From andreas.kasenides at cs.ucy.ac.cy Wed Feb 1 11:36:02 2012 From: andreas.kasenides at cs.ucy.ac.cy (Andreas Kasenides) Date: Wed Feb 1 11:36:32 2012 Subject: Where is Julian? In-Reply-To: <4F26B856.1000603@tradoc.fr> References: <4F26B856.1000603@tradoc.fr> Message-ID: <4F2923A2.2050702@cs.ucy.ac.cy> On 01/30/2012 05:33 PM, John Wilcock wrote: > Le 30/01/2012 15:56, Jeff Earickson a ?crit : >> The periodic discussions on the list about MailScanner hanging (aka, >> "perl -U") has made me wonder what happened to Julian Field. Is he >> ok? Health problems, overwork in his day job, or lack of interest in >> MailScanner these days? > > I wouldn't presume to speak for Julian in any way, but I do note that > he's pretty active on https://twitter.com/#!/JulesFM so I fear that > lack of interest is the main reason for his absence here. Certainly I > hope it isn't renewed health problems... > > John. > I certainly home Julian is in best of health but should I be worried. Is his absence from daily MailScanner activity a sign of dying project? Should I be worried? -- Andreas Kasenides Senior IT Officer From mikael at syska.dk Wed Feb 1 13:20:58 2012 From: mikael at syska.dk (Mikael Syska) Date: Wed Feb 1 13:21:12 2012 Subject: Where is Julian? In-Reply-To: <4F2923A2.2050702@cs.ucy.ac.cy> References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy> Message-ID: Hi, On Wed, Feb 1, 2012 at 12:36 PM, Andreas Kasenides wrote: > On 01/30/2012 05:33 PM, John Wilcock wrote: >> >> Le 30/01/2012 15:56, Jeff Earickson a ?crit : >>> >>> The periodic discussions on the list about MailScanner hanging (aka, >>> "perl -U") has made me wonder what happened to Julian Field. ?Is he >>> ok? ?Health problems, overwork in his day job, or lack of interest in >>> MailScanner these days? >> >> >> I wouldn't presume to speak for Julian in any way, but I do note that he's >> pretty active on https://twitter.com/#!/JulesFM so I fear that lack of >> interest is the main reason for his absence here. Certainly I hope it isn't >> renewed health problems... >> >> John. >> > > I certainly home Julian is in best of health but should I be worried. > Is his absence from daily MailScanner activity ?a sign of ?dying ?project? > Should I be worried? If its feature complete ... is it then a dying projekt? Then alot of projekts are dying. We only need to see new usages of MS since its so plugable and open source. > > -- > Andreas Kasenides > Senior IT Officer > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From jeremy at fluxlabs.net Wed Feb 1 13:54:47 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Wed Feb 1 13:55:02 2012 Subject: Where is Julian? In-Reply-To: References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy>, Message-ID: Not necessarily. If the project is feature complete, yet takes manual work-arounds to work properly on every distro, doesn't mean it's solid. Given that MS is dependent on Perl, and the newer versions of perl break MS; a patch is in order. The room for concern is no one other than Julian has access to patch. There aren't other devs on this project. Sure someone could submit the patch, but looking at the lack of responses from Julian, it could take months to have the patches applied. -- Jeremy McSpadden On Feb 1, 2012, at 7:24 AM, "Mikael Syska" wrote: > If its feature complete ... is it then a dying projekt? Then alot of > projekts are dying. We only need to see new usages of MS since its so > plugable and open source. From phil.randal at hoopleltd.co.uk Wed Feb 1 14:55:03 2012 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Wed Feb 1 14:55:27 2012 Subject: Where is Julian? In-Reply-To: References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy>, Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B853C659222@HC-EXMBX04.herefordshire.gov.uk> Perhaps we could address this another way, and collect a list of outstanding issues: 1: my post to this list from Sept 27th, 2011 "External TNEF decoding bug in MailScanner 4.84.3" 2: ZendTo integration (would really love to see this happen) 3: Outstanding taint problems Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden Sent: 01 February 2012 13:55 To: MailScanner discussion Cc: MailScanner discussion Subject: Re: Where is Julian? Not necessarily. If the project is feature complete, yet takes manual work-arounds to work properly on every distro, doesn't mean it's solid. Given that MS is dependent on Perl, and the newer versions of perl break MS; a patch is in order. The room for concern is no one other than Julian has access to patch. There aren't other devs on this project. Sure someone could submit the patch, but looking at the lack of responses from Julian, it could take months to have the patches applied. -- Jeremy McSpadden On Feb 1, 2012, at 7:24 AM, "Mikael Syska" wrote: > If its feature complete ... is it then a dying projekt? Then alot of > projekts are dying. We only need to see new usages of MS since its so > plugable and open source. -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ?Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust or 2gether NHS Foundation Trust. You should be aware that Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust & 2gether NHS Foundation Trust monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.? From mailscanner at joolee.nl Wed Feb 1 14:55:40 2012 From: mailscanner at joolee.nl (Joolee) Date: Wed Feb 1 14:56:29 2012 Subject: Where is Julian? In-Reply-To: References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy> Message-ID: A perfect solution is to put the project up on Github or SourceForge so other devs can take up the project. But than again, this is also something only Julian can do. On 1 February 2012 14:54, Jeremy McSpadden wrote: > Not necessarily. If the project is feature complete, yet takes manual > work-arounds to work properly on every distro, doesn't mean it's solid. > Given that MS is dependent on Perl, and the newer versions of perl break > MS; a patch is in order. > > The room for concern is no one other than Julian has access to patch. > There aren't other devs on this project. Sure someone could submit the > patch, but looking at the lack of responses from Julian, it could take > months to have the patches applied. > > > -- > Jeremy McSpadden > > On Feb 1, 2012, at 7:24 AM, "Mikael Syska" wrote: > > > If its feature complete ... is it then a dying projekt? Then alot of > > projekts are dying. We only need to see new usages of MS since its so > > plugable and open source. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120201/52b6d4df/attachment.html From markus at markusoft.se Wed Feb 1 15:18:57 2012 From: markus at markusoft.se (Markus Nilsson) Date: Wed Feb 1 15:19:27 2012 Subject: Where is Julian? In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B853C659222@HC-EXMBX04.herefordshire.gov.uk> References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy> , <7CA580B59C1ABD45B4614ED90D4C7B853C659222@HC-EXMBX04.herefordshire.gov.uk> Message-ID: <1328109537.12157.30.camel@cronlabworkstation0.cronlab.com> ons 2012-02-01 klockan 14:55 +0000 skrev Randal, Phil: > Perhaps we could address this another way, and collect a list of outstanding issues: > > 1: my post to this list from Sept 27th, 2011 "External TNEF decoding bug in MailScanner 4.84.3" > > 2: ZendTo integration (would really love to see this happen) > > 3: Outstanding taint problems > I'd also like to see my patches: 4: "Fixing multiple signature additions" from March 18th 2011 5: "AntiPhising for url's with port 80" from March 3rd 2011 6: "AntiPhishing improvement for IP-based links to local networks" from June 23rd 2011 Also the patch included in the ZendTo-integration, that fixes the postfix mail-size problem is important for me! /Markus > Cheers, > > Phil > -- > Phil Randal > Infrastructure Engineer > Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT > Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden > Sent: 01 February 2012 13:55 > To: MailScanner discussion > Cc: MailScanner discussion > Subject: Re: Where is Julian? > > Not necessarily. If the project is feature complete, yet takes manual work-arounds to work properly on every distro, doesn't mean it's solid. Given that MS is dependent on Perl, and the newer versions of perl break MS; a patch is in order. > > The room for concern is no one other than Julian has access to patch. There aren't other devs on this project. Sure someone could submit the patch, but looking at the lack of responses from Julian, it could take months to have the patches applied. > > > -- > Jeremy McSpadden > > On Feb 1, 2012, at 7:24 AM, "Mikael Syska" wrote: > > > If its feature complete ... is it then a dying projekt? Then alot of > > projekts are dying. We only need to see new usages of MS since its so > > plugable and open source. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > ?Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust or 2gether NHS Foundation Trust. You should be aware that Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust & 2gether NHS Foundation Trust monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120201/a2204058/attachment.html From john at tradoc.fr Wed Feb 1 15:22:48 2012 From: john at tradoc.fr (John Wilcock) Date: Wed Feb 1 15:23:02 2012 Subject: Where is Julian? In-Reply-To: References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy>, Message-ID: <4F2958C8.5000602@tradoc.fr> Le 01/02/2012 14:54, Jeremy McSpadden a ?crit : > The room for concern is no one other than Julian has access to patch. > There aren't other devs on this project. Sure someone could submit > the patch, but looking at the lack of responses from Julian, it could > take months to have the patches applied. What about FSL? I would have assumed that Julian has given them full access to all the resources needed, and indeed I'd hope that they already have solutions to some of the issues as part of their paid support. Anyone from FSL care to comment? Or is anyone here in direct contact with Julian and could bring this thread to his attention? John. -- -- Over 5000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From jeremy at fluxlabs.net Wed Feb 1 17:23:47 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Wed Feb 1 17:24:05 2012 Subject: Where is Julian? In-Reply-To: Message-ID: I am waiting on a reply from Julian .. He is ok with us moving the dev project over to a github or sf project. If everyone could send their patches to me, I don't mind maintaining the project. So far I have gathered the patches that have been requested in this thread. If anyone has others, please send. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 From: Joolee > Reply-To: MailScanner discussion > Date: Wed, 1 Feb 2012 15:55:40 +0100 To: MailScanner discussion > Subject: Re: Where is Julian? A perfect solution is to put the project up on Github or SourceForge so other devs can take up the project. But than again, this is also something only Julian can do. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120201/5b0a705e/attachment.html From phil.randal at hoopleltd.co.uk Wed Feb 1 17:35:20 2012 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Wed Feb 1 17:35:42 2012 Subject: Where is Julian? In-Reply-To: References: Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B853C65A132@HC-EXMBX04.herefordshire.gov.uk> I don't know the correct fix for the TNEF handling error, I just reverted to a previous version. Someone who's more knowledgeable about perl than me will need to look at it. Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden Sent: 01 February 2012 17:24 To: MailScanner discussion Subject: Re: Where is Julian? I am waiting on a reply from Julian .. He is ok with us moving the dev project over to a github or sf project. If everyone could send their patches to me, I don't mind maintaining the project. So far I have gathered the patches that have been requested in this thread. If anyone has others, please send. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 From: Joolee > Reply-To: MailScanner discussion > Date: Wed, 1 Feb 2012 15:55:40 +0100 To: MailScanner discussion > Subject: Re: Where is Julian? A perfect solution is to put the project up on Github or SourceForge so other devs can take up the project. But than again, this is also something only Julian can do. "Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust or 2gether NHS Foundation Trust. You should be aware that Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust & 2gether NHS Foundation Trust monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it." -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120201/6fb653a1/attachment.html From MailScanner at ecs.soton.ac.uk Wed Feb 1 17:45:20 2012 From: MailScanner at ecs.soton.ac.uk (Jules Field) Date: Wed Feb 1 17:45:38 2012 Subject: MailScanner now on Github References: <4F297A30.4020307@ecs.soton.ac.uk> Message-ID: Under the user "julesfm" you will now find my very latest code for MailScanner as the project "MailScanner" on Github. This includes all the installers, building scripts, everything. You may find getting the "package building scripts" fun to get working on your own machines, but it is all there and will show you how to to it so you can build all the ClamAV+SA packages and other stuff like that too. Have fun folks, and please don't break it! Anything you need me to do on Github so that you can do what you need to do, don't hesitate to get in touch (prob via Twitter). Jules -- Julian Field MEng CITP CEng www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 Follow me at twitter.com/JulesFM 'Teach a man to reason, and he will think for a lifetime.' - Phil Plait 'All programs have a desire to be useful' - Tron, 1982 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jeremy at fluxlabs.net Wed Feb 1 17:50:36 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Wed Feb 1 17:50:53 2012 Subject: Where is Julian? In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B853C65A132@HC-EXMBX04.herefordshire.gov.uk> References: <7CA580B59C1ABD45B4614ED90D4C7B853C65A132@HC-EXMBX04.herefordshire.gov.uk> Message-ID: <54F1D554C257CD40B99DACFA0729B4EA0C42EF85@BL2PRD0610MB374.namprd06.prod.outlook.com> http://lists.mailscanner.info/pipermail/mailscanner/2012-February/099073.html Hopefully Jules last email will spark some devs to jump on the project and patch MS up-to-date. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120201/872644ec/attachment.html From campbell at cnpapers.com Wed Feb 1 20:01:09 2012 From: campbell at cnpapers.com (Steve Campbell) Date: Wed Feb 1 20:11:49 2012 Subject: Github? Message-ID: <4F299A05.1030805@cnpapers.com> I've never used github, so I need some tutoring. After viewing their site, I'm not sure I'm seeing it the way I should be seeing it. Will the downloads still be at the same place as before? Is github just for the coding, modification, and patching of MS by developers, or will this be where we download our stuff from to install it? steve campbell From jeremy at fluxlabs.net Wed Feb 1 20:16:42 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Wed Feb 1 20:16:56 2012 Subject: Github? In-Reply-To: <4F299A05.1030805@cnpapers.com> References: <4F299A05.1030805@cnpapers.com> Message-ID: <54F1D554C257CD40B99DACFA0729B4EA0C42F5DC@BL2PRD0610MB374.namprd06.prod.outlook.com> This will be for developers/contributors only. Once the patches are approved from Julian, he should add the sources to mailscanner.info. I guess you could call the git-hub source, bleeding edge. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office?: 850-588-4626 Cell?: 850-890-2543 Fax?: 850-254-2955 -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Campbell Sent: Wednesday, February 01, 2012 2:01 PM To: mailscanner@lists.mailscanner.info Subject: Github? I've never used github, so I need some tutoring. After viewing their site, I'm not sure I'm seeing it the way I should be seeing it. Will the downloads still be at the same place as before? Is github just for the coding, modification, and patching of MS by developers, or will this be where we download our stuff from to install it? steve campbell -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From MailScanner at ecs.soton.ac.uk Wed Feb 1 20:19:43 2012 From: MailScanner at ecs.soton.ac.uk (Jules Field) Date: Wed Feb 1 20:19:58 2012 Subject: Where is Julian? In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B853C659222@HC-EXMBX04.herefordshire.gov.uk> References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy>, <7CA580B59C1ABD45B4614ED90D4C7B853C659222@HC-EXMBX04.herefordshire.gov.uk> <4F299E5F.3070008@ecs.soton.ac.uk> Message-ID: On 01/02/2012 14:55, Randal, Phil wrote: > Perhaps we could address this another way, and collect a list of outstanding issues: > > 1: my post to this list from Sept 27th, 2011 "External TNEF decoding bug in MailScanner 4.84.3" > > 2: ZendTo integration (would really love to see this happen) On this one, I have a friend who is working on an API for ZendTo which should make this a lot easier. I expect to release something fairly soon, once I've got some docs written on how to use it. > > 3: Outstanding taint problems > > Cheers, > > Phil > -- > Phil Randal > Infrastructure Engineer > Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT > Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden > Sent: 01 February 2012 13:55 > To: MailScanner discussion > Cc: MailScanner discussion > Subject: Re: Where is Julian? > > Not necessarily. If the project is feature complete, yet takes manual work-arounds to work properly on every distro, doesn't mean it's solid. Given that MS is dependent on Perl, and the newer versions of perl break MS; a patch is in order. > > The room for concern is no one other than Julian has access to patch. There aren't other devs on this project. Sure someone could submit the patch, but looking at the lack of responses from Julian, it could take months to have the patches applied. > > > -- > Jeremy McSpadden > > On Feb 1, 2012, at 7:24 AM, "Mikael Syska" wrote: > >> If its feature complete ... is it then a dying projekt? Then alot of >> projekts are dying. We only need to see new usages of MS since its so >> plugable and open source. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > ?Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust or 2gether NHS Foundation Trust. You should be aware that Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust& 2gether NHS Foundation Trust monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.? > > > > Jules > > -- > Julian Field MEng CITP CEng > www.MailScanner.info > > Buy the MailScanner book at www.MailScanner.info/store > Need help customising MailScanner? Contact me! > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > Follow me at twitter.com/JulesFM > > 'Teach a man to reason, and he will think for a lifetime.' - Phil Plait > 'All programs have a desire to be useful' - Tron, 1982 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Feb 1 20:19:45 2012 From: MailScanner at ecs.soton.ac.uk (Jules Field) Date: Wed Feb 1 20:19:59 2012 Subject: Where is Julian? In-Reply-To: <4F2958C8.5000602@tradoc.fr> References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy>, <4F2958C8.5000602@tradoc.fr> <4F299E61.1060604@ecs.soton.ac.uk> Message-ID: Folks, Sorry about this. My time and energy is limited, and my day job workload has increased a lot partly due to the University laying off staff but increasing the amount they expect us all to do. I just don't have the time and energy I did. I haven't even had an inflation-matching pay rise in 3 years. So every day I do more for less. And I have other projects to work on too. MailScanner is now on Github. If someone can tell me how to make it not read-only, that's the next step. I've never used Git or Github before, so don't know what its project management abilities are like. Jules. On 01/02/2012 15:22, John Wilcock wrote: > Le 01/02/2012 14:54, Jeremy McSpadden a ?crit : >> The room for concern is no one other than Julian has access to patch. >> There aren't other devs on this project. Sure someone could submit >> the patch, but looking at the lack of responses from Julian, it could >> take months to have the patches applied. > > What about FSL? I would have assumed that Julian has given them full > access to all the resources needed, and indeed I'd hope that they > already have solutions to some of the issues as part of their paid > support. Anyone from FSL care to comment? > > Or is anyone here in direct contact with Julian and could bring this > thread to his attention? > > John. > > > Jules > > -- > Julian Field MEng CITP CEng > www.MailScanner.info > > Buy the MailScanner book at www.MailScanner.info/store > Need help customising MailScanner? Contact me! > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > Follow me at twitter.com/JulesFM > > 'Teach a man to reason, and he will think for a lifetime.' - Phil Plait > 'All programs have a desire to be useful' - Tron, 1982 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From MailScanner at ecs.soton.ac.uk Wed Feb 1 20:27:08 2012 From: MailScanner at ecs.soton.ac.uk (Jules Field) Date: Wed Feb 1 20:27:23 2012 Subject: Github? In-Reply-To: <4F299A05.1030805@cnpapers.com> References: <4F299A05.1030805@cnpapers.com> <4F29A01C.7050501@ecs.soton.ac.uk> Message-ID: If someone mails me new URLs when you've all got packages ready in an installable state, I'll update the MailScanner.info website to point to them. Presumably you can build installables which can be got from Github, or do I need to give someone write access to the www.mailscanner.info website files so they can keep them up to date as well? (Change Log, home page and the like, as well as the downloads page) Jules. On 01/02/2012 20:01, Steve Campbell wrote: > I've never used github, so I need some tutoring. After viewing their > site, I'm not sure I'm seeing it the way I should be seeing it. > > Will the downloads still be at the same place as before? Is github > just for the coding, modification, and patching of MS by developers, > or will this be where we download our stuff from to install it? > > steve campbell > > > Jules > > -- > Julian Field MEng CITP CEng > www.MailScanner.info > > Buy the MailScanner book at www.MailScanner.info/store > Need help customising MailScanner? Contact me! > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > Follow me at twitter.com/JulesFM > > 'Teach a man to reason, and he will think for a lifetime.' - Phil Plait > 'All programs have a desire to be useful' - Tron, 1982 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jwoltz at gmail.com Wed Feb 1 20:35:35 2012 From: jwoltz at gmail.com (J.C. Woltz) Date: Wed Feb 1 20:35:47 2012 Subject: Github? In-Reply-To: <54F1D554C257CD40B99DACFA0729B4EA0C42F5DC@BL2PRD0610MB374.namprd06.prod.outlook.com> References: <4F299A05.1030805@cnpapers.com> <54F1D554C257CD40B99DACFA0729B4EA0C42F5DC@BL2PRD0610MB374.namprd06.prod.outlook.com> Message-ID: <1909426853-1328128536-cardhu_decombobulator_blackberry.rim.net-1771137213-@b26.c30.bise6.blackberry> Git is like a better svn. Github adds a few features that should help with development and patches from the community. Git in general allows people to make forks, patches, then a pull request to ask patch be merged into the mailscanner repo. I think this will help relieve some administrative pressure from Julian. Since he posted everything including the setup he uses to create packages/installers. Before people had to submit patches. Julian had to figure out a way to integrate them. Github and git specifically allows the pull requests to ease some of this. For thos unfamiliar with git in general, github has some nice tutorials. I usderstand there are other git websites similar to github. The other sites even open source their whole site. Please do not turn this into a flame on github Lastly, I apologize for top posting. The blackberry will not let me edit the email I'm replying to. Thank you, J.C. Woltz Sent from mobile device. -----Original Message----- From: Jeremy McSpadden Sender: mailscanner-bounces@lists.mailscanner.info Date: Wed, 1 Feb 2012 20:16:42 To: MailScanner discussion Reply-To: MailScanner discussion Subject: RE: Github? This will be for developers/contributors only. Once the patches are approved from Julian, he should add the sources to mailscanner.info. I guess you could call the git-hub source, bleeding edge. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office?: 850-588-4626 Cell?: 850-890-2543 Fax?: 850-254-2955 -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Campbell Sent: Wednesday, February 01, 2012 2:01 PM To: mailscanner@lists.mailscanner.info Subject: Github? I've never used github, so I need some tutoring. After viewing their site, I'm not sure I'm seeing it the way I should be seeing it. Will the downloads still be at the same place as before? Is github just for the coding, modification, and patching of MS by developers, or will this be where we download our stuff from to install it? steve campbell -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From mikael at syska.dk Wed Feb 1 20:36:43 2012 From: mikael at syska.dk (Mikael Syska) Date: Wed Feb 1 20:36:58 2012 Subject: Github? In-Reply-To: <54F1D554C257CD40B99DACFA0729B4EA0C42F5DC@BL2PRD0610MB374.namprd06.prod.outlook.com> References: <4F299A05.1030805@cnpapers.com> <54F1D554C257CD40B99DACFA0729B4EA0C42F5DC@BL2PRD0610MB374.namprd06.prod.outlook.com> Message-ID: Hi, On Wed, Feb 1, 2012 at 9:16 PM, Jeremy McSpadden wrote: > This will be for developers/contributors only. Once the patches are approved from Julian, he should add the sources to mailscanner.info. I guess you could call the git-hub source, bleeding edge. I think master(I think its called master in git) should always be runable and considered bug free, but ofcause bugs might get in. Then there should be a development brach which should be bleading edge and where Julian can accept patches for bugs/proglem/features he can then merge into master. After people have tested it. That what i think ... there might be better options, but this should get the discussion started :-) > > -- > Jeremy McSpadden > Flux Labs, Inc > http://www.fluxlabs.net > Endless Solutions > Office?: 850-588-4626 > Cell?: 850-890-2543 > Fax?: 850-254-2955 > > > -----Original Message----- > From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Steve Campbell > Sent: Wednesday, February 01, 2012 2:01 PM > To: mailscanner@lists.mailscanner.info > Subject: Github? > > I've never used github, so I need some tutoring. After viewing their site, I'm not sure I'm seeing it the way I should be seeing it. > > Will the downloads still be at the same place as before? Is github just for the coding, modification, and patching of MS by developers, or will this be where we download our stuff from to install it? > > steve campbell > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! mvh Mikael Syska From jwoltz at gmail.com Wed Feb 1 20:53:04 2012 From: jwoltz at gmail.com (J.C. Woltz) Date: Wed Feb 1 20:53:15 2012 Subject: Where is Julian? In-Reply-To: References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy> <4F299E61.1060604@ecs.soton.ac.uk> <4F2958C8.5000602@tradoc.fr> Message-ID: On Wed, Feb 1, 2012 at 3:19 PM, Jules Field wrote: > Folks, > > MailScanner is now on Github. If someone can tell me how to make it not > read-only, that's the next step. I've never used Git or Github before, so > don't know what its project management abilities are like. > Jules, You are the "admin" of that project. you can go into the admin section of that project to add contributors to allow them to commit changes. If you are unfamiliar with github, I highly recommend reading their help sections. They have step-by-step directions for many tasks. I kniow you have already created your repo. I recommend reading this: http://help.github.com/create-a-repo/ plus a few other topics. They will walk you through creating an ssh public key and adding it for authentication. (That is needed in order to commit changes) JC -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120201/902315ac/attachment.html From markee at bandwidthco.com Thu Feb 2 02:12:58 2012 From: markee at bandwidthco.com (Mark E. Donaldson) Date: Thu Feb 2 02:14:46 2012 Subject: Where is Julian? In-Reply-To: References: Message-ID: Good to hear this. I'm on-board completely. We need to keep this project going. In my opinion, other than perhaps squid, apache, and iptables, this is the best open source software ever developed. We can do this, and do it in the name of Julian. From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeremy McSpadden Sent: Wednesday, February 01, 2012 9:24 AM To: MailScanner discussion Subject: Re: Where is Julian? I am waiting on a reply from Julian .. He is ok with us moving the dev project over to a github or sf project. If everyone could send their patches to me, I don't mind maintaining the project. So far I have gathered the patches that have been requested in this thread. If anyone has others, please send. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 From: Joolee > Reply-To: MailScanner discussion > Date: Wed, 1 Feb 2012 15:55:40 +0100 To: MailScanner discussion > Subject: Re: Where is Julian? A perfect solution is to put the project up on Github or SourceForge so other devs can take up the project. But than again, this is also something only Julian can do. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner at Bandwidthco Computer Security is for your absolute protection. ######################################################## This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. postmaster@bandwidthco.com MailScanner at Bandwidthco Computer Security is for your absolute protection. ######################################################## -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120202/593427a3/attachment.html From bbecken at aafp.org Thu Feb 2 14:24:54 2012 From: bbecken at aafp.org (Brad Beckenhauer) Date: Thu Feb 2 14:25:32 2012 Subject: Where is Julian? In-Reply-To: References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy>, <4F2958C8.5000602@tradoc.fr> <4F299E61.1060604@ecs.soton.ac.uk> Message-ID: <4F2A485602000068000AAF5F@smtp.aafp.org> >>> On 2/1/2012 at 2:19 PM, Jules Field wrote: > Folks, > > Sorry about this. My time and energy is limited, and my day job workload > has increased a lot partly due to the University laying off staff but > increasing the amount they expect us all to do. I just don't have the > time and energy I did. I haven't even had an inflation-matching pay rise > in 3 years. So every day I do more for less. > And I have other projects to work on too. > > MailScanner is now on Github. If someone can tell me how to make it not > read-only, that's the next step. I've never used Git or Github before, > so don't know what its project management abilities are like. > > Jules. Jules, I'm glad to hear from you and sorry you're being so taxed at work. Just curious... Would you elaborate on your motivation to change to Github? Thanks Brad > > On 01/02/2012 15:22, John Wilcock wrote: >> Le 01/02/2012 14:54, Jeremy McSpadden a ?crit : >>> The room for concern is no one other than Julian has access to patch. >>> There aren't other devs on this project. Sure someone could submit >>> the patch, but looking at the lack of responses from Julian, it could >>> take months to have the patches applied. >> >> What about FSL? I would have assumed that Julian has given them full >> access to all the resources needed, and indeed I'd hope that they >> already have solutions to some of the issues as part of their paid >> support. Anyone from FSL care to comment? >> >> Or is anyone here in direct contact with Julian and could bring this >> thread to his attention? >> >> John. >> >> >> Jules >> >> -- >> Julian Field MEng CITP CEng >> www.MailScanner.info >> >> Buy the MailScanner book at www.MailScanner.info/store >> Need help customising MailScanner? Contact me! >> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 >> Follow me at twitter.com/JulesFM >> >> 'Teach a man to reason, and he will think for a lifetime.' - Phil Plait >> 'All programs have a desire to be useful' - Tron, 1982 From jeremy at fluxlabs.net Thu Feb 2 14:29:28 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Thu Feb 2 14:29:46 2012 Subject: Where is Julian? In-Reply-To: <4F2A485602000068000AAF5F@smtp.aafp.org> References: <4F26B856.1000603@tradoc.fr> <4F2923A2.2050702@cs.ucy.ac.cy>, <4F2958C8.5000602@tradoc.fr> <4F299E61.1060604@ecs.soton.ac.uk> , <4F2A485602000068000AAF5F@smtp.aafp.org> Message-ID: This request was from the community so we can do some patch management. I think the project has enough interested parties to have others start adding to. -- Jeremy McSpadden On Feb 2, 2012, at 8:27 AM, "Brad Beckenhauer" wrote: > Jules, > I'm glad to hear from you and sorry you're being so taxed at work. > > Just curious... Would you elaborate on your motivation to change to > Github? > > Thanks > Brad From steve at fsl.com Thu Feb 2 16:56:23 2012 From: steve at fsl.com (Stephen Swaney) Date: Thu Feb 2 16:56:36 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> Message-ID: Heads up. Feb 2 08:42:39 dg xxxx[25658]: o118gO256586044300 #721 end i=172.21.1.31 p="" f="lan,relay,no_ptr,quit,ipv6" h="mailserver.zzzz.com" m=0/1 b=11310 R=1 t=15 l="550 5.7.1 rejected content, black listed www.mailscanner.info by fresh15.spameatingmonkey.net. #762 #895 (o118gO256586044300)" p0f="(unknown) hops 0? http://spameatingmonkey.com/lookup?check=www.mailscanner.info&submit=submit This can block mail if the default MailScanner signature is used or replied to. Steve --- Steve Swaney steve@fsl.com From ms-list at alexb.ch Thu Feb 2 17:49:14 2012 From: ms-list at alexb.ch (Alex Broens) Date: Thu Feb 2 17:49:26 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net In-Reply-To: References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> Message-ID: <4F2ACC9A.3030607@alexb.ch> On 02/02/2012 05:56 PM, Stephen Swaney wrote: > Heads up. > > Feb 2 08:42:39 dg xxxx[25658]: o118gO256586044300 #721 end i=172.21.1.31 p="" f="lan,relay,no_ptr,quit,ipv6" h="mailserver.zzzz.com" m=0/1 b=11310 R=1 t=15 l="550 5.7.1 rejected content, black listed www.mailscanner.info by fresh15.spameatingmonkey.net. #762 #895 (o118gO256586044300)" p0f="(unknown) hops 0? > > http://spameatingmonkey.com/lookup?check=www.mailscanner.info&submit=submit > > This can block mail if the default MailScanner signature is used or replied to. Amazing! Apart from the fact that Spam Eating Monkey seems to be using borked whois data. (whois.sc says mailscanner.info was first seen in Jan 2004), Whoever rejects with that kind of BL is [BEEP]!!!... As if a fresh domain would be a safe sign of a spammy domain. lets hope it was a trap box :) Alex From Kevin_Miller at ci.juneau.ak.us Thu Feb 2 17:57:38 2012 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Thu Feb 2 17:58:22 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net In-Reply-To: <4F2ACC9A.3030607@alexb.ch> References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> <4F2ACC9A.3030607@alexb.ch> Message-ID: <4A09477D575C2C4B86497161427DD94C1D8A4F314F@city-exchange07> Alex Broens wrote: > > Amazing! > > Apart from the fact that Spam Eating Monkey seems to be using borked > whois data. (whois.sc says mailscanner.info was first seen in Jan > 2004), > > Whoever rejects with that kind of BL is [BEEP]!!!... > As if a fresh domain would be a safe sign of a spammy domain. > > lets hope it was a trap box :) Maybe it was a set up by those Amivis guys. ;-) ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357 From terry at graybell.net Thu Feb 2 18:02:44 2012 From: terry at graybell.net (Terry Hulen Jr.) Date: Thu Feb 2 18:03:17 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net In-Reply-To: <4A09477D575C2C4B86497161427DD94C1D8A4F314F@city-exchange07> References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> <4F2ACC9A.3030607@alexb.ch> <4A09477D575C2C4B86497161427DD94C1D8A4F314F@city-exchange07> Message-ID: <386955974-1328205765-cardhu_decombobulator_blackberry.rim.net-110140489-@b1.c28.bise6.blackberry> Or the PERL guys Sent from my Verizon Wireless BlackBerry -----Original Message----- From: Kevin Miller Sender: mailscanner-bounces@lists.mailscanner.info Date: Thu, 2 Feb 2012 08:57:38 To: 'MailScanner discussion' Reply-To: MailScanner discussion Subject: RE: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net Alex Broens wrote: > > Amazing! > > Apart from the fact that Spam Eating Monkey seems to be using borked > whois data. (whois.sc says mailscanner.info was first seen in Jan > 2004), > > Whoever rejects with that kind of BL is [BEEP]!!!... > As if a fresh domain would be a safe sign of a spammy domain. > > lets hope it was a trap box :) Maybe it was a set up by those Amivis guys. ;-) ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357-- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From campbell at cnpapers.com Thu Feb 2 19:47:59 2012 From: campbell at cnpapers.com (Steve Campbell) Date: Thu Feb 2 19:48:40 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net In-Reply-To: References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> Message-ID: <4F2AE86F.6050504@cnpapers.com> I'm wondering if it's just people reporting for the heck of it. I've recently seen some yahoo IPs along with some other popular domains blocked by spamcop. I thought they did some verification before adding IPs. steve campbell On 2/2/2012 11:56 AM, Stephen Swaney wrote: > Heads up. > > Feb 2 08:42:39 dg xxxx[25658]: o118gO256586044300 #721 end i=172.21.1.31 p="" f="lan,relay,no_ptr,quit,ipv6" h="mailserver.zzzz.com" m=0/1 b=11310 R=1 t=15 l="550 5.7.1 rejected content, black listed www.mailscanner.info by fresh15.spameatingmonkey.net. #762 #895 (o118gO256586044300)" p0f="(unknown) hops 0? > > http://spameatingmonkey.com/lookup?check=www.mailscanner.info&submit=submit > > This can block mail if the default MailScanner signature is used or replied to. > > Steve > --- > Steve Swaney > steve@fsl.com > From mailscanner at joolee.nl Thu Feb 2 20:23:30 2012 From: mailscanner at joolee.nl (Joolee) Date: Thu Feb 2 20:24:20 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net In-Reply-To: <4F2AE86F.6050504@cnpapers.com> References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> <4F2AE86F.6050504@cnpapers.com> Message-ID: Even Google seems to be blocking this for some reason, this whole conversation is listed as "*Due to a filter you created, this message was not sent to Spam.