From thanakoc at itoneco.com  Mon Sep  2 11:37:34 2013
From: thanakoc at itoneco.com (Thanakom Chinprasertsuk)
Date: Mon, 2 Sep 2013 17:37:34 +0700
Subject: Recall: Problem with MailScanner after upgraded RedHat version
Message-ID: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE4@it1-bsms01>

Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".

From thanakoc at itoneco.com  Mon Sep  2 11:38:06 2013
From: thanakoc at itoneco.com (Thanakom Chinprasertsuk)
Date: Mon, 2 Sep 2013 17:38:06 +0700
Subject: Recall: Problem with MailScanner after upgraded RedHat version
Message-ID: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE6@it1-bsms01>

Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".

From thanakoc at itoneco.com  Mon Sep  2 11:38:33 2013
From: thanakoc at itoneco.com (Thanakom Chinprasertsuk)
Date: Mon, 2 Sep 2013 17:38:33 +0700
Subject: Recall: Problem with MailScanner after upgraded RedHat version
Message-ID: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE7@it1-bsms01>

Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".

From thanakoc at itoneco.com  Mon Sep  2 11:38:36 2013
From: thanakoc at itoneco.com (Thanakom Chinprasertsuk)
Date: Mon, 2 Sep 2013 17:38:36 +0700
Subject: Recall: Problem with MailScanner after upgraded RedHat version
Message-ID: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>

Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".

From thanakoc at itoneco.com  Mon Sep  2 11:41:36 2013
From: thanakoc at itoneco.com (Thanakom Chinprasertsuk)
Date: Mon, 2 Sep 2013 17:41:36 +0700
Subject: Problem with MailScanner after upgraded RedHat version
Message-ID: <1D7806BCE80C7F47819164A83D2EB9EC0756875BED@it1-bsms01>

Hi,

I found the problem after upgraded Red Hat 5.3 to Red Hat 5.9.

I count not send emails and it always had the error messages in /var/log/exim/mainlog as below.

2013-09-02 16:31:21 incomplete transaction (connection lost) from <test at yahoo.com<mailto:test at yahoo.com>> for
2013-09-02 16:31:21 unexpected disconnection while reading SMTP command from

# MailScanner -v
Running on
Linux it1mcsgw85.scg.co.th 2.6.18-348.el5 #1 SMP Wed Nov 28 21:22:00 EST 2012 x86_64 x86_64 x86_64 GNU/Linux
This is Red Hat Enterprise Linux Server release 5.9 (Tikanga)
This is Perl version 5.008008 (5.8.8)

This is MailScanner version 4.83.4

#  exim -bV
Exim version 4.63 #1 built 26-Jan-2011 11:32:01
Copyright (c) University of Cambridge 2006
Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (May 26, 2010)
Support for: crypteq iconv() IPv6 PAM Perl TCPwrappers OpenSSL Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 nisplus passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl plaintext spa
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
Configuration file is /etc/exim/exim.conf

Thank you.

Best Regards,
Thanakom Chinprasertsuk ( Note )
E-mail: thanakoc at itoneco.com<mailto:thanakoc at itoneco.com>
Mobile: +6686-577-3476

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130902/65c4d04b/attachment.html 

From maxsec at gmail.com  Mon Sep  2 13:18:23 2013
From: maxsec at gmail.com (Martin Hepworth)
Date: Mon, 2 Sep 2013 13:18:23 +0100
Subject: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <1D7806BCE80C7F47819164A83D2EB9EC0756875BED@it1-bsms01>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BED@it1-bsms01>
Message-ID: <CAGDKorJEsPUzQGKdr1U5f-tq1Yhk3LQTjjAdeFpqadC9wrgemw@mail.gmail.com>

This is an exim problem
I'd check you're exim conf files are still OK after the update, if your
still having problems ask on the exim mailing list

-- 
Martin Hepworth, CISSP
Oxford, UK


On 2 September 2013 11:41, Thanakom Chinprasertsuk <thanakoc at itoneco.com>wrote:

> Hi,****
>
> ** **
>
> I found the problem after upgraded *Red Hat 5.3* to *Red Hat 5.9.*****
>
> ** **
>
> I count not send emails and it always had the error messages in *
> /var/log/exim/mainlog* as below.****
>
> ** **
>
> 2013-09-02 16:31:21 incomplete transaction (connection lost) from <
> test at yahoo.com> for ****
>
> 2013-09-02 16:31:21 unexpected disconnection while reading SMTP command
> from****
>
> ** **
>
> *# MailScanner -v*
>
> Running on****
>
> Linux it1mcsgw85.scg.co.th 2.6.18-348.el5 #1 SMP Wed Nov 28 21:22:00 EST
> 2012 x86_64 x86_64 x86_64 GNU/Linux****
>
> This is Red Hat Enterprise Linux Server release 5.9 (Tikanga)****
>
> This is Perl version 5.008008 (5.8.8)****
>
> ** **
>
> This is MailScanner version 4.83.4****
>
> ** **
>
> *#  exim -bV*
>
> Exim version 4.63 #1 built 26-Jan-2011 11:32:01****
>
> Copyright (c) University of Cambridge 2006****
>
> Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (May 26, 2010)****
>
> Support for: crypteq iconv() IPv6 PAM Perl TCPwrappers OpenSSL
> Content_Scanning Old_Demime****
>
> Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb
> dsearch ldap ldapdn ldapm mysql nis nis0 nisplus passwd pgsql sqlite****
>
> Authenticators: cram_md5 cyrus_sasl plaintext spa****
>
> Routers: accept dnslookup ipliteral manualroute queryprogram redirect****
>
> Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp****
>
> Fixed never_users: 0****
>
> Size of off_t: 8****
>
> Configuration file is /etc/exim/exim.conf****
>
> ** **
>
> Thank you.****
>
> ** **
>
> Best Regards,****
>
> Thanakom Chinprasertsuk ( Note )****
>
> E-mail: thanakoc at itoneco.com****
>
> Mobile: +6686-577-3476****
>
> ** **
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130902/8b26d0fd/attachment.html 

From alex at vidadigital.com.pa  Mon Sep  2 16:49:37 2013
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Mon, 2 Sep 2013 10:49:37 -0500
Subject: Recall: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
Message-ID: <CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>

Recalling messages doesn't work with normal mailservers, only
Microsoft Exchange servers.

On Mon, Sep 2, 2013 at 5:38 AM, Thanakom Chinprasertsuk
<thanakoc at itoneco.com> wrote:
> Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!



-- 

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital

From wolfgang at sweet-haven.com  Mon Sep  2 18:17:24 2013
From: wolfgang at sweet-haven.com (Lew Wolfgang)
Date: Mon, 02 Sep 2013 10:17:24 -0700
Subject: Recall: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
	<CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
Message-ID: <5224C824.1040404@sweet-haven.com>

On 09/02/2013 08:49 AM, Alex Neuman wrote:
> Recalling messages doesn't work with normal mailservers, only
> Microsoft Exchange servers.
>
> On Mon, Sep 2, 2013 at 5:38 AM, Thanakom Chinprasertsuk
> <thanakoc at itoneco.com> wrote:
>> Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".
>>

I just had an interesting thought.  Would it be possible to
spoof Microsoft recall messages?   Post-reception removal of
spam?  Denial of service?

Would it be legal (sender spoofing), even on your own servers?

Regards,
Lew Wolfgang




From alex at vidadigital.com.pa  Mon Sep  2 21:55:22 2013
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Mon, 2 Sep 2013 15:55:22 -0500
Subject: Recall: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <5224C824.1040404@sweet-haven.com>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
	<CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
	<5224C824.1040404@sweet-haven.com>
Message-ID: <CANyE0Pr8nL8FduMOvtqKOWXPz21OMj+w1qwt8X30Q0w_-aUT+w@mail.gmail.com>

Possible, yes - up to a certain point. Worth the effort? Not much.

On Mon, Sep 2, 2013 at 12:17 PM, Lew Wolfgang <wolfgang at sweet-haven.com> wrote:
> On 09/02/2013 08:49 AM, Alex Neuman wrote:
>> Recalling messages doesn't work with normal mailservers, only
>> Microsoft Exchange servers.
>>
>> On Mon, Sep 2, 2013 at 5:38 AM, Thanakom Chinprasertsuk
>> <thanakoc at itoneco.com> wrote:
>>> Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".
>>>
>
> I just had an interesting thought.  Would it be possible to
> spoof Microsoft recall messages?   Post-reception removal of
> spam?  Denial of service?
>
> Would it be legal (sender spoofing), even on your own servers?
>
> Regards,
> Lew Wolfgang
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!



-- 

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital

From peter at farrows.org  Mon Sep  2 22:09:28 2013
From: peter at farrows.org (Peter Farrow)
Date: Mon, 02 Sep 2013 22:09:28 +0100
Subject: Recall: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <CANyE0Pr8nL8FduMOvtqKOWXPz21OMj+w1qwt8X30Q0w_-aUT+w@mail.gmail.com>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
	<CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
	<5224C824.1040404@sweet-haven.com>
	<CANyE0Pr8nL8FduMOvtqKOWXPz21OMj+w1qwt8X30Q0w_-aUT+w@mail.gmail.com>
Message-ID: <5224FE88.7070303@farrows.org>

I always thought the concept of "recalling an email" was absurd.  Only 
Microsoft could invent such an idea.

Its a bit like recalling a parcel you posted to someone, expecting them 
to pack it back up and give it back after they received it.

Completely mad.


On 02/09/2013 21:55, Alex Neuman wrote:
> Possible, yes - up to a certain point. Worth the effort? Not much.
>
> On Mon, Sep 2, 2013 at 12:17 PM, Lew Wolfgang <wolfgang at sweet-haven.com> wrote:
>> On 09/02/2013 08:49 AM, Alex Neuman wrote:
>>> Recalling messages doesn't work with normal mailservers, only
>>> Microsoft Exchange servers.
>>>
>>> On Mon, Sep 2, 2013 at 5:38 AM, Thanakom Chinprasertsuk
>>> <thanakoc at itoneco.com> wrote:
>>>> Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".
>>>>
>> I just had an interesting thought.  Would it be possible to
>> spoof Microsoft recall messages?   Post-reception removal of
>> spam?  Denial of service?
>>
>> Would it be legal (sender spoofing), even on your own servers?
>>
>> Regards,
>> Lew Wolfgang
>>
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>
>


From alex at vidadigital.com.pa  Mon Sep  2 23:29:17 2013
From: alex at vidadigital.com.pa (Alex Neuman)
Date: Mon, 2 Sep 2013 17:29:17 -0500
Subject: Recall: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <5224FE88.7070303@farrows.org>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
	<CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
	<5224C824.1040404@sweet-haven.com>
	<CANyE0Pr8nL8FduMOvtqKOWXPz21OMj+w1qwt8X30Q0w_-aUT+w@mail.gmail.com>
	<5224FE88.7070303@farrows.org>
Message-ID: <CANyE0PpbnLY9TFMor9r4CffCUhZMVs3d+53sLeR0UtN=pvy8tA@mail.gmail.com>

Absolutely. Like getting the pig back if the bacon tastes funny.

On Mon, Sep 2, 2013 at 4:09 PM, Peter Farrow <peter at farrows.org> wrote:
> I always thought the concept of "recalling an email" was absurd.  Only
> Microsoft could invent such an idea.
>
> Its a bit like recalling a parcel you posted to someone, expecting them
> to pack it back up and give it back after they received it.
>
> Completely mad.
>
>
> On 02/09/2013 21:55, Alex Neuman wrote:
>> Possible, yes - up to a certain point. Worth the effort? Not much.
>>
>> On Mon, Sep 2, 2013 at 12:17 PM, Lew Wolfgang <wolfgang at sweet-haven.com> wrote:
>>> On 09/02/2013 08:49 AM, Alex Neuman wrote:
>>>> Recalling messages doesn't work with normal mailservers, only
>>>> Microsoft Exchange servers.
>>>>
>>>> On Mon, Sep 2, 2013 at 5:38 AM, Thanakom Chinprasertsuk
>>>> <thanakoc at itoneco.com> wrote:
>>>>> Thanakom Chinprasertsuk would like to recall the message, "Problem with MailScanner after upgraded RedHat version".
>>>>>
>>> I just had an interesting thought.  Would it be possible to
>>> spoof Microsoft recall messages?   Post-reception removal of
>>> spam?  Denial of service?
>>>
>>> Would it be legal (sender spoofing), even on your own servers?
>>>
>>> Regards,
>>> Lew Wolfgang
>>>
>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>
>>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!



-- 

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital

From james at gray.net.au  Tue Sep  3 02:39:08 2013
From: james at gray.net.au (James Gray)
Date: Tue, 3 Sep 2013 11:39:08 +1000
Subject: Recall: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <5224FE88.7070303@farrows.org>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
	<CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
	<5224C824.1040404@sweet-haven.com>
	<CANyE0Pr8nL8FduMOvtqKOWXPz21OMj+w1qwt8X30Q0w_-aUT+w@mail.gmail.com>
	<5224FE88.7070303@farrows.org>
Message-ID: <4A9C32A4-A33C-4FB5-BA50-73C4BBA51D9C@gray.net.au>


On 03/09/2013, at 7:09 AM, Peter Farrow <peter at farrows.org> wrote:

> I always thought the concept of "recalling an email" was absurd.  Only 
> Microsoft could invent such an idea.

To me, it's just a big red flag to read whatever juicy tidbit has just been fired off prematurely from an inattentive co-worker! ;)

-- 
James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5926 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130903/60bef261/attachment.bin 

From jgao at veecall.com  Tue Sep  3 21:26:09 2013
From: jgao at veecall.com (J Gao)
Date: Tue, 03 Sep 2013 13:26:09 -0700
Subject: Allow a trusted sender to send any type of file
In-Reply-To: <CAAJHbArHV74ZiN3tDQty6Gie1TXAZzUMDMy2WCjXyh9nM4sAYw@mail.gmail.com>
References: <521FB0A0.8060301@veecall.com>
	<CAAJHbArHV74ZiN3tDQty6Gie1TXAZzUMDMy2WCjXyh9nM4sAYw@mail.gmail.com>
Message-ID: <522645E1.3050105@veecall.com>

On 13-08-30 11:23 AM, Robert Lopez wrote:
> On Thu, Aug 29, 2013 at 2:35 PM, J Gao <jgao at veecall.com> wrote:
>> Hi,
>>
>> We have a trusted developer send us binary files from time to time.
>> MailScanner always blocked these file so as administrator I have to
>> retrieve those files manually.
>>
>> How can I allow the email with any type of attachment from this
>> developer to deliver to the recipient?
>>
>> Thanks.
>>
>> Gao
>> --
>>        __
>>      _|==|_
>>       ('')__/
>>   >--(`^^')
>>     (`^'^'`)
>>     `======'
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>
>
> As Alex stated.
>
> Another way is put them in a file.
>
> For example...
>
> Make certain you have a "rules" directory in your MailScanner
> directory, probably already have it.
>
> In MailScanner.conf:Scan Messages = %rules-dir%/scan.messages.rules
>
>
> You may already have the file in your rules dir (version depending).
> If not create it and put something like this into it to help you get
> started:
>
> # The purpose of this file is to establish a rule set
> # to be used to tell MailScanner if an email should be
> # scanned or not.
> #
> # The question is:
> #  "Should an email having this pattern be scanned?"
> #
> # An answer of yes causes it to be scanned.
> # An answer of no  causes it to by pass all scanning.
> #
> # The line format is "ruleset pattern       answer"
> #
> # A sample ruleset would look like this:
> #   From:     ignore.domain.com         no
> #   From:     trusted.email.address     no
> #   FromOrTo: default                       yes
>
>
> From: yourtrustedemailaddress.their.domain            no
>

I enabled "Scan Messages = %rules-dir%/scan.messages.rules", then 
created the rule file with a test account. After retsart MailScanner,  I 
send an email from that test account with an executable file. The 
MailScanner blocked it again:


This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "bzip2"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Tue Sep  3 13:17:34 2013 the virus scanner said:
    MailScanner: No programs allowed (bzip2)

Note to Help Desk: Look on the veecall (mail.veecall.com) MailScanner in 
/var/spool/MailScanner/quarantine/20130903 (message 319DC80E4.A4282).



-- 
      __
    _|==|_
     ('')__/
 >--(`^^')
   (`^'^'`)
   `======'

From jgao at veecall.com  Tue Sep  3 22:01:47 2013
From: jgao at veecall.com (J Gao)
Date: Tue, 03 Sep 2013 14:01:47 -0700
Subject: Allow a trusted sender to send any type of file
In-Reply-To: <CAAJHbArHV74ZiN3tDQty6Gie1TXAZzUMDMy2WCjXyh9nM4sAYw@mail.gmail.com>
References: <521FB0A0.8060301@veecall.com>
	<CAAJHbArHV74ZiN3tDQty6Gie1TXAZzUMDMy2WCjXyh9nM4sAYw@mail.gmail.com>
Message-ID: <52264E3B.5040208@veecall.com>

On 13-08-30 11:23 AM, Robert Lopez wrote:
> On Thu, Aug 29, 2013 at 2:35 PM, J Gao <jgao at veecall.com> wrote:
>> Hi,
>>
>> We have a trusted developer send us binary files from time to time.
>> MailScanner always blocked these file so as administrator I have to
>> retrieve those files manually.
>>
>> How can I allow the email with any type of attachment from this
>> developer to deliver to the recipient?
>>
>> Thanks.
>>
>> Gao
>> --
>>        __
>>      _|==|_
>>       ('')__/
>>   >--(`^^')
>>     (`^'^'`)
>>     `======'
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>
>
> As Alex stated.
>
> Another way is put them in a file.
>
> For example...
>
> Make certain you have a "rules" directory in your MailScanner
> directory, probably already have it.
>
> In MailScanner.conf:Scan Messages = %rules-dir%/scan.messages.rules
>
>
> You may already have the file in your rules dir (version depending).
> If not create it and put something like this into it to help you get
> started:
>
> # The purpose of this file is to establish a rule set
> # to be used to tell MailScanner if an email should be
> # scanned or not.
> #
> # The question is:
> #  "Should an email having this pattern be scanned?"
> #
> # An answer of yes causes it to be scanned.
> # An answer of no  causes it to by pass all scanning.
> #
> # The line format is "ruleset pattern       answer"
> #
> # A sample ruleset would look like this:
> #   From:     ignore.domain.com         no
> #   From:     trusted.email.address     no
> #   FromOrTo: default                       yes
>
>
> From: yourtrustedemailaddress.their.domain            no
>

Thanks. It works great!

