From NOVAK.TOMAZ at adria-mobil.si  Mon Jul  4 08:05:20 2016
From: NOVAK.TOMAZ at adria-mobil.si (=?iso-8859-2?Q?NOVAK_TOMA=AE?=)
Date: Mon, 4 Jul 2016 08:05:20 +0000
Subject: MailScanner/MailWatch error after a while writing into MYSQL,
 please help
Message-ID: <6EE6CBB68B02804781F8CF38D3F0E4730167670F@ADRIA22.adria-mobil.si>

Hi!

I have the following problem:

MailWatch Version = 1.2.0 - RC1 DEV
MailScanner Version = 4.85.2
PHP Version = 5.6.1
MySQL Version = 5.6.17

After a day or so, one email comes which brakes my system.

Error`s:

Jun 29 17:38:19 ADRIA40 MailScanner[13859]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x94\x9C A...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 13166.
Jun 30 05:49:56 ADRIA40 MailScanner[16295]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x94\xA5' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 2001.
Jun 30 12:11:04 ADRIA40 MailScanner[16766]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x99\x8C' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 11952.
Jul 01 08:15:14 ADRIA40 MailScanner[24525]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x8D\xA8 S...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 409.
Jul 01 13:24:52 ADRIA40 MailScanner[5449]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x8E\xAC' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 16878.
Jul 02 05:00:33 ADRIA40 MailScanner[5466]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x93\xA9 I...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 133.
Jul 02 11:31:05 ADRIA40 MailScanner[12677]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x8E\xAF P...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 4442.
Jul 03 12:40:54 ADRIA40 MailScanner[16371]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x92\x96 N...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 7529.
Jul 04 08:01:05 ADRIA40 MailScanner[8328]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging, it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st execute failed: Incorrect string value: '\xF0\x9F\x91\x89\xC2\xA0...' for column 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 135, <CLIENT> line 5803.

* Frequency after this error appears is about 1-2 times per day.
After this error i get on MailScanner child which is stuck, and i get no new rows into my maillog MYSQL table.
I have to kill that >stuck< MailScanner child and restart MailScanner, after which my system is working again with no problems.

My mailscanner DB into which i am writing has Character set: utf8mb4 and Collation: utf8mb4_general_ci

Excluding this my mail system is working for years without any problems.

Can you please help me with this !

Thank you all!

With regards,

Toma? Novak
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160704/6df9f4df/attachment.html>

From jerry.benton at mailborder.com  Mon Jul  4 09:32:26 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Mon, 4 Jul 2016 05:32:26 -0400
Subject: MailScanner/MailWatch error after a while writing into MYSQL,
 please help
In-Reply-To: <6EE6CBB68B02804781F8CF38D3F0E4730167670F@ADRIA22.adria-mobil.si>
References: <6EE6CBB68B02804781F8CF38D3F0E4730167670F@ADRIA22.adria-mobil.si>
Message-ID: <CAED3VzC6OkVz-pcrUsYX-6q7S=XP7=U2F947Hm9Ec6S0OkO+Lg@mail.gmail.com>

Tomaz,

You really should ask the MailWatch support list.


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?NOVAK TOMA? <novak.tomaz at adria-mobil.si>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 4, 2016 at 5:17:55 AM
To:?mailscanner at lists.mailscanner.info <mailscanner at lists.mailscanner.info>
Subject:? MailScanner/MailWatch error after a while writing into
MYSQL, please help

> Hi!
>
> I have the following problem:
>
> MailWatch Version = 1.2.0 - RC1 DEV
> MailScanner Version = 4.85.2
> PHP Version = 5.6.1
> MySQL Version = 5.6.17
>
> After a day or so, one email comes which brakes my system.
>
> Error`s:
>
> Jun 29 17:38:19 ADRIA40 MailScanner[13859]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x94\x9C A...' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 13166.
> Jun 30 05:49:56 ADRIA40 MailScanner[16295]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x94\xA5' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 2001.
> Jun 30 12:11:04 ADRIA40 MailScanner[16766]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x99\x8C' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 11952.
> Jul 01 08:15:14 ADRIA40 MailScanner[24525]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x8D\xA8 S...' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 409.
> Jul 01 13:24:52 ADRIA40 MailScanner[5449]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x8E\xAC' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 16878.
> Jul 02 05:00:33 ADRIA40 MailScanner[5466]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x93\xA9 I...' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 133.
> Jul 02 11:31:05 ADRIA40 MailScanner[12677]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x8E\xAF P...' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 4442.
> Jul 03 12:40:54 ADRIA40 MailScanner[16371]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x92\x96 N...' for column 'subject'
> at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 7529.
> Jul 04 08:01:05 ADRIA40 MailScanner[8328]: Could not use Custom Function code MailScanner::CustomConfig::InitMailWatchLogging,
> it could not be "eval"ed. Make sure the module is correct with perl -wc (Error: DBD::mysql::st
> execute failed: Incorrect string value: '\xF0\x9F\x91\x89\xC2\xA0...' for column
> 'subject' at row 1 at /usr/share/MailScanner/MailScanner/CustomFunctions/MailWatch.pm
> line 135, line 5803.
>
> * Frequency after this error appears is about 1-2 times per day.
> After this error i get on MailScanner child which is stuck, and i get no new rows into my
> maillog MYSQL table.
> I have to kill that >stuck< MailScanner child and restart MailScanner, after which my
> system is working again with no problems.
>
> My mailscanner DB into which i am writing has Character set: utf8mb4 and Collation: utf8mb4_general_ci
>
> Excluding this my mail system is working for years without any problems.
>
> Can you please help me with this !
>
> Thank you all!
>
> With regards,
>
> Toma? Novak
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From richard at fastnet.co.uk  Wed Jul  6 15:57:12 2016
From: richard at fastnet.co.uk (Richard Mealing)
Date: Wed, 6 Jul 2016 15:57:12 +0000
Subject: RBL Checks within mailscanner - no spam scanning
Message-ID: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local>

Hi everyone,

I have a request from a client who wants to see all the RBL checks within mailscanner, but they don't want to do any SA spam scanning, just AV scanning.
Is this possible?

I've never done RBL checks on mailscanner before. I'm wondering how it works. I read somewhere that is quarantines the emails, is that correct? Is there any way to bounce the emails back to the sender?


Thanks,
Rich
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160706/e460114d/attachment.html>

From kevin.miller at juneau.org  Wed Jul  6 16:43:02 2016
From: kevin.miller at juneau.org (Kevin Miller)
Date: Wed, 6 Jul 2016 16:43:02 +0000
Subject: RBL Checks within mailscanner - no spam scanning
In-Reply-To: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local>
References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local>
Message-ID: <be64c4cbd4424f4197ce855be2407c83@City-Exch-DB2.cbj.local>

You don't want to bounce mail from w/in MailScanner - so much of it (close to all I'd wager) has a forged from address and/or envelope sender address that the bounce will end up going to someone that had nothing to do with the spam.  That's a good way to get yourself blacklisted.  An old trick of spammers is to send to bogus addresses with a good from address.  The spam is bounced to the from address who is the real target, disguised as a non-delivery report.  Pretty sleazy.

The proper way is to reject at the MTA rather than in MailScanner, as that deals directly with the sending server.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357

From: MailScanner [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info] On Behalf Of Richard Mealing
Sent: Wednesday, July 06, 2016 7:57 AM
To: MailScanner discussion (mailscanner at lists.mailscanner.info)
Subject: RBL Checks within mailscanner - no spam scanning

Hi everyone,

I have a request from a client who wants to see all the RBL checks within mailscanner, but they don't want to do any SA spam scanning, just AV scanning.
Is this possible?

I've never done RBL checks on mailscanner before. I'm wondering how it works. I read somewhere that is quarantines the emails, is that correct? Is there any way to bounce the emails back to the sender?


Thanks,
Rich
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160706/15ba193f/attachment.html>

From mailscanner at replies.cyways.com  Wed Jul  6 17:15:20 2016
From: mailscanner at replies.cyways.com (Peter Lemieux)
Date: Wed, 6 Jul 2016 13:15:20 -0400
Subject: RBL Checks within mailscanner - no spam scanning
In-Reply-To: <be64c4cbd4424f4197ce855be2407c83@City-Exch-DB2.cbj.local>
References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local>
 <be64c4cbd4424f4197ce855be2407c83@City-Exch-DB2.cbj.local>
Message-ID: <577D3CA8.3050002@replies.cyways.com>

I prefer to let SpamAssassin do the RBL checks since they give the different 
RBLs varying weights.  Using a milter or some other method requires you to 
make a yes or no decision during the SMTP exchange.  Leaving it to SA lets 
you put the RBL results into a bigger context.

However your client's request might work better at the SMTP level though 
since they only want to use blacklists.  So you could use some form of 
milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn off 
spam scanning in MailScanner altogether.

Alternatively, you could put a copy of /usr/share/spamassassin/72_scores.cf 
in /etc/mail/spamassassin and set all the scores to zero except for the 
RBL-related ones.  Then you can let MailScanner invoke SpamAssassin and only 
the RBL scores will apply.

I definitely agree with Kevin that bouncing either spam or viruses back to 
their alleged "senders" is a bad idea. You'll just flood your outbound mail 
queue with undeliverable messages directed to bogus spamming accounts.

Peter


On 07/06/2016 12:43 PM, Kevin Miller wrote:
> You don?t want to bounce mail from w/in MailScanner ? so much of it (close
> to all I?d wager) has a forged from address and/or envelope sender address
> that the bounce will end up going to someone that had nothing to do with the
> spam.  That?s a good way to get yourself blacklisted.  An old trick of
> spammers is to send to bogus addresses with a good from address.  The spam
> is bounced to the from address who is the real target, disguised as a
> non-delivery report.  Pretty sleazy.
>
> The proper way is to reject at the MTA rather than in MailScanner, as that
> deals directly with the sending server.
>
> ...Kevin
>
> --
>
> Kevin Miller
>
> Network/email Administrator, CBJ MIS Dept.
>
> 155 South Seward Street
>
> Juneau, Alaska 99801
>
> Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357
>
> *From:*MailScanner
> [mailto:mailscanner-bounces+kevin.miller=juneau.org at lists.mailscanner.info]
> *On Behalf Of *Richard Mealing
> *Sent:* Wednesday, July 06, 2016 7:57 AM
> *To:* MailScanner discussion (mailscanner at lists.mailscanner.info)
> *Subject:* RBL Checks within mailscanner - no spam scanning
>
> Hi everyone,
>
> I have a request from a client who wants to see all the RBL checks within
> mailscanner, but they don?t want to do any SA spam scanning, just AV scanning.
>
> Is this possible?
>
> I?ve never done RBL checks on mailscanner before. I?m wondering how it
> works. I read somewhere that is quarantines the emails, is that correct? Is
> there any way to bounce the emails back to the sender?
>
> Thanks,
>
> Rich
>
>
>
>
>

From maxsec at gmail.com  Wed Jul  6 18:06:55 2016
From: maxsec at gmail.com (Martin Hepworth)
Date: Wed, 06 Jul 2016 18:06:55 +0000
Subject: RBL Checks within mailscanner - no spam scanning
In-Reply-To: <577D3CA8.3050002@replies.cyways.com>
References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local>
 <be64c4cbd4424f4197ce855be2407c83@City-Exch-DB2.cbj.local>
 <577D3CA8.3050002@replies.cyways.com>
Message-ID: <CAGDKor+uTiyy3hN5wmVcr9H7BHW=xremUf+T-wxmr7ZqJaA=8w@mail.gmail.com>

Sure its possible and you can set to a min. Number of rbls before its
marked as spam

but why is the client asking for this? Seems like youve got a solution to a
problem but whats the problem?
On Wed, 6 Jul 2016 at 18:13, Peter Lemieux <mailscanner at replies.cyways.com>
wrote:

> I prefer to let SpamAssassin do the RBL checks since they give the
> different
> RBLs varying weights.  Using a milter or some other method requires you to
> make a yes or no decision during the SMTP exchange.  Leaving it to SA lets
> you put the RBL results into a bigger context.
>
> However your client's request might work better at the SMTP level though
> since they only want to use blacklists.  So you could use some form of
> milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn
> off
> spam scanning in MailScanner altogether.
>
> Alternatively, you could put a copy of /usr/share/spamassassin/
> 72_scores.cf
> in /etc/mail/spamassassin and set all the scores to zero except for the
> RBL-related ones.  Then you can let MailScanner invoke SpamAssassin and
> only
> the RBL scores will apply.
>
> I definitely agree with Kevin that bouncing either spam or viruses back to
> their alleged "senders" is a bad idea. You'll just flood your outbound mail
> queue with undeliverable messages directed to bogus spamming accounts.
>
> Peter
>
>
> On 07/06/2016 12:43 PM, Kevin Miller wrote:
> > You don?t want to bounce mail from w/in MailScanner ? so much of it
> (close
> > to all I?d wager) has a forged from address and/or envelope sender
> address
> > that the bounce will end up going to someone that had nothing to do with
> the
> > spam.  That?s a good way to get yourself blacklisted.  An old trick of
> > spammers is to send to bogus addresses with a good from address.  The
> spam
> > is bounced to the from address who is the real target, disguised as a
> > non-delivery report.  Pretty sleazy.
> >
> > The proper way is to reject at the MTA rather than in MailScanner, as
> that
> > deals directly with the sending server.
> >
> > ...Kevin
> >
> > --
> >
> > Kevin Miller
> >
> > Network/email Administrator, CBJ MIS Dept.
> >
> > 155 South Seward Street
> >
> > Juneau, Alaska 99801
> >
> > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No:
> 307357
> >
> > *From:*MailScanner
> > [mailto:mailscanner-bounces+kevin.miller=
> juneau.org at lists.mailscanner.info]
> > *On Behalf Of *Richard Mealing
> > *Sent:* Wednesday, July 06, 2016 7:57 AM
> > *To:* MailScanner discussion (mailscanner at lists.mailscanner.info)
> > *Subject:* RBL Checks within mailscanner - no spam scanning
> >
> > Hi everyone,
> >
> > I have a request from a client who wants to see all the RBL checks within
> > mailscanner, but they don?t want to do any SA spam scanning, just AV
> scanning.
> >
> > Is this possible?
> >
> > I?ve never done RBL checks on mailscanner before. I?m wondering how it
> > works. I read somewhere that is quarantines the emails, is that correct?
> Is
> > there any way to bounce the emails back to the sender?
> >
> > Thanks,
> >
> > Rich
> >
> >
> >
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160706/2c4e19f4/attachment.html>

From jorgeaaq at gmail.com  Wed Jul  6 18:59:43 2016
From: jorgeaaq at gmail.com (Jorge Amador Arenas Quezada)
Date: Wed, 6 Jul 2016 13:59:43 -0500
Subject: RBL Checks within mailscanner - no spam scanning
In-Reply-To: <CAGDKor+uTiyy3hN5wmVcr9H7BHW=xremUf+T-wxmr7ZqJaA=8w@mail.gmail.com>
References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local>
 <be64c4cbd4424f4197ce855be2407c83@City-Exch-DB2.cbj.local>
 <577D3CA8.3050002@replies.cyways.com>
 <CAGDKor+uTiyy3hN5wmVcr9H7BHW=xremUf+T-wxmr7ZqJaA=8w@mail.gmail.com>
Message-ID: <002001d1d7b8$8f7ad080$ae707180$@gmail.com>

Virus Scanning = yes 

Spam checks = yes

Spam List =  spamhaus-ZEN spamhaus.org spamhaus-XBL RATS NJABL spamcop.net             CBL BARRACUDA                JustSpam UCEPROTECT

Spam List To Be Spam = 2

Spam List to Reach High Score = 3

Use Spamassassin = no 

 

Jorge Arenas

 

 

From: MailScanner [mailto:mailscanner-bounces+jorgeaaq=gmail.com at lists.mailscanner.info] On Behalf Of Martin Hepworth
Sent: mi?rcoles, 6 de julio de 2016 01:07 p. m.
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: RBL Checks within mailscanner - no spam scanning

 

Sure its possible and you can set to a min. Number of rbls before its marked as spam

but why is the client asking for this? Seems like youve got a solution to a problem but whats the problem?

On Wed, 6 Jul 2016 at 18:13, Peter Lemieux <mailscanner at replies.cyways.com <mailto:mailscanner at replies.cyways.com> > wrote:

I prefer to let SpamAssassin do the RBL checks since they give the different
RBLs varying weights.  Using a milter or some other method requires you to
make a yes or no decision during the SMTP exchange.  Leaving it to SA lets
you put the RBL results into a bigger context.

However your client's request might work better at the SMTP level though
since they only want to use blacklists.  So you could use some form of
milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn off
spam scanning in MailScanner altogether.

Alternatively, you could put a copy of /usr/share/spamassassin/72_scores.cf <http://72_scores.cf> 
in /etc/mail/spamassassin and set all the scores to zero except for the
RBL-related ones.  Then you can let MailScanner invoke SpamAssassin and only
the RBL scores will apply.

I definitely agree with Kevin that bouncing either spam or viruses back to
their alleged "senders" is a bad idea. You'll just flood your outbound mail
queue with undeliverable messages directed to bogus spamming accounts.

Peter


On 07/06/2016 12:43 PM, Kevin Miller wrote:
> You don?t want to bounce mail from w/in MailScanner ? so much of it (close
> to all I?d wager) has a forged from address and/or envelope sender address
> that the bounce will end up going to someone that had nothing to do with the
> spam.  That?s a good way to get yourself blacklisted.  An old trick of
> spammers is to send to bogus addresses with a good from address.  The spam
> is bounced to the from address who is the real target, disguised as a
> non-delivery report.  Pretty sleazy.
>
> The proper way is to reject at the MTA rather than in MailScanner, as that
> deals directly with the sending server.
>
> ...Kevin
>
> --
>
> Kevin Miller
>
> Network/email Administrator, CBJ MIS Dept.
>
> 155 South Seward Street
>
> Juneau, Alaska 99801
>
> Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357
>
> *From:*MailScanner
> [mailto:mailscanner-bounces+kevin.miller <mailto:mailscanner-bounces%2Bkevin.miller> =juneau.org at lists.mailscanner.info <mailto:juneau.org at lists.mailscanner.info> ]
> *On Behalf Of *Richard Mealing
> *Sent:* Wednesday, July 06, 2016 7:57 AM
> *To:* MailScanner discussion (mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> )
> *Subject:* RBL Checks within mailscanner - no spam scanning
>
> Hi everyone,
>
> I have a request from a client who wants to see all the RBL checks within
> mailscanner, but they don?t want to do any SA spam scanning, just AV scanning.
>
> Is this possible?
>
> I?ve never done RBL checks on mailscanner before. I?m wondering how it
> works. I read somewhere that is quarantines the emails, is that correct? Is
> there any way to bounce the emails back to the sender?
>
> Thanks,
>
> Rich
>
>
>
>
>


--
MailScanner mailing list
mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info> 
http://lists.mailscanner.info/listinfo/mailscanner

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160706/5193c8d1/attachment.html>

From richard at fastnet.co.uk  Thu Jul  7 09:22:14 2016
From: richard at fastnet.co.uk (Richard Mealing)
Date: Thu, 7 Jul 2016 09:22:14 +0000
Subject: RBL Checks within mailscanner - no spam scanning
In-Reply-To: <002001d1d7b8$8f7ad080$ae707180$@gmail.com>
References: <6EE47AF64C339A4F8F7F50507241B3795F5D5251@BTN-EXCHANGE-V1.fastnet.local>
 <be64c4cbd4424f4197ce855be2407c83@City-Exch-DB2.cbj.local>
 <577D3CA8.3050002@replies.cyways.com>
 <CAGDKor+uTiyy3hN5wmVcr9H7BHW=xremUf+T-wxmr7ZqJaA=8w@mail.gmail.com>
 <002001d1d7b8$8f7ad080$ae707180$@gmail.com>
Message-ID: <6EE47AF64C339A4F8F7F50507241B3795F5D5A78@BTN-EXCHANGE-V1.fastnet.local>

This is a bespoke solution for their helpdesk who want their own servers incoming and outgoing. They don?t have much SSH experience, so I wanted to allow mailscanner to do the RBL checks and possibly quarantine the RBL emails, so they can see this via mailwatch. I?m thinking that this will fill up the drives for the machine, but the drives are going to be pretty large so I don?t think that would be a problem.
I might just use the mta to run my rbl checks to be honest, because I know this is the best option, but I thought I would ask the question since I have never tried this before. I want to give them some options but I want to give them the correct options.

Or, does anyone know if there is a sendmail plugin that could inject the RBL sql queries into the mailwatch database, or another database I could link to the mailwatch database?

Thanks,
Rich


From: MailScanner [mailto:mailscanner-bounces+richard=fastnet.co.uk at lists.mailscanner.info] On Behalf Of Jorge Amador Arenas Quezada
Sent: Wednesday, July 6, 2016 20:00
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: RBL Checks within mailscanner - no spam scanning

Virus Scanning = yes
Spam checks = yes
Spam List =  spamhaus-ZEN spamhaus.org spamhaus-XBL RATS NJABL spamcop.net             CBL BARRACUDA                JustSpam UCEPROTECT
Spam List To Be Spam = 2
Spam List to Reach High Score = 3
Use Spamassassin = no

Jorge Arenas


From: MailScanner [mailto:mailscanner-bounces+jorgeaaq=gmail.com at lists.mailscanner.info] On Behalf Of Martin Hepworth
Sent: mi?rcoles, 6 de julio de 2016 01:07 p. m.
To: MailScanner Discussion <mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>>
Subject: Re: RBL Checks within mailscanner - no spam scanning

Sure its possible and you can set to a min. Number of rbls before its marked as spam

but why is the client asking for this? Seems like youve got a solution to a problem but whats the problem?
On Wed, 6 Jul 2016 at 18:13, Peter Lemieux <mailscanner at replies.cyways.com<mailto:mailscanner at replies.cyways.com>> wrote:
I prefer to let SpamAssassin do the RBL checks since they give the different
RBLs varying weights.  Using a milter or some other method requires you to
make a yes or no decision during the SMTP exchange.  Leaving it to SA lets
you put the RBL results into a bigger context.

However your client's request might work better at the SMTP level though
since they only want to use blacklists.  So you could use some form of
milter with your mail exchanger (sendmail, Postfix, exim, etc.) and turn off
spam scanning in MailScanner altogether.

Alternatively, you could put a copy of /usr/share/spamassassin/72_scores.cf<http://72_scores.cf>
in /etc/mail/spamassassin and set all the scores to zero except for the
RBL-related ones.  Then you can let MailScanner invoke SpamAssassin and only
the RBL scores will apply.

I definitely agree with Kevin that bouncing either spam or viruses back to
their alleged "senders" is a bad idea. You'll just flood your outbound mail
queue with undeliverable messages directed to bogus spamming accounts.

Peter


On 07/06/2016 12:43 PM, Kevin Miller wrote:
> You don?t want to bounce mail from w/in MailScanner ? so much of it (close
> to all I?d wager) has a forged from address and/or envelope sender address
> that the bounce will end up going to someone that had nothing to do with the
> spam.  That?s a good way to get yourself blacklisted.  An old trick of
> spammers is to send to bogus addresses with a good from address.  The spam
> is bounced to the from address who is the real target, disguised as a
> non-delivery report.  Pretty sleazy.
>
> The proper way is to reject at the MTA rather than in MailScanner, as that
> deals directly with the sending server.
>
> ...Kevin
>
> --
>
> Kevin Miller
>
> Network/email Administrator, CBJ MIS Dept.
>
> 155 South Seward Street
>
> Juneau, Alaska 99801
>
> Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357
>
> *From:*MailScanner
> [mailto:mailscanner-bounces+kevin.miller<mailto:mailscanner-bounces%2Bkevin.miller>=juneau.org at lists.mailscanner.info<mailto:juneau.org at lists.mailscanner.info>]
> *On Behalf Of *Richard Mealing
> *Sent:* Wednesday, July 06, 2016 7:57 AM
> *To:* MailScanner discussion (mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>)
> *Subject:* RBL Checks within mailscanner - no spam scanning
>
> Hi everyone,
>
> I have a request from a client who wants to see all the RBL checks within
> mailscanner, but they don?t want to do any SA spam scanning, just AV scanning.
>
> Is this possible?
>
> I?ve never done RBL checks on mailscanner before. I?m wondering how it
> works. I read somewhere that is quarantines the emails, is that correct? Is
> there any way to bounce the emails back to the sender?
>
> Thanks,
>
> Rich
>
>
>
>
>


--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/listinfo/mailscanner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160707/900f8089/attachment.html>

From NOVAK.TOMAZ at adria-mobil.si  Fri Jul  8 07:49:35 2016
From: NOVAK.TOMAZ at adria-mobil.si (=?iso-8859-2?Q?NOVAK_TOMA=AE?=)
Date: Fri, 8 Jul 2016 07:49:35 +0000
Subject: MailScanner after restarting itself SpamAssasin stops working
Message-ID: <6EE6CBB68B02804781F8CF38D3F0E4730167B95B@ADRIA22.adria-mobil.si>

Hi!

I have a problem, after MailScanner restarts himself i get this:

Jul 08 07:00:11 server MailScanner[30506]: Could not use Custom Function code /usr/share/MailScanner/perl/custom/MailWatch.pm, it could not be "require"d. Make sure the last line is "1;" and the module is correct with perl -wc (Error: Can't locate Storable.pm:   Permission denied at /usr/share/MailScanner/perl/custom/MailWatch.pm line 25.)
Jul 08 07:00:11 server MailScanner[30506]: BEGIN failed--compilation aborted at /usr/share/MailScanner/perl/custom/MailWatch.pm line 25.
Jul 08 07:00:11 server MailScanner[30506]: Compilation failed in require at /usr/share/MailScanner/perl/MailScanner/Config.pm line 752.
Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file /etc/MailScanner/MailScanner.conf
Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file /etc/MailScanner/conf.d/README
Jul 08 07:00:11 server MailScanner[30506]: Read 501 hostnames from the phishing whitelist
Jul 08 07:00:11 server MailScanner[30506]: Read 15915 hostnames from the phishing blacklists
Jul 08 07:00:11 server MailScanner[30506]: Config: calling custom init function MailWatchLogging
Jul 08 07:00:11 server MailScanner[30506]: You want to use SpamAssassin but have not installed it.
Jul 08 07:00:11 server MailScanner[30506]: I will run without SpamAssassin for now, you will not detect much spam until you install SpamAssassin.

perl -wc /usr/share/MailScanner/perl/custom/MailWatch.pm returns no errors (it is working after manual restart of MailScanner as root or postfix user).

After that MailScanner works, email flow works, but it is not checked with SpamAssasin.
What is going on here ?

I get the same if i restart MailScanner from cron with:
/etc/init.d/./mailscanner restart or
/usr/sbin/ms-update-sa

But if i run /usr/sbin/ms-update-sa or /etc/init.d/./mailscanner restart manualy as root, MailScanner restarts itself without any problems.

My software versions:

MailScanner Version = 5.0.2
PHP Version = 5.5.14
MySQL Version = 5.6.30

What am i doing wrong, i can not figure it out :(





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160708/cf5470ff/attachment.html>

From sistemisti-posta at csi.it  Fri Jul  8 07:00:52 2016
From: sistemisti-posta at csi.it (Sistemisti Posta)
Date: Fri, 8 Jul 2016 09:00:52 +0200
Subject: [Help] scamnailer with Clamav FP
Message-ID: <4b991a7a-00f2-5bb0-d5af-27b6f2bf68ed@csi.it>

Hello,

  I use scamnailer.ndb with Clamav:

   http://www.scamnailer.info/documentation.html

During last days I experience many false positives with 
@beniculturali.it domain.

I checked with beniculturali.it's admins, and it doesn't seem that they 
are currently victim of phishing or email spoofing.

Could you try to remove the beniculturali.it addresses from the list?

Thank you very much

     Marco

From rcooper at dwford.com  Fri Jul  8 15:19:57 2016
From: rcooper at dwford.com (Rick Cooper)
Date: Fri, 8 Jul 2016 11:19:57 -0400
Subject: MailScanner after restarting itself SpamAssasin stops working
In-Reply-To: <6EE6CBB68B02804781F8CF38D3F0E4730167B95B@ADRIA22.adria-mobil.si>
References: <6EE6CBB68B02804781F8CF38D3F0E4730167B95B@ADRIA22.adria-mobil.si>
Message-ID: <04C03DFB136944C5A594E452A2CCED3E@SAHOMELT>

It would appear the storable perl module is not installed. Install (package
or cpan -i Storable) it and try again
 
Rick

  _____  

From: MailScanner
[mailto:mailscanner-bounces+rcooper=dwford.com at lists.mailscanner.info] On
Behalf Of NOVAK TOMA?
Sent: Friday, July 08, 2016 3:50 AM
To: mailscanner at lists.mailscanner.info
Subject: MailScanner after restarting itself SpamAssasin stops working



Hi!

 

I have a problem, after MailScanner restarts himself i get this:

 

Jul 08 07:00:11 server MailScanner[30506]: Could not use Custom Function
code /usr/share/MailScanner/perl/custom/MailWatch.pm, it could not be
"require"d. Make sure the last line is "1;" and the module is correct with
perl -wc (Error: Can't locate Storable.pm:   Permission denied at
/usr/share/MailScanner/perl/custom/MailWatch.pm line 25.)

Jul 08 07:00:11 server MailScanner[30506]: BEGIN failed--compilation aborted
at /usr/share/MailScanner/perl/custom/MailWatch.pm line 25.

Jul 08 07:00:11 server MailScanner[30506]: Compilation failed in require at
/usr/share/MailScanner/perl/MailScanner/Config.pm line 752.

Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file
/etc/MailScanner/MailScanner.conf

Jul 08 07:00:11 server MailScanner[30506]: Reading configuration file
/etc/MailScanner/conf.d/README

Jul 08 07:00:11 server MailScanner[30506]: Read 501 hostnames from the
phishing whitelist

Jul 08 07:00:11 server MailScanner[30506]: Read 15915 hostnames from the
phishing blacklists

Jul 08 07:00:11 server MailScanner[30506]: Config: calling custom init
function MailWatchLogging

Jul 08 07:00:11 server MailScanner[30506]: You want to use SpamAssassin but
have not installed it.

Jul 08 07:00:11 server MailScanner[30506]: I will run without SpamAssassin
for now, you will not detect much spam until you install SpamAssassin.

 

perl -wc /usr/share/MailScanner/perl/custom/MailWatch.pm returns no errors
(it is working after manual restart of MailScanner as root or postfix user).

 

After that MailScanner works, email flow works, but it is not checked with
SpamAssasin.

What is going on here ? 

 

I get the same if i restart MailScanner from cron with: 

/etc/init.d/./mailscanner restart or

/usr/sbin/ms-update-sa

 

But if i run /usr/sbin/ms-update-sa or /etc/init.d/./mailscanner restart
manualy as root, MailScanner restarts itself without any problems.

 

My software versions:

 

MailScanner Version = 5.0.2
PHP Version = 5.5.14
MySQL Version = 5.6.30

 

What am i doing wrong, i can not figure it out L

 

 

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160708/4bf57ed7/attachment.html>

From mark at msapiro.net  Sat Jul  9 02:26:54 2016
From: mark at msapiro.net (Mark Sapiro)
Date: Fri, 8 Jul 2016 19:26:54 -0700
Subject: [Help] scamnailer with Clamav FP
In-Reply-To: <4b991a7a-00f2-5bb0-d5af-27b6f2bf68ed@csi.it>
References: <4b991a7a-00f2-5bb0-d5af-27b6f2bf68ed@csi.it>
Message-ID: <87798392-415d-1fee-04db-efdfbbdcc9fb@msapiro.net>

On 7/8/16 12:00 AM, Sistemisti Posta wrote:
> Hello,
> 
>  I use scamnailer.ndb with Clamav:
> 
>   http://www.scamnailer.info/documentation.html
> 
> During last days I experience many false positives with
> @beniculturali.it domain.
> 
> I checked with beniculturali.it's admins, and it doesn't seem that they
> are currently victim of phishing or email spoofing.
> 
> Could you try to remove the beniculturali.it addresses from the list?


The short answer is No.

Longer answer.

There are two ways to use ScamNailer. One is with a set of SpamAssassin
rules (ScamNailer.cf) and the other is with ClamAV signatures
(scamnailer.ndb). These two ways have different implications in
MailScanner becaust one is a SpamAssassin score, and the other is an
'unofficial' virus detection.

Originally, the data for these came from some proprietary source and was
maintained by Jules and there are scripts at
<http://www.scamnailer.info/downloads.html> to produce ScamNailer.cf
<http://www.scamnailer.info/files/2/ScamNailer-2.09.gz> and
scamnailer.ndb
<http://www.scamnailer.info/files/contrib/ClamNailer-1.01.gz> from Jules
data. The latter script doesn't produce scamnailer.ndb; it just
downloads it.

There is also a 'still updated by some process unknown to me'
scamnailer.ndb at <http://www.mailscanner.eu/scamnailer.ndb> and also
distributed by sanesecurity.com.

Over the years, the source of the data for the
<http://www.scamnailer.info/files/2/ScamNailer-2.09.gz> script has
proven unreliable so I refactored that script to use the data from
<http://svn.code.sf.net/p/aper/code/phishing_reply_addresses>. That also
contains @beniculturali.it addresses. See
<https://sourceforge.net/projects/aper/> for ways to contact that project.

The current version of that script is distributed with MailScanner and
is at
<https://github.com/MailScanner/v5/blob/master/common/usr/sbin/ms-update-bad-emails>.

The data at
<http://svn.code.sf.net/p/aper/code/phishing_reply_addresses> may also
be the source of the scamnailer.ndb files, but this is unknown to me.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From jerry.benton at mailborder.com  Sun Jul 24 05:12:17 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sat, 23 Jul 2016 22:12:17 -0700
Subject: List Check
Message-ID: <CAED3VzCuwev=sGGGTVp4FAV0ZJYDGVhskf4D0snCcMwa8Jh6mg@mail.gmail.com>

Just checking to see if this thing is still working. Been quite lately.


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245

From alex at vidadigital.com.pa  Sun Jul 24 05:12:41 2016
From: alex at vidadigital.com.pa (Alex Neuman van der Hans)
Date: Sun, 24 Jul 2016 00:12:41 -0500
Subject: List Check
In-Reply-To: <CAED3VzCuwev=sGGGTVp4FAV0ZJYDGVhskf4D0snCcMwa8Jh6mg@mail.gmail.com>
References: <CAED3VzCuwev=sGGGTVp4FAV0ZJYDGVhskf4D0snCcMwa8Jh6mg@mail.gmail.com>
Message-ID: <EEC6D70E-BB8D-4C4C-B0FD-08151F11E0B1@vidadigital.com.pa>

Working?

   
Alex Neuman van der Hans Producer/Host, Vida Digital
+1 (440) 253-9789 <tel:+1 (440) 253-9789> | +507 6781-9505 <tel:+507 6781-9505> | Panama |alex at vidadigital.com.pa <mailto:alex at vidadigital.com.pa> | http://vidadigital.com.pa/ <http://vidadigital.com.pa/> |Skype: alexneuman <https://webapp.wisestamp.com/sig_iframe?origin=outlook&signature_id=5234486814965760&t=0.42697990642243466#> 
 <http://facebook.com/vidadigital>  <http://pa.linkedin.com/in/alexneuman>  <http://twitter.com/alexneuman>  <http://pinterest.com/vidadigital>  <http://youtube.com/user/reliantpty>  <http://instagram.com/vidadigital>  <http://vidadigital.com.pa.wordpress.com/>  <http://amazon.com/?tag=vidadigi-20>  <http://skype:alexneuman/?call&topic=Signature>  <http://whatsapp//send?text=Hello>



> On Jul 24, 2016, at 12:12 AM, Jerry Benton <jerry.benton at mailborder.com> wrote:
> 
> Just checking to see if this thing is still working. Been quite lately.
> 
> 
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160724/de9bf818/attachment.html>

From jerry.benton at mailborder.com  Sun Jul 24 05:13:11 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sat, 23 Jul 2016 22:13:11 -0700
Subject: List Check
In-Reply-To: <EEC6D70E-BB8D-4C4C-B0FD-08151F11E0B1@vidadigital.com.pa>
References: <CAED3VzCuwev=sGGGTVp4FAV0ZJYDGVhskf4D0snCcMwa8Jh6mg@mail.gmail.com>
 <EEC6D70E-BB8D-4C4C-B0FD-08151F11E0B1@vidadigital.com.pa>
Message-ID: <CAED3VzD3sG3irZdYEN62_JVvNpBjc45VQpmpP9f2rX_RBj+wXA@mail.gmail.com>

Yay


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Alex Neuman van der Hans <alex at vidadigital.com.pa>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 1:12:51 AM
To:?MailScanner discussion <mailscanner at lists.mailscanner.info>
Subject:? Re: List Check

> Working?
>
>
> Alex Neuman van der Hans Producer/Host, Vida Digital
> +1 (440) 253-9789 | +507 6781-9505 | Panama
> |alex at vidadigital.com.pa | http://vidadigital.com.pa/
> |Skype: alexneuman
>
>
>
>
>
>
>
>
> > On Jul 24, 2016, at 12:12 AM, Jerry Benton wrote:
> >
> > Just checking to see if this thing is still working. Been quite lately.
> >
> >
> > -
> > Jerry Benton
> > www.mailborder.com
> > +1 - 844-436-6245
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From steveb_clamav at sanesecurity.com  Sun Jul 24 06:13:10 2016
From: steveb_clamav at sanesecurity.com (Steve basford)
Date: Sun, 24 Jul 2016 07:13:10 +0100
Subject: List Check
In-Reply-To: <CAED3VzCuwev=sGGGTVp4FAV0ZJYDGVhskf4D0snCcMwa8Jh6mg@mail.gmail.com>
References: <CAED3VzCuwev=sGGGTVp4FAV0ZJYDGVhskf4D0snCcMwa8Jh6mg@mail.gmail.com>
Message-ID: <1561b892cf0.27d5.3eaa884a23ece66aada06ae82ee56aba@sanesecurity.com>




On 24 July 2016 06:13:04 Jerry Benton wrote:

> Just checking to see if this thing is still >working. Been quite lately.

If it's not working... turn if off and on again...

Cheers,

Steve
Web: sanesecurity.com
Twitter: @sanesecurity



From jorgeaaq at gmail.com  Sun Jul 24 16:55:27 2016
From: jorgeaaq at gmail.com (Jorge Arenas)
Date: Sun, 24 Jul 2016 11:55:27 -0500
Subject: List Check
In-Reply-To: <1561b892cf0.27d5.3eaa884a23ece66aada06ae82ee56aba@sanesecurity.com>
References: <CAED3VzCuwev=sGGGTVp4FAV0ZJYDGVhskf4D0snCcMwa8Jh6mg@mail.gmail.com>
 <1561b892cf0.27d5.3eaa884a23ece66aada06ae82ee56aba@sanesecurity.com>
Message-ID: <5794f312.25249d0a.3e5b9.5eee@mx.google.com>

Maybe everything is working fine

I am afraid, I am going to jinx it

Atte
Jorge A Arenas Quezada
CSA Consultores

De: Steve basford
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160724/5d38b536/attachment.html>

From Eoin.Kim at rcst.com.au  Sun Jul 24 23:10:28 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Sun, 24 Jul 2016 23:10:28 +0000
Subject: MailScanner --lint %org-name% not importing
Message-ID: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>

Hi,

I am not sure if it is the desired behaviour but my MailScanner doesn't import my configuration setting.

I made site-specific configuration file inside /etc/MailScanner/conf.d directory and inside that file I set %org-name%. However, when I run MailScanner --lint, I get this error:

***************************************************************
sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf
Read 501 hostnames from the phishing whitelist
Read 15359 hostnames from the phishing blacklists
Config: calling custom init function SQLWhitelist
Starting up SQL Whitelist
Read 0 whitelist entries
Config: calling custom init function MailWatchLogging
Started SQL Logging child
Config: calling custom init function SQLBlacklist
Starting up SQL Blacklist
Read 0 blacklist entries

Checking version numbers...
Version number in MailScanner.conf (5.0.2) is correct.

ERROR: The "envelope_sender_header" in your spamassassin.conf
ERROR: is not correct, it should match X-yoursite-MailScanner-From

MailScanner setting GID to  (1001)
MailScanner setting UID to  (106)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
pyzor: check failed: internal error, python traceback seen in response
SpamAssassin reported no errors.
Auto: Found virus scanners: clamd
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = auto"
Found these virus scanners installed: clamd
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
Virus Scanning: Clamd found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
Clamd said "eicar.com was infected: Eicar-Test-Signature"

If any of your virus scanners (clamd)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Config: calling custom end function SQLWhitelist
Closing down SQL Whitelist
Config: calling custom end function MailWatchLogging
Config: calling custom end function SQLBlacklist
Closing down SQL Blacklist

***************************************************************

So, obviously it reads my site-specific configuration file but it keeps showing that error message regarding envelope_sender_header setting. When I change %org-name% in the /etc/MailScanner/MailScanner.conf file same as my site-specific setting, the error message goes away. I believe this is a bug? Or Am I doing something wrong? Thanks a lot.

Eoin Kim
Systems Administrator

RCS Telecommunications
Level 1, 133 Mary Street
Brisbane, QLD, 4000
Office: 07 3228 0843
Mobile: 0419 726 231
Email: eoin.kim at rcst.com.au<mailto:eoin.kim at rcst.com.au>

[RCST logo drop shadow]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160724/be9b8a50/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3384 bytes
Desc: image001.jpg
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160724/be9b8a50/attachment.jpg>

From jerry.benton at mailborder.com  Sun Jul 24 23:13:47 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 24 Jul 2016 16:13:47 -0700
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
Message-ID: <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>

The files in /conf.d have no impact on spamassassin.conf. You need to
edit that file.


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:10:54 PM
To:?mailscanner at lists.mailscanner.info <mailscanner at lists.mailscanner.info>
Subject:? MailScanner --lint %org-name% not importing

> Hi,
>
> I am not sure if it is the desired behaviour but my MailScanner doesn't import my configuration
> setting.
>
> I made site-specific configuration file inside /etc/MailScanner/conf.d directory
> and inside that file I set %org-name%. However, when I run MailScanner --lint, I get this
> error:
>
> ***************************************************************
> sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint
> Trying to setlogsock(unix)
>
> Reading configuration file /etc/MailScanner/MailScanner.conf
> Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf
> Read 501 hostnames from the phishing whitelist
> Read 15359 hostnames from the phishing blacklists
> Config: calling custom init function SQLWhitelist
> Starting up SQL Whitelist
> Read 0 whitelist entries
> Config: calling custom init function MailWatchLogging
> Started SQL Logging child
> Config: calling custom init function SQLBlacklist
> Starting up SQL Blacklist
> Read 0 blacklist entries
>
> Checking version numbers...
> Version number in MailScanner.conf (5.0.2) is correct.
>
> ERROR: The "envelope_sender_header" in your spamassassin.conf
> ERROR: is not correct, it should match X-yoursite-MailScanner-From
>
> MailScanner setting GID to (1001)
> MailScanner setting UID to (106)
>
> Checking for SpamAssassin errors (if you use it)...
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> pyzor: check failed: internal error, python traceback seen in response
> SpamAssassin reported no errors.
> Auto: Found virus scanners: clamd
> Connected to Processing Attempts Database
> Created Processing Attempts Database successfully
> There are 0 messages in the Processing Attempts Database
> Using locktype = posix
> MailScanner.conf says "Virus Scanners = auto"
> Found these virus scanners installed: clamd
> ===========================================================================
> Filename Checks: Windows/DOS Executable (1 eicar.com)
> Other Checks: Found 1 problems
> Virus and Content Scanning: Starting
> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
> Virus Scanning: Clamd found 2 infections
> Infected message 1 came from 10.1.1.1
> Virus Scanning: Found 2 viruses
> ===========================================================================
> Virus Scanner test reports:
> Clamd said "eicar.com was infected: Eicar-Test-Signature"
>
> If any of your virus scanners (clamd)
> are not listed there, you should check that they are installed correctly
> and that MailScanner is finding them correctly via its virus.scanners.conf.
> Config: calling custom end function SQLWhitelist
> Closing down SQL Whitelist
> Config: calling custom end function MailWatchLogging
> Config: calling custom end function SQLBlacklist
> Closing down SQL Blacklist
>
> ***************************************************************
>
> So, obviously it reads my site-specific configuration file but it keeps showing that
> error message regarding envelope_sender_header setting. When I change %org-name%
> in the /etc/MailScanner/MailScanner.conf file same as my site-specific setting,
> the error message goes away. I believe this is a bug? Or Am I doing something wrong? Thanks
> a lot.
>
> Eoin Kim
> Systems Administrator
>
> RCS Telecommunications
> Level 1, 133 Mary Street
> Brisbane, QLD, 4000
> Office: 07 3228 0843
> Mobile: 0419 726 231
> Email: eoin.kim at rcst.com.au
>
> [RCST logo drop shadow]
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From Eoin.Kim at rcst.com.au  Sun Jul 24 23:17:10 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Sun, 24 Jul 2016 23:17:10 +0000
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
Message-ID: <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>

Hello Jerry,

Sorry but I don't understand what you said. Such a tiny information to me. I have spamassassin.conf file in /etc/MailScanner directory which is linked to /etc/spamassassin/MailScanner.cf file. So, if I change spamassassin.conf file, it should just work, correct?

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Monday, 25 July 2016 9:14 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner --lint %org-name% not importing

The files in /conf.d have no impact on spamassassin.conf. You need to edit that file.


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:10:54 PM
To:?mailscanner at lists.mailscanner.info <mailscanner at lists.mailscanner.info>
Subject:? MailScanner --lint %org-name% not importing

> Hi,
>
> I am not sure if it is the desired behaviour but my MailScanner 
> doesn't import my configuration setting.
>
> I made site-specific configuration file inside /etc/MailScanner/conf.d 
> directory and inside that file I set %org-name%. However, when I run 
> MailScanner --lint, I get this
> error:
>
> ***************************************************************
> sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying to 
> setlogsock(unix)
>
> Reading configuration file /etc/MailScanner/MailScanner.conf Reading 
> configuration file /etc/MailScanner/conf.d/mynetwork.conf
> Read 501 hostnames from the phishing whitelist Read 15359 hostnames 
> from the phishing blacklists
> Config: calling custom init function SQLWhitelist Starting up SQL 
> Whitelist Read 0 whitelist entries
> Config: calling custom init function MailWatchLogging Started SQL 
> Logging child
> Config: calling custom init function SQLBlacklist Starting up SQL 
> Blacklist Read 0 blacklist entries
>
> Checking version numbers...
> Version number in MailScanner.conf (5.0.2) is correct.
>
> ERROR: The "envelope_sender_header" in your spamassassin.conf
> ERROR: is not correct, it should match X-yoursite-MailScanner-From
>
> MailScanner setting GID to (1001)
> MailScanner setting UID to (106)
>
> Checking for SpamAssassin errors (if you use it)...
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> pyzor: check failed: internal error, python traceback seen in response 
> SpamAssassin reported no errors.
> Auto: Found virus scanners: clamd
> Connected to Processing Attempts Database Created Processing Attempts 
> Database successfully There are 0 messages in the Processing Attempts 
> Database Using locktype = posix MailScanner.conf says "Virus Scanners 
> = auto"
> Found these virus scanners installed: clamd 
> ======================================================================
> ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other 
> Checks: Found 1 problems Virus and Content Scanning: Starting
> Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus 
> Scanning: Clamd found 2 infections Infected message 1 came from 
> 10.1.1.1 Virus Scanning: Found 2 viruses 
> ======================================================================
> =====
> Virus Scanner test reports:
> Clamd said "eicar.com was infected: Eicar-Test-Signature"
>
> If any of your virus scanners (clamd)
> are not listed there, you should check that they are installed 
> correctly and that MailScanner is finding them correctly via its virus.scanners.conf.
> Config: calling custom end function SQLWhitelist Closing down SQL 
> Whitelist
> Config: calling custom end function MailWatchLogging
> Config: calling custom end function SQLBlacklist Closing down SQL 
> Blacklist
>
> ***************************************************************
>
> So, obviously it reads my site-specific configuration file but it 
> keeps showing that error message regarding envelope_sender_header 
> setting. When I change %org-name% in the 
> /etc/MailScanner/MailScanner.conf file same as my site-specific 
> setting, the error message goes away. I believe this is a bug? Or Am I doing something wrong? Thanks a lot.
>
> Eoin Kim
> Systems Administrator
>
> RCS Telecommunications
> Level 1, 133 Mary Street
> Brisbane, QLD, 4000
> Office: 07 3228 0843
> Mobile: 0419 726 231
> Email: eoin.kim at rcst.com.au
>
> [RCST logo drop shadow]
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




From jerry.benton at mailborder.com  Sun Jul 24 23:18:51 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 24 Jul 2016 16:18:51 -0700
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
 <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>
Message-ID: <CAED3VzC19=qegvFeveXXFSdwo28_JPyoWtMXR7iWjoDrrS_ibA@mail.gmail.com>

Edit /etc/MailScanner/spamassassin.conf

find:?envelope_sender_header

Change it to match what the MailScanner --lint is telling you to change it to.


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:17:25 PM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? RE: MailScanner --lint %org-name% not importing

> Hello Jerry,
>
> Sorry but I don't understand what you said. Such a tiny information to me. I have spamassassin.conf
> file in /etc/MailScanner directory which is linked to /etc/spamassassin/MailScanner.cf
> file. So, if I change spamassassin.conf file, it should just work, correct?
>
> Eoin
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info]
> On Behalf Of Jerry Benton
> Sent: Monday, 25 July 2016 9:14 AM
> To: MailScanner Discussion
> Subject: Re: MailScanner --lint %org-name% not importing
>
> The files in /conf.d have no impact on spamassassin.conf. You need to edit that file.
>
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
>
>
> -----Original Message-----
> From: Eoin Kim
> Reply: MailScanner Discussion
> Date: July 24, 2016 at 7:10:54 PM
> To: mailscanner at lists.mailscanner.info
> Subject: MailScanner --lint %org-name% not importing
>
> > Hi,
> >
> > I am not sure if it is the desired behaviour but my MailScanner
> > doesn't import my configuration setting.
> >
> > I made site-specific configuration file inside /etc/MailScanner/conf.d
> > directory and inside that file I set %org-name%. However, when I run
> > MailScanner --lint, I get this
> > error:
> >
> > ***************************************************************
> > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying to
> > setlogsock(unix)
> >
> > Reading configuration file /etc/MailScanner/MailScanner.conf Reading
> > configuration file /etc/MailScanner/conf.d/mynetwork.conf
> > Read 501 hostnames from the phishing whitelist Read 15359 hostnames
> > from the phishing blacklists
> > Config: calling custom init function SQLWhitelist Starting up SQL
> > Whitelist Read 0 whitelist entries
> > Config: calling custom init function MailWatchLogging Started SQL
> > Logging child
> > Config: calling custom init function SQLBlacklist Starting up SQL
> > Blacklist Read 0 blacklist entries
> >
> > Checking version numbers...
> > Version number in MailScanner.conf (5.0.2) is correct.
> >
> > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > ERROR: is not correct, it should match X-yoursite-MailScanner-From
> >
> > MailScanner setting GID to (1001)
> > MailScanner setting UID to (106)
> >
> > Checking for SpamAssassin errors (if you use it)...
> > Using SpamAssassin results cache
> > Connected to SpamAssassin cache database
> > pyzor: check failed: internal error, python traceback seen in response
> > SpamAssassin reported no errors.
> > Auto: Found virus scanners: clamd
> > Connected to Processing Attempts Database Created Processing Attempts
> > Database successfully There are 0 messages in the Processing Attempts
> > Database Using locktype = posix MailScanner.conf says "Virus Scanners
> > = auto"
> > Found these virus scanners installed: clamd
> > ======================================================================
> > ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other
> > Checks: Found 1 problems Virus and Content Scanning: Starting
> > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus
> > Scanning: Clamd found 2 infections Infected message 1 came from
> > 10.1.1.1 Virus Scanning: Found 2 viruses
> > ======================================================================
> > =====
> > Virus Scanner test reports:
> > Clamd said "eicar.com was infected: Eicar-Test-Signature"
> >
> > If any of your virus scanners (clamd)
> > are not listed there, you should check that they are installed
> > correctly and that MailScanner is finding them correctly via its virus.scanners.conf.
> > Config: calling custom end function SQLWhitelist Closing down SQL
> > Whitelist
> > Config: calling custom end function MailWatchLogging
> > Config: calling custom end function SQLBlacklist Closing down SQL
> > Blacklist
> >
> > ***************************************************************
> >
> > So, obviously it reads my site-specific configuration file but it
> > keeps showing that error message regarding envelope_sender_header
> > setting. When I change %org-name% in the
> > /etc/MailScanner/MailScanner.conf file same as my site-specific
> > setting, the error message goes away. I believe this is a bug? Or Am I doing something
> wrong? Thanks a lot.
> >
> > Eoin Kim
> > Systems Administrator
> >
> > RCS Telecommunications
> > Level 1, 133 Mary Street
> > Brisbane, QLD, 4000
> > Office: 07 3228 0843
> > Mobile: 0419 726 231
> > Email: eoin.kim at rcst.com.au
> >
> > [RCST logo drop shadow]
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From Eoin.Kim at rcst.com.au  Sun Jul 24 23:24:33 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Sun, 24 Jul 2016 23:24:33 +0000
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <CAED3VzC19=qegvFeveXXFSdwo28_JPyoWtMXR7iWjoDrrS_ibA@mail.gmail.com>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
 <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>
 <CAED3VzC19=qegvFeveXXFSdwo28_JPyoWtMXR7iWjoDrrS_ibA@mail.gmail.com>
Message-ID: <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn>

Jerry,

So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside that file %org-name% = mynetwork. And I changed /etc/MailScanner/spamassassin.conf file like below:

	envelope_sender_header X-mynetwork-MailScanner-From

And I also have a file /etc/MailScanner/MailScanner.conf which has this setting by default %org-name% = yoursite.

Now, when I run 'MailScanner --lint' this happens:

Checking version numbers...
Version number in MailScanner.conf (5.0.2) is correct.

ERROR: The "envelope_sender_header" in your spamassassin.conf
ERROR: is not correct, it should match X-yoursite-MailScanner-From

MailScanner setting GID to  (1001)
MailScanner setting UID to  (106)

[ ... ]

If I am right, I already did what you said. But no hope. Am I missing something?

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Monday, 25 July 2016 9:19 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: RE: MailScanner --lint %org-name% not importing

Edit /etc/MailScanner/spamassassin.conf

find:?envelope_sender_header

Change it to match what the MailScanner --lint is telling you to change it to.


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:17:25 PM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? RE: MailScanner --lint %org-name% not importing

> Hello Jerry,
>
> Sorry but I don't understand what you said. Such a tiny information to 
> me. I have spamassassin.conf file in /etc/MailScanner directory which 
> is linked to /etc/spamassassin/MailScanner.cf file. So, if I change spamassassin.conf file, it should just work, correct?
>
> Eoin
>
> -----Original Message-----
> From: MailScanner 
> [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf
> o]
> On Behalf Of Jerry Benton
> Sent: Monday, 25 July 2016 9:14 AM
> To: MailScanner Discussion
> Subject: Re: MailScanner --lint %org-name% not importing
>
> The files in /conf.d have no impact on spamassassin.conf. You need to edit that file.
>
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
>
>
> -----Original Message-----
> From: Eoin Kim
> Reply: MailScanner Discussion
> Date: July 24, 2016 at 7:10:54 PM
> To: mailscanner at lists.mailscanner.info
> Subject: MailScanner --lint %org-name% not importing
>
> > Hi,
> >
> > I am not sure if it is the desired behaviour but my MailScanner 
> > doesn't import my configuration setting.
> >
> > I made site-specific configuration file inside 
> > /etc/MailScanner/conf.d directory and inside that file I set 
> > %org-name%. However, when I run MailScanner --lint, I get this
> > error:
> >
> > ***************************************************************
> > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying 
> > to
> > setlogsock(unix)
> >
> > Reading configuration file /etc/MailScanner/MailScanner.conf Reading 
> > configuration file /etc/MailScanner/conf.d/mynetwork.conf
> > Read 501 hostnames from the phishing whitelist Read 15359 hostnames 
> > from the phishing blacklists
> > Config: calling custom init function SQLWhitelist Starting up SQL 
> > Whitelist Read 0 whitelist entries
> > Config: calling custom init function MailWatchLogging Started SQL 
> > Logging child
> > Config: calling custom init function SQLBlacklist Starting up SQL 
> > Blacklist Read 0 blacklist entries
> >
> > Checking version numbers...
> > Version number in MailScanner.conf (5.0.2) is correct.
> >
> > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > ERROR: is not correct, it should match X-yoursite-MailScanner-From
> >
> > MailScanner setting GID to (1001)
> > MailScanner setting UID to (106)
> >
> > Checking for SpamAssassin errors (if you use it)...
> > Using SpamAssassin results cache
> > Connected to SpamAssassin cache database
> > pyzor: check failed: internal error, python traceback seen in 
> > response SpamAssassin reported no errors.
> > Auto: Found virus scanners: clamd
> > Connected to Processing Attempts Database Created Processing 
> > Attempts Database successfully There are 0 messages in the 
> > Processing Attempts Database Using locktype = posix MailScanner.conf 
> > says "Virus Scanners = auto"
> > Found these virus scanners installed: clamd 
> > ====================================================================
> > == ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other
> > Checks: Found 1 problems Virus and Content Scanning: Starting
> > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus
> > Scanning: Clamd found 2 infections Infected message 1 came from
> > 10.1.1.1 Virus Scanning: Found 2 viruses 
> > ====================================================================
> > ==
> > =====
> > Virus Scanner test reports:
> > Clamd said "eicar.com was infected: Eicar-Test-Signature"
> >
> > If any of your virus scanners (clamd) are not listed there, you 
> > should check that they are installed correctly and that MailScanner 
> > is finding them correctly via its virus.scanners.conf.
> > Config: calling custom end function SQLWhitelist Closing down SQL 
> > Whitelist
> > Config: calling custom end function MailWatchLogging
> > Config: calling custom end function SQLBlacklist Closing down SQL 
> > Blacklist
> >
> > ***************************************************************
> >
> > So, obviously it reads my site-specific configuration file but it 
> > keeps showing that error message regarding envelope_sender_header 
> > setting. When I change %org-name% in the 
> > /etc/MailScanner/MailScanner.conf file same as my site-specific 
> > setting, the error message goes away. I believe this is a bug? Or Am 
> > I doing something
> wrong? Thanks a lot.
> >
> > Eoin Kim
> > Systems Administrator
> >
> > RCS Telecommunications
> > Level 1, 133 Mary Street
> > Brisbane, QLD, 4000
> > Office: 07 3228 0843
> > Mobile: 0419 726 231
> > Email: eoin.kim at rcst.com.au
> >
> > [RCST logo drop shadow]
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




From jerry.benton at mailborder.com  Sun Jul 24 23:27:05 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 24 Jul 2016 16:27:05 -0700
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
 <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>
 <CAED3VzC19=qegvFeveXXFSdwo28_JPyoWtMXR7iWjoDrrS_ibA@mail.gmail.com>
 <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn>
Message-ID: <CAED3VzACRdh+OZLqiSM0EAMqMOdAYdj2K7_AZ954aV+N_+C2Aw@mail.gmail.com>

This should be at the end of /etc/MailScanner/MailScanner.conf


#
#
# Include conf.d files automatically, so you can override any of the
# items set above with settings in your own local configuration files.
# They will be read and processed in alphabetical order.
#
#
include /etc/MailScanner/conf.d/*

# End Of File




-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:24:52 PM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? RE: MailScanner --lint %org-name% not importing

> Jerry,
>
> So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside that file %org-name%
> = mynetwork. And I changed /etc/MailScanner/spamassassin.conf file like below:
>
> envelope_sender_header X-mynetwork-MailScanner-From
>
> And I also have a file /etc/MailScanner/MailScanner.conf which has this setting by
> default %org-name% = yoursite.
>
> Now, when I run 'MailScanner --lint' this happens:
>
> Checking version numbers...
> Version number in MailScanner.conf (5.0.2) is correct.
>
> ERROR: The "envelope_sender_header" in your spamassassin.conf
> ERROR: is not correct, it should match X-yoursite-MailScanner-From
>
> MailScanner setting GID to (1001)
> MailScanner setting UID to (106)
>
> [ ... ]
>
> If I am right, I already did what you said. But no hope. Am I missing something?
>
> Eoin
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info]
> On Behalf Of Jerry Benton
> Sent: Monday, 25 July 2016 9:19 AM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> Edit /etc/MailScanner/spamassassin.conf
>
> find: envelope_sender_header
>
> Change it to match what the MailScanner --lint is telling you to change it to.
>
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
>
>
> -----Original Message-----
> From: Eoin Kim
> Reply: MailScanner Discussion
> Date: July 24, 2016 at 7:17:25 PM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> > Hello Jerry,
> >
> > Sorry but I don't understand what you said. Such a tiny information to
> > me. I have spamassassin.conf file in /etc/MailScanner directory which
> > is linked to /etc/spamassassin/MailScanner.cf file. So, if I change spamassassin.conf
> file, it should just work, correct?
> >
> > Eoin
> >
> > -----Original Message-----
> > From: MailScanner
> > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf
> > o]
> > On Behalf Of Jerry Benton
> > Sent: Monday, 25 July 2016 9:14 AM
> > To: MailScanner Discussion
> > Subject: Re: MailScanner --lint %org-name% not importing
> >
> > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file.
> >
> >
> > -
> > Jerry Benton
> > www.mailborder.com
> > +1 - 844-436-6245
> >
> >
> > -----Original Message-----
> > From: Eoin Kim
> > Reply: MailScanner Discussion
> > Date: July 24, 2016 at 7:10:54 PM
> > To: mailscanner at lists.mailscanner.info
> > Subject: MailScanner --lint %org-name% not importing
> >
> > > Hi,
> > >
> > > I am not sure if it is the desired behaviour but my MailScanner
> > > doesn't import my configuration setting.
> > >
> > > I made site-specific configuration file inside
> > > /etc/MailScanner/conf.d directory and inside that file I set
> > > %org-name%. However, when I run MailScanner --lint, I get this
> > > error:
> > >
> > > ***************************************************************
> > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying
> > > to
> > > setlogsock(unix)
> > >
> > > Reading configuration file /etc/MailScanner/MailScanner.conf Reading
> > > configuration file /etc/MailScanner/conf.d/mynetwork.conf
> > > Read 501 hostnames from the phishing whitelist Read 15359 hostnames
> > > from the phishing blacklists
> > > Config: calling custom init function SQLWhitelist Starting up SQL
> > > Whitelist Read 0 whitelist entries
> > > Config: calling custom init function MailWatchLogging Started SQL
> > > Logging child
> > > Config: calling custom init function SQLBlacklist Starting up SQL
> > > Blacklist Read 0 blacklist entries
> > >
> > > Checking version numbers...
> > > Version number in MailScanner.conf (5.0.2) is correct.
> > >
> > > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > > ERROR: is not correct, it should match X-yoursite-MailScanner-From
> > >
> > > MailScanner setting GID to (1001)
> > > MailScanner setting UID to (106)
> > >
> > > Checking for SpamAssassin errors (if you use it)...
> > > Using SpamAssassin results cache
> > > Connected to SpamAssassin cache database
> > > pyzor: check failed: internal error, python traceback seen in
> > > response SpamAssassin reported no errors.
> > > Auto: Found virus scanners: clamd
> > > Connected to Processing Attempts Database Created Processing
> > > Attempts Database successfully There are 0 messages in the
> > > Processing Attempts Database Using locktype = posix MailScanner.conf
> > > says "Virus Scanners = auto"
> > > Found these virus scanners installed: clamd
> > > ====================================================================
> > > == ===== Filename Checks: Windows/DOS Executable (1 eicar.com) Other
> > > Checks: Found 1 problems Virus and Content Scanning: Starting
> > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus
> > > Scanning: Clamd found 2 infections Infected message 1 came from
> > > 10.1.1.1 Virus Scanning: Found 2 viruses
> > > ====================================================================
> > > ==
> > > =====
> > > Virus Scanner test reports:
> > > Clamd said "eicar.com was infected: Eicar-Test-Signature"
> > >
> > > If any of your virus scanners (clamd) are not listed there, you
> > > should check that they are installed correctly and that MailScanner
> > > is finding them correctly via its virus.scanners.conf.
> > > Config: calling custom end function SQLWhitelist Closing down SQL
> > > Whitelist
> > > Config: calling custom end function MailWatchLogging
> > > Config: calling custom end function SQLBlacklist Closing down SQL
> > > Blacklist
> > >
> > > ***************************************************************
> > >
> > > So, obviously it reads my site-specific configuration file but it
> > > keeps showing that error message regarding envelope_sender_header
> > > setting. When I change %org-name% in the
> > > /etc/MailScanner/MailScanner.conf file same as my site-specific
> > > setting, the error message goes away. I believe this is a bug? Or Am
> > > I doing something
> > wrong? Thanks a lot.
> > >
> > > Eoin Kim
> > > Systems Administrator
> > >
> > > RCS Telecommunications
> > > Level 1, 133 Mary Street
> > > Brisbane, QLD, 4000
> > > Office: 07 3228 0843
> > > Mobile: 0419 726 231
> > > Email: eoin.kim at rcst.com.au
> > >
> > > [RCST logo drop shadow]
> > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/listinfo/mailscanner
> > >
> > >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From Eoin.Kim at rcst.com.au  Sun Jul 24 23:28:53 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Sun, 24 Jul 2016 23:28:53 +0000
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <CAED3VzACRdh+OZLqiSM0EAMqMOdAYdj2K7_AZ954aV+N_+C2Aw@mail.gmail.com>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
 <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>
 <CAED3VzC19=qegvFeveXXFSdwo28_JPyoWtMXR7iWjoDrrS_ibA@mail.gmail.com>
 <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn>
 <CAED3VzACRdh+OZLqiSM0EAMqMOdAYdj2K7_AZ954aV+N_+C2Aw@mail.gmail.com>
Message-ID: <fd2a0e7cd32d4f4b8ffb4935873f1fd6@BNEEXCH01.corp.qcn>

Yes, I do have except I changed it like this: include /etc/MailScanner/conf.d/*.conf. Does this make a problem? I'll test it now. Thanks.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Monday, 25 July 2016 9:27 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: RE: MailScanner --lint %org-name% not importing

This should be at the end of /etc/MailScanner/MailScanner.conf


#
#
# Include conf.d files automatically, so you can override any of the # items set above with settings in your own local configuration files.
# They will be read and processed in alphabetical order.
#
#
include /etc/MailScanner/conf.d/*

# End Of File




-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:24:52 PM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? RE: MailScanner --lint %org-name% not importing

> Jerry,
>
> So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside 
> that file %org-name% = mynetwork. And I changed /etc/MailScanner/spamassassin.conf file like below:
>
> envelope_sender_header X-mynetwork-MailScanner-From
>
> And I also have a file /etc/MailScanner/MailScanner.conf which has 
> this setting by default %org-name% = yoursite.
>
> Now, when I run 'MailScanner --lint' this happens:
>
> Checking version numbers...
> Version number in MailScanner.conf (5.0.2) is correct.
>
> ERROR: The "envelope_sender_header" in your spamassassin.conf
> ERROR: is not correct, it should match X-yoursite-MailScanner-From
>
> MailScanner setting GID to (1001)
> MailScanner setting UID to (106)
>
> [ ... ]
>
> If I am right, I already did what you said. But no hope. Am I missing something?
>
> Eoin
>
> -----Original Message-----
> From: MailScanner 
> [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf
> o]
> On Behalf Of Jerry Benton
> Sent: Monday, 25 July 2016 9:19 AM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> Edit /etc/MailScanner/spamassassin.conf
>
> find: envelope_sender_header
>
> Change it to match what the MailScanner --lint is telling you to change it to.
>
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
>
>
> -----Original Message-----
> From: Eoin Kim
> Reply: MailScanner Discussion
> Date: July 24, 2016 at 7:17:25 PM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> > Hello Jerry,
> >
> > Sorry but I don't understand what you said. Such a tiny information 
> > to me. I have spamassassin.conf file in /etc/MailScanner directory 
> > which is linked to /etc/spamassassin/MailScanner.cf file. So, if I 
> > change spamassassin.conf
> file, it should just work, correct?
> >
> > Eoin
> >
> > -----Original Message-----
> > From: MailScanner
> > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.i
> > nf
> > o]
> > On Behalf Of Jerry Benton
> > Sent: Monday, 25 July 2016 9:14 AM
> > To: MailScanner Discussion
> > Subject: Re: MailScanner --lint %org-name% not importing
> >
> > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file.
> >
> >
> > -
> > Jerry Benton
> > www.mailborder.com
> > +1 - 844-436-6245
> >
> >
> > -----Original Message-----
> > From: Eoin Kim
> > Reply: MailScanner Discussion
> > Date: July 24, 2016 at 7:10:54 PM
> > To: mailscanner at lists.mailscanner.info
> > Subject: MailScanner --lint %org-name% not importing
> >
> > > Hi,
> > >
> > > I am not sure if it is the desired behaviour but my MailScanner 
> > > doesn't import my configuration setting.
> > >
> > > I made site-specific configuration file inside 
> > > /etc/MailScanner/conf.d directory and inside that file I set 
> > > %org-name%. However, when I run MailScanner --lint, I get this
> > > error:
> > >
> > > ***************************************************************
> > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying 
> > > to
> > > setlogsock(unix)
> > >
> > > Reading configuration file /etc/MailScanner/MailScanner.conf 
> > > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf
> > > Read 501 hostnames from the phishing whitelist Read 15359 
> > > hostnames from the phishing blacklists
> > > Config: calling custom init function SQLWhitelist Starting up SQL 
> > > Whitelist Read 0 whitelist entries
> > > Config: calling custom init function MailWatchLogging Started SQL 
> > > Logging child
> > > Config: calling custom init function SQLBlacklist Starting up SQL 
> > > Blacklist Read 0 blacklist entries
> > >
> > > Checking version numbers...
> > > Version number in MailScanner.conf (5.0.2) is correct.
> > >
> > > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > > ERROR: is not correct, it should match X-yoursite-MailScanner-From
> > >
> > > MailScanner setting GID to (1001)
> > > MailScanner setting UID to (106)
> > >
> > > Checking for SpamAssassin errors (if you use it)...
> > > Using SpamAssassin results cache
> > > Connected to SpamAssassin cache database
> > > pyzor: check failed: internal error, python traceback seen in 
> > > response SpamAssassin reported no errors.
> > > Auto: Found virus scanners: clamd
> > > Connected to Processing Attempts Database Created Processing 
> > > Attempts Database successfully There are 0 messages in the 
> > > Processing Attempts Database Using locktype = posix 
> > > MailScanner.conf says "Virus Scanners = auto"
> > > Found these virus scanners installed: clamd 
> > > ==================================================================
> > > == == ===== Filename Checks: Windows/DOS Executable (1 eicar.com) 
> > > Other
> > > Checks: Found 1 problems Virus and Content Scanning: Starting
> > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus
> > > Scanning: Clamd found 2 infections Infected message 1 came from
> > > 10.1.1.1 Virus Scanning: Found 2 viruses 
> > > ==================================================================
> > > ==
> > > ==
> > > =====
> > > Virus Scanner test reports:
> > > Clamd said "eicar.com was infected: Eicar-Test-Signature"
> > >
> > > If any of your virus scanners (clamd) are not listed there, you 
> > > should check that they are installed correctly and that 
> > > MailScanner is finding them correctly via its virus.scanners.conf.
> > > Config: calling custom end function SQLWhitelist Closing down SQL 
> > > Whitelist
> > > Config: calling custom end function MailWatchLogging
> > > Config: calling custom end function SQLBlacklist Closing down SQL 
> > > Blacklist
> > >
> > > ***************************************************************
> > >
> > > So, obviously it reads my site-specific configuration file but it 
> > > keeps showing that error message regarding envelope_sender_header 
> > > setting. When I change %org-name% in the 
> > > /etc/MailScanner/MailScanner.conf file same as my site-specific 
> > > setting, the error message goes away. I believe this is a bug? Or 
> > > Am I doing something
> > wrong? Thanks a lot.
> > >
> > > Eoin Kim
> > > Systems Administrator
> > >
> > > RCS Telecommunications
> > > Level 1, 133 Mary Street
> > > Brisbane, QLD, 4000
> > > Office: 07 3228 0843
> > > Mobile: 0419 726 231
> > > Email: eoin.kim at rcst.com.au
> > >
> > > [RCST logo drop shadow]
> > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/listinfo/mailscanner
> > >
> > >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




From jerry.benton at mailborder.com  Sun Jul 24 23:31:06 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 24 Jul 2016 16:31:06 -0700
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <fd2a0e7cd32d4f4b8ffb4935873f1fd6@BNEEXCH01.corp.qcn>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
 <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>
 <CAED3VzC19=qegvFeveXXFSdwo28_JPyoWtMXR7iWjoDrrS_ibA@mail.gmail.com>
 <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn>
 <CAED3VzACRdh+OZLqiSM0EAMqMOdAYdj2K7_AZ954aV+N_+C2Aw@mail.gmail.com>
 <fd2a0e7cd32d4f4b8ffb4935873f1fd6@BNEEXCH01.corp.qcn>
Message-ID: <CAED3VzDw4rvn_z67+3sFdR1hZVA==9tvuMJf2=2QZPvrp842tQ@mail.gmail.com>

Why would you change it?


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:29:55 PM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? RE: MailScanner --lint %org-name% not importing

> Yes, I do have except I changed it like this: include /etc/MailScanner/conf.d/*.conf.
> Does this make a problem? I'll test it now. Thanks.
>
> Eoin
>
> -----Original Message-----
> From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info]
> On Behalf Of Jerry Benton
> Sent: Monday, 25 July 2016 9:27 AM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> This should be at the end of /etc/MailScanner/MailScanner.conf
>
>
> #
> #
> # Include conf.d files automatically, so you can override any of the # items set above
> with settings in your own local configuration files.
> # They will be read and processed in alphabetical order.
> #
> #
> include /etc/MailScanner/conf.d/*
>
> # End Of File
>
>
>
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
>
>
> -----Original Message-----
> From: Eoin Kim
> Reply: MailScanner Discussion
> Date: July 24, 2016 at 7:24:52 PM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> > Jerry,
> >
> > So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside
> > that file %org-name% = mynetwork. And I changed /etc/MailScanner/spamassassin.conf
> file like below:
> >
> > envelope_sender_header X-mynetwork-MailScanner-From
> >
> > And I also have a file /etc/MailScanner/MailScanner.conf which has
> > this setting by default %org-name% = yoursite.
> >
> > Now, when I run 'MailScanner --lint' this happens:
> >
> > Checking version numbers...
> > Version number in MailScanner.conf (5.0.2) is correct.
> >
> > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > ERROR: is not correct, it should match X-yoursite-MailScanner-From
> >
> > MailScanner setting GID to (1001)
> > MailScanner setting UID to (106)
> >
> > [ ... ]
> >
> > If I am right, I already did what you said. But no hope. Am I missing something?
> >
> > Eoin
> >
> > -----Original Message-----
> > From: MailScanner
> > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf
> > o]
> > On Behalf Of Jerry Benton
> > Sent: Monday, 25 July 2016 9:19 AM
> > To: MailScanner Discussion
> > Subject: RE: MailScanner --lint %org-name% not importing
> >
> > Edit /etc/MailScanner/spamassassin.conf
> >
> > find: envelope_sender_header
> >
> > Change it to match what the MailScanner --lint is telling you to change it to.
> >
> >
> > -
> > Jerry Benton
> > www.mailborder.com
> > +1 - 844-436-6245
> >
> >
> > -----Original Message-----
> > From: Eoin Kim
> > Reply: MailScanner Discussion
> > Date: July 24, 2016 at 7:17:25 PM
> > To: MailScanner Discussion
> > Subject: RE: MailScanner --lint %org-name% not importing
> >
> > > Hello Jerry,
> > >
> > > Sorry but I don't understand what you said. Such a tiny information
> > > to me. I have spamassassin.conf file in /etc/MailScanner directory
> > > which is linked to /etc/spamassassin/MailScanner.cf file. So, if I
> > > change spamassassin.conf
> > file, it should just work, correct?
> > >
> > > Eoin
> > >
> > > -----Original Message-----
> > > From: MailScanner
> > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.i
> > > nf
> > > o]
> > > On Behalf Of Jerry Benton
> > > Sent: Monday, 25 July 2016 9:14 AM
> > > To: MailScanner Discussion
> > > Subject: Re: MailScanner --lint %org-name% not importing
> > >
> > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file.
> > >
> > >
> > > -
> > > Jerry Benton
> > > www.mailborder.com
> > > +1 - 844-436-6245
> > >
> > >
> > > -----Original Message-----
> > > From: Eoin Kim
> > > Reply: MailScanner Discussion
> > > Date: July 24, 2016 at 7:10:54 PM
> > > To: mailscanner at lists.mailscanner.info
> > > Subject: MailScanner --lint %org-name% not importing
> > >
> > > > Hi,
> > > >
> > > > I am not sure if it is the desired behaviour but my MailScanner
> > > > doesn't import my configuration setting.
> > > >
> > > > I made site-specific configuration file inside
> > > > /etc/MailScanner/conf.d directory and inside that file I set
> > > > %org-name%. However, when I run MailScanner --lint, I get this
> > > > error:
> > > >
> > > > ***************************************************************
> > > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying
> > > > to
> > > > setlogsock(unix)
> > > >
> > > > Reading configuration file /etc/MailScanner/MailScanner.conf
> > > > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf
> > > > Read 501 hostnames from the phishing whitelist Read 15359
> > > > hostnames from the phishing blacklists
> > > > Config: calling custom init function SQLWhitelist Starting up SQL
> > > > Whitelist Read 0 whitelist entries
> > > > Config: calling custom init function MailWatchLogging Started SQL
> > > > Logging child
> > > > Config: calling custom init function SQLBlacklist Starting up SQL
> > > > Blacklist Read 0 blacklist entries
> > > >
> > > > Checking version numbers...
> > > > Version number in MailScanner.conf (5.0.2) is correct.
> > > >
> > > > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > > > ERROR: is not correct, it should match X-yoursite-MailScanner-From
> > > >
> > > > MailScanner setting GID to (1001)
> > > > MailScanner setting UID to (106)
> > > >
> > > > Checking for SpamAssassin errors (if you use it)...
> > > > Using SpamAssassin results cache
> > > > Connected to SpamAssassin cache database
> > > > pyzor: check failed: internal error, python traceback seen in
> > > > response SpamAssassin reported no errors.
> > > > Auto: Found virus scanners: clamd
> > > > Connected to Processing Attempts Database Created Processing
> > > > Attempts Database successfully There are 0 messages in the
> > > > Processing Attempts Database Using locktype = posix
> > > > MailScanner.conf says "Virus Scanners = auto"
> > > > Found these virus scanners installed: clamd
> > > > ==================================================================
> > > > == == ===== Filename Checks: Windows/DOS Executable (1 eicar.com)
> > > > Other
> > > > Checks: Found 1 problems Virus and Content Scanning: Starting
> > > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus
> > > > Scanning: Clamd found 2 infections Infected message 1 came from
> > > > 10.1.1.1 Virus Scanning: Found 2 viruses
> > > > ==================================================================
> > > > ==
> > > > ==
> > > > =====
> > > > Virus Scanner test reports:
> > > > Clamd said "eicar.com was infected: Eicar-Test-Signature"
> > > >
> > > > If any of your virus scanners (clamd) are not listed there, you
> > > > should check that they are installed correctly and that
> > > > MailScanner is finding them correctly via its virus.scanners.conf.
> > > > Config: calling custom end function SQLWhitelist Closing down SQL
> > > > Whitelist
> > > > Config: calling custom end function MailWatchLogging
> > > > Config: calling custom end function SQLBlacklist Closing down SQL
> > > > Blacklist
> > > >
> > > > ***************************************************************
> > > >
> > > > So, obviously it reads my site-specific configuration file but it
> > > > keeps showing that error message regarding envelope_sender_header
> > > > setting. When I change %org-name% in the
> > > > /etc/MailScanner/MailScanner.conf file same as my site-specific
> > > > setting, the error message goes away. I believe this is a bug? Or
> > > > Am I doing something
> > > wrong? Thanks a lot.
> > > >
> > > > Eoin Kim
> > > > Systems Administrator
> > > >
> > > > RCS Telecommunications
> > > > Level 1, 133 Mary Street
> > > > Brisbane, QLD, 4000
> > > > Office: 07 3228 0843
> > > > Mobile: 0419 726 231
> > > > Email: eoin.kim at rcst.com.au
> > > >
> > > > [RCST logo drop shadow]
> > > >
> > > >
> > > >
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/listinfo/mailscanner
> > > >
> > > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/listinfo/mailscanner
> > >
> > >
> > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/listinfo/mailscanner
> > >
> > >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From Eoin.Kim at rcst.com.au  Sun Jul 24 23:33:31 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Sun, 24 Jul 2016 23:33:31 +0000
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <CAED3VzDw4rvn_z67+3sFdR1hZVA==9tvuMJf2=2QZPvrp842tQ@mail.gmail.com>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <CAED3VzD_NJuim6P9EP_MtyMooN2Gc5WE_OVvosw8FF=J6tp1sQ@mail.gmail.com>
 <294ac93d0a104141a38497621a36359c@BNEEXCH01.corp.qcn>
 <CAED3VzC19=qegvFeveXXFSdwo28_JPyoWtMXR7iWjoDrrS_ibA@mail.gmail.com>
 <3bb0e7cbc48c4eb28cd177d6a1aacdc5@BNEEXCH01.corp.qcn>
 <CAED3VzACRdh+OZLqiSM0EAMqMOdAYdj2K7_AZ954aV+N_+C2Aw@mail.gmail.com>
 <fd2a0e7cd32d4f4b8ffb4935873f1fd6@BNEEXCH01.corp.qcn>
 <CAED3VzDw4rvn_z67+3sFdR1hZVA==9tvuMJf2=2QZPvrp842tQ@mail.gmail.com>
Message-ID: <5ec6c74d359845e48bffe0947965b10e@BNEEXCH01.corp.qcn>

Because I wanted MailScanner to read .conf file only. I reverted it and tested it, the result is the same anyway.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Jerry Benton
Sent: Monday, 25 July 2016 9:31 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: RE: MailScanner --lint %org-name% not importing

Why would you change it?


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Eoin Kim <eoin.kim at rcst.com.au>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:29:55 PM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? RE: MailScanner --lint %org-name% not importing

> Yes, I do have except I changed it like this: include /etc/MailScanner/conf.d/*.conf.
> Does this make a problem? I'll test it now. Thanks.
>
> Eoin
>
> -----Original Message-----
> From: MailScanner 
> [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.inf
> o]
> On Behalf Of Jerry Benton
> Sent: Monday, 25 July 2016 9:27 AM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> This should be at the end of /etc/MailScanner/MailScanner.conf
>
>
> #
> #
> # Include conf.d files automatically, so you can override any of the # 
> items set above with settings in your own local configuration files.
> # They will be read and processed in alphabetical order.
> #
> #
> include /etc/MailScanner/conf.d/*
>
> # End Of File
>
>
>
>
> -
> Jerry Benton
> www.mailborder.com
> +1 - 844-436-6245
>
>
> -----Original Message-----
> From: Eoin Kim
> Reply: MailScanner Discussion
> Date: July 24, 2016 at 7:24:52 PM
> To: MailScanner Discussion
> Subject: RE: MailScanner --lint %org-name% not importing
>
> > Jerry,
> >
> > So, I have a file /etc/MailScanner/conf.d/mynetwork.conf and inside 
> > that file %org-name% = mynetwork. And I changed 
> > /etc/MailScanner/spamassassin.conf
> file like below:
> >
> > envelope_sender_header X-mynetwork-MailScanner-From
> >
> > And I also have a file /etc/MailScanner/MailScanner.conf which has 
> > this setting by default %org-name% = yoursite.
> >
> > Now, when I run 'MailScanner --lint' this happens:
> >
> > Checking version numbers...
> > Version number in MailScanner.conf (5.0.2) is correct.
> >
> > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > ERROR: is not correct, it should match X-yoursite-MailScanner-From
> >
> > MailScanner setting GID to (1001)
> > MailScanner setting UID to (106)
> >
> > [ ... ]
> >
> > If I am right, I already did what you said. But no hope. Am I missing something?
> >
> > Eoin
> >
> > -----Original Message-----
> > From: MailScanner
> > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.i
> > nf
> > o]
> > On Behalf Of Jerry Benton
> > Sent: Monday, 25 July 2016 9:19 AM
> > To: MailScanner Discussion
> > Subject: RE: MailScanner --lint %org-name% not importing
> >
> > Edit /etc/MailScanner/spamassassin.conf
> >
> > find: envelope_sender_header
> >
> > Change it to match what the MailScanner --lint is telling you to change it to.
> >
> >
> > -
> > Jerry Benton
> > www.mailborder.com
> > +1 - 844-436-6245
> >
> >
> > -----Original Message-----
> > From: Eoin Kim
> > Reply: MailScanner Discussion
> > Date: July 24, 2016 at 7:17:25 PM
> > To: MailScanner Discussion
> > Subject: RE: MailScanner --lint %org-name% not importing
> >
> > > Hello Jerry,
> > >
> > > Sorry but I don't understand what you said. Such a tiny 
> > > information to me. I have spamassassin.conf file in 
> > > /etc/MailScanner directory which is linked to 
> > > /etc/spamassassin/MailScanner.cf file. So, if I change 
> > > spamassassin.conf
> > file, it should just work, correct?
> > >
> > > Eoin
> > >
> > > -----Original Message-----
> > > From: MailScanner
> > > [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner
> > > .i
> > > nf
> > > o]
> > > On Behalf Of Jerry Benton
> > > Sent: Monday, 25 July 2016 9:14 AM
> > > To: MailScanner Discussion
> > > Subject: Re: MailScanner --lint %org-name% not importing
> > >
> > > The files in /conf.d have no impact on spamassassin.conf. You need to edit that file.
> > >
> > >
> > > -
> > > Jerry Benton
> > > www.mailborder.com
> > > +1 - 844-436-6245
> > >
> > >
> > > -----Original Message-----
> > > From: Eoin Kim
> > > Reply: MailScanner Discussion
> > > Date: July 24, 2016 at 7:10:54 PM
> > > To: mailscanner at lists.mailscanner.info
> > > Subject: MailScanner --lint %org-name% not importing
> > >
> > > > Hi,
> > > >
> > > > I am not sure if it is the desired behaviour but my MailScanner 
> > > > doesn't import my configuration setting.
> > > >
> > > > I made site-specific configuration file inside 
> > > > /etc/MailScanner/conf.d directory and inside that file I set 
> > > > %org-name%. However, when I run MailScanner --lint, I get this
> > > > error:
> > > >
> > > > ***************************************************************
> > > > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint 
> > > > Trying to
> > > > setlogsock(unix)
> > > >
> > > > Reading configuration file /etc/MailScanner/MailScanner.conf 
> > > > Reading configuration file 
> > > > /etc/MailScanner/conf.d/mynetwork.conf
> > > > Read 501 hostnames from the phishing whitelist Read 15359 
> > > > hostnames from the phishing blacklists
> > > > Config: calling custom init function SQLWhitelist Starting up 
> > > > SQL Whitelist Read 0 whitelist entries
> > > > Config: calling custom init function MailWatchLogging Started 
> > > > SQL Logging child
> > > > Config: calling custom init function SQLBlacklist Starting up 
> > > > SQL Blacklist Read 0 blacklist entries
> > > >
> > > > Checking version numbers...
> > > > Version number in MailScanner.conf (5.0.2) is correct.
> > > >
> > > > ERROR: The "envelope_sender_header" in your spamassassin.conf
> > > > ERROR: is not correct, it should match 
> > > > X-yoursite-MailScanner-From
> > > >
> > > > MailScanner setting GID to (1001) MailScanner setting UID to 
> > > > (106)
> > > >
> > > > Checking for SpamAssassin errors (if you use it)...
> > > > Using SpamAssassin results cache Connected to SpamAssassin cache 
> > > > database
> > > > pyzor: check failed: internal error, python traceback seen in 
> > > > response SpamAssassin reported no errors.
> > > > Auto: Found virus scanners: clamd Connected to Processing 
> > > > Attempts Database Created Processing Attempts Database 
> > > > successfully There are 0 messages in the Processing Attempts 
> > > > Database Using locktype = posix MailScanner.conf says "Virus 
> > > > Scanners = auto"
> > > > Found these virus scanners installed: clamd 
> > > > ================================================================
> > > > == == == ===== Filename Checks: Windows/DOS Executable (1 
> > > > eicar.com) Other
> > > > Checks: Found 1 problems Virus and Content Scanning: Starting
> > > > Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com Virus
> > > > Scanning: Clamd found 2 infections Infected message 1 came from
> > > > 10.1.1.1 Virus Scanning: Found 2 viruses 
> > > > ================================================================
> > > > ==
> > > > ==
> > > > ==
> > > > =====
> > > > Virus Scanner test reports:
> > > > Clamd said "eicar.com was infected: Eicar-Test-Signature"
> > > >
> > > > If any of your virus scanners (clamd) are not listed there, you 
> > > > should check that they are installed correctly and that 
> > > > MailScanner is finding them correctly via its virus.scanners.conf.
> > > > Config: calling custom end function SQLWhitelist Closing down 
> > > > SQL Whitelist
> > > > Config: calling custom end function MailWatchLogging
> > > > Config: calling custom end function SQLBlacklist Closing down 
> > > > SQL Blacklist
> > > >
> > > > ***************************************************************
> > > >
> > > > So, obviously it reads my site-specific configuration file but 
> > > > it keeps showing that error message regarding 
> > > > envelope_sender_header setting. When I change %org-name% in the 
> > > > /etc/MailScanner/MailScanner.conf file same as my site-specific 
> > > > setting, the error message goes away. I believe this is a bug? 
> > > > Or Am I doing something
> > > wrong? Thanks a lot.
> > > >
> > > > Eoin Kim
> > > > Systems Administrator
> > > >
> > > > RCS Telecommunications
> > > > Level 1, 133 Mary Street
> > > > Brisbane, QLD, 4000
> > > > Office: 07 3228 0843
> > > > Mobile: 0419 726 231
> > > > Email: eoin.kim at rcst.com.au
> > > >
> > > > [RCST logo drop shadow]
> > > >
> > > >
> > > >
> > > > --
> > > > MailScanner mailing list
> > > > mailscanner at lists.mailscanner.info
> > > > http://lists.mailscanner.info/listinfo/mailscanner
> > > >
> > > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/listinfo/mailscanner
> > >
> > >
> > >
> > >
> > >
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/listinfo/mailscanner
> > >
> > >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
> >
> >
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/listinfo/mailscanner
> >
> >
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




From Antony.Stone at mailscanner.open.source.it  Sun Jul 24 23:40:00 2016
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Mon, 25 Jul 2016 01:40:00 +0200
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <CAED3VzDw4rvn_z67+3sFdR1hZVA==9tvuMJf2=2QZPvrp842tQ@mail.gmail.com>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <fd2a0e7cd32d4f4b8ffb4935873f1fd6@BNEEXCH01.corp.qcn>
 <CAED3VzDw4rvn_z67+3sFdR1hZVA==9tvuMJf2=2QZPvrp842tQ@mail.gmail.com>
Message-ID: <201607250140.00968.Antony.Stone@mailscanner.open.source.it>

On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote:

> Why would you change it?

Fair question, but it seems to be working okay:

On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote:

> sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint
> Trying to setlogsock(unix)
> 
> Reading configuration file /etc/MailScanner/MailScanner.conf
> Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf

My observation about this would be that /etc/MailScanner/conf.d/README 
contains the comment:
 
# NOTE: If you change the value of a %variable% then you must redefine all
# the settings that use that %variable% here, as the %variable%
# substitutions are done when the files are initially read, not later when
# settings are looked up when MailScanner is processing messages.

I wonder if that is in fact the problem here?


Antony.

From jerry.benton at mailborder.com  Sun Jul 24 23:42:52 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Sun, 24 Jul 2016 16:42:52 -0700
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <201607250140.00968.Antony.Stone@mailscanner.open.source.it>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <fd2a0e7cd32d4f4b8ffb4935873f1fd6@BNEEXCH01.corp.qcn>
 <CAED3VzDw4rvn_z67+3sFdR1hZVA==9tvuMJf2=2QZPvrp842tQ@mail.gmail.com>
 <201607250140.00968.Antony.Stone@mailscanner.open.source.it>
Message-ID: <CAED3VzDS=hqJ+g-im+S5+oF5-nQ9GFj8Hipnin8aQ_XTLeV91g@mail.gmail.com>

What he said.

It is just easier in this case to change the main file MailScanner.conf



-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Antony Stone <antony.stone at mailscanner.open.source.it>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 24, 2016 at 7:40:21 PM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? Re: MailScanner --lint %org-name% not importing

> On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote:
>
> > Why would you change it?
>
> Fair question, but it seems to be working okay:
>
> On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote:
>
> > sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint
> > Trying to setlogsock(unix)
> >
> > Reading configuration file /etc/MailScanner/MailScanner.conf
> > Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf
>
> My observation about this would be that /etc/MailScanner/conf.d/README
> contains the comment:
>
> # NOTE: If you change the value of a %variable% then you must redefine all
> # the settings that use that %variable% here, as the %variable%
> # substitutions are done when the files are initially read, not later when
> # settings are looked up when MailScanner is processing messages.
>
> I wonder if that is in fact the problem here?
>
>
> Antony.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From Eoin.Kim at rcst.com.au  Sun Jul 24 23:45:24 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Sun, 24 Jul 2016 23:45:24 +0000
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <201607250140.00968.Antony.Stone@mailscanner.open.source.it>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <fd2a0e7cd32d4f4b8ffb4935873f1fd6@BNEEXCH01.corp.qcn>
 <CAED3VzDw4rvn_z67+3sFdR1hZVA==9tvuMJf2=2QZPvrp842tQ@mail.gmail.com>
 <201607250140.00968.Antony.Stone@mailscanner.open.source.it>
Message-ID: <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn>

Hello Antony,

So, If I understand what you said correctly, does that mean I have to add settings which have %org-name% string in my site-specific configuration file? For example,

Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:
Mail Header = X-%org-name%-MailScanner:
[ ... ]

Am I following you?

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Antony Stone
Sent: Monday, 25 July 2016 9:40 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner --lint %org-name% not importing

On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote:

> Why would you change it?

Fair question, but it seems to be working okay:

On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote:

> sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint Trying to 
> setlogsock(unix)
> 
> Reading configuration file /etc/MailScanner/MailScanner.conf Reading 
> configuration file /etc/MailScanner/conf.d/mynetwork.conf

My observation about this would be that /etc/MailScanner/conf.d/README contains the comment:
 
# NOTE: If you change the value of a %variable% then you must redefine all # the settings that use that %variable% here, as the %variable% # substitutions are done when the files are initially read, not later when # settings are looked up when MailScanner is processing messages.

I wonder if that is in fact the problem here?


Antony.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




From Antony.Stone at mailscanner.open.source.it  Sun Jul 24 23:49:47 2016
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Mon, 25 Jul 2016 01:49:47 +0200
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <201607250140.00968.Antony.Stone@mailscanner.open.source.it>
 <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn>
Message-ID: <201607250149.47740.Antony.Stone@mailscanner.open.source.it>

On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote:

> Hello Antony,
> 
> So, If I understand what you said correctly, does that mean I have to add
> settings which have %org-name% string in my site-specific configuration
> file? For example,
> 
> Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:
> Mail Header = X-%org-name%-MailScanner:
> [ ... ]
> 
> Am I following you?

Yes.

The rule is:

 - if you change some %whatever% variable, and that variable is then 
referenced within another rule, you have to make sure that that other rule is 
repeated in your config files *after* the point where you defined %whatever% so 
that it uses the new definition of %whatever% and not the old one.


Antony.

-- 
The first fifty percent of an engineering project takes ninety percent of the 
time, and the remaining fifty percent takes another ninety percent of the time.

                                                   Please reply to the list;
                                                         please *don't* CC me.

From Eoin.Kim at rcst.com.au  Sun Jul 24 23:55:13 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Sun, 24 Jul 2016 23:55:13 +0000
Subject: MailScanner --lint %org-name% not importing
In-Reply-To: <201607250149.47740.Antony.Stone@mailscanner.open.source.it>
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <201607250140.00968.Antony.Stone@mailscanner.open.source.it>
 <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn>
 <201607250149.47740.Antony.Stone@mailscanner.open.source.it>
Message-ID: <23bb00be71fa4fa3ac4424863342f12e@BNEEXCH01.corp.qcn>

Thanks for that. I seriously have to practice more English. I'll have a go and update this. Thanks again.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Antony Stone
Sent: Monday, 25 July 2016 9:50 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner --lint %org-name% not importing

On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote:

> Hello Antony,
> 
> So, If I understand what you said correctly, does that mean I have to 
> add settings which have %org-name% string in my site-specific 
> configuration file? For example,
> 
> Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:
> Mail Header = X-%org-name%-MailScanner:
> [ ... ]
> 
> Am I following you?

Yes.

The rule is:

 - if you change some %whatever% variable, and that variable is then referenced within another rule, you have to make sure that that other rule is repeated in your config files *after* the point where you defined %whatever% so that it uses the new definition of %whatever% and not the old one.


Antony.

--
The first fifty percent of an engineering project takes ninety percent of the time, and the remaining fifty percent takes another ninety percent of the time.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




From Eoin.Kim at rcst.com.au  Mon Jul 25 00:24:33 2016
From: Eoin.Kim at rcst.com.au (Eoin Kim)
Date: Mon, 25 Jul 2016 00:24:33 +0000
Subject: MailScanner --lint %org-name% not importing
References: <69300d2360824f3c91aada8c3ced698b@BNEEXCH01.corp.qcn>
 <201607250140.00968.Antony.Stone@mailscanner.open.source.it>
 <52b387d8389940b0aeadd6584e44172f@BNEEXCH01.corp.qcn>
 <201607250149.47740.Antony.Stone@mailscanner.open.source.it> 
Message-ID: <c6be02564afd492b8a3aa56e841a7a91@BNEEXCH01.corp.qcn>

That works! Thanks for your help. I really appreciate it.

Eoin

-----Original Message-----
From: Eoin Kim 
Sent: Monday, 25 July 2016 9:55 AM
To: 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Subject: RE: MailScanner --lint %org-name% not importing

Thanks for that. I seriously have to practice more English. I'll have a go and update this. Thanks again.

Eoin

-----Original Message-----
From: MailScanner [mailto:mailscanner-bounces+eoin.kim=rcst.com.au at lists.mailscanner.info] On Behalf Of Antony Stone
Sent: Monday, 25 July 2016 9:50 AM
To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject: Re: MailScanner --lint %org-name% not importing

On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote:

> Hello Antony,
> 
> So, If I understand what you said correctly, does that mean I have to 
> add settings which have %org-name% string in my site-specific 
> configuration file? For example,
> 
> Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:
> Mail Header = X-%org-name%-MailScanner:
> [ ... ]
> 
> Am I following you?

Yes.

The rule is:

 - if you change some %whatever% variable, and that variable is then referenced within another rule, you have to make sure that that other rule is repeated in your config files *after* the point where you defined %whatever% so that it uses the new definition of %whatever% and not the old one.


Antony.

--
The first fifty percent of an engineering project takes ninety percent of the time, and the remaining fifty percent takes another ninety percent of the time.

                                                   Please reply to the list;
                                                         please *don't* CC me.


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




From Antony.Stone at mailscanner.open.source.it  Mon Jul 25 07:31:14 2016
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Mon, 25 Jul 2016 14:31:14 +0700
Subject: MailScanner --lint %org-name% not importing
Message-ID: <e93d8ef51057ea88d00c41dbed0aeb17@my.mimosacloud.com>

On Monday 25 July 2016 at 01:45:24, Eoin Kim wrote:

> Hello Antony,
> 
> So, If I understand what you said correctly, does that mean I have to add
> settings which have %org-name% string in my site-specific configuration
> file? For example,
> 
> Spam-Virus Header = X-%org-name%-MailScanner-SpamVirus-Report:
> Mail Header = X-%org-name%-MailScanner:
> [ ... ]
> 
> Am I following you?

Yes.

The rule is:

 - if you change some %whatever% variable, and that variable is then 
referenced within another rule, you have to make sure that that other rule is 
repeated in your config files *after* the point where you defined %whatever%
so 
that it uses the new definition of %whatever% and not the old one.


Antony.

-- 
The first fifty percent of an engineering project takes ninety percent of the 
time, and the remaining fifty percent takes another ninety percent of the
time.

                                                   Please reply to the list;
                                                         please *don't* CC me.


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160725/ee892c78/attachment.html>

From Antony.Stone at mailscanner.open.source.it  Mon Jul 25 07:31:29 2016
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Mon, 25 Jul 2016 14:31:29 +0700
Subject: MailScanner --lint %org-name% not importing
Message-ID: <1d989de1f4d1845f6335e3fa2e7c69d9@my.mimosacloud.com>

On Monday 25 July 2016 at 01:31:06, Jerry Benton wrote:

> Why would you change it?

Fair question, but it seems to be working okay:

On Monday 25 July 2016 at 01:10:28, Eoin Kim wrote:

> sysadmin at mail1.mynetwork.lab.int:~$ sudo MailScanner --lint
> Trying to setlogsock(unix)
> 
> Reading configuration file /etc/MailScanner/MailScanner.conf
> Reading configuration file /etc/MailScanner/conf.d/mynetwork.conf

My observation about this would be that /etc/MailScanner/conf.d/README 
contains the comment:
 
# NOTE: If you change the value of a %variable% then you must redefine all
# the settings that use that %variable% here, as the %variable%
# substitutions are done when the files are initially read, not later when
# settings are looked up when MailScanner is processing messages.

I wonder if that is in fact the problem here?


Antony.


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160725/25de88e2/attachment.html>

From mark at meelhuysen.com  Tue Jul 26 19:04:42 2016
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Tue, 26 Jul 2016 19:04:42 +0000
Subject: Warning: skipping message as it has been attempted too many times
Message-ID: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>

Hello all,

All of a sudden mailflow stopt functioning. It stopped at 23.50 last night.There were about 200 messages waiting in the HOLD directory.
Last week ik updated my Centos 6 installation with the latest security updates.
What have i tried already:

* Stopped MS services and removed the Processing.db : Did not solve the problem.
* Stopped MS services and removed the Processing.db, and moved all the queued files from /var/spool/postfix/hold to a temp dir : Did not solve the problem. Queue is growing again.

Below a piece of the maillog:

Jul 26 19:49:19 ms MailScanner[16941]: MailScanner E-Mail Virus Scanner version 4.84.6 starting...
Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/MailScanner.conf
Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/conf.d/README
Jul 26 19:49:19 ms MailScanner[16941]: Read 1769 hostnames from the phishing whitelist
Jul 26 19:49:19 ms MailScanner[16941]: Read 5890 hostnames from the phishing blacklists
Jul 26 19:49:19 ms MailScanner[16941]: Config: calling custom init function MailWatchLogging
Jul 26 19:49:19 ms MailScanner[16941]: Started SQL Logging child
Jul 26 19:49:20 ms MailScanner[16941]: Using SpamAssassin results cache
Jul 26 19:49:20 ms MailScanner[16941]: Connected to SpamAssassin cache database
Jul 26 19:49:20 ms MailScanner[16941]: Enabling SpamAssassin auto-whitelist functionality...
Jul 26 19:49:22 ms MailScanner[16941]: Connected to Processing Attempts Database
Jul 26 19:49:22 ms MailScanner[16941]: Found 4 messages in the Processing Attempts Database
Jul 26 19:49:22 ms MailScanner[16941]: Using locktype = flock
Jul 26 19:49:22 ms MailScanner[16941]: Warning: skipping message C5FF622B8B0.A9BFD as it has been attempted too many times
Jul 26 19:49:22 ms MailScanner[16941]: Quarantined message C5FF622B8B0.A9BFD as it caused MailScanner to crash several times
Jul 26 19:49:22 ms MailScanner[16941]: Saved entire message to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD
Jul 26 19:49:22 ms MailScanner[16941]: writing to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No such file or directory

The system is running perfectly fine since november 2014. Can onyone tell me what i should try next?

Thank you in advance,

Mark


From Antony.Stone at mailscanner.open.source.it  Tue Jul 26 19:21:30 2016
From: Antony.Stone at mailscanner.open.source.it (Antony Stone)
Date: Tue, 26 Jul 2016 21:21:30 +0200
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
Message-ID: <201607262121.30302.Antony.Stone@mailscanner.open.source.it>

On Tuesday 26 July 2016 at 21:04:42, Mark Meelhuysen wrote:

> 19:49:22 ms MailScanner[16941]: writing to
> /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No
> such file or directory
> 
> The system is running perfectly fine since november 2014. Can onyone tell
> me what i should try next?

Look in /var and work your way down the path given above to see what is 
missing (or, more likely, has the wrong ownership / permissions).


Antony.

-- 
Someone has stolen all the toilets from New Scotland Yard.  Police say they 
have absolutely nothing to go on.

                                                   Please reply to the list;
                                                         please *don't* CC me.

From mark at meelhuysen.com  Tue Jul 26 17:58:05 2016
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Tue, 26 Jul 2016 17:58:05 +0000
Subject: Warning: skipping message as it has been attempted too many times
Message-ID: <b4c0b28a502b4b60a6119329f45bfad5@DC01.meelhuysen.com>

Hello all,

All of a sudden mailflow stopt functioning. It stopped at 23.50 last night.There were about 200 messages waiting in the HOLD directory.
Last week ik updated my Centos 6 installation with the latest security updates.
What have i tried already:

* Stopped MS services and removed the Processing.db : Did not solve the problem.
* Stopped MS services and removed the Processing.db, and moved all the queued files from /var/spool/postfix/hold to a temp dir : Did not solve the problem. Queue is growing again.

Below a piece of the maillog:

Jul 26 19:49:19 ms MailScanner[16941]: MailScanner E-Mail Virus Scanner version 4.84.6 starting...
Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/MailScanner.conf
Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/conf.d/README
Jul 26 19:49:19 ms MailScanner[16941]: Read 1769 hostnames from the phishing whitelist
Jul 26 19:49:19 ms MailScanner[16941]: Read 5890 hostnames from the phishing blacklists
Jul 26 19:49:19 ms MailScanner[16941]: Config: calling custom init function MailWatchLogging
Jul 26 19:49:19 ms MailScanner[16941]: Started SQL Logging child
Jul 26 19:49:20 ms MailScanner[16941]: Using SpamAssassin results cache
Jul 26 19:49:20 ms MailScanner[16941]: Connected to SpamAssassin cache database
Jul 26 19:49:20 ms MailScanner[16941]: Enabling SpamAssassin auto-whitelist functionality...
Jul 26 19:49:22 ms MailScanner[16941]: Connected to Processing Attempts Database
Jul 26 19:49:22 ms MailScanner[16941]: Found 4 messages in the Processing Attempts Database
Jul 26 19:49:22 ms MailScanner[16941]: Using locktype = flock
Jul 26 19:49:22 ms MailScanner[16941]: Warning: skipping message C5FF622B8B0.A9BFD as it has been attempted too many times
Jul 26 19:49:22 ms MailScanner[16941]: Quarantined message C5FF622B8B0.A9BFD as it caused MailScanner to crash several times
Jul 26 19:49:22 ms MailScanner[16941]: Saved entire message to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD
Jul 26 19:49:22 ms MailScanner[16941]: writing to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No such file or directory

The system is running perfectly fine since november 2014. Can onyone tell me what i should try next?

Thank you in advance,

Mark


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.


From mark at meelhuysen.com  Tue Jul 26 17:58:05 2016
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Tue, 26 Jul 2016 17:58:05 +0000
Subject: Warning: skipping message as it has been attempted too many times
Message-ID: <b4c0b28a502b4b60a6119329f45bfad5@DC01.meelhuysen.com>

Hello all,

All of a sudden mailflow stopt functioning. It stopped at 23.50 last night.There were about 200 messages waiting in the HOLD directory.
Last week ik updated my Centos 6 installation with the latest security updates.
What have i tried already:

* Stopped MS services and removed the Processing.db : Did not solve the problem.
* Stopped MS services and removed the Processing.db, and moved all the queued files from /var/spool/postfix/hold to a temp dir : Did not solve the problem. Queue is growing again.

Below a piece of the maillog:

Jul 26 19:49:19 ms MailScanner[16941]: MailScanner E-Mail Virus Scanner version 4.84.6 starting...
Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/MailScanner.conf
Jul 26 19:49:19 ms MailScanner[16941]: Reading configuration file /etc/MailScanner/conf.d/README
Jul 26 19:49:19 ms MailScanner[16941]: Read 1769 hostnames from the phishing whitelist
Jul 26 19:49:19 ms MailScanner[16941]: Read 5890 hostnames from the phishing blacklists
Jul 26 19:49:19 ms MailScanner[16941]: Config: calling custom init function MailWatchLogging
Jul 26 19:49:19 ms MailScanner[16941]: Started SQL Logging child
Jul 26 19:49:20 ms MailScanner[16941]: Using SpamAssassin results cache
Jul 26 19:49:20 ms MailScanner[16941]: Connected to SpamAssassin cache database
Jul 26 19:49:20 ms MailScanner[16941]: Enabling SpamAssassin auto-whitelist functionality...
Jul 26 19:49:22 ms MailScanner[16941]: Connected to Processing Attempts Database
Jul 26 19:49:22 ms MailScanner[16941]: Found 4 messages in the Processing Attempts Database
Jul 26 19:49:22 ms MailScanner[16941]: Using locktype = flock
Jul 26 19:49:22 ms MailScanner[16941]: Warning: skipping message C5FF622B8B0.A9BFD as it has been attempted too many times
Jul 26 19:49:22 ms MailScanner[16941]: Quarantined message C5FF622B8B0.A9BFD as it caused MailScanner to crash several times
Jul 26 19:49:22 ms MailScanner[16941]: Saved entire message to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD
Jul 26 19:49:22 ms MailScanner[16941]: writing to /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: No such file or directory

The system is running perfectly fine since november 2014. Can onyone tell me what i should try next?

Thank you in advance,

Mark


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.


From mark at meelhuysen.com  Tue Jul 26 20:36:09 2016
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Tue, 26 Jul 2016 20:36:09 +0000
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
Message-ID: <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>

Hi all,

First of all, sorry, I think my e-mail was send multiple times as my queue was emptied.

@ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that.
After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory.
Any thoughts?

Thank you in advance.

Mark



-----Oorspronkelijk bericht-----
Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] Namens Antony Stone
Verzonden: dinsdag 26 juli 2016 21:22
Aan: MailScanner Discussion <mailscanner at lists.mailscanner.info>
Onderwerp: Re: Warning: skipping message as it has been attempted too many times

On Tuesday 26 July 2016 at 21:04:42, Mark Meelhuysen wrote:

> 19:49:22 ms MailScanner[16941]: writing to
> /var/spool/MailScanner/quarantine/20160726/C5FF622B8B0.A9BFD/message: 
> No such file or directory
> 
> The system is running perfectly fine since november 2014. Can onyone 
> tell me what i should try next?

Look in /var and work your way down the path given above to see what is missing (or, more likely, has the wrong ownership / permissions).


Antony.

-- 
Someone has stolen all the toilets from New Scotland Yard.  Police say they 
have absolutely nothing to go on.

                                                   Please reply to the list;
                                                         please *don't* CC me.


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.


From mark at msapiro.net  Tue Jul 26 22:35:16 2016
From: mark at msapiro.net (Mark Sapiro)
Date: Tue, 26 Jul 2016 15:35:16 -0700
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
 <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
Message-ID: <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>

On 07/26/2016 01:36 PM, Mark Meelhuysen wrote:
> 
> @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that.
> After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory.
> Any thoughts?


The problem probably will recur. Mailscanner creates the yyyymmdd
directories each day, but for some reason wasn't able to last night and
probably won't be able to tonight for the same reason.

Normally, the directory and subordinates are created/written by
MailScanner's 'Run As User' which needs read, write and search
permission on /var/spool/MailScanner/quarantine/. This will be the user
that owns the /var/spool/MailScanner/quarantine/* directories. If it has
permission, it could be a SELinux issue.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From jerry.benton at mailborder.com  Tue Jul 26 22:38:30 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Tue, 26 Jul 2016 18:38:30 -0400
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
 <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
 <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
Message-ID: <B32C8C28-FDC0-4C41-8B06-2B9F2D699CC0@mailborder.com>

Check to make sure part or all of your file system was not put into protected or read only mode because of some event like a power interruption or VM modification.

-
Jerry Benton
www.mailborder.com
Sent from my iPhone

> On Jul 26, 2016, at 18:35, Mark Sapiro <mark at msapiro.net> wrote:
> 
>> On 07/26/2016 01:36 PM, Mark Meelhuysen wrote:
>> 
>> @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that.
>> After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory.
>> Any thoughts?
> 
> 
> The problem probably will recur. Mailscanner creates the yyyymmdd
> directories each day, but for some reason wasn't able to last night and
> probably won't be able to tonight for the same reason.
> 
> Normally, the directory and subordinates are created/written by
> MailScanner's 'Run As User' which needs read, write and search
> permission on /var/spool/MailScanner/quarantine/. This will be the user
> that owns the /var/spool/MailScanner/quarantine/* directories. If it has
> permission, it could be a SELinux issue.
> 
> -- 
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
> 

From mark at meelhuysen.com  Wed Jul 27 06:56:59 2016
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Wed, 27 Jul 2016 06:56:59 +0000
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
 <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
 <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
Message-ID: <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com>

Indeed, the directory failed to be created again last night.
The owner of the quarantinedirectory is root with group apache.
The owner of all subdirs is postfix with group apache. Security is 770.
MailScanner.conf settings:
Run As User = postfix
Run As Group = postfix
Is it ok then that the dirs. Have group apache?
Is there some logging where the error is logged when the system was not able to create the quarantine directory?

Thank you in advance.

Mark


-----Oorspronkelijk bericht-----
Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] Namens Mark Sapiro
Verzonden: woensdag 27 juli 2016 00:35
Aan: mailscanner at lists.mailscanner.info
Onderwerp: Re: Warning: skipping message as it has been attempted too many times

On 07/26/2016 01:36 PM, Mark Meelhuysen wrote:
> 
> @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not think of checking that.
> After creating it with the correct permissions the queue was processed. I wonder if the problem will repeat this night as I could not find any errors about the system not being able to create the directory.
> Any thoughts?


The problem probably will recur. Mailscanner creates the yyyymmdd directories each day, but for some reason wasn't able to last night and probably won't be able to tonight for the same reason.

Normally, the directory and subordinates are created/written by MailScanner's 'Run As User' which needs read, write and search permission on /var/spool/MailScanner/quarantine/. This will be the user that owns the /var/spool/MailScanner/quarantine/* directories. If it has permission, it could be a SELinux issue.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.


From jerry.benton at mailborder.com  Wed Jul 27 07:25:39 2016
From: jerry.benton at mailborder.com (Jerry Benton)
Date: Wed, 27 Jul 2016 00:25:39 -0700
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
 <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
 <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
 <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com>
Message-ID: <CAED3VzBKObS36xOT5e-redhDeCrhWKJLQhh6f7-CYavWkjeaBQ@mail.gmail.com>

I would suggest taking a look at how permissions are done on MailScanner v5.


-
Jerry Benton
www.mailborder.com
+1 - 844-436-6245


-----Original Message-----
From:?Mark Meelhuysen <mark at meelhuysen.com>
Reply:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Date:?July 27, 2016 at 2:57:32 AM
To:?MailScanner Discussion <mailscanner at lists.mailscanner.info>
Subject:? RE: Warning: skipping message as it has been attempted too many times

> Indeed, the directory failed to be created again last night.
> The owner of the quarantinedirectory is root with group apache.
> The owner of all subdirs is postfix with group apache. Security is 770.
> MailScanner.conf settings:
> Run As User = postfix
> Run As Group = postfix
> Is it ok then that the dirs. Have group apache?
> Is there some logging where the error is logged when the system was not able to create the
> quarantine directory?
>
> Thank you in advance.
>
> Mark
>
>
> -----Oorspronkelijk bericht-----
> Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info]
> Namens Mark Sapiro
> Verzonden: woensdag 27 juli 2016 00:35
> Aan: mailscanner at lists.mailscanner.info
> Onderwerp: Re: Warning: skipping message as it has been attempted too many times
>
> On 07/26/2016 01:36 PM, Mark Meelhuysen wrote:
> >
> > @ Antony, it appeared that the "20160726" folder was not there. I wonder why i did not
> think of checking that.
> > After creating it with the correct permissions the queue was processed. I wonder if
> the problem will repeat this night as I could not find any errors about the system not being
> able to create the directory.
> > Any thoughts?
>
>
> The problem probably will recur. Mailscanner creates the yyyymmdd directories each
> day, but for some reason wasn't able to last night and probably won't be able to tonight
> for the same reason.
>
> Normally, the directory and subordinates are created/written by MailScanner's 'Run
> As User' which needs read, write and search permission on /var/spool/MailScanner/quarantine/.
> This will be the user that owns the /var/spool/MailScanner/quarantine/* directories.
> If it has permission, it could be a SELinux issue.
>
> --
> Mark Sapiro The highway is for gamblers,
> San Francisco Bay Area, California better use your sense - B. Dylan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>
> --------------
> Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te
> zijn.
>
>
> --------------
> Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te
> zijn.
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/listinfo/mailscanner
>
>

From mark at msapiro.net  Wed Jul 27 07:35:36 2016
From: mark at msapiro.net (Mark Sapiro)
Date: Wed, 27 Jul 2016 00:35:36 -0700
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
 <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
 <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
 <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com>
Message-ID: <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net>

On 07/26/2016 11:56 PM, Mark Meelhuysen wrote:
> Indeed, the directory failed to be created again last night.
> The owner of the quarantinedirectory is root with group apache.
> The owner of all subdirs is postfix with group apache. Security is 770.
> MailScanner.conf settings:
> Run As User = postfix
> Run As Group = postfix
> Is it ok then that the dirs. Have group apache?


That's not the problem. It's OK. The quarantine directory needs to be
owned by postfix. That's the issue because MailScanner running as
postfix can't create quarantine/yyyymmdd with it owned by root and group
apache.

sudo chown postfix /var/spool/MailScanner/quarantine

> Is there some logging where the error is logged when the system was not able to create the quarantine directory?


I think it should be logged in the mail.log where other MailScanner log
messages are logged, but I'm not sure that it is.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

From mark at meelhuysen.com  Wed Jul 27 07:49:35 2016
From: mark at meelhuysen.com (Mark Meelhuysen)
Date: Wed, 27 Jul 2016 07:49:35 +0000
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
 <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
 <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
 <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com>
 <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net>
Message-ID: <7704eb3f81144db183ef00b3c4804f34@DC01.meelhuysen.com>

Hi Mark,

Thank you for your response.
Yesterday I restored a backup of the VHD to another VM and checked those settings. The quarantine folder is also owned by root and group apache. The back-up is of a time that everything was working. I did not test it overnight to see if the dir was created..
Does that make any sense?

Thank you.

Mark


-----Oorspronkelijk bericht-----
Van: MailScanner [mailto:mailscanner-bounces+mark=meelhuysen.com at lists.mailscanner.info] Namens Mark Sapiro
Verzonden: woensdag 27 juli 2016 09:36
Aan: mailscanner at lists.mailscanner.info
Onderwerp: Re: Warning: skipping message as it has been attempted too many times

On 07/26/2016 11:56 PM, Mark Meelhuysen wrote:
> Indeed, the directory failed to be created again last night.
> The owner of the quarantinedirectory is root with group apache.
> The owner of all subdirs is postfix with group apache. Security is 770.
> MailScanner.conf settings:
> Run As User = postfix
> Run As Group = postfix
> Is it ok then that the dirs. Have group apache?


That's not the problem. It's OK. The quarantine directory needs to be owned by postfix. That's the issue because MailScanner running as postfix can't create quarantine/yyyymmdd with it owned by root and group apache.

sudo chown postfix /var/spool/MailScanner/quarantine

> Is there some logging where the error is logged when the system was not able to create the quarantine directory?


I think it should be logged in the mail.log where other MailScanner log messages are logged, but I'm not sure that it is.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.


-------------- 
Dit bericht is gescanned op virussen en andere gevaarlijke inhoud en lijkt schoon te zijn.


From mark at msapiro.net  Wed Jul 27 13:23:32 2016
From: mark at msapiro.net (Mark Sapiro)
Date: Wed, 27 Jul 2016 06:23:32 -0700
Subject: Warning: skipping message as it has been attempted too many times
In-Reply-To: <7704eb3f81144db183ef00b3c4804f34@DC01.meelhuysen.com>
References: <daf03b590f96419aa6066ef77f595744@DC01.meelhuysen.com>
 <201607262121.30302.Antony.Stone@mailscanner.open.source.it>
 <ed0332ddc253430989f412b72fa29dad@DC01.meelhuysen.com>
 <969cc3c7-1ab4-ac3b-16d9-1bb6103f1552@msapiro.net>
 <5676df0f86b04da9826d8b01648081a7@DC01.meelhuysen.com>
 <77561d1d-3878-b78c-be9f-3ad269d49aa2@msapiro.net>
 <7704eb3f81144db183ef00b3c4804f34@DC01.meelhuysen.com>
Message-ID: <fc5ac43d-ef74-7d64-b10e-40a9a6939fde@msapiro.net>

On 07/27/2016 12:49 AM, Mark Meelhuysen wrote:

> Yesterday I restored a backup of the VHD to another VM and checked those settings. The quarantine folder is also owned by root and group apache. The back-up is of a time that everything was working. I did not test it overnight to see if the dir was created..
> Does that make any sense?


Possibly depending on the setting for Quarantine Group. If that's apache
in the backup MailScanner config, then it would have been OK. Maybe
there's a /etc/MailScanner/conf.d file that set

Quarantine Group = apache

that got changed or lost.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan