MailScanner Flow

Martin Hepworth maxsec at gmail.com
Sun Oct 2 15:23:16 IST 2011


Sort of,
mailscanner sits between two mta queues so you need An mta running or two
depending on which mta you use.

Spamd should be off as ms uses the perl api to call sa.

Clamd can still be used as if you setup your mailscanner.conf correctly for
groups etc it will call clamd itself. ( see the info in the file about
this).

Rest as previous poster mentioned.

Martin


On Sunday, 2 October 2011, Craig White <craigwhite at azapple.com> wrote:
> On Sat, 2011-10-01 at 21:16 -0500, Mike's List wrote:
>> Hello Group,
>>
>> I'm currently reading "mailscanner-manual-version-1.0.1.pdf" and I think
>> from what I understand the way MailScanner/MS works in that MS took over
>> the MTA/SpamAssassin/AV flow and perform the combine procedures?
>> Therefore, the server should not need to have sendmail, spamassassin,
>> and AV running but allow MS to do its job and spawn its child process
>> to handle all mail procedures?
> ----
> yes, turn them off and MS will start sendmail for you, call the
> spamassassin and clamd processes at the appropriate time.
> ----
>> If this is the case, when I turned sendmail, spamassassin and AV off, my
>> server will not accept mail, spamassassin is run scanning, etc.  So my
>> MS is broken?  If my understanding is not correct, then I need to turn
>> on all the other services?
>>
>> (My --lint output below, a couple of errors but should function fine?)
>>
>> All inputs are welcome.
>>
>> Thank you.
>>
>>
>> Mike (//mailscanner newbie)
>>
>>
>>
>> // start
>>
>> # MailScanner --lint
>> Trying to setlogsock(unix)
>>
>> Reading configuration file /etc/MailScanner/MailScanner.conf
>> Reading configuration file /etc/MailScanner/conf.d/README
>> Read 868 hostnames from the phishing whitelist
>> Read 4063 hostnames from the phishing blacklists
>>
>> Checking version numbers...
>> Version number in MailScanner.conf (4.84.3) is correct.
>>
>> Unrar is not installed, it should be in /usr/bin/unrar.
>> This is required for RAR archives to be read to check
>> filenames and filetypes. Virus scanning is not affected.
> ----
> if possible, you should install the unrar package for your OS
> ----
>>
>>
>> ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf
>> ERROR: is not correct, it should match X-yoursite-MailScanner-From
> ----
> simple fix... described appropriately
> ----
>>
>> Checking for SpamAssassin errors (if you use it)...
>> Using SpamAssassin results cache
>> Connected to SpamAssassin cache database
>> config: failed to parse line, skipping, in
>> "/etc/mail/spamassassin/mailscanner.cf": use_auto_whitelist 0
>> SpamAssassin reported an error.
> ----
> you can disable this to prevent the error but it's not a biggie
> ----
>> Connected to Processing Attempts Database
>> Created Processing Attempts Database successfully
>> There are 0 messages in the Processing Attempts Database
>> Using locktype = posix
>> MailScanner.conf says "Virus Scanners = clamav"
>> Found these virus scanners installed: clamd
>>
===========================================================================
>> Filename Checks: Windows/DOS Executable (1 eicar.com)
>> Other Checks: Found 1 problems
>> Virus and Content Scanning: Starting
>> 1.message: Eicar-Test-Signature-1 FOUND
>>
>> ./1/eicar.com: Eicar-Test-Signature FOUND
>>
>> Virus Scanning: ClamAV found 2 infections
>> Infected message 1 came from 10.1.1.1
>> Virus Scanning: Found 2 viruses
>>
===========================================================================
>> Virus Scanner test reports:
>> ClamAV said "eicar.com contains Eicar-Test-Signature"
>>
>> If any of your virus scanners (clamd)
>> are not listed there, you should check that they are installed correctly
>> and that MailScanner is finding them correctly via its
>> virus.scanners.conf.
> ----
> obviously clamav/clamd are working as intended
>
> Craig
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

-- 
-- 
Martin Hepworth
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20111002/146d4759/attachment.html


More information about the MailScanner mailing list