From michel at casa.co.cu Thu Dec 1 03:43:43 2011 From: michel at casa.co.cu (michel@casa.co.cu) Date: Thu Dec 1 03:44:17 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner Message-ID: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> Hello I Work with CentOS 6 and I installed the latest version of MailScanner 4.84.3 with postfix as MTA and Clamav antivirus. In the MailScanner logs attempts to process a number of messages in more than one occasion, and after trying repeatedly, quarantines and returns the following message: MailScanner: Message attempted to kill MailScanner maillog: Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Found 2 messages waiting Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Scanning 1 messages, 1990 bytes Nov 30 09:18:20 tornado MailScanner[29950]: Virus and Content Scanning: Starting Nov 30 09:18:25 tornado MailScanner[29950]: Virus Scanning completed at 409 bytes per second Nov 30 09:18:25 tornado MailScanner[29950]: Requeue: 0C7BA5005F.AB094 to 93EC45005D Nov 30 09:18:25 tornado postfix/qmgr[1260]: 93EC45005D: from=, size=1730, nrcpt=1 (queue active) Nov 30 09:18:25 tornado MailScanner[29950]: Uninfected: Delivered 1 messages Nov 30 09:18:25 tornado MailScanner[29950]: Virus Processing completed at 190354 bytes per second Nov 30 09:18:25 tornado MailScanner[29950]: Deleted 1 messages from processing-database Nov 30 09:18:25 tornado MailScanner[29950]: Batch completed at 399 bytes per second (1990 / 4) Nov 30 09:18:25 tornado MailScanner[29950]: Batch (1 message) processed in 4.98 seconds Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max connection rate 2/60s for (smtp:213.97.145.50) at Nov 30 09:08:44 Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max connection count 2 for (smtp:66.231.83.31) at Nov 30 09:17:13 Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max cache size 5 at Nov 30 09:08:42 Nov 30 09:18:43 tornado MailScanner[29950]: Making attempt 6 at processing message 05A215004E.A0F82 Nov 30 09:18:43 tornado MailScanner[29950]: New Batch: Scanning 1 messages, 113309 bytes Nov 30 09:18:44 tornado MailScanner[30295]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration file /etc/MailScanner/MailScanner.conf Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration file /etc/MailScanner/conf.d/README Nov 30 09:18:44 tornado MailScanner[30295]: Connected to Processing Attempts Database Nov 30 09:18:44 tornado MailScanner[30295]: Found 1 messages in the Processing Attempts Database Nov 30 09:18:44 tornado MailScanner[30295]: Using locktype = flock Nov 30 09:18:44 tornado MailScanner[30295]: Warning: skipping message 05A215004E.A0F82 as it has been attempted too many times Nov 30 09:18:44 tornado MailScanner[30295]: Quarantined message 05A215004E.A0F82 as it caused MailScanner to crash several times Nov 30 09:18:44 tornado MailScanner[30295]: Saved entire message to /var/spool/MailScanner/quarantine/20111130/05A215004E.A0F82 Quarantined messages, attachments bring on some occasions doc files part of header message. Content-Type: multipart/mixed; boundary="----=_NextPart_000_0044_01CCAF32.1F8B9A10" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-EsetScannerBuild: 9822 This is a multi-part message in MIME format. ------=_NextPart_000_0044_01CCAF32.1F8B9A10 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0045_01CCAF32.1F8E0B10" ------=_NextPart_001_0045_01CCAF32.1F8E0B10 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Could you help me? Thanks Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba. From jose.cristo at cce.cu Thu Dec 1 05:04:24 2011 From: jose.cristo at cce.cu (=?iso-8859-1?Q?Jos=E9_R._Cristo_Almaguer?=) Date: Thu Dec 1 05:05:24 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> Message-ID: <20111201050448.3F4571FBF6E@ns1.cce.cu> Hi michel, What do you have in your clamav.log? -----Mensaje original----- De: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] En nombre de michel@casa.co.cu Enviado el: mi?rcoles, 30 de noviembre de 2011 22:44 Para: mailscanner@lists.mailscanner.info Asunto: MailScanner 4.84 - attempted to kill MailScanner Hello I Work with CentOS 6 and I installed the latest version of MailScanner 4.84.3 with postfix as MTA and Clamav antivirus. In the MailScanner logs attempts to process a number of messages in more than one occasion, and after trying repeatedly, quarantines and returns the following message: MailScanner: Message attempted to kill MailScanner maillog: Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Found 2 messages waiting Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Scanning 1 messages, 1990 bytes Nov 30 09:18:20 tornado MailScanner[29950]: Virus and Content Scanning: Starting Nov 30 09:18:25 tornado MailScanner[29950]: Virus Scanning completed at 409 bytes per second Nov 30 09:18:25 tornado MailScanner[29950]: Requeue: 0C7BA5005F.AB094 to 93EC45005D Nov 30 09:18:25 tornado postfix/qmgr[1260]: 93EC45005D: from=, size=1730, nrcpt=1 (queue active) Nov 30 09:18:25 tornado MailScanner[29950]: Uninfected: Delivered 1 messages Nov 30 09:18:25 tornado MailScanner[29950]: Virus Processing completed at 190354 bytes per second Nov 30 09:18:25 tornado MailScanner[29950]: Deleted 1 messages from processing-database Nov 30 09:18:25 tornado MailScanner[29950]: Batch completed at 399 bytes per second (1990 / 4) Nov 30 09:18:25 tornado MailScanner[29950]: Batch (1 message) processed in 4.98 seconds Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max connection rate 2/60s for (smtp:213.97.145.50) at Nov 30 09:08:44 Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max connection count 2 for (smtp:66.231.83.31) at Nov 30 09:17:13 Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max cache size 5 at Nov 30 09:08:42 Nov 30 09:18:43 tornado MailScanner[29950]: Making attempt 6 at processing message 05A215004E.A0F82 Nov 30 09:18:43 tornado MailScanner[29950]: New Batch: Scanning 1 messages, 113309 bytes Nov 30 09:18:44 tornado MailScanner[30295]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration file /etc/MailScanner/MailScanner.conf Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration file /etc/MailScanner/conf.d/README Nov 30 09:18:44 tornado MailScanner[30295]: Connected to Processing Attempts Database Nov 30 09:18:44 tornado MailScanner[30295]: Found 1 messages in the Processing Attempts Database Nov 30 09:18:44 tornado MailScanner[30295]: Using locktype = flock Nov 30 09:18:44 tornado MailScanner[30295]: Warning: skipping message 05A215004E.A0F82 as it has been attempted too many times Nov 30 09:18:44 tornado MailScanner[30295]: Quarantined message 05A215004E.A0F82 as it caused MailScanner to crash several times Nov 30 09:18:44 tornado MailScanner[30295]: Saved entire message to /var/spool/MailScanner/quarantine/20111130/05A215004E.A0F82 Quarantined messages, attachments bring on some occasions doc files part of header message. Content-Type: multipart/mixed; boundary="----=_NextPart_000_0044_01CCAF32.1F8B9A10" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-EsetScannerBuild: 9822 This is a multi-part message in MIME format. ------=_NextPart_000_0044_01CCAF32.1F8B9A10 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0045_01CCAF32.1F8E0B10" ------=_NextPart_001_0045_01CCAF32.1F8E0B10 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Could you help me? Thanks Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- Este mensaje ha sido analizado por MailScanner en busca de virus y otros contenidos peligrosos, y se considera que est? limpio. For all your IT requirements visit: http://www.transtec.co.uk -- This mail was scanned by BitDefender For more information please visit http://www.bitdefender.com/links/en/frams.html -- Este mensaje ha sido analizado por MailScanner en busca de virus y otros contenidos peligrosos, y se considera que est? limpio. For all your IT requirements visit: http://www.transtec.co.uk -- This mail was scanned by BitDefender For more information please visit http://www.bitdefender.com/links/en/frams.html From maxsec at gmail.com Thu Dec 1 06:40:57 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Thu Dec 1 06:41:05 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> Message-ID: You need run this message through in debug mode to find out what's the issue . Have a look on the wiki for how to do this and don't forget to run as postfix when u do this Martin On Thursday, 1 December 2011, wrote: > Hello > > I Work with CentOS 6 and I installed the latest version of MailScanner 4.84.3 with postfix as MTA and Clamav antivirus. > > In the MailScanner logs attempts to process a number of messages in more than one occasion, and after trying repeatedly, quarantines and returns the following message: > > MailScanner: Message attempted to kill MailScanner > > maillog: > > > Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Found 2 messages waiting > Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Scanning 1 messages, 1990 bytes > Nov 30 09:18:20 tornado MailScanner[29950]: Virus and Content Scanning: Starting > Nov 30 09:18:25 tornado MailScanner[29950]: Virus Scanning completed at 409 bytes per second > Nov 30 09:18:25 tornado MailScanner[29950]: Requeue: 0C7BA5005F.AB094 to 93EC45005D > Nov 30 09:18:25 tornado postfix/qmgr[1260]: 93EC45005D: from=< marujasantos@casa.co.cu>, size=1730, nrcpt=1 (queue active) > Nov 30 09:18:25 tornado MailScanner[29950]: Uninfected: Delivered 1 messages > Nov 30 09:18:25 tornado MailScanner[29950]: Virus Processing completed at 190354 bytes per second > Nov 30 09:18:25 tornado MailScanner[29950]: Deleted 1 messages from processing-database > Nov 30 09:18:25 tornado MailScanner[29950]: Batch completed at 399 bytes per second (1990 / 4) > Nov 30 09:18:25 tornado MailScanner[29950]: Batch (1 message) processed in 4.98 seconds > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max connection rate 2/60s for (smtp:213.97.145.50) at Nov 30 09:08:44 > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max connection count 2 for (smtp:66.231.83.31) at Nov 30 09:17:13 > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max cache size 5 at Nov 30 09:08:42 > Nov 30 09:18:43 tornado MailScanner[29950]: Making attempt 6 at processing message 05A215004E.A0F82 > Nov 30 09:18:43 tornado MailScanner[29950]: New Batch: Scanning 1 messages, 113309 bytes > Nov 30 09:18:44 tornado MailScanner[30295]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... > Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration file /etc/MailScanner/MailScanner.conf > Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration file /etc/MailScanner/conf.d/README > Nov 30 09:18:44 tornado MailScanner[30295]: Connected to Processing Attempts Database > Nov 30 09:18:44 tornado MailScanner[30295]: Found 1 messages in the Processing Attempts Database > Nov 30 09:18:44 tornado MailScanner[30295]: Using locktype = flock > Nov 30 09:18:44 tornado MailScanner[30295]: Warning: skipping message 05A215004E.A0F82 as it has been attempted too many times > Nov 30 09:18:44 tornado MailScanner[30295]: Quarantined message 05A215004E.A0F82 as it caused MailScanner to crash several times > Nov 30 09:18:44 tornado MailScanner[30295]: Saved entire message to /var/spool/MailScanner/quarantine/20111130/05A215004E.A0F82 > > > Quarantined messages, attachments bring on some occasions doc files > > part of header message. > > Content-Type: multipart/mixed; > boundary="----=_NextPart_000_0044_01CCAF32.1F8B9A10" > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2900.2180 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 > X-EsetScannerBuild: 9822 > > This is a multi-part message in MIME format. > > ------=_NextPart_000_0044_01CCAF32.1F8B9A10 > Content-Type: multipart/alternative; > boundary="----=_NextPart_001_0045_01CCAF32.1F8E0B10" > > > ------=_NextPart_001_0045_01CCAF32.1F8E0B10 > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > > > Could you help me? > > Thanks > > Michel > > ---------------------------------------------- > Webmail, servicio de correo electronico > Casa de las Americas - La Habana, Cuba. > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111201/47eb3902/attachment.html From markus at markusoft.se Thu Dec 1 07:57:19 2011 From: markus at markusoft.se (Markus Nilsson) Date: Thu Dec 1 07:57:36 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> Message-ID: <36589b03-538e-452a-a292-d274dc4dae27@cronlabworkstation0> ----- Original Message ----- > From: michel@casa.co.cu > To: mailscanner@lists.mailscanner.info > Sent: torsdag, 1 dec 2011 4:43:43 > Subject: MailScanner 4.84 - attempted to kill MailScanner > > Hello > > I Work with CentOS 6 and I installed the latest version of > MailScanner > 4.84.3 with postfix as MTA and Clamav antivirus. > > In the MailScanner logs attempts to process a number of messages in > more than one occasion, and after trying repeatedly, quarantines and > returns the following message: > > MailScanner: Message attempted to kill MailScanner > > maillog: > > > Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Found 2 > messages waiting > Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Scanning 1 > messages, 1990 bytes > Nov 30 09:18:20 tornado MailScanner[29950]: Virus and Content > Scanning: Starting > Nov 30 09:18:25 tornado MailScanner[29950]: Virus Scanning completed > at 409 bytes per second > Nov 30 09:18:25 tornado MailScanner[29950]: Requeue: 0C7BA5005F.AB094 > to 93EC45005D > Nov 30 09:18:25 tornado postfix/qmgr[1260]: 93EC45005D: > from=, size=1730, nrcpt=1 (queue active) > Nov 30 09:18:25 tornado MailScanner[29950]: Uninfected: Delivered 1 > messages > Nov 30 09:18:25 tornado MailScanner[29950]: Virus Processing > completed > at 190354 bytes per second > Nov 30 09:18:25 tornado MailScanner[29950]: Deleted 1 messages from > processing-database > Nov 30 09:18:25 tornado MailScanner[29950]: Batch completed at 399 > bytes per second (1990 / 4) > Nov 30 09:18:25 tornado MailScanner[29950]: Batch (1 message) > processed in 4.98 seconds > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max > connection rate 2/60s for (smtp:213.97.145.50) at Nov 30 09:08:44 > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max > connection count 2 for (smtp:66.231.83.31) at Nov 30 09:17:13 > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max cache > size 5 at Nov 30 09:08:42 > Nov 30 09:18:43 tornado MailScanner[29950]: Making attempt 6 at > processing message 05A215004E.A0F82 > Nov 30 09:18:43 tornado MailScanner[29950]: New Batch: Scanning 1 > messages, 113309 bytes > Nov 30 09:18:44 tornado MailScanner[30295]: MailScanner E-Mail Virus > Scanner version 4.84.3 starting... > Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration > file > /etc/MailScanner/MailScanner.conf > Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration > file > /etc/MailScanner/conf.d/README > Nov 30 09:18:44 tornado MailScanner[30295]: Connected to Processing > Attempts Database > Nov 30 09:18:44 tornado MailScanner[30295]: Found 1 messages in the > Processing Attempts Database > Nov 30 09:18:44 tornado MailScanner[30295]: Using locktype = flock > Nov 30 09:18:44 tornado MailScanner[30295]: Warning: skipping message > 05A215004E.A0F82 as it has been attempted too many times > Nov 30 09:18:44 tornado MailScanner[30295]: Quarantined message > 05A215004E.A0F82 as it caused MailScanner to crash several times > Nov 30 09:18:44 tornado MailScanner[30295]: Saved entire message to > /var/spool/MailScanner/quarantine/20111130/05A215004E.A0F82 > > > Quarantined messages, attachments bring on some occasions doc files > > part of header message. > > Content-Type: multipart/mixed; > boundary="----=_NextPart_000_0044_01CCAF32.1F8B9A10" > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2900.2180 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 > X-EsetScannerBuild: 9822 > > This is a multi-part message in MIME format. > > ------=_NextPart_000_0044_01CCAF32.1F8B9A10 > Content-Type: multipart/alternative; > boundary="----=_NextPart_001_0045_01CCAF32.1F8E0B10" > > > ------=_NextPart_001_0045_01CCAF32.1F8E0B10 > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > > > Could you help me? > > Thanks > > Michel > Does a debug-run give you any more details? /Markus From mailscanner at treibts.org Thu Dec 1 14:04:00 2011 From: mailscanner at treibts.org (Georg) Date: Thu Dec 1 14:04:14 2011 Subject: External TNEF decoding bug in MailScanner 4.84.3 Message-ID: <4ED78950.9060203@treibts.org> Hello, i had the same problem with tnef and solved it this way: # diff -sur TNEF.pm.4.84.3 TNEF.pm.working --- TNEF.pm.4.84.3 2011-08-20 14:32:24.000000000 +0200 +++ TNEF.pm.working 2011-11-30 15:05:40.180563914 +0100 @@ -230,7 +230,7 @@ # Create the subdir to unpack it into #my $unpackdir = "tnef.$$"; my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); - $dir =~ s,^.*/,,; + $unpackdir =~ s,/,,; $unpackdir = $message->MakeNameSafe($unpackdir, $dir); unless (mkdir "$dir/$unpackdir", 0777) { MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not create subdirectory %s, failed to unpack TNEF message", $tnefname, $message->{id}, @@ -238,6 +238,7 @@ return 0; } chmod 0700, "$dir/$unpackdir"; + chown $owner, $group, "$dir/$unpackdir" if $change; my $cmd = MailScanner::Config::Value('tnefexpander') . " -f $dir/$tnefname -C $dir/$unpackdir --overwrite"; first line for correct incoming dir temp second one for clamd accessable furthermore, i see that incoming/SpamAssassin-Temp woun't be cleaned after processing TNEFs... Cheers, georg > Hi folks, > > The following change to TNEF.pm (from 4.83.5 to 4.84.3) breaks external TNEF decoding: > > > @@ -228,7 +228,9 @@ > my($dir, $tnefname, $message, $perms, $owner, $group, $change) = @_; > > # Create the subdir to unpack it into > - my $unpackdir = "tnef.$$"; > + #my $unpackdir = "tnef.$$"; > + my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); > + $dir =~ s,^.*/,,; > $unpackdir = $message->MakeNameSafe($unpackdir, $dir); > unless (mkdir "$dir/$unpackdir", 0777) { > MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not create subdirectory %s, failed to unpack TNEF message", $tnefname, $message->{id}, > > Error logged is: > > Sep 27 15:36:20 mx0 MailScanner[17000]: Expanding TNEF archive at /var/spool/MailScanner/incoming/17000/p8REaJo0023344/winmail.dat > Sep 27 15:36:20 mx0 MailScanner[17000]: Trying to unpack nwinmail.dat in message p8REaJo0023344, could not create subdirectory p8REaJo0023344//tnefiOXxho, failed to unpack TNEF message > Sep 27 15:36:20 mx0 MailScanner[17000]: Corrupt TNEF winmail.dat that cannot be analysed in message p8REaJo0023344 > > Changing to internal decoder fixes this. > > All worked fine with external decoder in 4.83.5. > > Cheers, > > Phil > -- > Phil Randal | Infrastructure Engineer > NHS Herefordshire & Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division > Thorn Office Centre, Rotherwas, Hereford, HR2 6JT > Tel: 01432 260160 > From michel at casa.co.cu Thu Dec 1 17:44:59 2011 From: michel at casa.co.cu (Michel Bulgado) Date: Thu Dec 1 17:49:59 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> Message-ID: <4ED7BD1B.1050003@casa.co.cu> Martin Hepworth wrote: > You need run this message through in debug mode to find out what's the > issue . Have a look on the wiki for how to do this and don't forget to > run as postfix when u do this > > Martin > > On Thursday, 1 December 2011, > wrote: > > Hello > > > > I Work with CentOS 6 and I installed the latest version of > MailScanner 4.84.3 with postfix as MTA and Clamav antivirus. > > > > In the MailScanner logs attempts to process a number of messages in > more than one occasion, and after trying repeatedly, quarantines and > returns the following message: > > > > MailScanner: Message attempted to kill MailScanner > > > > maillog: > > > > > > Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Found 2 > messages waiting > > Nov 30 09:18:20 tornado MailScanner[29950]: New Batch: Scanning 1 > messages, 1990 bytes > > Nov 30 09:18:20 tornado MailScanner[29950]: Virus and Content > Scanning: Starting > > Nov 30 09:18:25 tornado MailScanner[29950]: Virus Scanning completed > at 409 bytes per second > > Nov 30 09:18:25 tornado MailScanner[29950]: Requeue: > 0C7BA5005F.AB094 to 93EC45005D > > Nov 30 09:18:25 tornado postfix/qmgr[1260]: 93EC45005D: > from=>, > size=1730, nrcpt=1 (queue active) > > Nov 30 09:18:25 tornado MailScanner[29950]: Uninfected: Delivered 1 > messages > > Nov 30 09:18:25 tornado MailScanner[29950]: Virus Processing > completed at 190354 bytes per second > > Nov 30 09:18:25 tornado MailScanner[29950]: Deleted 1 messages from > processing-database > > Nov 30 09:18:25 tornado MailScanner[29950]: Batch completed at 399 > bytes per second (1990 / 4) > > Nov 30 09:18:25 tornado MailScanner[29950]: Batch (1 message) > processed in 4.98 seconds > > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max > connection rate 2/60s for (smtp:213.97.145.50) at Nov 30 09:08:44 > > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max > connection count 2 for (smtp:66.231.83.31) at Nov 30 09:17:13 > > Nov 30 09:18:32 tornado postfix/anvil[26593]: statistics: max cache > size 5 at Nov 30 09:08:42 > > Nov 30 09:18:43 tornado MailScanner[29950]: Making attempt 6 at > processing message 05A215004E.A0F82 > > Nov 30 09:18:43 tornado MailScanner[29950]: New Batch: Scanning 1 > messages, 113309 bytes > > Nov 30 09:18:44 tornado MailScanner[30295]: MailScanner E-Mail Virus > Scanner version 4.84.3 starting... > > Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration > file /etc/MailScanner/MailScanner.conf > > Nov 30 09:18:44 tornado MailScanner[30295]: Reading configuration > file /etc/MailScanner/conf.d/README > > Nov 30 09:18:44 tornado MailScanner[30295]: Connected to Processing > Attempts Database > > Nov 30 09:18:44 tornado MailScanner[30295]: Found 1 messages in the > Processing Attempts Database > > Nov 30 09:18:44 tornado MailScanner[30295]: Using locktype = flock > > Nov 30 09:18:44 tornado MailScanner[30295]: Warning: skipping > message 05A215004E.A0F82 as it has been attempted too many times > > Nov 30 09:18:44 tornado MailScanner[30295]: Quarantined message > 05A215004E.A0F82 as it caused MailScanner to crash several times > > Nov 30 09:18:44 tornado MailScanner[30295]: Saved entire message to > /var/spool/MailScanner/quarantine/20111130/05A215004E.A0F82 > > > > > > Quarantined messages, attachments bring on some occasions doc files > > > > part of header message. > > > > Content-Type: multipart/mixed; > > boundary="----=_NextPart_000_0044_01CCAF32.1F8B9A10" > > X-Priority: 3 > > X-MSMail-Priority: Normal > > X-Mailer: Microsoft Outlook Express 6.00.2900.2180 > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 > > X-EsetScannerBuild: 9822 > > > > This is a multi-part message in MIME format. > > > > ------=_NextPart_000_0044_01CCAF32.1F8B9A10 > > Content-Type: multipart/alternative; > > boundary="----=_NextPart_001_0045_01CCAF32.1F8E0B10" > > > > > > ------=_NextPart_001_0045_01CCAF32.1F8E0B10 > > Content-Type: text/plain; > > charset="iso-8859-1" > > Content-Transfer-Encoding: quoted-printable > > > > > > Could you help me? > > > > Thanks > > > > Michel > > > > ---------------------------------------------- > > Webmail, servicio de correo electronico > > Casa de las Americas - La Habana, Cuba. > > > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > -- > -- > Martin Hepworth > Oxford, UK Hi and thanks to all persons for reply me in short time I check clamd.log and freshclam.log, only show process update Thu Dec 1 12:41:35 2011 -> SelfCheck: Database status OK. Freshclam ClamAV update process started at Thu Dec 1 03:41:01 2011 main.cvd is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven) Downloading daily-14042.cdiff [100%] Downloading daily-14043.cdiff [100%] Downloading daily-14044.cdiff [100%] Downloading daily-14045.cdiff [100%] Downloading daily-14046.cdiff [100%] Downloading daily-14047.cdiff [100%] daily.cld updated (version: 14047, sigs: 43122, f-level: 60, builder: guitar) bytecode.cld is up to date (version: 154, sigs: 38, f-level: 60, builder: edwin) Database updated (1087547 signatures) from db.cu.clamav.net (IP: 194.47.250.218) Clamd successfully notified about the update. I edit the MailScanner.conf file, setting "Debug=yes" and restart the MailScanner, in maillog the only cant i note is this: Dec 1 11:27:38 rodas MailScanner[23151]: lock.pl sees Config LockType = flock Dec 1 11:27:38 rodas MailScanner[23151]: lock.pl sees have_module = 0 Dec 1 11:27:38 rodas MailScanner[23151]: Using locktype = flock MailScanner tries to process the message in multiple times and i not see error messages in maillog After go to wiki site, I see how set MailScanner in debug mode: http://wiki.mailscanner.info/doku.php?id=documentation:test_troubleshoot:mailscanner root@server ~]# check_MailScanner Starting MailScanner...11:55:49 Building a message batch to scan... 11:55:49 Have a batch of 1 message. 11:55:49 Insecure dependency in chmod while running with -T switch at /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. So i check if is a permission or owner problem [root@server ~]# ll /var/spool/MailScanner/ total 8 drwxr-xr-x. 6 postfix clamav 4096 Dec 1 12:05 incoming drwxr-xr-x. 10 postfix apache 4096 Dec 1 00:28 quarantine But i thinks this is Ok Any Ideas (Sorry for my english , is very poor) Thanks Michel -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111201/372000f8/attachment.html From jaearick at colby.edu Thu Dec 1 20:12:44 2011 From: jaearick at colby.edu (Jeff Earickson) Date: Thu Dec 1 20:13:16 2011 Subject: Problem messages In-Reply-To: <43cf2fc8-4586-42dd-921a-4cc7be7536b0@cronlabworkstation0> References: <43cf2fc8-4586-42dd-921a-4cc7be7536b0@cronlabworkstation0> Message-ID: All, I could not get this message to run thru sendmail or MailScanner. To do it, I would need the original qf and df files, the two components of the message as sendmail handles them. I tried to reconstruct the two parts (header and body) but couldn't get it to work. Jeff Earickson Colby College On Wed, Nov 30, 2011 at 2:45 AM, Markus Nilsson wrote: >> >> On Tue, Nov 29, 2011 at 6:38 PM, Ian Fenn >> wrote: >> > On 29 Nov 2011, at 16:15, Jeff Earickson wrote: >> >> Nope, I haven't found a message that I can reproduce this with. >> >> ?:( >> > >> > Same here. >> > >> > -- >> > Ian >> > -- >> >> This message, http://pastebin.com/sfrDvreB, broke my mailscanner. >> >> -- > > Then it seems we might have a candidate to run a debug run on! > > Ian or Jeff, are you able to to run this message through your setup with the debug-flag to see? > > /Markus > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From john at tradoc.fr Thu Dec 1 20:38:33 2011 From: john at tradoc.fr (John Wilcock) Date: Thu Dec 1 20:38:53 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <4ED7BD1B.1050003@casa.co.cu> References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> Message-ID: <4ED7E5C9.3070604@tradoc.fr> Le 01/12/2011 18:44, Michel Bulgado a ?crit : > Insecure dependency in chmod while running with -T switch at > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. There's a patch for that in https://rt.cpan.org/Public/Bug/Display.html?id=61930 -- John From michel at casa.co.cu Thu Dec 1 21:44:24 2011 From: michel at casa.co.cu (Michel Bulgado) Date: Thu Dec 1 21:44:59 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <4ED7E5C9.3070604@tradoc.fr> References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> Message-ID: <4ED7F538.5010105@casa.co.cu> John Wilcock wrote: > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >> Insecure dependency in chmod while running with -T switch at >> /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. > > There's a patch for that in > https://rt.cpan.org/Public/Bug/Display.html?id=61930 > Ok, i download the patch file, i see the patch is for perl files, so i ask , the problem is perl o MailScanner? So, when a go to apply the patch, I get a error, he can't find the file 10_chmod.t [root@server MailScanner]# patch -p1 < patch_MailScanner.txt can't find file to patch at input line 5 Perhaps you used the wrong -p or --strip option? The text leading up to this was: -------------------------- |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm |index f86ef75..4bb2171 100644 |--- a/lib/Archive/Zip/Member.pm |+++ b/lib/Archive/Zip/Member.pm -------------------------- File to patch: /usr/share/perl5/Archive/Zip/Member.pm patching file /usr/share/perl5/Archive/Zip/Member.pm can't find file to patch at input line 46 Perhaps you used the wrong -p or --strip option? The text leading up to this was: -------------------------- |diff --git a/t/10_chmod.t b/t/10_chmod.t |index 7ae647f..0495062 100644 |--- a/t/10_chmod.t |+++ b/t/10_chmod.t -------------------------- File to patch: Skip this patch? [y] n File to patch: Skip this patch? [y] y Skipping patch. 1 out of 1 hunk ignored Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch Ideas? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111201/602155ea/attachment.html From michel at casa.co.cu Fri Dec 2 03:31:20 2011 From: michel at casa.co.cu (michel@casa.co.cu) Date: Fri Dec 2 03:31:50 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <4ED7E5C9.3070604@tradoc.fr> References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> Message-ID: <20111201223120.14135tnq8eyqiweg@webmail.casa.cult.cu> John Wilcock escribi?: > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >> Insecure dependency in chmod while running with -T switch at >> /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. > > There's a patch for that in > https://rt.cpan.org/Public/Bug/Display.html?id=61930 > > -- > John > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! I Wonder, can any could tell me, if the problem is MailScanner 4.84 , Perl or Clamav? This problem comes, when i decide migrate the MX server, previosly i use CentOS 5.6 with MailScanner 4.78.17 and older verion of clamav. Maybe if the Problem reside in MailScanner i can use previously version, until fix the problem, because i have a lot users call me. Greetings Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba. From maxsec at gmail.com Fri Dec 2 06:32:42 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Fri Dec 2 06:32:50 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <4ED7F538.5010105@casa.co.cu> References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: That's a perl issue and patch Martin On Thursday, 1 December 2011, Michel Bulgado wrote: > John Wilcock wrote: > > Le 01/12/2011 18:44, Michel Bulgado a ?crit : > > Insecure dependency in chmod while running with -T switch at > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. > > There's a patch for that in https://rt.cpan.org/Public/Bug/Display.html?id=61930 > > Ok, i download the patch file, i see the patch is for perl files, so i ask , the problem is perl o MailScanner? > > So, when a go to apply the patch, I get a error, he can't find the file 10_chmod.t > > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt > can't find file to patch at input line 5 > Perhaps you used the wrong -p or --strip option? > The text leading up to this was: > -------------------------- > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm > |index f86ef75..4bb2171 100644 > |--- a/lib/Archive/Zip/Member.pm > |+++ b/lib/Archive/Zip/Member.pm > -------------------------- > File to patch: /usr/share/perl5/Archive/Zip/Member.pm > patching file /usr/share/perl5/Archive/Zip/Member.pm > can't find file to patch at input line 46 > Perhaps you used the wrong -p or --strip option? > The text leading up to this was: > -------------------------- > |diff --git a/t/10_chmod.t b/t/10_chmod.t > |index 7ae647f..0495062 100644 > |--- a/t/10_chmod.t > |+++ b/t/10_chmod.t > -------------------------- > File to patch: > Skip this patch? [y] n > File to patch: > Skip this patch? [y] y > Skipping patch. > 1 out of 1 hunk ignored > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch > > Ideas? > > > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111202/f8ecbf5c/attachment.html From markus at markusoft.se Fri Dec 2 07:50:39 2011 From: markus at markusoft.se (Markus Nilsson) Date: Fri Dec 2 07:50:55 2011 Subject: Problem messages In-Reply-To: Message-ID: ----- Original Message ----- > From: "Jeff Earickson" > To: "MailScanner discussion" > Sent: torsdag, 1 dec 2011 21:12:44 > Subject: Re: Problem messages > > All, > > I could not get this message to run thru sendmail or MailScanner. To > do it, I would need the original qf and df files, the two components > of the message as sendmail handles them. I tried to reconstruct the > two parts (header and body) but couldn't get it to work. > > Jeff Earickson > Colby College What happens if you just pipe the message to sendmail; this changes the mail slightly, so maybe the bug goes away, but maybe worth a shot? sendmail test_recipient@test.com < mail_file /Markus > > On Wed, Nov 30, 2011 at 2:45 AM, Markus Nilsson > wrote: > >> > >> On Tue, Nov 29, 2011 at 6:38 PM, Ian Fenn > >> wrote: > >> > On 29 Nov 2011, at 16:15, Jeff Earickson wrote: > >> >> Nope, I haven't found a message that I can reproduce this with. > >> >> ?:( > >> > > >> > Same here. > >> > > >> > -- > >> > Ian > >> > -- > >> > >> This message, http://pastebin.com/sfrDvreB, broke my mailscanner. > >> > >> -- > > > > Then it seems we might have a candidate to run a debug run on! > > > > Ian or Jeff, are you able to to run this message through your setup > > with the debug-flag to see? > > > > /Markus > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > From jaearick at colby.edu Fri Dec 2 14:55:25 2011 From: jaearick at colby.edu (Jeff Earickson) Date: Fri Dec 2 14:55:57 2011 Subject: Problem messages In-Reply-To: References: Message-ID: On Fri, Dec 2, 2011 at 2:50 AM, Markus Nilsson wrote: > ----- Original Message ----- >> From: "Jeff Earickson" >> To: "MailScanner discussion" >> Sent: torsdag, 1 dec 2011 21:12:44 >> Subject: Re: Problem messages >> >> All, >> >> I could not get this message to run thru sendmail or MailScanner. ?To >> do it, I would need the original qf and df files, the two components >> of the message as sendmail handles them. ?I tried to reconstruct the >> two parts (header and body) but couldn't get it to work. >> >> Jeff Earickson >> Colby College > > What happens if you just pipe the message to sendmail; this changes the mail slightly, so maybe the bug goes away, but maybe worth a shot? > > sendmail test_recipient@test.com < mail_file Markus, Sendmail just takes the mail_file and sends it on to our MX records (Postini/google in our case). MailScanner never saw it at all. Somehow I need to drop the qf and df components of the message into /var/spool/mqueue.in so that MailScanner can pick up the message. :( Jeff Earickson From michel at casa.co.cu Sat Dec 3 12:42:36 2011 From: michel at casa.co.cu (michel@casa.co.cu) Date: Sat Dec 3 12:43:34 2011 Subject: MailScanner 4.84 - attempted to kill MailScanner - Solved In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: <20111203074236.10022dkn5qdvm5oc@webmail.casa.cult.cu> Martin Hepworth escribi?: > That's a perl issue and patch > > Martin > > > On Thursday, 1 December 2011, Michel Bulgado wrote: >> John Wilcock wrote: >> >> Le 01/12/2011 18:44, Michel Bulgado a ?crit : >> >> Insecure dependency in chmod while running with -T switch at >> /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. >> >> There's a patch for that in > https://rt.cpan.org/Public/Bug/Display.html?id=61930 >> >> Ok, i download the patch file, i see the patch is for perl files, so i > ask , the problem is perl o MailScanner? >> >> So, when a go to apply the patch, I get a error, he can't find the file > 10_chmod.t >> >> [root@server MailScanner]# patch -p1 < patch_MailScanner.txt >> can't find file to patch at input line 5 >> Perhaps you used the wrong -p or --strip option? >> The text leading up to this was: >> -------------------------- >> |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm >> |index f86ef75..4bb2171 100644 >> |--- a/lib/Archive/Zip/Member.pm >> |+++ b/lib/Archive/Zip/Member.pm >> -------------------------- >> File to patch: /usr/share/perl5/Archive/Zip/Member.pm >> patching file /usr/share/perl5/Archive/Zip/Member.pm >> can't find file to patch at input line 46 >> Perhaps you used the wrong -p or --strip option? >> The text leading up to this was: >> -------------------------- >> |diff --git a/t/10_chmod.t b/t/10_chmod.t >> |index 7ae647f..0495062 100644 >> |--- a/t/10_chmod.t >> |+++ b/t/10_chmod.t >> -------------------------- >> File to patch: >> Skip this patch? [y] n >> File to patch: >> Skip this patch? [y] y >> Skipping patch. >> 1 out of 1 hunk ignored >> Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i have > installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch >> >> Ideas? >> I Solved the problem, applying the patch Thanks Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba. From maillists at conactive.com Sat Dec 3 16:31:18 2011 From: maillists at conactive.com (Kai Schaetzl) Date: Sat Dec 3 16:31:29 2011 Subject: Lots of empty files in Spamassassin-Temp In-Reply-To: <4ECFBADE.1040602@netdirect.ca> References: <4ECFBADE.1040602@netdirect.ca> Message-ID: Michael Brown wrote on Fri, 25 Nov 2011 10:57:18 -0500: > I've just noticed that I have *tons* (44K) of empty files in > /var/spool/MailScanner/incoming/Spamassassin-Temp Not having any file there, except for a few old ones from 2009 and 2010. Obviously from some debugging or upgrading issues. Maybe there is a permission issue so that unlinking doesn't work. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com From mikoletic at gmail.com Sun Dec 4 13:42:31 2011 From: mikoletic at gmail.com (Milenko Letic) Date: Sun Dec 4 13:42:42 2011 Subject: Lots of empty files in Spamassassin-Temp In-Reply-To: References: <4ECFBADE.1040602@netdirect.ca> Message-ID: is it everything ok with reciving your mail, who have winmail.dat files in it, i have same problem with tnef in MailSccanner.conf. On Sat, Dec 3, 2011 at 5:31 PM, Kai Schaetzl wrote: > Michael Brown wrote on Fri, 25 Nov 2011 10:57:18 -0500: > > > I've just noticed that I have *tons* (44K) of empty files in > > /var/spool/MailScanner/incoming/Spamassassin-Temp > > Not having any file there, except for a few old ones from 2009 and 2010. > Obviously from some debugging or upgrading issues. > Maybe there is a permission issue so that unlinking doesn't work. > > Kai > > -- > Get your web at Conactive Internet Services: http://www.conactive.com > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111204/5e116a33/attachment.html From maillists at conactive.com Mon Dec 5 02:31:16 2011 From: maillists at conactive.com (Kai Schaetzl) Date: Mon Dec 5 02:31:27 2011 Subject: Lots of empty files in Spamassassin-Temp In-Reply-To: References: <4ECFBADE.1040602@netdirect.ca> Message-ID: Milenko Letic wrote on Sun, 4 Dec 2011 14:42:31 +0100: > is it everything ok with reciving your mail, who have winmail.dat files in > it, i have same problem with tnef in MailSccanner.conf. Everything is fine here. I can't tell you about tnef. Not receiving much of that garbage and not taking care of it. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com From Garrod.Alwood at lorodoes.com Mon Dec 5 04:25:54 2011 From: Garrod.Alwood at lorodoes.com (Garrod M. Alwood) Date: Mon Dec 5 04:31:00 2011 Subject: New Mailwatch Message-ID: Hello Everyone, I would everyone to know that there is a new version of Mailwatch that has been released. Please download the latest version and let me know what you think. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com From jeremy at fluxlabs.net Mon Dec 5 04:46:01 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Mon Dec 5 04:46:16 2011 Subject: New Mailwatch In-Reply-To: References: Message-ID: Thanks, where is an updated changelog ? seems the one packed hasn't been touched since 2005. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 4, 2011, at 10:25 PM, Garrod M. Alwood wrote: Hello Everyone, I would everyone to know that there is a new version of Mailwatch that has been released. Please download the latest version and let me know what you think. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com-- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111205/d565c639/attachment.html From brent.addis at nsp.co.nz Mon Dec 5 04:49:27 2011 From: brent.addis at nsp.co.nz (Brent Addis) Date: Mon Dec 5 04:50:37 2011 Subject: New Mailwatch In-Reply-To: References: Message-ID: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> You mean Baruwa? It's been out a while now? Brent Addis Systems Integration Specialist Network Service Providers Ltd. Unit 1, 13 Farnham St, Parnell, Auckland 1052 PO Box 90208, Victoria West, Auckland Email: mailto:brent.addis@nsp.co.nz | Support: support@nsp.co.nz | Web: http://www.nsp.co.nz Tel: +64-9-306-0230 | Support: +64-9-306-0234 | Fax: +64-9-306-0239 This email message and any accompanying attachments may contain legally priveliged and confidential information intended for the addressee only. If you are not the addressee your use of this information is strictly prohibited. NSP - 2011 Managed Services Rookie of the Year Award - Australasia ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] on behalf of Garrod M. Alwood [Garrod.Alwood@lorodoes.com] Sent: Monday, 5 December 2011 5:25 p.m. To: MailScanner discussion Subject: New Mailwatch Hello Everyone, I would everyone to know that there is a new version of Mailwatch that has been released. Please download the latest version and let me know what you think. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com-- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by SmartiScan, and is believed to be clean. From Garrod.Alwood at lorodoes.com Mon Dec 5 04:47:26 2011 From: Garrod.Alwood at lorodoes.com (Garrod M. Alwood) Date: Mon Dec 5 04:53:09 2011 Subject: New Mailwatch In-Reply-To: References: , Message-ID: Oops, I'll go ahead and update that, but here is it for this release: 1) Mailwatch can now monitor postfix 2) Mailscanner --lint form the Mailwatch 3) new jpgraph 4) updated xmlrpc 5) new auth verification 6) login page 7) Some code was streamlined Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden [jeremy@fluxlabs.net] Sent: Sunday, December 04, 2011 11:46 PM To: MailScanner discussion Subject: Re: New Mailwatch Thanks, where is an updated changelog ? seems the one packed hasn't been touched since 2005. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 4, 2011, at 10:25 PM, Garrod M. Alwood wrote: Hello Everyone, I would everyone to know that there is a new version of Mailwatch that has been released. Please download the latest version and let me know what you think. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com-- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jeremy at fluxlabs.net Mon Dec 5 05:03:55 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Mon Dec 5 05:04:08 2011 Subject: New Mailwatch In-Reply-To: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> References: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> Message-ID: <48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net> This is the MailScanner ML, so he was correct in saying MailWatch. http://mailwatch.sourceforge.net -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 4, 2011, at 10:49 PM, Brent Addis wrote: You mean Baruwa? It's been out a while now? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111205/b3b3c100/attachment.html From mikoletic at gmail.com Mon Dec 5 07:19:00 2011 From: mikoletic at gmail.com (Milenko Letic) Date: Mon Dec 5 07:19:10 2011 Subject: Lots of empty files in Spamassassin-Temp In-Reply-To: References: <4ECFBADE.1040602@netdirect.ca> Message-ID: ok i just quest because sometimes if MailScanner cant proces your winmail.dat or recipint cant recognize tnef, it make empty files in Spamassassin-Temp On Mon, Dec 5, 2011 at 3:31 AM, Kai Schaetzl wrote: > Milenko Letic wrote on Sun, 4 Dec 2011 14:42:31 +0100: > > > is it everything ok with reciving your mail, who have winmail.dat files > in > > it, i have same problem with tnef in MailSccanner.conf. > > Everything is fine here. I can't tell you about tnef. Not receiving much of > that garbage and not taking care of it. > > Kai > > -- > Get your web at Conactive Internet Services: http://www.conactive.com > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111205/a2104703/attachment.html From maillists at conactive.com Mon Dec 5 15:47:41 2011 From: maillists at conactive.com (Kai Schaetzl) Date: Mon Dec 5 15:47:50 2011 Subject: New Mailwatch In-Reply-To: References: Message-ID: Folks, beware! Do not untar in a directory that holds your Mailwatch installation as "mailwatch"! It untars to "mailwatch" (and not mailwatch- 1.1) thus effectively overwriting your existing installation! Anyway, thanks for your hard work, Garrod! (next time just tar a directory named mailwatch-1.x please, instead of renaming the tar.gz file ;-) Kai -- Get your web at Conactive Internet Services: http://www.conactive.com From rob.verduijn at gmail.com Mon Dec 5 20:34:06 2011 From: rob.verduijn at gmail.com (Rob Verduijn) Date: Mon Dec 5 20:41:37 2011 Subject: New Mailwatch In-Reply-To: References: Message-ID: Hmmm.... Is this a real one or a trojanized version from a hacker ? I find it a bit curious that after such a long time of silence the mailwatch project suddenly shows signs of life. Anybody who can confirm the authenticiy of this release ? Rob Verduijn 2011/12/5 Kai Schaetzl > Folks, beware! Do not untar in a directory that holds your Mailwatch > installation as "mailwatch"! It untars to "mailwatch" (and not mailwatch- > 1.1) thus effectively overwriting your existing installation! > > Anyway, thanks for your hard work, Garrod! (next time just tar a directory > named mailwatch-1.x please, instead of renaming the tar.gz file ;-) > > Kai > > -- > Get your web at Conactive Internet Services: http://www.conactive.com > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111205/21a845c9/attachment.html From maillists at conactive.com Mon Dec 5 21:19:07 2011 From: maillists at conactive.com (Kai Schaetzl) Date: Mon Dec 5 21:19:21 2011 Subject: New Mailwatch In-Reply-To: References: Message-ID: Yes, it is. You could have looked at the Sourceforge page to gather that yourself ;-) Anyway, you should subscribe to the mailwatch list. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com From Garrod.Alwood at lorodoes.com Mon Dec 5 21:30:25 2011 From: Garrod.Alwood at lorodoes.com (Garrod M. Alwood) Date: Mon Dec 5 21:36:22 2011 Subject: New Mailwatch In-Reply-To: References: , Message-ID: Rob, All of my code is open and easily read. I have been working on this for patch release for a long time and have had the rights to upload for a while as well. Please feel free to look at the CVS as I have submitted all of the code changes there as well. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Rob Verduijn [rob.verduijn@gmail.com] Sent: Monday, December 05, 2011 3:34 PM To: MailScanner discussion Subject: Re: New Mailwatch Hmmm.... Is this a real one or a trojanized version from a hacker ? I find it a bit curious that after such a long time of silence the mailwatch project suddenly shows signs of life. Anybody who can confirm the authenticiy of this release ? Rob Verduijn 2011/12/5 Kai Schaetzl > Folks, beware! Do not untar in a directory that holds your Mailwatch installation as "mailwatch"! It untars to "mailwatch" (and not mailwatch- 1.1) thus effectively overwriting your existing installation! Anyway, thanks for your hard work, Garrod! (next time just tar a directory named mailwatch-1.x please, instead of renaming the tar.gz file ;-) Kai -- Get your web at Conactive Internet Services: http://www.conactive.com -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From brent.addis at nsp.co.nz Tue Dec 6 02:39:23 2011 From: brent.addis at nsp.co.nz (Brent Addis) Date: Tue Dec 6 02:40:09 2011 Subject: New Mailwatch In-Reply-To: <48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net> References: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> <48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net> Message-ID: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> Baruwa is a mailscanner frontend in ajax, its totally stable and to be honest I?d never look back at mailwatch =P Brent Addis Systems Integration Specialist Network Service Providers Ltd. Unit 1, 13 Farnham St, Parnell, Auckland 1052 PO Box 90208, Victoria West, Auckland Email: brent.addis@nsp.co.nz | Support: support@nsp.co.nz | Web: http://www.nsp.co.nz Tel: +64-9-306-0230 | Support: +64-9-306-0234 | Fax: +64-9-306-0239 This email message and any accompanying attachments may contain legally priveliged and confidential information intended for the addressee only. If you are not the addressee your use of this information is strictly prohibited. NSP - 2011 Managed Services Rookie of the Year Award - Australasia From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden Sent: Monday, 5 December 2011 6:04 p.m. To: MailScanner discussion Subject: Re: New Mailwatch This is the MailScanner ML, so he was correct in saying MailWatch. http://mailwatch.sourceforge.net -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 4, 2011, at 10:49 PM, Brent Addis wrote: You mean Baruwa? It's been out a while now? -- This message has been scanned for viruses and dangerous content by SmartiScan, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111206/40fa6b44/attachment.html From Garrod.Alwood at lorodoes.com Tue Dec 6 03:23:22 2011 From: Garrod.Alwood at lorodoes.com (Garrod M. Alwood) Date: Tue Dec 6 03:28:52 2011 Subject: New Mailwatch In-Reply-To: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> References: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> <48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net>, <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> Message-ID: It's just like opensource, each person has their own personal opinion. I am working on Mailwatch and when I am done with it you won't even recognize it. Allow me a few months and come back and check on it. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Brent Addis [brent.addis@nsp.co.nz] Sent: Monday, December 05, 2011 9:39 PM To: MailScanner discussion Subject: RE: New Mailwatch Baruwa is a mailscanner frontend in ajax, its totally stable and to be honest I?d never look back at mailwatch =P Brent Addis Systems Integration Specialist Network Service Providers Ltd. Unit 1, 13 Farnham St, Parnell, Auckland 1052 PO Box 90208, Victoria West, Auckland Email: brent.addis@nsp.co.nz | Support: support@nsp.co.nz | Web: http://www.nsp.co.nz Tel: +64-9-306-0230 | Support: +64-9-306-0234 | Fax: +64-9-306-0239 This email message and any accompanying attachments may contain legally priveliged and confidential information intended for the addressee only. If you are not the addressee your use of this information is strictly prohibited. NSP - 2011 Managed Services Rookie of the Year Award - Australasia From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden Sent: Monday, 5 December 2011 6:04 p.m. To: MailScanner discussion Subject: Re: New Mailwatch This is the MailScanner ML, so he was correct in saying MailWatch. http://mailwatch.sourceforge.net -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 4, 2011, at 10:49 PM, Brent Addis wrote: You mean Baruwa? It's been out a while now? -- This message has been scanned for viruses and dangerous content by SmartiScan, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From brent.addis at nsp.co.nz Tue Dec 6 04:24:28 2011 From: brent.addis at nsp.co.nz (Brent Addis) Date: Tue Dec 6 04:25:28 2011 Subject: New Mailwatch In-Reply-To: References: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> <48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net>, <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> Message-ID: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE43E@nspexch01.nsp.local> Happy too, I was more commenting on the way mailtwatch was, than what it it going to be. Personally I would rather the projects merged =P Brent Addis Systems Integration Specialist Network Service Providers Ltd. Unit 1, 13 Farnham St, Parnell, Auckland 1052 PO Box 90208, Victoria West, Auckland Email: mailto:brent.addis@nsp.co.nz | Support: support@nsp.co.nz | Web: http://www.nsp.co.nz Tel: +64-9-306-0230 | Support: +64-9-306-0234 | Fax: +64-9-306-0239 This email message and any accompanying attachments may contain legally priveliged and confidential information intended for the addressee only. If you are not the addressee your use of this information is strictly prohibited. NSP - 2011 Managed Services Rookie of the Year Award - Australasia -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Garrod M. Alwood Sent: Tuesday, 6 December 2011 4:23 p.m. To: MailScanner discussion Subject: RE: New Mailwatch It's just like opensource, each person has their own personal opinion. I am working on Mailwatch and when I am done with it you won't even recognize it. Allow me a few months and come back and check on it. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com ________________________________________ From: mailscanner-bounces@lists.mailscanner.info [mailscanner-bounces@lists.mailscanner.info] On Behalf Of Brent Addis [brent.addis@nsp.co.nz] Sent: Monday, December 05, 2011 9:39 PM To: MailScanner discussion Subject: RE: New Mailwatch Baruwa is a mailscanner frontend in ajax, its totally stable and to be honest I'd never look back at mailwatch =P Brent Addis Systems Integration Specialist Network Service Providers Ltd. Unit 1, 13 Farnham St, Parnell, Auckland 1052 PO Box 90208, Victoria West, Auckland Email: brent.addis@nsp.co.nz | Support: support@nsp.co.nz | Web: http://www.nsp.co.nz Tel: +64-9-306-0230 | Support: +64-9-306-0234 | Fax: +64-9-306-0239 This email message and any accompanying attachments may contain legally priveliged and confidential information intended for the addressee only. If you are not the addressee your use of this information is strictly prohibited. NSP - 2011 Managed Services Rookie of the Year Award - Australasia From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden Sent: Monday, 5 December 2011 6:04 p.m. To: MailScanner discussion Subject: Re: New Mailwatch This is the MailScanner ML, so he was correct in saying MailWatch. http://mailwatch.sourceforge.net -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 4, 2011, at 10:49 PM, Brent Addis wrote: You mean Baruwa? It's been out a while now? -- This message has been scanned for viruses and dangerous content by SmartiScan, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by SmartiScan, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by SmartiScan, and is believed to be clean. From markus at markusoft.se Tue Dec 6 08:33:06 2011 From: markus at markusoft.se (Markus Nilsson) Date: Tue Dec 6 08:33:25 2011 Subject: Problem messages In-Reply-To: Message-ID: <2db57614-9535-4795-8737-7c14e0ad738d@cronlabworkstation0> ----- Original Message ----- > From: "Jeff Earickson" > To: "MailScanner discussion" > Sent: fredag, 2 dec 2011 15:55:25 > Subject: Re: Problem messages > > On Fri, Dec 2, 2011 at 2:50 AM, Markus Nilsson > wrote: > > ----- Original Message ----- > >> From: "Jeff Earickson" > >> To: "MailScanner discussion" > >> Sent: torsdag, 1 dec 2011 21:12:44 > >> Subject: Re: Problem messages > >> > >> All, > >> > >> I could not get this message to run thru sendmail or MailScanner. > >> ?To > >> do it, I would need the original qf and df files, the two > >> components > >> of the message as sendmail handles them. ?I tried to reconstruct > >> the > >> two parts (header and body) but couldn't get it to work. > >> > >> Jeff Earickson > >> Colby College > > > > What happens if you just pipe the message to sendmail; this changes > > the mail slightly, so maybe the bug goes away, but maybe worth a > > shot? > > > > sendmail test_recipient@test.com < mail_file > > Markus, > > Sendmail just takes the mail_file and sends it on to our MX records > (Postini/google in our case). MailScanner never saw it at all. > Somehow I need to drop the qf and df components of the message into > /var/spool/mqueue.in so that MailScanner can pick up the message. :( > Ok, so I guess your mailscanner is by-passed when the mail is inserted from localhost..? I'm not using sendmail, so I can't create the files for you; but in postfix I would have added a broken transport for one made-up domain, by pointing it to an IP which doesn't respond. Then I would send the mail to that domain, and the mail would be stuck in the deferred queue, where I could easily pick it up! /Markus From rcooper at dwford.com Tue Dec 6 13:56:32 2011 From: rcooper at dwford.com (Rick Cooper) Date: Tue Dec 6 13:56:50 2011 Subject: New Mailwatch In-Reply-To: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> References: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local><48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net> <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> Message-ID: Unless you are looking for something light weight that doesn't require a couple of dozen large dependencies to go along with it _____ From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Brent Addis Sent: Monday, December 05, 2011 9:39 PM To: MailScanner discussion Subject: RE: New Mailwatch Baruwa is a mailscanner frontend in ajax, its totally stable and to be honest I'd never look back at mailwatch =P -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111206/ecb98232/attachment.html From rob.verduijn at gmail.com Tue Dec 6 13:59:44 2011 From: rob.verduijn at gmail.com (Rob Verduijn) Date: Tue Dec 6 13:59:53 2011 Subject: New Mailwatch In-Reply-To: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE43E@nspexch01.nsp.local> References: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> <48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net> <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE43E@nspexch01.nsp.local> Message-ID: Hi, Good to hear mailwatch is being updated again. Looking forward to a changelog of the 1.1 and the previous release (couldn't find it yesterday, I must admit I didn't spend much time on it) I must admit I've installed baruwa on a couple servers due to the lack of updates from mailwatch, I liked what I saw. But since I'm a perl fanboy I'm looking forward to your new and improved mailwatch version. Maybe you could do a roadmap. Signing up for the mailwatch list