the line: find: debug: No such file or directory is where it is blowing up, but I can't (my skills are limited) find the reference to 'debug' and I've installed 'debug' type perl modules but none of them seem to have what the script is looking for. Any help tracking this down would be greatly appreciated. FWIW I'm fairly sure I could install each and every CPAN module manually and install.sh would have little to do but simply install MailScanner. Try setting strict=false instead of strict=true in /usr/lib/rpm/find-debuginfo.sh. -of -- I did this and still receive the exact same build error. Thanks for showing me 'where' the install.sh script was failing. Now to fix it, I think is a problem with RPM_BUILD_DIR either not being set or the script is attempting to write tmp files in a location that doesn't exist. Suggestions on how or where to go from here are greatly appreciated. Thanks in advance. Scott From glenn.steen at gmail.com Fri Nov 30 15:45:32 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 30 15:45:35 2007 Subject: Too messages in Hold folder when spamassassin is activated in MailScanner In-Reply-To: <194a2c240711300612p3a783c58w87779273f6d96675@mail.gmail.com> References: <194a2c240711300534h461aae0ew6094751ee4bba4f7@mail.gmail.com> <22472203.9561196430292895.JavaMail.root@office.splatnix.net> <194a2c240711300612p3a783c58w87779273f6d96675@mail.gmail.com> Message-ID: <223f97700711300745k530fe0a3x5643b0142a82702f@mail.gmail.com> On 30/11/2007, Israel Garcia wrote: > On Nov 30, 2007 8:44 AM, UxBoD wrote: > > > Why not install Squid for HTTP proxy and limit the available bandwidth to > your users ? > We have squid BUT not with delay pools activated.. because the main traffic > is TO our servers (IN Traffic), because we have an Intranet web service > which there where people are connected all the time.. We use squid on the > other side, I mean for people who use Internet OUTGOING traffic.. > > One question.. is there a way to limit in mailscanner or postfix the amount > of mail to processed in HOLD FOLDER? I've been monitoring the HOLD folder > all these days and the most of the time is with few messages with no delay > in delivering, but sometimes hundreds and hundreds of mail comes at the same > time and the problem begins, 'cause the connection if FULL and SA takes some > times to check all mail.. but if I limit the amount's of mail in HOLD Folder > maybe things get better....:-) > thenks UxBoD > I suppose you could try vary the various smtpd_*_rate_limit settings you have. Have never needed to "(ab)use" those, so can't really help you with sane values:-). Better tyo make sure you don't need to:-) Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Fri Nov 30 15:51:25 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 30 15:51:31 2007 Subject: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 In-Reply-To: References: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <832107.56195.qm@web33313.mail.mud.yahoo.com> <474EDEB8.30401@linux-kernel.at> Message-ID: <223f97700711300751v7b40ff3cn47b4f2bb1ee2d68@mail.gmail.com> On 30/11/2007, Scott B. Anderson wrote: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Oliver Falk > Sent: Thursday, November 29, 2007 9:46 AM > To: MailScanner discussion > Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 > > On 11/29/2007 04:40 PM, Scott B. Anderson wrote: > I can't figure out where the install.sh script is breaking and CPAN itself is installed and updated to the current > version. Note: I've installed a lot of the Perl modules/applications by hand using cpan and that seems to work fine. For reference, this is an 8 CPU server with 4 GB ram running FC8 with (as of yesterday) all updates installed. My first thought was that multithreaded compilation (make -j5) was causing the problem so I made it single threaded but the same error occurs. Here's the first couple pages of the output from install.sh: > > > > Good. You have the patch command. > ... > > Setting Perl5 search path > > > > I think your system will build architecture-dependent modules for x86_64 > > > > Rebuilding all the Perl RPMs for your version of Perl > > > > Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. > > > > Oh good, module Net::CIDR version 0.11 is already installed. > > > > Attempting to build and install perl-IO-stringy-2.108-1 > > Installing perl-IO-stringy-2.108-1.src.rpm > > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.23822 > > + umask 022 > > + cd /usr/src/redhat/BUILD > > + LANG=C > > + export LANG > > + unset DISPLAY > > + cd /usr/src/redhat/BUILD > > + rm -rf IO-stringy-2.108 > > + /bin/gzip -dc /usr/src/redhat/SOURCES/IO-stringy-2.108.tar.gz > > + tar -xf - > > + STATUS=0 > > + '[' 0 -ne 0 ']' > > + cd IO-stringy-2.108 > > ++ /usr/bin/id -u > > + '[' 0 = 0 ']' > > + /bin/chown -Rhf root . > > ++ /usr/bin/id -u > > + '[' 0 = 0 ']' > > + /bin/chgrp -Rhf root . > > + /bin/chmod -Rf a+rX,u+w,g-w,o-w . > > + exit 0 > > Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.23822 > > + umask 022 > > + cd /usr/src/redhat/BUILD > > + cd IO-stringy-2.108 > > + LANG=C > > + export LANG > > + unset DISPLAY > > + CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' > > + perl Makefile.PL PREFIX=/var/tmp/perl-IO-stringy-root/usr > > Checking if your kit is complete... > > Looks good > > Writing Makefile for IO-stringy > > + make > > cp lib/IO/Lines.pm blib/lib/IO/Lines.pm > > cp lib/IO/ScalarArray.pm blib/lib/IO/ScalarArray.pm > > cp lib/IO/Stringy.pm blib/lib/IO/Stringy.pm > > cp lib/IO/Wrap.pm blib/lib/IO/Wrap.pm > > cp lib/IO/Scalar.pm.html blib/lib/IO/Scalar.pm.html > > cp lib/IO/AtomicFile.pm blib/lib/IO/AtomicFile.pm > > cp lib/IO/InnerFile.pm blib/lib/IO/InnerFile.pm > > cp lib/IO/Scalar.pm blib/lib/IO/Scalar.pm > > cp lib/IO/WrapTie.pm blib/lib/IO/WrapTie.pm > > Manifying blib/man3/IO::Lines.3pm > > Manifying blib/man3/IO::Stringy.3pm > > Manifying blib/man3/IO::ScalarArray.3pm > > Manifying blib/man3/IO::Wrap.3pm > > Manifying blib/man3/IO::AtomicFile.3pm > > Manifying blib/man3/IO::InnerFile.3pm > > Manifying blib/man3/IO::Scalar.3pm > > Manifying blib/man3/IO::WrapTie.3pm > > + make test > > PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t > > t/IO_Lines............ok > > t/IO_Scalar...........ok > > t/IO_ScalarArray......ok > > t/IO_WrapTie..........ok > > t/simple..............ok > > t/two.................ok > > All tests successful. > > Files=6, Tests=116, 0 wallclock secs ( 0.03 usr 0.03 sys + 0.22 cusr 0.16 csys = 0.44 CPU) > > Result: PASS > > + exit 0 > > Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.36679 > > + umask 022 > > + cd /usr/src/redhat/BUILD > > + cd IO-stringy-2.108 > > + LANG=C > > + export LANG > > + unset DISPLAY > > + rm -rf /var/tmp/perl-IO-stringy-root > > ++ perl -V:installarchlib > > + eval 'installarchlib='\''/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi'\'';' > > ++ installarchlib=/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > > + mkdir -p /var/tmp/perl-IO-stringy-root//usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > > + make install > > Manifying blib/man3/IO::Lines.3pm > > Manifying blib/man3/IO::Stringy.3pm > > Manifying blib/man3/IO::ScalarArray.3pm > > Manifying blib/man3/IO::Wrap.3pm > > Manifying blib/man3/IO::AtomicFile.3pm > > Manifying blib/man3/IO::InnerFile.3pm > > Manifying blib/man3/IO::Scalar.3pm > > Manifying blib/man3/IO::WrapTie.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::ScalarArray.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::InnerFile.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::WrapTie.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Scalar.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Lines.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::AtomicFile.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Wrap.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Stringy.3pm > > Writing /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi/auto/IO-stringy/.packlist > > Appending installation info to /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod > > + '[' -x /usr/lib/rpm/brp-compress ']' > > + /usr/lib/rpm/brp-compress > > + find /var/tmp/perl-IO-stringy-root/usr -type f -print > > + sed 's@^/var/tmp/perl-IO-stringy-root@@g' > > + grep -v perllocal.pod > > + grep -v '\.packlist' > > ++ cat IO-stringy-2.108-filelist > > + '[' '/usr/share/man/man3/IO::InnerFile.3pm.gz > > /usr/share/man/man3/IO::AtomicFile.3pm.gz > > /usr/share/man/man3/IO::Scalar.3pm.gz > > /usr/share/man/man3/IO::ScalarArray.3pm.gz > > /usr/share/man/man3/IO::Lines.3pm.gz > > /usr/share/man/man3/IO::Stringy.3pm.gz > > /usr/share/man/man3/IO::WrapTie.3pm.gz > > /usr/share/man/man3/IO::Wrap.3pm.gz > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > > /usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > > find: debug: No such file or directory // <-- Is this the issue ? > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod:C > > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > > > > > Missing file /usr/src/redhat/RPMS/noarch/perl-IO-stringy-2.108-1.noarch.rpm. > > Maybe it did not build correctly? > > > > Attempting to build and install perl-MIME-Base64-3.07-1 > > Installing perl-MIME-Base64-3.07-1.src.rpm > > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.74655 > > ... > > > > And so forth. I think the line: find: debug: No such file or directory is where it is blowing up, but I can't (my skills are limited) find the reference to 'debug' and I've installed 'debug' type perl modules but none of them seem to have what the script is looking for. Any help tracking this down would be greatly appreciated. FWIW I'm fairly sure I could install each and every CPAN module manually and install.sh would have little to do but simply install MailScanner. > > Try setting strict=false instead of strict=true in > /usr/lib/rpm/find-debuginfo.sh. > > -of > -- > > I did this and still receive the exact same build error. Thanks for showing me 'where' the install.sh script was failing. Now to fix it, I think is a problem with RPM_BUILD_DIR either not being set or the script is attempting to write tmp files in a location that doesn't exist. Suggestions on how or where to go from here are greatly appreciated. > > Thanks in advance. > > Scott Isn't this the same problem newer Mandriva releases have/had? That they've moved from having /usr/src/RPM to /usr/src/rpm ... So if you create a link like ln -s /usr/src/rpm /usr/src/RPM ... you will "work around" the problem... while waiting for the fix to arrive...?:-). I might be completely confused though:-). Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From Denis.Beauchemin at USherbrooke.ca Fri Nov 30 16:41:42 2007 From: Denis.Beauchemin at USherbrooke.ca (Denis Beauchemin) Date: Fri Nov 30 16:42:37 2007 Subject: Weird phishing attempt Message-ID: <47503D46.2070602@USherbrooke.ca> Hello all, I just received the attached email. No HTML, no image, just plain text. Funny thing is I don't know anything about them... I looked on their web site ( http://www.sunwestfcu.org/site/contact_locations.html#phone ) and couldn't find the toll-free phone number. Could someone have hacked into someone else's PBX and used it for phishing? It's the first time I see something like this! Denis -- _ ?v? Denis Beauchemin, analyste /(_)\ Universite' de Sherbrooke, S.T.I. ^ ^ T: 819.821.8000x62252 F: 819.821.8045 -------------- next part -------------- An embedded message was scrubbed... From: "SunWest Federal Credit Union" Subject: New message from Customer Service Date: Fri, 30 Nov 2007 07:03:20 -0800 Size: 2623 Url: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071130/fa0e916b/NewmessagefromCustomerService.eml From t.d.lee at durham.ac.uk Fri Nov 30 16:54:01 2007 From: t.d.lee at durham.ac.uk (David Lee) Date: Fri Nov 30 16:54:18 2007 Subject: CentOS5, MS 4.65.3-1, perl Math modules Message-ID: I have just been installing MailScanner-4.65.3-1 on a freshly installed CentOS-5 (32-bit) system. Executive summary: Math::BigInt, Math::BigRat and bignum installation problems. Detail: I realise that the MS installation says: # Do not worry too much about errors from the next command. # It is quite likely that some of the Perl modules are # already installed on your system. # # The important ones are HTML-Parser and MIME-tools. BUT... ... I saw the following: # Attempting to build and install perl-Math-BigInt-1.86-1 # ... # ********************************************************************** # Attention: After installing this package, you also need to update: # # Math::BigRat to at least v0.19 (you have v0.15) # bignum to at least v0.21 (you have v0.17) Afterwards, "MailScanner -V" showed Math::BigInt still to be an earlier (pre-installed?) version. And the "MailScanner -V" optional modules still included the old (those "you have ...") version numbers. # [Math::BigRat] # # t/big_ap......ok # t/bigfltrt....ok # t/bigrat......ok 132/193Can't locate object method "_as_oct" via package "Math::BigInt::Calc" at ../lib/Math/BigRat.pm line 1317. # t/bigrat......dubious # Test returned status 255 (wstat 65280, 0xff00) # DIED. FAILED tests 172-193 # Failed 22/193 tests, 88.60% okay # [bignum] # ... lots of errors in test beginning... # Failed test '(1-$ev) is approx. 0' # in t/bigexp.t at line 23. # got: '1.00000' # expected: '0.00000' # Looks like you failed 1 test of 4. # t/bigexp......dubious # Test returned status 1 (wstat 256, 0x100) # DIED. FAILED test 2 # Failed 1/4 tests, 75.00% okay # t/bigint......Can't locate object method "from_oct" via package "Math::BigInt" at ../lib/bigint.pm line 70. # t/bigint......dubious # Test returned status 255 (wstat 65280, 0xff00) # DIED. FAILED tests 18-36 # Failed 19/36 tests, 47.22% okay Does anyone else see failures with MS 4.65.3-1 doing these modules on a clean CentOS-5/ia32 machine? Any thoughts? Alas my CentOS-5 (which is actually a virtual (VMware) machine at present) is running liked a blocked drain. So substantial experimentation on it isn't really possible. (I hope to have that rectified by mid-week next week.) When I went to CPAN, those various modules then installed consistently and cleanly. So it looks like an issue with the MS packaging of them. (Overall: I'm looking to do a substantial, roll-out of such systems, across our existing service, so I'm looking to get it all as clean as possible.) -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : UNIX Team Leader Durham University : : South Road : : http://www.dur.ac.uk/t.d.lee/ Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. : From Kevin_Miller at ci.juneau.ak.us Fri Nov 30 16:58:34 2007 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Fri Nov 30 16:57:59 2007 Subject: Weird phishing attempt In-Reply-To: <47503D46.2070602@USherbrooke.ca> References: <47503D46.2070602@USherbrooke.ca> Message-ID: Denis Beauchemin wrote: > Hello all, > > I just received the attached email. No HTML, no image, just plain > text. Funny thing is I don't know anything about them... > > I looked on their web site ( > http://www.sunwestfcu.org/site/contact_locations.html#phone ) and > couldn't find the toll-free phone number. Could someone have hacked > into someone else's PBX and used it for phishing? > > It's the first time I see something like this! > > Denis Do you have an account with them? If not, blow it off as just more spam. If you do, I'd contact them using the number printed on your monthly statement. I'd expect that it's probably a social engineering scam - you call the number thinking you're getting them, they ask your account number, etc. and presto, your life savings are now in some bank in Russia. Either that or it's a toll number where they put you on hold for eons, then charge you for the privledge of listening to bad evalator music... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From sbanderson at impromed.com Fri Nov 30 16:58:01 2007 From: sbanderson at impromed.com (Scott B. Anderson) Date: Fri Nov 30 16:58:28 2007 Subject: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 In-Reply-To: <223f97700711300751v7b40ff3cn47b4f2bb1ee2d68@mail.gmail.com> References: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <832107.56195.qm@web33313.mail.mud.yahoo.com> <474EDEB8.30401@linux-kernel.at> <223f97700711300751v7b40ff3cn47b4f2bb1ee2d68@mail.gmail.com> Message-ID: -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Glenn Steen Sent: Friday, November 30, 2007 9:51 AM To: MailScanner discussion Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 On 30/11/2007, Scott B. Anderson wrote: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Oliver Falk > Sent: Thursday, November 29, 2007 9:46 AM > To: MailScanner discussion > Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 > > On 11/29/2007 04:40 PM, Scott B. Anderson wrote: > I can't figure out where the install.sh script is breaking and CPAN itself is installed and updated to the current > version. Note: I've installed a lot of the Perl modules/applications by hand using cpan and that seems to work fine. For reference, this is an 8 CPU server with 4 GB ram running FC8 with (as of yesterday) all updates installed. My first thought was that multithreaded compilation (make -j5) was causing the problem so I made it single threaded but the same error occurs. Here's the first couple pages of the output from install.sh: > > > > Good. You have the patch command. > ... > > Setting Perl5 search path > > > > I think your system will build architecture-dependent modules for x86_64 > > > > Rebuilding all the Perl RPMs for your version of Perl > > > > Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. > > > > Oh good, module Net::CIDR version 0.11 is already installed. > > > > Attempting to build and install perl-IO-stringy-2.108-1 > > Installing perl-IO-stringy-2.108-1.src.rpm > > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.23822 > > + umask 022 > > + cd /usr/src/redhat/BUILD > > + LANG=C > > + export LANG > > + unset DISPLAY > > + cd /usr/src/redhat/BUILD > > + rm -rf IO-stringy-2.108 > > + /bin/gzip -dc /usr/src/redhat/SOURCES/IO-stringy-2.108.tar.gz > > + tar -xf - > > + STATUS=0 > > + '[' 0 -ne 0 ']' > > + cd IO-stringy-2.108 > > ++ /usr/bin/id -u > > + '[' 0 = 0 ']' > > + /bin/chown -Rhf root . > > ++ /usr/bin/id -u > > + '[' 0 = 0 ']' > > + /bin/chgrp -Rhf root . > > + /bin/chmod -Rf a+rX,u+w,g-w,o-w . > > + exit 0 > > Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.23822 > > + umask 022 > > + cd /usr/src/redhat/BUILD > > + cd IO-stringy-2.108 > > + LANG=C > > + export LANG > > + unset DISPLAY > > + CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' > > + perl Makefile.PL PREFIX=/var/tmp/perl-IO-stringy-root/usr > > Checking if your kit is complete... > > Looks good > > Writing Makefile for IO-stringy > > + make > > cp lib/IO/Lines.pm blib/lib/IO/Lines.pm > > cp lib/IO/ScalarArray.pm blib/lib/IO/ScalarArray.pm > > cp lib/IO/Stringy.pm blib/lib/IO/Stringy.pm > > cp lib/IO/Wrap.pm blib/lib/IO/Wrap.pm > > cp lib/IO/Scalar.pm.html blib/lib/IO/Scalar.pm.html > > cp lib/IO/AtomicFile.pm blib/lib/IO/AtomicFile.pm > > cp lib/IO/InnerFile.pm blib/lib/IO/InnerFile.pm > > cp lib/IO/Scalar.pm blib/lib/IO/Scalar.pm > > cp lib/IO/WrapTie.pm blib/lib/IO/WrapTie.pm > > Manifying blib/man3/IO::Lines.3pm > > Manifying blib/man3/IO::Stringy.3pm > > Manifying blib/man3/IO::ScalarArray.3pm > > Manifying blib/man3/IO::Wrap.3pm > > Manifying blib/man3/IO::AtomicFile.3pm > > Manifying blib/man3/IO::InnerFile.3pm > > Manifying blib/man3/IO::Scalar.3pm > > Manifying blib/man3/IO::WrapTie.3pm > > + make test > > PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t > > t/IO_Lines............ok > > t/IO_Scalar...........ok > > t/IO_ScalarArray......ok > > t/IO_WrapTie..........ok > > t/simple..............ok > > t/two.................ok > > All tests successful. > > Files=6, Tests=116, 0 wallclock secs ( 0.03 usr 0.03 sys + 0.22 cusr 0.16 csys = 0.44 CPU) > > Result: PASS > > + exit 0 > > Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.36679 > > + umask 022 > > + cd /usr/src/redhat/BUILD > > + cd IO-stringy-2.108 > > + LANG=C > > + export LANG > > + unset DISPLAY > > + rm -rf /var/tmp/perl-IO-stringy-root > > ++ perl -V:installarchlib > > + eval 'installarchlib='\''/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi'\'';' > > ++ installarchlib=/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > > + mkdir -p /var/tmp/perl-IO-stringy-root//usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > > + make install > > Manifying blib/man3/IO::Lines.3pm > > Manifying blib/man3/IO::Stringy.3pm > > Manifying blib/man3/IO::ScalarArray.3pm > > Manifying blib/man3/IO::Wrap.3pm > > Manifying blib/man3/IO::AtomicFile.3pm > > Manifying blib/man3/IO::InnerFile.3pm > > Manifying blib/man3/IO::Scalar.3pm > > Manifying blib/man3/IO::WrapTie.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::ScalarArray.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::InnerFile.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::WrapTie.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Scalar.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Lines.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::AtomicFile.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Wrap.3pm > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Stringy.3pm > > Writing /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi/auto/IO-stringy/.packlist > > Appending installation info to /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod > > + '[' -x /usr/lib/rpm/brp-compress ']' > > + /usr/lib/rpm/brp-compress > > + find /var/tmp/perl-IO-stringy-root/usr -type f -print > > + sed 's@^/var/tmp/perl-IO-stringy-root@@g' > > + grep -v perllocal.pod > > + grep -v '\.packlist' > > ++ cat IO-stringy-2.108-filelist > > + '[' '/usr/share/man/man3/IO::InnerFile.3pm.gz > > /usr/share/man/man3/IO::AtomicFile.3pm.gz > > /usr/share/man/man3/IO::Scalar.3pm.gz > > /usr/share/man/man3/IO::ScalarArray.3pm.gz > > /usr/share/man/man3/IO::Lines.3pm.gz > > /usr/share/man/man3/IO::Stringy.3pm.gz > > /usr/share/man/man3/IO::WrapTie.3pm.gz > > /usr/share/man/man3/IO::Wrap.3pm.gz > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > > /usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > > find: debug: No such file or directory // <-- Is this the issue ? > > + /usr/lib/rpm/check-buildroot > > /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod:C > > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > > error: Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > > > RPM build errors: > > Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > > > > > Missing file /usr/src/redhat/RPMS/noarch/perl-IO-stringy-2.108-1.noarch.rpm. > > Maybe it did not build correctly? > > > > Attempting to build and install perl-MIME-Base64-3.07-1 > > Installing perl-MIME-Base64-3.07-1.src.rpm > > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.74655 > > ... > > > > And so forth. I think the line: find: debug: No such file or directory is where it is blowing up, but I can't (my skills are limited) find the reference to 'debug' and I've installed 'debug' type perl modules but none of them seem to have what the script is looking for. Any help tracking this down would be greatly appreciated. FWIW I'm fairly sure I could install each and every CPAN module manually and install.sh would have little to do but simply install MailScanner. > > Try setting strict=false instead of strict=true in > /usr/lib/rpm/find-debuginfo.sh. > > -of > -- > > I did this and still receive the exact same build error. Thanks for showing me 'where' the install.sh script was failing. Now to fix it, I think is a problem with RPM_BUILD_DIR either not being set or the script is attempting to write tmp files in a location that doesn't exist. Suggestions on how or where to go from here are greatly appreciated. > > Thanks in advance. > > Scott Isn't this the same problem newer Mandriva releases have/had? That they've moved from having /usr/src/RPM to /usr/src/rpm ... So if you create a link like ln -s /usr/src/rpm /usr/src/RPM ... you will "work around" the problem... while waiting for the fix to arrive...?:-). I might be completely confused though:-). Cheers -- I have no /usr/src/rpm nor /usr/src/RPM. I do have /usr/src/redhat with the directories: BUILD, RPMS, SOURCES, SPECS, SRPMS within /usr/src/redhat. The problem appears to be in several of the newest distributions, and particularly in x64 ones. My old server has the kernel sources installed, while the new one does not? Would this make a difference? Any Other suggestions? Scott From michael at huntley.net Fri Nov 30 17:28:27 2007 From: michael at huntley.net (Michael Huntley) Date: Fri Nov 30 17:29:00 2007 Subject: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 In-Reply-To: References: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <832107.56195.qm@web33313.mail.mud.yahoo.com> <474EDEB8.30401@linux-kernel.at> <223f97700711300751v7b40ff3cn47b4f2bb1ee2d68@mail.gmail.com> Message-ID: <4750483B.3070808@huntley.net> Scott B. Anderson wrote: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: Friday, November 30, 2007 9:51 AM > To: MailScanner discussion > Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 > > On 30/11/2007, Scott B. Anderson wrote: > >> -----Original Message----- >> From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Oliver Falk >> Sent: Thursday, November 29, 2007 9:46 AM >> To: MailScanner discussion >> Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 >> >> On 11/29/2007 04:40 PM, Scott B. Anderson wrote: >> I can't figure out where the install.sh script is breaking and CPAN itself is installed and updated to the current > version. Note: I've installed a lot of the Perl modules/applications by hand using cpan and that seems to work fine. For reference, this is an 8 CPU server with 4 GB ram running FC8 with (as of yesterday) all updates installed. My first thought was that multithreaded compilation (make -j5) was causing the problem so I made it single threaded but the same error occurs. Here's the first couple pages of the output from install.sh: >> >>> Good. You have the patch command. >>> > > I have no /usr/src/rpm nor /usr/src/RPM. I do have /usr/src/redhat with the directories: BUILD, RPMS, SOURCES, SPECS, SRPMS within /usr/src/redhat. The problem appears to be in several of the newest distributions, and particularly in x64 ones. My old server has the kernel sources installed, while the new one does not? Would this make a difference? Any > Other suggestions? > > Scott > Why not install the perl-IO-Stringy rpm? ftp://fr2.rpmfind.net/linux/fedora/releases/8/Everything/x86_64/os/Packages/perl-IO-stringy-2.110-6.fc8.noarch.rpm Cheers! mph vinum vesco valens viscus From hvdkooij at vanderkooij.org Fri Nov 30 17:49:24 2007 From: hvdkooij at vanderkooij.org (Hugo van der Kooij) Date: Fri Nov 30 17:51:55 2007 Subject: CentOS5, MS 4.65.3-1, perl Math modules In-Reply-To: References: Message-ID: <47504D24.4000809@vanderkooij.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 David Lee wrote: > I have just been installing MailScanner-4.65.3-1 on a freshly installed > CentOS-5 (32-bit) system. As this is a fresh system. you might want to add rpmforge to your repository and then test my experimental wrapper. If it passes Jules QA checks it will become part of the mainstream site. For now: http://yum.vanderkooij.org/ That will allow for a clean rollout as some of the testers have confirmed. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHUE0iBvzDRVjxmYERAnkLAJ9BhUmgXmjPGrHFNW5z18anIkah3ACeIL19 kMrIFuCOyQdcTI3+ckNHbiw= =qeLN -----END PGP SIGNATURE----- From t.d.lee at durham.ac.uk Fri Nov 30 18:12:06 2007 From: t.d.lee at durham.ac.uk (David Lee) Date: Fri Nov 30 18:12:18 2007 Subject: CentOS5, MS 4.65.3-1, perl Math modules In-Reply-To: <47504D24.4000809@vanderkooij.org> References: <47504D24.4000809@vanderkooij.org> Message-ID: On Fri, 30 Nov 2007, Hugo van der Kooij wrote: > David Lee wrote: > > I have just been installing MailScanner-4.65.3-1 on a freshly installed > > CentOS-5 (32-bit) system. > > As this is a fresh system. you might want to add rpmforge to your > repository and then test my experimental wrapper. If it passes Jules QA > checks it will become part of the mainstream site. > > For now: http://yum.vanderkooij.org/ > > That will allow for a clean rollout as some of the testers have confirmed. Thanks. Next week, I'll see if I can get myself into a position to try that. Although (obviously) I would like to get on with doing our own installations for our own use, I am also keen to ensure (like you and Jules) that the official distributed versions(*) are good for other users. So I'm happy to try to do some debugging towards this. (*) I presume those official versions continue to include Jules' existing rpm-based one, and your own (subject, as you say, to Jules' QA). Thanks again. -- : David Lee I.T. Service : : Senior Systems Programmer Computer Centre : : UNIX Team Leader Durham University : : South Road : : http://www.dur.ac.uk/t.d.lee/ Durham DH1 3LE : : Phone: +44 191 334 2752 U.K. : From glenn.steen at gmail.com Fri Nov 30 18:48:19 2007 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Nov 30 18:48:25 2007 Subject: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 In-Reply-To: References: <7EF0EE5CB3B263488C8C18823239BEBA023EA94E@HC-MBX02.herefordshire.gov.uk> <832107.56195.qm@web33313.mail.mud.yahoo.com> <474EDEB8.30401@linux-kernel.at> <223f97700711300751v7b40ff3cn47b4f2bb1ee2d68@mail.gmail.com> Message-ID: <223f97700711301048p6acbae3bu4d644d5a360d1743@mail.gmail.com> On 30/11/2007, Scott B. Anderson wrote: > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: Friday, November 30, 2007 9:51 AM > To: MailScanner discussion > Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 > > On 30/11/2007, Scott B. Anderson wrote: > > -----Original Message----- > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Oliver Falk > > Sent: Thursday, November 29, 2007 9:46 AM > > To: MailScanner discussion > > Subject: Re: Broken MailScanner? / CPAN? / Perl ? install on Fedora Core 8 x64 > > > > On 11/29/2007 04:40 PM, Scott B. Anderson wrote: > > I can't figure out where the install.sh script is breaking and CPAN itself is installed and updated to the current > version. Note: I've installed a lot of the Perl modules/applications by hand using cpan and that seems to work fine. For reference, this is an 8 CPU server with 4 GB ram running FC8 with (as of yesterday) all updates installed. My first thought was that multithreaded compilation (make -j5) was causing the problem so I made it single threaded but the same error occurs. Here's the first couple pages of the output from install.sh: > > > > > > Good. You have the patch command. > > ... > > > Setting Perl5 search path > > > > > > I think your system will build architecture-dependent modules for x86_64 > > > > > > Rebuilding all the Perl RPMs for your version of Perl > > > > > > Oh good, module ExtUtils::MakeMaker version 6.32 is already installed. > > > > > > Oh good, module Net::CIDR version 0.11 is already installed. > > > > > > Attempting to build and install perl-IO-stringy-2.108-1 > > > Installing perl-IO-stringy-2.108-1.src.rpm > > > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.23822 > > > + umask 022 > > > + cd /usr/src/redhat/BUILD > > > + LANG=C > > > + export LANG > > > + unset DISPLAY > > > + cd /usr/src/redhat/BUILD > > > + rm -rf IO-stringy-2.108 > > > + /bin/gzip -dc /usr/src/redhat/SOURCES/IO-stringy-2.108.tar.gz > > > + tar -xf - > > > + STATUS=0 > > > + '[' 0 -ne 0 ']' > > > + cd IO-stringy-2.108 > > > ++ /usr/bin/id -u > > > + '[' 0 = 0 ']' > > > + /bin/chown -Rhf root . > > > ++ /usr/bin/id -u > > > + '[' 0 = 0 ']' > > > + /bin/chgrp -Rhf root . > > > + /bin/chmod -Rf a+rX,u+w,g-w,o-w . > > > + exit 0 > > > Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.23822 > > > + umask 022 > > > + cd /usr/src/redhat/BUILD > > > + cd IO-stringy-2.108 > > > + LANG=C > > > + export LANG > > > + unset DISPLAY > > > + CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' > > > + perl Makefile.PL PREFIX=/var/tmp/perl-IO-stringy-root/usr > > > Checking if your kit is complete... > > > Looks good > > > Writing Makefile for IO-stringy > > > + make > > > cp lib/IO/Lines.pm blib/lib/IO/Lines.pm > > > cp lib/IO/ScalarArray.pm blib/lib/IO/ScalarArray.pm > > > cp lib/IO/Stringy.pm blib/lib/IO/Stringy.pm > > > cp lib/IO/Wrap.pm blib/lib/IO/Wrap.pm > > > cp lib/IO/Scalar.pm.html blib/lib/IO/Scalar.pm.html > > > cp lib/IO/AtomicFile.pm blib/lib/IO/AtomicFile.pm > > > cp lib/IO/InnerFile.pm blib/lib/IO/InnerFile.pm > > > cp lib/IO/Scalar.pm blib/lib/IO/Scalar.pm > > > cp lib/IO/WrapTie.pm blib/lib/IO/WrapTie.pm > > > Manifying blib/man3/IO::Lines.3pm > > > Manifying blib/man3/IO::Stringy.3pm > > > Manifying blib/man3/IO::ScalarArray.3pm > > > Manifying blib/man3/IO::Wrap.3pm > > > Manifying blib/man3/IO::AtomicFile.3pm > > > Manifying blib/man3/IO::InnerFile.3pm > > > Manifying blib/man3/IO::Scalar.3pm > > > Manifying blib/man3/IO::WrapTie.3pm > > > + make test > > > PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t > > > t/IO_Lines............ok > > > t/IO_Scalar...........ok > > > t/IO_ScalarArray......ok > > > t/IO_WrapTie..........ok > > > t/simple..............ok > > > t/two.................ok > > > All tests successful. > > > Files=6, Tests=116, 0 wallclock secs ( 0.03 usr 0.03 sys + 0.22 cusr 0.16 csys = 0.44 CPU) > > > Result: PASS > > > + exit 0 > > > Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.36679 > > > + umask 022 > > > + cd /usr/src/redhat/BUILD > > > + cd IO-stringy-2.108 > > > + LANG=C > > > + export LANG > > > + unset DISPLAY > > > + rm -rf /var/tmp/perl-IO-stringy-root > > > ++ perl -V:installarchlib > > > + eval 'installarchlib='\''/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi'\'';' > > > ++ installarchlib=/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > > > + mkdir -p /var/tmp/perl-IO-stringy-root//usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi > > > + make install > > > Manifying blib/man3/IO::Lines.3pm > > > Manifying blib/man3/IO::Stringy.3pm > > > Manifying blib/man3/IO::ScalarArray.3pm > > > Manifying blib/man3/IO::Wrap.3pm > > > Manifying blib/man3/IO::AtomicFile.3pm > > > Manifying blib/man3/IO::InnerFile.3pm > > > Manifying blib/man3/IO::Scalar.3pm > > > Manifying blib/man3/IO::WrapTie.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::ScalarArray.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::InnerFile.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::WrapTie.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Scalar.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Lines.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::AtomicFile.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Wrap.3pm > > > Installing /var/tmp/perl-IO-stringy-root/usr/share/man/man3/IO::Stringy.3pm > > > Writing /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi/auto/IO-stringy/.packlist > > > Appending installation info to /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod > > > + '[' -x /usr/lib/rpm/brp-compress ']' > > > + /usr/lib/rpm/brp-compress > > > + find /var/tmp/perl-IO-stringy-root/usr -type f -print > > > + sed 's@^/var/tmp/perl-IO-stringy-root@@g' > > > + grep -v perllocal.pod > > > + grep -v '\.packlist' > > > ++ cat IO-stringy-2.108-filelist > > > + '[' '/usr/share/man/man3/IO::InnerFile.3pm.gz > > > /usr/share/man/man3/IO::AtomicFile.3pm.gz > > > /usr/share/man/man3/IO::Scalar.3pm.gz > > > /usr/share/man/man3/IO::ScalarArray.3pm.gz > > > /usr/share/man/man3/IO::Lines.3pm.gz > > > /usr/share/man/man3/IO::Stringy.3pm.gz > > > /usr/share/man/man3/IO::WrapTie.3pm.gz > > > /usr/share/man/man3/IO::Wrap.3pm.gz > > > /usr/lib/perl5/site_perl/5.8.8/IO/InnerFile.pm > > > /usr/lib/perl5/site_perl/5.8.8/IO/Lines.pm > > > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm > > > /usr/lib/perl5/site_perl/5.8.8/IO/Wrap.pm > > > /usr/lib/perl5/site_perl/5.8.8/IO/WrapTie.pm > > > /usr/lib/perl5/site_perl/5.8.8/IO/Scalar.pm.html > > > /usr/lib/perl5/site_perl/5.8.8/IO/ScalarArray.pm > > > /usr/lib/perl5/site_perl/5.8.8/IO/Stringy.pm > > > /usr/lib/perl5/site_perl/5.8.8/IO/AtomicFile.pmX' = X ']' > > > + /usr/lib/rpm/find-debuginfo.sh /usr/src/redhat/BUILD/IO-stringy-2.108 > > > find: debug: No such file or directory // <-- Is this the issue ? > > > + /usr/lib/rpm/check-buildroot > > > /var/tmp/perl-IO-stringy-root/usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/perllocal.pod:C > > > Found '/var/tmp/perl-IO-stringy-root' in installed files; aborting > > > error: Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > > > > > > RPM build errors: > > > Bad exit status from /var/tmp/rpm-tmp.36679 (%install) > > > > > > > > > > > > Missing file /usr/src/redhat/RPMS/noarch/perl-IO-stringy-2.108-1.noarch.rpm. > > > Maybe it did not build correctly? > > > > > > Attempting to build and install perl-MIME-Base64-3.07-1 > > > Installing perl-MIME-Base64-3.07-1.src.rpm > > > Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.74655 > > > ... > > > > > > And so forth. I think the line: find: debug: No such file or directory is where it is blowing up, but I can't (my skills are limited) find the reference to 'debug' and I've installed 'debug' type perl modules but none of them seem to have what the script is looking for. Any help tracking this down would be greatly appreciated. FWIW I'm fairly sure I could install each and every CPAN module manually and install.sh would have little to do but simply install MailScanner. > > > > Try setting strict=false instead of strict=true in > > /usr/lib/rpm/find-debuginfo.sh. > > > > -of > > -- > > > > I did this and still receive the exact same build error. Thanks for showing me 'where' the install.sh script was failing. Now to fix it, I think is a problem with RPM_BUILD_DIR either not being set or the script is attempting to write tmp files in a location that doesn't exist. Suggestions on how or where to go from here are greatly appreciated. > > > > Thanks in advance. > > > > Scott > Isn't this the same problem newer Mandriva releases have/had? That > they've moved from having /usr/src/RPM to /usr/src/rpm ... So if you > create a link like > ln -s /usr/src/rpm /usr/src/RPM > ... you will "work around" the problem... while waiting for the fix to > arrive...?:-). > > I might be completely confused though:-). > > Cheers > > -- > I have no /usr/src/rpm nor /usr/src/RPM. I do have /usr/src/redhat with the directories: BUILD, RPMS, SOURCES, SPECS, SRPMS within /usr/src/redhat. The problem appears to be in several of the newest distributions, and particularly in x64 ones. My old server has the kernel sources installed, while the new one does not? Would this make a difference? Any > Other suggestions? > > Scott You could try the same trick ith the redhat directory, it seems to fill the same function for you rpmbuild system. Cheers -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From prandal at herefordshire.gov.uk Fri Nov 30 19:00:37 2007 From: prandal at herefordshire.gov.uk (Randal, Phil) Date: Fri Nov 30 19:00:47 2007 Subject: CentOS5, MS 4.65.3-1, perl Math modules In-Reply-To: References: Message-ID: <7EF0EE5CB3B263488C8C18823239BEBA023EAB7D@HC-MBX02.herefordshire.gov.uk> See the same on CentOS 5 x64 too. Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info > [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf > Of David Lee > Sent: 30 November 2007 16:54 > To: MailScanner discussion > Subject: CentOS5, MS 4.65.3-1, perl Math modules > > I have just been installing MailScanner-4.65.3-1 on a freshly > installed > CentOS-5 (32-bit) system. > > > Executive summary: Math::BigInt, Math::BigRat and bignum installation > problems. > > > > Detail: > > I realise that the MS installation says: > > # Do not worry too much about errors from the next command. > # It is quite likely that some of the Perl modules are > # already installed on your system. > # > # The important ones are HTML-Parser and MIME-tools. > > > BUT... > ... I saw the following: > > # Attempting to build and install perl-Math-BigInt-1.86-1 > # ... > # > ********************************************************************** > # Attention: After installing this package, you also need to update: > # > # Math::BigRat to at least v0.19 (you have v0.15) > # bignum to at least v0.21 (you have v0.17) > > Afterwards, "MailScanner -V" showed Math::BigInt still to be > an earlier > (pre-installed?) version. And the "MailScanner -V" optional > modules still > included the old (those "you have ...") version numbers. > > # [Math::BigRat] > # > # t/big_ap......ok > # t/bigfltrt....ok > # t/bigrat......ok 132/193Can't locate object method > "_as_oct" via package "Math::BigInt::Calc" at > ../lib/Math/BigRat.pm line 1317. > # t/bigrat......dubious > # Test returned status 255 (wstat 65280, 0xff00) > # DIED. FAILED tests 172-193 > # Failed 22/193 tests, 88.60% okay > > # [bignum] > # ... lots of errors in test beginning... > # Failed test '(1-$ev) is approx. 0' > # in t/bigexp.t at line 23. > # got: '1.00000' > # expected: '0.00000' > # Looks like you failed 1 test of 4. > # t/bigexp......dubious > # Test returned status 1 (wstat 256, 0x100) > # DIED. FAILED test 2 > # Failed 1/4 tests, 75.00% okay > # t/bigint......Can't locate object method "from_oct" via > package "Math::BigInt" at ../lib/bigint.pm line 70. > # t/bigint......dubious > # Test returned status 255 (wstat 65280, 0xff00) > # DIED. FAILED tests 18-36 > # Failed 19/36 tests, 47.22% okay > > > Does anyone else see failures with MS 4.65.3-1 doing these > modules on a > clean CentOS-5/ia32 machine? Any thoughts? > > Alas my CentOS-5 (which is actually a virtual (VMware) > machine at present) > is running liked a blocked drain. So substantial > experimentation on it > isn't really possible. (I hope to have that rectified by > mid-week next > week.) > > > When I went to CPAN, those various modules then installed consistently > and cleanly. So it looks like an issue with the MS packaging of them. > > (Overall: I'm looking to do a substantial, roll-out of such systems, > across our existing service, so I'm looking to get it all as clean as > possible.) > > > -- > > : David Lee I.T. Service : > : Senior Systems Programmer Computer Centre : > : UNIX Team Leader Durham University : > : South Road : > : http://www.dur.ac.uk/t.d.lee/ Durham DH1 3LE : > : Phone: +44 191 334 2752 U.K. : > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From ssilva at sgvwater.com Fri Nov 30 21:55:14 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 30 21:55:30 2007 Subject: install-Clam-SA and clamd In-Reply-To: <474FB521.6040704@vanderkooij.org> References: <474FB521.6040704@vanderkooij.org> Message-ID: on 11/29/2007 11:00 PM Hugo van der Kooij spake the following: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Scott Silva wrote: >> on 11/29/2007 4:17 PM Mark Nienberg spake the following: >>> A buddy of mine is doing a fresh install of MailScanner on a Centos 5 >>> box and he reported to me that when he ran the install-Clam-SA script >>> and it gave him the option to install Dag's rpms instead he did so. >>> But then when he reran the install script and told it that clam was >>> already installed, it tried to build Mail::ClamAV in addition to all >>> the SA stuff. >>> >>> The build of Mail::ClamAV failed, I assume because he did not install >>> Dag's clamav-devel rpm. The script only says to install clamav, >>> clamav-db, and clamd from Dag. >>> >>> I think it would be best to skip the build of Mail::ClamAV if the user >>> says that clamav is already installed. Or else tell the user to >>> install the devel package too. >>> >>> Mark >>> >> You should have him look at the message with subject; >> Experimental repository for RHEL 5 / Centos 5 >> http://thread.gmane.org/gmane.mail.virus.mailscanner/58545 > > I just wrote a manual page yesterday for Jules so can have a YUM > repository up and running ready for the next release if he so desires. > Used it again today for another server, it works great. Unless rpmforge starts to cause problems with CentOS 5 like it sometimes can for 4. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From ssilva at sgvwater.com Fri Nov 30 22:06:26 2007 From: ssilva at sgvwater.com (Scott Silva) Date: Fri Nov 30 22:06:48 2007 Subject: CentOS5, MS 4.65.3-1, perl Math modules In-Reply-To: References: <47504D24.4000809@vanderkooij.org> Message-ID: on 11/30/2007 10:12 AM David Lee spake the following: > On Fri, 30 Nov 2007, Hugo van der Kooij wrote: > >> David Lee wrote: >>> I have just been installing MailScanner-4.65.3-1 on a freshly installed >>> CentOS-5 (32-bit) system. >> As this is a fresh system. you might want to add rpmforge to your >> repository and then test my experimental wrapper. If it passes Jules QA >> checks it will become part of the mainstream site. >> >> For now: http://yum.vanderkooij.org/ >> >> That will allow for a clean rollout as some of the testers have confirmed. > > Thanks. Next week, I'll see if I can get myself into a position to try > that. > > Although (obviously) I would like to get on with doing our own > installations for our own use, I am also keen to ensure (like you and > Jules) that the official distributed versions(*) are good for other users. > So I'm happy to try to do some debugging towards this. > > > (*) I presume those official versions continue to include Jules' existing > rpm-based one, and your own (subject, as you say, to Jules' QA). > > Thanks again. > > Yes. Hugo's wrapper just installs the current stable mailscanner rpm, and has the proper dependancies in it to pull all of the necessary perl modules from rpmforge. If it goes mainstream, I might follow suit and make and contribute some wrappers for things like clam-av and spamassassin to match Julian's clam-sa package. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!! From gmane at tippingmar.com Fri Nov 30 23:32:56 2007 From: gmane at tippingmar.com (Mark Nienberg) Date: Fri Nov 30 23:33:10 2007 Subject: install-Clam-SA and clamd In-Reply-To: References: Message-ID: Scott Silva wrote: > on 11/29/2007 4:17 PM Mark Nienberg spake the following: >> A buddy of mine is doing a fresh install of MailScanner on a Centos 5 >> box and he reported to me that when he ran the install-Clam-SA script >> and it gave him the option to install Dag's rpms instead he did so. >> But then when he reran the install script and told it that clam was >> already installed, it tried to build Mail::ClamAV in addition to all >> the SA stuff. >> >> The build of Mail::ClamAV failed, I assume because he did not install >> Dag's clamav-devel rpm. The script only says to install clamav, >> clamav-db, and clamd from Dag. >> >> I think it would be best to skip the build of Mail::ClamAV if the user >> says that clamav is already installed. Or else tell the user to >> install the devel package too. >> >> Mark >> > You should have him look at the message with subject; > Experimental repository for RHEL 5 / Centos 5 > http://thread.gmane.org/gmane.mail.virus.mailscanner/58545 > I thought that the experimental yum repository only installed the minimum MS package and dependencies. If so, that doesn't really answer the question about installing Clam and SA does it? Mark From micoots at yahoo.com Fri Nov 30 23:43:01 2007 From: micoots at yahoo.com (Michael Mansour) Date: Fri Nov 30 23:43:04 2007 Subject: CentOS5, MS 4.65.3-1, perl Math modules In-Reply-To: <47504D24.4000809@vanderkooij.org> Message-ID: <298547.59820.qm@web33309.mail.mud.yahoo.com> Hi Hugo, Hugo van der Kooij wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 David Lee wrote: > I have just been installing MailScanner-4.65.3-1 on a freshly installed > CentOS-5 (32-bit) system. As this is a fresh system. you might want to add rpmforge to your repository and then test my experimental wrapper. If it passes Jules QA checks it will become part of the mainstream site. For now: http://yum.vanderkooij.org/ That will allow for a clean rollout as some of the testers have confirmed. Does this wrapper also work for RHEL4-based distributions? or just RHEL5? Michael. Hugo. - -- hvdkooij@vanderkooij.org http://hugo.vanderkooij.org/ PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc A: Yes. >Q: Are you sure? >>A: Because it reverses the logical flow of conversation. >>>Q: Why is top posting frowned upon? Bored? Click on http://spamornot.org/ and rate those images. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHUE0iBvzDRVjxmYERAnkLAJ9BhUmgXmjPGrHFNW5z18anIkah3ACeIL19 kMrIFuCOyQdcTI3+ckNHbiw= =qeLN -----END PGP SIGNATURE----- -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! --------------------------------- Make the switch to the world's best email. Get the new Yahoo!7 Mail now. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071201/0bd0048c/attachment.html From davejones70 at gmail.com Fri Nov 30 23:47:15 2007 From: davejones70 at gmail.com (Dave Jones) Date: Fri Nov 30 23:47:17 2007 Subject: Need help with notifications not working In-Reply-To: <67a55ed50711291151s553f6c6ep8862cd15e3cd0f9e@mail.gmail.com> References: <67a55ed50711291151s553f6c6ep8862cd15e3cd0f9e@mail.gmail.com> Message-ID: <67a55ed50711301547l5394bd84xf642b1ed04547c8c@mail.gmail.com> I tried the suggestion to change the default line to be "FromOrTo:" but that didn't change the results. I would have expected it to disable even more notifications adding the "Or" but my problem is that no user notifications are being sent at all, only to postmaster. FYI, the MCP notifications are working but I suspect this has something to do with the fact that MCP runs a second copy of SA and had it's own notification logic. Now I have gone back to the default settings below in the MailScanner.confand user notifications still don't work. Anyone have any tricks to debugging this? MailScanner.conf ============== Notify Senders = yes Notify Senders Of Viruses = no Notify Senders Of Blocked Filenames Or Filetypes = yes Notify Senders Of Blocked Size Attachments = yes Notify Senders Of Other Blocked Content = yes Thanks in advance, Dave On Nov 29, 2007 1:51 PM, Dave Jones wrote: > Anyone have any ideas why the only notifications are to the postmaster? > No users are getting notifications for any of my domains I have listed in my > rules file. How do I troubleshoot this on a busy server? > > MailScanner.conf > ============== > Notify Senders = yes > Notify Senders Of Viruses = no > Notify Senders Of Blocked Filenames Or Filetypes = > %rules-dir%/notification.rules > Notify Senders Of Blocked Size Attachments = > %rules-dir%/notification.rules > Notify Senders Of Other Blocked Content = %rules-dir%/notification.rules > > /etc/MailScanner/rules/notification.rules > From: *@domain.com yes > From: default no > > > -- > Dave Jones -- Dave Jones -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20071130/e7f12cf1/attachment.html