*" in mij Apps account. Never had this before with this mailinglist (or any other) To bad it isn't possible to see why something is blocked by GMail. On 2 February 2012 20:47, Steve Campbell wrote: > I'm wondering if it's just people reporting for the heck of it. I've > recently seen some yahoo IPs along with some other popular domains > blocked by spamcop. > > I thought they did some verification before adding IPs. > > steve campbell > > > On 2/2/2012 11:56 AM, Stephen Swaney wrote: > >> Heads up. >> >> Feb 2 08:42:39 dg xxxx[25658]: o118gO256586044300 #721 end i=172.21.1.31 >> p="" f="lan,relay,no_ptr,quit,ipv6" h="mailserver.zzzz.com" m=0/1 >> b=11310 R=1 t=15 l="550 5.7.1 rejected content, black listed >> www.mailscanner.info by fresh15.spameatingmonkey.net. #762 #895 >> (o118gO256586044300)" p0f="(unknown) hops 0? >> >> http://spameatingmonkey.com/**lookup?check=www.mailscanner.** >> info&submit=submit >> >> This can block mail if the default MailScanner signature is used or >> replied to. >> >> Steve >> --- >> Steve Swaney >> steve@fsl.com >> >> > -- > MailScanner mailing list > mailscanner@lists.mailscanner.**info > http://lists.mailscanner.info/**mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/**posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120202/6d1e9d32/attachment.html From maxsec at gmail.com Thu Feb 2 21:13:58 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Thu Feb 2 21:14:07 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net In-Reply-To: References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> <4F2AE86F.6050504@cnpapers.com> Message-ID: not spammed at my gmail.. -- Martin Hepworth Oxford, UK On 2 February 2012 20:23, Joolee wrote: > Even Google seems to be blocking this for some reason, this whole > conversation is listed as "*Due to a filter you created, this message was > not sent to Spam.*" in mij Apps account. Never had this before with this > mailinglist (or any other) > To bad it isn't possible to see why something is blocked by GMail. > > > On 2 February 2012 20:47, Steve Campbell wrote: > >> I'm wondering if it's just people reporting for the heck of it. I've >> recently seen some yahoo IPs along with some other popular domains >> blocked by spamcop. >> >> I thought they did some verification before adding IPs. >> >> steve campbell >> >> >> On 2/2/2012 11:56 AM, Stephen Swaney wrote: >> >>> Heads up. >>> >>> Feb 2 08:42:39 dg xxxx[25658]: o118gO256586044300 #721 end >>> i=172.21.1.31 p="" f="lan,relay,no_ptr,quit,ipv6" h="mailserver.zzzz.com" >>> m=0/1 b=11310 R=1 t=15 l="550 5.7.1 rejected content, black listed >>> www.mailscanner.info by fresh15.spameatingmonkey.net. #762 #895 >>> (o118gO256586044300)" p0f="(unknown) hops 0? >>> >>> http://spameatingmonkey.com/**lookup?check=www.mailscanner.** >>> info&submit=submit >>> >>> This can block mail if the default MailScanner signature is used or >>> replied to. >>> >>> Steve >>> --- >>> Steve Swaney >>> steve@fsl.com >>> >>> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.**info >> http://lists.mailscanner.info/**mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/**posting >> >> Support MailScanner development - buy the book off the website! >> > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120202/4fe2d290/attachment.html From ms-list at alexb.ch Thu Feb 2 21:53:53 2012 From: ms-list at alexb.ch (Alex Broens) Date: Thu Feb 2 21:54:04 2012 Subject: www.mailscanner.info blacklisted by fresh15.spameatingmonkey.net In-Reply-To: References: <5FE509CD-6E4E-4F4E-9A10-2B2163AEF139@fsl.com> Message-ID: <4F2B05F1.9050908@alexb.ch> On 02/02/2012 05:56 PM, Stephen Swaney wrote: > Heads up. > > Feb 2 08:42:39 dg xxxx[25658]: o118gO256586044300 #721 end i=172.21.1.31 p="" f="lan,relay,no_ptr,quit,ipv6" h="mailserver.zzzz.com" m=0/1 b=11310 R=1 t=15 l="550 5.7.1 rejected content, black listed www.mailscanner.info by fresh15.spameatingmonkey.net. #762 #895 (o118gO256586044300)" p0f="(unknown) hops 0? > > http://spameatingmonkey.com/lookup?check=www.mailscanner.info&submit=submit > > This can block mail if the default MailScanner signature is used or replied to. > > Steve > --- > Steve Swaney > steve@fsl.com > Just got this: Hello, We have completed removal of 'mailscanner.info' from all applicable lists. To confirm this, go to: http://spameatingmonkey.com/lookup/mailscanner.info If you have any problems or questions, please contact us at admin@spameatingmonkey.com or use the contact form on our website. Thank you, SEM Admin From stu at spacehopper.org Sat Feb 4 00:01:18 2012 From: stu at spacehopper.org (Stuart Henderson) Date: Sat Feb 4 00:01:37 2012 Subject: Question about the HOLD header check: why use "Received" ? References: <4F283EC4.6080504@mindconnect.nl> Message-ID: On 2012-01-31, Martin Hepworth wrote: > Because using a hold queue makes it more smtp agnostic It's not agnostic to queue implementation though. For example long queue IDs in the current stable verson of Postfix break mailscanner. From maxsec at gmail.com Sat Feb 4 12:33:27 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Sat Feb 4 12:33:36 2012 Subject: Question about the HOLD header check: why use "Received" ? In-Reply-To: References: <4F283EC4.6080504@mindconnect.nl> Message-ID: On Saturday, 4 February 2012, Stuart Henderson wrote: > On 2012-01-31, Martin Hepworth wrote: >> Because using a hold queue makes it more smtp agnostic > > It's not agnostic to queue implementation though. For example long > queue IDs in the current stable verson of Postfix break mailscanner. > More agnostic not completely as you need to understand the queue file etc. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120204/54fa09cb/attachment.html From glenn.steen at gmail.com Tue Feb 7 00:20:05 2012 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue Feb 7 00:20:15 2012 Subject: Question about the HOLD header check: why use "Received" ? In-Reply-To: References: <4F283EC4.6080504@mindconnect.nl> Message-ID: Just to add my .02 SEK ... :-) Postfix has, to my knowledge, no way of feeding multiple messages )semi-simultaneosly) into a filter/milter/whatever... The only way around this limitation of the officially supported APIs is to stuff the files somewhere Postfix will leave them alone, plunder them, rip them apart and reconstruct them as entirely new queue files that eventually get reintroduced to Postfix (or not:-). The batch-processing behaviour of MailScanner is central to its power/performance. According to some PF activists, it is MailScanners only selling point, but... We know better:-). Now, there have been basically two apporoaches to this problem, either a "two-instance setup" that worked really badly, or the "one instance with the hold-trick#. The latter is useful, safe and has worked well for several years... Doesn't mean you couldn't do it differenly... Hugo van der Koij published a very nifty variation a few yesrs ago, use gmane to find it). To answer the question about "why received:?"... Well, according to the RFCs this is about the first thing an MTA need stick in there, even when dealing with "locally generated email", so it is safe to assume it is present. As mentioned in this thread, at least two variants that don't use Received: have seen the light of day... and you could probably do all sorts of silliness... But the main part isn't about that tiny detail,... it is about getting the queue files into hold, so that Postfix don't try do anything with them (Postfix don't do queue file locking, since ... Well, it's not needed internally). Now, about the newfangled long, non-repeatable queue IDs, I'd say ... don't use them... Not until more systems have been updated to PF 2.9 ... I imagine most PF systems are at best 2.7 today, at worst ... a lot older... (CentOS 5 anyone..?:-). In time someone (possibly me, possibly Jules, possibly... someone else...:-) will find time to implement support for them, BUT ... we really don't need it, due to the entropy MailScanner add to the short/repeating queue ID, to make them virtually non-repeating. Hope that this is of interrest to someone ...:-) Cheers! -- -- Glenn On 4 February 2012 13:33, Martin Hepworth wrote: > > > On Saturday, 4 February 2012, Stuart Henderson wrote: >> On 2012-01-31, Martin Hepworth wrote: >>> Because using a hold queue makes it more smtp agnostic >> >> It's not agnostic to queue implementation though. For example long >> queue IDs in the current stable verson of Postfix break mailscanner. >> > > More agnostic not completely as you need to understand the queue file etc. > > >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> > > -- > -- > Martin Hepworth > Oxford, UK > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From rich at mail.wvnet.edu Thu Feb 9 16:44:38 2012 From: rich at mail.wvnet.edu (Richard Lynch) Date: Thu Feb 9 16:44:53 2012 Subject: Scanning outbound mail? Message-ID: <4F33F7F6.8060800@mail.wvnet.edu> Hi Everyone, We currently don't use MailScanner to scan outbound mail -- we only scan inbound messages. We do use clamav with some of the sanesecurity DBs on outbound but that's it. Scanning outbound mail would be problematic because of false positives and differing requirements. For example, I don't want to bounce spam detected messages on inbound but on outbound it would probably be a requirement so that the sender (one of our users) would know that their message wasn't sent. So, I'm trying to get a feel for what other sites do. Do you use MailScanner for outbound mail? If so how do you handle messages that are rejected? Do you bounce it or just ignore it or what? I appreciate any input or advise anyone wants to offer. Richard Lynch WVNET -- From ka at pacific.net Thu Feb 9 18:34:26 2012 From: ka at pacific.net (Ken A) Date: Thu Feb 9 18:34:39 2012 Subject: Scanning outbound mail? In-Reply-To: <4F33F7F6.8060800@mail.wvnet.edu> References: <4F33F7F6.8060800@mail.wvnet.edu> Message-ID: <4F3411B2.7020209@pacific.net> On 2/9/2012 10:44 AM, Richard Lynch wrote: > > Hi Everyone, > > We currently don't use MailScanner to scan outbound mail -- we only scan > inbound messages. We do use clamav with some of the sanesecurity DBs on > outbound but that's it. Scanning outbound mail would be problematic > because of false positives and differing requirements. For example, I > don't want to bounce spam detected messages on inbound but on outbound > it would probably be a requirement so that the sender (one of our users) > would know that their message wasn't sent. > > So, I'm trying to get a feel for what other sites do. Do you use > MailScanner for outbound mail? If so how do you handle messages that are > rejected? Do you bounce it or just ignore it or what? We only use MailScanner on outbound from web servers. On outgoing from users (submission or webmail), we run several milters, including clamav w/sanesecurity, milter-limit, and have a few scripts that watch logs for odd behavior. Suspicious outgoing mail from users is much less common and is usually quarantined for asap inspection. There are very rare circumstances where we might bounce mail from a local user - user infected, or a brain-dead autoresponders. Ken > I appreciate any input or advise anyone wants to offer. > > Richard Lynch > WVNET > > -- Ken Anderson Pacific Internet - http://www.pacific.net Latest Pacific.Net Status - http://twitter.com/pacnetstatus From john at tradoc.fr Fri Feb 10 08:05:30 2012 From: john at tradoc.fr (John Wilcock) Date: Fri Feb 10 08:06:00 2012 Subject: Scanning outbound mail? In-Reply-To: <4F33F7F6.8060800@mail.wvnet.edu> References: <4F33F7F6.8060800@mail.wvnet.edu> Message-ID: <4F34CFCA.9010405@tradoc.fr> Le 09/02/2012 17:44, Richard Lynch a ?crit : > So, I'm trying to get a feel for what other sites do. Do you use > MailScanner for outbound mail? If so how do you handle messages that > are rejected? Do you bounce it or just ignore it or what? I have things set up with rulesets, to bounce spam and to notify sender of virus/filename/filetype violations for outbound only. On my small site this has never posed any problems, though for larger sites you'd have to think about the volume implications if an internal sender managed to get infected with a spambot. John. -- -- Over 5000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From rich at mail.wvnet.edu Fri Feb 10 13:41:20 2012 From: rich at mail.wvnet.edu (Richard Lynch) Date: Fri Feb 10 13:41:36 2012 Subject: Scanning outbound mail? In-Reply-To: <4F34CFCA.9010405@tradoc.fr> References: <4F33F7F6.8060800@mail.wvnet.edu> <4F34CFCA.9010405@tradoc.fr> Message-ID: <4F351E80.7070109@mail.wvnet.edu> John Wilcock wrote: > Le 09/02/2012 17:44, Richard Lynch a ?crit : >> So, I'm trying to get a feel for what other sites do. Do you use >> MailScanner for outbound mail? If so how do you handle messages that >> are rejected? Do you bounce it or just ignore it or what? > > I have things set up with rulesets, to bounce spam and to notify > sender of virus/filename/filetype violations for outbound only. > > On my small site this has never posed any problems, though for larger > sites you'd have to think about the volume implications if an internal > sender managed to get infected with a spambot. > > John. > And this is the exact problem that has brought this question up. We've had some users get infected and spew spam/phishing/etc out in mass through our outbound smtp gateway. This caused the gateway to get blacklisted which impacted everyone. So the question has come up about filtering outbound mail. I don't know if it's a good idea or not. I don't want to create a bunch of problems not thought of -- the cure being worse than the ailment! What do your rulesets look like? Thanks, Rich -- Obstacles are those frightening things we see when we take our eyes off our goal. Henry Ford From dgottsc at emory.edu Fri Feb 10 14:14:52 2012 From: dgottsc at emory.edu (Gottschalk, David) Date: Fri Feb 10 14:15:08 2012 Subject: Scanning outbound mail? In-Reply-To: <4F351E80.7070109@mail.wvnet.edu> References: <4F33F7F6.8060800@mail.wvnet.edu> <4F34CFCA.9010405@tradoc.fr> <4F351E80.7070109@mail.wvnet.edu> Message-ID: <29C400C10C01FA4C8405D52684332F6902AAA333@e14mbx15n.Enterprise.emory.net> We filter all outbound email for this exact reason. We had a really big problem with compromised accounts sending spam to the Internet. We'd then get blacklisted by a large number of domains, and it effected everyone. Currently, we rarely get false positives for outbound spam. I consider this a better alternative than getting blacklisted by 20+ sites and RBLs. David Gottschalk Emory University UTS Messaging Team -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Richard Lynch Sent: Friday, February 10, 2012 8:41 AM To: MailScanner discussion Subject: Re: Scanning outbound mail? John Wilcock wrote: > Le 09/02/2012 17:44, Richard Lynch a ?crit : >> So, I'm trying to get a feel for what other sites do. Do you use >> MailScanner for outbound mail? If so how do you handle messages that >> are rejected? Do you bounce it or just ignore it or what? > > I have things set up with rulesets, to bounce spam and to notify > sender of virus/filename/filetype violations for outbound only. > > On my small site this has never posed any problems, though for larger > sites you'd have to think about the volume implications if an internal > sender managed to get infected with a spambot. > > John. > And this is the exact problem that has brought this question up. We've had some users get infected and spew spam/phishing/etc out in mass through our outbound smtp gateway. This caused the gateway to get blacklisted which impacted everyone. So the question has come up about filtering outbound mail. I don't know if it's a good idea or not. I don't want to create a bunch of problems not thought of -- the cure being worse than the ailment! What do your rulesets look like? Thanks, Rich -- Obstacles are those frightening things we see when we take our eyes off our goal. Henry Ford -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ________________________________ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error, please contact the sender by reply e-mail message and destroy all copies of the original message (including attachments). From john at tradoc.fr Fri Feb 10 14:21:41 2012 From: john at tradoc.fr (John Wilcock) Date: Fri Feb 10 14:21:58 2012 Subject: Scanning outbound mail? In-Reply-To: <4F351E80.7070109@mail.wvnet.edu> References: <4F33F7F6.8060800@mail.wvnet.edu> <4F34CFCA.9010405@tradoc.fr> <4F351E80.7070109@mail.wvnet.edu> Message-ID: <4F3527F5.2080602@tradoc.fr> Le 10/02/2012 14:41, Richard Lynch a ?crit : > What do your rulesets look like? Pretty simple really! Note that postfix is set up to ensure that authentication is compulsory to use one of our domain names in the envelope sender, which simplifies matters somewhat. If you don't do this, you need to include your IP ranges in the rulesets instead of domain names. spam.actions.rules From: ourdomain.tld store bounce FromorTo: default store deliver highspam.actions.rules From: ourdomain.tld store bounce FromorTo: default store bounce.rules and notify.senders.rules From: ourdomain.tld yes FromorTo: default no deliver.cleaned.rules From: ourdomain.tld no FromorTo: default yes and in MailScanner.conf Deliver Cleaned Messages = %rules-dir%/deliver.cleaned.rules Notify Senders = %rules-dir%/notify.senders.rules Spam Checks = %rules-dir%/spam.checks.rules Spam Actions = %rules-dir%/spam.actions.rules Enable Spam Bounce = %rules-dir%/bounce.rules John. -- -- Over 5000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From phaleintx at gmail.com Fri Feb 10 21:21:35 2012 From: phaleintx at gmail.com (Phil Hale) Date: Fri Feb 10 21:21:46 2012 Subject: Scanning outbound mail? In-Reply-To: <4F33F7F6.8060800@mail.wvnet.edu> References: <4F33F7F6.8060800@mail.wvnet.edu> Message-ID: <4F358A5F.3050607@gmail.com> We have set up two sets of separate inbound only and outbound only servers. This allows us to have a clean stream both in and out. The inbound rules being much more restrictive and the outbound more leanient. We also use our outbound as our authenticated relay hosts so that those not using Exchange (which smart host out) use the same final SMTP demark from out Campus. This allows us to set up clean DKIM/SPF rules for mail leaving our Campus for both our Exchange/Outlook users as well as those of us who prefer IMAP/Thunderbird. Phil Hale Systems Programmer II - Linux Systems Administrator Information Technology - Systems Department Texas A&M University-Corpus Christi On 02/09/2012 10:44 AM, Richard Lynch wrote: > > Hi Everyone, > > We currently don't use MailScanner to scan outbound mail -- we only > scan inbound messages. We do use clamav with some of the sanesecurity > DBs on outbound but that's it. Scanning outbound mail would be > problematic because of false positives and differing requirements. > For example, I don't want to bounce spam detected messages on inbound > but on outbound it would probably be a requirement so that the sender > (one of our users) would know that their message wasn't sent. > > So, I'm trying to get a feel for what other sites do. Do you use > MailScanner for outbound mail? If so how do you handle messages that > are rejected? Do you bounce it or just ignore it or what? > > I appreciate any input or advise anyone wants to offer. > > Richard Lynch > WVNET > > From Jeff.Mills at sydneytech.com.au Sun Feb 12 21:42:47 2012 From: Jeff.Mills at sydneytech.com.au (Jeff Mills) Date: Sun Feb 12 21:43:15 2012 Subject: clamd permission denied Message-ID: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7F93DEFA9@SERVER01.sts.local> Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: fb3fbe.png Type: image/png Size: 13993 bytes Desc: fb3fbe.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/4ca7b483/fb3fbe.png -------------- next part -------------- A non-text attachment was scrubbed... Name: 3bcbb1.png Type: image/png Size: 1014 bytes Desc: 3bcbb1.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/4ca7b483/3bcbb1.png -------------- next part -------------- A non-text attachment was scrubbed... Name: 8ff87d.png Type: image/png Size: 1253 bytes Desc: 8ff87d.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/4ca7b483/8ff87d.png -------------- next part -------------- A non-text attachment was scrubbed... Name: a705d3.png Type: image/png Size: 1240 bytes Desc: a705d3.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/4ca7b483/a705d3.png -------------- next part -------------- A non-text attachment was scrubbed... Name: c5b7dd.png Type: image/png Size: 1151 bytes Desc: c5b7dd.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/4ca7b483/c5b7dd.png -------------- next part -------------- A non-text attachment was scrubbed... Name: image3e86c5.GIF Type: image/gif Size: 938 bytes Desc: image3e86c5.GIF Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/4ca7b483/image3e86c5.gif From Jeff.Mills at sydneytech.com.au Sun Feb 12 22:45:51 2012 From: Jeff.Mills at sydneytech.com.au (Jeff Mills) Date: Sun Feb 12 22:46:18 2012 Subject: clamd permission denied In-Reply-To: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7F93DEFA9@SERVER01.sts.local> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7F93DEFA9@SERVER01.sts.local> Message-ID: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7F93DEFAA@SERVER01.sts.local> Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: a7bae4.png Type: image/png Size: 13993 bytes Desc: a7bae4.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/189bbf33/a7bae4-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: fcd609.png Type: image/png Size: 1014 bytes Desc: fcd609.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/189bbf33/fcd609-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: a856fb.png Type: image/png Size: 1253 bytes Desc: a856fb.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/189bbf33/a856fb-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: 66519b.png Type: image/png Size: 1240 bytes Desc: 66519b.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/189bbf33/66519b-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: d3e897.png Type: image/png Size: 1151 bytes Desc: d3e897.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/189bbf33/d3e897-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: image46822a.GIF Type: image/gif Size: 938 bytes Desc: image46822a.GIF Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120213/189bbf33/image46822a-0001.gif From terry at graybell.net Mon Feb 13 00:05:16 2012 From: terry at graybell.net (terry@graybell.net) Date: Mon Feb 13 00:05:30 2012 Subject: clamd permission denied In-Reply-To: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7F93DEFA9@SERVER01.sts.local> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7F93DEFA9@SERVER01.sts.local> Message-ID: If you have AppArmor installed you need to make a change to the AppArmor configuration: Edit the AppArmor profile /etc/apparmor.d/usr.sbin.clamd Add these 2 lines: /var/spool/MailScanner/** rw, /var/spool/MailScanner/incoming/** rw, Then, reload AppArmor /etc/init.d/apparmor reload Check your log files for the return of the error. This error is widely known and has been documented well. If you still have issues then please reply. Terry On Mon, 13 Feb 2012 08:42:47 +1100, Jeff Mills wrote: > I have two servers and one of them has started having issues with > permissions in the incoming dir. > > MailScanner[16804]: Clamd::ERROR:: UNKNOWN CLAMD RETURN ./ > 74E6C1C2E344.A404C.header/Access denied. ERROR :: > /var/spool/MailScanner/incoming/16804 > > When I check that directory, I can see that MailScanner has given no > access to the group on the header file, so obviously clamav can?t read it. > drwxr-x--- 2 postfix clamav 80 Feb 13 08:33 74E6C1C2E344.A404C > -rw------- 1 postfix clamav 1326 Feb 13 08:33 74E6C1C2E344.A404C.header > -rw-rw-r-- 1 postfix clamav 13678 Feb 13 08:33 74E6C1C2E344.A404C.message > > My mailscanner group is clamav and user is postfix. > Permissions are set to 0640. > > On the machine that works fine, the permissions look like this: > > drwxr-x--- 2 postfix clamav 60 Feb 13 08:34 F3913D3E8F4.A4D35 > -rw-r----- 1 postfix clamav 1414 Feb 13 08:34 F3913D3E8F4.A4D35.header > -rw-rw-r-- 1 postfix clamav 2245 Feb 13 08:34 F3913D3E8F4.A4D35.message > > > Can anyone offer some help on this? I don?t understand why this is only > happening on one server. The configs are the same. > > > > Jeff Mills > > p: +61 2 8212 4722 > e: Jeff.Mills@sydneytech.com.au > > > > [cid:fb3fbe.png@24c107ed.4e8633ef] > > > > [cid:3bcbb1.png@634751a7.4183fe20] > [cid:8ff87d.png@905ba500.4a8b78f8] > [cid:a705d3.png@d3652ae7.4eaa700d] > > [cid:c5b7dd.png@3d8fcaa8.41a28de7] > > > > > Sydney Technology Solutions > p: +61 2 8212 4722 > f: +61 2 9708 4977 > w: www.sydneytech.com.au > > Unit F10, 101 Rookwood Road > Yagoona NSW 2199 > > > > > Living our values, achieving success > Sydney Technology Solutions? operating philosophy is based on honesty, > enthusiasm, respect, ownership, excellence and service. These values guide > the way we manage our business and the way we service yours. > > > > [cid:image3e86c5.GIF@37c9acc9.4ea8dec0] > > Please consider the environment before printing this email message. > > > Disclaimer: > This message contains confidential information and is intended only for > the original recipient. If you are not the original recipient, you should > not disseminate, distribute or copy this e-mail. Please notify Sydney > Technology Solutions immediately by e-mail if you have received this e-mail > by mistake and delete this e-mail from your system. E-mail transmission > cannot be guaranteed to be secure or error-free as information could be > intercepted, corrupted, lost, destroyed, arrive late or incomplete, or > contain viruses. Sydney Technology Solutions therefore does not accept > liability for any errors or omissions in the contents of this message, > which arise as a result of e-mail transmission. If verification is required > please request a hard-copy version. From Denis.Beauchemin at usherbrooke.ca Mon Feb 13 16:16:45 2012 From: Denis.Beauchemin at usherbrooke.ca (Denis Beauchemin) Date: Mon Feb 13 16:17:12 2012 Subject: Scanning outbound mail? In-Reply-To: <4F33F7F6.8060800@mail.wvnet.edu> References: <4F33F7F6.8060800@mail.wvnet.edu> Message-ID: Richard, We scan outbound mail and bounce detected spam. Been doing it for years without any ill effects. Denis > -----Message d'origine----- > De?: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] De la part de Richard Lynch > Envoy??: 9 f?vrier 2012 11:47 > ??: MailScanner discussion > Objet?: Scanning outbound mail? > > > Hi Everyone, > > We currently don't use MailScanner to scan outbound mail -- we only scan > inbound messages. We do use clamav with some of the sanesecurity DBs on > outbound but that's it. Scanning outbound mail would be problematic > because of false positives and differing requirements. For example, I don't > want to bounce spam detected messages on inbound but on outbound it > would probably be a requirement so that the sender (one of our users) > would know that their message wasn't sent. > > So, I'm trying to get a feel for what other sites do. Do you use MailScanner > for outbound mail? If so how do you handle messages that are rejected? Do > you bounce it or just ignore it or what? > > I appreciate any input or advise anyone wants to offer. > > Richard Lynch > WVNET > > > -- > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From ram at netcore.co.in Fri Feb 17 16:11:40 2012 From: ram at netcore.co.in (Ram) Date: Fri Feb 17 16:11:53 2012 Subject: Spam checks first or virus Message-ID: <4F3E7C3C.4090104@netcore.co.in> I noticed that when I upgraded MailScanner to the latest version 4.84 virus checks happen before spam checks Why is this so ? Most of the spams on our server are quarantined or deleted. Should we not just virus scan mails which are being delivered. If this can be configured , how can I do it ? Thanks Ram From robertof at dmtserv.com Fri Feb 17 18:56:55 2012 From: robertof at dmtserv.com (Roberto Fulgado) Date: Fri Feb 17 18:57:14 2012 Subject: "Problems Messages" Message-ID: <4F3EA2F7.3010401@dmtserv.com> Hi There, I have a CentOS 5 server with mailscanner-4.84.3-1 I keep getting this message: Archive: Number of messages: 1 Tries Message Last Tried ===== ======= ========== 6 q1DJlxEe024699 Mon Feb 13 15:10:52 2012 How can I stop MailScanner from sending the same message over and over again? I tried removing the message from the quarantine directory, restarting MailScanner, rebooting the server but to no avail. I read somewhere about --delete-archive option but I don't know if it's available for this version. If it is, how do I use it? Thanks, -- Roberto Fulgado DM&T Service Ltd. Tel: (905)731-0142 ext. 64 Email: robertof@dmtserv.com --------------------------------------------------------------------------------- What good is it if you talk in flowers, and they think in pastry? -- Ashleigh Brilliant -- This message has been scanned by MailScanner. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120217/f8252f5e/attachment.html From mark at msapiro.net Sat Feb 18 17:35:33 2012 From: mark at msapiro.net (Mark Sapiro) Date: Sat Feb 18 17:35:46 2012 Subject: Spam checks first or virus In-Reply-To: <4F3E7C3C.4090104@netcore.co.in> References: <4F3E7C3C.4090104@netcore.co.in> Message-ID: <4F3FE165.1060807@msapiro.net> On 2/17/2012 8:11 AM, Ram wrote: > I noticed that when I upgraded MailScanner to the latest version 4.84 > virus checks happen before spam checks > > Why is this so ? This was done to support detection of "spam-viruses", i.e., spam detected by virus scanner signatures such as those from . See the entries for 4.78.3 at > If this can be configured , how can I do it ? It is not configurable. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan From eric_le_corre at msn.com Tue Feb 21 16:19:42 2012 From: eric_le_corre at msn.com (mul) Date: Tue Feb 21 16:20:09 2012 Subject: Problem winmail.dat and TNEF Message-ID: Hello, i Have Mailscanner 4.83.25 as gateway for my exchange 2010. Some users receive bad mail with winmail.what is weird is that same email sent from outside to multiple recipients, will be good for three users and the last has winmail.dat. I look in logs and i found this : Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: hold: header Received: from ecisnet196.ec-is.net (ecisnet196.ec-is.net [62.62.128.89])??by mailhost.iiiiii.fr (Postfix) with ESMTP id 45651223C32??for ; Tue, 21 Feb 2012 16:26:34 +010 from ecisnet196.ec- is.net[62.62.128.89]; from= to= proto=ESMTP helo= Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: message- id= Feb 21 16:26:34 ssgmail11 postfix/smtpd[13325]: disconnect from ecisnet196.ec- is.net[62.62.128.89] Feb 21 16:26:34 ssgmail11 MailScanner[13458]: New Batch: Scanning 1 messages, 38837 bytes Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Expanding TNEF archive at /var/spool/MailScanner/incoming/13458/45651223C32.A18CA/winmail.dat Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Trying to unpack nwinmail.dat in message 45651223C32.A18CA, could not create subdirectory 45651223C32.A18CA//tnefRDxo5W, failed to unpack TNEF message Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Corrupt TNEF winmail.dat that cannot be analysed in message 45651223C32.A18CA Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Virus and Content Scanning: Starting Feb 21 16:26:37 ssgmail11 MailScanner[13458]: Saved entire message to /var/spool/MailScanner/quarantine/20120221/45651223C32.A18CA It is problem with my mailwatch ? I found that others guys on forum had update TNEF.PM with the last version, how to do that ? From mikea at mikea.ath.cx Tue Feb 21 16:48:34 2012 From: mikea at mikea.ath.cx (Mike Andrews) Date: Tue Feb 21 16:48:46 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: Message-ID: <20120221164834.GB15262@mikea.ath.cx> On Tue, Feb 21, 2012 at 04:19:42PM +0000, mul wrote: > Hello, > > i Have Mailscanner 4.83.25 as gateway for my exchange 2010. > > Some users receive bad mail with winmail.what is weird is that same email sent > from outside to multiple recipients, will be good for three users and the last > has winmail.dat. This is dependent on how the outside user sends the mail. I have had this exact problem many times. In each case where person X was getting winmail.dat attachments from , while others were getting HTML mail from the same sender, it has turned out that the sender at had set up mail to person X differently from the other recipients who were getting HTML mail. Each time, I have had the sender swear up and down that all recipients were set up the same way, and then received an apology from the sending site's mail admin. -- Mike Andrews, W5EGO mikea@mikea.ath.cx Tired old sysadmin From alex at vidadigital.com.pa Tue Feb 21 16:51:52 2012 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue Feb 21 16:52:07 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: Message-ID: Looks like a permissions problem. What happens if you switch the tnef decoders? On Tue, Feb 21, 2012 at 11:19 AM, mul wrote: > Hello, > > i Have Mailscanner 4.83.25 as gateway for my exchange 2010. > > Some users receive bad mail with winmail.what is weird is that same email > sent > from outside to multiple recipients, will be good for three users and the > last > has winmail.dat. > I look in logs and i found this : > > > Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: hold: header > Received: from ecisnet196.ec-is.net (ecisnet196.ec-is.net[62.62.128.89])??by > mailhost.iiiiii.fr (Postfix) with ESMTP id 45651223C32??for > ; Tue, 21 Feb 2012 16:26:34 +010 from > ecisnet196.ec- > is.net[62.62.128.89]; from= > to= proto=ESMTP helo= > Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: message- > id= > Feb 21 16:26:34 ssgmail11 postfix/smtpd[13325]: disconnect from > ecisnet196.ec- > is.net[62.62.128.89] > Feb 21 16:26:34 ssgmail11 MailScanner[13458]: New Batch: Scanning 1 > messages, > 38837 bytes > Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Expanding TNEF archive > at /var/spool/MailScanner/incoming/13458/45651223C32.A18CA/winmail.dat > Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Trying to unpack > nwinmail.dat in > message 45651223C32.A18CA, could not create subdirectory > 45651223C32.A18CA//tnefRDxo5W, failed to unpack TNEF message > Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Corrupt TNEF winmail.dat that > cannot be analysed in message 45651223C32.A18CA > Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Virus and Content Scanning: > Starting > Feb 21 16:26:37 ssgmail11 MailScanner[13458]: Saved entire message > to /var/spool/MailScanner/quarantine/20120221/45651223C32.A18CA > > It is problem with my mailwatch ? > I found that others guys on forum had update TNEF.PM with the last > version, > how to do that ? > > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ +507-6781-9505 +507-832-6725 +1-440-253-9789 (USA) Follow @AlexNeuman on Twitter http://facebook.com/vidadigital -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120221/8709042c/attachment.html From alex at vidadigital.com.pa Tue Feb 21 17:07:50 2012 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue Feb 21 17:08:00 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <20120221164834.GB15262@mikea.ath.cx> References: <20120221164834.GB15262@mikea.ath.cx> Message-ID: That's why we should write our local legislators and make winmail.dat punishable by tarring and feathering :-) On Tue, Feb 21, 2012 at 11:48 AM, Mike Andrews wrote: > On Tue, Feb 21, 2012 at 04:19:42PM +0000, mul wrote: > > Hello, > > > > i Have Mailscanner 4.83.25 as gateway for my exchange 2010. > > > > Some users receive bad mail with winmail.what is weird is that same > email sent > > from outside to multiple recipients, will be good for three users and > the last > > has winmail.dat. > > This is dependent on how the outside user sends the mail. I have had this > exact problem many times. In each case where person X was getting > winmail.dat > attachments from , while others were getting HTML mail from the > same > sender, it has turned out that the sender at had set up mail to > person X differently from the other recipients who were getting HTML mail. > > Each time, I have had the sender swear up and down that all recipients were > set up the same way, and then received an apology from the sending site's > mail admin. > > -- > Mike Andrews, W5EGO > mikea@mikea.ath.cx > Tired old sysadmin > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ +507-6781-9505 +507-832-6725 +1-440-253-9789 (USA) Follow @AlexNeuman on Twitter http://facebook.com/vidadigital -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120221/ec49dad9/attachment.html From Jeff.Mills at sydneytech.com.au Tue Feb 21 21:01:20 2012 From: Jeff.Mills at sydneytech.com.au (Jeff Mills) Date: Tue Feb 21 21:01:39 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: Message-ID: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> I had to change to the internal TNEF decoder to fix this problem. It broke for me after upgrading to the latest MailScanner. Apologies about the top posting - our email signature sits itself on the top even if I post to the bottom :/ ----------------------------- Jeff Mills Sydney Technology Solutions Pty Ltd Unit F10, 101 Rookwood Road Yagoona, New South Wales 2199 Phone: 02 8212 4722 Email: Jeff.Mills@sydneytech.com.au Web : www.sydneytech.com.au Living our values, achieving success Sydney Technology Solutions' operating philosophy is based on honesty, enthusiasm, respect, ownership, excellence and service. These values guide the way we manage our business and the way we service yours. P Please consider the environment before printing this email Disclaimer: Sydney Technology Solutions accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. ----------------------------- -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of mul Sent: Wednesday, 22 February 2012 3:20 AM To: mailscanner@lists.mailscanner.info Subject: Problem winmail.dat and TNEF Hello, i Have Mailscanner 4.83.25 as gateway for my exchange 2010. Some users receive bad mail with winmail.what is weird is that same email sent from outside to multiple recipients, will be good for three users and the last has winmail.dat. I look in logs and i found this : Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: hold: header Received: from ecisnet196.ec-is.net (ecisnet196.ec-is.net [62.62.128.89])??by mailhost.iiiiii.fr (Postfix) with ESMTP id 45651223C32??for ; Tue, 21 Feb 2012 16:26:34 +010 from ecisnet196.ec- is.net[62.62.128.89]; from= to= proto=ESMTP helo= Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: message- id= Feb 21 16:26:34 ssgmail11 postfix/smtpd[13325]: disconnect from ecisnet196.ec- is.net[62.62.128.89] Feb 21 16:26:34 ssgmail11 MailScanner[13458]: New Batch: Scanning 1 messages, 38837 bytes Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Expanding TNEF archive at /var/spool/MailScanner/incoming/13458/45651223C32.A18CA/winmail.dat Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Trying to unpack nwinmail.dat in message 45651223C32.A18CA, could not create subdirectory 45651223C32.A18CA//tnefRDxo5W, failed to unpack TNEF message Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Corrupt TNEF winmail.dat that cannot be analysed in message 45651223C32.A18CA Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Virus and Content Scanning: Starting Feb 21 16:26:37 ssgmail11 MailScanner[13458]: Saved entire message to /var/spool/MailScanner/quarantine/20120221/45651223C32.A18CA It is problem with my mailwatch ? I found that others guys on forum had update TNEF.PM with the last version, how to do that ? -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This email has been scanned for viruses and dangerous content by Sydney Technology Solutions MailMaster Email Protection Services. For more information please visit http://www.sydneytech.com.au :Scanned by MailMaster1: From phil.randal at hoopleltd.co.uk Tue Feb 21 22:13:00 2012 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Tue Feb 21 22:13:19 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> Check the list archives for posts relating to TNEF. I had to revert TNEF.pm to the previous version for it to work correctly here. Cheers, Phil -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Jeff Mills Sent: 21 February 2012 21:01 To: 'MailScanner discussion' Subject: RE: Problem winmail.dat and TNEF I had to change to the internal TNEF decoder to fix this problem. It broke for me after upgrading to the latest MailScanner. Apologies about the top posting - our email signature sits itself on the top even if I post to the bottom :/ ----------------------------- Jeff Mills Sydney Technology Solutions Pty Ltd Unit F10, 101 Rookwood Road Yagoona, New South Wales 2199 Phone: 02 8212 4722 Email: Jeff.Mills@sydneytech.com.au Web : www.sydneytech.com.au Living our values, achieving success Sydney Technology Solutions' operating philosophy is based on honesty, enthusiasm, respect, ownership, excellence and service. These values guide the way we manage our business and the way we service yours. P Please consider the environment before printing this email Disclaimer: Sydney Technology Solutions accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. ----------------------------- -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of mul Sent: Wednesday, 22 February 2012 3:20 AM To: mailscanner@lists.mailscanner.info Subject: Problem winmail.dat and TNEF Hello, i Have Mailscanner 4.83.25 as gateway for my exchange 2010. Some users receive bad mail with winmail.what is weird is that same email sent from outside to multiple recipients, will be good for three users and the last has winmail.dat. I look in logs and i found this : Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: hold: header Received: from ecisnet196.ec-is.net (ecisnet196.ec-is.net [62.62.128.89])??by mailhost.iiiiii.fr (Postfix) with ESMTP id 45651223C32??for ; Tue, 21 Feb 2012 16:26:34 +010 from ecisnet196.ec- is.net[62.62.128.89]; from= to= proto=ESMTP helo= Feb 21 16:26:34 ssgmail11 postfix/cleanup[13326]: 45651223C32: message- id= Feb 21 16:26:34 ssgmail11 postfix/smtpd[13325]: disconnect from ecisnet196.ec- is.net[62.62.128.89] Feb 21 16:26:34 ssgmail11 MailScanner[13458]: New Batch: Scanning 1 messages, 38837 bytes Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Expanding TNEF archive at /var/spool/MailScanner/incoming/13458/45651223C32.A18CA/winmail.dat Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Trying to unpack nwinmail.dat in message 45651223C32.A18CA, could not create subdirectory 45651223C32.A18CA//tnefRDxo5W, failed to unpack TNEF message Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Corrupt TNEF winmail.dat that cannot be analysed in message 45651223C32.A18CA Feb 21 16:26:34 ssgmail11 MailScanner[13458]: Virus and Content Scanning: Starting Feb 21 16:26:37 ssgmail11 MailScanner[13458]: Saved entire message to /var/spool/MailScanner/quarantine/20120221/45651223C32.A18CA It is problem with my mailwatch ? I found that others guys on forum had update TNEF.PM with the last version, how to do that ? -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This email has been scanned for viruses and dangerous content by Sydney Technology Solutions MailMaster Email Protection Services. For more information please visit http://www.sydneytech.com.au :Scanned by MailMaster1: -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ?Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From andrew at topdog.za.net Wed Feb 22 06:41:01 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Wed Feb 22 06:41:30 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> Message-ID: On 22 Feb 2012, at 12:13 AM, Randal, Phil wrote: > Check the list archives for posts relating to TNEF. > > I had to revert TNEF.pm to the previous version for it to work correctly here. Can someone send me a sample message TNEF encapsulated message, i will fix this, i think its a regression introduced by my temp file fixes. - Andrew -- www.baruwa.org From andrew at topdog.za.net Wed Feb 22 07:52:29 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Wed Feb 22 07:52:44 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> Message-ID: <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> On 22 Feb 2012, at 12:13 AM, Randal, Phil wrote: > Check the list archives for posts relating to TNEF. > > I had to revert TNEF.pm to the previous version for it to work correctly here. The attached patch fixes this issue in a safe way, the previous version is vulnerable to insecure temp file attacks. - Andrew -------------- next part -------------- A non-text attachment was scrubbed... Name: mailscanner-fix-tnef.patch Type: application/octet-stream Size: 676 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120222/7b1f10c8/mailscanner-fix-tnef.obj -------------- next part -------------- -- www.baruwa.org From eric_le_corre at msn.com Wed Feb 22 08:33:02 2012 From: eric_le_corre at msn.com (mul) Date: Wed Feb 22 08:33:26 2012 Subject: Problem winmail.dat and TNEF References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> Message-ID: Andrew Colin Kissa topdog.za.net> writes: > > > On 22 Feb 2012, at 12:13 AM, Randal, Phil wrote: > > > Check the list archives for posts relating to TNEF. > > > > I had to revert TNEF.pm to the previous version for it to work correctly here. > > The attached patch fixes this issue in a safe way, the previous version is vulnerable to insecure > temp file attacks. > > - Andrew > > > Attachment (mailscanner-fix-tnef.patch): application/octet-stream, 676 bytes > > > -- > www.baruwa.org > > > so, what i have to do ? replace TNEF.pm ? i see, i have TNEF.pm in thos folders : /usr/share/MailScanner/MailScanner/TNEF.pm /usr/share/perl5/Convert/TNEF.pm From andrew at topdog.za.net Wed Feb 22 08:52:00 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Wed Feb 22 08:52:47 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> Message-ID: <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> On 22 Feb 2012, at 10:33 AM, mul wrote: > so, what i have to do ? > > replace TNEF.pm ? > No, you need to patch TNEF.pm > > i see, i have TNEF.pm in thos folders : > /usr/share/MailScanner/MailScanner/TNEF.pm > /usr/share/perl5/Convert/TNEF.pm If you are running 4.84.3-1: cd /usr/share/MailScanner/MailScanner/ patch -p3 --dry-run -i ~/mailscanner-fix-tnef.patch patch -p3 -i ~/mailscanner-fix-tnef.patch For earlier versions look at what the patch changes and edit your TNEF.pm file. - Andrew -- www.baruwa.org From eric_le_corre at msn.com Wed Feb 22 10:20:27 2012 From: eric_le_corre at msn.com (mul) Date: Wed Feb 22 10:20:48 2012 Subject: Problem winmail.dat and TNEF References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> Message-ID: Andrew Colin Kissa topdog.za.net> writes: /usr/share/perl5/Convert/TNEF.pm > > If you are running 4.84.3-1: > > cd /usr/share/MailScanner/MailScanner/ > patch -p3 --dry-run -i ~/mailscanner-fix-tnef.patch > patch -p3 -i ~/mailscanner-fix-tnef.patch > and where i can download : mailscanner-fix-tnef.patch ? i dont find this in mailscanner folder download from mailscanner website thanks From phil.randal at hoopleltd.co.uk Wed Feb 22 10:36:12 2012 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Wed Feb 22 10:37:11 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> It was attached to one of Andrew's emails to the list a few hours back. I've tested the fix and it works for me. Thanks Andrew. Now someone with write access needs to get it into the Git repository. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of mul Sent: 22 February 2012 10:20 To: mailscanner@lists.mailscanner.info Subject: Re: Problem winmail.dat and TNEF Andrew Colin Kissa topdog.za.net> writes: /usr/share/perl5/Convert/TNEF.pm > > If you are running 4.84.3-1: > > cd /usr/share/MailScanner/MailScanner/ > patch -p3 --dry-run -i ~/mailscanner-fix-tnef.patch patch -p3 -i > ~/mailscanner-fix-tnef.patch > and where i can download : mailscanner-fix-tnef.patch ? i dont find this in mailscanner folder download from mailscanner website thanks -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ?Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From eric_le_corre at msn.com Wed Feb 22 11:09:01 2012 From: eric_le_corre at msn.com (mul) Date: Wed Feb 22 11:09:21 2012 Subject: Problem winmail.dat and TNEF References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> Message-ID: Randal, Phil hoopleltd.co.uk> writes: > > It was attached to one of Andrew's emails to the list a few hours back. > > I've tested the fix and it works for me. > > Thanks Andrew. > > Now someone with write access needs to get it into the Git repository. > > Cheers, > > Phil > > it is "77939-001.bin" i have to launch : patch -p3 --dry-run -i ~/77939-001.bin patch -p3 -i ~/77939-001.bin ? From phil.randal at hoopleltd.co.uk Wed Feb 22 11:18:48 2012 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Wed Feb 22 11:19:32 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B853D0CC266@HC-EXMBX04.herefordshire.gov.uk> I did it the primitive way. Opened the patch in a text editor to see what it contained, then manually edited TNEF.pm to reflect the changes. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of mul Sent: 22 February 2012 11:09 To: mailscanner@lists.mailscanner.info Subject: Re: Problem winmail.dat and TNEF Randal, Phil hoopleltd.co.uk> writes: > > It was attached to one of Andrew's emails to the list a few hours back. > > I've tested the fix and it works for me. > > Thanks Andrew. > > Now someone with write access needs to get it into the Git repository. > > Cheers, > > Phil > > it is "77939-001.bin" i have to launch : patch -p3 --dry-run -i ~/77939-001.bin patch -p3 -i ~/77939-001.bin ? -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ?Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From andrew at topdog.za.net Wed Feb 22 16:31:20 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Wed Feb 22 16:31:43 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> Message-ID: <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> On 22 Feb 2012, at 12:36 PM, Randal, Phil wrote: > Thanks Andrew. > > Now someone with write access needs to get it into the Git repository. > I have sent it to jules maybe he will find sometime to push it to github. > and where i can download : mailscanner-fix-tnef.patch ? > i dont find this in mailscanner folder download from mailscanner website If the attached version is mangled by the mailing list you can download it here http://topdog-software.com/files/mailscanner-fix-tnef.patch -- www.baruwa.org From eric_le_corre at msn.com Wed Feb 22 17:03:28 2012 From: eric_le_corre at msn.com (mul) Date: Wed Feb 22 17:03:53 2012 Subject: Problem winmail.dat and TNEF References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> Message-ID: Andrew Colin Kissa topdog.za.net> writes: > > > On 22 Feb 2012, at 12:36 PM, Randal, Phil wrote: > > > Thanks Andrew. > > > > Now someone with write access needs to get it into the Git repository. > > > > I have sent it to jules maybe he will find sometime to push it to github. > > > and where i can download : mailscanner-fix-tnef.patch ? > > i dont find this in mailscanner folder download from mailscanner website > > If the attached version is mangled by the mailing list you can download it > here http://topdog-software.com/files/mailscanner-fix-tnef.patch > > -- i tried what you said, but i have erros : patch -p3 --dry-run -i ~/mailscanner-fix-tnef.patch patching file TNEF.pm Hunk #1 FAILED at 229. 1 out of 1 hunk FAILED -- saving rejects to file TNEF.pm.rej root@ssgmail11:/usr/share/MailScanner/MailScanner# patch -p3 -i ~/mailscanner-fix-tnef.patch patching file TNEF.pm Hunk #1 FAILED at 229. 1 out of 1 hunk FAILED -- saving rejects to file TNEF.pm.rej From andrew at topdog.za.net Wed Feb 22 17:19:10 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Wed Feb 22 17:19:32 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> Message-ID: <7EB53240-F59F-4619-8378-BA1B06DD33B2@topdog.za.net> On 22 Feb 2012, at 7:03 PM, mul wrote: > patch -p3 --dry-run -i ~/mailscanner-fix-tnef.patch > patching file TNEF.pm > Hunk #1 FAILED at 229. > 1 out of 1 hunk FAILED -- saving rejects to file TNEF.pm.rej > root@ssgmail11:/usr/share/MailScanner/MailScanner# patch -p3 -i > ~/mailscanner-fix-tnef.patch > patching file TNEF.pm > Hunk #1 FAILED at 229. > 1 out of 1 hunk FAILED -- saving rejects to file TNEF.pm.rej Thats because you are trying to patch a version older than 4.84.3, this patch is against 4.84.3. -- www.baruwa.org From eric_le_corre at msn.com Wed Feb 22 17:23:13 2012 From: eric_le_corre at msn.com (mul) Date: Wed Feb 22 17:23:38 2012 Subject: Problem winmail.dat and TNEF References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> Message-ID: mul msn.com> writes: > > Andrew Colin Kissa topdog.za.net> writes: > > > > > > > On 22 Feb 2012, at 12:36 PM, Randal, Phil wrote: > > > > > Thanks Andrew. > > > > > > Now someone with write access needs to get it into the Git repository. > > > > > > > I have sent it to jules maybe he will find sometime to push it to github. > > > > > and where i can download : mailscanner-fix-tnef.patch ? > > > i dont find this in mailscanner folder download from mailscanner website > > > > If the attached version is mangled by the mailing list you can download it > > here http://topdog-software.com/files/mailscanner-fix-tnef.patch > > > > -- > i tried what you said, but i have erros : In my TNEF.Pm, i have this : my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); $dir =~ s,^.*/,,; $unpackdir = $message->MakeNameSafe($unpackdir, $dir); unless (mkdir "$dir/$unpackdir", 0777) { MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not cre$ "$dir/$unpackdir"); return 0; sorry, i am bad and my enshlis is poor :-) From andrew at topdog.za.net Wed Feb 22 17:36:05 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Wed Feb 22 17:36:26 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> Message-ID: <0A940EF5-C662-4EBF-A1E9-6D6C4BF9F706@topdog.za.net> On 22 Feb 2012, at 7:23 PM, mul wrote: > my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); > $dir =~ s,^.*/,,; > $unpackdir = $message->MakeNameSafe($unpackdir, $dir); > unless (mkdir "$dir/$unpackdir", 0777) { > MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not cre$ > "$dir/$unpackdir"); > return 0; Edit it to look like this: my $unpackdir = tempdir("tnefXXXXXX"); $unpackdir = $message->MakeNameSafe($unpackdir, $dir); unless (mkdir "$dir/$unpackdir", 0777) { MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not cre$ "$dir/$unpackdir"); return 0; -- www.baruwa.org From eric_le_corre at msn.com Wed Feb 22 17:46:30 2012 From: eric_le_corre at msn.com (mul) Date: Wed Feb 22 17:46:56 2012 Subject: Problem winmail.dat and TNEF References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> <0A940EF5-C662-4EBF-A1E9-6D6C4BF9F706@topdog.za.net> Message-ID: > Edit it to look like this: > > my $unpackdir = tempdir("tnefXXXXXX"); > $unpackdir = $message->MakeNameSafe($unpackdir, $dir); > unless (mkdir "$dir/$unpackdir", 0777) { > MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not cre$ > "$dir/$unpackdir"); > return 0; > > -- > www.baruwa.org > Ok, i have deleted : my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); > $dir =~ s,^.*/,,; From jtbober at argentassociates.com Wed Feb 22 18:12:13 2012 From: jtbober at argentassociates.com (Jonathan Bober) Date: Wed Feb 22 18:12:36 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> Message-ID: <000301ccf18d$81b07650$851162f0$@com> I have been following this thread as I am having the same issues. Please excuse my confusion and ignorance as I am still learning about MailScanner and I can only read so quickly. The implementation for me only took place about 2 weeks ago. I have MailScanner-4.84 3-1 installed, but I cannot find the TNEF.pm in the /usr/share/MailScanner/MailScanner/ directory in fact that does not exist... I have found my TNEF.pm within /usr/lib/MailScanner/MailScanner/...is there an issue here that I am missing? I am also receiving the HUNK error when I try to apply the patch " Hunk #1 FAILED at 229." This is with 4.84 3-1 installed. If anyone could shed some light on my faults it would be appreciated. Regards, Jonathan Bober -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of mul Sent: Wednesday, February 22, 2012 12:23 PM To: mailscanner@lists.mailscanner.info Subject: Re: Problem winmail.dat and TNEF mul msn.com> writes: > > Andrew Colin Kissa topdog.za.net> writes: > > > > > > > On 22 Feb 2012, at 12:36 PM, Randal, Phil wrote: > > > > > Thanks Andrew. > > > > > > Now someone with write access needs to get it into the Git repository. > > > > > > > I have sent it to jules maybe he will find sometime to push it to github. > > > > > and where i can download : mailscanner-fix-tnef.patch ? > > > i dont find this in mailscanner folder download from mailscanner website > > > > If the attached version is mangled by the mailing list you can download it > > here http://topdog-software.com/files/mailscanner-fix-tnef.patch > > > > -- > i tried what you said, but i have erros : In my TNEF.Pm, i have this : my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); $dir =~ s,^.*/,,; $unpackdir = $message->MakeNameSafe($unpackdir, $dir); unless (mkdir "$dir/$unpackdir", 0777) { MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not cre$ "$dir/$unpackdir"); return 0; sorry, i am bad and my enshlis is poor :-) -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From Jeff.Mills at sydneytech.com.au Wed Feb 22 22:47:37 2012 From: Jeff.Mills at sydneytech.com.au (Jeff Mills) Date: Wed Feb 22 22:47:58 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> Message-ID: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C094@SERVER01.sts.local> I have tried the patch, but it still doesn't work for me, so I have switched back to internal tnef. Feb 23 09:39:32 S1 MailScanner[29355]: Expanding TNEF archive at /var/spool/MailScanner/incoming/29355/24911D3E13B.A7DDB/winmail.dat Feb 23 09:39:32 S1 MailScanner[29355]: Trying to unpack nwinmail.dat in message 24911D3E13B.A7DDB, could not create subdirectory 24911D3E13B.A7DDB//tnef244e4i, failed to unpack TNEF message Feb 23 09:39:32 S1 MailScanner[29355]: Corrupt TNEF winmail.dat that cannot be analysed in message 24911D3E13B.A7DDB My code looks like this now: # Create the subdir to unpack it into #my $unpackdir = "tnef.$$"; my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); $dir =~ s,^.*/,,; $unpackdir = $message->MakeNameSafe($unpackdir, $dir); unless (mkdir "$dir/$unpackdir", 0777) { MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not create subdirectory %s, failed to unpack TNEF message", $tnefname, $message->{id}, "$dir/$unpackdir"); return 0; Jeff ----------------------------- Jeff Mills Sydney Technology Solutions Pty Ltd Unit F10, 101 Rookwood Road Yagoona, New South Wales 2199 Phone: 02 8212 4722 Email: Jeff.Mills@sydneytech.com.au Web : www.sydneytech.com.au Living our values, achieving success Sydney Technology Solutions' operating philosophy is based on honesty, enthusiasm, respect, ownership, excellence and service. These values guide the way we manage our business and the way we service yours. P Please consider the environment before printing this email Disclaimer: Sydney Technology Solutions accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. ----------------------------- -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Andrew Colin Kissa Sent: Thursday, 23 February 2012 3:31 AM To: MailScanner discussion Subject: Re: Problem winmail.dat and TNEF On 22 Feb 2012, at 12:36 PM, Randal, Phil wrote: > Thanks Andrew. > > Now someone with write access needs to get it into the Git repository. > I have sent it to jules maybe he will find sometime to push it to github. > and where i can download : mailscanner-fix-tnef.patch ? > i dont find this in mailscanner folder download from mailscanner website If the attached version is mangled by the mailing list you can download it here http://topdog-software.com/files/mailscanner-fix-tnef.patch -- www.baruwa.org -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This email has been scanned for viruses and dangerous content by Sydney Technology Solutions MailMaster Email Protection Services. For more information please visit http://www.sydneytech.com.au :Scanned by MailMaster1: From jeremy at fluxlabs.net Wed Feb 22 22:50:37 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Wed Feb 22 22:50:56 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C094@SERVER01.sts.local> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C094@SERVER01.sts.local> Message-ID: <1463B296-332E-433E-AEB4-E2199E2283C1@fluxlabs.net> Points to permissions .. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Feb 22, 2012, at 4:47 PM, Jeff Mills wrote: could not create subdirectory -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120222/be7cf59b/attachment.html From Jeff.Mills at sydneytech.com.au Wed Feb 22 23:19:32 2012 From: Jeff.Mills at sydneytech.com.au (Jeff Mills) Date: Wed Feb 22 23:19:48 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <1463B296-332E-433E-AEB4-E2199E2283C1@fluxlabs.net> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C094@SERVER01.sts.local> <1463B296-332E-433E-AEB4-E2199E2283C1@fluxlabs.net> Message-ID: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C096@SERVER01.sts.local> Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: 32950c.png Type: image/png Size: 13993 bytes Desc: 32950c.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120223/2e54b625/32950c-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: 69a672.png Type: image/png Size: 1014 bytes Desc: 69a672.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120223/2e54b625/69a672-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: 4a14a2.png Type: image/png Size: 1253 bytes Desc: 4a14a2.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120223/2e54b625/4a14a2-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: 6e0c51.png Type: image/png Size: 1240 bytes Desc: 6e0c51.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120223/2e54b625/6e0c51-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: 0767b7.png Type: image/png Size: 1151 bytes Desc: 0767b7.png Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120223/2e54b625/0767b7-0001.png -------------- next part -------------- A non-text attachment was scrubbed... Name: imaged9630b.GIF Type: image/gif Size: 938 bytes Desc: imaged9630b.GIF Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120223/2e54b625/imaged9630b-0001.gif From m.a.young at durham.ac.uk Thu Feb 23 00:13:28 2012 From: m.a.young at durham.ac.uk (M A Young) Date: Thu Feb 23 00:14:10 2012 Subject: Problem winmail.dat and TNEF In-Reply-To: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C094@SERVER01.sts.local> References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C094@SERVER01.sts.local> Message-ID: On Wed, 22 Feb 2012, Jeff Mills wrote: > My code looks like this now: > # Create the subdir to unpack it into > #my $unpackdir = "tnef.$$"; **> my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); **> $dir =~ s,^.*/,,; > $unpackdir = $message->MakeNameSafe($unpackdir, $dir); > unless (mkdir "$dir/$unpackdir", 0777) { > MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not create subdirectory %s, failed to unpack TNEF message", $tnefname, $message->{id}, > "$dir/$unpackdir"); > return 0; If I have read the patch correctly you shouldn't have the 2 lines marked ** Michael Young From eric_le_corre at msn.com Thu Feb 23 09:16:28 2012 From: eric_le_corre at msn.com (mul) Date: Thu Feb 23 09:16:56 2012 Subject: Problem winmail.dat and TNEF References: <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C087@SERVER01.sts.local> <7CA580B59C1ABD45B4614ED90D4C7B853D0C997E@HC-EXMBX04.herefordshire.gov.uk> <5E6F9A4E-1EAE-40B1-8B1F-BC4A1AA08A63@topdog.za.net> <8EF7B252-429C-497D-8082-67285B8CDF22@topdog.za.net> <7CA580B59C1ABD45B4614ED90D4C7B853D0CB8AF@HC-EXMBX04.herefordshire.gov.uk> <31E7B674-29D7-4181-8989-4B6906515C3E@topdog.za.net> <5CC818E72EFF6C4CB0D4DFEF1C4E6CD5D7FCB3C094@SERVER01.sts.local> Message-ID: M A Young durham.ac.uk> writes: > > On Wed, 22 Feb 2012, Jeff Mills wrote: > > > My code looks like this now: > > # Create the subdir to unpack it into > > #my $unpackdir = "tnef.$$"; > **? my ($tmpfh, $unpackdir) = tempfile("tnefXXXXXX", TMPDIR => $dir, UNLINK => 0); > **? $dir =~ s,^.