WhiteList Issue

Martin Hepworth maxsec at gmail.com
Fri Nov 4 15:22:36 GMT 2011


check the sendmail config..

-- 
Martin Hepworth
Oxford, UK


On 4 November 2011 14:28, sonidhaval at gmail.com <sonidhaval at gmail.com> wrote:

> Hello,
>
> How to disable it ?
>
> Thanks,
>
>
>
> On Fri, Nov 4, 2011 at 7:40 PM, Martin Hepworth <maxsec at gmail.com> wrote:
>
>> Ok looks like you are calling spamassassin twice - the spamd lines below
>>
>> MailScanner calls spamassassin directly via it's API so spamd should be
>> off and make sure sendmail isn't configured to call spamd as well.
>>
>> --
>> Martin Hepworth
>> Oxford, UK
>>
>>
>>
>> On 4 November 2011 12:59, sonidhaval at gmail.com <sonidhaval at gmail.com>wrote:
>>
>>> Hello,
>>>
>>> Nov  4 07:57:02 mx MailScanner[8624]: Config: calling custom init
>>> function MailWatchLogging
>>> Nov  4 07:57:02 mx MailScanner[8624]: Started SQL Logging child
>>> Nov  4 07:57:02 mx MailScanner[8624]: Config: calling custom init
>>> function SQLWhitelist
>>> Nov  4 07:57:02 mx MailScanner[8624]: Starting up SQL Whitelist
>>> Nov  4 07:57:02 mx MailScanner[8624]: Read 346 whitelist entries
>>> Nov  4 07:57:03 mx MailScanner[8624]: Using SpamAssassin results cache
>>> Nov  4 07:57:03 mx MailScanner[8624]: Connected to SpamAssassin cache
>>> database
>>> Nov  4 07:57:03 mx MailScanner[8624]: Expired 5 records from the
>>> SpamAssassin cache
>>> Nov  4 07:57:03 mx MailScanner[8624]: Enabling SpamAssassin
>>> auto-whitelist functionality...
>>> Nov  4 07:57:03 mx sendmail[8576]: pA4CuvD8008576: from=<SRS0=uKTMcH=5S=
>>> abc.com=srinivas at srs.bis7.eu.blackberry.com>, size=24864, class=0,
>>> nrcpts=1,
>>> msgid=<800112686-1320411414-cardhu_decombobulator_blackberry.rim.net-1464515178- at b14.c16.bise7.blackberry>,
>>> proto=ESMTP, daemon=MTA, relay=smtp10.bis7.eu.blackberry.com[178.239.85.15]
>>> Nov  4 07:57:03 mx sendmail[8576]: pA4CuvD8008576: to=<
>>> samirgosai at abc.com>, delay=00:00:00, mailer=esmtp, pri=54864,
>>> stat=queued
>>> Nov  4 07:57:04 mx sendmail[8578]: pA4CuwRK008578: from=<
>>> nareshpanchal9 at yahoo.co.in>, size=2064, class=0, nrcpts=1,
>>> msgid=df0157a74c4f3b8ea410d5c91181eaba@[192.168.1.1], proto=SMTP,
>>> daemon=MTA, relay=nm9.bullet.mail.sp2.yahoo.com [98.139.91.79]
>>> Nov  4 07:57:04 mx sendmail[8578]: pA4CuwRK008578: to=<hr at cb1.com>,
>>> delay=00:00:00, mailer=esmtp, pri=32064, stat=queued
>>> Nov  4 07:57:04 mx sendmail[8631]: ruleset=check_relay,
>>> arg1=[69.163.36.221], arg2=127.0.0.2, relay=
>>> 69-163-34-221.in-addr.arpa.static.dsn1.net [69.163.36.221] (may be
>>> forged), reject=550 5.7.1 Rejected: 69.163.36.221 listed at
>>> b.barracudacentral.org
>>>
>>> Nov  4 07:58:06 mx MailScanner[8905]: Batch completed at 4358 bytes per
>>> second (24835 / 5)
>>> Nov  4 07:58:06 mx MailScanner[8905]: Batch (1 message) processed in
>>> 5.70 seconds
>>> Nov  4 07:58:06 mx MailScanner[8905]: "Always Looked Up Last" took 0.00
>>> seconds
>>> Nov  4 07:58:07 mx sendmail[8974]: pA4Cvtu3008912: to=<
>>> mktg1 at jklindia.com>, delay=00:00:07, xdelay=00:00:01, mailer=esmtp,
