From btj at havleik.no Sun Jan 1 22:08:31 2012 From: btj at havleik.no (=?ISO-8859-1?Q?Bj=F8rn?= T Johansen) Date: Sun Jan 1 22:24:31 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times Message-ID: <20120101230831.2e7b8aaf@pennywise.havleik.no> I am getting these in the log every day, at the moment: Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted too many times Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times MailScanner E-Mail Virus Scanner version 4.84.3 starting... And this is a big problem because my mailsrv then stops to deliver any mail; the mail is just kept in the hold directory under postfix.. What is causing this? And is there a way to ignore this error and still deliver the rest of the mail? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bj?rn T Johansen btj@havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" ----------------------------------------------------------------------------------------------- From maxsec at gmail.com Mon Jan 2 14:56:15 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Mon Jan 2 14:56:26 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <20120101230831.2e7b8aaf@pennywise.havleik.no> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> Message-ID: There was something some thing similar on this lost a few days ago, just deleting the processing.db file sorted the issue Martin On Sunday, 1 January 2012, Bj?rn T Johansen wrote: > I am getting these in the log every day, at the moment: > > Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted too many times > Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times > MailScanner E-Mail Virus Scanner version 4.84.3 starting... > > And this is a big problem because my mailsrv then stops to deliver any mail; the mail is just kept in the hold directory under postfix.. > > > What is causing this? And is there a way to ignore this error and still deliver the rest of the mail? > > > Regards, > > BTJ > > -- > ----------------------------------------------------------------------------------------------- > Bj?rn T Johansen > > btj@havleik.no > ----------------------------------------------------------------------------------------------- > Someone wrote: > "I understand that if you play a Windows CD backwards you hear strange Satanic messages" > To which someone replied: > "It's even worse than that; play it forwards and it installs Windows" > ----------------------------------------------------------------------------------------------- > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120102/59208126/attachment.html From btj at havleik.no Mon Jan 2 15:11:44 2012 From: btj at havleik.no (=?ISO-8859-1?Q?Bj=F8rn?= T Johansen) Date: Mon Jan 2 15:11:55 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: References: <20120101230831.2e7b8aaf@pennywise.havleik.no> Message-ID: <20120102161144.642fdad4@tux-btj.asp-as.no> Yes, I have done that, several times... But it just keeps coming back..... :-( BTJ On Mon, 2 Jan 2012 14:56:15 +0000 Martin Hepworth wrote: > There was something some thing similar on this lost a few days ago, just > deleting the processing.db file sorted the issue > > Martin > > On Sunday, 1 January 2012, Bj?rn T Johansen wrote: > > I am getting these in the log every day, at the moment: > > > > Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted too > many times > > Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash > several times > > MailScanner E-Mail Virus Scanner version 4.84.3 starting... > > > > And this is a big problem because my mailsrv then stops to deliver any > mail; the mail is just kept in the hold directory under postfix.. > > > > > > What is causing this? And is there a way to ignore this error and still > deliver the rest of the mail? > > > > > > Regards, > > > > BTJ > > > > -- > > > ----------------------------------------------------------------------------------------------- > > Bj?rn T Johansen > > > > btj@havleik.no > > > ----------------------------------------------------------------------------------------------- > > Someone wrote: > > "I understand that if you play a Windows CD backwards you hear strange > Satanic messages" > > To which someone replied: > > "It's even worse than that; play it forwards and it installs Windows" > > > ----------------------------------------------------------------------------------------------- > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > From steve at fsl.com Mon Jan 2 15:45:45 2012 From: steve at fsl.com (Stephen Swaney) Date: Mon Jan 2 15:45:55 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <20120102161144.642fdad4@tux-btj.asp-as.no> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> Message-ID: <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: > Yes, I have done that, several times... But it just keeps coming back..... :-( > > BTJ 1. Shut down MailScanner 2. Remove the problem message from the incoming hold directory 3. Remove the processing db 4. Restart Mailscanner Steve --- Steve Swaney steve@fsl.com > > On Mon, 2 Jan 2012 14:56:15 +0000 > Martin Hepworth wrote: > >> There was something some thing similar on this lost a few days ago, just >> deleting the processing.db file sorted the issue >> >> Martin >> >> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: >>> I am getting these in the log every day, at the moment: >>> >>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted too >> many times >>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash >> several times >>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >>> >>> And this is a big problem because my mailsrv then stops to deliver any >> mail; the mail is just kept in the hold directory under postfix.. >>> >>> >>> What is causing this? And is there a way to ignore this error and still >> deliver the rest of the mail? >>> >>> >>> Regards, >>> >>> BTJ >>> >>> -- >>> >> ----------------------------------------------------------------------------------------------- >>> Bj?rn T Johansen >>> >>> btj@havleik.no >>> >> ----------------------------------------------------------------------------------------------- >>> Someone wrote: >>> "I understand that if you play a Windows CD backwards you hear strange >> Satanic messages" >>> To which someone replied: >>> "It's even worse than that; play it forwards and it installs Windows" >>> >> ----------------------------------------------------------------------------------------------- >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> >> > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From supunr at lankacom.net Mon Jan 2 16:18:45 2012 From: supunr at lankacom.net (Supun Rathnayake) Date: Mon Jan 2 16:19:12 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> Message-ID: <4F01D8E5.3050006@lankacom.net> This happened to me as well with the recent Ubuntu 10.04 mailscanner updates, but removing of the corrupt ( so called ) email did not solve the problem and finally adding -U flag to the main MailScanner file interpreter as follows did solve the problem. #!/usr/bin/perl -I/usr/share/MailScanner/ -U Thanks, Supun. On 01/02/2012 09:15 PM, Stephen Swaney wrote: > On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: > >> Yes, I have done that, several times... But it just keeps coming back..... :-( >> >> BTJ > 1. Shut down MailScanner > 2. Remove the problem message from the incoming hold directory > 3. Remove the processing db > 4. Restart Mailscanner > > Steve > --- > Steve Swaney > steve@fsl.com > >> On Mon, 2 Jan 2012 14:56:15 +0000 >> Martin Hepworth wrote: >> >>> There was something some thing similar on this lost a few days ago, just >>> deleting the processing.db file sorted the issue >>> >>> Martin >>> >>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: >>>> I am getting these in the log every day, at the moment: >>>> >>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted too >>> many times >>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash >>> several times >>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >>>> >>>> And this is a big problem because my mailsrv then stops to deliver any >>> mail; the mail is just kept in the hold directory under postfix.. >>>> >>>> What is causing this? And is there a way to ignore this error and still >>> deliver the rest of the mail? >>>> >>>> Regards, >>>> >>>> BTJ >>>> >>>> -- >>>> >>> ----------------------------------------------------------------------------------------------- >>>> Bj?rn T Johansen >>>> >>>> btj@havleik.no >>>> >>> ----------------------------------------------------------------------------------------------- >>>> Someone wrote: >>>> "I understand that if you play a Windows CD backwards you hear strange >>> Satanic messages" >>>> To which someone replied: >>>> "It's even worse than that; play it forwards and it installs Windows" >>>> >>> ----------------------------------------------------------------------------------------------- >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >>>> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! From btj at havleik.no Mon Jan 2 20:28:58 2012 From: btj at havleik.no (=?ISO-8859-1?Q?Bj=F8rn?