*/,,; > > $unpackdir = $message->MakeNameSafe($unpackdir, $dir); > > unless (mkdir "$dir/$unpackdir", 0777) { > > MailScanner::Log::WarnLog("Trying to unpack %s in message %s, could not create subdirectory %s, > failed to unpack TNEF message", $tnefname, $message->{id}, > > "$dir/$unpackdir"); > > return 0; > > If I have read the patch correctly you shouldn't have the 2 lines marked ** > > Michael Young i found a issu of my problem. I had "error to unpack" because sectors of disks was defuct. I changed the disk also, and now all is good. :-) From rabellino at di.unito.it Thu Feb 23 13:24:29 2012 From: rabellino at di.unito.it (Sergio Rabellino) Date: Thu Feb 23 13:24:45 2012 Subject: Quarantine settings are not applied to Archive Mail Message-ID: <4F463E0D.1030607@di.unito.it> Dear list, I set-up my mailscanner (R4.84.3-1) to archive all the emails, using the "Archive Mail" setting. That works correctly, but i need user/group and dir/file permissions changed from root:root/660 to the same user:group/perms used by quarantine (which by itself works correctly, changing the ownership to my webserver user). Also in MailScanner conf seems that the archive would use the same settings, but quick-looking into the code, i'vent found anything referring to that settings into the archiving code, and seems not working as stated in the short documentation into the conf file. It's a missing feature / erroneous comment ? extracted from distribution MailScanner.conf > # If you want to create the quarantine/*archive* so the files are owned > # by a user other than the "Run As User" setting at the top of this file, > # you can change that here. > # Note: If the "Run As User" is not "root" then you cannot change the > # user but may still be able to change the group, if the > # "Run As User" is a member of both of the groups "Run As Group" > # and "Quarantine Group". > Quarantine User = > Quarantine Group = Obviously, if anyone has a patch for this, it's welcome. Thanks in advance. -- Ing. Sergio Rabellino Universit? degli Studi di Torino Dipartimento di Informatica ICT Services Director Tel +39-0116706701 Fax +39-011751603 C.so Svizzera , 185 - 10149 - Torino -------------- next part -------------- Skipped content of type multipart/related From dgottsc at emory.edu Thu Feb 23 21:52:47 2012 From: dgottsc at emory.edu (Gottschalk, David) Date: Thu Feb 23 21:53:02 2012 Subject: FileType Attachment Message-ID: <29C400C10C01FA4C8405D52684332F6902AB3972@e14mbx15n.Enterprise.emory.net> Forgive me if this question has been asked before, but I couldn't find it anywhere. Is it possible to strip the attachment for a FileType that is blocked, and send the email on? I cannot seem to determine if this is possible within MailScanner, or which setting I would do this. I possibly need to do this for my internal mail routing purposes, as some people are having issues with mail being blocked and not being notified. Thanks. David Gottschalk Emory University UTS Messaging Team 404.727.9744 ________________________________ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error, please contact the sender by reply e-mail message and destroy all copies of the original message (including attachments). -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120223/2d889df3/attachment.html From kocisky at autistici.org Mon Feb 27 20:50:39 2012 From: kocisky at autistici.org (Kocisky) Date: Mon Feb 27 20:50:50 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: Hi all, I had the same issue, updating the os it updated also that perl/archive package, my question now is how do i re run MailScanner over all the messages that have been quarantined? in particular that perl/archive pkg was crashing because of docx and xlsx files, the problem is that all those are valid files/emails and i need to reprocess them. Thanks! Kociscky Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... On 2 December 2011 01:32, Martin Hepworth wrote: > That's a perl issue and patch > > Martin > > > > On Thursday, 1 December 2011, Michel Bulgado wrote: > > John Wilcock wrote: > > > > Le 01/12/2011 18:44, Michel Bulgado a ?crit : > > > > Insecure dependency in chmod while running with -T switch at > > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. > > > > There's a patch for that in > https://rt.cpan.org/Public/Bug/Display.html?id=61930 > > > > Ok, i download the patch file, i see the patch is for perl files, so i > ask , the problem is perl o MailScanner? > > > > So, when a go to apply the patch, I get a error, he can't find the file > 10_chmod.t > > > > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt > > can't find file to patch at input line 5 > > Perhaps you used the wrong -p or --strip option? > > The text leading up to this was: > > -------------------------- > > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm > > |index f86ef75..4bb2171 100644 > > |--- a/lib/Archive/Zip/Member.pm > > |+++ b/lib/Archive/Zip/Member.pm > > -------------------------- > > File to patch: /usr/share/perl5/Archive/Zip/Member.pm > > patching file /usr/share/perl5/Archive/Zip/Member.pm > > can't find file to patch at input line 46 > > Perhaps you used the wrong -p or --strip option? > > The text leading up to this was: > > -------------------------- > > |diff --git a/t/10_chmod.t b/t/10_chmod.t > > |index 7ae647f..0495062 100644 > > |--- a/t/10_chmod.t > > |+++ b/t/10_chmod.t > > -------------------------- > > File to patch: > > Skip this patch? [y] n > > File to patch: > > Skip this patch? [y] y > > Skipping patch. > > 1 out of 1 hunk ignored > > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i have > installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch > > > > Ideas? > > > > > > > > -- > -- > Martin Hepworth > Oxford, UK > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120227/fbf64b78/attachment.html From maxsec at gmail.com Mon Feb 27 21:09:02 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Mon Feb 27 21:09:11 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: Depends on how u saved the file as mbox files or queue files Should be info on the wiki on how to rerun depending on the mta etc Martin On Monday, 27 February 2012, Kocisky wrote: > Hi all, > > I had the same issue, updating the os it updated also that perl/archive > package, my question now is how do i re run MailScanner over all the > messages that have been quarantined? > > in particular that perl/archive pkg was crashing because of docx and xlsx > files, the problem is that all those are valid files/emails and i need to > reprocess them. > > Thanks! > Kociscky > > Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message > CFA4E2003F7.AF18F as it has been attempted too many times > Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message > CFA4E2003F7.AF18F as it caused MailScanner to crash several times > Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > > On 2 December 2011 01:32, Martin Hepworth > > wrote: > >> That's a perl issue and patch >> >> Martin >> >> >> >> On Thursday, 1 December 2011, Michel Bulgado > >> wrote: >> > John Wilcock wrote: >> > >> > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >> > >> > Insecure dependency in chmod while running with -T switch at >> > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. >> > >> > There's a patch for that in >> https://rt.cpan.org/Public/Bug/Display.html?id=61930 >> > >> > Ok, i download the patch file, i see the patch is for perl files, so i >> ask , the problem is perl o MailScanner? >> > >> > So, when a go to apply the patch, I get a error, he can't find the >> file 10_chmod.t >> > >> > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt >> > can't find file to patch at input line 5 >> > Perhaps you used the wrong -p or --strip option? >> > The text leading up to this was: >> > -------------------------- >> > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm >> > |index f86ef75..4bb2171 100644 >> > |--- a/lib/Archive/Zip/Member.pm >> > |+++ b/lib/Archive/Zip/Member.pm >> > -------------------------- >> > File to patch: /usr/share/perl5/Archive/Zip/Member.pm >> > patching file /usr/share/perl5/Archive/Zip/Member.pm >> > can't find file to patch at input line 46 >> > Perhaps you used the wrong -p or --strip option? >> > The text leading up to this was: >> > -------------------------- >> > |diff --git a/t/10_chmod.t b/t/10_chmod.t >> > |index 7ae647f..0495062 100644 >> > |--- a/t/10_chmod.t >> > |+++ b/t/10_chmod.t >> > -------------------------- >> > File to patch: >> > Skip this patch? [y] n >> > File to patch: >> > Skip this patch? [y] y >> > Skipping patch. >> > 1 out of 1 hunk ignored >> > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i have >> installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch >> > >> > Ideas? >> > >> > >> > >> >> -- >> -- >> Martin Hepworth >> Oxford, UK >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info > 'mailscanner@lists.mailscanner.info');> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120227/91c5a7cd/attachment.html From kocisky at autistici.org Mon Feb 27 23:07:58 2012 From: kocisky at autistici.org (Kocisky) Date: Mon Feb 27 23:08:08 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: Thanks Martin for the quick reply, i didn't find anything on http://wiki.mailscanner.info/ I'm actually using Maildir format for emails with postfix as mta, this is the filesystem structure for the quarantine files: [root@mail quarantine]# ls -l 20120227/ total 420 drwxrwx---. 2 postfix clam 4096 Feb 27 00:41 00C2D202033.A443F drwxrwx---. 2 postfix clam 4096 Feb 27 02:45 020CF202034.AD42E [root@mail quarantine]# ls -l 20120227/00C2D202033.A443F/message -rw-rw----. 1 postfix clam 80013 Feb 27 00:41 20120227/00C2D202033.A443F/message [root@mail quarantine]# i've tried to move the messages in /var/spool/postfix/incoming/ and changed the ownership but nothing happend. *EDIT* i've just noticed that since the update the mta is not delivering messages: Found 250 messages in the Processing Attempts Database Feb 27 18:11:56 mail MailScanner[12839]: Using locktype = flock Feb 27 18:11:56 mail MailScanner[12839]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 27 18:11:56 mail MailScanner[12839]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 27 18:11:59 mail MailScanner[12844]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 18:11:59 mail MailScanner[12844]: Reading configuration file /etc/MailScanner/MailScanner.conf my MailScanner --lint: [root@mail bayes]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 Read 869 hostnames from the phishing whitelist Read 5361 hostnames from the phishing blacklists Config: calling custom init function SQLBlacklist Starting up SQL Blacklist Read 0 blacklist entries Config: calling custom init function MailWatchLogging Started SQL Logging child Config: calling custom init function SQLWhitelist Starting up SQL Whitelist Read 0 whitelist entries Checking version numbers... Version number in MailScanner.conf (4.84.3) is correct. Unrar is not installed, it should be in /usr/bin/unrar. This is required for RAR archives to be read to check filenames and filetypes. Virus scanning is not affected. Your envelope_sender_header in spam.assassin.prefs.conf is correct. MailScanner setting GID to (89) MailScanner setting UID to (89) Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database bayes: cannot write to /etc/MailScanner/bayes/bayes_journal, bayes db update ignored: Permission denied SpamAssassin reported no errors. Connected to Processing Attempts Database Created Processing Attempts Database successfully There are 250 messages in the Processing Attempts Database Using locktype = posix MailScanner.conf says "Virus Scanners = clamd" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED::Eicar-Test-Signature :: ./1/ Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Eicar-Test-Signature" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Config: calling custom end function SQLBlacklist Closing down by-domain spam blacklist Config: calling custom end function MailWatchLogging Config: calling custom end function SQLWhitelist Closing down by-domain spam whitelist [root@mail bayes]# On 27 February 2012 16:09, Martin Hepworth wrote: > Depends on how u saved the file as mbox files or queue files > > Should be info on the wiki on how to rerun depending on the mta etc > > Martin > > > On Monday, 27 February 2012, Kocisky wrote: > >> Hi all, >> >> I had the same issue, updating the os it updated also that perl/archive >> package, my question now is how do i re run MailScanner over all the >> messages that have been quarantined? >> >> in particular that perl/archive pkg was crashing because of docx and xlsx >> files, the problem is that all those are valid files/emails and i need to >> reprocess them. >> >> Thanks! >> Kociscky >> >> Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message >> CFA4E2003F7.AF18F as it has been attempted too many times >> Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message >> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >> Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> >> On 2 December 2011 01:32, Martin Hepworth wrote: >> >>> That's a perl issue and patch >>> >>> Martin >>> >>> >>> >>> On Thursday, 1 December 2011, Michel Bulgado wrote: >>> > John Wilcock wrote: >>> > >>> > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >>> > >>> > Insecure dependency in chmod while running with -T switch at >>> > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. >>> > >>> > There's a patch for that in >>> https://rt.cpan.org/Public/Bug/Display.html?id=61930 >>> > >>> > Ok, i download the patch file, i see the patch is for perl files, so i >>> ask , the problem is perl o MailScanner? >>> > >>> > So, when a go to apply the patch, I get a error, he can't find the >>> file 10_chmod.t >>> > >>> > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt >>> > can't find file to patch at input line 5 >>> > Perhaps you used the wrong -p or --strip option? >>> > The text leading up to this was: >>> > -------------------------- >>> > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm >>> > |index f86ef75..4bb2171 100644 >>> > |--- a/lib/Archive/Zip/Member.pm >>> > |+++ b/lib/Archive/Zip/Member.pm >>> > -------------------------- >>> > File to patch: /usr/share/perl5/Archive/Zip/Member.pm >>> > patching file /usr/share/perl5/Archive/Zip/Member.pm >>> > can't find file to patch at input line 46 >>> > Perhaps you used the wrong -p or --strip option? >>> > The text leading up to this was: >>> > -------------------------- >>> > |diff --git a/t/10_chmod.t b/t/10_chmod.t >>> > |index 7ae647f..0495062 100644 >>> > |--- a/t/10_chmod.t >>> > |+++ b/t/10_chmod.t >>> > -------------------------- >>> > File to patch: >>> > Skip this patch? [y] n >>> > File to patch: >>> > Skip this patch? [y] y >>> > Skipping patch. >>> > 1 out of 1 hunk ignored >>> > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i >>> have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch >>> > >>> > Ideas? >>> > >>> > >>> > >>> >>> -- >>> -- >>> Martin Hepworth >>> Oxford, UK >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >> > > -- > -- > Martin Hepworth > Oxford, UK > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120227/a7367b3e/attachment.html From kocisky at autistici.org Mon Feb 27 23:34:45 2012 From: kocisky at autistici.org (Kocisky) Date: Mon Feb 27 23:34:56 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: removing the file /var/spool/MailScanner/incoming/Processing.db it restarted to deliver the messages, i only need to figure out how to requeue the messages that were quarantined, should i move them into: Incoming Queue Dir = /var/spool/postfix/hold ? can i move the FOLDER/message directly? Thanks!! kocisky On 27 February 2012 18:07, Kocisky wrote: > Thanks Martin for the quick reply, i didn't find anything on > http://wiki.mailscanner.info/ > > I'm actually using Maildir format for emails with postfix as mta, this is > the filesystem structure for the quarantine files: > > [root@mail quarantine]# ls -l 20120227/ > total 420 > drwxrwx---. 2 postfix clam 4096 Feb 27 00:41 00C2D202033.A443F > drwxrwx---. 2 postfix clam 4096 Feb 27 02:45 020CF202034.AD42E > > [root@mail quarantine]# ls -l 20120227/00C2D202033.A443F/message > -rw-rw----. 1 postfix clam 80013 Feb 27 00:41 > 20120227/00C2D202033.A443F/message > [root@mail quarantine]# > > > i've tried to move the messages in /var/spool/postfix/incoming/ and > changed the ownership but nothing happend. > > *EDIT* > > i've just noticed that since the update the mta is not delivering messages: > > Found 250 messages in the Processing Attempts Database > Feb 27 18:11:56 mail MailScanner[12839]: Using locktype = flock > Feb 27 18:11:56 mail MailScanner[12839]: Warning: skipping message > CFA4E2003F7.AF18F as it has been attempted too many times > Feb 27 18:11:56 mail MailScanner[12839]: Quarantined message > CFA4E2003F7.AF18F as it caused MailScanner to crash several times > Feb 27 18:11:59 mail MailScanner[12844]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 18:11:59 mail MailScanner[12844]: Reading configuration file > /etc/MailScanner/MailScanner.conf > > > my MailScanner --lint: > > [root@mail bayes]# MailScanner --lint > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > Configuration: Failed to find any configuration files like > /etc/MailScanner/conf.d/*, skipping them. at > /usr/share/MailScanner/MailScanner/Config.pm line 2044 > Read 869 hostnames from the phishing whitelist > Read 5361 hostnames from the phishing blacklists > Config: calling custom init function SQLBlacklist > Starting up SQL Blacklist > Read 0 blacklist entries > Config: calling custom init function MailWatchLogging > Started SQL Logging child > Config: calling custom init function SQLWhitelist > Starting up SQL Whitelist > Read 0 whitelist entries > > Checking version numbers... > Version number in MailScanner.conf (4.84.3) is correct. > > Unrar is not installed, it should be in /usr/bin/unrar. > This is required for RAR archives to be read to check > filenames and filetypes. Virus scanning is not affected. > > > Your envelope_sender_header in spam.assassin.prefs.conf is correct. > MailScanner setting GID to (89) > MailScanner setting UID to (89) > > Checking for SpamAssassin errors (if you use it)... > Using SpamAssassin results cache > Connected to SpamAssassin cache database > bayes: cannot write to /etc/MailScanner/bayes/bayes_journal, bayes db > update ignored: Permission denied > SpamAssassin reported no errors. > Connected to Processing Attempts Database > Created Processing Attempts Database successfully > There are 250 messages in the Processing Attempts Database > Using locktype = posix > MailScanner.conf says "Virus Scanners = clamd" > Found these virus scanners installed: clamd > =========================================================================== > Filename Checks: Windows/DOS Executable (1 eicar.com) > Other Checks: Found 1 problems > Virus and Content Scanning: Starting > Clamd::INFECTED::Eicar-Test-Signature :: ./1/ > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com > Virus Scanning: Clamd found 2 infections > Infected message 1 came from 10.1.1.1 > Virus Scanning: Found 2 viruses > =========================================================================== > Virus Scanner test reports: > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > If any of your virus scanners (clamd) > are not listed there, you should check that they are installed correctly > and that MailScanner is finding them correctly via its virus.scanners.conf. > Config: calling custom end function SQLBlacklist > Closing down by-domain spam blacklist > Config: calling custom end function MailWatchLogging > Config: calling custom end function SQLWhitelist > Closing down by-domain spam whitelist > [root@mail bayes]# > > On 27 February 2012 16:09, Martin Hepworth wrote: > >> Depends on how u saved the file as mbox files or queue files >> >> Should be info on the wiki on how to rerun depending on the mta etc >> >> Martin >> >> >> On Monday, 27 February 2012, Kocisky wrote: >> >>> Hi all, >>> >>> I had the same issue, updating the os it updated also that perl/archive >>> package, my question now is how do i re run MailScanner over all the >>> messages that have been quarantined? >>> >>> in particular that perl/archive pkg was crashing because of docx and >>> xlsx files, the problem is that all those are valid files/emails and i need >>> to reprocess them. >>> >>> Thanks! >>> Kociscky >>> >>> Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message >>> CFA4E2003F7.AF18F as it has been attempted too many times >>> Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message >>> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >>> Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus >>> Scanner version 4.84.3 starting... >>> >>> On 2 December 2011 01:32, Martin Hepworth wrote: >>> >>>> That's a perl issue and patch >>>> >>>> Martin >>>> >>>> >>>> >>>> On Thursday, 1 December 2011, Michel Bulgado wrote: >>>> > John Wilcock wrote: >>>> > >>>> > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >>>> > >>>> > Insecure dependency in chmod while running with -T switch at >>>> > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. >>>> > >>>> > There's a patch for that in >>>> https://rt.cpan.org/Public/Bug/Display.html?id=61930 >>>> > >>>> > Ok, i download the patch file, i see the patch is for perl files, so >>>> i ask , the problem is perl o MailScanner? >>>> > >>>> > So, when a go to apply the patch, I get a error, he can't find the >>>> file 10_chmod.t >>>> > >>>> > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt >>>> > can't find file to patch at input line 5 >>>> > Perhaps you used the wrong -p or --strip option? >>>> > The text leading up to this was: >>>> > -------------------------- >>>> > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm >>>> > |index f86ef75..4bb2171 100644 >>>> > |--- a/lib/Archive/Zip/Member.pm >>>> > |+++ b/lib/Archive/Zip/Member.pm >>>> > -------------------------- >>>> > File to patch: /usr/share/perl5/Archive/Zip/Member.pm >>>> > patching file /usr/share/perl5/Archive/Zip/Member.pm >>>> > can't find file to patch at input line 46 >>>> > Perhaps you used the wrong -p or --strip option? >>>> > The text leading up to this was: >>>> > -------------------------- >>>> > |diff --git a/t/10_chmod.t b/t/10_chmod.t >>>> > |index 7ae647f..0495062 100644 >>>> > |--- a/t/10_chmod.t >>>> > |+++ b/t/10_chmod.t >>>> > -------------------------- >>>> > File to patch: >>>> > Skip this patch? [y] n >>>> > File to patch: >>>> > Skip this patch? [y] y >>>> > Skipping patch. >>>> > 1 out of 1 hunk ignored >>>> > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i >>>> have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch >>>> > >>>> > Ideas? >>>> > >>>> > >>>> > >>>> >>>> -- >>>> -- >>>> Martin Hepworth >>>> Oxford, UK >>>> >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >>>> >>> >> >> -- >> -- >> Martin Hepworth >> Oxford, UK >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120227/e3eba0ce/attachment.html From kocisky at autistici.org Tue Feb 28 03:00:09 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 03:00:20 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: talked too early, it crashed again: MailScanner --debug Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 In Debugging mode, not forking... Trying to setlogsock(unix) Building a message batch to scan... Have a batch of 30 messages. Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185. [root@mail incoming]# the following is an extract of the /var/log/maillog: Feb 27 22:01:02 mail postfix/cleanup[2118]: 45D07200106: message-id=< 20120228030102.45D07200106@myserver.com> Feb 27 22:01:02 mail update.bad.phishing.sites: Delaying cron job up to 600 seconds Feb 27 22:01:03 mail MailScanner[2247]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:03 mail MailScanner[2247]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:03 mail MailScanner[2247]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:03 mail MailScanner[2247]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:03 mail MailScanner[2247]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function SQLBlacklist Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Blacklist Feb 27 22:01:03 mail MailScanner[2247]: Read 0 blacklist entries Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function MailWatchLogging Feb 27 22:01:03 mail MailScanner[2247]: Started SQL Logging child Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function SQLWhitelist Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Whitelist Feb 27 22:01:03 mail MailScanner[2247]: Read 0 whitelist entries Feb 27 22:01:03 mail MailScanner[2247]: Using SpamAssassin results cache Feb 27 22:01:03 mail MailScanner[2247]: Connected to SpamAssassin cache database Feb 27 22:01:03 mail MailScanner[2247]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:05 mail MailScanner[2247]: Connected to Processing Attempts Database Feb 27 22:01:05 mail MailScanner[2247]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:05 mail MailScanner[2247]: Using locktype = flock Feb 27 22:01:05 mail MailScanner[2247]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:05 mail MailScanner[2247]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:08 mail MailScanner[2252]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:08 mail MailScanner[2252]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:08 mail MailScanner[2252]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:08 mail MailScanner[2252]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:08 mail MailScanner[2252]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function SQLBlacklist Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Blacklist Feb 27 22:01:08 mail MailScanner[2252]: Read 0 blacklist entries Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function MailWatchLogging Feb 27 22:01:08 mail MailScanner[2252]: Started SQL Logging child Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function SQLWhitelist Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Whitelist Feb 27 22:01:08 mail MailScanner[2252]: Read 0 whitelist entries Feb 27 22:01:08 mail MailScanner[2252]: Using SpamAssassin results cache Feb 27 22:01:08 mail MailScanner[2252]: Connected to SpamAssassin cache database Feb 27 22:01:08 mail MailScanner[2252]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:10 mail MailScanner[2252]: Connected to Processing Attempts Database Feb 27 22:01:10 mail MailScanner[2252]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:10 mail MailScanner[2252]: Using locktype = flock Feb 27 22:01:10 mail MailScanner[2252]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:10 mail MailScanner[2252]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:13 mail MailScanner[2257]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:13 mail MailScanner[2257]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:13 mail MailScanner[2257]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:13 mail MailScanner[2257]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:13 mail MailScanner[2257]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function SQLBlacklist Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Blacklist Feb 27 22:01:13 mail MailScanner[2257]: Read 0 blacklist entries Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function MailWatchLogging Feb 27 22:01:13 mail MailScanner[2257]: Started SQL Logging child Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function SQLWhitelist Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Whitelist Feb 27 22:01:13 mail MailScanner[2257]: Read 0 whitelist entries Feb 27 22:01:13 mail MailScanner[2257]: Using SpamAssassin results cache Feb 27 22:01:13 mail MailScanner[2257]: Connected to SpamAssassin cache database Feb 27 22:01:13 mail MailScanner[2257]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:15 mail MailScanner[2257]: Connected to Processing Attempts Database Feb 27 22:01:15 mail MailScanner[2257]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:15 mail MailScanner[2257]: Using locktype = flock Feb 27 22:01:15 mail MailScanner[2257]: Making attempt 4 at processing message 264A7200231.A7517 Feb 27 22:01:15 mail MailScanner[2257]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:15 mail MailScanner[2257]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:18 mail MailScanner[2262]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:18 mail MailScanner[2262]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:18 mail MailScanner[2262]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:18 mail MailScanner[2262]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:18 mail MailScanner[2262]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function SQLBlacklist Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Blacklist Feb 27 22:01:18 mail MailScanner[2262]: Read 0 blacklist entries Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function MailWatchLogging Feb 27 22:01:18 mail MailScanner[2262]: Started SQL Logging child Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function SQLWhitelist Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Whitelist Feb 27 22:01:18 mail MailScanner[2262]: Read 0 whitelist entries Feb 27 22:01:18 mail MailScanner[2262]: Using SpamAssassin results cache Feb 27 22:01:18 mail MailScanner[2262]: Connected to SpamAssassin cache database Feb 27 22:01:18 mail MailScanner[2262]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:20 mail MailScanner[2262]: Connected to Processing Attempts Database Feb 27 22:01:20 mail MailScanner[2262]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:20 mail MailScanner[2262]: Using locktype = flock Feb 27 22:01:20 mail MailScanner[2262]: Making attempt 4 at processing message 23EBD20023A.AA792 Feb 27 22:01:20 mail MailScanner[2262]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:20 mail MailScanner[2262]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:23 mail MailScanner[2267]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:23 mail MailScanner[2267]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:23 mail MailScanner[2267]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:23 mail MailScanner[2267]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:23 mail MailScanner[2267]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function SQLBlacklist Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Blacklist Feb 27 22:01:23 mail MailScanner[2267]: Read 0 blacklist entries Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function MailWatchLogging Feb 27 22:01:23 mail MailScanner[2267]: Started SQL Logging child Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function SQLWhitelist Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Whitelist Feb 27 22:01:23 mail MailScanner[2267]: Read 0 whitelist entries Feb 27 22:01:23 mail MailScanner[2267]: Using SpamAssassin results cache Feb 27 22:01:23 mail MailScanner[2267]: Connected to SpamAssassin cache database Feb 27 22:01:23 mail MailScanner[2267]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:25 mail MailScanner[2267]: Connected to Processing Attempts Database Feb 27 22:01:25 mail MailScanner[2267]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:26 mail MailScanner[2267]: Using locktype = flock Feb 27 22:01:26 mail MailScanner[2267]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:26 mail MailScanner[2267]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:28 mail MailScanner[2303]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:28 mail MailScanner[2303]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:28 mail MailScanner[2303]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:28 mail MailScanner[2303]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:28 mail MailScanner[2303]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function SQLBlacklist Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Blacklist Feb 27 22:01:28 mail MailScanner[2303]: Read 0 blacklist entries Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function MailWatchLogging Feb 27 22:01:28 mail MailScanner[2303]: Started SQL Logging child Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function SQLWhitelist Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Whitelist Feb 27 22:01:28 mail MailScanner[2303]: Read 0 whitelist entries Feb 27 22:01:28 mail MailScanner[2303]: Using SpamAssassin results cache Feb 27 22:01:28 mail MailScanner[2303]: Connected to SpamAssassin cache database Feb 27 22:01:28 mail MailScanner[2303]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:30 mail MailScanner[2303]: Connected to Processing Attempts Database Feb 27 22:01:30 mail MailScanner[2303]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:30 mail MailScanner[2303]: Using locktype = flock Feb 27 22:01:31 mail MailScanner[2303]: Making attempt 6 at processing message EC11020005B.A3395 Feb 27 22:01:31 mail MailScanner[2303]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:31 mail MailScanner[2303]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:33 mail MailScanner[2308]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:33 mail MailScanner[2308]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:33 mail MailScanner[2308]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:33 mail MailScanner[2308]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:33 mail MailScanner[2308]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function SQLBlacklist Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Blacklist Feb 27 22:01:33 mail MailScanner[2308]: Read 0 blacklist entries Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function MailWatchLogging Feb 27 22:01:33 mail MailScanner[2308]: Started SQL Logging child Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function SQLWhitelist Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Whitelist Feb 27 22:01:33 mail MailScanner[2308]: Read 0 whitelist entries Feb 27 22:01:33 mail MailScanner[2308]: Using SpamAssassin results cache Feb 27 22:01:33 mail MailScanner[2308]: Connected to SpamAssassin cache database Feb 27 22:01:33 mail MailScanner[2308]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:35 mail MailScanner[2308]: Connected to Processing Attempts Database Feb 27 22:01:35 mail MailScanner[2308]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:35 mail MailScanner[2308]: Using locktype = flock Feb 27 22:01:35 mail MailScanner[2308]: Warning: skipping message EC11020005B.A3395 as it has been attempted too many times Feb 27 22:01:35 mail MailScanner[2308]: Quarantined message EC11020005B.A3395 as it caused MailScanner to crash several times Feb 27 22:01:38 mail MailScanner[2313]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:38 mail MailScanner[2313]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:38 mail MailScanner[2313]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:38 mail MailScanner[2313]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:38 mail MailScanner[2313]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function SQLBlacklist Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Blacklist Feb 27 22:01:38 mail MailScanner[2313]: Read 0 blacklist entries Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function MailWatchLogging Feb 27 22:01:38 mail MailScanner[2313]: Started SQL Logging child Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function SQLWhitelist Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Whitelist Feb 27 22:01:38 mail MailScanner[2313]: Read 0 whitelist entries Feb 27 22:01:38 mail MailScanner[2313]: Using SpamAssassin results cache Feb 27 22:01:38 mail MailScanner[2313]: Connected to SpamAssassin cache database Feb 27 22:01:38 mail MailScanner[2313]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:40 mail MailScanner[2313]: Connected to Processing Attempts Database Feb 27 22:01:40 mail MailScanner[2313]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:40 mail MailScanner[2313]: Using locktype = flock Feb 27 22:01:40 mail MailScanner[2313]: Warning: skipping message EC11020005B.A3395 as it has been attempted too many times Feb 27 22:01:40 mail MailScanner[2313]: Quarantined message EC11020005B.A3395 as it caused MailScanner to crash several times Feb 27 22:01:43 mail MailScanner[2319]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:43 mail MailScanner[2319]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:43 mail MailScanner[2319]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:43 mail MailScanner[2319]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:43 mail MailScanner[2319]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function SQLBlacklist Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Blacklist Feb 27 22:01:43 mail MailScanner[2319]: Read 0 blacklist entries Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function MailWatchLogging Feb 27 22:01:43 mail MailScanner[2319]: Started SQL Logging child Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function SQLWhitelist Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Whitelist Feb 27 22:01:43 mail MailScanner[2319]: Read 0 whitelist entries Feb 27 22:01:44 mail MailScanner[2319]: Using SpamAssassin results cache Feb 27 22:01:44 mail MailScanner[2319]: Connected to SpamAssassin cache database Feb 27 22:01:44 mail MailScanner[2319]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection rate 2/60s for (smtp:220.248.164.185) at Feb 27 21:58:23 Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection count 2 for (smtp:220.248.164.185) at Feb 27 21:58:23 Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max cache size 1 at Feb 27 21:58:23 [root@mail ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 Read 869 hostnames from the phishing whitelist Read 5345 hostnames from the phishing blacklists Config: calling custom init function SQLBlacklist Starting up SQL Blacklist Read 0 blacklist entries Config: calling custom init function MailWatchLogging Started SQL Logging child Config: calling custom init function SQLWhitelist Starting up SQL Whitelist Read 0 whitelist entries Checking version numbers... Version number in MailScanner.conf (4.84.3) is correct. Unrar is not installed, it should be in /usr/bin/unrar. This is required for RAR archives to be read to check filenames and filetypes. Virus scanning is not affected. Your envelope_sender_header in spam.assassin.prefs.conf is correct. MailScanner setting GID to (89) MailScanner setting UID to (89) Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database SpamAssassin reported no errors. Connected to Processing Attempts Database Created Processing Attempts Database successfully There are 79 messages in the Processing Attempts Database Using locktype = posix MailScanner.conf says "Virus Scanners = clamd" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED::Eicar-Test-Signature :: ./1/ Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Eicar-Test-Signature" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Config: calling custom end function SQLBlacklist Closing down by-domain spam blacklist Config: calling custom end function MailWatchLogging Config: calling custom end function SQLWhitelist Closing down by-domain spam whitelist [root@mail ~]# any ideas? something to say: i've kust updated, for the MailScanner configuration i've used: upgrade_MailScanner_conf MailScanner.conf MailScanner.conf.rpmnew > MailScanner.new mv -f MailScanner.conf MailScanner.old mv -f MailScanner.new MailScanner.conf thanks again!! kocisky On 27 February 2012 18:34, Kocisky wrote: > removing the file /var/spool/MailScanner/incoming/Processing.db it > restarted to deliver the messages, i only need to figure out how to requeue > the messages that were quarantined, should i move them into: > > Incoming Queue Dir = /var/spool/postfix/hold ? > can i move the FOLDER/message directly? > > Thanks!! > kocisky > > On 27 February 2012 18:07, Kocisky wrote: > >> Thanks Martin for the quick reply, i didn't find anything on >> http://wiki.mailscanner.info/ >> >> I'm actually using Maildir format for emails with postfix as mta, this is >> the filesystem structure for the quarantine files: >> >> [root@mail quarantine]# ls -l 20120227/ >> total 420 >> drwxrwx---. 