MailScanner Upgrade issues

Mark McIntosh Infowall mmcintosh at infowall.com
Sat Feb 13 23:10:16 GMT 2010


Alex Neuman van der Hans wrote:
> It's not the default. You must have changed it from the default. 
> 
> --
> 
> Alex Neuman van der Hans
> Reliant Technologies
> 
> +507 6781-9505
> +507 832-6725
> BB PIN: 20EA17C5
> 
> 
> -----Original Message-----
> From: Mark McIntosh Infowall <mmcintosh at infowall.com>
> Date: Sat, 13 Feb 2010 17:52:35 
> To: MailScanner discussion<mailscanner at lists.mailscanner.info>
> Subject: Re: MailScanner Upgrade issues
> 
> Kai Schaetzl wrote:
>> Mark McIntosh Infowall wrote on Thu, 11 Feb 2010 20:30:42 -0500:
>>
>>> drwxr-xr-x  9 root    clamav  4096 Feb 11 20:17 incoming
>> Youz *did* correct this now?
>>
>>> drwxr-x--- 2 root    clamav    4096 Feb 11 20:01 24211
>>> drwxr-x--- 2 root    clamav    4096 Feb 11 20:17 24795
>> This is wrong I think, the user should be postfix (compare with the three 
>> other tempdirs). I don't know where this is set, either in 
>> MailScanner.conf or clamd.conf.
>>
>> Ahm, can you please stop sending html-only mail? Either use text/plain 
>> only or text and html parts.
>>
>> Kai
>>
> Kai,
> 
> Thanks for the assistance I have fixed the permission issue via the 
> MailScanner.conf I had it set incorrectly. I have a question though I 
> still see what may be an error when running Mailscanner --lint (results 
> below)
> 
> 
> The result in question is:
> 
> Cannot match against destination IP address when resolving configuration 
> option "dangerscan" at /usr/lib/MailScanner/MailScanner/Config.pm line 624
> 
> Is this normal because we are testing against self ???
> 
> 
> Mark
> 
> (ps sorry about the html mail it is default in Thunderbird )
> 
> 
> [root at demo ~]# MailScanner --lint
> Trying to setlogsock(unix)
> 
> Reading configuration file /etc/MailScanner/MailScanner.conf
> Reading configuration file /etc/MailScanner/conf.d/README
> Read 858 hostnames from the phishing whitelist
> Read 5941 hostnames from the phishing blacklists
> Config: calling custom init function SQLBlacklist
> Starting up SQL Blacklist
> Read 0 blacklist entries
> Config: calling custom init function MailWatchLogging
> Started SQL Logging child
> Config: calling custom init function SQLWhitelist
> Starting up SQL Whitelist
> Read 50 whitelist entries
> 
> Checking version numbers...
> Version number in MailScanner.conf (4.79.11) is correct.
> 
> Your envelope_sender_header in spam.assassin.prefs.conf is correct.
> MailScanner setting GID to  (89)
> MailScanner setting UID to  (89)
> 
> Checking for SpamAssassin errors (if you use it)...
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> pyzor: check failed: internal error, python traceback seen in response
> SpamAssassin reported no errors.
> Connected to Processing Attempts Database
> Created Processing Attempts Database successfully
> There are 0 messages in the Processing Attempts Database
> Using locktype = posix
> MailScanner.conf says "Virus Scanners = clamav"
> Found these virus scanners installed: clamav
> ===========================================================================
> Cannot match against destination IP address when resolving configuration 
> option "dangerscan" at /usr/lib/MailScanner/MailScanner/Config.pm line 624
> Filename Checks: Windows/DOS Executable (1 eicar.com)
> Cannot match against destination IP address when resolving configuration 
> option "dangerscan" at /usr/lib/MailScanner/MailScanner/Config.pm line 624
> Cannot match against destination IP address when resolving configuration 
> option "dangerscan" at /usr/lib/MailScanner/MailScanner/Config.pm line 624
> Other Checks: Found 1 problems
> Virus and Content Scanning: Starting
> ./1/eicar.com: Eicar-Test-Signature FOUND
> 
> Virus Scanning: ClamAV found 1 infections
> Infected message 1 came from 10.1.1.1
> Virus Scanning: Found 1 viruses
> Cannot match against destination IP address when resolving configuration 
> option "dangerscan" at /usr/lib/MailScanner/MailScanner/Config.pm line 624
> ===========================================================================
> 
> If any of your virus scanners (clamav)
> are not listed there, you should check that they are installed correctly
> and that MailScanner is finding them correctly via its virus.scanners.conf.
> Config: calling custom end function SQLBlacklist
> Closing down by-domain spam blacklist
> Config: calling custom end function MailWatchLogging
> Config: calling custom end function SQLWhitelist
> Closing down by-domain spam whitelist
> 
> 
> 
Alex,


I did not make any changes to that config file. How does one fix this ???

Regards,

Mark

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list