= T Johansen) Date: Mon Jan 2 20:38:46 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <4F01D8E5.3050006@lankacom.net> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> Message-ID: <20120102212858.4f617d18@pennywise.havleik.no> Sounds like my problem, I'll try that.... Thx... :) btw, what does the -U do? also, I believe I upgraded a lot of perl packages when upgrading to CentOS 6.2 before this started, is this the cause of my problems? And if so, is there a fix I can easily do? BTJ On Mon, 02 Jan 2012 21:48:45 +0530 Supun Rathnayake wrote: > This happened to me as well with the recent Ubuntu 10.04 mailscanner updates, but removing of the corrupt ( so called ) email did not solve the problem > and finally adding -U flag to the main MailScanner file interpreter as follows did solve the problem. > > #!/usr/bin/perl -I/usr/share/MailScanner/ -U > > Thanks, > Supun. > > > On 01/02/2012 09:15 PM, Stephen Swaney wrote: > > On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: > > > >> Yes, I have done that, several times... But it just keeps coming back..... :-( > >> > >> BTJ > > 1. Shut down MailScanner > > 2. Remove the problem message from the incoming hold directory > > 3. Remove the processing db > > 4. Restart Mailscanner > > > > Steve > > --- > > Steve Swaney > > steve@fsl.com > > > >> On Mon, 2 Jan 2012 14:56:15 +0000 > >> Martin Hepworth wrote: > >> > >>> There was something some thing similar on this lost a few days ago, just > >>> deleting the processing.db file sorted the issue > >>> > >>> Martin > >>> > >>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: > >>>> I am getting these in the log every day, at the moment: > >>>> > >>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted too > >>> many times > >>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash > >>> several times > >>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... > >>>> > >>>> And this is a big problem because my mailsrv then stops to deliver any > >>> mail; the mail is just kept in the hold directory under postfix.. > >>>> > >>>> What is causing this? And is there a way to ignore this error and still > >>> deliver the rest of the mail? > >>>> > >>>> Regards, > >>>> > >>>> BTJ > >>>> > >>>> -- > >>>> > >>> ----------------------------------------------------------------------------------------------- > >>>> Bj?rn T Johansen > >>>> > >>>> btj@havleik.no > >>>> > >>> ----------------------------------------------------------------------------------------------- > >>>> Someone wrote: > >>>> "I understand that if you play a Windows CD backwards you hear strange > >>> Satanic messages" > >>>> To which someone replied: > >>>> "It's even worse than that; play it forwards and it installs Windows" > >>>> > >>> ----------------------------------------------------------------------------------------------- > >>>> -- > >>>> MailScanner mailing list > >>>> mailscanner@lists.mailscanner.info > >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >>>> > >>>> Before posting, read http://wiki.mailscanner.info/posting > >>>> > >>>> Support MailScanner development - buy the book off the website! > >>>> > >> -- > >> MailScanner mailing list > >> mailscanner@lists.mailscanner.info > >> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >> > >> Before posting, read http://wiki.mailscanner.info/posting > >> > >> Support MailScanner development - buy the book off the website! > > > -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From maxsec at gmail.com Mon Jan 2 22:10:00 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Mon Jan 2 22:10:09 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <20120102212858.4f617d18@pennywise.havleik.no> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <20120102212858.4f617d18@pennywise.havleik.no> Message-ID: Add the -U flag will sort out some remaining perl taint issues u are seeing Time to get Jules a pressie I think to remind him of the fixes ms needs recently Martin On Monday, 2 January 2012, Bj?rn T Johansen wrote: > Sounds like my problem, I'll try that.... Thx... :) > > btw, what does the -U do? > > also, I believe I upgraded a lot of perl packages when upgrading to CentOS 6.2 before this started, is this the cause of my problems? And if so, is > there a fix I can easily do? > > > BTJ > > On Mon, 02 Jan 2012 21:48:45 +0530 > Supun Rathnayake wrote: > >> This happened to me as well with the recent Ubuntu 10.04 mailscanner updates, but removing of the corrupt ( so called ) email did not solve the problem >> and finally adding -U flag to the main MailScanner file interpreter as follows did solve the problem. >> >> #!/usr/bin/perl -I/usr/share/MailScanner/ -U >> >> Thanks, >> Supun. >> >> >> On 01/02/2012 09:15 PM, Stephen Swaney wrote: >> > On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: >> > >> >> Yes, I have done that, several times... But it just keeps coming back..... :-( >> >> >> >> BTJ >> > 1. Shut down MailScanner >> > 2. Remove the problem message from the incoming hold directory >> > 3. Remove the processing db >> > 4. Restart Mailscanner >> > >> > Steve >> > --- >> > Steve Swaney >> > steve@fsl.com >> > >> >> On Mon, 2 Jan 2012 14:56:15 +0000 >> >> Martin Hepworth wrote: >> >> >> >>> There was something some thing similar on this lost a few days ago, just >> >>> deleting the processing.db file sorted the issue >> >>> >> >>> Martin >> >>> >> >>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: >> >>>> I am getting these in the log every day, at the moment: >> >>>> >> >>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted too >> >>> many times >> >>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash >> >>> several times >> >>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >> >>>> >> >>>> And this is a big problem because my mailsrv then stops to deliver any >> >>> mail; the mail is just kept in the hold directory under postfix.. >> >>>> >> >>>> What is causing this? And is there a way to ignore this error and still >> >>> deliver the rest of the mail? >> >>>> >> >>>> Regards, >> >>>> >> >>>> BTJ >> >>>> >> >>>> -- >> >>>> >> >>> ----------------------------------------------------------------------------------------------- >> >>>> Bj?rn T Johansen >> >>>> >> >>>> btj@havleik.no >> >>>> >> >>> ----------------------------------------------------------------------------------------------- >> >>>> Someone wrote: >> >>>> "I understand that if you play a Windows CD backwards you hear strange >> >>> Satanic messages" >> >>>> To which someone replied: >> >>>> "It's even worse than that; play it forwards and it installs Windows" >> >>>> >> >>> ----------------------------------------------------------------------------------------------- >> >>>> -- >> >>>> MailScanner mailing list >> >>>> mailscanner@lists.mailscanner.info >> >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >>>> >> >>>> Before posting, read http://wiki.mailscanner.info/posting >> >>>> >> >>>> Support MailScanner development - buy the book off the website! >> >>>> >> >> -- >> >> MailScanner mailing list >> >> mailscanner@lists.mailscanner.info >> >> This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120102/5cdbbf08/attachment.html From btj at havleik.no Tue Jan 3 07:37:59 2012 From: btj at havleik.no (=?ISO-8859-1?Q?Bj=F8rn?= T Johansen) Date: Tue Jan 3 07:38:09 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <20120102212858.4f617d18@pennywise.havleik.no> Message-ID: <20120103083759.1c00ff21@tux-btj.asp-as.no> Yes, seems like the -U has fixed my problems... Thx... :) BTJ On Mon, 2 Jan 2012 22:10:00 +0000 Martin Hepworth wrote: > Add the -U flag will sort out some remaining perl taint issues u are seeing > > Time to get Jules a pressie I think to remind him of the fixes ms needs > recently > > Martin > > On Monday, 2 January 2012, Bj?rn T Johansen wrote: > > Sounds like my problem, I'll try that.... Thx... :) > > > > btw, what does the -U do? > > > > also, I believe I upgraded a lot of perl packages when upgrading to > CentOS 6.2 before this started, is this the cause of my problems? And if > so, is > > there a fix I can easily do? > > > > > > BTJ > > > > On Mon, 02 Jan 2012 21:48:45 +0530 > > Supun Rathnayake wrote: > > > >> This happened to me as well with the recent Ubuntu 10.04 mailscanner > updates, but removing of the corrupt ( so called ) email did not solve the > problem > >> and finally adding -U flag to the main MailScanner file interpreter as > follows did solve the problem. > >> > >> #!