From ja at conviator.com Tue Sep 2 13:19:46 2014 From: ja at conviator.com (ja at conviator.com) Date: Tue, 2 Sep 2014 14:19:46 +0200 Subject: ot a bit: sendmail and TO mx not found Message-ID: hi its a bit OT but I hope its OK anyway. We are also using Mailscanner as outbound scanner and see a problem that I cannot figure out - probably some setting im missing. sometimes "we" send emails to a domain where the primary MX record does not resolve. I would have expected that sendmail would just try the next but instead it resolves to mxrecord.name.OURDOMAIN.COM (I think) - it seams it appends our domain and then tries this server and this server says "no thanks" so the delivery fails. I tried to lookup the MX myself using the same nameserver as the mailscanner server is using - this fails so its not the DNS server that appends something to make it resolveable or gives out a standard IP. I also checked the resolve file to check that there is not search setting that would make it search our domain for a valid IP/lookup. how can I stop this behavior and make it try the next MX in line? best regards Jan -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/5c53beb5/attachment.html From peter at farrows.org Tue Sep 2 13:39:13 2014 From: peter at farrows.org (Peter Farrow) Date: Tue, 02 Sep 2014 13:39:13 +0100 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: References: Message-ID: <5405BA71.2090806@farrows.org> If the primary MX does not resolve , sendmail will not try a lesser MX record, because the best option is unresolvable, so it will return the message after checking and appending any search parameters given in /etc/resolv.conf. This behaviour is by design, and you are trying to fix a problem which is inherently not yours to solve. If the primary MX does not resolve : The domain is broken - so why try and work around that? On 02/09/2014 13:19, ja at conviator.com wrote: > hi > its a bit OT but I hope its OK anyway. We are also using Mailscanner > as outbound scanner and see a problem that I cannot figure out - > probably some setting im missing. > sometimes "we" send emails to a domain where the primary MX record > does not resolve. I would have expected that sendmail would just try > the next but instead it resolves to mxrecord.name.OURDOMAIN.COM (I > think) - it seams it appends our domain and then tries this server and > this server says "no thanks" so the delivery fails. > I tried to lookup the MX myself using the same nameserver as the > mailscanner server is using - this fails so its not the DNS server > that appends something to make it resolveable or gives out a standard IP. > I also checked the resolve file to check that there is not search > setting that would make it search our domain for a valid IP/lookup. > how can I stop this behavior and make it try the next MX in line? > best regards > Jan > > -- > This message has been scanned for viruses and > dangerous content by the *Togethia MailScanner* > , and is > believed to be clean. > Scanner:local > > > > -- > horizontal ruler > > Peter Farrow > avatar > ______________________ > Home: 01249 654183 > Fax: 01249 461 548 > Mobile: 07799605617 > Skype: peter_farrow > Web: www.peterfarrow.com > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/b465983a/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: orange_spacer.gif Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/b465983a/attachment.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: avatar.gif Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/b465983a/attachment-0001.gif From phil.randal at hoopleltd.co.uk Tue Sep 2 15:05:59 2014 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Tue, 2 Sep 2014 14:05:59 +0000 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: References: Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B857EBD3CEA@HC-EXMBX04.herefordshire.gov.uk> Not sure what?s going on there, but this should help: http://docstore.mik.ua/orelly/networking/sendmail/ch21_02.htm Cheers, Phil From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of ja at conviator.com Sent: 02 September 2014 13:20 To: mailscanner at lists.mailscanner.info Subject: ot a bit: sendmail and TO mx not found hi its a bit OT but I hope its OK anyway. We are also using Mailscanner as outbound scanner and see a problem that I cannot figure out - probably some setting im missing. sometimes "we" send emails to a domain where the primary MX record does not resolve. I would have expected that sendmail would just try the next but instead it resolves to mxrecord.name.OURDOMAIN.COM (I think) - it seams it appends our domain and then tries this server and this server says "no thanks" so the delivery fails. I tried to lookup the MX myself using the same nameserver as the mailscanner server is using - this fails so its not the DNS server that appends something to make it resolveable or gives out a standard IP. I also checked the resolve file to check that there is not search setting that would make it search our domain for a valid IP/lookup. how can I stop this behavior and make it try the next MX in line? best regards Jan Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: Plough Lane, Hereford, HR4 0LE "Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it." -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/403dba3d/attachment.html From mailscanner at joolee.nl Tue Sep 2 15:36:48 2014 From: mailscanner at joolee.nl (Joolee) Date: Tue, 2 Sep 2014 16:36:48 +0200 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: <5405BA71.2090806@farrows.org> References: <5405BA71.2090806@farrows.org> Message-ID: rfc5321 section 5 indicates that Sendmail *should* try the server(s) to whom the alternative MX records point. It shouldn't try all multihomed A records pointed to by a single MX record (although, that's not exactly what the RFC says) but that's not the case here. So the question still is, why doesn't Sendmail try the alternative MX records? On 2 September 2014 14:39, Peter Farrow wrote: > If the primary MX does not resolve , sendmail will not try a lesser MX > record, because the best option is unresolvable, so it will return the > message after checking and appending any search parameters given in > /etc/resolv.conf. > > This behaviour is by design, and you are trying to fix a problem which is > inherently not yours to solve. > > If the primary MX does not resolve : The domain is broken - so why try and > work around that? > > > > > > > On 02/09/2014 13:19, ja at conviator.com wrote: > > hi > > its a bit OT but I hope its OK anyway. We are also using Mailscanner as > outbound scanner and see a problem that I cannot figure out - probably some > setting im missing. > > sometimes "we" send emails to a domain where the primary MX record does > not resolve. I would have expected that sendmail would just try the next > but instead it resolves to mxrecord.name.OURDOMAIN.COM (I think) - it > seams it appends our domain and then tries this server and this server says > "no thanks" so the delivery fails. > > I tried to lookup the MX myself using the same nameserver as the > mailscanner server is using - this fails so its not the DNS server that > appends something to make it resolveable or gives out a standard IP. > > I also checked the resolve file to check that there is not search setting > that would make it search our domain for a valid IP/lookup. > > how can I stop this behavior and make it try the next MX in line? > > best regards > Jan > > > -- > This message has been scanned for viruses and > dangerous content by the *Togethia MailScanner* , > and is > believed to be clean. > Scanner:local > > > -- > [image: horizontal ruler] Peter Farrow [image: avatar] > ______________________ Home: 01249 654183 Fax: 01249 461 548 Mobile: > 07799605617 Skype: peter_farrow Web: www.peterfarrow.com > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/16e44b62/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: orange_spacer.gif Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/16e44b62/attachment.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: avatar.gif Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/16e44b62/attachment-0001.gif From steve.freegard at fsl.com Tue Sep 2 15:55:38 2014 From: steve.freegard at fsl.com (Steve Freegard) Date: Tue, 02 Sep 2014 15:55:38 +0100 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: References: Message-ID: Can you provide a proper example of a domain that exhibits this behaviour? Having a non-resolvable primary MX is pretty rare, so I'd be pretty surprised to see this happening very often. I suspect it's likely caused by your wildcard A record on your domain: smf at i7-desktop:~$ host sdlkfjsdklfjsdklfjsldf.conviator.com sdlkfjsdklfjsdklfjsldf.conviator.com has address 86.58.185.222 And the interaction between that and your search path in resolv.conf. I bet if you type something like: ping sdklfjsdkljfskl.skdfjsdkjfs On that server - it will resolve to 86.58.185.222. Regards, Steve. On 02/09/14 13:19, ja at conviator.com wrote: > hi > its a bit OT but I hope its OK anyway. We are also using Mailscanner as > outbound scanner and see a problem that I cannot figure out - probably > some setting im missing. > sometimes "we" send emails to a domain where the primary MX record does > not resolve. I would have expected that sendmail would just try the next > but instead it resolves to mxrecord.name.OURDOMAIN.COM (I think) - it > seams it appends our domain and then tries this server and this server > says "no thanks" so the delivery fails. > I tried to lookup the MX myself using the same nameserver as the > mailscanner server is using - this fails so its not the DNS server that > appends something to make it resolveable or gives out a standard IP. > I also checked the resolve file to check that there is not search > setting that would make it search our domain for a valid IP/lookup. > how can I stop this behavior and make it try the next MX in line? > best regards > Jan > > From rcooper at dwford.com Tue Sep 2 16:33:18 2014 From: rcooper at dwford.com (Rick Cooper) Date: Tue, 2 Sep 2014 11:33:18 -0400 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: References: <5405BA71.2090806@farrows.org> Message-ID: <8C5E49AEED12468F8399DD7A0BDC305D@SAHOMELT> rfc5321 does not say that, as I read it. It says: The lookup first attempts to locate an MX record associated with the name. If a CNAME record is found, the resulting name is processed as if it were the initial name. If a non-existent domain error is returned, this situation MUST be reported as an error. You cannot report as error and continue on with delivery, this doesn't mean log an error it means cease and report as error ( not even defer). Assuming this is what you are speaking of the correct thing to do would be to try the primary and (assuming it returned a cname) stop the delivery attempt when it cannot be resolved. _____ From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Joolee Sent: Tuesday, September 02, 2014 10:37 AM To: MailScanner discussion Subject: Re: ot a bit: sendmail and TO mx not found rfc5321 section 5 indicates that Sendmail should try the server(s) to whom the alternative MX records point. It shouldn't try all multihomed A records pointed to by a single MX record (although, that's not exactly what the RFC says) but that's not the case here. So the question still is, why doesn't Sendmail try the alternative MX records? On 2 September 2014 14:39, Peter Farrow wrote: If the primary MX does not resolve , sendmail will not try a lesser MX record, because the best option is unresolvable, so it will return the message after checking and appending any search parameters given in /etc/resolv.conf. This behaviour is by design, and you are trying to fix a problem which is inherently not yours to solve. If the primary MX does not resolve : The domain is broken - so why try and work around that? On 02/09/2014 13:19, ja at conviator.com wrote: hi its a bit OT but I hope its OK anyway. We are also using Mailscanner as outbound scanner and see a problem that I cannot figure out - probably some setting im missing. sometimes "we" send emails to a domain where the primary MX record does not resolve. I would have expected that sendmail would just try the next but instead it resolves to mxrecord.name.OURDOMAIN.COM (I think) - it seams it appends our domain and then tries this server and this server says "no thanks" so the delivery fails. I tried to lookup the MX myself using the same nameserver as the mailscanner server is using - this fails so its not the DNS server that appends something to make it resolveable or gives out a standard IP. I also checked the resolve file to check that there is not search setting that would make it search our domain for a valid IP/lookup. how can I stop this behavior and make it try the next MX in line? best regards Jan -- This message has been scanned for viruses and dangerous content by the Togethia MailScanner, and is believed to be clean. Scanner:local -- horizontal ruler Peter Farrow avatar ______________________ Home: 01249 654183 Fax: 01249 461 548 Mobile: 07799605617 Skype: peter_farrow Web: www.peterfarrow.com -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/37a49564/attachment-0001.html -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/37a49564/attachment-0002.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/37a49564/attachment-0003.gif From peter at farrows.org Tue Sep 2 16:45:52 2014 From: peter at farrows.org (Peter Farrow) Date: Tue, 02 Sep 2014 16:45:52 +0100 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: <8C5E49AEED12468F8399DD7A0BDC305D@SAHOMELT> References: <5405BA71.2090806@farrows.org> <8C5E49AEED12468F8399DD7A0BDC305D@SAHOMELT> Message-ID: <5405E630.7030006@farrows.org> Thanks Rick, I was very sure this is the case, why would you deliver to a secondary when the primary is undeliverable with a permanent error. The RFC says only in temporary errors do you wait or try the secondaries. So the system behaves as expected, if the primary has a permanent error the only way you can report an error is to return to sender. So we get back to my first comment which was pointing out that, why are you trying to fix someone elses problem, if the domain is broken the mail is returned: end of story. Life is indeed too short to be trying work-arounds for other people's broken systems. P. On 02/09/2014 16:33, Rick Cooper wrote: > rfc5321 does not say that, as I read it. It says: > The lookup first attempts to locate an MX record associated with the > name. If a CNAME record is found, the resulting name is processed as > if it were the initial name. If a non-existent domain error is > returned, this situation MUST be reported as an error. > > You cannot report as error and continue on with delivery, this doesn't mean log an error it means > cease and report as error ( not even defer). Assuming this is what you are speaking of the correct > thing to do would be to try the primary and (assuming it returned a cname) stop the delivery attempt > when it cannot be resolved. > > ------------------------------------------------------------------------ > *From:* mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Joolee > *Sent:* Tuesday, September 02, 2014 10:37 AM > *To:* MailScanner discussion > *Subject:* Re: ot a bit: sendmail and TO mx not found > > rfc5321 section 5 indicates that Sendmail /should/ try the server(s) > to whom the alternative MX records point. It shouldn't try all > multihomed A records pointed to by a single MX record (although, > that's not exactly what the RFC says) but that's not the case here. So > the question still is, why doesn't Sendmail try the alternative MX > records? > > > On 2 September 2014 14:39, Peter Farrow > wrote: > > If the primary MX does not resolve , sendmail will not try a > lesser MX record, because the best option is unresolvable, so it > will return the message after checking and appending any search > parameters given in /etc/resolv.conf. > > This behaviour is by design, and you are trying to fix a problem > which is inherently not yours to solve. > > If the primary MX does not resolve : The domain is broken - so why > try and work around that? > > > > > > > On 02/09/2014 13:19, ja at conviator.com wrote: >> hi >> its a bit OT but I hope its OK anyway. We are also using >> Mailscanner as outbound scanner and see a problem that I cannot >> figure out - probably some setting im missing. >> sometimes "we" send emails to a domain where the primary MX >> record does not resolve. I would have expected that sendmail >> would just try the next but instead it resolves to >> mxrecord.name.OURDOMAIN.COM >> (I think) - it seams it appends our domain and then tries this >> server and this server says "no thanks" so the delivery fails. >> I tried to lookup the MX myself using the same nameserver as the >> mailscanner server is using - this fails so its not the DNS >> server that appends something to make it resolveable or gives out >> a standard IP. >> I also checked the resolve file to check that there is not search >> setting that would make it search our domain for a valid IP/lookup. >> how can I stop this behavior and make it try the next MX in line? >> best regards >> Jan >> >> -- >> This message has been scanned for viruses and >> dangerous content by the *Togethia MailScanner* >> , and is >> believed to be clean. >> Scanner:local >> >> >> >> -- >> horizontal ruler >> >> Peter Farrow >> avatar >> ______________________ >> Home: 01249 654183 >> Fax: 01249 461 548 >> Mobile: 07799605617 >> Skype: peter_farrow >> Web: www.peterfarrow.com >> > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > This message has been scanned for viruses and > dangerous content by the *Togethia MailScanner* > , and is > believed to be clean. > Scanner:local > > > > -- > horizontal ruler > > Peter Farrow > avatar > ______________________ > Home: 01249 654183 > Fax: 01249 461 548 > Mobile: 07799605617 > Skype: peter_farrow > Web: www.peterfarrow.com > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/e23df9d8/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/e23df9d8/attachment.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/e23df9d8/attachment-0001.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: orange_spacer.gif Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/e23df9d8/attachment-0002.