>>> pri=144294, relay=mail.jklindia.com. [74.86.58.248], dsn=2.0.0,
>>> stat=Sent (OK)
>>> Nov  4 07:58:07 mx MailScanner[8976]: MailScanner E-Mail Virus Scanner
>>> version 4.79.11 starting...
>>> Nov  4 07:58:07 mx MailScanner[8976]: Reading configuration file
>>> /etc/MailScanner/MailScanner.conf
>>> Nov  4 07:58:07 mx MailScanner[8976]: Reading configuration file
>>> /etc/MailScanner/conf.d/README
>>> Nov  4 07:58:07 mx MailScanner[8976]: Config: calling custom init
>>> function SQLBlacklist
>>> Nov  4 07:58:07 mx MailScanner[8976]: Starting up SQL Blacklist
>>> Nov  4 07:58:07 mx MailScanner[8976]: Read 1703 blacklist entries
>>> Nov  4 07:58:07 mx MailScanner[8976]: Config: calling custom init
>>> function MailWatchLogging
>>> Nov  4 07:58:07 mx MailScanner[8976]: Started SQL Logging child
>>> Nov  4 07:58:07 mx MailScanner[8976]: Config: calling custom init
>>> function SQLWhitelist
>>> Nov  4 07:58:07 mx MailScanner[8976]: Starting up SQL Whitelist
>>> Nov  4 07:58:07 mx MailScanner[8976]: Read 346 whitelist entries
>>> Nov  4 07:58:08 mx MailScanner[8976]: Using SpamAssassin results cache
>>> Nov  4 07:58:08 mx MailScanner[8976]: Connected to SpamAssassin cache
>>> database
>>> Nov  4 07:58:08 mx MailScanner[8976]: Enabling SpamAssassin
>>> auto-whitelist functionality...
>>> Nov  4 07:58:08 mx sendmail[8575]: pA4CuvKK008575: timeout waiting for
>>> input from reverse.gdsz.cncnet.net during server cmd read
>>> Nov  4 07:58:09 mx MailScanner[8943]: Connected to Processing Attempts
>>> Database
>>> Nov  4 07:58:09 mx MailScanner[8943]: Found 2 messages in the Processing
>>> Attempts Database
>>> Nov  4 07:58:09 mx MailScanner[8943]: Using locktype = posix
>>> Nov  4 07:58:10 mx MailScanner[8885]: Virus Scanning completed at 311
>>> bytes per second
>>> Nov  4 07:58:10 mx MailScanner[8885]: Spam Checks: Starting
>>> Nov  4 07:58:10 mx MailScanner[8885]: Message pA4Cw17q008930 from
>>> 127.0.0.1 (root at mx.cm.net) is whitelisted
>>> Nov  4 07:58:10 mx MailScanner[8643]: Virus Scanning completed at 313
>>> bytes per second
>>> Nov  4 07:58:10 mx MailScanner[8643]: Spam Checks: Starting
>>> Nov  4 07:58:10 mx MailScanner[8643]: Message pA4Cw1xZ008938 from
>>> 127.0.0.1 (root at mx.cm.net) is whitelisted
>>> Nov  4 07:58:10 mx MailScanner[8885]: Spam Checks completed at 1545
>>> bytes per second
>>> Nov  4 07:58:10 mx MailScanner[8885]: Uninfected: Delivered 1 messages
>>> Nov  4 07:58:10 mx MailScanner[8885]: Virus Processing completed at
>>> 46147 bytes per second
>>> Nov  4 07:58:10 mx MailScanner[8885]: Deleted 1 messages from
>>> processing-database
>>> Nov  4 07:58:10 mx MailScanner[8885]: Batch completed at 257 bytes per
>>> second (1211 / 4)
>>> Nov  4 07:58:10 mx MailScanner[8885]: Batch (1 message) processed in
>>> 4.70 seconds
>>> Nov  4 07:58:10 mx MailScanner[8885]: "Always Looked Up Last" took 0.00
>>> seconds
>>> Nov  4 07:58:10 mx spamd[3141]: spamd: connection from
>>> localhost.localdomain [127.0.0.1] at port 55309
>>> Nov  4 07:58:10 mx spamd[3141]: spamd: setuid to spamd succeeded
>>> Nov  4 07:58:10 mx spamd[3141]: spamd: processing message <