/usr/bin/perl -I/usr/share/MailScanner/ -U > >> > >> Thanks, > >> Supun. > >> > >> > >> On 01/02/2012 09:15 PM, Stephen Swaney wrote: > >> > On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: > >> > > >> >> Yes, I have done that, several times... But it just keeps coming > back..... :-( > >> >> > >> >> BTJ > >> > 1. Shut down MailScanner > >> > 2. Remove the problem message from the incoming hold directory > >> > 3. Remove the processing db > >> > 4. Restart Mailscanner > >> > > >> > Steve > >> > --- > >> > Steve Swaney > >> > steve@fsl.com > >> > > >> >> On Mon, 2 Jan 2012 14:56:15 +0000 > >> >> Martin Hepworth wrote: > >> >> > >> >>> There was something some thing similar on this lost a few days ago, > just > >> >>> deleting the processing.db file sorted the issue > >> >>> > >> >>> Martin > >> >>> > >> >>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: > >> >>>> I am getting these in the log every day, at the moment: > >> >>>> > >> >>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted > too > >> >>> many times > >> >>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to > crash > >> >>> several times > >> >>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... > >> >>>> > >> >>>> And this is a big problem because my mailsrv then stops to deliver > any > >> >>> mail; the mail is just kept in the hold directory under postfix.. > >> >>>> > >> >>>> What is causing this? And is there a way to ignore this error and > still > >> >>> deliver the rest of the mail? > >> >>>> > >> >>>> Regards, > >> >>>> > >> >>>> BTJ > >> >>>> > >> >>>> -- > >> >>>> > >> >>> > ----------------------------------------------------------------------------------------------- > >> >>>> Bj?rn T Johansen > >> >>>> > >> >>>> btj@havleik.no > >> >>>> > >> >>> > ----------------------------------------------------------------------------------------------- > >> >>>> Someone wrote: > >> >>>> "I understand that if you play a Windows CD backwards you hear > strange > >> >>> Satanic messages" > >> >>>> To which someone replied: > >> >>>> "It's even worse than that; play it forwards and it installs > Windows" > >> >>>> > >> >>> > ----------------------------------------------------------------------------------------------- > >> >>>> -- > >> >>>> MailScanner mailing list > >> >>>> mailscanner@lists.mailscanner.info > >> >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner > >> >>>> > >> >>>> Before posting, read http://wiki.mailscanner.info/posting > >> >>>> > >> >>>> Support MailScanner development - buy the book off the website! > >> >>>> > >> >> -- > >> >> MailScanner mailing list > >> >> mailscanner@lists.mailscanner.info > >> >> This message has been scanned for viruses and > > dangerous content by MailScanner, and is > > believed to be clean. > > > > -- > > MailScanner mailing list > > mailscanner@lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > From bjron.mork at gmail.com Fri Jan 6 07:15:40 2012 From: bjron.mork at gmail.com (Bjorn Mork) Date: Fri Jan 6 07:15:49 2012 Subject: problem with sending from dynamic IP In-Reply-To: References: <20111227191858.GA27426@astrouw.edu.pl> Message-ID: Hi, I do have almost the same issue of Dynamic IP, (recently, we blocked port 25 for all customers), But my IP pool is already listed multiple block list. For most of my emails MailScanner adds RCVD_IN_PBL--> 3.33, which raises to my spam threshold value, and causes false positive to most of my emails. I want to configure MailScanner to only stop RCVD_IN_PBL scanning for all of my IP pool. Please suggest how can I configure such option. Regards B~Mork From ms-list at alexb.ch Fri Jan 6 07:34:33 2012 From: ms-list at alexb.ch (Alex Broens) Date: Fri Jan 6 07:34:51 2012 Subject: problem with sending from dynamic IP In-Reply-To: References: <20111227191858.GA27426@astrouw.edu.pl> Message-ID: <4F06A409.5060708@alexb.ch> On 2012-01-06 8:15, Bjorn Mork wrote: > Hi, > > I do have almost the same issue of Dynamic IP, (recently, we blocked > port 25 for all customers), But my IP pool is already listed multiple > block list. > > For most of my emails MailScanner adds RCVD_IN_PBL--> 3.33, which > raises to my spam threshold value, and causes false positive to most > of my emails. I want to configure MailScanner to only stop RCVD_IN_PBL > scanning for all of my IP pool. MailScanner does not addd this - this is handled by Spamassassin. > Please suggest how can I configure such option. see documentation for trusted_networks and internal_networks http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.txt From john.oneill.ie at gmail.com Fri Jan 6 20:49:50 2012 From: john.oneill.ie at gmail.com (John O'Neill) Date: Fri Jan 6 20:50:00 2012 Subject: System Crash -Returned 2 signal 0 Message-ID: Hi All, We are doing our first install of MailScanner at the moment and are getting errors from the system as soon as mail hits it. Running the system in test with bare bones (ie no clamd and no spamassassin) its fine but obviously this isnt much use to us. Installing clamd the system will run fine as well however once we installed the spamassassin module and mail hits the system we have lots and lot of lines of *"MailScanner: Process did not exit cleanly, returned 2 with signal 0"* Enabling debug in the MailScanner.conf file and running debug we get a crash with the following error message *"Insecure dependency in mkdir while running with -T switch at /usr/lib/MailScanner/MailScanner/Quarantine.pm line 189"* I came across something similar on the list previously which suggested a possible fix of Add -U -X to your # line of MailScanner file but unfortunately I am not sure what the original poster meant. System details from MailScanner -v are This is CentOS release 6.2 (Final) This is Perl version 5.010001 (5.10.1) This is MailScanner version 4.84.3 Any help would be greatly appreciated Thanks, John -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120106/5880199a/attachment.html From jeremy at fluxlabs.net Fri Jan 6 20:58:47 2012 From: jeremy at fluxlabs.net (Jeremy McSpadden) Date: Fri Jan 6 20:59:01 2012 Subject: System Crash -Returned 2 signal 0 In-Reply-To: Message-ID: Edit your MailScanner binary and add ?U to the first line of that file as a switch. -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 From: John O'Neill > Reply-To: MailScanner discussion > Date: Fri, 6 Jan 2012 20:49:50 +0000 To: > Subject: System Crash -Returned 2 signal 0 Hi All, We are doing our first install of MailScanner at the moment and are getting errors from the system as soon as mail hits it. Running the system in test with bare bones (ie no clamd and no spamassassin) its fine but obviously this isnt much use to us. Installing clamd the system will run fine as well however once we installed the spamassassin module and mail hits the system we have lots and lot of lines of "MailScanner: Process did not exit cleanly, returned 2 with signal 0" Enabling debug in the MailScanner.conf file and running debug we get a crash with the following error message "Insecure dependency in mkdir while running with -T switch at /usr/lib/MailScanner/MailScanner/Quarantine.pm line 189" I came across something similar on the list previously which suggested a possible fix of Add -U -X to your # line of MailScanner file but unfortunately I am not sure what the original poster meant. System details from MailScanner -v are This is CentOS release 6.2 (Final) This is Perl version 5.010001 (5.10.1) This is MailScanner version 4.84.3 Any help would be greatly appreciated Thanks, John -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120106/ce45d2e0/attachment.html From Denis.Beauchemin at usherbrooke.ca Fri Jan 6 21:01:27 2012 From: Denis.Beauchemin at usherbrooke.ca (Denis Beauchemin) Date: Fri Jan 6 21:01:45 2012 Subject: System Crash -Returned 2 signal 0 In-Reply-To: References: Message-ID: John, I think it refers to the first line of the following file: /usr/sbin/MailScanner (or wherever your MS main program is located). Denis De?: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] De la part de John O'Neill Envoy??: 6 janvier 2012 15:50 ??: mailscanner@lists.mailscanner.info Objet?: System Crash -Returned 2 signal 0 Hi All, We are doing our first install of MailScanner at the moment and are getting errors from the system as soon as mail hits it. Running the system in test with bare bones (ie no clamd and no spamassassin) its fine but obviously this isnt much use to us. Installing clamd the system will run fine as well however once we installed the spamassassin module and mail hits the system we have lots and lot of lines of "MailScanner: Process did not exit cleanly, returned 2 with signal 0" Enabling debug in the MailScanner.conf file and running debug we get a crash with the following error message "Insecure dependency in mkdir while running with -T switch at /usr/lib/MailScanner/MailScanner/Quarantine.pm line 189" I came across something similar on the list previously which suggested a possible fix of Add -U -X to your # line of MailScanner file but unfortunately I am not sure what the original poster meant. System details from MailScanner -v are This is CentOS release 6.2 (Final) This is Perl version 5.010001 (5.10.1) This is MailScanner version 4.84.3 Any help would be greatly appreciated Thanks, John From paul at welshfamily.com Sat Jan 7 00:00:49 2012 From: paul at welshfamily.com (Paul Welsh) Date: Sat Jan 7 00:01:00 2012 Subject: Random spam mail stuck in queue Message-ID: Not a big deal because I've written a script to track them down but, after several months of no problems, my inbound mail queue got clogged up with the message below. It keeps getting scanned again and again. Eats up loads of CPU. Running Exim 4.60 with MailScanner 4.84.3 Below is the start of the message. It's a tax refund spam with a "refund form" attached. Anyone else had this problem? Regards Paul 243P Received: from host2.lollo.info ([96.30.48.99]) by [my server] (Exim 4.60) (envelope-from ) id 1RixlR-0003D4-NZ for [me]; Fri, 06 Jan 2012 00:34:34 +0000 203P Received: from ftp.trad.logos.it ([193.41.7.210] helo=taxes.co.uk) by host2.lollo.info with esmtpa (Exim 4.69) (envelope-from ) id 1RiwUT-0003rZ-6K; Thu, 05 Jan 2012 17:12:57 -0600 030R Reply-To: noreply@taxes.co.uk 049F From: "HM Revenue & Customs" 032 Subject: Notification of refund 033 Date: 06 Jan 2012 00:12:54 +0100 058I Message-ID: <20120106001254.B0FF5166415E3CAD@taxes.co.uk> 018 MIME-Version: 1.0 085 Content-Type: multipart/mixed; From john.oneill.ie at gmail.com Sat Jan 7 00:08:33 2012 From: john.oneill.ie at gmail.com (John O'Neill) Date: Sat Jan 7 00:08:42 2012 Subject: System Crash -Returned 2 signal 0 In-Reply-To: References: Message-ID: Many thanks Gents ... I appreciate your help On 6 Jan 2012 21:13, "Denis Beauchemin" wrote: > John, > > I think it refers to the first line of the following file: > /usr/sbin/MailScanner (or wherever your MS main program is located). > > Denis > > De : mailscanner-bounces@lists.mailscanner.info [mailto: > mailscanner-bounces@lists.mailscanner.info] De la part de John O'Neill > Envoy? : 6 janvier 2012 15:50 > ? : mailscanner@lists.mailscanner.info > Objet : System Crash -Returned 2 signal 0 > > > Hi All, > > > We are doing our first install of MailScanner at the moment and are > getting errors from the system as soon as mail hits it. Running the system > in test with bare bones (ie no clamd and no spamassassin) its fine but > obviously this isnt much use to us. Installing clamd the system will run > fine as well however once we installed the spamassassin module and mail > hits the system we have lots and lot of lines of > > "MailScanner: Process did not exit cleanly, returned 2 with signal 0" > > Enabling debug in the MailScanner.conf file and running debug we get a > crash with the following error message > > "Insecure dependency in mkdir while running with -T switch at > /usr/lib/MailScanner/MailScanner/Quarantine.pm line 189" > > I came across something similar on the list previously which suggested a > possible fix of > Add -U -X to your # line of MailScanner file > but unfortunately I am not sure what the original poster meant. > > System details from MailScanner -v are > > This is CentOS release 6.2 (Final) > This is Perl version 5.010001 (5.10.1) > This is MailScanner version 4.84.3 > > > Any help would be greatly appreciated > > Thanks, > John > > > > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120107/73d6fa27/attachment.html From maxsec at gmail.com Sat Jan 7 13:29:41 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Sat Jan 7 13:29:51 2012 Subject: Random spam mail stuck in queue In-Reply-To: References: Message-ID: you running MailScanner with the -U switch at the top? -- Martin Hepworth Oxford, UK On 7 January 2012 00:00, Paul Welsh wrote: > Not a big deal because I've written a script to track them down but, > after several months of no problems, my inbound mail queue got clogged > up with the message below. > > It keeps getting scanned again and again. Eats up loads of CPU. > > Running Exim 4.60 with MailScanner 4.84.3 > > Below is the start of the message. It's a tax refund spam with a > "refund form" attached. > > Anyone else had this problem? > > Regards > > Paul > > > 243P Received: from host2.lollo.info ([96.30.48.99]) > by [my server] > (Exim 4.60) > (envelope-from ) > id 1RixlR-0003D4-NZ > for [me]; Fri, 06 Jan 2012 00:34:34 +0000 > 203P Received: from ftp.trad.logos.it ([193.41.7.210] helo=taxes.co.uk) > by host2.lollo.info with esmtpa (Exim 4.69) > (envelope-from ) > id 1RiwUT-0003rZ-6K; Thu, 05 Jan 2012 17:12:57 -0600 > 030R Reply-To: noreply@taxes.co.uk > 049F From: "HM Revenue & Customs" > 032 Subject: Notification of refund > 033 Date: 06 Jan 2012 00:12:54 +0100 > 058I Message-ID: <20120106001254.B0FF5166415E3CAD@taxes.co.uk> > 018 MIME-Version: 1.0 > 085 Content-Type: multipart/mixed; > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120107/8e45d368/attachment.html From paul at welshfamily.com Sun Jan 8 18:47:02 2012 From: paul at welshfamily.com (Paul Welsh) Date: Sun Jan 8 18:47:12 2012 Subject: Random spam mail stuck in queue Message-ID: > From:?Martin Hepworth > To:?MailScanner discussion > Cc: > Date:?Sat, 7 Jan 2012 13:29:41 +0000 > Subject:?Re: Random spam mail stuck in queue > you running MailScanner with the -U switch at the top? Hi Martin No, I'm not running the -U switch. Will that show me what's going on with MailScanner in maillog? Got another rogue message today. Paypal account locked out type spam. It's this particular spam message that caused the problems several months ago and led to me writing a script to monitor messages stuck in the inbound queue. I've been monitoring since November with no alerts until 2 days ago. From maxsec at gmail.com Sun Jan 8 20:03:49 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Sun Jan 8 20:03:57 2012 Subject: Random spam mail stuck in queue In-Reply-To: References: Message-ID: Paul No the -U flag will sort out a couple of taint issues which still exist and last perhaps stop this issue u r seeing Martin On Sunday, 8 January 2012, Paul Welsh wrote: >> From: Martin Hepworth >> To: MailScanner discussion >> Cc: >> Date: Sat, 7 Jan 2012 13:29:41 +0000 >> Subject: Re: Random spam mail stuck in queue >> you running MailScanner with the -U switch at the top? > > Hi Martin > > No, I'm not running the -U switch. Will that show me what's going on > with MailScanner in maillog? > > Got another rogue message today. Paypal account locked out type spam. > It's this particular spam message that caused the problems several > months ago and led to me writing a script to monitor messages stuck in > the inbound queue. > > I've been monitoring since November with no alerts until 2 days ago. > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120108/8c5174ec/attachment.html From jwithrow at matech.net Tue Jan 10 20:50:31 2012 From: jwithrow at matech.net (Joshua F. Withrow) Date: Tue Jan 10 20:53:40 2012 Subject: MailScanner --lint pyzor dcc Message-ID: When running mailscanner -lint I get pyzor: check failed: internal error and dcc: dccifd -> check skipped: Connection refused Can't call method "print" on an undefined value at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Plugin/DCC.pm line 429. at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Plugin/DCC.pm line 471. Where can I get more information about what's going on so I can correct these? Josh Withrow Manager of Information Technology * (410) 548-1627 x315 ?(302) 233-2366 7 (410) 548-1628 510 Naylor Mill Road, Salisbury, Maryland 21801 www.MATECHSolutions.com ________________________________ This message is the property of MATECH Solutions (MATECH) and the Information contained herein may be/is subject to the Code of Federal Regulations Chapter 22 International Traffic in Arms Regulations (ITAR). This data may not be resold, diverted, transferred, transshipped, made available to a foreign national within the United States, or otherwise disposed of in any other country outside of its intended destination, either in original form or after being incorporated through an intermediate process into other data without the prior written approval of the US Department of State. The information in this e-mail and subsequent attachments may contain legally privileged, proprietary and/or confidential information that is intended only for the use of the addressee(s). No addressee should forward, print, copy or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as the recipient. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this e-mail information is prohibited. If you have received this communication in error, please immediately notify the sender by telephone or return e-mail and delete this e-mail. Thank You. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120110/ce93571d/attachment.html From bonivart at opencsw.org Tue Jan 10 21:15:39 2012 From: bonivart at opencsw.org (Peter Bonivart) Date: Tue Jan 10 21:16:10 2012 Subject: MailScanner --lint pyzor dcc In-Reply-To: References: Message-ID: On Tue, Jan 10, 2012 at 9:50 PM, Joshua F. Withrow wrote: > dcc: dccifd -> check skipped: Connection refused Can't call method "print" > on an undefined value at > /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Plugin/DCC.pm line 429. > at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Plugin/DCC.pm line > 471. I'm guessing dccifd is not running but the socket exists so dcc gets confused. Remove stale socket (in /var/dcc?) and dccproc will run for a while until it starts up dccifd again. /peter From kristen.eisenberg at yahoo.com Sun Jan 15 15:43:54 2012 From: kristen.eisenberg at yahoo.com (Kristen Eisenberg) Date: Sun Jan 15 15:44:04 2012 Subject: Sophos on Solaris/Sparc - V4 or V7? Message-ID: <1326642234.35746.YahooMailNeo@web122301.mail.ne1.yahoo.com> Hi all, Been out of the loop here for a long time but haven't seen much about Sophos in my archive. We've been using MailScanner for a loooong time on Solaris/Sparc boxes. We've stuck to using version 4 on the "if it ain't broke" principle, doing the manual engine update every month or two. We kind of shied away from using the newer versions maintained by Enterprise Manager which update automagically, just in case something went wrong and wasn't spotted. There doesn't seem to be any mention on the Sophos site of support for this version ending any time soon but my guess is it won't go on for ever... Kristen Eisenberg Billige Fl?ge Marketing GmbH Emanuelstr. 3, 10317 Berlin Deutschland Telefon: +49 (33) 5310967 Email: utebachmeier at gmail.com Site: http://flug.airego.de - Billige Fl?ge vergleichen -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120115/4e93ba32/attachment.html From nenad.vijatov at gmail.com Wed Jan 18 09:29:41 2012 From: nenad.vijatov at gmail.com (Nenad Vijatov) Date: Wed Jan 18 09:29:51 2012 Subject: MailScanner fail after spam message received Message-ID: Hi everyone, I need help regarding MailScanner+spamassassin installation. It is a fresh install of postfix+MailScanner 4.84.3-1+spamassassin 3.3.2-1. Every-time when I receive spam message, MailScanner restart (or die?!). When I run with check_MailScanner with Debug=on i got this error: *10:13:26 Insecure dependency in open while running with -T switch at /usr/lib/perl5/IO/File.pm line 185. Failed.* Thank you in advance! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120118/26a292f8/attachment.html From john at tradoc.fr Wed Jan 18 09:47:51 2012 From: john at tradoc.fr (John Wilcock) Date: Wed Jan 18 09:48:08 2012 Subject: MailScanner fail after spam message received In-Reply-To: References: Message-ID: <4F169547.4050009@tradoc.fr> Le 18/01/2012 10:29, Nenad Vijatov a ?crit : > I need help regarding MailScanner+spamassassin installation. > It is a fresh install of postfix+MailScanner 4.84.3-1+spamassassin 3.3.2-1. > Every-time when I receive spam message, MailScanner restart (or die?!). > When I run with check_MailScanner with Debug=on i got this error: > > *10:13:26 Insecure dependency in open while running with -T switch at > /usr/lib/perl5/IO/File.pm line 185. > Failed.* This is a taint problem that occurs with recent versions of perl, and that Julian has so far failed to track down. Until he does manage to find the offending line, the only solution is to add the -U switch to the bangline of /usr/sbin/MailScanner John. -- -- Over 5000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From Kimmo.Veijalainen at hedengren.fi Wed Jan 18 11:32:28 2012 From: Kimmo.Veijalainen at hedengren.fi (Kimmo Veijalainen) Date: Wed Jan 18 11:32:38 2012 Subject: MailScanner fail after spam message received In-Reply-To: References: Message-ID: <337ECC0A6779BA4589582135A0C0AA37CE0C6D@exchange.domain> > Every-time when I receive spam message, MailScanner restart (or die?!). When I run with check_MailScanner with Debug=on i got this error: > > 10:13:26 Insecure dependency in open while running with -T switch at /usr/lib/perl5/IO/File.pm line 185. > Failed. There's a taint issue somewhere. Quick and dirty solution: edit the first line of /usr/sbin/MailScanner. Add -U option. Then it will run "unsafe" code that normally fails taint checks. From nenad.vijatov at gmail.com Wed Jan 18 12:03:19 2012 From: nenad.vijatov at gmail.com (Nenad Vijatov) Date: Wed Jan 18 12:03:28 2012 Subject: MailScanner fail after spam message received In-Reply-To: <337ECC0A6779BA4589582135A0C0AA37CE0C6D@exchange.domain> References: <337ECC0A6779BA4589582135A0C0AA37CE0C6D@exchange.domain> Message-ID: Thank you all for fast answers :) "dirty" solution with -U solve my problem! On Wed, Jan 18, 2012 at 12:32 PM, Kimmo Veijalainen < Kimmo.Veijalainen@hedengren.fi> wrote: > > Every-time when I receive spam message, MailScanner restart (or die?!). > When I run with check_MailScanner with Debug=on i got this error: > > > > 10:13:26 Insecure dependency in open while running with -T switch at > /usr/lib/perl5/IO/File.pm line 185. > > Failed. > > There's a taint issue somewhere. > Quick and dirty solution: edit the first line of /usr/sbin/MailScanner. > Add -U option. > Then it will run "unsafe" code that normally fails taint checks. > > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120118/8051d580/attachment.html From richard at fastnet.co.uk Thu Jan 19 15:00:17 2012 From: richard at fastnet.co.uk (Richard Mealing) Date: Thu Jan 19 15:00:33 2012 Subject: Warning: skipping message q0JDW*** as it has been attempted too many times Message-ID: <1251B5423222C446A299CABAA7B46FF436DBAF@fn-exchange.fastnet.local> Hi, I repeatedly get this now on some of my servers. I have to delete all the databases from Clamav and restart clamav to get things working again. I am using sane signatures and removing them all seems to fix this problem for me. I've also tried doing the -U switch in the header of MailScanner. Is anyone else experiencing this problem? I might have to ditch the added signatures if this continues. Thanks, Richard -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120119/46cc4e29/attachment.html From maxsec at gmail.com Thu Jan 19 17:23:41 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Thu Jan 19 17:23:50 2012 Subject: Warning: skipping message q0JDW*** as it has been attempted too many times In-Reply-To: <1251B5423222C446A299CABAA7B46FF436DBAF@fn-exchange.fastnet.local> References: <1251B5423222C446A299CABAA7B46FF436DBAF@fn-exchange.fastnet.local> Message-ID: Extra third party signatures have caused issues with clamav in the past ESP with clam upgrades and how they report their results Martin On Thursday, 19 January 2012, Richard Mealing wrote: > Hi, > > > > I repeatedly get this now on some of my servers. I have to delete all the databases from Clamav and restart clamav to get things working again. > > I am using sane signatures and removing them all seems to fix this problem for me. > > I?ve also tried doing the ?U switch in the header of MailScanner. > > > > Is anyone else experiencing this problem? I might have to ditch the added signatures if this continues. > > > > Thanks, > > > > Richard > > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120119/ab4aefa8/attachment.html From richard at fastnet.co.uk Fri Jan 20 09:04:55 2012 From: richard at fastnet.co.uk (Richard Mealing) Date: Fri Jan 20 09:05:10 2012 Subject: Warning: skipping message q0JDW*** as it has been attempted too many times In-Reply-To: References: <1251B5423222C446A299CABAA7B46FF436DBAF@fn-exchange.fastnet.local> Message-ID: <1251B5423222C446A299CABAA7B46FF436E11C@fn-exchange.fastnet.local> Hi Martin, It was happening on perl 5.8, even with the -U switch. I've moved it now to perl 5.12 and put the -U switch on there, so I'll see how this goes. It seems when it catches 1 of the emails, every subsequent email gets moved to quarantine until I see what's happening. After researching all I can find for a fix is this -U switch. I thought this was just for Fedora boxes but I see people with Centos also having this problem. I'm not on either - FreeBSD. I'm wondering if something in the Signatures are doing this, rather that perl taint issues. If that's the case then I'll try and narrow it down, although it's not happened since I put this fix in yesterday. Thanks, Rich From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Martin Hepworth Sent: 19 January 2012 17:24 To: MailScanner discussion Subject: Re: Warning: skipping message q0JDW*** as it has been attempted too many times Extra third party signatures have caused issues with clamav in the past ESP with clam upgrades and how they report their results Martin On Thursday, 19 January 2012, Richard Mealing > wrote: > Hi, > > > > I repeatedly get this now on some of my servers. I have to delete all the databases from Clamav and restart clamav to get things working again. > > I am using sane signatures and removing them all seems to fix this problem for me. > > I've also tried doing the -U switch in the header of MailScanner. > > > > Is anyone else experiencing this problem? I might have to ditch the added signatures if this continues. > > > > Thanks, > > > > Richard > > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120120/7722122e/attachment.html From mailscanner at barendse.to Fri Jan 20 10:21:34 2012 From: mailscanner at barendse.to (Remco Barendse) Date: Fri Jan 20 10:22:01 2012 Subject: MailScanner updates? Message-ID: Hi list Are there any updated MailScanner packages? I am running MailScanner-4.84.3-1 and also suffering from problems where tnef / winmail.dat is not getting decoded. The website mentions the last update on the 20th of August 2011, are there no updated packages since? Thanks! From phil.randal at hoopleltd.co.uk Fri Jan 20 13:15:30 2012 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Fri Jan 20 13:15:52 2012 Subject: MailScanner updates? In-Reply-To: References: Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B853C614A79@HC-EXMBX04.herefordshire.gov.uk> I had to revert tnef.pm to the previous version. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.randal@hoopleltd.co.uk -----Original Message----- From: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner-bounces@lists.mailscanner.info] On Behalf Of Remco Barendse Sent: 20 January 2012 10:22 To: MailScanner mailing list Subject: MailScanner updates? Hi list Are there any updated MailScanner packages? I am running MailScanner-4.84.3-1 and also suffering from problems where tnef / winmail.dat is not getting decoded. The website mentions the last update on the 20th of August 2011, are there no updated packages since? Thanks! -- MailScanner mailing list mailscanner@lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! ?Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust or 2gether NHS Foundation Trust. You should be aware that Hoople Ltd, Herefordshire Council, Herefordshire Primary Care Trust, Wye Valley NHS Trust & 2gether NHS Foundation Trust monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.? From yoloits at ycoe.org Fri Jan 20 14:54:57 2012 From: yoloits at ycoe.org (YoloITS) Date: Fri Jan 20 14:55:10 2012 Subject: unsubscribe Message-ID: unsubscribe ________________________________ This message, including any attachments, is intended solely for the use of the named recipient(s) and may contain confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution of this communication(s) is expressly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy any and all copies of the original message. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120120/d43324d3/attachment.html From mailinglist at mindconnect.nl Mon Jan 30 09:51:12 2012 From: mailinglist at mindconnect.nl (Martijn) Date: Mon Jan 30 09:51:29 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <4F01D8E5.3050006@lankacom.net> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> Message-ID: <4F266810.6060300@mindconnect.nl> What is this recent Ubuntu 10.04 mailscanner update you speak of? I've been unable to find it and the Ubuntu changelog doesn't seem to mention it. Seeing my unresolved problems with MailScanner on 10.04 half a year ago, I'd be interested in trying this. -- Kind regards, - Martijn On 2-1-2012 17:18, Supun Rathnayake wrote: > This happened to me as well with the recent Ubuntu 10.04 mailscanner > updates, but removing of the corrupt ( so called ) email did not solve > the problem > and finally adding -U flag to the main MailScanner file interpreter as > follows did solve the problem. > > #!/usr/bin/perl -I/usr/share/MailScanner/ -U > > Thanks, > Supun. > > > On 01/02/2012 09:15 PM, Stephen Swaney wrote: >> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: >> >>> Yes, I have done that, several times... But it just keeps coming >>> back..... :-( >>> >>> BTJ >> 1. Shut down MailScanner >> 2. Remove the problem message from the incoming hold directory >> 3. Remove the processing db >> 4. Restart Mailscanner >> >> Steve >> --- >> Steve Swaney >> steve@fsl.com >> >>> On Mon, 2 Jan 2012 14:56:15 +0000 >>> Martin Hepworth wrote: >>> >>>> There was something some thing similar on this lost a few days ago, >>>> just >>>> deleting the processing.db file sorted the issue >>>> >>>> Martin >>>> >>>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: >>>>> I am getting these in the log every day, at the moment: >>>>> >>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted >>>>> too >>>> many times >>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash >>>> several times >>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >>>>> >>>>> And this is a big problem because my mailsrv then stops to deliver any >>>> mail; the mail is just kept in the hold directory under postfix.. >>>>> >>>>> What is causing this? And is there a way to ignore this error and >>>>> still >>>> deliver the rest of the mail? >>>>> >>>>> Regards, >>>>> >>>>> BTJ >>>>> >>>>> -- >>>>> >>>> ----------------------------------------------------------------------------------------------- >>>> >>>>> Bj?rn T Johansen >>>>> >>>>> btj@havleik.no >>>>> >>>> ----------------------------------------------------------------------------------------------- >>>> >>>>> Someone wrote: >>>>> "I understand that if you play a Windows CD backwards you hear strange >>>> Satanic messages" >>>>> To which someone replied: >>>>> "It's even worse than that; play it forwards and it installs Windows" >>>>> >>>> ----------------------------------------------------------------------------------------------- >>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>>>> >>> -- >>> MailScanner mailing list >>> mailscanner@lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! > > > From vince.xander at gmail.com Mon Jan 30 12:34:50 2012 From: vince.xander at gmail.com (Vince Xander) Date: Mon Jan 30 12:35:00 2012 Subject: Email delivery testing Message-ID: Hi List, This is not directly related to the amazing Mailscanner but I hope it is useful to some folks that want to test the delivery of certain files via email. My new free service http://www.vxinbox.com allows users to send attachments to various email providers to test if they will be delivered or not. An attachment is sent using authenticated SMTP and received using POP3. The main idea of the service is to gather statistics on how easy it may be to send malicious files via email using the most common providers. If its helpful to you I'd love to hear your feedback! Thanks Vince. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120130/d6d74798/attachment.html From ms-list at alexb.ch Mon Jan 30 12:48:24 2012 From: ms-list at alexb.ch (Alex Broens) Date: Mon Jan 30 12:48:33 2012 Subject: Email delivery testing In-Reply-To: References: Message-ID: <4F269198.9070606@alexb.ch> On 01/30/2012 01:34 PM, Vince Xander wrote: > Hi List, > > This is not directly related to the amazing Mailscanner but I hope it is > useful to some folks that want to test the delivery of certain files via > email. > > My new free service http://www.vxinbox.com allows users to send attachments > to various email providers to test if they will be delivered or not. An > attachment is sent using authenticated SMTP and received using POP3. The > main idea of the service is to gather statistics on how easy it may be to > send malicious files via email using the most common providers. > > If its helpful to you I'd love to hear your feedback! > Privacy Policy? From terry at graybell.net Mon Jan 30 12:49:44 2012 From: terry at graybell.net (terry@graybell.net) Date: Mon Jan 30 12:49:59 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <4F266810.6060300@mindconnect.nl> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <4F266810.6060300@mindconnect.nl> Message-ID: <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1> Supan, Where exactly did you add that? I am having the same issue and I cannot seem to find the issue. I just restart MailScanner and it processes the messages but this requires me to do so every day. I am getting an error message (below) in the logs and I cannot seem to find the issue. I am using: Ubuntu 10.04.3 LTS, MailScanner 4.84.3, and Postfix 2.7.0. Warning: skipping message 4995D1A02A6.ABF56 as it has been attempted too many times Quarantined message 4995D1A02A6.ABF56 as it caused MailScanner to crash several times On Mon, 30 Jan 2012 10:51:12 +0100, Martijn wrote: > What is this recent Ubuntu 10.04 mailscanner update you speak of? I've > been unable to find it and the Ubuntu changelog doesn't seem to mention it. > > Seeing my unresolved problems with MailScanner on 10.04 half a year ago, > I'd be interested in trying this. > > -- > Kind regards, > - Martijn > > On 2-1-2012 17:18, Supun Rathnayake wrote: >> This happened to me as well with the recent Ubuntu 10.04 mailscanner >> updates, but removing of the corrupt ( so called ) email did not solve >> the problem >> and finally adding -U flag to the main MailScanner file interpreter as >> follows did solve the problem. >> >> #!/usr/bin/perl -I/usr/share/MailScanner/ -U >> >> Thanks, >> Supun. >> >> >> On 01/02/2012 09:15 PM, Stephen Swaney wrote: >>> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: >>> >>>> Yes, I have done that, several times... But it just keeps coming >>>> back..... :-( >>>> >>>> BTJ >>> 1. Shut down MailScanner >>> 2. Remove the problem message from the incoming hold directory >>> 3. Remove the processing db >>> 4. Restart Mailscanner >>> >>> Steve >>> --- >>> Steve Swaney >>> steve@fsl.com >>> >>>> On Mon, 2 Jan 2012 14:56:15 +0000 >>>> Martin Hepworth wrote: >>>> >>>>> There was something some thing similar on this lost a few days ago, >>>>> just >>>>> deleting the processing.db file sorted the issue >>>>> >>>>> Martin >>>>> >>>>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: >>>>>> I am getting these in the log every day, at the moment: >>>>>> >>>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted >>>>>> too >>>>> many times >>>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to >>>>>> crash >>>>> several times >>>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >>>>>> >>>>>> And this is a big problem because my mailsrv then stops to deliver >>>>>> any >>>>> mail; the mail is just kept in the hold directory under postfix.. >>>>>> >>>>>> What is causing this? And is there a way to ignore this error and >>>>>> still >>>>> deliver the rest of the mail? >>>>>> >>>>>> Regards, >>>>>> >>>>>> BTJ >>>>>> >>>>>> -- >>>>>> >>>>> ----------------------------------------------------------------------------------------------- >>>>> >>>>>> Bj?rn T Johansen >>>>>> >>>>>> btj@havleik.no >>>>>> >>>>> ----------------------------------------------------------------------------------------------- >>>>> >>>>>> Someone wrote: >>>>>> "I understand that if you play a Windows CD backwards you hear >>>>>> strange >>>>> Satanic messages" >>>>>> To which someone replied: >>>>>> "It's even worse than that; play it forwards and it installs Windows" >>>>>> >>>>> ----------------------------------------------------------------------------------------------- >>>>> >>>>>> -- >>>>>> MailScanner mailing list >>>>>> mailscanner@lists.mailscanner.info >>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>>> >>>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>>> >>>>>> Support MailScanner development - buy the book off the website! >>>>>> >>>> -- >>>> MailScanner mailing list >>>> mailscanner@lists.mailscanner.info >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>> >>>> Before posting, read http://wiki.mailscanner.info/posting >>>> >>>> Support MailScanner development - buy the book off the website! >> >> >> > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From jaearick at colby.edu Mon Jan 30 14:53:55 2012 From: jaearick at colby.edu (Jeff Earickson) Date: Mon Jan 30 14:54:29 2012 Subject: Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to crash several times In-Reply-To: <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1> References: <20120101230831.2e7b8aaf@pennywise.havleik.no> <20120102161144.642fdad4@tux-btj.asp-as.no> <932E1FB2-BDCB-440A-A797-4E675079345E@fsl.com> <4F01D8E5.3050006@lankacom.net> <4F266810.6060300@mindconnect.nl> <6a3667635df63efe6f93aaaa19d28c96@127.0.0.1> Message-ID: All, I too have been plagued by MailScanner hanging in this fashion for a while (on Redhat 6.2). I implemented the perl -U thing and it didn't really help. I finally gave up and modified logcheck (the older version from http://sourceforge.net/projects/logcheck/, not the version from http://logcheck.org) to look for log symptoms that MailScanner is in trouble and automatically restart it for me. Then I have a crontab line that runs every 5 minutes to check the syslogs: 2,7,12,17,22,27,32,37,42,47,52,57 * * * * /usr/local/adm/logcheck-MailScanner.sh Attached is the logcheck-MailScanner.sh script and the "mailscanner.problems" script that it uses to look for MailScanner issues in syslog. Your version of mailscanner.problems may vary for your system. To make it work, you will also need to download, compile and install the logtail program from the sourceforge version of logcheck. While not solving the MailScanner hangup problem, at least this method keeps things working for me. ----------------------------------- Jeff A. Earickson, Ph.D Senior Server System Administrator Colby College, 4214 Mayflower Hill, Waterville ME, 04901-8842 207-859-4214 (fax 207-859-4186) Eastern Time Zone, USA ----------------------------------- On Mon, Jan 30, 2012 at 7:49 AM, wrote: > Supan, > > Where exactly did you add that? ?I am having the same issue and I cannot > seem to find the issue. ?I just restart MailScanner and it processes the > messages but this requires me to do so every day. ?I am getting an error > message (below) in the logs and I cannot seem to find the issue. I am > using: ?Ubuntu 10.04.3 LTS, MailScanner 4.84.3, and Postfix 2.7.0. > > Warning: skipping message 4995D1A02A6.ABF56 as it has been attempted too > many times > Quarantined message 4995D1A02A6.ABF56 as it caused MailScanner to crash > several times > > On Mon, 30 Jan 2012 10:51:12 +0100, Martijn > wrote: >> What is this recent Ubuntu 10.04 mailscanner update you speak of? I've >> been unable to find it and the Ubuntu changelog doesn't seem to mention > it. >> >> Seeing my unresolved problems with MailScanner on 10.04 half a year ago, > >> I'd be interested in trying this. >> >> -- >> Kind regards, >> - Martijn >> >> On 2-1-2012 17:18, Supun Rathnayake wrote: >>> This happened to me as well with the recent Ubuntu 10.04 mailscanner >>> updates, but removing of the corrupt ( so called ) email did not solve >>> the problem >>> and finally adding -U flag to the main MailScanner file interpreter as >>> follows did solve the problem. >>> >>> #!/usr/bin/perl -I/usr/share/MailScanner/ -U >>> >>> Thanks, >>> Supun. >>> >>> >>> On 01/02/2012 09:15 PM, Stephen Swaney wrote: >>>> On Jan 2, 2012, at 10:11 AM, Bj?rn T Johansen wrote: >>>> >>>>> Yes, I have done that, several times... But it just keeps coming >>>>> back..... :-( >>>>> >>>>> BTJ >>>> 1. Shut down MailScanner >>>> 2. Remove the problem message from the incoming hold directory >>>> 3. Remove the processing db >>>> 4. Restart Mailscanner >>>> >>>> Steve >>>> --- >>>> Steve Swaney >>>> steve@fsl.com >>>> >>>>> On Mon, 2 Jan 2012 14:56:15 +0000 >>>>> Martin Hepworth wrote: >>>>> >>>>>> There was something some thing similar on this lost a few days ago, >>>>>> just >>>>>> deleting the processing.db file sorted the issue >>>>>> >>>>>> Martin >>>>>> >>>>>> On Sunday, 1 January 2012, Bj?rn T Johansen wrote: >>>>>>> I am getting these in the log every day, at the moment: >>>>>>> >>>>>>> Warning: skipping message 13A82BF8DD.AF8F7 as it has been attempted >>>>>>> too >>>>>> many times >>>>>>> Quarantined message 13A82BF8DD.AF8F7 as it caused MailScanner to >>>>>>> crash >>>>>> several times >>>>>>> MailScanner E-Mail Virus Scanner version 4.84.3 starting... >>>>>>> >>>>>>> And this is a big problem because my mailsrv then stops to deliver >>>>>>> any >>>>>> mail; the mail is just kept in the hold directory under postfix.. >>>>>>> >>>>>>> What is causing this? And is there a way to ignore this error and >>>>>>> still >>>>>> deliver the rest of the mail? >>>>>>> >>>>>>> Regards, >>>>>>> >>>>>>> BTJ >>>>>>> >>>>>>> -- >>>>>>> >>>>>> > ----------------------------------------------------------------------------------------------- >>>>>> >>>>>>> Bj?rn T Johansen >>>>>>> >>>>>>> btj@havleik.no >>>>>>> >>>>>> > ----------------------------------------------------------------------------------------------- >>>>>> >>>>>>> Someone wrote: >>>>>>> "I understand that if you play a Windows CD backwards you hear >>>>>>> strange >>>>>> Satanic messages" >>>>>>> To which someone replied: >>>>>>> "It's even worse than that; play it forwards and it installs > Windows" >>>>>>> >>>>>> > ----------------------------------------------------------------------------------------------- >>>>>> >>>>>>> -- >>>>>>> MailScanner mailing list >>>>>>> mailscanner@lists.mailscanner.info >>>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>>>> >>>>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>>>> >>>>>>> Support MailScanner development - buy the book off the website! >>>>>>> >>>>> -- >>>>> MailScanner mailing list >>>>> mailscanner@lists.mailscanner.info >>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>>>> >>>>> Before posting, read http://wiki.mailscanner.info/posting >>>>> >>>>> Support MailScanner development - buy the book off the website! >>> >>> >>> >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- A non-text attachment was scrubbed... Name: logcheck-MailScanner.sh Type: application/x-sh Size: 3766 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120130/22d51d74/logcheck-MailScanner.sh -------------- next part -------------- A non-text attachment was scrubbed... Name: mailscanner.problems Type: application/octet-stream Size: 88 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120130/22d51d74/mailscanner.obj From jaearick at colby.edu Mon Jan 30 14:56:20 2012 From: jaearick at colby.edu (Jeff Earickson) Date: Mon Jan 30 14:56:51 2012 Subject: Where is Julian? Message-ID: All, The periodic discussions on the list about MailScanner hanging (aka, "perl -U") has made me wonder what happened to Julian Field. Is he ok? Health problems, overwork in his day job, or lack of interest in MailScanner these days? Jeff Earickson Colby College From jaearick at colby.edu Mon Jan 30 15:02:57 2012 From: jaearick at colby.edu (Jeff Earickson) Date: Mon Jan 30 15:03:27 2012 Subject: my workaround for MailScanner hangs Message-ID: All, I too have been plagued by MailScanner hanging in this fashion for a while (on Redhat 6.2). I implemented the perl -U thing and it didn't really help. I finally gave up and modified logcheck (the older version from http://sourceforge.net/projects/logcheck/, not the version from http://logcheck.org) to look for log symptoms that MailScanner is in trouble and automatically restart it for me. Then I have a crontab line that runs every 5 minutes to check the syslogs: 2,7,12,17,22,27,32,37,42,47,52,57 * * * * /usr/local/adm/logcheck-MailScanner.sh I had attached my logcheck-MailScanner.sh script in a previous version of this email but the MailScanner discussion server blocked it. Contact me for info. To make the whole thing work, you will also need to download, compile and install the logtail program from the sourceforge version of logcheck, and craft a "mailscanner.problems" file of syslog messages that happen when MailScanner hangs. While not solving the MailScanner hangup problem, at least this method keeps things working for me. Jeff Earickson Colby College From Denis.Beauchemin at usherbrooke.ca Mon Jan 30 15:20:36 2012 From: Denis.Beauchemin at usherbrooke.ca (Denis Beauchemin) Date: Mon Jan 30 15:21:34 2012 Subject: Where is Julian? In-Reply-To: References: Message-ID: I think Jules is just busy elsewhere. Just go look at his Twitter account: @JulesFM. Denis > -----Message d'origine----- > De?: mailscanner-bounces@lists.mailscanner.info [mailto:mailscanner- > bounces@lists.mailscanner.info] De la part de Jeff Earickson > Envoy??: 30 janvier 2012 10:07 > ??: MailScanner discussion > Objet?: Where is Julian? > > All, > > The periodic discussions on the list about MailScanner hanging (aka, "perl - > U") has made me wonder what happened to Julian Field. Is he ok? Health > problems, overwork in his day job, or lack of interest in MailScanner these > days? > > Jeff Earickson > Colby College > -- > MailScanner mailing list > mailscanner@lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! From john at tradoc.fr Mon Jan 30 15:33:42 2012 From: john at tradoc.fr (John Wilcock) Date: Mon Jan 30 15:33:59 2012 Subject: Where is Julian? In-Reply-To: References: Message-ID: <4F26B856.1000603@tradoc.fr> Le 30/01/2012 15:56, Jeff Earickson a ?crit : > The periodic discussions on the list about MailScanner hanging (aka, > "perl -U") has made me wonder what happened to Julian Field. Is he > ok? Health problems, overwork in his day job, or lack of interest in > MailScanner these days? I wouldn't presume to speak for Julian in any way, but I do note that he's pretty active on https://twitter.com/#!/JulesFM so I fear that lack of interest is the main reason for his absence here. Certainly I hope it isn't renewed health problems... John. -- -- Over 5000 webcams from ski resorts around the world - www.snoweye.com -- Translate your technical documents and web pages - www.tradoc.fr From mailinglist at mindconnect.nl Tue Jan 31 19:19:32 2012 From: mailinglist at mindconnect.nl (Martijn) Date: Tue Jan 31 19:19:53 2012 Subject: Question about the HOLD header check: why use "Received" ? Message-ID: <4F283EC4.6080504@mindconnect.nl> Hello everyone, While installing and documenting my hopefully soon-to-be-fully-operational MailScanner installation, I of course came accross the part where you ask Postfix to put everything in the HOLD queue. I was wondering; why exactly is this done (at least by default) using a regex on the Received header? Is it never so that Postfix receives mail that doesn't contain a Received header? I could imagine this to happen for example when a website on the same host sends e-mail instead of when e-mail from abroad is SMTP'ed to Postfix. Or, is this not an issue because Postfix adds a Received header before it reaches header_check? I have found that header_checks take place in the "cleanup" stage ( http://www.postfix.org/BUILTIN_FILTER_README.html#what ) which is before several other stages ( http://www.postfix.org/OVERVIEW.html ) but I have not yet found anything confirming that a Received header is added before the cleanup stage is reached. Just curious :-) -- Kind regards, - Martijn From mailscanner at joolee.nl Tue Jan 31 19:59:10 2012 From: mailscanner at joolee.nl (Joolee) Date: Tue Jan 31 19:59:59 2012 Subject: Question about the HOLD header check: why use "Received" ? In-Reply-To: <4F283EC4.6080504@mindconnect.nl> References: <4F283EC4.6080504@mindconnect.nl> Message-ID: I don't know why the Received header is used. I'm using a simple line of "/./ HOLD" myself. A better question is why MailScanner still uses this hack to get access to the E-mail instead of using the normal Postfix API's available. On 31 January 2012 20:19, Martijn wrote: > Hello everyone, > > While installing and documenting my hopefully soon-to-be-fully-operational > MailScanner installation, I of course came accross the part where you ask > Postfix to put everything in the HOLD queue. > > I was wondering; why exactly is this done (at least by default) using a > regex on the Received header? > > Is it never so that Postfix receives mail that doesn't contain a Received > header? I could imagine this to happen for example when a website on the > same host sends e-mail instead of when e-mail from abroad is SMTP'ed to > Postfix. > > Or, is this not an issue because Postfix adds a Received header before it > reaches header_check? I have found that header_checks take place in the > "cleanup" stage ( http://www.postfix.org/**BUILTIN_FILTER_README.html#** > what ) which is > before several other stages ( http://www.postfix.org/**OVERVIEW.html) but I have not yet found anything confirming that a Received header is > added before the cleanup stage is reached. > > Just curious :-) > > -- > Kind regards, > - Martijn > -- > MailScanner mailing list > mailscanner@lists.mailscanner.**info > http://lists.mailscanner.info/**mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/**posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120131/091e37cc/attachment.html From maxsec at gmail.com Tue Jan 31 21:20:02 2012 From: maxsec at gmail.com (Martin Hepworth) Date: Tue Jan 31 21:20:10 2012 Subject: Question about the HOLD header check: why use "Received" ? In-Reply-To: References: <4F283EC4.6080504@mindconnect.nl> Message-ID: Because using a hold queue makes it more smtp agnostic rather than having to figure out way ever wacky way postfix or other smtp needs things to works - or in postfixes case whatever wacky way weitse wants postfix to work this week Martin On Tuesday, 31 January 2012, Joolee wrote: > I don't know why the Received header is used. I'm using a simple line of "/./ HOLD" myself. > A better question is why MailScanner still uses this hack to get access to the E-mail instead of using the normal Postfix API's available. > > On 31 January 2012 20:19, Martijn wrote: >> >> Hello everyone, >> >> While installing and documenting my hopefully soon-to-be-fully-operational MailScanner installation, I of course came accross the part where you ask Postfix to put everything in the HOLD queue. >> >> I was wondering; why exactly is this done (at least by default) using a regex on the Received header? >> >> Is it never so that Postfix receives mail that doesn't contain a Received header? I could imagine this to happen for example when a website on the same host sends e-mail instead of when e-mail from abroad is SMTP'ed to Postfix. >> >> Or, is this not an issue because Postfix adds a Received header before it reaches header_check? I have found that header_checks take place in the "cleanup" stage ( http://www.postfix.org/BUILTIN_FILTER_README.html#what ) which is before several other stages ( http://www.postfix.org/OVERVIEW.html) but I have not yet found anything confirming that a Received header is added before the cleanup stage is reached. >> >> Just curious :-) >> >> -- >> Kind regards, >> - Martijn >> -- >> MailScanner mailing list >> mailscanner@lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! > -- -- Martin Hepworth Oxford, UK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120131/8e95371c/attachment.html From gcle at smcaus.com.au Tue Jan 31 22:16:35 2012 From: gcle at smcaus.com.au (Gerard Cleary) Date: Tue Jan 31 22:16:55 2012 Subject: Question about the HOLD header check: why use "Received" ? In-Reply-To: References: <4F283EC4.6080504@mindconnect.nl> Message-ID: <201202010916.35520.gcle@smcaus.com.au> On Wed, 1 Feb 2012 08:20:02 Martin Hepworth wrote: > Because using a hold queue makes it more smtp agnostic rather than having > to figure out way ever wacky way postfix or other smtp needs things to > works - or in postfixes case whatever wacky way weitse wants postfix to > work this week > > Martin I love the alliteration! -- Gerard Cleary SMC Pneumatics - Systems Admin