Gao


-- 
      __
    _|==|_
     ('')__/
 >--(`^^')
   (`^'^'`)
   `======'

From mikew at crucis.net  Wed Sep  4 21:20:42 2013
From: mikew at crucis.net (Mike Watson)
Date: Wed, 04 Sep 2013 15:20:42 -0500
Subject: Question: What does this mean and how do I clear it.
Message-ID: <5227961A.1040109@crucis.net>

An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130904/113bdd8a/attachment.html 

From mark at msapiro.net  Thu Sep  5 21:09:29 2013
From: mark at msapiro.net (Mark Sapiro)
Date: Thu, 05 Sep 2013 13:09:29 -0700
Subject: Question: What does this mean and how do I clear it.
In-Reply-To: <5227961A.1040109@crucis.net>
References: <5227961A.1040109@crucis.net>
Message-ID: <5228E4F9.8040709@msapiro.net>

On 09/04/2013 01:20 PM, Mike Watson wrote:
> Starting yesterdayand midnight I started receiving status alerts from
> MailScanner about two messages.
> 
> ===============
> Subjetct: Problem Messages
> 
> Archive:
> 
> Number of messages: 2
> Tries	Message	Last Tried
> =====	=======	==========
> 6	r83N1kes031120	Tue Sep  3 18:22:54 2013
> 6	r835E51T006326	Tue Sep  3 00:36:51 2013
> 
> What does this mean and how do I clear it.


The message comes from /usr/sbin/processing_messages_alert which is run
hourly by cron. It is reporting the contents of the Processing.db
sqlite3 database by running the command "/usr/sbin/MailScanner
--processing". The actual file is defined in MailScanner.conf by the
"Processing Attempts Database" setting (default =
/var/spool/MailScanner/incoming/Processing.db).

The messages were probably abandoned after 6 failed attempts (Maximum
Processing Attempts = 6). See the MailScanner log messages (probably in
the system mail log) for more possible info.

If these are the only messages in the processing database, I think you
can safely delete it, and it will be recreated.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From jerry.benton at mailborder.com  Thu Sep 12 21:20:22 2013
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Thu, 12 Sep 2013 22:20:22 +0200
Subject: scan.messages.rules
Message-ID: <CAED3VzDSKsGR1XBgxDqSi-vYh5DFAApRBDLS0bWWuPG4dZd7dw@mail.gmail.com>

Greetings,

I am researching a rule and was wondering if anyone knows if IP addresses
will work in scan.messages.rules with a compound rule like this:

From: 192.168.100.100 AND To: domain.com no


Where the IP is the sending server. Using tabs to separate the rules of
course.



--
Jerry Benton
Mailborder Systems
www.mailborder.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130912/cc1d4c59/attachment.html 

From alex at vidadigital.com.pa  Fri Sep 13 15:43:56 2013
From: alex at vidadigital.com.pa (Alex Neuman van der Hans)
Date: Fri, 13 Sep 2013 09:43:56 -0500
Subject: scan.messages.rules
In-Reply-To: <CAED3VzDSKsGR1XBgxDqSi-vYh5DFAApRBDLS0bWWuPG4dZd7dw@mail.gmail.com>
References: <CAED3VzDSKsGR1XBgxDqSi-vYh5DFAApRBDLS0bWWuPG4dZd7dw@mail.gmail.com>
Message-ID: <8E51021E-CA77-4FD3-8E95-079789C9216B@vidadigital.com.pa>

the "and" is usually done in lower case, but I don't see why it wouldn't work.

--

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital



On Sep 12, 2013, at 3:20 PM, Jerry Benton <jerry.benton at mailborder.com> wrote:

> Greetings,
> 
> I am researching a rule and was wondering if anyone knows if IP addresses will work in scan.messages.rules with a compound rule like this:
> 
> From:	192.168.100.100	AND	To:	domain.com	no
> 
> 
> Where the IP is the sending server. Using tabs to separate the rules of course. 
> 
>  
> 
> --
> Jerry Benton
> Mailborder Systems
> www.mailborder.com
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 


From Denis.Beauchemin at usherbrooke.ca  Fri Sep 13 16:00:36 2013
From: Denis.Beauchemin at usherbrooke.ca (Denis Beauchemin)
Date: Fri, 13 Sep 2013 15:00:36 +0000
Subject: scan.messages.rules
In-Reply-To: <8E51021E-CA77-4FD3-8E95-079789C9216B@vidadigital.com.pa>
References: <CAED3VzDSKsGR1XBgxDqSi-vYh5DFAApRBDLS0bWWuPG4dZd7dw@mail.gmail.com>
	<8E51021E-CA77-4FD3-8E95-079789C9216B@vidadigital.com.pa>
Message-ID: <E4CD9F6A1A6FF745BCABA56BBD1008D582A8A41F@XMBX03.sti.usherbrooke.ca>

I'm pretty sure case is irrelevant as are tabs in rules files. Tabs are only required in filename.rules.conf.

Denis


-----Message d'origine-----
De?: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] De la part de Alex Neuman van der Hans
Envoy??: 13 septembre 2013 10:53
??: MailScanner discussion
Objet?: Re: scan.messages.rules

the "and" is usually done in lower case, but I don't see why it wouldn't work.

--

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital



On Sep 12, 2013, at 3:20 PM, Jerry Benton <jerry.benton at mailborder.com> wrote:

> Greetings,
> 
> I am researching a rule and was wondering if anyone knows if IP addresses will work in scan.messages.rules with a compound rule like this:
> 
> From:	192.168.100.100	AND	To:	domain.com	no
> 
> 
> Where the IP is the sending server. Using tabs to separate the rules of course. 
> 
>  
> 
> --
> Jerry Benton
> Mailborder Systems
> www.mailborder.com
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

From glenn.steen at gmail.com  Tue Sep 17 15:10:33 2013
From: glenn.steen at gmail.com (Glenn Steen)
Date: Tue, 17 Sep 2013 16:10:33 +0200
Subject: CMAE
In-Reply-To: <CAEQ0g8G1Bvi0aJ10_kZmD=M8FjwYvh02e+iz7dmnB=WK0eDmEg@mail.gmail.com>
References: <CAEQ0g8G1Bvi0aJ10_kZmD=M8FjwYvh02e+iz7dmnB=WK0eDmEg@mail.gmail.com>
Message-ID: <CAAug_B9JxrbtifcTOGs5Edyg=-DbyxA8nXMxgCq-1SoS=b7p7g@mail.gmail.com>

Hello Vlad,

Usually this means that SA behaves differently for the user MailScanner is
running as, as compared to the user you did the linting as.... Do you use
Postfix? If so, try doing:
su - postfix -s /bin/bash
spamassassing --lint -D ... whatever....
...
MailScanner --debug --debug-sa
...
My guess is that this will reveal a permissions-related issue ... Might be
something else too, but that's the most likely one.

Cheers
-- 
-- Glenn


On 25 August 2013 02:33, Vlad Mazek <rd at vladville.com> wrote:

> Has anybody ran into this issue?
>
> We're deploying CMAE with MailScanner
> Running it through spamassassin --lint -D and MailScanner -debug-sa the
> test shows up and scores as expected but during actual MailScanner
> processing it doesnt appear to be scoring the same message(s) that it
> scored during the test submissions via lin/debug etc.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130917/63f68b4a/attachment.html 

From glenn.steen at gmail.com  Tue Sep 17 15:14:47 2013
From: glenn.steen at gmail.com (Glenn Steen)
Date: Tue, 17 Sep 2013 16:14:47 +0200
Subject: Allow a trusted sender to send any type of file
In-Reply-To: <CAAJHbArHV74ZiN3tDQty6Gie1TXAZzUMDMy2WCjXyh9nM4sAYw@mail.gmail.com>
References: <521FB0A0.8060301@veecall.com>
	<CAAJHbArHV74ZiN3tDQty6Gie1TXAZzUMDMy2WCjXyh9nM4sAYw@mail.gmail.com>
Message-ID: <CAAug_B_bS_38PqO72fP7RPrsp_SySvEx54Hq68rx7N8JW1TpmQ@mail.gmail.com>

It's an OK approach... apart from the security issue of using something
easily spoofable to bypass scanning altogether. If/when I need stuff like
this, I always use their IP adress (much harder to spoof;-).

Cheers
-- 
-- Glenn


On 30 August 2013 20:23, Robert Lopez <rlopezcnm at gmail.com> wrote:

> On Thu, Aug 29, 2013 at 2:35 PM, J Gao <jgao at veecall.com> wrote:
> > Hi,
> >
> > We have a trusted developer send us binary files from time to time.
> > MailScanner always blocked these file so as administrator I have to
> > retrieve those files manually.
> >
> > How can I allow the email with any type of attachment from this
> > developer to deliver to the recipient?
> >
> > Thanks.
> >
> > Gao
> > --
> >       __
> >     _|==|_
> >      ('')__/
> >  >--(`^^')
> >    (`^'^'`)
> >    `======'
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
>
> As Alex stated.
>
> Another way is put them in a file.
>
> For example...
>
> Make certain you have a "rules" directory in your MailScanner
> directory, probably already have it.
>
> In MailScanner.conf:Scan Messages = %rules-dir%/scan.messages.rules
>
>
> You may already have the file in your rules dir (version depending).
> If not create it and put something like this into it to help you get
> started:
>
> # The purpose of this file is to establish a rule set
> # to be used to tell MailScanner if an email should be
> # scanned or not.
> #
> # The question is:
> #  "Should an email having this pattern be scanned?"
> #
> # An answer of yes causes it to be scanned.
> # An answer of no  causes it to by pass all scanning.
> #
> # The line format is "ruleset pattern       answer"
> #
> # A sample ruleset would look like this:
> #   From:     ignore.domain.com         no
> #   From:     trusted.email.address     no
> #   FromOrTo: default                       yes
>
>
> From: yourtrustedemailaddress.their.domain            no
>
> --
> Robert Lopez
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130917/30e856de/attachment.html 

From glenn.steen at gmail.com  Tue Sep 17 15:21:07 2013
From: glenn.steen at gmail.com (Glenn Steen)
Date: Tue, 17 Sep 2013 16:21:07 +0200
Subject: Recall: Problem with MailScanner after upgraded RedHat version
In-Reply-To: <CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
References: <1D7806BCE80C7F47819164A83D2EB9EC0756875BE8@it1-bsms01>
	<CANyE0PrH+PT6ApG418QYn4x-y9Vg0Q1XOP4r9Tu97EirdBTamg@mail.gmail.com>
Message-ID: <CAAug_B8N-_D7bxCe6FWc0akUwDxfv8RQ-pXexoQb19CQ1KmTvQ@mail.gmail.com>

Well, actually ... GroupWise could do this as well (and usually more
effectively than Exchange:-). Now, GW doesn't qualify as a normal
mailserver, and isn't ... that lively... these days, so...:-)
Not that any recall would work once the email reached a maillist server.:-D
Anyway, a nice little chuckle.


Cheers
-- 
-- Glenn


On 2 September 2013 17:49, Alex Neuman <alex at vidadigital.com.pa> wrote:

> Recalling messages doesn't work with normal mailservers, only
> Microsoft Exchange servers.
>
> On Mon, Sep 2, 2013 at 5:38 AM, Thanakom Chinprasertsuk
> <thanakoc at itoneco.com> wrote:
> > Thanakom Chinprasertsuk would like to recall the message, "Problem with
> MailScanner after upgraded RedHat version".
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
>
>
> --
>
> Alex Neuman van der Hans
> Reliant Technologies / Vida Digital
> http://vidadigital.com.pa/
>
> +507-6781-9505
> +507-832-6725
> +1-440-253-9789 (USA)
>
> Follow @AlexNeuman on Twitter
> http://facebook.com/vidadigital
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130917/9cc91cbf/attachment.html 

From Amelein at dantumadiel.eu  Thu Sep 26 16:21:32 2013
From: Amelein at dantumadiel.eu (Arjan Melein)
Date: Thu, 26 Sep 2013 17:21:32 +0200
Subject: Left over temp and tnef files
Message-ID: <52446D1C0200008E000259B9@GroupWise.Dantumadiel.eu>

I just found some leftover garbage from MS which I'd like to not be there :-)
First I am getting tnefXXXX folders under /var/spool/postfix/hold that are not getting cleaned up.
Second there are 771806 files under /var/spool/MailScanner/incoming/SpamAssassin-Temp/ (rm is having a hard time cleaning these up, 780k files making up 60MB)

I'm running MS 4.84.5 on: FC 18 with Perl version 5.016003 (5.16.3)

Does anyone have an explanation for this and possibly a fix ?
I believe the tnef files are form MS's tnef decoder and the SA-Temp is being used at least by clamav.

And on a less important matter, can I move that SA-Temp folder to a ramdisk somehow ? MS itself is currently using one too.

-
Arjan

(and the rest of the modules)

This is Fedora release 18 (Spherical Cow)
This is Perl version 5.016003 (5.16.3)

This is MailScanner version 4.84.5
Module versions are:
1.01    AnyDBM_File
1.30    Archive::Zip
0.23    bignum
1.26    Carp
2.06    Compress::Zlib
1.119   Convert::BinHex
0.17    Convert::TNEF
2.135_06        Data::Dumper
2.30    Date::Parse
1.04    DirHandle
1.11    Fcntl
2.84    File::Basename
2.23    File::Copy
2.02    FileHandle
2.08_01 File::Path
0.22    File::Temp
0.92    Filesys::Df
3.69    HTML::Entities
3.69    HTML::Parser
3.69    HTML::TokeParser
1.23    IO
1.14    IO::File
1.13    IO::Pipe
2.11    Mail::Header
1.89    Math::BigInt
0.22    Math::BigRat
3.07    MIME::Base64
5.503   MIME::Decoder
5.503   MIME::Decoder::UU
5.503   MIME::Head
5.503   MIME::Parser
3.07    MIME::QuotedPrint
5.503   MIME::Tools
0.15    Net::CIDR
1.25    Net::IP
0.19    OLE::Storage_Lite
1.04    Pod::Escapes
3.20    Pod::Simple
1.30    POSIX
1.25    Scalar::Util
2.002   Socket
2.34    Storable
1.4     Sys::Hostname::Long
0.32    Sys::Syslog
1.45    Test::Pod
0.98    Test::Simple
1.9725  Time::HiRes
1.02    Time::localtime

Optional module versions are:
1.88    Archive::Tar
0.23    bignum
2.05    Business::ISBN
20120719.001    Business::ISBN::Data
1.21    Data::Dump
1.826   DB_File
1.37    DBD::SQLite
1.623   DBI
1.17    Digest
1.03    Digest::HMAC
2.51    Digest::MD5
2.13    Digest::SHA1
1.01    Encode::Detect
0.17018 Error
0.280205        ExtUtils::CBuilder
3.16    ExtUtils::ParseXS
2.38    Getopt::Long
0.51    Inline
missing IO::String
1.10    IO::Zlib
2.27    IP::Country
0.29    Mail::ClamAV
3.003002        Mail::SpamAssassin
v2.008  Mail::SPF
1.999001        Mail::SPF::Query
0.4003  Module::Build
0.21    Net::CIDR::Lite
0.68    Net::DNS
v0.003  Net::DNS::Resolver::Programmable
0.53    Net::LDAP
 4.066  NetAddr::IP
1.967009        Parse::RecDescent
missing SAVI
3.23    Test::Harness
1.23    Test::Manifest
2.02    Text::Balanced
1.60    URI
0.99    version
0.84    YAML


From dlee.aus at gmail.com  Thu Sep 26 23:40:53 2013
From: dlee.aus at gmail.com (David Lee)
Date: Fri, 27 Sep 2013 08:10:53 +0930
Subject: Left over temp and tnef files
In-Reply-To: <52446D1C0200008E000259B9@GroupWise.Dantumadiel.eu>
References: <52446D1C0200008E000259B9@GroupWise.Dantumadiel.eu>
Message-ID: <CAOy9REmEaVviRidRkJdQZSQExVOBQPGy1SzitnFMFpFX4VD30A@mail.gmail.com>

> I just found some leftover garbage from MS which I'd like to not be there
:-)
> First I am getting tnefXXXX folders under /var/spool/postfix/hold that
are not getting cleaned up.
> Second there are 771806 files under
/var/spool/MailScanner/incoming/SpamAssassin-Temp/
> (rm is having a hard time cleaning these up, 780k files making up 60MB)
>
> I'm running MS 4.84.5 on: FC 18 with Perl version 5.016003 (5.16.3)
>
> Does anyone have an explanation for this and possibly a fix ?
> I believe the tnef files are form MS's tnef decoder and the SA-Temp is
being used at least by clamav.

There is currently and open issue for a problem very similar to what you
are seeing with regards to tnefXXXXX folders:
https://github.com/MailScanner/MailScanner/issues/7

--
David


On Fri, Sep 27, 2013 at 12:51 AM, Arjan Melein <Amelein at dantumadiel.eu>wrote:

> I just found some leftover garbage from MS which I'd like to not be there
> :-)
> First I am getting tnefXXXX folders under /var/spool/postfix/hold that are
> not getting cleaned up.
> Second there are 771806 files under
> /var/spool/MailScanner/incoming/SpamAssassin-Temp/ (rm is having a hard
> time cleaning these up, 780k files making up 60MB)
>
> I'm running MS 4.84.5 on: FC 18 with Perl version 5.016003 (5.16.3)
>
> Does anyone have an explanation for this and possibly a fix ?
> I believe the tnef files are form MS's tnef decoder and the SA-Temp is
> being used at least by clamav.
>
> And on a less important matter, can I move that SA-Temp folder to a
> ramdisk somehow ? MS itself is currently using one too.
>
> -
> Arjan
>
> (and the rest of the modules)
>
> This is Fedora release 18 (Spherical Cow)
> This is Perl version 5.016003 (5.16.3)
>
> This is MailScanner version 4.84.5
> Module versions are:
> 1.01    AnyDBM_File
> 1.30    Archive::Zip
> 0.23    bignum
> 1.26    Carp
> 2.06    Compress::Zlib
> 1.119   Convert::BinHex
> 0.17    Convert::TNEF
> 2.135_06        Data::Dumper
> 2.30    Date::Parse
> 1.04    DirHandle
> 1.11    Fcntl
> 2.84    File::Basename
> 2.23    File::Copy
> 2.02    FileHandle
> 2.08_01 File::Path
> 0.22    File::Temp
> 0.92    Filesys::Df
> 3.69    HTML::Entities
> 3.69    HTML::Parser
> 3.69    HTML::TokeParser
> 1.23    IO
> 1.14    IO::File
> 1.13    IO::Pipe
> 2.11    Mail::Header
> 1.89    Math::BigInt
> 0.22    Math::BigRat
> 3.07    MIME::Base64
> 5.503   MIME::Decoder
> 5.503   MIME::Decoder::UU
> 5.503   MIME::Head
> 5.503   MIME::Parser
> 3.07    MIME::QuotedPrint
> 5.503   MIME::Tools
> 0.15    Net::CIDR
> 1.25    Net::IP
> 0.19    OLE::Storage_Lite
> 1.04    Pod::Escapes
> 3.20    Pod::Simple
> 1.30    POSIX
> 1.25    Scalar::Util
> 2.002   Socket
> 2.34    Storable
> 1.4     Sys::Hostname::Long
> 0.32    Sys::Syslog
> 1.45    Test::Pod
> 0.98    Test::Simple
> 1.9725  Time::HiRes
> 1.02    Time::localtime
>
> Optional module versions are:
> 1.88    Archive::Tar
> 0.23    bignum
> 2.05    Business::ISBN
> 20120719.001    Business::ISBN::Data
> 1.21    Data::Dump
> 1.826   DB_File
> 1.37    DBD::SQLite
> 1.623   DBI
> 1.17    Digest
> 1.03    Digest::HMAC
> 2.51    Digest::MD5
> 2.13    Digest::SHA1
> 1.01    Encode::Detect
> 0.17018 Error
> 0.280205        ExtUtils::CBuilder
> 3.16    ExtUtils::ParseXS
> 2.38    Getopt::Long
> 0.51    Inline
> missing IO::String
> 1.10    IO::Zlib
> 2.27    IP::Country
> 0.29    Mail::ClamAV
> 3.003002        Mail::SpamAssassin
> v2.008  Mail::SPF
> 1.999001        Mail::SPF::Query
> 0.4003  Module::Build
> 0.21    Net::CIDR::Lite
> 0.68    Net::DNS
> v0.003  Net::DNS::Resolver::Programmable
> 0.53    Net::LDAP
>  4.066  NetAddr::IP
> 1.967009        Parse::RecDescent
> missing SAVI
> 3.23    Test::Harness
> 1.23    Test::Manifest
> 2.02    Text::Balanced
> 1.60    URI
> 0.99    version
> 0.84    YAML
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130927/5971b1e1/attachment.html 

From mark at msapiro.net  Fri Sep 27 18:10:10 2013
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 27 Sep 2013 10:10:10 -0700
Subject: Left over temp and tnef files
In-Reply-To: <52446D1C0200008E000259B9@GroupWise.Dantumadiel.eu>
References: <52446D1C0200008E000259B9@GroupWise.Dantumadiel.eu>
Message-ID: <5245BBF2.5080502@msapiro.net>

On 09/26/2013 08:21 AM, Arjan Melein wrote:
> Second there are 771806 files under /var/spool/MailScanner/incoming/SpamAssassin-Temp/ (rm is having a hard time cleaning these up, 780k files making up 60MB)


See <https://github.com/MailScanner/MailScanner/pull/4>

-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From Amelein at dantumadiel.eu  Mon Sep 30 11:10:58 2013
From: Amelein at dantumadiel.eu (Arjan Melein)
Date: Mon, 30 Sep 2013 12:10:58 +0200
Subject: Betr.: Re: Left over temp and tnef files
In-Reply-To: <5245BBF2.5080502@msapiro.net>
References: <52446D1C0200008E000259B9@GroupWise.Dantumadiel.eu>
	<5245BBF2.5080502@msapiro.net>
Message-ID: <52496A520200008E00025A5B@GroupWise.Dantumadiel.eu>

> 
> See <https://github.com/MailScanner/MailScanner/pull/4>
> 
> -- 
> Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan

-------

> There is currently and open issue for a problem very similar to what you
> are seeing with regards to tnefXXXXX folders:
> https://github.com/MailScanner/MailScanner/issues/7 
> 
> --
> David


This is exactly what I'm getting for both, I compared the files on git to the ones I'm using and they are identical except for the clamav-wrapper.
Replaced this file and waiting to see if this at least fixes the tmp files.

-
Arjan


From msdiscus at tradelink-admin.com  Mon Sep 30 16:08:33 2013
From: msdiscus at tradelink-admin.com (Norman)
Date: Mon, 30 Sep 2013 16:08:33 +0100
Subject: How to prevent multiple scans on same email?
Message-ID: <524993F1.2080309@tradelink-admin.com>

Hi List,

I have this conundrum which I am hoping the experts on here will help
me resolve. :)

How do I tell mailscanner not to rescan an email that it had already
scanned?

I have a small server set up with mailscanner, spamassassin, etc.
whose sole purpose is to process the inbound and outbound emails for a
separate mail server. The mail flows well between the mail server and
the mailscanner server. The issue I have is with 'forwarders', which
are, as all of you will know, essentially an email address that is set
up to forward incoming emails to another email address.

Briefly, an incoming email for a 'forwarder' first hits the
mailscanner server (being the primary mx), it gets processed for spam
and viruses and then handed to the mail server. The mail server sees
that the local address is not an email account but a 'forwarder', so
it sends the email back to the mailscanner server for processing and
distribution. That is fine. However, MailScanner treats the email on
the second pass as completely 'new' and scans it for spam and viruses
again, which is unneeded and causes unwanted resource usage.

Is it possible to tell mailscanner not to scan twiceby having it
evaluate the headers so it could see that itis dealing with an email
which it had already scanned? I couldn't find any optionsfor this in
the .conf file. The MTA on both servers is Exim, in case that may be
relevant.

Regards,

Norman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130930/dbec13ef/attachment.html 

From richard at fastnet.co.uk  Mon Sep 30 16:43:22 2013
From: richard at fastnet.co.uk (Richard Mealing)
Date: Mon, 30 Sep 2013 15:43:22 +0000
Subject: How to prevent multiple scans on same email?
In-Reply-To: <524993F1.2080309@tradelink-admin.com>
References: <524993F1.2080309@tradelink-admin.com>
Message-ID: <6EE47AF64C339A4F8F7F50507241B3795E9A5C5A@BTN-EXCHANGE-V1.fastnet.local>

Hi Norman,


Once the email has been forwarded it should have a different address or domain name. I imagine that hits your MX again. If you just ensure that you don't scan for that (forwarded) domain name, then it won't.
I imagine you scan for everything coming your way, so you'll need to make a slight change in mailscanner.conf -

Spam Checks = %rules-dir%/somerulefile.rules

To:     default         yes
To:          somedomainname          no


You could do the same for the virus scanning also.

Virus Scanning = %rules-dir%/virus.scanning.rules
FromOrTo:       default                 yes
FromOrTo:          somedomainname          no



Thanks,
Rich

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Norman
Sent: 30 September 2013 16:09
To: mailscanner at lists.mailscanner.info
Subject: How to prevent multiple scans on same email?

Hi List,

I have this conundrum which I am hoping the experts on here will help me resolve. :)

How do I tell mailscanner not to rescan an email that it had already scanned?

I have a small server set up with mailscanner, spamassassin, etc. whose sole purpose is to process the inbound and outbound emails for a separate mail server. The mail flows well between the mail server and the mailscanner server. The issue I have is with 'forwarders', which are, as all of you will know, essentially an email address that is set up to forward incoming emails to another email address.

Briefly, an incoming email for a 'forwarder' first hits the mailscanner server (being the primary mx), it gets processed for spam and viruses and then handed to the mail server. The mail server sees that the local address is not an email account but a 'forwarder', so it sends the email back to the mailscanner server for processing and distribution. That is fine. However, MailScanner treats the email on the second pass as completely 'new' and scans it for spam and viruses again, which is unneeded and causes unwanted resource usage.

Is it possible to tell mailscanner not to scan twice by having it evaluate the headers so it could see that it is dealing with an email which it had already scanned? I couldn't find any options for this in the .conf file. The MTA on both servers is Exim, in case that may be relevant.

Regards,

Norman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130930/8d7d3648/attachment.html 

From jerry.benton at mailborder.com  Mon Sep 30 17:00:31 2013
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 30 Sep 2013 18:00:31 +0200
Subject: How to prevent multiple scans on same email?
In-Reply-To: <524993F1.2080309@tradelink-admin.com>
References: <524993F1.2080309@tradelink-admin.com>
Message-ID: <CAED3VzCPap_zd13M4yW0+C8BcL6X8-rn8DnjOED-_--O19VF7A@mail.gmail.com>

Watermarking


On Mon, Sep 30, 2013 at 5:08 PM, Norman <msdiscus at tradelink-admin.com>wrote:

>  Hi List,
>
> I have this conundrum which I am hoping the experts on here will help me
> resolve. :)
>
> How do I tell mailscanner not to rescan an email that it had already
> scanned?
>
> I have a small server set up with mailscanner, spamassassin, etc. whose
> sole purpose is to process the inbound and outbound emails for a separate
> mail server. The mail flows well between the mail server and the
> mailscanner server. The issue I have is with 'forwarders', which are, as
> all of you will know, essentially an email address that is set up to
> forward incoming emails to another email address.
>
> Briefly, an incoming email for a 'forwarder' first hits the mailscanner
> server (being the primary mx), it gets processed for spam and viruses and
> then handed to the mail server. The mail server sees that the local address
> is not an email account but a 'forwarder', so it sends the email back to
> the mailscanner server for processing and distribution. That is fine.
> However, MailScanner treats the email on the second pass as completely
> 'new' and scans it for spam and viruses again, which is unneeded and
> causes unwanted resource usage.
>
> Is it possible to tell mailscanner not to scan twice by having it
> evaluate the headers so it could see that it is dealing with an email
> which it had already scanned? I couldn't find any options for this in the
> .conf file. The MTA on both servers is Exim, in case that may be relevant.
>
> Regards,
>
> Norman
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


-- 

--
Jerry Benton
Mailborder Systems
www.mailborder.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130930/28dd601f/attachment.html 

From rvdmerwe at mhg.co.za  Mon Sep 30 22:02:27 2013
From: rvdmerwe at mhg.co.za (Rabie Van der Merwe)
Date: Mon, 30 Sep 2013 23:02:27 +0200
Subject: MailScanner versions
Message-ID: <8C148A1461A6D7468D90F49CCD5BCA6204C0D3D8@cptwexc04.za.mhgad.com>

Hi,

 

Does anyone know why the 'current' version on the MailScanner.info site
is listed as 4.79 Feb 2010, yet I am running 4.84 on my server?

 

Regards

Rabie



  
    
      ********************************************************************** 
--------- 
NOTICE 
---------

This message (including attachments) contains privileged and confidential information intended only for the person or entity to which it is addressed.

Any review, retransmission, dissemination, copy or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient, is prohibited.

If you received this message in error, please notify the sender immediately by e-mail, facsimile or telephone and thereafter delete the material from any computer.

Metropolitan Health, its subsidiaries or associates, does not accept liability for any personal views expressed in this message.

Metropolitan Health
PO Box 4313 Cape Town 8000 Tel: 021 480 4511 Fax: 021 480 4535 www.mhg.co.za

**********************************************************************
    
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130930/59ddd10c/attachment.html