>>> 201111041258.pA4Cw1w9008928 at mx.cm.net> for spamd:501
>>> Nov  4 07:58:11 mx MailScanner[8643]: Spam Checks completed at 1457
>>> bytes per second
>>> Nov  4 07:58:11 mx MailScanner[8643]: Uninfected: Delivered 1 messages
>>> Nov  4 07:58:11 mx MailScanner[8643]: Virus Processing completed at
>>> 43840 bytes per second
>>> Nov  4 07:58:11 mx MailScanner[8643]: Deleted 1 messages from
>>> processing-database
>>> Nov  4 07:58:11 mx MailScanner[8643]: Batch completed at 256 bytes per
>>> second (1225 / 4)
>>>
>>> Thank you,
>>>
>>>
>>> On Fri, Nov 4, 2011 at 6:01 PM, sonidhaval at gmail.com <
>>> sonidhaval at gmail.com> wrote:
>>>
>>>> Hello,
>>>>
>>>> Thanks for your reply.
>>>>
>>>> Should I enable Debug SpamAssassin or just Debug mode from
>>>> MailScanner.conf ?
>>>>
>>>> Thank you,
>>>>
>>>>
>>>> On Fri, Nov 4, 2011 at 5:53 PM, Jeremy McSpadden <jeremy at fluxlabs.net>wrote:
>>>>
>>>>> Sounds like your W/L is setup wrong. Run in debug and see what it's
>>>>> showing. I'd also upgrade.
>>>>>
>>>>>
>>>>> --
>>>>> Jeremy McSpadden
>>>>>
>>>>> On Nov 4, 2011, at 7:22 AM, "sonidhaval at gmail.com" <
>>>>> sonidhaval at gmail.com> wrote:
>>>>>
>>>>> Hello,
>>>>>
>>>>> We have MailScanner 4.79 with Centos5.7 installed. Also having
>>>>> spamassassin with mysql based whitelist facilty.
>>>>>
>>>>> Our emails are getting blocked even after adding from domain to
>>>>> whitelist entry. It is getting blocked due to Bayesian database or
>>>>> spamassassin score check. Is there any other way to bypass whitelist
>>>>> entries from spam checking ?
>>>>>
>>>>> As per my understanding, MailScanner or Spamassassin should not block
>>>>> such whitelisted emails but in my case it is not happening.
>>>>>
>>>>> Thank you,
>>>>>
>>>>> --
>>>>> Kind regards,
>>>>> Dhaval Soni ( RHCA )
>>>>>
>>>>> Active Contributor of *LinuxArticles.org* <http://LinuxArticles.org>
>>>>>
>>>>> --
>>>>> MailScanner mailing list
>>>>> mailscanner at lists.mailscanner.info
>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>
>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>
>>>>> Support MailScanner development - buy the book off the website!
>>>>>
>>>>>
>>>>> --
>>>>> MailScanner mailing list
>>>>> mailscanner at lists.mailscanner.info
>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>
>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>
>>>>> Support MailScanner development - buy the book off the website!
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> Kind regards,
>>>> Dhaval Soni ( RHCA )
>>>>
>>>> Active Contributor of *LinuxArticles.org* <http://LinuxArticles.org>
>>>>
>>>>
>>>
>>>
>>> --
>>> Kind regards,
>>> Dhaval Soni ( RHCA )
>>>
>>> Active Contributor of *LinuxArticles.org* <http://LinuxArticles.org>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
>
> --
> Kind regards,
> Dhaval Soni ( RHCA )
>
> Active Contributor of *LinuxArticles.org* <http://LinuxArticles.org>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111104/b7e15315/attachment-0001.html


More information about the MailScanner mailing list