again. Rob Verduijn 2011/12/6 Brent Addis > Happy too, I was more commenting on the way mailtwatch was, than what it > it going to be. > > Personally I would rather the projects merged =P > > > > > > Brent Addis > Systems Integration Specialist > Network Service Providers Ltd. > > Unit 1, 13 Farnham St, Parnell, Auckland 1052 > PO Box 90208, Victoria West, Auckland > > Email: mailto:brent.addis@nsp.co.nz | Support: support@nsp.co.nz | Web: > http://www.nsp.co.nz > Tel: +64-9-306-0230 | Support: +64-9-306-0234 | Fax: +64-9-306-0239 > > This email message and any accompanying attachments may contain > legally priveliged and confidential information intended for the addressee > only. If you are not the addressee your use of this information is > strictly prohibited. > > NSP - 2011 Managed Services Rookie of the Year Award - Australasia > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto: > mailscanner-bounces@lists.mailscanner.info] On Behalf Of Garrod M. Alwood > Sent: Tuesday, 6 December 2011 4:23 p.m. > To: MailScanner discussion > Subject: RE: New Mailwatch > > It's just like opensource, each person has their own personal opinion. I > am working on Mailwatch and when I am done with it you won't even recognize > it. Allow me a few months and come back and check on it. > > Garrod M. Alwood > Open Source Consultant > garrod.alwood@lorodoes.com > > ________________________________________ > From: mailscanner-bounces@lists.mailscanner.info [ > mailscanner-bounces@lists.mailscanner.info] On Behalf Of Brent Addis [ > brent.addis@nsp.co.nz] > Sent: Monday, December 05, 2011 9:39 PM > To: MailScanner discussion > Subject: RE: New Mailwatch > > Baruwa is a mailscanner frontend in ajax, its totally stable and to be > honest I'd never look back at mailwatch =P > > > > > > > Brent Addis > Systems Integration Specialist > Network Service Providers Ltd. > > Unit 1, 13 Farnham St, Parnell, Auckland 1052 PO Box 90208, Victoria West, > Auckland > > > > Email: brent.addis@nsp.co.nz | Support: > support@nsp.co.nz | Web: http://www.nsp.co.nz > > Tel: +64-9-306-0230 | Support: +64-9-306-0234 | Fax: +64-9-306-0239 > > This email message and any accompanying attachments may contain legally > priveliged and confidential information intended for the addressee only. > If you are not the addressee your use of this information is strictly > prohibited. > > > > NSP - 2011 Managed Services Rookie of the Year Award - Australasia > > > From: mailscanner-bounces@lists.mailscanner.info [mailto: > mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden > Sent: Monday, 5 December 2011 6:04 p.m. > To: MailScanner discussion > Subject: Re: New Mailwatch > > This is the MailScanner ML, so he was correct in saying MailWatch. > http://mailwatch.sourceforge.net > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office : 850-588-4626 > Cell : 850-890-2543 > Fax : 850-254-2955 > > On Dec 4, 2011, at 10:49 PM, Brent Addis wrote: > > > You mean Baruwa? It's been out a while now? > > > > -- > This message has been scanned for viruses and dangerous content by > SmartiScan, and > is believed to be clean. > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and dangerous content by > SmartiScan, and is believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by SmartiScan, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111206/c3b86a80/attachment.html From maillists at conactive.com Tue Dec 6 16:26:40 2011 From: maillists at conactive.com (Kai Schaetzl) Date: Tue Dec 6 16:26:54 2011 Subject: New Mailwatch In-Reply-To: References: <71EE5816EB7C4D4C9DEA1003EB79470F2E5FAE7F@nspexch01.nsp.local> <48CBC613-BF23-415F-A568-5976E03375A4@fluxlabs.net> <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE184@nspexch01.nsp.local> <71EE5816EB7C4D4C9DEA1003EB79470F2E5FE43E@nspexch01.nsp.local> Message-ID: If Baruwa fits your bill: great. There's room for two or more GUI packages :-) Mailwatch is not based on Perl. I would be interested to know what's missing in Mailwatch that you have in Baruwa. I've never come to actually install Baruwa, because so far I didn't hit the threshold where I desperately needed missing functionality in Mailwatch (either that, or couldn't add it myself). Kai -- Get your web at Conactive Internet Services: http://www.conactive.com From alex at vidadigital.com.pa Tue Dec 6 16:57:51 2011 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue Dec 6 16:58:01 2011 Subject: (Partly OT) Re: New Mailwatch Message-ID: Is sourceforge down? I'm trying to get to mailwatch.sourceforge.net but it doesn't seem to be responding... On Tue, Dec 6, 2011 at 11:26 AM, Kai Schaetzl wrote: > If Baruwa fits your bill: great. > There's room for two or more GUI packages :-) > Mailwatch is not based on Perl. > I would be interested to know what's missing in Mailwatch that you have in > Baruwa. I've never come to actually install Baruwa, because so far I > didn't hit the threshold where I desperately needed missing functionality > in Mailwatch (either that, or couldn't add it myself). > > Kai > > -- > Get your web at Conactive Internet Services: http://www.conactive.com > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- -- Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ +507-6781-9505 +507-832-6725 +1-440-253-9789 (USA) Follow @AlexNeuman on Twitter http://facebook.com/vidadigital From mailscanner at pdscc.com Tue Dec 6 17:15:55 2011 From: mailscanner at pdscc.com (Harondel J. Sibble) Date: Tue Dec 6 17:16:24 2011 Subject: (Partly OT) Re: New Mailwatch In-Reply-To: References: Message-ID: <20111206171602.001995A1C81@sinclaire.sibble.net> nope, I was just there a few minutes ago, downloading 1.1.1. http://sourceforge.net/projects/mailwatch/files/ On 6 Dec 2011 at 11:57, Alex Neuman wrote: > Is sourceforge down? I'm trying to get to mailwatch.sourceforge.net > but it doesn't seem to be responding... > -- Harondel J. Sibble Sibble Computer Consulting Creating Solutions for the small and medium business computer user. help@pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com Blog: http://www.pdscc.com/blog (604) 739-3709 (voice) From alex at vidadigital.com.pa Tue Dec 6 18:16:42 2011 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue Dec 6 18:16:52 2011 Subject: (Partly OT) Re: New Mailwatch In-Reply-To: <20111206171602.001995A1C81@sinclaire.sibble.net> References: <20111206171602.001995A1C81@sinclaire.sibble.net> Message-ID: Weirdly enough it seems the problem is country-specific. I can get there without a problem from a US VPN :-/ On Tue, Dec 6, 2011 at 12:15 PM, Harondel J. Sibble wrote: > http://sourceforge.net/projects/mailwatch/files/ -- -- Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ +507-6781-9505 +507-832-6725 +1-440-253-9789 (USA) Follow @AlexNeuman on Twitter http://facebook.com/vidadigital From Garrod.Alwood at lorodoes.com Tue Dec 6 21:44:13 2011 From: Garrod.Alwood at lorodoes.com (Garrod M. Alwood) Date: Tue Dec 6 21:52:34 2011 Subject: (OT)Mailwatch 1.1.1 Message-ID: Hello Everyone, This is my last email in the MailScanner list about MailWatch, but I wanted to let everyone know that MailWatch 1.1.1 is now released. If you are interested in MailWatch please join the mailing list and I will keep send out emails every time I make a release. If you have any questions or concerns please contact me or join the mailing list and ask the question. Garrod M. Alwood Open Source Consultant garrod.alwood@lorodoes.com From johnn at zylun.com Wed Dec 7 02:36:33 2011 From: johnn at zylun.com (John Mark Niar) Date: Wed Dec 7 02:36:55 2011 Subject: outlook 2010 calendar problem Message-ID: <007e01ccb489$0ac2a770$2047f650$@com> Hello Guys, I have this Outlook 2010 calendar problem. When forwarding a meeting invites, I get this error: "Our virus detector failed to completely analyse a message you sent:- To: josb@xxxx.com Subject: Meeting Forward Notification: Conference Call Date: Tue Dec 6 13:11:12 2011 Any parts of the message that could not be analysed will not have been delivered. If you are using Microsoft Outlook, we strongly recommend you change your outgoing message format from "Rich Text" to "HTML" or "Plain Text". 1) Click on the "Tools" menu and choose "Options..." 2) Go to the "Mail Format" tab 3) For message format, select "HTML" or "Plain text" 4) Click OK The virus detector said this about the message: Report: Report: Could not parse Outlook Rich Text attachment" Anybody has an idea on this error? My mail format is already in HTML. Thanks, John Mark Niar IT Manager Zylun Staffing -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111207/97d05a8f/attachment.html From dave at KD0YU.COM Wed Dec 7 05:36:52 2011 From: dave at KD0YU.COM (Dave Helton) Date: Wed Dec 7 05:38:18 2011 Subject: outlook 2010 calendar problem In-Reply-To: <007e01ccb489$0ac2a770$2047f650$@com> References: <007e01ccb489$0ac2a770$2047f650$@com> Message-ID: <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> This begs the question... who's virus detector? From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of John Mark Niar Sent: Tuesday, December 06, 2011 8:37 PM To: 'MailScanner discussion' Subject: outlook 2010 calendar problem Hello Guys, I have this Outlook 2010 calendar problem. When forwarding a meeting invites, I get this error: "Our virus detector failed to completely analyse a message you sent:- To: josb@xxxx.com Subject: Meeting Forward Notification: Conference Call Date: Tue Dec 6 13:11:12 2011 Any parts of the message that could not be analysed will not have been delivered. If you are using Microsoft Outlook, we strongly recommend you change your outgoing message format from "Rich Text" to "HTML" or "Plain Text". 1) Click on the "Tools" menu and choose "Options..." 2) Go to the "Mail Format" tab 3) For message format, select "HTML" or "Plain text" 4) Click OK The virus detector said this about the message: Report: Report: Could not parse Outlook Rich Text attachment" Anybody has an idea on this error? My mail format is already in HTML. Thanks, John Mark Niar IT Manager Zylun Staffing -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner running on mail server KD0YU.COM, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner at KD0YU.COM, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111206/a257f5d1/attachment.html From johnn at zylun.com Wed Dec 7 05:46:43 2011 From: johnn at zylun.com (John Mark Niar) Date: Wed Dec 7 05:47:06 2011 Subject: outlook 2010 calendar problem In-Reply-To: <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> References: <007e01ccb489$0ac2a770$2047f650$@com> <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> Message-ID: <00bf01ccb4a3$9d045ec0$d70d1c40$@com> That's the clamav on our mail server where MailScanner is using. Thanks, John Mark Niar IT Manager Zylun Staffing From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Dave Helton Sent: Wednesday, December 07, 2011 1:37 PM To: MailScanner discussion Subject: RE: outlook 2010 calendar problem This begs the question... who's virus detector? From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of John Mark Niar Sent: Tuesday, December 06, 2011 8:37 PM To: 'MailScanner discussion' Subject: outlook 2010 calendar problem Hello Guys, I have this Outlook 2010 calendar problem. When forwarding a meeting invites, I get this error: "Our virus detector failed to completely analyse a message you sent:- To: josb@xxxx.com Subject: Meeting Forward Notification: Conference Call Date: Tue Dec 6 13:11:12 2011 Any parts of the message that could not be analysed will not have been delivered. If you are using Microsoft Outlook, we strongly recommend you change your outgoing message format from "Rich Text" to "HTML" or "Plain Text". 1) Click on the "Tools" menu and choose "Options..." 2) Go to the "Mail Format" tab 3) For message format, select "HTML" or "Plain text" 4) Click OK The virus detector said this about the message: Report: Report: Could not parse Outlook Rich Text attachment" Anybody has an idea on this error? My mail format is already in HTML. Thanks, John Mark Niar IT Manager Zylun Staffing -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner running on mail server KD0YU.COM, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner running on mail server KD0YU.COM, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111207/dc088413/attachment.html From maxsec at gmail.com Wed Dec 7 06:37:39 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Wed Dec 7 06:37:47 2011 Subject: outlook 2010 calendar problem In-Reply-To: <00bf01ccb4a3$9d045ec0$d70d1c40$@com> References: <007e01ccb489$0ac2a770$2047f650$@com> <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> <00bf01ccb4a3$9d045ec0$d70d1c40$@com> Message-ID: What's the tnef setting? If internal change to use the external and vice versa Also if u can run the message in debug mode to get more info Martin On Wednesday, 7 December 2011, John Mark Niar wrote: > That?s the clamav on our mail server where MailScanner is using. > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto: mailscanner-bounces@lists.mailscanner.info] On Behalf Of Dave Helton > Sent: Wednesday, December 07, 2011 1:37 PM > To: MailScanner discussion > Subject: RE: outlook 2010 calendar problem > > > > This begs the question... who's virus detector? > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto: mailscanner-bounces@lists.mailscanner.info] On Behalf Of John Mark Niar > Sent: Tuesday, December 06, 2011 8:37 PM > To: 'MailScanner discussion' > Subject: outlook 2010 calendar problem > > > > Hello Guys, > > > > I have this Outlook 2010 calendar problem. > > When forwarding a meeting invites, I get this error: > > > > ?Our virus detector failed to completely analyse a message you sent:- > > To: josb@xxxx.com > > Subject: Meeting Forward Notification: Conference Call > > Date: Tue Dec 6 13:11:12 2011 > > Any parts of the message that could not be analysed will not have been delivered. > > > > If you are using Microsoft Outlook, we strongly recommend you change your outgoing message format from "Rich Text" to "HTML" or "Plain Text". > > > > 1) Click on the "Tools" menu and choose "Options..." > > 2) Go to the "Mail Format" tab > > 3) For message format, select "HTML" or "Plain text" > > 4) Click OK > > > > The virus detector said this about the message: > > Report: Report: Could not parse Outlook Rich Text attachment? > > > > Anybody has an idea on this error? My mail format is already in HTML. > > > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111207/e9a85d12/attachment-0001.html From johnn at zylun.com Wed Dec 7 06:48:02 2011 From: johnn at zylun.com (John Mark Niar) Date: Wed Dec 7 06:48:20 2011 Subject: outlook 2010 calendar problem In-Reply-To: References: <007e01ccb489$0ac2a770$2047f650$@com> <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> <00bf01ccb4a3$9d045ec0$d70d1c40$@com> Message-ID: <00ec01ccb4ac$2bea6d20$83bf4760$@com> Here is my TNEF settings: Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = no TNEF Timeout = 120 How to run the message in debug mode? Thanks, John Mark Niar IT Manager Zylun Staffing From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Martin Hepworth Sent: Wednesday, December 07, 2011 2:38 PM To: MailScanner discussion Subject: Re: outlook 2010 calendar problem What's the tnef setting? If internal change to use the external and vice versa Also if u can run the message in debug mode to get more info Martin On Wednesday, 7 December 2011, John Mark Niar wrote: > That's the clamav on our mail server where MailScanner is using. > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Dave Helton > Sent: Wednesday, December 07, 2011 1:37 PM > To: MailScanner discussion > Subject: RE: outlook 2010 calendar problem > > > > This begs the question... who's virus detector? > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of John Mark Niar > Sent: Tuesday, December 06, 2011 8:37 PM > To: 'MailScanner discussion' > Subject: outlook 2010 calendar problem > > > > Hello Guys, > > > > I have this Outlook 2010 calendar problem. > > When forwarding a meeting invites, I get this error: > > > > "Our virus detector failed to completely analyse a message you sent:- > > To: josb@xxxx.com > > Subject: Meeting Forward Notification: Conference Call > > Date: Tue Dec 6 13:11:12 2011 > > Any parts of the message that could not be analysed will not have been delivered. > > > > If you are using Microsoft Outlook, we strongly recommend you change your outgoing message format from "Rich Text" to "HTML" or "Plain Text". > > > > 1) Click on the "Tools" menu and choose "Options..." > > 2) Go to the "Mail Format" tab > > 3) For message format, select "HTML" or "Plain text" > > 4) Click OK > > > > The virus detector said this about the message: > > Report: Report: Could not parse Outlook Rich Text attachment" > > > > Anybody has an idea on this error? My mail format is already in HTML. > > > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- -- Martin Hepworth Oxford, UK -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111207/09d964fd/attachment.html From jeremy at fluxlabs.net Wed Dec 7 06:55:00 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Wed Dec 7 06:55:13 2011 Subject: outlook 2010 calendar problem In-Reply-To: <00ec01ccb4ac$2bea6d20$83bf4760$@com> References: <007e01ccb489$0ac2a770$2047f650$@com> <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> <00bf01ccb4a3$9d045ec0$d70d1c40$@com> , <00ec01ccb4ac$2bea6d20$83bf4760$@com> Message-ID: <06ABD42B-F0B9-4B46-BC09-AFEA635A35DD@fluxlabs.net> Your better off just disabling it. It's been broken for quite sometime. Internal or external expander ... Both fail. -- Jeremy McSpadden On Dec 7, 2011, at 12:51 AM, "John Mark Niar" > wrote: Here is my TNEF settings: Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = no TNEF Timeout = 120 How to run the message in debug mode? Thanks, John Mark Niar IT Manager Zylun Staffing From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Martin Hepworth Sent: Wednesday, December 07, 2011 2:38 PM To: MailScanner discussion Subject: Re: outlook 2010 calendar problem What's the tnef setting? If internal change to use the external and vice versa Also if u can run the message in debug mode to get more info Martin On Wednesday, 7 December 2011, John Mark Niar > wrote: > That?s the clamav on our mail server where MailScanner is using. > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Dave Helton > Sent: Wednesday, December 07, 2011 1:37 PM > To: MailScanner discussion > Subject: RE: outlook 2010 calendar problem > > > > This begs the question... who's virus detector? > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of John Mark Niar > Sent: Tuesday, December 06, 2011 8:37 PM > To: 'MailScanner discussion' > Subject: outlook 2010 calendar problem > > > > Hello Guys, > > > > I have this Outlook 2010 calendar problem. > > When forwarding a meeting invites, I get this error: > > > > ?Our virus detector failed to completely analyse a message you sent:- > > To: josb@xxxx.com > > Subject: Meeting Forward Notification: Conference Call > > Date: Tue Dec 6 13:11:12 2011 > > Any parts of the message that could not be analysed will not have been delivered. > > > > If you are using Microsoft Outlook, we strongly recommend you change your outgoing message format from "Rich Text" to "HTML" or "Plain Text". > > > > 1) Click on the "Tools" menu and choose "Options..." > > 2) Go to the "Mail Format" tab > > 3) For message format, select "HTML" or "Plain text" > > 4) Click OK > > > > The virus detector said this about the message: > > Report: Report: Could not parse Outlook Rich Text attachment? > > > > Anybody has an idea on this error? My mail format is already in HTML. > > > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- -- Martin Hepworth Oxford, UK -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111207/e114da47/attachment.html From hboetes at utelisys.com Wed Dec 7 10:12:15 2011 From: hboetes at utelisys.com (Han Boetes) Date: Wed Dec 7 10:12:31 2011 Subject: (OT)Mailwatch 1.1.1 In-Reply-To: References: Message-ID: <4EDF3BFF.2050004@utelisys.com> It's kind of a shame that I run into an eternal loop and when I searched on the error message I find a bugfix which was proposed by myself. Happy searching. On 12/06/11 22:44, Garrod M. Alwood wrote: > Hello Everyone, > > This is my last email in the MailScanner list about MailWatch, but I wanted to let everyone know that MailWatch 1.1.1 is now released. If you are interested in MailWatch please join the mailing list and I will keep send out emails every time I make a release. If you have any questions or concerns please contact me or join the mailing list and ask the question. > > Garrod M. Alwood > Open Source Consultant > garrod.alwood@lorodoes.com-- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! Met vriendelijke groet, Han Boetes -- Utelisys Communications B.V. Trinity Buildings, Tower A, 7th floor Pietersbergweg 15 1105 BM Amsterdam Tel: +31 (0)20 561 8006 From bonivart at opencsw.org Wed Dec 7 10:27:30 2011 From: bonivart at opencsw.org (Peter Bonivart) Date: Wed Dec 7 10:27:59 2011 Subject: outlook 2010 calendar problem In-Reply-To: <00ec01ccb4ac$2bea6d20$83bf4760$@com> References: <007e01ccb489$0ac2a770$2047f650$@com> <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> <00bf01ccb4a3$9d045ec0$d70d1c40$@com> <00ec01ccb4ac$2bea6d20$83bf4760$@com> Message-ID: On Wed, Dec 7, 2011 at 7:48 AM, John Mark Niar wrote: > Here is my TNEF settings: > > Expand TNEF = yes > Use TNEF Contents = replace I used these settings but had to abandon them because calendar entries got corrupt. /peter From uxbod at splatnix.net Wed Dec 7 11:08:01 2011 From: uxbod at splatnix.net (--[ UxBoD ]--) Date: Wed Dec 7 11:08:17 2011 Subject: (Partly OT) Re: New Mailwatch In-Reply-To: Message-ID: <5d2b8a1d-99f3-49ae-a940-244e1e3e8a73@office.splatnix.net> BT are having BGP peering issues I believe. -- Thanks, Phil ----- Original Message ----- > Weirdly enough it seems the problem is country-specific. I can get > there without a problem from a US VPN :-/ > > On Tue, Dec 6, 2011 at 12:15 PM, Harondel J. Sibble > wrote: > > http://sourceforge.net/projects/mailwatch/files/ > > > > -- > > -- > > Alex Neuman van der Hans > Reliant Technologies / Vida Digital > http://vidadigital.com.pa/ > > +507-6781-9505 > +507-832-6725 > +1-440-253-9789 (USA) > > Follow @AlexNeuman on Twitter > http://facebook.com/vidadigital > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From campbell at cnpapers.com Wed Dec 7 19:09:05 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Wed Dec 7 19:09:24 2011 Subject: Whitelist-Blacklist question + one more Message-ID: <4EDFB9D1.4070008@cnpapers.com> I started thinking about the user whitelist-blacklist function that's in MailWatch. Now I'm wondering can that be used along side the global spam.whitelist.rules file or is it a either/or type setup? Another question I've started thinking about: Can I have a gateway running MS that is configured as a SmartHost? In other words, does the new sendmail instance that MS creates when it's installed interfere with a normal instance of sendmail configured as a SmartHost on the same server? Thanks steve campbell From johnn at zylun.com Wed Dec 7 22:41:53 2011 From: johnn at zylun.com (John Mark Niar) Date: Wed Dec 7 22:42:15 2011 Subject: outlook 2010 calendar problem In-Reply-To: <06ABD42B-F0B9-4B46-BC09-AFEA635A35DD@fluxlabs.net> References: <007e01ccb489$0ac2a770$2047f650$@com> <77F23E6E4DE9084BA33755BA403E53FC6FEDAE821A@S8.KD0YU.COM> <00bf01ccb4a3$9d045ec0$d70d1c40$@com> , <00ec01ccb4ac$2bea6d20$83bf4760$@com> <06ABD42B-F0B9-4B46-BC09-AFEA635A35DD@fluxlabs.net> Message-ID: <000901ccb531$6c4c5ab0$44e51010$@com> I disabled it now. I will try to look out for problems. Thanks, John Mark Niar IT Manager Zylun Staffing From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden Sent: Wednesday, December 07, 2011 2:55 PM To: MailScanner discussion Subject: Re: outlook 2010 calendar problem Your better off just disabling it. It's been broken for quite sometime. Internal or external expander ... Both fail. -- Jeremy McSpadden On Dec 7, 2011, at 12:51 AM, "John Mark Niar" wrote: Here is my TNEF settings: Expand TNEF = yes Use TNEF Contents = replace Deliver Unparsable TNEF = no TNEF Expander = no TNEF Timeout = 120 How to run the message in debug mode? Thanks, John Mark Niar IT Manager Zylun Staffing From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Martin Hepworth Sent: Wednesday, December 07, 2011 2:38 PM To: MailScanner discussion Subject: Re: outlook 2010 calendar problem What's the tnef setting? If internal change to use the external and vice versa Also if u can run the message in debug mode to get more info Martin On Wednesday, 7 December 2011, John Mark Niar wrote: > That's the clamav on our mail server where MailScanner is using. > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Dave Helton > Sent: Wednesday, December 07, 2011 1:37 PM > To: MailScanner discussion > Subject: RE: outlook 2010 calendar problem > > > > This begs the question... who's virus detector? > > > > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of John Mark Niar > Sent: Tuesday, December 06, 2011 8:37 PM > To: 'MailScanner discussion' > Subject: outlook 2010 calendar problem > > > > Hello Guys, > > > > I have this Outlook 2010 calendar problem. > > When forwarding a meeting invites, I get this error: > > > > "Our virus detector failed to completely analyse a message you sent:- > > To: josb@xxxx.com > > Subject: Meeting Forward Notification: Conference Call > > Date: Tue Dec 6 13:11:12 2011 > > Any parts of the message that could not be analysed will not have been delivered. > > > > If you are using Microsoft Outlook, we strongly recommend you change your outgoing message format from "Rich Text" to "HTML" or "Plain Text". > > > > 1) Click on the "Tools" menu and choose "Options..." > > 2) Go to the "Mail Format" tab > > 3) For message format, select "HTML" or "Plain text" > > 4) Click OK > > > > The virus detector said this about the message: > > Report: Report: Could not parse Outlook Rich Text attachment" > > > > Anybody has an idea on this error? My mail format is already in HTML. > > > > > > > > > > Thanks, > > > > John Mark Niar > > IT Manager > > Zylun Staffing > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner > running on mail server KD0YU.COM, and is believed to be clean. > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- -- Martin Hepworth Oxford, UK -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111208/7f51c262/attachment.html From Kevin_Miller at ci.juneau.ak.us Wed Dec 7 23:59:13 2011 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Wed Dec 7 23:59:36 2011 Subject: Whitelist-Blacklist question + one more In-Reply-To: <4EDFB9D1.4070008@cnpapers.com> References: <4EDFB9D1.4070008@cnpapers.com> Message-ID: <4A09477D575C2C4B86497161427DD94C1D850E3733@city-exchange07> Steve Campbell wrote: > I started thinking about the user whitelist-blacklist function that's > in MailWatch. Now I'm wondering can that be used along side the > global spam.whitelist.rules file or is it a either/or type setup? My understanding is you either use the black/white lists in MailScanner, or the ones in /etc/MailScanner/rules/spam.[white][black]list.rules but can't use both. > Another question I've started thinking about: > > Can I have a gateway running MS that is configured as a SmartHost? In > other words, does the new sendmail instance that MS creates when it's > installed interfere with a normal instance of sendmail configured as > a SmartHost on the same server? Sure, if I'm understanding you right. You won't have sendmail running as a different instance apart from MailScanner though. To have your MS box receive mail for other domains and forward it to the internal host just edit /etc/mail/mailertable. For instance, mine (sorta) looks like this: ci.juneau.ak.us esmtp:[192.168.55.173] mail.ci.juneau.ak.us esmtp:[192.168.55.173] jneaupolice.com emstp:[192.168.35.23] ... After you edit mailertable don't forget to do this as root: makemap hash mailertable < mailertable In /etc/mail/relaydomains I also have the domains which I'll relay for. There are just two instances of sendmail running, both started by the MailScanner process. I.e., a stock set up. You don't want sendmail running on its own outside of MailScanner. MailScanner will pick up the inbound mail, put it in /var/spool/mqueue.in, scan it, then put it in /var/spool/mqueue where the 2nd instance of sendmail (the queue runner) picks it up and delivers it to the appropriate internal host based on the domain it's targeted for. HTH... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From campbell at cnpapers.com Thu Dec 8 00:47:59 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Dec 8 00:48:16 2011 Subject: Whitelist-Blacklist question + one more In-Reply-To: <4A09477D575C2C4B86497161427DD94C1D850E3733@city-exchange07> References: <4EDFB9D1.4070008@cnpapers.com> <4A09477D575C2C4B86497161427DD94C1D850E3733@city-exchange07> Message-ID: <1323305279.4ee0093f35367@perdition.cnpapers.net> Quoting Kevin Miller : > Steve Campbell wrote: > > I started thinking about the user whitelist-blacklist function that's > > in MailWatch. Now I'm wondering can that be used along side the > > global spam.whitelist.rules file or is it a either/or type setup? > > My understanding is you either use the black/white lists in MailScanner, or > the ones in /etc/MailScanner/rules/spam.