WhiteList Issue

Martin Hepworth maxsec at gmail.com
Fri Nov 4 14:10:52 GMT 2011


Ok looks like you are calling spamassassin twice - the spamd lines below

MailScanner calls spamassassin directly via it's API so spamd should be off
and make sure sendmail isn't configured to call spamd as well.

-- 
Martin Hepworth
Oxford, UK


On 4 November 2011 12:59, sonidhaval at gmail.com <sonidhaval at gmail.com> wrote:

> Hello,
>
> Nov  4 07:57:02 mx MailScanner[8624]: Config: calling custom init function
> MailWatchLogging
> Nov  4 07:57:02 mx MailScanner[8624]: Started SQL Logging child
> Nov  4 07:57:02 mx MailScanner[8624]: Config: calling custom init function
> SQLWhitelist
> Nov  4 07:57:02 mx MailScanner[8624]: Starting up SQL Whitelist
> Nov  4 07:57:02 mx MailScanner[8624]: Read 346 whitelist entries
> Nov  4 07:57:03 mx MailScanner[8624]: Using SpamAssassin results cache
> Nov  4 07:57:03 mx MailScanner[8624]: Connected to SpamAssassin cache
> database
> Nov  4 07:57:03 mx MailScanner[8624]: Expired 5 records from the
> SpamAssassin cache
> Nov  4 07:57:03 mx MailScanner[8624]: Enabling SpamAssassin auto-whitelist
> functionality...
> Nov  4 07:57:03 mx sendmail[8576]: pA4CuvD8008576: from=<SRS0=uKTMcH=5S=
> abc.com=srinivas at srs.bis7.eu.blackberry.com>, size=24864, class=0,
> nrcpts=1,
> msgid=<800112686-1320411414-cardhu_decombobulator_blackberry.rim.net-1464515178- at b14.c16.bise7.blackberry>,
> proto=ESMTP, daemon=MTA, relay=smtp10.bis7.eu.blackberry.com[178.239.85.15]
> Nov  4 07:57:03 mx sendmail[8576]: pA4CuvD8008576: to=<samirgosai at abc.com>,
> delay=00:00:00, mailer=esmtp, pri=54864, stat=queued
> Nov  4 07:57:04 mx sendmail[8578]: pA4CuwRK008578: from=<
> nareshpanchal9 at yahoo.co.in>, size=2064, class=0, nrcpts=1,
> msgid=df0157a74c4f3b8ea410d5c91181eaba@[192.168.1.1], proto=SMTP,
> daemon=MTA, relay=nm9.bullet.mail.sp2.yahoo.com [98.139.91.79]
> Nov  4 07:57:04 mx sendmail[8578]: pA4CuwRK008578: to=<hr at cb1.com>,
> delay=00:00:00, mailer=esmtp, pri=32064, stat=queued
> Nov  4 07:57:04 mx sendmail[8631]: ruleset=check_relay,
> arg1=[69.163.36.221], arg2=127.0.0.2, relay=
> 69-163-34-221.in-addr.arpa.static.dsn1.net [69.163.36.221] (may be
> forged), reject=550 5.7.1 Rejected: 69.163.36.221 listed at
> b.barracudacentral.org
>
> Nov  4 07:58:06 mx MailScanner[8905]: Batch completed at 4358 bytes per
> second (24835 / 5)
> Nov  4 07:58:06 mx MailScanner[8905]: Batch (1 message) processed in 5.70
> seconds
> Nov  4 07:58:06 mx MailScanner[8905]: "Always Looked Up Last" took 0.00
> seconds
> Nov  4 07:58:07 mx sendmail[8974]: pA4Cvtu3008912: to=<mktg1 at jklindia.com>,
> delay=00:00:07, xdelay=00:00:01, mailer=esmtp, pri=144294, relay=
> mail.jklindia.com. [74.86.58.248], dsn=2.0.0, stat=Sent (OK)
> Nov  4 07:58:07 mx MailScanner[8976]: MailScanner E-Mail Virus Scanner
> version 4.79.11 starting...
> Nov  4 07:58:07 mx MailScanner[8976]: Reading configuration file
> /etc/MailScanner/MailScanner.conf
> Nov  4 07:58:07 mx MailScanner[8976]: Reading configuration file
> /etc/MailScanner/conf.d/README
> Nov  4 07:58:07 mx MailScanner[8976]: Config: calling custom init function
> SQLBlacklist
> Nov  4 07:58:07 mx MailScanner[8976]: Starting up SQL Blacklist
> Nov  4 07:58:07 mx MailScanner[8976]: Read 1703 blacklist entries
> Nov  4 07:58:07 mx MailScanner[8976]: Config: calling custom init function
> MailWatchLogging
> Nov  4 07:58:07 mx MailScanner[8976]: Started SQL Logging child
> Nov  4 07:58:07 mx MailScanner[8976]: Config: calling custom init function
> SQLWhitelist
> Nov  4 07:58:07 mx MailScanner[8976]: Starting up SQL Whitelist
> Nov  4 07:58:07 mx MailScanner[8976]: Read 346 whitelist entries
> Nov  4 07:58:08 mx MailScanner[8976]: Using SpamAssassin results cache
> Nov  4 07:58:08 mx MailScanner[8976]: Connected to SpamAssassin cache
> database
> Nov  4 07:58:08 mx MailScanner[8976]: Enabling SpamAssassin auto-whitelist
> functionality...
> Nov  4 07:58:08 mx sendmail[8575]: pA4CuvKK008575: timeout waiting for
> input from reverse.gdsz.cncnet.net during server cmd read
> Nov  4 07:58:09 mx MailScanner[8943]: Connected to Processing Attempts
> Database
> Nov  4 07:58:09 mx MailScanner[8943]: Found 2 messages in the Processing
> Attempts Database
> Nov  4 07:58:09 mx MailScanner[8943]: Using locktype = posix
> Nov  4 07:58:10 mx MailScanner[8885]: Virus Scanning completed at 311
> bytes per second
> Nov  4 07:58:10 mx MailScanner[8885]: Spam Checks: Starting
> Nov  4 07:58:10 mx MailScanner[8885]: Message pA4Cw17q008930 from
> 127.0.0.1 (root at mx.cm.net) is whitelisted
> Nov  4 07:58:10 mx MailScanner[8643]: Virus Scanning completed at 313
> bytes per second
> Nov  4 07:58:10 mx MailScanner[8643]: Spam Checks: Starting
> Nov  4 07:58:10 mx MailScanner[8643]: Message pA4Cw1xZ008938 from
> 127.0.0.1 (root at mx.cm.net) is whitelisted
> Nov  4 07:58:10 mx MailScanner[8885]: Spam Checks completed at 1545 bytes
> per second
> Nov  4 07:58:10 mx MailScanner[8885]: Uninfected: Delivered 1 messages
> Nov  4 07:58:10 mx MailScanner[8885]: Virus Processing completed at 46147
> bytes per second
> Nov  4 07:58:10 mx MailScanner[8885]: Deleted 1 messages from
> processing-database
> Nov  4 07:58:10 mx MailScanner[8885]: Batch completed at 257 bytes per
> second (1211 / 4)
> Nov  4 07:58:10 mx MailScanner[8885]: Batch (1 message) processed in 4.70
> seconds
> Nov  4 07:58:10 mx MailScanner[8885]: "Always Looked Up Last" took 0.00
> seconds
> Nov  4 07:58:10 mx spamd[3141]: spamd: connection from
> localhost.localdomain [127.0.0.1] at port 55309
> Nov  4 07:58:10 mx spamd[3141]: spamd: setuid to spamd succeeded
> Nov  4 07:58:10 mx spamd[3141]: spamd: processing message <
> 201111041258.pA4Cw1w9008928 at mx.cm.net> for spamd:501
> Nov  4 07:58:11 mx MailScanner[8643]: Spam Checks completed at 1457 bytes
> per second
> Nov  4 07:58:11 mx MailScanner[8643]: Uninfected: Delivered 1 messages
> Nov  4 07:58:11 mx MailScanner[8643]: Virus Processing completed at 43840
> bytes per second
> Nov  4 07:58:11 mx MailScanner[8643]: Deleted 1 messages from
> processing-database
> Nov  4 07:58:11 mx MailScanner[8643]: Batch completed at 256 bytes per
> second (1225 / 4)
>
> Thank you,
>
>
> On Fri, Nov 4, 2011 at 6:01 PM, sonidhaval at gmail.com <sonidhaval at gmail.com
> > wrote:
>
>> Hello,
>>
>> Thanks for your reply.
>>
>> Should I enable Debug SpamAssassin or just Debug mode from
>> MailScanner.conf ?
>>
>> Thank you,
>>
>>
>> On Fri, Nov 4, 2011 at 5:53 PM, Jeremy McSpadden <jeremy at fluxlabs.net>wrote:
>>
>>> Sounds like your W/L is setup wrong. Run in debug and see what it's
>>> showing. I'd also upgrade.
>>>
>>>
>>> --
>>> Jeremy McSpadden
>>>
>>> On Nov 4, 2011, at 7:22 AM, "sonidhaval at gmail.com" <sonidhaval at gmail.com>
>>> wrote:
>>>
>>> Hello,
>>>
>>> We have MailScanner 4.79 with Centos5.7 installed. Also having
>>> spamassassin with mysql based whitelist facilty.
>>>
>>> Our emails are getting blocked even after adding from domain to
>>> whitelist entry. It is getting blocked due to Bayesian database or
>>> spamassassin score check. Is there any other way to bypass whitelist
>>> entries from spam checking ?
>>>
>>> As per my understanding, MailScanner or Spamassassin should not block
>>> such whitelisted emails but in my case it is not happening.
>>>
>>> Thank you,
>>>
>>> --
>>> Kind regards,
>>> Dhaval Soni ( RHCA )
>>>
>>> Active Contributor of *LinuxArticles.org* <http://LinuxArticles.org>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>
>>
>> --
>> Kind regards,
>> Dhaval Soni ( RHCA )
>>
>> Active Contributor of *LinuxArticles.org* <http://LinuxArticles.org>
>>
>>
>
>
> --
> Kind regards,
> Dhaval Soni ( RHCA )
>
> Active Contributor of *LinuxArticles.org* <http://LinuxArticles.org>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111104/164ff4f0/attachment.html


More information about the MailScanner mailing list