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: avatar.gif Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/e23df9d8/attachment-0003.gif From peter at farrows.org Tue Sep 2 16:49:23 2014 From: peter at farrows.org (Peter Farrow) Date: Tue, 02 Sep 2014 16:49:23 +0100 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: <8C5E49AEED12468F8399DD7A0BDC305D@SAHOMELT> References: <5405BA71.2090806@farrows.org> <8C5E49AEED12468F8399DD7A0BDC305D@SAHOMELT> Message-ID: <5405E703.4060704@farrows.org> Continuing further, as my previous reply you only try the secondaries in the event of a temporary error. A timeout includes a temporary error, but a failure to resolve_*/does not /*_: The lookup first attempts to locate an MX record associated with the name. If a CNAME record is found, the resulting name is processed as if it were the initial name. If a non-existent domain error is returned, this situation MUST be reported as an error. If a temporary error is returned, the message MUST be queued and retried later (seeSection 4.5.4.1 ). If an empty list of MXs is returned, the address is treated as if it was associated with an implicit MX RR, with a preference of 0, pointing to that host. On 02/09/2014 16:33, Rick Cooper wrote: > rfc5321 does not say that, as I read it. It says: > The lookup first attempts to locate an MX record associated with the > name. If a CNAME record is found, the resulting name is processed as > if it were the initial name. If a non-existent domain error is > returned, this situation MUST be reported as an error. > > You cannot report as error and continue on with delivery, this doesn't mean log an error it means > cease and report as error ( not even defer). Assuming this is what you are speaking of the correct > thing to do would be to try the primary and (assuming it returned a cname) stop the delivery attempt > when it cannot be resolved. > > ------------------------------------------------------------------------ > *From:* mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Joolee > *Sent:* Tuesday, September 02, 2014 10:37 AM > *To:* MailScanner discussion > *Subject:* Re: ot a bit: sendmail and TO mx not found > > rfc5321 section 5 indicates that Sendmail /should/ try the server(s) > to whom the alternative MX records point. It shouldn't try all > multihomed A records pointed to by a single MX record (although, > that's not exactly what the RFC says) but that's not the case here. So > the question still is, why doesn't Sendmail try the alternative MX > records? > > > On 2 September 2014 14:39, Peter Farrow > wrote: > > If the primary MX does not resolve , sendmail will not try a > lesser MX record, because the best option is unresolvable, so it > will return the message after checking and appending any search > parameters given in /etc/resolv.conf. > > This behaviour is by design, and you are trying to fix a problem > which is inherently not yours to solve. > > If the primary MX does not resolve : The domain is broken - so why > try and work around that? > > > > > > > On 02/09/2014 13:19, ja at conviator.com wrote: >> hi >> its a bit OT but I hope its OK anyway. We are also using >> Mailscanner as outbound scanner and see a problem that I cannot >> figure out - probably some setting im missing. >> sometimes "we" send emails to a domain where the primary MX >> record does not resolve. I would have expected that sendmail >> would just try the next but instead it resolves to >> mxrecord.name.OURDOMAIN.COM >> (I think) - it seams it appends our domain and then tries this >> server and this server says "no thanks" so the delivery fails. >> I tried to lookup the MX myself using the same nameserver as the >> mailscanner server is using - this fails so its not the DNS >> server that appends something to make it resolveable or gives out >> a standard IP. >> I also checked the resolve file to check that there is not search >> setting that would make it search our domain for a valid IP/lookup. >> how can I stop this behavior and make it try the next MX in line? >> best regards >> Jan >> >> -- >> This message has been scanned for viruses and >> dangerous content by the *Togethia MailScanner* >> , and is >> believed to be clean. >> Scanner:local >> >> >> >> -- >> horizontal ruler >> >> Peter Farrow >> avatar >> ______________________ >> Home: 01249 654183 >> Fax: 01249 461 548 >> Mobile: 07799605617 >> Skype: peter_farrow >> Web: www.peterfarrow.com >> > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -- > This message has been scanned for viruses and > dangerous content by the *Togethia MailScanner* > , and is > believed to be clean. > Scanner:local > > > > -- > horizontal ruler > > Peter Farrow > avatar > ______________________ > Home: 01249 654183 > Fax: 01249 461 548 > Mobile: 07799605617 > Skype: peter_farrow > Web: www.peterfarrow.com > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/21f4ea3f/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/21f4ea3f/attachment.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/21f4ea3f/attachment-0001.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: orange_spacer.gif Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/21f4ea3f/attachment-0002.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: avatar.gif Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/21f4ea3f/attachment-0003.gif From alex at vidadigital.com.pa Tue Sep 2 23:17:22 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue, 2 Sep 2014 17:17:22 -0500 Subject: ot a bit: sendmail and TO mx not found In-Reply-To: References: Message-ID: It's the wildcard A record + wrongly configured DNS that resolves anything to *.conviator.com which then fails. Remove the "search conviator.com" from /etc/resolv.conf or fix your wildcard DNS. *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Sep 2, 2014 at 9:55 AM, Steve Freegard wrote: > Can you provide a proper example of a domain that exhibits this > behaviour? Having a non-resolvable primary MX is pretty rare, so I'd be > pretty surprised to see this happening very often. > > I suspect it's likely caused by your wildcard A record on your domain: > > smf at i7-desktop:~$ host sdlkfjsdklfjsdklfjsldf.conviator.com > > sdlkfjsdklfjsdklfjsldf.conviator.com > > has address 86.58.185.222 > > And the interaction between that and your search path in resolv.conf. > > I bet if you type something like: > > ping sdklfjsdkljfskl.skdfjsdkjfs > > On that server - it will resolve to 86.58.185.222. > > Regards, > Steve. > > On 02/09/14 13:19, ja at conviator.com wrote: > > hi > > its a bit OT but I hope its OK anyway. We are also using Mailscanner as > > outbound scanner and see a problem that I cannot figure out - probably > > some setting im missing. > > sometimes "we" send emails to a domain where the primary MX record does > > not resolve. I would have expected that sendmail would just try the next > > but instead it resolves to mxrecord.name.OURDOMAIN.COM > > (I think) - it > > seams it appends our domain and then tries this server and this server > > says "no thanks" so the delivery fails. > > I tried to lookup the MX myself using the same nameserver as the > > mailscanner server is using - this fails so its not the DNS server that > > appends something to make it resolveable or gives out a standard IP. > > I also checked the resolve file to check that there is not search > > setting that would make it search our domain for a valid IP/lookup. > > how can I stop this behavior and make it try the next MX in line? > > best regards > > Jan > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > Before posting, read http://wiki.mailscanner.info/posting > > > Support MailScanner development - buy the book off the website! > *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Sep 2, 2014 at 9:55 AM, Steve Freegard wrote: > Can you provide a proper example of a domain that exhibits this > behaviour? Having a non-resolvable primary MX is pretty rare, so I'd be > pretty surprised to see this happening very often. > > I suspect it's likely caused by your wildcard A record on your domain: > > smf at i7-desktop:~$ host sdlkfjsdklfjsdklfjsldf.conviator.com > sdlkfjsdklfjsdklfjsldf.conviator.com has address 86.58.185.222 > > And the interaction between that and your search path in resolv.conf. > > I bet if you type something like: > > ping sdklfjsdkljfskl.skdfjsdkjfs > > On that server - it will resolve to 86.58.185.222. > > Regards, > Steve. > > On 02/09/14 13:19, ja at conviator.com wrote: > > hi > > its a bit OT but I hope its OK anyway. We are also using Mailscanner as > > outbound scanner and see a problem that I cannot figure out - probably > > some setting im missing. > > sometimes "we" send emails to a domain where the primary MX record does > > not resolve. I would have expected that sendmail would just try the next > > but instead it resolves to mxrecord.name.OURDOMAIN.COM (I think) - it > > seams it appends our domain and then tries this server and this server > > says "no thanks" so the delivery fails. > > I tried to lookup the MX myself using the same nameserver as the > > mailscanner server is using - this fails so its not the DNS server that > > appends something to make it resolveable or gives out a standard IP. > > I also checked the resolve file to check that there is not search > > setting that would make it search our domain for a valid IP/lookup. > > how can I stop this behavior and make it try the next MX in line? > > best regards > > Jan > > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140902/d2d52313/attachment-0001.html From pparsons at techeez.com Tue Sep 9 18:12:35 2014 From: pparsons at techeez.com (Philip Parsons) Date: Tue, 9 Sep 2014 17:12:35 +0000 Subject: I anyone else seeing a bunch of Portuguese spam coming from US hosted servers ? Message-ID: <11D8E491D9562549A61FD3186F36342001D565FDA0@exchange.techeez.com> Has anyone found a way to block them ? Thank you. Philip Parsons IT and Telecommunication Specialist Techeez IT Consulting 250-818-2879 Skype ID: techeez www.techeez.com "Making IT easy" IMPORTANT NOTICE This e-mail is confidential, may be legally privileged, and is for the intended recipient only. Access, disclosure, copying and distribution or reliance on any of it by anyone else is prohibited and may be a criminal offence. Please delete if obtained in error and e-mail confirmation to the sender. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140909/b312c74e/attachment.html From alex at vidadigital.com.pa Tue Sep 9 19:47:17 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue, 9 Sep 2014 13:47:17 -0500 Subject: I anyone else seeing a bunch of Portuguese spam coming from US hosted servers ? In-Reply-To: <11D8E491D9562549A61FD3186F36342001D565FDA0@exchange.techeez.com> References: <11D8E491D9562549A61FD3186F36342001D565FDA0@exchange.techeez.com> Message-ID: Any words in common you could write a local.cf spamassassin recipe for? *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Sep 9, 2014 at 12:12 PM, Philip Parsons wrote: > Has anyone found a way to block them ? > > > > > > Thank you. > Philip Parsons > IT and Telecommunication Specialist > > Techeez IT Consulting > > 250-818-2879 > > Skype ID: techeez > www.techeez.com "Making IT easy" > > > > IMPORTANT NOTICE > This e-mail is confidential, may be legally privileged, and is for the > intended recipient only. Access, disclosure, copying and distribution or > reliance on any of it by anyone else is prohibited and may be a criminal > offence. Please delete if obtained in error and e-mail confirmation to the > sender. > > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140909/e3aa02a2/attachment.html From pparsons at techeez.com Tue Sep 9 20:47:13 2014 From: pparsons at techeez.com (Philip Parsons) Date: Tue, 9 Sep 2014 19:47:13 +0000 Subject: Disarmed-by-Mailscanner Re: I anyone else seeing a bunch of Portuguese spam coming from US hosted servers ? In-Reply-To: References: <11D8E491D9562549A61FD3186F36342001D565FDA0@exchange.techeez.com> Message-ID: <11D8E491D9562549A61FD3186F36342001D5660111@exchange.techeez.com> It looks like there are common words which I have written a file for but it keeps changing the format and wording from the looks of it.. So I was just hoping someone else was seeing this and have come up with a better solution. From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman Sent: September-09-14 11:47 AM To: MailScanner discussion Subject: Disarmed-by-Mailscanner Re: I anyone else seeing a bunch of Portuguese spam coming from US hosted servers ? Any words in common you could write a local.cf spamassassin recipe for? Alex Neuman van der Hans Reliant Technologies / Vida Digital MailScanner has detected a possible fraud attempt from "t.sigopn03.com" claiming to be http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Sep 9, 2014 at 12:12 PM, Philip Parsons > wrote: Has anyone found a way to block them ? Thank you. Philip Parsons IT and Telecommunication Specialist Techeez IT Consulting 250-818-2879 Skype ID: techeez www.techeez.com "Making IT easy" IMPORTANT NOTICE This e-mail is confidential, may be legally privileged, and is for the intended recipient only. Access, disclosure, copying and distribution or reliance on any of it by anyone else is prohibited and may be a criminal offence. Please delete if obtained in error and e-mail confirmation to the sender. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140909/2e7747c5/attachment.html From mailscanner at barendse.to Sun Sep 14 20:13:25 2014 From: mailscanner at barendse.to (Remco Barendse) Date: Sun, 14 Sep 2014 21:13:25 +0200 (CEST) Subject: Has anyone tried MailScanner on CentOS 7? In-Reply-To: <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> References: <7CA580B59C1ABD45B4614ED90D4C7B857EB3B3C1@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3C56D@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3D73A@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> Message-ID: So far, i did not manage to become friends with github (yet?). Hope that sometime there will be a small (maintained) website with info on how to pull the latest stable version from github and install from that. (Why did tarballs fall out of grace?) Cheers! On Fri, 8 Aug 2014, Randal, Phil wrote: > MailScanner - latest release plus updated updated TNEF.pm from Git (https://github.com/MailScanner/v4/pull/29) and my phishing filter fix ( https://github.com/MailScanner/v4/pull/30) > > This patchset might be useful too, but I don't know for sure: https://github.com/MailScanner/v4/commit/0b59afc1dde177150331248179d64d12820512c8 (uses IO::Pipe instead of IO) > > MailWatch - latest from Git (https://github.com/mailwatch/1.2.0) > > Cheers, > > Phil > > -----Original Message----- > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Glenn Steen > Sent: 08 August 2014 09:39 > To: MailScanner discussion > Subject: Re: Has anyone tried MailScanner on CentOS 7? > > Hi Phil, > > As you may remember (or not), I used to use Mandriva for my servers (up until the Mandriva/Mageia split), so this sounds ... easy and straightforward:-). No mixing in CPAN when all else fails;-). > > > On 7 August 2014 22:08, Randal, Phil wrote: >> >> OK, here?s a fuller list of what I did to get MailScanner running on >> CentOS 7 >> > (snip) >> >> Cheers, >> >> >> >> Phil >> > As said, this all seems quite straightforward, so ... I'll do that then:-). Which MW install did you use? > >> >> >> From: mailscanner-bounces at lists.mailscanner.info >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of >> Randal, Phil >> Sent: 07 August 2014 16:22 >> To: MailScanner discussion >> Subject: RE: Has anyone tried MailScanner on CentOS 7? >> >> >> >> No, >> >> >> >> I didn?t try them. >> > Ok, some fun and games to look forward to then:-). > >> > (snip)> >> >> Only gotcha I had was forgetting to ensure that /etc/hosts had a correct entry for the host in it. They joys of cloning VMs and forgetting the little details. >> > Isn't it a bitch, progress:-):-). Do you use any prebuilt VM, or rolled your own? > >> >> >> Phil > Cheers! > -- > -- Glenn > email: glenn < dot > steen < at > gmail < dot > com > work: glenn < dot > steen < at > ap1 < dot > se > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > Hoople Ltd, Registered in England and Wales No. 7556595 > Registered office: Plough Lane, Hereford, HR4 0LE > > "Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it." > From peter at farrows.org Sun Sep 14 20:35:26 2014 From: peter at farrows.org (Peter Farrow) Date: Sun, 14 Sep 2014 20:35:26 +0100 Subject: Has anyone tried MailScanner on CentOS 7? In-Reply-To: References: <7CA580B59C1ABD45B4614ED90D4C7B857EB3B3C1@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3C56D@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3D73A@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> Message-ID: <5415EDFE.90206@farrows.org> I think tarballs "fell out of grace" because making things overcomplicated and obfuscated seems to be the order of the day, these days. P. On 14/09/2014 20:13, Remco Barendse wrote: > So far, i did not manage to become friends with github (yet?). Hope > that sometime there will be a small (maintained) website with info on > how to pull the latest stable version from github and install from that. > > (Why did tarballs fall out of grace?) > > Cheers! > > > On Fri, 8 Aug 2014, Randal, Phil wrote: > >> MailScanner - latest release plus updated updated TNEF.pm from Git >> (https://github.com/MailScanner/v4/pull/29) and my phishing filter >> fix ( https://github.com/MailScanner/v4/pull/30) >> >> This patchset might be useful too, but I don't know for sure: >> https://github.com/MailScanner/v4/commit/0b59afc1dde177150331248179d64d12820512c8 >> (uses IO::Pipe instead of IO) >> >> MailWatch - latest from Git (https://github.com/mailwatch/1.2.0) >> >> Cheers, >> >> Phil >> >> -----Original Message----- >> From: mailscanner-bounces at lists.mailscanner.info >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of >> Glenn Steen >> Sent: 08 August 2014 09:39 >> To: MailScanner discussion >> Subject: Re: Has anyone tried MailScanner on CentOS 7? >> >> Hi Phil, >> >> As you may remember (or not), I used to use Mandriva for my servers >> (up until the Mandriva/Mageia split), so this sounds ... easy and >> straightforward:-). No mixing in CPAN when all else fails;-). >> >> >> On 7 August 2014 22:08, Randal, Phil >> wrote: >>> >>> OK, here's a fuller list of what I did to get MailScanner running on >>> CentOS 7 >>> >> (snip) >>> >>> Cheers, >>> >>> >>> >>> Phil >>> >> As said, this all seems quite straightforward, so ... I'll do that >> then:-). Which MW install did you use? >> >>> >>> >>> From: mailscanner-bounces at lists.mailscanner.info >>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of >>> Randal, Phil >>> Sent: 07 August 2014 16:22 >>> To: MailScanner discussion >>> Subject: RE: Has anyone tried MailScanner on CentOS 7? >>> >>> >>> >>> No, >>> >>> >>> >>> I didn't try them. >>> >> Ok, some fun and games to look forward to then:-). >> >>> >> (snip)> >>> >>> Only gotcha I had was forgetting to ensure that /etc/hosts had a >>> correct entry for the host in it. They joys of cloning VMs and >>> forgetting the little details. >>> >> Isn't it a bitch, progress:-):-). Do you use any prebuilt VM, or >> rolled your own? >> >>> >>> >>> Phil >> Cheers! >> -- >> -- Glenn >> email: glenn < dot > steen < at > gmail < dot > com >> work: glenn < dot > steen < at > ap1 < dot > se >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> Hoople Ltd, Registered in England and Wales No. 7556595 >> Registered office: Plough Lane, Hereford, HR4 0LE >> >> "Any opinion expressed in this e-mail or any attached files are those >> of the individual and not necessarily those of Hoople Ltd. You should >> be aware that Hoople Ltd. monitors its email service. This e-mail and >> any attached files are confidential and intended solely for the use >> of the addressee. This communication may contain material protected >> by law from being passed on. If you are not the intended recipient >> and have received this e-mail in error, you are advised that any use, >> dissemination, forwarding, printing or copying of this e-mail is >> strictly prohibited. If you have received this e-mail in error please >> contact the sender immediately and destroy all copies of it." >> >> >> >> >> -- >> horizontal ruler >> >> Peter Farrow >> avatar >> ______________________ >> Home: 01249 654183 >> Fax: 01249 461 548 >> Mobile: 07799605617 >> Skype: peter_farrow >> Web: www.peterfarrow.com >> -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140914/2e65be77/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: orange_spacer.gif Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140914/2e65be77/attachment.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: avatar.gif Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140914/2e65be77/attachment-0001.gif From jerry.benton at mailborder.com Sun Sep 14 22:48:42 2014 From: jerry.benton at mailborder.com (Jerry Benton) Date: Sun, 14 Sep 2014 17:48:42 -0400 Subject: Has anyone tried MailScanner on CentOS 7? In-Reply-To: <5415EDFE.90206@farrows.org> References: <7CA580B59C1ABD45B4614ED90D4C7B857EB3B3C1@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3C56D@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3D73A@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> <5415EDFE.90206@farrows.org> Message-ID: <18605E79-534A-4929-9F90-B6128471BEE2@mailborder.com> https://github.com/MailScanner/v4 There will be a website with that information. I just moved back to the US from Europe and am still pulling my equipment out of boxes. There will be something by the end of the year. - Jerry Benton www.mailborder.com On Sep 14, 2014, at 3:35 PM, Peter Farrow wrote: > I think tarballs "fell out of grace" because making things overcomplicated and obfuscated seems to be the order of the day, these days. > > P. > > > > On 14/09/2014 20:13, Remco Barendse wrote: >> So far, i did not manage to become friends with github (yet?). Hope that sometime there will be a small (maintained) website with info on how to pull the latest stable version from github and install from that. >> >> (Why did tarballs fall out of grace?) >> >> Cheers! >> >> >> On Fri, 8 Aug 2014, Randal, Phil wrote: >> >>> MailScanner - latest release plus updated updated TNEF.pm from Git (https://github.com/MailScanner/v4/pull/29) and my phishing filter fix ( https://github.com/MailScanner/v4/pull/30) >>> >>> This patchset might be useful too, but I don't know for sure: https://github.com/MailScanner/v4/commit/0b59afc1dde177150331248179d64d12820512c8 (uses IO::Pipe instead of IO) >>> >>> MailWatch - latest from Git (https://github.com/mailwatch/1.2.0) >>> >>> Cheers, >>> >>> Phil >>> >>> -----Original Message----- >>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Glenn Steen >>> Sent: 08 August 2014 09:39 >>> To: MailScanner discussion >>> Subject: Re: Has anyone tried MailScanner on CentOS 7? >>> >>> Hi Phil, >>> >>> As you may remember (or not), I used to use Mandriva for my servers (up until the Mandriva/Mageia split), so this sounds ... easy and straightforward:-). No mixing in CPAN when all else fails;-). >>> >>> >>> On 7 August 2014 22:08, Randal, Phil wrote: >>>> >>>> OK, here?s a fuller list of what I did to get MailScanner running on >>>> CentOS 7 >>>> >>> (snip) >>>> >>>> Cheers, >>>> >>>> >>>> >>>> Phil >>>> >>> As said, this all seems quite straightforward, so ... I'll do that then:-). Which MW install did you use? >>> >>>> >>>> >>>> From: mailscanner-bounces at lists.mailscanner.info >>>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of >>>> Randal, Phil >>>> Sent: 07 August 2014 16:22 >>>> To: MailScanner discussion >>>> Subject: RE: Has anyone tried MailScanner on CentOS 7? >>>> >>>> >>>> >>>> No, >>>> >>>> >>>> >>>> I didn?t try them. >>>> >>> Ok, some fun and games to look forward to then:-). >>> >>>> >>> (snip)> >>>> >>>> Only gotcha I had was forgetting to ensure that /etc/hosts had a correct entry for the host in it. They joys of cloning VMs and forgetting the little details. >>>> >>> Isn't it a bitch, progress:-):-). Do you use any prebuilt VM, or rolled your own? >>> >>>> >>>> >>>> Phil >>> Cheers! >>> -- >>> -- Glenn >>> email: glenn < dot > steen < at > gmail < dot > com >>> work: glenn < dot > steen < at > ap1 < dot > se >>> -- >>> MailScanner mailing list >>> mailscanner at lists.mailscanner.info >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner >>> >>> Before posting, read http://wiki.mailscanner.info/posting >>> >>> Support MailScanner development - buy the book off the website! >>> Hoople Ltd, Registered in England and Wales No. 7556595 >>> Registered office: Plough Lane, Hereford, HR4 0LE >>> >>> "Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it." >>> >>> >>> >>> >>> -- >>> >>> Peter Farrow >>> >>> ______________________ >>> Home: 01249 654183 >>> Fax: 01249 461 548 >>> Mobile: 07799605617 >>> Skype: peter_farrow >>> Web: www.peterfarrow.com >>> > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140914/fabe8c32/attachment.html From mogens at fumlersoft.dk Mon Sep 15 00:52:54 2014 From: mogens at fumlersoft.dk (Mogens Melander) Date: Mon, 15 Sep 2014 01:52:54 +0200 (CEST) Subject: =?utf-8?Q?RE:_Has_anyone_tried_MailScanner_on_CentOS_7=3F?= In-Reply-To: References: <7CA580B59C1ABD45B4614ED90D4C7B857EB3B3C1@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3C56D@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3D73A@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> Message-ID: <2747.b75900f0.1410738774.nsm@mail.fumlersoft.dk> Well, "Why did tarballs fall out of grace?" Sorry for the following ... When you delegate all the difficult stuff to the maintainers, of whatever OS you're running on your hardware, so you can focus on doing, whatever you wanted your software to do. Me, I'm on slackware variants, and nobody supports that, so I have to change/patch all those packages going out to you lazy guys, expecting software coming updated, specially for your choice of hardware/OS combination. Pretty much all important software, running on my servers, I have made build scripts, to compile compliant install packages, to install in the tool chain. Zenwalk not being maintained anymore, I'm moving my servers to Salix, going back to where I started. Slackware. There is no possible way to upgrade my old server/kernel with out sending someone to do it hands on. So, Zenwalk is out, and Slackware is back in. Basically, what I'm saying. I'm not alone, being older than 40, maintaining servers that has been running for more than 1780 days, without a single reboot. Patches/upgrades are done online, on running production systems. And that's why tarballs are not in grace. They are used by the original linux distributions. This is my personal thinking, after a long night of hard drinking, just stumbling, noticing that lead comment: "Why did tarballs fall out of grace?" Peace. On Sun, September 14, 2014 21:13, Remco Barendse wrote: > So far, i did not manage to become friends with github (yet?). Hope that > sometime there will be a small (maintained) website with info on how to > pull the latest stable version from github and install from that. > > (Why did tarballs fall out of grace?) > > Cheers! > > > On Fri, 8 Aug 2014, Randal, Phil wrote: > >> MailScanner - latest release plus updated updated TNEF.pm from Git >> (https://github.com/MailScanner/v4/pull/29) and my phishing filter fix ( >> https://github.com/MailScanner/v4/pull/30) >> >> This patchset might be useful too, but I don't know for sure: >> https://github.com/MailScanner/v4/commit/0b59afc1dde177150331248179d64d12820512c8 >> (uses IO::Pipe instead of IO) >> >> MailWatch - latest from Git (https://github.com/mailwatch/1.2.0) >> >> Cheers, >> >> Phil >> >> -----Original Message----- >> From: mailscanner-bounces at lists.mailscanner.info >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Glenn >> Steen >> Sent: 08 August 2014 09:39 >> To: MailScanner discussion >> Subject: Re: Has anyone tried MailScanner on CentOS 7? >> >> Hi Phil, >> >> As you may remember (or not), I used to use Mandriva for my servers (up >> until the Mandriva/Mageia split), so this sounds ... easy and >> straightforward:-). No mixing in CPAN when all else fails;-). >> >> >> On 7 August 2014 22:08, Randal, Phil >> wrote: >>> >>> OK, here?s a fuller list of what I did to get MailScanner running on >>> CentOS 7 >>> >> (snip) >>> >>> Cheers, >>> >>> >>> >>> Phil >>> >> As said, this all seems quite straightforward, so ... I'll do that >> then:-). Which MW install did you use? >> >>> >>> >>> From: mailscanner-bounces at lists.mailscanner.info >>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of >>> Randal, Phil >>> Sent: 07 August 2014 16:22 >>> To: MailScanner discussion >>> Subject: RE: Has anyone tried MailScanner on CentOS 7? >>> >>> >>> >>> No, >>> >>> >>> >>> I didn?t try them. >>> >> Ok, some fun and games to look forward to then:-). >> >>> >> (snip)> >>> >>> Only gotcha I had was forgetting to ensure that /etc/hosts had a >>> correct entry for the host in it. They joys of cloning VMs and >>> forgetting the little details. >>> >> Isn't it a bitch, progress:-):-). Do you use any prebuilt VM, or rolled >> your own? >> >>> >>> >>> Phil -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jorge.barosa at outlook.com Mon Sep 15 10:11:33 2014 From: jorge.barosa at outlook.com (Jorge Barosa) Date: Mon, 15 Sep 2014 10:11:33 +0100 Subject: pfSense virtualized with mailscanner doesn't run Message-ID: Hello, I'm a new in your list, can someone please help me? I've got an pfSense in a virtulized system (vmWare vSphere Hypervisor 5.5 ESXi), every thing works just fine except the mailscanner!! it gives this errors: mailscanner: Process did not exit cleanly, returned 2 with signal 0root: /usr/pbi/mailscanner-amd64/etc/rc.d/mailscanner: WARNING: failed to start mailscanner Can someone giv me an hint ? best regards,Jorge Barosa -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140915/2300d12e/attachment.html From peter at farrows.org Mon Sep 15 10:34:06 2014 From: peter at farrows.org (Peter Farrow) Date: Mon, 15 Sep 2014 10:34:06 +0100 Subject: pfSense virtualized with mailscanner doesn't run In-Reply-To: References: Message-ID: <5416B28E.5050307@farrows.org> A little more detail is required here. check /var/log/messages, /var/log/maillog and see what is reported. On 15/09/2014 10:11, Jorge Barosa wrote: > Hello, > > I'm a new in your list, can someone please help me? > > I've got an pfSense in a virtulized system (vmWare vSphere Hypervisor > 5.5 ESXi), every thing works just fine except the mailscanner!! it > gives this errors: > > mailscanner: Process did not exit cleanly, returned 2 with signal 0 > root: /usr/pbi/mailscanner-amd64/etc/rc.d/mailscanner: WARNING: failed > to start mailscanner > > Can someone giv me an hint ? > > best regards, > Jorge Barosa > > > -- > This message has been scanned for viruses and > dangerous content by the *Togethia MailScanner* > , and is > believed to be clean. > Scanner:local > > > > -- > horizontal ruler > > Peter Farrow > avatar > ______________________ > Home: 01249 654183 > Fax: 01249 461 548 > Mobile: 07799605617 > Skype: peter_farrow > Web: www.peterfarrow.com > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140915/0b7c9f3f/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: orange_spacer.gif Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140915/0b7c9f3f/attachment.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: avatar.gif Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140915/0b7c9f3f/attachment-0001.gif From Amelein at dantumadiel.eu Mon Sep 15 11:10:03 2014 From: Amelein at dantumadiel.eu (Arjan Melein) Date: Mon, 15 Sep 2014 12:10:03 +0200 Subject: Betr.: Re: pfSense virtualized with mailscanner doesn't run In-Reply-To: <5416B28E.5050307@farrows.org> References: <5416B28E.5050307@farrows.org> Message-ID: <5416D71B0200008E0002C1F8@GroupWise.Dantumadiel.eu> Also try a 'MailScanner --lint --debug' and see what that says. It might just be the perl issue. >>> Op 15-9-2014 om 11:34 is door Peter Farrow geschreven: > A little more detail is required here. > > check /var/log/messages, /var/log/maillog > > and see what is reported. > > > > On 15/09/2014 10:11, Jorge Barosa wrote: >> Hello, >> >> I'm a new in your list, can someone please help me? >> >> I've got an pfSense in a virtulized system (vmWare vSphere Hypervisor >> 5.5 ESXi), every thing works just fine except the mailscanner!! it >> gives this errors: >> >> mailscanner: Process did not exit cleanly, returned 2 with signal 0 >> root: /usr/pbi/mailscanner-amd64/etc/rc.d/mailscanner: WARNING: failed >> to start mailscanner >> >> Can someone giv me an hint ? >> >> best regards, >> Jorge Barosa >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by the *Togethia MailScanner* >> , and is >> believed to be clean. >> Scanner:local >> >> >> >> -- >> horizontal ruler >> >> Peter Farrow >> avatar >> ______________________ >> Home: 01249 654183 >> Fax: 01249 461 548 >> Mobile: 07799605617 >> Skype: peter_farrow >> Web: www.peterfarrow.com >> From jorge.barosa at outlook.com Mon Sep 15 12:17:57 2014 From: jorge.barosa at outlook.com (Jorge Barosa) Date: Mon, 15 Sep 2014 12:17:57 +0100 Subject: Betr.: Re: pfSense virtualized with mailscanner doesn't run In-Reply-To: <5416D71B0200008E0002C1F8@GroupWise.Dantumadiel.eu> References: , <5416B28E.5050307@farrows.org>, <5416D71B0200008E0002C1F8@GroupWise.Dantumadiel.eu> Message-ID: Hi, Thanks for your reply: Here is the respose for 'MailScanner --lint --debug': # MailScanner --lint --debugTrying to setlogsock(unix) Reading configuration file /usr/pbi/mailscanner-amd64/etc/MailScanner/MailScanner.confReading configuration file /usr/pbi/mailscanner-amd64/etc/MailScanner/conf.d/READMECould not read executable /usr/local/sbin/sendmail at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2897Error in line 33, file "/usr/local/sbin/sendmail" for sendmail does not exist (or can not be read) at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3151Could not read directory /var/spool/postfix/incoming at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2874Error in configuration file line 27, directory /var/spool/postfix/incoming for outqueuedir does not exist (or is not readable) at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3238File containing list of incoming queue dirs (/var/spool/postfix/hold) does not exist at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 1819 Checking version numbers...Version number in MailScanner.conf (4.84.6) is correct. Your envelope_sender_header in spam.assassin.prefs.conf is correct.Can't use string ("/var/spool/mqueue.in") as an ARRAY ref while "strict refs" in use at /usr/pbi/mailscanner-amd64/sbin/MailScanner line 536. In pfSense I don't have any more logs in /var/log/messages, /var/log/maillog Thank you > Date: Mon, 15 Sep 2014 12:10:03 +0200 > From: Amelein at dantumadiel.eu > To: mailscanner at lists.mailscanner.info > Subject: Betr.: Re: pfSense virtualized with mailscanner doesn't run > > Also try a 'MailScanner --lint --debug' and see what that says. It might just be the perl issue. > > > > >>> Op 15-9-2014 om 11:34 is door Peter Farrow geschreven: > > A little more detail is required here. > > > > check /var/log/messages, /var/log/maillog > > > > and see what is reported. > > > > > > > > On 15/09/2014 10:11, Jorge Barosa wrote: > >> Hello, > >> > >> I'm a new in your list, can someone please help me? > >> > >> I've got an pfSense in a virtulized system (vmWare vSphere Hypervisor > >> 5.5 ESXi), every thing works just fine except the mailscanner!! it > >> gives this errors: > >> > >> mailscanner: Process did not exit cleanly, returned 2 with signal 0 > >> root: /usr/pbi/mailscanner-amd64/etc/rc.d/mailscanner: WARNING: failed > >> to start mailscanner > >> > >> Can someone giv me an hint ? > >> > >> best regards, > >> Jorge Barosa > >> > >> > >> -- > >> This message has been scanned for viruses and > >> dangerous content by the *Togethia MailScanner* > >> , and is > >> believed to be clean. > >> Scanner:local > >> > >> > >> > >> -- > >> horizontal ruler > >> > >> Peter Farrow > >> avatar > >> ______________________ > >> Home: 01249 654183 > >> Fax: 01249 461 548 > >> Mobile: 07799605617 > >> Skype: peter_farrow > >> Web: www.peterfarrow.com > >> > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140915/39554008/attachment.html From mailscanner at joolee.nl Mon Sep 15 13:09:28 2014 From: mailscanner at joolee.nl (Joolee) Date: Mon, 15 Sep 2014 14:09:28 +0200 Subject: Betr.: Re: pfSense virtualized with mailscanner doesn't run In-Reply-To: References: <5416B28E.5050307@farrows.org> <5416D71B0200008E0002C1F8@GroupWise.Dantumadiel.eu> Message-ID: Are you sure postfix is even installed on the pfSense system? Most of the logs seem to indicate it is'nt. If you're using another MTA, you should configure Mailscanner accordingly. On 15 September 2014 13:17, Jorge Barosa wrote: > Hi, > > Thanks for your reply: > > Here is the respose for 'MailScanner --lint --debug': > > # MailScanner --lint --debug > Trying to setlogsock(unix) > > Reading configuration file > /usr/pbi/mailscanner-amd64/etc/MailScanner/MailScanner.conf > Reading configuration file > /usr/pbi/mailscanner-amd64/etc/MailScanner/conf.d/README > Could not read executable /usr/local/sbin/sendmail at > /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2897 > Error in line 33, file "/usr/local/sbin/sendmail" for sendmail does not > exist (or can not be read) at > /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3151 > Could not read directory /var/spool/postfix/incoming at > /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2874 > Error in configuration file line 27, directory /var/spool/postfix/incoming > for outqueuedir does not exist (or is not readable) at > /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3238 > File containing list of incoming queue dirs (/var/spool/postfix/hold) does > not exist at > /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 1819 > > Checking version numbers... > Version number in MailScanner.conf (4.84.6) is correct. > > Your envelope_sender_header in spam.assassin.prefs.conf is correct. > Can't use string ("/var/spool/mqueue.in") as an ARRAY ref while "strict > refs" in use at /usr/pbi/mailscanner-amd64/sbin/MailScanner line 536. > > > > In pfSense I don't have any more logs in > /var/log/messages, /var/log/maillog > > Thank you > > > > Date: Mon, 15 Sep 2014 12:10:03 +0200 > > From: Amelein at dantumadiel.eu > > To: mailscanner at lists.mailscanner.info > > Subject: Betr.: Re: pfSense virtualized with mailscanner doesn't run > > > > > Also try a 'MailScanner --lint --debug' and see what that says. It might > just be the perl issue. > > > > > > > > >>> Op 15-9-2014 om 11:34 is door Peter Farrow > geschreven: > > > A little more detail is required here. > > > > > > check /var/log/messages, /var/log/maillog > > > > > > and see what is reported. > > > > > > > > > > > > On 15/09/2014 10:11, Jorge Barosa wrote: > > >> Hello, > > >> > > >> I'm a new in your list, can someone please help me? > > >> > > >> I've got an pfSense in a virtulized system (vmWare vSphere Hypervisor > > >> 5.5 ESXi), every thing works just fine except the mailscanner!! it > > >> gives this errors: > > >> > > >> mailscanner: Process did not exit cleanly, returned 2 with signal 0 > > >> root: /usr/pbi/mailscanner-amd64/etc/rc.d/mailscanner: WARNING: > failed > > >> to start mailscanner > > >> > > >> Can someone giv me an hint ? > > >> > > >> best regards, > > >> Jorge Barosa > > >> > > >> > > >> -- > > >> This message has been scanned for viruses and > > >> dangerous content by the *Togethia MailScanner* > > >> , and is > > >> believed to be clean. > > >> Scanner:local > > >> > > >> > > >> > > >> -- > > >> horizontal ruler > > >> > > >> Peter Farrow > > >> avatar > > >> ______________________ > > >> Home: 01249 654183 > > >> Fax: 01249 461 548 > > >> Mobile: 07799605617 > > >> Skype: peter_farrow > > >> Web: www.peterfarrow.com > > >> > > > > > > > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140915/f533e61e/attachment.html From Amelein at dantumadiel.eu Mon Sep 15 13:31:01 2014 From: Amelein at dantumadiel.eu (Arjan Melein) Date: Mon, 15 Sep 2014 14:31:01 +0200 Subject: Betr.: Re: pfSense virtualized with mailscanner doesn't run In-Reply-To: References: , <5416B28E.5050307@farrows.org>, <5416D71B0200008E0002C1F8@GroupWise.Dantumadiel.eu> Message-ID: <5416F8250200008E0002C1FE@GroupWise.Dantumadiel.eu> Well here you go: Could not read executable /usr/local/sbin/sendmail at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2897 Error in line 33, file "/usr/local/sbin/sendmail" for sendmail does not exist (or can not be read) at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3151 Could not read directory /var/spool/postfix/incoming at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2874 Error in configuration file line 27, directory /var/spool/postfix/incoming for outqueuedir does not exist (or is not readable) at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3238 File containing list of incoming queue dirs (/var/spool/postfix/hold) does not exist at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 1819 What I can think of from the top of my head: - No MTA installed ? (somewhat unlikely) - Wrong MTA configured in MailScanner.conf ? - Wrong MTA path configured in MailScanner.conf ? - Running MS as a different user then the MTA ? This would lead to permission problems. If you check your MailScanner.conf the MTA settings are at the start of the file. (for me anyways, I'm using the fully commented version) You might have to customize the default settings to where pfense has its files. From jorge.barosa at outlook.com Mon Sep 15 16:54:10 2014 From: jorge.barosa at outlook.com (Jorge Barosa) Date: Mon, 15 Sep 2014 16:54:10 +0100 Subject: Betr.: Re: pfSense virtualized with mailscanner doesn't run In-Reply-To: <5416F8250200008E0002C1FE@GroupWise.Dantumadiel.eu> References: , , <5416B28E.5050307@farrows.org>, , <5416D71B0200008E0002C1F8@GroupWise.Dantumadiel.eu>, , <5416F8250200008E0002C1FE@GroupWise.Dantumadiel.eu> Message-ID: Thanks for your help, I needed to instal the package "postfix" before "MailScanner", didn't find that answer in any forum. Thank you, Best regards,Jorge Barosa > Date: Mon, 15 Sep 2014 14:31:01 +0200 > From: Amelein at dantumadiel.eu > To: mailscanner at lists.mailscanner.info > Subject: RE: Betr.: Re: pfSense virtualized with mailscanner doesn't run > > Well here you go: > > Could not read executable /usr/local/sbin/sendmail at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2897 > Error in line 33, file "/usr/local/sbin/sendmail" for sendmail does not exist (or can not be read) at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3151 > Could not read directory /var/spool/postfix/incoming at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 2874 > Error in configuration file line 27, directory /var/spool/postfix/incoming for outqueuedir does not exist (or is not readable) at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 3238 > File containing list of incoming queue dirs (/var/spool/postfix/hold) does not exist at /usr/pbi/mailscanner-amd64/lib/MailScanner/MailScanner/Config.pm line 1819 > > > What I can think of from the top of my head: > - No MTA installed ? (somewhat unlikely) > - Wrong MTA configured in MailScanner.conf ? > - Wrong MTA path configured in MailScanner.conf ? > - Running MS as a different user then the MTA ? This would lead to permission problems. > > If you check your MailScanner.conf the MTA settings are at the start of the file. (for me anyways, I'm using the fully commented version) > You might have to customize the default settings to where pfense has its files. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140915/9a9afe6b/attachment.html From mahirrudin at gmail.com Wed Sep 17 10:34:23 2014 From: mahirrudin at gmail.com (Mahirrudin Alkhoir) Date: Wed, 17 Sep 2014 16:34:23 +0700 Subject: Custom header for whitelist message Message-ID: Hello, i have a question about tagging messages, in mailscanner configuration there are configuration about blacklist and whitelist rules perdomain. Is Definitely Not Spam = &ByDomainSpamWhitelist Is Definitely Spam = &ByDomainSpamBlacklist For blacklist ( spam messages ), i can custom header or subject using spam action. Spam Actions = deliver header "X-Spam-Status: Yes" Non Spam Actions = deliver header "X-Spam-Status: No" if i am using thats configuration, all clean messages, include whitelist messages have same "X-Spam-Status" header. There's another way to modified header email for whitelist rules only ? X-Spam-Status: Whitelist Best Regards, *mahirrudin* When there's a Will there's a Smith *http://blog.mahirrudin.com * -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140917/3e1c1776/attachment.html From damfam at gmail.com Wed Sep 17 21:28:49 2014 From: damfam at gmail.com (Edward Dam) Date: Wed, 17 Sep 2014 16:28:49 -0400 Subject: Moving Servers Message-ID: Hi All, I spent the day setting up a new MailScanner server as the old one's days were numbered from a hardware perspective. I've got the new server up and running, and MailScanner installed and working. What I *can't* get working, is the custom rules I have, specifically a file called deliver.rules that contains a bunch of forwards. First off, new server info. CentOS 6.5 MailScanner Version = 4.84.6 PHP Version = 5.3.3 MailScanner.conf applicable lines: %rules-dir% = /etc/MailScanner/rules Non Spam Actions = %rules-dir%/deliver.rules So in /etc/MailScanner/rules I have my deliver.rules file, copied from the old working system. For some reason, MailScanner completely ignores the file. I've been banging my head against the desk for a couple hours now - and this is the last "issue" left before pushing this into production. Any thoughts? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140917/d7226c5d/attachment.html From damfam at gmail.com Wed Sep 17 21:38:08 2014 From: damfam at gmail.com (Edward Dam) Date: Wed, 17 Sep 2014 16:38:08 -0400 Subject: Moving Servers In-Reply-To: References: Message-ID: The curious part is, the last line of deliver.rules is FromOrTo: default deliver header "X-Spam-Status: No" Which of course applies to any mail that isn't otherwise directed above that line. I've got a few dozen forwards listed above that line such as To: user at mydomain.com deliver forward user at gmail.com Which takes any mail for user at mydomain.com and delivers it but also forwards it to their gmail address. The incoming email is being delivered to user at mydomain.com but the forward to user at gmail.com does not occur. On Wed, Sep 17, 2014 at 4:28 PM, Edward Dam wrote: > Hi All, > > I spent the day setting up a new MailScanner server as the old one's days > were numbered from a hardware perspective. > > I've got the new server up and running, and MailScanner installed and > working. > > What I *can't* get working, is the custom rules I have, specifically a > file called deliver.rules that contains a bunch of forwards. > > First off, new server info. > > CentOS 6.5 > MailScanner Version = 4.84.6 > PHP Version = 5.3.3 > > MailScanner.conf applicable lines: > > %rules-dir% = /etc/MailScanner/rules > > Non Spam Actions = %rules-dir%/deliver.rules > > > So in /etc/MailScanner/rules I have my deliver.rules file, copied from the > old working system. > > For some reason, MailScanner completely ignores the file. I've been > banging my head against the desk for a couple hours now - and this is the > last "issue" left before pushing this into production. > > Any thoughts? > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140917/d36c5802/attachment.html From richard at fastnet.co.uk Thu Sep 18 12:15:54 2014 From: richard at fastnet.co.uk (Richard Mealing) Date: Thu, 18 Sep 2014 11:15:54 +0000 Subject: Moving Servers In-Reply-To: References: Message-ID: <6EE47AF64C339A4F8F7F50507241B3795EC411DB@BTN-EXCHANGE-V1.fastnet.local> I don?t think you need to put the default rule on the last line. You should be able to put that at the top of the file then put all your rules below it. Ta, Rich From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Edward Dam Sent: 17 September 2014 21:38 To: MailScanner discussion Subject: Re: Moving Servers The curious part is, the last line of deliver.rules is FromOrTo: default deliver header "X-Spam-Status: No" Which of course applies to any mail that isn't otherwise directed above that line. I've got a few dozen forwards listed above that line such as To: user at mydomain.com deliver forward user at gmail.com Which takes any mail for user at mydomain.com and delivers it but also forwards it to their gmail address. The incoming email is being delivered to user at mydomain.com but the forward to user at gmail.com does not occur. On Wed, Sep 17, 2014 at 4:28 PM, Edward Dam > wrote: Hi All, I spent the day setting up a new MailScanner server as the old one's days were numbered from a hardware perspective. I've got the new server up and running, and MailScanner installed and working. What I *can't* get working, is the custom rules I have, specifically a file called deliver.rules that contains a bunch of forwards. First off, new server info. CentOS 6.5 MailScanner Version = 4.84.6 PHP Version = 5.3.3 MailScanner.conf applicable lines: %rules-dir% = /etc/MailScanner/rules Non Spam Actions = %rules-dir%/deliver.rules So in /etc/MailScanner/rules I have my deliver.rules file, copied from the old working system. For some reason, MailScanner completely ignores the file. I've been banging my head against the desk for a couple hours now - and this is the last "issue" left before pushing this into production. Any thoughts? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140918/25fddb2c/attachment.html From richard at fastnet.co.uk Thu Sep 18 13:12:43 2014 From: richard at fastnet.co.uk (Richard Mealing) Date: Thu, 18 Sep 2014 12:12:43 +0000 Subject: Moving Servers In-Reply-To: References: Message-ID: <6EE47AF64C339A4F8F7F50507241B3795EC4157F@BTN-EXCHANGE-V1.fastnet.local> I don?t actually use that ruleset, but I wonder, does it work without the deliver, so if you just use forward, does it forward? Have you checked the mail logs to see if it did forward the email? Maybe it went to spam as spf fail or something! From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Edward Dam Sent: 17 September 2014 21:38 To: MailScanner discussion Subject: Re: Moving Servers The curious part is, the last line of deliver.rules is FromOrTo: default deliver header "X-Spam-Status: No" Which of course applies to any mail that isn't otherwise directed above that line. I've got a few dozen forwards listed above that line such as To: user at mydomain.com deliver forward user at gmail.com Which takes any mail for user at mydomain.com and delivers it but also forwards it to their gmail address. The incoming email is being delivered to user at mydomain.com but the forward to user at gmail.com does not occur. On Wed, Sep 17, 2014 at 4:28 PM, Edward Dam > wrote: Hi All, I spent the day setting up a new MailScanner server as the old one's days were numbered from a hardware perspective. I've got the new server up and running, and MailScanner installed and working. What I *can't* get working, is the custom rules I have, specifically a file called deliver.rules that contains a bunch of forwards. First off, new server info. CentOS 6.5 MailScanner Version = 4.84.6 PHP Version = 5.3.3 MailScanner.conf applicable lines: %rules-dir% = /etc/MailScanner/rules Non Spam Actions = %rules-dir%/deliver.rules So in /etc/MailScanner/rules I have my deliver.rules file, copied from the old working system. For some reason, MailScanner completely ignores the file. I've been banging my head against the desk for a couple hours now - and this is the last "issue" left before pushing this into production. Any thoughts? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140918/d28e264b/attachment.html From glenn.steen at gmail.com Thu Sep 18 22:36:05 2014 From: glenn.steen at gmail.com (Glenn Steen) Date: Thu, 18 Sep 2014 23:36:05 +0200 Subject: Has anyone tried MailScanner on CentOS 7? In-Reply-To: <2747.b75900f0.1410738774.nsm@mail.fumlersoft.dk> References: <7CA580B59C1ABD45B4614ED90D4C7B857EB3B3C1@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3C56D@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3D73A@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> <2747.b75900f0.1410738774.nsm@mail.fumlersoft.dk> Message-ID: Speaking as another +40 yo, with a (broad) unix/linux background, tarballs are fine if you like to tinker, but there is an element of "ease" that is highly compelling with "packaged systems"... I like Ubuntu on my desktop, Suse on my virtual apps and CentOS on my servers (at least... That's fairly easy to get the PHB to agree to)... The alternatives, in my world, are spelled windoze and bought appliances, not built from source distros;-) That was all fine for... The early days of linux...:-) Having said that, everyone has their own reality... And using MailScanner on for example CentoOS isn't a perfect fit when things aren't in your favorite repos, the SA isn't new enough on the latedt distro release etc... Hence this thread;-) Some of the things Phil tipped me anout (pull 29/30) seem to have been folded into the latest,so was less of a hassle than expected. Had to resort to CPAN for a very limited set of perl modules. Other than that, most things work ok, despite the shift from SYSV-style init scripts to systemd (that was... Interresting...:-). Working eith git/github turned out to be somewhat akin to working with any source code revision and control system, not that difficult, just a tad different;-). For the past couple of weeks, in running production on this setup (CentOS 7, standalone machine ( hp g7 IIRC, with lots of RAM... Used to be an ESXi host)). Works like a charm! Cheers! -- -- Glenn Den 15 sep 2014 02:29 skrev "Mogens Melander" : > Well, > > "Why did tarballs fall out of grace?" Sorry for the following ... > > When you delegate all the difficult stuff to the maintainers, > of whatever OS you're running on your hardware, so you can > focus on doing, whatever you wanted your software to do. > > Me, I'm on slackware variants, and nobody supports that, so I > have to change/patch all those packages going out to you > lazy guys, expecting software coming updated, specially for > your choice of hardware/OS combination. > > Pretty much all important software, running on my servers, I > have made build scripts, to compile compliant install packages, > to install in the tool chain. Zenwalk not being maintained > anymore, I'm moving my servers to Salix, going back to where > I started. Slackware. There is no possible way to upgrade > my old server/kernel with out sending someone to do it hands on. > > So, Zenwalk is out, and Slackware is back in. > > Basically, what I'm saying. I'm not alone, being older than 40, > maintaining servers that has been running for more than 1780 > days, without a single reboot. Patches/upgrades are done online, > on running production systems. > > And that's why tarballs are not in grace. They are used by the > original linux distributions. > > This is my personal thinking, after a long night of hard drinking, > just stumbling, noticing that lead comment: > > "Why did tarballs fall out of grace?" > > Peace. > > On Sun, September 14, 2014 21:13, Remco Barendse wrote: > > So far, i did not manage to become friends with github (yet?). Hope that > > sometime there will be a small (maintained) website with info on how to > > pull the latest stable version from github and install from that. > > > > (Why did tarballs fall out of grace?) > > > > Cheers! > > > > > > On Fri, 8 Aug 2014, Randal, Phil wrote: > > > >> MailScanner - latest release plus updated updated TNEF.pm from Git > >> (https://github.com/MailScanner/v4/pull/29) and my phishing filter fix > ( > >> https://github.com/MailScanner/v4/pull/30) > >> > >> This patchset might be useful too, but I don't know for sure: > >> > https://github.com/MailScanner/v4/commit/0b59afc1dde177150331248179d64d12820512c8 > >> (uses IO::Pipe instead of IO) > >> > >> MailWatch - latest from Git (https://github.com/mailwatch/1.2.0) > >> > >> Cheers, > >> > >> Phil > >> > >> -----Original Message----- > >> From: mailscanner-bounces at lists.mailscanner.info > >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Glenn > >> Steen > >> Sent: 08 August 2014 09:39 > >> To: MailScanner discussion > >> Subject: Re: Has anyone tried MailScanner on CentOS 7? > >> > >> Hi Phil, > >> > >> As you may remember (or not), I used to use Mandriva for my servers (up > >> until the Mandriva/Mageia split), so this sounds ... easy and > >> straightforward:-). No mixing in CPAN when all else fails;-). > >> > >> > >> On 7 August 2014 22:08, Randal, Phil > >> wrote: > >>> > >>> OK, here?s a fuller list of what I did to get MailScanner running on > >>> CentOS 7 > >>> > >> (snip) > >>> > >>> Cheers, > >>> > >>> > >>> > >>> Phil > >>> > >> As said, this all seems quite straightforward, so ... I'll do that > >> then:-). Which MW install did you use? > >> > >>> > >>> > >>> From: mailscanner-bounces at lists.mailscanner.info > >>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of > >>> Randal, Phil > >>> Sent: 07 August 2014 16:22 > >>> To: MailScanner discussion > >>> Subject: RE: Has anyone tried MailScanner on CentOS 7? > >>> > >>> > >>> > >>> No, > >>> > >>> > >>> > >>> I didn?t try them. > >>> > >> Ok, some fun and games to look forward to then:-). > >> > >>> > >> (snip)> > >>> > >>> Only gotcha I had was forgetting to ensure that /etc/hosts had a > >>> correct entry for the host in it. They joys of cloning VMs and > >>> forgetting the little details. > >>> > >> Isn't it a bitch, progress:-):-). Do you use any prebuilt VM, or rolled > >> your own? > >> > >>> > >>> > >>> Phil > > -- > Mogens Melander > +66 8701 33224 > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140918/2876a79a/attachment.html From peter at farrows.org Thu Sep 18 22:52:22 2014 From: peter at farrows.org (Peter Farrow) Date: Thu, 18 Sep 2014 22:52:22 +0100 Subject: Has anyone tried MailScanner on CentOS 7? In-Reply-To: References: <7CA580B59C1ABD45B4614ED90D4C7B857EB3B3C1@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3C56D@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3D73A@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> <2747.b75900f0.1410738774.nsm@mail.fumlersoft.dk> Message-ID: <541B5416.2080707@farrows.org> I agree, Packages are the way to go... On 18/09/2014 22:36, Glenn Steen wrote: > > Speaking as another +40 yo, with a (broad) unix/linux background, > tarballs are fine if you like to tinker, but there is an element of > "ease" that is highly compelling with "packaged systems"... I like > Ubuntu on my desktop, Suse on my virtual apps and CentOS on my servers > (at least... That's fairly easy to get the PHB to agree to)... The > alternatives, in my world, are spelled windoze and bought appliances, > not built from source distros;-) > That was all fine for... The early days of linux...:-) > Having said that, everyone has their own reality... And using > MailScanner on for example CentoOS isn't a perfect fit when things > aren't in your favorite repos, the SA isn't new enough on the latedt > distro release etc... Hence this thread;-) > > Some of the things Phil tipped me anout (pull 29/30) seem to have been > folded into the latest,so was less of a hassle than expected. Had to > resort to CPAN for a very limited set of perl modules. Other than > that, most things work ok, despite the shift from SYSV-style init > scripts to systemd (that was... Interresting...:-). Working eith > git/github turned out to be somewhat akin to working with any source > code revision and control system, not that difficult, just a tad > different;-). > > For the past couple of weeks, in running production on this setup > (CentOS 7, standalone machine ( hp g7 IIRC, with lots of RAM... Used > to be an ESXi host)). Works like a charm! > > Cheers! > -- > -- Glenn > > Den 15 sep 2014 02:29 skrev "Mogens Melander" >: > > Well, > > "Why did tarballs fall out of grace?" Sorry for the following ... > > When you delegate all the difficult stuff to the maintainers, > of whatever OS you're running on your hardware, so you can > focus on doing, whatever you wanted your software to do. > > Me, I'm on slackware variants, and nobody supports that, so I > have to change/patch all those packages going out to you > lazy guys, expecting software coming updated, specially for > your choice of hardware/OS combination. > > Pretty much all important software, running on my servers, I > have made build scripts, to compile compliant install packages, > to install in the tool chain. Zenwalk not being maintained > anymore, I'm moving my servers to Salix, going back to where > I started. Slackware. There is no possible way to upgrade > my old server/kernel with out sending someone to do it hands on. > > So, Zenwalk is out, and Slackware is back in. > > Basically, what I'm saying. I'm not alone, being older than 40, > maintaining servers that has been running for more than 1780 > days, without a single reboot. Patches/upgrades are done online, > on running production systems. > > And that's why tarballs are not in grace. They are used by the > original linux distributions. > > This is my personal thinking, after a long night of hard drinking, > just stumbling, noticing that lead comment: > > "Why did tarballs fall out of grace?" > > Peace. > > On Sun, September 14, 2014 21:13, Remco Barendse wrote: > > So far, i did not manage to become friends with github (yet?). > Hope that > > sometime there will be a small (maintained) website with info on > how to > > pull the latest stable version from github and install from that. > > > > (Why did tarballs fall out of grace?) > > > > Cheers! > > > > > > On Fri, 8 Aug 2014, Randal, Phil wrote: > > > >> MailScanner - latest release plus updated updated TNEF.pm from Git > >> (https://github.com/MailScanner/v4/pull/29) and my phishing > filter fix ( > >> https://github.com/MailScanner/v4/pull/30) > >> > >> This patchset might be useful too, but I don't know for sure: > >> > https://github.com/MailScanner/v4/commit/0b59afc1dde177150331248179d64d12820512c8 > >> (uses IO::Pipe instead of IO) > >> > >> MailWatch - latest from Git (https://github.com/mailwatch/1.2.0) > >> > >> Cheers, > >> > >> Phil > >> > >> -----Original Message----- > >> From: mailscanner-bounces at lists.mailscanner.info > > >> [mailto:mailscanner-bounces at lists.mailscanner.info > ] On Behalf Of > Glenn > >> Steen > >> Sent: 08 August 2014 09:39 > >> To: MailScanner discussion > >> Subject: Re: Has anyone tried MailScanner on CentOS 7? > >> > >> Hi Phil, > >> > >> As you may remember (or not), I used to use Mandriva for my > servers (up > >> until the Mandriva/Mageia split), so this sounds ... easy and > >> straightforward:-). No mixing in CPAN when all else fails;-). > >> > >> > >> On 7 August 2014 22:08, Randal, Phil > > > >> wrote: > >>> > >>> OK, here's a fuller list of what I did to get MailScanner > running on > >>> CentOS 7 > >>> > >> (snip) > >>> > >>> Cheers, > >>> > >>> > >>> > >>> Phil > >>> > >> As said, this all seems quite straightforward, so ... I'll do that > >> then:-). Which MW install did you use? > >> > >>> > >>> > >>> From: mailscanner-bounces at lists.mailscanner.info > > >>> [mailto:mailscanner-bounces at lists.mailscanner.info > ] On Behalf Of > >>> Randal, Phil > >>> Sent: 07 August 2014 16:22 > >>> To: MailScanner discussion > >>> Subject: RE: Has anyone tried MailScanner on CentOS 7? > >>> > >>> > >>> > >>> No, > >>> > >>> > >>> > >>> I didn't try them. > >>> > >> Ok, some fun and games to look forward to then:-). > >> > >>> > >> (snip)> > >>> > >>> Only gotcha I had was forgetting to ensure that /etc/hosts had a > >>> correct entry for the host in it. They joys of cloning VMs and > >>> forgetting the little details. > >>> > >> Isn't it a bitch, progress:-):-). Do you use any prebuilt VM, > or rolled > >> your own? > >> > >>> > >>> > >>> Phil > > -- > Mogens Melander > +66 8701 33224 > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > This message has been scanned for viruses and > dangerous content by the *Togethia MailScanner* > , and is > believed to be clean. > Scanner:local > > > > -- > horizontal ruler > > Peter Farrow > avatar > ______________________ > Home: 01249 654183 > Fax: 01249 461 548 > Mobile: 07799605617 > Skype: peter_farrow > Web: www.peterfarrow.com > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140918/8b2cbcb8/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: orange_spacer.gif Type: image/gif Size: 57 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140918/8b2cbcb8/attachment.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: avatar.gif Type: image/gif Size: 8198 bytes Desc: not available Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140918/8b2cbcb8/attachment-0001.gif From jerry.benton at mailborder.com Thu Sep 18 23:28:29 2014 From: jerry.benton at mailborder.com (Jerry Benton) Date: Thu, 18 Sep 2014 18:28:29 -0400 Subject: Has anyone tried MailScanner on CentOS 7? In-Reply-To: <541B5416.2080707@farrows.org> References: <7CA580B59C1ABD45B4614ED90D4C7B857EB3B3C1@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3C56D@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3D73A@HC-EXMBX04.herefordshire.gov.uk> <7CA580B59C1ABD45B4614ED90D4C7B857EB3F3ED@HC-EXMBX04.herefordshire.gov.uk> <2747.b75900f0.1410738774.nsm@mail.fumlersoft.dk> <541B5416.2080707@farrows.org> Message-ID: <1535416A-B06A-4E2F-9CF5-13620FAF971F@mailborder.com> There will be RPM, DEB, and source tarballs available once I iron out the packaging. FSL is donating their MailScanner Gold and they have done a lot of the legwork. Once I get a chance to review what they have I will make it available. - Jerry Benton www.mailborder.com On Sep 18, 2014, at 5:52 PM, Peter Farrow wrote: > I agree, > > Packages are the way to go... > > On 18/09/2014 22:36, Glenn Steen wrote: >> Speaking as another +40 yo, with a (broad) unix/linux background, tarballs are fine if you like to tinker, but there is an element of "ease" that is highly compelling with "packaged systems"... I like Ubuntu on my desktop, Suse on my virtual apps and CentOS on my servers (at least... That's fairly easy to get the PHB to agree to)... The alternatives, in my world, are spelled windoze and bought appliances, not built from source distros;-) >> That was all fine for... The early days of linux...:-) >> Having said that, everyone has their own reality... And using MailScanner on for example CentoOS isn't a perfect fit when things aren't in your favorite repos, the SA isn't new enough on the latedt distro release etc... Hence this thread;-) >> >> Some of the things Phil tipped me anout (pull 29/30) seem to have been folded into the latest,so was less of a hassle than expected. Had to resort to CPAN for a very limited set of perl modules. Other than that, most things work ok, despite the shift from SYSV-style init scripts to systemd (that was... Interresting...:-). Working eith git/github turned out to be somewhat akin to working with any source code revision and control system, not that difficult, just a tad different;-). >> >> For the past couple of weeks, in running production on this setup (CentOS 7, standalone machine ( hp g7 IIRC, with lots of RAM... Used to be an ESXi host)). Works like a charm! >> >> Cheers! >> -- >> -- Glenn >> >> Den 15 sep 2014 02:29 skrev "Mogens Melander" : >> Well, >> >> "Why did tarballs fall out of grace?" Sorry for the following ... >> >> When you delegate all the difficult stuff to the maintainers, >> of whatever OS you're running on your hardware, so you can >> focus on doing, whatever you wanted your software to do. >> >> Me, I'm on slackware variants, and nobody supports that, so I >> have to change/patch all those packages going out to you >> lazy guys, expecting software coming updated, specially for >> your choice of hardware/OS combination. >> >> Pretty much all important software, running on my servers, I >> have made build scripts, to compile compliant install packages, >> to install in the tool chain. Zenwalk not being maintained >> anymore, I'm moving my servers to Salix, going back to where >> I started. Slackware. There is no possible way to upgrade >> my old server/kernel with out sending someone to do it hands on. >> >> So, Zenwalk is out, and Slackware is back in. >> >> Basically, what I'm saying. I'm not alone, being older than 40, >> maintaining servers that has been running for more than 1780 >> days, without a single reboot. Patches/upgrades are done online, >> on running production systems. >> >> And that's why tarballs are not in grace. They are used by the >> original linux distributions. >> >> This is my personal thinking, after a long night of hard drinking, >> just stumbling, noticing that lead comment: >> >> "Why did tarballs fall out of grace?" >> >> Peace. >> >> On Sun, September 14, 2014 21:13, Remco Barendse wrote: >> > So far, i did not manage to become friends with github (yet?). Hope that >> > sometime there will be a small (maintained) website with info on how to >> > pull the latest stable version from github and install from that. >> > >> > (Why did tarballs fall out of grace?) >> > >> > Cheers! >> > >> > >> > On Fri, 8 Aug 2014, Randal, Phil wrote: >> > >> >> MailScanner - latest release plus updated updated TNEF.pm from Git >> >> (https://github.com/MailScanner/v4/pull/29) and my phishing filter fix ( >> >> https://github.com/MailScanner/v4/pull/30) >> >> >> >> This patchset might be useful too, but I don't know for sure: >> >> https://github.com/MailScanner/v4/commit/0b59afc1dde177150331248179d64d12820512c8 >> >> (uses IO::Pipe instead of IO) >> >> >> >> MailWatch - latest from Git (https://github.com/mailwatch/1.2.0) >> >> >> >> Cheers, >> >> >> >> Phil >> >> >> >> -----Original Message----- >> >> From: mailscanner-bounces at lists.mailscanner.info >> >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Glenn >> >> Steen >> >> Sent: 08 August 2014 09:39 >> >> To: MailScanner discussion >> >> Subject: Re: Has anyone tried MailScanner on CentOS 7? >> >> >> >> Hi Phil, >> >> >> >> As you may remember (or not), I used to use Mandriva for my servers (up >> >> until the Mandriva/Mageia split), so this sounds ... easy and >> >> straightforward:-). No mixing in CPAN when all else fails;-). >> >> >> >> >> >> On 7 August 2014 22:08, Randal, Phil >> >> wrote: >> >>> >> >>> OK, here?s a fuller list of what I did to get MailScanner running on >> >>> CentOS 7 >> >>> >> >> (snip) >> >>> >> >>> Cheers, >> >>> >> >>> >> >>> >> >>> Phil >> >>> >> >> As said, this all seems quite straightforward, so ... I'll do that >> >> then:-). Which MW install did you use? >> >> >> >>> >> >>> >> >>> From: mailscanner-bounces at lists.mailscanner.info >> >>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of >> >>> Randal, Phil >> >>> Sent: 07 August 2014 16:22 >> >>> To: MailScanner discussion >> >>> Subject: RE: Has anyone tried MailScanner on CentOS 7? >> >>> >> >>> >> >>> >> >>> No, >> >>> >> >>> >> >>> >> >>> I didn?t try them. >> >>> >> >> Ok, some fun and games to look forward to then:-). >> >> >> >>> >> >> (snip)> >> >>> >> >>> Only gotcha I had was forgetting to ensure that /etc/hosts had a >> >>> correct entry for the host in it. They joys of cloning VMs and >> >>> forgetting the little details. >> >>> >> >> Isn't it a bitch, progress:-):-). Do you use any prebuilt VM, or rolled >> >> your own? >> >> >> >>> >> >>> >> >>> Phil >> >> -- >> Mogens Melander >> +66 8701 33224 >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> >> -- >> This message has been scanned for viruses and >> dangerous content by the Togethia MailScanner, and is >> believed to be clean. >> Scanner:local >> >> >> -- >> >> Peter Farrow >> >> ______________________ >> Home: 01249 654183 >> Fax: 01249 461 548 >> Mobile: 07799605617 >> Skype: peter_farrow >> Web: www.peterfarrow.com >> > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140918/81531bbe/attachment-0001.html From paul at welshfamily.com Sun Sep 21 22:07:59 2014 From: paul at welshfamily.com (Paul Welsh) Date: Sun, 21 Sep 2014 22:07:59 +0100 Subject: Antivirus performance, AVG Message-ID: Hi Michael Thanks for the info about AVG you provided back in May. I didn't get any luck with this. When I run avg with f-prot6 or clamd it appears to work. I get this in maillog: Clamd::INFECTED::Eicar-Test-Signature Avg: Virus identified EICAR_Test; deleted in msg-9254-1.txt and I get this in the attachment-warning.txt in the received message: Clamd: msg-9254-1.txt was infected: Eicar-Test-Signature Avg: Found virus deleted in file msg-9254-1.txt So looks promising. However, if I use AVG on its own I see this in the log: Avg: Virus identified EICAR_Test; deleted in msg-12519-1.txt Virus Scanning: Avg found 1 infections Virus Scanning: Found 1 viruses Delivery of nonspam The message is delivered intact. To test I'm including the eicar text in the body of a message. Using MailScanner 4.84.5. On 23 May 2014 12:00, wrote: > > ---------- Forwarded message ---------- > From: Michael Huntley > To: MailScanner discussion > Cc: > Date: Thu, 22 May 2014 23:00:28 -0700 > Subject: Re: Antivirus performance, AVG > I got AVG to work. > > I changed this line in virus.scanners.conf: > avg /usr/lib/MailScanner/avg-wrapper /opt/avg/av > > Save a copy just-in-case someone blows the dust off this project and > releases an update...... > > Then I edited the wrapper: > /usr/lib/MailScanner/avg-wrapper: > > #Add the t option to delete infected object. MailScanner doesn't remove > it otherwise... > #probably a code issue. Don't care, throw the beastie away. > ScanOptions="-at" > PackageDir=$1 > shift > Prog=avgscan > > if [ "x$1" = "x-IsItInstalled" ]; then > [ -x ${PackageDir}/bin/$Prog ] && exit 0 > exit 1 > fi > > # Force output into English > LANG=EN > export LANG > # update AVGs library reference > > #Needed For Proper Use Of New AVG > export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/avg/av/lib > export AVGINSTDIR=/opt/avg/av > export HOME=/opt/avg/av > > exec $PackageDir/bin/$Prog $ScanOptions "$@" 2>&1 > exit 1 > > ... > > Save a backup of the wrapper in case (highly UNLIKELY at this time) > MailScanner has an update. HA! > > Cheers! > > mph > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140921/196c15a3/attachment.html From paul at welshfamily.com Sun Sep 21 22:40:57 2014 From: paul at welshfamily.com (Paul Welsh) Date: Sun, 21 Sep 2014 22:40:57 +0100 Subject: Clamd error messages since last week Message-ID: Following on from my issues with clamd, I rebooted the server and the errors stopped for several weeks, then came back again. I rebooted again today. I restart the daemon each time it fails but once it starts failing, restarts don't have any long lasting effect. When I say long lasting, the errors start again within the hour. Anyone else getting this? I'm running version 0.98.4. On 30 August 2014 12:00, wrote: > > ---------- Forwarded message ---------- > From: Paul Welsh > To: MailScanner discussion > Cc: > Date: Fri, 29 Aug 2014 19:13:31 +0100 > Subject: Re: Clamd error messages since last week > >> If the clamd daemon is local to the mailscanner machine I would recommend >> switching to a unix socket instead of tcp. Set it in your clamd.conf and >> then mirror the path and filename in the MailScanner.config such as >> Clamd Socket = /tmp/clamd >> >> Also I attached a small perl script that will check clamd and make sure >> it's both up and running and capable of responding (the PING/PONG) >> anything you can use to monitor program result codes can use this as it >> returns 0 for OK and 1 for any issues, you can also have it log to >> mail|info if you want to use a log file analizer and just call it from cron >> ever min or so, there is very, very little overhead >> >> Rick Cooper >> >> > Thanks for responding, Rick. Seems to be setup that way already though: > > # grep 'Clamd Socket' /etc/MailScanner/MailScanner.conf > Clamd Socket = /var/run/clamav/clamd.sock > > # grep LocalSocket /etc/clamd.conf > LocalSocket /var/run/clamav/clamd.sock > > Suppose a reboot is the next step. Upgrading to ClamAV 0.98.4 made no > difference. > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140921/2fd6734d/attachment.html From glenn.steen at gmail.com Mon Sep 22 15:35:15 2014 From: glenn.steen at gmail.com (Glenn Steen) Date: Mon, 22 Sep 2014 16:35:15 +0200 Subject: Clamd error messages since last week In-Reply-To: References: Message-ID: Hi paul, No, I can't say I do... As with any probem of an intermittent kind, you need look at log entries in your syslog/messages file(s), or specifically increase logging for your clamd setup and look at that. The behaviour you describe might actually point at almost anything;-)... For example: Imagine you have a broken memory chip. When you reboot, you drastically decrease the probability for that memory to be used... Over time, more and more memory are likely "locked" to specific usages, and thus increasing the likelihood of it being used by a "high consumer" like clamd... You get where I'm going with that. Not saying this is what you have, just saying it could happen:-). Cheers -- -- Glenn On 21 September 2014 23:40, Paul Welsh wrote: > Following on from my issues with clamd, I rebooted the server and the errors > stopped for several weeks, then came back again. I rebooted again today. > > I restart the daemon each time it fails but once it starts failing, restarts > don't have any long lasting effect. When I say long lasting, the errors > start again within the hour. > > Anyone else getting this? I'm running version 0.98.4. > > On 30 August 2014 12:00, wrote: >> >> >> ---------- Forwarded message ---------- >> From: Paul Welsh >> To: MailScanner discussion >> Cc: >> Date: Fri, 29 Aug 2014 19:13:31 +0100 >> Subject: Re: Clamd error messages since last week >>> >>> If the clamd daemon is local to the mailscanner machine I would recommend >>> switching to a unix socket instead of tcp. Set it in your clamd.conf and >>> then mirror the path and filename in the MailScanner.config such as >>> Clamd Socket = /tmp/clamd >>> >>> Also I attached a small perl script that will check clamd and make sure >>> it's both up and running and capable of responding (the PING/PONG) >>> anything you can use to monitor program result codes can use this as it >>> returns 0 for OK and 1 for any issues, you can also have it log to mail|info >>> if you want to use a log file analizer and just call it from cron ever min >>> or so, there is very, very little overhead >>> >>> Rick Cooper >>> >> >> Thanks for responding, Rick. Seems to be setup that way already though: >> >> # grep 'Clamd Socket' /etc/MailScanner/MailScanner.conf >> Clamd Socket = /var/run/clamav/clamd.sock >> >> # grep LocalSocket /etc/clamd.conf >> LocalSocket /var/run/clamav/clamd.sock >> >> Suppose a reboot is the next step. Upgrading to ClamAV 0.98.4 made no >> difference. > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From paul at welshfamily.com Tue Sep 23 00:01:47 2014 From: paul at welshfamily.com (Paul Welsh) Date: Tue, 23 Sep 2014 00:01:47 +0100 Subject: ESET File Security Message-ID: Just to share my findings of ESET File Security with MailScanner 4.84.5 in case anyone's interested in using it. I got hold of a 30 day trial from http://www.eset.co.uk/Trial/Business?Product=LFS and have only installed it tonight so early days but was a breeze to install and appears to work fine. It appears to be licensed per server for ?83 per year with a good discount for 2 and 3 year licences - see https://shop.eset.co.uk/Store/File-Security Installed it by downloading the software and manual from http://www.eset.co.uk/Download/Software/Product/LFS Installation on my CentOS 6.5 x64 box was simply a case of: sh ./esets.x86_64.rpm.bin then registering it with the licence file they sent: /opt/eset/esets/sbin/esets_lic --import /home/admin/NOD32.lic and editing the file /etc/opt/eset/esets/esets.cfg to add my username and password: av_update_username = av_update_password = At this point I could scan a directory: /opt/eset/esets/sbin/esets_scan /root I manually updated it, though not needed as it happened: /opt/eset/esets/sbin/esets_update The /etc/MailScanner/virus.scanners.conf file needed a small tweak: esets /usr/lib/MailScanner/esets-wrapper /opt/eset/esets/sbin I then tested without a problem: /usr/lib/MailScanner/esets-wrapper /opt/eset/esets/sbin /root I scanned another directory and got the following results. Very quick: Scan started at: Mon 22 Sep 2014 10:32:17 PM BST Scan completed at: Mon 22 Sep 2014 10:32:17 PM BST Scan time: 0 sec (0:00:00) Total: files - 39, objects 39 Infected: files - 0, objects 0 Cleaned: files - 0, objects 0 Bitdefender took 25 seconds. OK, no daemon with bitdefender but a startling difference. Clamscan with clamd running took 7.5 seconds, f-prot took 1.25 seconds. I sent the eicar test file within the body of a message and eset captured it. The message wasn't delivered and instead the recipient got the text file with: esets: Found virus Eicar test file in msg-2635-1.txt I tried MailScanner.conf with the following and it worked each time: Virus Scanners = esets Virus Scanners = esets f-prot-6 Virus Scanners = esets f-prot-6 clamd MailScanner's esets updater seems to work: Sep 22 23:09:32 mail update.virus.scanners: Found esets installed Sep 22 23:09:32 mail update.virus.scanners: Running autoupdate for esets Sep 22 23:09:55 mail esets-autoupdate[4734]: esets updated As per previous messages, I've found that the clamd daemon starts falling over after a few weeks with only a reboot resetting it. Memory leak? AVG, I found, looks like it works but delivers infected messages. I've 30 days to see if eset is more reliable. Oh, one other thing. ESET has 2 daemons: # ps -C esets_daemon PID TTY TIME CMD 669 ? 00:00:00 esets_daemon 671 ? 00:01:04 esets_daemon -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140923/b8791133/attachment.html From uxbod at splatnix.net Tue Sep 23 10:47:53 2014 From: uxbod at splatnix.net (Phil Daws) Date: Tue, 23 Sep 2014 10:47:53 +0100 (BST) Subject: ESET File Security In-Reply-To: References: Message-ID: <931235997.25282640.1411465673938.JavaMail.zimbra@innovot.com> Paul: that is very interesting indeed. How does licensing work for a mail server ? Have been looking for a mainstream commercial solution to compliment our AV/AS packages. Thanks, Phil ----- Original Message ----- From: "Paul Welsh" To: "MailScanner discussion" Sent: Tuesday, 23 September, 2014 12:01:47 AM Subject: ESET File Security Just to share my findings of ESET File Security with MailScanner 4.84.5 in case anyone's interested in using it. I got hold of a 30 day trial from http://www.eset.co.uk/Trial/Business?Product=LFS and have only installed it tonight so early days but was a breeze to install and appears to work fine. It appears to be licensed per server for ?83 per year with a good discount for 2 and 3 year licences - see https://shop.eset.co.uk/Store/File-Security Installed it by downloading the software and manual from http://www.eset.co.uk/Download/Software/Product/LFS Installation on my CentOS 6.5 x64 box was simply a case of: sh ./esets.x86_64.rpm.bin then registering it with the licence file they sent: /opt/eset/esets/sbin/esets_lic --import /home/admin/NOD32.lic and editing the file /etc/opt/eset/esets/esets.cfg to add my username and password: av_update_username = av_update_password = At this point I could scan a directory: /opt/eset/esets/sbin/esets_scan /root I manually updated it, though not needed as it happened: /opt/eset/esets/sbin/esets_update The /etc/MailScanner/virus.scanners.conf file needed a small tweak: esets /usr/lib/MailScanner/esets-wrapper /opt/eset/esets/sbin I then tested without a problem: /usr/lib/MailScanner/esets-wrapper /opt/eset/esets/sbin /root I scanned another directory and got the following results. Very quick: Scan started at: Mon 22 Sep 2014 10:32:17 PM BST Scan completed at: Mon 22 Sep 2014 10:32:17 PM BST Scan time: 0 sec (0:00:00) Total: files - 39, objects 39 Infected: files - 0, objects 0 Cleaned: files - 0, objects 0 Bitdefender took 25 seconds. OK, no daemon with bitdefender but a startling difference. Clamscan with clamd running took 7.5 seconds, f-prot took 1.25 seconds. I sent the eicar test file within the body of a message and eset captured it. The message wasn't delivered and instead the recipient got the text file with: esets: Found virus Eicar test file in msg-2635-1.txt I tried MailScanner.conf with the following and it worked each time: Virus Scanners = esets Virus Scanners = esets f-prot-6 Virus Scanners = esets f-prot-6 clamd MailScanner's esets updater seems to work: Sep 22 23:09:32 mail update.virus.scanners: Found esets installed Sep 22 23:09:32 mail update.virus.scanners: Running autoupdate for esets Sep 22 23:09:55 mail esets-autoupdate[4734]: esets updated As per previous messages, I've found that the clamd daemon starts falling over after a few weeks with only a reboot resetting it. Memory leak? AVG, I found, looks like it works but delivers infected messages. I've 30 days to see if eset is more reliable. Oh, one other thing. ESET has 2 daemons: # ps -C esets_daemon PID TTY TIME CMD 669 ? 00:00:00 esets_daemon 671 ? 00:01:04 esets_daemon -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From sbanderson at impromed.com Tue Sep 23 14:44:18 2014 From: sbanderson at impromed.com (Scott B. Anderson) Date: Tue, 23 Sep 2014 13:44:18 +0000 Subject: ESET File Security In-Reply-To: <931235997.25282640.1411465673938.JavaMail.zimbra@innovot.com> References: <931235997.25282640.1411465673938.JavaMail.zimbra@innovot.com> Message-ID: I have been running ESET's file security (and Clamav) for linux on my MailScanner installations on both Centos and Ubuntu for at least 5 years. Other than having to change path info for the command line scan it has worked flawlessly. It always detects malware as expected and doesn't crush an old system the way clamav can. (clamd runs for a couple of weeks then dies on me, clamav just works, if slow.) OFF Topic: I also run ESET for endpoint protection on over 200 phys and virtual windoze boxes, and the business products have been rock solid and the update server system they sell works great also. Main drawback - it is definitely NOT cheap, was 2nd in cost to Kaspersky when I did my last ROI 3 years ago. Scott Anderson > -----Original Message----- > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner- > bounces at lists.mailscanner.info] On Behalf Of Phil Daws > Sent: Tuesday, September 23, 2014 4:48 AM > To: MailScanner discussion > Subject: Re: ESET File Security > > Paul: > > that is very interesting indeed. How does licensing work for a mail server ? Have > been looking for a mainstream commercial solution to compliment our AV/AS > packages. > > Thanks, Phil > > ----- Original Message ----- > From: "Paul Welsh" > To: "MailScanner discussion" > Sent: Tuesday, 23 September, 2014 12:01:47 AM > Subject: ESET File Security > > Just to share my findings of ESET File Security with MailScanner 4.84.5 in case > anyone's interested in using it. > > I got hold of a 30 day trial from > http://www.eset.co.uk/Trial/Business?Product=LFS and have only installed it > tonight so early days but was a breeze to install and appears to work fine. > > It appears to be licensed per server for ?83 per year with a good discount for 2 > and 3 year licences - see https://shop.eset.co.uk/Store/File-Security > > Installed it by downloading the software and manual from > http://www.eset.co.uk/Download/Software/Product/LFS > > Installation on my CentOS 6.5 x64 box was simply a case of: > sh ./esets.x86_64.rpm.bin > then registering it with the licence file they sent: > /opt/eset/esets/sbin/esets_lic --import /home/admin/NOD32.lic and editing the > file /etc/opt/eset/esets/esets.cfg to add my username and password: > av_update_username = > av_update_password = > > At this point I could scan a directory: > /opt/eset/esets/sbin/esets_scan /root > > I manually updated it, though not needed as it happened: > /opt/eset/esets/sbin/esets_update > > The /etc/MailScanner/virus.scanners.conf file needed a small tweak: > esets /usr/lib/MailScanner/esets-wrapper /opt/eset/esets/sbin > > I then tested without a problem: > /usr/lib/MailScanner/esets-wrapper /opt/eset/esets/sbin /root > > I scanned another directory and got the following results. Very quick: > Scan started at: Mon 22 Sep 2014 10:32:17 PM BST Scan completed at: Mon 22 Sep > 2014 10:32:17 PM BST Scan time: 0 sec (0:00:00) > Total: files - 39, objects 39 > Infected: files - 0, objects 0 > Cleaned: files - 0, objects 0 > > Bitdefender took 25 seconds. OK, no daemon with bitdefender but a startling > difference. Clamscan with clamd running took 7.5 seconds, f-prot took 1.25 > seconds. > > I sent the eicar test file within the body of a message and eset captured it. The > message wasn't delivered and instead the recipient got the text file with: > esets: Found virus Eicar test file in msg-2635-1.txt > > I tried MailScanner.conf with the following and it worked each time: > Virus Scanners = esets > Virus Scanners = esets f-prot-6 > Virus Scanners = esets f-prot-6 clamd > > MailScanner's esets updater seems to work: > Sep 22 23:09:32 mail update.virus.scanners: Found esets installed Sep 22 23:09:32 > mail update.virus.scanners: Running autoupdate for esets Sep 22 23:09:55 mail > esets-autoupdate[4734]: esets updated > > As per previous messages, I've found that the clamd daemon starts falling over > after a few weeks with only a reboot resetting it. Memory leak? > > AVG, I found, looks like it works but delivers infected messages. > > I've 30 days to see if eset is more reliable. > > Oh, one other thing. ESET has 2 daemons: > # ps -C esets_daemon > PID TTY TIME CMD > 669 ? 00:00:00 esets_daemon > 671 ? 00:01:04 esets_daemon > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! ... -- Rely On Us. ImproMed LLC -- From paul at welshfamily.com Thu Sep 25 22:13:46 2014 From: paul at welshfamily.com (Paul Welsh) Date: Thu, 25 Sep 2014 22:13:46 +0100 Subject: ESET File Security Message-ID: On 24 September 2014 12:00, Scott B. Anderson" wrote: > > I have been running ESET's file security (and Clamav) for linux on my > MailScanner installations on both Centos and Ubuntu for at least 5 years. > Other than having to change path info for the command line scan it has > worked flawlessly. It always detects malware as expected and doesn't crush > an old system the way clamav can. (clamd runs for a couple of weeks then > dies on me, clamav just works, if slow.) > Very glad (if you know what I mean) that I'm not the only one who has clamd falling over after a few weeks. What do you do re. /usr/lib/MailScanner/esets-autoupdate because this clearly isn't working. It reports that ESET was updated each time it runs. I have hacked the script without success and I wonder if a return code of 0 is being returned each time: if ($result==0) { Sys::Syslog::syslog('info', "esets updated"); Either that or it is downloading even if it isn't needed. If I update using a script: /opt/eset/esets/sbin/esets_update echo $? I get: Update is not necessary - the installed virus signature database is current. Installed virus signature database version 10465 (20140925) 0 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140925/42f341a2/attachment.html From paul at welshfamily.com Thu Sep 25 22:21:26 2014 From: paul at welshfamily.com (Paul Welsh) Date: Thu, 25 Sep 2014 22:21:26 +0100 Subject: ESET File Security Message-ID: On 23 September 2014 12:00, Phil Daws wrote: that is very interesting indeed. How does licensing work for a mail server > ? Have been looking for a mainstream commercial solution to compliment our > AV/AS packages. > > Well they do produce a specific email security product: http://www.eset.co.uk/Business/Mail-Security/Linux-BSD-Solaris Not sure on pricing. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140925/d0fa321d/attachment.html From maillists at conactive.com Fri Sep 26 12:31:03 2014 From: maillists at conactive.com (Kai Schaetzl) Date: Fri, 26 Sep 2014 13:31:03 +0200 Subject: Clamd error messages since last week In-Reply-To: References: Message-ID: Paul Welsh wrote on Sun, 21 Sep 2014 22:40:57 +0100: > I restart the daemon each time it fails but once it starts failing, > restarts don't have any long lasting effect. Make sure that clamd really is gone, before the new instance gets started. It may have crashed somehow and keep staying in memory, despite a restart. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com From sbanderson at impromed.com Fri Sep 26 14:16:37 2014 From: sbanderson at impromed.com (Scott B. Anderson) Date: Fri, 26 Sep 2014 13:16:37 +0000 Subject: ESET File Security In-Reply-To: References: Message-ID: <8fb3ff3b63e54b07838037bb044b6b54@ES5.impromed.com> That is a very good question. I had always assumed that the update script from MailScanner was doing the updates, apparently this isn't the case, esets_daemon is doing it by itself before MailScanner's does, and I doubt that is a bad thing. If you check your esets.cfg file, you will see an option av_update_period and the default is 60 minutes. So I don't think MailScanner's update script is doing much for updating, but it does ensure that it knows ESET is up to date, so that should be just fine. Scott > -----Original Message----- > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner- > bounces at lists.mailscanner.info] On Behalf Of Paul Welsh > Sent: Thursday, September 25, 2014 4:14 PM > To: MailScanner discussion > Subject: RE: ESET File Security > > On 24 September 2014 12:00, Scott B. Anderson" > wrote: > > > > > I have been running ESET's file security (and Clamav) for linux on my > > MailScanner installations on both Centos and Ubuntu for at least 5 years. > > Other than having to change path info for the command line scan it has > > worked flawlessly. It always detects malware as expected and doesn't > > crush an old system the way clamav can. (clamd runs for a couple of > > weeks then dies on me, clamav just works, if slow.) > > > > Very glad (if you know what I mean) that I'm not the only one who has clamd > falling over after a few weeks. > > What do you do re. /usr/lib/MailScanner/esets-autoupdate because this clearly > isn't working. It reports that ESET was updated each time it runs. I have hacked > the script without success and I wonder if a return code of 0 is being returned > each time: > if ($result==0) { > Sys::Syslog::syslog('info', "esets updated"); > > Either that or it is downloading even if it isn't needed. If I update using a script: > /opt/eset/esets/sbin/esets_update > echo $? > > I get: > Update is not necessary - the installed virus signature database is current. > Installed virus signature database version 10465 (20140925) > 0 ... -- Rely On Us. ImproMed LLC -- From j2 at mupp.net Sun Sep 28 13:04:31 2014 From: j2 at mupp.net (Jan Johansson) Date: Sun, 28 Sep 2014 12:04:31 +0000 Subject: New system, and "blank screen issues"- Message-ID: <53823EF3F5911F4D823DFD09156AD728C81ED0F7@ex01.kontinuitet.local> I just reinstalled a box in Ubuntu 14.04 LTS and current versions of MailScanner (working nicely) and Mailwatch (Not working nicely). When I try to log on to web interface I am (before login) redirected to status.php which is just blank (nothing I source code either). If I manually go to login.php I get the login screen and am then redirected to status.php I see nothing in the apache logs apart from what I expect (Yes, I know error.log shoiws that I goofed a path, that has been fixed) I have E_ALL and display errors in apache config, and still just a blank page. I found a few similar things on the mailing list archive but no real solution. Any hints? ==> /var/log/apache2/access.log <== 213.114.166.188 - - [28/Sep/2014:13:53:24 +0200] "GET /phpmyadmin/index.php?ajax_request=1&recent_table=1&token=216c9c1960f6c815a0fa3630e40bcd05 HTTP/1.1" 200 844 "http://laundromat.kontinuitet.com/phpmyadmin/index.php?token=216c9c1960f6c815a0fa3630e40bcd05" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:55:57 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 223 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:01 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/login.php HTTP/1.1" 200 1285 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/images/mailwatch-logo-trans-307x84.png HTTP/1.1" 200 4021 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/images/favicon.png HTTP/1.1" 200 572 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:37 +0200] "POST /mailscanner/checklogin.php HTTP/1.1" 200 223 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:43 +0200] "POST /mailscanner/checklogin.php HTTP/1.1" 200 223 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET /mailscanner/ HTTP/1.1" 302 248 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" ==> /var/log/apache2/error.log <== [Sun Sep 28 13:48:04.633644 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:48:04.767978 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:48:04.880799 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:55:54.785721 2014] [mpm_prefork:notice] [pid 1503] AH00169: caught SIGTERM, shutting down [Sun Sep 28 13:55:55.856671 2014] [mpm_prefork:notice] [pid 4960] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal operations [Sun Sep 28 13:55:55.857424 2014] [core:notice] [pid 4960] AH00094: Command line: '/usr/sbin/apache2' [Sun Sep 28 13:59:36.853295 2014] [mpm_prefork:notice] [pid 4960] AH00169: caught SIGTERM, shutting down PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 462 in Unknown on line 0 [Sun Sep 28 13:59:37.913370 2014] [mpm_prefork:notice] [pid 5284] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal operations [Sun Sep 28 13:59:37.913419 2014] [core:notice] [pid 5284] AH00094: Command line: '/usr/sbin/apache2' ==> /var/log/apache2/other_vhosts_access.log <== -- Meddelandet har kontrollerats mot virus samt skadligt inneh?ll av MailScanner och f?rmodas vara s?kert. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140928/74c604bc/attachment.html From j2 at mupp.net Sun Sep 28 13:04:31 2014 From: j2 at mupp.net (Jan Johansson) Date: Sun, 28 Sep 2014 12:04:31 +0000 Subject: New system, and "blank screen issues"- Message-ID: <53823EF3F5911F4D823DFD09156AD728C81ED0F7@ex01.kontinuitet.local> I just reinstalled a box in Ubuntu 14.04 LTS and current versions of MailScanner (working nicely) and Mailwatch (Not working nicely). When I try to log on to web interface I am (before login) redirected to status.php which is just blank (nothing I source code either). If I manually go to login.php I get the login screen and am then redirected to status.php I see nothing in the apache logs apart from what I expect (Yes, I know error.log shoiws that I goofed a path, that has been fixed) I have E_ALL and display errors in apache config, and still just a blank page. I found a few similar things on the mailing list archive but no real solution. Any hints? ==> /var/log/apache2/access.log <== 213.114.166.188 - - [28/Sep/2014:13:53:24 +0200] "GET /phpmyadmin/index.php?ajax_request=1&recent_table=1&token=216c9c1960f6c815a0fa3630e40bcd05 HTTP/1.1" 200 844 "http://laundromat.kontinuitet.com/phpmyadmin/index.php?token=216c9c1960f6c815a0fa3630e40bcd05" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:55:57 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 223 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:01 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/login.php HTTP/1.1" 200 1285 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/images/mailwatch-logo-trans-307x84.png HTTP/1.1" 200 4021 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/images/favicon.png HTTP/1.1" 200 572 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:37 +0200] "POST /mailscanner/checklogin.php HTTP/1.1" 200 223 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:43 +0200] "POST /mailscanner/checklogin.php HTTP/1.1" 200 223 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET /mailscanner/ HTTP/1.1" 302 248 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" ==> /var/log/apache2/error.log <== [Sun Sep 28 13:48:04.633644 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:48:04.767978 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:48:04.880799 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:55:54.785721 2014] [mpm_prefork:notice] [pid 1503] AH00169: caught SIGTERM, shutting down [Sun Sep 28 13:55:55.856671 2014] [mpm_prefork:notice] [pid 4960] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal operations [Sun Sep 28 13:55:55.857424 2014] [core:notice] [pid 4960] AH00094: Command line: '/usr/sbin/apache2' [Sun Sep 28 13:59:36.853295 2014] [mpm_prefork:notice] [pid 4960] AH00169: caught SIGTERM, shutting down PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 462 in Unknown on line 0 [Sun Sep 28 13:59:37.913370 2014] [mpm_prefork:notice] [pid 5284] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal operations [Sun Sep 28 13:59:37.913419 2014] [core:notice] [pid 5284] AH00094: Command line: '/usr/sbin/apache2' ==> /var/log/apache2/other_vhosts_access.log <== -- Meddelandet har kontrollerats mot virus samt skadligt inneh?ll av MailScanner och f?rmodas vara s?kert. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140928/74c604bc/attachment-0001.html From michael at huntley.net Sun Sep 28 18:41:19 2014 From: michael at huntley.net (Michael Huntley) Date: Sun, 28 Sep 2014 10:41:19 -0700 Subject: Antivirus performance, AVG In-Reply-To: References: Message-ID: <5428483F.9070207@huntley.net> Hi Paul - Thanks for the update. I run AVG with clamd - I'll have to test alone as well. Kind regards, mph On 9/21/2014 2:07 PM, Paul Welsh wrote: > Hi Michael > > Thanks for the info about AVG you provided back in May. > > I didn't get any luck with this. When I run avg with f-prot6 or clamd > it appears to work. I get this in maillog: > Clamd::INFECTED::Eicar-Test-Signature > Avg: Virus identified EICAR_Test; deleted in msg-9254-1.txt > > and I get this in the attachment-warning.txt in the received message: > Clamd: msg-9254-1.txt was infected: Eicar-Test-Signature > Avg: Found virus deleted in file msg-9254-1.txt > > So looks promising. > > However, if I use AVG on its own I see this in the log: > Avg: Virus identified EICAR_Test; deleted in msg-12519-1.txt > Virus Scanning: Avg found 1 infections > Virus Scanning: Found 1 viruses > Delivery of nonspam > > The message is delivered intact. > > To test I'm including the eicar text in the body of a message. Using > MailScanner 4.84.5. > > > > > > On 23 May 2014 12:00, > wrote: > > ---------- Forwarded message ---------- > From: Michael Huntley > > To: MailScanner discussion > > Cc: > Date: Thu, 22 May 2014 23:00:28 -0700 > Subject: Re: Antivirus performance, AVG > I got AVG to work. > > I changed this line in virus.scanners.conf: > avg /usr/lib/MailScanner/avg-wrapper /opt/avg/av > > Save a copy just-in-case someone blows the dust off this project > and releases an update...... > > Then I edited the wrapper: > /usr/lib/MailScanner/avg-wrapper: > > #Add the t option to delete infected object. MailScanner doesn't > remove it otherwise... > #probably a code issue. Don't care, throw the beastie away. > ScanOptions="-at" > PackageDir=$1 > shift > Prog=avgscan > > if [ "x$1" = "x-IsItInstalled" ]; then > [ -x ${PackageDir}/bin/$Prog ] && exit 0 > exit 1 > fi > > # Force output into English > LANG=EN > export LANG > # update AVGs library reference > > #Needed For Proper Use Of New AVG > export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/avg/av/lib > export AVGINSTDIR=/opt/avg/av > export HOME=/opt/avg/av > > exec $PackageDir/bin/$Prog $ScanOptions "$@" 2>&1 > exit 1 > > ... > > Save a backup of the wrapper in case (highly UNLIKELY at this > time) MailScanner has an update. HA! > > Cheers! > > mph > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140928/1af049e5/attachment.html From maxsec at gmail.com Mon Sep 29 10:40:45 2014 From: maxsec at gmail.com (Martin Hepworth) Date: Mon, 29 Sep 2014 10:40:45 +0100 Subject: New system, and "blank screen issues"- In-Reply-To: <53823EF3F5911F4D823DFD09156AD728C81ED0F7@ex01.kontinuitet.local> References: <53823EF3F5911F4D823DFD09156AD728C81ED0F7@ex01.kontinuitet.local> Message-ID: Jan which web interface are you referring to as MailScanner by default doesnt have one? -- Martin Hepworth, CISSP Oxford, UK On 28 September 2014 13:04, Jan Johansson wrote: > I just reinstalled a box in Ubuntu 14.04 LTS and current versions of > MailScanner (working nicely) and Mailwatch (Not working nicely). > > > > When I try to log on to web interface I am (before login) redirected to > status.php which is just blank (nothing I source code either). > > > > If I manually go to login.php I get the login screen and am then > redirected to status.php > > > > I see nothing in the apache logs apart from what I expect (Yes, I know > error.log shoiws that I goofed a path, that has been fixed) > > > > I have E_ALL and display errors in apache config, and still just a blank > page. > > > > I found a few similar things on the mailing list archive but no real > solution. > > > > Any hints? > > > > ==> /var/log/apache2/access.log <== > > 213.114.166.188 - - [28/Sep/2014:13:53:24 +0200] "GET > /phpmyadmin/index.php?ajax_request=1&recent_table=1&token=216c9c1960f6c815a0fa3630e40bcd05 > HTTP/1.1" 200 844 " > http://laundromat.kontinuitet.com/phpmyadmin/index.php?token=216c9c1960f6c815a0fa3630e40bcd05" > "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) > Chrome/36.0.1985.143 Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:55:57 +0200] "GET > /mailscanner/status.php HTTP/1.1" 200 223 "-" "Mozilla/5.0 (Windows NT 6.1; > WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 > Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:56:01 +0200] "GET > /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; > WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 > Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET > /mailscanner/login.php HTTP/1.1" 200 1285 "-" "Mozilla/5.0 (Windows NT 6.1; > WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 > Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET > /mailscanner/images/mailwatch-logo-trans-307x84.png HTTP/1.1" 200 4021 " > http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 > (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) > Chrome/36.0.1985.143 Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET > /mailscanner/images/favicon.png HTTP/1.1" 200 572 "-" "Mozilla/5.0 (Windows > NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 > Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:56:37 +0200] "POST > /mailscanner/checklogin.php HTTP/1.1" 200 223 " > http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 > (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) > Chrome/36.0.1985.143 Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:59:43 +0200] "POST > /mailscanner/checklogin.php HTTP/1.1" 200 223 " > http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 > (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) > Chrome/36.0.1985.143 Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET /mailscanner/ > HTTP/1.1" 302 248 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" > > 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET > /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; > WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 > Safari/537.36" > > > > ==> /var/log/apache2/error.log <== > > [Sun Sep 28 13:48:04.633644 2014] [:error] [pid 31690] [client > 213.114.166.188:16822] PHP Warning: > fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to > open stream: No such file or directory in > /var/www/html/mailscanner/functions.php on line 1195 > > [Sun Sep 28 13:48:04.767978 2014] [:error] [pid 31690] [client > 213.114.166.188:16822] PHP Warning: > fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to > open stream: No such file or directory in > /var/www/html/mailscanner/functions.php on line 1195 > > [Sun Sep 28 13:48:04.880799 2014] [:error] [pid 31690] [client > 213.114.166.188:16822] PHP Warning: > fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to > open stream: No such file or directory in > /var/www/html/mailscanner/functions.php on line 1195 > > [Sun Sep 28 13:55:54.785721 2014] [mpm_prefork:notice] [pid 1503] AH00169: > caught SIGTERM, shutting down > > [Sun Sep 28 13:55:55.856671 2014] [mpm_prefork:notice] [pid 4960] AH00163: > Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal > operations > > [Sun Sep 28 13:55:55.857424 2014] [core:notice] [pid 4960] AH00094: > Command line: '/usr/sbin/apache2' > > [Sun Sep 28 13:59:36.853295 2014] [mpm_prefork:notice] [pid 4960] AH00169: > caught SIGTERM, shutting down > > PHP Deprecated: Comments starting with '#' are deprecated in > /etc/php5/apache2/php.ini on line 462 in Unknown on line 0 > > [Sun Sep 28 13:59:37.913370 2014] [mpm_prefork:notice] [pid 5284] AH00163: > Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal > operations > > [Sun Sep 28 13:59:37.913419 2014] [core:notice] [pid 5284] AH00094: > Command line: '/usr/sbin/apache2' > > > > ==> /var/log/apache2/other_vhosts_access.log <== > > > > -- > Meddelandet har kontrollerats mot virus > samt skadligt inneh?ll av *MailScanner* > och f?rmodas vara s?kert. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140929/cfe2283d/attachment.html From ryan.virgo at gmail.com Mon Sep 29 11:23:36 2014 From: ryan.virgo at gmail.com (Ryan Braganza) Date: Mon, 29 Sep 2014 15:53:36 +0530 Subject: Mails get quarantined multiple times Message-ID: I received a mail with queue id 9DECD35316. This mail was supposed to get quarantined due to a size restriction but instead of getting quarantined once it keeps getting quarantine until we removed this email manually from queue Mailscanner version is mailscanner-4.70.7-1 The logs show... .. any idea what could be wrong ? Sep 29 12:47:29 smtp MailScanner[31421]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.4515E Sep 29 12:47:39 smtp MailScanner[31490]: Content Checks: Message 9DECD35316.4DCC2 is bigger than 13312000 bytes Sep 29 12:47:39 smtp MailScanner[31490]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.4DCC2 Sep 29 12:47:46 smtp MailScanner[31411]: Content Checks: Message 9DECD35316.E2456 is bigger than 13312000 bytes Sep 29 12:47:46 smtp MailScanner[31411]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.E2456 Sep 29 12:47:52 smtp MailScanner[31336]: Content Checks: Message 9DECD35316.21440 is bigger than 13312000 bytes Sep 29 12:47:52 smtp MailScanner[31336]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.21440 Sep 29 12:47:59 smtp MailScanner[31513]: Content Checks: Message 9DECD35316.383FF is bigger than 13312000 bytes Sep 29 12:47:59 smtp MailScanner[31513]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.383FF Sep 29 12:48:05 smtp MailScanner[31553]: Content Checks: Message 9DECD35316.CDB95 is bigger than 13312000 bytes Sep 29 12:48:05 smtp MailScanner[31553]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.CDB95 Sep 29 12:48:11 smtp MailScanner[31523]: Content Checks: Message 9DECD35316.F07D0 is bigger than 13312000 bytes Sep 29 12:48:11 smtp MailScanner[31523]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.F07D0 Sep 29 12:48:18 smtp MailScanner[31582]: Content Checks: Message 9DECD35316.C9CE2 is bigger than 13312000 bytes Sep 29 12:48:18 smtp MailScanner[31582]: Saved entire message to /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.C9CE2 Sep 29 12:48:24 smtp MailScanner[31499]: Content Checks: Message 9DECD35316.01EFE is bigger than 13312000 bytes -- -------------------------------------------------------------------------------------------------------------------------------------- *?* *Race the rain, Ride the wind & Chase the sunset. Only a biker understands.**? * -------------------------------------------------------------------------------------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140929/a350f992/attachment.html From richard at fastnet.co.uk Mon Sep 29 13:25:30 2014 From: richard at fastnet.co.uk (Richard Mealing) Date: Mon, 29 Sep 2014 12:25:30 +0000 Subject: New system, and "blank screen issues"- In-Reply-To: <53823EF3F5911F4D823DFD09156AD728C81ED0F7@ex01.kontinuitet.local> References: <53823EF3F5911F4D823DFD09156AD728C81ED0F7@ex01.kontinuitet.local> Message-ID: <6EE47AF64C339A4F8F7F50507241B3795EC7B229@BTN-EXCHANGE-V1.fastnet.local> Hi Jan, This might be better suited on the mailwatch list or possibly the github page. Have you configured php with mysql and gd support? Thanks, Rich From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Jan Johansson Sent: 28 September 2014 13:05 To: MailScanner discussion (mailscanner at lists.mailscanner.info) Subject: New system, and "blank screen issues"- I just reinstalled a box in Ubuntu 14.04 LTS and current versions of MailScanner (working nicely) and Mailwatch (Not working nicely). When I try to log on to web interface I am (before login) redirected to status.php which is just blank (nothing I source code either). If I manually go to login.php I get the login screen and am then redirected to status.php I see nothing in the apache logs apart from what I expect (Yes, I know error.log shoiws that I goofed a path, that has been fixed) I have E_ALL and display errors in apache config, and still just a blank page. I found a few similar things on the mailing list archive but no real solution. Any hints? ==> /var/log/apache2/access.log <== 213.114.166.188 - - [28/Sep/2014:13:53:24 +0200] "GET /phpmyadmin/index.php?ajax_request=1&recent_table=1&token=216c9c1960f6c815a0fa3630e40bcd05 HTTP/1.1" 200 844 "http://laundromat.kontinuitet.com/phpmyadmin/index.php?token=216c9c1960f6c815a0fa3630e40bcd05" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:55:57 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 223 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:01 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/login.php HTTP/1.1" 200 1285 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/images/mailwatch-logo-trans-307x84.png HTTP/1.1" 200 4021 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:29 +0200] "GET /mailscanner/images/favicon.png HTTP/1.1" 200 572 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:56:37 +0200] "POST /mailscanner/checklogin.php HTTP/1.1" 200 223 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:43 +0200] "POST /mailscanner/checklogin.php HTTP/1.1" 200 223 "http://laundromat.kontinuitet.com/mailscanner/login.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET /mailscanner/ HTTP/1.1" 302 248 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" 213.114.166.188 - - [28/Sep/2014:13:59:56 +0200] "GET /mailscanner/status.php HTTP/1.1" 200 222 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36" ==> /var/log/apache2/error.log <== [Sun Sep 28 13:48:04.633644 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:48:04.767978 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:48:04.880799 2014] [:error] [pid 31690] [client 213.114.166.188:16822] PHP Warning: fopen(/opt/MailScanner/etc/MailScanner/etc/MailScanner.conf): failed to open stream: No such file or directory in /var/www/html/mailscanner/functions.php on line 1195 [Sun Sep 28 13:55:54.785721 2014] [mpm_prefork:notice] [pid 1503] AH00169: caught SIGTERM, shutting down [Sun Sep 28 13:55:55.856671 2014] [mpm_prefork:notice] [pid 4960] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal operations [Sun Sep 28 13:55:55.857424 2014] [core:notice] [pid 4960] AH00094: Command line: '/usr/sbin/apache2' [Sun Sep 28 13:59:36.853295 2014] [mpm_prefork:notice] [pid 4960] AH00169: caught SIGTERM, shutting down PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/apache2/php.ini on line 462 in Unknown on line 0 [Sun Sep 28 13:59:37.913370 2014] [mpm_prefork:notice] [pid 5284] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 configured -- resuming normal operations [Sun Sep 28 13:59:37.913419 2014] [core:notice] [pid 5284] AH00094: Command line: '/usr/sbin/apache2' ==> /var/log/apache2/other_vhosts_access.log <== -- Meddelandet har kontrollerats mot virus samt skadligt inneh?ll av MailScanner och f?rmodas vara s?kert. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140929/0cedbba5/attachment.html From maillists at conactive.com Mon Sep 29 14:31:03 2014 From: maillists at conactive.com (Kai Schaetzl) Date: Mon, 29 Sep 2014 15:31:03 +0200 Subject: ESET File Security In-Reply-To: References: Message-ID: Paul Welsh wrote on Thu, 25 Sep 2014 22:21:26 +0100: > http://www.eset.co.uk/Business/Mail-Security/Linux-BSD-Solaris Note, that this is not the same as running a scanner via MS. An explicit "mail server" scanner usually integrates with common mail server solutions (e.g. Postfix) *directly* (e.g. some sort of plugin) and most certainly does not work directly with MS. The license you need for a virus scanner run by MS is *not* the mail server license but the normal file scanner license as you are invoking the file scanner by usual means and scan a file. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com From labatt at svpelican.com Mon Sep 29 19:40:26 2014 From: labatt at svpelican.com (Chris Labatt-Simon) Date: Mon, 29 Sep 2014 14:40:26 -0400 Subject: MailScanner starting new parent processes Message-ID: <0be801cfdc14$d9c55a80$8d500f80$@svpelican.com> Hi All - I just went through a painful upgrade of an Ubuntu server from 10.04 to 14.04. In the process, MailScanner was removed and I had to re-install it. I copied over my old etc settings. My old version was 4.79.11. My new version is 4.84.6. It seems as if MailScanner can't tell whether it's already running. I have "Restart Every" set to 7200. Every time the time passes, a new primary process of MailScanner starts. Over the period of a day, I'll have a large number of parent processes running. Help? If this helps at all. the mailscanner script in /etc/init.d uses start-stop-daemon to start and stop the MailScanner process. It would start fine, but it wouldn't stop as it didn't recognize the MailScanner name in the process list. I had to modify the script to use the PID file to stop the processes. Here's the ps -edf output after the first 7200 seconds: root 11829 1 0 12:31 ? 00:00:00 MailScanner: master waiting for children, sleeping root 11830 11829 0 12:31 ? 00:00:11 MailScanner: waiting for messages root 11839 11829 0 12:31 ? 00:00:13 MailScanner: waiting for messages root 11857 11829 0 12:32 ? 00:00:14 MailScanner: waiting for messages root 11863 11829 0 12:32 ? 00:00:14 MailScanner: waiting for messages root 11871 11829 0 12:32 ? 00:00:14 MailScanner: waiting for messages root 14269 1 0 13:17 ? 00:00:00 MailScanner: master waiting for children, sleeping root 14270 14269 0 13:17 ? 00:00:07 MailScanner: waiting for messages root 14278 14269 0 13:17 ? 00:00:07 MailScanner: waiting for messages root 14284 14269 0 13:17 ? 00:00:10 MailScanner: waiting for messages root 14290 14269 0 13:17 ? 00:00:07 MailScanner: waiting for messages root 14298 14269 0 13:17 ? 00:00:08 MailScanner: waiting for messages Thanks! Chris -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140929/03929d29/attachment.html From FUNK.Gabor at hunetkft.hu Mon Sep 29 22:31:05 2014 From: FUNK.Gabor at hunetkft.hu (Gabor FUNK) Date: Mon, 29 Sep 2014 23:31:05 +0200 Subject: MailScanner starting new parent processes References: <0be801cfdc14$d9c55a80$8d500f80$@svpelican.com> Message-ID: <66D66F191D8746AAA331022C1F6B5C28@M2007> >> I just went through a painful upgrade of an Ubuntu server ... Welcome to the club :-} >> It seems as if MailScanner can't tell whether it's already running. >> I have "Restart Every" set to 7200. Every time the time passes, a new primary process of MailScanner starts. >> Over the period of a day, I'll have a large number of parent processes running. >> >> If this helps at all. the mailscanner script in /etc/init.d uses start-stop-daemon to start and stop the MailScanner process. >> It would start fine, but it wouldn't stop as it didn't recognize the MailScanner name in the process list. >> I had to modify the script to use the PID file to stop the processes. You basically found out what your problem is/was. Issue more thorougly described at: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649835#25 So basically you need to change "$NAME"s to "$PIDFILE" like: < start-stop-daemon --start --quiet --startas $STARTAS --name $NAME --test > /dev/null \ --- > start-stop-daemon --start --quiet --startas $STARTAS --pidfile "$PIDFILE" --test > /dev/null \ < start-stop-daemon --start --quiet --nicelevel $run_nice --exec $DAEMON --name $NAME -- $DAEMON_ARGS \ --- > start-stop-daemon --start --quiet --nicelevel $run_nice --exec $DAEMON --pidfile "$PIDFILE" -- $DAEMON_ARGS \ < start-stop-daemon --stop --retry=TERM/10/TERM/20 --name $NAME --- > start-stop-daemon --stop --quiet --retry=TERM/10/TERM/20 --pidfile "$PIDFILE" < start-stop-daemon --stop --signal 1 --quiet --name $NAME --- > start-stop-daemon --stop --signal 1 --quiet --pidfile "$PIDFILE" (with having a PIDFILE=`${QUICKPEEK} 'PID file' ${CONFFILE}` line as well at the beginning) Here is a link to the script I'm using currently without problems in case you don't want to edit http://maques.hu/linux/mailscanner There are some extras like possibiliity to ulimit and checking for multiple installation directories to start the daemon (tgz:opt/deb:bin). You might need to edit though... G. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140929/595f8d04/attachment.html From boyd.yang at gmail.com Tue Sep 30 09:26:11 2014 From: boyd.yang at gmail.com (Boyd) Date: Tue, 30 Sep 2014 16:26:11 +0800 Subject: Use mailscanner for content protection Message-ID: <39EC22A9-9D04-4EC3-8F01-1A6283224E01@gmail.com> Hi All, Is there any sample configuration about using mailscanner for content protection? Thanks a lot! Boyd From glenn.steen at gmail.com Tue Sep 30 10:30:15 2014 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue, 30 Sep 2014 11:30:15 +0200 Subject: Mails get quarantined multiple times In-Reply-To: References: Message-ID: Oooh, that's old! Don't think MailScanner had the crash detection code in it then, so basically any email that could crash MailScanner (it happens, infriquently, but...:-), would appear as a loop of the kind you describe. only remedy back then was to do what you've done already... Removing the offending message from the queue manually. If you upgrade to the latest/greatest, it includes logic (the processing database feature) that will automatically remove any message/queue ID (and quarantine it) that gets seen more than a set number of times (6 by default). So... go do that upgrade;) Cheers! -- -- Glenn On 29 September 2014 12:23, Ryan Braganza wrote: > I received a mail with queue id 9DECD35316. This mail was supposed to get > quarantined due to a size restriction but instead of getting quarantined > once it keeps getting quarantine until we removed this email manually from > queue > > Mailscanner version is mailscanner-4.70.7-1 > > > The logs show... .. any idea what could be wrong ? > > Sep 29 12:47:29 smtp MailScanner[31421]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.4515E > Sep 29 12:47:39 smtp MailScanner[31490]: Content Checks: Message > 9DECD35316.4DCC2 is bigger than 13312000 bytes > Sep 29 12:47:39 smtp MailScanner[31490]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.4DCC2 > Sep 29 12:47:46 smtp MailScanner[31411]: Content Checks: Message > 9DECD35316.E2456 is bigger than 13312000 bytes > Sep 29 12:47:46 smtp MailScanner[31411]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.E2456 > Sep 29 12:47:52 smtp MailScanner[31336]: Content Checks: Message > 9DECD35316.21440 is bigger than 13312000 bytes > Sep 29 12:47:52 smtp MailScanner[31336]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.21440 > Sep 29 12:47:59 smtp MailScanner[31513]: Content Checks: Message > 9DECD35316.383FF is bigger than 13312000 bytes > Sep 29 12:47:59 smtp MailScanner[31513]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.383FF > Sep 29 12:48:05 smtp MailScanner[31553]: Content Checks: Message > 9DECD35316.CDB95 is bigger than 13312000 bytes > Sep 29 12:48:05 smtp MailScanner[31553]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.CDB95 > Sep 29 12:48:11 smtp MailScanner[31523]: Content Checks: Message > 9DECD35316.F07D0 is bigger than 13312000 bytes > Sep 29 12:48:11 smtp MailScanner[31523]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.F07D0 > Sep 29 12:48:18 smtp MailScanner[31582]: Content Checks: Message > 9DECD35316.C9CE2 is bigger than 13312000 bytes > Sep 29 12:48:18 smtp MailScanner[31582]: Saved entire message to > /usr/local/spool/MailScanner/quarantine/20140929/9DECD35316.C9CE2 > Sep 29 12:48:24 smtp MailScanner[31499]: Content Checks: Message > 9DECD35316.01EFE is bigger than 13312000 bytes > > > > -- > -------------------------------------------------------------------------------------------------------------------------------------- > ?Race the rain, Ride the wind & Chase the sunset. > Only a biker understands.? > -------------------------------------------------------------------------------------------------------------------------------------- > > > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From glenn.steen at gmail.com Tue Sep 30 10:51:51 2014 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue, 30 Sep 2014 11:51:51 +0200 Subject: Use mailscanner for content protection In-Reply-To: <39EC22A9-9D04-4EC3-8F01-1A6283224E01@gmail.com> References: <39EC22A9-9D04-4EC3-8F01-1A6283224E01@gmail.com> Message-ID: .... As in the MCP feature of MailScanner? (MCP = Message Content Protection... A misnomer, IMO:-) What that basically is is another instantiation of SpamAssassin, whith a disjunct set of SA-rules. Used to be very popular back in the days, before Jules implemented custom SpamAssassin rule actions, which pretty much removed the need for the MCP implementation (you can create the logic separately, with just one SA instance running which is, from a performance and manageability standpoint, much better). I'm pretty sure you can find examples of how to implement this in the mail archives from way back when (years!). MCP as such is described on the official website (if it hasn't been removed recently), in the book and somewhat on the wiki. Cheers! -- -- Glenn On 30 September 2014 10:26, Boyd wrote: > Hi All, > > Is there any sample configuration about using mailscanner for content protection? > > Thanks a lot! > > Boyd > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -- -- Glenn email: glenn < dot > steen < at > gmail < dot > com work: glenn < dot > steen < at > ap1 < dot > se From alex at vidadigital.com.pa Tue Sep 30 11:32:15 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Tue, 30 Sep 2014 05:32:15 -0500 Subject: Use mailscanner for content protection In-Reply-To: <39EC22A9-9D04-4EC3-8F01-1A6283224E01@gmail.com> References: <39EC22A9-9D04-4EC3-8F01-1A6283224E01@gmail.com> Message-ID: /etc/MailScanner/MailScanner.conf is a great place to start... Everything's commented and explained using examples. *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Sep 30, 2014 at 3:26 AM, Boyd wrote: > Hi All, > > Is there any sample configuration about using mailscanner for content > protection? > > Thanks a lot! > > Boyd > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140930/46974303/attachment.html From ryan.virgo at gmail.com Tue Sep 30 11:32:05 2014 From: ryan.virgo at gmail.com (Ryan Braganza) Date: Tue, 30 Sep 2014 16:02:05 +0530 Subject: Mails get quarantined multiple times In-Reply-To: References: Message-ID: Thanks Glenn I will go for an upgrade On Tue, Sep 30, 2014 at 3:00 PM, Glenn Steen wrote: > Oooh, that's old! > > Don't think MailScanner had the crash detection code in it then, so > basically any email that could crash MailScanner (it happens, > infriquently, but...:-), would appear as a loop of the kind you > describe. only remedy back then was to do what you've done already... > Removing the offending message from the queue manually. > > If you upgrade to the latest/greatest, it includes logic (the > processing database feature) that will automatically remove any > message/queue ID (and quarantine it) that gets seen more than a set > number of times (6 by default). > > So... go do that upgrade;) > > Cheers! > -- > -- Glenn > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140930/cc8d71ca/attachment.html From glenn.steen at gmail.com Tue Sep 30 13:23:58 2014 From: glenn.steen at gmail.com (Glenn Steen) Date: Tue, 30 Sep 2014 14:23:58 +0200 Subject: MailScanner starting new parent processes In-Reply-To: <66D66F191D8746AAA331022C1F6B5C28@M2007> References: <0be801cfdc14$d9c55a80$8d500f80$@svpelican.com> <66D66F191D8746AAA331022C1F6B5C28@M2007> Message-ID: Good to know. I had a much smaller but similar hiccup when going to CentOS 7, but that was mostly attributed to my ... noobishness when it comes to systemd (no noob any more:-). BTW, Chris... Are you the same guy who, together with me and a few swiss guys, was very ... intoxicated... at the Langebro pub in Copenhagen after the SimCorp GTS a few years ago?:-) Cheers! -- -- Glenn From phil.randal at hoopleltd.co.uk Tue Sep 30 14:28:24 2014 From: phil.randal at hoopleltd.co.uk (Randal, Phil) Date: Tue, 30 Sep 2014 13:28:24 +0000 Subject: MailScanner starting new parent processes In-Reply-To: References: <0be801cfdc14$d9c55a80$8d500f80$@svpelican.com> <66D66F191D8746AAA331022C1F6B5C28@M2007> Message-ID: <7CA580B59C1ABD45B4614ED90D4C7B857EC616CE@HC-EXMBX04.herefordshire.gov.uk> Hi Glenn, What was your workaround for CentOS 7? Cheers, Phil -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Glenn Steen Sent: 30 September 2014 13:24 To: MailScanner discussion Subject: Re: MailScanner starting new parent processes Good to know. I had a much smaller but similar hiccup when going to CentOS 7, but that was mostly attributed to my ... noobishness when it comes to systemd (no noob any more:-). BTW, Chris... Are you the same guy who, together with me and a few swiss guys, was very ... intoxicated... at the Langebro pub in Copenhagen after the SimCorp GTS a few years ago?:-) Cheers! -- -- Glenn -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: Plough Lane, Hereford, HR4 0LE "Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."