[white][black]list.rules but can't > use both. > > > Another question I've started thinking about: > > > > Can I have a gateway running MS that is configured as a SmartHost? In > > other words, does the new sendmail instance that MS creates when it's > > installed interfere with a normal instance of sendmail configured as > > a SmartHost on the same server? > > Sure, if I'm understanding you right. You won't have sendmail running as a > different instance apart from MailScanner though. To have your MS box > receive mail for other domains and forward it to the internal host just edit > /etc/mail/mailertable. For instance, mine (sorta) looks like this: > ci.juneau.ak.us esmtp:[192.168.55.173] > mail.ci.juneau.ak.us esmtp:[192.168.55.173] > jneaupolice.com emstp:[192.168.35.23] > ... > > After you edit mailertable don't forget to do this as root: > makemap hash mailertable < mailertable > > In /etc/mail/relaydomains I also have the domains which I'll relay for. > > There are just two instances of sendmail running, both started by the > MailScanner process. I.e., a stock set up. You don't want sendmail running > on its own outside of MailScanner. MailScanner will pick up the inbound > mail, put it in /var/spool/mqueue.in, scan it, then put it in > /var/spool/mqueue where the 2nd instance of sendmail (the queue runner) picks > it up and delivers it to the appropriate internal host based on the domain > it's targeted for. > > HTH... > > ...Kevin > -- I think you understand me, Kevin. Thanks for the clarity I never seem to be able to convey. My setup now is that I have two servers: one hosts one domain and the other hosts two other domains. Both servers are the mail store for their respective domains. Both servers are the secondary MX for the domains that they do not contain the mail stores for. I'm not sure this works all that well, but it does work. Both primary servers are the smtp, imap and pop servers for their respective domains, along with running MS on both. I'm thinking of making these new whiz-bang servers I'm about to get to function in different ways. One could be the mail store for all three domains and the other could be the smtp and MX for all three domains running MS. I was debating whether to use the mailertable, which would be simple with only three domains, or use SMARTHOST but I wasn't sure I could use it for three domains. I also wasn't sure whether SMARTHOST would be used before the first instance or between the two instances for delivery (hence my question). I'm not even sure it'd be a smart move to change the way I'm doing it since there'd be a lot of CPU cycles not used on the mail store since it'd only be used for pop and imap. But as the primary MX the way it's now set up on such low powered CPUs, they get bogged down whenever a mailing list dumps a lot of email to them. Thanks again Kevin, steve ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/ From Kevin_Miller at ci.juneau.ak.us Thu Dec 8 01:14:00 2011 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Thu Dec 8 01:14:18 2011 Subject: Whitelist-Blacklist question + one more In-Reply-To: <1323305279.4ee0093f35367@perdition.cnpapers.net> References: <4EDFB9D1.4070008@cnpapers.com> <4A09477D575C2C4B86497161427DD94C1D850E3733@city-exchange07> <1323305279.4ee0093f35367@perdition.cnpapers.net> Message-ID: <4A09477D575C2C4B86497161427DD94C1D850E3736@city-exchange07> Steve Campbell wrote: > I think you understand me, Kevin. Thanks for the clarity I never seem > to be able to convey. My setup now is that I have two servers: one > hosts one domain and the other hosts two other domains. Both servers > are the mail store for their respective domains. Both servers are the > secondary MX for the domains that they do not contain the mail stores > for. I'm not sure this works all that well, but it does work. Both > primary servers are the smtp, imap and pop servers for their > respective domains, along with running MS on both. > > I'm thinking of making these new whiz-bang servers I'm about to get > to function in different ways. One could be the mail store for all > three domains and the other could be the smtp and MX for all three > domains running MS. > > I was debating whether to use the mailertable, which would be simple > with only three domains, or use SMARTHOST but I wasn't sure I could > use it for three domains. I also wasn't sure whether SMARTHOST would > be used before the first instance or between the two instances for > delivery (hence my question). > > I'm not even sure it'd be a smart move to change the way I'm doing it > since there'd be a lot of CPU cycles not used on the mail store since > it'd only be used for pop and imap. But as the primary MX the way > it's now set up on such low powered CPUs, they get bogged down > whenever a mailing list dumps a lot of email to them. > > Thanks again Kevin, What I have are internal hosts that cannot be reached from the outside (Exchange servers). I also have three MailScanner mx gateways that sit on the edge of the network. These do all the spam/virus filtering, then send to the a particular internal machine, depending on what domain it is associated with. Works pretty well. Your setup doesn't sound unreasonable to me though (but I'm not a 'guru'). What you're thinking of rolling to sounds pretty similar to what I have. IIRC, the SMARTHOST feature forwards all mail to some other host. For instance, my exchange server points to a smarthost for all outbound mail. It isn't domain specific though. I think mailertable is the easiest way to deal with multiple domains. No additional tweaking is needed between the two MS sendmail instances - all inbound hits mailqueue.in and all vetted mail lands in mqueue where it's routed by sendmail appropriately. Best... ...Kevin -- Kevin Miller Registered Linux User No: 307357 CBJ MIS Dept. Network Systems Admin., Mail Admin. 155 South Seward Street ph: (907) 586-0242 Juneau, Alaska 99801 fax: (907 586-4500 From paul at welshfamily.com Sat Dec 17 20:11:04 2011 From: paul at welshfamily.com (Paul Welsh) Date: Sat Dec 17 20:11:14 2011 Subject: OT: Perl Compatible Regular Expressions Message-ID: Hi all Apologies this is off topic. I have a quick question about Perl Compatible Regular Expressions. I'm using Exim 4.x and a greylist application in conjunction with MailScanner obviously. The greylist application has a whitelist to cope with senders that, when greylisted, try sending again using a different server rather than with the same one. The whitelist is MTA dependent. Exim supports Perl Compatible Regular Expressions but I'm struggling to match on part of the hostname. For example, this works fine: *.domain.com - matches mail.domain.com, xxx.mail.com, etc What I want to match, however, is something like: mail*.domain.com which would match say mail01.domain.com, mail02.domain.com, etc I think I need to use the ^ symbol but after much googling can't figure it out. I've tried umpteen permutations to no avail. Any ideas? Alternatively, if what I'm seeking to do is very complex, does anyone know whether Exim can cope with IP subnets that don't include a whole octet? I've discovered belatedly that the whitelist can cope with, for example: 84.95.1.0/24 but not: 84.95.1.0/26 Any assistance gratefully received. From utisoft at gmail.com Sat Dec 17 20:22:05 2011 From: utisoft at gmail.com (Chris Rees) Date: Sat Dec 17 20:22:45 2011 Subject: OT: Perl Compatible Regular Expressions In-Reply-To: References: Message-ID: On 17 December 2011 20:11, Paul Welsh wrote: > Hi all > > Apologies this is off topic. > > I have a quick question about Perl Compatible Regular Expressions. > I'm using Exim 4.x and a greylist application in conjunction with > MailScanner obviously. > > The greylist application has a whitelist to cope with senders that, > when greylisted, try sending again using a different server rather > than with the same one. > > The whitelist is MTA dependent. ?Exim supports Perl Compatible Regular > Expressions but I'm struggling to match on part of the hostname. ?For > example, this works fine: > *.domain.com > - matches mail.domain.com, xxx.mail.com, etc > > What I want to match, however, is something like: > mail*.domain.com > which would match say mail01.domain.com, mail02.domain.com, etc > mail[0-9]*.domain.com should do? Are you trying to match mail.domain.com too? If you don't want to match that, then use + instead of * Chris From paul at welshfamily.com Sat Dec 17 20:22:49 2011 From: paul at welshfamily.com (Paul Welsh) Date: Sat Dec 17 20:22:51 2011 Subject: OT: Perl Compatible Regular Expressions In-Reply-To: References: Message-ID: On 17 December 2011 20:11, Paul Welsh wrote: > For example, this works fine: > *.domain.com > - matches mail.domain.com, xxx.mail.com, etc Just thinking, if it's a domain like amazon.com then perhaps *.amazon.com is pretty safe. After all, I believe Exim does a reverse lookup on the IP to retrieve the hostname. From utisoft at gmail.com Sat Dec 17 20:40:08 2011 From: utisoft at gmail.com (Chris Rees) Date: Sat Dec 17 20:40:49 2011 Subject: OT: Perl Compatible Regular Expressions In-Reply-To: References: Message-ID: On 17 December 2011 20:22, Paul Welsh wrote: > On 17 December 2011 20:11, Paul Welsh wrote: > >> For example, this works fine: >> *.domain.com >> - matches mail.domain.com, xxx.mail.com, etc > > Just thinking, if it's a domain like amazon.com then perhaps > *.amazon.com is pretty safe. ?After all, I believe Exim does a reverse > lookup on the IP to retrieve the hostname. Yes... except *.amazon.com isn't a valid regular expression. It just happens to work because the * is ignored. My earlier suggestion should fit your requirements. Chris From paul at welshfamily.com Sun Dec 18 13:47:10 2011 From: paul at welshfamily.com (Paul Welsh) Date: Sun Dec 18 13:47:20 2011 Subject: OT: Perl Compatible Regular Expressions Message-ID: On 18 December 2011 12:00, Chris Rees wrote: > > mail[0-9]*.domain.com should do? > > Are you trying to match mail.domain.com too? If you don't want to > match that, then use + instead of * Hi Chris Thanks very much for responding. Can you just explain what the: [0-9]* actually means? To give some more real world examples, I'd need to match: mail-01.domain.com, mail-02.domain.com ... mail-15.domain.com This would take one line in the whitelist file using regular expressions versus 15 separate IP addresses or FQDNs. Another real world example: smtp-out-81-59.amazon.com, smtp-out-81-60.amazon.com, smtp-out-81-61.amazon.com From utisoft at gmail.com Sun Dec 18 14:06:33 2011 From: utisoft at gmail.com (Chris Rees) Date: Sun Dec 18 14:07:13 2011 Subject: OT: Perl Compatible Regular Expressions In-Reply-To: References: Message-ID: On 18 December 2011 13:47, Paul Welsh wrote: > On 18 December 2011 12:00, ?Chris Rees wrote: >> >> mail[0-9]*.domain.com should do? >> >> Are you trying to match mail.domain.com too? If you don't want to >> match that, then use + instead of * > > Hi Chris > > Thanks very much for responding. ?Can you just explain what the: > [0-9]* > actually means? > > To give some more real world examples, I'd need to match: > mail-01.domain.com, mail-02.domain.com ... mail-15.domain.com > This would take one line in the whitelist file using regular > expressions versus 15 separate IP addresses or FQDNs. > > Another real world example: > smtp-out-81-59.amazon.com, smtp-out-81-60.amazon.com, smtp-out-81-61.amazon.com OK, although this isn't a list for regexes I'll give a quick explanation, since it could help others too :) A regex (basically) uses characters and modifiers. * is a modifier, it doesn't match anything on its own. [0-9] is a *character class*, which matches any digit, and when put with the * modifier it matches any number of digits (including none). If you were to use [0-9]+, then the + modifier will make [0-9] match *one or more* digits; the difference between * and + is that * matches no digit whereas + doesn't. Example regexes: smtp-out-81-59.amazon.com, smtp-out-81-60.amazon.com, smtp-out-81-61.amazon.com ^smtp-out-[0-9]+-[0-9]+.amazon.com$ mail-01.domain.com, mail-02.domain.com ... mail-15.domain.com ^mail-[0-9]+.domain.com$ (or to be more fussy and only match 1-15) ^mail-(0[1-9]|1[0-5]).domain.com$ (using the beginning delimiter ^ and end delimiter $ makes the regex much faster too since if the first character fails to match it skips that regex and also stops matching mail13.domain.com.evil.scammer.com) To be honest, regular expressions have to be learned in their entirety to be properly useful, and I'd recommend Mastering Regular Expressions [1] as a great way to learn them and make them less scary. Chris [1] http://shop.oreilly.com/product/9781565922570.do From tony at ai.net.nz Mon Dec 19 01:30:28 2011 From: tony at ai.net.nz (Tony Arcus) Date: Mon Dec 19 01:30:58 2011 Subject: Emails not getting scanned Message-ID: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> All emails are coming in to the server okay. But very few seem to be scanned by MailScanner or logged in to Mailwatch MailScanner -v looks fine expect for missing Mail::ClamAV but I have manually installed ClamAV and it seems fine. MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Reading configuration file /etc/MailScanner/conf.d/README Read 869 hostnames from the phishing whitelist Read 3760 hostnames from the phishing blacklists Config: calling custom init function SQLBlacklist Starting up SQL Blacklist Read 0 blacklist entries Config: calling custom init function MailWatchLogging Started SQL Logging child Config: calling custom init function SQLWhitelist Starting up SQL Whitelist Read 11 whitelist entries Checking version numbers... Version number in MailScanner.conf (4.84.3) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct. Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database SpamAssassin reported no errors. Connected to Processing Attempts Database Created Processing Attempts Database successfully There are 0 messages in the Processing Attempts Database Using locktype = posix MailScanner.conf says "Virus Scanners = clamav" Found these virus scanners installed: clamav =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting 1.message: Eicar-Test-Signature-1 FOUND ./1/eicar.com: Eicar-Test-Signature FOUND Virus Scanning: ClamAV found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: ClamAV said "eicar.com contains Eicar-Test-Signature" If any of your virus scanners (clamav) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Config: calling custom end function SQLBlacklist Closing down by-domain spam blacklist Config: calling custom end function MailWatchLogging Config: calling custom end function SQLWhitelist Closing down by-domain spam whitelist The server is Centos 6.0 Any ideas of what else I should check to see why incoming messages are being delivered just not scanned. Tony Arcus Systems and Network Engineer Access Information Limited PO Box 122 Carterton Wairarapa Phone : 06-379-6668 Phone : 04-831-1401 Email : tony@ai.net.nz Cell : 021-827-660 This email and any accompanying documentation may contain privileged and confidential information. If you are not the intended recipient, your use of the information is strictly prohibited. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jeremy at fluxlabs.net Mon Dec 19 01:33:40 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Mon Dec 19 01:33:51 2011 Subject: Emails not getting scanned In-Reply-To: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> Message-ID: <39523B61-4408-40C8-B336-BB4E79619C6E@fluxlabs.net> MTA ? -- Jeremy McSpadden On Dec 18, 2011, at 7:32 PM, "Tony Arcus" wrote: > All emails are coming in to the server okay. > But very few seem to be scanned by MailScanner or logged in to Mailwatch > > MailScanner -v looks fine expect for > missing Mail::ClamAV > > but I have manually installed ClamAV and it seems fine. > > MailScanner --lint > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > Reading configuration file /etc/MailScanner/conf.d/README > Read 869 hostnames from the phishing whitelist > Read 3760 hostnames from the phishing blacklists > Config: calling custom init function SQLBlacklist > Starting up SQL Blacklist > Read 0 blacklist entries > Config: calling custom init function MailWatchLogging > Started SQL Logging child > Config: calling custom init function SQLWhitelist > Starting up SQL Whitelist > Read 11 whitelist entries > > Checking version numbers... > Version number in MailScanner.conf (4.84.3) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is correct. > > Checking for SpamAssassin errors (if you use it)... > Using SpamAssassin results cache > Connected to SpamAssassin cache database > SpamAssassin reported no errors. > Connected to Processing Attempts Database > Created Processing Attempts Database successfully > There are 0 messages in the Processing Attempts Database > Using locktype = posix > MailScanner.conf says "Virus Scanners = clamav" > Found these virus scanners installed: clamav > =========================================================================== > Filename Checks: Windows/DOS Executable (1 eicar.com) > Other Checks: Found 1 problems > Virus and Content Scanning: Starting > 1.message: Eicar-Test-Signature-1 FOUND > > ./1/eicar.com: Eicar-Test-Signature FOUND > > Virus Scanning: ClamAV found 2 infections > Infected message 1 came from 10.1.1.1 > Virus Scanning: Found 2 viruses > =========================================================================== > Virus Scanner test reports: > ClamAV said "eicar.com contains Eicar-Test-Signature" > > If any of your virus scanners (clamav) > are not listed there, you should check that they are installed correctly > and that MailScanner is finding them correctly via its virus.scanners.conf. > Config: calling custom end function SQLBlacklist > Closing down by-domain spam blacklist > Config: calling custom end function MailWatchLogging > Config: calling custom end function SQLWhitelist > Closing down by-domain spam whitelist > > > The server is Centos 6.0 > > Any ideas of what else I should check to see why incoming messages are being delivered just not scanned. > > Tony Arcus > Systems and Network Engineer > Access Information Limited > PO Box 122 > Carterton > Wairarapa > > Phone : 06-379-6668 > Phone : 04-831-1401 > Email : tony@ai.net.nz > Cell : 021-827-660 > > This email and any accompanying documentation may contain privileged and > confidential information. If you are not the intended recipient, your use > of the information is strictly prohibited. > > > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From maxsec at gmail.com Mon Dec 19 06:45:36 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Mon Dec 19 06:45:44 2011 Subject: Emails not getting scanned In-Reply-To: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> Message-ID: Yeah I'd check the mta is setup correctly to hold the email in the first q and delivery from the second . Is this a new install or an existing one that suddenly stopped working? Martin On Monday, 19 December 2011, Tony Arcus wrote: > All emails are coming in to the server okay. > But very few seem to be scanned by MailScanner or logged in to Mailwatch > > MailScanner -v looks fine expect for > missing Mail::ClamAV > > but I have manually installed ClamAV and it seems fine. > > MailScanner --lint > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > Reading configuration file /etc/MailScanner/conf.d/README > Read 869 hostnames from the phishing whitelist > Read 3760 hostnames from the phishing blacklists > Config: calling custom init function SQLBlacklist > Starting up SQL Blacklist > Read 0 blacklist entries > Config: calling custom init function MailWatchLogging > Started SQL Logging child > Config: calling custom init function SQLWhitelist > Starting up SQL Whitelist > Read 11 whitelist entries > > Checking version numbers... > Version number in MailScanner.conf (4.84.3) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is correct. > > Checking for SpamAssassin errors (if you use it)... > Using SpamAssassin results cache > Connected to SpamAssassin cache database > SpamAssassin reported no errors. > Connected to Processing Attempts Database > Created Processing Attempts Database successfully > There are 0 messages in the Processing Attempts Database > Using locktype = posix > MailScanner.conf says "Virus Scanners = clamav" > Found these virus scanners installed: clamav > =========================================================================== > Filename Checks: Windows/DOS Executable (1 eicar.com) > Other Checks: Found 1 problems > Virus and Content Scanning: Starting > 1.message: Eicar-Test-Signature-1 FOUND > > ./1/eicar.com: Eicar-Test-Signature FOUND > > Virus Scanning: ClamAV found 2 infections > Infected message 1 came from 10.1.1.1 > Virus Scanning: Found 2 viruses > =========================================================================== > Virus Scanner test reports: > ClamAV said "eicar.com contains Eicar-Test-Signature" > > If any of your virus scanners (clamav) > are not listed there, you should check that they are installed correctly > and that MailScanner is finding them correctly via its virus.scanners.conf. > Config: calling custom end function SQLBlacklist > Closing down by-domain spam blacklist > Config: calling custom end function MailWatchLogging > Config: calling custom end function SQLWhitelist > Closing down by-domain spam whitelist > > > The server is Centos 6.0 > > Any ideas of what else I should check to see why incoming messages are being delivered just not scanned. > > Tony Arcus > Systems and Network Engineer > Access Information Limited > PO Box 122 > Carterton > Wairarapa > > Phone : 06-379-6668 > Phone : 04-831-1401 > Email : tony@ai.net.nz > Cell : 021-827-660 > > This email and any accompanying documentation may contain privileged and > confidential information. If you are not the intended recipient, your use > of the information is strictly prohibited. > > > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111219/bb6fa072/attachment.html From rcooper at dwford.com Mon Dec 19 14:52:33 2011 From: rcooper at dwford.com (Rick Cooper) Date: Mon Dec 19 14:52:49 2011 Subject: Perl Compatible Regular Expressions In-Reply-To: References: Message-ID: Paul Welsh wrote: > Hi all > > Apologies this is off topic. > > I have a quick question about Perl Compatible Regular Expressions. > I'm using Exim 4.x and a greylist application in conjunction with > MailScanner obviously. > > The greylist application has a whitelist to cope with senders that, > when greylisted, try sending again using a different server rather > than with the same one. > > The whitelist is MTA dependent. Exim supports Perl Compatible Regular > Expressions but I'm struggling to match on part of the hostname. For > example, this works fine: > *.domain.com > - matches mail.domain.com, xxx.mail.com, etc > > What I want to match, however, is something like: > mail*.domain.com > which would match say mail01.domain.com, mail02.domain.com, etc > > I think I need to use the ^ symbol but after much googling can't > figure it out. I've tried umpteen permutations to no avail. Any > ideas? > > Alternatively, if what I'm seeking to do is very complex, does anyone > know whether Exim can cope with IP subnets that don't include a whole > octet? I've discovered belatedly that the whitelist can cope with, > for example: > 84.95.1.0/24 > but not: > 84.95.1.0/26 > > Any assistance gratefully received. First of all mail*.domain.com would match on mai+l none or more times+.domain.com and that is assuming that you are actually meaning mail*\.domain\.com (since perl would require the back slash to say match a dot not any char) If you are trying to match mail+anything goes+.domain.com you would want something like: ^mail.*\.domain\.com which says match mail.(anything)*(none or more times)+dot+domain+dot+com and start matching on the first char. If matching numbers is important and nothing will be between the word mail and the number then ^mail[0-9]+\.domain\.com (match mail+numbers 1 or more times) But if there is likely to be something between mail and the number then ^mail(.)?[0-9]+\.domain\.com would match mail-01.domain.com or mail01.domain.com. If you need to match just mail.domain.com as well then ^mail(.)?[0-9]*\.domain\.com And then you have to be clear on how reg exes work in exim and the value of, say \N, in exim's reg ex implementation which is a bit different because of expansions. On the second point of 84.95.1.0/24 or 26 clearly the /26 will not match on Ips above 63 and I would have to check and see of exim would consider 63 at all since in that subnet 63 would be the broadcast address and should not be assigned a host would would not technically work since the first and last *usable* Ips would be 1 and 62 (with 0 being network and 63 being broadcast if 0 is the network). It would be better to ask in the exim list if exim would consider .63 against a 26 bit mask since it should not occur if the subnet in question really is 0/26 then 63 would actually match only the 0/24 subnet as a host IP. In other words if my ip is 10.10.10.63 it would not match 10.10.10.0/26 but would match 10.10.10.0/24 Rick From tony at ai.net.nz Mon Dec 19 22:05:15 2011 From: tony at ai.net.nz (Tony Arcus) Date: Mon Dec 19 22:06:12 2011 Subject: Emails not getting scanned In-Reply-To: References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> Message-ID: <20111220110515.11231woqrcobpouz@mail.ai.net.nz> Thanks for the obvious heads up. MTA This is my first centos 6 server, been doing centos 5 for years. Sendmail is: service sendmail stop chkconfig sendmail off Mailscanner is on When I do a /etc/init.d/MailScanner status Checking MailScanner daemons: MailScanner: [ OK ] incoming sendmail: [ OK ] outgoing sendmail: [ OK ] All looks good and as I would expect, but when I do a /etc/init.d/sendmail status sendmail is stopped sm-client (pid 19322) is running... Generally on Centos 5 I would get /etc/init.d/sendmail status sendmail (pid 4662 4656 4650) is running... Still nothing here that causes me to think things are wrong. What I can confirm is that emails are entering the queue /var/spool/mqueue.in/, but immediately get processed (by something) directly to the user. MailScanner never gets to process them. If I stop mailscanner the server no longer receives emails, I can not telnet in. Start mailscanner and I can. So I guess the sendmail subsystem, though only being called by the starting of Mailscanner is processing the emails and not handing them on to mailscanner. Therefore question: What do I need to check/change so sendmail does not sent the queued messages in mqueue.in directly to the users. -- Tony Arcus Systems and Network Engineer Access Information Limited PO Box 122 Carterton Wairarapa Phone : 06-379-6668 Phone : 04-831-1401 Email : tony@ai.net.nz Cell : 021-827-660 This email and any accompanying documentation may contain privileged and confidential information. If you are not the intended recipient, your use of the information is strictly prohibited. Quoting Martin Hepworth : > Yeah I'd check the mta is setup correctly to hold the email in the first q > and delivery from the second . > > Is this a new install or an existing one that suddenly stopped working? > > Martin > > On Monday, 19 December 2011, Tony Arcus wrote: >> All emails are coming in to the server okay. >> But very few seem to be scanned by MailScanner or logged in to Mailwatch >> >> MailScanner -v looks fine expect for >> missing Mail::ClamAV >> >> but I have manually installed ClamAV and it seems fine. >> >> MailScanner --lint >> Trying to setlogsock(unix) >> >> Reading configuration file /etc/MailScanner/MailScanner.conf >> Reading configuration file /etc/MailScanner/conf.d/README >> Read 869 hostnames from the phishing whitelist >> Read 3760 hostnames from the phishing blacklists >> Config: calling custom init function SQLBlacklist >> Starting up SQL Blacklist >> Read 0 blacklist entries >> Config: calling custom init function MailWatchLogging >> Started SQL Logging child >> Config: calling custom init function SQLWhitelist >> Starting up SQL Whitelist >> Read 11 whitelist entries >> >> Checking version numbers... >> Version number in MailScanner.conf (4.84.3) is correct. >> >> Your envelope_sender_header in spam.assassin.prefs.conf is correct. >> >> Checking for SpamAssassin errors (if you use it)... >> Using SpamAssassin results cache >> Connected to SpamAssassin cache database >> SpamAssassin reported no errors. >> Connected to Processing Attempts Database >> Created Processing Attempts Database successfully >> There are 0 messages in the Processing Attempts Database >> Using locktype = posix >> MailScanner.conf says "Virus Scanners = clamav" >> Found these virus scanners installed: clamav >> > =========================================================================== >> Filename Checks: Windows/DOS Executable (1 eicar.com) >> Other Checks: Found 1 problems >> Virus and Content Scanning: Starting >> 1.message: Eicar-Test-Signature-1 FOUND >> >> ./1/eicar.com: Eicar-Test-Signature FOUND >> >> Virus Scanning: ClamAV found 2 infections >> Infected message 1 came from 10.1.1.1 >> Virus Scanning: Found 2 viruses >> > =========================================================================== >> Virus Scanner test reports: >> ClamAV said "eicar.com contains Eicar-Test-Signature" >> >> If any of your virus scanners (clamav) >> are not listed there, you should check that they are installed correctly >> and that MailScanner is finding them correctly via its > virus.scanners.conf. >> Config: calling custom end function SQLBlacklist >> Closing down by-domain spam blacklist >> Config: calling custom end function MailWatchLogging >> Config: calling custom end function SQLWhitelist >> Closing down by-domain spam whitelist >> >> >> The server is Centos 6.0 >> >> Any ideas of what else I should check to see why incoming messages are > being delivered just not scanned. >> >> Tony Arcus >> Systems and Network Engineer >> Access Information Limited >> PO Box 122 >> Carterton >> Wairarapa >> >> Phone : 06-379-6668 >> Phone : 04-831-1401 >> Email : tony@ai.net.nz >> Cell : 021-827-660 >> >> This email and any accompanying documentation may contain privileged and >> confidential information. If you are not the intended recipient, your use >> of the information is strictly prohibited. >> >> >> >> >> >> ---------------------------------------------------------------- >> This message was sent using IMP, the Internet Messaging Program. >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From tony at ai.net.nz Mon Dec 19 22:05:17 2011 From: tony at ai.net.nz (Tony Arcus) Date: Mon Dec 19 22:06:26 2011 Subject: Emails not getting scanned In-Reply-To: References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> Message-ID: <20111220110517.17643yo6r9tn60wt@mail.ai.net.nz> Thanks for the obvious heads up. MTA This is my first centos 6 server, been doing centos 5 for years. Sendmail is: service sendmail stop chkconfig sendmail off Mailscanner is on When I do a /etc/init.d/MailScanner status Checking MailScanner daemons: MailScanner: [ OK ] incoming sendmail: [ OK ] outgoing sendmail: [ OK ] All looks good and as I would expect, but when I do a /etc/init.d/sendmail status sendmail is stopped sm-client (pid 19322) is running... Generally on Centos 5 I would get /etc/init.d/sendmail status sendmail (pid 4662 4656 4650) is running... Still nothing here that causes me to think things are wrong. What I can confirm is that emails are entering the queue /var/spool/mqueue.in/, but immediately get processed (by something) directly to the user. MailScanner never gets to process them. If I stop mailscanner the server no longer receives emails, I can not telnet in. Start mailscanner and I can. So I guess the sendmail subsystem, though only being called by the starting of Mailscanner is processing the emails and not handing them on to mailscanner. Therefore question: What do I need to check/change so sendmail does not sent the queued messages in mqueue.in directly to the users. -- Tony Arcus Systems and Network Engineer Access Information Limited PO Box 122 Carterton Wairarapa Phone : 06-379-6668 Phone : 04-831-1401 Email : tony@ai.net.nz Cell : 021-827-660 This email and any accompanying documentation may contain privileged and confidential information. If you are not the intended recipient, your use of the information is strictly prohibited. Quoting Martin Hepworth : > Yeah I'd check the mta is setup correctly to hold the email in the first q > and delivery from the second . > > Is this a new install or an existing one that suddenly stopped working? > > Martin > > On Monday, 19 December 2011, Tony Arcus wrote: >> All emails are coming in to the server okay. >> But very few seem to be scanned by MailScanner or logged in to Mailwatch >> >> MailScanner -v looks fine expect for >> missing Mail::ClamAV >> >> but I have manually installed ClamAV and it seems fine. >> >> MailScanner --lint >> Trying to setlogsock(unix) >> >> Reading configuration file /etc/MailScanner/MailScanner.conf >> Reading configuration file /etc/MailScanner/conf.d/README >> Read 869 hostnames from the phishing whitelist >> Read 3760 hostnames from the phishing blacklists >> Config: calling custom init function SQLBlacklist >> Starting up SQL Blacklist >> Read 0 blacklist entries >> Config: calling custom init function MailWatchLogging >> Started SQL Logging child >> Config: calling custom init function SQLWhitelist >> Starting up SQL Whitelist >> Read 11 whitelist entries >> >> Checking version numbers... >> Version number in MailScanner.conf (4.84.3) is correct. >> >> Your envelope_sender_header in spam.assassin.prefs.conf is correct. >> >> Checking for SpamAssassin errors (if you use it)... >> Using SpamAssassin results cache >> Connected to SpamAssassin cache database >> SpamAssassin reported no errors. >> Connected to Processing Attempts Database >> Created Processing Attempts Database successfully >> There are 0 messages in the Processing Attempts Database >> Using locktype = posix >> MailScanner.conf says "Virus Scanners = clamav" >> Found these virus scanners installed: clamav >> > =========================================================================== >> Filename Checks: Windows/DOS Executable (1 eicar.com) >> Other Checks: Found 1 problems >> Virus and Content Scanning: Starting >> 1.message: Eicar-Test-Signature-1 FOUND >> >> ./1/eicar.com: Eicar-Test-Signature FOUND >> >> Virus Scanning: ClamAV found 2 infections >> Infected message 1 came from 10.1.1.1 >> Virus Scanning: Found 2 viruses >> > =========================================================================== >> Virus Scanner test reports: >> ClamAV said "eicar.com contains Eicar-Test-Signature" >> >> If any of your virus scanners (clamav) >> are not listed there, you should check that they are installed correctly >> and that MailScanner is finding them correctly via its > virus.scanners.conf. >> Config: calling custom end function SQLBlacklist >> Closing down by-domain spam blacklist >> Config: calling custom end function MailWatchLogging >> Config: calling custom end function SQLWhitelist >> Closing down by-domain spam whitelist >> >> >> The server is Centos 6.0 >> >> Any ideas of what else I should check to see why incoming messages are > being delivered just not scanned. >> >> Tony Arcus >> Systems and Network Engineer >> Access Information Limited >> PO Box 122 >> Carterton >> Wairarapa >> >> Phone : 06-379-6668 >> Phone : 04-831-1401 >> Email : tony@ai.net.nz >> Cell : 021-827-660 >> >> This email and any accompanying documentation may contain privileged and >> confidential information. If you are not the intended recipient, your use >> of the information is strictly prohibited. >> >> >> >> >> >> ---------------------------------------------------------------- >> This message was sent using IMP, the Internet Messaging Program. >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From axisml at gmail.com Mon Dec 19 22:57:16 2011 From: axisml at gmail.com (Chris Stone) Date: Mon Dec 19 22:57:25 2011 Subject: Emails not getting scanned In-Reply-To: <20111220110515.11231woqrcobpouz@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> Message-ID: Tony, On Mon, Dec 19, 2011 at 3:05 PM, Tony Arcus wrote: > Sendmail is: > service sendmail stop > chkconfig sendmail off > > Mailscanner is on > > When I do a > /etc/init.d/MailScanner status > Checking MailScanner daemons: > ? ? ? ? MailScanner: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?[ ?OK ?] > ? ? ? ? incoming sendmail: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?[ ?OK ?] > ? ? ? ? outgoing sendmail: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?[ ?OK ?] > > All looks good and as I would expect, > but when I do a > /etc/init.d/sendmail status > sendmail is stopped > sm-client (pid ?19322) is running... You turned off the sendmail init scripts with your chkconfig - as you should have. That sendmail init script is going to be looking at /var/spool/mqueue not /var/spool/mqueue.in. The sendmail daemon you are seeing with the /etc/init.d/MailScanner status (or service MailScanner status) is the one that is using /var/spool/mqueue.in as the incoming queue and /var/spool/mqueue as the outbound queue. You should only use the MailScanner init script to see the status of the daemons rather than the sendmail init script. The sm-client indicates that your local sendmail client is running, which you do not need. Do a 'service sendmail stop' and then a 'service MailScanner restart' to clean up and make sure only the sendmail daemons you need are running. The 'chkconfig sendmail off' will keep that init script from running on boot. > Still nothing here that causes me to think things are wrong. > What I can confirm is that emails are entering the queue > /var/spool/mqueue.in/, but immediately get processed (by something) directly > to the user. MailScanner never gets to process them. Take a look at the 'Incoming Queue Dir' setting in your /etc/MailScanner/MailScanner.conf file. You should have: Incoming Queue Dir = /var/spool/mqueue.in but, I am guessing, you probably have: Incoming Queue Dir = /var/spool/mqueue Chris From paul at welshfamily.com Mon Dec 19 23:52:36 2011 From: paul at welshfamily.com (Paul Welsh) Date: Mon Dec 19 23:52:46 2011 Subject: OT: Perl Compatible Regular Expressions Message-ID: On 18 Dec 2011 14:06:33 Chris Rees wrote: > > Example regexes: > > ^smtp-out-[0-9]+-[0-9]+.amazon.com$ > > (using the beginning delimiter ^ and end delimiter $ makes the regex > much faster too since if the first character fails to match it skips > that regex and also stops matching mail13.domain.com.evil.scammer.com) > Thanks very much, Chris. It was the ^ and $ that made the difference! For anyone else using the greylist at http://packages.debian.org/unstable/mail/greylistd along with Exim 4.6, it's worth noting that the whitelist-hosts file doesn't support listing IPs in this format, even though the documentation says it does: 123.123 Instead, it would have to be: 123.123.0.0/16 So too, subnets have to be whole octets so using /19 for example doesn't work. The Perl compatible regular expressions do work but some brief testing shows that the FQDNs of the big boys like Amazon, Facebook, Google, Hotmail, Messagelabs, etc are pretty complex and using a Perl compatible regular expression would be a nightmare. So simply using the domain name works pretty well, eg, *.amazon.com. By work, I mean that a spammer could use: helo mail.amazon.com and this would not fool the greylist daemon; a reverse lookup on IP is done. For companies that use a smaller range of mail servers then regex may work better but then again, an IP range is probably just as effective. Of course, if a large company had mail servers named mail01, mail02 ... mail99 but they were geographically distributed then using regex would save typing lots of IPs. So, after all that, regex is probably of limited use. Hopefully someone else may find this of interest in future. From tony at ai.net.nz Tue Dec 20 00:03:23 2011 From: tony at ai.net.nz (Tony Arcus) Date: Tue Dec 20 00:03:51 2011 Subject: Emails not getting scanned In-Reply-To: References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> Message-ID: <20111220130323.1326139o0yvhador@mail.ai.net.nz> Quoting Chris Stone : > Tony, > > On Mon, Dec 19, 2011 at 3:05 PM, Tony Arcus wrote: >> Sendmail is: >> service sendmail stop >> chkconfig sendmail off >> >> Mailscanner is on >> >> When I do a >> /etc/init.d/MailScanner status >> Checking MailScanner daemons: >> ? ? ? ? MailScanner: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?[ ?OK ?] >> ? ? ? ? incoming sendmail: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?[ ?OK ?] >> ? ? ? ? outgoing sendmail: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?[ ?OK ?] >> >> All looks good and as I would expect, >> but when I do a >> /etc/init.d/sendmail status >> sendmail is stopped >> sm-client (pid ?19322) is running... > > You turned off the sendmail init scripts with your chkconfig - as you > should have. That sendmail init script is going to be looking at > /var/spool/mqueue not /var/spool/mqueue.in. The sendmail daemon you > are seeing with the /etc/init.d/MailScanner status (or service > MailScanner status) is the one that is using /var/spool/mqueue.in as > the incoming queue and /var/spool/mqueue as the outbound queue. You > should only use the MailScanner init script to see the status of the > daemons rather than the sendmail init script. > > The sm-client indicates that your local sendmail client is running, > which you do not need. Do a 'service sendmail stop' and then a > 'service MailScanner restart' to clean up and make sure only the > sendmail daemons you need are running. The 'chkconfig sendmail off' > will keep that init script from running on boot. > >> Still nothing here that causes me to think things are wrong. >> What I can confirm is that emails are entering the queue >> /var/spool/mqueue.in/, but immediately get processed (by something) directly >> to the user. MailScanner never gets to process them. > > Take a look at the 'Incoming Queue Dir' setting in your > /etc/MailScanner/MailScanner.conf file. You should have: > > Incoming Queue Dir = /var/spool/mqueue.in > > but, I am guessing, you probably have: > > Incoming Queue Dir = /var/spool/mqueue > > > > Chris > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > Thanks Chris for your suggestions. What you have suggested is what I have so far been trying to trouble shoot. No sendmail process is running as a result of running /etc/init.d/sendmail start The sendmail processes I currently have running are as a result of starting MailScanner. ps aux|grep send root 1328 0.0 0.1 10028 2008 ? Ss 12:10 0:00 sendmail: accepting connections smmsp 1332 0.0 0.1 9792 1532 ? Ss 12:10 0:00 sendmail: Queue runner@00:15:00 for /var/spool/clientmqueue root 1336 0.0 0.1 9784 1620 ? Ss 12:10 0:00 sendmail: Queue runner@00:15:00 for /var/spool/mqueue Even on systems that are running correctly there is a running sm-client. I looked in /var/run/sm-client.pid on my good systems where everything is operational and: cat /var/run/sm-client.pid 1332 /usr/sbin/sendmail -L sm-msp-queue -Ac -q15m -OPidFile=/var/run/sm-client.pid [root@mail strider]# ps aux|grep 1332 smmsp 1332 0.0 0.1 9792 1532 ? Ss 12:10 0:00 sendmail: Queue runner@00:15:00 for /var/spool/clientmqueue So unless I am mistaken (always possible) this is okay. As for /etc/MailScanner/MailScanner.conf cat /etc/MailScanner/MailScanner.conf|grep "Queue Dir" Incoming Queue Dir = /var/spool/mqueue.in Outgoing Queue Dir = /var/spool/mqueue So everything would seem to be set up correctly, the incoming emails are going in to /var/spool/mqueue.in (not some where else) and instantly on to the user, so MailScanner never gets them to process. So what is getting the messages out of /var/spool/mqueue.in, and how to stop this so MailScanner does them 5 seconds later. PS Centos 6 Mailscanner 4.84.3 sendmail-cf-8.14.4-8.el6.noarch sendmail-8.14.4-8.el6.i686 1 gig ram ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From maxsec at gmail.com Tue Dec 20 06:31:15 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Tue Dec 20 06:31:24 2011 Subject: Emails not getting scanned In-Reply-To: <20111220130323.1326139o0yvhador@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> Message-ID: FYI in centos 6 the default mta could be postfix if it's like red hat ! So you may need to disable postfix if u want to get this going.. Martin On Tuesday, 20 December 2011, Tony Arcus wrote: > > Quoting Chris Stone : > >> Tony, >> >> On Mon, Dec 19, 2011 at 3:05 PM, Tony Arcus wrote: >>> >>> Sendmail is: >>> service sendmail stop >>> chkconfig sendmail off >>> >>> Mailscanner is on >>> >>> When I do a >>> /etc/init.d/MailScanner status >>> Checking MailScanner daemons: >>> MailScanner: [ OK ] >>> incoming sendmail: [ OK ] >>> outgoing sendmail: [ OK ] >>> >>> All looks good and as I would expect, >>> but when I do a >>> /etc/init.d/sendmail status >>> sendmail is stopped >>> sm-client (pid 19322) is running... >> >> You turned off the sendmail init scripts with your chkconfig - as you >> should have. That sendmail init script is going to be looking at >> /var/spool/mqueue not /var/spool/mqueue.in. The sendmail daemon you >> are seeing with the /etc/init.d/MailScanner status (or service >> MailScanner status) is the one that is using /var/spool/mqueue.in as >> the incoming queue and /var/spool/mqueue as the outbound queue. You >> should only use the MailScanner init script to see the status of the >> daemons rather than the sendmail init script. >> >> The sm-client indicates that your local sendmail client is running, >> which you do not need. Do a 'service sendmail stop' and then a >> 'service MailScanner restart' to clean up and make sure only the >> sendmail daemons you need are running. The 'chkconfig sendmail off' >> will keep that init script from running on boot. >> >>> Still nothing here that causes me to think things are wrong. >>> What I can confirm is that emails are entering the queue >>> /var/spool/mqueue.in/, but immediately get processed (by something) directly >>> to the user. MailScanner never gets to process them. >> >> Take a look at the 'Incoming Queue Dir' setting in your >> /etc/MailScanner/MailScanner.conf file. You should have: >> >> Incoming Queue Dir = /var/spool/mqueue.in >> >> but, I am guessing, you probably have: >> >> Incoming Queue Dir = /var/spool/mqueue >> >> >> >> Chris >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> > > Thanks Chris for your suggestions. > > What you have suggested is what I have so far been trying to trouble shoot. > No sendmail process is running as a result of running > /etc/init.d/sendmail start > > The sendmail processes I currently have running are as a result of starting MailScanner. > ps aux|grep send > root 1328 0.0 0.1 10028 2008 ? Ss 12:10 0:00 sendmail: accepting connections > smmsp 1332 0.0 0.1 9792 1532 ? Ss 12:10 0:00 sendmail: Queue runner@00:15:00 for > /var/spool/clientmqueue > root 1336 0.0 0.1 9784 1620 ? Ss 12:10 0:00 sendmail: Queue runner@00:15:00 for /var/spool/mqueue > > Even on systems that are running correctly there is a running sm-client. > I looked in /var/run/sm-client.pid on my good systems where everything is operational and: > > cat /var/run/sm-client.pid > 1332 > /usr/sbin/sendmail -L sm-msp-queue -Ac -q15m -OPidFile=/var/run/sm-client.pid > [root@mail strider]# ps aux|grep 1332 > smmsp 1332 0.0 0.1 9792 1532 ? Ss 12:10 0:00 sendmail: Queue runner@00:15:00 for > /var/spool/clientmqueue > > So unless I am mistaken (always possible) this is okay. > > As for /etc/MailScanner/MailScanner.conf > cat /etc/MailScanner/MailScanner.conf|grep "Queue Dir" > Incoming Queue Dir = /var/spool/mqueue.in > Outgoing Queue Dir = /var/spool/mqueue > > So everything would seem to be set up correctly, the incoming emails are going in to /var/spool/mqueue.in (not some where else) and instantly on to the user, so MailScanner never gets them to process. > > So what is getting the messages out of /var/spool/mqueue.in, and how to stop this so MailScanner does them 5 seconds later. > > PS > Centos 6 > Mailscanner 4.84.3 > sendmail-cf-8.14.4-8.el6.noarch > sendmail-8.14.4-8.el6.i686 > > 1 gig ram > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111220/88fc5ced/attachment.html From axisml at gmail.com Tue Dec 20 16:07:25 2011 From: axisml at gmail.com (Chris Stone) Date: Tue Dec 20 16:07:35 2011 Subject: Emails not getting scanned In-Reply-To: References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> Message-ID: On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth wrote: > FYI in centos 6 the default mta could be postfix if it's like red hat ! So > you may need to disable postfix if u want to get this going.. Good point Tony - if you telnet to the server on port 25, do you get the sendmail or postfix banner? Chris From tony at ai.net.nz Tue Dec 20 20:47:37 2011 From: tony at ai.net.nz (Tony Arcus) Date: Tue Dec 20 20:48:14 2011 Subject: Emails not getting scanned In-Reply-To: References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> Message-ID: <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> > On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth wrote: >> FYI in centos 6 the default mta could be postfix if it's like red hat ! So >> you may need to disable postfix if u want to get this going.. > > Good point > > Tony - if you telnet to the server on port 25, do you get the sendmail > or postfix banner? > > > Chris > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > Thanks Martin and Chris for that tip, I had already discovered that and uninstalled postfix. No luck It got me thinking... what else could be delivering the mail from /var/spool/mqueue.in? Other than sendmail? ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From maxsec at gmail.com Tue Dec 20 21:18:17 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Tue Dec 20 21:18:25 2011 Subject: Emails not getting scanned In-Reply-To: <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> Message-ID: Check the mail log and messages logs . Also have a look at the chkconfig as to whats set to run Martin On Tuesday, 20 December 2011, Tony Arcus wrote: > > >> On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth wrote: >>> >>> FYI in centos 6 the default mta could be postfix if it's like red hat ! So >>> you may need to disable postfix if u want to get this going.. >> >> Good point >> >> Tony - if you telnet to the server on port 25, do you get the sendmail >> or postfix banner? >> >> >> Chris >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> > > Thanks Martin and Chris for that tip, I had already discovered that and uninstalled postfix. No luck > > It got me thinking... what else could be delivering the mail from /var/spool/mqueue.in? Other than sendmail? > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111220/93c88764/attachment.html From AHKAPLAN at PARTNERS.ORG Wed Dec 21 21:32:54 2011 From: AHKAPLAN at PARTNERS.ORG (Kaplan, Andrew H.) Date: Wed Dec 21 21:32:42 2011 Subject: Problem Messages e-mail message appearing Message-ID: Hi there -- We are running MailScanner 4.83.5 with Sendmail 8.13.8 on a CentOS 5.6 64-bit distribution. The MailScanner package was installed via an rpm package installation. The system is running well, but I have been receiving once on the hour a Problem Messages e-mail. The e-mail in question dates from Tuesday, December 20. I have already gone into the /var/spool/mqueue directory confirm there are no outstanding messages there. Additionally, I have also run the sendmail -q -v command to flush out the cache. Despite that, the message continues to appear. I was planning on stopping, and restarting the MailScanner along with Sendmail, but I wanted to get feedback from the group prior to taking that course of action. Is there any other step(s) that I should undertake prior to restarting the two applications in question? Thanks. The information in this e-mail is intended only for the person to whom it is addressed. If you believe this e-mail was sent to you in error and the e-mail contains patient information, please contact the Partners Compliance HelpLine at http://www.partners.org/complianceline . If the e-mail was sent to you in error but does not contain patient information, please contact the sender and properly dispose of the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111221/12208f74/attachment.html From tony at ai.net.nz Wed Dec 21 23:29:16 2011 From: tony at ai.net.nz (Tony Arcus) Date: Wed Dec 21 23:29:43 2011 Subject: Emails not getting scanned In-Reply-To: <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> Message-ID: <20111222122916.20634yp220inuj7w@mail.ai.net.nz> >> On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth wrote: >>> FYI in centos 6 the default mta could be postfix if it's like red hat ! So >>> you may need to disable postfix if u want to get this going.. >> >> Good point >> >> Tony - if you telnet to the server on port 25, do you get the sendmail >> or postfix banner? >> >> >> Chris >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> > > Thanks Martin and Chris for that tip, I had already discovered that > and uninstalled postfix. No luck > > It got me thinking... what else could be delivering the mail from > /var/spool/mqueue.in? Other than sendmail? > Thanks to a lot of people with suggestions. This is what I believe is happening. Being Centos 6 Postfix was installed but not running. Postfix has been uninstalled and the server restarted Telnet in and you get: > Trying 202.xxx.xxx.124... > Connected to mail.xxxxx.co.nz (202.xxx.xxx.124). > Escape character is '^]'. > 220 mail.xxxxxx.co.nz ESMTP Sendmail 8.14.4/8.14.4; Thu, 22 Dec 2011 > > 11:20:06 +1300 looking at chkconfig, this appears clean and unless some one wants something specific from it I wont report my findings. SO It would appear that emails come in on the sendmail MTA They get put in the /var/spool/mqueue.in directory THEN sendmail straight away picks them back up and delivers them before. MailScanner can ever get a change to process them. My reason for thinking this: I sent a number of emails from a different server. Here is sendmail getting the email as we would expect, and as emails are also received on other sendmail/MailScanner servers that are operating correctly. root 16583 0.0 0.3 10848 3952 ? D 11:34 0:00 sendmail: pBLMYFqF016583 ip-202-174-161-37.wizbiz.net.nz [202.174.161.37]: DATA INSTANTLY though I also see this root 16585 0.0 0.3 10668 3200 ? S 11:34 0:00 sendmail: ./pBLMYFqD016583 from queue sendmail picks the email back up and delivers it, MailScanner never get a change to poll the this message. How do I stop sendmail from doing this? PS When I look at ps aux|grep send on a server operating okay I get root 31837 0.0 0.0 67468 1520 ? Ss Dec20 0:00 sendmail: accepting connections $ smmsp 31841 0.0 0.0 57724 904 ? Ss Dec20 0:00 sendmail: Queue runner@00:15:00 for /var/spool/clientmqueue root 31845 0.0 0.0 57852 896 ? Ss Dec20 0:00 sendmail: Queue runner@00:15:00 for /var/spool/mqueue And on the bad server I get the same thing: root 17410 0.0 0.1 10768 1824 ? Ss 11:48 0:00 sendmail: accepting connections $ smmsp 17414 0.0 0.1 9784 1528 ? Ss 11:48 0:00 sendmail: Queue runner@00:15:00 for /var/spool/clientmqueue root 17418 0.0 0.1 9788 1616 ? Ss 11:48 0:00 sendmail: Queue runner@00:15:00 for /var/spool/mqueue thanks again ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From maxsec at gmail.com Thu Dec 22 08:18:19 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Thu Dec 22 08:18:28 2011 Subject: Emails not getting scanned In-Reply-To: <20111222122916.20634yp220inuj7w@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> <20111222122916.20634yp220inuj7w@mail.ai.net.nz> Message-ID: I'd look very carefully at the sendmail setup (http://www.mailscanner.info/sendmail.html) and make sure that mail doesnot flow with MS turned off. -- Martin Hepworth Oxford, UK On 21 December 2011 23:29, Tony Arcus wrote: > On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth >>> wrote: >>> >>>> FYI in centos 6 the default mta could be postfix if it's like red hat ! >>>> So >>>> you may need to disable postfix if u want to get this going.. >>>> >>> >>> Good point >>> >>> Tony - if you telnet to the server on port 25, do you get the sendmail >>> or postfix banner? >>> >>> >>> Chris >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.**info >>> http://lists.mailscanner.info/**mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/**posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> -- >>> This message has been scanned for viruses and >>> dangerous content by MailScanner, and is >>> believed to be clean. >>> >>> >> Thanks Martin and Chris for that tip, I had already discovered that and >> uninstalled postfix. No luck >> >> It got me thinking... what else could be delivering the mail from >> /var/spool/mqueue.in? Other than sendmail? >> >> Thanks to a lot of people with suggestions. > > This is what I believe is happening. > Being Centos 6 > > Postfix was installed but not running. > Postfix has been uninstalled and the server restarted > Telnet in and you get: > >> Trying 202.xxx.xxx.124... >> Connected to mail.xxxxx.co.nz (202.xxx.xxx.124). >> Escape character is '^]'. >> 220 mail.xxxxxx.co.nz ESMTP Sendmail 8.14.4/8.14.4; Thu, 22 Dec 2011 > >> 11:20:06 +1300 >> > > looking at chkconfig, this appears clean and unless some one wants > something specific from it I wont report my findings. > > SO > > It would appear that emails come in on the sendmail MTA > They get put in the /var/spool/mqueue.in directory > THEN sendmail straight away picks them back up and delivers them before. > MailScanner can ever get a change to process them. > > My reason for thinking this: > > I sent a number of emails from a different server. > Here is sendmail getting the email as we would expect, and as emails are > also received on other sendmail/MailScanner servers that are operating > correctly. > > root 16583 0.0 0.3 10848 3952 ? D 11:34 0:00 sendmail: > pBLMYFqF016583 ip-202-174-161-37.wizbiz.net.**nz > [202.174.161.37]: DATA > > > INSTANTLY though I also see this > root 16585 0.0 0.3 10668 3200 ? S 11:34 0:00 sendmail: > ./pBLMYFqD016583 from queue > > sendmail picks the email back up and delivers it, MailScanner never get a > change to poll the this message. > > How do I stop sendmail from doing this? > > PS > When I look at ps aux|grep send on a server operating okay I get > root 31837 0.0 0.0 67468 1520 ? Ss Dec20 0:00 sendmail: > accepting connections $ > smmsp 31841 0.0 0.0 57724 904 ? Ss Dec20 0:00 sendmail: > Queue runner@00:15:00 for > /var/spool/clientmqueue > root 31845 0.0 0.0 57852 896 ? Ss Dec20 0:00 sendmail: > Queue runner@00:15:00 for /var/spool/mqueue > > And on the bad server I get the same thing: > root 17410 0.0 0.1 10768 1824 ? Ss 11:48 0:00 sendmail: > accepting connections $ > smmsp 17414 0.0 0.1 9784 1528 ? Ss 11:48 0:00 sendmail: > Queue runner@00:15:00 for > /var/spool/clientmqueue > root 17418 0.0 0.1 9788 1616 ? Ss 11:48 0:00 sendmail: > Queue runner@00:15:00 for /var/spool/mqueue > > > thanks again > > > > > ------------------------------**------------------------------**---- > This message was sent using IMP, the Internet Messaging Program. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.**info > http://lists.mailscanner.info/**mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/**posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111222/513065fd/attachment.html From glenn.steen at gmail.com Thu Dec 22 16:18:55 2011 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu Dec 22 16:19:04 2011 Subject: Problem Messages e-mail message appearing In-Reply-To: References: Message-ID: On 21 December 2011 22:32, Kaplan, Andrew H. wrote: > Hi there -- > > We are running MailScanner 4.83.5 with Sendmail 8.13.8 on a CentOS 5.6 > 64-bit distribution. The MailScanner package > was installed via an rpm package installation. The system is running well, > but I have been receiving once on the hour a > > Problem Messages e-mail. The e-mail in question dates from Tuesday, December > 20. I have already gone into the > /var/spool/mqueue directory confirm there are no outstanding messages there. > Additionally, I have also run the > sendmail -q -v command to flush out the cache. Despite that, the message > continues to appear. > > I was planning on stopping, and restarting the MailScanner along with > Sendmail, but I wanted to get feedback from the > group prior to taking that course of action. Is there any other step(s) that > I should undertake prior to restarting the two > > applications in question? > > Thanks. Since you get it every hour, someone or something persistently puts a new malformed mail in there every hour, most likely. Start by checking your cron jobs (on the MS host, as well as any other box). You could also check your quarantine directory, it's very likely that the errant message(s) have been saved there. Should make finding the culprit much easier;-) Cheers & Merry Xmas! -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From campbell at cnpapers.com Thu Dec 22 16:26:42 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Dec 22 16:26:24 2011 Subject: OT: Centos 6 question Message-ID: <4EF35A42.1060000@cnpapers.com> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little trouble getting sendmail to work, and I'm not sure why. Could be the way the network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, or who knows, but the server isn't accepting mail at all, even after changing the line in the .mc file to accept mail from hosts other than localhost and rebuilding the .cf file. The new GUI for the Centos 6 installation seems to be somewhat confusing when it comes to asking what type of installation I would like (types being things like SQL server, web server etc.) I'm going to try the new 6.2 DVDs, but wonder what type of installation others have chosen since I'm sure there's something closer than the Workstation type I chose. Thanks and sorry for OT steve campbell From steve at fsl.com Thu Dec 22 16:44:22 2011 From: steve at fsl.com (Stephen Swaney) Date: Thu Dec 22 16:44:32 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF35A42.1060000@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> Message-ID: On Dec 22, 2011, at 11:26 AM, Steve Campbell wrote: > I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little trouble getting sendmail to work, and I'm not sure why. Could be the way the network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, or who knows, but the server isn't accepting mail at all, even after changing the line in the .mc file to accept mail from hosts other than localhost and rebuilding the .cf file. > > The new GUI for the Centos 6 installation seems to be somewhat confusing when it comes to asking what type of installation I would like (types being things like SQL server, web server etc.) > > I'm going to try the new 6.2 DVDs, but wonder what type of installation others have chosen since I'm sure there's something closer than the Workstation type I chose. > > Thanks and sorry for OT > > steve campbell > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! Glen, CentOS 6 offers two primary MTAs: Postfix and Sendmail. Postfix is configured as the default MTA, although it is easy to switch the default MTA to Sendmail. To switch the default MTA to Sendmail, you can either uninstall Postfix or use the following command to switch to Sendmail: ~]# alternatives --config mta Best regards, Steve -- Steve Swaney steve@fsl.com 202 595-7760 ext: 601 www.fsl.com From jeremy at fluxlabs.net Thu Dec 22 16:53:26 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Thu Dec 22 16:54:27 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF35A42.1060000@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> Message-ID: <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> The host setup shouldn't matter. Are you able to telnet into the xen vm on port 25? have you disabled iptables or allowed port 25 through ? Verify you have connectivity from the outside first, then start working back on your config files. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little trouble getting sendmail to work, and I'm not sure why. Could be the way the network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, or who knows, but the server isn't accepting mail at all, even after changing the line in the .mc file to accept mail from hosts other than localhost and rebuilding the .cf file. The new GUI for the Centos 6 installation seems to be somewhat confusing when it comes to asking what type of installation I would like (types being things like SQL server, web server etc.) I'm going to try the new 6.2 DVDs, but wonder what type of installation others have chosen since I'm sure there's something closer than the Workstation type I chose. Thanks and sorry for OT steve campbell -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111222/1de243ee/attachment.html From campbell at cnpapers.com Thu Dec 22 17:06:03 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Dec 22 17:07:17 2011 Subject: OT: Centos 6 question In-Reply-To: References: <4EF35A42.1060000@cnpapers.com> Message-ID: <4EF3637B.5020708@cnpapers.com> On 12/22/2011 11:44 AM, Stephen Swaney wrote: > On Dec 22, 2011, at 11:26 AM, Steve Campbell wrote: > >> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little trouble getting sendmail to work, and I'm not sure why. Could be the way the network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, or who knows, but the server isn't accepting mail at all, even after changing the line in the .mc file to accept mail from hosts other than localhost and rebuilding the .cf file. >> >> The new GUI for the Centos 6 installation seems to be somewhat confusing when it comes to asking what type of installation I would like (types being things like SQL server, web server etc.) >> >> I'm going to try the new 6.2 DVDs, but wonder what type of installation others have chosen since I'm sure there's something closer than the Workstation type I chose. >> >> Thanks and sorry for OT >> >> steve campbell >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > Glen, > > CentOS 6 offers two primary MTAs: Postfix and Sendmail. Postfix is configured as the default MTA, although it is easy to switch the default MTA to Sendmail. To switch the default MTA to Sendmail, you can either uninstall Postfix or use the following command to switch to > Sendmail: > > ~]# alternatives --config mta > > Best regards, > > Steve I tried to just stop postfix, install all of sendmail and start that and got nowhere... Looks like there's a lot of "newness" to Centos 6 I'm going to have to learn. Thanks steve From msapiro at value.net Thu Dec 22 17:06:27 2011 From: msapiro at value.net (Mark Sapiro) Date: Thu Dec 22 17:09:29 2011 Subject: Problem Messages e-mail message appearing In-Reply-To: References: Message-ID: <4EF36393.1080904@value.net> On 11:59 AM, Kaplan, Andrew H. wrote: > > We are running MailScanner 4.83.5 with Sendmail 8.13.8 on a CentOS 5.6 > 64-bit distribution. The MailScanner package > was installed via an rpm package installation. The system is running > well, but I have been receiving once on the hour a > > Problem Messages e-mail. The e-mail in question dates from Tuesday, > December 20. I have already gone into the > /var/spool/mqueue directory confirm there are no outstanding messages > there. Additionally, I have also run the > sendmail -q -v command to flush out the cache. Despite that, the message > continues to appear. The above message is generated by /usr/sbin/processing_messages_alert which is run hourly by cron and which reports any non-empty output from `/usr/sbin/MailScanner --processing`. I.e. it reports messages stuck in MailScanner's 'processing database. You can clear the database by removing it (/var/spool/MailScanner/incoming/Processing.db). There may be more info on why this message isn't being successfully processed in MailScanner's log messages. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From campbell at cnpapers.com Thu Dec 22 17:10:06 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Dec 22 17:09:41 2011 Subject: OT: Centos 6 question In-Reply-To: <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> Message-ID: <4EF3646E.8020603@cnpapers.com> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: > The host setup shouldn't matter. Are you able to telnet into the xen > vm on port 25? have you disabled iptables or allowed port 25 through ? > Verify you have connectivity from the outside first, then start > working back on your config files. > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > *Office* : 850-588-4626 > *Cell* : 850-890-2543 > *Fax* : 850-254-2955 > > On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: > >> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a >> little trouble getting sendmail to work, and I'm not sure why. Could >> be the way the network NIC is configured, the fact that I'm running >> 6.1 under a 5.7 host, or who knows, but the server isn't accepting >> mail at all, even after changing the line in the .mc file to accept >> mail from hosts other than localhost and rebuilding the .cf file. >> >> The new GUI for the Centos 6 installation seems to be somewhat >> confusing when it comes to asking what type of installation I would >> like (types being things like SQL server, web server etc.) >> >> I'm going to try the new 6.2 DVDs, but wonder what type of >> installation others have chosen since I'm sure there's something >> closer than the Workstation type I chose. >> >> Thanks and sorry for OT >> >> steve campbell >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > > > I originally tried just sending mail to the server, and got a bounce. I then tried telnet, and it too failed. The network setup in 6.1, as I recall, is nothing like the previous versions of Centos. I eventually installed Webmin and was surprised at how the NIC was configured from the install when I went to modify it. I could get to the internet, but sendmail didn't seem to be accepting mail. "ps ax" showed it running though. Thanks steve -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111222/40a50769/attachment.html From jeremy at fluxlabs.net Thu Dec 22 17:09:22 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Thu Dec 22 17:09:44 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF3637B.5020708@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> <4EF3637B.5020708@cnpapers.com> Message-ID: <35F705CD-8A87-4B2D-8C35-4133AF72EE67@fluxlabs.net> You will need to remove postfix if you want sendmail. honestly, i would recommend using postfix. it has alot more options than sendmail. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 22, 2011, at 11:06 AM, Steve Campbell wrote: On 12/22/2011 11:44 AM, Stephen Swaney wrote: On Dec 22, 2011, at 11:26 AM, Steve Campbell wrote: I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little trouble getting sendmail to work, and I'm not sure why. Could be the way the network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, or who knows, but the server isn't accepting mail at all, even after changing the line in the .mc file to accept mail from hosts other than localhost and rebuilding the .cf file. The new GUI for the Centos 6 installation seems to be somewhat confusing when it comes to asking what type of installation I would like (types being things like SQL server, web server etc.) I'm going to try the new 6.2 DVDs, but wonder what type of installation others have chosen since I'm sure there's something closer than the Workstation type I chose. Thanks and sorry for OT steve campbell -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! Glen, CentOS 6 offers two primary MTAs: Postfix and Sendmail. Postfix is configured as the default MTA, although it is easy to switch the default MTA to Sendmail. To switch the default MTA to Sendmail, you can either uninstall Postfix or use the following command to switch to Sendmail: ~]# alternatives --config mta Best regards, Steve I tried to just stop postfix, install all of sendmail and start that and got nowhere... Looks like there's a lot of "newness" to Centos 6 I'm going to have to learn. Thanks steve -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111222/97b55e0e/attachment.html From jeremy at fluxlabs.net Thu Dec 22 17:36:52 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Thu Dec 22 17:37:03 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF3646E.8020603@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> Message-ID: <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> Stop iptables and make sure you can telnet in. then work from there. yes the network configuration is different. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: The host setup shouldn't matter. Are you able to telnet into the xen vm on port 25? have you disabled iptables or allowed port 25 through ? Verify you have connectivity from the outside first, then start working back on your config files. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little trouble getting sendmail to work, and I'm not sure why. Could be the way the network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, or who knows, but the server isn't accepting mail at all, even after changing the line in the .mc file to accept mail from hosts other than localhost and rebuilding the .cf file. The new GUI for the Centos 6 installation seems to be somewhat confusing when it comes to asking what type of installation I would like (types being things like SQL server, web server etc.) I'm going to try the new 6.2 DVDs, but wonder what type of installation others have chosen since I'm sure there's something closer than the Workstation type I chose. Thanks and sorry for OT steve campbell -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! I originally tried just sending mail to the server, and got a bounce. I then tried telnet, and it too failed. The network setup in 6.1, as I recall, is nothing like the previous versions of Centos. I eventually installed Webmin and was surprised at how the NIC was configured from the install when I went to modify it. I could get to the internet, but sendmail didn't seem to be accepting mail. "ps ax" showed it running though. Thanks steve -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111222/228760a8/attachment.html From raubvogel at gmail.com Thu Dec 22 17:57:30 2011 From: raubvogel at gmail.com (Mauricio Tavares) Date: Thu Dec 22 17:57:39 2011 Subject: OT: Centos 6 question In-Reply-To: <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> Message-ID: You probably checked that, but the vm's NIC is in bridge mode, right? On Thu, Dec 22, 2011 at 12:36 PM, Jeremy McSpadden wrote: > Stop iptables and make sure you can telnet in. then work from there. yes the > network configuration is different. > > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office?: 850-588-4626 > Cell?: 850-890-2543 > Fax?: 850-254-2955 > > On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: > > > > On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: > > The host setup shouldn't matter. Are you able to telnet into the xen vm on > port 25? have you disabled iptables or allowed port 25 through ? Verify you > have connectivity from the outside first, then start working back on your > config files. > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office?: 850-588-4626 > Cell?: 850-890-2543 > Fax?: 850-254-2955 > > On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: > > I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little > trouble getting sendmail to work, and I'm not sure why. Could be the way the > network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, > or who knows, but the server isn't accepting mail at all, even after > changing the line in the .mc file to accept mail from hosts other than > localhost and rebuilding the .cf file. > > The new GUI for the Centos 6 installation seems to be somewhat confusing > when it comes to asking what type of installation I would like (types being > things like SQL server, web server etc.) > > I'm going to try the new 6.2 DVDs, but wonder what type of installation > others have chosen since I'm sure there's something closer than the > Workstation type I chose. > > Thanks and sorry for OT > > steve campbell > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > I originally tried just sending mail to the server, and got a bounce. I then > tried telnet, and it too failed. The network setup in 6.1, as I recall, is > nothing like the previous versions of Centos. I eventually installed Webmin > and was surprised at how the NIC was configured from the install when I went > to modify it. I could get to the internet, but sendmail didn't seem to be > accepting mail. "ps ax" showed it running though. > > Thanks > > steve > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From campbell at cnpapers.com Thu Dec 22 19:12:58 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Dec 22 19:13:12 2011 Subject: OT: Centos 6 question In-Reply-To: References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> Message-ID: <4EF3813A.8030708@cnpapers.com> I'm installing 6.2 now. One thing I noticed is that I did not see the little "network configuration" box on the install the first time. Once I get this installed, I check iptables. I'm using the "workstation" type install this time. Looking for something that gives me the least post-install headaches. Once this is all done, and I've got the grouplists installed, I'll see where I'm at. The types of installation isn't very informative, for instance, does the "workstation" install any server type apps, etc. This really belongs on the Centos list up to this point, but since the basic server will end up with MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking which "type" of installation would get me closest to that configuration. Thanks all, steve On 12/22/2011 12:57 PM, Mauricio Tavares wrote: > You probably checked that, but the vm's NIC is in bridge mode, right? > > On Thu, Dec 22, 2011 at 12:36 PM, Jeremy McSpadden wrote: >> Stop iptables and make sure you can telnet in. then work from there. yes the >> network configuration is different. >> >> -- >> Jeremy McSpadden >> Flux Labs, Inc >> http://www.fluxlabs.net >> Endless Solutions >> Office : 850-588-4626 >> Cell : 850-890-2543 >> Fax : 850-254-2955 >> >> On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: >> >> >> >> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: >> >> The host setup shouldn't matter. Are you able to telnet into the xen vm on >> port 25? have you disabled iptables or allowed port 25 through ? Verify you >> have connectivity from the outside first, then start working back on your >> config files. >> -- >> Jeremy McSpadden >> Flux Labs, Inc >> http://www.fluxlabs.net >> Endless Solutions >> Office : 850-588-4626 >> Cell : 850-890-2543 >> Fax : 850-254-2955 >> >> On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: >> >> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little >> trouble getting sendmail to work, and I'm not sure why. Could be the way the >> network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, >> or who knows, but the server isn't accepting mail at all, even after >> changing the line in the .mc file to accept mail from hosts other than >> localhost and rebuilding the .cf file. >> >> The new GUI for the Centos 6 installation seems to be somewhat confusing >> when it comes to asking what type of installation I would like (types being >> things like SQL server, web server etc.) >> >> I'm going to try the new 6.2 DVDs, but wonder what type of installation >> others have chosen since I'm sure there's something closer than the >> Workstation type I chose. >> >> Thanks and sorry for OT >> >> steve campbell >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> >> >> >> I originally tried just sending mail to the server, and got a bounce. I then >> tried telnet, and it too failed. The network setup in 6.1, as I recall, is >> nothing like the previous versions of Centos. I eventually installed Webmin >> and was surprised at how the NIC was configured from the install when I went >> to modify it. I could get to the internet, but sendmail didn't seem to be >> accepting mail. "ps ax" showed it running though. >> >> Thanks >> >> steve >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> From raubvogel at gmail.com Thu Dec 22 19:35:09 2011 From: raubvogel at gmail.com (Mauricio Tavares) Date: Thu Dec 22 19:35:18 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF3813A.8030708@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> Message-ID: See if yum grouplist | less gives you any ideas. then you can do, say, yum groupinfo 'Development Tools' yum groupinstall 'Development Tools' yum groupremove 'Development Tools' On Thu, Dec 22, 2011 at 2:12 PM, Steve Campbell wrote: > I'm installing 6.2 now. One thing I noticed is that I did not see the little > "network configuration" box on the install the first time. Once I get this > installed, I check iptables. > > I'm using the "workstation" type install this time. Looking for something > that gives me the least post-install headaches. Once this is all done, and > I've got the grouplists installed, I'll see where I'm at. > > The types of installation isn't very informative, for instance, does the > "workstation" install any server type apps, etc. This really belongs on the > Centos list up to this point, but since the basic server will end up with > MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking which > "type" of installation would get me closest to that configuration. > > Thanks all, > > steve > > > On 12/22/2011 12:57 PM, Mauricio Tavares wrote: >> >> You probably checked that, but the vm's NIC is in bridge mode, right? >> >> On Thu, Dec 22, 2011 at 12:36 PM, Jeremy McSpadden >> ?wrote: >>> >>> Stop iptables and make sure you can telnet in. then work from there. yes >>> the >>> network configuration is different. >>> >>> -- >>> Jeremy McSpadden >>> Flux Labs, Inc >>> http://www.fluxlabs.net >>> Endless Solutions >>> Office : 850-588-4626 >>> Cell : 850-890-2543 >>> Fax : 850-254-2955 >>> >>> On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: >>> >>> >>> >>> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: >>> >>> The host setup shouldn't matter. Are you able to telnet into the xen vm >>> on >>> port 25? have you disabled iptables or allowed port 25 through ? Verify >>> you >>> have connectivity from the outside first, then start working back on your >>> config files. >>> -- >>> Jeremy McSpadden >>> Flux Labs, Inc >>> http://www.fluxlabs.net >>> Endless Solutions >>> Office : 850-588-4626 >>> Cell : 850-890-2543 >>> Fax : 850-254-2955 >>> >>> On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: >>> >>> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little >>> trouble getting sendmail to work, and I'm not sure why. Could be the way >>> the >>> network NIC is configured, the fact that I'm running 6.1 under a 5.7 >>> host, >>> or who knows, but the server isn't accepting mail at all, even after >>> changing the line in the .mc file to accept mail from hosts other than >>> localhost and rebuilding the .cf file. >>> >>> The new GUI for the Centos 6 installation seems to be somewhat confusing >>> when it comes to asking what type of installation I would like (types >>> being >>> things like SQL server, web server etc.) >>> >>> I'm going to try the new 6.2 DVDs, but wonder what type of installation >>> others have chosen since I'm sure there's something closer than the >>> Workstation type I chose. >>> >>> Thanks and sorry for OT >>> >>> steve campbell >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >>> >>> >>> I originally tried just sending mail to the server, and got a bounce. I >>> then >>> tried telnet, and it too failed. The network setup in 6.1, as I recall, >>> is >>> nothing like the previous versions of Centos. I eventually installed >>> Webmin >>> and was surprised at how the NIC was configured from the install when I >>> went >>> to modify it. I could get to the internet, but sendmail didn't seem to be >>> accepting mail. "ps ax" showed it running though. >>> >>> Thanks >>> >>> steve >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From campbell at cnpapers.com Thu Dec 22 20:25:45 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Dec 22 20:25:55 2011 Subject: OT: Centos 6 question In-Reply-To: References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> Message-ID: <4EF39249.7070600@cnpapers.com> OK, got the new version installed, turned iptables off (even though 'ps' didn't show them running) and seems well now. I'm not sure what ps is supposed to show for iptables in this version, but it appears it's iptables that was stopping it. Thanks all for all the help and have a great holiday. steve On 12/22/2011 2:35 PM, Mauricio Tavares wrote: > See if > > yum grouplist | less > > gives you any ideas. then you can do, say, > > yum groupinfo 'Development Tools' > yum groupinstall 'Development Tools' > yum groupremove 'Development Tools' > > On Thu, Dec 22, 2011 at 2:12 PM, Steve Campbell wrote: >> I'm installing 6.2 now. One thing I noticed is that I did not see the little >> "network configuration" box on the install the first time. Once I get this >> installed, I check iptables. >> >> I'm using the "workstation" type install this time. Looking for something >> that gives me the least post-install headaches. Once this is all done, and >> I've got the grouplists installed, I'll see where I'm at. >> >> The types of installation isn't very informative, for instance, does the >> "workstation" install any server type apps, etc. This really belongs on the >> Centos list up to this point, but since the basic server will end up with >> MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking which >> "type" of installation would get me closest to that configuration. >> >> Thanks all, >> >> steve >> >> >> On 12/22/2011 12:57 PM, Mauricio Tavares wrote: >>> You probably checked that, but the vm's NIC is in bridge mode, right? >>> >>> On Thu, Dec 22, 2011 at 12:36 PM, Jeremy McSpadden >>> wrote: >>>> Stop iptables and make sure you can telnet in. then work from there. yes >>>> the >>>> network configuration is different. >>>> >>>> -- >>>> Jeremy McSpadden >>>> Flux Labs, Inc >>>> http://www.fluxlabs.net >>>> Endless Solutions >>>> Office : 850-588-4626 >>>> Cell : 850-890-2543 >>>> Fax : 850-254-2955 >>>> >>>> On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: >>>> >>>> >>>> >>>> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: >>>> >>>> The host setup shouldn't matter. Are you able to telnet into the xen vm >>>> on >>>> port 25? have you disabled iptables or allowed port 25 through ? Verify >>>> you >>>> have connectivity from the outside first, then start working back on your >>>> config files. >>>> -- >>>> Jeremy McSpadden >>>> Flux Labs, Inc >>>> http://www.fluxlabs.net >>>> Endless Solutions >>>> Office : 850-588-4626 >>>> Cell : 850-890-2543 >>>> Fax : 850-254-2955 >>>> >>>> On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: >>>> >>>> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little >>>> trouble getting sendmail to work, and I'm not sure why. Could be the way >>>> the >>>> network NIC is configured, the fact that I'm running 6.1 under a 5.7 >>>> host, >>>> or who knows, but the server isn't accepting mail at all, even after >>>> changing the line in the .mc file to accept mail from hosts other than >>>> localhost and rebuilding the .cf file. >>>> >>>> The new GUI for the Centos 6 installation seems to be somewhat confusing >>>> when it comes to asking what type of installation I would like (types >>>> being >>>> things like SQL server, web server etc.) >>>> >>>> I'm going to try the new 6.2 DVDs, but wonder what type of installation >>>> others have chosen since I'm sure there's something closer than the >>>> Workstation type I chose. >>>> >>>> Thanks and sorry for OT >>>> >>>> steve campbell >>>> >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >>>> >>>> >>>> >>>> I originally tried just sending mail to the server, and got a bounce. I >>>> then >>>> tried telnet, and it too failed. The network setup in 6.1, as I recall, >>>> is >>>> nothing like the previous versions of Centos. I eventually installed >>>> Webmin >>>> and was surprised at how the NIC was configured from the install when I >>>> went >>>> to modify it. I could get to the internet, but sendmail didn't seem to be >>>> accepting mail. "ps ax" showed it running though. >>>> >>>> Thanks >>>> >>>> steve >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >>>> >>>> >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! From alex at vidadigital.com.pa Thu Dec 22 20:45:07 2011 From: alex at vidadigital.com.pa (Alex Neuman van der Hans) Date: Thu Dec 22 20:45:25 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF39249.7070600@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> <4EF39249.7070600@cnpapers.com> Message-ID: <4EF396D3.8000902@vidadigital.com.pa> iptables sets rules in the built-in firewall. It doesn't "run as a process", it just "fiddles around the IP stack looking for klingons". If you *do* see a process called iptables "running", you should look into it as it's supposed to run, do its thing, and exit right away. On 12/22/2011 3:25 PM, Steve Campbell wrote: > OK, got the new version installed, turned iptables off (even though > 'ps' didn't show them running) and seems well now. > > I'm not sure what ps is supposed to show for iptables in this version, > but it appears it's iptables that was stopping it. > > Thanks all for all the help and have a great holiday. > > steve > > On 12/22/2011 2:35 PM, Mauricio Tavares wrote: >> See if >> >> yum grouplist | less >> >> gives you any ideas. then you can do, say, >> >> yum groupinfo 'Development Tools' >> yum groupinstall 'Development Tools' >> yum groupremove 'Development Tools' >> >> On Thu, Dec 22, 2011 at 2:12 PM, Steve >> Campbell wrote: >>> I'm installing 6.2 now. One thing I noticed is that I did not see >>> the little >>> "network configuration" box on the install the first time. Once I >>> get this >>> installed, I check iptables. >>> >>> I'm using the "workstation" type install this time. Looking for >>> something >>> that gives me the least post-install headaches. Once this is all >>> done, and >>> I've got the grouplists installed, I'll see where I'm at. >>> >>> The types of installation isn't very informative, for instance, does >>> the >>> "workstation" install any server type apps, etc. This really belongs >>> on the >>> Centos list up to this point, but since the basic server will end up >>> with >>> MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking >>> which >>> "type" of installation would get me closest to that configuration. >>> >>> Thanks all, >>> >>> steve >>> >>> >>> On 12/22/2011 12:57 PM, Mauricio Tavares wrote: >>>> You probably checked that, but the vm's NIC is in bridge mode, right? >>>> >>>> On Thu, Dec 22, 2011 at 12:36 PM, Jeremy >>>> McSpadden >>>> wrote: >>>>> Stop iptables and make sure you can telnet in. then work from >>>>> there. yes >>>>> the >>>>> network configuration is different. >>>>> >>>>> -- >>>>> Jeremy McSpadden >>>>> Flux Labs, Inc >>>>> http://www.fluxlabs.net >>>>> Endless Solutions >>>>> Office : 850-588-4626 >>>>> Cell : 850-890-2543 >>>>> Fax : 850-254-2955 >>>>> >>>>> On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: >>>>> >>>>> >>>>> >>>>> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: >>>>> >>>>> The host setup shouldn't matter. Are you able to telnet into the >>>>> xen vm >>>>> on >>>>> port 25? have you disabled iptables or allowed port 25 through ? >>>>> Verify >>>>> you >>>>> have connectivity from the outside first, then start working back >>>>> on your >>>>> config files. >>>>> -- >>>>> Jeremy McSpadden >>>>> Flux Labs, Inc >>>>> http://www.fluxlabs.net >>>>> Endless Solutions >>>>> Office : 850-588-4626 >>>>> Cell : 850-890-2543 >>>>> Fax : 850-254-2955 >>>>> >>>>> On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: >>>>> >>>>> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a >>>>> little >>>>> trouble getting sendmail to work, and I'm not sure why. Could be >>>>> the way >>>>> the >>>>> network NIC is configured, the fact that I'm running 6.1 under a 5.7 >>>>> host, >>>>> or who knows, but the server isn't accepting mail at all, even after >>>>> changing the line in the .mc file to accept mail from hosts other >>>>> than >>>>> localhost and rebuilding the .cf file. >>>>> >>>>> The new GUI for the Centos 6 installation seems to be somewhat >>>>> confusing >>>>> when it comes to asking what type of installation I would like (types >>>>> being >>>>> things like SQL server, web server etc.) >>>>> >>>>> I'm going to try the new 6.2 DVDs, but wonder what type of >>>>> installation >>>>> others have chosen since I'm sure there's something closer than the >>>>> Workstation type I chose. >>>>> >>>>> Thanks and sorry for OT >>>>> >>>>> steve campbell >>>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> >>>>> >>>>> >>>>> I originally tried just sending mail to the server, and got a >>>>> bounce. I >>>>> then >>>>> tried telnet, and it too failed. The network setup in 6.1, as I >>>>> recall, >>>>> is >>>>> nothing like the previous versions of Centos. I eventually installed >>>>> Webmin >>>>> and was surprised at how the NIC was configured from the install >>>>> when I >>>>> went >>>>> to modify it. I could get to the internet, but sendmail didn't >>>>> seem to be >>>>> accepting mail. "ps ax" showed it running though. >>>>> >>>>> Thanks >>>>> >>>>> steve >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> >>>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! > From alex at vidadigital.com.pa Thu Dec 22 20:46:32 2011 From: alex at vidadigital.com.pa (Alex Neuman van der Hans) Date: Thu Dec 22 20:46:51 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF39249.7070600@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> <4EF39249.7070600@cnpapers.com> Message-ID: <4EF39728.70407@vidadigital.com.pa> Oh, and if you reboot the server it'll load the default rules again - which are "allow SSH and that's it". You need to do something like: echo "# I did this to get rid of the default rules" > /etc/sysconfig/iptables ... as root in order to wipe the defaults. On 12/22/2011 3:25 PM, Steve Campbell wrote: > OK, got the new version installed, turned iptables off (even though > 'ps' didn't show them running) and seems well now. > > I'm not sure what ps is supposed to show for iptables in this version, > but it appears it's iptables that was stopping it. > > Thanks all for all the help and have a great holiday. > > steve > > On 12/22/2011 2:35 PM, Mauricio Tavares wrote: >> See if >> >> yum grouplist | less >> >> gives you any ideas. then you can do, say, >> >> yum groupinfo 'Development Tools' >> yum groupinstall 'Development Tools' >> yum groupremove 'Development Tools' >> >> On Thu, Dec 22, 2011 at 2:12 PM, Steve >> Campbell wrote: >>> I'm installing 6.2 now. One thing I noticed is that I did not see >>> the little >>> "network configuration" box on the install the first time. Once I >>> get this >>> installed, I check iptables. >>> >>> I'm using the "workstation" type install this time. Looking for >>> something >>> that gives me the least post-install headaches. Once this is all >>> done, and >>> I've got the grouplists installed, I'll see where I'm at. >>> >>> The types of installation isn't very informative, for instance, does >>> the >>> "workstation" install any server type apps, etc. This really belongs >>> on the >>> Centos list up to this point, but since the basic server will end up >>> with >>> MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking >>> which >>> "type" of installation would get me closest to that configuration. >>> >>> Thanks all, >>> >>> steve >>> >>> >>> On 12/22/2011 12:57 PM, Mauricio Tavares wrote: >>>> You probably checked that, but the vm's NIC is in bridge mode, right? >>>> >>>> On Thu, Dec 22, 2011 at 12:36 PM, Jeremy >>>> McSpadden >>>> wrote: >>>>> Stop iptables and make sure you can telnet in. then work from >>>>> there. yes >>>>> the >>>>> network configuration is different. >>>>> >>>>> -- >>>>> Jeremy McSpadden >>>>> Flux Labs, Inc >>>>> http://www.fluxlabs.net >>>>> Endless Solutions >>>>> Office : 850-588-4626 >>>>> Cell : 850-890-2543 >>>>> Fax : 850-254-2955 >>>>> >>>>> On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: >>>>> >>>>> >>>>> >>>>> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: >>>>> >>>>> The host setup shouldn't matter. Are you able to telnet into the >>>>> xen vm >>>>> on >>>>> port 25? have you disabled iptables or allowed port 25 through ? >>>>> Verify >>>>> you >>>>> have connectivity from the outside first, then start working back >>>>> on your >>>>> config files. >>>>> -- >>>>> Jeremy McSpadden >>>>> Flux Labs, Inc >>>>> http://www.fluxlabs.net >>>>> Endless Solutions >>>>> Office : 850-588-4626 >>>>> Cell : 850-890-2543 >>>>> Fax : 850-254-2955 >>>>> >>>>> On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: >>>>> >>>>> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a >>>>> little >>>>> trouble getting sendmail to work, and I'm not sure why. Could be >>>>> the way >>>>> the >>>>> network NIC is configured, the fact that I'm running 6.1 under a 5.7 >>>>> host, >>>>> or who knows, but the server isn't accepting mail at all, even after >>>>> changing the line in the .mc file to accept mail from hosts other >>>>> than >>>>> localhost and rebuilding the .cf file. >>>>> >>>>> The new GUI for the Centos 6 installation seems to be somewhat >>>>> confusing >>>>> when it comes to asking what type of installation I would like (types >>>>> being >>>>> things like SQL server, web server etc.) >>>>> >>>>> I'm going to try the new 6.2 DVDs, but wonder what type of >>>>> installation >>>>> others have chosen since I'm sure there's something closer than the >>>>> Workstation type I chose. >>>>> >>>>> Thanks and sorry for OT >>>>> >>>>> steve campbell >>>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> >>>>> >>>>> >>>>> I originally tried just sending mail to the server, and got a >>>>> bounce. I >>>>> then >>>>> tried telnet, and it too failed. The network setup in 6.1, as I >>>>> recall, >>>>> is >>>>> nothing like the previous versions of Centos. I eventually installed >>>>> Webmin >>>>> and was surprised at how the NIC was configured from the install >>>>> when I >>>>> went >>>>> to modify it. I could get to the internet, but sendmail didn't >>>>> seem to be >>>>> accepting mail. "ps ax" showed it running though. >>>>> >>>>> Thanks >>>>> >>>>> steve >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> >>>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! > From jeremy at fluxlabs.net Thu Dec 22 21:02:31 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Thu Dec 22 21:02:54 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF39728.70407@vidadigital.com.pa> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> <4EF39249.7070600@cnpapers.com> <4EF39728.70407@vidadigital.com.pa> Message-ID: or chkconfig iptables stop .. until you get around to building the rules out -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 22, 2011, at 2:46 PM, Alex Neuman van der Hans wrote: Oh, and if you reboot the server it'll load the default rules again - which are "allow SSH and that's it". You need to do something like: echo "# I did this to get rid of the default rules" > /etc/sysconfig/iptables ... as root in order to wipe the defaults. On 12/22/2011 3:25 PM, Steve Campbell wrote: OK, got the new version installed, turned iptables off (even though 'ps' didn't show them running) and seems well now. I'm not sure what ps is supposed to show for iptables in this version, but it appears it's iptables that was stopping it. Thanks all for all the help and have a great holiday. steve On 12/22/2011 2:35 PM, Mauricio Tavares wrote: See if yum grouplist | less gives you any ideas. then you can do, say, yum groupinfo 'Development Tools' yum groupinstall 'Development Tools' yum groupremove 'Development Tools' On Thu, Dec 22, 2011 at 2:12 PM, Steve Campbell> wrote: I'm installing 6.2 now. One thing I noticed is that I did not see the little "network configuration" box on the install the first time. Once I get this installed, I check iptables. I'm using the "workstation" type install this time. Looking for something that gives me the least post-install headaches. Once this is all done, and I've got the grouplists installed, I'll see where I'm at. The types of installation isn't very informative, for instance, does the "workstation" install any server type apps, etc. This really belongs on the Centos list up to this point, but since the basic server will end up with MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking which "type" of installation would get me closest to that configuration. Thanks all, steve On 12/22/2011 12:57 PM, Mauricio Tavares wrote: You probably checked that, but the vm's NIC is in bridge mode, right? On Thu, Dec 22, 2011 at 12:36 PM, Jeremy McSpadden> wrote: Stop iptables and make sure you can telnet in. then work from there. yes the network configuration is different. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: The host setup shouldn't matter. Are you able to telnet into the xen vm on port 25? have you disabled iptables or allowed port 25 through ? Verify you have connectivity from the outside first, then start working back on your config files. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little trouble getting sendmail to work, and I'm not sure why. Could be the way the network NIC is configured, the fact that I'm running 6.1 under a 5.7 host, or who knows, but the server isn't accepting mail at all, even after changing the line in the .mc file to accept mail from hosts other than localhost and rebuilding the .cf file. The new GUI for the Centos 6 installation seems to be somewhat confusing when it comes to asking what type of installation I would like (types being things like SQL server, web server etc.) I'm going to try the new 6.2 DVDs, but wonder what type of installation others have chosen since I'm sure there's something closer than the Workstation type I chose. Thanks and sorry for OT steve campbell -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! I originally tried just sending mail to the server, and got a bounce. I then tried telnet, and it too failed. The network setup in 6.1, as I recall, is nothing like the previous versions of Centos. I eventually installed Webmin and was surprised at how the NIC was configured from the install when I went to modify it. I could get to the internet, but sendmail didn't seem to be accepting mail. "ps ax" showed it running though. Thanks steve -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111222/d249a04c/attachment.html From raubvogel at gmail.com Thu Dec 22 21:59:09 2011 From: raubvogel at gmail.com (Mauricio Tavares) Date: Thu Dec 22 21:59:19 2011 Subject: OT: Centos 6 question In-Reply-To: References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> <4EF39249.7070600@cnpapers.com> <4EF39728.70407@vidadigital.com.pa> Message-ID: I wrote a shell script that is called by the network interface when it comes up. What it does is first wipe the old firewall and then starts populating it; it makes it much easier to set it up and try it out. Among other things, I can add comments and use variables all over the place. Mauricio On Thu, Dec 22, 2011 at 4:02 PM, Jeremy McSpadden wrote: > or chkconfig iptables stop .. until you get around to building the rules out > > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office?: 850-588-4626 > Cell?: 850-890-2543 > Fax?: 850-254-2955 > > On Dec 22, 2011, at 2:46 PM, Alex Neuman van der Hans wrote: > > Oh, and if you reboot the server it'll load the default rules again - which > are "allow SSH and that's it". > You need to do something like: > > echo "# I did this to get rid of the default rules" > > /etc/sysconfig/iptables > > ... as root in order to wipe the defaults. > > On 12/22/2011 3:25 PM, Steve Campbell wrote: > > OK, got the new version installed, turned iptables off (even though 'ps' > didn't show them running) and seems well now. > > > I'm not sure what ps is supposed to show for iptables in this version, but > it appears it's iptables that was stopping it. > > > Thanks all for all the help and have a great holiday. > > > steve > > > On 12/22/2011 2:35 PM, Mauricio Tavares wrote: > > See if > > > yum grouplist | less > > > gives you any ideas. then you can do, say, > > > yum groupinfo 'Development Tools' > > yum groupinstall 'Development Tools' > > yum groupremove 'Development Tools' > > > On Thu, Dec 22, 2011 at 2:12 PM, Steve Campbell > ?wrote: > > I'm installing 6.2 now. One thing I noticed is that I did not see the little > > "network configuration" box on the install the first time. Once I get this > > installed, I check iptables. > > > I'm using the "workstation" type install this time. Looking for something > > that gives me the least post-install headaches. Once this is all done, and > > I've got the grouplists installed, I'll see where I'm at. > > > The types of installation isn't very informative, for instance, does the > > "workstation" install any server type apps, etc. This really belongs on the > > Centos list up to this point, but since the basic server will end up with > > MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking which > > "type" of installation would get me closest to that configuration. > > > Thanks all, > > > steve > > > > On 12/22/2011 12:57 PM, Mauricio Tavares wrote: > > You probably checked that, but the vm's NIC is in bridge mode, right? > > > On Thu, Dec 22, 2011 at 12:36 PM, Jeremy McSpadden > > ?wrote: > > Stop iptables and make sure you can telnet in. then work from there. yes > > the > > network configuration is different. > > > -- > > Jeremy McSpadden > > Flux Labs, Inc > > http://www.fluxlabs.net > > Endless Solutions > > Office : 850-588-4626 > > Cell : 850-890-2543 > > Fax : 850-254-2955 > > > On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: > > > > > On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: > > > The host setup shouldn't matter. Are you able to telnet into the xen vm > > on > > port 25? have you disabled iptables or allowed port 25 through ? Verify > > you > > have connectivity from the outside first, then start working back on your > > config files. > > -- > > Jeremy McSpadden > > Flux Labs, Inc > > http://www.fluxlabs.net > > Endless Solutions > > Office : 850-588-4626 > > Cell : 850-890-2543 > > Fax : 850-254-2955 > > > On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: > > > I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little > > trouble getting sendmail to work, and I'm not sure why. Could be the way > > the > > network NIC is configured, the fact that I'm running 6.1 under a 5.7 > > host, > > or who knows, but the server isn't accepting mail at all, even after > > changing the line in the .mc file to accept mail from hosts other than > > localhost and rebuilding the .cf file. > > > The new GUI for the Centos 6 installation seems to be somewhat confusing > > when it comes to asking what type of installation I would like (types > > being > > things like SQL server, web server etc.) > > > I'm going to try the new 6.2 DVDs, but wonder what type of installation > > others have chosen since I'm sure there's something closer than the > > Workstation type I chose. > > > Thanks and sorry for OT > > > steve campbell > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > Before posting, read http://wiki.mailscanner.info/posting > > > Support MailScanner development - buy the book off the website! > > > > > > I originally tried just sending mail to the server, and got a bounce. I > > then > > tried telnet, and it too failed. The network setup in 6.1, as I recall, > > is > > nothing like the previous versions of Centos. I eventually installed > > Webmin > > and was surprised at how the NIC was configured from the install when I > > went > > to modify it. I could get to the internet, but sendmail didn't seem to be > > accepting mail. "ps ax" showed it running though. > > > Thanks > > > steve > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > Before posting, read http://wiki.mailscanner.info/posting > > > Support MailScanner development - buy the book off the website! > > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > Before posting, read http://wiki.mailscanner.info/posting > > > Support MailScanner development - buy the book off the website! > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > Before posting, read http://wiki.mailscanner.info/posting > > > Support MailScanner development - buy the book off the website! > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From tony at ai.net.nz Thu Dec 22 23:19:09 2011 From: tony at ai.net.nz (Tony Arcus) Date: Thu Dec 22 23:19:41 2011 Subject: Emails not getting scanned In-Reply-To: References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> <20111222122916.20634yp220inuj7w@mail.ai.net.nz> Message-ID: <20111223121909.20252x4gclnzixv1@mail.ai.net.nz> > I'd look very carefully at the sendmail setup > (http://www.mailscanner.info/sendmail.html) > > and make sure that mail doesnot flow with MS turned off. > > -- > Martin Hepworth > Oxford, UK > > > On 21 December 2011 23:29, Tony Arcus wrote: > >> On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth >>>> wrote: >>>> >>>>> FYI in centos 6 the default mta could be postfix if it's like red hat ! >>>>> So >>>>> you may need to disable postfix if u want to get this going.. >>>>> >>>> >>>> Good point >>>> >>>> Tony - if you telnet to the server on port 25, do you get the sendmail >>>> or postfix banner? >>>> >>>> >>>> Chris >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.**info >>>> http://lists.mailscanner.info/**mailman/listinfo/mailscanner >>>> >>>> Before posting, read >>>> http://wiki.mailscanner.info/**posting >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >>>> -- >>>> This message has been scanned for viruses and >>>> dangerous content by MailScanner, and is >>>> believed to be clean. >>>> >>>> >>> Thanks Martin and Chris for that tip, I had already discovered that and >>> uninstalled postfix. No luck >>> >>> It got me thinking... what else could be delivering the mail from >>> /var/spool/mqueue.in? Other than sendmail? >>> >>> Thanks to a lot of people with suggestions. >> >> This is what I believe is happening. >> Being Centos 6 >> >> Postfix was installed but not running. >> Postfix has been uninstalled and the server restarted >> Telnet in and you get: >> >>> Trying 202.xxx.xxx.124... >>> Connected to mail.xxxxx.co.nz (202.xxx.xxx.124). >>> Escape character is '^]'. >>> 220 mail.xxxxxx.co.nz ESMTP Sendmail 8.14.4/8.14.4; Thu, 22 Dec 2011 > >>> 11:20:06 +1300 >>> >> >> looking at chkconfig, this appears clean and unless some one wants >> something specific from it I wont report my findings. >> >> SO >> >> It would appear that emails come in on the sendmail MTA >> They get put in the /var/spool/mqueue.in directory >> THEN sendmail straight away picks them back up and delivers them before. >> MailScanner can ever get a change to process them. >> >> My reason for thinking this: >> >> I sent a number of emails from a different server. >> Here is sendmail getting the email as we would expect, and as emails are >> also received on other sendmail/MailScanner servers that are operating >> correctly. >> >> root 16583 0.0 0.3 10848 3952 ? D 11:34 0:00 sendmail: >> pBLMYFqF016583 >> ip-202-174-161-37.wizbiz.net.**nz >> [202.174.161.37]: DATA >> >> >> INSTANTLY though I also see this >> root 16585 0.0 0.3 10668 3200 ? S 11:34 0:00 sendmail: >> ./pBLMYFqD016583 from queue >> >> sendmail picks the email back up and delivers it, MailScanner never get a >> change to poll the this message. >> >> How do I stop sendmail from doing this? >> I agree with you Martin, and am looking closely at sendmail. With MailScanner turned off no emails flow. I have even checked to make sure there is no other stray process that is running when MailScanner is running that might be activating a sendmail process to deliver emails. Turn MailScanner on emails are accepted but delivered right away. The process root 30934 0.0 0.1 10032 2012 ? Ss 11:32 0:00 sendmail: accepting connections Is accepting the connection to receive an email. A process is started to receive this email Something like: sendmail: pBMLiEI2027891 ip-202-xxx-xxx-37.wizbiz.net.nz [202.xxx.xxx.37]: Then a third process is started to deliver this message. It is this last step that I DO NOT what happening. Configurations between this system and other systems seem the same, except this is a different version of send mail, 8.14.4-8.el6 as apposite to 8.12.8-8.1el5_7 Checked the process for accepting emails /usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly -OQueueDirectory=/var/spool/mqueue.in -OPidFile=/var/run/sendmail.in.pid It should only put the emails in the queue not also deliver them. Even changing sendmail.cf to O DeliveryMode=queueonly does not help. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From glenn.steen at gmail.com Fri Dec 23 11:09:27 2011 From: glenn.steen at gmail.com (Glenn Steen) Date: Fri Dec 23 11:09:36 2011 Subject: Emails not getting scanned In-Reply-To: <20111223121909.20252x4gclnzixv1@mail.ai.net.nz> References: <20111219143028.15697ji9kco19rck@mail.ai.net.nz> <20111220110515.11231woqrcobpouz@mail.ai.net.nz> <20111220130323.1326139o0yvhador@mail.ai.net.nz> <20111221094737.47531jxbmo1g3yax@mail.ai.net.nz> <20111222122916.20634yp220inuj7w@mail.ai.net.nz> <20111223121909.20252x4gclnzixv1@mail.ai.net.nz> Message-ID: Do service MailScanner stop This is, of course, to stop both MS and your MTA. Check that all Sendmail processes have ended, with ps. Then do service MailScanner startin Which will only start the mta. Send a message to it... If it flows through, then you've got a bad Sendmail setup. If not, then do service MailScanner startout If the mail get delivered now, then your outgoing instance picks up mail from the wrong queue dir. Cheers&Merry Xmas -- -- Glenn Den 23 dec 2011 00:26 skrev "Tony Arcus" : > > > I'd look very carefully at the sendmail setup >> (http://www.mailscanner.info/**sendmail.html >> ) >> >> and make sure that mail doesnot flow with MS turned off. >> >> -- >> Martin Hepworth >> Oxford, UK >> >> >> On 21 December 2011 23:29, Tony Arcus wrote: >> >> On Mon, Dec 19, 2011 at 11:31 PM, Martin Hepworth >>> >>>> wrote: >>>>> >>>>> FYI in centos 6 the default mta could be postfix if it's like red hat >>>>>> ! >>>>>> So >>>>>> you may need to disable postfix if u want to get this going.. >>>>>> >>>>>> >>>>> Good point >>>>> >>>>> Tony - if you telnet to the server on port 25, do you get the sendmail >>>>> or postfix banner? >>>>> >>>>> >>>>> Chris >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.****info>>>> mailscanner.info > >>>>> http://lists.mailscanner.info/****mailman/listinfo/mailscanner >>>>> ** >>>>> > >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/****posting >>>>> >>>>> > >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> -- >>>>> This message has been scanned for viruses and >>>>> dangerous content by MailScanner, and is >>>>> believed to be clean. >>>>> >>>>> >>>>> Thanks Martin and Chris for that tip, I had already discovered that >>>> and >>>> uninstalled postfix. No luck >>>> >>>> It got me thinking... what else could be delivering the mail from >>>> /var/spool/mqueue.in? Other than sendmail? >>>> >>>> Thanks to a lot of people with suggestions. >>>> >>> >>> This is what I believe is happening. >>> Being Centos 6 >>> >>> Postfix was installed but not running. >>> Postfix has been uninstalled and the server restarted >>> Telnet in and you get: >>> >>> Trying 202.xxx.xxx.124... >>>> Connected to mail.xxxxx.co.nz (202.xxx.xxx.124). >>>> Escape character is '^]'. >>>> 220 mail.xxxxxx.co.nz ESMTP Sendmail 8.14.4/8.14.4; Thu, 22 Dec 2011 > >>>> 11:20:06 +1300 >>>> >>>> >>> looking at chkconfig, this appears clean and unless some one wants >>> something specific from it I wont report my findings. >>> >>> SO >>> >>> It would appear that emails come in on the sendmail MTA >>> They get put in the /var/spool/mqueue.in directory >>> THEN sendmail straight away picks them back up and delivers them before. >>> MailScanner can ever get a change to process them. >>> >>> My reason for thinking this: >>> >>> I sent a number of emails from a different server. >>> Here is sendmail getting the email as we would expect, and as emails are >>> also received on other sendmail/MailScanner servers that are operating >>> correctly. >>> >>> root 16583 0.0 0.3 10848 3952 ? D 11:34 0:00 >>> sendmail: >>> pBLMYFqF016583 ip-202-174-161-37.wizbiz.net.