Single email, multiple Spamassassin attempls

Jerry Benton jerry.benton at mailborder.com
Fri May 17 20:56:16 IST 2013


As for Selinux, I wouldn't know without looking at the logs. I would of
course try putting it in permissive mode and testing. If it does turn out
to be Selinux, you can build your own policies from the logs.

>From what I understand, the newer versions of Perl think some of the stuff
MailScanner does is unsafe and therefore does not allow it. Hence adding
the -U flag. Same program (MailScanner) as before, just a different version
of Perl that will not let it do things it did in previous versions.

I could of course be totally wrong.




On Fri, May 17, 2013 at 9:08 PM, Robert Lopez <rlopezcnm at gmail.com> wrote:

> On Fri, May 17, 2013 at 10:52 AM, Jerry Benton
> <jerry.benton at mailborder.com> wrote:
> > Robert,
> >
> > There are three primary things I check for when dealing with this
> problem:
> >
> > 1. Selinux. You know the drill for this one.
> > 2. MailScanner Run As and directory ownership and permissions.
> > 3. Making sure you add the -U option to MailScanner for the newer
> versions
> > of perl.
> >
> > sed -i 's:#!/usr/bin/perl -I:#!/usr/bin/perl -U -I:g'
> /usr/sbin/MailScanner
> >
> >
> > Jerry Benton
>
> Jerry,
>
> I really believe selinux not an issue in this case.
>
> /etc/MailScanner/MailScanner.conf: Run As User =
> /etc/MailScanner/MailScanner.conf:Run As Group =
> /etc/MailScanner/conf.d/CNM-MailScanner.conf:Run As User = postfix
> /etc/MailScanner/conf.d/CNM-MailScanner.conf:Run As Group = postfix
>
> I have seen you advise the -U many times in this discussion group.
> I have always been hesitant to allow unsafe operations, favouring
> fixing them if possible.
>
> I do see something is changing group of /var/spool/MailScanner/incoming to:
>  drwxrwxr-x 9 postfix clamav 4096 May 17 12:50
> /var/spool/MailScanner/incoming/
>
> I have tried to change it to postfix postfix but it changes back to as
> above.
> (To change I stop postfix, MailScanner, and clamd; make changes; start all)
>
> Worse, I think, is I see this:
> drwxr-x--- 2 postfix clamav    4096 May 17 12:45
> /var/spool/MailScanner/incoming/17603/
> drwxr-x--- 2 postfix clamav    4096 May 17 12:47
> /var/spool/MailScanner/incoming/17637/
> drwxr-x--- 2 postfix clamav    4096 May 17 12:50
> /var/spool/MailScanner/incoming/17661/
> ...
>
> Are you aware of any unsafe perl code that is involved in this
> situation that if allowed to run would fix this problem?
>
> Kind Regards
>
> --
> Robert Lopez
> Unix Systems Administrator
> Central New Mexico Community College (CNM)
> 525 Buena Vista SE
> Albuquerque, New Mexico 87106
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 

--
Jerry Benton
Mailborder Systems
www.mailborder.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130517/2d4dc8bc/attachment.html 


More information about the MailScanner mailing list