2 postfix clam 4096 Feb 27 00:41 00C2D202033.A443F >> drwxrwx---. 2 postfix clam 4096 Feb 27 02:45 020CF202034.AD42E >> >> [root@mail quarantine]# ls -l 20120227/00C2D202033.A443F/message >> -rw-rw----. 1 postfix clam 80013 Feb 27 00:41 >> 20120227/00C2D202033.A443F/message >> [root@mail quarantine]# >> >> >> i've tried to move the messages in /var/spool/postfix/incoming/ and >> changed the ownership but nothing happend. >> >> *EDIT* >> >> i've just noticed that since the update the mta is not delivering >> messages: >> >> Found 250 messages in the Processing Attempts Database >> Feb 27 18:11:56 mail MailScanner[12839]: Using locktype = flock >> Feb 27 18:11:56 mail MailScanner[12839]: Warning: skipping message >> CFA4E2003F7.AF18F as it has been attempted too many times >> Feb 27 18:11:56 mail MailScanner[12839]: Quarantined message >> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >> Feb 27 18:11:59 mail MailScanner[12844]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 18:11:59 mail MailScanner[12844]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> >> >> my MailScanner --lint: >> >> [root@mail bayes]# MailScanner --lint >> Trying to setlogsock(unix) >> >> Reading configuration file /etc/MailScanner/MailScanner.conf >> Configuration: Failed to find any configuration files like >> /etc/MailScanner/conf.d/*, skipping them. at >> /usr/share/MailScanner/MailScanner/Config.pm line 2044 >> Read 869 hostnames from the phishing whitelist >> Read 5361 hostnames from the phishing blacklists >> Config: calling custom init function SQLBlacklist >> Starting up SQL Blacklist >> Read 0 blacklist entries >> Config: calling custom init function MailWatchLogging >> Started SQL Logging child >> Config: calling custom init function SQLWhitelist >> Starting up SQL Whitelist >> Read 0 whitelist entries >> >> Checking version numbers... >> Version number in MailScanner.conf (4.84.3) is correct. >> >> Unrar is not installed, it should be in /usr/bin/unrar. >> This is required for RAR archives to be read to check >> filenames and filetypes. Virus scanning is not affected. >> >> >> Your envelope_sender_header in spam.assassin.prefs.conf is correct. >> MailScanner setting GID to (89) >> MailScanner setting UID to (89) >> >> Checking for SpamAssassin errors (if you use it)... >> Using SpamAssassin results cache >> Connected to SpamAssassin cache database >> bayes: cannot write to /etc/MailScanner/bayes/bayes_journal, bayes db >> update ignored: Permission denied >> SpamAssassin reported no errors. >> Connected to Processing Attempts Database >> Created Processing Attempts Database successfully >> There are 250 messages in the Processing Attempts Database >> Using locktype = posix >> MailScanner.conf says "Virus Scanners = clamd" >> Found these virus scanners installed: clamd >> >> =========================================================================== >> Filename Checks: Windows/DOS Executable (1 eicar.com) >> Other Checks: Found 1 problems >> Virus and Content Scanning: Starting >> Clamd::INFECTED::Eicar-Test-Signature :: ./1/ >> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com >> Virus Scanning: Clamd found 2 infections >> Infected message 1 came from 10.1.1.1 >> Virus Scanning: Found 2 viruses >> >> =========================================================================== >> Virus Scanner test reports: >> Clamd said "eicar.com was infected: Eicar-Test-Signature" >> >> If any of your virus scanners (clamd) >> are not listed there, you should check that they are installed correctly >> and that MailScanner is finding them correctly via its >> virus.scanners.conf. >> Config: calling custom end function SQLBlacklist >> Closing down by-domain spam blacklist >> Config: calling custom end function MailWatchLogging >> Config: calling custom end function SQLWhitelist >> Closing down by-domain spam whitelist >> [root@mail bayes]# >> >> On 27 February 2012 16:09, Martin Hepworth wrote: >> >>> Depends on how u saved the file as mbox files or queue files >>> >>> Should be info on the wiki on how to rerun depending on the mta etc >>> >>> Martin >>> >>> >>> On Monday, 27 February 2012, Kocisky wrote: >>> >>>> Hi all, >>>> >>>> I had the same issue, updating the os it updated also that perl/archive >>>> package, my question now is how do i re run MailScanner over all the >>>> messages that have been quarantined? >>>> >>>> in particular that perl/archive pkg was crashing because of docx and >>>> xlsx files, the problem is that all those are valid files/emails and i need >>>> to reprocess them. >>>> >>>> Thanks! >>>> Kociscky >>>> >>>> Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message >>>> CFA4E2003F7.AF18F as it has been attempted too many times >>>> Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message >>>> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >>>> Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus >>>> Scanner version 4.84.3 starting... >>>> >>>> On 2 December 2011 01:32, Martin Hepworth wrote: >>>> >>>>> That's a perl issue and patch >>>>> >>>>> Martin >>>>> >>>>> >>>>> >>>>> On Thursday, 1 December 2011, Michel Bulgado >>>>> wrote: >>>>> > John Wilcock wrote: >>>>> > >>>>> > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >>>>> > >>>>> > Insecure dependency in chmod while running with -T switch at >>>>> > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. >>>>> > >>>>> > There's a patch for that in >>>>> https://rt.cpan.org/Public/Bug/Display.html?id=61930 >>>>> > >>>>> > Ok, i download the patch file, i see the patch is for perl files, so >>>>> i ask , the problem is perl o MailScanner? >>>>> > >>>>> > So, when a go to apply the patch, I get a error, he can't find the >>>>> file 10_chmod.t >>>>> > >>>>> > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt >>>>> > can't find file to patch at input line 5 >>>>> > Perhaps you used the wrong -p or --strip option? >>>>> > The text leading up to this was: >>>>> > -------------------------- >>>>> > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm >>>>> > |index f86ef75..4bb2171 100644 >>>>> > |--- a/lib/Archive/Zip/Member.pm >>>>> > |+++ b/lib/Archive/Zip/Member.pm >>>>> > -------------------------- >>>>> > File to patch: /usr/share/perl5/Archive/Zip/Member.pm >>>>> > patching file /usr/share/perl5/Archive/Zip/Member.pm >>>>> > can't find file to patch at input line 46 >>>>> > Perhaps you used the wrong -p or --strip option? >>>>> > The text leading up to this was: >>>>> > -------------------------- >>>>> > |diff --git a/t/10_chmod.t b/t/10_chmod.t >>>>> > |index 7ae647f..0495062 100644 >>>>> > |--- a/t/10_chmod.t >>>>> > |+++ b/t/10_chmod.t >>>>> > -------------------------- >>>>> > File to patch: >>>>> > Skip this patch? [y] n >>>>> > File to patch: >>>>> > Skip this patch? [y] y >>>>> > Skipping patch. >>>>> > 1 out of 1 hunk ignored >>>>> > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i >>>>> have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch >>>>> > >>>>> > Ideas? >>>>> > >>>>> > >>>>> > >>>>> >>>>> -- >>>>> -- >>>>> Martin Hepworth >>>>> Oxford, UK >>>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> >>>> >>> >>> -- >>> -- >>> Martin Hepworth >>> Oxford, UK >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >>> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120227/534f410d/attachment-0001.html From kocisky at autistici.org Tue Feb 28 03:22:33 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 03:22:44 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: i've removed the virus scanning from MailScanner.conf and now it doesn't hang anymore, thats a start! Virus Scanning = no (i've removed also that /var/spool/MailScanner/incoming/Processing.db which i didn't really understand what it is) On 27 February 2012 22:00, Kocisky wrote: > talked too early, it crashed again: > > > MailScanner --debug > > Configuration: Failed to find any configuration files like > /etc/MailScanner/conf.d/*.conf, skipping them. at > /usr/share/MailScanner/MailScanner/Config.pm line 2044 > > In Debugging mode, not forking... > Trying to setlogsock(unix) > Building a message batch to scan... > Have a batch of 30 messages. > Insecure dependency in open while running with -T switch at > /usr/lib64/perl5/IO/File.pm line 185. > [root@mail incoming]# > > > the following is an extract of the /var/log/maillog: > > Feb 27 22:01:02 mail postfix/cleanup[2118]: 45D07200106: message-id=< > 20120228030102.45D07200106@myserver.com> > Feb 27 22:01:02 mail update.bad.phishing.sites: Delaying cron job up to > 600 seconds > Feb 27 22:01:03 mail MailScanner[2247]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:03 mail MailScanner[2247]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:03 mail MailScanner[2247]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:03 mail MailScanner[2247]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:03 mail MailScanner[2247]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Blacklist > Feb 27 22:01:03 mail MailScanner[2247]: Read 0 blacklist entries > Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:03 mail MailScanner[2247]: Started SQL Logging child > Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Whitelist > Feb 27 22:01:03 mail MailScanner[2247]: Read 0 whitelist entries > Feb 27 22:01:03 mail MailScanner[2247]: Using SpamAssassin results cache > Feb 27 22:01:03 mail MailScanner[2247]: Connected to SpamAssassin cache > database > Feb 27 22:01:03 mail MailScanner[2247]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:05 mail MailScanner[2247]: Connected to Processing Attempts > Database > Feb 27 22:01:05 mail MailScanner[2247]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:05 mail MailScanner[2247]: Using locktype = flock > Feb 27 22:01:05 mail MailScanner[2247]: Warning: skipping message > 3ED0120024F.ABEE3 as it has been attempted too many times > Feb 27 22:01:05 mail MailScanner[2247]: Quarantined message > 3ED0120024F.ABEE3 as it caused MailScanner to crash several times > Feb 27 22:01:08 mail MailScanner[2252]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:08 mail MailScanner[2252]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:08 mail MailScanner[2252]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:08 mail MailScanner[2252]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:08 mail MailScanner[2252]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Blacklist > Feb 27 22:01:08 mail MailScanner[2252]: Read 0 blacklist entries > Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:08 mail MailScanner[2252]: Started SQL Logging child > Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Whitelist > Feb 27 22:01:08 mail MailScanner[2252]: Read 0 whitelist entries > Feb 27 22:01:08 mail MailScanner[2252]: Using SpamAssassin results cache > Feb 27 22:01:08 mail MailScanner[2252]: Connected to SpamAssassin cache > database > Feb 27 22:01:08 mail MailScanner[2252]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:10 mail MailScanner[2252]: Connected to Processing Attempts > Database > Feb 27 22:01:10 mail MailScanner[2252]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:10 mail MailScanner[2252]: Using locktype = flock > Feb 27 22:01:10 mail MailScanner[2252]: Warning: skipping message > 3ED0120024F.ABEE3 as it has been attempted too many times > Feb 27 22:01:10 mail MailScanner[2252]: Quarantined message > 3ED0120024F.ABEE3 as it caused MailScanner to crash several times > Feb 27 22:01:13 mail MailScanner[2257]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:13 mail MailScanner[2257]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:13 mail MailScanner[2257]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:13 mail MailScanner[2257]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:13 mail MailScanner[2257]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Blacklist > Feb 27 22:01:13 mail MailScanner[2257]: Read 0 blacklist entries > Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:13 mail MailScanner[2257]: Started SQL Logging child > Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Whitelist > Feb 27 22:01:13 mail MailScanner[2257]: Read 0 whitelist entries > Feb 27 22:01:13 mail MailScanner[2257]: Using SpamAssassin results cache > Feb 27 22:01:13 mail MailScanner[2257]: Connected to SpamAssassin cache > database > Feb 27 22:01:13 mail MailScanner[2257]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:15 mail MailScanner[2257]: Connected to Processing Attempts > Database > Feb 27 22:01:15 mail MailScanner[2257]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:15 mail MailScanner[2257]: Using locktype = flock > Feb 27 22:01:15 mail MailScanner[2257]: Making attempt 4 at processing > message 264A7200231.A7517 > Feb 27 22:01:15 mail MailScanner[2257]: Warning: skipping message > 3ED0120024F.ABEE3 as it has been attempted too many times > Feb 27 22:01:15 mail MailScanner[2257]: Quarantined message > 3ED0120024F.ABEE3 as it caused MailScanner to crash several times > Feb 27 22:01:18 mail MailScanner[2262]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:18 mail MailScanner[2262]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:18 mail MailScanner[2262]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:18 mail MailScanner[2262]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:18 mail MailScanner[2262]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Blacklist > Feb 27 22:01:18 mail MailScanner[2262]: Read 0 blacklist entries > Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:18 mail MailScanner[2262]: Started SQL Logging child > Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Whitelist > Feb 27 22:01:18 mail MailScanner[2262]: Read 0 whitelist entries > Feb 27 22:01:18 mail MailScanner[2262]: Using SpamAssassin results cache > Feb 27 22:01:18 mail MailScanner[2262]: Connected to SpamAssassin cache > database > Feb 27 22:01:18 mail MailScanner[2262]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:20 mail MailScanner[2262]: Connected to Processing Attempts > Database > Feb 27 22:01:20 mail MailScanner[2262]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:20 mail MailScanner[2262]: Using locktype = flock > Feb 27 22:01:20 mail MailScanner[2262]: Making attempt 4 at processing > message 23EBD20023A.AA792 > Feb 27 22:01:20 mail MailScanner[2262]: Warning: skipping message > 3ED0120024F.ABEE3 as it has been attempted too many times > Feb 27 22:01:20 mail MailScanner[2262]: Quarantined message > 3ED0120024F.ABEE3 as it caused MailScanner to crash several times > Feb 27 22:01:23 mail MailScanner[2267]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:23 mail MailScanner[2267]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:23 mail MailScanner[2267]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:23 mail MailScanner[2267]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:23 mail MailScanner[2267]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Blacklist > Feb 27 22:01:23 mail MailScanner[2267]: Read 0 blacklist entries > Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:23 mail MailScanner[2267]: Started SQL Logging child > Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Whitelist > Feb 27 22:01:23 mail MailScanner[2267]: Read 0 whitelist entries > Feb 27 22:01:23 mail MailScanner[2267]: Using SpamAssassin results cache > Feb 27 22:01:23 mail MailScanner[2267]: Connected to SpamAssassin cache > database > Feb 27 22:01:23 mail MailScanner[2267]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:25 mail MailScanner[2267]: Connected to Processing Attempts > Database > Feb 27 22:01:25 mail MailScanner[2267]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:26 mail MailScanner[2267]: Using locktype = flock > Feb 27 22:01:26 mail MailScanner[2267]: Warning: skipping message > 3ED0120024F.ABEE3 as it has been attempted too many times > Feb 27 22:01:26 mail MailScanner[2267]: Quarantined message > 3ED0120024F.ABEE3 as it caused MailScanner to crash several times > Feb 27 22:01:28 mail MailScanner[2303]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:28 mail MailScanner[2303]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:28 mail MailScanner[2303]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:28 mail MailScanner[2303]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:28 mail MailScanner[2303]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Blacklist > Feb 27 22:01:28 mail MailScanner[2303]: Read 0 blacklist entries > Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:28 mail MailScanner[2303]: Started SQL Logging child > Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Whitelist > Feb 27 22:01:28 mail MailScanner[2303]: Read 0 whitelist entries > Feb 27 22:01:28 mail MailScanner[2303]: Using SpamAssassin results cache > Feb 27 22:01:28 mail MailScanner[2303]: Connected to SpamAssassin cache > database > Feb 27 22:01:28 mail MailScanner[2303]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:30 mail MailScanner[2303]: Connected to Processing Attempts > Database > Feb 27 22:01:30 mail MailScanner[2303]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:30 mail MailScanner[2303]: Using locktype = flock > Feb 27 22:01:31 mail MailScanner[2303]: Making attempt 6 at processing > message EC11020005B.A3395 > Feb 27 22:01:31 mail MailScanner[2303]: Warning: skipping message > 3ED0120024F.ABEE3 as it has been attempted too many times > Feb 27 22:01:31 mail MailScanner[2303]: Quarantined message > 3ED0120024F.ABEE3 as it caused MailScanner to crash several times > Feb 27 22:01:33 mail MailScanner[2308]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:33 mail MailScanner[2308]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:33 mail MailScanner[2308]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:33 mail MailScanner[2308]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:33 mail MailScanner[2308]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Blacklist > Feb 27 22:01:33 mail MailScanner[2308]: Read 0 blacklist entries > Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:33 mail MailScanner[2308]: Started SQL Logging child > Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Whitelist > Feb 27 22:01:33 mail MailScanner[2308]: Read 0 whitelist entries > Feb 27 22:01:33 mail MailScanner[2308]: Using SpamAssassin results cache > Feb 27 22:01:33 mail MailScanner[2308]: Connected to SpamAssassin cache > database > Feb 27 22:01:33 mail MailScanner[2308]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:35 mail MailScanner[2308]: Connected to Processing Attempts > Database > Feb 27 22:01:35 mail MailScanner[2308]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:35 mail MailScanner[2308]: Using locktype = flock > Feb 27 22:01:35 mail MailScanner[2308]: Warning: skipping message > EC11020005B.A3395 as it has been attempted too many times > Feb 27 22:01:35 mail MailScanner[2308]: Quarantined message > EC11020005B.A3395 as it caused MailScanner to crash several times > Feb 27 22:01:38 mail MailScanner[2313]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:38 mail MailScanner[2313]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:38 mail MailScanner[2313]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:38 mail MailScanner[2313]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:38 mail MailScanner[2313]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Blacklist > Feb 27 22:01:38 mail MailScanner[2313]: Read 0 blacklist entries > Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:38 mail MailScanner[2313]: Started SQL Logging child > Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Whitelist > Feb 27 22:01:38 mail MailScanner[2313]: Read 0 whitelist entries > Feb 27 22:01:38 mail MailScanner[2313]: Using SpamAssassin results cache > Feb 27 22:01:38 mail MailScanner[2313]: Connected to SpamAssassin cache > database > Feb 27 22:01:38 mail MailScanner[2313]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:40 mail MailScanner[2313]: Connected to Processing Attempts > Database > Feb 27 22:01:40 mail MailScanner[2313]: Found 79 messages in the > Processing Attempts Database > Feb 27 22:01:40 mail MailScanner[2313]: Using locktype = flock > Feb 27 22:01:40 mail MailScanner[2313]: Warning: skipping message > EC11020005B.A3395 as it has been attempted too many times > Feb 27 22:01:40 mail MailScanner[2313]: Quarantined message > EC11020005B.A3395 as it caused MailScanner to crash several times > Feb 27 22:01:43 mail MailScanner[2319]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 27 22:01:43 mail MailScanner[2319]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 27 22:01:43 mail MailScanner[2319]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 27 22:01:43 mail MailScanner[2319]: Read 869 hostnames from the > phishing whitelist > Feb 27 22:01:43 mail MailScanner[2319]: Read 5345 hostnames from the > phishing blacklists > Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init > function SQLBlacklist > Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Blacklist > Feb 27 22:01:43 mail MailScanner[2319]: Read 0 blacklist entries > Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init > function MailWatchLogging > Feb 27 22:01:43 mail MailScanner[2319]: Started SQL Logging child > Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init > function SQLWhitelist > Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Whitelist > Feb 27 22:01:43 mail MailScanner[2319]: Read 0 whitelist entries > Feb 27 22:01:44 mail MailScanner[2319]: Using SpamAssassin results cache > Feb 27 22:01:44 mail MailScanner[2319]: Connected to SpamAssassin cache > database > Feb 27 22:01:44 mail MailScanner[2319]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection rate > 2/60s for (smtp:220.248.164.185) at Feb 27 21:58:23 > Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection count > 2 for (smtp:220.248.164.185) at Feb 27 21:58:23 > Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max cache size 1 at > Feb 27 21:58:23 > > [root@mail ~]# MailScanner --lint > Trying to setlogsock(unix) > > Reading configuration file /etc/MailScanner/MailScanner.conf > Configuration: Failed to find any configuration files like > /etc/MailScanner/conf.d/*.conf, skipping them. at > /usr/share/MailScanner/MailScanner/Config.pm line 2044 > Read 869 hostnames from the phishing whitelist > Read 5345 hostnames from the phishing blacklists > Config: calling custom init function SQLBlacklist > Starting up SQL Blacklist > Read 0 blacklist entries > Config: calling custom init function MailWatchLogging > Started SQL Logging child > Config: calling custom init function SQLWhitelist > Starting up SQL Whitelist > Read 0 whitelist entries > > Checking version numbers... > Version number in MailScanner.conf (4.84.3) is correct. > > Unrar is not installed, it should be in /usr/bin/unrar. > This is required for RAR archives to be read to check > filenames and filetypes. Virus scanning is not affected. > > > Your envelope_sender_header in spam.assassin.prefs.conf is correct. > MailScanner setting GID to (89) > MailScanner setting UID to (89) > > Checking for SpamAssassin errors (if you use it)... > Using SpamAssassin results cache > Connected to SpamAssassin cache database > SpamAssassin reported no errors. > Connected to Processing Attempts Database > Created Processing Attempts Database successfully > There are 79 messages in the Processing Attempts Database > Using locktype = posix > MailScanner.conf says "Virus Scanners = clamd" > Found these virus scanners installed: clamd > =========================================================================== > Filename Checks: Windows/DOS Executable (1 eicar.com) > Other Checks: Found 1 problems > Virus and Content Scanning: Starting > Clamd::INFECTED::Eicar-Test-Signature :: ./1/ > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com > Virus Scanning: Clamd found 2 infections > Infected message 1 came from 10.1.1.1 > Virus Scanning: Found 2 viruses > =========================================================================== > Virus Scanner test reports: > Clamd said "eicar.com was infected: Eicar-Test-Signature" > > If any of your virus scanners (clamd) > are not listed there, you should check that they are installed correctly > and that MailScanner is finding them correctly via its virus.scanners.conf. > Config: calling custom end function SQLBlacklist > Closing down by-domain spam blacklist > Config: calling custom end function MailWatchLogging > Config: calling custom end function SQLWhitelist > Closing down by-domain spam whitelist > [root@mail ~]# > > any ideas? something to say: i've kust updated, for the MailScanner > configuration i've used: > > upgrade_MailScanner_conf MailScanner.conf MailScanner.conf.rpmnew > > MailScanner.new > mv -f MailScanner.conf MailScanner.old > mv -f MailScanner.new MailScanner.conf > > thanks again!! > kocisky > > On 27 February 2012 18:34, Kocisky wrote: > >> removing the file /var/spool/MailScanner/incoming/Processing.db it >> restarted to deliver the messages, i only need to figure out how to requeue >> the messages that were quarantined, should i move them into: >> >> Incoming Queue Dir = /var/spool/postfix/hold ? >> can i move the FOLDER/message directly? >> >> Thanks!! >> kocisky >> >> On 27 February 2012 18:07, Kocisky wrote: >> >>> Thanks Martin for the quick reply, i didn't find anything on >>> http://wiki.mailscanner.info/ >>> >>> I'm actually using Maildir format for emails with postfix as mta, this >>> is the filesystem structure for the quarantine files: >>> >>> [root@mail quarantine]# ls -l 20120227/ >>> total 420 >>> drwxrwx---. 2 postfix clam 4096 Feb 27 00:41 00C2D202033.A443F >>> drwxrwx---. 2 postfix clam 4096 Feb 27 02:45 020CF202034.AD42E >>> >>> [root@mail quarantine]# ls -l 20120227/00C2D202033.A443F/message >>> -rw-rw----. 1 postfix clam 80013 Feb 27 00:41 >>> 20120227/00C2D202033.A443F/message >>> [root@mail quarantine]# >>> >>> >>> i've tried to move the messages in /var/spool/postfix/incoming/ and >>> changed the ownership but nothing happend. >>> >>> *EDIT* >>> >>> i've just noticed that since the update the mta is not delivering >>> messages: >>> >>> Found 250 messages in the Processing Attempts Database >>> Feb 27 18:11:56 mail MailScanner[12839]: Using locktype = flock >>> Feb 27 18:11:56 mail MailScanner[12839]: Warning: skipping message >>> CFA4E2003F7.AF18F as it has been attempted too many times >>> Feb 27 18:11:56 mail MailScanner[12839]: Quarantined message >>> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >>> Feb 27 18:11:59 mail MailScanner[12844]: MailScanner E-Mail Virus >>> Scanner version 4.84.3 starting... >>> Feb 27 18:11:59 mail MailScanner[12844]: Reading configuration file >>> /etc/MailScanner/MailScanner.conf >>> >>> >>> my MailScanner --lint: >>> >>> [root@mail bayes]# MailScanner --lint >>> Trying to setlogsock(unix) >>> >>> Reading configuration file /etc/MailScanner/MailScanner.conf >>> Configuration: Failed to find any configuration files like >>> /etc/MailScanner/conf.d/*, skipping them. at >>> /usr/share/MailScanner/MailScanner/Config.pm line 2044 >>> Read 869 hostnames from the phishing whitelist >>> Read 5361 hostnames from the phishing blacklists >>> Config: calling custom init function SQLBlacklist >>> Starting up SQL Blacklist >>> Read 0 blacklist entries >>> Config: calling custom init function MailWatchLogging >>> Started SQL Logging child >>> Config: calling custom init function SQLWhitelist >>> Starting up SQL Whitelist >>> Read 0 whitelist entries >>> >>> Checking version numbers... >>> Version number in MailScanner.conf (4.84.3) is correct. >>> >>> Unrar is not installed, it should be in /usr/bin/unrar. >>> This is required for RAR archives to be read to check >>> filenames and filetypes. Virus scanning is not affected. >>> >>> >>> Your envelope_sender_header in spam.assassin.prefs.conf is correct. >>> MailScanner setting GID to (89) >>> MailScanner setting UID to (89) >>> >>> Checking for SpamAssassin errors (if you use it)... >>> Using SpamAssassin results cache >>> Connected to SpamAssassin cache database >>> bayes: cannot write to /etc/MailScanner/bayes/bayes_journal, bayes db >>> update ignored: Permission denied >>> SpamAssassin reported no errors. >>> Connected to Processing Attempts Database >>> Created Processing Attempts Database successfully >>> There are 250 messages in the Processing Attempts Database >>> Using locktype = posix >>> MailScanner.conf says "Virus Scanners = clamd" >>> Found these virus scanners installed: clamd >>> >>> =========================================================================== >>> Filename Checks: Windows/DOS Executable (1 eicar.com) >>> Other Checks: Found 1 problems >>> Virus and Content Scanning: Starting >>> Clamd::INFECTED::Eicar-Test-Signature :: ./1/ >>> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com >>> Virus Scanning: Clamd found 2 infections >>> Infected message 1 came from 10.1.1.1 >>> Virus Scanning: Found 2 viruses >>> >>> =========================================================================== >>> Virus Scanner test reports: >>> Clamd said "eicar.com was infected: Eicar-Test-Signature" >>> >>> If any of your virus scanners (clamd) >>> are not listed there, you should check that they are installed correctly >>> and that MailScanner is finding them correctly via its >>> virus.scanners.conf. >>> Config: calling custom end function SQLBlacklist >>> Closing down by-domain spam blacklist >>> Config: calling custom end function MailWatchLogging >>> Config: calling custom end function SQLWhitelist >>> Closing down by-domain spam whitelist >>> [root@mail bayes]# >>> >>> On 27 February 2012 16:09, Martin Hepworth wrote: >>> >>>> Depends on how u saved the file as mbox files or queue files >>>> >>>> Should be info on the wiki on how to rerun depending on the mta etc >>>> >>>> Martin >>>> >>>> >>>> On Monday, 27 February 2012, Kocisky wrote: >>>> >>>>> Hi all, >>>>> >>>>> I had the same issue, updating the os it updated also that >>>>> perl/archive package, my question now is how do i re run MailScanner over >>>>> all the messages that have been quarantined? >>>>> >>>>> in particular that perl/archive pkg was crashing because of docx and >>>>> xlsx files, the problem is that all those are valid files/emails and i need >>>>> to reprocess them. >>>>> >>>>> Thanks! >>>>> Kociscky >>>>> >>>>> Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message >>>>> CFA4E2003F7.AF18F as it has been attempted too many times >>>>> Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message >>>>> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >>>>> Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus >>>>> Scanner version 4.84.3 starting... >>>>> >>>>> On 2 December 2011 01:32, Martin Hepworth wrote: >>>>> >>>>>> That's a perl issue and patch >>>>>> >>>>>> Martin >>>>>> >>>>>> >>>>>> >>>>>> On Thursday, 1 December 2011, Michel Bulgado >>>>>> wrote: >>>>>> > John Wilcock wrote: >>>>>> > >>>>>> > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >>>>>> > >>>>>> > Insecure dependency in chmod while running with -T switch at >>>>>> > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. >>>>>> > >>>>>> > There's a patch for that in >>>>>> https://rt.cpan.org/Public/Bug/Display.html?id=61930 >>>>>> > >>>>>> > Ok, i download the patch file, i see the patch is for perl files, >>>>>> so i ask , the problem is perl o MailScanner? >>>>>> > >>>>>> > So, when a go to apply the patch, I get a error, he can't find the >>>>>> file 10_chmod.t >>>>>> > >>>>>> > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt >>>>>> > can't find file to patch at input line 5 >>>>>> > Perhaps you used the wrong -p or --strip option? >>>>>> > The text leading up to this was: >>>>>> > -------------------------- >>>>>> > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm >>>>>> > |index f86ef75..4bb2171 100644 >>>>>> > |--- a/lib/Archive/Zip/Member.pm >>>>>> > |+++ b/lib/Archive/Zip/Member.pm >>>>>> > -------------------------- >>>>>> > File to patch: /usr/share/perl5/Archive/Zip/Member.pm >>>>>> > patching file /usr/share/perl5/Archive/Zip/Member.pm >>>>>> > can't find file to patch at input line 46 >>>>>> > Perhaps you used the wrong -p or --strip option? >>>>>> > The text leading up to this was: >>>>>> > -------------------------- >>>>>> > |diff --git a/t/10_chmod.t b/t/10_chmod.t >>>>>> > |index 7ae647f..0495062 100644 >>>>>> > |--- a/t/10_chmod.t >>>>>> > |+++ b/t/10_chmod.t >>>>>> > -------------------------- >>>>>> > File to patch: >>>>>> > Skip this patch? [y] n >>>>>> > File to patch: >>>>>> > Skip this patch? [y] y >>>>>> > Skipping patch. >>>>>> > 1 out of 1 hunk ignored >>>>>> > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i >>>>>> have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch >>>>>> > >>>>>> > Ideas? >>>>>> > >>>>>> > >>>>>> > >>>>>> >>>>>> -- >>>>>> -- >>>>>> Martin Hepworth >>>>>> Oxford, UK >>>>>> >>>>>> -- >>>>>> MailScanner mailing list >>>>>> mailscanner@lists.mailscanner.info >>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>>> >>>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>>> >>>>>> Support MailScanner development - buy the book off the website! >>>>>> >>>>>> >>>>> >>>> >>>> -- >>>> -- >>>> Martin Hepworth >>>> Oxford, UK >>>> >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >>>> >>> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120227/b04a7e5f/attachment.html From jeremy at fluxlabs.net Tue Feb 28 03:34:21 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Tue Feb 28 03:34:38 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: Message-ID: Open mailscanner?s binary and add ?U to the # line. /usr/sbin/MailScanner #!/usr/bin/perl ?I/Usr/share/MailScanner ? add ?U -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 From: Kocisky > Reply-To: MailScanner discussion > Date: Mon, 27 Feb 2012 22:22:33 -0500 To: MailScanner discussion > Subject: Re: MailScanner 4.84 - attempted to kill MailScanner i've removed the virus scanning from MailScanner.conf and now it doesn't hang anymore, thats a start! Virus Scanning = no (i've removed also that /var/spool/MailScanner/incoming/Processing.db which i didn't really understand what it is) On 27 February 2012 22:00, Kocisky > wrote: talked too early, it crashed again: MailScanner --debug Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 In Debugging mode, not forking... Trying to setlogsock(unix) Building a message batch to scan... Have a batch of 30 messages. Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185. [root@mail incoming]# the following is an extract of the /var/log/maillog: Feb 27 22:01:02 mail postfix/cleanup[2118]: 45D07200106: message-id=<20120228030102.45D07200106@myserver.com> Feb 27 22:01:02 mail update.bad.phishing.sites: Delaying cron job up to 600 seconds Feb 27 22:01:03 mail MailScanner[2247]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:03 mail MailScanner[2247]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:03 mail MailScanner[2247]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:03 mail MailScanner[2247]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:03 mail MailScanner[2247]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function SQLBlacklist Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Blacklist Feb 27 22:01:03 mail MailScanner[2247]: Read 0 blacklist entries Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function MailWatchLogging Feb 27 22:01:03 mail MailScanner[2247]: Started SQL Logging child Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init function SQLWhitelist Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Whitelist Feb 27 22:01:03 mail MailScanner[2247]: Read 0 whitelist entries Feb 27 22:01:03 mail MailScanner[2247]: Using SpamAssassin results cache Feb 27 22:01:03 mail MailScanner[2247]: Connected to SpamAssassin cache database Feb 27 22:01:03 mail MailScanner[2247]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:05 mail MailScanner[2247]: Connected to Processing Attempts Database Feb 27 22:01:05 mail MailScanner[2247]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:05 mail MailScanner[2247]: Using locktype = flock Feb 27 22:01:05 mail MailScanner[2247]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:05 mail MailScanner[2247]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:08 mail MailScanner[2252]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:08 mail MailScanner[2252]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:08 mail MailScanner[2252]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:08 mail MailScanner[2252]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:08 mail MailScanner[2252]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function SQLBlacklist Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Blacklist Feb 27 22:01:08 mail MailScanner[2252]: Read 0 blacklist entries Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function MailWatchLogging Feb 27 22:01:08 mail MailScanner[2252]: Started SQL Logging child Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init function SQLWhitelist Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Whitelist Feb 27 22:01:08 mail MailScanner[2252]: Read 0 whitelist entries Feb 27 22:01:08 mail MailScanner[2252]: Using SpamAssassin results cache Feb 27 22:01:08 mail MailScanner[2252]: Connected to SpamAssassin cache database Feb 27 22:01:08 mail MailScanner[2252]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:10 mail MailScanner[2252]: Connected to Processing Attempts Database Feb 27 22:01:10 mail MailScanner[2252]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:10 mail MailScanner[2252]: Using locktype = flock Feb 27 22:01:10 mail MailScanner[2252]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:10 mail MailScanner[2252]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:13 mail MailScanner[2257]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:13 mail MailScanner[2257]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:13 mail MailScanner[2257]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:13 mail MailScanner[2257]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:13 mail MailScanner[2257]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function SQLBlacklist Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Blacklist Feb 27 22:01:13 mail MailScanner[2257]: Read 0 blacklist entries Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function MailWatchLogging Feb 27 22:01:13 mail MailScanner[2257]: Started SQL Logging child Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init function SQLWhitelist Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Whitelist Feb 27 22:01:13 mail MailScanner[2257]: Read 0 whitelist entries Feb 27 22:01:13 mail MailScanner[2257]: Using SpamAssassin results cache Feb 27 22:01:13 mail MailScanner[2257]: Connected to SpamAssassin cache database Feb 27 22:01:13 mail MailScanner[2257]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:15 mail MailScanner[2257]: Connected to Processing Attempts Database Feb 27 22:01:15 mail MailScanner[2257]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:15 mail MailScanner[2257]: Using locktype = flock Feb 27 22:01:15 mail MailScanner[2257]: Making attempt 4 at processing message 264A7200231.A7517 Feb 27 22:01:15 mail MailScanner[2257]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:15 mail MailScanner[2257]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:18 mail MailScanner[2262]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:18 mail MailScanner[2262]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:18 mail MailScanner[2262]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:18 mail MailScanner[2262]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:18 mail MailScanner[2262]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function SQLBlacklist Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Blacklist Feb 27 22:01:18 mail MailScanner[2262]: Read 0 blacklist entries Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function MailWatchLogging Feb 27 22:01:18 mail MailScanner[2262]: Started SQL Logging child Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init function SQLWhitelist Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Whitelist Feb 27 22:01:18 mail MailScanner[2262]: Read 0 whitelist entries Feb 27 22:01:18 mail MailScanner[2262]: Using SpamAssassin results cache Feb 27 22:01:18 mail MailScanner[2262]: Connected to SpamAssassin cache database Feb 27 22:01:18 mail MailScanner[2262]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:20 mail MailScanner[2262]: Connected to Processing Attempts Database Feb 27 22:01:20 mail MailScanner[2262]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:20 mail MailScanner[2262]: Using locktype = flock Feb 27 22:01:20 mail MailScanner[2262]: Making attempt 4 at processing message 23EBD20023A.AA792 Feb 27 22:01:20 mail MailScanner[2262]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:20 mail MailScanner[2262]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:23 mail MailScanner[2267]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:23 mail MailScanner[2267]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:23 mail MailScanner[2267]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:23 mail MailScanner[2267]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:23 mail MailScanner[2267]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function SQLBlacklist Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Blacklist Feb 27 22:01:23 mail MailScanner[2267]: Read 0 blacklist entries Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function MailWatchLogging Feb 27 22:01:23 mail MailScanner[2267]: Started SQL Logging child Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init function SQLWhitelist Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Whitelist Feb 27 22:01:23 mail MailScanner[2267]: Read 0 whitelist entries Feb 27 22:01:23 mail MailScanner[2267]: Using SpamAssassin results cache Feb 27 22:01:23 mail MailScanner[2267]: Connected to SpamAssassin cache database Feb 27 22:01:23 mail MailScanner[2267]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:25 mail MailScanner[2267]: Connected to Processing Attempts Database Feb 27 22:01:25 mail MailScanner[2267]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:26 mail MailScanner[2267]: Using locktype = flock Feb 27 22:01:26 mail MailScanner[2267]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:26 mail MailScanner[2267]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:28 mail MailScanner[2303]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:28 mail MailScanner[2303]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:28 mail MailScanner[2303]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:28 mail MailScanner[2303]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:28 mail MailScanner[2303]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function SQLBlacklist Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Blacklist Feb 27 22:01:28 mail MailScanner[2303]: Read 0 blacklist entries Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function MailWatchLogging Feb 27 22:01:28 mail MailScanner[2303]: Started SQL Logging child Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init function SQLWhitelist Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Whitelist Feb 27 22:01:28 mail MailScanner[2303]: Read 0 whitelist entries Feb 27 22:01:28 mail MailScanner[2303]: Using SpamAssassin results cache Feb 27 22:01:28 mail MailScanner[2303]: Connected to SpamAssassin cache database Feb 27 22:01:28 mail MailScanner[2303]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:30 mail MailScanner[2303]: Connected to Processing Attempts Database Feb 27 22:01:30 mail MailScanner[2303]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:30 mail MailScanner[2303]: Using locktype = flock Feb 27 22:01:31 mail MailScanner[2303]: Making attempt 6 at processing message EC11020005B.A3395 Feb 27 22:01:31 mail MailScanner[2303]: Warning: skipping message 3ED0120024F.ABEE3 as it has been attempted too many times Feb 27 22:01:31 mail MailScanner[2303]: Quarantined message 3ED0120024F.ABEE3 as it caused MailScanner to crash several times Feb 27 22:01:33 mail MailScanner[2308]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:33 mail MailScanner[2308]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:33 mail MailScanner[2308]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:33 mail MailScanner[2308]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:33 mail MailScanner[2308]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function SQLBlacklist Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Blacklist Feb 27 22:01:33 mail MailScanner[2308]: Read 0 blacklist entries Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function MailWatchLogging Feb 27 22:01:33 mail MailScanner[2308]: Started SQL Logging child Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init function SQLWhitelist Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Whitelist Feb 27 22:01:33 mail MailScanner[2308]: Read 0 whitelist entries Feb 27 22:01:33 mail MailScanner[2308]: Using SpamAssassin results cache Feb 27 22:01:33 mail MailScanner[2308]: Connected to SpamAssassin cache database Feb 27 22:01:33 mail MailScanner[2308]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:35 mail MailScanner[2308]: Connected to Processing Attempts Database Feb 27 22:01:35 mail MailScanner[2308]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:35 mail MailScanner[2308]: Using locktype = flock Feb 27 22:01:35 mail MailScanner[2308]: Warning: skipping message EC11020005B.A3395 as it has been attempted too many times Feb 27 22:01:35 mail MailScanner[2308]: Quarantined message EC11020005B.A3395 as it caused MailScanner to crash several times Feb 27 22:01:38 mail MailScanner[2313]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:38 mail MailScanner[2313]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:38 mail MailScanner[2313]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:38 mail MailScanner[2313]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:38 mail MailScanner[2313]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function SQLBlacklist Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Blacklist Feb 27 22:01:38 mail MailScanner[2313]: Read 0 blacklist entries Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function MailWatchLogging Feb 27 22:01:38 mail MailScanner[2313]: Started SQL Logging child Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init function SQLWhitelist Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Whitelist Feb 27 22:01:38 mail MailScanner[2313]: Read 0 whitelist entries Feb 27 22:01:38 mail MailScanner[2313]: Using SpamAssassin results cache Feb 27 22:01:38 mail MailScanner[2313]: Connected to SpamAssassin cache database Feb 27 22:01:38 mail MailScanner[2313]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:40 mail MailScanner[2313]: Connected to Processing Attempts Database Feb 27 22:01:40 mail MailScanner[2313]: Found 79 messages in the Processing Attempts Database Feb 27 22:01:40 mail MailScanner[2313]: Using locktype = flock Feb 27 22:01:40 mail MailScanner[2313]: Warning: skipping message EC11020005B.A3395 as it has been attempted too many times Feb 27 22:01:40 mail MailScanner[2313]: Quarantined message EC11020005B.A3395 as it caused MailScanner to crash several times Feb 27 22:01:43 mail MailScanner[2319]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 22:01:43 mail MailScanner[2319]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 27 22:01:43 mail MailScanner[2319]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 27 22:01:43 mail MailScanner[2319]: Read 869 hostnames from the phishing whitelist Feb 27 22:01:43 mail MailScanner[2319]: Read 5345 hostnames from the phishing blacklists Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function SQLBlacklist Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Blacklist Feb 27 22:01:43 mail MailScanner[2319]: Read 0 blacklist entries Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function MailWatchLogging Feb 27 22:01:43 mail MailScanner[2319]: Started SQL Logging child Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init function SQLWhitelist Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Whitelist Feb 27 22:01:43 mail MailScanner[2319]: Read 0 whitelist entries Feb 27 22:01:44 mail MailScanner[2319]: Using SpamAssassin results cache Feb 27 22:01:44 mail MailScanner[2319]: Connected to SpamAssassin cache database Feb 27 22:01:44 mail MailScanner[2319]: Enabling SpamAssassin auto-whitelist functionality... Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection rate 2/60s for (smtp:220.248.164.185) at Feb 27 21:58:23 Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection count 2 for (smtp:220.248.164.185) at Feb 27 21:58:23 Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max cache size 1 at Feb 27 21:58:23 [root@mail ~]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 Read 869 hostnames from the phishing whitelist Read 5345 hostnames from the phishing blacklists Config: calling custom init function SQLBlacklist Starting up SQL Blacklist Read 0 blacklist entries Config: calling custom init function MailWatchLogging Started SQL Logging child Config: calling custom init function SQLWhitelist Starting up SQL Whitelist Read 0 whitelist entries Checking version numbers... Version number in MailScanner.conf (4.84.3) is correct. Unrar is not installed, it should be in /usr/bin/unrar. This is required for RAR archives to be read to check filenames and filetypes. Virus scanning is not affected. Your envelope_sender_header in spam.assassin.prefs.conf is correct. MailScanner setting GID to (89) MailScanner setting UID to (89) Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database SpamAssassin reported no errors. Connected to Processing Attempts Database Created Processing Attempts Database successfully There are 79 messages in the Processing Attempts Database Using locktype = posix MailScanner.conf says "Virus Scanners = clamd" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED::Eicar-Test-Signature :: ./1/ Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Eicar-Test-Signature" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Config: calling custom end function SQLBlacklist Closing down by-domain spam blacklist Config: calling custom end function MailWatchLogging Config: calling custom end function SQLWhitelist Closing down by-domain spam whitelist [root@mail ~]# any ideas? something to say: i've kust updated, for the MailScanner configuration i've used: upgrade_MailScanner_conf MailScanner.conf MailScanner.conf.rpmnew > MailScanner.new mv -f MailScanner.conf MailScanner.old mv -f MailScanner.new MailScanner.conf thanks again!! kocisky On 27 February 2012 18:34, Kocisky > wrote: removing the file /var/spool/MailScanner/incoming/Processing.db it restarted to deliver the messages, i only need to figure out how to requeue the messages that were quarantined, should i move them into: Incoming Queue Dir = /var/spool/postfix/hold ? can i move the FOLDER/message directly? Thanks!! kocisky On 27 February 2012 18:07, Kocisky > wrote: Thanks Martin for the quick reply, i didn't find anything on http://wiki.mailscanner.info/ I'm actually using Maildir format for emails with postfix as mta, this is the filesystem structure for the quarantine files: [root@mail quarantine]# ls -l 20120227/ total 420 drwxrwx---. 2 postfix clam 4096 Feb 27 00:41 00C2D202033.A443F drwxrwx---. 2 postfix clam 4096 Feb 27 02:45 020CF202034.AD42E [root@mail quarantine]# ls -l 20120227/00C2D202033.A443F/message -rw-rw----. 1 postfix clam 80013 Feb 27 00:41 20120227/00C2D202033.A443F/message [root@mail quarantine]# i've tried to move the messages in /var/spool/postfix/incoming/ and changed the ownership but nothing happend. *EDIT* i've just noticed that since the update the mta is not delivering messages: Found 250 messages in the Processing Attempts Database Feb 27 18:11:56 mail MailScanner[12839]: Using locktype = flock Feb 27 18:11:56 mail MailScanner[12839]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 27 18:11:56 mail MailScanner[12839]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 27 18:11:59 mail MailScanner[12844]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 27 18:11:59 mail MailScanner[12844]: Reading configuration file /etc/MailScanner/MailScanner.conf my MailScanner --lint: [root@mail bayes]# MailScanner --lint Trying to setlogsock(unix) Reading configuration file /etc/MailScanner/MailScanner.conf Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 Read 869 hostnames from the phishing whitelist Read 5361 hostnames from the phishing blacklists Config: calling custom init function SQLBlacklist Starting up SQL Blacklist Read 0 blacklist entries Config: calling custom init function MailWatchLogging Started SQL Logging child Config: calling custom init function SQLWhitelist Starting up SQL Whitelist Read 0 whitelist entries Checking version numbers... Version number in MailScanner.conf (4.84.3) is correct. Unrar is not installed, it should be in /usr/bin/unrar. This is required for RAR archives to be read to check filenames and filetypes. Virus scanning is not affected. Your envelope_sender_header in spam.assassin.prefs.conf is correct. MailScanner setting GID to (89) MailScanner setting UID to (89) Checking for SpamAssassin errors (if you use it)... Using SpamAssassin results cache Connected to SpamAssassin cache database bayes: cannot write to /etc/MailScanner/bayes/bayes_journal, bayes db update ignored: Permission denied SpamAssassin reported no errors. Connected to Processing Attempts Database Created Processing Attempts Database successfully There are 250 messages in the Processing Attempts Database Using locktype = posix MailScanner.conf says "Virus Scanners = clamd" Found these virus scanners installed: clamd =========================================================================== Filename Checks: Windows/DOS Executable (1 eicar.com) Other Checks: Found 1 problems Virus and Content Scanning: Starting Clamd::INFECTED::Eicar-Test-Signature :: ./1/ Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus Scanning: Clamd found 2 infections Infected message 1 came from 10.1.1.1 Virus Scanning: Found 2 viruses =========================================================================== Virus Scanner test reports: Clamd said "eicar.com was infected: Eicar-Test-Signature" If any of your virus scanners (clamd) are not listed there, you should check that they are installed correctly and that MailScanner is finding them correctly via its virus.scanners.conf. Config: calling custom end function SQLBlacklist Closing down by-domain spam blacklist Config: calling custom end function MailWatchLogging Config: calling custom end function SQLWhitelist Closing down by-domain spam whitelist [root@mail bayes]# On 27 February 2012 16:09, Martin Hepworth > wrote: Depends on how u saved the file as mbox files or queue files Should be info on the wiki on how to rerun depending on the mta etc Martin On Monday, 27 February 2012, Kocisky wrote: Hi all, I had the same issue, updating the os it updated also that perl/archive package, my question now is how do i re run MailScanner over all the messages that have been quarantined? in particular that perl/archive pkg was crashing because of docx and xlsx files, the problem is that all those are valid files/emails and i need to reprocess them. Thanks! Kociscky Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... On 2 December 2011 01:32, Martin Hepworth wrote: That's a perl issue and patch Martin On Thursday, 1 December 2011, Michel Bulgado wrote: > John Wilcock wrote: > > Le 01/12/2011 18:44, Michel Bulgado a ?crit : > > Insecure dependency in chmod while running with -T switch at > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. > > There's a patch for that in https://rt.cpan.org/Public/Bug/Display.html?id=61930 > > Ok, i download the patch file, i see the patch is for perl files, so i ask , the problem is perl o MailScanner? > > So, when a go to apply the patch, I get a error, he can't find the file 10_chmod.t > > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt > can't find file to patch at input line 5 > Perhaps you used the wrong -p or --strip option? > The text leading up to this was: > -------------------------- > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm > |index f86ef75..4bb2171 100644 > |--- a/lib/Archive/Zip/Member.pm > |+++ b/lib/Archive/Zip/Member.pm > -------------------------- > File to patch: /usr/share/perl5/Archive/Zip/Member.pm > patching file /usr/share/perl5/Archive/Zip/Member.pm > can't find file to patch at input line 46 > Perhaps you used the wrong -p or --strip option? > The text leading up to this was: > -------------------------- > |diff --git a/t/10_chmod.t b/t/10_chmod.t > |index 7ae647f..0495062 100644 > |--- a/t/10_chmod.t > |+++ b/t/10_chmod.t > -------------------------- > File to patch: > Skip this patch? [y] n > File to patch: > Skip this patch? [y] y > Skipping patch. > 1 out of 1 hunk ignored > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch > > Ideas? > > > -- -- Martin Hepworth Oxford, UK -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- -- Martin Hepworth Oxford, UK -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/5b172291/attachment-0001.html From kocisky at autistici.org Tue Feb 28 03:51:01 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 03:51:12 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: let me take it back... it still crashes, i still have the error: [root@mail ~]# MailScanner --debug Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 In Debugging mode, not forking... Trying to setlogsock(unix) Building a message batch to scan... Have a batch of 30 messages. Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185. (which is this: return open($fh, IO::Handle::_open_mode_string($mode), $file);) i've seen from the MailScanner.com: # This is the location of the database file used to track the number of # times any message has been attempted. # To clear out the database, just delete the file, MailScanner will re- # create it automatically when it starts. Processing Attempts Database = /var/spool/MailScanner/incoming/Processing.db i cant say if this helps: # Limit the number of attempts made at processing any particular message. # If you get a message which repeatedly crashes MailScanner, it will # limit the imapact by ignoring the message and refusing to process it, # after more than the given number of attempts have been made at it. # Note that enabling this feature causes a slight performance hit. # Set this to 0 to disable the limit and the entire Processing Attempts # Database and its requirement for SQLite. # This cannot be a ruleset, only a simple value. Maximum Processing Attempts = 0 # instead of 6 any ideas? thanks in advance! kocisky On 27 February 2012 22:22, Kocisky wrote: > i've removed the virus scanning from MailScanner.conf and now it doesn't > hang anymore, thats a start! > > Virus Scanning = no > > (i've removed also that /var/spool/MailScanner/incoming/Processing.db > which i didn't really understand what it is) > > On 27 February 2012 22:00, Kocisky wrote: > >> talked too early, it crashed again: >> >> >> MailScanner --debug >> >> Configuration: Failed to find any configuration files like >> /etc/MailScanner/conf.d/*.conf, skipping them. at >> /usr/share/MailScanner/MailScanner/Config.pm line 2044 >> >> In Debugging mode, not forking... >> Trying to setlogsock(unix) >> Building a message batch to scan... >> Have a batch of 30 messages. >> Insecure dependency in open while running with -T switch at >> /usr/lib64/perl5/IO/File.pm line 185. >> [root@mail incoming]# >> >> >> the following is an extract of the /var/log/maillog: >> >> Feb 27 22:01:02 mail postfix/cleanup[2118]: 45D07200106: message-id=< >> 20120228030102.45D07200106@myserver.com> >> Feb 27 22:01:02 mail update.bad.phishing.sites: Delaying cron job up to >> 600 seconds >> Feb 27 22:01:03 mail MailScanner[2247]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:03 mail MailScanner[2247]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:03 mail MailScanner[2247]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:03 mail MailScanner[2247]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:03 mail MailScanner[2247]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Blacklist >> Feb 27 22:01:03 mail MailScanner[2247]: Read 0 blacklist entries >> Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:03 mail MailScanner[2247]: Started SQL Logging child >> Feb 27 22:01:03 mail MailScanner[2247]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:03 mail MailScanner[2247]: Starting up SQL Whitelist >> Feb 27 22:01:03 mail MailScanner[2247]: Read 0 whitelist entries >> Feb 27 22:01:03 mail MailScanner[2247]: Using SpamAssassin results cache >> Feb 27 22:01:03 mail MailScanner[2247]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:03 mail MailScanner[2247]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:05 mail MailScanner[2247]: Connected to Processing Attempts >> Database >> Feb 27 22:01:05 mail MailScanner[2247]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:05 mail MailScanner[2247]: Using locktype = flock >> Feb 27 22:01:05 mail MailScanner[2247]: Warning: skipping message >> 3ED0120024F.ABEE3 as it has been attempted too many times >> Feb 27 22:01:05 mail MailScanner[2247]: Quarantined message >> 3ED0120024F.ABEE3 as it caused MailScanner to crash several times >> Feb 27 22:01:08 mail MailScanner[2252]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:08 mail MailScanner[2252]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:08 mail MailScanner[2252]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:08 mail MailScanner[2252]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:08 mail MailScanner[2252]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Blacklist >> Feb 27 22:01:08 mail MailScanner[2252]: Read 0 blacklist entries >> Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:08 mail MailScanner[2252]: Started SQL Logging child >> Feb 27 22:01:08 mail MailScanner[2252]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:08 mail MailScanner[2252]: Starting up SQL Whitelist >> Feb 27 22:01:08 mail MailScanner[2252]: Read 0 whitelist entries >> Feb 27 22:01:08 mail MailScanner[2252]: Using SpamAssassin results cache >> Feb 27 22:01:08 mail MailScanner[2252]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:08 mail MailScanner[2252]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:10 mail MailScanner[2252]: Connected to Processing Attempts >> Database >> Feb 27 22:01:10 mail MailScanner[2252]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:10 mail MailScanner[2252]: Using locktype = flock >> Feb 27 22:01:10 mail MailScanner[2252]: Warning: skipping message >> 3ED0120024F.ABEE3 as it has been attempted too many times >> Feb 27 22:01:10 mail MailScanner[2252]: Quarantined message >> 3ED0120024F.ABEE3 as it caused MailScanner to crash several times >> Feb 27 22:01:13 mail MailScanner[2257]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:13 mail MailScanner[2257]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:13 mail MailScanner[2257]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:13 mail MailScanner[2257]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:13 mail MailScanner[2257]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Blacklist >> Feb 27 22:01:13 mail MailScanner[2257]: Read 0 blacklist entries >> Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:13 mail MailScanner[2257]: Started SQL Logging child >> Feb 27 22:01:13 mail MailScanner[2257]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:13 mail MailScanner[2257]: Starting up SQL Whitelist >> Feb 27 22:01:13 mail MailScanner[2257]: Read 0 whitelist entries >> Feb 27 22:01:13 mail MailScanner[2257]: Using SpamAssassin results cache >> Feb 27 22:01:13 mail MailScanner[2257]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:13 mail MailScanner[2257]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:15 mail MailScanner[2257]: Connected to Processing Attempts >> Database >> Feb 27 22:01:15 mail MailScanner[2257]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:15 mail MailScanner[2257]: Using locktype = flock >> Feb 27 22:01:15 mail MailScanner[2257]: Making attempt 4 at processing >> message 264A7200231.A7517 >> Feb 27 22:01:15 mail MailScanner[2257]: Warning: skipping message >> 3ED0120024F.ABEE3 as it has been attempted too many times >> Feb 27 22:01:15 mail MailScanner[2257]: Quarantined message >> 3ED0120024F.ABEE3 as it caused MailScanner to crash several times >> Feb 27 22:01:18 mail MailScanner[2262]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:18 mail MailScanner[2262]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:18 mail MailScanner[2262]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:18 mail MailScanner[2262]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:18 mail MailScanner[2262]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Blacklist >> Feb 27 22:01:18 mail MailScanner[2262]: Read 0 blacklist entries >> Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:18 mail MailScanner[2262]: Started SQL Logging child >> Feb 27 22:01:18 mail MailScanner[2262]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:18 mail MailScanner[2262]: Starting up SQL Whitelist >> Feb 27 22:01:18 mail MailScanner[2262]: Read 0 whitelist entries >> Feb 27 22:01:18 mail MailScanner[2262]: Using SpamAssassin results cache >> Feb 27 22:01:18 mail MailScanner[2262]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:18 mail MailScanner[2262]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:20 mail MailScanner[2262]: Connected to Processing Attempts >> Database >> Feb 27 22:01:20 mail MailScanner[2262]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:20 mail MailScanner[2262]: Using locktype = flock >> Feb 27 22:01:20 mail MailScanner[2262]: Making attempt 4 at processing >> message 23EBD20023A.AA792 >> Feb 27 22:01:20 mail MailScanner[2262]: Warning: skipping message >> 3ED0120024F.ABEE3 as it has been attempted too many times >> Feb 27 22:01:20 mail MailScanner[2262]: Quarantined message >> 3ED0120024F.ABEE3 as it caused MailScanner to crash several times >> Feb 27 22:01:23 mail MailScanner[2267]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:23 mail MailScanner[2267]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:23 mail MailScanner[2267]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:23 mail MailScanner[2267]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:23 mail MailScanner[2267]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Blacklist >> Feb 27 22:01:23 mail MailScanner[2267]: Read 0 blacklist entries >> Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:23 mail MailScanner[2267]: Started SQL Logging child >> Feb 27 22:01:23 mail MailScanner[2267]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:23 mail MailScanner[2267]: Starting up SQL Whitelist >> Feb 27 22:01:23 mail MailScanner[2267]: Read 0 whitelist entries >> Feb 27 22:01:23 mail MailScanner[2267]: Using SpamAssassin results cache >> Feb 27 22:01:23 mail MailScanner[2267]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:23 mail MailScanner[2267]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:25 mail MailScanner[2267]: Connected to Processing Attempts >> Database >> Feb 27 22:01:25 mail MailScanner[2267]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:26 mail MailScanner[2267]: Using locktype = flock >> Feb 27 22:01:26 mail MailScanner[2267]: Warning: skipping message >> 3ED0120024F.ABEE3 as it has been attempted too many times >> Feb 27 22:01:26 mail MailScanner[2267]: Quarantined message >> 3ED0120024F.ABEE3 as it caused MailScanner to crash several times >> Feb 27 22:01:28 mail MailScanner[2303]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:28 mail MailScanner[2303]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:28 mail MailScanner[2303]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:28 mail MailScanner[2303]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:28 mail MailScanner[2303]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Blacklist >> Feb 27 22:01:28 mail MailScanner[2303]: Read 0 blacklist entries >> Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:28 mail MailScanner[2303]: Started SQL Logging child >> Feb 27 22:01:28 mail MailScanner[2303]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:28 mail MailScanner[2303]: Starting up SQL Whitelist >> Feb 27 22:01:28 mail MailScanner[2303]: Read 0 whitelist entries >> Feb 27 22:01:28 mail MailScanner[2303]: Using SpamAssassin results cache >> Feb 27 22:01:28 mail MailScanner[2303]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:28 mail MailScanner[2303]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:30 mail MailScanner[2303]: Connected to Processing Attempts >> Database >> Feb 27 22:01:30 mail MailScanner[2303]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:30 mail MailScanner[2303]: Using locktype = flock >> Feb 27 22:01:31 mail MailScanner[2303]: Making attempt 6 at processing >> message EC11020005B.A3395 >> Feb 27 22:01:31 mail MailScanner[2303]: Warning: skipping message >> 3ED0120024F.ABEE3 as it has been attempted too many times >> Feb 27 22:01:31 mail MailScanner[2303]: Quarantined message >> 3ED0120024F.ABEE3 as it caused MailScanner to crash several times >> Feb 27 22:01:33 mail MailScanner[2308]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:33 mail MailScanner[2308]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:33 mail MailScanner[2308]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:33 mail MailScanner[2308]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:33 mail MailScanner[2308]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Blacklist >> Feb 27 22:01:33 mail MailScanner[2308]: Read 0 blacklist entries >> Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:33 mail MailScanner[2308]: Started SQL Logging child >> Feb 27 22:01:33 mail MailScanner[2308]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:33 mail MailScanner[2308]: Starting up SQL Whitelist >> Feb 27 22:01:33 mail MailScanner[2308]: Read 0 whitelist entries >> Feb 27 22:01:33 mail MailScanner[2308]: Using SpamAssassin results cache >> Feb 27 22:01:33 mail MailScanner[2308]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:33 mail MailScanner[2308]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:35 mail MailScanner[2308]: Connected to Processing Attempts >> Database >> Feb 27 22:01:35 mail MailScanner[2308]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:35 mail MailScanner[2308]: Using locktype = flock >> Feb 27 22:01:35 mail MailScanner[2308]: Warning: skipping message >> EC11020005B.A3395 as it has been attempted too many times >> Feb 27 22:01:35 mail MailScanner[2308]: Quarantined message >> EC11020005B.A3395 as it caused MailScanner to crash several times >> Feb 27 22:01:38 mail MailScanner[2313]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:38 mail MailScanner[2313]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:38 mail MailScanner[2313]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:38 mail MailScanner[2313]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:38 mail MailScanner[2313]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Blacklist >> Feb 27 22:01:38 mail MailScanner[2313]: Read 0 blacklist entries >> Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:38 mail MailScanner[2313]: Started SQL Logging child >> Feb 27 22:01:38 mail MailScanner[2313]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:38 mail MailScanner[2313]: Starting up SQL Whitelist >> Feb 27 22:01:38 mail MailScanner[2313]: Read 0 whitelist entries >> Feb 27 22:01:38 mail MailScanner[2313]: Using SpamAssassin results cache >> Feb 27 22:01:38 mail MailScanner[2313]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:38 mail MailScanner[2313]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:40 mail MailScanner[2313]: Connected to Processing Attempts >> Database >> Feb 27 22:01:40 mail MailScanner[2313]: Found 79 messages in the >> Processing Attempts Database >> Feb 27 22:01:40 mail MailScanner[2313]: Using locktype = flock >> Feb 27 22:01:40 mail MailScanner[2313]: Warning: skipping message >> EC11020005B.A3395 as it has been attempted too many times >> Feb 27 22:01:40 mail MailScanner[2313]: Quarantined message >> EC11020005B.A3395 as it caused MailScanner to crash several times >> Feb 27 22:01:43 mail MailScanner[2319]: MailScanner E-Mail Virus Scanner >> version 4.84.3 starting... >> Feb 27 22:01:43 mail MailScanner[2319]: Reading configuration file >> /etc/MailScanner/MailScanner.conf >> Feb 27 22:01:43 mail MailScanner[2319]: Configuration: Failed to find any >> configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. >> Feb 27 22:01:43 mail MailScanner[2319]: Read 869 hostnames from the >> phishing whitelist >> Feb 27 22:01:43 mail MailScanner[2319]: Read 5345 hostnames from the >> phishing blacklists >> Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init >> function SQLBlacklist >> Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Blacklist >> Feb 27 22:01:43 mail MailScanner[2319]: Read 0 blacklist entries >> Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init >> function MailWatchLogging >> Feb 27 22:01:43 mail MailScanner[2319]: Started SQL Logging child >> Feb 27 22:01:43 mail MailScanner[2319]: Config: calling custom init >> function SQLWhitelist >> Feb 27 22:01:43 mail MailScanner[2319]: Starting up SQL Whitelist >> Feb 27 22:01:43 mail MailScanner[2319]: Read 0 whitelist entries >> Feb 27 22:01:44 mail MailScanner[2319]: Using SpamAssassin results cache >> Feb 27 22:01:44 mail MailScanner[2319]: Connected to SpamAssassin cache >> database >> Feb 27 22:01:44 mail MailScanner[2319]: Enabling SpamAssassin >> auto-whitelist functionality... >> Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection rate >> 2/60s for (smtp:220.248.164.185) at Feb 27 21:58:23 >> Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max connection >> count 2 for (smtp:220.248.164.185) at Feb 27 21:58:23 >> Feb 27 22:01:44 mail postfix/anvil[1902]: statistics: max cache size 1 at >> Feb 27 21:58:23 >> >> [root@mail ~]# MailScanner --lint >> Trying to setlogsock(unix) >> >> Reading configuration file /etc/MailScanner/MailScanner.conf >> Configuration: Failed to find any configuration files like >> /etc/MailScanner/conf.d/*.conf, skipping them. at >> /usr/share/MailScanner/MailScanner/Config.pm line 2044 >> Read 869 hostnames from the phishing whitelist >> Read 5345 hostnames from the phishing blacklists >> Config: calling custom init function SQLBlacklist >> Starting up SQL Blacklist >> Read 0 blacklist entries >> Config: calling custom init function MailWatchLogging >> Started SQL Logging child >> Config: calling custom init function SQLWhitelist >> Starting up SQL Whitelist >> Read 0 whitelist entries >> >> Checking version numbers... >> Version number in MailScanner.conf (4.84.3) is correct. >> >> Unrar is not installed, it should be in /usr/bin/unrar. >> This is required for RAR archives to be read to check >> filenames and filetypes. Virus scanning is not affected. >> >> >> Your envelope_sender_header in spam.assassin.prefs.conf is correct. >> MailScanner setting GID to (89) >> MailScanner setting UID to (89) >> >> Checking for SpamAssassin errors (if you use it)... >> Using SpamAssassin results cache >> Connected to SpamAssassin cache database >> SpamAssassin reported no errors. >> Connected to Processing Attempts Database >> Created Processing Attempts Database successfully >> There are 79 messages in the Processing Attempts Database >> Using locktype = posix >> MailScanner.conf says "Virus Scanners = clamd" >> Found these virus scanners installed: clamd >> >> =========================================================================== >> Filename Checks: Windows/DOS Executable (1 eicar.com) >> Other Checks: Found 1 problems >> Virus and Content Scanning: Starting >> Clamd::INFECTED::Eicar-Test-Signature :: ./1/ >> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com >> Virus Scanning: Clamd found 2 infections >> Infected message 1 came from 10.1.1.1 >> Virus Scanning: Found 2 viruses >> >> =========================================================================== >> Virus Scanner test reports: >> Clamd said "eicar.com was infected: Eicar-Test-Signature" >> >> If any of your virus scanners (clamd) >> are not listed there, you should check that they are installed correctly >> and that MailScanner is finding them correctly via its >> virus.scanners.conf. >> Config: calling custom end function SQLBlacklist >> Closing down by-domain spam blacklist >> Config: calling custom end function MailWatchLogging >> Config: calling custom end function SQLWhitelist >> Closing down by-domain spam whitelist >> [root@mail ~]# >> >> any ideas? something to say: i've kust updated, for the MailScanner >> configuration i've used: >> >> upgrade_MailScanner_conf MailScanner.conf MailScanner.conf.rpmnew > >> MailScanner.new >> mv -f MailScanner.conf MailScanner.old >> mv -f MailScanner.new MailScanner.conf >> >> thanks again!! >> kocisky >> >> On 27 February 2012 18:34, Kocisky wrote: >> >>> removing the file /var/spool/MailScanner/incoming/Processing.db it >>> restarted to deliver the messages, i only need to figure out how to requeue >>> the messages that were quarantined, should i move them into: >>> >>> Incoming Queue Dir = /var/spool/postfix/hold ? >>> can i move the FOLDER/message directly? >>> >>> Thanks!! >>> kocisky >>> >>> On 27 February 2012 18:07, Kocisky wrote: >>> >>>> Thanks Martin for the quick reply, i didn't find anything on >>>> http://wiki.mailscanner.info/ >>>> >>>> I'm actually using Maildir format for emails with postfix as mta, this >>>> is the filesystem structure for the quarantine files: >>>> >>>> [root@mail quarantine]# ls -l 20120227/ >>>> total 420 >>>> drwxrwx---. 2 postfix clam 4096 Feb 27 00:41 00C2D202033.A443F >>>> drwxrwx---. 2 postfix clam 4096 Feb 27 02:45 020CF202034.AD42E >>>> >>>> [root@mail quarantine]# ls -l 20120227/00C2D202033.A443F/message >>>> -rw-rw----. 1 postfix clam 80013 Feb 27 00:41 >>>> 20120227/00C2D202033.A443F/message >>>> [root@mail quarantine]# >>>> >>>> >>>> i've tried to move the messages in /var/spool/postfix/incoming/ and >>>> changed the ownership but nothing happend. >>>> >>>> *EDIT* >>>> >>>> i've just noticed that since the update the mta is not delivering >>>> messages: >>>> >>>> Found 250 messages in the Processing Attempts Database >>>> Feb 27 18:11:56 mail MailScanner[12839]: Using locktype = flock >>>> Feb 27 18:11:56 mail MailScanner[12839]: Warning: skipping message >>>> CFA4E2003F7.AF18F as it has been attempted too many times >>>> Feb 27 18:11:56 mail MailScanner[12839]: Quarantined message >>>> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >>>> Feb 27 18:11:59 mail MailScanner[12844]: MailScanner E-Mail Virus >>>> Scanner version 4.84.3 starting... >>>> Feb 27 18:11:59 mail MailScanner[12844]: Reading configuration file >>>> /etc/MailScanner/MailScanner.conf >>>> >>>> >>>> my MailScanner --lint: >>>> >>>> [root@mail bayes]# MailScanner --lint >>>> Trying to setlogsock(unix) >>>> >>>> Reading configuration file /etc/MailScanner/MailScanner.conf >>>> Configuration: Failed to find any configuration files like >>>> /etc/MailScanner/conf.d/*, skipping them. at >>>> /usr/share/MailScanner/MailScanner/Config.pm line 2044 >>>> Read 869 hostnames from the phishing whitelist >>>> Read 5361 hostnames from the phishing blacklists >>>> Config: calling custom init function SQLBlacklist >>>> Starting up SQL Blacklist >>>> Read 0 blacklist entries >>>> Config: calling custom init function MailWatchLogging >>>> Started SQL Logging child >>>> Config: calling custom init function SQLWhitelist >>>> Starting up SQL Whitelist >>>> Read 0 whitelist entries >>>> >>>> Checking version numbers... >>>> Version number in MailScanner.conf (4.84.3) is correct. >>>> >>>> Unrar is not installed, it should be in /usr/bin/unrar. >>>> This is required for RAR archives to be read to check >>>> filenames and filetypes. Virus scanning is not affected. >>>> >>>> >>>> Your envelope_sender_header in spam.assassin.prefs.conf is correct. >>>> MailScanner setting GID to (89) >>>> MailScanner setting UID to (89) >>>> >>>> Checking for SpamAssassin errors (if you use it)... >>>> Using SpamAssassin results cache >>>> Connected to SpamAssassin cache database >>>> bayes: cannot write to /etc/MailScanner/bayes/bayes_journal, bayes db >>>> update ignored: Permission denied >>>> SpamAssassin reported no errors. >>>> Connected to Processing Attempts Database >>>> Created Processing Attempts Database successfully >>>> There are 250 messages in the Processing Attempts Database >>>> Using locktype = posix >>>> MailScanner.conf says "Virus Scanners = clamd" >>>> Found these virus scanners installed: clamd >>>> >>>> =========================================================================== >>>> Filename Checks: Windows/DOS Executable (1 eicar.com) >>>> Other Checks: Found 1 problems >>>> Virus and Content Scanning: Starting >>>> Clamd::INFECTED::Eicar-Test-Signature :: ./1/ >>>> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com >>>> Virus Scanning: Clamd found 2 infections >>>> Infected message 1 came from 10.1.1.1 >>>> Virus Scanning: Found 2 viruses >>>> >>>> =========================================================================== >>>> Virus Scanner test reports: >>>> Clamd said "eicar.com was infected: Eicar-Test-Signature" >>>> >>>> If any of your virus scanners (clamd) >>>> are not listed there, you should check that they are installed correctly >>>> and that MailScanner is finding them correctly via its >>>> virus.scanners.conf. >>>> Config: calling custom end function SQLBlacklist >>>> Closing down by-domain spam blacklist >>>> Config: calling custom end function MailWatchLogging >>>> Config: calling custom end function SQLWhitelist >>>> Closing down by-domain spam whitelist >>>> [root@mail bayes]# >>>> >>>> On 27 February 2012 16:09, Martin Hepworth wrote: >>>> >>>>> Depends on how u saved the file as mbox files or queue files >>>>> >>>>> Should be info on the wiki on how to rerun depending on the mta etc >>>>> >>>>> Martin >>>>> >>>>> >>>>> On Monday, 27 February 2012, Kocisky wrote: >>>>> >>>>>> Hi all, >>>>>> >>>>>> I had the same issue, updating the os it updated also that >>>>>> perl/archive package, my question now is how do i re run MailScanner over >>>>>> all the messages that have been quarantined? >>>>>> >>>>>> in particular that perl/archive pkg was crashing because of docx and >>>>>> xlsx files, the problem is that all those are valid files/emails and i need >>>>>> to reprocess them. >>>>>> >>>>>> Thanks! >>>>>> Kociscky >>>>>> >>>>>> Feb 27 15:29:04 mail MailScanner[30697]: Warning: skipping message >>>>>> CFA4E2003F7.AF18F as it has been attempted too many times >>>>>> Feb 27 15:29:04 mail MailScanner[30697]: Quarantined message >>>>>> CFA4E2003F7.AF18F as it caused MailScanner to crash several times >>>>>> Feb 27 15:29:07 mail MailScanner[30702]: MailScanner E-Mail Virus >>>>>> Scanner version 4.84.3 starting... >>>>>> >>>>>> On 2 December 2011 01:32, Martin Hepworth wrote: >>>>>> >>>>>>> That's a perl issue and patch >>>>>>> >>>>>>> Martin >>>>>>> >>>>>>> >>>>>>> >>>>>>> On Thursday, 1 December 2011, Michel Bulgado >>>>>>> wrote: >>>>>>> > John Wilcock wrote: >>>>>>> > >>>>>>> > Le 01/12/2011 18:44, Michel Bulgado a ?crit : >>>>>>> > >>>>>>> > Insecure dependency in chmod while running with -T switch at >>>>>>> > /usr/share/perl5/Archive/Zip/Member.pm line 490. Failed. >>>>>>> > >>>>>>> > There's a patch for that in >>>>>>> https://rt.cpan.org/Public/Bug/Display.html?id=61930 >>>>>>> > >>>>>>> > Ok, i download the patch file, i see the patch is for perl files, >>>>>>> so i ask , the problem is perl o MailScanner? >>>>>>> > >>>>>>> > So, when a go to apply the patch, I get a error, he can't find the >>>>>>> file 10_chmod.t >>>>>>> > >>>>>>> > [root@server MailScanner]# patch -p1 < patch_MailScanner.txt >>>>>>> > can't find file to patch at input line 5 >>>>>>> > Perhaps you used the wrong -p or --strip option? >>>>>>> > The text leading up to this was: >>>>>>> > -------------------------- >>>>>>> > |diff --git a/lib/Archive/Zip/Member.pm b/lib/Archive/Zip/Member.pm >>>>>>> > |index f86ef75..4bb2171 100644 >>>>>>> > |--- a/lib/Archive/Zip/Member.pm >>>>>>> > |+++ b/lib/Archive/Zip/Member.pm >>>>>>> > -------------------------- >>>>>>> > File to patch: /usr/share/perl5/Archive/Zip/Member.pm >>>>>>> > patching file /usr/share/perl5/Archive/Zip/Member.pm >>>>>>> > can't find file to patch at input line 46 >>>>>>> > Perhaps you used the wrong -p or --strip option? >>>>>>> > The text leading up to this was: >>>>>>> > -------------------------- >>>>>>> > |diff --git a/t/10_chmod.t b/t/10_chmod.t >>>>>>> > |index 7ae647f..0495062 100644 >>>>>>> > |--- a/t/10_chmod.t >>>>>>> > |+++ b/t/10_chmod.t >>>>>>> > -------------------------- >>>>>>> > File to patch: >>>>>>> > Skip this patch? [y] n >>>>>>> > File to patch: >>>>>>> > Skip this patch? [y] y >>>>>>> > Skipping patch. >>>>>>> > 1 out of 1 hunk ignored >>>>>>> > Searching for the 10_chmod.t, his belong to "perl-Archive-Zip", i >>>>>>> have installed this packages from rpm : perl-Archive-Zip-1.30-2.el6.noarch >>>>>>> > >>>>>>> > Ideas? >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> >>>>>>> -- >>>>>>> -- >>>>>>> Martin Hepworth >>>>>>> Oxford, UK >>>>>>> >>>>>>> -- >>>>>>> MailScanner mailing list >>>>>>> mailscanner@lists.mailscanner.info >>>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>>>> >>>>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>>>> >>>>>>> Support MailScanner development - buy the book off the website! >>>>>>> >>>>>>> >>>>>> >>>>> >>>>> -- >>>>> -- >>>>> Martin Hepworth >>>>> Oxford, UK >>>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>>>> >>>> >>> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120227/89190328/attachment.html From andrew at topdog.za.net Tue Feb 28 04:50:39 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Tue Feb 28 04:50:56 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> Message-ID: <469106DE-45F1-4D57-BE83-136534F39FA6@topdog.za.net> On 28 Feb 2012, at 5:51 AM, Kocisky wrote: > let me take it back... it still crashes, i still have the error: > > [root@mail ~]# MailScanner --debug > > Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. at /usr/share/MailScanner/MailScanner/Config.pm line 2044 > > In Debugging mode, not forking... > Trying to setlogsock(unix) > Building a message batch to scan... > Have a batch of 30 messages. > Insecure dependency in open while running with -T switch at /usr/lib64/perl5/IO/File.pm line 185. > What MTA are you using ? i can take a look at this for you if i can squeeze some time. -- www.baruwa.org From kocisky at autistici.org Tue Feb 28 12:24:42 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 12:24:52 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <469106DE-45F1-4D57-BE83-136534F39FA6@topdog.za.net> References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> <469106DE-45F1-4D57-BE83-136534F39FA6@topdog.za.net> Message-ID: postfix, below some additional info: MailScanner --version Running on Linux mail 2.6.32-71.29.1.el6.centos.plus.x86_64 #1 SMP Sun Jun 26 16:27:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux This is CentOS release 6.2 (Final) This is Perl version 5.010001 (5.10.1) This is MailScanner version 4.84.3 Module versions are: 1.00 AnyDBM_File 1.30 Archive::Zip 0.23 bignum 1.11 Carp 2.02 Compress::Zlib 1.119 Convert::BinHex 0.17 Convert::TNEF 2.124 Data::Dumper 2.27 Date::Parse 1.03 DirHandle 1.06 Fcntl 2.77 File::Basename 2.14 File::Copy 2.02 FileHandle 2.08 File::Path 0.22 File::Temp 0.92 Filesys::Df 3.64 HTML::Entities 3.64 HTML::Parser 3.57 HTML::TokeParser 1.25 IO 1.14 IO::File 1.13 IO::Pipe 2.04 Mail::Header 1.89 Math::BigInt 0.22 Math::BigRat 3.08 MIME::Base64 5.427 MIME::Decoder 5.427 MIME::Decoder::UU 5.427 MIME::Head 5.427 MIME::Parser 3.08 MIME::QuotedPrint 5.427 MIME::Tools 0.14 Net::CIDR 1.25 Net::IP 0.19 OLE::Storage_Lite 1.04 Pod::Escapes 3.13 Pod::Simple 1.17 POSIX 1.21 Scalar::Util 1.82 Socket 2.20 Storable 1.4 Sys::Hostname::Long 0.27 Sys::Syslog 1.40 Test::Pod 0.92 Test::Simple 1.9721 Time::HiRes 1.02 Time::localtime Optional module versions are: 1.58 Archive::Tar 0.23 bignum missing Business::ISBN missing Business::ISBN::Data missing Data::Dump 1.82 DB_File 1.27 DBD::SQLite 1.609 DBI 1.16 Digest 1.01 Digest::HMAC 2.39 Digest::MD5 2.12 Digest::SHA1 1.01 Encode::Detect missing Error 0.27 ExtUtils::CBuilder 2.2203 ExtUtils::ParseXS 2.38 Getopt::Long missing Inline missing IO::String 1.09 IO::Zlib missing IP::Country missing Mail::ClamAV 3.003001 Mail::SpamAssassin missing Mail::SPF missing Mail::SPF::Query 0.35 Module::Build missing Net::CIDR::Lite 0.65 Net::DNS missing Net::DNS::Resolver::Programmable missing Net::LDAP 4.027 NetAddr::IP missing Parse::RecDescent missing SAVI 3.17 Test::Harness missing Test::Manifest 2.0.0 Text::Balanced 1.40 URI 0.77 version missing YAML [root@mail ~]# On 27 February 2012 23:50, Andrew Colin Kissa wrote: > > On 28 Feb 2012, at 5:51 AM, Kocisky wrote: > > > let me take it back... it still crashes, i still have the error: > > > > [root@mail ~]# MailScanner --debug > > > > Configuration: Failed to find any configuration files like > /etc/MailScanner/conf.d/*.conf, skipping them. at > /usr/share/MailScanner/MailScanner/Config.pm line 2044 > > > > In Debugging mode, not forking... > > Trying to setlogsock(unix) > > Building a message batch to scan... > > Have a batch of 30 messages. > > Insecure dependency in open while running with -T switch at > /usr/lib64/perl5/IO/File.pm line 185. > > > > What MTA are you using ? i can take a look at this for you if i can > squeeze some time. > > -- > www.baruwa.org > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/b139e66a/attachment.html From kocisky at autistici.org Tue Feb 28 12:41:40 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 12:41:55 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> <469106DE-45F1-4D57-BE83-136534F39FA6@topdog.za.net> Message-ID: [root@mail incoming]# postconf -d | grep mail_version mail_version = 2.6.6 i see that it crashes on a certain message and doesn't go further (check CFA4E2003F7.AF18F): Feb 28 07:44:22 mail MailScanner[11644]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 28 07:44:22 mail MailScanner[11644]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 28 07:44:25 mail MailScanner[11650]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 28 07:44:25 mail MailScanner[11650]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 28 07:44:25 mail MailScanner[11650]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 28 07:44:25 mail MailScanner[11650]: Read 869 hostnames from the phishing whitelist Feb 28 07:44:25 mail MailScanner[11650]: Read 5352 hostnames from the phishing blacklists Feb 28 07:44:25 mail MailScanner[11650]: Config: calling custom init function SQLBlacklist Feb 28 07:44:25 mail MailScanner[11650]: Starting up SQL Blacklist Feb 28 07:44:25 mail MailScanner[11650]: Read 0 blacklist entries Feb 28 07:44:25 mail MailScanner[11650]: Config: calling custom init function MailWatchLogging Feb 28 07:44:25 mail MailScanner[11650]: Started SQL Logging child Feb 28 07:44:25 mail MailScanner[11650]: Config: calling custom init function SQLWhitelist Feb 28 07:44:25 mail MailScanner[11650]: Starting up SQL Whitelist Feb 28 07:44:25 mail MailScanner[11650]: Read 0 whitelist entries Feb 28 07:44:26 mail MailScanner[11650]: Using SpamAssassin results cache Feb 28 07:44:26 mail MailScanner[11650]: Connected to SpamAssassin cache database Feb 28 07:44:26 mail MailScanner[11650]: Enabling SpamAssassin auto-whitelist functionality... Feb 28 07:44:27 mail MailScanner[11650]: Connected to Processing Attempts Database Feb 28 07:44:27 mail MailScanner[11650]: Found 615 messages in the Processing Attempts Database Feb 28 07:44:27 mail MailScanner[11650]: Using locktype = flock Feb 28 07:44:27 mail MailScanner[11650]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 28 07:44:27 mail MailScanner[11650]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 28 07:44:30 mail MailScanner[11655]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 28 07:44:30 mail MailScanner[11655]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 28 07:44:30 mail MailScanner[11655]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 28 07:44:30 mail MailScanner[11655]: Read 869 hostnames from the phishing whitelist Feb 28 07:44:30 mail MailScanner[11655]: Read 5352 hostnames from the phishing blacklists Feb 28 07:44:30 mail MailScanner[11655]: Config: calling custom init function SQLBlacklist Feb 28 07:44:30 mail MailScanner[11655]: Starting up SQL Blacklist Feb 28 07:44:30 mail MailScanner[11655]: Read 0 blacklist entries Feb 28 07:44:30 mail MailScanner[11655]: Config: calling custom init function MailWatchLogging Feb 28 07:44:30 mail MailScanner[11655]: Started SQL Logging child Feb 28 07:44:30 mail MailScanner[11655]: Config: calling custom init function SQLWhitelist Feb 28 07:44:30 mail MailScanner[11655]: Starting up SQL Whitelist Feb 28 07:44:30 mail MailScanner[11655]: Read 0 whitelist entries Feb 28 07:44:31 mail MailScanner[11655]: Using SpamAssassin results cache Feb 28 07:44:31 mail MailScanner[11655]: Connected to SpamAssassin cache database Feb 28 07:44:31 mail MailScanner[11655]: Enabling SpamAssassin auto-whitelist functionality... Feb 28 07:44:32 mail MailScanner[11655]: Connected to Processing Attempts Database Feb 28 07:44:32 mail MailScanner[11655]: Found 615 messages in the Processing Attempts Database Feb 28 07:44:32 mail MailScanner[11655]: Using locktype = flock Feb 28 07:44:32 mail MailScanner[11655]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 28 07:44:32 mail MailScanner[11655]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 28 07:44:35 mail MailScanner[11661]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... Feb 28 07:44:35 mail MailScanner[11661]: Reading configuration file /etc/MailScanner/MailScanner.conf Feb 28 07:44:35 mail MailScanner[11661]: Configuration: Failed to find any configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. Feb 28 07:44:35 mail MailScanner[11661]: Read 869 hostnames from the phishing whitelist Feb 28 07:44:35 mail MailScanner[11661]: Read 5352 hostnames from the phishing blacklists Feb 28 07:44:35 mail MailScanner[11661]: Config: calling custom init function SQLBlacklist Feb 28 07:44:35 mail MailScanner[11661]: Starting up SQL Blacklist Feb 28 07:44:35 mail MailScanner[11661]: Read 0 blacklist entries Feb 28 07:44:35 mail MailScanner[11661]: Config: calling custom init function MailWatchLogging Feb 28 07:44:35 mail MailScanner[11661]: Started SQL Logging child Feb 28 07:44:35 mail MailScanner[11661]: Config: calling custom init function SQLWhitelist Feb 28 07:44:35 mail MailScanner[11661]: Starting up SQL Whitelist Feb 28 07:44:35 mail MailScanner[11661]: Read 0 whitelist entries Feb 28 07:44:36 mail MailScanner[11661]: Using SpamAssassin results cache Feb 28 07:44:36 mail MailScanner[11661]: Connected to SpamAssassin cache database Feb 28 07:44:36 mail MailScanner[11661]: Enabling SpamAssassin auto-whitelist functionality... Feb 28 07:44:37 mail MailScanner[11661]: Connected to Processing Attempts Database Feb 28 07:44:37 mail MailScanner[11661]: Found 615 messages in the Processing Attempts Database Feb 28 07:44:37 mail MailScanner[11661]: Using locktype = flock Feb 28 07:44:37 mail MailScanner[11661]: Warning: skipping message CFA4E2003F7.AF18F as it has been attempted too many times Feb 28 07:44:37 mail MailScanner[11661]: Quarantined message CFA4E2003F7.AF18F as it caused MailScanner to crash several times Feb 28 07:44:40 mail MailScanner[11666]: MailScanner E-Mail Virus Scanner version 4.84.3 starting... On 28 February 2012 07:24, Kocisky wrote: > postfix, below some additional info: > > MailScanner --version > Running on > Linux mail 2.6.32-71.29.1.el6.centos.plus.x86_64 #1 SMP Sun Jun 26 > 16:27:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux > This is CentOS release 6.2 (Final) > This is Perl version 5.010001 (5.10.1) > > This is MailScanner version 4.84.3 > Module versions are: > 1.00 AnyDBM_File > 1.30 Archive::Zip > 0.23 bignum > 1.11 Carp > 2.02 Compress::Zlib > 1.119 Convert::BinHex > 0.17 Convert::TNEF > 2.124 Data::Dumper > 2.27 Date::Parse > 1.03 DirHandle > 1.06 Fcntl > 2.77 File::Basename > 2.14 File::Copy > 2.02 FileHandle > 2.08 File::Path > 0.22 File::Temp > 0.92 Filesys::Df > 3.64 HTML::Entities > 3.64 HTML::Parser > 3.57 HTML::TokeParser > 1.25 IO > 1.14 IO::File > 1.13 IO::Pipe > 2.04 Mail::Header > 1.89 Math::BigInt > 0.22 Math::BigRat > 3.08 MIME::Base64 > 5.427 MIME::Decoder > 5.427 MIME::Decoder::UU > 5.427 MIME::Head > 5.427 MIME::Parser > 3.08 MIME::QuotedPrint > 5.427 MIME::Tools > 0.14 Net::CIDR > 1.25 Net::IP > 0.19 OLE::Storage_Lite > 1.04 Pod::Escapes > 3.13 Pod::Simple > 1.17 POSIX > 1.21 Scalar::Util > 1.82 Socket > 2.20 Storable > 1.4 Sys::Hostname::Long > 0.27 Sys::Syslog > 1.40 Test::Pod > 0.92 Test::Simple > 1.9721 Time::HiRes > 1.02 Time::localtime > > Optional module versions are: > 1.58 Archive::Tar > 0.23 bignum > missing Business::ISBN > missing Business::ISBN::Data > missing Data::Dump > 1.82 DB_File > 1.27 DBD::SQLite > 1.609 DBI > 1.16 Digest > 1.01 Digest::HMAC > 2.39 Digest::MD5 > 2.12 Digest::SHA1 > 1.01 Encode::Detect > missing Error > 0.27 ExtUtils::CBuilder > 2.2203 ExtUtils::ParseXS > 2.38 Getopt::Long > missing Inline > missing IO::String > 1.09 IO::Zlib > missing IP::Country > missing Mail::ClamAV > 3.003001 Mail::SpamAssassin > missing Mail::SPF > missing Mail::SPF::Query > 0.35 Module::Build > missing Net::CIDR::Lite > 0.65 Net::DNS > missing Net::DNS::Resolver::Programmable > missing Net::LDAP > 4.027 NetAddr::IP > missing Parse::RecDescent > missing SAVI > 3.17 Test::Harness > missing Test::Manifest > 2.0.0 Text::Balanced > 1.40 URI > 0.77 version > missing YAML > [root@mail ~]# > > On 27 February 2012 23:50, Andrew Colin Kissa wrote: > >> >> On 28 Feb 2012, at 5:51 AM, Kocisky wrote: >> >> > let me take it back... it still crashes, i still have the error: >> > >> > [root@mail ~]# MailScanner --debug >> > >> > Configuration: Failed to find any configuration files like >> /etc/MailScanner/conf.d/*.conf, skipping them. at >> /usr/share/MailScanner/MailScanner/Config.pm line 2044 >> > >> > In Debugging mode, not forking... >> > Trying to setlogsock(unix) >> > Building a message batch to scan... >> > Have a batch of 30 messages. >> > Insecure dependency in open while running with -T switch at >> /usr/lib64/perl5/IO/File.pm line 185. >> > >> >> What MTA are you using ? i can take a look at this for you if i can >> squeeze some time. >> >> -- >> www.baruwa.org >> >> >> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/02e2b978/attachment.html From kocisky at autistici.org Tue Feb 28 12:50:01 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 12:50:13 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> <469106DE-45F1-4D57-BE83-136534F39FA6@topdog.za.net> Message-ID: it seems that the messages are kept in /var/spool/postfix/hold: [root@mail spool]# ls abrt abrt-upload anacron at cron cups gdm lpd mail MailScanner plymouth postfix squirrelmail [root@mail spool]# find ./ -name CFA4E2003F7.AF18F [root@mail spool]# find ./ -name CFA4E* ./MailScanner/incoming/12112/CFA4E2003F7.AF18F.header ./MailScanner/incoming/12123/CFA4E2003F7.AF18F.header ./MailScanner/incoming/12074/CFA4E2003F7.AF18F.header ./MailScanner/incoming/12117/CFA4E2003F7.AF18F.header ./postfix/hold/CFA4E2003F7 [root@mail spool]# vim ./postfix/hold/CFA4E2003F7 [root@mail spool]# rm ./postfix/hold/CFA4E2003F7 rm: remove regular file `./postfix/hold/CFA4E2003F7'? y [root@mail spool]# find ./ -name 8C8A92* ./MailScanner/incoming/12193/8C8A9200026.A2E96.header ./MailScanner/incoming/12198/8C8A9200026.A2E96.header ./MailScanner/incoming/12209/8C8A9200026.A2E96.header ./MailScanner/incoming/12204/8C8A9200026.A2E96.header ./postfix/hold/8C8A9200026 [root@mail spool]# cd postfix/hold/ [root@mail hold]# ls 008FA202307 122E720025D 1F79020227D 2B140202195 39C91202297 472432021C8 522E4200210 64DC52021B8 6FA57200253 7A8D1202205 868E9202220 92A3A20219F A0F34202272 AC3CD2021CD B954F20225F C8075202265 D873820228E E8A6A202259 00A80202266 1256C202226 1F7F7202327 2B42A200298 39DDB202291 47E4D20229E 523D120028E 6538920220B 6FBE3202264 7A96B202314 86ECE2022DB 932972001A5 A15782022EC AC8502022F0 B9C8B200295 C83B1200050 D8C1A2022BB E917C200094 01ABC2019F4 125B82021F0 1FF33202316 2BADC2001E4 3ABB52022ED 48791200028 5324F202275 66F492021D0 6FC14200228 7AE4C20010D 8734620009E 947DF202284 A161D200104 AD3372021C1 BA3242001B1 C8D0B202199 D943620220E E9871200299 01BD02022AB ... if you remove manually MailScanner goes to the next one, permission issue? On 28 February 2012 07:41, Kocisky wrote: > [root@mail incoming]# postconf -d | grep mail_version > mail_version = 2.6.6 > > i see that it crashes on a certain message and doesn't go further > (check CFA4E2003F7.AF18F): > > Feb 28 07:44:22 mail MailScanner[11644]: Warning: skipping message > CFA4E2003F7.AF18F as it has been attempted too many times > Feb 28 07:44:22 mail MailScanner[11644]: Quarantined message > CFA4E2003F7.AF18F as it caused MailScanner to crash several times > Feb 28 07:44:25 mail MailScanner[11650]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 28 07:44:25 mail MailScanner[11650]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 28 07:44:25 mail MailScanner[11650]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 28 07:44:25 mail MailScanner[11650]: Read 869 hostnames from the > phishing whitelist > Feb 28 07:44:25 mail MailScanner[11650]: Read 5352 hostnames from the > phishing blacklists > Feb 28 07:44:25 mail MailScanner[11650]: Config: calling custom init > function SQLBlacklist > Feb 28 07:44:25 mail MailScanner[11650]: Starting up SQL Blacklist > Feb 28 07:44:25 mail MailScanner[11650]: Read 0 blacklist entries > Feb 28 07:44:25 mail MailScanner[11650]: Config: calling custom init > function MailWatchLogging > Feb 28 07:44:25 mail MailScanner[11650]: Started SQL Logging child > Feb 28 07:44:25 mail MailScanner[11650]: Config: calling custom init > function SQLWhitelist > Feb 28 07:44:25 mail MailScanner[11650]: Starting up SQL Whitelist > Feb 28 07:44:25 mail MailScanner[11650]: Read 0 whitelist entries > Feb 28 07:44:26 mail MailScanner[11650]: Using SpamAssassin results cache > Feb 28 07:44:26 mail MailScanner[11650]: Connected to SpamAssassin cache > database > Feb 28 07:44:26 mail MailScanner[11650]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 28 07:44:27 mail MailScanner[11650]: Connected to Processing Attempts > Database > Feb 28 07:44:27 mail MailScanner[11650]: Found 615 messages in the > Processing Attempts Database > Feb 28 07:44:27 mail MailScanner[11650]: Using locktype = flock > Feb 28 07:44:27 mail MailScanner[11650]: Warning: skipping message > CFA4E2003F7.AF18F as it has been attempted too many times > Feb 28 07:44:27 mail MailScanner[11650]: Quarantined message > CFA4E2003F7.AF18F as it caused MailScanner to crash several times > Feb 28 07:44:30 mail MailScanner[11655]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 28 07:44:30 mail MailScanner[11655]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 28 07:44:30 mail MailScanner[11655]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 28 07:44:30 mail MailScanner[11655]: Read 869 hostnames from the > phishing whitelist > Feb 28 07:44:30 mail MailScanner[11655]: Read 5352 hostnames from the > phishing blacklists > Feb 28 07:44:30 mail MailScanner[11655]: Config: calling custom init > function SQLBlacklist > Feb 28 07:44:30 mail MailScanner[11655]: Starting up SQL Blacklist > Feb 28 07:44:30 mail MailScanner[11655]: Read 0 blacklist entries > Feb 28 07:44:30 mail MailScanner[11655]: Config: calling custom init > function MailWatchLogging > Feb 28 07:44:30 mail MailScanner[11655]: Started SQL Logging child > Feb 28 07:44:30 mail MailScanner[11655]: Config: calling custom init > function SQLWhitelist > Feb 28 07:44:30 mail MailScanner[11655]: Starting up SQL Whitelist > Feb 28 07:44:30 mail MailScanner[11655]: Read 0 whitelist entries > Feb 28 07:44:31 mail MailScanner[11655]: Using SpamAssassin results cache > Feb 28 07:44:31 mail MailScanner[11655]: Connected to SpamAssassin cache > database > Feb 28 07:44:31 mail MailScanner[11655]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 28 07:44:32 mail MailScanner[11655]: Connected to Processing Attempts > Database > Feb 28 07:44:32 mail MailScanner[11655]: Found 615 messages in the > Processing Attempts Database > Feb 28 07:44:32 mail MailScanner[11655]: Using locktype = flock > Feb 28 07:44:32 mail MailScanner[11655]: Warning: skipping message > CFA4E2003F7.AF18F as it has been attempted too many times > Feb 28 07:44:32 mail MailScanner[11655]: Quarantined message > CFA4E2003F7.AF18F as it caused MailScanner to crash several times > Feb 28 07:44:35 mail MailScanner[11661]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > Feb 28 07:44:35 mail MailScanner[11661]: Reading configuration file > /etc/MailScanner/MailScanner.conf > Feb 28 07:44:35 mail MailScanner[11661]: Configuration: Failed to find any > configuration files like /etc/MailScanner/conf.d/*.conf, skipping them. > Feb 28 07:44:35 mail MailScanner[11661]: Read 869 hostnames from the > phishing whitelist > Feb 28 07:44:35 mail MailScanner[11661]: Read 5352 hostnames from the > phishing blacklists > Feb 28 07:44:35 mail MailScanner[11661]: Config: calling custom init > function SQLBlacklist > Feb 28 07:44:35 mail MailScanner[11661]: Starting up SQL Blacklist > Feb 28 07:44:35 mail MailScanner[11661]: Read 0 blacklist entries > Feb 28 07:44:35 mail MailScanner[11661]: Config: calling custom init > function MailWatchLogging > Feb 28 07:44:35 mail MailScanner[11661]: Started SQL Logging child > Feb 28 07:44:35 mail MailScanner[11661]: Config: calling custom init > function SQLWhitelist > Feb 28 07:44:35 mail MailScanner[11661]: Starting up SQL Whitelist > Feb 28 07:44:35 mail MailScanner[11661]: Read 0 whitelist entries > Feb 28 07:44:36 mail MailScanner[11661]: Using SpamAssassin results cache > Feb 28 07:44:36 mail MailScanner[11661]: Connected to SpamAssassin cache > database > Feb 28 07:44:36 mail MailScanner[11661]: Enabling SpamAssassin > auto-whitelist functionality... > Feb 28 07:44:37 mail MailScanner[11661]: Connected to Processing Attempts > Database > Feb 28 07:44:37 mail MailScanner[11661]: Found 615 messages in the > Processing Attempts Database > Feb 28 07:44:37 mail MailScanner[11661]: Using locktype = flock > Feb 28 07:44:37 mail MailScanner[11661]: Warning: skipping message > CFA4E2003F7.AF18F as it has been attempted too many times > Feb 28 07:44:37 mail MailScanner[11661]: Quarantined message > CFA4E2003F7.AF18F as it caused MailScanner to crash several times > Feb 28 07:44:40 mail MailScanner[11666]: MailScanner E-Mail Virus Scanner > version 4.84.3 starting... > > > On 28 February 2012 07:24, Kocisky wrote: > >> postfix, below some additional info: >> >> MailScanner --version >> Running on >> Linux mail 2.6.32-71.29.1.el6.centos.plus.x86_64 #1 SMP Sun Jun 26 >> 16:27:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux >> This is CentOS release 6.2 (Final) >> This is Perl version 5.010001 (5.10.1) >> >> This is MailScanner version 4.84.3 >> Module versions are: >> 1.00 AnyDBM_File >> 1.30 Archive::Zip >> 0.23 bignum >> 1.11 Carp >> 2.02 Compress::Zlib >> 1.119 Convert::BinHex >> 0.17 Convert::TNEF >> 2.124 Data::Dumper >> 2.27 Date::Parse >> 1.03 DirHandle >> 1.06 Fcntl >> 2.77 File::Basename >> 2.14 File::Copy >> 2.02 FileHandle >> 2.08 File::Path >> 0.22 File::Temp >> 0.92 Filesys::Df >> 3.64 HTML::Entities >> 3.64 HTML::Parser >> 3.57 HTML::TokeParser >> 1.25 IO >> 1.14 IO::File >> 1.13 IO::Pipe >> 2.04 Mail::Header >> 1.89 Math::BigInt >> 0.22 Math::BigRat >> 3.08 MIME::Base64 >> 5.427 MIME::Decoder >> 5.427 MIME::Decoder::UU >> 5.427 MIME::Head >> 5.427 MIME::Parser >> 3.08 MIME::QuotedPrint >> 5.427 MIME::Tools >> 0.14 Net::CIDR >> 1.25 Net::IP >> 0.19 OLE::Storage_Lite >> 1.04 Pod::Escapes >> 3.13 Pod::Simple >> 1.17 POSIX >> 1.21 Scalar::Util >> 1.82 Socket >> 2.20 Storable >> 1.4 Sys::Hostname::Long >> 0.27 Sys::Syslog >> 1.40 Test::Pod >> 0.92 Test::Simple >> 1.9721 Time::HiRes >> 1.02 Time::localtime >> >> Optional module versions are: >> 1.58 Archive::Tar >> 0.23 bignum >> missing Business::ISBN >> missing Business::ISBN::Data >> missing Data::Dump >> 1.82 DB_File >> 1.27 DBD::SQLite >> 1.609 DBI >> 1.16 Digest >> 1.01 Digest::HMAC >> 2.39 Digest::MD5 >> 2.12 Digest::SHA1 >> 1.01 Encode::Detect >> missing Error >> 0.27 ExtUtils::CBuilder >> 2.2203 ExtUtils::ParseXS >> 2.38 Getopt::Long >> missing Inline >> missing IO::String >> 1.09 IO::Zlib >> missing IP::Country >> missing Mail::ClamAV >> 3.003001 Mail::SpamAssassin >> missing Mail::SPF >> missing Mail::SPF::Query >> 0.35 Module::Build >> missing Net::CIDR::Lite >> 0.65 Net::DNS >> missing Net::DNS::Resolver::Programmable >> missing Net::LDAP >> 4.027 NetAddr::IP >> missing Parse::RecDescent >> missing SAVI >> 3.17 Test::Harness >> missing Test::Manifest >> 2.0.0 Text::Balanced >> 1.40 URI >> 0.77 version >> missing YAML >> [root@mail ~]# >> >> On 27 February 2012 23:50, Andrew Colin Kissa wrote: >> >>> >>> On 28 Feb 2012, at 5:51 AM, Kocisky wrote: >>> >>> > let me take it back... it still crashes, i still have the error: >>> > >>> > [root@mail ~]# MailScanner --debug >>> > >>> > Configuration: Failed to find any configuration files like >>> /etc/MailScanner/conf.d/*.conf, skipping them. at >>> /usr/share/MailScanner/MailScanner/Config.pm line 2044 >>> > >>> > In Debugging mode, not forking... >>> > Trying to setlogsock(unix) >>> > Building a message batch to scan... >>> > Have a batch of 30 messages. >>> > Insecure dependency in open while running with -T switch at >>> /usr/lib64/perl5/IO/File.pm line 185. >>> > >>> >>> What MTA are you using ? i can take a look at this for you if i can >>> squeeze some time. >>> >>> -- >>> www.baruwa.org >>> >>> >>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/447a9b1c/attachment.html From kocisky at autistici.org Tue Feb 28 13:01:39 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 13:01:48 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <4F266810.6060300@mindconnect.nl> <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1> Message-ID: Supan, where did you add the -U flag? "#!/usr/bin/perl -I/usr/share/MailScanner/ -U " i'm looking for the "main MailScanner file interpreter"... Thanks !! kocisky On 30 January 2012 07:49, wrote: > Supan, > > Where exactly did you add that? I am having the same issue and I cannot > seem to find the issue. I just restart MailScanner and it processes the > messages but this requires me to do so every day. I am getting an error > message (below) in the logs and I cannot seem to find the issue. I am > using: Ubuntu 10.04.3 LTS, MailScanner 4.84.3, and Postfix 2.7.0. > > Warning: skipping message 4995D1A02A6.ABF56 as it has been attempted too > many times > Quarantined message 4995D1A02A6.ABF56 as it caused MailScanner to crash > several times > > On Mon, 30 Jan 2012 10:51:12 +0100, Martijn > wrote: > > What is this recent Ubuntu 10.04 mailscanner update you speak of? I've > > been unable to find it and the Ubuntu changelog doesn't seem to mention > it. > > > > Seeing my unresolved problems with MailScanner on 10.04 half a year ago, > > > I'd be interested in trying this. > > > > -- > > Kind regards, > > - Martijn > > > > On 2-1-2012 17:18, Supun Rathnayake wrote: > >> This happened to me as well with the recent Ubuntu 10.04 mailscanner > >> updates, but removing of the corrupt ( so called ) email did not solve > >> the problem > >> and finally adding -U flag to the main MailScanner file interpreter as > >> follows did solve the problem. > >> > >> #!/usr/bin/perl -I/usr/share/MailScanner/ -U > >> > >> Thanks, > >> Supun. > >> > >> > >> On 01/02/2012 09:15 PM, Stephen Swaney wrote: > >>> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: > >>> > >>>> Yes, I have done that, several times... But it just keeps coming > >>>> back..... :-( > >>>> > >>>> BTJ > >>> 1. Shut down MailScanner > >>> 2. Remove the problem message from the incoming hold directory > >>> 3. Remove the processing db > >>> 4. Restart Mailscanner > >>> > >>> Steve > >>> --- > >>> Steve Swaney > >>> steve@fsl.com > >>> > >>>> On Mon, 2 Jan 2012 14:56:15 +0000 > >>>> Martin Hepworth wrote: > >>>> > >>>>> There was something some thing similar on this lost a few days ago, > >>>>> just > >>>>> deleting the processing.db file sorted the issue > >>>>> > >>>>> Martin > >>>>> > >>>>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: > >>>>>> I am getting these in the log every day, at the moment: > >>>>>> > >>>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted > >>>>>> too > >>>>> many times > >>>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to > >>>>>> crash > >>>>> several times > >>>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... > >>>>>> > >>>>>> And this is a big problem because my mailsrv then stops to deliver > >>>>>> any > >>>>> mail; the mail is just kept in the hold directory under postfix.. > >>>>>> > >>>>>> What is causing this? And is there a way to ignore this error and > >>>>>> still > >>>>> deliver the rest of the mail? > >>>>>> > >>>>>> Regards, > >>>>>> > >>>>>> BTJ > >>>>>> > >>>>>> -- > >>>>>> > >>>>> > > ----------------------------------------------------------------------------------------------- > >>>>> > >>>>>> Bj?rn T Johansen > >>>>>> > >>>>>> btj@havleik.no > >>>>>> > >>>>> > > ----------------------------------------------------------------------------------------------- > >>>>> > >>>>>> Someone wrote: > >>>>>> "I understand that if you play a Windows CD backwards you hear > >>>>>> strange > >>>>> Satanic messages" > >>>>>> To which someone replied: > >>>>>> "It's even worse than that; play it forwards and it installs > Windows" > >>>>>> > >>>>> > > ----------------------------------------------------------------------------------------------- > >>>>> > >>>>>> -- > >>>>>> MailScanner mailing list > >>>>>> mailscanner@lists.mailscanner.info > >>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >>>>>> > >>>>>> Before posting, read http://wiki.mailscanner.info/posting > >>>>>> > >>>>>> Support MailScanner development - buy the book off the website! > >>>>>> > >>>> -- > >>>> MailScanner mailing list > >>>> mailscanner@lists.mailscanner.info > >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >>>> > >>>> Before posting, read http://wiki.mailscanner.info/posting > >>>> > >>>> Support MailScanner development - buy the book off the website! > >> > >> > >> > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/c43b438a/attachment.html From andrew at topdog.za.net Tue Feb 28 13:03:32 2012 From: andrew at topdog.za.net (Andrew Colin Kissa) Date: Tue Feb 28 13:03:55 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> <469106DE-45F1-4D57-BE83-136534F39FA6@topdog.za.net> Message-ID: <56CB9843-BB7F-4066-B26C-85FE1BAF3B29@topdog.za.net> On 28 Feb 2012, at 2:24 PM, Kocisky wrote: > postfix, below some additional info: > > MailScanner --version > Running on > Linux mail 2.6.32-71.29.1.el6.centos.plus.x86_64 #1 SMP Sun Jun 26 16:27:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux > This is CentOS release 6.2 (Final) > This is Perl version 5.010001 (5.10.1) > > This is MailScanner version 4.84.3 > Module versions are: > 1.00 AnyDBM_File > 1.30 Archive::Zip > 0.23 bignum > 1.11 Carp > 2.02 Compress::Zlib > 1.119 Convert::BinHex > 0.17 Convert::TNEF > 2.124 Data::Dumper > 2.27 Date::Parse > 1.03 DirHandle > 1.06 Fcntl > 2.77 File::Basename > 2.14 File::Copy > 2.02 FileHandle > 2.08 File::Path > 0.22 File::Temp > 0.92 Filesys::Df > 3.64 HTML::Entities > 3.64 HTML::Parser > 3.57 HTML::TokeParser > 1.25 IO > 1.14 IO::File > 1.13 IO::Pipe > 2.04 Mail::Header > 1.89 Math::BigInt > 0.22 Math::BigRat > 3.08 MIME::Base64 > 5.427 MIME::Decoder > 5.427 MIME::Decoder::UU > 5.427 MIME::Head > 5.427 MIME::Parser > 3.08 MIME::QuotedPrint > 5.427 MIME::Tools > 0.14 Net::CIDR > 1.25 Net::IP > 0.19 OLE::Storage_Lite > 1.04 Pod::Escapes > 3.13 Pod::Simple > 1.17 POSIX > 1.21 Scalar::Util > 1.82 Socket > 2.20 Storable > 1.4 Sys::Hostname::Long > 0.27 Sys::Syslog > 1.40 Test::Pod > 0.92 Test::Simple > 1.9721 Time::HiRes > 1.02 Time::localtime > > Optional module versions are: > 1.58 Archive::Tar > 0.23 bignum > missing Business::ISBN > missing Business::ISBN::Data > missing Data::Dump > 1.82 DB_File > 1.27 DBD::SQLite > 1.609 DBI > 1.16 Digest > 1.01 Digest::HMAC > 2.39 Digest::MD5 > 2.12 Digest::SHA1 > 1.01 Encode::Detect > missing Error > 0.27 ExtUtils::CBuilder > 2.2203 ExtUtils::ParseXS > 2.38 Getopt::Long > missing Inline > missing IO::String > 1.09 IO::Zlib > missing IP::Country > missing Mail::ClamAV > 3.003001 Mail::SpamAssassin > missing Mail::SPF > missing Mail::SPF::Query > 0.35 Module::Build > missing Net::CIDR::Lite > 0.65 Net::DNS > missing Net::DNS::Resolver::Programmable > missing Net::LDAP > 4.027 NetAddr::IP > missing Parse::RecDescent > missing SAVI > 3.17 Test::Harness > missing Test::Manifest > 2.0.0 Text::Balanced > 1.40 URI > 0.77 version > missing YAML > [root@mail ~]# I dont have a postfix installation so am not sure this patch will work fully for you but please try it, and let me know if it fixes the issue. -------------- next part -------------- A non-text attachment was scrubbed... Name: mailscanner-fix-taint.patch Type: application/octet-stream Size: 1009 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/86934775/mailscanner-fix-taint-0001.obj -------------- next part -------------- - Andrew -- www.baruwa.org From jeremy at fluxlabs.net Tue Feb 28 13:09:26 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Tue Feb 28 13:09:41 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <4F266810.6060300@mindconnect.nl> <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1>, Message-ID: <137D8963-DF3A-439E-91A0-DF7808979BE4@fluxlabs.net> Yesterday I told you the fix for your issue. On Feb 27, 2012, at 9:35 PM, "Jeremy McSpadden" > wrote: Open mailscanner?s binary and add ?U to the # line. /usr/sbin/MailScanner #!/usr/bin/perl ?I/Usr/share/MailScanner ? add ?U -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 -- Jeremy McSpadden On Feb 28, 2012, at 7:07 AM, "Kocisky" > wrote: Supan, where did you add the -U flag? "#!/usr/bin/perl -I/usr/share/MailScanner/ -U" i'm looking for the "main MailScanner file interpreter"... Thanks !! kocisky On 30 January 2012 07:49, > wrote: Supan, Where exactly did you add that? I am having the same issue and I cannot seem to find the issue. I just restart MailScanner and it processes the messages but this requires me to do so every day. I am getting an error message (below) in the logs and I cannot seem to find the issue. I am using: Ubuntu 10.04.3 LTS, MailScanner 4.84.3, and Postfix 2.7.0. Warning: skipping message 4995D1A02A6.ABF56 as it has been attempted too many times Quarantined message 4995D1A02A6.ABF56 as it caused MailScanner to crash several times On Mon, 30 Jan 2012 10:51:12 +0100, Martijn > wrote: > What is this recent Ubuntu 10.04 mailscanner update you speak of? I've > been unable to find it and the Ubuntu changelog doesn't seem to mention it. > > Seeing my unresolved problems with MailScanner on 10.04 half a year ago, > I'd be interested in trying this. > > -- > Kind regards, > - Martijn > > On 2-1-2012 17:18, Supun Rathnayake wrote: >> This happened to me as well with the recent Ubuntu 10.04 mailscanner >> updates, but removing of the corrupt ( so called ) email did not solve >> the problem >> and finally adding -U flag to the main MailScanner file interpreter as >> follows did solve the problem. >> >> #!/usr/bin/perl -I/usr/share/MailScanner/ -U >> >> Thanks, >> Supun. >> >> >> On 01/02/2012 09:15 PM, Stephen Swaney wrote: >>> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: >>> >>>> Yes, I have done that, several times... But it just keeps coming >>>> back..... :-( >>>> >>>> BTJ >>> 1. Shut down MailScanner >>> 2. Remove the problem message from the incoming hold directory >>> 3. Remove the processing db >>> 4. Restart Mailscanner >>> >>> Steve >>> --- >>> Steve Swaney >>> steve@fsl.com >>> >>>> On Mon, 2 Jan 2012 14:56:15 +0000 >>>> Martin Hepworth> wrote: >>>> >>>>> There was something some thing similar on this lost a few days ago, >>>>> just >>>>> deleting the processing.db file sorted the issue >>>>> >>>>> Martin >>>>> >>>>> On Sunday, 1 January 2012, Bj?rn T Johansen> wrote: >>>>>> I am getting these in the log every day, at the moment: >>>>>> >>>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted >>>>>> too >>>>> many times >>>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to >>>>>> crash >>>>> several times >>>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >>>>>> >>>>>> And this is a big problem because my mailsrv then stops to deliver >>>>>> any >>>>> mail; the mail is just kept in the hold directory under postfix.. >>>>>> >>>>>> What is causing this? And is there a way to ignore this error and >>>>>> still >>>>> deliver the rest of the mail? >>>>>> >>>>>> Regards, >>>>>> >>>>>> BTJ >>>>>> >>>>>> -- >>>>>> >>>>> ----------------------------------------------------------------------------------------------- >>>>> >>>>>> Bj?rn T Johansen >>>>>> >>>>>> btj@havleik.no >>>>>> >>>>> ----------------------------------------------------------------------------------------------- >>>>> >>>>>> Someone wrote: >>>>>> "I understand that if you play a Windows CD backwards you hear >>>>>> strange >>>>> Satanic messages" >>>>>> To which someone replied: >>>>>> "It's even worse than that; play it forwards and it installs Windows" >>>>>> >>>>> ----------------------------------------------------------------------------------------------- >>>>> >>>>>> -- >>>>>> MailScanner mailing list >>>>>> mailscanner@lists.mailscanner.info >>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>>> >>>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>>> >>>>>> Support MailScanner development - buy the book off the website! >>>>>> >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >> >> >> > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/ec273bed/attachment.html From kocisky at autistici.org Tue Feb 28 13:30:41 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 13:30:52 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <137D8963-DF3A-439E-91A0-DF7808979BE4@fluxlabs.net> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <4F266810.6060300@mindconnect.nl> <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1> <137D8963-DF3A-439E-91A0-DF7808979BE4@fluxlabs.net> Message-ID: Thanks Jeremy!! i missed your msg ... i was not thinking of MailScanner as a perl script, very helpful again! kocisky On 28 February 2012 08:09, Jeremy McSpadden wrote: > Yesterday I told you the fix for your issue. > > On Feb 27, 2012, at 9:35 PM, "Jeremy McSpadden" > wrote: > > Open mailscanner?s binary and add ?U to the # line. > /usr/sbin/MailScanner **** > > > #!/usr/bin/perl ?I/Usr/share/MailScanner ? add ?U > > > --**** > Jeremy McSpadden**** > Flux Labs, Inc**** > http://www.fluxlabs.net > Endless Solutions**** > Office : 850-588-4626**** > Cell : 850-890-2543 > Fax : 850-254-2955 > > > > -- > Jeremy McSpadden > > On Feb 28, 2012, at 7:07 AM, "Kocisky" wrote: > > Supan, > > where did you add the -U flag? "#!/usr/bin/perl > -I/usr/share/MailScanner/ -U" > i'm looking for the "main MailScanner file interpreter"... > > Thanks !! > kocisky > > On 30 January 2012 07:49, wrote: > >> Supan, >> >> Where exactly did you add that? I am having the same issue and I cannot >> seem to find the issue. I just restart MailScanner and it processes the >> messages but this requires me to do so every day. I am getting an error >> message (below) in the logs and I cannot seem to find the issue. I am >> using: Ubuntu 10.04.3 LTS, MailScanner 4.84.3, and Postfix 2.7.0. >> >> Warning: skipping message 4995D1A02A6.ABF56 as it has been attempted too >> many times >> Quarantined message 4995D1A02A6.ABF56 as it caused MailScanner to crash >> several times >> >> On Mon, 30 Jan 2012 10:51:12 +0100, Martijn >> wrote: >> > What is this recent Ubuntu 10.04 mailscanner update you speak of? I've >> > been unable to find it and the Ubuntu changelog doesn't seem to mention >> it. >> > >> > Seeing my unresolved problems with MailScanner on 10.04 half a year ago, >> >> > I'd be interested in trying this. >> > >> > -- >> > Kind regards, >> > - Martijn >> > >> > On 2-1-2012 17:18, Supun Rathnayake wrote: >> >> This happened to me as well with the recent Ubuntu 10.04 mailscanner >> >> updates, but removing of the corrupt ( so called ) email did not solve >> >> the problem >> >> and finally adding -U flag to the main MailScanner file interpreter as >> >> follows did solve the problem. >> >> >> >> #!/usr/bin/perl -I/usr/share/MailScanner/ -U >> >> >> >> Thanks, >> >> Supun. >> >> >> >> >> >> On 01/02/2012 09:15 PM, Stephen Swaney wrote: >> >>> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: >> >>> >> >>>> Yes, I have done that, several times... But it just keeps coming >> >>>> back..... :-( >> >>>> >> >>>> BTJ >> >>> 1. Shut down MailScanner >> >>> 2. Remove the problem message from the incoming hold directory >> >>> 3. Remove the processing db >> >>> 4. Restart Mailscanner >> >>> >> >>> Steve >> >>> --- >> >>> Steve Swaney >> >>> steve@fsl.com >> >>> >> >>>> On Mon, 2 Jan 2012 14:56:15 +0000 >> >>>> Martin Hepworth wrote: >> >>>> >> >>>>> There was something some thing similar on this lost a few days ago, >> >>>>> just >> >>>>> deleting the processing.db file sorted the issue >> >>>>> >> >>>>> Martin >> >>>>> >> >>>>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: >> >>>>>> I am getting these in the log every day, at the moment: >> >>>>>> >> >>>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted >> >>>>>> too >> >>>>> many times >> >>>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to >> >>>>>> crash >> >>>>> several times >> >>>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >> >>>>>> >> >>>>>> And this is a big problem because my mailsrv then stops to deliver >> >>>>>> any >> >>>>> mail; the mail is just kept in the hold directory under postfix.. >> >>>>>> >> >>>>>> What is causing this? And is there a way to ignore this error and >> >>>>>> still >> >>>>> deliver the rest of the mail? >> >>>>>> >> >>>>>> Regards, >> >>>>>> >> >>>>>> BTJ >> >>>>>> >> >>>>>> -- >> >>>>>> >> >>>>> >> >> ----------------------------------------------------------------------------------------------- >> >>>>> >> >>>>>> Bj?rn T Johansen >> >>>>>> >> >>>>>> btj@havleik.no >> >>>>>> >> >>>>> >> >> ----------------------------------------------------------------------------------------------- >> >>>>> >> >>>>>> Someone wrote: >> >>>>>> "I understand that if you play a Windows CD backwards you hear >> >>>>>> strange >> >>>>> Satanic messages" >> >>>>>> To which someone replied: >> >>>>>> "It's even worse than that; play it forwards and it installs >> Windows" >> >>>>>> >> >>>>> >> >> ----------------------------------------------------------------------------------------------- >> >>>>> >> >>>>>> -- >> >>>>>> MailScanner mailing list >> >>>>>> mailscanner@lists.mailscanner.info >> >>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >>>>>> >> >>>>>> Before posting, read http://wiki.mailscanner.info/posting >> >>>>>> >> >>>>>> Support MailScanner development - buy the book off the website! >> >>>>>> >> >>>> -- >> >>>> MailScanner mailing list >> >>>> mailscanner@lists.mailscanner.info >> >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >>>> >> >>>> Before posting, read http://wiki.mailscanner.info/posting >> >>>> >> >>>> Support MailScanner development - buy the book off the website! >> >> >> >> >> >> >> > -- >> > MailScanner mailing list >> > mailscanner@lists.mailscanner.info >> > http://lists.mailscanner.info/mailman/listinfo/mailscanner >> > >> > Before posting, read http://wiki.mailscanner.info/posting >> > >> > Support MailScanner development - buy the book off the website! >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/ce88e1fa/attachment.html From kocisky at autistici.org Tue Feb 28 13:33:00 2012 From: kocisky at autistici.org (Kocisky) Date: Tue Feb 28 13:33:10 2012 Subject: MailScanner 4.84 - attempted to kill MailScanner In-Reply-To: <56CB9843-BB7F-4066-B26C-85FE1BAF3B29@topdog.za.net> References: <20111130224343.12601e0tsxi804q7@webmail.casa.cult.cu> <4ED7BD1B.1050003@casa.co.cu> <4ED7E5C9.3070604@tradoc.fr> <4ED7F538.5010105@casa.co.cu> <469106DE-45F1-4D57-BE83-136534F39FA6@topdog.za.net> <56CB9843-BB7F-4066-B26C-85FE1BAF3B29@topdog.za.net> Message-ID: it seems you just need to add the flag "-U" to the script "/usr/sbin/MailScanner": #!/usr/bin/perl -I/usr/share/MailScanner -U Thanks!! kocisky On 28 February 2012 08:03, Andrew Colin Kissa wrote: > > On 28 Feb 2012, at 2:24 PM, Kocisky wrote: > > > postfix, below some additional info: > > > > MailScanner --version > > Running on > > Linux mail 2.6.32-71.29.1.el6.centos.plus.x86_64 #1 SMP Sun Jun 26 > 16:27:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux > > This is CentOS release 6.2 (Final) > > This is Perl version 5.010001 (5.10.1) > > > > This is MailScanner version 4.84.3 > > Module versions are: > > 1.00 AnyDBM_File > > 1.30 Archive::Zip > > 0.23 bignum > > 1.11 Carp > > 2.02 Compress::Zlib > > 1.119 Convert::BinHex > > 0.17 Convert::TNEF > > 2.124 Data::Dumper > > 2.27 Date::Parse > > 1.03 DirHandle > > 1.06 Fcntl > > 2.77 File::Basename > > 2.14 File::Copy > > 2.02 FileHandle > > 2.08 File::Path > > 0.22 File::Temp > > 0.92 Filesys::Df > > 3.64 HTML::Entities > > 3.64 HTML::Parser > > 3.57 HTML::TokeParser > > 1.25 IO > > 1.14 IO::File > > 1.13 IO::Pipe > > 2.04 Mail::Header > > 1.89 Math::BigInt > > 0.22 Math::BigRat > > 3.08 MIME::Base64 > > 5.427 MIME::Decoder > > 5.427 MIME::Decoder::UU > > 5.427 MIME::Head > > 5.427 MIME::Parser > > 3.08 MIME::QuotedPrint > > 5.427 MIME::Tools > > 0.14 Net::CIDR > > 1.25 Net::IP > > 0.19 OLE::Storage_Lite > > 1.04 Pod::Escapes > > 3.13 Pod::Simple > > 1.17 POSIX > > 1.21 Scalar::Util > > 1.82 Socket > > 2.20 Storable > > 1.4 Sys::Hostname::Long > > 0.27 Sys::Syslog > > 1.40 Test::Pod > > 0.92 Test::Simple > > 1.9721 Time::HiRes > > 1.02 Time::localtime > > > > Optional module versions are: > > 1.58 Archive::Tar > > 0.23 bignum > > missing Business::ISBN > > missing Business::ISBN::Data > > missing Data::Dump > > 1.82 DB_File > > 1.27 DBD::SQLite > > 1.609 DBI > > 1.16 Digest > > 1.01 Digest::HMAC > > 2.39 Digest::MD5 > > 2.12 Digest::SHA1 > > 1.01 Encode::Detect > > missing Error > > 0.27 ExtUtils::CBuilder > > 2.2203 ExtUtils::ParseXS > > 2.38 Getopt::Long > > missing Inline > > missing IO::String > > 1.09 IO::Zlib > > missing IP::Country > > missing Mail::ClamAV > > 3.003001 Mail::SpamAssassin > > missing Mail::SPF > > missing Mail::SPF::Query > > 0.35 Module::Build > > missing Net::CIDR::Lite > > 0.65 Net::DNS > > missing Net::DNS::Resolver::Programmable > > missing Net::LDAP > > 4.027 NetAddr::IP > > missing Parse::RecDescent > > missing SAVI > > 3.17 Test::Harness > > missing Test::Manifest > > 2.0.0 Text::Balanced > > 1.40 URI > > 0.77 version > > missing YAML > > [root@mail ~]# > > I dont have a postfix installation so am not sure this patch will work > fully for you but please try it, > and let me know if it fixes the issue. > > > > > - Andrew > > -- > www.baruwa.org > > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/5c6b891f/attachment.html From supunr at lankacom.net Tue Feb 28 17:33:48 2012 From: supunr at lankacom.net (Supun Rathnayake) Date: Tue Feb 28 17:34:19 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <4F266810.6060300@mindconnect.nl> <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1> Message-ID: <4F4D0FFC.5030300@lankacom.net> Hi , It is the main MailScanner file normally it is located at /usr/sbin/MailScanner you can simply find it by issuing the following command # which MailScanner you need to change the file interpreter of that file ( the first line of the file started with the #! mark ) to #!/usr/bin/perl -I/usr/share/MailScanner/ -U ( i.e., you need to insert the -U flag at the end ) Thanks, Supun. On 02/28/2012 06:31 PM, Kocisky wrote: > Supan, > > where did you add the -U flag? "#!/usr/bin/perl > -I/usr/share/MailScanner/ -U" > i'm looking for the "main MailScanner file interpreter"... > > Thanks !! > kocisky > > On 30 January 2012 07:49, > wrote: > > Supan, > > Where exactly did you add that? I am having the same issue and I > cannot > seem to find the issue. I just restart MailScanner and it > processes the > messages but this requires me to do so every day. I am getting an > error > message (below) in the logs and I cannot seem to find the issue. I am > using: Ubuntu 10.04.3 LTS, MailScanner 4.84.3, and Postfix 2.7.0. > > Warning: skipping message 4995D1A02A6.ABF56 as it has been > attempted too > many times > Quarantined message 4995D1A02A6.ABF56 as it caused MailScanner to > crash > several times > > On Mon, 30 Jan 2012 10:51:12 +0100, Martijn > > > wrote: > > What is this recent Ubuntu 10.04 mailscanner update you speak > of? I've > > been unable to find it and the Ubuntu changelog doesn't seem to > mention > it. > > > > Seeing my unresolved problems with MailScanner on 10.04 half a > year ago, > > > I'd be interested in trying this. > > > > -- > > Kind regards, > > - Martijn > > > > On 2-1-2012 17:18, Supun Rathnayake wrote: > >> This happened to me as well with the recent Ubuntu 10.04 > mailscanner > >> updates, but removing of the corrupt ( so called ) email did > not solve > >> the problem > >> and finally adding -U flag to the main MailScanner file > interpreter as > >> follows did solve the problem. > >> > >> #!/usr/bin/perl -I/usr/share/MailScanner/ -U > >> > >> Thanks, > >> Supun. > >> > >> > >> On 01/02/2012 09:15 PM, Stephen Swaney wrote: > >>> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: > >>> > >>>> Yes, I have done that, several times... But it just keeps coming > >>>> back..... :-( > >>>> > >>>> BTJ > >>> 1. Shut down MailScanner > >>> 2. Remove the problem message from the incoming hold directory > >>> 3. Remove the processing db > >>> 4. Restart Mailscanner > >>> > >>> Steve > >>> --- > >>> Steve Swaney > >>> steve@fsl.com > >>> > >>>> On Mon, 2 Jan 2012 14:56:15 +0000 > >>>> Martin Hepworth> > wrote: > >>>> > >>>>> There was something some thing similar on this lost a few > days ago, > >>>>> just > >>>>> deleting the processing.db file sorted the issue > >>>>> > >>>>> Martin > >>>>> > >>>>> On Sunday, 1 January 2012, Bj?rn T Johansen > wrote: > >>>>>> I am getting these in the log every day, at the moment: > >>>>>> > >>>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been > attempted > >>>>>> too > >>>>> many times > >>>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused > MailScanner to > >>>>>> crash > >>>>> several times > >>>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... > >>>>>> > >>>>>> And this is a big problem because my mailsrv then stops to > deliver > >>>>>> any > >>>>> mail; the mail is just kept in the hold directory under > postfix.. > >>>>>> > >>>>>> What is causing this? And is there a way to ignore this > error and > >>>>>> still > >>>>> deliver the rest of the mail? > >>>>>> > >>>>>> Regards, > >>>>>> > >>>>>> BTJ > >>>>>> > >>>>>> -- > >>>>>> > >>>>> > ----------------------------------------------------------------------------------------------- > >>>>> > >>>>>> Bj?rn T Johansen > >>>>>> > >>>>>> btj@havleik.no > >>>>>> > >>>>> > ----------------------------------------------------------------------------------------------- > >>>>> > >>>>>> Someone wrote: > >>>>>> "I understand that if you play a Windows CD backwards you hear > >>>>>> strange > >>>>> Satanic messages" > >>>>>> To which someone replied: > >>>>>> "It's even worse than that; play it forwards and it installs > Windows" > >>>>>> > >>>>> > ----------------------------------------------------------------------------------------------- > >>>>> > >>>>>> -- > >>>>>> MailScanner mailing list > >>>>>> mailscanner@lists.mailscanner.info > > >>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >>>>>> > >>>>>> Before posting, read http://wiki.mailscanner.info/posting > >>>>>> > >>>>>> Support MailScanner development - buy the book off the website! > >>>>>> > >>>> -- > >>>> MailScanner mailing list > >>>> mailscanner@lists.mailscanner.info > > >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >>>> > >>>> Before posting, read http://wiki.mailscanner.info/posting > >>>> > >>>> Support MailScanner development - buy the book off the website! > >> > >> > >> > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120228/579440cf/attachment.html