****nz< >>> http://ip-202-174-161-37.**wizbiz.net.nz >>> > >>> [202.174.161.37]: DATA >>> >>> >>> INSTANTLY though I also see this >>> root 16585 0.0 0.3 10668 3200 ? S 11:34 0:00 >>> sendmail: >>> ./pBLMYFqD016583 from queue >>> >>> sendmail picks the email back up and delivers it, MailScanner never get a >>> change to poll the this message. >>> >>> How do I stop sendmail from doing this? >>> >>> > I agree with you Martin, and am looking closely at sendmail. > With MailScanner turned off no emails flow. > > I have even checked to make sure there is no other stray process that is > running when MailScanner is running that might be activating a sendmail > process to deliver emails. > > Turn MailScanner on emails are accepted but delivered right away. > The process > root 30934 0.0 0.1 10032 2012 ? Ss 11:32 0:00 sendmail: > accepting connections > Is accepting the connection to receive an email. > A process is started to receive this email > Something like: > sendmail: pBMLiEI2027891 ip-202-xxx-xxx-37.wizbiz.net.**nz[202.xxx.xxx.37]: > Then a third process is started to deliver this message. > > It is this last step that I DO NOT what happening. > > Configurations between this system and other systems seem the same, except > this is a different version of send mail, 8.14.4-8.el6 as apposite to > 8.12.8-8.1el5_7 > > Checked the process for accepting emails > /usr/sbin/sendmail -bd -OPrivacyOptions=noetrn -ODeliveryMode=queueonly > -OQueueDirectory=/var/spool/mq**ueue.in -OPidFile=/var/run/sendmail. > **in.pid > > It should only put the emails in the queue not also deliver them. > > Even changing sendmail.cf to O DeliveryMode=queueonly does not help. > > > ------------------------------**------------------------------**---- > This message was sent using IMP, the Internet Messaging Program. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.**info > http://lists.mailscanner.info/**mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/**posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111223/38251871/attachment.html From bjron.mork at gmail.com Tue Dec 27 11:29:25 2011 From: bjron.mork at gmail.com (Bjorn Mork) Date: Tue Dec 27 11:29:34 2011 Subject: MailScanner Commercial Support Message-ID: Hi, I need some company to provide us commercial support for our MailScanner Server's Operations remotely. Can anyone guide me the best one? -- B~Mork From maxsec at gmail.com Tue Dec 27 15:02:19 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Tue Dec 27 15:02:28 2011 Subject: MailScanner Commercial Support In-Reply-To: References: Message-ID: Fsl.com are the best - they are associated with the main author On Tuesday, 27 December 2011, Bjorn Mork wrote: > Hi, > > I need some company to provide us commercial support for our > MailScanner Server's Operations remotely. > > Can anyone guide me the best one? > > -- > B~Mork > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111227/b23de797/attachment.html From ka at pacific.net Tue Dec 27 15:07:23 2011 From: ka at pacific.net (Ken A) Date: Tue Dec 27 15:07:48 2011 Subject: OT: Centos 6 question In-Reply-To: References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> <4EF39249.7070600@cnpapers.com> <4EF39728.70407@vidadigital.com.pa> Message-ID: <4EF9DF2B.3080305@pacific.net> On 12/22/2011 3:02 PM, Jeremy McSpadden wrote: > or chkconfig iptables stop .. until you get around to building the rules out but _do_ get around to it, since otherwise you leave yourself open to a variety of attacks on other 'running' things. Ken > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office : 850-588-4626 > Cell : 850-890-2543 > Fax : 850-254-2955 > > On Dec 22, 2011, at 2:46 PM, Alex Neuman van der Hans wrote: > > Oh, and if you reboot the server it'll load the default rules again - which are "allow SSH and that's it". > You need to do something like: > > echo "# I did this to get rid of the default rules"> /etc/sysconfig/iptables > > ... as root in order to wipe the defaults. > > On 12/22/2011 3:25 PM, Steve Campbell wrote: > OK, got the new version installed, turned iptables off (even though 'ps' didn't show them running) and seems well now. > > I'm not sure what ps is supposed to show for iptables in this version, but it appears it's iptables that was stopping it. > > Thanks all for all the help and have a great holiday. > > steve > > On 12/22/2011 2:35 PM, Mauricio Tavares wrote: > See if > > yum grouplist | less > > gives you any ideas. then you can do, say, > > yum groupinfo 'Development Tools' > yum groupinstall 'Development Tools' > yum groupremove 'Development Tools' > > On Thu, Dec 22, 2011 at 2:12 PM, Steve Campbell> wrote: > I'm installing 6.2 now. One thing I noticed is that I did not see the little > "network configuration" box on the install the first time. Once I get this > installed, I check iptables. > > I'm using the "workstation" type install this time. Looking for something > that gives me the least post-install headaches. Once this is all done, and > I've got the grouplists installed, I'll see where I'm at. > > The types of installation isn't very informative, for instance, does the > "workstation" install any server type apps, etc. This really belongs on the > Centos list up to this point, but since the basic server will end up with > MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking which > "type" of installation would get me closest to that configuration. > > Thanks all, > > steve > > > On 12/22/2011 12:57 PM, Mauricio Tavares wrote: > You probably checked that, but the vm's NIC is in bridge mode, right? > > On Thu, Dec 22, 2011 at 12:36 PM, Jeremy McSpadden> > wrote: > Stop iptables and make sure you can telnet in. then work from there. yes > the > network configuration is different. > > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office : 850-588-4626 > Cell : 850-890-2543 > Fax : 850-254-2955 > > On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: > > > > On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: > > The host setup shouldn't matter. Are you able to telnet into the xen vm > on > port 25? have you disabled iptables or allowed port 25 through ? Verify > you > have connectivity from the outside first, then start working back on your > config files. > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office : 850-588-4626 > Cell : 850-890-2543 > Fax : 850-254-2955 > > On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: > > I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little > trouble getting sendmail to work, and I'm not sure why. Could be the way > the > network NIC is configured, the fact that I'm running 6.1 under a 5.7 > host, > or who knows, but the server isn't accepting mail at all, even after > changing the line in the .mc file to accept mail from hosts other than > localhost and rebuilding the .cf file. > > The new GUI for the Centos 6 installation seems to be somewhat confusing > when it comes to asking what type of installation I would like (types > being > things like SQL server, web server etc.) > > I'm going to try the new 6.2 DVDs, but wonder what type of installation > others have chosen since I'm sure there's something closer than the > Workstation type I chose. > > Thanks and sorry for OT > > steve campbell > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > I originally tried just sending mail to the server, and got a bounce. I > then > tried telnet, and it too failed. The network setup in 6.1, as I recall, > is > nothing like the previous versions of Centos. I eventually installed > Webmin > and was surprised at how the NIC was configured from the install when I > went > to modify it. I could get to the internet, but sendmail didn't seem to be > accepting mail. "ps ax" showed it running though. > > Thanks > > steve > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- Ken Anderson Pacific Internet - http://www.pacific.net Latest Pacific.Net Status - http://twitter.com/pacnetstatus From alex at vidadigital.com.pa Tue Dec 27 15:33:28 2011 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue Dec 27 15:33:37 2011 Subject: MailScanner Commercial Support In-Reply-To: References: Message-ID: +1 On Tue, Dec 27, 2011 at 10:02 AM, Martin Hepworth wrote: > Fsl.com are the best - they are associated with the main author > From campbell at cnpapers.com Tue Dec 27 15:43:16 2011 From: campbell at cnpapers.com (Steve Campbell) Date: Tue Dec 27 15:42:52 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF9DF2B.3080305@pacific.net> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> <4EF39249.7070600@cnpapers.com> <4EF39728.70407@vidadigital.com.pa> <4EF9DF2B.3080305@pacific.net> Message-ID: <4EF9E794.4080604@cnpapers.com> I typically don't put firewall on servers. Granted, it's an extra layer of protection to do so, but I run firewalls at the perimeter that would take care of anything a local firewall would handle "from the outside". There is always the possibility of someone cracking into the inside and having access to all the servers once inside, and this would help in the cracked situation. Guess I'll have to make up some rules. Thanks for all the help, everyone. steve On 12/27/2011 10:07 AM, Ken A wrote: > > On 12/22/2011 3:02 PM, Jeremy McSpadden wrote: >> or chkconfig iptables stop .. until you get around to building the >> rules out > > but _do_ get around to it, since otherwise you leave yourself open to > a variety of attacks on other 'running' things. > Ken > > > > >> Jeremy McSpadden >> Flux Labs, Inc >> http://www.fluxlabs.net >> Endless Solutions >> Office : 850-588-4626 >> Cell : 850-890-2543 >> Fax : 850-254-2955 >> >> On Dec 22, 2011, at 2:46 PM, Alex Neuman van der Hans wrote: >> >> Oh, and if you reboot the server it'll load the default rules again - >> which are "allow SSH and that's it". >> You need to do something like: >> >> echo "# I did this to get rid of the default rules"> >> /etc/sysconfig/iptables >> >> ... as root in order to wipe the defaults. >> >> On 12/22/2011 3:25 PM, Steve Campbell wrote: >> OK, got the new version installed, turned iptables off (even though >> 'ps' didn't show them running) and seems well now. >> >> I'm not sure what ps is supposed to show for iptables in this >> version, but it appears it's iptables that was stopping it. >> >> Thanks all for all the help and have a great holiday. >> >> steve >> >> On 12/22/2011 2:35 PM, Mauricio Tavares wrote: >> See if >> >> yum grouplist | less >> >> gives you any ideas. then you can do, say, >> >> yum groupinfo 'Development Tools' >> yum groupinstall 'Development Tools' >> yum groupremove 'Development Tools' >> >> On Thu, Dec 22, 2011 at 2:12 PM, Steve >> Campbell> wrote: >> I'm installing 6.2 now. One thing I noticed is that I did not see the >> little >> "network configuration" box on the install the first time. Once I get >> this >> installed, I check iptables. >> >> I'm using the "workstation" type install this time. Looking for >> something >> that gives me the least post-install headaches. Once this is all >> done, and >> I've got the grouplists installed, I'll see where I'm at. >> >> The types of installation isn't very informative, for instance, does the >> "workstation" install any server type apps, etc. This really belongs >> on the >> Centos list up to this point, but since the basic server will end up >> with >> MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking >> which >> "type" of installation would get me closest to that configuration. >> >> Thanks all, >> >> steve >> >> >> On 12/22/2011 12:57 PM, Mauricio Tavares wrote: >> You probably checked that, but the vm's NIC is in bridge mode, right? >> >> On Thu, Dec 22, 2011 at 12:36 PM, Jeremy >> McSpadden> >> wrote: >> Stop iptables and make sure you can telnet in. then work from there. yes >> the >> network configuration is different. >> >> -- >> Jeremy McSpadden >> Flux Labs, Inc >> http://www.fluxlabs.net >> Endless Solutions >> Office : 850-588-4626 >> Cell : 850-890-2543 >> Fax : 850-254-2955 >> >> On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: >> >> >> >> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: >> >> The host setup shouldn't matter. Are you able to telnet into the xen vm >> on >> port 25? have you disabled iptables or allowed port 25 through ? Verify >> you >> have connectivity from the outside first, then start working back on >> your >> config files. >> -- >> Jeremy McSpadden >> Flux Labs, Inc >> http://www.fluxlabs.net >> Endless Solutions >> Office : 850-588-4626 >> Cell : 850-890-2543 >> Fax : 850-254-2955 >> >> On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: >> >> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little >> trouble getting sendmail to work, and I'm not sure why. Could be the way >> the >> network NIC is configured, the fact that I'm running 6.1 under a 5.7 >> host, >> or who knows, but the server isn't accepting mail at all, even after >> changing the line in the .mc file to accept mail from hosts other than >> localhost and rebuilding the .cf file. >> >> The new GUI for the Centos 6 installation seems to be somewhat confusing >> when it comes to asking what type of installation I would like (types >> being >> things like SQL server, web server etc.) >> >> I'm going to try the new 6.2 DVDs, but wonder what type of installation >> others have chosen since I'm sure there's something closer than the >> Workstation type I chose. >> >> Thanks and sorry for OT >> >> steve campbell >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> >> >> >> I originally tried just sending mail to the server, and got a bounce. I >> then >> tried telnet, and it too failed. The network setup in 6.1, as I recall, >> is >> nothing like the previous versions of Centos. I eventually installed >> Webmin >> and was surprised at how the NIC was configured from the install when I >> went >> to modify it. I could get to the internet, but sendmail didn't seem >> to be >> accepting mail. "ps ax" showed it running though. >> >> Thanks >> >> steve >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> >> >> >> > From maxsec at gmail.com Tue Dec 27 16:15:48 2011 From: maxsec at gmail.com (Martin Hepworth) Date: Tue Dec 27 16:15:57 2011 Subject: MailScanner Commercial Support In-Reply-To: References: Message-ID: Happy new year to u guys as .. What .. Steve and his mrs pregnant again :-) Don't suppose u guys are looking at running a hosted/cloud service for reasonable money are yu? Martin On Tuesday, 27 December 2011, Alex Neuman wrote: > +1 > > On Tue, Dec 27, 2011 at 10:02 AM, Martin Hepworth wrote: >> Fsl.com are the best - they are associated with the main author >> > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111227/d26b1e94/attachment.html From ka at pacific.net Tue Dec 27 16:35:10 2011 From: ka at pacific.net (Ken A) Date: Tue Dec 27 16:35:36 2011 Subject: OT: Centos 6 question In-Reply-To: <4EF9E794.4080604@cnpapers.com> References: <4EF35A42.1060000@cnpapers.com> <57DEC22D-B4B7-44E3-8070-4791F9903B2B@fluxlabs.net> <4EF3646E.8020603@cnpapers.com> <2D26B480-1A8A-4BF1-A621-42DD8D507196@fluxlabs.net> <4EF3813A.8030708@cnpapers.com> <4EF39249.7070600@cnpapers.com> <4EF39728.70407@vidadigital.com.pa> <4EF9DF2B.3080305@pacific.net> <4EF9E794.4080604@cnpapers.com> Message-ID: <4EF9F3BE.5000809@pacific.net> It depends what you are protecting. There are so many attack vectors these days, some desktop machine will be taken over at some point. You don't necessarily have to put a firewall on the servers, but in that case it's usually good to have several zones, DMZs, whatever, to protect internal servers from lower hanging fruit (desktops) for compliance or other reasons. Sonicwall has some great boxes for this, imo. Seasons Greetings, Ken On 12/27/2011 9:43 AM, Steve Campbell wrote: > I typically don't put firewall on servers. Granted, it's an extra layer > of protection to do so, but I run firewalls at the perimeter that would > take care of anything a local firewall would handle "from the outside". > There is always the possibility of someone cracking into the inside and > having access to all the servers once inside, and this would help in the > cracked situation. > > Guess I'll have to make up some rules. > > Thanks for all the help, everyone. > > steve > > On 12/27/2011 10:07 AM, Ken A wrote: >> >> On 12/22/2011 3:02 PM, Jeremy McSpadden wrote: >>> or chkconfig iptables stop .. until you get around to building the >>> rules out >> >> but _do_ get around to it, since otherwise you leave yourself open to >> a variety of attacks on other 'running' things. >> Ken >> >> >> >> >>> Jeremy McSpadden >>> Flux Labs, Inc >>> http://www.fluxlabs.net >>> Endless Solutions >>> Office : 850-588-4626 >>> Cell : 850-890-2543 >>> Fax : 850-254-2955 >>> >>> On Dec 22, 2011, at 2:46 PM, Alex Neuman van der Hans wrote: >>> >>> Oh, and if you reboot the server it'll load the default rules again - >>> which are "allow SSH and that's it". >>> You need to do something like: >>> >>> echo "# I did this to get rid of the default rules"> >>> /etc/sysconfig/iptables >>> >>> ... as root in order to wipe the defaults. >>> >>> On 12/22/2011 3:25 PM, Steve Campbell wrote: >>> OK, got the new version installed, turned iptables off (even though >>> 'ps' didn't show them running) and seems well now. >>> >>> I'm not sure what ps is supposed to show for iptables in this >>> version, but it appears it's iptables that was stopping it. >>> >>> Thanks all for all the help and have a great holiday. >>> >>> steve >>> >>> On 12/22/2011 2:35 PM, Mauricio Tavares wrote: >>> See if >>> >>> yum grouplist | less >>> >>> gives you any ideas. then you can do, say, >>> >>> yum groupinfo 'Development Tools' >>> yum groupinstall 'Development Tools' >>> yum groupremove 'Development Tools' >>> >>> On Thu, Dec 22, 2011 at 2:12 PM, Steve >>> Campbell> wrote: >>> I'm installing 6.2 now. One thing I noticed is that I did not see the >>> little >>> "network configuration" box on the install the first time. Once I get >>> this >>> installed, I check iptables. >>> >>> I'm using the "workstation" type install this time. Looking for >>> something >>> that gives me the least post-install headaches. Once this is all >>> done, and >>> I've got the grouplists installed, I'll see where I'm at. >>> >>> The types of installation isn't very informative, for instance, does the >>> "workstation" install any server type apps, etc. This really belongs >>> on the >>> Centos list up to this point, but since the basic server will end up >>> with >>> MySQL, a mail server, HTTPD, PHP, and Perl, I was originally asking >>> which >>> "type" of installation would get me closest to that configuration. >>> >>> Thanks all, >>> >>> steve >>> >>> >>> On 12/22/2011 12:57 PM, Mauricio Tavares wrote: >>> You probably checked that, but the vm's NIC is in bridge mode, right? >>> >>> On Thu, Dec 22, 2011 at 12:36 PM, Jeremy >>> McSpadden> >>> wrote: >>> Stop iptables and make sure you can telnet in. then work from there. yes >>> the >>> network configuration is different. >>> >>> -- >>> Jeremy McSpadden >>> Flux Labs, Inc >>> http://www.fluxlabs.net >>> Endless Solutions >>> Office : 850-588-4626 >>> Cell : 850-890-2543 >>> Fax : 850-254-2955 >>> >>> On Dec 22, 2011, at 11:10 AM, Steve Campbell wrote: >>> >>> >>> >>> On 12/22/2011 11:53 AM, Jeremy McSpadden wrote: >>> >>> The host setup shouldn't matter. Are you able to telnet into the xen vm >>> on >>> port 25? have you disabled iptables or allowed port 25 through ? Verify >>> you >>> have connectivity from the outside first, then start working back on >>> your >>> config files. >>> -- >>> Jeremy McSpadden >>> Flux Labs, Inc >>> http://www.fluxlabs.net >>> Endless Solutions >>> Office : 850-588-4626 >>> Cell : 850-890-2543 >>> Fax : 850-254-2955 >>> >>> On Dec 22, 2011, at 10:26 AM, Steve Campbell wrote: >>> >>> I've tried installing Centos 6.1 on a 5.7 xen host. I'm having a little >>> trouble getting sendmail to work, and I'm not sure why. Could be the way >>> the >>> network NIC is configured, the fact that I'm running 6.1 under a 5.7 >>> host, >>> or who knows, but the server isn't accepting mail at all, even after >>> changing the line in the .mc file to accept mail from hosts other than >>> localhost and rebuilding the .cf file. >>> >>> The new GUI for the Centos 6 installation seems to be somewhat confusing >>> when it comes to asking what type of installation I would like (types >>> being >>> things like SQL server, web server etc.) >>> >>> I'm going to try the new 6.2 DVDs, but wonder what type of installation >>> others have chosen since I'm sure there's something closer than the >>> Workstation type I chose. >>> >>> Thanks and sorry for OT >>> >>> steve campbell >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >>> >>> >>> I originally tried just sending mail to the server, and got a bounce. I >>> then >>> tried telnet, and it too failed. The network setup in 6.1, as I recall, >>> is >>> nothing like the previous versions of Centos. I eventually installed >>> Webmin >>> and was surprised at how the NIC was configured from the install when I >>> went >>> to modify it. I could get to the internet, but sendmail didn't seem >>> to be >>> accepting mail. "ps ax" showed it running though. >>> >>> Thanks >>> >>> steve >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >>> >>> >>> >> > -- Ken Anderson Pacific Internet - http://www.pacific.net Latest Pacific.Net Status - http://twitter.com/pacnetstatus From msz at astrouw.edu.pl Tue Dec 27 19:18:58 2011 From: msz at astrouw.edu.pl (Michal Szymanski) Date: Tue Dec 27 19:19:09 2011 Subject: problem with sending from dynamic IP Message-ID: <20111227191858.GA27426@astrouw.edu.pl> Hello, I have a MailScanner/postfix/dovecot mail server at the office. I have used thunderbird to read/send mail from my home PC by logging (TLS authenticated) to the office mail server via dovecot. It worked perfectly until I changed my ISP at home. Now I have a dynamic IP assigned (it was a static, constant IP previously) and all emails sent from home get SPAM status tags due to RCVD_IN_PBL and RCVD_IN_SORBS_DUL tests. Any hints how to fix that? I have googled the net but w/o success. ZEN pages at spamhaus.net suggest turning on the authentication but it is already turned on and it does not help. regards, Michal Szymanski -- Michal Szymanski (msz at astrouw dot edu dot pl) Warsaw University Observatory, Warszawa, POLAND From AHKAPLAN at PARTNERS.ORG Tue Dec 27 19:26:46 2011 From: AHKAPLAN at PARTNERS.ORG (Kaplan, Andrew H.) Date: Tue Dec 27 19:26:02 2011 Subject: Problem Messages e-mail message appearing In-Reply-To: <4EF36393.1080904@value.net> References: <4EF36393.1080904@value.net> Message-ID: Hi there -- Thanks for your reply, and sorry about the delay in getting back to you. I went ahead, and deleted the Processing.db file, and the periodic messages, are no longer appearing. I had a follow-up question: If there is another message that causes problems in the future, will a new Processing.db file be automatically created in place of that which was removed from the directory? Thanks. -----Original Message----- From: Mark Sapiro [mailto:msapiro@value.net] Sent: Thursday, December 22, 2011 12:06 PM To: MailScanner discussion Cc: Kaplan, Andrew H. Subject: Re: Problem Messages e-mail message appearing On 11:59 AM, Kaplan, Andrew H. wrote: > > We are running MailScanner 4.83.5 with Sendmail 8.13.8 on a CentOS 5.6 > 64-bit distribution. The MailScanner package > was installed via an rpm package installation. The system is running > well, but I have been receiving once on the hour a > > Problem Messages e-mail. The e-mail in question dates from Tuesday, > December 20. I have already gone into the > /var/spool/mqueue directory confirm there are no outstanding messages > there. Additionally, I have also run the > sendmail -q -v command to flush out the cache. Despite that, the message > continues to appear. The above message is generated by /usr/sbin/processing_messages_alert which is run hourly by cron and which reports any non-empty output from `/usr/sbin/MailScanner --processing`. I.e. it reports messages stuck in MailScanner's 'processing database. You can clear the database by removing it (/var/spool/MailScanner/incoming/Processing.db). There may be more info on why this message isn't being successfully processed in MailScanner's log messages. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan The information in this e-mail is intended only for the person to whom it is addressed. If you believe this e-mail was sent to you in error and the e-mail contains patient information, please contact the Partners Compliance HelpLine at http://www.partners.org/complianceline . If the e-mail was sent to you in error but does not contain patient information, please contact the sender and properly dispose of the e-mail. From jeremy at fluxlabs.net Tue Dec 27 19:26:01 2011 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Tue Dec 27 19:26:11 2011 Subject: problem with sending from dynamic IP In-Reply-To: <20111227191858.GA27426@astrouw.edu.pl> References: <20111227191858.GA27426@astrouw.edu.pl> Message-ID: Not really a mailscanner issue. You need to look at your mta and dovecote configuration. -- Jeremy McSpadden On Dec 27, 2011, at 1:24 PM, "Michal Szymanski" wrote: > Hello, > > I have a MailScanner/postfix/dovecot mail server at the office. > I have used thunderbird to read/send mail from my home PC by logging (TLS > authenticated) to the office mail server via dovecot. It worked perfectly > until I changed my ISP at home. Now I have a dynamic IP assigned (it was a > static, constant IP previously) and all emails sent from home get SPAM > status tags due to RCVD_IN_PBL and RCVD_IN_SORBS_DUL tests. > > Any hints how to fix that? I have googled the net but w/o success. ZEN > pages at spamhaus.net suggest turning on the authentication but it is > already turned on and it does not help. > > regards, > Michal Szymanski > > -- > Michal Szymanski (msz at astrouw dot edu dot pl) > Warsaw University Observatory, Warszawa, POLAND > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From mailscanner at joolee.nl Tue Dec 27 20:56:11 2011 From: mailscanner at joolee.nl (Joolee) Date: Tue Dec 27 20:57:01 2011 Subject: problem with sending from dynamic IP In-Reply-To: References: <20111227191858.GA27426@astrouw.edu.pl> Message-ID: You'll need to configure that all mail that gets send by authenticated users is white-listed. Personally, I run a separate postfix instance for user SMTP connections and strip all IP information from the mail before sending it to my main postfix instance. The instance only accepts connections wich use authentification or are in my "known IP's" MySQL table. On 27 December 2011 20:26, Jeremy McSpadden wrote: > Not really a mailscanner issue. You need to look at your mta and dovecote > configuration. > > > -- > Jeremy McSpadden > > On Dec 27, 2011, at 1:24 PM, "Michal Szymanski" > wrote: > > > Hello, > > > > I have a MailScanner/postfix/dovecot mail server at the office. > > I have used thunderbird to read/send mail from my home PC by logging (TLS > > authenticated) to the office mail server via dovecot. It worked perfectly > > until I changed my ISP at home. Now I have a dynamic IP assigned (it was > a > > static, constant IP previously) and all emails sent from home get SPAM > > status tags due to RCVD_IN_PBL and RCVD_IN_SORBS_DUL tests. > > > > Any hints how to fix that? I have googled the net but w/o success. ZEN > > pages at spamhaus.net suggest turning on the authentication but it is > > already turned on and it does not help. > > > > regards, > > Michal Szymanski > > > > -- > > Michal Szymanski (msz at astrouw dot edu dot pl) > > Warsaw University Observatory, Warszawa, POLAND > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111227/d6307e0e/attachment.html From mark at msapiro.net Wed Dec 28 02:09:39 2011 From: mark at msapiro.net (Mark Sapiro) Date: Wed Dec 28 02:09:56 2011 Subject: Problem Messages e-mail message appearing In-Reply-To: References: <4EF36393.1080904@value.net> Message-ID: <4EFA7A63.5020807@msapiro.net> On 12/27/2011 11:26 AM, Kaplan, Andrew H. wrote: > > Thanks for your reply, and sorry about the delay in getting back to you. > I went ahead, and deleted the Processing.db file, and the periodic messages, > are no longer appearing. > > I had a follow-up question: If there is another message that causes problems > in the future, will a new Processing.db file be automatically created in place > of that which was removed from the directory? The processing database (Processing.db) file is in constant use by MailScanner. It was recreated with the first message that arrived after you removed it. Normally, messages are entered into the processing database and removed after being processed by MailScanner. It's only when MailScanner has difficulty with a message that it gets left in the database and reported. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan