Problem messages when spam checks enabled

Joolee mailscanner at joolee.nl
Mon Nov 5 08:09:39 GMT 2012


Can you run a lint test with spamassassin and a debug run with spamassassin
on one of the problem E-mails?


On 5 November 2012 08:19, Neil <nwilson123 at gmail.com> wrote:

> Hi guys,
>
> I've got a strange issue on a MailScanner install...
>
> It seems like when SpamAssassin is being called (use SpamAssassin =
> yes) the emails end up being "problem messages" and eventually after 3
> retries the messages are then quarantined...
>
> Nov  2 17:13:43 mail MailScanner[19750]: Warning: skipping message
> 0310480032E.AF1CF as it has been attempted too many times
> Nov  2 17:13:43 mail MailScanner[19750]: Quarantined message
> 0310480032E.AF1CF as it caused MailScanner to crash several times
> Nov  2 17:13:43 mail MailScanner[19750]: Saved entire message to
> /var/spool/MailScanner/quarantine/20121102/0310480032E.AF1CF
>
> If I set "use SpamAssassin =no" then emails pass through perfectly.
>
> [root at mail ~]# MailScanner --debug-sa --lint
> Trying to setlogsock(unix)
>
> Reading configuration file /etc/MailScanner/MailScanner.conf
> Reading configuration file /etc/MailScanner/conf.d/README
> Read 869 hostnames from the phishing whitelist
> Read 4249 hostnames from the phishing blacklists
> Config: calling custom init function SQLBlacklist
> Starting up SQL Blacklist
> Read 0 blacklist entries
> Config: calling custom init function MailWatchLogging
> Started SQL Logging child
> Config: calling custom init function SQLWhitelist
> Starting up SQL Whitelist
> Read 0 whitelist entries
>
> Checking version numbers...
> Version number in MailScanner.conf (4.84.5) is correct.
>
> Your envelope_sender_header in spam.assassin.prefs.conf is correct.
> MailScanner setting GID to  (89)
> MailScanner setting UID to  (89)
>
> Checking for SpamAssassin errors (if you use it)...
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> SpamAssassin reported no errors.
> Connected to Processing Attempts Database
> Created Processing Attempts Database successfully
> There are 0 messages in the Processing Attempts Database
> Using locktype = posix
> MailScanner.conf says "Virus Scanners = clamd"
> Found these virus scanners installed: clamavmodule, clamd
> ===========================================================================
> Filename Checks: Windows/DOS Executable (1 eicar.com)
> Other Checks: Found 1 problems
> Virus and Content Scanning: Starting
> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
> Virus Scanning: Clamd found 2 infections
> Infected message 1 came from 10.1.1.1
> Virus Scanning: Found 2 viruses
> ===========================================================================
> Virus Scanner test reports:
> Clamd said "eicar.com was infected: Eicar-Test-Signature"
>
> If any of your virus scanners (clamavmodule,clamd)
> are not listed there, you should check that they are installed correctly
> and that MailScanner is finding them correctly via its virus.scanners.conf.
> Config: calling custom end function SQLBlacklist
> Closing down by-domain spam blacklist
> Config: calling custom end function MailWatchLogging
> Config: calling custom end function SQLWhitelist
> Closing down by-domain spam whitelist
>
> Anyone have any ideas where to start?
>
> Thanks.
>
> Regards.
>
> Neil Wilson.
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20121105/0616a2b8/attachment.html 


More information about the MailScanner mailing list